@dxos/client-services 0.5.9-main.59deb28 → 0.5.9-main.5ad2d33

package/dist/lib/browser/{chunk-GCU4DHSQ.mjs → chunk-PLEBKZ2Q.mjs}

@@ -85,6 +85,7 @@ var subscribeToFeedBlocks = ({ feedStore }, { feedKey, maxBlocks = 10 }) => {
 import { Stream as Stream2 } from "@dxos/codec-protobuf";
 import { Context } from "@dxos/context";
 import { PublicKey as PublicKey2 } from "@dxos/keys";
+var __dxlog_file = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/devtools/network.ts";
 var subscribeToNetworkStatus = ({ signalManager }) => new Stream2(({ next, close }) => {
   const update = () => {
     try {
@@ -100,7 +101,10 @@ var subscribeToNetworkStatus = ({ signalManager }) => new Stream2(({ next, close
   update();
 });
 var subscribeToSignal = ({ signalManager }) => new Stream2(({ next }) => {
-  const ctx = new Context();
+  const ctx = new Context(void 0, {
+    F: __dxlog_file,
+    L: 36
+  });
   signalManager.onMessage.on(ctx, (message) => {
     next({
       message: {
@@ -355,7 +359,7 @@ import { SpaceMember } from "@dxos/protocols/proto/dxos/client/services";
 import { TRACE_PROCESSOR } from "@dxos/tracing";
 
 // packages/sdk/client-services/src/version.ts
-var DXOS_VERSION = "0.5.9-main.59deb28";
+var DXOS_VERSION = "0.5.9-main.5ad2d33";
 
 // packages/sdk/client-services/src/packlets/services/platform.ts
 import { Platform } from "@dxos/protocols/proto/dxos/client/services";
@@ -388,7 +392,7 @@ var getPlatform = () => {
 };
 
 // packages/sdk/client-services/src/packlets/diagnostics/diagnostics.ts
-var __dxlog_file = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/diagnostics/diagnostics.ts";
+var __dxlog_file2 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/diagnostics/diagnostics.ts";
 var DEFAULT_TIMEOUT = 1e3;
 var createDiagnostics = async (clientServices, serviceContext, config) => {
   const diagnostics = {
@@ -405,7 +409,7 @@ var createDiagnostics = async (clientServices, serviceContext, config) => {
   await Promise.all([
     (async () => {
       invariant(clientServices.LoggingService, "SystemService is not available.", {
-        F: __dxlog_file,
+        F: __dxlog_file2,
         L: 110,
         S: void 0,
         A: [
@@ -510,7 +514,7 @@ var getStorageDiagnostics = async () => {
 // packages/sdk/client-services/src/packlets/diagnostics/browser-diagnostics-broadcast.ts
 import { Trigger } from "@dxos/async";
 import { log } from "@dxos/log";
-var __dxlog_file2 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/diagnostics/browser-diagnostics-broadcast.ts";
+var __dxlog_file3 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/diagnostics/browser-diagnostics-broadcast.ts";
 var CHANNEL_NAME = "dxos.diagnostics.broadcast";
 var MessageType;
 (function(MessageType2) {
@@ -579,7 +583,7 @@ var createCollectDiagnosticsBroadcastHandler = (systemService) => {
           }
         } catch (error) {
           log.catch(error, void 0, {
-            F: __dxlog_file2,
+            F: __dxlog_file3,
             L: 77,
             S: void 0,
             C: (f, a) => f(...a)
@@ -687,7 +691,7 @@ import { Context as Context2 } from "@dxos/context";
 import { verifyCredential } from "@dxos/credentials";
 import { log as log2 } from "@dxos/log";
 import { schema } from "@dxos/protocols";
-var __dxlog_file3 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/authenticator.ts";
+var __dxlog_file4 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/authenticator.ts";
 var Credential = schema.getCodecForType("dxos.halo.credentials.Credential");
 var createAuthProvider = (signer) => async (nonce) => {
   const credential = await signer.createCredential({
@@ -702,7 +706,10 @@ var createAuthProvider = (signer) => async (nonce) => {
 var TrustedKeySetAuthVerifier = class {
   constructor(_params) {
     this._params = _params;
-    this._ctx = new Context2();
+    this._ctx = new Context2(void 0, {
+      F: __dxlog_file4,
+      L: 45
+    });
   }
   async close() {
     await this._ctx.dispose();
@@ -713,7 +720,7 @@ var TrustedKeySetAuthVerifier = class {
       log2("authenticating...", {
         credential
       }, {
-        F: __dxlog_file3,
+        F: __dxlog_file4,
         L: 56,
         S: this,
         C: (f, a) => f(...a)
@@ -723,7 +730,7 @@ var TrustedKeySetAuthVerifier = class {
         log2("Invalid credential", {
           result
         }, {
-          F: __dxlog_file3,
+          F: __dxlog_file4,
           L: 60,
           S: this,
           C: (f, a) => f(...a)
@@ -735,7 +742,7 @@ var TrustedKeySetAuthVerifier = class {
           nonce,
           credential
         }, {
-          F: __dxlog_file3,
+          F: __dxlog_file4,
           L: 65,
           S: this,
           C: (f, a) => f(...a)
@@ -746,7 +753,7 @@ var TrustedKeySetAuthVerifier = class {
         log2("key is not currently in trusted set, waiting...", {
           key: credential.issuer
         }, {
-          F: __dxlog_file3,
+          F: __dxlog_file4,
           L: 70,
           S: this,
           C: (f, a) => f(...a)
@@ -762,7 +769,7 @@ var TrustedKeySetAuthVerifier = class {
           log2("auth success", {
             key: credential.issuer
           }, {
-            F: __dxlog_file3,
+            F: __dxlog_file4,
             L: 81,
             S: this,
             C: (f, a) => f(...a)
@@ -772,7 +779,7 @@ var TrustedKeySetAuthVerifier = class {
           log2("key is not currently in trusted set, waiting...", {
             key: credential.issuer
           }, {
-            F: __dxlog_file3,
+            F: __dxlog_file4,
             L: 84,
             S: this,
             C: (f, a) => f(...a)
@@ -813,7 +820,7 @@ import { ComplexSet } from "@dxos/util";
 import { getCredentialAssertion } from "@dxos/credentials";
 import { SpaceId } from "@dxos/keys";
 import { log as log3 } from "@dxos/log";
-var __dxlog_file4 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/default-space-state-machine.ts";
+var __dxlog_file5 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/default-space-state-machine.ts";
 var DefaultSpaceStateMachine = class {
   constructor(_params) {
     this._params = _params;
@@ -830,7 +837,7 @@ var DefaultSpaceStateMachine = class {
             expectedIdentity: this._params.identityKey,
             credential
           }, {
-            F: __dxlog_file4,
+            F: __dxlog_file5,
             L: 32,
             S: this,
             C: (f, a) => f(...a)
@@ -841,7 +848,7 @@ var DefaultSpaceStateMachine = class {
           log3.warn("Invalid default space id", {
             id: assertion.spaceId
           }, {
-            F: __dxlog_file4,
+            F: __dxlog_file5,
             L: 36,
             S: this,
             C: (f, a) => f(...a)
@@ -866,7 +873,7 @@ function _ts_decorate2(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file5 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/identity.ts";
+var __dxlog_file6 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/identity.ts";
 var Identity = class {
   constructor({ space, signer, identityKey, deviceKey, presence }) {
     this.stateUpdate = new Event();
@@ -878,7 +885,7 @@ var Identity = class {
     log4.trace("dxos.halo.device", {
       deviceKey
     }, {
-      F: __dxlog_file5,
+      F: __dxlog_file6,
       L: 70,
       S: this,
       C: (f, a) => f(...a)
@@ -957,7 +964,7 @@ var Identity = class {
   */
   getIdentityCredentialSigner() {
     invariant2(this._deviceStateMachine.deviceCredentialChain, "Device credential chain is not ready.", {
-      F: __dxlog_file5,
+      F: __dxlog_file6,
       L: 159,
       S: this,
       A: [
@@ -1001,7 +1008,7 @@ var Identity = class {
       controlFeedKey,
       dataFeedKey
     }, {
-      F: __dxlog_file5,
+      F: __dxlog_file6,
       L: 184,
       S: this,
       C: (f, a) => f(...a)
@@ -1078,7 +1085,7 @@ function _ts_decorate3(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file6 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/identity-manager.ts";
+var __dxlog_file7 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/identity-manager.ts";
 var DEVICE_PRESENCE_ANNOUNCE_INTERVAL = 1e4;
 var DEVICE_PRESENCE_OFFLINE_TIMEOUT = 2e4;
 var IdentityManager = class {
@@ -1102,7 +1109,7 @@ var IdentityManager = class {
     log5.trace("dxos.halo.identity-manager.open", trace3.begin({
       id: traceId
     }), {
-      F: __dxlog_file6,
+      F: __dxlog_file7,
       L: 104,
       S: this,
       C: (f, a) => f(...a)
@@ -1111,7 +1118,7 @@ var IdentityManager = class {
     log5("identity record", {
       identityRecord
     }, {
-      F: __dxlog_file6,
+      F: __dxlog_file7,
       L: 107,
       S: this,
       C: (f, a) => f(...a)
@@ -1124,7 +1131,7 @@ var IdentityManager = class {
         identityKey: identityRecord.identityKey,
         displayName: this._identity.profileDocument?.displayName
       }, {
-        F: __dxlog_file6,
+        F: __dxlog_file7,
         L: 112,
         S: this,
         C: (f, a) => f(...a)
@@ -1134,18 +1141,21 @@ var IdentityManager = class {
     log5.trace("dxos.halo.identity-manager.open", trace3.end({
       id: traceId
     }), {
-      F: __dxlog_file6,
+      F: __dxlog_file7,
       L: 119,
       S: this,
       C: (f, a) => f(...a)
     });
   }
   async close() {
-    await this._identity?.close(new Context3());
+    await this._identity?.close(new Context3(void 0, {
+      F: __dxlog_file7,
+      L: 123
+    }));
   }
   async createIdentity({ displayName, deviceProfile } = {}) {
     invariant3(!this._identity, "Identity already exists.", {
-      F: __dxlog_file6,
+      F: __dxlog_file7,
       L: 128,
       S: this,
       A: [
@@ -1154,7 +1164,7 @@ var IdentityManager = class {
       ]
     });
     log5("creating identity...", void 0, {
-      F: __dxlog_file6,
+      F: __dxlog_file7,
       L: 129,
       S: this,
       C: (f, a) => f(...a)
@@ -1171,11 +1181,14 @@ var IdentityManager = class {
       }
     };
     const identity = await this._constructIdentity(identityRecord);
-    await identity.open(new Context3());
+    await identity.open(new Context3(void 0, {
+      F: __dxlog_file7,
+      L: 144
+    }));
     {
       const generator = new CredentialGenerator(this._keyring, identityRecord.identityKey, identityRecord.deviceKey);
       invariant3(identityRecord.haloSpace.genesisFeedKey, "Genesis feed key is required.", {
-        F: __dxlog_file6,
+        F: __dxlog_file7,
         L: 148,
         S: this,
         A: [
@@ -1184,7 +1197,7 @@ var IdentityManager = class {
         ]
       });
       invariant3(identityRecord.haloSpace.dataFeedKey, "Data feed key is required.", {
-        F: __dxlog_file6,
+        F: __dxlog_file7,
         L: 149,
         S: this,
         A: [
@@ -1223,7 +1236,7 @@ var IdentityManager = class {
       identityKey: identityRecord.identityKey,
       displayName: this._identity.profileDocument?.displayName
     }, {
-      F: __dxlog_file6,
+      F: __dxlog_file7,
       L: 191,
       S: this,
       C: (f, a) => f(...a)
@@ -1234,7 +1247,7 @@ var IdentityManager = class {
       deviceKey: identity.deviceKey,
       profile: identity.profileDocument
     }, {
-      F: __dxlog_file6,
+      F: __dxlog_file7,
       L: 197,
       S: this,
       C: (f, a) => f(...a)
@@ -1271,13 +1284,13 @@ var IdentityManager = class {
     log5("accepting identity", {
       params
     }, {
-      F: __dxlog_file6,
+      F: __dxlog_file7,
       L: 235,
       S: this,
       C: (f, a) => f(...a)
     });
     invariant3(!this._identity, "Identity already exists.", {
-      F: __dxlog_file6,
+      F: __dxlog_file7,
       L: 236,
       S: this,
       A: [
@@ -1297,7 +1310,10 @@ var IdentityManager = class {
       }
     };
     const identity = await this._constructIdentity(identityRecord);
-    await identity.open(new Context3());
+    await identity.open(new Context3(void 0, {
+      F: __dxlog_file7,
+      L: 251
+    }));
     this._identity = identity;
     await this._metadataStore.setIdentityRecord(identityRecord);
     await this._identity.ready();
@@ -1305,7 +1321,7 @@ var IdentityManager = class {
       identityKey: identityRecord.identityKey,
       displayName: this._identity.profileDocument?.displayName
     }, {
-      F: __dxlog_file6,
+      F: __dxlog_file7,
       L: 255,
       S: this,
       C: (f, a) => f(...a)
@@ -1319,7 +1335,7 @@ var IdentityManager = class {
       identityKey: identity.identityKey,
       deviceKey: identity.deviceKey
     }, {
-      F: __dxlog_file6,
+      F: __dxlog_file7,
       L: 265,
       S: this,
       C: (f, a) => f(...a)
@@ -1331,7 +1347,7 @@ var IdentityManager = class {
   */
   async updateProfile(profile) {
     invariant3(this._identity, "Identity not initialized.", {
-      F: __dxlog_file6,
+      F: __dxlog_file7,
       L: 273,
       S: this,
       A: [
@@ -1362,7 +1378,7 @@ var IdentityManager = class {
   }
   async updateDeviceProfile(profile) {
     invariant3(this._identity, "Identity not initialized.", {
-      F: __dxlog_file6,
+      F: __dxlog_file7,
       L: 290,
       S: this,
       A: [
@@ -1398,7 +1414,7 @@ var IdentityManager = class {
   }
   async _constructIdentity(identityRecord) {
     invariant3(!this._identity, void 0, {
-      F: __dxlog_file6,
+      F: __dxlog_file7,
       L: 316,
       S: this,
       A: [
@@ -1409,7 +1425,7 @@ var IdentityManager = class {
     log5("constructing identity", {
       identityRecord
     }, {
-      F: __dxlog_file6,
+      F: __dxlog_file7,
       L: 317,
       S: this,
       C: (f, a) => f(...a)
@@ -1424,7 +1440,7 @@ var IdentityManager = class {
       gossip
     });
     invariant3(identityRecord.haloSpace.controlFeedKey, void 0, {
-      F: __dxlog_file6,
+      F: __dxlog_file7,
       L: 330,
       S: this,
       A: [
@@ -1436,7 +1452,7 @@ var IdentityManager = class {
       writable: true
     });
     invariant3(identityRecord.haloSpace.dataFeedKey, void 0, {
-      F: __dxlog_file6,
+      F: __dxlog_file7,
       L: 334,
       S: this,
       A: [
@@ -1470,7 +1486,7 @@ var IdentityManager = class {
     log5("done", {
       identityKey: identityRecord.identityKey
     }, {
-      F: __dxlog_file6,
+      F: __dxlog_file7,
       L: 360,
       S: this,
       C: (f, a) => f(...a)
@@ -1495,7 +1511,7 @@ var IdentityManager = class {
       },
       onAuthFailure: () => {
         log5.warn("auth failure", void 0, {
-          F: __dxlog_file6,
+          F: __dxlog_file7,
           L: 385,
           S: this,
           C: (f, a) => f(...a)
@@ -1519,13 +1535,17 @@ IdentityManager = _ts_decorate3([
 ], IdentityManager);
 
 // packages/sdk/client-services/src/packlets/identity/identity-service.ts
+import { Trigger as Trigger3, sleep } from "@dxos/async";
 import { Stream as Stream8 } from "@dxos/codec-protobuf";
 import { Resource } from "@dxos/context";
 import { signPresentation } from "@dxos/credentials";
 import { todo } from "@dxos/debug";
 import { invariant as invariant4 } from "@dxos/invariant";
+import { log as log6 } from "@dxos/log";
 import { SpaceState } from "@dxos/protocols/proto/dxos/client/services";
-var __dxlog_file7 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/identity-service.ts";
+import { safeAwaitAll } from "@dxos/util";
+var __dxlog_file8 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/identity-service.ts";
+var DEFAULT_SPACE_SEARCH_TIMEOUT = 1e4;
 var IdentityServiceImpl = class extends Resource {
   constructor(_identityManager, _keyring, _dataSpaceManagerProvider, _createIdentity, _onProfileUpdate) {
     super();
@@ -1554,8 +1574,8 @@ var IdentityServiceImpl = class extends Resource {
     const space = await dataSpaceManager.createDefaultSpace();
     const identity = this._identityManager.identity;
     invariant4(identity, void 0, {
-      F: __dxlog_file7,
-      L: 54,
+      F: __dxlog_file8,
+      L: 59,
       S: this,
       A: [
         "identity",
@@ -1588,8 +1608,8 @@ var IdentityServiceImpl = class extends Resource {
   }
   async updateProfile(profile) {
     invariant4(this._identityManager.identity, "Identity not initialized.", {
-      F: __dxlog_file7,
-      L: 84,
+      F: __dxlog_file8,
+      L: 89,
       S: this,
       A: [
         "this._identityManager.identity",
@@ -1602,8 +1622,8 @@ var IdentityServiceImpl = class extends Resource {
   }
   async signPresentation({ presentation, nonce }) {
     invariant4(this._identityManager.identity, "Identity not initialized.", {
-      F: __dxlog_file7,
-      L: 91,
+      F: __dxlog_file8,
+      L: 96,
       S: this,
       A: [
         "this._identityManager.identity",
@@ -1619,9 +1639,11 @@ var IdentityServiceImpl = class extends Resource {
     });
   }
   async _fixIdentityWithoutDefaultSpace(identity) {
-    let hasDefaultSpace = false;
+    let recodedDefaultSpace = false;
+    let foundDefaultSpace = false;
     const dataSpaceManager = this._dataSpaceManagerProvider();
-    for (const space of dataSpaceManager.spaces.values()) {
+    const recordedDefaultSpaceTrigger = new Trigger3();
+    const allProcessed = safeAwaitAll(dataSpaceManager.spaces.values(), async (space) => {
       if (space.state === SpaceState.CLOSED) {
         await space.open();
         const requiresMigration = space.stateUpdate.waitForCondition(() => space.state === SpaceState.REQUIRES_MIGRATION);
@@ -1631,12 +1653,36 @@ var IdentityServiceImpl = class extends Resource {
         ]);
       }
       if (await dataSpaceManager.isDefaultSpace(space)) {
+        if (foundDefaultSpace) {
+          log6.warn("Multiple default spaces found. Using the first one.", {
+            duplicate: space.id
+          }, {
+            F: __dxlog_file8,
+            L: 129,
+            S: this,
+            C: (f, a) => f(...a)
+          });
+          return;
+        }
+        foundDefaultSpace = true;
         await identity.updateDefaultSpace(space.id);
-        hasDefaultSpace = true;
-        break;
+        recodedDefaultSpace = true;
+        recordedDefaultSpaceTrigger.wake();
       }
-    }
-    if (!hasDefaultSpace) {
+    }, (err) => {
+      log6.catch(err, void 0, {
+        F: __dxlog_file8,
+        L: 140,
+        S: this,
+        C: (f, a) => f(...a)
+      });
+    });
+    await Promise.race([
+      allProcessed,
+      recordedDefaultSpaceTrigger.wait(),
+      sleep(DEFAULT_SPACE_SEARCH_TIMEOUT)
+    ]);
+    if (!recodedDefaultSpace) {
       await this._createDefaultSpace(dataSpaceManager);
     }
   }
@@ -1646,7 +1692,7 @@ var IdentityServiceImpl = class extends Resource {
 import { invariant as invariant5 } from "@dxos/invariant";
 import { AlreadyJoinedError } from "@dxos/protocols";
 import { Invitation } from "@dxos/protocols/proto/dxos/client/services";
-var __dxlog_file8 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/device-invitation-protocol.ts";
+var __dxlog_file9 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/device-invitation-protocol.ts";
 var DeviceInvitationProtocol = class {
   constructor(_keyring, _getIdentity, _acceptIdentity) {
     this._keyring = _keyring;
@@ -1672,7 +1718,7 @@ var DeviceInvitationProtocol = class {
   }
   async admit(_, request) {
     invariant5(request.device, void 0, {
-      F: __dxlog_file8,
+      F: __dxlog_file9,
       L: 50,
       S: this,
       A: [
@@ -1718,7 +1764,7 @@ var DeviceInvitationProtocol = class {
   }
   async accept(response, request) {
     invariant5(response.device, void 0, {
-      F: __dxlog_file8,
+      F: __dxlog_file9,
       L: 95,
       S: this,
       A: [
@@ -1728,7 +1774,7 @@ var DeviceInvitationProtocol = class {
     });
     const { identityKey, haloSpaceKey, genesisFeedKey, controlTimeframe } = response.device;
     invariant5(request.device, void 0, {
-      F: __dxlog_file8,
+      F: __dxlog_file9,
       L: 98,
       S: this,
       A: [
@@ -1760,7 +1806,7 @@ import { ContextDisposedError as ContextDisposedError2 } from "@dxos/context";
 import { createKeyPair, sign } from "@dxos/crypto";
 import { invariant as invariant9 } from "@dxos/invariant";
 import { PublicKey as PublicKey7 } from "@dxos/keys";
-import { log as log9 } from "@dxos/log";
+import { log as log10 } from "@dxos/log";
 import { createTeleportProtocolFactory } from "@dxos/network-manager";
 import { InvalidInvitationExtensionRoleError as InvalidInvitationExtensionRoleError3, trace as trace5 } from "@dxos/protocols";
 import { Invitation as Invitation4 } from "@dxos/protocols/proto/dxos/client/services";
@@ -1769,10 +1815,10 @@ import { Options as Options4 } from "@dxos/protocols/proto/dxos/halo/invitations
 import { ComplexSet as ComplexSet3 } from "@dxos/util";
 
 // packages/sdk/client-services/src/packlets/invitations/invitation-guest-extenstion.ts
-import { Trigger as Trigger3 } from "@dxos/async";
+import { Trigger as Trigger4 } from "@dxos/async";
 import { cancelWithContext as cancelWithContext2, Context as Context4 } from "@dxos/context";
 import { invariant as invariant6 } from "@dxos/invariant";
-import { log as log6 } from "@dxos/log";
+import { log as log7 } from "@dxos/log";
 import { InvalidInvitationExtensionRoleError, schema as schema2 } from "@dxos/protocols";
 import { Options } from "@dxos/protocols/proto/dxos/halo/invitations";
 import { RpcExtension } from "@dxos/teleport";
@@ -1797,7 +1843,7 @@ var tryAcquireBeforeContextDisposed = async (ctx, mutex) => {
 };
 
 // packages/sdk/client-services/src/packlets/invitations/invitation-guest-extenstion.ts
-var __dxlog_file9 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/invitation-guest-extenstion.ts";
+var __dxlog_file10 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/invitation-guest-extenstion.ts";
 var OPTIONS_TIMEOUT = 1e4;
 var InvitationGuestExtension = class extends RpcExtension {
   constructor(_invitationFlowMutex, _callbacks) {
@@ -1811,8 +1857,11 @@ var InvitationGuestExtension = class extends RpcExtension {
     });
     this._invitationFlowMutex = _invitationFlowMutex;
     this._callbacks = _callbacks;
-    this._ctx = new Context4();
-    this._remoteOptionsTrigger = new Trigger3();
+    this._ctx = new Context4(void 0, {
+      F: __dxlog_file10,
+      L: 33
+    });
+    this._remoteOptionsTrigger = new Trigger4();
     this._invitationFlowLock = null;
   }
   hasFlowLock() {
@@ -1823,7 +1872,7 @@ var InvitationGuestExtension = class extends RpcExtension {
       InvitationHostService: {
         options: async (options) => {
           invariant6(!this._remoteOptions, "Remote options already set.", {
-            F: __dxlog_file9,
+            F: __dxlog_file10,
             L: 63,
             S: this,
             A: [
@@ -1849,15 +1898,15 @@ var InvitationGuestExtension = class extends RpcExtension {
   async onOpen(context) {
     await super.onOpen(context);
     try {
-      log6("guest acquire lock", void 0, {
-        F: __dxlog_file9,
+      log7("guest acquire lock", void 0, {
+        F: __dxlog_file10,
         L: 84,
         S: this,
         C: (f, a) => f(...a)
       });
       this._invitationFlowLock = await tryAcquireBeforeContextDisposed(this._ctx, this._invitationFlowMutex);
-      log6("guest lock acquired", void 0, {
-        F: __dxlog_file9,
+      log7("guest lock acquired", void 0, {
+        F: __dxlog_file10,
         L: 86,
         S: this,
         C: (f, a) => f(...a)
@@ -1865,8 +1914,8 @@ var InvitationGuestExtension = class extends RpcExtension {
       await cancelWithContext2(this._ctx, this.rpc.InvitationHostService.options({
         role: Options.Role.GUEST
       }));
-      log6("options sent", void 0, {
-        F: __dxlog_file9,
+      log7("options sent", void 0, {
+        F: __dxlog_file10,
         L: 88,
         S: this,
         C: (f, a) => f(...a)
@@ -1874,8 +1923,8 @@ var InvitationGuestExtension = class extends RpcExtension {
       await cancelWithContext2(this._ctx, this._remoteOptionsTrigger.wait({
         timeout: OPTIONS_TIMEOUT
       }));
-      log6("options received", void 0, {
-        F: __dxlog_file9,
+      log7("options received", void 0, {
+        F: __dxlog_file10,
         L: 90,
         S: this,
         C: (f, a) => f(...a)
@@ -1908,8 +1957,8 @@ var InvitationGuestExtension = class extends RpcExtension {
     if (this._invitationFlowLock != null) {
       this._invitationFlowLock.release();
       this._invitationFlowLock = null;
-      log6("invitation flow lock released", void 0, {
-        F: __dxlog_file9,
+      log7("invitation flow lock released", void 0, {
+        F: __dxlog_file10,
         L: 123,
         S: this,
         C: (f, a) => f(...a)
@@ -1919,17 +1968,17 @@ var InvitationGuestExtension = class extends RpcExtension {
 };
 
 // packages/sdk/client-services/src/packlets/invitations/invitation-host-extension.ts
-import { Trigger as Trigger4, scheduleTask as scheduleTask2 } from "@dxos/async";
+import { Trigger as Trigger5, scheduleTask as scheduleTask2 } from "@dxos/async";
 import { cancelWithContext as cancelWithContext3, Context as Context5 } from "@dxos/context";
 import { randomBytes, verify } from "@dxos/crypto";
 import { invariant as invariant7, InvariantViolation } from "@dxos/invariant";
 import { PublicKey as PublicKey5 } from "@dxos/keys";
-import { log as log7 } from "@dxos/log";
+import { log as log8 } from "@dxos/log";
 import { InvalidInvitationExtensionRoleError as InvalidInvitationExtensionRoleError2, schema as schema3, trace as trace4 } from "@dxos/protocols";
 import { Invitation as Invitation3 } from "@dxos/protocols/proto/dxos/client/services";
 import { AuthenticationResponse, Options as Options2 } from "@dxos/protocols/proto/dxos/halo/invitations";
 import { RpcExtension as RpcExtension2 } from "@dxos/teleport";
-var __dxlog_file10 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/invitation-host-extension.ts";
+var __dxlog_file11 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/invitation-host-extension.ts";
 var OPTIONS_TIMEOUT2 = 1e4;
 var MAX_OTP_ATTEMPTS = 3;
 var InvitationHostExtension = class extends RpcExtension2 {
@@ -1944,13 +1993,16 @@ var InvitationHostExtension = class extends RpcExtension2 {
     });
     this._invitationFlowMutex = _invitationFlowMutex;
     this._callbacks = _callbacks;
-    this._ctx = new Context5();
-    this._remoteOptionsTrigger = new Trigger4();
+    this._ctx = new Context5(void 0, {
+      F: __dxlog_file11,
+      L: 52
+    });
+    this._remoteOptionsTrigger = new Trigger5();
     this._challenge = void 0;
     this.guestProfile = void 0;
     this.authenticationPassed = false;
     this.authenticationRetry = 0;
-    this.completedTrigger = new Trigger4();
+    this.completedTrigger = new Trigger5();
     this._invitationFlowLock = null;
   }
   hasFlowLock() {
@@ -1963,7 +2015,7 @@ var InvitationHostExtension = class extends RpcExtension2 {
       InvitationHostService: {
         options: async (options) => {
           invariant7(!this._remoteOptions, "Remote options already set.", {
-            F: __dxlog_file10,
+            F: __dxlog_file11,
             L: 101,
             S: this,
             A: [
@@ -1977,10 +2029,10 @@ var InvitationHostExtension = class extends RpcExtension2 {
         introduce: async (request) => {
           const { profile, invitationId } = request;
           const traceId = PublicKey5.random().toHex();
-          log7.trace("dxos.sdk.invitation-handler.host.introduce", trace4.begin({
+          log8.trace("dxos.sdk.invitation-handler.host.introduce", trace4.begin({
             id: traceId
           }), {
-            F: __dxlog_file10,
+            F: __dxlog_file11,
             L: 110,
             S: this,
             C: (f, a) => f(...a)
@@ -1988,11 +2040,11 @@ var InvitationHostExtension = class extends RpcExtension2 {
           const invitation = this._requireActiveInvitation();
           this._assertInvitationState(Invitation3.State.CONNECTED);
           if (invitationId !== invitation?.invitationId) {
-            log7.warn("incorrect invitationId", {
+            log8.warn("incorrect invitationId", {
               expected: invitation.invitationId,
               actual: invitationId
             }, {
-              F: __dxlog_file10,
+              F: __dxlog_file11,
               L: 116,
               S: this,
               C: (f, a) => f(...a)
@@ -2003,10 +2055,10 @@ var InvitationHostExtension = class extends RpcExtension2 {
               authMethod: Invitation3.AuthMethod.NONE
             };
           }
-          log7("guest introduced themselves", {
+          log8("guest introduced themselves", {
             guestProfile: profile
           }, {
-            F: __dxlog_file10,
+            F: __dxlog_file11,
             L: 125,
             S: this,
             C: (f, a) => f(...a)
@@ -2014,10 +2066,10 @@ var InvitationHostExtension = class extends RpcExtension2 {
           this.guestProfile = profile;
           this._callbacks.onStateUpdate(Invitation3.State.READY_FOR_AUTHENTICATION);
           this._challenge = invitation.authMethod === Invitation3.AuthMethod.KNOWN_PUBLIC_KEY ? randomBytes(32) : void 0;
-          log7.trace("dxos.sdk.invitation-handler.host.introduce", trace4.end({
+          log8.trace("dxos.sdk.invitation-handler.host.introduce", trace4.end({
             id: traceId
           }), {
-            F: __dxlog_file10,
+            F: __dxlog_file11,
             L: 132,
             S: this,
             C: (f, a) => f(...a)
@@ -2029,19 +2081,19 @@ var InvitationHostExtension = class extends RpcExtension2 {
         },
         authenticate: async ({ authCode: code, signedChallenge }) => {
           const traceId = PublicKey5.random().toHex();
-          log7.trace("dxos.sdk.invitation-handler.host.authenticate", trace4.begin({
+          log8.trace("dxos.sdk.invitation-handler.host.authenticate", trace4.begin({
             id: traceId
           }), {
-            F: __dxlog_file10,
+            F: __dxlog_file11,
             L: 141,
             S: this,
             C: (f, a) => f(...a)
           });
           const invitation = this._requireActiveInvitation();
-          log7("received authentication request", {
+          log8("received authentication request", {
             authCode: code
           }, {
-            F: __dxlog_file10,
+            F: __dxlog_file11,
             L: 144,
             S: this,
             C: (f, a) => f(...a)
@@ -2054,8 +2106,8 @@ var InvitationHostExtension = class extends RpcExtension2 {
           this._callbacks.onStateUpdate(Invitation3.State.AUTHENTICATING);
           switch (invitation.authMethod) {
             case Invitation3.AuthMethod.NONE: {
-              log7("authentication not required", void 0, {
-                F: __dxlog_file10,
+              log8("authentication not required", void 0, {
+                F: __dxlog_file11,
                 L: 152,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2090,10 +2142,10 @@ var InvitationHostExtension = class extends RpcExtension2 {
               break;
             }
             default: {
-              log7.error("invalid authentication method", {
+              log8.error("invalid authentication method", {
                 authMethod: invitation.authMethod
               }, {
-                F: __dxlog_file10,
+                F: __dxlog_file11,
                 L: 190,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2112,13 +2164,13 @@ var InvitationHostExtension = class extends RpcExtension2 {
               status
             };
           }
-          log7.trace("dxos.sdk.invitation-handler.host.authenticate", trace4.end({
+          log8.trace("dxos.sdk.invitation-handler.host.authenticate", trace4.end({
             id: traceId,
             data: {
               status
             }
           }), {
-            F: __dxlog_file10,
+            F: __dxlog_file11,
             L: 202,
             S: this,
             C: (f, a) => f(...a)
@@ -2129,10 +2181,10 @@ var InvitationHostExtension = class extends RpcExtension2 {
         },
         admit: async (request) => {
           const traceId = PublicKey5.random().toHex();
-          log7.trace("dxos.sdk.invitation-handler.host.admit", trace4.begin({
+          log8.trace("dxos.sdk.invitation-handler.host.admit", trace4.begin({
             id: traceId
           }), {
-            F: __dxlog_file10,
+            F: __dxlog_file11,
             L: 208,
             S: this,
             C: (f, a) => f(...a)
@@ -2146,10 +2198,10 @@ var InvitationHostExtension = class extends RpcExtension2 {
               }
             }
             const response = await this._callbacks.admit(request);
-            log7.trace("dxos.sdk.invitation-handler.host.admit", trace4.end({
+            log8.trace("dxos.sdk.invitation-handler.host.admit", trace4.end({
               id: traceId
             }), {
-              F: __dxlog_file10,
+              F: __dxlog_file11,
               L: 222,
               S: this,
               C: (f, a) => f(...a)
@@ -2166,15 +2218,15 @@ var InvitationHostExtension = class extends RpcExtension2 {
   async onOpen(context) {
     await super.onOpen(context);
     try {
-      log7("host acquire lock", void 0, {
-        F: __dxlog_file10,
+      log8("host acquire lock", void 0, {
+        F: __dxlog_file11,
         L: 237,
         S: this,
         C: (f, a) => f(...a)
       });
       this._invitationFlowLock = await tryAcquireBeforeContextDisposed(this._ctx, this._invitationFlowMutex);
-      log7("host lock acquired", void 0, {
-        F: __dxlog_file10,
+      log8("host lock acquired", void 0, {
+        F: __dxlog_file11,
         L: 239,
         S: this,
         C: (f, a) => f(...a)
@@ -2184,8 +2236,8 @@ var InvitationHostExtension = class extends RpcExtension2 {
       await this.rpc.InvitationHostService.options({
         role: Options2.Role.HOST
       });
-      log7("options sent", void 0, {
-        F: __dxlog_file10,
+      log8("options sent", void 0, {
+        F: __dxlog_file11,
         L: 243,
         S: this,
         C: (f, a) => f(...a)
@@ -2193,8 +2245,8 @@ var InvitationHostExtension = class extends RpcExtension2 {
       await cancelWithContext3(this._ctx, this._remoteOptionsTrigger.wait({
         timeout: OPTIONS_TIMEOUT2
       }));
-      log7("options received", void 0, {
-        F: __dxlog_file10,
+      log8("options received", void 0, {
+        F: __dxlog_file11,
         L: 245,
         S: this,
         C: (f, a) => f(...a)
@@ -2247,8 +2299,8 @@ var InvitationHostExtension = class extends RpcExtension2 {
     if (this._invitationFlowLock != null) {
       this._invitationFlowLock?.release();
       this._invitationFlowLock = null;
-      log7("invitation flow lock released", void 0, {
-        F: __dxlog_file10,
+      log8("invitation flow lock released", void 0, {
+        F: __dxlog_file11,
         L: 300,
         S: this,
         C: (f, a) => f(...a)
@@ -2261,10 +2313,10 @@ var isAuthenticationRequired = (invitation) => invitation.authMethod !== Invitat
 // packages/sdk/client-services/src/packlets/invitations/invitation-topology.ts
 import { invariant as invariant8 } from "@dxos/invariant";
 import { PublicKey as PublicKey6 } from "@dxos/keys";
-import { log as log8 } from "@dxos/log";
+import { log as log9 } from "@dxos/log";
 import { Options as Options3 } from "@dxos/protocols/proto/dxos/halo/invitations";
 import { ComplexSet as ComplexSet2 } from "@dxos/util";
-var __dxlog_file11 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/invitation-topology.ts";
+var __dxlog_file12 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/invitation-topology.ts";
 var InvitationTopology = class {
   constructor(_role) {
     this._role = _role;
@@ -2272,7 +2324,7 @@ var InvitationTopology = class {
   }
   init(controller) {
     invariant8(!this._controller, "Already initialized.", {
-      F: __dxlog_file11,
+      F: __dxlog_file12,
       L: 42,
       S: this,
       A: [
@@ -2284,7 +2336,7 @@ var InvitationTopology = class {
   }
   update() {
     invariant8(this._controller, "Not initialized.", {
-      F: __dxlog_file11,
+      F: __dxlog_file12,
       L: 47,
       S: this,
       A: [
@@ -2303,11 +2355,11 @@ var InvitationTopology = class {
     const firstUnknownPeer = candidates.find((peerId) => !this._seenPeers.has(peerId));
     this._seenPeers = new ComplexSet2(PublicKey6.hash, allPeers.filter((peerId) => this._seenPeers.has(peerId)));
     if (firstUnknownPeer != null) {
-      log8("invitation connect", {
+      log9("invitation connect", {
         ownPeerId,
         remotePeerId: firstUnknownPeer
       }, {
-        F: __dxlog_file11,
+        F: __dxlog_file12,
         L: 69,
         S: this,
         C: (f, a) => f(...a)
@@ -2318,7 +2370,7 @@ var InvitationTopology = class {
   }
   async onOffer(peer) {
     invariant8(this._controller, "Not initialized.", {
-      F: __dxlog_file11,
+      F: __dxlog_file12,
       L: 76,
       S: this,
       A: [
@@ -2337,7 +2389,7 @@ var InvitationTopology = class {
 };
 
 // packages/sdk/client-services/src/packlets/invitations/invitations-handler.ts
-var __dxlog_file12 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/invitations-handler.ts";
+var __dxlog_file13 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/invitations-handler.ts";
 var MAX_DELEGATED_INVITATION_HOST_TRIES = 3;
 var InvitationsHandler = class {
   /**
@@ -2362,7 +2414,7 @@ var InvitationsHandler = class {
           try {
             const deviceKey = admissionRequest.device?.deviceKey ?? admissionRequest.space?.deviceKey;
             invariant9(deviceKey, void 0, {
-              F: __dxlog_file12,
+              F: __dxlog_file13,
               L: 90,
               S: this,
               A: [
@@ -2388,18 +2440,18 @@ var InvitationsHandler = class {
           scheduleTask3(connectionCtx, async () => {
             const traceId = PublicKey7.random().toHex();
             try {
-              log9.trace("dxos.sdk.invitations-handler.host.onOpen", trace5.begin({
+              log10.trace("dxos.sdk.invitations-handler.host.onOpen", trace5.begin({
                 id: traceId
               }), {
-                F: __dxlog_file12,
+                F: __dxlog_file13,
                 L: 115,
                 S: this,
                 C: (f, a) => f(...a)
               });
-              log9("connected", {
+              log10("connected", {
                 ...protocol.toJSON()
               }, {
-                F: __dxlog_file12,
+                F: __dxlog_file13,
                 L: 116,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2407,20 +2459,20 @@ var InvitationsHandler = class {
               const deviceKey = await extension.completedTrigger.wait({
                 timeout: invitation.timeout
               });
-              log9("admitted guest", {
+              log10("admitted guest", {
                 guest: deviceKey,
                 ...protocol.toJSON()
               }, {
-                F: __dxlog_file12,
+                F: __dxlog_file13,
                 L: 118,
                 S: this,
                 C: (f, a) => f(...a)
               });
               guardedState.set(extension, Invitation4.State.SUCCESS);
-              log9.trace("dxos.sdk.invitations-handler.host.onOpen", trace5.end({
+              log10.trace("dxos.sdk.invitations-handler.host.onOpen", trace5.end({
                 id: traceId
               }), {
-                F: __dxlog_file12,
+                F: __dxlog_file13,
                 L: 120,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2432,10 +2484,10 @@ var InvitationsHandler = class {
             } catch (err) {
               if (err instanceof TimeoutError) {
                 if (guardedState.set(extension, Invitation4.State.TIMEOUT)) {
-                  log9("timeout", {
+                  log10("timeout", {
                     ...protocol.toJSON()
                   }, {
-                    F: __dxlog_file12,
+                    F: __dxlog_file13,
                     L: 129,
                     S: this,
                     C: (f, a) => f(...a)
@@ -2443,19 +2495,19 @@ var InvitationsHandler = class {
                 }
               } else {
                 if (guardedState.error(extension, err)) {
-                  log9.error("failed", err, {
-                    F: __dxlog_file12,
+                  log10.error("failed", err, {
+                    F: __dxlog_file13,
                     L: 133,
                     S: this,
                     C: (f, a) => f(...a)
                   });
                 }
               }
-              log9.trace("dxos.sdk.invitations-handler.host.onOpen", trace5.error({
+              log10.trace("dxos.sdk.invitations-handler.host.onOpen", trace5.error({
                 id: traceId,
                 error: err
               }), {
-                F: __dxlog_file12,
+                F: __dxlog_file13,
                 L: 136,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2466,10 +2518,10 @@ var InvitationsHandler = class {
         },
         onError: (err) => {
           if (err instanceof InvalidInvitationExtensionRoleError3) {
-            log9("invalid role", {
+            log10("invalid role", {
               ...err.context
             }, {
-              F: __dxlog_file12,
+              F: __dxlog_file13,
               L: 144,
               S: this,
               C: (f, a) => f(...a)
@@ -2478,10 +2530,10 @@ var InvitationsHandler = class {
           }
           if (err instanceof TimeoutError) {
             if (guardedState.set(extension, Invitation4.State.TIMEOUT)) {
-              log9("timeout", {
+              log10("timeout", {
                 err
               }, {
-                F: __dxlog_file12,
+                F: __dxlog_file13,
                 L: 149,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2489,8 +2541,8 @@ var InvitationsHandler = class {
             }
           } else {
             if (guardedState.error(extension, err)) {
-              log9.error("failed", err, {
-                F: __dxlog_file12,
+              log10.error("failed", err, {
+                F: __dxlog_file13,
                 L: 153,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2503,8 +2555,8 @@ var InvitationsHandler = class {
     };
     if (invitation.lifetime && invitation.created) {
       if (invitation.created.getTime() + invitation.lifetime * 1e3 < Date.now()) {
-        log9.warn("invitation has already expired", void 0, {
-          F: __dxlog_file12,
+        log10.warn("invitation has already expired", void 0, {
+          F: __dxlog_file13,
           L: 164,
           S: this,
           C: (f, a) => f(...a)
@@ -2527,7 +2579,7 @@ var InvitationsHandler = class {
     const { timeout = INVITATION_TIMEOUT } = invitation;
     if (deviceProfile) {
       invariant9(invitation.kind === Invitation4.Kind.DEVICE, "deviceProfile provided for non-device invitation", {
-        F: __dxlog_file12,
+        F: __dxlog_file13,
         L: 197,
         S: this,
         A: [
@@ -2540,12 +2592,12 @@ var InvitationsHandler = class {
     const guardedState = this._createGuardedState(ctx, invitation, stream);
     const shouldCancelInvitationFlow = (extension) => {
       const isLockedByAnotherConnection = guardedState.mutex.isLocked() && !extension.hasFlowLock();
-      log9("should cancel invitation flow", {
+      log10("should cancel invitation flow", {
         isLockedByAnotherConnection,
         invitationType: Invitation4.Type.DELEGATED,
         triedPeers: triedPeersIds.size
       }, {
-        F: __dxlog_file12,
+        F: __dxlog_file13,
         L: 205,
         S: this,
         C: (f, a) => f(...a)
@@ -2568,11 +2620,11 @@ var InvitationsHandler = class {
             return;
           }
           connectionCtx.onDispose(async () => {
-            log9("extension disposed", {
+            log10("extension disposed", {
               admitted,
               currentState: guardedState.current.state
             }, {
-              F: __dxlog_file12,
+              F: __dxlog_file13,
               L: 233,
               S: this,
               C: (f, a) => f(...a)
@@ -2587,10 +2639,10 @@ var InvitationsHandler = class {
           scheduleTask3(connectionCtx, async () => {
             const traceId = PublicKey7.random().toHex();
             try {
-              log9.trace("dxos.sdk.invitations-handler.guest.onOpen", trace5.begin({
+              log10.trace("dxos.sdk.invitations-handler.guest.onOpen", trace5.begin({
                 id: traceId
               }), {
-                F: __dxlog_file12,
+                F: __dxlog_file13,
                 L: 245,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2599,19 +2651,19 @@ var InvitationsHandler = class {
                 guardedState.set(extension, Invitation4.State.TIMEOUT);
                 extensionCtx.close();
               }, timeout);
-              log9("connected", {
+              log10("connected", {
                 ...protocol.toJSON()
               }, {
-                F: __dxlog_file12,
+                F: __dxlog_file13,
                 L: 256,
                 S: this,
                 C: (f, a) => f(...a)
               });
               guardedState.set(extension, Invitation4.State.CONNECTED);
-              log9("introduce", {
+              log10("introduce", {
                 ...protocol.toJSON()
               }, {
-                F: __dxlog_file12,
+                F: __dxlog_file13,
                 L: 260,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2620,11 +2672,11 @@ var InvitationsHandler = class {
                 invitationId: invitation.invitationId,
                 ...protocol.createIntroduction()
               });
-              log9("introduce response", {
+              log10("introduce response", {
                 ...protocol.toJSON(),
                 response: introductionResponse
               }, {
-                F: __dxlog_file12,
+                F: __dxlog_file13,
                 L: 265,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2642,10 +2694,10 @@ var InvitationsHandler = class {
                     break;
                 }
               }
-              log9("request admission", {
+              log10("request admission", {
                 ...protocol.toJSON()
               }, {
-                F: __dxlog_file12,
+                F: __dxlog_file13,
                 L: 291,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2654,10 +2706,10 @@ var InvitationsHandler = class {
               const admissionResponse = await extension.rpc.InvitationHostService.admit(admissionRequest);
               admitted = true;
               const result = await protocol.accept(admissionResponse, admissionRequest);
-              log9("admitted by host", {
+              log10("admitted by host", {
                 ...protocol.toJSON()
               }, {
-                F: __dxlog_file12,
+                F: __dxlog_file13,
                 L: 302,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2667,28 +2719,28 @@ var InvitationsHandler = class {
                 ...result,
                 state: Invitation4.State.SUCCESS
               });
-              log9.trace("dxos.sdk.invitations-handler.guest.onOpen", trace5.end({
+              log10.trace("dxos.sdk.invitations-handler.guest.onOpen", trace5.end({
                 id: traceId
               }), {
-                F: __dxlog_file12,
+                F: __dxlog_file13,
                 L: 308,
                 S: this,
                 C: (f, a) => f(...a)
               });
             } catch (err) {
               if (err instanceof TimeoutError) {
-                log9("timeout", {
+                log10("timeout", {
                   ...protocol.toJSON()
                 }, {
-                  F: __dxlog_file12,
+                  F: __dxlog_file13,
                   L: 311,
                   S: this,
                   C: (f, a) => f(...a)
                 });
                 guardedState.set(extension, Invitation4.State.TIMEOUT);
               } else {
-                log9("auth failed", err, {
-                  F: __dxlog_file12,
+                log10("auth failed", err, {
+                  F: __dxlog_file13,
                   L: 314,
                   S: this,
                   C: (f, a) => f(...a)
@@ -2696,11 +2748,11 @@ var InvitationsHandler = class {
                 guardedState.error(extension, err);
               }
               extensionCtx.close(err);
-              log9.trace("dxos.sdk.invitations-handler.guest.onOpen", trace5.error({
+              log10.trace("dxos.sdk.invitations-handler.guest.onOpen", trace5.error({
                 id: traceId,
                 error: err
               }), {
-                F: __dxlog_file12,
+                F: __dxlog_file13,
                 L: 318,
                 S: this,
                 C: (f, a) => f(...a)
@@ -2713,18 +2765,18 @@ var InvitationsHandler = class {
             return;
           }
           if (err instanceof TimeoutError) {
-            log9("timeout", {
+            log10("timeout", {
               ...protocol.toJSON()
             }, {
-              F: __dxlog_file12,
+              F: __dxlog_file13,
               L: 327,
               S: this,
               C: (f, a) => f(...a)
             });
             guardedState.set(extension, Invitation4.State.TIMEOUT);
           } else {
-            log9("auth failed", err, {
-              F: __dxlog_file12,
+            log10("auth failed", err, {
+              F: __dxlog_file13,
               L: 330,
               S: this,
               C: (f, a) => f(...a)
@@ -2742,7 +2794,7 @@ var InvitationsHandler = class {
         await ctx.dispose();
       } else {
         invariant9(invitation.swarmKey, void 0, {
-          F: __dxlog_file12,
+          F: __dxlog_file13,
           L: 345,
           S: this,
           A: [
@@ -2836,16 +2888,29 @@ var InvitationsHandler = class {
     };
   }
   _logStateUpdate(invitation, actor, newState) {
-    log9("invitation state update", {
-      actor: actor?.constructor.name,
-      newState: stateToString(newState),
-      oldState: stateToString(invitation.state)
-    }, {
-      F: __dxlog_file12,
-      L: 438,
-      S: this,
-      C: (f, a) => f(...a)
-    });
+    if (this._isNotTerminal(newState)) {
+      log10("invitation state update", {
+        actor: actor?.constructor.name,
+        newState: stateToString(newState),
+        oldState: stateToString(invitation.state)
+      }, {
+        F: __dxlog_file13,
+        L: 439,
+        S: this,
+        C: (f, a) => f(...a)
+      });
+    } else {
+      log10.info("invitation state update", {
+        actor: actor?.constructor.name,
+        newState: stateToString(newState),
+        oldState: stateToString(invitation.state)
+      }, {
+        F: __dxlog_file13,
+        L: 445,
+        S: this,
+        C: (f, a) => f(...a)
+      });
+    }
   }
   _isNotTerminal(currentState) {
     return ![
@@ -2858,17 +2923,17 @@ var InvitationsHandler = class {
   }
   async _handleGuestOtpAuth(extension, setState, authenticated, options) {
     for (let attempt = 1; attempt <= MAX_OTP_ATTEMPTS; attempt++) {
-      log9("guest waiting for authentication code...", void 0, {
-        F: __dxlog_file12,
-        L: 462,
+      log10("guest waiting for authentication code...", void 0, {
+        F: __dxlog_file13,
+        L: 470,
         S: this,
         C: (f, a) => f(...a)
       });
       setState(Invitation4.State.READY_FOR_AUTHENTICATION);
       const authCode = await authenticated.wait(options);
-      log9("sending authentication request", void 0, {
-        F: __dxlog_file12,
-        L: 466,
+      log10("sending authentication request", void 0, {
+        F: __dxlog_file13,
+        L: 474,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -2883,11 +2948,11 @@ var InvitationsHandler = class {
         if (attempt === MAX_OTP_ATTEMPTS) {
           throw new Error(`Maximum retry attempts: ${MAX_OTP_ATTEMPTS}`);
         } else {
-          log9("retrying invalid code", {
+          log10("retrying invalid code", {
             attempt
           }, {
-            F: __dxlog_file12,
-            L: 477,
+            F: __dxlog_file13,
+            L: 485,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -2903,9 +2968,9 @@ var InvitationsHandler = class {
     if (introductionResponse.challenge == null) {
       throw new Error("challenge missing in the introduction");
     }
-    log9("sending authentication request", void 0, {
-      F: __dxlog_file12,
-      L: 496,
+    log10("sending authentication request", void 0, {
+      F: __dxlog_file13,
+      L: 504,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3025,14 +3090,14 @@ var InvitationsServiceImpl = class {
 };
 
 // packages/sdk/client-services/src/packlets/invitations/space-invitation-protocol.ts
-import { createAdmissionCredentials, createCancelDelegatedSpaceInvitationCredential, createDelegatedSpaceInvitationCredential, getCredentialAssertion as getCredentialAssertion2 } from "@dxos/credentials";
+import { createCancelDelegatedSpaceInvitationCredential, createDelegatedSpaceInvitationCredential, getCredentialAssertion as getCredentialAssertion2 } from "@dxos/credentials";
 import { writeMessages as writeMessages2 } from "@dxos/feed-store";
 import { invariant as invariant10 } from "@dxos/invariant";
-import { log as log10 } from "@dxos/log";
+import { log as log11 } from "@dxos/log";
 import { AlreadyJoinedError as AlreadyJoinedError2, AuthorizationError, InvalidInvitationError, SpaceNotFoundError } from "@dxos/protocols";
 import { Invitation as Invitation5 } from "@dxos/protocols/proto/dxos/client/services";
 import { SpaceMember as SpaceMember2 } from "@dxos/protocols/proto/dxos/halo/credentials";
-var __dxlog_file13 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/space-invitation-protocol.ts";
+var __dxlog_file14 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/space-invitation-protocol.ts";
 var SpaceInvitationProtocol = class {
   constructor(_spaceManager, _signingContext, _keyring, _spaceKey) {
     this._spaceManager = _spaceManager;
@@ -3066,79 +3131,43 @@ var SpaceInvitationProtocol = class {
     };
   }
   async admit(invitation, request, guestProfile) {
-    invariant10(this._spaceKey, void 0, {
-      F: __dxlog_file13,
-      L: 76,
-      S: this,
-      A: [
-        "this._spaceKey",
-        ""
-      ]
-    });
-    const space = this._spaceManager.spaces.get(this._spaceKey);
-    invariant10(space, void 0, {
-      F: __dxlog_file13,
-      L: 78,
-      S: this,
-      A: [
-        "space",
-        ""
-      ]
-    });
-    invariant10(request.space, void 0, {
-      F: __dxlog_file13,
-      L: 80,
+    invariant10(this._spaceKey && request.space, void 0, {
+      F: __dxlog_file14,
+      L: 74,
       S: this,
       A: [
-        "request.space",
+        "this._spaceKey && request.space",
         ""
       ]
     });
-    const { identityKey, deviceKey } = request.space;
-    if (space.inner.spaceState.getMemberRole(identityKey) !== SpaceMember2.Role.REMOVED) {
-      throw new AlreadyJoinedError2();
-    }
-    log10("writing guest credentials", {
+    log11("writing guest credentials", {
       host: this._signingContext.deviceKey,
-      guest: deviceKey
+      guest: request.space.deviceKey
     }, {
-      F: __dxlog_file13,
-      L: 87,
+      F: __dxlog_file14,
+      L: 75,
       S: this,
       C: (f, a) => f(...a)
     });
-    const credentials = await createAdmissionCredentials(this._signingContext.credentialSigner, identityKey, space.key, space.inner.genesisFeedKey, invitation.role ?? SpaceMember2.Role.ADMIN, space.inner.spaceState.membershipChainHeads, guestProfile, invitation.delegationCredentialId);
-    invariant10(credentials[0].credential, void 0, {
-      F: __dxlog_file13,
-      L: 101,
-      S: this,
-      A: [
-        "credentials[0].credential",
-        ""
-      ]
-    });
-    const spaceMemberCredential = credentials[0].credential.credential;
-    invariant10(getCredentialAssertion2(spaceMemberCredential)["@type"] === "dxos.halo.credentials.SpaceMember", void 0, {
-      F: __dxlog_file13,
-      L: 103,
-      S: this,
-      A: [
-        "getCredentialAssertion(spaceMemberCredential)['@type'] === 'dxos.halo.credentials.SpaceMember'",
-        ""
-      ]
+    const spaceMemberCredential = await this._spaceManager.admitMember({
+      spaceKey: this._spaceKey,
+      identityKey: request.space.identityKey,
+      role: invitation.role ?? SpaceMember2.Role.ADMIN,
+      profile: guestProfile,
+      delegationCredentialId: invitation.delegationCredentialId
     });
-    await writeMessages2(space.inner.controlPipeline.writer, credentials);
+    const space = this._spaceManager.spaces.get(this._spaceKey);
     return {
       space: {
         credential: spaceMemberCredential,
-        controlTimeframe: space.inner.controlPipeline.state.timeframe
+        controlTimeframe: space?.inner.controlPipeline.state.timeframe
       }
     };
   }
   async delegate(invitation) {
     invariant10(this._spaceKey, void 0, {
-      F: __dxlog_file13,
-      L: 116,
+      F: __dxlog_file14,
+      L: 95,
       S: this,
       A: [
         "this._spaceKey",
@@ -3147,8 +3176,8 @@ var SpaceInvitationProtocol = class {
     });
     const space = this._spaceManager.spaces.get(this._spaceKey);
     invariant10(space, void 0, {
-      F: __dxlog_file13,
-      L: 118,
+      F: __dxlog_file14,
+      L: 97,
       S: this,
       A: [
         "space",
@@ -3157,8 +3186,8 @@ var SpaceInvitationProtocol = class {
     });
     if (invitation.authMethod === Invitation5.AuthMethod.KNOWN_PUBLIC_KEY) {
       invariant10(invitation.guestKeypair?.publicKey, void 0, {
-        F: __dxlog_file13,
-        L: 120,
+        F: __dxlog_file14,
+        L: 99,
         S: this,
         A: [
           "invitation.guestKeypair?.publicKey",
@@ -3166,12 +3195,12 @@ var SpaceInvitationProtocol = class {
         ]
       });
     }
-    log10("writing delegate space invitation", {
+    log11("writing delegate space invitation", {
       host: this._signingContext.deviceKey,
       id: invitation.invitationId
     }, {
-      F: __dxlog_file13,
-      L: 123,
+      F: __dxlog_file14,
+      L: 102,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3185,8 +3214,8 @@ var SpaceInvitationProtocol = class {
       guestKey: invitation.authMethod === Invitation5.AuthMethod.KNOWN_PUBLIC_KEY ? invitation.guestKeypair.publicKey : void 0
     });
     invariant10(credential.credential, void 0, {
-      F: __dxlog_file13,
-      L: 143,
+      F: __dxlog_file14,
+      L: 122,
       S: this,
       A: [
         "credential.credential",
@@ -3200,8 +3229,8 @@ var SpaceInvitationProtocol = class {
   }
   async cancelDelegation(invitation) {
     invariant10(this._spaceKey, void 0, {
-      F: __dxlog_file13,
-      L: 149,
+      F: __dxlog_file14,
+      L: 128,
       S: this,
       A: [
         "this._spaceKey",
@@ -3209,8 +3238,8 @@ var SpaceInvitationProtocol = class {
       ]
     });
     invariant10(invitation.type === Invitation5.Type.DELEGATED && invitation.delegationCredentialId, void 0, {
-      F: __dxlog_file13,
-      L: 150,
+      F: __dxlog_file14,
+      L: 129,
       S: this,
       A: [
         "invitation.type === Invitation.Type.DELEGATED && invitation.delegationCredentialId",
@@ -3219,27 +3248,27 @@ var SpaceInvitationProtocol = class {
     });
     const space = this._spaceManager.spaces.get(this._spaceKey);
     invariant10(space, void 0, {
-      F: __dxlog_file13,
-      L: 152,
+      F: __dxlog_file14,
+      L: 131,
       S: this,
       A: [
         "space",
         ""
       ]
     });
-    log10("cancelling delegated space invitation", {
+    log11("cancelling delegated space invitation", {
       host: this._signingContext.deviceKey,
       id: invitation.invitationId
     }, {
-      F: __dxlog_file13,
-      L: 154,
+      F: __dxlog_file14,
+      L: 133,
       S: this,
       C: (f, a) => f(...a)
     });
     const credential = await createCancelDelegatedSpaceInvitationCredential(this._signingContext.credentialSigner, space.key, invitation.delegationCredentialId);
     invariant10(credential.credential, void 0, {
-      F: __dxlog_file13,
-      L: 161,
+      F: __dxlog_file14,
+      L: 140,
       S: this,
       A: [
         "credential.credential",
@@ -3277,8 +3306,8 @@ var SpaceInvitationProtocol = class {
   }
   async accept(response) {
     invariant10(response.space, void 0, {
-      F: __dxlog_file13,
-      L: 196,
+      F: __dxlog_file14,
+      L: 175,
       S: this,
       A: [
         "response.space",
@@ -3288,8 +3317,8 @@ var SpaceInvitationProtocol = class {
     const { credential, controlTimeframe, dataTimeframe } = response.space;
     const assertion = getCredentialAssertion2(credential);
     invariant10(assertion["@type"] === "dxos.halo.credentials.SpaceMember", "Invalid credential", {
-      F: __dxlog_file13,
-      L: 199,
+      F: __dxlog_file14,
+      L: 178,
       S: this,
       A: [
         "assertion['@type'] === 'dxos.halo.credentials.SpaceMember'",
@@ -3297,8 +3326,8 @@ var SpaceInvitationProtocol = class {
       ]
     });
     invariant10(credential.subject.id.equals(this._signingContext.identityKey), void 0, {
-      F: __dxlog_file13,
-      L: 200,
+      F: __dxlog_file14,
+      L: 179,
       S: this,
       A: [
         "credential.subject.id.equals(this._signingContext.identityKey)",
@@ -3322,17 +3351,17 @@ var SpaceInvitationProtocol = class {
 };
 
 // packages/sdk/client-services/src/packlets/invitations/invitations-manager.ts
-import { Event as Event3, PushStream, TimeoutError as TimeoutError2, Trigger as Trigger5 } from "@dxos/async";
+import { Event as Event3, PushStream, TimeoutError as TimeoutError2, Trigger as Trigger6 } from "@dxos/async";
 import { AuthenticatingInvitation, AUTHENTICATION_CODE_LENGTH, CancellableInvitation, INVITATION_TIMEOUT as INVITATION_TIMEOUT2 } from "@dxos/client-protocol";
 import { Context as Context6 } from "@dxos/context";
 import { generatePasscode } from "@dxos/credentials";
 import { hasInvitationExpired } from "@dxos/echo-pipeline";
 import { invariant as invariant11 } from "@dxos/invariant";
 import { PublicKey as PublicKey8 } from "@dxos/keys";
-import { log as log11 } from "@dxos/log";
+import { log as log12 } from "@dxos/log";
 import { Invitation as Invitation6 } from "@dxos/protocols/proto/dxos/client/services";
 import { SpaceMember as SpaceMember3 } from "@dxos/protocols/proto/dxos/halo/credentials";
-var __dxlog_file14 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/invitations-manager.ts";
+var __dxlog_file15 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/invitations-manager.ts";
 var InvitationsManager = class {
   constructor(_invitationsHandler, _getHandler, _metadataStore) {
     this._invitationsHandler = _invitationsHandler;
@@ -3374,8 +3403,8 @@ var InvitationsManager = class {
     try {
       await this._persistIfRequired(handler, stream, invitation);
     } catch (err) {
-      log11.catch(err, void 0, {
-        F: __dxlog_file14,
+      log12.catch(err, void 0, {
+        F: __dxlog_file15,
         L: 82,
         S: this,
         C: (f, a) => f(...a)
@@ -3398,7 +3427,7 @@ var InvitationsManager = class {
       const freshInvitations = persistentInvitations.filter((invitation) => !hasInvitationExpired(invitation));
       const loadTasks = freshInvitations.map((persistentInvitation) => {
         invariant11(!this._createInvitations.get(persistentInvitation.invitationId), "invitation already exists", {
-          F: __dxlog_file14,
+          F: __dxlog_file15,
           L: 103,
           S: this,
           A: [
@@ -3416,8 +3445,8 @@ var InvitationsManager = class {
         invitations: cInvitations.map((invitation) => invitation.get())
       };
     } catch (err) {
-      log11.catch(err, void 0, {
-        F: __dxlog_file14,
+      log12.catch(err, void 0, {
+        F: __dxlog_file15,
         L: 110,
         S: this,
         C: (f, a) => f(...a)
@@ -3448,14 +3477,14 @@ var InvitationsManager = class {
     return invitation;
   }
   async authenticate({ invitationId, authCode }) {
-    log11("authenticating...", void 0, {
-      F: __dxlog_file14,
+    log12("authenticating...", void 0, {
+      F: __dxlog_file15,
       L: 140,
       S: this,
       C: (f, a) => f(...a)
     });
     invariant11(invitationId, void 0, {
-      F: __dxlog_file14,
+      F: __dxlog_file15,
       L: 141,
       S: this,
       A: [
@@ -3465,10 +3494,10 @@ var InvitationsManager = class {
     });
     const observable = this._acceptInvitations.get(invitationId);
     if (!observable) {
-      log11.warn("invalid invitation", {
+      log12.warn("invalid invitation", {
         invitationId
       }, {
-        F: __dxlog_file14,
+        F: __dxlog_file15,
         L: 144,
         S: this,
         C: (f, a) => f(...a)
@@ -3478,16 +3507,16 @@ var InvitationsManager = class {
     }
   }
   async cancelInvitation({ invitationId }) {
-    log11("cancelInvitation...", {
+    log12("cancelInvitation...", {
       invitationId
     }, {
-      F: __dxlog_file14,
+      F: __dxlog_file15,
       L: 151,
       S: this,
       C: (f, a) => f(...a)
     });
     invariant11(invitationId, void 0, {
-      F: __dxlog_file14,
+      F: __dxlog_file15,
       L: 152,
       S: this,
       A: [
@@ -3561,12 +3590,15 @@ var InvitationsManager = class {
         stream.error(err);
         void ctx.dispose();
       }
+    }, {
+      F: __dxlog_file15,
+      L: 234
     });
     ctx.onDispose(() => {
-      log11("complete", {
+      log12("complete", {
         ...handler.toJSON()
       }, {
-        F: __dxlog_file14,
+        F: __dxlog_file15,
         L: 241,
         S: this,
         C: (f, a) => f(...a)
@@ -3591,15 +3623,15 @@ var InvitationsManager = class {
     };
   }
   _createObservableAcceptingInvitation(handler, initialState) {
-    const otpEnteredTrigger = new Trigger5();
+    const otpEnteredTrigger = new Trigger6();
     const stream = new PushStream();
     const ctx = new Context6({
       onError: (err) => {
         if (err instanceof TimeoutError2) {
-          log11("timeout", {
+          log12("timeout", {
             ...handler.toJSON()
           }, {
-            F: __dxlog_file14,
+            F: __dxlog_file15,
             L: 261,
             S: this,
             C: (f, a) => f(...a)
@@ -3609,8 +3641,8 @@ var InvitationsManager = class {
             state: Invitation6.State.TIMEOUT
           });
         } else {
-          log11.warn("auth failed", err, {
-            F: __dxlog_file14,
+          log12.warn("auth failed", err, {
+            F: __dxlog_file15,
             L: 264,
             S: this,
             C: (f, a) => f(...a)
@@ -3622,12 +3654,15 @@ var InvitationsManager = class {
         }
         void ctx.dispose();
       }
+    }, {
+      F: __dxlog_file15,
+      L: 258
     });
     ctx.onDispose(() => {
-      log11("complete", {
+      log12("complete", {
         ...handler.toJSON()
       }, {
-        F: __dxlog_file14,
+        F: __dxlog_file15,
         L: 271,
         S: this,
         C: (f, a) => f(...a)
@@ -3671,8 +3706,8 @@ var InvitationsManager = class {
     try {
       await this._metadataStore.removeInvitation(invitation.invitationId);
     } catch (err) {
-      log11.catch(err, void 0, {
-        F: __dxlog_file14,
+      log12.catch(err, void 0, {
+        F: __dxlog_file15,
         L: 307,
         S: this,
         C: (f, a) => f(...a)
@@ -3687,15 +3722,15 @@ var InvitationsManager = class {
 };
 
 // packages/sdk/client-services/src/packlets/spaces/data-space.ts
-import { Event as Event6, Mutex as Mutex2, scheduleTask as scheduleTask5, sleep as sleep2, synchronized, trackLeaks } from "@dxos/async";
+import { Event as Event6, Mutex as Mutex2, scheduleTask as scheduleTask5, sleep as sleep3, synchronized, trackLeaks } from "@dxos/async";
 import { AUTH_TIMEOUT as AUTH_TIMEOUT2 } from "@dxos/client-protocol";
-import { Context as Context8, ContextDisposedError as ContextDisposedError3, cancelWithContext as cancelWithContext5 } from "@dxos/context";
+import { Context as Context8, ContextDisposedError as ContextDisposedError3, cancelWithContext as cancelWithContext4 } from "@dxos/context";
 import { timed, warnAfterTimeout } from "@dxos/debug";
 import { createMappedFeedWriter } from "@dxos/echo-pipeline";
-import { SpaceDocVersion } from "@dxos/echo-protocol";
+import { SpaceDocVersion as SpaceDocVersion2 } from "@dxos/echo-protocol";
 import { failedInvariant } from "@dxos/invariant";
 import { PublicKey as PublicKey10 } from "@dxos/keys";
-import { log as log14 } from "@dxos/log";
+import { log as log15 } from "@dxos/log";
 import { CancelledError, SystemError } from "@dxos/protocols";
 import { SpaceState as SpaceState2 } from "@dxos/protocols/proto/dxos/client/services";
 import { AdmittedFeed as AdmittedFeed3, SpaceMember as SpaceMember4 } from "@dxos/protocols/proto/dxos/halo/credentials";
@@ -3749,22 +3784,19 @@ var AutomergeSpaceState = class extends Resource2 {
 };
 
 // packages/sdk/client-services/src/packlets/spaces/epoch-migrations.ts
-import { asyncTimeout as asyncTimeout2 } from "@dxos/async";
-import { next as am } from "@dxos/automerge/automerge";
-import { cancelWithContext as cancelWithContext4 } from "@dxos/context";
 import { convertLegacyReferences, convertLegacySpaceRootDoc, findInlineObjectOfType, migrateDocument } from "@dxos/echo-db";
-import { AutomergeDocumentLoaderImpl } from "@dxos/echo-pipeline";
+import { SpaceDocVersion } from "@dxos/echo-protocol";
 import { TYPE_PROPERTIES } from "@dxos/echo-schema";
 import { invariant as invariant12 } from "@dxos/invariant";
-import { log as log12 } from "@dxos/log";
+import { log as log13 } from "@dxos/log";
 import { CreateEpochRequest } from "@dxos/protocols/proto/dxos/client/services";
-import { assignDeep } from "@dxos/util";
-var __dxlog_file15 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/epoch-migrations.ts";
+var __dxlog_file16 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/epoch-migrations.ts";
+var LOAD_DOC_TIMEOUT = 1e4;
 var runEpochMigration = async (ctx, context) => {
   switch (context.migration) {
     case CreateEpochRequest.Migration.INIT_AUTOMERGE: {
-      const document = context.repo.create();
-      await context.repo.flush();
+      const document = context.echoHost.createDoc();
+      await context.echoHost.flush();
       return {
         newRoot: document.url
       };
@@ -3773,77 +3805,88 @@ var runEpochMigration = async (ctx, context) => {
       if (!context.currentRoot) {
         throw new Error("Space does not have an automerge root");
       }
-      const rootHandle = context.repo.find(context.currentRoot);
-      await cancelWithContext4(ctx, asyncTimeout2(rootHandle.whenReady(), 1e4));
-      const newRoot = context.repo.create(rootHandle.docSync());
-      await context.repo.flush();
+      const rootHandle = await context.echoHost.loadDoc(ctx, context.currentRoot, {
+        timeout: LOAD_DOC_TIMEOUT
+      });
+      const newRoot = context.echoHost.createDoc(rootHandle.docSync());
+      await context.echoHost.flush();
       return {
         newRoot: newRoot.url
       };
     }
     case CreateEpochRequest.Migration.FRAGMENT_AUTOMERGE_ROOT: {
-      log12.info("Fragmenting", void 0, {
-        F: __dxlog_file15,
-        L: 63,
+      log13.info("Fragmenting", void 0, {
+        F: __dxlog_file16,
+        L: 64,
         S: void 0,
         C: (f, a) => f(...a)
       });
       const currentRootUrl = context.currentRoot;
-      const rootHandle = context.repo.find(currentRootUrl);
-      await cancelWithContext4(ctx, asyncTimeout2(rootHandle.whenReady(), 1e4));
+      const rootHandle = await context.echoHost.loadDoc(ctx, currentRootUrl, {
+        timeout: LOAD_DOC_TIMEOUT
+      });
       const objects = Object.entries(rootHandle.docSync().objects);
       const properties = findInlineObjectOfType(rootHandle.docSync(), TYPE_PROPERTIES);
       const otherObjects = objects.filter(([key]) => key !== properties?.[0]);
       invariant12(properties, "Properties not found", {
-        F: __dxlog_file15,
-        L: 73,
+        F: __dxlog_file16,
+        L: 75,
         S: void 0,
         A: [
           "properties",
           "'Properties not found'"
         ]
       });
-      const newSpaceDoc = {
+      const newRoot = context.echoHost.createDoc({
         ...rootHandle.docSync(),
         objects: Object.fromEntries([
           properties
         ])
-      };
-      const newRoot = context.repo.create(newSpaceDoc);
+      });
       invariant12(typeof newRoot.url === "string" && newRoot.url.length > 0, void 0, {
-        F: __dxlog_file15,
-        L: 78,
+        F: __dxlog_file16,
+        L: 82,
         S: void 0,
         A: [
           "typeof newRoot.url === 'string' && newRoot.url.length > 0",
           ""
         ]
       });
-      const docLoader = new AutomergeDocumentLoaderImpl(context.spaceId, context.repo, context.spaceKey);
-      await docLoader.loadSpaceRootDocHandle(ctx, {
-        rootUrl: newRoot.url
-      });
-      otherObjects.forEach(([key, value]) => {
-        const handle = docLoader.createDocumentForObject(key);
-        handle.change((doc) => {
-          assignDeep(doc, [
-            "objects",
-            key
-          ], value);
+      const newLinks = [];
+      for (const [id, objData] of otherObjects) {
+        const handle = context.echoHost.createDoc({
+          version: SpaceDocVersion.CURRENT,
+          access: {
+            spaceKey: context.spaceKey.toHex()
+          },
+          objects: {
+            [id]: objData
+          }
         });
+        newLinks.push([
+          id,
+          handle.url
+        ]);
+      }
+      newRoot.change((doc) => {
+        doc.links ??= {};
+        for (const [id, url] of newLinks) {
+          doc.links[id] = url;
+        }
       });
-      await context.repo.flush();
+      await context.echoHost.flush();
       return {
         newRoot: newRoot.url
       };
     }
     case CreateEpochRequest.Migration.MIGRATE_REFERENCES_TO_DXN: {
       const currentRootUrl = context.currentRoot;
-      const rootHandle = context.repo.find(currentRootUrl);
-      await cancelWithContext4(ctx, asyncTimeout2(rootHandle.whenReady(), 1e4));
+      const rootHandle = await context.echoHost.loadDoc(ctx, currentRootUrl, {
+        timeout: LOAD_DOC_TIMEOUT
+      });
       invariant12(rootHandle.docSync(), "Root doc not found", {
-        F: __dxlog_file15,
-        L: 100,
+        F: __dxlog_file16,
+        L: 115,
         S: void 0,
         A: [
           "rootHandle.docSync()",
@@ -3852,40 +3895,59 @@ var runEpochMigration = async (ctx, context) => {
       });
       const newRootContent = await convertLegacySpaceRootDoc(structuredClone(rootHandle.docSync()));
       for (const [id, url] of Object.entries(newRootContent.links ?? {})) {
-        const handle = context.repo.find(url);
-        await cancelWithContext4(ctx, asyncTimeout2(handle.whenReady(), 1e4));
-        invariant12(handle.docSync(), "Doc not found", {
-          F: __dxlog_file15,
-          L: 107,
-          S: void 0,
-          A: [
-            "handle.docSync()",
-            "'Doc not found'"
-          ]
-        });
-        const newDoc = await convertLegacyReferences(structuredClone(handle.docSync()));
-        const migratedDoc = migrateDocument(handle.docSync(), newDoc);
-        const newHandle = context.repo.import(am.save(migratedDoc));
-        newRootContent.links[id] = newHandle.url;
+        try {
+          const handle = await context.echoHost.loadDoc(ctx, url, {
+            timeout: LOAD_DOC_TIMEOUT
+          });
+          invariant12(handle.docSync(), void 0, {
+            F: __dxlog_file16,
+            L: 122,
+            S: void 0,
+            A: [
+              "handle.docSync()",
+              ""
+            ]
+          });
+          const newDoc = await convertLegacyReferences(structuredClone(handle.docSync()));
+          const migratedDoc = migrateDocument(handle.docSync(), newDoc);
+          const newHandle = context.echoHost.createDoc(migratedDoc, {
+            preserveHistory: true
+          });
+          newRootContent.links[id] = newHandle.url;
+        } catch (err) {
+          log13.warn("Failed to migrate reference", {
+            id,
+            url,
+            error: err
+          }, {
+            F: __dxlog_file16,
+            L: 128,
+            S: void 0,
+            C: (f, a) => f(...a)
+          });
+          delete newRootContent.links[id];
+        }
       }
       const migratedRoot = migrateDocument(rootHandle.docSync(), newRootContent);
-      const newRoot = context.repo.import(am.save(migratedRoot));
-      await context.repo.flush();
+      const newRoot = context.echoHost.createDoc(migratedRoot, {
+        preserveHistory: true
+      });
+      await context.echoHost.flush();
       return {
         newRoot: newRoot.url
       };
     }
     case CreateEpochRequest.Migration.REPLACE_AUTOMERGE_ROOT: {
       invariant12(context.newAutomergeRoot, void 0, {
-        F: __dxlog_file15,
-        L: 124,
+        F: __dxlog_file16,
+        L: 143,
         S: void 0,
         A: [
           "context.newAutomergeRoot",
           ""
         ]
       });
-      await context.repo.flush();
+      await context.echoHost.flush();
       return {
         newRoot: context.newAutomergeRoot
       };
@@ -3895,22 +3957,25 @@ var runEpochMigration = async (ctx, context) => {
 };
 
 // packages/sdk/client-services/src/packlets/spaces/notarization-plugin.ts
-import { DeferredTask, Event as Event5, scheduleTask as scheduleTask4, sleep, TimeoutError as TimeoutError3, Trigger as Trigger6 } from "@dxos/async";
+import { DeferredTask, Event as Event5, scheduleTask as scheduleTask4, sleep as sleep2, TimeoutError as TimeoutError3, Trigger as Trigger7 } from "@dxos/async";
 import { Context as Context7, rejectOnDispose } from "@dxos/context";
 import { invariant as invariant13 } from "@dxos/invariant";
 import { PublicKey as PublicKey9 } from "@dxos/keys";
-import { log as log13 } from "@dxos/log";
+import { log as log14 } from "@dxos/log";
 import { schema as schema4 } from "@dxos/protocols";
 import { RpcExtension as RpcExtension3 } from "@dxos/teleport";
 import { ComplexMap as ComplexMap2, ComplexSet as ComplexSet4, entry } from "@dxos/util";
-var __dxlog_file16 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/notarization-plugin.ts";
+var __dxlog_file17 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/notarization-plugin.ts";
 var DEFAULT_RETRY_TIMEOUT = 1e3;
 var DEFAULT_SUCCESS_DELAY = 1e3;
 var DEFAULT_NOTARIZE_TIMEOUT = 1e4;
 var WRITER_NOT_SET_ERROR_CODE = "WRITER_NOT_SET";
 var NotarizationPlugin = class {
   constructor() {
-    this._ctx = new Context7();
+    this._ctx = new Context7(void 0, {
+      F: __dxlog_file17,
+      L: 62
+    });
     this._extensionOpened = new Event5();
     this._extensions = /* @__PURE__ */ new Set();
     this._processedCredentials = new ComplexSet4(PublicKey9.hash);
@@ -3928,16 +3993,16 @@ var NotarizationPlugin = class {
   * Request credentials to be notarized.
   */
   async notarize({ ctx: opCtx, credentials, timeout = DEFAULT_NOTARIZE_TIMEOUT, retryTimeout = DEFAULT_RETRY_TIMEOUT, successDelay = DEFAULT_SUCCESS_DELAY }) {
-    log13("notarize", {
+    log14("notarize", {
       credentials
     }, {
-      F: __dxlog_file16,
+      F: __dxlog_file17,
       L: 90,
       S: this,
       C: (f, a) => f(...a)
     });
     invariant13(credentials.every((credential) => credential.id), "Credentials must have an id", {
-      F: __dxlog_file16,
+      F: __dxlog_file17,
       L: 91,
       S: this,
       A: [
@@ -3945,13 +4010,13 @@ var NotarizationPlugin = class {
         "'Credentials must have an id'"
       ]
     });
-    const errors = new Trigger6();
+    const errors = new Trigger7();
     const ctx = this._ctx.derive({
       onError: (err) => {
-        log13.warn("Notarization error", {
+        log14.warn("Notarization error", {
           err
         }, {
-          F: __dxlog_file16,
+          F: __dxlog_file17,
           L: 99,
           S: this,
           C: (f, a) => f(...a)
@@ -3963,11 +4028,11 @@ var NotarizationPlugin = class {
     opCtx?.onDispose(() => ctx.dispose());
     if (timeout !== 0) {
       scheduleTask4(ctx, () => {
-        log13.warn("Notarization timeout", {
+        log14.warn("Notarization timeout", {
           timeout,
           peers: Array.from(this._extensions).map((extension) => extension.remotePeerId)
         }, {
-          F: __dxlog_file16,
+          F: __dxlog_file17,
           L: 111,
           S: this,
           C: (f, a) => f(...a)
@@ -3987,10 +4052,10 @@ var NotarizationPlugin = class {
           ...this._extensions
         ].find((peer2) => !peersTried.has(peer2));
         if (!peer) {
-          log13.info("Exhausted all peers to notarize with", {
+          log14.info("Exhausted all peers to notarize with", {
             retryIn: retryTimeout
           }, {
-            F: __dxlog_file16,
+            F: __dxlog_file17,
             L: 136,
             S: this,
             C: (f, a) => f(...a)
@@ -4000,11 +4065,11 @@ var NotarizationPlugin = class {
           return;
         }
         peersTried.add(peer);
-        log13("try notarizing", {
+        log14("try notarizing", {
           peer: peer.localPeerId,
           credentialId: credentials.map((credential) => credential.id)
         }, {
-          F: __dxlog_file16,
+          F: __dxlog_file17,
           L: 143,
           S: this,
           C: (f, a) => f(...a)
@@ -4012,17 +4077,17 @@ var NotarizationPlugin = class {
         await peer.rpc.NotarizationService.notarize({
           credentials: credentials.filter((credential) => !this._processedCredentials.has(credential.id))
         });
-        log13("success", void 0, {
-          F: __dxlog_file16,
+        log14("success", void 0, {
+          F: __dxlog_file17,
           L: 147,
           S: this,
           C: (f, a) => f(...a)
         });
-        await sleep(successDelay);
+        await sleep2(successDelay);
       } catch (err) {
         if (!ctx.disposed && !err.message.includes(WRITER_NOT_SET_ERROR_CODE)) {
-          log13.info("error notarizing (recoverable)", err, {
-            F: __dxlog_file16,
+          log14.info("error notarizing (recoverable)", err, {
+            F: __dxlog_file17,
             L: 151,
             S: this,
             C: (f, a) => f(...a)
@@ -4039,8 +4104,8 @@ var NotarizationPlugin = class {
         allNotarized,
         errors.wait()
       ]);
-      log13("done", void 0, {
-        F: __dxlog_file16,
+      log14("done", void 0, {
+        F: __dxlog_file17,
         L: 162,
         S: this,
         C: (f, a) => f(...a)
@@ -4062,7 +4127,7 @@ var NotarizationPlugin = class {
   }
   setWriter(writer) {
     invariant13(!this._writer, "Writer already set.", {
-      F: __dxlog_file16,
+      F: __dxlog_file17,
       L: 181,
       S: this,
       A: [
@@ -4076,7 +4141,7 @@ var NotarizationPlugin = class {
     if (this._processedCredentials.has(id)) {
       return;
     }
-    await entry(this._processCredentialsTriggers, id).orInsert(new Trigger6()).value.wait();
+    await entry(this._processCredentialsTriggers, id).orInsert(new Trigger7()).value.wait();
   }
   /**
   * Requests from other peers to notarize credentials.
@@ -4087,7 +4152,7 @@ var NotarizationPlugin = class {
     }
     for (const credential of request.credentials ?? []) {
       invariant13(credential.id, "Credential must have an id", {
-        F: __dxlog_file16,
+        F: __dxlog_file17,
         L: 200,
         S: this,
         A: [
@@ -4104,10 +4169,10 @@ var NotarizationPlugin = class {
   createExtension() {
     const extension = new NotarizationTeleportExtension({
       onOpen: async () => {
-        log13("extension opened", {
+        log14("extension opened", {
           peer: extension.localPeerId
         }, {
-          F: __dxlog_file16,
+          F: __dxlog_file17,
           L: 211,
           S: this,
           C: (f, a) => f(...a)
@@ -4116,10 +4181,10 @@ var NotarizationPlugin = class {
         this._extensionOpened.emit();
       },
       onClose: async () => {
-        log13("extension closed", {
+        log14("extension closed", {
           peer: extension.localPeerId
         }, {
-          F: __dxlog_file16,
+          F: __dxlog_file17,
           L: 216,
           S: this,
           C: (f, a) => f(...a)
@@ -4236,10 +4301,13 @@ function _using_ctx() {
     }
   };
 }
-var __dxlog_file17 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/data-space.ts";
+var __dxlog_file18 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/data-space.ts";
 var DataSpace = class {
   constructor(params) {
-    this._ctx = new Context8();
+    this._ctx = new Context8(void 0, {
+      F: __dxlog_file18,
+      L: 84
+    });
     this._notarizationPlugin = new NotarizationPlugin();
     this._cache = void 0;
     // TODO(dmaretskyi): Move into Space?
@@ -4270,10 +4338,10 @@ var DataSpace = class {
     });
     this._cache = params.cache;
     this._state = params.initialState;
-    log14("new state", {
+    log15("new state", {
       state: SpaceState2[this._state]
     }, {
-      F: __dxlog_file17,
+      F: __dxlog_file18,
       L: 146,
       S: this,
       C: (f, a) => f(...a)
@@ -4328,12 +4396,15 @@ var DataSpace = class {
     await this._inner.spaceState.addCredentialProcessor(this._notarizationPlugin);
     await this._automergeSpaceState.open();
     await this._inner.spaceState.addCredentialProcessor(this._automergeSpaceState);
-    await this._inner.open(new Context8());
+    await this._inner.open(new Context8(void 0, {
+      F: __dxlog_file18,
+      L: 215
+    }));
     this._state = SpaceState2.CONTROL_ONLY;
-    log14("new state", {
+    log15("new state", {
       state: SpaceState2[this._state]
     }, {
-      F: __dxlog_file17,
+      F: __dxlog_file18,
       L: 217,
       S: this,
       C: (f, a) => f(...a)
@@ -4348,16 +4419,19 @@ var DataSpace = class {
   async _close() {
     await this._callbacks.beforeClose?.();
     this._state = SpaceState2.CLOSED;
-    log14("new state", {
+    log15("new state", {
       state: SpaceState2[this._state]
     }, {
-      F: __dxlog_file17,
+      F: __dxlog_file18,
       L: 231,
       S: this,
       C: (f, a) => f(...a)
     });
     await this._ctx.dispose();
-    this._ctx = new Context8();
+    this._ctx = new Context8(void 0, {
+      F: __dxlog_file18,
+      L: 233
+    });
     await this.authVerifier.close();
     await this._inner.close();
     await this._inner.spaceState.removeCredentialProcessor(this._automergeSpaceState);
@@ -4383,25 +4457,25 @@ var DataSpace = class {
         await this.initializeDataPipeline();
       } catch (err) {
         if (err instanceof CancelledError || err instanceof ContextDisposedError3) {
-          log14("data pipeline initialization cancelled", err, {
-            F: __dxlog_file17,
+          log15("data pipeline initialization cancelled", err, {
+            F: __dxlog_file18,
             L: 265,
             S: this,
             C: (f, a) => f(...a)
           });
           return;
         }
-        log14.error("Error initializing data pipeline", err, {
-          F: __dxlog_file17,
+        log15.error("Error initializing data pipeline", err, {
+          F: __dxlog_file18,
           L: 269,
           S: this,
           C: (f, a) => f(...a)
         });
         this._state = SpaceState2.ERROR;
-        log14("new state", {
+        log15("new state", {
           state: SpaceState2[this._state]
         }, {
-          F: __dxlog_file17,
+          F: __dxlog_file18,
           L: 271,
           S: this,
           C: (f, a) => f(...a)
@@ -4418,16 +4492,16 @@ var DataSpace = class {
       throw new SystemError("Invalid operation");
     }
     this._state = SpaceState2.INITIALIZING;
-    log14("new state", {
+    log15("new state", {
       state: SpaceState2[this._state]
     }, {
-      F: __dxlog_file17,
+      F: __dxlog_file18,
       L: 287,
       S: this,
       C: (f, a) => f(...a)
     });
     await this._initializeAndReadControlPipeline();
-    await sleep2(1);
+    await sleep3(1);
     const ready = this.stateUpdate.waitForCondition(() => this._state === SpaceState2.READY);
     this._automergeSpaceState.startProcessingRootDocs();
     await ready;
@@ -4435,10 +4509,10 @@ var DataSpace = class {
   async _enterReadyState() {
     await this._callbacks.beforeReady?.();
     this._state = SpaceState2.READY;
-    log14("new state", {
+    log15("new state", {
       state: SpaceState2[this._state]
     }, {
-      F: __dxlog_file17,
+      F: __dxlog_file18,
       L: 306,
       S: this,
       C: (f, a) => f(...a)
@@ -4453,8 +4527,8 @@ var DataSpace = class {
     });
     this.metrics.controlPipelineReady = /* @__PURE__ */ new Date();
     await this._createWritableFeeds();
-    log14("writable feeds created", void 0, {
-      F: __dxlog_file17,
+    log15("writable feeds created", void 0, {
+      F: __dxlog_file18,
       L: 322,
       S: this,
       C: (f, a) => f(...a)
@@ -4513,23 +4587,22 @@ var DataSpace = class {
     }
   }
   _onNewAutomergeRoot(rootUrl) {
-    log14("loading automerge root doc for space", {
+    log15("loading automerge root doc for space", {
       space: this.key,
       rootUrl
     }, {
-      F: __dxlog_file17,
+      F: __dxlog_file18,
       L: 388,
       S: this,
       C: (f, a) => f(...a)
     });
-    this._echoHost.replicateDocument(rootUrl);
     const handle = this._echoHost.automergeRepo.find(rootUrl);
     queueMicrotask(async () => {
       try {
         try {
           var _usingCtx = _using_ctx();
           await warnAfterTimeout(5e3, "Automerge root doc load timeout (DataSpace)", async () => {
-            await cancelWithContext5(this._ctx, handle.whenReady());
+            await cancelWithContext4(this._ctx, handle.whenReady());
           });
           if (this._ctx.disposed) {
             return;
@@ -4548,9 +4621,11 @@ var DataSpace = class {
           }
           const root = await this._echoHost.openSpaceRoot(handle.url);
           this._databaseRoot = root;
-          if (root.getVersion() !== SpaceDocVersion.CURRENT) {
-            this._state = SpaceState2.REQUIRES_MIGRATION;
-            this.stateUpdate.emit();
+          if (root.getVersion() !== SpaceDocVersion2.CURRENT) {
+            if (this._state !== SpaceState2.REQUIRES_MIGRATION) {
+              this._state = SpaceState2.REQUIRES_MIGRATION;
+              this.stateUpdate.emit();
+            }
           } else {
             if (this._state !== SpaceState2.READY) {
               await this._enterReadyState();
@@ -4565,13 +4640,13 @@ var DataSpace = class {
         if (err instanceof ContextDisposedError3) {
           return;
         }
-        log14.warn("error loading automerge root doc", {
+        log15.warn("error loading automerge root doc", {
           space: this.key,
           rootUrl,
           err
         }, {
-          F: __dxlog_file17,
-          L: 431,
+          F: __dxlog_file18,
+          L: 433,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -4599,7 +4674,7 @@ var DataSpace = class {
       return null;
     }
     const { newRoot } = await runEpochMigration(ctx, {
-      repo: this._echoHost.automergeRepo,
+      echoHost: this._echoHost,
       spaceId: this.id,
       spaceKey: this.key,
       migration: options.migration,
@@ -4653,11 +4728,11 @@ var DataSpace = class {
       await this._close();
     }
     this._state = SpaceState2.INACTIVE;
-    log14("new state", {
+    log15("new state", {
       state: SpaceState2[this._state]
     }, {
-      F: __dxlog_file17,
-      L: 512,
+      F: __dxlog_file18,
+      L: 514,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4716,21 +4791,23 @@ DataSpace = _ts_decorate4([
 // packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts
 import { Event as Event7, synchronized as synchronized2, trackLeaks as trackLeaks2 } from "@dxos/async";
 import { PropertiesType } from "@dxos/client-protocol";
-import { Context as Context9, cancelWithContext as cancelWithContext6 } from "@dxos/context";
-import { getCredentialAssertion as getCredentialAssertion3 } from "@dxos/credentials";
+import { Context as Context9, cancelWithContext as cancelWithContext5 } from "@dxos/context";
+import { getCredentialAssertion as getCredentialAssertion3, createAdmissionCredentials } from "@dxos/credentials";
 import { convertLegacyReferences as convertLegacyReferences2, findInlineObjectOfType as findInlineObjectOfType2 } from "@dxos/echo-db";
 import { AuthStatus } from "@dxos/echo-pipeline";
-import { LEGACY_TYPE_PROPERTIES, SpaceDocVersion as SpaceDocVersion2, encodeReference } from "@dxos/echo-protocol";
+import { CredentialServerExtension } from "@dxos/echo-pipeline";
+import { LEGACY_TYPE_PROPERTIES, SpaceDocVersion as SpaceDocVersion3, encodeReference } from "@dxos/echo-protocol";
 import { TYPE_PROPERTIES as TYPE_PROPERTIES2, generateEchoId, getTypeReference } from "@dxos/echo-schema";
+import { writeMessages as writeMessages3 } from "@dxos/feed-store";
 import { invariant as invariant14 } from "@dxos/invariant";
 import { PublicKey as PublicKey11 } from "@dxos/keys";
-import { log as log15 } from "@dxos/log";
-import { trace as Trace2 } from "@dxos/protocols";
+import { log as log16 } from "@dxos/log";
+import { trace as Trace2, AlreadyJoinedError as AlreadyJoinedError3 } from "@dxos/protocols";
 import { Invitation as Invitation7, SpaceState as SpaceState3 } from "@dxos/protocols/proto/dxos/client/services";
 import { SpaceMember as SpaceMember6 } from "@dxos/protocols/proto/dxos/halo/credentials";
 import { Gossip as Gossip2, Presence as Presence2 } from "@dxos/teleport-extension-gossip";
 import { trace as trace7 } from "@dxos/tracing";
-import { ComplexMap as ComplexMap3, assignDeep as assignDeep2, deferFunction as deferFunction2, forEachAsync } from "@dxos/util";
+import { ComplexMap as ComplexMap3, assignDeep, deferFunction as deferFunction2, forEachAsync } from "@dxos/util";
 
 // packages/sdk/client-services/src/packlets/spaces/genesis.ts
 import { createCredential } from "@dxos/credentials";
@@ -4813,7 +4890,7 @@ function _ts_decorate5(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file18 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts";
+var __dxlog_file19 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts";
 var PRESENCE_ANNOUNCE_INTERVAL = 1e4;
 var PRESENCE_OFFLINE_TIMEOUT = 2e4;
 var DEFAULT_SPACE_KEY = "__DEFAULT__";
@@ -4827,7 +4904,10 @@ var DataSpaceManager = class {
     this._echoHost = _echoHost;
     this._invitationsManager = _invitationsManager;
     this._params = _params;
-    this._ctx = new Context9();
+    this._ctx = new Context9(void 0, {
+      F: __dxlog_file19,
+      L: 104
+    });
     this.updated = new Event7();
     this._spaces = new ComplexMap3(PublicKey11.hash);
     this._isOpen = false;
@@ -4860,46 +4940,46 @@ var DataSpaceManager = class {
     return this._spaces;
   }
   async open() {
-    log15("open", void 0, {
-      F: __dxlog_file18,
-      L: 146,
+    log16("open", void 0, {
+      F: __dxlog_file19,
+      L: 156,
       S: this,
       C: (f, a) => f(...a)
     });
-    log15.trace("dxos.echo.data-space-manager.open", Trace2.begin({
+    log16.trace("dxos.echo.data-space-manager.open", Trace2.begin({
       id: this._instanceId
     }), {
-      F: __dxlog_file18,
-      L: 147,
+      F: __dxlog_file19,
+      L: 157,
       S: this,
       C: (f, a) => f(...a)
     });
-    log15("metadata loaded", {
+    log16("metadata loaded", {
       spaces: this._metadataStore.spaces.length
     }, {
-      F: __dxlog_file18,
-      L: 148,
+      F: __dxlog_file19,
+      L: 158,
       S: this,
       C: (f, a) => f(...a)
     });
     await forEachAsync(this._metadataStore.spaces, async (spaceMetadata) => {
       try {
-        log15("load space", {
+        log16("load space", {
           spaceMetadata
         }, {
-          F: __dxlog_file18,
-          L: 152,
+          F: __dxlog_file19,
+          L: 162,
           S: this,
           C: (f, a) => f(...a)
         });
         await this._constructSpace(spaceMetadata);
       } catch (err) {
-        log15.error("Error loading space", {
+        log16.error("Error loading space", {
           spaceMetadata,
           err
         }, {
-          F: __dxlog_file18,
-          L: 155,
+          F: __dxlog_file19,
+          L: 165,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -4907,19 +4987,19 @@ var DataSpaceManager = class {
     });
     this._isOpen = true;
     this.updated.emit();
-    log15.trace("dxos.echo.data-space-manager.open", Trace2.end({
+    log16.trace("dxos.echo.data-space-manager.open", Trace2.end({
       id: this._instanceId
     }), {
-      F: __dxlog_file18,
-      L: 162,
+      F: __dxlog_file19,
+      L: 172,
       S: this,
       C: (f, a) => f(...a)
     });
   }
   async close() {
-    log15("close", void 0, {
-      F: __dxlog_file18,
-      L: 167,
+    log16("close", void 0, {
+      F: __dxlog_file19,
+      L: 177,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4935,8 +5015,8 @@ var DataSpaceManager = class {
   */
   async createSpace() {
     invariant14(this._isOpen, "Not open.", {
-      F: __dxlog_file18,
-      L: 181,
+      F: __dxlog_file19,
+      L: 191,
       S: this,
       A: [
         "this._isOpen",
@@ -4953,11 +5033,11 @@ var DataSpaceManager = class {
       dataFeedKey,
       state: SpaceState3.ACTIVE
     };
-    log15("creating space...", {
+    log16("creating space...", {
       spaceKey
     }, {
-      F: __dxlog_file18,
-      L: 193,
+      F: __dxlog_file19,
+      L: 203,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4968,8 +5048,8 @@ var DataSpaceManager = class {
     await this._metadataStore.addSpace(metadata);
     const memberCredential = credentials[1];
     invariant14(getCredentialAssertion3(memberCredential)["@type"] === "dxos.halo.credentials.SpaceMember", void 0, {
-      F: __dxlog_file18,
-      L: 203,
+      F: __dxlog_file19,
+      L: 213,
       S: this,
       A: [
         "getCredentialAssertion(memberCredential)['@type'] === 'dxos.halo.credentials.SpaceMember'",
@@ -4986,22 +5066,22 @@ var DataSpaceManager = class {
       return false;
     }
     switch (space.databaseRoot.getVersion()) {
-      case SpaceDocVersion2.CURRENT: {
+      case SpaceDocVersion3.CURRENT: {
         const [_, properties] = findInlineObjectOfType2(space.databaseRoot.docSync(), TYPE_PROPERTIES2) ?? [];
         return properties?.data?.[DEFAULT_SPACE_KEY] === this._signingContext.identityKey.toHex();
       }
-      case SpaceDocVersion2.LEGACY: {
+      case SpaceDocVersion3.LEGACY: {
         const convertedDoc = await convertLegacyReferences2(space.databaseRoot.docSync());
         const [_, properties] = findInlineObjectOfType2(convertedDoc, LEGACY_TYPE_PROPERTIES) ?? [];
         return properties?.data?.[DEFAULT_SPACE_KEY] === this._signingContext.identityKey.toHex();
       }
       default:
-        log15.warn("unknown space version", {
+        log16.warn("unknown space version", {
           version: space.databaseRoot.getVersion(),
           spaceId: space.id
         }, {
-          F: __dxlog_file18,
-          L: 228,
+          F: __dxlog_file19,
+          L: 238,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -5024,7 +5104,7 @@ var DataSpaceManager = class {
     };
     const propertiesId = generateEchoId();
     document.change((doc) => {
-      assignDeep2(doc, [
+      assignDeep(doc, [
         "objects",
         propertiesId
       ], properties);
@@ -5035,8 +5115,8 @@ var DataSpaceManager = class {
   async _getSpaceRootDocument(space) {
     const automergeIndex = space.automergeSpaceState.rootUrl;
     invariant14(automergeIndex, void 0, {
-      F: __dxlog_file18,
-      L: 261,
+      F: __dxlog_file19,
+      L: 271,
       S: this,
       A: [
         "automergeIndex",
@@ -5049,17 +5129,17 @@ var DataSpaceManager = class {
   }
   // TODO(burdon): Rename join space.
   async acceptSpace(opts) {
-    log15("accept space", {
+    log16("accept space", {
       opts
     }, {
-      F: __dxlog_file18,
-      L: 270,
+      F: __dxlog_file19,
+      L: 280,
       S: this,
       C: (f, a) => f(...a)
     });
     invariant14(this._isOpen, "Not open.", {
-      F: __dxlog_file18,
-      L: 271,
+      F: __dxlog_file19,
+      L: 281,
       S: this,
       A: [
         "this._isOpen",
@@ -5067,8 +5147,8 @@ var DataSpaceManager = class {
       ]
     });
     invariant14(!this._spaces.has(opts.spaceKey), "Space already exists.", {
-      F: __dxlog_file18,
-      L: 272,
+      F: __dxlog_file19,
+      L: 282,
       S: this,
       A: [
         "!this._spaces.has(opts.spaceKey)",
@@ -5088,23 +5168,72 @@ var DataSpaceManager = class {
     this.updated.emit();
     return space;
   }
+  async admitMember(options) {
+    const space = this._spaceManager.spaces.get(options.spaceKey);
+    invariant14(space, void 0, {
+      F: __dxlog_file19,
+      L: 302,
+      S: this,
+      A: [
+        "space",
+        ""
+      ]
+    });
+    if (space.spaceState.getMemberRole(options.identityKey) !== SpaceMember6.Role.REMOVED) {
+      throw new AlreadyJoinedError3();
+    }
+    const credentials = await createAdmissionCredentials(this._signingContext.credentialSigner, options.identityKey, space.key, space.genesisFeedKey, options.role, space.spaceState.membershipChainHeads, options.profile, options.delegationCredentialId);
+    invariant14(credentials[0].credential, void 0, {
+      F: __dxlog_file19,
+      L: 321,
+      S: this,
+      A: [
+        "credentials[0].credential",
+        ""
+      ]
+    });
+    const spaceMemberCredential = credentials[0].credential.credential;
+    invariant14(getCredentialAssertion3(spaceMemberCredential)["@type"] === "dxos.halo.credentials.SpaceMember", void 0, {
+      F: __dxlog_file19,
+      L: 323,
+      S: this,
+      A: [
+        "getCredentialAssertion(spaceMemberCredential)['@type'] === 'dxos.halo.credentials.SpaceMember'",
+        ""
+      ]
+    });
+    await writeMessages3(space.controlPipeline.writer, credentials);
+    return spaceMemberCredential;
+  }
   /**
   * Wait until the space data pipeline is fully initialized.
   * Used by invitation handler.
   * TODO(dmaretskyi): Consider removing.
   */
   async waitUntilSpaceReady(spaceKey) {
-    await cancelWithContext6(this._ctx, this.updated.waitForCondition(() => {
+    await cancelWithContext5(this._ctx, this.updated.waitForCondition(() => {
       const space = this._spaces.get(spaceKey);
       return !!space && space.state === SpaceState3.READY;
     }));
   }
+  async requestSpaceAdmissionCredential(spaceKey) {
+    return this._spaceManager.requestSpaceAdmissionCredential({
+      spaceKey,
+      identityKey: this._signingContext.identityKey,
+      timeout: 15e3,
+      swarmIdentity: {
+        peerKey: this._signingContext.deviceKey,
+        credentialProvider: createAuthProvider(this._signingContext.credentialSigner),
+        credentialAuthenticator: async () => true
+      }
+    });
+  }
   async _constructSpace(metadata) {
-    log15("construct space", {
+    log16("construct space", {
       metadata
     }, {
-      F: __dxlog_file18,
-      L: 306,
+      F: __dxlog_file19,
+      L: 358,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -5132,6 +5261,7 @@ var DataSpaceManager = class {
         credentialAuthenticator: deferFunction2(() => dataSpace.authVerifier.verifier)
       },
       onAuthorizedConnection: (session) => {
+        session.addExtension("dxos.mesh.teleport.admission-discovery", new CredentialServerExtension(space));
         session.addExtension("dxos.mesh.teleport.gossip", gossip.createExtension({
           remotePeerId: session.remotePeerId
         }));
@@ -5140,9 +5270,9 @@ var DataSpaceManager = class {
         session.addExtension("dxos.mesh.teleport.automerge", this._echoHost.createReplicationExtension());
       },
       onAuthFailure: () => {
-        log15.warn("auth failure", void 0, {
-          F: __dxlog_file18,
-          L: 343,
+        log16.warn("auth failure", void 0, {
+          F: __dxlog_file19,
+          L: 396,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -5171,22 +5301,22 @@ var DataSpaceManager = class {
       signingContext: this._signingContext,
       callbacks: {
         beforeReady: async () => {
-          log15("before space ready", {
+          log16("before space ready", {
             space: space.key
           }, {
-            F: __dxlog_file18,
-            L: 370,
+            F: __dxlog_file19,
+            L: 423,
             S: this,
             C: (f, a) => f(...a)
           });
         },
         afterReady: async () => {
-          log15("after space ready", {
+          log16("after space ready", {
             space: space.key,
             open: this._isOpen
           }, {
-            F: __dxlog_file18,
-            L: 373,
+            F: __dxlog_file19,
+            L: 426,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -5201,11 +5331,11 @@ var DataSpaceManager = class {
           }
         },
         beforeClose: async () => {
-          log15("before space close", {
+          log16("before space close", {
             space: space.key
           }, {
-            F: __dxlog_file18,
-            L: 381,
+            F: __dxlog_file19,
+            L: 434,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -5236,17 +5366,17 @@ var DataSpaceManager = class {
         return (s && member.role === SpaceMember6.Role.REMOVED !== (s.authStatus === AuthStatus.FAILURE)) ?? false;
       });
       sessionsToClose.forEach((session) => {
-        void session.close().catch(log15.error);
+        void session.close().catch(log16.error);
       });
       closedSessions += sessionsToClose.length;
     }
-    log15("processed member role changes", {
+    log16("processed member role changes", {
       roleChangeCount: memberInfo.length,
       peersOnline: presence.getPeersOnline().length,
       closedSessions
     }, {
-      F: __dxlog_file18,
-      L: 417,
+      F: __dxlog_file19,
+      L: 470,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -5257,15 +5387,15 @@ var DataSpaceManager = class {
     if (role === SpaceMember6.Role.REMOVED) {
       const session = peerState.peerId && space.protocol.sessions.get(peerState.peerId);
       if (session != null) {
-        log15("closing a session with a removed peer", {
+        log16("closing a session with a removed peer", {
           peerId: peerState.peerId
         }, {
-          F: __dxlog_file18,
-          L: 431,
+          F: __dxlog_file19,
+          L: 484,
           S: this,
           C: (f, a) => f(...a)
         });
-        void session.close().catch(log15.error);
+        void session.close().catch(log16.error);
       }
     }
   }
@@ -5326,13 +5456,13 @@ import { EventSubscriptions as EventSubscriptions2, UpdateScheduler, scheduleTas
 import { Stream as Stream10 } from "@dxos/codec-protobuf";
 import { createAdmissionCredentials as createAdmissionCredentials2, getCredentialAssertion as getCredentialAssertion4 } from "@dxos/credentials";
 import { raise as raise2 } from "@dxos/debug";
-import { writeMessages as writeMessages3 } from "@dxos/feed-store";
+import { writeMessages as writeMessages4 } from "@dxos/feed-store";
 import { invariant as invariant15 } from "@dxos/invariant";
-import { log as log16 } from "@dxos/log";
+import { log as log17 } from "@dxos/log";
 import { ApiError, SpaceNotFoundError as SpaceNotFoundError2, encodeError, IdentityNotInitializedError, AuthorizationError as AuthorizationError2 } from "@dxos/protocols";
 import { SpaceMember as SpaceMember7, SpaceState as SpaceState4 } from "@dxos/protocols/proto/dxos/client/services";
 import { trace as trace8 } from "@dxos/tracing";
-var __dxlog_file19 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/spaces-service.ts";
+var __dxlog_file20 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/spaces-service.ts";
 var SpacesServiceImpl = class {
   constructor(_identityManager, _spaceManager, _getDataSpaceManager) {
     this._identityManager = _identityManager;
@@ -5376,8 +5506,8 @@ var SpacesServiceImpl = class {
     }
     const credentials = await createAdmissionCredentials2(identity.getIdentityCredentialSigner(), request.memberKey, space.key, space.genesisFeedKey, request.newRole, space.spaceState.membershipChainHeads);
     invariant15(credentials[0].credential, void 0, {
-      F: __dxlog_file19,
-      L: 98,
+      F: __dxlog_file20,
+      L: 102,
       S: this,
       A: [
         "credentials[0].credential",
@@ -5386,26 +5516,26 @@ var SpacesServiceImpl = class {
     });
     const spaceMemberCredential = credentials[0].credential.credential;
     invariant15(getCredentialAssertion4(spaceMemberCredential)["@type"] === "dxos.halo.credentials.SpaceMember", void 0, {
-      F: __dxlog_file19,
-      L: 100,
+      F: __dxlog_file20,
+      L: 104,
       S: this,
       A: [
         "getCredentialAssertion(spaceMemberCredential)['@type'] === 'dxos.halo.credentials.SpaceMember'",
         ""
       ]
     });
-    await writeMessages3(space.controlPipeline.writer, credentials);
+    await writeMessages4(space.controlPipeline.writer, credentials);
   }
   querySpaces() {
     return new Stream10(({ next, ctx }) => {
       const scheduler = new UpdateScheduler(ctx, async () => {
         const dataSpaceManager = await this._getDataSpaceManager();
         const spaces = Array.from(dataSpaceManager.spaces.values()).map((space) => this._serializeSpace(space));
-        log16("update", {
+        log17("update", {
           spaces
         }, {
-          F: __dxlog_file19,
-          L: 111,
+          F: __dxlog_file20,
+          L: 115,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -5423,7 +5553,15 @@ var SpacesServiceImpl = class {
         const subscribeSpaces = () => {
           subscriptions.clear();
           for (const space of dataSpaceManager.spaces.values()) {
-            subscriptions.add(space.stateUpdate.on(ctx, () => scheduler.forceTrigger()));
+            let lastState;
+            subscriptions.add(space.stateUpdate.on(ctx, () => {
+              if (space.state !== lastState) {
+                scheduler.forceTrigger();
+              } else {
+                scheduler.trigger();
+              }
+              lastState = space.state;
+            }));
             subscriptions.add(space.presence.updated.on(ctx, () => scheduler.trigger()));
             subscriptions.add(space.automergeSpaceState.onNewEpoch.on(ctx, () => scheduler.trigger()));
             subscriptions.add(space.inner.controlPipeline.state.timeframeUpdate.on(ctx, () => scheduler.trigger()));
@@ -5488,8 +5626,8 @@ var SpacesServiceImpl = class {
         });
       } else {
         invariant15(!credential.id, "Id on unsigned credentials is not allowed", {
-          F: __dxlog_file19,
-          L: 199,
+          F: __dxlog_file20,
+          L: 213,
           S: this,
           A: [
             "!credential.id",
@@ -5497,8 +5635,8 @@ var SpacesServiceImpl = class {
           ]
         });
         invariant15(this._identityManager.identity, "Identity is not available", {
-          F: __dxlog_file19,
-          L: 200,
+          F: __dxlog_file20,
+          L: 214,
           S: this,
           A: [
             "this._identityManager.identity",
@@ -5507,8 +5645,8 @@ var SpacesServiceImpl = class {
         });
         const signer = this._identityManager.identity.getIdentityCredentialSigner();
         invariant15(credential.issuer.equals(signer.getIssuer()), void 0, {
-          F: __dxlog_file19,
-          L: 202,
+          F: __dxlog_file20,
+          L: 216,
           S: this,
           A: [
             "credential.issuer.equals(signer.getIssuer())",
@@ -5538,6 +5676,59 @@ var SpacesServiceImpl = class {
       epochCredential: credential ?? void 0
     };
   }
+  async admitContact(request) {
+    const dataSpaceManager = await this._getDataSpaceManager();
+    await dataSpaceManager.admitMember({
+      spaceKey: request.spaceKey,
+      identityKey: request.contact.identityKey,
+      role: request.role
+    });
+  }
+  async joinBySpaceKey({ spaceKey }) {
+    const dataSpaceManager = await this._getDataSpaceManager();
+    const credential = await dataSpaceManager.requestSpaceAdmissionCredential(spaceKey);
+    return this._joinByAdmission({
+      credential
+    });
+  }
+  async _joinByAdmission({ credential }) {
+    const assertion = getCredentialAssertion4(credential);
+    invariant15(assertion["@type"] === "dxos.halo.credentials.SpaceMember", "Invalid credential", {
+      F: __dxlog_file20,
+      L: 250,
+      S: this,
+      A: [
+        "assertion['@type'] === 'dxos.halo.credentials.SpaceMember'",
+        "'Invalid credential'"
+      ]
+    });
+    const myIdentity = this._identityManager.identity;
+    invariant15(myIdentity && credential.subject.id.equals(myIdentity.identityKey), void 0, {
+      F: __dxlog_file20,
+      L: 252,
+      S: this,
+      A: [
+        "myIdentity && credential.subject.id.equals(myIdentity.identityKey)",
+        ""
+      ]
+    });
+    const dataSpaceManager = await this._getDataSpaceManager();
+    let dataSpace = dataSpaceManager.spaces.get(assertion.spaceKey);
+    if (!dataSpace) {
+      dataSpace = await dataSpaceManager.acceptSpace({
+        spaceKey: assertion.spaceKey,
+        genesisFeedKey: assertion.genesisFeedKey
+      });
+      await myIdentity.controlPipeline.writer.write({
+        credential: {
+          credential
+        }
+      });
+    }
+    return {
+      space: this._serializeSpace(dataSpace)
+    };
+  }
   _serializeSpace(space) {
     return {
       id: space.id,
@@ -5555,7 +5746,8 @@ var SpacesServiceImpl = class {
         startDataTimeframe: void 0,
         currentDataTimeframe: void 0,
         targetDataTimeframe: void 0,
-        totalDataTimeframe: void 0
+        totalDataTimeframe: void 0,
+        spaceRootUrl: space.databaseRoot?.url
       },
       members: Array.from(space.inner.spaceState.members.values()).map((member) => {
         const peers = space.presence.getPeersOnline().filter(({ identityKey }) => identityKey.equals(member.key));
@@ -5599,7 +5791,7 @@ var SpacesServiceImpl = class {
 var getChannelId = (channel) => `user-channel/${channel}`;
 
 // packages/sdk/client-services/src/packlets/services/service-context.ts
-import { Trigger as Trigger7 } from "@dxos/async";
+import { Trigger as Trigger8 } from "@dxos/async";
 import { Context as Context10, Resource as Resource3 } from "@dxos/context";
 import { getCredentialAssertion as getCredentialAssertion5 } from "@dxos/credentials";
 import { failUndefined as failUndefined2 } from "@dxos/debug";
@@ -5609,7 +5801,7 @@ import { FeedFactory, FeedStore } from "@dxos/feed-store";
 import { invariant as invariant16 } from "@dxos/invariant";
 import { Keyring } from "@dxos/keyring";
 import { PublicKey as PublicKey12 } from "@dxos/keys";
-import { log as log17 } from "@dxos/log";
+import { log as log18 } from "@dxos/log";
 import { InvalidStorageVersionError, STORAGE_VERSION as STORAGE_VERSION2, trace as trace9 } from "@dxos/protocols";
 import { Invitation as Invitation8 } from "@dxos/protocols/proto/dxos/client/services";
 import { BlobStore } from "@dxos/teleport-extension-object-sync";
@@ -5625,7 +5817,7 @@ function _ts_decorate6(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file20 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/services/service-context.ts";
+var __dxlog_file21 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/services/service-context.ts";
 var ServiceContext = class extends Resource3 {
   constructor(storage, level, networkManager, signalManager, _runtimeParams) {
     super();
@@ -5634,7 +5826,7 @@ var ServiceContext = class extends Resource3 {
     this.networkManager = networkManager;
     this.signalManager = signalManager;
     this._runtimeParams = _runtimeParams;
-    this.initialized = new Trigger7();
+    this.initialized = new Trigger8();
     this._handlerFactories = /* @__PURE__ */ new Map();
     this._instanceId = PublicKey12.random().toHex();
     this.metadataStore = new MetadataStore(storage.createDirectory("metadata"));
@@ -5668,16 +5860,16 @@ var ServiceContext = class extends Resource3 {
   }
   async _open(ctx) {
     await this._checkStorageVersion();
-    log17("opening...", void 0, {
-      F: __dxlog_file20,
+    log18("opening...", void 0, {
+      F: __dxlog_file21,
       L: 149,
       S: this,
       C: (f, a) => f(...a)
     });
-    log17.trace("dxos.sdk.service-context.open", trace9.begin({
+    log18.trace("dxos.sdk.service-context.open", trace9.begin({
       id: this._instanceId
     }), {
-      F: __dxlog_file20,
+      F: __dxlog_file21,
       L: 150,
       S: this,
       C: (f, a) => f(...a)
@@ -5692,32 +5884,32 @@ var ServiceContext = class extends Resource3 {
       await this._initialize(ctx);
     }
     const loadedInvitations = await this.invitationsManager.loadPersistentInvitations();
-    log17("loaded persistent invitations", {
+    log18("loaded persistent invitations", {
       count: loadedInvitations.invitations?.length
     }, {
-      F: __dxlog_file20,
+      F: __dxlog_file21,
       L: 163,
       S: this,
       C: (f, a) => f(...a)
     });
-    log17.trace("dxos.sdk.service-context.open", trace9.end({
+    log18.trace("dxos.sdk.service-context.open", trace9.end({
       id: this._instanceId
     }), {
-      F: __dxlog_file20,
+      F: __dxlog_file21,
       L: 165,
       S: this,
       C: (f, a) => f(...a)
     });
-    log17("opened", void 0, {
-      F: __dxlog_file20,
+    log18("opened", void 0, {
+      F: __dxlog_file21,
       L: 166,
       S: this,
       C: (f, a) => f(...a)
     });
   }
   async _close(ctx) {
-    log17("closing...", void 0, {
-      F: __dxlog_file20,
+    log18("closing...", void 0, {
+      F: __dxlog_file21,
       L: 170,
       S: this,
       C: (f, a) => f(...a)
@@ -5733,8 +5925,8 @@ var ServiceContext = class extends Resource3 {
     await this.echoHost.close(ctx);
     await this.networkManager.close();
     await this.signalManager.close();
-    log17("closed", void 0, {
-      F: __dxlog_file20,
+    log18("closed", void 0, {
+      F: __dxlog_file21,
       L: 182,
       S: this,
       C: (f, a) => f(...a)
@@ -5742,13 +5934,16 @@ var ServiceContext = class extends Resource3 {
   }
   async createIdentity(params = {}) {
     const identity = await this.identityManager.createIdentity(params);
-    await this._initialize(new Context10());
+    await this._initialize(new Context10(void 0, {
+      F: __dxlog_file21,
+      L: 187
+    }));
     return identity;
   }
   getInvitationHandler(invitation) {
     const factory = this._handlerFactories.get(invitation.kind);
     invariant16(factory, `Unknown invitation kind: ${invitation.kind}`, {
-      F: __dxlog_file20,
+      F: __dxlog_file21,
       L: 193,
       S: this,
       A: [
@@ -5768,7 +5963,10 @@ var ServiceContext = class extends Resource3 {
   }
   async _acceptIdentity(params) {
     const identity = await this.identityManager.acceptIdentity(params);
-    await this._initialize(new Context10());
+    await this._initialize(new Context10(void 0, {
+      F: __dxlog_file21,
+      L: 209
+    }));
     return identity;
   }
   async _checkStorageVersion() {
@@ -5779,8 +5977,8 @@ var ServiceContext = class extends Resource3 {
   }
   // Called when identity is created.
   async _initialize(ctx) {
-    log17("initializing spaces...", void 0, {
-      F: __dxlog_file20,
+    log18("initializing spaces...", void 0, {
+      F: __dxlog_file21,
       L: 224,
       S: this,
       C: (f, a) => f(...a)
@@ -5803,7 +6001,7 @@ var ServiceContext = class extends Resource3 {
     await this.dataSpaceManager.open();
     this._handlerFactories.set(Invitation8.Kind.SPACE, (invitation) => {
       invariant16(this.dataSpaceManager, "dataSpaceManager not initialized yet", {
-        F: __dxlog_file20,
+        F: __dxlog_file21,
         L: 249,
         S: this,
         A: [
@@ -5824,10 +6022,10 @@ var ServiceContext = class extends Resource3 {
           return;
         }
         if (!this.dataSpaceManager) {
-          log17("dataSpaceManager not initialized yet, ignoring space admission", {
+          log18("dataSpaceManager not initialized yet, ignoring space admission", {
             details: assertion
           }, {
-            F: __dxlog_file20,
+            F: __dxlog_file21,
             L: 265,
             S: this,
             C: (f, a) => f(...a)
@@ -5835,10 +6033,10 @@ var ServiceContext = class extends Resource3 {
           return;
         }
         if (this.dataSpaceManager.spaces.has(assertion.spaceKey)) {
-          log17("space already exists, ignoring space admission", {
+          log18("space already exists, ignoring space admission", {
             details: assertion
           }, {
-            F: __dxlog_file20,
+            F: __dxlog_file21,
             L: 269,
             S: this,
             C: (f, a) => f(...a)
@@ -5846,10 +6044,10 @@ var ServiceContext = class extends Resource3 {
           return;
         }
         try {
-          log17("accepting space recorded in halo", {
+          log18("accepting space recorded in halo", {
             details: assertion
           }, {
-            F: __dxlog_file20,
+            F: __dxlog_file21,
             L: 274,
             S: this,
             C: (f, a) => f(...a)
@@ -5859,8 +6057,8 @@ var ServiceContext = class extends Resource3 {
             genesisFeedKey: assertion.genesisFeedKey
           });
         } catch (err) {
-          log17.catch(err, void 0, {
-            F: __dxlog_file20,
+          log18.catch(err, void 0, {
+            F: __dxlog_file21,
             L: 280,
             S: this,
             C: (f, a) => f(...a)
@@ -5907,9 +6105,9 @@ var ServiceRegistry = class {
 };
 
 // packages/sdk/client-services/src/packlets/locks/browser.ts
-import { asyncTimeout as asyncTimeout3, Trigger as Trigger8 } from "@dxos/async";
+import { asyncTimeout as asyncTimeout2, Trigger as Trigger9 } from "@dxos/async";
 import { RESOURCE_LOCK_TIMEOUT } from "@dxos/client-protocol";
-import { log as log18, logInfo } from "@dxos/log";
+import { log as log19, logInfo } from "@dxos/log";
 function _ts_decorate7(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
@@ -5920,7 +6118,7 @@ function _ts_decorate7(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file21 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/locks/browser.ts";
+var __dxlog_file22 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/locks/browser.ts";
 var Message;
 (function(Message2) {
   Message2["ACQUIRING"] = "acquiring";
@@ -5928,7 +6126,7 @@ var Message;
 var Lock = class {
   constructor({ lockKey, onAcquire, onRelease }) {
     this._broadcastChannel = new BroadcastChannel("vault-resource-lock");
-    this._releaseTrigger = new Trigger8();
+    this._releaseTrigger = new Trigger9();
     this._lockKey = lockKey;
     this._onAcquire = onAcquire;
     this._onRelease = onRelease;
@@ -5942,29 +6140,29 @@ var Lock = class {
       message: "acquiring"
     });
     try {
-      log18("aquiring lock...", void 0, {
-        F: __dxlog_file21,
+      log19("aquiring lock...", void 0, {
+        F: __dxlog_file22,
         L: 42,
         S: this,
         C: (f, a) => f(...a)
       });
-      await asyncTimeout3(this._requestLock(), RESOURCE_LOCK_TIMEOUT);
-      log18("acquired lock", void 0, {
-        F: __dxlog_file21,
+      await asyncTimeout2(this._requestLock(), RESOURCE_LOCK_TIMEOUT);
+      log19("acquired lock", void 0, {
+        F: __dxlog_file22,
         L: 44,
         S: this,
         C: (f, a) => f(...a)
       });
     } catch {
-      log18("stealing lock...", void 0, {
-        F: __dxlog_file21,
+      log19("stealing lock...", void 0, {
+        F: __dxlog_file22,
         L: 46,
         S: this,
         C: (f, a) => f(...a)
       });
       await this._requestLock(true);
-      log18("stolen lock", void 0, {
-        F: __dxlog_file21,
+      log19("stolen lock", void 0, {
+        F: __dxlog_file22,
         L: 48,
         S: this,
         C: (f, a) => f(...a)
@@ -5980,31 +6178,31 @@ var Lock = class {
     }
   }
   async _requestLock(steal = false) {
-    log18("requesting lock...", {
+    log19("requesting lock...", {
       steal
     }, {
-      F: __dxlog_file21,
+      F: __dxlog_file22,
       L: 63,
       S: this,
       C: (f, a) => f(...a)
     });
-    const acquired = new Trigger8();
+    const acquired = new Trigger9();
     void navigator.locks.request(this._lockKey, {
       steal
     }, async () => {
       await this._onAcquire?.();
       acquired.wake();
-      this._releaseTrigger = new Trigger8();
+      this._releaseTrigger = new Trigger9();
       await this._releaseTrigger.wait();
-      log18("releasing lock...", void 0, {
-        F: __dxlog_file21,
+      log19("releasing lock...", void 0, {
+        F: __dxlog_file22,
         L: 72,
         S: this,
         C: (f, a) => f(...a)
       });
       await this._onRelease?.();
-      log18("released lock", void 0, {
-        F: __dxlog_file21,
+      log19("released lock", void 0, {
+        F: __dxlog_file22,
         L: 74,
         S: this,
         C: (f, a) => f(...a)
@@ -6013,10 +6211,10 @@ var Lock = class {
       await this._onRelease?.();
     });
     await acquired.wait();
-    log18("recieved lock", {
+    log19("recieved lock", {
       steal
     }, {
-      F: __dxlog_file21,
+      F: __dxlog_file22,
       L: 81,
       S: this,
       C: (f, a) => f(...a)
@@ -6104,13 +6302,172 @@ var createLevel = async (config) => {
   return level;
 };
 
+// packages/sdk/client-services/src/packlets/storage/profile-archive.ts
+import { cbor } from "@dxos/automerge/automerge-repo";
+import { invariant as invariant17 } from "@dxos/invariant";
+import { log as log20 } from "@dxos/log";
+import { ProfileArchiveEntryType } from "@dxos/protocols";
+import { arrayToBuffer } from "@dxos/util";
+var __dxlog_file23 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/storage/profile-archive.ts";
+var encodeProfileArchive = (profile) => cbor.encode(profile);
+var decodeProfileArchive = (data) => cbor.decode(data);
+var exportProfileData = async ({ storage, level }) => {
+  const archive = {
+    storage: [],
+    meta: {
+      timestamp: (/* @__PURE__ */ new Date()).toISOString()
+    }
+  };
+  {
+    const directory = await storage.createDirectory();
+    const files = await directory.list();
+    log20.info("begin exporting files", {
+      count: files.length
+    }, {
+      F: __dxlog_file23,
+      L: 30,
+      S: void 0,
+      C: (f, a) => f(...a)
+    });
+    for (const filename of files) {
+      const file = await directory.getOrCreateFile(filename);
+      const { size } = await file.stat();
+      const data = await file.read(0, size);
+      archive.storage.push({
+        type: ProfileArchiveEntryType.FILE,
+        key: filename,
+        value: data
+      });
+    }
+    log20.info("done exporting files", {
+      count: files.length
+    }, {
+      F: __dxlog_file23,
+      L: 41,
+      S: void 0,
+      C: (f, a) => f(...a)
+    });
+  }
+  {
+    log20.info("begin exporting kv pairs", void 0, {
+      F: __dxlog_file23,
+      L: 45,
+      S: void 0,
+      C: (f, a) => f(...a)
+    });
+    const iter = await level.iterator({
+      keyEncoding: "binary",
+      valueEncoding: "binary"
+    });
+    let count = 0;
+    for await (const [key, value] of iter) {
+      archive.storage.push({
+        type: ProfileArchiveEntryType.KEY_VALUE,
+        key,
+        value
+      });
+      count++;
+    }
+    log20.info("done exporting kv pairs", {
+      count
+    }, {
+      F: __dxlog_file23,
+      L: 56,
+      S: void 0,
+      C: (f, a) => f(...a)
+    });
+  }
+  return archive;
+};
+var importProfileData = async ({ storage, level }, archive) => {
+  let batch = level.batch();
+  let count = 0;
+  for (const entry2 of archive.storage) {
+    switch (entry2.type) {
+      case ProfileArchiveEntryType.FILE: {
+        const directory = await storage.createDirectory();
+        invariant17(typeof entry2.key === "string", "Invalid key type", {
+          F: __dxlog_file23,
+          L: 79,
+          S: void 0,
+          A: [
+            "typeof entry.key === 'string'",
+            "'Invalid key type'"
+          ]
+        });
+        const file = await directory.getOrCreateFile(entry2.key);
+        invariant17(entry2.value instanceof Uint8Array, "Invalid value type", {
+          F: __dxlog_file23,
+          L: 81,
+          S: void 0,
+          A: [
+            "entry.value instanceof Uint8Array",
+            "'Invalid value type'"
+          ]
+        });
+        await file.write(0, arrayToBuffer(entry2.value));
+        await file.close();
+        break;
+      }
+      case ProfileArchiveEntryType.KEY_VALUE: {
+        invariant17(entry2.key instanceof Uint8Array, "Invalid key type", {
+          F: __dxlog_file23,
+          L: 87,
+          S: void 0,
+          A: [
+            "entry.key instanceof Uint8Array",
+            "'Invalid key type'"
+          ]
+        });
+        invariant17(entry2.value instanceof Uint8Array, "Invalid value type", {
+          F: __dxlog_file23,
+          L: 88,
+          S: void 0,
+          A: [
+            "entry.value instanceof Uint8Array",
+            "'Invalid value type'"
+          ]
+        });
+        batch.put(entry2.key, entry2.value, {
+          keyEncoding: "binary",
+          valueEncoding: "binary"
+        });
+        break;
+      }
+      default:
+        throw new Error(`Invalid entry type: ${entry2.type}`);
+    }
+    if (++count % 1e3 === 0) {
+      await batch.write();
+      batch = level.batch();
+      log20.info("importing", {
+        count,
+        total: archive.storage.length,
+        progress: `${(count / archive.storage.length * 100).toFixed()}%`
+      }, {
+        F: __dxlog_file23,
+        L: 101,
+        S: void 0,
+        C: (f, a) => f(...a)
+      });
+    }
+  }
+  log20.info("committing changes..", void 0, {
+    F: __dxlog_file23,
+    L: 109,
+    S: void 0,
+    C: (f, a) => f(...a)
+  });
+  await batch.write();
+};
+
 // packages/sdk/client-services/src/packlets/services/service-host.ts
 import { Event as Event9, synchronized as synchronized3 } from "@dxos/async";
 import { clientServiceBundle } from "@dxos/client-protocol";
 import { Context as Context11 } from "@dxos/context";
-import { invariant as invariant18 } from "@dxos/invariant";
-import { PublicKey as PublicKey16 } from "@dxos/keys";
-import { log as log20 } from "@dxos/log";
+import { invariant as invariant19 } from "@dxos/invariant";
+import { PublicKey as PublicKey17 } from "@dxos/keys";
+import { log as log22 } from "@dxos/log";
 import { WebsocketSignalManager } from "@dxos/messaging";
 import { SwarmNetworkManager, createSimplePeerTransportFactory } from "@dxos/network-manager";
 import { trace as trace10 } from "@dxos/protocols";
@@ -6121,9 +6478,9 @@ import { WebsocketRpcClient } from "@dxos/websocket-rpc";
 // packages/sdk/client-services/src/packlets/devices/devices-service.ts
 import { EventSubscriptions as EventSubscriptions3 } from "@dxos/async";
 import { Stream as Stream11 } from "@dxos/codec-protobuf";
-import { invariant as invariant17 } from "@dxos/invariant";
+import { invariant as invariant18 } from "@dxos/invariant";
 import { Device as Device2, DeviceKind as DeviceKind2 } from "@dxos/protocols/proto/dxos/client/services";
-var __dxlog_file22 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/devices/devices-service.ts";
+var __dxlog_file24 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/devices/devices-service.ts";
 var DevicesServiceImpl = class {
   constructor(_identityManager) {
     this._identityManager = _identityManager;
@@ -6140,8 +6497,8 @@ var DevicesServiceImpl = class {
             devices: []
           });
         } else {
-          invariant17(this._identityManager.identity?.presence, "presence not present", {
-            F: __dxlog_file22,
+          invariant18(this._identityManager.identity?.presence, "presence not present", {
+            F: __dxlog_file24,
             L: 32,
             S: this,
             A: [
@@ -6247,28 +6604,111 @@ var findConfigs = () => {
   return configs.map((r) => r.instance.deref()).filter(nonNullable);
 };
 
-// packages/sdk/client-services/src/packlets/logging/logging-service.ts
-import { Event as Event8 } from "@dxos/async";
+// packages/sdk/client-services/src/packlets/identity/contacts-service.ts
+import { EventSubscriptions as EventSubscriptions4, scheduleTask as scheduleTask7, UpdateScheduler as UpdateScheduler2 } from "@dxos/async";
 import { Stream as Stream12 } from "@dxos/codec-protobuf";
 import { PublicKey as PublicKey15 } from "@dxos/keys";
-import { getContextFromEntry, log as log19 } from "@dxos/log";
+import { ComplexMap as ComplexMap4, ComplexSet as ComplexSet6 } from "@dxos/util";
+var ContactsServiceImpl = class {
+  constructor(_identityManager, _spaceManager, _dataSpaceManagerProvider) {
+    this._identityManager = _identityManager;
+    this._spaceManager = _spaceManager;
+    this._dataSpaceManagerProvider = _dataSpaceManagerProvider;
+  }
+  async getContacts() {
+    const identity = this._identityManager.identity;
+    if (identity == null) {
+      return {
+        contacts: []
+      };
+    }
+    const contacts = [
+      ...this._spaceManager.spaces.values()
+    ].flatMap((s) => [
+      ...s.spaceState.members.values()
+    ].map((m) => [
+      s.key,
+      m
+    ])).reduce((acc, v) => {
+      const [spaceKey, memberInfo] = v;
+      if (memberInfo.key.equals(identity.identityKey)) {
+        return acc;
+      }
+      const existing = acc.get(memberInfo.key);
+      if (existing != null) {
+        existing.profile ??= memberInfo.profile;
+        existing.commonSpaces?.push(spaceKey);
+      } else {
+        acc.set(memberInfo.key, {
+          identityKey: memberInfo.key,
+          profile: memberInfo.profile,
+          commonSpaces: [
+            spaceKey
+          ]
+        });
+      }
+      return acc;
+    }, new ComplexMap4(PublicKey15.hash));
+    return {
+      contacts: [
+        ...contacts.values()
+      ]
+    };
+  }
+  queryContacts() {
+    const subscribedSpaceKeySet = new ComplexSet6(PublicKey15.hash);
+    return new Stream12(({ next, ctx }) => {
+      const pushUpdateTask = new UpdateScheduler2(ctx, async () => {
+        const contacts = await this.getContacts();
+        next(contacts);
+      }, {
+        maxFrequency: 2
+      });
+      scheduleTask7(ctx, async () => {
+        const subscriptions = new EventSubscriptions4();
+        ctx.onDispose(() => subscriptions.clear());
+        const subscribeToSpaceAndUpdate = () => {
+          const oldSetSize = subscribedSpaceKeySet.size;
+          for (const space of this._spaceManager.spaces.values()) {
+            if (!subscribedSpaceKeySet.has(space.key)) {
+              subscriptions.add(space.stateUpdate.on(ctx, () => pushUpdateTask.trigger()));
+              subscribedSpaceKeySet.add(space.key);
+            }
+          }
+          if (oldSetSize !== subscribedSpaceKeySet.size) {
+            pushUpdateTask.trigger();
+          }
+        };
+        const unsubscribe = (await this._dataSpaceManagerProvider()).updated.on(ctx, subscribeToSpaceAndUpdate);
+        ctx.onDispose(unsubscribe);
+        subscribeToSpaceAndUpdate();
+      });
+    });
+  }
+};
+
+// packages/sdk/client-services/src/packlets/logging/logging-service.ts
+import { Event as Event8 } from "@dxos/async";
+import { Stream as Stream13 } from "@dxos/codec-protobuf";
+import { PublicKey as PublicKey16 } from "@dxos/keys";
+import { getContextFromEntry, log as log21 } from "@dxos/log";
 import { QueryLogsRequest } from "@dxos/protocols/proto/dxos/client/services";
 import { getDebugName, jsonify, numericalValues, tracer } from "@dxos/util";
 var LoggingServiceImpl = class {
   constructor() {
     this._logs = new Event8();
     this._started = Date.now();
-    this._sessionId = PublicKey15.random().toHex();
+    this._sessionId = PublicKey16.random().toHex();
     this._logProcessor = (_config, entry2) => {
       this._logs.emit(entry2);
     };
   }
   async open() {
-    log19.runtimeConfig.processors.push(this._logProcessor);
+    log21.runtimeConfig.processors.push(this._logProcessor);
   }
   async close() {
-    const index = log19.runtimeConfig.processors.findIndex((processor) => processor === this._logProcessor);
-    log19.runtimeConfig.processors.splice(index, 1);
+    const index = log21.runtimeConfig.processors.findIndex((processor) => processor === this._logProcessor);
+    log21.runtimeConfig.processors.splice(index, 1);
   }
   async controlMetrics({ reset, record }) {
     if (reset) {
@@ -6294,7 +6734,7 @@ var LoggingServiceImpl = class {
         stats: numericalValues(events, "duration")
       };
     };
-    return new Stream12(({ next }) => {
+    return new Stream13(({ next }) => {
       const update = () => {
         const metrics = {
           timestamp: /* @__PURE__ */ new Date(),
@@ -6316,7 +6756,7 @@ var LoggingServiceImpl = class {
     });
   }
   queryLogs(request) {
-    return new Stream12(({ ctx, next }) => {
+    return new Stream13(({ ctx, next }) => {
       const handler = (entry2) => {
         if (LOG_PROCESSING > 0) {
           return;
@@ -6372,14 +6812,14 @@ var shouldLog = (entry2, request) => {
 var LOG_PROCESSING = 0;
 
 // packages/sdk/client-services/src/packlets/network/network-service.ts
-import { Stream as Stream13 } from "@dxos/codec-protobuf";
+import { Stream as Stream14 } from "@dxos/codec-protobuf";
 var NetworkServiceImpl = class {
   constructor(networkManager, signalManager) {
     this.networkManager = networkManager;
     this.signalManager = signalManager;
   }
   queryStatus() {
-    return new Stream13(({ next }) => {
+    return new Stream14(({ next }) => {
       const update = () => {
         next({
           swarm: this.networkManager.connectionState,
@@ -6405,7 +6845,7 @@ var NetworkServiceImpl = class {
 };
 
 // packages/sdk/client-services/src/packlets/system/system-service.ts
-import { Stream as Stream14 } from "@dxos/codec-protobuf";
+import { Stream as Stream15 } from "@dxos/codec-protobuf";
 import { GetDiagnosticsRequest as GetDiagnosticsRequest2 } from "@dxos/protocols/proto/dxos/client/services";
 import { jsonKeyReplacer as jsonKeyReplacer2 } from "@dxos/util";
 var SystemServiceImpl = class {
@@ -6441,7 +6881,7 @@ var SystemServiceImpl = class {
   }
   // TODO(burdon): Standardize interval option in stream request?
   queryStatus({ interval = 3e3 } = {}) {
-    return new Stream14(({ next }) => {
+    return new Stream15(({ next }) => {
       const update = () => {
         next({
           status: this._getCurrentStatus()
@@ -6472,7 +6912,7 @@ function _ts_decorate8(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file23 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/services/service-host.ts";
+var __dxlog_file25 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/services/service-host.ts";
 var ClientServicesHost = class {
   constructor({
     config,
@@ -6505,7 +6945,10 @@ var ClientServicesHost = class {
         lockKey,
         onAcquire: () => {
           if (!this._opening) {
-            void this.open(new Context11());
+            void this.open(new Context11(void 0, {
+              F: __dxlog_file25,
+              L: 121
+            }));
           }
         },
         onRelease: () => this.close()
@@ -6560,25 +7003,25 @@ var ClientServicesHost = class {
   * Can only be called once.
   */
   initialize({ config, ...options }) {
-    invariant18(!this._open, "service host is open", {
-      F: __dxlog_file23,
-      L: 186,
+    invariant19(!this._open, "service host is open", {
+      F: __dxlog_file25,
+      L: 187,
       S: this,
       A: [
         "!this._open",
         "'service host is open'"
       ]
     });
-    log20("initializing...", void 0, {
-      F: __dxlog_file23,
-      L: 187,
+    log22("initializing...", void 0, {
+      F: __dxlog_file25,
+      L: 188,
       S: this,
       C: (f, a) => f(...a)
     });
     if (config) {
-      invariant18(!this._config, "config already set", {
-        F: __dxlog_file23,
-        L: 190,
+      invariant19(!this._config, "config already set", {
+        F: __dxlog_file25,
+        L: 191,
         S: this,
         A: [
           "!this._config",
@@ -6591,9 +7034,9 @@ var ClientServicesHost = class {
       }
     }
     if (!options.signalManager) {
-      log20.warn("running signaling without telemetry metadata.", void 0, {
-        F: __dxlog_file23,
-        L: 198,
+      log22.warn("running signaling without telemetry metadata.", void 0, {
+        F: __dxlog_file25,
+        L: 199,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -6602,9 +7045,9 @@ var ClientServicesHost = class {
       iceServers: this._config?.get("runtime.services.ice")
     }), signalManager = new WebsocketSignalManager(this._config?.get("runtime.services.signaling") ?? []) } = options;
     this._signalManager = signalManager;
-    invariant18(!this._networkManager, "network manager already set", {
-      F: __dxlog_file23,
-      L: 209,
+    invariant19(!this._networkManager, "network manager already set", {
+      F: __dxlog_file25,
+      L: 210,
       S: this,
       A: [
         "!this._networkManager",
@@ -6616,9 +7059,9 @@ var ClientServicesHost = class {
       transportFactory,
       signalManager
     });
-    log20("initialized", void 0, {
-      F: __dxlog_file23,
-      L: 216,
+    log22("initialized", void 0, {
+      F: __dxlog_file25,
+      L: 217,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -6627,45 +7070,45 @@ var ClientServicesHost = class {
     if (this._open) {
       return;
     }
-    const traceId = PublicKey16.random().toHex();
-    log20.trace("dxos.client-services.host.open", trace10.begin({
+    const traceId = PublicKey17.random().toHex();
+    log22.trace("dxos.client-services.host.open", trace10.begin({
       id: traceId
     }), {
-      F: __dxlog_file23,
-      L: 227,
+      F: __dxlog_file25,
+      L: 228,
       S: this,
       C: (f, a) => f(...a)
     });
-    invariant18(this._config, "config not set", {
-      F: __dxlog_file23,
-      L: 229,
+    invariant19(this._config, "config not set", {
+      F: __dxlog_file25,
+      L: 230,
       S: this,
       A: [
         "this._config",
         "'config not set'"
       ]
     });
-    invariant18(this._storage, "storage not set", {
-      F: __dxlog_file23,
-      L: 230,
+    invariant19(this._storage, "storage not set", {
+      F: __dxlog_file25,
+      L: 231,
       S: this,
       A: [
         "this._storage",
         "'storage not set'"
       ]
     });
-    invariant18(this._signalManager, "signal manager not set", {
-      F: __dxlog_file23,
-      L: 231,
+    invariant19(this._signalManager, "signal manager not set", {
+      F: __dxlog_file25,
+      L: 232,
       S: this,
       A: [
         "this._signalManager",
         "'signal manager not set'"
       ]
     });
-    invariant18(this._networkManager, "network manager not set", {
-      F: __dxlog_file23,
-      L: 232,
+    invariant19(this._networkManager, "network manager not set", {
+      F: __dxlog_file25,
+      L: 233,
       S: this,
       A: [
         "this._networkManager",
@@ -6673,11 +7116,11 @@ var ClientServicesHost = class {
       ]
     });
     this._opening = true;
-    log20("opening...", {
+    log22("opening...", {
       lockKey: this._resourceLock?.lockKey
     }, {
-      F: __dxlog_file23,
-      L: 235,
+      F: __dxlog_file25,
+      L: 236,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -6688,16 +7131,18 @@ var ClientServicesHost = class {
     await this._level.open();
     await this._loggingService.open();
     this._serviceContext = new ServiceContext(this._storage, this._level, this._networkManager, this._signalManager, this._runtimeParams);
+    const dataSpaceManagerProvider = async () => {
+      await this._serviceContext.initialized.wait();
+      return this._serviceContext.dataSpaceManager;
+    };
     const identityService = new IdentityServiceImpl(this._serviceContext.identityManager, this._serviceContext.keyring, () => this._serviceContext.dataSpaceManager, (params) => this._createIdentity(params), (profile) => this._serviceContext.broadcastProfileUpdate(profile));
     this._serviceRegistry.setServices({
       SystemService: this._systemService,
       IdentityService: identityService,
+      ContactsService: new ContactsServiceImpl(this._serviceContext.identityManager, this._serviceContext.spaceManager, dataSpaceManagerProvider),
       InvitationsService: new InvitationsServiceImpl(this._serviceContext.invitationsManager),
       DevicesService: new DevicesServiceImpl(this._serviceContext.identityManager),
-      SpacesService: new SpacesServiceImpl(this._serviceContext.identityManager, this._serviceContext.spaceManager, async () => {
-        await this._serviceContext.initialized.wait();
-        return this._serviceContext.dataSpaceManager;
-      }),
+      SpacesService: new SpacesServiceImpl(this._serviceContext.identityManager, this._serviceContext.spaceManager, dataSpaceManagerProvider),
       DataService: this._serviceContext.echoHost.dataService,
       QueryService: this._serviceContext.echoHost.queryService,
       NetworkService: new NetworkServiceImpl(this._serviceContext.networkManager, this._serviceContext.signalManager),
@@ -6727,19 +7172,19 @@ var ClientServicesHost = class {
     this._open = true;
     this._statusUpdate.emit();
     const deviceKey = this._serviceContext.identityManager.identity?.deviceKey;
-    log20("opened", {
+    log22("opened", {
       deviceKey
     }, {
-      F: __dxlog_file23,
-      L: 314,
+      F: __dxlog_file25,
+      L: 322,
       S: this,
       C: (f, a) => f(...a)
     });
-    log20.trace("dxos.client-services.host.open", trace10.end({
+    log22.trace("dxos.client-services.host.open", trace10.end({
       id: traceId
     }), {
-      F: __dxlog_file23,
-      L: 315,
+      F: __dxlog_file25,
+      L: 323,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -6749,11 +7194,11 @@ var ClientServicesHost = class {
       return;
     }
     const deviceKey = this._serviceContext.identityManager.identity?.deviceKey;
-    log20("closing...", {
+    log22("closing...", {
       deviceKey
     }, {
-      F: __dxlog_file23,
-      L: 326,
+      F: __dxlog_file25,
+      L: 334,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -6767,44 +7212,44 @@ var ClientServicesHost = class {
     await this._level?.close();
     this._open = false;
     this._statusUpdate.emit();
-    log20("closed", {
+    log22("closed", {
       deviceKey
     }, {
-      F: __dxlog_file23,
-      L: 335,
+      F: __dxlog_file25,
+      L: 343,
       S: this,
       C: (f, a) => f(...a)
     });
   }
   async reset() {
-    const traceId = PublicKey16.random().toHex();
-    log20.trace("dxos.sdk.client-services-host.reset", trace10.begin({
+    const traceId = PublicKey17.random().toHex();
+    log22.trace("dxos.sdk.client-services-host.reset", trace10.begin({
       id: traceId
     }), {
-      F: __dxlog_file23,
-      L: 340,
+      F: __dxlog_file25,
+      L: 348,
       S: this,
       C: (f, a) => f(...a)
     });
-    log20.info("resetting...", void 0, {
-      F: __dxlog_file23,
-      L: 342,
+    log22.info("resetting...", void 0, {
+      F: __dxlog_file25,
+      L: 350,
       S: this,
       C: (f, a) => f(...a)
     });
     await this._serviceContext?.close();
     await this._storage.reset();
-    log20.info("reset", void 0, {
-      F: __dxlog_file23,
-      L: 345,
+    log22.info("reset", void 0, {
+      F: __dxlog_file25,
+      L: 353,
       S: this,
       C: (f, a) => f(...a)
     });
-    log20.trace("dxos.sdk.client-services-host.reset", trace10.end({
+    log22.trace("dxos.sdk.client-services-host.reset", trace10.end({
       id: traceId
     }), {
-      F: __dxlog_file23,
-      L: 346,
+      F: __dxlog_file25,
+      L: 354,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -6870,8 +7315,12 @@ export {
   isLocked,
   createStorageObjects,
   createLevel,
+  encodeProfileArchive,
+  decodeProfileArchive,
+  exportProfileData,
+  importProfileData,
   ClientServicesHost,
   ClientServicesProviderResource,
   DiagnosticsCollector
 };
-//# sourceMappingURL=chunk-GCU4DHSQ.mjs.map
+//# sourceMappingURL=chunk-PLEBKZ2Q.mjs.map