@dxos/client-services 0.5.9-main.2dbe289 → 0.5.9-main.4ed8273

package/dist/lib/node/{chunk-NPYJIVOX.cjs → chunk-RQHBQWKH.cjs}

@@ -26,8 +26,8 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var chunk_NPYJIVOX_exports = {};
-__export(chunk_NPYJIVOX_exports, {
+var chunk_RQHBQWKH_exports = {};
+__export(chunk_RQHBQWKH_exports, {
   ClientRpcServer: () => ClientRpcServer,
   ClientServicesHost: () => ClientServicesHost,
   ClientServicesProviderResource: () => ClientServicesProviderResource,
@@ -67,7 +67,7 @@ __export(chunk_NPYJIVOX_exports, {
   subscribeToSpaces: () => subscribeToSpaces,
   subscribeToSwarmInfo: () => subscribeToSwarmInfo
 });
-module.exports = __toCommonJS(chunk_NPYJIVOX_exports);
+module.exports = __toCommonJS(chunk_RQHBQWKH_exports);
 var import_async = require("@dxos/async");
 var import_codec_protobuf = require("@dxos/codec-protobuf");
 var import_feed_store = require("@dxos/feed-store");
@@ -107,200 +107,206 @@ var import_invariant2 = require("@dxos/invariant");
 var import_keys3 = require("@dxos/keys");
 var import_log2 = require("@dxos/log");
 var import_credentials4 = require("@dxos/protocols/proto/dxos/halo/credentials");
+var import_timeframe = require("@dxos/timeframe");
 var import_tracing3 = require("@dxos/tracing");
 var import_util2 = require("@dxos/util");
+var import_credentials5 = require("@dxos/credentials");
+var import_keys4 = require("@dxos/keys");
+var import_log3 = require("@dxos/log");
 var import_platform = __toESM(require("platform"));
 var import_async7 = require("@dxos/async");
 var import_context3 = require("@dxos/context");
-var import_credentials5 = require("@dxos/credentials");
+var import_credentials6 = require("@dxos/credentials");
 var import_invariant3 = require("@dxos/invariant");
-var import_keys4 = require("@dxos/keys");
-var import_log3 = require("@dxos/log");
+var import_keys5 = require("@dxos/keys");
+var import_log4 = require("@dxos/log");
 var import_protocols3 = require("@dxos/protocols");
 var import_services3 = require("@dxos/protocols/proto/dxos/client/services");
-var import_credentials6 = require("@dxos/protocols/proto/dxos/halo/credentials");
+var import_credentials7 = require("@dxos/protocols/proto/dxos/halo/credentials");
 var import_teleport_extension_gossip = require("@dxos/teleport-extension-gossip");
-var import_timeframe = require("@dxos/timeframe");
+var import_timeframe2 = require("@dxos/timeframe");
 var import_tracing4 = require("@dxos/tracing");
 var import_util3 = require("@dxos/util");
 var import_codec_protobuf9 = require("@dxos/codec-protobuf");
-var import_credentials7 = require("@dxos/credentials");
+var import_context4 = require("@dxos/context");
+var import_credentials8 = require("@dxos/credentials");
 var import_debug2 = require("@dxos/debug");
 var import_invariant4 = require("@dxos/invariant");
+var import_services4 = require("@dxos/protocols/proto/dxos/client/services");
 var import_invariant5 = require("@dxos/invariant");
 var import_protocols4 = require("@dxos/protocols");
-var import_services4 = require("@dxos/protocols/proto/dxos/client/services");
+var import_services5 = require("@dxos/protocols/proto/dxos/client/services");
 var import_async8 = require("@dxos/async");
 var import_client_protocol2 = require("@dxos/client-protocol");
-var import_context4 = require("@dxos/context");
+var import_context5 = require("@dxos/context");
 var import_crypto = require("@dxos/crypto");
 var import_invariant6 = require("@dxos/invariant");
-var import_keys5 = require("@dxos/keys");
-var import_log4 = require("@dxos/log");
+var import_keys6 = require("@dxos/keys");
+var import_log5 = require("@dxos/log");
 var import_network_manager = require("@dxos/network-manager");
 var import_protocols5 = require("@dxos/protocols");
-var import_services5 = require("@dxos/protocols/proto/dxos/client/services");
+var import_services6 = require("@dxos/protocols/proto/dxos/client/services");
 var import_invitations = require("@dxos/protocols/proto/dxos/halo/invitations");
 var import_invitations2 = require("@dxos/protocols/proto/dxos/halo/invitations");
 var import_util4 = require("@dxos/util");
 var import_async9 = require("@dxos/async");
-var import_context5 = require("@dxos/context");
+var import_context6 = require("@dxos/context");
 var import_invariant7 = require("@dxos/invariant");
-var import_log5 = require("@dxos/log");
+var import_log6 = require("@dxos/log");
 var import_protocols6 = require("@dxos/protocols");
 var import_invitations3 = require("@dxos/protocols/proto/dxos/halo/invitations");
 var import_teleport = require("@dxos/teleport");
-var import_context6 = require("@dxos/context");
-var import_services6 = require("@dxos/protocols/proto/dxos/client/services");
-var import_async10 = require("@dxos/async");
 var import_context7 = require("@dxos/context");
+var import_services7 = require("@dxos/protocols/proto/dxos/client/services");
+var import_async10 = require("@dxos/async");
+var import_context8 = require("@dxos/context");
 var import_crypto2 = require("@dxos/crypto");
 var import_invariant8 = require("@dxos/invariant");
-var import_keys6 = require("@dxos/keys");
-var import_log6 = require("@dxos/log");
+var import_keys7 = require("@dxos/keys");
+var import_log7 = require("@dxos/log");
 var import_protocols7 = require("@dxos/protocols");
-var import_services7 = require("@dxos/protocols/proto/dxos/client/services");
+var import_services8 = require("@dxos/protocols/proto/dxos/client/services");
 var import_invitations4 = require("@dxos/protocols/proto/dxos/halo/invitations");
 var import_teleport2 = require("@dxos/teleport");
 var import_invariant9 = require("@dxos/invariant");
-var import_keys7 = require("@dxos/keys");
-var import_log7 = require("@dxos/log");
+var import_keys8 = require("@dxos/keys");
+var import_log8 = require("@dxos/log");
 var import_invitations5 = require("@dxos/protocols/proto/dxos/halo/invitations");
 var import_util5 = require("@dxos/util");
 var import_codec_protobuf10 = require("@dxos/codec-protobuf");
-var import_services8 = require("@dxos/protocols/proto/dxos/client/services");
-var import_credentials8 = require("@dxos/credentials");
+var import_services9 = require("@dxos/protocols/proto/dxos/client/services");
+var import_credentials9 = require("@dxos/credentials");
 var import_feed_store3 = require("@dxos/feed-store");
 var import_invariant10 = require("@dxos/invariant");
-var import_log8 = require("@dxos/log");
+var import_log9 = require("@dxos/log");
 var import_protocols8 = require("@dxos/protocols");
-var import_services9 = require("@dxos/protocols/proto/dxos/client/services");
-var import_credentials9 = require("@dxos/protocols/proto/dxos/halo/credentials");
+var import_services10 = require("@dxos/protocols/proto/dxos/client/services");
+var import_credentials10 = require("@dxos/protocols/proto/dxos/halo/credentials");
 var import_async11 = require("@dxos/async");
 var import_client_protocol3 = require("@dxos/client-protocol");
-var import_context8 = require("@dxos/context");
-var import_credentials10 = require("@dxos/credentials");
+var import_context9 = require("@dxos/context");
+var import_credentials11 = require("@dxos/credentials");
 var import_echo_pipeline = require("@dxos/echo-pipeline");
 var import_invariant11 = require("@dxos/invariant");
-var import_keys8 = require("@dxos/keys");
-var import_log9 = require("@dxos/log");
-var import_services10 = require("@dxos/protocols/proto/dxos/client/services");
-var import_credentials11 = require("@dxos/protocols/proto/dxos/halo/credentials");
+var import_keys9 = require("@dxos/keys");
+var import_log10 = require("@dxos/log");
+var import_services11 = require("@dxos/protocols/proto/dxos/client/services");
+var import_credentials12 = require("@dxos/protocols/proto/dxos/halo/credentials");
 var import_async12 = require("@dxos/async");
 var import_client_protocol4 = require("@dxos/client-protocol");
-var import_context9 = require("@dxos/context");
+var import_context10 = require("@dxos/context");
 var import_debug3 = require("@dxos/debug");
 var import_echo_pipeline2 = require("@dxos/echo-pipeline");
 var import_echo_schema = require("@dxos/echo-schema");
 var import_invariant12 = require("@dxos/invariant");
-var import_keys9 = require("@dxos/keys");
-var import_log10 = require("@dxos/log");
+var import_keys10 = require("@dxos/keys");
+var import_log11 = require("@dxos/log");
 var import_protocols9 = require("@dxos/protocols");
-var import_services11 = require("@dxos/protocols/proto/dxos/client/services");
-var import_credentials12 = require("@dxos/protocols/proto/dxos/halo/credentials");
-var import_timeframe2 = require("@dxos/timeframe");
+var import_services12 = require("@dxos/protocols/proto/dxos/client/services");
+var import_credentials13 = require("@dxos/protocols/proto/dxos/halo/credentials");
+var import_timeframe3 = require("@dxos/timeframe");
 var import_tracing5 = require("@dxos/tracing");
 var import_util6 = require("@dxos/util");
 var import_async13 = require("@dxos/async");
-var import_credentials13 = require("@dxos/credentials");
+var import_credentials14 = require("@dxos/credentials");
 var import_async14 = require("@dxos/async");
-var import_context10 = require("@dxos/context");
+var import_context11 = require("@dxos/context");
 var import_invariant13 = require("@dxos/invariant");
-var import_keys10 = require("@dxos/keys");
-var import_log11 = require("@dxos/log");
+var import_keys11 = require("@dxos/keys");
+var import_log12 = require("@dxos/log");
 var import_protocols10 = require("@dxos/protocols");
 var import_teleport3 = require("@dxos/teleport");
 var import_util7 = require("@dxos/util");
 var import_async15 = require("@dxos/async");
-var import_context11 = require("@dxos/context");
-var import_credentials14 = require("@dxos/credentials");
+var import_client_protocol5 = require("@dxos/client-protocol");
+var import_context12 = require("@dxos/context");
+var import_credentials15 = require("@dxos/credentials");
 var import_echo_pipeline3 = require("@dxos/echo-pipeline");
+var import_echo_protocol = require("@dxos/echo-protocol");
+var import_echo_schema2 = require("@dxos/echo-schema");
 var import_invariant14 = require("@dxos/invariant");
-var import_keys11 = require("@dxos/keys");
-var import_log12 = require("@dxos/log");
+var import_keys12 = require("@dxos/keys");
+var import_log13 = require("@dxos/log");
 var import_protocols11 = require("@dxos/protocols");
-var import_services12 = require("@dxos/protocols/proto/dxos/client/services");
-var import_credentials15 = require("@dxos/protocols/proto/dxos/halo/credentials");
+var import_services13 = require("@dxos/protocols/proto/dxos/client/services");
+var import_credentials16 = require("@dxos/protocols/proto/dxos/halo/credentials");
 var import_teleport_extension_gossip2 = require("@dxos/teleport-extension-gossip");
 var import_tracing6 = require("@dxos/tracing");
 var import_util8 = require("@dxos/util");
-var import_credentials16 = require("@dxos/credentials");
+var import_credentials17 = require("@dxos/credentials");
 var import_debug4 = require("@dxos/debug");
-var import_credentials17 = require("@dxos/protocols/proto/dxos/halo/credentials");
-var import_timeframe3 = require("@dxos/timeframe");
+var import_credentials18 = require("@dxos/protocols/proto/dxos/halo/credentials");
+var import_timeframe4 = require("@dxos/timeframe");
 var import_async16 = require("@dxos/async");
 var import_codec_protobuf11 = require("@dxos/codec-protobuf");
-var import_credentials18 = require("@dxos/credentials");
+var import_credentials19 = require("@dxos/credentials");
 var import_debug5 = require("@dxos/debug");
 var import_feed_store4 = require("@dxos/feed-store");
 var import_invariant15 = require("@dxos/invariant");
-var import_log13 = require("@dxos/log");
+var import_log14 = require("@dxos/log");
 var import_protocols12 = require("@dxos/protocols");
-var import_services13 = require("@dxos/protocols/proto/dxos/client/services");
+var import_services14 = require("@dxos/protocols/proto/dxos/client/services");
 var import_tracing7 = require("@dxos/tracing");
 var import_async17 = require("@dxos/async");
-var import_context12 = require("@dxos/context");
-var import_credentials19 = require("@dxos/credentials");
+var import_context13 = require("@dxos/context");
+var import_credentials20 = require("@dxos/credentials");
 var import_debug6 = require("@dxos/debug");
 var import_echo_db = require("@dxos/echo-db");
 var import_echo_pipeline4 = require("@dxos/echo-pipeline");
 var import_feed_store5 = require("@dxos/feed-store");
 var import_invariant16 = require("@dxos/invariant");
 var import_keyring = require("@dxos/keyring");
-var import_keys12 = require("@dxos/keys");
-var import_log14 = require("@dxos/log");
+var import_keys13 = require("@dxos/keys");
+var import_log15 = require("@dxos/log");
 var import_protocols13 = require("@dxos/protocols");
-var import_services14 = require("@dxos/protocols/proto/dxos/client/services");
+var import_services15 = require("@dxos/protocols/proto/dxos/client/services");
 var import_teleport_extension_object_sync = require("@dxos/teleport-extension-object-sync");
 var import_tracing8 = require("@dxos/tracing");
 var import_util9 = require("@dxos/util");
 var import_invariant17 = require("@dxos/invariant");
 var import_lock_file = require("@dxos/lock-file");
-var import_log15 = require("@dxos/log");
+var import_log16 = require("@dxos/log");
 var import_protocols14 = require("@dxos/protocols");
 var import_config = require("@dxos/protocols/proto/dxos/config");
 var import_random_access_storage = require("@dxos/random-access-storage");
-var import_client_protocol5 = require("@dxos/client-protocol");
+var import_client_protocol6 = require("@dxos/client-protocol");
 var import_config2 = require("@dxos/protocols/proto/dxos/config");
 var import_util10 = require("@dxos/util");
 var import_node_path = __toESM(require("node:path"));
-var import_keys13 = require("@dxos/keys");
+var import_keys14 = require("@dxos/keys");
 var import_kv_store = require("@dxos/kv-store");
 var import_async18 = require("@dxos/async");
-var import_client_protocol6 = require("@dxos/client-protocol");
-var import_context13 = require("@dxos/context");
-var import_echo_protocol = require("@dxos/echo-protocol");
-var import_echo_schema2 = require("@dxos/echo-schema");
+var import_client_protocol7 = require("@dxos/client-protocol");
+var import_context14 = require("@dxos/context");
 var import_invariant18 = require("@dxos/invariant");
-var import_keys14 = require("@dxos/keys");
-var import_log16 = require("@dxos/log");
+var import_keys15 = require("@dxos/keys");
+var import_log17 = require("@dxos/log");
 var import_messaging = require("@dxos/messaging");
 var import_network_manager2 = require("@dxos/network-manager");
 var import_protocols15 = require("@dxos/protocols");
-var import_services15 = require("@dxos/protocols/proto/dxos/client/services");
+var import_services16 = require("@dxos/protocols/proto/dxos/client/services");
 var import_tracing9 = require("@dxos/tracing");
-var import_util11 = require("@dxos/util");
 var import_websocket_rpc = require("@dxos/websocket-rpc");
 var import_async19 = require("@dxos/async");
 var import_codec_protobuf12 = require("@dxos/codec-protobuf");
 var import_invariant19 = require("@dxos/invariant");
-var import_services16 = require("@dxos/protocols/proto/dxos/client/services");
-var import_config3 = require("@dxos/config");
 var import_services17 = require("@dxos/protocols/proto/dxos/client/services");
+var import_config3 = require("@dxos/config");
+var import_services18 = require("@dxos/protocols/proto/dxos/client/services");
 var import_tracing10 = require("@dxos/tracing");
+var import_util11 = require("@dxos/util");
+var import_keys16 = require("@dxos/keys");
 var import_util12 = require("@dxos/util");
-var import_keys15 = require("@dxos/keys");
-var import_util13 = require("@dxos/util");
 var import_async20 = require("@dxos/async");
 var import_codec_protobuf13 = require("@dxos/codec-protobuf");
-var import_keys16 = require("@dxos/keys");
-var import_log17 = require("@dxos/log");
-var import_services18 = require("@dxos/protocols/proto/dxos/client/services");
-var import_util14 = require("@dxos/util");
+var import_keys17 = require("@dxos/keys");
+var import_log18 = require("@dxos/log");
+var import_services19 = require("@dxos/protocols/proto/dxos/client/services");
+var import_util13 = require("@dxos/util");
 var import_codec_protobuf14 = require("@dxos/codec-protobuf");
 var import_codec_protobuf15 = require("@dxos/codec-protobuf");
-var import_services19 = require("@dxos/protocols/proto/dxos/client/services");
-var import_util15 = require("@dxos/util");
+var import_services20 = require("@dxos/protocols/proto/dxos/client/services");
+var import_util14 = require("@dxos/util");
 var subscribeToFeeds = ({ feedStore }, { feedKeys }) => {
   return new import_codec_protobuf.Stream(({ next }) => {
     const subscriptions = new import_async.EventSubscriptions();
@@ -611,7 +617,7 @@ var DevtoolsServiceImpl = class {
     });
   }
 };
-var DXOS_VERSION = "0.5.9-main.2dbe289";
+var DXOS_VERSION = "0.5.9-main.4ed8273";
 var getPlatform = () => {
   if (process.browser) {
     if (typeof window !== "undefined") {
@@ -953,6 +959,47 @@ var TrustedKeySetAuthVerifier = class {
     return deviceSet.has(deviceKey);
   }
 };
+var __dxlog_file3 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/default-space-state-machine.ts";
+var DefaultSpaceStateMachine = class {
+  constructor(_params) {
+    this._params = _params;
+  }
+  get spaceId() {
+    return this._spaceId;
+  }
+  async processCredential(credential) {
+    const assertion = (0, import_credentials5.getCredentialAssertion)(credential);
+    switch (assertion["@type"]) {
+      case "dxos.halo.credentials.DefaultSpace": {
+        if (!credential.subject.id.equals(this._params.identityKey)) {
+          import_log3.log.warn("Invalid default space credential", {
+            expectedIdentity: this._params.identityKey,
+            credential
+          }, {
+            F: __dxlog_file3,
+            L: 32,
+            S: this,
+            C: (f, a) => f(...a)
+          });
+          return;
+        }
+        if (!import_keys4.SpaceId.isValid(assertion.spaceId)) {
+          import_log3.log.warn("Invalid default space id", {
+            id: assertion.spaceId
+          }, {
+            F: __dxlog_file3,
+            L: 36,
+            S: this,
+            C: (f, a) => f(...a)
+          });
+          return;
+        }
+        this._spaceId = assertion.spaceId;
+        break;
+      }
+    }
+  }
+};
 function _ts_decorate2(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
@@ -963,7 +1010,7 @@ function _ts_decorate2(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file3 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/identity.ts";
+var __dxlog_file4 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/identity.ts";
 var Identity = class {
   constructor({ space, signer, identityKey, deviceKey, presence }) {
     this.stateUpdate = new import_async6.Event();
@@ -975,8 +1022,8 @@ var Identity = class {
     import_log2.log.trace("dxos.halo.device", {
       deviceKey
     }, {
-      F: __dxlog_file3,
-      L: 67,
+      F: __dxlog_file4,
+      L: 70,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -989,6 +1036,10 @@ var Identity = class {
       identityKey: this.identityKey,
       onUpdate: () => this.stateUpdate.emit()
     });
+    this._defaultSpaceStateMachine = new DefaultSpaceStateMachine({
+      identityKey: this.identityKey,
+      onUpdate: () => this.stateUpdate.emit()
+    });
     this.authVerifier = new TrustedKeySetAuthVerifier({
       trustedKeysProvider: () => new import_util2.ComplexSet(import_keys3.PublicKey.hash, this.authorizedDeviceKeys.keys()),
       update: this.stateUpdate,
@@ -999,14 +1050,20 @@ var Identity = class {
   get authorizedDeviceKeys() {
     return this._deviceStateMachine.authorizedDeviceKeys;
   }
+  get defaultSpaceId() {
+    return this._defaultSpaceStateMachine.spaceId;
+  }
   async open(ctx) {
+    await this._presence?.open();
     await this.space.spaceState.addCredentialProcessor(this._deviceStateMachine);
     await this.space.spaceState.addCredentialProcessor(this._profileStateMachine);
+    await this.space.spaceState.addCredentialProcessor(this._defaultSpaceStateMachine);
     await this.space.open(ctx);
   }
   async close(ctx) {
-    await this._presence?.destroy();
+    await this._presence?.close();
     await this.authVerifier.close();
+    await this.space.spaceState.removeCredentialProcessor(this._defaultSpaceStateMachine);
     await this.space.spaceState.removeCredentialProcessor(this._profileStateMachine);
     await this.space.spaceState.removeCredentialProcessor(this._deviceStateMachine);
     await this.space.close();
@@ -1044,8 +1101,8 @@ var Identity = class {
   */
   getIdentityCredentialSigner() {
     (0, import_invariant2.invariant)(this._deviceStateMachine.deviceCredentialChain, "Device credential chain is not ready.", {
-      F: __dxlog_file3,
-      L: 145,
+      F: __dxlog_file4,
+      L: 159,
       S: this,
       A: [
         "this._deviceStateMachine.deviceCredentialChain",
@@ -1060,6 +1117,26 @@ var Identity = class {
   getDeviceCredentialSigner() {
     return (0, import_credentials3.createCredentialSignerWithKey)(this._signer, this.deviceKey);
   }
+  async updateDefaultSpace(spaceId) {
+    const credential = await this.getDeviceCredentialSigner().createCredential({
+      subject: this.identityKey,
+      assertion: {
+        "@type": "dxos.halo.credentials.DefaultSpace",
+        spaceId
+      }
+    });
+    const receipt = await this.controlPipeline.writer.write({
+      credential: {
+        credential
+      }
+    });
+    await this.controlPipeline.state.waitUntilTimeframe(new import_timeframe.Timeframe([
+      [
+        receipt.feedKey,
+        receipt.seq
+      ]
+    ]));
+  }
   async admitDevice({ deviceKey, controlFeedKey, dataFeedKey }) {
     (0, import_log2.log)("Admitting device:", {
       identityKey: this.identityKey,
@@ -1068,8 +1145,8 @@ var Identity = class {
       controlFeedKey,
       dataFeedKey
     }, {
-      F: __dxlog_file3,
-      L: 161,
+      F: __dxlog_file4,
+      L: 184,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -1129,7 +1206,7 @@ function _ts_decorate3(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file4 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/identity-manager.ts";
+var __dxlog_file5 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/identity-manager.ts";
 var DEVICE_PRESENCE_ANNOUNCE_INTERVAL = 1e4;
 var DEVICE_PRESENCE_OFFLINE_TIMEOUT = 2e4;
 var IdentityManager = class {
@@ -1149,20 +1226,20 @@ var IdentityManager = class {
     return this._identity;
   }
   async open(ctx) {
-    const traceId = import_keys4.PublicKey.random().toHex();
-    import_log3.log.trace("dxos.halo.identity-manager.open", import_protocols3.trace.begin({
+    const traceId = import_keys5.PublicKey.random().toHex();
+    import_log4.log.trace("dxos.halo.identity-manager.open", import_protocols3.trace.begin({
       id: traceId
     }), {
-      F: __dxlog_file4,
+      F: __dxlog_file5,
       L: 104,
       S: this,
       C: (f, a) => f(...a)
     });
     const identityRecord = this._metadataStore.getIdentityRecord();
-    (0, import_log3.log)("identity record", {
+    (0, import_log4.log)("identity record", {
       identityRecord
     }, {
-      F: __dxlog_file4,
+      F: __dxlog_file5,
       L: 107,
       S: this,
       C: (f, a) => f(...a)
@@ -1171,21 +1248,21 @@ var IdentityManager = class {
       this._identity = await this._constructIdentity(identityRecord);
       await this._identity.open(ctx);
       await this._identity.ready();
-      import_log3.log.trace("dxos.halo.identity", {
+      import_log4.log.trace("dxos.halo.identity", {
         identityKey: identityRecord.identityKey,
         displayName: this._identity.profileDocument?.displayName
       }, {
-        F: __dxlog_file4,
+        F: __dxlog_file5,
         L: 112,
         S: this,
         C: (f, a) => f(...a)
       });
       this.stateUpdate.emit();
     }
-    import_log3.log.trace("dxos.halo.identity-manager.open", import_protocols3.trace.end({
+    import_log4.log.trace("dxos.halo.identity-manager.open", import_protocols3.trace.end({
       id: traceId
     }), {
-      F: __dxlog_file4,
+      F: __dxlog_file5,
       L: 119,
       S: this,
       C: (f, a) => f(...a)
@@ -1196,7 +1273,7 @@ var IdentityManager = class {
   }
   async createIdentity({ displayName, deviceProfile } = {}) {
     (0, import_invariant3.invariant)(!this._identity, "Identity already exists.", {
-      F: __dxlog_file4,
+      F: __dxlog_file5,
       L: 128,
       S: this,
       A: [
@@ -1204,8 +1281,8 @@ var IdentityManager = class {
         "'Identity already exists.'"
       ]
     });
-    (0, import_log3.log)("creating identity...", void 0, {
-      F: __dxlog_file4,
+    (0, import_log4.log)("creating identity...", void 0, {
+      F: __dxlog_file5,
       L: 129,
       S: this,
       C: (f, a) => f(...a)
@@ -1224,9 +1301,9 @@ var IdentityManager = class {
     const identity = await this._constructIdentity(identityRecord);
     await identity.open(new import_context3.Context());
     {
-      const generator = new import_credentials5.CredentialGenerator(this._keyring, identityRecord.identityKey, identityRecord.deviceKey);
+      const generator = new import_credentials6.CredentialGenerator(this._keyring, identityRecord.identityKey, identityRecord.deviceKey);
       (0, import_invariant3.invariant)(identityRecord.haloSpace.genesisFeedKey, "Genesis feed key is required.", {
-        F: __dxlog_file4,
+        F: __dxlog_file5,
         L: 148,
         S: this,
         A: [
@@ -1235,7 +1312,7 @@ var IdentityManager = class {
         ]
       });
       (0, import_invariant3.invariant)(identityRecord.haloSpace.dataFeedKey, "Data feed key is required.", {
-        F: __dxlog_file4,
+        F: __dxlog_file5,
         L: 149,
         S: this,
         A: [
@@ -1247,7 +1324,7 @@ var IdentityManager = class {
         // Space genesis.
         ...await generator.createSpaceGenesis(identityRecord.haloSpace.key, identityRecord.haloSpace.genesisFeedKey),
         // Feed admission.
-        await generator.createFeedAdmission(identityRecord.haloSpace.key, identityRecord.haloSpace.dataFeedKey, import_credentials6.AdmittedFeed.Designation.DATA)
+        await generator.createFeedAdmission(identityRecord.haloSpace.key, identityRecord.haloSpace.dataFeedKey, import_credentials7.AdmittedFeed.Designation.DATA)
       ];
       if (displayName) {
         credentials.push(await generator.createProfileCredential({
@@ -1270,22 +1347,22 @@ var IdentityManager = class {
     await this._metadataStore.setIdentityRecord(identityRecord);
     this._identity = identity;
     await this._identity.ready();
-    import_log3.log.trace("dxos.halo.identity", {
+    import_log4.log.trace("dxos.halo.identity", {
       identityKey: identityRecord.identityKey,
       displayName: this._identity.profileDocument?.displayName
     }, {
-      F: __dxlog_file4,
+      F: __dxlog_file5,
       L: 191,
       S: this,
       C: (f, a) => f(...a)
     });
     this.stateUpdate.emit();
-    (0, import_log3.log)("created identity", {
+    (0, import_log4.log)("created identity", {
       identityKey: identity.identityKey,
       deviceKey: identity.deviceKey,
       profile: identity.profileDocument
     }, {
-      F: __dxlog_file4,
+      F: __dxlog_file5,
       L: 197,
       S: this,
       C: (f, a) => f(...a)
@@ -1296,14 +1373,14 @@ var IdentityManager = class {
   createDefaultDeviceProfile() {
     let type;
     if ((0, import_util3.isNode)()) {
-      type = import_credentials6.DeviceType.AGENT;
+      type = import_credentials7.DeviceType.AGENT;
     } else {
       if (import_platform.default.name?.startsWith("iOS") || import_platform.default.name?.startsWith("Android")) {
-        type = import_credentials6.DeviceType.MOBILE;
+        type = import_credentials7.DeviceType.MOBILE;
       } else if (globalThis.__args) {
-        type = import_credentials6.DeviceType.NATIVE;
+        type = import_credentials7.DeviceType.NATIVE;
       } else {
-        type = import_credentials6.DeviceType.BROWSER;
+        type = import_credentials7.DeviceType.BROWSER;
       }
     }
     return {
@@ -1319,16 +1396,16 @@ var IdentityManager = class {
   * Accept an existing identity. Expects its device key to be authorized (now or later).
   */
   async acceptIdentity(params) {
-    (0, import_log3.log)("accepting identity", {
+    (0, import_log4.log)("accepting identity", {
       params
     }, {
-      F: __dxlog_file4,
+      F: __dxlog_file5,
       L: 235,
       S: this,
       C: (f, a) => f(...a)
     });
     (0, import_invariant3.invariant)(!this._identity, "Identity already exists.", {
-      F: __dxlog_file4,
+      F: __dxlog_file5,
       L: 236,
       S: this,
       A: [
@@ -1352,11 +1429,11 @@ var IdentityManager = class {
     this._identity = identity;
     await this._metadataStore.setIdentityRecord(identityRecord);
     await this._identity.ready();
-    import_log3.log.trace("dxos.halo.identity", {
+    import_log4.log.trace("dxos.halo.identity", {
       identityKey: identityRecord.identityKey,
       displayName: this._identity.profileDocument?.displayName
     }, {
-      F: __dxlog_file4,
+      F: __dxlog_file5,
       L: 255,
       S: this,
       C: (f, a) => f(...a)
@@ -1366,11 +1443,11 @@ var IdentityManager = class {
       ...params.deviceProfile
     });
     this.stateUpdate.emit();
-    (0, import_log3.log)("accepted identity", {
+    (0, import_log4.log)("accepted identity", {
       identityKey: identity.identityKey,
       deviceKey: identity.deviceKey
     }, {
-      F: __dxlog_file4,
+      F: __dxlog_file5,
       L: 265,
       S: this,
       C: (f, a) => f(...a)
@@ -1382,7 +1459,7 @@ var IdentityManager = class {
   */
   async updateProfile(profile) {
     (0, import_invariant3.invariant)(this._identity, "Identity not initialized.", {
-      F: __dxlog_file4,
+      F: __dxlog_file5,
       L: 273,
       S: this,
       A: [
@@ -1402,7 +1479,7 @@ var IdentityManager = class {
         credential
       }
     });
-    await this._identity.controlPipeline.state.waitUntilTimeframe(new import_timeframe.Timeframe([
+    await this._identity.controlPipeline.state.waitUntilTimeframe(new import_timeframe2.Timeframe([
       [
         receipt.feedKey,
         receipt.seq
@@ -1413,7 +1490,7 @@ var IdentityManager = class {
   }
   async updateDeviceProfile(profile) {
     (0, import_invariant3.invariant)(this._identity, "Identity not initialized.", {
-      F: __dxlog_file4,
+      F: __dxlog_file5,
       L: 290,
       S: this,
       A: [
@@ -1433,7 +1510,7 @@ var IdentityManager = class {
         credential
       }
     });
-    await this._identity.controlPipeline.state.waitUntilTimeframe(new import_timeframe.Timeframe([
+    await this._identity.controlPipeline.state.waitUntilTimeframe(new import_timeframe2.Timeframe([
       [
         receipt.feedKey,
         receipt.seq
@@ -1449,7 +1526,7 @@ var IdentityManager = class {
   }
   async _constructIdentity(identityRecord) {
     (0, import_invariant3.invariant)(!this._identity, void 0, {
-      F: __dxlog_file4,
+      F: __dxlog_file5,
       L: 316,
       S: this,
       A: [
@@ -1457,10 +1534,10 @@ var IdentityManager = class {
         ""
       ]
     });
-    (0, import_log3.log)("constructing identity", {
+    (0, import_log4.log)("constructing identity", {
       identityRecord
     }, {
-      F: __dxlog_file4,
+      F: __dxlog_file5,
       L: 317,
       S: this,
       C: (f, a) => f(...a)
@@ -1475,7 +1552,7 @@ var IdentityManager = class {
       gossip
     });
     (0, import_invariant3.invariant)(identityRecord.haloSpace.controlFeedKey, void 0, {
-      F: __dxlog_file4,
+      F: __dxlog_file5,
       L: 330,
       S: this,
       A: [
@@ -1487,7 +1564,7 @@ var IdentityManager = class {
       writable: true
     });
     (0, import_invariant3.invariant)(identityRecord.haloSpace.dataFeedKey, void 0, {
-      F: __dxlog_file4,
+      F: __dxlog_file5,
       L: 334,
       S: this,
       A: [
@@ -1503,7 +1580,7 @@ var IdentityManager = class {
       spaceRecord: identityRecord.haloSpace,
       swarmIdentity: {
         peerKey: identityRecord.deviceKey,
-        credentialProvider: createAuthProvider((0, import_credentials5.createCredentialSignerWithKey)(this._keyring, identityRecord.deviceKey)),
+        credentialProvider: createAuthProvider((0, import_credentials6.createCredentialSignerWithKey)(this._keyring, identityRecord.deviceKey)),
         credentialAuthenticator: (0, import_util3.deferFunction)(() => identity.authVerifier.verifier)
       },
       gossip,
@@ -1518,10 +1595,10 @@ var IdentityManager = class {
       identityKey: identityRecord.identityKey,
       deviceKey: identityRecord.deviceKey
     });
-    (0, import_log3.log)("done", {
+    (0, import_log4.log)("done", {
       identityKey: identityRecord.identityKey
     }, {
-      F: __dxlog_file4,
+      F: __dxlog_file5,
       L: 360,
       S: this,
       C: (f, a) => f(...a)
@@ -1545,8 +1622,8 @@ var IdentityManager = class {
         }));
       },
       onAuthFailure: () => {
-        import_log3.log.warn("auth failure", void 0, {
-          F: __dxlog_file4,
+        import_log4.log.warn("auth failure", void 0, {
+          F: __dxlog_file5,
           L: 385,
           S: this,
           C: (f, a) => f(...a)
@@ -1568,21 +1645,45 @@ _ts_decorate3([
 IdentityManager = _ts_decorate3([
   import_tracing4.trace.resource()
 ], IdentityManager);
-var __dxlog_file5 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/identity-service.ts";
-var IdentityServiceImpl = class {
-  constructor(_createIdentity, _identityManager, _keyring, _onProfileUpdate) {
-    this._createIdentity = _createIdentity;
+var __dxlog_file6 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/identity-service.ts";
+var IdentityServiceImpl = class extends import_context4.Resource {
+  constructor(_identityManager, _keyring, _dataSpaceManagerProvider, _createIdentity, _onProfileUpdate) {
+    super();
     this._identityManager = _identityManager;
     this._keyring = _keyring;
+    this._dataSpaceManagerProvider = _dataSpaceManagerProvider;
+    this._createIdentity = _createIdentity;
     this._onProfileUpdate = _onProfileUpdate;
   }
+  async _open() {
+    const identity = this._identityManager.identity;
+    if (identity && !identity.defaultSpaceId) {
+      await this._fixIdentityWithoutDefaultSpace(identity);
+    }
+  }
   async createIdentity(request) {
     await this._createIdentity({
       displayName: request.profile?.displayName,
       deviceProfile: request.deviceProfile
     });
+    const dataSpaceManager = this._dataSpaceManagerProvider();
+    await this._createDefaultSpace(dataSpaceManager);
     return this._getIdentity();
   }
+  async _createDefaultSpace(dataSpaceManager) {
+    const space = await dataSpaceManager.createDefaultSpace();
+    const identity = this._identityManager.identity;
+    (0, import_invariant4.invariant)(identity, void 0, {
+      F: __dxlog_file6,
+      L: 54,
+      S: this,
+      A: [
+        "identity",
+        ""
+      ]
+    });
+    await identity.updateDefaultSpace(space.id);
+  }
   async recoverIdentity(request) {
     return (0, import_debug2.todo)();
   }
@@ -1607,8 +1708,8 @@ var IdentityServiceImpl = class {
   }
   async updateProfile(profile) {
     (0, import_invariant4.invariant)(this._identityManager.identity, "Identity not initialized.", {
-      F: __dxlog_file5,
-      L: 61,
+      F: __dxlog_file6,
+      L: 84,
       S: this,
       A: [
         "this._identityManager.identity",
@@ -1621,15 +1722,15 @@ var IdentityServiceImpl = class {
   }
   async signPresentation({ presentation, nonce }) {
     (0, import_invariant4.invariant)(this._identityManager.identity, "Identity not initialized.", {
-      F: __dxlog_file5,
-      L: 68,
+      F: __dxlog_file6,
+      L: 91,
       S: this,
       A: [
         "this._identityManager.identity",
         "'Identity not initialized.'"
       ]
     });
-    return await (0, import_credentials7.signPresentation)({
+    return await (0, import_credentials8.signPresentation)({
       presentation,
       signer: this._keyring,
       signerKey: this._identityManager.identity.deviceKey,
@@ -1637,8 +1738,26 @@ var IdentityServiceImpl = class {
       nonce
     });
   }
+  async _fixIdentityWithoutDefaultSpace(identity) {
+    let hasDefaultSpace = false;
+    const dataSpaceManager = this._dataSpaceManagerProvider();
+    for (const space of dataSpaceManager.spaces.values()) {
+      if (space.state === import_services4.SpaceState.CLOSED) {
+        await space.open();
+        await space.initializeDataPipeline();
+      }
+      if (await dataSpaceManager.isDefaultSpace(space)) {
+        await identity.updateDefaultSpace(space.id);
+        hasDefaultSpace = true;
+        break;
+      }
+    }
+    if (!hasDefaultSpace) {
+      await this._createDefaultSpace(dataSpaceManager);
+    }
+  }
 };
-var __dxlog_file6 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/device-invitation-protocol.ts";
+var __dxlog_file7 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/device-invitation-protocol.ts";
 var DeviceInvitationProtocol = class {
   constructor(_keyring, _getIdentity, _acceptIdentity) {
     this._keyring = _keyring;
@@ -1653,7 +1772,7 @@ var DeviceInvitationProtocol = class {
   }
   getInvitationContext() {
     return {
-      kind: import_services4.Invitation.Kind.DEVICE
+      kind: import_services5.Invitation.Kind.DEVICE
     };
   }
   async delegate() {
@@ -1664,7 +1783,7 @@ var DeviceInvitationProtocol = class {
   }
   async admit(_, request) {
     (0, import_invariant5.invariant)(request.device, void 0, {
-      F: __dxlog_file6,
+      F: __dxlog_file7,
       L: 50,
       S: this,
       A: [
@@ -1710,7 +1829,7 @@ var DeviceInvitationProtocol = class {
   }
   async accept(response, request) {
     (0, import_invariant5.invariant)(response.device, void 0, {
-      F: __dxlog_file6,
+      F: __dxlog_file7,
       L: 95,
       S: this,
       A: [
@@ -1720,7 +1839,7 @@ var DeviceInvitationProtocol = class {
     });
     const { identityKey, haloSpaceKey, genesisFeedKey, controlTimeframe } = response.device;
     (0, import_invariant5.invariant)(request.device, void 0, {
-      F: __dxlog_file6,
+      F: __dxlog_file7,
       L: 98,
       S: this,
       A: [
@@ -1745,21 +1864,21 @@ var DeviceInvitationProtocol = class {
   }
 };
 var stateToString = (state) => {
-  return Object.entries(import_services6.Invitation.State).find(([key, val]) => val === state)?.[0] ?? "unknown";
+  return Object.entries(import_services7.Invitation.State).find(([key, val]) => val === state)?.[0] ?? "unknown";
 };
 var tryAcquireBeforeContextDisposed = async (ctx, mutex) => {
   let guard;
-  return (0, import_context6.cancelWithContext)(ctx, (async () => {
+  return (0, import_context7.cancelWithContext)(ctx, (async () => {
     guard = await mutex.acquire();
     if (ctx.disposed) {
       guard.release();
       guard = void 0;
-      throw new import_context6.ContextDisposedError();
+      throw new import_context7.ContextDisposedError();
     }
     return guard;
   })());
 };
-var __dxlog_file7 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/invitation-guest-extenstion.ts";
+var __dxlog_file8 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/invitation-guest-extenstion.ts";
 var OPTIONS_TIMEOUT = 1e4;
 var InvitationGuestExtension = class extends import_teleport.RpcExtension {
   constructor(_invitationFlowMutex, _callbacks) {
@@ -1773,7 +1892,7 @@ var InvitationGuestExtension = class extends import_teleport.RpcExtension {
     });
     this._invitationFlowMutex = _invitationFlowMutex;
     this._callbacks = _callbacks;
-    this._ctx = new import_context5.Context();
+    this._ctx = new import_context6.Context();
     this._remoteOptionsTrigger = new import_async9.Trigger();
     this._invitationFlowLock = null;
   }
@@ -1785,7 +1904,7 @@ var InvitationGuestExtension = class extends import_teleport.RpcExtension {
       InvitationHostService: {
         options: async (options) => {
           (0, import_invariant7.invariant)(!this._remoteOptions, "Remote options already set.", {
-            F: __dxlog_file7,
+            F: __dxlog_file8,
             L: 63,
             S: this,
             A: [
@@ -1811,33 +1930,33 @@ var InvitationGuestExtension = class extends import_teleport.RpcExtension {
   async onOpen(context) {
     await super.onOpen(context);
     try {
-      (0, import_log5.log)("guest acquire lock", void 0, {
-        F: __dxlog_file7,
+      (0, import_log6.log)("guest acquire lock", void 0, {
+        F: __dxlog_file8,
         L: 84,
         S: this,
         C: (f, a) => f(...a)
       });
       this._invitationFlowLock = await tryAcquireBeforeContextDisposed(this._ctx, this._invitationFlowMutex);
-      (0, import_log5.log)("guest lock acquired", void 0, {
-        F: __dxlog_file7,
+      (0, import_log6.log)("guest lock acquired", void 0, {
+        F: __dxlog_file8,
         L: 86,
         S: this,
         C: (f, a) => f(...a)
       });
-      await (0, import_context5.cancelWithContext)(this._ctx, this.rpc.InvitationHostService.options({
+      await (0, import_context6.cancelWithContext)(this._ctx, this.rpc.InvitationHostService.options({
         role: import_invitations3.Options.Role.GUEST
       }));
-      (0, import_log5.log)("options sent", void 0, {
-        F: __dxlog_file7,
+      (0, import_log6.log)("options sent", void 0, {
+        F: __dxlog_file8,
         L: 88,
         S: this,
         C: (f, a) => f(...a)
       });
-      await (0, import_context5.cancelWithContext)(this._ctx, this._remoteOptionsTrigger.wait({
+      await (0, import_context6.cancelWithContext)(this._ctx, this._remoteOptionsTrigger.wait({
         timeout: OPTIONS_TIMEOUT
       }));
-      (0, import_log5.log)("options received", void 0, {
-        F: __dxlog_file7,
+      (0, import_log6.log)("options received", void 0, {
+        F: __dxlog_file8,
         L: 90,
         S: this,
         C: (f, a) => f(...a)
@@ -1870,8 +1989,8 @@ var InvitationGuestExtension = class extends import_teleport.RpcExtension {
     if (this._invitationFlowLock != null) {
       this._invitationFlowLock.release();
       this._invitationFlowLock = null;
-      (0, import_log5.log)("invitation flow lock released", void 0, {
-        F: __dxlog_file7,
+      (0, import_log6.log)("invitation flow lock released", void 0, {
+        F: __dxlog_file8,
         L: 123,
         S: this,
         C: (f, a) => f(...a)
@@ -1879,7 +1998,7 @@ var InvitationGuestExtension = class extends import_teleport.RpcExtension {
     }
   }
 };
-var __dxlog_file8 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/invitation-host-extension.ts";
+var __dxlog_file9 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/invitation-host-extension.ts";
 var OPTIONS_TIMEOUT2 = 1e4;
 var MAX_OTP_ATTEMPTS = 3;
 var InvitationHostExtension = class extends import_teleport2.RpcExtension {
@@ -1894,7 +2013,7 @@ var InvitationHostExtension = class extends import_teleport2.RpcExtension {
     });
     this._invitationFlowMutex = _invitationFlowMutex;
     this._callbacks = _callbacks;
-    this._ctx = new import_context7.Context();
+    this._ctx = new import_context8.Context();
     this._remoteOptionsTrigger = new import_async10.Trigger();
     this._challenge = void 0;
     this.guestProfile = void 0;
@@ -1913,7 +2032,7 @@ var InvitationHostExtension = class extends import_teleport2.RpcExtension {
       InvitationHostService: {
         options: async (options) => {
           (0, import_invariant8.invariant)(!this._remoteOptions, "Remote options already set.", {
-            F: __dxlog_file8,
+            F: __dxlog_file9,
             L: 101,
             S: this,
             A: [
@@ -1926,23 +2045,23 @@ var InvitationHostExtension = class extends import_teleport2.RpcExtension {
         },
         introduce: async (request) => {
           const { profile, invitationId } = request;
-          const traceId = import_keys6.PublicKey.random().toHex();
-          import_log6.log.trace("dxos.sdk.invitation-handler.host.introduce", import_protocols7.trace.begin({
+          const traceId = import_keys7.PublicKey.random().toHex();
+          import_log7.log.trace("dxos.sdk.invitation-handler.host.introduce", import_protocols7.trace.begin({
             id: traceId
           }), {
-            F: __dxlog_file8,
+            F: __dxlog_file9,
             L: 110,
             S: this,
             C: (f, a) => f(...a)
           });
           const invitation = this._requireActiveInvitation();
-          this._assertInvitationState(import_services7.Invitation.State.CONNECTED);
+          this._assertInvitationState(import_services8.Invitation.State.CONNECTED);
           if (invitationId !== invitation?.invitationId) {
-            import_log6.log.warn("incorrect invitationId", {
+            import_log7.log.warn("incorrect invitationId", {
               expected: invitation.invitationId,
               actual: invitationId
             }, {
-              F: __dxlog_file8,
+              F: __dxlog_file9,
               L: 116,
               S: this,
               C: (f, a) => f(...a)
@@ -1950,24 +2069,24 @@ var InvitationHostExtension = class extends import_teleport2.RpcExtension {
             this._callbacks.onError(new Error("Incorrect invitationId."));
             (0, import_async10.scheduleTask)(this._ctx, () => this.close());
             return {
-              authMethod: import_services7.Invitation.AuthMethod.NONE
+              authMethod: import_services8.Invitation.AuthMethod.NONE
             };
           }
-          (0, import_log6.log)("guest introduced themselves", {
+          (0, import_log7.log)("guest introduced themselves", {
             guestProfile: profile
           }, {
-            F: __dxlog_file8,
+            F: __dxlog_file9,
             L: 125,
             S: this,
             C: (f, a) => f(...a)
           });
           this.guestProfile = profile;
-          this._callbacks.onStateUpdate(import_services7.Invitation.State.READY_FOR_AUTHENTICATION);
-          this._challenge = invitation.authMethod === import_services7.Invitation.AuthMethod.KNOWN_PUBLIC_KEY ? (0, import_crypto2.randomBytes)(32) : void 0;
-          import_log6.log.trace("dxos.sdk.invitation-handler.host.introduce", import_protocols7.trace.end({
+          this._callbacks.onStateUpdate(import_services8.Invitation.State.READY_FOR_AUTHENTICATION);
+          this._challenge = invitation.authMethod === import_services8.Invitation.AuthMethod.KNOWN_PUBLIC_KEY ? (0, import_crypto2.randomBytes)(32) : void 0;
+          import_log7.log.trace("dxos.sdk.invitation-handler.host.introduce", import_protocols7.trace.end({
             id: traceId
           }), {
-            F: __dxlog_file8,
+            F: __dxlog_file9,
             L: 132,
             S: this,
             C: (f, a) => f(...a)
@@ -1978,34 +2097,34 @@ var InvitationHostExtension = class extends import_teleport2.RpcExtension {
           };
         },
         authenticate: async ({ authCode: code, signedChallenge }) => {
-          const traceId = import_keys6.PublicKey.random().toHex();
-          import_log6.log.trace("dxos.sdk.invitation-handler.host.authenticate", import_protocols7.trace.begin({
+          const traceId = import_keys7.PublicKey.random().toHex();
+          import_log7.log.trace("dxos.sdk.invitation-handler.host.authenticate", import_protocols7.trace.begin({
             id: traceId
           }), {
-            F: __dxlog_file8,
+            F: __dxlog_file9,
             L: 141,
             S: this,
             C: (f, a) => f(...a)
           });
           const invitation = this._requireActiveInvitation();
-          (0, import_log6.log)("received authentication request", {
+          (0, import_log7.log)("received authentication request", {
             authCode: code
           }, {
-            F: __dxlog_file8,
+            F: __dxlog_file9,
             L: 144,
             S: this,
             C: (f, a) => f(...a)
           });
           let status = import_invitations4.AuthenticationResponse.Status.OK;
           this._assertInvitationState([
-            import_services7.Invitation.State.AUTHENTICATING,
-            import_services7.Invitation.State.READY_FOR_AUTHENTICATION
+            import_services8.Invitation.State.AUTHENTICATING,
+            import_services8.Invitation.State.READY_FOR_AUTHENTICATION
           ]);
-          this._callbacks.onStateUpdate(import_services7.Invitation.State.AUTHENTICATING);
+          this._callbacks.onStateUpdate(import_services8.Invitation.State.AUTHENTICATING);
           switch (invitation.authMethod) {
-            case import_services7.Invitation.AuthMethod.NONE: {
-              (0, import_log6.log)("authentication not required", void 0, {
-                F: __dxlog_file8,
+            case import_services8.Invitation.AuthMethod.NONE: {
+              (0, import_log7.log)("authentication not required", void 0, {
+                F: __dxlog_file9,
                 L: 152,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2014,7 +2133,7 @@ var InvitationHostExtension = class extends import_teleport2.RpcExtension {
                 status: import_invitations4.AuthenticationResponse.Status.OK
               };
             }
-            case import_services7.Invitation.AuthMethod.SHARED_SECRET: {
+            case import_services8.Invitation.AuthMethod.SHARED_SECRET: {
               if (invitation.authCode) {
                 if (this.authenticationRetry++ > MAX_OTP_ATTEMPTS) {
                   status = import_invitations4.AuthenticationResponse.Status.INVALID_OPT_ATTEMPTS;
@@ -2026,7 +2145,7 @@ var InvitationHostExtension = class extends import_teleport2.RpcExtension {
               }
               break;
             }
-            case import_services7.Invitation.AuthMethod.KNOWN_PUBLIC_KEY: {
+            case import_services8.Invitation.AuthMethod.KNOWN_PUBLIC_KEY: {
               if (!invitation.guestKeypair) {
                 status = import_invitations4.AuthenticationResponse.Status.INTERNAL_ERROR;
                 break;
@@ -2040,10 +2159,10 @@ var InvitationHostExtension = class extends import_teleport2.RpcExtension {
               break;
             }
             default: {
-              import_log6.log.error("invalid authentication method", {
+              import_log7.log.error("invalid authentication method", {
                 authMethod: invitation.authMethod
               }, {
-                F: __dxlog_file8,
+                F: __dxlog_file9,
                 L: 190,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2062,13 +2181,13 @@ var InvitationHostExtension = class extends import_teleport2.RpcExtension {
               status
             };
           }
-          import_log6.log.trace("dxos.sdk.invitation-handler.host.authenticate", import_protocols7.trace.end({
+          import_log7.log.trace("dxos.sdk.invitation-handler.host.authenticate", import_protocols7.trace.end({
             id: traceId,
             data: {
               status
             }
           }), {
-            F: __dxlog_file8,
+            F: __dxlog_file9,
             L: 202,
             S: this,
             C: (f, a) => f(...a)
@@ -2078,11 +2197,11 @@ var InvitationHostExtension = class extends import_teleport2.RpcExtension {
           };
         },
         admit: async (request) => {
-          const traceId = import_keys6.PublicKey.random().toHex();
-          import_log6.log.trace("dxos.sdk.invitation-handler.host.admit", import_protocols7.trace.begin({
+          const traceId = import_keys7.PublicKey.random().toHex();
+          import_log7.log.trace("dxos.sdk.invitation-handler.host.admit", import_protocols7.trace.begin({
             id: traceId
           }), {
-            F: __dxlog_file8,
+            F: __dxlog_file9,
             L: 208,
             S: this,
             C: (f, a) => f(...a)
@@ -2090,16 +2209,16 @@ var InvitationHostExtension = class extends import_teleport2.RpcExtension {
           const invitation = this._requireActiveInvitation();
           try {
             if (isAuthenticationRequired(invitation)) {
-              this._assertInvitationState(import_services7.Invitation.State.AUTHENTICATING);
+              this._assertInvitationState(import_services8.Invitation.State.AUTHENTICATING);
               if (!this.authenticationPassed) {
                 throw new Error("Not authenticated");
               }
             }
             const response = await this._callbacks.admit(request);
-            import_log6.log.trace("dxos.sdk.invitation-handler.host.admit", import_protocols7.trace.end({
+            import_log7.log.trace("dxos.sdk.invitation-handler.host.admit", import_protocols7.trace.end({
               id: traceId
             }), {
-              F: __dxlog_file8,
+              F: __dxlog_file9,
               L: 222,
               S: this,
               C: (f, a) => f(...a)
@@ -2116,35 +2235,35 @@ var InvitationHostExtension = class extends import_teleport2.RpcExtension {
   async onOpen(context) {
     await super.onOpen(context);
     try {
-      (0, import_log6.log)("host acquire lock", void 0, {
-        F: __dxlog_file8,
+      (0, import_log7.log)("host acquire lock", void 0, {
+        F: __dxlog_file9,
         L: 237,
         S: this,
         C: (f, a) => f(...a)
       });
       this._invitationFlowLock = await tryAcquireBeforeContextDisposed(this._ctx, this._invitationFlowMutex);
-      (0, import_log6.log)("host lock acquired", void 0, {
-        F: __dxlog_file8,
+      (0, import_log7.log)("host lock acquired", void 0, {
+        F: __dxlog_file9,
         L: 239,
         S: this,
         C: (f, a) => f(...a)
       });
       const lastState = this._requireActiveInvitation().state;
-      this._callbacks.onStateUpdate(import_services7.Invitation.State.CONNECTING);
+      this._callbacks.onStateUpdate(import_services8.Invitation.State.CONNECTING);
       await this.rpc.InvitationHostService.options({
         role: import_invitations4.Options.Role.HOST
       });
-      (0, import_log6.log)("options sent", void 0, {
-        F: __dxlog_file8,
+      (0, import_log7.log)("options sent", void 0, {
+        F: __dxlog_file9,
         L: 243,
         S: this,
         C: (f, a) => f(...a)
       });
-      await (0, import_context7.cancelWithContext)(this._ctx, this._remoteOptionsTrigger.wait({
+      await (0, import_context8.cancelWithContext)(this._ctx, this._remoteOptionsTrigger.wait({
         timeout: OPTIONS_TIMEOUT2
       }));
-      (0, import_log6.log)("options received", void 0, {
-        F: __dxlog_file8,
+      (0, import_log7.log)("options received", void 0, {
+        F: __dxlog_file9,
         L: 245,
         S: this,
         C: (f, a) => f(...a)
@@ -2157,7 +2276,7 @@ var InvitationHostExtension = class extends import_teleport2.RpcExtension {
           remotePeerId: context.remotePeerId
         });
       }
-      this._callbacks.onStateUpdate(import_services7.Invitation.State.CONNECTED);
+      this._callbacks.onStateUpdate(import_services8.Invitation.State.CONNECTED);
       this._callbacks.onOpen(this._ctx, context);
     } catch (err) {
       if (this._invitationFlowLock != null) {
@@ -2197,8 +2316,8 @@ var InvitationHostExtension = class extends import_teleport2.RpcExtension {
     if (this._invitationFlowLock != null) {
       this._invitationFlowLock?.release();
       this._invitationFlowLock = null;
-      (0, import_log6.log)("invitation flow lock released", void 0, {
-        F: __dxlog_file8,
+      (0, import_log7.log)("invitation flow lock released", void 0, {
+        F: __dxlog_file9,
         L: 300,
         S: this,
         C: (f, a) => f(...a)
@@ -2206,16 +2325,16 @@ var InvitationHostExtension = class extends import_teleport2.RpcExtension {
     }
   }
 };
-var isAuthenticationRequired = (invitation) => invitation.authMethod !== import_services7.Invitation.AuthMethod.NONE;
-var __dxlog_file9 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/invitation-topology.ts";
+var isAuthenticationRequired = (invitation) => invitation.authMethod !== import_services8.Invitation.AuthMethod.NONE;
+var __dxlog_file10 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/invitation-topology.ts";
 var InvitationTopology = class {
   constructor(_role) {
     this._role = _role;
-    this._seenPeers = new import_util5.ComplexSet(import_keys7.PublicKey.hash);
+    this._seenPeers = new import_util5.ComplexSet(import_keys8.PublicKey.hash);
   }
   init(controller) {
     (0, import_invariant9.invariant)(!this._controller, "Already initialized.", {
-      F: __dxlog_file9,
+      F: __dxlog_file10,
       L: 42,
       S: this,
       A: [
@@ -2227,7 +2346,7 @@ var InvitationTopology = class {
   }
   update() {
     (0, import_invariant9.invariant)(this._controller, "Not initialized.", {
-      F: __dxlog_file9,
+      F: __dxlog_file10,
       L: 47,
       S: this,
       A: [
@@ -2244,13 +2363,13 @@ var InvitationTopology = class {
       return;
     }
     const firstUnknownPeer = candidates.find((peerId) => !this._seenPeers.has(peerId));
-    this._seenPeers = new import_util5.ComplexSet(import_keys7.PublicKey.hash, allPeers.filter((peerId) => this._seenPeers.has(peerId)));
+    this._seenPeers = new import_util5.ComplexSet(import_keys8.PublicKey.hash, allPeers.filter((peerId) => this._seenPeers.has(peerId)));
     if (firstUnknownPeer != null) {
-      (0, import_log7.log)("invitation connect", {
+      (0, import_log8.log)("invitation connect", {
         ownPeerId,
         remotePeerId: firstUnknownPeer
       }, {
-        F: __dxlog_file9,
+        F: __dxlog_file10,
         L: 69,
         S: this,
         C: (f, a) => f(...a)
@@ -2261,7 +2380,7 @@ var InvitationTopology = class {
   }
   async onOffer(peer) {
     (0, import_invariant9.invariant)(this._controller, "Not initialized.", {
-      F: __dxlog_file9,
+      F: __dxlog_file10,
       L: 76,
       S: this,
       A: [
@@ -2278,7 +2397,7 @@ var InvitationTopology = class {
     return `InvitationTopology(${this._role === import_invitations5.Options.Role.GUEST ? "guest" : "host"})`;
   }
 };
-var __dxlog_file10 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/invitations-handler.ts";
+var __dxlog_file11 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/invitations-handler.ts";
 var MAX_DELEGATED_INVITATION_HOST_TRIES = 3;
 var InvitationsHandler = class {
   /**
@@ -2303,7 +2422,7 @@ var InvitationsHandler = class {
           try {
             const deviceKey = admissionRequest.device?.deviceKey ?? admissionRequest.space?.deviceKey;
             (0, import_invariant6.invariant)(deviceKey, void 0, {
-              F: __dxlog_file10,
+              F: __dxlog_file11,
               L: 90,
               S: this,
               A: [
@@ -2323,24 +2442,24 @@ var InvitationsHandler = class {
           let admitted = false;
           connectionCtx.onDispose(() => {
             if (!admitted) {
-              guardedState.error(extension, new import_context4.ContextDisposedError());
+              guardedState.error(extension, new import_context5.ContextDisposedError());
             }
           });
           (0, import_async8.scheduleTask)(connectionCtx, async () => {
-            const traceId = import_keys5.PublicKey.random().toHex();
+            const traceId = import_keys6.PublicKey.random().toHex();
             try {
-              import_log4.log.trace("dxos.sdk.invitations-handler.host.onOpen", import_protocols5.trace.begin({
+              import_log5.log.trace("dxos.sdk.invitations-handler.host.onOpen", import_protocols5.trace.begin({
                 id: traceId
               }), {
-                F: __dxlog_file10,
+                F: __dxlog_file11,
                 L: 115,
                 S: this,
                 C: (f, a) => f(...a)
               });
-              (0, import_log4.log)("connected", {
+              (0, import_log5.log)("connected", {
                 ...protocol.toJSON()
               }, {
-                F: __dxlog_file10,
+                F: __dxlog_file11,
                 L: 116,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2348,20 +2467,20 @@ var InvitationsHandler = class {
               const deviceKey = await extension.completedTrigger.wait({
                 timeout: invitation.timeout
               });
-              (0, import_log4.log)("admitted guest", {
+              (0, import_log5.log)("admitted guest", {
                 guest: deviceKey,
                 ...protocol.toJSON()
               }, {
-                F: __dxlog_file10,
+                F: __dxlog_file11,
                 L: 118,
                 S: this,
                 C: (f, a) => f(...a)
               });
-              guardedState.set(extension, import_services5.Invitation.State.SUCCESS);
-              import_log4.log.trace("dxos.sdk.invitations-handler.host.onOpen", import_protocols5.trace.end({
+              guardedState.set(extension, import_services6.Invitation.State.SUCCESS);
+              import_log5.log.trace("dxos.sdk.invitations-handler.host.onOpen", import_protocols5.trace.end({
                 id: traceId
               }), {
-                F: __dxlog_file10,
+                F: __dxlog_file11,
                 L: 120,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2372,11 +2491,11 @@ var InvitationsHandler = class {
               }
             } catch (err) {
               if (err instanceof import_async8.TimeoutError) {
-                if (guardedState.set(extension, import_services5.Invitation.State.TIMEOUT)) {
-                  (0, import_log4.log)("timeout", {
+                if (guardedState.set(extension, import_services6.Invitation.State.TIMEOUT)) {
+                  (0, import_log5.log)("timeout", {
                     ...protocol.toJSON()
                   }, {
-                    F: __dxlog_file10,
+                    F: __dxlog_file11,
                     L: 129,
                     S: this,
                     C: (f, a) => f(...a)
@@ -2384,19 +2503,19 @@ var InvitationsHandler = class {
                 }
               } else {
                 if (guardedState.error(extension, err)) {
-                  import_log4.log.error("failed", err, {
-                    F: __dxlog_file10,
+                  import_log5.log.error("failed", err, {
+                    F: __dxlog_file11,
                     L: 133,
                     S: this,
                     C: (f, a) => f(...a)
                   });
                 }
               }
-              import_log4.log.trace("dxos.sdk.invitations-handler.host.onOpen", import_protocols5.trace.error({
+              import_log5.log.trace("dxos.sdk.invitations-handler.host.onOpen", import_protocols5.trace.error({
                 id: traceId,
                 error: err
               }), {
-                F: __dxlog_file10,
+                F: __dxlog_file11,
                 L: 136,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2407,10 +2526,10 @@ var InvitationsHandler = class {
         },
         onError: (err) => {
           if (err instanceof import_protocols5.InvalidInvitationExtensionRoleError) {
-            (0, import_log4.log)("invalid role", {
+            (0, import_log5.log)("invalid role", {
               ...err.context
             }, {
-              F: __dxlog_file10,
+              F: __dxlog_file11,
               L: 144,
               S: this,
               C: (f, a) => f(...a)
@@ -2418,11 +2537,11 @@ var InvitationsHandler = class {
             return;
           }
           if (err instanceof import_async8.TimeoutError) {
-            if (guardedState.set(extension, import_services5.Invitation.State.TIMEOUT)) {
-              (0, import_log4.log)("timeout", {
+            if (guardedState.set(extension, import_services6.Invitation.State.TIMEOUT)) {
+              (0, import_log5.log)("timeout", {
                 err
               }, {
-                F: __dxlog_file10,
+                F: __dxlog_file11,
                 L: 149,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2430,8 +2549,8 @@ var InvitationsHandler = class {
             }
           } else {
             if (guardedState.error(extension, err)) {
-              import_log4.log.error("failed", err, {
-                F: __dxlog_file10,
+              import_log5.log.error("failed", err, {
+                F: __dxlog_file11,
                 L: 153,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2444,8 +2563,8 @@ var InvitationsHandler = class {
     };
     if (invitation.lifetime && invitation.created) {
       if (invitation.created.getTime() + invitation.lifetime * 1e3 < Date.now()) {
-        import_log4.log.warn("invitation has already expired", void 0, {
-          F: __dxlog_file10,
+        import_log5.log.warn("invitation has already expired", void 0, {
+          F: __dxlog_file11,
           L: 164,
           S: this,
           C: (f, a) => f(...a)
@@ -2453,7 +2572,7 @@ var InvitationsHandler = class {
       } else {
         (0, import_async8.scheduleTask)(ctx, async () => {
           await swarmConnection.close();
-          guardedState.set(null, import_services5.Invitation.State.EXPIRED);
+          guardedState.set(null, import_services6.Invitation.State.EXPIRED);
           await ctx.dispose();
         }, invitation.created.getTime() + invitation.lifetime * 1e3 - Date.now());
       }
@@ -2461,14 +2580,14 @@ var InvitationsHandler = class {
     let swarmConnection;
     (0, import_async8.scheduleTask)(ctx, async () => {
       swarmConnection = await this._joinSwarm(ctx, invitation, import_invitations2.Options.Role.HOST, createExtension);
-      guardedState.set(null, import_services5.Invitation.State.CONNECTING);
+      guardedState.set(null, import_services6.Invitation.State.CONNECTING);
     });
   }
   acceptInvitation(ctx, stream, protocol, invitation, otpEnteredTrigger, deviceProfile) {
     const { timeout = import_client_protocol2.INVITATION_TIMEOUT } = invitation;
     if (deviceProfile) {
-      (0, import_invariant6.invariant)(invitation.kind === import_services5.Invitation.Kind.DEVICE, "deviceProfile provided for non-device invitation", {
-        F: __dxlog_file10,
+      (0, import_invariant6.invariant)(invitation.kind === import_services6.Invitation.Kind.DEVICE, "deviceProfile provided for non-device invitation", {
+        F: __dxlog_file11,
         L: 197,
         S: this,
         A: [
@@ -2477,16 +2596,16 @@ var InvitationsHandler = class {
         ]
       });
     }
-    const triedPeersIds = new import_util4.ComplexSet(import_keys5.PublicKey.hash);
+    const triedPeersIds = new import_util4.ComplexSet(import_keys6.PublicKey.hash);
     const guardedState = this._createGuardedState(ctx, invitation, stream);
     const shouldCancelInvitationFlow = (extension) => {
       const isLockedByAnotherConnection = guardedState.mutex.isLocked() && !extension.hasFlowLock();
-      (0, import_log4.log)("should cancel invitation flow", {
+      (0, import_log5.log)("should cancel invitation flow", {
         isLockedByAnotherConnection,
-        invitationType: import_services5.Invitation.Type.DELEGATED,
+        invitationType: import_services6.Invitation.Type.DELEGATED,
         triedPeers: triedPeersIds.size
       }, {
-        F: __dxlog_file10,
+        F: __dxlog_file11,
         L: 205,
         S: this,
         C: (f, a) => f(...a)
@@ -2494,7 +2613,7 @@ var InvitationsHandler = class {
       if (isLockedByAnotherConnection) {
         return false;
       }
-      return invitation.type !== import_services5.Invitation.Type.DELEGATED || triedPeersIds.size >= MAX_DELEGATED_INVITATION_HOST_TRIES;
+      return invitation.type !== import_services6.Invitation.Type.DELEGATED || triedPeersIds.size >= MAX_DELEGATED_INVITATION_HOST_TRIES;
     };
     let admitted = false;
     const createExtension = () => {
@@ -2509,50 +2628,50 @@ var InvitationsHandler = class {
             return;
           }
           connectionCtx.onDispose(async () => {
-            (0, import_log4.log)("extension disposed", {
+            (0, import_log5.log)("extension disposed", {
               admitted,
               currentState: guardedState.current.state
             }, {
-              F: __dxlog_file10,
+              F: __dxlog_file11,
               L: 233,
               S: this,
               C: (f, a) => f(...a)
             });
             if (!admitted) {
-              guardedState.error(extension, new import_context4.ContextDisposedError());
+              guardedState.error(extension, new import_context5.ContextDisposedError());
               if (shouldCancelInvitationFlow(extension)) {
                 await ctx.dispose();
               }
             }
           });
           (0, import_async8.scheduleTask)(connectionCtx, async () => {
-            const traceId = import_keys5.PublicKey.random().toHex();
+            const traceId = import_keys6.PublicKey.random().toHex();
             try {
-              import_log4.log.trace("dxos.sdk.invitations-handler.guest.onOpen", import_protocols5.trace.begin({
+              import_log5.log.trace("dxos.sdk.invitations-handler.guest.onOpen", import_protocols5.trace.begin({
                 id: traceId
               }), {
-                F: __dxlog_file10,
+                F: __dxlog_file11,
                 L: 245,
                 S: this,
                 C: (f, a) => f(...a)
               });
               (0, import_async8.scheduleTask)(connectionCtx, () => {
-                guardedState.set(extension, import_services5.Invitation.State.TIMEOUT);
+                guardedState.set(extension, import_services6.Invitation.State.TIMEOUT);
                 extensionCtx.close();
               }, timeout);
-              (0, import_log4.log)("connected", {
+              (0, import_log5.log)("connected", {
                 ...protocol.toJSON()
               }, {
-                F: __dxlog_file10,
+                F: __dxlog_file11,
                 L: 256,
                 S: this,
                 C: (f, a) => f(...a)
               });
-              guardedState.set(extension, import_services5.Invitation.State.CONNECTED);
-              (0, import_log4.log)("introduce", {
+              guardedState.set(extension, import_services6.Invitation.State.CONNECTED);
+              (0, import_log5.log)("introduce", {
                 ...protocol.toJSON()
               }, {
-                F: __dxlog_file10,
+                F: __dxlog_file11,
                 L: 260,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2561,11 +2680,11 @@ var InvitationsHandler = class {
                 invitationId: invitation.invitationId,
                 ...protocol.createIntroduction()
               });
-              (0, import_log4.log)("introduce response", {
+              (0, import_log5.log)("introduce response", {
                 ...protocol.toJSON(),
                 response: introductionResponse
               }, {
-                F: __dxlog_file10,
+                F: __dxlog_file11,
                 L: 265,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2573,20 +2692,20 @@ var InvitationsHandler = class {
               invitation.authMethod = introductionResponse.authMethod;
               if (isAuthenticationRequired(invitation)) {
                 switch (invitation.authMethod) {
-                  case import_services5.Invitation.AuthMethod.SHARED_SECRET:
+                  case import_services6.Invitation.AuthMethod.SHARED_SECRET:
                     await this._handleGuestOtpAuth(extension, (state) => guardedState.set(extension, state), otpEnteredTrigger, {
                       timeout
                     });
                     break;
-                  case import_services5.Invitation.AuthMethod.KNOWN_PUBLIC_KEY:
+                  case import_services6.Invitation.AuthMethod.KNOWN_PUBLIC_KEY:
                     await this._handleGuestKpkAuth(extension, (state) => guardedState.set(extension, state), invitation, introductionResponse);
                     break;
                 }
               }
-              (0, import_log4.log)("request admission", {
+              (0, import_log5.log)("request admission", {
                 ...protocol.toJSON()
               }, {
-                F: __dxlog_file10,
+                F: __dxlog_file11,
                 L: 291,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2595,10 +2714,10 @@ var InvitationsHandler = class {
               const admissionResponse = await extension.rpc.InvitationHostService.admit(admissionRequest);
               admitted = true;
               const result = await protocol.accept(admissionResponse, admissionRequest);
-              (0, import_log4.log)("admitted by host", {
+              (0, import_log5.log)("admitted by host", {
                 ...protocol.toJSON()
               }, {
-                F: __dxlog_file10,
+                F: __dxlog_file11,
                 L: 302,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2606,30 +2725,30 @@ var InvitationsHandler = class {
               await guardedState.complete({
                 ...guardedState.current,
                 ...result,
-                state: import_services5.Invitation.State.SUCCESS
+                state: import_services6.Invitation.State.SUCCESS
               });
-              import_log4.log.trace("dxos.sdk.invitations-handler.guest.onOpen", import_protocols5.trace.end({
+              import_log5.log.trace("dxos.sdk.invitations-handler.guest.onOpen", import_protocols5.trace.end({
                 id: traceId
               }), {
-                F: __dxlog_file10,
+                F: __dxlog_file11,
                 L: 308,
                 S: this,
                 C: (f, a) => f(...a)
               });
             } catch (err) {
               if (err instanceof import_async8.TimeoutError) {
-                (0, import_log4.log)("timeout", {
+                (0, import_log5.log)("timeout", {
                   ...protocol.toJSON()
                 }, {
-                  F: __dxlog_file10,
+                  F: __dxlog_file11,
                   L: 311,
                   S: this,
                   C: (f, a) => f(...a)
                 });
-                guardedState.set(extension, import_services5.Invitation.State.TIMEOUT);
+                guardedState.set(extension, import_services6.Invitation.State.TIMEOUT);
               } else {
-                (0, import_log4.log)("auth failed", err, {
-                  F: __dxlog_file10,
+                (0, import_log5.log)("auth failed", err, {
+                  F: __dxlog_file11,
                   L: 314,
                   S: this,
                   C: (f, a) => f(...a)
@@ -2637,11 +2756,11 @@ var InvitationsHandler = class {
                 guardedState.error(extension, err);
               }
               extensionCtx.close(err);
-              import_log4.log.trace("dxos.sdk.invitations-handler.guest.onOpen", import_protocols5.trace.error({
+              import_log5.log.trace("dxos.sdk.invitations-handler.guest.onOpen", import_protocols5.trace.error({
                 id: traceId,
                 error: err
               }), {
-                F: __dxlog_file10,
+                F: __dxlog_file11,
                 L: 318,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2654,18 +2773,18 @@ var InvitationsHandler = class {
             return;
           }
           if (err instanceof import_async8.TimeoutError) {
-            (0, import_log4.log)("timeout", {
+            (0, import_log5.log)("timeout", {
               ...protocol.toJSON()
             }, {
-              F: __dxlog_file10,
+              F: __dxlog_file11,
               L: 327,
               S: this,
               C: (f, a) => f(...a)
             });
-            guardedState.set(extension, import_services5.Invitation.State.TIMEOUT);
+            guardedState.set(extension, import_services6.Invitation.State.TIMEOUT);
           } else {
-            (0, import_log4.log)("auth failed", err, {
-              F: __dxlog_file10,
+            (0, import_log5.log)("auth failed", err, {
+              F: __dxlog_file11,
               L: 330,
               S: this,
               C: (f, a) => f(...a)
@@ -2683,7 +2802,7 @@ var InvitationsHandler = class {
         await ctx.dispose();
       } else {
         (0, import_invariant6.invariant)(invitation.swarmKey, void 0, {
-          F: __dxlog_file10,
+          F: __dxlog_file11,
           L: 345,
           S: this,
           A: [
@@ -2692,7 +2811,7 @@ var InvitationsHandler = class {
           ]
         });
         await this._joinSwarm(ctx, invitation, import_invitations2.Options.Role.GUEST, createExtension);
-        guardedState.set(null, import_services5.Invitation.State.CONNECTING);
+        guardedState.set(null, import_services6.Invitation.State.CONNECTING);
       }
     });
   }
@@ -2700,14 +2819,14 @@ var InvitationsHandler = class {
     let label;
     if (role === import_invitations2.Options.Role.GUEST) {
       label = "invitation guest";
-    } else if (invitation.kind === import_services5.Invitation.Kind.DEVICE) {
+    } else if (invitation.kind === import_services6.Invitation.Kind.DEVICE) {
       label = "invitation host for device";
     } else {
       label = `invitation host for space ${invitation.spaceKey?.truncate()}`;
     }
     const swarmConnection = await this._networkManager.joinSwarm({
       topic: invitation.swarmKey,
-      peerId: import_keys5.PublicKey.random(),
+      peerId: import_keys6.PublicKey.random(),
       protocolProvider: (0, import_network_manager.createTeleportProtocolFactory)(async (teleport) => {
         teleport.addExtension("dxos.halo.invitations", extensionFactory());
       }, this._defaultTeleportParams),
@@ -2762,10 +2881,10 @@ var InvitationsHandler = class {
       },
       error: (extension, error) => {
         if (isStateChangeAllowed(extension)) {
-          this._logStateUpdate(currentInvitation, extension, import_services5.Invitation.State.ERROR);
+          this._logStateUpdate(currentInvitation, extension, import_services6.Invitation.State.ERROR);
           currentInvitation = {
             ...currentInvitation,
-            state: import_services5.Invitation.State.ERROR
+            state: import_services6.Invitation.State.ERROR
           };
           stream.next(currentInvitation);
           stream.error(error);
@@ -2777,12 +2896,12 @@ var InvitationsHandler = class {
     };
   }
   _logStateUpdate(invitation, actor, newState) {
-    (0, import_log4.log)("invitation state update", {
+    (0, import_log5.log)("invitation state update", {
       actor: actor?.constructor.name,
       newState: stateToString(newState),
       oldState: stateToString(invitation.state)
     }, {
-      F: __dxlog_file10,
+      F: __dxlog_file11,
       L: 438,
       S: this,
       C: (f, a) => f(...a)
@@ -2790,30 +2909,30 @@ var InvitationsHandler = class {
   }
   _isNotTerminal(currentState) {
     return ![
-      import_services5.Invitation.State.SUCCESS,
-      import_services5.Invitation.State.ERROR,
-      import_services5.Invitation.State.CANCELLED,
-      import_services5.Invitation.State.TIMEOUT,
-      import_services5.Invitation.State.EXPIRED
+      import_services6.Invitation.State.SUCCESS,
+      import_services6.Invitation.State.ERROR,
+      import_services6.Invitation.State.CANCELLED,
+      import_services6.Invitation.State.TIMEOUT,
+      import_services6.Invitation.State.EXPIRED
     ].includes(currentState);
   }
   async _handleGuestOtpAuth(extension, setState, authenticated, options) {
     for (let attempt = 1; attempt <= MAX_OTP_ATTEMPTS; attempt++) {
-      (0, import_log4.log)("guest waiting for authentication code...", void 0, {
-        F: __dxlog_file10,
+      (0, import_log5.log)("guest waiting for authentication code...", void 0, {
+        F: __dxlog_file11,
         L: 462,
         S: this,
         C: (f, a) => f(...a)
       });
-      setState(import_services5.Invitation.State.READY_FOR_AUTHENTICATION);
+      setState(import_services6.Invitation.State.READY_FOR_AUTHENTICATION);
       const authCode = await authenticated.wait(options);
-      (0, import_log4.log)("sending authentication request", void 0, {
-        F: __dxlog_file10,
+      (0, import_log5.log)("sending authentication request", void 0, {
+        F: __dxlog_file11,
         L: 466,
         S: this,
         C: (f, a) => f(...a)
       });
-      setState(import_services5.Invitation.State.AUTHENTICATING);
+      setState(import_services6.Invitation.State.AUTHENTICATING);
       const response = await extension.rpc.InvitationHostService.authenticate({
         authCode
       });
@@ -2824,10 +2943,10 @@ var InvitationsHandler = class {
         if (attempt === MAX_OTP_ATTEMPTS) {
           throw new Error(`Maximum retry attempts: ${MAX_OTP_ATTEMPTS}`);
         } else {
-          (0, import_log4.log)("retrying invalid code", {
+          (0, import_log5.log)("retrying invalid code", {
             attempt
           }, {
-            F: __dxlog_file10,
+            F: __dxlog_file11,
             L: 477,
             S: this,
             C: (f, a) => f(...a)
@@ -2844,13 +2963,13 @@ var InvitationsHandler = class {
     if (introductionResponse.challenge == null) {
       throw new Error("challenge missing in the introduction");
     }
-    (0, import_log4.log)("sending authentication request", void 0, {
-      F: __dxlog_file10,
+    (0, import_log5.log)("sending authentication request", void 0, {
+      F: __dxlog_file11,
       L: 496,
       S: this,
       C: (f, a) => f(...a)
     });
-    setState(import_services5.Invitation.State.AUTHENTICATING);
+    setState(import_services6.Invitation.State.AUTHENTICATING);
     const signature = (0, import_crypto.sign)(Buffer.from(introductionResponse.challenge), invitation.guestKeypair.privateKey);
     const response = await extension.rpc.InvitationHostService.authenticate({
       signedChallenge: signature
@@ -2863,7 +2982,7 @@ var InvitationsHandler = class {
 var createAdmissionKeypair = () => {
   const keypair = (0, import_crypto.createKeyPair)();
   return {
-    publicKey: import_keys5.PublicKey.from(keypair.publicKey),
+    publicKey: import_keys6.PublicKey.from(keypair.publicKey),
     privateKey: keypair.secretKey
   };
 };
@@ -2896,8 +3015,8 @@ var InvitationsServiceImpl = class {
     return new import_codec_protobuf10.Stream(({ next, ctx }) => {
       this._invitationsManager.invitationCreated.on(ctx, (invitation) => {
         next({
-          action: import_services8.QueryInvitationsResponse.Action.ADDED,
-          type: import_services8.QueryInvitationsResponse.Type.CREATED,
+          action: import_services9.QueryInvitationsResponse.Action.ADDED,
+          type: import_services9.QueryInvitationsResponse.Type.CREATED,
           invitations: [
             invitation
           ]
@@ -2905,8 +3024,8 @@ var InvitationsServiceImpl = class {
       });
       this._invitationsManager.invitationAccepted.on(ctx, (invitation) => {
         next({
-          action: import_services8.QueryInvitationsResponse.Action.ADDED,
-          type: import_services8.QueryInvitationsResponse.Type.ACCEPTED,
+          action: import_services9.QueryInvitationsResponse.Action.ADDED,
+          type: import_services9.QueryInvitationsResponse.Type.ACCEPTED,
           invitations: [
             invitation
           ]
@@ -2914,8 +3033,8 @@ var InvitationsServiceImpl = class {
       });
       this._invitationsManager.removedCreated.on(ctx, (invitation) => {
         next({
-          action: import_services8.QueryInvitationsResponse.Action.REMOVED,
-          type: import_services8.QueryInvitationsResponse.Type.CREATED,
+          action: import_services9.QueryInvitationsResponse.Action.REMOVED,
+          type: import_services9.QueryInvitationsResponse.Type.CREATED,
           invitations: [
             invitation
           ]
@@ -2923,8 +3042,8 @@ var InvitationsServiceImpl = class {
       });
       this._invitationsManager.removedAccepted.on(ctx, (invitation) => {
         next({
-          action: import_services8.QueryInvitationsResponse.Action.REMOVED,
-          type: import_services8.QueryInvitationsResponse.Type.ACCEPTED,
+          action: import_services9.QueryInvitationsResponse.Action.REMOVED,
+          type: import_services9.QueryInvitationsResponse.Type.ACCEPTED,
           invitations: [
             invitation
           ]
@@ -2932,35 +3051,35 @@ var InvitationsServiceImpl = class {
       });
       this._invitationsManager.saved.on(ctx, (invitation) => {
         next({
-          action: import_services8.QueryInvitationsResponse.Action.SAVED,
-          type: import_services8.QueryInvitationsResponse.Type.CREATED,
+          action: import_services9.QueryInvitationsResponse.Action.SAVED,
+          type: import_services9.QueryInvitationsResponse.Type.CREATED,
           invitations: [
             invitation
           ]
         });
       });
       next({
-        action: import_services8.QueryInvitationsResponse.Action.ADDED,
-        type: import_services8.QueryInvitationsResponse.Type.CREATED,
+        action: import_services9.QueryInvitationsResponse.Action.ADDED,
+        type: import_services9.QueryInvitationsResponse.Type.CREATED,
         invitations: this._invitationsManager.getCreatedInvitations(),
         existing: true
       });
       next({
-        action: import_services8.QueryInvitationsResponse.Action.ADDED,
-        type: import_services8.QueryInvitationsResponse.Type.ACCEPTED,
+        action: import_services9.QueryInvitationsResponse.Action.ADDED,
+        type: import_services9.QueryInvitationsResponse.Type.ACCEPTED,
         invitations: this._invitationsManager.getAcceptedInvitations(),
         existing: true
       });
       this._invitationsManager.onPersistentInvitationsLoaded(ctx, () => {
         next({
-          action: import_services8.QueryInvitationsResponse.Action.LOAD_COMPLETE,
-          type: import_services8.QueryInvitationsResponse.Type.CREATED
+          action: import_services9.QueryInvitationsResponse.Action.LOAD_COMPLETE,
+          type: import_services9.QueryInvitationsResponse.Type.CREATED
         });
       });
     });
   }
 };
-var __dxlog_file11 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/space-invitation-protocol.ts";
+var __dxlog_file12 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/space-invitation-protocol.ts";
 var SpaceInvitationProtocol = class {
   constructor(_spaceManager, _signingContext, _keyring, _spaceKey) {
     this._spaceManager = _spaceManager;
@@ -2989,13 +3108,13 @@ var SpaceInvitationProtocol = class {
   }
   getInvitationContext() {
     return {
-      kind: import_services9.Invitation.Kind.SPACE,
+      kind: import_services10.Invitation.Kind.SPACE,
       spaceKey: this._spaceKey
     };
   }
   async admit(invitation, request, guestProfile) {
     (0, import_invariant10.invariant)(this._spaceKey, void 0, {
-      F: __dxlog_file11,
+      F: __dxlog_file12,
       L: 76,
       S: this,
       A: [
@@ -3005,7 +3124,7 @@ var SpaceInvitationProtocol = class {
     });
     const space = this._spaceManager.spaces.get(this._spaceKey);
     (0, import_invariant10.invariant)(space, void 0, {
-      F: __dxlog_file11,
+      F: __dxlog_file12,
       L: 78,
       S: this,
       A: [
@@ -3014,7 +3133,7 @@ var SpaceInvitationProtocol = class {
       ]
     });
     (0, import_invariant10.invariant)(request.space, void 0, {
-      F: __dxlog_file11,
+      F: __dxlog_file12,
       L: 80,
       S: this,
       A: [
@@ -3023,21 +3142,21 @@ var SpaceInvitationProtocol = class {
       ]
     });
     const { identityKey, deviceKey } = request.space;
-    if (space.inner.spaceState.getMemberRole(identityKey) !== import_credentials9.SpaceMember.Role.REMOVED) {
+    if (space.inner.spaceState.getMemberRole(identityKey) !== import_credentials10.SpaceMember.Role.REMOVED) {
       throw new import_protocols8.AlreadyJoinedError();
     }
-    (0, import_log8.log)("writing guest credentials", {
+    (0, import_log9.log)("writing guest credentials", {
       host: this._signingContext.deviceKey,
       guest: deviceKey
     }, {
-      F: __dxlog_file11,
+      F: __dxlog_file12,
       L: 87,
       S: this,
       C: (f, a) => f(...a)
     });
-    const credentials = await (0, import_credentials8.createAdmissionCredentials)(this._signingContext.credentialSigner, identityKey, space.key, space.inner.genesisFeedKey, invitation.role ?? import_credentials9.SpaceMember.Role.ADMIN, space.inner.spaceState.membershipChainHeads, guestProfile, invitation.delegationCredentialId);
+    const credentials = await (0, import_credentials9.createAdmissionCredentials)(this._signingContext.credentialSigner, identityKey, space.key, space.inner.genesisFeedKey, invitation.role ?? import_credentials10.SpaceMember.Role.ADMIN, space.inner.spaceState.membershipChainHeads, guestProfile, invitation.delegationCredentialId);
     (0, import_invariant10.invariant)(credentials[0].credential, void 0, {
-      F: __dxlog_file11,
+      F: __dxlog_file12,
       L: 101,
       S: this,
       A: [
@@ -3046,8 +3165,8 @@ var SpaceInvitationProtocol = class {
       ]
     });
     const spaceMemberCredential = credentials[0].credential.credential;
-    (0, import_invariant10.invariant)((0, import_credentials8.getCredentialAssertion)(spaceMemberCredential)["@type"] === "dxos.halo.credentials.SpaceMember", void 0, {
-      F: __dxlog_file11,
+    (0, import_invariant10.invariant)((0, import_credentials9.getCredentialAssertion)(spaceMemberCredential)["@type"] === "dxos.halo.credentials.SpaceMember", void 0, {
+      F: __dxlog_file12,
       L: 103,
       S: this,
       A: [
@@ -3065,7 +3184,7 @@ var SpaceInvitationProtocol = class {
   }
   async delegate(invitation) {
     (0, import_invariant10.invariant)(this._spaceKey, void 0, {
-      F: __dxlog_file11,
+      F: __dxlog_file12,
       L: 116,
       S: this,
       A: [
@@ -3075,7 +3194,7 @@ var SpaceInvitationProtocol = class {
     });
     const space = this._spaceManager.spaces.get(this._spaceKey);
     (0, import_invariant10.invariant)(space, void 0, {
-      F: __dxlog_file11,
+      F: __dxlog_file12,
       L: 118,
       S: this,
       A: [
@@ -3083,9 +3202,9 @@ var SpaceInvitationProtocol = class {
         ""
       ]
     });
-    if (invitation.authMethod === import_services9.Invitation.AuthMethod.KNOWN_PUBLIC_KEY) {
+    if (invitation.authMethod === import_services10.Invitation.AuthMethod.KNOWN_PUBLIC_KEY) {
       (0, import_invariant10.invariant)(invitation.guestKeypair?.publicKey, void 0, {
-        F: __dxlog_file11,
+        F: __dxlog_file12,
         L: 120,
         S: this,
         A: [
@@ -3094,26 +3213,26 @@ var SpaceInvitationProtocol = class {
         ]
       });
     }
-    (0, import_log8.log)("writing delegate space invitation", {
+    (0, import_log9.log)("writing delegate space invitation", {
       host: this._signingContext.deviceKey,
       id: invitation.invitationId
     }, {
-      F: __dxlog_file11,
+      F: __dxlog_file12,
       L: 123,
       S: this,
       C: (f, a) => f(...a)
     });
-    const credential = await (0, import_credentials8.createDelegatedSpaceInvitationCredential)(this._signingContext.credentialSigner, space.key, {
+    const credential = await (0, import_credentials9.createDelegatedSpaceInvitationCredential)(this._signingContext.credentialSigner, space.key, {
       invitationId: invitation.invitationId,
       authMethod: invitation.authMethod,
       swarmKey: invitation.swarmKey,
-      role: invitation.role ?? import_credentials9.SpaceMember.Role.ADMIN,
+      role: invitation.role ?? import_credentials10.SpaceMember.Role.ADMIN,
       expiresOn: invitation.lifetime ? new Date((invitation.created?.getTime() ?? Date.now()) + invitation.lifetime) : void 0,
       multiUse: invitation.multiUse ?? false,
-      guestKey: invitation.authMethod === import_services9.Invitation.AuthMethod.KNOWN_PUBLIC_KEY ? invitation.guestKeypair.publicKey : void 0
+      guestKey: invitation.authMethod === import_services10.Invitation.AuthMethod.KNOWN_PUBLIC_KEY ? invitation.guestKeypair.publicKey : void 0
     });
     (0, import_invariant10.invariant)(credential.credential, void 0, {
-      F: __dxlog_file11,
+      F: __dxlog_file12,
       L: 143,
       S: this,
       A: [
@@ -3128,7 +3247,7 @@ var SpaceInvitationProtocol = class {
   }
   async cancelDelegation(invitation) {
     (0, import_invariant10.invariant)(this._spaceKey, void 0, {
-      F: __dxlog_file11,
+      F: __dxlog_file12,
       L: 149,
       S: this,
       A: [
@@ -3136,8 +3255,8 @@ var SpaceInvitationProtocol = class {
         ""
       ]
     });
-    (0, import_invariant10.invariant)(invitation.type === import_services9.Invitation.Type.DELEGATED && invitation.delegationCredentialId, void 0, {
-      F: __dxlog_file11,
+    (0, import_invariant10.invariant)(invitation.type === import_services10.Invitation.Type.DELEGATED && invitation.delegationCredentialId, void 0, {
+      F: __dxlog_file12,
       L: 150,
       S: this,
       A: [
@@ -3147,7 +3266,7 @@ var SpaceInvitationProtocol = class {
     });
     const space = this._spaceManager.spaces.get(this._spaceKey);
     (0, import_invariant10.invariant)(space, void 0, {
-      F: __dxlog_file11,
+      F: __dxlog_file12,
       L: 152,
       S: this,
       A: [
@@ -3155,18 +3274,18 @@ var SpaceInvitationProtocol = class {
         ""
       ]
     });
-    (0, import_log8.log)("cancelling delegated space invitation", {
+    (0, import_log9.log)("cancelling delegated space invitation", {
       host: this._signingContext.deviceKey,
       id: invitation.invitationId
     }, {
-      F: __dxlog_file11,
+      F: __dxlog_file12,
       L: 154,
       S: this,
       C: (f, a) => f(...a)
     });
-    const credential = await (0, import_credentials8.createCancelDelegatedSpaceInvitationCredential)(this._signingContext.credentialSigner, space.key, invitation.delegationCredentialId);
+    const credential = await (0, import_credentials9.createCancelDelegatedSpaceInvitationCredential)(this._signingContext.credentialSigner, space.key, invitation.delegationCredentialId);
     (0, import_invariant10.invariant)(credential.credential, void 0, {
-      F: __dxlog_file11,
+      F: __dxlog_file12,
       L: 161,
       S: this,
       A: [
@@ -3205,7 +3324,7 @@ var SpaceInvitationProtocol = class {
   }
   async accept(response) {
     (0, import_invariant10.invariant)(response.space, void 0, {
-      F: __dxlog_file11,
+      F: __dxlog_file12,
       L: 196,
       S: this,
       A: [
@@ -3214,9 +3333,9 @@ var SpaceInvitationProtocol = class {
       ]
     });
     const { credential, controlTimeframe, dataTimeframe } = response.space;
-    const assertion = (0, import_credentials8.getCredentialAssertion)(credential);
+    const assertion = (0, import_credentials9.getCredentialAssertion)(credential);
     (0, import_invariant10.invariant)(assertion["@type"] === "dxos.halo.credentials.SpaceMember", "Invalid credential", {
-      F: __dxlog_file11,
+      F: __dxlog_file12,
       L: 199,
       S: this,
       A: [
@@ -3225,7 +3344,7 @@ var SpaceInvitationProtocol = class {
       ]
     });
     (0, import_invariant10.invariant)(credential.subject.id.equals(this._signingContext.identityKey), void 0, {
-      F: __dxlog_file11,
+      F: __dxlog_file12,
       L: 200,
       S: this,
       A: [
@@ -3248,7 +3367,7 @@ var SpaceInvitationProtocol = class {
     };
   }
 };
-var __dxlog_file12 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/invitations-manager.ts";
+var __dxlog_file13 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/invitations-manager.ts";
 var InvitationsManager = class {
   constructor(_invitationsHandler, _getHandler, _metadataStore) {
     this._invitationsHandler = _invitationsHandler;
@@ -3290,8 +3409,8 @@ var InvitationsManager = class {
     try {
       await this._persistIfRequired(handler, stream, invitation);
     } catch (err) {
-      import_log9.log.catch(err, void 0, {
-        F: __dxlog_file12,
+      import_log10.log.catch(err, void 0, {
+        F: __dxlog_file13,
         L: 82,
         S: this,
         C: (f, a) => f(...a)
@@ -3314,7 +3433,7 @@ var InvitationsManager = class {
       const freshInvitations = persistentInvitations.filter((invitation) => !(0, import_echo_pipeline.hasInvitationExpired)(invitation));
       const loadTasks = freshInvitations.map((persistentInvitation) => {
         (0, import_invariant11.invariant)(!this._createInvitations.get(persistentInvitation.invitationId), "invitation already exists", {
-          F: __dxlog_file12,
+          F: __dxlog_file13,
           L: 103,
           S: this,
           A: [
@@ -3332,8 +3451,8 @@ var InvitationsManager = class {
         invitations: cInvitations.map((invitation) => invitation.get())
       };
     } catch (err) {
-      import_log9.log.catch(err, void 0, {
-        F: __dxlog_file12,
+      import_log10.log.catch(err, void 0, {
+        F: __dxlog_file13,
         L: 110,
         S: this,
         C: (f, a) => f(...a)
@@ -3364,14 +3483,14 @@ var InvitationsManager = class {
     return invitation;
   }
   async authenticate({ invitationId, authCode }) {
-    (0, import_log9.log)("authenticating...", void 0, {
-      F: __dxlog_file12,
+    (0, import_log10.log)("authenticating...", void 0, {
+      F: __dxlog_file13,
       L: 140,
       S: this,
       C: (f, a) => f(...a)
     });
     (0, import_invariant11.invariant)(invitationId, void 0, {
-      F: __dxlog_file12,
+      F: __dxlog_file13,
       L: 141,
       S: this,
       A: [
@@ -3381,10 +3500,10 @@ var InvitationsManager = class {
     });
     const observable = this._acceptInvitations.get(invitationId);
     if (!observable) {
-      import_log9.log.warn("invalid invitation", {
+      import_log10.log.warn("invalid invitation", {
         invitationId
       }, {
-        F: __dxlog_file12,
+        F: __dxlog_file13,
         L: 144,
         S: this,
         C: (f, a) => f(...a)
@@ -3394,16 +3513,16 @@ var InvitationsManager = class {
     }
   }
   async cancelInvitation({ invitationId }) {
-    (0, import_log9.log)("cancelInvitation...", {
+    (0, import_log10.log)("cancelInvitation...", {
       invitationId
     }, {
-      F: __dxlog_file12,
+      F: __dxlog_file13,
       L: 151,
       S: this,
       C: (f, a) => f(...a)
     });
     (0, import_invariant11.invariant)(invitationId, void 0, {
-      F: __dxlog_file12,
+      F: __dxlog_file13,
       L: 152,
       S: this,
       A: [
@@ -3416,7 +3535,7 @@ var InvitationsManager = class {
       if (created.get().persistent) {
         await this._metadataStore.removeInvitation(invitationId);
       }
-      if (created.get().type === import_services10.Invitation.Type.DELEGATED) {
+      if (created.get().type === import_services11.Invitation.Type.DELEGATED) {
         const handler = this._getHandler(created.get());
         await handler.cancelDelegation(created.get());
       }
@@ -3450,8 +3569,8 @@ var InvitationsManager = class {
     }
   }
   _createInvitation(protocol, options) {
-    const { invitationId = import_keys8.PublicKey.random().toHex(), type = import_services10.Invitation.Type.INTERACTIVE, authMethod = import_services10.Invitation.AuthMethod.SHARED_SECRET, state = import_services10.Invitation.State.INIT, timeout = import_client_protocol3.INVITATION_TIMEOUT, swarmKey = import_keys8.PublicKey.random(), persistent = options?.authMethod !== import_services10.Invitation.AuthMethod.KNOWN_PUBLIC_KEY, created = /* @__PURE__ */ new Date(), guestKeypair = void 0, role = import_credentials11.SpaceMember.Role.ADMIN, lifetime = 86400, multiUse = false } = options ?? {};
-    const authCode = options?.authCode ?? (authMethod === import_services10.Invitation.AuthMethod.SHARED_SECRET ? (0, import_credentials10.generatePasscode)(import_client_protocol3.AUTHENTICATION_CODE_LENGTH) : void 0);
+    const { invitationId = import_keys9.PublicKey.random().toHex(), type = import_services11.Invitation.Type.INTERACTIVE, authMethod = import_services11.Invitation.AuthMethod.SHARED_SECRET, state = import_services11.Invitation.State.INIT, timeout = import_client_protocol3.INVITATION_TIMEOUT, swarmKey = import_keys9.PublicKey.random(), persistent = options?.authMethod !== import_services11.Invitation.AuthMethod.KNOWN_PUBLIC_KEY, created = /* @__PURE__ */ new Date(), guestKeypair = void 0, role = import_credentials12.SpaceMember.Role.ADMIN, lifetime = 86400, multiUse = false } = options ?? {};
+    const authCode = options?.authCode ?? (authMethod === import_services11.Invitation.AuthMethod.SHARED_SECRET ? (0, import_credentials11.generatePasscode)(import_client_protocol3.AUTHENTICATION_CODE_LENGTH) : void 0);
     return {
       invitationId,
       type,
@@ -3460,8 +3579,8 @@ var InvitationsManager = class {
       swarmKey,
       authCode,
       timeout,
-      persistent: persistent && type !== import_services10.Invitation.Type.DELEGATED,
-      guestKeypair: guestKeypair ?? (authMethod === import_services10.Invitation.AuthMethod.KNOWN_PUBLIC_KEY ? createAdmissionKeypair() : void 0),
+      persistent: persistent && type !== import_services11.Invitation.Type.DELEGATED,
+      guestKeypair: guestKeypair ?? (authMethod === import_services11.Invitation.AuthMethod.KNOWN_PUBLIC_KEY ? createAdmissionKeypair() : void 0),
       created,
       lifetime,
       role,
@@ -3472,17 +3591,17 @@ var InvitationsManager = class {
   }
   _createObservableInvitation(handler, invitation) {
     const stream = new import_async11.PushStream();
-    const ctx = new import_context8.Context({
+    const ctx = new import_context9.Context({
       onError: (err) => {
         stream.error(err);
         void ctx.dispose();
       }
     });
     ctx.onDispose(() => {
-      (0, import_log9.log)("complete", {
+      (0, import_log10.log)("complete", {
         ...handler.toJSON()
       }, {
-        F: __dxlog_file12,
+        F: __dxlog_file13,
         L: 241,
         S: this,
         C: (f, a) => f(...a)
@@ -3495,7 +3614,7 @@ var InvitationsManager = class {
       onCancel: async () => {
         stream.next({
           ...invitation,
-          state: import_services10.Invitation.State.CANCELLED
+          state: import_services11.Invitation.State.CANCELLED
         });
         await ctx.dispose();
       }
@@ -3509,41 +3628,41 @@ var InvitationsManager = class {
   _createObservableAcceptingInvitation(handler, initialState) {
     const otpEnteredTrigger = new import_async11.Trigger();
     const stream = new import_async11.PushStream();
-    const ctx = new import_context8.Context({
+    const ctx = new import_context9.Context({
       onError: (err) => {
         if (err instanceof import_async11.TimeoutError) {
-          (0, import_log9.log)("timeout", {
+          (0, import_log10.log)("timeout", {
             ...handler.toJSON()
           }, {
-            F: __dxlog_file12,
+            F: __dxlog_file13,
             L: 261,
             S: this,
             C: (f, a) => f(...a)
           });
           stream.next({
             ...initialState,
-            state: import_services10.Invitation.State.TIMEOUT
+            state: import_services11.Invitation.State.TIMEOUT
           });
         } else {
-          import_log9.log.warn("auth failed", err, {
-            F: __dxlog_file12,
+          import_log10.log.warn("auth failed", err, {
+            F: __dxlog_file13,
             L: 264,
             S: this,
             C: (f, a) => f(...a)
           });
           stream.next({
             ...initialState,
-            state: import_services10.Invitation.State.ERROR
+            state: import_services11.Invitation.State.ERROR
           });
         }
         void ctx.dispose();
       }
     });
     ctx.onDispose(() => {
-      (0, import_log9.log)("complete", {
+      (0, import_log10.log)("complete", {
         ...handler.toJSON()
       }, {
-        F: __dxlog_file12,
+        F: __dxlog_file13,
         L: 271,
         S: this,
         C: (f, a) => f(...a)
@@ -3556,7 +3675,7 @@ var InvitationsManager = class {
       onCancel: async () => {
         stream.next({
           ...initialState,
-          state: import_services10.Invitation.State.CANCELLED
+          state: import_services11.Invitation.State.CANCELLED
         });
         await ctx.dispose();
       },
@@ -3572,7 +3691,7 @@ var InvitationsManager = class {
     };
   }
   async _persistIfRequired(handler, changeStream, invitation) {
-    if (invitation.type === import_services10.Invitation.Type.DELEGATED && invitation.delegationCredentialId == null) {
+    if (invitation.type === import_services11.Invitation.Type.DELEGATED && invitation.delegationCredentialId == null) {
       const delegationCredentialId = await handler.delegate(invitation);
       changeStream.next({
         ...invitation,
@@ -3587,8 +3706,8 @@ var InvitationsManager = class {
     try {
       await this._metadataStore.removeInvitation(invitation.invitationId);
     } catch (err) {
-      import_log9.log.catch(err, void 0, {
-        F: __dxlog_file12,
+      import_log10.log.catch(err, void 0, {
+        F: __dxlog_file13,
         L: 307,
         S: this,
         C: (f, a) => f(...a)
@@ -3610,7 +3729,7 @@ var AutomergeSpaceState = class {
     this._isProcessingRootDocs = false;
   }
   async processCredential(credential) {
-    if (!(0, import_credentials13.checkCredentialType)(credential, "dxos.halo.credentials.Epoch")) {
+    if (!(0, import_credentials14.checkCredentialType)(credential, "dxos.halo.credentials.Epoch")) {
       return;
     }
     this.lastEpoch = credential;
@@ -3635,18 +3754,18 @@ var AutomergeSpaceState = class {
     await this.onNewEpoch.waitForCondition(() => !!this.lastEpoch);
   }
 };
-var __dxlog_file13 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/notarization-plugin.ts";
+var __dxlog_file14 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/notarization-plugin.ts";
 var DEFAULT_RETRY_TIMEOUT = 1e3;
 var DEFAULT_SUCCESS_DELAY = 1e3;
 var DEFAULT_NOTARIZE_TIMEOUT = 1e4;
 var WRITER_NOT_SET_ERROR_CODE = "WRITER_NOT_SET";
 var NotarizationPlugin = class {
   constructor() {
-    this._ctx = new import_context10.Context();
+    this._ctx = new import_context11.Context();
     this._extensionOpened = new import_async14.Event();
     this._extensions = /* @__PURE__ */ new Set();
-    this._processedCredentials = new import_util7.ComplexSet(import_keys10.PublicKey.hash);
-    this._processCredentialsTriggers = new import_util7.ComplexMap(import_keys10.PublicKey.hash);
+    this._processedCredentials = new import_util7.ComplexSet(import_keys11.PublicKey.hash);
+    this._processCredentialsTriggers = new import_util7.ComplexMap(import_keys11.PublicKey.hash);
   }
   get hasWriter() {
     return !!this._writer;
@@ -3660,16 +3779,16 @@ var NotarizationPlugin = class {
   * Request credentials to be notarized.
   */
   async notarize({ ctx: opCtx, credentials, timeout = DEFAULT_NOTARIZE_TIMEOUT, retryTimeout = DEFAULT_RETRY_TIMEOUT, successDelay = DEFAULT_SUCCESS_DELAY }) {
-    (0, import_log11.log)("notarize", {
+    (0, import_log12.log)("notarize", {
       credentials
     }, {
-      F: __dxlog_file13,
+      F: __dxlog_file14,
       L: 90,
       S: this,
       C: (f, a) => f(...a)
     });
     (0, import_invariant13.invariant)(credentials.every((credential) => credential.id), "Credentials must have an id", {
-      F: __dxlog_file13,
+      F: __dxlog_file14,
       L: 91,
       S: this,
       A: [
@@ -3680,10 +3799,10 @@ var NotarizationPlugin = class {
     const errors = new import_async14.Trigger();
     const ctx = this._ctx.derive({
       onError: (err) => {
-        import_log11.log.warn("Notarization error", {
+        import_log12.log.warn("Notarization error", {
           err
         }, {
-          F: __dxlog_file13,
+          F: __dxlog_file14,
           L: 99,
           S: this,
           C: (f, a) => f(...a)
@@ -3695,11 +3814,11 @@ var NotarizationPlugin = class {
     opCtx?.onDispose(() => ctx.dispose());
     if (timeout !== 0) {
       (0, import_async14.scheduleTask)(ctx, () => {
-        import_log11.log.warn("Notarization timeout", {
+        import_log12.log.warn("Notarization timeout", {
           timeout,
           peers: Array.from(this._extensions).map((extension) => extension.remotePeerId)
         }, {
-          F: __dxlog_file13,
+          F: __dxlog_file14,
           L: 111,
           S: this,
           C: (f, a) => f(...a)
@@ -3719,10 +3838,10 @@ var NotarizationPlugin = class {
           ...this._extensions
         ].find((peer2) => !peersTried.has(peer2));
         if (!peer) {
-          import_log11.log.info("Exhausted all peers to notarize with", {
+          import_log12.log.info("Exhausted all peers to notarize with", {
             retryIn: retryTimeout
           }, {
-            F: __dxlog_file13,
+            F: __dxlog_file14,
             L: 136,
             S: this,
             C: (f, a) => f(...a)
@@ -3732,11 +3851,11 @@ var NotarizationPlugin = class {
           return;
         }
         peersTried.add(peer);
-        (0, import_log11.log)("try notarizing", {
+        (0, import_log12.log)("try notarizing", {
           peer: peer.localPeerId,
           credentialId: credentials.map((credential) => credential.id)
         }, {
-          F: __dxlog_file13,
+          F: __dxlog_file14,
           L: 143,
           S: this,
           C: (f, a) => f(...a)
@@ -3744,8 +3863,8 @@ var NotarizationPlugin = class {
         await peer.rpc.NotarizationService.notarize({
           credentials: credentials.filter((credential) => !this._processedCredentials.has(credential.id))
         });
-        (0, import_log11.log)("success", void 0, {
-          F: __dxlog_file13,
+        (0, import_log12.log)("success", void 0, {
+          F: __dxlog_file14,
           L: 147,
           S: this,
           C: (f, a) => f(...a)
@@ -3753,8 +3872,8 @@ var NotarizationPlugin = class {
         await (0, import_async14.sleep)(successDelay);
       } catch (err) {
         if (!ctx.disposed && !err.message.includes(WRITER_NOT_SET_ERROR_CODE)) {
-          import_log11.log.info("error notarizing (recoverable)", err, {
-            F: __dxlog_file13,
+          import_log12.log.info("error notarizing (recoverable)", err, {
+            F: __dxlog_file14,
             L: 151,
             S: this,
             C: (f, a) => f(...a)
@@ -3767,12 +3886,12 @@ var NotarizationPlugin = class {
     this._extensionOpened.on(ctx, () => notarizeTask.schedule());
     try {
       await Promise.race([
-        (0, import_context10.rejectOnDispose)(ctx),
+        (0, import_context11.rejectOnDispose)(ctx),
         allNotarized,
         errors.wait()
       ]);
-      (0, import_log11.log)("done", void 0, {
-        F: __dxlog_file13,
+      (0, import_log12.log)("done", void 0, {
+        F: __dxlog_file14,
         L: 162,
         S: this,
         C: (f, a) => f(...a)
@@ -3794,7 +3913,7 @@ var NotarizationPlugin = class {
   }
   setWriter(writer) {
     (0, import_invariant13.invariant)(!this._writer, "Writer already set.", {
-      F: __dxlog_file13,
+      F: __dxlog_file14,
       L: 181,
       S: this,
       A: [
@@ -3819,7 +3938,7 @@ var NotarizationPlugin = class {
     }
     for (const credential of request.credentials ?? []) {
       (0, import_invariant13.invariant)(credential.id, "Credential must have an id", {
-        F: __dxlog_file13,
+        F: __dxlog_file14,
         L: 200,
         S: this,
         A: [
@@ -3836,10 +3955,10 @@ var NotarizationPlugin = class {
   createExtension() {
     const extension = new NotarizationTeleportExtension({
       onOpen: async () => {
-        (0, import_log11.log)("extension opened", {
+        (0, import_log12.log)("extension opened", {
           peer: extension.localPeerId
         }, {
-          F: __dxlog_file13,
+          F: __dxlog_file14,
           L: 211,
           S: this,
           C: (f, a) => f(...a)
@@ -3848,10 +3967,10 @@ var NotarizationPlugin = class {
         this._extensionOpened.emit();
       },
       onClose: async () => {
-        (0, import_log11.log)("extension closed", {
+        (0, import_log12.log)("extension closed", {
           peer: extension.localPeerId
         }, {
-          F: __dxlog_file13,
+          F: __dxlog_file14,
           L: 216,
           S: this,
           C: (f, a) => f(...a)
@@ -3903,14 +4022,14 @@ function _ts_decorate4(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file14 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/data-space.ts";
+var __dxlog_file15 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/data-space.ts";
 var DataSpace = class {
   constructor(params) {
-    this._ctx = new import_context9.Context();
+    this._ctx = new import_context10.Context();
     this._notarizationPlugin = new NotarizationPlugin();
     this._cache = void 0;
     this._automergeSpaceState = new AutomergeSpaceState((rootUrl) => this._onNewAutomergeRoot(rootUrl));
-    this._state = import_services11.SpaceState.CLOSED;
+    this._state = import_services12.SpaceState.CLOSED;
     this.error = void 0;
     this.stateUpdate = new import_async12.Event();
     this.metrics = {};
@@ -3925,16 +4044,16 @@ var DataSpace = class {
     this._callbacks = params.callbacks ?? {};
     this._echoHost = params.echoHost;
     this.authVerifier = new TrustedKeySetAuthVerifier({
-      trustedKeysProvider: () => new import_util6.ComplexSet(import_keys9.PublicKey.hash, Array.from(this._inner.spaceState.members.values()).filter((member) => member.role !== import_credentials12.SpaceMember.Role.REMOVED).map((member) => member.key)),
+      trustedKeysProvider: () => new import_util6.ComplexSet(import_keys10.PublicKey.hash, Array.from(this._inner.spaceState.members.values()).filter((member) => member.role !== import_credentials13.SpaceMember.Role.REMOVED).map((member) => member.key)),
       update: this._inner.stateUpdate,
       authTimeout: import_client_protocol4.AUTH_TIMEOUT
     });
     this._cache = params.cache;
     this._state = params.initialState;
-    (0, import_log10.log)("new state", {
-      state: import_services11.SpaceState[this._state]
+    (0, import_log11.log)("new state", {
+      state: import_services12.SpaceState[this._state]
     }, {
-      F: __dxlog_file14,
+      F: __dxlog_file15,
       L: 143,
       S: this,
       C: (f, a) => f(...a)
@@ -3975,20 +4094,23 @@ var DataSpace = class {
     };
   }
   async open() {
-    await this._open();
+    if (this._state === import_services12.SpaceState.CLOSED) {
+      await this._open();
+    }
   }
   async _open() {
+    await this._presence.open();
     await this._gossip.open();
     await this._notarizationPlugin.open();
     await this._inner.spaceState.addCredentialProcessor(this._notarizationPlugin);
     await this._inner.spaceState.addCredentialProcessor(this._automergeSpaceState);
-    await this._inner.open(new import_context9.Context());
-    this._state = import_services11.SpaceState.CONTROL_ONLY;
-    (0, import_log10.log)("new state", {
-      state: import_services11.SpaceState[this._state]
+    await this._inner.open(new import_context10.Context());
+    this._state = import_services12.SpaceState.CONTROL_ONLY;
+    (0, import_log11.log)("new state", {
+      state: import_services12.SpaceState[this._state]
     }, {
-      F: __dxlog_file14,
-      L: 206,
+      F: __dxlog_file15,
+      L: 209,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4001,23 +4123,23 @@ var DataSpace = class {
   }
   async _close() {
     await this._callbacks.beforeClose?.();
-    this._state = import_services11.SpaceState.CLOSED;
-    (0, import_log10.log)("new state", {
-      state: import_services11.SpaceState[this._state]
+    this._state = import_services12.SpaceState.CLOSED;
+    (0, import_log11.log)("new state", {
+      state: import_services12.SpaceState[this._state]
     }, {
-      F: __dxlog_file14,
-      L: 220,
+      F: __dxlog_file15,
+      L: 223,
       S: this,
       C: (f, a) => f(...a)
     });
     await this._ctx.dispose();
-    this._ctx = new import_context9.Context();
+    this._ctx = new import_context10.Context();
     await this.authVerifier.close();
     await this._inner.close();
     await this._inner.spaceState.removeCredentialProcessor(this._automergeSpaceState);
     await this._inner.spaceState.removeCredentialProcessor(this._notarizationPlugin);
     await this._notarizationPlugin.close();
-    await this._presence.destroy();
+    await this._presence.close();
     await this._gossip.close();
   }
   async postMessage(channel, message) {
@@ -4035,27 +4157,27 @@ var DataSpace = class {
         this.metrics.pipelineInitBegin = /* @__PURE__ */ new Date();
         await this.initializeDataPipeline();
       } catch (err) {
-        if (err instanceof import_protocols9.CancelledError || err instanceof import_context9.ContextDisposedError) {
-          (0, import_log10.log)("data pipeline initialization cancelled", err, {
-            F: __dxlog_file14,
-            L: 253,
+        if (err instanceof import_protocols9.CancelledError || err instanceof import_context10.ContextDisposedError) {
+          (0, import_log11.log)("data pipeline initialization cancelled", err, {
+            F: __dxlog_file15,
+            L: 256,
             S: this,
             C: (f, a) => f(...a)
           });
           return;
         }
-        import_log10.log.error("Error initializing data pipeline", err, {
-          F: __dxlog_file14,
-          L: 257,
+        import_log11.log.error("Error initializing data pipeline", err, {
+          F: __dxlog_file15,
+          L: 260,
           S: this,
           C: (f, a) => f(...a)
         });
-        this._state = import_services11.SpaceState.ERROR;
-        (0, import_log10.log)("new state", {
-          state: import_services11.SpaceState[this._state]
+        this._state = import_services12.SpaceState.ERROR;
+        (0, import_log11.log)("new state", {
+          state: import_services12.SpaceState[this._state]
         }, {
-          F: __dxlog_file14,
-          L: 259,
+          F: __dxlog_file15,
+          L: 262,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -4067,35 +4189,35 @@ var DataSpace = class {
     });
   }
   async initializeDataPipeline() {
-    if (this._state !== import_services11.SpaceState.CONTROL_ONLY) {
+    if (this._state !== import_services12.SpaceState.CONTROL_ONLY) {
       throw new import_protocols9.SystemError("Invalid operation");
     }
-    this._state = import_services11.SpaceState.INITIALIZING;
-    (0, import_log10.log)("new state", {
-      state: import_services11.SpaceState[this._state]
+    this._state = import_services12.SpaceState.INITIALIZING;
+    (0, import_log11.log)("new state", {
+      state: import_services12.SpaceState[this._state]
     }, {
-      F: __dxlog_file14,
-      L: 275,
+      F: __dxlog_file15,
+      L: 278,
       S: this,
       C: (f, a) => f(...a)
     });
     await this._initializeAndReadControlPipeline();
     await (0, import_async12.sleep)(1);
     this._automergeSpaceState.startProcessingRootDocs();
-    await (0, import_context9.cancelWithContext)(this._ctx, this.automergeSpaceState.ensureEpochInitialized());
-    (0, import_log10.log)("data pipeline ready", void 0, {
-      F: __dxlog_file14,
-      L: 287,
+    await (0, import_context10.cancelWithContext)(this._ctx, this.automergeSpaceState.ensureEpochInitialized());
+    (0, import_log11.log)("data pipeline ready", void 0, {
+      F: __dxlog_file15,
+      L: 290,
       S: this,
       C: (f, a) => f(...a)
     });
     await this._callbacks.beforeReady?.();
-    this._state = import_services11.SpaceState.READY;
-    (0, import_log10.log)("new state", {
-      state: import_services11.SpaceState[this._state]
+    this._state = import_services12.SpaceState.READY;
+    (0, import_log11.log)("new state", {
+      state: import_services12.SpaceState[this._state]
     }, {
-      F: __dxlog_file14,
-      L: 291,
+      F: __dxlog_file15,
+      L: 294,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4109,9 +4231,9 @@ var DataSpace = class {
     });
     this.metrics.controlPipelineReady = /* @__PURE__ */ new Date();
     await this._createWritableFeeds();
-    (0, import_log10.log)("writable feeds created", void 0, {
-      F: __dxlog_file14,
-      L: 307,
+    (0, import_log11.log)("writable feeds created", void 0, {
+      F: __dxlog_file15,
+      L: 310,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4138,7 +4260,7 @@ var DataSpace = class {
           spaceKey: this.key,
           deviceKey: this._signingContext.deviceKey,
           identityKey: this._signingContext.identityKey,
-          designation: import_credentials12.AdmittedFeed.Designation.CONTROL
+          designation: import_credentials13.AdmittedFeed.Designation.CONTROL
         }
       }));
     }
@@ -4155,7 +4277,7 @@ var DataSpace = class {
           spaceKey: this.key,
           deviceKey: this._signingContext.deviceKey,
           identityKey: this._signingContext.identityKey,
-          designation: import_credentials12.AdmittedFeed.Designation.DATA
+          designation: import_credentials13.AdmittedFeed.Designation.DATA
         }
       }));
     }
@@ -4169,12 +4291,12 @@ var DataSpace = class {
     }
   }
   _onNewAutomergeRoot(rootUrl) {
-    (0, import_log10.log)("loading automerge root doc for space", {
+    (0, import_log11.log)("loading automerge root doc for space", {
       space: this.key,
       rootUrl
     }, {
-      F: __dxlog_file14,
-      L: 373,
+      F: __dxlog_file15,
+      L: 376,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4183,7 +4305,7 @@ var DataSpace = class {
     queueMicrotask(async () => {
       try {
         await (0, import_debug3.warnAfterTimeout)(5e3, "Automerge root doc load timeout (DataSpace)", async () => {
-          await (0, import_context9.cancelWithContext)(this._ctx, handle.whenReady());
+          await (0, import_context10.cancelWithContext)(this._ctx, handle.whenReady());
         });
         if (this._ctx.disposed) {
           return;
@@ -4199,27 +4321,27 @@ var DataSpace = class {
         if (!this._echoHost.roots.has(handle.documentId)) {
           await this._echoHost.openSpaceRoot(handle.url);
         } else {
-          import_log10.log.warn("echo database root already exists", {
+          import_log11.log.warn("echo database root already exists", {
             space: this.key,
             rootUrl
           }, {
-            F: __dxlog_file14,
-            L: 400,
+            F: __dxlog_file15,
+            L: 403,
             S: this,
             C: (f, a) => f(...a)
           });
         }
       } catch (err) {
-        if (err instanceof import_context9.ContextDisposedError) {
+        if (err instanceof import_context10.ContextDisposedError) {
           return;
         }
-        import_log10.log.warn("error loading automerge root doc", {
+        import_log11.log.warn("error loading automerge root doc", {
           space: this.key,
           rootUrl,
           err
         }, {
-          F: __dxlog_file14,
-          L: 406,
+          F: __dxlog_file15,
+          L: 409,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -4245,39 +4367,39 @@ var DataSpace = class {
     let epoch;
     switch (options?.migration) {
       case void 0:
-      case import_services11.CreateEpochRequest.Migration.NONE:
+      case import_services12.CreateEpochRequest.Migration.NONE:
         {
           epoch = {
             previousId: this._automergeSpaceState.lastEpoch?.id,
             number: (this._automergeSpaceState.lastEpoch?.subject.assertion.number ?? -1) + 1,
-            timeframe: this._automergeSpaceState.lastEpoch?.subject.assertion.timeframe ?? new import_timeframe2.Timeframe(),
+            timeframe: this._automergeSpaceState.lastEpoch?.subject.assertion.timeframe ?? new import_timeframe3.Timeframe(),
             automergeRoot: this._automergeSpaceState.lastEpoch?.subject.assertion?.automergeRoot
           };
         }
         break;
-      case import_services11.CreateEpochRequest.Migration.INIT_AUTOMERGE:
+      case import_services12.CreateEpochRequest.Migration.INIT_AUTOMERGE:
         {
           const document = this._echoHost.automergeRepo.create();
           epoch = {
             previousId: this._automergeSpaceState.lastEpoch?.id,
             number: (this._automergeSpaceState.lastEpoch?.subject.assertion.number ?? -1) + 1,
-            timeframe: this._automergeSpaceState.lastEpoch?.subject.assertion.timeframe ?? new import_timeframe2.Timeframe(),
+            timeframe: this._automergeSpaceState.lastEpoch?.subject.assertion.timeframe ?? new import_timeframe3.Timeframe(),
             automergeRoot: document.url
           };
         }
         break;
-      case import_services11.CreateEpochRequest.Migration.PRUNE_AUTOMERGE_ROOT_HISTORY:
+      case import_services12.CreateEpochRequest.Migration.PRUNE_AUTOMERGE_ROOT_HISTORY:
         {
           const currentRootUrl = this._automergeSpaceState.rootUrl;
           const rootHandle = this._echoHost.automergeRepo.find(currentRootUrl);
-          await (0, import_context9.cancelWithContext)(this._ctx, (0, import_async12.asyncTimeout)(rootHandle.whenReady(), 1e4));
+          await (0, import_context10.cancelWithContext)(this._ctx, (0, import_async12.asyncTimeout)(rootHandle.whenReady(), 1e4));
           const newRoot = this._echoHost.automergeRepo.create(rootHandle.docSync());
           await this._echoHost.automergeRepo.flush([
             newRoot.documentId
           ]);
           (0, import_invariant12.invariant)(typeof newRoot.url === "string" && newRoot.url.length > 0, void 0, {
-            F: __dxlog_file14,
-            L: 457,
+            F: __dxlog_file15,
+            L: 460,
             S: this,
             A: [
               "typeof newRoot.url === 'string' && newRoot.url.length > 0",
@@ -4287,28 +4409,28 @@ var DataSpace = class {
           epoch = {
             previousId: this._automergeSpaceState.lastEpoch?.id,
             number: (this._automergeSpaceState.lastEpoch?.subject.assertion.number ?? -1) + 1,
-            timeframe: this._automergeSpaceState.lastEpoch?.subject.assertion.timeframe ?? new import_timeframe2.Timeframe(),
+            timeframe: this._automergeSpaceState.lastEpoch?.subject.assertion.timeframe ?? new import_timeframe3.Timeframe(),
             automergeRoot: newRoot.url
           };
         }
         break;
-      case import_services11.CreateEpochRequest.Migration.FRAGMENT_AUTOMERGE_ROOT:
+      case import_services12.CreateEpochRequest.Migration.FRAGMENT_AUTOMERGE_ROOT:
         {
-          import_log10.log.info("Fragmenting", void 0, {
-            F: __dxlog_file14,
-            L: 469,
+          import_log11.log.info("Fragmenting", void 0, {
+            F: __dxlog_file15,
+            L: 472,
             S: this,
             C: (f, a) => f(...a)
           });
           const currentRootUrl = this._automergeSpaceState.rootUrl;
           const rootHandle = this._echoHost.automergeRepo.find(currentRootUrl);
-          await (0, import_context9.cancelWithContext)(this._ctx, (0, import_async12.asyncTimeout)(rootHandle.whenReady(), 1e4));
+          await (0, import_context10.cancelWithContext)(this._ctx, (0, import_async12.asyncTimeout)(rootHandle.whenReady(), 1e4));
           const objects = Object.entries(rootHandle.docSync().objects);
           const properties = findPropertiesObject(rootHandle.docSync());
           const otherObjects = objects.filter(([key]) => key !== properties?.[0]);
           (0, import_invariant12.invariant)(properties, "Properties not found", {
-            F: __dxlog_file14,
-            L: 479,
+            F: __dxlog_file15,
+            L: 482,
             S: this,
             A: [
               "properties",
@@ -4323,8 +4445,8 @@ var DataSpace = class {
           };
           const newRoot = this._echoHost.automergeRepo.create(newSpaceDoc);
           (0, import_invariant12.invariant)(typeof newRoot.url === "string" && newRoot.url.length > 0, void 0, {
-            F: __dxlog_file14,
-            L: 484,
+            F: __dxlog_file15,
+            L: 487,
             S: this,
             A: [
               "typeof newRoot.url === 'string' && newRoot.url.length > 0",
@@ -4347,16 +4469,16 @@ var DataSpace = class {
           epoch = {
             previousId: this._automergeSpaceState.lastEpoch?.id,
             number: (this._automergeSpaceState.lastEpoch?.subject.assertion.number ?? -1) + 1,
-            timeframe: this._automergeSpaceState.lastEpoch?.subject.assertion.timeframe ?? new import_timeframe2.Timeframe(),
+            timeframe: this._automergeSpaceState.lastEpoch?.subject.assertion.timeframe ?? new import_timeframe3.Timeframe(),
             automergeRoot: newRoot.url
           };
         }
         break;
-      case import_services11.CreateEpochRequest.Migration.REPLACE_AUTOMERGE_ROOT:
+      case import_services12.CreateEpochRequest.Migration.REPLACE_AUTOMERGE_ROOT:
         {
           (0, import_invariant12.invariant)(options.newAutomergeRoot, void 0, {
-            F: __dxlog_file14,
-            L: 514,
+            F: __dxlog_file15,
+            L: 517,
             S: this,
             A: [
               "options.newAutomergeRoot",
@@ -4366,7 +4488,7 @@ var DataSpace = class {
           epoch = {
             previousId: this._automergeSpaceState.lastEpoch?.id,
             number: (this._automergeSpaceState.lastEpoch?.subject.assertion.number ?? -1) + 1,
-            timeframe: this._automergeSpaceState.lastEpoch?.subject.assertion.timeframe ?? new import_timeframe2.Timeframe(),
+            timeframe: this._automergeSpaceState.lastEpoch?.subject.assertion.timeframe ?? new import_timeframe3.Timeframe(),
             automergeRoot: options.newAutomergeRoot
           };
         }
@@ -4386,7 +4508,7 @@ var DataSpace = class {
         })
       }
     });
-    await this.inner.controlPipeline.state.waitUntilTimeframe(new import_timeframe2.Timeframe([
+    await this.inner.controlPipeline.state.waitUntilTimeframe(new import_timeframe3.Timeframe([
       [
         receipt.feedKey,
         receipt.seq
@@ -4395,25 +4517,30 @@ var DataSpace = class {
     await this._echoHost.updateIndexes();
   }
   async activate() {
-    if (this._state !== import_services11.SpaceState.INACTIVE) {
+    if (![
+      import_services12.SpaceState.CLOSED,
+      import_services12.SpaceState.INACTIVE
+    ].includes(this._state)) {
       return;
     }
-    await this._metadataStore.setSpaceState(this.key, import_services11.SpaceState.ACTIVE);
+    await this._metadataStore.setSpaceState(this.key, import_services12.SpaceState.ACTIVE);
     await this._open();
     this.initializeDataPipelineAsync();
   }
   async deactivate() {
-    if (this._state === import_services11.SpaceState.INACTIVE) {
+    if (this._state === import_services12.SpaceState.INACTIVE) {
       return;
     }
-    await this._metadataStore.setSpaceState(this.key, import_services11.SpaceState.INACTIVE);
-    await this._close();
-    this._state = import_services11.SpaceState.INACTIVE;
-    (0, import_log10.log)("new state", {
-      state: import_services11.SpaceState[this._state]
+    await this._metadataStore.setSpaceState(this.key, import_services12.SpaceState.INACTIVE);
+    if (this._state !== import_services12.SpaceState.CLOSED) {
+      await this._close();
+    }
+    this._state = import_services12.SpaceState.INACTIVE;
+    (0, import_log11.log)("new state", {
+      state: import_services12.SpaceState[this._state]
     }, {
-      F: __dxlog_file14,
-      L: 567,
+      F: __dxlog_file15,
+      L: 571,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4431,7 +4558,7 @@ _ts_decorate4([
 ], DataSpace.prototype, "key", null);
 _ts_decorate4([
   import_tracing5.trace.info({
-    enum: import_services11.SpaceState
+    enum: import_services12.SpaceState
   })
 ], DataSpace.prototype, "state", null);
 _ts_decorate4([
@@ -4482,7 +4609,7 @@ var findPropertiesObject = (spaceDoc) => {
 };
 var spaceGenesis = async (keyring, signingContext, space, automergeRoot) => {
   const credentials = [
-    await (0, import_credentials16.createCredential)({
+    await (0, import_credentials17.createCredential)({
       signer: keyring,
       issuer: space.key,
       subject: space.key,
@@ -4491,14 +4618,14 @@ var spaceGenesis = async (keyring, signingContext, space, automergeRoot) => {
         spaceKey: space.key
       }
     }),
-    await (0, import_credentials16.createCredential)({
+    await (0, import_credentials17.createCredential)({
       signer: keyring,
       issuer: space.key,
       subject: signingContext.identityKey,
       assertion: {
         "@type": "dxos.halo.credentials.SpaceMember",
         spaceKey: space.key,
-        role: import_credentials17.SpaceMember.Role.OWNER,
+        role: import_credentials18.SpaceMember.Role.OWNER,
         profile: signingContext.getProfile(),
         genesisFeedKey: space.controlFeedKey ?? (0, import_debug4.failUndefined)()
       }
@@ -4510,7 +4637,7 @@ var spaceGenesis = async (keyring, signingContext, space, automergeRoot) => {
         spaceKey: space.key,
         identityKey: signingContext.identityKey,
         deviceKey: signingContext.deviceKey,
-        designation: import_credentials17.AdmittedFeed.Designation.CONTROL
+        designation: import_credentials18.AdmittedFeed.Designation.CONTROL
       }
     }),
     await signingContext.credentialSigner.createCredential({
@@ -4520,7 +4647,7 @@ var spaceGenesis = async (keyring, signingContext, space, automergeRoot) => {
         spaceKey: space.key,
         identityKey: signingContext.identityKey,
         deviceKey: signingContext.deviceKey,
-        designation: import_credentials17.AdmittedFeed.Designation.DATA
+        designation: import_credentials18.AdmittedFeed.Designation.DATA
       }
     }),
     await signingContext.credentialSigner.createCredential({
@@ -4529,7 +4656,7 @@ var spaceGenesis = async (keyring, signingContext, space, automergeRoot) => {
         "@type": "dxos.halo.credentials.Epoch",
         number: 0,
         previousId: void 0,
-        timeframe: new import_timeframe3.Timeframe(),
+        timeframe: new import_timeframe4.Timeframe(),
         snapshotCid: void 0,
         automergeRoot
       }
@@ -4554,11 +4681,12 @@ function _ts_decorate5(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file15 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts";
+var __dxlog_file16 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts";
 var PRESENCE_ANNOUNCE_INTERVAL = 1e4;
 var PRESENCE_OFFLINE_TIMEOUT = 2e4;
+var DEFAULT_SPACE_KEY = "__DEFAULT__";
 var DataSpaceManager = class {
-  constructor(_spaceManager, _metadataStore, _keyring, _signingContext, _feedStore, _echoHost, _invitationsManager, params) {
+  constructor(_spaceManager, _metadataStore, _keyring, _signingContext, _feedStore, _echoHost, _invitationsManager, _params) {
     this._spaceManager = _spaceManager;
     this._metadataStore = _metadataStore;
     this._keyring = _keyring;
@@ -4566,14 +4694,12 @@ var DataSpaceManager = class {
     this._feedStore = _feedStore;
     this._echoHost = _echoHost;
     this._invitationsManager = _invitationsManager;
-    this._ctx = new import_context11.Context();
+    this._params = _params;
+    this._ctx = new import_context12.Context();
     this.updated = new import_async15.Event();
-    this._spaces = new import_util8.ComplexMap(import_keys11.PublicKey.hash);
+    this._spaces = new import_util8.ComplexMap(import_keys12.PublicKey.hash);
     this._isOpen = false;
-    this._instanceId = import_keys11.PublicKey.random().toHex();
-    const { spaceMemberPresenceAnnounceInterval = PRESENCE_ANNOUNCE_INTERVAL, spaceMemberPresenceOfflineTimeout = PRESENCE_OFFLINE_TIMEOUT } = params ?? {};
-    this._spaceMemberPresenceAnnounceInterval = spaceMemberPresenceAnnounceInterval;
-    this._spaceMemberPresenceOfflineTimeout = spaceMemberPresenceOfflineTimeout;
+    this._instanceId = import_keys12.PublicKey.random().toHex();
     import_tracing6.trace.diagnostic({
       id: "spaces",
       name: "Spaces",
@@ -4585,7 +4711,7 @@ var DataSpaceManager = class {
           const properties = rootDoc && findPropertiesObject(rootDoc);
           return {
             key: space.key.toHex(),
-            state: import_services12.SpaceState[space.state],
+            state: import_services13.SpaceState[space.state],
             name: properties?.[1].data.name ?? null,
             inlineObjects: rootDoc ? Object.keys(rootDoc.objects ?? {}).length : null,
             linkedObjects: rootDoc ? Object.keys(rootDoc.links ?? {}).length : null,
@@ -4602,46 +4728,46 @@ var DataSpaceManager = class {
     return this._spaces;
   }
   async open() {
-    (0, import_log12.log)("open", void 0, {
-      F: __dxlog_file15,
-      L: 144,
+    (0, import_log13.log)("open", void 0, {
+      F: __dxlog_file16,
+      L: 140,
       S: this,
       C: (f, a) => f(...a)
     });
-    import_log12.log.trace("dxos.echo.data-space-manager.open", import_protocols11.trace.begin({
+    import_log13.log.trace("dxos.echo.data-space-manager.open", import_protocols11.trace.begin({
       id: this._instanceId
     }), {
-      F: __dxlog_file15,
-      L: 145,
+      F: __dxlog_file16,
+      L: 141,
       S: this,
       C: (f, a) => f(...a)
     });
-    (0, import_log12.log)("metadata loaded", {
+    (0, import_log13.log)("metadata loaded", {
       spaces: this._metadataStore.spaces.length
     }, {
-      F: __dxlog_file15,
-      L: 146,
+      F: __dxlog_file16,
+      L: 142,
       S: this,
       C: (f, a) => f(...a)
     });
     await (0, import_util8.forEachAsync)(this._metadataStore.spaces, async (spaceMetadata) => {
       try {
-        (0, import_log12.log)("load space", {
+        (0, import_log13.log)("load space", {
           spaceMetadata
         }, {
-          F: __dxlog_file15,
-          L: 150,
+          F: __dxlog_file16,
+          L: 146,
           S: this,
           C: (f, a) => f(...a)
         });
         await this._constructSpace(spaceMetadata);
       } catch (err) {
-        import_log12.log.error("Error loading space", {
+        import_log13.log.error("Error loading space", {
           spaceMetadata,
           err
         }, {
-          F: __dxlog_file15,
-          L: 153,
+          F: __dxlog_file16,
+          L: 149,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -4649,24 +4775,19 @@ var DataSpaceManager = class {
     });
     this._isOpen = true;
     this.updated.emit();
-    for (const space of this._spaces.values()) {
-      if (space.state !== import_services12.SpaceState.INACTIVE) {
-        space.initializeDataPipelineAsync();
-      }
-    }
-    import_log12.log.trace("dxos.echo.data-space-manager.open", import_protocols11.trace.end({
+    import_log13.log.trace("dxos.echo.data-space-manager.open", import_protocols11.trace.end({
       id: this._instanceId
     }), {
-      F: __dxlog_file15,
-      L: 166,
+      F: __dxlog_file16,
+      L: 156,
       S: this,
       C: (f, a) => f(...a)
     });
   }
   async close() {
-    (0, import_log12.log)("close", void 0, {
-      F: __dxlog_file15,
-      L: 171,
+    (0, import_log13.log)("close", void 0, {
+      F: __dxlog_file16,
+      L: 161,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4675,14 +4796,15 @@ var DataSpaceManager = class {
     for (const space of this._spaces.values()) {
       await space.close();
     }
+    this._spaces.clear();
   }
   /**
   * Creates a new space writing the genesis credentials to the control feed.
   */
   async createSpace() {
     (0, import_invariant14.invariant)(this._isOpen, "Not open.", {
-      F: __dxlog_file15,
-      L: 184,
+      F: __dxlog_file16,
+      L: 175,
       S: this,
       A: [
         "this._isOpen",
@@ -4697,24 +4819,25 @@ var DataSpaceManager = class {
       genesisFeedKey: controlFeedKey,
       controlFeedKey,
       dataFeedKey,
-      state: import_services12.SpaceState.ACTIVE
+      state: import_services13.SpaceState.ACTIVE
     };
-    (0, import_log12.log)("creating space...", {
+    (0, import_log13.log)("creating space...", {
       spaceKey
     }, {
-      F: __dxlog_file15,
-      L: 196,
+      F: __dxlog_file16,
+      L: 187,
       S: this,
       C: (f, a) => f(...a)
     });
     const root = await this._echoHost.createSpaceRoot(spaceKey);
     const space = await this._constructSpace(metadata);
+    await space.open();
     const credentials = await spaceGenesis(this._keyring, this._signingContext, space.inner, root.url);
     await this._metadataStore.addSpace(metadata);
     const memberCredential = credentials[1];
-    (0, import_invariant14.invariant)((0, import_credentials14.getCredentialAssertion)(memberCredential)["@type"] === "dxos.halo.credentials.SpaceMember", void 0, {
-      F: __dxlog_file15,
-      L: 205,
+    (0, import_invariant14.invariant)((0, import_credentials15.getCredentialAssertion)(memberCredential)["@type"] === "dxos.halo.credentials.SpaceMember", void 0, {
+      F: __dxlog_file16,
+      L: 197,
       S: this,
       A: [
         "getCredentialAssertion(memberCredential)['@type'] === 'dxos.halo.credentials.SpaceMember'",
@@ -4726,19 +4849,63 @@ var DataSpaceManager = class {
     this.updated.emit();
     return space;
   }
+  async isDefaultSpace(space) {
+    const rootDoc = await this._getSpaceRootDocument(space);
+    const [_, properties] = findPropertiesObject(rootDoc.docSync()) ?? [];
+    return properties?.data?.[DEFAULT_SPACE_KEY] === this._signingContext.identityKey.toHex();
+  }
+  async createDefaultSpace() {
+    const space = await this.createSpace();
+    const document = await this._getSpaceRootDocument(space);
+    const properties = {
+      system: {
+        type: (0, import_echo_protocol.encodeReference)((0, import_echo_schema2.getTypeReference)(import_client_protocol5.PropertiesType))
+      },
+      data: {
+        [DEFAULT_SPACE_KEY]: this._signingContext.identityKey.toHex()
+      },
+      meta: {
+        keys: []
+      }
+    };
+    const propertiesId = import_keys12.PublicKey.random().toHex();
+    document.change((doc) => {
+      (0, import_util8.assignDeep)(doc, [
+        "objects",
+        propertiesId
+      ], properties);
+    });
+    await this._echoHost.flush();
+    return space;
+  }
+  async _getSpaceRootDocument(space) {
+    const automergeIndex = space.automergeSpaceState.rootUrl;
+    (0, import_invariant14.invariant)(automergeIndex, void 0, {
+      F: __dxlog_file16,
+      L: 240,
+      S: this,
+      A: [
+        "automergeIndex",
+        ""
+      ]
+    });
+    const document = this._echoHost.automergeRepo.find(automergeIndex);
+    await document.whenReady();
+    return document;
+  }
   // TODO(burdon): Rename join space.
   async acceptSpace(opts) {
-    (0, import_log12.log)("accept space", {
+    (0, import_log13.log)("accept space", {
       opts
     }, {
-      F: __dxlog_file15,
-      L: 217,
+      F: __dxlog_file16,
+      L: 249,
       S: this,
       C: (f, a) => f(...a)
     });
     (0, import_invariant14.invariant)(this._isOpen, "Not open.", {
-      F: __dxlog_file15,
-      L: 218,
+      F: __dxlog_file16,
+      L: 250,
       S: this,
       A: [
         "this._isOpen",
@@ -4746,8 +4913,8 @@ var DataSpaceManager = class {
       ]
     });
     (0, import_invariant14.invariant)(!this._spaces.has(opts.spaceKey), "Space already exists.", {
-      F: __dxlog_file15,
-      L: 219,
+      F: __dxlog_file16,
+      L: 251,
       S: this,
       A: [
         "!this._spaces.has(opts.spaceKey)",
@@ -4761,6 +4928,7 @@ var DataSpaceManager = class {
       dataTimeframe: opts.dataTimeframe
     };
     const space = await this._constructSpace(metadata);
+    await space.open();
     await this._metadataStore.addSpace(metadata);
     space.initializeDataPipelineAsync();
     this.updated.emit();
@@ -4772,17 +4940,17 @@ var DataSpaceManager = class {
   * TODO(dmaretskyi): Consider removing.
   */
   async waitUntilSpaceReady(spaceKey) {
-    await (0, import_context11.cancelWithContext)(this._ctx, this.updated.waitForCondition(() => {
+    await (0, import_context12.cancelWithContext)(this._ctx, this.updated.waitForCondition(() => {
       const space = this._spaces.get(spaceKey);
-      return !!space && space.state === import_services12.SpaceState.READY;
+      return !!space && space.state === import_services13.SpaceState.READY;
     }));
   }
   async _constructSpace(metadata) {
-    (0, import_log12.log)("construct space", {
+    (0, import_log13.log)("construct space", {
       metadata
     }, {
-      F: __dxlog_file15,
-      L: 252,
+      F: __dxlog_file16,
+      L: 285,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4790,8 +4958,8 @@ var DataSpaceManager = class {
       localPeerId: this._signingContext.deviceKey
     });
     const presence = new import_teleport_extension_gossip2.Presence({
-      announceInterval: this._spaceMemberPresenceAnnounceInterval,
-      offlineTimeout: this._spaceMemberPresenceOfflineTimeout,
+      announceInterval: this._params?.spaceMemberPresenceAnnounceInterval ?? PRESENCE_ANNOUNCE_INTERVAL,
+      offlineTimeout: this._params?.spaceMemberPresenceOfflineTimeout ?? PRESENCE_OFFLINE_TIMEOUT,
       identityKey: this._signingContext.identityKey,
       gossip
     });
@@ -4818,15 +4986,15 @@ var DataSpaceManager = class {
         session.addExtension("dxos.mesh.teleport.automerge", this._echoHost.createReplicationExtension());
       },
       onAuthFailure: () => {
-        import_log12.log.warn("auth failure", void 0, {
-          F: __dxlog_file15,
-          L: 289,
+        import_log13.log.warn("auth failure", void 0, {
+          F: __dxlog_file16,
+          L: 322,
           S: this,
           C: (f, a) => f(...a)
         });
       },
       onMemberRolesChanged: async (members) => {
-        if (dataSpace?.state === import_services12.SpaceState.READY) {
+        if (dataSpace?.state === import_services13.SpaceState.READY) {
           this._handleMemberRoleChanges(presence, space.protocol, members);
         }
       },
@@ -4839,7 +5007,7 @@ var DataSpaceManager = class {
     dataFeed && await space.setDataFeed(dataFeed);
     const dataSpace = new DataSpace({
       inner: space,
-      initialState: metadata.state === import_services12.SpaceState.INACTIVE ? import_services12.SpaceState.INACTIVE : import_services12.SpaceState.CLOSED,
+      initialState: metadata.state === import_services13.SpaceState.INACTIVE ? import_services13.SpaceState.INACTIVE : import_services13.SpaceState.CLOSED,
       metadataStore: this._metadataStore,
       gossip,
       presence,
@@ -4849,22 +5017,22 @@ var DataSpaceManager = class {
       signingContext: this._signingContext,
       callbacks: {
         beforeReady: async () => {
-          (0, import_log12.log)("before space ready", {
+          (0, import_log13.log)("before space ready", {
             space: space.key
           }, {
-            F: __dxlog_file15,
-            L: 316,
+            F: __dxlog_file16,
+            L: 349,
             S: this,
             C: (f, a) => f(...a)
           });
         },
         afterReady: async () => {
-          (0, import_log12.log)("after space ready", {
+          (0, import_log13.log)("after space ready", {
             space: space.key,
             open: this._isOpen
           }, {
-            F: __dxlog_file15,
-            L: 319,
+            F: __dxlog_file16,
+            L: 352,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -4879,11 +5047,11 @@ var DataSpaceManager = class {
           }
         },
         beforeClose: async () => {
-          (0, import_log12.log)("before space close", {
+          (0, import_log13.log)("before space close", {
             space: space.key
           }, {
-            F: __dxlog_file15,
-            L: 327,
+            F: __dxlog_file16,
+            L: 360,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -4892,13 +5060,10 @@ var DataSpaceManager = class {
       cache: metadata.cache
     });
     presence.newPeer.on((peerState) => {
-      if (dataSpace.state === import_services12.SpaceState.READY) {
+      if (dataSpace.state === import_services13.SpaceState.READY) {
         this._handleNewPeerConnected(space, peerState);
       }
     });
-    if (metadata.state !== import_services12.SpaceState.INACTIVE) {
-      await dataSpace.open();
-    }
     if (metadata.controlTimeframe) {
       dataSpace.inner.controlPipeline.state.setTargetTimeframe(metadata.controlTimeframe);
     }
@@ -4914,20 +5079,20 @@ var DataSpaceManager = class {
       const peers = presence.getPeersByIdentityKey(member.key);
       const sessions = peers.map((p) => p.peerId && spaceProtocol.sessions.get(p.peerId));
       const sessionsToClose = sessions.filter((s) => {
-        return (s && member.role === import_credentials15.SpaceMember.Role.REMOVED !== (s.authStatus === import_echo_pipeline3.AuthStatus.FAILURE)) ?? false;
+        return (s && member.role === import_credentials16.SpaceMember.Role.REMOVED !== (s.authStatus === import_echo_pipeline3.AuthStatus.FAILURE)) ?? false;
       });
       sessionsToClose.forEach((session) => {
-        void session.close().catch(import_log12.log.error);
+        void session.close().catch(import_log13.log.error);
       });
       closedSessions += sessionsToClose.length;
     }
-    (0, import_log12.log)("processed member role changes", {
+    (0, import_log13.log)("processed member role changes", {
       roleChangeCount: memberInfo.length,
       peersOnline: presence.getPeersOnline().length,
       closedSessions
     }, {
-      F: __dxlog_file15,
-      L: 367,
+      F: __dxlog_file16,
+      L: 396,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4935,23 +5100,23 @@ var DataSpaceManager = class {
   }
   _handleNewPeerConnected(space, peerState) {
     const role = space.spaceState.getMemberRole(peerState.identityKey);
-    if (role === import_credentials15.SpaceMember.Role.REMOVED) {
+    if (role === import_credentials16.SpaceMember.Role.REMOVED) {
       const session = peerState.peerId && space.protocol.sessions.get(peerState.peerId);
       if (session != null) {
-        (0, import_log12.log)("closing a session with a removed peer", {
+        (0, import_log13.log)("closing a session with a removed peer", {
           peerId: peerState.peerId
         }, {
-          F: __dxlog_file15,
-          L: 381,
+          F: __dxlog_file16,
+          L: 410,
           S: this,
           C: (f, a) => f(...a)
         });
-        void session.close().catch(import_log12.log.error);
+        void session.close().catch(import_log13.log.error);
       }
     }
   }
   async _handleInvitationStatusChange(dataSpace, delegatedInvitation, isActive) {
-    if (dataSpace?.state !== import_services12.SpaceState.READY) {
+    if (dataSpace?.state !== import_services13.SpaceState.READY) {
       return;
     }
     if (isActive) {
@@ -4968,8 +5133,8 @@ var DataSpaceManager = class {
   async _createDelegatedInvitations(space, invitations) {
     const tasks = invitations.map(([credentialId, invitation]) => {
       return this._invitationsManager.createInvitation({
-        type: import_services12.Invitation.Type.DELEGATED,
-        kind: import_services12.Invitation.Kind.SPACE,
+        type: import_services13.Invitation.Type.DELEGATED,
+        kind: import_services13.Invitation.Kind.SPACE,
         spaceKey: space.key,
         authMethod: invitation.authMethod,
         invitationId: invitation.invitationId,
@@ -5001,7 +5166,7 @@ _ts_decorate5([
 DataSpaceManager = _ts_decorate5([
   (0, import_async15.trackLeaks)("open", "close")
 ], DataSpaceManager);
-var __dxlog_file16 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/spaces-service.ts";
+var __dxlog_file17 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/spaces-service.ts";
 var SpacesServiceImpl = class {
   constructor(_identityManager, _spaceManager, _getDataSpaceManager) {
     this._identityManager = _identityManager;
@@ -5020,10 +5185,10 @@ var SpacesServiceImpl = class {
     const space = dataSpaceManager.spaces.get(spaceKey) ?? (0, import_debug5.raise)(new import_protocols12.SpaceNotFoundError(spaceKey));
     if (state) {
       switch (state) {
-        case import_services13.SpaceState.ACTIVE:
+        case import_services14.SpaceState.ACTIVE:
           await space.activate();
           break;
-        case import_services13.SpaceState.INACTIVE:
+        case import_services14.SpaceState.INACTIVE:
           await space.deactivate();
           break;
         default:
@@ -5043,9 +5208,9 @@ var SpacesServiceImpl = class {
         role: space.spaceState.getMemberRole(identity.identityKey)
       });
     }
-    const credentials = await (0, import_credentials18.createAdmissionCredentials)(identity.getIdentityCredentialSigner(), request.memberKey, space.key, space.genesisFeedKey, request.newRole, space.spaceState.membershipChainHeads);
+    const credentials = await (0, import_credentials19.createAdmissionCredentials)(identity.getIdentityCredentialSigner(), request.memberKey, space.key, space.genesisFeedKey, request.newRole, space.spaceState.membershipChainHeads);
     (0, import_invariant15.invariant)(credentials[0].credential, void 0, {
-      F: __dxlog_file16,
+      F: __dxlog_file17,
       L: 97,
       S: this,
       A: [
@@ -5054,8 +5219,8 @@ var SpacesServiceImpl = class {
       ]
     });
     const spaceMemberCredential = credentials[0].credential.credential;
-    (0, import_invariant15.invariant)((0, import_credentials18.getCredentialAssertion)(spaceMemberCredential)["@type"] === "dxos.halo.credentials.SpaceMember", void 0, {
-      F: __dxlog_file16,
+    (0, import_invariant15.invariant)((0, import_credentials19.getCredentialAssertion)(spaceMemberCredential)["@type"] === "dxos.halo.credentials.SpaceMember", void 0, {
+      F: __dxlog_file17,
       L: 99,
       S: this,
       A: [
@@ -5070,10 +5235,10 @@ var SpacesServiceImpl = class {
       const scheduler = new import_async16.UpdateScheduler(ctx, async () => {
         const dataSpaceManager = await this._getDataSpaceManager();
         const spaces = Array.from(dataSpaceManager.spaces.values()).map((space) => this._serializeSpace(space));
-        (0, import_log13.log)("update", {
+        (0, import_log14.log)("update", {
           spaces
         }, {
-          F: __dxlog_file16,
+          F: __dxlog_file17,
           L: 110,
           S: this,
           C: (f, a) => f(...a)
@@ -5157,7 +5322,7 @@ var SpacesServiceImpl = class {
         });
       } else {
         (0, import_invariant15.invariant)(!credential.id, "Id on unsigned credentials is not allowed", {
-          F: __dxlog_file16,
+          F: __dxlog_file17,
           L: 198,
           S: this,
           A: [
@@ -5166,7 +5331,7 @@ var SpacesServiceImpl = class {
           ]
         });
         (0, import_invariant15.invariant)(this._identityManager.identity, "Identity is not available", {
-          F: __dxlog_file16,
+          F: __dxlog_file17,
           L: 199,
           S: this,
           A: [
@@ -5176,7 +5341,7 @@ var SpacesServiceImpl = class {
         });
         const signer = this._identityManager.identity.getIdentityCredentialSigner();
         (0, import_invariant15.invariant)(credential.issuer.equals(signer.getIssuer()), void 0, {
-          F: __dxlog_file16,
+          F: __dxlog_file17,
           L: 201,
           S: this,
           A: [
@@ -5235,7 +5400,7 @@ var SpacesServiceImpl = class {
             profile: member.profile ?? {}
           },
           role: member.role,
-          presence: peers.length > 0 ? import_services13.SpaceMember.PresenceState.ONLINE : import_services13.SpaceMember.PresenceState.OFFLINE,
+          presence: peers.length > 0 ? import_services14.SpaceMember.PresenceState.ONLINE : import_services14.SpaceMember.PresenceState.OFFLINE,
           peerStates: peers
         };
       }),
@@ -5273,8 +5438,8 @@ function _ts_decorate6(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file17 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/services/service-context.ts";
-var ServiceContext = class extends import_context12.Resource {
+var __dxlog_file18 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/services/service-context.ts";
+var ServiceContext = class extends import_context13.Resource {
   constructor(storage, level, networkManager, signalManager, _runtimeParams) {
     super();
     this.storage = storage;
@@ -5284,7 +5449,7 @@ var ServiceContext = class extends import_context12.Resource {
     this._runtimeParams = _runtimeParams;
     this.initialized = new import_async17.Trigger();
     this._handlerFactories = /* @__PURE__ */ new Map();
-    this._instanceId = import_keys12.PublicKey.random().toHex();
+    this._instanceId = import_keys13.PublicKey.random().toHex();
     this.metadataStore = new import_echo_pipeline4.MetadataStore(storage.createDirectory("metadata"));
     this.snapshotStore = new import_echo_pipeline4.SnapshotStore(storage.createDirectory("snapshots"));
     this.blobStore = new import_teleport_extension_object_sync.BlobStore(storage.createDirectory("blobs"));
@@ -5313,20 +5478,20 @@ var ServiceContext = class extends import_context12.Resource {
     });
     this.invitations = new InvitationsHandler(this.networkManager, _runtimeParams?.invitationConnectionDefaultParams);
     this.invitationsManager = new InvitationsManager(this.invitations, (invitation) => this.getInvitationHandler(invitation), this.metadataStore);
-    this._handlerFactories.set(import_services14.Invitation.Kind.DEVICE, () => new DeviceInvitationProtocol(this.keyring, () => this.identityManager.identity ?? (0, import_debug6.failUndefined)(), this._acceptIdentity.bind(this)));
+    this._handlerFactories.set(import_services15.Invitation.Kind.DEVICE, () => new DeviceInvitationProtocol(this.keyring, () => this.identityManager.identity ?? (0, import_debug6.failUndefined)(), this._acceptIdentity.bind(this)));
   }
   async _open(ctx) {
     await this._checkStorageVersion();
-    (0, import_log14.log)("opening...", void 0, {
-      F: __dxlog_file17,
+    (0, import_log15.log)("opening...", void 0, {
+      F: __dxlog_file18,
       L: 152,
       S: this,
       C: (f, a) => f(...a)
     });
-    import_log14.log.trace("dxos.sdk.service-context.open", import_protocols13.trace.begin({
+    import_log15.log.trace("dxos.sdk.service-context.open", import_protocols13.trace.begin({
       id: this._instanceId
     }), {
-      F: __dxlog_file17,
+      F: __dxlog_file18,
       L: 153,
       S: this,
       C: (f, a) => f(...a)
@@ -5341,32 +5506,32 @@ var ServiceContext = class extends import_context12.Resource {
       await this._initialize(ctx);
     }
     const loadedInvitations = await this.invitationsManager.loadPersistentInvitations();
-    (0, import_log14.log)("loaded persistent invitations", {
+    (0, import_log15.log)("loaded persistent invitations", {
       count: loadedInvitations.invitations?.length
     }, {
-      F: __dxlog_file17,
+      F: __dxlog_file18,
       L: 166,
       S: this,
       C: (f, a) => f(...a)
     });
-    import_log14.log.trace("dxos.sdk.service-context.open", import_protocols13.trace.end({
+    import_log15.log.trace("dxos.sdk.service-context.open", import_protocols13.trace.end({
       id: this._instanceId
     }), {
-      F: __dxlog_file17,
+      F: __dxlog_file18,
       L: 168,
       S: this,
       C: (f, a) => f(...a)
     });
-    (0, import_log14.log)("opened", void 0, {
-      F: __dxlog_file17,
+    (0, import_log15.log)("opened", void 0, {
+      F: __dxlog_file18,
       L: 169,
       S: this,
       C: (f, a) => f(...a)
     });
   }
   async _close(ctx) {
-    (0, import_log14.log)("closing...", void 0, {
-      F: __dxlog_file17,
+    (0, import_log15.log)("closing...", void 0, {
+      F: __dxlog_file18,
       L: 173,
       S: this,
       C: (f, a) => f(...a)
@@ -5382,8 +5547,8 @@ var ServiceContext = class extends import_context12.Resource {
     await this.echoHost.close(ctx);
     await this.networkManager.close();
     await this.signalManager.close();
-    (0, import_log14.log)("closed", void 0, {
-      F: __dxlog_file17,
+    (0, import_log15.log)("closed", void 0, {
+      F: __dxlog_file18,
       L: 185,
       S: this,
       C: (f, a) => f(...a)
@@ -5391,13 +5556,13 @@ var ServiceContext = class extends import_context12.Resource {
   }
   async createIdentity(params = {}) {
     const identity = await this.identityManager.createIdentity(params);
-    await this._initialize(new import_context12.Context());
+    await this._initialize(new import_context13.Context());
     return identity;
   }
   getInvitationHandler(invitation) {
     const factory = this._handlerFactories.get(invitation.kind);
     (0, import_invariant16.invariant)(factory, `Unknown invitation kind: ${invitation.kind}`, {
-      F: __dxlog_file17,
+      F: __dxlog_file18,
       L: 196,
       S: this,
       A: [
@@ -5417,7 +5582,7 @@ var ServiceContext = class extends import_context12.Resource {
   }
   async _acceptIdentity(params) {
     const identity = await this.identityManager.acceptIdentity(params);
-    await this._initialize(new import_context12.Context());
+    await this._initialize(new import_context13.Context());
     return identity;
   }
   async _checkStorageVersion() {
@@ -5428,8 +5593,8 @@ var ServiceContext = class extends import_context12.Resource {
   }
   // Called when identity is created.
   async _initialize(ctx) {
-    (0, import_log14.log)("initializing spaces...", void 0, {
-      F: __dxlog_file17,
+    (0, import_log15.log)("initializing spaces...", void 0, {
+      F: __dxlog_file18,
       L: 227,
       S: this,
       C: (f, a) => f(...a)
@@ -5450,9 +5615,9 @@ var ServiceContext = class extends import_context12.Resource {
     };
     this.dataSpaceManager = new DataSpaceManager(this.spaceManager, this.metadataStore, this.keyring, signingContext, this.feedStore, this.echoHost, this.invitationsManager, this._runtimeParams);
     await this.dataSpaceManager.open();
-    this._handlerFactories.set(import_services14.Invitation.Kind.SPACE, (invitation) => {
+    this._handlerFactories.set(import_services15.Invitation.Kind.SPACE, (invitation) => {
       (0, import_invariant16.invariant)(this.dataSpaceManager, "dataSpaceManager not initialized yet", {
-        F: __dxlog_file17,
+        F: __dxlog_file18,
         L: 252,
         S: this,
         A: [
@@ -5465,7 +5630,7 @@ var ServiceContext = class extends import_context12.Resource {
     this.initialized.wake();
     this._deviceSpaceSync = {
       processCredential: async (credential) => {
-        const assertion = (0, import_credentials19.getCredentialAssertion)(credential);
+        const assertion = (0, import_credentials20.getCredentialAssertion)(credential);
         if (assertion["@type"] !== "dxos.halo.credentials.SpaceMember") {
           return;
         }
@@ -5473,10 +5638,10 @@ var ServiceContext = class extends import_context12.Resource {
           return;
         }
         if (!this.dataSpaceManager) {
-          (0, import_log14.log)("dataSpaceManager not initialized yet, ignoring space admission", {
+          (0, import_log15.log)("dataSpaceManager not initialized yet, ignoring space admission", {
             details: assertion
           }, {
-            F: __dxlog_file17,
+            F: __dxlog_file18,
             L: 268,
             S: this,
             C: (f, a) => f(...a)
@@ -5484,10 +5649,10 @@ var ServiceContext = class extends import_context12.Resource {
           return;
         }
         if (this.dataSpaceManager.spaces.has(assertion.spaceKey)) {
-          (0, import_log14.log)("space already exists, ignoring space admission", {
+          (0, import_log15.log)("space already exists, ignoring space admission", {
             details: assertion
           }, {
-            F: __dxlog_file17,
+            F: __dxlog_file18,
             L: 272,
             S: this,
             C: (f, a) => f(...a)
@@ -5495,10 +5660,10 @@ var ServiceContext = class extends import_context12.Resource {
           return;
         }
         try {
-          (0, import_log14.log)("accepting space recorded in halo", {
+          (0, import_log15.log)("accepting space recorded in halo", {
             details: assertion
           }, {
-            F: __dxlog_file17,
+            F: __dxlog_file18,
             L: 277,
             S: this,
             C: (f, a) => f(...a)
@@ -5508,8 +5673,8 @@ var ServiceContext = class extends import_context12.Resource {
             genesisFeedKey: assertion.genesisFeedKey
           });
         } catch (err) {
-          import_log14.log.catch(err, void 0, {
-            F: __dxlog_file17,
+          import_log15.log.catch(err, void 0, {
+            F: __dxlog_file18,
             L: 283,
             S: this,
             C: (f, a) => f(...a)
@@ -5562,7 +5727,7 @@ function _ts_decorate7(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file18 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/locks/node.ts";
+var __dxlog_file19 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/locks/node.ts";
 var Lock = class {
   constructor({ lockKey: lockPath, onAcquire, onRelease }) {
     this._lockPath = lockPath;
@@ -5573,16 +5738,16 @@ var Lock = class {
     return this._lockPath;
   }
   async acquire() {
-    (0, import_log15.log)("acquiring lock...", void 0, {
-      F: __dxlog_file18,
+    (0, import_log16.log)("acquiring lock...", void 0, {
+      F: __dxlog_file19,
       L: 32,
       S: this,
       C: (f, a) => f(...a)
     });
     this._fileHandle = await import_lock_file.LockFile.acquire(this._lockPath);
     await this._onAcquire?.();
-    (0, import_log15.log)("acquired lock", void 0, {
-      F: __dxlog_file18,
+    (0, import_log16.log)("acquired lock", void 0, {
+      F: __dxlog_file19,
       L: 37,
       S: this,
       C: (f, a) => f(...a)
@@ -5591,7 +5756,7 @@ var Lock = class {
   async release() {
     await this._onRelease?.();
     (0, import_invariant17.invariant)(this._fileHandle, "Lock is not acquired", {
-      F: __dxlog_file18,
+      F: __dxlog_file19,
       L: 42,
       S: this,
       A: [
@@ -5603,11 +5768,11 @@ var Lock = class {
   }
 };
 _ts_decorate7([
-  import_log15.logInfo
+  import_log16.logInfo
 ], Lock.prototype, "lockKey", null);
 var isLocked = (lockPath) => import_lock_file.LockFile.isLocked(lockPath);
 var getRootPath = (config) => {
-  const { dataRoot = (0, import_util10.isNode)() ? import_client_protocol5.DX_DATA : "dxos/storage" } = config ?? {};
+  const { dataRoot = (0, import_util10.isNode)() ? import_client_protocol6.DX_DATA : "dxos/storage" } = config ?? {};
   return `${dataRoot}/`;
 };
 var isPersistent = (config) => {
@@ -5658,12 +5823,12 @@ var toStorageType = (type) => {
 };
 var createLevel = async (config) => {
   const persistent = isPersistent(config);
-  const storagePath = persistent ? import_node_path.default.join(getRootPath(config), "level") : `/tmp/dxos-${import_keys13.PublicKey.random().toHex()}`;
+  const storagePath = persistent ? import_node_path.default.join(getRootPath(config), "level") : `/tmp/dxos-${import_keys14.PublicKey.random().toHex()}`;
   const level = (0, import_kv_store.createLevel)(storagePath);
   await level.open();
   return level;
 };
-var __dxlog_file19 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/devices/devices-service.ts";
+var __dxlog_file20 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/devices/devices-service.ts";
 var DevicesServiceImpl = class {
   constructor(_identityManager) {
     this._identityManager = _identityManager;
@@ -5681,7 +5846,7 @@ var DevicesServiceImpl = class {
           });
         } else {
           (0, import_invariant19.invariant)(this._identityManager.identity?.presence, "presence not present", {
-            F: __dxlog_file19,
+            F: __dxlog_file20,
             L: 32,
             S: this,
             A: [
@@ -5696,9 +5861,9 @@ var DevicesServiceImpl = class {
               const peerState = peers.find((peer) => peer.identityKey.equals(key));
               return {
                 deviceKey: key,
-                kind: this._identityManager.identity?.deviceKey.equals(key) ? import_services16.DeviceKind.CURRENT : import_services16.DeviceKind.TRUSTED,
+                kind: this._identityManager.identity?.deviceKey.equals(key) ? import_services17.DeviceKind.CURRENT : import_services17.DeviceKind.TRUSTED,
                 profile,
-                presence: isMe ? import_services16.Device.PresenceState.ONLINE : peerState ? import_services16.Device.PresenceState.ONLINE : import_services16.Device.PresenceState.OFFLINE
+                presence: isMe ? import_services17.Device.PresenceState.ONLINE : peerState ? import_services17.Device.PresenceState.ONLINE : import_services17.Device.PresenceState.OFFLINE
               };
             })
           });
@@ -5747,7 +5912,7 @@ var DiagnosticsCollector = class {
   }
   static async collect(config = findConfigs(), services = findSystemServiceProvider(), options = {}) {
     const serviceDiagnostics = await services?.services?.SystemService?.getDiagnostics({
-      keys: options.humanize ? import_services17.GetDiagnosticsRequest.KEY_OPTION.HUMANIZE : options.truncate ? import_services17.GetDiagnosticsRequest.KEY_OPTION.TRUNCATE : void 0
+      keys: options.humanize ? import_services18.GetDiagnosticsRequest.KEY_OPTION.HUMANIZE : options.truncate ? import_services18.GetDiagnosticsRequest.KEY_OPTION.TRUNCATE : void 0
     }, {
       timeout: GET_DIAGNOSTICS_RPC_TIMEOUT
     });
@@ -5762,7 +5927,7 @@ var DiagnosticsCollector = class {
       client: clientDiagnostics,
       broadcast: await this.broadcastSender.broadcastDiagnosticsRequest()
     };
-    return JSON.parse(JSON.stringify(diagnostics, (0, import_util12.jsonKeyReplacer)(options)));
+    return JSON.parse(JSON.stringify(diagnostics, (0, import_util11.jsonKeyReplacer)(options)));
   }
 };
 var findSystemServiceProvider = () => {
@@ -5772,35 +5937,35 @@ var findSystemServiceProvider = () => {
 };
 var findConfigs = () => {
   const configs = import_tracing10.TRACE_PROCESSOR.findResourcesByAnnotation(import_config3.ConfigResource);
-  return configs.map((r) => r.instance.deref()).filter(import_util12.nonNullable);
+  return configs.map((r) => r.instance.deref()).filter(import_util11.nonNullable);
 };
 var LoggingServiceImpl = class {
   constructor() {
     this._logs = new import_async20.Event();
     this._started = Date.now();
-    this._sessionId = import_keys16.PublicKey.random().toHex();
+    this._sessionId = import_keys17.PublicKey.random().toHex();
     this._logProcessor = (_config, entry2) => {
       this._logs.emit(entry2);
     };
   }
   async open() {
-    import_log17.log.runtimeConfig.processors.push(this._logProcessor);
+    import_log18.log.runtimeConfig.processors.push(this._logProcessor);
   }
   async close() {
-    const index = import_log17.log.runtimeConfig.processors.findIndex((processor) => processor === this._logProcessor);
-    import_log17.log.runtimeConfig.processors.splice(index, 1);
+    const index = import_log18.log.runtimeConfig.processors.findIndex((processor) => processor === this._logProcessor);
+    import_log18.log.runtimeConfig.processors.splice(index, 1);
   }
   async controlMetrics({ reset, record }) {
     if (reset) {
-      import_util14.tracer.clear();
+      import_util13.tracer.clear();
     }
     if (record === true) {
-      import_util14.tracer.start();
+      import_util13.tracer.start();
     } else if (record === false) {
-      import_util14.tracer.stop();
+      import_util13.tracer.stop();
     }
     return {
-      recording: import_util14.tracer.recording
+      recording: import_util13.tracer.recording
     };
   }
   /**
@@ -5808,10 +5973,10 @@ var LoggingServiceImpl = class {
   */
   queryMetrics({ interval = 5e3 }) {
     const getNumericalValues = (key) => {
-      const events = import_util14.tracer.get(key) ?? [];
+      const events = import_util13.tracer.get(key) ?? [];
       return {
         key,
-        stats: (0, import_util14.numericalValues)(events, "duration")
+        stats: (0, import_util13.numericalValues)(events, "duration")
       };
     };
     return new import_codec_protobuf13.Stream(({ next }) => {
@@ -5849,7 +6014,7 @@ var LoggingServiceImpl = class {
         }
         const record = {
           ...entry2,
-          context: (0, import_util14.jsonify)((0, import_log17.getContextFromEntry)(entry2)),
+          context: (0, import_util13.jsonify)((0, import_log18.getContextFromEntry)(entry2)),
           timestamp: /* @__PURE__ */ new Date(),
           meta: {
             // TODO(dmaretskyi): Fix proto.
@@ -5858,7 +6023,7 @@ var LoggingServiceImpl = class {
             scope: {
               hostSessionId: this._sessionId,
               uptimeSeconds: (Date.now() - this._started) / 1e3,
-              name: (0, import_util14.getDebugName)(entry2.meta?.S)
+              name: (0, import_util13.getDebugName)(entry2.meta?.S)
             }
           }
         };
@@ -5875,16 +6040,16 @@ var LoggingServiceImpl = class {
 };
 var matchFilter = (filter, level, path2, options) => {
   switch (options) {
-    case import_services18.QueryLogsRequest.MatchingOptions.INCLUSIVE:
+    case import_services19.QueryLogsRequest.MatchingOptions.INCLUSIVE:
       return level >= filter.level && (!filter.pattern || path2.includes(filter.pattern));
-    case import_services18.QueryLogsRequest.MatchingOptions.EXPLICIT:
+    case import_services19.QueryLogsRequest.MatchingOptions.EXPLICIT:
       return level === filter.level && (!filter.pattern || path2.includes(filter.pattern));
   }
 };
 var shouldLog = (entry2, request) => {
-  const options = request.options ?? import_services18.QueryLogsRequest.MatchingOptions.INCLUSIVE;
+  const options = request.options ?? import_services19.QueryLogsRequest.MatchingOptions.INCLUSIVE;
   if (request.filters === void 0) {
-    return options === import_services18.QueryLogsRequest.MatchingOptions.INCLUSIVE;
+    return options === import_services19.QueryLogsRequest.MatchingOptions.INCLUSIVE;
   } else {
     return request.filters.some((filter) => matchFilter(filter, entry2.level, entry2.meta?.F ?? "", options));
   }
@@ -5939,9 +6104,9 @@ var SystemServiceImpl = class {
     const diagnostics = await this._getDiagnostics();
     return {
       timestamp: /* @__PURE__ */ new Date(),
-      diagnostics: JSON.parse(JSON.stringify(diagnostics, (0, import_util15.jsonKeyReplacer)({
-        truncate: keys === import_services19.GetDiagnosticsRequest.KEY_OPTION.TRUNCATE,
-        humanize: keys === import_services19.GetDiagnosticsRequest.KEY_OPTION.HUMANIZE
+      diagnostics: JSON.parse(JSON.stringify(diagnostics, (0, import_util14.jsonKeyReplacer)({
+        truncate: keys === import_services20.GetDiagnosticsRequest.KEY_OPTION.TRUNCATE,
+        humanize: keys === import_services20.GetDiagnosticsRequest.KEY_OPTION.HUMANIZE
       })))
     };
   }
@@ -5982,7 +6147,7 @@ function _ts_decorate8(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file20 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/services/service-host.ts";
+var __dxlog_file21 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/services/service-host.ts";
 var ClientServicesHost = class {
   constructor({
     config,
@@ -6002,7 +6167,7 @@ var ClientServicesHost = class {
     this._storage = storage;
     this._level = level;
     this._callbacks = callbacks;
-    this._runtimeParams = runtimeParams;
+    this._runtimeParams = runtimeParams ?? {};
     if (config) {
       this.initialize({
         config,
@@ -6015,7 +6180,7 @@ var ClientServicesHost = class {
         lockKey,
         onAcquire: () => {
           if (!this._opening) {
-            void this.open(new import_context13.Context());
+            void this.open(new import_context14.Context());
           }
         },
         onRelease: () => this.close()
@@ -6024,14 +6189,14 @@ var ClientServicesHost = class {
     this._systemService = new SystemServiceImpl({
       config: () => this._config,
       statusUpdate: this._statusUpdate,
-      getCurrentStatus: () => this.isOpen ? import_services15.SystemStatus.ACTIVE : import_services15.SystemStatus.INACTIVE,
+      getCurrentStatus: () => this.isOpen ? import_services16.SystemStatus.ACTIVE : import_services16.SystemStatus.INACTIVE,
       getDiagnostics: () => {
         return createDiagnostics(this._serviceRegistry.services, this._serviceContext, this._config);
       },
       onUpdateStatus: async (status) => {
-        if (!this.isOpen && status === import_services15.SystemStatus.ACTIVE) {
+        if (!this.isOpen && status === import_services16.SystemStatus.ACTIVE) {
           await this._resourceLock?.acquire();
-        } else if (this.isOpen && status === import_services15.SystemStatus.INACTIVE) {
+        } else if (this.isOpen && status === import_services16.SystemStatus.INACTIVE) {
           await this._resourceLock?.release();
         }
       },
@@ -6041,7 +6206,7 @@ var ClientServicesHost = class {
     });
     this.diagnosticsBroadcastHandler = createCollectDiagnosticsBroadcastHandler(this._systemService);
     this._loggingService = new LoggingServiceImpl();
-    this._serviceRegistry = new ServiceRegistry(import_client_protocol6.clientServiceBundle, {
+    this._serviceRegistry = new ServiceRegistry(import_client_protocol7.clientServiceBundle, {
       SystemService: this._systemService,
       TracingService: this._tracingService
     });
@@ -6071,24 +6236,24 @@ var ClientServicesHost = class {
   */
   initialize({ config, ...options }) {
     (0, import_invariant18.invariant)(!this._open, "service host is open", {
-      F: __dxlog_file20,
-      L: 189,
+      F: __dxlog_file21,
+      L: 186,
       S: this,
       A: [
         "!this._open",
         "'service host is open'"
       ]
     });
-    (0, import_log16.log)("initializing...", void 0, {
-      F: __dxlog_file20,
-      L: 190,
+    (0, import_log17.log)("initializing...", void 0, {
+      F: __dxlog_file21,
+      L: 187,
       S: this,
       C: (f, a) => f(...a)
     });
     if (config) {
       (0, import_invariant18.invariant)(!this._config, "config already set", {
-        F: __dxlog_file20,
-        L: 193,
+        F: __dxlog_file21,
+        L: 190,
         S: this,
         A: [
           "!this._config",
@@ -6101,9 +6266,9 @@ var ClientServicesHost = class {
       }
     }
     if (!options.signalManager) {
-      import_log16.log.warn("running signaling without telemetry metadata.", void 0, {
-        F: __dxlog_file20,
-        L: 201,
+      import_log17.log.warn("running signaling without telemetry metadata.", void 0, {
+        F: __dxlog_file21,
+        L: 198,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -6113,8 +6278,8 @@ var ClientServicesHost = class {
     }), signalManager = new import_messaging.WebsocketSignalManager(this._config?.get("runtime.services.signaling") ?? []) } = options;
     this._signalManager = signalManager;
     (0, import_invariant18.invariant)(!this._networkManager, "network manager already set", {
-      F: __dxlog_file20,
-      L: 212,
+      F: __dxlog_file21,
+      L: 209,
       S: this,
       A: [
         "!this._networkManager",
@@ -6126,9 +6291,9 @@ var ClientServicesHost = class {
       transportFactory,
       signalManager
     });
-    (0, import_log16.log)("initialized", void 0, {
-      F: __dxlog_file20,
-      L: 219,
+    (0, import_log17.log)("initialized", void 0, {
+      F: __dxlog_file21,
+      L: 216,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -6137,18 +6302,18 @@ var ClientServicesHost = class {
     if (this._open) {
       return;
     }
-    const traceId = import_keys14.PublicKey.random().toHex();
-    import_log16.log.trace("dxos.client-services.host.open", import_protocols15.trace.begin({
+    const traceId = import_keys15.PublicKey.random().toHex();
+    import_log17.log.trace("dxos.client-services.host.open", import_protocols15.trace.begin({
       id: traceId
     }), {
-      F: __dxlog_file20,
-      L: 230,
+      F: __dxlog_file21,
+      L: 227,
       S: this,
       C: (f, a) => f(...a)
     });
     (0, import_invariant18.invariant)(this._config, "config not set", {
-      F: __dxlog_file20,
-      L: 232,
+      F: __dxlog_file21,
+      L: 229,
       S: this,
       A: [
         "this._config",
@@ -6156,8 +6321,8 @@ var ClientServicesHost = class {
       ]
     });
     (0, import_invariant18.invariant)(this._storage, "storage not set", {
-      F: __dxlog_file20,
-      L: 233,
+      F: __dxlog_file21,
+      L: 230,
       S: this,
       A: [
         "this._storage",
@@ -6165,8 +6330,8 @@ var ClientServicesHost = class {
       ]
     });
     (0, import_invariant18.invariant)(this._signalManager, "signal manager not set", {
-      F: __dxlog_file20,
-      L: 234,
+      F: __dxlog_file21,
+      L: 231,
       S: this,
       A: [
         "this._signalManager",
@@ -6174,8 +6339,8 @@ var ClientServicesHost = class {
       ]
     });
     (0, import_invariant18.invariant)(this._networkManager, "network manager not set", {
-      F: __dxlog_file20,
-      L: 235,
+      F: __dxlog_file21,
+      L: 232,
       S: this,
       A: [
         "this._networkManager",
@@ -6183,11 +6348,11 @@ var ClientServicesHost = class {
       ]
     });
     this._opening = true;
-    (0, import_log16.log)("opening...", {
+    (0, import_log17.log)("opening...", {
       lockKey: this._resourceLock?.lockKey
     }, {
-      F: __dxlog_file20,
-      L: 238,
+      F: __dxlog_file21,
+      L: 235,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -6198,9 +6363,10 @@ var ClientServicesHost = class {
     await this._level.open();
     await this._loggingService.open();
     this._serviceContext = new ServiceContext(this._storage, this._level, this._networkManager, this._signalManager, this._runtimeParams);
+    const identityService = new IdentityServiceImpl(this._serviceContext.identityManager, this._serviceContext.keyring, () => this._serviceContext.dataSpaceManager, (params) => this._createIdentity(params), (profile) => this._serviceContext.broadcastProfileUpdate(profile));
     this._serviceRegistry.setServices({
       SystemService: this._systemService,
-      IdentityService: new IdentityServiceImpl((params) => this._createIdentity(params), this._serviceContext.identityManager, this._serviceContext.keyring, (profile) => this._serviceContext.broadcastProfileUpdate(profile)),
+      IdentityService: identityService,
       InvitationsService: new InvitationsServiceImpl(this._serviceContext.invitationsManager),
       DevicesService: new DevicesServiceImpl(this._serviceContext.identityManager),
       SpacesService: new SpacesServiceImpl(this._serviceContext.identityManager, this._serviceContext.spaceManager, async () => {
@@ -6220,12 +6386,13 @@ var ClientServicesHost = class {
       })
     });
     await this._serviceContext.open(ctx);
+    await identityService.open();
     const devtoolsProxy = this._config?.get("runtime.client.devtoolsProxy");
     if (devtoolsProxy) {
       this._devtoolsProxy = new import_websocket_rpc.WebsocketRpcClient({
         url: devtoolsProxy,
         requested: {},
-        exposed: import_client_protocol6.clientServiceBundle,
+        exposed: import_client_protocol7.clientServiceBundle,
         handlers: this.services
       });
       void this._devtoolsProxy.open();
@@ -6235,18 +6402,18 @@ var ClientServicesHost = class {
     this._open = true;
     this._statusUpdate.emit();
     const deviceKey = this._serviceContext.identityManager.identity?.deviceKey;
-    (0, import_log16.log)("opened", {
+    (0, import_log17.log)("opened", {
       deviceKey
     }, {
-      F: __dxlog_file20,
+      F: __dxlog_file21,
       L: 314,
       S: this,
       C: (f, a) => f(...a)
     });
-    import_log16.log.trace("dxos.client-services.host.open", import_protocols15.trace.end({
+    import_log17.log.trace("dxos.client-services.host.open", import_protocols15.trace.end({
       id: traceId
     }), {
-      F: __dxlog_file20,
+      F: __dxlog_file21,
       L: 315,
       S: this,
       C: (f, a) => f(...a)
@@ -6257,10 +6424,10 @@ var ClientServicesHost = class {
       return;
     }
     const deviceKey = this._serviceContext.identityManager.identity?.deviceKey;
-    (0, import_log16.log)("closing...", {
+    (0, import_log17.log)("closing...", {
       deviceKey
     }, {
-      F: __dxlog_file20,
+      F: __dxlog_file21,
       L: 326,
       S: this,
       C: (f, a) => f(...a)
@@ -6275,43 +6442,43 @@ var ClientServicesHost = class {
     await this._level?.close();
     this._open = false;
     this._statusUpdate.emit();
-    (0, import_log16.log)("closed", {
+    (0, import_log17.log)("closed", {
       deviceKey
     }, {
-      F: __dxlog_file20,
+      F: __dxlog_file21,
       L: 335,
       S: this,
       C: (f, a) => f(...a)
     });
   }
   async reset() {
-    const traceId = import_keys14.PublicKey.random().toHex();
-    import_log16.log.trace("dxos.sdk.client-services-host.reset", import_protocols15.trace.begin({
+    const traceId = import_keys15.PublicKey.random().toHex();
+    import_log17.log.trace("dxos.sdk.client-services-host.reset", import_protocols15.trace.begin({
       id: traceId
     }), {
-      F: __dxlog_file20,
+      F: __dxlog_file21,
       L: 340,
       S: this,
       C: (f, a) => f(...a)
     });
-    import_log16.log.info("resetting...", void 0, {
-      F: __dxlog_file20,
+    import_log17.log.info("resetting...", void 0, {
+      F: __dxlog_file21,
       L: 342,
       S: this,
       C: (f, a) => f(...a)
     });
     await this._serviceContext?.close();
     await this._storage.reset();
-    import_log16.log.info("reset", void 0, {
-      F: __dxlog_file20,
+    import_log17.log.info("reset", void 0, {
+      F: __dxlog_file21,
       L: 345,
       S: this,
       C: (f, a) => f(...a)
     });
-    import_log16.log.trace("dxos.sdk.client-services-host.reset", import_protocols15.trace.end({
+    import_log17.log.trace("dxos.sdk.client-services-host.reset", import_protocols15.trace.end({
       id: traceId
     }), {
-      F: __dxlog_file20,
+      F: __dxlog_file21,
       L: 346,
       S: this,
       C: (f, a) => f(...a)
@@ -6321,38 +6488,6 @@ var ClientServicesHost = class {
   async _createIdentity(params) {
     const identity = await this._serviceContext.createIdentity(params);
     await this._serviceContext.initialized.wait();
-    const space = await this._serviceContext.dataSpaceManager.createSpace();
-    const automergeIndex = space.automergeSpaceState.rootUrl;
-    (0, import_invariant18.invariant)(automergeIndex, void 0, {
-      F: __dxlog_file20,
-      L: 358,
-      S: this,
-      A: [
-        "automergeIndex",
-        ""
-      ]
-    });
-    const document = this._serviceContext.echoHost.automergeRepo.find(automergeIndex);
-    await document.whenReady();
-    const properties = {
-      system: {
-        type: (0, import_echo_protocol.encodeReference)((0, import_echo_schema2.getTypeReference)(import_client_protocol6.PropertiesType))
-      },
-      data: {
-        [import_client_protocol6.defaultKey]: identity.identityKey.toHex()
-      },
-      meta: {
-        keys: []
-      }
-    };
-    const propertiesId = import_keys14.PublicKey.random().toHex();
-    document.change((doc) => {
-      (0, import_util11.assignDeep)(doc, [
-        "objects",
-        propertiesId
-      ], properties);
-    });
-    await this._serviceContext.echoHost.flush();
     return identity;
   }
 };
@@ -6414,4 +6549,4 @@ ClientServicesHost = _ts_decorate8([
   subscribeToSpaces,
   subscribeToSwarmInfo
 });
-//# sourceMappingURL=chunk-NPYJIVOX.cjs.map
+//# sourceMappingURL=chunk-RQHBQWKH.cjs.map