@dxos/client-services 0.3.2-main.de57e73 → 0.3.2-main.e5374ab

package/dist/lib/node/index.cjs

@@ -1,7 +1,9 @@
 "use strict";
+var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
 var __export = (target, all) => {
   for (var name in all)
@@ -15,6 +17,14 @@ var __copyProps = (to, from, except, desc) => {
   }
   return to;
 };
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
 // packages/sdk/client-services/src/index.ts
@@ -519,9 +529,11 @@ var import_credentials2 = require("@dxos/credentials");
 var import_debug = require("@dxos/debug");
 var import_feed_store2 = require("@dxos/feed-store");
 var import_invariant = require("@dxos/invariant");
+var import_keys4 = require("@dxos/keys");
 var import_log2 = require("@dxos/log");
 var import_credentials3 = require("@dxos/protocols/proto/dxos/halo/credentials");
 var import_tracing = require("@dxos/tracing");
+var import_util2 = require("@dxos/util");
 function _ts_decorate(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
@@ -540,6 +552,14 @@ var Identity = class Identity2 {
     this._signer = signer;
     this.identityKey = identityKey;
     this.deviceKey = deviceKey;
+    import_log2.log.trace("dxos.halo.device", {
+      deviceKey
+    }, {
+      F: __dxlog_file2,
+      L: 64,
+      S: this,
+      C: (f, a) => f(...a)
+    });
     this._deviceStateMachine = new import_credentials2.DeviceStateMachine({
       identityKey: this.identityKey,
       deviceKey: this.deviceKey,
@@ -550,7 +570,7 @@ var Identity = class Identity2 {
       onUpdate: () => this.stateUpdate.emit()
     });
     this.authVerifier = new TrustedKeySetAuthVerifier({
-      trustedKeysProvider: () => this.authorizedDeviceKeys,
+      trustedKeysProvider: () => new import_util2.ComplexSet(import_keys4.PublicKey.hash, this.authorizedDeviceKeys.keys()),
       update: this.stateUpdate,
       authTimeout: import_client_protocol.AUTH_TIMEOUT
     });
@@ -608,7 +628,7 @@ var Identity = class Identity2 {
   getIdentityCredentialSigner() {
     (0, import_invariant.invariant)(this._deviceStateMachine.deviceCredentialChain, "Device credential chain is not ready.", {
       F: __dxlog_file2,
-      L: 139,
+      L: 145,
       S: this,
       A: [
         "this._deviceStateMachine.deviceCredentialChain",
@@ -632,7 +652,7 @@ var Identity = class Identity2 {
       dataFeedKey
     }, {
       F: __dxlog_file2,
-      L: 155,
+      L: 161,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -684,17 +704,18 @@ Identity = _ts_decorate([
 ], Identity);
 
 // packages/sdk/client-services/src/packlets/identity/identity-manager.ts
+var import_platform = __toESM(require("platform"));
 var import_async6 = require("@dxos/async");
 var import_context3 = require("@dxos/context");
 var import_credentials4 = require("@dxos/credentials");
 var import_invariant2 = require("@dxos/invariant");
-var import_keys4 = require("@dxos/keys");
+var import_keys5 = require("@dxos/keys");
 var import_log3 = require("@dxos/log");
 var import_protocols2 = require("@dxos/protocols");
 var import_credentials5 = require("@dxos/protocols/proto/dxos/halo/credentials");
 var import_timeframe = require("@dxos/timeframe");
 var import_tracing2 = require("@dxos/tracing");
-var import_util2 = require("@dxos/util");
+var import_util3 = require("@dxos/util");
 function _ts_decorate2(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
@@ -720,12 +741,12 @@ var IdentityManager = class IdentityManager2 {
     return this._identity;
   }
   async open(ctx) {
-    const traceId = import_keys4.PublicKey.random().toHex();
+    const traceId = import_keys5.PublicKey.random().toHex();
     import_log3.log.trace("dxos.halo.identity-manager.open", import_protocols2.trace.begin({
       id: traceId
     }), {
       F: __dxlog_file3,
-      L: 73,
+      L: 75,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -734,7 +755,7 @@ var IdentityManager = class IdentityManager2 {
       identityRecord
     }, {
       F: __dxlog_file3,
-      L: 76,
+      L: 78,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -747,7 +768,7 @@ var IdentityManager = class IdentityManager2 {
         displayName: this._identity.profileDocument?.displayName
       }, {
         F: __dxlog_file3,
-        L: 81,
+        L: 83,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -757,7 +778,7 @@ var IdentityManager = class IdentityManager2 {
       id: traceId
     }), {
       F: __dxlog_file3,
-      L: 87,
+      L: 89,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -768,7 +789,7 @@ var IdentityManager = class IdentityManager2 {
   async createIdentity({ displayName } = {}) {
     (0, import_invariant2.invariant)(!this._identity, "Identity already exists.", {
       F: __dxlog_file3,
-      L: 95,
+      L: 97,
       S: this,
       A: [
         "!this._identity",
@@ -777,7 +798,7 @@ var IdentityManager = class IdentityManager2 {
     });
     (0, import_log3.log)("creating identity...", void 0, {
       F: __dxlog_file3,
-      L: 96,
+      L: 98,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -798,7 +819,7 @@ var IdentityManager = class IdentityManager2 {
       const generator = new import_credentials4.CredentialGenerator(this._keyring, identityRecord.identityKey, identityRecord.deviceKey);
       (0, import_invariant2.invariant)(identityRecord.haloSpace.genesisFeedKey, "Genesis feed key is required.", {
         F: __dxlog_file3,
-        L: 115,
+        L: 117,
         S: this,
         A: [
           "identityRecord.haloSpace.genesisFeedKey",
@@ -807,7 +828,7 @@ var IdentityManager = class IdentityManager2 {
       });
       (0, import_invariant2.invariant)(identityRecord.haloSpace.dataFeedKey, "Data feed key is required.", {
         F: __dxlog_file3,
-        L: 116,
+        L: 118,
         S: this,
         A: [
           "identityRecord.haloSpace.dataFeedKey",
@@ -826,6 +847,13 @@ var IdentityManager = class IdentityManager2 {
         }));
       }
       credentials.push(await generator.createDeviceAuthorization(identityRecord.deviceKey));
+      credentials.push(await generator.createDeviceProfile({
+        platform: import_platform.default.name,
+        platformVersion: import_platform.default.version,
+        architecture: typeof import_platform.default.os?.architecture === "number" ? String(import_platform.default.os.architecture) : void 0,
+        os: import_platform.default.os?.family,
+        osVersion: import_platform.default.os?.version
+      }));
       for (const credential of credentials) {
         await identity.controlPipeline.writer.write({
           credential: {
@@ -842,7 +870,7 @@ var IdentityManager = class IdentityManager2 {
       displayName: this._identity.profileDocument?.displayName
     }, {
       F: __dxlog_file3,
-      L: 151,
+      L: 163,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -852,7 +880,7 @@ var IdentityManager = class IdentityManager2 {
       deviceKey: identity.deviceKey
     }, {
       F: __dxlog_file3,
-      L: 157,
+      L: 169,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -866,13 +894,13 @@ var IdentityManager = class IdentityManager2 {
       params
     }, {
       F: __dxlog_file3,
-      L: 165,
+      L: 177,
       S: this,
       C: (f, a) => f(...a)
     });
     (0, import_invariant2.invariant)(!this._identity, "Identity already exists.", {
       F: __dxlog_file3,
-      L: 166,
+      L: 178,
       S: this,
       A: [
         "!this._identity",
@@ -900,7 +928,7 @@ var IdentityManager = class IdentityManager2 {
       displayName: this._identity.profileDocument?.displayName
     }, {
       F: __dxlog_file3,
-      L: 185,
+      L: 197,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -910,7 +938,7 @@ var IdentityManager = class IdentityManager2 {
       deviceKey: identity.deviceKey
     }, {
       F: __dxlog_file3,
-      L: 191,
+      L: 203,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -922,7 +950,7 @@ var IdentityManager = class IdentityManager2 {
   async updateProfile(profile) {
     (0, import_invariant2.invariant)(this._identity, "Identity not initialized.", {
       F: __dxlog_file3,
-      L: 199,
+      L: 211,
       S: this,
       A: [
         "this._identity",
@@ -953,7 +981,7 @@ var IdentityManager = class IdentityManager2 {
   async _constructIdentity(identityRecord) {
     (0, import_invariant2.invariant)(!this._identity, void 0, {
       F: __dxlog_file3,
-      L: 216,
+      L: 228,
       S: this,
       A: [
         "!this._identity",
@@ -964,13 +992,13 @@ var IdentityManager = class IdentityManager2 {
       identityRecord
     }, {
       F: __dxlog_file3,
-      L: 217,
+      L: 229,
       S: this,
       C: (f, a) => f(...a)
     });
     (0, import_invariant2.invariant)(identityRecord.haloSpace.controlFeedKey, void 0, {
       F: __dxlog_file3,
-      L: 220,
+      L: 232,
       S: this,
       A: [
         "identityRecord.haloSpace.controlFeedKey",
@@ -982,7 +1010,7 @@ var IdentityManager = class IdentityManager2 {
     });
     (0, import_invariant2.invariant)(identityRecord.haloSpace.dataFeedKey, void 0, {
       F: __dxlog_file3,
-      L: 224,
+      L: 236,
       S: this,
       A: [
         "identityRecord.haloSpace.dataFeedKey",
@@ -998,7 +1026,7 @@ var IdentityManager = class IdentityManager2 {
       swarmIdentity: {
         peerKey: identityRecord.deviceKey,
         credentialProvider: createAuthProvider((0, import_credentials4.createCredentialSignerWithKey)(this._keyring, identityRecord.deviceKey)),
-        credentialAuthenticator: (0, import_util2.deferFunction)(() => identity.authVerifier.verifier)
+        credentialAuthenticator: (0, import_util3.deferFunction)(() => identity.authVerifier.verifier)
       },
       identityKey: identityRecord.identityKey
     });
@@ -1014,7 +1042,7 @@ var IdentityManager = class IdentityManager2 {
       identityKey: identityRecord.identityKey
     }, {
       F: __dxlog_file3,
-      L: 248,
+      L: 260,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -1035,7 +1063,7 @@ var IdentityManager = class IdentityManager2 {
       onAuthFailure: () => {
         import_log3.log.warn("auth failure", void 0, {
           F: __dxlog_file3,
-          L: 267,
+          L: 279,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -1145,7 +1173,7 @@ var DeviceInvitationProtocol = class {
   async admit(request) {
     (0, import_invariant4.invariant)(request.device, void 0, {
       F: __dxlog_file5,
-      L: 31,
+      L: 35,
       S: this,
       A: [
         "request.device",
@@ -1181,7 +1209,7 @@ var DeviceInvitationProtocol = class {
   async accept(response, request) {
     (0, import_invariant4.invariant)(response.device, void 0, {
       F: __dxlog_file5,
-      L: 64,
+      L: 68,
       S: this,
       A: [
         "response.device",
@@ -1191,7 +1219,7 @@ var DeviceInvitationProtocol = class {
     const { identityKey, haloSpaceKey, genesisFeedKey, controlTimeframe } = response.device;
     (0, import_invariant4.invariant)(request.device, void 0, {
       F: __dxlog_file5,
-      L: 67,
+      L: 71,
       S: this,
       A: [
         "request.device",
@@ -1220,7 +1248,7 @@ var import_client_protocol2 = require("@dxos/client-protocol");
 var import_context5 = require("@dxos/context");
 var import_credentials7 = require("@dxos/credentials");
 var import_invariant6 = require("@dxos/invariant");
-var import_keys6 = require("@dxos/keys");
+var import_keys7 = require("@dxos/keys");
 var import_log5 = require("@dxos/log");
 var import_network_manager = require("@dxos/network-manager");
 var import_protocols4 = require("@dxos/protocols");
@@ -1231,7 +1259,7 @@ var import_invitations2 = require("@dxos/protocols/proto/dxos/halo/invitations")
 var import_async7 = require("@dxos/async");
 var import_context4 = require("@dxos/context");
 var import_invariant5 = require("@dxos/invariant");
-var import_keys5 = require("@dxos/keys");
+var import_keys6 = require("@dxos/keys");
 var import_log4 = require("@dxos/log");
 var import_protocols3 = require("@dxos/protocols");
 var import_services2 = require("@dxos/protocols/proto/dxos/client/services");
@@ -1279,7 +1307,7 @@ var InvitationHostExtension = class extends import_teleport.RpcExtension {
         },
         introduce: async (request) => {
           const { profile, invitationId } = request;
-          const traceId = import_keys5.PublicKey.random().toHex();
+          const traceId = import_keys6.PublicKey.random().toHex();
           import_log4.log.trace("dxos.sdk.invitation-handler.host.introduce", import_protocols3.trace.begin({
             id: traceId
           }), {
@@ -1331,7 +1359,7 @@ var InvitationHostExtension = class extends import_teleport.RpcExtension {
           };
         },
         authenticate: async ({ authCode: code }) => {
-          const traceId = import_keys5.PublicKey.random().toHex();
+          const traceId = import_keys6.PublicKey.random().toHex();
           import_log4.log.trace("dxos.sdk.invitation-handler.host.authenticate", import_protocols3.trace.begin({
             id: traceId
           }), {
@@ -1411,7 +1439,7 @@ var InvitationHostExtension = class extends import_teleport.RpcExtension {
           };
         },
         admit: async (request) => {
-          const traceId = import_keys5.PublicKey.random().toHex();
+          const traceId = import_keys6.PublicKey.random().toHex();
           import_log4.log.trace("dxos.sdk.invitation-handler.host.admit", import_protocols3.trace.begin({
             id: traceId
           }), {
@@ -1577,11 +1605,11 @@ var InvitationsHandler = class {
     this._networkManager = _networkManager;
   }
   createInvitation(protocol, options) {
-    const { invitationId = import_keys6.PublicKey.random().toHex(), type = import_services3.Invitation.Type.INTERACTIVE, authMethod = import_services3.Invitation.AuthMethod.SHARED_SECRET, state = import_services3.Invitation.State.INIT, timeout = import_client_protocol2.INVITATION_TIMEOUT, swarmKey = import_keys6.PublicKey.random() } = options ?? {};
+    const { invitationId = import_keys7.PublicKey.random().toHex(), type = import_services3.Invitation.Type.INTERACTIVE, authMethod = import_services3.Invitation.AuthMethod.SHARED_SECRET, state = import_services3.Invitation.State.INIT, timeout = import_client_protocol2.INVITATION_TIMEOUT, swarmKey = import_keys7.PublicKey.random() } = options ?? {};
     const authCode = options?.authCode ?? (authMethod === import_services3.Invitation.AuthMethod.SHARED_SECRET ? (0, import_credentials7.generatePasscode)(import_client_protocol2.AUTHENTICATION_CODE_LENGTH) : void 0);
     (0, import_invariant6.invariant)(protocol, void 0, {
       F: __dxlog_file7,
-      L: 75,
+      L: 80,
       S: this,
       A: [
         "protocol",
@@ -1610,7 +1638,7 @@ var InvitationsHandler = class {
         ...protocol.toJSON()
       }, {
         F: __dxlog_file7,
-        L: 97,
+        L: 102,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -1635,7 +1663,7 @@ var InvitationsHandler = class {
             const deviceKey = admissionRequest.device?.deviceKey ?? admissionRequest.space?.deviceKey;
             (0, import_invariant6.invariant)(deviceKey, void 0, {
               F: __dxlog_file7,
-              L: 118,
+              L: 123,
               S: this,
               A: [
                 "deviceKey",
@@ -1652,13 +1680,13 @@ var InvitationsHandler = class {
         },
         onOpen: () => {
           (0, import_async8.scheduleTask)(ctx, async () => {
-            const traceId = import_keys6.PublicKey.random().toHex();
+            const traceId = import_keys7.PublicKey.random().toHex();
             try {
               import_log5.log.trace("dxos.sdk.invitations-handler.host.onOpen", import_protocols4.trace.begin({
                 id: traceId
               }), {
                 F: __dxlog_file7,
-                L: 136,
+                L: 141,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1666,7 +1694,7 @@ var InvitationsHandler = class {
                 ...protocol.toJSON()
               }, {
                 F: __dxlog_file7,
-                L: 137,
+                L: 142,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1682,7 +1710,7 @@ var InvitationsHandler = class {
                 ...protocol.toJSON()
               }, {
                 F: __dxlog_file7,
-                L: 140,
+                L: 145,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1694,7 +1722,7 @@ var InvitationsHandler = class {
                 id: traceId
               }), {
                 F: __dxlog_file7,
-                L: 142,
+                L: 147,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1704,7 +1732,7 @@ var InvitationsHandler = class {
                   ...protocol.toJSON()
                 }, {
                   F: __dxlog_file7,
-                  L: 145,
+                  L: 150,
                   S: this,
                   C: (f, a) => f(...a)
                 });
@@ -1715,7 +1743,7 @@ var InvitationsHandler = class {
               } else {
                 import_log5.log.error("failed", err, {
                   F: __dxlog_file7,
-                  L: 148,
+                  L: 153,
                   S: this,
                   C: (f, a) => f(...a)
                 });
@@ -1726,7 +1754,7 @@ var InvitationsHandler = class {
                 error: err
               }), {
                 F: __dxlog_file7,
-                L: 151,
+                L: 156,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1747,7 +1775,7 @@ var InvitationsHandler = class {
               ...protocol.toJSON()
             }, {
               F: __dxlog_file7,
-              L: 166,
+              L: 171,
               S: this,
               C: (f, a) => f(...a)
             });
@@ -1758,7 +1786,7 @@ var InvitationsHandler = class {
           } else {
             import_log5.log.error("failed", err, {
               F: __dxlog_file7,
-              L: 169,
+              L: 174,
               S: this,
               C: (f, a) => f(...a)
             });
@@ -1803,7 +1831,7 @@ var InvitationsHandler = class {
     const { timeout = import_client_protocol2.INVITATION_TIMEOUT } = invitation;
     (0, import_invariant6.invariant)(protocol, void 0, {
       F: __dxlog_file7,
-      L: 210,
+      L: 215,
       S: this,
       A: [
         "protocol",
@@ -1817,7 +1845,7 @@ var InvitationsHandler = class {
     const setState = (newData) => {
       (0, import_invariant6.invariant)(newData.state !== void 0, void 0, {
         F: __dxlog_file7,
-        L: 221,
+        L: 226,
         S: this,
         A: [
           "newData.state !== undefined",
@@ -1837,7 +1865,7 @@ var InvitationsHandler = class {
             ...protocol.toJSON()
           }, {
             F: __dxlog_file7,
-            L: 229,
+            L: 234,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1847,7 +1875,7 @@ var InvitationsHandler = class {
         } else {
           import_log5.log.warn("auth failed", err, {
             F: __dxlog_file7,
-            L: 232,
+            L: 237,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1861,7 +1889,7 @@ var InvitationsHandler = class {
         ...protocol.toJSON()
       }, {
         F: __dxlog_file7,
-        L: 240,
+        L: 245,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -1876,7 +1904,7 @@ var InvitationsHandler = class {
               currentState
             }, {
               F: __dxlog_file7,
-              L: 250,
+              L: 255,
               S: this,
               C: (f, a) => f(...a)
             });
@@ -1885,13 +1913,13 @@ var InvitationsHandler = class {
             }
           });
           (0, import_async8.scheduleTask)(ctx, async () => {
-            const traceId = import_keys6.PublicKey.random().toHex();
+            const traceId = import_keys7.PublicKey.random().toHex();
             try {
               import_log5.log.trace("dxos.sdk.invitations-handler.guest.onOpen", import_protocols4.trace.begin({
                 id: traceId
               }), {
                 F: __dxlog_file7,
-                L: 259,
+                L: 264,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1903,7 +1931,7 @@ var InvitationsHandler = class {
                 ...protocol.toJSON()
               }, {
                 F: __dxlog_file7,
-                L: 267,
+                L: 272,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1914,7 +1942,7 @@ var InvitationsHandler = class {
                 ...protocol.toJSON()
               }, {
                 F: __dxlog_file7,
-                L: 271,
+                L: 276,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1924,7 +1952,7 @@ var InvitationsHandler = class {
                 response: introductionResponse
               }, {
                 F: __dxlog_file7,
-                L: 275,
+                L: 280,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1936,7 +1964,7 @@ var InvitationsHandler = class {
                 for (let attempt = 1; attempt <= MAX_OTP_ATTEMPTS; attempt++) {
                   (0, import_log5.log)("guest waiting for authentication code...", void 0, {
                     F: __dxlog_file7,
-                    L: 284,
+                    L: 289,
                     S: this,
                     C: (f, a) => f(...a)
                   });
@@ -1948,7 +1976,7 @@ var InvitationsHandler = class {
                   });
                   (0, import_log5.log)("sending authentication request", void 0, {
                     F: __dxlog_file7,
-                    L: 288,
+                    L: 293,
                     S: this,
                     C: (f, a) => f(...a)
                   });
@@ -1969,7 +1997,7 @@ var InvitationsHandler = class {
                         attempt
                       }, {
                         F: __dxlog_file7,
-                        L: 299,
+                        L: 304,
                         S: this,
                         C: (f, a) => f(...a)
                       });
@@ -1986,7 +2014,7 @@ var InvitationsHandler = class {
                 ...protocol.toJSON()
               }, {
                 F: __dxlog_file7,
-                L: 310,
+                L: 315,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -1998,7 +2026,7 @@ var InvitationsHandler = class {
                 ...protocol.toJSON()
               }, {
                 F: __dxlog_file7,
-                L: 321,
+                L: 326,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -2010,7 +2038,7 @@ var InvitationsHandler = class {
                 id: traceId
               }), {
                 F: __dxlog_file7,
-                L: 323,
+                L: 328,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -2020,7 +2048,7 @@ var InvitationsHandler = class {
                   ...protocol.toJSON()
                 }, {
                   F: __dxlog_file7,
-                  L: 326,
+                  L: 331,
                   S: this,
                   C: (f, a) => f(...a)
                 });
@@ -2030,7 +2058,7 @@ var InvitationsHandler = class {
               } else {
                 (0, import_log5.log)("auth failed", err, {
                   F: __dxlog_file7,
-                  L: 329,
+                  L: 334,
                   S: this,
                   C: (f, a) => f(...a)
                 });
@@ -2041,7 +2069,7 @@ var InvitationsHandler = class {
                 error: err
               }), {
                 F: __dxlog_file7,
-                L: 332,
+                L: 337,
                 S: this,
                 C: (f, a) => f(...a)
               });
@@ -2059,7 +2087,7 @@ var InvitationsHandler = class {
               ...protocol.toJSON()
             }, {
               F: __dxlog_file7,
-              L: 343,
+              L: 348,
               S: this,
               C: (f, a) => f(...a)
             });
@@ -2069,7 +2097,7 @@ var InvitationsHandler = class {
           } else {
             (0, import_log5.log)("auth failed", err, {
               F: __dxlog_file7,
-              L: 346,
+              L: 351,
               S: this,
               C: (f, a) => f(...a)
             });
@@ -2082,7 +2110,7 @@ var InvitationsHandler = class {
     (0, import_async8.scheduleTask)(ctx, async () => {
       (0, import_invariant6.invariant)(invitation.swarmKey, void 0, {
         F: __dxlog_file7,
-        L: 356,
+        L: 361,
         S: this,
         A: [
           "invitation.swarmKey",
@@ -2092,7 +2120,7 @@ var InvitationsHandler = class {
       const topic = invitation.swarmKey;
       const swarmConnection = await this._networkManager.joinSwarm({
         topic,
-        peerId: import_keys6.PublicKey.random(),
+        peerId: import_keys7.PublicKey.random(),
         protocolProvider: (0, import_network_manager.createTeleportProtocolFactory)(async (teleport) => {
           teleport.addExtension("dxos.halo.invitations", createExtension());
         }),
@@ -2249,15 +2277,6 @@ var InvitationsServiceImpl = class {
       await accepted.cancel();
       this._acceptInvitations.delete(invitationId);
       this._removedAccepted.emit(accepted.get());
-    } else {
-      import_log6.log.warn("invalid invitation", {
-        invitationId
-      }, {
-        F: __dxlog_file8,
-        L: 132,
-        S: this,
-        C: (f, a) => f(...a)
-      });
     }
   }
   queryInvitations() {
@@ -2341,7 +2360,7 @@ var SpaceInvitationProtocol = class {
   async admit(request, guestProfile) {
     (0, import_invariant8.invariant)(this._spaceKey, void 0, {
       F: __dxlog_file9,
-      L: 42,
+      L: 46,
       S: this,
       A: [
         "this._spaceKey",
@@ -2351,7 +2370,7 @@ var SpaceInvitationProtocol = class {
     const space = await this._spaceManager.spaces.get(this._spaceKey);
     (0, import_invariant8.invariant)(space, void 0, {
       F: __dxlog_file9,
-      L: 44,
+      L: 48,
       S: this,
       A: [
         "space",
@@ -2360,7 +2379,7 @@ var SpaceInvitationProtocol = class {
     });
     (0, import_invariant8.invariant)(request.space, void 0, {
       F: __dxlog_file9,
-      L: 46,
+      L: 50,
       S: this,
       A: [
         "request.space",
@@ -2373,14 +2392,14 @@ var SpaceInvitationProtocol = class {
       guest: deviceKey
     }, {
       F: __dxlog_file9,
-      L: 49,
+      L: 53,
       S: this,
       C: (f, a) => f(...a)
     });
     const credentials = await (0, import_credentials8.createAdmissionCredentials)(this._signingContext.credentialSigner, identityKey, space.key, space.inner.genesisFeedKey, guestProfile);
     (0, import_invariant8.invariant)(credentials[0].credential, void 0, {
       F: __dxlog_file9,
-      L: 60,
+      L: 64,
       S: this,
       A: [
         "credentials[0].credential",
@@ -2390,7 +2409,7 @@ var SpaceInvitationProtocol = class {
     const spaceMemberCredential = credentials[0].credential.credential;
     (0, import_invariant8.invariant)((0, import_credentials8.getCredentialAssertion)(spaceMemberCredential)["@type"] === "dxos.halo.credentials.SpaceMember", void 0, {
       F: __dxlog_file9,
-      L: 62,
+      L: 66,
       S: this,
       A: [
         "getCredentialAssertion(spaceMemberCredential)['@type'] === 'dxos.halo.credentials.SpaceMember'",
@@ -2426,7 +2445,7 @@ var SpaceInvitationProtocol = class {
   async accept(response) {
     (0, import_invariant8.invariant)(response.space, void 0, {
       F: __dxlog_file9,
-      L: 97,
+      L: 101,
       S: this,
       A: [
         "response.space",
@@ -2437,7 +2456,7 @@ var SpaceInvitationProtocol = class {
     const assertion = (0, import_credentials8.getCredentialAssertion)(credential);
     (0, import_invariant8.invariant)(assertion["@type"] === "dxos.halo.credentials.SpaceMember", "Invalid credential", {
       F: __dxlog_file9,
-      L: 100,
+      L: 104,
       S: this,
       A: [
         "assertion['@type'] === 'dxos.halo.credentials.SpaceMember'",
@@ -2446,7 +2465,7 @@ var SpaceInvitationProtocol = class {
     });
     (0, import_invariant8.invariant)(credential.subject.id.equals(this._signingContext.identityKey), void 0, {
       F: __dxlog_file9,
-      L: 101,
+      L: 105,
       S: this,
       A: [
         "credential.subject.id.equals(this._signingContext.identityKey)",
@@ -2545,10 +2564,10 @@ var getPlatform = () => {
       };
     }
   } else {
-    const { platform, version, arch } = process;
+    const { platform: platform2, version, arch } = process;
     return {
       type: "node",
-      platform: `${platform} ${version} ${arch}`,
+      platform: `${platform2} ${version} ${arch}`,
       runtime: process.version,
       uptime: Math.floor(process.uptime()),
       memory: process.memoryUsage()
@@ -2557,7 +2576,7 @@ var getPlatform = () => {
 };
 
 // packages/sdk/client-services/src/version.ts
-var DXOS_VERSION = "0.3.2-main.de57e73";
+var DXOS_VERSION = "0.3.2-main.e5374ab";
 
 // packages/sdk/client-services/src/packlets/services/diagnostics.ts
 var __dxlog_file10 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/services/diagnostics.ts";
@@ -2686,25 +2705,25 @@ var import_echo_pipeline2 = require("@dxos/echo-pipeline");
 var import_feed_store4 = require("@dxos/feed-store");
 var import_invariant13 = require("@dxos/invariant");
 var import_keyring = require("@dxos/keyring");
-var import_keys10 = require("@dxos/keys");
+var import_keys11 = require("@dxos/keys");
 var import_log13 = require("@dxos/log");
 var import_protocols10 = require("@dxos/protocols");
 var import_services10 = require("@dxos/protocols/proto/dxos/client/services");
 var import_teleport_extension_object_sync = require("@dxos/teleport-extension-object-sync");
 var import_tracing4 = require("@dxos/tracing");
-var import_util6 = require("@dxos/util");
+var import_util7 = require("@dxos/util");
 
 // packages/sdk/client-services/src/packlets/spaces/data-space-manager.ts
 var import_async12 = require("@dxos/async");
 var import_context8 = require("@dxos/context");
 var import_credentials13 = require("@dxos/credentials");
 var import_invariant11 = require("@dxos/invariant");
-var import_keys9 = require("@dxos/keys");
+var import_keys10 = require("@dxos/keys");
 var import_log11 = require("@dxos/log");
 var import_protocols8 = require("@dxos/protocols");
 var import_services8 = require("@dxos/protocols/proto/dxos/client/services");
 var import_teleport_extension_gossip = require("@dxos/teleport-extension-gossip");
-var import_util5 = require("@dxos/util");
+var import_util6 = require("@dxos/util");
 
 // packages/sdk/client-services/src/packlets/spaces/data-space.ts
 var import_async11 = require("@dxos/async");
@@ -2712,24 +2731,24 @@ var import_client_protocol3 = require("@dxos/client-protocol");
 var import_context7 = require("@dxos/context");
 var import_debug4 = require("@dxos/debug");
 var import_echo_pipeline = require("@dxos/echo-pipeline");
-var import_keys8 = require("@dxos/keys");
+var import_keys9 = require("@dxos/keys");
 var import_log10 = require("@dxos/log");
 var import_protocols7 = require("@dxos/protocols");
 var import_services7 = require("@dxos/protocols/proto/dxos/client/services");
 var import_credentials10 = require("@dxos/protocols/proto/dxos/halo/credentials");
 var import_timeframe2 = require("@dxos/timeframe");
 var import_tracing3 = require("@dxos/tracing");
-var import_util4 = require("@dxos/util");
+var import_util5 = require("@dxos/util");
 
 // packages/sdk/client-services/src/packlets/spaces/notarization-plugin.ts
 var import_async10 = require("@dxos/async");
 var import_context6 = require("@dxos/context");
 var import_invariant10 = require("@dxos/invariant");
-var import_keys7 = require("@dxos/keys");
+var import_keys8 = require("@dxos/keys");
 var import_log9 = require("@dxos/log");
 var import_protocols6 = require("@dxos/protocols");
 var import_teleport2 = require("@dxos/teleport");
-var import_util3 = require("@dxos/util");
+var import_util4 = require("@dxos/util");
 var __dxlog_file11 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/spaces/notarization-plugin.ts";
 var DEFAULT_RETRY_TIMEOUT = 1e3;
 var DEFAULT_SUCCESS_DELAY = 1e3;
@@ -2740,8 +2759,8 @@ var NotarizationPlugin = class {
     this._ctx = new import_context6.Context();
     this._extensionOpened = new import_async10.Event();
     this._extensions = /* @__PURE__ */ new Set();
-    this._processedCredentials = new import_util3.ComplexSet(import_keys7.PublicKey.hash);
-    this._processCredentialsTriggers = new import_util3.ComplexMap(import_keys7.PublicKey.hash);
+    this._processedCredentials = new import_util4.ComplexSet(import_keys8.PublicKey.hash);
+    this._processCredentialsTriggers = new import_util4.ComplexMap(import_keys8.PublicKey.hash);
   }
   get hasWriter() {
     return !!this._writer;
@@ -2903,7 +2922,7 @@ var NotarizationPlugin = class {
     if (this._processedCredentials.has(id)) {
       return;
     }
-    await (0, import_util3.entry)(this._processCredentialsTriggers, id).orInsert(new import_async10.Trigger()).value.wait();
+    await (0, import_util4.entry)(this._processCredentialsTriggers, id).orInsert(new import_async10.Trigger()).value.wait();
   }
   /**
   * Requests from other peers to notarize credentials.
@@ -3023,7 +3042,7 @@ var DataSpace = class DataSpace2 {
     this._signingContext = params.signingContext;
     this._callbacks = params.callbacks ?? {};
     this.authVerifier = new TrustedKeySetAuthVerifier({
-      trustedKeysProvider: () => new import_util4.ComplexSet(import_keys8.PublicKey.hash, Array.from(this._inner.spaceState.members.values()).filter((member) => !member.removed).map((member) => member.key)),
+      trustedKeysProvider: () => new import_util5.ComplexSet(import_keys9.PublicKey.hash, Array.from(this._inner.spaceState.members.values()).filter((member) => !member.removed).map((member) => member.key)),
       update: this._inner.stateUpdate,
       authTimeout: import_client_protocol3.AUTH_TIMEOUT
     });
@@ -3442,9 +3461,9 @@ var DataSpaceManager = class DataSpaceManager2 {
     this._feedStore = _feedStore;
     this._ctx = new import_context8.Context();
     this.updated = new import_async12.Event();
-    this._spaces = new import_util5.ComplexMap(import_keys9.PublicKey.hash);
+    this._spaces = new import_util6.ComplexMap(import_keys10.PublicKey.hash);
     this._isOpen = false;
-    this._instanceId = import_keys9.PublicKey.random().toHex();
+    this._instanceId = import_keys10.PublicKey.random().toHex();
   }
   // TODO(burdon): Remove.
   get spaces() {
@@ -3473,7 +3492,7 @@ var DataSpaceManager = class DataSpaceManager2 {
       S: this,
       C: (f, a) => f(...a)
     });
-    await (0, import_util5.forEachAsync)(this._metadataStore.spaces, async (spaceMetadata) => {
+    await (0, import_util6.forEachAsync)(this._metadataStore.spaces, async (spaceMetadata) => {
       try {
         (0, import_log11.log)("load space", {
           spaceMetadata
@@ -3655,7 +3674,7 @@ var DataSpaceManager = class DataSpaceManager2 {
       swarmIdentity: {
         peerKey: this._signingContext.deviceKey,
         credentialProvider: createAuthProvider(this._signingContext.credentialSigner),
-        credentialAuthenticator: (0, import_util5.deferFunction)(() => dataSpace.authVerifier.verifier)
+        credentialAuthenticator: (0, import_util6.deferFunction)(() => dataSpace.authVerifier.verifier)
       },
       onNetworkConnection: (session) => {
         session.addExtension("dxos.mesh.teleport.gossip", gossip.createExtension({
@@ -3995,7 +4014,7 @@ var ServiceContext = class ServiceContext2 {
     this.initialized = new import_async14.Trigger();
     this.dataServiceSubscriptions = new import_echo_pipeline2.DataServiceSubscriptions();
     this._handlerFactories = /* @__PURE__ */ new Map();
-    this._instanceId = import_keys10.PublicKey.random().toHex();
+    this._instanceId = import_keys11.PublicKey.random().toHex();
     this.metadataStore = new import_echo_pipeline2.MetadataStore(storage.createDirectory("metadata"));
     this.snapshotStore = new import_echo_pipeline2.SnapshotStore(storage.createDirectory("snapshots"));
     this.blobStore = new import_teleport_extension_object_sync.BlobStore(storage.createDirectory("blobs"));
@@ -4216,7 +4235,7 @@ _ts_decorate5([
   import_tracing4.trace.span()
 ], ServiceContext.prototype, "_initialize", null);
 ServiceContext = _ts_decorate5([
-  (0, import_util6.safeInstanceof)("dxos.client-services.ServiceContext"),
+  (0, import_util7.safeInstanceof)("dxos.client-services.ServiceContext"),
   import_tracing4.trace.resource()
 ], ServiceContext);
 
@@ -4228,7 +4247,7 @@ var import_document_model2 = require("@dxos/document-model");
 var import_echo_pipeline3 = require("@dxos/echo-pipeline");
 var import_echo_schema = require("@dxos/echo-schema");
 var import_invariant15 = require("@dxos/invariant");
-var import_keys11 = require("@dxos/keys");
+var import_keys12 = require("@dxos/keys");
 var import_log16 = require("@dxos/log");
 var import_messaging = require("@dxos/messaging");
 var import_model_factory = require("@dxos/model-factory");
@@ -4271,7 +4290,7 @@ var DevicesServiceImpl = class {
   constructor(_identityManager) {
     this._identityManager = _identityManager;
   }
-  updateDevice(request) {
+  async updateDevice(profile) {
     throw new Error("Method not implemented.");
   }
   queryDevices() {
@@ -4284,9 +4303,10 @@ var DevicesServiceImpl = class {
           });
         } else {
           next({
-            devices: Array.from(deviceKeys.values()).map((key) => ({
+            devices: Array.from(deviceKeys.entries()).map(([key, profile]) => ({
               deviceKey: key,
-              kind: this._identityManager.identity?.deviceKey.equals(key) ? import_services11.DeviceKind.CURRENT : import_services11.DeviceKind.TRUSTED
+              kind: this._identityManager.identity?.deviceKey.equals(key) ? import_services11.DeviceKind.CURRENT : import_services11.DeviceKind.TRUSTED,
+              profile
             }))
           });
         }
@@ -4370,7 +4390,7 @@ var import_async16 = require("@dxos/async");
 var import_codec_protobuf13 = require("@dxos/codec-protobuf");
 var import_log15 = require("@dxos/log");
 var import_services12 = require("@dxos/protocols/proto/dxos/client/services");
-var import_util7 = require("@dxos/util");
+var import_util8 = require("@dxos/util");
 var LoggingServiceImpl = class {
   constructor() {
     this._logs = new import_async16.Event();
@@ -4388,15 +4408,15 @@ var LoggingServiceImpl = class {
   }
   async controlMetrics({ reset, record }) {
     if (reset) {
-      import_util7.tracer.clear();
+      import_util8.tracer.clear();
     }
     if (record === true) {
-      import_util7.tracer.start();
+      import_util8.tracer.start();
     } else if (record === false) {
-      import_util7.tracer.stop();
+      import_util8.tracer.stop();
     }
     return {
-      recording: import_util7.tracer.recording
+      recording: import_util8.tracer.recording
     };
   }
   /**
@@ -4404,10 +4424,10 @@ var LoggingServiceImpl = class {
   */
   queryMetrics({ interval = 5e3 }) {
     const getNumericalValues = (key) => {
-      const events = import_util7.tracer.get(key) ?? [];
+      const events = import_util8.tracer.get(key) ?? [];
       return {
         key,
-        stats: (0, import_util7.numericalValues)(events, "duration")
+        stats: (0, import_util8.numericalValues)(events, "duration")
       };
     };
     return new import_codec_protobuf13.Stream(({ next }) => {
@@ -4445,7 +4465,7 @@ var LoggingServiceImpl = class {
         }
         const record = {
           ...entry2,
-          context: (0, import_util7.jsonify)((0, import_log15.getContextFromEntry)(entry2)),
+          context: (0, import_util8.jsonify)((0, import_log15.getContextFromEntry)(entry2)),
           timestamp: /* @__PURE__ */ new Date(),
           meta: {
             // TODO(dmaretskyi): Fix proto.
@@ -4519,10 +4539,10 @@ var import_client_protocol4 = require("@dxos/client-protocol");
 var import_protocols11 = require("@dxos/protocols");
 var import_config = require("@dxos/protocols/proto/dxos/config");
 var import_random_access_storage = require("@dxos/random-access-storage");
-var import_util8 = require("@dxos/util");
+var import_util9 = require("@dxos/util");
 var StorageDriver = import_config.Runtime.Client.Storage.StorageDriver;
 var createStorageObjects = (config) => {
-  const { persistent = false, keyStore, dataStore, dataRoot = (0, import_util8.isNode)() ? import_client_protocol4.DX_DATA : "dxos/storage" } = config ?? {};
+  const { persistent = false, keyStore, dataStore, dataRoot = (0, import_util9.isNode)() ? import_client_protocol4.DX_DATA : "dxos/storage" } = config ?? {};
   if (persistent && dataStore === StorageDriver.RAM) {
     throw new import_protocols11.InvalidConfigError("RAM storage cannot be used in persistent mode.");
   }
@@ -4566,7 +4586,7 @@ var toStorageType = (type) => {
 // packages/sdk/client-services/src/packlets/system/system-service.ts
 var import_codec_protobuf15 = require("@dxos/codec-protobuf");
 var import_services13 = require("@dxos/protocols/proto/dxos/client/services");
-var import_util9 = require("@dxos/util");
+var import_util10 = require("@dxos/util");
 var SystemServiceImpl = class {
   constructor({ config, statusUpdate, getDiagnostics, onUpdateStatus, getCurrentStatus, onReset }) {
     this._config = config;
@@ -4586,7 +4606,7 @@ var SystemServiceImpl = class {
     const diagnostics = await this._getDiagnostics();
     return {
       timestamp: /* @__PURE__ */ new Date(),
-      diagnostics: JSON.parse(JSON.stringify(diagnostics, (0, import_util9.jsonKeyReplacer)({
+      diagnostics: JSON.parse(JSON.stringify(diagnostics, (0, import_util10.jsonKeyReplacer)({
         truncate: keys === import_services13.GetDiagnosticsRequest.KEY_OPTION.TRUNCATE,
         humanize: keys === import_services13.GetDiagnosticsRequest.KEY_OPTION.HUMANIZE
       })))
@@ -4787,7 +4807,7 @@ var ClientServicesHost = class ClientServicesHost2 {
     if (this._open) {
       return;
     }
-    const traceId = import_keys11.PublicKey.random().toHex();
+    const traceId = import_keys12.PublicKey.random().toHex();
     import_log16.log.trace("dxos.client-services.host.open", import_protocols12.trace.begin({
       id: traceId
     }), {
@@ -4927,7 +4947,7 @@ var ClientServicesHost = class ClientServicesHost2 {
     });
   }
   async reset() {
-    const traceId = import_keys11.PublicKey.random().toHex();
+    const traceId = import_keys12.PublicKey.random().toHex();
     import_log16.log.trace("dxos.sdk.client-services-host.reset", import_protocols12.trace.begin({
       id: traceId
     }), {
@@ -5005,7 +5025,7 @@ var import_context11 = require("@dxos/context");
 var import_log17 = require("@dxos/log");
 var import_messaging2 = require("@dxos/messaging");
 var import_network_manager3 = require("@dxos/network-manager");
-var import_util10 = require("@dxos/util");
+var import_util11 = require("@dxos/util");
 
 // packages/sdk/client-services/src/packlets/vault/shell-runtime.ts
 var import_async18 = require("@dxos/async");
@@ -5113,7 +5133,7 @@ var IFrameHostRuntime = class {
       C: (f, a) => f(...a)
     });
     try {
-      this._config = await (0, import_util10.getAsyncValue)(this._configProvider);
+      this._config = await (0, import_util11.getAsyncValue)(this._configProvider);
       this._transportFactory = (0, import_network_manager3.createSimplePeerTransportFactory)({
         iceServers: this._config.get("runtime.services.ice")
       });
@@ -5200,7 +5220,7 @@ var import_log18 = require("@dxos/log");
 var import_network_manager4 = require("@dxos/network-manager");
 var import_protocols13 = require("@dxos/protocols");
 var import_rpc3 = require("@dxos/rpc");
-var import_util11 = require("@dxos/util");
+var import_util12 = require("@dxos/util");
 var __dxlog_file20 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/src/packlets/vault/iframe-proxy-runtime.ts";
 var IFrameProxyRuntime = class {
   constructor({ config, systemPort, shellPort }) {
@@ -5217,7 +5237,7 @@ var IFrameProxyRuntime = class {
     return this._shellRuntime;
   }
   async open(origin) {
-    this._config = await (0, import_util11.getAsyncValue)(this._configProvider);
+    this._config = await (0, import_util12.getAsyncValue)(this._configProvider);
     this._transportService = new import_network_manager4.SimplePeerTransportService({
       iceServers: this._config.get("runtime.services.ice")
     });
@@ -5250,7 +5270,7 @@ var IFrameProxyRuntime = class {
     } catch (err) {
       import_log18.log.catch(err, void 0, {
         F: __dxlog_file20,
-        L: 85,
+        L: 90,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -5282,7 +5302,7 @@ var import_client_protocol9 = require("@dxos/client-protocol");
 var import_invariant17 = require("@dxos/invariant");
 var import_log19 = require("@dxos/log");
 var import_rpc4 = require("@dxos/rpc");
-var import_util12 = require("@dxos/util");
+var import_util13 = require("@dxos/util");
 function _ts_decorate9(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
@@ -5297,7 +5317,7 @@ var __dxlog_file21 = "/home/runner/work/dxos/dxos/packages/sdk/client-services/s
 var WorkerSession = class {
   constructor({ serviceHost, systemPort, appPort, shellPort, readySignal }) {
     this._startTrigger = new import_async21.Trigger();
-    this.onClose = new import_util12.Callback();
+    this.onClose = new import_util13.Callback();
     (0, import_invariant17.invariant)(serviceHost, void 0, {
       F: __dxlog_file21,
       L: 49,