@dxos/client-services 0.1.56-main.bf228a7 → 0.1.56-main.c19b7cd

package/dist/lib/node/index.cjs

@@ -45,6 +45,7 @@ __export(src_exports, {
   WorkerSession: () => WorkerSession,
   createAuthProvider: () => createAuthProvider,
   createDefaultModelFactory: () => createDefaultModelFactory,
+  createDiagnostics: () => createDiagnostics,
   createStorageObjects: () => createStorageObjects,
   getNetworkPeers: () => getNetworkPeers,
   isLocked: () => isLocked,
@@ -529,8 +530,19 @@ var import_feed_store2 = require("@dxos/feed-store");
 var import_invariant = require("@dxos/invariant");
 var import_log2 = require("@dxos/log");
 var import_credentials3 = require("@dxos/protocols/proto/dxos/halo/credentials");
+var import_tracing = require("@dxos/tracing");
+function _ts_decorate(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
+    r = Reflect.decorate(decorators, target, key, desc);
+  else
+    for (var i = decorators.length - 1; i >= 0; i--)
+      if (d = decorators[i])
+        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
 var __dxlog_file2 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/identity.ts";
-var Identity = class {
+var Identity = class Identity2 {
   constructor({ space, signer, identityKey, deviceKey }) {
     this.stateUpdate = new import_async5.Event();
     this.space = space;
@@ -556,12 +568,12 @@ var Identity = class {
   get authorizedDeviceKeys() {
     return this._deviceStateMachine.authorizedDeviceKeys;
   }
-  async open() {
+  async open(ctx) {
     await this.space.spaceState.addCredentialProcessor(this._deviceStateMachine);
     await this.space.spaceState.addCredentialProcessor(this._profileStateMachine);
-    await this.space.open();
+    await this.space.open(ctx);
   }
-  async close() {
+  async close(ctx) {
     await this.authVerifier.close();
     await this.space.spaceState.removeCredentialProcessor(this._profileStateMachine);
     await this.space.spaceState.removeCredentialProcessor(this._deviceStateMachine);
@@ -606,7 +618,7 @@ var Identity = class {
   getIdentityCredentialSigner() {
     (0, import_invariant.invariant)(this._deviceStateMachine.deviceCredentialChain, "Device credential chain is not ready.", {
       F: __dxlog_file2,
-      L: 134,
+      L: 139,
       S: this,
       A: [
         "this._deviceStateMachine.deviceCredentialChain",
@@ -630,7 +642,7 @@ var Identity = class {
       dataFeedKey
     }, {
       F: __dxlog_file2,
-      L: 150,
+      L: 155,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -671,18 +683,39 @@ var Identity = class {
     })));
   }
 };
+_ts_decorate([
+  import_tracing.trace.span()
+], Identity.prototype, "open", null);
+_ts_decorate([
+  import_tracing.trace.span()
+], Identity.prototype, "close", null);
+Identity = _ts_decorate([
+  import_tracing.trace.resource()
+], Identity);
 
 // packages/sdk/client-services/src/packlets/identity/identity-manager.ts
 var import_async6 = require("@dxos/async");
+var import_context3 = require("@dxos/context");
 var import_credentials4 = require("@dxos/credentials");
 var import_invariant2 = require("@dxos/invariant");
 var import_keys4 = require("@dxos/keys");
 var import_log3 = require("@dxos/log");
 var import_protocols2 = require("@dxos/protocols");
 var import_credentials5 = require("@dxos/protocols/proto/dxos/halo/credentials");
+var import_tracing2 = require("@dxos/tracing");
 var import_util2 = require("@dxos/util");
+function _ts_decorate2(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
+    r = Reflect.decorate(decorators, target, key, desc);
+  else
+    for (var i = decorators.length - 1; i >= 0; i--)
+      if (d = decorators[i])
+        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
 var __dxlog_file3 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/identity-manager.ts";
-var IdentityManager = class {
+var IdentityManager = class IdentityManager2 {
   // TODO(burdon): IdentityManagerParams.
   // TODO(dmaretskyi): Perhaps this should take/generate the peerKey outside of an initialized identity.
   constructor(_metadataStore, _keyring, _feedStore, _spaceManager) {
@@ -695,14 +728,14 @@ var IdentityManager = class {
   get identity() {
     return this._identity;
   }
-  async open() {
+  async open(ctx) {
     var _a;
     const traceId = import_keys4.PublicKey.random().toHex();
     import_log3.log.trace("dxos.halo.identity-manager.open", import_protocols2.trace.begin({
       id: traceId
     }), {
       F: __dxlog_file3,
-      L: 69,
+      L: 73,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -712,20 +745,20 @@ var IdentityManager = class {
       identityRecord
     }, {
       F: __dxlog_file3,
-      L: 73,
+      L: 77,
       S: this,
       C: (f, a) => f(...a)
     });
     if (identityRecord) {
       this._identity = await this._constructIdentity(identityRecord);
-      await this._identity.open();
+      await this._identity.open(ctx);
       await this._identity.ready();
       import_log3.log.trace("dxos.halo.identity", {
         identityKey: identityRecord.identityKey,
         displayName: (_a = this._identity.profileDocument) == null ? void 0 : _a.displayName
       }, {
         F: __dxlog_file3,
-        L: 78,
+        L: 82,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -735,20 +768,20 @@ var IdentityManager = class {
       id: traceId
     }), {
       F: __dxlog_file3,
-      L: 84,
+      L: 88,
       S: this,
       C: (f, a) => f(...a)
     });
   }
   async close() {
     var _a;
-    await ((_a = this._identity) == null ? void 0 : _a.close());
+    await ((_a = this._identity) == null ? void 0 : _a.close(new import_context3.Context()));
   }
   async createIdentity({ displayName } = {}) {
     var _a;
     (0, import_invariant2.invariant)(!this._identity, "Identity already exists.", {
       F: __dxlog_file3,
-      L: 92,
+      L: 96,
       S: this,
       A: [
         "!this._identity",
@@ -757,7 +790,7 @@ var IdentityManager = class {
     });
     (0, import_log3.log)("creating identity...", void 0, {
       F: __dxlog_file3,
-      L: 93,
+      L: 97,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -773,12 +806,12 @@ var IdentityManager = class {
       }
     };
     const identity = await this._constructIdentity(identityRecord);
-    await identity.open();
+    await identity.open(new import_context3.Context());
     {
       const generator = new import_credentials4.CredentialGenerator(this._keyring, identityRecord.identityKey, identityRecord.deviceKey);
       (0, import_invariant2.invariant)(identityRecord.haloSpace.genesisFeedKey, "Genesis feed key is required.", {
         F: __dxlog_file3,
-        L: 112,
+        L: 116,
         S: this,
         A: [
           "identityRecord.haloSpace.genesisFeedKey",
@@ -787,7 +820,7 @@ var IdentityManager = class {
       });
       (0, import_invariant2.invariant)(identityRecord.haloSpace.dataFeedKey, "Data feed key is required.", {
         F: __dxlog_file3,
-        L: 113,
+        L: 117,
         S: this,
         A: [
           "identityRecord.haloSpace.dataFeedKey",
@@ -822,7 +855,7 @@ var IdentityManager = class {
       displayName: (_a = this._identity.profileDocument) == null ? void 0 : _a.displayName
     }, {
       F: __dxlog_file3,
-      L: 148,
+      L: 152,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -832,7 +865,7 @@ var IdentityManager = class {
       deviceKey: identity.deviceKey
     }, {
       F: __dxlog_file3,
-      L: 154,
+      L: 158,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -847,13 +880,13 @@ var IdentityManager = class {
       params
     }, {
       F: __dxlog_file3,
-      L: 162,
+      L: 166,
       S: this,
       C: (f, a) => f(...a)
     });
     (0, import_invariant2.invariant)(!this._identity, "Identity already exists.", {
       F: __dxlog_file3,
-      L: 163,
+      L: 167,
       S: this,
       A: [
         "!this._identity",
@@ -872,7 +905,7 @@ var IdentityManager = class {
       }
     };
     const identity = await this._constructIdentity(identityRecord);
-    await identity.open();
+    await identity.open(new import_context3.Context());
     this._identity = identity;
     await this._metadataStore.setIdentityRecord(identityRecord);
     await this._identity.ready();
@@ -881,7 +914,7 @@ var IdentityManager = class {
       displayName: (_a = this._identity.profileDocument) == null ? void 0 : _a.displayName
     }, {
       F: __dxlog_file3,
-      L: 182,
+      L: 186,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -891,7 +924,7 @@ var IdentityManager = class {
       deviceKey: identity.deviceKey
     }, {
       F: __dxlog_file3,
-      L: 188,
+      L: 192,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -900,7 +933,7 @@ var IdentityManager = class {
   async _constructIdentity(identityRecord) {
     (0, import_invariant2.invariant)(!this._identity, void 0, {
       F: __dxlog_file3,
-      L: 193,
+      L: 197,
       S: this,
       A: [
         "!this._identity",
@@ -911,13 +944,13 @@ var IdentityManager = class {
       identityRecord
     }, {
       F: __dxlog_file3,
-      L: 194,
+      L: 198,
       S: this,
       C: (f, a) => f(...a)
     });
     (0, import_invariant2.invariant)(identityRecord.haloSpace.controlFeedKey, void 0, {
       F: __dxlog_file3,
-      L: 197,
+      L: 201,
       S: this,
       A: [
         "identityRecord.haloSpace.controlFeedKey",
@@ -929,7 +962,7 @@ var IdentityManager = class {
     });
     (0, import_invariant2.invariant)(identityRecord.haloSpace.dataFeedKey, void 0, {
       F: __dxlog_file3,
-      L: 201,
+      L: 205,
       S: this,
       A: [
         "identityRecord.haloSpace.dataFeedKey",
@@ -961,7 +994,7 @@ var IdentityManager = class {
       identityKey: identityRecord.identityKey
     }, {
       F: __dxlog_file3,
-      L: 225,
+      L: 229,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -982,7 +1015,7 @@ var IdentityManager = class {
       onAuthFailure: () => {
         import_log3.log.warn("auth failure", void 0, {
           F: __dxlog_file3,
-          L: 244,
+          L: 248,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -991,6 +1024,12 @@ var IdentityManager = class {
     });
   }
 };
+_ts_decorate2([
+  import_tracing2.trace.span()
+], IdentityManager.prototype, "open", null);
+IdentityManager = _ts_decorate2([
+  import_tracing2.trace.resource()
+], IdentityManager);
 
 // packages/sdk/client-services/src/packlets/identity/identity-service.ts
 var import_codec_protobuf7 = require("@dxos/codec-protobuf");
@@ -1142,7 +1181,7 @@ var DeviceInvitationProtocol = class {
 // packages/sdk/client-services/src/packlets/invitations/invitations-handler.ts
 var import_async8 = require("@dxos/async");
 var import_client_protocol2 = require("@dxos/client-protocol");
-var import_context4 = require("@dxos/context");
+var import_context5 = require("@dxos/context");
 var import_credentials7 = require("@dxos/credentials");
 var import_errors2 = require("@dxos/errors");
 var import_invariant6 = require("@dxos/invariant");
@@ -1155,7 +1194,7 @@ var import_invitations2 = require("@dxos/protocols/proto/dxos/halo/invitations")
 
 // packages/sdk/client-services/src/packlets/invitations/invitation-extension.ts
 var import_async7 = require("@dxos/async");
-var import_context3 = require("@dxos/context");
+var import_context4 = require("@dxos/context");
 var import_errors = require("@dxos/errors");
 var import_invariant5 = require("@dxos/invariant");
 var import_keys5 = require("@dxos/keys");
@@ -1178,7 +1217,7 @@ var InvitationHostExtension = class extends import_teleport.RpcExtension {
       }
     });
     this._callbacks = _callbacks;
-    this._ctx = new import_context3.Context();
+    this._ctx = new import_context4.Context();
     this._remoteOptionsTrigger = new import_async7.Trigger();
     this.invitation = void 0;
     this.guestProfile = void 0;
@@ -1385,7 +1424,7 @@ var InvitationHostExtension = class extends import_teleport.RpcExtension {
       await this.rpc.InvitationHostService.options({
         role: import_invitations.Options.Role.HOST
       });
-      await (0, import_context3.cancelWithContext)(this._ctx, this._remoteOptionsTrigger.wait({
+      await (0, import_context4.cancelWithContext)(this._ctx, this._remoteOptionsTrigger.wait({
         timeout: OPTIONS_TIMEOUT
       }));
       if (((_a = this._remoteOptions) == null ? void 0 : _a.role) !== import_invitations.Options.Role.GUEST) {
@@ -1414,7 +1453,7 @@ var InvitationGuestExtension = class extends import_teleport.RpcExtension {
       }
     });
     this._callbacks = _callbacks;
-    this._ctx = new import_context3.Context();
+    this._ctx = new import_context4.Context();
     this._remoteOptionsTrigger = new import_async7.Trigger();
   }
   async getHandlers() {
@@ -1455,10 +1494,10 @@ var InvitationGuestExtension = class extends import_teleport.RpcExtension {
         S: this,
         C: (f, a) => f(...a)
       });
-      await (0, import_context3.cancelWithContext)(this._ctx, this.rpc.InvitationHostService.options({
+      await (0, import_context4.cancelWithContext)(this._ctx, this.rpc.InvitationHostService.options({
         role: import_invitations.Options.Role.GUEST
       }));
-      await (0, import_context3.cancelWithContext)(this._ctx, this._remoteOptionsTrigger.wait({
+      await (0, import_context4.cancelWithContext)(this._ctx, this._remoteOptionsTrigger.wait({
         timeout: OPTIONS_TIMEOUT
       }));
       (0, import_log4.log)("end options", void 0, {
@@ -1529,7 +1568,7 @@ var InvitationsHandler = class {
       ...protocol.getInvitationContext()
     };
     const stream = new import_async8.PushStream();
-    const ctx = new import_context4.Context({
+    const ctx = new import_context5.Context({
       onError: (err) => {
         void ctx.dispose();
         stream.error(err);
@@ -1760,7 +1799,7 @@ var InvitationsHandler = class {
         ...newData
       });
     };
-    const ctx = new import_context4.Context({
+    const ctx = new import_context5.Context({
       onError: (err) => {
         if (err instanceof import_async8.TimeoutError) {
           (0, import_log5.log)("timeout", {
@@ -2443,63 +2482,231 @@ var ClientRpcServer = class {
   }
 };
 
+// packages/sdk/client-services/src/packlets/services/diagnostics.ts
+var import_codec_protobuf10 = require("@dxos/codec-protobuf");
+var import_credentials9 = require("@dxos/credentials");
+var import_document_model = require("@dxos/document-model");
+var import_invariant9 = require("@dxos/invariant");
+var import_log8 = require("@dxos/log");
+var import_protocols5 = require("@dxos/protocols");
+var import_services6 = require("@dxos/protocols/proto/dxos/client/services");
+
+// packages/sdk/client-services/src/version.ts
+var DXOS_VERSION = "0.1.56-main.c19b7cd";
+
+// packages/sdk/client-services/src/packlets/services/platform.ts
+var getPlatform = () => {
+  if (process.browser) {
+    if (typeof window !== "undefined") {
+      const { userAgent } = window.navigator;
+      return {
+        type: "browser",
+        userAgent,
+        uptime: Math.floor((Date.now() - window.performance.timeOrigin) / 1e3)
+      };
+    } else {
+      return {
+        type: "shared-worker",
+        uptime: Math.floor((Date.now() - performance.timeOrigin) / 1e3)
+      };
+    }
+  } else {
+    const { platform, version, arch } = process;
+    return {
+      type: "node",
+      platform: `${platform} ${version} ${arch}`,
+      runtime: process.version,
+      uptime: Math.floor(process.uptime()),
+      memory: process.memoryUsage()
+    };
+  }
+};
+
+// packages/sdk/client-services/src/packlets/services/diagnostics.ts
+var __dxlog_file10 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/services/diagnostics.ts";
+var DEFAULT_TIMEOUT = 1e3;
+var createDiagnostics = async (clientServices, serviceContext, config) => {
+  var _a, _b, _c;
+  const diagnostics = {
+    created: new Date().toISOString(),
+    platform: getPlatform(),
+    client: {
+      version: DXOS_VERSION,
+      storage: {
+        version: import_protocols5.STORAGE_VERSION
+      }
+    }
+  };
+  {
+    (0, import_invariant9.invariant)(clientServices.LoggingService, "SystemService is not available.", {
+      F: __dxlog_file10,
+      L: 87,
+      S: void 0,
+      A: [
+        "clientServices.LoggingService",
+        "'SystemService is not available.'"
+      ]
+    });
+    diagnostics.metrics = await (0, import_codec_protobuf10.getFirstStreamValue)(clientServices.LoggingService.queryMetrics({}), {
+      timeout: DEFAULT_TIMEOUT
+    }).catch(() => void 0);
+  }
+  const identity = serviceContext.identityManager.identity;
+  if (identity) {
+    diagnostics.identity = {
+      identityKey: identity.identityKey,
+      spaceKey: identity.space.key,
+      profile: identity.profileDocument
+    };
+    const { devices } = (_a = await (0, import_codec_protobuf10.getFirstStreamValue)(clientServices.DevicesService.queryDevices(), {
+      timeout: DEFAULT_TIMEOUT
+    }).catch(() => void 0)) != null ? _a : {};
+    diagnostics.devices = devices;
+    if (serviceContext.dataSpaceManager) {
+      diagnostics.spaces = await Promise.all((_b = Array.from(serviceContext.dataSpaceManager.spaces.values()).map((space) => getSpaceStats(space))) != null ? _b : []);
+    }
+    const { feeds = [] } = (_c = await (0, import_codec_protobuf10.getFirstStreamValue)(clientServices.DevtoolsHost.subscribeToFeeds({}), {
+      timeout: DEFAULT_TIMEOUT
+    }).catch(() => void 0)) != null ? _c : {};
+    diagnostics.feeds = feeds.map(({ feedKey, bytes, length }) => ({
+      feedKey,
+      bytes,
+      length
+    }));
+  }
+  diagnostics.config = config.values;
+  return diagnostics;
+};
+var getProperties = (space) => {
+  let properties = {};
+  try {
+    const propertiesItem = space.dataPipeline.itemManager.items.find((item) => {
+      var _a, _b;
+      return ((_a = item.modelMeta) == null ? void 0 : _a.type) === import_document_model.DocumentModel.meta.type && ((_b = item.state) == null ? void 0 : _b.type) === "dxos.sdk.client.Properties";
+    });
+    const state = propertiesItem == null ? void 0 : propertiesItem.state;
+    properties = state == null ? void 0 : state.data;
+  } catch (err) {
+    import_log8.log.warn(err.message, void 0, {
+      F: __dxlog_file10,
+      L: 144,
+      S: void 0,
+      C: (f, a) => f(...a)
+    });
+  }
+  return properties;
+};
+var getSpaceStats = async (space) => {
+  var _a, _b, _c, _d, _e, _f;
+  const stats = {
+    key: space.key,
+    metrics: space.metrics,
+    epochs: space.inner.spaceState.credentials.filter((0, import_credentials9.credentialTypeFilter)("dxos.halo.credentials.Epoch")).map((credential) => ({
+      ...credential.subject.assertion,
+      id: credential.id
+    })),
+    members: Array.from(space.inner.spaceState.members.values()).map((member) => {
+      var _a2;
+      return {
+        identity: {
+          identityKey: member.key,
+          profile: {
+            displayName: (_a2 = member.assertion.profile) == null ? void 0 : _a2.displayName
+          }
+        },
+        presence: space.presence.getPeersOnline().filter(({ identityKey }) => identityKey.equals(member.key)).length > 0 ? import_services6.SpaceMember.PresenceState.ONLINE : import_services6.SpaceMember.PresenceState.OFFLINE
+      };
+    }),
+    pipeline: {
+      // TODO(burdon): Pick properties from credentials if needed.
+      // currentEpoch: space.dataPipeline.currentEpoch,
+      // appliedEpoch: space.dataPipeline.appliedEpoch,
+      controlFeeds: space.inner.controlPipeline.state.feeds.map((feed) => feed.key),
+      currentControlTimeframe: space.inner.controlPipeline.state.timeframe,
+      targetControlTimeframe: space.inner.controlPipeline.state.targetTimeframe,
+      totalControlTimeframe: space.inner.controlPipeline.state.endTimeframe,
+      // TODO(burdon): Empty?
+      dataFeeds: (_b = (_a = space.dataPipeline.pipelineState) == null ? void 0 : _a.feeds.map((feed) => feed.key)) != null ? _b : [],
+      startDataTimeframe: (_c = space.dataPipeline.pipelineState) == null ? void 0 : _c.startTimeframe,
+      currentDataTimeframe: (_d = space.dataPipeline.pipelineState) == null ? void 0 : _d.timeframe,
+      targetDataTimeframe: (_e = space.dataPipeline.pipelineState) == null ? void 0 : _e.targetTimeframe,
+      totalDataTimeframe: (_f = space.dataPipeline.pipelineState) == null ? void 0 : _f.endTimeframe
+    }
+  };
+  if (space.dataPipeline.itemManager) {
+    Object.assign(stats, {
+      properties: getProperties(space),
+      db: {
+        objects: space.dataPipeline.itemManager.entities.size
+      }
+    });
+  }
+  if (stats.metrics) {
+    const { open, ready } = stats.metrics;
+    stats.metrics.startupTime = open && ready && ready.getTime() - open.getTime();
+  }
+  return stats;
+};
+
 // packages/sdk/client-services/src/packlets/services/service-context.ts
 var import_async14 = require("@dxos/async");
-var import_credentials13 = require("@dxos/credentials");
+var import_context9 = require("@dxos/context");
+var import_credentials14 = require("@dxos/credentials");
 var import_debug7 = require("@dxos/debug");
 var import_echo_pipeline3 = require("@dxos/echo-pipeline");
 var import_feed_store4 = require("@dxos/feed-store");
-var import_invariant11 = require("@dxos/invariant");
+var import_invariant12 = require("@dxos/invariant");
 var import_keyring = require("@dxos/keyring");
 var import_keys10 = require("@dxos/keys");
-var import_log12 = require("@dxos/log");
-var import_protocols8 = require("@dxos/protocols");
-var import_services9 = require("@dxos/protocols/proto/dxos/client/services");
+var import_log13 = require("@dxos/log");
+var import_protocols9 = require("@dxos/protocols");
+var import_services10 = require("@dxos/protocols/proto/dxos/client/services");
 var import_teleport_extension_object_sync = require("@dxos/teleport-extension-object-sync");
+var import_tracing3 = require("@dxos/tracing");
 
 // packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts
 var import_async12 = require("@dxos/async");
-var import_context7 = require("@dxos/context");
-var import_credentials12 = require("@dxos/credentials");
-var import_invariant10 = require("@dxos/invariant");
+var import_context8 = require("@dxos/context");
+var import_credentials13 = require("@dxos/credentials");
+var import_invariant11 = require("@dxos/invariant");
 var import_keys9 = require("@dxos/keys");
-var import_log10 = require("@dxos/log");
-var import_protocols6 = require("@dxos/protocols");
-var import_services7 = require("@dxos/protocols/proto/dxos/client/services");
+var import_log11 = require("@dxos/log");
+var import_protocols7 = require("@dxos/protocols");
+var import_services8 = require("@dxos/protocols/proto/dxos/client/services");
 var import_teleport_extension_gossip = require("@dxos/teleport-extension-gossip");
 var import_util5 = require("@dxos/util");
 
 // packages/sdk/client-services/src/packlets/spaces/data-space.ts
 var import_async11 = require("@dxos/async");
 var import_client_protocol3 = require("@dxos/client-protocol");
-var import_context6 = require("@dxos/context");
+var import_context7 = require("@dxos/context");
 var import_debug4 = require("@dxos/debug");
 var import_echo_pipeline = require("@dxos/echo-pipeline");
 var import_errors3 = require("@dxos/errors");
 var import_keys8 = require("@dxos/keys");
-var import_log9 = require("@dxos/log");
-var import_services6 = require("@dxos/protocols/proto/dxos/client/services");
-var import_credentials9 = require("@dxos/protocols/proto/dxos/halo/credentials");
+var import_log10 = require("@dxos/log");
+var import_services7 = require("@dxos/protocols/proto/dxos/client/services");
+var import_credentials10 = require("@dxos/protocols/proto/dxos/halo/credentials");
 var import_timeframe = require("@dxos/timeframe");
 var import_util4 = require("@dxos/util");
 
 // packages/sdk/client-services/src/packlets/spaces/notarization-plugin.ts
 var import_async10 = require("@dxos/async");
-var import_context5 = require("@dxos/context");
-var import_invariant9 = require("@dxos/invariant");
+var import_context6 = require("@dxos/context");
+var import_invariant10 = require("@dxos/invariant");
 var import_keys7 = require("@dxos/keys");
-var import_log8 = require("@dxos/log");
-var import_protocols5 = require("@dxos/protocols");
+var import_log9 = require("@dxos/log");
+var import_protocols6 = require("@dxos/protocols");
 var import_teleport2 = require("@dxos/teleport");
 var import_util3 = require("@dxos/util");
-var __dxlog_file10 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/notarization-plugin.ts";
+var __dxlog_file11 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/notarization-plugin.ts";
 var DEFAULT_RETRY_TIMEOUT = 1e3;
 var DEFAULT_SUCCESS_DELAY = 1e3;
 var DEFAULT_NOTARIZE_TIMEOUT = 1e4;
 var WRITER_NOT_SET_ERROR_CODE = "WRITER_NOT_SET";
 var NotarizationPlugin = class {
   constructor() {
-    this._ctx = new import_context5.Context();
+    this._ctx = new import_context6.Context();
     this._extensionOpened = new import_async10.Event();
     this._extensions = /* @__PURE__ */ new Set();
     this._processedCredentials = new import_util3.ComplexSet(import_keys7.PublicKey.hash);
@@ -2517,16 +2724,16 @@ var NotarizationPlugin = class {
   * Request credentials to be notarized.
   */
   async notarize({ ctx: opCtx, credentials, timeout = DEFAULT_NOTARIZE_TIMEOUT, retryTimeout = DEFAULT_RETRY_TIMEOUT, successDelay = DEFAULT_SUCCESS_DELAY }) {
-    (0, import_log8.log)("notarize", {
+    (0, import_log9.log)("notarize", {
       credentials
     }, {
-      F: __dxlog_file10,
+      F: __dxlog_file11,
       L: 90,
       S: this,
       C: (f, a) => f(...a)
     });
-    (0, import_invariant9.invariant)(credentials.every((credential) => credential.id), "Credentials must have an id", {
-      F: __dxlog_file10,
+    (0, import_invariant10.invariant)(credentials.every((credential) => credential.id), "Credentials must have an id", {
+      F: __dxlog_file11,
       L: 91,
       S: this,
       A: [
@@ -2537,10 +2744,10 @@ var NotarizationPlugin = class {
     const errors = new import_async10.Trigger();
     const ctx = this._ctx.derive({
       onError: (err) => {
-        import_log8.log.warn("Notarization error", {
+        import_log9.log.warn("Notarization error", {
           err
         }, {
-          F: __dxlog_file10,
+          F: __dxlog_file11,
           L: 99,
           S: this,
           C: (f, a) => f(...a)
@@ -2552,11 +2759,11 @@ var NotarizationPlugin = class {
     opCtx == null ? void 0 : opCtx.onDispose(() => ctx.dispose());
     if (timeout !== 0) {
       (0, import_async10.scheduleTask)(ctx, () => {
-        import_log8.log.warn("Notarization timeout", {
+        import_log9.log.warn("Notarization timeout", {
           timeout,
           peers: Array.from(this._extensions).map((extension) => extension.remotePeerId)
         }, {
-          F: __dxlog_file10,
+          F: __dxlog_file11,
           L: 111,
           S: this,
           C: (f, a) => f(...a)
@@ -2576,10 +2783,10 @@ var NotarizationPlugin = class {
           ...this._extensions
         ].find((peer2) => !peersTried.has(peer2));
         if (!peer) {
-          import_log8.log.warn("Exhausted all peers to notarize with", {
+          import_log9.log.warn("Exhausted all peers to notarize with", {
             retryIn: retryTimeout
           }, {
-            F: __dxlog_file10,
+            F: __dxlog_file11,
             L: 136,
             S: this,
             C: (f, a) => f(...a)
@@ -2589,11 +2796,11 @@ var NotarizationPlugin = class {
           return;
         }
         peersTried.add(peer);
-        (0, import_log8.log)("try notarizing", {
+        (0, import_log9.log)("try notarizing", {
           peer: peer.localPeerId,
           credentialId: credentials.map((credential) => credential.id)
         }, {
-          F: __dxlog_file10,
+          F: __dxlog_file11,
           L: 143,
           S: this,
           C: (f, a) => f(...a)
@@ -2601,8 +2808,8 @@ var NotarizationPlugin = class {
         await peer.rpc.NotarizationService.notarize({
           credentials: credentials.filter((credential) => !this._processedCredentials.has(credential.id))
         });
-        (0, import_log8.log)("success", void 0, {
-          F: __dxlog_file10,
+        (0, import_log9.log)("success", void 0, {
+          F: __dxlog_file11,
           L: 147,
           S: this,
           C: (f, a) => f(...a)
@@ -2610,8 +2817,8 @@ var NotarizationPlugin = class {
         await (0, import_async10.sleep)(successDelay);
       } catch (err) {
         if (!ctx.disposed && !err.message.includes(WRITER_NOT_SET_ERROR_CODE)) {
-          import_log8.log.warn("error notarizing (recoverable)", err, {
-            F: __dxlog_file10,
+          import_log9.log.warn("error notarizing (recoverable)", err, {
+            F: __dxlog_file11,
             L: 151,
             S: this,
             C: (f, a) => f(...a)
@@ -2624,12 +2831,12 @@ var NotarizationPlugin = class {
     this._extensionOpened.on(ctx, () => notarizeTask.schedule());
     try {
       await Promise.race([
-        (0, import_context5.rejectOnDispose)(ctx),
+        (0, import_context6.rejectOnDispose)(ctx),
         allNotarized,
         errors.wait()
       ]);
-      (0, import_log8.log)("done", void 0, {
-        F: __dxlog_file10,
+      (0, import_log9.log)("done", void 0, {
+        F: __dxlog_file11,
         L: 162,
         S: this,
         C: (f, a) => f(...a)
@@ -2651,8 +2858,8 @@ var NotarizationPlugin = class {
     this._processCredentialsTriggers.delete(credential.id);
   }
   setWriter(writer) {
-    (0, import_invariant9.invariant)(!this._writer, "Writer already set.", {
-      F: __dxlog_file10,
+    (0, import_invariant10.invariant)(!this._writer, "Writer already set.", {
+      F: __dxlog_file11,
       L: 181,
       S: this,
       A: [
@@ -2677,8 +2884,8 @@ var NotarizationPlugin = class {
       throw new Error(WRITER_NOT_SET_ERROR_CODE);
     }
     for (const credential of (_a = request.credentials) != null ? _a : []) {
-      (0, import_invariant9.invariant)(credential.id, "Credential must have an id", {
-        F: __dxlog_file10,
+      (0, import_invariant10.invariant)(credential.id, "Credential must have an id", {
+        F: __dxlog_file11,
         L: 200,
         S: this,
         A: [
@@ -2695,10 +2902,10 @@ var NotarizationPlugin = class {
   createExtension() {
     const extension = new NotarizationTeleportExtension({
       onOpen: async () => {
-        (0, import_log8.log)("extension opened", {
+        (0, import_log9.log)("extension opened", {
           peer: extension.localPeerId
         }, {
-          F: __dxlog_file10,
+          F: __dxlog_file11,
           L: 211,
           S: this,
           C: (f, a) => f(...a)
@@ -2707,10 +2914,10 @@ var NotarizationPlugin = class {
         this._extensionOpened.emit();
       },
       onClose: async () => {
-        (0, import_log8.log)("extension closed", {
+        (0, import_log9.log)("extension closed", {
           peer: extension.localPeerId
         }, {
-          F: __dxlog_file10,
+          F: __dxlog_file11,
           L: 216,
           S: this,
           C: (f, a) => f(...a)
@@ -2726,10 +2933,10 @@ var NotarizationTeleportExtension = class extends import_teleport2.RpcExtension
   constructor(_params) {
     super({
       requested: {
-        NotarizationService: import_protocols5.schema.getService("dxos.mesh.teleport.notarization.NotarizationService")
+        NotarizationService: import_protocols6.schema.getService("dxos.mesh.teleport.notarization.NotarizationService")
       },
       exposed: {
-        NotarizationService: import_protocols5.schema.getService("dxos.mesh.teleport.notarization.NotarizationService")
+        NotarizationService: import_protocols6.schema.getService("dxos.mesh.teleport.notarization.NotarizationService")
       }
     });
     this._params = _params;
@@ -2754,7 +2961,7 @@ var NotarizationTeleportExtension = class extends import_teleport2.RpcExtension
 };
 
 // packages/sdk/client-services/src/packlets/spaces/data-space.ts
-function _ts_decorate(decorators, target, key, desc) {
+function _ts_decorate3(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2764,12 +2971,13 @@ function _ts_decorate(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file11 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/data-space.ts";
+var __dxlog_file12 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/data-space.ts";
+var ENABLE_FEED_PURGE = false;
 var DataSpace = class DataSpace2 {
   constructor(params) {
-    this._ctx = new import_context6.Context();
+    this._ctx = new import_context7.Context();
     this._notarizationPlugin = new NotarizationPlugin();
-    this._state = import_services6.SpaceState.CLOSED;
+    this._state = import_services7.SpaceState.CLOSED;
     /**
     * Error for _state === SpaceState.ERROR.
     */
@@ -2825,8 +3033,8 @@ var DataSpace = class DataSpace2 {
   async _open() {
     await this._notarizationPlugin.open();
     await this._inner.spaceState.addCredentialProcessor(this._notarizationPlugin);
-    await this._inner.open();
-    this._state = import_services6.SpaceState.CONTROL_ONLY;
+    await this._inner.open(new import_context7.Context());
+    this._state = import_services7.SpaceState.CONTROL_ONLY;
     this.stateUpdate.emit();
     this.metrics = {};
     this.metrics.open = new Date();
@@ -2837,9 +3045,9 @@ var DataSpace = class DataSpace2 {
   async _close() {
     var _a, _b;
     await ((_b = (_a = this._callbacks).beforeClose) == null ? void 0 : _b.call(_a));
-    this._state = import_services6.SpaceState.CLOSED;
+    this._state = import_services7.SpaceState.CLOSED;
     await this._ctx.dispose();
-    this._ctx = new import_context6.Context();
+    this._ctx = new import_context7.Context();
     await this.authVerifier.close();
     await this._inner.close();
     await this._inner.spaceState.removeCredentialProcessor(this._notarizationPlugin);
@@ -2862,21 +3070,21 @@ var DataSpace = class DataSpace2 {
         await this.initializeDataPipeline();
       } catch (err) {
         if (err instanceof import_errors3.CancelledError) {
-          (0, import_log9.log)("data pipeline initialization cancelled", err, {
-            F: __dxlog_file11,
-            L: 193,
+          (0, import_log10.log)("data pipeline initialization cancelled", err, {
+            F: __dxlog_file12,
+            L: 199,
             S: this,
             C: (f, a) => f(...a)
           });
           return;
         }
-        import_log9.log.error("Error initializing data pipeline", err, {
-          F: __dxlog_file11,
-          L: 197,
+        import_log10.log.error("Error initializing data pipeline", err, {
+          F: __dxlog_file12,
+          L: 203,
           S: this,
           C: (f, a) => f(...a)
         });
-        this._state = import_services6.SpaceState.ERROR;
+        this._state = import_services7.SpaceState.ERROR;
         this.error = err;
         this.stateUpdate.emit();
       } finally {
@@ -2886,19 +3094,19 @@ var DataSpace = class DataSpace2 {
   }
   async initializeDataPipeline() {
     var _a, _b, _c, _d;
-    if (this._state !== import_services6.SpaceState.CONTROL_ONLY) {
+    if (this._state !== import_services7.SpaceState.CONTROL_ONLY) {
       throw new import_errors3.SystemError("Invalid operation");
     }
-    this._state = import_services6.SpaceState.INITIALIZING;
+    this._state = import_services7.SpaceState.INITIALIZING;
     await this._inner.controlPipeline.state.waitUntilReachedTargetTimeframe({
       ctx: this._ctx,
       breakOnStall: false
     });
     this.metrics.controlPipelineReady = new Date();
     await this._createWritableFeeds();
-    (0, import_log9.log)("writable feeds created", void 0, {
-      F: __dxlog_file11,
-      L: 221,
+    (0, import_log10.log)("writable feeds created", void 0, {
+      F: __dxlog_file12,
+      L: 227,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2912,10 +3120,10 @@ var DataSpace = class DataSpace2 {
     }
     await this._inner.initializeDataPipeline();
     this.metrics.dataPipelineOpen = new Date();
-    await (0, import_context6.cancelWithContext)(this._ctx, this._inner.dataPipeline.ensureEpochInitialized());
-    (0, import_log9.log)("waiting for data pipeline to reach target timeframe", void 0, {
-      F: __dxlog_file11,
-      L: 242,
+    await (0, import_context7.cancelWithContext)(this._ctx, this._inner.dataPipeline.ensureEpochInitialized());
+    (0, import_log10.log)("waiting for data pipeline to reach target timeframe", void 0, {
+      F: __dxlog_file12,
+      L: 248,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2924,14 +3132,14 @@ var DataSpace = class DataSpace2 {
       breakOnStall: false
     });
     this.metrics.dataPipelineReady = new Date();
-    (0, import_log9.log)("data pipeline ready", void 0, {
-      F: __dxlog_file11,
-      L: 251,
+    (0, import_log10.log)("data pipeline ready", void 0, {
+      F: __dxlog_file12,
+      L: 257,
       S: this,
       C: (f, a) => f(...a)
     });
     await ((_b = (_a = this._callbacks).beforeReady) == null ? void 0 : _b.call(_a));
-    this._state = import_services6.SpaceState.READY;
+    this._state = import_services7.SpaceState.READY;
     this.stateUpdate.emit();
     await ((_d = (_c = this._callbacks).afterReady) == null ? void 0 : _d.call(_c));
   }
@@ -2949,7 +3157,7 @@ var DataSpace = class DataSpace2 {
           spaceKey: this.key,
           deviceKey: this._signingContext.deviceKey,
           identityKey: this._signingContext.identityKey,
-          designation: import_credentials9.AdmittedFeed.Designation.CONTROL
+          designation: import_credentials10.AdmittedFeed.Designation.CONTROL
         }
       }));
     }
@@ -2966,7 +3174,7 @@ var DataSpace = class DataSpace2 {
           spaceKey: this.key,
           deviceKey: this._signingContext.deviceKey,
           identityKey: this._signingContext.identityKey,
-          designation: import_credentials9.AdmittedFeed.Designation.DATA
+          designation: import_credentials10.AdmittedFeed.Designation.DATA
         }
       }));
     }
@@ -2999,59 +3207,62 @@ var DataSpace = class DataSpace2 {
         receipt.seq
       ]
     ]));
-    for (const feed of (_b = (_a = this.inner.dataPipeline.pipelineState) == null ? void 0 : _a.feeds) != null ? _b : []) {
-      const indexBeforeEpoch = epoch.timeframe.get(feed.key);
-      if (indexBeforeEpoch) {
-        await feed.clear(0, indexBeforeEpoch + 1);
+    if (ENABLE_FEED_PURGE) {
+      for (const feed of (_b = (_a = this.inner.dataPipeline.pipelineState) == null ? void 0 : _a.feeds) != null ? _b : []) {
+        const indexBeforeEpoch = epoch.timeframe.get(feed.key);
+        if (indexBeforeEpoch === void 0) {
+          continue;
+        }
+        await feed.safeClear(0, indexBeforeEpoch + 1);
       }
     }
   }
   async activate() {
-    if (this._state !== import_services6.SpaceState.INACTIVE) {
+    if (this._state !== import_services7.SpaceState.INACTIVE) {
       return;
     }
-    await this._metadataStore.setSpaceState(this.key, import_services6.SpaceState.ACTIVE);
+    await this._metadataStore.setSpaceState(this.key, import_services7.SpaceState.ACTIVE);
     await this._open();
     this.initializeDataPipelineAsync();
   }
   async deactivate() {
-    if (this._state === import_services6.SpaceState.INACTIVE) {
+    if (this._state === import_services7.SpaceState.INACTIVE) {
       return;
     }
-    await this._metadataStore.setSpaceState(this.key, import_services6.SpaceState.INACTIVE);
+    await this._metadataStore.setSpaceState(this.key, import_services7.SpaceState.INACTIVE);
     await this._close();
-    this._state = import_services6.SpaceState.INACTIVE;
+    this._state = import_services7.SpaceState.INACTIVE;
     this.stateUpdate.emit();
   }
 };
-_ts_decorate([
+_ts_decorate3([
   import_async11.synchronized
 ], DataSpace.prototype, "open", null);
-_ts_decorate([
+_ts_decorate3([
   import_async11.synchronized
 ], DataSpace.prototype, "close", null);
-_ts_decorate([
+_ts_decorate3([
   (0, import_debug4.timed)(1e4)
 ], DataSpace.prototype, "_createWritableFeeds", null);
-_ts_decorate([
+_ts_decorate3([
   import_async11.synchronized
 ], DataSpace.prototype, "activate", null);
-_ts_decorate([
+_ts_decorate3([
   import_async11.synchronized
 ], DataSpace.prototype, "deactivate", null);
-DataSpace = _ts_decorate([
+DataSpace = _ts_decorate3([
   (0, import_async11.trackLeaks)("open", "close")
 ], DataSpace);
 
 // packages/sdk/client-services/src/packlets/spaces/genesis.ts
-var import_credentials10 = require("@dxos/credentials");
+var import_credentials11 = require("@dxos/credentials");
 var import_debug5 = require("@dxos/debug");
-var import_credentials11 = require("@dxos/protocols/proto/dxos/halo/credentials");
+var import_credentials12 = require("@dxos/protocols/proto/dxos/halo/credentials");
 var import_timeframe2 = require("@dxos/timeframe");
 var spaceGenesis = async (keyring, signingContext, space) => {
   var _a, _b, _c, _d;
   const credentials = [
-    await (0, import_credentials10.createCredential)({
+    await (0, import_credentials11.createCredential)({
       signer: keyring,
       issuer: space.key,
       subject: space.key,
@@ -3060,14 +3271,14 @@ var spaceGenesis = async (keyring, signingContext, space) => {
         spaceKey: space.key
       }
     }),
-    await (0, import_credentials10.createCredential)({
+    await (0, import_credentials11.createCredential)({
       signer: keyring,
       issuer: space.key,
       subject: signingContext.identityKey,
       assertion: {
         "@type": "dxos.halo.credentials.SpaceMember",
         spaceKey: space.key,
-        role: import_credentials11.SpaceMember.Role.ADMIN,
+        role: import_credentials12.SpaceMember.Role.ADMIN,
         profile: signingContext.profile,
         genesisFeedKey: (_a = space.controlFeedKey) != null ? _a : (0, import_debug5.failUndefined)()
       }
@@ -3079,7 +3290,7 @@ var spaceGenesis = async (keyring, signingContext, space) => {
         spaceKey: space.key,
         identityKey: signingContext.identityKey,
         deviceKey: signingContext.deviceKey,
-        designation: import_credentials11.AdmittedFeed.Designation.CONTROL
+        designation: import_credentials12.AdmittedFeed.Designation.CONTROL
       }
     }),
     await signingContext.credentialSigner.createCredential({
@@ -3089,7 +3300,7 @@ var spaceGenesis = async (keyring, signingContext, space) => {
         spaceKey: space.key,
         identityKey: signingContext.identityKey,
         deviceKey: signingContext.deviceKey,
-        designation: import_credentials11.AdmittedFeed.Designation.DATA
+        designation: import_credentials12.AdmittedFeed.Designation.DATA
       }
     }),
     await signingContext.credentialSigner.createCredential({
@@ -3114,7 +3325,7 @@ var spaceGenesis = async (keyring, signingContext, space) => {
 };
 
 // packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts
-function _ts_decorate2(decorators, target, key, desc) {
+function _ts_decorate4(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
     r = Reflect.decorate(decorators, target, key, desc);
@@ -3124,7 +3335,7 @@ function _ts_decorate2(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file12 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts";
+var __dxlog_file13 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts";
 var DataSpaceManager = class DataSpaceManager2 {
   constructor(_spaceManager, _metadataStore, _dataServiceSubscriptions, _keyring, _signingContext, _feedStore) {
     this._spaceManager = _spaceManager;
@@ -3133,7 +3344,7 @@ var DataSpaceManager = class DataSpaceManager2 {
     this._keyring = _keyring;
     this._signingContext = _signingContext;
     this._feedStore = _feedStore;
-    this._ctx = new import_context7.Context();
+    this._ctx = new import_context8.Context();
     this.updated = new import_async12.Event();
     this._spaces = new import_util5.ComplexMap(import_keys9.PublicKey.hash);
     this._isOpen = false;
@@ -3144,49 +3355,49 @@ var DataSpaceManager = class DataSpaceManager2 {
     return this._spaces;
   }
   async open() {
-    (0, import_log10.log)("open", void 0, {
-      F: __dxlog_file12,
+    (0, import_log11.log)("open", void 0, {
+      F: __dxlog_file13,
       L: 79,
       S: this,
       C: (f, a) => f(...a)
     });
-    import_log10.log.trace("dxos.echo.data-space-manager.open", import_protocols6.trace.begin({
+    import_log11.log.trace("dxos.echo.data-space-manager.open", import_protocols7.trace.begin({
       id: this._instanceId
     }), {
-      F: __dxlog_file12,
+      F: __dxlog_file13,
       L: 80,
       S: this,
       C: (f, a) => f(...a)
     });
     await this._metadataStore.load();
-    (0, import_log10.log)("metadata loaded", {
+    (0, import_log11.log)("metadata loaded", {
       spaces: this._metadataStore.spaces.length
     }, {
-      F: __dxlog_file12,
+      F: __dxlog_file13,
       L: 82,
       S: this,
       C: (f, a) => f(...a)
     });
     for (const spaceMetadata of this._metadataStore.spaces) {
       try {
-        (0, import_log10.log)("load space", {
+        (0, import_log11.log)("load space", {
           spaceMetadata
         }, {
-          F: __dxlog_file12,
+          F: __dxlog_file13,
           L: 86,
           S: this,
           C: (f, a) => f(...a)
         });
         const space = await this._constructSpace(spaceMetadata);
-        if (spaceMetadata.state !== import_services7.SpaceState.INACTIVE) {
+        if (spaceMetadata.state !== import_services8.SpaceState.INACTIVE) {
           space.initializeDataPipelineAsync();
         }
       } catch (err) {
-        import_log10.log.error("Error loading space", {
+        import_log11.log.error("Error loading space", {
           spaceMetadata,
           err
         }, {
-          F: __dxlog_file12,
+          F: __dxlog_file13,
           L: 92,
           S: this,
           C: (f, a) => f(...a)
@@ -3195,18 +3406,18 @@ var DataSpaceManager = class DataSpaceManager2 {
     }
     this._isOpen = true;
     this.updated.emit();
-    import_log10.log.trace("dxos.echo.data-space-manager.open", import_protocols6.trace.end({
+    import_log11.log.trace("dxos.echo.data-space-manager.open", import_protocols7.trace.end({
       id: this._instanceId
     }), {
-      F: __dxlog_file12,
+      F: __dxlog_file13,
       L: 98,
       S: this,
       C: (f, a) => f(...a)
     });
   }
   async close() {
-    (0, import_log10.log)("close", void 0, {
-      F: __dxlog_file12,
+    (0, import_log11.log)("close", void 0, {
+      F: __dxlog_file13,
       L: 103,
       S: this,
       C: (f, a) => f(...a)
@@ -3221,8 +3432,8 @@ var DataSpaceManager = class DataSpaceManager2 {
   * Creates a new space writing the genesis credentials to the control feed.
   */
   async createSpace() {
-    (0, import_invariant10.invariant)(this._isOpen, "Not open.", {
-      F: __dxlog_file12,
+    (0, import_invariant11.invariant)(this._isOpen, "Not open.", {
+      F: __dxlog_file13,
       L: 116,
       S: this,
       A: [
@@ -3238,12 +3449,12 @@ var DataSpaceManager = class DataSpaceManager2 {
       genesisFeedKey: controlFeedKey,
       controlFeedKey,
       dataFeedKey,
-      state: import_services7.SpaceState.ACTIVE
+      state: import_services8.SpaceState.ACTIVE
     };
-    (0, import_log10.log)("creating space...", {
+    (0, import_log11.log)("creating space...", {
       spaceKey
     }, {
-      F: __dxlog_file12,
+      F: __dxlog_file13,
       L: 128,
       S: this,
       C: (f, a) => f(...a)
@@ -3252,8 +3463,8 @@ var DataSpaceManager = class DataSpaceManager2 {
     const credentials = await spaceGenesis(this._keyring, this._signingContext, space.inner);
     await this._metadataStore.addSpace(metadata);
     const memberCredential = credentials[1];
-    (0, import_invariant10.invariant)((0, import_credentials12.getCredentialAssertion)(memberCredential)["@type"] === "dxos.halo.credentials.SpaceMember", void 0, {
-      F: __dxlog_file12,
+    (0, import_invariant11.invariant)((0, import_credentials13.getCredentialAssertion)(memberCredential)["@type"] === "dxos.halo.credentials.SpaceMember", void 0, {
+      F: __dxlog_file13,
       L: 135,
       S: this,
       A: [
@@ -3268,16 +3479,16 @@ var DataSpaceManager = class DataSpaceManager2 {
   }
   // TODO(burdon): Rename join space.
   async acceptSpace(opts) {
-    (0, import_log10.log)("accept space", {
+    (0, import_log11.log)("accept space", {
       opts
     }, {
-      F: __dxlog_file12,
+      F: __dxlog_file13,
       L: 147,
       S: this,
       C: (f, a) => f(...a)
     });
-    (0, import_invariant10.invariant)(this._isOpen, "Not open.", {
-      F: __dxlog_file12,
+    (0, import_invariant11.invariant)(this._isOpen, "Not open.", {
+      F: __dxlog_file13,
       L: 148,
       S: this,
       A: [
@@ -3285,8 +3496,8 @@ var DataSpaceManager = class DataSpaceManager2 {
         "'Not open.'"
       ]
     });
-    (0, import_invariant10.invariant)(!this._spaces.has(opts.spaceKey), "Space already exists.", {
-      F: __dxlog_file12,
+    (0, import_invariant11.invariant)(!this._spaces.has(opts.spaceKey), "Space already exists.", {
+      F: __dxlog_file13,
       L: 149,
       S: this,
       A: [
@@ -3312,16 +3523,16 @@ var DataSpaceManager = class DataSpaceManager2 {
   * TODO(dmaretskyi): Consider removing.
   */
   async waitUntilSpaceReady(spaceKey) {
-    await (0, import_context7.cancelWithContext)(this._ctx, this.updated.waitForCondition(() => {
+    await (0, import_context8.cancelWithContext)(this._ctx, this.updated.waitForCondition(() => {
       const space = this._spaces.get(spaceKey);
-      return !!space && space.state === import_services7.SpaceState.READY;
+      return !!space && space.state === import_services8.SpaceState.READY;
     }));
   }
   async _constructSpace(metadata) {
-    (0, import_log10.log)("construct space", {
+    (0, import_log11.log)("construct space", {
       metadata
     }, {
-      F: __dxlog_file12,
+      F: __dxlog_file13,
       L: 182,
       S: this,
       C: (f, a) => f(...a)
@@ -3356,8 +3567,8 @@ var DataSpaceManager = class DataSpaceManager2 {
         session.addExtension("dxos.mesh.teleport.notarization", dataSpace.notarizationPlugin.createExtension());
       },
       onAuthFailure: () => {
-        import_log10.log.warn("auth failure", void 0, {
-          F: __dxlog_file12,
+        import_log11.log.warn("auth failure", void 0, {
+          F: __dxlog_file13,
           L: 213,
           S: this,
           C: (f, a) => f(...a)
@@ -3369,7 +3580,7 @@ var DataSpaceManager = class DataSpaceManager2 {
     dataFeed && space.setDataFeed(dataFeed);
     const dataSpace = new DataSpace({
       inner: space,
-      initialState: metadata.state === import_services7.SpaceState.INACTIVE ? import_services7.SpaceState.INACTIVE : import_services7.SpaceState.CLOSED,
+      initialState: metadata.state === import_services8.SpaceState.INACTIVE ? import_services8.SpaceState.INACTIVE : import_services8.SpaceState.CLOSED,
       metadataStore: this._metadataStore,
       gossip,
       presence,
@@ -3378,10 +3589,10 @@ var DataSpaceManager = class DataSpaceManager2 {
       signingContext: this._signingContext,
       callbacks: {
         beforeReady: async () => {
-          (0, import_log10.log)("before space ready", {
+          (0, import_log11.log)("before space ready", {
             space: space.key
           }, {
-            F: __dxlog_file12,
+            F: __dxlog_file13,
             L: 231,
             S: this,
             C: (f, a) => f(...a)
@@ -3389,11 +3600,11 @@ var DataSpaceManager = class DataSpaceManager2 {
           await this._dataServiceSubscriptions.registerSpace(space.key, dataSpace.dataPipeline.databaseHost.createDataServiceHost());
         },
         afterReady: async () => {
-          (0, import_log10.log)("after space ready", {
+          (0, import_log11.log)("after space ready", {
             space: space.key,
             open: this._isOpen
           }, {
-            F: __dxlog_file12,
+            F: __dxlog_file13,
             L: 238,
             S: this,
             C: (f, a) => f(...a)
@@ -3403,10 +3614,10 @@ var DataSpaceManager = class DataSpaceManager2 {
           }
         },
         beforeClose: async () => {
-          (0, import_log10.log)("before space close", {
+          (0, import_log11.log)("before space close", {
             space: space.key
           }, {
-            F: __dxlog_file12,
+            F: __dxlog_file13,
             L: 244,
             S: this,
             C: (f, a) => f(...a)
@@ -3416,7 +3627,7 @@ var DataSpaceManager = class DataSpaceManager2 {
       },
       cache: metadata.cache
     });
-    if (metadata.state !== import_services7.SpaceState.INACTIVE) {
+    if (metadata.state !== import_services8.SpaceState.INACTIVE) {
       await dataSpace.open();
     }
     if (metadata.controlTimeframe) {
@@ -3429,33 +3640,33 @@ var DataSpaceManager = class DataSpaceManager2 {
     return dataSpace;
   }
 };
-_ts_decorate2([
+_ts_decorate4([
   import_async12.synchronized
 ], DataSpaceManager.prototype, "open", null);
-_ts_decorate2([
+_ts_decorate4([
   import_async12.synchronized
 ], DataSpaceManager.prototype, "close", null);
-_ts_decorate2([
+_ts_decorate4([
   import_async12.synchronized
 ], DataSpaceManager.prototype, "createSpace", null);
-_ts_decorate2([
+_ts_decorate4([
   import_async12.synchronized
 ], DataSpaceManager.prototype, "acceptSpace", null);
-DataSpaceManager = _ts_decorate2([
+DataSpaceManager = _ts_decorate4([
   (0, import_async12.trackLeaks)("open", "close")
 ], DataSpaceManager);
 
 // packages/sdk/client-services/src/packlets/spaces/spaces-service.ts
 var import_async13 = require("@dxos/async");
-var import_codec_protobuf10 = require("@dxos/codec-protobuf");
+var import_codec_protobuf11 = require("@dxos/codec-protobuf");
 var import_debug6 = require("@dxos/debug");
 var import_echo_pipeline2 = require("@dxos/echo-pipeline");
 var import_errors4 = require("@dxos/errors");
-var import_log11 = require("@dxos/log");
-var import_protocols7 = require("@dxos/protocols");
-var import_services8 = require("@dxos/protocols/proto/dxos/client/services");
+var import_log12 = require("@dxos/log");
+var import_protocols8 = require("@dxos/protocols");
+var import_services9 = require("@dxos/protocols/proto/dxos/client/services");
 var import_util6 = require("@dxos/util");
-var __dxlog_file13 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/spaces-service.ts";
+var __dxlog_file14 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/spaces-service.ts";
 var SpacesServiceImpl = class {
   constructor(_identityManager, _spaceManager, _dataServiceSubscriptions, _getDataSpaceManager) {
     this._identityManager = _identityManager;
@@ -3477,10 +3688,10 @@ var SpacesServiceImpl = class {
     const space = (_a = dataSpaceManager.spaces.get(spaceKey)) != null ? _a : (0, import_debug6.raise)(new import_echo_pipeline2.SpaceNotFoundError(spaceKey));
     if (state) {
       switch (state) {
-        case import_services8.SpaceState.ACTIVE:
+        case import_services9.SpaceState.ACTIVE:
           await space.activate();
           break;
-        case import_services8.SpaceState.INACTIVE:
+        case import_services9.SpaceState.INACTIVE:
           await space.deactivate();
           break;
         default:
@@ -3489,14 +3700,14 @@ var SpacesServiceImpl = class {
     }
   }
   querySpaces() {
-    return new import_codec_protobuf10.Stream(({ next, ctx }) => {
+    return new import_codec_protobuf11.Stream(({ next, ctx }) => {
       const scheduler = new import_async13.UpdateScheduler(ctx, async () => {
         const dataSpaceManager = await this._getDataSpaceManager();
         const spaces = Array.from(dataSpaceManager.spaces.values()).map((space) => this._serializeSpace(space));
-        (0, import_log11.log)("update", {
+        (0, import_log12.log)("update", {
           spaces
         }, {
-          F: __dxlog_file13,
+          F: __dxlog_file14,
           L: 78,
           S: this,
           C: (f, a) => f(...a)
@@ -3544,7 +3755,7 @@ var SpacesServiceImpl = class {
     await space.postMessage(getChannelId(channel), message);
   }
   subscribeMessages({ spaceKey, channel }) {
-    return new import_codec_protobuf10.Stream(({ ctx, next }) => {
+    return new import_codec_protobuf11.Stream(({ ctx, next }) => {
       (0, import_async13.scheduleTask)(ctx, async () => {
         var _a;
         const dataSpaceManager = await this._getDataSpaceManager();
@@ -3557,7 +3768,7 @@ var SpacesServiceImpl = class {
     });
   }
   queryCredentials({ spaceKey }) {
-    return new import_codec_protobuf10.Stream(({ ctx, next }) => {
+    return new import_codec_protobuf11.Stream(({ ctx, next }) => {
       var _a;
       const space = (_a = this._spaceManager.spaces.get(spaceKey)) != null ? _a : (0, import_debug6.raise)(new import_echo_pipeline2.SpaceNotFoundError(spaceKey));
       const processor = {
@@ -3591,7 +3802,7 @@ var SpacesServiceImpl = class {
     return {
       spaceKey: space.key,
       state: space.state,
-      error: space.error ? (0, import_protocols7.encodeError)(space.error) : void 0,
+      error: space.error ? (0, import_protocols8.encodeError)(space.error) : void 0,
       pipeline: {
         currentEpoch: space.dataPipeline.currentEpoch,
         appliedEpoch: space.dataPipeline.appliedEpoch,
@@ -3619,7 +3830,7 @@ var SpacesServiceImpl = class {
               displayName: (_c2 = (_b2 = member.assertion.profile) == null ? void 0 : _b2.displayName) != null ? _c2 : (0, import_util6.humanize)(member.key)
             }
           },
-          presence: isMe || peers.length > 0 ? import_services8.SpaceMember.PresenceState.ONLINE : import_services8.SpaceMember.PresenceState.OFFLINE,
+          presence: isMe || peers.length > 0 ? import_services9.SpaceMember.PresenceState.ONLINE : import_services9.SpaceMember.PresenceState.OFFLINE,
           peerStates: peers
         };
       }),
@@ -3632,8 +3843,18 @@ var SpacesServiceImpl = class {
 var getChannelId = (channel) => `user-channel/${channel}`;
 
 // packages/sdk/client-services/src/packlets/services/service-context.ts
-var __dxlog_file14 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/services/service-context.ts";
-var ServiceContext = class {
+function _ts_decorate5(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
+    r = Reflect.decorate(decorators, target, key, desc);
+  else
+    for (var i = decorators.length - 1; i >= 0; i--)
+      if (d = decorators[i])
+        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+var __dxlog_file15 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/services/service-context.ts";
+var ServiceContext = class ServiceContext2 {
   // prettier-ignore
   constructor(storage, networkManager, signalManager, modelFactory) {
     this.storage = storage;
@@ -3667,54 +3888,54 @@ var ServiceContext = class {
     });
     this.identityManager = new IdentityManager(this.metadataStore, this.keyring, this.feedStore, this.spaceManager);
     this.invitations = new InvitationsHandler(this.networkManager);
-    this._handlerFactories.set(import_services9.Invitation.Kind.DEVICE, () => new DeviceInvitationProtocol(this.keyring, () => {
+    this._handlerFactories.set(import_services10.Invitation.Kind.DEVICE, () => new DeviceInvitationProtocol(this.keyring, () => {
       var _a;
       return (_a = this.identityManager.identity) != null ? _a : (0, import_debug7.failUndefined)();
     }, this._acceptIdentity.bind(this)));
   }
-  async open() {
-    import_log12.log.trace("dxos.sdk.service-context.open", import_protocols8.trace.begin({
-      id: this._instanceId
-    }), {
-      F: __dxlog_file14,
-      L: 125,
+  async open(ctx) {
+    await this._checkStorageVersion();
+    (0, import_log13.log)("opening...", void 0, {
+      F: __dxlog_file15,
+      L: 131,
       S: this,
       C: (f, a) => f(...a)
     });
-    await this._checkStorageVersion();
-    (0, import_log12.log)("opening...", void 0, {
-      F: __dxlog_file14,
-      L: 129,
+    import_log13.log.trace("dxos.sdk.service-context.open", import_protocols9.trace.begin({
+      id: this._instanceId
+    }), {
+      F: __dxlog_file15,
+      L: 132,
       S: this,
       C: (f, a) => f(...a)
     });
     await this.signalManager.open();
     await this.networkManager.open();
     await this.spaceManager.open();
-    await this.identityManager.open();
+    await this.identityManager.open(ctx);
     if (this.identityManager.identity) {
-      await this._initialize();
+      await this._initialize(ctx);
     }
-    (0, import_log12.log)("opened", void 0, {
-      F: __dxlog_file14,
-      L: 137,
+    import_log13.log.trace("dxos.sdk.service-context.open", import_protocols9.trace.end({
+      id: this._instanceId
+    }), {
+      F: __dxlog_file15,
+      L: 140,
       S: this,
       C: (f, a) => f(...a)
     });
-    import_log12.log.trace("dxos.sdk.service-context.open", import_protocols8.trace.end({
-      id: this._instanceId
-    }), {
-      F: __dxlog_file14,
-      L: 138,
+    (0, import_log13.log)("opened", void 0, {
+      F: __dxlog_file15,
+      L: 141,
       S: this,
       C: (f, a) => f(...a)
     });
   }
   async close() {
     var _a;
-    (0, import_log12.log)("closing...", void 0, {
-      F: __dxlog_file14,
-      L: 142,
+    (0, import_log13.log)("closing...", void 0, {
+      F: __dxlog_file15,
+      L: 145,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3728,23 +3949,23 @@ var ServiceContext = class {
     await this.networkManager.close();
     await this.signalManager.close();
     this.dataServiceSubscriptions.clear();
-    (0, import_log12.log)("closed", void 0, {
-      F: __dxlog_file14,
-      L: 153,
+    (0, import_log13.log)("closed", void 0, {
+      F: __dxlog_file15,
+      L: 156,
       S: this,
       C: (f, a) => f(...a)
     });
   }
   async createIdentity(params = {}) {
     const identity = await this.identityManager.createIdentity(params);
-    await this._initialize();
+    await this._initialize(new import_context9.Context());
     return identity;
   }
   getInvitationHandler(invitation) {
     const factory = this._handlerFactories.get(invitation.kind);
-    (0, import_invariant11.invariant)(factory, `Unknown invitation kind: ${invitation.kind}`, {
-      F: __dxlog_file14,
-      L: 165,
+    (0, import_invariant12.invariant)(factory, `Unknown invitation kind: ${invitation.kind}`, {
+      F: __dxlog_file15,
+      L: 168,
       S: this,
       A: [
         "factory",
@@ -3755,21 +3976,21 @@ var ServiceContext = class {
   }
   async _acceptIdentity(params) {
     const identity = await this.identityManager.acceptIdentity(params);
-    await this._initialize();
+    await this._initialize(new import_context9.Context());
     return identity;
   }
   async _checkStorageVersion() {
     await this.metadataStore.load();
-    if (this.metadataStore.version !== import_protocols8.STORAGE_VERSION) {
-      throw new Error(`Invalid storage version: current=${this.metadataStore.version}, expected=${import_protocols8.STORAGE_VERSION}`);
+    if (this.metadataStore.version !== import_protocols9.STORAGE_VERSION) {
+      throw new Error(`Invalid storage version: current=${this.metadataStore.version}, expected=${import_protocols9.STORAGE_VERSION}`);
     }
   }
   // Called when identity is created.
-  async _initialize() {
+  async _initialize(ctx) {
     var _a;
-    (0, import_log12.log)("initializing spaces...", void 0, {
-      F: __dxlog_file14,
-      L: 186,
+    (0, import_log13.log)("initializing spaces...", void 0, {
+      F: __dxlog_file15,
+      L: 190,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3789,10 +4010,10 @@ var ServiceContext = class {
     };
     this.dataSpaceManager = new DataSpaceManager(this.spaceManager, this.metadataStore, this.dataServiceSubscriptions, this.keyring, signingContext, this.feedStore);
     await this.dataSpaceManager.open();
-    this._handlerFactories.set(import_services9.Invitation.Kind.SPACE, (invitation) => {
-      (0, import_invariant11.invariant)(this.dataSpaceManager, "dataSpaceManager not initialized yet", {
-        F: __dxlog_file14,
-        L: 209,
+    this._handlerFactories.set(import_services10.Invitation.Kind.SPACE, (invitation) => {
+      (0, import_invariant12.invariant)(this.dataSpaceManager, "dataSpaceManager not initialized yet", {
+        F: __dxlog_file15,
+        L: 213,
         S: this,
         A: [
           "this.dataSpaceManager",
@@ -3804,7 +4025,7 @@ var ServiceContext = class {
     this.initialized.wake();
     this._deviceSpaceSync = {
       processCredential: async (credential) => {
-        const assertion = (0, import_credentials13.getCredentialAssertion)(credential);
+        const assertion = (0, import_credentials14.getCredentialAssertion)(credential);
         if (assertion["@type"] !== "dxos.halo.credentials.SpaceMember") {
           return;
         }
@@ -3812,33 +4033,33 @@ var ServiceContext = class {
           return;
         }
         if (!this.dataSpaceManager) {
-          (0, import_log12.log)("dataSpaceManager not initialized yet, ignoring space admission", {
+          (0, import_log13.log)("dataSpaceManager not initialized yet, ignoring space admission", {
             details: assertion
           }, {
-            F: __dxlog_file14,
-            L: 225,
+            F: __dxlog_file15,
+            L: 229,
             S: this,
             C: (f, a) => f(...a)
           });
           return;
         }
         if (this.dataSpaceManager.spaces.has(assertion.spaceKey)) {
-          (0, import_log12.log)("space already exists, ignoring space admission", {
+          (0, import_log13.log)("space already exists, ignoring space admission", {
             details: assertion
           }, {
-            F: __dxlog_file14,
-            L: 229,
+            F: __dxlog_file15,
+            L: 233,
             S: this,
             C: (f, a) => f(...a)
           });
           return;
         }
         try {
-          (0, import_log12.log)("accepting space recorded in halo", {
+          (0, import_log13.log)("accepting space recorded in halo", {
             details: assertion
           }, {
-            F: __dxlog_file14,
-            L: 234,
+            F: __dxlog_file15,
+            L: 238,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -3847,9 +4068,9 @@ var ServiceContext = class {
             genesisFeedKey: assertion.genesisFeedKey
           });
         } catch (err) {
-          import_log12.log.catch(err, void 0, {
-            F: __dxlog_file14,
-            L: 240,
+          import_log13.log.catch(err, void 0, {
+            F: __dxlog_file15,
+            L: 244,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -3859,26 +4080,37 @@ var ServiceContext = class {
     await identity.space.spaceState.addCredentialProcessor(this._deviceSpaceSync);
   }
 };
+_ts_decorate5([
+  import_tracing3.trace.span()
+], ServiceContext.prototype, "open", null);
+_ts_decorate5([
+  import_tracing3.trace.span()
+], ServiceContext.prototype, "_initialize", null);
+ServiceContext = _ts_decorate5([
+  import_tracing3.trace.resource()
+], ServiceContext);
 
 // packages/sdk/client-services/src/packlets/services/service-host.ts
 var import_async17 = require("@dxos/async");
 var import_client_protocol5 = require("@dxos/client-protocol");
-var import_document_model = require("@dxos/document-model");
+var import_context10 = require("@dxos/context");
+var import_document_model2 = require("@dxos/document-model");
 var import_echo_pipeline4 = require("@dxos/echo-pipeline");
-var import_invariant13 = require("@dxos/invariant");
+var import_invariant14 = require("@dxos/invariant");
 var import_keys11 = require("@dxos/keys");
-var import_log15 = require("@dxos/log");
+var import_log16 = require("@dxos/log");
 var import_messaging = require("@dxos/messaging");
 var import_model_factory = require("@dxos/model-factory");
 var import_network_manager2 = require("@dxos/network-manager");
-var import_protocols9 = require("@dxos/protocols");
-var import_services12 = require("@dxos/protocols/proto/dxos/client/services");
+var import_protocols10 = require("@dxos/protocols");
+var import_services14 = require("@dxos/protocols/proto/dxos/client/services");
 var import_text_model = require("@dxos/text-model");
+var import_tracing4 = require("@dxos/tracing");
 
 // packages/sdk/client-services/src/packlets/devices/devices-service.ts
 var import_async15 = require("@dxos/async");
-var import_codec_protobuf11 = require("@dxos/codec-protobuf");
-var import_services10 = require("@dxos/protocols/proto/dxos/client/services");
+var import_codec_protobuf12 = require("@dxos/codec-protobuf");
+var import_services11 = require("@dxos/protocols/proto/dxos/client/services");
 var DevicesServiceImpl = class {
   constructor(_identityManager) {
     this._identityManager = _identityManager;
@@ -3887,7 +4119,7 @@ var DevicesServiceImpl = class {
     throw new Error("Method not implemented.");
   }
   queryDevices() {
-    return new import_codec_protobuf11.Stream(({ next }) => {
+    return new import_codec_protobuf12.Stream(({ next }) => {
       const update = () => {
         var _a;
         const deviceKeys = (_a = this._identityManager.identity) == null ? void 0 : _a.authorizedDeviceKeys;
@@ -3901,7 +4133,7 @@ var DevicesServiceImpl = class {
               var _a2;
               return {
                 deviceKey: key,
-                kind: ((_a2 = this._identityManager.identity) == null ? void 0 : _a2.deviceKey.equals(key)) ? import_services10.DeviceKind.CURRENT : import_services10.DeviceKind.TRUSTED
+                kind: ((_a2 = this._identityManager.identity) == null ? void 0 : _a2.deviceKey.equals(key)) ? import_services11.DeviceKind.CURRENT : import_services11.DeviceKind.TRUSTED
               };
             })
           });
@@ -3923,10 +4155,10 @@ var DevicesServiceImpl = class {
 };
 
 // packages/sdk/client-services/src/packlets/locks/node.ts
-var import_invariant12 = require("@dxos/invariant");
+var import_invariant13 = require("@dxos/invariant");
 var import_lock_file = require("@dxos/lock-file");
-var import_log13 = require("@dxos/log");
-function _ts_decorate3(decorators, target, key, desc) {
+var import_log14 = require("@dxos/log");
+function _ts_decorate6(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
     r = Reflect.decorate(decorators, target, key, desc);
@@ -3936,7 +4168,7 @@ function _ts_decorate3(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file15 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/locks/node.ts";
+var __dxlog_file16 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/locks/node.ts";
 var Lock = class {
   constructor({ lockKey: lockPath, onAcquire, onRelease }) {
     this._lockPath = lockPath;
@@ -3948,16 +4180,16 @@ var Lock = class {
   }
   async acquire() {
     var _a;
-    (0, import_log13.log)("acquiring lock...", void 0, {
-      F: __dxlog_file15,
+    (0, import_log14.log)("acquiring lock...", void 0, {
+      F: __dxlog_file16,
       L: 32,
       S: this,
       C: (f, a) => f(...a)
     });
     this._fileHandle = await import_lock_file.LockFile.acquire(this._lockPath);
     await ((_a = this._onAcquire) == null ? void 0 : _a.call(this));
-    (0, import_log13.log)("acquired lock", void 0, {
-      F: __dxlog_file15,
+    (0, import_log14.log)("acquired lock", void 0, {
+      F: __dxlog_file16,
       L: 37,
       S: this,
       C: (f, a) => f(...a)
@@ -3966,8 +4198,8 @@ var Lock = class {
   async release() {
     var _a;
     await ((_a = this._onRelease) == null ? void 0 : _a.call(this));
-    (0, import_invariant12.invariant)(this._fileHandle, "Lock is not acquired", {
-      F: __dxlog_file15,
+    (0, import_invariant13.invariant)(this._fileHandle, "Lock is not acquired", {
+      F: __dxlog_file16,
       L: 42,
       S: this,
       A: [
@@ -3978,30 +4210,31 @@ var Lock = class {
     await import_lock_file.LockFile.release(this._fileHandle);
   }
 };
-_ts_decorate3([
-  import_log13.logInfo
+_ts_decorate6([
+  import_log14.logInfo
 ], Lock.prototype, "lockKey", null);
 var isLocked = (lockPath) => import_lock_file.LockFile.isLocked(lockPath);
 
 // packages/sdk/client-services/src/packlets/logging/logging-service.ts
 var import_async16 = require("@dxos/async");
-var import_codec_protobuf12 = require("@dxos/codec-protobuf");
-var import_log14 = require("@dxos/log");
-var import_services11 = require("@dxos/protocols/proto/dxos/client/services");
+var import_codec_protobuf13 = require("@dxos/codec-protobuf");
+var import_log15 = require("@dxos/log");
+var import_services12 = require("@dxos/protocols/proto/dxos/client/services");
 var import_util7 = require("@dxos/util");
 var LoggingServiceImpl = class {
   constructor() {
     this._logs = new import_async16.Event();
+    this._started = new Date();
     this._logProcessor = (_config, entry2) => {
       this._logs.emit(entry2);
     };
   }
   async open() {
-    import_log14.log.runtimeConfig.processors.push(this._logProcessor);
+    import_log15.log.runtimeConfig.processors.push(this._logProcessor);
   }
   async close() {
-    const index = import_log14.log.runtimeConfig.processors.findIndex((processor) => processor === this._logProcessor);
-    import_log14.log.runtimeConfig.processors.splice(index, 1);
+    const index = import_log15.log.runtimeConfig.processors.findIndex((processor) => processor === this._logProcessor);
+    import_log15.log.runtimeConfig.processors.splice(index, 1);
   }
   async controlMetrics({ reset, record }) {
     if (reset) {
@@ -4016,35 +4249,41 @@ var LoggingServiceImpl = class {
       recording: import_util7.tracer.recording
     };
   }
-  queryMetrics({ interval }) {
-    const createNumericalValues = (key) => {
+  /**
+  * @deprecated (Move to diagnostics).
+  */
+  queryMetrics({ interval = 5e3 }) {
+    const getNumericalValues = (key) => {
       var _a;
-      const consume = (_a = import_util7.tracer.get(key)) != null ? _a : [];
+      const events = (_a = import_util7.tracer.get(key)) != null ? _a : [];
       return {
         key,
-        stats: (0, import_util7.numericalValues)(consume, "duration")
+        stats: (0, import_util7.numericalValues)(events, "duration")
       };
     };
-    return new import_codec_protobuf12.Stream(({ next }) => {
+    return new import_codec_protobuf13.Stream(({ next }) => {
       const update = () => {
         const metrics = {
           timestamp: new Date(),
           values: [
-            createNumericalValues("dxos.echo.pipeline.control"),
-            createNumericalValues("dxos.echo.pipeline.data")
-          ]
+            getNumericalValues("dxos.echo.pipeline.control"),
+            getNumericalValues("dxos.echo.pipeline.data")
+          ].filter(Boolean)
         };
-        next(metrics);
+        next({
+          timestamp: new Date(),
+          metrics
+        });
       };
       update();
-      const i = setInterval(update, interval);
+      const i = setInterval(update, Math.max(interval, 1e3));
       return () => {
         clearInterval(i);
       };
     });
   }
   queryLogs(request) {
-    return new import_codec_protobuf12.Stream(({ ctx, next }) => {
+    return new import_codec_protobuf13.Stream(({ ctx, next }) => {
       const handler = (entry2) => {
         var _a, _b, _c, _d, _e;
         if (LOG_PROCESSING > 0) {
@@ -4058,7 +4297,7 @@ var LoggingServiceImpl = class {
         }
         const record = {
           ...entry2,
-          context: (0, import_util7.jsonify)((0, import_log14.getContextFromEntry)(entry2)),
+          context: (0, import_util7.jsonify)((0, import_log15.getContextFromEntry)(entry2)),
           timestamp: new Date(),
           meta: {
             // TODO(dmaretskyi): Fix proto.
@@ -4079,17 +4318,17 @@ var LoggingServiceImpl = class {
 };
 var matchFilter = (filter, level, path, options) => {
   switch (options) {
-    case import_services11.QueryLogsRequest.MatchingOptions.INCLUSIVE:
+    case import_services12.QueryLogsRequest.MatchingOptions.INCLUSIVE:
       return level >= filter.level && (!filter.pattern || path.includes(filter.pattern));
-    case import_services11.QueryLogsRequest.MatchingOptions.EXPLICIT:
+    case import_services12.QueryLogsRequest.MatchingOptions.EXPLICIT:
       return level === filter.level && (!filter.pattern || path.includes(filter.pattern));
   }
 };
 var shouldLog = (entry2, request) => {
   var _a;
-  const options = (_a = request.options) != null ? _a : import_services11.QueryLogsRequest.MatchingOptions.INCLUSIVE;
+  const options = (_a = request.options) != null ? _a : import_services12.QueryLogsRequest.MatchingOptions.INCLUSIVE;
   if (request.filters === void 0) {
-    return options === import_services11.QueryLogsRequest.MatchingOptions.INCLUSIVE;
+    return options === import_services12.QueryLogsRequest.MatchingOptions.INCLUSIVE;
   } else {
     return request.filters.some((filter) => {
       var _a2, _b;
@@ -4100,14 +4339,14 @@ var shouldLog = (entry2, request) => {
 var LOG_PROCESSING = 0;
 
 // packages/sdk/client-services/src/packlets/network/network-service.ts
-var import_codec_protobuf13 = require("@dxos/codec-protobuf");
+var import_codec_protobuf14 = require("@dxos/codec-protobuf");
 var NetworkServiceImpl = class {
   constructor(networkManager, signalManager) {
     this.networkManager = networkManager;
     this.signalManager = signalManager;
   }
   queryStatus() {
-    return new import_codec_protobuf13.Stream(({ next }) => {
+    return new import_codec_protobuf14.Stream(({ next }) => {
       const update = () => {
         next({
           swarm: this.networkManager.connectionState,
@@ -4181,12 +4420,15 @@ var toStorageType = (type) => {
 };
 
 // packages/sdk/client-services/src/packlets/system/system-service.ts
-var import_codec_protobuf14 = require("@dxos/codec-protobuf");
+var import_codec_protobuf15 = require("@dxos/codec-protobuf");
+var import_services13 = require("@dxos/protocols/proto/dxos/client/services");
+var import_util9 = require("@dxos/util");
 var SystemServiceImpl = class {
-  constructor({ config, statusUpdate, onUpdateStatus, getCurrentStatus, onReset }) {
+  constructor({ config, statusUpdate, getDiagnostics, onUpdateStatus, getCurrentStatus, onReset }) {
     this._config = config;
     this._statusUpdate = statusUpdate;
     this._getCurrentStatus = getCurrentStatus;
+    this._getDiagnostics = getDiagnostics;
     this._onUpdateStatus = onUpdateStatus;
     this._onReset = onReset;
   }
@@ -4194,12 +4436,25 @@ var SystemServiceImpl = class {
     var _a, _b;
     return (_b = (_a = this._config) == null ? void 0 : _a.values) != null ? _b : {};
   }
+  /**
+  * NOTE: Since this is serialized as a JSON object, we allow the option to serialize keys.
+  */
+  async getDiagnostics({ keys } = {}) {
+    const diagnostics = await this._getDiagnostics();
+    return {
+      timestamp: new Date(),
+      diagnostics: JSON.parse(JSON.stringify(diagnostics, (0, import_util9.jsonKeyReplacer)({
+        truncate: keys === import_services13.GetDiagnosticsRequest.KEY_OPTION.TRUNCATE,
+        humanize: keys === import_services13.GetDiagnosticsRequest.KEY_OPTION.HUMANIZE
+      })))
+    };
+  }
   async updateStatus({ status }) {
     await this._onUpdateStatus(status);
   }
   // TODO(burdon): Standardize interval option in stream request?
   queryStatus({ interval = 3e3 } = {}) {
-    return new import_codec_protobuf14.Stream(({ next }) => {
+    return new import_codec_protobuf15.Stream(({ next }) => {
       const update = () => {
         next({
           status: this._getCurrentStatus()
@@ -4244,7 +4499,7 @@ var ServiceRegistry = class {
 };
 
 // packages/sdk/client-services/src/packlets/services/service-host.ts
-function _ts_decorate4(decorators, target, key, desc) {
+function _ts_decorate7(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
     r = Reflect.decorate(decorators, target, key, desc);
@@ -4254,23 +4509,22 @@ function _ts_decorate4(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file16 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/services/service-host.ts";
+var __dxlog_file17 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/services/service-host.ts";
 var createDefaultModelFactory = () => {
-  return new import_model_factory.ModelFactory().registerModel(import_document_model.DocumentModel).registerModel(import_text_model.TextModel);
+  return new import_model_factory.ModelFactory().registerModel(import_document_model2.DocumentModel).registerModel(import_text_model.TextModel);
 };
-var ClientServicesHost = class {
+var ClientServicesHost = class ClientServicesHost2 {
   constructor({
     config,
     modelFactory = createDefaultModelFactory(),
-    // TODO(burdon): Create ApolloLink abstraction (see Client).
     transportFactory,
     signalManager,
-    connectionLog,
     storage,
     // TODO(wittjosiah): Turn this on by default.
     lockKey,
     callbacks
   } = {}) {
+    this._tracingService = import_tracing4.TRACE_PROCESSOR.createTraceSender();
     this._statusUpdate = new import_async17.Event();
     this._opening = false;
     this._open = false;
@@ -4289,7 +4543,7 @@ var ClientServicesHost = class {
         lockKey,
         onAcquire: () => {
           if (!this._opening) {
-            void this.open();
+            void this.open(new import_context10.Context());
           }
         },
         onRelease: () => this.close()
@@ -4298,12 +4552,15 @@ var ClientServicesHost = class {
     this._systemService = new SystemServiceImpl({
       config: this._config,
       statusUpdate: this._statusUpdate,
-      getCurrentStatus: () => this.isOpen ? import_services12.SystemStatus.ACTIVE : import_services12.SystemStatus.INACTIVE,
+      getCurrentStatus: () => this.isOpen ? import_services14.SystemStatus.ACTIVE : import_services14.SystemStatus.INACTIVE,
+      getDiagnostics: () => {
+        return createDiagnostics(this._serviceRegistry.services, this._serviceContext, this._config);
+      },
       onUpdateStatus: async (status) => {
         var _a, _b;
-        if (!this.isOpen && status === import_services12.SystemStatus.ACTIVE) {
+        if (!this.isOpen && status === import_services14.SystemStatus.ACTIVE) {
           await ((_a = this._resourceLock) == null ? void 0 : _a.acquire());
-        } else if (this.isOpen && status === import_services12.SystemStatus.INACTIVE) {
+        } else if (this.isOpen && status === import_services14.SystemStatus.INACTIVE) {
           await ((_b = this._resourceLock) == null ? void 0 : _b.release());
         }
       },
@@ -4313,12 +4570,19 @@ var ClientServicesHost = class {
     });
     this._loggingService = new LoggingServiceImpl();
     this._serviceRegistry = new ServiceRegistry(import_client_protocol5.clientServiceBundle, {
-      SystemService: this._systemService
+      SystemService: this._systemService,
+      TracingService: this._tracingService
     });
   }
   get isOpen() {
     return this._open;
   }
+  get config() {
+    return this._config;
+  }
+  get context() {
+    return this._serviceContext;
+  }
   get serviceRegistry() {
     return this._serviceRegistry;
   }
@@ -4335,19 +4599,25 @@ var ClientServicesHost = class {
   */
   initialize({ config, ...options }) {
     var _a, _b, _c;
-    (0, import_invariant13.invariant)(!this._open, "service host is open", {
-      F: __dxlog_file16,
-      L: 167,
+    (0, import_invariant14.invariant)(!this._open, "service host is open", {
+      F: __dxlog_file17,
+      L: 181,
       S: this,
       A: [
         "!this._open",
         "'service host is open'"
       ]
     });
+    import_log16.log.info("initializing...", void 0, {
+      F: __dxlog_file17,
+      L: 182,
+      S: this,
+      C: (f, a) => f(...a)
+    });
     if (config) {
-      (0, import_invariant13.invariant)(!this._config, "config already set", {
-        F: __dxlog_file16,
-        L: 170,
+      (0, import_invariant14.invariant)(!this._config, "config already set", {
+        F: __dxlog_file17,
+        L: 185,
         S: this,
         A: [
           "!this._config",
@@ -4363,9 +4633,9 @@ var ClientServicesHost = class {
       iceServers: (_a = this._config) == null ? void 0 : _a.get("runtime.services.ice")
     }), signalManager = new import_messaging.WebsocketSignalManager((_c = (_b = this._config) == null ? void 0 : _b.get("runtime.services.signaling")) != null ? _c : []) } = options;
     this._signalManager = signalManager;
-    (0, import_invariant13.invariant)(!this._networkManager, "network manager already set", {
-      F: __dxlog_file16,
-      L: 187,
+    (0, import_invariant14.invariant)(!this._networkManager, "network manager already set", {
+      F: __dxlog_file17,
+      L: 201,
       S: this,
       A: [
         "!this._networkManager",
@@ -4377,51 +4647,57 @@ var ClientServicesHost = class {
       transportFactory,
       signalManager
     });
+    import_log16.log.info("initialized", void 0, {
+      F: __dxlog_file17,
+      L: 208,
+      S: this,
+      C: (f, a) => f(...a)
+    });
   }
-  async open() {
+  async open(ctx) {
     var _a, _b, _c;
     if (this._open) {
       return;
     }
     const traceId = import_keys11.PublicKey.random().toHex();
-    import_log15.log.trace("dxos.sdk.client-services-host.open", import_protocols9.trace.begin({
+    import_log16.log.trace("dxos.client-services.host.open", import_protocols10.trace.begin({
       id: traceId
     }), {
-      F: __dxlog_file16,
-      L: 202,
+      F: __dxlog_file17,
+      L: 219,
       S: this,
       C: (f, a) => f(...a)
     });
-    (0, import_invariant13.invariant)(this._config, "config not set", {
-      F: __dxlog_file16,
-      L: 204,
+    (0, import_invariant14.invariant)(this._config, "config not set", {
+      F: __dxlog_file17,
+      L: 221,
       S: this,
       A: [
         "this._config",
         "'config not set'"
       ]
     });
-    (0, import_invariant13.invariant)(this._storage, "storage not set", {
-      F: __dxlog_file16,
-      L: 205,
+    (0, import_invariant14.invariant)(this._storage, "storage not set", {
+      F: __dxlog_file17,
+      L: 222,
       S: this,
       A: [
         "this._storage",
         "'storage not set'"
       ]
     });
-    (0, import_invariant13.invariant)(this._signalManager, "signal manager not set", {
-      F: __dxlog_file16,
-      L: 206,
+    (0, import_invariant14.invariant)(this._signalManager, "signal manager not set", {
+      F: __dxlog_file17,
+      L: 223,
       S: this,
       A: [
         "this._signalManager",
         "'signal manager not set'"
       ]
     });
-    (0, import_invariant13.invariant)(this._networkManager, "network manager not set", {
-      F: __dxlog_file16,
-      L: 207,
+    (0, import_invariant14.invariant)(this._networkManager, "network manager not set", {
+      F: __dxlog_file17,
+      L: 224,
       S: this,
       A: [
         "this._networkManager",
@@ -4429,11 +4705,11 @@ var ClientServicesHost = class {
       ]
     });
     this._opening = true;
-    (0, import_log15.log)("opening...", {
+    import_log16.log.info("opening...", {
       lockKey: (_a = this._resourceLock) == null ? void 0 : _a.lockKey
     }, {
-      F: __dxlog_file16,
-      L: 210,
+      F: __dxlog_file17,
+      L: 227,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4452,6 +4728,7 @@ var ClientServicesHost = class {
       DataService: new import_echo_pipeline4.DataServiceImpl(this._serviceContext.dataServiceSubscriptions),
       NetworkService: new NetworkServiceImpl(this._serviceContext.networkManager, this._serviceContext.signalManager),
       LoggingService: this._loggingService,
+      TracingService: this._tracingService,
       // TODO(burdon): Move to new protobuf definitions.
       DevtoolsHost: new DevtoolsServiceImpl({
         events: new DevtoolsHostEvents(),
@@ -4459,24 +4736,24 @@ var ClientServicesHost = class {
         context: this._serviceContext
       })
     });
-    await this._serviceContext.open();
+    await this._serviceContext.open(ctx);
     this._opening = false;
     this._open = true;
     this._statusUpdate.emit();
     const deviceKey = (_c = this._serviceContext.identityManager.identity) == null ? void 0 : _c.deviceKey;
-    (0, import_log15.log)("opened", {
+    import_log16.log.info("opened", {
       deviceKey
     }, {
-      F: __dxlog_file16,
-      L: 265,
+      F: __dxlog_file17,
+      L: 280,
       S: this,
       C: (f, a) => f(...a)
     });
-    import_log15.log.trace("dxos.sdk.client-services-host.open", import_protocols9.trace.end({
+    import_log16.log.trace("dxos.client-services.host.open", import_protocols10.trace.end({
       id: traceId
     }), {
-      F: __dxlog_file16,
-      L: 266,
+      F: __dxlog_file17,
+      L: 281,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4487,11 +4764,11 @@ var ClientServicesHost = class {
       return;
     }
     const deviceKey = (_a = this._serviceContext.identityManager.identity) == null ? void 0 : _a.deviceKey;
-    (0, import_log15.log)("closing...", {
+    import_log16.log.info("closing...", {
       deviceKey
     }, {
-      F: __dxlog_file16,
-      L: 276,
+      F: __dxlog_file17,
+      L: 292,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4502,11 +4779,11 @@ var ClientServicesHost = class {
     await this._serviceContext.close();
     this._open = false;
     this._statusUpdate.emit();
-    (0, import_log15.log)("closed", {
+    import_log16.log.info("closed", {
       deviceKey
     }, {
-      F: __dxlog_file16,
-      L: 282,
+      F: __dxlog_file17,
+      L: 298,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4514,61 +4791,73 @@ var ClientServicesHost = class {
   async reset() {
     var _a, _b, _c;
     const traceId = import_keys11.PublicKey.random().toHex();
-    import_log15.log.trace("dxos.sdk.client-services-host.reset", import_protocols9.trace.begin({
+    import_log16.log.trace("dxos.sdk.client-services-host.reset", import_protocols10.trace.begin({
       id: traceId
     }), {
-      F: __dxlog_file16,
-      L: 287,
+      F: __dxlog_file17,
+      L: 303,
       S: this,
       C: (f, a) => f(...a)
     });
-    (0, import_log15.log)("resetting...", void 0, {
-      F: __dxlog_file16,
-      L: 289,
+    (0, import_log16.log)("resetting...", void 0, {
+      F: __dxlog_file17,
+      L: 305,
       S: this,
       C: (f, a) => f(...a)
     });
     await ((_a = this._serviceContext) == null ? void 0 : _a.close());
     await this._storage.reset();
-    (0, import_log15.log)("reset", void 0, {
-      F: __dxlog_file16,
-      L: 292,
+    (0, import_log16.log)("reset", void 0, {
+      F: __dxlog_file17,
+      L: 308,
       S: this,
       C: (f, a) => f(...a)
     });
-    import_log15.log.trace("dxos.sdk.client-services-host.reset", import_protocols9.trace.end({
+    import_log16.log.trace("dxos.sdk.client-services-host.reset", import_protocols10.trace.end({
       id: traceId
     }), {
-      F: __dxlog_file16,
-      L: 293,
+      F: __dxlog_file17,
+      L: 309,
       S: this,
       C: (f, a) => f(...a)
     });
     await ((_c = (_b = this._callbacks) == null ? void 0 : _b.onReset) == null ? void 0 : _c.call(_b));
   }
 };
-_ts_decorate4([
-  import_async17.synchronized
+_ts_decorate7([
+  import_tracing4.trace.info()
+], ClientServicesHost.prototype, "_opening", void 0);
+_ts_decorate7([
+  import_tracing4.trace.info()
+], ClientServicesHost.prototype, "_open", void 0);
+_ts_decorate7([
+  import_async17.synchronized,
+  import_tracing4.trace.span()
 ], ClientServicesHost.prototype, "open", null);
-_ts_decorate4([
-  import_async17.synchronized
+_ts_decorate7([
+  import_async17.synchronized,
+  import_tracing4.trace.span()
 ], ClientServicesHost.prototype, "close", null);
+ClientServicesHost = _ts_decorate7([
+  import_tracing4.trace.resource()
+], ClientServicesHost);
 
 // packages/sdk/client-services/src/packlets/vault/iframe-host-runtime.ts
 var import_async19 = require("@dxos/async");
 var import_client_protocol7 = require("@dxos/client-protocol");
-var import_log16 = require("@dxos/log");
+var import_context11 = require("@dxos/context");
+var import_log17 = require("@dxos/log");
 var import_messaging2 = require("@dxos/messaging");
 var import_network_manager3 = require("@dxos/network-manager");
-var import_util9 = require("@dxos/util");
+var import_util10 = require("@dxos/util");
 
 // packages/sdk/client-services/src/packlets/vault/shell-runtime.ts
 var import_async18 = require("@dxos/async");
 var import_client_protocol6 = require("@dxos/client-protocol");
-var import_invariant14 = require("@dxos/invariant");
+var import_invariant15 = require("@dxos/invariant");
 var import_iframe = require("@dxos/protocols/proto/dxos/iframe");
 var import_rpc2 = require("@dxos/rpc");
-var __dxlog_file17 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/vault/shell-runtime.ts";
+var __dxlog_file18 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/vault/shell-runtime.ts";
 var ShellRuntimeImpl = class {
   constructor(_port) {
     this._port = _port;
@@ -4594,8 +4883,8 @@ var ShellRuntimeImpl = class {
     });
   }
   async setAppContext(context) {
-    (0, import_invariant14.invariant)(this._appRpc, "runtime not open", {
-      F: __dxlog_file17,
+    (0, import_invariant15.invariant)(this._appRpc, "runtime not open", {
+      F: __dxlog_file18,
       L: 44,
       S: this,
       A: [
@@ -4631,7 +4920,7 @@ var ShellRuntimeImpl = class {
 };
 
 // packages/sdk/client-services/src/packlets/vault/iframe-host-runtime.ts
-function _ts_decorate5(decorators, target, key, desc) {
+function _ts_decorate8(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
     r = Reflect.decorate(decorators, target, key, desc);
@@ -4641,7 +4930,7 @@ function _ts_decorate5(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file18 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/vault/iframe-host-runtime.ts";
+var __dxlog_file19 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/vault/iframe-host-runtime.ts";
 var LOCK_KEY = "DXOS_RESOURCE_LOCK";
 var IFrameHostRuntime = class {
   constructor({ config, origin, appPort, shellPort }) {
@@ -4662,14 +4951,14 @@ var IFrameHostRuntime = class {
   }
   async start() {
     var _a;
-    (0, import_log16.log)("starting...", void 0, {
-      F: __dxlog_file18,
-      L: 70,
+    (0, import_log17.log)("starting...", void 0, {
+      F: __dxlog_file19,
+      L: 71,
       S: this,
       C: (f, a) => f(...a)
     });
     try {
-      this._config = await (0, import_util9.getAsyncValue)(this._configProvider);
+      this._config = await (0, import_util10.getAsyncValue)(this._configProvider);
       this._transportFactory = (0, import_network_manager3.createWebRTCTransportFactory)({
         iceServers: this._config.get("runtime.services.ice")
       });
@@ -4706,22 +4995,22 @@ var IFrameHostRuntime = class {
         ...middleware
       });
       await Promise.all([
-        this._clientServices.open(),
+        this._clientServices.open(new import_context11.Context()),
         this._clientRpc.open(),
         (_a = this._shellRuntime) == null ? void 0 : _a.open()
       ]);
       this._ready.wake(void 0);
-      (0, import_log16.log)("started", void 0, {
-        F: __dxlog_file18,
-        L: 113,
+      (0, import_log17.log)("started", void 0, {
+        F: __dxlog_file19,
+        L: 114,
         S: this,
         C: (f, a) => f(...a)
       });
     } catch (err) {
       this._ready.wake(err);
-      import_log16.log.catch(err, void 0, {
-        F: __dxlog_file18,
-        L: 116,
+      import_log17.log.catch(err, void 0, {
+        F: __dxlog_file19,
+        L: 117,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -4729,36 +5018,36 @@ var IFrameHostRuntime = class {
   }
   async stop() {
     var _a;
-    (0, import_log16.log)("stopping...", void 0, {
-      F: __dxlog_file18,
-      L: 121,
+    (0, import_log17.log)("stopping...", void 0, {
+      F: __dxlog_file19,
+      L: 122,
       S: this,
       C: (f, a) => f(...a)
     });
     await this._clientRpc.close();
     await this._clientServices.close();
     await ((_a = this._shellRuntime) == null ? void 0 : _a.close());
-    (0, import_log16.log)("stopped", void 0, {
-      F: __dxlog_file18,
-      L: 125,
+    (0, import_log17.log)("stopped", void 0, {
+      F: __dxlog_file19,
+      L: 126,
       S: this,
       C: (f, a) => f(...a)
     });
   }
 };
-_ts_decorate5([
-  import_log16.logInfo
+_ts_decorate8([
+  import_log17.logInfo
 ], IFrameHostRuntime.prototype, "origin", void 0);
 
 // packages/sdk/client-services/src/packlets/vault/iframe-proxy-runtime.ts
 var import_async20 = require("@dxos/async");
 var import_client_protocol8 = require("@dxos/client-protocol");
 var import_errors6 = require("@dxos/errors");
-var import_log17 = require("@dxos/log");
+var import_log18 = require("@dxos/log");
 var import_network_manager4 = require("@dxos/network-manager");
 var import_rpc3 = require("@dxos/rpc");
-var import_util10 = require("@dxos/util");
-var __dxlog_file19 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/vault/iframe-proxy-runtime.ts";
+var import_util11 = require("@dxos/util");
+var __dxlog_file20 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/vault/iframe-proxy-runtime.ts";
 var IFrameProxyRuntime = class {
   constructor({ config, systemPort, shellPort }) {
     this._id = String(Math.floor(Math.random() * 1e6));
@@ -4775,7 +5064,7 @@ var IFrameProxyRuntime = class {
   }
   async open(origin) {
     var _a;
-    this._config = await (0, import_util10.getAsyncValue)(this._configProvider);
+    this._config = await (0, import_util11.getAsyncValue)(this._configProvider);
     this._transportService = new import_network_manager4.WebRTCTransportService({
       iceServers: this._config.get("runtime.services.ice")
     });
@@ -4806,8 +5095,8 @@ var IFrameProxyRuntime = class {
         lockKey
       });
     } catch (err) {
-      import_log17.log.catch(err, void 0, {
-        F: __dxlog_file19,
+      import_log18.log.catch(err, void 0, {
+        F: __dxlog_file20,
         L: 85,
         S: this,
         C: (f, a) => f(...a)
@@ -4830,18 +5119,19 @@ var IFrameProxyRuntime = class {
 
 // packages/sdk/client-services/src/packlets/vault/worker-runtime.ts
 var import_async22 = require("@dxos/async");
-var import_log19 = require("@dxos/log");
+var import_context12 = require("@dxos/context");
+var import_log20 = require("@dxos/log");
 var import_messaging3 = require("@dxos/messaging");
 var import_network_manager5 = require("@dxos/network-manager");
 
 // packages/sdk/client-services/src/packlets/vault/worker-session.ts
 var import_async21 = require("@dxos/async");
 var import_client_protocol9 = require("@dxos/client-protocol");
-var import_invariant15 = require("@dxos/invariant");
-var import_log18 = require("@dxos/log");
+var import_invariant16 = require("@dxos/invariant");
+var import_log19 = require("@dxos/log");
 var import_rpc4 = require("@dxos/rpc");
-var import_util11 = require("@dxos/util");
-function _ts_decorate6(decorators, target, key, desc) {
+var import_util12 = require("@dxos/util");
+function _ts_decorate9(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
     r = Reflect.decorate(decorators, target, key, desc);
@@ -4851,13 +5141,13 @@ function _ts_decorate6(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file20 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/vault/worker-session.ts";
+var __dxlog_file21 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/vault/worker-session.ts";
 var WorkerSession = class {
   constructor({ serviceHost, systemPort, appPort, shellPort, readySignal }) {
     this._startTrigger = new import_async21.Trigger();
-    this.onClose = new import_util11.Callback();
-    (0, import_invariant15.invariant)(serviceHost, void 0, {
-      F: __dxlog_file20,
+    this.onClose = new import_util12.Callback();
+    (0, import_invariant16.invariant)(serviceHost, void 0, {
+      F: __dxlog_file21,
       L: 49,
       S: this,
       A: [
@@ -4911,9 +5201,9 @@ var WorkerSession = class {
               try {
                 await this.close();
               } catch (err) {
-                import_log18.log.catch(err, void 0, {
-                  F: __dxlog_file20,
-                  L: 98,
+                import_log19.log.catch(err, void 0, {
+                  F: __dxlog_file21,
+                  L: 99,
                   S: this,
                   C: (f, a) => f(...a)
                 });
@@ -4928,9 +5218,9 @@ var WorkerSession = class {
     this.bridgeService = this._iframeRpc.rpc.BridgeService;
   }
   async open() {
-    import_log18.log.info("opening...", void 0, {
-      F: __dxlog_file20,
-      L: 112,
+    import_log19.log.info("opening...", void 0, {
+      F: __dxlog_file21,
+      L: 113,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4945,26 +5235,26 @@ var WorkerSession = class {
     if (this.lockKey) {
       void this._afterLockReleases(this.lockKey, () => this.close());
     }
-    import_log18.log.info("opened", void 0, {
-      F: __dxlog_file20,
-      L: 119,
+    import_log19.log.info("opened", void 0, {
+      F: __dxlog_file21,
+      L: 124,
       S: this,
       C: (f, a) => f(...a)
     });
   }
   async close() {
-    import_log18.log.info("closing...", void 0, {
-      F: __dxlog_file20,
-      L: 123,
+    import_log19.log.info("closing...", void 0, {
+      F: __dxlog_file21,
+      L: 128,
       S: this,
       C: (f, a) => f(...a)
     });
     try {
       await this.onClose.callIfSet();
     } catch (err) {
-      import_log18.log.catch(err, void 0, {
-        F: __dxlog_file20,
-        L: 127,
+      import_log19.log.catch(err, void 0, {
+        F: __dxlog_file21,
+        L: 132,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -4973,9 +5263,9 @@ var WorkerSession = class {
       this._clientRpc.close(),
       this._iframeRpc.close()
     ]);
-    import_log18.log.info("closed", void 0, {
-      F: __dxlog_file20,
-      L: 131,
+    import_log19.log.info("closed", void 0, {
+      F: __dxlog_file21,
+      L: 136,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4984,9 +5274,9 @@ var WorkerSession = class {
     try {
       await (0, import_async21.asyncTimeout)(this._shellClientRpc.open(), 1e3);
     } catch (e) {
-      import_log18.log.info("No shell connected.", void 0, {
-        F: __dxlog_file20,
-        L: 138,
+      import_log19.log.info("No shell connected.", void 0, {
+        F: __dxlog_file21,
+        L: 143,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -4997,15 +5287,15 @@ var WorkerSession = class {
     }).then(callback);
   }
 };
-_ts_decorate6([
-  import_log18.logInfo
+_ts_decorate9([
+  import_log19.logInfo
 ], WorkerSession.prototype, "origin", void 0);
-_ts_decorate6([
-  import_log18.logInfo
+_ts_decorate9([
+  import_log19.logInfo
 ], WorkerSession.prototype, "lockKey", void 0);
 
 // packages/sdk/client-services/src/packlets/vault/worker-runtime.ts
-var __dxlog_file21 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/vault/worker-runtime.ts";
+var __dxlog_file22 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/vault/worker-runtime.ts";
 var WorkerRuntime = class {
   // prettier-ignore
   constructor(_configProvider) {
@@ -5025,9 +5315,9 @@ var WorkerRuntime = class {
     return this._clientServices;
   }
   async start() {
-    (0, import_log19.log)("starting...", void 0, {
-      F: __dxlog_file21,
-      L: 48,
+    (0, import_log20.log)("starting...", void 0, {
+      F: __dxlog_file22,
+      L: 49,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -5039,19 +5329,19 @@ var WorkerRuntime = class {
         signalManager: signals ? new import_messaging3.WebsocketSignalManager(signals) : new import_messaging3.MemorySignalManager(new import_messaging3.MemorySignalManagerContext()),
         transportFactory: this._transportFactory
       });
-      await this._clientServices.open();
+      await this._clientServices.open(new import_context12.Context());
       this._ready.wake(void 0);
-      (0, import_log19.log)("started", void 0, {
-        F: __dxlog_file21,
-        L: 62,
+      (0, import_log20.log)("started", void 0, {
+        F: __dxlog_file22,
+        L: 63,
         S: this,
         C: (f, a) => f(...a)
       });
     } catch (err) {
       this._ready.wake(err);
-      import_log19.log.catch(err, void 0, {
-        F: __dxlog_file21,
-        L: 65,
+      import_log20.log.catch(err, void 0, {
+        F: __dxlog_file22,
+        L: 66,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -5083,9 +5373,9 @@ var WorkerRuntime = class {
   * Selects one of the existing session fro WebRTC networking.
   */
   _reconnectWebrtc() {
-    (0, import_log19.log)("reconnecting webrtc...", void 0, {
-      F: __dxlog_file21,
-      L: 102,
+    (0, import_log20.log)("reconnecting webrtc...", void 0, {
+      F: __dxlog_file22,
+      L: 103,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -5132,6 +5422,7 @@ var WorkerRuntime = class {
   WorkerSession,
   createAuthProvider,
   createDefaultModelFactory,
+  createDiagnostics,
   createStorageObjects,
   getNetworkPeers,
   isLocked,