@dxos/client-services 0.8.1-main.ba2dec9 → 0.8.1-staging.31c3ee1

package/dist/lib/{browser/chunk-VJODS5QE.mjs → node-esm/chunk-2H5CIBX2.mjs}

@@ -1,7 +1,7 @@
-import "@dxos/node-std/globals";
+import { createRequire } from 'node:module';const require = createRequire(import.meta.url);
 
 // packages/sdk/client-services/src/packlets/devtools/feeds.ts
-import { EventSubscriptions } from "@dxos/async";
+import { SubscriptionList } from "@dxos/async";
 import { Stream } from "@dxos/codec-protobuf/stream";
 import { FeedIterator } from "@dxos/feed-store";
 import { PublicKey } from "@dxos/keys";
@@ -10,7 +10,7 @@ import { ComplexMap } from "@dxos/util";
 var __dxlog_file = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/devtools/feeds.ts";
 var subscribeToFeeds = ({ feedStore, spaceManager }, { feedKeys }) => {
   return new Stream(({ next }) => {
-    const subscriptions = new EventSubscriptions();
+    const subscriptions = new SubscriptionList();
     const feedMap = new ComplexMap(PublicKey.hash);
     const update = () => {
       const { feeds } = feedStore;
@@ -72,7 +72,7 @@ var subscribeToFeedBlocks = ({ feedStore }, { feedKey, maxBlocks = 10 }) => {
     if (!feedKey) {
       return;
     }
-    const subscriptions = new EventSubscriptions();
+    const subscriptions = new SubscriptionList();
     const timeout = setTimeout(async () => {
       const feed = feedStore.getFeed(feedKey);
       if (!feed) {
@@ -397,7 +397,7 @@ import { SpaceMember } from "@dxos/protocols/proto/dxos/client/services";
 import { TRACE_PROCESSOR } from "@dxos/tracing";
 
 // packages/sdk/client-services/src/version.ts
-var DXOS_VERSION = "0.8.1-main.ba2dec9";
+var DXOS_VERSION = "0.8.1-staging.31c3ee1";
 
 // packages/sdk/client-services/src/packlets/services/platform.ts
 import { Platform } from "@dxos/protocols/proto/dxos/client/services";
@@ -551,98 +551,20 @@ var getStorageDiagnostics = async () => {
   }));
 };
 
-// packages/sdk/client-services/src/packlets/diagnostics/browser-diagnostics-broadcast.ts
-import { Trigger } from "@dxos/async";
-import { log as log2 } from "@dxos/log";
-var __dxlog_file4 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/diagnostics/browser-diagnostics-broadcast.ts";
-var CHANNEL_NAME = "dxos.diagnostics.broadcast";
-var MessageType;
-(function(MessageType2) {
-  MessageType2["PROBE"] = "probe";
-  MessageType2["PROBE_ACK"] = "probe-ack";
-  MessageType2["REQUEST_DIAGNOSTICS"] = "request-diagnostics";
-  MessageType2["RECEIVE_DIAGNOSTICS"] = "receive-diagnostics";
-})(MessageType || (MessageType = {}));
+// packages/sdk/client-services/src/packlets/diagnostics/diagnostics-broadcast.ts
 var createCollectDiagnosticsBroadcastSender = () => {
   return {
-    broadcastDiagnosticsRequest: async () => {
-      let expectedResponse = "probe-ack";
-      let channel;
-      try {
-        const trigger = new Trigger();
-        channel = new BroadcastChannel(CHANNEL_NAME);
-        channel.onmessage = (msg) => {
-          if (expectedResponse === msg.data.type) {
-            trigger.wake(msg.data);
-          }
-        };
-        channel.postMessage({
-          type: "probe"
-        });
-        await trigger.wait({
-          timeout: 200
-        });
-        expectedResponse = "receive-diagnostics";
-        trigger.reset();
-        channel.postMessage({
-          type: "request-diagnostics"
-        });
-        const diagnostics = await trigger.wait({
-          timeout: 5e3
-        });
-        return diagnostics.payload;
-      } catch (e) {
-        const errorDescription = e instanceof Error ? e.message : JSON.stringify(e);
-        return {
-          expectedResponse,
-          errorDescription
-        };
-      } finally {
-        safeClose(channel);
-      }
-    }
+    broadcastDiagnosticsRequest: async () => void 0
   };
 };
-var createCollectDiagnosticsBroadcastHandler = (systemService) => {
-  let channel;
+var createCollectDiagnosticsBroadcastHandler = (_) => {
   return {
     start: () => {
-      channel = new BroadcastChannel(CHANNEL_NAME);
-      channel.onmessage = async (message) => {
-        try {
-          if (message.data.type === "probe") {
-            channel?.postMessage({
-              type: "probe-ack"
-            });
-          } else if (message.data.type === "request-diagnostics") {
-            const diagnostics = await systemService.getDiagnostics({});
-            channel?.postMessage({
-              type: "receive-diagnostics",
-              payload: diagnostics
-            });
-          }
-        } catch (error) {
-          log2.catch(error, void 0, {
-            F: __dxlog_file4,
-            L: 77,
-            S: void 0,
-            C: (f, a) => f(...a)
-          });
-        }
-      };
     },
     stop: () => {
-      safeClose(channel);
-      channel = void 0;
     }
   };
 };
-var safeClose = (channel) => {
-  try {
-    channel?.close();
-  } catch (e) {
-  }
-};
 
 // packages/sdk/client-services/src/packlets/diagnostics/diagnostics-collector.ts
 import { ClientServicesProviderResource } from "@dxos/client-protocol";
@@ -686,12 +608,12 @@ var findConfigs = () => {
 };
 
 // packages/sdk/client-services/src/packlets/identity/authenticator.ts
-import { Trigger as Trigger2 } from "@dxos/async";
+import { Trigger } from "@dxos/async";
 import { Context as Context2 } from "@dxos/context";
 import { verifyCredential } from "@dxos/credentials";
-import { log as log3 } from "@dxos/log";
+import { log as log2 } from "@dxos/log";
 import { schema } from "@dxos/protocols/proto";
-var __dxlog_file5 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/authenticator.ts";
+var __dxlog_file4 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/authenticator.ts";
 var Credential = schema.getCodecForType("dxos.halo.credentials.Credential");
 var createAuthProvider = (signer) => async (nonce) => {
   const credential = await signer.createCredential({
@@ -707,7 +629,7 @@ var TrustedKeySetAuthVerifier = class {
   constructor(_params) {
     this._params = _params;
     this._ctx = new Context2(void 0, {
-      F: __dxlog_file5,
+      F: __dxlog_file4,
       L: 45
     });
   }
@@ -717,20 +639,20 @@ var TrustedKeySetAuthVerifier = class {
   get verifier() {
     return async (nonce, auth) => {
       const credential = Credential.decode(auth);
-      log3("authenticating...", {
+      log2("authenticating...", {
         credential
       }, {
-        F: __dxlog_file5,
+        F: __dxlog_file4,
         L: 56,
         S: this,
         C: (f, a) => f(...a)
       });
       const result = await verifyCredential(credential);
       if (result.kind === "fail") {
-        log3("Invalid credential", {
+        log2("Invalid credential", {
           result
         }, {
-          F: __dxlog_file5,
+          F: __dxlog_file4,
           L: 60,
           S: this,
           C: (f, a) => f(...a)
@@ -738,11 +660,11 @@ var TrustedKeySetAuthVerifier = class {
         return false;
       }
       if (!credential.proof.nonce || !Buffer.from(nonce).equals(credential.proof.nonce)) {
-        log3("Invalid nonce", {
+        log2("Invalid nonce", {
           nonce,
           credential
         }, {
-          F: __dxlog_file5,
+          F: __dxlog_file4,
           L: 65,
           S: this,
           C: (f, a) => f(...a)
@@ -750,39 +672,39 @@ var TrustedKeySetAuthVerifier = class {
         return false;
       }
       if (this._isTrustedKey(credential.issuer)) {
-        log3("key is trusted -- auth success", {
+        log2("key is trusted -- auth success", {
           key: credential.issuer
         }, {
-          F: __dxlog_file5,
+          F: __dxlog_file4,
           L: 70,
           S: this,
           C: (f, a) => f(...a)
         });
         return true;
       }
-      const trigger = new Trigger2();
+      const trigger = new Trigger();
       this._ctx.onDispose(() => {
         trigger.wake(false);
       });
       const clear = this._params.update.on(this._ctx, () => {
         if (this._isTrustedKey(credential.issuer)) {
-          log3("auth success", {
+          log2("auth success", {
             key: credential.issuer
           }, {
-            F: __dxlog_file5,
+            F: __dxlog_file4,
             L: 81,
             S: this,
             C: (f, a) => f(...a)
           });
           trigger.wake(true);
         } else {
-          log3("key is not currently in trusted set, waiting...", {
+          log2("key is not currently in trusted set, waiting...", {
             key: credential.issuer,
             trusted: [
               ...this._params.trustedKeysProvider()
             ]
           }, {
-            F: __dxlog_file5,
+            F: __dxlog_file4,
             L: 84,
             S: this,
             C: (f, a) => f(...a)
@@ -813,7 +735,7 @@ import { Context as Context3, Resource } from "@dxos/context";
 import { EdgeConnectionClosedError, EdgeIdentityChangedError } from "@dxos/edge-client";
 import { invariant as invariant2 } from "@dxos/invariant";
 import { PublicKey as PublicKey3 } from "@dxos/keys";
-import { log as log4, logInfo } from "@dxos/log";
+import { log as log3, logInfo } from "@dxos/log";
 import { EdgeService } from "@dxos/protocols";
 import { buf } from "@dxos/protocols/buf";
 import { MessageSchema as RouterMessageSchema } from "@dxos/protocols/buf/dxos/edge/messenger_pb";
@@ -886,7 +808,7 @@ function _using_ctx() {
     }
   };
 }
-var __dxlog_file6 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/edge-feed-replicator.ts";
+var __dxlog_file5 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/edge-feed-replicator.ts";
 var EdgeFeedReplicator = class extends Resource {
   constructor({ messenger, spaceId }) {
     super();
@@ -905,8 +827,8 @@ var EdgeFeedReplicator = class extends Resource {
     this._spaceId = spaceId;
   }
   async _open() {
-    log4("open", void 0, {
-      F: __dxlog_file6,
+    log3("open", void 0, {
+      F: __dxlog_file5,
       L: 56,
       S: this,
       C: (f, a) => f(...a)
@@ -921,11 +843,11 @@ var EdgeFeedReplicator = class extends Resource {
       }
       const [spaceId] = rest;
       if (spaceId !== this._spaceId) {
-        log4("spaceID mismatch", {
+        log3("spaceID mismatch", {
           spaceId,
           _spaceId: this._spaceId
         }, {
-          F: __dxlog_file6,
+          F: __dxlog_file5,
           L: 70,
           S: this,
           C: (f, a) => f(...a)
@@ -933,12 +855,12 @@ var EdgeFeedReplicator = class extends Resource {
         return;
       }
       const payload = decodeCbor(message.payload.value);
-      log4("receive", {
+      log3("receive", {
         from: message.source,
         feedKey: payload.feedKey,
         type: payload.type
       }, {
-        F: __dxlog_file6,
+        F: __dxlog_file5,
         L: 75,
         S: this,
         C: (f, a) => f(...a)
@@ -956,8 +878,8 @@ var EdgeFeedReplicator = class extends Resource {
     }
   }
   async _close() {
-    log4("close", void 0, {
-      F: __dxlog_file6,
+    log3("close", void 0, {
+      F: __dxlog_file5,
       L: 95,
       S: this,
       C: (f, a) => f(...a)
@@ -968,8 +890,8 @@ var EdgeFeedReplicator = class extends Resource {
     this._connected = true;
     const connectionCtx = this._createConnectionContext();
     this._connectionCtx = connectionCtx;
-    log4("connection context created", void 0, {
-      F: __dxlog_file6,
+    log3("connection context created", void 0, {
+      F: __dxlog_file5,
       L: 103,
       S: this,
       C: (f, a) => f(...a)
@@ -981,8 +903,8 @@ var EdgeFeedReplicator = class extends Resource {
     });
   }
   async _resetConnection() {
-    log4("resetConnection", void 0, {
-      F: __dxlog_file6,
+    log3("resetConnection", void 0, {
+      F: __dxlog_file5,
       L: 112,
       S: this,
       C: (f, a) => f(...a)
@@ -993,12 +915,12 @@ var EdgeFeedReplicator = class extends Resource {
     this._remoteLength.clear();
   }
   async addFeed(feed) {
-    log4("addFeed", {
+    log3("addFeed", {
       key: feed.key,
       connected: this._connected,
       hasConnectionCtx: !!this._connectionCtx
     }, {
-      F: __dxlog_file6,
+      F: __dxlog_file5,
       L: 120,
       S: this,
       C: (f, a) => f(...a)
@@ -1012,10 +934,10 @@ var EdgeFeedReplicator = class extends Resource {
     return defaultMap(this._pushMutex, key, () => new Mutex());
   }
   async _replicateFeed(ctx, feed) {
-    log4("replicateFeed", {
+    log3("replicateFeed", {
       key: feed.key
     }, {
-      F: __dxlog_file6,
+      F: __dxlog_file5,
       L: 133,
       S: this,
       C: (f, a) => f(...a)
@@ -1030,8 +952,8 @@ var EdgeFeedReplicator = class extends Resource {
   }
   async _sendMessage(message) {
     if (!this._connectionCtx) {
-      log4("message dropped because connection was disposed", void 0, {
-        F: __dxlog_file6,
+      log3("message dropped because connection was disposed", void 0, {
+        F: __dxlog_file5,
         L: 146,
         S: this,
         C: (f, a) => f(...a)
@@ -1039,18 +961,18 @@ var EdgeFeedReplicator = class extends Resource {
       return;
     }
     if (message.type === "data") {
-      log4("sending blocks", {
+      log3("sending blocks", {
         feedKey: message.feedKey,
         blocks: message.blocks.map((b) => b.index)
       }, {
-        F: __dxlog_file6,
+        F: __dxlog_file5,
         L: 151,
         S: this,
         C: (f, a) => f(...a)
       });
     }
     invariant2(message.feedKey, void 0, {
-      F: __dxlog_file6,
+      F: __dxlog_file5,
       L: 157,
       S: this,
       A: [
@@ -1059,10 +981,10 @@ var EdgeFeedReplicator = class extends Resource {
       ]
     });
     const payloadValue = bufferToArray(encodeCbor(message));
-    log4("send", {
+    log3("send", {
       type: message.type
     }, {
-      F: __dxlog_file6,
+      F: __dxlog_file5,
       L: 160,
       S: this,
       C: (f, a) => f(...a)
@@ -1080,8 +1002,8 @@ var EdgeFeedReplicator = class extends Resource {
   }
   _onMessage(message) {
     if (!this._connectionCtx) {
-      log4.warn("received message after connection context was disposed", void 0, {
-        F: __dxlog_file6,
+      log3.warn("received message after connection context was disposed", void 0, {
+        F: __dxlog_file5,
         L: 175,
         S: this,
         C: (f, a) => f(...a)
@@ -1096,10 +1018,10 @@ var EdgeFeedReplicator = class extends Resource {
             const feedKey = PublicKey3.fromHex(message.feedKey);
             const feed = this._feeds.get(feedKey);
             if (!feed) {
-              log4.warn("Feed not found", {
+              log3.warn("Feed not found", {
                 feedKey
               }, {
-                F: __dxlog_file6,
+                F: __dxlog_file5,
                 L: 184,
                 S: this,
                 C: (f, a) => f(...a)
@@ -1114,8 +1036,8 @@ var EdgeFeedReplicator = class extends Resource {
               feedKey
             };
             if (message.length > feed.length) {
-              log4("requesting missing blocks", logMeta, {
-                F: __dxlog_file6,
+              log3("requesting missing blocks", logMeta, {
+                F: __dxlog_file5,
                 L: 194,
                 S: this,
                 C: (f, a) => f(...a)
@@ -1129,8 +1051,8 @@ var EdgeFeedReplicator = class extends Resource {
                 }
               });
             } else if (message.length < feed.length) {
-              log4("pushing blocks to remote", logMeta, {
-                F: __dxlog_file6,
+              log3("pushing blocks to remote", logMeta, {
+                F: __dxlog_file5,
                 L: 202,
                 S: this,
                 C: (f, a) => f(...a)
@@ -1145,11 +1067,11 @@ var EdgeFeedReplicator = class extends Resource {
           }
         }
         case "data": {
-          log4("received data", {
+          log3("received data", {
             feed: message.feedKey,
             blocks: message.blocks.map((b) => b.index)
           }, {
-            F: __dxlog_file6,
+            F: __dxlog_file5,
             L: 211,
             S: this,
             C: (f, a) => f(...a)
@@ -1157,10 +1079,10 @@ var EdgeFeedReplicator = class extends Resource {
           const feedKey = PublicKey3.fromHex(message.feedKey);
           const feed = this._feeds.get(feedKey);
           if (!feed) {
-            log4.warn("Feed not found", {
+            log3.warn("Feed not found", {
               feedKey
             }, {
-              F: __dxlog_file6,
+              F: __dxlog_file5,
               L: 216,
               S: this,
               C: (f, a) => f(...a)
@@ -1171,10 +1093,10 @@ var EdgeFeedReplicator = class extends Resource {
           break;
         }
         default: {
-          log4.warn("Unknown message", {
+          log3.warn("Unknown message", {
             ...message
           }, {
-            F: __dxlog_file6,
+            F: __dxlog_file5,
             L: 225,
             S: this,
             C: (f, a) => f(...a)
@@ -1184,12 +1106,12 @@ var EdgeFeedReplicator = class extends Resource {
     });
   }
   async _pushBlocks(feed, from, to) {
-    log4("pushing blocks", {
+    log3("pushing blocks", {
       feed: feed.key.toHex(),
       from,
       to
     }, {
-      F: __dxlog_file6,
+      F: __dxlog_file5,
       L: 232,
       S: this,
       C: (f, a) => f(...a)
@@ -1199,7 +1121,7 @@ var EdgeFeedReplicator = class extends Resource {
         valueEncoding: "binary"
       });
       invariant2(data instanceof Uint8Array, void 0, {
-        F: __dxlog_file6,
+        F: __dxlog_file5,
         L: 237,
         S: this,
         A: [
@@ -1223,11 +1145,11 @@ var EdgeFeedReplicator = class extends Resource {
     this._remoteLength.set(feed.key, to);
   }
   async _integrateBlocks(feed, blocks) {
-    log4("integrating blocks", {
+    log3("integrating blocks", {
       feed: feed.key.toHex(),
       blocks: blocks.length
     }, {
-      F: __dxlog_file6,
+      F: __dxlog_file5,
       L: 258,
       S: this,
       C: (f, a) => f(...a)
@@ -1248,8 +1170,8 @@ var EdgeFeedReplicator = class extends Resource {
       var _usingCtx = _using_ctx();
       const _ = _usingCtx.u(await this._getPushMutex(feed.key).acquire());
       if (!this._remoteLength.has(feed.key)) {
-        log4("blocks not pushed because remote length is unknown", void 0, {
-          F: __dxlog_file6,
+        log3("blocks not pushed because remote length is unknown", void 0, {
+          F: __dxlog_file5,
           L: 279,
           S: this,
           C: (f, a) => f(...a)
@@ -1273,8 +1195,8 @@ var EdgeFeedReplicator = class extends Resource {
           return;
         }
         if (err instanceof EdgeIdentityChangedError || err instanceof EdgeConnectionClosedError) {
-          log4("resetting on reconnect", void 0, {
-            F: __dxlog_file6,
+          log3("resetting on reconnect", void 0, {
+            F: __dxlog_file5,
             L: 296,
             S: this,
             C: (f, a) => f(...a)
@@ -1285,7 +1207,7 @@ var EdgeFeedReplicator = class extends Resource {
         }
       }
     }, {
-      F: __dxlog_file6,
+      F: __dxlog_file5,
       L: 290
     });
     return connectionCtx;
@@ -1307,12 +1229,13 @@ var bufferizeBlock = (block) => ({
 
 // packages/sdk/client-services/src/packlets/spaces/data-space.ts
 import { Event as Event7, Mutex as Mutex2, scheduleTask as scheduleTask4, sleep as sleep3, synchronized as synchronized2, trackLeaks as trackLeaks2 } from "@dxos/async";
+import { save } from "@dxos/automerge/automerge";
 import { AUTH_TIMEOUT as AUTH_TIMEOUT2 } from "@dxos/client-protocol";
-import { Context as Context5, ContextDisposedError, cancelWithContext as cancelWithContext2 } from "@dxos/context";
+import { Context as Context6, ContextDisposedError, cancelWithContext as cancelWithContext2 } from "@dxos/context";
 import { timed, warnAfterTimeout } from "@dxos/debug";
 import { createMappedFeedWriter } from "@dxos/echo-pipeline";
 import { SpaceDocVersion as SpaceDocVersion2 } from "@dxos/echo-protocol";
-import { failedInvariant } from "@dxos/invariant";
+import { failedInvariant as failedInvariant3, invariant as invariant11 } from "@dxos/invariant";
 import { PublicKey as PublicKey8 } from "@dxos/keys";
 import { log as log12 } from "@dxos/log";
 import { CancelledError, SystemError } from "@dxos/protocols";
@@ -1370,7 +1293,7 @@ var AutomergeSpaceState = class extends Resource2 {
 // packages/sdk/client-services/src/packlets/spaces/epoch-migrations.ts
 import { invariant as invariant3 } from "@dxos/invariant";
 import { CreateEpochRequest } from "@dxos/protocols/proto/dxos/client/services";
-var __dxlog_file7 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/epoch-migrations.ts";
+var __dxlog_file6 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/epoch-migrations.ts";
 var LOAD_DOC_TIMEOUT = 1e4;
 var runEpochMigration = async (ctx, context) => {
   switch (context.migration) {
@@ -1403,7 +1326,7 @@ var runEpochMigration = async (ctx, context) => {
     // TODO(dmaretskyi): This path doesn't seem to fit here. This is not a migration.
     case CreateEpochRequest.Migration.REPLACE_AUTOMERGE_ROOT: {
       invariant3(context.newAutomergeRoot, void 0, {
-        F: __dxlog_file7,
+        F: __dxlog_file6,
         L: 62,
         S: void 0,
         A: [
@@ -1421,12 +1344,12 @@ var runEpochMigration = async (ctx, context) => {
 };
 
 // packages/sdk/client-services/src/packlets/spaces/notarization-plugin.ts
-import { DeferredTask, Event as Event3, scheduleTask as scheduleTask2, sleep, TimeoutError, Trigger as Trigger3, scheduleMicroTask as scheduleMicroTask2 } from "@dxos/async";
+import { DeferredTask, Event as Event3, scheduleTask as scheduleTask2, sleep, TimeoutError, Trigger as Trigger2, scheduleMicroTask as scheduleMicroTask2 } from "@dxos/async";
 import { rejectOnDispose, Resource as Resource3 } from "@dxos/context";
 import { verifyCredential as verifyCredential2 } from "@dxos/credentials";
 import { invariant as invariant4 } from "@dxos/invariant";
 import { PublicKey as PublicKey4 } from "@dxos/keys";
-import { logInfo as logInfo2, log as log5 } from "@dxos/log";
+import { logInfo as logInfo2, log as log4 } from "@dxos/log";
 import { EdgeCallFailedError } from "@dxos/protocols";
 import { schema as schema2 } from "@dxos/protocols/proto";
 import { RpcExtension } from "@dxos/teleport";
@@ -1437,7 +1360,7 @@ function _ts_decorate2(decorators, target, key, desc) {
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file8 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/notarization-plugin.ts";
+var __dxlog_file7 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/notarization-plugin.ts";
 var DEFAULT_RETRY_TIMEOUT = 1e3;
 var DEFAULT_SUCCESS_DELAY = 1e3;
 var DEFAULT_NOTARIZE_TIMEOUT = 1e4;
@@ -1463,7 +1386,7 @@ var NotarizationPlugin = class extends Resource3 {
   setActiveEdgePollingEnabled(enabled) {
     const client = this._edgeClient;
     invariant4(client, void 0, {
-      F: __dxlog_file8,
+      F: __dxlog_file7,
       L: 111,
       S: this,
       A: [
@@ -1501,16 +1424,16 @@ var NotarizationPlugin = class extends Resource3 {
   * Request credentials to be notarized.
   */
   async notarize({ ctx: opCtx, credentials, timeout = DEFAULT_NOTARIZE_TIMEOUT, retryTimeout = DEFAULT_RETRY_TIMEOUT, successDelay = DEFAULT_SUCCESS_DELAY, edgeRetryJitter }) {
-    log5("notarize", {
+    log4("notarize", {
       credentials
     }, {
-      F: __dxlog_file8,
+      F: __dxlog_file7,
       L: 153,
       S: this,
       C: (f, a) => f(...a)
     });
     invariant4(credentials.every((credential) => credential.id), "Credentials must have an id", {
-      F: __dxlog_file8,
+      F: __dxlog_file7,
       L: 154,
       S: this,
       A: [
@@ -1518,13 +1441,13 @@ var NotarizationPlugin = class extends Resource3 {
         "'Credentials must have an id'"
       ]
     });
-    const errors = new Trigger3();
+    const errors = new Trigger2();
     const ctx = this._ctx.derive({
       onError: (err) => {
-        log5.warn("Notarization error", {
+        log4.warn("Notarization error", {
           err
         }, {
-          F: __dxlog_file8,
+          F: __dxlog_file7,
           L: 162,
           S: this,
           C: (f, a) => f(...a)
@@ -1555,8 +1478,8 @@ var NotarizationPlugin = class extends Resource3 {
         allNotarized,
         errors.wait()
       ]);
-      log5("done", void 0, {
-        F: __dxlog_file8,
+      log4("done", void 0, {
+        F: __dxlog_file7,
         L: 187,
         S: this,
         C: (f, a) => f(...a)
@@ -1576,10 +1499,10 @@ var NotarizationPlugin = class extends Resource3 {
           ...this._extensions
         ].find((peer2) => !peersTried.has(peer2));
         if (!peer) {
-          log5.info("Exhausted all peers to notarize with", {
+          log4.info("Exhausted all peers to notarize with", {
             retryIn: retryTimeout
           }, {
-            F: __dxlog_file8,
+            F: __dxlog_file7,
             L: 210,
             S: this,
             C: (f, a) => f(...a)
@@ -1589,11 +1512,11 @@ var NotarizationPlugin = class extends Resource3 {
           return;
         }
         peersTried.add(peer);
-        log5("try notarizing", {
+        log4("try notarizing", {
           peer: peer.localPeerId,
           credentialId: credentials.map((credential) => credential.id)
         }, {
-          F: __dxlog_file8,
+          F: __dxlog_file7,
           L: 217,
           S: this,
           C: (f, a) => f(...a)
@@ -1601,8 +1524,8 @@ var NotarizationPlugin = class extends Resource3 {
         await peer.rpc.NotarizationService.notarize({
           credentials: credentials.filter((credential) => !this._processedCredentials.has(credential.id))
         });
-        log5("success", void 0, {
-          F: __dxlog_file8,
+        log4("success", void 0, {
+          F: __dxlog_file7,
           L: 221,
           S: this,
           C: (f, a) => f(...a)
@@ -1610,8 +1533,8 @@ var NotarizationPlugin = class extends Resource3 {
         await sleep(successDelay);
       } catch (err) {
         if (!ctx.disposed && !err.message.includes(WRITER_NOT_SET_ERROR_CODE)) {
-          log5.info("error notarizing (recoverable)", err, {
-            F: __dxlog_file8,
+          log4.info("error notarizing (recoverable)", err, {
+            F: __dxlog_file7,
             L: 226,
             S: this,
             C: (f, a) => f(...a)
@@ -1639,8 +1562,8 @@ var NotarizationPlugin = class extends Resource3 {
             jitter: timeouts.jitter
           }
         });
-        log5("edge notarization success", void 0, {
-          F: __dxlog_file8,
+        log4("edge notarization success", void 0, {
+          F: __dxlog_file7,
           L: 254,
           S: this,
           C: (f, a) => f(...a)
@@ -1663,7 +1586,7 @@ var NotarizationPlugin = class extends Resource3 {
   }
   setWriter(writer) {
     invariant4(!this._writer, "Writer already set.", {
-      F: __dxlog_file8,
+      F: __dxlog_file7,
       L: 274,
       S: this,
       A: [
@@ -1705,18 +1628,18 @@ var NotarizationPlugin = class extends Resource3 {
         });
         const credentials = response.awaitingNotarization.credentials;
         if (!credentials.length) {
-          log5("edge did not return credentials for notarization", void 0, {
-            F: __dxlog_file8,
+          log4("edge did not return credentials for notarization", void 0, {
+            F: __dxlog_file7,
             L: 311,
             S: this,
             C: (f, a) => f(...a)
           });
           return;
         }
-        log5("got edge credentials for notarization", {
+        log4("got edge credentials for notarization", {
           count: credentials.length
         }, {
-          F: __dxlog_file8,
+          F: __dxlog_file7,
           L: 315,
           S: this,
           C: (f, a) => f(...a)
@@ -1726,10 +1649,10 @@ var NotarizationPlugin = class extends Resource3 {
           return credentialCodec.decode(binary);
         });
         await this._notarizeCredentials(writer, decodedCredentials);
-        log5.info("notarized edge credentials", {
+        log4.info("notarized edge credentials", {
           count: decodedCredentials.length
         }, {
-          F: __dxlog_file8,
+          F: __dxlog_file7,
           L: 324,
           S: this,
           C: (f, a) => f(...a)
@@ -1743,7 +1666,7 @@ var NotarizationPlugin = class extends Resource3 {
     if (this._processedCredentials.has(id)) {
       return;
     }
-    await entry(this._processCredentialsTriggers, id).orInsert(new Trigger3()).value.wait();
+    await entry(this._processCredentialsTriggers, id).orInsert(new Trigger2()).value.wait();
   }
   /**
   * Requests from other peers to notarize credentials.
@@ -1757,7 +1680,7 @@ var NotarizationPlugin = class extends Resource3 {
   async _notarizeCredentials(writer, credentials) {
     for (const credential of credentials) {
       invariant4(credential.id, "Credential must have an id", {
-        F: __dxlog_file8,
+        F: __dxlog_file7,
         L: 350,
         S: this,
         A: [
@@ -1778,10 +1701,10 @@ var NotarizationPlugin = class extends Resource3 {
   createExtension() {
     const extension = new NotarizationTeleportExtension({
       onOpen: async () => {
-        log5("extension opened", {
+        log4("extension opened", {
           peer: extension.localPeerId
         }, {
-          F: __dxlog_file8,
+          F: __dxlog_file7,
           L: 365,
           S: this,
           C: (f, a) => f(...a)
@@ -1790,10 +1713,10 @@ var NotarizationPlugin = class extends Resource3 {
         this._extensionOpened.emit();
       },
       onClose: async () => {
-        log5("extension closed", {
+        log4("extension closed", {
           peer: extension.localPeerId
         }, {
-          F: __dxlog_file8,
+          F: __dxlog_file7,
           L: 370,
           S: this,
           C: (f, a) => f(...a)
@@ -1806,11 +1729,11 @@ var NotarizationPlugin = class extends Resource3 {
   }
   _scheduleTimeout(ctx, errors, timeout) {
     scheduleTask2(ctx, () => {
-      log5.warn("Notarization timeout", {
+      log4.warn("Notarization timeout", {
         timeout,
         peers: Array.from(this._extensions).map((extension) => extension.remotePeerId)
       }, {
-        F: __dxlog_file8,
+        F: __dxlog_file7,
         L: 382,
         S: this,
         C: (f, a) => f(...a)
@@ -1825,17 +1748,17 @@ _ts_decorate2([
 ], NotarizationPlugin.prototype, "_spaceId", void 0);
 var handleEdgeError = (error) => {
   if (!(error instanceof EdgeCallFailedError) || error.errorData) {
-    log5.catch(error, void 0, {
-      F: __dxlog_file8,
+    log4.catch(error, void 0, {
+      F: __dxlog_file7,
       L: 396,
       S: void 0,
       C: (f, a) => f(...a)
     });
   } else {
-    log5.info("Edge notarization failure", {
+    log4.info("Edge notarization failure", {
       reason: error.reason
     }, {
-      F: __dxlog_file8,
+      F: __dxlog_file7,
       L: 398,
       S: void 0,
       C: (f, a) => f(...a)
@@ -1878,7 +1801,7 @@ import { Event as Event5 } from "@dxos/async";
 import { AUTH_TIMEOUT, LOAD_CONTROL_FEEDS_TIMEOUT } from "@dxos/client-protocol";
 import { DeviceStateMachine, createCredentialSignerWithKey, createCredentialSignerWithChain, ProfileStateMachine } from "@dxos/credentials";
 import { writeMessages as writeMessages3 } from "@dxos/feed-store";
-import { invariant as invariant7 } from "@dxos/invariant";
+import { invariant as invariant8 } from "@dxos/invariant";
 import { PublicKey as PublicKey6 } from "@dxos/keys";
 import { log as log9 } from "@dxos/log";
 import { AdmittedFeed as AdmittedFeed2 } from "@dxos/protocols/proto/dxos/halo/credentials";
@@ -1889,8 +1812,8 @@ import { ComplexSet as ComplexSet2 } from "@dxos/util";
 // packages/sdk/client-services/src/packlets/identity/default-space-state-machine.ts
 import { getCredentialAssertion } from "@dxos/credentials";
 import { SpaceId } from "@dxos/keys";
-import { log as log6 } from "@dxos/log";
-var __dxlog_file9 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/default-space-state-machine.ts";
+import { log as log5 } from "@dxos/log";
+var __dxlog_file8 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/default-space-state-machine.ts";
 var DefaultSpaceStateMachine = class {
   constructor(_params) {
     this._params = _params;
@@ -1903,11 +1826,11 @@ var DefaultSpaceStateMachine = class {
     switch (assertion["@type"]) {
       case "dxos.halo.credentials.DefaultSpace": {
         if (!credential.subject.id.equals(this._params.identityKey)) {
-          log6.warn("Invalid default space credential", {
+          log5.warn("Invalid default space credential", {
             expectedIdentity: this._params.identityKey,
             credential
           }, {
-            F: __dxlog_file9,
+            F: __dxlog_file8,
             L: 32,
             S: this,
             C: (f, a) => f(...a)
@@ -1915,10 +1838,10 @@ var DefaultSpaceStateMachine = class {
           return;
         }
         if (!SpaceId.isValid(assertion.spaceId)) {
-          log6.warn("Invalid default space id", {
+          log5.warn("Invalid default space id", {
             id: assertion.spaceId
           }, {
-            F: __dxlog_file9,
+            F: __dxlog_file8,
             L: 36,
             S: this,
             C: (f, a) => f(...a)
@@ -1934,16 +1857,17 @@ var DefaultSpaceStateMachine = class {
 
 // packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts
 import { Event as Event4, synchronized, trackLeaks } from "@dxos/async";
+import { interpretAsDocumentId } from "@dxos/automerge/automerge-repo";
 import { PropertiesType, TYPE_PROPERTIES } from "@dxos/client-protocol";
-import { LifecycleState, Resource as Resource4, cancelWithContext } from "@dxos/context";
+import { Context as Context4, LifecycleState, Resource as Resource4, cancelWithContext } from "@dxos/context";
 import { createAdmissionCredentials, getCredentialAssertion as getCredentialAssertion2 } from "@dxos/credentials";
-import { findInlineObjectOfType, AuthStatus, CredentialServerExtension } from "@dxos/echo-pipeline";
-import { SpaceDocVersion, encodeReference } from "@dxos/echo-protocol";
+import { DatabaseRoot, findInlineObjectOfType, AuthStatus, CredentialServerExtension } from "@dxos/echo-pipeline";
+import { SpaceDocVersion, createIdFromSpaceKey, encodeReference } from "@dxos/echo-protocol";
 import { createObjectId, getTypeReference } from "@dxos/echo-schema";
 import { writeMessages } from "@dxos/feed-store";
-import { invariant as invariant5 } from "@dxos/invariant";
+import { assertArgument, assertState, failedInvariant, invariant as invariant5 } from "@dxos/invariant";
 import { PublicKey as PublicKey5 } from "@dxos/keys";
-import { log as log7 } from "@dxos/log";
+import { log as log6 } from "@dxos/log";
 import { AlreadyJoinedError, trace as Trace } from "@dxos/protocols";
 import { Invitation, SpaceState } from "@dxos/protocols/proto/dxos/client/services";
 import { EdgeReplicationSetting } from "@dxos/protocols/proto/dxos/echo/metadata";
@@ -2029,7 +1953,7 @@ function _ts_decorate3(decorators, target, key, desc) {
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file10 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts";
+var __dxlog_file9 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts";
 var PRESENCE_ANNOUNCE_INTERVAL = 1e4;
 var PRESENCE_OFFLINE_TIMEOUT = 2e4;
 var DEFAULT_SPACE_KEY = "__DEFAULT__";
@@ -2085,66 +2009,71 @@ var DataSpaceManager = class extends Resource4 {
   get spaces() {
     return this._spaces;
   }
+  getSpaceById(spaceId) {
+    return [
+      ...this._spaces.values()
+    ].find((space) => space.id === spaceId);
+  }
   async _open() {
-    log7("open", void 0, {
-      F: __dxlog_file10,
-      L: 192,
+    log6("open", void 0, {
+      F: __dxlog_file9,
+      L: 213,
       S: this,
       C: (f, a) => f(...a)
     });
-    log7.trace("dxos.echo.data-space-manager.open", Trace.begin({
+    log6.trace("dxos.echo.data-space-manager.open", Trace.begin({
       id: this._instanceId
     }), {
-      F: __dxlog_file10,
-      L: 193,
+      F: __dxlog_file9,
+      L: 214,
       S: this,
       C: (f, a) => f(...a)
     });
-    log7("metadata loaded", {
+    log6("metadata loaded", {
       spaces: this._metadataStore.spaces.length
     }, {
-      F: __dxlog_file10,
-      L: 194,
+      F: __dxlog_file9,
+      L: 215,
       S: this,
       C: (f, a) => f(...a)
     });
     await forEachAsync(this._metadataStore.spaces, async (spaceMetadata) => {
       try {
-        log7("load space", {
+        log6("load space", {
           spaceMetadata
         }, {
-          F: __dxlog_file10,
-          L: 198,
+          F: __dxlog_file9,
+          L: 219,
           S: this,
           C: (f, a) => f(...a)
         });
         await this._constructSpace(spaceMetadata);
       } catch (err) {
-        log7.error("Error loading space", {
+        log6.error("Error loading space", {
           spaceMetadata,
           err
         }, {
-          F: __dxlog_file10,
-          L: 201,
+          F: __dxlog_file9,
+          L: 222,
           S: this,
           C: (f, a) => f(...a)
         });
       }
     });
     this.updated.emit();
-    log7.trace("dxos.echo.data-space-manager.open", Trace.end({
+    log6.trace("dxos.echo.data-space-manager.open", Trace.end({
       id: this._instanceId
     }), {
-      F: __dxlog_file10,
-      L: 207,
+      F: __dxlog_file9,
+      L: 228,
       S: this,
       C: (f, a) => f(...a)
     });
   }
   async _close() {
-    log7("close", void 0, {
-      F: __dxlog_file10,
-      L: 212,
+    log6("close", void 0, {
+      F: __dxlog_file9,
+      L: 233,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2156,19 +2085,13 @@ var DataSpaceManager = class extends Resource4 {
   /**
   * Creates a new space writing the genesis credentials to the control feed.
   */
-  async createSpace() {
-    invariant5(this._lifecycleState === LifecycleState.OPEN, "Not open.", {
-      F: __dxlog_file10,
-      L: 224,
-      S: this,
-      A: [
-        "this._lifecycleState === LifecycleState.OPEN",
-        "'Not open.'"
-      ]
-    });
+  async createSpace(options = {}) {
+    assertArgument(!!options.rootUrl === !!options.documents, "root url must be required when providing documents");
+    assertState(this._lifecycleState === LifecycleState.OPEN, "Not open.");
     const spaceKey = await this._keyring.createKey();
     const controlFeedKey = await this._keyring.createKey();
     const dataFeedKey = await this._keyring.createKey();
+    const spaceId = await createIdFromSpaceKey(spaceKey);
     const metadata = {
       key: spaceKey,
       genesisFeedKey: controlFeedKey,
@@ -2176,23 +2099,85 @@ var DataSpaceManager = class extends Resource4 {
       dataFeedKey,
       state: SpaceState.SPACE_ACTIVE
     };
-    log7("creating space...", {
+    log6("creating space...", {
+      spaceId,
       spaceKey
     }, {
-      F: __dxlog_file10,
-      L: 236,
+      F: __dxlog_file9,
+      L: 262,
+      S: this,
+      C: (f, a) => f(...a)
+    });
+    const documentIdMapping = {};
+    if (options.documents) {
+      invariant5(Object.keys(options.documents).every((documentId) => /^[a-zA-Z0-9]+$/.test(documentId)), "Invalid document IDs", {
+        F: __dxlog_file9,
+        L: 267,
+        S: this,
+        A: [
+          "Object.keys(options.documents).every((documentId) => /^[a-zA-Z0-9]+$/.test(documentId))",
+          "'Invalid document IDs'"
+        ]
+      });
+      await Promise.all(Object.entries(options.documents).map(async ([documentId, data]) => {
+        log6("creating document...", {
+          documentId
+        }, {
+          F: __dxlog_file9,
+          L: 274,
+          S: this,
+          C: (f, a) => f(...a)
+        });
+        const newDoc = await this._echoHost.createDoc(data, {
+          preserveHistory: true
+        });
+        documentIdMapping[documentId] = newDoc.documentId;
+      }));
+    }
+    log6("opening space...", {
+      spaceKey
+    }, {
+      F: __dxlog_file9,
+      L: 281,
+      S: this,
+      C: (f, a) => f(...a)
+    });
+    let root;
+    if (options.rootUrl) {
+      const newRootDocId = documentIdMapping[interpretAsDocumentId(options.rootUrl)] ?? failedInvariant();
+      const rootDocHandle = await this._echoHost.loadDoc(Context4.default(void 0, {
+        F: __dxlog_file9,
+        L: 286
+      }), newRootDocId);
+      DatabaseRoot.mapLinks(rootDocHandle, documentIdMapping);
+      root = await this._echoHost.openSpaceRoot(spaceId, `automerge:${newRootDocId}`);
+    } else {
+      root = await this._echoHost.createSpaceRoot(spaceKey);
+    }
+    log6("constructing space...", {
+      spaceKey
+    }, {
+      F: __dxlog_file9,
+      L: 294,
       S: this,
       C: (f, a) => f(...a)
     });
-    const root = await this._echoHost.createSpaceRoot(spaceKey);
     const space = await this._constructSpace(metadata);
     await space.open();
+    log6("adding space...", {
+      spaceKey
+    }, {
+      F: __dxlog_file9,
+      L: 299,
+      S: this,
+      C: (f, a) => f(...a)
+    });
     const credentials = await spaceGenesis(this._keyring, this._signingContext, space.inner, root.url);
     await this._metadataStore.addSpace(metadata);
     const memberCredential = credentials[1];
     invariant5(getCredentialAssertion2(memberCredential)["@type"] === "dxos.halo.credentials.SpaceMember", void 0, {
-      F: __dxlog_file10,
-      L: 246,
+      F: __dxlog_file9,
+      L: 305,
       S: this,
       A: [
         "getCredentialAssertion(memberCredential)['@type'] === 'dxos.halo.credentials.SpaceMember'",
@@ -2201,6 +2186,15 @@ var DataSpaceManager = class extends Resource4 {
     });
     await this._signingContext.recordCredential(memberCredential);
     await space.initializeDataPipeline();
+    log6("space ready.", {
+      spaceId,
+      spaceKey
+    }, {
+      F: __dxlog_file9,
+      L: 310,
+      S: this,
+      C: (f, a) => f(...a)
+    });
     this.updated.emit();
     return space;
   }
@@ -2217,12 +2211,12 @@ var DataSpaceManager = class extends Resource4 {
         throw new Error("Legacy space version is not supported");
       }
       default:
-        log7.warn("unknown space version", {
+        log6.warn("unknown space version", {
           version: space.databaseRoot.getVersion(),
           spaceId: space.id
         }, {
-          F: __dxlog_file10,
-          L: 269,
+          F: __dxlog_file9,
+          L: 330,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -2256,8 +2250,8 @@ var DataSpaceManager = class extends Resource4 {
   async _getSpaceRootDocument(space) {
     const automergeIndex = space.automergeSpaceState.rootUrl;
     invariant5(automergeIndex, void 0, {
-      F: __dxlog_file10,
-      L: 302,
+      F: __dxlog_file9,
+      L: 363,
       S: this,
       A: [
         "automergeIndex",
@@ -2270,17 +2264,17 @@ var DataSpaceManager = class extends Resource4 {
   }
   // TODO(burdon): Rename join space.
   async acceptSpace(opts) {
-    log7("accept space", {
+    log6("accept space", {
       opts
     }, {
-      F: __dxlog_file10,
-      L: 311,
+      F: __dxlog_file9,
+      L: 372,
       S: this,
       C: (f, a) => f(...a)
     });
     invariant5(this._lifecycleState === LifecycleState.OPEN, "Not open.", {
-      F: __dxlog_file10,
-      L: 312,
+      F: __dxlog_file9,
+      L: 373,
       S: this,
       A: [
         "this._lifecycleState === LifecycleState.OPEN",
@@ -2288,8 +2282,8 @@ var DataSpaceManager = class extends Resource4 {
       ]
     });
     invariant5(!this._spaces.has(opts.spaceKey), "Space already exists.", {
-      F: __dxlog_file10,
-      L: 313,
+      F: __dxlog_file9,
+      L: 374,
       S: this,
       A: [
         "!this._spaces.has(opts.spaceKey)",
@@ -2312,8 +2306,8 @@ var DataSpaceManager = class extends Resource4 {
   async admitMember(options) {
     const space = this._spaceManager.spaces.get(options.spaceKey);
     invariant5(space, void 0, {
-      F: __dxlog_file10,
-      L: 333,
+      F: __dxlog_file9,
+      L: 394,
       S: this,
       A: [
         "space",
@@ -2325,8 +2319,8 @@ var DataSpaceManager = class extends Resource4 {
     }
     const credentials = await createAdmissionCredentials(this._signingContext.credentialSigner, options.identityKey, space.key, space.genesisFeedKey, options.role, space.spaceState.membershipChainHeads, options.profile, options.delegationCredentialId);
     invariant5(credentials[0].credential, void 0, {
-      F: __dxlog_file10,
-      L: 352,
+      F: __dxlog_file9,
+      L: 413,
       S: this,
       A: [
         "credentials[0].credential",
@@ -2335,8 +2329,8 @@ var DataSpaceManager = class extends Resource4 {
     });
     const spaceMemberCredential = credentials[0].credential.credential;
     invariant5(getCredentialAssertion2(spaceMemberCredential)["@type"] === "dxos.halo.credentials.SpaceMember", void 0, {
-      F: __dxlog_file10,
-      L: 354,
+      F: __dxlog_file9,
+      L: 415,
       S: this,
       A: [
         "getCredentialAssertion(spaceMemberCredential)['@type'] === 'dxos.halo.credentials.SpaceMember'",
@@ -2373,8 +2367,8 @@ var DataSpaceManager = class extends Resource4 {
   async setSpaceEdgeReplicationSetting(spaceKey, setting) {
     const space = this._spaces.get(spaceKey);
     invariant5(space, "Space not found.", {
-      F: __dxlog_file10,
-      L: 391,
+      F: __dxlog_file9,
+      L: 452,
       S: this,
       A: [
         "space",
@@ -2395,11 +2389,11 @@ var DataSpaceManager = class extends Resource4 {
     space.stateUpdate.emit();
   }
   async _constructSpace(metadata) {
-    log7("construct space", {
+    log6("construct space", {
       metadata
     }, {
-      F: __dxlog_file10,
-      L: 410,
+      F: __dxlog_file9,
+      L: 471,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2439,11 +2433,11 @@ var DataSpaceManager = class extends Resource4 {
           session.addExtension("dxos.mesh.teleport.notarization", dataSpace.notarizationPlugin.createExtension());
           await this._connectEchoMeshReplicator(space, session);
         } catch (err) {
-          log7.warn("error on authorized connection", {
+          log6.warn("error on authorized connection", {
             err
           }, {
-            F: __dxlog_file10,
-            L: 452,
+            F: __dxlog_file9,
+            L: 513,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -2451,9 +2445,9 @@ var DataSpaceManager = class extends Resource4 {
         }
       }),
       onAuthFailure: () => {
-        log7.warn("auth failure", void 0, {
-          F: __dxlog_file10,
-          L: 457,
+        log6.warn("auth failure", void 0, {
+          F: __dxlog_file9,
+          L: 518,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -2482,22 +2476,22 @@ var DataSpaceManager = class extends Resource4 {
       signingContext: this._signingContext,
       callbacks: {
         beforeReady: async () => {
-          log7("before space ready", {
+          log6("before space ready", {
             space: space.key
           }, {
-            F: __dxlog_file10,
-            L: 484,
+            F: __dxlog_file9,
+            L: 545,
             S: this,
             C: (f, a) => f(...a)
           });
         },
         afterReady: async () => {
-          log7("after space ready", {
+          log6("after space ready", {
             space: space.key,
             open: this._lifecycleState === LifecycleState.OPEN
           }, {
-            F: __dxlog_file10,
-            L: 487,
+            F: __dxlog_file9,
+            L: 548,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -2512,11 +2506,11 @@ var DataSpaceManager = class extends Resource4 {
           }
         },
         beforeClose: async () => {
-          log7("before space close", {
+          log6("before space close", {
             space: space.key
           }, {
-            F: __dxlog_file10,
-            L: 495,
+            F: __dxlog_file9,
+            L: 556,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -2533,11 +2527,11 @@ var DataSpaceManager = class extends Resource4 {
       if (!setting || setting === EdgeReplicationSetting.ENABLED) {
         await this._echoEdgeReplicator?.connectToSpace(dataSpace.id);
       } else if (this._echoEdgeReplicator) {
-        log7("not connecting EchoEdgeReplicator because of EdgeReplicationSetting", {
+        log6("not connecting EchoEdgeReplicator because of EdgeReplicationSetting", {
           spaceId: dataSpace.id
         }, {
-          F: __dxlog_file10,
-          L: 509,
+          F: __dxlog_file9,
+          L: 570,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -2563,11 +2557,11 @@ var DataSpaceManager = class extends Resource4 {
   async _connectEchoMeshReplicator(space, session) {
     const replicator = this._meshReplicator;
     if (!replicator) {
-      log7.warn("p2p automerge replication disabled", {
+      log6.warn("p2p automerge replication disabled", {
         space: space.key
       }, {
-        F: __dxlog_file10,
-        L: 536,
+        F: __dxlog_file9,
+        L: 597,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -2590,17 +2584,17 @@ var DataSpaceManager = class extends Resource4 {
         return (s && member.role === SpaceMember3.Role.REMOVED !== (s.authStatus === AuthStatus.FAILURE)) ?? false;
       });
       sessionsToClose.forEach((session) => {
-        void session.close().catch(log7.error);
+        void session.close().catch(log6.error);
       });
       closedSessions += sessionsToClose.length;
     }
-    log7("processed member role changes", {
+    log6("processed member role changes", {
       roleChangeCount: memberInfo.length,
       peersOnline: presence.getPeersOnline().length,
       closedSessions
     }, {
-      F: __dxlog_file10,
-      L: 562,
+      F: __dxlog_file9,
+      L: 623,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2611,15 +2605,15 @@ var DataSpaceManager = class extends Resource4 {
     if (role === SpaceMember3.Role.REMOVED) {
       const session = peerState.peerId && space.protocol.sessions.get(peerState.peerId);
       if (session != null) {
-        log7("closing a session with a removed peer", {
+        log6("closing a session with a removed peer", {
           peerId: peerState.peerId
         }, {
-          F: __dxlog_file10,
-          L: 576,
+          F: __dxlog_file9,
+          L: 637,
           S: this,
           C: (f, a) => f(...a)
         });
-        void session.close().catch(log7.error);
+        void session.close().catch(log6.error);
       }
     }
   }
@@ -2676,16 +2670,177 @@ DataSpaceManager = _ts_decorate3([
 ], DataSpaceManager);
 
 // packages/sdk/client-services/src/packlets/spaces/spaces-service.ts
-import { EventSubscriptions as EventSubscriptions2, UpdateScheduler, scheduleTask as scheduleTask3 } from "@dxos/async";
+import { SubscriptionList as SubscriptionList2, UpdateScheduler, scheduleTask as scheduleTask3 } from "@dxos/async";
 import { Stream as Stream7 } from "@dxos/codec-protobuf/stream";
 import { createAdmissionCredentials as createAdmissionCredentials2, createDidFromIdentityKey as createDidFromIdentityKey2, getCredentialAssertion as getCredentialAssertion3 } from "@dxos/credentials";
 import { raise } from "@dxos/debug";
 import { writeMessages as writeMessages2 } from "@dxos/feed-store";
-import { invariant as invariant6 } from "@dxos/invariant";
+import { assertArgument as assertArgument4, assertState as assertState3, invariant as invariant7 } from "@dxos/invariant";
+import { SpaceId as SpaceId2 } from "@dxos/keys";
 import { log as log8 } from "@dxos/log";
-import { ApiError, SpaceNotFoundError, encodeError, IdentityNotInitializedError, AuthorizationError } from "@dxos/protocols";
+import { encodeError, ApiError, AuthorizationError, IdentityNotInitializedError, SpaceNotFoundError } from "@dxos/protocols";
 import { SpaceMember as SpaceMember4, SpaceState as SpaceState2 } from "@dxos/protocols/proto/dxos/client/services";
 import { trace as trace2 } from "@dxos/tracing";
+
+// packages/sdk/client-services/src/packlets/space-export/space-archive-writer.ts
+import { Resource as Resource5 } from "@dxos/context";
+import { assertArgument as assertArgument2, assertState as assertState2 } from "@dxos/invariant";
+import { SpaceArchiveFileStructure, SpaceArchiveVersion } from "@dxos/protocols";
+var CURRENT_VERSION = SpaceArchiveVersion.V1;
+var SpaceArchiveWriter = class extends Resource5 {
+  constructor() {
+    super(...arguments);
+    this._meta = void 0;
+    this._currentRootUrl = void 0;
+  }
+  async _open(ctx) {
+    this._tar = await import("@obsidize/tar-browserify");
+  }
+  async _close() {
+    return Promise.resolve();
+  }
+  async begin(meta) {
+    assertState2(this._tar, "Not open");
+    assertState2(!this._meta, "Already started");
+    this._meta = meta;
+    this._archive = new this._tar.Archive();
+  }
+  async setCurrentRootUrl(url) {
+    assertArgument2(url.startsWith("automerge:"), "Invalid root URL");
+    assertState2(this._tar, "Not open");
+    assertState2(this._meta, "Not started");
+    this._currentRootUrl = url;
+  }
+  async writeDocument(documentId, data) {
+    assertArgument2(!documentId.startsWith("automerge:"), "Invalid document ID");
+    assertState2(this._archive, "Not open");
+    this._archive.addBinaryFile(`${SpaceArchiveFileStructure.documents}/${documentId}.bin`, data);
+  }
+  async finish() {
+    assertState2(this._archive, "Not open");
+    assertState2(this._meta, "Not started");
+    assertState2(this._currentRootUrl, "No root URL set");
+    const metadata = {
+      version: CURRENT_VERSION,
+      createdAt: Date.now(),
+      exportedBy: this._meta.exportedBy,
+      originalSpaceId: this._meta.spaceId,
+      echo: {
+        currentRootUrl: this._currentRootUrl
+      }
+    };
+    this._archive.addTextFile(SpaceArchiveFileStructure.metadata, JSON.stringify(metadata));
+    const binary = this._archive.toUint8Array();
+    return {
+      filename: `${this._meta.spaceId}.tar`,
+      contents: binary
+    };
+  }
+};
+
+// packages/sdk/client-services/src/packlets/space-export/space-archive-reader.ts
+import { assertArgument as assertArgument3, failedInvariant as failedInvariant2, invariant as invariant6 } from "@dxos/invariant";
+import { log as log7 } from "@dxos/log";
+import { SpaceArchiveFileStructure as SpaceArchiveFileStructure2 } from "@dxos/protocols";
+var __dxlog_file10 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/space-export/space-archive-reader.ts";
+var extractSpaceArchive = async (archive) => {
+  const { Archive } = await import("@obsidize/tar-browserify");
+  const { entries } = await Archive.extract(archive.contents);
+  const metadataEntry = entries.find((entry2) => entry2.fileName === SpaceArchiveFileStructure2.metadata);
+  assertArgument3(metadataEntry, "Metadata entry not found");
+  const metadata = JSON.parse(metadataEntry.getContentAsText());
+  const documents = {};
+  for (const entry2 of entries.filter((entry3) => entry3.fileName.startsWith(`${SpaceArchiveFileStructure2.documents}/`))) {
+    const documentId = entry2.fileName.replace(`${SpaceArchiveFileStructure2.documents}/`, "").replace(/\.bin$/, "");
+    invariant6(!documentId.includes("/"), void 0, {
+      F: __dxlog_file10,
+      L: 27,
+      S: void 0,
+      A: [
+        "!documentId.includes('/')",
+        ""
+      ]
+    });
+    documents[documentId] = entry2.content ?? failedInvariant2();
+  }
+  log7.info("extracted space archive", {
+    metadata,
+    documents
+  }, {
+    F: __dxlog_file10,
+    L: 31,
+    S: void 0,
+    C: (f, a) => f(...a)
+  });
+  return {
+    metadata,
+    documents
+  };
+};
+
+// packages/sdk/client-services/src/packlets/spaces/spaces-service.ts
+function _using_ctx2() {
+  var _disposeSuppressedError = typeof SuppressedError === "function" ? SuppressedError : function(error, suppressed) {
+    var err = new Error();
+    err.name = "SuppressedError";
+    err.suppressed = suppressed;
+    err.error = error;
+    return err;
+  }, empty = {}, stack = [];
+  function using(isAwait, value) {
+    if (value != null) {
+      if (Object(value) !== value) {
+        throw new TypeError("using declarations can only be used with objects, functions, null, or undefined.");
+      }
+      if (isAwait) {
+        var dispose = value[Symbol.asyncDispose || Symbol.for("Symbol.asyncDispose")];
+      }
+      if (dispose == null) {
+        dispose = value[Symbol.dispose || Symbol.for("Symbol.dispose")];
+      }
+      if (typeof dispose !== "function") {
+        throw new TypeError(`Property [Symbol.dispose] is not a function.`);
+      }
+      stack.push({
+        v: value,
+        d: dispose,
+        a: isAwait
+      });
+    } else if (isAwait) {
+      stack.push({
+        d: value,
+        a: isAwait
+      });
+    }
+    return value;
+  }
+  return {
+    e: empty,
+    u: using.bind(null, false),
+    a: using.bind(null, true),
+    d: function() {
+      var error = this.e;
+      function next() {
+        while (resource = stack.pop()) {
+          try {
+            var resource, disposalResult = resource.d && resource.d.call(resource.v);
+            if (resource.a) {
+              return Promise.resolve(disposalResult).then(next, err);
+            }
+          } catch (e) {
+            return err(e);
+          }
+        }
+        if (error !== empty) throw error;
+      }
+      function err(e) {
+        error = error !== empty ? new _disposeSuppressedError(error, e) : e;
+        return next();
+      }
+      return next();
+    }
+  };
+}
 var __dxlog_file11 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/spaces-service.ts";
 var SpacesServiceImpl = class {
   constructor(_identityManager, _spaceManager, _getDataSpaceManager) {
@@ -2732,9 +2887,9 @@ var SpacesServiceImpl = class {
       });
     }
     const credentials = await createAdmissionCredentials2(identity.getIdentityCredentialSigner(), request.memberKey, space.key, space.genesisFeedKey, request.newRole, space.spaceState.membershipChainHeads);
-    invariant6(credentials[0].credential, void 0, {
+    invariant7(credentials[0].credential, void 0, {
       F: __dxlog_file11,
-      L: 111,
+      L: 118,
       S: this,
       A: [
         "credentials[0].credential",
@@ -2742,9 +2897,9 @@ var SpacesServiceImpl = class {
       ]
     });
     const spaceMemberCredential = credentials[0].credential.credential;
-    invariant6(getCredentialAssertion3(spaceMemberCredential)["@type"] === "dxos.halo.credentials.SpaceMember", void 0, {
+    invariant7(getCredentialAssertion3(spaceMemberCredential)["@type"] === "dxos.halo.credentials.SpaceMember", void 0, {
       F: __dxlog_file11,
-      L: 113,
+      L: 120,
       S: this,
       A: [
         "getCredentialAssertion(spaceMemberCredential)['@type'] === 'dxos.halo.credentials.SpaceMember'",
@@ -2762,7 +2917,7 @@ var SpacesServiceImpl = class {
           ids: spaces.map((space) => space.id)
         }), {
           F: __dxlog_file11,
-          L: 126,
+          L: 133,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -2771,11 +2926,11 @@ var SpacesServiceImpl = class {
           spaces
         });
       }, {
-        maxFrequency: false ? void 0 : 2
+        maxFrequency: process.env.NODE_ENV === "test" ? void 0 : 2
       });
       scheduleTask3(ctx, async () => {
         const dataSpaceManager = await this._getDataSpaceManager();
-        const subscriptions = new EventSubscriptions2();
+        const subscriptions = new SubscriptionList2();
         ctx.onDispose(() => subscriptions.clear());
         const subscribeSpaces = () => {
           subscriptions.clear();
@@ -2852,18 +3007,18 @@ var SpacesServiceImpl = class {
           }
         });
       } else {
-        invariant6(!credential.id, "Id on unsigned credentials is not allowed", {
+        invariant7(!credential.id, "Id on unsigned credentials is not allowed", {
           F: __dxlog_file11,
-          L: 224,
+          L: 231,
           S: this,
           A: [
             "!credential.id",
             "'Id on unsigned credentials is not allowed'"
           ]
         });
-        invariant6(this._identityManager.identity, "Identity is not available", {
+        invariant7(this._identityManager.identity, "Identity is not available", {
           F: __dxlog_file11,
-          L: 225,
+          L: 232,
           S: this,
           A: [
             "this._identityManager.identity",
@@ -2871,9 +3026,9 @@ var SpacesServiceImpl = class {
           ]
         });
         const signer = this._identityManager.identity.getIdentityCredentialSigner();
-        invariant6(credential.issuer.equals(signer.getIssuer()), void 0, {
+        invariant7(credential.issuer.equals(signer.getIssuer()), void 0, {
           F: __dxlog_file11,
-          L: 227,
+          L: 234,
           S: this,
           A: [
             "credential.issuer.equals(signer.getIssuer())",
@@ -2919,11 +3074,58 @@ var SpacesServiceImpl = class {
       credential
     });
   }
+  async exportSpace(request) {
+    try {
+      var _usingCtx = _using_ctx2();
+      const writer = _usingCtx.a(await new SpaceArchiveWriter().open());
+      assertArgument4(SpaceId2.isValid(request.spaceId), "Invalid space ID");
+      const dataSpaceManager = await this._getDataSpaceManager();
+      const space = dataSpaceManager.getSpaceById(request.spaceId) ?? raise(new Error("Space not found"));
+      await writer.begin({
+        spaceId: space.id
+      });
+      const rootUrl = space.automergeSpaceState.lastEpoch?.subject.assertion.automergeRoot;
+      assertState3(rootUrl, "Space does not have a root URL");
+      await writer.setCurrentRootUrl(rootUrl);
+      for await (const [documentId, data] of space.getAllDocuments()) {
+        await writer.writeDocument(documentId, data);
+      }
+      const archive = await writer.finish();
+      return {
+        archive
+      };
+    } catch (_) {
+      _usingCtx.e = _;
+    } finally {
+      await _usingCtx.d();
+    }
+  }
+  async importSpace(request) {
+    const dataSpaceManager = await this._getDataSpaceManager();
+    const extracted = await extractSpaceArchive(request.archive);
+    invariant7(extracted.metadata.echo?.currentRootUrl, "Space archive does not contain a root URL", {
+      F: __dxlog_file11,
+      L: 288,
+      S: this,
+      A: [
+        "extracted.metadata.echo?.currentRootUrl",
+        "'Space archive does not contain a root URL'"
+      ]
+    });
+    const space = await dataSpaceManager.createSpace({
+      documents: extracted.documents,
+      rootUrl: extracted.metadata.echo?.currentRootUrl
+    });
+    await this._updateMetrics();
+    return {
+      newSpaceId: space.id
+    };
+  }
   async _joinByAdmission({ credential }) {
     const assertion = getCredentialAssertion3(credential);
-    invariant6(assertion["@type"] === "dxos.halo.credentials.SpaceMember", "Invalid credential", {
+    invariant7(assertion["@type"] === "dxos.halo.credentials.SpaceMember", "Invalid credential", {
       F: __dxlog_file11,
-      L: 261,
+      L: 299,
       S: this,
       A: [
         "assertion['@type'] === 'dxos.halo.credentials.SpaceMember'",
@@ -2931,9 +3133,9 @@ var SpacesServiceImpl = class {
       ]
     });
     const myIdentity = this._identityManager.identity;
-    invariant6(myIdentity && credential.subject.id.equals(myIdentity.identityKey), void 0, {
+    invariant7(myIdentity && credential.subject.id.equals(myIdentity.identityKey), void 0, {
       F: __dxlog_file11,
-      L: 263,
+      L: 301,
       S: this,
       A: [
         "myIdentity && credential.subject.id.equals(myIdentity.identityKey)",
@@ -3145,7 +3347,7 @@ var Identity = class {
   * Requires identity to be ready.
   */
   getIdentityCredentialSigner() {
-    invariant7(this._deviceStateMachine.deviceCredentialChain, "Device credential chain is not ready.", {
+    invariant8(this._deviceStateMachine.deviceCredentialChain, "Device credential chain is not ready.", {
       F: __dxlog_file12,
       L: 198,
       S: this,
@@ -3247,9 +3449,9 @@ Identity = _ts_decorate4([
 // packages/sdk/client-services/src/packlets/identity/identity-manager.ts
 import platform from "platform";
 import { Event as Event6 } from "@dxos/async";
-import { Context as Context4 } from "@dxos/context";
+import { Context as Context5 } from "@dxos/context";
 import { createCredentialSignerWithKey as createCredentialSignerWithKey2, createDidFromIdentityKey as createDidFromIdentityKey3, CredentialGenerator } from "@dxos/credentials";
-import { invariant as invariant8 } from "@dxos/invariant";
+import { invariant as invariant9 } from "@dxos/invariant";
 import { PublicKey as PublicKey7 } from "@dxos/keys";
 import { log as log10 } from "@dxos/log";
 import { trace as trace4 } from "@dxos/protocols";
@@ -3328,13 +3530,13 @@ var IdentityManager = class {
     });
   }
   async close() {
-    await this._identity?.close(new Context4(void 0, {
+    await this._identity?.close(new Context5(void 0, {
       F: __dxlog_file13,
       L: 135
     }));
   }
   async createIdentity({ displayName, deviceProfile } = {}) {
-    invariant8(!this._identity, "Identity already exists.", {
+    invariant9(!this._identity, "Identity already exists.", {
       F: __dxlog_file13,
       L: 140,
       S: this,
@@ -3361,13 +3563,13 @@ var IdentityManager = class {
       }
     };
     const identity = await this._constructIdentity(identityRecord);
-    await identity.open(new Context4(void 0, {
+    await identity.open(new Context5(void 0, {
       F: __dxlog_file13,
       L: 156
     }));
     {
       const generator = new CredentialGenerator(this._keyring, identityRecord.identityKey, identityRecord.deviceKey);
-      invariant8(identityRecord.haloSpace.genesisFeedKey, "Genesis feed key is required.", {
+      invariant9(identityRecord.haloSpace.genesisFeedKey, "Genesis feed key is required.", {
         F: __dxlog_file13,
         L: 160,
         S: this,
@@ -3376,7 +3578,7 @@ var IdentityManager = class {
           "'Genesis feed key is required.'"
         ]
       });
-      invariant8(identityRecord.haloSpace.dataFeedKey, "Data feed key is required.", {
+      invariant9(identityRecord.haloSpace.dataFeedKey, "Data feed key is required.", {
         F: __dxlog_file13,
         L: 161,
         S: this,
@@ -3469,7 +3671,7 @@ var IdentityManager = class {
       S: this,
       C: (f, a) => f(...a)
     });
-    invariant8(!this._identity, "Identity already exists.", {
+    invariant9(!this._identity, "Identity already exists.", {
       F: __dxlog_file13,
       L: 245,
       S: this,
@@ -3490,7 +3692,7 @@ var IdentityManager = class {
       }
     };
     const identity = await this._constructIdentity(identityRecord);
-    await identity.open(new Context4(void 0, {
+    await identity.open(new Context5(void 0, {
       F: __dxlog_file13,
       L: 259
     }));
@@ -3534,7 +3736,7 @@ var IdentityManager = class {
   * Update the profile document of an existing identity.
   */
   async updateProfile(profile) {
-    invariant8(this._identity, "Identity not initialized.", {
+    invariant9(this._identity, "Identity not initialized.", {
       F: __dxlog_file13,
       L: 291,
       S: this,
@@ -3565,7 +3767,7 @@ var IdentityManager = class {
     return profile;
   }
   async updateDeviceProfile(profile) {
-    invariant8(this._identity, "Identity not initialized.", {
+    invariant9(this._identity, "Identity not initialized.", {
       F: __dxlog_file13,
       L: 308,
       S: this,
@@ -3601,7 +3803,7 @@ var IdentityManager = class {
     };
   }
   async _constructIdentity(identityRecord) {
-    invariant8(!this._identity, void 0, {
+    invariant9(!this._identity, void 0, {
       F: __dxlog_file13,
       L: 334,
       S: this,
@@ -3627,7 +3829,7 @@ var IdentityManager = class {
       identityKey: identityRecord.deviceKey,
       gossip
     });
-    invariant8(identityRecord.haloSpace.controlFeedKey, void 0, {
+    invariant9(identityRecord.haloSpace.controlFeedKey, void 0, {
       F: __dxlog_file13,
       L: 348,
       S: this,
@@ -3639,7 +3841,7 @@ var IdentityManager = class {
     const controlFeed = await this._feedStore.openFeed(identityRecord.haloSpace.controlFeedKey, {
       writable: true
     });
-    invariant8(identityRecord.haloSpace.dataFeedKey, void 0, {
+    invariant9(identityRecord.haloSpace.dataFeedKey, void 0, {
       F: __dxlog_file13,
       L: 352,
       S: this,
@@ -3728,17 +3930,17 @@ IdentityManager = _ts_decorate5([
 ], IdentityManager);
 
 // packages/sdk/client-services/src/packlets/identity/identity-service.ts
-import { Trigger as Trigger4, sleep as sleep2 } from "@dxos/async";
+import { Trigger as Trigger3, sleep as sleep2 } from "@dxos/async";
 import { Stream as Stream8 } from "@dxos/codec-protobuf/stream";
-import { Resource as Resource5 } from "@dxos/context";
+import { Resource as Resource6 } from "@dxos/context";
 import { createCredential as createCredential2, signPresentation } from "@dxos/credentials";
-import { invariant as invariant9 } from "@dxos/invariant";
+import { invariant as invariant10 } from "@dxos/invariant";
 import { log as log11 } from "@dxos/log";
 import { SpaceState as SpaceState3 } from "@dxos/protocols/proto/dxos/client/services";
 import { safeAwaitAll } from "@dxos/util";
 var __dxlog_file14 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/identity/identity-service.ts";
 var DEFAULT_SPACE_SEARCH_TIMEOUT = 1e4;
-var IdentityServiceImpl = class extends Resource5 {
+var IdentityServiceImpl = class extends Resource6 {
   constructor(_identityManager, _recoveryManager, _keyring, _dataSpaceManagerProvider, _createIdentity, _onProfileUpdate) {
     super();
     this._identityManager = _identityManager;
@@ -3766,7 +3968,7 @@ var IdentityServiceImpl = class extends Resource5 {
   async _createDefaultSpace(dataSpaceManager) {
     const space = await dataSpaceManager.createDefaultSpace();
     const identity = this._identityManager.identity;
-    invariant9(identity, void 0, {
+    invariant10(identity, void 0, {
       F: __dxlog_file14,
       L: 61,
       S: this,
@@ -3798,7 +4000,7 @@ var IdentityServiceImpl = class extends Resource5 {
     };
   }
   async updateProfile(profile) {
-    invariant9(this._identityManager.identity, "Identity not initialized.", {
+    invariant10(this._identityManager.identity, "Identity not initialized.", {
       F: __dxlog_file14,
       L: 88,
       S: this,
@@ -3824,6 +4026,10 @@ var IdentityServiceImpl = class extends Resource5 {
       });
     } else if (request.external) {
       await this._recoveryManager.recoverIdentityWithExternalSignature(request.external);
+    } else if (request.token) {
+      await this._recoveryManager.recoverIdentityWithToken({
+        token: request.token
+      });
     } else {
       throw new Error("Invalid request.");
     }
@@ -3831,9 +4037,9 @@ var IdentityServiceImpl = class extends Resource5 {
   }
   // TODO(burdon): Rename createPresentation?
   async signPresentation({ presentation, nonce }) {
-    invariant9(this._identityManager.identity, "Identity not initialized.", {
+    invariant10(this._identityManager.identity, "Identity not initialized.", {
       F: __dxlog_file14,
-      L: 116,
+      L: 118,
       S: this,
       A: [
         "this._identityManager.identity",
@@ -3850,9 +4056,9 @@ var IdentityServiceImpl = class extends Resource5 {
   }
   async createAuthCredential() {
     const identity = this._identityManager.identity;
-    invariant9(identity, "Identity not initialized.", {
+    invariant10(identity, "Identity not initialized.", {
       F: __dxlog_file14,
-      L: 130,
+      L: 132,
       S: this,
       A: [
         "identity",
@@ -3874,7 +4080,7 @@ var IdentityServiceImpl = class extends Resource5 {
     let recodedDefaultSpace = false;
     let foundDefaultSpace = false;
     const dataSpaceManager = this._dataSpaceManagerProvider();
-    const recordedDefaultSpaceTrigger = new Trigger4();
+    const recordedDefaultSpaceTrigger = new Trigger3();
     const allProcessed = safeAwaitAll(dataSpaceManager.spaces.values(), async (space) => {
       if (space.state === SpaceState3.SPACE_CLOSED) {
         await space.open();
@@ -3890,7 +4096,7 @@ var IdentityServiceImpl = class extends Resource5 {
             duplicate: space.id
           }, {
             F: __dxlog_file14,
-            L: 164,
+            L: 166,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -3904,7 +4110,7 @@ var IdentityServiceImpl = class extends Resource5 {
     }, (err) => {
       log11.catch(err, void 0, {
         F: __dxlog_file14,
-        L: 175,
+        L: 177,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -3927,7 +4133,7 @@ function _ts_decorate6(decorators, target, key, desc) {
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-function _using_ctx2() {
+function _using_ctx3() {
   var _disposeSuppressedError = typeof SuppressedError === "function" ? SuppressedError : function(error, suppressed) {
     var err = new Error();
     err.name = "SuppressedError";
@@ -3992,9 +4198,9 @@ function _using_ctx2() {
 var __dxlog_file15 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/data-space.ts";
 var DataSpace = class {
   constructor(params) {
-    this._ctx = new Context5(void 0, {
+    this._ctx = new Context6(void 0, {
       F: __dxlog_file15,
-      L: 96
+      L: 97
     });
     this._cache = void 0;
     this._edgeFeedReplicator = void 0;
@@ -4047,7 +4253,7 @@ var DataSpace = class {
       state: SpaceState4[this._state]
     }, {
       F: __dxlog_file15,
-      L: 172,
+      L: 173,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4104,9 +4310,9 @@ var DataSpace = class {
     if (this._edgeFeedReplicator) {
       this.inner.protocol.feedAdded.append(this._onFeedAdded);
     }
-    await this._inner.open(new Context5(void 0, {
+    await this._inner.open(new Context6(void 0, {
       F: __dxlog_file15,
-      L: 246
+      L: 247
     }));
     await this._inner.startProtocol();
     await this._edgeFeedReplicator?.open();
@@ -4115,7 +4321,7 @@ var DataSpace = class {
       state: SpaceState4[this._state]
     }, {
       F: __dxlog_file15,
-      L: 252,
+      L: 253,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4135,14 +4341,14 @@ var DataSpace = class {
       state: SpaceState4[this._state]
     }, {
       F: __dxlog_file15,
-      L: 271,
+      L: 272,
       S: this,
       C: (f, a) => f(...a)
     });
     await this._ctx.dispose();
-    this._ctx = new Context5(void 0, {
+    this._ctx = new Context6(void 0, {
       F: __dxlog_file15,
-      L: 273
+      L: 274
     });
     if (this._edgeFeedReplicator) {
       this.inner.protocol.feedAdded.remove(this._onFeedAdded);
@@ -4175,7 +4381,7 @@ var DataSpace = class {
         if (err instanceof CancelledError || err instanceof ContextDisposedError) {
           log12("data pipeline initialization cancelled", err, {
             F: __dxlog_file15,
-            L: 311,
+            L: 312,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -4183,7 +4389,7 @@ var DataSpace = class {
         }
         log12.error("Error initializing data pipeline", err, {
           F: __dxlog_file15,
-          L: 315,
+          L: 316,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -4192,7 +4398,7 @@ var DataSpace = class {
           state: SpaceState4[this._state]
         }, {
           F: __dxlog_file15,
-          L: 317,
+          L: 318,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -4212,13 +4418,13 @@ var DataSpace = class {
       state: SpaceState4[this._state]
     }, {
       F: __dxlog_file15,
-      L: 333,
+      L: 334,
       S: this,
       C: (f, a) => f(...a)
     });
     log12("initializing control pipeline", void 0, {
       F: __dxlog_file15,
-      L: 335,
+      L: 336,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4227,25 +4433,52 @@ var DataSpace = class {
     const ready = this.stateUpdate.waitForCondition(() => this._state === SpaceState4.SPACE_READY);
     log12("initializing automerge root", void 0, {
       F: __dxlog_file15,
-      L: 343,
+      L: 344,
       S: this,
       C: (f, a) => f(...a)
     });
     this._automergeSpaceState.startProcessingRootDocs();
     log12("waiting for space to be ready", void 0, {
       F: __dxlog_file15,
-      L: 347,
+      L: 348,
       S: this,
       C: (f, a) => f(...a)
     });
     await ready;
     log12("space is ready", void 0, {
       F: __dxlog_file15,
-      L: 349,
+      L: 350,
       S: this,
       C: (f, a) => f(...a)
     });
   }
+  async *getAllDocuments() {
+    invariant11(this._databaseRoot, "Space is not ready", {
+      F: __dxlog_file15,
+      L: 354,
+      S: this,
+      A: [
+        "this._databaseRoot",
+        "'Space is not ready'"
+      ]
+    });
+    const doc = this._databaseRoot.docSync() ?? failedInvariant3();
+    const root = save(doc);
+    yield [
+      this._databaseRoot.documentId,
+      root
+    ];
+    for (const documentUrl of this._databaseRoot.getAllLinkedDocuments()) {
+      const data = await this._echoHost.exportDoc(Context6.default(void 0, {
+        F: __dxlog_file15,
+        L: 360
+      }), documentUrl);
+      yield [
+        documentUrl.replace(/^automerge:/, ""),
+        data
+      ];
+    }
+  }
   async _enterReadyState() {
     await this._callbacks.beforeReady?.();
     this._state = SpaceState4.SPACE_READY;
@@ -4253,7 +4486,7 @@ var DataSpace = class {
       state: SpaceState4[this._state]
     }, {
       F: __dxlog_file15,
-      L: 356,
+      L: 369,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4270,7 +4503,7 @@ var DataSpace = class {
     await this._createWritableFeeds();
     log12("writable feeds created", void 0, {
       F: __dxlog_file15,
-      L: 373,
+      L: 386,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4324,7 +4557,7 @@ var DataSpace = class {
           count: credentials.length
         }, {
           F: __dxlog_file15,
-          L: 431,
+          L: 444,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -4335,14 +4568,14 @@ var DataSpace = class {
         });
         log12("credentials notarized", void 0, {
           F: __dxlog_file15,
-          L: 435,
+          L: 448,
           S: this,
           C: (f, a) => f(...a)
         });
       } catch (err) {
         log12.error("error notarizing credentials for feed admission", err, {
           F: __dxlog_file15,
-          L: 437,
+          L: 450,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -4357,7 +4590,7 @@ var DataSpace = class {
       rootUrl
     }, {
       F: __dxlog_file15,
-      L: 447,
+      L: 460,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4365,7 +4598,7 @@ var DataSpace = class {
     queueMicrotask(async () => {
       try {
         try {
-          var _usingCtx = _using_ctx2();
+          var _usingCtx = _using_ctx3();
           await warnAfterTimeout(5e3, "Automerge root doc load timeout (DataSpace)", async () => {
             await cancelWithContext2(this._ctx, handle.whenReady());
           });
@@ -4376,7 +4609,7 @@ var DataSpace = class {
             // Ensure only one root is processed at a time.
             _usingCtx.u(await this._epochProcessingMutex.acquire())
           );
-          const doc = handle.docSync() ?? failedInvariant();
+          const doc = handle.docSync() ?? failedInvariant3();
           if (!doc.access?.spaceKey) {
             handle.change((doc2) => {
               doc2.access = {
@@ -4409,7 +4642,7 @@ var DataSpace = class {
           err
         }, {
           F: __dxlog_file15,
-          L: 490,
+          L: 503,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -4499,7 +4732,7 @@ var DataSpace = class {
       state: SpaceState4[this._state]
     }, {
       F: __dxlog_file15,
-      L: 572,
+      L: 585,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -4560,7 +4793,7 @@ DataSpace = _ts_decorate6([
 
 // packages/sdk/client-services/src/packlets/invitations/device-invitation-protocol.ts
 import { getCredentialAssertion as getCredentialAssertion4 } from "@dxos/credentials";
-import { invariant as invariant10 } from "@dxos/invariant";
+import { invariant as invariant12 } from "@dxos/invariant";
 import { AlreadyJoinedError as AlreadyJoinedError2 } from "@dxos/protocols";
 import { Invitation as Invitation2 } from "@dxos/protocols/proto/dxos/client/services";
 var __dxlog_file16 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/invitations/device-invitation-protocol.ts";
@@ -4590,7 +4823,7 @@ var DeviceInvitationProtocol = class {
     throw new Error("delegation not supported");
   }
   async admit(_, request) {
-    invariant10(request.device, void 0, {
+    invariant12(request.device, void 0, {
       F: __dxlog_file16,
       L: 53,
       S: this,
@@ -4601,7 +4834,7 @@ var DeviceInvitationProtocol = class {
     });
     const identity = this._getIdentity();
     const credential = await identity.admitDevice(request.device);
-    invariant10(getCredentialAssertion4(credential)["@type"] === "dxos.halo.credentials.AuthorizedDevice", void 0, {
+    invariant12(getCredentialAssertion4(credential)["@type"] === "dxos.halo.credentials.AuthorizedDevice", void 0, {
       F: __dxlog_file16,
       L: 56,
       S: this,
@@ -4646,7 +4879,7 @@ var DeviceInvitationProtocol = class {
     };
   }
   async accept(response, request) {
-    invariant10(response.device, void 0, {
+    invariant12(response.device, void 0, {
       F: __dxlog_file16,
       L: 100,
       S: this,
@@ -4656,7 +4889,7 @@ var DeviceInvitationProtocol = class {
       ]
     });
     const { identityKey, haloSpaceKey, genesisFeedKey, controlTimeframe } = response.device;
-    invariant10(request.device, void 0, {
+    invariant12(request.device, void 0, {
       F: __dxlog_file16,
       L: 103,
       S: this,
@@ -4688,7 +4921,7 @@ import { scheduleTask as scheduleTask7, TimeoutError as TimeoutError2 } from "@d
 import { INVITATION_TIMEOUT, getExpirationTime } from "@dxos/client-protocol";
 import { ContextDisposedError as ContextDisposedError3 } from "@dxos/context";
 import { createKeyPair, sign as sign2 } from "@dxos/crypto";
-import { invariant as invariant15 } from "@dxos/invariant";
+import { invariant as invariant17 } from "@dxos/invariant";
 import { PublicKey as PublicKey11 } from "@dxos/keys";
 import { log as log18 } from "@dxos/log";
 import { createTeleportProtocolFactory } from "@dxos/network-manager";
@@ -4702,8 +4935,8 @@ import { ComplexSet as ComplexSet5 } from "@dxos/util";
 // packages/sdk/client-services/src/packlets/invitations/edge-invitation-handler.ts
 import { scheduleMicroTask as scheduleMicroTask3, scheduleTask as scheduleTask5 } from "@dxos/async";
 import { sign } from "@dxos/crypto";
-import { invariant as invariant11 } from "@dxos/invariant";
-import { SpaceId as SpaceId2 } from "@dxos/keys";
+import { invariant as invariant13 } from "@dxos/invariant";
+import { SpaceId as SpaceId3 } from "@dxos/keys";
 import { log as log13 } from "@dxos/log";
 import { EdgeAuthChallengeError, EdgeCallFailedError as EdgeCallFailedError2 } from "@dxos/protocols";
 import { schema as schema3 } from "@dxos/protocols/proto";
@@ -4758,7 +4991,7 @@ var EdgeInvitationHandler = class {
     }
     const invitation = guardedState.current;
     const spaceId = invitation.spaceId;
-    const canBeHandledByEdge = invitation.authMethod !== Invitation4.AuthMethod.SHARED_SECRET && invitation.type === Invitation4.Type.DELEGATED && invitation.kind === Invitation4.Kind.SPACE && spaceId != null && SpaceId2.isValid(spaceId);
+    const canBeHandledByEdge = invitation.authMethod !== Invitation4.AuthMethod.SHARED_SECRET && invitation.type === Invitation4.Type.DELEGATED && invitation.kind === Invitation4.Kind.SPACE && spaceId != null && SpaceId3.isValid(spaceId);
     if (!canBeHandledByEdge) {
       log13("invitation could not be handled by edge", {
         invitation
@@ -4854,7 +5087,7 @@ var EdgeInvitationHandler = class {
     };
   }
   async _joinSpaceByInvitation(guardedState, spaceId, request) {
-    invariant11(this._client, void 0, {
+    invariant13(this._client, void 0, {
       F: __dxlog_file17,
       L: 160,
       S: this,
@@ -4891,9 +5124,9 @@ var EdgeInvitationHandler = class {
 };
 
 // packages/sdk/client-services/src/packlets/invitations/invitation-guest-extenstion.ts
-import { Trigger as Trigger5 } from "@dxos/async";
-import { cancelWithContext as cancelWithContext4, Context as Context6 } from "@dxos/context";
-import { invariant as invariant12 } from "@dxos/invariant";
+import { Trigger as Trigger4 } from "@dxos/async";
+import { cancelWithContext as cancelWithContext4, Context as Context7 } from "@dxos/context";
+import { invariant as invariant14 } from "@dxos/invariant";
 import { log as log14 } from "@dxos/log";
 import { InvalidInvitationExtensionRoleError } from "@dxos/protocols";
 import { schema as schema4 } from "@dxos/protocols/proto";
@@ -4913,11 +5146,11 @@ var InvitationGuestExtension = class extends RpcExtension2 {
     });
     this._invitationFlowMutex = _invitationFlowMutex;
     this._callbacks = _callbacks;
-    this._ctx = new Context6(void 0, {
+    this._ctx = new Context7(void 0, {
       F: __dxlog_file18,
       L: 38
     });
-    this._remoteOptionsTrigger = new Trigger5();
+    this._remoteOptionsTrigger = new Trigger4();
     this._invitationFlowLock = null;
   }
   hasFlowLock() {
@@ -4927,7 +5160,7 @@ var InvitationGuestExtension = class extends RpcExtension2 {
     return {
       InvitationHostService: {
         options: async (options) => {
-          invariant12(!this._remoteOptions, "Remote options already set.", {
+          invariant14(!this._remoteOptions, "Remote options already set.", {
             F: __dxlog_file18,
             L: 68,
             S: this,
@@ -5024,10 +5257,10 @@ var InvitationGuestExtension = class extends RpcExtension2 {
 };
 
 // packages/sdk/client-services/src/packlets/invitations/invitation-host-extension.ts
-import { Trigger as Trigger6, scheduleTask as scheduleTask6 } from "@dxos/async";
-import { cancelWithContext as cancelWithContext5, Context as Context7 } from "@dxos/context";
+import { Trigger as Trigger5, scheduleTask as scheduleTask6 } from "@dxos/async";
+import { cancelWithContext as cancelWithContext5, Context as Context8 } from "@dxos/context";
 import { randomBytes, verify } from "@dxos/crypto";
-import { invariant as invariant13, InvariantViolation } from "@dxos/invariant";
+import { invariant as invariant15, InvariantViolation } from "@dxos/invariant";
 import { PublicKey as PublicKey9 } from "@dxos/keys";
 import { log as log15 } from "@dxos/log";
 import { InvalidInvitationExtensionRoleError as InvalidInvitationExtensionRoleError2, trace as trace6 } from "@dxos/protocols";
@@ -5050,16 +5283,16 @@ var InvitationHostExtension = class extends RpcExtension3 {
     });
     this._invitationFlowMutex = _invitationFlowMutex;
     this._callbacks = _callbacks;
-    this._ctx = new Context7(void 0, {
+    this._ctx = new Context8(void 0, {
       F: __dxlog_file19,
       L: 57
     });
-    this._remoteOptionsTrigger = new Trigger6();
+    this._remoteOptionsTrigger = new Trigger5();
     this._challenge = void 0;
     this.guestProfile = void 0;
     this.authenticationPassed = false;
     this.authenticationRetry = 0;
-    this.completedTrigger = new Trigger6();
+    this.completedTrigger = new Trigger5();
     this._invitationFlowLock = null;
   }
   hasFlowLock() {
@@ -5071,7 +5304,7 @@ var InvitationHostExtension = class extends RpcExtension3 {
       // Perhaps in the future we will have more complex logic here.
       InvitationHostService: {
         options: async (options) => {
-          invariant13(!this._remoteOptions, "Remote options already set.", {
+          invariant15(!this._remoteOptions, "Remote options already set.", {
             F: __dxlog_file19,
             L: 106,
             S: this,
@@ -5462,7 +5695,7 @@ var isNonTerminalState = (currentState) => {
 };
 
 // packages/sdk/client-services/src/packlets/invitations/invitation-topology.ts
-import { invariant as invariant14 } from "@dxos/invariant";
+import { invariant as invariant16 } from "@dxos/invariant";
 import { PublicKey as PublicKey10 } from "@dxos/keys";
 import { log as log17 } from "@dxos/log";
 import { InvitationOptions as InvitationOptions3 } from "@dxos/protocols/proto/dxos/halo/invitations";
@@ -5474,7 +5707,7 @@ var InvitationTopology = class {
     this._seenPeers = new ComplexSet4(PublicKey10.hash);
   }
   init(controller) {
-    invariant14(!this._controller, "Already initialized.", {
+    invariant16(!this._controller, "Already initialized.", {
       F: __dxlog_file21,
       L: 42,
       S: this,
@@ -5486,7 +5719,7 @@ var InvitationTopology = class {
     this._controller = controller;
   }
   update() {
-    invariant14(this._controller, "Not initialized.", {
+    invariant16(this._controller, "Not initialized.", {
       F: __dxlog_file21,
       L: 47,
       S: this,
@@ -5520,7 +5753,7 @@ var InvitationTopology = class {
     }
   }
   async onOffer(peer) {
-    invariant14(this._controller, "Not initialized.", {
+    invariant16(this._controller, "Not initialized.", {
       F: __dxlog_file21,
       L: 76,
       S: this,
@@ -5589,7 +5822,7 @@ var InvitationsHandler = class {
               C: (f, a) => f(...a)
             });
             const deviceKey = admissionRequest.device?.deviceKey ?? admissionRequest.space?.deviceKey;
-            invariant15(deviceKey, void 0, {
+            invariant17(deviceKey, void 0, {
               F: __dxlog_file22,
               L: 112,
               S: this,
@@ -5781,7 +6014,7 @@ var InvitationsHandler = class {
     });
     const { timeout = INVITATION_TIMEOUT } = invitation;
     if (deviceProfile) {
-      invariant15(invitation.kind === Invitation7.Kind.DEVICE, "deviceProfile provided for non-device invitation", {
+      invariant17(invitation.kind === Invitation7.Kind.DEVICE, "deviceProfile provided for non-device invitation", {
         F: __dxlog_file22,
         L: 236,
         S: this,
@@ -6019,7 +6252,7 @@ var InvitationsHandler = class {
         stream.error(error);
         await ctx.dispose();
       } else {
-        invariant15(invitation.swarmKey, void 0, {
+        invariant17(invitation.swarmKey, void 0, {
           F: __dxlog_file22,
           L: 406,
           S: this,
@@ -6242,7 +6475,7 @@ var InvitationsServiceImpl = class {
 // packages/sdk/client-services/src/packlets/invitations/space-invitation-protocol.ts
 import { createCancelDelegatedSpaceInvitationCredential, createDelegatedSpaceInvitationCredential, getCredentialAssertion as getCredentialAssertion5 } from "@dxos/credentials";
 import { writeMessages as writeMessages4 } from "@dxos/feed-store";
-import { invariant as invariant16 } from "@dxos/invariant";
+import { invariant as invariant18 } from "@dxos/invariant";
 import { log as log19 } from "@dxos/log";
 import { AlreadyJoinedError as AlreadyJoinedError3, AuthorizationError as AuthorizationError2, InvalidInvitationError as InvalidInvitationError2, SpaceNotFoundError as SpaceNotFoundError2 } from "@dxos/protocols";
 import { Invitation as Invitation8 } from "@dxos/protocols/proto/dxos/client/services";
@@ -6276,7 +6509,7 @@ var SpaceInvitationProtocol = class {
     return void 0;
   }
   getInvitationContext() {
-    invariant16(this._spaceKey, void 0, {
+    invariant18(this._spaceKey, void 0, {
       F: __dxlog_file23,
       L: 65,
       S: this,
@@ -6286,7 +6519,7 @@ var SpaceInvitationProtocol = class {
       ]
     });
     const space = this._spaceManager.spaces.get(this._spaceKey);
-    invariant16(space, void 0, {
+    invariant18(space, void 0, {
       F: __dxlog_file23,
       L: 67,
       S: this,
@@ -6302,7 +6535,7 @@ var SpaceInvitationProtocol = class {
     };
   }
   async admit(invitation, request, guestProfile) {
-    invariant16(this._spaceKey && request.space, void 0, {
+    invariant18(this._spaceKey && request.space, void 0, {
       F: __dxlog_file23,
       L: 80,
       S: this,
@@ -6336,7 +6569,7 @@ var SpaceInvitationProtocol = class {
     };
   }
   async delegate(invitation) {
-    invariant16(this._spaceKey, void 0, {
+    invariant18(this._spaceKey, void 0, {
       F: __dxlog_file23,
       L: 101,
       S: this,
@@ -6346,7 +6579,7 @@ var SpaceInvitationProtocol = class {
       ]
     });
     const space = this._spaceManager.spaces.get(this._spaceKey);
-    invariant16(space, void 0, {
+    invariant18(space, void 0, {
       F: __dxlog_file23,
       L: 103,
       S: this,
@@ -6356,7 +6589,7 @@ var SpaceInvitationProtocol = class {
       ]
     });
     if (invitation.authMethod === Invitation8.AuthMethod.KNOWN_PUBLIC_KEY) {
-      invariant16(invitation.guestKeypair?.publicKey, void 0, {
+      invariant18(invitation.guestKeypair?.publicKey, void 0, {
         F: __dxlog_file23,
         L: 105,
         S: this,
@@ -6384,7 +6617,7 @@ var SpaceInvitationProtocol = class {
       multiUse: invitation.multiUse ?? false,
       guestKey: invitation.authMethod === Invitation8.AuthMethod.KNOWN_PUBLIC_KEY ? invitation.guestKeypair.publicKey : void 0
     });
-    invariant16(credential.credential, void 0, {
+    invariant18(credential.credential, void 0, {
       F: __dxlog_file23,
       L: 126,
       S: this,
@@ -6399,7 +6632,7 @@ var SpaceInvitationProtocol = class {
     return credential.credential.credential.id;
   }
   async cancelDelegation(invitation) {
-    invariant16(this._spaceKey, void 0, {
+    invariant18(this._spaceKey, void 0, {
       F: __dxlog_file23,
       L: 132,
       S: this,
@@ -6408,7 +6641,7 @@ var SpaceInvitationProtocol = class {
         ""
       ]
     });
-    invariant16(invitation.type === Invitation8.Type.DELEGATED && invitation.delegationCredentialId, void 0, {
+    invariant18(invitation.type === Invitation8.Type.DELEGATED && invitation.delegationCredentialId, void 0, {
       F: __dxlog_file23,
       L: 133,
       S: this,
@@ -6418,7 +6651,7 @@ var SpaceInvitationProtocol = class {
       ]
     });
     const space = this._spaceManager.spaces.get(this._spaceKey);
-    invariant16(space, void 0, {
+    invariant18(space, void 0, {
       F: __dxlog_file23,
       L: 135,
       S: this,
@@ -6437,7 +6670,7 @@ var SpaceInvitationProtocol = class {
       C: (f, a) => f(...a)
     });
     const credential = await createCancelDelegatedSpaceInvitationCredential(this._signingContext.credentialSigner, space.key, invitation.delegationCredentialId);
-    invariant16(credential.credential, void 0, {
+    invariant18(credential.credential, void 0, {
       F: __dxlog_file23,
       L: 144,
       S: this,
@@ -6476,7 +6709,7 @@ var SpaceInvitationProtocol = class {
     };
   }
   async accept(response) {
-    invariant16(response.space, void 0, {
+    invariant18(response.space, void 0, {
       F: __dxlog_file23,
       L: 179,
       S: this,
@@ -6487,7 +6720,7 @@ var SpaceInvitationProtocol = class {
     });
     const { credential, controlTimeframe, dataTimeframe } = response.space;
     const assertion = getCredentialAssertion5(credential);
-    invariant16(assertion["@type"] === "dxos.halo.credentials.SpaceMember", "Invalid credential", {
+    invariant18(assertion["@type"] === "dxos.halo.credentials.SpaceMember", "Invalid credential", {
       F: __dxlog_file23,
       L: 182,
       S: this,
@@ -6496,7 +6729,7 @@ var SpaceInvitationProtocol = class {
         "'Invalid credential'"
       ]
     });
-    invariant16(credential.subject.id.equals(this._signingContext.identityKey), void 0, {
+    invariant18(credential.subject.id.equals(this._signingContext.identityKey), void 0, {
       F: __dxlog_file23,
       L: 183,
       S: this,
@@ -6522,12 +6755,12 @@ var SpaceInvitationProtocol = class {
 };
 
 // packages/sdk/client-services/src/packlets/invitations/invitations-manager.ts
-import { Event as Event8, PushStream, TimeoutError as TimeoutError3, Trigger as Trigger7 } from "@dxos/async";
+import { Event as Event8, PushStream, TimeoutError as TimeoutError3, Trigger as Trigger6 } from "@dxos/async";
 import { AuthenticatingInvitation, AUTHENTICATION_CODE_LENGTH, CancellableInvitation, INVITATION_TIMEOUT as INVITATION_TIMEOUT2 } from "@dxos/client-protocol";
-import { Context as Context8 } from "@dxos/context";
+import { Context as Context9 } from "@dxos/context";
 import { generatePasscode } from "@dxos/credentials";
 import { hasInvitationExpired } from "@dxos/echo-pipeline";
-import { invariant as invariant17 } from "@dxos/invariant";
+import { invariant as invariant19 } from "@dxos/invariant";
 import { PublicKey as PublicKey12 } from "@dxos/keys";
 import { log as log20 } from "@dxos/log";
 import { Invitation as Invitation9 } from "@dxos/protocols/proto/dxos/client/services";
@@ -6597,7 +6830,7 @@ var InvitationsManager = class {
       const persistentInvitations = this._metadataStore.getInvitations();
       const freshInvitations = persistentInvitations.filter((invitation) => !hasInvitationExpired(invitation));
       const loadTasks = freshInvitations.map((persistentInvitation) => {
-        invariant17(!this._createInvitations.get(persistentInvitation.invitationId), "invitation already exists", {
+        invariant19(!this._createInvitations.get(persistentInvitation.invitationId), "invitation already exists", {
           F: __dxlog_file24,
           L: 103,
           S: this,
@@ -6654,7 +6887,7 @@ var InvitationsManager = class {
       S: this,
       C: (f, a) => f(...a)
     });
-    invariant17(invitationId, void 0, {
+    invariant19(invitationId, void 0, {
       F: __dxlog_file24,
       L: 141,
       S: this,
@@ -6686,7 +6919,7 @@ var InvitationsManager = class {
       S: this,
       C: (f, a) => f(...a)
     });
-    invariant17(invitationId, void 0, {
+    invariant19(invitationId, void 0, {
       F: __dxlog_file24,
       L: 152,
       S: this,
@@ -6757,7 +6990,7 @@ var InvitationsManager = class {
   }
   _createObservableInvitation(handler, invitation) {
     const stream = new PushStream();
-    const ctx = new Context8({
+    const ctx = new Context9({
       onError: (err) => {
         stream.error(err);
         void ctx.dispose();
@@ -6795,9 +7028,9 @@ var InvitationsManager = class {
     };
   }
   _createObservableAcceptingInvitation(handler, initialState) {
-    const otpEnteredTrigger = new Trigger7();
+    const otpEnteredTrigger = new Trigger6();
     const stream = new PushStream();
-    const ctx = new Context8({
+    const ctx = new Context9({
       onError: (err) => {
         if (err instanceof TimeoutError3) {
           log20("timeout", {
@@ -6893,9 +7126,9 @@ var InvitationsManager = class {
   }
 };
 
-// packages/sdk/client-services/src/packlets/locks/browser.ts
-import { asyncTimeout as asyncTimeout2, Trigger as Trigger8 } from "@dxos/async";
-import { RESOURCE_LOCK_TIMEOUT } from "@dxos/client-protocol";
+// packages/sdk/client-services/src/packlets/locks/node.ts
+import { invariant as invariant20 } from "@dxos/invariant";
+import { LockFile } from "@dxos/lock-file";
 import { log as log21, logInfo as logInfo3 } from "@dxos/log";
 function _ts_decorate7(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
@@ -6903,115 +7136,50 @@ function _ts_decorate7(decorators, target, key, desc) {
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file25 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/locks/browser.ts";
-var Message;
-(function(Message2) {
-  Message2["ACQUIRING"] = "acquiring";
-})(Message || (Message = {}));
+var __dxlog_file25 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/locks/node.ts";
 var Lock = class {
-  constructor({ lockKey, onAcquire, onRelease }) {
-    this._broadcastChannel = new BroadcastChannel("vault-resource-lock");
-    this._releaseTrigger = new Trigger8();
-    this._lockKey = lockKey;
+  constructor({ lockKey: lockPath, onAcquire, onRelease }) {
+    this._lockPath = lockPath;
     this._onAcquire = onAcquire;
     this._onRelease = onRelease;
-    this._broadcastChannel.onmessage = this._onMessage.bind(this);
   }
   get lockKey() {
-    return this._lockKey;
+    return this._lockPath;
   }
   async acquire() {
-    this._broadcastChannel.postMessage({
-      message: "acquiring"
-    });
-    try {
-      log21("aquiring lock...", void 0, {
-        F: __dxlog_file25,
-        L: 42,
-        S: this,
-        C: (f, a) => f(...a)
-      });
-      await asyncTimeout2(this._requestLock(), RESOURCE_LOCK_TIMEOUT);
-      log21("acquired lock", void 0, {
-        F: __dxlog_file25,
-        L: 44,
-        S: this,
-        C: (f, a) => f(...a)
-      });
-    } catch {
-      log21("stealing lock...", void 0, {
-        F: __dxlog_file25,
-        L: 46,
-        S: this,
-        C: (f, a) => f(...a)
-      });
-      await this._requestLock(true);
-      log21("stolen lock", void 0, {
-        F: __dxlog_file25,
-        L: 48,
-        S: this,
-        C: (f, a) => f(...a)
-      });
-    }
-  }
-  async release() {
-    this._releaseTrigger.wake();
-  }
-  _onMessage(event) {
-    if (event.data.message === "acquiring") {
-      this._releaseTrigger.wake();
-    }
-  }
-  async _requestLock(steal = false) {
-    log21("requesting lock...", {
-      steal
-    }, {
+    log21("acquiring lock...", void 0, {
       F: __dxlog_file25,
-      L: 63,
+      L: 32,
       S: this,
       C: (f, a) => f(...a)
     });
-    const acquired = new Trigger8();
-    void navigator.locks.request(this._lockKey, {
-      steal
-    }, async () => {
-      await this._onAcquire?.();
-      acquired.wake();
-      this._releaseTrigger = new Trigger8();
-      await this._releaseTrigger.wait();
-      log21("releasing lock...", void 0, {
-        F: __dxlog_file25,
-        L: 72,
-        S: this,
-        C: (f, a) => f(...a)
-      });
-      await this._onRelease?.();
-      log21("released lock", void 0, {
-        F: __dxlog_file25,
-        L: 74,
-        S: this,
-        C: (f, a) => f(...a)
-      });
-    }).catch(async () => {
-      await this._onRelease?.();
-    });
-    await acquired.wait();
-    log21("recieved lock", {
-      steal
-    }, {
+    this._fileHandle = await LockFile.acquire(this._lockPath);
+    await this._onAcquire?.();
+    log21("acquired lock", void 0, {
       F: __dxlog_file25,
-      L: 81,
+      L: 37,
       S: this,
       C: (f, a) => f(...a)
     });
   }
+  async release() {
+    await this._onRelease?.();
+    invariant20(this._fileHandle, "Lock is not acquired", {
+      F: __dxlog_file25,
+      L: 42,
+      S: this,
+      A: [
+        "this._fileHandle",
+        "'Lock is not acquired'"
+      ]
+    });
+    await LockFile.release(this._fileHandle);
+  }
 };
 _ts_decorate7([
   logInfo3
 ], Lock.prototype, "lockKey", null);
-var isLocked = (lockPath) => {
-  throw new Error("Not implemented");
-};
+var isLocked = (lockPath) => LockFile.isLocked(lockPath);
 
 // packages/sdk/client-services/src/packlets/services/client-rpc-server.ts
 import { Stream as Stream10 } from "@dxos/codec-protobuf";
@@ -7092,8 +7260,8 @@ ClientRpcServer = _ts_decorate8([
 
 // packages/sdk/client-services/src/packlets/agents/edge-agent-manager.ts
 import { DeferredTask as DeferredTask2, Event as Event9, scheduleTask as scheduleTask8, synchronized as synchronized3 } from "@dxos/async";
-import { Resource as Resource6 } from "@dxos/context";
-import { invariant as invariant18 } from "@dxos/invariant";
+import { Resource as Resource7 } from "@dxos/context";
+import { invariant as invariant21 } from "@dxos/invariant";
 import { PublicKey as PublicKey13 } from "@dxos/keys";
 import { log as log22 } from "@dxos/log";
 import { EdgeAgentStatus, EdgeCallFailedError as EdgeCallFailedError3 } from "@dxos/protocols";
@@ -7109,7 +7277,7 @@ var __dxlog_file26 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/s
 var AGENT_STATUS_QUERY_RETRY_INTERVAL = 5e3;
 var AGENT_STATUS_QUERY_RETRY_JITTER = 1e3;
 var AGENT_FEED_ADDED_CHECK_INTERVAL_MS = 3e3;
-var EdgeAgentManager = class extends Resource6 {
+var EdgeAgentManager = class extends Resource7 {
   constructor(_edgeFeatures, _edgeHttpClient, _dataSpaceManager, _identity) {
     super();
     this._edgeFeatures = _edgeFeatures;
@@ -7126,7 +7294,7 @@ var EdgeAgentManager = class extends Resource6 {
     return this._agentStatus && this._agentStatus !== EdgeAgentStatus.NOT_FOUND;
   }
   async createAgent() {
-    invariant18(this.isOpen, void 0, {
+    invariant21(this.isOpen, void 0, {
       F: __dxlog_file26,
       L: 54,
       S: this,
@@ -7135,7 +7303,7 @@ var EdgeAgentManager = class extends Resource6 {
         ""
       ]
     });
-    invariant18(this._edgeHttpClient, void 0, {
+    invariant21(this._edgeHttpClient, void 0, {
       F: __dxlog_file26,
       L: 55,
       S: this,
@@ -7144,7 +7312,7 @@ var EdgeAgentManager = class extends Resource6 {
         ""
       ]
     });
-    invariant18(this._edgeFeatures?.agents, void 0, {
+    invariant21(this._edgeFeatures?.agents, void 0, {
       F: __dxlog_file26,
       L: 56,
       S: this,
@@ -7222,7 +7390,7 @@ var EdgeAgentManager = class extends Resource6 {
     this._lastKnownDeviceCount = 0;
   }
   async _fetchAgentStatus() {
-    invariant18(this._edgeHttpClient, void 0, {
+    invariant21(this._edgeHttpClient, void 0, {
       F: __dxlog_file26,
       L: 121,
       S: this,
@@ -7394,14 +7562,14 @@ var mapStatus = (agentStatus) => {
 };
 
 // packages/sdk/client-services/src/packlets/services/service-context.ts
-import { Mutex as Mutex4, Trigger as Trigger9 } from "@dxos/async";
-import { Context as Context9, Resource as Resource7 } from "@dxos/context";
+import { Mutex as Mutex4, Trigger as Trigger7 } from "@dxos/async";
+import { Context as Context10, Resource as Resource8 } from "@dxos/context";
 import { getCredentialAssertion as getCredentialAssertion6 } from "@dxos/credentials";
 import { failUndefined as failUndefined2, warnAfterTimeout as warnAfterTimeout2 } from "@dxos/debug";
 import { EchoEdgeReplicator, EchoHost, MeshEchoReplicator, MetadataStore, SpaceManager, valueEncoding } from "@dxos/echo-pipeline";
 import { createChainEdgeIdentity, createEphemeralEdgeIdentity } from "@dxos/edge-client";
 import { FeedFactory, FeedStore } from "@dxos/feed-store";
-import { invariant as invariant20 } from "@dxos/invariant";
+import { invariant as invariant23 } from "@dxos/invariant";
 import { Keyring } from "@dxos/keyring";
 import { PublicKey as PublicKey15 } from "@dxos/keys";
 import { log as log24 } from "@dxos/log";
@@ -7414,7 +7582,7 @@ import { safeInstanceof } from "@dxos/util";
 // packages/sdk/client-services/src/packlets/identity/identity-recovery-manager.ts
 import { generateSeedPhrase, keyPairFromSeedPhrase } from "@dxos/credentials";
 import { sign as sign3 } from "@dxos/crypto";
-import { invariant as invariant19 } from "@dxos/invariant";
+import { invariant as invariant22 } from "@dxos/invariant";
 import { PublicKey as PublicKey14 } from "@dxos/keys";
 import { log as log23 } from "@dxos/log";
 import { EdgeAuthChallengeError as EdgeAuthChallengeError2 } from "@dxos/protocols";
@@ -7430,7 +7598,7 @@ var EdgeIdentityRecoveryManager = class {
   }
   async createRecoveryCredential({ data }) {
     const identity = this._identityProvider();
-    invariant19(identity, void 0, {
+    invariant22(identity, void 0, {
       F: __dxlog_file27,
       L: 37,
       S: this,
@@ -7481,7 +7649,7 @@ var EdgeIdentityRecoveryManager = class {
     };
   }
   async requestRecoveryChallenge() {
-    invariant19(this._edgeClient, "Not connected to EDGE.", {
+    invariant22(this._edgeClient, "Not connected to EDGE.", {
       F: __dxlog_file27,
       L: 74,
       S: this,
@@ -7511,7 +7679,7 @@ var EdgeIdentityRecoveryManager = class {
     }
   }
   async recoverIdentityWithExternalSignature({ lookupKey, deviceKey, controlFeedKey, signature, clientDataJson, authenticatorData }) {
-    invariant19(this._edgeClient, "Not connected to EDGE.", {
+    invariant22(this._edgeClient, "Not connected to EDGE.", {
       F: __dxlog_file27,
       L: 106,
       S: this,
@@ -7541,10 +7709,41 @@ var EdgeIdentityRecoveryManager = class {
       dataFeedKey: await this._keyring.createKey()
     });
   }
+  /**
+  * Recovery identity using an opaque token sent to the user's email.
+  */
+  async recoverIdentityWithToken({ token }) {
+    invariant22(this._edgeClient, "Not connected to EDGE.", {
+      F: __dxlog_file27,
+      L: 139,
+      S: this,
+      A: [
+        "this._edgeClient",
+        "'Not connected to EDGE.'"
+      ]
+    });
+    const deviceKey = await this._keyring.createKey();
+    const controlFeedKey = await this._keyring.createKey();
+    const request = {
+      deviceKey: deviceKey.toHex(),
+      controlFeedKey: controlFeedKey.toHex(),
+      token
+    };
+    const response = await this._edgeClient.recoverIdentity(request);
+    await this._acceptRecoveredIdentity({
+      authorizedDeviceCredential: decodeCredential(response.deviceAuthCredential),
+      haloGenesisFeedKey: PublicKey14.fromHex(response.genesisFeedKey),
+      haloSpaceKey: PublicKey14.fromHex(response.haloSpaceKey),
+      identityKey: PublicKey14.fromHex(response.identityKey),
+      deviceKey,
+      controlFeedKey,
+      dataFeedKey: await this._keyring.createKey()
+    });
+  }
   async recoverIdentity({ recoveryCode }) {
-    invariant19(this._edgeClient, "Not connected to EDGE.", {
+    invariant22(this._edgeClient, "Not connected to EDGE.", {
       F: __dxlog_file27,
-      L: 136,
+      L: 163,
       S: this,
       A: [
         "this._edgeClient",
@@ -7575,7 +7774,7 @@ var EdgeIdentityRecoveryManager = class {
     }
     log23.info("recovering identity", response, {
       F: __dxlog_file27,
-      L: 162,
+      L: 189,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -7603,7 +7802,7 @@ function _ts_decorate10(decorators, target, key, desc) {
   else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-function _using_ctx3() {
+function _using_ctx4() {
   var _disposeSuppressedError = typeof SuppressedError === "function" ? SuppressedError : function(error, suppressed) {
     var err = new Error();
     err.name = "SuppressedError";
@@ -7666,7 +7865,7 @@ function _using_ctx3() {
   };
 }
 var __dxlog_file28 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/services/service-context.ts";
-var ServiceContext = class extends Resource7 {
+var ServiceContext = class extends Resource8 {
   constructor(storage, level, networkManager, signalManager, _edgeConnection, _edgeHttpClient, _runtimeParams, _edgeFeatures) {
     super();
     this.storage = storage;
@@ -7678,7 +7877,7 @@ var ServiceContext = class extends Resource7 {
     this._runtimeParams = _runtimeParams;
     this._edgeFeatures = _edgeFeatures;
     this._edgeIdentityUpdateMutex = new Mutex4();
-    this.initialized = new Trigger9();
+    this.initialized = new Trigger7();
     this._meshReplicator = void 0;
     this._echoEdgeReplicator = void 0;
     this._handlerFactories = /* @__PURE__ */ new Map();
@@ -7821,7 +8020,7 @@ var ServiceContext = class extends Resource7 {
     const identity = await this.identityManager.createIdentity(params);
     await this._setNetworkIdentity();
     await identity.joinNetwork();
-    await this._initialize(new Context9(void 0, {
+    await this._initialize(new Context10(void 0, {
       F: __dxlog_file28,
       L: 258
     }));
@@ -7832,7 +8031,7 @@ var ServiceContext = class extends Resource7 {
       throw new Error("Identity must be created before joining a space.");
     }
     const factory = this._handlerFactories.get(invitation.kind);
-    invariant20(factory, `Unknown invitation kind: ${invitation.kind}`, {
+    invariant23(factory, `Unknown invitation kind: ${invitation.kind}`, {
       F: __dxlog_file28,
       L: 267,
       S: this,
@@ -7858,7 +8057,7 @@ var ServiceContext = class extends Resource7 {
     });
     await identity.joinNetwork();
     await this.identityManager.acceptIdentity(identity, identityRecord, params.deviceProfile);
-    await this._initialize(new Context9(void 0, {
+    await this._initialize(new Context10(void 0, {
       F: __dxlog_file28,
       L: 286
     }));
@@ -7911,7 +8110,7 @@ var ServiceContext = class extends Resource7 {
     this.edgeAgentManager = new EdgeAgentManager(this._edgeFeatures, this._edgeHttpClient, this.dataSpaceManager, identity);
     await this.edgeAgentManager.open();
     this._handlerFactories.set(Invitation10.Kind.SPACE, (invitation) => {
-      invariant20(this.dataSpaceManager, "dataSpaceManager not initialized yet", {
+      invariant23(this.dataSpaceManager, "dataSpaceManager not initialized yet", {
         F: __dxlog_file28,
         L: 339,
         S: this,
@@ -7981,7 +8180,7 @@ var ServiceContext = class extends Resource7 {
   }
   async _setNetworkIdentity(params) {
     try {
-      var _usingCtx = _using_ctx3();
+      var _usingCtx = _using_ctx4();
       const _ = _usingCtx.u(await this._edgeIdentityUpdateMutex.acquire());
       let edgeIdentity;
       const identity = this.identityManager.identity;
@@ -8003,7 +8202,7 @@ var ServiceContext = class extends Resource7 {
           await warnAfterTimeout2(1e4, "Waiting for identity to be ready for edge connection", async () => {
             await identity.ready();
           });
-          invariant20(identity.deviceCredentialChain, void 0, {
+          invariant23(identity.deviceCredentialChain, void 0, {
             F: __dxlog_file28,
             L: 403,
             S: this,
@@ -8128,7 +8327,7 @@ var toStorageType = (type) => {
 };
 
 // packages/sdk/client-services/src/packlets/storage/level.ts
-import path from "@dxos/node-std/path";
+import path from "node:path";
 import { PublicKey as PublicKey16 } from "@dxos/keys";
 import { createLevel as createKV } from "@dxos/kv-store";
 var createLevel = async (config) => {
@@ -8141,7 +8340,7 @@ var createLevel = async (config) => {
 
 // packages/sdk/client-services/src/packlets/storage/profile-archive.ts
 import { cbor } from "@dxos/automerge/automerge-repo";
-import { invariant as invariant21 } from "@dxos/invariant";
+import { invariant as invariant24 } from "@dxos/invariant";
 import { log as log25 } from "@dxos/log";
 import { ProfileArchiveEntryType } from "@dxos/protocols";
 import { arrayToBuffer as arrayToBuffer2 } from "@dxos/util";
@@ -8223,7 +8422,7 @@ var importProfileData = async ({ storage, level }, archive) => {
     switch (entry2.type) {
       case ProfileArchiveEntryType.FILE: {
         const directory = await storage.createDirectory();
-        invariant21(typeof entry2.key === "string", "Invalid key type", {
+        invariant24(typeof entry2.key === "string", "Invalid key type", {
           F: __dxlog_file29,
           L: 79,
           S: void 0,
@@ -8233,7 +8432,7 @@ var importProfileData = async ({ storage, level }, archive) => {
           ]
         });
         const file = await directory.getOrCreateFile(entry2.key);
-        invariant21(entry2.value instanceof Uint8Array, "Invalid value type", {
+        invariant24(entry2.value instanceof Uint8Array, "Invalid value type", {
           F: __dxlog_file29,
           L: 81,
           S: void 0,
@@ -8247,7 +8446,7 @@ var importProfileData = async ({ storage, level }, archive) => {
         break;
       }
       case ProfileArchiveEntryType.KEY_VALUE: {
-        invariant21(entry2.key instanceof Uint8Array, "Invalid key type", {
+        invariant24(entry2.key instanceof Uint8Array, "Invalid key type", {
           F: __dxlog_file29,
           L: 87,
           S: void 0,
@@ -8256,7 +8455,7 @@ var importProfileData = async ({ storage, level }, archive) => {
             "'Invalid key type'"
           ]
         });
-        invariant21(entry2.value instanceof Uint8Array, "Invalid value type", {
+        invariant24(entry2.value instanceof Uint8Array, "Invalid value type", {
           F: __dxlog_file29,
           L: 88,
           S: void 0,
@@ -8301,9 +8500,9 @@ var importProfileData = async ({ storage, level }, archive) => {
 // packages/sdk/client-services/src/packlets/services/service-host.ts
 import { Event as Event11, synchronized as synchronized4 } from "@dxos/async";
 import { clientServiceBundle } from "@dxos/client-protocol";
-import { Context as Context10 } from "@dxos/context";
+import { Context as Context11 } from "@dxos/context";
 import { EdgeClient, EdgeHttpClient, createStubEdgeIdentity } from "@dxos/edge-client";
-import { invariant as invariant23 } from "@dxos/invariant";
+import { invariant as invariant26 } from "@dxos/invariant";
 import { PublicKey as PublicKey19 } from "@dxos/keys";
 import { log as log27 } from "@dxos/log";
 import { EdgeSignalManager, WebsocketSignalManager } from "@dxos/messaging";
@@ -8314,9 +8513,9 @@ import { TRACE_PROCESSOR as TRACE_PROCESSOR3, trace as Trace4 } from "@dxos/trac
 import { WebsocketRpcClient } from "@dxos/websocket-rpc";
 
 // packages/sdk/client-services/src/packlets/devices/devices-service.ts
-import { EventSubscriptions as EventSubscriptions3 } from "@dxos/async";
+import { SubscriptionList as SubscriptionList3 } from "@dxos/async";
 import { Stream as Stream12 } from "@dxos/codec-protobuf/stream";
-import { invariant as invariant22 } from "@dxos/invariant";
+import { invariant as invariant25 } from "@dxos/invariant";
 import { Device as Device2, DeviceKind as DeviceKind2 } from "@dxos/protocols/proto/dxos/client/services";
 var __dxlog_file30 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/devices/devices-service.ts";
 var DevicesServiceImpl = class {
@@ -8336,7 +8535,7 @@ var DevicesServiceImpl = class {
             devices: []
           });
         } else {
-          invariant22(this._identityManager.identity?.presence, "presence not present", {
+          invariant25(this._identityManager.identity?.presence, "presence not present", {
             F: __dxlog_file30,
             L: 36,
             S: this,
@@ -8385,7 +8584,7 @@ var DevicesServiceImpl = class {
           presenceSubscribed = true;
         }
       };
-      const subscriptions = new EventSubscriptions3();
+      const subscriptions = new SubscriptionList3();
       if (this._identityManager.identity) {
         subscribeIdentity();
         subscribePresence();
@@ -8404,7 +8603,7 @@ var DevicesServiceImpl = class {
 };
 
 // packages/sdk/client-services/src/packlets/identity/contacts-service.ts
-import { EventSubscriptions as EventSubscriptions4, scheduleTask as scheduleTask9, UpdateScheduler as UpdateScheduler2 } from "@dxos/async";
+import { scheduleTask as scheduleTask9, UpdateScheduler as UpdateScheduler2, SubscriptionList as SubscriptionList4 } from "@dxos/async";
 import { Stream as Stream13 } from "@dxos/codec-protobuf/stream";
 import { PublicKey as PublicKey17 } from "@dxos/keys";
 import { ComplexMap as ComplexMap5, ComplexSet as ComplexSet6 } from "@dxos/util";
@@ -8464,7 +8663,7 @@ var ContactsServiceImpl = class {
         maxFrequency: 2
       });
       scheduleTask9(ctx, async () => {
-        const subscriptions = new EventSubscriptions4();
+        const subscriptions = new SubscriptionList4();
         ctx.onDispose(() => subscriptions.clear());
         const subscribeToSpaceAndUpdate = () => {
           const oldSetSize = subscribedSpaceKeySet.size;
@@ -8778,7 +8977,7 @@ var ClientServicesHost = class {
         lockKey,
         onAcquire: () => {
           if (!this._opening) {
-            void this.open(new Context10(void 0, {
+            void this.open(new Context11(void 0, {
               F: __dxlog_file31,
               L: 137
             }));
@@ -8836,7 +9035,7 @@ var ClientServicesHost = class {
   * Can only be called once.
   */
   initialize({ config, ...options }) {
-    invariant23(!this._open, "service host is open", {
+    invariant26(!this._open, "service host is open", {
       F: __dxlog_file31,
       L: 203,
       S: this,
@@ -8852,7 +9051,7 @@ var ClientServicesHost = class {
       C: (f, a) => f(...a)
     });
     if (config) {
-      invariant23(!this._config, "config already set", {
+      invariant26(!this._config, "config already set", {
         F: __dxlog_file31,
         L: 207,
         S: this,
@@ -8887,7 +9086,7 @@ var ClientServicesHost = class {
       edgeConnection: this._edgeConnection
     }) : new WebsocketSignalManager(this._config?.get("runtime.services.signaling") ?? []) } = options;
     this._signalManager = signalManager;
-    invariant23(!this._networkManager, "network manager already set", {
+    invariant26(!this._networkManager, "network manager already set", {
       F: __dxlog_file31,
       L: 237,
       S: this,
@@ -8925,7 +9124,7 @@ var ClientServicesHost = class {
       S: this,
       C: (f, a) => f(...a)
     });
-    invariant23(this._config, "config not set", {
+    invariant26(this._config, "config not set", {
       F: __dxlog_file31,
       L: 263,
       S: this,
@@ -8934,7 +9133,7 @@ var ClientServicesHost = class {
         "'config not set'"
       ]
     });
-    invariant23(this._storage, "storage not set", {
+    invariant26(this._storage, "storage not set", {
       F: __dxlog_file31,
       L: 264,
       S: this,
@@ -8943,7 +9142,7 @@ var ClientServicesHost = class {
         "'storage not set'"
       ]
     });
-    invariant23(this._signalManager, "signal manager not set", {
+    invariant26(this._signalManager, "signal manager not set", {
       F: __dxlog_file31,
       L: 265,
       S: this,
@@ -8952,7 +9151,7 @@ var ClientServicesHost = class {
         "'signal manager not set'"
       ]
     });
-    invariant23(this._networkManager, "network manager not set", {
+    invariant26(this._networkManager, "network manager not set", {
       F: __dxlog_file31,
       L: 266,
       S: this,
@@ -9180,4 +9379,4 @@ export {
   importProfileData,
   ClientServicesHost
 };
-//# sourceMappingURL=chunk-VJODS5QE.mjs.map
+//# sourceMappingURL=chunk-2H5CIBX2.mjs.map