@dxos/client-services 0.1.52-main.d3eb45f → 0.1.52-main.e73bc9f

package/dist/lib/node/index.cjs

@@ -43,6 +43,7 @@ __export(src_exports, {
   IdentityServiceImpl: () => IdentityServiceImpl,
   InvitationsHandler: () => InvitationsHandler,
   InvitationsServiceImpl: () => InvitationsServiceImpl,
+  LocalClientServices: () => LocalClientServices,
   Lock: () => Lock,
   MemoryShellRuntime: () => MemoryShellRuntime,
   ServiceContext: () => ServiceContext,
@@ -2139,55 +2140,260 @@ var SpaceInvitationProtocol = class {
   }
 };
 
-// packages/sdk/client-services/src/packlets/services/service-context.ts
-var import_node_assert11 = __toESM(require("node:assert"));
-var import_async14 = require("@dxos/async");
-var import_credentials13 = require("@dxos/credentials");
-var import_debug6 = require("@dxos/debug");
-var import_echo_pipeline3 = require("@dxos/echo-pipeline");
-var import_feed_store4 = require("@dxos/feed-store");
-var import_keyring = require("@dxos/keyring");
-var import_keys10 = require("@dxos/keys");
-var import_log12 = require("@dxos/log");
-var import_protocols8 = require("@dxos/protocols");
-var import_services9 = require("@dxos/protocols/proto/dxos/client/services");
-var import_teleport_extension_object_sync = require("@dxos/teleport-extension-object-sync");
+// packages/sdk/client-services/src/packlets/services/service-host.ts
+var import_node_assert13 = __toESM(require("node:assert"));
+var import_async17 = require("@dxos/async");
+var import_client_protocol5 = require("@dxos/client-protocol");
+var import_echo_pipeline4 = require("@dxos/echo-pipeline");
+var import_keys11 = require("@dxos/keys");
+var import_log15 = require("@dxos/log");
+var import_messaging = require("@dxos/messaging");
+var import_network_manager2 = require("@dxos/network-manager");
+var import_protocols9 = require("@dxos/protocols");
+var import_services12 = require("@dxos/protocols/proto/dxos/client/services");
+
+// packages/sdk/client-services/src/packlets/devices/devices-service.ts
+var import_async10 = require("@dxos/async");
+var import_codec_protobuf9 = require("@dxos/codec-protobuf");
+var import_services6 = require("@dxos/protocols/proto/dxos/client/services");
+var DevicesServiceImpl = class {
+  constructor(_identityManager) {
+    this._identityManager = _identityManager;
+  }
+  updateDevice(request) {
+    throw new Error("Method not implemented.");
+  }
+  queryDevices() {
+    return new import_codec_protobuf9.Stream(({ next }) => {
+      const update = () => {
+        var _a;
+        const deviceKeys = (_a = this._identityManager.identity) == null ? void 0 : _a.authorizedDeviceKeys;
+        if (!deviceKeys) {
+          next({
+            devices: []
+          });
+        } else {
+          next({
+            devices: Array.from(deviceKeys.values()).map((key) => {
+              var _a2;
+              return {
+                deviceKey: key,
+                kind: ((_a2 = this._identityManager.identity) == null ? void 0 : _a2.deviceKey.equals(key)) ? import_services6.DeviceKind.CURRENT : import_services6.DeviceKind.TRUSTED
+              };
+            })
+          });
+        }
+      };
+      const subscriptions = new import_async10.EventSubscriptions();
+      subscriptions.add(this._identityManager.stateUpdate.on(() => {
+        update();
+        if (this._identityManager.identity) {
+          subscriptions.add(this._identityManager.identity.stateUpdate.on(() => {
+            update();
+          }));
+        }
+      }));
+      update();
+      return () => subscriptions.clear();
+    });
+  }
+};
+
+// packages/sdk/client-services/src/packlets/locks/node.ts
+var import_node_assert9 = __toESM(require("node:assert"));
+var import_lock_file = require("@dxos/lock-file");
+var import_log8 = require("@dxos/log");
+var __decorate = function(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
+    r = Reflect.decorate(decorators, target, key, desc);
+  else
+    for (var i = decorators.length - 1; i >= 0; i--)
+      if (d = decorators[i])
+        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var Lock = class {
+  constructor({ lockKey: lockPath, onAcquire, onRelease }) {
+    this._lockPath = lockPath;
+    this._onAcquire = onAcquire;
+    this._onRelease = onRelease;
+  }
+  get lockKey() {
+    return this._lockPath;
+  }
+  async acquire() {
+    var _a;
+    (0, import_log8.log)("acquiring lock...", {}, {
+      file: "node.ts",
+      line: 32,
+      scope: this,
+      callSite: (f, a) => f(...a)
+    });
+    this._fileHandle = await import_lock_file.LockFile.acquire(this._lockPath);
+    await ((_a = this._onAcquire) == null ? void 0 : _a.call(this));
+    (0, import_log8.log)("acquired lock", {}, {
+      file: "node.ts",
+      line: 37,
+      scope: this,
+      callSite: (f, a) => f(...a)
+    });
+  }
+  async release() {
+    var _a;
+    await ((_a = this._onRelease) == null ? void 0 : _a.call(this));
+    (0, import_node_assert9.default)(this._fileHandle, "Lock is not acquired");
+    await import_lock_file.LockFile.release(this._fileHandle);
+  }
+};
+__decorate([
+  import_log8.logInfo
+], Lock.prototype, "lockKey", null);
+var isLocked = (lockPath) => import_lock_file.LockFile.isLocked(lockPath);
+
+// packages/sdk/client-services/src/packlets/logging/logging-service.ts
+var import_async11 = require("@dxos/async");
+var import_codec_protobuf10 = require("@dxos/codec-protobuf");
+var import_log9 = require("@dxos/log");
+var import_services7 = require("@dxos/protocols/proto/dxos/client/services");
+var import_util3 = require("@dxos/util");
+var LoggingServiceImpl = class {
+  constructor() {
+    this._logs = new import_async11.Event();
+    this._logProcessor = (_config, entry2) => {
+      this._logs.emit(entry2);
+    };
+  }
+  async open() {
+    import_log9.log.runtimeConfig.processors.push(this._logProcessor);
+  }
+  async close() {
+    const index = import_log9.log.runtimeConfig.processors.findIndex((processor) => processor === this._logProcessor);
+    import_log9.log.runtimeConfig.processors.splice(index, 1);
+  }
+  queryLogs(request) {
+    return new import_codec_protobuf10.Stream(({ ctx, next }) => {
+      const handler = (entry2) => {
+        var _a, _b, _c, _d, _e;
+        if (LOG_PROCESSING > 0) {
+          return;
+        }
+        if (((_a = entry2.meta) == null ? void 0 : _a.file.includes("logging-service")) || entry2.context && Object.values(entry2.context).some((value) => typeof value === "string" && value.includes("LoggingService"))) {
+          return;
+        }
+        if (!shouldLog(entry2, request)) {
+          return;
+        }
+        const record = {
+          ...entry2,
+          context: (0, import_util3.jsonify)((0, import_log9.getContextFromEntry)(entry2)),
+          timestamp: new Date(),
+          meta: {
+            // TODO(dmaretskyi): Fix proto.
+            file: (_c = (_b = entry2.meta) == null ? void 0 : _b.file) != null ? _c : "",
+            line: (_e = (_d = entry2.meta) == null ? void 0 : _d.line) != null ? _e : 0
+          }
+        };
+        try {
+          LOG_PROCESSING++;
+          next(record);
+        } finally {
+          LOG_PROCESSING--;
+        }
+      };
+      this._logs.on(ctx, handler);
+    });
+  }
+};
+var matchFilter = (filter, level, path, options) => {
+  switch (options) {
+    case import_services7.QueryLogsRequest.MatchingOptions.INCLUSIVE:
+      return level >= filter.level && (!filter.pattern || path.includes(filter.pattern));
+    case import_services7.QueryLogsRequest.MatchingOptions.EXPLICIT:
+      return level === filter.level && (!filter.pattern || path.includes(filter.pattern));
+  }
+};
+var shouldLog = (entry2, request) => {
+  var _a;
+  const options = (_a = request.options) != null ? _a : import_services7.QueryLogsRequest.MatchingOptions.INCLUSIVE;
+  if (request.filters === void 0) {
+    return options === import_services7.QueryLogsRequest.MatchingOptions.INCLUSIVE;
+  } else {
+    return request.filters.some((filter) => {
+      var _a2, _b;
+      return matchFilter(filter, entry2.level, (_b = (_a2 = entry2.meta) == null ? void 0 : _a2.file) != null ? _b : "", options);
+    });
+  }
+};
+var LOG_PROCESSING = 0;
+
+// packages/sdk/client-services/src/packlets/network/network-service.ts
+var import_codec_protobuf11 = require("@dxos/codec-protobuf");
+var NetworkServiceImpl = class {
+  constructor(networkManager, signalManager) {
+    this.networkManager = networkManager;
+    this.signalManager = signalManager;
+  }
+  queryStatus() {
+    return new import_codec_protobuf11.Stream(({ next }) => {
+      const update = () => {
+        next({
+          swarm: this.networkManager.connectionState,
+          signaling: this.signalManager.getStatus().map(({ host, state }) => ({
+            server: host,
+            state
+          }))
+        });
+      };
+      const unsubscribeSwarm = this.networkManager.connectionStateChanged.on(() => update());
+      const unsubscribeSignal = this.signalManager.statusChanged.on(() => update());
+      update();
+      return () => {
+        unsubscribeSwarm();
+        unsubscribeSignal();
+      };
+    });
+  }
+  async updateConfig(request) {
+    await this.networkManager.setConnectionState(request.swarm);
+  }
+};
 
 // packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts
-var import_node_assert10 = __toESM(require("node:assert"));
-var import_async12 = require("@dxos/async");
+var import_node_assert11 = __toESM(require("node:assert"));
+var import_async14 = require("@dxos/async");
 var import_context7 = require("@dxos/context");
 var import_credentials12 = require("@dxos/credentials");
 var import_keys9 = require("@dxos/keys");
-var import_log10 = require("@dxos/log");
+var import_log12 = require("@dxos/log");
 var import_protocols6 = require("@dxos/protocols");
-var import_services7 = require("@dxos/protocols/proto/dxos/client/services");
+var import_services9 = require("@dxos/protocols/proto/dxos/client/services");
 var import_teleport_extension_gossip = require("@dxos/teleport-extension-gossip");
-var import_util5 = require("@dxos/util");
+var import_util6 = require("@dxos/util");
 
 // packages/sdk/client-services/src/packlets/spaces/data-space.ts
-var import_async11 = require("@dxos/async");
+var import_async13 = require("@dxos/async");
 var import_client_protocol3 = require("@dxos/client-protocol");
 var import_context6 = require("@dxos/context");
 var import_debug3 = require("@dxos/debug");
 var import_echo_pipeline = require("@dxos/echo-pipeline");
 var import_errors3 = require("@dxos/errors");
 var import_keys8 = require("@dxos/keys");
-var import_log9 = require("@dxos/log");
-var import_services6 = require("@dxos/protocols/proto/dxos/client/services");
+var import_log11 = require("@dxos/log");
+var import_services8 = require("@dxos/protocols/proto/dxos/client/services");
 var import_credentials9 = require("@dxos/protocols/proto/dxos/halo/credentials");
 var import_timeframe = require("@dxos/timeframe");
-var import_util4 = require("@dxos/util");
+var import_util5 = require("@dxos/util");
 
 // packages/sdk/client-services/src/packlets/spaces/notarization-plugin.ts
-var import_node_assert9 = __toESM(require("node:assert"));
-var import_async10 = require("@dxos/async");
+var import_node_assert10 = __toESM(require("node:assert"));
+var import_async12 = require("@dxos/async");
 var import_context5 = require("@dxos/context");
 var import_keys7 = require("@dxos/keys");
-var import_log8 = require("@dxos/log");
+var import_log10 = require("@dxos/log");
 var import_protocols5 = require("@dxos/protocols");
 var import_teleport2 = require("@dxos/teleport");
-var import_util3 = require("@dxos/util");
+var import_util4 = require("@dxos/util");
 var DEFAULT_RETRY_TIMEOUT = 1e3;
 var DEFAULT_SUCCESS_DELAY = 1e3;
 var DEFAULT_NOTARIZE_TIMEOUT = 1e4;
@@ -2195,10 +2401,10 @@ var WRITER_NOT_SET_ERROR_CODE = "WRITER_NOT_SET";
 var NotarizationPlugin = class {
   constructor() {
     this._ctx = new import_context5.Context();
-    this._extensionOpened = new import_async10.Event();
+    this._extensionOpened = new import_async12.Event();
     this._extensions = /* @__PURE__ */ new Set();
-    this._processedCredentials = new import_util3.ComplexSet(import_keys7.PublicKey.hash);
-    this._processCredentialsTriggers = new import_util3.ComplexMap(import_keys7.PublicKey.hash);
+    this._processedCredentials = new import_util4.ComplexSet(import_keys7.PublicKey.hash);
+    this._processCredentialsTriggers = new import_util4.ComplexMap(import_keys7.PublicKey.hash);
   }
   async open() {
   }
@@ -2209,7 +2415,7 @@ var NotarizationPlugin = class {
   * Request credentials to be notarized.
   */
   async notarize({ ctx: opCtx, credentials, timeout = DEFAULT_NOTARIZE_TIMEOUT, retryTimeout = DEFAULT_RETRY_TIMEOUT, successDelay = DEFAULT_SUCCESS_DELAY }) {
-    (0, import_log8.log)("notarize", {
+    (0, import_log10.log)("notarize", {
       credentials
     }, {
       file: "notarization-plugin.ts",
@@ -2217,11 +2423,11 @@ var NotarizationPlugin = class {
       scope: this,
       callSite: (f, a) => f(...a)
     });
-    (0, import_node_assert9.default)(credentials.every((credential) => credential.id), "Credentials must have an id");
-    const errors = new import_async10.Trigger();
+    (0, import_node_assert10.default)(credentials.every((credential) => credential.id), "Credentials must have an id");
+    const errors = new import_async12.Trigger();
     const ctx = this._ctx.derive({
       onError: (err) => {
-        import_log8.log.warn("Notarization error", {
+        import_log10.log.warn("Notarization error", {
           err
         }, {
           file: "notarization-plugin.ts",
@@ -2235,8 +2441,8 @@ var NotarizationPlugin = class {
     });
     opCtx == null ? void 0 : opCtx.onDispose(() => ctx.dispose());
     if (timeout !== 0) {
-      (0, import_async10.scheduleTask)(ctx, () => {
-        import_log8.log.warn("Notarization timeout", {
+      (0, import_async12.scheduleTask)(ctx, () => {
+        import_log10.log.warn("Notarization timeout", {
           timeout,
           peers: Array.from(this._extensions).map((extension) => extension.remotePeerId)
         }, {
@@ -2246,12 +2452,12 @@ var NotarizationPlugin = class {
           callSite: (f, a) => f(...a)
         });
         void ctx.dispose();
-        errors.throw(new import_async10.TimeoutError(timeout, "Notarization timed out"));
+        errors.throw(new import_async12.TimeoutError(timeout, "Notarization timed out"));
       }, timeout);
     }
     const allNotarized = Promise.all(credentials.map((credential) => this._waitUntilProcessed(credential.id)));
     const peersTried = /* @__PURE__ */ new Set();
-    const notarizeTask = new import_async10.DeferredTask(ctx, async () => {
+    const notarizeTask = new import_async12.DeferredTask(ctx, async () => {
       try {
         if (this._extensions.size === 0) {
           return;
@@ -2260,7 +2466,7 @@ var NotarizationPlugin = class {
           ...this._extensions
         ].find((peer2) => !peersTried.has(peer2));
         if (!peer) {
-          import_log8.log.warn("Exhausted all peers to notarize with", {
+          import_log10.log.warn("Exhausted all peers to notarize with", {
             retryIn: retryTimeout
           }, {
             file: "notarization-plugin.ts",
@@ -2269,11 +2475,11 @@ var NotarizationPlugin = class {
             callSite: (f, a) => f(...a)
           });
           peersTried.clear();
-          (0, import_async10.scheduleTask)(ctx, () => notarizeTask.schedule(), retryTimeout);
+          (0, import_async12.scheduleTask)(ctx, () => notarizeTask.schedule(), retryTimeout);
           return;
         }
         peersTried.add(peer);
-        (0, import_log8.log)("try notarizing", {
+        (0, import_log10.log)("try notarizing", {
           peer: peer.localPeerId,
           credentialId: credentials.map((credential) => credential.id)
         }, {
@@ -2285,16 +2491,16 @@ var NotarizationPlugin = class {
         await peer.rpc.NotarizationService.notarize({
           credentials: credentials.filter((credential) => !this._processedCredentials.has(credential.id))
         });
-        (0, import_log8.log)("success", {}, {
+        (0, import_log10.log)("success", {}, {
           file: "notarization-plugin.ts",
           line: 144,
           scope: this,
           callSite: (f, a) => f(...a)
         });
-        await (0, import_async10.sleep)(successDelay);
+        await (0, import_async12.sleep)(successDelay);
       } catch (err) {
         if (!ctx.disposed && !err.message.includes(WRITER_NOT_SET_ERROR_CODE)) {
-          import_log8.log.warn("error notarizing (recoverable)", err, {
+          import_log10.log.warn("error notarizing (recoverable)", err, {
             file: "notarization-plugin.ts",
             line: 148,
             scope: this,
@@ -2312,7 +2518,7 @@ var NotarizationPlugin = class {
         allNotarized,
         errors.wait()
       ]);
-      (0, import_log8.log)("done", {}, {
+      (0, import_log10.log)("done", {}, {
         file: "notarization-plugin.ts",
         line: 159,
         scope: this,
@@ -2335,14 +2541,14 @@ var NotarizationPlugin = class {
     this._processCredentialsTriggers.delete(credential.id);
   }
   setWriter(writer) {
-    (0, import_node_assert9.default)(!this._writer, "Writer already set.");
+    (0, import_node_assert10.default)(!this._writer, "Writer already set.");
     this._writer = writer;
   }
   async _waitUntilProcessed(id) {
     if (this._processedCredentials.has(id)) {
       return;
     }
-    await (0, import_util3.entry)(this._processCredentialsTriggers, id).orInsert(new import_async10.Trigger()).value.wait();
+    await (0, import_util4.entry)(this._processCredentialsTriggers, id).orInsert(new import_async12.Trigger()).value.wait();
   }
   /**
   * Requests from other peers to notarize credentials.
@@ -2353,7 +2559,7 @@ var NotarizationPlugin = class {
       throw new Error(WRITER_NOT_SET_ERROR_CODE);
     }
     for (const credential of (_a = request.credentials) != null ? _a : []) {
-      (0, import_node_assert9.default)(credential.id, "Credential must have an id");
+      (0, import_node_assert10.default)(credential.id, "Credential must have an id");
       if (this._processedCredentials.has(credential.id)) {
         continue;
       }
@@ -2363,7 +2569,7 @@ var NotarizationPlugin = class {
   createExtension() {
     const extension = new NotarizationTeleportExtension({
       onOpen: async () => {
-        (0, import_log8.log)("extension opened", {
+        (0, import_log10.log)("extension opened", {
           peer: extension.localPeerId
         }, {
           file: "notarization-plugin.ts",
@@ -2375,7 +2581,7 @@ var NotarizationPlugin = class {
         this._extensionOpened.emit();
       },
       onClose: async () => {
-        (0, import_log8.log)("extension closed", {
+        (0, import_log10.log)("extension closed", {
           peer: extension.localPeerId
         }, {
           file: "notarization-plugin.ts",
@@ -2422,7 +2628,7 @@ var NotarizationTeleportExtension = class extends import_teleport2.RpcExtension
 };
 
 // packages/sdk/client-services/src/packlets/spaces/data-space.ts
-var __decorate = function(decorators, target, key, desc) {
+var __decorate2 = function(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2435,12 +2641,12 @@ var __decorate = function(decorators, target, key, desc) {
 var DataSpace = class DataSpace2 {
   constructor(params) {
     this._ctx = new import_context6.Context();
-    this._state = import_services6.SpaceState.CLOSED;
+    this._state = import_services8.SpaceState.CLOSED;
     /**
     * Error for _state === SpaceState.ERROR.
     */
     this.error = void 0;
-    this.stateUpdate = new import_async11.Event();
+    this.stateUpdate = new import_async13.Event();
     this.metrics = {};
     var _a;
     this._inner = params.inner;
@@ -2453,7 +2659,7 @@ var DataSpace = class DataSpace2 {
     this._signingContext = params.signingContext;
     this._callbacks = (_a = params.callbacks) != null ? _a : {};
     this.authVerifier = new TrustedKeySetAuthVerifier({
-      trustedKeysProvider: () => new import_util4.ComplexSet(import_keys8.PublicKey.hash, Array.from(this._inner.spaceState.members.keys())),
+      trustedKeysProvider: () => new import_util5.ComplexSet(import_keys8.PublicKey.hash, Array.from(this._inner.spaceState.members.keys())),
       update: this._inner.stateUpdate,
       authTimeout: import_client_protocol3.AUTH_TIMEOUT
     });
@@ -2489,11 +2695,11 @@ var DataSpace = class DataSpace2 {
     await this.notarizationPlugin.open();
     await this._notarizationPluginConsumer.open();
     await this._inner.open();
-    this._state = import_services6.SpaceState.INACTIVE;
+    this._state = import_services8.SpaceState.INACTIVE;
     this.metrics.open = new Date();
   }
   async close() {
-    this._state = import_services6.SpaceState.CLOSED;
+    this._state = import_services8.SpaceState.CLOSED;
     await this._ctx.dispose();
     await this.authVerifier.close();
     await this._inner.close();
@@ -2511,13 +2717,13 @@ var DataSpace = class DataSpace2 {
   * Initialize the data pipeline in a separate task.
   */
   initializeDataPipelineAsync() {
-    (0, import_async11.scheduleTask)(this._ctx, async () => {
+    (0, import_async13.scheduleTask)(this._ctx, async () => {
       try {
         this.metrics.pipelineInitBegin = new Date();
         await this.initializeDataPipeline();
       } catch (err) {
         if (err instanceof import_errors3.CancelledError) {
-          (0, import_log9.log)("Data pipeline initialization cancelled", err, {
+          (0, import_log11.log)("Data pipeline initialization cancelled", err, {
             file: "data-space.ts",
             line: 173,
             scope: this,
@@ -2525,13 +2731,13 @@ var DataSpace = class DataSpace2 {
           });
           return;
         }
-        import_log9.log.error("Error initializing data pipeline", err, {
+        import_log11.log.error("Error initializing data pipeline", err, {
           file: "data-space.ts",
           line: 177,
           scope: this,
           callSite: (f, a) => f(...a)
         });
-        this._state = import_services6.SpaceState.ERROR;
+        this._state = import_services8.SpaceState.ERROR;
         this.error = err;
         this.stateUpdate.emit();
       } finally {
@@ -2541,17 +2747,17 @@ var DataSpace = class DataSpace2 {
   }
   async initializeDataPipeline() {
     var _a, _b, _c, _d;
-    if (this._state !== import_services6.SpaceState.INACTIVE) {
+    if (this._state !== import_services8.SpaceState.INACTIVE) {
       throw new import_errors3.SystemError("Invalid operation");
     }
-    this._state = import_services6.SpaceState.INITIALIZING;
+    this._state = import_services8.SpaceState.INITIALIZING;
     await this._inner.controlPipeline.state.waitUntilReachedTargetTimeframe({
       ctx: this._ctx,
       breakOnStall: false
     });
     this.metrics.controlPipelineReady = new Date();
     await this._createWritableFeeds();
-    (0, import_log9.log)("Writable feeds created", {}, {
+    (0, import_log11.log)("Writable feeds created", {}, {
       file: "data-space.ts",
       line: 201,
       scope: this,
@@ -2566,7 +2772,7 @@ var DataSpace = class DataSpace2 {
     await this._inner.initializeDataPipeline();
     this.metrics.dataPipelineOpen = new Date();
     await (0, import_context6.cancelWithContext)(this._ctx, this._inner.dataPipeline.ensureEpochInitialized());
-    (0, import_log9.log)("waiting for data pipeline to reach target timeframe", {}, {
+    (0, import_log11.log)("waiting for data pipeline to reach target timeframe", {}, {
       file: "data-space.ts",
       line: 220,
       scope: this,
@@ -2577,14 +2783,14 @@ var DataSpace = class DataSpace2 {
       breakOnStall: false
     });
     this.metrics.dataPipelineReady = new Date();
-    (0, import_log9.log)("data pipeline ready", {}, {
+    (0, import_log11.log)("data pipeline ready", {}, {
       file: "data-space.ts",
       line: 229,
       scope: this,
       callSite: (f, a) => f(...a)
     });
     await ((_b = (_a = this._callbacks).beforeReady) == null ? void 0 : _b.call(_a));
-    this._state = import_services6.SpaceState.READY;
+    this._state = import_services8.SpaceState.READY;
     this.stateUpdate.emit();
     await ((_d = (_c = this._callbacks).afterReady) == null ? void 0 : _d.call(_c));
   }
@@ -2660,11 +2866,11 @@ var DataSpace = class DataSpace2 {
     }
   }
 };
-__decorate([
+__decorate2([
   (0, import_debug3.timed)(1e4)
 ], DataSpace.prototype, "_createWritableFeeds", null);
-DataSpace = __decorate([
-  (0, import_async11.trackLeaks)("open", "close")
+DataSpace = __decorate2([
+  (0, import_async13.trackLeaks)("open", "close")
 ], DataSpace);
 
 // packages/sdk/client-services/src/packlets/spaces/genesis.ts
@@ -2738,7 +2944,7 @@ var spaceGenesis = async (keyring, signingContext, space) => {
 };
 
 // packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts
-var __decorate2 = function(decorators, target, key, desc) {
+var __decorate3 = function(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2757,8 +2963,8 @@ var DataSpaceManager = class DataSpaceManager2 {
     this._signingContext = _signingContext;
     this._feedStore = _feedStore;
     this._ctx = new import_context7.Context();
-    this.updated = new import_async12.Event();
-    this._spaces = new import_util5.ComplexMap(import_keys9.PublicKey.hash);
+    this.updated = new import_async14.Event();
+    this._spaces = new import_util6.ComplexMap(import_keys9.PublicKey.hash);
     this._isOpen = false;
     this._instanceId = import_keys9.PublicKey.random().toHex();
   }
@@ -2767,13 +2973,13 @@ var DataSpaceManager = class DataSpaceManager2 {
     return this._spaces;
   }
   async open() {
-    (0, import_log10.log)("open", {}, {
+    (0, import_log12.log)("open", {}, {
       file: "data-space-manager.ts",
       line: 80,
       scope: this,
       callSite: (f, a) => f(...a)
     });
-    import_log10.log.trace("dxos.echo.data-space-manager.open", import_protocols6.trace.begin({
+    import_log12.log.trace("dxos.echo.data-space-manager.open", import_protocols6.trace.begin({
       id: this._instanceId
     }), {
       file: "data-space-manager.ts",
@@ -2782,7 +2988,7 @@ var DataSpaceManager = class DataSpaceManager2 {
       callSite: (f, a) => f(...a)
     });
     await this._metadataStore.load();
-    (0, import_log10.log)("metadata loaded", {
+    (0, import_log12.log)("metadata loaded", {
       spaces: this._metadataStore.spaces.length
     }, {
       file: "data-space-manager.ts",
@@ -2792,7 +2998,7 @@ var DataSpaceManager = class DataSpaceManager2 {
     });
     for (const spaceMetadata of this._metadataStore.spaces) {
       try {
-        (0, import_log10.log)("load space", {
+        (0, import_log12.log)("load space", {
           spaceMetadata
         }, {
           file: "data-space-manager.ts",
@@ -2803,7 +3009,7 @@ var DataSpaceManager = class DataSpaceManager2 {
         const space = await this._constructSpace(spaceMetadata);
         space.initializeDataPipelineAsync();
       } catch (err) {
-        import_log10.log.error("Error loading space", {
+        import_log12.log.error("Error loading space", {
           spaceMetadata,
           err
         }, {
@@ -2816,7 +3022,7 @@ var DataSpaceManager = class DataSpaceManager2 {
     }
     this._isOpen = true;
     this.updated.emit();
-    import_log10.log.trace("dxos.echo.data-space-manager.open", import_protocols6.trace.end({
+    import_log12.log.trace("dxos.echo.data-space-manager.open", import_protocols6.trace.end({
       id: this._instanceId
     }), {
       file: "data-space-manager.ts",
@@ -2826,7 +3032,7 @@ var DataSpaceManager = class DataSpaceManager2 {
     });
   }
   async close() {
-    (0, import_log10.log)("close", {}, {
+    (0, import_log12.log)("close", {}, {
       file: "data-space-manager.ts",
       line: 102,
       scope: this,
@@ -2842,7 +3048,7 @@ var DataSpaceManager = class DataSpaceManager2 {
   * Creates a new space writing the genesis credentials to the control feed.
   */
   async createSpace() {
-    (0, import_node_assert10.default)(this._isOpen, "Not open.");
+    (0, import_node_assert11.default)(this._isOpen, "Not open.");
     const spaceKey = await this._keyring.createKey();
     const controlFeedKey = await this._keyring.createKey();
     const dataFeedKey = await this._keyring.createKey();
@@ -2852,7 +3058,7 @@ var DataSpaceManager = class DataSpaceManager2 {
       controlFeedKey,
       dataFeedKey
     };
-    (0, import_log10.log)("creating space...", {
+    (0, import_log12.log)("creating space...", {
       spaceKey
     }, {
       file: "data-space-manager.ts",
@@ -2864,7 +3070,7 @@ var DataSpaceManager = class DataSpaceManager2 {
     const credentials = await spaceGenesis(this._keyring, this._signingContext, space.inner);
     await this._metadataStore.addSpace(metadata);
     const memberCredential = credentials[1];
-    (0, import_node_assert10.default)((0, import_credentials12.getCredentialAssertion)(memberCredential)["@type"] === "dxos.halo.credentials.SpaceMember");
+    (0, import_node_assert11.default)((0, import_credentials12.getCredentialAssertion)(memberCredential)["@type"] === "dxos.halo.credentials.SpaceMember");
     await this._signingContext.recordCredential(memberCredential);
     await space.initializeDataPipeline();
     this.updated.emit();
@@ -2872,7 +3078,7 @@ var DataSpaceManager = class DataSpaceManager2 {
   }
   // TODO(burdon): Rename join space.
   async acceptSpace(opts) {
-    (0, import_log10.log)("accept space", {
+    (0, import_log12.log)("accept space", {
       opts
     }, {
       file: "data-space-manager.ts",
@@ -2880,8 +3086,8 @@ var DataSpaceManager = class DataSpaceManager2 {
       scope: this,
       callSite: (f, a) => f(...a)
     });
-    (0, import_node_assert10.default)(this._isOpen, "Not open.");
-    (0, import_node_assert10.default)(!this._spaces.has(opts.spaceKey), "Space already exists.");
+    (0, import_node_assert11.default)(this._isOpen, "Not open.");
+    (0, import_node_assert11.default)(!this._spaces.has(opts.spaceKey), "Space already exists.");
     const metadata = {
       key: opts.spaceKey,
       genesisFeedKey: opts.genesisFeedKey,
@@ -2902,11 +3108,11 @@ var DataSpaceManager = class DataSpaceManager2 {
   async waitUntilSpaceReady(spaceKey) {
     await (0, import_context7.cancelWithContext)(this._ctx, this.updated.waitForCondition(() => {
       const space = this._spaces.get(spaceKey);
-      return !!space && space.state === import_services7.SpaceState.READY;
+      return !!space && space.state === import_services9.SpaceState.READY;
     }));
   }
   async _constructSpace(metadata) {
-    (0, import_log10.log)("construct space", {
+    (0, import_log12.log)("construct space", {
       metadata
     }, {
       file: "data-space-manager.ts",
@@ -2935,7 +3141,7 @@ var DataSpaceManager = class DataSpaceManager2 {
       swarmIdentity: {
         peerKey: this._signingContext.deviceKey,
         credentialProvider: createAuthProvider(this._signingContext.credentialSigner),
-        credentialAuthenticator: (0, import_util5.deferFunction)(() => dataSpace.authVerifier.verifier)
+        credentialAuthenticator: (0, import_util6.deferFunction)(() => dataSpace.authVerifier.verifier)
       },
       onNetworkConnection: (session) => {
         session.addExtension("dxos.mesh.teleport.gossip", gossip.createExtension({
@@ -2944,7 +3150,7 @@ var DataSpaceManager = class DataSpaceManager2 {
         session.addExtension("dxos.mesh.teleport.notarization", dataSpace.notarizationPlugin.createExtension());
       },
       onAuthFailure: () => {
-        import_log10.log.warn("auth failure", {}, {
+        import_log12.log.warn("auth failure", {}, {
           file: "data-space-manager.ts",
           line: 212,
           scope: this,
@@ -2965,7 +3171,7 @@ var DataSpaceManager = class DataSpaceManager2 {
       signingContext: this._signingContext,
       callbacks: {
         beforeReady: async () => {
-          (0, import_log10.log)("before space ready", {
+          (0, import_log12.log)("before space ready", {
             space: space.key
           }, {
             file: "data-space-manager.ts",
@@ -2976,7 +3182,7 @@ var DataSpaceManager = class DataSpaceManager2 {
           this._dataServiceSubscriptions.registerSpace(space.key, dataSpace.dataPipeline.databaseHost.createDataServiceHost());
         },
         afterReady: async () => {
-          (0, import_log10.log)("after space ready", {
+          (0, import_log12.log)("after space ready", {
             space: space.key,
             open: this._isOpen
           }, {
@@ -3003,31 +3209,31 @@ var DataSpaceManager = class DataSpaceManager2 {
     return dataSpace;
   }
 };
-__decorate2([
-  import_async12.synchronized
+__decorate3([
+  import_async14.synchronized
 ], DataSpaceManager.prototype, "open", null);
-__decorate2([
-  import_async12.synchronized
+__decorate3([
+  import_async14.synchronized
 ], DataSpaceManager.prototype, "close", null);
-__decorate2([
-  import_async12.synchronized
+__decorate3([
+  import_async14.synchronized
 ], DataSpaceManager.prototype, "createSpace", null);
-__decorate2([
-  import_async12.synchronized
+__decorate3([
+  import_async14.synchronized
 ], DataSpaceManager.prototype, "acceptSpace", null);
-DataSpaceManager = __decorate2([
-  (0, import_async12.trackLeaks)("open", "close")
+DataSpaceManager = __decorate3([
+  (0, import_async14.trackLeaks)("open", "close")
 ], DataSpaceManager);
 
 // packages/sdk/client-services/src/packlets/spaces/spaces-service.ts
-var import_async13 = require("@dxos/async");
-var import_codec_protobuf9 = require("@dxos/codec-protobuf");
-var import_debug5 = require("@dxos/debug");
+var import_async15 = require("@dxos/async");
+var import_codec_protobuf12 = require("@dxos/codec-protobuf");
+var import_debug5 = require("@dxos/debug");
 var import_echo_pipeline2 = require("@dxos/echo-pipeline");
-var import_log11 = require("@dxos/log");
+var import_log13 = require("@dxos/log");
 var import_protocols7 = require("@dxos/protocols");
-var import_services8 = require("@dxos/protocols/proto/dxos/client/services");
-var import_util6 = require("@dxos/util");
+var import_services10 = require("@dxos/protocols/proto/dxos/client/services");
+var import_util7 = require("@dxos/util");
 var TIMEFRAME_UPDATE_DEBOUNCE_TIME = 500;
 var SpacesServiceImpl = class {
   constructor(_identityManager, _spaceManager, _dataServiceSubscriptions, _getDataSpaceManager) {
@@ -3048,11 +3254,11 @@ var SpacesServiceImpl = class {
     (0, import_debug5.todo)();
   }
   querySpaces() {
-    return new import_codec_protobuf9.Stream(({ next, ctx }) => {
+    return new import_codec_protobuf12.Stream(({ next, ctx }) => {
       const onUpdate = async () => {
         const dataSpaceManager = await this._getDataSpaceManager();
         const spaces = Array.from(dataSpaceManager.spaces.values()).map((space) => this._transformSpace(space));
-        (0, import_log11.log)("update", {
+        (0, import_log13.log)("update", {
           spaces
         }, {
           file: "spaces-service.ts",
@@ -3064,9 +3270,9 @@ var SpacesServiceImpl = class {
           spaces
         });
       };
-      (0, import_async13.scheduleTask)(ctx, async () => {
+      (0, import_async15.scheduleTask)(ctx, async () => {
         const dataSpaceManager = await this._getDataSpaceManager();
-        const subscriptions = new import_async13.EventSubscriptions();
+        const subscriptions = new import_async15.EventSubscriptions();
         ctx.onDispose(() => subscriptions.clear());
         const subscribeSpaces = () => {
           subscriptions.clear();
@@ -3101,8 +3307,8 @@ var SpacesServiceImpl = class {
     await space.postMessage(getChannelId(channel), message);
   }
   subscribeMessages({ spaceKey, channel }) {
-    return new import_codec_protobuf9.Stream(({ ctx, next }) => {
-      (0, import_async13.scheduleTask)(ctx, async () => {
+    return new import_codec_protobuf12.Stream(({ ctx, next }) => {
+      (0, import_async15.scheduleTask)(ctx, async () => {
         var _a;
         const dataSpaceManager = await this._getDataSpaceManager();
         const space = (_a = dataSpaceManager.spaces.get(spaceKey)) != null ? _a : (0, import_debug5.raise)(new import_echo_pipeline2.SpaceNotFoundError(spaceKey));
@@ -3114,7 +3320,7 @@ var SpacesServiceImpl = class {
     });
   }
   queryCredentials({ spaceKey }) {
-    return new import_codec_protobuf9.Stream(({ ctx, next }) => {
+    return new import_codec_protobuf12.Stream(({ ctx, next }) => {
       var _a;
       const space = (_a = this._spaceManager.spaces.get(spaceKey)) != null ? _a : (0, import_debug5.raise)(new import_echo_pipeline2.SpaceNotFoundError(spaceKey));
       const processor = space.spaceState.registerProcessor({
@@ -3123,7 +3329,7 @@ var SpacesServiceImpl = class {
         }
       });
       ctx.onDispose(() => processor.close());
-      (0, import_async13.scheduleTask)(ctx, () => processor.open());
+      (0, import_async15.scheduleTask)(ctx, () => processor.open());
     });
   }
   async writeCredentials({ spaceKey, credentials }) {
@@ -3168,10 +3374,10 @@ var SpacesServiceImpl = class {
           identity: {
             identityKey: member.key,
             profile: {
-              displayName: (_b2 = (_a2 = member.assertion.profile) == null ? void 0 : _a2.displayName) != null ? _b2 : (0, import_util6.humanize)(member.key)
+              displayName: (_b2 = (_a2 = member.assertion.profile) == null ? void 0 : _a2.displayName) != null ? _b2 : (0, import_util7.humanize)(member.key)
             }
           },
-          presence: ((_c2 = this._identityManager.identity) == null ? void 0 : _c2.identityKey.equals(member.key)) || space.presence.getPeersOnline().filter(({ identityKey }) => identityKey.equals(member.key)).length > 0 ? import_services8.SpaceMember.PresenceState.ONLINE : import_services8.SpaceMember.PresenceState.OFFLINE
+          presence: ((_c2 = this._identityManager.identity) == null ? void 0 : _c2.identityKey.equals(member.key)) || space.presence.getPeersOnline().filter(({ identityKey }) => identityKey.equals(member.key)).length > 0 ? import_services10.SpaceMember.PresenceState.ONLINE : import_services10.SpaceMember.PresenceState.OFFLINE
         };
       }),
       creator: (_g = space.inner.spaceState.creator) == null ? void 0 : _g.key,
@@ -3182,7 +3388,106 @@ var SpacesServiceImpl = class {
 };
 var getChannelId = (channel) => `user-channel/${channel}`;
 
+// packages/sdk/client-services/src/packlets/storage/storage.ts
+var import_client_protocol4 = require("@dxos/client-protocol");
+var import_errors4 = require("@dxos/errors");
+var import_config = require("@dxos/protocols/proto/dxos/config");
+var import_random_access_storage = require("@dxos/random-access-storage");
+var import_util8 = require("@dxos/util");
+var StorageDriver = import_config.Runtime.Client.Storage.StorageDriver;
+var createStorageObjects = (config) => {
+  const { path = (0, import_util8.isNode)() ? import_client_protocol4.DX_DATA : "dxos/storage", storageType, keyStorage, persistent = false } = config != null ? config : {};
+  if (persistent && storageType === StorageDriver.RAM) {
+    throw new import_errors4.InvalidConfigError("RAM storage cannot be used in persistent mode.");
+  }
+  if (!persistent && storageType !== void 0 && storageType !== StorageDriver.RAM) {
+    throw new import_errors4.InvalidConfigError("Cannot use a persistent storage in not persistent mode.");
+  }
+  if (persistent && keyStorage === StorageDriver.RAM) {
+    throw new import_errors4.InvalidConfigError("RAM key storage cannot be used in persistent mode.");
+  }
+  if (!persistent && keyStorage !== StorageDriver.RAM && keyStorage !== void 0) {
+    throw new import_errors4.InvalidConfigError("Cannot use a persistent key storage in not persistent mode.");
+  }
+  return {
+    storage: (0, import_random_access_storage.createStorage)({
+      type: persistent ? toStorageType(storageType) : import_random_access_storage.StorageType.RAM,
+      root: `${path}/`
+    })
+  };
+};
+var toStorageType = (type) => {
+  switch (type) {
+    case void 0:
+      return void 0;
+    case StorageDriver.RAM:
+      return import_random_access_storage.StorageType.RAM;
+    case StorageDriver.CHROME:
+      return import_random_access_storage.StorageType.CHROME;
+    case StorageDriver.FIREFOX:
+      return import_random_access_storage.StorageType.FIREFOX;
+    case StorageDriver.IDB:
+      return import_random_access_storage.StorageType.IDB;
+    case StorageDriver.NODE:
+      return import_random_access_storage.StorageType.NODE;
+    case StorageDriver.WEBFS:
+      return import_random_access_storage.StorageType.WEBFS;
+    default:
+      throw new Error(`Invalid storage type: ${StorageDriver[type]}`);
+  }
+};
+
+// packages/sdk/client-services/src/packlets/system/system-service.ts
+var import_codec_protobuf13 = require("@dxos/codec-protobuf");
+var SystemServiceImpl = class {
+  constructor({ config, statusUpdate, onUpdateStatus, getCurrentStatus, onReset }) {
+    this._config = config;
+    this._statusUpdate = statusUpdate;
+    this._getCurrentStatus = getCurrentStatus;
+    this._onUpdateStatus = onUpdateStatus;
+    this._onReset = onReset;
+  }
+  async getConfig() {
+    var _a, _b;
+    return (_b = (_a = this._config) == null ? void 0 : _a.values) != null ? _b : {};
+  }
+  async updateStatus({ status }) {
+    await this._onUpdateStatus(status);
+  }
+  queryStatus() {
+    return new import_codec_protobuf13.Stream(({ next }) => {
+      const update = () => {
+        next({
+          status: this._getCurrentStatus()
+        });
+      };
+      update();
+      const unsubscribe = this._statusUpdate.on(() => update());
+      const interval = setInterval(update, 3e3);
+      return () => {
+        clearInterval(interval);
+        unsubscribe();
+      };
+    });
+  }
+  async reset() {
+    await this._onReset();
+  }
+};
+
 // packages/sdk/client-services/src/packlets/services/service-context.ts
+var import_node_assert12 = __toESM(require("node:assert"));
+var import_async16 = require("@dxos/async");
+var import_credentials13 = require("@dxos/credentials");
+var import_debug6 = require("@dxos/debug");
+var import_echo_pipeline3 = require("@dxos/echo-pipeline");
+var import_feed_store4 = require("@dxos/feed-store");
+var import_keyring = require("@dxos/keyring");
+var import_keys10 = require("@dxos/keys");
+var import_log14 = require("@dxos/log");
+var import_protocols8 = require("@dxos/protocols");
+var import_services11 = require("@dxos/protocols/proto/dxos/client/services");
+var import_teleport_extension_object_sync = require("@dxos/teleport-extension-object-sync");
 var ServiceContext = class {
   // prettier-ignore
   constructor(storage, networkManager, signalManager, modelFactory) {
@@ -3190,7 +3495,7 @@ var ServiceContext = class {
     this.networkManager = networkManager;
     this.signalManager = signalManager;
     this.modelFactory = modelFactory;
-    this.initialized = new import_async14.Trigger();
+    this.initialized = new import_async16.Trigger();
     this.dataServiceSubscriptions = new import_echo_pipeline3.DataServiceSubscriptions();
     this._handlerFactories = /* @__PURE__ */ new Map();
     this._instanceId = import_keys10.PublicKey.random().toHex();
@@ -3217,13 +3522,13 @@ var ServiceContext = class {
     });
     this.identityManager = new IdentityManager(this.metadataStore, this.keyring, this.feedStore, this.spaceManager);
     this.invitations = new InvitationsHandler(this.networkManager);
-    this._handlerFactories.set(import_services9.Invitation.Kind.DEVICE, () => new DeviceInvitationProtocol(this.keyring, () => {
+    this._handlerFactories.set(import_services11.Invitation.Kind.DEVICE, () => new DeviceInvitationProtocol(this.keyring, () => {
       var _a;
       return (_a = this.identityManager.identity) != null ? _a : (0, import_debug6.failUndefined)();
     }, this._acceptIdentity.bind(this)));
   }
   async open() {
-    import_log12.log.trace("dxos.sdk.service-context.open", import_protocols8.trace.begin({
+    import_log14.log.trace("dxos.sdk.service-context.open", import_protocols8.trace.begin({
       id: this._instanceId
     }), {
       file: "service-context.ts",
@@ -3232,7 +3537,7 @@ var ServiceContext = class {
       callSite: (f, a) => f(...a)
     });
     await this._checkStorageVersion();
-    (0, import_log12.log)("opening...", {}, {
+    (0, import_log14.log)("opening...", {}, {
       file: "service-context.ts",
       line: 130,
       scope: this,
@@ -3245,13 +3550,13 @@ var ServiceContext = class {
     if (this.identityManager.identity) {
       await this._initialize();
     }
-    (0, import_log12.log)("opened", {}, {
+    (0, import_log14.log)("opened", {}, {
       file: "service-context.ts",
       line: 138,
       scope: this,
       callSite: (f, a) => f(...a)
     });
-    import_log12.log.trace("dxos.sdk.service-context.open", import_protocols8.trace.end({
+    import_log14.log.trace("dxos.sdk.service-context.open", import_protocols8.trace.end({
       id: this._instanceId
     }), {
       file: "service-context.ts",
@@ -3262,7 +3567,7 @@ var ServiceContext = class {
   }
   async close() {
     var _a, _b;
-    (0, import_log12.log)("closing...", {}, {
+    (0, import_log14.log)("closing...", {}, {
       file: "service-context.ts",
       line: 143,
       scope: this,
@@ -3276,7 +3581,7 @@ var ServiceContext = class {
     await this.networkManager.close();
     await this.signalManager.close();
     this.dataServiceSubscriptions.clear();
-    (0, import_log12.log)("closed", {}, {
+    (0, import_log14.log)("closed", {}, {
       file: "service-context.ts",
       line: 152,
       scope: this,
@@ -3290,7 +3595,7 @@ var ServiceContext = class {
   }
   getInvitationHandler(invitation) {
     const factory = this._handlerFactories.get(invitation.kind);
-    (0, import_node_assert11.default)(factory, `Unknown invitation kind: ${invitation.kind}`);
+    (0, import_node_assert12.default)(factory, `Unknown invitation kind: ${invitation.kind}`);
     return factory(invitation);
   }
   async _acceptIdentity(params) {
@@ -3307,7 +3612,7 @@ var ServiceContext = class {
   // Called when identity is created.
   async _initialize() {
     var _a;
-    (0, import_log12.log)("initializing spaces...", {}, {
+    (0, import_log14.log)("initializing spaces...", {}, {
       file: "service-context.ts",
       line: 185,
       scope: this,
@@ -3329,8 +3634,8 @@ var ServiceContext = class {
     };
     this.dataSpaceManager = new DataSpaceManager(this.spaceManager, this.metadataStore, this.dataServiceSubscriptions, this.keyring, signingContext, this.feedStore);
     await this.dataSpaceManager.open();
-    this._handlerFactories.set(import_services9.Invitation.Kind.SPACE, (invitation) => {
-      (0, import_node_assert11.default)(this.dataSpaceManager, "dataSpaceManager not initialized yet");
+    this._handlerFactories.set(import_services11.Invitation.Kind.SPACE, (invitation) => {
+      (0, import_node_assert12.default)(this.dataSpaceManager, "dataSpaceManager not initialized yet");
       return new SpaceInvitationProtocol(this.dataSpaceManager, signingContext, this.keyring, invitation.spaceKey);
     });
     this.initialized.wake();
@@ -3344,7 +3649,7 @@ var ServiceContext = class {
           return;
         }
         if (!this.dataSpaceManager) {
-          (0, import_log12.log)("dataSpaceManager not initialized yet, ignoring space admission", {
+          (0, import_log14.log)("dataSpaceManager not initialized yet, ignoring space admission", {
             details: assertion
           }, {
             file: "service-context.ts",
@@ -3355,7 +3660,7 @@ var ServiceContext = class {
           return;
         }
         if (this.dataSpaceManager.spaces.has(assertion.spaceKey)) {
-          (0, import_log12.log)("space already exists, ignoring space admission", {
+          (0, import_log14.log)("space already exists, ignoring space admission", {
             details: assertion
           }, {
             file: "service-context.ts",
@@ -3366,7 +3671,7 @@ var ServiceContext = class {
           return;
         }
         try {
-          (0, import_log12.log)("accepting space recorded in halo", {
+          (0, import_log14.log)("accepting space recorded in halo", {
             details: assertion
           }, {
             file: "service-context.ts",
@@ -3379,7 +3684,7 @@ var ServiceContext = class {
             genesisFeedKey: assertion.genesisFeedKey
           });
         } catch (err) {
-          import_log12.log.catch(err, {}, {
+          import_log14.log.catch(err, {}, {
             file: "service-context.ts",
             line: 239,
             scope: this,
@@ -3392,312 +3697,6 @@ var ServiceContext = class {
   }
 };
 
-// packages/sdk/client-services/src/packlets/services/service-host.ts
-var import_node_assert13 = __toESM(require("node:assert"));
-var import_async17 = require("@dxos/async");
-var import_client_protocol5 = require("@dxos/client-protocol");
-var import_echo_pipeline4 = require("@dxos/echo-pipeline");
-var import_keys11 = require("@dxos/keys");
-var import_log15 = require("@dxos/log");
-var import_messaging = require("@dxos/messaging");
-var import_network_manager2 = require("@dxos/network-manager");
-var import_protocols9 = require("@dxos/protocols");
-var import_services12 = require("@dxos/protocols/proto/dxos/client/services");
-
-// packages/sdk/client-services/src/packlets/devices/devices-service.ts
-var import_async15 = require("@dxos/async");
-var import_codec_protobuf10 = require("@dxos/codec-protobuf");
-var import_services10 = require("@dxos/protocols/proto/dxos/client/services");
-var DevicesServiceImpl = class {
-  constructor(_identityManager) {
-    this._identityManager = _identityManager;
-  }
-  updateDevice(request) {
-    throw new Error("Method not implemented.");
-  }
-  queryDevices() {
-    return new import_codec_protobuf10.Stream(({ next }) => {
-      const update = () => {
-        var _a;
-        const deviceKeys = (_a = this._identityManager.identity) == null ? void 0 : _a.authorizedDeviceKeys;
-        if (!deviceKeys) {
-          next({
-            devices: []
-          });
-        } else {
-          next({
-            devices: Array.from(deviceKeys.values()).map((key) => {
-              var _a2;
-              return {
-                deviceKey: key,
-                kind: ((_a2 = this._identityManager.identity) == null ? void 0 : _a2.deviceKey.equals(key)) ? import_services10.DeviceKind.CURRENT : import_services10.DeviceKind.TRUSTED
-              };
-            })
-          });
-        }
-      };
-      const subscriptions = new import_async15.EventSubscriptions();
-      subscriptions.add(this._identityManager.stateUpdate.on(() => {
-        update();
-        if (this._identityManager.identity) {
-          subscriptions.add(this._identityManager.identity.stateUpdate.on(() => {
-            update();
-          }));
-        }
-      }));
-      update();
-      return () => subscriptions.clear();
-    });
-  }
-};
-
-// packages/sdk/client-services/src/packlets/locks/node.ts
-var import_node_assert12 = __toESM(require("node:assert"));
-var import_lock_file = require("@dxos/lock-file");
-var import_log13 = require("@dxos/log");
-var __decorate3 = function(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
-    r = Reflect.decorate(decorators, target, key, desc);
-  else
-    for (var i = decorators.length - 1; i >= 0; i--)
-      if (d = decorators[i])
-        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var Lock = class {
-  constructor({ lockKey: lockPath, onAcquire, onRelease }) {
-    this._lockPath = lockPath;
-    this._onAcquire = onAcquire;
-    this._onRelease = onRelease;
-  }
-  get lockKey() {
-    return this._lockPath;
-  }
-  async acquire() {
-    var _a;
-    (0, import_log13.log)("acquiring lock...", {}, {
-      file: "node.ts",
-      line: 32,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    this._fileHandle = await import_lock_file.LockFile.acquire(this._lockPath);
-    await ((_a = this._onAcquire) == null ? void 0 : _a.call(this));
-    (0, import_log13.log)("acquired lock", {}, {
-      file: "node.ts",
-      line: 37,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-  }
-  async release() {
-    var _a;
-    await ((_a = this._onRelease) == null ? void 0 : _a.call(this));
-    (0, import_node_assert12.default)(this._fileHandle, "Lock is not acquired");
-    await import_lock_file.LockFile.release(this._fileHandle);
-  }
-};
-__decorate3([
-  import_log13.logInfo
-], Lock.prototype, "lockKey", null);
-var isLocked = (lockPath) => import_lock_file.LockFile.isLocked(lockPath);
-
-// packages/sdk/client-services/src/packlets/logging/logging-service.ts
-var import_async16 = require("@dxos/async");
-var import_codec_protobuf11 = require("@dxos/codec-protobuf");
-var import_log14 = require("@dxos/log");
-var import_services11 = require("@dxos/protocols/proto/dxos/client/services");
-var import_util7 = require("@dxos/util");
-var LoggingServiceImpl = class {
-  constructor() {
-    this._logs = new import_async16.Event();
-    this._logProcessor = (_config, entry2) => {
-      this._logs.emit(entry2);
-    };
-  }
-  async open() {
-    import_log14.log.runtimeConfig.processors.push(this._logProcessor);
-  }
-  async close() {
-    const index = import_log14.log.runtimeConfig.processors.findIndex((processor) => processor === this._logProcessor);
-    import_log14.log.runtimeConfig.processors.splice(index, 1);
-  }
-  queryLogs(request) {
-    return new import_codec_protobuf11.Stream(({ ctx, next }) => {
-      const handler = (entry2) => {
-        var _a, _b, _c, _d, _e;
-        if (LOG_PROCESSING > 0) {
-          return;
-        }
-        if (((_a = entry2.meta) == null ? void 0 : _a.file.includes("logging-service")) || entry2.context && Object.values(entry2.context).some((value) => typeof value === "string" && value.includes("LoggingService"))) {
-          return;
-        }
-        if (!shouldLog(entry2, request)) {
-          return;
-        }
-        const record = {
-          ...entry2,
-          context: (0, import_util7.jsonify)((0, import_log14.getContextFromEntry)(entry2)),
-          timestamp: new Date(),
-          meta: {
-            // TODO(dmaretskyi): Fix proto.
-            file: (_c = (_b = entry2.meta) == null ? void 0 : _b.file) != null ? _c : "",
-            line: (_e = (_d = entry2.meta) == null ? void 0 : _d.line) != null ? _e : 0
-          }
-        };
-        try {
-          LOG_PROCESSING++;
-          next(record);
-        } finally {
-          LOG_PROCESSING--;
-        }
-      };
-      this._logs.on(ctx, handler);
-    });
-  }
-};
-var matchFilter = (filter, level, path, options) => {
-  switch (options) {
-    case import_services11.QueryLogsRequest.MatchingOptions.INCLUSIVE:
-      return level >= filter.level && (!filter.pattern || path.includes(filter.pattern));
-    case import_services11.QueryLogsRequest.MatchingOptions.EXPLICIT:
-      return level === filter.level && (!filter.pattern || path.includes(filter.pattern));
-  }
-};
-var shouldLog = (entry2, request) => {
-  var _a;
-  const options = (_a = request.options) != null ? _a : import_services11.QueryLogsRequest.MatchingOptions.INCLUSIVE;
-  if (request.filters === void 0) {
-    return options === import_services11.QueryLogsRequest.MatchingOptions.INCLUSIVE;
-  } else {
-    return request.filters.some((filter) => {
-      var _a2, _b;
-      return matchFilter(filter, entry2.level, (_b = (_a2 = entry2.meta) == null ? void 0 : _a2.file) != null ? _b : "", options);
-    });
-  }
-};
-var LOG_PROCESSING = 0;
-
-// packages/sdk/client-services/src/packlets/network/network-service.ts
-var import_codec_protobuf12 = require("@dxos/codec-protobuf");
-var NetworkServiceImpl = class {
-  constructor(networkManager, signalManager) {
-    this.networkManager = networkManager;
-    this.signalManager = signalManager;
-  }
-  queryStatus() {
-    return new import_codec_protobuf12.Stream(({ next }) => {
-      const update = () => {
-        next({
-          swarm: this.networkManager.connectionState,
-          signaling: this.signalManager.getStatus().map(({ host, state }) => ({
-            server: host,
-            state
-          }))
-        });
-      };
-      const unsubscribeSwarm = this.networkManager.connectionStateChanged.on(() => update());
-      const unsubscribeSignal = this.signalManager.statusChanged.on(() => update());
-      update();
-      return () => {
-        unsubscribeSwarm();
-        unsubscribeSignal();
-      };
-    });
-  }
-  async updateConfig(request) {
-    await this.networkManager.setConnectionState(request.swarm);
-  }
-};
-
-// packages/sdk/client-services/src/packlets/storage/storage.ts
-var import_client_protocol4 = require("@dxos/client-protocol");
-var import_errors4 = require("@dxos/errors");
-var import_config = require("@dxos/protocols/proto/dxos/config");
-var import_random_access_storage = require("@dxos/random-access-storage");
-var import_util8 = require("@dxos/util");
-var StorageDriver = import_config.Runtime.Client.Storage.StorageDriver;
-var createStorageObjects = (config) => {
-  const { path = (0, import_util8.isNode)() ? import_client_protocol4.DX_DATA : "dxos/storage", storageType, keyStorage, persistent = false } = config != null ? config : {};
-  if (persistent && storageType === StorageDriver.RAM) {
-    throw new import_errors4.InvalidConfigError("RAM storage cannot be used in persistent mode.");
-  }
-  if (!persistent && storageType !== void 0 && storageType !== StorageDriver.RAM) {
-    throw new import_errors4.InvalidConfigError("Cannot use a persistent storage in not persistent mode.");
-  }
-  if (persistent && keyStorage === StorageDriver.RAM) {
-    throw new import_errors4.InvalidConfigError("RAM key storage cannot be used in persistent mode.");
-  }
-  if (!persistent && keyStorage !== StorageDriver.RAM && keyStorage !== void 0) {
-    throw new import_errors4.InvalidConfigError("Cannot use a persistent key storage in not persistent mode.");
-  }
-  return {
-    storage: (0, import_random_access_storage.createStorage)({
-      type: persistent ? toStorageType(storageType) : import_random_access_storage.StorageType.RAM,
-      root: `${path}/`
-    })
-  };
-};
-var toStorageType = (type) => {
-  switch (type) {
-    case void 0:
-      return void 0;
-    case StorageDriver.RAM:
-      return import_random_access_storage.StorageType.RAM;
-    case StorageDriver.CHROME:
-      return import_random_access_storage.StorageType.CHROME;
-    case StorageDriver.FIREFOX:
-      return import_random_access_storage.StorageType.FIREFOX;
-    case StorageDriver.IDB:
-      return import_random_access_storage.StorageType.IDB;
-    case StorageDriver.NODE:
-      return import_random_access_storage.StorageType.NODE;
-    case StorageDriver.WEBFS:
-      return import_random_access_storage.StorageType.WEBFS;
-    default:
-      throw new Error(`Invalid storage type: ${StorageDriver[type]}`);
-  }
-};
-
-// packages/sdk/client-services/src/packlets/system/system-service.ts
-var import_codec_protobuf13 = require("@dxos/codec-protobuf");
-var SystemServiceImpl = class {
-  constructor({ config, statusUpdate, onUpdateStatus, getCurrentStatus, onReset }) {
-    this._config = config;
-    this._statusUpdate = statusUpdate;
-    this._getCurrentStatus = getCurrentStatus;
-    this._onUpdateStatus = onUpdateStatus;
-    this._onReset = onReset;
-  }
-  async getConfig() {
-    var _a, _b;
-    return (_b = (_a = this._config) == null ? void 0 : _a.values) != null ? _b : {};
-  }
-  async updateStatus({ status }) {
-    await this._onUpdateStatus(status);
-  }
-  queryStatus() {
-    return new import_codec_protobuf13.Stream(({ next }) => {
-      const update = () => {
-        next({
-          status: this._getCurrentStatus()
-        });
-      };
-      update();
-      const unsubscribe = this._statusUpdate.on(() => update());
-      const interval = setInterval(update, 3e3);
-      return () => {
-        clearInterval(interval);
-        unsubscribe();
-      };
-    });
-  }
-  async reset() {
-    await this._onReset();
-  }
-};
-
 // packages/sdk/client-services/src/packlets/services/service-registry.ts
 var ServiceRegistry = class {
   // prettier-ignore
@@ -3954,6 +3953,28 @@ var ClientServicesHost = class {
   }
 };
 
+// packages/sdk/client-services/src/packlets/services/local-client-services.ts
+var LocalClientServices = class {
+  constructor(params) {
+    this._host = new ClientServicesHost(params);
+  }
+  get descriptors() {
+    return this._host.descriptors;
+  }
+  get services() {
+    return this._host.services;
+  }
+  get host() {
+    return this._host;
+  }
+  async open() {
+    await this._host.open();
+  }
+  async close() {
+    await this._host.close();
+  }
+};
+
 // packages/sdk/client-services/src/packlets/vault/iframe-host-runtime.ts
 var import_async19 = require("@dxos/async");
 var import_client_protocol7 = require("@dxos/client-protocol");
@@ -4147,7 +4168,7 @@ var IFrameHostRuntime = class {
         iceServers: this._config.get("runtime.services.ice")
       });
       const signals = this._config.get("runtime.services.signaling");
-      this._clientServices = new ClientServicesHost({
+      this._clientServices = new LocalClientServices({
         lockKey: LOCK_KEY,
         config: this._config,
         signalManager: signals ? new import_messaging2.WebsocketSignalManager(signals) : new import_messaging2.MemorySignalManager(new import_messaging2.MemorySignalManagerContext()),
@@ -4174,7 +4195,7 @@ var IFrameHostRuntime = class {
         }
       };
       this._clientRpc = new ClientRpcServer({
-        serviceRegistry: this._clientServices.serviceRegistry,
+        serviceRegistry: this._clientServices.host.serviceRegistry,
         port: this._appPort,
         ...middleware
       });
@@ -4564,6 +4585,7 @@ var WorkerRuntime = class {
   IdentityServiceImpl,
   InvitationsHandler,
   InvitationsServiceImpl,
+  LocalClientServices,
   Lock,
   MemoryShellRuntime,
   ServiceContext,