@dxos/client-services 0.3.2-main.648180e → 0.3.2-main.988f99c

package/dist/lib/node/index.cjs

@@ -519,9 +519,11 @@ var import_credentials2 = require("@dxos/credentials");
 var import_debug = require("@dxos/debug");
 var import_feed_store2 = require("@dxos/feed-store");
 var import_invariant = require("@dxos/invariant");
+var import_keys4 = require("@dxos/keys");
 var import_log2 = require("@dxos/log");
 var import_credentials3 = require("@dxos/protocols/proto/dxos/halo/credentials");
 var import_tracing = require("@dxos/tracing");
+var import_util2 = require("@dxos/util");
 function _ts_decorate(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
@@ -540,6 +542,14 @@ var Identity = class Identity2 {
     this._signer = signer;
     this.identityKey = identityKey;
     this.deviceKey = deviceKey;
+    import_log2.log.trace("dxos.halo.device", {
+      deviceKey
+    }, {
+      F: __dxlog_file2,
+      L: 60,
+      S: this,
+      C: (f, a) => f(...a)
+    });
     this._deviceStateMachine = new import_credentials2.DeviceStateMachine({
       identityKey: this.identityKey,
       deviceKey: this.deviceKey,
@@ -550,7 +560,7 @@ var Identity = class Identity2 {
       onUpdate: () => this.stateUpdate.emit()
     });
     this.authVerifier = new TrustedKeySetAuthVerifier({
-      trustedKeysProvider: () => this.authorizedDeviceKeys,
+      trustedKeysProvider: () => new import_util2.ComplexSet(import_keys4.PublicKey.hash, this.authorizedDeviceKeys.keys()),
       update: this.stateUpdate,
       authTimeout: import_client_protocol.AUTH_TIMEOUT
     });
@@ -608,7 +618,7 @@ var Identity = class Identity2 {
   getIdentityCredentialSigner() {
     (0, import_invariant.invariant)(this._deviceStateMachine.deviceCredentialChain, "Device credential chain is not ready.", {
       F: __dxlog_file2,
-      L: 139,
+      L: 141,
       S: this,
       A: [
         "this._deviceStateMachine.deviceCredentialChain",
@@ -632,7 +642,7 @@ var Identity = class Identity2 {
       dataFeedKey
     }, {
       F: __dxlog_file2,
-      L: 155,
+      L: 157,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -688,13 +698,13 @@ var import_async6 = require("@dxos/async");
 var import_context3 = require("@dxos/context");
 var import_credentials4 = require("@dxos/credentials");
 var import_invariant2 = require("@dxos/invariant");
-var import_keys4 = require("@dxos/keys");
+var import_keys5 = require("@dxos/keys");
 var import_log3 = require("@dxos/log");
 var import_protocols2 = require("@dxos/protocols");
 var import_credentials5 = require("@dxos/protocols/proto/dxos/halo/credentials");
 var import_timeframe = require("@dxos/timeframe");
 var import_tracing2 = require("@dxos/tracing");
-var import_util2 = require("@dxos/util");
+var import_util3 = require("@dxos/util");
 function _ts_decorate2(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
@@ -720,7 +730,7 @@ var IdentityManager = class IdentityManager2 {
     return this._identity;
   }
   async open(ctx) {
-    const traceId = import_keys4.PublicKey.random().toHex();
+    const traceId = import_keys5.PublicKey.random().toHex();
     import_log3.log.trace("dxos.halo.identity-manager.open", import_protocols2.trace.begin({
       id: traceId
     }), {
@@ -950,10 +960,51 @@ var IdentityManager = class IdentityManager2 {
     this.stateUpdate.emit();
     return profile;
   }
+  async updateDevice({ deviceKey, profile }) {
+    (0, import_invariant2.invariant)(this._identity, "Identity not initialized.", {
+      F: __dxlog_file3,
+      L: 216,
+      S: this,
+      A: [
+        "this._identity",
+        "'Identity not initialized.'"
+      ]
+    });
+    (0, import_invariant2.invariant)(this._identity.authorizedDeviceKeys.has(deviceKey), "Device not authorized.", {
+      F: __dxlog_file3,
+      L: 218,
+      S: this,
+      A: [
+        "this._identity.authorizedDeviceKeys.has(deviceKey)",
+        "'Device not authorized.'"
+      ]
+    });
+    const credential = await this._identity.getIdentityCredentialSigner().createCredential({
+      subject: this._identity.identityKey,
+      assertion: {
+        "@type": "dxos.halo.credentials.DeviceProfile",
+        deviceKey,
+        profile
+      }
+    });
+    const receipt = await this._identity.controlPipeline.writer.write({
+      credential: {
+        credential
+      }
+    });
+    await this._identity.controlPipeline.state.waitUntilTimeframe(new import_timeframe.Timeframe([
+      [
+        receipt.feedKey,
+        receipt.seq
+      ]
+    ]));
+    this.stateUpdate.emit();
+    return profile;
+  }
   async _constructIdentity(identityRecord) {
     (0, import_invariant2.invariant)(!this._identity, void 0, {
       F: __dxlog_file3,
-      L: 216,
+      L: 236,
       S: this,
       A: [
         "!this._identity",
@@ -964,13 +1015,13 @@ var IdentityManager = class IdentityManager2 {
       identityRecord
     }, {
       F: __dxlog_file3,
-      L: 217,
+      L: 237,
       S: this,
       C: (f, a) => f(...a)
     });
     (0, import_invariant2.invariant)(identityRecord.haloSpace.controlFeedKey, void 0, {
       F: __dxlog_file3,
-      L: 220,
+      L: 240,
       S: this,
       A: [
         "identityRecord.haloSpace.controlFeedKey",
@@ -982,7 +1033,7 @@ var IdentityManager = class IdentityManager2 {
     });
     (0, import_invariant2.invariant)(identityRecord.haloSpace.dataFeedKey, void 0, {
       F: __dxlog_file3,
-      L: 224,
+      L: 244,
       S: this,
       A: [
         "identityRecord.haloSpace.dataFeedKey",
@@ -998,7 +1049,7 @@ var IdentityManager = class IdentityManager2 {
       swarmIdentity: {
         peerKey: identityRecord.deviceKey,
         credentialProvider: createAuthProvider((0, import_credentials4.createCredentialSignerWithKey)(this._keyring, identityRecord.deviceKey)),
-        credentialAuthenticator: (0, import_util2.deferFunction)(() => identity.authVerifier.verifier)
+        credentialAuthenticator: (0, import_util3.deferFunction)(() => identity.authVerifier.verifier)
       },
       identityKey: identityRecord.identityKey
     });
@@ -1014,7 +1065,7 @@ var IdentityManager = class IdentityManager2 {
       identityKey: identityRecord.identityKey
     }, {
       F: __dxlog_file3,
-      L: 248,
+      L: 268,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -1035,7 +1086,7 @@ var IdentityManager = class IdentityManager2 {
       onAuthFailure: () => {
         import_log3.log.warn("auth failure", void 0, {
           F: __dxlog_file3,
-          L: 267,
+          L: 287,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -1220,7 +1271,7 @@ var import_client_protocol2 = require("@dxos/client-protocol");
 var import_context5 = require("@dxos/context");
 var import_credentials7 = require("@dxos/credentials");
 var import_invariant6 = require("@dxos/invariant");
-var import_keys6 = require("@dxos/keys");
+var import_keys7 = require("@dxos/keys");
 var import_log5 = require("@dxos/log");
 var import_network_manager = require("@dxos/network-manager");
 var import_protocols4 = require("@dxos/protocols");
@@ -1231,7 +1282,7 @@ var import_invitations2 = require("@dxos/protocols/proto/dxos/halo/invitations")
 var import_async7 = require("@dxos/async");
 var import_context4 = require("@dxos/context");
 var import_invariant5 = require("@dxos/invariant");
-var import_keys5 = require("@dxos/keys");
+var import_keys6 = require("@dxos/keys");
 var import_log4 = require("@dxos/log");
 var import_protocols3 = require("@dxos/protocols");
 var import_services2 = require("@dxos/protocols/proto/dxos/client/services");
@@ -1279,7 +1330,7 @@ var InvitationHostExtension = class extends import_teleport.RpcExtension {
         },
         introduce: async (request) => {
           const { profile, invitationId } = request;
-          const traceId = import_keys5.PublicKey.random().toHex();
+          const traceId = import_keys6.PublicKey.random().toHex();
           import_log4.log.trace("dxos.sdk.invitation-handler.host.introduce", import_protocols3.trace.begin({
             id: traceId
           }), {
@@ -1331,7 +1382,7 @@ var InvitationHostExtension = class extends import_teleport.RpcExtension {
           };
         },
         authenticate: async ({ authCode: code }) => {
-          const traceId = import_keys5.PublicKey.random().toHex();
+          const traceId = import_keys6.PublicKey.random().toHex();
           import_log4.log.trace("dxos.sdk.invitation-handler.host.authenticate", import_protocols3.trace.begin({
             id: traceId
           }), {
@@ -1411,7 +1462,7 @@ var InvitationHostExtension = class extends import_teleport.RpcExtension {
           };
         },
         admit: async (request) => {
-          const traceId = import_keys5.PublicKey.random().toHex();
+          const traceId = import_keys6.PublicKey.random().toHex();
           import_log4.log.trace("dxos.sdk.invitation-handler.host.admit", import_protocols3.trace.begin({
             id: traceId
           }), {
@@ -1577,7 +1628,7 @@ var InvitationsHandler = class {
     this._networkManager = _networkManager;
   }
   createInvitation(protocol, options) {
-    const { invitationId = import_keys6.PublicKey.random().toHex(), type = import_services3.Invitation.Type.INTERACTIVE, authMethod = import_services3.Invitation.AuthMethod.SHARED_SECRET, state = import_services3.Invitation.State.INIT, timeout = import_client_protocol2.INVITATION_TIMEOUT, swarmKey = import_keys6.PublicKey.random() } = options ?? {};
+    const { invitationId = import_keys7.PublicKey.random().toHex(), type = import_services3.Invitation.Type.INTERACTIVE, authMethod = import_services3.Invitation.AuthMethod.SHARED_SECRET, state = import_services3.Invitation.State.INIT, timeout = import_client_protocol2.INVITATION_TIMEOUT, swarmKey = import_keys7.PublicKey.random() } = options ?? {};
     const authCode = options?.authCode ?? (authMethod === import_services3.Invitation.AuthMethod.SHARED_SECRET ? (0, import_credentials7.generatePasscode)(import_client_protocol2.AUTHENTICATION_CODE_LENGTH) : void 0);
     (0, import_invariant6.invariant)(protocol, void 0, {
       F: __dxlog_file7,
@@ -1652,7 +1703,7 @@ var InvitationsHandler = class {
         },
         onOpen: () => {
           (0, import_async8.scheduleTask)(ctx, async () => {
-            const traceId = import_keys6.PublicKey.random().toHex();
+            const traceId = import_keys7.PublicKey.random().toHex();
             try {
               import_log5.log.trace("dxos.sdk.invitations-handler.host.onOpen", import_protocols4.trace.begin({
                 id: traceId
@@ -1885,7 +1936,7 @@ var InvitationsHandler = class {
             }
           });
           (0, import_async8.scheduleTask)(ctx, async () => {
-            const traceId = import_keys6.PublicKey.random().toHex();
+            const traceId = import_keys7.PublicKey.random().toHex();
             try {
               import_log5.log.trace("dxos.sdk.invitations-handler.guest.onOpen", import_protocols4.trace.begin({
                 id: traceId
@@ -2092,7 +2143,7 @@ var InvitationsHandler = class {
       const topic = invitation.swarmKey;
       const swarmConnection = await this._networkManager.joinSwarm({
         topic,
-        peerId: import_keys6.PublicKey.random(),
+        peerId: import_keys7.PublicKey.random(),
         protocolProvider: (0, import_network_manager.createTeleportProtocolFactory)(async (teleport) => {
           teleport.addExtension("dxos.halo.invitations", createExtension());
         }),
@@ -2557,7 +2608,7 @@ var getPlatform = () => {
 };
 
 // packages/sdk/client-services/src/version.ts
-var DXOS_VERSION = "0.3.2-main.648180e";
+var DXOS_VERSION = "0.3.2-main.988f99c";
 
 // packages/sdk/client-services/src/packlets/services/diagnostics.ts
 var __dxlog_file10 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/services/diagnostics.ts";
@@ -2686,25 +2737,25 @@ var import_echo_pipeline2 = require("@dxos/echo-pipeline");
 var import_feed_store4 = require("@dxos/feed-store");
 var import_invariant13 = require("@dxos/invariant");
 var import_keyring = require("@dxos/keyring");
-var import_keys10 = require("@dxos/keys");
+var import_keys11 = require("@dxos/keys");
 var import_log13 = require("@dxos/log");
 var import_protocols10 = require("@dxos/protocols");
 var import_services10 = require("@dxos/protocols/proto/dxos/client/services");
 var import_teleport_extension_object_sync = require("@dxos/teleport-extension-object-sync");
 var import_tracing4 = require("@dxos/tracing");
-var import_util6 = require("@dxos/util");
+var import_util7 = require("@dxos/util");
 
 // packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts
 var import_async12 = require("@dxos/async");
 var import_context8 = require("@dxos/context");
 var import_credentials13 = require("@dxos/credentials");
 var import_invariant11 = require("@dxos/invariant");
-var import_keys9 = require("@dxos/keys");
+var import_keys10 = require("@dxos/keys");
 var import_log11 = require("@dxos/log");
 var import_protocols8 = require("@dxos/protocols");
 var import_services8 = require("@dxos/protocols/proto/dxos/client/services");
 var import_teleport_extension_gossip = require("@dxos/teleport-extension-gossip");
-var import_util5 = require("@dxos/util");
+var import_util6 = require("@dxos/util");
 
 // packages/sdk/client-services/src/packlets/spaces/data-space.ts
 var import_async11 = require("@dxos/async");
@@ -2712,24 +2763,24 @@ var import_client_protocol3 = require("@dxos/client-protocol");
 var import_context7 = require("@dxos/context");
 var import_debug4 = require("@dxos/debug");
 var import_echo_pipeline = require("@dxos/echo-pipeline");
-var import_keys8 = require("@dxos/keys");
+var import_keys9 = require("@dxos/keys");
 var import_log10 = require("@dxos/log");
 var import_protocols7 = require("@dxos/protocols");
 var import_services7 = require("@dxos/protocols/proto/dxos/client/services");
 var import_credentials10 = require("@dxos/protocols/proto/dxos/halo/credentials");
 var import_timeframe2 = require("@dxos/timeframe");
 var import_tracing3 = require("@dxos/tracing");
-var import_util4 = require("@dxos/util");
+var import_util5 = require("@dxos/util");
 
 // packages/sdk/client-services/src/packlets/spaces/notarization-plugin.ts
 var import_async10 = require("@dxos/async");
 var import_context6 = require("@dxos/context");
 var import_invariant10 = require("@dxos/invariant");
-var import_keys7 = require("@dxos/keys");
+var import_keys8 = require("@dxos/keys");
 var import_log9 = require("@dxos/log");
 var import_protocols6 = require("@dxos/protocols");
 var import_teleport2 = require("@dxos/teleport");
-var import_util3 = require("@dxos/util");
+var import_util4 = require("@dxos/util");
 var __dxlog_file11 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/notarization-plugin.ts";
 var DEFAULT_RETRY_TIMEOUT = 1e3;
 var DEFAULT_SUCCESS_DELAY = 1e3;
@@ -2740,8 +2791,8 @@ var NotarizationPlugin = class {
     this._ctx = new import_context6.Context();
     this._extensionOpened = new import_async10.Event();
     this._extensions = /* @__PURE__ */ new Set();
-    this._processedCredentials = new import_util3.ComplexSet(import_keys7.PublicKey.hash);
-    this._processCredentialsTriggers = new import_util3.ComplexMap(import_keys7.PublicKey.hash);
+    this._processedCredentials = new import_util4.ComplexSet(import_keys8.PublicKey.hash);
+    this._processCredentialsTriggers = new import_util4.ComplexMap(import_keys8.PublicKey.hash);
   }
   get hasWriter() {
     return !!this._writer;
@@ -2903,7 +2954,7 @@ var NotarizationPlugin = class {
     if (this._processedCredentials.has(id)) {
       return;
     }
-    await (0, import_util3.entry)(this._processCredentialsTriggers, id).orInsert(new import_async10.Trigger()).value.wait();
+    await (0, import_util4.entry)(this._processCredentialsTriggers, id).orInsert(new import_async10.Trigger()).value.wait();
   }
   /**
   * Requests from other peers to notarize credentials.
@@ -3023,7 +3074,7 @@ var DataSpace = class DataSpace2 {
     this._signingContext = params.signingContext;
     this._callbacks = params.callbacks ?? {};
     this.authVerifier = new TrustedKeySetAuthVerifier({
-      trustedKeysProvider: () => new import_util4.ComplexSet(import_keys8.PublicKey.hash, Array.from(this._inner.spaceState.members.values()).filter((member) => !member.removed).map((member) => member.key)),
+      trustedKeysProvider: () => new import_util5.ComplexSet(import_keys9.PublicKey.hash, Array.from(this._inner.spaceState.members.values()).filter((member) => !member.removed).map((member) => member.key)),
       update: this._inner.stateUpdate,
       authTimeout: import_client_protocol3.AUTH_TIMEOUT
     });
@@ -3442,9 +3493,9 @@ var DataSpaceManager = class DataSpaceManager2 {
     this._feedStore = _feedStore;
     this._ctx = new import_context8.Context();
     this.updated = new import_async12.Event();
-    this._spaces = new import_util5.ComplexMap(import_keys9.PublicKey.hash);
+    this._spaces = new import_util6.ComplexMap(import_keys10.PublicKey.hash);
     this._isOpen = false;
-    this._instanceId = import_keys9.PublicKey.random().toHex();
+    this._instanceId = import_keys10.PublicKey.random().toHex();
   }
   // TODO(burdon): Remove.
   get spaces() {
@@ -3473,7 +3524,7 @@ var DataSpaceManager = class DataSpaceManager2 {
       S: this,
       C: (f, a) => f(...a)
     });
-    await (0, import_util5.forEachAsync)(this._metadataStore.spaces, async (spaceMetadata) => {
+    await (0, import_util6.forEachAsync)(this._metadataStore.spaces, async (spaceMetadata) => {
       try {
         (0, import_log11.log)("load space", {
           spaceMetadata
@@ -3655,7 +3706,7 @@ var DataSpaceManager = class DataSpaceManager2 {
       swarmIdentity: {
         peerKey: this._signingContext.deviceKey,
         credentialProvider: createAuthProvider(this._signingContext.credentialSigner),
-        credentialAuthenticator: (0, import_util5.deferFunction)(() => dataSpace.authVerifier.verifier)
+        credentialAuthenticator: (0, import_util6.deferFunction)(() => dataSpace.authVerifier.verifier)
       },
       onNetworkConnection: (session) => {
         session.addExtension("dxos.mesh.teleport.gossip", gossip.createExtension({
@@ -3995,7 +4046,7 @@ var ServiceContext = class ServiceContext2 {
     this.initialized = new import_async14.Trigger();
     this.dataServiceSubscriptions = new import_echo_pipeline2.DataServiceSubscriptions();
     this._handlerFactories = /* @__PURE__ */ new Map();
-    this._instanceId = import_keys10.PublicKey.random().toHex();
+    this._instanceId = import_keys11.PublicKey.random().toHex();
     this.metadataStore = new import_echo_pipeline2.MetadataStore(storage.createDirectory("metadata"));
     this.snapshotStore = new import_echo_pipeline2.SnapshotStore(storage.createDirectory("snapshots"));
     this.blobStore = new import_teleport_extension_object_sync.BlobStore(storage.createDirectory("blobs"));
@@ -4216,7 +4267,7 @@ _ts_decorate5([
   import_tracing4.trace.span()
 ], ServiceContext.prototype, "_initialize", null);
 ServiceContext = _ts_decorate5([
-  (0, import_util6.safeInstanceof)("dxos.client-services.ServiceContext"),
+  (0, import_util7.safeInstanceof)("dxos.client-services.ServiceContext"),
   import_tracing4.trace.resource()
 ], ServiceContext);
 
@@ -4227,8 +4278,8 @@ var import_context10 = require("@dxos/context");
 var import_document_model2 = require("@dxos/document-model");
 var import_echo_pipeline3 = require("@dxos/echo-pipeline");
 var import_echo_schema = require("@dxos/echo-schema");
-var import_invariant15 = require("@dxos/invariant");
-var import_keys11 = require("@dxos/keys");
+var import_invariant16 = require("@dxos/invariant");
+var import_keys12 = require("@dxos/keys");
 var import_log16 = require("@dxos/log");
 var import_messaging = require("@dxos/messaging");
 var import_model_factory = require("@dxos/model-factory");
@@ -4266,13 +4317,33 @@ var ServiceRegistry = class {
 // packages/sdk/client-services/src/packlets/devices/devices-service.ts
 var import_async15 = require("@dxos/async");
 var import_codec_protobuf12 = require("@dxos/codec-protobuf");
+var import_invariant14 = require("@dxos/invariant");
 var import_services11 = require("@dxos/protocols/proto/dxos/client/services");
+var __dxlog_file16 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/devices/devices-service.ts";
 var DevicesServiceImpl = class {
   constructor(_identityManager) {
     this._identityManager = _identityManager;
   }
-  updateDevice(request) {
-    throw new Error("Method not implemented.");
+  async updateDevice(profile) {
+    (0, import_invariant14.invariant)(this._identityManager.identity, "Identity not initialized", {
+      F: __dxlog_file16,
+      L: 17,
+      S: this,
+      A: [
+        "this._identityManager.identity",
+        "'Identity not initialized'"
+      ]
+    });
+    const deviceKey = this._identityManager.identity.deviceKey;
+    await this._identityManager.updateDevice({
+      deviceKey,
+      profile
+    });
+    return {
+      deviceKey,
+      kind: import_services11.DeviceKind.CURRENT,
+      profile
+    };
   }
   queryDevices() {
     return new import_codec_protobuf12.Stream(({ next }) => {
@@ -4284,9 +4355,10 @@ var DevicesServiceImpl = class {
           });
         } else {
           next({
-            devices: Array.from(deviceKeys.values()).map((key) => ({
+            devices: Array.from(deviceKeys.entries()).map(([key, profile]) => ({
               deviceKey: key,
-              kind: this._identityManager.identity?.deviceKey.equals(key) ? import_services11.DeviceKind.CURRENT : import_services11.DeviceKind.TRUSTED
+              kind: this._identityManager.identity?.deviceKey.equals(key) ? import_services11.DeviceKind.CURRENT : import_services11.DeviceKind.TRUSTED,
+              profile
             }))
           });
         }
@@ -4307,7 +4379,7 @@ var DevicesServiceImpl = class {
 };
 
 // packages/sdk/client-services/src/packlets/locks/node.ts
-var import_invariant14 = require("@dxos/invariant");
+var import_invariant15 = require("@dxos/invariant");
 var import_lock_file = require("@dxos/lock-file");
 var import_log14 = require("@dxos/log");
 function _ts_decorate6(decorators, target, key, desc) {
@@ -4320,7 +4392,7 @@ function _ts_decorate6(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file16 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/locks/node.ts";
+var __dxlog_file17 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/locks/node.ts";
 var Lock = class {
   constructor({ lockKey: lockPath, onAcquire, onRelease }) {
     this._lockPath = lockPath;
@@ -4332,7 +4404,7 @@ var Lock = class {
   }
   async acquire() {
     (0, import_log14.log)("acquiring lock...", void 0, {
-      F: __dxlog_file16,
+      F: __dxlog_file17,
       L: 32,
       S: this,
       C: (f, a) => f(...a)
@@ -4340,7 +4412,7 @@ var Lock = class {
     this._fileHandle = await import_lock_file.LockFile.acquire(this._lockPath);
     await this._onAcquire?.();
     (0, import_log14.log)("acquired lock", void 0, {
-      F: __dxlog_file16,
+      F: __dxlog_file17,
       L: 37,
       S: this,
       C: (f, a) => f(...a)
@@ -4348,8 +4420,8 @@ var Lock = class {
   }
   async release() {
     await this._onRelease?.();
-    (0, import_invariant14.invariant)(this._fileHandle, "Lock is not acquired", {
-      F: __dxlog_file16,
+    (0, import_invariant15.invariant)(this._fileHandle, "Lock is not acquired", {
+      F: __dxlog_file17,
       L: 42,
       S: this,
       A: [
@@ -4370,7 +4442,7 @@ var import_async16 = require("@dxos/async");
 var import_codec_protobuf13 = require("@dxos/codec-protobuf");
 var import_log15 = require("@dxos/log");
 var import_services12 = require("@dxos/protocols/proto/dxos/client/services");
-var import_util7 = require("@dxos/util");
+var import_util8 = require("@dxos/util");
 var LoggingServiceImpl = class {
   constructor() {
     this._logs = new import_async16.Event();
@@ -4388,15 +4460,15 @@ var LoggingServiceImpl = class {
   }
   async controlMetrics({ reset, record }) {
     if (reset) {
-      import_util7.tracer.clear();
+      import_util8.tracer.clear();
     }
     if (record === true) {
-      import_util7.tracer.start();
+      import_util8.tracer.start();
     } else if (record === false) {
-      import_util7.tracer.stop();
+      import_util8.tracer.stop();
     }
     return {
-      recording: import_util7.tracer.recording
+      recording: import_util8.tracer.recording
     };
   }
   /**
@@ -4404,10 +4476,10 @@ var LoggingServiceImpl = class {
   */
   queryMetrics({ interval = 5e3 }) {
     const getNumericalValues = (key) => {
-      const events = import_util7.tracer.get(key) ?? [];
+      const events = import_util8.tracer.get(key) ?? [];
       return {
         key,
-        stats: (0, import_util7.numericalValues)(events, "duration")
+        stats: (0, import_util8.numericalValues)(events, "duration")
       };
     };
     return new import_codec_protobuf13.Stream(({ next }) => {
@@ -4445,7 +4517,7 @@ var LoggingServiceImpl = class {
         }
         const record = {
           ...entry2,
-          context: (0, import_util7.jsonify)((0, import_log15.getContextFromEntry)(entry2)),
+          context: (0, import_util8.jsonify)((0, import_log15.getContextFromEntry)(entry2)),
           timestamp: /* @__PURE__ */ new Date(),
           meta: {
             // TODO(dmaretskyi): Fix proto.
@@ -4519,10 +4591,10 @@ var import_client_protocol4 = require("@dxos/client-protocol");
 var import_protocols11 = require("@dxos/protocols");
 var import_config = require("@dxos/protocols/proto/dxos/config");
 var import_random_access_storage = require("@dxos/random-access-storage");
-var import_util8 = require("@dxos/util");
+var import_util9 = require("@dxos/util");
 var StorageDriver = import_config.Runtime.Client.Storage.StorageDriver;
 var createStorageObjects = (config) => {
-  const { persistent = false, keyStore, dataStore, dataRoot = (0, import_util8.isNode)() ? import_client_protocol4.DX_DATA : "dxos/storage" } = config ?? {};
+  const { persistent = false, keyStore, dataStore, dataRoot = (0, import_util9.isNode)() ? import_client_protocol4.DX_DATA : "dxos/storage" } = config ?? {};
   if (persistent && dataStore === StorageDriver.RAM) {
     throw new import_protocols11.InvalidConfigError("RAM storage cannot be used in persistent mode.");
   }
@@ -4566,7 +4638,7 @@ var toStorageType = (type) => {
 // packages/sdk/client-services/src/packlets/system/system-service.ts
 var import_codec_protobuf15 = require("@dxos/codec-protobuf");
 var import_services13 = require("@dxos/protocols/proto/dxos/client/services");
-var import_util9 = require("@dxos/util");
+var import_util10 = require("@dxos/util");
 var SystemServiceImpl = class {
   constructor({ config, statusUpdate, getDiagnostics, onUpdateStatus, getCurrentStatus, onReset }) {
     this._config = config;
@@ -4586,7 +4658,7 @@ var SystemServiceImpl = class {
     const diagnostics = await this._getDiagnostics();
     return {
       timestamp: /* @__PURE__ */ new Date(),
-      diagnostics: JSON.parse(JSON.stringify(diagnostics, (0, import_util9.jsonKeyReplacer)({
+      diagnostics: JSON.parse(JSON.stringify(diagnostics, (0, import_util10.jsonKeyReplacer)({
         truncate: keys === import_services13.GetDiagnosticsRequest.KEY_OPTION.TRUNCATE,
         humanize: keys === import_services13.GetDiagnosticsRequest.KEY_OPTION.HUMANIZE
       })))
@@ -4628,7 +4700,7 @@ function _ts_decorate7(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file17 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/services/service-host.ts";
+var __dxlog_file18 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/services/service-host.ts";
 var createDefaultModelFactory = () => {
   return new import_model_factory.ModelFactory().registerModel(import_document_model2.DocumentModel).registerModel(import_text_model.TextModel);
 };
@@ -4728,8 +4800,8 @@ var ClientServicesHost = class ClientServicesHost2 {
   * Can only be called once.
   */
   initialize({ config, ...options }) {
-    (0, import_invariant15.invariant)(!this._open, "service host is open", {
-      F: __dxlog_file17,
+    (0, import_invariant16.invariant)(!this._open, "service host is open", {
+      F: __dxlog_file18,
       L: 201,
       S: this,
       A: [
@@ -4738,14 +4810,14 @@ var ClientServicesHost = class ClientServicesHost2 {
       ]
     });
     (0, import_log16.log)("initializing...", void 0, {
-      F: __dxlog_file17,
+      F: __dxlog_file18,
       L: 202,
       S: this,
       C: (f, a) => f(...a)
     });
     if (config) {
-      (0, import_invariant15.invariant)(!this._config, "config already set", {
-        F: __dxlog_file17,
+      (0, import_invariant16.invariant)(!this._config, "config already set", {
+        F: __dxlog_file18,
         L: 205,
         S: this,
         A: [
@@ -4762,8 +4834,8 @@ var ClientServicesHost = class ClientServicesHost2 {
       iceServers: this._config?.get("runtime.services.ice")
     }), signalManager = new import_messaging.WebsocketSignalManager(this._config?.get("runtime.services.signaling") ?? []) } = options;
     this._signalManager = signalManager;
-    (0, import_invariant15.invariant)(!this._networkManager, "network manager already set", {
-      F: __dxlog_file17,
+    (0, import_invariant16.invariant)(!this._networkManager, "network manager already set", {
+      F: __dxlog_file18,
       L: 221,
       S: this,
       A: [
@@ -4777,7 +4849,7 @@ var ClientServicesHost = class ClientServicesHost2 {
       signalManager
     });
     (0, import_log16.log)("initialized", void 0, {
-      F: __dxlog_file17,
+      F: __dxlog_file18,
       L: 228,
       S: this,
       C: (f, a) => f(...a)
@@ -4787,17 +4859,17 @@ var ClientServicesHost = class ClientServicesHost2 {
     if (this._open) {
       return;
     }
-    const traceId = import_keys11.PublicKey.random().toHex();
+    const traceId = import_keys12.PublicKey.random().toHex();
     import_log16.log.trace("dxos.client-services.host.open", import_protocols12.trace.begin({
       id: traceId
     }), {
-      F: __dxlog_file17,
+      F: __dxlog_file18,
       L: 239,
       S: this,
       C: (f, a) => f(...a)
     });
-    (0, import_invariant15.invariant)(this._config, "config not set", {
-      F: __dxlog_file17,
+    (0, import_invariant16.invariant)(this._config, "config not set", {
+      F: __dxlog_file18,
       L: 241,
       S: this,
       A: [
@@ -4805,8 +4877,8 @@ var ClientServicesHost = class ClientServicesHost2 {
         "'config not set'"
       ]
     });
-    (0, import_invariant15.invariant)(this._storage, "storage not set", {
-      F: __dxlog_file17,
+    (0, import_invariant16.invariant)(this._storage, "storage not set", {
+      F: __dxlog_file18,
       L: 242,
       S: this,
       A: [
@@ -4814,8 +4886,8 @@ var ClientServicesHost = class ClientServicesHost2 {
         "'storage not set'"
       ]
     });
-    (0, import_invariant15.invariant)(this._signalManager, "signal manager not set", {
-      F: __dxlog_file17,
+    (0, import_invariant16.invariant)(this._signalManager, "signal manager not set", {
+      F: __dxlog_file18,
       L: 243,
       S: this,
       A: [
@@ -4823,8 +4895,8 @@ var ClientServicesHost = class ClientServicesHost2 {
         "'signal manager not set'"
       ]
     });
-    (0, import_invariant15.invariant)(this._networkManager, "network manager not set", {
-      F: __dxlog_file17,
+    (0, import_invariant16.invariant)(this._networkManager, "network manager not set", {
+      F: __dxlog_file18,
       L: 244,
       S: this,
       A: [
@@ -4836,7 +4908,7 @@ var ClientServicesHost = class ClientServicesHost2 {
     (0, import_log16.log)("opening...", {
       lockKey: this._resourceLock?.lockKey
     }, {
-      F: __dxlog_file17,
+      F: __dxlog_file18,
       L: 247,
       S: this,
       C: (f, a) => f(...a)
@@ -4882,7 +4954,7 @@ var ClientServicesHost = class ClientServicesHost2 {
     (0, import_log16.log)("opened", {
       deviceKey
     }, {
-      F: __dxlog_file17,
+      F: __dxlog_file18,
       L: 316,
       S: this,
       C: (f, a) => f(...a)
@@ -4890,7 +4962,7 @@ var ClientServicesHost = class ClientServicesHost2 {
     import_log16.log.trace("dxos.client-services.host.open", import_protocols12.trace.end({
       id: traceId
     }), {
-      F: __dxlog_file17,
+      F: __dxlog_file18,
       L: 317,
       S: this,
       C: (f, a) => f(...a)
@@ -4904,7 +4976,7 @@ var ClientServicesHost = class ClientServicesHost2 {
     (0, import_log16.log)("closing...", {
       deviceKey
     }, {
-      F: __dxlog_file17,
+      F: __dxlog_file18,
       L: 328,
       S: this,
       C: (f, a) => f(...a)
@@ -4920,24 +4992,24 @@ var ClientServicesHost = class ClientServicesHost2 {
     (0, import_log16.log)("closed", {
       deviceKey
     }, {
-      F: __dxlog_file17,
+      F: __dxlog_file18,
       L: 335,
       S: this,
       C: (f, a) => f(...a)
     });
   }
   async reset() {
-    const traceId = import_keys11.PublicKey.random().toHex();
+    const traceId = import_keys12.PublicKey.random().toHex();
     import_log16.log.trace("dxos.sdk.client-services-host.reset", import_protocols12.trace.begin({
       id: traceId
     }), {
-      F: __dxlog_file17,
+      F: __dxlog_file18,
       L: 340,
       S: this,
       C: (f, a) => f(...a)
     });
     (0, import_log16.log)("resetting...", void 0, {
-      F: __dxlog_file17,
+      F: __dxlog_file18,
       L: 342,
       S: this,
       C: (f, a) => f(...a)
@@ -4945,7 +5017,7 @@ var ClientServicesHost = class ClientServicesHost2 {
     await this._serviceContext?.close();
     await this._storage.reset();
     (0, import_log16.log)("reset", void 0, {
-      F: __dxlog_file17,
+      F: __dxlog_file18,
       L: 345,
       S: this,
       C: (f, a) => f(...a)
@@ -4953,7 +5025,7 @@ var ClientServicesHost = class ClientServicesHost2 {
     import_log16.log.trace("dxos.sdk.client-services-host.reset", import_protocols12.trace.end({
       id: traceId
     }), {
-      F: __dxlog_file17,
+      F: __dxlog_file18,
       L: 346,
       S: this,
       C: (f, a) => f(...a)
@@ -5005,15 +5077,15 @@ var import_context11 = require("@dxos/context");
 var import_log17 = require("@dxos/log");
 var import_messaging2 = require("@dxos/messaging");
 var import_network_manager3 = require("@dxos/network-manager");
-var import_util10 = require("@dxos/util");
+var import_util11 = require("@dxos/util");
 
 // packages/sdk/client-services/src/packlets/vault/shell-runtime.ts
 var import_async18 = require("@dxos/async");
 var import_client_protocol6 = require("@dxos/client-protocol");
-var import_invariant16 = require("@dxos/invariant");
+var import_invariant17 = require("@dxos/invariant");
 var import_iframe = require("@dxos/protocols/proto/dxos/iframe");
 var import_rpc2 = require("@dxos/rpc");
-var __dxlog_file18 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/vault/shell-runtime.ts";
+var __dxlog_file19 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/vault/shell-runtime.ts";
 var ShellRuntimeImpl = class {
   constructor(_port) {
     this._port = _port;
@@ -5040,8 +5112,8 @@ var ShellRuntimeImpl = class {
     });
   }
   async setAppContext(context) {
-    (0, import_invariant16.invariant)(this._appRpc, "runtime not open", {
-      F: __dxlog_file18,
+    (0, import_invariant17.invariant)(this._appRpc, "runtime not open", {
+      F: __dxlog_file19,
       L: 44,
       S: this,
       A: [
@@ -5086,7 +5158,7 @@ function _ts_decorate8(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file19 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/vault/iframe-host-runtime.ts";
+var __dxlog_file20 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/vault/iframe-host-runtime.ts";
 var LOCK_KEY = "DXOS_RESOURCE_LOCK";
 var IFrameHostRuntime = class {
   constructor({ config, origin, appPort, shellPort }) {
@@ -5107,13 +5179,13 @@ var IFrameHostRuntime = class {
   }
   async start() {
     (0, import_log17.log)("starting...", void 0, {
-      F: __dxlog_file19,
+      F: __dxlog_file20,
       L: 71,
       S: this,
       C: (f, a) => f(...a)
     });
     try {
-      this._config = await (0, import_util10.getAsyncValue)(this._configProvider);
+      this._config = await (0, import_util11.getAsyncValue)(this._configProvider);
       this._transportFactory = (0, import_network_manager3.createSimplePeerTransportFactory)({
         iceServers: this._config.get("runtime.services.ice")
       });
@@ -5156,7 +5228,7 @@ var IFrameHostRuntime = class {
       ]);
       this._ready.wake(void 0);
       (0, import_log17.log)("started", void 0, {
-        F: __dxlog_file19,
+        F: __dxlog_file20,
         L: 114,
         S: this,
         C: (f, a) => f(...a)
@@ -5164,7 +5236,7 @@ var IFrameHostRuntime = class {
     } catch (err) {
       this._ready.wake(err);
       import_log17.log.catch(err, void 0, {
-        F: __dxlog_file19,
+        F: __dxlog_file20,
         L: 117,
         S: this,
         C: (f, a) => f(...a)
@@ -5173,7 +5245,7 @@ var IFrameHostRuntime = class {
   }
   async stop() {
     (0, import_log17.log)("stopping...", void 0, {
-      F: __dxlog_file19,
+      F: __dxlog_file20,
       L: 122,
       S: this,
       C: (f, a) => f(...a)
@@ -5182,7 +5254,7 @@ var IFrameHostRuntime = class {
     await this._clientServices.close();
     await this._shellRuntime?.close();
     (0, import_log17.log)("stopped", void 0, {
-      F: __dxlog_file19,
+      F: __dxlog_file20,
       L: 126,
       S: this,
       C: (f, a) => f(...a)
@@ -5200,8 +5272,8 @@ var import_log18 = require("@dxos/log");
 var import_network_manager4 = require("@dxos/network-manager");
 var import_protocols13 = require("@dxos/protocols");
 var import_rpc3 = require("@dxos/rpc");
-var import_util11 = require("@dxos/util");
-var __dxlog_file20 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/vault/iframe-proxy-runtime.ts";
+var import_util12 = require("@dxos/util");
+var __dxlog_file21 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/vault/iframe-proxy-runtime.ts";
 var IFrameProxyRuntime = class {
   constructor({ config, systemPort, shellPort }) {
     this._id = String(Math.floor(Math.random() * 1e6));
@@ -5217,7 +5289,7 @@ var IFrameProxyRuntime = class {
     return this._shellRuntime;
   }
   async open(origin) {
-    this._config = await (0, import_util11.getAsyncValue)(this._configProvider);
+    this._config = await (0, import_util12.getAsyncValue)(this._configProvider);
     this._transportService = new import_network_manager4.SimplePeerTransportService({
       iceServers: this._config.get("runtime.services.ice")
     });
@@ -5249,7 +5321,7 @@ var IFrameProxyRuntime = class {
       });
     } catch (err) {
       import_log18.log.catch(err, void 0, {
-        F: __dxlog_file20,
+        F: __dxlog_file21,
         L: 85,
         S: this,
         C: (f, a) => f(...a)
@@ -5279,10 +5351,10 @@ var import_network_manager5 = require("@dxos/network-manager");
 // packages/sdk/client-services/src/packlets/vault/worker-session.ts
 var import_async21 = require("@dxos/async");
 var import_client_protocol9 = require("@dxos/client-protocol");
-var import_invariant17 = require("@dxos/invariant");
+var import_invariant18 = require("@dxos/invariant");
 var import_log19 = require("@dxos/log");
 var import_rpc4 = require("@dxos/rpc");
-var import_util12 = require("@dxos/util");
+var import_util13 = require("@dxos/util");
 function _ts_decorate9(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
@@ -5293,13 +5365,13 @@ function _ts_decorate9(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file21 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/vault/worker-session.ts";
+var __dxlog_file22 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/vault/worker-session.ts";
 var WorkerSession = class {
   constructor({ serviceHost, systemPort, appPort, shellPort, readySignal }) {
     this._startTrigger = new import_async21.Trigger();
-    this.onClose = new import_util12.Callback();
-    (0, import_invariant17.invariant)(serviceHost, void 0, {
-      F: __dxlog_file21,
+    this.onClose = new import_util13.Callback();
+    (0, import_invariant18.invariant)(serviceHost, void 0, {
+      F: __dxlog_file22,
       L: 49,
       S: this,
       A: [
@@ -5354,7 +5426,7 @@ var WorkerSession = class {
                 await this.close();
               } catch (err) {
                 import_log19.log.catch(err, void 0, {
-                  F: __dxlog_file21,
+                  F: __dxlog_file22,
                   L: 99,
                   S: this,
                   C: (f, a) => f(...a)
@@ -5371,7 +5443,7 @@ var WorkerSession = class {
   }
   async open() {
     import_log19.log.info("opening...", void 0, {
-      F: __dxlog_file21,
+      F: __dxlog_file22,
       L: 113,
       S: this,
       C: (f, a) => f(...a)
@@ -5388,7 +5460,7 @@ var WorkerSession = class {
       void this._afterLockReleases(this.lockKey, () => this.close());
     }
     import_log19.log.info("opened", void 0, {
-      F: __dxlog_file21,
+      F: __dxlog_file22,
       L: 124,
       S: this,
       C: (f, a) => f(...a)
@@ -5396,7 +5468,7 @@ var WorkerSession = class {
   }
   async close() {
     import_log19.log.info("closing...", void 0, {
-      F: __dxlog_file21,
+      F: __dxlog_file22,
       L: 128,
       S: this,
       C: (f, a) => f(...a)
@@ -5405,7 +5477,7 @@ var WorkerSession = class {
       await this.onClose.callIfSet();
     } catch (err) {
       import_log19.log.catch(err, void 0, {
-        F: __dxlog_file21,
+        F: __dxlog_file22,
         L: 132,
         S: this,
         C: (f, a) => f(...a)
@@ -5416,7 +5488,7 @@ var WorkerSession = class {
       this._iframeRpc.close()
     ]);
     import_log19.log.info("closed", void 0, {
-      F: __dxlog_file21,
+      F: __dxlog_file22,
       L: 136,
       S: this,
       C: (f, a) => f(...a)
@@ -5427,7 +5499,7 @@ var WorkerSession = class {
       await (0, import_async21.asyncTimeout)(this._shellClientRpc.open(), 1e3);
     } catch {
       import_log19.log.info("No shell connected.", void 0, {
-        F: __dxlog_file21,
+        F: __dxlog_file22,
         L: 143,
         S: this,
         C: (f, a) => f(...a)
@@ -5447,7 +5519,7 @@ _ts_decorate9([
 ], WorkerSession.prototype, "lockKey", void 0);
 
 // packages/sdk/client-services/src/packlets/vault/worker-runtime.ts
-var __dxlog_file22 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/vault/worker-runtime.ts";
+var __dxlog_file23 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/vault/worker-runtime.ts";
 var WorkerRuntime = class {
   constructor(_configProvider) {
     this._configProvider = _configProvider;
@@ -5467,7 +5539,7 @@ var WorkerRuntime = class {
   }
   async start() {
     (0, import_log20.log)("starting...", void 0, {
-      F: __dxlog_file22,
+      F: __dxlog_file23,
       L: 52,
       S: this,
       C: (f, a) => f(...a)
@@ -5483,7 +5555,7 @@ var WorkerRuntime = class {
       await this._clientServices.open(new import_context12.Context());
       this._ready.wake(void 0);
       (0, import_log20.log)("started", void 0, {
-        F: __dxlog_file22,
+        F: __dxlog_file23,
         L: 66,
         S: this,
         C: (f, a) => f(...a)
@@ -5491,7 +5563,7 @@ var WorkerRuntime = class {
     } catch (err) {
       this._ready.wake(err);
       import_log20.log.error("starting", err, {
-        F: __dxlog_file22,
+        F: __dxlog_file23,
         L: 69,
         S: this,
         C: (f, a) => f(...a)
@@ -5525,7 +5597,7 @@ var WorkerRuntime = class {
   */
   _reconnectWebrtc() {
     (0, import_log20.log)("reconnecting webrtc...", void 0, {
-      F: __dxlog_file22,
+      F: __dxlog_file23,
       L: 106,
       S: this,
       C: (f, a) => f(...a)