@dxos/credentials 0.8.3 → 0.8.4-main.1da679c

package/dist/lib/browser/index.mjs

@@ -1,8 +1,8 @@
 import "@dxos/node-std/globals";
 
-// packages/core/halo/credentials/src/did.ts
+// src/did.ts
 import { subtleCrypto } from "@dxos/crypto";
-import { PublicKey, IdentityDid } from "@dxos/keys";
+import { IdentityDid, PublicKey } from "@dxos/keys";
 import { ComplexMap } from "@dxos/util";
 var IDENTITY_DIDS_CACHE = new ComplexMap(PublicKey.hash);
 var createDidFromIdentityKey = async (identityKey) => {
@@ -17,15 +17,15 @@ var createDidFromIdentityKey = async (identityKey) => {
   return identityDid;
 };
 
-// packages/core/halo/credentials/src/invitations.ts
+// src/invitations.ts
 var defaultSecretProvider = async () => Buffer.from("0000");
 var defaultSecretValidator = async (invitation, secret) => true;
 
-// packages/core/halo/credentials/src/seedphrase.ts
+// src/seedphrase.ts
 import { generateMnemonic, mnemonicToSeedSync } from "bip39";
 import { createKeyPair } from "@dxos/crypto";
 import { invariant } from "@dxos/invariant";
-var __dxlog_file = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/seedphrase.ts";
+var __dxlog_file = "/__w/dxos/dxos/packages/core/halo/credentials/src/seedphrase.ts";
 var generateSeedPhrase = () => generateMnemonic();
 var keyPairFromSeedPhrase = (seedPhrase) => {
   invariant(seedPhrase, void 0, {
@@ -41,7 +41,7 @@ var keyPairFromSeedPhrase = (seedPhrase) => {
   return createKeyPair(seed);
 };
 
-// packages/core/halo/credentials/src/passcode.ts
+// src/passcode.ts
 var generatePasscode = (length = 4) => {
   let passcode = "";
   for (let i = 0; i < length; i++) {
@@ -50,7 +50,7 @@ var generatePasscode = (length = 4) => {
   return passcode;
 };
 
-// packages/core/halo/credentials/src/credentials/signing.ts
+// src/credentials/signing.ts
 import stableStringify from "json-stable-stringify";
 import { PublicKey as PublicKey2 } from "@dxos/keys";
 import { Timeframe } from "@dxos/timeframe";
@@ -114,7 +114,7 @@ var truncateKey = (key) => {
   return `${str.substring(0, 4)}...${str.substring(str.length - 4)}`;
 };
 
-// packages/core/halo/credentials/src/presentations/signing.ts
+// src/presentations/signing.ts
 var getPresentationProofPayload = (credentials, proof) => {
   const copy = {
     credentials: credentials.map((credential) => removeEmptyParentCredentialIds(credential)),
@@ -142,7 +142,7 @@ var removeEmptyParentCredentialIds = (credential) => {
   return copy;
 };
 
-// packages/core/halo/credentials/src/credentials/assertions.ts
+// src/credentials/assertions.ts
 var getCredentialAssertion = (credential) => credential.subject.assertion;
 var isValidAuthorizedDeviceCredential = (credential, identityKey, deviceKey) => {
   const assertion = getCredentialAssertion(credential);
@@ -151,12 +151,12 @@ var isValidAuthorizedDeviceCredential = (credential, identityKey, deviceKey) =>
 var checkCredentialType = (credential, type) => credential.subject.assertion["@type"] === type;
 var credentialTypeFilter = (type) => (credential) => checkCredentialType(credential, type);
 
-// packages/core/halo/credentials/src/credentials/credential-factory.ts
+// src/credentials/credential-factory.ts
 import { subtleCrypto as subtleCrypto2 } from "@dxos/crypto";
 import { invariant as invariant2 } from "@dxos/invariant";
 import { PublicKey as PublicKey3 } from "@dxos/keys";
 
-// packages/core/halo/credentials/src/credentials/verifier.ts
+// src/credentials/verifier.ts
 import { verifySignature } from "@dxos/crypto";
 var SIGNATURE_TYPE_ED25519 = "ED25519Signature";
 var verifyCredential = async (credential) => {
@@ -225,8 +225,8 @@ var verifyChain = async (chain, authority, subject) => {
   };
 };
 
-// packages/core/halo/credentials/src/credentials/credential-factory.ts
-var __dxlog_file2 = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/credentials/credential-factory.ts";
+// src/credentials/credential-factory.ts
+var __dxlog_file2 = "/__w/dxos/dxos/packages/core/halo/credentials/src/credentials/credential-factory.ts";
 var createCredential = async ({ signer, issuer, subject, assertion, signingKey, chain, nonce, parentCredentialIds }) => {
   invariant2(assertion["@type"], "Invalid assertion.", {
     F: __dxlog_file2,
@@ -313,15 +313,23 @@ var createCredentialSignerWithChain = (signer, chain, signingKey) => ({
   })
 });
 
-// packages/core/halo/credentials/src/credentials/credential-generator.ts
+// src/credentials/credential-generator.ts
 import { AdmittedFeed, SpaceMember } from "@dxos/protocols/proto/dxos/halo/credentials";
 import { Timeframe as Timeframe2 } from "@dxos/timeframe";
-var CredentialGenerator = class {
-  constructor(_signer, _identityKey, _deviceKey) {
-    this._signer = _signer;
-    this._identityKey = _identityKey;
-    this._deviceKey = _deviceKey;
+function _define_property(obj, key, value) {
+  if (key in obj) {
+    Object.defineProperty(obj, key, {
+      value,
+      enumerable: true,
+      configurable: true,
+      writable: true
+    });
+  } else {
+    obj[key] = value;
   }
+  return obj;
+}
+var CredentialGenerator = class {
   /**
   * Create genesis messages for new Space.
   */
@@ -443,6 +451,14 @@ var CredentialGenerator = class {
       }
     });
   }
+  constructor(_signer, _identityKey, _deviceKey) {
+    _define_property(this, "_signer", void 0);
+    _define_property(this, "_identityKey", void 0);
+    _define_property(this, "_deviceKey", void 0);
+    this._signer = _signer;
+    this._identityKey = _identityKey;
+    this._deviceKey = _deviceKey;
+  }
 };
 var createDeviceAuthorization = async (signer, identityKey, deviceKey) => {
   const credentials = await Promise.all([
@@ -516,7 +532,7 @@ var createCancelDelegatedSpaceInvitationCredential = async (signer, subject, inv
   };
 };
 
-// packages/core/halo/credentials/src/presentations/presentation.ts
+// src/presentations/presentation.ts
 var signPresentation = async ({ presentation, signer, signerKey, chain, nonce }) => {
   const proof = {
     type: SIGNATURE_TYPE_ED25519,
@@ -539,7 +555,7 @@ var signPresentation = async ({ presentation, signer, signerKey, chain, nonce })
   };
 };
 
-// packages/core/halo/credentials/src/presentations/verifier.ts
+// src/presentations/verifier.ts
 import { verifySignature as verifySignature2 } from "@dxos/crypto";
 var verifyPresentation = async (presentation) => {
   const errors = [];
@@ -623,7 +639,7 @@ var verifyPresentationSignature = async (presentation, proof) => {
   };
 };
 
-// packages/core/halo/credentials/src/state-machine/space-state-machine.ts
+// src/state-machine/space-state-machine.ts
 import { runInContextAsync, synchronized } from "@dxos/async";
 import { Context } from "@dxos/context";
 import { PublicKey as PublicKey8 } from "@dxos/keys";
@@ -631,17 +647,25 @@ import { log as log3 } from "@dxos/log";
 import { SpaceMember as SpaceMember3 } from "@dxos/protocols/proto/dxos/halo/credentials";
 import { Callback as Callback4, ComplexMap as ComplexMap6, ComplexSet as ComplexSet3 } from "@dxos/util";
 
-// packages/core/halo/credentials/src/state-machine/feed-state-machine.ts
+// src/state-machine/feed-state-machine.ts
 import { invariant as invariant3 } from "@dxos/invariant";
 import { PublicKey as PublicKey4 } from "@dxos/keys";
 import { Callback, ComplexMap as ComplexMap2 } from "@dxos/util";
-var __dxlog_file3 = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/state-machine/feed-state-machine.ts";
-var FeedStateMachine = class {
-  constructor(_spaceKey) {
-    this._spaceKey = _spaceKey;
-    this._feeds = new ComplexMap2(PublicKey4.hash);
-    this.onFeedAdmitted = new Callback();
+function _define_property2(obj, key, value) {
+  if (key in obj) {
+    Object.defineProperty(obj, key, {
+      value,
+      enumerable: true,
+      configurable: true,
+      writable: true
+    });
+  } else {
+    obj[key] = value;
   }
+  return obj;
+}
+var __dxlog_file3 = "/__w/dxos/dxos/packages/core/halo/credentials/src/state-machine/feed-state-machine.ts";
+var FeedStateMachine = class {
   get feeds() {
     return this._feeds;
   }
@@ -680,19 +704,33 @@ var FeedStateMachine = class {
     this._feeds.set(credential.subject.id, info);
     await this.onFeedAdmitted.callIfSet(info);
   }
+  constructor(_spaceKey) {
+    _define_property2(this, "_spaceKey", void 0);
+    _define_property2(this, "_feeds", void 0);
+    _define_property2(this, "onFeedAdmitted", void 0);
+    this._spaceKey = _spaceKey;
+    this._feeds = new ComplexMap2(PublicKey4.hash);
+    this.onFeedAdmitted = new Callback();
+  }
 };
 
-// packages/core/halo/credentials/src/state-machine/invitation-state-machine.ts
+// src/state-machine/invitation-state-machine.ts
 import { PublicKey as PublicKey5 } from "@dxos/keys";
 import { Callback as Callback2, ComplexMap as ComplexMap3, ComplexSet } from "@dxos/util";
-var InvitationStateMachine = class {
-  constructor() {
-    this._invitations = new ComplexMap3(PublicKey5.hash);
-    this._redeemedInvitationCredentialIds = new ComplexSet(PublicKey5.hash);
-    this._cancelledInvitationCredentialIds = new ComplexSet(PublicKey5.hash);
-    this.onDelegatedInvitation = new Callback2();
-    this.onDelegatedInvitationRemoved = new Callback2();
+function _define_property3(obj, key, value) {
+  if (key in obj) {
+    Object.defineProperty(obj, key, {
+      value,
+      enumerable: true,
+      configurable: true,
+      writable: true
+    });
+  } else {
+    obj[key] = value;
   }
+  return obj;
+}
+var InvitationStateMachine = class {
   get invitations() {
     return this._invitations;
   }
@@ -750,40 +788,42 @@ var InvitationStateMachine = class {
       }
     }
   }
+  constructor() {
+    _define_property3(this, "_invitations", new ComplexMap3(PublicKey5.hash));
+    _define_property3(this, "_redeemedInvitationCredentialIds", new ComplexSet(PublicKey5.hash));
+    _define_property3(this, "_cancelledInvitationCredentialIds", new ComplexSet(PublicKey5.hash));
+    _define_property3(this, "onDelegatedInvitation", new Callback2());
+    _define_property3(this, "onDelegatedInvitationRemoved", new Callback2());
+  }
 };
 
-// packages/core/halo/credentials/src/state-machine/member-state-machine.ts
+// src/state-machine/member-state-machine.ts
 import { invariant as invariant5 } from "@dxos/invariant";
 import { PublicKey as PublicKey7 } from "@dxos/keys";
 import { log as log2 } from "@dxos/log";
 import { SpaceMember as SpaceMember2 } from "@dxos/protocols/proto/dxos/halo/credentials";
 import { ComplexMap as ComplexMap5 } from "@dxos/util";
 
-// packages/core/halo/credentials/src/graph/credential-graph.ts
+// src/graph/credential-graph.ts
 import { invariant as invariant4 } from "@dxos/invariant";
 import { PublicKey as PublicKey6 } from "@dxos/keys";
 import { log } from "@dxos/log";
 import { Callback as Callback3, ComplexMap as ComplexMap4, ComplexSet as ComplexSet2 } from "@dxos/util";
-var __dxlog_file4 = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/graph/credential-graph.ts";
-var CredentialGraph = class {
-  constructor(_stateHandler) {
-    this._stateHandler = _stateHandler;
-    this._vertexIdGenerator = 1;
-    this._root = {
-      id: -1,
-      parents: [],
-      children: []
-    };
-    this._sentinel = {
-      id: -2,
-      parents: [],
-      children: []
-    };
-    this._vertexByCredentialId = new ComplexMap4(PublicKey6.hash);
-    this._subjectToVertex = new ComplexMap4(PublicKey6.hash);
-    this._subjectToState = new ComplexMap4(PublicKey6.hash);
-    this.onSubjectStateChanged = new Callback3();
+function _define_property4(obj, key, value) {
+  if (key in obj) {
+    Object.defineProperty(obj, key, {
+      value,
+      enumerable: true,
+      configurable: true,
+      writable: true
+    });
+  } else {
+    obj[key] = value;
   }
+  return obj;
+}
+var __dxlog_file4 = "/__w/dxos/dxos/packages/core/halo/credentials/src/graph/credential-graph.ts";
+var CredentialGraph = class {
   getSubjectState(subjectId) {
     return this._subjectToState.get(subjectId);
   }
@@ -1306,6 +1346,32 @@ var CredentialGraph = class {
       credentials: new ComplexSet2(PublicKey6.hash)
     };
   }
+  constructor(_stateHandler) {
+    _define_property4(this, "_stateHandler", void 0);
+    _define_property4(this, "_vertexIdGenerator", void 0);
+    _define_property4(this, "_root", void 0);
+    _define_property4(this, "_sentinel", void 0);
+    _define_property4(this, "_vertexByCredentialId", void 0);
+    _define_property4(this, "_subjectToVertex", void 0);
+    _define_property4(this, "_subjectToState", void 0);
+    _define_property4(this, "onSubjectStateChanged", void 0);
+    this._stateHandler = _stateHandler;
+    this._vertexIdGenerator = 1;
+    this._root = {
+      id: -1,
+      parents: [],
+      children: []
+    };
+    this._sentinel = {
+      id: -2,
+      parents: [],
+      children: []
+    };
+    this._vertexByCredentialId = new ComplexMap4(PublicKey6.hash);
+    this._subjectToVertex = new ComplexMap4(PublicKey6.hash);
+    this._subjectToState = new ComplexMap4(PublicKey6.hash);
+    this.onSubjectStateChanged = new Callback3();
+  }
 };
 var toChosenPath = (path) => {
   return Object.fromEntries(Object.entries(path.chosenPath).map(([k, vs]) => [
@@ -1314,15 +1380,22 @@ var toChosenPath = (path) => {
   ]));
 };
 
-// packages/core/halo/credentials/src/state-machine/member-state-machine.ts
-var __dxlog_file5 = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/state-machine/member-state-machine.ts";
-var MemberStateMachine = class {
-  constructor(_spaceKey) {
-    this._spaceKey = _spaceKey;
-    this._memberProfiles = new ComplexMap5(PublicKey7.hash);
-    this._hashgraph = new CredentialGraph(this);
-    this.onMemberRoleChanged = this._hashgraph.onSubjectStateChanged;
+// src/state-machine/member-state-machine.ts
+function _define_property5(obj, key, value) {
+  if (key in obj) {
+    Object.defineProperty(obj, key, {
+      value,
+      enumerable: true,
+      configurable: true,
+      writable: true
+    });
+  } else {
+    obj[key] = value;
   }
+  return obj;
+}
+var __dxlog_file5 = "/__w/dxos/dxos/packages/core/halo/credentials/src/state-machine/member-state-machine.ts";
+var MemberStateMachine = class {
   get creator() {
     return this._ownerKey && this._hashgraph.getSubjectState(this._ownerKey);
   }
@@ -1458,32 +1531,41 @@ var MemberStateMachine = class {
     }
     return realRole;
   }
+  constructor(_spaceKey) {
+    _define_property5(this, "_spaceKey", void 0);
+    _define_property5(this, "_ownerKey", void 0);
+    _define_property5(this, "_memberProfiles", void 0);
+    _define_property5(this, "_hashgraph", void 0);
+    _define_property5(this, "onMemberRoleChanged", void 0);
+    this._spaceKey = _spaceKey;
+    this._memberProfiles = new ComplexMap5(PublicKey7.hash);
+    this._hashgraph = new CredentialGraph(this);
+    this.onMemberRoleChanged = this._hashgraph.onSubjectStateChanged;
+  }
 };
 
-// packages/core/halo/credentials/src/state-machine/space-state-machine.ts
+// src/state-machine/space-state-machine.ts
+function _define_property6(obj, key, value) {
+  if (key in obj) {
+    Object.defineProperty(obj, key, {
+      value,
+      enumerable: true,
+      configurable: true,
+      writable: true
+    });
+  } else {
+    obj[key] = value;
+  }
+  return obj;
+}
 function _ts_decorate(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file6 = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/state-machine/space-state-machine.ts";
+var __dxlog_file6 = "/__w/dxos/dxos/packages/core/halo/credentials/src/state-machine/space-state-machine.ts";
 var SpaceStateMachine = class {
-  constructor(_spaceKey) {
-    this._spaceKey = _spaceKey;
-    this._members = new MemberStateMachine(this._spaceKey);
-    this._feeds = new FeedStateMachine(this._spaceKey);
-    this._invitations = new InvitationStateMachine();
-    this._credentials = [];
-    this._credentialsById = new ComplexMap6(PublicKey8.hash);
-    this._processedCredentials = new ComplexSet3(PublicKey8.hash);
-    this._credentialProcessors = [];
-    this.onCredentialProcessed = new Callback4();
-    this.onMemberRoleChanged = this._members.onMemberRoleChanged;
-    this.onFeedAdmitted = this._feeds.onFeedAdmitted;
-    this.onDelegatedInvitation = this._invitations.onDelegatedInvitation;
-    this.onDelegatedInvitationRemoved = this._invitations.onDelegatedInvitationRemoved;
-  }
   get creator() {
     return this._members.creator;
   }
@@ -1546,7 +1628,7 @@ var SpaceStateMachine = class {
       if (result.kind !== "pass") {
         log3.warn(`Invalid credential: ${result.errors.join(", ")}`, void 0, {
           F: __dxlog_file6,
-          L: 156,
+          L: 162,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -1559,7 +1641,7 @@ var SpaceStateMachine = class {
         if (this._genesisCredential) {
           log3.warn("Space already has a genesis credential.", void 0, {
             F: __dxlog_file6,
-            L: 165,
+            L: 171,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1568,7 +1650,7 @@ var SpaceStateMachine = class {
         if (!credential.issuer.equals(this._spaceKey)) {
           log3.warn("Space genesis credential must be issued by space.", void 0, {
             F: __dxlog_file6,
-            L: 169,
+            L: 175,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1577,7 +1659,7 @@ var SpaceStateMachine = class {
         if (!credential.subject.id.equals(this._spaceKey)) {
           log3.warn("Space genesis credential must be issued to space.", void 0, {
             F: __dxlog_file6,
-            L: 173,
+            L: 179,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1593,7 +1675,7 @@ var SpaceStateMachine = class {
         if (!this._genesisCredential) {
           log3.warn("Space must have a genesis credential before adding members.", void 0, {
             F: __dxlog_file6,
-            L: 186,
+            L: 192,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1602,7 +1684,7 @@ var SpaceStateMachine = class {
         if (!this._canInviteNewMembers(credential.issuer)) {
           log3.warn(`Space member is not authorized to invite new members: ${credential.issuer}`, void 0, {
             F: __dxlog_file6,
-            L: 190,
+            L: 196,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1616,7 +1698,7 @@ var SpaceStateMachine = class {
         if (!this._genesisCredential) {
           log3.warn("Space must have a genesis credential before adding members.", void 0, {
             F: __dxlog_file6,
-            L: 201,
+            L: 207,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1629,7 +1711,7 @@ var SpaceStateMachine = class {
         if (!this._genesisCredential) {
           log3.warn("Space must have a genesis credential before admitting feeds.", void 0, {
             F: __dxlog_file6,
-            L: 211,
+            L: 217,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1643,7 +1725,7 @@ var SpaceStateMachine = class {
         if (!this._canInviteNewMembers(credential.issuer)) {
           log3.warn(`Invalid invitation, space member is not authorized to invite new members: ${credential.issuer}`, void 0, {
             F: __dxlog_file6,
-            L: 222,
+            L: 228,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1679,21 +1761,40 @@ var SpaceStateMachine = class {
   _canInviteNewMembers(key) {
     return key.equals(this._spaceKey) || this._members.getRole(key) === SpaceMember3.Role.ADMIN || this._members.getRole(key) === SpaceMember3.Role.OWNER;
   }
+  constructor(_spaceKey) {
+    _define_property6(this, "_spaceKey", void 0);
+    _define_property6(this, "_members", void 0);
+    _define_property6(this, "_feeds", void 0);
+    _define_property6(this, "_invitations", void 0);
+    _define_property6(this, "_credentials", void 0);
+    _define_property6(this, "_credentialsById", void 0);
+    _define_property6(this, "_processedCredentials", void 0);
+    _define_property6(this, "_genesisCredential", void 0);
+    _define_property6(this, "_credentialProcessors", void 0);
+    _define_property6(this, "onCredentialProcessed", void 0);
+    _define_property6(this, "onMemberRoleChanged", void 0);
+    _define_property6(this, "onFeedAdmitted", void 0);
+    _define_property6(this, "onDelegatedInvitation", void 0);
+    _define_property6(this, "onDelegatedInvitationRemoved", void 0);
+    this._spaceKey = _spaceKey;
+    this._invitations = new InvitationStateMachine();
+    this._credentials = [];
+    this._credentialsById = new ComplexMap6(PublicKey8.hash);
+    this._processedCredentials = new ComplexSet3(PublicKey8.hash);
+    this._credentialProcessors = [];
+    this.onCredentialProcessed = new Callback4();
+    this.onDelegatedInvitation = this._invitations.onDelegatedInvitation;
+    this.onDelegatedInvitationRemoved = this._invitations.onDelegatedInvitationRemoved;
+    this._members = new MemberStateMachine(this._spaceKey);
+    this._feeds = new FeedStateMachine(this._spaceKey);
+    this.onMemberRoleChanged = this._members.onMemberRoleChanged;
+    this.onFeedAdmitted = this._feeds.onFeedAdmitted;
+  }
 };
 _ts_decorate([
   synchronized
 ], SpaceStateMachine.prototype, "process", null);
 var CredentialConsumer = class {
-  constructor(processor, _onOpen, _onClose) {
-    this.processor = processor;
-    this._onOpen = _onOpen;
-    this._onClose = _onClose;
-    this._ctx = new Context(void 0, {
-      F: __dxlog_file6,
-      L: 267
-    });
-    this._isReadyForLiveCredentials = false;
-  }
   /**
   * @internal
   */
@@ -1712,21 +1813,44 @@ var CredentialConsumer = class {
     await this._ctx.dispose();
     await this._onClose();
   }
+  constructor(processor, _onOpen, _onClose) {
+    _define_property6(this, "processor", void 0);
+    _define_property6(this, "_onOpen", void 0);
+    _define_property6(this, "_onClose", void 0);
+    _define_property6(this, "_ctx", void 0);
+    _define_property6(this, "_isReadyForLiveCredentials", void 0);
+    this.processor = processor;
+    this._onOpen = _onOpen;
+    this._onClose = _onClose;
+    this._ctx = new Context(void 0, {
+      F: __dxlog_file6,
+      L: 273
+    });
+    this._isReadyForLiveCredentials = false;
+  }
 };
 
-// packages/core/halo/credentials/src/processor/device-state-machine.ts
+// src/processor/device-state-machine.ts
 import { Trigger } from "@dxos/async";
 import { invariant as invariant6 } from "@dxos/invariant";
 import { PublicKey as PublicKey9 } from "@dxos/keys";
 import { log as log4 } from "@dxos/log";
 import { ComplexMap as ComplexMap7 } from "@dxos/util";
-var __dxlog_file7 = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/processor/device-state-machine.ts";
-var DeviceStateMachine = class {
-  constructor(_params) {
-    this._params = _params;
-    this.authorizedDeviceKeys = new ComplexMap7(PublicKey9.hash);
-    this.deviceChainReady = new Trigger();
+function _define_property7(obj, key, value) {
+  if (key in obj) {
+    Object.defineProperty(obj, key, {
+      value,
+      enumerable: true,
+      configurable: true,
+      writable: true
+    });
+  } else {
+    obj[key] = value;
   }
+  return obj;
+}
+var __dxlog_file7 = "/__w/dxos/dxos/packages/core/halo/credentials/src/processor/device-state-machine.ts";
+var DeviceStateMachine = class {
   async processCredential(credential) {
     log4("processing credential...", {
       identityKey: this._params.identityKey,
@@ -1734,7 +1858,7 @@ var DeviceStateMachine = class {
       credential
     }, {
       F: __dxlog_file7,
-      L: 35,
+      L: 36,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -1754,7 +1878,7 @@ var DeviceStateMachine = class {
           size: this.authorizedDeviceKeys.size
         }, {
           F: __dxlog_file7,
-          L: 55,
+          L: 56,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -1764,7 +1888,7 @@ var DeviceStateMachine = class {
       case "dxos.halo.credentials.DeviceProfile": {
         invariant6(this.authorizedDeviceKeys.has(credential.subject.id), "Device not found.", {
           F: __dxlog_file7,
-          L: 65,
+          L: 66,
           S: this,
           A: [
             "this.authorizedDeviceKeys.has(credential.subject.id)",
@@ -1777,7 +1901,7 @@ var DeviceStateMachine = class {
             profile: assertion.profile
           }, {
             F: __dxlog_file7,
-            L: 68,
+            L: 69,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1788,15 +1912,34 @@ var DeviceStateMachine = class {
       }
     }
   }
+  constructor(_params) {
+    _define_property7(this, "_params", void 0);
+    _define_property7(this, "authorizedDeviceKeys", void 0);
+    _define_property7(this, "deviceChainReady", void 0);
+    _define_property7(this, "deviceCredentialChain", void 0);
+    this._params = _params;
+    this.authorizedDeviceKeys = new ComplexMap7(PublicKey9.hash);
+    this.deviceChainReady = new Trigger();
+  }
 };
 
-// packages/core/halo/credentials/src/processor/profile-state-machine.ts
+// src/processor/profile-state-machine.ts
 import { log as log5 } from "@dxos/log";
-var __dxlog_file8 = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/processor/profile-state-machine.ts";
-var ProfileStateMachine = class {
-  constructor(_params) {
-    this._params = _params;
+function _define_property8(obj, key, value) {
+  if (key in obj) {
+    Object.defineProperty(obj, key, {
+      value,
+      enumerable: true,
+      configurable: true,
+      writable: true
+    });
+  } else {
+    obj[key] = value;
   }
+  return obj;
+}
+var __dxlog_file8 = "/__w/dxos/dxos/packages/core/halo/credentials/src/processor/profile-state-machine.ts";
+var ProfileStateMachine = class {
   async processCredential(credential) {
     const assertion = getCredentialAssertion(credential);
     switch (assertion["@type"]) {
@@ -1807,7 +1950,7 @@ var ProfileStateMachine = class {
             credential
           }, {
             F: __dxlog_file8,
-            L: 34,
+            L: 35,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1819,7 +1962,7 @@ var ProfileStateMachine = class {
           profile: this.profile
         }, {
           F: __dxlog_file8,
-          L: 40,
+          L: 41,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -1828,6 +1971,11 @@ var ProfileStateMachine = class {
       }
     }
   }
+  constructor(_params) {
+    _define_property8(this, "_params", void 0);
+    _define_property8(this, "profile", void 0);
+    this._params = _params;
+  }
 };
 export {
   CredentialGenerator,