@dxos/client-services 0.4.10-main.fd8ea31 → 0.4.10-next.71cec10

package/dist/lib/browser/{chunk-WLE7E36I.mjs → chunk-5U7G5S73.mjs}

@@ -1086,9 +1086,7 @@ var IdentityManager = class {
           C: (f, a) => f(...a)
         });
       },
-      memberKey: identityKey,
-      onDelegatedInvitationStatusChange: async () => {
-      }
+      memberKey: identityKey
     });
   }
 };
@@ -1196,13 +1194,10 @@ var DeviceInvitationProtocol = class {
       kind: Invitation.Kind.DEVICE
     };
   }
-  async delegate(invitation) {
-    throw new Error("delegation not supported");
-  }
-  async admit(_, request) {
+  async admit(request) {
     invariant4(request.device, void 0, {
       F: __dxlog_file5,
-      L: 42,
+      L: 37,
       S: this,
       A: [
         "request.device",
@@ -1248,7 +1243,7 @@ var DeviceInvitationProtocol = class {
   async accept(response, request) {
     invariant4(response.device, void 0, {
       F: __dxlog_file5,
-      L: 87,
+      L: 82,
       S: this,
       A: [
         "response.device",
@@ -1258,7 +1253,7 @@ var DeviceInvitationProtocol = class {
     const { identityKey, haloSpaceKey, genesisFeedKey, controlTimeframe } = response.device;
     invariant4(request.device, void 0, {
       F: __dxlog_file5,
-      L: 90,
+      L: 85,
       S: this,
       A: [
         "request.device",
@@ -1284,8 +1279,9 @@ var DeviceInvitationProtocol = class {
 
 // packages/sdk/client-services/src/packlets/invitations/invitations-handler.ts
 import { PushStream, scheduleTask as scheduleTask2, TimeoutError, Trigger as Trigger3 } from "@dxos/async";
-import { AuthenticatingInvitation, INVITATION_TIMEOUT } from "@dxos/client-protocol";
+import { AuthenticatingInvitation, AUTHENTICATION_CODE_LENGTH, CancellableInvitation, INVITATION_TIMEOUT } from "@dxos/client-protocol";
 import { Context as Context5 } from "@dxos/context";
+import { generatePasscode } from "@dxos/credentials";
 import { createKeyPair, sign } from "@dxos/crypto";
 import { invariant as invariant6 } from "@dxos/invariant";
 import { PublicKey as PublicKey6 } from "@dxos/keys";
@@ -1660,7 +1656,51 @@ var InvitationsHandler = class {
   constructor(_networkManager) {
     this._networkManager = _networkManager;
   }
-  handleInvitationFlow(ctx, stream, protocol, invitation) {
+  createInvitation(protocol, options) {
+    const { invitationId = PublicKey6.random().toHex(), type = Invitation3.Type.INTERACTIVE, authMethod = Invitation3.AuthMethod.SHARED_SECRET, state = Invitation3.State.INIT, timeout = INVITATION_TIMEOUT, swarmKey = PublicKey6.random(), persistent = options?.authMethod !== Invitation3.AuthMethod.KNOWN_PUBLIC_KEY, created = /* @__PURE__ */ new Date(), guestKeypair = void 0, lifetime = 86400, multiUse = false } = options ?? {};
+    const authCode = options?.authCode ?? (authMethod === Invitation3.AuthMethod.SHARED_SECRET ? generatePasscode(AUTHENTICATION_CODE_LENGTH) : void 0);
+    invariant6(protocol, void 0, {
+      F: __dxlog_file7,
+      L: 87,
+      S: this,
+      A: [
+        "protocol",
+        ""
+      ]
+    });
+    const invitation = {
+      invitationId,
+      type,
+      authMethod,
+      state,
+      swarmKey,
+      authCode,
+      timeout,
+      persistent: persistent && type !== Invitation3.Type.DELEGATED,
+      guestKeypair: guestKeypair ?? (authMethod === Invitation3.AuthMethod.KNOWN_PUBLIC_KEY ? createAdmissionKeypair() : void 0),
+      created,
+      lifetime,
+      multiUse,
+      ...protocol.getInvitationContext()
+    };
+    const stream = new PushStream();
+    const ctx = new Context5({
+      onError: (err) => {
+        stream.error(err);
+        void ctx.dispose();
+      }
+    });
+    ctx.onDispose(() => {
+      log5("complete", {
+        ...protocol.toJSON()
+      }, {
+        F: __dxlog_file7,
+        L: 115,
+        S: this,
+        C: (f, a) => f(...a)
+      });
+      stream.complete();
+    });
     const createExtension = () => {
       const extension = new InvitationHostExtension({
         onStateUpdate: (invitation2) => {
@@ -1669,8 +1709,8 @@ var InvitationsHandler = class {
             state: Invitation3.State.READY_FOR_AUTHENTICATION
           });
         },
-        resolveInvitation: async ({ invitationId }) => {
-          if (invitationId && invitationId !== invitation.invitationId) {
+        resolveInvitation: async ({ invitationId: invitationId2 }) => {
+          if (invitationId2 && invitationId2 !== invitation.invitationId) {
             return void 0;
           }
           return invitation;
@@ -1680,14 +1720,14 @@ var InvitationsHandler = class {
             const deviceKey = admissionRequest.device?.deviceKey ?? admissionRequest.space?.deviceKey;
             invariant6(deviceKey, void 0, {
               F: __dxlog_file7,
-              L: 87,
+              L: 136,
               S: this,
               A: [
                 "deviceKey",
                 ""
               ]
             });
-            const admissionResponse = await protocol.admit(invitation, admissionRequest, extension.guestProfile);
+            const admissionResponse = await protocol.admit(admissionRequest, extension.guestProfile);
             extension.completedTrigger.wake(deviceKey);
             return admissionResponse;
           } catch (err) {
@@ -1703,7 +1743,7 @@ var InvitationsHandler = class {
                 id: traceId
               }), {
                 F: __dxlog_file7,
-                L: 105,
+                L: 154,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1711,7 +1751,7 @@ var InvitationsHandler = class {
                 ...protocol.toJSON()
               }, {
                 F: __dxlog_file7,
-                L: 106,
+                L: 155,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1720,14 +1760,14 @@ var InvitationsHandler = class {
                 state: Invitation3.State.CONNECTED
               });
               const deviceKey = await extension.completedTrigger.wait({
-                timeout: invitation.timeout
+                timeout
               });
               log5("admitted guest", {
                 guest: deviceKey,
                 ...protocol.toJSON()
               }, {
                 F: __dxlog_file7,
-                L: 109,
+                L: 158,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1739,7 +1779,7 @@ var InvitationsHandler = class {
                 id: traceId
               }), {
                 F: __dxlog_file7,
-                L: 111,
+                L: 160,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1749,7 +1789,7 @@ var InvitationsHandler = class {
                   ...protocol.toJSON()
                 }, {
                   F: __dxlog_file7,
-                  L: 114,
+                  L: 163,
                   S: this,
                   C: (f, a) => f(...a)
                 });
@@ -1760,7 +1800,7 @@ var InvitationsHandler = class {
               } else {
                 log5.error("failed", err, {
                   F: __dxlog_file7,
-                  L: 117,
+                  L: 166,
                   S: this,
                   C: (f, a) => f(...a)
                 });
@@ -1771,12 +1811,12 @@ var InvitationsHandler = class {
                 error: err
               }), {
                 F: __dxlog_file7,
-                L: 120,
+                L: 169,
                 S: this,
                 C: (f, a) => f(...a)
               });
             } finally {
-              if (!invitation.multiUse) {
+              if (!multiUse) {
                 await swarmConnection.close();
                 await ctx.dispose();
               }
@@ -1792,7 +1832,7 @@ var InvitationsHandler = class {
               ...protocol.toJSON()
             }, {
               F: __dxlog_file7,
-              L: 135,
+              L: 184,
               S: this,
               C: (f, a) => f(...a)
             });
@@ -1803,7 +1843,7 @@ var InvitationsHandler = class {
           } else {
             log5.error("failed", err, {
               F: __dxlog_file7,
-              L: 138,
+              L: 187,
               S: this,
               C: (f, a) => f(...a)
             });
@@ -1817,7 +1857,7 @@ var InvitationsHandler = class {
       if (invitation.created.getTime() + invitation.lifetime * 1e3 < Date.now()) {
         log5.warn("invitation has already expired", void 0, {
           F: __dxlog_file7,
-          L: 149,
+          L: 198,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -1851,12 +1891,24 @@ var InvitationsHandler = class {
         state: Invitation3.State.CONNECTING
       });
     });
+    const observable = new CancellableInvitation({
+      initialInvitation: invitation,
+      subscriber: stream.observable,
+      onCancel: async () => {
+        stream.next({
+          ...invitation,
+          state: Invitation3.State.CANCELLED
+        });
+        await ctx.dispose();
+      }
+    });
+    return observable;
   }
   acceptInvitation(protocol, invitation, deviceProfile) {
     const { timeout = INVITATION_TIMEOUT } = invitation;
     invariant6(protocol, void 0, {
       F: __dxlog_file7,
-      L: 191,
+      L: 252,
       S: this,
       A: [
         "protocol",
@@ -1866,7 +1918,7 @@ var InvitationsHandler = class {
     if (deviceProfile) {
       invariant6(invitation.kind === Invitation3.Kind.DEVICE, "deviceProfile provided for non-device invitation", {
         F: __dxlog_file7,
-        L: 194,
+        L: 255,
         S: this,
         A: [
           "invitation.kind === Invitation.Kind.DEVICE",
@@ -1881,7 +1933,7 @@ var InvitationsHandler = class {
     const setState = (newData) => {
       invariant6(newData.state !== void 0, void 0, {
         F: __dxlog_file7,
-        L: 205,
+        L: 266,
         S: this,
         A: [
           "newData.state !== undefined",
@@ -1901,7 +1953,7 @@ var InvitationsHandler = class {
             ...protocol.toJSON()
           }, {
             F: __dxlog_file7,
-            L: 213,
+            L: 274,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1911,7 +1963,7 @@ var InvitationsHandler = class {
         } else {
           log5.warn("auth failed", err, {
             F: __dxlog_file7,
-            L: 216,
+            L: 277,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1925,7 +1977,7 @@ var InvitationsHandler = class {
         ...protocol.toJSON()
       }, {
         F: __dxlog_file7,
-        L: 224,
+        L: 285,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -1940,7 +1992,7 @@ var InvitationsHandler = class {
               currentState
             }, {
               F: __dxlog_file7,
-              L: 234,
+              L: 295,
               S: this,
               C: (f, a) => f(...a)
             });
@@ -1955,7 +2007,7 @@ var InvitationsHandler = class {
                 id: traceId
               }), {
                 F: __dxlog_file7,
-                L: 243,
+                L: 304,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1967,7 +2019,7 @@ var InvitationsHandler = class {
                 ...protocol.toJSON()
               }, {
                 F: __dxlog_file7,
-                L: 251,
+                L: 312,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1978,7 +2030,7 @@ var InvitationsHandler = class {
                 ...protocol.toJSON()
               }, {
                 F: __dxlog_file7,
-                L: 255,
+                L: 316,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1988,7 +2040,7 @@ var InvitationsHandler = class {
                 response: introductionResponse
               }, {
                 F: __dxlog_file7,
-                L: 259,
+                L: 320,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -2009,7 +2061,7 @@ var InvitationsHandler = class {
                 ...protocol.toJSON()
               }, {
                 F: __dxlog_file7,
-                L: 275,
+                L: 336,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -2021,7 +2073,7 @@ var InvitationsHandler = class {
                 ...protocol.toJSON()
               }, {
                 F: __dxlog_file7,
-                L: 286,
+                L: 347,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -2034,7 +2086,7 @@ var InvitationsHandler = class {
                 id: traceId
               }), {
                 F: __dxlog_file7,
-                L: 288,
+                L: 349,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -2044,7 +2096,7 @@ var InvitationsHandler = class {
                   ...protocol.toJSON()
                 }, {
                   F: __dxlog_file7,
-                  L: 291,
+                  L: 352,
                   S: this,
                   C: (f, a) => f(...a)
                 });
@@ -2054,7 +2106,7 @@ var InvitationsHandler = class {
               } else {
                 log5("auth failed", err, {
                   F: __dxlog_file7,
-                  L: 294,
+                  L: 355,
                   S: this,
                   C: (f, a) => f(...a)
                 });
@@ -2065,7 +2117,7 @@ var InvitationsHandler = class {
                 error: err
               }), {
                 F: __dxlog_file7,
-                L: 297,
+                L: 358,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -2083,7 +2135,7 @@ var InvitationsHandler = class {
               ...protocol.toJSON()
             }, {
               F: __dxlog_file7,
-              L: 308,
+              L: 369,
               S: this,
               C: (f, a) => f(...a)
             });
@@ -2093,7 +2145,7 @@ var InvitationsHandler = class {
           } else {
             log5("auth failed", err, {
               F: __dxlog_file7,
-              L: 311,
+              L: 372,
               S: this,
               C: (f, a) => f(...a)
             });
@@ -2110,7 +2162,7 @@ var InvitationsHandler = class {
       } else {
         invariant6(invitation.swarmKey, void 0, {
           F: __dxlog_file7,
-          L: 325,
+          L: 386,
           S: this,
           A: [
             "invitation.swarmKey",
@@ -2152,7 +2204,7 @@ var InvitationsHandler = class {
     for (let attempt = 1; attempt <= MAX_OTP_ATTEMPTS; attempt++) {
       log5("guest waiting for authentication code...", void 0, {
         F: __dxlog_file7,
-        L: 365,
+        L: 426,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -2162,7 +2214,7 @@ var InvitationsHandler = class {
       const authCode = await authenticated.wait(options);
       log5("sending authentication request", void 0, {
         F: __dxlog_file7,
-        L: 369,
+        L: 430,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -2183,7 +2235,7 @@ var InvitationsHandler = class {
             attempt
           }, {
             F: __dxlog_file7,
-            L: 380,
+            L: 441,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -2201,7 +2253,7 @@ var InvitationsHandler = class {
     }
     log5("sending authentication request", void 0, {
       F: __dxlog_file7,
-      L: 399,
+      L: 460,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2237,8 +2289,9 @@ var InvitationsServiceImpl = class {
     return {};
   }
   createInvitation(options) {
+    const invitation = this._invitationsManager.createInvitation(options);
     return new Stream8(({ next, close }) => {
-      void this._invitationsManager.createInvitation(options).then((invitation) => invitation.subscribe(next, close, close)).catch(close);
+      invitation.subscribe(next, close, close);
     });
   }
   acceptInvitation(request) {
@@ -2323,13 +2376,12 @@ var InvitationsServiceImpl = class {
 };
 
 // packages/sdk/client-services/src/packlets/invitations/space-invitation-protocol.ts
-import { createAdmissionCredentials, createDelegatedSpaceInvitationCredential, getCredentialAssertion } from "@dxos/credentials";
+import { createAdmissionCredentials, getCredentialAssertion } from "@dxos/credentials";
 import { writeMessages as writeMessages2 } from "@dxos/feed-store";
 import { invariant as invariant7 } from "@dxos/invariant";
 import { log as log6 } from "@dxos/log";
 import { AlreadyJoinedError as AlreadyJoinedError2 } from "@dxos/protocols";
 import { Invitation as Invitation4 } from "@dxos/protocols/proto/dxos/client/services";
-import { SpaceMember } from "@dxos/protocols/proto/dxos/halo/credentials";
 var __dxlog_file8 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/space-invitation-protocol.ts";
 var SpaceInvitationProtocol = class {
   constructor(_spaceManager, _signingContext, _keyring, _spaceKey) {
@@ -2350,10 +2402,10 @@ var SpaceInvitationProtocol = class {
       spaceKey: this._spaceKey
     };
   }
-  async admit(invitation, request, guestProfile) {
+  async admit(request, guestProfile) {
     invariant7(this._spaceKey, void 0, {
       F: __dxlog_file8,
-      L: 55,
+      L: 47,
       S: this,
       A: [
         "this._spaceKey",
@@ -2363,7 +2415,7 @@ var SpaceInvitationProtocol = class {
     const space = await this._spaceManager.spaces.get(this._spaceKey);
     invariant7(space, void 0, {
       F: __dxlog_file8,
-      L: 57,
+      L: 49,
       S: this,
       A: [
         "space",
@@ -2372,7 +2424,7 @@ var SpaceInvitationProtocol = class {
     });
     invariant7(request.space, void 0, {
       F: __dxlog_file8,
-      L: 59,
+      L: 51,
       S: this,
       A: [
         "request.space",
@@ -2385,14 +2437,14 @@ var SpaceInvitationProtocol = class {
       guest: deviceKey
     }, {
       F: __dxlog_file8,
-      L: 62,
+      L: 54,
       S: this,
       C: (f, a) => f(...a)
     });
-    const credentials = await createAdmissionCredentials(this._signingContext.credentialSigner, identityKey, space.key, space.inner.genesisFeedKey, guestProfile, invitation.delegationCredentialId);
+    const credentials = await createAdmissionCredentials(this._signingContext.credentialSigner, identityKey, space.key, space.inner.genesisFeedKey, guestProfile);
     invariant7(credentials[0].credential, void 0, {
       F: __dxlog_file8,
-      L: 74,
+      L: 65,
       S: this,
       A: [
         "credentials[0].credential",
@@ -2402,7 +2454,7 @@ var SpaceInvitationProtocol = class {
     const spaceMemberCredential = credentials[0].credential.credential;
     invariant7(getCredentialAssertion(spaceMemberCredential)["@type"] === "dxos.halo.credentials.SpaceMember", void 0, {
       F: __dxlog_file8,
-      L: 76,
+      L: 67,
       S: this,
       A: [
         "getCredentialAssertion(spaceMemberCredential)['@type'] === 'dxos.halo.credentials.SpaceMember'",
@@ -2417,69 +2469,6 @@ var SpaceInvitationProtocol = class {
       }
     };
   }
-  async delegate(invitation) {
-    invariant7(this._spaceKey, void 0, {
-      F: __dxlog_file8,
-      L: 89,
-      S: this,
-      A: [
-        "this._spaceKey",
-        ""
-      ]
-    });
-    const space = await this._spaceManager.spaces.get(this._spaceKey);
-    invariant7(space, void 0, {
-      F: __dxlog_file8,
-      L: 91,
-      S: this,
-      A: [
-        "space",
-        ""
-      ]
-    });
-    if (invitation.authMethod === Invitation4.AuthMethod.KNOWN_PUBLIC_KEY) {
-      invariant7(invitation.guestKeypair?.publicKey, void 0, {
-        F: __dxlog_file8,
-        L: 93,
-        S: this,
-        A: [
-          "invitation.guestKeypair?.publicKey",
-          ""
-        ]
-      });
-    }
-    log6("writing delegate space invitation", {
-      host: this._signingContext.deviceKey,
-      id: invitation.invitationId
-    }, {
-      F: __dxlog_file8,
-      L: 96,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    const credential = await createDelegatedSpaceInvitationCredential(this._signingContext.credentialSigner, space.key, {
-      invitationId: invitation.invitationId,
-      authMethod: invitation.authMethod,
-      swarmKey: invitation.swarmKey,
-      role: SpaceMember.Role.ADMIN,
-      expiresOn: invitation.lifetime ? new Date((invitation.created?.getTime() ?? Date.now()) + invitation.lifetime) : void 0,
-      multiUse: invitation.multiUse ?? false,
-      guestKey: invitation.authMethod === Invitation4.AuthMethod.KNOWN_PUBLIC_KEY ? invitation.guestKeypair.publicKey : void 0
-    });
-    invariant7(credential.credential, void 0, {
-      F: __dxlog_file8,
-      L: 116,
-      S: this,
-      A: [
-        "credential.credential",
-        ""
-      ]
-    });
-    await writeMessages2(space.inner.controlPipeline.writer, [
-      credential
-    ]);
-    return credential.credential.credential.id;
-  }
   checkInvitation(invitation) {
     if (invitation.spaceKey && this._spaceManager.spaces.has(invitation.spaceKey)) {
       return new AlreadyJoinedError2("Already joined space.");
@@ -2505,7 +2494,7 @@ var SpaceInvitationProtocol = class {
   async accept(response) {
     invariant7(response.space, void 0, {
       F: __dxlog_file8,
-      L: 149,
+      L: 107,
       S: this,
       A: [
         "response.space",
@@ -2516,7 +2505,7 @@ var SpaceInvitationProtocol = class {
     const assertion = getCredentialAssertion(credential);
     invariant7(assertion["@type"] === "dxos.halo.credentials.SpaceMember", "Invalid credential", {
       F: __dxlog_file8,
-      L: 152,
+      L: 110,
       S: this,
       A: [
         "assertion['@type'] === 'dxos.halo.credentials.SpaceMember'",
@@ -2525,7 +2514,7 @@ var SpaceInvitationProtocol = class {
     });
     invariant7(credential.subject.id.equals(this._signingContext.identityKey), void 0, {
       F: __dxlog_file8,
-      L: 153,
+      L: 111,
       S: this,
       A: [
         "credential.subject.id.equals(this._signingContext.identityKey)",
@@ -2549,15 +2538,10 @@ var SpaceInvitationProtocol = class {
 };
 
 // packages/sdk/client-services/src/packlets/invitations/invitations-manager.ts
-import { Event as Event3, PushStream as PushStream2 } from "@dxos/async";
-import { AUTHENTICATION_CODE_LENGTH, CancellableInvitation, INVITATION_TIMEOUT as INVITATION_TIMEOUT2 } from "@dxos/client-protocol";
-import { Context as Context6 } from "@dxos/context";
-import { generatePasscode } from "@dxos/credentials";
+import { Event as Event3 } from "@dxos/async";
 import { hasInvitationExpired } from "@dxos/echo-pipeline";
 import { invariant as invariant8 } from "@dxos/invariant";
-import { PublicKey as PublicKey7 } from "@dxos/keys";
 import { log as log7 } from "@dxos/log";
-import { Invitation as Invitation5 } from "@dxos/protocols/proto/dxos/client/services";
 var __dxlog_file9 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/invitations-manager.ts";
 var InvitationsManager = class {
   constructor(_invitationsHandler, _getHandler, _metadataStore) {
@@ -2574,39 +2558,25 @@ var InvitationsManager = class {
     this._persistentInvitationsLoadedEvent = new Event3();
     this._persistentInvitationsLoaded = false;
   }
-  async createInvitation(options) {
-    if (options.invitationId) {
-      const existingInvitation = this._createInvitations.get(options.invitationId);
-      if (existingInvitation) {
-        return existingInvitation;
-      }
+  createInvitation(options) {
+    const existingInvitation = this._createInvitations.get(options.invitationId);
+    if (existingInvitation) {
+      return existingInvitation;
     }
     const handler = this._getHandler(options);
-    const invitation = this._createInvitation(handler, options);
-    const { ctx, stream, observableInvitation } = this._createObservableInvitation(handler, invitation);
-    this._createInvitations.set(invitation.invitationId, observableInvitation);
-    this.invitationCreated.emit(invitation);
-    this._onInvitationComplete(observableInvitation, async () => {
-      this._createInvitations.delete(observableInvitation.get().invitationId);
-      this.removedCreated.emit(observableInvitation.get());
-      if (observableInvitation.get().persistent) {
-        await this._safeDeleteInvitation(observableInvitation.get());
+    const invitation = this._invitationsHandler.createInvitation(handler, options);
+    this._createInvitations.set(invitation.get().invitationId, invitation);
+    this.invitationCreated.emit(invitation.get());
+    const saveInvitationTask = invitation.get().persistent ? this._safePersistInBackground(invitation) : Promise.resolve();
+    this._onInvitationComplete(invitation, async () => {
+      this._createInvitations.delete(invitation.get().invitationId);
+      this.removedCreated.emit(invitation.get());
+      if (invitation.get().persistent) {
+        await saveInvitationTask;
+        await this._safeDeleteInvitation(invitation.get());
       }
     });
-    try {
-      await this._persistIfRequired(handler, stream, invitation);
-    } catch (err) {
-      log7.catch(err, void 0, {
-        F: __dxlog_file9,
-        L: 76,
-        S: this,
-        C: (f, a) => f(...a)
-      });
-      await observableInvitation.cancel();
-      return observableInvitation;
-    }
-    this._invitationsHandler.handleInvitationFlow(ctx, stream, handler, observableInvitation.get());
-    return observableInvitation;
+    return invitation;
   }
   async loadPersistentInvitations() {
     if (this._persistentInvitationsLoaded) {
@@ -2618,10 +2588,10 @@ var InvitationsManager = class {
     try {
       const persistentInvitations = this._metadataStore.getInvitations();
       const freshInvitations = persistentInvitations.filter((invitation) => !hasInvitationExpired(invitation));
-      const loadTasks = freshInvitations.map((persistentInvitation) => {
+      const cInvitations = freshInvitations.map((persistentInvitation) => {
         invariant8(!this._createInvitations.get(persistentInvitation.invitationId), "invitation already exists", {
           F: __dxlog_file9,
-          L: 97,
+          L: 82,
           S: this,
           A: [
             "!this._createInvitations.get(persistentInvitation.invitationId)",
@@ -2631,16 +2601,15 @@ var InvitationsManager = class {
         return this.createInvitation({
           ...persistentInvitation,
           persistent: false
-        });
+        }).get();
       });
-      const cInvitations = await Promise.all(loadTasks);
       return {
-        invitations: cInvitations.map((invitation) => invitation.get())
+        invitations: cInvitations
       };
     } catch (err) {
       log7.catch(err, void 0, {
         F: __dxlog_file9,
-        L: 104,
+        L: 88,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -2671,13 +2640,13 @@ var InvitationsManager = class {
   async authenticate({ invitationId, authCode }) {
     log7("authenticating...", void 0, {
       F: __dxlog_file9,
-      L: 133,
+      L: 117,
       S: this,
       C: (f, a) => f(...a)
     });
     invariant8(invitationId, void 0, {
       F: __dxlog_file9,
-      L: 134,
+      L: 118,
       S: this,
       A: [
         "invitationId",
@@ -2690,7 +2659,7 @@ var InvitationsManager = class {
         invitationId
       }, {
         F: __dxlog_file9,
-        L: 137,
+        L: 121,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -2703,13 +2672,13 @@ var InvitationsManager = class {
       invitationId
     }, {
       F: __dxlog_file9,
-      L: 144,
+      L: 128,
       S: this,
       C: (f, a) => f(...a)
     });
     invariant8(invitationId, void 0, {
       F: __dxlog_file9,
-      L: 145,
+      L: 129,
       S: this,
       A: [
         "invitationId",
@@ -2750,73 +2719,25 @@ var InvitationsManager = class {
       this._persistentInvitationsLoadedEvent.once(ctx, () => callback());
     }
   }
-  _createInvitation(protocol, options) {
-    const { invitationId = PublicKey7.random().toHex(), type = Invitation5.Type.INTERACTIVE, authMethod = Invitation5.AuthMethod.SHARED_SECRET, state = Invitation5.State.INIT, timeout = INVITATION_TIMEOUT2, swarmKey = PublicKey7.random(), persistent = options?.authMethod !== Invitation5.AuthMethod.KNOWN_PUBLIC_KEY, created = /* @__PURE__ */ new Date(), guestKeypair = void 0, lifetime = 86400, multiUse = false } = options ?? {};
-    const authCode = options?.authCode ?? (authMethod === Invitation5.AuthMethod.SHARED_SECRET ? generatePasscode(AUTHENTICATION_CODE_LENGTH) : void 0);
-    return {
-      invitationId,
-      type,
-      authMethod,
-      state,
-      swarmKey,
-      authCode,
-      timeout,
-      persistent: persistent && type !== Invitation5.Type.DELEGATED,
-      guestKeypair: guestKeypair ?? (authMethod === Invitation5.AuthMethod.KNOWN_PUBLIC_KEY ? createAdmissionKeypair() : void 0),
-      created,
-      lifetime,
-      multiUse,
-      delegationCredentialId: options?.delegationCredentialId,
-      ...protocol.getInvitationContext()
-    };
-  }
-  _createObservableInvitation(handler, invitation) {
-    const stream = new PushStream2();
-    const ctx = new Context6({
-      onError: (err) => {
-        stream.error(err);
-        void ctx.dispose();
-      }
-    });
-    ctx.onDispose(() => {
-      log7("complete", {
-        ...handler.toJSON()
-      }, {
-        F: __dxlog_file9,
-        L: 228,
-        S: this,
-        C: (f, a) => f(...a)
+  _safePersistInBackground(invitation) {
+    return new Promise((resolve) => {
+      setTimeout(async () => {
+        try {
+          await this._metadataStore.addInvitation(invitation.get());
+          this.saved.emit(invitation.get());
+        } catch (err) {
+          log7.catch(err, void 0, {
+            F: __dxlog_file9,
+            L: 173,
+            S: this,
+            C: (f, a) => f(...a)
+          });
+          await invitation.cancel();
+        } finally {
+          resolve();
+        }
       });
-      stream.complete();
     });
-    const observableInvitation = new CancellableInvitation({
-      initialInvitation: invitation,
-      subscriber: stream.observable,
-      onCancel: async () => {
-        stream.next({
-          ...invitation,
-          state: Invitation5.State.CANCELLED
-        });
-        await ctx.dispose();
-      }
-    });
-    return {
-      ctx,
-      stream,
-      observableInvitation
-    };
-  }
-  async _persistIfRequired(handler, changeStream, invitation) {
-    if (invitation.type === Invitation5.Type.DELEGATED && invitation.delegationCredentialId == null) {
-      const delegationCredentialId = await handler.delegate(invitation);
-      changeStream.next({
-        ...invitation,
-        delegationCredentialId
-      });
-    } else if (invitation.persistent) {
-      await this._metadataStore.addInvitation(invitation);
-      this.saved.emit(invitation);
-    }
   }
   async _safeDeleteInvitation(invitation) {
     try {
@@ -2824,7 +2745,7 @@ var InvitationsManager = class {
     } catch (err) {
       log7.catch(err, void 0, {
         F: __dxlog_file9,
-        L: 260,
+        L: 186,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -2921,13 +2842,13 @@ ClientRpcServer = _ts_decorate3([
 // packages/sdk/client-services/src/packlets/spaces/data-space.ts
 import { Event as Event6, asyncTimeout, scheduleTask as scheduleTask4, sleep as sleep2, synchronized, trackLeaks } from "@dxos/async";
 import { AUTH_TIMEOUT as AUTH_TIMEOUT2 } from "@dxos/client-protocol";
-import { cancelWithContext as cancelWithContext2, Context as Context8, ContextDisposedError } from "@dxos/context";
+import { cancelWithContext as cancelWithContext2, Context as Context7, ContextDisposedError } from "@dxos/context";
 import { timed, warnAfterTimeout } from "@dxos/debug";
 import { createMappedFeedWriter } from "@dxos/echo-pipeline";
 import { AutomergeDocumentLoaderImpl } from "@dxos/echo-pipeline";
 import { TYPE_PROPERTIES } from "@dxos/echo-schema";
 import { failedInvariant, invariant as invariant10 } from "@dxos/invariant";
-import { PublicKey as PublicKey9 } from "@dxos/keys";
+import { PublicKey as PublicKey8 } from "@dxos/keys";
 import { log as log9 } from "@dxos/log";
 import { CancelledError, SystemError } from "@dxos/protocols";
 import { SpaceState, CreateEpochRequest } from "@dxos/protocols/proto/dxos/client/services";
@@ -2976,9 +2897,9 @@ var AutomergeSpaceState = class {
 
 // packages/sdk/client-services/src/packlets/spaces/notarization-plugin.ts
 import { DeferredTask, Event as Event5, scheduleTask as scheduleTask3, sleep, TimeoutError as TimeoutError2, Trigger as Trigger4 } from "@dxos/async";
-import { Context as Context7, rejectOnDispose } from "@dxos/context";
+import { Context as Context6, rejectOnDispose } from "@dxos/context";
 import { invariant as invariant9 } from "@dxos/invariant";
-import { PublicKey as PublicKey8 } from "@dxos/keys";
+import { PublicKey as PublicKey7 } from "@dxos/keys";
 import { log as log8 } from "@dxos/log";
 import { schema as schema3 } from "@dxos/protocols";
 import { RpcExtension as RpcExtension2 } from "@dxos/teleport";
@@ -2990,11 +2911,11 @@ var DEFAULT_NOTARIZE_TIMEOUT = 1e4;
 var WRITER_NOT_SET_ERROR_CODE = "WRITER_NOT_SET";
 var NotarizationPlugin = class {
   constructor() {
-    this._ctx = new Context7();
+    this._ctx = new Context6();
     this._extensionOpened = new Event5();
     this._extensions = /* @__PURE__ */ new Set();
-    this._processedCredentials = new ComplexSet2(PublicKey8.hash);
-    this._processCredentialsTriggers = new ComplexMap2(PublicKey8.hash);
+    this._processedCredentials = new ComplexSet2(PublicKey7.hash);
+    this._processCredentialsTriggers = new ComplexMap2(PublicKey7.hash);
   }
   get hasWriter() {
     return !!this._writer;
@@ -3256,7 +3177,7 @@ function _ts_decorate4(decorators, target, key, desc) {
 var __dxlog_file11 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/data-space.ts";
 var DataSpace = class {
   constructor(params) {
-    this._ctx = new Context8();
+    this._ctx = new Context7();
     this._notarizationPlugin = new NotarizationPlugin();
     this._cache = void 0;
     // TODO(dmaretskyi): Move into Space?
@@ -3279,7 +3200,7 @@ var DataSpace = class {
     this._callbacks = params.callbacks ?? {};
     this._automergeHost = params.automergeHost;
     this.authVerifier = new TrustedKeySetAuthVerifier({
-      trustedKeysProvider: () => new ComplexSet3(PublicKey9.hash, Array.from(this._inner.spaceState.members.values()).filter((member) => !member.removed).map((member) => member.key)),
+      trustedKeysProvider: () => new ComplexSet3(PublicKey8.hash, Array.from(this._inner.spaceState.members.values()).filter((member) => !member.removed).map((member) => member.key)),
       update: this._inner.stateUpdate,
       authTimeout: AUTH_TIMEOUT2
     });
@@ -3333,7 +3254,7 @@ var DataSpace = class {
     await this._notarizationPlugin.open();
     await this._inner.spaceState.addCredentialProcessor(this._notarizationPlugin);
     await this._inner.spaceState.addCredentialProcessor(this._automergeSpaceState);
-    await this._inner.open(new Context8());
+    await this._inner.open(new Context7());
     this._state = SpaceState.CONTROL_ONLY;
     log9("new state", {
       state: SpaceState[this._state]
@@ -3362,7 +3283,7 @@ var DataSpace = class {
       C: (f, a) => f(...a)
     });
     await this._ctx.dispose();
-    this._ctx = new Context8();
+    this._ctx = new Context7();
     await this.authVerifier.close();
     await this._inner.close();
     await this._inner.spaceState.removeCredentialProcessor(this._automergeSpaceState);
@@ -3783,20 +3704,20 @@ DataSpace = _ts_decorate4([
 
 // packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts
 import { Event as Event7, synchronized as synchronized2, trackLeaks as trackLeaks2 } from "@dxos/async";
-import { Context as Context9, cancelWithContext as cancelWithContext3 } from "@dxos/context";
+import { Context as Context8, cancelWithContext as cancelWithContext3 } from "@dxos/context";
 import { getCredentialAssertion as getCredentialAssertion2 } from "@dxos/credentials";
 import { invariant as invariant11 } from "@dxos/invariant";
-import { PublicKey as PublicKey10 } from "@dxos/keys";
+import { PublicKey as PublicKey9 } from "@dxos/keys";
 import { log as log10 } from "@dxos/log";
 import { trace as trace7 } from "@dxos/protocols";
-import { Invitation as Invitation6, SpaceState as SpaceState2 } from "@dxos/protocols/proto/dxos/client/services";
+import { SpaceState as SpaceState2 } from "@dxos/protocols/proto/dxos/client/services";
 import { Gossip as Gossip2, Presence as Presence2 } from "@dxos/teleport-extension-gossip";
 import { ComplexMap as ComplexMap3, deferFunction as deferFunction2, forEachAsync } from "@dxos/util";
 
 // packages/sdk/client-services/src/packlets/spaces/genesis.ts
 import { createCredential } from "@dxos/credentials";
 import { failUndefined } from "@dxos/debug";
-import { AdmittedFeed as AdmittedFeed4, SpaceMember as SpaceMember2 } from "@dxos/protocols/proto/dxos/halo/credentials";
+import { AdmittedFeed as AdmittedFeed4, SpaceMember } from "@dxos/protocols/proto/dxos/halo/credentials";
 import { Timeframe as Timeframe3 } from "@dxos/timeframe";
 var spaceGenesis = async (keyring, signingContext, space, automergeRoot) => {
   const credentials = [
@@ -3816,7 +3737,7 @@ var spaceGenesis = async (keyring, signingContext, space, automergeRoot) => {
       assertion: {
         "@type": "dxos.halo.credentials.SpaceMember",
         spaceKey: space.key,
-        role: SpaceMember2.Role.ADMIN,
+        role: SpaceMember.Role.ADMIN,
         profile: signingContext.getProfile(),
         genesisFeedKey: space.controlFeedKey ?? failUndefined()
       }
@@ -3878,19 +3799,18 @@ var __dxlog_file12 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/s
 var PRESENCE_ANNOUNCE_INTERVAL = 1e4;
 var PRESENCE_OFFLINE_TIMEOUT = 2e4;
 var DataSpaceManager = class {
-  constructor(_spaceManager, _metadataStore, _keyring, _signingContext, _feedStore, _automergeHost, _invitationsManager, params) {
+  constructor(_spaceManager, _metadataStore, _keyring, _signingContext, _feedStore, _automergeHost, params) {
     this._spaceManager = _spaceManager;
     this._metadataStore = _metadataStore;
     this._keyring = _keyring;
     this._signingContext = _signingContext;
     this._feedStore = _feedStore;
     this._automergeHost = _automergeHost;
-    this._invitationsManager = _invitationsManager;
-    this._ctx = new Context9();
+    this._ctx = new Context8();
     this.updated = new Event7();
-    this._spaces = new ComplexMap3(PublicKey10.hash);
+    this._spaces = new ComplexMap3(PublicKey9.hash);
     this._isOpen = false;
-    this._instanceId = PublicKey10.random().toHex();
+    this._instanceId = PublicKey9.random().toHex();
     const { spaceMemberPresenceAnnounceInterval = PRESENCE_ANNOUNCE_INTERVAL, spaceMemberPresenceOfflineTimeout = PRESENCE_OFFLINE_TIMEOUT } = params ?? {};
     this._spaceMemberPresenceAnnounceInterval = spaceMemberPresenceAnnounceInterval;
     this._spaceMemberPresenceOfflineTimeout = spaceMemberPresenceOfflineTimeout;
@@ -3902,7 +3822,7 @@ var DataSpaceManager = class {
   async open() {
     log10("open", void 0, {
       F: __dxlog_file12,
-      L: 101,
+      L: 98,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3910,7 +3830,7 @@ var DataSpaceManager = class {
       id: this._instanceId
     }), {
       F: __dxlog_file12,
-      L: 102,
+      L: 99,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3918,7 +3838,7 @@ var DataSpaceManager = class {
       spaces: this._metadataStore.spaces.length
     }, {
       F: __dxlog_file12,
-      L: 103,
+      L: 100,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3928,7 +3848,7 @@ var DataSpaceManager = class {
           spaceMetadata
         }, {
           F: __dxlog_file12,
-          L: 107,
+          L: 104,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -3939,7 +3859,7 @@ var DataSpaceManager = class {
           err
         }, {
           F: __dxlog_file12,
-          L: 110,
+          L: 107,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -3956,7 +3876,7 @@ var DataSpaceManager = class {
       id: this._instanceId
     }), {
       F: __dxlog_file12,
-      L: 123,
+      L: 120,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3964,7 +3884,7 @@ var DataSpaceManager = class {
   async close() {
     log10("close", void 0, {
       F: __dxlog_file12,
-      L: 128,
+      L: 125,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3980,7 +3900,7 @@ var DataSpaceManager = class {
   async createSpace() {
     invariant11(this._isOpen, "Not open.", {
       F: __dxlog_file12,
-      L: 141,
+      L: 138,
       S: this,
       A: [
         "this._isOpen",
@@ -4001,7 +3921,7 @@ var DataSpaceManager = class {
       spaceKey
     }, {
       F: __dxlog_file12,
-      L: 153,
+      L: 150,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4017,7 +3937,7 @@ var DataSpaceManager = class {
     const memberCredential = credentials[1];
     invariant11(getCredentialAssertion2(memberCredential)["@type"] === "dxos.halo.credentials.SpaceMember", void 0, {
       F: __dxlog_file12,
-      L: 166,
+      L: 163,
       S: this,
       A: [
         "getCredentialAssertion(memberCredential)['@type'] === 'dxos.halo.credentials.SpaceMember'",
@@ -4035,13 +3955,13 @@ var DataSpaceManager = class {
       opts
     }, {
       F: __dxlog_file12,
-      L: 178,
+      L: 175,
       S: this,
       C: (f, a) => f(...a)
     });
     invariant11(this._isOpen, "Not open.", {
       F: __dxlog_file12,
-      L: 179,
+      L: 176,
       S: this,
       A: [
         "this._isOpen",
@@ -4050,7 +3970,7 @@ var DataSpaceManager = class {
     });
     invariant11(!this._spaces.has(opts.spaceKey), "Space already exists.", {
       F: __dxlog_file12,
-      L: 180,
+      L: 177,
       S: this,
       A: [
         "!this._spaces.has(opts.spaceKey)",
@@ -4085,7 +4005,7 @@ var DataSpaceManager = class {
       metadata
     }, {
       F: __dxlog_file12,
-      L: 213,
+      L: 210,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4123,15 +4043,12 @@ var DataSpaceManager = class {
       onAuthFailure: () => {
         log10.warn("auth failure", void 0, {
           F: __dxlog_file12,
-          L: 250,
+          L: 247,
           S: this,
           C: (f, a) => f(...a)
         });
       },
-      memberKey: this._signingContext.identityKey,
-      onDelegatedInvitationStatusChange: (invitation, isActive) => {
-        return this._handleInvitationStatusChange(dataSpace, invitation, isActive);
-      }
+      memberKey: this._signingContext.identityKey
     });
     controlFeed && await space.setControlFeed(controlFeed);
     dataFeed && await space.setDataFeed(dataFeed);
@@ -4150,7 +4067,7 @@ var DataSpaceManager = class {
             space: space.key
           }, {
             F: __dxlog_file12,
-            L: 271,
+            L: 265,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -4161,14 +4078,11 @@ var DataSpaceManager = class {
             open: this._isOpen
           }, {
             F: __dxlog_file12,
-            L: 274,
+            L: 268,
             S: this,
             C: (f, a) => f(...a)
           });
           if (this._isOpen) {
-            await this._createDelegatedInvitations(dataSpace, [
-              ...space.spaceState.invitations.entries()
-            ]);
             this.updated.emit();
           }
         },
@@ -4177,7 +4091,7 @@ var DataSpaceManager = class {
             space: space.key
           }, {
             F: __dxlog_file12,
-            L: 281,
+            L: 274,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -4195,41 +4109,6 @@ var DataSpaceManager = class {
     this._spaces.set(metadata.key, dataSpace);
     return dataSpace;
   }
-  async _handleInvitationStatusChange(dataSpace, delegatedInvitation, isActive) {
-    if (dataSpace?.state !== SpaceState2.READY) {
-      return;
-    }
-    if (isActive) {
-      await this._createDelegatedInvitations(dataSpace, [
-        [
-          delegatedInvitation.credentialId,
-          delegatedInvitation.invitation
-        ]
-      ]);
-    } else {
-      await this._invitationsManager.cancelInvitation(delegatedInvitation.invitation);
-    }
-  }
-  async _createDelegatedInvitations(space, invitations) {
-    const tasks = invitations.map(([credentialId, invitation]) => {
-      return this._invitationsManager.createInvitation({
-        type: Invitation6.Type.DELEGATED,
-        kind: Invitation6.Kind.SPACE,
-        spaceKey: space.key,
-        authMethod: invitation.authMethod,
-        invitationId: invitation.invitationId,
-        swarmKey: invitation.swarmKey,
-        guestKeypair: invitation.guestKey ? {
-          publicKey: invitation.guestKey
-        } : void 0,
-        lifetime: invitation.expiresOn ? invitation.expiresOn.getTime() - Date.now() : void 0,
-        multiUse: invitation.multiUse,
-        delegationCredentialId: credentialId,
-        persistent: false
-      });
-    });
-    await Promise.all(tasks);
-  }
 };
 _ts_decorate5([
   synchronized2
@@ -4254,7 +4133,7 @@ import { raise as raise2 } from "@dxos/debug";
 import { invariant as invariant12 } from "@dxos/invariant";
 import { log as log11 } from "@dxos/log";
 import { ApiError, SpaceNotFoundError, encodeError } from "@dxos/protocols";
-import { SpaceMember as SpaceMember3, SpaceState as SpaceState3 } from "@dxos/protocols/proto/dxos/client/services";
+import { SpaceMember as SpaceMember2, SpaceState as SpaceState3 } from "@dxos/protocols/proto/dxos/client/services";
 var __dxlog_file13 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/spaces-service.ts";
 var SpacesServiceImpl = class {
   constructor(_identityManager, _spaceManager, _getDataSpaceManager) {
@@ -4452,7 +4331,7 @@ var SpacesServiceImpl = class {
             identityKey: member.key,
             profile: member.profile ?? {}
           },
-          presence: member.removed ? SpaceMember3.PresenceState.REMOVED : isMe || peers.length > 0 ? SpaceMember3.PresenceState.ONLINE : SpaceMember3.PresenceState.OFFLINE,
+          presence: member.removed ? SpaceMember2.PresenceState.REMOVED : isMe || peers.length > 0 ? SpaceMember2.PresenceState.ONLINE : SpaceMember2.PresenceState.OFFLINE,
           peerStates: peers
         };
       }),
@@ -4466,7 +4345,7 @@ var getChannelId = (channel) => `user-channel/${channel}`;
 
 // packages/sdk/client-services/src/packlets/services/service-context.ts
 import { Trigger as Trigger5 } from "@dxos/async";
-import { Context as Context10, Resource } from "@dxos/context";
+import { Context as Context9, Resource } from "@dxos/context";
 import { getCredentialAssertion as getCredentialAssertion3 } from "@dxos/credentials";
 import { failUndefined as failUndefined2 } from "@dxos/debug";
 import { AutomergeHost, MetadataStore, SnapshotStore, SpaceManager, valueEncoding } from "@dxos/echo-pipeline";
@@ -4474,10 +4353,10 @@ import { FeedFactory, FeedStore } from "@dxos/feed-store";
 import { IndexMetadataStore, IndexStore, Indexer, createStorageCallbacks } from "@dxos/indexing";
 import { invariant as invariant13 } from "@dxos/invariant";
 import { Keyring } from "@dxos/keyring";
-import { PublicKey as PublicKey11 } from "@dxos/keys";
+import { PublicKey as PublicKey10 } from "@dxos/keys";
 import { log as log12 } from "@dxos/log";
 import { InvalidStorageVersionError, STORAGE_VERSION, trace as trace8 } from "@dxos/protocols";
-import { Invitation as Invitation7 } from "@dxos/protocols/proto/dxos/client/services";
+import { Invitation as Invitation5 } from "@dxos/protocols/proto/dxos/client/services";
 import { BlobStore } from "@dxos/teleport-extension-object-sync";
 import { trace as Trace2 } from "@dxos/tracing";
 import { safeInstanceof } from "@dxos/util";
@@ -4510,6 +4389,59 @@ var createSelectedDocumentsIterator = (automergeHost) => (
     }
   }
 );
+var createDocumentsIterator = (automergeHost) => (
+  /**
+  * Recursively get all object data blobs from Automerge Repo.
+  * @param ids
+  */
+  // TODO(mykola): Unload automerge handles after usage.
+  async function* getAllDocuments() {
+    const visited = /* @__PURE__ */ new Set();
+    async function* getObjectsFromHandle(handle) {
+      if (visited.has(handle.documentId)) {
+        return;
+      }
+      if (!handle.isReady()) {
+        await handle.whenReady();
+      }
+      const doc = handle.docSync();
+      const heads = getHeads(doc);
+      if (doc.objects) {
+        yield Object.entries(doc.objects).map(([objectId, object]) => {
+          return {
+            id: idCodec.encode({
+              documentId: handle.documentId,
+              objectId
+            }),
+            object,
+            currentHash: heads.join("")
+          };
+        });
+      }
+      if (doc.links) {
+        for (const id of Object.values(doc.links)) {
+          if (visited.has(id)) {
+            continue;
+          }
+          const linkHandle = automergeHost.repo.handles[id] ?? automergeHost.repo.find(id);
+          for await (const result of getObjectsFromHandle(linkHandle)) {
+            yield result;
+          }
+        }
+      }
+      visited.add(handle.documentId);
+    }
+    for (const handle of Object.values(automergeHost.repo.handles)) {
+      if (visited.has(handle.documentId)) {
+        continue;
+      }
+      for await (const result of getObjectsFromHandle(handle)) {
+        yield result;
+      }
+      visited.add(handle.documentId);
+    }
+  }
+);
 
 // packages/sdk/client-services/src/packlets/services/service-context.ts
 function _ts_decorate6(decorators, target, key, desc) {
@@ -4533,7 +4465,7 @@ var ServiceContext = class extends Resource {
     this._runtimeParams = _runtimeParams;
     this.initialized = new Trigger5();
     this._handlerFactories = /* @__PURE__ */ new Map();
-    this._instanceId = PublicKey11.random().toHex();
+    this._instanceId = PublicKey10.random().toHex();
     this.metadataStore = new MetadataStore(storage.createDirectory("metadata"));
     this.snapshotStore = new SnapshotStore(storage.createDirectory("snapshots"));
     this.blobStore = new BlobStore(storage.createDirectory("blobs"));
@@ -4568,16 +4500,16 @@ var ServiceContext = class extends Resource {
       })
     });
     this.indexer = new Indexer({
-      db: this.level,
       indexStore: new IndexStore({
         db: level.sublevel("index-storage")
       }),
       metadataStore: this.indexMetadata,
-      loadDocuments: createSelectedDocumentsIterator(this.automergeHost)
+      loadDocuments: createSelectedDocumentsIterator(this.automergeHost),
+      getAllDocuments: createDocumentsIterator(this.automergeHost)
     });
     this.invitations = new InvitationsHandler(this.networkManager);
     this.invitationsManager = new InvitationsManager(this.invitations, (invitation) => this.getInvitationHandler(invitation), this.metadataStore);
-    this._handlerFactories.set(Invitation7.Kind.DEVICE, () => new DeviceInvitationProtocol(this.keyring, () => this.identityManager.identity ?? failUndefined2(), this._acceptIdentity.bind(this)));
+    this._handlerFactories.set(Invitation5.Kind.DEVICE, () => new DeviceInvitationProtocol(this.keyring, () => this.identityManager.identity ?? failUndefined2(), this._acceptIdentity.bind(this)));
   }
   async _open(ctx) {
     await this._checkStorageVersion();
@@ -4656,7 +4588,7 @@ var ServiceContext = class extends Resource {
   }
   async createIdentity(params = {}) {
     const identity = await this.identityManager.createIdentity(params);
-    await this._initialize(new Context10());
+    await this._initialize(new Context9());
     return identity;
   }
   getInvitationHandler(invitation) {
@@ -4682,7 +4614,7 @@ var ServiceContext = class extends Resource {
   }
   async _acceptIdentity(params) {
     const identity = await this.identityManager.acceptIdentity(params);
-    await this._initialize(new Context10());
+    await this._initialize(new Context9());
     return identity;
   }
   async _checkStorageVersion() {
@@ -4713,12 +4645,12 @@ var ServiceContext = class extends Resource {
         });
       }
     };
-    this.dataSpaceManager = new DataSpaceManager(this.spaceManager, this.metadataStore, this.keyring, signingContext, this.feedStore, this.automergeHost, this.invitationsManager, this._runtimeParams);
+    this.dataSpaceManager = new DataSpaceManager(this.spaceManager, this.metadataStore, this.keyring, signingContext, this.feedStore, this.automergeHost, this._runtimeParams);
     await this.dataSpaceManager.open();
-    this._handlerFactories.set(Invitation7.Kind.SPACE, (invitation) => {
+    this._handlerFactories.set(Invitation5.Kind.SPACE, (invitation) => {
       invariant13(this.dataSpaceManager, "dataSpaceManager not initialized yet", {
         F: __dxlog_file14,
-        L: 265,
+        L: 264,
         S: this,
         A: [
           "this.dataSpaceManager",
@@ -4742,7 +4674,7 @@ var ServiceContext = class extends Resource {
             details: assertion
           }, {
             F: __dxlog_file14,
-            L: 281,
+            L: 280,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -4753,7 +4685,7 @@ var ServiceContext = class extends Resource {
             details: assertion
           }, {
             F: __dxlog_file14,
-            L: 285,
+            L: 284,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -4764,7 +4696,7 @@ var ServiceContext = class extends Resource {
             details: assertion
           }, {
             F: __dxlog_file14,
-            L: 290,
+            L: 289,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -4775,7 +4707,7 @@ var ServiceContext = class extends Resource {
         } catch (err) {
           log12.catch(err, void 0, {
             F: __dxlog_file14,
-            L: 296,
+            L: 295,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -4825,11 +4757,11 @@ import { getFirstStreamValue } from "@dxos/codec-protobuf";
 import { credentialTypeFilter } from "@dxos/credentials";
 import { invariant as invariant14 } from "@dxos/invariant";
 import { STORAGE_VERSION as STORAGE_VERSION2 } from "@dxos/protocols";
-import { SpaceMember as SpaceMember4 } from "@dxos/protocols/proto/dxos/client/services";
+import { SpaceMember as SpaceMember3 } from "@dxos/protocols/proto/dxos/client/services";
 import { TRACE_PROCESSOR } from "@dxos/tracing";
 
 // packages/sdk/client-services/src/version.ts
-var DXOS_VERSION = "0.4.10-main.fd8ea31";
+var DXOS_VERSION = "0.4.10-next.71cec10";
 
 // packages/sdk/client-services/src/packlets/services/platform.ts
 import { Platform } from "@dxos/protocols/proto/dxos/client/services";
@@ -4951,7 +4883,7 @@ var getSpaceStats = async (space) => {
           displayName: member.assertion.profile?.displayName
         }
       },
-      presence: space.presence.getPeersOnline().filter(({ identityKey }) => identityKey.equals(member.key)).length > 0 ? SpaceMember4.PresenceState.ONLINE : SpaceMember4.PresenceState.OFFLINE
+      presence: space.presence.getPeersOnline().filter(({ identityKey }) => identityKey.equals(member.key)).length > 0 ? SpaceMember3.PresenceState.ONLINE : SpaceMember3.PresenceState.OFFLINE
     })),
     pipeline: {
       // TODO(burdon): Pick properties from credentials if needed.
@@ -5072,12 +5004,12 @@ import { jsonKeyReplacer as jsonKeyReplacer2, nonNullable } from "@dxos/util";
 // packages/sdk/client-services/src/packlets/services/service-host.ts
 import { Event as Event9, synchronized as synchronized3 } from "@dxos/async";
 import { clientServiceBundle, defaultKey, Properties } from "@dxos/client-protocol";
-import { Context as Context11 } from "@dxos/context";
+import { Context as Context10 } from "@dxos/context";
 import { DataServiceImpl, encodeReference } from "@dxos/echo-pipeline";
 import { getTypeReference } from "@dxos/echo-schema";
 import { QueryServiceImpl } from "@dxos/indexing";
 import { invariant as invariant16 } from "@dxos/invariant";
-import { PublicKey as PublicKey14 } from "@dxos/keys";
+import { PublicKey as PublicKey13 } from "@dxos/keys";
 import { log as log16 } from "@dxos/log";
 import { WebsocketSignalManager } from "@dxos/messaging";
 import { NetworkManager, createSimplePeerTransportFactory } from "@dxos/network-manager";
@@ -5296,7 +5228,7 @@ var isLocked = (lockPath) => {
 // packages/sdk/client-services/src/packlets/logging/logging-service.ts
 import { Event as Event8 } from "@dxos/async";
 import { Stream as Stream12 } from "@dxos/codec-protobuf";
-import { PublicKey as PublicKey12 } from "@dxos/keys";
+import { PublicKey as PublicKey11 } from "@dxos/keys";
 import { getContextFromEntry, log as log15 } from "@dxos/log";
 import { QueryLogsRequest } from "@dxos/protocols/proto/dxos/client/services";
 import { getDebugName, jsonify, numericalValues, tracer } from "@dxos/util";
@@ -5304,7 +5236,7 @@ var LoggingServiceImpl = class {
   constructor() {
     this._logs = new Event8();
     this._started = Date.now();
-    this._sessionId = PublicKey12.random().toHex();
+    this._sessionId = PublicKey11.random().toHex();
     this._logProcessor = (_config, entry2) => {
       this._logs.emit(entry2);
     };
@@ -5515,10 +5447,10 @@ var toStorageType = (type) => {
 // packages/sdk/client-services/src/packlets/storage/level.ts
 import { Level } from "level";
 import path from "@dxos/node-std/path";
-import { PublicKey as PublicKey13 } from "@dxos/keys";
+import { PublicKey as PublicKey12 } from "@dxos/keys";
 var createLevel = async (config) => {
   const persistent = isPersistent(config);
-  const storagePath = persistent ? path.join(getRootPath(config), "level") : `/tmp/dxos-${PublicKey13.random().toHex()}`;
+  const storagePath = persistent ? path.join(getRootPath(config), "level") : `/tmp/dxos-${PublicKey12.random().toHex()}`;
   const level = new Level(storagePath);
   await level.open();
   return level;
@@ -5625,7 +5557,7 @@ var ClientServicesHost = class {
         lockKey,
         onAcquire: () => {
           if (!this._opening) {
-            void this.open(new Context11());
+            void this.open(new Context10());
           }
         },
         onRelease: () => this.close()
@@ -5747,7 +5679,7 @@ var ClientServicesHost = class {
     if (this._open) {
       return;
     }
-    const traceId = PublicKey14.random().toHex();
+    const traceId = PublicKey13.random().toHex();
     log16.trace("dxos.client-services.host.open", trace9.begin({
       id: traceId
     }), {
@@ -5901,7 +5833,7 @@ var ClientServicesHost = class {
     });
   }
   async reset() {
-    const traceId = PublicKey14.random().toHex();
+    const traceId = PublicKey13.random().toHex();
     log16.trace("dxos.sdk.client-services-host.reset", trace9.begin({
       id: traceId
     }), {
@@ -5961,7 +5893,7 @@ var ClientServicesHost = class {
         keys: []
       }
     };
-    const propertiesId = PublicKey14.random().toHex();
+    const propertiesId = PublicKey13.random().toHex();
     document.change((doc) => {
       assignDeep2(doc, [
         "objects",
@@ -5991,7 +5923,7 @@ ClientServicesHost = _ts_decorate8([
 ], ClientServicesHost);
 
 // packages/sdk/client-services/src/packlets/services/util.ts
-import { PublicKey as PublicKey15 } from "@dxos/keys";
+import { PublicKey as PublicKey14 } from "@dxos/keys";
 import { humanize } from "@dxos/util";
 var ClientServicesProviderResource = Symbol.for("dxos.resource.ClientServices");
 
@@ -6068,4 +6000,4 @@ export {
   ClientServicesHost,
   ClientServicesProviderResource
 };
-//# sourceMappingURL=chunk-WLE7E36I.mjs.map
+//# sourceMappingURL=chunk-5U7G5S73.mjs.map