@dxos/client-services 0.1.22 → 0.1.24-next.6b1f434

package/dist/lib/browser/index.mjs

@@ -1,3027 +1,59 @@
 import "@dxos/node-std/globals"
-
-// packages/sdk/client-services/src/packlets/deprecated/space.ts
-import assert from "@dxos/node-std/assert";
-import { EventSubscriptions } from "@dxos/async";
-import { Stream } from "@dxos/codec-protobuf";
-import { todo } from "@dxos/debug";
-import { log } from "@dxos/log";
-import { SpaceMember } from "@dxos/protocols/proto/dxos/client";
-import { humanize } from "@dxos/util";
-var SpaceServiceImpl = class {
-  constructor(serviceContext) {
-    this.serviceContext = serviceContext;
-    this.inviteeInvitations = /* @__PURE__ */ new Map();
-  }
-  subscribeToSpace(request) {
-    return new Stream(({ next }) => {
-      next({
-        space: {
-          publicKey: request.spaceKey,
-          isOpen: true,
-          isActive: true,
-          members: []
-        }
-      });
-    });
-  }
-  subscribeSpaces() {
-    return new Stream(({ next }) => {
-      const subscriptions = new EventSubscriptions();
-      const onUpdate = () => {
-        const spaces = Array.from(this.serviceContext.dataSpaceManager.spaces.values()).map((space) => ({
-          publicKey: space.key,
-          isOpen: true,
-          isActive: true,
-          members: Array.from(space.inner.spaceState.members.values()).map((member) => {
-            var _a, _b, _c;
-            return {
-              identityKey: member.key,
-              profile: {
-                identityKey: member.key,
-                displayName: (_b = (_a = member.assertion.profile) == null ? void 0 : _a.displayName) != null ? _b : humanize(member.key)
-              },
-              presence: ((_c = this.serviceContext.identityManager.identity) == null ? void 0 : _c.identityKey.equals(member.key)) || space.presence.getPeersOnline().filter(({ identityKey }) => identityKey.equals(member.key)).length > 0 ? SpaceMember.PresenceState.ONLINE : SpaceMember.PresenceState.OFFLINE
-            };
-          })
-        }));
-        log("update", {
-          spaces
-        }, {
-          file: "space.ts",
-          line: 120,
-          scope: this,
-          callSite: (f, a) => f(...a)
-        });
-        next({
-          spaces
-        });
-      };
-      setTimeout(async () => {
-        if (!this.serviceContext.dataSpaceManager) {
-          next({
-            spaces: []
-          });
-        }
-        await this.serviceContext.initialized.wait();
-        subscriptions.add(this.serviceContext.dataSpaceManager.updated.on(() => {
-          this.serviceContext.dataSpaceManager.spaces.forEach((space) => {
-            subscriptions.add(space.stateUpdate.on(onUpdate));
-            subscriptions.add(space.presence.updated.on(onUpdate));
-          });
-          onUpdate();
-        }));
-        this.serviceContext.dataSpaceManager.spaces.forEach((space) => {
-          subscriptions.add(space.stateUpdate.on(onUpdate));
-          subscriptions.add(space.presence.updated.on(onUpdate));
-        });
-        onUpdate();
-      });
-      return () => subscriptions.clear();
-    });
-  }
-  async getSpaceDetails(request) {
-    return todo();
-  }
-  async createSpace() {
-    await this.serviceContext.initialized.wait();
-    const space = await this.serviceContext.dataSpaceManager.createSpace();
-    return {
-      publicKey: space.key,
-      isOpen: true,
-      isActive: true
-    };
-  }
-  async cloneSpace(snapshot) {
-    return todo();
-  }
-  async setSpaceState(request) {
-    return todo();
-  }
-  async authenticateInvitation(request) {
-    var _a;
-    assert(request.processId, "Process ID is missing.");
-    const invitation = this.inviteeInvitations.get(request.processId);
-    assert(invitation, "Invitation not found.");
-    assert(request.secret, "Secret not provided.");
-    invitation.secret = request.secret;
-    (_a = invitation.secretTrigger) == null ? void 0 : _a.call(invitation);
-  }
-  subscribeMembers(request) {
-    return todo();
-  }
-  async createSnapshot(request) {
-    return todo();
-  }
-};
-
-// packages/sdk/client-services/src/packlets/deprecated/profile.ts
-import { Stream as Stream2 } from "@dxos/codec-protobuf";
-import { todo as todo2 } from "@dxos/debug";
-var ProfileServiceImpl = class {
-  constructor(context) {
-    this.context = context;
-    this.inviteeInvitations = /* @__PURE__ */ new Map();
-  }
-  subscribeProfile() {
-    return new Stream2(({ next }) => {
-      const emitNext = () => {
-        var _a;
-        return next({
-          profile: this.context.identityManager.identity ? {
-            identityKey: this.context.identityManager.identity.identityKey,
-            deviceKey: this.context.identityManager.identity.deviceKey,
-            displayName: (_a = this.context.identityManager.identity.profileDocument) == null ? void 0 : _a.displayName
-          } : void 0
-        });
-      };
-      emitNext();
-      return this.context.identityManager.stateUpdate.on(emitNext);
-    });
-  }
-  async createProfile(request) {
-    var _a;
-    await this.context.createIdentity({
-      displayName: request.displayName
-    });
-    return {
-      identityKey: this.context.identityManager.identity.identityKey,
-      deviceKey: this.context.identityManager.identity.deviceKey,
-      displayName: (_a = this.context.identityManager.identity.profileDocument) == null ? void 0 : _a.displayName
-    };
-  }
-  async recoverProfile(request) {
-    return todo2();
-    if (!request.seedPhrase) {
-      throw new Error("Recovery SeedPhrase not provided.");
-    }
-  }
-};
-
-// packages/sdk/client-services/src/packlets/deprecated/system.ts
-var SystemServiceImpl = class {
-  constructor(_config, _serviceContext) {
-    this._config = _config;
-    this._serviceContext = _serviceContext;
-  }
-  // TODO(burdon): Remove.
-  async initSession() {
-  }
-  async getConfig(request) {
-    return this._config.values;
-  }
-  // TODO(burdon): Connect to iframe RPC heartbeat for network status?
-  async getStatus(request) {
-    return {
-      message: `ok: ${Date.now()}`
-    };
-  }
-  async reset(request) {
-    await this._serviceContext.reset();
-  }
-};
-
-// packages/sdk/client-services/src/packlets/deprecated/tracing.ts
-var TracingServiceImpl = class {
-  constructor(_config) {
-    this._config = _config;
-  }
-  async setTracingOptions() {
-    throw new Error("Tracing not available.");
-  }
-  subscribeToRpcTrace() {
-    throw new Error("Tracing not available.");
-  }
-};
-
-// packages/sdk/client-services/src/packlets/devtools/devtools.ts
-import { Event as AsyncEvent } from "@dxos/async";
-import { Stream as Stream7 } from "@dxos/codec-protobuf";
-
-// packages/sdk/client-services/src/packlets/devtools/feeds.ts
-import { EventSubscriptions as EventSubscriptions2 } from "@dxos/async";
-import { Stream as Stream3 } from "@dxos/codec-protobuf";
-import { FeedIterator } from "@dxos/feed-store";
-import { PublicKey } from "@dxos/keys";
-import { ComplexMap } from "@dxos/util";
-var subscribeToFeeds = ({ feedStore }, { feedKeys }) => new Stream3(({ next }) => {
-  if ((feedKeys == null ? void 0 : feedKeys.length) === 0) {
-    return;
-  }
-  const feedMap = new ComplexMap(PublicKey.hash);
-  const subscriptions = new EventSubscriptions2();
-  const update = () => {
-    const feeds = feedStore.feeds;
-    feeds.filter((feed) => !(feedKeys == null ? void 0 : feedKeys.length) || feedKeys.some((feedKey) => feedKey.equals(feed.key))).forEach((feed) => {
-      if (!feedMap.has(feed.key)) {
-        feedMap.set(feed.key, feed);
-        feed.on("close", update);
-        subscriptions.add(feed.off("close", update));
-      }
-    });
-    next({
-      feeds: Array.from(feedMap.values()).map((feed) => ({
-        feedKey: feed.key,
-        length: feed.properties.length
-      }))
-    });
-  };
-  subscriptions.add(feedStore.feedOpened.on(update));
-  update();
-  return () => {
-    subscriptions.clear();
-  };
-});
-var subscribeToFeedBlocks = ({ feedStore }, { feedKey, maxBlocks = 10 }) => new Stream3(({ next }) => {
-  if (!feedKey) {
-    return;
-  }
-  const subscriptions = new EventSubscriptions2();
-  const timeout = setTimeout(async () => {
-    const feed = feedStore.getFeed(feedKey);
-    if (!feed) {
-      return;
-    }
-    const update = async () => {
-      const iterator = new FeedIterator(feed);
-      await iterator.open();
-      const blocks = [];
-      for await (const block of iterator) {
-        blocks.push(block);
-        if (blocks.length >= feed.properties.length) {
-          break;
-        }
-      }
-      next({
-        blocks: blocks.slice(-maxBlocks)
-      });
-      await iterator.close();
-    };
-    feed.on("append", update);
-    subscriptions.add(() => feed.off("append", update));
-    feed.on("truncate", update);
-    subscriptions.add(() => feed.off("truncate", update));
-    await update();
-  });
-  return () => {
-    subscriptions.clear();
-    clearTimeout(timeout);
-  };
-});
-
-// packages/sdk/client-services/src/packlets/devtools/keys.ts
-import { Stream as Stream4 } from "@dxos/codec-protobuf";
-var subscribeToKeyringKeys = ({ keyring }) => new Stream4(({ next }) => {
-  const update = () => {
-    next({
-      keys: keyring.list()
-    });
-  };
-  const unsubscribe = keyring.keysUpdate.on(update);
-  update();
-  return unsubscribe;
-});
-
-// packages/sdk/client-services/src/packlets/devtools/network.ts
-import { Stream as Stream5 } from "@dxos/codec-protobuf";
-import { PublicKey as PublicKey2 } from "@dxos/keys";
-var subscribeToNetworkStatus = ({ networkManager }) => new Stream5(({ next, close }) => {
-  const update = () => {
-    try {
-      const status = networkManager.signalManager.getStatus();
-      next({
-        servers: status
-      });
-    } catch (err) {
-      close(err);
-    }
-  };
-  networkManager.signalManager.statusChanged.on(update);
-  update();
-});
-var subscribeToSignalTrace = ({ networkManager }) => new Stream5(({ next }) => {
-  next({
-    events: []
-  });
-  const trace = [];
-  networkManager.signalManager.commandTrace.on((msg) => {
-    trace.push(msg);
-    next({
-      events: trace.map((msg2) => JSON.stringify(msg2))
-    });
-  });
-});
-var subscribeToNetworkTopics = ({ networkManager }) => new Stream5(({ next, close }) => {
-  const update = () => {
-    try {
-      const topics = networkManager.topics;
-      const labeledTopics = topics.map((topic) => {
-        var _a, _b;
-        return {
-          topic,
-          label: (_b = (_a = networkManager.getSwarm(topic)) == null ? void 0 : _a.label) != null ? _b : topic.toHex()
-        };
-      });
-      next({
-        topics: labeledTopics
-      });
-    } catch (err) {
-      close(err);
-    }
-  };
-  networkManager.topicsUpdated.on(update);
-  update();
-});
-var subscribeToSwarmInfo = ({ networkManager }) => new Stream5(({ next }) => {
-  var _a;
-  const update = () => {
-    var _a2;
-    const info = (_a2 = networkManager.connectionLog) == null ? void 0 : _a2.swarms;
-    if (info) {
-      next({
-        data: info
-      });
-    }
-  };
-  (_a = networkManager.connectionLog) == null ? void 0 : _a.update.on(update);
-  update();
-});
-var getNetworkPeers = ({ networkManager }, request) => {
-  if (!request.topic) {
-    throw new Error("Expected a network topic");
-  }
-  const map = networkManager.getSwarmMap(PublicKey2.from(request.topic));
-  return {
-    peers: map == null ? void 0 : map.peers.map((peer) => ({
-      ...peer,
-      connections: peer.connections.map((connection) => connection.asUint8Array())
-    }))
-  };
-};
-
-// packages/sdk/client-services/src/packlets/devtools/spaces.ts
-import { Stream as Stream6 } from "@dxos/codec-protobuf";
-var subscribeToSpaces = (context, { spaceKeys = [] }) => new Stream6(({ next }) => {
-  let unsubscribe;
-  const update = async () => {
-    const spaces = [
-      ...context.spaceManager.spaces.values()
-    ];
-    const filteredSpaces = spaces.filter((space) => !(spaceKeys == null ? void 0 : spaceKeys.length) || spaceKeys.some((spaceKey) => spaceKey.equals(space.key)));
-    next({
-      spaces: filteredSpaces.map((space) => {
-        const spaceMetadata = context.metadataStore.spaces.find((spaceMetadata2) => spaceMetadata2.key.equals(space.key));
-        return {
-          key: space.key,
-          isOpen: space.isOpen,
-          timeframe: spaceMetadata == null ? void 0 : spaceMetadata.latestTimeframe,
-          genesisFeed: space.genesisFeedKey,
-          controlFeed: space.controlFeedKey,
-          dataFeed: space.dataFeedKey
-        };
-      })
-    });
-  };
-  const timeout = setTimeout(async () => {
-    await context.initialized.wait();
-    unsubscribe = context.dataSpaceManager.updated.on(() => update());
-    await update();
-  });
-  return () => {
-    unsubscribe == null ? void 0 : unsubscribe();
-    clearTimeout(timeout);
-  };
-});
-
-// packages/sdk/client-services/src/packlets/devtools/devtools.ts
-var DevtoolsHostEvents = class {
-  constructor() {
-    this.ready = new AsyncEvent();
-  }
-};
-var DevtoolsServiceImpl = class {
-  constructor(params) {
-    this.params = params;
-  }
-  events(request) {
-    return new Stream7(({ next }) => {
-      this.params.events.ready.on(() => {
-        next({
-          ready: {}
-        });
-      });
-    });
-  }
-  getConfig(request) {
-    throw new Error();
-  }
-  resetStorage(request) {
-    throw new Error();
-  }
-  enableDebugLogging(request) {
-    throw new Error();
-  }
-  disableDebugLogging(request) {
-    throw new Error();
-  }
-  subscribeToKeyringKeys(request) {
-    return subscribeToKeyringKeys({
-      keyring: this.params.context.keyring
-    });
-  }
-  subscribeToCredentialMessages(request) {
-    throw new Error();
-  }
-  subscribeToSpaces(request) {
-    return subscribeToSpaces(this.params.context, request);
-  }
-  subscribeToItems(request) {
-    throw new Error();
-  }
-  subscribeToFeeds(request) {
-    return subscribeToFeeds({
-      feedStore: this.params.context.feedStore
-    }, request);
-  }
-  subscribeToFeedBlocks(request) {
-    return subscribeToFeedBlocks({
-      feedStore: this.params.context.feedStore
-    }, request);
-  }
-  getSpaceSnapshot(request) {
-    throw new Error();
-  }
-  saveSpaceSnapshot(request) {
-    throw new Error();
-  }
-  clearSnapshots(request) {
-    throw new Error();
-  }
-  getNetworkPeers(request) {
-    throw new Error();
-  }
-  subscribeToNetworkTopics(request) {
-    throw new Error();
-  }
-  subscribeToSignalStatus(request) {
-    return subscribeToNetworkStatus({
-      networkManager: this.params.context.networkManager
-    });
-  }
-  subscribeToSignalTrace() {
-    return subscribeToSignalTrace({
-      networkManager: this.params.context.networkManager
-    });
-  }
-  subscribeToSwarmInfo() {
-    return subscribeToSwarmInfo({
-      networkManager: this.params.context.networkManager
-    });
-  }
-};
-
-// packages/sdk/client-services/src/packlets/identity/authenticator.ts
-import { Trigger } from "@dxos/async";
-import { Context } from "@dxos/context";
-import { verifyCredential } from "@dxos/credentials";
-import { log as log2 } from "@dxos/log";
-import { schema } from "@dxos/protocols";
-var createHaloAuthProvider = (signer) => async (nonce) => {
-  const credential = await signer.createCredential({
-    assertion: {
-      "@type": "dxos.halo.credentials.Auth"
-    },
-    subject: signer.getIssuer(),
-    nonce
-  });
-  return schema.getCodecForType("dxos.halo.credentials.Credential").encode(credential);
-};
-var HaloAuthVerifier = class {
-  constructor(_params) {
-    this._params = _params;
-    this._ctx = new Context();
-  }
-  async close() {
-    await this._ctx.dispose();
-  }
-  _isTrustedDevice(deviceKey) {
-    const deviceSet = this._params.trustedDevicesProvider();
-    return deviceSet.has(deviceKey);
-  }
-  get verifier() {
-    return async (nonce, auth) => {
-      const credential = schema.getCodecForType("dxos.halo.credentials.Credential").decode(auth);
-      const result = await verifyCredential(credential);
-      if (result.kind === "fail") {
-        log2("Invalid credential", {
-          result
-        }, {
-          file: "authenticator.ts",
-          line: 61,
-          scope: this,
-          callSite: (f, a) => f(...a)
-        });
-        return false;
-      }
-      if (!credential.proof.nonce || !Buffer.from(nonce).equals(credential.proof.nonce)) {
-        log2("Invalid nonce", {
-          nonce,
-          credential
-        }, {
-          file: "authenticator.ts",
-          line: 66,
-          scope: this,
-          callSite: (f, a) => f(...a)
-        });
-        return false;
-      }
-      if (this._isTrustedDevice(credential.issuer)) {
-        return true;
-      }
-      const trigger = new Trigger();
-      this._ctx.onDispose(() => {
-        trigger.wake(false);
-      });
-      const clear = this._params.update.on(this._ctx, () => {
-        if (this._isTrustedDevice(credential.issuer)) {
-          trigger.wake(true);
-        }
-      });
-      try {
-        await trigger.wait({
-          timeout: this._params.authTimeout
-        });
-        return true;
-      } catch (e) {
-        return false;
-      } finally {
-        clear();
-      }
-    };
-  }
-};
-
-// packages/sdk/client-services/src/packlets/identity/identity.ts
-import assert2 from "@dxos/node-std/assert";
-import { Event } from "@dxos/async";
-import { DeviceStateMachine, createCredentialSignerWithKey, createCredentialSignerWithChain, ProfileStateMachine } from "@dxos/credentials";
-import { writeMessages } from "@dxos/feed-store";
-import { log as log3 } from "@dxos/log";
-import { AdmittedFeed } from "@dxos/protocols/proto/dxos/halo/credentials";
-var AUTH_TIMEOUT = 3e4;
-var Identity = class {
-  constructor({ space, signer, identityKey, deviceKey }) {
-    this.stateUpdate = new Event();
-    this.space = space;
-    this._signer = signer;
-    this.identityKey = identityKey;
-    this.deviceKey = deviceKey;
-    this._deviceStateMachine = this.space.spaceState.registerProcessor(new DeviceStateMachine({
-      identityKey: this.identityKey,
-      deviceKey: this.deviceKey,
-      onUpdate: () => this.stateUpdate.emit()
-    }));
-    this._profileStateMachine = this.space.spaceState.registerProcessor(new ProfileStateMachine({
-      identityKey: this.identityKey,
-      onUpdate: () => this.stateUpdate.emit()
-    }));
-    this.authVerifier = new HaloAuthVerifier({
-      trustedDevicesProvider: () => this.authorizedDeviceKeys,
-      update: this.stateUpdate,
-      authTimeout: AUTH_TIMEOUT
-    });
-  }
-  // TODO(burdon): Expose state object?
-  get authorizedDeviceKeys() {
-    return this._deviceStateMachine.processor.authorizedDeviceKeys;
-  }
-  async open() {
-    await this._deviceStateMachine.open();
-    await this._profileStateMachine.open();
-    await this.space.open();
-  }
-  async close() {
-    await this.authVerifier.close();
-    await this._deviceStateMachine.close();
-    await this._profileStateMachine.close();
-    await this.space.close();
-  }
-  async ready() {
-    await this._deviceStateMachine.processor.deviceChainReady.wait();
-  }
-  get profileDocument() {
-    return this._profileStateMachine.processor.profile;
-  }
-  /**
-  * @test-only
-  */
-  get controlPipeline() {
-    return this.space.controlPipeline;
-  }
-  get haloSpaceKey() {
-    return this.space.key;
-  }
-  get haloGenesisFeedKey() {
-    return this.space.genesisFeedKey;
-  }
-  getAdmissionCredentials() {
-    return {
-      deviceKey: this.deviceKey,
-      controlFeedKey: this.space.controlFeedKey,
-      dataFeedKey: this.space.dataFeedKey
-    };
-  }
-  /**
-  * Issues credentials as identity.
-  * Requires identity to be ready.
-  */
-  getIdentityCredentialSigner() {
-    assert2(this._deviceStateMachine.processor.deviceCredentialChain, "Device credential chain is not ready.");
-    return createCredentialSignerWithChain(this._signer, this._deviceStateMachine.processor.deviceCredentialChain, this.deviceKey);
-  }
-  /**
-  * Issues credentials as device.
-  */
-  getDeviceCredentialSigner() {
-    return createCredentialSignerWithKey(this._signer, this.deviceKey);
-  }
-  async admitDevice({ deviceKey, controlFeedKey, dataFeedKey }) {
-    log3("Admitting device:", {
-      identityKey: this.identityKey,
-      hostDevice: this.deviceKey,
-      deviceKey,
-      controlFeedKey,
-      dataFeedKey
-    }, {
-      file: "identity.ts",
-      line: 155,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    const signer = this.getIdentityCredentialSigner();
-    await writeMessages(this.controlPipeline.writer, [
-      await signer.createCredential({
-        subject: deviceKey,
-        assertion: {
-          "@type": "dxos.halo.credentials.AuthorizedDevice",
-          identityKey: this.identityKey,
-          deviceKey
-        }
-      }),
-      await signer.createCredential({
-        subject: controlFeedKey,
-        assertion: {
-          "@type": "dxos.halo.credentials.AdmittedFeed",
-          spaceKey: this.haloSpaceKey,
-          deviceKey,
-          identityKey: this.identityKey,
-          designation: AdmittedFeed.Designation.CONTROL
-        }
-      }),
-      await signer.createCredential({
-        subject: dataFeedKey,
-        assertion: {
-          "@type": "dxos.halo.credentials.AdmittedFeed",
-          spaceKey: this.haloSpaceKey,
-          deviceKey,
-          identityKey: this.identityKey,
-          designation: AdmittedFeed.Designation.DATA
-        }
-      })
-    ].map((credential) => ({
-      "@type": "dxos.echo.feed.CredentialsMessage",
-      credential
-    })));
-  }
-};
-
-// packages/sdk/client-services/src/packlets/identity/identity-manager.ts
-import assert3 from "@dxos/node-std/assert";
-import { Event as Event2 } from "@dxos/async";
-import { createCredentialSignerWithKey as createCredentialSignerWithKey2, CredentialGenerator } from "@dxos/credentials";
-import { log as log4 } from "@dxos/log";
-import { AdmittedFeed as AdmittedFeed2 } from "@dxos/protocols/proto/dxos/halo/credentials";
-import { deferFunction } from "@dxos/util";
-var IdentityManager = class {
-  // TODO(burdon): IdentityManagerParams.
-  // TODO(dmaretskyi): Perhaps this should take/generate the peerKey outside of an initialized identity.
-  constructor(_metadataStore, _keyring, _spaceManager) {
-    this._metadataStore = _metadataStore;
-    this._keyring = _keyring;
-    this._spaceManager = _spaceManager;
-    this.stateUpdate = new Event2();
-  }
-  get identity() {
-    return this._identity;
-  }
-  async open() {
-    await this._metadataStore.load();
-    const identityRecord = this._metadataStore.getIdentityRecord();
-    log4("identity record", {
-      identityRecord
-    }, {
-      file: "identity-manager.ts",
-      line: 57,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    if (identityRecord) {
-      this._identity = await this._constructIdentity(identityRecord);
-      await this._identity.open();
-      await this._identity.ready();
-      this.stateUpdate.emit();
-    }
-  }
-  async close() {
-    var _a;
-    await ((_a = this._identity) == null ? void 0 : _a.close());
-  }
-  async createIdentity({ displayName } = {}) {
-    assert3(!this._identity, "Identity already exists.");
-    log4("creating identity...", {}, {
-      file: "identity-manager.ts",
-      line: 72,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    const controlFeedKey = await this._keyring.createKey();
-    const identityRecord = {
-      identityKey: await this._keyring.createKey(),
-      deviceKey: await this._keyring.createKey(),
-      haloSpace: {
-        spaceKey: await this._keyring.createKey(),
-        genesisFeedKey: controlFeedKey,
-        writeControlFeedKey: controlFeedKey,
-        writeDataFeedKey: await this._keyring.createKey()
-      }
-    };
-    const identity = await this._constructIdentity(identityRecord);
-    await identity.open();
-    {
-      const generator = new CredentialGenerator(this._keyring, identityRecord.identityKey, identityRecord.deviceKey);
-      const credentials = [
-        // Space genesis.
-        ...await generator.createSpaceGenesis(identityRecord.haloSpace.spaceKey, identityRecord.haloSpace.genesisFeedKey),
-        // Feed admission.
-        await generator.createFeedAdmission(identityRecord.haloSpace.spaceKey, identityRecord.haloSpace.writeDataFeedKey, AdmittedFeed2.Designation.DATA)
-      ];
-      if (displayName) {
-        credentials.push(await generator.createProfileCredential({
-          displayName
-        }));
-      }
-      credentials.push(await generator.createDeviceAuthorization(identityRecord.deviceKey));
-      for (const credential of credentials) {
-        await identity.controlPipeline.writer.write({
-          "@type": "dxos.echo.feed.CredentialsMessage",
-          credential
-        });
-      }
-    }
-    await this._metadataStore.setIdentityRecord(identityRecord);
-    this._identity = identity;
-    await this._identity.ready();
-    this.stateUpdate.emit();
-    log4("created identity", {
-      identityKey: identity.identityKey,
-      deviceKey: identity.deviceKey
-    }, {
-      file: "identity-manager.ts",
-      line: 131,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    return identity;
-  }
-  /**
-  * Accept an existing identity. Expects it's device key to be authorized (now or later).
-  */
-  async acceptIdentity(params) {
-    log4("accepting identity", {
-      params
-    }, {
-      file: "identity-manager.ts",
-      line: 139,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    assert3(!this._identity, "Identity already exists.");
-    const identityRecord = {
-      identityKey: params.identityKey,
-      deviceKey: await this._keyring.createKey(),
-      haloSpace: {
-        spaceKey: params.haloSpaceKey,
-        genesisFeedKey: params.haloGenesisFeedKey,
-        writeControlFeedKey: await this._keyring.createKey(),
-        writeDataFeedKey: await this._keyring.createKey()
-      }
-    };
-    const identity = await this._constructIdentity(identityRecord);
-    await identity.open();
-    this._identity = identity;
-    await this._metadataStore.setIdentityRecord(identityRecord);
-    this.stateUpdate.emit();
-    return identity;
-  }
-  async _constructIdentity(identityRecord) {
-    assert3(!this._identity);
-    log4("constructing identity", {
-      identityRecord
-    }, {
-      file: "identity-manager.ts",
-      line: 163,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    const space = await this._constructSpace({
-      spaceRecord: identityRecord.haloSpace,
-      swarmIdentity: {
-        peerKey: identityRecord.deviceKey,
-        credentialProvider: createHaloAuthProvider(createCredentialSignerWithKey2(this._keyring, identityRecord.deviceKey)),
-        credentialAuthenticator: deferFunction(() => identity.authVerifier.verifier)
-      },
-      identityKey: identityRecord.identityKey
-    });
-    const identity = new Identity({
-      space,
-      signer: this._keyring,
-      identityKey: identityRecord.identityKey,
-      deviceKey: identityRecord.deviceKey
-    });
-    log4("done", {
-      identityKey: identityRecord.identityKey
-    }, {
-      file: "identity-manager.ts",
-      line: 182,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    return identity;
-  }
-  async _constructSpace({ spaceRecord, swarmIdentity, identityKey }) {
-    return this._spaceManager.constructSpace({
-      metadata: {
-        key: spaceRecord.spaceKey,
-        genesisFeedKey: spaceRecord.genesisFeedKey,
-        controlFeedKey: spaceRecord.writeControlFeedKey,
-        dataFeedKey: spaceRecord.writeDataFeedKey
-      },
-      swarmIdentity,
-      onNetworkConnection: () => {
-      }
-    });
-  }
-};
-
-// packages/sdk/client-services/src/packlets/invitations/encoder.ts
-import base from "base-x";
-import { schema as schema2 } from "@dxos/protocols";
-var base62 = base("0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ");
-var codec = schema2.getCodecForType("dxos.client.services.Invitation");
-var InvitationEncoder = class {
-  static decode(text) {
-    return codec.decode(base62.decode(text));
-  }
-  static encode(invitation) {
-    return base62.encode(codec.encode(invitation));
-  }
-};
-
-// packages/sdk/client-services/src/packlets/invitations/halo-invitations-handler.ts
-import assert5 from "@dxos/node-std/assert";
-import { scheduleTask, sleep, Trigger as Trigger2 } from "@dxos/async";
-import { Context as Context2 } from "@dxos/context";
-import { generatePasscode } from "@dxos/credentials";
-import { failUndefined } from "@dxos/debug";
-import { PublicKey as PublicKey3 } from "@dxos/keys";
-import { log as log5 } from "@dxos/log";
-import { createTeleportProtocolFactory, StarTopology } from "@dxos/network-manager";
-import { schema as schema3 } from "@dxos/protocols";
-import { Invitation as Invitation2 } from "@dxos/protocols/proto/dxos/client/services";
-import { AuthenticationResponse } from "@dxos/protocols/proto/dxos/halo/invitations";
-import { RpcExtension } from "@dxos/teleport";
-
-// packages/sdk/client-services/src/packlets/invitations/invitations.ts
-import assert4 from "@dxos/node-std/assert";
-import { CancellableObservableProvider } from "@dxos/async";
-import { Invitation } from "@dxos/protocols/proto/dxos/client/services";
-var AUTHENTICATION_CODE_LENGTH = 6;
-var INVITATION_TIMEOUT = 3 * 6e4;
-var ON_CLOSE_DELAY = 500;
-var InvitationObservableProvider = class extends CancellableObservableProvider {
-  get invitation() {
-    return this._invitation;
-  }
-  setInvitation(invitation) {
-    this._invitation = invitation;
-  }
-};
-var AuthenticatingInvitationProvider = class extends InvitationObservableProvider {
-  // prettier-ignore
-  constructor(_actions) {
-    super(() => this._actions.onCancel());
-    this._actions = _actions;
-  }
-  async authenticate(authenticationCode) {
-    return this._actions.onAuthenticate(authenticationCode);
-  }
-};
-var wrapObservable = async (observable) => {
-  return new Promise((resolve, reject) => {
-    const unsubscribe = observable.subscribe({
-      onSuccess: (invitation) => {
-        assert4(invitation.state === Invitation.State.SUCCESS);
-        unsubscribe();
-        resolve(invitation);
-      },
-      onError: (err) => {
-        unsubscribe();
-        reject(err);
-      }
-    });
-  });
-};
-
-// packages/sdk/client-services/src/packlets/invitations/invitations-handler.ts
-var AbstractInvitationsHandler = class {
-  // prettier-ignore
-  constructor(_networkManager) {
-    this._networkManager = _networkManager;
-  }
-};
-
-// packages/sdk/client-services/src/packlets/invitations/halo-invitations-handler.ts
-var HaloInvitationsHandler = class extends AbstractInvitationsHandler {
-  // prettier-ignore
-  constructor(networkManager, _identityManager) {
-    super(networkManager);
-    this._identityManager = _identityManager;
-  }
-  /**
-  * Creates an invitation and listens for a join request from the invited (guest) peer.
-  */
-  createInvitation(context, options) {
-    var _a;
-    const { type, timeout = INVITATION_TIMEOUT, swarmKey } = options != null ? options : {};
-    assert5(type !== Invitation2.Type.OFFLINE);
-    const identity = (_a = this._identityManager.identity) != null ? _a : failUndefined();
-    const invitation = {
-      type,
-      invitationId: PublicKey3.random().toHex(),
-      swarmKey: swarmKey != null ? swarmKey : PublicKey3.random(),
-      authenticationCode: generatePasscode(AUTHENTICATION_CODE_LENGTH)
-    };
-    const ctx = new Context2({
-      onError: (err) => {
-        void ctx.dispose();
-        observable.callback.onError(err);
-      }
-    });
-    const observable = new InvitationObservableProvider(async () => {
-      await ctx.dispose();
-    });
-    let authenticationCode;
-    const complete = new Trigger2();
-    const createExtension = () => {
-      const hostInvitationExtension = new HostHaloInvitationExtension({
-        requestAdmission: async () => {
-          var _a2, _b;
-          log5("responding with admission offer", {
-            host: identity.deviceKey
-          }, {
-            file: "halo-invitations-handler.ts",
-            line: 84,
-            scope: this,
-            callSite: (f, a) => f(...a)
-          });
-          (_b = (_a2 = observable.callback).onAuthenticating) == null ? void 0 : _b.call(_a2, invitation);
-          return {
-            identityKey: identity.identityKey,
-            haloSpaceKey: identity.haloSpaceKey,
-            genesisFeedKey: identity.haloGenesisFeedKey
-          };
-        },
-        authenticate: async ({ authenticationCode: code }) => {
-          log5("received authentication request", {
-            authenticationCode: code
-          }, {
-            file: "halo-invitations-handler.ts",
-            line: 98,
-            scope: this,
-            callSite: (f, a) => f(...a)
-          });
-          authenticationCode = code;
-          return {
-            status: AuthenticationResponse.Status.OK
-          };
-        },
-        // TODO(burdon): Not used: controlFeedKey, dataFeedKey.
-        presentAdmissionCredentials: async (credentials) => {
-          try {
-            if (invitation.type !== Invitation2.Type.INTERACTIVE_TESTING) {
-              if (invitation.authenticationCode === void 0 || invitation.authenticationCode !== authenticationCode) {
-                throw new Error(`invalid authentication code: ${authenticationCode}`);
-              }
-            }
-            log5("writing guest credentials", {
-              host: identity.deviceKey,
-              guest: credentials.deviceKey
-            }, {
-              file: "halo-invitations-handler.ts",
-              line: 113,
-              scope: this,
-              callSite: (f, a) => f(...a)
-            });
-            await identity.admitDevice(credentials);
-            complete.wake(credentials.deviceKey);
-          } catch (err) {
-            observable.callback.onError(err);
-            throw err;
-          }
-        },
-        onOpen: () => {
-          scheduleTask(ctx, async () => {
-            var _a2, _b;
-            try {
-              log5("connected", {
-                host: identity.deviceKey
-              }, {
-                file: "halo-invitations-handler.ts",
-                line: 129,
-                scope: this,
-                callSite: (f, a) => f(...a)
-              });
-              (_b = (_a2 = observable.callback).onConnected) == null ? void 0 : _b.call(_a2, invitation);
-              const deviceKey = await complete.wait({
-                timeout
-              });
-              log5("admitted guest", {
-                host: identity.deviceKey,
-                guest: deviceKey
-              }, {
-                file: "halo-invitations-handler.ts",
-                line: 132,
-                scope: this,
-                callSite: (f, a) => f(...a)
-              });
-              observable.callback.onSuccess(invitation);
-            } catch (err) {
-              if (!observable.cancelled) {
-                log5.error("failed", err, {
-                  file: "halo-invitations-handler.ts",
-                  line: 136,
-                  scope: this,
-                  callSite: (f, a) => f(...a)
-                });
-                observable.callback.onError(err);
-              }
-            } finally {
-              await sleep(ON_CLOSE_DELAY);
-              await ctx.dispose();
-            }
-          });
-        }
-      });
-      return hostInvitationExtension;
-    };
-    scheduleTask(ctx, async () => {
-      var _a2, _b;
-      const topic = invitation.swarmKey;
-      const swarmConnection = await this._networkManager.joinSwarm({
-        topic,
-        peerId: topic,
-        protocolProvider: createTeleportProtocolFactory(async (teleport) => {
-          teleport.addExtension("dxos.halo.invitations", createExtension());
-        }),
-        topology: new StarTopology(topic)
-      });
-      ctx.onDispose(() => swarmConnection.close());
-      (_b = (_a2 = observable.callback).onConnecting) == null ? void 0 : _b.call(_a2, invitation);
-    });
-    return observable;
-  }
-  /**
-  * Waits for the host peer (inviter) to accept our join request.
-  * The local guest peer (invitee) then sends the local halo invitation to the host,
-  * which then writes the guest's credentials to the halo.
-  */
-  acceptInvitation(invitation, options) {
-    const { timeout = INVITATION_TIMEOUT } = options != null ? options : {};
-    const ctx = new Context2({
-      onError: (err) => {
-        void ctx.dispose();
-        observable.callback.onError(err);
-      }
-    });
-    const authenticated = new Trigger2();
-    const observable = new AuthenticatingInvitationProvider({
-      onCancel: async () => {
-        await ctx.dispose();
-      },
-      // TODO(burdon): Consider retry.
-      onAuthenticate: async (code) => {
-        authenticated.wake(code);
-      }
-    });
-    let connectionCount = 0;
-    const complete = new Trigger2();
-    const createExtension = () => {
-      const extension = new GuestHaloInvitationExtension({
-        onOpen: () => {
-          scheduleTask(ctx, async () => {
-            var _a, _b, _c, _d;
-            try {
-              if (++connectionCount > 1) {
-                throw new Error(`multiple connections detected: ${connectionCount}`);
-              }
-              log5("connected", {}, {
-                file: "halo-invitations-handler.ts",
-                line: 209,
-                scope: this,
-                callSite: (f, a) => f(...a)
-              });
-              (_b = (_a = observable.callback).onConnected) == null ? void 0 : _b.call(_a, invitation);
-              log5("sending admission request", {}, {
-                file: "halo-invitations-handler.ts",
-                line: 213,
-                scope: this,
-                callSite: (f, a) => f(...a)
-              });
-              const { identityKey, haloSpaceKey, genesisFeedKey } = await extension.rpc.HaloHostService.requestAdmission();
-              if (invitation.type === void 0 || invitation.type === Invitation2.Type.INTERACTIVE) {
-                log5("guest waiting for authentication code...", {}, {
-                  file: "halo-invitations-handler.ts",
-                  line: 220,
-                  scope: this,
-                  callSite: (f, a) => f(...a)
-                });
-                (_d = (_c = observable.callback).onAuthenticating) == null ? void 0 : _d.call(_c, invitation);
-                const authenticationCode = await authenticated.wait({
-                  timeout
-                });
-                log5("sending authentication request", {}, {
-                  file: "halo-invitations-handler.ts",
-                  line: 223,
-                  scope: this,
-                  callSite: (f, a) => f(...a)
-                });
-                await extension.rpc.HaloHostService.authenticate({
-                  authenticationCode
-                });
-              }
-              const identity = await this._identityManager.acceptIdentity({
-                identityKey,
-                haloSpaceKey,
-                haloGenesisFeedKey: genesisFeedKey
-              });
-              log5("presenting admission credentials", {
-                guest: identity.deviceKey,
-                identityKey
-              }, {
-                file: "halo-invitations-handler.ts",
-                line: 236,
-                scope: this,
-                callSite: (f, a) => f(...a)
-              });
-              await extension.rpc.HaloHostService.presentAdmissionCredentials(identity.getAdmissionCredentials());
-              log5("admitted by host", {
-                guest: identity.deviceKey,
-                identityKey
-              }, {
-                file: "halo-invitations-handler.ts",
-                line: 240,
-                scope: this,
-                callSite: (f, a) => f(...a)
-              });
-              complete.wake(identityKey);
-            } catch (err) {
-              if (!observable.cancelled) {
-                log5.warn("auth failed", err, {
-                  file: "halo-invitations-handler.ts",
-                  line: 244,
-                  scope: this,
-                  callSite: (f, a) => f(...a)
-                });
-                observable.callback.onError(err);
-              }
-            } finally {
-              await ctx.dispose();
-            }
-          });
-        }
-      });
-      return extension;
-    };
-    scheduleTask(ctx, async () => {
-      var _a, _b;
-      assert5(invitation.swarmKey);
-      const topic = invitation.swarmKey;
-      const swarmConnection = await this._networkManager.joinSwarm({
-        topic,
-        peerId: PublicKey3.random(),
-        protocolProvider: createTeleportProtocolFactory(async (teleport) => {
-          teleport.addExtension("dxos.halo.invitations", createExtension());
-        }),
-        topology: new StarTopology(topic)
-      });
-      ctx.onDispose(() => swarmConnection.close());
-      (_b = (_a = observable.callback).onConnecting) == null ? void 0 : _b.call(_a, invitation);
-      invitation.identityKey = await complete.wait();
-      observable.callback.onSuccess(invitation);
-      await ctx.dispose();
-    });
-    return observable;
-  }
-};
-var HostHaloInvitationExtension = class extends RpcExtension {
-  constructor(_callbacks) {
-    super({
-      exposed: {
-        HaloHostService: schema3.getService("dxos.halo.invitations.HaloHostService")
-      }
-    });
-    this._callbacks = _callbacks;
-  }
-  async getHandlers() {
-    return {
-      // TODO(dmaretskyi): For now this is just forwarding the data to callbacks since we don't have session-specific logic.
-      // Perhaps in the future we will have more complex logic here.
-      HaloHostService: {
-        requestAdmission: async () => {
-          return this._callbacks.requestAdmission();
-        },
-        authenticate: async (credentials) => {
-          return this._callbacks.authenticate(credentials);
-        },
-        // TODO(burdon): Not used: controlFeedKey, dataFeedKey.
-        presentAdmissionCredentials: async (credentials) => {
-          return this._callbacks.presentAdmissionCredentials(credentials);
-        }
-      }
-    };
-  }
-  async onOpen(context) {
-    await super.onOpen(context);
-    this._callbacks.onOpen();
-  }
-};
-var GuestHaloInvitationExtension = class extends RpcExtension {
-  constructor(_callbacks) {
-    super({
-      requested: {
-        HaloHostService: schema3.getService("dxos.halo.invitations.HaloHostService")
-      }
-    });
-    this._callbacks = _callbacks;
-  }
-  async getHandlers() {
-    return {};
-  }
-  async onOpen(context) {
-    await super.onOpen(context);
-    this._callbacks.onOpen();
-  }
-};
-
-// packages/sdk/client-services/src/packlets/invitations/invitations-proxy.ts
-import assert6 from "@dxos/node-std/assert";
-import { observableError } from "@dxos/async";
-import { log as log6 } from "@dxos/log";
-import { Invitation as Invitation3 } from "@dxos/protocols/proto/dxos/client/services";
-var AbstractInvitationsProxy = class {
-  // prettier-ignore
-  constructor(_invitationsService) {
-    this._invitationsService = _invitationsService;
-  }
-  createInvitation(context, options) {
-    let invitationId;
-    const observable = new InvitationObservableProvider(async () => {
-      if (invitationId) {
-        await this._invitationsService.cancelInvitation({
-          invitationId
-        });
-      }
-    });
-    const invitation = {
-      ...this.getInvitationOptions(context),
-      ...options
-    };
-    const stream = this._invitationsService.createInvitation(invitation);
-    stream.subscribe((invitation2) => {
-      var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j;
-      observable.setInvitation(invitation2);
-      switch (invitation2.state) {
-        case Invitation3.State.CONNECTING: {
-          assert6(invitation2.invitationId);
-          invitationId = invitation2.invitationId;
-          (_b = (_a = observable.callback).onConnecting) == null ? void 0 : _b.call(_a, invitation2);
-          break;
-        }
-        case Invitation3.State.CONNECTED: {
-          (_d = (_c = observable.callback).onConnected) == null ? void 0 : _d.call(_c, invitation2);
-          break;
-        }
-        case Invitation3.State.AUTHENTICATING: {
-          (_f = (_e = observable.callback).onAuthenticating) == null ? void 0 : _f.call(_e, invitation2);
-          break;
-        }
-        case Invitation3.State.SUCCESS: {
-          (_h = (_g = observable.callback).onSuccess) == null ? void 0 : _h.call(_g, invitation2);
-          break;
-        }
-        case Invitation3.State.CANCELLED: {
-          (_j = (_i = observable.callback).onCancelled) == null ? void 0 : _j.call(_i);
-          break;
-        }
-        default: {
-          log6.error(`Invalid state: ${invitation2.state}`, {}, {
-            file: "invitations-proxy.ts",
-            line: 81,
-            scope: this,
-            callSite: (f, a) => f(...a)
-          });
-        }
-      }
-    }, (err) => {
-      if (err) {
-        observableError(observable, err);
-      }
-    });
-    return observable;
-  }
-  acceptInvitation(invitation, options) {
-    assert6(invitation && invitation.swarmKey);
-    const observable = new AuthenticatingInvitationProvider({
-      onCancel: async () => {
-        var _a;
-        const invitationId = (_a = observable.invitation) == null ? void 0 : _a.invitationId;
-        assert6(invitationId);
-        await this._invitationsService.cancelInvitation({
-          invitationId
-        });
-      },
-      onAuthenticate: async (authenticationCode) => {
-        var _a;
-        const invitationId = (_a = observable.invitation) == null ? void 0 : _a.invitationId;
-        assert6(invitationId);
-        await this._invitationsService.authenticate({
-          invitationId,
-          authenticationCode
-        });
-      }
-    });
-    const stream = this._invitationsService.acceptInvitation({
-      ...invitation,
-      ...options
-    });
-    stream.subscribe((invitation2) => {
-      var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j;
-      assert6(invitation2.invitationId);
-      observable.setInvitation(invitation2);
-      switch (invitation2.state) {
-        case Invitation3.State.CONNECTING: {
-          (_b = (_a = observable.callback).onConnecting) == null ? void 0 : _b.call(_a, invitation2);
-          break;
-        }
-        case Invitation3.State.CONNECTED: {
-          (_d = (_c = observable.callback).onConnected) == null ? void 0 : _d.call(_c, invitation2);
-          break;
-        }
-        case Invitation3.State.AUTHENTICATING: {
-          (_f = (_e = observable.callback).onAuthenticating) == null ? void 0 : _f.call(_e, invitation2);
-          break;
-        }
-        case Invitation3.State.SUCCESS: {
-          (_h = (_g = observable.callback).onSuccess) == null ? void 0 : _h.call(_g, invitation2);
-          break;
-        }
-        case Invitation3.State.CANCELLED: {
-          (_j = (_i = observable.callback).onCancelled) == null ? void 0 : _j.call(_i);
-          break;
-        }
-        default: {
-          log6.error(`Invalid state: ${invitation2.state}`, {}, {
-            file: "invitations-proxy.ts",
-            line: 146,
-            scope: this,
-            callSite: (f, a) => f(...a)
-          });
-        }
-      }
-    }, (err) => {
-      if (err) {
-        observableError(observable, err);
-      }
-    });
-    return observable;
-  }
-};
-
-// packages/sdk/client-services/src/packlets/invitations/halo-invitations-proxy.ts
-var HaloInvitationsProxy = class extends AbstractInvitationsProxy {
-  getInvitationOptions() {
-    return {};
-  }
-};
-
-// packages/sdk/client-services/src/packlets/invitations/invitations-service.ts
-import assert7 from "@dxos/node-std/assert";
-import { Stream as Stream8 } from "@dxos/codec-protobuf";
-import { log as log7 } from "@dxos/log";
-import { Invitation as Invitation4 } from "@dxos/protocols/proto/dxos/client/services";
-var AbstractInvitationsService = class {
-  // prettier-ignore
-  constructor(_identityManager, _getInvitationsHandler) {
-    this._identityManager = _identityManager;
-    this._getInvitationsHandler = _getInvitationsHandler;
-    this._createInvitations = /* @__PURE__ */ new Map();
-    this._acceptInvitations = /* @__PURE__ */ new Map();
-  }
-  // TODO(burdon): Guest/host label.
-  getLoggingContext() {
-    var _a;
-    return {
-      deviceKey: (_a = this._identityManager.identity) == null ? void 0 : _a.deviceKey
-    };
-  }
-  createInvitation(invitation) {
-    return new Stream8(({ next, close }) => {
-      const invitationsHandler = this._getInvitationsHandler();
-      const context = this.getContext(invitation);
-      log7("stream opened", this.getLoggingContext(), {
-        file: "invitations-service.ts",
-        line: 43,
-        scope: this,
-        callSite: (f, a) => f(...a)
-      });
-      let invitationId;
-      const { type, swarmKey } = invitation;
-      const observable = invitationsHandler.createInvitation(context, {
-        type,
-        swarmKey
-      });
-      observable.subscribe({
-        onConnecting: (invitation2) => {
-          assert7(invitation2.invitationId);
-          invitationId = invitation2.invitationId;
-          this._createInvitations.set(invitation2.invitationId, observable);
-          invitation2.state = Invitation4.State.CONNECTING;
-          next(invitation2);
-        },
-        onConnected: (invitation2) => {
-          assert7(invitation2.invitationId);
-          invitation2.state = Invitation4.State.CONNECTED;
-          next(invitation2);
-        },
-        onAuthenticating: (invitation2) => {
-          assert7(invitation2.invitationId);
-          invitation2.state = Invitation4.State.AUTHENTICATING;
-          next(invitation2);
-        },
-        onSuccess: (invitation2) => {
-          assert7(invitation2.invitationId);
-          invitation2.state = Invitation4.State.SUCCESS;
-          next(invitation2);
-          close();
-        },
-        onCancelled: () => {
-          assert7(invitationId);
-          invitation.invitationId = invitationId;
-          invitation.state = Invitation4.State.CANCELLED;
-          next(invitation);
-          close();
-        },
-        onTimeout: (err) => {
-          invitation.state = Invitation4.State.TIMEOUT;
-          close(err);
-        },
-        onError: (err) => {
-          invitation.state = Invitation4.State.ERROR;
-          close(err);
-        }
-      });
-      return (err) => {
-        const context2 = this.getLoggingContext();
-        if (err) {
-          log7.warn("stream closed", {
-            ...context2,
-            err
-          }, {
-            file: "invitations-service.ts",
-            line: 92,
-            scope: this,
-            callSite: (f, a) => f(...a)
-          });
-        } else {
-          log7("stream closed", context2, {
-            file: "invitations-service.ts",
-            line: 94,
-            scope: this,
-            callSite: (f, a) => f(...a)
-          });
-        }
-        this._createInvitations.delete(invitation.invitationId);
-      };
-    });
-  }
-  acceptInvitation(invitation, options) {
-    return new Stream8(({ next, close }) => {
-      log7("stream opened", this.getLoggingContext(), {
-        file: "invitations-service.ts",
-        line: 104,
-        scope: this,
-        callSite: (f, a) => f(...a)
-      });
-      const invitationsHandler = this._getInvitationsHandler();
-      let invitationId;
-      const observable = invitationsHandler.acceptInvitation(invitation, options);
-      observable.subscribe({
-        onConnecting: (invitation2) => {
-          assert7(invitation2.invitationId);
-          invitationId = invitation2.invitationId;
-          this._acceptInvitations.set(invitation2.invitationId, observable);
-          invitation2.state = Invitation4.State.CONNECTING;
-          next(invitation2);
-        },
-        onConnected: (invitation2) => {
-          assert7(invitation2.invitationId);
-          invitation2.state = Invitation4.State.CONNECTED;
-          next(invitation2);
-        },
-        onAuthenticating: (invitation2) => {
-          assert7(invitation2.invitationId);
-          invitation2.state = Invitation4.State.AUTHENTICATING;
-          next(invitation2);
-        },
-        onSuccess: (invitation2) => {
-          invitation2.state = Invitation4.State.SUCCESS;
-          next(invitation2);
-          close();
-        },
-        onCancelled: () => {
-          assert7(invitationId);
-          invitation.invitationId = invitationId;
-          invitation.state = Invitation4.State.CANCELLED;
-          next(invitation);
-          close();
-        },
-        onTimeout: (err) => {
-          invitation.state = Invitation4.State.TIMEOUT;
-          close(err);
-        },
-        onError: (err) => {
-          invitation.state = Invitation4.State.ERROR;
-          close(err);
-        }
-      });
-      return (err) => {
-        const context = this.getLoggingContext();
-        if (err) {
-          log7.warn("stream closed", {
-            ...context,
-            err
-          }, {
-            file: "invitations-service.ts",
-            line: 152,
-            scope: this,
-            callSite: (f, a) => f(...a)
-          });
-        } else {
-          log7("stream closed", context, {
-            file: "invitations-service.ts",
-            line: 154,
-            scope: this,
-            callSite: (f, a) => f(...a)
-          });
-        }
-        this._acceptInvitations.delete(invitation.invitationId);
-      };
-    });
-  }
-  async authenticate({ invitationId, authenticationCode }) {
-    log7("authenticating...", {}, {
-      file: "invitations-service.ts",
-      line: 163,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    assert7(invitationId);
-    const observable = this._acceptInvitations.get(invitationId);
-    if (!observable) {
-      log7.warn("invalid invitation", {
-        invitationId
-      }, {
-        file: "invitations-service.ts",
-        line: 167,
-        scope: this,
-        callSite: (f, a) => f(...a)
-      });
-    } else {
-      await observable.authenticate(authenticationCode);
-    }
-  }
-  async cancelInvitation(invitation) {
-    var _a;
-    log7("cancelling...", {}, {
-      file: "invitations-service.ts",
-      line: 174,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    assert7(invitation.invitationId);
-    const observable = (_a = this._createInvitations.get(invitation.invitationId)) != null ? _a : this._acceptInvitations.get(invitation.invitationId);
-    if (!observable) {
-      log7.warn("invalid invitation", {
-        invitationId: invitation.invitationId
-      }, {
-        file: "invitations-service.ts",
-        line: 179,
-        scope: this,
-        callSite: (f, a) => f(...a)
-      });
-    } else {
-      await (observable == null ? void 0 : observable.cancel());
-    }
-  }
-};
-
-// packages/sdk/client-services/src/packlets/invitations/halo-invitations-service.ts
-var HaloInvitationsServiceImpl = class extends AbstractInvitationsService {
-  // prettier-ignore
-  constructor(identityManager, invitationsHandler) {
-    super(identityManager, () => invitationsHandler);
-    this.invitationsHandler = invitationsHandler;
-  }
-  getContext(invitation) {
-  }
-};
-
-// packages/sdk/client-services/src/packlets/invitations/space-invitations-handler.ts
-import assert8 from "@dxos/node-std/assert";
-import { scheduleTask as scheduleTask2, sleep as sleep2, Trigger as Trigger3 } from "@dxos/async";
-import { Context as Context3 } from "@dxos/context";
-import { createAdmissionCredentials, generatePasscode as generatePasscode2, getCredentialAssertion } from "@dxos/credentials";
-import { writeMessages as writeMessages2 } from "@dxos/feed-store";
-import { PublicKey as PublicKey4 } from "@dxos/keys";
-import { log as log8 } from "@dxos/log";
-import { createTeleportProtocolFactory as createTeleportProtocolFactory2, StarTopology as StarTopology2 } from "@dxos/network-manager";
-import { schema as schema4 } from "@dxos/protocols";
-import { Invitation as Invitation5 } from "@dxos/protocols/proto/dxos/client/services";
-import { AuthenticationResponse as AuthenticationResponse2 } from "@dxos/protocols/proto/dxos/halo/invitations";
-import { RpcExtension as RpcExtension2 } from "@dxos/teleport";
-var MAX_OTP_ATTEMPTS = 3;
-var SpaceInvitationsHandler = class extends AbstractInvitationsHandler {
-  constructor(networkManager, _spaceManager, _signingContext, _keyring) {
-    super(networkManager);
-    this._spaceManager = _spaceManager;
-    this._signingContext = _signingContext;
-    this._keyring = _keyring;
-  }
-  /**
-  * Creates an invitation and listens for a join request from the invited (guest) peer.
-  */
-  createInvitation(space, options) {
-    let swarmConnection;
-    const { type, timeout = INVITATION_TIMEOUT, swarmKey } = options != null ? options : {};
-    assert8(type !== Invitation5.Type.OFFLINE);
-    assert8(space);
-    const invitation = {
-      type,
-      invitationId: PublicKey4.random().toHex(),
-      swarmKey: swarmKey != null ? swarmKey : PublicKey4.random(),
-      spaceKey: space.key,
-      authenticationCode: generatePasscode2(AUTHENTICATION_CODE_LENGTH)
-    };
-    const ctx = new Context3({
-      onError: (err) => {
-        void ctx.dispose();
-        observable.callback.onError(err);
-      }
-    });
-    const observable = new InvitationObservableProvider(async () => {
-      await (swarmConnection == null ? void 0 : swarmConnection.close());
-    });
-    let authenticationCode;
-    let authenticationRetry = 0;
-    const createExtension = () => {
-      const complete = new Trigger3();
-      let guestProfile;
-      const hostInvitationExtension = new HostSpaceInvitationExtension({
-        introduce: async ({ profile }) => {
-          var _a, _b;
-          log8("guest introduced itself", {
-            guestProfile: profile,
-            host: this._signingContext.deviceKey,
-            spaceKey: space.key
-          }, {
-            file: "space-invitations-handler.ts",
-            line: 97,
-            scope: this,
-            callSite: (f, a) => f(...a)
-          });
-          guestProfile = profile;
-          (_b = (_a = observable.callback).onAuthenticating) == null ? void 0 : _b.call(_a, invitation);
-        },
-        authenticate: async ({ authenticationCode: code }) => {
-          log8("received authentication request", {
-            authenticationCode: code
-          }, {
-            file: "space-invitations-handler.ts",
-            line: 111,
-            scope: this,
-            callSite: (f, a) => f(...a)
-          });
-          let status = AuthenticationResponse2.Status.OK;
-          if (invitation.authenticationCode) {
-            if (authenticationRetry++ > MAX_OTP_ATTEMPTS) {
-              status = AuthenticationResponse2.Status.INVALID_OPT_ATTEMPTS;
-            } else if (code !== invitation.authenticationCode) {
-              status = AuthenticationResponse2.Status.INVALID_OTP;
-            } else {
-              authenticationCode = code;
-            }
-          }
-          return {
-            status
-          };
-        },
-        requestAdmission: async ({ identityKey, deviceKey, controlFeedKey, dataFeedKey }) => {
-          try {
-            if (invitation.type !== Invitation5.Type.INTERACTIVE_TESTING && invitation.type !== Invitation5.Type.MULTIUSE_TESTING) {
-              if (invitation.authenticationCode === void 0 || invitation.authenticationCode !== authenticationCode) {
-                throw new Error(`invalid authentication code: ${authenticationCode}`);
-              }
-            }
-            log8("writing guest credentials", {
-              host: this._signingContext.deviceKey,
-              guest: deviceKey
-            }, {
-              file: "space-invitations-handler.ts",
-              line: 138,
-              scope: this,
-              callSite: (f, a) => f(...a)
-            });
-            const credentials = await createAdmissionCredentials(this._signingContext.credentialSigner, identityKey, deviceKey, space.key, controlFeedKey, dataFeedKey, space.inner.genesisFeedKey, guestProfile);
-            assert8(credentials[0]["@type"] === "dxos.echo.feed.CredentialsMessage");
-            const spaceMemberCredential = credentials[0].credential;
-            assert8(getCredentialAssertion(spaceMemberCredential)["@type"] === "dxos.halo.credentials.SpaceMember");
-            await writeMessages2(space.inner.controlPipeline.writer, credentials);
-            complete.wake(deviceKey);
-            return {
-              credential: spaceMemberCredential
-            };
-          } catch (err) {
-            observable.callback.onError(err);
-            throw err;
-          }
-        },
-        onOpen: () => {
-          scheduleTask2(ctx, async () => {
-            var _a, _b;
-            try {
-              log8("connected", {
-                host: this._signingContext.deviceKey
-              }, {
-                file: "space-invitations-handler.ts",
-                line: 172,
-                scope: this,
-                callSite: (f, a) => f(...a)
-              });
-              (_b = (_a = observable.callback).onConnected) == null ? void 0 : _b.call(_a, invitation);
-              const deviceKey = await complete.wait({
-                timeout
-              });
-              log8("admitted guest", {
-                host: this._signingContext.deviceKey,
-                guest: deviceKey
-              }, {
-                file: "space-invitations-handler.ts",
-                line: 175,
-                scope: this,
-                callSite: (f, a) => f(...a)
-              });
-              observable.callback.onSuccess(invitation);
-            } catch (err) {
-              if (!observable.cancelled) {
-                log8.error("failed", err, {
-                  file: "space-invitations-handler.ts",
-                  line: 179,
-                  scope: this,
-                  callSite: (f, a) => f(...a)
-                });
-                observable.callback.onError(err);
-              }
-            } finally {
-              if (type !== Invitation5.Type.MULTIUSE_TESTING) {
-                await sleep2(ON_CLOSE_DELAY);
-                await ctx.dispose();
-              }
-            }
-          });
-        }
-      });
-      return hostInvitationExtension;
-    };
-    scheduleTask2(ctx, async () => {
-      var _a, _b;
-      const topic = invitation.swarmKey;
-      const swarmConnection2 = await this._networkManager.joinSwarm({
-        topic,
-        peerId: topic,
-        protocolProvider: createTeleportProtocolFactory2(async (teleport) => {
-          teleport.addExtension("dxos.halo.invitations", createExtension());
-        }),
-        topology: new StarTopology2(topic)
-      });
-      ctx.onDispose(() => swarmConnection2.close());
-      (_b = (_a = observable.callback).onConnecting) == null ? void 0 : _b.call(_a, invitation);
-    });
-    return observable;
-  }
-  /**
-  * Waits for the host peer (inviter) to accept our join request.
-  * The local guest peer (invitee) then sends the local space invitation to the host,
-  * which then writes the guest's credentials to the space.
-  */
-  acceptInvitation(invitation, options) {
-    const { timeout = INVITATION_TIMEOUT } = options != null ? options : {};
-    const ctx = new Context3({
-      onError: (err) => {
-        void ctx.dispose();
-        observable.callback.onError(err);
-      }
-    });
-    const authenticated = new Trigger3();
-    const observable = new AuthenticatingInvitationProvider({
-      onCancel: async () => {
-        await ctx.dispose();
-      },
-      onAuthenticate: async (code) => {
-        authenticated.wake(code);
-      }
-    });
-    let connectionCount = 0;
-    const complete = new Trigger3();
-    const createExtension = () => {
-      const extension = new GuestSpaceInvitationExtension({
-        onOpen: () => {
-          scheduleTask2(ctx, async () => {
-            var _a, _b, _c, _d;
-            try {
-              if (++connectionCount > 1) {
-                throw new Error(`multiple connections detected: ${connectionCount}`);
-              }
-              log8("connected", {
-                guest: this._signingContext.deviceKey
-              }, {
-                file: "space-invitations-handler.ts",
-                line: 252,
-                scope: this,
-                callSite: (f, a) => f(...a)
-              });
-              (_b = (_a = observable.callback).onConnected) == null ? void 0 : _b.call(_a, invitation);
-              log8("introduce", {
-                guest: this._signingContext.deviceKey
-              }, {
-                file: "space-invitations-handler.ts",
-                line: 256,
-                scope: this,
-                callSite: (f, a) => f(...a)
-              });
-              await extension.rpc.SpaceHostService.introduce({
-                profile: this._signingContext.profile
-              });
-              if (invitation.type === void 0 || invitation.type === Invitation5.Type.INTERACTIVE) {
-                for (let attempt = 1; attempt <= MAX_OTP_ATTEMPTS; attempt++) {
-                  log8("guest waiting for authentication code...", {}, {
-                    file: "space-invitations-handler.ts",
-                    line: 265,
-                    scope: this,
-                    callSite: (f, a) => f(...a)
-                  });
-                  (_d = (_c = observable.callback).onAuthenticating) == null ? void 0 : _d.call(_c, invitation);
-                  const authenticationCode = await authenticated.wait({
-                    timeout
-                  });
-                  log8("sending authentication request", {}, {
-                    file: "space-invitations-handler.ts",
-                    line: 269,
-                    scope: this,
-                    callSite: (f, a) => f(...a)
-                  });
-                  const response = await extension.rpc.SpaceHostService.authenticate({
-                    authenticationCode
-                  });
-                  if (response.status === void 0 || response.status === AuthenticationResponse2.Status.OK) {
-                    break;
-                  }
-                  if (response.status === AuthenticationResponse2.Status.INVALID_OTP) {
-                    if (attempt === MAX_OTP_ATTEMPTS) {
-                      throw new Error(`Maximum retry attempts: ${MAX_OTP_ATTEMPTS}`);
-                    } else {
-                      log8("retrying invalid code", {
-                        attempt
-                      }, {
-                        file: "space-invitations-handler.ts",
-                        line: 279,
-                        scope: this,
-                        callSite: (f, a) => f(...a)
-                      });
-                      authenticated.reset();
-                    }
-                  }
-                }
-              }
-              const controlFeedKey = await this._keyring.createKey();
-              const dataFeedKey = await this._keyring.createKey();
-              log8("request admission", {
-                guest: this._signingContext.deviceKey
-              }, {
-                file: "space-invitations-handler.ts",
-                line: 290,
-                scope: this,
-                callSite: (f, a) => f(...a)
-              });
-              const { credential } = await extension.rpc.SpaceHostService.requestAdmission({
-                identityKey: this._signingContext.identityKey,
-                deviceKey: this._signingContext.deviceKey,
-                controlFeedKey,
-                dataFeedKey
-              });
-              const assertion = getCredentialAssertion(credential);
-              assert8(assertion["@type"] === "dxos.halo.credentials.SpaceMember", "Invalid credential");
-              assert8(credential.subject.id.equals(this._signingContext.identityKey));
-              const space = await this._spaceManager.acceptSpace({
-                spaceKey: assertion.spaceKey,
-                genesisFeedKey: assertion.genesisFeedKey,
-                controlFeedKey,
-                dataFeedKey
-              });
-              log8("admitted by host", {
-                guest: this._signingContext.deviceKey,
-                spaceKey: space.key
-              }, {
-                file: "space-invitations-handler.ts",
-                line: 313,
-                scope: this,
-                callSite: (f, a) => f(...a)
-              });
-              complete.wake();
-            } catch (err) {
-              if (!observable.cancelled) {
-                log8.warn("auth failed", err, {
-                  file: "space-invitations-handler.ts",
-                  line: 317,
-                  scope: this,
-                  callSite: (f, a) => f(...a)
-                });
-                observable.callback.onError(err);
-              }
-            } finally {
-              await ctx.dispose();
-            }
-          });
-        }
-      });
-      return extension;
-    };
-    scheduleTask2(ctx, async () => {
-      var _a, _b;
-      assert8(invitation.swarmKey);
-      const topic = invitation.swarmKey;
-      const swarmConnection = await this._networkManager.joinSwarm({
-        topic,
-        peerId: PublicKey4.random(),
-        protocolProvider: createTeleportProtocolFactory2(async (teleport) => {
-          teleport.addExtension("dxos.halo.invitations", createExtension());
-        }),
-        topology: new StarTopology2(topic)
-      });
-      ctx.onDispose(() => swarmConnection.close());
-      (_b = (_a = observable.callback).onConnecting) == null ? void 0 : _b.call(_a, invitation);
-      await complete.wait();
-      observable.callback.onSuccess(invitation);
-      await ctx.dispose();
-    });
-    return observable;
-  }
-};
-var HostSpaceInvitationExtension = class extends RpcExtension2 {
-  constructor(_callbacks) {
-    super({
-      exposed: {
-        SpaceHostService: schema4.getService("dxos.halo.invitations.SpaceHostService")
-      }
-    });
-    this._callbacks = _callbacks;
-  }
-  async getHandlers() {
-    return {
-      // TODO(dmaretskyi): For now this is just forwarding the data to callbacks since we don't have session-specific logic.
-      // Perhaps in the future we will have more complex logic here.
-      SpaceHostService: {
-        introduce: async (params) => {
-          return this._callbacks.introduce(params);
-        },
-        authenticate: async (credentials) => {
-          return this._callbacks.authenticate(credentials);
-        },
-        requestAdmission: async (credentials) => {
-          return this._callbacks.requestAdmission(credentials);
-        }
-      }
-    };
-  }
-  async onOpen(context) {
-    await super.onOpen(context);
-    this._callbacks.onOpen();
-  }
-};
-var GuestSpaceInvitationExtension = class extends RpcExtension2 {
-  constructor(_callbacks) {
-    super({
-      requested: {
-        SpaceHostService: schema4.getService("dxos.halo.invitations.SpaceHostService")
-      }
-    });
-    this._callbacks = _callbacks;
-  }
-  async getHandlers() {
-    return {};
-  }
-  async onOpen(context) {
-    await super.onOpen(context);
-    this._callbacks.onOpen();
-  }
-};
-
-// packages/sdk/client-services/src/packlets/invitations/space-invitations-proxy.ts
-var SpaceInvitationsProxy = class extends AbstractInvitationsProxy {
-  getInvitationOptions(context) {
-    return {
-      spaceKey: context
-    };
-  }
-};
-
-// packages/sdk/client-services/src/packlets/invitations/space-invitations-service.ts
-import assert9 from "@dxos/node-std/assert";
-var SpaceInvitationsServiceImpl = class extends AbstractInvitationsService {
-  // prettier-ignore
-  constructor(identityManager, invitationsHandler, _getSpaceManager) {
-    super(identityManager, invitationsHandler);
-    this.invitationsHandler = invitationsHandler;
-    this._getSpaceManager = _getSpaceManager;
-  }
-  getContext(invitation) {
-    assert9(invitation.spaceKey);
-    const spaceManager = this._getSpaceManager();
-    const space = spaceManager.spaces.get(invitation.spaceKey);
-    assert9(space);
-    return space;
-  }
-};
-
-// packages/sdk/client-services/src/packlets/services/service-context.ts
-import { Trigger as Trigger4 } from "@dxos/async";
-import { failUndefined as failUndefined2 } from "@dxos/debug";
-import { MOCK_AUTH_PROVIDER, MOCK_AUTH_VERIFIER, valueEncoding, DataServiceSubscriptions, MetadataStore, SpaceManager, SnapshotStore } from "@dxos/echo-db";
-import { FeedFactory, FeedStore } from "@dxos/feed-store";
-import { Keyring } from "@dxos/keyring";
-import { log as log10 } from "@dxos/log";
-
-// packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts
-import { Event as Event3, synchronized, trackLeaks as trackLeaks2 } from "@dxos/async";
-import { Context as Context5 } from "@dxos/context";
-import { spaceGenesis, SnapshotManager } from "@dxos/echo-db";
-import { PublicKey as PublicKey5 } from "@dxos/keys";
-import { log as log9 } from "@dxos/log";
-import { Presence } from "@dxos/teleport-extension-presence";
-import { ComplexMap as ComplexMap2 } from "@dxos/util";
-
-// packages/sdk/client-services/src/packlets/spaces/data-space.ts
-import assert10 from "@dxos/node-std/assert";
-import { trackLeaks } from "@dxos/async";
-import { Context as Context4 } from "@dxos/context";
-import { DataPipelineControllerImpl } from "@dxos/echo-db";
-var __decorate = function(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
-    r = Reflect.decorate(decorators, target, key, desc);
-  else
-    for (var i = decorators.length - 1; i >= 0; i--)
-      if (d = decorators[i])
-        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var DataSpace = class DataSpace2 {
-  constructor(params) {
-    this._ctx = new Context4();
-    this._inner = params.inner;
-    this._presence = params.presence;
-    this._dataPipelineController = new DataPipelineControllerImpl({
-      modelFactory: params.modelFactory,
-      metadataStore: params.metadataStore,
-      snapshotManager: params.snapshotManager,
-      memberKey: params.memberKey,
-      spaceKey: this._inner.key,
-      feedInfoProvider: (feedKey) => this._inner.spaceState.feeds.get(feedKey),
-      snapshotId: params.snapshotId
-    });
-  }
-  get key() {
-    return this._inner.key;
-  }
-  get inner() {
-    return this._inner;
-  }
-  get isOpen() {
-    return this._inner.isOpen;
-  }
-  get dataPipelineController() {
-    return this._dataPipelineController;
-  }
-  get database() {
-    assert10(this._dataPipelineController.database);
-    return this._dataPipelineController.database;
-  }
-  get stateUpdate() {
-    return this._inner.stateUpdate;
-  }
-  get presence() {
-    return this._presence;
-  }
-  async open() {
-    await this._inner.open();
-    await this._inner.initDataPipeline(this._dataPipelineController);
-  }
-  async close() {
-    await this._ctx.dispose();
-    await this._inner.close();
-    await this._presence.destroy();
-  }
-};
-DataSpace = __decorate([
-  trackLeaks("open", "close")
-], DataSpace);
-
-// packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts
-var __decorate2 = function(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
-    r = Reflect.decorate(decorators, target, key, desc);
-  else
-    for (var i = decorators.length - 1; i >= 0; i--)
-      if (d = decorators[i])
-        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var DataSpaceManager = class DataSpaceManager2 {
-  constructor(_spaceManager, _metadataStore, _dataServiceSubscriptions, _keyring, _signingContext, _modelFactory, _snapshotStore) {
-    this._spaceManager = _spaceManager;
-    this._metadataStore = _metadataStore;
-    this._dataServiceSubscriptions = _dataServiceSubscriptions;
-    this._keyring = _keyring;
-    this._signingContext = _signingContext;
-    this._modelFactory = _modelFactory;
-    this._snapshotStore = _snapshotStore;
-    this._ctx = new Context5();
-    this.updated = new Event3();
-    this._spaces = new ComplexMap2(PublicKey5.hash);
-  }
-  // TODO(burdon): Remove.
-  get spaces() {
-    return this._spaces;
-  }
-  async open() {
-    await this._metadataStore.load();
-    log9("metadata loaded", {
-      spaces: this._metadataStore.spaces.length
-    }, {
-      file: "data-space-manager.ts",
-      line: 54,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    for (const spaceMetadata of this._metadataStore.spaces) {
-      log9("load space", {
-        spaceMetadata
-      }, {
-        file: "data-space-manager.ts",
-        line: 57,
-        scope: this,
-        callSite: (f, a) => f(...a)
-      });
-      const space = await this._constructSpace(spaceMetadata);
-      if (spaceMetadata.latestTimeframe) {
-        log9("waiting for latest timeframe", {
-          spaceMetadata
-        }, {
-          file: "data-space-manager.ts",
-          line: 60,
-          scope: this,
-          callSite: (f, a) => f(...a)
-        });
-        await space.dataPipelineController.waitUntilTimeframe(spaceMetadata.latestTimeframe);
-      }
-    }
-  }
-  async close() {
-    await this._ctx.dispose();
-    for (const space of this._spaces.values()) {
-      await space.close();
-    }
-  }
-  /**
-  * Creates a new space writing the genesis credentials to the control feed.
-  */
-  async createSpace() {
-    const spaceKey = await this._keyring.createKey();
-    const controlFeedKey = await this._keyring.createKey();
-    const dataFeedKey = await this._keyring.createKey();
-    const metadata = {
-      key: spaceKey,
-      genesisFeedKey: controlFeedKey,
-      controlFeedKey,
-      dataFeedKey
-    };
-    log9("creating space...", {
-      spaceKey
-    }, {
-      file: "data-space-manager.ts",
-      line: 89,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    const space = await this._constructSpace(metadata);
-    await spaceGenesis(this._keyring, this._signingContext, space.inner);
-    await this._metadataStore.addSpace(metadata);
-    this.updated.emit();
-    return space;
-  }
-  // TODO(burdon): Rename join space.
-  async acceptSpace(opts) {
-    const metadata = {
-      key: opts.spaceKey,
-      genesisFeedKey: opts.genesisFeedKey,
-      controlFeedKey: opts.controlFeedKey,
-      dataFeedKey: opts.dataFeedKey
-    };
-    const space = await this._constructSpace(metadata);
-    await this._metadataStore.addSpace(metadata);
-    this.updated.emit();
-    return space;
-  }
-  async _constructSpace(metadata) {
-    const presence = new Presence({
-      localPeerId: this._signingContext.deviceKey,
-      announceInterval: 1e3,
-      offlineTimeout: 3e4,
-      identityKey: this._signingContext.identityKey
-    });
-    const snapshotManager = new SnapshotManager(this._snapshotStore);
-    const space = await this._spaceManager.constructSpace({
-      metadata,
-      swarmIdentity: {
-        peerKey: this._signingContext.deviceKey,
-        credentialProvider: this._signingContext.credentialProvider,
-        credentialAuthenticator: this._signingContext.credentialAuthenticator
-      },
-      onNetworkConnection: (session) => {
-        session.addExtension("dxos.mesh.teleport.presence", presence.createExtension({
-          remotePeerId: session.remotePeerId
-        }));
-        session.addExtension("dxos.mesh.teleport.objectsync", snapshotManager.objectSync.createExtension());
-      }
-    });
-    const dataSpace = new DataSpace({
-      inner: space,
-      modelFactory: this._modelFactory,
-      metadataStore: this._metadataStore,
-      snapshotManager,
-      presence,
-      memberKey: this._signingContext.identityKey,
-      snapshotId: metadata.snapshot
-    });
-    await dataSpace.open();
-    this._dataServiceSubscriptions.registerSpace(space.key, dataSpace.database.createDataServiceHost());
-    this._spaces.set(metadata.key, dataSpace);
-    return dataSpace;
-  }
-};
-__decorate2([
-  synchronized
-], DataSpaceManager.prototype, "open", null);
-__decorate2([
-  synchronized
-], DataSpaceManager.prototype, "close", null);
-__decorate2([
-  synchronized
-], DataSpaceManager.prototype, "createSpace", null);
-__decorate2([
-  synchronized
-], DataSpaceManager.prototype, "acceptSpace", null);
-DataSpaceManager = __decorate2([
-  trackLeaks2("open", "close")
-], DataSpaceManager);
-
-// packages/sdk/client-services/src/packlets/services/service-context.ts
-var ServiceContext = class {
-  // prettier-ignore
-  constructor(storage, networkManager, modelFactory) {
-    this.storage = storage;
-    this.networkManager = networkManager;
-    this.modelFactory = modelFactory;
-    this.initialized = new Trigger4();
-    this.dataServiceSubscriptions = new DataServiceSubscriptions();
-    this.metadataStore = new MetadataStore(storage.createDirectory("metadata"));
-    this.snapshotStore = new SnapshotStore(storage.createDirectory("snapshots"));
-    this.keyring = new Keyring(storage.createDirectory("keyring"));
-    this.feedStore = new FeedStore({
-      factory: new FeedFactory({
-        root: storage.createDirectory("feeds"),
-        signer: this.keyring,
-        hypercore: {
-          valueEncoding
-        }
-      })
-    });
-    this.spaceManager = new SpaceManager({
-      feedStore: this.feedStore,
-      networkManager: this.networkManager
-    });
-    this.identityManager = new IdentityManager(this.metadataStore, this.keyring, this.spaceManager);
-    this.haloInvitations = new HaloInvitationsHandler(this.networkManager, this.identityManager);
-  }
-  async open() {
-    log10("opening...", {}, {
-      file: "service-context.ts",
-      line: 85,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    await this.networkManager.open();
-    await this.spaceManager.open();
-    await this.identityManager.open();
-    if (this.identityManager.identity) {
-      await this._initialize();
-    }
-    log10("opened", {}, {
-      file: "service-context.ts",
-      line: 92,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-  }
-  async close() {
-    var _a;
-    log10("closing...", {}, {
-      file: "service-context.ts",
-      line: 96,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    await ((_a = this.dataSpaceManager) == null ? void 0 : _a.close());
-    await this.identityManager.close();
-    await this.spaceManager.close();
-    await this.feedStore.close();
-    await this.networkManager.close();
-    this.dataServiceSubscriptions.clear();
-    log10("closed", {}, {
-      file: "service-context.ts",
-      line: 103,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-  }
-  async reset() {
-    log10("resetting...", {}, {
-      file: "service-context.ts",
-      line: 107,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    await this.close();
-    await this.storage.reset();
-    log10("reset", {}, {
-      file: "service-context.ts",
-      line: 110,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-  }
-  async createIdentity(params = {}) {
-    const identity = await this.identityManager.createIdentity(params);
-    await this._initialize();
-    return identity;
-  }
-  // Called when identity is created.
-  async _initialize() {
-    var _a;
-    log10("initializing spaces...", {}, {
-      file: "service-context.ts",
-      line: 122,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    const identity = (_a = this.identityManager.identity) != null ? _a : failUndefined2();
-    const signingContext = {
-      credentialProvider: MOCK_AUTH_PROVIDER,
-      credentialAuthenticator: MOCK_AUTH_VERIFIER,
-      credentialSigner: identity.getIdentityCredentialSigner(),
-      identityKey: identity.identityKey,
-      deviceKey: identity.deviceKey,
-      profile: identity.profileDocument
-    };
-    this.dataSpaceManager = new DataSpaceManager(this.spaceManager, this.metadataStore, this.dataServiceSubscriptions, this.keyring, signingContext, this.modelFactory, this.snapshotStore);
-    await this.dataSpaceManager.open();
-    this.spaceInvitations = new SpaceInvitationsHandler(this.networkManager, this.dataSpaceManager, signingContext, this.keyring);
-    this.initialized.wake();
-  }
-};
-
-// packages/sdk/client-services/src/packlets/services/service-definitions.ts
-import { schema as schema5 } from "@dxos/protocols";
-import { createServiceBundle } from "@dxos/rpc";
-var clientServiceBundle = createServiceBundle({
-  HaloInvitationsService: schema5.getService("dxos.client.services.HaloInvitationsService"),
-  DevicesService: schema5.getService("dxos.client.services.DevicesService"),
-  SpaceInvitationsService: schema5.getService("dxos.client.services.SpaceInvitationsService"),
-  SpacesService: schema5.getService("dxos.client.services.SpacesService"),
-  NetworkService: schema5.getService("dxos.client.services.NetworkService"),
-  // TODO(burdon): Deprecated.
-  SpaceService: schema5.getService("dxos.client.SpaceService"),
-  DataService: schema5.getService("dxos.echo.service.DataService"),
-  ProfileService: schema5.getService("dxos.client.ProfileService"),
-  SystemService: schema5.getService("dxos.client.SystemService"),
-  DevtoolsHost: schema5.getService("dxos.devtools.host.DevtoolsHost"),
-  TracingService: schema5.getService("dxos.devtools.host.TracingService")
-});
-
-// packages/sdk/client-services/src/packlets/services/service-host.ts
-import { raise as raise2 } from "@dxos/debug";
-import { DataServiceImpl } from "@dxos/echo-db";
-import { log as log11 } from "@dxos/log";
-import { ModelFactory } from "@dxos/model-factory";
-import { ObjectModel } from "@dxos/object-model";
-import { TextModel } from "@dxos/text-model";
-
-// packages/sdk/client-services/src/packlets/identity/devices-service-impl.ts
-import { EventSubscriptions as EventSubscriptions3 } from "@dxos/async";
-import { Stream as Stream9 } from "@dxos/codec-protobuf";
-var DevicesServiceImpl = class {
-  constructor(_identityManager) {
-    this._identityManager = _identityManager;
-  }
-  updateDevice() {
-    throw new Error("Method not implemented.");
-  }
-  queryDevices() {
-    return new Stream9(({ next }) => {
-      const update = () => {
-        var _a;
-        const deviceKeys = (_a = this._identityManager.identity) == null ? void 0 : _a.authorizedDeviceKeys;
-        if (!deviceKeys) {
-          next({
-            devices: []
-          });
-        } else {
-          next({
-            devices: Array.from(deviceKeys.values()).map((key) => ({
-              deviceKey: key
-            }))
-          });
-        }
-      };
-      const dispose = new EventSubscriptions3();
-      dispose.add(this._identityManager.stateUpdate.on(() => {
-        update();
-        if (this._identityManager.identity) {
-          dispose.add(this._identityManager.identity.stateUpdate.on(() => {
-            update();
-          }));
-        }
-      }));
-      update();
-      return () => dispose.clear();
-    });
-  }
-};
-
-// packages/sdk/client-services/src/packlets/network/network-service.ts
-import { Stream as Stream10 } from "@dxos/codec-protobuf";
-var NetworkServiceImpl = class {
-  constructor(networkManager) {
-    this.networkManager = networkManager;
-  }
-  subscribeToNetworkStatus() {
-    return new Stream10(({ next }) => {
-      const unsubscribe = this.networkManager.connectionStateChanged.on((state) => next({
-        state
-      }));
-      next({
-        state: this.networkManager.connectionState
-      });
-      return unsubscribe;
-    });
-  }
-  async setNetworkOptions(request) {
-    await this.networkManager.setConnectionState(request.state);
-  }
-};
-
-// packages/sdk/client-services/src/packlets/spaces/spaces-service.ts
-import { scheduleTask as scheduleTask3 } from "@dxos/async";
-import { Stream as Stream11 } from "@dxos/codec-protobuf";
-import { raise } from "@dxos/debug";
-import { SpaceNotFoundError } from "@dxos/echo-db";
-var SpacesServiceImpl = class {
-  constructor(_spaceManager) {
-    this._spaceManager = _spaceManager;
-  }
-  async createSpace() {
-    throw new Error();
-  }
-  querySpaces() {
-    throw new Error();
-  }
-  queryMembers(query) {
-    throw new Error();
-  }
-  queryCredentials({ spaceKey }) {
-    return new Stream11(({ ctx, next }) => {
-      var _a;
-      const space = (_a = this._spaceManager.spaces.get(spaceKey)) != null ? _a : raise(new SpaceNotFoundError(spaceKey));
-      const processor = space.spaceState.registerProcessor({
-        process: async (credential) => {
-          next(credential);
-        }
-      });
-      ctx.onDispose(() => processor.close());
-      scheduleTask3(ctx, () => processor.open());
-    });
-  }
-};
-
-// packages/sdk/client-services/src/packlets/storage/storage.ts
-import { InvalidConfigError } from "@dxos/errors";
-import { Runtime } from "@dxos/protocols/proto/dxos/config";
-import { createStorage, StorageType } from "@dxos/random-access-storage";
-var StorageDriver = Runtime.Client.Storage.StorageDriver;
-var createStorageObjects = (config) => {
-  const { path = "dxos/storage", storageType, keyStorage, persistent = false } = config != null ? config : {};
-  if (persistent && storageType === StorageDriver.RAM) {
-    throw new InvalidConfigError("RAM storage cannot be used in persistent mode.");
-  }
-  if (!persistent && storageType !== void 0 && storageType !== StorageDriver.RAM) {
-    throw new InvalidConfigError("Cannot use a persistent storage in not persistent mode.");
-  }
-  if (persistent && keyStorage === StorageDriver.RAM) {
-    throw new InvalidConfigError("RAM key storage cannot be used in persistent mode.");
-  }
-  if (!persistent && keyStorage !== StorageDriver.RAM && keyStorage !== void 0) {
-    throw new InvalidConfigError("Cannot use a persistent key storage in not persistent mode.");
-  }
-  return {
-    storage: createStorage({
-      type: persistent ? toStorageType(storageType) : StorageType.RAM,
-      root: `${path}/`
-    })
-  };
-};
-var toStorageType = (type) => {
-  switch (type) {
-    case void 0:
-      return void 0;
-    case StorageDriver.RAM:
-      return StorageType.RAM;
-    case StorageDriver.CHROME:
-      return StorageType.CHROME;
-    case StorageDriver.FIREFOX:
-      return StorageType.FIREFOX;
-    case StorageDriver.IDB:
-      return StorageType.IDB;
-    case StorageDriver.NODE:
-      return StorageType.NODE;
-    default:
-      throw new Error(`Invalid storage type: ${StorageDriver[type]}`);
-  }
-};
-
-// packages/sdk/client-services/src/packlets/services/service-registry.ts
-var ServiceRegistry = class {
-  // prettier-ignore
-  constructor(_serviceBundle, _handlers) {
-    this._serviceBundle = _serviceBundle;
-    this._handlers = _handlers;
-  }
-  get descriptors() {
-    return this._serviceBundle;
-  }
-  get services() {
-    return this._handlers;
-  }
-};
-
-// packages/sdk/client-services/src/packlets/services/service-host.ts
-var createDefaultModelFactory = () => {
-  return new ModelFactory().registerModel(ObjectModel).registerModel(TextModel);
-};
-var ClientServicesHost = class {
-  constructor({
-    config,
-    modelFactory = createDefaultModelFactory(),
-    // TODO(burdon): Create ApolloLink abstraction (see Client).
-    networkManager,
-    storage = createStorageObjects(config.get("runtime.client.storage", {})).storage
-  }) {
-    this._config = config;
-    this._modelFactory = modelFactory;
-    this._networkManager = networkManager;
-    this._storage = storage;
-  }
-  get descriptors() {
-    return this._serviceRegistry.descriptors;
-  }
-  get services() {
-    return this._serviceRegistry.services;
-  }
-  async open() {
-    var _a;
-    log11("opening...", {}, {
-      file: "service-host.ts",
-      line: 73,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    await this._initialize();
-    await this._serviceContext.open();
-    const deviceKey = (_a = this._serviceContext.identityManager.identity) == null ? void 0 : _a.deviceKey;
-    log11("opened", {
-      deviceKey
-    }, {
-      file: "service-host.ts",
-      line: 77,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-  }
-  async close() {
-    var _a;
-    const deviceKey = (_a = this._serviceContext.identityManager.identity) == null ? void 0 : _a.deviceKey;
-    log11("closing...", {
-      deviceKey
-    }, {
-      file: "service-host.ts",
-      line: 82,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    await this._serviceContext.close();
-    log11("closed", {
-      deviceKey
-    }, {
-      file: "service-host.ts",
-      line: 84,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-  }
-  // TODO(burdon): Move into open.
-  async _initialize() {
-    this._serviceContext = new ServiceContext(this._storage, this._networkManager, this._modelFactory);
-    this._serviceRegistry = new ServiceRegistry(clientServiceBundle, {
-      HaloInvitationsService: new HaloInvitationsServiceImpl(this._serviceContext.identityManager, this._serviceContext.haloInvitations),
-      DevicesService: new DevicesServiceImpl(this._serviceContext.identityManager),
-      SpaceInvitationsService: new SpaceInvitationsServiceImpl(this._serviceContext.identityManager, () => {
-        var _a;
-        return (_a = this._serviceContext.spaceInvitations) != null ? _a : raise2(new Error("SpaceInvitations not initialized"));
-      }, () => {
-        var _a;
-        return (_a = this._serviceContext.dataSpaceManager) != null ? _a : raise2(new Error("SpaceManager not initialized"));
-      }),
-      SpacesService: new SpacesServiceImpl(this._serviceContext.spaceManager),
-      DataService: new DataServiceImpl(this._serviceContext.dataServiceSubscriptions),
-      NetworkService: new NetworkServiceImpl(this._serviceContext.networkManager),
-      // TODO(burdon): Move to new protobuf definitions.
-      ProfileService: new ProfileServiceImpl(this._serviceContext),
-      SpaceService: new SpaceServiceImpl(this._serviceContext),
-      SystemService: new SystemServiceImpl(this._config, this._serviceContext),
-      TracingService: new TracingServiceImpl(this._config),
-      DevtoolsHost: new DevtoolsServiceImpl({
-        events: new DevtoolsHostEvents(),
-        config: this._config,
-        context: this._serviceContext
-      })
-    });
-  }
-};
-
-// packages/sdk/client-services/src/packlets/services/service-proxy.ts
-import { asyncTimeout } from "@dxos/async";
-import { RemoteServiceConnectionTimeout } from "@dxos/errors";
-import { createProtoRpcPeer } from "@dxos/rpc";
-var ClientServicesProxy = class {
-  // prettier-ignore
-  constructor(port, _timeout = 3e4) {
-    this._timeout = _timeout;
-    this._proxy = createProtoRpcPeer({
-      requested: clientServiceBundle,
-      exposed: {},
-      handlers: {},
-      port
-    });
-  }
-  get proxy() {
-    return this._proxy;
-  }
-  get descriptors() {
-    return clientServiceBundle;
-  }
-  get services() {
-    return this._proxy.rpc;
-  }
-  async open() {
-    await asyncTimeout(this._proxy.open(), this._timeout, new RemoteServiceConnectionTimeout());
-  }
-  async close() {
-    await this._proxy.close();
-  }
-};
-
-// packages/sdk/client-services/src/packlets/vault/iframe-runtime.ts
-import { WebRTCTransportService } from "@dxos/network-manager";
-import { createProtoRpcPeer as createProtoRpcPeer2 } from "@dxos/rpc";
-
-// packages/sdk/client-services/src/packlets/vault/services.ts
-import { schema as schema6 } from "@dxos/protocols";
-var iframeServiceBundle = {
-  IframeService: schema6.getService("dxos.iframe.IframeService"),
-  BridgeService: schema6.getService("dxos.mesh.bridge.BridgeService")
-};
-var workerServiceBundle = {
-  WorkerService: schema6.getService("dxos.iframe.WorkerService")
-};
-
-// packages/sdk/client-services/src/packlets/vault/iframe-runtime.ts
-var IFrameRuntime = class {
-  constructor({ systemPort, workerAppPort, windowAppPort }) {
-    this._transportService = new WebRTCTransportService();
-    this._systemPort = systemPort;
-    this._windowAppPort = windowAppPort;
-    this._workerAppPort = workerAppPort;
-    this._systemRpc = createProtoRpcPeer2({
-      requested: workerServiceBundle,
-      exposed: iframeServiceBundle,
-      handlers: {
-        BridgeService: this._transportService,
-        IframeService: {
-          async heartbeat() {
-          }
-        }
-      },
-      port: this._systemPort,
-      timeout: 200
-    });
-    this._workerAppPort.subscribe((msg) => this._windowAppPort.send(msg));
-    this._windowAppPort.subscribe((msg) => this._workerAppPort.send(msg));
-  }
-  async open(origin) {
-    await this._systemRpc.open();
-    await this._systemRpc.rpc.WorkerService.start({
-      origin
-    });
-  }
-  async close() {
-    await this._systemRpc.rpc.WorkerService.stop();
-    await this._systemRpc.close();
-  }
-};
-
-// packages/sdk/client-services/src/packlets/vault/worker-runtime.ts
-import { Trigger as Trigger6 } from "@dxos/async";
-import { MemorySignalManager, MemorySignalManagerContext, WebsocketSignalManager } from "@dxos/messaging";
-import { NetworkManager, WebRTCTransportProxyFactory } from "@dxos/network-manager";
-
-// packages/sdk/client-services/src/packlets/vault/worker-session.ts
-import assert11 from "@dxos/node-std/assert";
-import { Trigger as Trigger5 } from "@dxos/async";
-import { log as log12, logInfo } from "@dxos/log";
-import { createProtoRpcPeer as createProtoRpcPeer3 } from "@dxos/rpc";
-import { Callback } from "@dxos/util";
-var __decorate3 = function(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
-    r = Reflect.decorate(decorators, target, key, desc);
-  else
-    for (var i = decorators.length - 1; i >= 0; i--)
-      if (d = decorators[i])
-        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var WorkerSession = class {
-  constructor({ getServices, systemPort, appPort, options = {
-    heartbeatInterval: 1e3
-  } }) {
-    this._startTrigger = new Trigger5();
-    this.onClose = new Callback();
-    assert11(options);
-    assert11(getServices);
-    this._options = options;
-    this._getServices = getServices;
-    this._clientRpc = createProtoRpcPeer3({
-      exposed: clientServiceBundle,
-      handlers: {
-        HaloInvitationsService: async () => (await this._getServices()).services.HaloInvitationsService,
-        DevicesService: async () => (await this._getServices()).services.DevicesService,
-        SpaceInvitationsService: async () => (await this._getServices()).services.SpaceInvitationsService,
-        SpacesService: async () => (await this._getServices()).services.SpacesService,
-        NetworkService: async () => (await this._getServices()).services.NetworkService,
-        SpaceService: async () => (await this._getServices()).services.SpaceService,
-        DataService: async () => (await this._getServices()).services.DataService,
-        ProfileService: async () => (await this._getServices()).services.ProfileService,
-        SystemService: async () => (await this._getServices()).services.SystemService,
-        DevtoolsHost: async () => (await this._getServices()).services.DevtoolsHost,
-        TracingService: async () => (await this._getServices()).services.TracingService
-      },
-      port: appPort
-    });
-    this._iframeRpc = createProtoRpcPeer3({
-      requested: iframeServiceBundle,
-      exposed: workerServiceBundle,
-      handlers: {
-        WorkerService: {
-          start: async (request) => {
-            this.origin = request.origin;
-            this._startTrigger.wake();
-          },
-          stop: async () => {
-            setTimeout(async () => {
-              try {
-                await this.close();
-              } catch (err) {
-                log12.catch(err, {}, {
-                  file: "worker-session.ts",
-                  line: 90,
-                  scope: this,
-                  callSite: (f, a) => f(...a)
-                });
-              }
-            });
-          }
-        }
-      },
-      port: systemPort,
-      timeout: 1e3
-      // With low timeout heartbeat may fail if the tab's thread is saturated.
-    });
-    this.bridgeService = this._iframeRpc.rpc.BridgeService;
-  }
-  async open() {
-    log12.info("opening..", {}, {
-      file: "worker-session.ts",
-      line: 104,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    await Promise.all([
-      this._clientRpc.open(),
-      this._iframeRpc.open()
-    ]);
-    await this._startTrigger.wait({
-      timeout: 3e3
-    });
-    this._heartbeatTimer = setInterval(async () => {
-      try {
-        await this._iframeRpc.rpc.IframeService.heartbeat();
-      } catch (err1) {
-        log12.warn("Heartbeat failed", {
-          err: err1
-        }, {
-          file: "worker-session.ts",
-          line: 116,
-          scope: this,
-          callSite: (f, a) => f(...a)
-        });
-        try {
-          await this.close();
-        } catch (err) {
-          log12.catch(err, {}, {
-            file: "worker-session.ts",
-            line: 120,
-            scope: this,
-            callSite: (f, a) => f(...a)
-          });
-        }
-      }
-    }, this._options.heartbeatInterval);
-  }
-  async close() {
-    log12.info("closing..", {}, {
-      file: "worker-session.ts",
-      line: 127,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    try {
-      await this.onClose.callIfSet();
-    } catch (err) {
-      log12.catch(err, {}, {
-        file: "worker-session.ts",
-        line: 131,
-        scope: this,
-        callSite: (f, a) => f(...a)
-      });
-    }
-    if (this._heartbeatTimer !== void 0) {
-      clearInterval(this._heartbeatTimer);
-    }
-    await Promise.all([
-      this._clientRpc.close(),
-      this._iframeRpc.close()
-    ]);
-  }
-};
-__decorate3([
-  logInfo
-], WorkerSession.prototype, "origin", void 0);
-
-// packages/sdk/client-services/src/packlets/vault/worker-runtime.ts
-var WorkerRuntime = class {
-  // prettier-ignore
-  constructor(_configProvider) {
-    this._configProvider = _configProvider;
-    this._transportFactory = new WebRTCTransportProxyFactory();
-    this._ready = new Trigger6();
-    this.sessions = /* @__PURE__ */ new Set();
-  }
-  async start() {
-    try {
-      this._config = await this._configProvider();
-      const signalServer = this._config.get("runtime.services.signal.server");
-      this._clientServices = new ClientServicesHost({
-        config: this._config,
-        networkManager: new NetworkManager({
-          log: true,
-          signalManager: signalServer ? new WebsocketSignalManager([
-            signalServer
-          ]) : new MemorySignalManager(new MemorySignalManagerContext()),
-          transportFactory: this._transportFactory
-        })
-      });
-      await this._clientServices.open();
-      this._ready.wake(void 0);
-    } catch (err) {
-      this._ready.wake(err);
-    }
-  }
-  async stop() {
-    await this._clientServices.close();
-  }
-  /**
-  * Create a new session.
-  */
-  async createSession({ appPort, systemPort }) {
-    const session = new WorkerSession({
-      getServices: async () => {
-        const error = await this._ready.wait();
-        if (error !== void 0) {
-          throw error;
-        }
-        return this._clientServices;
-      },
-      appPort,
-      systemPort,
-      readySignal: this._ready
-    });
-    session.onClose.set(async () => {
-      this.sessions.delete(session);
-      this._reconnectWebrtc();
-    });
-    await session.open();
-    this.sessions.add(session);
-    this._reconnectWebrtc();
-  }
-  /**
-  * Selects one of the existing session fro WebRTC networking.
-  */
-  _reconnectWebrtc() {
-    if (this._sessionForNetworking) {
-      if (!this.sessions.has(this._sessionForNetworking)) {
-        this._sessionForNetworking = void 0;
-      }
-    }
-    if (!this._sessionForNetworking) {
-      const selected = Array.from(this.sessions).find((session) => session.bridgeService);
-      if (selected) {
-        this._sessionForNetworking = selected;
-        this._transportFactory.setBridgeService(selected.bridgeService);
-      } else {
-        this._transportFactory.setBridgeService(void 0);
-      }
-    }
-  }
-};
+import {
+  AUTHENTICATION_CODE_LENGTH,
+  AbstractInvitationsHandler,
+  AbstractInvitationsProxy,
+  AbstractInvitationsService,
+  AuthenticatingInvitationProvider,
+  ClientServicesHost,
+  ClientServicesProxy,
+  DevtoolsHostEvents,
+  DevtoolsServiceImpl,
+  HaloInvitationsHandler,
+  HaloInvitationsProxy,
+  HaloInvitationsServiceImpl,
+  IFrameHostRuntime,
+  IFrameProxyRuntime,
+  INVITATION_TIMEOUT,
+  Identity,
+  IdentityManager,
+  InvitationEncoder,
+  InvitationObservableProvider,
+  MemoryShellRuntime,
+  ON_CLOSE_DELAY,
+  ProfileServiceImpl,
+  ServiceContext,
+  ServiceRegistry,
+  ShellController,
+  ShellRuntimeImpl,
+  SpaceInvitationsHandler,
+  SpaceInvitationsProxy,
+  SpaceInvitationsServiceImpl,
+  SpaceServiceImpl,
+  SystemServiceImpl,
+  TracingServiceImpl,
+  TrustedKeySetAuthVerifier,
+  VaultResourceLock,
+  WorkerRuntime,
+  WorkerSession,
+  appServiceBundle,
+  clientServiceBundle,
+  createAuthProvider,
+  createDefaultModelFactory,
+  createStorageObjects,
+  getNetworkPeers,
+  iframeServiceBundle,
+  shellServiceBundle,
+  subscribeToFeedBlocks,
+  subscribeToFeeds,
+  subscribeToNetworkStatus,
+  subscribeToNetworkTopics,
+  subscribeToSignal,
+  subscribeToSpaces,
+  subscribeToSwarmInfo,
+  workerServiceBundle,
+  wrapObservable
+} from "./chunk-ZPZBLOQW.mjs";
 export {
   AUTHENTICATION_CODE_LENGTH,
   AbstractInvitationsHandler,
@@ -3032,40 +64,49 @@ export {
   ClientServicesProxy,
   DevtoolsHostEvents,
   DevtoolsServiceImpl,
-  HaloAuthVerifier,
   HaloInvitationsHandler,
   HaloInvitationsProxy,
   HaloInvitationsServiceImpl,
-  IFrameRuntime,
+  IFrameHostRuntime,
+  IFrameProxyRuntime,
   INVITATION_TIMEOUT,
   Identity,
   IdentityManager,
   InvitationEncoder,
   InvitationObservableProvider,
+  MemoryShellRuntime,
   ON_CLOSE_DELAY,
   ProfileServiceImpl,
   ServiceContext,
   ServiceRegistry,
+  ShellController,
+  ShellRuntimeImpl,
   SpaceInvitationsHandler,
   SpaceInvitationsProxy,
   SpaceInvitationsServiceImpl,
   SpaceServiceImpl,
   SystemServiceImpl,
   TracingServiceImpl,
+  TrustedKeySetAuthVerifier,
+  VaultResourceLock,
   WorkerRuntime,
   WorkerSession,
+  appServiceBundle,
   clientServiceBundle,
+  createAuthProvider,
   createDefaultModelFactory,
-  createHaloAuthProvider,
   createStorageObjects,
   getNetworkPeers,
+  iframeServiceBundle,
+  shellServiceBundle,
   subscribeToFeedBlocks,
   subscribeToFeeds,
   subscribeToNetworkStatus,
   subscribeToNetworkTopics,
-  subscribeToSignalTrace,
+  subscribeToSignal,
   subscribeToSpaces,
   subscribeToSwarmInfo,
+  workerServiceBundle,
   wrapObservable
 };
 //# sourceMappingURL=index.mjs.map