@dxos/client-services 0.1.53-main.8f662cd → 0.1.53-main.905829e

package/dist/lib/browser/{chunk-O5T3BZYP.mjs → chunk-EYXOVYW5.mjs}

@@ -352,6 +352,7 @@ import { Context as Context2 } from "@dxos/context";
 import { verifyCredential } from "@dxos/credentials";
 import { log } from "@dxos/log";
 import { schema } from "@dxos/protocols";
+var __dxlog_file = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/authenticator.ts";
 var createAuthProvider = (signer) => async (nonce) => {
   const credential = await signer.createCredential({
     assertion: {
@@ -377,20 +378,20 @@ var TrustedKeySetAuthVerifier = class {
       log("authenticating...", {
         credential
       }, {
-        file: "authenticator.ts",
-        line: 57,
-        scope: this,
-        callSite: (f, a) => f(...a)
+        F: __dxlog_file,
+        L: 57,
+        S: this,
+        C: (f, a) => f(...a)
       });
       const result = await verifyCredential(credential);
       if (result.kind === "fail") {
         log("Invalid credential", {
           result
         }, {
-          file: "authenticator.ts",
-          line: 61,
-          scope: this,
-          callSite: (f, a) => f(...a)
+          F: __dxlog_file,
+          L: 61,
+          S: this,
+          C: (f, a) => f(...a)
         });
         return false;
       }
@@ -399,10 +400,10 @@ var TrustedKeySetAuthVerifier = class {
           nonce,
           credential
         }, {
-          file: "authenticator.ts",
-          line: 66,
-          scope: this,
-          callSite: (f, a) => f(...a)
+          F: __dxlog_file,
+          L: 66,
+          S: this,
+          C: (f, a) => f(...a)
         });
         return false;
       }
@@ -410,10 +411,10 @@ var TrustedKeySetAuthVerifier = class {
         log("key is not currently in trusted set, waiting...", {
           key: credential.issuer
         }, {
-          file: "authenticator.ts",
-          line: 71,
-          scope: this,
-          callSite: (f, a) => f(...a)
+          F: __dxlog_file,
+          L: 71,
+          S: this,
+          C: (f, a) => f(...a)
         });
         return true;
       }
@@ -426,20 +427,20 @@ var TrustedKeySetAuthVerifier = class {
           log("auth success", {
             key: credential.issuer
           }, {
-            file: "authenticator.ts",
-            line: 82,
-            scope: this,
-            callSite: (f, a) => f(...a)
+            F: __dxlog_file,
+            L: 82,
+            S: this,
+            C: (f, a) => f(...a)
           });
           trigger.wake(true);
         } else {
           log("key is not currently in trusted set, waiting...", {
             key: credential.issuer
           }, {
-            file: "authenticator.ts",
-            line: 85,
-            scope: this,
-            callSite: (f, a) => f(...a)
+            F: __dxlog_file,
+            L: 85,
+            S: this,
+            C: (f, a) => f(...a)
           });
         }
       });
@@ -469,6 +470,7 @@ import { failUndefined } from "@dxos/debug";
 import { writeMessages } from "@dxos/feed-store";
 import { log as log2 } from "@dxos/log";
 import { AdmittedFeed } from "@dxos/protocols/proto/dxos/halo/credentials";
+var __dxlog_file2 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/identity.ts";
 var Identity = class {
   constructor({ space, signer, identityKey, deviceKey }) {
     this.stateUpdate = new Event();
@@ -476,15 +478,15 @@ var Identity = class {
     this._signer = signer;
     this.identityKey = identityKey;
     this.deviceKey = deviceKey;
-    this._deviceStateMachine = this.space.spaceState.registerProcessor(new DeviceStateMachine({
+    this._deviceStateMachine = new DeviceStateMachine({
       identityKey: this.identityKey,
       deviceKey: this.deviceKey,
       onUpdate: () => this.stateUpdate.emit()
-    }));
-    this._profileStateMachine = this.space.spaceState.registerProcessor(new ProfileStateMachine({
+    });
+    this._profileStateMachine = new ProfileStateMachine({
       identityKey: this.identityKey,
       onUpdate: () => this.stateUpdate.emit()
-    }));
+    });
     this.authVerifier = new TrustedKeySetAuthVerifier({
       trustedKeysProvider: () => this.authorizedDeviceKeys,
       update: this.stateUpdate,
@@ -493,27 +495,27 @@ var Identity = class {
   }
   // TODO(burdon): Expose state object?
   get authorizedDeviceKeys() {
-    return this._deviceStateMachine.processor.authorizedDeviceKeys;
+    return this._deviceStateMachine.authorizedDeviceKeys;
   }
   async open() {
-    await this._deviceStateMachine.open();
-    await this._profileStateMachine.open();
+    await this.space.spaceState.addCredentialProcessor(this._deviceStateMachine);
+    await this.space.spaceState.addCredentialProcessor(this._profileStateMachine);
     await this.space.open();
   }
   async close() {
     await this.authVerifier.close();
-    await this._deviceStateMachine.close();
-    await this._profileStateMachine.close();
+    await this.space.spaceState.removeCredentialProcessor(this._profileStateMachine);
+    await this.space.spaceState.removeCredentialProcessor(this._deviceStateMachine);
     await this.space.close();
   }
   async ready() {
-    await this._deviceStateMachine.processor.deviceChainReady.wait();
+    await this._deviceStateMachine.deviceChainReady.wait();
     await this.controlPipeline.state.waitUntilReachedTargetTimeframe({
       timeout: LOAD_CONTROL_FEEDS_TIMEOUT
     });
   }
   get profileDocument() {
-    return this._profileStateMachine.processor.profile;
+    return this._profileStateMachine.profile;
   }
   /**
   * @test-only
@@ -528,7 +530,7 @@ var Identity = class {
     return this.space.genesisFeedKey;
   }
   get deviceCredentialChain() {
-    return this._deviceStateMachine.processor.deviceCredentialChain;
+    return this._deviceStateMachine.deviceCredentialChain;
   }
   getAdmissionCredentials() {
     var _a, _b;
@@ -543,8 +545,8 @@ var Identity = class {
   * Requires identity to be ready.
   */
   getIdentityCredentialSigner() {
-    invariant(this._deviceStateMachine.processor.deviceCredentialChain, "Device credential chain is not ready.");
-    return createCredentialSignerWithChain(this._signer, this._deviceStateMachine.processor.deviceCredentialChain, this.deviceKey);
+    invariant(this._deviceStateMachine.deviceCredentialChain, "Device credential chain is not ready.");
+    return createCredentialSignerWithChain(this._signer, this._deviceStateMachine.deviceCredentialChain, this.deviceKey);
   }
   /**
   * Issues credentials as device.
@@ -560,10 +562,10 @@ var Identity = class {
       controlFeedKey,
       dataFeedKey
     }, {
-      file: "identity.ts",
-      line: 156,
-      scope: this,
-      callSite: (f, a) => f(...a)
+      F: __dxlog_file2,
+      L: 151,
+      S: this,
+      C: (f, a) => f(...a)
     });
     const signer = this.getIdentityCredentialSigner();
     await writeMessages(this.controlPipeline.writer, [
@@ -612,6 +614,7 @@ import { log as log3 } from "@dxos/log";
 import { trace } from "@dxos/protocols";
 import { AdmittedFeed as AdmittedFeed2 } from "@dxos/protocols/proto/dxos/halo/credentials";
 import { deferFunction } from "@dxos/util";
+var __dxlog_file3 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/identity-manager.ts";
 var IdentityManager = class {
   // TODO(burdon): IdentityManagerParams.
   // TODO(dmaretskyi): Perhaps this should take/generate the peerKey outside of an initialized identity.
@@ -631,20 +634,20 @@ var IdentityManager = class {
     log3.trace("dxos.halo.identity-manager.open", trace.begin({
       id: traceId
     }), {
-      file: "identity-manager.ts",
-      line: 70,
-      scope: this,
-      callSite: (f, a) => f(...a)
+      F: __dxlog_file3,
+      L: 70,
+      S: this,
+      C: (f, a) => f(...a)
     });
     await this._metadataStore.load();
     const identityRecord = this._metadataStore.getIdentityRecord();
     log3("identity record", {
       identityRecord
     }, {
-      file: "identity-manager.ts",
-      line: 74,
-      scope: this,
-      callSite: (f, a) => f(...a)
+      F: __dxlog_file3,
+      L: 74,
+      S: this,
+      C: (f, a) => f(...a)
     });
     if (identityRecord) {
       this._identity = await this._constructIdentity(identityRecord);
@@ -654,20 +657,20 @@ var IdentityManager = class {
         identityKey: identityRecord.identityKey,
         displayName: (_a = this._identity.profileDocument) == null ? void 0 : _a.displayName
       }, {
-        file: "identity-manager.ts",
-        line: 79,
-        scope: this,
-        callSite: (f, a) => f(...a)
+        F: __dxlog_file3,
+        L: 79,
+        S: this,
+        C: (f, a) => f(...a)
       });
       this.stateUpdate.emit();
     }
     log3.trace("dxos.halo.identity-manager.open", trace.end({
       id: traceId
     }), {
-      file: "identity-manager.ts",
-      line: 85,
-      scope: this,
-      callSite: (f, a) => f(...a)
+      F: __dxlog_file3,
+      L: 85,
+      S: this,
+      C: (f, a) => f(...a)
     });
   }
   async close() {
@@ -677,11 +680,11 @@ var IdentityManager = class {
   async createIdentity({ displayName } = {}) {
     var _a;
     invariant2(!this._identity, "Identity already exists.");
-    log3("creating identity...", {}, {
-      file: "identity-manager.ts",
-      line: 94,
-      scope: this,
-      callSite: (f, a) => f(...a)
+    log3("creating identity...", void 0, {
+      F: __dxlog_file3,
+      L: 94,
+      S: this,
+      C: (f, a) => f(...a)
     });
     const controlFeedKey = await this._keyring.createKey();
     const identityRecord = {
@@ -727,20 +730,20 @@ var IdentityManager = class {
       identityKey: identityRecord.identityKey,
       displayName: (_a = this._identity.profileDocument) == null ? void 0 : _a.displayName
     }, {
-      file: "identity-manager.ts",
-      line: 149,
-      scope: this,
-      callSite: (f, a) => f(...a)
+      F: __dxlog_file3,
+      L: 149,
+      S: this,
+      C: (f, a) => f(...a)
     });
     this.stateUpdate.emit();
     log3("created identity", {
       identityKey: identity.identityKey,
       deviceKey: identity.deviceKey
     }, {
-      file: "identity-manager.ts",
-      line: 155,
-      scope: this,
-      callSite: (f, a) => f(...a)
+      F: __dxlog_file3,
+      L: 155,
+      S: this,
+      C: (f, a) => f(...a)
     });
     return identity;
   }
@@ -752,10 +755,10 @@ var IdentityManager = class {
     log3("accepting identity", {
       params
     }, {
-      file: "identity-manager.ts",
-      line: 163,
-      scope: this,
-      callSite: (f, a) => f(...a)
+      F: __dxlog_file3,
+      L: 163,
+      S: this,
+      C: (f, a) => f(...a)
     });
     invariant2(!this._identity, "Identity already exists.");
     const identityRecord = {
@@ -778,20 +781,20 @@ var IdentityManager = class {
       identityKey: identityRecord.identityKey,
       displayName: (_a = this._identity.profileDocument) == null ? void 0 : _a.displayName
     }, {
-      file: "identity-manager.ts",
-      line: 183,
-      scope: this,
-      callSite: (f, a) => f(...a)
+      F: __dxlog_file3,
+      L: 183,
+      S: this,
+      C: (f, a) => f(...a)
     });
     this.stateUpdate.emit();
     log3("accepted identity", {
       identityKey: identity.identityKey,
       deviceKey: identity.deviceKey
     }, {
-      file: "identity-manager.ts",
-      line: 189,
-      scope: this,
-      callSite: (f, a) => f(...a)
+      F: __dxlog_file3,
+      L: 189,
+      S: this,
+      C: (f, a) => f(...a)
     });
     return identity;
   }
@@ -800,10 +803,10 @@ var IdentityManager = class {
     log3("constructing identity", {
       identityRecord
     }, {
-      file: "identity-manager.ts",
-      line: 195,
-      scope: this,
-      callSite: (f, a) => f(...a)
+      F: __dxlog_file3,
+      L: 195,
+      S: this,
+      C: (f, a) => f(...a)
     });
     invariant2(identityRecord.haloSpace.controlFeedKey);
     const controlFeed = await this._feedStore.openFeed(identityRecord.haloSpace.controlFeedKey, {
@@ -834,10 +837,10 @@ var IdentityManager = class {
     log3("done", {
       identityKey: identityRecord.identityKey
     }, {
-      file: "identity-manager.ts",
-      line: 226,
-      scope: this,
-      callSite: (f, a) => f(...a)
+      F: __dxlog_file3,
+      L: 226,
+      S: this,
+      C: (f, a) => f(...a)
     });
     if (identityRecord.haloSpace.controlTimeframe) {
       identity.controlPipeline.state.setTargetTimeframe(identityRecord.haloSpace.controlTimeframe);
@@ -854,11 +857,11 @@ var IdentityManager = class {
       onNetworkConnection: () => {
       },
       onAuthFailure: () => {
-        log3.warn("auth failure", {}, {
-          file: "identity-manager.ts",
-          line: 245,
-          scope: this,
-          callSite: (f, a) => f(...a)
+        log3.warn("auth failure", void 0, {
+          F: __dxlog_file3,
+          L: 245,
+          S: this,
+          C: (f, a) => f(...a)
         });
       },
       memberKey: identityKey
@@ -1004,6 +1007,7 @@ import { schema as schema2, trace as trace2 } from "@dxos/protocols";
 import { Invitation as Invitation2 } from "@dxos/protocols/proto/dxos/client/services";
 import { AuthenticationResponse, Options } from "@dxos/protocols/proto/dxos/halo/invitations";
 import { RpcExtension } from "@dxos/teleport";
+var __dxlog_file4 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/invitation-extension.ts";
 var OPTIONS_TIMEOUT = 1e4;
 var MAX_OTP_ATTEMPTS = 3;
 var InvitationHostExtension = class extends RpcExtension {
@@ -1041,20 +1045,20 @@ var InvitationHostExtension = class extends RpcExtension {
           log4.trace("dxos.sdk.invitation-handler.host.introduce", trace2.begin({
             id: traceId
           }), {
-            file: "invitation-extension.ts",
-            line: 98,
-            scope: this,
-            callSite: (f, a) => f(...a)
+            F: __dxlog_file4,
+            L: 98,
+            S: this,
+            C: (f, a) => f(...a)
           });
           const invitation = await this._callbacks.resolveInvitation(request);
           if (!invitation) {
             log4.warn("invitation not found", {
               invitationId
             }, {
-              file: "invitation-extension.ts",
-              line: 102,
-              scope: this,
-              callSite: (f, a) => f(...a)
+              F: __dxlog_file4,
+              L: 102,
+              S: this,
+              C: (f, a) => f(...a)
             });
             this._callbacks.onError(new Error("Invitation not found."));
             return {
@@ -1065,10 +1069,10 @@ var InvitationHostExtension = class extends RpcExtension {
           log4("guest introduced itself", {
             guestProfile: profile
           }, {
-            file: "invitation-extension.ts",
-            line: 111,
-            scope: this,
-            callSite: (f, a) => f(...a)
+            F: __dxlog_file4,
+            L: 111,
+            S: this,
+            C: (f, a) => f(...a)
           });
           this.guestProfile = profile;
           this._callbacks.onStateUpdate({
@@ -1078,10 +1082,10 @@ var InvitationHostExtension = class extends RpcExtension {
           log4.trace("dxos.sdk.invitation-handler.host.introduce", trace2.end({
             id: traceId
           }), {
-            file: "invitation-extension.ts",
-            line: 118,
-            scope: this,
-            callSite: (f, a) => f(...a)
+            F: __dxlog_file4,
+            L: 118,
+            S: this,
+            C: (f, a) => f(...a)
           });
           return {
             spaceKey: this.invitation.authMethod === Invitation2.AuthMethod.NONE ? this.invitation.spaceKey : void 0,
@@ -1093,28 +1097,28 @@ var InvitationHostExtension = class extends RpcExtension {
           log4.trace("dxos.sdk.invitation-handler.host.authenticate", trace2.begin({
             id: traceId
           }), {
-            file: "invitation-extension.ts",
-            line: 127,
-            scope: this,
-            callSite: (f, a) => f(...a)
+            F: __dxlog_file4,
+            L: 127,
+            S: this,
+            C: (f, a) => f(...a)
           });
           log4("received authentication request", {
             authCode: code
           }, {
-            file: "invitation-extension.ts",
-            line: 128,
-            scope: this,
-            callSite: (f, a) => f(...a)
+            F: __dxlog_file4,
+            L: 128,
+            S: this,
+            C: (f, a) => f(...a)
           });
           let status = AuthenticationResponse.Status.OK;
           invariant5(this.invitation, "Invitation is not set.");
           switch (this.invitation.authMethod) {
             case Invitation2.AuthMethod.NONE: {
-              log4("authentication not required", {}, {
-                file: "invitation-extension.ts",
-                line: 134,
-                scope: this,
-                callSite: (f, a) => f(...a)
+              log4("authentication not required", void 0, {
+                F: __dxlog_file4,
+                L: 134,
+                S: this,
+                C: (f, a) => f(...a)
               });
               return {
                 status: AuthenticationResponse.Status.OK
@@ -1136,10 +1140,10 @@ var InvitationHostExtension = class extends RpcExtension {
               log4.error("invalid authentication method", {
                 authMethod: this.invitation.authMethod
               }, {
-                file: "invitation-extension.ts",
-                line: 152,
-                scope: this,
-                callSite: (f, a) => f(...a)
+                F: __dxlog_file4,
+                L: 152,
+                S: this,
+                C: (f, a) => f(...a)
               });
               status = AuthenticationResponse.Status.INTERNAL_ERROR;
               break;
@@ -1151,10 +1155,10 @@ var InvitationHostExtension = class extends RpcExtension {
               status
             }
           }), {
-            file: "invitation-extension.ts",
-            line: 158,
-            scope: this,
-            callSite: (f, a) => f(...a)
+            F: __dxlog_file4,
+            L: 158,
+            S: this,
+            C: (f, a) => f(...a)
           });
           return {
             status
@@ -1165,10 +1169,10 @@ var InvitationHostExtension = class extends RpcExtension {
           log4.trace("dxos.sdk.invitation-handler.host.admit", trace2.begin({
             id: traceId
           }), {
-            file: "invitation-extension.ts",
-            line: 164,
-            scope: this,
-            callSite: (f, a) => f(...a)
+            F: __dxlog_file4,
+            L: 164,
+            S: this,
+            C: (f, a) => f(...a)
           });
           try {
             invariant5(this.invitation, "Invitation is not set.");
@@ -1179,10 +1183,10 @@ var InvitationHostExtension = class extends RpcExtension {
             log4.trace("dxos.sdk.invitation-handler.host.admit", trace2.end({
               id: traceId
             }), {
-              file: "invitation-extension.ts",
-              line: 175,
-              scope: this,
-              callSite: (f, a) => f(...a)
+              F: __dxlog_file4,
+              L: 175,
+              S: this,
+              C: (f, a) => f(...a)
             });
             return response;
           } catch (err) {
@@ -1256,11 +1260,11 @@ var InvitationGuestExtension = class extends RpcExtension {
     var _a;
     await super.onOpen(context);
     try {
-      log4("begin options", {}, {
-        file: "invitation-extension.ts",
-        line: 263,
-        scope: this,
-        callSite: (f, a) => f(...a)
+      log4("begin options", void 0, {
+        F: __dxlog_file4,
+        L: 263,
+        S: this,
+        C: (f, a) => f(...a)
       });
       await cancelWithContext(this._ctx, this.rpc.InvitationHostService.options({
         role: Options.Role.GUEST
@@ -1268,11 +1272,11 @@ var InvitationGuestExtension = class extends RpcExtension {
       await cancelWithContext(this._ctx, this._remoteOptionsTrigger.wait({
         timeout: OPTIONS_TIMEOUT
       }));
-      log4("end options", {}, {
-        file: "invitation-extension.ts",
-        line: 266,
-        scope: this,
-        callSite: (f, a) => f(...a)
+      log4("end options", void 0, {
+        F: __dxlog_file4,
+        L: 266,
+        S: this,
+        C: (f, a) => f(...a)
       });
       if (((_a = this._remoteOptions) == null ? void 0 : _a.role) !== Options.Role.HOST) {
         throw new InvalidInvitationExtensionRoleError(void 0, {
@@ -1283,20 +1287,20 @@ var InvitationGuestExtension = class extends RpcExtension {
       this._callbacks.onOpen(this._ctx);
     } catch (err) {
       log4("openError", err, {
-        file: "invitation-extension.ts",
-        line: 276,
-        scope: this,
-        callSite: (f, a) => f(...a)
+        F: __dxlog_file4,
+        L: 276,
+        S: this,
+        C: (f, a) => f(...a)
       });
       this._callbacks.onError(err);
     }
   }
   async onClose() {
-    log4("onClose", {}, {
-      file: "invitation-extension.ts",
-      line: 282,
-      scope: this,
-      callSite: (f, a) => f(...a)
+    log4("onClose", void 0, {
+      F: __dxlog_file4,
+      L: 282,
+      S: this,
+      C: (f, a) => f(...a)
     });
     await this._ctx.dispose();
   }
@@ -1304,6 +1308,7 @@ var InvitationGuestExtension = class extends RpcExtension {
 var isAuthenticationRequired = (invitation) => invitation.authMethod !== Invitation2.AuthMethod.NONE;
 
 // packages/sdk/client-services/src/packlets/invitations/invitations-handler.ts
+var __dxlog_file5 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/invitations-handler.ts";
 var InvitationsHandler = class {
   /**
   * @internal
@@ -1337,10 +1342,10 @@ var InvitationsHandler = class {
       log5("complete", {
         ...protocol.toJSON()
       }, {
-        file: "invitations-handler.ts",
-        line: 99,
-        scope: this,
-        callSite: (f, a) => f(...a)
+        F: __dxlog_file5,
+        L: 99,
+        S: this,
+        C: (f, a) => f(...a)
       });
       stream.complete();
     });
@@ -1378,18 +1383,18 @@ var InvitationsHandler = class {
               log5.trace("dxos.sdk.invitations-handler.host.onOpen", trace3.begin({
                 id: traceId
               }), {
-                file: "invitations-handler.ts",
-                line: 138,
-                scope: this,
-                callSite: (f, a) => f(...a)
+                F: __dxlog_file5,
+                L: 138,
+                S: this,
+                C: (f, a) => f(...a)
               });
               log5("connected", {
                 ...protocol.toJSON()
               }, {
-                file: "invitations-handler.ts",
-                line: 139,
-                scope: this,
-                callSite: (f, a) => f(...a)
+                F: __dxlog_file5,
+                L: 139,
+                S: this,
+                C: (f, a) => f(...a)
               });
               stream.next({
                 ...invitation,
@@ -1402,10 +1407,10 @@ var InvitationsHandler = class {
                 guest: deviceKey,
                 ...protocol.toJSON()
               }, {
-                file: "invitations-handler.ts",
-                line: 142,
-                scope: this,
-                callSite: (f, a) => f(...a)
+                F: __dxlog_file5,
+                L: 142,
+                S: this,
+                C: (f, a) => f(...a)
               });
               stream.next({
                 ...invitation,
@@ -1414,20 +1419,20 @@ var InvitationsHandler = class {
               log5.trace("dxos.sdk.invitations-handler.host.onOpen", trace3.end({
                 id: traceId
               }), {
-                file: "invitations-handler.ts",
-                line: 144,
-                scope: this,
-                callSite: (f, a) => f(...a)
+                F: __dxlog_file5,
+                L: 144,
+                S: this,
+                C: (f, a) => f(...a)
               });
             } catch (err) {
               if (err instanceof TimeoutError) {
                 log5("timeout", {
                   ...protocol.toJSON()
                 }, {
-                  file: "invitations-handler.ts",
-                  line: 147,
-                  scope: this,
-                  callSite: (f, a) => f(...a)
+                  F: __dxlog_file5,
+                  L: 147,
+                  S: this,
+                  C: (f, a) => f(...a)
                 });
                 stream.next({
                   ...invitation,
@@ -1435,10 +1440,10 @@ var InvitationsHandler = class {
                 });
               } else {
                 log5.error("failed", err, {
-                  file: "invitations-handler.ts",
-                  line: 150,
-                  scope: this,
-                  callSite: (f, a) => f(...a)
+                  F: __dxlog_file5,
+                  L: 150,
+                  S: this,
+                  C: (f, a) => f(...a)
                 });
                 stream.error(err);
               }
@@ -1446,10 +1451,10 @@ var InvitationsHandler = class {
                 id: traceId,
                 error: err
               }), {
-                file: "invitations-handler.ts",
-                line: 153,
-                scope: this,
-                callSite: (f, a) => f(...a)
+                F: __dxlog_file5,
+                L: 153,
+                S: this,
+                C: (f, a) => f(...a)
               });
             } finally {
               if (type !== Invitation3.Type.MULTIUSE) {
@@ -1467,10 +1472,10 @@ var InvitationsHandler = class {
             log5("timeout", {
               ...protocol.toJSON()
             }, {
-              file: "invitations-handler.ts",
-              line: 168,
-              scope: this,
-              callSite: (f, a) => f(...a)
+              F: __dxlog_file5,
+              L: 168,
+              S: this,
+              C: (f, a) => f(...a)
             });
             stream.next({
               ...invitation,
@@ -1478,10 +1483,10 @@ var InvitationsHandler = class {
             });
           } else {
             log5.error("failed", err, {
-              file: "invitations-handler.ts",
-              line: 171,
-              scope: this,
-              callSite: (f, a) => f(...a)
+              F: __dxlog_file5,
+              L: 171,
+              S: this,
+              C: (f, a) => f(...a)
             });
             stream.error(err);
           }
@@ -1540,20 +1545,20 @@ var InvitationsHandler = class {
           log5("timeout", {
             ...protocol.toJSON()
           }, {
-            file: "invitations-handler.ts",
-            line: 230,
-            scope: this,
-            callSite: (f, a) => f(...a)
+            F: __dxlog_file5,
+            L: 230,
+            S: this,
+            C: (f, a) => f(...a)
           });
           setState({
             state: Invitation3.State.TIMEOUT
           });
         } else {
           log5.warn("auth failed", err, {
-            file: "invitations-handler.ts",
-            line: 233,
-            scope: this,
-            callSite: (f, a) => f(...a)
+            F: __dxlog_file5,
+            L: 233,
+            S: this,
+            C: (f, a) => f(...a)
           });
           stream.error(err);
         }
@@ -1564,10 +1569,10 @@ var InvitationsHandler = class {
       log5("complete", {
         ...protocol.toJSON()
       }, {
-        file: "invitations-handler.ts",
-        line: 241,
-        scope: this,
-        callSite: (f, a) => f(...a)
+        F: __dxlog_file5,
+        L: 241,
+        S: this,
+        C: (f, a) => f(...a)
       });
       stream.complete();
     });
@@ -1579,10 +1584,10 @@ var InvitationsHandler = class {
             log5("extension disposed", {
               currentState
             }, {
-              file: "invitations-handler.ts",
-              line: 251,
-              scope: this,
-              callSite: (f, a) => f(...a)
+              F: __dxlog_file5,
+              L: 251,
+              S: this,
+              C: (f, a) => f(...a)
             });
             if (!admitted) {
               stream.error(new Error("Remote peer disconnected."));
@@ -1594,10 +1599,10 @@ var InvitationsHandler = class {
               log5.trace("dxos.sdk.invitations-handler.guest.onOpen", trace3.begin({
                 id: traceId
               }), {
-                file: "invitations-handler.ts",
-                line: 260,
-                scope: this,
-                callSite: (f, a) => f(...a)
+                F: __dxlog_file5,
+                L: 260,
+                S: this,
+                C: (f, a) => f(...a)
               });
               if (++connectionCount > 1) {
                 throw new Error(`multiple connections detected: ${connectionCount}`);
@@ -1606,10 +1611,10 @@ var InvitationsHandler = class {
               log5("connected", {
                 ...protocol.toJSON()
               }, {
-                file: "invitations-handler.ts",
-                line: 268,
-                scope: this,
-                callSite: (f, a) => f(...a)
+                F: __dxlog_file5,
+                L: 268,
+                S: this,
+                C: (f, a) => f(...a)
               });
               setState({
                 state: Invitation3.State.CONNECTED
@@ -1617,20 +1622,20 @@ var InvitationsHandler = class {
               log5("introduce", {
                 ...protocol.toJSON()
               }, {
-                file: "invitations-handler.ts",
-                line: 272,
-                scope: this,
-                callSite: (f, a) => f(...a)
+                F: __dxlog_file5,
+                L: 272,
+                S: this,
+                C: (f, a) => f(...a)
               });
               const introductionResponse = await extension.rpc.InvitationHostService.introduce(protocol.createIntroduction());
               log5("introduce response", {
                 ...protocol.toJSON(),
                 response: introductionResponse
               }, {
-                file: "invitations-handler.ts",
-                line: 276,
-                scope: this,
-                callSite: (f, a) => f(...a)
+                F: __dxlog_file5,
+                L: 276,
+                S: this,
+                C: (f, a) => f(...a)
               });
               invitation.authMethod = introductionResponse.authMethod;
               if (introductionResponse.spaceKey) {
@@ -1638,11 +1643,11 @@ var InvitationsHandler = class {
               }
               if (isAuthenticationRequired(invitation)) {
                 for (let attempt = 1; attempt <= MAX_OTP_ATTEMPTS; attempt++) {
-                  log5("guest waiting for authentication code...", {}, {
-                    file: "invitations-handler.ts",
-                    line: 285,
-                    scope: this,
-                    callSite: (f, a) => f(...a)
+                  log5("guest waiting for authentication code...", void 0, {
+                    F: __dxlog_file5,
+                    L: 285,
+                    S: this,
+                    C: (f, a) => f(...a)
                   });
                   setState({
                     state: Invitation3.State.READY_FOR_AUTHENTICATION
@@ -1650,11 +1655,11 @@ var InvitationsHandler = class {
                   const authCode = await authenticated.wait({
                     timeout
                   });
-                  log5("sending authentication request", {}, {
-                    file: "invitations-handler.ts",
-                    line: 289,
-                    scope: this,
-                    callSite: (f, a) => f(...a)
+                  log5("sending authentication request", void 0, {
+                    F: __dxlog_file5,
+                    L: 289,
+                    S: this,
+                    C: (f, a) => f(...a)
                   });
                   setState({
                     state: Invitation3.State.AUTHENTICATING
@@ -1672,10 +1677,10 @@ var InvitationsHandler = class {
                       log5("retrying invalid code", {
                         attempt
                       }, {
-                        file: "invitations-handler.ts",
-                        line: 300,
-                        scope: this,
-                        callSite: (f, a) => f(...a)
+                        F: __dxlog_file5,
+                        L: 300,
+                        S: this,
+                        C: (f, a) => f(...a)
                       });
                       authenticated.reset();
                     }
@@ -1689,10 +1694,10 @@ var InvitationsHandler = class {
               log5("request admission", {
                 ...protocol.toJSON()
               }, {
-                file: "invitations-handler.ts",
-                line: 311,
-                scope: this,
-                callSite: (f, a) => f(...a)
+                F: __dxlog_file5,
+                L: 311,
+                S: this,
+                C: (f, a) => f(...a)
               });
               const admissionRequest = await protocol.createAdmissionRequest();
               const admissionResponse = await extension.rpc.InvitationHostService.admit(admissionRequest);
@@ -1701,10 +1706,10 @@ var InvitationsHandler = class {
               log5("admitted by host", {
                 ...protocol.toJSON()
               }, {
-                file: "invitations-handler.ts",
-                line: 322,
-                scope: this,
-                callSite: (f, a) => f(...a)
+                F: __dxlog_file5,
+                L: 322,
+                S: this,
+                C: (f, a) => f(...a)
               });
               setState({
                 ...result,
@@ -1713,30 +1718,30 @@ var InvitationsHandler = class {
               log5.trace("dxos.sdk.invitations-handler.guest.onOpen", trace3.end({
                 id: traceId
               }), {
-                file: "invitations-handler.ts",
-                line: 324,
-                scope: this,
-                callSite: (f, a) => f(...a)
+                F: __dxlog_file5,
+                L: 324,
+                S: this,
+                C: (f, a) => f(...a)
               });
             } catch (err) {
               if (err instanceof TimeoutError) {
                 log5("timeout", {
                   ...protocol.toJSON()
                 }, {
-                  file: "invitations-handler.ts",
-                  line: 327,
-                  scope: this,
-                  callSite: (f, a) => f(...a)
+                  F: __dxlog_file5,
+                  L: 327,
+                  S: this,
+                  C: (f, a) => f(...a)
                 });
                 setState({
                   state: Invitation3.State.TIMEOUT
                 });
               } else {
                 log5("auth failed", err, {
-                  file: "invitations-handler.ts",
-                  line: 330,
-                  scope: this,
-                  callSite: (f, a) => f(...a)
+                  F: __dxlog_file5,
+                  L: 330,
+                  S: this,
+                  C: (f, a) => f(...a)
                 });
                 stream.error(err);
               }
@@ -1744,10 +1749,10 @@ var InvitationsHandler = class {
                 id: traceId,
                 error: err
               }), {
-                file: "invitations-handler.ts",
-                line: 333,
-                scope: this,
-                callSite: (f, a) => f(...a)
+                F: __dxlog_file5,
+                L: 333,
+                S: this,
+                C: (f, a) => f(...a)
               });
             } finally {
               await ctx.dispose();
@@ -1762,20 +1767,20 @@ var InvitationsHandler = class {
             log5("timeout", {
               ...protocol.toJSON()
             }, {
-              file: "invitations-handler.ts",
-              line: 344,
-              scope: this,
-              callSite: (f, a) => f(...a)
+              F: __dxlog_file5,
+              L: 344,
+              S: this,
+              C: (f, a) => f(...a)
             });
             setState({
               state: Invitation3.State.TIMEOUT
             });
           } else {
             log5("auth failed", err, {
-              file: "invitations-handler.ts",
-              line: 347,
-              scope: this,
-              callSite: (f, a) => f(...a)
+              F: __dxlog_file5,
+              L: 347,
+              S: this,
+              C: (f, a) => f(...a)
             });
             stream.error(err);
           }
@@ -1822,6 +1827,7 @@ import { Event as Event3 } from "@dxos/async";
 import { Stream as Stream8 } from "@dxos/codec-protobuf";
 import { log as log6 } from "@dxos/log";
 import { QueryInvitationsResponse } from "@dxos/protocols/proto/dxos/client/services";
+var __dxlog_file6 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/invitations-service.ts";
 var InvitationsServiceImpl = class {
   constructor(_invitationsHandler, _getHandler) {
     this._invitationsHandler = _invitationsHandler;
@@ -1882,11 +1888,11 @@ var InvitationsServiceImpl = class {
     });
   }
   async authenticate({ invitationId, authCode }) {
-    log6("authenticating...", {}, {
-      file: "invitations-service.ts",
-      line: 103,
-      scope: this,
-      callSite: (f, a) => f(...a)
+    log6("authenticating...", void 0, {
+      F: __dxlog_file6,
+      L: 103,
+      S: this,
+      C: (f, a) => f(...a)
     });
     invariant7(invitationId);
     const observable = this._acceptInvitations.get(invitationId);
@@ -1894,21 +1900,21 @@ var InvitationsServiceImpl = class {
       log6.warn("invalid invitation", {
         invitationId
       }, {
-        file: "invitations-service.ts",
-        line: 107,
-        scope: this,
-        callSite: (f, a) => f(...a)
+        F: __dxlog_file6,
+        L: 107,
+        S: this,
+        C: (f, a) => f(...a)
       });
     } else {
       await observable.authenticate(authCode);
     }
   }
   async cancelInvitation({ invitationId }) {
-    log6("deleting...", {}, {
-      file: "invitations-service.ts",
-      line: 114,
-      scope: this,
-      callSite: (f, a) => f(...a)
+    log6("deleting...", void 0, {
+      F: __dxlog_file6,
+      L: 114,
+      S: this,
+      C: (f, a) => f(...a)
     });
     invariant7(invitationId);
     const created = this._createInvitations.get(invitationId);
@@ -1925,10 +1931,10 @@ var InvitationsServiceImpl = class {
       log6.warn("invalid invitation", {
         invitationId
       }, {
-        file: "invitations-service.ts",
-        line: 127,
-        scope: this,
-        callSite: (f, a) => f(...a)
+        F: __dxlog_file6,
+        L: 127,
+        S: this,
+        C: (f, a) => f(...a)
       });
     }
   }
@@ -1990,6 +1996,7 @@ import { createAdmissionCredentials, getCredentialAssertion } from "@dxos/creden
 import { writeMessages as writeMessages2 } from "@dxos/feed-store";
 import { log as log7 } from "@dxos/log";
 import { Invitation as Invitation4 } from "@dxos/protocols/proto/dxos/client/services";
+var __dxlog_file7 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/space-invitation-protocol.ts";
 var SpaceInvitationProtocol = class {
   constructor(_spaceManager, _signingContext, _keyring, _spaceKey) {
     this._spaceManager = _spaceManager;
@@ -2020,10 +2027,10 @@ var SpaceInvitationProtocol = class {
       host: this._signingContext.deviceKey,
       guest: deviceKey
     }, {
-      file: "space-invitation-protocol.ts",
-      line: 50,
-      scope: this,
-      callSite: (f, a) => f(...a)
+      F: __dxlog_file7,
+      L: 50,
+      S: this,
+      C: (f, a) => f(...a)
     });
     const credentials = await createAdmissionCredentials(this._signingContext.credentialSigner, identityKey, space.key, space.inner.genesisFeedKey, guestProfile);
     invariant8(credentials[0].credential);
@@ -2075,7 +2082,7 @@ var SpaceInvitationProtocol = class {
 };
 
 // packages/sdk/client-services/src/packlets/spaces/data-space.ts
-import { Event as Event5, scheduleTask as scheduleTask4, trackLeaks } from "@dxos/async";
+import { Event as Event5, scheduleTask as scheduleTask4, synchronized, trackLeaks } from "@dxos/async";
 import { AUTH_TIMEOUT as AUTH_TIMEOUT2 } from "@dxos/client-protocol";
 import { cancelWithContext as cancelWithContext2, Context as Context6 } from "@dxos/context";
 import { timed } from "@dxos/debug";
@@ -2097,6 +2104,7 @@ import { log as log8 } from "@dxos/log";
 import { schema as schema3 } from "@dxos/protocols";
 import { RpcExtension as RpcExtension2 } from "@dxos/teleport";
 import { ComplexMap as ComplexMap2, ComplexSet, entry } from "@dxos/util";
+var __dxlog_file8 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/notarization-plugin.ts";
 var DEFAULT_RETRY_TIMEOUT = 1e3;
 var DEFAULT_SUCCESS_DELAY = 1e3;
 var DEFAULT_NOTARIZE_TIMEOUT = 1e4;
@@ -2109,6 +2117,9 @@ var NotarizationPlugin = class {
     this._processedCredentials = new ComplexSet(PublicKey6.hash);
     this._processCredentialsTriggers = new ComplexMap2(PublicKey6.hash);
   }
+  get hasWriter() {
+    return !!this._writer;
+  }
   async open() {
   }
   async close() {
@@ -2121,10 +2132,10 @@ var NotarizationPlugin = class {
     log8("notarize", {
       credentials
     }, {
-      file: "notarization-plugin.ts",
-      line: 87,
-      scope: this,
-      callSite: (f, a) => f(...a)
+      F: __dxlog_file8,
+      L: 91,
+      S: this,
+      C: (f, a) => f(...a)
     });
     invariant9(credentials.every((credential) => credential.id), "Credentials must have an id");
     const errors = new Trigger4();
@@ -2133,10 +2144,10 @@ var NotarizationPlugin = class {
         log8.warn("Notarization error", {
           err
         }, {
-          file: "notarization-plugin.ts",
-          line: 96,
-          scope: this,
-          callSite: (f, a) => f(...a)
+          F: __dxlog_file8,
+          L: 100,
+          S: this,
+          C: (f, a) => f(...a)
         });
         void ctx.dispose();
         errors.throw(err);
@@ -2149,10 +2160,10 @@ var NotarizationPlugin = class {
           timeout,
           peers: Array.from(this._extensions).map((extension) => extension.remotePeerId)
         }, {
-          file: "notarization-plugin.ts",
-          line: 108,
-          scope: this,
-          callSite: (f, a) => f(...a)
+          F: __dxlog_file8,
+          L: 112,
+          S: this,
+          C: (f, a) => f(...a)
         });
         void ctx.dispose();
         errors.throw(new TimeoutError2(timeout, "Notarization timed out"));
@@ -2172,10 +2183,10 @@ var NotarizationPlugin = class {
           log8.warn("Exhausted all peers to notarize with", {
             retryIn: retryTimeout
           }, {
-            file: "notarization-plugin.ts",
-            line: 133,
-            scope: this,
-            callSite: (f, a) => f(...a)
+            F: __dxlog_file8,
+            L: 137,
+            S: this,
+            C: (f, a) => f(...a)
           });
           peersTried.clear();
           scheduleTask3(ctx, () => notarizeTask.schedule(), retryTimeout);
@@ -2186,28 +2197,28 @@ var NotarizationPlugin = class {
           peer: peer.localPeerId,
           credentialId: credentials.map((credential) => credential.id)
         }, {
-          file: "notarization-plugin.ts",
-          line: 140,
-          scope: this,
-          callSite: (f, a) => f(...a)
+          F: __dxlog_file8,
+          L: 144,
+          S: this,
+          C: (f, a) => f(...a)
         });
         await peer.rpc.NotarizationService.notarize({
           credentials: credentials.filter((credential) => !this._processedCredentials.has(credential.id))
         });
-        log8("success", {}, {
-          file: "notarization-plugin.ts",
-          line: 144,
-          scope: this,
-          callSite: (f, a) => f(...a)
+        log8("success", void 0, {
+          F: __dxlog_file8,
+          L: 148,
+          S: this,
+          C: (f, a) => f(...a)
         });
         await sleep(successDelay);
       } catch (err) {
         if (!ctx.disposed && !err.message.includes(WRITER_NOT_SET_ERROR_CODE)) {
           log8.warn("error notarizing (recoverable)", err, {
-            file: "notarization-plugin.ts",
-            line: 148,
-            scope: this,
-            callSite: (f, a) => f(...a)
+            F: __dxlog_file8,
+            L: 152,
+            S: this,
+            C: (f, a) => f(...a)
           });
         }
         notarizeTask.schedule();
@@ -2221,11 +2232,11 @@ var NotarizationPlugin = class {
         allNotarized,
         errors.wait()
       ]);
-      log8("done", {}, {
-        file: "notarization-plugin.ts",
-        line: 159,
-        scope: this,
-        callSite: (f, a) => f(...a)
+      log8("done", void 0, {
+        F: __dxlog_file8,
+        L: 163,
+        S: this,
+        C: (f, a) => f(...a)
       });
     } finally {
       await ctx.dispose();
@@ -2234,7 +2245,7 @@ var NotarizationPlugin = class {
   /**
   * Called with credentials arriving from the control pipeline.
   */
-  async process(credential) {
+  async processCredential(credential) {
     var _a;
     if (!credential.id) {
       return;
@@ -2275,10 +2286,10 @@ var NotarizationPlugin = class {
         log8("extension opened", {
           peer: extension.localPeerId
         }, {
-          file: "notarization-plugin.ts",
-          line: 208,
-          scope: this,
-          callSite: (f, a) => f(...a)
+          F: __dxlog_file8,
+          L: 212,
+          S: this,
+          C: (f, a) => f(...a)
         });
         this._extensions.add(extension);
         this._extensionOpened.emit();
@@ -2287,10 +2298,10 @@ var NotarizationPlugin = class {
         log8("extension closed", {
           peer: extension.localPeerId
         }, {
-          file: "notarization-plugin.ts",
-          line: 213,
-          scope: this,
-          callSite: (f, a) => f(...a)
+          F: __dxlog_file8,
+          L: 217,
+          S: this,
+          C: (f, a) => f(...a)
         });
         this._extensions.delete(extension);
       },
@@ -2331,7 +2342,7 @@ var NotarizationTeleportExtension = class extends RpcExtension2 {
 };
 
 // packages/sdk/client-services/src/packlets/spaces/data-space.ts
-var __decorate = function(decorators, target, key, desc) {
+function _ts_decorate(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2340,10 +2351,12 @@ var __decorate = function(decorators, target, key, desc) {
       if (d = decorators[i])
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
+}
+var __dxlog_file9 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/data-space.ts";
 var DataSpace = class DataSpace2 {
   constructor(params) {
     this._ctx = new Context6();
+    this._notarizationPlugin = new NotarizationPlugin();
     this._state = SpaceState.CLOSED;
     /**
     * Error for _state === SpaceState.ERROR.
@@ -2366,8 +2379,8 @@ var DataSpace = class DataSpace2 {
       update: this._inner.stateUpdate,
       authTimeout: AUTH_TIMEOUT2
     });
-    this._notarizationPluginConsumer = this._inner.spaceState.registerProcessor(new NotarizationPlugin());
     this._cache = params.cache;
+    this._state = params.initialState;
   }
   get key() {
     return this._inner.key;
@@ -2389,25 +2402,36 @@ var DataSpace = class DataSpace2 {
     return this._presence;
   }
   get notarizationPlugin() {
-    return this._notarizationPluginConsumer.processor;
+    return this._notarizationPlugin;
   }
   get cache() {
     return this._cache;
   }
   async open() {
-    await this.notarizationPlugin.open();
-    await this._notarizationPluginConsumer.open();
+    await this._open();
+  }
+  async _open() {
+    await this._notarizationPlugin.open();
+    await this._inner.spaceState.addCredentialProcessor(this._notarizationPlugin);
     await this._inner.open();
-    this._state = SpaceState.INACTIVE;
+    this._state = SpaceState.CONTROL_ONLY;
+    this.stateUpdate.emit();
+    this.metrics = {};
     this.metrics.open = new Date();
   }
   async close() {
+    await this._close();
+  }
+  async _close() {
+    var _a, _b;
+    await ((_b = (_a = this._callbacks).beforeClose) == null ? void 0 : _b.call(_a));
     this._state = SpaceState.CLOSED;
     await this._ctx.dispose();
+    this._ctx = new Context6();
     await this.authVerifier.close();
     await this._inner.close();
-    await this._notarizationPluginConsumer.close();
-    await this.notarizationPlugin.close();
+    await this._inner.spaceState.removeCredentialProcessor(this._notarizationPlugin);
+    await this._notarizationPlugin.close();
     await this._presence.destroy();
   }
   async postMessage(channel, message) {
@@ -2427,18 +2451,18 @@ var DataSpace = class DataSpace2 {
       } catch (err) {
         if (err instanceof CancelledError) {
           log9("Data pipeline initialization cancelled", err, {
-            file: "data-space.ts",
-            line: 173,
-            scope: this,
-            callSite: (f, a) => f(...a)
+            F: __dxlog_file9,
+            L: 193,
+            S: this,
+            C: (f, a) => f(...a)
           });
           return;
         }
         log9.error("Error initializing data pipeline", err, {
-          file: "data-space.ts",
-          line: 177,
-          scope: this,
-          callSite: (f, a) => f(...a)
+          F: __dxlog_file9,
+          L: 197,
+          S: this,
+          C: (f, a) => f(...a)
         });
         this._state = SpaceState.ERROR;
         this.error = err;
@@ -2450,7 +2474,7 @@ var DataSpace = class DataSpace2 {
   }
   async initializeDataPipeline() {
     var _a, _b, _c, _d;
-    if (this._state !== SpaceState.INACTIVE) {
+    if (this._state !== SpaceState.CONTROL_ONLY) {
       throw new SystemError("Invalid operation");
     }
     this._state = SpaceState.INITIALIZING;
@@ -2460,37 +2484,39 @@ var DataSpace = class DataSpace2 {
     });
     this.metrics.controlPipelineReady = new Date();
     await this._createWritableFeeds();
-    log9("Writable feeds created", {}, {
-      file: "data-space.ts",
-      line: 201,
-      scope: this,
-      callSite: (f, a) => f(...a)
+    log9("Writable feeds created", void 0, {
+      F: __dxlog_file9,
+      L: 221,
+      S: this,
+      C: (f, a) => f(...a)
     });
     this.stateUpdate.emit();
-    this.notarizationPlugin.setWriter(createMappedFeedWriter((credential) => ({
-      credential: {
-        credential
-      }
-    }), this._inner.controlPipeline.writer));
+    if (!this.notarizationPlugin.hasWriter) {
+      this.notarizationPlugin.setWriter(createMappedFeedWriter((credential) => ({
+        credential: {
+          credential
+        }
+      }), this._inner.controlPipeline.writer));
+    }
     await this._inner.initializeDataPipeline();
     this.metrics.dataPipelineOpen = new Date();
     await cancelWithContext2(this._ctx, this._inner.dataPipeline.ensureEpochInitialized());
-    log9("waiting for data pipeline to reach target timeframe", {}, {
-      file: "data-space.ts",
-      line: 220,
-      scope: this,
-      callSite: (f, a) => f(...a)
+    log9("waiting for data pipeline to reach target timeframe", void 0, {
+      F: __dxlog_file9,
+      L: 242,
+      S: this,
+      C: (f, a) => f(...a)
     });
     await this._inner.dataPipeline.pipelineState.waitUntilReachedTargetTimeframe({
       ctx: this._ctx,
       breakOnStall: false
     });
     this.metrics.dataPipelineReady = new Date();
-    log9("data pipeline ready", {}, {
-      file: "data-space.ts",
-      line: 229,
-      scope: this,
-      callSite: (f, a) => f(...a)
+    log9("data pipeline ready", void 0, {
+      F: __dxlog_file9,
+      L: 251,
+      S: this,
+      C: (f, a) => f(...a)
     });
     await ((_b = (_a = this._callbacks).beforeReady) == null ? void 0 : _b.call(_a));
     this._state = SpaceState.READY;
@@ -2568,17 +2594,46 @@ var DataSpace = class DataSpace2 {
       }
     }
   }
+  async activate() {
+    if (this._state !== SpaceState.INACTIVE) {
+      throw new SystemError("Invalid operation");
+    }
+    await this._metadataStore.setSpaceState(this.key, SpaceState.ACTIVE);
+    await this._open();
+    this.initializeDataPipelineAsync();
+  }
+  async deactivate() {
+    if (this._state === SpaceState.INACTIVE) {
+      throw new SystemError("Invalid operation");
+    }
+    await this._metadataStore.setSpaceState(this.key, SpaceState.INACTIVE);
+    await this._close();
+    this._state = SpaceState.INACTIVE;
+    this.stateUpdate.emit();
+  }
 };
-__decorate([
+_ts_decorate([
+  synchronized
+], DataSpace.prototype, "open", null);
+_ts_decorate([
+  synchronized
+], DataSpace.prototype, "close", null);
+_ts_decorate([
   timed(1e4)
 ], DataSpace.prototype, "_createWritableFeeds", null);
-DataSpace = __decorate([
+_ts_decorate([
+  synchronized
+], DataSpace.prototype, "activate", null);
+_ts_decorate([
+  synchronized
+], DataSpace.prototype, "deactivate", null);
+DataSpace = _ts_decorate([
   trackLeaks("open", "close")
 ], DataSpace);
 
 // packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts
 import invariant10 from "tiny-invariant";
-import { Event as Event6, synchronized, trackLeaks as trackLeaks2 } from "@dxos/async";
+import { Event as Event6, synchronized as synchronized2, trackLeaks as trackLeaks2 } from "@dxos/async";
 import { cancelWithContext as cancelWithContext3, Context as Context7 } from "@dxos/context";
 import { getCredentialAssertion as getCredentialAssertion2 } from "@dxos/credentials";
 import { PublicKey as PublicKey8 } from "@dxos/keys";
@@ -2659,7 +2714,7 @@ var spaceGenesis = async (keyring, signingContext, space) => {
 };
 
 // packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts
-var __decorate2 = function(decorators, target, key, desc) {
+function _ts_decorate2(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2668,7 +2723,8 @@ var __decorate2 = function(decorators, target, key, desc) {
       if (d = decorators[i])
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
+}
+var __dxlog_file10 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts";
 var DataSpaceManager = class DataSpaceManager2 {
   constructor(_spaceManager, _metadataStore, _dataServiceSubscriptions, _keyring, _signingContext, _feedStore) {
     this._spaceManager = _spaceManager;
@@ -2688,50 +2744,52 @@ var DataSpaceManager = class DataSpaceManager2 {
     return this._spaces;
   }
   async open() {
-    log10("open", {}, {
-      file: "data-space-manager.ts",
-      line: 80,
-      scope: this,
-      callSite: (f, a) => f(...a)
+    log10("open", void 0, {
+      F: __dxlog_file10,
+      L: 80,
+      S: this,
+      C: (f, a) => f(...a)
     });
     log10.trace("dxos.echo.data-space-manager.open", trace4.begin({
       id: this._instanceId
     }), {
-      file: "data-space-manager.ts",
-      line: 81,
-      scope: this,
-      callSite: (f, a) => f(...a)
+      F: __dxlog_file10,
+      L: 81,
+      S: this,
+      C: (f, a) => f(...a)
     });
     await this._metadataStore.load();
     log10("metadata loaded", {
       spaces: this._metadataStore.spaces.length
     }, {
-      file: "data-space-manager.ts",
-      line: 83,
-      scope: this,
-      callSite: (f, a) => f(...a)
+      F: __dxlog_file10,
+      L: 83,
+      S: this,
+      C: (f, a) => f(...a)
     });
     for (const spaceMetadata of this._metadataStore.spaces) {
       try {
         log10("load space", {
           spaceMetadata
         }, {
-          file: "data-space-manager.ts",
-          line: 87,
-          scope: this,
-          callSite: (f, a) => f(...a)
+          F: __dxlog_file10,
+          L: 87,
+          S: this,
+          C: (f, a) => f(...a)
         });
         const space = await this._constructSpace(spaceMetadata);
-        space.initializeDataPipelineAsync();
+        if (spaceMetadata.state !== SpaceState2.INACTIVE) {
+          space.initializeDataPipelineAsync();
+        }
       } catch (err) {
         log10.error("Error loading space", {
           spaceMetadata,
           err
         }, {
-          file: "data-space-manager.ts",
-          line: 91,
-          scope: this,
-          callSite: (f, a) => f(...a)
+          F: __dxlog_file10,
+          L: 93,
+          S: this,
+          C: (f, a) => f(...a)
         });
       }
     }
@@ -2740,18 +2798,18 @@ var DataSpaceManager = class DataSpaceManager2 {
     log10.trace("dxos.echo.data-space-manager.open", trace4.end({
       id: this._instanceId
     }), {
-      file: "data-space-manager.ts",
-      line: 97,
-      scope: this,
-      callSite: (f, a) => f(...a)
+      F: __dxlog_file10,
+      L: 99,
+      S: this,
+      C: (f, a) => f(...a)
     });
   }
   async close() {
-    log10("close", {}, {
-      file: "data-space-manager.ts",
-      line: 102,
-      scope: this,
-      callSite: (f, a) => f(...a)
+    log10("close", void 0, {
+      F: __dxlog_file10,
+      L: 104,
+      S: this,
+      C: (f, a) => f(...a)
     });
     this._isOpen = false;
     await this._ctx.dispose();
@@ -2771,15 +2829,16 @@ var DataSpaceManager = class DataSpaceManager2 {
       key: spaceKey,
       genesisFeedKey: controlFeedKey,
       controlFeedKey,
-      dataFeedKey
+      dataFeedKey,
+      state: SpaceState2.ACTIVE
     };
     log10("creating space...", {
       spaceKey
     }, {
-      file: "data-space-manager.ts",
-      line: 126,
-      scope: this,
-      callSite: (f, a) => f(...a)
+      F: __dxlog_file10,
+      L: 129,
+      S: this,
+      C: (f, a) => f(...a)
     });
     const space = await this._constructSpace(metadata);
     const credentials = await spaceGenesis(this._keyring, this._signingContext, space.inner);
@@ -2796,10 +2855,10 @@ var DataSpaceManager = class DataSpaceManager2 {
     log10("accept space", {
       opts
     }, {
-      file: "data-space-manager.ts",
-      line: 145,
-      scope: this,
-      callSite: (f, a) => f(...a)
+      F: __dxlog_file10,
+      L: 148,
+      S: this,
+      C: (f, a) => f(...a)
     });
     invariant10(this._isOpen, "Not open.");
     invariant10(!this._spaces.has(opts.spaceKey), "Space already exists.");
@@ -2830,10 +2889,10 @@ var DataSpaceManager = class DataSpaceManager2 {
     log10("construct space", {
       metadata
     }, {
-      file: "data-space-manager.ts",
-      line: 180,
-      scope: this,
-      callSite: (f, a) => f(...a)
+      F: __dxlog_file10,
+      L: 183,
+      S: this,
+      C: (f, a) => f(...a)
     });
     const gossip = new Gossip({
       localPeerId: this._signingContext.deviceKey
@@ -2865,11 +2924,11 @@ var DataSpaceManager = class DataSpaceManager2 {
         session.addExtension("dxos.mesh.teleport.notarization", dataSpace.notarizationPlugin.createExtension());
       },
       onAuthFailure: () => {
-        log10.warn("auth failure", {}, {
-          file: "data-space-manager.ts",
-          line: 211,
-          scope: this,
-          callSite: (f, a) => f(...a)
+        log10.warn("auth failure", void 0, {
+          F: __dxlog_file10,
+          L: 214,
+          S: this,
+          C: (f, a) => f(...a)
         });
       },
       memberKey: this._signingContext.identityKey
@@ -2878,6 +2937,7 @@ var DataSpaceManager = class DataSpaceManager2 {
     dataFeed && space.setDataFeed(dataFeed);
     const dataSpace = new DataSpace({
       inner: space,
+      initialState: metadata.state === SpaceState2.INACTIVE ? SpaceState2.INACTIVE : SpaceState2.CLOSED,
       metadataStore: this._metadataStore,
       gossip,
       presence,
@@ -2889,31 +2949,44 @@ var DataSpaceManager = class DataSpaceManager2 {
           log10("before space ready", {
             space: space.key
           }, {
-            file: "data-space-manager.ts",
-            line: 228,
-            scope: this,
-            callSite: (f, a) => f(...a)
+            F: __dxlog_file10,
+            L: 232,
+            S: this,
+            C: (f, a) => f(...a)
           });
-          this._dataServiceSubscriptions.registerSpace(space.key, dataSpace.dataPipeline.databaseHost.createDataServiceHost());
+          await this._dataServiceSubscriptions.registerSpace(space.key, dataSpace.dataPipeline.databaseHost.createDataServiceHost());
         },
         afterReady: async () => {
           log10("after space ready", {
             space: space.key,
             open: this._isOpen
           }, {
-            file: "data-space-manager.ts",
-            line: 235,
-            scope: this,
-            callSite: (f, a) => f(...a)
+            F: __dxlog_file10,
+            L: 239,
+            S: this,
+            C: (f, a) => f(...a)
           });
           if (this._isOpen) {
             this.updated.emit();
           }
+        },
+        beforeClose: async () => {
+          log10("before space close", {
+            space: space.key
+          }, {
+            F: __dxlog_file10,
+            L: 245,
+            S: this,
+            C: (f, a) => f(...a)
+          });
+          await this._dataServiceSubscriptions.unregisterSpace(space.key);
         }
       },
       cache: metadata.cache
     });
-    await dataSpace.open();
+    if (metadata.state !== SpaceState2.INACTIVE) {
+      await dataSpace.open();
+    }
     if (metadata.controlTimeframe) {
       dataSpace.inner.controlPipeline.state.setTargetTimeframe(metadata.controlTimeframe);
     }
@@ -2924,31 +2997,33 @@ var DataSpaceManager = class DataSpaceManager2 {
     return dataSpace;
   }
 };
-__decorate2([
-  synchronized
+_ts_decorate2([
+  synchronized2
 ], DataSpaceManager.prototype, "open", null);
-__decorate2([
-  synchronized
+_ts_decorate2([
+  synchronized2
 ], DataSpaceManager.prototype, "close", null);
-__decorate2([
-  synchronized
+_ts_decorate2([
+  synchronized2
 ], DataSpaceManager.prototype, "createSpace", null);
-__decorate2([
-  synchronized
+_ts_decorate2([
+  synchronized2
 ], DataSpaceManager.prototype, "acceptSpace", null);
-DataSpaceManager = __decorate2([
+DataSpaceManager = _ts_decorate2([
   trackLeaks2("open", "close")
 ], DataSpaceManager);
 
 // packages/sdk/client-services/src/packlets/spaces/spaces-service.ts
 import { EventSubscriptions as EventSubscriptions2, UpdateScheduler, scheduleTask as scheduleTask5 } from "@dxos/async";
 import { Stream as Stream9 } from "@dxos/codec-protobuf";
-import { raise, todo as todo2 } from "@dxos/debug";
+import { raise } from "@dxos/debug";
 import { SpaceNotFoundError } from "@dxos/echo-pipeline";
+import { ApiError } from "@dxos/errors";
 import { log as log11 } from "@dxos/log";
 import { encodeError } from "@dxos/protocols";
-import { SpaceMember as SpaceMember2 } from "@dxos/protocols/proto/dxos/client/services";
+import { SpaceMember as SpaceMember2, SpaceState as SpaceState3 } from "@dxos/protocols/proto/dxos/client/services";
 import { humanize } from "@dxos/util";
+var __dxlog_file11 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/spaces-service.ts";
 var SpacesServiceImpl = class {
   constructor(_identityManager, _spaceManager, _dataServiceSubscriptions, _getDataSpaceManager) {
     this._identityManager = _identityManager;
@@ -2964,8 +3039,22 @@ var SpacesServiceImpl = class {
     const space = await dataSpaceManager.createSpace();
     return this._serializeSpace(space);
   }
-  async updateSpace(request) {
-    todo2();
+  async updateSpace({ spaceKey, state }) {
+    var _a;
+    const dataSpaceManager = await this._getDataSpaceManager();
+    const space = (_a = dataSpaceManager.spaces.get(spaceKey)) != null ? _a : raise(new SpaceNotFoundError(spaceKey));
+    if (state) {
+      switch (state) {
+        case SpaceState3.ACTIVE:
+          await space.activate();
+          break;
+        case SpaceState3.INACTIVE:
+          await space.deactivate();
+          break;
+        default:
+          throw new ApiError("Invalid space state");
+      }
+    }
   }
   querySpaces() {
     return new Stream9(({ next, ctx }) => {
@@ -2975,10 +3064,10 @@ var SpacesServiceImpl = class {
         log11("update", {
           spaces
         }, {
-          file: "spaces-service.ts",
-          line: 60,
-          scope: this,
-          callSite: (f, a) => f(...a)
+          F: __dxlog_file11,
+          L: 78,
+          S: this,
+          C: (f, a) => f(...a)
         });
         next({
           spaces
@@ -3039,13 +3128,13 @@ var SpacesServiceImpl = class {
     return new Stream9(({ ctx, next }) => {
       var _a;
       const space = (_a = this._spaceManager.spaces.get(spaceKey)) != null ? _a : raise(new SpaceNotFoundError(spaceKey));
-      const processor = space.spaceState.registerProcessor({
-        process: async (credential) => {
+      const processor = {
+        processCredential: async (credential) => {
           next(credential);
         }
-      });
-      ctx.onDispose(() => processor.close());
-      scheduleTask5(ctx, () => processor.open());
+      };
+      ctx.onDispose(() => space.spaceState.removeCredentialProcessor(processor));
+      scheduleTask5(ctx, () => space.spaceState.addCredentialProcessor(processor));
     });
   }
   async writeCredentials({ spaceKey, credentials }) {
@@ -3117,6 +3206,7 @@ import { log as log12 } from "@dxos/log";
 import { STORAGE_VERSION, trace as trace5 } from "@dxos/protocols";
 import { Invitation as Invitation5 } from "@dxos/protocols/proto/dxos/client/services";
 import { BlobStore } from "@dxos/teleport-extension-object-sync";
+var __dxlog_file12 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/services/service-context.ts";
 var ServiceContext = class {
   // prettier-ignore
   constructor(storage, networkManager, signalManager, modelFactory) {
@@ -3160,17 +3250,17 @@ var ServiceContext = class {
     log12.trace("dxos.sdk.service-context.open", trace5.begin({
       id: this._instanceId
     }), {
-      file: "service-context.ts",
-      line: 126,
-      scope: this,
-      callSite: (f, a) => f(...a)
+      F: __dxlog_file12,
+      L: 126,
+      S: this,
+      C: (f, a) => f(...a)
     });
     await this._checkStorageVersion();
-    log12("opening...", {}, {
-      file: "service-context.ts",
-      line: 130,
-      scope: this,
-      callSite: (f, a) => f(...a)
+    log12("opening...", void 0, {
+      F: __dxlog_file12,
+      L: 130,
+      S: this,
+      C: (f, a) => f(...a)
     });
     await this.signalManager.open();
     await this.networkManager.open();
@@ -3179,42 +3269,44 @@ var ServiceContext = class {
     if (this.identityManager.identity) {
       await this._initialize();
     }
-    log12("opened", {}, {
-      file: "service-context.ts",
-      line: 138,
-      scope: this,
-      callSite: (f, a) => f(...a)
+    log12("opened", void 0, {
+      F: __dxlog_file12,
+      L: 138,
+      S: this,
+      C: (f, a) => f(...a)
     });
     log12.trace("dxos.sdk.service-context.open", trace5.end({
       id: this._instanceId
     }), {
-      file: "service-context.ts",
-      line: 139,
-      scope: this,
-      callSite: (f, a) => f(...a)
+      F: __dxlog_file12,
+      L: 139,
+      S: this,
+      C: (f, a) => f(...a)
     });
   }
   async close() {
-    var _a, _b;
-    log12("closing...", {}, {
-      file: "service-context.ts",
-      line: 143,
-      scope: this,
-      callSite: (f, a) => f(...a)
-    });
-    await ((_a = this._deviceSpaceSync) == null ? void 0 : _a.close());
-    await ((_b = this.dataSpaceManager) == null ? void 0 : _b.close());
+    var _a;
+    log12("closing...", void 0, {
+      F: __dxlog_file12,
+      L: 143,
+      S: this,
+      C: (f, a) => f(...a)
+    });
+    if (this._deviceSpaceSync && this.identityManager.identity) {
+      await this.identityManager.identity.space.spaceState.removeCredentialProcessor(this._deviceSpaceSync);
+    }
+    await ((_a = this.dataSpaceManager) == null ? void 0 : _a.close());
     await this.identityManager.close();
     await this.spaceManager.close();
     await this.feedStore.close();
     await this.networkManager.close();
     await this.signalManager.close();
     this.dataServiceSubscriptions.clear();
-    log12("closed", {}, {
-      file: "service-context.ts",
-      line: 152,
-      scope: this,
-      callSite: (f, a) => f(...a)
+    log12("closed", void 0, {
+      F: __dxlog_file12,
+      L: 154,
+      S: this,
+      C: (f, a) => f(...a)
     });
   }
   async createIdentity(params = {}) {
@@ -3241,11 +3333,11 @@ var ServiceContext = class {
   // Called when identity is created.
   async _initialize() {
     var _a;
-    log12("initializing spaces...", {}, {
-      file: "service-context.ts",
-      line: 185,
-      scope: this,
-      callSite: (f, a) => f(...a)
+    log12("initializing spaces...", void 0, {
+      F: __dxlog_file12,
+      L: 187,
+      S: this,
+      C: (f, a) => f(...a)
     });
     const identity = (_a = this.identityManager.identity) != null ? _a : failUndefined3();
     const signingContext = {
@@ -3268,8 +3360,8 @@ var ServiceContext = class {
       return new SpaceInvitationProtocol(this.dataSpaceManager, signingContext, this.keyring, invitation.spaceKey);
     });
     this.initialized.wake();
-    this._deviceSpaceSync = identity.space.spaceState.registerProcessor({
-      process: async (credential) => {
+    this._deviceSpaceSync = {
+      processCredential: async (credential) => {
         const assertion = getCredentialAssertion3(credential);
         if (assertion["@type"] !== "dxos.halo.credentials.SpaceMember") {
           return;
@@ -3281,10 +3373,10 @@ var ServiceContext = class {
           log12("dataSpaceManager not initialized yet, ignoring space admission", {
             details: assertion
           }, {
-            file: "service-context.ts",
-            line: 224,
-            scope: this,
-            callSite: (f, a) => f(...a)
+            F: __dxlog_file12,
+            L: 226,
+            S: this,
+            C: (f, a) => f(...a)
           });
           return;
         }
@@ -3292,10 +3384,10 @@ var ServiceContext = class {
           log12("space already exists, ignoring space admission", {
             details: assertion
           }, {
-            file: "service-context.ts",
-            line: 228,
-            scope: this,
-            callSite: (f, a) => f(...a)
+            F: __dxlog_file12,
+            L: 230,
+            S: this,
+            C: (f, a) => f(...a)
           });
           return;
         }
@@ -3303,26 +3395,26 @@ var ServiceContext = class {
           log12("accepting space recorded in halo", {
             details: assertion
           }, {
-            file: "service-context.ts",
-            line: 233,
-            scope: this,
-            callSite: (f, a) => f(...a)
+            F: __dxlog_file12,
+            L: 235,
+            S: this,
+            C: (f, a) => f(...a)
           });
           await this.dataSpaceManager.acceptSpace({
             spaceKey: assertion.spaceKey,
             genesisFeedKey: assertion.genesisFeedKey
           });
         } catch (err) {
-          log12.catch(err, {}, {
-            file: "service-context.ts",
-            line: 239,
-            scope: this,
-            callSite: (f, a) => f(...a)
+          log12.catch(err, void 0, {
+            F: __dxlog_file12,
+            L: 241,
+            S: this,
+            C: (f, a) => f(...a)
           });
         }
       }
-    });
-    await this._deviceSpaceSync.open();
+    };
+    await identity.space.spaceState.addCredentialProcessor(this._deviceSpaceSync);
   }
 };
 
@@ -3330,7 +3422,7 @@ var ServiceContext = class {
 import { asyncTimeout, Trigger as Trigger6 } from "@dxos/async";
 import { RESOURCE_LOCK_TIMEOUT } from "@dxos/client-protocol";
 import { log as log13, logInfo } from "@dxos/log";
-var __decorate3 = function(decorators, target, key, desc) {
+function _ts_decorate3(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
     r = Reflect.decorate(decorators, target, key, desc);
@@ -3339,7 +3431,8 @@ var __decorate3 = function(decorators, target, key, desc) {
       if (d = decorators[i])
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
+}
+var __dxlog_file13 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/locks/browser.ts";
 var Message;
 (function(Message2) {
   Message2["ACQUIRING"] = "acquiring";
@@ -3361,32 +3454,32 @@ var Lock = class {
       message: Message.ACQUIRING
     });
     try {
-      log13("aquiring lock...", {}, {
-        file: "browser.ts",
-        line: 42,
-        scope: this,
-        callSite: (f, a) => f(...a)
+      log13("aquiring lock...", void 0, {
+        F: __dxlog_file13,
+        L: 42,
+        S: this,
+        C: (f, a) => f(...a)
       });
       await asyncTimeout(this._requestLock(), RESOURCE_LOCK_TIMEOUT);
-      log13("acquired lock", {}, {
-        file: "browser.ts",
-        line: 44,
-        scope: this,
-        callSite: (f, a) => f(...a)
+      log13("acquired lock", void 0, {
+        F: __dxlog_file13,
+        L: 44,
+        S: this,
+        C: (f, a) => f(...a)
       });
     } catch (e) {
-      log13("stealing lock...", {}, {
-        file: "browser.ts",
-        line: 46,
-        scope: this,
-        callSite: (f, a) => f(...a)
+      log13("stealing lock...", void 0, {
+        F: __dxlog_file13,
+        L: 46,
+        S: this,
+        C: (f, a) => f(...a)
       });
       await this._requestLock(true);
-      log13("stolen lock", {}, {
-        file: "browser.ts",
-        line: 48,
-        scope: this,
-        callSite: (f, a) => f(...a)
+      log13("stolen lock", void 0, {
+        F: __dxlog_file13,
+        L: 48,
+        S: this,
+        C: (f, a) => f(...a)
       });
     }
   }
@@ -3402,10 +3495,10 @@ var Lock = class {
     log13("requesting lock...", {
       steal
     }, {
-      file: "browser.ts",
-      line: 63,
-      scope: this,
-      callSite: (f, a) => f(...a)
+      F: __dxlog_file13,
+      L: 63,
+      S: this,
+      C: (f, a) => f(...a)
     });
     const acquired = new Trigger6();
     void navigator.locks.request(this._lockKey, {
@@ -3416,18 +3509,18 @@ var Lock = class {
       acquired.wake();
       this._releaseTrigger = new Trigger6();
       await this._releaseTrigger.wait();
-      log13("releasing lock...", {}, {
-        file: "browser.ts",
-        line: 72,
-        scope: this,
-        callSite: (f, a) => f(...a)
+      log13("releasing lock...", void 0, {
+        F: __dxlog_file13,
+        L: 72,
+        S: this,
+        C: (f, a) => f(...a)
       });
       await ((_b = this._onRelease) == null ? void 0 : _b.call(this));
-      log13("released lock", {}, {
-        file: "browser.ts",
-        line: 74,
-        scope: this,
-        callSite: (f, a) => f(...a)
+      log13("released lock", void 0, {
+        F: __dxlog_file13,
+        L: 74,
+        S: this,
+        C: (f, a) => f(...a)
       });
     }).catch(async () => {
       var _a;
@@ -3437,14 +3530,14 @@ var Lock = class {
     log13("recieved lock", {
       steal
     }, {
-      file: "browser.ts",
-      line: 81,
-      scope: this,
-      callSite: (f, a) => f(...a)
+      F: __dxlog_file13,
+      L: 81,
+      S: this,
+      C: (f, a) => f(...a)
     });
   }
 };
-__decorate3([
+_ts_decorate3([
   logInfo
 ], Lock.prototype, "lockKey", null);
 var isLocked = (lockPath) => {
@@ -3526,7 +3619,7 @@ var ServiceRegistry = class {
 
 // packages/sdk/client-services/src/packlets/services/service-host.ts
 import invariant12 from "tiny-invariant";
-import { Event as Event8, synchronized as synchronized2 } from "@dxos/async";
+import { Event as Event8, synchronized as synchronized3 } from "@dxos/async";
 import { clientServiceBundle } from "@dxos/client-protocol";
 import { DocumentModel } from "@dxos/document-model";
 import { DataServiceImpl } from "@dxos/echo-pipeline";
@@ -3613,7 +3706,7 @@ var LoggingServiceImpl = class {
         if (LOG_PROCESSING > 0) {
           return;
         }
-        if (((_a = entry2.meta) == null ? void 0 : _a.file.includes("logging-service")) || entry2.context && Object.values(entry2.context).some((value) => typeof value === "string" && value.includes("LoggingService"))) {
+        if (((_a = entry2.meta) == null ? void 0 : _a.F.includes("logging-service")) || entry2.context && Object.values(entry2.context).some((value) => typeof value === "string" && value.includes("LoggingService"))) {
           return;
         }
         if (!shouldLog(entry2, request)) {
@@ -3625,8 +3718,8 @@ var LoggingServiceImpl = class {
           timestamp: new Date(),
           meta: {
             // TODO(dmaretskyi): Fix proto.
-            file: (_c = (_b = entry2.meta) == null ? void 0 : _b.file) != null ? _c : "",
-            line: (_e = (_d = entry2.meta) == null ? void 0 : _d.line) != null ? _e : 0
+            file: (_c = (_b = entry2.meta) == null ? void 0 : _b.F) != null ? _c : "",
+            line: (_e = (_d = entry2.meta) == null ? void 0 : _d.L) != null ? _e : 0
           }
         };
         try {
@@ -3656,7 +3749,7 @@ var shouldLog = (entry2, request) => {
   } else {
     return request.filters.some((filter) => {
       var _a2, _b;
-      return matchFilter(filter, entry2.level, (_b = (_a2 = entry2.meta) == null ? void 0 : _a2.file) != null ? _b : "", options);
+      return matchFilter(filter, entry2.level, (_b = (_a2 = entry2.meta) == null ? void 0 : _a2.F) != null ? _b : "", options);
     });
   }
 };
@@ -3733,7 +3826,7 @@ var SystemServiceImpl = class {
 };
 
 // packages/sdk/client-services/src/packlets/services/service-host.ts
-var __decorate4 = function(decorators, target, key, desc) {
+function _ts_decorate4(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
     r = Reflect.decorate(decorators, target, key, desc);
@@ -3742,7 +3835,8 @@ var __decorate4 = function(decorators, target, key, desc) {
       if (d = decorators[i])
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
+}
+var __dxlog_file14 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/services/service-host.ts";
 var createDefaultModelFactory = () => {
   return new ModelFactory().registerModel(DocumentModel).registerModel(TextModel);
 };
@@ -3756,13 +3850,15 @@ var ClientServicesHost = class {
     connectionLog,
     storage,
     // TODO(wittjosiah): Turn this on by default.
-    lockKey
+    lockKey,
+    callbacks
   } = {}) {
     this._statusUpdate = new Event8();
     this._opening = false;
     this._open = false;
     this._storage = storage;
     this._modelFactory = modelFactory;
+    this._callbacks = callbacks;
     if (config) {
       this.initialize({
         config,
@@ -3849,10 +3945,10 @@ var ClientServicesHost = class {
     log15.trace("dxos.sdk.client-services-host.open", trace6.begin({
       id: traceId
     }), {
-      file: "service-host.ts",
-      line: 195,
-      scope: this,
-      callSite: (f, a) => f(...a)
+      F: __dxlog_file14,
+      L: 203,
+      S: this,
+      C: (f, a) => f(...a)
     });
     invariant12(this._config, "config not set");
     invariant12(this._storage, "storage not set");
@@ -3862,10 +3958,10 @@ var ClientServicesHost = class {
     log15("opening...", {
       lockKey: (_a = this._resourceLock) == null ? void 0 : _a.lockKey
     }, {
-      file: "service-host.ts",
-      line: 203,
-      scope: this,
-      callSite: (f, a) => f(...a)
+      F: __dxlog_file14,
+      L: 211,
+      S: this,
+      C: (f, a) => f(...a)
     });
     await ((_b = this._resourceLock) == null ? void 0 : _b.acquire());
     await this._loggingService.open();
@@ -3897,18 +3993,18 @@ var ClientServicesHost = class {
     log15("opened", {
       deviceKey
     }, {
-      file: "service-host.ts",
-      line: 258,
-      scope: this,
-      callSite: (f, a) => f(...a)
+      F: __dxlog_file14,
+      L: 266,
+      S: this,
+      C: (f, a) => f(...a)
     });
     log15.trace("dxos.sdk.client-services-host.open", trace6.end({
       id: traceId
     }), {
-      file: "service-host.ts",
-      line: 259,
-      scope: this,
-      callSite: (f, a) => f(...a)
+      F: __dxlog_file14,
+      L: 267,
+      S: this,
+      C: (f, a) => f(...a)
     });
   }
   async close() {
@@ -3920,10 +4016,10 @@ var ClientServicesHost = class {
     log15("closing...", {
       deviceKey
     }, {
-      file: "service-host.ts",
-      line: 269,
-      scope: this,
-      callSite: (f, a) => f(...a)
+      F: __dxlog_file14,
+      L: 277,
+      S: this,
+      C: (f, a) => f(...a)
     });
     this._serviceRegistry.setServices({
       SystemService: this._systemService
@@ -3935,52 +4031,53 @@ var ClientServicesHost = class {
     log15("closed", {
       deviceKey
     }, {
-      file: "service-host.ts",
-      line: 275,
-      scope: this,
-      callSite: (f, a) => f(...a)
+      F: __dxlog_file14,
+      L: 283,
+      S: this,
+      C: (f, a) => f(...a)
     });
   }
   async reset() {
-    var _a;
+    var _a, _b, _c;
     const traceId = PublicKey10.random().toHex();
     log15.trace("dxos.sdk.client-services-host.reset", trace6.begin({
       id: traceId
     }), {
-      file: "service-host.ts",
-      line: 280,
-      scope: this,
-      callSite: (f, a) => f(...a)
+      F: __dxlog_file14,
+      L: 288,
+      S: this,
+      C: (f, a) => f(...a)
     });
-    log15("resetting...", {}, {
-      file: "service-host.ts",
-      line: 282,
-      scope: this,
-      callSite: (f, a) => f(...a)
+    log15("resetting...", void 0, {
+      F: __dxlog_file14,
+      L: 290,
+      S: this,
+      C: (f, a) => f(...a)
     });
     await ((_a = this._serviceContext) == null ? void 0 : _a.close());
     await this._storage.reset();
-    log15("reset", {}, {
-      file: "service-host.ts",
-      line: 285,
-      scope: this,
-      callSite: (f, a) => f(...a)
+    log15("reset", void 0, {
+      F: __dxlog_file14,
+      L: 293,
+      S: this,
+      C: (f, a) => f(...a)
     });
     log15.trace("dxos.sdk.client-services-host.reset", trace6.end({
       id: traceId
     }), {
-      file: "service-host.ts",
-      line: 286,
-      scope: this,
-      callSite: (f, a) => f(...a)
+      F: __dxlog_file14,
+      L: 294,
+      S: this,
+      C: (f, a) => f(...a)
     });
+    await ((_c = (_b = this._callbacks) == null ? void 0 : _b.onReset) == null ? void 0 : _c.call(_b));
   }
 };
-__decorate4([
-  synchronized2
+_ts_decorate4([
+  synchronized3
 ], ClientServicesHost.prototype, "open", null);
-__decorate4([
-  synchronized2
+_ts_decorate4([
+  synchronized3
 ], ClientServicesHost.prototype, "close", null);
 
 export {
@@ -4014,4 +4111,4 @@ export {
   createDefaultModelFactory,
   ClientServicesHost
 };
-//# sourceMappingURL=chunk-O5T3BZYP.mjs.map
+//# sourceMappingURL=chunk-EYXOVYW5.mjs.map