@dxos/client-services 0.5.9-main.eacfffa → 0.5.9-main.f099efe

package/dist/lib/browser/{chunk-J4DDMC6A.mjs → chunk-H3XJK6ZN.mjs}

@@ -359,7 +359,7 @@ import { SpaceMember } from "@dxos/protocols/proto/dxos/client/services";
 import { TRACE_PROCESSOR } from "@dxos/tracing";
 
 // packages/sdk/client-services/src/version.ts
-var DXOS_VERSION = "0.5.9-main.eacfffa";
+var DXOS_VERSION = "0.5.9-main.f099efe";
 
 // packages/sdk/client-services/src/packlets/services/platform.ts
 import { Platform } from "@dxos/protocols/proto/dxos/client/services";
@@ -3083,7 +3083,7 @@ var InvitationsServiceImpl = class {
 };
 
 // packages/sdk/client-services/src/packlets/invitations/space-invitation-protocol.ts
-import { createAdmissionCredentials, createCancelDelegatedSpaceInvitationCredential, createDelegatedSpaceInvitationCredential, getCredentialAssertion as getCredentialAssertion2 } from "@dxos/credentials";
+import { createCancelDelegatedSpaceInvitationCredential, createDelegatedSpaceInvitationCredential, getCredentialAssertion as getCredentialAssertion2 } from "@dxos/credentials";
 import { writeMessages as writeMessages2 } from "@dxos/feed-store";
 import { invariant as invariant10 } from "@dxos/invariant";
 import { log as log11 } from "@dxos/log";
@@ -3124,79 +3124,43 @@ var SpaceInvitationProtocol = class {
     };
   }
   async admit(invitation, request, guestProfile) {
-    invariant10(this._spaceKey, void 0, {
+    invariant10(this._spaceKey && request.space, void 0, {
       F: __dxlog_file14,
-      L: 76,
+      L: 74,
       S: this,
       A: [
-        "this._spaceKey",
+        "this._spaceKey && request.space",
         ""
       ]
     });
-    const space = this._spaceManager.spaces.get(this._spaceKey);
-    invariant10(space, void 0, {
-      F: __dxlog_file14,
-      L: 78,
-      S: this,
-      A: [
-        "space",
-        ""
-      ]
-    });
-    invariant10(request.space, void 0, {
-      F: __dxlog_file14,
-      L: 80,
-      S: this,
-      A: [
-        "request.space",
-        ""
-      ]
-    });
-    const { identityKey, deviceKey } = request.space;
-    if (space.inner.spaceState.getMemberRole(identityKey) !== SpaceMember2.Role.REMOVED) {
-      throw new AlreadyJoinedError2();
-    }
     log11("writing guest credentials", {
       host: this._signingContext.deviceKey,
-      guest: deviceKey
+      guest: request.space.deviceKey
     }, {
       F: __dxlog_file14,
-      L: 87,
+      L: 75,
       S: this,
       C: (f, a) => f(...a)
     });
-    const credentials = await createAdmissionCredentials(this._signingContext.credentialSigner, identityKey, space.key, space.inner.genesisFeedKey, invitation.role ?? SpaceMember2.Role.ADMIN, space.inner.spaceState.membershipChainHeads, guestProfile, invitation.delegationCredentialId);
-    invariant10(credentials[0].credential, void 0, {
-      F: __dxlog_file14,
-      L: 101,
-      S: this,
-      A: [
-        "credentials[0].credential",
-        ""
-      ]
-    });
-    const spaceMemberCredential = credentials[0].credential.credential;
-    invariant10(getCredentialAssertion2(spaceMemberCredential)["@type"] === "dxos.halo.credentials.SpaceMember", void 0, {
-      F: __dxlog_file14,
-      L: 103,
-      S: this,
-      A: [
-        "getCredentialAssertion(spaceMemberCredential)['@type'] === 'dxos.halo.credentials.SpaceMember'",
-        ""
-      ]
+    const spaceMemberCredential = await this._spaceManager.admitMember({
+      spaceKey: this._spaceKey,
+      identityKey: request.space.identityKey,
+      role: invitation.role ?? SpaceMember2.Role.ADMIN,
+      profile: guestProfile,
+      delegationCredentialId: invitation.delegationCredentialId
     });
-    await writeMessages2(space.inner.controlPipeline.writer, credentials);
+    const space = this._spaceManager.spaces.get(this._spaceKey);
     return {
       space: {
         credential: spaceMemberCredential,
-        controlTimeframe: space.inner.controlPipeline.state.timeframe
+        controlTimeframe: space?.inner.controlPipeline.state.timeframe
       }
     };
   }
   async delegate(invitation) {
     invariant10(this._spaceKey, void 0, {
       F: __dxlog_file14,
-      L: 116,
+      L: 95,
       S: this,
       A: [
         "this._spaceKey",
@@ -3206,7 +3170,7 @@ var SpaceInvitationProtocol = class {
     const space = this._spaceManager.spaces.get(this._spaceKey);
     invariant10(space, void 0, {
       F: __dxlog_file14,
-      L: 118,
+      L: 97,
       S: this,
       A: [
         "space",
@@ -3216,7 +3180,7 @@ var SpaceInvitationProtocol = class {
     if (invitation.authMethod === Invitation5.AuthMethod.KNOWN_PUBLIC_KEY) {
       invariant10(invitation.guestKeypair?.publicKey, void 0, {
         F: __dxlog_file14,
-        L: 120,
+        L: 99,
         S: this,
         A: [
           "invitation.guestKeypair?.publicKey",
@@ -3229,7 +3193,7 @@ var SpaceInvitationProtocol = class {
       id: invitation.invitationId
     }, {
       F: __dxlog_file14,
-      L: 123,
+      L: 102,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3244,7 +3208,7 @@ var SpaceInvitationProtocol = class {
     });
     invariant10(credential.credential, void 0, {
       F: __dxlog_file14,
-      L: 143,
+      L: 122,
       S: this,
       A: [
         "credential.credential",
@@ -3259,7 +3223,7 @@ var SpaceInvitationProtocol = class {
   async cancelDelegation(invitation) {
     invariant10(this._spaceKey, void 0, {
       F: __dxlog_file14,
-      L: 149,
+      L: 128,
       S: this,
       A: [
         "this._spaceKey",
@@ -3268,7 +3232,7 @@ var SpaceInvitationProtocol = class {
     });
     invariant10(invitation.type === Invitation5.Type.DELEGATED && invitation.delegationCredentialId, void 0, {
       F: __dxlog_file14,
-      L: 150,
+      L: 129,
       S: this,
       A: [
         "invitation.type === Invitation.Type.DELEGATED && invitation.delegationCredentialId",
@@ -3278,7 +3242,7 @@ var SpaceInvitationProtocol = class {
     const space = this._spaceManager.spaces.get(this._spaceKey);
     invariant10(space, void 0, {
       F: __dxlog_file14,
-      L: 152,
+      L: 131,
       S: this,
       A: [
         "space",
@@ -3290,14 +3254,14 @@ var SpaceInvitationProtocol = class {
       id: invitation.invitationId
     }, {
       F: __dxlog_file14,
-      L: 154,
+      L: 133,
       S: this,
       C: (f, a) => f(...a)
     });
     const credential = await createCancelDelegatedSpaceInvitationCredential(this._signingContext.credentialSigner, space.key, invitation.delegationCredentialId);
     invariant10(credential.credential, void 0, {
       F: __dxlog_file14,
-      L: 161,
+      L: 140,
       S: this,
       A: [
         "credential.credential",
@@ -3336,7 +3300,7 @@ var SpaceInvitationProtocol = class {
   async accept(response) {
     invariant10(response.space, void 0, {
       F: __dxlog_file14,
-      L: 196,
+      L: 175,
       S: this,
       A: [
         "response.space",
@@ -3347,7 +3311,7 @@ var SpaceInvitationProtocol = class {
     const assertion = getCredentialAssertion2(credential);
     invariant10(assertion["@type"] === "dxos.halo.credentials.SpaceMember", "Invalid credential", {
       F: __dxlog_file14,
-      L: 199,
+      L: 178,
       S: this,
       A: [
         "assertion['@type'] === 'dxos.halo.credentials.SpaceMember'",
@@ -3356,7 +3320,7 @@ var SpaceInvitationProtocol = class {
     });
     invariant10(credential.subject.id.equals(this._signingContext.identityKey), void 0, {
       F: __dxlog_file14,
-      L: 200,
+      L: 179,
       S: this,
       A: [
         "credential.subject.id.equals(this._signingContext.identityKey)",
@@ -4794,15 +4758,17 @@ DataSpace = _ts_decorate4([
 import { Event as Event7, synchronized as synchronized2, trackLeaks as trackLeaks2 } from "@dxos/async";
 import { PropertiesType } from "@dxos/client-protocol";
 import { Context as Context9, cancelWithContext as cancelWithContext6 } from "@dxos/context";
-import { getCredentialAssertion as getCredentialAssertion3 } from "@dxos/credentials";
+import { getCredentialAssertion as getCredentialAssertion3, createAdmissionCredentials } from "@dxos/credentials";
 import { convertLegacyReferences as convertLegacyReferences2, findInlineObjectOfType as findInlineObjectOfType2 } from "@dxos/echo-db";
 import { AuthStatus } from "@dxos/echo-pipeline";
+import { CredentialServerExtension } from "@dxos/echo-pipeline";
 import { LEGACY_TYPE_PROPERTIES, SpaceDocVersion as SpaceDocVersion2, encodeReference } from "@dxos/echo-protocol";
 import { TYPE_PROPERTIES as TYPE_PROPERTIES2, generateEchoId, getTypeReference } from "@dxos/echo-schema";
+import { writeMessages as writeMessages3 } from "@dxos/feed-store";
 import { invariant as invariant14 } from "@dxos/invariant";
 import { PublicKey as PublicKey11 } from "@dxos/keys";
 import { log as log16 } from "@dxos/log";
-import { trace as Trace2 } from "@dxos/protocols";
+import { trace as Trace2, AlreadyJoinedError as AlreadyJoinedError3 } from "@dxos/protocols";
 import { Invitation as Invitation7, SpaceState as SpaceState3 } from "@dxos/protocols/proto/dxos/client/services";
 import { SpaceMember as SpaceMember6 } from "@dxos/protocols/proto/dxos/halo/credentials";
 import { Gossip as Gossip2, Presence as Presence2 } from "@dxos/teleport-extension-gossip";
@@ -4906,7 +4872,7 @@ var DataSpaceManager = class {
     this._params = _params;
     this._ctx = new Context9(void 0, {
       F: __dxlog_file19,
-      L: 94
+      L: 104
     });
     this.updated = new Event7();
     this._spaces = new ComplexMap3(PublicKey11.hash);
@@ -4942,7 +4908,7 @@ var DataSpaceManager = class {
   async open() {
     log16("open", void 0, {
       F: __dxlog_file19,
-      L: 146,
+      L: 156,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4950,7 +4916,7 @@ var DataSpaceManager = class {
       id: this._instanceId
     }), {
       F: __dxlog_file19,
-      L: 147,
+      L: 157,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4958,7 +4924,7 @@ var DataSpaceManager = class {
       spaces: this._metadataStore.spaces.length
     }, {
       F: __dxlog_file19,
-      L: 148,
+      L: 158,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4968,7 +4934,7 @@ var DataSpaceManager = class {
           spaceMetadata
         }, {
           F: __dxlog_file19,
-          L: 152,
+          L: 162,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -4979,7 +4945,7 @@ var DataSpaceManager = class {
           err
         }, {
           F: __dxlog_file19,
-          L: 155,
+          L: 165,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -4991,7 +4957,7 @@ var DataSpaceManager = class {
       id: this._instanceId
     }), {
       F: __dxlog_file19,
-      L: 162,
+      L: 172,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4999,7 +4965,7 @@ var DataSpaceManager = class {
   async close() {
     log16("close", void 0, {
       F: __dxlog_file19,
-      L: 167,
+      L: 177,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -5016,7 +4982,7 @@ var DataSpaceManager = class {
   async createSpace() {
     invariant14(this._isOpen, "Not open.", {
       F: __dxlog_file19,
-      L: 181,
+      L: 191,
       S: this,
       A: [
         "this._isOpen",
@@ -5037,7 +5003,7 @@ var DataSpaceManager = class {
       spaceKey
     }, {
       F: __dxlog_file19,
-      L: 193,
+      L: 203,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -5049,7 +5015,7 @@ var DataSpaceManager = class {
     const memberCredential = credentials[1];
     invariant14(getCredentialAssertion3(memberCredential)["@type"] === "dxos.halo.credentials.SpaceMember", void 0, {
       F: __dxlog_file19,
-      L: 203,
+      L: 213,
       S: this,
       A: [
         "getCredentialAssertion(memberCredential)['@type'] === 'dxos.halo.credentials.SpaceMember'",
@@ -5081,7 +5047,7 @@ var DataSpaceManager = class {
           spaceId: space.id
         }, {
           F: __dxlog_file19,
-          L: 228,
+          L: 238,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -5116,7 +5082,7 @@ var DataSpaceManager = class {
     const automergeIndex = space.automergeSpaceState.rootUrl;
     invariant14(automergeIndex, void 0, {
       F: __dxlog_file19,
-      L: 261,
+      L: 271,
       S: this,
       A: [
         "automergeIndex",
@@ -5133,13 +5099,13 @@ var DataSpaceManager = class {
       opts
     }, {
       F: __dxlog_file19,
-      L: 270,
+      L: 280,
       S: this,
       C: (f, a) => f(...a)
     });
     invariant14(this._isOpen, "Not open.", {
       F: __dxlog_file19,
-      L: 271,
+      L: 281,
       S: this,
       A: [
         "this._isOpen",
@@ -5148,7 +5114,7 @@ var DataSpaceManager = class {
     });
     invariant14(!this._spaces.has(opts.spaceKey), "Space already exists.", {
       F: __dxlog_file19,
-      L: 272,
+      L: 282,
       S: this,
       A: [
         "!this._spaces.has(opts.spaceKey)",
@@ -5168,6 +5134,43 @@ var DataSpaceManager = class {
     this.updated.emit();
     return space;
   }
+  async admitMember(options) {
+    const space = this._spaceManager.spaces.get(options.spaceKey);
+    invariant14(space, void 0, {
+      F: __dxlog_file19,
+      L: 302,
+      S: this,
+      A: [
+        "space",
+        ""
+      ]
+    });
+    if (space.spaceState.getMemberRole(options.identityKey) !== SpaceMember6.Role.REMOVED) {
+      throw new AlreadyJoinedError3();
+    }
+    const credentials = await createAdmissionCredentials(this._signingContext.credentialSigner, options.identityKey, space.key, space.genesisFeedKey, options.role, space.spaceState.membershipChainHeads, options.profile, options.delegationCredentialId);
+    invariant14(credentials[0].credential, void 0, {
+      F: __dxlog_file19,
+      L: 321,
+      S: this,
+      A: [
+        "credentials[0].credential",
+        ""
+      ]
+    });
+    const spaceMemberCredential = credentials[0].credential.credential;
+    invariant14(getCredentialAssertion3(spaceMemberCredential)["@type"] === "dxos.halo.credentials.SpaceMember", void 0, {
+      F: __dxlog_file19,
+      L: 323,
+      S: this,
+      A: [
+        "getCredentialAssertion(spaceMemberCredential)['@type'] === 'dxos.halo.credentials.SpaceMember'",
+        ""
+      ]
+    });
+    await writeMessages3(space.controlPipeline.writer, credentials);
+    return spaceMemberCredential;
+  }
   /**
   * Wait until the space data pipeline is fully initialized.
   * Used by invitation handler.
@@ -5179,12 +5182,24 @@ var DataSpaceManager = class {
       return !!space && space.state === SpaceState3.READY;
     }));
   }
+  async requestSpaceAdmissionCredential(spaceKey) {
+    return this._spaceManager.requestSpaceAdmissionCredential({
+      spaceKey,
+      identityKey: this._signingContext.identityKey,
+      timeout: 15e3,
+      swarmIdentity: {
+        peerKey: this._signingContext.deviceKey,
+        credentialProvider: createAuthProvider(this._signingContext.credentialSigner),
+        credentialAuthenticator: async () => true
+      }
+    });
+  }
   async _constructSpace(metadata) {
     log16("construct space", {
       metadata
     }, {
       F: __dxlog_file19,
-      L: 306,
+      L: 358,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -5212,6 +5227,7 @@ var DataSpaceManager = class {
         credentialAuthenticator: deferFunction2(() => dataSpace.authVerifier.verifier)
       },
       onAuthorizedConnection: (session) => {
+        session.addExtension("dxos.mesh.teleport.admission-discovery", new CredentialServerExtension(space));
         session.addExtension("dxos.mesh.teleport.gossip", gossip.createExtension({
           remotePeerId: session.remotePeerId
         }));
@@ -5222,7 +5238,7 @@ var DataSpaceManager = class {
       onAuthFailure: () => {
         log16.warn("auth failure", void 0, {
           F: __dxlog_file19,
-          L: 343,
+          L: 396,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -5255,7 +5271,7 @@ var DataSpaceManager = class {
             space: space.key
           }, {
             F: __dxlog_file19,
-            L: 370,
+            L: 423,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -5266,7 +5282,7 @@ var DataSpaceManager = class {
             open: this._isOpen
           }, {
             F: __dxlog_file19,
-            L: 373,
+            L: 426,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -5285,7 +5301,7 @@ var DataSpaceManager = class {
             space: space.key
           }, {
             F: __dxlog_file19,
-            L: 381,
+            L: 434,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -5326,7 +5342,7 @@ var DataSpaceManager = class {
       closedSessions
     }, {
       F: __dxlog_file19,
-      L: 417,
+      L: 470,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -5341,7 +5357,7 @@ var DataSpaceManager = class {
           peerId: peerState.peerId
         }, {
           F: __dxlog_file19,
-          L: 431,
+          L: 484,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -5406,7 +5422,7 @@ import { EventSubscriptions as EventSubscriptions2, UpdateScheduler, scheduleTas
 import { Stream as Stream10 } from "@dxos/codec-protobuf";
 import { createAdmissionCredentials as createAdmissionCredentials2, getCredentialAssertion as getCredentialAssertion4 } from "@dxos/credentials";
 import { raise as raise2 } from "@dxos/debug";
-import { writeMessages as writeMessages3 } from "@dxos/feed-store";
+import { writeMessages as writeMessages4 } from "@dxos/feed-store";
 import { invariant as invariant15 } from "@dxos/invariant";
 import { log as log17 } from "@dxos/log";
 import { ApiError, SpaceNotFoundError as SpaceNotFoundError2, encodeError, IdentityNotInitializedError, AuthorizationError as AuthorizationError2 } from "@dxos/protocols";
@@ -5457,7 +5473,7 @@ var SpacesServiceImpl = class {
     const credentials = await createAdmissionCredentials2(identity.getIdentityCredentialSigner(), request.memberKey, space.key, space.genesisFeedKey, request.newRole, space.spaceState.membershipChainHeads);
     invariant15(credentials[0].credential, void 0, {
       F: __dxlog_file20,
-      L: 98,
+      L: 102,
       S: this,
       A: [
         "credentials[0].credential",
@@ -5467,14 +5483,14 @@ var SpacesServiceImpl = class {
     const spaceMemberCredential = credentials[0].credential.credential;
     invariant15(getCredentialAssertion4(spaceMemberCredential)["@type"] === "dxos.halo.credentials.SpaceMember", void 0, {
       F: __dxlog_file20,
-      L: 100,
+      L: 104,
       S: this,
       A: [
         "getCredentialAssertion(spaceMemberCredential)['@type'] === 'dxos.halo.credentials.SpaceMember'",
         ""
       ]
     });
-    await writeMessages3(space.controlPipeline.writer, credentials);
+    await writeMessages4(space.controlPipeline.writer, credentials);
   }
   querySpaces() {
     return new Stream10(({ next, ctx }) => {
@@ -5485,7 +5501,7 @@ var SpacesServiceImpl = class {
           spaces
         }, {
           F: __dxlog_file20,
-          L: 111,
+          L: 115,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -5577,7 +5593,7 @@ var SpacesServiceImpl = class {
       } else {
         invariant15(!credential.id, "Id on unsigned credentials is not allowed", {
           F: __dxlog_file20,
-          L: 209,
+          L: 213,
           S: this,
           A: [
             "!credential.id",
@@ -5586,7 +5602,7 @@ var SpacesServiceImpl = class {
         });
         invariant15(this._identityManager.identity, "Identity is not available", {
           F: __dxlog_file20,
-          L: 210,
+          L: 214,
           S: this,
           A: [
             "this._identityManager.identity",
@@ -5596,7 +5612,7 @@ var SpacesServiceImpl = class {
         const signer = this._identityManager.identity.getIdentityCredentialSigner();
         invariant15(credential.issuer.equals(signer.getIssuer()), void 0, {
           F: __dxlog_file20,
-          L: 212,
+          L: 216,
           S: this,
           A: [
             "credential.issuer.equals(signer.getIssuer())",
@@ -5626,6 +5642,59 @@ var SpacesServiceImpl = class {
       epochCredential: credential ?? void 0
     };
   }
+  async admitContact(request) {
+    const dataSpaceManager = await this._getDataSpaceManager();
+    await dataSpaceManager.admitMember({
+      spaceKey: request.spaceKey,
+      identityKey: request.contact.identityKey,
+      role: request.role
+    });
+  }
+  async joinBySpaceKey({ spaceKey }) {
+    const dataSpaceManager = await this._getDataSpaceManager();
+    const credential = await dataSpaceManager.requestSpaceAdmissionCredential(spaceKey);
+    return this._joinByAdmission({
+      credential
+    });
+  }
+  async _joinByAdmission({ credential }) {
+    const assertion = getCredentialAssertion4(credential);
+    invariant15(assertion["@type"] === "dxos.halo.credentials.SpaceMember", "Invalid credential", {
+      F: __dxlog_file20,
+      L: 250,
+      S: this,
+      A: [
+        "assertion['@type'] === 'dxos.halo.credentials.SpaceMember'",
+        "'Invalid credential'"
+      ]
+    });
+    const myIdentity = this._identityManager.identity;
+    invariant15(myIdentity && credential.subject.id.equals(myIdentity.identityKey), void 0, {
+      F: __dxlog_file20,
+      L: 252,
+      S: this,
+      A: [
+        "myIdentity && credential.subject.id.equals(myIdentity.identityKey)",
+        ""
+      ]
+    });
+    const dataSpaceManager = await this._getDataSpaceManager();
+    let dataSpace = dataSpaceManager.spaces.get(assertion.spaceKey);
+    if (!dataSpace) {
+      dataSpace = await dataSpaceManager.acceptSpace({
+        spaceKey: assertion.spaceKey,
+        genesisFeedKey: assertion.genesisFeedKey
+      });
+      await myIdentity.controlPipeline.writer.write({
+        credential: {
+          credential
+        }
+      });
+    }
+    return {
+      space: this._serializeSpace(dataSpace)
+    };
+  }
   _serializeSpace(space) {
     return {
       id: space.id,
@@ -6198,13 +6267,151 @@ var createLevel = async (config) => {
   return level;
 };
 
+// packages/sdk/client-services/src/packlets/storage/profile-archive.ts
+import { cbor } from "@dxos/automerge/automerge-repo";
+import { invariant as invariant17 } from "@dxos/invariant";
+import { log as log20 } from "@dxos/log";
+import { ProfileArchiveEntryType } from "@dxos/protocols";
+import { arrayToBuffer } from "@dxos/util";
+var __dxlog_file23 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/storage/profile-archive.ts";
+var encodeProfileArchive = (profile) => cbor.encode(profile);
+var decodeProfileArchive = (data) => cbor.decode(data);
+var exportProfileData = async ({ storage, level }) => {
+  const archive = {
+    storage: [],
+    meta: {
+      timestamp: (/* @__PURE__ */ new Date()).toISOString()
+    }
+  };
+  {
+    const directory = await storage.createDirectory();
+    const files = await directory.list();
+    log20.info("begin exporting files", {
+      count: files.length
+    }, {
+      F: __dxlog_file23,
+      L: 30,
+      S: void 0,
+      C: (f, a) => f(...a)
+    });
+    for (const filename of files) {
+      const file = await directory.getOrCreateFile(filename);
+      const { size } = await file.stat();
+      const data = await file.read(0, size);
+      archive.storage.push({
+        type: ProfileArchiveEntryType.FILE,
+        key: filename,
+        value: data
+      });
+    }
+    log20.info("done exporting files", {
+      count: files.length
+    }, {
+      F: __dxlog_file23,
+      L: 41,
+      S: void 0,
+      C: (f, a) => f(...a)
+    });
+  }
+  {
+    log20.info("begin exporting kv pairs", void 0, {
+      F: __dxlog_file23,
+      L: 45,
+      S: void 0,
+      C: (f, a) => f(...a)
+    });
+    const iter = await level.iterator({
+      keyEncoding: "binary",
+      valueEncoding: "binary"
+    });
+    let count = 0;
+    for await (const [key, value] of iter) {
+      archive.storage.push({
+        type: ProfileArchiveEntryType.KEY_VALUE,
+        key,
+        value
+      });
+      count++;
+    }
+    log20.info("done exporting kv pairs", {
+      count
+    }, {
+      F: __dxlog_file23,
+      L: 56,
+      S: void 0,
+      C: (f, a) => f(...a)
+    });
+  }
+  return archive;
+};
+var importProfileData = async ({ storage, level }, archive) => {
+  const batch = level.batch();
+  for (const entry2 of archive.storage) {
+    switch (entry2.type) {
+      case ProfileArchiveEntryType.FILE: {
+        const directory = await storage.createDirectory();
+        invariant17(typeof entry2.key === "string", "Invalid key type", {
+          F: __dxlog_file23,
+          L: 78,
+          S: void 0,
+          A: [
+            "typeof entry.key === 'string'",
+            "'Invalid key type'"
+          ]
+        });
+        const file = await directory.getOrCreateFile(entry2.key);
+        invariant17(entry2.value instanceof Uint8Array, "Invalid value type", {
+          F: __dxlog_file23,
+          L: 80,
+          S: void 0,
+          A: [
+            "entry.value instanceof Uint8Array",
+            "'Invalid value type'"
+          ]
+        });
+        await file.write(0, arrayToBuffer(entry2.value));
+        await file.close();
+        break;
+      }
+      case ProfileArchiveEntryType.KEY_VALUE: {
+        invariant17(entry2.key instanceof Uint8Array, "Invalid key type", {
+          F: __dxlog_file23,
+          L: 86,
+          S: void 0,
+          A: [
+            "entry.key instanceof Uint8Array",
+            "'Invalid key type'"
+          ]
+        });
+        invariant17(entry2.value instanceof Uint8Array, "Invalid value type", {
+          F: __dxlog_file23,
+          L: 87,
+          S: void 0,
+          A: [
+            "entry.value instanceof Uint8Array",
+            "'Invalid value type'"
+          ]
+        });
+        batch.put(entry2.key, entry2.value, {
+          keyEncoding: "binary",
+          valueEncoding: "binary"
+        });
+        break;
+      }
+      default:
+        throw new Error(`Invalid entry type: ${entry2.type}`);
+    }
+  }
+  await batch.write();
+};
+
 // packages/sdk/client-services/src/packlets/services/service-host.ts
 import { Event as Event9, synchronized as synchronized3 } from "@dxos/async";
 import { clientServiceBundle } from "@dxos/client-protocol";
 import { Context as Context11 } from "@dxos/context";
-import { invariant as invariant18 } from "@dxos/invariant";
-import { PublicKey as PublicKey16 } from "@dxos/keys";
-import { log as log21 } from "@dxos/log";
+import { invariant as invariant19 } from "@dxos/invariant";
+import { PublicKey as PublicKey17 } from "@dxos/keys";
+import { log as log22 } from "@dxos/log";
 import { WebsocketSignalManager } from "@dxos/messaging";
 import { SwarmNetworkManager, createSimplePeerTransportFactory } from "@dxos/network-manager";
 import { trace as trace10 } from "@dxos/protocols";
@@ -6215,9 +6422,9 @@ import { WebsocketRpcClient } from "@dxos/websocket-rpc";
 // packages/sdk/client-services/src/packlets/devices/devices-service.ts
 import { EventSubscriptions as EventSubscriptions3 } from "@dxos/async";
 import { Stream as Stream11 } from "@dxos/codec-protobuf";
-import { invariant as invariant17 } from "@dxos/invariant";
+import { invariant as invariant18 } from "@dxos/invariant";
 import { Device as Device2, DeviceKind as DeviceKind2 } from "@dxos/protocols/proto/dxos/client/services";
-var __dxlog_file23 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/devices/devices-service.ts";
+var __dxlog_file24 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/devices/devices-service.ts";
 var DevicesServiceImpl = class {
   constructor(_identityManager) {
     this._identityManager = _identityManager;
@@ -6234,8 +6441,8 @@ var DevicesServiceImpl = class {
             devices: []
           });
         } else {
-          invariant17(this._identityManager.identity?.presence, "presence not present", {
-            F: __dxlog_file23,
+          invariant18(this._identityManager.identity?.presence, "presence not present", {
+            F: __dxlog_file24,
             L: 32,
             S: this,
             A: [
@@ -6341,28 +6548,111 @@ var findConfigs = () => {
   return configs.map((r) => r.instance.deref()).filter(nonNullable);
 };
 
-// packages/sdk/client-services/src/packlets/logging/logging-service.ts
-import { Event as Event8 } from "@dxos/async";
+// packages/sdk/client-services/src/packlets/identity/contacts-service.ts
+import { EventSubscriptions as EventSubscriptions4, scheduleTask as scheduleTask7, UpdateScheduler as UpdateScheduler2 } from "@dxos/async";
 import { Stream as Stream12 } from "@dxos/codec-protobuf";
 import { PublicKey as PublicKey15 } from "@dxos/keys";
-import { getContextFromEntry, log as log20 } from "@dxos/log";
+import { ComplexMap as ComplexMap4, ComplexSet as ComplexSet6 } from "@dxos/util";
+var ContactsServiceImpl = class {
+  constructor(_identityManager, _spaceManager, _dataSpaceManagerProvider) {
+    this._identityManager = _identityManager;
+    this._spaceManager = _spaceManager;
+    this._dataSpaceManagerProvider = _dataSpaceManagerProvider;
+  }
+  async getContacts() {
+    const identity = this._identityManager.identity;
+    if (identity == null) {
+      return {
+        contacts: []
+      };
+    }
+    const contacts = [
+      ...this._spaceManager.spaces.values()
+    ].flatMap((s) => [
+      ...s.spaceState.members.values()
+    ].map((m) => [
+      s.key,
+      m
+    ])).reduce((acc, v) => {
+      const [spaceKey, memberInfo] = v;
+      if (memberInfo.key.equals(identity.identityKey)) {
+        return acc;
+      }
+      const existing = acc.get(memberInfo.key);
+      if (existing != null) {
+        existing.profile ??= memberInfo.profile;
+        existing.commonSpaces?.push(spaceKey);
+      } else {
+        acc.set(memberInfo.key, {
+          identityKey: memberInfo.key,
+          profile: memberInfo.profile,
+          commonSpaces: [
+            spaceKey
+          ]
+        });
+      }
+      return acc;
+    }, new ComplexMap4(PublicKey15.hash));
+    return {
+      contacts: [
+        ...contacts.values()
+      ]
+    };
+  }
+  queryContacts() {
+    const subscribedSpaceKeySet = new ComplexSet6(PublicKey15.hash);
+    return new Stream12(({ next, ctx }) => {
+      const pushUpdateTask = new UpdateScheduler2(ctx, async () => {
+        const contacts = await this.getContacts();
+        next(contacts);
+      }, {
+        maxFrequency: 2
+      });
+      scheduleTask7(ctx, async () => {
+        const subscriptions = new EventSubscriptions4();
+        ctx.onDispose(() => subscriptions.clear());
+        const subscribeToSpaceAndUpdate = () => {
+          const oldSetSize = subscribedSpaceKeySet.size;
+          for (const space of this._spaceManager.spaces.values()) {
+            if (!subscribedSpaceKeySet.has(space.key)) {
+              subscriptions.add(space.stateUpdate.on(ctx, () => pushUpdateTask.trigger()));
+              subscribedSpaceKeySet.add(space.key);
+            }
+          }
+          if (oldSetSize !== subscribedSpaceKeySet.size) {
+            pushUpdateTask.trigger();
+          }
+        };
+        const unsubscribe = (await this._dataSpaceManagerProvider()).updated.on(ctx, subscribeToSpaceAndUpdate);
+        ctx.onDispose(unsubscribe);
+        subscribeToSpaceAndUpdate();
+      });
+    });
+  }
+};
+
+// packages/sdk/client-services/src/packlets/logging/logging-service.ts
+import { Event as Event8 } from "@dxos/async";
+import { Stream as Stream13 } from "@dxos/codec-protobuf";
+import { PublicKey as PublicKey16 } from "@dxos/keys";
+import { getContextFromEntry, log as log21 } from "@dxos/log";
 import { QueryLogsRequest } from "@dxos/protocols/proto/dxos/client/services";
 import { getDebugName, jsonify, numericalValues, tracer } from "@dxos/util";
 var LoggingServiceImpl = class {
   constructor() {
     this._logs = new Event8();
     this._started = Date.now();
-    this._sessionId = PublicKey15.random().toHex();
+    this._sessionId = PublicKey16.random().toHex();
     this._logProcessor = (_config, entry2) => {
       this._logs.emit(entry2);
     };
   }
   async open() {
-    log20.runtimeConfig.processors.push(this._logProcessor);
+    log21.runtimeConfig.processors.push(this._logProcessor);
   }
   async close() {
-    const index = log20.runtimeConfig.processors.findIndex((processor) => processor === this._logProcessor);
-    log20.runtimeConfig.processors.splice(index, 1);
+    const index = log21.runtimeConfig.processors.findIndex((processor) => processor === this._logProcessor);
+    log21.runtimeConfig.processors.splice(index, 1);
   }
   async controlMetrics({ reset, record }) {
     if (reset) {
@@ -6388,7 +6678,7 @@ var LoggingServiceImpl = class {
         stats: numericalValues(events, "duration")
       };
     };
-    return new Stream12(({ next }) => {
+    return new Stream13(({ next }) => {
       const update = () => {
         const metrics = {
           timestamp: /* @__PURE__ */ new Date(),
@@ -6410,7 +6700,7 @@ var LoggingServiceImpl = class {
     });
   }
   queryLogs(request) {
-    return new Stream12(({ ctx, next }) => {
+    return new Stream13(({ ctx, next }) => {
       const handler = (entry2) => {
         if (LOG_PROCESSING > 0) {
           return;
@@ -6466,14 +6756,14 @@ var shouldLog = (entry2, request) => {
 var LOG_PROCESSING = 0;
 
 // packages/sdk/client-services/src/packlets/network/network-service.ts
-import { Stream as Stream13 } from "@dxos/codec-protobuf";
+import { Stream as Stream14 } from "@dxos/codec-protobuf";
 var NetworkServiceImpl = class {
   constructor(networkManager, signalManager) {
     this.networkManager = networkManager;
     this.signalManager = signalManager;
   }
   queryStatus() {
-    return new Stream13(({ next }) => {
+    return new Stream14(({ next }) => {
       const update = () => {
         next({
           swarm: this.networkManager.connectionState,
@@ -6499,7 +6789,7 @@ var NetworkServiceImpl = class {
 };
 
 // packages/sdk/client-services/src/packlets/system/system-service.ts
-import { Stream as Stream14 } from "@dxos/codec-protobuf";
+import { Stream as Stream15 } from "@dxos/codec-protobuf";
 import { GetDiagnosticsRequest as GetDiagnosticsRequest2 } from "@dxos/protocols/proto/dxos/client/services";
 import { jsonKeyReplacer as jsonKeyReplacer2 } from "@dxos/util";
 var SystemServiceImpl = class {
@@ -6535,7 +6825,7 @@ var SystemServiceImpl = class {
   }
   // TODO(burdon): Standardize interval option in stream request?
   queryStatus({ interval = 3e3 } = {}) {
-    return new Stream14(({ next }) => {
+    return new Stream15(({ next }) => {
       const update = () => {
         next({
           status: this._getCurrentStatus()
@@ -6566,7 +6856,7 @@ function _ts_decorate8(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file24 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/services/service-host.ts";
+var __dxlog_file25 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/services/service-host.ts";
 var ClientServicesHost = class {
   constructor({
     config,
@@ -6600,8 +6890,8 @@ var ClientServicesHost = class {
         onAcquire: () => {
           if (!this._opening) {
             void this.open(new Context11(void 0, {
-              F: __dxlog_file24,
-              L: 120
+              F: __dxlog_file25,
+              L: 121
             }));
           }
         },
@@ -6657,25 +6947,25 @@ var ClientServicesHost = class {
   * Can only be called once.
   */
   initialize({ config, ...options }) {
-    invariant18(!this._open, "service host is open", {
-      F: __dxlog_file24,
-      L: 186,
+    invariant19(!this._open, "service host is open", {
+      F: __dxlog_file25,
+      L: 187,
       S: this,
       A: [
         "!this._open",
         "'service host is open'"
       ]
     });
-    log21("initializing...", void 0, {
-      F: __dxlog_file24,
-      L: 187,
+    log22("initializing...", void 0, {
+      F: __dxlog_file25,
+      L: 188,
       S: this,
       C: (f, a) => f(...a)
     });
     if (config) {
-      invariant18(!this._config, "config already set", {
-        F: __dxlog_file24,
-        L: 190,
+      invariant19(!this._config, "config already set", {
+        F: __dxlog_file25,
+        L: 191,
         S: this,
         A: [
           "!this._config",
@@ -6688,9 +6978,9 @@ var ClientServicesHost = class {
       }
     }
     if (!options.signalManager) {
-      log21.warn("running signaling without telemetry metadata.", void 0, {
-        F: __dxlog_file24,
-        L: 198,
+      log22.warn("running signaling without telemetry metadata.", void 0, {
+        F: __dxlog_file25,
+        L: 199,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -6699,9 +6989,9 @@ var ClientServicesHost = class {
       iceServers: this._config?.get("runtime.services.ice")
     }), signalManager = new WebsocketSignalManager(this._config?.get("runtime.services.signaling") ?? []) } = options;
     this._signalManager = signalManager;
-    invariant18(!this._networkManager, "network manager already set", {
-      F: __dxlog_file24,
-      L: 209,
+    invariant19(!this._networkManager, "network manager already set", {
+      F: __dxlog_file25,
+      L: 210,
       S: this,
       A: [
         "!this._networkManager",
@@ -6713,9 +7003,9 @@ var ClientServicesHost = class {
       transportFactory,
       signalManager
     });
-    log21("initialized", void 0, {
-      F: __dxlog_file24,
-      L: 216,
+    log22("initialized", void 0, {
+      F: __dxlog_file25,
+      L: 217,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -6724,45 +7014,45 @@ var ClientServicesHost = class {
     if (this._open) {
       return;
     }
-    const traceId = PublicKey16.random().toHex();
-    log21.trace("dxos.client-services.host.open", trace10.begin({
+    const traceId = PublicKey17.random().toHex();
+    log22.trace("dxos.client-services.host.open", trace10.begin({
       id: traceId
     }), {
-      F: __dxlog_file24,
-      L: 227,
+      F: __dxlog_file25,
+      L: 228,
       S: this,
       C: (f, a) => f(...a)
     });
-    invariant18(this._config, "config not set", {
-      F: __dxlog_file24,
-      L: 229,
+    invariant19(this._config, "config not set", {
+      F: __dxlog_file25,
+      L: 230,
       S: this,
       A: [
         "this._config",
         "'config not set'"
       ]
     });
-    invariant18(this._storage, "storage not set", {
-      F: __dxlog_file24,
-      L: 230,
+    invariant19(this._storage, "storage not set", {
+      F: __dxlog_file25,
+      L: 231,
       S: this,
       A: [
         "this._storage",
         "'storage not set'"
       ]
     });
-    invariant18(this._signalManager, "signal manager not set", {
-      F: __dxlog_file24,
-      L: 231,
+    invariant19(this._signalManager, "signal manager not set", {
+      F: __dxlog_file25,
+      L: 232,
       S: this,
       A: [
         "this._signalManager",
         "'signal manager not set'"
       ]
     });
-    invariant18(this._networkManager, "network manager not set", {
-      F: __dxlog_file24,
-      L: 232,
+    invariant19(this._networkManager, "network manager not set", {
+      F: __dxlog_file25,
+      L: 233,
       S: this,
       A: [
         "this._networkManager",
@@ -6770,11 +7060,11 @@ var ClientServicesHost = class {
       ]
     });
     this._opening = true;
-    log21("opening...", {
+    log22("opening...", {
       lockKey: this._resourceLock?.lockKey
     }, {
-      F: __dxlog_file24,
-      L: 235,
+      F: __dxlog_file25,
+      L: 236,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -6785,16 +7075,18 @@ var ClientServicesHost = class {
     await this._level.open();
     await this._loggingService.open();
     this._serviceContext = new ServiceContext(this._storage, this._level, this._networkManager, this._signalManager, this._runtimeParams);
+    const dataSpaceManagerProvider = async () => {
+      await this._serviceContext.initialized.wait();
+      return this._serviceContext.dataSpaceManager;
+    };
     const identityService = new IdentityServiceImpl(this._serviceContext.identityManager, this._serviceContext.keyring, () => this._serviceContext.dataSpaceManager, (params) => this._createIdentity(params), (profile) => this._serviceContext.broadcastProfileUpdate(profile));
     this._serviceRegistry.setServices({
       SystemService: this._systemService,
       IdentityService: identityService,
+      ContactsService: new ContactsServiceImpl(this._serviceContext.identityManager, this._serviceContext.spaceManager, dataSpaceManagerProvider),
       InvitationsService: new InvitationsServiceImpl(this._serviceContext.invitationsManager),
       DevicesService: new DevicesServiceImpl(this._serviceContext.identityManager),
-      SpacesService: new SpacesServiceImpl(this._serviceContext.identityManager, this._serviceContext.spaceManager, async () => {
-        await this._serviceContext.initialized.wait();
-        return this._serviceContext.dataSpaceManager;
-      }),
+      SpacesService: new SpacesServiceImpl(this._serviceContext.identityManager, this._serviceContext.spaceManager, dataSpaceManagerProvider),
       DataService: this._serviceContext.echoHost.dataService,
       QueryService: this._serviceContext.echoHost.queryService,
       NetworkService: new NetworkServiceImpl(this._serviceContext.networkManager, this._serviceContext.signalManager),
@@ -6824,19 +7116,19 @@ var ClientServicesHost = class {
     this._open = true;
     this._statusUpdate.emit();
     const deviceKey = this._serviceContext.identityManager.identity?.deviceKey;
-    log21("opened", {
+    log22("opened", {
       deviceKey
     }, {
-      F: __dxlog_file24,
-      L: 314,
+      F: __dxlog_file25,
+      L: 322,
       S: this,
       C: (f, a) => f(...a)
     });
-    log21.trace("dxos.client-services.host.open", trace10.end({
+    log22.trace("dxos.client-services.host.open", trace10.end({
       id: traceId
     }), {
-      F: __dxlog_file24,
-      L: 315,
+      F: __dxlog_file25,
+      L: 323,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -6846,11 +7138,11 @@ var ClientServicesHost = class {
       return;
     }
     const deviceKey = this._serviceContext.identityManager.identity?.deviceKey;
-    log21("closing...", {
+    log22("closing...", {
       deviceKey
     }, {
-      F: __dxlog_file24,
-      L: 326,
+      F: __dxlog_file25,
+      L: 334,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -6864,44 +7156,44 @@ var ClientServicesHost = class {
     await this._level?.close();
     this._open = false;
     this._statusUpdate.emit();
-    log21("closed", {
+    log22("closed", {
       deviceKey
     }, {
-      F: __dxlog_file24,
-      L: 335,
+      F: __dxlog_file25,
+      L: 343,
       S: this,
       C: (f, a) => f(...a)
     });
   }
   async reset() {
-    const traceId = PublicKey16.random().toHex();
-    log21.trace("dxos.sdk.client-services-host.reset", trace10.begin({
+    const traceId = PublicKey17.random().toHex();
+    log22.trace("dxos.sdk.client-services-host.reset", trace10.begin({
       id: traceId
     }), {
-      F: __dxlog_file24,
-      L: 340,
+      F: __dxlog_file25,
+      L: 348,
       S: this,
       C: (f, a) => f(...a)
     });
-    log21.info("resetting...", void 0, {
-      F: __dxlog_file24,
-      L: 342,
+    log22.info("resetting...", void 0, {
+      F: __dxlog_file25,
+      L: 350,
       S: this,
       C: (f, a) => f(...a)
     });
     await this._serviceContext?.close();
     await this._storage.reset();
-    log21.info("reset", void 0, {
-      F: __dxlog_file24,
-      L: 345,
+    log22.info("reset", void 0, {
+      F: __dxlog_file25,
+      L: 353,
       S: this,
       C: (f, a) => f(...a)
     });
-    log21.trace("dxos.sdk.client-services-host.reset", trace10.end({
+    log22.trace("dxos.sdk.client-services-host.reset", trace10.end({
       id: traceId
     }), {
-      F: __dxlog_file24,
-      L: 346,
+      F: __dxlog_file25,
+      L: 354,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -6967,8 +7259,12 @@ export {
   isLocked,
   createStorageObjects,
   createLevel,
+  encodeProfileArchive,
+  decodeProfileArchive,
+  exportProfileData,
+  importProfileData,
   ClientServicesHost,
   ClientServicesProviderResource,
   DiagnosticsCollector
 };
-//# sourceMappingURL=chunk-J4DDMC6A.mjs.map
+//# sourceMappingURL=chunk-H3XJK6ZN.mjs.map