@dxos/credentials 0.8.4-main.f9ba587 → 0.8.4-main.fd6878d

package/dist/lib/browser/index.mjs

@@ -2,7 +2,7 @@ import "@dxos/node-std/globals";
 
 // src/did.ts
 import { subtleCrypto } from "@dxos/crypto";
-import { PublicKey, IdentityDid } from "@dxos/keys";
+import { IdentityDid, PublicKey } from "@dxos/keys";
 import { ComplexMap } from "@dxos/util";
 var IDENTITY_DIDS_CACHE = new ComplexMap(PublicKey.hash);
 var createDidFromIdentityKey = async (identityKey) => {
@@ -317,6 +317,9 @@ var createCredentialSignerWithChain = (signer, chain, signingKey) => ({
 import { AdmittedFeed, SpaceMember } from "@dxos/protocols/proto/dxos/halo/credentials";
 import { Timeframe as Timeframe2 } from "@dxos/timeframe";
 var CredentialGenerator = class {
+  _signer;
+  _identityKey;
+  _deviceKey;
   constructor(_signer, _identityKey, _deviceKey) {
     this._signer = _signer;
     this._identityKey = _identityKey;
@@ -637,6 +640,9 @@ import { PublicKey as PublicKey4 } from "@dxos/keys";
 import { Callback, ComplexMap as ComplexMap2 } from "@dxos/util";
 var __dxlog_file3 = "/__w/dxos/dxos/packages/core/halo/credentials/src/state-machine/feed-state-machine.ts";
 var FeedStateMachine = class {
+  _spaceKey;
+  _feeds;
+  onFeedAdmitted;
   constructor(_spaceKey) {
     this._spaceKey = _spaceKey;
     this._feeds = new ComplexMap2(PublicKey4.hash);
@@ -686,13 +692,11 @@ var FeedStateMachine = class {
 import { PublicKey as PublicKey5 } from "@dxos/keys";
 import { Callback as Callback2, ComplexMap as ComplexMap3, ComplexSet } from "@dxos/util";
 var InvitationStateMachine = class {
-  constructor() {
-    this._invitations = new ComplexMap3(PublicKey5.hash);
-    this._redeemedInvitationCredentialIds = new ComplexSet(PublicKey5.hash);
-    this._cancelledInvitationCredentialIds = new ComplexSet(PublicKey5.hash);
-    this.onDelegatedInvitation = new Callback2();
-    this.onDelegatedInvitationRemoved = new Callback2();
-  }
+  _invitations = new ComplexMap3(PublicKey5.hash);
+  _redeemedInvitationCredentialIds = new ComplexSet(PublicKey5.hash);
+  _cancelledInvitationCredentialIds = new ComplexSet(PublicKey5.hash);
+  onDelegatedInvitation = new Callback2();
+  onDelegatedInvitationRemoved = new Callback2();
   get invitations() {
     return this._invitations;
   }
@@ -766,6 +770,30 @@ import { log } from "@dxos/log";
 import { Callback as Callback3, ComplexMap as ComplexMap4, ComplexSet as ComplexSet2 } from "@dxos/util";
 var __dxlog_file4 = "/__w/dxos/dxos/packages/core/halo/credentials/src/graph/credential-graph.ts";
 var CredentialGraph = class {
+  _stateHandler;
+  /**
+  * Local ids are used during traversals.
+  */
+  _vertexIdGenerator;
+  /**
+  * All credentials without parent references are connected to the root.
+  */
+  _root;
+  /**
+  * A credential which is not a parent of any other credential has the sentinel as a child.
+  * Sentinel is a virtual merge-point of all credentials.
+  */
+  _sentinel;
+  /**
+  * Vertex references are used for fast credential inserts into the graph.
+  */
+  _vertexByCredentialId;
+  /**
+  * The current state of the graph.
+  */
+  _subjectToVertex;
+  _subjectToState;
+  onSubjectStateChanged;
   constructor(_stateHandler) {
     this._stateHandler = _stateHandler;
     this._vertexIdGenerator = 1;
@@ -1317,6 +1345,11 @@ var toChosenPath = (path) => {
 // src/state-machine/member-state-machine.ts
 var __dxlog_file5 = "/__w/dxos/dxos/packages/core/halo/credentials/src/state-machine/member-state-machine.ts";
 var MemberStateMachine = class {
+  _spaceKey;
+  _ownerKey;
+  _memberProfiles;
+  _hashgraph;
+  onMemberRoleChanged;
   constructor(_spaceKey) {
     this._spaceKey = _spaceKey;
     this._memberProfiles = new ComplexMap5(PublicKey7.hash);
@@ -1469,20 +1502,34 @@ function _ts_decorate(decorators, target, key, desc) {
 }
 var __dxlog_file6 = "/__w/dxos/dxos/packages/core/halo/credentials/src/state-machine/space-state-machine.ts";
 var SpaceStateMachine = class {
+  _spaceKey;
+  _members;
+  _feeds;
+  _invitations;
+  _credentials;
+  _credentialsById;
+  _processedCredentials;
+  _genesisCredential;
+  _credentialProcessors;
+  onCredentialProcessed;
+  onMemberRoleChanged;
+  onFeedAdmitted;
+  onDelegatedInvitation;
+  onDelegatedInvitationRemoved;
   constructor(_spaceKey) {
     this._spaceKey = _spaceKey;
-    this._members = new MemberStateMachine(this._spaceKey);
-    this._feeds = new FeedStateMachine(this._spaceKey);
     this._invitations = new InvitationStateMachine();
     this._credentials = [];
     this._credentialsById = new ComplexMap6(PublicKey8.hash);
     this._processedCredentials = new ComplexSet3(PublicKey8.hash);
     this._credentialProcessors = [];
     this.onCredentialProcessed = new Callback4();
-    this.onMemberRoleChanged = this._members.onMemberRoleChanged;
-    this.onFeedAdmitted = this._feeds.onFeedAdmitted;
     this.onDelegatedInvitation = this._invitations.onDelegatedInvitation;
     this.onDelegatedInvitationRemoved = this._invitations.onDelegatedInvitationRemoved;
+    this._members = new MemberStateMachine(this._spaceKey);
+    this._feeds = new FeedStateMachine(this._spaceKey);
+    this.onMemberRoleChanged = this._members.onMemberRoleChanged;
+    this.onFeedAdmitted = this._feeds.onFeedAdmitted;
   }
   get creator() {
     return this._members.creator;
@@ -1546,7 +1593,7 @@ var SpaceStateMachine = class {
       if (result.kind !== "pass") {
         log3.warn(`Invalid credential: ${result.errors.join(", ")}`, void 0, {
           F: __dxlog_file6,
-          L: 156,
+          L: 162,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -1559,7 +1606,7 @@ var SpaceStateMachine = class {
         if (this._genesisCredential) {
           log3.warn("Space already has a genesis credential.", void 0, {
             F: __dxlog_file6,
-            L: 165,
+            L: 171,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1568,7 +1615,7 @@ var SpaceStateMachine = class {
         if (!credential.issuer.equals(this._spaceKey)) {
           log3.warn("Space genesis credential must be issued by space.", void 0, {
             F: __dxlog_file6,
-            L: 169,
+            L: 175,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1577,7 +1624,7 @@ var SpaceStateMachine = class {
         if (!credential.subject.id.equals(this._spaceKey)) {
           log3.warn("Space genesis credential must be issued to space.", void 0, {
             F: __dxlog_file6,
-            L: 173,
+            L: 179,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1593,7 +1640,7 @@ var SpaceStateMachine = class {
         if (!this._genesisCredential) {
           log3.warn("Space must have a genesis credential before adding members.", void 0, {
             F: __dxlog_file6,
-            L: 186,
+            L: 192,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1602,7 +1649,7 @@ var SpaceStateMachine = class {
         if (!this._canInviteNewMembers(credential.issuer)) {
           log3.warn(`Space member is not authorized to invite new members: ${credential.issuer}`, void 0, {
             F: __dxlog_file6,
-            L: 190,
+            L: 196,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1616,7 +1663,7 @@ var SpaceStateMachine = class {
         if (!this._genesisCredential) {
           log3.warn("Space must have a genesis credential before adding members.", void 0, {
             F: __dxlog_file6,
-            L: 201,
+            L: 207,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1629,7 +1676,7 @@ var SpaceStateMachine = class {
         if (!this._genesisCredential) {
           log3.warn("Space must have a genesis credential before admitting feeds.", void 0, {
             F: __dxlog_file6,
-            L: 211,
+            L: 217,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1643,7 +1690,7 @@ var SpaceStateMachine = class {
         if (!this._canInviteNewMembers(credential.issuer)) {
           log3.warn(`Invalid invitation, space member is not authorized to invite new members: ${credential.issuer}`, void 0, {
             F: __dxlog_file6,
-            L: 222,
+            L: 228,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1684,13 +1731,24 @@ _ts_decorate([
   synchronized
 ], SpaceStateMachine.prototype, "process", null);
 var CredentialConsumer = class {
+  processor;
+  _onOpen;
+  _onClose;
+  _ctx;
+  /**
+  * @internal
+  * Processor is ready to process live credentials.
+  * NOTE: Setting this flag before all existing credentials are processed will cause them to be processed out of order.
+  * Set externally.
+  */
+  _isReadyForLiveCredentials;
   constructor(processor, _onOpen, _onClose) {
     this.processor = processor;
     this._onOpen = _onOpen;
     this._onClose = _onClose;
     this._ctx = new Context(void 0, {
       F: __dxlog_file6,
-      L: 267
+      L: 273
     });
     this._isReadyForLiveCredentials = false;
   }
@@ -1722,6 +1780,11 @@ import { log as log4 } from "@dxos/log";
 import { ComplexMap as ComplexMap7 } from "@dxos/util";
 var __dxlog_file7 = "/__w/dxos/dxos/packages/core/halo/credentials/src/processor/device-state-machine.ts";
 var DeviceStateMachine = class {
+  _params;
+  // TODO(burdon): Return values via getter.
+  authorizedDeviceKeys;
+  deviceChainReady;
+  deviceCredentialChain;
   constructor(_params) {
     this._params = _params;
     this.authorizedDeviceKeys = new ComplexMap7(PublicKey9.hash);
@@ -1734,7 +1797,7 @@ var DeviceStateMachine = class {
       credential
     }, {
       F: __dxlog_file7,
-      L: 35,
+      L: 36,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -1754,7 +1817,7 @@ var DeviceStateMachine = class {
           size: this.authorizedDeviceKeys.size
         }, {
           F: __dxlog_file7,
-          L: 55,
+          L: 56,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -1764,7 +1827,7 @@ var DeviceStateMachine = class {
       case "dxos.halo.credentials.DeviceProfile": {
         invariant6(this.authorizedDeviceKeys.has(credential.subject.id), "Device not found.", {
           F: __dxlog_file7,
-          L: 65,
+          L: 66,
           S: this,
           A: [
             "this.authorizedDeviceKeys.has(credential.subject.id)",
@@ -1777,7 +1840,7 @@ var DeviceStateMachine = class {
             profile: assertion.profile
           }, {
             F: __dxlog_file7,
-            L: 68,
+            L: 69,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1794,6 +1857,9 @@ var DeviceStateMachine = class {
 import { log as log5 } from "@dxos/log";
 var __dxlog_file8 = "/__w/dxos/dxos/packages/core/halo/credentials/src/processor/profile-state-machine.ts";
 var ProfileStateMachine = class {
+  _params;
+  // TODO(burdon): Return values via getter.
+  profile;
   constructor(_params) {
     this._params = _params;
   }
@@ -1807,7 +1873,7 @@ var ProfileStateMachine = class {
             credential
           }, {
             F: __dxlog_file8,
-            L: 34,
+            L: 35,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1819,7 +1885,7 @@ var ProfileStateMachine = class {
           profile: this.profile
         }, {
           F: __dxlog_file8,
-          L: 40,
+          L: 41,
           S: this,
           C: (f, a) => f(...a)
         });