@dxos/client-services 0.1.49-next.fdd6c88 → 0.1.50-next.1bfebf8

package/dist/lib/browser/{chunk-KMQOZOUZ.mjs → chunk-UL74TKNZ.mjs}

@@ -199,7 +199,7 @@ var subscribeToSpaces = (context, { spaceKeys = [] }) => {
 
 // packages/sdk/client-services/src/packlets/devtools/devtools.ts
 import { Event as AsyncEvent } from "@dxos/async";
-import { Stream as Stream5 } from "@dxos/codec-protobuf";
+import { Stream as Stream6 } from "@dxos/codec-protobuf";
 
 // packages/sdk/client-services/src/packlets/devtools/keys.ts
 import { scheduleTask } from "@dxos/async";
@@ -214,6 +214,17 @@ var subscribeToKeyringKeys = ({ keyring }) => new Stream4(({ next, ctx }) => {
   scheduleTask(ctx, update);
 });
 
+// packages/sdk/client-services/src/packlets/devtools/metadata.ts
+import { Stream as Stream5 } from "@dxos/codec-protobuf";
+var subscribeToMetadata = ({ context }) => new Stream5(({ next, ctx }) => {
+  context.metadataStore.update.on(ctx, (data) => next({
+    metadata: data
+  }));
+  next({
+    metadata: context.metadataStore.metadata
+  });
+});
+
 // packages/sdk/client-services/src/packlets/devtools/devtools.ts
 var DevtoolsHostEvents = class {
   constructor() {
@@ -225,7 +236,7 @@ var DevtoolsServiceImpl = class {
     this.params = params;
   }
   events(request) {
-    return new Stream5(({ next }) => {
+    return new Stream6(({ next }) => {
       this.params.events.ready.on(() => {
         next({
           ready: {}
@@ -317,6 +328,11 @@ var DevtoolsServiceImpl = class {
       networkManager: this.params.context.networkManager
     });
   }
+  subscribeToMetadata() {
+    return subscribeToMetadata({
+      context: this.params.context
+    });
+  }
 };
 
 // packages/sdk/client-services/src/packlets/identity/authenticator.ts
@@ -840,7 +856,7 @@ var IdentityManager = class {
 
 // packages/sdk/client-services/src/packlets/identity/identity-service.ts
 import assert3 from "@dxos/node-std/assert";
-import { Stream as Stream6 } from "@dxos/codec-protobuf";
+import { Stream as Stream7 } from "@dxos/codec-protobuf";
 import { signPresentation } from "@dxos/credentials";
 import { todo } from "@dxos/debug";
 var IdentityServiceImpl = class {
@@ -856,7 +872,7 @@ var IdentityServiceImpl = class {
     return todo();
   }
   queryIdentity() {
-    return new Stream6(({ next }) => {
+    return new Stream7(({ next }) => {
       const emitNext = () => next({
         identity: this._getIdentity()
       });
@@ -1788,7 +1804,7 @@ var InvitationsHandler = class {
 // packages/sdk/client-services/src/packlets/invitations/invitations-service.ts
 import assert7 from "@dxos/node-std/assert";
 import { Event as Event3 } from "@dxos/async";
-import { Stream as Stream7 } from "@dxos/codec-protobuf";
+import { Stream as Stream8 } from "@dxos/codec-protobuf";
 import { log as log6 } from "@dxos/log";
 import { QueryInvitationsResponse } from "@dxos/protocols/proto/dxos/client/services";
 var InvitationsServiceImpl = class {
@@ -1817,7 +1833,7 @@ var InvitationsServiceImpl = class {
       this._createInvitations.set(invitation.get().invitationId, invitation);
       this._invitationCreated.emit(invitation.get());
     }
-    return new Stream7(({ next, close }) => {
+    return new Stream8(({ next, close }) => {
       invitation.subscribe((invitation2) => {
         next(invitation2);
       }, (err) => {
@@ -1839,7 +1855,7 @@ var InvitationsServiceImpl = class {
       this._acceptInvitations.set(invitation.get().invitationId, invitation);
       this._invitationAccepted.emit(invitation.get());
     }
-    return new Stream7(({ next, close }) => {
+    return new Stream8(({ next, close }) => {
       invitation.subscribe((invitation2) => {
         next(invitation2);
       }, (err) => {
@@ -1902,7 +1918,7 @@ var InvitationsServiceImpl = class {
     }
   }
   queryInvitations() {
-    return new Stream7(({ next, ctx }) => {
+    return new Stream8(({ next, ctx }) => {
       this._invitationCreated.on(ctx, (invitation) => {
         next({
           action: QueryInvitationsResponse.Action.ADDED,
@@ -2043,6 +2059,131 @@ var SpaceInvitationProtocol = class {
   }
 };
 
+// packages/sdk/client-services/src/packlets/locks/browser.ts
+import { asyncTimeout, Trigger as Trigger4 } from "@dxos/async";
+import { RESOURCE_LOCK_TIMEOUT } from "@dxos/client-protocol";
+import { log as log8, logInfo } from "@dxos/log";
+var __decorate = function(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
+    r = Reflect.decorate(decorators, target, key, desc);
+  else
+    for (var i = decorators.length - 1; i >= 0; i--)
+      if (d = decorators[i])
+        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var Message;
+(function(Message2) {
+  Message2["ACQUIRING"] = "acquiring";
+})(Message || (Message = {}));
+var Lock = class {
+  constructor({ lockKey, onAcquire, onRelease }) {
+    this._broadcastChannel = new BroadcastChannel("vault-resource-lock");
+    this._releaseTrigger = new Trigger4();
+    this._lockKey = lockKey;
+    this._onAcquire = onAcquire;
+    this._onRelease = onRelease;
+    this._broadcastChannel.onmessage = this._onMessage.bind(this);
+  }
+  get lockKey() {
+    return this._lockKey;
+  }
+  async acquire() {
+    this._broadcastChannel.postMessage({
+      message: Message.ACQUIRING
+    });
+    try {
+      log8("aquiring lock...", {}, {
+        file: "browser.ts",
+        line: 42,
+        scope: this,
+        callSite: (f, a) => f(...a)
+      });
+      await asyncTimeout(this._requestLock(), RESOURCE_LOCK_TIMEOUT);
+      log8("acquired lock", {}, {
+        file: "browser.ts",
+        line: 44,
+        scope: this,
+        callSite: (f, a) => f(...a)
+      });
+    } catch (e) {
+      log8("stealing lock...", {}, {
+        file: "browser.ts",
+        line: 46,
+        scope: this,
+        callSite: (f, a) => f(...a)
+      });
+      await this._requestLock(true);
+      log8("stolen lock", {}, {
+        file: "browser.ts",
+        line: 48,
+        scope: this,
+        callSite: (f, a) => f(...a)
+      });
+    }
+  }
+  async release() {
+    this._releaseTrigger.wake();
+  }
+  _onMessage(event) {
+    if (event.data.message === Message.ACQUIRING) {
+      this._releaseTrigger.wake();
+    }
+  }
+  async _requestLock(steal = false) {
+    log8("requesting lock...", {
+      steal
+    }, {
+      file: "browser.ts",
+      line: 63,
+      scope: this,
+      callSite: (f, a) => f(...a)
+    });
+    const acquired = new Trigger4();
+    void navigator.locks.request(this._lockKey, {
+      steal
+    }, async () => {
+      var _a, _b;
+      await ((_a = this._onAcquire) == null ? void 0 : _a.call(this));
+      acquired.wake();
+      this._releaseTrigger = new Trigger4();
+      await this._releaseTrigger.wait();
+      log8("releasing lock...", {}, {
+        file: "browser.ts",
+        line: 72,
+        scope: this,
+        callSite: (f, a) => f(...a)
+      });
+      await ((_b = this._onRelease) == null ? void 0 : _b.call(this));
+      log8("released lock", {}, {
+        file: "browser.ts",
+        line: 74,
+        scope: this,
+        callSite: (f, a) => f(...a)
+      });
+    }).catch(async () => {
+      var _a;
+      await ((_a = this._onRelease) == null ? void 0 : _a.call(this));
+    });
+    await acquired.wait();
+    log8("recieved lock", {
+      steal
+    }, {
+      file: "browser.ts",
+      line: 81,
+      scope: this,
+      callSite: (f, a) => f(...a)
+    });
+  }
+};
+__decorate([
+  logInfo
+], Lock.prototype, "lockKey", null);
+var isLocked = (lockPath) => {
+  throw new Error("Not implemented");
+};
+
 // packages/sdk/client-services/src/packlets/spaces/data-space.ts
 import { Event as Event5, scheduleTask as scheduleTask4, trackLeaks } from "@dxos/async";
 import { AUTH_TIMEOUT as AUTH_TIMEOUT2 } from "@dxos/client-protocol";
@@ -2051,23 +2192,24 @@ import { timed } from "@dxos/debug";
 import { createMappedFeedWriter } from "@dxos/echo-pipeline";
 import { CancelledError, SystemError } from "@dxos/errors";
 import { PublicKey as PublicKey7 } from "@dxos/keys";
-import { log as log9 } from "@dxos/log";
+import { log as log10 } from "@dxos/log";
 import { SpaceState } from "@dxos/protocols/proto/dxos/client/services";
 import { AdmittedFeed as AdmittedFeed3 } from "@dxos/protocols/proto/dxos/halo/credentials";
 import { ComplexSet as ComplexSet2 } from "@dxos/util";
 
 // packages/sdk/client-services/src/packlets/spaces/notarization-plugin.ts
 import assert9 from "@dxos/node-std/assert";
-import { DeferredTask, Event as Event4, scheduleTask as scheduleTask3, sleep as sleep2, TimeoutError as TimeoutError2, Trigger as Trigger4 } from "@dxos/async";
+import { DeferredTask, Event as Event4, scheduleTask as scheduleTask3, sleep as sleep2, TimeoutError as TimeoutError2, Trigger as Trigger5 } from "@dxos/async";
 import { Context as Context5, rejectOnDispose } from "@dxos/context";
 import { PublicKey as PublicKey6 } from "@dxos/keys";
-import { log as log8 } from "@dxos/log";
+import { log as log9 } from "@dxos/log";
 import { schema as schema3 } from "@dxos/protocols";
 import { RpcExtension as RpcExtension2 } from "@dxos/teleport";
 import { ComplexMap as ComplexMap2, ComplexSet, entry } from "@dxos/util";
 var DEFAULT_RETRY_TIMEOUT = 1e3;
 var DEFAULT_SUCCESS_DELAY = 1e3;
 var DEFAULT_NOTARIZE_TIMEOUT = 1e4;
+var WRITER_NOT_SET_ERROR_CODE = "WRITER_NOT_SET";
 var NotarizationPlugin = class {
   constructor() {
     this._ctx = new Context5();
@@ -2085,23 +2227,23 @@ var NotarizationPlugin = class {
   * Request credentials to be notarized.
   */
   async notarize({ ctx: opCtx, credentials, timeout = DEFAULT_NOTARIZE_TIMEOUT, retryTimeout = DEFAULT_RETRY_TIMEOUT, successDelay = DEFAULT_SUCCESS_DELAY }) {
-    log8("notarize", {
+    log9("notarize", {
       credentials
     }, {
       file: "notarization-plugin.ts",
-      line: 85,
+      line: 87,
       scope: this,
       callSite: (f, a) => f(...a)
     });
     assert9(credentials.every((credential) => credential.id), "Credentials must have an id");
-    const errors = new Trigger4();
+    const errors = new Trigger5();
     const ctx = this._ctx.derive({
       onError: (err) => {
-        log8.warn("Notarization error", {
+        log9.warn("Notarization error", {
           err
         }, {
           file: "notarization-plugin.ts",
-          line: 94,
+          line: 96,
           scope: this,
           callSite: (f, a) => f(...a)
         });
@@ -2112,12 +2254,12 @@ var NotarizationPlugin = class {
     opCtx == null ? void 0 : opCtx.onDispose(() => ctx.dispose());
     if (timeout !== 0) {
       scheduleTask3(ctx, () => {
-        log8.warn("Notarization timeout", {
+        log9.warn("Notarization timeout", {
           timeout,
           peers: Array.from(this._extensions).map((extension) => extension.remotePeerId)
         }, {
           file: "notarization-plugin.ts",
-          line: 106,
+          line: 108,
           scope: this,
           callSite: (f, a) => f(...a)
         });
@@ -2136,11 +2278,11 @@ var NotarizationPlugin = class {
           ...this._extensions
         ].find((peer2) => !peersTried.has(peer2));
         if (!peer) {
-          log8.warn("Exhausted all peers to notarize with", {
+          log9.warn("Exhausted all peers to notarize with", {
             retryIn: retryTimeout
           }, {
             file: "notarization-plugin.ts",
-            line: 131,
+            line: 133,
             scope: this,
             callSite: (f, a) => f(...a)
           });
@@ -2149,32 +2291,34 @@ var NotarizationPlugin = class {
           return;
         }
         peersTried.add(peer);
-        log8("try notarizing", {
+        log9("try notarizing", {
           peer: peer.localPeerId,
           credentialId: credentials.map((credential) => credential.id)
         }, {
           file: "notarization-plugin.ts",
-          line: 138,
+          line: 140,
           scope: this,
           callSite: (f, a) => f(...a)
         });
         await peer.rpc.NotarizationService.notarize({
           credentials: credentials.filter((credential) => !this._processedCredentials.has(credential.id))
         });
-        log8("success", {}, {
+        log9("success", {}, {
           file: "notarization-plugin.ts",
-          line: 142,
+          line: 144,
           scope: this,
           callSite: (f, a) => f(...a)
         });
         await sleep2(successDelay);
       } catch (err) {
-        log8.warn("error notarizing (recoverable)", err, {
-          file: "notarization-plugin.ts",
-          line: 145,
-          scope: this,
-          callSite: (f, a) => f(...a)
-        });
+        if (!ctx.disposed && !err.message.includes(WRITER_NOT_SET_ERROR_CODE)) {
+          log9.warn("error notarizing (recoverable)", err, {
+            file: "notarization-plugin.ts",
+            line: 148,
+            scope: this,
+            callSite: (f, a) => f(...a)
+          });
+        }
         notarizeTask.schedule();
       }
     });
@@ -2186,9 +2330,9 @@ var NotarizationPlugin = class {
         allNotarized,
         errors.wait()
       ]);
-      log8("done", {}, {
+      log9("done", {}, {
         file: "notarization-plugin.ts",
-        line: 155,
+        line: 159,
         scope: this,
         callSite: (f, a) => f(...a)
       });
@@ -2216,7 +2360,7 @@ var NotarizationPlugin = class {
     if (this._processedCredentials.has(id)) {
       return;
     }
-    await entry(this._processCredentialsTriggers, id).orInsert(new Trigger4()).value.wait();
+    await entry(this._processCredentialsTriggers, id).orInsert(new Trigger5()).value.wait();
   }
   /**
   * Requests from other peers to notarize credentials.
@@ -2224,7 +2368,7 @@ var NotarizationPlugin = class {
   async _onNotarize(request) {
     var _a;
     if (!this._writer) {
-      throw new Error("Writer not set");
+      throw new Error(WRITER_NOT_SET_ERROR_CODE);
     }
     for (const credential of (_a = request.credentials) != null ? _a : []) {
       assert9(credential.id, "Credential must have an id");
@@ -2237,11 +2381,11 @@ var NotarizationPlugin = class {
   createExtension() {
     const extension = new NotarizationTeleportExtension({
       onOpen: async () => {
-        log8("extension opened", {
+        log9("extension opened", {
           peer: extension.localPeerId
         }, {
           file: "notarization-plugin.ts",
-          line: 204,
+          line: 208,
           scope: this,
           callSite: (f, a) => f(...a)
         });
@@ -2249,11 +2393,11 @@ var NotarizationPlugin = class {
         this._extensionOpened.emit();
       },
       onClose: async () => {
-        log8("extension closed", {
+        log9("extension closed", {
           peer: extension.localPeerId
         }, {
           file: "notarization-plugin.ts",
-          line: 209,
+          line: 213,
           scope: this,
           callSite: (f, a) => f(...a)
         });
@@ -2296,7 +2440,7 @@ var NotarizationTeleportExtension = class extends RpcExtension2 {
 };
 
 // packages/sdk/client-services/src/packlets/spaces/data-space.ts
-var __decorate = function(decorators, target, key, desc) {
+var __decorate2 = function(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2391,7 +2535,7 @@ var DataSpace = class DataSpace2 {
         await this.initializeDataPipeline();
       } catch (err) {
         if (err instanceof CancelledError) {
-          log9("Data pipeline initialization cancelled", err, {
+          log10("Data pipeline initialization cancelled", err, {
             file: "data-space.ts",
             line: 172,
             scope: this,
@@ -2399,7 +2543,7 @@ var DataSpace = class DataSpace2 {
           });
           return;
         }
-        log9.error("Error initializing data pipeline", err, {
+        log10.error("Error initializing data pipeline", err, {
           file: "data-space.ts",
           line: 176,
           scope: this,
@@ -2425,7 +2569,7 @@ var DataSpace = class DataSpace2 {
     });
     this.metrics.controlPipelineReady = new Date();
     await this._createWritableFeeds();
-    log9("Writable feeds created", {}, {
+    log10("Writable feeds created", {}, {
       file: "data-space.ts",
       line: 201,
       scope: this,
@@ -2440,7 +2584,7 @@ var DataSpace = class DataSpace2 {
     await this._inner.initializeDataPipeline();
     this.metrics.dataPipelineOpen = new Date();
     await cancelWithContext2(this._ctx, this._inner.dataPipeline.ensureEpochInitialized());
-    log9("waiting for data pipeline to reach target timeframe", {}, {
+    log10("waiting for data pipeline to reach target timeframe", {}, {
       file: "data-space.ts",
       line: 220,
       scope: this,
@@ -2451,7 +2595,7 @@ var DataSpace = class DataSpace2 {
       breakOnStall: false
     });
     this.metrics.dataPipelineReady = new Date();
-    log9("data pipeline ready", {}, {
+    log10("data pipeline ready", {}, {
       file: "data-space.ts",
       line: 229,
       scope: this,
@@ -2527,10 +2671,10 @@ var DataSpace = class DataSpace2 {
     }
   }
 };
-__decorate([
+__decorate2([
   timed(1e4)
 ], DataSpace.prototype, "_createWritableFeeds", null);
-DataSpace = __decorate([
+DataSpace = __decorate2([
   trackLeaks("open", "close")
 ], DataSpace);
 
@@ -2540,7 +2684,7 @@ import { Event as Event6, synchronized, trackLeaks as trackLeaks2 } from "@dxos/
 import { cancelWithContext as cancelWithContext3, Context as Context7 } from "@dxos/context";
 import { getCredentialAssertion as getCredentialAssertion2 } from "@dxos/credentials";
 import { PublicKey as PublicKey8 } from "@dxos/keys";
-import { log as log10 } from "@dxos/log";
+import { log as log11 } from "@dxos/log";
 import { trace as trace4 } from "@dxos/protocols";
 import { SpaceState as SpaceState2 } from "@dxos/protocols/proto/dxos/client/services";
 import { Gossip, Presence } from "@dxos/teleport-extension-gossip";
@@ -2617,7 +2761,7 @@ var spaceGenesis = async (keyring, signingContext, space) => {
 };
 
 // packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts
-var __decorate2 = function(decorators, target, key, desc) {
+var __decorate3 = function(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2646,13 +2790,13 @@ var DataSpaceManager = class DataSpaceManager2 {
     return this._spaces;
   }
   async open() {
-    log10("open", {}, {
+    log11("open", {}, {
       file: "data-space-manager.ts",
       line: 80,
       scope: this,
       callSite: (f, a) => f(...a)
     });
-    log10.trace("dxos.echo.data-space-manager.open", trace4.begin({
+    log11.trace("dxos.echo.data-space-manager.open", trace4.begin({
       id: this._instanceId
     }), {
       file: "data-space-manager.ts",
@@ -2661,7 +2805,7 @@ var DataSpaceManager = class DataSpaceManager2 {
       callSite: (f, a) => f(...a)
     });
     await this._metadataStore.load();
-    log10("metadata loaded", {
+    log11("metadata loaded", {
       spaces: this._metadataStore.spaces.length
     }, {
       file: "data-space-manager.ts",
@@ -2671,7 +2815,7 @@ var DataSpaceManager = class DataSpaceManager2 {
     });
     for (const spaceMetadata of this._metadataStore.spaces) {
       try {
-        log10("load space", {
+        log11("load space", {
           spaceMetadata
         }, {
           file: "data-space-manager.ts",
@@ -2682,7 +2826,7 @@ var DataSpaceManager = class DataSpaceManager2 {
         const space = await this._constructSpace(spaceMetadata);
         space.initializeDataPipelineAsync();
       } catch (err) {
-        log10.error("Error loading space", {
+        log11.error("Error loading space", {
           spaceMetadata,
           err
         }, {
@@ -2695,7 +2839,7 @@ var DataSpaceManager = class DataSpaceManager2 {
     }
     this._isOpen = true;
     this.updated.emit();
-    log10.trace("dxos.echo.data-space-manager.open", trace4.end({
+    log11.trace("dxos.echo.data-space-manager.open", trace4.end({
       id: this._instanceId
     }), {
       file: "data-space-manager.ts",
@@ -2705,7 +2849,7 @@ var DataSpaceManager = class DataSpaceManager2 {
     });
   }
   async close() {
-    log10("close", {}, {
+    log11("close", {}, {
       file: "data-space-manager.ts",
       line: 102,
       scope: this,
@@ -2731,7 +2875,7 @@ var DataSpaceManager = class DataSpaceManager2 {
       controlFeedKey,
       dataFeedKey
     };
-    log10("creating space...", {
+    log11("creating space...", {
       spaceKey
     }, {
       file: "data-space-manager.ts",
@@ -2751,7 +2895,7 @@ var DataSpaceManager = class DataSpaceManager2 {
   }
   // TODO(burdon): Rename join space.
   async acceptSpace(opts) {
-    log10("accept space", {
+    log11("accept space", {
       opts
     }, {
       file: "data-space-manager.ts",
@@ -2785,7 +2929,7 @@ var DataSpaceManager = class DataSpaceManager2 {
     }));
   }
   async _constructSpace(metadata) {
-    log10("construct space", {
+    log11("construct space", {
       metadata
     }, {
       file: "data-space-manager.ts",
@@ -2823,7 +2967,7 @@ var DataSpaceManager = class DataSpaceManager2 {
         session.addExtension("dxos.mesh.teleport.notarization", dataSpace.notarizationPlugin.createExtension());
       },
       onAuthFailure: () => {
-        log10.warn("auth failure", {}, {
+        log11.warn("auth failure", {}, {
           file: "data-space-manager.ts",
           line: 212,
           scope: this,
@@ -2844,7 +2988,7 @@ var DataSpaceManager = class DataSpaceManager2 {
       signingContext: this._signingContext,
       callbacks: {
         beforeReady: async () => {
-          log10("before space ready", {
+          log11("before space ready", {
             space: space.key
           }, {
             file: "data-space-manager.ts",
@@ -2855,7 +2999,7 @@ var DataSpaceManager = class DataSpaceManager2 {
           this._dataServiceSubscriptions.registerSpace(space.key, dataSpace.dataPipeline.databaseHost.createDataServiceHost());
         },
         afterReady: async () => {
-          log10("after space ready", {
+          log11("after space ready", {
             space: space.key,
             open: this._isOpen
           }, {
@@ -2882,28 +3026,28 @@ var DataSpaceManager = class DataSpaceManager2 {
     return dataSpace;
   }
 };
-__decorate2([
+__decorate3([
   synchronized
 ], DataSpaceManager.prototype, "open", null);
-__decorate2([
+__decorate3([
   synchronized
 ], DataSpaceManager.prototype, "close", null);
-__decorate2([
+__decorate3([
   synchronized
 ], DataSpaceManager.prototype, "createSpace", null);
-__decorate2([
+__decorate3([
   synchronized
 ], DataSpaceManager.prototype, "acceptSpace", null);
-DataSpaceManager = __decorate2([
+DataSpaceManager = __decorate3([
   trackLeaks2("open", "close")
 ], DataSpaceManager);
 
 // packages/sdk/client-services/src/packlets/spaces/spaces-service.ts
 import { EventSubscriptions as EventSubscriptions2, scheduleTask as scheduleTask5 } from "@dxos/async";
-import { Stream as Stream8 } from "@dxos/codec-protobuf";
+import { Stream as Stream9 } from "@dxos/codec-protobuf";
 import { raise, todo as todo2 } from "@dxos/debug";
 import { SpaceNotFoundError } from "@dxos/echo-pipeline";
-import { log as log11 } from "@dxos/log";
+import { log as log12 } from "@dxos/log";
 import { encodeError } from "@dxos/protocols";
 import { SpaceMember as SpaceMember2 } from "@dxos/protocols/proto/dxos/client/services";
 import { humanize } from "@dxos/util";
@@ -2927,15 +3071,15 @@ var SpacesServiceImpl = class {
     todo2();
   }
   querySpaces() {
-    return new Stream8(({ next, ctx }) => {
+    return new Stream9(({ next, ctx }) => {
       const onUpdate = async () => {
         const dataSpaceManager = await this._getDataSpaceManager();
         const spaces = Array.from(dataSpaceManager.spaces.values()).map((space) => this._transformSpace(space));
-        log11("update", {
+        log12("update", {
           spaces
         }, {
           file: "spaces-service.ts",
-          line: 62,
+          line: 59,
           scope: this,
           callSite: (f, a) => f(...a)
         });
@@ -2979,7 +3123,7 @@ var SpacesServiceImpl = class {
     await space.postMessage(getChannelId(channel), message);
   }
   subscribeMessages({ spaceKey, channel }) {
-    return new Stream8(({ ctx, next }) => {
+    return new Stream9(({ ctx, next }) => {
       scheduleTask5(ctx, async () => {
         var _a;
         const dataSpaceManager = await this._getDataSpaceManager();
@@ -2992,7 +3136,7 @@ var SpacesServiceImpl = class {
     });
   }
   queryCredentials({ spaceKey }) {
-    return new Stream8(({ ctx, next }) => {
+    return new Stream9(({ ctx, next }) => {
       var _a;
       const space = (_a = this._spaceManager.spaces.get(spaceKey)) != null ? _a : raise(new SpaceNotFoundError(spaceKey));
       const processor = space.spaceState.registerProcessor({
@@ -3103,900 +3247,124 @@ var toStorageType = (type) => {
   }
 };
 
-// packages/sdk/client-services/src/packlets/vault/shell-runtime.ts
+// packages/sdk/client-services/src/packlets/services/service-context.ts
 import assert11 from "@dxos/node-std/assert";
-import { Event as Event7 } from "@dxos/async";
-import { appServiceBundle, shellServiceBundle } from "@dxos/client-protocol";
-import { ShellLayout } from "@dxos/protocols/proto/dxos/iframe";
-import { createProtoRpcPeer } from "@dxos/rpc";
-var ShellRuntimeImpl = class {
-  constructor(_port) {
-    this._port = _port;
-    this.layoutUpdate = new Event7();
-    this._layout = ShellLayout.DEFAULT;
-  }
-  get layout() {
-    return this._layout;
-  }
-  get invitationCode() {
-    return this._invitationCode;
-  }
-  get spaceKey() {
-    return this._spaceKey;
-  }
-  setLayout(layout, options = {}) {
-    this._layout = layout;
-    this._invitationCode = options.invitationCode;
-    this._spaceKey = options.spaceKey;
-    this.layoutUpdate.emit({
-      layout,
-      ...options
+import { Trigger as Trigger6 } from "@dxos/async";
+import { getCredentialAssertion as getCredentialAssertion3 } from "@dxos/credentials";
+import { failUndefined as failUndefined3 } from "@dxos/debug";
+import { valueEncoding, MetadataStore, SpaceManager, DataServiceSubscriptions, SnapshotStore } from "@dxos/echo-pipeline";
+import { FeedFactory, FeedStore } from "@dxos/feed-store";
+import { Keyring } from "@dxos/keyring";
+import { PublicKey as PublicKey9 } from "@dxos/keys";
+import { log as log13 } from "@dxos/log";
+import { STORAGE_VERSION, trace as trace5 } from "@dxos/protocols";
+import { Invitation as Invitation5 } from "@dxos/protocols/proto/dxos/client/services";
+var ServiceContext = class {
+  // prettier-ignore
+  constructor(storage, networkManager, signalManager, modelFactory) {
+    this.storage = storage;
+    this.networkManager = networkManager;
+    this.signalManager = signalManager;
+    this.modelFactory = modelFactory;
+    this.initialized = new Trigger6();
+    this.dataServiceSubscriptions = new DataServiceSubscriptions();
+    this._handlerFactories = /* @__PURE__ */ new Map();
+    this._instanceId = PublicKey9.random().toHex();
+    this.metadataStore = new MetadataStore(storage.createDirectory("metadata"));
+    this.snapshotStore = new SnapshotStore(storage.createDirectory("snapshots"));
+    this.keyring = new Keyring(storage.createDirectory("keyring"));
+    this.feedStore = new FeedStore({
+      factory: new FeedFactory({
+        root: storage.createDirectory("feeds"),
+        signer: this.keyring,
+        hypercore: {
+          valueEncoding
+        }
+      })
     });
-  }
-  async setAppContext(context) {
-    assert11(this._appRpc, "runtime not open");
-    await this._appRpc.rpc.AppService.setContext(context);
+    this.spaceManager = new SpaceManager({
+      feedStore: this.feedStore,
+      networkManager: this.networkManager,
+      metadataStore: this.metadataStore,
+      modelFactory: this.modelFactory,
+      snapshotStore: this.snapshotStore
+    });
+    this.identityManager = new IdentityManager(this.metadataStore, this.keyring, this.feedStore, this.spaceManager);
+    this.invitations = new InvitationsHandler(this.networkManager);
+    this._handlerFactories.set(Invitation5.Kind.DEVICE, () => new DeviceInvitationProtocol(this.keyring, () => {
+      var _a;
+      return (_a = this.identityManager.identity) != null ? _a : failUndefined3();
+    }, this._acceptIdentity.bind(this)));
   }
   async open() {
-    this._appRpc = createProtoRpcPeer({
-      requested: appServiceBundle,
-      exposed: shellServiceBundle,
-      handlers: {
-        ShellService: {
-          setLayout: async (request) => {
-            this._layout = request.layout;
-            this._invitationCode = request.invitationCode;
-            this._spaceKey = request.spaceKey;
-            this.layoutUpdate.emit(request);
-          }
-        }
-      },
-      port: this._port
+    log13.trace("dxos.sdk.service-context.open", trace5.begin({
+      id: this._instanceId
+    }), {
+      file: "service-context.ts",
+      line: 119,
+      scope: this,
+      callSite: (f, a) => f(...a)
+    });
+    await this._checkStorageVersion();
+    log13("opening...", {}, {
+      file: "service-context.ts",
+      line: 123,
+      scope: this,
+      callSite: (f, a) => f(...a)
+    });
+    await this.signalManager.open();
+    await this.networkManager.open();
+    await this.spaceManager.open();
+    await this.identityManager.open();
+    if (this.identityManager.identity) {
+      await this._initialize();
+    }
+    log13("opened", {}, {
+      file: "service-context.ts",
+      line: 131,
+      scope: this,
+      callSite: (f, a) => f(...a)
+    });
+    log13.trace("dxos.sdk.service-context.open", trace5.end({
+      id: this._instanceId
+    }), {
+      file: "service-context.ts",
+      line: 132,
+      scope: this,
+      callSite: (f, a) => f(...a)
     });
-    await this._appRpc.open();
   }
   async close() {
-    var _a;
-    await ((_a = this._appRpc) == null ? void 0 : _a.close());
-    this._appRpc = void 0;
-  }
-};
-var MemoryShellRuntime = class {
-  constructor({ layout, invitationCode, spaceKey } = {}) {
-    this.layoutUpdate = new Event7();
-    this.contextUpdate = new Event7();
-    this._layout = layout != null ? layout : ShellLayout.DEFAULT;
-    this._invitationCode = invitationCode;
-    this._spaceKey = spaceKey;
-  }
-  get layout() {
-    return this._layout;
-  }
-  get invitationCode() {
-    return this._invitationCode;
-  }
-  get spaceKey() {
-    return this._spaceKey;
-  }
-  setLayout(layout, options = {}) {
-    this._layout = layout;
-    this._invitationCode = options.invitationCode;
-    this._spaceKey = options.spaceKey;
-    this.layoutUpdate.emit({
-      layout,
-      ...options
+    var _a, _b;
+    log13("closing...", {}, {
+      file: "service-context.ts",
+      line: 136,
+      scope: this,
+      callSite: (f, a) => f(...a)
+    });
+    await ((_a = this._deviceSpaceSync) == null ? void 0 : _a.close());
+    await ((_b = this.dataSpaceManager) == null ? void 0 : _b.close());
+    await this.identityManager.close();
+    await this.spaceManager.close();
+    await this.feedStore.close();
+    await this.networkManager.close();
+    await this.signalManager.close();
+    this.dataServiceSubscriptions.clear();
+    log13("closed", {}, {
+      file: "service-context.ts",
+      line: 145,
+      scope: this,
+      callSite: (f, a) => f(...a)
     });
   }
-  async setAppContext(context) {
-    this.contextUpdate.emit(context);
-  }
-};
-
-// packages/sdk/client-services/src/packlets/vault/iframe-host-runtime.ts
-import { Trigger as Trigger10 } from "@dxos/async";
-import { PROXY_CONNECTION_TIMEOUT as PROXY_CONNECTION_TIMEOUT2 } from "@dxos/client-protocol";
-import { log as log19, logInfo as logInfo3 } from "@dxos/log";
-import { MemorySignalManager as MemorySignalManager2, MemorySignalManagerContext as MemorySignalManagerContext2, WebsocketSignalManager as WebsocketSignalManager3 } from "@dxos/messaging";
-import { createWebRTCTransportFactory as createWebRTCTransportFactory2 } from "@dxos/network-manager";
-import { getAsyncValue as getAsyncValue2 } from "@dxos/util";
-
-// packages/sdk/client-services/src/packlets/services/service-host.ts
-import assert14 from "@dxos/node-std/assert";
-import { Event as Event9 } from "@dxos/async";
-import { clientServiceBundle, createDefaultModelFactory } from "@dxos/client-protocol";
-import { DataServiceImpl } from "@dxos/echo-pipeline";
-import { PublicKey as PublicKey10 } from "@dxos/keys";
-import { log as log18 } from "@dxos/log";
-import { WebsocketSignalManager as WebsocketSignalManager2 } from "@dxos/messaging";
-import { createWebRTCTransportFactory, NetworkManager } from "@dxos/network-manager";
-import { trace as trace6 } from "@dxos/protocols";
-import { SystemStatus } from "@dxos/protocols/proto/dxos/client/services";
-
-// packages/sdk/client-services/src/packlets/devices/devices-service.ts
-import { EventSubscriptions as EventSubscriptions3 } from "@dxos/async";
-import { Stream as Stream9 } from "@dxos/codec-protobuf";
-import { DeviceKind } from "@dxos/protocols/proto/dxos/client/services";
-var DevicesServiceImpl = class {
-  constructor(_identityManager) {
-    this._identityManager = _identityManager;
-  }
-  updateDevice(request) {
-    throw new Error("Method not implemented.");
-  }
-  queryDevices() {
-    return new Stream9(({ next }) => {
-      const update = () => {
-        var _a;
-        const deviceKeys = (_a = this._identityManager.identity) == null ? void 0 : _a.authorizedDeviceKeys;
-        if (!deviceKeys) {
-          next({
-            devices: []
-          });
-        } else {
-          next({
-            devices: Array.from(deviceKeys.values()).map((key) => {
-              var _a2;
-              return {
-                deviceKey: key,
-                kind: ((_a2 = this._identityManager.identity) == null ? void 0 : _a2.deviceKey.equals(key)) ? DeviceKind.CURRENT : DeviceKind.TRUSTED
-              };
-            })
-          });
-        }
-      };
-      const subscriptions = new EventSubscriptions3();
-      subscriptions.add(this._identityManager.stateUpdate.on(() => {
-        update();
-        if (this._identityManager.identity) {
-          subscriptions.add(this._identityManager.identity.stateUpdate.on(() => {
-            update();
-          }));
-        }
-      }));
-      update();
-      return () => subscriptions.clear();
-    });
-  }
-};
-
-// packages/sdk/client-services/src/packlets/logging/logging-service.ts
-import { Event as Event8 } from "@dxos/async";
-import { Stream as Stream10 } from "@dxos/codec-protobuf";
-import { log as log12, shouldLog, getContextFromEntry } from "@dxos/log";
-import { jsonify } from "@dxos/util";
-var LoggingServiceImpl = class {
-  constructor() {
-    this._logs = new Event8();
-    this._logProcessor = (_config, entry2) => {
-      this._logs.emit(entry2);
-    };
-  }
-  async open() {
-    log12.runtimeConfig.processors.push(this._logProcessor);
-  }
-  async close() {
-    const index = log12.runtimeConfig.processors.findIndex((processor) => processor === this._logProcessor);
-    log12.runtimeConfig.processors.splice(index, 1);
-  }
-  queryLogs(request) {
-    var _a;
-    const filters = ((_a = request.filters) == null ? void 0 : _a.length) ? request.filters : void 0;
-    return new Stream10(({ ctx, next }) => {
-      const handler = (entry2) => {
-        var _a2, _b, _c;
-        if (((_a2 = entry2.meta) == null ? void 0 : _a2.file.includes("logging-service")) || entry2.context && Object.values(entry2.context).some((value) => typeof value === "string" && value.includes("LoggingService"))) {
-          return;
-        }
-        if (shouldLog(entry2, filters)) {
-          const record = {
-            ...entry2,
-            context: jsonify(getContextFromEntry(entry2))
-          };
-          (_b = record.meta) == null ? true : delete _b.bugcheck;
-          (_c = record.meta) == null ? true : delete _c.scope;
-          next(record);
-        }
-      };
-      ctx.onDispose(() => {
-        this._logs.off(handler);
-      });
-      this._logs.on(handler);
-    });
-  }
-};
-
-// packages/sdk/client-services/src/packlets/network/network-service.ts
-import { Stream as Stream11 } from "@dxos/codec-protobuf";
-var NetworkServiceImpl = class {
-  constructor(networkManager, signalManager) {
-    this.networkManager = networkManager;
-    this.signalManager = signalManager;
-  }
-  queryStatus() {
-    return new Stream11(({ next }) => {
-      const update = () => {
-        next({
-          swarm: this.networkManager.connectionState,
-          signaling: this.signalManager.getStatus().map(({ host, state }) => ({
-            server: host,
-            state
-          }))
-        });
-      };
-      const unsubscribeSwarm = this.networkManager.connectionStateChanged.on(() => update());
-      const unsubscribeSignal = this.signalManager.statusChanged.on(() => update());
-      update();
-      return () => {
-        unsubscribeSwarm();
-        unsubscribeSignal();
-      };
-    });
-  }
-  async updateConfig(request) {
-    await this.networkManager.setConnectionState(request.swarm);
-  }
-};
-
-// packages/sdk/client-services/src/packlets/system/system-service.ts
-import { Stream as Stream12 } from "@dxos/codec-protobuf";
-var SystemServiceImpl = class {
-  constructor({ config, statusUpdate, onUpdateStatus, getCurrentStatus, onReset }) {
-    this._config = config;
-    this._statusUpdate = statusUpdate;
-    this._getCurrentStatus = getCurrentStatus;
-    this._onUpdateStatus = onUpdateStatus;
-    this._onReset = onReset;
-  }
-  async getConfig() {
-    var _a, _b;
-    return (_b = (_a = this._config) == null ? void 0 : _a.values) != null ? _b : {};
-  }
-  async updateStatus({ status }) {
-    await this._onUpdateStatus(status);
-  }
-  queryStatus() {
-    return new Stream12(({ next }) => {
-      const update = () => {
-        next({
-          status: this._getCurrentStatus()
-        });
-      };
-      update();
-      const unsubscribe = this._statusUpdate.on(() => update());
-      const interval = setInterval(update, 3e3);
-      return () => {
-        clearInterval(interval);
-        unsubscribe();
-      };
-    });
-  }
-  async reset() {
-    await this._onReset();
-  }
-};
-
-// packages/sdk/client-services/src/packlets/vault/iframe-proxy-runtime.ts
-import { Trigger as Trigger5 } from "@dxos/async";
-import { iframeServiceBundle, workerServiceBundle } from "@dxos/client-protocol";
-import { RemoteServiceConnectionError } from "@dxos/errors";
-import { log as log13 } from "@dxos/log";
-import { WebRTCTransportService } from "@dxos/network-manager";
-import { createProtoRpcPeer as createProtoRpcPeer2 } from "@dxos/rpc";
-import { getAsyncValue } from "@dxos/util";
-var IFrameProxyRuntime = class {
-  constructor({ config, systemPort, shellPort }) {
-    this._id = String(Math.floor(Math.random() * 1e6));
-    this._release = new Trigger5();
-    this._configProvider = config;
-    this._systemPort = systemPort;
-    this._shellPort = shellPort;
-    if (this._shellPort) {
-      this._shellRuntime = new ShellRuntimeImpl(this._shellPort);
-    }
-  }
-  get shell() {
-    return this._shellRuntime;
-  }
-  async open(origin) {
-    var _a;
-    this._config = await getAsyncValue(this._configProvider);
-    this._transportService = new WebRTCTransportService({
-      iceServers: this._config.get("runtime.services.ice")
-    });
-    this._systemRpc = createProtoRpcPeer2({
-      requested: workerServiceBundle,
-      exposed: iframeServiceBundle,
-      handlers: {
-        BridgeService: this._transportService
-      },
-      port: this._systemPort,
-      timeout: 200
-    });
-    let lockKey;
-    if (typeof navigator !== "undefined") {
-      lockKey = this._lockKey(origin);
-      this._release = new Trigger5();
-      const ready = new Trigger5();
-      void navigator.locks.request(lockKey, async () => {
-        ready.wake();
-        await this._release.wait();
-      });
-      await ready.wait();
-    }
-    try {
-      await this._systemRpc.open();
-      await this._systemRpc.rpc.WorkerService.start({
-        origin,
-        lockKey
-      });
-    } catch (err) {
-      log13.catch(err, {}, {
-        file: "iframe-proxy-runtime.ts",
-        line: 85,
-        scope: this,
-        callSite: (f, a) => f(...a)
-      });
-      throw new RemoteServiceConnectionError("Failed to connect to worker");
-    }
-    await ((_a = this._shellRuntime) == null ? void 0 : _a.open());
-  }
-  async close() {
-    var _a;
-    this._release.wake();
-    await ((_a = this._shellRuntime) == null ? void 0 : _a.close());
-    await this._systemRpc.rpc.WorkerService.stop();
-    await this._systemRpc.close();
-  }
-  _lockKey(origin) {
-    return `${origin}-${this._id}`;
-  }
-};
-
-// packages/sdk/client-services/src/packlets/vault/vault-resource-lock.ts
-import { asyncTimeout, Trigger as Trigger6 } from "@dxos/async";
-import { RESOURCE_LOCK_TIMEOUT } from "@dxos/client-protocol";
-import { log as log14, logInfo } from "@dxos/log";
-var __decorate3 = function(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
-    r = Reflect.decorate(decorators, target, key, desc);
-  else
-    for (var i = decorators.length - 1; i >= 0; i--)
-      if (d = decorators[i])
-        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var Message;
-(function(Message2) {
-  Message2["ACQUIRING"] = "acquiring";
-})(Message || (Message = {}));
-var VaultResourceLock = class {
-  constructor({ lockKey, onAcquire, onRelease }) {
-    this._broadcastChannel = new BroadcastChannel("vault-resource-lock");
-    this._releaseTrigger = new Trigger6();
-    this._lockKey = lockKey;
-    this._onAcquire = onAcquire;
-    this._onRelease = onRelease;
-    this._broadcastChannel.onmessage = this._onMessage.bind(this);
-  }
-  get lockKey() {
-    return this._lockKey;
-  }
-  async acquire() {
-    this._broadcastChannel.postMessage({
-      message: Message.ACQUIRING
-    });
-    try {
-      log14("aquiring lock...", {}, {
-        file: "vault-resource-lock.ts",
-        line: 45,
-        scope: this,
-        callSite: (f, a) => f(...a)
-      });
-      await asyncTimeout(this._requestLock(), RESOURCE_LOCK_TIMEOUT);
-      log14("acquired lock", {}, {
-        file: "vault-resource-lock.ts",
-        line: 47,
-        scope: this,
-        callSite: (f, a) => f(...a)
-      });
-    } catch (e) {
-      log14("stealing lock...", {}, {
-        file: "vault-resource-lock.ts",
-        line: 49,
-        scope: this,
-        callSite: (f, a) => f(...a)
-      });
-      await this._requestLock(true);
-      log14("stolen lock", {}, {
-        file: "vault-resource-lock.ts",
-        line: 51,
-        scope: this,
-        callSite: (f, a) => f(...a)
-      });
-    }
-  }
-  async release() {
-    this._releaseTrigger.wake();
-  }
-  _onMessage(event) {
-    if (event.data.message === Message.ACQUIRING) {
-      this._releaseTrigger.wake();
-    }
-  }
-  async _requestLock(steal = false) {
-    log14("requesting lock...", {
-      steal
-    }, {
-      file: "vault-resource-lock.ts",
-      line: 66,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    const acquired = new Trigger6();
-    void navigator.locks.request(this._lockKey, {
-      steal
-    }, async () => {
-      var _a, _b;
-      await ((_a = this._onAcquire) == null ? void 0 : _a.call(this));
-      acquired.wake();
-      this._releaseTrigger = new Trigger6();
-      await this._releaseTrigger.wait();
-      log14("releasing lock...", {}, {
-        file: "vault-resource-lock.ts",
-        line: 75,
-        scope: this,
-        callSite: (f, a) => f(...a)
-      });
-      await ((_b = this._onRelease) == null ? void 0 : _b.call(this));
-      log14("released lock", {}, {
-        file: "vault-resource-lock.ts",
-        line: 77,
-        scope: this,
-        callSite: (f, a) => f(...a)
-      });
-    }).catch(async () => {
-      var _a;
-      await ((_a = this._onRelease) == null ? void 0 : _a.call(this));
-    });
-    await acquired.wait();
-    log14("recieved lock", {
-      steal
-    }, {
-      file: "vault-resource-lock.ts",
-      line: 84,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-  }
-};
-__decorate3([
-  logInfo
-], VaultResourceLock.prototype, "lockKey", null);
-
-// packages/sdk/client-services/src/packlets/vault/worker-runtime.ts
-import { Trigger as Trigger8 } from "@dxos/async";
-import { log as log16 } from "@dxos/log";
-import { MemorySignalManager, MemorySignalManagerContext, WebsocketSignalManager } from "@dxos/messaging";
-import { WebRTCTransportProxyFactory } from "@dxos/network-manager";
-
-// packages/sdk/client-services/src/packlets/vault/worker-session.ts
-import assert12 from "@dxos/node-std/assert";
-import { asyncTimeout as asyncTimeout2, Trigger as Trigger7 } from "@dxos/async";
-import { iframeServiceBundle as iframeServiceBundle2, PROXY_CONNECTION_TIMEOUT, workerServiceBundle as workerServiceBundle2 } from "@dxos/client-protocol";
-import { log as log15, logInfo as logInfo2 } from "@dxos/log";
-import { createProtoRpcPeer as createProtoRpcPeer3 } from "@dxos/rpc";
-import { Callback } from "@dxos/util";
-
-// packages/sdk/client-services/src/packlets/services/client-rpc-server.ts
-import { Stream as Stream13 } from "@dxos/codec-protobuf";
-import { raise as raise2 } from "@dxos/debug";
-import { parseMethodName, RpcPeer } from "@dxos/rpc";
-var ClientRpcServer = class {
-  constructor(params) {
-    this._handlerCache = /* @__PURE__ */ new Map();
-    const { serviceRegistry, handleCall, handleStream, ...rpcOptions } = params;
-    this._handleCall = handleCall;
-    this._handleStream = handleStream;
-    this._serviceRegistry = serviceRegistry;
-    this._rpcPeer = new RpcPeer({
-      ...rpcOptions,
-      callHandler: (method, params2) => {
-        const [serviceName, methodName] = parseMethodName(method);
-        const handler = (method2, params3) => this._getServiceHandler(serviceName).call(method2, params3);
-        if (this._handleCall) {
-          return this._handleCall(methodName, params2, handler);
-        } else {
-          return handler(methodName, params2);
-        }
-      },
-      streamHandler: (method, params2) => {
-        const [serviceName, methodName] = parseMethodName(method);
-        const handler = (method2, params3) => this._getServiceHandler(serviceName).callStream(method2, params3);
-        if (this._handleStream) {
-          return Stream13.unwrapPromise(this._handleStream(methodName, params2, handler));
-        } else {
-          return handler(methodName, params2);
-        }
-      }
-    });
-  }
-  async open() {
-    await this._rpcPeer.open();
-  }
-  async close() {
-    await this._rpcPeer.close();
-  }
-  _getServiceHandler(serviceName) {
-    var _a;
-    if (!this._handlerCache.has(serviceName)) {
-      const [key, descriptor] = (_a = Object.entries(this._serviceRegistry.descriptors).find(([key2, descriptor2]) => descriptor2.name === serviceName)) != null ? _a : raise2(new Error(`Service not available: ${serviceName}`));
-      const service = this._serviceRegistry.services[key];
-      if (!service) {
-        throw new Error(`Service not available: ${serviceName}`);
-      }
-      this._handlerCache.set(serviceName, descriptor.createServer(service));
-    }
-    return this._handlerCache.get(serviceName);
-  }
-};
-
-// packages/sdk/client-services/src/packlets/vault/worker-session.ts
-var __decorate4 = function(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
-    r = Reflect.decorate(decorators, target, key, desc);
-  else
-    for (var i = decorators.length - 1; i >= 0; i--)
-      if (d = decorators[i])
-        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var WorkerSession = class {
-  constructor({ serviceHost, systemPort, appPort, shellPort, readySignal }) {
-    this._startTrigger = new Trigger7();
-    this.onClose = new Callback();
-    assert12(serviceHost);
-    this._serviceHost = serviceHost;
-    const middleware = {
-      handleCall: async (method, params, handler) => {
-        const error = await readySignal.wait({
-          timeout: PROXY_CONNECTION_TIMEOUT
-        });
-        if (error) {
-          throw error;
-        }
-        return handler(method, params);
-      },
-      handleStream: async (method, params, handler) => {
-        const error = await readySignal.wait({
-          timeout: PROXY_CONNECTION_TIMEOUT
-        });
-        if (error) {
-          throw error;
-        }
-        return handler(method, params);
-      }
-    };
-    this._clientRpc = new ClientRpcServer({
-      serviceRegistry: this._serviceHost.serviceRegistry,
-      port: appPort,
-      ...middleware
-    });
-    this._shellClientRpc = new ClientRpcServer({
-      serviceRegistry: this._serviceHost.serviceRegistry,
-      port: shellPort,
-      ...middleware
-    });
-    this._iframeRpc = createProtoRpcPeer3({
-      requested: iframeServiceBundle2,
-      exposed: workerServiceBundle2,
-      handlers: {
-        WorkerService: {
-          start: async (request) => {
-            this.origin = request.origin;
-            this.lockKey = request.lockKey;
-            this._startTrigger.wake();
-          },
-          stop: async () => {
-            setTimeout(async () => {
-              try {
-                await this.close();
-              } catch (err) {
-                log15.catch(err, {}, {
-                  file: "worker-session.ts",
-                  line: 100,
-                  scope: this,
-                  callSite: (f, a) => f(...a)
-                });
-              }
-            });
-          }
-        }
-      },
-      port: systemPort,
-      timeout: 1e3
-    });
-    this.bridgeService = this._iframeRpc.rpc.BridgeService;
-  }
-  async open() {
-    log15.info("opening..", {}, {
-      file: "worker-session.ts",
-      line: 114,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    await Promise.all([
-      this._clientRpc.open(),
-      this._iframeRpc.open(),
-      this._maybeOpenShell()
-    ]);
-    await this._startTrigger.wait({
-      timeout: PROXY_CONNECTION_TIMEOUT
-    });
-    if (this.lockKey) {
-      void this._afterLockReleases(this.lockKey, () => this.close());
-    }
-  }
-  async close() {
-    log15.info("closing..", {}, {
-      file: "worker-session.ts",
-      line: 124,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    try {
-      await this.onClose.callIfSet();
-    } catch (err) {
-      log15.catch(err, {}, {
-        file: "worker-session.ts",
-        line: 128,
-        scope: this,
-        callSite: (f, a) => f(...a)
-      });
-    }
-    await Promise.all([
-      this._clientRpc.close(),
-      this._iframeRpc.close()
-    ]);
-  }
-  async _maybeOpenShell() {
-    try {
-      await asyncTimeout2(this._shellClientRpc.open(), 1e3);
-    } catch (e) {
-      log15.info("No shell connected.", {}, {
-        file: "worker-session.ts",
-        line: 138,
-        scope: this,
-        callSite: (f, a) => f(...a)
-      });
-    }
-  }
-  _afterLockReleases(lockKey, callback) {
-    return navigator.locks.request(lockKey, () => {
-    }).then(callback);
-  }
-};
-__decorate4([
-  logInfo2
-], WorkerSession.prototype, "origin", void 0);
-__decorate4([
-  logInfo2
-], WorkerSession.prototype, "lockKey", void 0);
-
-// packages/sdk/client-services/src/packlets/vault/worker-runtime.ts
-var WorkerRuntime = class {
-  // prettier-ignore
-  constructor(_configProvider) {
-    this._configProvider = _configProvider;
-    this._transportFactory = new WebRTCTransportProxyFactory();
-    this._ready = new Trigger8();
-    this.sessions = /* @__PURE__ */ new Set();
-    this._clientServices = new ClientServicesHost();
-  }
-  get host() {
-    return this._clientServices;
-  }
-  async start() {
-    log16("starting...", {}, {
-      file: "worker-runtime.ts",
-      line: 48,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    try {
-      this._config = await this._configProvider();
-      const signals = this._config.get("runtime.services.signaling");
-      this._clientServices.initialize({
-        config: this._config,
-        signalManager: signals ? new WebsocketSignalManager(signals) : new MemorySignalManager(new MemorySignalManagerContext()),
-        transportFactory: this._transportFactory
-      });
-      await this._clientServices.open();
-      this._ready.wake(void 0);
-      log16("started", {}, {
-        file: "worker-runtime.ts",
-        line: 62,
-        scope: this,
-        callSite: (f, a) => f(...a)
-      });
-    } catch (err) {
-      this._ready.wake(err);
-      log16.catch(err, {}, {
-        file: "worker-runtime.ts",
-        line: 65,
-        scope: this,
-        callSite: (f, a) => f(...a)
-      });
-    }
-  }
-  async stop() {
-    await this._clientServices.close();
-  }
-  /**
-  * Create a new session.
-  */
-  async createSession({ appPort, systemPort, shellPort }) {
-    const session = new WorkerSession({
-      serviceHost: this._clientServices,
-      appPort,
-      systemPort,
-      shellPort,
-      readySignal: this._ready
-    });
-    session.onClose.set(async () => {
-      this.sessions.delete(session);
-      this._reconnectWebrtc();
-    });
-    await session.open();
-    this.sessions.add(session);
-    this._reconnectWebrtc();
-  }
-  /**
-  * Selects one of the existing session fro WebRTC networking.
-  */
-  _reconnectWebrtc() {
-    log16("reconnecting webrtc...", {}, {
-      file: "worker-runtime.ts",
-      line: 102,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    if (this._sessionForNetworking) {
-      if (!this.sessions.has(this._sessionForNetworking)) {
-        this._sessionForNetworking = void 0;
-      }
-    }
-    if (!this._sessionForNetworking) {
-      const selected = Array.from(this.sessions).find((session) => session.bridgeService);
-      if (selected) {
-        this._sessionForNetworking = selected;
-        this._transportFactory.setBridgeService(selected.bridgeService);
-      } else {
-        this._transportFactory.setBridgeService(void 0);
-      }
-    }
-  }
-};
-
-// packages/sdk/client-services/src/packlets/services/service-context.ts
-import assert13 from "@dxos/node-std/assert";
-import { Trigger as Trigger9 } from "@dxos/async";
-import { getCredentialAssertion as getCredentialAssertion3 } from "@dxos/credentials";
-import { failUndefined as failUndefined3 } from "@dxos/debug";
-import { valueEncoding, MetadataStore, SpaceManager, DataServiceSubscriptions, SnapshotStore } from "@dxos/echo-pipeline";
-import { FeedFactory, FeedStore } from "@dxos/feed-store";
-import { Keyring } from "@dxos/keyring";
-import { PublicKey as PublicKey9 } from "@dxos/keys";
-import { log as log17 } from "@dxos/log";
-import { STORAGE_VERSION, trace as trace5 } from "@dxos/protocols";
-import { Invitation as Invitation5 } from "@dxos/protocols/proto/dxos/client/services";
-var ServiceContext = class {
-  // prettier-ignore
-  constructor(storage, networkManager, signalManager, modelFactory) {
-    this.storage = storage;
-    this.networkManager = networkManager;
-    this.signalManager = signalManager;
-    this.modelFactory = modelFactory;
-    this.initialized = new Trigger9();
-    this.dataServiceSubscriptions = new DataServiceSubscriptions();
-    this._handlerFactories = /* @__PURE__ */ new Map();
-    this._instanceId = PublicKey9.random().toHex();
-    this.metadataStore = new MetadataStore(storage.createDirectory("metadata"));
-    this.snapshotStore = new SnapshotStore(storage.createDirectory("snapshots"));
-    this.keyring = new Keyring(storage.createDirectory("keyring"));
-    this.feedStore = new FeedStore({
-      factory: new FeedFactory({
-        root: storage.createDirectory("feeds"),
-        signer: this.keyring,
-        hypercore: {
-          valueEncoding
-        }
-      })
-    });
-    this.spaceManager = new SpaceManager({
-      feedStore: this.feedStore,
-      networkManager: this.networkManager,
-      metadataStore: this.metadataStore,
-      modelFactory: this.modelFactory,
-      snapshotStore: this.snapshotStore
-    });
-    this.identityManager = new IdentityManager(this.metadataStore, this.keyring, this.feedStore, this.spaceManager);
-    this.invitations = new InvitationsHandler(this.networkManager);
-    this._handlerFactories.set(Invitation5.Kind.DEVICE, () => new DeviceInvitationProtocol(this.keyring, () => {
-      var _a;
-      return (_a = this.identityManager.identity) != null ? _a : failUndefined3();
-    }, this._acceptIdentity.bind(this)));
-  }
-  async open() {
-    log17.trace("dxos.sdk.service-context.open", trace5.begin({
-      id: this._instanceId
-    }), {
-      file: "service-context.ts",
-      line: 119,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    await this._checkStorageVersion();
-    log17("opening...", {}, {
-      file: "service-context.ts",
-      line: 123,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    await this.signalManager.open();
-    await this.networkManager.open();
-    await this.spaceManager.open();
-    await this.identityManager.open();
-    if (this.identityManager.identity) {
-      await this._initialize();
-    }
-    log17("opened", {}, {
-      file: "service-context.ts",
-      line: 131,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    log17.trace("dxos.sdk.service-context.open", trace5.end({
-      id: this._instanceId
-    }), {
-      file: "service-context.ts",
-      line: 132,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-  }
-  async close() {
-    var _a, _b;
-    log17("closing...", {}, {
-      file: "service-context.ts",
-      line: 136,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    await ((_a = this._deviceSpaceSync) == null ? void 0 : _a.close());
-    await ((_b = this.dataSpaceManager) == null ? void 0 : _b.close());
-    await this.identityManager.close();
-    await this.spaceManager.close();
-    await this.feedStore.close();
-    await this.networkManager.close();
-    await this.signalManager.close();
-    this.dataServiceSubscriptions.clear();
-    log17("closed", {}, {
-      file: "service-context.ts",
-      line: 145,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-  }
-  async createIdentity(params = {}) {
-    const identity = await this.identityManager.createIdentity(params);
-    await this._initialize();
-    return identity;
+  async createIdentity(params = {}) {
+    const identity = await this.identityManager.createIdentity(params);
+    await this._initialize();
+    return identity;
   }
   getInvitationHandler(invitation) {
     const factory = this._handlerFactories.get(invitation.kind);
-    assert13(factory, `Unknown invitation kind: ${invitation.kind}`);
+    assert11(factory, `Unknown invitation kind: ${invitation.kind}`);
     return factory(invitation);
   }
   async _acceptIdentity(params) {
@@ -4007,24 +3375,15 @@ var ServiceContext = class {
   async _checkStorageVersion() {
     await this.metadataStore.load();
     if (this.metadataStore.version !== STORAGE_VERSION) {
-      log17.error("Invalid storage version", {
-        current: this.metadataStore.version,
-        expected: STORAGE_VERSION
-      }, {
-        file: "service-context.ts",
-        line: 171,
-        scope: this,
-        callSite: (f, a) => f(...a)
-      });
-      await this.metadataStore.clear();
+      throw new Error(`Invalid storage version: current=${this.metadataStore.version}, expected=${STORAGE_VERSION}`);
     }
   }
   // Called when identity is created.
   async _initialize() {
     var _a;
-    log17("initializing spaces...", {}, {
+    log13("initializing spaces...", {}, {
       file: "service-context.ts",
-      line: 179,
+      line: 178,
       scope: this,
       callSite: (f, a) => f(...a)
     });
@@ -4045,7 +3404,7 @@ var ServiceContext = class {
     this.dataSpaceManager = new DataSpaceManager(this.spaceManager, this.metadataStore, this.dataServiceSubscriptions, this.keyring, signingContext, this.feedStore);
     await this.dataSpaceManager.open();
     this._handlerFactories.set(Invitation5.Kind.SPACE, (invitation) => {
-      assert13(this.dataSpaceManager, "dataSpaceManager not initialized yet");
+      assert11(this.dataSpaceManager, "dataSpaceManager not initialized yet");
       return new SpaceInvitationProtocol(this.dataSpaceManager, signingContext, this.keyring, invitation.spaceKey);
     });
     this.initialized.wake();
@@ -4059,33 +3418,33 @@ var ServiceContext = class {
           return;
         }
         if (!this.dataSpaceManager) {
-          log17("dataSpaceManager not initialized yet, ignoring space admission", {
+          log13("dataSpaceManager not initialized yet, ignoring space admission", {
             details: assertion
           }, {
             file: "service-context.ts",
-            line: 218,
+            line: 217,
             scope: this,
             callSite: (f, a) => f(...a)
           });
           return;
         }
         if (this.dataSpaceManager.spaces.has(assertion.spaceKey)) {
-          log17("space already exists, ignoring space admission", {
+          log13("space already exists, ignoring space admission", {
             details: assertion
           }, {
             file: "service-context.ts",
-            line: 222,
+            line: 221,
             scope: this,
             callSite: (f, a) => f(...a)
           });
           return;
         }
         try {
-          log17("accepting space recorded in halo", {
+          log13("accepting space recorded in halo", {
             details: assertion
           }, {
             file: "service-context.ts",
-            line: 227,
+            line: 226,
             scope: this,
             callSite: (f, a) => f(...a)
           });
@@ -4094,9 +3453,9 @@ var ServiceContext = class {
             genesisFeedKey: assertion.genesisFeedKey
           });
         } catch (err) {
-          log17.catch(err, {}, {
+          log13.catch(err, {}, {
             file: "service-context.ts",
-            line: 233,
+            line: 232,
             scope: this,
             callSite: (f, a) => f(...a)
           });
@@ -4131,6 +3490,181 @@ var ServiceRegistry = class {
   }
 };
 
+// packages/sdk/client-services/src/packlets/services/service-host.ts
+import assert12 from "@dxos/node-std/assert";
+import { Event as Event8 } from "@dxos/async";
+import { clientServiceBundle, createDefaultModelFactory } from "@dxos/client-protocol";
+import { DataServiceImpl } from "@dxos/echo-pipeline";
+import { PublicKey as PublicKey10 } from "@dxos/keys";
+import { log as log15 } from "@dxos/log";
+import { WebsocketSignalManager } from "@dxos/messaging";
+import { createWebRTCTransportFactory, NetworkManager } from "@dxos/network-manager";
+import { trace as trace6 } from "@dxos/protocols";
+import { SystemStatus } from "@dxos/protocols/proto/dxos/client/services";
+
+// packages/sdk/client-services/src/packlets/devices/devices-service.ts
+import { EventSubscriptions as EventSubscriptions3 } from "@dxos/async";
+import { Stream as Stream10 } from "@dxos/codec-protobuf";
+import { DeviceKind } from "@dxos/protocols/proto/dxos/client/services";
+var DevicesServiceImpl = class {
+  constructor(_identityManager) {
+    this._identityManager = _identityManager;
+  }
+  updateDevice(request) {
+    throw new Error("Method not implemented.");
+  }
+  queryDevices() {
+    return new Stream10(({ next }) => {
+      const update = () => {
+        var _a;
+        const deviceKeys = (_a = this._identityManager.identity) == null ? void 0 : _a.authorizedDeviceKeys;
+        if (!deviceKeys) {
+          next({
+            devices: []
+          });
+        } else {
+          next({
+            devices: Array.from(deviceKeys.values()).map((key) => {
+              var _a2;
+              return {
+                deviceKey: key,
+                kind: ((_a2 = this._identityManager.identity) == null ? void 0 : _a2.deviceKey.equals(key)) ? DeviceKind.CURRENT : DeviceKind.TRUSTED
+              };
+            })
+          });
+        }
+      };
+      const subscriptions = new EventSubscriptions3();
+      subscriptions.add(this._identityManager.stateUpdate.on(() => {
+        update();
+        if (this._identityManager.identity) {
+          subscriptions.add(this._identityManager.identity.stateUpdate.on(() => {
+            update();
+          }));
+        }
+      }));
+      update();
+      return () => subscriptions.clear();
+    });
+  }
+};
+
+// packages/sdk/client-services/src/packlets/logging/logging-service.ts
+import { Event as Event7 } from "@dxos/async";
+import { Stream as Stream11 } from "@dxos/codec-protobuf";
+import { log as log14, shouldLog, getContextFromEntry } from "@dxos/log";
+import { jsonify } from "@dxos/util";
+var LoggingServiceImpl = class {
+  constructor() {
+    this._logs = new Event7();
+    this._logProcessor = (_config, entry2) => {
+      this._logs.emit(entry2);
+    };
+  }
+  async open() {
+    log14.runtimeConfig.processors.push(this._logProcessor);
+  }
+  async close() {
+    const index = log14.runtimeConfig.processors.findIndex((processor) => processor === this._logProcessor);
+    log14.runtimeConfig.processors.splice(index, 1);
+  }
+  queryLogs(request) {
+    var _a;
+    const filters = ((_a = request.filters) == null ? void 0 : _a.length) ? request.filters : void 0;
+    return new Stream11(({ ctx, next }) => {
+      const handler = (entry2) => {
+        var _a2, _b, _c;
+        if (((_a2 = entry2.meta) == null ? void 0 : _a2.file.includes("logging-service")) || entry2.context && Object.values(entry2.context).some((value) => typeof value === "string" && value.includes("LoggingService"))) {
+          return;
+        }
+        if (shouldLog(entry2, filters)) {
+          const record = {
+            ...entry2,
+            context: jsonify(getContextFromEntry(entry2))
+          };
+          (_b = record.meta) == null ? true : delete _b.bugcheck;
+          (_c = record.meta) == null ? true : delete _c.scope;
+          next(record);
+        }
+      };
+      ctx.onDispose(() => {
+        this._logs.off(handler);
+      });
+      this._logs.on(handler);
+    });
+  }
+};
+
+// packages/sdk/client-services/src/packlets/network/network-service.ts
+import { Stream as Stream12 } from "@dxos/codec-protobuf";
+var NetworkServiceImpl = class {
+  constructor(networkManager, signalManager) {
+    this.networkManager = networkManager;
+    this.signalManager = signalManager;
+  }
+  queryStatus() {
+    return new Stream12(({ next }) => {
+      const update = () => {
+        next({
+          swarm: this.networkManager.connectionState,
+          signaling: this.signalManager.getStatus().map(({ host, state }) => ({
+            server: host,
+            state
+          }))
+        });
+      };
+      const unsubscribeSwarm = this.networkManager.connectionStateChanged.on(() => update());
+      const unsubscribeSignal = this.signalManager.statusChanged.on(() => update());
+      update();
+      return () => {
+        unsubscribeSwarm();
+        unsubscribeSignal();
+      };
+    });
+  }
+  async updateConfig(request) {
+    await this.networkManager.setConnectionState(request.swarm);
+  }
+};
+
+// packages/sdk/client-services/src/packlets/system/system-service.ts
+import { Stream as Stream13 } from "@dxos/codec-protobuf";
+var SystemServiceImpl = class {
+  constructor({ config, statusUpdate, onUpdateStatus, getCurrentStatus, onReset }) {
+    this._config = config;
+    this._statusUpdate = statusUpdate;
+    this._getCurrentStatus = getCurrentStatus;
+    this._onUpdateStatus = onUpdateStatus;
+    this._onReset = onReset;
+  }
+  async getConfig() {
+    var _a, _b;
+    return (_b = (_a = this._config) == null ? void 0 : _a.values) != null ? _b : {};
+  }
+  async updateStatus({ status }) {
+    await this._onUpdateStatus(status);
+  }
+  queryStatus() {
+    return new Stream13(({ next }) => {
+      const update = () => {
+        next({
+          status: this._getCurrentStatus()
+        });
+      };
+      update();
+      const unsubscribe = this._statusUpdate.on(() => update());
+      const interval = setInterval(update, 3e3);
+      return () => {
+        clearInterval(interval);
+        unsubscribe();
+      };
+    });
+  }
+  async reset() {
+    await this._onReset();
+  }
+};
+
 // packages/sdk/client-services/src/packlets/services/service-host.ts
 var ClientServicesHost = class {
   constructor({
@@ -4144,7 +3678,7 @@ var ClientServicesHost = class {
     // TODO(wittjosiah): Turn this on by default.
     lockKey
   } = {}) {
-    this._statusUpdate = new Event9();
+    this._statusUpdate = new Event8();
     this._opening = false;
     this._open = false;
     this._storage = storage;
@@ -4156,15 +3690,17 @@ var ClientServicesHost = class {
         signalManager
       });
     }
-    this._resourceLock = lockKey ? new VaultResourceLock({
-      lockKey,
-      onAcquire: () => {
-        if (!this._opening) {
-          void this.open();
-        }
-      },
-      onRelease: () => this.close()
-    }) : void 0;
+    if (lockKey) {
+      this._resourceLock = new Lock({
+        lockKey,
+        onAcquire: () => {
+          if (!this._opening) {
+            void this.open();
+          }
+        },
+        onRelease: () => this.close()
+      });
+    }
     this._systemService = new SystemServiceImpl({
       config: this._config,
       statusUpdate: this._statusUpdate,
@@ -4205,9 +3741,9 @@ var ClientServicesHost = class {
   */
   initialize({ config, ...options }) {
     var _a, _b, _c;
-    assert14(!this._open, "service host is open");
+    assert12(!this._open, "service host is open");
     if (config) {
-      assert14(!this._config, "config already set");
+      assert12(!this._config, "config already set");
       this._config = config;
       if (!this._storage) {
         this._storage = createStorageObjects(config.get("runtime.client.storage", {})).storage;
@@ -4215,9 +3751,9 @@ var ClientServicesHost = class {
     }
     const { connectionLog = true, transportFactory = createWebRTCTransportFactory({
       iceServers: (_a = this._config) == null ? void 0 : _a.get("runtime.services.ice")
-    }), signalManager = new WebsocketSignalManager2((_c = (_b = this._config) == null ? void 0 : _b.get("runtime.services.signaling")) != null ? _c : []) } = options;
+    }), signalManager = new WebsocketSignalManager((_c = (_b = this._config) == null ? void 0 : _b.get("runtime.services.signaling")) != null ? _c : []) } = options;
     this._signalManager = signalManager;
-    assert14(!this._networkManager, "network manager already set");
+    assert12(!this._networkManager, "network manager already set");
     this._networkManager = new NetworkManager({
       log: connectionLog,
       transportFactory,
@@ -4230,7 +3766,7 @@ var ClientServicesHost = class {
       return;
     }
     const traceId = PublicKey10.random().toHex();
-    log18.trace("dxos.sdk.client-services-host.open", trace6.begin({
+    log15.trace("dxos.sdk.client-services-host.open", trace6.begin({
       id: traceId
     }), {
       file: "service-host.ts",
@@ -4238,12 +3774,12 @@ var ClientServicesHost = class {
       scope: this,
       callSite: (f, a) => f(...a)
     });
-    assert14(this._config, "config not set");
-    assert14(this._storage, "storage not set");
-    assert14(this._signalManager, "signal manager not set");
-    assert14(this._networkManager, "network manager not set");
+    assert12(this._config, "config not set");
+    assert12(this._storage, "storage not set");
+    assert12(this._signalManager, "signal manager not set");
+    assert12(this._networkManager, "network manager not set");
     this._opening = true;
-    log18("opening...", {
+    log15("opening...", {
       lockKey: (_a = this._resourceLock) == null ? void 0 : _a.lockKey
     }, {
       file: "service-host.ts",
@@ -4278,7 +3814,7 @@ var ClientServicesHost = class {
     this._open = true;
     this._statusUpdate.emit();
     const deviceKey = (_c = this._serviceContext.identityManager.identity) == null ? void 0 : _c.deviceKey;
-    log18("opened", {
+    log15("opened", {
       deviceKey
     }, {
       file: "service-host.ts",
@@ -4286,7 +3822,7 @@ var ClientServicesHost = class {
       scope: this,
       callSite: (f, a) => f(...a)
     });
-    log18.trace("dxos.sdk.client-services-host.open", trace6.end({
+    log15.trace("dxos.sdk.client-services-host.open", trace6.end({
       id: traceId
     }), {
       file: "service-host.ts",
@@ -4301,7 +3837,7 @@ var ClientServicesHost = class {
       return;
     }
     const deviceKey = (_a = this._serviceContext.identityManager.identity) == null ? void 0 : _a.deviceKey;
-    log18("closing...", {
+    log15("closing...", {
       deviceKey
     }, {
       file: "service-host.ts",
@@ -4316,7 +3852,7 @@ var ClientServicesHost = class {
     await this._serviceContext.close();
     this._open = false;
     this._statusUpdate.emit();
-    log18("closed", {
+    log15("closed", {
       deviceKey
     }, {
       file: "service-host.ts",
@@ -4328,7 +3864,7 @@ var ClientServicesHost = class {
   async reset() {
     var _a;
     const traceId = PublicKey10.random().toHex();
-    log18.trace("dxos.sdk.client-services-host.reset", trace6.begin({
+    log15.trace("dxos.sdk.client-services-host.reset", trace6.begin({
       id: traceId
     }), {
       file: "service-host.ts",
@@ -4336,7 +3872,7 @@ var ClientServicesHost = class {
       scope: this,
       callSite: (f, a) => f(...a)
     });
-    log18("resetting...", {}, {
+    log15("resetting...", {}, {
       file: "service-host.ts",
       line: 273,
       scope: this,
@@ -4344,13 +3880,13 @@ var ClientServicesHost = class {
     });
     await ((_a = this._serviceContext) == null ? void 0 : _a.close());
     await this._storage.reset();
-    log18("reset", {}, {
+    log15("reset", {}, {
       file: "service-host.ts",
       line: 276,
       scope: this,
       callSite: (f, a) => f(...a)
     });
-    log18.trace("dxos.sdk.client-services-host.reset", trace6.end({
+    log15.trace("dxos.sdk.client-services-host.reset", trace6.end({
       id: traceId
     }), {
       file: "service-host.ts",
@@ -4383,125 +3919,6 @@ var LocalClientServices = class {
   }
 };
 
-// packages/sdk/client-services/src/packlets/vault/iframe-host-runtime.ts
-var __decorate5 = function(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
-    r = Reflect.decorate(decorators, target, key, desc);
-  else
-    for (var i = decorators.length - 1; i >= 0; i--)
-      if (d = decorators[i])
-        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var LOCK_KEY = "DXOS_RESOURCE_LOCK";
-var IFrameHostRuntime = class {
-  constructor({ config, origin, appPort, shellPort }) {
-    this._ready = new Trigger10();
-    this._configProvider = config;
-    this.origin = origin;
-    this._appPort = appPort;
-    this._shellPort = shellPort;
-    if (this._shellPort) {
-      this._shellRuntime = new ShellRuntimeImpl(this._shellPort);
-    }
-  }
-  get services() {
-    return this._clientServices;
-  }
-  get shell() {
-    return this._shellRuntime;
-  }
-  async start() {
-    var _a;
-    log19("starting...", {}, {
-      file: "iframe-host-runtime.ts",
-      line: 70,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    try {
-      this._config = await getAsyncValue2(this._configProvider);
-      this._transportFactory = createWebRTCTransportFactory2({
-        iceServers: this._config.get("runtime.services.ice")
-      });
-      const signals = this._config.get("runtime.services.signaling");
-      this._clientServices = new LocalClientServices({
-        lockKey: LOCK_KEY,
-        config: this._config,
-        signalManager: signals ? new WebsocketSignalManager3(signals) : new MemorySignalManager2(new MemorySignalManagerContext2()),
-        transportFactory: this._transportFactory
-      });
-      const middleware = {
-        handleCall: async (method, params, handler) => {
-          const error = await this._ready.wait({
-            timeout: PROXY_CONNECTION_TIMEOUT2
-          });
-          if (error) {
-            throw error;
-          }
-          return handler(method, params);
-        },
-        handleStream: async (method, params, handler) => {
-          const error = await this._ready.wait({
-            timeout: PROXY_CONNECTION_TIMEOUT2
-          });
-          if (error) {
-            throw error;
-          }
-          return handler(method, params);
-        }
-      };
-      this._clientRpc = new ClientRpcServer({
-        serviceRegistry: this._clientServices.host.serviceRegistry,
-        port: this._appPort,
-        ...middleware
-      });
-      await Promise.all([
-        this._clientServices.open(),
-        this._clientRpc.open(),
-        (_a = this._shellRuntime) == null ? void 0 : _a.open()
-      ]);
-      this._ready.wake(void 0);
-      log19("started", {}, {
-        file: "iframe-host-runtime.ts",
-        line: 113,
-        scope: this,
-        callSite: (f, a) => f(...a)
-      });
-    } catch (err) {
-      this._ready.wake(err);
-      log19.catch(err, {}, {
-        file: "iframe-host-runtime.ts",
-        line: 116,
-        scope: this,
-        callSite: (f, a) => f(...a)
-      });
-    }
-  }
-  async stop() {
-    var _a;
-    log19("stopping...", {}, {
-      file: "iframe-host-runtime.ts",
-      line: 121,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    await this._clientRpc.close();
-    await this._clientServices.close();
-    await ((_a = this._shellRuntime) == null ? void 0 : _a.close());
-    log19("stopped", {}, {
-      file: "iframe-host-runtime.ts",
-      line: 125,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-  }
-};
-__decorate5([
-  logInfo3
-], IFrameHostRuntime.prototype, "origin", void 0);
-
 export {
   subscribeToFeeds,
   subscribeToFeedBlocks,
@@ -4522,20 +3939,15 @@ export {
   InvitationsHandler,
   InvitationsServiceImpl,
   SpaceInvitationProtocol,
+  Lock,
+  isLocked,
   DataSpace,
   DataSpaceManager,
   SpacesServiceImpl,
   createStorageObjects,
-  ShellRuntimeImpl,
-  MemoryShellRuntime,
-  IFrameHostRuntime,
-  IFrameProxyRuntime,
-  VaultResourceLock,
-  WorkerSession,
-  WorkerRuntime,
   ServiceContext,
   ServiceRegistry,
   ClientServicesHost,
   LocalClientServices
 };
-//# sourceMappingURL=chunk-KMQOZOUZ.mjs.map
+//# sourceMappingURL=chunk-UL74TKNZ.mjs.map