@dxos/client-services 0.3.11-main.7ff9773 → 0.3.11-main.800163e

package/dist/lib/node/{chunk-34H4H2HZ.cjs → chunk-GNBZGQOY.cjs}

@@ -26,8 +26,8 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var chunk_34H4H2HZ_exports = {};
-__export(chunk_34H4H2HZ_exports, {
+var chunk_GNBZGQOY_exports = {};
+__export(chunk_GNBZGQOY_exports, {
   ClientRpcServer: () => ClientRpcServer,
   ClientServicesHost: () => ClientServicesHost,
   DataSpace: () => DataSpace,
@@ -60,7 +60,7 @@ __export(chunk_34H4H2HZ_exports, {
   subscribeToSpaces: () => subscribeToSpaces,
   subscribeToSwarmInfo: () => subscribeToSwarmInfo
 });
-module.exports = __toCommonJS(chunk_34H4H2HZ_exports);
+module.exports = __toCommonJS(chunk_GNBZGQOY_exports);
 var import_async = require("@dxos/async");
 var import_codec_protobuf = require("@dxos/codec-protobuf");
 var import_feed_store = require("@dxos/feed-store");
@@ -108,6 +108,7 @@ var import_credentials6 = require("@dxos/credentials");
 var import_debug2 = require("@dxos/debug");
 var import_invariant3 = require("@dxos/invariant");
 var import_invariant4 = require("@dxos/invariant");
+var import_protocols3 = require("@dxos/protocols");
 var import_services = require("@dxos/protocols/proto/dxos/client/services");
 var import_async7 = require("@dxos/async");
 var import_client_protocol2 = require("@dxos/client-protocol");
@@ -117,7 +118,7 @@ var import_invariant5 = require("@dxos/invariant");
 var import_keys5 = require("@dxos/keys");
 var import_log4 = require("@dxos/log");
 var import_network_manager = require("@dxos/network-manager");
-var import_protocols3 = require("@dxos/protocols");
+var import_protocols4 = require("@dxos/protocols");
 var import_services2 = require("@dxos/protocols/proto/dxos/client/services");
 var import_invitations = require("@dxos/protocols/proto/dxos/halo/invitations");
 var import_async8 = require("@dxos/async");
@@ -125,7 +126,7 @@ var import_context5 = require("@dxos/context");
 var import_invariant6 = require("@dxos/invariant");
 var import_keys6 = require("@dxos/keys");
 var import_log5 = require("@dxos/log");
-var import_protocols4 = require("@dxos/protocols");
+var import_protocols5 = require("@dxos/protocols");
 var import_services3 = require("@dxos/protocols/proto/dxos/client/services");
 var import_invitations2 = require("@dxos/protocols/proto/dxos/halo/invitations");
 var import_teleport = require("@dxos/teleport");
@@ -138,6 +139,7 @@ var import_credentials8 = require("@dxos/credentials");
 var import_feed_store3 = require("@dxos/feed-store");
 var import_invariant8 = require("@dxos/invariant");
 var import_log7 = require("@dxos/log");
+var import_protocols6 = require("@dxos/protocols");
 var import_services5 = require("@dxos/protocols/proto/dxos/client/services");
 var import_codec_protobuf9 = require("@dxos/codec-protobuf");
 var import_debug3 = require("@dxos/debug");
@@ -149,17 +151,19 @@ var import_document_model = require("@dxos/document-model");
 var import_echo_db = require("@dxos/echo-db");
 var import_invariant9 = require("@dxos/invariant");
 var import_log8 = require("@dxos/log");
-var import_protocols5 = require("@dxos/protocols");
+var import_protocols7 = require("@dxos/protocols");
 var import_services6 = require("@dxos/protocols/proto/dxos/client/services");
+var import_services7 = require("@dxos/protocols/proto/dxos/client/services");
 var import_async10 = require("@dxos/async");
 var import_client_protocol3 = require("@dxos/client-protocol");
 var import_context6 = require("@dxos/context");
 var import_debug4 = require("@dxos/debug");
 var import_echo_pipeline = require("@dxos/echo-pipeline");
+var import_invariant10 = require("@dxos/invariant");
 var import_keys7 = require("@dxos/keys");
 var import_log9 = require("@dxos/log");
-var import_protocols6 = require("@dxos/protocols");
-var import_services7 = require("@dxos/protocols/proto/dxos/client/services");
+var import_protocols8 = require("@dxos/protocols");
+var import_services8 = require("@dxos/protocols/proto/dxos/client/services");
 var import_credentials10 = require("@dxos/protocols/proto/dxos/halo/credentials");
 var import_timeframe2 = require("@dxos/timeframe");
 var import_tracing4 = require("@dxos/tracing");
@@ -167,20 +171,20 @@ var import_util4 = require("@dxos/util");
 var import_credentials11 = require("@dxos/credentials");
 var import_async11 = require("@dxos/async");
 var import_context7 = require("@dxos/context");
-var import_invariant10 = require("@dxos/invariant");
+var import_invariant11 = require("@dxos/invariant");
 var import_keys8 = require("@dxos/keys");
 var import_log10 = require("@dxos/log");
-var import_protocols7 = require("@dxos/protocols");
+var import_protocols9 = require("@dxos/protocols");
 var import_teleport2 = require("@dxos/teleport");
 var import_util5 = require("@dxos/util");
 var import_async12 = require("@dxos/async");
 var import_context8 = require("@dxos/context");
 var import_credentials12 = require("@dxos/credentials");
-var import_invariant11 = require("@dxos/invariant");
+var import_invariant12 = require("@dxos/invariant");
 var import_keys9 = require("@dxos/keys");
 var import_log11 = require("@dxos/log");
-var import_protocols8 = require("@dxos/protocols");
-var import_services8 = require("@dxos/protocols/proto/dxos/client/services");
+var import_protocols10 = require("@dxos/protocols");
+var import_services9 = require("@dxos/protocols/proto/dxos/client/services");
 var import_teleport_extension_gossip = require("@dxos/teleport-extension-gossip");
 var import_util6 = require("@dxos/util");
 var import_credentials13 = require("@dxos/credentials");
@@ -190,30 +194,30 @@ var import_timeframe3 = require("@dxos/timeframe");
 var import_async13 = require("@dxos/async");
 var import_codec_protobuf11 = require("@dxos/codec-protobuf");
 var import_debug6 = require("@dxos/debug");
-var import_invariant12 = require("@dxos/invariant");
+var import_invariant13 = require("@dxos/invariant");
 var import_log12 = require("@dxos/log");
-var import_protocols9 = require("@dxos/protocols");
-var import_services9 = require("@dxos/protocols/proto/dxos/client/services");
+var import_protocols11 = require("@dxos/protocols");
+var import_services10 = require("@dxos/protocols/proto/dxos/client/services");
 var import_async14 = require("@dxos/async");
 var import_context9 = require("@dxos/context");
 var import_credentials15 = require("@dxos/credentials");
 var import_debug7 = require("@dxos/debug");
 var import_echo_pipeline2 = require("@dxos/echo-pipeline");
 var import_feed_store4 = require("@dxos/feed-store");
-var import_invariant13 = require("@dxos/invariant");
+var import_invariant14 = require("@dxos/invariant");
 var import_keyring = require("@dxos/keyring");
 var import_keys10 = require("@dxos/keys");
 var import_log13 = require("@dxos/log");
-var import_protocols10 = require("@dxos/protocols");
-var import_services10 = require("@dxos/protocols/proto/dxos/client/services");
+var import_protocols12 = require("@dxos/protocols");
+var import_services11 = require("@dxos/protocols/proto/dxos/client/services");
 var import_teleport_extension_object_sync = require("@dxos/teleport-extension-object-sync");
 var import_tracing5 = require("@dxos/tracing");
 var import_util7 = require("@dxos/util");
-var import_invariant14 = require("@dxos/invariant");
+var import_invariant15 = require("@dxos/invariant");
 var import_lock_file = require("@dxos/lock-file");
 var import_log14 = require("@dxos/log");
 var import_client_protocol4 = require("@dxos/client-protocol");
-var import_protocols11 = require("@dxos/protocols");
+var import_protocols13 = require("@dxos/protocols");
 var import_config = require("@dxos/protocols/proto/dxos/config");
 var import_random_access_storage = require("@dxos/random-access-storage");
 var import_util8 = require("@dxos/util");
@@ -223,28 +227,28 @@ var import_context10 = require("@dxos/context");
 var import_document_model2 = require("@dxos/document-model");
 var import_echo_pipeline3 = require("@dxos/echo-pipeline");
 var import_echo_schema = require("@dxos/echo-schema");
-var import_invariant15 = require("@dxos/invariant");
+var import_invariant16 = require("@dxos/invariant");
 var import_keys11 = require("@dxos/keys");
 var import_log15 = require("@dxos/log");
 var import_messaging = require("@dxos/messaging");
 var import_model_factory = require("@dxos/model-factory");
 var import_network_manager2 = require("@dxos/network-manager");
-var import_protocols12 = require("@dxos/protocols");
-var import_services11 = require("@dxos/protocols/proto/dxos/client/services");
+var import_protocols14 = require("@dxos/protocols");
+var import_services12 = require("@dxos/protocols/proto/dxos/client/services");
 var import_text_model = require("@dxos/text-model");
 var import_tracing6 = require("@dxos/tracing");
 var import_websocket_rpc = require("@dxos/websocket-rpc");
 var import_async16 = require("@dxos/async");
 var import_codec_protobuf12 = require("@dxos/codec-protobuf");
-var import_services12 = require("@dxos/protocols/proto/dxos/client/services");
+var import_services13 = require("@dxos/protocols/proto/dxos/client/services");
 var import_async17 = require("@dxos/async");
 var import_codec_protobuf13 = require("@dxos/codec-protobuf");
 var import_log16 = require("@dxos/log");
-var import_services13 = require("@dxos/protocols/proto/dxos/client/services");
+var import_services14 = require("@dxos/protocols/proto/dxos/client/services");
 var import_util9 = require("@dxos/util");
 var import_codec_protobuf14 = require("@dxos/codec-protobuf");
 var import_codec_protobuf15 = require("@dxos/codec-protobuf");
-var import_services14 = require("@dxos/protocols/proto/dxos/client/services");
+var import_services15 = require("@dxos/protocols/proto/dxos/client/services");
 var import_util10 = require("@dxos/util");
 var subscribeToFeeds = ({ feedStore }, { feedKeys }) => {
   return new import_codec_protobuf.Stream(({ next }) => {
@@ -1174,7 +1178,7 @@ var IdentityManager = class {
         genesisFeedKey: spaceRecord.genesisFeedKey
       },
       swarmIdentity,
-      onNetworkConnection: () => {
+      onAuthorizedConnection: () => {
       },
       onAuthFailure: () => {
         import_log3.log.warn("auth failure", void 0, {
@@ -1282,7 +1286,7 @@ var DeviceInvitationProtocol = class {
   async admit(request) {
     (0, import_invariant4.invariant)(request.device, void 0, {
       F: __dxlog_file5,
-      L: 35,
+      L: 36,
       S: this,
       A: [
         "request.device",
@@ -1300,6 +1304,15 @@ var DeviceInvitationProtocol = class {
       }
     };
   }
+  checkInvitation(invitation) {
+    try {
+      const identity = this._getIdentity();
+      if (identity) {
+        return new import_protocols3.AlreadyJoinedError("Currently only one identity per client is supported.");
+      }
+    } catch {
+    }
+  }
   createIntroduction() {
     return {};
   }
@@ -1318,7 +1331,7 @@ var DeviceInvitationProtocol = class {
   async accept(response, request) {
     (0, import_invariant4.invariant)(response.device, void 0, {
       F: __dxlog_file5,
-      L: 68,
+      L: 80,
       S: this,
       A: [
         "response.device",
@@ -1328,7 +1341,7 @@ var DeviceInvitationProtocol = class {
     const { identityKey, haloSpaceKey, genesisFeedKey, controlTimeframe } = response.device;
     (0, import_invariant4.invariant)(request.device, void 0, {
       F: __dxlog_file5,
-      L: 71,
+      L: 83,
       S: this,
       A: [
         "request.device",
@@ -1357,10 +1370,10 @@ var InvitationHostExtension = class extends import_teleport.RpcExtension {
   constructor(_callbacks) {
     super({
       requested: {
-        InvitationHostService: import_protocols4.schema.getService("dxos.halo.invitations.InvitationHostService")
+        InvitationHostService: import_protocols5.schema.getService("dxos.halo.invitations.InvitationHostService")
       },
       exposed: {
-        InvitationHostService: import_protocols4.schema.getService("dxos.halo.invitations.InvitationHostService")
+        InvitationHostService: import_protocols5.schema.getService("dxos.halo.invitations.InvitationHostService")
       }
     });
     this._callbacks = _callbacks;
@@ -1393,7 +1406,7 @@ var InvitationHostExtension = class extends import_teleport.RpcExtension {
         introduce: async (request) => {
           const { profile, invitationId } = request;
           const traceId = import_keys6.PublicKey.random().toHex();
-          import_log5.log.trace("dxos.sdk.invitation-handler.host.introduce", import_protocols4.trace.begin({
+          import_log5.log.trace("dxos.sdk.invitation-handler.host.introduce", import_protocols5.trace.begin({
             id: traceId
           }), {
             F: __dxlog_file6,
@@ -1430,7 +1443,7 @@ var InvitationHostExtension = class extends import_teleport.RpcExtension {
             ...this.invitation,
             state: import_services3.Invitation.State.READY_FOR_AUTHENTICATION
           });
-          import_log5.log.trace("dxos.sdk.invitation-handler.host.introduce", import_protocols4.trace.end({
+          import_log5.log.trace("dxos.sdk.invitation-handler.host.introduce", import_protocols5.trace.end({
             id: traceId
           }), {
             F: __dxlog_file6,
@@ -1444,7 +1457,7 @@ var InvitationHostExtension = class extends import_teleport.RpcExtension {
         },
         authenticate: async ({ authCode: code }) => {
           const traceId = import_keys6.PublicKey.random().toHex();
-          import_log5.log.trace("dxos.sdk.invitation-handler.host.authenticate", import_protocols4.trace.begin({
+          import_log5.log.trace("dxos.sdk.invitation-handler.host.authenticate", import_protocols5.trace.begin({
             id: traceId
           }), {
             F: __dxlog_file6,
@@ -1507,7 +1520,7 @@ var InvitationHostExtension = class extends import_teleport.RpcExtension {
               break;
             }
           }
-          import_log5.log.trace("dxos.sdk.invitation-handler.host.authenticate", import_protocols4.trace.end({
+          import_log5.log.trace("dxos.sdk.invitation-handler.host.authenticate", import_protocols5.trace.end({
             id: traceId,
             data: {
               status
@@ -1524,7 +1537,7 @@ var InvitationHostExtension = class extends import_teleport.RpcExtension {
         },
         admit: async (request) => {
           const traceId = import_keys6.PublicKey.random().toHex();
-          import_log5.log.trace("dxos.sdk.invitation-handler.host.admit", import_protocols4.trace.begin({
+          import_log5.log.trace("dxos.sdk.invitation-handler.host.admit", import_protocols5.trace.begin({
             id: traceId
           }), {
             F: __dxlog_file6,
@@ -1546,7 +1559,7 @@ var InvitationHostExtension = class extends import_teleport.RpcExtension {
               throw new Error("Not authenticated");
             }
             const response = await this._callbacks.admit(request);
-            import_log5.log.trace("dxos.sdk.invitation-handler.host.admit", import_protocols4.trace.end({
+            import_log5.log.trace("dxos.sdk.invitation-handler.host.admit", import_protocols5.trace.end({
               id: traceId
             }), {
               F: __dxlog_file6,
@@ -1573,7 +1586,7 @@ var InvitationHostExtension = class extends import_teleport.RpcExtension {
         timeout: OPTIONS_TIMEOUT
       }));
       if (this._remoteOptions?.role !== import_invitations2.Options.Role.GUEST) {
-        throw new import_protocols4.InvalidInvitationExtensionRoleError(void 0, {
+        throw new import_protocols5.InvalidInvitationExtensionRoleError(void 0, {
           expected: import_invitations2.Options.Role.GUEST,
           remoteOptions: this._remoteOptions
         });
@@ -1591,10 +1604,10 @@ var InvitationGuestExtension = class extends import_teleport.RpcExtension {
   constructor(_callbacks) {
     super({
       requested: {
-        InvitationHostService: import_protocols4.schema.getService("dxos.halo.invitations.InvitationHostService")
+        InvitationHostService: import_protocols5.schema.getService("dxos.halo.invitations.InvitationHostService")
       },
       exposed: {
-        InvitationHostService: import_protocols4.schema.getService("dxos.halo.invitations.InvitationHostService")
+        InvitationHostService: import_protocols5.schema.getService("dxos.halo.invitations.InvitationHostService")
       }
     });
     this._callbacks = _callbacks;
@@ -1651,7 +1664,7 @@ var InvitationGuestExtension = class extends import_teleport.RpcExtension {
         C: (f, a) => f(...a)
       });
       if (this._remoteOptions?.role !== import_invitations2.Options.Role.HOST) {
-        throw new import_protocols4.InvalidInvitationExtensionRoleError(void 0, {
+        throw new import_protocols5.InvalidInvitationExtensionRoleError(void 0, {
           expected: import_invitations2.Options.Role.HOST,
           remoteOptions: this._remoteOptions
         });
@@ -1764,7 +1777,7 @@ var InvitationsHandler = class {
           (0, import_async7.scheduleTask)(ctx, async () => {
             const traceId = import_keys5.PublicKey.random().toHex();
             try {
-              import_log4.log.trace("dxos.sdk.invitations-handler.host.onOpen", import_protocols3.trace.begin({
+              import_log4.log.trace("dxos.sdk.invitations-handler.host.onOpen", import_protocols4.trace.begin({
                 id: traceId
               }), {
                 F: __dxlog_file7,
@@ -1800,7 +1813,7 @@ var InvitationsHandler = class {
                 ...invitation,
                 state: import_services2.Invitation.State.SUCCESS
               });
-              import_log4.log.trace("dxos.sdk.invitations-handler.host.onOpen", import_protocols3.trace.end({
+              import_log4.log.trace("dxos.sdk.invitations-handler.host.onOpen", import_protocols4.trace.end({
                 id: traceId
               }), {
                 F: __dxlog_file7,
@@ -1831,7 +1844,7 @@ var InvitationsHandler = class {
                 });
                 stream.error(err);
               }
-              import_log4.log.trace("dxos.sdk.invitations-handler.host.onOpen", import_protocols3.trace.error({
+              import_log4.log.trace("dxos.sdk.invitations-handler.host.onOpen", import_protocols4.trace.error({
                 id: traceId,
                 error: err
               }), {
@@ -1849,7 +1862,7 @@ var InvitationsHandler = class {
           });
         },
         onError: (err) => {
-          if (err instanceof import_protocols3.InvalidInvitationExtensionRoleError) {
+          if (err instanceof import_protocols4.InvalidInvitationExtensionRoleError) {
             return;
           }
           if (err instanceof import_async7.TimeoutError) {
@@ -1997,7 +2010,7 @@ var InvitationsHandler = class {
           (0, import_async7.scheduleTask)(ctx, async () => {
             const traceId = import_keys5.PublicKey.random().toHex();
             try {
-              import_log4.log.trace("dxos.sdk.invitations-handler.guest.onOpen", import_protocols3.trace.begin({
+              import_log4.log.trace("dxos.sdk.invitations-handler.guest.onOpen", import_protocols4.trace.begin({
                 id: traceId
               }), {
                 F: __dxlog_file7,
@@ -2084,16 +2097,12 @@ var InvitationsHandler = class {
                     }
                   }
                 }
-              } else {
-                setState({
-                  state: import_services2.Invitation.State.READY_FOR_AUTHENTICATION
-                });
               }
               (0, import_log4.log)("request admission", {
                 ...protocol.toJSON()
               }, {
                 F: __dxlog_file7,
-                L: 312,
+                L: 309,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -2105,7 +2114,7 @@ var InvitationsHandler = class {
                 ...protocol.toJSON()
               }, {
                 F: __dxlog_file7,
-                L: 323,
+                L: 320,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -2114,11 +2123,11 @@ var InvitationsHandler = class {
                 target: invitation.target,
                 state: import_services2.Invitation.State.SUCCESS
               });
-              import_log4.log.trace("dxos.sdk.invitations-handler.guest.onOpen", import_protocols3.trace.end({
+              import_log4.log.trace("dxos.sdk.invitations-handler.guest.onOpen", import_protocols4.trace.end({
                 id: traceId
               }), {
                 F: __dxlog_file7,
-                L: 325,
+                L: 322,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -2128,7 +2137,7 @@ var InvitationsHandler = class {
                   ...protocol.toJSON()
                 }, {
                   F: __dxlog_file7,
-                  L: 328,
+                  L: 325,
                   S: this,
                   C: (f, a) => f(...a)
                 });
@@ -2138,18 +2147,18 @@ var InvitationsHandler = class {
               } else {
                 (0, import_log4.log)("auth failed", err, {
                   F: __dxlog_file7,
-                  L: 331,
+                  L: 328,
                   S: this,
                   C: (f, a) => f(...a)
                 });
                 stream.error(err);
               }
-              import_log4.log.trace("dxos.sdk.invitations-handler.guest.onOpen", import_protocols3.trace.error({
+              import_log4.log.trace("dxos.sdk.invitations-handler.guest.onOpen", import_protocols4.trace.error({
                 id: traceId,
                 error: err
               }), {
                 F: __dxlog_file7,
-                L: 334,
+                L: 331,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -2159,7 +2168,7 @@ var InvitationsHandler = class {
           });
         },
         onError: (err) => {
-          if (err instanceof import_protocols3.InvalidInvitationExtensionRoleError) {
+          if (err instanceof import_protocols4.InvalidInvitationExtensionRoleError) {
             return;
           }
           if (err instanceof import_async7.TimeoutError) {
@@ -2167,7 +2176,7 @@ var InvitationsHandler = class {
               ...protocol.toJSON()
             }, {
               F: __dxlog_file7,
-              L: 345,
+              L: 342,
               S: this,
               C: (f, a) => f(...a)
             });
@@ -2177,7 +2186,7 @@ var InvitationsHandler = class {
           } else {
             (0, import_log4.log)("auth failed", err, {
               F: __dxlog_file7,
-              L: 348,
+              L: 345,
               S: this,
               C: (f, a) => f(...a)
             });
@@ -2188,29 +2197,34 @@ var InvitationsHandler = class {
       return extension;
     };
     (0, import_async7.scheduleTask)(ctx, async () => {
-      (0, import_invariant5.invariant)(invitation.swarmKey, void 0, {
-        F: __dxlog_file7,
-        L: 358,
-        S: this,
-        A: [
-          "invitation.swarmKey",
-          ""
-        ]
-      });
-      const topic = invitation.swarmKey;
-      const swarmConnection = await this._networkManager.joinSwarm({
-        topic,
-        peerId: import_keys5.PublicKey.random(),
-        protocolProvider: (0, import_network_manager.createTeleportProtocolFactory)(async (teleport) => {
-          teleport.addExtension("dxos.halo.invitations", createExtension());
-        }),
-        topology: new import_network_manager.StarTopology(topic),
-        label: "invitation guest"
-      });
-      ctx.onDispose(() => swarmConnection.close());
-      setState({
-        state: import_services2.Invitation.State.CONNECTING
-      });
+      const error = protocol.checkInvitation(invitation);
+      if (error) {
+        stream.error(error);
+      } else {
+        (0, import_invariant5.invariant)(invitation.swarmKey, void 0, {
+          F: __dxlog_file7,
+          L: 359,
+          S: this,
+          A: [
+            "invitation.swarmKey",
+            ""
+          ]
+        });
+        const topic = invitation.swarmKey;
+        const swarmConnection = await this._networkManager.joinSwarm({
+          topic,
+          peerId: import_keys5.PublicKey.random(),
+          protocolProvider: (0, import_network_manager.createTeleportProtocolFactory)(async (teleport) => {
+            teleport.addExtension("dxos.halo.invitations", createExtension());
+          }),
+          topology: new import_network_manager.StarTopology(topic),
+          label: "invitation guest"
+        });
+        ctx.onDispose(() => swarmConnection.close());
+        setState({
+          state: import_services2.Invitation.State.CONNECTING
+        });
+      }
     });
     const observable = new import_client_protocol2.AuthenticatingInvitation({
       initialInvitation: invitation,
@@ -2426,7 +2440,7 @@ var SpaceInvitationProtocol = class {
   async admit(request, guestProfile) {
     (0, import_invariant8.invariant)(this._spaceKey, void 0, {
       F: __dxlog_file9,
-      L: 46,
+      L: 47,
       S: this,
       A: [
         "this._spaceKey",
@@ -2436,7 +2450,7 @@ var SpaceInvitationProtocol = class {
     const space = await this._spaceManager.spaces.get(this._spaceKey);
     (0, import_invariant8.invariant)(space, void 0, {
       F: __dxlog_file9,
-      L: 48,
+      L: 49,
       S: this,
       A: [
         "space",
@@ -2445,7 +2459,7 @@ var SpaceInvitationProtocol = class {
     });
     (0, import_invariant8.invariant)(request.space, void 0, {
       F: __dxlog_file9,
-      L: 50,
+      L: 51,
       S: this,
       A: [
         "request.space",
@@ -2458,14 +2472,14 @@ var SpaceInvitationProtocol = class {
       guest: deviceKey
     }, {
       F: __dxlog_file9,
-      L: 53,
+      L: 54,
       S: this,
       C: (f, a) => f(...a)
     });
     const credentials = await (0, import_credentials8.createAdmissionCredentials)(this._signingContext.credentialSigner, identityKey, space.key, space.inner.genesisFeedKey, guestProfile);
     (0, import_invariant8.invariant)(credentials[0].credential, void 0, {
       F: __dxlog_file9,
-      L: 64,
+      L: 65,
       S: this,
       A: [
         "credentials[0].credential",
@@ -2475,7 +2489,7 @@ var SpaceInvitationProtocol = class {
     const spaceMemberCredential = credentials[0].credential.credential;
     (0, import_invariant8.invariant)((0, import_credentials8.getCredentialAssertion)(spaceMemberCredential)["@type"] === "dxos.halo.credentials.SpaceMember", void 0, {
       F: __dxlog_file9,
-      L: 66,
+      L: 67,
       S: this,
       A: [
         "getCredentialAssertion(spaceMemberCredential)['@type'] === 'dxos.halo.credentials.SpaceMember'",
@@ -2491,6 +2505,11 @@ var SpaceInvitationProtocol = class {
       }
     };
   }
+  checkInvitation(invitation) {
+    if (invitation.spaceKey && this._spaceManager.spaces.has(invitation.spaceKey)) {
+      return new import_protocols6.AlreadyJoinedError("Already joined space.");
+    }
+  }
   createIntroduction() {
     return {
       profile: this._signingContext.getProfile()
@@ -2511,7 +2530,7 @@ var SpaceInvitationProtocol = class {
   async accept(response) {
     (0, import_invariant8.invariant)(response.space, void 0, {
       F: __dxlog_file9,
-      L: 101,
+      L: 108,
       S: this,
       A: [
         "response.space",
@@ -2522,7 +2541,7 @@ var SpaceInvitationProtocol = class {
     const assertion = (0, import_credentials8.getCredentialAssertion)(credential);
     (0, import_invariant8.invariant)(assertion["@type"] === "dxos.halo.credentials.SpaceMember", "Invalid credential", {
       F: __dxlog_file9,
-      L: 104,
+      L: 111,
       S: this,
       A: [
         "assertion['@type'] === 'dxos.halo.credentials.SpaceMember'",
@@ -2531,13 +2550,16 @@ var SpaceInvitationProtocol = class {
     });
     (0, import_invariant8.invariant)(credential.subject.id.equals(this._signingContext.identityKey), void 0, {
       F: __dxlog_file9,
-      L: 105,
+      L: 112,
       S: this,
       A: [
         "credential.subject.id.equals(this._signingContext.identityKey)",
         ""
       ]
     });
+    if (this._spaceManager.spaces.has(assertion.spaceKey)) {
+      throw new import_protocols6.AlreadyJoinedError("Already joined space.");
+    }
     await this._spaceManager.acceptSpace({
       spaceKey: assertion.spaceKey,
       genesisFeedKey: assertion.genesisFeedKey,
@@ -2630,28 +2652,29 @@ var getPlatform = () => {
     if (typeof window !== "undefined") {
       const { userAgent } = window.navigator;
       return {
-        type: "browser",
+        type: import_services7.Platform.PLATFORM_TYPE.BROWSER,
         userAgent,
         uptime: Math.floor((Date.now() - window.performance.timeOrigin) / 1e3)
       };
     } else {
       return {
-        type: "shared-worker",
+        type: import_services7.Platform.PLATFORM_TYPE.SHARED_WORKER,
         uptime: Math.floor((Date.now() - performance.timeOrigin) / 1e3)
       };
     }
   } else {
     const { platform: platform2, version, arch } = process;
     return {
-      type: "node",
-      platform: `${platform2} ${version} ${arch}`,
-      runtime: process.version,
+      type: import_services7.Platform.PLATFORM_TYPE.NODE,
+      platform: platform2,
+      arch,
+      runtime: version,
       uptime: Math.floor(process.uptime()),
       memory: process.memoryUsage()
     };
   }
 };
-var DXOS_VERSION = "0.3.11-main.7ff9773";
+var DXOS_VERSION = "0.3.11-main.800163e";
 var __dxlog_file10 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/services/diagnostics.ts";
 var DEFAULT_TIMEOUT = 1e3;
 var createDiagnostics = async (clientServices, serviceContext, config) => {
@@ -2661,14 +2684,14 @@ var createDiagnostics = async (clientServices, serviceContext, config) => {
     client: {
       version: DXOS_VERSION,
       storage: {
-        version: import_protocols5.STORAGE_VERSION
+        version: import_protocols7.STORAGE_VERSION
       }
     }
   };
   {
     (0, import_invariant9.invariant)(clientServices.LoggingService, "SystemService is not available.", {
       F: __dxlog_file10,
-      L: 92,
+      L: 94,
       S: void 0,
       A: [
         "clientServices.LoggingService",
@@ -2679,6 +2702,21 @@ var createDiagnostics = async (clientServices, serviceContext, config) => {
       timeout: DEFAULT_TIMEOUT
     }).catch(() => void 0);
   }
+  if (typeof navigator !== "undefined" && navigator.storage) {
+    const map = /* @__PURE__ */ new Map();
+    const dir = await navigator.storage.getDirectory();
+    for await (const filename of dir?.keys()) {
+      const idx = filename.indexOf("-", filename.indexOf("-") + 1);
+      if (idx === -1) {
+        continue;
+      }
+      map.set(filename.slice(0, idx), (map.get(filename.slice(0, idx)) ?? 0) + 1);
+    }
+    diagnostics.storage = Array.from(map.entries()).sort((a, b) => b[1] - a[1]).map(([file, count]) => ({
+      file,
+      count
+    }));
+  }
   const identity = serviceContext.identityManager.identity;
   if (identity) {
     diagnostics.identity = {
@@ -2719,7 +2757,7 @@ var getProperties = (space) => {
   } catch (err) {
     import_log8.log.warn(err.message, void 0, {
       F: __dxlog_file10,
-      L: 160,
+      L: 179,
       S: void 0,
       C: (f, a) => f(...a)
     });
@@ -2774,7 +2812,8 @@ var getSpaceStats = async (space) => {
   return stats;
 };
 var AutomergeSpaceState = class {
-  constructor() {
+  constructor(_onNewRoot) {
+    this._onNewRoot = _onNewRoot;
     this.rootUrl = void 0;
     this.lastEpoch = void 0;
   }
@@ -2785,6 +2824,7 @@ var AutomergeSpaceState = class {
     this.lastEpoch = credential;
     if (credential.subject.assertion.automergeRoot) {
       this.rootUrl = credential.subject.assertion.automergeRoot;
+      this._onNewRoot(this.rootUrl);
     }
   }
 };
@@ -2821,7 +2861,7 @@ var NotarizationPlugin = class {
       S: this,
       C: (f, a) => f(...a)
     });
-    (0, import_invariant10.invariant)(credentials.every((credential) => credential.id), "Credentials must have an id", {
+    (0, import_invariant11.invariant)(credentials.every((credential) => credential.id), "Credentials must have an id", {
       F: __dxlog_file11,
       L: 91,
       S: this,
@@ -2946,7 +2986,7 @@ var NotarizationPlugin = class {
     this._processCredentialsTriggers.delete(credential.id);
   }
   setWriter(writer) {
-    (0, import_invariant10.invariant)(!this._writer, "Writer already set.", {
+    (0, import_invariant11.invariant)(!this._writer, "Writer already set.", {
       F: __dxlog_file11,
       L: 181,
       S: this,
@@ -2971,7 +3011,7 @@ var NotarizationPlugin = class {
       throw new Error(WRITER_NOT_SET_ERROR_CODE);
     }
     for (const credential of request.credentials ?? []) {
-      (0, import_invariant10.invariant)(credential.id, "Credential must have an id", {
+      (0, import_invariant11.invariant)(credential.id, "Credential must have an id", {
         F: __dxlog_file11,
         L: 200,
         S: this,
@@ -3020,10 +3060,10 @@ var NotarizationTeleportExtension = class extends import_teleport2.RpcExtension
   constructor(_params) {
     super({
       requested: {
-        NotarizationService: import_protocols7.schema.getService("dxos.mesh.teleport.notarization.NotarizationService")
+        NotarizationService: import_protocols9.schema.getService("dxos.mesh.teleport.notarization.NotarizationService")
       },
       exposed: {
-        NotarizationService: import_protocols7.schema.getService("dxos.mesh.teleport.notarization.NotarizationService")
+        NotarizationService: import_protocols9.schema.getService("dxos.mesh.teleport.notarization.NotarizationService")
       }
     });
     this._params = _params;
@@ -3063,8 +3103,8 @@ var DataSpace = class {
     this._ctx = new import_context6.Context();
     this._notarizationPlugin = new NotarizationPlugin();
     this._cache = void 0;
-    this._automergeSpaceState = new AutomergeSpaceState();
-    this._state = import_services7.SpaceState.CLOSED;
+    this._automergeSpaceState = new AutomergeSpaceState((rootUrl) => this._onNewAutomergeRoot(rootUrl));
+    this._state = import_services8.SpaceState.CLOSED;
     this.error = void 0;
     this.stateUpdate = new import_async10.Event();
     this.metrics = {};
@@ -3086,10 +3126,10 @@ var DataSpace = class {
     this._cache = params.cache;
     this._state = params.initialState;
     (0, import_log9.log)("new state", {
-      state: import_services7.SpaceState[this._state]
+      state: import_services8.SpaceState[this._state]
     }, {
       F: __dxlog_file12,
-      L: 137,
+      L: 138,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3131,12 +3171,12 @@ var DataSpace = class {
     await this._inner.spaceState.addCredentialProcessor(this._notarizationPlugin);
     await this._inner.spaceState.addCredentialProcessor(this._automergeSpaceState);
     await this._inner.open(new import_context6.Context());
-    this._state = import_services7.SpaceState.CONTROL_ONLY;
+    this._state = import_services8.SpaceState.CONTROL_ONLY;
     (0, import_log9.log)("new state", {
-      state: import_services7.SpaceState[this._state]
+      state: import_services8.SpaceState[this._state]
     }, {
       F: __dxlog_file12,
-      L: 189,
+      L: 190,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3149,12 +3189,12 @@ var DataSpace = class {
   }
   async _close() {
     await this._callbacks.beforeClose?.();
-    this._state = import_services7.SpaceState.CLOSED;
+    this._state = import_services8.SpaceState.CLOSED;
     (0, import_log9.log)("new state", {
-      state: import_services7.SpaceState[this._state]
+      state: import_services8.SpaceState[this._state]
     }, {
       F: __dxlog_file12,
-      L: 203,
+      L: 204,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3183,10 +3223,10 @@ var DataSpace = class {
         this.metrics.pipelineInitBegin = /* @__PURE__ */ new Date();
         await this.initializeDataPipeline();
       } catch (err) {
-        if (err instanceof import_protocols6.CancelledError) {
+        if (err instanceof import_protocols8.CancelledError) {
           (0, import_log9.log)("data pipeline initialization cancelled", err, {
             F: __dxlog_file12,
-            L: 236,
+            L: 237,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -3194,16 +3234,16 @@ var DataSpace = class {
         }
         import_log9.log.error("Error initializing data pipeline", err, {
           F: __dxlog_file12,
-          L: 240,
+          L: 241,
           S: this,
           C: (f, a) => f(...a)
         });
-        this._state = import_services7.SpaceState.ERROR;
+        this._state = import_services8.SpaceState.ERROR;
         (0, import_log9.log)("new state", {
-          state: import_services7.SpaceState[this._state]
+          state: import_services8.SpaceState[this._state]
         }, {
           F: __dxlog_file12,
-          L: 242,
+          L: 243,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -3215,15 +3255,15 @@ var DataSpace = class {
     });
   }
   async initializeDataPipeline() {
-    if (this._state !== import_services7.SpaceState.CONTROL_ONLY) {
-      throw new import_protocols6.SystemError("Invalid operation");
+    if (this._state !== import_services8.SpaceState.CONTROL_ONLY) {
+      throw new import_protocols8.SystemError("Invalid operation");
     }
-    this._state = import_services7.SpaceState.INITIALIZING;
+    this._state = import_services8.SpaceState.INITIALIZING;
     (0, import_log9.log)("new state", {
-      state: import_services7.SpaceState[this._state]
+      state: import_services8.SpaceState[this._state]
     }, {
       F: __dxlog_file12,
-      L: 258,
+      L: 259,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3234,7 +3274,7 @@ var DataSpace = class {
     await (0, import_context6.cancelWithContext)(this._ctx, this._inner.dataPipeline.ensureEpochInitialized());
     (0, import_log9.log)("waiting for data pipeline to reach target timeframe", void 0, {
       F: __dxlog_file12,
-      L: 272,
+      L: 273,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3245,17 +3285,17 @@ var DataSpace = class {
     this.metrics.dataPipelineReady = /* @__PURE__ */ new Date();
     (0, import_log9.log)("data pipeline ready", void 0, {
       F: __dxlog_file12,
-      L: 281,
+      L: 282,
       S: this,
       C: (f, a) => f(...a)
     });
     await this._callbacks.beforeReady?.();
-    this._state = import_services7.SpaceState.READY;
+    this._state = import_services8.SpaceState.READY;
     (0, import_log9.log)("new state", {
-      state: import_services7.SpaceState[this._state]
+      state: import_services8.SpaceState[this._state]
     }, {
       F: __dxlog_file12,
-      L: 285,
+      L: 286,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3271,7 +3311,7 @@ var DataSpace = class {
     await this._createWritableFeeds();
     (0, import_log9.log)("writable feeds created", void 0, {
       F: __dxlog_file12,
-      L: 301,
+      L: 302,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3328,6 +3368,40 @@ var DataSpace = class {
       await this._metadataStore.setWritableFeedKeys(this.key, this.inner.controlFeedKey, this.inner.dataFeedKey);
     }
   }
+  _onNewAutomergeRoot(rootUrl) {
+    import_log9.log.info("loading automerge root doc for space", {
+      space: this.key,
+      rootUrl
+    }, {
+      F: __dxlog_file12,
+      L: 368,
+      S: this,
+      C: (f, a) => f(...a)
+    });
+    const handle = this._automergeHost.repo.find(rootUrl);
+    queueMicrotask(async () => {
+      try {
+        await handle.whenReady();
+        const doc = handle.docSync() ?? (0, import_invariant10.failedInvariant)();
+        if (!doc.experimental_spaceKey) {
+          handle.change((doc2) => {
+            doc2.experimental_spaceKey = this.key.toHex();
+          });
+        }
+      } catch (err) {
+        import_log9.log.warn("error loading automerge root doc", {
+          space: this.key,
+          rootUrl,
+          err
+        }, {
+          F: __dxlog_file12,
+          L: 381,
+          S: this,
+          C: (f, a) => f(...a)
+        });
+      }
+    });
+  }
   // TODO(dmaretskyi): Use profile from signing context.
   async updateOwnProfile(profile) {
     const credential = await this._signingContext.credentialSigner.createCredential({
@@ -3347,12 +3421,12 @@ var DataSpace = class {
     let epoch;
     switch (options?.migration) {
       case void 0:
-      case import_services7.CreateEpochRequest.Migration.NONE:
+      case import_services8.CreateEpochRequest.Migration.NONE:
         {
           epoch = await this.dataPipeline.createEpoch();
         }
         break;
-      case import_services7.CreateEpochRequest.Migration.INIT_AUTOMERGE: {
+      case import_services8.CreateEpochRequest.Migration.INIT_AUTOMERGE: {
         const document = this._automergeHost.repo.create();
         epoch = {
           previousId: this._automergeSpaceState.lastEpoch?.id,
@@ -3393,25 +3467,25 @@ var DataSpace = class {
     }
   }
   async activate() {
-    if (this._state !== import_services7.SpaceState.INACTIVE) {
+    if (this._state !== import_services8.SpaceState.INACTIVE) {
       return;
     }
-    await this._metadataStore.setSpaceState(this.key, import_services7.SpaceState.ACTIVE);
+    await this._metadataStore.setSpaceState(this.key, import_services8.SpaceState.ACTIVE);
     await this._open();
     this.initializeDataPipelineAsync();
   }
   async deactivate() {
-    if (this._state === import_services7.SpaceState.INACTIVE) {
+    if (this._state === import_services8.SpaceState.INACTIVE) {
       return;
     }
-    await this._metadataStore.setSpaceState(this.key, import_services7.SpaceState.INACTIVE);
+    await this._metadataStore.setSpaceState(this.key, import_services8.SpaceState.INACTIVE);
     await this._close();
-    this._state = import_services7.SpaceState.INACTIVE;
+    this._state = import_services8.SpaceState.INACTIVE;
     (0, import_log9.log)("new state", {
-      state: import_services7.SpaceState[this._state]
+      state: import_services8.SpaceState[this._state]
     }, {
       F: __dxlog_file12,
-      L: 450,
+      L: 470,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3549,7 +3623,7 @@ var DataSpaceManager = class {
       S: this,
       C: (f, a) => f(...a)
     });
-    import_log11.log.trace("dxos.echo.data-space-manager.open", import_protocols8.trace.begin({
+    import_log11.log.trace("dxos.echo.data-space-manager.open", import_protocols10.trace.begin({
       id: this._instanceId
     }), {
       F: __dxlog_file13,
@@ -3591,11 +3665,11 @@ var DataSpaceManager = class {
     this._isOpen = true;
     this.updated.emit();
     for (const space of this._spaces.values()) {
-      if (space.state !== import_services8.SpaceState.INACTIVE) {
+      if (space.state !== import_services9.SpaceState.INACTIVE) {
         space.initializeDataPipelineAsync();
       }
     }
-    import_log11.log.trace("dxos.echo.data-space-manager.open", import_protocols8.trace.end({
+    import_log11.log.trace("dxos.echo.data-space-manager.open", import_protocols10.trace.end({
       id: this._instanceId
     }), {
       F: __dxlog_file13,
@@ -3621,7 +3695,7 @@ var DataSpaceManager = class {
   * Creates a new space writing the genesis credentials to the control feed.
   */
   async createSpace() {
-    (0, import_invariant11.invariant)(this._isOpen, "Not open.", {
+    (0, import_invariant12.invariant)(this._isOpen, "Not open.", {
       F: __dxlog_file13,
       L: 130,
       S: this,
@@ -3638,7 +3712,7 @@ var DataSpaceManager = class {
       genesisFeedKey: controlFeedKey,
       controlFeedKey,
       dataFeedKey,
-      state: import_services8.SpaceState.ACTIVE
+      state: import_services9.SpaceState.ACTIVE
     };
     (0, import_log11.log)("creating space...", {
       spaceKey
@@ -3650,12 +3724,15 @@ var DataSpaceManager = class {
     });
     const space = await this._constructSpace(metadata);
     const automergeRoot = this._automergeHost.repo.create();
+    automergeRoot.change((doc) => {
+      doc.experimental_spaceKey = spaceKey.toHex();
+    });
     const credentials = await spaceGenesis(this._keyring, this._signingContext, space.inner, automergeRoot.url);
     await this._metadataStore.addSpace(metadata);
     const memberCredential = credentials[1];
-    (0, import_invariant11.invariant)((0, import_credentials12.getCredentialAssertion)(memberCredential)["@type"] === "dxos.halo.credentials.SpaceMember", void 0, {
+    (0, import_invariant12.invariant)((0, import_credentials12.getCredentialAssertion)(memberCredential)["@type"] === "dxos.halo.credentials.SpaceMember", void 0, {
       F: __dxlog_file13,
-      L: 151,
+      L: 154,
       S: this,
       A: [
         "getCredentialAssertion(memberCredential)['@type'] === 'dxos.halo.credentials.SpaceMember'",
@@ -3673,22 +3750,22 @@ var DataSpaceManager = class {
       opts
     }, {
       F: __dxlog_file13,
-      L: 163,
+      L: 166,
       S: this,
       C: (f, a) => f(...a)
     });
-    (0, import_invariant11.invariant)(this._isOpen, "Not open.", {
+    (0, import_invariant12.invariant)(this._isOpen, "Not open.", {
       F: __dxlog_file13,
-      L: 164,
+      L: 167,
       S: this,
       A: [
         "this._isOpen",
         "'Not open.'"
       ]
     });
-    (0, import_invariant11.invariant)(!this._spaces.has(opts.spaceKey), "Space already exists.", {
+    (0, import_invariant12.invariant)(!this._spaces.has(opts.spaceKey), "Space already exists.", {
       F: __dxlog_file13,
-      L: 165,
+      L: 168,
       S: this,
       A: [
         "!this._spaces.has(opts.spaceKey)",
@@ -3715,7 +3792,7 @@ var DataSpaceManager = class {
   async waitUntilSpaceReady(spaceKey) {
     await (0, import_context8.cancelWithContext)(this._ctx, this.updated.waitForCondition(() => {
       const space = this._spaces.get(spaceKey);
-      return !!space && space.state === import_services8.SpaceState.READY;
+      return !!space && space.state === import_services9.SpaceState.READY;
     }));
   }
   async _constructSpace(metadata) {
@@ -3723,7 +3800,7 @@ var DataSpaceManager = class {
       metadata
     }, {
       F: __dxlog_file13,
-      L: 198,
+      L: 201,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3750,17 +3827,18 @@ var DataSpaceManager = class {
         credentialProvider: createAuthProvider(this._signingContext.credentialSigner),
         credentialAuthenticator: (0, import_util6.deferFunction)(() => dataSpace.authVerifier.verifier)
       },
-      onNetworkConnection: (session) => {
+      onAuthorizedConnection: (session) => {
         session.addExtension("dxos.mesh.teleport.gossip", gossip.createExtension({
           remotePeerId: session.remotePeerId
         }));
         session.addExtension("dxos.mesh.teleport.notarization", dataSpace.notarizationPlugin.createExtension());
+        this._automergeHost.authorizeDevice(space.key, session.remotePeerId);
         session.addExtension("dxos.mesh.teleport.automerge", this._automergeHost.createExtension());
       },
       onAuthFailure: () => {
         import_log11.log.warn("auth failure", void 0, {
           F: __dxlog_file13,
-          L: 234,
+          L: 238,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -3771,7 +3849,7 @@ var DataSpaceManager = class {
     dataFeed && space.setDataFeed(dataFeed);
     const dataSpace = new DataSpace({
       inner: space,
-      initialState: metadata.state === import_services8.SpaceState.INACTIVE ? import_services8.SpaceState.INACTIVE : import_services8.SpaceState.CLOSED,
+      initialState: metadata.state === import_services9.SpaceState.INACTIVE ? import_services9.SpaceState.INACTIVE : import_services9.SpaceState.CLOSED,
       metadataStore: this._metadataStore,
       gossip,
       presence,
@@ -3784,7 +3862,7 @@ var DataSpaceManager = class {
             space: space.key
           }, {
             F: __dxlog_file13,
-            L: 252,
+            L: 256,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -3796,7 +3874,7 @@ var DataSpaceManager = class {
             open: this._isOpen
           }, {
             F: __dxlog_file13,
-            L: 259,
+            L: 263,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -3809,7 +3887,7 @@ var DataSpaceManager = class {
             space: space.key
           }, {
             F: __dxlog_file13,
-            L: 265,
+            L: 269,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -3819,7 +3897,7 @@ var DataSpaceManager = class {
       cache: metadata.cache,
       automergeHost: this._automergeHost
     });
-    if (metadata.state !== import_services8.SpaceState.INACTIVE) {
+    if (metadata.state !== import_services9.SpaceState.INACTIVE) {
       await dataSpace.open();
     }
     if (metadata.controlTimeframe) {
@@ -3857,7 +3935,7 @@ var SpacesServiceImpl = class {
   }
   async createSpace() {
     if (!this._identityManager.identity) {
-      throw new Error("This device has no HALO identity available. See https://docs.dxos.org/guide/halo");
+      throw new Error("This device has no HALO identity available. See https://docs.dxos.org/guide/platform/halo");
     }
     const dataSpaceManager = await this._getDataSpaceManager();
     const space = await dataSpaceManager.createSpace();
@@ -3865,17 +3943,17 @@ var SpacesServiceImpl = class {
   }
   async updateSpace({ spaceKey, state }) {
     const dataSpaceManager = await this._getDataSpaceManager();
-    const space = dataSpaceManager.spaces.get(spaceKey) ?? (0, import_debug6.raise)(new import_protocols9.SpaceNotFoundError(spaceKey));
+    const space = dataSpaceManager.spaces.get(spaceKey) ?? (0, import_debug6.raise)(new import_protocols11.SpaceNotFoundError(spaceKey));
     if (state) {
       switch (state) {
-        case import_services9.SpaceState.ACTIVE:
+        case import_services10.SpaceState.ACTIVE:
           await space.activate();
           break;
-        case import_services9.SpaceState.INACTIVE:
+        case import_services10.SpaceState.INACTIVE:
           await space.deactivate();
           break;
         default:
-          throw new import_protocols9.ApiError("Invalid space state");
+          throw new import_protocols11.ApiError("Invalid space state");
       }
     }
   }
@@ -3930,14 +4008,14 @@ var SpacesServiceImpl = class {
   }
   async postMessage({ spaceKey, channel, message }) {
     const dataSpaceManager = await this._getDataSpaceManager();
-    const space = dataSpaceManager.spaces.get(spaceKey) ?? (0, import_debug6.raise)(new import_protocols9.SpaceNotFoundError(spaceKey));
+    const space = dataSpaceManager.spaces.get(spaceKey) ?? (0, import_debug6.raise)(new import_protocols11.SpaceNotFoundError(spaceKey));
     await space.postMessage(getChannelId(channel), message);
   }
   subscribeMessages({ spaceKey, channel }) {
     return new import_codec_protobuf11.Stream(({ ctx, next }) => {
       (0, import_async13.scheduleTask)(ctx, async () => {
         const dataSpaceManager = await this._getDataSpaceManager();
-        const space = dataSpaceManager.spaces.get(spaceKey) ?? (0, import_debug6.raise)(new import_protocols9.SpaceNotFoundError(spaceKey));
+        const space = dataSpaceManager.spaces.get(spaceKey) ?? (0, import_debug6.raise)(new import_protocols11.SpaceNotFoundError(spaceKey));
         const handle = space.listen(getChannelId(channel), (message) => {
           next(message);
         });
@@ -3947,7 +4025,7 @@ var SpacesServiceImpl = class {
   }
   queryCredentials({ spaceKey, noTail }) {
     return new import_codec_protobuf11.Stream(({ ctx, next, close }) => {
-      const space = this._spaceManager.spaces.get(spaceKey) ?? (0, import_debug6.raise)(new import_protocols9.SpaceNotFoundError(spaceKey));
+      const space = this._spaceManager.spaces.get(spaceKey) ?? (0, import_debug6.raise)(new import_protocols11.SpaceNotFoundError(spaceKey));
       const processor = {
         processCredential: async (credential) => {
           next(credential);
@@ -3963,7 +4041,7 @@ var SpacesServiceImpl = class {
     });
   }
   async writeCredentials({ spaceKey, credentials }) {
-    const space = this._spaceManager.spaces.get(spaceKey) ?? (0, import_debug6.raise)(new import_protocols9.SpaceNotFoundError(spaceKey));
+    const space = this._spaceManager.spaces.get(spaceKey) ?? (0, import_debug6.raise)(new import_protocols11.SpaceNotFoundError(spaceKey));
     for (const credential of credentials ?? []) {
       if (credential.proof) {
         await space.controlPipeline.writer.write({
@@ -3972,7 +4050,7 @@ var SpacesServiceImpl = class {
           }
         });
       } else {
-        (0, import_invariant12.invariant)(!credential.id, "Id on unsigned credentials is not allowed", {
+        (0, import_invariant13.invariant)(!credential.id, "Id on unsigned credentials is not allowed", {
           F: __dxlog_file14,
           L: 168,
           S: this,
@@ -3981,7 +4059,7 @@ var SpacesServiceImpl = class {
             "'Id on unsigned credentials is not allowed'"
           ]
         });
-        (0, import_invariant12.invariant)(this._identityManager.identity, "Identity is not available", {
+        (0, import_invariant13.invariant)(this._identityManager.identity, "Identity is not available", {
           F: __dxlog_file14,
           L: 169,
           S: this,
@@ -3991,7 +4069,7 @@ var SpacesServiceImpl = class {
           ]
         });
         const signer = this._identityManager.identity.getIdentityCredentialSigner();
-        (0, import_invariant12.invariant)(credential.issuer.equals(signer.getIssuer()), void 0, {
+        (0, import_invariant13.invariant)(credential.issuer.equals(signer.getIssuer()), void 0, {
           F: __dxlog_file14,
           L: 171,
           S: this,
@@ -4014,14 +4092,14 @@ var SpacesServiceImpl = class {
   }
   async createEpoch({ spaceKey }) {
     const dataSpaceManager = await this._getDataSpaceManager();
-    const space = dataSpaceManager.spaces.get(spaceKey) ?? (0, import_debug6.raise)(new import_protocols9.SpaceNotFoundError(spaceKey));
+    const space = dataSpaceManager.spaces.get(spaceKey) ?? (0, import_debug6.raise)(new import_protocols11.SpaceNotFoundError(spaceKey));
     await space.createEpoch();
   }
   _serializeSpace(space) {
     return {
       spaceKey: space.key,
       state: space.state,
-      error: space.error ? (0, import_protocols9.encodeError)(space.error) : void 0,
+      error: space.error ? (0, import_protocols11.encodeError)(space.error) : void 0,
       pipeline: {
         currentEpoch: space.dataPipeline.currentEpoch,
         appliedEpoch: space.dataPipeline.appliedEpoch,
@@ -4048,7 +4126,7 @@ var SpacesServiceImpl = class {
               displayName: member.profile?.displayName
             }
           },
-          presence: member.removed ? import_services9.SpaceMember.PresenceState.REMOVED : isMe || peers.length > 0 ? import_services9.SpaceMember.PresenceState.ONLINE : import_services9.SpaceMember.PresenceState.OFFLINE,
+          presence: member.removed ? import_services10.SpaceMember.PresenceState.REMOVED : isMe || peers.length > 0 ? import_services10.SpaceMember.PresenceState.ONLINE : import_services10.SpaceMember.PresenceState.OFFLINE,
           peerStates: peers
         };
       }),
@@ -4105,7 +4183,7 @@ var ServiceContext = class {
     this.identityManager = new IdentityManager(this.metadataStore, this.keyring, this.feedStore, this.spaceManager);
     this.automergeHost = new import_echo_pipeline2.AutomergeHost(storage.createDirectory("automerge"));
     this.invitations = new InvitationsHandler(this.networkManager);
-    this._handlerFactories.set(import_services10.Invitation.Kind.DEVICE, () => new DeviceInvitationProtocol(this.keyring, () => this.identityManager.identity ?? (0, import_debug7.failUndefined)(), this._acceptIdentity.bind(this)));
+    this._handlerFactories.set(import_services11.Invitation.Kind.DEVICE, () => new DeviceInvitationProtocol(this.keyring, () => this.identityManager.identity ?? (0, import_debug7.failUndefined)(), this._acceptIdentity.bind(this)));
   }
   async open(ctx) {
     await this._checkStorageVersion();
@@ -4115,7 +4193,7 @@ var ServiceContext = class {
       S: this,
       C: (f, a) => f(...a)
     });
-    import_log13.log.trace("dxos.sdk.service-context.open", import_protocols10.trace.begin({
+    import_log13.log.trace("dxos.sdk.service-context.open", import_protocols12.trace.begin({
       id: this._instanceId
     }), {
       F: __dxlog_file15,
@@ -4131,7 +4209,7 @@ var ServiceContext = class {
     if (this.identityManager.identity) {
       await this._initialize(ctx);
     }
-    import_log13.log.trace("dxos.sdk.service-context.open", import_protocols10.trace.end({
+    import_log13.log.trace("dxos.sdk.service-context.open", import_protocols12.trace.end({
       id: this._instanceId
     }), {
       F: __dxlog_file15,
@@ -4179,7 +4257,7 @@ var ServiceContext = class {
   }
   getInvitationHandler(invitation) {
     const factory = this._handlerFactories.get(invitation.kind);
-    (0, import_invariant13.invariant)(factory, `Unknown invitation kind: ${invitation.kind}`, {
+    (0, import_invariant14.invariant)(factory, `Unknown invitation kind: ${invitation.kind}`, {
       F: __dxlog_file15,
       L: 173,
       S: this,
@@ -4205,8 +4283,8 @@ var ServiceContext = class {
   }
   async _checkStorageVersion() {
     await this.metadataStore.load();
-    if (this.metadataStore.version !== import_protocols10.STORAGE_VERSION) {
-      throw new import_protocols10.InvalidStorageVersionError(import_protocols10.STORAGE_VERSION, this.metadataStore.version);
+    if (this.metadataStore.version !== import_protocols12.STORAGE_VERSION) {
+      throw new import_protocols12.InvalidStorageVersionError(import_protocols12.STORAGE_VERSION, this.metadataStore.version);
     }
   }
   // Called when identity is created.
@@ -4233,8 +4311,8 @@ var ServiceContext = class {
     };
     this.dataSpaceManager = new DataSpaceManager(this.spaceManager, this.metadataStore, this.dataServiceSubscriptions, this.keyring, signingContext, this.feedStore, this.automergeHost);
     await this.dataSpaceManager.open();
-    this._handlerFactories.set(import_services10.Invitation.Kind.SPACE, (invitation) => {
-      (0, import_invariant13.invariant)(this.dataSpaceManager, "dataSpaceManager not initialized yet", {
+    this._handlerFactories.set(import_services11.Invitation.Kind.SPACE, (invitation) => {
+      (0, import_invariant14.invariant)(this.dataSpaceManager, "dataSpaceManager not initialized yet", {
         F: __dxlog_file15,
         L: 228,
         S: this,
@@ -4373,7 +4451,7 @@ var Lock = class {
   }
   async release() {
     await this._onRelease?.();
-    (0, import_invariant14.invariant)(this._fileHandle, "Lock is not acquired", {
+    (0, import_invariant15.invariant)(this._fileHandle, "Lock is not acquired", {
       F: __dxlog_file16,
       L: 42,
       S: this,
@@ -4393,16 +4471,16 @@ var StorageDriver = import_config.Runtime.Client.Storage.StorageDriver;
 var createStorageObjects = (config) => {
   const { persistent = false, keyStore, dataStore, dataRoot = (0, import_util8.isNode)() ? import_client_protocol4.DX_DATA : "dxos/storage" } = config ?? {};
   if (persistent && dataStore === StorageDriver.RAM) {
-    throw new import_protocols11.InvalidConfigError("RAM storage cannot be used in persistent mode.");
+    throw new import_protocols13.InvalidConfigError("RAM storage cannot be used in persistent mode.");
   }
   if (!persistent && dataStore !== void 0 && dataStore !== StorageDriver.RAM) {
-    throw new import_protocols11.InvalidConfigError("Cannot use a persistent storage in not persistent mode.");
+    throw new import_protocols13.InvalidConfigError("Cannot use a persistent storage in not persistent mode.");
   }
   if (persistent && keyStore === StorageDriver.RAM) {
-    throw new import_protocols11.InvalidConfigError("RAM key storage cannot be used in persistent mode.");
+    throw new import_protocols13.InvalidConfigError("RAM key storage cannot be used in persistent mode.");
   }
   if (!persistent && keyStore !== StorageDriver.RAM && keyStore !== void 0) {
-    throw new import_protocols11.InvalidConfigError("Cannot use a persistent key storage in not persistent mode.");
+    throw new import_protocols13.InvalidConfigError("Cannot use a persistent key storage in not persistent mode.");
   }
   return {
     storage: (0, import_random_access_storage.createStorage)({
@@ -4450,7 +4528,7 @@ var DevicesServiceImpl = class {
           next({
             devices: Array.from(deviceKeys.entries()).map(([key, profile]) => ({
               deviceKey: key,
-              kind: this._identityManager.identity?.deviceKey.equals(key) ? import_services12.DeviceKind.CURRENT : import_services12.DeviceKind.TRUSTED,
+              kind: this._identityManager.identity?.deviceKey.equals(key) ? import_services13.DeviceKind.CURRENT : import_services13.DeviceKind.TRUSTED,
               profile
             }))
           });
@@ -4565,16 +4643,16 @@ var LoggingServiceImpl = class {
 };
 var matchFilter = (filter, level, path, options) => {
   switch (options) {
-    case import_services13.QueryLogsRequest.MatchingOptions.INCLUSIVE:
+    case import_services14.QueryLogsRequest.MatchingOptions.INCLUSIVE:
       return level >= filter.level && (!filter.pattern || path.includes(filter.pattern));
-    case import_services13.QueryLogsRequest.MatchingOptions.EXPLICIT:
+    case import_services14.QueryLogsRequest.MatchingOptions.EXPLICIT:
       return level === filter.level && (!filter.pattern || path.includes(filter.pattern));
   }
 };
 var shouldLog = (entry2, request) => {
-  const options = request.options ?? import_services13.QueryLogsRequest.MatchingOptions.INCLUSIVE;
+  const options = request.options ?? import_services14.QueryLogsRequest.MatchingOptions.INCLUSIVE;
   if (request.filters === void 0) {
-    return options === import_services13.QueryLogsRequest.MatchingOptions.INCLUSIVE;
+    return options === import_services14.QueryLogsRequest.MatchingOptions.INCLUSIVE;
   } else {
     return request.filters.some((filter) => matchFilter(filter, entry2.level, entry2.meta?.F ?? "", options));
   }
@@ -4590,6 +4668,7 @@ var NetworkServiceImpl = class {
       const update = () => {
         next({
           swarm: this.networkManager.connectionState,
+          connectionInfo: this.networkManager.connectionLog?.swarms,
           signaling: this.signalManager.getStatus().map(({ host, state }) => ({
             server: host,
             state
@@ -4629,11 +4708,14 @@ var SystemServiceImpl = class {
     return {
       timestamp: /* @__PURE__ */ new Date(),
       diagnostics: JSON.parse(JSON.stringify(diagnostics, (0, import_util10.jsonKeyReplacer)({
-        truncate: keys === import_services14.GetDiagnosticsRequest.KEY_OPTION.TRUNCATE,
-        humanize: keys === import_services14.GetDiagnosticsRequest.KEY_OPTION.HUMANIZE
+        truncate: keys === import_services15.GetDiagnosticsRequest.KEY_OPTION.TRUNCATE,
+        humanize: keys === import_services15.GetDiagnosticsRequest.KEY_OPTION.HUMANIZE
       })))
     };
   }
+  async getPlatform() {
+    return getPlatform();
+  }
   async updateStatus({ status }) {
     await this._onUpdateStatus(status);
   }
@@ -4723,14 +4805,14 @@ var ClientServicesHost = class {
     this._systemService = new SystemServiceImpl({
       config: this._config,
       statusUpdate: this._statusUpdate,
-      getCurrentStatus: () => this.isOpen ? import_services11.SystemStatus.ACTIVE : import_services11.SystemStatus.INACTIVE,
+      getCurrentStatus: () => this.isOpen ? import_services12.SystemStatus.ACTIVE : import_services12.SystemStatus.INACTIVE,
       getDiagnostics: () => {
         return createDiagnostics(this._serviceRegistry.services, this._serviceContext, this._config);
       },
       onUpdateStatus: async (status) => {
-        if (!this.isOpen && status === import_services11.SystemStatus.ACTIVE) {
+        if (!this.isOpen && status === import_services12.SystemStatus.ACTIVE) {
           await this._resourceLock?.acquire();
-        } else if (this.isOpen && status === import_services11.SystemStatus.INACTIVE) {
+        } else if (this.isOpen && status === import_services12.SystemStatus.INACTIVE) {
           await this._resourceLock?.release();
         }
       },
@@ -4768,7 +4850,7 @@ var ClientServicesHost = class {
   * Can only be called once.
   */
   initialize({ config, ...options }) {
-    (0, import_invariant15.invariant)(!this._open, "service host is open", {
+    (0, import_invariant16.invariant)(!this._open, "service host is open", {
       F: __dxlog_file17,
       L: 201,
       S: this,
@@ -4784,7 +4866,7 @@ var ClientServicesHost = class {
       C: (f, a) => f(...a)
     });
     if (config) {
-      (0, import_invariant15.invariant)(!this._config, "config already set", {
+      (0, import_invariant16.invariant)(!this._config, "config already set", {
         F: __dxlog_file17,
         L: 205,
         S: this,
@@ -4802,7 +4884,7 @@ var ClientServicesHost = class {
       iceServers: this._config?.get("runtime.services.ice")
     }), signalManager = new import_messaging.WebsocketSignalManager(this._config?.get("runtime.services.signaling") ?? []) } = options;
     this._signalManager = signalManager;
-    (0, import_invariant15.invariant)(!this._networkManager, "network manager already set", {
+    (0, import_invariant16.invariant)(!this._networkManager, "network manager already set", {
       F: __dxlog_file17,
       L: 221,
       S: this,
@@ -4828,7 +4910,7 @@ var ClientServicesHost = class {
       return;
     }
     const traceId = import_keys11.PublicKey.random().toHex();
-    import_log15.log.trace("dxos.client-services.host.open", import_protocols12.trace.begin({
+    import_log15.log.trace("dxos.client-services.host.open", import_protocols14.trace.begin({
       id: traceId
     }), {
       F: __dxlog_file17,
@@ -4836,7 +4918,7 @@ var ClientServicesHost = class {
       S: this,
       C: (f, a) => f(...a)
     });
-    (0, import_invariant15.invariant)(this._config, "config not set", {
+    (0, import_invariant16.invariant)(this._config, "config not set", {
       F: __dxlog_file17,
       L: 241,
       S: this,
@@ -4845,7 +4927,7 @@ var ClientServicesHost = class {
         "'config not set'"
       ]
     });
-    (0, import_invariant15.invariant)(this._storage, "storage not set", {
+    (0, import_invariant16.invariant)(this._storage, "storage not set", {
       F: __dxlog_file17,
       L: 242,
       S: this,
@@ -4854,7 +4936,7 @@ var ClientServicesHost = class {
         "'storage not set'"
       ]
     });
-    (0, import_invariant15.invariant)(this._signalManager, "signal manager not set", {
+    (0, import_invariant16.invariant)(this._signalManager, "signal manager not set", {
       F: __dxlog_file17,
       L: 243,
       S: this,
@@ -4863,7 +4945,7 @@ var ClientServicesHost = class {
         "'signal manager not set'"
       ]
     });
-    (0, import_invariant15.invariant)(this._networkManager, "network manager not set", {
+    (0, import_invariant16.invariant)(this._networkManager, "network manager not set", {
       F: __dxlog_file17,
       L: 244,
       S: this,
@@ -4927,7 +5009,7 @@ var ClientServicesHost = class {
       S: this,
       C: (f, a) => f(...a)
     });
-    import_log15.log.trace("dxos.client-services.host.open", import_protocols12.trace.end({
+    import_log15.log.trace("dxos.client-services.host.open", import_protocols14.trace.end({
       id: traceId
     }), {
       F: __dxlog_file17,
@@ -4968,7 +5050,7 @@ var ClientServicesHost = class {
   }
   async reset() {
     const traceId = import_keys11.PublicKey.random().toHex();
-    import_log15.log.trace("dxos.sdk.client-services-host.reset", import_protocols12.trace.begin({
+    import_log15.log.trace("dxos.sdk.client-services-host.reset", import_protocols14.trace.begin({
       id: traceId
     }), {
       F: __dxlog_file17,
@@ -4990,7 +5072,7 @@ var ClientServicesHost = class {
       S: this,
       C: (f, a) => f(...a)
     });
-    import_log15.log.trace("dxos.sdk.client-services-host.reset", import_protocols12.trace.end({
+    import_log15.log.trace("dxos.sdk.client-services-host.reset", import_protocols14.trace.end({
       id: traceId
     }), {
       F: __dxlog_file17,
@@ -5022,7 +5104,7 @@ var ClientServicesHost = class {
       });
     } else {
       const automergeIndex = space.automergeSpaceState.rootUrl;
-      (0, import_invariant15.invariant)(automergeIndex, void 0, {
+      (0, import_invariant16.invariant)(automergeIndex, void 0, {
         F: __dxlog_file17,
         L: 375,
         S: this,
@@ -5092,4 +5174,4 @@ ClientServicesHost = _ts_decorate8([
   subscribeToSpaces,
   subscribeToSwarmInfo
 });
-//# sourceMappingURL=chunk-34H4H2HZ.cjs.map
+//# sourceMappingURL=chunk-GNBZGQOY.cjs.map