@dxos/client-services 0.1.19 → 0.1.21

package/dist/lib/node/index.cjs

@@ -18,6 +18,10 @@ var __copyProps = (to, from, except, desc) => {
   return to;
 };
 var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
   isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
   mod
 ));
@@ -114,7 +118,7 @@ var SpaceServiceImpl = class {
                 identityKey: member.key,
                 displayName: (_b = (_a = member.assertion.profile) == null ? void 0 : _a.displayName) != null ? _b : (0, import_util.humanize)(member.key)
               },
-              presenceState: ((_c = this.serviceContext.identityManager.identity) == null ? void 0 : _c.identityKey.equals(member.key)) || space.presence.getPeersOnline().filter(({ identityKey }) => identityKey.equals(member.key)).length > 0 ? import_client.SpaceMember.PresenceState.ONLINE : import_client.SpaceMember.PresenceState.OFFLINE
+              presence: ((_c = this.serviceContext.identityManager.identity) == null ? void 0 : _c.identityKey.equals(member.key)) || space.presence.getPeersOnline().filter(({ identityKey }) => identityKey.equals(member.key)).length > 0 ? import_client.SpaceMember.PresenceState.ONLINE : import_client.SpaceMember.PresenceState.OFFLINE
             };
           })
         }));
@@ -237,11 +241,13 @@ var SystemServiceImpl = class {
     this._config = _config;
     this._serviceContext = _serviceContext;
   }
+  // TODO(burdon): Remove.
   async initSession() {
   }
   async getConfig(request) {
     return this._config.values;
   }
+  // TODO(burdon): Connect to iframe RPC heartbeat for network status?
   async getStatus(request) {
     return {
       message: `ok: ${Date.now()}`
@@ -445,7 +451,7 @@ var subscribeToSpaces = (context, { spaceKeys = [] }) => new import_codec_protob
         return {
           key: space.key,
           isOpen: space.isOpen,
-          timeframe: spaceMetadata.latestTimeframe,
+          timeframe: spaceMetadata == null ? void 0 : spaceMetadata.latestTimeframe,
           genesisFeed: space.genesisFeedKey,
           controlFeed: space.controlFeedKey,
           dataFeed: space.dataFeedKey
@@ -647,35 +653,45 @@ var Identity = class {
     this._signer = signer;
     this.identityKey = identityKey;
     this.deviceKey = deviceKey;
-    this._deviceStateMachine = new import_credentials2.DeviceStateMachine(this.identityKey, this.deviceKey);
-    this._profileStateMachine = new import_credentials2.ProfileStateMachine(this.identityKey);
-    this.space.onCredentialProcessed.set(async (credential) => {
-      await this._deviceStateMachine.process(credential);
-      await this._profileStateMachine.process(credential);
-      this.stateUpdate.emit();
-    });
+    this._deviceStateMachine = this.space.spaceState.registerProcessor(new import_credentials2.DeviceStateMachine({
+      identityKey: this.identityKey,
+      deviceKey: this.deviceKey,
+      onUpdate: () => this.stateUpdate.emit()
+    }));
+    this._profileStateMachine = this.space.spaceState.registerProcessor(new import_credentials2.ProfileStateMachine({
+      identityKey: this.identityKey,
+      onUpdate: () => this.stateUpdate.emit()
+    }));
     this.authVerifier = new HaloAuthVerifier({
       trustedDevicesProvider: () => this.authorizedDeviceKeys,
       update: this.stateUpdate,
       authTimeout: AUTH_TIMEOUT
     });
   }
+  // TODO(burdon): Expose state object?
   get authorizedDeviceKeys() {
-    return this._deviceStateMachine.authorizedDeviceKeys;
+    return this._deviceStateMachine.processor.authorizedDeviceKeys;
   }
   async open() {
+    await this._deviceStateMachine.open();
+    await this._profileStateMachine.open();
     await this.space.open();
   }
   async close() {
     await this.authVerifier.close();
+    await this._deviceStateMachine.close();
+    await this._profileStateMachine.close();
     await this.space.close();
   }
   async ready() {
-    await this._deviceStateMachine.deviceChainReady.wait();
+    await this._deviceStateMachine.processor.deviceChainReady.wait();
   }
   get profileDocument() {
-    return this._profileStateMachine.profile;
+    return this._profileStateMachine.processor.profile;
   }
+  /**
+  * @test-only
+  */
   get controlPipeline() {
     return this.space.controlPipeline;
   }
@@ -692,10 +708,17 @@ var Identity = class {
       dataFeedKey: this.space.dataFeedKey
     };
   }
+  /**
+  * Issues credentials as identity.
+  * Requires identity to be ready.
+  */
   getIdentityCredentialSigner() {
-    (0, import_node_assert2.default)(this._deviceStateMachine.deviceCredentialChain, "Device credential chain is not ready.");
-    return (0, import_credentials2.createCredentialSignerWithChain)(this._signer, this._deviceStateMachine.deviceCredentialChain, this.deviceKey);
+    (0, import_node_assert2.default)(this._deviceStateMachine.processor.deviceCredentialChain, "Device credential chain is not ready.");
+    return (0, import_credentials2.createCredentialSignerWithChain)(this._signer, this._deviceStateMachine.processor.deviceCredentialChain, this.deviceKey);
   }
+  /**
+  * Issues credentials as device.
+  */
   getDeviceCredentialSigner() {
     return (0, import_credentials2.createCredentialSignerWithKey)(this._signer, this.deviceKey);
   }
@@ -708,7 +731,7 @@ var Identity = class {
       dataFeedKey
     }, {
       file: "identity.ts",
-      line: 147,
+      line: 155,
       scope: this,
       callSite: (f, a) => f(...a)
     });
@@ -753,12 +776,12 @@ var Identity = class {
 var import_node_assert3 = __toESM(require("node:assert"));
 var import_async6 = require("@dxos/async");
 var import_credentials4 = require("@dxos/credentials");
-var import_echo_db = require("@dxos/echo-db");
 var import_log4 = require("@dxos/log");
 var import_credentials5 = require("@dxos/protocols/proto/dxos/halo/credentials");
-var import_teleport_extension_presence = require("@dxos/teleport-extension-presence");
 var import_util3 = require("@dxos/util");
 var IdentityManager = class {
+  // TODO(burdon): IdentityManagerParams.
+  // TODO(dmaretskyi): Perhaps this should take/generate the peerKey outside of an initialized identity.
   constructor(_metadataStore, _keyring, _spaceManager) {
     this._metadataStore = _metadataStore;
     this._keyring = _keyring;
@@ -771,6 +794,14 @@ var IdentityManager = class {
   async open() {
     await this._metadataStore.load();
     const identityRecord = this._metadataStore.getIdentityRecord();
+    (0, import_log4.log)("identity record", {
+      identityRecord
+    }, {
+      file: "identity-manager.ts",
+      line: 57,
+      scope: this,
+      callSite: (f, a) => f(...a)
+    });
     if (identityRecord) {
       this._identity = await this._constructIdentity(identityRecord);
       await this._identity.open();
@@ -806,7 +837,9 @@ var IdentityManager = class {
     {
       const generator = new import_credentials4.CredentialGenerator(this._keyring, identityRecord.identityKey, identityRecord.deviceKey);
       const credentials = [
+        // Space genesis.
         ...await generator.createSpaceGenesis(identityRecord.haloSpace.spaceKey, identityRecord.haloSpace.genesisFeedKey),
+        // Feed admission.
         await generator.createFeedAdmission(identityRecord.haloSpace.spaceKey, identityRecord.haloSpace.writeDataFeedKey, import_credentials5.AdmittedFeed.Designation.DATA)
       ];
       if (displayName) {
@@ -837,6 +870,9 @@ var IdentityManager = class {
     });
     return identity;
   }
+  /**
+  * Accept an existing identity. Expects it's device key to be authorized (now or later).
+  */
   async acceptIdentity(params) {
     (0, import_log4.log)("accepting identity", {
       params
@@ -907,14 +943,9 @@ var IdentityManager = class {
         controlFeedKey: spaceRecord.writeControlFeedKey,
         dataFeedKey: spaceRecord.writeDataFeedKey
       },
-      dataPipelineControllerProvider: () => new import_echo_db.NoopDataPipelineController(),
       swarmIdentity,
-      presence: new import_teleport_extension_presence.Presence({
-        localPeerId: swarmIdentity.peerKey,
-        announceInterval: 1e3,
-        offlineTimeout: 3e4,
-        identityKey
-      })
+      onNetworkConnection: () => {
+      }
     });
   }
 };
@@ -963,6 +994,7 @@ var InvitationObservableProvider = class extends import_async7.CancellableObserv
   }
 };
 var AuthenticatingInvitationProvider = class extends InvitationObservableProvider {
+  // prettier-ignore
   constructor(_actions) {
     super(() => this._actions.onCancel());
     this._actions = _actions;
@@ -989,6 +1021,7 @@ var wrapObservable = async (observable) => {
 
 // packages/sdk/client-services/src/packlets/invitations/invitations-handler.ts
 var AbstractInvitationsHandler = class {
+  // prettier-ignore
   constructor(_networkManager) {
     this._networkManager = _networkManager;
   }
@@ -996,10 +1029,14 @@ var AbstractInvitationsHandler = class {
 
 // packages/sdk/client-services/src/packlets/invitations/halo-invitations-handler.ts
 var HaloInvitationsHandler = class extends AbstractInvitationsHandler {
+  // prettier-ignore
   constructor(networkManager, _identityManager) {
     super(networkManager);
     this._identityManager = _identityManager;
   }
+  /**
+  * Creates an invitation and listens for a join request from the invited (guest) peer.
+  */
   createInvitation(context, options) {
     var _a;
     const { type, timeout = INVITATION_TIMEOUT, swarmKey } = options != null ? options : {};
@@ -1055,6 +1092,7 @@ var HaloInvitationsHandler = class extends AbstractInvitationsHandler {
             status: import_invitations.AuthenticationResponse.Status.OK
           };
         },
+        // TODO(burdon): Not used: controlFeedKey, dataFeedKey.
         presentAdmissionCredentials: async (credentials) => {
           try {
             if (invitation.type !== import_services2.Invitation.Type.INTERACTIVE_TESTING) {
@@ -1139,6 +1177,11 @@ var HaloInvitationsHandler = class extends AbstractInvitationsHandler {
     });
     return observable;
   }
+  /**
+  * Waits for the host peer (inviter) to accept our join request.
+  * The local guest peer (invitee) then sends the local halo invitation to the host,
+  * which then writes the guest's credentials to the halo.
+  */
   acceptInvitation(invitation, options) {
     const { timeout = INVITATION_TIMEOUT } = options != null ? options : {};
     const ctx = new import_context2.Context({
@@ -1152,6 +1195,7 @@ var HaloInvitationsHandler = class extends AbstractInvitationsHandler {
       onCancel: async () => {
         await ctx.dispose();
       },
+      // TODO(burdon): Consider retry.
       onAuthenticate: async (code) => {
         authenticated.wake(code);
       }
@@ -1277,6 +1321,8 @@ var HostHaloInvitationExtension = class extends import_teleport.RpcExtension {
   }
   async getHandlers() {
     return {
+      // TODO(dmaretskyi): For now this is just forwarding the data to callbacks since we don't have session-specific logic.
+      // Perhaps in the future we will have more complex logic here.
       HaloHostService: {
         requestAdmission: async () => {
           return this._callbacks.requestAdmission();
@@ -1284,6 +1330,7 @@ var HostHaloInvitationExtension = class extends import_teleport.RpcExtension {
         authenticate: async (credentials) => {
           return this._callbacks.authenticate(credentials);
         },
+        // TODO(burdon): Not used: controlFeedKey, dataFeedKey.
         presentAdmissionCredentials: async (credentials) => {
           return this._callbacks.presentAdmissionCredentials(credentials);
         }
@@ -1319,6 +1366,7 @@ var import_async9 = require("@dxos/async");
 var import_log6 = require("@dxos/log");
 var import_services3 = require("@dxos/protocols/proto/dxos/client/services");
 var AbstractInvitationsProxy = class {
+  // prettier-ignore
   constructor(_invitationsService) {
     this._invitationsService = _invitationsService;
   }
@@ -1459,12 +1507,14 @@ var import_codec_protobuf8 = require("@dxos/codec-protobuf");
 var import_log7 = require("@dxos/log");
 var import_services4 = require("@dxos/protocols/proto/dxos/client/services");
 var AbstractInvitationsService = class {
+  // prettier-ignore
   constructor(_identityManager, _getInvitationsHandler) {
     this._identityManager = _identityManager;
     this._getInvitationsHandler = _getInvitationsHandler;
     this._createInvitations = /* @__PURE__ */ new Map();
     this._acceptInvitations = /* @__PURE__ */ new Map();
   }
+  // TODO(burdon): Guest/host label.
   getLoggingContext() {
     var _a;
     return {
@@ -1674,6 +1724,7 @@ var AbstractInvitationsService = class {
 
 // packages/sdk/client-services/src/packlets/invitations/halo-invitations-service.ts
 var HaloInvitationsServiceImpl = class extends AbstractInvitationsService {
+  // prettier-ignore
   constructor(identityManager, invitationsHandler) {
     super(identityManager, () => invitationsHandler);
     this.invitationsHandler = invitationsHandler;
@@ -1703,6 +1754,9 @@ var SpaceInvitationsHandler = class extends AbstractInvitationsHandler {
     this._signingContext = _signingContext;
     this._keyring = _keyring;
   }
+  /**
+  * Creates an invitation and listens for a join request from the invited (guest) peer.
+  */
   createInvitation(space, options) {
     let swarmConnection;
     const { type, timeout = INVITATION_TIMEOUT, swarmKey } = options != null ? options : {};
@@ -1726,8 +1780,8 @@ var SpaceInvitationsHandler = class extends AbstractInvitationsHandler {
     });
     let authenticationCode;
     let authenticationRetry = 0;
-    const complete = new import_async10.Trigger();
     const createExtension = () => {
+      const complete = new import_async10.Trigger();
       let guestProfile;
       const hostInvitationExtension = new HostSpaceInvitationExtension({
         introduce: async ({ profile }) => {
@@ -1738,7 +1792,7 @@ var SpaceInvitationsHandler = class extends AbstractInvitationsHandler {
             spaceKey: space.key
           }, {
             file: "space-invitations-handler.ts",
-            line: 98,
+            line: 97,
             scope: this,
             callSite: (f, a) => f(...a)
           });
@@ -1750,7 +1804,7 @@ var SpaceInvitationsHandler = class extends AbstractInvitationsHandler {
             authenticationCode: code
           }, {
             file: "space-invitations-handler.ts",
-            line: 112,
+            line: 111,
             scope: this,
             callSite: (f, a) => f(...a)
           });
@@ -1770,7 +1824,7 @@ var SpaceInvitationsHandler = class extends AbstractInvitationsHandler {
         },
         requestAdmission: async ({ identityKey, deviceKey, controlFeedKey, dataFeedKey }) => {
           try {
-            if (invitation.type !== import_services5.Invitation.Type.INTERACTIVE_TESTING) {
+            if (invitation.type !== import_services5.Invitation.Type.INTERACTIVE_TESTING && invitation.type !== import_services5.Invitation.Type.MULTIUSE_TESTING) {
               if (invitation.authenticationCode === void 0 || invitation.authenticationCode !== authenticationCode) {
                 throw new Error(`invalid authentication code: ${authenticationCode}`);
               }
@@ -1780,7 +1834,7 @@ var SpaceInvitationsHandler = class extends AbstractInvitationsHandler {
               guest: deviceKey
             }, {
               file: "space-invitations-handler.ts",
-              line: 136,
+              line: 138,
               scope: this,
               callSite: (f, a) => f(...a)
             });
@@ -1806,7 +1860,7 @@ var SpaceInvitationsHandler = class extends AbstractInvitationsHandler {
                 host: this._signingContext.deviceKey
               }, {
                 file: "space-invitations-handler.ts",
-                line: 170,
+                line: 172,
                 scope: this,
                 callSite: (f, a) => f(...a)
               });
@@ -1819,7 +1873,7 @@ var SpaceInvitationsHandler = class extends AbstractInvitationsHandler {
                 guest: deviceKey
               }, {
                 file: "space-invitations-handler.ts",
-                line: 173,
+                line: 175,
                 scope: this,
                 callSite: (f, a) => f(...a)
               });
@@ -1828,15 +1882,17 @@ var SpaceInvitationsHandler = class extends AbstractInvitationsHandler {
               if (!observable.cancelled) {
                 import_log8.log.error("failed", err, {
                   file: "space-invitations-handler.ts",
-                  line: 177,
+                  line: 179,
                   scope: this,
                   callSite: (f, a) => f(...a)
                 });
                 observable.callback.onError(err);
               }
             } finally {
-              await (0, import_async10.sleep)(ON_CLOSE_DELAY);
-              await ctx.dispose();
+              if (type !== import_services5.Invitation.Type.MULTIUSE_TESTING) {
+                await (0, import_async10.sleep)(ON_CLOSE_DELAY);
+                await ctx.dispose();
+              }
             }
           });
         }
@@ -1859,6 +1915,11 @@ var SpaceInvitationsHandler = class extends AbstractInvitationsHandler {
     });
     return observable;
   }
+  /**
+  * Waits for the host peer (inviter) to accept our join request.
+  * The local guest peer (invitee) then sends the local space invitation to the host,
+  * which then writes the guest's credentials to the space.
+  */
   acceptInvitation(invitation, options) {
     const { timeout = INVITATION_TIMEOUT } = options != null ? options : {};
     const ctx = new import_context3.Context({
@@ -1891,7 +1952,7 @@ var SpaceInvitationsHandler = class extends AbstractInvitationsHandler {
                 guest: this._signingContext.deviceKey
               }, {
                 file: "space-invitations-handler.ts",
-                line: 248,
+                line: 252,
                 scope: this,
                 callSite: (f, a) => f(...a)
               });
@@ -1900,7 +1961,7 @@ var SpaceInvitationsHandler = class extends AbstractInvitationsHandler {
                 guest: this._signingContext.deviceKey
               }, {
                 file: "space-invitations-handler.ts",
-                line: 252,
+                line: 256,
                 scope: this,
                 callSite: (f, a) => f(...a)
               });
@@ -1911,7 +1972,7 @@ var SpaceInvitationsHandler = class extends AbstractInvitationsHandler {
                 for (let attempt = 1; attempt <= MAX_OTP_ATTEMPTS; attempt++) {
                   (0, import_log8.log)("guest waiting for authentication code...", {}, {
                     file: "space-invitations-handler.ts",
-                    line: 261,
+                    line: 265,
                     scope: this,
                     callSite: (f, a) => f(...a)
                   });
@@ -1921,7 +1982,7 @@ var SpaceInvitationsHandler = class extends AbstractInvitationsHandler {
                   });
                   (0, import_log8.log)("sending authentication request", {}, {
                     file: "space-invitations-handler.ts",
-                    line: 265,
+                    line: 269,
                     scope: this,
                     callSite: (f, a) => f(...a)
                   });
@@ -1939,7 +2000,7 @@ var SpaceInvitationsHandler = class extends AbstractInvitationsHandler {
                         attempt
                       }, {
                         file: "space-invitations-handler.ts",
-                        line: 275,
+                        line: 279,
                         scope: this,
                         callSite: (f, a) => f(...a)
                       });
@@ -1954,7 +2015,7 @@ var SpaceInvitationsHandler = class extends AbstractInvitationsHandler {
                 guest: this._signingContext.deviceKey
               }, {
                 file: "space-invitations-handler.ts",
-                line: 286,
+                line: 290,
                 scope: this,
                 callSite: (f, a) => f(...a)
               });
@@ -1978,7 +2039,7 @@ var SpaceInvitationsHandler = class extends AbstractInvitationsHandler {
                 spaceKey: space.key
               }, {
                 file: "space-invitations-handler.ts",
-                line: 309,
+                line: 313,
                 scope: this,
                 callSite: (f, a) => f(...a)
               });
@@ -1987,7 +2048,7 @@ var SpaceInvitationsHandler = class extends AbstractInvitationsHandler {
               if (!observable.cancelled) {
                 import_log8.log.warn("auth failed", err, {
                   file: "space-invitations-handler.ts",
-                  line: 313,
+                  line: 317,
                   scope: this,
                   callSite: (f, a) => f(...a)
                 });
@@ -2033,6 +2094,8 @@ var HostSpaceInvitationExtension = class extends import_teleport2.RpcExtension {
   }
   async getHandlers() {
     return {
+      // TODO(dmaretskyi): For now this is just forwarding the data to callbacks since we don't have session-specific logic.
+      // Perhaps in the future we will have more complex logic here.
       SpaceHostService: {
         introduce: async (params) => {
           return this._callbacks.introduce(params);
@@ -2081,6 +2144,7 @@ var SpaceInvitationsProxy = class extends AbstractInvitationsProxy {
 // packages/sdk/client-services/src/packlets/invitations/space-invitations-service.ts
 var import_node_assert9 = __toESM(require("node:assert"));
 var SpaceInvitationsServiceImpl = class extends AbstractInvitationsService {
+  // prettier-ignore
   constructor(identityManager, invitationsHandler, _getSpaceManager) {
     super(identityManager, invitationsHandler);
     this.invitationsHandler = invitationsHandler;
@@ -2096,33 +2160,51 @@ var SpaceInvitationsServiceImpl = class extends AbstractInvitationsService {
 };
 
 // packages/sdk/client-services/src/packlets/services/service-context.ts
-var import_async12 = require("@dxos/async");
+var import_async13 = require("@dxos/async");
 var import_debug4 = require("@dxos/debug");
-var import_echo_db4 = require("@dxos/echo-db");
+var import_echo_db3 = require("@dxos/echo-db");
 var import_feed_store4 = require("@dxos/feed-store");
 var import_keyring = require("@dxos/keyring");
 var import_log10 = require("@dxos/log");
 
 // packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts
-var import_async11 = require("@dxos/async");
-var import_echo_db3 = require("@dxos/echo-db");
+var import_async12 = require("@dxos/async");
+var import_context5 = require("@dxos/context");
+var import_echo_db2 = require("@dxos/echo-db");
 var import_keys6 = require("@dxos/keys");
 var import_log9 = require("@dxos/log");
-var import_teleport_extension_presence2 = require("@dxos/teleport-extension-presence");
+var import_teleport_extension_presence = require("@dxos/teleport-extension-presence");
 var import_util4 = require("@dxos/util");
 
 // packages/sdk/client-services/src/packlets/spaces/data-space.ts
 var import_node_assert10 = __toESM(require("node:assert"));
+var import_async11 = require("@dxos/async");
 var import_context4 = require("@dxos/context");
-var import_echo_db2 = require("@dxos/echo-db");
-var DataSpace = class {
-  constructor(_inner, _modelFactory, _memberKey, _presence) {
-    this._inner = _inner;
-    this._modelFactory = _modelFactory;
-    this._memberKey = _memberKey;
-    this._presence = _presence;
+var import_echo_db = require("@dxos/echo-db");
+var __decorate = function(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
+    r = Reflect.decorate(decorators, target, key, desc);
+  else
+    for (var i = decorators.length - 1; i >= 0; i--)
+      if (d = decorators[i])
+        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var DataSpace = class DataSpace2 {
+  constructor(params) {
     this._ctx = new import_context4.Context();
-    this._dataPipelineController = new import_echo_db2.DataPipelineControllerImpl(_modelFactory, _memberKey, (feedKey) => _inner.spaceState.feeds.get(feedKey));
+    this._inner = params.inner;
+    this._presence = params.presence;
+    this._dataPipelineController = new import_echo_db.DataPipelineControllerImpl({
+      modelFactory: params.modelFactory,
+      metadataStore: params.metadataStore,
+      snapshotManager: params.snapshotManager,
+      memberKey: params.memberKey,
+      spaceKey: this._inner.key,
+      feedInfoProvider: (feedKey) => this._inner.spaceState.feeds.get(feedKey),
+      snapshotId: params.snapshotId
+    });
   }
   get key() {
     return this._inner.key;
@@ -2148,6 +2230,7 @@ var DataSpace = class {
   }
   async open() {
     await this._inner.open();
+    await this._inner.initDataPipeline(this._dataPipelineController);
   }
   async close() {
     await this._ctx.dispose();
@@ -2155,9 +2238,12 @@ var DataSpace = class {
     await this._presence.destroy();
   }
 };
+DataSpace = __decorate([
+  (0, import_async11.trackLeaks)("open", "close")
+], DataSpace);
 
 // packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts
-var __decorate = function(decorators, target, key, desc) {
+var __decorate2 = function(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2167,28 +2253,65 @@ var __decorate = function(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 };
-var DataSpaceManager = class {
-  constructor(_spaceManager, _metadataStore, _dataServiceSubscriptions, _keyring, _signingContext, _modelFactory) {
+var DataSpaceManager = class DataSpaceManager2 {
+  constructor(_spaceManager, _metadataStore, _dataServiceSubscriptions, _keyring, _signingContext, _modelFactory, _snapshotStore) {
     this._spaceManager = _spaceManager;
     this._metadataStore = _metadataStore;
     this._dataServiceSubscriptions = _dataServiceSubscriptions;
     this._keyring = _keyring;
     this._signingContext = _signingContext;
     this._modelFactory = _modelFactory;
-    this.updated = new import_async11.Event();
+    this._snapshotStore = _snapshotStore;
+    this._ctx = new import_context5.Context();
+    this.updated = new import_async12.Event();
     this._spaces = new import_util4.ComplexMap(import_keys6.PublicKey.hash);
   }
+  // TODO(burdon): Remove.
   get spaces() {
     return this._spaces;
   }
   async open() {
     await this._metadataStore.load();
+    (0, import_log9.log)("metadata loaded", {
+      spaces: this._metadataStore.spaces.length
+    }, {
+      file: "data-space-manager.ts",
+      line: 54,
+      scope: this,
+      callSite: (f, a) => f(...a)
+    });
     for (const spaceMetadata of this._metadataStore.spaces) {
-      await this._constructSpace(spaceMetadata);
+      (0, import_log9.log)("load space", {
+        spaceMetadata
+      }, {
+        file: "data-space-manager.ts",
+        line: 57,
+        scope: this,
+        callSite: (f, a) => f(...a)
+      });
+      const space = await this._constructSpace(spaceMetadata);
+      if (spaceMetadata.latestTimeframe) {
+        (0, import_log9.log)("waiting for latest timeframe", {
+          spaceMetadata
+        }, {
+          file: "data-space-manager.ts",
+          line: 60,
+          scope: this,
+          callSite: (f, a) => f(...a)
+        });
+        await space.dataPipelineController.waitUntilTimeframe(spaceMetadata.latestTimeframe);
+      }
     }
   }
   async close() {
+    await this._ctx.dispose();
+    for (const space of this._spaces.values()) {
+      await space.close();
+    }
   }
+  /**
+  * Creates a new space writing the genesis credentials to the control feed.
+  */
   async createSpace() {
     const spaceKey = await this._keyring.createKey();
     const controlFeedKey = await this._keyring.createKey();
@@ -2203,16 +2326,17 @@ var DataSpaceManager = class {
       spaceKey
     }, {
       file: "data-space-manager.ts",
-      line: 70,
+      line: 89,
       scope: this,
       callSite: (f, a) => f(...a)
     });
     const space = await this._constructSpace(metadata);
-    await (0, import_echo_db3.spaceGenesis)(this._keyring, this._signingContext, space.inner);
+    await (0, import_echo_db2.spaceGenesis)(this._keyring, this._signingContext, space.inner);
     await this._metadataStore.addSpace(metadata);
     this.updated.emit();
     return space;
   }
+  // TODO(burdon): Rename join space.
   async acceptSpace(opts) {
     const metadata = {
       key: opts.spaceKey,
@@ -2226,12 +2350,13 @@ var DataSpaceManager = class {
     return space;
   }
   async _constructSpace(metadata) {
-    const presence = new import_teleport_extension_presence2.Presence({
+    const presence = new import_teleport_extension_presence.Presence({
       localPeerId: this._signingContext.deviceKey,
       announceInterval: 1e3,
       offlineTimeout: 3e4,
       identityKey: this._signingContext.identityKey
     });
+    const snapshotManager = new import_echo_db2.SnapshotManager(this._snapshotStore);
     const space = await this._spaceManager.constructSpace({
       metadata,
       swarmIdentity: {
@@ -2239,43 +2364,66 @@ var DataSpaceManager = class {
         credentialProvider: this._signingContext.credentialProvider,
         credentialAuthenticator: this._signingContext.credentialAuthenticator
       },
-      dataPipelineControllerProvider: () => dataSpace.dataPipelineController,
-      presence
+      onNetworkConnection: (session) => {
+        session.addExtension("dxos.mesh.teleport.presence", presence.createExtension({
+          remotePeerId: session.remotePeerId
+        }));
+        session.addExtension("dxos.mesh.teleport.objectsync", snapshotManager.objectSync.createExtension());
+      }
     });
-    const dataSpace = new DataSpace(space, this._modelFactory, this._signingContext.identityKey, presence);
-    await space.open();
+    const dataSpace = new DataSpace({
+      inner: space,
+      modelFactory: this._modelFactory,
+      metadataStore: this._metadataStore,
+      snapshotManager,
+      presence,
+      memberKey: this._signingContext.identityKey,
+      snapshotId: metadata.snapshot
+    });
+    await dataSpace.open();
     this._dataServiceSubscriptions.registerSpace(space.key, dataSpace.database.createDataServiceHost());
     this._spaces.set(metadata.key, dataSpace);
     return dataSpace;
   }
 };
-__decorate([
-  import_async11.synchronized
+__decorate2([
+  import_async12.synchronized
 ], DataSpaceManager.prototype, "open", null);
-__decorate([
-  import_async11.synchronized
+__decorate2([
+  import_async12.synchronized
 ], DataSpaceManager.prototype, "close", null);
+__decorate2([
+  import_async12.synchronized
+], DataSpaceManager.prototype, "createSpace", null);
+__decorate2([
+  import_async12.synchronized
+], DataSpaceManager.prototype, "acceptSpace", null);
+DataSpaceManager = __decorate2([
+  (0, import_async12.trackLeaks)("open", "close")
+], DataSpaceManager);
 
 // packages/sdk/client-services/src/packlets/services/service-context.ts
 var ServiceContext = class {
+  // prettier-ignore
   constructor(storage, networkManager, modelFactory) {
     this.storage = storage;
     this.networkManager = networkManager;
     this.modelFactory = modelFactory;
-    this.initialized = new import_async12.Trigger();
-    this.dataServiceSubscriptions = new import_echo_db4.DataServiceSubscriptions();
-    this.metadataStore = new import_echo_db4.MetadataStore(storage.createDirectory("metadata"));
+    this.initialized = new import_async13.Trigger();
+    this.dataServiceSubscriptions = new import_echo_db3.DataServiceSubscriptions();
+    this.metadataStore = new import_echo_db3.MetadataStore(storage.createDirectory("metadata"));
+    this.snapshotStore = new import_echo_db3.SnapshotStore(storage.createDirectory("snapshots"));
     this.keyring = new import_keyring.Keyring(storage.createDirectory("keyring"));
     this.feedStore = new import_feed_store4.FeedStore({
       factory: new import_feed_store4.FeedFactory({
         root: storage.createDirectory("feeds"),
         signer: this.keyring,
         hypercore: {
-          valueEncoding: import_echo_db4.valueEncoding
+          valueEncoding: import_echo_db3.valueEncoding
         }
       })
     });
-    this.spaceManager = new import_echo_db4.SpaceManager({
+    this.spaceManager = new import_echo_db3.SpaceManager({
       feedStore: this.feedStore,
       networkManager: this.networkManager
     });
@@ -2285,10 +2433,11 @@ var ServiceContext = class {
   async open() {
     (0, import_log10.log)("opening...", {}, {
       file: "service-context.ts",
-      line: 81,
+      line: 85,
       scope: this,
       callSite: (f, a) => f(...a)
     });
+    await this.networkManager.open();
     await this.spaceManager.open();
     await this.identityManager.open();
     if (this.identityManager.identity) {
@@ -2296,7 +2445,7 @@ var ServiceContext = class {
     }
     (0, import_log10.log)("opened", {}, {
       file: "service-context.ts",
-      line: 87,
+      line: 92,
       scope: this,
       callSite: (f, a) => f(...a)
     });
@@ -2305,7 +2454,7 @@ var ServiceContext = class {
     var _a;
     (0, import_log10.log)("closing...", {}, {
       file: "service-context.ts",
-      line: 91,
+      line: 96,
       scope: this,
       callSite: (f, a) => f(...a)
     });
@@ -2317,7 +2466,7 @@ var ServiceContext = class {
     this.dataServiceSubscriptions.clear();
     (0, import_log10.log)("closed", {}, {
       file: "service-context.ts",
-      line: 98,
+      line: 103,
       scope: this,
       callSite: (f, a) => f(...a)
     });
@@ -2325,7 +2474,7 @@ var ServiceContext = class {
   async reset() {
     (0, import_log10.log)("resetting...", {}, {
       file: "service-context.ts",
-      line: 102,
+      line: 107,
       scope: this,
       callSite: (f, a) => f(...a)
     });
@@ -2333,7 +2482,7 @@ var ServiceContext = class {
     await this.storage.reset();
     (0, import_log10.log)("reset", {}, {
       file: "service-context.ts",
-      line: 105,
+      line: 110,
       scope: this,
       callSite: (f, a) => f(...a)
     });
@@ -2343,18 +2492,25 @@ var ServiceContext = class {
     await this._initialize();
     return identity;
   }
+  // Called when identity is created.
   async _initialize() {
     var _a;
+    (0, import_log10.log)("initializing spaces...", {}, {
+      file: "service-context.ts",
+      line: 122,
+      scope: this,
+      callSite: (f, a) => f(...a)
+    });
     const identity = (_a = this.identityManager.identity) != null ? _a : (0, import_debug4.failUndefined)();
     const signingContext = {
-      credentialProvider: import_echo_db4.MOCK_AUTH_PROVIDER,
-      credentialAuthenticator: import_echo_db4.MOCK_AUTH_VERIFIER,
+      credentialProvider: import_echo_db3.MOCK_AUTH_PROVIDER,
+      credentialAuthenticator: import_echo_db3.MOCK_AUTH_VERIFIER,
       credentialSigner: identity.getIdentityCredentialSigner(),
       identityKey: identity.identityKey,
       deviceKey: identity.deviceKey,
       profile: identity.profileDocument
     };
-    this.dataSpaceManager = new DataSpaceManager(this.spaceManager, this.metadataStore, this.dataServiceSubscriptions, this.keyring, signingContext, this.modelFactory);
+    this.dataSpaceManager = new DataSpaceManager(this.spaceManager, this.metadataStore, this.dataServiceSubscriptions, this.keyring, signingContext, this.modelFactory, this.snapshotStore);
     await this.dataSpaceManager.open();
     this.spaceInvitations = new SpaceInvitationsHandler(this.networkManager, this.dataSpaceManager, signingContext, this.keyring);
     this.initialized.wake();
@@ -2369,6 +2525,8 @@ var clientServiceBundle = (0, import_rpc.createServiceBundle)({
   DevicesService: import_protocols5.schema.getService("dxos.client.services.DevicesService"),
   SpaceInvitationsService: import_protocols5.schema.getService("dxos.client.services.SpaceInvitationsService"),
   SpacesService: import_protocols5.schema.getService("dxos.client.services.SpacesService"),
+  NetworkService: import_protocols5.schema.getService("dxos.client.services.NetworkService"),
+  // TODO(burdon): Deprecated.
   SpaceService: import_protocols5.schema.getService("dxos.client.SpaceService"),
   DataService: import_protocols5.schema.getService("dxos.echo.service.DataService"),
   ProfileService: import_protocols5.schema.getService("dxos.client.ProfileService"),
@@ -2378,7 +2536,7 @@ var clientServiceBundle = (0, import_rpc.createServiceBundle)({
 });
 
 // packages/sdk/client-services/src/packlets/services/service-host.ts
-var import_debug5 = require("@dxos/debug");
+var import_debug6 = require("@dxos/debug");
 var import_echo_db5 = require("@dxos/echo-db");
 var import_log11 = require("@dxos/log");
 var import_model_factory = require("@dxos/model-factory");
@@ -2386,7 +2544,7 @@ var import_object_model = require("@dxos/object-model");
 var import_text_model = require("@dxos/text-model");
 
 // packages/sdk/client-services/src/packlets/identity/devices-service-impl.ts
-var import_async13 = require("@dxos/async");
+var import_async14 = require("@dxos/async");
 var import_codec_protobuf9 = require("@dxos/codec-protobuf");
 var DevicesServiceImpl = class {
   constructor(_identityManager) {
@@ -2412,7 +2570,7 @@ var DevicesServiceImpl = class {
           });
         }
       };
-      const dispose = new import_async13.EventSubscriptions();
+      const dispose = new import_async14.EventSubscriptions();
       dispose.add(this._identityManager.stateUpdate.on(() => {
         update();
         if (this._identityManager.identity) {
@@ -2427,8 +2585,37 @@ var DevicesServiceImpl = class {
   }
 };
 
+// packages/sdk/client-services/src/packlets/network/network-service.ts
+var import_codec_protobuf10 = require("@dxos/codec-protobuf");
+var NetworkServiceImpl = class {
+  constructor(networkManager) {
+    this.networkManager = networkManager;
+  }
+  subscribeToNetworkStatus() {
+    return new import_codec_protobuf10.Stream(({ next }) => {
+      const unsubscribe = this.networkManager.connectionStateChanged.on((state) => next({
+        state
+      }));
+      next({
+        state: this.networkManager.connectionState
+      });
+      return unsubscribe;
+    });
+  }
+  async setNetworkOptions(request) {
+    await this.networkManager.setConnectionState(request.state);
+  }
+};
+
 // packages/sdk/client-services/src/packlets/spaces/spaces-service.ts
+var import_async15 = require("@dxos/async");
+var import_codec_protobuf11 = require("@dxos/codec-protobuf");
+var import_debug5 = require("@dxos/debug");
+var import_echo_db4 = require("@dxos/echo-db");
 var SpacesServiceImpl = class {
+  constructor(_spaceManager) {
+    this._spaceManager = _spaceManager;
+  }
   async createSpace() {
     throw new Error();
   }
@@ -2438,16 +2625,25 @@ var SpacesServiceImpl = class {
   queryMembers(query) {
     throw new Error();
   }
+  queryCredentials({ spaceKey }) {
+    return new import_codec_protobuf11.Stream(({ ctx, next }) => {
+      var _a;
+      const space = (_a = this._spaceManager.spaces.get(spaceKey)) != null ? _a : (0, import_debug5.raise)(new import_echo_db4.SpaceNotFoundError(spaceKey));
+      const processor = space.spaceState.registerProcessor({
+        process: async (credential) => {
+          next(credential);
+        }
+      });
+      ctx.onDispose(() => processor.close());
+      (0, import_async15.scheduleTask)(ctx, () => processor.open());
+    });
+  }
 };
 
 // packages/sdk/client-services/src/packlets/storage/storage.ts
-var import_jsondown = __toESM(require("jsondown"));
-var import_level_js = __toESM(require("level-js"));
-var import_memdown = __toESM(require("memdown"));
 var import_errors = require("@dxos/errors");
 var import_config = require("@dxos/protocols/proto/dxos/config");
 var import_random_access_storage = require("@dxos/random-access-storage");
-var import_util5 = require("@dxos/util");
 var StorageDriver = import_config.Runtime.Client.Storage.StorageDriver;
 var createStorageObjects = (config) => {
   const { path = "dxos/storage", storageType, keyStorage, persistent = false } = config != null ? config : {};
@@ -2467,23 +2663,9 @@ var createStorageObjects = (config) => {
     storage: (0, import_random_access_storage.createStorage)({
       type: persistent ? toStorageType(storageType) : import_random_access_storage.StorageType.RAM,
       root: `${path}/`
-    }),
-    keyStorage: createKeyStorage(`${path}/keystore`, persistent ? toKeyStorageType(keyStorage) : "ram")
+    })
   };
 };
-var createKeyStorage = (path, type) => {
-  const defaultedType = type != null ? type : (0, import_util5.isNode)() ? "jsondown" : "leveljs";
-  switch (defaultedType) {
-    case "leveljs":
-      return (0, import_level_js.default)(path);
-    case "jsondown":
-      return (0, import_jsondown.default)(path);
-    case "ram":
-      return (0, import_memdown.default)();
-    default:
-      throw new import_errors.InvalidConfigError(`Invalid key storage type: ${defaultedType}`);
-  }
-};
 var toStorageType = (type) => {
   switch (type) {
     case void 0:
@@ -2502,23 +2684,10 @@ var toStorageType = (type) => {
       throw new Error(`Invalid storage type: ${StorageDriver[type]}`);
   }
 };
-var toKeyStorageType = (type) => {
-  switch (type) {
-    case void 0:
-      return void 0;
-    case StorageDriver.RAM:
-      return "ram";
-    case StorageDriver.LEVELJS:
-      return "leveljs";
-    case StorageDriver.JSONDOWN:
-      return "jsondown";
-    default:
-      throw new Error(`Invalid key storage type: ${StorageDriver[type]}`);
-  }
-};
 
 // packages/sdk/client-services/src/packlets/services/service-registry.ts
 var ServiceRegistry = class {
+  // prettier-ignore
   constructor(_serviceBundle, _handlers) {
     this._serviceBundle = _serviceBundle;
     this._handlers = _handlers;
@@ -2539,11 +2708,14 @@ var ClientServicesHost = class {
   constructor({
     config,
     modelFactory = createDefaultModelFactory(),
-    networkManager
+    // TODO(burdon): Create ApolloLink abstraction (see Client).
+    networkManager,
+    storage = createStorageObjects(config.get("runtime.client.storage", {})).storage
   }) {
     this._config = config;
     this._modelFactory = modelFactory;
     this._networkManager = networkManager;
+    this._storage = storage;
   }
   get descriptors() {
     return this._serviceRegistry.descriptors;
@@ -2553,23 +2725,20 @@ var ClientServicesHost = class {
   }
   async open() {
     var _a;
-    await this._initialize();
-    const deviceKey = (_a = this._serviceContext.identityManager.identity) == null ? void 0 : _a.deviceKey;
-    (0, import_log11.log)("opening...", {
-      deviceKey
-    }, {
+    (0, import_log11.log)("opening...", {}, {
       file: "service-host.ts",
-      line: 69,
+      line: 73,
       scope: this,
       callSite: (f, a) => f(...a)
     });
     await this._initialize();
     await this._serviceContext.open();
+    const deviceKey = (_a = this._serviceContext.identityManager.identity) == null ? void 0 : _a.deviceKey;
     (0, import_log11.log)("opened", {
       deviceKey
     }, {
       file: "service-host.ts",
-      line: 72,
+      line: 77,
       scope: this,
       callSite: (f, a) => f(...a)
     });
@@ -2581,7 +2750,7 @@ var ClientServicesHost = class {
       deviceKey
     }, {
       file: "service-host.ts",
-      line: 77,
+      line: 82,
       scope: this,
       callSite: (f, a) => f(...a)
     });
@@ -2590,26 +2759,28 @@ var ClientServicesHost = class {
       deviceKey
     }, {
       file: "service-host.ts",
-      line: 79,
+      line: 84,
       scope: this,
       callSite: (f, a) => f(...a)
     });
   }
+  // TODO(burdon): Move into open.
   async _initialize() {
-    const { storage } = createStorageObjects(this._config.get("runtime.client.storage", {}));
-    this._serviceContext = new ServiceContext(storage, this._networkManager, this._modelFactory);
+    this._serviceContext = new ServiceContext(this._storage, this._networkManager, this._modelFactory);
     this._serviceRegistry = new ServiceRegistry(clientServiceBundle, {
       HaloInvitationsService: new HaloInvitationsServiceImpl(this._serviceContext.identityManager, this._serviceContext.haloInvitations),
       DevicesService: new DevicesServiceImpl(this._serviceContext.identityManager),
       SpaceInvitationsService: new SpaceInvitationsServiceImpl(this._serviceContext.identityManager, () => {
         var _a;
-        return (_a = this._serviceContext.spaceInvitations) != null ? _a : (0, import_debug5.raise)(new Error("SpaceInvitations not initialized"));
+        return (_a = this._serviceContext.spaceInvitations) != null ? _a : (0, import_debug6.raise)(new Error("SpaceInvitations not initialized"));
       }, () => {
         var _a;
-        return (_a = this._serviceContext.dataSpaceManager) != null ? _a : (0, import_debug5.raise)(new Error("SpaceManager not initialized"));
+        return (_a = this._serviceContext.dataSpaceManager) != null ? _a : (0, import_debug6.raise)(new Error("SpaceManager not initialized"));
       }),
-      SpacesService: new SpacesServiceImpl(),
+      SpacesService: new SpacesServiceImpl(this._serviceContext.spaceManager),
       DataService: new import_echo_db5.DataServiceImpl(this._serviceContext.dataServiceSubscriptions),
+      NetworkService: new NetworkServiceImpl(this._serviceContext.networkManager),
+      // TODO(burdon): Move to new protobuf definitions.
       ProfileService: new ProfileServiceImpl(this._serviceContext),
       SpaceService: new SpaceServiceImpl(this._serviceContext),
       SystemService: new SystemServiceImpl(this._config, this._serviceContext),
@@ -2624,10 +2795,11 @@ var ClientServicesHost = class {
 };
 
 // packages/sdk/client-services/src/packlets/services/service-proxy.ts
-var import_async14 = require("@dxos/async");
+var import_async16 = require("@dxos/async");
 var import_errors2 = require("@dxos/errors");
 var import_rpc2 = require("@dxos/rpc");
 var ClientServicesProxy = class {
+  // prettier-ignore
   constructor(port, _timeout = 3e4) {
     this._timeout = _timeout;
     this._proxy = (0, import_rpc2.createProtoRpcPeer)({
@@ -2647,7 +2819,7 @@ var ClientServicesProxy = class {
     return this._proxy.rpc;
   }
   async open() {
-    await (0, import_async14.asyncTimeout)(this._proxy.open(), this._timeout, new import_errors2.RemoteServiceConnectionTimeout());
+    await (0, import_async16.asyncTimeout)(this._proxy.open(), this._timeout, new import_errors2.RemoteServiceConnectionTimeout());
   }
   async close() {
     await this._proxy.close();
@@ -2704,17 +2876,17 @@ var IFrameRuntime = class {
 };
 
 // packages/sdk/client-services/src/packlets/vault/worker-runtime.ts
-var import_async16 = require("@dxos/async");
+var import_async18 = require("@dxos/async");
 var import_messaging = require("@dxos/messaging");
 var import_network_manager4 = require("@dxos/network-manager");
 
 // packages/sdk/client-services/src/packlets/vault/worker-session.ts
 var import_node_assert11 = __toESM(require("node:assert"));
-var import_async15 = require("@dxos/async");
+var import_async17 = require("@dxos/async");
 var import_log12 = require("@dxos/log");
 var import_rpc4 = require("@dxos/rpc");
-var import_util6 = require("@dxos/util");
-var __decorate2 = function(decorators, target, key, desc) {
+var import_util5 = require("@dxos/util");
+var __decorate3 = function(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2728,8 +2900,8 @@ var WorkerSession = class {
   constructor({ getServices, systemPort, appPort, options = {
     heartbeatInterval: 1e3
   } }) {
-    this._startTrigger = new import_async15.Trigger();
-    this.onClose = new import_util6.Callback();
+    this._startTrigger = new import_async17.Trigger();
+    this.onClose = new import_util5.Callback();
     (0, import_node_assert11.default)(options);
     (0, import_node_assert11.default)(getServices);
     this._options = options;
@@ -2741,6 +2913,7 @@ var WorkerSession = class {
         DevicesService: async () => (await this._getServices()).services.DevicesService,
         SpaceInvitationsService: async () => (await this._getServices()).services.SpaceInvitationsService,
         SpacesService: async () => (await this._getServices()).services.SpacesService,
+        NetworkService: async () => (await this._getServices()).services.NetworkService,
         SpaceService: async () => (await this._getServices()).services.SpaceService,
         DataService: async () => (await this._getServices()).services.DataService,
         ProfileService: async () => (await this._getServices()).services.ProfileService,
@@ -2766,7 +2939,7 @@ var WorkerSession = class {
               } catch (err) {
                 import_log12.log.catch(err, {}, {
                   file: "worker-session.ts",
-                  line: 89,
+                  line: 90,
                   scope: this,
                   callSite: (f, a) => f(...a)
                 });
@@ -2777,13 +2950,14 @@ var WorkerSession = class {
       },
       port: systemPort,
       timeout: 1e3
+      // With low timeout heartbeat may fail if the tab's thread is saturated.
     });
     this.bridgeService = this._iframeRpc.rpc.BridgeService;
   }
   async open() {
     import_log12.log.info("opening..", {}, {
       file: "worker-session.ts",
-      line: 103,
+      line: 104,
       scope: this,
       callSite: (f, a) => f(...a)
     });
@@ -2802,7 +2976,7 @@ var WorkerSession = class {
           err: err1
         }, {
           file: "worker-session.ts",
-          line: 115,
+          line: 116,
           scope: this,
           callSite: (f, a) => f(...a)
         });
@@ -2811,7 +2985,7 @@ var WorkerSession = class {
         } catch (err) {
           import_log12.log.catch(err, {}, {
             file: "worker-session.ts",
-            line: 119,
+            line: 120,
             scope: this,
             callSite: (f, a) => f(...a)
           });
@@ -2822,7 +2996,7 @@ var WorkerSession = class {
   async close() {
     import_log12.log.info("closing..", {}, {
       file: "worker-session.ts",
-      line: 126,
+      line: 127,
       scope: this,
       callSite: (f, a) => f(...a)
     });
@@ -2831,7 +3005,7 @@ var WorkerSession = class {
     } catch (err) {
       import_log12.log.catch(err, {}, {
         file: "worker-session.ts",
-        line: 130,
+        line: 131,
         scope: this,
         callSite: (f, a) => f(...a)
       });
@@ -2845,16 +3019,17 @@ var WorkerSession = class {
     ]);
   }
 };
-__decorate2([
+__decorate3([
   import_log12.logInfo
 ], WorkerSession.prototype, "origin", void 0);
 
 // packages/sdk/client-services/src/packlets/vault/worker-runtime.ts
 var WorkerRuntime = class {
+  // prettier-ignore
   constructor(_configProvider) {
     this._configProvider = _configProvider;
     this._transportFactory = new import_network_manager4.WebRTCTransportProxyFactory();
-    this._ready = new import_async16.Trigger();
+    this._ready = new import_async18.Trigger();
     this.sessions = /* @__PURE__ */ new Set();
   }
   async start() {
@@ -2880,6 +3055,9 @@ var WorkerRuntime = class {
   async stop() {
     await this._clientServices.close();
   }
+  /**
+  * Create a new session.
+  */
   async createSession({ appPort, systemPort }) {
     const session = new WorkerSession({
       getServices: async () => {
@@ -2901,6 +3079,9 @@ var WorkerRuntime = class {
     this.sessions.add(session);
     this._reconnectWebrtc();
   }
+  /**
+  * Selects one of the existing session fro WebRTC networking.
+  */
   _reconnectWebrtc() {
     if (this._sessionForNetworking) {
       if (!this.sessions.has(this._sessionForNetworking)) {