@dxos/edge-client 0.8.4-main.ef1bc66f44 → 0.8.4-main.f466a3d56e

package/dist/lib/neutral/index.mjs

@@ -6,7 +6,7 @@ import {
   getTypename,
   protocol,
   toUint8Array
-} from "./chunk-VESGVCLQ.mjs";
+} from "./chunk-ZIQ5T3A7.mjs";
 
 // src/index.ts
 export * from "@dxos/protocols/buf/dxos/edge/messenger_pb";
@@ -60,15 +60,7 @@ var createChainEdgeIdentity = async (signer, identityKey, peerKey, chain, creden
     identityKey: identityKey.toHex(),
     peerKey: peerKey.toHex(),
     presentCredentials: async ({ challenge }) => {
-      invariant(chain, void 0, {
-        F: __dxlog_file,
-        L: 75,
-        S: void 0,
-        A: [
-          "chain",
-          ""
-        ]
-      });
+      invariant(chain, void 0, { "~LogMeta": "~LogMeta", F: __dxlog_file, L: 56, S: void 0, A: ["chain", ""] });
       return signPresentation({
         presentation: {
           credentials: credentialsToSign
@@ -124,6 +116,7 @@ var createStubEdgeIdentity = () => {
 
 // src/edge-client.ts
 import { Event, PersistentLifecycle, Trigger, TriggerState, scheduleMicroTask, scheduleTaskInterval as scheduleTaskInterval2 } from "@dxos/async";
+import { TRACE_SPAN_ATTRIBUTE } from "@dxos/context";
 import { Resource as Resource2 } from "@dxos/context";
 import { log as log2, logInfo as logInfo2 } from "@dxos/log";
 import { EdgeStatus } from "@dxos/protocols/proto/dxos/client/services";
@@ -133,35 +126,11 @@ import { invariant as invariant2 } from "@dxos/invariant";
 import { schema } from "@dxos/protocols/proto";
 var __dxlog_file2 = "/__w/dxos/dxos/packages/core/mesh/edge-client/src/edge-identity.ts";
 var handleAuthChallenge = async (failedResponse, identity) => {
-  invariant2(failedResponse.status === 401, void 0, {
-    F: __dxlog_file2,
-    L: 21,
-    S: void 0,
-    A: [
-      "failedResponse.status === 401",
-      ""
-    ]
-  });
+  invariant2(failedResponse.status === 401, void 0, { "~LogMeta": "~LogMeta", F: __dxlog_file2, L: 7, S: void 0, A: ["failedResponse.status === 401", ""] });
   const headerValue = failedResponse.headers.get("Www-Authenticate");
-  invariant2(headerValue?.startsWith("VerifiablePresentation challenge="), void 0, {
-    F: __dxlog_file2,
-    L: 24,
-    S: void 0,
-    A: [
-      "headerValue?.startsWith('VerifiablePresentation challenge=')",
-      ""
-    ]
-  });
+  invariant2(headerValue?.startsWith("VerifiablePresentation challenge="), void 0, { "~LogMeta": "~LogMeta", F: __dxlog_file2, L: 9, S: void 0, A: ["headerValue?.startsWith('VerifiablePresentation challenge=')", ""] });
   const challenge = headerValue?.slice("VerifiablePresentation challenge=".length);
-  invariant2(challenge, void 0, {
-    F: __dxlog_file2,
-    L: 27,
-    S: void 0,
-    A: [
-      "challenge",
-      ""
-    ]
-  });
+  invariant2(challenge, void 0, { "~LogMeta": "~LogMeta", F: __dxlog_file2, L: 11, S: void 0, A: ["challenge", ""] });
   const presentation = await identity.presentCredentials({
     challenge: Buffer.from(challenge, "base64")
   });
@@ -177,13 +146,13 @@ import { log, logInfo } from "@dxos/log";
 import { EdgeWebsocketProtocol } from "@dxos/protocols";
 import { buf } from "@dxos/protocols/buf";
 import { MessageSchema } from "@dxos/protocols/buf/dxos/edge/messenger_pb";
+var __dxlog_file3 = "/__w/dxos/dxos/packages/core/mesh/edge-client/src/edge-ws-connection.ts";
 function _ts_decorate(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file3 = "/__w/dxos/dxos/packages/core/mesh/edge-client/src/edge-ws-connection.ts";
 var SIGNAL_KEEPALIVE_INTERVAL = 4e3;
 var SIGNAL_KEEPALIVE_TIMEOUT = 12e3;
 var EdgeWsConnection = class extends Resource {
@@ -235,33 +204,12 @@ var EdgeWsConnection = class extends Resource {
     return this._messagesReceived;
   }
   send(message) {
-    invariant3(this._ws, void 0, {
-      F: __dxlog_file3,
-      L: 93,
-      S: this,
-      A: [
-        "this._ws",
-        ""
-      ]
-    });
-    invariant3(this._wsMuxer, void 0, {
-      F: __dxlog_file3,
-      L: 94,
-      S: this,
-      A: [
-        "this._wsMuxer",
-        ""
-      ]
-    });
+    invariant3(this._ws, void 0, { "~LogMeta": "~LogMeta", F: __dxlog_file3, L: 72, S: this, A: ["this._ws", ""] });
+    invariant3(this._wsMuxer, void 0, { "~LogMeta": "~LogMeta", F: __dxlog_file3, L: 73, S: this, A: ["this._wsMuxer", ""] });
     log("sending...", {
       peerKey: this._identity.peerKey,
       payload: protocol.getPayloadType(message)
-    }, {
-      F: __dxlog_file3,
-      L: 95,
-      S: this,
-      C: (f, a) => f(...a)
-    });
+    }, { "~LogMeta": "~LogMeta", F: __dxlog_file3, L: 74, S: this });
     this._messagesSent++;
     if (this._ws?.protocol.includes(EdgeWebsocketProtocol.V0)) {
       const binary = buf.toBinary(MessageSchema, message);
@@ -270,12 +218,7 @@ var EdgeWsConnection = class extends Resource {
           byteLength: binary.byteLength,
           serviceId: message.serviceId,
           payload: protocol.getPayloadType(message)
-        }, {
-          F: __dxlog_file3,
-          L: 100,
-          S: this,
-          C: (f, a) => f(...a)
-        });
+        }, { "~LogMeta": "~LogMeta", F: __dxlog_file3, L: 82, S: this });
         return;
       }
       this._recordBytes(binary.byteLength, 0);
@@ -283,12 +226,7 @@ var EdgeWsConnection = class extends Resource {
     } else {
       const binary = buf.toBinary(MessageSchema, message);
       this._recordBytes(binary.byteLength, 0);
-      this._wsMuxer.send(message).catch((e) => log.catch(e, void 0, {
-        F: __dxlog_file3,
-        L: 113,
-        S: this,
-        C: (f, a) => f(...a)
-      }));
+      this._wsMuxer.send(message).catch((e) => log.catch(e, void 0, { "~LogMeta": "~LogMeta", F: __dxlog_file3, L: 95, S: this }));
     }
   }
   async _open() {
@@ -300,17 +238,14 @@ var EdgeWsConnection = class extends Resource {
       this._connectionInfo.protocolHeader
     ] : [
       ...baseProtocols
-    ]);
+    ], this._connectionInfo.headers ? {
+      headers: this._connectionInfo.headers
+    } : void 0);
     const muxer = new WebSocketMuxer(this._ws);
     this._wsMuxer = muxer;
     this._ws.onopen = () => {
       if (this.isOpen) {
-        log("connected", void 0, {
-          F: __dxlog_file3,
-          L: 130,
-          S: this,
-          C: (f, a) => f(...a)
-        });
+        log("connected", void 0, { "~LogMeta": "~LogMeta", F: __dxlog_file3, L: 114, S: this });
         this._openTimestamp = Date.now();
         this._callbacks.onConnected();
         this._scheduleHeartbeats();
@@ -318,12 +253,7 @@ var EdgeWsConnection = class extends Resource {
       } else {
         log.verbose("connected after becoming inactive", {
           currentIdentity: this._identity
-        }, {
-          F: __dxlog_file3,
-          L: 136,
-          S: this,
-          C: (f, a) => f(...a)
-        });
+        }, { "~LogMeta": "~LogMeta", F: __dxlog_file3, L: 120, S: this });
       }
     };
     this._ws.onclose = (event) => {
@@ -331,12 +261,7 @@ var EdgeWsConnection = class extends Resource {
         log.warn("server disconnected", {
           code: event.code,
           reason: event.reason
-        }, {
-          F: __dxlog_file3,
-          L: 141,
-          S: this,
-          C: (f, a) => f(...a)
-        });
+        }, { "~LogMeta": "~LogMeta", F: __dxlog_file3, L: 127, S: this });
         this._callbacks.onRestartRequired();
         muxer.destroy();
       }
@@ -346,34 +271,19 @@ var EdgeWsConnection = class extends Resource {
         log.warn("edge connection socket error", {
           error: event.error,
           info: event.message
-        }, {
-          F: __dxlog_file3,
-          L: 148,
-          S: this,
-          C: (f, a) => f(...a)
-        });
+        }, { "~LogMeta": "~LogMeta", F: __dxlog_file3, L: 137, S: this });
         this._callbacks.onRestartRequired();
       } else {
         log.verbose("error ignored on closed connection", {
           error: event.error
-        }, {
-          F: __dxlog_file3,
-          L: 151,
-          S: this,
-          C: (f, a) => f(...a)
-        });
+        }, { "~LogMeta": "~LogMeta", F: __dxlog_file3, L: 143, S: this });
       }
     };
     this._ws.onmessage = async (event) => {
       if (!this.isOpen) {
         log.verbose("message ignored on closed connection", {
           event: event.type
-        }, {
-          F: __dxlog_file3,
-          L: 159,
-          S: this,
-          C: (f, a) => f(...a)
-        });
+        }, { "~LogMeta": "~LogMeta", F: __dxlog_file3, L: 152, S: this });
         return;
       }
       this._lastReceivedMessageTimestamp = Date.now();
@@ -396,12 +306,7 @@ var EdgeWsConnection = class extends Resource {
         log("received", {
           from: message.source,
           payload: protocol.getPayloadType(message)
-        }, {
-          F: __dxlog_file3,
-          L: 185,
-          S: this,
-          C: (f, a) => f(...a)
-        });
+        }, { "~LogMeta": "~LogMeta", F: __dxlog_file3, L: 175, S: this });
         this._callbacks.onMessage(message);
       }
     };
@@ -420,24 +325,11 @@ var EdgeWsConnection = class extends Resource {
       }
       log.warn("error closing websocket", {
         err
-      }, {
-        F: __dxlog_file3,
-        L: 203,
-        S: this,
-        C: (f, a) => f(...a)
-      });
+      }, { "~LogMeta": "~LogMeta", F: __dxlog_file3, L: 194, S: this });
     }
   }
   _scheduleHeartbeats() {
-    invariant3(this._ws, void 0, {
-      F: __dxlog_file3,
-      L: 208,
-      S: this,
-      A: [
-        "this._ws",
-        ""
-      ]
-    });
+    invariant3(this._ws, void 0, { "~LogMeta": "~LogMeta", F: __dxlog_file3, L: 200, S: this, A: ["this._ws", ""] });
     scheduleTaskInterval(this._ctx, async () => {
       this._pingTimestamp = Date.now();
       this._ws?.send("__ping__");
@@ -451,21 +343,13 @@ var EdgeWsConnection = class extends Resource {
       return;
     }
     void this._inactivityTimeoutCtx?.dispose();
-    this._inactivityTimeoutCtx = new Context(void 0, {
-      F: __dxlog_file3,
-      L: 229
-    });
+    this._inactivityTimeoutCtx = new Context(void 0, { "~LogMeta": "~LogMeta", F: __dxlog_file3, L: 216 });
     scheduleTask(this._inactivityTimeoutCtx, () => {
       if (this.isOpen) {
         if (Date.now() - this._lastReceivedMessageTimestamp > SIGNAL_KEEPALIVE_TIMEOUT) {
           log.warn("restart due to inactivity timeout", {
             lastReceivedMessageTimestamp: this._lastReceivedMessageTimestamp
-          }, {
-            F: __dxlog_file3,
-            L: 235,
-            S: this,
-            C: (f, a) => f(...a)
-          });
+          }, { "~LogMeta": "~LogMeta", F: __dxlog_file3, L: 220, S: this });
           this._callbacks.onRestartRequired();
         } else {
           this._rescheduleHeartbeatTimeout();
@@ -540,13 +424,13 @@ var getEdgeUrlWithProtocol = (baseUrl, protocol2) => {
 };
 
 // src/edge-client.ts
+var __dxlog_file4 = "/__w/dxos/dxos/packages/core/mesh/edge-client/src/edge-client.ts";
 function _ts_decorate2(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file4 = "/__w/dxos/dxos/packages/core/mesh/edge-client/src/edge-client.ts";
 var DEFAULT_TIMEOUT = 1e4;
 var STATUS_REFRESH_INTERVAL = 1e3;
 var EdgeClient = class extends Resource2 {
@@ -598,12 +482,7 @@ var EdgeClient = class extends Resource2 {
       log2("Edge identity changed", {
         identity,
         oldIdentity: this._identity
-      }, {
-        F: __dxlog_file4,
-        L: 118,
-        S: this,
-        C: (f, a) => f(...a)
-      });
+      }, { "~LogMeta": "~LogMeta", F: __dxlog_file4, L: 74, S: this });
       this._identity = identity;
       this._closeCurrentConnection(new EdgeIdentityChangedError());
       void this._persistentLifecycle.scheduleRestart();
@@ -613,14 +492,9 @@ var EdgeClient = class extends Resource2 {
   * Send message.
   * NOTE: The message is guaranteed to be delivered but the service must respond with a message to confirm processing.
   */
-  async send(message) {
+  async send(ctx, message) {
     if (this._ready.state !== TriggerState.RESOLVED) {
-      log2("waiting for websocket", void 0, {
-        F: __dxlog_file4,
-        L: 131,
-        S: this,
-        C: (f, a) => f(...a)
-      });
+      log2("waiting for websocket", void 0, { "~LogMeta": "~LogMeta", F: __dxlog_file4, L: 88, S: this });
       await this._ready.wait({
         timeout: this._config.timeout ?? DEFAULT_TIMEOUT
       });
@@ -631,6 +505,14 @@ var EdgeClient = class extends Resource2 {
     if (message.source && (message.source.peerKey !== this._identity.peerKey || message.source.identityKey !== this.identityKey)) {
       throw new EdgeIdentityChangedError();
     }
+    const traceCtx = ctx.getAttribute(TRACE_SPAN_ATTRIBUTE);
+    if (traceCtx) {
+      message.traceContext = {
+        $typeName: "dxos.edge.messenger.TraceContext",
+        traceparent: traceCtx.traceparent,
+        tracestate: traceCtx.tracestate
+      };
+    }
     this._currentConnection.send(message);
   }
   onMessage(listener) {
@@ -645,12 +527,7 @@ var EdgeClient = class extends Resource2 {
           try {
             listener();
           } catch (error) {
-            log2.catch(error, void 0, {
-              F: __dxlog_file4,
-              L: 164,
-              S: this,
-              C: (f, a) => f(...a)
-            });
+            log2.catch(error, void 0, { "~LogMeta": "~LogMeta", F: __dxlog_file4, L: 123, S: this });
           }
         }
       });
@@ -663,21 +540,11 @@ var EdgeClient = class extends Resource2 {
   async _open() {
     log2("opening...", {
       info: this.info
-    }, {
-      F: __dxlog_file4,
-      L: 177,
-      S: this,
-      C: (f, a) => f(...a)
-    });
+    }, { "~LogMeta": "~LogMeta", F: __dxlog_file4, L: 133, S: this });
     this._persistentLifecycle.open().catch((err) => {
       log2.warn("Error while opening connection", {
         err
-      }, {
-        F: __dxlog_file4,
-        L: 179,
-        S: this,
-        C: (f, a) => f(...a)
-      });
+      }, { "~LogMeta": "~LogMeta", F: __dxlog_file4, L: 137, S: this });
     });
     scheduleTaskInterval2(this._ctx, async () => {
       if (!this._currentConnection) {
@@ -692,12 +559,7 @@ var EdgeClient = class extends Resource2 {
   async _close() {
     log2("closing...", {
       peerKey: this._identity.peerKey
-    }, {
-      F: __dxlog_file4,
-      L: 199,
-      S: this,
-      C: (f, a) => f(...a)
-    });
+    }, { "~LogMeta": "~LogMeta", F: __dxlog_file4, L: 152, S: this });
     this._closeCurrentConnection();
     await this._persistentLifecycle.close();
   }
@@ -709,12 +571,7 @@ var EdgeClient = class extends Resource2 {
     const path = `/ws/${identity.identityKey}/${identity.peerKey}`;
     const protocolHeader = this._config.disableAuth ? void 0 : await this._createAuthHeader(path);
     if (this._identity !== identity) {
-      log2("identity changed during auth header request", void 0, {
-        F: __dxlog_file4,
-        L: 213,
-        S: this,
-        C: (f, a) => f(...a)
-      });
+      log2("identity changed during auth header request", void 0, { "~LogMeta": "~LogMeta", F: __dxlog_file4, L: 166, S: this });
       return void 0;
     }
     const restartRequired = new Trigger();
@@ -722,27 +579,20 @@ var EdgeClient = class extends Resource2 {
     log2("Opening websocket", {
       url: url.toString(),
       protocolHeader
-    }, {
-      F: __dxlog_file4,
-      L: 219,
-      S: this,
-      C: (f, a) => f(...a)
-    });
+    }, { "~LogMeta": "~LogMeta", F: __dxlog_file4, L: 171, S: this });
     const connection = new EdgeWsConnection(identity, {
       url,
-      protocolHeader
+      protocolHeader,
+      headers: this._config.clientTag ? {
+        "X-DXOS-Client-Tag": this._config.clientTag
+      } : void 0
     }, {
       onConnected: () => {
         if (this._isActive(connection)) {
           this._ready.wake();
           this._notifyReconnected();
         } else {
-          log2.verbose("connected callback ignored, because connection is not active", void 0, {
-            F: __dxlog_file4,
-            L: 229,
-            S: this,
-            C: (f, a) => f(...a)
-          });
+          log2.verbose("connected callback ignored, because connection is not active", void 0, { "~LogMeta": "~LogMeta", F: __dxlog_file4, L: 187, S: this });
         }
       },
       onRestartRequired: () => {
@@ -750,12 +600,7 @@ var EdgeClient = class extends Resource2 {
           this._closeCurrentConnection();
           void this._persistentLifecycle.scheduleRestart();
         } else {
-          log2.verbose("restart requested by inactive connection", void 0, {
-            F: __dxlog_file4,
-            L: 237,
-            S: this,
-            C: (f, a) => f(...a)
-          });
+          log2.verbose("restart requested by inactive connection", void 0, { "~LogMeta": "~LogMeta", F: __dxlog_file4, L: 195, S: this });
         }
         restartRequired.wake();
       },
@@ -766,12 +611,7 @@ var EdgeClient = class extends Resource2 {
           log2.verbose("ignored a message on inactive connection", {
             from: message.source,
             type: message.payload?.typeUrl
-          }, {
-            F: __dxlog_file4,
-            L: 245,
-            S: this,
-            C: (f, a) => f(...a)
-          });
+          }, { "~LogMeta": "~LogMeta", F: __dxlog_file4, L: 203, S: this });
         }
       }
     });
@@ -803,12 +643,7 @@ var EdgeClient = class extends Resource2 {
       } catch (err) {
         log2.error("ws reconnect listener failed", {
           err
-        }, {
-          F: __dxlog_file4,
-          L: 280,
-          S: this,
-          C: (f, a) => f(...a)
-        });
+        }, { "~LogMeta": "~LogMeta", F: __dxlog_file4, L: 238, S: this });
       }
     }
   }
@@ -820,12 +655,7 @@ var EdgeClient = class extends Resource2 {
         log2.error("ws incoming message processing failed", {
           err,
           payload: protocol.getPayloadType(message)
-        }, {
-          F: __dxlog_file4,
-          L: 290,
-          S: this,
-          C: (f, a) => f(...a)
-        });
+        }, { "~LogMeta": "~LogMeta", F: __dxlog_file4, L: 249, S: this });
       }
     }
   }
@@ -841,12 +671,7 @@ var EdgeClient = class extends Resource2 {
       log2.warn("no auth challenge from edge", {
         status: response.status,
         statusText: response.statusText
-      }, {
-        F: __dxlog_file4,
-        L: 302,
-        S: this,
-        C: (f, a) => f(...a)
-      });
+      }, { "~LogMeta": "~LogMeta", F: __dxlog_file4, L: 265, S: this });
       return void 0;
     }
   }
@@ -866,11 +691,11 @@ import * as HttpClient from "@effect/platform/HttpClient";
 import * as Effect2 from "effect/Effect";
 import * as Function from "effect/Function";
 import { sleep } from "@dxos/async";
-import { Context as Context3 } from "@dxos/context";
+import { TRACE_SPAN_ATTRIBUTE as TRACE_SPAN_ATTRIBUTE2 } from "@dxos/context";
 import { runAndForwardErrors } from "@dxos/effect";
 import { invariant as invariant4 } from "@dxos/invariant";
 import { log as log4 } from "@dxos/log";
-import { EdgeAuthChallengeError, EdgeCallFailedError } from "@dxos/protocols";
+import { EDGE_CLIENT_TAG_HEADER, EdgeAuthChallengeError, EdgeCallFailedError } from "@dxos/protocols";
 import { createUrl } from "@dxos/util";
 
 // src/http-client.ts
@@ -904,12 +729,7 @@ var withRetryConfig = (effect) => Effect.gen(function* () {
 var withLogging = (effect) => effect.pipe(Effect.tap((res) => {
   log3.info("response", {
     status: res.status
-  }, {
-    F: __dxlog_file5,
-    L: 66,
-    S: void 0,
-    C: (f, a) => f(...a)
-  });
+  }, { "~LogMeta": "~LogMeta", F: __dxlog_file5, L: 31, S: void 0 });
 }));
 var encodeAuthHeader = (challenge) => {
   const encodedChallenge = Buffer.from(challenge).toString("base64");
@@ -922,23 +742,21 @@ var DEFAULT_RETRY_TIMEOUT = 1500;
 var DEFAULT_RETRY_JITTER = 500;
 var DEFAULT_MAX_RETRIES_COUNT = 3;
 var WARNING_BODY_SIZE = 10 * 1024 * 1024;
+var LEGACY_CORS_PROXY_URL = "https://cors-proxy.dxos.workers.dev";
 var EdgeHttpClient = class {
   _baseUrl;
+  _clientTag;
   _edgeIdentity;
   /**
   * Auth header is cached until receiving the next 401 from EDGE, at which point it gets refreshed.
   */
   _authHeader;
-  constructor(baseUrl) {
+  constructor(baseUrl, options) {
     this._baseUrl = getEdgeUrlWithProtocol(baseUrl, "http");
+    this._clientTag = options?.clientTag;
     log4("created", {
       url: this._baseUrl
-    }, {
-      F: __dxlog_file6,
-      L: 106,
-      S: this,
-      C: (f, a) => f(...a)
-    });
+    }, { "~LogMeta": "~LogMeta", F: __dxlog_file6, L: 37, S: this });
   }
   get baseUrl() {
     return this._baseUrl;
@@ -952,8 +770,8 @@ var EdgeHttpClient = class {
   //
   // Status
   //
-  async getStatus(args) {
-    return this._call(new URL("/status", this.baseUrl), {
+  async getStatus(ctx, args) {
+    return this._call(ctx, new URL("/status", this.baseUrl), {
       ...args,
       method: "GET",
       auth: true
@@ -962,15 +780,15 @@ var EdgeHttpClient = class {
   //
   // Agents
   //
-  createAgent(body, args) {
-    return this._call(new URL("/agents/create", this.baseUrl), {
+  createAgent(ctx, body, args) {
+    return this._call(ctx, new URL("/agents/create", this.baseUrl), {
       ...args,
       method: "POST",
       body
     });
   }
-  getAgentStatus(request, args) {
-    return this._call(new URL(`/users/${request.ownerIdentityKey.toHex()}/agent/status`, this.baseUrl), {
+  getAgentStatus(ctx, request, args) {
+    return this._call(ctx, new URL(`/users/${request.ownerIdentityKey.toHex()}/agent/status`, this.baseUrl), {
       ...args,
       method: "GET"
     });
@@ -978,14 +796,14 @@ var EdgeHttpClient = class {
   //
   // Credentials
   //
-  getCredentialsForNotarization(spaceId, args) {
-    return this._call(new URL(`/spaces/${spaceId}/notarization`, this.baseUrl), {
+  getCredentialsForNotarization(ctx, spaceId, args) {
+    return this._call(ctx, new URL(`/spaces/${spaceId}/notarization`, this.baseUrl), {
       ...args,
       method: "GET"
     });
   }
-  async notarizeCredentials(spaceId, body, args) {
-    await this._call(new URL(`/spaces/${spaceId}/notarization`, this.baseUrl), {
+  async notarizeCredentials(ctx, spaceId, body, args) {
+    await this._call(ctx, new URL(`/spaces/${spaceId}/notarization`, this.baseUrl), {
       ...args,
       body,
       method: "POST"
@@ -994,8 +812,8 @@ var EdgeHttpClient = class {
   //
   // Identity
   //
-  async recoverIdentity(body, args) {
-    return this._call(new URL("/identity/recover", this.baseUrl), {
+  async recoverIdentity(ctx, body, args) {
+    return this._call(ctx, new URL("/identity/recover", this.baseUrl), {
       ...args,
       body,
       method: "POST"
@@ -1004,8 +822,8 @@ var EdgeHttpClient = class {
   //
   // Invitations
   //
-  async joinSpaceByInvitation(spaceId, body, args) {
-    return this._call(new URL(`/spaces/${spaceId}/join`, this.baseUrl), {
+  async joinSpaceByInvitation(ctx, spaceId, body, args) {
+    return this._call(ctx, new URL(`/spaces/${spaceId}/join`, this.baseUrl), {
       ...args,
       body,
       method: "POST"
@@ -1014,8 +832,8 @@ var EdgeHttpClient = class {
   //
   // OAuth and credentials
   //
-  async initiateOAuthFlow(body, args) {
-    return this._call(new URL("/oauth/initiate", this.baseUrl), {
+  async initiateOAuthFlow(ctx, body, args) {
+    return this._call(ctx, new URL("/oauth/initiate", this.baseUrl), {
       ...args,
       body,
       method: "POST"
@@ -1024,8 +842,8 @@ var EdgeHttpClient = class {
   //
   // Spaces
   //
-  async createSpace(body, args) {
-    return this._call(new URL("/spaces/create", this.baseUrl), {
+  async createSpace(ctx, body, args) {
+    return this._call(ctx, new URL("/spaces/create", this.baseUrl), {
       ...args,
       body,
       method: "POST"
@@ -1034,18 +852,10 @@ var EdgeHttpClient = class {
   //
   // Queues
   //
-  async queryQueue(subspaceTag, spaceId, query, args) {
+  async queryQueue(ctx, subspaceTag, spaceId, query, args) {
     const queueId = query.queueIds?.[0];
-    invariant4(queueId, "queueId required", {
-      F: __dxlog_file6,
-      L: 215,
-      S: this,
-      A: [
-        "queueId",
-        "'queueId required'"
-      ]
-    });
-    return this._call(createUrl(new URL(`/spaces/${subspaceTag}/${spaceId}/queue/${queueId}/query`, this.baseUrl), {
+    invariant4(queueId, "queueId required", { "~LogMeta": "~LogMeta", F: __dxlog_file6, L: 137, S: this, A: ["queueId", "'queueId required'"] });
+    return this._call(ctx, createUrl(new URL(`/spaces/${subspaceTag}/${spaceId}/queue/${queueId}/query`, this.baseUrl), {
       after: query.after,
       before: query.before,
       limit: query.limit,
@@ -1056,8 +866,8 @@ var EdgeHttpClient = class {
       method: "GET"
     });
   }
-  async insertIntoQueue(subspaceTag, spaceId, queueId, objects, args) {
-    return this._call(new URL(`/spaces/${subspaceTag}/${spaceId}/queue/${queueId}`, this.baseUrl), {
+  async insertIntoQueue(ctx, subspaceTag, spaceId, queueId, objects, args) {
+    return this._call(ctx, new URL(`/spaces/${subspaceTag}/${spaceId}/queue/${queueId}`, this.baseUrl), {
       ...args,
       body: {
         objects
@@ -1065,8 +875,8 @@ var EdgeHttpClient = class {
       method: "POST"
     });
   }
-  async deleteFromQueue(subspaceTag, spaceId, queueId, objectIds, args) {
-    return this._call(createUrl(new URL(`/spaces/${subspaceTag}/${spaceId}/queue/${queueId}`, this.baseUrl), {
+  async deleteFromQueue(ctx, subspaceTag, spaceId, queueId, objectIds, args) {
+    return this._call(ctx, createUrl(new URL(`/spaces/${subspaceTag}/${spaceId}/queue/${queueId}`, this.baseUrl), {
       ids: objectIds.join(",")
     }), {
       ...args,
@@ -1076,7 +886,7 @@ var EdgeHttpClient = class {
   //
   // Functions
   //
-  async uploadFunction(pathParts, body, args) {
+  async uploadFunction(ctx, pathParts, body, args) {
     const formData = new FormData();
     formData.append("name", body.name ?? "");
     formData.append("version", body.version);
@@ -1096,20 +906,20 @@ var EdgeHttpClient = class {
         pathParts.functionId
       ] : []
     ].join("/");
-    return this._call(new URL(path, this.baseUrl), {
+    return this._call(ctx, new URL(path, this.baseUrl), {
       ...args,
       body: formData,
       method: "PUT",
       json: false
     });
   }
-  async listFunctions(args) {
-    return this._call(new URL("/functions", this.baseUrl), {
+  async listFunctions(ctx, args) {
+    return this._call(ctx, new URL("/functions", this.baseUrl), {
       ...args,
       method: "GET"
     });
   }
-  async invokeFunction(params, input, args) {
+  async invokeFunction(ctx, params, input, args) {
     const url = new URL(`/functions/${params.functionId}`, this.baseUrl);
     if (params.version) {
       url.searchParams.set("version", params.version);
@@ -1123,7 +933,7 @@ var EdgeHttpClient = class {
     if (params.subrequestsLimit) {
       url.searchParams.set("subrequestsLimit", params.subrequestsLimit.toString());
     }
-    return this._call(url, {
+    return this._call(ctx, url, {
       ...args,
       body: input,
       method: "POST"
@@ -1132,8 +942,8 @@ var EdgeHttpClient = class {
   //
   // Workflows
   //
-  async executeWorkflow(spaceId, graphId, input, args) {
-    return this._call(new URL(`/workflows/${spaceId}/${graphId}`, this.baseUrl), {
+  async executeWorkflow(ctx, spaceId, graphId, input, args) {
+    return this._call(ctx, new URL(`/workflows/${spaceId}/${graphId}`, this.baseUrl), {
       ...args,
       body: input,
       method: "POST"
@@ -1142,55 +952,111 @@ var EdgeHttpClient = class {
   //
   // Triggers
   //
-  async getCronTriggers(spaceId) {
-    return this._call(new URL(`/test/functions/${spaceId}/triggers/crons`, this.baseUrl), {
+  async getCronTriggers(ctx, spaceId) {
+    return this._call(ctx, new URL(`/functions/${spaceId}/triggers/crons`, this.baseUrl), {
       method: "GET"
     });
   }
-  async forceRunCronTrigger(spaceId, triggerId) {
-    return this._call(new URL(`/test/functions/${spaceId}/triggers/crons/${triggerId}/run`, this.baseUrl), {
+  async forceRunCronTrigger(ctx, spaceId, triggerId) {
+    return this._call(ctx, new URL(`/functions/${spaceId}/triggers/crons/${triggerId}/run`, this.baseUrl), {
+      method: "POST"
+    });
+  }
+  //
+  // Query
+  //
+  /**
+  * Execute a QueryAST query against a space.
+  */
+  async execQuery(ctx, spaceId, body, args) {
+    return this._call(ctx, new URL(`/spaces/${spaceId}/exec-query`, this.baseUrl), {
+      ...args,
+      body,
       method: "POST"
     });
   }
   //
+  // Registry
+  //
+  /**
+  * Fetches the hydrated plugin directory from the Edge registry service.
+  * Unauthenticated; safe to call without an identity.
+  */
+  async getRegistryPlugins(ctx, args) {
+    return this._call(ctx, new URL("/registry/plugins", this.baseUrl), {
+      ...args,
+      method: "GET"
+    });
+  }
+  /**
+  * Fetches the available release versions for a given plugin repo. `repo` is the
+  * GitHub `owner/name` form; this method takes care of URL-encoding before issuing
+  * the request. Unauthenticated; same surface area as {@link getRegistryPlugins}.
+  *
+  * Versions are returned newest first, suitable for direct rendering in a picker.
+  */
+  async getRegistryPluginVersions(ctx, repo, args) {
+    return this._call(ctx, new URL(`/registry/plugins/${encodeURIComponent(repo)}/versions`, this.baseUrl), {
+      ...args,
+      method: "GET"
+    });
+  }
+  //
   // Import/Export space.
   //
-  async importBundle(spaceId, body, args) {
-    return this._call(new URL(`/spaces/${spaceId}/import`, this.baseUrl), {
+  async importBundle(ctx, spaceId, body, args) {
+    return this._call(ctx, new URL(`/spaces/${spaceId}/import`, this.baseUrl), {
       ...args,
       body,
       method: "PUT"
     });
   }
-  async exportBundle(spaceId, body, args) {
-    return this._call(new URL(`/spaces/${spaceId}/export`, this.baseUrl), {
+  async exportBundle(ctx, spaceId, body, args) {
+    return this._call(ctx, new URL(`/spaces/${spaceId}/export`, this.baseUrl), {
       ...args,
       body,
       method: "POST"
     });
   }
   //
+  // Integration proxy.
+  //
+  /**
+  * Fetch through the edge proxy, used by integration plugins (Discord, ...)
+  * to call third-party REST APIs that don't set permissive CORS headers.
+  *
+  * `init.headers.Authorization` (caller-supplied) is preserved by prefixing
+  * with `X-Cors-Proxy-Authorization`, since the proxy strips `Authorization`
+  * on forwarding to avoid leaking the DXOS presentation upstream — the
+  * prefix carries the upstream's bot token / token through.
+  *
+  * TEMPORARY: routed through the legacy standalone proxy at
+  * `cors-proxy.dxos.workers.dev` (open, unauthenticated, path
+  * `/<host>/<path>`) so that integration plugins can be tested before the
+  * authenticated `/proxy/*` route on the main edge worker ships
+  * (https://github.com/dxos/edge/pull/576). When that PR deploys, restore
+  * the commented-out block below — it rewrites the target under
+  * `${this.baseUrl}/proxy/...` and signs the request with the cached
+  * verifiable presentation. The header-remap and `x-cors-proxy-*` override
+  * conventions are unchanged between the two paths.
+  */
+  async proxyFetch(target, init = {}) {
+    return proxyFetchLegacy(target, init, this._clientTag);
+  }
+  //
   // Internal
   //
   async _fetch(url, _args) {
     return Function.pipe(HttpClient.get(url), withLogging, withRetryConfig, Effect2.provide(FetchHttpClient.layer), Effect2.provide(HttpConfig.default), Effect2.withSpan("EdgeHttpClient"), runAndForwardErrors);
   }
   // TODO(burdon): Refactor with effect (see edge-http-client.test.ts).
-  async _call(url, args) {
+  async _call(ctx, url, args) {
     const shouldRetry = createRetryHandler(args);
-    const requestContext = args.context ?? Context3.default(void 0, {
-      F: __dxlog_file6,
-      L: 407
-    });
     log4("fetch", {
       url,
       request: args.body
-    }, {
-      F: __dxlog_file6,
-      L: 408,
-      S: this,
-      C: (f, a) => f(...a)
-    });
+    }, { "~LogMeta": "~LogMeta", F: __dxlog_file6, L: 362, S: this });
+    const traceHeaders = getTraceHeaders(ctx);
     let handledAuth = false;
     const tryCount = 1;
     while (true) {
@@ -1202,29 +1068,16 @@ var EdgeHttpClient = class {
             this._authHeader = await this._handleUnauthorized(response2);
           }
         }
-        const request = createRequest(args, this._authHeader);
+        const request = createRequest(args, this._authHeader, traceHeaders, this._clientTag);
         log4("call edge", {
           url,
           tryCount,
           authHeader: !!this._authHeader
-        }, {
-          F: __dxlog_file6,
-          L: 423,
-          S: this,
-          C: (f, a) => f(...a)
-        });
+        }, { "~LogMeta": "~LogMeta", F: __dxlog_file6, L: 379, S: this });
         const response = await fetch(url, request);
         if (response.ok) {
           const body2 = await response.clone().json();
-          invariant4(body2, "Expected body to be present", {
-            F: __dxlog_file6,
-            L: 428,
-            S: this,
-            A: [
-              "body",
-              "'Expected body to be present'"
-            ]
-          });
+          invariant4(body2, "Expected body to be present", { "~LogMeta": "~LogMeta", F: __dxlog_file6, L: 387, S: this, A: ["body", "'Expected body to be present'"] });
           if (!("success" in body2)) {
             return body2;
           }
@@ -1237,44 +1090,23 @@ var EdgeHttpClient = class {
           continue;
         }
         const body = response.headers.get("Content-Type") === "application/json" ? await response.clone().json() : void 0;
-        invariant4(!body?.success, "Expected body to not be a failure response or undefined.", {
-          F: __dxlog_file6,
-          L: 444,
-          S: this,
-          A: [
-            "!body?.success",
-            "'Expected body to not be a failure response or undefined.'"
-          ]
-        });
+        invariant4(!body?.success, "Expected body to not be a failure response or undefined.", { "~LogMeta": "~LogMeta", F: __dxlog_file6, L: 400, S: this, A: ["!body?.success", "'Expected body to not be a failure response or undefined.'"] });
         if (body?.data?.type === "auth_challenge" && typeof body?.data?.challenge === "string") {
           processingError = new EdgeAuthChallengeError(body.data.challenge, body.data);
         } else if (body?.success === false) {
           processingError = EdgeCallFailedError.fromUnsuccessfulResponse(response, body);
         } else {
-          invariant4(!response.ok, "Expected response to not be ok.", {
-            F: __dxlog_file6,
-            L: 451,
-            S: this,
-            A: [
-              "!response.ok",
-              "'Expected response to not be ok.'"
-            ]
-          });
+          invariant4(!response.ok, "Expected response to not be ok.", { "~LogMeta": "~LogMeta", F: __dxlog_file6, L: 406, S: this, A: ["!response.ok", "'Expected response to not be ok.'"] });
           processingError = await EdgeCallFailedError.fromHttpFailure(response);
         }
       } catch (error) {
         processingError = EdgeCallFailedError.fromProcessingFailureCause(error);
       }
-      if (processingError?.isRetryable && await shouldRetry(requestContext, processingError.retryAfterMs)) {
+      if (processingError?.isRetryable && await shouldRetry(ctx, processingError.retryAfterMs)) {
         log4.verbose("retrying edge request", {
           url,
           processingError
-        }, {
-          F: __dxlog_file6,
-          L: 459,
-          S: this,
-          C: (f, a) => f(...a)
-        });
+        }, { "~LogMeta": "~LogMeta", F: __dxlog_file6, L: 413, S: this });
       } else {
         throw processingError;
       }
@@ -1282,19 +1114,14 @@ var EdgeHttpClient = class {
   }
   async _handleUnauthorized(response) {
     if (!this._edgeIdentity) {
-      log4.warn("unauthorized response received before identity was set", void 0, {
-        F: __dxlog_file6,
-        L: 468,
-        S: this,
-        C: (f, a) => f(...a)
-      });
+      log4.warn("unauthorized response received before identity was set", void 0, { "~LogMeta": "~LogMeta", F: __dxlog_file6, L: 424, S: this });
       throw await EdgeCallFailedError.fromHttpFailure(response);
     }
     const challenge = await handleAuthChallenge(response, this._edgeIdentity);
     return encodeAuthHeader(challenge);
   }
 };
-var createRequest = ({ method, body, json = true }, authHeader) => {
+var createRequest = ({ method, body, json = true }, authHeader, traceHeaders, clientTag) => {
   let requestBody;
   const headers = {};
   if (json) {
@@ -1306,22 +1133,36 @@ var createRequest = ({ method, body, json = true }, authHeader) => {
   if (typeof requestBody === "string" && requestBody.length > WARNING_BODY_SIZE) {
     log4.warn("Request with large body", {
       bodySize: requestBody.length
-    }, {
-      F: __dxlog_file6,
-      L: 492,
-      S: void 0,
-      C: (f, a) => f(...a)
-    });
+    }, { "~LogMeta": "~LogMeta", F: __dxlog_file6, L: 441, S: void 0 });
   }
   if (authHeader) {
     headers["Authorization"] = authHeader;
   }
+  if (traceHeaders) {
+    Object.assign(headers, traceHeaders);
+  }
+  if (clientTag) {
+    headers[EDGE_CLIENT_TAG_HEADER] = clientTag;
+  }
   return {
     method,
     body: requestBody,
     headers
   };
 };
+var getTraceHeaders = (ctx) => {
+  const traceCtx = ctx.getAttribute(TRACE_SPAN_ATTRIBUTE2);
+  if (!traceCtx) {
+    return void 0;
+  }
+  const headers = {
+    traceparent: traceCtx.traceparent
+  };
+  if (traceCtx.tracestate) {
+    headers.tracestate = traceCtx.tracestate;
+  }
+  return headers;
+};
 var createRetryHandler = ({ retry: retry2 }) => {
   if (!retry2 || retry2.count < 1) {
     return async () => false;
@@ -1347,6 +1188,28 @@ var getFileMimeType = (filename) => [
   ".js",
   ".mjs"
 ].some((codeExtension) => filename.endsWith(codeExtension)) ? "application/javascript+module" : filename.endsWith(".wasm") ? "application/wasm" : "application/octet-stream";
+var remapAuthorizationForProxy = (headers) => {
+  const callerAuth = headers.get("Authorization");
+  if (callerAuth !== null) {
+    headers.delete("Authorization");
+    headers.set("X-Cors-Proxy-Authorization", callerAuth);
+  }
+  return headers;
+};
+var proxyFetchLegacy = (target, init = {}, clientTag) => {
+  const proxyUrl = new URL(`/${target.host}${target.pathname}${target.search}`, LEGACY_CORS_PROXY_URL);
+  if (target.protocol === "http:") {
+    proxyUrl.searchParams.set("scheme", "http");
+  }
+  const requestHeaders = remapAuthorizationForProxy(new Headers(init.headers ?? void 0));
+  if (clientTag) {
+    requestHeaders.set(EDGE_CLIENT_TAG_HEADER, clientTag);
+  }
+  return fetch(proxyUrl, {
+    ...init,
+    headers: requestHeaders
+  });
+};
 export {
   CLOUDFLARE_MESSAGE_MAX_BYTES,
   CLOUDFLARE_RPC_MAX_BYTES,
@@ -1366,6 +1229,7 @@ export {
   getTypename,
   handleAuthChallenge,
   protocol,
+  proxyFetchLegacy,
   toUint8Array,
   withLogging,
   withRetry,