@dxos/client-services 0.5.9-main.2dbe289 → 0.5.9-main.405fda7

package/dist/lib/browser/{chunk-QWL2M4EU.mjs → chunk-NBUF5LMA.mjs}

@@ -355,7 +355,7 @@ import { SpaceMember } from "@dxos/protocols/proto/dxos/client/services";
 import { TRACE_PROCESSOR } from "@dxos/tracing";
 
 // packages/sdk/client-services/src/version.ts
-var DXOS_VERSION = "0.5.9-main.2dbe289";
+var DXOS_VERSION = "0.5.9-main.405fda7";
 
 // packages/sdk/client-services/src/packlets/services/platform.ts
 import { Platform } from "@dxos/protocols/proto/dxos/client/services";
@@ -803,10 +803,59 @@ import { DeviceStateMachine, createCredentialSignerWithKey, createCredentialSign
 import { writeMessages } from "@dxos/feed-store";
 import { invariant as invariant2 } from "@dxos/invariant";
 import { PublicKey as PublicKey3 } from "@dxos/keys";
-import { log as log3 } from "@dxos/log";
+import { log as log4 } from "@dxos/log";
 import { AdmittedFeed } from "@dxos/protocols/proto/dxos/halo/credentials";
+import { Timeframe } from "@dxos/timeframe";
 import { trace as trace2 } from "@dxos/tracing";
 import { ComplexSet } from "@dxos/util";
+
+// packages/sdk/client-services/src/packlets/identity/default-space-state-machine.ts
+import { getCredentialAssertion } from "@dxos/credentials";
+import { SpaceId } from "@dxos/keys";
+import { log as log3 } from "@dxos/log";
+var __dxlog_file4 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/default-space-state-machine.ts";
+var DefaultSpaceStateMachine = class {
+  constructor(_params) {
+    this._params = _params;
+  }
+  get spaceId() {
+    return this._spaceId;
+  }
+  async processCredential(credential) {
+    const assertion = getCredentialAssertion(credential);
+    switch (assertion["@type"]) {
+      case "dxos.halo.credentials.DefaultSpace": {
+        if (!credential.subject.id.equals(this._params.identityKey)) {
+          log3.warn("Invalid default space credential", {
+            expectedIdentity: this._params.identityKey,
+            credential
+          }, {
+            F: __dxlog_file4,
+            L: 32,
+            S: this,
+            C: (f, a) => f(...a)
+          });
+          return;
+        }
+        if (!SpaceId.isValid(assertion.spaceId)) {
+          log3.warn("Invalid default space id", {
+            id: assertion.spaceId
+          }, {
+            F: __dxlog_file4,
+            L: 36,
+            S: this,
+            C: (f, a) => f(...a)
+          });
+          return;
+        }
+        this._spaceId = assertion.spaceId;
+        break;
+      }
+    }
+  }
+};
+
+// packages/sdk/client-services/src/packlets/identity/identity.ts
 function _ts_decorate2(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
@@ -817,7 +866,7 @@ function _ts_decorate2(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file4 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/identity.ts";
+var __dxlog_file5 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/identity.ts";
 var Identity = class {
   constructor({ space, signer, identityKey, deviceKey, presence }) {
     this.stateUpdate = new Event();
@@ -826,11 +875,11 @@ var Identity = class {
     this._presence = presence;
     this.identityKey = identityKey;
     this.deviceKey = deviceKey;
-    log3.trace("dxos.halo.device", {
+    log4.trace("dxos.halo.device", {
       deviceKey
     }, {
-      F: __dxlog_file4,
-      L: 67,
+      F: __dxlog_file5,
+      L: 70,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -843,6 +892,10 @@ var Identity = class {
       identityKey: this.identityKey,
       onUpdate: () => this.stateUpdate.emit()
     });
+    this._defaultSpaceStateMachine = new DefaultSpaceStateMachine({
+      identityKey: this.identityKey,
+      onUpdate: () => this.stateUpdate.emit()
+    });
     this.authVerifier = new TrustedKeySetAuthVerifier({
       trustedKeysProvider: () => new ComplexSet(PublicKey3.hash, this.authorizedDeviceKeys.keys()),
       update: this.stateUpdate,
@@ -853,14 +906,20 @@ var Identity = class {
   get authorizedDeviceKeys() {
     return this._deviceStateMachine.authorizedDeviceKeys;
   }
+  get defaultSpaceId() {
+    return this._defaultSpaceStateMachine.spaceId;
+  }
   async open(ctx) {
+    await this._presence?.open();
     await this.space.spaceState.addCredentialProcessor(this._deviceStateMachine);
     await this.space.spaceState.addCredentialProcessor(this._profileStateMachine);
+    await this.space.spaceState.addCredentialProcessor(this._defaultSpaceStateMachine);
     await this.space.open(ctx);
   }
   async close(ctx) {
-    await this._presence?.destroy();
+    await this._presence?.close();
     await this.authVerifier.close();
+    await this.space.spaceState.removeCredentialProcessor(this._defaultSpaceStateMachine);
     await this.space.spaceState.removeCredentialProcessor(this._profileStateMachine);
     await this.space.spaceState.removeCredentialProcessor(this._deviceStateMachine);
     await this.space.close();
@@ -898,8 +957,8 @@ var Identity = class {
   */
   getIdentityCredentialSigner() {
     invariant2(this._deviceStateMachine.deviceCredentialChain, "Device credential chain is not ready.", {
-      F: __dxlog_file4,
-      L: 145,
+      F: __dxlog_file5,
+      L: 159,
       S: this,
       A: [
         "this._deviceStateMachine.deviceCredentialChain",
@@ -914,16 +973,36 @@ var Identity = class {
   getDeviceCredentialSigner() {
     return createCredentialSignerWithKey(this._signer, this.deviceKey);
   }
+  async updateDefaultSpace(spaceId) {
+    const credential = await this.getDeviceCredentialSigner().createCredential({
+      subject: this.identityKey,
+      assertion: {
+        "@type": "dxos.halo.credentials.DefaultSpace",
+        spaceId
+      }
+    });
+    const receipt = await this.controlPipeline.writer.write({
+      credential: {
+        credential
+      }
+    });
+    await this.controlPipeline.state.waitUntilTimeframe(new Timeframe([
+      [
+        receipt.feedKey,
+        receipt.seq
+      ]
+    ]));
+  }
   async admitDevice({ deviceKey, controlFeedKey, dataFeedKey }) {
-    log3("Admitting device:", {
+    log4("Admitting device:", {
       identityKey: this.identityKey,
       hostDevice: this.deviceKey,
       deviceKey,
       controlFeedKey,
       dataFeedKey
     }, {
-      F: __dxlog_file4,
-      L: 161,
+      F: __dxlog_file5,
+      L: 184,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -981,12 +1060,12 @@ import { Context as Context3 } from "@dxos/context";
 import { createCredentialSignerWithKey as createCredentialSignerWithKey2, CredentialGenerator } from "@dxos/credentials";
 import { invariant as invariant3 } from "@dxos/invariant";
 import { PublicKey as PublicKey4 } from "@dxos/keys";
-import { log as log4 } from "@dxos/log";
+import { log as log5 } from "@dxos/log";
 import { trace as trace3 } from "@dxos/protocols";
 import { Device, DeviceKind } from "@dxos/protocols/proto/dxos/client/services";
 import { AdmittedFeed as AdmittedFeed2, DeviceType } from "@dxos/protocols/proto/dxos/halo/credentials";
 import { Gossip, Presence } from "@dxos/teleport-extension-gossip";
-import { Timeframe } from "@dxos/timeframe";
+import { Timeframe as Timeframe2 } from "@dxos/timeframe";
 import { trace as Trace } from "@dxos/tracing";
 import { isNode, deferFunction } from "@dxos/util";
 function _ts_decorate3(decorators, target, key, desc) {
@@ -999,7 +1078,7 @@ function _ts_decorate3(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file5 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/identity-manager.ts";
+var __dxlog_file6 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/identity-manager.ts";
 var DEVICE_PRESENCE_ANNOUNCE_INTERVAL = 1e4;
 var DEVICE_PRESENCE_OFFLINE_TIMEOUT = 2e4;
 var IdentityManager = class {
@@ -1020,19 +1099,19 @@ var IdentityManager = class {
   }
   async open(ctx) {
     const traceId = PublicKey4.random().toHex();
-    log4.trace("dxos.halo.identity-manager.open", trace3.begin({
+    log5.trace("dxos.halo.identity-manager.open", trace3.begin({
       id: traceId
     }), {
-      F: __dxlog_file5,
+      F: __dxlog_file6,
       L: 104,
       S: this,
       C: (f, a) => f(...a)
     });
     const identityRecord = this._metadataStore.getIdentityRecord();
-    log4("identity record", {
+    log5("identity record", {
       identityRecord
     }, {
-      F: __dxlog_file5,
+      F: __dxlog_file6,
       L: 107,
       S: this,
       C: (f, a) => f(...a)
@@ -1041,21 +1120,21 @@ var IdentityManager = class {
       this._identity = await this._constructIdentity(identityRecord);
       await this._identity.open(ctx);
       await this._identity.ready();
-      log4.trace("dxos.halo.identity", {
+      log5.trace("dxos.halo.identity", {
         identityKey: identityRecord.identityKey,
         displayName: this._identity.profileDocument?.displayName
       }, {
-        F: __dxlog_file5,
+        F: __dxlog_file6,
         L: 112,
         S: this,
         C: (f, a) => f(...a)
       });
       this.stateUpdate.emit();
     }
-    log4.trace("dxos.halo.identity-manager.open", trace3.end({
+    log5.trace("dxos.halo.identity-manager.open", trace3.end({
       id: traceId
     }), {
-      F: __dxlog_file5,
+      F: __dxlog_file6,
       L: 119,
       S: this,
       C: (f, a) => f(...a)
@@ -1066,7 +1145,7 @@ var IdentityManager = class {
   }
   async createIdentity({ displayName, deviceProfile } = {}) {
     invariant3(!this._identity, "Identity already exists.", {
-      F: __dxlog_file5,
+      F: __dxlog_file6,
       L: 128,
       S: this,
       A: [
@@ -1074,8 +1153,8 @@ var IdentityManager = class {
         "'Identity already exists.'"
       ]
     });
-    log4("creating identity...", void 0, {
-      F: __dxlog_file5,
+    log5("creating identity...", void 0, {
+      F: __dxlog_file6,
       L: 129,
       S: this,
       C: (f, a) => f(...a)
@@ -1096,7 +1175,7 @@ var IdentityManager = class {
     {
       const generator = new CredentialGenerator(this._keyring, identityRecord.identityKey, identityRecord.deviceKey);
       invariant3(identityRecord.haloSpace.genesisFeedKey, "Genesis feed key is required.", {
-        F: __dxlog_file5,
+        F: __dxlog_file6,
         L: 148,
         S: this,
         A: [
@@ -1105,7 +1184,7 @@ var IdentityManager = class {
         ]
       });
       invariant3(identityRecord.haloSpace.dataFeedKey, "Data feed key is required.", {
-        F: __dxlog_file5,
+        F: __dxlog_file6,
         L: 149,
         S: this,
         A: [
@@ -1140,22 +1219,22 @@ var IdentityManager = class {
     await this._metadataStore.setIdentityRecord(identityRecord);
     this._identity = identity;
     await this._identity.ready();
-    log4.trace("dxos.halo.identity", {
+    log5.trace("dxos.halo.identity", {
       identityKey: identityRecord.identityKey,
       displayName: this._identity.profileDocument?.displayName
     }, {
-      F: __dxlog_file5,
+      F: __dxlog_file6,
       L: 191,
       S: this,
       C: (f, a) => f(...a)
     });
     this.stateUpdate.emit();
-    log4("created identity", {
+    log5("created identity", {
       identityKey: identity.identityKey,
       deviceKey: identity.deviceKey,
       profile: identity.profileDocument
     }, {
-      F: __dxlog_file5,
+      F: __dxlog_file6,
       L: 197,
       S: this,
       C: (f, a) => f(...a)
@@ -1189,16 +1268,16 @@ var IdentityManager = class {
   * Accept an existing identity. Expects its device key to be authorized (now or later).
   */
   async acceptIdentity(params) {
-    log4("accepting identity", {
+    log5("accepting identity", {
       params
     }, {
-      F: __dxlog_file5,
+      F: __dxlog_file6,
       L: 235,
       S: this,
       C: (f, a) => f(...a)
     });
     invariant3(!this._identity, "Identity already exists.", {
-      F: __dxlog_file5,
+      F: __dxlog_file6,
       L: 236,
       S: this,
       A: [
@@ -1222,11 +1301,11 @@ var IdentityManager = class {
     this._identity = identity;
     await this._metadataStore.setIdentityRecord(identityRecord);
     await this._identity.ready();
-    log4.trace("dxos.halo.identity", {
+    log5.trace("dxos.halo.identity", {
       identityKey: identityRecord.identityKey,
       displayName: this._identity.profileDocument?.displayName
     }, {
-      F: __dxlog_file5,
+      F: __dxlog_file6,
       L: 255,
       S: this,
       C: (f, a) => f(...a)
@@ -1236,11 +1315,11 @@ var IdentityManager = class {
       ...params.deviceProfile
     });
     this.stateUpdate.emit();
-    log4("accepted identity", {
+    log5("accepted identity", {
       identityKey: identity.identityKey,
       deviceKey: identity.deviceKey
     }, {
-      F: __dxlog_file5,
+      F: __dxlog_file6,
       L: 265,
       S: this,
       C: (f, a) => f(...a)
@@ -1252,7 +1331,7 @@ var IdentityManager = class {
   */
   async updateProfile(profile) {
     invariant3(this._identity, "Identity not initialized.", {
-      F: __dxlog_file5,
+      F: __dxlog_file6,
       L: 273,
       S: this,
       A: [
@@ -1272,7 +1351,7 @@ var IdentityManager = class {
         credential
       }
     });
-    await this._identity.controlPipeline.state.waitUntilTimeframe(new Timeframe([
+    await this._identity.controlPipeline.state.waitUntilTimeframe(new Timeframe2([
       [
         receipt.feedKey,
         receipt.seq
@@ -1283,7 +1362,7 @@ var IdentityManager = class {
   }
   async updateDeviceProfile(profile) {
     invariant3(this._identity, "Identity not initialized.", {
-      F: __dxlog_file5,
+      F: __dxlog_file6,
       L: 290,
       S: this,
       A: [
@@ -1303,7 +1382,7 @@ var IdentityManager = class {
         credential
       }
     });
-    await this._identity.controlPipeline.state.waitUntilTimeframe(new Timeframe([
+    await this._identity.controlPipeline.state.waitUntilTimeframe(new Timeframe2([
       [
         receipt.feedKey,
         receipt.seq
@@ -1319,7 +1398,7 @@ var IdentityManager = class {
   }
   async _constructIdentity(identityRecord) {
     invariant3(!this._identity, void 0, {
-      F: __dxlog_file5,
+      F: __dxlog_file6,
       L: 316,
       S: this,
       A: [
@@ -1327,10 +1406,10 @@ var IdentityManager = class {
         ""
       ]
     });
-    log4("constructing identity", {
+    log5("constructing identity", {
       identityRecord
     }, {
-      F: __dxlog_file5,
+      F: __dxlog_file6,
       L: 317,
       S: this,
       C: (f, a) => f(...a)
@@ -1345,7 +1424,7 @@ var IdentityManager = class {
       gossip
     });
     invariant3(identityRecord.haloSpace.controlFeedKey, void 0, {
-      F: __dxlog_file5,
+      F: __dxlog_file6,
       L: 330,
       S: this,
       A: [
@@ -1357,7 +1436,7 @@ var IdentityManager = class {
       writable: true
     });
     invariant3(identityRecord.haloSpace.dataFeedKey, void 0, {
-      F: __dxlog_file5,
+      F: __dxlog_file6,
       L: 334,
       S: this,
       A: [
@@ -1388,10 +1467,10 @@ var IdentityManager = class {
       identityKey: identityRecord.identityKey,
       deviceKey: identityRecord.deviceKey
     });
-    log4("done", {
+    log5("done", {
       identityKey: identityRecord.identityKey
     }, {
-      F: __dxlog_file5,
+      F: __dxlog_file6,
       L: 360,
       S: this,
       C: (f, a) => f(...a)
@@ -1415,8 +1494,8 @@ var IdentityManager = class {
         }));
       },
       onAuthFailure: () => {
-        log4.warn("auth failure", void 0, {
-          F: __dxlog_file5,
+        log5.warn("auth failure", void 0, {
+          F: __dxlog_file6,
           L: 385,
           S: this,
           C: (f, a) => f(...a)
@@ -1441,24 +1520,50 @@ IdentityManager = _ts_decorate3([
 
 // packages/sdk/client-services/src/packlets/identity/identity-service.ts
 import { Stream as Stream8 } from "@dxos/codec-protobuf";
+import { Resource } from "@dxos/context";
 import { signPresentation } from "@dxos/credentials";
 import { todo } from "@dxos/debug";
 import { invariant as invariant4 } from "@dxos/invariant";
-var __dxlog_file6 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/identity-service.ts";
-var IdentityServiceImpl = class {
-  constructor(_createIdentity, _identityManager, _keyring, _onProfileUpdate) {
-    this._createIdentity = _createIdentity;
+import { SpaceState } from "@dxos/protocols/proto/dxos/client/services";
+var __dxlog_file7 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/identity-service.ts";
+var IdentityServiceImpl = class extends Resource {
+  constructor(_identityManager, _keyring, _dataSpaceManagerProvider, _createIdentity, _onProfileUpdate) {
+    super();
     this._identityManager = _identityManager;
     this._keyring = _keyring;
+    this._dataSpaceManagerProvider = _dataSpaceManagerProvider;
+    this._createIdentity = _createIdentity;
     this._onProfileUpdate = _onProfileUpdate;
   }
+  async _open() {
+    const identity = this._identityManager.identity;
+    if (identity && !identity.defaultSpaceId) {
+      await this._fixIdentityWithoutDefaultSpace(identity);
+    }
+  }
   async createIdentity(request) {
     await this._createIdentity({
       displayName: request.profile?.displayName,
       deviceProfile: request.deviceProfile
     });
+    const dataSpaceManager = this._dataSpaceManagerProvider();
+    await this._createDefaultSpace(dataSpaceManager);
     return this._getIdentity();
   }
+  async _createDefaultSpace(dataSpaceManager) {
+    const space = await dataSpaceManager.createDefaultSpace();
+    const identity = this._identityManager.identity;
+    invariant4(identity, void 0, {
+      F: __dxlog_file7,
+      L: 54,
+      S: this,
+      A: [
+        "identity",
+        ""
+      ]
+    });
+    await identity.updateDefaultSpace(space.id);
+  }
   async recoverIdentity(request) {
     return todo();
   }
@@ -1483,8 +1588,8 @@ var IdentityServiceImpl = class {
   }
   async updateProfile(profile) {
     invariant4(this._identityManager.identity, "Identity not initialized.", {
-      F: __dxlog_file6,
-      L: 61,
+      F: __dxlog_file7,
+      L: 84,
       S: this,
       A: [
         "this._identityManager.identity",
@@ -1497,8 +1602,8 @@ var IdentityServiceImpl = class {
   }
   async signPresentation({ presentation, nonce }) {
     invariant4(this._identityManager.identity, "Identity not initialized.", {
-      F: __dxlog_file6,
-      L: 68,
+      F: __dxlog_file7,
+      L: 91,
       S: this,
       A: [
         "this._identityManager.identity",
@@ -1513,13 +1618,31 @@ var IdentityServiceImpl = class {
       nonce
     });
   }
+  async _fixIdentityWithoutDefaultSpace(identity) {
+    let hasDefaultSpace = false;
+    const dataSpaceManager = this._dataSpaceManagerProvider();
+    for (const space of dataSpaceManager.spaces.values()) {
+      if (space.state === SpaceState.CLOSED) {
+        await space.open();
+        await space.initializeDataPipeline();
+      }
+      if (await dataSpaceManager.isDefaultSpace(space)) {
+        await identity.updateDefaultSpace(space.id);
+        hasDefaultSpace = true;
+        break;
+      }
+    }
+    if (!hasDefaultSpace) {
+      await this._createDefaultSpace(dataSpaceManager);
+    }
+  }
 };
 
 // packages/sdk/client-services/src/packlets/invitations/device-invitation-protocol.ts
 import { invariant as invariant5 } from "@dxos/invariant";
 import { AlreadyJoinedError } from "@dxos/protocols";
 import { Invitation } from "@dxos/protocols/proto/dxos/client/services";
-var __dxlog_file7 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/device-invitation-protocol.ts";
+var __dxlog_file8 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/device-invitation-protocol.ts";
 var DeviceInvitationProtocol = class {
   constructor(_keyring, _getIdentity, _acceptIdentity) {
     this._keyring = _keyring;
@@ -1545,7 +1668,7 @@ var DeviceInvitationProtocol = class {
   }
   async admit(_, request) {
     invariant5(request.device, void 0, {
-      F: __dxlog_file7,
+      F: __dxlog_file8,
       L: 50,
       S: this,
       A: [
@@ -1591,7 +1714,7 @@ var DeviceInvitationProtocol = class {
   }
   async accept(response, request) {
     invariant5(response.device, void 0, {
-      F: __dxlog_file7,
+      F: __dxlog_file8,
       L: 95,
       S: this,
       A: [
@@ -1601,7 +1724,7 @@ var DeviceInvitationProtocol = class {
     });
     const { identityKey, haloSpaceKey, genesisFeedKey, controlTimeframe } = response.device;
     invariant5(request.device, void 0, {
-      F: __dxlog_file7,
+      F: __dxlog_file8,
       L: 98,
       S: this,
       A: [
@@ -1633,7 +1756,7 @@ import { ContextDisposedError as ContextDisposedError2 } from "@dxos/context";
 import { createKeyPair, sign } from "@dxos/crypto";
 import { invariant as invariant9 } from "@dxos/invariant";
 import { PublicKey as PublicKey7 } from "@dxos/keys";
-import { log as log8 } from "@dxos/log";
+import { log as log9 } from "@dxos/log";
 import { createTeleportProtocolFactory } from "@dxos/network-manager";
 import { InvalidInvitationExtensionRoleError as InvalidInvitationExtensionRoleError3, trace as trace5 } from "@dxos/protocols";
 import { Invitation as Invitation4 } from "@dxos/protocols/proto/dxos/client/services";
@@ -1645,7 +1768,7 @@ import { ComplexSet as ComplexSet3 } from "@dxos/util";
 import { Trigger as Trigger3 } from "@dxos/async";
 import { cancelWithContext as cancelWithContext2, Context as Context4 } from "@dxos/context";
 import { invariant as invariant6 } from "@dxos/invariant";
-import { log as log5 } from "@dxos/log";
+import { log as log6 } from "@dxos/log";
 import { InvalidInvitationExtensionRoleError, schema as schema2 } from "@dxos/protocols";
 import { Options } from "@dxos/protocols/proto/dxos/halo/invitations";
 import { RpcExtension } from "@dxos/teleport";
@@ -1670,7 +1793,7 @@ var tryAcquireBeforeContextDisposed = async (ctx, mutex) => {
 };
 
 // packages/sdk/client-services/src/packlets/invitations/invitation-guest-extenstion.ts
-var __dxlog_file8 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/invitation-guest-extenstion.ts";
+var __dxlog_file9 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/invitation-guest-extenstion.ts";
 var OPTIONS_TIMEOUT = 1e4;
 var InvitationGuestExtension = class extends RpcExtension {
   constructor(_invitationFlowMutex, _callbacks) {
@@ -1696,7 +1819,7 @@ var InvitationGuestExtension = class extends RpcExtension {
       InvitationHostService: {
         options: async (options) => {
           invariant6(!this._remoteOptions, "Remote options already set.", {
-            F: __dxlog_file8,
+            F: __dxlog_file9,
             L: 63,
             S: this,
             A: [
@@ -1722,15 +1845,15 @@ var InvitationGuestExtension = class extends RpcExtension {
   async onOpen(context) {
     await super.onOpen(context);
     try {
-      log5("guest acquire lock", void 0, {
-        F: __dxlog_file8,
+      log6("guest acquire lock", void 0, {
+        F: __dxlog_file9,
         L: 84,
         S: this,
         C: (f, a) => f(...a)
       });
       this._invitationFlowLock = await tryAcquireBeforeContextDisposed(this._ctx, this._invitationFlowMutex);
-      log5("guest lock acquired", void 0, {
-        F: __dxlog_file8,
+      log6("guest lock acquired", void 0, {
+        F: __dxlog_file9,
         L: 86,
         S: this,
         C: (f, a) => f(...a)
@@ -1738,8 +1861,8 @@ var InvitationGuestExtension = class extends RpcExtension {
       await cancelWithContext2(this._ctx, this.rpc.InvitationHostService.options({
         role: Options.Role.GUEST
       }));
-      log5("options sent", void 0, {
-        F: __dxlog_file8,
+      log6("options sent", void 0, {
+        F: __dxlog_file9,
         L: 88,
         S: this,
         C: (f, a) => f(...a)
@@ -1747,8 +1870,8 @@ var InvitationGuestExtension = class extends RpcExtension {
       await cancelWithContext2(this._ctx, this._remoteOptionsTrigger.wait({
         timeout: OPTIONS_TIMEOUT
       }));
-      log5("options received", void 0, {
-        F: __dxlog_file8,
+      log6("options received", void 0, {
+        F: __dxlog_file9,
         L: 90,
         S: this,
         C: (f, a) => f(...a)
@@ -1781,8 +1904,8 @@ var InvitationGuestExtension = class extends RpcExtension {
     if (this._invitationFlowLock != null) {
       this._invitationFlowLock.release();
       this._invitationFlowLock = null;
-      log5("invitation flow lock released", void 0, {
-        F: __dxlog_file8,
+      log6("invitation flow lock released", void 0, {
+        F: __dxlog_file9,
         L: 123,
         S: this,
         C: (f, a) => f(...a)
@@ -1797,12 +1920,12 @@ import { cancelWithContext as cancelWithContext3, Context as Context5 } from "@d
 import { randomBytes, verify } from "@dxos/crypto";
 import { invariant as invariant7, InvariantViolation } from "@dxos/invariant";
 import { PublicKey as PublicKey5 } from "@dxos/keys";
-import { log as log6 } from "@dxos/log";
+import { log as log7 } from "@dxos/log";
 import { InvalidInvitationExtensionRoleError as InvalidInvitationExtensionRoleError2, schema as schema3, trace as trace4 } from "@dxos/protocols";
 import { Invitation as Invitation3 } from "@dxos/protocols/proto/dxos/client/services";
 import { AuthenticationResponse, Options as Options2 } from "@dxos/protocols/proto/dxos/halo/invitations";
 import { RpcExtension as RpcExtension2 } from "@dxos/teleport";
-var __dxlog_file9 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/invitation-host-extension.ts";
+var __dxlog_file10 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/invitation-host-extension.ts";
 var OPTIONS_TIMEOUT2 = 1e4;
 var MAX_OTP_ATTEMPTS = 3;
 var InvitationHostExtension = class extends RpcExtension2 {
@@ -1836,7 +1959,7 @@ var InvitationHostExtension = class extends RpcExtension2 {
       InvitationHostService: {
         options: async (options) => {
           invariant7(!this._remoteOptions, "Remote options already set.", {
-            F: __dxlog_file9,
+            F: __dxlog_file10,
             L: 101,
             S: this,
             A: [
@@ -1850,10 +1973,10 @@ var InvitationHostExtension = class extends RpcExtension2 {
         introduce: async (request) => {
           const { profile, invitationId } = request;
           const traceId = PublicKey5.random().toHex();
-          log6.trace("dxos.sdk.invitation-handler.host.introduce", trace4.begin({
+          log7.trace("dxos.sdk.invitation-handler.host.introduce", trace4.begin({
             id: traceId
           }), {
-            F: __dxlog_file9,
+            F: __dxlog_file10,
             L: 110,
             S: this,
             C: (f, a) => f(...a)
@@ -1861,11 +1984,11 @@ var InvitationHostExtension = class extends RpcExtension2 {
           const invitation = this._requireActiveInvitation();
           this._assertInvitationState(Invitation3.State.CONNECTED);
           if (invitationId !== invitation?.invitationId) {
-            log6.warn("incorrect invitationId", {
+            log7.warn("incorrect invitationId", {
               expected: invitation.invitationId,
               actual: invitationId
             }, {
-              F: __dxlog_file9,
+              F: __dxlog_file10,
               L: 116,
               S: this,
               C: (f, a) => f(...a)
@@ -1876,10 +1999,10 @@ var InvitationHostExtension = class extends RpcExtension2 {
               authMethod: Invitation3.AuthMethod.NONE
             };
           }
-          log6("guest introduced themselves", {
+          log7("guest introduced themselves", {
             guestProfile: profile
           }, {
-            F: __dxlog_file9,
+            F: __dxlog_file10,
             L: 125,
             S: this,
             C: (f, a) => f(...a)
@@ -1887,10 +2010,10 @@ var InvitationHostExtension = class extends RpcExtension2 {
           this.guestProfile = profile;
           this._callbacks.onStateUpdate(Invitation3.State.READY_FOR_AUTHENTICATION);
           this._challenge = invitation.authMethod === Invitation3.AuthMethod.KNOWN_PUBLIC_KEY ? randomBytes(32) : void 0;
-          log6.trace("dxos.sdk.invitation-handler.host.introduce", trace4.end({
+          log7.trace("dxos.sdk.invitation-handler.host.introduce", trace4.end({
             id: traceId
           }), {
-            F: __dxlog_file9,
+            F: __dxlog_file10,
             L: 132,
             S: this,
             C: (f, a) => f(...a)
@@ -1902,19 +2025,19 @@ var InvitationHostExtension = class extends RpcExtension2 {
         },
         authenticate: async ({ authCode: code, signedChallenge }) => {
           const traceId = PublicKey5.random().toHex();
-          log6.trace("dxos.sdk.invitation-handler.host.authenticate", trace4.begin({
+          log7.trace("dxos.sdk.invitation-handler.host.authenticate", trace4.begin({
             id: traceId
           }), {
-            F: __dxlog_file9,
+            F: __dxlog_file10,
             L: 141,
             S: this,
             C: (f, a) => f(...a)
           });
           const invitation = this._requireActiveInvitation();
-          log6("received authentication request", {
+          log7("received authentication request", {
             authCode: code
           }, {
-            F: __dxlog_file9,
+            F: __dxlog_file10,
             L: 144,
             S: this,
             C: (f, a) => f(...a)
@@ -1927,8 +2050,8 @@ var InvitationHostExtension = class extends RpcExtension2 {
           this._callbacks.onStateUpdate(Invitation3.State.AUTHENTICATING);
           switch (invitation.authMethod) {
             case Invitation3.AuthMethod.NONE: {
-              log6("authentication not required", void 0, {
-                F: __dxlog_file9,
+              log7("authentication not required", void 0, {
+                F: __dxlog_file10,
                 L: 152,
                 S: this,
                 C: (f, a) => f(...a)
@@ -1963,10 +2086,10 @@ var InvitationHostExtension = class extends RpcExtension2 {
               break;
             }
             default: {
-              log6.error("invalid authentication method", {
+              log7.error("invalid authentication method", {
                 authMethod: invitation.authMethod
               }, {
-                F: __dxlog_file9,
+                F: __dxlog_file10,
                 L: 190,
                 S: this,
                 C: (f, a) => f(...a)
@@ -1985,13 +2108,13 @@ var InvitationHostExtension = class extends RpcExtension2 {
               status
             };
           }
-          log6.trace("dxos.sdk.invitation-handler.host.authenticate", trace4.end({
+          log7.trace("dxos.sdk.invitation-handler.host.authenticate", trace4.end({
             id: traceId,
             data: {
               status
             }
           }), {
-            F: __dxlog_file9,
+            F: __dxlog_file10,
             L: 202,
             S: this,
             C: (f, a) => f(...a)
@@ -2002,10 +2125,10 @@ var InvitationHostExtension = class extends RpcExtension2 {
         },
         admit: async (request) => {
           const traceId = PublicKey5.random().toHex();
-          log6.trace("dxos.sdk.invitation-handler.host.admit", trace4.begin({
+          log7.trace("dxos.sdk.invitation-handler.host.admit", trace4.begin({
             id: traceId
           }), {
-            F: __dxlog_file9,
+            F: __dxlog_file10,
             L: 208,
             S: this,
             C: (f, a) => f(...a)
@@ -2019,10 +2142,10 @@ var InvitationHostExtension = class extends RpcExtension2 {
               }
             }
             const response = await this._callbacks.admit(request);
-            log6.trace("dxos.sdk.invitation-handler.host.admit", trace4.end({
+            log7.trace("dxos.sdk.invitation-handler.host.admit", trace4.end({
               id: traceId
             }), {
-              F: __dxlog_file9,
+              F: __dxlog_file10,
               L: 222,
               S: this,
               C: (f, a) => f(...a)
@@ -2039,15 +2162,15 @@ var InvitationHostExtension = class extends RpcExtension2 {
   async onOpen(context) {
     await super.onOpen(context);
     try {
-      log6("host acquire lock", void 0, {
-        F: __dxlog_file9,
+      log7("host acquire lock", void 0, {
+        F: __dxlog_file10,
         L: 237,
         S: this,
         C: (f, a) => f(...a)
       });
       this._invitationFlowLock = await tryAcquireBeforeContextDisposed(this._ctx, this._invitationFlowMutex);
-      log6("host lock acquired", void 0, {
-        F: __dxlog_file9,
+      log7("host lock acquired", void 0, {
+        F: __dxlog_file10,
         L: 239,
         S: this,
         C: (f, a) => f(...a)
@@ -2057,8 +2180,8 @@ var InvitationHostExtension = class extends RpcExtension2 {
       await this.rpc.InvitationHostService.options({
         role: Options2.Role.HOST
       });
-      log6("options sent", void 0, {
-        F: __dxlog_file9,
+      log7("options sent", void 0, {
+        F: __dxlog_file10,
         L: 243,
         S: this,
         C: (f, a) => f(...a)
@@ -2066,8 +2189,8 @@ var InvitationHostExtension = class extends RpcExtension2 {
       await cancelWithContext3(this._ctx, this._remoteOptionsTrigger.wait({
         timeout: OPTIONS_TIMEOUT2
       }));
-      log6("options received", void 0, {
-        F: __dxlog_file9,
+      log7("options received", void 0, {
+        F: __dxlog_file10,
         L: 245,
         S: this,
         C: (f, a) => f(...a)
@@ -2120,8 +2243,8 @@ var InvitationHostExtension = class extends RpcExtension2 {
     if (this._invitationFlowLock != null) {
       this._invitationFlowLock?.release();
       this._invitationFlowLock = null;
-      log6("invitation flow lock released", void 0, {
-        F: __dxlog_file9,
+      log7("invitation flow lock released", void 0, {
+        F: __dxlog_file10,
         L: 300,
         S: this,
         C: (f, a) => f(...a)
@@ -2134,10 +2257,10 @@ var isAuthenticationRequired = (invitation) => invitation.authMethod !== Invitat
 // packages/sdk/client-services/src/packlets/invitations/invitation-topology.ts
 import { invariant as invariant8 } from "@dxos/invariant";
 import { PublicKey as PublicKey6 } from "@dxos/keys";
-import { log as log7 } from "@dxos/log";
+import { log as log8 } from "@dxos/log";
 import { Options as Options3 } from "@dxos/protocols/proto/dxos/halo/invitations";
 import { ComplexSet as ComplexSet2 } from "@dxos/util";
-var __dxlog_file10 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/invitation-topology.ts";
+var __dxlog_file11 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/invitation-topology.ts";
 var InvitationTopology = class {
   constructor(_role) {
     this._role = _role;
@@ -2145,7 +2268,7 @@ var InvitationTopology = class {
   }
   init(controller) {
     invariant8(!this._controller, "Already initialized.", {
-      F: __dxlog_file10,
+      F: __dxlog_file11,
       L: 42,
       S: this,
       A: [
@@ -2157,7 +2280,7 @@ var InvitationTopology = class {
   }
   update() {
     invariant8(this._controller, "Not initialized.", {
-      F: __dxlog_file10,
+      F: __dxlog_file11,
       L: 47,
       S: this,
       A: [
@@ -2176,11 +2299,11 @@ var InvitationTopology = class {
     const firstUnknownPeer = candidates.find((peerId) => !this._seenPeers.has(peerId));
     this._seenPeers = new ComplexSet2(PublicKey6.hash, allPeers.filter((peerId) => this._seenPeers.has(peerId)));
     if (firstUnknownPeer != null) {
-      log7("invitation connect", {
+      log8("invitation connect", {
         ownPeerId,
         remotePeerId: firstUnknownPeer
       }, {
-        F: __dxlog_file10,
+        F: __dxlog_file11,
         L: 69,
         S: this,
         C: (f, a) => f(...a)
@@ -2191,7 +2314,7 @@ var InvitationTopology = class {
   }
   async onOffer(peer) {
     invariant8(this._controller, "Not initialized.", {
-      F: __dxlog_file10,
+      F: __dxlog_file11,
       L: 76,
       S: this,
       A: [
@@ -2210,7 +2333,7 @@ var InvitationTopology = class {
 };
 
 // packages/sdk/client-services/src/packlets/invitations/invitations-handler.ts
-var __dxlog_file11 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/invitations-handler.ts";
+var __dxlog_file12 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/invitations-handler.ts";
 var MAX_DELEGATED_INVITATION_HOST_TRIES = 3;
 var InvitationsHandler = class {
   /**
@@ -2235,7 +2358,7 @@ var InvitationsHandler = class {
           try {
             const deviceKey = admissionRequest.device?.deviceKey ?? admissionRequest.space?.deviceKey;
             invariant9(deviceKey, void 0, {
-              F: __dxlog_file11,
+              F: __dxlog_file12,
               L: 90,
               S: this,
               A: [
@@ -2261,18 +2384,18 @@ var InvitationsHandler = class {
           scheduleTask3(connectionCtx, async () => {
             const traceId = PublicKey7.random().toHex();
             try {
-              log8.trace("dxos.sdk.invitations-handler.host.onOpen", trace5.begin({
+              log9.trace("dxos.sdk.invitations-handler.host.onOpen", trace5.begin({
                 id: traceId
               }), {
-                F: __dxlog_file11,
+                F: __dxlog_file12,
                 L: 115,
                 S: this,
                 C: (f, a) => f(...a)
               });
-              log8("connected", {
+              log9("connected", {
                 ...protocol.toJSON()
               }, {
-                F: __dxlog_file11,
+                F: __dxlog_file12,
                 L: 116,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2280,20 +2403,20 @@ var InvitationsHandler = class {
               const deviceKey = await extension.completedTrigger.wait({
                 timeout: invitation.timeout
               });
-              log8("admitted guest", {
+              log9("admitted guest", {
                 guest: deviceKey,
                 ...protocol.toJSON()
               }, {
-                F: __dxlog_file11,
+                F: __dxlog_file12,
                 L: 118,
                 S: this,
                 C: (f, a) => f(...a)
               });
               guardedState.set(extension, Invitation4.State.SUCCESS);
-              log8.trace("dxos.sdk.invitations-handler.host.onOpen", trace5.end({
+              log9.trace("dxos.sdk.invitations-handler.host.onOpen", trace5.end({
                 id: traceId
               }), {
-                F: __dxlog_file11,
+                F: __dxlog_file12,
                 L: 120,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2305,10 +2428,10 @@ var InvitationsHandler = class {
             } catch (err) {
               if (err instanceof TimeoutError) {
                 if (guardedState.set(extension, Invitation4.State.TIMEOUT)) {
-                  log8("timeout", {
+                  log9("timeout", {
                     ...protocol.toJSON()
                   }, {
-                    F: __dxlog_file11,
+                    F: __dxlog_file12,
                     L: 129,
                     S: this,
                     C: (f, a) => f(...a)
@@ -2316,19 +2439,19 @@ var InvitationsHandler = class {
                 }
               } else {
                 if (guardedState.error(extension, err)) {
-                  log8.error("failed", err, {
-                    F: __dxlog_file11,
+                  log9.error("failed", err, {
+                    F: __dxlog_file12,
                     L: 133,
                     S: this,
                     C: (f, a) => f(...a)
                   });
                 }
               }
-              log8.trace("dxos.sdk.invitations-handler.host.onOpen", trace5.error({
+              log9.trace("dxos.sdk.invitations-handler.host.onOpen", trace5.error({
                 id: traceId,
                 error: err
               }), {
-                F: __dxlog_file11,
+                F: __dxlog_file12,
                 L: 136,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2339,10 +2462,10 @@ var InvitationsHandler = class {
         },
         onError: (err) => {
           if (err instanceof InvalidInvitationExtensionRoleError3) {
-            log8("invalid role", {
+            log9("invalid role", {
               ...err.context
             }, {
-              F: __dxlog_file11,
+              F: __dxlog_file12,
               L: 144,
               S: this,
               C: (f, a) => f(...a)
@@ -2351,10 +2474,10 @@ var InvitationsHandler = class {
           }
           if (err instanceof TimeoutError) {
             if (guardedState.set(extension, Invitation4.State.TIMEOUT)) {
-              log8("timeout", {
+              log9("timeout", {
                 err
               }, {
-                F: __dxlog_file11,
+                F: __dxlog_file12,
                 L: 149,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2362,8 +2485,8 @@ var InvitationsHandler = class {
             }
           } else {
             if (guardedState.error(extension, err)) {
-              log8.error("failed", err, {
-                F: __dxlog_file11,
+              log9.error("failed", err, {
+                F: __dxlog_file12,
                 L: 153,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2376,8 +2499,8 @@ var InvitationsHandler = class {
     };
     if (invitation.lifetime && invitation.created) {
       if (invitation.created.getTime() + invitation.lifetime * 1e3 < Date.now()) {
-        log8.warn("invitation has already expired", void 0, {
-          F: __dxlog_file11,
+        log9.warn("invitation has already expired", void 0, {
+          F: __dxlog_file12,
           L: 164,
           S: this,
           C: (f, a) => f(...a)
@@ -2400,7 +2523,7 @@ var InvitationsHandler = class {
     const { timeout = INVITATION_TIMEOUT } = invitation;
     if (deviceProfile) {
       invariant9(invitation.kind === Invitation4.Kind.DEVICE, "deviceProfile provided for non-device invitation", {
-        F: __dxlog_file11,
+        F: __dxlog_file12,
         L: 197,
         S: this,
         A: [
@@ -2413,12 +2536,12 @@ var InvitationsHandler = class {
     const guardedState = this._createGuardedState(ctx, invitation, stream);
     const shouldCancelInvitationFlow = (extension) => {
       const isLockedByAnotherConnection = guardedState.mutex.isLocked() && !extension.hasFlowLock();
-      log8("should cancel invitation flow", {
+      log9("should cancel invitation flow", {
         isLockedByAnotherConnection,
         invitationType: Invitation4.Type.DELEGATED,
         triedPeers: triedPeersIds.size
       }, {
-        F: __dxlog_file11,
+        F: __dxlog_file12,
         L: 205,
         S: this,
         C: (f, a) => f(...a)
@@ -2441,11 +2564,11 @@ var InvitationsHandler = class {
             return;
           }
           connectionCtx.onDispose(async () => {
-            log8("extension disposed", {
+            log9("extension disposed", {
               admitted,
               currentState: guardedState.current.state
             }, {
-              F: __dxlog_file11,
+              F: __dxlog_file12,
               L: 233,
               S: this,
               C: (f, a) => f(...a)
@@ -2460,10 +2583,10 @@ var InvitationsHandler = class {
           scheduleTask3(connectionCtx, async () => {
             const traceId = PublicKey7.random().toHex();
             try {
-              log8.trace("dxos.sdk.invitations-handler.guest.onOpen", trace5.begin({
+              log9.trace("dxos.sdk.invitations-handler.guest.onOpen", trace5.begin({
                 id: traceId
               }), {
-                F: __dxlog_file11,
+                F: __dxlog_file12,
                 L: 245,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2472,19 +2595,19 @@ var InvitationsHandler = class {
                 guardedState.set(extension, Invitation4.State.TIMEOUT);
                 extensionCtx.close();
               }, timeout);
-              log8("connected", {
+              log9("connected", {
                 ...protocol.toJSON()
               }, {
-                F: __dxlog_file11,
+                F: __dxlog_file12,
                 L: 256,
                 S: this,
                 C: (f, a) => f(...a)
               });
               guardedState.set(extension, Invitation4.State.CONNECTED);
-              log8("introduce", {
+              log9("introduce", {
                 ...protocol.toJSON()
               }, {
-                F: __dxlog_file11,
+                F: __dxlog_file12,
                 L: 260,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2493,11 +2616,11 @@ var InvitationsHandler = class {
                 invitationId: invitation.invitationId,
                 ...protocol.createIntroduction()
               });
-              log8("introduce response", {
+              log9("introduce response", {
                 ...protocol.toJSON(),
                 response: introductionResponse
               }, {
-                F: __dxlog_file11,
+                F: __dxlog_file12,
                 L: 265,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2515,10 +2638,10 @@ var InvitationsHandler = class {
                     break;
                 }
               }
-              log8("request admission", {
+              log9("request admission", {
                 ...protocol.toJSON()
               }, {
-                F: __dxlog_file11,
+                F: __dxlog_file12,
                 L: 291,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2527,10 +2650,10 @@ var InvitationsHandler = class {
               const admissionResponse = await extension.rpc.InvitationHostService.admit(admissionRequest);
               admitted = true;
               const result = await protocol.accept(admissionResponse, admissionRequest);
-              log8("admitted by host", {
+              log9("admitted by host", {
                 ...protocol.toJSON()
               }, {
-                F: __dxlog_file11,
+                F: __dxlog_file12,
                 L: 302,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2540,28 +2663,28 @@ var InvitationsHandler = class {
                 ...result,
                 state: Invitation4.State.SUCCESS
               });
-              log8.trace("dxos.sdk.invitations-handler.guest.onOpen", trace5.end({
+              log9.trace("dxos.sdk.invitations-handler.guest.onOpen", trace5.end({
                 id: traceId
               }), {
-                F: __dxlog_file11,
+                F: __dxlog_file12,
                 L: 308,
                 S: this,
                 C: (f, a) => f(...a)
               });
             } catch (err) {
               if (err instanceof TimeoutError) {
-                log8("timeout", {
+                log9("timeout", {
                   ...protocol.toJSON()
                 }, {
-                  F: __dxlog_file11,
+                  F: __dxlog_file12,
                   L: 311,
                   S: this,
                   C: (f, a) => f(...a)
                 });
                 guardedState.set(extension, Invitation4.State.TIMEOUT);
               } else {
-                log8("auth failed", err, {
-                  F: __dxlog_file11,
+                log9("auth failed", err, {
+                  F: __dxlog_file12,
                   L: 314,
                   S: this,
                   C: (f, a) => f(...a)
@@ -2569,11 +2692,11 @@ var InvitationsHandler = class {
                 guardedState.error(extension, err);
               }
               extensionCtx.close(err);
-              log8.trace("dxos.sdk.invitations-handler.guest.onOpen", trace5.error({
+              log9.trace("dxos.sdk.invitations-handler.guest.onOpen", trace5.error({
                 id: traceId,
                 error: err
               }), {
-                F: __dxlog_file11,
+                F: __dxlog_file12,
                 L: 318,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2586,18 +2709,18 @@ var InvitationsHandler = class {
             return;
           }
           if (err instanceof TimeoutError) {
-            log8("timeout", {
+            log9("timeout", {
               ...protocol.toJSON()
             }, {
-              F: __dxlog_file11,
+              F: __dxlog_file12,
               L: 327,
               S: this,
               C: (f, a) => f(...a)
             });
             guardedState.set(extension, Invitation4.State.TIMEOUT);
           } else {
-            log8("auth failed", err, {
-              F: __dxlog_file11,
+            log9("auth failed", err, {
+              F: __dxlog_file12,
               L: 330,
               S: this,
               C: (f, a) => f(...a)
@@ -2615,7 +2738,7 @@ var InvitationsHandler = class {
         await ctx.dispose();
       } else {
         invariant9(invitation.swarmKey, void 0, {
-          F: __dxlog_file11,
+          F: __dxlog_file12,
           L: 345,
           S: this,
           A: [
@@ -2709,12 +2832,12 @@ var InvitationsHandler = class {
     };
   }
   _logStateUpdate(invitation, actor, newState) {
-    log8("invitation state update", {
+    log9("invitation state update", {
       actor: actor?.constructor.name,
       newState: stateToString(newState),
       oldState: stateToString(invitation.state)
     }, {
-      F: __dxlog_file11,
+      F: __dxlog_file12,
       L: 438,
       S: this,
       C: (f, a) => f(...a)
@@ -2731,16 +2854,16 @@ var InvitationsHandler = class {
   }
   async _handleGuestOtpAuth(extension, setState, authenticated, options) {
     for (let attempt = 1; attempt <= MAX_OTP_ATTEMPTS; attempt++) {
-      log8("guest waiting for authentication code...", void 0, {
-        F: __dxlog_file11,
+      log9("guest waiting for authentication code...", void 0, {
+        F: __dxlog_file12,
         L: 462,
         S: this,
         C: (f, a) => f(...a)
       });
       setState(Invitation4.State.READY_FOR_AUTHENTICATION);
       const authCode = await authenticated.wait(options);
-      log8("sending authentication request", void 0, {
-        F: __dxlog_file11,
+      log9("sending authentication request", void 0, {
+        F: __dxlog_file12,
         L: 466,
         S: this,
         C: (f, a) => f(...a)
@@ -2756,10 +2879,10 @@ var InvitationsHandler = class {
         if (attempt === MAX_OTP_ATTEMPTS) {
           throw new Error(`Maximum retry attempts: ${MAX_OTP_ATTEMPTS}`);
         } else {
-          log8("retrying invalid code", {
+          log9("retrying invalid code", {
             attempt
           }, {
-            F: __dxlog_file11,
+            F: __dxlog_file12,
             L: 477,
             S: this,
             C: (f, a) => f(...a)
@@ -2776,8 +2899,8 @@ var InvitationsHandler = class {
     if (introductionResponse.challenge == null) {
       throw new Error("challenge missing in the introduction");
     }
-    log8("sending authentication request", void 0, {
-      F: __dxlog_file11,
+    log9("sending authentication request", void 0, {
+      F: __dxlog_file12,
       L: 496,
       S: this,
       C: (f, a) => f(...a)
@@ -2898,14 +3021,14 @@ var InvitationsServiceImpl = class {
 };
 
 // packages/sdk/client-services/src/packlets/invitations/space-invitation-protocol.ts
-import { createAdmissionCredentials, createCancelDelegatedSpaceInvitationCredential, createDelegatedSpaceInvitationCredential, getCredentialAssertion } from "@dxos/credentials";
+import { createAdmissionCredentials, createCancelDelegatedSpaceInvitationCredential, createDelegatedSpaceInvitationCredential, getCredentialAssertion as getCredentialAssertion2 } from "@dxos/credentials";
 import { writeMessages as writeMessages2 } from "@dxos/feed-store";
 import { invariant as invariant10 } from "@dxos/invariant";
-import { log as log9 } from "@dxos/log";
+import { log as log10 } from "@dxos/log";
 import { AlreadyJoinedError as AlreadyJoinedError2, AuthorizationError, InvalidInvitationError, SpaceNotFoundError } from "@dxos/protocols";
 import { Invitation as Invitation5 } from "@dxos/protocols/proto/dxos/client/services";
 import { SpaceMember as SpaceMember2 } from "@dxos/protocols/proto/dxos/halo/credentials";
-var __dxlog_file12 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/space-invitation-protocol.ts";
+var __dxlog_file13 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/space-invitation-protocol.ts";
 var SpaceInvitationProtocol = class {
   constructor(_spaceManager, _signingContext, _keyring, _spaceKey) {
     this._spaceManager = _spaceManager;
@@ -2940,7 +3063,7 @@ var SpaceInvitationProtocol = class {
   }
   async admit(invitation, request, guestProfile) {
     invariant10(this._spaceKey, void 0, {
-      F: __dxlog_file12,
+      F: __dxlog_file13,
       L: 76,
       S: this,
       A: [
@@ -2950,7 +3073,7 @@ var SpaceInvitationProtocol = class {
     });
     const space = this._spaceManager.spaces.get(this._spaceKey);
     invariant10(space, void 0, {
-      F: __dxlog_file12,
+      F: __dxlog_file13,
       L: 78,
       S: this,
       A: [
@@ -2959,7 +3082,7 @@ var SpaceInvitationProtocol = class {
       ]
     });
     invariant10(request.space, void 0, {
-      F: __dxlog_file12,
+      F: __dxlog_file13,
       L: 80,
       S: this,
       A: [
@@ -2971,18 +3094,18 @@ var SpaceInvitationProtocol = class {
     if (space.inner.spaceState.getMemberRole(identityKey) !== SpaceMember2.Role.REMOVED) {
       throw new AlreadyJoinedError2();
     }
-    log9("writing guest credentials", {
+    log10("writing guest credentials", {
       host: this._signingContext.deviceKey,
       guest: deviceKey
     }, {
-      F: __dxlog_file12,
+      F: __dxlog_file13,
       L: 87,
       S: this,
       C: (f, a) => f(...a)
     });
     const credentials = await createAdmissionCredentials(this._signingContext.credentialSigner, identityKey, space.key, space.inner.genesisFeedKey, invitation.role ?? SpaceMember2.Role.ADMIN, space.inner.spaceState.membershipChainHeads, guestProfile, invitation.delegationCredentialId);
     invariant10(credentials[0].credential, void 0, {
-      F: __dxlog_file12,
+      F: __dxlog_file13,
       L: 101,
       S: this,
       A: [
@@ -2991,8 +3114,8 @@ var SpaceInvitationProtocol = class {
       ]
     });
     const spaceMemberCredential = credentials[0].credential.credential;
-    invariant10(getCredentialAssertion(spaceMemberCredential)["@type"] === "dxos.halo.credentials.SpaceMember", void 0, {
-      F: __dxlog_file12,
+    invariant10(getCredentialAssertion2(spaceMemberCredential)["@type"] === "dxos.halo.credentials.SpaceMember", void 0, {
+      F: __dxlog_file13,
       L: 103,
       S: this,
       A: [
@@ -3010,7 +3133,7 @@ var SpaceInvitationProtocol = class {
   }
   async delegate(invitation) {
     invariant10(this._spaceKey, void 0, {
-      F: __dxlog_file12,
+      F: __dxlog_file13,
       L: 116,
       S: this,
       A: [
@@ -3020,7 +3143,7 @@ var SpaceInvitationProtocol = class {
     });
     const space = this._spaceManager.spaces.get(this._spaceKey);
     invariant10(space, void 0, {
-      F: __dxlog_file12,
+      F: __dxlog_file13,
       L: 118,
       S: this,
       A: [
@@ -3030,7 +3153,7 @@ var SpaceInvitationProtocol = class {
     });
     if (invitation.authMethod === Invitation5.AuthMethod.KNOWN_PUBLIC_KEY) {
       invariant10(invitation.guestKeypair?.publicKey, void 0, {
-        F: __dxlog_file12,
+        F: __dxlog_file13,
         L: 120,
         S: this,
         A: [
@@ -3039,11 +3162,11 @@ var SpaceInvitationProtocol = class {
         ]
       });
     }
-    log9("writing delegate space invitation", {
+    log10("writing delegate space invitation", {
       host: this._signingContext.deviceKey,
       id: invitation.invitationId
     }, {
-      F: __dxlog_file12,
+      F: __dxlog_file13,
       L: 123,
       S: this,
       C: (f, a) => f(...a)
@@ -3058,7 +3181,7 @@ var SpaceInvitationProtocol = class {
       guestKey: invitation.authMethod === Invitation5.AuthMethod.KNOWN_PUBLIC_KEY ? invitation.guestKeypair.publicKey : void 0
     });
     invariant10(credential.credential, void 0, {
-      F: __dxlog_file12,
+      F: __dxlog_file13,
       L: 143,
       S: this,
       A: [
@@ -3073,7 +3196,7 @@ var SpaceInvitationProtocol = class {
   }
   async cancelDelegation(invitation) {
     invariant10(this._spaceKey, void 0, {
-      F: __dxlog_file12,
+      F: __dxlog_file13,
       L: 149,
       S: this,
       A: [
@@ -3082,7 +3205,7 @@ var SpaceInvitationProtocol = class {
       ]
     });
     invariant10(invitation.type === Invitation5.Type.DELEGATED && invitation.delegationCredentialId, void 0, {
-      F: __dxlog_file12,
+      F: __dxlog_file13,
       L: 150,
       S: this,
       A: [
@@ -3092,7 +3215,7 @@ var SpaceInvitationProtocol = class {
     });
     const space = this._spaceManager.spaces.get(this._spaceKey);
     invariant10(space, void 0, {
-      F: __dxlog_file12,
+      F: __dxlog_file13,
       L: 152,
       S: this,
       A: [
@@ -3100,18 +3223,18 @@ var SpaceInvitationProtocol = class {
         ""
       ]
     });
-    log9("cancelling delegated space invitation", {
+    log10("cancelling delegated space invitation", {
       host: this._signingContext.deviceKey,
       id: invitation.invitationId
     }, {
-      F: __dxlog_file12,
+      F: __dxlog_file13,
       L: 154,
       S: this,
       C: (f, a) => f(...a)
     });
     const credential = await createCancelDelegatedSpaceInvitationCredential(this._signingContext.credentialSigner, space.key, invitation.delegationCredentialId);
     invariant10(credential.credential, void 0, {
-      F: __dxlog_file12,
+      F: __dxlog_file13,
       L: 161,
       S: this,
       A: [
@@ -3150,7 +3273,7 @@ var SpaceInvitationProtocol = class {
   }
   async accept(response) {
     invariant10(response.space, void 0, {
-      F: __dxlog_file12,
+      F: __dxlog_file13,
       L: 196,
       S: this,
       A: [
@@ -3159,9 +3282,9 @@ var SpaceInvitationProtocol = class {
       ]
     });
     const { credential, controlTimeframe, dataTimeframe } = response.space;
-    const assertion = getCredentialAssertion(credential);
+    const assertion = getCredentialAssertion2(credential);
     invariant10(assertion["@type"] === "dxos.halo.credentials.SpaceMember", "Invalid credential", {
-      F: __dxlog_file12,
+      F: __dxlog_file13,
       L: 199,
       S: this,
       A: [
@@ -3170,7 +3293,7 @@ var SpaceInvitationProtocol = class {
       ]
     });
     invariant10(credential.subject.id.equals(this._signingContext.identityKey), void 0, {
-      F: __dxlog_file12,
+      F: __dxlog_file13,
       L: 200,
       S: this,
       A: [
@@ -3202,10 +3325,10 @@ import { generatePasscode } from "@dxos/credentials";
 import { hasInvitationExpired } from "@dxos/echo-pipeline";
 import { invariant as invariant11 } from "@dxos/invariant";
 import { PublicKey as PublicKey8 } from "@dxos/keys";
-import { log as log10 } from "@dxos/log";
+import { log as log11 } from "@dxos/log";
 import { Invitation as Invitation6 } from "@dxos/protocols/proto/dxos/client/services";
 import { SpaceMember as SpaceMember3 } from "@dxos/protocols/proto/dxos/halo/credentials";
-var __dxlog_file13 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/invitations-manager.ts";
+var __dxlog_file14 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/invitations-manager.ts";
 var InvitationsManager = class {
   constructor(_invitationsHandler, _getHandler, _metadataStore) {
     this._invitationsHandler = _invitationsHandler;
@@ -3247,8 +3370,8 @@ var InvitationsManager = class {
     try {
       await this._persistIfRequired(handler, stream, invitation);
     } catch (err) {
-      log10.catch(err, void 0, {
-        F: __dxlog_file13,
+      log11.catch(err, void 0, {
+        F: __dxlog_file14,
         L: 82,
         S: this,
         C: (f, a) => f(...a)
@@ -3271,7 +3394,7 @@ var InvitationsManager = class {
       const freshInvitations = persistentInvitations.filter((invitation) => !hasInvitationExpired(invitation));
       const loadTasks = freshInvitations.map((persistentInvitation) => {
         invariant11(!this._createInvitations.get(persistentInvitation.invitationId), "invitation already exists", {
-          F: __dxlog_file13,
+          F: __dxlog_file14,
           L: 103,
           S: this,
           A: [
@@ -3289,8 +3412,8 @@ var InvitationsManager = class {
         invitations: cInvitations.map((invitation) => invitation.get())
       };
     } catch (err) {
-      log10.catch(err, void 0, {
-        F: __dxlog_file13,
+      log11.catch(err, void 0, {
+        F: __dxlog_file14,
         L: 110,
         S: this,
         C: (f, a) => f(...a)
@@ -3321,14 +3444,14 @@ var InvitationsManager = class {
     return invitation;
   }
   async authenticate({ invitationId, authCode }) {
-    log10("authenticating...", void 0, {
-      F: __dxlog_file13,
+    log11("authenticating...", void 0, {
+      F: __dxlog_file14,
       L: 140,
       S: this,
       C: (f, a) => f(...a)
     });
     invariant11(invitationId, void 0, {
-      F: __dxlog_file13,
+      F: __dxlog_file14,
       L: 141,
       S: this,
       A: [
@@ -3338,10 +3461,10 @@ var InvitationsManager = class {
     });
     const observable = this._acceptInvitations.get(invitationId);
     if (!observable) {
-      log10.warn("invalid invitation", {
+      log11.warn("invalid invitation", {
         invitationId
       }, {
-        F: __dxlog_file13,
+        F: __dxlog_file14,
         L: 144,
         S: this,
         C: (f, a) => f(...a)
@@ -3351,16 +3474,16 @@ var InvitationsManager = class {
     }
   }
   async cancelInvitation({ invitationId }) {
-    log10("cancelInvitation...", {
+    log11("cancelInvitation...", {
       invitationId
     }, {
-      F: __dxlog_file13,
+      F: __dxlog_file14,
       L: 151,
       S: this,
       C: (f, a) => f(...a)
     });
     invariant11(invitationId, void 0, {
-      F: __dxlog_file13,
+      F: __dxlog_file14,
       L: 152,
       S: this,
       A: [
@@ -3436,10 +3559,10 @@ var InvitationsManager = class {
       }
     });
     ctx.onDispose(() => {
-      log10("complete", {
+      log11("complete", {
         ...handler.toJSON()
       }, {
-        F: __dxlog_file13,
+        F: __dxlog_file14,
         L: 241,
         S: this,
         C: (f, a) => f(...a)
@@ -3469,10 +3592,10 @@ var InvitationsManager = class {
     const ctx = new Context6({
       onError: (err) => {
         if (err instanceof TimeoutError2) {
-          log10("timeout", {
+          log11("timeout", {
             ...handler.toJSON()
           }, {
-            F: __dxlog_file13,
+            F: __dxlog_file14,
             L: 261,
             S: this,
             C: (f, a) => f(...a)
@@ -3482,8 +3605,8 @@ var InvitationsManager = class {
             state: Invitation6.State.TIMEOUT
           });
         } else {
-          log10.warn("auth failed", err, {
-            F: __dxlog_file13,
+          log11.warn("auth failed", err, {
+            F: __dxlog_file14,
             L: 264,
             S: this,
             C: (f, a) => f(...a)
@@ -3497,10 +3620,10 @@ var InvitationsManager = class {
       }
     });
     ctx.onDispose(() => {
-      log10("complete", {
+      log11("complete", {
         ...handler.toJSON()
       }, {
-        F: __dxlog_file13,
+        F: __dxlog_file14,
         L: 271,
         S: this,
         C: (f, a) => f(...a)
@@ -3544,8 +3667,8 @@ var InvitationsManager = class {
     try {
       await this._metadataStore.removeInvitation(invitation.invitationId);
     } catch (err) {
-      log10.catch(err, void 0, {
-        F: __dxlog_file13,
+      log11.catch(err, void 0, {
+        F: __dxlog_file14,
         L: 307,
         S: this,
         C: (f, a) => f(...a)
@@ -3568,11 +3691,11 @@ import { AutomergeDocumentLoaderImpl, createIdFromSpaceKey, createMappedFeedWrit
 import { TYPE_PROPERTIES } from "@dxos/echo-schema";
 import { failedInvariant, invariant as invariant13 } from "@dxos/invariant";
 import { PublicKey as PublicKey10 } from "@dxos/keys";
-import { log as log12 } from "@dxos/log";
+import { log as log13 } from "@dxos/log";
 import { CancelledError, SystemError } from "@dxos/protocols";
-import { CreateEpochRequest, SpaceState } from "@dxos/protocols/proto/dxos/client/services";
+import { CreateEpochRequest, SpaceState as SpaceState2 } from "@dxos/protocols/proto/dxos/client/services";
 import { AdmittedFeed as AdmittedFeed3, SpaceMember as SpaceMember4 } from "@dxos/protocols/proto/dxos/halo/credentials";
-import { Timeframe as Timeframe2 } from "@dxos/timeframe";
+import { Timeframe as Timeframe3 } from "@dxos/timeframe";
 import { trace as trace6 } from "@dxos/tracing";
 import { ComplexSet as ComplexSet5, assignDeep } from "@dxos/util";
 
@@ -3619,11 +3742,11 @@ import { DeferredTask, Event as Event5, scheduleTask as scheduleTask4, sleep, Ti
 import { Context as Context7, rejectOnDispose } from "@dxos/context";
 import { invariant as invariant12 } from "@dxos/invariant";
 import { PublicKey as PublicKey9 } from "@dxos/keys";
-import { log as log11 } from "@dxos/log";
+import { log as log12 } from "@dxos/log";
 import { schema as schema4 } from "@dxos/protocols";
 import { RpcExtension as RpcExtension3 } from "@dxos/teleport";
 import { ComplexMap as ComplexMap2, ComplexSet as ComplexSet4, entry } from "@dxos/util";
-var __dxlog_file14 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/notarization-plugin.ts";
+var __dxlog_file15 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/notarization-plugin.ts";
 var DEFAULT_RETRY_TIMEOUT = 1e3;
 var DEFAULT_SUCCESS_DELAY = 1e3;
 var DEFAULT_NOTARIZE_TIMEOUT = 1e4;
@@ -3648,16 +3771,16 @@ var NotarizationPlugin = class {
   * Request credentials to be notarized.
   */
   async notarize({ ctx: opCtx, credentials, timeout = DEFAULT_NOTARIZE_TIMEOUT, retryTimeout = DEFAULT_RETRY_TIMEOUT, successDelay = DEFAULT_SUCCESS_DELAY }) {
-    log11("notarize", {
+    log12("notarize", {
       credentials
     }, {
-      F: __dxlog_file14,
+      F: __dxlog_file15,
       L: 90,
       S: this,
       C: (f, a) => f(...a)
     });
     invariant12(credentials.every((credential) => credential.id), "Credentials must have an id", {
-      F: __dxlog_file14,
+      F: __dxlog_file15,
       L: 91,
       S: this,
       A: [
@@ -3668,10 +3791,10 @@ var NotarizationPlugin = class {
     const errors = new Trigger6();
     const ctx = this._ctx.derive({
       onError: (err) => {
-        log11.warn("Notarization error", {
+        log12.warn("Notarization error", {
           err
         }, {
-          F: __dxlog_file14,
+          F: __dxlog_file15,
           L: 99,
           S: this,
           C: (f, a) => f(...a)
@@ -3683,11 +3806,11 @@ var NotarizationPlugin = class {
     opCtx?.onDispose(() => ctx.dispose());
     if (timeout !== 0) {
       scheduleTask4(ctx, () => {
-        log11.warn("Notarization timeout", {
+        log12.warn("Notarization timeout", {
           timeout,
           peers: Array.from(this._extensions).map((extension) => extension.remotePeerId)
         }, {
-          F: __dxlog_file14,
+          F: __dxlog_file15,
           L: 111,
           S: this,
           C: (f, a) => f(...a)
@@ -3707,10 +3830,10 @@ var NotarizationPlugin = class {
           ...this._extensions
         ].find((peer2) => !peersTried.has(peer2));
         if (!peer) {
-          log11.info("Exhausted all peers to notarize with", {
+          log12.info("Exhausted all peers to notarize with", {
             retryIn: retryTimeout
           }, {
-            F: __dxlog_file14,
+            F: __dxlog_file15,
             L: 136,
             S: this,
             C: (f, a) => f(...a)
@@ -3720,11 +3843,11 @@ var NotarizationPlugin = class {
           return;
         }
         peersTried.add(peer);
-        log11("try notarizing", {
+        log12("try notarizing", {
           peer: peer.localPeerId,
           credentialId: credentials.map((credential) => credential.id)
         }, {
-          F: __dxlog_file14,
+          F: __dxlog_file15,
           L: 143,
           S: this,
           C: (f, a) => f(...a)
@@ -3732,8 +3855,8 @@ var NotarizationPlugin = class {
         await peer.rpc.NotarizationService.notarize({
           credentials: credentials.filter((credential) => !this._processedCredentials.has(credential.id))
         });
-        log11("success", void 0, {
-          F: __dxlog_file14,
+        log12("success", void 0, {
+          F: __dxlog_file15,
           L: 147,
           S: this,
           C: (f, a) => f(...a)
@@ -3741,8 +3864,8 @@ var NotarizationPlugin = class {
         await sleep(successDelay);
       } catch (err) {
         if (!ctx.disposed && !err.message.includes(WRITER_NOT_SET_ERROR_CODE)) {
-          log11.info("error notarizing (recoverable)", err, {
-            F: __dxlog_file14,
+          log12.info("error notarizing (recoverable)", err, {
+            F: __dxlog_file15,
             L: 151,
             S: this,
             C: (f, a) => f(...a)
@@ -3759,8 +3882,8 @@ var NotarizationPlugin = class {
         allNotarized,
         errors.wait()
       ]);
-      log11("done", void 0, {
-        F: __dxlog_file14,
+      log12("done", void 0, {
+        F: __dxlog_file15,
         L: 162,
         S: this,
         C: (f, a) => f(...a)
@@ -3782,7 +3905,7 @@ var NotarizationPlugin = class {
   }
   setWriter(writer) {
     invariant12(!this._writer, "Writer already set.", {
-      F: __dxlog_file14,
+      F: __dxlog_file15,
       L: 181,
       S: this,
       A: [
@@ -3807,7 +3930,7 @@ var NotarizationPlugin = class {
     }
     for (const credential of request.credentials ?? []) {
       invariant12(credential.id, "Credential must have an id", {
-        F: __dxlog_file14,
+        F: __dxlog_file15,
         L: 200,
         S: this,
         A: [
@@ -3824,10 +3947,10 @@ var NotarizationPlugin = class {
   createExtension() {
     const extension = new NotarizationTeleportExtension({
       onOpen: async () => {
-        log11("extension opened", {
+        log12("extension opened", {
           peer: extension.localPeerId
         }, {
-          F: __dxlog_file14,
+          F: __dxlog_file15,
           L: 211,
           S: this,
           C: (f, a) => f(...a)
@@ -3836,10 +3959,10 @@ var NotarizationPlugin = class {
         this._extensionOpened.emit();
       },
       onClose: async () => {
-        log11("extension closed", {
+        log12("extension closed", {
           peer: extension.localPeerId
         }, {
-          F: __dxlog_file14,
+          F: __dxlog_file15,
           L: 216,
           S: this,
           C: (f, a) => f(...a)
@@ -3893,7 +4016,7 @@ function _ts_decorate4(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file15 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/data-space.ts";
+var __dxlog_file16 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/data-space.ts";
 var DataSpace = class {
   constructor(params) {
     this._ctx = new Context8();
@@ -3901,7 +4024,7 @@ var DataSpace = class {
     this._cache = void 0;
     // TODO(dmaretskyi): Move into Space?
     this._automergeSpaceState = new AutomergeSpaceState((rootUrl) => this._onNewAutomergeRoot(rootUrl));
-    this._state = SpaceState.CLOSED;
+    this._state = SpaceState2.CLOSED;
     /**
     * Error for _state === SpaceState.ERROR.
     */
@@ -3925,10 +4048,10 @@ var DataSpace = class {
     });
     this._cache = params.cache;
     this._state = params.initialState;
-    log12("new state", {
-      state: SpaceState[this._state]
+    log13("new state", {
+      state: SpaceState2[this._state]
     }, {
-      F: __dxlog_file15,
+      F: __dxlog_file16,
       L: 143,
       S: this,
       C: (f, a) => f(...a)
@@ -3969,20 +4092,23 @@ var DataSpace = class {
     };
   }
   async open() {
-    await this._open();
+    if (this._state === SpaceState2.CLOSED) {
+      await this._open();
+    }
   }
   async _open() {
+    await this._presence.open();
     await this._gossip.open();
     await this._notarizationPlugin.open();
     await this._inner.spaceState.addCredentialProcessor(this._notarizationPlugin);
     await this._inner.spaceState.addCredentialProcessor(this._automergeSpaceState);
     await this._inner.open(new Context8());
-    this._state = SpaceState.CONTROL_ONLY;
-    log12("new state", {
-      state: SpaceState[this._state]
+    this._state = SpaceState2.CONTROL_ONLY;
+    log13("new state", {
+      state: SpaceState2[this._state]
     }, {
-      F: __dxlog_file15,
-      L: 206,
+      F: __dxlog_file16,
+      L: 209,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3995,12 +4121,12 @@ var DataSpace = class {
   }
   async _close() {
     await this._callbacks.beforeClose?.();
-    this._state = SpaceState.CLOSED;
-    log12("new state", {
-      state: SpaceState[this._state]
+    this._state = SpaceState2.CLOSED;
+    log13("new state", {
+      state: SpaceState2[this._state]
     }, {
-      F: __dxlog_file15,
-      L: 220,
+      F: __dxlog_file16,
+      L: 223,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4011,7 +4137,7 @@ var DataSpace = class {
     await this._inner.spaceState.removeCredentialProcessor(this._automergeSpaceState);
     await this._inner.spaceState.removeCredentialProcessor(this._notarizationPlugin);
     await this._notarizationPlugin.close();
-    await this._presence.destroy();
+    await this._presence.close();
     await this._gossip.close();
   }
   async postMessage(channel, message) {
@@ -4030,26 +4156,26 @@ var DataSpace = class {
         await this.initializeDataPipeline();
       } catch (err) {
         if (err instanceof CancelledError || err instanceof ContextDisposedError3) {
-          log12("data pipeline initialization cancelled", err, {
-            F: __dxlog_file15,
-            L: 253,
+          log13("data pipeline initialization cancelled", err, {
+            F: __dxlog_file16,
+            L: 256,
             S: this,
             C: (f, a) => f(...a)
           });
           return;
         }
-        log12.error("Error initializing data pipeline", err, {
-          F: __dxlog_file15,
-          L: 257,
+        log13.error("Error initializing data pipeline", err, {
+          F: __dxlog_file16,
+          L: 260,
           S: this,
           C: (f, a) => f(...a)
         });
-        this._state = SpaceState.ERROR;
-        log12("new state", {
-          state: SpaceState[this._state]
+        this._state = SpaceState2.ERROR;
+        log13("new state", {
+          state: SpaceState2[this._state]
         }, {
-          F: __dxlog_file15,
-          L: 259,
+          F: __dxlog_file16,
+          L: 262,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -4061,15 +4187,15 @@ var DataSpace = class {
     });
   }
   async initializeDataPipeline() {
-    if (this._state !== SpaceState.CONTROL_ONLY) {
+    if (this._state !== SpaceState2.CONTROL_ONLY) {
       throw new SystemError("Invalid operation");
     }
-    this._state = SpaceState.INITIALIZING;
-    log12("new state", {
-      state: SpaceState[this._state]
+    this._state = SpaceState2.INITIALIZING;
+    log13("new state", {
+      state: SpaceState2[this._state]
     }, {
-      F: __dxlog_file15,
-      L: 275,
+      F: __dxlog_file16,
+      L: 278,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4077,19 +4203,19 @@ var DataSpace = class {
     await sleep2(1);
     this._automergeSpaceState.startProcessingRootDocs();
     await cancelWithContext4(this._ctx, this.automergeSpaceState.ensureEpochInitialized());
-    log12("data pipeline ready", void 0, {
-      F: __dxlog_file15,
-      L: 287,
+    log13("data pipeline ready", void 0, {
+      F: __dxlog_file16,
+      L: 290,
       S: this,
       C: (f, a) => f(...a)
     });
     await this._callbacks.beforeReady?.();
-    this._state = SpaceState.READY;
-    log12("new state", {
-      state: SpaceState[this._state]
+    this._state = SpaceState2.READY;
+    log13("new state", {
+      state: SpaceState2[this._state]
     }, {
-      F: __dxlog_file15,
-      L: 291,
+      F: __dxlog_file16,
+      L: 294,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4103,9 +4229,9 @@ var DataSpace = class {
     });
     this.metrics.controlPipelineReady = /* @__PURE__ */ new Date();
     await this._createWritableFeeds();
-    log12("writable feeds created", void 0, {
-      F: __dxlog_file15,
-      L: 307,
+    log13("writable feeds created", void 0, {
+      F: __dxlog_file16,
+      L: 310,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4163,12 +4289,12 @@ var DataSpace = class {
     }
   }
   _onNewAutomergeRoot(rootUrl) {
-    log12("loading automerge root doc for space", {
+    log13("loading automerge root doc for space", {
       space: this.key,
       rootUrl
     }, {
-      F: __dxlog_file15,
-      L: 373,
+      F: __dxlog_file16,
+      L: 376,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4193,12 +4319,12 @@ var DataSpace = class {
         if (!this._echoHost.roots.has(handle.documentId)) {
           await this._echoHost.openSpaceRoot(handle.url);
         } else {
-          log12.warn("echo database root already exists", {
+          log13.warn("echo database root already exists", {
             space: this.key,
             rootUrl
           }, {
-            F: __dxlog_file15,
-            L: 400,
+            F: __dxlog_file16,
+            L: 403,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -4207,13 +4333,13 @@ var DataSpace = class {
         if (err instanceof ContextDisposedError3) {
           return;
         }
-        log12.warn("error loading automerge root doc", {
+        log13.warn("error loading automerge root doc", {
           space: this.key,
           rootUrl,
           err
         }, {
-          F: __dxlog_file15,
-          L: 406,
+          F: __dxlog_file16,
+          L: 409,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -4244,7 +4370,7 @@ var DataSpace = class {
           epoch = {
             previousId: this._automergeSpaceState.lastEpoch?.id,
             number: (this._automergeSpaceState.lastEpoch?.subject.assertion.number ?? -1) + 1,
-            timeframe: this._automergeSpaceState.lastEpoch?.subject.assertion.timeframe ?? new Timeframe2(),
+            timeframe: this._automergeSpaceState.lastEpoch?.subject.assertion.timeframe ?? new Timeframe3(),
             automergeRoot: this._automergeSpaceState.lastEpoch?.subject.assertion?.automergeRoot
           };
         }
@@ -4255,7 +4381,7 @@ var DataSpace = class {
           epoch = {
             previousId: this._automergeSpaceState.lastEpoch?.id,
             number: (this._automergeSpaceState.lastEpoch?.subject.assertion.number ?? -1) + 1,
-            timeframe: this._automergeSpaceState.lastEpoch?.subject.assertion.timeframe ?? new Timeframe2(),
+            timeframe: this._automergeSpaceState.lastEpoch?.subject.assertion.timeframe ?? new Timeframe3(),
             automergeRoot: document.url
           };
         }
@@ -4270,8 +4396,8 @@ var DataSpace = class {
             newRoot.documentId
           ]);
           invariant13(typeof newRoot.url === "string" && newRoot.url.length > 0, void 0, {
-            F: __dxlog_file15,
-            L: 457,
+            F: __dxlog_file16,
+            L: 460,
             S: this,
             A: [
               "typeof newRoot.url === 'string' && newRoot.url.length > 0",
@@ -4281,16 +4407,16 @@ var DataSpace = class {
           epoch = {
             previousId: this._automergeSpaceState.lastEpoch?.id,
             number: (this._automergeSpaceState.lastEpoch?.subject.assertion.number ?? -1) + 1,
-            timeframe: this._automergeSpaceState.lastEpoch?.subject.assertion.timeframe ?? new Timeframe2(),
+            timeframe: this._automergeSpaceState.lastEpoch?.subject.assertion.timeframe ?? new Timeframe3(),
             automergeRoot: newRoot.url
           };
         }
         break;
       case CreateEpochRequest.Migration.FRAGMENT_AUTOMERGE_ROOT:
         {
-          log12.info("Fragmenting", void 0, {
-            F: __dxlog_file15,
-            L: 469,
+          log13.info("Fragmenting", void 0, {
+            F: __dxlog_file16,
+            L: 472,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -4301,8 +4427,8 @@ var DataSpace = class {
           const properties = findPropertiesObject(rootHandle.docSync());
           const otherObjects = objects.filter(([key]) => key !== properties?.[0]);
           invariant13(properties, "Properties not found", {
-            F: __dxlog_file15,
-            L: 479,
+            F: __dxlog_file16,
+            L: 482,
             S: this,
             A: [
               "properties",
@@ -4317,8 +4443,8 @@ var DataSpace = class {
           };
           const newRoot = this._echoHost.automergeRepo.create(newSpaceDoc);
           invariant13(typeof newRoot.url === "string" && newRoot.url.length > 0, void 0, {
-            F: __dxlog_file15,
-            L: 484,
+            F: __dxlog_file16,
+            L: 487,
             S: this,
             A: [
               "typeof newRoot.url === 'string' && newRoot.url.length > 0",
@@ -4341,7 +4467,7 @@ var DataSpace = class {
           epoch = {
             previousId: this._automergeSpaceState.lastEpoch?.id,
             number: (this._automergeSpaceState.lastEpoch?.subject.assertion.number ?? -1) + 1,
-            timeframe: this._automergeSpaceState.lastEpoch?.subject.assertion.timeframe ?? new Timeframe2(),
+            timeframe: this._automergeSpaceState.lastEpoch?.subject.assertion.timeframe ?? new Timeframe3(),
             automergeRoot: newRoot.url
           };
         }
@@ -4349,8 +4475,8 @@ var DataSpace = class {
       case CreateEpochRequest.Migration.REPLACE_AUTOMERGE_ROOT:
         {
           invariant13(options.newAutomergeRoot, void 0, {
-            F: __dxlog_file15,
-            L: 514,
+            F: __dxlog_file16,
+            L: 517,
             S: this,
             A: [
               "options.newAutomergeRoot",
@@ -4360,7 +4486,7 @@ var DataSpace = class {
           epoch = {
             previousId: this._automergeSpaceState.lastEpoch?.id,
             number: (this._automergeSpaceState.lastEpoch?.subject.assertion.number ?? -1) + 1,
-            timeframe: this._automergeSpaceState.lastEpoch?.subject.assertion.timeframe ?? new Timeframe2(),
+            timeframe: this._automergeSpaceState.lastEpoch?.subject.assertion.timeframe ?? new Timeframe3(),
             automergeRoot: options.newAutomergeRoot
           };
         }
@@ -4380,7 +4506,7 @@ var DataSpace = class {
         })
       }
     });
-    await this.inner.controlPipeline.state.waitUntilTimeframe(new Timeframe2([
+    await this.inner.controlPipeline.state.waitUntilTimeframe(new Timeframe3([
       [
         receipt.feedKey,
         receipt.seq
@@ -4389,25 +4515,30 @@ var DataSpace = class {
     await this._echoHost.updateIndexes();
   }
   async activate() {
-    if (this._state !== SpaceState.INACTIVE) {
+    if (![
+      SpaceState2.CLOSED,
+      SpaceState2.INACTIVE
+    ].includes(this._state)) {
       return;
     }
-    await this._metadataStore.setSpaceState(this.key, SpaceState.ACTIVE);
+    await this._metadataStore.setSpaceState(this.key, SpaceState2.ACTIVE);
     await this._open();
     this.initializeDataPipelineAsync();
   }
   async deactivate() {
-    if (this._state === SpaceState.INACTIVE) {
+    if (this._state === SpaceState2.INACTIVE) {
       return;
     }
-    await this._metadataStore.setSpaceState(this.key, SpaceState.INACTIVE);
-    await this._close();
-    this._state = SpaceState.INACTIVE;
-    log12("new state", {
-      state: SpaceState[this._state]
+    await this._metadataStore.setSpaceState(this.key, SpaceState2.INACTIVE);
+    if (this._state !== SpaceState2.CLOSED) {
+      await this._close();
+    }
+    this._state = SpaceState2.INACTIVE;
+    log13("new state", {
+      state: SpaceState2[this._state]
     }, {
-      F: __dxlog_file15,
-      L: 567,
+      F: __dxlog_file16,
+      L: 571,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4425,7 +4556,7 @@ _ts_decorate4([
 ], DataSpace.prototype, "key", null);
 _ts_decorate4([
   trace6.info({
-    enum: SpaceState
+    enum: SpaceState2
   })
 ], DataSpace.prototype, "state", null);
 _ts_decorate4([
@@ -4477,24 +4608,27 @@ var findPropertiesObject = (spaceDoc) => {
 
 // packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts
 import { Event as Event7, synchronized as synchronized2, trackLeaks as trackLeaks2 } from "@dxos/async";
+import { PropertiesType } from "@dxos/client-protocol";
 import { cancelWithContext as cancelWithContext5, Context as Context9 } from "@dxos/context";
-import { getCredentialAssertion as getCredentialAssertion2 } from "@dxos/credentials";
+import { getCredentialAssertion as getCredentialAssertion3 } from "@dxos/credentials";
 import { AuthStatus } from "@dxos/echo-pipeline";
+import { encodeReference } from "@dxos/echo-protocol";
+import { generateEchoId, getTypeReference } from "@dxos/echo-schema";
 import { invariant as invariant14 } from "@dxos/invariant";
 import { PublicKey as PublicKey11 } from "@dxos/keys";
-import { log as log13 } from "@dxos/log";
+import { log as log14 } from "@dxos/log";
 import { trace as Trace2 } from "@dxos/protocols";
-import { Invitation as Invitation7, SpaceState as SpaceState2 } from "@dxos/protocols/proto/dxos/client/services";
+import { Invitation as Invitation7, SpaceState as SpaceState3 } from "@dxos/protocols/proto/dxos/client/services";
 import { SpaceMember as SpaceMember6 } from "@dxos/protocols/proto/dxos/halo/credentials";
 import { Gossip as Gossip2, Presence as Presence2 } from "@dxos/teleport-extension-gossip";
 import { trace as trace7 } from "@dxos/tracing";
-import { ComplexMap as ComplexMap3, deferFunction as deferFunction2, forEachAsync } from "@dxos/util";
+import { assignDeep as assignDeep2, ComplexMap as ComplexMap3, deferFunction as deferFunction2, forEachAsync } from "@dxos/util";
 
 // packages/sdk/client-services/src/packlets/spaces/genesis.ts
 import { createCredential } from "@dxos/credentials";
 import { failUndefined } from "@dxos/debug";
 import { AdmittedFeed as AdmittedFeed4, SpaceMember as SpaceMember5 } from "@dxos/protocols/proto/dxos/halo/credentials";
-import { Timeframe as Timeframe3 } from "@dxos/timeframe";
+import { Timeframe as Timeframe4 } from "@dxos/timeframe";
 var spaceGenesis = async (keyring, signingContext, space, automergeRoot) => {
   const credentials = [
     await createCredential({
@@ -4544,7 +4678,7 @@ var spaceGenesis = async (keyring, signingContext, space, automergeRoot) => {
         "@type": "dxos.halo.credentials.Epoch",
         number: 0,
         previousId: void 0,
-        timeframe: new Timeframe3(),
+        timeframe: new Timeframe4(),
         snapshotCid: void 0,
         automergeRoot
       }
@@ -4571,11 +4705,12 @@ function _ts_decorate5(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file16 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts";
+var __dxlog_file17 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts";
 var PRESENCE_ANNOUNCE_INTERVAL = 1e4;
 var PRESENCE_OFFLINE_TIMEOUT = 2e4;
+var DEFAULT_SPACE_KEY = "__DEFAULT__";
 var DataSpaceManager = class {
-  constructor(_spaceManager, _metadataStore, _keyring, _signingContext, _feedStore, _echoHost, _invitationsManager, params) {
+  constructor(_spaceManager, _metadataStore, _keyring, _signingContext, _feedStore, _echoHost, _invitationsManager, _params) {
     this._spaceManager = _spaceManager;
     this._metadataStore = _metadataStore;
     this._keyring = _keyring;
@@ -4583,14 +4718,12 @@ var DataSpaceManager = class {
     this._feedStore = _feedStore;
     this._echoHost = _echoHost;
     this._invitationsManager = _invitationsManager;
+    this._params = _params;
     this._ctx = new Context9();
     this.updated = new Event7();
     this._spaces = new ComplexMap3(PublicKey11.hash);
     this._isOpen = false;
     this._instanceId = PublicKey11.random().toHex();
-    const { spaceMemberPresenceAnnounceInterval = PRESENCE_ANNOUNCE_INTERVAL, spaceMemberPresenceOfflineTimeout = PRESENCE_OFFLINE_TIMEOUT } = params ?? {};
-    this._spaceMemberPresenceAnnounceInterval = spaceMemberPresenceAnnounceInterval;
-    this._spaceMemberPresenceOfflineTimeout = spaceMemberPresenceOfflineTimeout;
     trace7.diagnostic({
       id: "spaces",
       name: "Spaces",
@@ -4602,7 +4735,7 @@ var DataSpaceManager = class {
           const properties = rootDoc && findPropertiesObject(rootDoc);
           return {
             key: space.key.toHex(),
-            state: SpaceState2[space.state],
+            state: SpaceState3[space.state],
             name: properties?.[1].data.name ?? null,
             inlineObjects: rootDoc ? Object.keys(rootDoc.objects ?? {}).length : null,
             linkedObjects: rootDoc ? Object.keys(rootDoc.links ?? {}).length : null,
@@ -4619,46 +4752,46 @@ var DataSpaceManager = class {
     return this._spaces;
   }
   async open() {
-    log13("open", void 0, {
-      F: __dxlog_file16,
-      L: 144,
+    log14("open", void 0, {
+      F: __dxlog_file17,
+      L: 140,
       S: this,
       C: (f, a) => f(...a)
     });
-    log13.trace("dxos.echo.data-space-manager.open", Trace2.begin({
+    log14.trace("dxos.echo.data-space-manager.open", Trace2.begin({
       id: this._instanceId
     }), {
-      F: __dxlog_file16,
-      L: 145,
+      F: __dxlog_file17,
+      L: 141,
       S: this,
       C: (f, a) => f(...a)
     });
-    log13("metadata loaded", {
+    log14("metadata loaded", {
       spaces: this._metadataStore.spaces.length
     }, {
-      F: __dxlog_file16,
-      L: 146,
+      F: __dxlog_file17,
+      L: 142,
       S: this,
       C: (f, a) => f(...a)
     });
     await forEachAsync(this._metadataStore.spaces, async (spaceMetadata) => {
       try {
-        log13("load space", {
+        log14("load space", {
           spaceMetadata
         }, {
-          F: __dxlog_file16,
-          L: 150,
+          F: __dxlog_file17,
+          L: 146,
           S: this,
           C: (f, a) => f(...a)
         });
         await this._constructSpace(spaceMetadata);
       } catch (err) {
-        log13.error("Error loading space", {
+        log14.error("Error loading space", {
           spaceMetadata,
           err
         }, {
-          F: __dxlog_file16,
-          L: 153,
+          F: __dxlog_file17,
+          L: 149,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -4666,24 +4799,19 @@ var DataSpaceManager = class {
     });
     this._isOpen = true;
     this.updated.emit();
-    for (const space of this._spaces.values()) {
-      if (space.state !== SpaceState2.INACTIVE) {
-        space.initializeDataPipelineAsync();
-      }
-    }
-    log13.trace("dxos.echo.data-space-manager.open", Trace2.end({
+    log14.trace("dxos.echo.data-space-manager.open", Trace2.end({
       id: this._instanceId
     }), {
-      F: __dxlog_file16,
-      L: 166,
+      F: __dxlog_file17,
+      L: 156,
       S: this,
       C: (f, a) => f(...a)
     });
   }
   async close() {
-    log13("close", void 0, {
-      F: __dxlog_file16,
-      L: 171,
+    log14("close", void 0, {
+      F: __dxlog_file17,
+      L: 161,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4692,14 +4820,15 @@ var DataSpaceManager = class {
     for (const space of this._spaces.values()) {
       await space.close();
     }
+    this._spaces.clear();
   }
   /**
   * Creates a new space writing the genesis credentials to the control feed.
   */
   async createSpace() {
     invariant14(this._isOpen, "Not open.", {
-      F: __dxlog_file16,
-      L: 184,
+      F: __dxlog_file17,
+      L: 175,
       S: this,
       A: [
         "this._isOpen",
@@ -4714,24 +4843,25 @@ var DataSpaceManager = class {
       genesisFeedKey: controlFeedKey,
       controlFeedKey,
       dataFeedKey,
-      state: SpaceState2.ACTIVE
+      state: SpaceState3.ACTIVE
     };
-    log13("creating space...", {
+    log14("creating space...", {
       spaceKey
     }, {
-      F: __dxlog_file16,
-      L: 196,
+      F: __dxlog_file17,
+      L: 187,
       S: this,
       C: (f, a) => f(...a)
     });
     const root = await this._echoHost.createSpaceRoot(spaceKey);
     const space = await this._constructSpace(metadata);
+    await space.open();
     const credentials = await spaceGenesis(this._keyring, this._signingContext, space.inner, root.url);
     await this._metadataStore.addSpace(metadata);
     const memberCredential = credentials[1];
-    invariant14(getCredentialAssertion2(memberCredential)["@type"] === "dxos.halo.credentials.SpaceMember", void 0, {
-      F: __dxlog_file16,
-      L: 205,
+    invariant14(getCredentialAssertion3(memberCredential)["@type"] === "dxos.halo.credentials.SpaceMember", void 0, {
+      F: __dxlog_file17,
+      L: 197,
       S: this,
       A: [
         "getCredentialAssertion(memberCredential)['@type'] === 'dxos.halo.credentials.SpaceMember'",
@@ -4743,19 +4873,63 @@ var DataSpaceManager = class {
     this.updated.emit();
     return space;
   }
+  async isDefaultSpace(space) {
+    const rootDoc = await this._getSpaceRootDocument(space);
+    const [_, properties] = findPropertiesObject(rootDoc.docSync()) ?? [];
+    return properties?.data?.[DEFAULT_SPACE_KEY] === this._signingContext.identityKey.toHex();
+  }
+  async createDefaultSpace() {
+    const space = await this.createSpace();
+    const document = await this._getSpaceRootDocument(space);
+    const properties = {
+      system: {
+        type: encodeReference(getTypeReference(PropertiesType))
+      },
+      data: {
+        [DEFAULT_SPACE_KEY]: this._signingContext.identityKey.toHex()
+      },
+      meta: {
+        keys: []
+      }
+    };
+    const propertiesId = generateEchoId();
+    document.change((doc) => {
+      assignDeep2(doc, [
+        "objects",
+        propertiesId
+      ], properties);
+    });
+    await this._echoHost.flush();
+    return space;
+  }
+  async _getSpaceRootDocument(space) {
+    const automergeIndex = space.automergeSpaceState.rootUrl;
+    invariant14(automergeIndex, void 0, {
+      F: __dxlog_file17,
+      L: 240,
+      S: this,
+      A: [
+        "automergeIndex",
+        ""
+      ]
+    });
+    const document = this._echoHost.automergeRepo.find(automergeIndex);
+    await document.whenReady();
+    return document;
+  }
   // TODO(burdon): Rename join space.
   async acceptSpace(opts) {
-    log13("accept space", {
+    log14("accept space", {
       opts
     }, {
-      F: __dxlog_file16,
-      L: 217,
+      F: __dxlog_file17,
+      L: 249,
       S: this,
       C: (f, a) => f(...a)
     });
     invariant14(this._isOpen, "Not open.", {
-      F: __dxlog_file16,
-      L: 218,
+      F: __dxlog_file17,
+      L: 250,
       S: this,
       A: [
         "this._isOpen",
@@ -4763,8 +4937,8 @@ var DataSpaceManager = class {
       ]
     });
     invariant14(!this._spaces.has(opts.spaceKey), "Space already exists.", {
-      F: __dxlog_file16,
-      L: 219,
+      F: __dxlog_file17,
+      L: 251,
       S: this,
       A: [
         "!this._spaces.has(opts.spaceKey)",
@@ -4778,6 +4952,7 @@ var DataSpaceManager = class {
       dataTimeframe: opts.dataTimeframe
     };
     const space = await this._constructSpace(metadata);
+    await space.open();
     await this._metadataStore.addSpace(metadata);
     space.initializeDataPipelineAsync();
     this.updated.emit();
@@ -4791,15 +4966,15 @@ var DataSpaceManager = class {
   async waitUntilSpaceReady(spaceKey) {
     await cancelWithContext5(this._ctx, this.updated.waitForCondition(() => {
       const space = this._spaces.get(spaceKey);
-      return !!space && space.state === SpaceState2.READY;
+      return !!space && space.state === SpaceState3.READY;
     }));
   }
   async _constructSpace(metadata) {
-    log13("construct space", {
+    log14("construct space", {
       metadata
     }, {
-      F: __dxlog_file16,
-      L: 252,
+      F: __dxlog_file17,
+      L: 285,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4807,8 +4982,8 @@ var DataSpaceManager = class {
       localPeerId: this._signingContext.deviceKey
     });
     const presence = new Presence2({
-      announceInterval: this._spaceMemberPresenceAnnounceInterval,
-      offlineTimeout: this._spaceMemberPresenceOfflineTimeout,
+      announceInterval: this._params?.spaceMemberPresenceAnnounceInterval ?? PRESENCE_ANNOUNCE_INTERVAL,
+      offlineTimeout: this._params?.spaceMemberPresenceOfflineTimeout ?? PRESENCE_OFFLINE_TIMEOUT,
       identityKey: this._signingContext.identityKey,
       gossip
     });
@@ -4835,15 +5010,15 @@ var DataSpaceManager = class {
         session.addExtension("dxos.mesh.teleport.automerge", this._echoHost.createReplicationExtension());
       },
       onAuthFailure: () => {
-        log13.warn("auth failure", void 0, {
-          F: __dxlog_file16,
-          L: 289,
+        log14.warn("auth failure", void 0, {
+          F: __dxlog_file17,
+          L: 322,
           S: this,
           C: (f, a) => f(...a)
         });
       },
       onMemberRolesChanged: async (members) => {
-        if (dataSpace?.state === SpaceState2.READY) {
+        if (dataSpace?.state === SpaceState3.READY) {
           this._handleMemberRoleChanges(presence, space.protocol, members);
         }
       },
@@ -4856,7 +5031,7 @@ var DataSpaceManager = class {
     dataFeed && await space.setDataFeed(dataFeed);
     const dataSpace = new DataSpace({
       inner: space,
-      initialState: metadata.state === SpaceState2.INACTIVE ? SpaceState2.INACTIVE : SpaceState2.CLOSED,
+      initialState: metadata.state === SpaceState3.INACTIVE ? SpaceState3.INACTIVE : SpaceState3.CLOSED,
       metadataStore: this._metadataStore,
       gossip,
       presence,
@@ -4866,22 +5041,22 @@ var DataSpaceManager = class {
       signingContext: this._signingContext,
       callbacks: {
         beforeReady: async () => {
-          log13("before space ready", {
+          log14("before space ready", {
             space: space.key
           }, {
-            F: __dxlog_file16,
-            L: 316,
+            F: __dxlog_file17,
+            L: 349,
             S: this,
             C: (f, a) => f(...a)
           });
         },
         afterReady: async () => {
-          log13("after space ready", {
+          log14("after space ready", {
             space: space.key,
             open: this._isOpen
           }, {
-            F: __dxlog_file16,
-            L: 319,
+            F: __dxlog_file17,
+            L: 352,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -4896,11 +5071,11 @@ var DataSpaceManager = class {
           }
         },
         beforeClose: async () => {
-          log13("before space close", {
+          log14("before space close", {
             space: space.key
           }, {
-            F: __dxlog_file16,
-            L: 327,
+            F: __dxlog_file17,
+            L: 360,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -4909,13 +5084,10 @@ var DataSpaceManager = class {
       cache: metadata.cache
     });
     presence.newPeer.on((peerState) => {
-      if (dataSpace.state === SpaceState2.READY) {
+      if (dataSpace.state === SpaceState3.READY) {
         this._handleNewPeerConnected(space, peerState);
       }
     });
-    if (metadata.state !== SpaceState2.INACTIVE) {
-      await dataSpace.open();
-    }
     if (metadata.controlTimeframe) {
       dataSpace.inner.controlPipeline.state.setTargetTimeframe(metadata.controlTimeframe);
     }
@@ -4934,17 +5106,17 @@ var DataSpaceManager = class {
         return (s && member.role === SpaceMember6.Role.REMOVED !== (s.authStatus === AuthStatus.FAILURE)) ?? false;
       });
       sessionsToClose.forEach((session) => {
-        void session.close().catch(log13.error);
+        void session.close().catch(log14.error);
       });
       closedSessions += sessionsToClose.length;
     }
-    log13("processed member role changes", {
+    log14("processed member role changes", {
       roleChangeCount: memberInfo.length,
       peersOnline: presence.getPeersOnline().length,
       closedSessions
     }, {
-      F: __dxlog_file16,
-      L: 367,
+      F: __dxlog_file17,
+      L: 396,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4955,20 +5127,20 @@ var DataSpaceManager = class {
     if (role === SpaceMember6.Role.REMOVED) {
       const session = peerState.peerId && space.protocol.sessions.get(peerState.peerId);
       if (session != null) {
-        log13("closing a session with a removed peer", {
+        log14("closing a session with a removed peer", {
           peerId: peerState.peerId
         }, {
-          F: __dxlog_file16,
-          L: 381,
+          F: __dxlog_file17,
+          L: 410,
           S: this,
           C: (f, a) => f(...a)
         });
-        void session.close().catch(log13.error);
+        void session.close().catch(log14.error);
       }
     }
   }
   async _handleInvitationStatusChange(dataSpace, delegatedInvitation, isActive) {
-    if (dataSpace?.state !== SpaceState2.READY) {
+    if (dataSpace?.state !== SpaceState3.READY) {
       return;
     }
     if (isActive) {
@@ -5022,15 +5194,15 @@ DataSpaceManager = _ts_decorate5([
 // packages/sdk/client-services/src/packlets/spaces/spaces-service.ts
 import { EventSubscriptions as EventSubscriptions2, UpdateScheduler, scheduleTask as scheduleTask6 } from "@dxos/async";
 import { Stream as Stream10 } from "@dxos/codec-protobuf";
-import { createAdmissionCredentials as createAdmissionCredentials2, getCredentialAssertion as getCredentialAssertion3 } from "@dxos/credentials";
+import { createAdmissionCredentials as createAdmissionCredentials2, getCredentialAssertion as getCredentialAssertion4 } from "@dxos/credentials";
 import { raise as raise2 } from "@dxos/debug";
 import { writeMessages as writeMessages3 } from "@dxos/feed-store";
 import { invariant as invariant15 } from "@dxos/invariant";
-import { log as log14 } from "@dxos/log";
+import { log as log15 } from "@dxos/log";
 import { ApiError, SpaceNotFoundError as SpaceNotFoundError2, encodeError, IdentityNotInitializedError, AuthorizationError as AuthorizationError2 } from "@dxos/protocols";
-import { SpaceMember as SpaceMember7, SpaceState as SpaceState3 } from "@dxos/protocols/proto/dxos/client/services";
+import { SpaceMember as SpaceMember7, SpaceState as SpaceState4 } from "@dxos/protocols/proto/dxos/client/services";
 import { trace as trace8 } from "@dxos/tracing";
-var __dxlog_file17 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/spaces-service.ts";
+var __dxlog_file18 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/spaces-service.ts";
 var SpacesServiceImpl = class {
   constructor(_identityManager, _spaceManager, _getDataSpaceManager) {
     this._identityManager = _identityManager;
@@ -5049,10 +5221,10 @@ var SpacesServiceImpl = class {
     const space = dataSpaceManager.spaces.get(spaceKey) ?? raise2(new SpaceNotFoundError2(spaceKey));
     if (state) {
       switch (state) {
-        case SpaceState3.ACTIVE:
+        case SpaceState4.ACTIVE:
           await space.activate();
           break;
-        case SpaceState3.INACTIVE:
+        case SpaceState4.INACTIVE:
           await space.deactivate();
           break;
         default:
@@ -5074,7 +5246,7 @@ var SpacesServiceImpl = class {
     }
     const credentials = await createAdmissionCredentials2(identity.getIdentityCredentialSigner(), request.memberKey, space.key, space.genesisFeedKey, request.newRole, space.spaceState.membershipChainHeads);
     invariant15(credentials[0].credential, void 0, {
-      F: __dxlog_file17,
+      F: __dxlog_file18,
       L: 97,
       S: this,
       A: [
@@ -5083,8 +5255,8 @@ var SpacesServiceImpl = class {
       ]
     });
     const spaceMemberCredential = credentials[0].credential.credential;
-    invariant15(getCredentialAssertion3(spaceMemberCredential)["@type"] === "dxos.halo.credentials.SpaceMember", void 0, {
-      F: __dxlog_file17,
+    invariant15(getCredentialAssertion4(spaceMemberCredential)["@type"] === "dxos.halo.credentials.SpaceMember", void 0, {
+      F: __dxlog_file18,
       L: 99,
       S: this,
       A: [
@@ -5099,10 +5271,10 @@ var SpacesServiceImpl = class {
       const scheduler = new UpdateScheduler(ctx, async () => {
         const dataSpaceManager = await this._getDataSpaceManager();
         const spaces = Array.from(dataSpaceManager.spaces.values()).map((space) => this._serializeSpace(space));
-        log14("update", {
+        log15("update", {
           spaces
         }, {
-          F: __dxlog_file17,
+          F: __dxlog_file18,
           L: 110,
           S: this,
           C: (f, a) => f(...a)
@@ -5186,7 +5358,7 @@ var SpacesServiceImpl = class {
         });
       } else {
         invariant15(!credential.id, "Id on unsigned credentials is not allowed", {
-          F: __dxlog_file17,
+          F: __dxlog_file18,
           L: 198,
           S: this,
           A: [
@@ -5195,7 +5367,7 @@ var SpacesServiceImpl = class {
           ]
         });
         invariant15(this._identityManager.identity, "Identity is not available", {
-          F: __dxlog_file17,
+          F: __dxlog_file18,
           L: 199,
           S: this,
           A: [
@@ -5205,7 +5377,7 @@ var SpacesServiceImpl = class {
         });
         const signer = this._identityManager.identity.getIdentityCredentialSigner();
         invariant15(credential.issuer.equals(signer.getIssuer()), void 0, {
-          F: __dxlog_file17,
+          F: __dxlog_file18,
           L: 201,
           S: this,
           A: [
@@ -5295,8 +5467,8 @@ var getChannelId = (channel) => `user-channel/${channel}`;
 
 // packages/sdk/client-services/src/packlets/services/service-context.ts
 import { Trigger as Trigger7 } from "@dxos/async";
-import { Context as Context10, Resource } from "@dxos/context";
-import { getCredentialAssertion as getCredentialAssertion4 } from "@dxos/credentials";
+import { Context as Context10, Resource as Resource2 } from "@dxos/context";
+import { getCredentialAssertion as getCredentialAssertion5 } from "@dxos/credentials";
 import { failUndefined as failUndefined2 } from "@dxos/debug";
 import { EchoHost } from "@dxos/echo-db";
 import { MetadataStore, SnapshotStore, SpaceManager, valueEncoding } from "@dxos/echo-pipeline";
@@ -5304,7 +5476,7 @@ import { FeedFactory, FeedStore } from "@dxos/feed-store";
 import { invariant as invariant16 } from "@dxos/invariant";
 import { Keyring } from "@dxos/keyring";
 import { PublicKey as PublicKey12 } from "@dxos/keys";
-import { log as log15 } from "@dxos/log";
+import { log as log16 } from "@dxos/log";
 import { InvalidStorageVersionError, STORAGE_VERSION as STORAGE_VERSION2, trace as trace9 } from "@dxos/protocols";
 import { Invitation as Invitation8 } from "@dxos/protocols/proto/dxos/client/services";
 import { BlobStore } from "@dxos/teleport-extension-object-sync";
@@ -5320,8 +5492,8 @@ function _ts_decorate6(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file18 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/services/service-context.ts";
-var ServiceContext = class extends Resource {
+var __dxlog_file19 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/services/service-context.ts";
+var ServiceContext = class extends Resource2 {
   constructor(storage, level, networkManager, signalManager, _runtimeParams) {
     super();
     this.storage = storage;
@@ -5355,8 +5527,7 @@ var ServiceContext = class extends Resource {
     });
     this.identityManager = new IdentityManager(this.metadataStore, this.keyring, this.feedStore, this.spaceManager, this._runtimeParams);
     this.echoHost = new EchoHost({
-      kv: this.level,
-      storage: this.storage
+      kv: this.level
     });
     this.invitations = new InvitationsHandler(this.networkManager, _runtimeParams?.invitationConnectionDefaultParams);
     this.invitationsManager = new InvitationsManager(this.invitations, (invitation) => this.getInvitationHandler(invitation), this.metadataStore);
@@ -5364,17 +5535,17 @@ var ServiceContext = class extends Resource {
   }
   async _open(ctx) {
     await this._checkStorageVersion();
-    log15("opening...", void 0, {
-      F: __dxlog_file18,
-      L: 152,
+    log16("opening...", void 0, {
+      F: __dxlog_file19,
+      L: 149,
       S: this,
       C: (f, a) => f(...a)
     });
-    log15.trace("dxos.sdk.service-context.open", trace9.begin({
+    log16.trace("dxos.sdk.service-context.open", trace9.begin({
       id: this._instanceId
     }), {
-      F: __dxlog_file18,
-      L: 153,
+      F: __dxlog_file19,
+      L: 150,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -5388,33 +5559,33 @@ var ServiceContext = class extends Resource {
       await this._initialize(ctx);
     }
     const loadedInvitations = await this.invitationsManager.loadPersistentInvitations();
-    log15("loaded persistent invitations", {
+    log16("loaded persistent invitations", {
       count: loadedInvitations.invitations?.length
     }, {
-      F: __dxlog_file18,
-      L: 166,
+      F: __dxlog_file19,
+      L: 163,
       S: this,
       C: (f, a) => f(...a)
     });
-    log15.trace("dxos.sdk.service-context.open", trace9.end({
+    log16.trace("dxos.sdk.service-context.open", trace9.end({
       id: this._instanceId
     }), {
-      F: __dxlog_file18,
-      L: 168,
+      F: __dxlog_file19,
+      L: 165,
       S: this,
       C: (f, a) => f(...a)
     });
-    log15("opened", void 0, {
-      F: __dxlog_file18,
-      L: 169,
+    log16("opened", void 0, {
+      F: __dxlog_file19,
+      L: 166,
       S: this,
       C: (f, a) => f(...a)
     });
   }
   async _close(ctx) {
-    log15("closing...", void 0, {
-      F: __dxlog_file18,
-      L: 173,
+    log16("closing...", void 0, {
+      F: __dxlog_file19,
+      L: 170,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -5429,9 +5600,9 @@ var ServiceContext = class extends Resource {
     await this.echoHost.close(ctx);
     await this.networkManager.close();
     await this.signalManager.close();
-    log15("closed", void 0, {
-      F: __dxlog_file18,
-      L: 185,
+    log16("closed", void 0, {
+      F: __dxlog_file19,
+      L: 182,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -5444,8 +5615,8 @@ var ServiceContext = class extends Resource {
   getInvitationHandler(invitation) {
     const factory = this._handlerFactories.get(invitation.kind);
     invariant16(factory, `Unknown invitation kind: ${invitation.kind}`, {
-      F: __dxlog_file18,
-      L: 196,
+      F: __dxlog_file19,
+      L: 193,
       S: this,
       A: [
         "factory",
@@ -5475,9 +5646,9 @@ var ServiceContext = class extends Resource {
   }
   // Called when identity is created.
   async _initialize(ctx) {
-    log15("initializing spaces...", void 0, {
-      F: __dxlog_file18,
-      L: 227,
+    log16("initializing spaces...", void 0, {
+      F: __dxlog_file19,
+      L: 224,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -5499,8 +5670,8 @@ var ServiceContext = class extends Resource {
     await this.dataSpaceManager.open();
     this._handlerFactories.set(Invitation8.Kind.SPACE, (invitation) => {
       invariant16(this.dataSpaceManager, "dataSpaceManager not initialized yet", {
-        F: __dxlog_file18,
-        L: 252,
+        F: __dxlog_file19,
+        L: 249,
         S: this,
         A: [
           "this.dataSpaceManager",
@@ -5512,7 +5683,7 @@ var ServiceContext = class extends Resource {
     this.initialized.wake();
     this._deviceSpaceSync = {
       processCredential: async (credential) => {
-        const assertion = getCredentialAssertion4(credential);
+        const assertion = getCredentialAssertion5(credential);
         if (assertion["@type"] !== "dxos.halo.credentials.SpaceMember") {
           return;
         }
@@ -5520,33 +5691,33 @@ var ServiceContext = class extends Resource {
           return;
         }
         if (!this.dataSpaceManager) {
-          log15("dataSpaceManager not initialized yet, ignoring space admission", {
+          log16("dataSpaceManager not initialized yet, ignoring space admission", {
             details: assertion
           }, {
-            F: __dxlog_file18,
-            L: 268,
+            F: __dxlog_file19,
+            L: 265,
             S: this,
             C: (f, a) => f(...a)
           });
           return;
         }
         if (this.dataSpaceManager.spaces.has(assertion.spaceKey)) {
-          log15("space already exists, ignoring space admission", {
+          log16("space already exists, ignoring space admission", {
             details: assertion
           }, {
-            F: __dxlog_file18,
-            L: 272,
+            F: __dxlog_file19,
+            L: 269,
             S: this,
             C: (f, a) => f(...a)
           });
           return;
         }
         try {
-          log15("accepting space recorded in halo", {
+          log16("accepting space recorded in halo", {
             details: assertion
           }, {
-            F: __dxlog_file18,
-            L: 277,
+            F: __dxlog_file19,
+            L: 274,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -5555,9 +5726,9 @@ var ServiceContext = class extends Resource {
             genesisFeedKey: assertion.genesisFeedKey
           });
         } catch (err) {
-          log15.catch(err, void 0, {
-            F: __dxlog_file18,
-            L: 283,
+          log16.catch(err, void 0, {
+            F: __dxlog_file19,
+            L: 280,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -5605,7 +5776,7 @@ var ServiceRegistry = class {
 // packages/sdk/client-services/src/packlets/locks/browser.ts
 import { asyncTimeout as asyncTimeout3, Trigger as Trigger8 } from "@dxos/async";
 import { RESOURCE_LOCK_TIMEOUT } from "@dxos/client-protocol";
-import { log as log16, logInfo } from "@dxos/log";
+import { log as log17, logInfo } from "@dxos/log";
 function _ts_decorate7(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
@@ -5616,7 +5787,7 @@ function _ts_decorate7(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file19 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/locks/browser.ts";
+var __dxlog_file20 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/locks/browser.ts";
 var Message;
 (function(Message2) {
   Message2["ACQUIRING"] = "acquiring";
@@ -5638,29 +5809,29 @@ var Lock = class {
       message: "acquiring"
     });
     try {
-      log16("aquiring lock...", void 0, {
-        F: __dxlog_file19,
+      log17("aquiring lock...", void 0, {
+        F: __dxlog_file20,
         L: 42,
         S: this,
         C: (f, a) => f(...a)
       });
       await asyncTimeout3(this._requestLock(), RESOURCE_LOCK_TIMEOUT);
-      log16("acquired lock", void 0, {
-        F: __dxlog_file19,
+      log17("acquired lock", void 0, {
+        F: __dxlog_file20,
         L: 44,
         S: this,
         C: (f, a) => f(...a)
       });
     } catch {
-      log16("stealing lock...", void 0, {
-        F: __dxlog_file19,
+      log17("stealing lock...", void 0, {
+        F: __dxlog_file20,
         L: 46,
         S: this,
         C: (f, a) => f(...a)
       });
       await this._requestLock(true);
-      log16("stolen lock", void 0, {
-        F: __dxlog_file19,
+      log17("stolen lock", void 0, {
+        F: __dxlog_file20,
         L: 48,
         S: this,
         C: (f, a) => f(...a)
@@ -5676,10 +5847,10 @@ var Lock = class {
     }
   }
   async _requestLock(steal = false) {
-    log16("requesting lock...", {
+    log17("requesting lock...", {
       steal
     }, {
-      F: __dxlog_file19,
+      F: __dxlog_file20,
       L: 63,
       S: this,
       C: (f, a) => f(...a)
@@ -5692,15 +5863,15 @@ var Lock = class {
       acquired.wake();
       this._releaseTrigger = new Trigger8();
       await this._releaseTrigger.wait();
-      log16("releasing lock...", void 0, {
-        F: __dxlog_file19,
+      log17("releasing lock...", void 0, {
+        F: __dxlog_file20,
         L: 72,
         S: this,
         C: (f, a) => f(...a)
       });
       await this._onRelease?.();
-      log16("released lock", void 0, {
-        F: __dxlog_file19,
+      log17("released lock", void 0, {
+        F: __dxlog_file20,
         L: 74,
         S: this,
         C: (f, a) => f(...a)
@@ -5709,10 +5880,10 @@ var Lock = class {
       await this._onRelease?.();
     });
     await acquired.wait();
-    log16("recieved lock", {
+    log17("recieved lock", {
       steal
     }, {
-      F: __dxlog_file19,
+      F: __dxlog_file20,
       L: 81,
       S: this,
       C: (f, a) => f(...a)
@@ -5802,19 +5973,16 @@ var createLevel = async (config) => {
 
 // packages/sdk/client-services/src/packlets/services/service-host.ts
 import { Event as Event9, synchronized as synchronized3 } from "@dxos/async";
-import { clientServiceBundle, defaultKey, PropertiesType } from "@dxos/client-protocol";
+import { clientServiceBundle } from "@dxos/client-protocol";
 import { Context as Context11 } from "@dxos/context";
-import { encodeReference } from "@dxos/echo-protocol";
-import { getTypeReference } from "@dxos/echo-schema";
 import { invariant as invariant18 } from "@dxos/invariant";
 import { PublicKey as PublicKey16 } from "@dxos/keys";
-import { log as log18 } from "@dxos/log";
+import { log as log19 } from "@dxos/log";
 import { WebsocketSignalManager } from "@dxos/messaging";
 import { SwarmNetworkManager, createSimplePeerTransportFactory } from "@dxos/network-manager";
 import { trace as trace10 } from "@dxos/protocols";
 import { SystemStatus } from "@dxos/protocols/proto/dxos/client/services";
 import { TRACE_PROCESSOR as TRACE_PROCESSOR3, trace as Trace4 } from "@dxos/tracing";
-import { assignDeep as assignDeep2 } from "@dxos/util";
 import { WebsocketRpcClient } from "@dxos/websocket-rpc";
 
 // packages/sdk/client-services/src/packlets/devices/devices-service.ts
@@ -5822,7 +5990,7 @@ import { EventSubscriptions as EventSubscriptions3 } from "@dxos/async";
 import { Stream as Stream11 } from "@dxos/codec-protobuf";
 import { invariant as invariant17 } from "@dxos/invariant";
 import { Device as Device2, DeviceKind as DeviceKind2 } from "@dxos/protocols/proto/dxos/client/services";
-var __dxlog_file20 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/devices/devices-service.ts";
+var __dxlog_file21 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/devices/devices-service.ts";
 var DevicesServiceImpl = class {
   constructor(_identityManager) {
     this._identityManager = _identityManager;
@@ -5840,7 +6008,7 @@ var DevicesServiceImpl = class {
           });
         } else {
           invariant17(this._identityManager.identity?.presence, "presence not present", {
-            F: __dxlog_file20,
+            F: __dxlog_file21,
             L: 32,
             S: this,
             A: [
@@ -5950,7 +6118,7 @@ var findConfigs = () => {
 import { Event as Event8 } from "@dxos/async";
 import { Stream as Stream12 } from "@dxos/codec-protobuf";
 import { PublicKey as PublicKey15 } from "@dxos/keys";
-import { getContextFromEntry, log as log17 } from "@dxos/log";
+import { getContextFromEntry, log as log18 } from "@dxos/log";
 import { QueryLogsRequest } from "@dxos/protocols/proto/dxos/client/services";
 import { getDebugName, jsonify, numericalValues, tracer } from "@dxos/util";
 var LoggingServiceImpl = class {
@@ -5963,11 +6131,11 @@ var LoggingServiceImpl = class {
     };
   }
   async open() {
-    log17.runtimeConfig.processors.push(this._logProcessor);
+    log18.runtimeConfig.processors.push(this._logProcessor);
   }
   async close() {
-    const index = log17.runtimeConfig.processors.findIndex((processor) => processor === this._logProcessor);
-    log17.runtimeConfig.processors.splice(index, 1);
+    const index = log18.runtimeConfig.processors.findIndex((processor) => processor === this._logProcessor);
+    log18.runtimeConfig.processors.splice(index, 1);
   }
   async controlMetrics({ reset, record }) {
     if (reset) {
@@ -6171,7 +6339,7 @@ function _ts_decorate8(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file21 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/services/service-host.ts";
+var __dxlog_file22 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/services/service-host.ts";
 var ClientServicesHost = class {
   constructor({
     config,
@@ -6191,7 +6359,7 @@ var ClientServicesHost = class {
     this._storage = storage;
     this._level = level;
     this._callbacks = callbacks;
-    this._runtimeParams = runtimeParams;
+    this._runtimeParams = runtimeParams ?? {};
     if (config) {
       this.initialize({
         config,
@@ -6260,24 +6428,24 @@ var ClientServicesHost = class {
   */
   initialize({ config, ...options }) {
     invariant18(!this._open, "service host is open", {
-      F: __dxlog_file21,
-      L: 189,
+      F: __dxlog_file22,
+      L: 186,
       S: this,
       A: [
         "!this._open",
         "'service host is open'"
       ]
     });
-    log18("initializing...", void 0, {
-      F: __dxlog_file21,
-      L: 190,
+    log19("initializing...", void 0, {
+      F: __dxlog_file22,
+      L: 187,
       S: this,
       C: (f, a) => f(...a)
     });
     if (config) {
       invariant18(!this._config, "config already set", {
-        F: __dxlog_file21,
-        L: 193,
+        F: __dxlog_file22,
+        L: 190,
         S: this,
         A: [
           "!this._config",
@@ -6290,9 +6458,9 @@ var ClientServicesHost = class {
       }
     }
     if (!options.signalManager) {
-      log18.warn("running signaling without telemetry metadata.", void 0, {
-        F: __dxlog_file21,
-        L: 201,
+      log19.warn("running signaling without telemetry metadata.", void 0, {
+        F: __dxlog_file22,
+        L: 198,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -6302,8 +6470,8 @@ var ClientServicesHost = class {
     }), signalManager = new WebsocketSignalManager(this._config?.get("runtime.services.signaling") ?? []) } = options;
     this._signalManager = signalManager;
     invariant18(!this._networkManager, "network manager already set", {
-      F: __dxlog_file21,
-      L: 212,
+      F: __dxlog_file22,
+      L: 209,
       S: this,
       A: [
         "!this._networkManager",
@@ -6315,9 +6483,9 @@ var ClientServicesHost = class {
       transportFactory,
       signalManager
     });
-    log18("initialized", void 0, {
-      F: __dxlog_file21,
-      L: 219,
+    log19("initialized", void 0, {
+      F: __dxlog_file22,
+      L: 216,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -6327,17 +6495,17 @@ var ClientServicesHost = class {
       return;
     }
     const traceId = PublicKey16.random().toHex();
-    log18.trace("dxos.client-services.host.open", trace10.begin({
+    log19.trace("dxos.client-services.host.open", trace10.begin({
       id: traceId
     }), {
-      F: __dxlog_file21,
-      L: 230,
+      F: __dxlog_file22,
+      L: 227,
       S: this,
       C: (f, a) => f(...a)
     });
     invariant18(this._config, "config not set", {
-      F: __dxlog_file21,
-      L: 232,
+      F: __dxlog_file22,
+      L: 229,
       S: this,
       A: [
         "this._config",
@@ -6345,8 +6513,8 @@ var ClientServicesHost = class {
       ]
     });
     invariant18(this._storage, "storage not set", {
-      F: __dxlog_file21,
-      L: 233,
+      F: __dxlog_file22,
+      L: 230,
       S: this,
       A: [
         "this._storage",
@@ -6354,8 +6522,8 @@ var ClientServicesHost = class {
       ]
     });
     invariant18(this._signalManager, "signal manager not set", {
-      F: __dxlog_file21,
-      L: 234,
+      F: __dxlog_file22,
+      L: 231,
       S: this,
       A: [
         "this._signalManager",
@@ -6363,8 +6531,8 @@ var ClientServicesHost = class {
       ]
     });
     invariant18(this._networkManager, "network manager not set", {
-      F: __dxlog_file21,
-      L: 235,
+      F: __dxlog_file22,
+      L: 232,
       S: this,
       A: [
         "this._networkManager",
@@ -6372,11 +6540,11 @@ var ClientServicesHost = class {
       ]
     });
     this._opening = true;
-    log18("opening...", {
+    log19("opening...", {
       lockKey: this._resourceLock?.lockKey
     }, {
-      F: __dxlog_file21,
-      L: 238,
+      F: __dxlog_file22,
+      L: 235,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -6387,9 +6555,10 @@ var ClientServicesHost = class {
     await this._level.open();
     await this._loggingService.open();
     this._serviceContext = new ServiceContext(this._storage, this._level, this._networkManager, this._signalManager, this._runtimeParams);
+    const identityService = new IdentityServiceImpl(this._serviceContext.identityManager, this._serviceContext.keyring, () => this._serviceContext.dataSpaceManager, (params) => this._createIdentity(params), (profile) => this._serviceContext.broadcastProfileUpdate(profile));
     this._serviceRegistry.setServices({
       SystemService: this._systemService,
-      IdentityService: new IdentityServiceImpl((params) => this._createIdentity(params), this._serviceContext.identityManager, this._serviceContext.keyring, (profile) => this._serviceContext.broadcastProfileUpdate(profile)),
+      IdentityService: identityService,
       InvitationsService: new InvitationsServiceImpl(this._serviceContext.invitationsManager),
       DevicesService: new DevicesServiceImpl(this._serviceContext.identityManager),
       SpacesService: new SpacesServiceImpl(this._serviceContext.identityManager, this._serviceContext.spaceManager, async () => {
@@ -6409,6 +6578,7 @@ var ClientServicesHost = class {
       })
     });
     await this._serviceContext.open(ctx);
+    await identityService.open();
     const devtoolsProxy = this._config?.get("runtime.client.devtoolsProxy");
     if (devtoolsProxy) {
       this._devtoolsProxy = new WebsocketRpcClient({
@@ -6424,18 +6594,18 @@ var ClientServicesHost = class {
     this._open = true;
     this._statusUpdate.emit();
     const deviceKey = this._serviceContext.identityManager.identity?.deviceKey;
-    log18("opened", {
+    log19("opened", {
       deviceKey
     }, {
-      F: __dxlog_file21,
+      F: __dxlog_file22,
       L: 314,
       S: this,
       C: (f, a) => f(...a)
     });
-    log18.trace("dxos.client-services.host.open", trace10.end({
+    log19.trace("dxos.client-services.host.open", trace10.end({
       id: traceId
     }), {
-      F: __dxlog_file21,
+      F: __dxlog_file22,
       L: 315,
       S: this,
       C: (f, a) => f(...a)
@@ -6446,10 +6616,10 @@ var ClientServicesHost = class {
       return;
     }
     const deviceKey = this._serviceContext.identityManager.identity?.deviceKey;
-    log18("closing...", {
+    log19("closing...", {
       deviceKey
     }, {
-      F: __dxlog_file21,
+      F: __dxlog_file22,
       L: 326,
       S: this,
       C: (f, a) => f(...a)
@@ -6464,10 +6634,10 @@ var ClientServicesHost = class {
     await this._level?.close();
     this._open = false;
     this._statusUpdate.emit();
-    log18("closed", {
+    log19("closed", {
       deviceKey
     }, {
-      F: __dxlog_file21,
+      F: __dxlog_file22,
       L: 335,
       S: this,
       C: (f, a) => f(...a)
@@ -6475,32 +6645,32 @@ var ClientServicesHost = class {
   }
   async reset() {
     const traceId = PublicKey16.random().toHex();
-    log18.trace("dxos.sdk.client-services-host.reset", trace10.begin({
+    log19.trace("dxos.sdk.client-services-host.reset", trace10.begin({
       id: traceId
     }), {
-      F: __dxlog_file21,
+      F: __dxlog_file22,
       L: 340,
       S: this,
       C: (f, a) => f(...a)
     });
-    log18.info("resetting...", void 0, {
-      F: __dxlog_file21,
+    log19.info("resetting...", void 0, {
+      F: __dxlog_file22,
       L: 342,
       S: this,
       C: (f, a) => f(...a)
     });
     await this._serviceContext?.close();
     await this._storage.reset();
-    log18.info("reset", void 0, {
-      F: __dxlog_file21,
+    log19.info("reset", void 0, {
+      F: __dxlog_file22,
       L: 345,
       S: this,
       C: (f, a) => f(...a)
     });
-    log18.trace("dxos.sdk.client-services-host.reset", trace10.end({
+    log19.trace("dxos.sdk.client-services-host.reset", trace10.end({
       id: traceId
     }), {
-      F: __dxlog_file21,
+      F: __dxlog_file22,
       L: 346,
       S: this,
       C: (f, a) => f(...a)
@@ -6510,38 +6680,6 @@ var ClientServicesHost = class {
   async _createIdentity(params) {
     const identity = await this._serviceContext.createIdentity(params);
     await this._serviceContext.initialized.wait();
-    const space = await this._serviceContext.dataSpaceManager.createSpace();
-    const automergeIndex = space.automergeSpaceState.rootUrl;
-    invariant18(automergeIndex, void 0, {
-      F: __dxlog_file21,
-      L: 358,
-      S: this,
-      A: [
-        "automergeIndex",
-        ""
-      ]
-    });
-    const document = this._serviceContext.echoHost.automergeRepo.find(automergeIndex);
-    await document.whenReady();
-    const properties = {
-      system: {
-        type: encodeReference(getTypeReference(PropertiesType))
-      },
-      data: {
-        [defaultKey]: identity.identityKey.toHex()
-      },
-      meta: {
-        keys: []
-      }
-    };
-    const propertiesId = PublicKey16.random().toHex();
-    document.change((doc) => {
-      assignDeep2(doc, [
-        "objects",
-        propertiesId
-      ], properties);
-    });
-    await this._serviceContext.echoHost.flush();
     return identity;
   }
 };
@@ -6604,4 +6742,4 @@ export {
   ClientServicesProviderResource,
   DiagnosticsCollector
 };
-//# sourceMappingURL=chunk-QWL2M4EU.mjs.map
+//# sourceMappingURL=chunk-NBUF5LMA.mjs.map