@dxos/client-services 0.7.5-main.9d26e3a → 0.7.5-main.e9bb01b

package/dist/lib/node-esm/{chunk-HGN7FHFK.mjs → chunk-UWR5XM7L.mjs}

@@ -2,7 +2,7 @@ import { createRequire } from 'node:module';const require = createRequire(import
 
 // packages/sdk/client-services/src/packlets/devtools/feeds.ts
 import { EventSubscriptions } from "@dxos/async";
-import { Stream } from "@dxos/codec-protobuf";
+import { Stream } from "@dxos/codec-protobuf/stream";
 import { FeedIterator } from "@dxos/feed-store";
 import { PublicKey } from "@dxos/keys";
 import { log } from "@dxos/log";
@@ -113,7 +113,7 @@ var subscribeToFeedBlocks = ({ feedStore }, { feedKey, maxBlocks = 10 }) => {
 };
 
 // packages/sdk/client-services/src/packlets/devtools/network.ts
-import { Stream as Stream2 } from "@dxos/codec-protobuf";
+import { Stream as Stream2 } from "@dxos/codec-protobuf/stream";
 import { Context } from "@dxos/context";
 import { PublicKey as PublicKey2 } from "@dxos/keys";
 var __dxlog_file2 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/devtools/network.ts";
@@ -210,7 +210,7 @@ var getNetworkPeers = ({ networkManager }, request) => {
 };
 
 // packages/sdk/client-services/src/packlets/devtools/spaces.ts
-import { Stream as Stream3 } from "@dxos/codec-protobuf";
+import { Stream as Stream3 } from "@dxos/codec-protobuf/stream";
 var subscribeToSpaces = (context, { spaceKeys = [] }) => {
   return new Stream3(({ next }) => {
     let unsubscribe;
@@ -247,11 +247,11 @@ var subscribeToSpaces = (context, { spaceKeys = [] }) => {
 
 // packages/sdk/client-services/src/packlets/devtools/devtools.ts
 import { Event as AsyncEvent } from "@dxos/async";
-import { Stream as Stream6 } from "@dxos/codec-protobuf";
+import { Stream as Stream6 } from "@dxos/codec-protobuf/stream";
 
 // packages/sdk/client-services/src/packlets/devtools/keys.ts
 import { scheduleTask } from "@dxos/async";
-import { Stream as Stream4 } from "@dxos/codec-protobuf";
+import { Stream as Stream4 } from "@dxos/codec-protobuf/stream";
 var subscribeToKeyringKeys = ({ keyring }) => new Stream4(({ next, ctx }) => {
   const update = async () => {
     next({
@@ -263,7 +263,7 @@ var subscribeToKeyringKeys = ({ keyring }) => new Stream4(({ next, ctx }) => {
 });
 
 // packages/sdk/client-services/src/packlets/devtools/metadata.ts
-import { Stream as Stream5 } from "@dxos/codec-protobuf";
+import { Stream as Stream5 } from "@dxos/codec-protobuf/stream";
 var subscribeToMetadata = ({ context }) => new Stream5(({ next, ctx }) => {
   context.metadataStore.update.on(ctx, (data) => next({
     metadata: data
@@ -397,7 +397,7 @@ import { SpaceMember } from "@dxos/protocols/proto/dxos/client/services";
 import { TRACE_PROCESSOR } from "@dxos/tracing";
 
 // packages/sdk/client-services/src/version.ts
-var DXOS_VERSION = "0.7.5-main.9d26e3a";
+var DXOS_VERSION = "0.7.5-main.e9bb01b";
 
 // packages/sdk/client-services/src/packlets/services/platform.ts
 import { Platform } from "@dxos/protocols/proto/dxos/client/services";
@@ -1373,6 +1373,7 @@ var NotarizationPlugin = class extends Resource3 {
     this._processedCredentials = new ComplexSet(PublicKey4.hash);
     this._processCredentialsTriggers = new ComplexMap3(PublicKey4.hash);
     this._activeEdgePollingIntervalHandle = void 0;
+    this._activeEdgePollingEnabled = false;
     this._spaceId = params.spaceId;
     this._activeEdgePollingInterval = params.activeEdgePollingInterval ?? DEFAULT_ACTIVE_EDGE_POLLING_INTERVAL;
     if (params.edgeClient && params.edgeFeatures?.feedReplicator) {
@@ -1380,15 +1381,6 @@ var NotarizationPlugin = class extends Resource3 {
     }
   }
   setActiveEdgePollingEnabled(enabled) {
-    invariant4(this.isOpen, void 0, {
-      F: __dxlog_file7,
-      L: 109,
-      S: this,
-      A: [
-        "this.isOpen",
-        ""
-      ]
-    });
     const client = this._edgeClient;
     invariant4(client, void 0, {
       F: __dxlog_file7,
@@ -1399,30 +1391,30 @@ var NotarizationPlugin = class extends Resource3 {
         ""
       ]
     });
-    if (enabled && !this._activeEdgePollingIntervalHandle) {
-      this._activeEdgePollingIntervalHandle = setInterval(() => {
-        if (this._writer) {
-          this._notarizePendingEdgeCredentials(client, this._writer);
-        }
-      }, this._activeEdgePollingInterval);
-    } else if (!enabled && this._activeEdgePollingIntervalHandle) {
-      clearInterval(this._activeEdgePollingIntervalHandle);
-      this._activeEdgePollingIntervalHandle = void 0;
+    this._activeEdgePollingEnabled = enabled;
+    if (this.isOpen) {
+      if (enabled && !this._activeEdgePollingIntervalHandle) {
+        this._startPeriodicEdgePolling(client);
+      } else if (!enabled && this._activeEdgePollingIntervalHandle) {
+        this._stopPeriodicEdgePolling();
+      }
     }
   }
   get hasWriter() {
     return !!this._writer;
   }
   async _open() {
-    if (this._edgeClient && this._writer) {
-      this._notarizePendingEdgeCredentials(this._edgeClient, this._writer);
+    if (this._edgeClient) {
+      if (this._activeEdgePollingEnabled) {
+        this._startPeriodicEdgePolling(this._edgeClient);
+      }
+      if (this._writer) {
+        this._notarizePendingEdgeCredentials(this._edgeClient, this._writer);
+      }
     }
   }
   async _close() {
-    if (this._activeEdgePollingIntervalHandle) {
-      clearInterval(this._activeEdgePollingIntervalHandle);
-      this._activeEdgePollingIntervalHandle = void 0;
-    }
+    this._stopPeriodicEdgePolling();
     await this._ctx.dispose();
   }
   /**
@@ -1600,10 +1592,23 @@ var NotarizationPlugin = class extends Resource3 {
       ]
     });
     this._writer = writer;
-    if (this._edgeClient) {
+    if (this._edgeClient && this.isOpen) {
       this._notarizePendingEdgeCredentials(this._edgeClient, writer);
     }
   }
+  _startPeriodicEdgePolling(client) {
+    this._activeEdgePollingIntervalHandle = setInterval(() => {
+      if (this._writer) {
+        this._notarizePendingEdgeCredentials(client, this._writer);
+      }
+    }, this._activeEdgePollingInterval);
+  }
+  _stopPeriodicEdgePolling() {
+    if (this._activeEdgePollingIntervalHandle) {
+      clearInterval(this._activeEdgePollingIntervalHandle);
+      this._activeEdgePollingIntervalHandle = void 0;
+    }
+  }
   /**
   * The method is used only for adding agent feeds to spaces.
   * When an agent is created we can admit them into all the existing spaces. In case the operation fails
@@ -1622,7 +1627,7 @@ var NotarizationPlugin = class extends Resource3 {
         if (!credentials.length) {
           log4("edge did not return credentials for notarization", void 0, {
             F: __dxlog_file7,
-            L: 296,
+            L: 311,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1632,7 +1637,7 @@ var NotarizationPlugin = class extends Resource3 {
           count: credentials.length
         }, {
           F: __dxlog_file7,
-          L: 300,
+          L: 315,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -1645,7 +1650,7 @@ var NotarizationPlugin = class extends Resource3 {
           count: decodedCredentials.length
         }, {
           F: __dxlog_file7,
-          L: 309,
+          L: 324,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -1673,7 +1678,7 @@ var NotarizationPlugin = class extends Resource3 {
     for (const credential of credentials) {
       invariant4(credential.id, "Credential must have an id", {
         F: __dxlog_file7,
-        L: 335,
+        L: 350,
         S: this,
         A: [
           "credential.id",
@@ -1697,7 +1702,7 @@ var NotarizationPlugin = class extends Resource3 {
           peer: extension.localPeerId
         }, {
           F: __dxlog_file7,
-          L: 350,
+          L: 365,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -1709,7 +1714,7 @@ var NotarizationPlugin = class extends Resource3 {
           peer: extension.localPeerId
         }, {
           F: __dxlog_file7,
-          L: 355,
+          L: 370,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -1726,7 +1731,7 @@ var NotarizationPlugin = class extends Resource3 {
         peers: Array.from(this._extensions).map((extension) => extension.remotePeerId)
       }, {
         F: __dxlog_file7,
-        L: 367,
+        L: 382,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -1742,7 +1747,7 @@ var handleEdgeError = (error) => {
   if (!(error instanceof EdgeCallFailedError) || error.errorData) {
     log4.catch(error, void 0, {
       F: __dxlog_file7,
-      L: 381,
+      L: 396,
       S: void 0,
       C: (f, a) => f(...a)
     });
@@ -1751,7 +1756,7 @@ var handleEdgeError = (error) => {
       reason: error.reason
     }, {
       F: __dxlog_file7,
-      L: 383,
+      L: 398,
       S: void 0,
       C: (f, a) => f(...a)
     });
@@ -2565,7 +2570,7 @@ var DataSpaceManager = class extends Resource4 {
         guestKeypair: invitation.guestKey ? {
           publicKey: invitation.guestKey
         } : void 0,
-        lifetime: invitation.expiresOn ? invitation.expiresOn.getTime() - Date.now() : void 0,
+        lifetime: invitation.expiresOn ? (invitation.expiresOn.getTime() - Date.now()) / 1e3 : void 0,
         multiUse: invitation.multiUse,
         delegationCredentialId: credentialId,
         persistent: false
@@ -2592,7 +2597,7 @@ DataSpaceManager = _ts_decorate3([
 
 // packages/sdk/client-services/src/packlets/spaces/spaces-service.ts
 import { EventSubscriptions as EventSubscriptions2, UpdateScheduler, scheduleTask as scheduleTask3 } from "@dxos/async";
-import { Stream as Stream7 } from "@dxos/codec-protobuf";
+import { Stream as Stream7 } from "@dxos/codec-protobuf/stream";
 import { createAdmissionCredentials as createAdmissionCredentials2, getCredentialAssertion as getCredentialAssertion3 } from "@dxos/credentials";
 import { raise } from "@dxos/debug";
 import { writeMessages as writeMessages2 } from "@dxos/feed-store";
@@ -3678,7 +3683,7 @@ IdentityManager = _ts_decorate5([
 
 // packages/sdk/client-services/src/packlets/identity/identity-service.ts
 import { Trigger as Trigger3, sleep as sleep2 } from "@dxos/async";
-import { Stream as Stream8 } from "@dxos/codec-protobuf";
+import { Stream as Stream8 } from "@dxos/codec-protobuf/stream";
 import { Resource as Resource5 } from "@dxos/context";
 import { createCredential as createCredential2, signPresentation } from "@dxos/credentials";
 import { invariant as invariant9 } from "@dxos/invariant";
@@ -4622,14 +4627,14 @@ var DeviceInvitationProtocol = class {
 
 // packages/sdk/client-services/src/packlets/invitations/invitations-handler.ts
 import { scheduleTask as scheduleTask7, TimeoutError as TimeoutError2 } from "@dxos/async";
-import { INVITATION_TIMEOUT } from "@dxos/client-protocol";
+import { INVITATION_TIMEOUT, getExpirationTime } from "@dxos/client-protocol";
 import { ContextDisposedError as ContextDisposedError3 } from "@dxos/context";
 import { createKeyPair, sign as sign2 } from "@dxos/crypto";
 import { invariant as invariant15 } from "@dxos/invariant";
 import { PublicKey as PublicKey11 } from "@dxos/keys";
 import { log as log17 } from "@dxos/log";
 import { createTeleportProtocolFactory } from "@dxos/network-manager";
-import { InvalidInvitationExtensionRoleError as InvalidInvitationExtensionRoleError3, trace as trace7 } from "@dxos/protocols";
+import { InvalidInvitationError, InvalidInvitationExtensionRoleError as InvalidInvitationExtensionRoleError3, trace as trace7 } from "@dxos/protocols";
 import { Invitation as Invitation7 } from "@dxos/protocols/proto/dxos/client/services";
 import { AuthenticationResponse as AuthenticationResponse2 } from "@dxos/protocols/proto/dxos/halo/invitations";
 import { InvitationOptions as InvitationOptions4 } from "@dxos/protocols/proto/dxos/halo/invitations";
@@ -4652,6 +4657,12 @@ import { Invitation as Invitation3 } from "@dxos/protocols/proto/dxos/client/ser
 var stateToString = (state) => {
   return Object.entries(Invitation3.State).find(([key, val]) => val === state)?.[0] ?? "unknown";
 };
+var computeExpirationTime = (invitation) => {
+  if (!invitation.lifetime) {
+    return;
+  }
+  return new Date((invitation.created?.getTime() ?? Date.now()) + invitation.lifetime * 1e3);
+};
 var tryAcquireBeforeContextDisposed = async (ctx, mutex) => {
   let guard;
   return cancelWithContext3(ctx, (async () => {
@@ -5667,18 +5678,19 @@ var InvitationsHandler = class {
       });
       return extension;
     };
-    if (invitation.lifetime && invitation.created) {
-      if (invitation.created.getTime() + invitation.lifetime * 1e3 < Date.now()) {
+    const expiresOn = getExpirationTime(invitation);
+    if (expiresOn) {
+      if (expiresOn.getTime() < Date.now()) {
         log17.warn("invitation has already expired", void 0, {
           F: __dxlog_file21,
-          L: 193,
+          L: 194,
           S: this,
           C: (f, a) => f(...a)
         });
         guardedState.set(null, Invitation7.State.EXPIRED);
         void ctx.dispose().catch((err) => log17.catch(err, void 0, {
           F: __dxlog_file21,
-          L: 195,
+          L: 196,
           S: this,
           C: (f, a) => f(...a)
         }));
@@ -5689,7 +5701,7 @@ var InvitationsHandler = class {
         guardedState.set(null, Invitation7.State.EXPIRED);
         metrics.increment("dxos.invitation.expired");
         await ctx.dispose();
-      }, invitation.created.getTime() + invitation.lifetime * 1e3 - Date.now());
+      }, expiresOn.getTime() - Date.now());
     }
     let swarmConnection;
     scheduleTask7(ctx, async () => {
@@ -5705,7 +5717,7 @@ var InvitationsHandler = class {
       type: invitation.type
     }, {
       F: __dxlog_file21,
-      L: 226,
+      L: 227,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -5713,7 +5725,7 @@ var InvitationsHandler = class {
     if (deviceProfile) {
       invariant15(invitation.kind === Invitation7.Kind.DEVICE, "deviceProfile provided for non-device invitation", {
         F: __dxlog_file21,
-        L: 235,
+        L: 236,
         S: this,
         A: [
           "invitation.kind === Invitation.Kind.DEVICE",
@@ -5731,7 +5743,7 @@ var InvitationsHandler = class {
         triedPeers: triedPeersIds.size
       }, {
         F: __dxlog_file21,
-        L: 243,
+        L: 244,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -5758,7 +5770,7 @@ var InvitationsHandler = class {
               currentState: guardedState.current.state
             }, {
               F: __dxlog_file21,
-              L: 271,
+              L: 272,
               S: this,
               C: (f, a) => f(...a)
             });
@@ -5776,7 +5788,7 @@ var InvitationsHandler = class {
                 id: traceId
               }), {
                 F: __dxlog_file21,
-                L: 283,
+                L: 284,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -5788,7 +5800,7 @@ var InvitationsHandler = class {
                 ...protocol.toJSON()
               }, {
                 F: __dxlog_file21,
-                L: 294,
+                L: 295,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -5798,7 +5810,7 @@ var InvitationsHandler = class {
                 ...protocol.toJSON()
               }, {
                 F: __dxlog_file21,
-                L: 298,
+                L: 299,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -5812,7 +5824,7 @@ var InvitationsHandler = class {
                 authMethod: introductionResponse.authMethod
               }, {
                 F: __dxlog_file21,
-                L: 306,
+                L: 307,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -5834,7 +5846,7 @@ var InvitationsHandler = class {
                 ...protocol.toJSON()
               }, {
                 F: __dxlog_file21,
-                L: 336,
+                L: 337,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -5847,7 +5859,7 @@ var InvitationsHandler = class {
                 ...protocol.toJSON()
               }, {
                 F: __dxlog_file21,
-                L: 350,
+                L: 351,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -5860,7 +5872,7 @@ var InvitationsHandler = class {
                 id: traceId
               }), {
                 F: __dxlog_file21,
-                L: 359,
+                L: 360,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -5870,7 +5882,7 @@ var InvitationsHandler = class {
                   ...protocol.toJSON()
                 }, {
                   F: __dxlog_file21,
-                  L: 362,
+                  L: 363,
                   S: this,
                   C: (f, a) => f(...a)
                 });
@@ -5878,7 +5890,7 @@ var InvitationsHandler = class {
               } else {
                 log17.verbose("auth failed", err, {
                   F: __dxlog_file21,
-                  L: 365,
+                  L: 366,
                   S: this,
                   C: (f, a) => f(...a)
                 });
@@ -5890,7 +5902,7 @@ var InvitationsHandler = class {
                 error: err
               }), {
                 F: __dxlog_file21,
-                L: 369,
+                L: 370,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -5906,7 +5918,7 @@ var InvitationsHandler = class {
               ...protocol.toJSON()
             }, {
               F: __dxlog_file21,
-              L: 378,
+              L: 379,
               S: this,
               C: (f, a) => f(...a)
             });
@@ -5914,7 +5926,7 @@ var InvitationsHandler = class {
           } else {
             log17.verbose("auth failed", err, {
               F: __dxlog_file21,
-              L: 381,
+              L: 382,
               S: this,
               C: (f, a) => f(...a)
             });
@@ -5931,7 +5943,7 @@ var InvitationsHandler = class {
           ...protocol.toJSON()
         }, {
           F: __dxlog_file21,
-          L: 393,
+          L: 394,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -5944,14 +5956,14 @@ var InvitationsHandler = class {
     });
     edgeInvitationHandler.handle(ctx, guardedState, protocol, deviceProfile);
     scheduleTask7(ctx, async () => {
-      const error = protocol.checkInvitation(invitation);
+      const error = checkInvitation(protocol, invitation);
       if (error) {
         stream.error(error);
         await ctx.dispose();
       } else {
         invariant15(invitation.swarmKey, void 0, {
           F: __dxlog_file21,
-          L: 405,
+          L: 406,
           S: this,
           A: [
             "invitation.swarmKey",
@@ -5995,7 +6007,7 @@ var InvitationsHandler = class {
     for (let attempt = 1; attempt <= MAX_OTP_ATTEMPTS; attempt++) {
       log17("guest waiting for authentication code...", void 0, {
         F: __dxlog_file21,
-        L: 457,
+        L: 458,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -6003,7 +6015,7 @@ var InvitationsHandler = class {
       const authCode = await authenticated.wait(options);
       log17("sending authentication request", void 0, {
         F: __dxlog_file21,
-        L: 461,
+        L: 462,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -6022,7 +6034,7 @@ var InvitationsHandler = class {
             attempt
           }, {
             F: __dxlog_file21,
-            L: 472,
+            L: 473,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -6040,7 +6052,7 @@ var InvitationsHandler = class {
     }
     log17("sending authentication request", void 0, {
       F: __dxlog_file21,
-      L: 491,
+      L: 492,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -6053,6 +6065,13 @@ var InvitationsHandler = class {
     }
   }
 };
+var checkInvitation = (protocol, invitation) => {
+  const expiresOn = getExpirationTime(invitation);
+  if (expiresOn && expiresOn.getTime() < Date.now()) {
+    return new InvalidInvitationError("Invitation already expired.");
+  }
+  return protocol.checkInvitation(invitation);
+};
 var createAdmissionKeypair = () => {
   const keypair = createKeyPair();
   return {
@@ -6062,7 +6081,7 @@ var createAdmissionKeypair = () => {
 };
 
 // packages/sdk/client-services/src/packlets/invitations/invitations-service.ts
-import { Stream as Stream9 } from "@dxos/codec-protobuf";
+import { Stream as Stream9 } from "@dxos/codec-protobuf/stream";
 import { QueryInvitationsResponse } from "@dxos/protocols/proto/dxos/client/services";
 import { trace as trace8 } from "@dxos/tracing";
 var InvitationsServiceImpl = class {
@@ -6167,7 +6186,7 @@ import { createCancelDelegatedSpaceInvitationCredential, createDelegatedSpaceInv
 import { writeMessages as writeMessages4 } from "@dxos/feed-store";
 import { invariant as invariant16 } from "@dxos/invariant";
 import { log as log18 } from "@dxos/log";
-import { AlreadyJoinedError as AlreadyJoinedError3, AuthorizationError as AuthorizationError2, InvalidInvitationError, SpaceNotFoundError as SpaceNotFoundError2 } from "@dxos/protocols";
+import { AlreadyJoinedError as AlreadyJoinedError3, AuthorizationError as AuthorizationError2, InvalidInvitationError as InvalidInvitationError2, SpaceNotFoundError as SpaceNotFoundError2 } from "@dxos/protocols";
 import { Invitation as Invitation8 } from "@dxos/protocols/proto/dxos/client/services";
 import { SpaceMember as SpaceMember6 } from "@dxos/protocols/proto/dxos/halo/credentials";
 var __dxlog_file22 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/space-invitation-protocol.ts";
@@ -6187,7 +6206,7 @@ var SpaceInvitationProtocol = class {
   }
   checkCanInviteNewMembers() {
     if (this._spaceKey == null) {
-      return new InvalidInvitationError("No spaceKey was provided for a space invitation.");
+      return new InvalidInvitationError2("No spaceKey was provided for a space invitation.");
     }
     const space = this._spaceManager.spaces.get(this._spaceKey);
     if (space == null) {
@@ -6201,7 +6220,7 @@ var SpaceInvitationProtocol = class {
   getInvitationContext() {
     invariant16(this._spaceKey, void 0, {
       F: __dxlog_file22,
-      L: 64,
+      L: 65,
       S: this,
       A: [
         "this._spaceKey",
@@ -6211,7 +6230,7 @@ var SpaceInvitationProtocol = class {
     const space = this._spaceManager.spaces.get(this._spaceKey);
     invariant16(space, void 0, {
       F: __dxlog_file22,
-      L: 66,
+      L: 67,
       S: this,
       A: [
         "space",
@@ -6227,7 +6246,7 @@ var SpaceInvitationProtocol = class {
   async admit(invitation, request, guestProfile) {
     invariant16(this._spaceKey && request.space, void 0, {
       F: __dxlog_file22,
-      L: 79,
+      L: 80,
       S: this,
       A: [
         "this._spaceKey && request.space",
@@ -6239,7 +6258,7 @@ var SpaceInvitationProtocol = class {
       guest: request.space.deviceKey
     }, {
       F: __dxlog_file22,
-      L: 80,
+      L: 81,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -6261,7 +6280,7 @@ var SpaceInvitationProtocol = class {
   async delegate(invitation) {
     invariant16(this._spaceKey, void 0, {
       F: __dxlog_file22,
-      L: 100,
+      L: 101,
       S: this,
       A: [
         "this._spaceKey",
@@ -6271,7 +6290,7 @@ var SpaceInvitationProtocol = class {
     const space = this._spaceManager.spaces.get(this._spaceKey);
     invariant16(space, void 0, {
       F: __dxlog_file22,
-      L: 102,
+      L: 103,
       S: this,
       A: [
         "space",
@@ -6281,7 +6300,7 @@ var SpaceInvitationProtocol = class {
     if (invitation.authMethod === Invitation8.AuthMethod.KNOWN_PUBLIC_KEY) {
       invariant16(invitation.guestKeypair?.publicKey, void 0, {
         F: __dxlog_file22,
-        L: 104,
+        L: 105,
         S: this,
         A: [
           "invitation.guestKeypair?.publicKey",
@@ -6294,7 +6313,7 @@ var SpaceInvitationProtocol = class {
       id: invitation.invitationId
     }, {
       F: __dxlog_file22,
-      L: 107,
+      L: 108,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -6303,13 +6322,13 @@ var SpaceInvitationProtocol = class {
       authMethod: invitation.authMethod,
       swarmKey: invitation.swarmKey,
       role: invitation.role ?? SpaceMember6.Role.ADMIN,
-      expiresOn: invitation.lifetime ? new Date((invitation.created?.getTime() ?? Date.now()) + invitation.lifetime) : void 0,
+      expiresOn: computeExpirationTime(invitation),
       multiUse: invitation.multiUse ?? false,
       guestKey: invitation.authMethod === Invitation8.AuthMethod.KNOWN_PUBLIC_KEY ? invitation.guestKeypair.publicKey : void 0
     });
     invariant16(credential.credential, void 0, {
       F: __dxlog_file22,
-      L: 127,
+      L: 126,
       S: this,
       A: [
         "credential.credential",
@@ -6324,7 +6343,7 @@ var SpaceInvitationProtocol = class {
   async cancelDelegation(invitation) {
     invariant16(this._spaceKey, void 0, {
       F: __dxlog_file22,
-      L: 133,
+      L: 132,
       S: this,
       A: [
         "this._spaceKey",
@@ -6333,7 +6352,7 @@ var SpaceInvitationProtocol = class {
     });
     invariant16(invitation.type === Invitation8.Type.DELEGATED && invitation.delegationCredentialId, void 0, {
       F: __dxlog_file22,
-      L: 134,
+      L: 133,
       S: this,
       A: [
         "invitation.type === Invitation.Type.DELEGATED && invitation.delegationCredentialId",
@@ -6343,7 +6362,7 @@ var SpaceInvitationProtocol = class {
     const space = this._spaceManager.spaces.get(this._spaceKey);
     invariant16(space, void 0, {
       F: __dxlog_file22,
-      L: 136,
+      L: 135,
       S: this,
       A: [
         "space",
@@ -6355,14 +6374,14 @@ var SpaceInvitationProtocol = class {
       id: invitation.invitationId
     }, {
       F: __dxlog_file22,
-      L: 138,
+      L: 137,
       S: this,
       C: (f, a) => f(...a)
     });
     const credential = await createCancelDelegatedSpaceInvitationCredential(this._signingContext.credentialSigner, space.key, invitation.delegationCredentialId);
     invariant16(credential.credential, void 0, {
       F: __dxlog_file22,
-      L: 145,
+      L: 144,
       S: this,
       A: [
         "credential.credential",
@@ -6375,7 +6394,7 @@ var SpaceInvitationProtocol = class {
   }
   checkInvitation(invitation) {
     if (invitation.spaceKey == null) {
-      return new InvalidInvitationError("No spaceKey was provided for a space invitation.");
+      return new InvalidInvitationError2("No spaceKey was provided for a space invitation.");
     }
     if (this._spaceManager.spaces.has(invitation.spaceKey)) {
       return new AlreadyJoinedError3("Already joined space.");
@@ -6401,7 +6420,7 @@ var SpaceInvitationProtocol = class {
   async accept(response) {
     invariant16(response.space, void 0, {
       F: __dxlog_file22,
-      L: 180,
+      L: 179,
       S: this,
       A: [
         "response.space",
@@ -6412,7 +6431,7 @@ var SpaceInvitationProtocol = class {
     const assertion = getCredentialAssertion5(credential);
     invariant16(assertion["@type"] === "dxos.halo.credentials.SpaceMember", "Invalid credential", {
       F: __dxlog_file22,
-      L: 183,
+      L: 182,
       S: this,
       A: [
         "assertion['@type'] === 'dxos.halo.credentials.SpaceMember'",
@@ -6421,7 +6440,7 @@ var SpaceInvitationProtocol = class {
     });
     invariant16(credential.subject.id.equals(this._signingContext.identityKey), void 0, {
       F: __dxlog_file22,
-      L: 184,
+      L: 183,
       S: this,
       A: [
         "credential.subject.id.equals(this._signingContext.identityKey)",
@@ -6657,7 +6676,7 @@ var InvitationsManager = class {
     }
   }
   _createInvitation(protocol, _options) {
-    const { invitationId = PublicKey12.random().toHex(), type = Invitation9.Type.INTERACTIVE, authMethod = Invitation9.AuthMethod.SHARED_SECRET, state = Invitation9.State.INIT, timeout = INVITATION_TIMEOUT2, swarmKey = PublicKey12.random(), persistent = _options?.authMethod !== Invitation9.AuthMethod.KNOWN_PUBLIC_KEY, created = /* @__PURE__ */ new Date(), guestKeypair = void 0, role = SpaceMember7.Role.ADMIN, lifetime = 86400, multiUse = false, ...options } = _options ?? {};
+    const { invitationId = PublicKey12.random().toHex(), type = Invitation9.Type.INTERACTIVE, authMethod = Invitation9.AuthMethod.SHARED_SECRET, state = Invitation9.State.INIT, timeout = INVITATION_TIMEOUT2, swarmKey = PublicKey12.random(), persistent = _options?.authMethod !== Invitation9.AuthMethod.KNOWN_PUBLIC_KEY, created = /* @__PURE__ */ new Date(), guestKeypair = void 0, role = SpaceMember7.Role.ADMIN, lifetime = 86400 * 7, multiUse = false, ...options } = _options ?? {};
     const authCode = options?.authCode ?? (authMethod === Invitation9.AuthMethod.SHARED_SECRET ? generatePasscode(AUTHENTICATION_CODE_LENGTH) : void 0);
     return {
       invitationId,
@@ -7179,7 +7198,7 @@ _ts_decorate9([
 ], EdgeAgentManager.prototype, "createAgent", null);
 
 // packages/sdk/client-services/src/packlets/agents/edge-agent-service.ts
-import { Stream as Stream11 } from "@dxos/codec-protobuf";
+import { Stream as Stream11 } from "@dxos/codec-protobuf/stream";
 import { EdgeAgentStatus as EdgeAgentStatus2 } from "@dxos/protocols";
 import { QueryAgentStatusResponse, QueryEdgeStatusResponse } from "@dxos/protocols/proto/dxos/client/services";
 var EdgeAgentServiceImpl = class {
@@ -7487,7 +7506,8 @@ var ServiceContext = class extends Resource7 {
     this.recoveryManager = new EdgeIdentityRecoveryManager(this.keyring, this._edgeHttpClient, () => this.identityManager.identity, this._acceptIdentity.bind(this));
     this.echoHost = new EchoHost({
       kv: this.level,
-      peerIdProvider: () => this.identityManager.identity?.deviceKey?.toHex()
+      peerIdProvider: () => this.identityManager.identity?.deviceKey?.toHex(),
+      getSpaceKeyByRootDocumentId: (documentId) => this.spaceManager.findSpaceByRootDocumentId(documentId)?.key
     });
     this._meshReplicator = new MeshEchoReplicator();
     this.invitations = new InvitationsHandler(this.networkManager, this._edgeHttpClient, _runtimeParams?.invitationConnectionDefaultParams);
@@ -7506,7 +7526,7 @@ var ServiceContext = class extends Resource7 {
     await this._checkStorageVersion();
     log23("opening...", void 0, {
       F: __dxlog_file27,
-      L: 198,
+      L: 199,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -7514,7 +7534,7 @@ var ServiceContext = class extends Resource7 {
       id: this._instanceId
     }), {
       F: __dxlog_file27,
-      L: 199,
+      L: 200,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -7541,7 +7561,7 @@ var ServiceContext = class extends Resource7 {
       count: loadedInvitations.invitations?.length
     }, {
       F: __dxlog_file27,
-      L: 227,
+      L: 228,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -7549,13 +7569,13 @@ var ServiceContext = class extends Resource7 {
       id: this._instanceId
     }), {
       F: __dxlog_file27,
-      L: 229,
+      L: 230,
       S: this,
       C: (f, a) => f(...a)
     });
     log23("opened", void 0, {
       F: __dxlog_file27,
-      L: 230,
+      L: 231,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -7563,7 +7583,7 @@ var ServiceContext = class extends Resource7 {
   async _close(ctx) {
     log23("closing...", void 0, {
       F: __dxlog_file27,
-      L: 234,
+      L: 235,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -7582,7 +7602,7 @@ var ServiceContext = class extends Resource7 {
     await this._edgeConnection?.close();
     log23("closed", void 0, {
       F: __dxlog_file27,
-      L: 250,
+      L: 251,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -7593,7 +7613,7 @@ var ServiceContext = class extends Resource7 {
     await identity.joinNetwork();
     await this._initialize(new Context9(void 0, {
       F: __dxlog_file27,
-      L: 257
+      L: 258
     }));
     return identity;
   }
@@ -7604,7 +7624,7 @@ var ServiceContext = class extends Resource7 {
     const factory = this._handlerFactories.get(invitation.kind);
     invariant21(factory, `Unknown invitation kind: ${invitation.kind}`, {
       F: __dxlog_file27,
-      L: 266,
+      L: 267,
       S: this,
       A: [
         "factory",
@@ -7630,7 +7650,7 @@ var ServiceContext = class extends Resource7 {
     await this.identityManager.acceptIdentity(identity, identityRecord, params.deviceProfile);
     await this._initialize(new Context9(void 0, {
       F: __dxlog_file27,
-      L: 285
+      L: 286
     }));
     return identity;
   }
@@ -7644,7 +7664,7 @@ var ServiceContext = class extends Resource7 {
   async _initialize(ctx) {
     log23("initializing spaces...", void 0, {
       F: __dxlog_file27,
-      L: 300,
+      L: 301,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -7683,7 +7703,7 @@ var ServiceContext = class extends Resource7 {
     this._handlerFactories.set(Invitation10.Kind.SPACE, (invitation) => {
       invariant21(this.dataSpaceManager, "dataSpaceManager not initialized yet", {
         F: __dxlog_file27,
-        L: 338,
+        L: 339,
         S: this,
         A: [
           "this.dataSpaceManager",
@@ -7707,7 +7727,7 @@ var ServiceContext = class extends Resource7 {
             details: assertion
           }, {
             F: __dxlog_file27,
-            L: 354,
+            L: 355,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -7718,7 +7738,7 @@ var ServiceContext = class extends Resource7 {
             details: assertion
           }, {
             F: __dxlog_file27,
-            L: 358,
+            L: 359,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -7729,7 +7749,7 @@ var ServiceContext = class extends Resource7 {
             details: assertion
           }, {
             F: __dxlog_file27,
-            L: 363,
+            L: 364,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -7740,7 +7760,7 @@ var ServiceContext = class extends Resource7 {
         } catch (err) {
           log23.catch(err, void 0, {
             F: __dxlog_file27,
-            L: 369,
+            L: 370,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -7761,7 +7781,7 @@ var ServiceContext = class extends Resource7 {
           swarms: this.networkManager.topics
         }, {
           F: __dxlog_file27,
-          L: 383,
+          L: 384,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -7775,7 +7795,7 @@ var ServiceContext = class extends Resource7 {
           });
           invariant21(identity.deviceCredentialChain, void 0, {
             F: __dxlog_file27,
-            L: 402,
+            L: 403,
             S: this,
             A: [
               "identity.deviceCredentialChain",
@@ -8085,7 +8105,7 @@ import { WebsocketRpcClient } from "@dxos/websocket-rpc";
 
 // packages/sdk/client-services/src/packlets/devices/devices-service.ts
 import { EventSubscriptions as EventSubscriptions3 } from "@dxos/async";
-import { Stream as Stream12 } from "@dxos/codec-protobuf";
+import { Stream as Stream12 } from "@dxos/codec-protobuf/stream";
 import { invariant as invariant23 } from "@dxos/invariant";
 import { Device as Device2, DeviceKind as DeviceKind2 } from "@dxos/protocols/proto/dxos/client/services";
 var __dxlog_file29 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/devices/devices-service.ts";
@@ -8175,7 +8195,7 @@ var DevicesServiceImpl = class {
 
 // packages/sdk/client-services/src/packlets/identity/contacts-service.ts
 import { EventSubscriptions as EventSubscriptions4, scheduleTask as scheduleTask9, UpdateScheduler as UpdateScheduler2 } from "@dxos/async";
-import { Stream as Stream13 } from "@dxos/codec-protobuf";
+import { Stream as Stream13 } from "@dxos/codec-protobuf/stream";
 import { PublicKey as PublicKey17 } from "@dxos/keys";
 import { ComplexMap as ComplexMap5, ComplexSet as ComplexSet6 } from "@dxos/util";
 var ContactsServiceImpl = class {
@@ -8258,7 +8278,7 @@ var ContactsServiceImpl = class {
 
 // packages/sdk/client-services/src/packlets/logging/logging-service.ts
 import { Event as Event10 } from "@dxos/async";
-import { Stream as Stream14 } from "@dxos/codec-protobuf";
+import { Stream as Stream14 } from "@dxos/codec-protobuf/stream";
 import { PublicKey as PublicKey18 } from "@dxos/keys";
 import { getContextFromEntry, log as log25 } from "@dxos/log";
 import { QueryLogsRequest } from "@dxos/protocols/proto/dxos/client/services";
@@ -8381,7 +8401,7 @@ var shouldLog = (entry2, request) => {
 var LOG_PROCESSING = 0;
 
 // packages/sdk/client-services/src/packlets/network/network-service.ts
-import { Stream as Stream15 } from "@dxos/codec-protobuf";
+import { Stream as Stream15 } from "@dxos/codec-protobuf/stream";
 var NetworkServiceImpl = class {
   constructor(networkManager, signalManager) {
     this.networkManager = networkManager;
@@ -8411,10 +8431,39 @@ var NetworkServiceImpl = class {
   async updateConfig(request) {
     await this.networkManager.setConnectionState(request.swarm);
   }
+  async joinSwarm(request) {
+    return this.signalManager.join(request);
+  }
+  async leaveSwarm(request) {
+    return this.signalManager.leave(request);
+  }
+  subscribeSwarmState(request) {
+    return new Stream15(({ next }) => {
+      const unsubscribe = this.signalManager.swarmState?.on((state) => {
+        if (request.topic.equals(state.swarmKey)) {
+          next(state);
+        }
+      });
+      return unsubscribe;
+    });
+  }
+  async sendMessage(message) {
+    return this.signalManager.sendMessage(message);
+  }
+  subscribeMessages(peer) {
+    return new Stream15(({ next }) => {
+      const unsubscribe = this.signalManager.onMessage.on((message) => {
+        if (message.recipient.peerKey === peer.peerKey) {
+          next(message);
+        }
+      });
+      return unsubscribe;
+    });
+  }
 };
 
 // packages/sdk/client-services/src/packlets/system/system-service.ts
-import { Stream as Stream16 } from "@dxos/codec-protobuf";
+import { Stream as Stream16 } from "@dxos/codec-protobuf/stream";
 import { GetDiagnosticsRequest as GetDiagnosticsRequest2 } from "@dxos/protocols/proto/dxos/client/services";
 import { jsonKeyReplacer as jsonKeyReplacer2 } from "@dxos/util";
 var SystemServiceImpl = class {
@@ -8918,4 +8967,4 @@ export {
   importProfileData,
   ClientServicesHost
 };
-//# sourceMappingURL=chunk-HGN7FHFK.mjs.map
+//# sourceMappingURL=chunk-UWR5XM7L.mjs.map