@dxos/credentials 0.7.5-labs.35b4b42 → 0.7.5-labs.8a82073

package/dist/lib/browser/index.mjs

@@ -1535,15 +1535,18 @@ var SpaceStateMachine = class {
   * @param fromFeed Key of the feed where this credential is recorded.
   */
   async process(credential, { sourceFeed, skipVerification }) {
-    if (credential.id && this._processedCredentials.has(credential.id)) {
-      return true;
+    if (credential.id) {
+      if (this._processedCredentials.has(credential.id)) {
+        return true;
+      }
+      this._processedCredentials.add(credential.id);
     }
     if (!skipVerification) {
       const result = await verifyCredential(credential);
       if (result.kind !== "pass") {
         log3.warn(`Invalid credential: ${result.errors.join(", ")}`, void 0, {
           F: __dxlog_file6,
-          L: 153,
+          L: 156,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -1556,7 +1559,7 @@ var SpaceStateMachine = class {
         if (this._genesisCredential) {
           log3.warn("Space already has a genesis credential.", void 0, {
             F: __dxlog_file6,
-            L: 162,
+            L: 165,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1565,7 +1568,7 @@ var SpaceStateMachine = class {
         if (!credential.issuer.equals(this._spaceKey)) {
           log3.warn("Space genesis credential must be issued by space.", void 0, {
             F: __dxlog_file6,
-            L: 166,
+            L: 169,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1574,7 +1577,7 @@ var SpaceStateMachine = class {
         if (!credential.subject.id.equals(this._spaceKey)) {
           log3.warn("Space genesis credential must be issued to space.", void 0, {
             F: __dxlog_file6,
-            L: 170,
+            L: 173,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1590,7 +1593,7 @@ var SpaceStateMachine = class {
         if (!this._genesisCredential) {
           log3.warn("Space must have a genesis credential before adding members.", void 0, {
             F: __dxlog_file6,
-            L: 183,
+            L: 186,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1599,7 +1602,7 @@ var SpaceStateMachine = class {
         if (!this._canInviteNewMembers(credential.issuer)) {
           log3.warn(`Space member is not authorized to invite new members: ${credential.issuer}`, void 0, {
             F: __dxlog_file6,
-            L: 187,
+            L: 190,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1613,7 +1616,7 @@ var SpaceStateMachine = class {
         if (!this._genesisCredential) {
           log3.warn("Space must have a genesis credential before adding members.", void 0, {
             F: __dxlog_file6,
-            L: 198,
+            L: 201,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1626,19 +1629,7 @@ var SpaceStateMachine = class {
         if (!this._genesisCredential) {
           log3.warn("Space must have a genesis credential before admitting feeds.", void 0, {
             F: __dxlog_file6,
-            L: 208,
-            S: this,
-            C: (f, a) => f(...a)
-          });
-          return false;
-        }
-        if (!this._canAdmitFeeds(credential.issuer)) {
-          log3.warn(`Space member is not authorized to admit feeds: ${credential.issuer}`, {
-            sourceFeed: sourceFeed.toHex(),
-            feed: credential.subject.id.toHex()
-          }, {
-            F: __dxlog_file6,
-            L: 212,
+            L: 211,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1652,7 +1643,7 @@ var SpaceStateMachine = class {
         if (!this._canInviteNewMembers(credential.issuer)) {
           log3.warn(`Invalid invitation, space member is not authorized to invite new members: ${credential.issuer}`, void 0, {
             F: __dxlog_file6,
-            L: 226,
+            L: 222,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1677,9 +1668,6 @@ var SpaceStateMachine = class {
       }
     }
     await this.onCredentialProcessed.callIfSet(credential);
-    if (credential.id) {
-      this._processedCredentials.add(credential.id);
-    }
     return true;
   }
   getMemberRole(memberKey) {
@@ -1691,10 +1679,6 @@ var SpaceStateMachine = class {
   _canInviteNewMembers(key) {
     return key.equals(this._spaceKey) || this._members.getRole(key) === SpaceMember3.Role.ADMIN || this._members.getRole(key) === SpaceMember3.Role.OWNER;
   }
-  _canAdmitFeeds(key) {
-    const role = this._members.getRole(key);
-    return role === SpaceMember3.Role.EDITOR || role === SpaceMember3.Role.ADMIN || role === SpaceMember3.Role.OWNER;
-  }
 };
 _ts_decorate([
   synchronized
@@ -1706,7 +1690,7 @@ var CredentialConsumer = class {
     this._onClose = _onClose;
     this._ctx = new Context(void 0, {
       F: __dxlog_file6,
-      L: 280
+      L: 267
     });
     this._isReadyForLiveCredentials = false;
   }
@@ -1763,15 +1747,6 @@ var DeviceStateMachine = class {
     const assertion = getCredentialAssertion(credential);
     switch (assertion["@type"]) {
       case "dxos.halo.credentials.AuthorizedDevice": {
-        invariant6(!this.authorizedDeviceKeys.has(assertion.deviceKey), "Device already added.", {
-          F: __dxlog_file7,
-          L: 51,
-          S: this,
-          A: [
-            "!this.authorizedDeviceKeys.has(assertion.deviceKey)",
-            "'Device already added.'"
-          ]
-        });
         this.authorizedDeviceKeys.set(assertion.deviceKey, {});
         log4("added device", {
           localDeviceKey: this._params.deviceKey,
@@ -1779,7 +1754,7 @@ var DeviceStateMachine = class {
           size: this.authorizedDeviceKeys.size
         }, {
           F: __dxlog_file7,
-          L: 54,
+          L: 55,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -1789,7 +1764,7 @@ var DeviceStateMachine = class {
       case "dxos.halo.credentials.DeviceProfile": {
         invariant6(this.authorizedDeviceKeys.has(credential.subject.id), "Device not found.", {
           F: __dxlog_file7,
-          L: 64,
+          L: 65,
           S: this,
           A: [
             "this.authorizedDeviceKeys.has(credential.subject.id)",
@@ -1802,7 +1777,7 @@ var DeviceStateMachine = class {
             profile: assertion.profile
           }, {
             F: __dxlog_file7,
-            L: 67,
+            L: 68,
             S: this,
             C: (f, a) => f(...a)
           });