@dxos/client-services 0.1.56-main.09ca29d → 0.1.56-main.0e9f69e

package/dist/lib/browser/{chunk-FD4L7N4K.mjs → chunk-II6TDINB.mjs}

@@ -12,7 +12,7 @@ var subscribeToFeeds = ({ feedStore }, { feedKeys }) => {
     const feedMap = new ComplexMap(PublicKey.hash);
     const update = () => {
       const { feeds } = feedStore;
-      feeds.filter((feed) => !(feedKeys == null ? void 0 : feedKeys.length) || feedKeys.some((feedKey) => feedKey.equals(feed.key))).forEach((feed) => {
+      feeds.filter((feed) => !feedKeys?.length || feedKeys.some((feedKey) => feedKey.equals(feed.key))).forEach((feed) => {
         if (!feedMap.has(feed.key)) {
           feedMap.set(feed.key, feed);
           feed.on("close", update);
@@ -20,15 +20,12 @@ var subscribeToFeeds = ({ feedStore }, { feedKeys }) => {
         }
       });
       next({
-        feeds: Array.from(feedMap.values()).map((feed) => {
-          var _a, _b;
-          return {
-            feedKey: feed.key,
-            length: feed.properties.length,
-            bytes: feed.core.byteLength,
-            downloaded: (_b = (_a = feed.core.bitfield) == null ? void 0 : _a.data.toBuffer()) != null ? _b : new Uint8Array()
-          };
-        })
+        feeds: Array.from(feedMap.values()).map((feed) => ({
+          feedKey: feed.key,
+          length: feed.properties.length,
+          bytes: feed.core.byteLength,
+          downloaded: feed.core.bitfield?.data.toBuffer() ?? new Uint8Array()
+        }))
       });
     };
     subscriptions.add(feedStore.feedOpened.on(update));
@@ -104,13 +101,13 @@ var subscribeToSignal = ({ signalManager }) => new Stream2(({ next }) => {
         recipient: message.recipient.asUint8Array(),
         payload: message.payload
       },
-      receivedAt: new Date()
+      receivedAt: /* @__PURE__ */ new Date()
     });
   });
   signalManager.swarmEvent.on(ctx, (swarmEvent) => {
     next({
       swarmEvent: swarmEvent.swarmEvent,
-      receivedAt: new Date()
+      receivedAt: /* @__PURE__ */ new Date()
     });
   });
   return () => {
@@ -121,13 +118,10 @@ var subscribeToNetworkTopics = ({ networkManager }) => new Stream2(({ next, clos
   const update = () => {
     try {
       const topics = networkManager.topics;
-      const labeledTopics = topics.map((topic) => {
-        var _a, _b;
-        return {
-          topic,
-          label: (_b = (_a = networkManager.getSwarm(topic)) == null ? void 0 : _a.label) != null ? _b : topic.toHex()
-        };
-      });
+      const labeledTopics = topics.map((topic) => ({
+        topic,
+        label: networkManager.getSwarm(topic)?.label ?? topic.toHex()
+      }));
       next({
         topics: labeledTopics
       });
@@ -139,17 +133,15 @@ var subscribeToNetworkTopics = ({ networkManager }) => new Stream2(({ next, clos
   update();
 });
 var subscribeToSwarmInfo = ({ networkManager }) => new Stream2(({ next }) => {
-  var _a;
   const update = () => {
-    var _a2;
-    const info = (_a2 = networkManager.connectionLog) == null ? void 0 : _a2.swarms;
+    const info = networkManager.connectionLog?.swarms;
     if (info) {
       next({
         data: info
       });
     }
   };
-  (_a = networkManager.connectionLog) == null ? void 0 : _a.update.on(update);
+  networkManager.connectionLog?.update.on(update);
   update();
 });
 var getNetworkPeers = ({ networkManager }, request) => {
@@ -158,7 +150,7 @@ var getNetworkPeers = ({ networkManager }, request) => {
   }
   const map = networkManager.getSwarmMap(PublicKey2.from(request.topic));
   return {
-    peers: map == null ? void 0 : map.peers.map((peer) => ({
+    peers: map?.peers.map((peer) => ({
       ...peer,
       connections: peer.connections.map((connection) => connection.asUint8Array())
     }))
@@ -174,14 +166,14 @@ var subscribeToSpaces = (context, { spaceKeys = [] }) => {
       const spaces = [
         ...context.spaceManager.spaces.values()
       ];
-      const filteredSpaces = spaces.filter((space) => !(spaceKeys == null ? void 0 : spaceKeys.length) || spaceKeys.some((spaceKey) => spaceKey.equals(space.key)));
+      const filteredSpaces = spaces.filter((space) => !spaceKeys?.length || spaceKeys.some((spaceKey) => spaceKey.equals(space.key)));
       next({
         spaces: filteredSpaces.map((space) => {
           const spaceMetadata = context.metadataStore.spaces.find((spaceMetadata2) => spaceMetadata2.key.equals(space.key));
           return {
             key: space.key,
             isOpen: space.isOpen,
-            timeframe: spaceMetadata == null ? void 0 : spaceMetadata.dataTimeframe,
+            timeframe: spaceMetadata?.dataTimeframe,
             genesisFeed: space.genesisFeedKey,
             controlFeed: space.controlFeedKey,
             dataFeed: space.dataFeedKey
@@ -195,7 +187,7 @@ var subscribeToSpaces = (context, { spaceKeys = [] }) => {
       await update();
     });
     return () => {
-      unsubscribe == null ? void 0 : unsubscribe();
+      unsubscribe?.();
       clearTimeout(timeout);
     };
   });
@@ -254,16 +246,15 @@ var DevtoolsServiceImpl = class {
     };
   }
   async getStorageInfo() {
-    var _a, _b, _c, _d, _e;
-    const storageUsage = (_c = await ((_b = (_a = this.params.context.storage).getDiskInfo) == null ? void 0 : _b.call(_a))) != null ? _c : {
+    const storageUsage = await this.params.context.storage.getDiskInfo?.() ?? {
       used: 0
     };
     const navigatorInfo = typeof navigator === "object" ? await navigator.storage.estimate() : void 0;
     return {
       type: this.params.context.storage.type,
       storageUsage: storageUsage.used,
-      originUsage: (_d = navigatorInfo == null ? void 0 : navigatorInfo.usage) != null ? _d : 0,
-      usageQuota: (_e = navigatorInfo == null ? void 0 : navigatorInfo.quota) != null ? _e : 0
+      originUsage: navigatorInfo?.usage ?? 0,
+      usageQuota: navigatorInfo?.quota ?? 0
     };
   }
   async getBlobs() {
@@ -449,7 +440,7 @@ var TrustedKeySetAuthVerifier = class {
         return await trigger.wait({
           timeout: this._params.authTimeout
         });
-      } catch (e) {
+      } catch {
         return false;
       } finally {
         clear();
@@ -471,8 +462,19 @@ import { writeMessages } from "@dxos/feed-store";
 import { invariant } from "@dxos/invariant";
 import { log as log2 } from "@dxos/log";
 import { AdmittedFeed } from "@dxos/protocols/proto/dxos/halo/credentials";
+import { trace } from "@dxos/tracing";
+function _ts_decorate(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
+    r = Reflect.decorate(decorators, target, key, desc);
+  else
+    for (var i = decorators.length - 1; i >= 0; i--)
+      if (d = decorators[i])
+        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
 var __dxlog_file2 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/identity.ts";
-var Identity = class {
+var Identity = class Identity2 {
   constructor({ space, signer, identityKey, deviceKey }) {
     this.stateUpdate = new Event();
     this.space = space;
@@ -498,12 +500,12 @@ var Identity = class {
   get authorizedDeviceKeys() {
     return this._deviceStateMachine.authorizedDeviceKeys;
   }
-  async open() {
+  async open(ctx) {
     await this.space.spaceState.addCredentialProcessor(this._deviceStateMachine);
     await this.space.spaceState.addCredentialProcessor(this._profileStateMachine);
-    await this.space.open();
+    await this.space.open(ctx);
   }
-  async close() {
+  async close(ctx) {
     await this.authVerifier.close();
     await this.space.spaceState.removeCredentialProcessor(this._profileStateMachine);
     await this.space.spaceState.removeCredentialProcessor(this._deviceStateMachine);
@@ -534,11 +536,10 @@ var Identity = class {
     return this._deviceStateMachine.deviceCredentialChain;
   }
   getAdmissionCredentials() {
-    var _a, _b;
     return {
       deviceKey: this.deviceKey,
-      controlFeedKey: (_a = this.space.controlFeedKey) != null ? _a : failUndefined(),
-      dataFeedKey: (_b = this.space.dataFeedKey) != null ? _b : failUndefined()
+      controlFeedKey: this.space.controlFeedKey ?? failUndefined(),
+      dataFeedKey: this.space.dataFeedKey ?? failUndefined()
     };
   }
   /**
@@ -548,7 +549,7 @@ var Identity = class {
   getIdentityCredentialSigner() {
     invariant(this._deviceStateMachine.deviceCredentialChain, "Device credential chain is not ready.", {
       F: __dxlog_file2,
-      L: 134,
+      L: 139,
       S: this,
       A: [
         "this._deviceStateMachine.deviceCredentialChain",
@@ -572,7 +573,7 @@ var Identity = class {
       dataFeedKey
     }, {
       F: __dxlog_file2,
-      L: 150,
+      L: 155,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -613,18 +614,40 @@ var Identity = class {
     })));
   }
 };
+_ts_decorate([
+  trace.span()
+], Identity.prototype, "open", null);
+_ts_decorate([
+  trace.span()
+], Identity.prototype, "close", null);
+Identity = _ts_decorate([
+  trace.resource()
+], Identity);
 
 // packages/sdk/client-services/src/packlets/identity/identity-manager.ts
 import { Event as Event2 } from "@dxos/async";
+import { Context as Context3 } from "@dxos/context";
 import { createCredentialSignerWithKey as createCredentialSignerWithKey2, CredentialGenerator } from "@dxos/credentials";
 import { invariant as invariant2 } from "@dxos/invariant";
 import { PublicKey as PublicKey3 } from "@dxos/keys";
 import { log as log3 } from "@dxos/log";
-import { trace } from "@dxos/protocols";
+import { trace as trace2 } from "@dxos/protocols";
 import { AdmittedFeed as AdmittedFeed2 } from "@dxos/protocols/proto/dxos/halo/credentials";
+import { Timeframe } from "@dxos/timeframe";
+import { trace as Trace } from "@dxos/tracing";
 import { deferFunction } from "@dxos/util";
+function _ts_decorate2(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
+    r = Reflect.decorate(decorators, target, key, desc);
+  else
+    for (var i = decorators.length - 1; i >= 0; i--)
+      if (d = decorators[i])
+        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
 var __dxlog_file3 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/identity-manager.ts";
-var IdentityManager = class {
+var IdentityManager = class IdentityManager2 {
   // TODO(burdon): IdentityManagerParams.
   // TODO(dmaretskyi): Perhaps this should take/generate the peerKey outside of an initialized identity.
   constructor(_metadataStore, _keyring, _feedStore, _spaceManager) {
@@ -637,14 +660,13 @@ var IdentityManager = class {
   get identity() {
     return this._identity;
   }
-  async open() {
-    var _a;
+  async open(ctx) {
     const traceId = PublicKey3.random().toHex();
-    log3.trace("dxos.halo.identity-manager.open", trace.begin({
+    log3.trace("dxos.halo.identity-manager.open", trace2.begin({
       id: traceId
     }), {
       F: __dxlog_file3,
-      L: 69,
+      L: 73,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -654,43 +676,41 @@ var IdentityManager = class {
       identityRecord
     }, {
       F: __dxlog_file3,
-      L: 73,
+      L: 77,
       S: this,
       C: (f, a) => f(...a)
     });
     if (identityRecord) {
       this._identity = await this._constructIdentity(identityRecord);
-      await this._identity.open();
+      await this._identity.open(ctx);
       await this._identity.ready();
       log3.trace("dxos.halo.identity", {
         identityKey: identityRecord.identityKey,
-        displayName: (_a = this._identity.profileDocument) == null ? void 0 : _a.displayName
+        displayName: this._identity.profileDocument?.displayName
       }, {
         F: __dxlog_file3,
-        L: 78,
+        L: 82,
         S: this,
         C: (f, a) => f(...a)
       });
       this.stateUpdate.emit();
     }
-    log3.trace("dxos.halo.identity-manager.open", trace.end({
+    log3.trace("dxos.halo.identity-manager.open", trace2.end({
       id: traceId
     }), {
       F: __dxlog_file3,
-      L: 84,
+      L: 88,
       S: this,
       C: (f, a) => f(...a)
     });
   }
   async close() {
-    var _a;
-    await ((_a = this._identity) == null ? void 0 : _a.close());
+    await this._identity?.close(new Context3());
   }
   async createIdentity({ displayName } = {}) {
-    var _a;
     invariant2(!this._identity, "Identity already exists.", {
       F: __dxlog_file3,
-      L: 92,
+      L: 96,
       S: this,
       A: [
         "!this._identity",
@@ -699,7 +719,7 @@ var IdentityManager = class {
     });
     log3("creating identity...", void 0, {
       F: __dxlog_file3,
-      L: 93,
+      L: 97,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -715,12 +735,12 @@ var IdentityManager = class {
       }
     };
     const identity = await this._constructIdentity(identityRecord);
-    await identity.open();
+    await identity.open(new Context3());
     {
       const generator = new CredentialGenerator(this._keyring, identityRecord.identityKey, identityRecord.deviceKey);
       invariant2(identityRecord.haloSpace.genesisFeedKey, "Genesis feed key is required.", {
         F: __dxlog_file3,
-        L: 112,
+        L: 116,
         S: this,
         A: [
           "identityRecord.haloSpace.genesisFeedKey",
@@ -729,7 +749,7 @@ var IdentityManager = class {
       });
       invariant2(identityRecord.haloSpace.dataFeedKey, "Data feed key is required.", {
         F: __dxlog_file3,
-        L: 113,
+        L: 117,
         S: this,
         A: [
           "identityRecord.haloSpace.dataFeedKey",
@@ -761,10 +781,10 @@ var IdentityManager = class {
     await this._identity.ready();
     log3.trace("dxos.halo.identity", {
       identityKey: identityRecord.identityKey,
-      displayName: (_a = this._identity.profileDocument) == null ? void 0 : _a.displayName
+      displayName: this._identity.profileDocument?.displayName
     }, {
       F: __dxlog_file3,
-      L: 148,
+      L: 152,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -774,7 +794,7 @@ var IdentityManager = class {
       deviceKey: identity.deviceKey
     }, {
       F: __dxlog_file3,
-      L: 154,
+      L: 158,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -784,18 +804,17 @@ var IdentityManager = class {
   * Accept an existing identity. Expects it's device key to be authorized (now or later).
   */
   async acceptIdentity(params) {
-    var _a;
     log3("accepting identity", {
       params
     }, {
       F: __dxlog_file3,
-      L: 162,
+      L: 166,
       S: this,
       C: (f, a) => f(...a)
     });
     invariant2(!this._identity, "Identity already exists.", {
       F: __dxlog_file3,
-      L: 163,
+      L: 167,
       S: this,
       A: [
         "!this._identity",
@@ -814,16 +833,16 @@ var IdentityManager = class {
       }
     };
     const identity = await this._constructIdentity(identityRecord);
-    await identity.open();
+    await identity.open(new Context3());
     this._identity = identity;
     await this._metadataStore.setIdentityRecord(identityRecord);
     await this._identity.ready();
     log3.trace("dxos.halo.identity", {
       identityKey: identityRecord.identityKey,
-      displayName: (_a = this._identity.profileDocument) == null ? void 0 : _a.displayName
+      displayName: this._identity.profileDocument?.displayName
     }, {
       F: __dxlog_file3,
-      L: 182,
+      L: 186,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -833,16 +852,48 @@ var IdentityManager = class {
       deviceKey: identity.deviceKey
     }, {
       F: __dxlog_file3,
-      L: 188,
+      L: 192,
       S: this,
       C: (f, a) => f(...a)
     });
     return identity;
   }
+  /**
+  * Update the profile document of an existing identity.
+  */
+  async updateProfile(profile) {
+    invariant2(this._identity, "Identity not initialized.", {
+      F: __dxlog_file3,
+      L: 200,
+      S: this,
+      A: [
+        "this._identity",
+        "'Identity not initialized.'"
+      ]
+    });
+    const credential = await this._identity.getIdentityCredentialSigner().createCredential({
+      subject: this._identity.identityKey,
+      assertion: {
+        "@type": "dxos.halo.credentials.IdentityProfile",
+        profile
+      }
+    });
+    const receipt = await this._identity.controlPipeline.writer.write({
+      credential: {
+        credential
+      }
+    });
+    await this._identity.controlPipeline.state.waitUntilTimeframe(new Timeframe([
+      [
+        receipt.feedKey,
+        receipt.seq
+      ]
+    ]));
+  }
   async _constructIdentity(identityRecord) {
     invariant2(!this._identity, void 0, {
       F: __dxlog_file3,
-      L: 193,
+      L: 214,
       S: this,
       A: [
         "!this._identity",
@@ -853,13 +904,13 @@ var IdentityManager = class {
       identityRecord
     }, {
       F: __dxlog_file3,
-      L: 194,
+      L: 215,
       S: this,
       C: (f, a) => f(...a)
     });
     invariant2(identityRecord.haloSpace.controlFeedKey, void 0, {
       F: __dxlog_file3,
-      L: 197,
+      L: 218,
       S: this,
       A: [
         "identityRecord.haloSpace.controlFeedKey",
@@ -871,7 +922,7 @@ var IdentityManager = class {
     });
     invariant2(identityRecord.haloSpace.dataFeedKey, void 0, {
       F: __dxlog_file3,
-      L: 201,
+      L: 222,
       S: this,
       A: [
         "identityRecord.haloSpace.dataFeedKey",
@@ -903,7 +954,7 @@ var IdentityManager = class {
       identityKey: identityRecord.identityKey
     }, {
       F: __dxlog_file3,
-      L: 225,
+      L: 246,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -924,7 +975,7 @@ var IdentityManager = class {
       onAuthFailure: () => {
         log3.warn("auth failure", void 0, {
           F: __dxlog_file3,
-          L: 244,
+          L: 265,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -933,6 +984,12 @@ var IdentityManager = class {
     });
   }
 };
+_ts_decorate2([
+  Trace.span()
+], IdentityManager.prototype, "open", null);
+IdentityManager = _ts_decorate2([
+  Trace.resource()
+], IdentityManager);
 
 // packages/sdk/client-services/src/packlets/identity/identity-service.ts
 import { Stream as Stream7 } from "@dxos/codec-protobuf";
@@ -941,12 +998,13 @@ import { todo } from "@dxos/debug";
 import { invariant as invariant3 } from "@dxos/invariant";
 var __dxlog_file4 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/identity-service.ts";
 var IdentityServiceImpl = class {
-  // TODO(wittjosiah): Remove dependency on service context.
-  constructor(_serviceContext) {
-    this._serviceContext = _serviceContext;
+  constructor(_createIdentity, _identityManager, _keyring) {
+    this._createIdentity = _createIdentity;
+    this._identityManager = _identityManager;
+    this._keyring = _keyring;
   }
   async createIdentity(request) {
-    await this._serviceContext.createIdentity(request);
+    await this._createIdentity(request);
     return this._getIdentity();
   }
   async recoverIdentity(request) {
@@ -958,34 +1016,47 @@ var IdentityServiceImpl = class {
         identity: this._getIdentity()
       });
       emitNext();
-      return this._serviceContext.identityManager.stateUpdate.on(emitNext);
+      return this._identityManager.stateUpdate.on(emitNext);
     });
   }
   _getIdentity() {
-    if (!this._serviceContext.identityManager.identity) {
+    if (!this._identityManager.identity) {
       return void 0;
     }
     return {
-      identityKey: this._serviceContext.identityManager.identity.identityKey,
-      spaceKey: this._serviceContext.identityManager.identity.space.key,
-      profile: this._serviceContext.identityManager.identity.profileDocument
+      identityKey: this._identityManager.identity.identityKey,
+      spaceKey: this._identityManager.identity.space.key,
+      profile: this._identityManager.identity.profileDocument
     };
   }
+  async updateProfile(profile) {
+    invariant3(this._identityManager.identity, "Identity not initialized.", {
+      F: __dxlog_file4,
+      L: 59,
+      S: this,
+      A: [
+        "this._identityManager.identity",
+        "'Identity not initialized.'"
+      ]
+    });
+    await this._identityManager.updateProfile(profile);
+    return this._getIdentity();
+  }
   async signPresentation({ presentation, nonce }) {
-    invariant3(this._serviceContext.identityManager.identity, "Identity not initialized.", {
+    invariant3(this._identityManager.identity, "Identity not initialized.", {
       F: __dxlog_file4,
-      L: 56,
+      L: 65,
       S: this,
       A: [
-        "this._serviceContext.identityManager.identity",
+        "this._identityManager.identity",
         "'Identity not initialized.'"
       ]
     });
     return await signPresentation({
       presentation,
-      signer: this._serviceContext.keyring,
-      signerKey: this._serviceContext.identityManager.identity.deviceKey,
-      chain: this._serviceContext.identityManager.identity.deviceCredentialChain,
+      signer: this._keyring,
+      signerKey: this._identityManager.identity.deviceKey,
+      chain: this._identityManager.identity.deviceCredentialChain,
       nonce
     });
   }
@@ -1084,25 +1155,25 @@ var DeviceInvitationProtocol = class {
 // packages/sdk/client-services/src/packlets/invitations/invitations-handler.ts
 import { PushStream, scheduleTask as scheduleTask2, TimeoutError, Trigger as Trigger3 } from "@dxos/async";
 import { AuthenticatingInvitationObservable, AUTHENTICATION_CODE_LENGTH, CancellableInvitationObservable, INVITATION_TIMEOUT } from "@dxos/client-protocol";
-import { Context as Context4 } from "@dxos/context";
+import { Context as Context5 } from "@dxos/context";
 import { generatePasscode } from "@dxos/credentials";
 import { InvalidInvitationExtensionRoleError as InvalidInvitationExtensionRoleError2 } from "@dxos/errors";
 import { invariant as invariant6 } from "@dxos/invariant";
 import { PublicKey as PublicKey5 } from "@dxos/keys";
 import { log as log5 } from "@dxos/log";
 import { createTeleportProtocolFactory, StarTopology } from "@dxos/network-manager";
-import { trace as trace3 } from "@dxos/protocols";
+import { trace as trace4 } from "@dxos/protocols";
 import { Invitation as Invitation3 } from "@dxos/protocols/proto/dxos/client/services";
 import { AuthenticationResponse as AuthenticationResponse2 } from "@dxos/protocols/proto/dxos/halo/invitations";
 
 // packages/sdk/client-services/src/packlets/invitations/invitation-extension.ts
 import { Trigger as Trigger2 } from "@dxos/async";
-import { cancelWithContext, Context as Context3 } from "@dxos/context";
+import { cancelWithContext, Context as Context4 } from "@dxos/context";
 import { InvalidInvitationExtensionRoleError } from "@dxos/errors";
 import { invariant as invariant5 } from "@dxos/invariant";
 import { PublicKey as PublicKey4 } from "@dxos/keys";
 import { log as log4 } from "@dxos/log";
-import { schema as schema2, trace as trace2 } from "@dxos/protocols";
+import { schema as schema2, trace as trace3 } from "@dxos/protocols";
 import { Invitation as Invitation2 } from "@dxos/protocols/proto/dxos/client/services";
 import { AuthenticationResponse, Options } from "@dxos/protocols/proto/dxos/halo/invitations";
 import { RpcExtension } from "@dxos/teleport";
@@ -1120,7 +1191,7 @@ var InvitationHostExtension = class extends RpcExtension {
       }
     });
     this._callbacks = _callbacks;
-    this._ctx = new Context3();
+    this._ctx = new Context4();
     this._remoteOptionsTrigger = new Trigger2();
     this.invitation = void 0;
     this.guestProfile = void 0;
@@ -1149,7 +1220,7 @@ var InvitationHostExtension = class extends RpcExtension {
         introduce: async (request) => {
           const { profile, invitationId } = request;
           const traceId = PublicKey4.random().toHex();
-          log4.trace("dxos.sdk.invitation-handler.host.introduce", trace2.begin({
+          log4.trace("dxos.sdk.invitation-handler.host.introduce", trace3.begin({
             id: traceId
           }), {
             F: __dxlog_file6,
@@ -1186,7 +1257,7 @@ var InvitationHostExtension = class extends RpcExtension {
             ...this.invitation,
             state: Invitation2.State.READY_FOR_AUTHENTICATION
           });
-          log4.trace("dxos.sdk.invitation-handler.host.introduce", trace2.end({
+          log4.trace("dxos.sdk.invitation-handler.host.introduce", trace3.end({
             id: traceId
           }), {
             F: __dxlog_file6,
@@ -1201,7 +1272,7 @@ var InvitationHostExtension = class extends RpcExtension {
         },
         authenticate: async ({ authCode: code }) => {
           const traceId = PublicKey4.random().toHex();
-          log4.trace("dxos.sdk.invitation-handler.host.authenticate", trace2.begin({
+          log4.trace("dxos.sdk.invitation-handler.host.authenticate", trace3.begin({
             id: traceId
           }), {
             F: __dxlog_file6,
@@ -1264,7 +1335,7 @@ var InvitationHostExtension = class extends RpcExtension {
               break;
             }
           }
-          log4.trace("dxos.sdk.invitation-handler.host.authenticate", trace2.end({
+          log4.trace("dxos.sdk.invitation-handler.host.authenticate", trace3.end({
             id: traceId,
             data: {
               status
@@ -1281,7 +1352,7 @@ var InvitationHostExtension = class extends RpcExtension {
         },
         admit: async (request) => {
           const traceId = PublicKey4.random().toHex();
-          log4.trace("dxos.sdk.invitation-handler.host.admit", trace2.begin({
+          log4.trace("dxos.sdk.invitation-handler.host.admit", trace3.begin({
             id: traceId
           }), {
             F: __dxlog_file6,
@@ -1303,7 +1374,7 @@ var InvitationHostExtension = class extends RpcExtension {
               throw new Error("Not authenticated");
             }
             const response = await this._callbacks.admit(request);
-            log4.trace("dxos.sdk.invitation-handler.host.admit", trace2.end({
+            log4.trace("dxos.sdk.invitation-handler.host.admit", trace3.end({
               id: traceId
             }), {
               F: __dxlog_file6,
@@ -1321,7 +1392,6 @@ var InvitationHostExtension = class extends RpcExtension {
     };
   }
   async onOpen(context) {
-    var _a;
     await super.onOpen(context);
     try {
       await this.rpc.InvitationHostService.options({
@@ -1330,7 +1400,7 @@ var InvitationHostExtension = class extends RpcExtension {
       await cancelWithContext(this._ctx, this._remoteOptionsTrigger.wait({
         timeout: OPTIONS_TIMEOUT
       }));
-      if (((_a = this._remoteOptions) == null ? void 0 : _a.role) !== Options.Role.GUEST) {
+      if (this._remoteOptions?.role !== Options.Role.GUEST) {
         throw new InvalidInvitationExtensionRoleError(void 0, {
           expected: Options.Role.GUEST,
           remoteOptions: this._remoteOptions
@@ -1356,7 +1426,7 @@ var InvitationGuestExtension = class extends RpcExtension {
       }
     });
     this._callbacks = _callbacks;
-    this._ctx = new Context3();
+    this._ctx = new Context4();
     this._remoteOptionsTrigger = new Trigger2();
   }
   async getHandlers() {
@@ -1388,7 +1458,6 @@ var InvitationGuestExtension = class extends RpcExtension {
     };
   }
   async onOpen(context) {
-    var _a;
     await super.onOpen(context);
     try {
       log4("begin options", void 0, {
@@ -1409,7 +1478,7 @@ var InvitationGuestExtension = class extends RpcExtension {
         S: this,
         C: (f, a) => f(...a)
       });
-      if (((_a = this._remoteOptions) == null ? void 0 : _a.role) !== Options.Role.HOST) {
+      if (this._remoteOptions?.role !== Options.Role.HOST) {
         throw new InvalidInvitationExtensionRoleError(void 0, {
           expected: Options.Role.HOST,
           remoteOptions: this._remoteOptions
@@ -1448,9 +1517,8 @@ var InvitationsHandler = class {
     this._networkManager = _networkManager;
   }
   createInvitation(protocol, options) {
-    var _a;
-    const { invitationId = PublicKey5.random().toHex(), type = Invitation3.Type.INTERACTIVE, authMethod = Invitation3.AuthMethod.SHARED_SECRET, state = Invitation3.State.INIT, timeout = INVITATION_TIMEOUT, swarmKey = PublicKey5.random() } = options != null ? options : {};
-    const authCode = (_a = options == null ? void 0 : options.authCode) != null ? _a : authMethod === Invitation3.AuthMethod.SHARED_SECRET ? generatePasscode(AUTHENTICATION_CODE_LENGTH) : void 0;
+    const { invitationId = PublicKey5.random().toHex(), type = Invitation3.Type.INTERACTIVE, authMethod = Invitation3.AuthMethod.SHARED_SECRET, state = Invitation3.State.INIT, timeout = INVITATION_TIMEOUT, swarmKey = PublicKey5.random() } = options ?? {};
+    const authCode = options?.authCode ?? (authMethod === Invitation3.AuthMethod.SHARED_SECRET ? generatePasscode(AUTHENTICATION_CODE_LENGTH) : void 0);
     invariant6(protocol, void 0, {
       F: __dxlog_file7,
       L: 76,
@@ -1471,7 +1539,7 @@ var InvitationsHandler = class {
       ...protocol.getInvitationContext()
     };
     const stream = new PushStream();
-    const ctx = new Context4({
+    const ctx = new Context5({
       onError: (err) => {
         void ctx.dispose();
         stream.error(err);
@@ -1503,9 +1571,8 @@ var InvitationsHandler = class {
           return invitation;
         },
         admit: async (admissionRequest) => {
-          var _a2, _b, _c;
           try {
-            const deviceKey = (_c = (_a2 = admissionRequest.device) == null ? void 0 : _a2.deviceKey) != null ? _c : (_b = admissionRequest.space) == null ? void 0 : _b.deviceKey;
+            const deviceKey = admissionRequest.device?.deviceKey ?? admissionRequest.space?.deviceKey;
             invariant6(deviceKey, void 0, {
               F: __dxlog_file7,
               L: 119,
@@ -1527,7 +1594,7 @@ var InvitationsHandler = class {
           scheduleTask2(ctx, async () => {
             const traceId = PublicKey5.random().toHex();
             try {
-              log5.trace("dxos.sdk.invitations-handler.host.onOpen", trace3.begin({
+              log5.trace("dxos.sdk.invitations-handler.host.onOpen", trace4.begin({
                 id: traceId
               }), {
                 F: __dxlog_file7,
@@ -1563,7 +1630,7 @@ var InvitationsHandler = class {
                 ...invitation,
                 state: Invitation3.State.SUCCESS
               });
-              log5.trace("dxos.sdk.invitations-handler.host.onOpen", trace3.end({
+              log5.trace("dxos.sdk.invitations-handler.host.onOpen", trace4.end({
                 id: traceId
               }), {
                 F: __dxlog_file7,
@@ -1594,7 +1661,7 @@ var InvitationsHandler = class {
                 });
                 stream.error(err);
               }
-              log5.trace("dxos.sdk.invitations-handler.host.onOpen", trace3.error({
+              log5.trace("dxos.sdk.invitations-handler.host.onOpen", trace4.error({
                 id: traceId,
                 error: err
               }), {
@@ -1702,7 +1769,7 @@ var InvitationsHandler = class {
         ...newData
       });
     };
-    const ctx = new Context4({
+    const ctx = new Context5({
       onError: (err) => {
         if (err instanceof TimeoutError) {
           log5("timeout", {
@@ -1759,7 +1826,7 @@ var InvitationsHandler = class {
           scheduleTask2(ctx, async () => {
             const traceId = PublicKey5.random().toHex();
             try {
-              log5.trace("dxos.sdk.invitations-handler.guest.onOpen", trace3.begin({
+              log5.trace("dxos.sdk.invitations-handler.guest.onOpen", trace4.begin({
                 id: traceId
               }), {
                 F: __dxlog_file7,
@@ -1878,7 +1945,7 @@ var InvitationsHandler = class {
                 ...result,
                 state: Invitation3.State.SUCCESS
               });
-              log5.trace("dxos.sdk.invitations-handler.guest.onOpen", trace3.end({
+              log5.trace("dxos.sdk.invitations-handler.guest.onOpen", trace4.end({
                 id: traceId
               }), {
                 F: __dxlog_file7,
@@ -1908,7 +1975,7 @@ var InvitationsHandler = class {
                 });
                 stream.error(err);
               }
-              log5.trace("dxos.sdk.invitations-handler.guest.onOpen", trace3.error({
+              log5.trace("dxos.sdk.invitations-handler.guest.onOpen", trace4.error({
                 id: traceId,
                 error: err
               }), {
@@ -2204,7 +2271,6 @@ var SpaceInvitationProtocol = class {
     };
   }
   async admit(request, guestProfile) {
-    var _a;
     invariant8(this._spaceKey, void 0, {
       F: __dxlog_file9,
       L: 42,
@@ -2268,7 +2334,7 @@ var SpaceInvitationProtocol = class {
       space: {
         credential: spaceMemberCredential,
         controlTimeframe: space.inner.controlPipeline.state.timeframe,
-        dataTimeframe: (_a = space.dataPipeline.pipelineState) == null ? void 0 : _a.timeframe
+        dataTimeframe: space.dataPipeline.pipelineState?.timeframe
       }
     };
   }
@@ -2372,9 +2438,8 @@ var ClientRpcServer = class {
     await this._rpcPeer.close();
   }
   _getServiceHandler(serviceName) {
-    var _a;
     if (!this._handlerCache.has(serviceName)) {
-      const [key, descriptor] = (_a = Object.entries(this._serviceRegistry.descriptors).find(([key2, descriptor2]) => descriptor2.name === serviceName)) != null ? _a : raise(new Error(`Service not available: ${serviceName}`));
+      const [key, descriptor] = Object.entries(this._serviceRegistry.descriptors).find(([key2, descriptor2]) => descriptor2.name === serviceName) ?? raise(new Error(`Service not available: ${serviceName}`));
       const service = this._serviceRegistry.services[key];
       if (!service) {
         throw new Error(`Service not available: ${serviceName}`);
@@ -2385,37 +2450,195 @@ var ClientRpcServer = class {
   }
 };
 
+// packages/sdk/client-services/src/packlets/services/diagnostics.ts
+import { getFirstStreamValue } from "@dxos/codec-protobuf";
+import { credentialTypeFilter } from "@dxos/credentials";
+import { DocumentModel } from "@dxos/document-model";
+import { invariant as invariant9 } from "@dxos/invariant";
+import { log as log8 } from "@dxos/log";
+import { STORAGE_VERSION } from "@dxos/protocols";
+import { SpaceMember } from "@dxos/protocols/proto/dxos/client/services";
+
+// packages/sdk/client-services/src/version.ts
+var DXOS_VERSION = "0.1.56-main.0e9f69e";
+
+// packages/sdk/client-services/src/packlets/services/platform.ts
+var getPlatform = () => {
+  if (process.browser) {
+    if (typeof window !== "undefined") {
+      const { userAgent } = window.navigator;
+      return {
+        type: "browser",
+        userAgent,
+        uptime: Math.floor((Date.now() - window.performance.timeOrigin) / 1e3)
+      };
+    } else {
+      return {
+        type: "shared-worker",
+        uptime: Math.floor((Date.now() - performance.timeOrigin) / 1e3)
+      };
+    }
+  } else {
+    const { platform, version, arch } = process;
+    return {
+      type: "node",
+      platform: `${platform} ${version} ${arch}`,
+      runtime: process.version,
+      uptime: Math.floor(process.uptime()),
+      memory: process.memoryUsage()
+    };
+  }
+};
+
+// packages/sdk/client-services/src/packlets/services/diagnostics.ts
+var __dxlog_file10 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/services/diagnostics.ts";
+var DEFAULT_TIMEOUT = 1e3;
+var createDiagnostics = async (clientServices, serviceContext, config) => {
+  const diagnostics = {
+    created: (/* @__PURE__ */ new Date()).toISOString(),
+    platform: getPlatform(),
+    client: {
+      version: DXOS_VERSION,
+      storage: {
+        version: STORAGE_VERSION
+      }
+    }
+  };
+  {
+    invariant9(clientServices.LoggingService, "SystemService is not available.", {
+      F: __dxlog_file10,
+      L: 87,
+      S: void 0,
+      A: [
+        "clientServices.LoggingService",
+        "'SystemService is not available.'"
+      ]
+    });
+    diagnostics.metrics = await getFirstStreamValue(clientServices.LoggingService.queryMetrics({}), {
+      timeout: DEFAULT_TIMEOUT
+    }).catch(() => void 0);
+  }
+  const identity = serviceContext.identityManager.identity;
+  if (identity) {
+    diagnostics.identity = {
+      identityKey: identity.identityKey,
+      spaceKey: identity.space.key,
+      profile: identity.profileDocument
+    };
+    const { devices } = await getFirstStreamValue(clientServices.DevicesService.queryDevices(), {
+      timeout: DEFAULT_TIMEOUT
+    }).catch(() => void 0) ?? {};
+    diagnostics.devices = devices;
+    if (serviceContext.dataSpaceManager) {
+      diagnostics.spaces = await Promise.all(Array.from(serviceContext.dataSpaceManager.spaces.values()).map((space) => getSpaceStats(space)) ?? []);
+    }
+    const { feeds = [] } = await getFirstStreamValue(clientServices.DevtoolsHost.subscribeToFeeds({}), {
+      timeout: DEFAULT_TIMEOUT
+    }).catch(() => void 0) ?? {};
+    diagnostics.feeds = feeds.map(({ feedKey, bytes, length }) => ({
+      feedKey,
+      bytes,
+      length
+    }));
+  }
+  diagnostics.config = config.values;
+  return diagnostics;
+};
+var getProperties = (space) => {
+  let properties = {};
+  try {
+    const propertiesItem = space.dataPipeline.itemManager.items.find((item) => item.modelMeta?.type === DocumentModel.meta.type && item.state?.type === "dxos.sdk.client.Properties");
+    const state = propertiesItem?.state;
+    properties = state?.data;
+  } catch (err) {
+    log8.warn(err.message, void 0, {
+      F: __dxlog_file10,
+      L: 144,
+      S: void 0,
+      C: (f, a) => f(...a)
+    });
+  }
+  return properties;
+};
+var getSpaceStats = async (space) => {
+  const stats = {
+    key: space.key,
+    metrics: space.metrics,
+    epochs: space.inner.spaceState.credentials.filter(credentialTypeFilter("dxos.halo.credentials.Epoch")).map((credential) => ({
+      ...credential.subject.assertion,
+      id: credential.id
+    })),
+    members: Array.from(space.inner.spaceState.members.values()).map((member) => ({
+      identity: {
+        identityKey: member.key,
+        profile: {
+          displayName: member.assertion.profile?.displayName
+        }
+      },
+      presence: space.presence.getPeersOnline().filter(({ identityKey }) => identityKey.equals(member.key)).length > 0 ? SpaceMember.PresenceState.ONLINE : SpaceMember.PresenceState.OFFLINE
+    })),
+    pipeline: {
+      // TODO(burdon): Pick properties from credentials if needed.
+      // currentEpoch: space.dataPipeline.currentEpoch,
+      // appliedEpoch: space.dataPipeline.appliedEpoch,
+      controlFeeds: space.inner.controlPipeline.state.feeds.map((feed) => feed.key),
+      currentControlTimeframe: space.inner.controlPipeline.state.timeframe,
+      targetControlTimeframe: space.inner.controlPipeline.state.targetTimeframe,
+      totalControlTimeframe: space.inner.controlPipeline.state.endTimeframe,
+      // TODO(burdon): Empty?
+      dataFeeds: space.dataPipeline.pipelineState?.feeds.map((feed) => feed.key) ?? [],
+      startDataTimeframe: space.dataPipeline.pipelineState?.startTimeframe,
+      currentDataTimeframe: space.dataPipeline.pipelineState?.timeframe,
+      targetDataTimeframe: space.dataPipeline.pipelineState?.targetTimeframe,
+      totalDataTimeframe: space.dataPipeline.pipelineState?.endTimeframe
+    }
+  };
+  if (space.dataPipeline.itemManager) {
+    Object.assign(stats, {
+      properties: getProperties(space),
+      db: {
+        objects: space.dataPipeline.itemManager.entities.size
+      }
+    });
+  }
+  if (stats.metrics) {
+    const { open, ready } = stats.metrics;
+    stats.metrics.startupTime = open && ready && ready.getTime() - open.getTime();
+  }
+  return stats;
+};
+
 // packages/sdk/client-services/src/packlets/spaces/data-space.ts
 import { Event as Event5, scheduleTask as scheduleTask4, synchronized, trackLeaks } from "@dxos/async";
 import { AUTH_TIMEOUT as AUTH_TIMEOUT2 } from "@dxos/client-protocol";
-import { cancelWithContext as cancelWithContext2, Context as Context6 } from "@dxos/context";
+import { cancelWithContext as cancelWithContext2, Context as Context7 } from "@dxos/context";
 import { timed } from "@dxos/debug";
 import { createMappedFeedWriter } from "@dxos/echo-pipeline";
 import { CancelledError, SystemError } from "@dxos/errors";
 import { PublicKey as PublicKey7 } from "@dxos/keys";
-import { log as log9 } from "@dxos/log";
+import { log as log10 } from "@dxos/log";
 import { SpaceState } from "@dxos/protocols/proto/dxos/client/services";
 import { AdmittedFeed as AdmittedFeed3 } from "@dxos/protocols/proto/dxos/halo/credentials";
-import { Timeframe } from "@dxos/timeframe";
+import { Timeframe as Timeframe2 } from "@dxos/timeframe";
 import { ComplexSet as ComplexSet2 } from "@dxos/util";
 
 // packages/sdk/client-services/src/packlets/spaces/notarization-plugin.ts
 import { DeferredTask, Event as Event4, scheduleTask as scheduleTask3, sleep, TimeoutError as TimeoutError2, Trigger as Trigger4 } from "@dxos/async";
-import { Context as Context5, rejectOnDispose } from "@dxos/context";
-import { invariant as invariant9 } from "@dxos/invariant";
+import { Context as Context6, rejectOnDispose } from "@dxos/context";
+import { invariant as invariant10 } from "@dxos/invariant";
 import { PublicKey as PublicKey6 } from "@dxos/keys";
-import { log as log8 } from "@dxos/log";
+import { log as log9 } from "@dxos/log";
 import { schema as schema3 } from "@dxos/protocols";
 import { RpcExtension as RpcExtension2 } from "@dxos/teleport";
 import { ComplexMap as ComplexMap2, ComplexSet, entry } from "@dxos/util";
-var __dxlog_file10 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/notarization-plugin.ts";
+var __dxlog_file11 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/notarization-plugin.ts";
 var DEFAULT_RETRY_TIMEOUT = 1e3;
 var DEFAULT_SUCCESS_DELAY = 1e3;
 var DEFAULT_NOTARIZE_TIMEOUT = 1e4;
 var WRITER_NOT_SET_ERROR_CODE = "WRITER_NOT_SET";
 var NotarizationPlugin = class {
   constructor() {
-    this._ctx = new Context5();
+    this._ctx = new Context6();
     this._extensionOpened = new Event4();
     this._extensions = /* @__PURE__ */ new Set();
     this._processedCredentials = new ComplexSet(PublicKey6.hash);
@@ -2433,16 +2656,16 @@ var NotarizationPlugin = class {
   * Request credentials to be notarized.
   */
   async notarize({ ctx: opCtx, credentials, timeout = DEFAULT_NOTARIZE_TIMEOUT, retryTimeout = DEFAULT_RETRY_TIMEOUT, successDelay = DEFAULT_SUCCESS_DELAY }) {
-    log8("notarize", {
+    log9("notarize", {
       credentials
     }, {
-      F: __dxlog_file10,
+      F: __dxlog_file11,
       L: 90,
       S: this,
       C: (f, a) => f(...a)
     });
-    invariant9(credentials.every((credential) => credential.id), "Credentials must have an id", {
-      F: __dxlog_file10,
+    invariant10(credentials.every((credential) => credential.id), "Credentials must have an id", {
+      F: __dxlog_file11,
       L: 91,
       S: this,
       A: [
@@ -2453,10 +2676,10 @@ var NotarizationPlugin = class {
     const errors = new Trigger4();
     const ctx = this._ctx.derive({
       onError: (err) => {
-        log8.warn("Notarization error", {
+        log9.warn("Notarization error", {
           err
         }, {
-          F: __dxlog_file10,
+          F: __dxlog_file11,
           L: 99,
           S: this,
           C: (f, a) => f(...a)
@@ -2465,14 +2688,14 @@ var NotarizationPlugin = class {
         errors.throw(err);
       }
     });
-    opCtx == null ? void 0 : opCtx.onDispose(() => ctx.dispose());
+    opCtx?.onDispose(() => ctx.dispose());
     if (timeout !== 0) {
       scheduleTask3(ctx, () => {
-        log8.warn("Notarization timeout", {
+        log9.warn("Notarization timeout", {
           timeout,
           peers: Array.from(this._extensions).map((extension) => extension.remotePeerId)
         }, {
-          F: __dxlog_file10,
+          F: __dxlog_file11,
           L: 111,
           S: this,
           C: (f, a) => f(...a)
@@ -2492,10 +2715,10 @@ var NotarizationPlugin = class {
           ...this._extensions
         ].find((peer2) => !peersTried.has(peer2));
         if (!peer) {
-          log8.warn("Exhausted all peers to notarize with", {
+          log9.warn("Exhausted all peers to notarize with", {
             retryIn: retryTimeout
           }, {
-            F: __dxlog_file10,
+            F: __dxlog_file11,
             L: 136,
             S: this,
             C: (f, a) => f(...a)
@@ -2505,11 +2728,11 @@ var NotarizationPlugin = class {
           return;
         }
         peersTried.add(peer);
-        log8("try notarizing", {
+        log9("try notarizing", {
           peer: peer.localPeerId,
           credentialId: credentials.map((credential) => credential.id)
         }, {
-          F: __dxlog_file10,
+          F: __dxlog_file11,
           L: 143,
           S: this,
           C: (f, a) => f(...a)
@@ -2517,8 +2740,8 @@ var NotarizationPlugin = class {
         await peer.rpc.NotarizationService.notarize({
           credentials: credentials.filter((credential) => !this._processedCredentials.has(credential.id))
         });
-        log8("success", void 0, {
-          F: __dxlog_file10,
+        log9("success", void 0, {
+          F: __dxlog_file11,
           L: 147,
           S: this,
           C: (f, a) => f(...a)
@@ -2526,8 +2749,8 @@ var NotarizationPlugin = class {
         await sleep(successDelay);
       } catch (err) {
         if (!ctx.disposed && !err.message.includes(WRITER_NOT_SET_ERROR_CODE)) {
-          log8.warn("error notarizing (recoverable)", err, {
-            F: __dxlog_file10,
+          log9.warn("error notarizing (recoverable)", err, {
+            F: __dxlog_file11,
             L: 151,
             S: this,
             C: (f, a) => f(...a)
@@ -2544,8 +2767,8 @@ var NotarizationPlugin = class {
         allNotarized,
         errors.wait()
       ]);
-      log8("done", void 0, {
-        F: __dxlog_file10,
+      log9("done", void 0, {
+        F: __dxlog_file11,
         L: 162,
         S: this,
         C: (f, a) => f(...a)
@@ -2558,17 +2781,16 @@ var NotarizationPlugin = class {
   * Called with credentials arriving from the control pipeline.
   */
   async processCredential(credential) {
-    var _a;
     if (!credential.id) {
       return;
     }
-    (_a = this._processCredentialsTriggers.get(credential.id)) == null ? void 0 : _a.wake();
+    this._processCredentialsTriggers.get(credential.id)?.wake();
     this._processedCredentials.add(credential.id);
     this._processCredentialsTriggers.delete(credential.id);
   }
   setWriter(writer) {
-    invariant9(!this._writer, "Writer already set.", {
-      F: __dxlog_file10,
+    invariant10(!this._writer, "Writer already set.", {
+      F: __dxlog_file11,
       L: 181,
       S: this,
       A: [
@@ -2588,13 +2810,12 @@ var NotarizationPlugin = class {
   * Requests from other peers to notarize credentials.
   */
   async _onNotarize(request) {
-    var _a;
     if (!this._writer) {
       throw new Error(WRITER_NOT_SET_ERROR_CODE);
     }
-    for (const credential of (_a = request.credentials) != null ? _a : []) {
-      invariant9(credential.id, "Credential must have an id", {
-        F: __dxlog_file10,
+    for (const credential of request.credentials ?? []) {
+      invariant10(credential.id, "Credential must have an id", {
+        F: __dxlog_file11,
         L: 200,
         S: this,
         A: [
@@ -2611,10 +2832,10 @@ var NotarizationPlugin = class {
   createExtension() {
     const extension = new NotarizationTeleportExtension({
       onOpen: async () => {
-        log8("extension opened", {
+        log9("extension opened", {
           peer: extension.localPeerId
         }, {
-          F: __dxlog_file10,
+          F: __dxlog_file11,
           L: 211,
           S: this,
           C: (f, a) => f(...a)
@@ -2623,10 +2844,10 @@ var NotarizationPlugin = class {
         this._extensionOpened.emit();
       },
       onClose: async () => {
-        log8("extension closed", {
+        log9("extension closed", {
           peer: extension.localPeerId
         }, {
-          F: __dxlog_file10,
+          F: __dxlog_file11,
           L: 216,
           S: this,
           C: (f, a) => f(...a)
@@ -2670,7 +2891,7 @@ var NotarizationTeleportExtension = class extends RpcExtension2 {
 };
 
 // packages/sdk/client-services/src/packlets/spaces/data-space.ts
-function _ts_decorate(decorators, target, key, desc) {
+function _ts_decorate3(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2680,10 +2901,11 @@ function _ts_decorate(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file11 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/data-space.ts";
+var __dxlog_file12 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/data-space.ts";
+var ENABLE_FEED_PURGE = false;
 var DataSpace = class DataSpace2 {
   constructor(params) {
-    this._ctx = new Context6();
+    this._ctx = new Context7();
     this._notarizationPlugin = new NotarizationPlugin();
     this._state = SpaceState.CLOSED;
     /**
@@ -2692,7 +2914,6 @@ var DataSpace = class DataSpace2 {
     this.error = void 0;
     this.stateUpdate = new Event5();
     this.metrics = {};
-    var _a;
     this._inner = params.inner;
     this._inner.stateUpdate.on(this._ctx, () => this.stateUpdate.emit());
     this._gossip = params.gossip;
@@ -2701,7 +2922,7 @@ var DataSpace = class DataSpace2 {
     this._feedStore = params.feedStore;
     this._metadataStore = params.metadataStore;
     this._signingContext = params.signingContext;
-    this._callbacks = (_a = params.callbacks) != null ? _a : {};
+    this._callbacks = params.callbacks ?? {};
     this.authVerifier = new TrustedKeySetAuthVerifier({
       trustedKeysProvider: () => new ComplexSet2(PublicKey7.hash, Array.from(this._inner.spaceState.members.keys())),
       update: this._inner.stateUpdate,
@@ -2741,21 +2962,20 @@ var DataSpace = class DataSpace2 {
   async _open() {
     await this._notarizationPlugin.open();
     await this._inner.spaceState.addCredentialProcessor(this._notarizationPlugin);
-    await this._inner.open();
+    await this._inner.open(new Context7());
     this._state = SpaceState.CONTROL_ONLY;
     this.stateUpdate.emit();
     this.metrics = {};
-    this.metrics.open = new Date();
+    this.metrics.open = /* @__PURE__ */ new Date();
   }
   async close() {
     await this._close();
   }
   async _close() {
-    var _a, _b;
-    await ((_b = (_a = this._callbacks).beforeClose) == null ? void 0 : _b.call(_a));
+    await this._callbacks.beforeClose?.();
     this._state = SpaceState.CLOSED;
     await this._ctx.dispose();
-    this._ctx = new Context6();
+    this._ctx = new Context7();
     await this.authVerifier.close();
     await this._inner.close();
     await this._inner.spaceState.removeCredentialProcessor(this._notarizationPlugin);
@@ -2774,21 +2994,21 @@ var DataSpace = class DataSpace2 {
   initializeDataPipelineAsync() {
     scheduleTask4(this._ctx, async () => {
       try {
-        this.metrics.pipelineInitBegin = new Date();
+        this.metrics.pipelineInitBegin = /* @__PURE__ */ new Date();
         await this.initializeDataPipeline();
       } catch (err) {
         if (err instanceof CancelledError) {
-          log9("data pipeline initialization cancelled", err, {
-            F: __dxlog_file11,
-            L: 193,
+          log10("data pipeline initialization cancelled", err, {
+            F: __dxlog_file12,
+            L: 199,
             S: this,
             C: (f, a) => f(...a)
           });
           return;
         }
-        log9.error("Error initializing data pipeline", err, {
-          F: __dxlog_file11,
-          L: 197,
+        log10.error("Error initializing data pipeline", err, {
+          F: __dxlog_file12,
+          L: 203,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -2796,12 +3016,11 @@ var DataSpace = class DataSpace2 {
         this.error = err;
         this.stateUpdate.emit();
       } finally {
-        this.metrics.ready = new Date();
+        this.metrics.ready = /* @__PURE__ */ new Date();
       }
     });
   }
   async initializeDataPipeline() {
-    var _a, _b, _c, _d;
     if (this._state !== SpaceState.CONTROL_ONLY) {
       throw new SystemError("Invalid operation");
     }
@@ -2810,11 +3029,11 @@ var DataSpace = class DataSpace2 {
       ctx: this._ctx,
       breakOnStall: false
     });
-    this.metrics.controlPipelineReady = new Date();
+    this.metrics.controlPipelineReady = /* @__PURE__ */ new Date();
     await this._createWritableFeeds();
-    log9("writable feeds created", void 0, {
-      F: __dxlog_file11,
-      L: 221,
+    log10("writable feeds created", void 0, {
+      F: __dxlog_file12,
+      L: 227,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2827,11 +3046,11 @@ var DataSpace = class DataSpace2 {
       }), this._inner.controlPipeline.writer));
     }
     await this._inner.initializeDataPipeline();
-    this.metrics.dataPipelineOpen = new Date();
+    this.metrics.dataPipelineOpen = /* @__PURE__ */ new Date();
     await cancelWithContext2(this._ctx, this._inner.dataPipeline.ensureEpochInitialized());
-    log9("waiting for data pipeline to reach target timeframe", void 0, {
-      F: __dxlog_file11,
-      L: 242,
+    log10("waiting for data pipeline to reach target timeframe", void 0, {
+      F: __dxlog_file12,
+      L: 248,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2839,17 +3058,17 @@ var DataSpace = class DataSpace2 {
       ctx: this._ctx,
       breakOnStall: false
     });
-    this.metrics.dataPipelineReady = new Date();
-    log9("data pipeline ready", void 0, {
-      F: __dxlog_file11,
-      L: 251,
+    this.metrics.dataPipelineReady = /* @__PURE__ */ new Date();
+    log10("data pipeline ready", void 0, {
+      F: __dxlog_file12,
+      L: 257,
       S: this,
       C: (f, a) => f(...a)
     });
-    await ((_b = (_a = this._callbacks).beforeReady) == null ? void 0 : _b.call(_a));
+    await this._callbacks.beforeReady?.();
     this._state = SpaceState.READY;
     this.stateUpdate.emit();
-    await ((_d = (_c = this._callbacks).afterReady) == null ? void 0 : _d.call(_c));
+    await this._callbacks.afterReady?.();
   }
   async _createWritableFeeds() {
     const credentials = [];
@@ -2896,7 +3115,6 @@ var DataSpace = class DataSpace2 {
     await this._metadataStore.setWritableFeedKeys(this.key, this.inner.controlFeedKey, this.inner.dataFeedKey);
   }
   async createEpoch() {
-    var _a, _b;
     const epoch = await this.dataPipeline.createEpoch();
     const receipt = await this.inner.controlPipeline.writer.write({
       credential: {
@@ -2909,16 +3127,19 @@ var DataSpace = class DataSpace2 {
         })
       }
     });
-    await this.inner.controlPipeline.state.waitUntilTimeframe(new Timeframe([
+    await this.inner.controlPipeline.state.waitUntilTimeframe(new Timeframe2([
       [
         receipt.feedKey,
         receipt.seq
       ]
     ]));
-    for (const feed of (_b = (_a = this.inner.dataPipeline.pipelineState) == null ? void 0 : _a.feeds) != null ? _b : []) {
-      const indexBeforeEpoch = epoch.timeframe.get(feed.key);
-      if (indexBeforeEpoch) {
-        await feed.clear(0, indexBeforeEpoch + 1);
+    if (ENABLE_FEED_PURGE) {
+      for (const feed of this.inner.dataPipeline.pipelineState?.feeds ?? []) {
+        const indexBeforeEpoch = epoch.timeframe.get(feed.key);
+        if (indexBeforeEpoch === void 0) {
+          continue;
+        }
+        await feed.safeClear(0, indexBeforeEpoch + 1);
       }
     }
   }
@@ -2940,33 +3161,33 @@ var DataSpace = class DataSpace2 {
     this.stateUpdate.emit();
   }
 };
-_ts_decorate([
+_ts_decorate3([
   synchronized
 ], DataSpace.prototype, "open", null);
-_ts_decorate([
+_ts_decorate3([
   synchronized
 ], DataSpace.prototype, "close", null);
-_ts_decorate([
+_ts_decorate3([
   timed(1e4)
 ], DataSpace.prototype, "_createWritableFeeds", null);
-_ts_decorate([
+_ts_decorate3([
   synchronized
 ], DataSpace.prototype, "activate", null);
-_ts_decorate([
+_ts_decorate3([
   synchronized
 ], DataSpace.prototype, "deactivate", null);
-DataSpace = _ts_decorate([
+DataSpace = _ts_decorate3([
   trackLeaks("open", "close")
 ], DataSpace);
 
 // packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts
 import { Event as Event6, synchronized as synchronized2, trackLeaks as trackLeaks2 } from "@dxos/async";
-import { cancelWithContext as cancelWithContext3, Context as Context7 } from "@dxos/context";
+import { cancelWithContext as cancelWithContext3, Context as Context8 } from "@dxos/context";
 import { getCredentialAssertion as getCredentialAssertion2 } from "@dxos/credentials";
-import { invariant as invariant10 } from "@dxos/invariant";
+import { invariant as invariant11 } from "@dxos/invariant";
 import { PublicKey as PublicKey8 } from "@dxos/keys";
-import { log as log10 } from "@dxos/log";
-import { trace as trace4 } from "@dxos/protocols";
+import { log as log11 } from "@dxos/log";
+import { trace as trace5 } from "@dxos/protocols";
 import { SpaceState as SpaceState2 } from "@dxos/protocols/proto/dxos/client/services";
 import { Gossip, Presence } from "@dxos/teleport-extension-gossip";
 import { ComplexMap as ComplexMap3, deferFunction as deferFunction2 } from "@dxos/util";
@@ -2974,10 +3195,9 @@ import { ComplexMap as ComplexMap3, deferFunction as deferFunction2 } from "@dxo
 // packages/sdk/client-services/src/packlets/spaces/genesis.ts
 import { createCredential } from "@dxos/credentials";
 import { failUndefined as failUndefined2 } from "@dxos/debug";
-import { AdmittedFeed as AdmittedFeed4, SpaceMember } from "@dxos/protocols/proto/dxos/halo/credentials";
-import { Timeframe as Timeframe2 } from "@dxos/timeframe";
+import { AdmittedFeed as AdmittedFeed4, SpaceMember as SpaceMember2 } from "@dxos/protocols/proto/dxos/halo/credentials";
+import { Timeframe as Timeframe3 } from "@dxos/timeframe";
 var spaceGenesis = async (keyring, signingContext, space) => {
-  var _a, _b, _c, _d;
   const credentials = [
     await createCredential({
       signer: keyring,
@@ -2995,13 +3215,13 @@ var spaceGenesis = async (keyring, signingContext, space) => {
       assertion: {
         "@type": "dxos.halo.credentials.SpaceMember",
         spaceKey: space.key,
-        role: SpaceMember.Role.ADMIN,
+        role: SpaceMember2.Role.ADMIN,
         profile: signingContext.profile,
-        genesisFeedKey: (_a = space.controlFeedKey) != null ? _a : failUndefined2()
+        genesisFeedKey: space.controlFeedKey ?? failUndefined2()
       }
     }),
     await signingContext.credentialSigner.createCredential({
-      subject: (_b = space.controlFeedKey) != null ? _b : failUndefined2(),
+      subject: space.controlFeedKey ?? failUndefined2(),
       assertion: {
         "@type": "dxos.halo.credentials.AdmittedFeed",
         spaceKey: space.key,
@@ -3011,7 +3231,7 @@ var spaceGenesis = async (keyring, signingContext, space) => {
       }
     }),
     await signingContext.credentialSigner.createCredential({
-      subject: (_c = space.dataFeedKey) != null ? _c : failUndefined2(),
+      subject: space.dataFeedKey ?? failUndefined2(),
       assertion: {
         "@type": "dxos.halo.credentials.AdmittedFeed",
         spaceKey: space.key,
@@ -3021,12 +3241,12 @@ var spaceGenesis = async (keyring, signingContext, space) => {
       }
     }),
     await signingContext.credentialSigner.createCredential({
-      subject: (_d = space.key) != null ? _d : failUndefined2(),
+      subject: space.key ?? failUndefined2(),
       assertion: {
         "@type": "dxos.halo.credentials.Epoch",
         number: 0,
         previousId: void 0,
-        timeframe: new Timeframe2(),
+        timeframe: new Timeframe3(),
         snapshotCid: void 0
       }
     })
@@ -3042,7 +3262,7 @@ var spaceGenesis = async (keyring, signingContext, space) => {
 };
 
 // packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts
-function _ts_decorate2(decorators, target, key, desc) {
+function _ts_decorate4(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
     r = Reflect.decorate(decorators, target, key, desc);
@@ -3052,7 +3272,7 @@ function _ts_decorate2(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file12 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts";
+var __dxlog_file13 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts";
 var DataSpaceManager = class DataSpaceManager2 {
   constructor(_spaceManager, _metadataStore, _dataServiceSubscriptions, _keyring, _signingContext, _feedStore) {
     this._spaceManager = _spaceManager;
@@ -3061,7 +3281,7 @@ var DataSpaceManager = class DataSpaceManager2 {
     this._keyring = _keyring;
     this._signingContext = _signingContext;
     this._feedStore = _feedStore;
-    this._ctx = new Context7();
+    this._ctx = new Context8();
     this.updated = new Event6();
     this._spaces = new ComplexMap3(PublicKey8.hash);
     this._isOpen = false;
@@ -3072,35 +3292,35 @@ var DataSpaceManager = class DataSpaceManager2 {
     return this._spaces;
   }
   async open() {
-    log10("open", void 0, {
-      F: __dxlog_file12,
+    log11("open", void 0, {
+      F: __dxlog_file13,
       L: 79,
       S: this,
       C: (f, a) => f(...a)
     });
-    log10.trace("dxos.echo.data-space-manager.open", trace4.begin({
+    log11.trace("dxos.echo.data-space-manager.open", trace5.begin({
       id: this._instanceId
     }), {
-      F: __dxlog_file12,
+      F: __dxlog_file13,
       L: 80,
       S: this,
       C: (f, a) => f(...a)
     });
     await this._metadataStore.load();
-    log10("metadata loaded", {
+    log11("metadata loaded", {
       spaces: this._metadataStore.spaces.length
     }, {
-      F: __dxlog_file12,
+      F: __dxlog_file13,
       L: 82,
       S: this,
       C: (f, a) => f(...a)
     });
     for (const spaceMetadata of this._metadataStore.spaces) {
       try {
-        log10("load space", {
+        log11("load space", {
           spaceMetadata
         }, {
-          F: __dxlog_file12,
+          F: __dxlog_file13,
           L: 86,
           S: this,
           C: (f, a) => f(...a)
@@ -3110,11 +3330,11 @@ var DataSpaceManager = class DataSpaceManager2 {
           space.initializeDataPipelineAsync();
         }
       } catch (err) {
-        log10.error("Error loading space", {
+        log11.error("Error loading space", {
           spaceMetadata,
           err
         }, {
-          F: __dxlog_file12,
+          F: __dxlog_file13,
           L: 92,
           S: this,
           C: (f, a) => f(...a)
@@ -3123,18 +3343,18 @@ var DataSpaceManager = class DataSpaceManager2 {
     }
     this._isOpen = true;
     this.updated.emit();
-    log10.trace("dxos.echo.data-space-manager.open", trace4.end({
+    log11.trace("dxos.echo.data-space-manager.open", trace5.end({
       id: this._instanceId
     }), {
-      F: __dxlog_file12,
+      F: __dxlog_file13,
       L: 98,
       S: this,
       C: (f, a) => f(...a)
     });
   }
   async close() {
-    log10("close", void 0, {
-      F: __dxlog_file12,
+    log11("close", void 0, {
+      F: __dxlog_file13,
       L: 103,
       S: this,
       C: (f, a) => f(...a)
@@ -3149,8 +3369,8 @@ var DataSpaceManager = class DataSpaceManager2 {
   * Creates a new space writing the genesis credentials to the control feed.
   */
   async createSpace() {
-    invariant10(this._isOpen, "Not open.", {
-      F: __dxlog_file12,
+    invariant11(this._isOpen, "Not open.", {
+      F: __dxlog_file13,
       L: 116,
       S: this,
       A: [
@@ -3168,10 +3388,10 @@ var DataSpaceManager = class DataSpaceManager2 {
       dataFeedKey,
       state: SpaceState2.ACTIVE
     };
-    log10("creating space...", {
+    log11("creating space...", {
       spaceKey
     }, {
-      F: __dxlog_file12,
+      F: __dxlog_file13,
       L: 128,
       S: this,
       C: (f, a) => f(...a)
@@ -3180,8 +3400,8 @@ var DataSpaceManager = class DataSpaceManager2 {
     const credentials = await spaceGenesis(this._keyring, this._signingContext, space.inner);
     await this._metadataStore.addSpace(metadata);
     const memberCredential = credentials[1];
-    invariant10(getCredentialAssertion2(memberCredential)["@type"] === "dxos.halo.credentials.SpaceMember", void 0, {
-      F: __dxlog_file12,
+    invariant11(getCredentialAssertion2(memberCredential)["@type"] === "dxos.halo.credentials.SpaceMember", void 0, {
+      F: __dxlog_file13,
       L: 135,
       S: this,
       A: [
@@ -3196,16 +3416,16 @@ var DataSpaceManager = class DataSpaceManager2 {
   }
   // TODO(burdon): Rename join space.
   async acceptSpace(opts) {
-    log10("accept space", {
+    log11("accept space", {
       opts
     }, {
-      F: __dxlog_file12,
+      F: __dxlog_file13,
       L: 147,
       S: this,
       C: (f, a) => f(...a)
     });
-    invariant10(this._isOpen, "Not open.", {
-      F: __dxlog_file12,
+    invariant11(this._isOpen, "Not open.", {
+      F: __dxlog_file13,
       L: 148,
       S: this,
       A: [
@@ -3213,8 +3433,8 @@ var DataSpaceManager = class DataSpaceManager2 {
         "'Not open.'"
       ]
     });
-    invariant10(!this._spaces.has(opts.spaceKey), "Space already exists.", {
-      F: __dxlog_file12,
+    invariant11(!this._spaces.has(opts.spaceKey), "Space already exists.", {
+      F: __dxlog_file13,
       L: 149,
       S: this,
       A: [
@@ -3246,10 +3466,10 @@ var DataSpaceManager = class DataSpaceManager2 {
     }));
   }
   async _constructSpace(metadata) {
-    log10("construct space", {
+    log11("construct space", {
       metadata
     }, {
-      F: __dxlog_file12,
+      F: __dxlog_file13,
       L: 182,
       S: this,
       C: (f, a) => f(...a)
@@ -3284,8 +3504,8 @@ var DataSpaceManager = class DataSpaceManager2 {
         session.addExtension("dxos.mesh.teleport.notarization", dataSpace.notarizationPlugin.createExtension());
       },
       onAuthFailure: () => {
-        log10.warn("auth failure", void 0, {
-          F: __dxlog_file12,
+        log11.warn("auth failure", void 0, {
+          F: __dxlog_file13,
           L: 213,
           S: this,
           C: (f, a) => f(...a)
@@ -3306,10 +3526,10 @@ var DataSpaceManager = class DataSpaceManager2 {
       signingContext: this._signingContext,
       callbacks: {
         beforeReady: async () => {
-          log10("before space ready", {
+          log11("before space ready", {
             space: space.key
           }, {
-            F: __dxlog_file12,
+            F: __dxlog_file13,
             L: 231,
             S: this,
             C: (f, a) => f(...a)
@@ -3317,11 +3537,11 @@ var DataSpaceManager = class DataSpaceManager2 {
           await this._dataServiceSubscriptions.registerSpace(space.key, dataSpace.dataPipeline.databaseHost.createDataServiceHost());
         },
         afterReady: async () => {
-          log10("after space ready", {
+          log11("after space ready", {
             space: space.key,
             open: this._isOpen
           }, {
-            F: __dxlog_file12,
+            F: __dxlog_file13,
             L: 238,
             S: this,
             C: (f, a) => f(...a)
@@ -3331,10 +3551,10 @@ var DataSpaceManager = class DataSpaceManager2 {
           }
         },
         beforeClose: async () => {
-          log10("before space close", {
+          log11("before space close", {
             space: space.key
           }, {
-            F: __dxlog_file12,
+            F: __dxlog_file13,
             L: 244,
             S: this,
             C: (f, a) => f(...a)
@@ -3357,19 +3577,19 @@ var DataSpaceManager = class DataSpaceManager2 {
     return dataSpace;
   }
 };
-_ts_decorate2([
+_ts_decorate4([
   synchronized2
 ], DataSpaceManager.prototype, "open", null);
-_ts_decorate2([
+_ts_decorate4([
   synchronized2
 ], DataSpaceManager.prototype, "close", null);
-_ts_decorate2([
+_ts_decorate4([
   synchronized2
 ], DataSpaceManager.prototype, "createSpace", null);
-_ts_decorate2([
+_ts_decorate4([
   synchronized2
 ], DataSpaceManager.prototype, "acceptSpace", null);
-DataSpaceManager = _ts_decorate2([
+DataSpaceManager = _ts_decorate4([
   trackLeaks2("open", "close")
 ], DataSpaceManager);
 
@@ -3379,11 +3599,11 @@ import { Stream as Stream10 } from "@dxos/codec-protobuf";
 import { raise as raise2 } from "@dxos/debug";
 import { SpaceNotFoundError } from "@dxos/echo-pipeline";
 import { ApiError } from "@dxos/errors";
-import { log as log11 } from "@dxos/log";
+import { log as log12 } from "@dxos/log";
 import { encodeError } from "@dxos/protocols";
-import { SpaceMember as SpaceMember2, SpaceState as SpaceState3 } from "@dxos/protocols/proto/dxos/client/services";
+import { SpaceMember as SpaceMember3, SpaceState as SpaceState3 } from "@dxos/protocols/proto/dxos/client/services";
 import { humanize } from "@dxos/util";
-var __dxlog_file13 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/spaces-service.ts";
+var __dxlog_file14 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/spaces-service.ts";
 var SpacesServiceImpl = class {
   constructor(_identityManager, _spaceManager, _dataServiceSubscriptions, _getDataSpaceManager) {
     this._identityManager = _identityManager;
@@ -3400,9 +3620,8 @@ var SpacesServiceImpl = class {
     return this._serializeSpace(space);
   }
   async updateSpace({ spaceKey, state }) {
-    var _a;
     const dataSpaceManager = await this._getDataSpaceManager();
-    const space = (_a = dataSpaceManager.spaces.get(spaceKey)) != null ? _a : raise2(new SpaceNotFoundError(spaceKey));
+    const space = dataSpaceManager.spaces.get(spaceKey) ?? raise2(new SpaceNotFoundError(spaceKey));
     if (state) {
       switch (state) {
         case SpaceState3.ACTIVE:
@@ -3421,10 +3640,10 @@ var SpacesServiceImpl = class {
       const scheduler = new UpdateScheduler(ctx, async () => {
         const dataSpaceManager = await this._getDataSpaceManager();
         const spaces = Array.from(dataSpaceManager.spaces.values()).map((space) => this._serializeSpace(space));
-        log11("update", {
+        log12("update", {
           spaces
         }, {
-          F: __dxlog_file13,
+          F: __dxlog_file14,
           L: 78,
           S: this,
           C: (f, a) => f(...a)
@@ -3466,17 +3685,15 @@ var SpacesServiceImpl = class {
     });
   }
   async postMessage({ spaceKey, channel, message }) {
-    var _a;
     const dataSpaceManager = await this._getDataSpaceManager();
-    const space = (_a = dataSpaceManager.spaces.get(spaceKey)) != null ? _a : raise2(new SpaceNotFoundError(spaceKey));
+    const space = dataSpaceManager.spaces.get(spaceKey) ?? raise2(new SpaceNotFoundError(spaceKey));
     await space.postMessage(getChannelId(channel), message);
   }
   subscribeMessages({ spaceKey, channel }) {
     return new Stream10(({ ctx, next }) => {
       scheduleTask5(ctx, async () => {
-        var _a;
         const dataSpaceManager = await this._getDataSpaceManager();
-        const space = (_a = dataSpaceManager.spaces.get(spaceKey)) != null ? _a : raise2(new SpaceNotFoundError(spaceKey));
+        const space = dataSpaceManager.spaces.get(spaceKey) ?? raise2(new SpaceNotFoundError(spaceKey));
         const handle = space.listen(getChannelId(channel), (message) => {
           next(message);
         });
@@ -3486,8 +3703,7 @@ var SpacesServiceImpl = class {
   }
   queryCredentials({ spaceKey }) {
     return new Stream10(({ ctx, next }) => {
-      var _a;
-      const space = (_a = this._spaceManager.spaces.get(spaceKey)) != null ? _a : raise2(new SpaceNotFoundError(spaceKey));
+      const space = this._spaceManager.spaces.get(spaceKey) ?? raise2(new SpaceNotFoundError(spaceKey));
       const processor = {
         processCredential: async (credential) => {
           next(credential);
@@ -3498,9 +3714,8 @@ var SpacesServiceImpl = class {
     });
   }
   async writeCredentials({ spaceKey, credentials }) {
-    var _a;
-    const space = (_a = this._spaceManager.spaces.get(spaceKey)) != null ? _a : raise2(new SpaceNotFoundError(spaceKey));
-    for (const credential of credentials != null ? credentials : []) {
+    const space = this._spaceManager.spaces.get(spaceKey) ?? raise2(new SpaceNotFoundError(spaceKey));
+    for (const credential of credentials ?? []) {
       await space.controlPipeline.writer.write({
         credential: {
           credential
@@ -3509,13 +3724,11 @@ var SpacesServiceImpl = class {
     }
   }
   async createEpoch({ spaceKey }) {
-    var _a;
     const dataSpaceManager = await this._getDataSpaceManager();
-    const space = (_a = dataSpaceManager.spaces.get(spaceKey)) != null ? _a : raise2(new SpaceNotFoundError(spaceKey));
+    const space = dataSpaceManager.spaces.get(spaceKey) ?? raise2(new SpaceNotFoundError(spaceKey));
     await space.createEpoch();
   }
   _serializeSpace(space) {
-    var _a, _b, _c, _d, _e, _f, _g;
     return {
       spaceKey: space.key,
       state: space.state,
@@ -3527,16 +3740,15 @@ var SpacesServiceImpl = class {
         currentControlTimeframe: space.inner.controlPipeline.state.timeframe,
         targetControlTimeframe: space.inner.controlPipeline.state.targetTimeframe,
         totalControlTimeframe: space.inner.controlPipeline.state.endTimeframe,
-        dataFeeds: (_b = (_a = space.dataPipeline.pipelineState) == null ? void 0 : _a.feeds.map((feed) => feed.key)) != null ? _b : [],
-        startDataTimeframe: (_c = space.dataPipeline.pipelineState) == null ? void 0 : _c.startTimeframe,
-        currentDataTimeframe: (_d = space.dataPipeline.pipelineState) == null ? void 0 : _d.timeframe,
-        targetDataTimeframe: (_e = space.dataPipeline.pipelineState) == null ? void 0 : _e.targetTimeframe,
-        totalDataTimeframe: (_f = space.dataPipeline.pipelineState) == null ? void 0 : _f.endTimeframe
+        dataFeeds: space.dataPipeline.pipelineState?.feeds.map((feed) => feed.key) ?? [],
+        startDataTimeframe: space.dataPipeline.pipelineState?.startTimeframe,
+        currentDataTimeframe: space.dataPipeline.pipelineState?.timeframe,
+        targetDataTimeframe: space.dataPipeline.pipelineState?.targetTimeframe,
+        totalDataTimeframe: space.dataPipeline.pipelineState?.endTimeframe
       },
       members: Array.from(space.inner.spaceState.members.values()).map((member) => {
-        var _a2, _b2, _c2;
         const peers = space.presence.getPeersOnline().filter(({ identityKey }) => identityKey.equals(member.key));
-        const isMe = (_a2 = this._identityManager.identity) == null ? void 0 : _a2.identityKey.equals(member.key);
+        const isMe = this._identityManager.identity?.identityKey.equals(member.key);
         if (isMe) {
           peers.push(space.presence.getLocalState());
         }
@@ -3544,14 +3756,14 @@ var SpacesServiceImpl = class {
           identity: {
             identityKey: member.key,
             profile: {
-              displayName: (_c2 = (_b2 = member.assertion.profile) == null ? void 0 : _b2.displayName) != null ? _c2 : humanize(member.key)
+              displayName: member.assertion.profile?.displayName ?? humanize(member.key)
             }
           },
-          presence: isMe || peers.length > 0 ? SpaceMember2.PresenceState.ONLINE : SpaceMember2.PresenceState.OFFLINE,
+          presence: isMe || peers.length > 0 ? SpaceMember3.PresenceState.ONLINE : SpaceMember3.PresenceState.OFFLINE,
           peerStates: peers
         };
       }),
-      creator: (_g = space.inner.spaceState.creator) == null ? void 0 : _g.key,
+      creator: space.inner.spaceState.creator?.key,
       cache: space.cache,
       metrics: space.metrics
     };
@@ -3561,19 +3773,32 @@ var getChannelId = (channel) => `user-channel/${channel}`;
 
 // packages/sdk/client-services/src/packlets/services/service-context.ts
 import { Trigger as Trigger5 } from "@dxos/async";
+import { Context as Context9 } from "@dxos/context";
 import { getCredentialAssertion as getCredentialAssertion3 } from "@dxos/credentials";
 import { failUndefined as failUndefined3 } from "@dxos/debug";
 import { valueEncoding, MetadataStore, SpaceManager, DataServiceSubscriptions, SnapshotStore } from "@dxos/echo-pipeline";
 import { FeedFactory, FeedStore } from "@dxos/feed-store";
-import { invariant as invariant11 } from "@dxos/invariant";
+import { invariant as invariant12 } from "@dxos/invariant";
 import { Keyring } from "@dxos/keyring";
 import { PublicKey as PublicKey9 } from "@dxos/keys";
-import { log as log12 } from "@dxos/log";
-import { STORAGE_VERSION, trace as trace5 } from "@dxos/protocols";
+import { log as log13 } from "@dxos/log";
+import { STORAGE_VERSION as STORAGE_VERSION2, trace as trace6 } from "@dxos/protocols";
 import { Invitation as Invitation5 } from "@dxos/protocols/proto/dxos/client/services";
 import { BlobStore } from "@dxos/teleport-extension-object-sync";
-var __dxlog_file14 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/services/service-context.ts";
-var ServiceContext = class {
+import { trace as Trace2 } from "@dxos/tracing";
+import { safeInstanceof } from "@dxos/util";
+function _ts_decorate5(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
+    r = Reflect.decorate(decorators, target, key, desc);
+  else
+    for (var i = decorators.length - 1; i >= 0; i--)
+      if (d = decorators[i])
+        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+var __dxlog_file15 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/services/service-context.ts";
+var ServiceContext = class ServiceContext2 {
   // prettier-ignore
   constructor(storage, networkManager, signalManager, modelFactory) {
     this.storage = storage;
@@ -3607,84 +3832,80 @@ var ServiceContext = class {
     });
     this.identityManager = new IdentityManager(this.metadataStore, this.keyring, this.feedStore, this.spaceManager);
     this.invitations = new InvitationsHandler(this.networkManager);
-    this._handlerFactories.set(Invitation5.Kind.DEVICE, () => new DeviceInvitationProtocol(this.keyring, () => {
-      var _a;
-      return (_a = this.identityManager.identity) != null ? _a : failUndefined3();
-    }, this._acceptIdentity.bind(this)));
+    this._handlerFactories.set(Invitation5.Kind.DEVICE, () => new DeviceInvitationProtocol(this.keyring, () => this.identityManager.identity ?? failUndefined3(), this._acceptIdentity.bind(this)));
   }
-  async open() {
-    log12.trace("dxos.sdk.service-context.open", trace5.begin({
-      id: this._instanceId
-    }), {
-      F: __dxlog_file14,
-      L: 125,
+  async open(ctx) {
+    await this._checkStorageVersion();
+    log13("opening...", void 0, {
+      F: __dxlog_file15,
+      L: 134,
       S: this,
       C: (f, a) => f(...a)
     });
-    await this._checkStorageVersion();
-    log12("opening...", void 0, {
-      F: __dxlog_file14,
-      L: 129,
+    log13.trace("dxos.sdk.service-context.open", trace6.begin({
+      id: this._instanceId
+    }), {
+      F: __dxlog_file15,
+      L: 135,
       S: this,
       C: (f, a) => f(...a)
     });
     await this.signalManager.open();
     await this.networkManager.open();
     await this.spaceManager.open();
-    await this.identityManager.open();
+    await this.identityManager.open(ctx);
     if (this.identityManager.identity) {
-      await this._initialize();
+      await this._initialize(ctx);
     }
-    log12("opened", void 0, {
-      F: __dxlog_file14,
-      L: 137,
+    log13.trace("dxos.sdk.service-context.open", trace6.end({
+      id: this._instanceId
+    }), {
+      F: __dxlog_file15,
+      L: 143,
       S: this,
       C: (f, a) => f(...a)
     });
-    log12.trace("dxos.sdk.service-context.open", trace5.end({
-      id: this._instanceId
-    }), {
-      F: __dxlog_file14,
-      L: 138,
+    log13("opened", void 0, {
+      F: __dxlog_file15,
+      L: 144,
       S: this,
       C: (f, a) => f(...a)
     });
   }
   async close() {
-    var _a;
-    log12("closing...", void 0, {
-      F: __dxlog_file14,
-      L: 142,
+    log13("closing...", void 0, {
+      F: __dxlog_file15,
+      L: 148,
       S: this,
       C: (f, a) => f(...a)
     });
     if (this._deviceSpaceSync && this.identityManager.identity) {
       await this.identityManager.identity.space.spaceState.removeCredentialProcessor(this._deviceSpaceSync);
     }
-    await ((_a = this.dataSpaceManager) == null ? void 0 : _a.close());
+    await this.dataSpaceManager?.close();
     await this.identityManager.close();
     await this.spaceManager.close();
     await this.feedStore.close();
     await this.networkManager.close();
     await this.signalManager.close();
     this.dataServiceSubscriptions.clear();
-    log12("closed", void 0, {
-      F: __dxlog_file14,
-      L: 153,
+    log13("closed", void 0, {
+      F: __dxlog_file15,
+      L: 159,
       S: this,
       C: (f, a) => f(...a)
     });
   }
   async createIdentity(params = {}) {
     const identity = await this.identityManager.createIdentity(params);
-    await this._initialize();
+    await this._initialize(new Context9());
     return identity;
   }
   getInvitationHandler(invitation) {
     const factory = this._handlerFactories.get(invitation.kind);
-    invariant11(factory, `Unknown invitation kind: ${invitation.kind}`, {
-      F: __dxlog_file14,
-      L: 165,
+    invariant12(factory, `Unknown invitation kind: ${invitation.kind}`, {
+      F: __dxlog_file15,
+      L: 171,
       S: this,
       A: [
         "factory",
@@ -3695,25 +3916,24 @@ var ServiceContext = class {
   }
   async _acceptIdentity(params) {
     const identity = await this.identityManager.acceptIdentity(params);
-    await this._initialize();
+    await this._initialize(new Context9());
     return identity;
   }
   async _checkStorageVersion() {
     await this.metadataStore.load();
-    if (this.metadataStore.version !== STORAGE_VERSION) {
-      throw new Error(`Invalid storage version: current=${this.metadataStore.version}, expected=${STORAGE_VERSION}`);
+    if (this.metadataStore.version !== STORAGE_VERSION2) {
+      throw new Error(`Invalid storage version: current=${this.metadataStore.version}, expected=${STORAGE_VERSION2}`);
     }
   }
   // Called when identity is created.
-  async _initialize() {
-    var _a;
-    log12("initializing spaces...", void 0, {
-      F: __dxlog_file14,
-      L: 186,
+  async _initialize(ctx) {
+    log13("initializing spaces...", void 0, {
+      F: __dxlog_file15,
+      L: 193,
       S: this,
       C: (f, a) => f(...a)
     });
-    const identity = (_a = this.identityManager.identity) != null ? _a : failUndefined3();
+    const identity = this.identityManager.identity ?? failUndefined3();
     const signingContext = {
       credentialSigner: identity.getIdentityCredentialSigner(),
       identityKey: identity.identityKey,
@@ -3730,9 +3950,9 @@ var ServiceContext = class {
     this.dataSpaceManager = new DataSpaceManager(this.spaceManager, this.metadataStore, this.dataServiceSubscriptions, this.keyring, signingContext, this.feedStore);
     await this.dataSpaceManager.open();
     this._handlerFactories.set(Invitation5.Kind.SPACE, (invitation) => {
-      invariant11(this.dataSpaceManager, "dataSpaceManager not initialized yet", {
-        F: __dxlog_file14,
-        L: 209,
+      invariant12(this.dataSpaceManager, "dataSpaceManager not initialized yet", {
+        F: __dxlog_file15,
+        L: 216,
         S: this,
         A: [
           "this.dataSpaceManager",
@@ -3752,33 +3972,33 @@ var ServiceContext = class {
           return;
         }
         if (!this.dataSpaceManager) {
-          log12("dataSpaceManager not initialized yet, ignoring space admission", {
+          log13("dataSpaceManager not initialized yet, ignoring space admission", {
             details: assertion
           }, {
-            F: __dxlog_file14,
-            L: 225,
+            F: __dxlog_file15,
+            L: 232,
             S: this,
             C: (f, a) => f(...a)
           });
           return;
         }
         if (this.dataSpaceManager.spaces.has(assertion.spaceKey)) {
-          log12("space already exists, ignoring space admission", {
+          log13("space already exists, ignoring space admission", {
             details: assertion
           }, {
-            F: __dxlog_file14,
-            L: 229,
+            F: __dxlog_file15,
+            L: 236,
             S: this,
             C: (f, a) => f(...a)
           });
           return;
         }
         try {
-          log12("accepting space recorded in halo", {
+          log13("accepting space recorded in halo", {
             details: assertion
           }, {
-            F: __dxlog_file14,
-            L: 234,
+            F: __dxlog_file15,
+            L: 241,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -3787,9 +4007,9 @@ var ServiceContext = class {
             genesisFeedKey: assertion.genesisFeedKey
           });
         } catch (err) {
-          log12.catch(err, void 0, {
-            F: __dxlog_file14,
-            L: 240,
+          log13.catch(err, void 0, {
+            F: __dxlog_file15,
+            L: 247,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -3799,12 +4019,22 @@ var ServiceContext = class {
     await identity.space.spaceState.addCredentialProcessor(this._deviceSpaceSync);
   }
 };
+_ts_decorate5([
+  Trace2.span()
+], ServiceContext.prototype, "open", null);
+_ts_decorate5([
+  Trace2.span()
+], ServiceContext.prototype, "_initialize", null);
+ServiceContext = _ts_decorate5([
+  safeInstanceof("dxos.client-services.ServiceContext"),
+  Trace2.resource()
+], ServiceContext);
 
 // packages/sdk/client-services/src/packlets/locks/browser.ts
 import { asyncTimeout, Trigger as Trigger6 } from "@dxos/async";
 import { RESOURCE_LOCK_TIMEOUT } from "@dxos/client-protocol";
-import { log as log13, logInfo } from "@dxos/log";
-function _ts_decorate3(decorators, target, key, desc) {
+import { log as log14, logInfo } from "@dxos/log";
+function _ts_decorate6(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
     r = Reflect.decorate(decorators, target, key, desc);
@@ -3814,7 +4044,7 @@ function _ts_decorate3(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file15 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/locks/browser.ts";
+var __dxlog_file16 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/locks/browser.ts";
 var Message;
 (function(Message2) {
   Message2["ACQUIRING"] = "acquiring";
@@ -3836,29 +4066,29 @@ var Lock = class {
       message: Message.ACQUIRING
     });
     try {
-      log13("aquiring lock...", void 0, {
-        F: __dxlog_file15,
+      log14("aquiring lock...", void 0, {
+        F: __dxlog_file16,
         L: 42,
         S: this,
         C: (f, a) => f(...a)
       });
       await asyncTimeout(this._requestLock(), RESOURCE_LOCK_TIMEOUT);
-      log13("acquired lock", void 0, {
-        F: __dxlog_file15,
+      log14("acquired lock", void 0, {
+        F: __dxlog_file16,
         L: 44,
         S: this,
         C: (f, a) => f(...a)
       });
-    } catch (e) {
-      log13("stealing lock...", void 0, {
-        F: __dxlog_file15,
+    } catch {
+      log14("stealing lock...", void 0, {
+        F: __dxlog_file16,
         L: 46,
         S: this,
         C: (f, a) => f(...a)
       });
       await this._requestLock(true);
-      log13("stolen lock", void 0, {
-        F: __dxlog_file15,
+      log14("stolen lock", void 0, {
+        F: __dxlog_file16,
         L: 48,
         S: this,
         C: (f, a) => f(...a)
@@ -3874,10 +4104,10 @@ var Lock = class {
     }
   }
   async _requestLock(steal = false) {
-    log13("requesting lock...", {
+    log14("requesting lock...", {
       steal
     }, {
-      F: __dxlog_file15,
+      F: __dxlog_file16,
       L: 63,
       S: this,
       C: (f, a) => f(...a)
@@ -3886,40 +4116,38 @@ var Lock = class {
     void navigator.locks.request(this._lockKey, {
       steal
     }, async () => {
-      var _a, _b;
-      await ((_a = this._onAcquire) == null ? void 0 : _a.call(this));
+      await this._onAcquire?.();
       acquired.wake();
       this._releaseTrigger = new Trigger6();
       await this._releaseTrigger.wait();
-      log13("releasing lock...", void 0, {
-        F: __dxlog_file15,
+      log14("releasing lock...", void 0, {
+        F: __dxlog_file16,
         L: 72,
         S: this,
         C: (f, a) => f(...a)
       });
-      await ((_b = this._onRelease) == null ? void 0 : _b.call(this));
-      log13("released lock", void 0, {
-        F: __dxlog_file15,
+      await this._onRelease?.();
+      log14("released lock", void 0, {
+        F: __dxlog_file16,
         L: 74,
         S: this,
         C: (f, a) => f(...a)
       });
     }).catch(async () => {
-      var _a;
-      await ((_a = this._onRelease) == null ? void 0 : _a.call(this));
+      await this._onRelease?.();
     });
     await acquired.wait();
-    log13("recieved lock", {
+    log14("recieved lock", {
       steal
     }, {
-      F: __dxlog_file15,
+      F: __dxlog_file16,
       L: 81,
       S: this,
       C: (f, a) => f(...a)
     });
   }
 };
-_ts_decorate3([
+_ts_decorate6([
   logInfo
 ], Lock.prototype, "lockKey", null);
 var isLocked = (lockPath) => {
@@ -3934,7 +4162,7 @@ import { createStorage, StorageType } from "@dxos/random-access-storage";
 import { isNode } from "@dxos/util";
 var StorageDriver = Runtime.Client.Storage.StorageDriver;
 var createStorageObjects = (config) => {
-  const { path = isNode() ? DX_DATA : "dxos/storage", storageType, keyStorage, persistent = false } = config != null ? config : {};
+  const { path = isNode() ? DX_DATA : "dxos/storage", storageType, keyStorage, persistent = false } = config ?? {};
   if (persistent && storageType === StorageDriver.RAM) {
     throw new InvalidConfigError("RAM storage cannot be used in persistent mode.");
   }
@@ -4002,17 +4230,19 @@ var ServiceRegistry = class {
 // packages/sdk/client-services/src/packlets/services/service-host.ts
 import { Event as Event8, synchronized as synchronized3 } from "@dxos/async";
 import { clientServiceBundle } from "@dxos/client-protocol";
-import { DocumentModel } from "@dxos/document-model";
+import { Context as Context10 } from "@dxos/context";
+import { DocumentModel as DocumentModel2 } from "@dxos/document-model";
 import { DataServiceImpl } from "@dxos/echo-pipeline";
-import { invariant as invariant12 } from "@dxos/invariant";
+import { invariant as invariant13 } from "@dxos/invariant";
 import { PublicKey as PublicKey10 } from "@dxos/keys";
-import { log as log15 } from "@dxos/log";
+import { log as log16 } from "@dxos/log";
 import { WebsocketSignalManager } from "@dxos/messaging";
 import { ModelFactory } from "@dxos/model-factory";
 import { createWebRTCTransportFactory, NetworkManager } from "@dxos/network-manager";
-import { trace as trace6 } from "@dxos/protocols";
+import { trace as trace7 } from "@dxos/protocols";
 import { SystemStatus } from "@dxos/protocols/proto/dxos/client/services";
 import { TextModel } from "@dxos/text-model";
+import { TRACE_PROCESSOR, trace as Trace3 } from "@dxos/tracing";
 
 // packages/sdk/client-services/src/packlets/devices/devices-service.ts
 import { EventSubscriptions as EventSubscriptions3 } from "@dxos/async";
@@ -4028,21 +4258,17 @@ var DevicesServiceImpl = class {
   queryDevices() {
     return new Stream11(({ next }) => {
       const update = () => {
-        var _a;
-        const deviceKeys = (_a = this._identityManager.identity) == null ? void 0 : _a.authorizedDeviceKeys;
+        const deviceKeys = this._identityManager.identity?.authorizedDeviceKeys;
         if (!deviceKeys) {
           next({
             devices: []
           });
         } else {
           next({
-            devices: Array.from(deviceKeys.values()).map((key) => {
-              var _a2;
-              return {
-                deviceKey: key,
-                kind: ((_a2 = this._identityManager.identity) == null ? void 0 : _a2.deviceKey.equals(key)) ? DeviceKind.CURRENT : DeviceKind.TRUSTED
-              };
-            })
+            devices: Array.from(deviceKeys.values()).map((key) => ({
+              deviceKey: key,
+              kind: this._identityManager.identity?.deviceKey.equals(key) ? DeviceKind.CURRENT : DeviceKind.TRUSTED
+            }))
           });
         }
       };
@@ -4064,22 +4290,23 @@ var DevicesServiceImpl = class {
 // packages/sdk/client-services/src/packlets/logging/logging-service.ts
 import { Event as Event7 } from "@dxos/async";
 import { Stream as Stream12 } from "@dxos/codec-protobuf";
-import { getContextFromEntry, log as log14 } from "@dxos/log";
+import { getContextFromEntry, log as log15 } from "@dxos/log";
 import { QueryLogsRequest } from "@dxos/protocols/proto/dxos/client/services";
 import { jsonify, numericalValues, tracer } from "@dxos/util";
 var LoggingServiceImpl = class {
   constructor() {
     this._logs = new Event7();
+    this._started = /* @__PURE__ */ new Date();
     this._logProcessor = (_config, entry2) => {
       this._logs.emit(entry2);
     };
   }
   async open() {
-    log14.runtimeConfig.processors.push(this._logProcessor);
+    log15.runtimeConfig.processors.push(this._logProcessor);
   }
   async close() {
-    const index = log14.runtimeConfig.processors.findIndex((processor) => processor === this._logProcessor);
-    log14.runtimeConfig.processors.splice(index, 1);
+    const index = log15.runtimeConfig.processors.findIndex((processor) => processor === this._logProcessor);
+    log15.runtimeConfig.processors.splice(index, 1);
   }
   async controlMetrics({ reset, record }) {
     if (reset) {
@@ -4094,28 +4321,33 @@ var LoggingServiceImpl = class {
       recording: tracer.recording
     };
   }
-  queryMetrics({ interval }) {
-    const createNumericalValues = (key) => {
-      var _a;
-      const consume = (_a = tracer.get(key)) != null ? _a : [];
+  /**
+  * @deprecated (Move to diagnostics).
+  */
+  queryMetrics({ interval = 5e3 }) {
+    const getNumericalValues = (key) => {
+      const events = tracer.get(key) ?? [];
       return {
         key,
-        stats: numericalValues(consume, "duration")
+        stats: numericalValues(events, "duration")
       };
     };
     return new Stream12(({ next }) => {
       const update = () => {
         const metrics = {
-          timestamp: new Date(),
+          timestamp: /* @__PURE__ */ new Date(),
           values: [
-            createNumericalValues("dxos.echo.pipeline.control"),
-            createNumericalValues("dxos.echo.pipeline.data")
-          ]
+            getNumericalValues("dxos.echo.pipeline.control"),
+            getNumericalValues("dxos.echo.pipeline.data")
+          ].filter(Boolean)
         };
-        next(metrics);
+        next({
+          timestamp: /* @__PURE__ */ new Date(),
+          metrics
+        });
       };
       update();
-      const i = setInterval(update, interval);
+      const i = setInterval(update, Math.max(interval, 1e3));
       return () => {
         clearInterval(i);
       };
@@ -4124,11 +4356,10 @@ var LoggingServiceImpl = class {
   queryLogs(request) {
     return new Stream12(({ ctx, next }) => {
       const handler = (entry2) => {
-        var _a, _b, _c, _d, _e;
         if (LOG_PROCESSING > 0) {
           return;
         }
-        if (((_a = entry2.meta) == null ? void 0 : _a.F.includes("logging-service")) || entry2.context && Object.values(entry2.context).some((value) => typeof value === "string" && value.includes("LoggingService"))) {
+        if (entry2.meta?.F.includes("logging-service") || entry2.context && Object.values(entry2.context).some((value) => typeof value === "string" && value.includes("LoggingService"))) {
           return;
         }
         if (!shouldLog(entry2, request)) {
@@ -4137,11 +4368,11 @@ var LoggingServiceImpl = class {
         const record = {
           ...entry2,
           context: jsonify(getContextFromEntry(entry2)),
-          timestamp: new Date(),
+          timestamp: /* @__PURE__ */ new Date(),
           meta: {
             // TODO(dmaretskyi): Fix proto.
-            file: (_c = (_b = entry2.meta) == null ? void 0 : _b.F) != null ? _c : "",
-            line: (_e = (_d = entry2.meta) == null ? void 0 : _d.L) != null ? _e : 0
+            file: entry2.meta?.F ?? "",
+            line: entry2.meta?.L ?? 0
           }
         };
         try {
@@ -4164,15 +4395,11 @@ var matchFilter = (filter, level, path, options) => {
   }
 };
 var shouldLog = (entry2, request) => {
-  var _a;
-  const options = (_a = request.options) != null ? _a : QueryLogsRequest.MatchingOptions.INCLUSIVE;
+  const options = request.options ?? QueryLogsRequest.MatchingOptions.INCLUSIVE;
   if (request.filters === void 0) {
     return options === QueryLogsRequest.MatchingOptions.INCLUSIVE;
   } else {
-    return request.filters.some((filter) => {
-      var _a2, _b;
-      return matchFilter(filter, entry2.level, (_b = (_a2 = entry2.meta) == null ? void 0 : _a2.F) != null ? _b : "", options);
-    });
+    return request.filters.some((filter) => matchFilter(filter, entry2.level, entry2.meta?.F ?? "", options));
   }
 };
 var LOG_PROCESSING = 0;
@@ -4211,17 +4438,32 @@ var NetworkServiceImpl = class {
 
 // packages/sdk/client-services/src/packlets/system/system-service.ts
 import { Stream as Stream14 } from "@dxos/codec-protobuf";
+import { GetDiagnosticsRequest } from "@dxos/protocols/proto/dxos/client/services";
+import { jsonKeyReplacer } from "@dxos/util";
 var SystemServiceImpl = class {
-  constructor({ config, statusUpdate, onUpdateStatus, getCurrentStatus, onReset }) {
+  constructor({ config, statusUpdate, getDiagnostics, onUpdateStatus, getCurrentStatus, onReset }) {
     this._config = config;
     this._statusUpdate = statusUpdate;
     this._getCurrentStatus = getCurrentStatus;
+    this._getDiagnostics = getDiagnostics;
     this._onUpdateStatus = onUpdateStatus;
     this._onReset = onReset;
   }
   async getConfig() {
-    var _a, _b;
-    return (_b = (_a = this._config) == null ? void 0 : _a.values) != null ? _b : {};
+    return this._config?.values ?? {};
+  }
+  /**
+  * NOTE: Since this is serialized as a JSON object, we allow the option to serialize keys.
+  */
+  async getDiagnostics({ keys } = {}) {
+    const diagnostics = await this._getDiagnostics();
+    return {
+      timestamp: /* @__PURE__ */ new Date(),
+      diagnostics: JSON.parse(JSON.stringify(diagnostics, jsonKeyReplacer({
+        truncate: keys === GetDiagnosticsRequest.KEY_OPTION.TRUNCATE,
+        humanize: keys === GetDiagnosticsRequest.KEY_OPTION.HUMANIZE
+      })))
+    };
   }
   async updateStatus({ status }) {
     await this._onUpdateStatus(status);
@@ -4249,7 +4491,7 @@ var SystemServiceImpl = class {
 };
 
 // packages/sdk/client-services/src/packlets/services/service-host.ts
-function _ts_decorate4(decorators, target, key, desc) {
+function _ts_decorate7(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
     r = Reflect.decorate(decorators, target, key, desc);
@@ -4259,23 +4501,22 @@ function _ts_decorate4(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file16 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/services/service-host.ts";
+var __dxlog_file17 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/services/service-host.ts";
 var createDefaultModelFactory = () => {
-  return new ModelFactory().registerModel(DocumentModel).registerModel(TextModel);
+  return new ModelFactory().registerModel(DocumentModel2).registerModel(TextModel);
 };
-var ClientServicesHost = class {
+var ClientServicesHost = class ClientServicesHost2 {
   constructor({
     config,
     modelFactory = createDefaultModelFactory(),
-    // TODO(burdon): Create ApolloLink abstraction (see Client).
     transportFactory,
     signalManager,
-    connectionLog,
     storage,
     // TODO(wittjosiah): Turn this on by default.
     lockKey,
     callbacks
   } = {}) {
+    this._tracingService = TRACE_PROCESSOR.createTraceSender();
     this._statusUpdate = new Event8();
     this._opening = false;
     this._open = false;
@@ -4294,7 +4535,7 @@ var ClientServicesHost = class {
         lockKey,
         onAcquire: () => {
           if (!this._opening) {
-            void this.open();
+            void this.open(new Context10());
           }
         },
         onRelease: () => this.close()
@@ -4304,12 +4545,14 @@ var ClientServicesHost = class {
       config: this._config,
       statusUpdate: this._statusUpdate,
       getCurrentStatus: () => this.isOpen ? SystemStatus.ACTIVE : SystemStatus.INACTIVE,
+      getDiagnostics: () => {
+        return createDiagnostics(this._serviceRegistry.services, this._serviceContext, this._config);
+      },
       onUpdateStatus: async (status) => {
-        var _a, _b;
         if (!this.isOpen && status === SystemStatus.ACTIVE) {
-          await ((_a = this._resourceLock) == null ? void 0 : _a.acquire());
+          await this._resourceLock?.acquire();
         } else if (this.isOpen && status === SystemStatus.INACTIVE) {
-          await ((_b = this._resourceLock) == null ? void 0 : _b.release());
+          await this._resourceLock?.release();
         }
       },
       onReset: async () => {
@@ -4318,12 +4561,19 @@ var ClientServicesHost = class {
     });
     this._loggingService = new LoggingServiceImpl();
     this._serviceRegistry = new ServiceRegistry(clientServiceBundle, {
-      SystemService: this._systemService
+      SystemService: this._systemService,
+      TracingService: this._tracingService
     });
   }
   get isOpen() {
     return this._open;
   }
+  get config() {
+    return this._config;
+  }
+  get context() {
+    return this._serviceContext;
+  }
   get serviceRegistry() {
     return this._serviceRegistry;
   }
@@ -4339,20 +4589,25 @@ var ClientServicesHost = class {
   * Can only be called once.
   */
   initialize({ config, ...options }) {
-    var _a, _b, _c;
-    invariant12(!this._open, "service host is open", {
-      F: __dxlog_file16,
-      L: 167,
+    invariant13(!this._open, "service host is open", {
+      F: __dxlog_file17,
+      L: 181,
       S: this,
       A: [
         "!this._open",
         "'service host is open'"
       ]
     });
+    log16("initializing...", void 0, {
+      F: __dxlog_file17,
+      L: 182,
+      S: this,
+      C: (f, a) => f(...a)
+    });
     if (config) {
-      invariant12(!this._config, "config already set", {
-        F: __dxlog_file16,
-        L: 170,
+      invariant13(!this._config, "config already set", {
+        F: __dxlog_file17,
+        L: 185,
         S: this,
         A: [
           "!this._config",
@@ -4365,12 +4620,12 @@ var ClientServicesHost = class {
       }
     }
     const { connectionLog = true, transportFactory = createWebRTCTransportFactory({
-      iceServers: (_a = this._config) == null ? void 0 : _a.get("runtime.services.ice")
-    }), signalManager = new WebsocketSignalManager((_c = (_b = this._config) == null ? void 0 : _b.get("runtime.services.signaling")) != null ? _c : []) } = options;
+      iceServers: this._config?.get("runtime.services.ice")
+    }), signalManager = new WebsocketSignalManager(this._config?.get("runtime.services.signaling") ?? []) } = options;
     this._signalManager = signalManager;
-    invariant12(!this._networkManager, "network manager already set", {
-      F: __dxlog_file16,
-      L: 187,
+    invariant13(!this._networkManager, "network manager already set", {
+      F: __dxlog_file17,
+      L: 201,
       S: this,
       A: [
         "!this._networkManager",
@@ -4382,51 +4637,56 @@ var ClientServicesHost = class {
       transportFactory,
       signalManager
     });
+    log16("initialized", void 0, {
+      F: __dxlog_file17,
+      L: 208,
+      S: this,
+      C: (f, a) => f(...a)
+    });
   }
-  async open() {
-    var _a, _b, _c;
+  async open(ctx) {
     if (this._open) {
       return;
     }
     const traceId = PublicKey10.random().toHex();
-    log15.trace("dxos.sdk.client-services-host.open", trace6.begin({
+    log16.trace("dxos.client-services.host.open", trace7.begin({
       id: traceId
     }), {
-      F: __dxlog_file16,
-      L: 202,
+      F: __dxlog_file17,
+      L: 219,
       S: this,
       C: (f, a) => f(...a)
     });
-    invariant12(this._config, "config not set", {
-      F: __dxlog_file16,
-      L: 204,
+    invariant13(this._config, "config not set", {
+      F: __dxlog_file17,
+      L: 221,
       S: this,
       A: [
         "this._config",
         "'config not set'"
       ]
     });
-    invariant12(this._storage, "storage not set", {
-      F: __dxlog_file16,
-      L: 205,
+    invariant13(this._storage, "storage not set", {
+      F: __dxlog_file17,
+      L: 222,
       S: this,
       A: [
         "this._storage",
         "'storage not set'"
       ]
     });
-    invariant12(this._signalManager, "signal manager not set", {
-      F: __dxlog_file16,
-      L: 206,
+    invariant13(this._signalManager, "signal manager not set", {
+      F: __dxlog_file17,
+      L: 223,
       S: this,
       A: [
         "this._signalManager",
         "'signal manager not set'"
       ]
     });
-    invariant12(this._networkManager, "network manager not set", {
-      F: __dxlog_file16,
-      L: 207,
+    invariant13(this._networkManager, "network manager not set", {
+      F: __dxlog_file17,
+      L: 224,
       S: this,
       A: [
         "this._networkManager",
@@ -4434,20 +4694,20 @@ var ClientServicesHost = class {
       ]
     });
     this._opening = true;
-    log15("opening...", {
-      lockKey: (_a = this._resourceLock) == null ? void 0 : _a.lockKey
+    log16("opening...", {
+      lockKey: this._resourceLock?.lockKey
     }, {
-      F: __dxlog_file16,
-      L: 210,
+      F: __dxlog_file17,
+      L: 227,
       S: this,
       C: (f, a) => f(...a)
     });
-    await ((_b = this._resourceLock) == null ? void 0 : _b.acquire());
+    await this._resourceLock?.acquire();
     await this._loggingService.open();
     this._serviceContext = new ServiceContext(this._storage, this._networkManager, this._signalManager, this._modelFactory);
     this._serviceRegistry.setServices({
       SystemService: this._systemService,
-      IdentityService: new IdentityServiceImpl(this._serviceContext),
+      IdentityService: new IdentityServiceImpl((params) => this._serviceContext.createIdentity(params), this._serviceContext.identityManager, this._serviceContext.keyring),
       InvitationsService: new InvitationsServiceImpl(this._serviceContext.invitations, (invitation) => this._serviceContext.getInvitationHandler(invitation)),
       DevicesService: new DevicesServiceImpl(this._serviceContext.identityManager),
       SpacesService: new SpacesServiceImpl(this._serviceContext.identityManager, this._serviceContext.spaceManager, this._serviceContext.dataServiceSubscriptions, async () => {
@@ -4457,6 +4717,7 @@ var ClientServicesHost = class {
       DataService: new DataServiceImpl(this._serviceContext.dataServiceSubscriptions),
       NetworkService: new NetworkServiceImpl(this._serviceContext.networkManager, this._serviceContext.signalManager),
       LoggingService: this._loggingService,
+      TracingService: this._tracingService,
       // TODO(burdon): Move to new protobuf definitions.
       DevtoolsHost: new DevtoolsServiceImpl({
         events: new DevtoolsHostEvents(),
@@ -4464,39 +4725,38 @@ var ClientServicesHost = class {
         context: this._serviceContext
       })
     });
-    await this._serviceContext.open();
+    await this._serviceContext.open(ctx);
     this._opening = false;
     this._open = true;
     this._statusUpdate.emit();
-    const deviceKey = (_c = this._serviceContext.identityManager.identity) == null ? void 0 : _c.deviceKey;
-    log15("opened", {
+    const deviceKey = this._serviceContext.identityManager.identity?.deviceKey;
+    log16("opened", {
       deviceKey
     }, {
-      F: __dxlog_file16,
-      L: 265,
+      F: __dxlog_file17,
+      L: 284,
       S: this,
       C: (f, a) => f(...a)
     });
-    log15.trace("dxos.sdk.client-services-host.open", trace6.end({
+    log16.trace("dxos.client-services.host.open", trace7.end({
       id: traceId
     }), {
-      F: __dxlog_file16,
-      L: 266,
+      F: __dxlog_file17,
+      L: 285,
       S: this,
       C: (f, a) => f(...a)
     });
   }
   async close() {
-    var _a;
     if (!this._open) {
       return;
     }
-    const deviceKey = (_a = this._serviceContext.identityManager.identity) == null ? void 0 : _a.deviceKey;
-    log15("closing...", {
+    const deviceKey = this._serviceContext.identityManager.identity?.deviceKey;
+    log16("closing...", {
       deviceKey
     }, {
-      F: __dxlog_file16,
-      L: 276,
+      F: __dxlog_file17,
+      L: 296,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4507,57 +4767,67 @@ var ClientServicesHost = class {
     await this._serviceContext.close();
     this._open = false;
     this._statusUpdate.emit();
-    log15("closed", {
+    log16("closed", {
       deviceKey
     }, {
-      F: __dxlog_file16,
-      L: 282,
+      F: __dxlog_file17,
+      L: 302,
       S: this,
       C: (f, a) => f(...a)
     });
   }
   async reset() {
-    var _a, _b, _c;
     const traceId = PublicKey10.random().toHex();
-    log15.trace("dxos.sdk.client-services-host.reset", trace6.begin({
+    log16.trace("dxos.sdk.client-services-host.reset", trace7.begin({
       id: traceId
     }), {
-      F: __dxlog_file16,
-      L: 287,
+      F: __dxlog_file17,
+      L: 307,
       S: this,
       C: (f, a) => f(...a)
     });
-    log15("resetting...", void 0, {
-      F: __dxlog_file16,
-      L: 289,
+    log16("resetting...", void 0, {
+      F: __dxlog_file17,
+      L: 309,
       S: this,
       C: (f, a) => f(...a)
     });
-    await ((_a = this._serviceContext) == null ? void 0 : _a.close());
+    await this._serviceContext?.close();
     await this._storage.reset();
-    log15("reset", void 0, {
-      F: __dxlog_file16,
-      L: 292,
+    log16("reset", void 0, {
+      F: __dxlog_file17,
+      L: 312,
       S: this,
       C: (f, a) => f(...a)
     });
-    log15.trace("dxos.sdk.client-services-host.reset", trace6.end({
+    log16.trace("dxos.sdk.client-services-host.reset", trace7.end({
       id: traceId
     }), {
-      F: __dxlog_file16,
-      L: 293,
+      F: __dxlog_file17,
+      L: 313,
       S: this,
       C: (f, a) => f(...a)
     });
-    await ((_c = (_b = this._callbacks) == null ? void 0 : _b.onReset) == null ? void 0 : _c.call(_b));
+    await this._callbacks?.onReset?.();
   }
 };
-_ts_decorate4([
-  synchronized3
+_ts_decorate7([
+  Trace3.info()
+], ClientServicesHost.prototype, "_opening", void 0);
+_ts_decorate7([
+  Trace3.info()
+], ClientServicesHost.prototype, "_open", void 0);
+_ts_decorate7([
+  synchronized3,
+  Trace3.span()
 ], ClientServicesHost.prototype, "open", null);
-_ts_decorate4([
-  synchronized3
+_ts_decorate7([
+  synchronized3,
+  Trace3.span()
 ], ClientServicesHost.prototype, "close", null);
+ClientServicesHost = _ts_decorate7([
+  Trace3.resource()
+], ClientServicesHost);
 
 export {
   subscribeToFeeds,
@@ -4580,6 +4850,7 @@ export {
   InvitationsServiceImpl,
   SpaceInvitationProtocol,
   ClientRpcServer,
+  createDiagnostics,
   DataSpace,
   DataSpaceManager,
   SpacesServiceImpl,
@@ -4591,4 +4862,4 @@ export {
   createDefaultModelFactory,
   ClientServicesHost
 };
-//# sourceMappingURL=chunk-FD4L7N4K.mjs.map
+//# sourceMappingURL=chunk-II6TDINB.mjs.map