@dxos/client-services 0.1.52-main.e73bc9f → 0.1.52

package/dist/lib/node/packlets/testing/index.cjs

@@ -65,597 +65,241 @@ var import_node_assert14 = __toESM(require("node:assert"));
 var import_async18 = require("@dxos/async");
 var import_services13 = require("@dxos/protocols/proto/dxos/client/services");
 
-// packages/sdk/client-services/src/packlets/services/service-host.ts
-var import_node_assert13 = __toESM(require("node:assert"));
-var import_async17 = require("@dxos/async");
-var import_client_protocol5 = require("@dxos/client-protocol");
-var import_echo_pipeline4 = require("@dxos/echo-pipeline");
-var import_keys12 = require("@dxos/keys");
-var import_log15 = require("@dxos/log");
-var import_messaging = require("@dxos/messaging");
-var import_network_manager2 = require("@dxos/network-manager");
-var import_protocols9 = require("@dxos/protocols");
-var import_services12 = require("@dxos/protocols/proto/dxos/client/services");
+// packages/sdk/client-services/src/packlets/services/service-context.ts
+var import_node_assert11 = __toESM(require("node:assert"));
+var import_async11 = require("@dxos/async");
+var import_credentials14 = require("@dxos/credentials");
+var import_debug6 = require("@dxos/debug");
+var import_echo_pipeline3 = require("@dxos/echo-pipeline");
+var import_feed_store3 = require("@dxos/feed-store");
+var import_keyring = require("@dxos/keyring");
+var import_keys8 = require("@dxos/keys");
+var import_log12 = require("@dxos/log");
+var import_protocols8 = require("@dxos/protocols");
+var import_services9 = require("@dxos/protocols/proto/dxos/client/services");
+var import_teleport_extension_object_sync = require("@dxos/teleport-extension-object-sync");
 
-// packages/sdk/client-services/src/packlets/devices/devices-service.ts
+// packages/sdk/client-services/src/packlets/identity/authenticator.ts
 var import_async = require("@dxos/async");
-var import_codec_protobuf = require("@dxos/codec-protobuf");
-var import_services = require("@dxos/protocols/proto/dxos/client/services");
-var DevicesServiceImpl = class {
-  constructor(_identityManager) {
-    this._identityManager = _identityManager;
+var import_context = require("@dxos/context");
+var import_credentials2 = require("@dxos/credentials");
+var import_log = require("@dxos/log");
+var import_protocols = require("@dxos/protocols");
+var createAuthProvider = (signer) => async (nonce) => {
+  const credential = await signer.createCredential({
+    assertion: {
+      "@type": "dxos.halo.credentials.Auth"
+    },
+    subject: signer.getIssuer(),
+    nonce
+  });
+  return import_protocols.schema.getCodecForType("dxos.halo.credentials.Credential").encode(credential);
+};
+var TrustedKeySetAuthVerifier = class {
+  // prettier-ignore
+  constructor(_params) {
+    this._params = _params;
+    this._ctx = new import_context.Context();
   }
-  updateDevice(request) {
-    throw new Error("Method not implemented.");
+  async close() {
+    await this._ctx.dispose();
   }
-  queryDevices() {
-    return new import_codec_protobuf.Stream(({ next }) => {
-      const update = () => {
-        var _a;
-        const deviceKeys = (_a = this._identityManager.identity) == null ? void 0 : _a.authorizedDeviceKeys;
-        if (!deviceKeys) {
-          next({
-            devices: []
+  get verifier() {
+    return async (nonce, auth) => {
+      const credential = import_protocols.schema.getCodecForType("dxos.halo.credentials.Credential").decode(auth);
+      (0, import_log.log)("authenticating...", {
+        credential
+      }, {
+        file: "authenticator.ts",
+        line: 57,
+        scope: this,
+        callSite: (f, a) => f(...a)
+      });
+      const result = await (0, import_credentials2.verifyCredential)(credential);
+      if (result.kind === "fail") {
+        (0, import_log.log)("Invalid credential", {
+          result
+        }, {
+          file: "authenticator.ts",
+          line: 61,
+          scope: this,
+          callSite: (f, a) => f(...a)
+        });
+        return false;
+      }
+      if (!credential.proof.nonce || !Buffer.from(nonce).equals(credential.proof.nonce)) {
+        (0, import_log.log)("Invalid nonce", {
+          nonce,
+          credential
+        }, {
+          file: "authenticator.ts",
+          line: 66,
+          scope: this,
+          callSite: (f, a) => f(...a)
+        });
+        return false;
+      }
+      if (this._isTrustedKey(credential.issuer)) {
+        (0, import_log.log)("key is not currently in trusted set, waiting...", {
+          key: credential.issuer
+        }, {
+          file: "authenticator.ts",
+          line: 71,
+          scope: this,
+          callSite: (f, a) => f(...a)
+        });
+        return true;
+      }
+      const trigger = new import_async.Trigger();
+      this._ctx.onDispose(() => {
+        trigger.wake(false);
+      });
+      const clear = this._params.update.on(this._ctx, () => {
+        if (this._isTrustedKey(credential.issuer)) {
+          (0, import_log.log)("auth success", {
+            key: credential.issuer
+          }, {
+            file: "authenticator.ts",
+            line: 82,
+            scope: this,
+            callSite: (f, a) => f(...a)
           });
+          trigger.wake(true);
         } else {
-          next({
-            devices: Array.from(deviceKeys.values()).map((key) => {
-              var _a2;
-              return {
-                deviceKey: key,
-                kind: ((_a2 = this._identityManager.identity) == null ? void 0 : _a2.deviceKey.equals(key)) ? import_services.DeviceKind.CURRENT : import_services.DeviceKind.TRUSTED
-              };
-            })
+          (0, import_log.log)("key is not currently in trusted set, waiting...", {
+            key: credential.issuer
+          }, {
+            file: "authenticator.ts",
+            line: 85,
+            scope: this,
+            callSite: (f, a) => f(...a)
           });
         }
-      };
-      const subscriptions = new import_async.EventSubscriptions();
-      subscriptions.add(this._identityManager.stateUpdate.on(() => {
-        update();
-        if (this._identityManager.identity) {
-          subscriptions.add(this._identityManager.identity.stateUpdate.on(() => {
-            update();
-          }));
-        }
-      }));
-      update();
-      return () => subscriptions.clear();
-    });
+      });
+      try {
+        return await trigger.wait({
+          timeout: this._params.authTimeout
+        });
+      } catch (e) {
+        return false;
+      } finally {
+        clear();
+      }
+    };
+  }
+  _isTrustedKey(deviceKey) {
+    const deviceSet = this._params.trustedKeysProvider();
+    return deviceSet.has(deviceKey);
   }
 };
 
-// packages/sdk/client-services/src/packlets/devtools/devtools.ts
-var import_async4 = require("@dxos/async");
-var import_codec_protobuf7 = require("@dxos/codec-protobuf");
-
-// packages/sdk/client-services/src/packlets/devtools/feeds.ts
+// packages/sdk/client-services/src/packlets/identity/identity.ts
+var import_node_assert = __toESM(require("node:assert"));
 var import_async2 = require("@dxos/async");
-var import_codec_protobuf2 = require("@dxos/codec-protobuf");
+var import_client_protocol = require("@dxos/client-protocol");
+var import_credentials3 = require("@dxos/credentials");
+var import_debug = require("@dxos/debug");
 var import_feed_store = require("@dxos/feed-store");
-var import_keys2 = require("@dxos/keys");
-var import_util = require("@dxos/util");
-var subscribeToFeeds = ({ feedStore }, { feedKeys }) => {
-  return new import_codec_protobuf2.Stream(({ next }) => {
-    const subscriptions = new import_async2.EventSubscriptions();
-    const feedMap = new import_util.ComplexMap(import_keys2.PublicKey.hash);
-    const update = () => {
-      const { feeds } = feedStore;
-      feeds.filter((feed) => !(feedKeys == null ? void 0 : feedKeys.length) || feedKeys.some((feedKey) => feedKey.equals(feed.key))).forEach((feed) => {
-        if (!feedMap.has(feed.key)) {
-          feedMap.set(feed.key, feed);
-          feed.on("close", update);
-          subscriptions.add(() => feed.off("close", update));
-        }
-      });
-      next({
-        feeds: Array.from(feedMap.values()).map((feed) => {
-          var _a, _b;
-          return {
-            feedKey: feed.key,
-            length: feed.properties.length,
-            bytes: feed.core.byteLength,
-            downloaded: (_b = (_a = feed.core.bitfield) == null ? void 0 : _a.data.toBuffer()) != null ? _b : new Uint8Array()
-          };
-        })
-      });
-    };
-    subscriptions.add(feedStore.feedOpened.on(update));
-    update();
-    return () => {
-      subscriptions.clear();
-    };
-  });
-};
-var subscribeToFeedBlocks = ({ feedStore }, { feedKey, maxBlocks = 10 }) => {
-  return new import_codec_protobuf2.Stream(({ next }) => {
-    if (!feedKey) {
-      return;
-    }
-    const subscriptions = new import_async2.EventSubscriptions();
-    const timeout = setTimeout(async () => {
-      const feed = feedStore.getFeed(feedKey);
-      if (!feed) {
-        return;
-      }
-      const update = async () => {
-        const iterator = new import_feed_store.FeedIterator(feed);
-        await iterator.open();
-        const blocks = [];
-        for await (const block of iterator) {
-          blocks.push(block);
-          if (blocks.length >= feed.properties.length) {
-            break;
-          }
-        }
-        next({
-          blocks: blocks.slice(-maxBlocks)
-        });
-        await iterator.close();
-      };
-      feed.on("append", update);
-      subscriptions.add(() => feed.off("append", update));
-      feed.on("truncate", update);
-      subscriptions.add(() => feed.off("truncate", update));
-      await update();
+var import_log2 = require("@dxos/log");
+var import_credentials4 = require("@dxos/protocols/proto/dxos/halo/credentials");
+var Identity = class {
+  constructor({ space, signer, identityKey, deviceKey }) {
+    this.stateUpdate = new import_async2.Event();
+    this.space = space;
+    this._signer = signer;
+    this.identityKey = identityKey;
+    this.deviceKey = deviceKey;
+    this._deviceStateMachine = this.space.spaceState.registerProcessor(new import_credentials3.DeviceStateMachine({
+      identityKey: this.identityKey,
+      deviceKey: this.deviceKey,
+      onUpdate: () => this.stateUpdate.emit()
+    }));
+    this._profileStateMachine = this.space.spaceState.registerProcessor(new import_credentials3.ProfileStateMachine({
+      identityKey: this.identityKey,
+      onUpdate: () => this.stateUpdate.emit()
+    }));
+    this.authVerifier = new TrustedKeySetAuthVerifier({
+      trustedKeysProvider: () => this.authorizedDeviceKeys,
+      update: this.stateUpdate,
+      authTimeout: import_client_protocol.AUTH_TIMEOUT
     });
-    return () => {
-      subscriptions.clear();
-      clearTimeout(timeout);
-    };
-  });
-};
-
-// packages/sdk/client-services/src/packlets/devtools/keys.ts
-var import_async3 = require("@dxos/async");
-var import_codec_protobuf3 = require("@dxos/codec-protobuf");
-var subscribeToKeyringKeys = ({ keyring }) => new import_codec_protobuf3.Stream(({ next, ctx }) => {
-  const update = async () => {
-    next({
-      keys: await keyring.list()
-    });
-  };
-  keyring.keysUpdate.on(ctx, update);
-  (0, import_async3.scheduleTask)(ctx, update);
-});
-
-// packages/sdk/client-services/src/packlets/devtools/metadata.ts
-var import_codec_protobuf4 = require("@dxos/codec-protobuf");
-var subscribeToMetadata = ({ context }) => new import_codec_protobuf4.Stream(({ next, ctx }) => {
-  context.metadataStore.update.on(ctx, (data) => next({
-    metadata: data
-  }));
-  next({
-    metadata: context.metadataStore.metadata
-  });
-});
-
-// packages/sdk/client-services/src/packlets/devtools/network.ts
-var import_codec_protobuf5 = require("@dxos/codec-protobuf");
-var import_context = require("@dxos/context");
-var import_keys3 = require("@dxos/keys");
-var subscribeToNetworkStatus = ({ signalManager }) => new import_codec_protobuf5.Stream(({ next, close }) => {
-  const update = () => {
-    try {
-      const status = signalManager.getStatus();
-      next({
-        servers: status
-      });
-    } catch (err) {
-      close(err);
-    }
-  };
-  signalManager.statusChanged.on(() => update());
-  update();
-});
-var subscribeToSignal = ({ signalManager }) => new import_codec_protobuf5.Stream(({ next }) => {
-  const ctx = new import_context.Context();
-  signalManager.onMessage.on(ctx, (message) => {
-    next({
-      message: {
-        author: message.author.asUint8Array(),
-        recipient: message.recipient.asUint8Array(),
-        payload: message.payload
-      },
-      receivedAt: new Date()
-    });
-  });
-  signalManager.swarmEvent.on(ctx, (swarmEvent) => {
-    next({
-      swarmEvent: swarmEvent.swarmEvent,
-      receivedAt: new Date()
-    });
-  });
-  return () => {
-    return ctx.dispose();
-  };
-});
-var subscribeToSwarmInfo = ({ networkManager }) => new import_codec_protobuf5.Stream(({ next }) => {
-  var _a;
-  const update = () => {
-    var _a2;
-    const info = (_a2 = networkManager.connectionLog) == null ? void 0 : _a2.swarms;
-    if (info) {
-      next({
-        data: info
-      });
-    }
-  };
-  (_a = networkManager.connectionLog) == null ? void 0 : _a.update.on(update);
-  update();
-});
-
-// packages/sdk/client-services/src/packlets/devtools/spaces.ts
-var import_codec_protobuf6 = require("@dxos/codec-protobuf");
-var subscribeToSpaces = (context, { spaceKeys = [] }) => {
-  return new import_codec_protobuf6.Stream(({ next }) => {
-    let unsubscribe;
-    const update = async () => {
-      const spaces = [
-        ...context.spaceManager.spaces.values()
-      ];
-      const filteredSpaces = spaces.filter((space) => !(spaceKeys == null ? void 0 : spaceKeys.length) || spaceKeys.some((spaceKey) => spaceKey.equals(space.key)));
-      next({
-        spaces: filteredSpaces.map((space) => {
-          const spaceMetadata = context.metadataStore.spaces.find((spaceMetadata2) => spaceMetadata2.key.equals(space.key));
-          return {
-            key: space.key,
-            isOpen: space.isOpen,
-            timeframe: spaceMetadata == null ? void 0 : spaceMetadata.dataTimeframe,
-            genesisFeed: space.genesisFeedKey,
-            controlFeed: space.controlFeedKey,
-            dataFeed: space.dataFeedKey
-          };
-        })
-      });
-    };
-    const timeout = setTimeout(async () => {
-      await context.initialized.wait();
-      unsubscribe = context.dataSpaceManager.updated.on(() => update());
-      await update();
-    });
-    return () => {
-      unsubscribe == null ? void 0 : unsubscribe();
-      clearTimeout(timeout);
-    };
-  });
-};
-
-// packages/sdk/client-services/src/packlets/devtools/devtools.ts
-var DevtoolsHostEvents = class {
-  constructor() {
-    this.ready = new import_async4.Event();
-  }
-};
-var DevtoolsServiceImpl = class {
-  constructor(params) {
-    this.params = params;
-  }
-  events(request) {
-    return new import_codec_protobuf7.Stream(({ next }) => {
-      this.params.events.ready.on(() => {
-        next({
-          ready: {}
-        });
-      });
-    });
-  }
-  getConfig(request) {
-    throw new Error();
-  }
-  async getStorageInfo() {
-    var _a, _b, _c, _d, _e;
-    const storageUsage = (_c = await ((_b = (_a = this.params.context.storage).getDiskInfo) == null ? void 0 : _b.call(_a))) != null ? _c : {
-      used: 0
-    };
-    const navigatorInfo = typeof navigator === "object" ? await navigator.storage.estimate() : void 0;
-    return {
-      type: this.params.context.storage.type,
-      storageUsage: storageUsage.used,
-      originUsage: (_d = navigatorInfo == null ? void 0 : navigatorInfo.usage) != null ? _d : 0,
-      usageQuota: (_e = navigatorInfo == null ? void 0 : navigatorInfo.quota) != null ? _e : 0
-    };
-  }
-  async getBlobs() {
-    return {
-      blobs: await this.params.context.blobStore.list()
-    };
-  }
-  async getSnapshots() {
-    return {
-      snapshots: await this.params.context.snapshotStore.listSnapshots()
-    };
   }
-  resetStorage(request) {
-    throw new Error();
+  // TODO(burdon): Expose state object?
+  get authorizedDeviceKeys() {
+    return this._deviceStateMachine.processor.authorizedDeviceKeys;
   }
-  enableDebugLogging(request) {
-    throw new Error();
+  async open() {
+    await this._deviceStateMachine.open();
+    await this._profileStateMachine.open();
+    await this.space.open();
   }
-  disableDebugLogging(request) {
-    throw new Error();
+  async close() {
+    await this.authVerifier.close();
+    await this._deviceStateMachine.close();
+    await this._profileStateMachine.close();
+    await this.space.close();
   }
-  subscribeToKeyringKeys(request) {
-    return subscribeToKeyringKeys({
-      keyring: this.params.context.keyring
+  async ready() {
+    await this._deviceStateMachine.processor.deviceChainReady.wait();
+    await this.controlPipeline.state.waitUntilReachedTargetTimeframe({
+      timeout: import_client_protocol.LOAD_CONTROL_FEEDS_TIMEOUT
     });
   }
-  subscribeToCredentialMessages(request) {
-    throw new Error();
-  }
-  subscribeToSpaces(request) {
-    return subscribeToSpaces(this.params.context, request);
-  }
-  subscribeToItems(request) {
-    throw new Error();
-  }
-  subscribeToFeeds(request) {
-    return subscribeToFeeds({
-      feedStore: this.params.context.feedStore
-    }, request);
+  get profileDocument() {
+    return this._profileStateMachine.processor.profile;
   }
-  subscribeToFeedBlocks(request) {
-    return subscribeToFeedBlocks({
-      feedStore: this.params.context.feedStore
-    }, request);
+  /**
+  * @test-only
+  */
+  get controlPipeline() {
+    return this.space.controlPipeline;
   }
-  getSpaceSnapshot(request) {
-    throw new Error();
+  get haloSpaceKey() {
+    return this.space.key;
   }
-  saveSpaceSnapshot(request) {
-    throw new Error();
+  get haloGenesisFeedKey() {
+    return this.space.genesisFeedKey;
   }
-  clearSnapshots(request) {
-    throw new Error();
+  get deviceCredentialChain() {
+    return this._deviceStateMachine.processor.deviceCredentialChain;
   }
-  getNetworkPeers(request) {
-    throw new Error();
+  getAdmissionCredentials() {
+    var _a, _b;
+    return {
+      deviceKey: this.deviceKey,
+      controlFeedKey: (_a = this.space.controlFeedKey) != null ? _a : (0, import_debug.failUndefined)(),
+      dataFeedKey: (_b = this.space.dataFeedKey) != null ? _b : (0, import_debug.failUndefined)()
+    };
   }
-  subscribeToNetworkTopics(request) {
-    throw new Error();
+  /**
+  * Issues credentials as identity.
+  * Requires identity to be ready.
+  */
+  getIdentityCredentialSigner() {
+    (0, import_node_assert.default)(this._deviceStateMachine.processor.deviceCredentialChain, "Device credential chain is not ready.");
+    return (0, import_credentials3.createCredentialSignerWithChain)(this._signer, this._deviceStateMachine.processor.deviceCredentialChain, this.deviceKey);
   }
-  subscribeToSignalStatus(request) {
-    return subscribeToNetworkStatus({
-      signalManager: this.params.context.signalManager
-    });
+  /**
+  * Issues credentials as device.
+  */
+  getDeviceCredentialSigner() {
+    return (0, import_credentials3.createCredentialSignerWithKey)(this._signer, this.deviceKey);
   }
-  subscribeToSignal() {
-    return subscribeToSignal({
-      signalManager: this.params.context.signalManager
-    });
-  }
-  subscribeToSwarmInfo() {
-    return subscribeToSwarmInfo({
-      networkManager: this.params.context.networkManager
-    });
-  }
-  subscribeToMetadata() {
-    return subscribeToMetadata({
-      context: this.params.context
-    });
-  }
-};
-
-// packages/sdk/client-services/src/packlets/identity/authenticator.ts
-var import_async5 = require("@dxos/async");
-var import_context2 = require("@dxos/context");
-var import_credentials2 = require("@dxos/credentials");
-var import_log = require("@dxos/log");
-var import_protocols = require("@dxos/protocols");
-var createAuthProvider = (signer) => async (nonce) => {
-  const credential = await signer.createCredential({
-    assertion: {
-      "@type": "dxos.halo.credentials.Auth"
-    },
-    subject: signer.getIssuer(),
-    nonce
-  });
-  return import_protocols.schema.getCodecForType("dxos.halo.credentials.Credential").encode(credential);
-};
-var TrustedKeySetAuthVerifier = class {
-  // prettier-ignore
-  constructor(_params) {
-    this._params = _params;
-    this._ctx = new import_context2.Context();
-  }
-  async close() {
-    await this._ctx.dispose();
-  }
-  get verifier() {
-    return async (nonce, auth) => {
-      const credential = import_protocols.schema.getCodecForType("dxos.halo.credentials.Credential").decode(auth);
-      (0, import_log.log)("authenticating...", {
-        credential
-      }, {
-        file: "authenticator.ts",
-        line: 57,
-        scope: this,
-        callSite: (f, a) => f(...a)
-      });
-      const result = await (0, import_credentials2.verifyCredential)(credential);
-      if (result.kind === "fail") {
-        (0, import_log.log)("Invalid credential", {
-          result
-        }, {
-          file: "authenticator.ts",
-          line: 61,
-          scope: this,
-          callSite: (f, a) => f(...a)
-        });
-        return false;
-      }
-      if (!credential.proof.nonce || !Buffer.from(nonce).equals(credential.proof.nonce)) {
-        (0, import_log.log)("Invalid nonce", {
-          nonce,
-          credential
-        }, {
-          file: "authenticator.ts",
-          line: 66,
-          scope: this,
-          callSite: (f, a) => f(...a)
-        });
-        return false;
-      }
-      if (this._isTrustedKey(credential.issuer)) {
-        (0, import_log.log)("key is not currently in trusted set, waiting...", {
-          key: credential.issuer
-        }, {
-          file: "authenticator.ts",
-          line: 71,
-          scope: this,
-          callSite: (f, a) => f(...a)
-        });
-        return true;
-      }
-      const trigger = new import_async5.Trigger();
-      this._ctx.onDispose(() => {
-        trigger.wake(false);
-      });
-      const clear = this._params.update.on(this._ctx, () => {
-        if (this._isTrustedKey(credential.issuer)) {
-          (0, import_log.log)("auth success", {
-            key: credential.issuer
-          }, {
-            file: "authenticator.ts",
-            line: 82,
-            scope: this,
-            callSite: (f, a) => f(...a)
-          });
-          trigger.wake(true);
-        } else {
-          (0, import_log.log)("key is not currently in trusted set, waiting...", {
-            key: credential.issuer
-          }, {
-            file: "authenticator.ts",
-            line: 85,
-            scope: this,
-            callSite: (f, a) => f(...a)
-          });
-        }
-      });
-      try {
-        return await trigger.wait({
-          timeout: this._params.authTimeout
-        });
-      } catch (e) {
-        return false;
-      } finally {
-        clear();
-      }
-    };
-  }
-  _isTrustedKey(deviceKey) {
-    const deviceSet = this._params.trustedKeysProvider();
-    return deviceSet.has(deviceKey);
-  }
-};
-
-// packages/sdk/client-services/src/packlets/identity/identity.ts
-var import_node_assert = __toESM(require("node:assert"));
-var import_async6 = require("@dxos/async");
-var import_client_protocol = require("@dxos/client-protocol");
-var import_credentials3 = require("@dxos/credentials");
-var import_debug = require("@dxos/debug");
-var import_feed_store2 = require("@dxos/feed-store");
-var import_log2 = require("@dxos/log");
-var import_credentials4 = require("@dxos/protocols/proto/dxos/halo/credentials");
-var Identity = class {
-  constructor({ space, signer, identityKey, deviceKey }) {
-    this.stateUpdate = new import_async6.Event();
-    this.space = space;
-    this._signer = signer;
-    this.identityKey = identityKey;
-    this.deviceKey = deviceKey;
-    this._deviceStateMachine = this.space.spaceState.registerProcessor(new import_credentials3.DeviceStateMachine({
-      identityKey: this.identityKey,
-      deviceKey: this.deviceKey,
-      onUpdate: () => this.stateUpdate.emit()
-    }));
-    this._profileStateMachine = this.space.spaceState.registerProcessor(new import_credentials3.ProfileStateMachine({
-      identityKey: this.identityKey,
-      onUpdate: () => this.stateUpdate.emit()
-    }));
-    this.authVerifier = new TrustedKeySetAuthVerifier({
-      trustedKeysProvider: () => this.authorizedDeviceKeys,
-      update: this.stateUpdate,
-      authTimeout: import_client_protocol.AUTH_TIMEOUT
-    });
-  }
-  // TODO(burdon): Expose state object?
-  get authorizedDeviceKeys() {
-    return this._deviceStateMachine.processor.authorizedDeviceKeys;
-  }
-  async open() {
-    await this._deviceStateMachine.open();
-    await this._profileStateMachine.open();
-    await this.space.open();
-  }
-  async close() {
-    await this.authVerifier.close();
-    await this._deviceStateMachine.close();
-    await this._profileStateMachine.close();
-    await this.space.close();
-  }
-  async ready() {
-    await this._deviceStateMachine.processor.deviceChainReady.wait();
-    await this.controlPipeline.state.waitUntilReachedTargetTimeframe({
-      timeout: import_client_protocol.LOAD_CONTROL_FEEDS_TIMEOUT
-    });
-  }
-  get profileDocument() {
-    return this._profileStateMachine.processor.profile;
-  }
-  /**
-  * @test-only
-  */
-  get controlPipeline() {
-    return this.space.controlPipeline;
-  }
-  get haloSpaceKey() {
-    return this.space.key;
-  }
-  get haloGenesisFeedKey() {
-    return this.space.genesisFeedKey;
-  }
-  get deviceCredentialChain() {
-    return this._deviceStateMachine.processor.deviceCredentialChain;
-  }
-  getAdmissionCredentials() {
-    var _a, _b;
-    return {
-      deviceKey: this.deviceKey,
-      controlFeedKey: (_a = this.space.controlFeedKey) != null ? _a : (0, import_debug.failUndefined)(),
-      dataFeedKey: (_b = this.space.dataFeedKey) != null ? _b : (0, import_debug.failUndefined)()
-    };
-  }
-  /**
-  * Issues credentials as identity.
-  * Requires identity to be ready.
-  */
-  getIdentityCredentialSigner() {
-    (0, import_node_assert.default)(this._deviceStateMachine.processor.deviceCredentialChain, "Device credential chain is not ready.");
-    return (0, import_credentials3.createCredentialSignerWithChain)(this._signer, this._deviceStateMachine.processor.deviceCredentialChain, this.deviceKey);
-  }
-  /**
-  * Issues credentials as device.
-  */
-  getDeviceCredentialSigner() {
-    return (0, import_credentials3.createCredentialSignerWithKey)(this._signer, this.deviceKey);
-  }
-  async admitDevice({ deviceKey, controlFeedKey, dataFeedKey }) {
-    (0, import_log2.log)("Admitting device:", {
-      identityKey: this.identityKey,
-      hostDevice: this.deviceKey,
-      deviceKey,
-      controlFeedKey,
-      dataFeedKey
-    }, {
-      file: "identity.ts",
-      line: 156,
-      scope: this,
-      callSite: (f, a) => f(...a)
+  async admitDevice({ deviceKey, controlFeedKey, dataFeedKey }) {
+    (0, import_log2.log)("Admitting device:", {
+      identityKey: this.identityKey,
+      hostDevice: this.deviceKey,
+      deviceKey,
+      controlFeedKey,
+      dataFeedKey
+    }, {
+      file: "identity.ts",
+      line: 156,
+      scope: this,
+      callSite: (f, a) => f(...a)
     });
     const signer = this.getIdentityCredentialSigner();
-    await (0, import_feed_store2.writeMessages)(this.controlPipeline.writer, [
+    await (0, import_feed_store.writeMessages)(this.controlPipeline.writer, [
       await signer.createCredential({
         subject: deviceKey,
         assertion: {
@@ -694,13 +338,13 @@ var Identity = class {
 
 // packages/sdk/client-services/src/packlets/identity/identity-manager.ts
 var import_node_assert2 = __toESM(require("node:assert"));
-var import_async7 = require("@dxos/async");
+var import_async3 = require("@dxos/async");
 var import_credentials5 = require("@dxos/credentials");
-var import_keys5 = require("@dxos/keys");
+var import_keys2 = require("@dxos/keys");
 var import_log3 = require("@dxos/log");
 var import_protocols2 = require("@dxos/protocols");
 var import_credentials6 = require("@dxos/protocols/proto/dxos/halo/credentials");
-var import_util2 = require("@dxos/util");
+var import_util = require("@dxos/util");
 var IdentityManager = class {
   // TODO(burdon): IdentityManagerParams.
   // TODO(dmaretskyi): Perhaps this should take/generate the peerKey outside of an initialized identity.
@@ -709,14 +353,14 @@ var IdentityManager = class {
     this._keyring = _keyring;
     this._feedStore = _feedStore;
     this._spaceManager = _spaceManager;
-    this.stateUpdate = new import_async7.Event();
+    this.stateUpdate = new import_async3.Event();
   }
   get identity() {
     return this._identity;
   }
   async open() {
     var _a;
-    const traceId = import_keys5.PublicKey.random().toHex();
+    const traceId = import_keys2.PublicKey.random().toHex();
     import_log3.log.trace("dxos.halo.identity-manager.open", import_protocols2.trace.begin({
       id: traceId
     }), {
@@ -908,7 +552,7 @@ var IdentityManager = class {
       swarmIdentity: {
         peerKey: identityRecord.deviceKey,
         credentialProvider: createAuthProvider((0, import_credentials5.createCredentialSignerWithKey)(this._keyring, identityRecord.deviceKey)),
-        credentialAuthenticator: (0, import_util2.deferFunction)(() => identity.authVerifier.verifier)
+        credentialAuthenticator: (0, import_util.deferFunction)(() => identity.authVerifier.verifier)
       },
       identityKey: identityRecord.identityKey
     });
@@ -957,7 +601,7 @@ var IdentityManager = class {
 
 // packages/sdk/client-services/src/packlets/identity/identity-service.ts
 var import_node_assert3 = __toESM(require("node:assert"));
-var import_codec_protobuf8 = require("@dxos/codec-protobuf");
+var import_codec_protobuf = require("@dxos/codec-protobuf");
 var import_credentials7 = require("@dxos/credentials");
 var import_debug2 = require("@dxos/debug");
 var IdentityServiceImpl = class {
@@ -973,7 +617,7 @@ var IdentityServiceImpl = class {
     return (0, import_debug2.todo)();
   }
   queryIdentity() {
-    return new import_codec_protobuf8.Stream(({ next }) => {
+    return new import_codec_protobuf.Stream(({ next }) => {
       const emitNext = () => next({
         identity: this._getIdentity()
       });
@@ -1005,7 +649,7 @@ var IdentityServiceImpl = class {
 
 // packages/sdk/client-services/src/packlets/invitations/device-invitation-protocol.ts
 var import_node_assert4 = __toESM(require("node:assert"));
-var import_services2 = require("@dxos/protocols/proto/dxos/client/services");
+var import_services = require("@dxos/protocols/proto/dxos/client/services");
 var DeviceInvitationProtocol = class {
   constructor(_keyring, _getIdentity, _acceptIdentity) {
     this._keyring = _keyring;
@@ -1017,7 +661,7 @@ var DeviceInvitationProtocol = class {
   }
   getInvitationContext() {
     return {
-      kind: import_services2.Invitation.Kind.DEVICE
+      kind: import_services.Invitation.Kind.DEVICE
     };
   }
   async admit(request) {
@@ -1070,27 +714,27 @@ var DeviceInvitationProtocol = class {
 
 // packages/sdk/client-services/src/packlets/invitations/invitations-handler.ts
 var import_node_assert6 = __toESM(require("node:assert"));
-var import_async9 = require("@dxos/async");
+var import_async5 = require("@dxos/async");
 var import_client_protocol2 = require("@dxos/client-protocol");
-var import_context4 = require("@dxos/context");
+var import_context3 = require("@dxos/context");
 var import_credentials8 = require("@dxos/credentials");
 var import_errors2 = require("@dxos/errors");
-var import_keys7 = require("@dxos/keys");
+var import_keys4 = require("@dxos/keys");
 var import_log5 = require("@dxos/log");
 var import_network_manager = require("@dxos/network-manager");
 var import_protocols4 = require("@dxos/protocols");
-var import_services4 = require("@dxos/protocols/proto/dxos/client/services");
+var import_services3 = require("@dxos/protocols/proto/dxos/client/services");
 var import_invitations2 = require("@dxos/protocols/proto/dxos/halo/invitations");
 
 // packages/sdk/client-services/src/packlets/invitations/invitation-extension.ts
 var import_node_assert5 = __toESM(require("node:assert"));
-var import_async8 = require("@dxos/async");
-var import_context3 = require("@dxos/context");
+var import_async4 = require("@dxos/async");
+var import_context2 = require("@dxos/context");
 var import_errors = require("@dxos/errors");
-var import_keys6 = require("@dxos/keys");
+var import_keys3 = require("@dxos/keys");
 var import_log4 = require("@dxos/log");
 var import_protocols3 = require("@dxos/protocols");
-var import_services3 = require("@dxos/protocols/proto/dxos/client/services");
+var import_services2 = require("@dxos/protocols/proto/dxos/client/services");
 var import_invitations = require("@dxos/protocols/proto/dxos/halo/invitations");
 var import_teleport = require("@dxos/teleport");
 var OPTIONS_TIMEOUT = 1e4;
@@ -1106,13 +750,13 @@ var InvitationHostExtension = class extends import_teleport.RpcExtension {
       }
     });
     this._callbacks = _callbacks;
-    this._ctx = new import_context3.Context();
-    this._remoteOptionsTrigger = new import_async8.Trigger();
+    this._ctx = new import_context2.Context();
+    this._remoteOptionsTrigger = new import_async4.Trigger();
     this.invitation = void 0;
     this.guestProfile = void 0;
     this.authenticationPassed = false;
     this.authenticationRetry = 0;
-    this.completedTrigger = new import_async8.Trigger();
+    this.completedTrigger = new import_async4.Trigger();
   }
   async getHandlers() {
     return {
@@ -1126,7 +770,7 @@ var InvitationHostExtension = class extends import_teleport.RpcExtension {
         },
         introduce: async (request) => {
           const { profile, invitationId } = request;
-          const traceId = import_keys6.PublicKey.random().toHex();
+          const traceId = import_keys3.PublicKey.random().toHex();
           import_log4.log.trace("dxos.sdk.invitation-handler.host.introduce", import_protocols3.trace.begin({
             id: traceId
           }), {
@@ -1147,7 +791,7 @@ var InvitationHostExtension = class extends import_teleport.RpcExtension {
             });
             this._callbacks.onError(new Error("Invitation not found."));
             return {
-              authMethod: import_services3.Invitation.AuthMethod.NONE
+              authMethod: import_services2.Invitation.AuthMethod.NONE
             };
           }
           this.invitation = invitation;
@@ -1162,7 +806,7 @@ var InvitationHostExtension = class extends import_teleport.RpcExtension {
           this.guestProfile = profile;
           this._callbacks.onStateUpdate({
             ...this.invitation,
-            state: import_services3.Invitation.State.READY_FOR_AUTHENTICATION
+            state: import_services2.Invitation.State.READY_FOR_AUTHENTICATION
           });
           import_log4.log.trace("dxos.sdk.invitation-handler.host.introduce", import_protocols3.trace.end({
             id: traceId
@@ -1173,12 +817,12 @@ var InvitationHostExtension = class extends import_teleport.RpcExtension {
             callSite: (f, a) => f(...a)
           });
           return {
-            spaceKey: this.invitation.authMethod === import_services3.Invitation.AuthMethod.NONE ? this.invitation.spaceKey : void 0,
+            spaceKey: this.invitation.authMethod === import_services2.Invitation.AuthMethod.NONE ? this.invitation.spaceKey : void 0,
             authMethod: this.invitation.authMethod
           };
         },
         authenticate: async ({ authCode: code }) => {
-          const traceId = import_keys6.PublicKey.random().toHex();
+          const traceId = import_keys3.PublicKey.random().toHex();
           import_log4.log.trace("dxos.sdk.invitation-handler.host.authenticate", import_protocols3.trace.begin({
             id: traceId
           }), {
@@ -1198,7 +842,7 @@ var InvitationHostExtension = class extends import_teleport.RpcExtension {
           let status = import_invitations.AuthenticationResponse.Status.OK;
           (0, import_node_assert5.default)(this.invitation, "Invitation is not set.");
           switch (this.invitation.authMethod) {
-            case import_services3.Invitation.AuthMethod.NONE: {
+            case import_services2.Invitation.AuthMethod.NONE: {
               (0, import_log4.log)("authentication not required", {}, {
                 file: "invitation-extension.ts",
                 line: 134,
@@ -1209,7 +853,7 @@ var InvitationHostExtension = class extends import_teleport.RpcExtension {
                 status: import_invitations.AuthenticationResponse.Status.OK
               };
             }
-            case import_services3.Invitation.AuthMethod.SHARED_SECRET: {
+            case import_services2.Invitation.AuthMethod.SHARED_SECRET: {
               if (this.invitation.authCode) {
                 if (this.authenticationRetry++ > MAX_OTP_ATTEMPTS) {
                   status = import_invitations.AuthenticationResponse.Status.INVALID_OPT_ATTEMPTS;
@@ -1250,7 +894,7 @@ var InvitationHostExtension = class extends import_teleport.RpcExtension {
           };
         },
         admit: async (request) => {
-          const traceId = import_keys6.PublicKey.random().toHex();
+          const traceId = import_keys3.PublicKey.random().toHex();
           import_log4.log.trace("dxos.sdk.invitation-handler.host.admit", import_protocols3.trace.begin({
             id: traceId
           }), {
@@ -1289,7 +933,7 @@ var InvitationHostExtension = class extends import_teleport.RpcExtension {
       await this.rpc.InvitationHostService.options({
         role: import_invitations.Options.Role.HOST
       });
-      await (0, import_context3.cancelWithContext)(this._ctx, this._remoteOptionsTrigger.wait({
+      await (0, import_context2.cancelWithContext)(this._ctx, this._remoteOptionsTrigger.wait({
         timeout: OPTIONS_TIMEOUT
       }));
       if (((_a = this._remoteOptions) == null ? void 0 : _a.role) !== import_invitations.Options.Role.GUEST) {
@@ -1318,8 +962,8 @@ var InvitationGuestExtension = class extends import_teleport.RpcExtension {
       }
     });
     this._callbacks = _callbacks;
-    this._ctx = new import_context3.Context();
-    this._remoteOptionsTrigger = new import_async8.Trigger();
+    this._ctx = new import_context2.Context();
+    this._remoteOptionsTrigger = new import_async4.Trigger();
   }
   async getHandlers() {
     return {
@@ -1351,10 +995,10 @@ var InvitationGuestExtension = class extends import_teleport.RpcExtension {
         scope: this,
         callSite: (f, a) => f(...a)
       });
-      await (0, import_context3.cancelWithContext)(this._ctx, this.rpc.InvitationHostService.options({
+      await (0, import_context2.cancelWithContext)(this._ctx, this.rpc.InvitationHostService.options({
         role: import_invitations.Options.Role.GUEST
       }));
-      await (0, import_context3.cancelWithContext)(this._ctx, this._remoteOptionsTrigger.wait({
+      await (0, import_context2.cancelWithContext)(this._ctx, this._remoteOptionsTrigger.wait({
         timeout: OPTIONS_TIMEOUT
       }));
       (0, import_log4.log)("end options", {}, {
@@ -1390,7 +1034,7 @@ var InvitationGuestExtension = class extends import_teleport.RpcExtension {
     await this._ctx.dispose();
   }
 };
-var isAuthenticationRequired = (invitation) => invitation.authMethod !== import_services3.Invitation.AuthMethod.NONE;
+var isAuthenticationRequired = (invitation) => invitation.authMethod !== import_services2.Invitation.AuthMethod.NONE;
 
 // packages/sdk/client-services/src/packlets/invitations/invitations-handler.ts
 var InvitationsHandler = class {
@@ -1402,8 +1046,8 @@ var InvitationsHandler = class {
   }
   createInvitation(protocol, options) {
     var _a;
-    const { invitationId = import_keys7.PublicKey.random().toHex(), type = import_services4.Invitation.Type.INTERACTIVE, authMethod = import_services4.Invitation.AuthMethod.SHARED_SECRET, state = import_services4.Invitation.State.INIT, timeout = import_client_protocol2.INVITATION_TIMEOUT, swarmKey = import_keys7.PublicKey.random() } = options != null ? options : {};
-    const authCode = (_a = options == null ? void 0 : options.authCode) != null ? _a : authMethod === import_services4.Invitation.AuthMethod.SHARED_SECRET ? (0, import_credentials8.generatePasscode)(import_client_protocol2.AUTHENTICATION_CODE_LENGTH) : void 0;
+    const { invitationId = import_keys4.PublicKey.random().toHex(), type = import_services3.Invitation.Type.INTERACTIVE, authMethod = import_services3.Invitation.AuthMethod.SHARED_SECRET, state = import_services3.Invitation.State.INIT, timeout = import_client_protocol2.INVITATION_TIMEOUT, swarmKey = import_keys4.PublicKey.random() } = options != null ? options : {};
+    const authCode = (_a = options == null ? void 0 : options.authCode) != null ? _a : authMethod === import_services3.Invitation.AuthMethod.SHARED_SECRET ? (0, import_credentials8.generatePasscode)(import_client_protocol2.AUTHENTICATION_CODE_LENGTH) : void 0;
     (0, import_node_assert6.default)(protocol);
     const invitation = {
       invitationId,
@@ -1415,8 +1059,8 @@ var InvitationsHandler = class {
       timeout,
       ...protocol.getInvitationContext()
     };
-    const stream = new import_async9.PushStream();
-    const ctx = new import_context4.Context({
+    const stream = new import_async5.PushStream();
+    const ctx = new import_context3.Context({
       onError: (err) => {
         void ctx.dispose();
         stream.error(err);
@@ -1438,7 +1082,7 @@ var InvitationsHandler = class {
         onStateUpdate: (invitation2) => {
           stream.next({
             ...invitation2,
-            state: import_services4.Invitation.State.READY_FOR_AUTHENTICATION
+            state: import_services3.Invitation.State.READY_FOR_AUTHENTICATION
           });
         },
         resolveInvitation: async ({ invitationId: invitationId2 }) => {
@@ -1461,8 +1105,8 @@ var InvitationsHandler = class {
           }
         },
         onOpen: () => {
-          (0, import_async9.scheduleTask)(ctx, async () => {
-            const traceId = import_keys7.PublicKey.random().toHex();
+          (0, import_async5.scheduleTask)(ctx, async () => {
+            const traceId = import_keys4.PublicKey.random().toHex();
             try {
               import_log5.log.trace("dxos.sdk.invitations-handler.host.onOpen", import_protocols4.trace.begin({
                 id: traceId
@@ -1482,7 +1126,7 @@ var InvitationsHandler = class {
               });
               stream.next({
                 ...invitation,
-                state: import_services4.Invitation.State.CONNECTED
+                state: import_services3.Invitation.State.CONNECTED
               });
               const deviceKey = await extension.completedTrigger.wait({
                 timeout
@@ -1498,7 +1142,7 @@ var InvitationsHandler = class {
               });
               stream.next({
                 ...invitation,
-                state: import_services4.Invitation.State.SUCCESS
+                state: import_services3.Invitation.State.SUCCESS
               });
               import_log5.log.trace("dxos.sdk.invitations-handler.host.onOpen", import_protocols4.trace.end({
                 id: traceId
@@ -1509,7 +1153,7 @@ var InvitationsHandler = class {
                 callSite: (f, a) => f(...a)
               });
             } catch (err) {
-              if (err instanceof import_async9.TimeoutError) {
+              if (err instanceof import_async5.TimeoutError) {
                 (0, import_log5.log)("timeout", {
                   ...protocol.toJSON()
                 }, {
@@ -1520,7 +1164,7 @@ var InvitationsHandler = class {
                 });
                 stream.next({
                   ...invitation,
-                  state: import_services4.Invitation.State.TIMEOUT
+                  state: import_services3.Invitation.State.TIMEOUT
                 });
               } else {
                 import_log5.log.error("failed", err, {
@@ -1541,7 +1185,7 @@ var InvitationsHandler = class {
                 callSite: (f, a) => f(...a)
               });
             } finally {
-              if (type !== import_services4.Invitation.Type.MULTIUSE) {
+              if (type !== import_services3.Invitation.Type.MULTIUSE) {
                 await swarmConnection.close();
                 await ctx.dispose();
               }
@@ -1552,7 +1196,7 @@ var InvitationsHandler = class {
           if (err instanceof import_errors2.InvalidInvitationExtensionRoleError) {
             return;
           }
-          if (err instanceof import_async9.TimeoutError) {
+          if (err instanceof import_async5.TimeoutError) {
             (0, import_log5.log)("timeout", {
               ...protocol.toJSON()
             }, {
@@ -1563,7 +1207,7 @@ var InvitationsHandler = class {
             });
             stream.next({
               ...invitation,
-              state: import_services4.Invitation.State.TIMEOUT
+              state: import_services3.Invitation.State.TIMEOUT
             });
           } else {
             import_log5.log.error("failed", err, {
@@ -1579,7 +1223,7 @@ var InvitationsHandler = class {
       return extension;
     };
     let swarmConnection;
-    (0, import_async9.scheduleTask)(ctx, async () => {
+    (0, import_async5.scheduleTask)(ctx, async () => {
       const topic = invitation.swarmKey;
       swarmConnection = await this._networkManager.joinSwarm({
         topic,
@@ -1592,7 +1236,7 @@ var InvitationsHandler = class {
       ctx.onDispose(() => swarmConnection.close());
       stream.next({
         ...invitation,
-        state: import_services4.Invitation.State.CONNECTING
+        state: import_services3.Invitation.State.CONNECTING
       });
     });
     const observable = new import_client_protocol2.CancellableInvitationObservable({
@@ -1601,7 +1245,7 @@ var InvitationsHandler = class {
       onCancel: async () => {
         stream.next({
           ...invitation,
-          state: import_services4.Invitation.State.CANCELLED
+          state: import_services3.Invitation.State.CANCELLED
         });
         await ctx.dispose();
       }
@@ -1611,10 +1255,10 @@ var InvitationsHandler = class {
   acceptInvitation(protocol, invitation) {
     const { timeout = import_client_protocol2.INVITATION_TIMEOUT } = invitation;
     (0, import_node_assert6.default)(protocol);
-    const authenticated = new import_async9.Trigger();
+    const authenticated = new import_async5.Trigger();
     let admitted = false;
     let currentState;
-    const stream = new import_async9.PushStream();
+    const stream = new import_async5.PushStream();
     const setState = (newData) => {
       (0, import_node_assert6.default)(newData.state !== void 0);
       currentState = newData.state;
@@ -1623,9 +1267,9 @@ var InvitationsHandler = class {
         ...newData
       });
     };
-    const ctx = new import_context4.Context({
+    const ctx = new import_context3.Context({
       onError: (err) => {
-        if (err instanceof import_async9.TimeoutError) {
+        if (err instanceof import_async5.TimeoutError) {
           (0, import_log5.log)("timeout", {
             ...protocol.toJSON()
           }, {
@@ -1635,7 +1279,7 @@ var InvitationsHandler = class {
             callSite: (f, a) => f(...a)
           });
           setState({
-            state: import_services4.Invitation.State.TIMEOUT
+            state: import_services3.Invitation.State.TIMEOUT
           });
         } else {
           import_log5.log.warn("auth failed", err, {
@@ -1677,8 +1321,8 @@ var InvitationsHandler = class {
               stream.error(new Error("Remote peer disconnected."));
             }
           });
-          (0, import_async9.scheduleTask)(ctx, async () => {
-            const traceId = import_keys7.PublicKey.random().toHex();
+          (0, import_async5.scheduleTask)(ctx, async () => {
+            const traceId = import_keys4.PublicKey.random().toHex();
             try {
               import_log5.log.trace("dxos.sdk.invitations-handler.guest.onOpen", import_protocols4.trace.begin({
                 id: traceId
@@ -1691,7 +1335,7 @@ var InvitationsHandler = class {
               if (++connectionCount > 1) {
                 throw new Error(`multiple connections detected: ${connectionCount}`);
               }
-              (0, import_async9.scheduleTask)(ctx, () => ctx.raise(new import_async9.TimeoutError(timeout)), timeout);
+              (0, import_async5.scheduleTask)(ctx, () => ctx.raise(new import_async5.TimeoutError(timeout)), timeout);
               (0, import_log5.log)("connected", {
                 ...protocol.toJSON()
               }, {
@@ -1701,7 +1345,7 @@ var InvitationsHandler = class {
                 callSite: (f, a) => f(...a)
               });
               setState({
-                state: import_services4.Invitation.State.CONNECTED
+                state: import_services3.Invitation.State.CONNECTED
               });
               (0, import_log5.log)("introduce", {
                 ...protocol.toJSON()
@@ -1734,7 +1378,7 @@ var InvitationsHandler = class {
                     callSite: (f, a) => f(...a)
                   });
                   setState({
-                    state: import_services4.Invitation.State.READY_FOR_AUTHENTICATION
+                    state: import_services3.Invitation.State.READY_FOR_AUTHENTICATION
                   });
                   const authCode = await authenticated.wait({
                     timeout
@@ -1746,7 +1390,7 @@ var InvitationsHandler = class {
                     callSite: (f, a) => f(...a)
                   });
                   setState({
-                    state: import_services4.Invitation.State.AUTHENTICATING
+                    state: import_services3.Invitation.State.AUTHENTICATING
                   });
                   const response = await extension.rpc.InvitationHostService.authenticate({
                     authCode
@@ -1772,7 +1416,7 @@ var InvitationsHandler = class {
                 }
               } else {
                 setState({
-                  state: import_services4.Invitation.State.READY_FOR_AUTHENTICATION
+                  state: import_services3.Invitation.State.READY_FOR_AUTHENTICATION
                 });
               }
               (0, import_log5.log)("request admission", {
@@ -1797,7 +1441,7 @@ var InvitationsHandler = class {
               });
               setState({
                 ...result,
-                state: import_services4.Invitation.State.SUCCESS
+                state: import_services3.Invitation.State.SUCCESS
               });
               import_log5.log.trace("dxos.sdk.invitations-handler.guest.onOpen", import_protocols4.trace.end({
                 id: traceId
@@ -1808,7 +1452,7 @@ var InvitationsHandler = class {
                 callSite: (f, a) => f(...a)
               });
             } catch (err) {
-              if (err instanceof import_async9.TimeoutError) {
+              if (err instanceof import_async5.TimeoutError) {
                 (0, import_log5.log)("timeout", {
                   ...protocol.toJSON()
                 }, {
@@ -1818,7 +1462,7 @@ var InvitationsHandler = class {
                   callSite: (f, a) => f(...a)
                 });
                 setState({
-                  state: import_services4.Invitation.State.TIMEOUT
+                  state: import_services3.Invitation.State.TIMEOUT
                 });
               } else {
                 (0, import_log5.log)("auth failed", err, {
@@ -1847,7 +1491,7 @@ var InvitationsHandler = class {
           if (err instanceof import_errors2.InvalidInvitationExtensionRoleError) {
             return;
           }
-          if (err instanceof import_async9.TimeoutError) {
+          if (err instanceof import_async5.TimeoutError) {
             (0, import_log5.log)("timeout", {
               ...protocol.toJSON()
             }, {
@@ -1857,7 +1501,7 @@ var InvitationsHandler = class {
               callSite: (f, a) => f(...a)
             });
             setState({
-              state: import_services4.Invitation.State.TIMEOUT
+              state: import_services3.Invitation.State.TIMEOUT
             });
           } else {
             (0, import_log5.log)("auth failed", err, {
@@ -1872,12 +1516,12 @@ var InvitationsHandler = class {
       });
       return extension;
     };
-    (0, import_async9.scheduleTask)(ctx, async () => {
+    (0, import_async5.scheduleTask)(ctx, async () => {
       (0, import_node_assert6.default)(invitation.swarmKey);
       const topic = invitation.swarmKey;
       const swarmConnection = await this._networkManager.joinSwarm({
         topic,
-        peerId: import_keys7.PublicKey.random(),
+        peerId: import_keys4.PublicKey.random(),
         protocolProvider: (0, import_network_manager.createTeleportProtocolFactory)(async (teleport) => {
           teleport.addExtension("dxos.halo.invitations", createExtension());
         }),
@@ -1885,7 +1529,7 @@ var InvitationsHandler = class {
       });
       ctx.onDispose(() => swarmConnection.close());
       setState({
-        state: import_services4.Invitation.State.CONNECTING
+        state: import_services3.Invitation.State.CONNECTING
       });
     });
     const observable = new import_client_protocol2.AuthenticatingInvitationObservable({
@@ -1893,7 +1537,7 @@ var InvitationsHandler = class {
       subscriber: stream.observable,
       onCancel: async () => {
         setState({
-          state: import_services4.Invitation.State.CANCELLED
+          state: import_services3.Invitation.State.CANCELLED
         });
         await ctx.dispose();
       },
@@ -1907,20 +1551,20 @@ var InvitationsHandler = class {
 
 // packages/sdk/client-services/src/packlets/invitations/invitations-service.ts
 var import_node_assert7 = __toESM(require("node:assert"));
-var import_async10 = require("@dxos/async");
-var import_codec_protobuf9 = require("@dxos/codec-protobuf");
+var import_async6 = require("@dxos/async");
+var import_codec_protobuf2 = require("@dxos/codec-protobuf");
 var import_log6 = require("@dxos/log");
-var import_services5 = require("@dxos/protocols/proto/dxos/client/services");
+var import_services4 = require("@dxos/protocols/proto/dxos/client/services");
 var InvitationsServiceImpl = class {
   constructor(_invitationsHandler, _getHandler) {
     this._invitationsHandler = _invitationsHandler;
     this._getHandler = _getHandler;
     this._createInvitations = /* @__PURE__ */ new Map();
     this._acceptInvitations = /* @__PURE__ */ new Map();
-    this._invitationCreated = new import_async10.Event();
-    this._invitationAccepted = new import_async10.Event();
-    this._removedCreated = new import_async10.Event();
-    this._removedAccepted = new import_async10.Event();
+    this._invitationCreated = new import_async6.Event();
+    this._invitationAccepted = new import_async6.Event();
+    this._removedCreated = new import_async6.Event();
+    this._removedAccepted = new import_async6.Event();
   }
   // TODO(burdon): Guest/host label.
   getLoggingContext() {
@@ -1937,7 +1581,7 @@ var InvitationsServiceImpl = class {
       this._createInvitations.set(invitation.get().invitationId, invitation);
       this._invitationCreated.emit(invitation.get());
     }
-    return new import_codec_protobuf9.Stream(({ next, close }) => {
+    return new import_codec_protobuf2.Stream(({ next, close }) => {
       invitation.subscribe((invitation2) => {
         next(invitation2);
       }, (err) => {
@@ -1959,7 +1603,7 @@ var InvitationsServiceImpl = class {
       this._acceptInvitations.set(invitation.get().invitationId, invitation);
       this._invitationAccepted.emit(invitation.get());
     }
-    return new import_codec_protobuf9.Stream(({ next, close }) => {
+    return new import_codec_protobuf2.Stream(({ next, close }) => {
       invitation.subscribe((invitation2) => {
         next(invitation2);
       }, (err) => {
@@ -2022,11 +1666,11 @@ var InvitationsServiceImpl = class {
     }
   }
   queryInvitations() {
-    return new import_codec_protobuf9.Stream(({ next, ctx }) => {
+    return new import_codec_protobuf2.Stream(({ next, ctx }) => {
       this._invitationCreated.on(ctx, (invitation) => {
         next({
-          action: import_services5.QueryInvitationsResponse.Action.ADDED,
-          type: import_services5.QueryInvitationsResponse.Type.CREATED,
+          action: import_services4.QueryInvitationsResponse.Action.ADDED,
+          type: import_services4.QueryInvitationsResponse.Type.CREATED,
           invitations: [
             invitation
           ]
@@ -2034,8 +1678,8 @@ var InvitationsServiceImpl = class {
       });
       this._invitationAccepted.on(ctx, (invitation) => {
         next({
-          action: import_services5.QueryInvitationsResponse.Action.ADDED,
-          type: import_services5.QueryInvitationsResponse.Type.ACCEPTED,
+          action: import_services4.QueryInvitationsResponse.Action.ADDED,
+          type: import_services4.QueryInvitationsResponse.Type.ACCEPTED,
           invitations: [
             invitation
           ]
@@ -2043,8 +1687,8 @@ var InvitationsServiceImpl = class {
       });
       this._removedCreated.on(ctx, (invitation) => {
         next({
-          action: import_services5.QueryInvitationsResponse.Action.REMOVED,
-          type: import_services5.QueryInvitationsResponse.Type.CREATED,
+          action: import_services4.QueryInvitationsResponse.Action.REMOVED,
+          type: import_services4.QueryInvitationsResponse.Type.CREATED,
           invitations: [
             invitation
           ]
@@ -2052,21 +1696,21 @@ var InvitationsServiceImpl = class {
       });
       this._removedAccepted.on(ctx, (invitation) => {
         next({
-          action: import_services5.QueryInvitationsResponse.Action.REMOVED,
-          type: import_services5.QueryInvitationsResponse.Type.ACCEPTED,
+          action: import_services4.QueryInvitationsResponse.Action.REMOVED,
+          type: import_services4.QueryInvitationsResponse.Type.ACCEPTED,
           invitations: [
             invitation
           ]
         });
       });
       next({
-        action: import_services5.QueryInvitationsResponse.Action.ADDED,
-        type: import_services5.QueryInvitationsResponse.Type.CREATED,
+        action: import_services4.QueryInvitationsResponse.Action.ADDED,
+        type: import_services4.QueryInvitationsResponse.Type.CREATED,
         invitations: Array.from(this._createInvitations.values()).map((invitation) => invitation.get())
       });
       next({
-        action: import_services5.QueryInvitationsResponse.Action.ADDED,
-        type: import_services5.QueryInvitationsResponse.Type.ACCEPTED,
+        action: import_services4.QueryInvitationsResponse.Action.ADDED,
+        type: import_services4.QueryInvitationsResponse.Type.ACCEPTED,
         invitations: Array.from(this._acceptInvitations.values()).map((invitation) => invitation.get())
       });
     });
@@ -2076,9 +1720,9 @@ var InvitationsServiceImpl = class {
 // packages/sdk/client-services/src/packlets/invitations/space-invitation-protocol.ts
 var import_node_assert8 = __toESM(require("node:assert"));
 var import_credentials9 = require("@dxos/credentials");
-var import_feed_store3 = require("@dxos/feed-store");
+var import_feed_store2 = require("@dxos/feed-store");
 var import_log7 = require("@dxos/log");
-var import_services6 = require("@dxos/protocols/proto/dxos/client/services");
+var import_services5 = require("@dxos/protocols/proto/dxos/client/services");
 var SpaceInvitationProtocol = class {
   constructor(_spaceManager, _signingContext, _keyring, _spaceKey) {
     this._spaceManager = _spaceManager;
@@ -2094,7 +1738,7 @@ var SpaceInvitationProtocol = class {
   }
   getInvitationContext() {
     return {
-      kind: import_services6.Invitation.Kind.SPACE,
+      kind: import_services5.Invitation.Kind.SPACE,
       spaceKey: this._spaceKey
     };
   }
@@ -2118,7 +1762,7 @@ var SpaceInvitationProtocol = class {
     (0, import_node_assert8.default)(credentials[0].credential);
     const spaceMemberCredential = credentials[0].credential.credential;
     (0, import_node_assert8.default)((0, import_credentials9.getCredentialAssertion)(spaceMemberCredential)["@type"] === "dxos.halo.credentials.SpaceMember");
-    await (0, import_feed_store3.writeMessages)(space.inner.controlPipeline.writer, credentials);
+    await (0, import_feed_store2.writeMessages)(space.inner.controlPipeline.writer, credentials);
     return {
       space: {
         credential: spaceMemberCredential,
@@ -2163,211 +1807,52 @@ var SpaceInvitationProtocol = class {
   }
 };
 
-// packages/sdk/client-services/src/packlets/locks/node.ts
-var import_node_assert9 = __toESM(require("node:assert"));
-var import_lock_file = require("@dxos/lock-file");
-var import_log8 = require("@dxos/log");
-var __decorate = function(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
-    r = Reflect.decorate(decorators, target, key, desc);
-  else
-    for (var i = decorators.length - 1; i >= 0; i--)
-      if (d = decorators[i])
-        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var Lock = class {
-  constructor({ lockKey: lockPath, onAcquire, onRelease }) {
-    this._lockPath = lockPath;
-    this._onAcquire = onAcquire;
-    this._onRelease = onRelease;
-  }
-  get lockKey() {
-    return this._lockPath;
-  }
-  async acquire() {
-    var _a;
-    (0, import_log8.log)("acquiring lock...", {}, {
-      file: "node.ts",
-      line: 32,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    this._fileHandle = await import_lock_file.LockFile.acquire(this._lockPath);
-    await ((_a = this._onAcquire) == null ? void 0 : _a.call(this));
-    (0, import_log8.log)("acquired lock", {}, {
-      file: "node.ts",
-      line: 37,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-  }
-  async release() {
-    var _a;
-    await ((_a = this._onRelease) == null ? void 0 : _a.call(this));
-    (0, import_node_assert9.default)(this._fileHandle, "Lock is not acquired");
-    await import_lock_file.LockFile.release(this._fileHandle);
-  }
-};
-__decorate([
-  import_log8.logInfo
-], Lock.prototype, "lockKey", null);
-
-// packages/sdk/client-services/src/packlets/logging/logging-service.ts
-var import_async11 = require("@dxos/async");
-var import_codec_protobuf10 = require("@dxos/codec-protobuf");
-var import_log9 = require("@dxos/log");
-var import_services7 = require("@dxos/protocols/proto/dxos/client/services");
-var import_util3 = require("@dxos/util");
-var LoggingServiceImpl = class {
-  constructor() {
-    this._logs = new import_async11.Event();
-    this._logProcessor = (_config, entry2) => {
-      this._logs.emit(entry2);
-    };
-  }
-  async open() {
-    import_log9.log.runtimeConfig.processors.push(this._logProcessor);
-  }
-  async close() {
-    const index = import_log9.log.runtimeConfig.processors.findIndex((processor) => processor === this._logProcessor);
-    import_log9.log.runtimeConfig.processors.splice(index, 1);
-  }
-  queryLogs(request) {
-    return new import_codec_protobuf10.Stream(({ ctx, next }) => {
-      const handler = (entry2) => {
-        var _a, _b, _c, _d, _e;
-        if (LOG_PROCESSING > 0) {
-          return;
-        }
-        if (((_a = entry2.meta) == null ? void 0 : _a.file.includes("logging-service")) || entry2.context && Object.values(entry2.context).some((value) => typeof value === "string" && value.includes("LoggingService"))) {
-          return;
-        }
-        if (!shouldLog(entry2, request)) {
-          return;
-        }
-        const record = {
-          ...entry2,
-          context: (0, import_util3.jsonify)((0, import_log9.getContextFromEntry)(entry2)),
-          timestamp: new Date(),
-          meta: {
-            // TODO(dmaretskyi): Fix proto.
-            file: (_c = (_b = entry2.meta) == null ? void 0 : _b.file) != null ? _c : "",
-            line: (_e = (_d = entry2.meta) == null ? void 0 : _d.line) != null ? _e : 0
-          }
-        };
-        try {
-          LOG_PROCESSING++;
-          next(record);
-        } finally {
-          LOG_PROCESSING--;
-        }
-      };
-      this._logs.on(ctx, handler);
-    });
-  }
-};
-var matchFilter = (filter, level, path, options) => {
-  switch (options) {
-    case import_services7.QueryLogsRequest.MatchingOptions.INCLUSIVE:
-      return level >= filter.level && (!filter.pattern || path.includes(filter.pattern));
-    case import_services7.QueryLogsRequest.MatchingOptions.EXPLICIT:
-      return level === filter.level && (!filter.pattern || path.includes(filter.pattern));
-  }
-};
-var shouldLog = (entry2, request) => {
-  var _a;
-  const options = (_a = request.options) != null ? _a : import_services7.QueryLogsRequest.MatchingOptions.INCLUSIVE;
-  if (request.filters === void 0) {
-    return options === import_services7.QueryLogsRequest.MatchingOptions.INCLUSIVE;
-  } else {
-    return request.filters.some((filter) => {
-      var _a2, _b;
-      return matchFilter(filter, entry2.level, (_b = (_a2 = entry2.meta) == null ? void 0 : _a2.file) != null ? _b : "", options);
-    });
-  }
-};
-var LOG_PROCESSING = 0;
-
-// packages/sdk/client-services/src/packlets/network/network-service.ts
-var import_codec_protobuf11 = require("@dxos/codec-protobuf");
-var NetworkServiceImpl = class {
-  constructor(networkManager, signalManager) {
-    this.networkManager = networkManager;
-    this.signalManager = signalManager;
-  }
-  queryStatus() {
-    return new import_codec_protobuf11.Stream(({ next }) => {
-      const update = () => {
-        next({
-          swarm: this.networkManager.connectionState,
-          signaling: this.signalManager.getStatus().map(({ host, state }) => ({
-            server: host,
-            state
-          }))
-        });
-      };
-      const unsubscribeSwarm = this.networkManager.connectionStateChanged.on(() => update());
-      const unsubscribeSignal = this.signalManager.statusChanged.on(() => update());
-      update();
-      return () => {
-        unsubscribeSwarm();
-        unsubscribeSignal();
-      };
-    });
-  }
-  async updateConfig(request) {
-    await this.networkManager.setConnectionState(request.swarm);
-  }
-};
-
 // packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts
-var import_node_assert11 = __toESM(require("node:assert"));
-var import_async14 = require("@dxos/async");
-var import_context7 = require("@dxos/context");
+var import_node_assert10 = __toESM(require("node:assert"));
+var import_async9 = require("@dxos/async");
+var import_context6 = require("@dxos/context");
 var import_credentials13 = require("@dxos/credentials");
-var import_keys10 = require("@dxos/keys");
-var import_log12 = require("@dxos/log");
+var import_keys7 = require("@dxos/keys");
+var import_log10 = require("@dxos/log");
 var import_protocols6 = require("@dxos/protocols");
-var import_services9 = require("@dxos/protocols/proto/dxos/client/services");
+var import_services7 = require("@dxos/protocols/proto/dxos/client/services");
 var import_teleport_extension_gossip = require("@dxos/teleport-extension-gossip");
-var import_util6 = require("@dxos/util");
+var import_util4 = require("@dxos/util");
 
 // packages/sdk/client-services/src/packlets/spaces/data-space.ts
-var import_async13 = require("@dxos/async");
+var import_async8 = require("@dxos/async");
 var import_client_protocol3 = require("@dxos/client-protocol");
-var import_context6 = require("@dxos/context");
+var import_context5 = require("@dxos/context");
 var import_debug3 = require("@dxos/debug");
 var import_echo_pipeline = require("@dxos/echo-pipeline");
 var import_errors3 = require("@dxos/errors");
-var import_keys9 = require("@dxos/keys");
-var import_log11 = require("@dxos/log");
-var import_services8 = require("@dxos/protocols/proto/dxos/client/services");
+var import_keys6 = require("@dxos/keys");
+var import_log9 = require("@dxos/log");
+var import_services6 = require("@dxos/protocols/proto/dxos/client/services");
 var import_credentials10 = require("@dxos/protocols/proto/dxos/halo/credentials");
 var import_timeframe = require("@dxos/timeframe");
-var import_util5 = require("@dxos/util");
+var import_util3 = require("@dxos/util");
 
 // packages/sdk/client-services/src/packlets/spaces/notarization-plugin.ts
-var import_node_assert10 = __toESM(require("node:assert"));
-var import_async12 = require("@dxos/async");
-var import_context5 = require("@dxos/context");
-var import_keys8 = require("@dxos/keys");
-var import_log10 = require("@dxos/log");
+var import_node_assert9 = __toESM(require("node:assert"));
+var import_async7 = require("@dxos/async");
+var import_context4 = require("@dxos/context");
+var import_keys5 = require("@dxos/keys");
+var import_log8 = require("@dxos/log");
 var import_protocols5 = require("@dxos/protocols");
 var import_teleport2 = require("@dxos/teleport");
-var import_util4 = require("@dxos/util");
+var import_util2 = require("@dxos/util");
 var DEFAULT_RETRY_TIMEOUT = 1e3;
 var DEFAULT_SUCCESS_DELAY = 1e3;
 var DEFAULT_NOTARIZE_TIMEOUT = 1e4;
 var WRITER_NOT_SET_ERROR_CODE = "WRITER_NOT_SET";
 var NotarizationPlugin = class {
   constructor() {
-    this._ctx = new import_context5.Context();
-    this._extensionOpened = new import_async12.Event();
+    this._ctx = new import_context4.Context();
+    this._extensionOpened = new import_async7.Event();
     this._extensions = /* @__PURE__ */ new Set();
-    this._processedCredentials = new import_util4.ComplexSet(import_keys8.PublicKey.hash);
-    this._processCredentialsTriggers = new import_util4.ComplexMap(import_keys8.PublicKey.hash);
+    this._processedCredentials = new import_util2.ComplexSet(import_keys5.PublicKey.hash);
+    this._processCredentialsTriggers = new import_util2.ComplexMap(import_keys5.PublicKey.hash);
   }
   async open() {
   }
@@ -2378,7 +1863,7 @@ var NotarizationPlugin = class {
   * Request credentials to be notarized.
   */
   async notarize({ ctx: opCtx, credentials, timeout = DEFAULT_NOTARIZE_TIMEOUT, retryTimeout = DEFAULT_RETRY_TIMEOUT, successDelay = DEFAULT_SUCCESS_DELAY }) {
-    (0, import_log10.log)("notarize", {
+    (0, import_log8.log)("notarize", {
       credentials
     }, {
       file: "notarization-plugin.ts",
@@ -2386,11 +1871,11 @@ var NotarizationPlugin = class {
       scope: this,
       callSite: (f, a) => f(...a)
     });
-    (0, import_node_assert10.default)(credentials.every((credential) => credential.id), "Credentials must have an id");
-    const errors = new import_async12.Trigger();
+    (0, import_node_assert9.default)(credentials.every((credential) => credential.id), "Credentials must have an id");
+    const errors = new import_async7.Trigger();
     const ctx = this._ctx.derive({
       onError: (err) => {
-        import_log10.log.warn("Notarization error", {
+        import_log8.log.warn("Notarization error", {
           err
         }, {
           file: "notarization-plugin.ts",
@@ -2404,8 +1889,8 @@ var NotarizationPlugin = class {
     });
     opCtx == null ? void 0 : opCtx.onDispose(() => ctx.dispose());
     if (timeout !== 0) {
-      (0, import_async12.scheduleTask)(ctx, () => {
-        import_log10.log.warn("Notarization timeout", {
+      (0, import_async7.scheduleTask)(ctx, () => {
+        import_log8.log.warn("Notarization timeout", {
           timeout,
           peers: Array.from(this._extensions).map((extension) => extension.remotePeerId)
         }, {
@@ -2415,12 +1900,12 @@ var NotarizationPlugin = class {
           callSite: (f, a) => f(...a)
         });
         void ctx.dispose();
-        errors.throw(new import_async12.TimeoutError(timeout, "Notarization timed out"));
+        errors.throw(new import_async7.TimeoutError(timeout, "Notarization timed out"));
       }, timeout);
     }
     const allNotarized = Promise.all(credentials.map((credential) => this._waitUntilProcessed(credential.id)));
     const peersTried = /* @__PURE__ */ new Set();
-    const notarizeTask = new import_async12.DeferredTask(ctx, async () => {
+    const notarizeTask = new import_async7.DeferredTask(ctx, async () => {
       try {
         if (this._extensions.size === 0) {
           return;
@@ -2429,7 +1914,7 @@ var NotarizationPlugin = class {
           ...this._extensions
         ].find((peer2) => !peersTried.has(peer2));
         if (!peer) {
-          import_log10.log.warn("Exhausted all peers to notarize with", {
+          import_log8.log.warn("Exhausted all peers to notarize with", {
             retryIn: retryTimeout
           }, {
             file: "notarization-plugin.ts",
@@ -2438,11 +1923,11 @@ var NotarizationPlugin = class {
             callSite: (f, a) => f(...a)
           });
           peersTried.clear();
-          (0, import_async12.scheduleTask)(ctx, () => notarizeTask.schedule(), retryTimeout);
+          (0, import_async7.scheduleTask)(ctx, () => notarizeTask.schedule(), retryTimeout);
           return;
         }
         peersTried.add(peer);
-        (0, import_log10.log)("try notarizing", {
+        (0, import_log8.log)("try notarizing", {
           peer: peer.localPeerId,
           credentialId: credentials.map((credential) => credential.id)
         }, {
@@ -2454,16 +1939,16 @@ var NotarizationPlugin = class {
         await peer.rpc.NotarizationService.notarize({
           credentials: credentials.filter((credential) => !this._processedCredentials.has(credential.id))
         });
-        (0, import_log10.log)("success", {}, {
+        (0, import_log8.log)("success", {}, {
           file: "notarization-plugin.ts",
           line: 144,
           scope: this,
           callSite: (f, a) => f(...a)
         });
-        await (0, import_async12.sleep)(successDelay);
+        await (0, import_async7.sleep)(successDelay);
       } catch (err) {
         if (!ctx.disposed && !err.message.includes(WRITER_NOT_SET_ERROR_CODE)) {
-          import_log10.log.warn("error notarizing (recoverable)", err, {
+          import_log8.log.warn("error notarizing (recoverable)", err, {
             file: "notarization-plugin.ts",
             line: 148,
             scope: this,
@@ -2477,11 +1962,11 @@ var NotarizationPlugin = class {
     this._extensionOpened.on(ctx, () => notarizeTask.schedule());
     try {
       await Promise.race([
-        (0, import_context5.rejectOnDispose)(ctx),
+        (0, import_context4.rejectOnDispose)(ctx),
         allNotarized,
         errors.wait()
       ]);
-      (0, import_log10.log)("done", {}, {
+      (0, import_log8.log)("done", {}, {
         file: "notarization-plugin.ts",
         line: 159,
         scope: this,
@@ -2504,14 +1989,14 @@ var NotarizationPlugin = class {
     this._processCredentialsTriggers.delete(credential.id);
   }
   setWriter(writer) {
-    (0, import_node_assert10.default)(!this._writer, "Writer already set.");
+    (0, import_node_assert9.default)(!this._writer, "Writer already set.");
     this._writer = writer;
   }
   async _waitUntilProcessed(id) {
     if (this._processedCredentials.has(id)) {
       return;
     }
-    await (0, import_util4.entry)(this._processCredentialsTriggers, id).orInsert(new import_async12.Trigger()).value.wait();
+    await (0, import_util2.entry)(this._processCredentialsTriggers, id).orInsert(new import_async7.Trigger()).value.wait();
   }
   /**
   * Requests from other peers to notarize credentials.
@@ -2522,7 +2007,7 @@ var NotarizationPlugin = class {
       throw new Error(WRITER_NOT_SET_ERROR_CODE);
     }
     for (const credential of (_a = request.credentials) != null ? _a : []) {
-      (0, import_node_assert10.default)(credential.id, "Credential must have an id");
+      (0, import_node_assert9.default)(credential.id, "Credential must have an id");
       if (this._processedCredentials.has(credential.id)) {
         continue;
       }
@@ -2532,7 +2017,7 @@ var NotarizationPlugin = class {
   createExtension() {
     const extension = new NotarizationTeleportExtension({
       onOpen: async () => {
-        (0, import_log10.log)("extension opened", {
+        (0, import_log8.log)("extension opened", {
           peer: extension.localPeerId
         }, {
           file: "notarization-plugin.ts",
@@ -2544,7 +2029,7 @@ var NotarizationPlugin = class {
         this._extensionOpened.emit();
       },
       onClose: async () => {
-        (0, import_log10.log)("extension closed", {
+        (0, import_log8.log)("extension closed", {
           peer: extension.localPeerId
         }, {
           file: "notarization-plugin.ts",
@@ -2591,7 +2076,7 @@ var NotarizationTeleportExtension = class extends import_teleport2.RpcExtension
 };
 
 // packages/sdk/client-services/src/packlets/spaces/data-space.ts
-var __decorate2 = function(decorators, target, key, desc) {
+var __decorate = function(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2603,13 +2088,13 @@ var __decorate2 = function(decorators, target, key, desc) {
 };
 var DataSpace = class DataSpace2 {
   constructor(params) {
-    this._ctx = new import_context6.Context();
-    this._state = import_services8.SpaceState.CLOSED;
+    this._ctx = new import_context5.Context();
+    this._state = import_services6.SpaceState.CLOSED;
     /**
     * Error for _state === SpaceState.ERROR.
     */
     this.error = void 0;
-    this.stateUpdate = new import_async13.Event();
+    this.stateUpdate = new import_async8.Event();
     this.metrics = {};
     var _a;
     this._inner = params.inner;
@@ -2622,7 +2107,7 @@ var DataSpace = class DataSpace2 {
     this._signingContext = params.signingContext;
     this._callbacks = (_a = params.callbacks) != null ? _a : {};
     this.authVerifier = new TrustedKeySetAuthVerifier({
-      trustedKeysProvider: () => new import_util5.ComplexSet(import_keys9.PublicKey.hash, Array.from(this._inner.spaceState.members.keys())),
+      trustedKeysProvider: () => new import_util3.ComplexSet(import_keys6.PublicKey.hash, Array.from(this._inner.spaceState.members.keys())),
       update: this._inner.stateUpdate,
       authTimeout: import_client_protocol3.AUTH_TIMEOUT
     });
@@ -2658,11 +2143,11 @@ var DataSpace = class DataSpace2 {
     await this.notarizationPlugin.open();
     await this._notarizationPluginConsumer.open();
     await this._inner.open();
-    this._state = import_services8.SpaceState.INACTIVE;
+    this._state = import_services6.SpaceState.INACTIVE;
     this.metrics.open = new Date();
   }
   async close() {
-    this._state = import_services8.SpaceState.CLOSED;
+    this._state = import_services6.SpaceState.CLOSED;
     await this._ctx.dispose();
     await this.authVerifier.close();
     await this._inner.close();
@@ -2680,13 +2165,13 @@ var DataSpace = class DataSpace2 {
   * Initialize the data pipeline in a separate task.
   */
   initializeDataPipelineAsync() {
-    (0, import_async13.scheduleTask)(this._ctx, async () => {
+    (0, import_async8.scheduleTask)(this._ctx, async () => {
       try {
         this.metrics.pipelineInitBegin = new Date();
         await this.initializeDataPipeline();
       } catch (err) {
         if (err instanceof import_errors3.CancelledError) {
-          (0, import_log11.log)("Data pipeline initialization cancelled", err, {
+          (0, import_log9.log)("Data pipeline initialization cancelled", err, {
             file: "data-space.ts",
             line: 173,
             scope: this,
@@ -2694,13 +2179,13 @@ var DataSpace = class DataSpace2 {
           });
           return;
         }
-        import_log11.log.error("Error initializing data pipeline", err, {
+        import_log9.log.error("Error initializing data pipeline", err, {
           file: "data-space.ts",
           line: 177,
           scope: this,
           callSite: (f, a) => f(...a)
         });
-        this._state = import_services8.SpaceState.ERROR;
+        this._state = import_services6.SpaceState.ERROR;
         this.error = err;
         this.stateUpdate.emit();
       } finally {
@@ -2710,17 +2195,17 @@ var DataSpace = class DataSpace2 {
   }
   async initializeDataPipeline() {
     var _a, _b, _c, _d;
-    if (this._state !== import_services8.SpaceState.INACTIVE) {
+    if (this._state !== import_services6.SpaceState.INACTIVE) {
       throw new import_errors3.SystemError("Invalid operation");
     }
-    this._state = import_services8.SpaceState.INITIALIZING;
+    this._state = import_services6.SpaceState.INITIALIZING;
     await this._inner.controlPipeline.state.waitUntilReachedTargetTimeframe({
       ctx: this._ctx,
       breakOnStall: false
     });
     this.metrics.controlPipelineReady = new Date();
     await this._createWritableFeeds();
-    (0, import_log11.log)("Writable feeds created", {}, {
+    (0, import_log9.log)("Writable feeds created", {}, {
       file: "data-space.ts",
       line: 201,
       scope: this,
@@ -2734,8 +2219,8 @@ var DataSpace = class DataSpace2 {
     }), this._inner.controlPipeline.writer));
     await this._inner.initializeDataPipeline();
     this.metrics.dataPipelineOpen = new Date();
-    await (0, import_context6.cancelWithContext)(this._ctx, this._inner.dataPipeline.ensureEpochInitialized());
-    (0, import_log11.log)("waiting for data pipeline to reach target timeframe", {}, {
+    await (0, import_context5.cancelWithContext)(this._ctx, this._inner.dataPipeline.ensureEpochInitialized());
+    (0, import_log9.log)("waiting for data pipeline to reach target timeframe", {}, {
       file: "data-space.ts",
       line: 220,
       scope: this,
@@ -2746,14 +2231,14 @@ var DataSpace = class DataSpace2 {
       breakOnStall: false
     });
     this.metrics.dataPipelineReady = new Date();
-    (0, import_log11.log)("data pipeline ready", {}, {
+    (0, import_log9.log)("data pipeline ready", {}, {
       file: "data-space.ts",
       line: 229,
       scope: this,
       callSite: (f, a) => f(...a)
     });
     await ((_b = (_a = this._callbacks).beforeReady) == null ? void 0 : _b.call(_a));
-    this._state = import_services8.SpaceState.READY;
+    this._state = import_services6.SpaceState.READY;
     this.stateUpdate.emit();
     await ((_d = (_c = this._callbacks).afterReady) == null ? void 0 : _d.call(_c));
   }
@@ -2829,11 +2314,11 @@ var DataSpace = class DataSpace2 {
     }
   }
 };
-__decorate2([
+__decorate([
   (0, import_debug3.timed)(1e4)
 ], DataSpace.prototype, "_createWritableFeeds", null);
-DataSpace = __decorate2([
-  (0, import_async13.trackLeaks)("open", "close")
+DataSpace = __decorate([
+  (0, import_async8.trackLeaks)("open", "close")
 ], DataSpace);
 
 // packages/sdk/client-services/src/packlets/spaces/genesis.ts
@@ -2907,7 +2392,7 @@ var spaceGenesis = async (keyring, signingContext, space) => {
 };
 
 // packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts
-var __decorate3 = function(decorators, target, key, desc) {
+var __decorate2 = function(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2925,431 +2410,1170 @@ var DataSpaceManager = class DataSpaceManager2 {
     this._keyring = _keyring;
     this._signingContext = _signingContext;
     this._feedStore = _feedStore;
-    this._ctx = new import_context7.Context();
-    this.updated = new import_async14.Event();
-    this._spaces = new import_util6.ComplexMap(import_keys10.PublicKey.hash);
+    this._ctx = new import_context6.Context();
+    this.updated = new import_async9.Event();
+    this._spaces = new import_util4.ComplexMap(import_keys7.PublicKey.hash);
     this._isOpen = false;
-    this._instanceId = import_keys10.PublicKey.random().toHex();
+    this._instanceId = import_keys7.PublicKey.random().toHex();
+  }
+  // TODO(burdon): Remove.
+  get spaces() {
+    return this._spaces;
+  }
+  async open() {
+    (0, import_log10.log)("open", {}, {
+      file: "data-space-manager.ts",
+      line: 80,
+      scope: this,
+      callSite: (f, a) => f(...a)
+    });
+    import_log10.log.trace("dxos.echo.data-space-manager.open", import_protocols6.trace.begin({
+      id: this._instanceId
+    }), {
+      file: "data-space-manager.ts",
+      line: 81,
+      scope: this,
+      callSite: (f, a) => f(...a)
+    });
+    await this._metadataStore.load();
+    (0, import_log10.log)("metadata loaded", {
+      spaces: this._metadataStore.spaces.length
+    }, {
+      file: "data-space-manager.ts",
+      line: 83,
+      scope: this,
+      callSite: (f, a) => f(...a)
+    });
+    for (const spaceMetadata of this._metadataStore.spaces) {
+      try {
+        (0, import_log10.log)("load space", {
+          spaceMetadata
+        }, {
+          file: "data-space-manager.ts",
+          line: 87,
+          scope: this,
+          callSite: (f, a) => f(...a)
+        });
+        const space = await this._constructSpace(spaceMetadata);
+        space.initializeDataPipelineAsync();
+      } catch (err) {
+        import_log10.log.error("Error loading space", {
+          spaceMetadata,
+          err
+        }, {
+          file: "data-space-manager.ts",
+          line: 91,
+          scope: this,
+          callSite: (f, a) => f(...a)
+        });
+      }
+    }
+    this._isOpen = true;
+    this.updated.emit();
+    import_log10.log.trace("dxos.echo.data-space-manager.open", import_protocols6.trace.end({
+      id: this._instanceId
+    }), {
+      file: "data-space-manager.ts",
+      line: 97,
+      scope: this,
+      callSite: (f, a) => f(...a)
+    });
+  }
+  async close() {
+    (0, import_log10.log)("close", {}, {
+      file: "data-space-manager.ts",
+      line: 102,
+      scope: this,
+      callSite: (f, a) => f(...a)
+    });
+    this._isOpen = false;
+    await this._ctx.dispose();
+    for (const space of this._spaces.values()) {
+      await space.close();
+    }
+  }
+  /**
+  * Creates a new space writing the genesis credentials to the control feed.
+  */
+  async createSpace() {
+    (0, import_node_assert10.default)(this._isOpen, "Not open.");
+    const spaceKey = await this._keyring.createKey();
+    const controlFeedKey = await this._keyring.createKey();
+    const dataFeedKey = await this._keyring.createKey();
+    const metadata = {
+      key: spaceKey,
+      genesisFeedKey: controlFeedKey,
+      controlFeedKey,
+      dataFeedKey
+    };
+    (0, import_log10.log)("creating space...", {
+      spaceKey
+    }, {
+      file: "data-space-manager.ts",
+      line: 126,
+      scope: this,
+      callSite: (f, a) => f(...a)
+    });
+    const space = await this._constructSpace(metadata);
+    const credentials = await spaceGenesis(this._keyring, this._signingContext, space.inner);
+    await this._metadataStore.addSpace(metadata);
+    const memberCredential = credentials[1];
+    (0, import_node_assert10.default)((0, import_credentials13.getCredentialAssertion)(memberCredential)["@type"] === "dxos.halo.credentials.SpaceMember");
+    await this._signingContext.recordCredential(memberCredential);
+    await space.initializeDataPipeline();
+    this.updated.emit();
+    return space;
+  }
+  // TODO(burdon): Rename join space.
+  async acceptSpace(opts) {
+    (0, import_log10.log)("accept space", {
+      opts
+    }, {
+      file: "data-space-manager.ts",
+      line: 145,
+      scope: this,
+      callSite: (f, a) => f(...a)
+    });
+    (0, import_node_assert10.default)(this._isOpen, "Not open.");
+    (0, import_node_assert10.default)(!this._spaces.has(opts.spaceKey), "Space already exists.");
+    const metadata = {
+      key: opts.spaceKey,
+      genesisFeedKey: opts.genesisFeedKey,
+      controlTimeframe: opts.controlTimeframe,
+      dataTimeframe: opts.dataTimeframe
+    };
+    const space = await this._constructSpace(metadata);
+    await this._metadataStore.addSpace(metadata);
+    space.initializeDataPipelineAsync();
+    this.updated.emit();
+    return space;
+  }
+  /**
+  * Wait until the space data pipeline is fully initialized.
+  * Used by invitation handler.
+  * TODO(dmaretskyi): Consider removing.
+  */
+  async waitUntilSpaceReady(spaceKey) {
+    await (0, import_context6.cancelWithContext)(this._ctx, this.updated.waitForCondition(() => {
+      const space = this._spaces.get(spaceKey);
+      return !!space && space.state === import_services7.SpaceState.READY;
+    }));
+  }
+  async _constructSpace(metadata) {
+    (0, import_log10.log)("construct space", {
+      metadata
+    }, {
+      file: "data-space-manager.ts",
+      line: 181,
+      scope: this,
+      callSite: (f, a) => f(...a)
+    });
+    const gossip = new import_teleport_extension_gossip.Gossip({
+      localPeerId: this._signingContext.deviceKey
+    });
+    const presence = new import_teleport_extension_gossip.Presence({
+      announceInterval: 500,
+      offlineTimeout: 5e3,
+      identityKey: this._signingContext.identityKey,
+      gossip
+    });
+    const controlFeed = metadata.controlFeedKey && await this._feedStore.openFeed(metadata.controlFeedKey, {
+      writable: true
+    });
+    const dataFeed = metadata.dataFeedKey && await this._feedStore.openFeed(metadata.dataFeedKey, {
+      writable: true,
+      sparse: true
+    });
+    const space = await this._spaceManager.constructSpace({
+      metadata,
+      swarmIdentity: {
+        peerKey: this._signingContext.deviceKey,
+        credentialProvider: createAuthProvider(this._signingContext.credentialSigner),
+        credentialAuthenticator: (0, import_util4.deferFunction)(() => dataSpace.authVerifier.verifier)
+      },
+      onNetworkConnection: (session) => {
+        session.addExtension("dxos.mesh.teleport.gossip", gossip.createExtension({
+          remotePeerId: session.remotePeerId
+        }));
+        session.addExtension("dxos.mesh.teleport.notarization", dataSpace.notarizationPlugin.createExtension());
+      },
+      onAuthFailure: () => {
+        import_log10.log.warn("auth failure", {}, {
+          file: "data-space-manager.ts",
+          line: 212,
+          scope: this,
+          callSite: (f, a) => f(...a)
+        });
+      },
+      memberKey: this._signingContext.identityKey
+    });
+    controlFeed && space.setControlFeed(controlFeed);
+    dataFeed && space.setDataFeed(dataFeed);
+    const dataSpace = new DataSpace({
+      inner: space,
+      metadataStore: this._metadataStore,
+      gossip,
+      presence,
+      keyring: this._keyring,
+      feedStore: this._feedStore,
+      signingContext: this._signingContext,
+      callbacks: {
+        beforeReady: async () => {
+          (0, import_log10.log)("before space ready", {
+            space: space.key
+          }, {
+            file: "data-space-manager.ts",
+            line: 229,
+            scope: this,
+            callSite: (f, a) => f(...a)
+          });
+          this._dataServiceSubscriptions.registerSpace(space.key, dataSpace.dataPipeline.databaseHost.createDataServiceHost());
+        },
+        afterReady: async () => {
+          (0, import_log10.log)("after space ready", {
+            space: space.key,
+            open: this._isOpen
+          }, {
+            file: "data-space-manager.ts",
+            line: 236,
+            scope: this,
+            callSite: (f, a) => f(...a)
+          });
+          if (this._isOpen) {
+            this.updated.emit();
+          }
+        }
+      },
+      cache: metadata.cache
+    });
+    await dataSpace.open();
+    if (metadata.controlTimeframe) {
+      dataSpace.inner.controlPipeline.state.setTargetTimeframe(metadata.controlTimeframe);
+    }
+    if (metadata.dataTimeframe) {
+      dataSpace.dataPipeline.setTargetTimeframe(metadata.dataTimeframe);
+    }
+    this._spaces.set(metadata.key, dataSpace);
+    return dataSpace;
+  }
+};
+__decorate2([
+  import_async9.synchronized
+], DataSpaceManager.prototype, "open", null);
+__decorate2([
+  import_async9.synchronized
+], DataSpaceManager.prototype, "close", null);
+__decorate2([
+  import_async9.synchronized
+], DataSpaceManager.prototype, "createSpace", null);
+__decorate2([
+  import_async9.synchronized
+], DataSpaceManager.prototype, "acceptSpace", null);
+DataSpaceManager = __decorate2([
+  (0, import_async9.trackLeaks)("open", "close")
+], DataSpaceManager);
+
+// packages/sdk/client-services/src/packlets/spaces/spaces-service.ts
+var import_async10 = require("@dxos/async");
+var import_codec_protobuf3 = require("@dxos/codec-protobuf");
+var import_debug5 = require("@dxos/debug");
+var import_echo_pipeline2 = require("@dxos/echo-pipeline");
+var import_log11 = require("@dxos/log");
+var import_protocols7 = require("@dxos/protocols");
+var import_services8 = require("@dxos/protocols/proto/dxos/client/services");
+var import_util5 = require("@dxos/util");
+var TIMEFRAME_UPDATE_DEBOUNCE_TIME = 500;
+var SpacesServiceImpl = class {
+  constructor(_identityManager, _spaceManager, _dataServiceSubscriptions, _getDataSpaceManager) {
+    this._identityManager = _identityManager;
+    this._spaceManager = _spaceManager;
+    this._dataServiceSubscriptions = _dataServiceSubscriptions;
+    this._getDataSpaceManager = _getDataSpaceManager;
+  }
+  async createSpace() {
+    if (!this._identityManager.identity) {
+      throw new Error("This device has no HALO identity available. See https://docs.dxos.org/guide/halo");
+    }
+    const dataSpaceManager = await this._getDataSpaceManager();
+    const space = await dataSpaceManager.createSpace();
+    return this._transformSpace(space);
+  }
+  async updateSpace(request) {
+    (0, import_debug5.todo)();
+  }
+  querySpaces() {
+    return new import_codec_protobuf3.Stream(({ next, ctx }) => {
+      const onUpdate = async () => {
+        const dataSpaceManager = await this._getDataSpaceManager();
+        const spaces = Array.from(dataSpaceManager.spaces.values()).map((space) => this._transformSpace(space));
+        (0, import_log11.log)("update", {
+          spaces
+        }, {
+          file: "spaces-service.ts",
+          line: 60,
+          scope: this,
+          callSite: (f, a) => f(...a)
+        });
+        next({
+          spaces
+        });
+      };
+      (0, import_async10.scheduleTask)(ctx, async () => {
+        const dataSpaceManager = await this._getDataSpaceManager();
+        const subscriptions = new import_async10.EventSubscriptions();
+        ctx.onDispose(() => subscriptions.clear());
+        const subscribeSpaces = () => {
+          subscriptions.clear();
+          for (const space of dataSpaceManager.spaces.values()) {
+            subscriptions.add(space.stateUpdate.on(ctx, onUpdate));
+            subscriptions.add(space.presence.updated.on(ctx, onUpdate));
+            subscriptions.add(space.dataPipeline.onNewEpoch.on(ctx, onUpdate));
+            space.inner.controlPipeline.state.timeframeUpdate.debounce(TIMEFRAME_UPDATE_DEBOUNCE_TIME).on(ctx, onUpdate);
+            if (space.dataPipeline.pipelineState) {
+              subscriptions.add(space.dataPipeline.pipelineState.timeframeUpdate.debounce(TIMEFRAME_UPDATE_DEBOUNCE_TIME).on(ctx, onUpdate));
+            }
+          }
+        };
+        dataSpaceManager.updated.on(ctx, () => {
+          subscribeSpaces();
+          void onUpdate();
+        });
+        subscribeSpaces();
+        void onUpdate();
+      });
+      if (!this._identityManager.identity) {
+        next({
+          spaces: []
+        });
+      }
+    });
+  }
+  async postMessage({ spaceKey, channel, message }) {
+    var _a;
+    const dataSpaceManager = await this._getDataSpaceManager();
+    const space = (_a = dataSpaceManager.spaces.get(spaceKey)) != null ? _a : (0, import_debug5.raise)(new import_echo_pipeline2.SpaceNotFoundError(spaceKey));
+    await space.postMessage(getChannelId(channel), message);
+  }
+  subscribeMessages({ spaceKey, channel }) {
+    return new import_codec_protobuf3.Stream(({ ctx, next }) => {
+      (0, import_async10.scheduleTask)(ctx, async () => {
+        var _a;
+        const dataSpaceManager = await this._getDataSpaceManager();
+        const space = (_a = dataSpaceManager.spaces.get(spaceKey)) != null ? _a : (0, import_debug5.raise)(new import_echo_pipeline2.SpaceNotFoundError(spaceKey));
+        const handle = space.listen(getChannelId(channel), (message) => {
+          next(message);
+        });
+        ctx.onDispose(() => handle.unsubscribe());
+      });
+    });
+  }
+  queryCredentials({ spaceKey }) {
+    return new import_codec_protobuf3.Stream(({ ctx, next }) => {
+      var _a;
+      const space = (_a = this._spaceManager.spaces.get(spaceKey)) != null ? _a : (0, import_debug5.raise)(new import_echo_pipeline2.SpaceNotFoundError(spaceKey));
+      const processor = space.spaceState.registerProcessor({
+        process: async (credential) => {
+          next(credential);
+        }
+      });
+      ctx.onDispose(() => processor.close());
+      (0, import_async10.scheduleTask)(ctx, () => processor.open());
+    });
+  }
+  async writeCredentials({ spaceKey, credentials }) {
+    var _a;
+    const space = (_a = this._spaceManager.spaces.get(spaceKey)) != null ? _a : (0, import_debug5.raise)(new import_echo_pipeline2.SpaceNotFoundError(spaceKey));
+    for (const credential of credentials != null ? credentials : []) {
+      await space.controlPipeline.writer.write({
+        credential: {
+          credential
+        }
+      });
+    }
+  }
+  async createEpoch({ spaceKey }) {
+    var _a;
+    const dataSpaceManager = await this._getDataSpaceManager();
+    const space = (_a = dataSpaceManager.spaces.get(spaceKey)) != null ? _a : (0, import_debug5.raise)(new import_echo_pipeline2.SpaceNotFoundError(spaceKey));
+    await space.createEpoch();
+  }
+  _transformSpace(space) {
+    var _a, _b, _c, _d, _e, _f, _g;
+    return {
+      spaceKey: space.key,
+      state: space.state,
+      error: space.error ? (0, import_protocols7.encodeError)(space.error) : void 0,
+      pipeline: {
+        currentEpoch: space.dataPipeline.currentEpoch,
+        appliedEpoch: space.dataPipeline.appliedEpoch,
+        controlFeeds: space.inner.controlPipeline.state.feeds.map((feed) => feed.key),
+        currentControlTimeframe: space.inner.controlPipeline.state.timeframe,
+        targetControlTimeframe: space.inner.controlPipeline.state.targetTimeframe,
+        totalControlTimeframe: space.inner.controlPipeline.state.endTimeframe,
+        dataFeeds: (_b = (_a = space.dataPipeline.pipelineState) == null ? void 0 : _a.feeds.map((feed) => feed.key)) != null ? _b : [],
+        startDataTimeframe: (_c = space.dataPipeline.pipelineState) == null ? void 0 : _c.startTimeframe,
+        currentDataTimeframe: (_d = space.dataPipeline.pipelineState) == null ? void 0 : _d.timeframe,
+        targetDataTimeframe: (_e = space.dataPipeline.pipelineState) == null ? void 0 : _e.targetTimeframe,
+        totalDataTimeframe: (_f = space.dataPipeline.pipelineState) == null ? void 0 : _f.endTimeframe
+      },
+      members: Array.from(space.inner.spaceState.members.values()).map((member) => {
+        var _a2, _b2, _c2;
+        return {
+          identity: {
+            identityKey: member.key,
+            profile: {
+              displayName: (_b2 = (_a2 = member.assertion.profile) == null ? void 0 : _a2.displayName) != null ? _b2 : (0, import_util5.humanize)(member.key)
+            }
+          },
+          presence: ((_c2 = this._identityManager.identity) == null ? void 0 : _c2.identityKey.equals(member.key)) || space.presence.getPeersOnline().filter(({ identityKey }) => identityKey.equals(member.key)).length > 0 ? import_services8.SpaceMember.PresenceState.ONLINE : import_services8.SpaceMember.PresenceState.OFFLINE
+        };
+      }),
+      creator: (_g = space.inner.spaceState.creator) == null ? void 0 : _g.key,
+      cache: space.cache,
+      metrics: space.metrics
+    };
+  }
+};
+var getChannelId = (channel) => `user-channel/${channel}`;
+
+// packages/sdk/client-services/src/packlets/services/service-context.ts
+var ServiceContext = class {
+  // prettier-ignore
+  constructor(storage, networkManager, signalManager, modelFactory) {
+    this.storage = storage;
+    this.networkManager = networkManager;
+    this.signalManager = signalManager;
+    this.modelFactory = modelFactory;
+    this.initialized = new import_async11.Trigger();
+    this.dataServiceSubscriptions = new import_echo_pipeline3.DataServiceSubscriptions();
+    this._handlerFactories = /* @__PURE__ */ new Map();
+    this._instanceId = import_keys8.PublicKey.random().toHex();
+    this.metadataStore = new import_echo_pipeline3.MetadataStore(storage.createDirectory("metadata"));
+    this.snapshotStore = new import_echo_pipeline3.SnapshotStore(storage.createDirectory("snapshots"));
+    this.blobStore = new import_teleport_extension_object_sync.BlobStore(storage.createDirectory("blobs"));
+    this.keyring = new import_keyring.Keyring(storage.createDirectory("keyring"));
+    this.feedStore = new import_feed_store3.FeedStore({
+      factory: new import_feed_store3.FeedFactory({
+        root: storage.createDirectory("feeds"),
+        signer: this.keyring,
+        hypercore: {
+          valueEncoding: import_echo_pipeline3.valueEncoding
+        }
+      })
+    });
+    this.spaceManager = new import_echo_pipeline3.SpaceManager({
+      feedStore: this.feedStore,
+      networkManager: this.networkManager,
+      blobStore: this.blobStore,
+      metadataStore: this.metadataStore,
+      modelFactory: this.modelFactory,
+      snapshotStore: this.snapshotStore
+    });
+    this.identityManager = new IdentityManager(this.metadataStore, this.keyring, this.feedStore, this.spaceManager);
+    this.invitations = new InvitationsHandler(this.networkManager);
+    this._handlerFactories.set(import_services9.Invitation.Kind.DEVICE, () => new DeviceInvitationProtocol(this.keyring, () => {
+      var _a;
+      return (_a = this.identityManager.identity) != null ? _a : (0, import_debug6.failUndefined)();
+    }, this._acceptIdentity.bind(this)));
+  }
+  async open() {
+    import_log12.log.trace("dxos.sdk.service-context.open", import_protocols8.trace.begin({
+      id: this._instanceId
+    }), {
+      file: "service-context.ts",
+      line: 126,
+      scope: this,
+      callSite: (f, a) => f(...a)
+    });
+    await this._checkStorageVersion();
+    (0, import_log12.log)("opening...", {}, {
+      file: "service-context.ts",
+      line: 130,
+      scope: this,
+      callSite: (f, a) => f(...a)
+    });
+    await this.signalManager.open();
+    await this.networkManager.open();
+    await this.spaceManager.open();
+    await this.identityManager.open();
+    if (this.identityManager.identity) {
+      await this._initialize();
+    }
+    (0, import_log12.log)("opened", {}, {
+      file: "service-context.ts",
+      line: 138,
+      scope: this,
+      callSite: (f, a) => f(...a)
+    });
+    import_log12.log.trace("dxos.sdk.service-context.open", import_protocols8.trace.end({
+      id: this._instanceId
+    }), {
+      file: "service-context.ts",
+      line: 139,
+      scope: this,
+      callSite: (f, a) => f(...a)
+    });
+  }
+  async close() {
+    var _a, _b;
+    (0, import_log12.log)("closing...", {}, {
+      file: "service-context.ts",
+      line: 143,
+      scope: this,
+      callSite: (f, a) => f(...a)
+    });
+    await ((_a = this._deviceSpaceSync) == null ? void 0 : _a.close());
+    await ((_b = this.dataSpaceManager) == null ? void 0 : _b.close());
+    await this.identityManager.close();
+    await this.spaceManager.close();
+    await this.feedStore.close();
+    await this.networkManager.close();
+    await this.signalManager.close();
+    this.dataServiceSubscriptions.clear();
+    (0, import_log12.log)("closed", {}, {
+      file: "service-context.ts",
+      line: 152,
+      scope: this,
+      callSite: (f, a) => f(...a)
+    });
+  }
+  async createIdentity(params = {}) {
+    const identity = await this.identityManager.createIdentity(params);
+    await this._initialize();
+    return identity;
+  }
+  getInvitationHandler(invitation) {
+    const factory = this._handlerFactories.get(invitation.kind);
+    (0, import_node_assert11.default)(factory, `Unknown invitation kind: ${invitation.kind}`);
+    return factory(invitation);
+  }
+  async _acceptIdentity(params) {
+    const identity = await this.identityManager.acceptIdentity(params);
+    await this._initialize();
+    return identity;
+  }
+  async _checkStorageVersion() {
+    await this.metadataStore.load();
+    if (this.metadataStore.version !== import_protocols8.STORAGE_VERSION) {
+      throw new Error(`Invalid storage version: current=${this.metadataStore.version}, expected=${import_protocols8.STORAGE_VERSION}`);
+    }
+  }
+  // Called when identity is created.
+  async _initialize() {
+    var _a;
+    (0, import_log12.log)("initializing spaces...", {}, {
+      file: "service-context.ts",
+      line: 185,
+      scope: this,
+      callSite: (f, a) => f(...a)
+    });
+    const identity = (_a = this.identityManager.identity) != null ? _a : (0, import_debug6.failUndefined)();
+    const signingContext = {
+      credentialSigner: identity.getIdentityCredentialSigner(),
+      identityKey: identity.identityKey,
+      deviceKey: identity.deviceKey,
+      profile: identity.profileDocument,
+      recordCredential: async (credential) => {
+        await identity.controlPipeline.writer.write({
+          credential: {
+            credential
+          }
+        });
+      }
+    };
+    this.dataSpaceManager = new DataSpaceManager(this.spaceManager, this.metadataStore, this.dataServiceSubscriptions, this.keyring, signingContext, this.feedStore);
+    await this.dataSpaceManager.open();
+    this._handlerFactories.set(import_services9.Invitation.Kind.SPACE, (invitation) => {
+      (0, import_node_assert11.default)(this.dataSpaceManager, "dataSpaceManager not initialized yet");
+      return new SpaceInvitationProtocol(this.dataSpaceManager, signingContext, this.keyring, invitation.spaceKey);
+    });
+    this.initialized.wake();
+    this._deviceSpaceSync = identity.space.spaceState.registerProcessor({
+      process: async (credential) => {
+        const assertion = (0, import_credentials14.getCredentialAssertion)(credential);
+        if (assertion["@type"] !== "dxos.halo.credentials.SpaceMember") {
+          return;
+        }
+        if (assertion.spaceKey.equals(identity.space.key)) {
+          return;
+        }
+        if (!this.dataSpaceManager) {
+          (0, import_log12.log)("dataSpaceManager not initialized yet, ignoring space admission", {
+            details: assertion
+          }, {
+            file: "service-context.ts",
+            line: 224,
+            scope: this,
+            callSite: (f, a) => f(...a)
+          });
+          return;
+        }
+        if (this.dataSpaceManager.spaces.has(assertion.spaceKey)) {
+          (0, import_log12.log)("space already exists, ignoring space admission", {
+            details: assertion
+          }, {
+            file: "service-context.ts",
+            line: 228,
+            scope: this,
+            callSite: (f, a) => f(...a)
+          });
+          return;
+        }
+        try {
+          (0, import_log12.log)("accepting space recorded in halo", {
+            details: assertion
+          }, {
+            file: "service-context.ts",
+            line: 233,
+            scope: this,
+            callSite: (f, a) => f(...a)
+          });
+          await this.dataSpaceManager.acceptSpace({
+            spaceKey: assertion.spaceKey,
+            genesisFeedKey: assertion.genesisFeedKey
+          });
+        } catch (err) {
+          import_log12.log.catch(err, {}, {
+            file: "service-context.ts",
+            line: 239,
+            scope: this,
+            callSite: (f, a) => f(...a)
+          });
+        }
+      }
+    });
+    await this._deviceSpaceSync.open();
+  }
+};
+
+// packages/sdk/client-services/src/packlets/services/service-host.ts
+var import_node_assert13 = __toESM(require("node:assert"));
+var import_async17 = require("@dxos/async");
+var import_client_protocol5 = require("@dxos/client-protocol");
+var import_echo_pipeline4 = require("@dxos/echo-pipeline");
+var import_keys12 = require("@dxos/keys");
+var import_log15 = require("@dxos/log");
+var import_messaging = require("@dxos/messaging");
+var import_network_manager2 = require("@dxos/network-manager");
+var import_protocols9 = require("@dxos/protocols");
+var import_services12 = require("@dxos/protocols/proto/dxos/client/services");
+
+// packages/sdk/client-services/src/packlets/devices/devices-service.ts
+var import_async12 = require("@dxos/async");
+var import_codec_protobuf4 = require("@dxos/codec-protobuf");
+var import_services10 = require("@dxos/protocols/proto/dxos/client/services");
+var DevicesServiceImpl = class {
+  constructor(_identityManager) {
+    this._identityManager = _identityManager;
+  }
+  updateDevice(request) {
+    throw new Error("Method not implemented.");
+  }
+  queryDevices() {
+    return new import_codec_protobuf4.Stream(({ next }) => {
+      const update = () => {
+        var _a;
+        const deviceKeys = (_a = this._identityManager.identity) == null ? void 0 : _a.authorizedDeviceKeys;
+        if (!deviceKeys) {
+          next({
+            devices: []
+          });
+        } else {
+          next({
+            devices: Array.from(deviceKeys.values()).map((key) => {
+              var _a2;
+              return {
+                deviceKey: key,
+                kind: ((_a2 = this._identityManager.identity) == null ? void 0 : _a2.deviceKey.equals(key)) ? import_services10.DeviceKind.CURRENT : import_services10.DeviceKind.TRUSTED
+              };
+            })
+          });
+        }
+      };
+      const subscriptions = new import_async12.EventSubscriptions();
+      subscriptions.add(this._identityManager.stateUpdate.on(() => {
+        update();
+        if (this._identityManager.identity) {
+          subscriptions.add(this._identityManager.identity.stateUpdate.on(() => {
+            update();
+          }));
+        }
+      }));
+      update();
+      return () => subscriptions.clear();
+    });
+  }
+};
+
+// packages/sdk/client-services/src/packlets/devtools/devtools.ts
+var import_async15 = require("@dxos/async");
+var import_codec_protobuf10 = require("@dxos/codec-protobuf");
+
+// packages/sdk/client-services/src/packlets/devtools/feeds.ts
+var import_async13 = require("@dxos/async");
+var import_codec_protobuf5 = require("@dxos/codec-protobuf");
+var import_feed_store4 = require("@dxos/feed-store");
+var import_keys9 = require("@dxos/keys");
+var import_util6 = require("@dxos/util");
+var subscribeToFeeds = ({ feedStore }, { feedKeys }) => {
+  return new import_codec_protobuf5.Stream(({ next }) => {
+    const subscriptions = new import_async13.EventSubscriptions();
+    const feedMap = new import_util6.ComplexMap(import_keys9.PublicKey.hash);
+    const update = () => {
+      const { feeds } = feedStore;
+      feeds.filter((feed) => !(feedKeys == null ? void 0 : feedKeys.length) || feedKeys.some((feedKey) => feedKey.equals(feed.key))).forEach((feed) => {
+        if (!feedMap.has(feed.key)) {
+          feedMap.set(feed.key, feed);
+          feed.on("close", update);
+          subscriptions.add(() => feed.off("close", update));
+        }
+      });
+      next({
+        feeds: Array.from(feedMap.values()).map((feed) => {
+          var _a, _b;
+          return {
+            feedKey: feed.key,
+            length: feed.properties.length,
+            bytes: feed.core.byteLength,
+            downloaded: (_b = (_a = feed.core.bitfield) == null ? void 0 : _a.data.toBuffer()) != null ? _b : new Uint8Array()
+          };
+        })
+      });
+    };
+    subscriptions.add(feedStore.feedOpened.on(update));
+    update();
+    return () => {
+      subscriptions.clear();
+    };
+  });
+};
+var subscribeToFeedBlocks = ({ feedStore }, { feedKey, maxBlocks = 10 }) => {
+  return new import_codec_protobuf5.Stream(({ next }) => {
+    if (!feedKey) {
+      return;
+    }
+    const subscriptions = new import_async13.EventSubscriptions();
+    const timeout = setTimeout(async () => {
+      const feed = feedStore.getFeed(feedKey);
+      if (!feed) {
+        return;
+      }
+      const update = async () => {
+        const iterator = new import_feed_store4.FeedIterator(feed);
+        await iterator.open();
+        const blocks = [];
+        for await (const block of iterator) {
+          blocks.push(block);
+          if (blocks.length >= feed.properties.length) {
+            break;
+          }
+        }
+        next({
+          blocks: blocks.slice(-maxBlocks)
+        });
+        await iterator.close();
+      };
+      feed.on("append", update);
+      subscriptions.add(() => feed.off("append", update));
+      feed.on("truncate", update);
+      subscriptions.add(() => feed.off("truncate", update));
+      await update();
+    });
+    return () => {
+      subscriptions.clear();
+      clearTimeout(timeout);
+    };
+  });
+};
+
+// packages/sdk/client-services/src/packlets/devtools/keys.ts
+var import_async14 = require("@dxos/async");
+var import_codec_protobuf6 = require("@dxos/codec-protobuf");
+var subscribeToKeyringKeys = ({ keyring }) => new import_codec_protobuf6.Stream(({ next, ctx }) => {
+  const update = async () => {
+    next({
+      keys: await keyring.list()
+    });
+  };
+  keyring.keysUpdate.on(ctx, update);
+  (0, import_async14.scheduleTask)(ctx, update);
+});
+
+// packages/sdk/client-services/src/packlets/devtools/metadata.ts
+var import_codec_protobuf7 = require("@dxos/codec-protobuf");
+var subscribeToMetadata = ({ context }) => new import_codec_protobuf7.Stream(({ next, ctx }) => {
+  context.metadataStore.update.on(ctx, (data) => next({
+    metadata: data
+  }));
+  next({
+    metadata: context.metadataStore.metadata
+  });
+});
+
+// packages/sdk/client-services/src/packlets/devtools/network.ts
+var import_codec_protobuf8 = require("@dxos/codec-protobuf");
+var import_context7 = require("@dxos/context");
+var import_keys10 = require("@dxos/keys");
+var subscribeToNetworkStatus = ({ signalManager }) => new import_codec_protobuf8.Stream(({ next, close }) => {
+  const update = () => {
+    try {
+      const status = signalManager.getStatus();
+      next({
+        servers: status
+      });
+    } catch (err) {
+      close(err);
+    }
+  };
+  signalManager.statusChanged.on(() => update());
+  update();
+});
+var subscribeToSignal = ({ signalManager }) => new import_codec_protobuf8.Stream(({ next }) => {
+  const ctx = new import_context7.Context();
+  signalManager.onMessage.on(ctx, (message) => {
+    next({
+      message: {
+        author: message.author.asUint8Array(),
+        recipient: message.recipient.asUint8Array(),
+        payload: message.payload
+      },
+      receivedAt: new Date()
+    });
+  });
+  signalManager.swarmEvent.on(ctx, (swarmEvent) => {
+    next({
+      swarmEvent: swarmEvent.swarmEvent,
+      receivedAt: new Date()
+    });
+  });
+  return () => {
+    return ctx.dispose();
+  };
+});
+var subscribeToSwarmInfo = ({ networkManager }) => new import_codec_protobuf8.Stream(({ next }) => {
+  var _a;
+  const update = () => {
+    var _a2;
+    const info = (_a2 = networkManager.connectionLog) == null ? void 0 : _a2.swarms;
+    if (info) {
+      next({
+        data: info
+      });
+    }
+  };
+  (_a = networkManager.connectionLog) == null ? void 0 : _a.update.on(update);
+  update();
+});
+
+// packages/sdk/client-services/src/packlets/devtools/spaces.ts
+var import_codec_protobuf9 = require("@dxos/codec-protobuf");
+var subscribeToSpaces = (context, { spaceKeys = [] }) => {
+  return new import_codec_protobuf9.Stream(({ next }) => {
+    let unsubscribe;
+    const update = async () => {
+      const spaces = [
+        ...context.spaceManager.spaces.values()
+      ];
+      const filteredSpaces = spaces.filter((space) => !(spaceKeys == null ? void 0 : spaceKeys.length) || spaceKeys.some((spaceKey) => spaceKey.equals(space.key)));
+      next({
+        spaces: filteredSpaces.map((space) => {
+          const spaceMetadata = context.metadataStore.spaces.find((spaceMetadata2) => spaceMetadata2.key.equals(space.key));
+          return {
+            key: space.key,
+            isOpen: space.isOpen,
+            timeframe: spaceMetadata == null ? void 0 : spaceMetadata.dataTimeframe,
+            genesisFeed: space.genesisFeedKey,
+            controlFeed: space.controlFeedKey,
+            dataFeed: space.dataFeedKey
+          };
+        })
+      });
+    };
+    const timeout = setTimeout(async () => {
+      await context.initialized.wait();
+      unsubscribe = context.dataSpaceManager.updated.on(() => update());
+      await update();
+    });
+    return () => {
+      unsubscribe == null ? void 0 : unsubscribe();
+      clearTimeout(timeout);
+    };
+  });
+};
+
+// packages/sdk/client-services/src/packlets/devtools/devtools.ts
+var DevtoolsHostEvents = class {
+  constructor() {
+    this.ready = new import_async15.Event();
   }
-  // TODO(burdon): Remove.
-  get spaces() {
-    return this._spaces;
+};
+var DevtoolsServiceImpl = class {
+  constructor(params) {
+    this.params = params;
   }
-  async open() {
-    (0, import_log12.log)("open", {}, {
-      file: "data-space-manager.ts",
-      line: 80,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    import_log12.log.trace("dxos.echo.data-space-manager.open", import_protocols6.trace.begin({
-      id: this._instanceId
-    }), {
-      file: "data-space-manager.ts",
-      line: 81,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    await this._metadataStore.load();
-    (0, import_log12.log)("metadata loaded", {
-      spaces: this._metadataStore.spaces.length
-    }, {
-      file: "data-space-manager.ts",
-      line: 83,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    for (const spaceMetadata of this._metadataStore.spaces) {
-      try {
-        (0, import_log12.log)("load space", {
-          spaceMetadata
-        }, {
-          file: "data-space-manager.ts",
-          line: 87,
-          scope: this,
-          callSite: (f, a) => f(...a)
-        });
-        const space = await this._constructSpace(spaceMetadata);
-        space.initializeDataPipelineAsync();
-      } catch (err) {
-        import_log12.log.error("Error loading space", {
-          spaceMetadata,
-          err
-        }, {
-          file: "data-space-manager.ts",
-          line: 91,
-          scope: this,
-          callSite: (f, a) => f(...a)
+  events(request) {
+    return new import_codec_protobuf10.Stream(({ next }) => {
+      this.params.events.ready.on(() => {
+        next({
+          ready: {}
         });
-      }
-    }
-    this._isOpen = true;
-    this.updated.emit();
-    import_log12.log.trace("dxos.echo.data-space-manager.open", import_protocols6.trace.end({
-      id: this._instanceId
-    }), {
-      file: "data-space-manager.ts",
-      line: 97,
-      scope: this,
-      callSite: (f, a) => f(...a)
+      });
     });
   }
-  async close() {
-    (0, import_log12.log)("close", {}, {
-      file: "data-space-manager.ts",
-      line: 102,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    this._isOpen = false;
-    await this._ctx.dispose();
-    for (const space of this._spaces.values()) {
-      await space.close();
-    }
+  getConfig(request) {
+    throw new Error();
   }
-  /**
-  * Creates a new space writing the genesis credentials to the control feed.
-  */
-  async createSpace() {
-    (0, import_node_assert11.default)(this._isOpen, "Not open.");
-    const spaceKey = await this._keyring.createKey();
-    const controlFeedKey = await this._keyring.createKey();
-    const dataFeedKey = await this._keyring.createKey();
-    const metadata = {
-      key: spaceKey,
-      genesisFeedKey: controlFeedKey,
-      controlFeedKey,
-      dataFeedKey
+  async getStorageInfo() {
+    var _a, _b, _c, _d, _e;
+    const storageUsage = (_c = await ((_b = (_a = this.params.context.storage).getDiskInfo) == null ? void 0 : _b.call(_a))) != null ? _c : {
+      used: 0
+    };
+    const navigatorInfo = typeof navigator === "object" ? await navigator.storage.estimate() : void 0;
+    return {
+      type: this.params.context.storage.type,
+      storageUsage: storageUsage.used,
+      originUsage: (_d = navigatorInfo == null ? void 0 : navigatorInfo.usage) != null ? _d : 0,
+      usageQuota: (_e = navigatorInfo == null ? void 0 : navigatorInfo.quota) != null ? _e : 0
     };
-    (0, import_log12.log)("creating space...", {
-      spaceKey
-    }, {
-      file: "data-space-manager.ts",
-      line: 126,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    const space = await this._constructSpace(metadata);
-    const credentials = await spaceGenesis(this._keyring, this._signingContext, space.inner);
-    await this._metadataStore.addSpace(metadata);
-    const memberCredential = credentials[1];
-    (0, import_node_assert11.default)((0, import_credentials13.getCredentialAssertion)(memberCredential)["@type"] === "dxos.halo.credentials.SpaceMember");
-    await this._signingContext.recordCredential(memberCredential);
-    await space.initializeDataPipeline();
-    this.updated.emit();
-    return space;
   }
-  // TODO(burdon): Rename join space.
-  async acceptSpace(opts) {
-    (0, import_log12.log)("accept space", {
-      opts
-    }, {
-      file: "data-space-manager.ts",
-      line: 145,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    (0, import_node_assert11.default)(this._isOpen, "Not open.");
-    (0, import_node_assert11.default)(!this._spaces.has(opts.spaceKey), "Space already exists.");
-    const metadata = {
-      key: opts.spaceKey,
-      genesisFeedKey: opts.genesisFeedKey,
-      controlTimeframe: opts.controlTimeframe,
-      dataTimeframe: opts.dataTimeframe
+  async getBlobs() {
+    return {
+      blobs: await this.params.context.blobStore.list()
     };
-    const space = await this._constructSpace(metadata);
-    await this._metadataStore.addSpace(metadata);
-    space.initializeDataPipelineAsync();
-    this.updated.emit();
-    return space;
   }
-  /**
-  * Wait until the space data pipeline is fully initialized.
-  * Used by invitation handler.
-  * TODO(dmaretskyi): Consider removing.
-  */
-  async waitUntilSpaceReady(spaceKey) {
-    await (0, import_context7.cancelWithContext)(this._ctx, this.updated.waitForCondition(() => {
-      const space = this._spaces.get(spaceKey);
-      return !!space && space.state === import_services9.SpaceState.READY;
-    }));
+  async getSnapshots() {
+    return {
+      snapshots: await this.params.context.snapshotStore.listSnapshots()
+    };
   }
-  async _constructSpace(metadata) {
-    (0, import_log12.log)("construct space", {
-      metadata
-    }, {
-      file: "data-space-manager.ts",
-      line: 181,
-      scope: this,
-      callSite: (f, a) => f(...a)
+  resetStorage(request) {
+    throw new Error();
+  }
+  enableDebugLogging(request) {
+    throw new Error();
+  }
+  disableDebugLogging(request) {
+    throw new Error();
+  }
+  subscribeToKeyringKeys(request) {
+    return subscribeToKeyringKeys({
+      keyring: this.params.context.keyring
     });
-    const gossip = new import_teleport_extension_gossip.Gossip({
-      localPeerId: this._signingContext.deviceKey
+  }
+  subscribeToCredentialMessages(request) {
+    throw new Error();
+  }
+  subscribeToSpaces(request) {
+    return subscribeToSpaces(this.params.context, request);
+  }
+  subscribeToItems(request) {
+    throw new Error();
+  }
+  subscribeToFeeds(request) {
+    return subscribeToFeeds({
+      feedStore: this.params.context.feedStore
+    }, request);
+  }
+  subscribeToFeedBlocks(request) {
+    return subscribeToFeedBlocks({
+      feedStore: this.params.context.feedStore
+    }, request);
+  }
+  getSpaceSnapshot(request) {
+    throw new Error();
+  }
+  saveSpaceSnapshot(request) {
+    throw new Error();
+  }
+  clearSnapshots(request) {
+    throw new Error();
+  }
+  getNetworkPeers(request) {
+    throw new Error();
+  }
+  subscribeToNetworkTopics(request) {
+    throw new Error();
+  }
+  subscribeToSignalStatus(request) {
+    return subscribeToNetworkStatus({
+      signalManager: this.params.context.signalManager
     });
-    const presence = new import_teleport_extension_gossip.Presence({
-      announceInterval: 500,
-      offlineTimeout: 5e3,
-      identityKey: this._signingContext.identityKey,
-      gossip
+  }
+  subscribeToSignal() {
+    return subscribeToSignal({
+      signalManager: this.params.context.signalManager
     });
-    const controlFeed = metadata.controlFeedKey && await this._feedStore.openFeed(metadata.controlFeedKey, {
-      writable: true
+  }
+  subscribeToSwarmInfo() {
+    return subscribeToSwarmInfo({
+      networkManager: this.params.context.networkManager
     });
-    const dataFeed = metadata.dataFeedKey && await this._feedStore.openFeed(metadata.dataFeedKey, {
-      writable: true,
-      sparse: true
+  }
+  subscribeToMetadata() {
+    return subscribeToMetadata({
+      context: this.params.context
     });
-    const space = await this._spaceManager.constructSpace({
-      metadata,
-      swarmIdentity: {
-        peerKey: this._signingContext.deviceKey,
-        credentialProvider: createAuthProvider(this._signingContext.credentialSigner),
-        credentialAuthenticator: (0, import_util6.deferFunction)(() => dataSpace.authVerifier.verifier)
-      },
-      onNetworkConnection: (session) => {
-        session.addExtension("dxos.mesh.teleport.gossip", gossip.createExtension({
-          remotePeerId: session.remotePeerId
-        }));
-        session.addExtension("dxos.mesh.teleport.notarization", dataSpace.notarizationPlugin.createExtension());
-      },
-      onAuthFailure: () => {
-        import_log12.log.warn("auth failure", {}, {
-          file: "data-space-manager.ts",
-          line: 212,
-          scope: this,
-          callSite: (f, a) => f(...a)
-        });
-      },
-      memberKey: this._signingContext.identityKey
+  }
+};
+
+// packages/sdk/client-services/src/packlets/locks/node.ts
+var import_node_assert12 = __toESM(require("node:assert"));
+var import_lock_file = require("@dxos/lock-file");
+var import_log13 = require("@dxos/log");
+var __decorate3 = function(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
+    r = Reflect.decorate(decorators, target, key, desc);
+  else
+    for (var i = decorators.length - 1; i >= 0; i--)
+      if (d = decorators[i])
+        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var Lock = class {
+  constructor({ lockKey: lockPath, onAcquire, onRelease }) {
+    this._lockPath = lockPath;
+    this._onAcquire = onAcquire;
+    this._onRelease = onRelease;
+  }
+  get lockKey() {
+    return this._lockPath;
+  }
+  async acquire() {
+    var _a;
+    (0, import_log13.log)("acquiring lock...", {}, {
+      file: "node.ts",
+      line: 32,
+      scope: this,
+      callSite: (f, a) => f(...a)
     });
-    controlFeed && space.setControlFeed(controlFeed);
-    dataFeed && space.setDataFeed(dataFeed);
-    const dataSpace = new DataSpace({
-      inner: space,
-      metadataStore: this._metadataStore,
-      gossip,
-      presence,
-      keyring: this._keyring,
-      feedStore: this._feedStore,
-      signingContext: this._signingContext,
-      callbacks: {
-        beforeReady: async () => {
-          (0, import_log12.log)("before space ready", {
-            space: space.key
-          }, {
-            file: "data-space-manager.ts",
-            line: 229,
-            scope: this,
-            callSite: (f, a) => f(...a)
-          });
-          this._dataServiceSubscriptions.registerSpace(space.key, dataSpace.dataPipeline.databaseHost.createDataServiceHost());
-        },
-        afterReady: async () => {
-          (0, import_log12.log)("after space ready", {
-            space: space.key,
-            open: this._isOpen
-          }, {
-            file: "data-space-manager.ts",
-            line: 236,
-            scope: this,
-            callSite: (f, a) => f(...a)
-          });
-          if (this._isOpen) {
-            this.updated.emit();
-          }
-        }
-      },
-      cache: metadata.cache
+    this._fileHandle = await import_lock_file.LockFile.acquire(this._lockPath);
+    await ((_a = this._onAcquire) == null ? void 0 : _a.call(this));
+    (0, import_log13.log)("acquired lock", {}, {
+      file: "node.ts",
+      line: 37,
+      scope: this,
+      callSite: (f, a) => f(...a)
     });
-    await dataSpace.open();
-    if (metadata.controlTimeframe) {
-      dataSpace.inner.controlPipeline.state.setTargetTimeframe(metadata.controlTimeframe);
-    }
-    if (metadata.dataTimeframe) {
-      dataSpace.dataPipeline.setTargetTimeframe(metadata.dataTimeframe);
-    }
-    this._spaces.set(metadata.key, dataSpace);
-    return dataSpace;
+  }
+  async release() {
+    var _a;
+    await ((_a = this._onRelease) == null ? void 0 : _a.call(this));
+    (0, import_node_assert12.default)(this._fileHandle, "Lock is not acquired");
+    await import_lock_file.LockFile.release(this._fileHandle);
   }
 };
 __decorate3([
-  import_async14.synchronized
-], DataSpaceManager.prototype, "open", null);
-__decorate3([
-  import_async14.synchronized
-], DataSpaceManager.prototype, "close", null);
-__decorate3([
-  import_async14.synchronized
-], DataSpaceManager.prototype, "createSpace", null);
-__decorate3([
-  import_async14.synchronized
-], DataSpaceManager.prototype, "acceptSpace", null);
-DataSpaceManager = __decorate3([
-  (0, import_async14.trackLeaks)("open", "close")
-], DataSpaceManager);
+  import_log13.logInfo
+], Lock.prototype, "lockKey", null);
 
-// packages/sdk/client-services/src/packlets/spaces/spaces-service.ts
-var import_async15 = require("@dxos/async");
-var import_codec_protobuf12 = require("@dxos/codec-protobuf");
-var import_debug5 = require("@dxos/debug");
-var import_echo_pipeline2 = require("@dxos/echo-pipeline");
-var import_log13 = require("@dxos/log");
-var import_protocols7 = require("@dxos/protocols");
-var import_services10 = require("@dxos/protocols/proto/dxos/client/services");
+// packages/sdk/client-services/src/packlets/logging/logging-service.ts
+var import_async16 = require("@dxos/async");
+var import_codec_protobuf11 = require("@dxos/codec-protobuf");
+var import_log14 = require("@dxos/log");
+var import_services11 = require("@dxos/protocols/proto/dxos/client/services");
 var import_util7 = require("@dxos/util");
-var TIMEFRAME_UPDATE_DEBOUNCE_TIME = 500;
-var SpacesServiceImpl = class {
-  constructor(_identityManager, _spaceManager, _dataServiceSubscriptions, _getDataSpaceManager) {
-    this._identityManager = _identityManager;
-    this._spaceManager = _spaceManager;
-    this._dataServiceSubscriptions = _dataServiceSubscriptions;
-    this._getDataSpaceManager = _getDataSpaceManager;
+var LoggingServiceImpl = class {
+  constructor() {
+    this._logs = new import_async16.Event();
+    this._logProcessor = (_config, entry2) => {
+      this._logs.emit(entry2);
+    };
   }
-  async createSpace() {
-    if (!this._identityManager.identity) {
-      throw new Error("This device has no HALO identity available. See https://docs.dxos.org/guide/halo");
-    }
-    const dataSpaceManager = await this._getDataSpaceManager();
-    const space = await dataSpaceManager.createSpace();
-    return this._transformSpace(space);
+  async open() {
+    import_log14.log.runtimeConfig.processors.push(this._logProcessor);
   }
-  async updateSpace(request) {
-    (0, import_debug5.todo)();
+  async close() {
+    const index = import_log14.log.runtimeConfig.processors.findIndex((processor) => processor === this._logProcessor);
+    import_log14.log.runtimeConfig.processors.splice(index, 1);
   }
-  querySpaces() {
-    return new import_codec_protobuf12.Stream(({ next, ctx }) => {
-      const onUpdate = async () => {
-        const dataSpaceManager = await this._getDataSpaceManager();
-        const spaces = Array.from(dataSpaceManager.spaces.values()).map((space) => this._transformSpace(space));
-        (0, import_log13.log)("update", {
-          spaces
-        }, {
-          file: "spaces-service.ts",
-          line: 60,
-          scope: this,
-          callSite: (f, a) => f(...a)
-        });
-        next({
-          spaces
-        });
-      };
-      (0, import_async15.scheduleTask)(ctx, async () => {
-        const dataSpaceManager = await this._getDataSpaceManager();
-        const subscriptions = new import_async15.EventSubscriptions();
-        ctx.onDispose(() => subscriptions.clear());
-        const subscribeSpaces = () => {
-          subscriptions.clear();
-          for (const space of dataSpaceManager.spaces.values()) {
-            subscriptions.add(space.stateUpdate.on(ctx, onUpdate));
-            subscriptions.add(space.presence.updated.on(ctx, onUpdate));
-            subscriptions.add(space.dataPipeline.onNewEpoch.on(ctx, onUpdate));
-            space.inner.controlPipeline.state.timeframeUpdate.debounce(TIMEFRAME_UPDATE_DEBOUNCE_TIME).on(ctx, onUpdate);
-            if (space.dataPipeline.pipelineState) {
-              subscriptions.add(space.dataPipeline.pipelineState.timeframeUpdate.debounce(TIMEFRAME_UPDATE_DEBOUNCE_TIME).on(ctx, onUpdate));
-            }
+  queryLogs(request) {
+    return new import_codec_protobuf11.Stream(({ ctx, next }) => {
+      const handler = (entry2) => {
+        var _a, _b, _c, _d, _e;
+        if (LOG_PROCESSING > 0) {
+          return;
+        }
+        if (((_a = entry2.meta) == null ? void 0 : _a.file.includes("logging-service")) || entry2.context && Object.values(entry2.context).some((value) => typeof value === "string" && value.includes("LoggingService"))) {
+          return;
+        }
+        if (!shouldLog(entry2, request)) {
+          return;
+        }
+        const record = {
+          ...entry2,
+          context: (0, import_util7.jsonify)((0, import_log14.getContextFromEntry)(entry2)),
+          timestamp: new Date(),
+          meta: {
+            // TODO(dmaretskyi): Fix proto.
+            file: (_c = (_b = entry2.meta) == null ? void 0 : _b.file) != null ? _c : "",
+            line: (_e = (_d = entry2.meta) == null ? void 0 : _d.line) != null ? _e : 0
           }
         };
-        dataSpaceManager.updated.on(ctx, () => {
-          subscribeSpaces();
-          void onUpdate();
-        });
-        subscribeSpaces();
-        void onUpdate();
-      });
-      if (!this._identityManager.identity) {
-        next({
-          spaces: []
-        });
-      }
+        try {
+          LOG_PROCESSING++;
+          next(record);
+        } finally {
+          LOG_PROCESSING--;
+        }
+      };
+      this._logs.on(ctx, handler);
     });
   }
-  async postMessage({ spaceKey, channel, message }) {
-    var _a;
-    const dataSpaceManager = await this._getDataSpaceManager();
-    const space = (_a = dataSpaceManager.spaces.get(spaceKey)) != null ? _a : (0, import_debug5.raise)(new import_echo_pipeline2.SpaceNotFoundError(spaceKey));
-    await space.postMessage(getChannelId(channel), message);
+};
+var matchFilter = (filter, level, path, options) => {
+  switch (options) {
+    case import_services11.QueryLogsRequest.MatchingOptions.INCLUSIVE:
+      return level >= filter.level && (!filter.pattern || path.includes(filter.pattern));
+    case import_services11.QueryLogsRequest.MatchingOptions.EXPLICIT:
+      return level === filter.level && (!filter.pattern || path.includes(filter.pattern));
   }
-  subscribeMessages({ spaceKey, channel }) {
-    return new import_codec_protobuf12.Stream(({ ctx, next }) => {
-      (0, import_async15.scheduleTask)(ctx, async () => {
-        var _a;
-        const dataSpaceManager = await this._getDataSpaceManager();
-        const space = (_a = dataSpaceManager.spaces.get(spaceKey)) != null ? _a : (0, import_debug5.raise)(new import_echo_pipeline2.SpaceNotFoundError(spaceKey));
-        const handle = space.listen(getChannelId(channel), (message) => {
-          next(message);
-        });
-        ctx.onDispose(() => handle.unsubscribe());
-      });
+};
+var shouldLog = (entry2, request) => {
+  var _a;
+  const options = (_a = request.options) != null ? _a : import_services11.QueryLogsRequest.MatchingOptions.INCLUSIVE;
+  if (request.filters === void 0) {
+    return options === import_services11.QueryLogsRequest.MatchingOptions.INCLUSIVE;
+  } else {
+    return request.filters.some((filter) => {
+      var _a2, _b;
+      return matchFilter(filter, entry2.level, (_b = (_a2 = entry2.meta) == null ? void 0 : _a2.file) != null ? _b : "", options);
     });
   }
-  queryCredentials({ spaceKey }) {
-    return new import_codec_protobuf12.Stream(({ ctx, next }) => {
-      var _a;
-      const space = (_a = this._spaceManager.spaces.get(spaceKey)) != null ? _a : (0, import_debug5.raise)(new import_echo_pipeline2.SpaceNotFoundError(spaceKey));
-      const processor = space.spaceState.registerProcessor({
-        process: async (credential) => {
-          next(credential);
-        }
-      });
-      ctx.onDispose(() => processor.close());
-      (0, import_async15.scheduleTask)(ctx, () => processor.open());
+};
+var LOG_PROCESSING = 0;
+
+// packages/sdk/client-services/src/packlets/network/network-service.ts
+var import_codec_protobuf12 = require("@dxos/codec-protobuf");
+var NetworkServiceImpl = class {
+  constructor(networkManager, signalManager) {
+    this.networkManager = networkManager;
+    this.signalManager = signalManager;
+  }
+  queryStatus() {
+    return new import_codec_protobuf12.Stream(({ next }) => {
+      const update = () => {
+        next({
+          swarm: this.networkManager.connectionState,
+          signaling: this.signalManager.getStatus().map(({ host, state }) => ({
+            server: host,
+            state
+          }))
+        });
+      };
+      const unsubscribeSwarm = this.networkManager.connectionStateChanged.on(() => update());
+      const unsubscribeSignal = this.signalManager.statusChanged.on(() => update());
+      update();
+      return () => {
+        unsubscribeSwarm();
+        unsubscribeSignal();
+      };
     });
   }
-  async writeCredentials({ spaceKey, credentials }) {
-    var _a;
-    const space = (_a = this._spaceManager.spaces.get(spaceKey)) != null ? _a : (0, import_debug5.raise)(new import_echo_pipeline2.SpaceNotFoundError(spaceKey));
-    for (const credential of credentials != null ? credentials : []) {
-      await space.controlPipeline.writer.write({
-        credential: {
-          credential
-        }
-      });
-    }
-  }
-  async createEpoch({ spaceKey }) {
-    var _a;
-    const dataSpaceManager = await this._getDataSpaceManager();
-    const space = (_a = dataSpaceManager.spaces.get(spaceKey)) != null ? _a : (0, import_debug5.raise)(new import_echo_pipeline2.SpaceNotFoundError(spaceKey));
-    await space.createEpoch();
-  }
-  _transformSpace(space) {
-    var _a, _b, _c, _d, _e, _f, _g;
-    return {
-      spaceKey: space.key,
-      state: space.state,
-      error: space.error ? (0, import_protocols7.encodeError)(space.error) : void 0,
-      pipeline: {
-        currentEpoch: space.dataPipeline.currentEpoch,
-        appliedEpoch: space.dataPipeline.appliedEpoch,
-        controlFeeds: space.inner.controlPipeline.state.feeds.map((feed) => feed.key),
-        currentControlTimeframe: space.inner.controlPipeline.state.timeframe,
-        targetControlTimeframe: space.inner.controlPipeline.state.targetTimeframe,
-        totalControlTimeframe: space.inner.controlPipeline.state.endTimeframe,
-        dataFeeds: (_b = (_a = space.dataPipeline.pipelineState) == null ? void 0 : _a.feeds.map((feed) => feed.key)) != null ? _b : [],
-        startDataTimeframe: (_c = space.dataPipeline.pipelineState) == null ? void 0 : _c.startTimeframe,
-        currentDataTimeframe: (_d = space.dataPipeline.pipelineState) == null ? void 0 : _d.timeframe,
-        targetDataTimeframe: (_e = space.dataPipeline.pipelineState) == null ? void 0 : _e.targetTimeframe,
-        totalDataTimeframe: (_f = space.dataPipeline.pipelineState) == null ? void 0 : _f.endTimeframe
-      },
-      members: Array.from(space.inner.spaceState.members.values()).map((member) => {
-        var _a2, _b2, _c2;
-        return {
-          identity: {
-            identityKey: member.key,
-            profile: {
-              displayName: (_b2 = (_a2 = member.assertion.profile) == null ? void 0 : _a2.displayName) != null ? _b2 : (0, import_util7.humanize)(member.key)
-            }
-          },
-          presence: ((_c2 = this._identityManager.identity) == null ? void 0 : _c2.identityKey.equals(member.key)) || space.presence.getPeersOnline().filter(({ identityKey }) => identityKey.equals(member.key)).length > 0 ? import_services10.SpaceMember.PresenceState.ONLINE : import_services10.SpaceMember.PresenceState.OFFLINE
-        };
-      }),
-      creator: (_g = space.inner.spaceState.creator) == null ? void 0 : _g.key,
-      cache: space.cache,
-      metrics: space.metrics
-    };
+  async updateConfig(request) {
+    await this.networkManager.setConnectionState(request.swarm);
   }
 };
-var getChannelId = (channel) => `user-channel/${channel}`;
 
 // packages/sdk/client-services/src/packlets/storage/storage.ts
 var import_client_protocol4 = require("@dxos/client-protocol");
@@ -3438,228 +3662,6 @@ var SystemServiceImpl = class {
   }
 };
 
-// packages/sdk/client-services/src/packlets/services/service-context.ts
-var import_node_assert12 = __toESM(require("node:assert"));
-var import_async16 = require("@dxos/async");
-var import_credentials14 = require("@dxos/credentials");
-var import_debug6 = require("@dxos/debug");
-var import_echo_pipeline3 = require("@dxos/echo-pipeline");
-var import_feed_store4 = require("@dxos/feed-store");
-var import_keyring = require("@dxos/keyring");
-var import_keys11 = require("@dxos/keys");
-var import_log14 = require("@dxos/log");
-var import_protocols8 = require("@dxos/protocols");
-var import_services11 = require("@dxos/protocols/proto/dxos/client/services");
-var import_teleport_extension_object_sync = require("@dxos/teleport-extension-object-sync");
-var ServiceContext = class {
-  // prettier-ignore
-  constructor(storage, networkManager, signalManager, modelFactory) {
-    this.storage = storage;
-    this.networkManager = networkManager;
-    this.signalManager = signalManager;
-    this.modelFactory = modelFactory;
-    this.initialized = new import_async16.Trigger();
-    this.dataServiceSubscriptions = new import_echo_pipeline3.DataServiceSubscriptions();
-    this._handlerFactories = /* @__PURE__ */ new Map();
-    this._instanceId = import_keys11.PublicKey.random().toHex();
-    this.metadataStore = new import_echo_pipeline3.MetadataStore(storage.createDirectory("metadata"));
-    this.snapshotStore = new import_echo_pipeline3.SnapshotStore(storage.createDirectory("snapshots"));
-    this.blobStore = new import_teleport_extension_object_sync.BlobStore(storage.createDirectory("blobs"));
-    this.keyring = new import_keyring.Keyring(storage.createDirectory("keyring"));
-    this.feedStore = new import_feed_store4.FeedStore({
-      factory: new import_feed_store4.FeedFactory({
-        root: storage.createDirectory("feeds"),
-        signer: this.keyring,
-        hypercore: {
-          valueEncoding: import_echo_pipeline3.valueEncoding
-        }
-      })
-    });
-    this.spaceManager = new import_echo_pipeline3.SpaceManager({
-      feedStore: this.feedStore,
-      networkManager: this.networkManager,
-      blobStore: this.blobStore,
-      metadataStore: this.metadataStore,
-      modelFactory: this.modelFactory,
-      snapshotStore: this.snapshotStore
-    });
-    this.identityManager = new IdentityManager(this.metadataStore, this.keyring, this.feedStore, this.spaceManager);
-    this.invitations = new InvitationsHandler(this.networkManager);
-    this._handlerFactories.set(import_services11.Invitation.Kind.DEVICE, () => new DeviceInvitationProtocol(this.keyring, () => {
-      var _a;
-      return (_a = this.identityManager.identity) != null ? _a : (0, import_debug6.failUndefined)();
-    }, this._acceptIdentity.bind(this)));
-  }
-  async open() {
-    import_log14.log.trace("dxos.sdk.service-context.open", import_protocols8.trace.begin({
-      id: this._instanceId
-    }), {
-      file: "service-context.ts",
-      line: 126,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    await this._checkStorageVersion();
-    (0, import_log14.log)("opening...", {}, {
-      file: "service-context.ts",
-      line: 130,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    await this.signalManager.open();
-    await this.networkManager.open();
-    await this.spaceManager.open();
-    await this.identityManager.open();
-    if (this.identityManager.identity) {
-      await this._initialize();
-    }
-    (0, import_log14.log)("opened", {}, {
-      file: "service-context.ts",
-      line: 138,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    import_log14.log.trace("dxos.sdk.service-context.open", import_protocols8.trace.end({
-      id: this._instanceId
-    }), {
-      file: "service-context.ts",
-      line: 139,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-  }
-  async close() {
-    var _a, _b;
-    (0, import_log14.log)("closing...", {}, {
-      file: "service-context.ts",
-      line: 143,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    await ((_a = this._deviceSpaceSync) == null ? void 0 : _a.close());
-    await ((_b = this.dataSpaceManager) == null ? void 0 : _b.close());
-    await this.identityManager.close();
-    await this.spaceManager.close();
-    await this.feedStore.close();
-    await this.networkManager.close();
-    await this.signalManager.close();
-    this.dataServiceSubscriptions.clear();
-    (0, import_log14.log)("closed", {}, {
-      file: "service-context.ts",
-      line: 152,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-  }
-  async createIdentity(params = {}) {
-    const identity = await this.identityManager.createIdentity(params);
-    await this._initialize();
-    return identity;
-  }
-  getInvitationHandler(invitation) {
-    const factory = this._handlerFactories.get(invitation.kind);
-    (0, import_node_assert12.default)(factory, `Unknown invitation kind: ${invitation.kind}`);
-    return factory(invitation);
-  }
-  async _acceptIdentity(params) {
-    const identity = await this.identityManager.acceptIdentity(params);
-    await this._initialize();
-    return identity;
-  }
-  async _checkStorageVersion() {
-    await this.metadataStore.load();
-    if (this.metadataStore.version !== import_protocols8.STORAGE_VERSION) {
-      throw new Error(`Invalid storage version: current=${this.metadataStore.version}, expected=${import_protocols8.STORAGE_VERSION}`);
-    }
-  }
-  // Called when identity is created.
-  async _initialize() {
-    var _a;
-    (0, import_log14.log)("initializing spaces...", {}, {
-      file: "service-context.ts",
-      line: 185,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    const identity = (_a = this.identityManager.identity) != null ? _a : (0, import_debug6.failUndefined)();
-    const signingContext = {
-      credentialSigner: identity.getIdentityCredentialSigner(),
-      identityKey: identity.identityKey,
-      deviceKey: identity.deviceKey,
-      profile: identity.profileDocument,
-      recordCredential: async (credential) => {
-        await identity.controlPipeline.writer.write({
-          credential: {
-            credential
-          }
-        });
-      }
-    };
-    this.dataSpaceManager = new DataSpaceManager(this.spaceManager, this.metadataStore, this.dataServiceSubscriptions, this.keyring, signingContext, this.feedStore);
-    await this.dataSpaceManager.open();
-    this._handlerFactories.set(import_services11.Invitation.Kind.SPACE, (invitation) => {
-      (0, import_node_assert12.default)(this.dataSpaceManager, "dataSpaceManager not initialized yet");
-      return new SpaceInvitationProtocol(this.dataSpaceManager, signingContext, this.keyring, invitation.spaceKey);
-    });
-    this.initialized.wake();
-    this._deviceSpaceSync = identity.space.spaceState.registerProcessor({
-      process: async (credential) => {
-        const assertion = (0, import_credentials14.getCredentialAssertion)(credential);
-        if (assertion["@type"] !== "dxos.halo.credentials.SpaceMember") {
-          return;
-        }
-        if (assertion.spaceKey.equals(identity.space.key)) {
-          return;
-        }
-        if (!this.dataSpaceManager) {
-          (0, import_log14.log)("dataSpaceManager not initialized yet, ignoring space admission", {
-            details: assertion
-          }, {
-            file: "service-context.ts",
-            line: 224,
-            scope: this,
-            callSite: (f, a) => f(...a)
-          });
-          return;
-        }
-        if (this.dataSpaceManager.spaces.has(assertion.spaceKey)) {
-          (0, import_log14.log)("space already exists, ignoring space admission", {
-            details: assertion
-          }, {
-            file: "service-context.ts",
-            line: 228,
-            scope: this,
-            callSite: (f, a) => f(...a)
-          });
-          return;
-        }
-        try {
-          (0, import_log14.log)("accepting space recorded in halo", {
-            details: assertion
-          }, {
-            file: "service-context.ts",
-            line: 233,
-            scope: this,
-            callSite: (f, a) => f(...a)
-          });
-          await this.dataSpaceManager.acceptSpace({
-            spaceKey: assertion.spaceKey,
-            genesisFeedKey: assertion.genesisFeedKey
-          });
-        } catch (err) {
-          import_log14.log.catch(err, {}, {
-            file: "service-context.ts",
-            line: 239,
-            scope: this,
-            callSite: (f, a) => f(...a)
-          });
-        }
-      }
-    });
-    await this._deviceSpaceSync.open();
-  }
-};
-
 // packages/sdk/client-services/src/packlets/services/service-registry.ts
 var ServiceRegistry = class {
   // prettier-ignore