@dxos/echo-pipeline 0.1.55-main.ff36828 → 0.1.55

package/dist/lib/node/index.cjs

@@ -64,64 +64,184 @@ __export(src_exports, {
 });
 module.exports = __toCommonJS(src_exports);
 
-// packages/core/echo/echo-pipeline/src/errors/errors.ts
-var DBError = class extends Error {
-  constructor(code, message, context) {
-    super(message ? `${code}: ${message}` : code.toString());
-    this.code = code;
-    this.context = context;
-    Object.setPrototypeOf(this, new.target.prototype);
-  }
+// packages/core/echo/echo-pipeline/src/common/codec.ts
+var import_hypercore = require("@dxos/hypercore");
+var import_protocols = require("@dxos/protocols");
+var codec = import_protocols.schema.getCodecForType("dxos.echo.feed.FeedMessage");
+var valueEncoding = (0, import_hypercore.createCodecEncoding)(codec);
+
+// packages/core/echo/echo-pipeline/src/common/feeds.ts
+var import_tiny_invariant = __toESM(require("tiny-invariant"));
+var createMappedFeedWriter = (mapper, writer) => {
+  (0, import_tiny_invariant.default)(mapper);
+  (0, import_tiny_invariant.default)(writer);
+  return {
+    write: async (data, options) => await writer.write(await mapper(data), options)
+  };
 };
-var IdentityNotInitializedError = class extends DBError {
-  constructor() {
-    super("IDENTITY_NOT_INITIALIZED", "Identity not initialized.");
+
+// packages/core/echo/echo-pipeline/src/db-host/data-service-host.ts
+var import_tiny_invariant2 = __toESM(require("tiny-invariant"));
+var import_codec_protobuf = require("@dxos/codec-protobuf");
+var import_context = require("@dxos/context");
+var import_echo_db = require("@dxos/echo-db");
+var import_log = require("@dxos/log");
+var import_util = require("@dxos/util");
+var __dxlog_file = "/mnt/ramdisk/work/packages/core/echo/echo-pipeline/src/db-host/data-service-host.ts";
+var DataServiceHost = class {
+  constructor(_itemManager, _itemDemuxer, _writeStream) {
+    this._itemManager = _itemManager;
+    this._itemDemuxer = _itemDemuxer;
+    this._writeStream = _writeStream;
+    this._ctx = new import_context.Context();
+    this._clientTagMap = new import_util.ComplexMap(([feedKey, seq]) => `${feedKey.toHex()}:${seq}`);
   }
-};
-var InvalidInvitationError = class extends DBError {
-  constructor() {
-    super("INVALID_INVITATION", "Invitation is invalid.");
+  async open() {
   }
-};
-var InvalidStorageVersionError = class extends DBError {
-  constructor(expected, actual) {
-    super("INVALID_STORAGE_VERSION", "Invalid storage version.", {
-      expected,
-      actual
-    });
+  async close() {
+    await this._ctx.dispose();
   }
-};
-var SpaceNotFoundError = class extends DBError {
-  constructor(spaceKey) {
-    super("SPACE_NOT_FOUND", "Space not found.", {
-      spaceKey
+  /**
+  * Real-time subscription to data objects in a space.
+  */
+  subscribe() {
+    return new import_codec_protobuf.Stream(({ next, close, ctx }) => {
+      ctx.onDispose(this._ctx.onDispose(close));
+      const objects = Array.from(this._itemManager.entities.values()).map((entity) => entity.createSnapshot());
+      next({
+        batch: {
+          objects
+        }
+      });
+      this._itemDemuxer.mutation.on(ctx, (message) => {
+        var _a;
+        const { batch, meta } = message;
+        (0, import_tiny_invariant2.default)(!meta.clientTag, "Unexpected client tag in mutation message");
+        (0, import_log.log)("message", {
+          batch,
+          meta
+        }, {
+          F: __dxlog_file,
+          L: 63,
+          S: this,
+          C: (f, a) => f(...a)
+        });
+        const clientTag = this._clientTagMap.get([
+          message.meta.feedKey,
+          message.meta.seq
+        ]);
+        (_a = batch.objects) == null ? void 0 : _a.forEach((object) => {
+          (0, import_echo_db.setMetadataOnObject)(object, {
+            ...meta
+          });
+        });
+        if (clientTag) {
+          (0, import_echo_db.tagMutationsInBatch)(batch, clientTag, 0);
+        }
+        next({
+          clientTag,
+          feedKey: message.meta.feedKey,
+          seq: message.meta.seq,
+          batch
+        });
+      });
     });
   }
-};
-var EntityNotFoundError = class extends DBError {
-  constructor(entityId) {
-    super("ITEM_NOT_FOUND", "Item not found.", {
-      entityId
+  async write(request) {
+    var _a, _b;
+    (0, import_tiny_invariant2.default)(!this._ctx.disposed, "Cannot write to closed DataServiceHost");
+    (0, import_tiny_invariant2.default)(this._writeStream, "Cannot write mutations in readonly mode");
+    (0, import_log.log)("write", {
+      clientTag: request.clientTag,
+      objectCount: (_b = (_a = request.batch.objects) == null ? void 0 : _a.length) != null ? _b : 0
+    }, {
+      F: __dxlog_file,
+      L: 92,
+      S: this,
+      C: (f, a) => f(...a)
+    });
+    const message = createDataMessage(request.batch);
+    const receipt = await this._writeStream.write(message, {
+      afterWrite: async (receipt2) => {
+        if (request.clientTag) {
+          (0, import_log.log)("tag", {
+            clientTag: request.clientTag,
+            feedKey: receipt2.feedKey,
+            seq: receipt2.seq
+          }, {
+            F: __dxlog_file,
+            L: 101,
+            S: this,
+            C: (f, a) => f(...a)
+          });
+          this._clientTagMap.set([
+            receipt2.feedKey,
+            receipt2.seq
+          ], request.clientTag);
+        }
+      }
     });
+    return receipt;
   }
 };
-var UnknownModelError = class extends DBError {
-  constructor(model) {
-    super("UNKNOWN_MODEL", "Unknown model.", {
-      model
-    });
+var createDataMessage = (batch) => {
+  var _a;
+  return {
+    batch: {
+      objects: (_a = batch.objects) == null ? void 0 : _a.map((object) => {
+        var _a2;
+        return {
+          ...object,
+          mutations: (_a2 = object.mutations) == null ? void 0 : _a2.map((mutation) => ({
+            ...mutation,
+            meta: void 0
+          })),
+          meta: void 0
+        };
+      })
+    }
+  };
+};
+
+// packages/core/echo/echo-pipeline/src/db-host/database-host.ts
+var import_echo_db2 = require("@dxos/echo-db");
+var DatabaseHost = class {
+  constructor(_outboundStream) {
+    this._outboundStream = _outboundStream;
+  }
+  get isReadOnly() {
+    return !!this._outboundStream;
+  }
+  get echoProcessor() {
+    return this._echoProcessor;
+  }
+  async open(itemManager, modelFactory) {
+    this._itemManager = itemManager;
+    this._itemManager._debugLabel = "host";
+    this._itemDemuxer = new import_echo_db2.ItemDemuxer(itemManager, modelFactory);
+    this._echoProcessor = this._itemDemuxer.open();
+  }
+  async close() {
+  }
+  getWriteStream() {
+    return this._outboundStream;
+  }
+  createSnapshot() {
+    return this._itemDemuxer.createSnapshot();
+  }
+  createDataServiceHost() {
+    var _a;
+    return new DataServiceHost(this._itemManager, this._itemDemuxer, (_a = this._outboundStream) != null ? _a : void 0);
   }
 };
 
-// packages/core/echo/echo-pipeline/src/metadata/metadata-store.ts
-var import_crc_32 = __toESM(require("crc-32"));
-var import_tiny_invariant = __toESM(require("tiny-invariant"));
+// packages/core/echo/echo-pipeline/src/db-host/snapshot-manager.ts
 var import_async = require("@dxos/async");
-var import_errors = require("@dxos/errors");
-var import_log = require("@dxos/log");
-var import_protocols = require("@dxos/protocols");
-var import_services = require("@dxos/protocols/proto/dxos/client/services");
-var import_util = require("@dxos/util");
+var import_context2 = require("@dxos/context");
+var import_debug = require("@dxos/debug");
+var import_keys = require("@dxos/keys");
+var import_protocols2 = require("@dxos/protocols");
+var import_blob = require("@dxos/protocols/proto/dxos/echo/blob");
 function _ts_decorate(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
@@ -132,58 +252,273 @@ function _ts_decorate(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/metadata/metadata-store.ts";
-var emptyEchoMetadata = () => ({
-  version: import_protocols.STORAGE_VERSION,
-  spaces: [],
-  created: new Date(),
-  updated: new Date()
-});
-var EchoMetadata = import_protocols.schema.getCodecForType("dxos.echo.metadata.EchoMetadata");
-var MetadataStore = class {
+var SpaceSnapshot = import_protocols2.schema.getCodecForType("dxos.echo.snapshot.SpaceSnapshot");
+var SnapshotManager = class SnapshotManager2 {
   // prettier-ignore
-  constructor(_directory) {
-    this._directory = _directory;
-    this._metadata = emptyEchoMetadata();
-    this.update = new import_async.Event();
+  constructor(_snapshotStore, _blobStore, _blobSync) {
+    this._snapshotStore = _snapshotStore;
+    this._blobStore = _blobStore;
+    this._blobSync = _blobSync;
   }
-  get metadata() {
-    return this._metadata;
+  async _getBlob(blobId) {
+    const blob = await this._blobStore.get(blobId);
+    return SpaceSnapshot.decode(blob);
   }
-  get version() {
-    var _a;
-    return (_a = this._metadata.version) != null ? _a : 0;
+  async load(ctx, id) {
+    const blobId = import_keys.PublicKey.fromHex(id).asUint8Array();
+    const blobMeta = await this._blobStore.getMeta(blobId);
+    if (blobMeta && blobMeta.state === import_blob.BlobMeta.State.FULLY_PRESENT) {
+      return this._getBlob(blobId);
+    }
+    const fallbackStore = await (0, import_context2.cancelWithContext)(ctx, this._snapshotStore.loadSnapshot(id));
+    if (fallbackStore) {
+      return fallbackStore;
+    }
+    await this._blobSync.download(ctx, blobId);
+    return this._getBlob(blobId);
   }
-  /**
-  * Returns a list of currently saved spaces. The list and objects in it can be modified addSpace and
-  * addSpaceFeed functions.
-  */
-  get spaces() {
-    var _a;
-    return (_a = this._metadata.spaces) != null ? _a : [];
+  async store(snapshot) {
+    const { id } = await this._blobStore.set(SpaceSnapshot.encode(snapshot));
+    await this._blobSync.notifyBlobAdded(id);
+    return import_keys.PublicKey.from(id).toHex();
   }
-  /**
-  * Loads metadata from persistent storage.
-  */
-  async load() {
-    var _a;
-    const file = this._directory.getOrCreateFile("EchoMetadata");
-    try {
-      const { size: fileLength } = await file.stat();
-      if (fileLength < 8) {
-        return;
-      }
-      const dataSize = fromBytesInt32(await file.read(0, 4));
-      const checksum = fromBytesInt32(await file.read(4, 4));
-      (0, import_log.log)("loaded", {
-        size: dataSize,
-        checksum
-      }, {
-        F: __dxlog_file,
-        L: 72,
-        S: this,
-        C: (f, a) => f(...a)
-      });
+};
+_ts_decorate([
+  (0, import_debug.timed)(1e4)
+], SnapshotManager.prototype, "load", null);
+SnapshotManager = _ts_decorate([
+  (0, import_async.trackLeaks)("open", "close")
+], SnapshotManager);
+
+// packages/core/echo/echo-pipeline/src/db-host/snapshot-store.ts
+var import_crypto = require("@dxos/crypto");
+var import_protocols3 = require("@dxos/protocols");
+var SpaceSnapshot2 = import_protocols3.schema.getCodecForType("dxos.echo.snapshot.SpaceSnapshot");
+var SnapshotStore = class {
+  // prettier-ignore
+  constructor(_directory) {
+    this._directory = _directory;
+  }
+  async saveSnapshot(snapshot) {
+    const encoded = SpaceSnapshot2.encode(snapshot);
+    const key = await import_crypto.subtleCrypto.digest("SHA-256", encoded);
+    const keyString = Buffer.from(key).toString("hex");
+    const file = await this._directory.getOrCreateFile(keyString);
+    try {
+      await file.write(0, Buffer.from(encoded));
+    } finally {
+      await file.close();
+    }
+    return keyString;
+  }
+  async loadSnapshot(key) {
+    const file = await this._directory.getOrCreateFile(key);
+    try {
+      const { size } = await file.stat();
+      if (size === 0) {
+        return void 0;
+      }
+      const buffer = await file.read(0, size);
+      return SpaceSnapshot2.decode(buffer);
+    } finally {
+      await file.close();
+    }
+  }
+  async listSnapshots() {
+    const entries = await this._directory.list();
+    return await Promise.all(entries.map(async (key) => {
+      const { size } = await this._directory.getOrCreateFile(key).stat();
+      return {
+        key,
+        size
+      };
+    }));
+  }
+};
+
+// packages/core/echo/echo-pipeline/src/db-host/data-service.ts
+var import_tiny_invariant3 = __toESM(require("tiny-invariant"));
+var import_debug2 = require("@dxos/debug");
+var import_keys2 = require("@dxos/keys");
+var import_log2 = require("@dxos/log");
+var import_util2 = require("@dxos/util");
+var __dxlog_file2 = "/mnt/ramdisk/work/packages/core/echo/echo-pipeline/src/db-host/data-service.ts";
+var DataServiceSubscriptions = class {
+  constructor() {
+    this._spaces = new import_util2.ComplexMap(import_keys2.PublicKey.hash);
+  }
+  clear() {
+    this._spaces.clear();
+  }
+  async registerSpace(spaceKey, host) {
+    (0, import_log2.log)("Registering space", {
+      spaceKey
+    }, {
+      F: __dxlog_file2,
+      L: 31,
+      S: this,
+      C: (f, a) => f(...a)
+    });
+    (0, import_tiny_invariant3.default)(!this._spaces.has(spaceKey));
+    await host.open();
+    this._spaces.set(spaceKey, host);
+  }
+  async unregisterSpace(spaceKey) {
+    (0, import_log2.log)("Unregistering space", {
+      spaceKey
+    }, {
+      F: __dxlog_file2,
+      L: 38,
+      S: this,
+      C: (f, a) => f(...a)
+    });
+    const host = this._spaces.get(spaceKey);
+    await (host == null ? void 0 : host.close());
+    this._spaces.delete(spaceKey);
+  }
+  getDataService(spaceKey) {
+    return this._spaces.get(spaceKey);
+  }
+};
+var DataServiceImpl = class {
+  constructor(_subscriptions) {
+    this._subscriptions = _subscriptions;
+  }
+  subscribe(request) {
+    var _a;
+    (0, import_tiny_invariant3.default)(request.spaceKey);
+    const host = (_a = this._subscriptions.getDataService(request.spaceKey)) != null ? _a : (0, import_debug2.raise)(new Error(`space not found: ${request.spaceKey}`));
+    return host.subscribe();
+  }
+  write(request) {
+    var _a;
+    (0, import_tiny_invariant3.default)(request.spaceKey);
+    (0, import_tiny_invariant3.default)(request.batch);
+    const host = (_a = this._subscriptions.getDataService(request.spaceKey)) != null ? _a : (0, import_debug2.raise)(new Error(`space not found: ${request.spaceKey}`));
+    return host.write(request);
+  }
+};
+
+// packages/core/echo/echo-pipeline/src/errors/errors.ts
+var DBError = class extends Error {
+  constructor(code, message, context) {
+    super(message ? `${code}: ${message}` : code.toString());
+    this.code = code;
+    this.context = context;
+    Object.setPrototypeOf(this, new.target.prototype);
+  }
+};
+var IdentityNotInitializedError = class extends DBError {
+  constructor() {
+    super("IDENTITY_NOT_INITIALIZED", "Identity not initialized.");
+  }
+};
+var InvalidInvitationError = class extends DBError {
+  constructor() {
+    super("INVALID_INVITATION", "Invitation is invalid.");
+  }
+};
+var InvalidStorageVersionError = class extends DBError {
+  constructor(expected, actual) {
+    super("INVALID_STORAGE_VERSION", "Invalid storage version.", {
+      expected,
+      actual
+    });
+  }
+};
+var SpaceNotFoundError = class extends DBError {
+  constructor(spaceKey) {
+    super("SPACE_NOT_FOUND", "Space not found.", {
+      spaceKey
+    });
+  }
+};
+var EntityNotFoundError = class extends DBError {
+  constructor(entityId) {
+    super("ITEM_NOT_FOUND", "Item not found.", {
+      entityId
+    });
+  }
+};
+var UnknownModelError = class extends DBError {
+  constructor(model) {
+    super("UNKNOWN_MODEL", "Unknown model.", {
+      model
+    });
+  }
+};
+
+// packages/core/echo/echo-pipeline/src/metadata/metadata-store.ts
+var import_crc_32 = __toESM(require("crc-32"));
+var import_tiny_invariant4 = __toESM(require("tiny-invariant"));
+var import_async2 = require("@dxos/async");
+var import_errors = require("@dxos/errors");
+var import_log3 = require("@dxos/log");
+var import_protocols4 = require("@dxos/protocols");
+var import_services = require("@dxos/protocols/proto/dxos/client/services");
+var import_util3 = require("@dxos/util");
+function _ts_decorate2(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
+    r = Reflect.decorate(decorators, target, key, desc);
+  else
+    for (var i = decorators.length - 1; i >= 0; i--)
+      if (d = decorators[i])
+        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+var __dxlog_file3 = "/mnt/ramdisk/work/packages/core/echo/echo-pipeline/src/metadata/metadata-store.ts";
+var emptyEchoMetadata = () => ({
+  version: import_protocols4.STORAGE_VERSION,
+  spaces: [],
+  created: new Date(),
+  updated: new Date()
+});
+var EchoMetadata = import_protocols4.schema.getCodecForType("dxos.echo.metadata.EchoMetadata");
+var MetadataStore = class {
+  // prettier-ignore
+  constructor(_directory) {
+    this._directory = _directory;
+    this._metadata = emptyEchoMetadata();
+    this.update = new import_async2.Event();
+  }
+  get metadata() {
+    return this._metadata;
+  }
+  get version() {
+    var _a;
+    return (_a = this._metadata.version) != null ? _a : 0;
+  }
+  /**
+  * Returns a list of currently saved spaces. The list and objects in it can be modified addSpace and
+  * addSpaceFeed functions.
+  */
+  get spaces() {
+    var _a;
+    return (_a = this._metadata.spaces) != null ? _a : [];
+  }
+  /**
+  * Loads metadata from persistent storage.
+  */
+  async load() {
+    var _a;
+    const file = this._directory.getOrCreateFile("EchoMetadata");
+    try {
+      const { size: fileLength } = await file.stat();
+      if (fileLength < 8) {
+        return;
+      }
+      const dataSize = fromBytesInt32(await file.read(0, 4));
+      const checksum = fromBytesInt32(await file.read(4, 4));
+      (0, import_log3.log)("loaded", {
+        size: dataSize,
+        checksum
+      }, {
+        F: __dxlog_file3,
+        L: 72,
+        S: this,
+        C: (f, a) => f(...a)
+      });
       if (fileLength < dataSize + 8) {
         throw new import_errors.DataCorruptionError("Metadata size is smaller than expected.");
       }
@@ -198,10 +533,10 @@ var MetadataStore = class {
         (_a2 = space.state) != null ? _a2 : space.state = import_services.SpaceState.ACTIVE;
       });
     } catch (err) {
-      import_log.log.error("failed to load metadata", {
+      import_log3.log.error("failed to load metadata", {
         err
       }, {
-        F: __dxlog_file,
+        F: __dxlog_file3,
         L: 92,
         S: this,
         C: (f, a) => f(...a)
@@ -215,25 +550,25 @@ var MetadataStore = class {
     var _a;
     const data = {
       ...this._metadata,
-      version: import_protocols.STORAGE_VERSION,
+      version: import_protocols4.STORAGE_VERSION,
       created: (_a = this._metadata.created) != null ? _a : new Date(),
       updated: new Date()
     };
     this.update.emit(data);
     const file = this._directory.getOrCreateFile("EchoMetadata");
     try {
-      const encoded = (0, import_util.arrayToBuffer)(EchoMetadata.encode(data));
+      const encoded = (0, import_util3.arrayToBuffer)(EchoMetadata.encode(data));
       const checksum = import_crc_32.default.buf(encoded);
       const result = Buffer.alloc(8 + encoded.length);
       result.writeInt32LE(encoded.length, 0);
       result.writeInt32LE(checksum, 4);
       encoded.copy(result, 8);
       await file.write(0, result);
-      (0, import_log.log)("saved", {
+      (0, import_log3.log)("saved", {
         size: encoded.length,
         checksum
       }, {
-        F: __dxlog_file,
+        F: __dxlog_file3,
         L: 124,
         S: this,
         C: (f, a) => f(...a)
@@ -248,15 +583,15 @@ var MetadataStore = class {
       return this._metadata.identity.haloSpace;
     }
     const space = this.spaces.find((space2) => space2.key === spaceKey);
-    (0, import_tiny_invariant.default)(space, "Space not found");
+    (0, import_tiny_invariant4.default)(space, "Space not found");
     return space;
   }
   /**
   * Clears storage - doesn't work for now.
   */
   async clear() {
-    (0, import_log.log)("clearing all metadata", void 0, {
-      F: __dxlog_file,
+    (0, import_log3.log)("clearing all metadata", void 0, {
+      F: __dxlog_file3,
       L: 145,
       S: this,
       C: (f, a) => f(...a)
@@ -268,13 +603,13 @@ var MetadataStore = class {
     return this._metadata.identity;
   }
   async setIdentityRecord(record) {
-    (0, import_tiny_invariant.default)(!this._metadata.identity, "Cannot overwrite existing identity in metadata");
+    (0, import_tiny_invariant4.default)(!this._metadata.identity, "Cannot overwrite existing identity in metadata");
     this._metadata.identity = record;
     await this._save();
   }
   async addSpace(record) {
     var _a, _b, _c;
-    (0, import_tiny_invariant.default)(!((_a = this._metadata.spaces) != null ? _a : []).find((space) => space.key === record.key), "Cannot overwrite existing space in metadata");
+    (0, import_tiny_invariant4.default)(!((_a = this._metadata.spaces) != null ? _a : []).find((space) => space.key === record.key), "Cannot overwrite existing space in metadata");
     ((_c = (_b = this._metadata).spaces) != null ? _c : _b.spaces = []).push(record);
     await this._save();
   }
@@ -301,56 +636,40 @@ var MetadataStore = class {
     await this._save();
   }
 };
-_ts_decorate([
-  import_async.synchronized
+_ts_decorate2([
+  import_async2.synchronized
 ], MetadataStore.prototype, "load", null);
-_ts_decorate([
-  import_async.synchronized
+_ts_decorate2([
+  import_async2.synchronized
 ], MetadataStore.prototype, "_save", null);
 var fromBytesInt32 = (buf) => buf.readInt32LE(0);
 
 // packages/core/echo/echo-pipeline/src/pipeline/pipeline.ts
-var import_tiny_invariant4 = __toESM(require("tiny-invariant"));
-var import_async3 = require("@dxos/async");
-var import_context = require("@dxos/context");
-var import_debug2 = require("@dxos/debug");
+var import_tiny_invariant6 = __toESM(require("tiny-invariant"));
+var import_async4 = require("@dxos/async");
+var import_context3 = require("@dxos/context");
+var import_debug4 = require("@dxos/debug");
 var import_feed_store = require("@dxos/feed-store");
-var import_keys = require("@dxos/keys");
-var import_log4 = require("@dxos/log");
+var import_keys3 = require("@dxos/keys");
+var import_log6 = require("@dxos/log");
 var import_timeframe2 = require("@dxos/timeframe");
-var import_util2 = require("@dxos/util");
-
-// packages/core/echo/echo-pipeline/src/common/codec.ts
-var import_hypercore = require("@dxos/hypercore");
-var import_protocols2 = require("@dxos/protocols");
-var codec = import_protocols2.schema.getCodecForType("dxos.echo.feed.FeedMessage");
-var valueEncoding = (0, import_hypercore.createCodecEncoding)(codec);
-
-// packages/core/echo/echo-pipeline/src/common/feeds.ts
-var import_tiny_invariant2 = __toESM(require("tiny-invariant"));
-var createMappedFeedWriter = (mapper, writer) => {
-  (0, import_tiny_invariant2.default)(mapper);
-  (0, import_tiny_invariant2.default)(writer);
-  return {
-    write: async (data, options) => await writer.write(await mapper(data), options)
-  };
-};
+var import_util4 = require("@dxos/util");
 
 // packages/core/echo/echo-pipeline/src/pipeline/message-selector.ts
-var import_tiny_invariant3 = __toESM(require("tiny-invariant"));
-var import_log2 = require("@dxos/log");
-var __dxlog_file2 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/pipeline/message-selector.ts";
+var import_tiny_invariant5 = __toESM(require("tiny-invariant"));
+var import_log4 = require("@dxos/log");
+var __dxlog_file4 = "/mnt/ramdisk/work/packages/core/echo/echo-pipeline/src/pipeline/message-selector.ts";
 var createMessageSelector = (timeframeClock) => {
   return (messages) => {
     for (let i = 0; i < messages.length; i++) {
       const { data: { timeframe } } = messages[i];
-      (0, import_tiny_invariant3.default)(timeframe);
+      (0, import_tiny_invariant5.default)(timeframe);
       if (!timeframeClock.hasGaps(timeframe)) {
         return i;
       }
     }
-    (0, import_log2.log)("Skipping...", void 0, {
-      F: __dxlog_file2,
+    (0, import_log4.log)("Skipping...", void 0, {
+      F: __dxlog_file4,
       L: 34,
       S: void 0,
       C: (f, a) => f(...a)
@@ -359,11 +678,11 @@ var createMessageSelector = (timeframeClock) => {
 };
 
 // packages/core/echo/echo-pipeline/src/pipeline/timeframe-clock.ts
-var import_async2 = require("@dxos/async");
-var import_debug = require("@dxos/debug");
-var import_log3 = require("@dxos/log");
+var import_async3 = require("@dxos/async");
+var import_debug3 = require("@dxos/debug");
+var import_log5 = require("@dxos/log");
 var import_timeframe = require("@dxos/timeframe");
-function _ts_decorate2(decorators, target, key, desc) {
+function _ts_decorate3(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
     r = Reflect.decorate(decorators, target, key, desc);
@@ -373,7 +692,7 @@ function _ts_decorate2(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file3 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/pipeline/timeframe-clock.ts";
+var __dxlog_file5 = "/mnt/ramdisk/work/packages/core/echo/echo-pipeline/src/pipeline/timeframe-clock.ts";
 var mapTimeframeToFeedIndexes = (timeframe) => timeframe.frames().map(([feedKey, index]) => ({
   feedKey,
   index
@@ -390,7 +709,7 @@ var TimeframeClock = class {
   // prettier-ignore
   constructor(_timeframe = new import_timeframe.Timeframe()) {
     this._timeframe = _timeframe;
-    this.update = new import_async2.Event();
+    this.update = new import_async3.Event();
     this._pendingTimeframe = _timeframe;
   }
   /**
@@ -428,22 +747,22 @@ var TimeframeClock = class {
     return !gaps.isEmpty();
   }
   async waitUntilReached(target) {
-    (0, import_log3.log)("waitUntilReached", {
+    (0, import_log5.log)("waitUntilReached", {
       target,
       current: this._timeframe
     }, {
-      F: __dxlog_file3,
+      F: __dxlog_file5,
       L: 73,
       S: this,
       C: (f, a) => f(...a)
     });
     await this.update.waitForCondition(() => {
-      (0, import_log3.log)("check if reached", {
+      (0, import_log5.log)("check if reached", {
         target,
         current: this._timeframe,
         deps: import_timeframe.Timeframe.dependencies(target, this._timeframe)
       }, {
-        F: __dxlog_file3,
+        F: __dxlog_file5,
         L: 75,
         S: this,
         C: (f, a) => f(...a)
@@ -452,12 +771,12 @@ var TimeframeClock = class {
     });
   }
 };
-_ts_decorate2([
-  (0, import_debug.timed)(5e3)
+_ts_decorate3([
+  (0, import_debug3.timed)(5e3)
 ], TimeframeClock.prototype, "waitUntilReached", null);
 
 // packages/core/echo/echo-pipeline/src/pipeline/pipeline.ts
-function _ts_decorate3(decorators, target, key, desc) {
+function _ts_decorate4(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
     r = Reflect.decorate(decorators, target, key, desc);
@@ -467,15 +786,15 @@ function _ts_decorate3(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file4 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/pipeline/pipeline.ts";
+var __dxlog_file6 = "/mnt/ramdisk/work/packages/core/echo/echo-pipeline/src/pipeline/pipeline.ts";
 var PipelineState = class {
   // prettier-ignore
   constructor(_feeds, _timeframeClock) {
     this._feeds = _feeds;
     this._timeframeClock = _timeframeClock;
-    this._ctx = new import_context.Context();
+    this._ctx = new import_context3.Context();
     this.timeframeUpdate = this._timeframeClock.update;
-    this.stalled = new import_async3.Event();
+    this.stalled = new import_async4.Event();
     this._startTimeframe = new import_timeframe2.Timeframe();
   }
   /**
@@ -517,14 +836,14 @@ var PipelineState = class {
   *
   * @param timeout Timeout in milliseconds to specify the maximum wait time.
   */
-  async waitUntilReachedTargetTimeframe({ ctx = new import_context.Context(), timeout, breakOnStall = true } = {}) {
+  async waitUntilReachedTargetTimeframe({ ctx = new import_context3.Context(), timeout, breakOnStall = true } = {}) {
     var _a;
-    (0, import_log4.log)("waitUntilReachedTargetTimeframe", {
+    (0, import_log6.log)("waitUntilReachedTargetTimeframe", {
       timeout,
       current: this.timeframe,
       target: this.targetTimeframe
     }, {
-      F: __dxlog_file4,
+      F: __dxlog_file6,
       L: 126,
       S: this,
       C: (f, a) => f(...a)
@@ -540,22 +859,22 @@ var PipelineState = class {
     let done = false;
     if (timeout) {
       return Promise.race([
-        (0, import_context.rejectOnDispose)(ctx),
-        (0, import_context.rejectOnDispose)(this._ctx),
+        (0, import_context3.rejectOnDispose)(ctx),
+        (0, import_context3.rejectOnDispose)(this._ctx),
         this._reachedTargetPromise.then(() => {
           done = true;
         }),
-        (0, import_async3.sleep)(timeout).then(() => {
+        (0, import_async4.sleep)(timeout).then(() => {
           if (done) {
             return;
           }
-          import_log4.log.warn("waitUntilReachedTargetTimeframe timed out", {
+          import_log6.log.warn("waitUntilReachedTargetTimeframe timed out", {
             timeout,
             current: this.timeframe,
             target: this.targetTimeframe,
             dependencies: import_timeframe2.Timeframe.dependencies(this.targetTimeframe, this.timeframe)
           }, {
-            F: __dxlog_file4,
+            F: __dxlog_file6,
             L: 153,
             S: this,
             C: (f, a) => f(...a)
@@ -570,12 +889,12 @@ var PipelineState = class {
 var Pipeline = class {
   constructor() {
     this._timeframeClock = new TimeframeClock(new import_timeframe2.Timeframe());
-    this._feeds = new import_util2.ComplexMap(import_keys.PublicKey.hash);
+    this._feeds = new import_util4.ComplexMap(import_keys3.PublicKey.hash);
     // External state accessor.
     this._state = new PipelineState(this._feeds, this._timeframeClock);
     // Waits for the message consumer to process the message and yield control back to the pipeline.
-    this._processingTrigger = new import_async3.Trigger().wake();
-    this._pauseTrigger = new import_async3.Trigger().wake();
+    this._processingTrigger = new import_async4.Trigger().wake();
+    this._pauseTrigger = new import_async4.Trigger().wake();
     this._isStopping = false;
     this._isStarted = false;
     this._isOpen = false;
@@ -585,9 +904,12 @@ var Pipeline = class {
     return this._state;
   }
   get writer() {
-    (0, import_tiny_invariant4.default)(this._writer, "Writer not set.");
+    (0, import_tiny_invariant6.default)(this._writer, "Writer not set.");
     return this._writer;
   }
+  hasFeed(feedKey) {
+    return this._feeds.has(feedKey);
+  }
   getFeeds() {
     return this._feedSetIterator.feeds;
   }
@@ -600,39 +922,36 @@ var Pipeline = class {
     }
     this._setFeedDownloadState(feed);
   }
-  hasFeed(feedKey) {
-    return this._feeds.has(feedKey);
-  }
   setWriteFeed(feed) {
-    (0, import_tiny_invariant4.default)(!this._writer, "Writer already set.");
-    (0, import_tiny_invariant4.default)(feed.properties.writable, "Feed must be writable.");
+    (0, import_tiny_invariant6.default)(!this._writer, "Writer already set.");
+    (0, import_tiny_invariant6.default)(feed.properties.writable, "Feed must be writable.");
     this._writer = createMappedFeedWriter((payload) => ({
       timeframe: this._timeframeClock.timeframe,
       payload
     }), feed.createFeedWriter());
   }
   async start() {
-    (0, import_log4.log)("starting...", {}, {
-      F: __dxlog_file4,
-      L: 273,
+    (0, import_log6.log)("starting...", void 0, {
+      F: __dxlog_file6,
+      L: 268,
       S: this,
       C: (f, a) => f(...a)
     });
     await this._initIterator();
     await this._feedSetIterator.open();
-    (0, import_log4.log)("started", void 0, {
-      F: __dxlog_file4,
-      L: 276,
+    this._isStarted = true;
+    (0, import_log6.log)("started", void 0, {
+      F: __dxlog_file6,
+      L: 272,
       S: this,
       C: (f, a) => f(...a)
     });
-    this._isStarted = true;
   }
   async stop() {
     var _a;
-    (0, import_log4.log)("stopping...", {}, {
-      F: __dxlog_file4,
-      L: 282,
+    (0, import_log6.log)("stopping...", void 0, {
+      F: __dxlog_file6,
+      L: 277,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -640,21 +959,22 @@ var Pipeline = class {
     await ((_a = this._feedSetIterator) == null ? void 0 : _a.close());
     await this._processingTrigger.wait();
     await this._state._ctx.dispose();
-    this._state._ctx = new import_context.Context();
+    this._state._ctx = new import_context3.Context();
     this._state._reachedTargetPromise = void 0;
-    (0, import_log4.log)("stopped", void 0, {
-      F: __dxlog_file4,
-      L: 289,
+    this._isStarted = false;
+    (0, import_log6.log)("stopped", void 0, {
+      F: __dxlog_file6,
+      L: 285,
       S: this,
       C: (f, a) => f(...a)
     });
-    this._isStarted = false;
   }
   /**
-  * @param timeframe Timeframe of already processed messages. The pipeline will start processing messages AFTER this timeframe.
+  * @param timeframe Timeframe of already processed messages.
+  *  The pipeline will start processing messages AFTER this timeframe.
   */
   async setCursor(timeframe) {
-    (0, import_tiny_invariant4.default)(!this._isStarted || this._isPaused, "Invalid state.");
+    (0, import_tiny_invariant6.default)(!this._isStarted || this._isPaused, "Invalid state.");
     this._state._startTimeframe = timeframe;
     this._timeframeClock.setTimeframe(timeframe);
     for (const feed of this._feeds.values()) {
@@ -670,7 +990,7 @@ var Pipeline = class {
   * Calling pause while processing will cause a deadlock.
   */
   async pause() {
-    (0, import_tiny_invariant4.default)(this._isStarted, "Pipeline is not open.");
+    (0, import_tiny_invariant6.default)(this._isStarted, "Pipeline is not open.");
     if (this._isPaused) {
       return;
     }
@@ -679,8 +999,8 @@ var Pipeline = class {
     this._isPaused = true;
   }
   async unpause() {
-    (0, import_tiny_invariant4.default)(this._isStarted, "Pipeline is not open.");
-    (0, import_tiny_invariant4.default)(this._isPaused, "Pipeline is not paused.");
+    (0, import_tiny_invariant6.default)(this._isStarted, "Pipeline is not open.");
+    (0, import_tiny_invariant6.default)(this._isPaused, "Pipeline is not paused.");
     this._pauseTrigger.wake();
     this._isPaused = false;
   }
@@ -689,28 +1009,27 @@ var Pipeline = class {
   * Updates the timeframe clock after the message has bee processed.
   */
   async *consume() {
-    (0, import_tiny_invariant4.default)(!this._isOpen, "Pipeline is already being consumed.");
+    (0, import_tiny_invariant6.default)(!this._isOpen, "Pipeline is already being consumed.");
     this._isOpen = true;
-    (0, import_tiny_invariant4.default)(this._feedSetIterator, "Iterator not initialized.");
+    (0, import_tiny_invariant6.default)(this._feedSetIterator, "Iterator not initialized.");
     let lastFeedSetIterator = this._feedSetIterator;
     let iterable = lastFeedSetIterator[Symbol.asyncIterator]();
     while (!this._isStopping) {
       await this._pauseTrigger.wait();
       if (lastFeedSetIterator !== this._feedSetIterator) {
-        (0, import_tiny_invariant4.default)(this._feedSetIterator, "Iterator not initialized.");
+        (0, import_tiny_invariant6.default)(this._feedSetIterator, "Iterator not initialized.");
         lastFeedSetIterator = this._feedSetIterator;
         iterable = lastFeedSetIterator[Symbol.asyncIterator]();
       }
       const { done, value } = await iterable.next();
-      if (done) {
-        continue;
+      if (!done) {
+        const block = value != null ? value : (0, import_debug4.failUndefined)();
+        this._processingTrigger.reset();
+        this._timeframeClock.updatePendingTimeframe(import_keys3.PublicKey.from(block.feedKey), block.seq);
+        yield block;
+        this._processingTrigger.wake();
+        this._timeframeClock.updateTimeframe();
       }
-      const block = value != null ? value : (0, import_debug2.failUndefined)();
-      this._processingTrigger.reset();
-      this._timeframeClock.updatePendingTimeframe(import_keys.PublicKey.from(block.feedKey), block.seq);
-      yield block;
-      this._processingTrigger.wake();
-      this._timeframeClock.updateTimeframe();
     }
     this._isOpen = false;
   }
@@ -719,9 +1038,9 @@ var Pipeline = class {
     const timeframe = this._state._startTimeframe;
     const seq = (_a = timeframe.get(feed.key)) != null ? _a : 0;
     feed.undownload({
-      callback: () => (0, import_log4.log)("Undownloaded", void 0, {
-        F: __dxlog_file4,
-        L: 383,
+      callback: () => (0, import_log6.log)("undownload", void 0, {
+        F: __dxlog_file6,
+        L: 376,
         S: this,
         C: (f, a) => f(...a)
       })
@@ -730,11 +1049,11 @@ var Pipeline = class {
       start: seq + 1,
       linear: true
     }).catch((err) => {
-      (0, import_log4.log)("failed to download feed", {
+      (0, import_log6.log)("failed to download feed", {
         err
       }, {
-        F: __dxlog_file4,
-        L: 386,
+        F: __dxlog_file6,
+        L: 378,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -746,9 +1065,9 @@ var Pipeline = class {
       stallTimeout: 1e3
     });
     this._feedSetIterator.stalled.on((iterator) => {
-      import_log4.log.warn(`Stalled after ${iterator.options.stallTimeout}ms with ${iterator.size} feeds.`, void 0, {
-        F: __dxlog_file4,
-        L: 396,
+      import_log6.log.warn(`Stalled after ${iterator.options.stallTimeout}ms with ${iterator.size} feeds.`, void 0, {
+        F: __dxlog_file6,
+        L: 389,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -759,591 +1078,273 @@ var Pipeline = class {
     }
   }
 };
-_ts_decorate3([
-  import_async3.synchronized
+_ts_decorate4([
+  import_async4.synchronized
 ], Pipeline.prototype, "start", null);
-_ts_decorate3([
-  import_async3.synchronized
+_ts_decorate4([
+  import_async4.synchronized
 ], Pipeline.prototype, "stop", null);
-_ts_decorate3([
-  import_async3.synchronized
+_ts_decorate4([
+  import_async4.synchronized
 ], Pipeline.prototype, "setCursor", null);
-_ts_decorate3([
-  import_async3.synchronized
+_ts_decorate4([
+  import_async4.synchronized
 ], Pipeline.prototype, "pause", null);
-_ts_decorate3([
-  import_async3.synchronized
-], Pipeline.prototype, "unpause", null);
-
-// packages/core/echo/echo-pipeline/src/space/auth.ts
-var import_tiny_invariant5 = __toESM(require("tiny-invariant"));
-var import_async4 = require("@dxos/async");
-var import_context2 = require("@dxos/context");
-var import_crypto = require("@dxos/crypto");
-var import_log5 = require("@dxos/log");
-var import_protocols3 = require("@dxos/protocols");
-var import_teleport = require("@dxos/teleport");
-var __dxlog_file5 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/auth.ts";
-var AuthExtension = class extends import_teleport.RpcExtension {
-  constructor(_authParams) {
-    super({
-      requested: {
-        AuthService: import_protocols3.schema.getService("dxos.mesh.teleport.auth.AuthService")
-      },
-      exposed: {
-        AuthService: import_protocols3.schema.getService("dxos.mesh.teleport.auth.AuthService")
-      },
-      timeout: 60 * 1e3
-    });
-    this._authParams = _authParams;
-    this._ctx = new import_context2.Context({
-      onError: (err) => {
-        import_log5.log.catch(err, void 0, {
-          F: __dxlog_file5,
-          L: 29,
-          S: this,
-          C: (f, a) => f(...a)
-        });
-      }
-    });
-  }
-  async getHandlers() {
-    return {
-      AuthService: {
-        authenticate: async ({ challenge }) => {
-          try {
-            const credential = await this._authParams.provider(challenge);
-            if (!credential) {
-              throw new Error("auth rejected");
-            }
-            return {
-              credential
-            };
-          } catch (err) {
-            import_log5.log.error("failed to generate auth credentials", err, {
-              F: __dxlog_file5,
-              L: 56,
-              S: this,
-              C: (f, a) => f(...a)
-            });
-            throw new Error("auth rejected");
-          }
-        }
-      }
-    };
-  }
-  async onOpen(context) {
-    await super.onOpen(context);
-    (0, import_async4.scheduleTask)(this._ctx, async () => {
-      try {
-        const challenge = (0, import_crypto.randomBytes)(32);
-        const { credential } = await this.rpc.AuthService.authenticate({
-          challenge
-        });
-        (0, import_tiny_invariant5.default)((credential == null ? void 0 : credential.length) > 0, "invalid credential");
-        const success = await this._authParams.verifier(challenge, credential);
-        (0, import_tiny_invariant5.default)(success, "credential not verified");
-        (0, import_async4.runInContext)(this._ctx, () => this._authParams.onAuthSuccess());
-      } catch (err) {
-        (0, import_log5.log)("auth failed", err, {
-          F: __dxlog_file5,
-          L: 75,
-          S: this,
-          C: (f, a) => f(...a)
-        });
-        this.close();
-        this._authParams.onAuthFailure();
-      }
-    });
-  }
-  async onClose() {
-    await this._ctx.dispose();
-    await super.onClose();
-  }
-};
-
-// packages/core/echo/echo-pipeline/src/space/space.ts
-var import_tiny_invariant9 = __toESM(require("tiny-invariant"));
-var import_async7 = require("@dxos/async");
-var import_log10 = require("@dxos/log");
-var import_credentials4 = require("@dxos/protocols/proto/dxos/halo/credentials");
-var import_util6 = require("@dxos/util");
-
-// packages/core/echo/echo-pipeline/src/space/control-pipeline.ts
-var import_credentials = require("@dxos/credentials");
-var import_keys2 = require("@dxos/keys");
-var import_log6 = require("@dxos/log");
-var import_credentials2 = require("@dxos/protocols/proto/dxos/halo/credentials");
-var import_timeframe3 = require("@dxos/timeframe");
-var import_util3 = require("@dxos/util");
-var __dxlog_file6 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/control-pipeline.ts";
-var TIMEFRAME_SAVE_DEBOUNCE_INTERVAL = 500;
-var ControlPipeline = class {
-  constructor({ spaceKey, genesisFeed, feedProvider, metadataStore }) {
-    this._lastTimeframeSaveTime = Date.now();
-    this.onFeedAdmitted = new import_util3.Callback();
-    this._spaceKey = spaceKey;
-    this._metadata = metadataStore;
-    this._pipeline = new Pipeline();
-    void this._pipeline.addFeed(genesisFeed);
-    this._spaceStateMachine = new import_credentials.SpaceStateMachine(spaceKey);
-    this._spaceStateMachine.onFeedAdmitted.set(async (info) => {
-      (0, import_log6.log)("feed admitted", {
-        key: info.key
-      }, {
-        F: __dxlog_file6,
-        L: 51,
-        S: this,
-        C: (f, a) => f(...a)
-      });
-      if (info.assertion.designation === import_credentials2.AdmittedFeed.Designation.CONTROL && !info.key.equals(genesisFeed.key)) {
-        try {
-          const feed = await feedProvider(info.key);
-          await this._pipeline.addFeed(feed);
-        } catch (err) {
-          import_log6.log.catch(err, void 0, {
-            F: __dxlog_file6,
-            L: 59,
-            S: this,
-            C: (f, a) => f(...a)
-          });
-        }
-      }
-      await this.onFeedAdmitted.callIfSet(info);
-    });
-    this.onMemberAdmitted = this._spaceStateMachine.onMemberAdmitted;
-    this.onCredentialProcessed = this._spaceStateMachine.onCredentialProcessed;
-  }
-  get spaceState() {
-    return this._spaceStateMachine;
-  }
-  get pipeline() {
-    return this._pipeline;
-  }
-  setWriteFeed(feed) {
-    this._pipeline.setWriteFeed(feed);
-  }
-  async start() {
-    (0, import_log6.log)("starting...", void 0, {
-      F: __dxlog_file6,
-      L: 83,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    setTimeout(async () => {
-      for await (const msg of this._pipeline.consume()) {
-        try {
-          (0, import_log6.log)("processing", {
-            key: msg.feedKey,
-            seq: msg.seq
-          }, {
-            F: __dxlog_file6,
-            L: 88,
-            S: this,
-            C: (f, a) => f(...a)
-          });
-          if (msg.data.payload.credential) {
-            const result = await this._spaceStateMachine.process(msg.data.payload.credential.credential, import_keys2.PublicKey.from(msg.feedKey));
-            if (!result) {
-              import_log6.log.warn("processing failed", {
-                msg
-              }, {
-                F: __dxlog_file6,
-                L: 95,
-                S: this,
-                C: (f, a) => f(...a)
-              });
-            } else {
-              await this._noteTargetStateIfNeeded(this._pipeline.state.pendingTimeframe);
-            }
-          }
-        } catch (err) {
-          import_log6.log.catch(err, void 0, {
-            F: __dxlog_file6,
-            L: 101,
-            S: this,
-            C: (f, a) => f(...a)
-          });
-        }
-      }
-    });
-    await this._pipeline.start();
-    (0, import_log6.log)("started", void 0, {
-      F: __dxlog_file6,
-      L: 107,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-  }
-  async _noteTargetStateIfNeeded(timeframe) {
-    if (Date.now() - this._lastTimeframeSaveTime > TIMEFRAME_SAVE_DEBOUNCE_INTERVAL) {
-      this._lastTimeframeSaveTime = Date.now();
-      await this._saveTargetTimeframe(timeframe);
-    }
-  }
-  async stop() {
-    (0, import_log6.log)("stopping...", void 0, {
-      F: __dxlog_file6,
-      L: 121,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    await this._pipeline.stop();
-    await this._saveTargetTimeframe(this._pipeline.state.timeframe);
-    (0, import_log6.log)("stopped", void 0, {
-      F: __dxlog_file6,
-      L: 124,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-  }
-  async _saveTargetTimeframe(timeframe) {
-    var _a;
-    try {
-      const newTimeframe = import_timeframe3.Timeframe.merge((_a = this._targetTimeframe) != null ? _a : new import_timeframe3.Timeframe(), timeframe);
-      await this._metadata.setSpaceControlLatestTimeframe(this._spaceKey, newTimeframe);
-      this._targetTimeframe = newTimeframe;
-    } catch (err) {
-      (0, import_log6.log)(err, void 0, {
-        F: __dxlog_file6,
-        L: 133,
-        S: this,
-        C: (f, a) => f(...a)
-      });
-    }
-  }
-};
-
-// packages/core/echo/echo-pipeline/src/space/data-pipeline.ts
-var import_tiny_invariant8 = __toESM(require("tiny-invariant"));
-var import_async6 = require("@dxos/async");
-var import_context5 = require("@dxos/context");
-var import_credentials3 = require("@dxos/credentials");
-var import_echo_db3 = require("@dxos/echo-db");
-var import_errors2 = require("@dxos/errors");
-var import_log9 = require("@dxos/log");
-var import_timeframe4 = require("@dxos/timeframe");
-
-// packages/core/echo/echo-pipeline/src/dbhost/data-service-host.ts
-var import_tiny_invariant6 = __toESM(require("tiny-invariant"));
-var import_codec_protobuf = require("@dxos/codec-protobuf");
-var import_context3 = require("@dxos/context");
-var import_echo_db = require("@dxos/echo-db");
-var import_log7 = require("@dxos/log");
-var import_util4 = require("@dxos/util");
-var __dxlog_file7 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/dbhost/data-service-host.ts";
-var DataServiceHost = class {
-  constructor(_itemManager, _itemDemuxer, _writeStream) {
-    this._itemManager = _itemManager;
-    this._itemDemuxer = _itemDemuxer;
-    this._writeStream = _writeStream;
-    this._ctx = new import_context3.Context();
-    this._clientTagMap = new import_util4.ComplexMap(([feedKey, seq]) => `${feedKey.toHex()}:${seq}`);
-  }
-  async open() {
-  }
-  async close() {
-    await this._ctx.dispose();
-  }
-  /**
-  * Real-time subscription to data objects in a space.
-  */
-  subscribe() {
-    return new import_codec_protobuf.Stream(({ next, close, ctx }) => {
-      ctx.onDispose(this._ctx.onDispose(close));
-      const objects = Array.from(this._itemManager.entities.values()).map((entity) => entity.createSnapshot());
-      next({
-        batch: {
-          objects
-        }
-      });
-      this._itemDemuxer.mutation.on(ctx, (message) => {
-        var _a;
-        const { batch, meta } = message;
-        (0, import_tiny_invariant6.default)(!meta.clientTag, "Unexpected client tag in mutation message");
-        (0, import_log7.log)("message", {
-          batch,
-          meta
-        }, {
-          F: __dxlog_file7,
-          L: 63,
-          S: this,
-          C: (f, a) => f(...a)
-        });
-        const clientTag = this._clientTagMap.get([
-          message.meta.feedKey,
-          message.meta.seq
-        ]);
-        (_a = batch.objects) == null ? void 0 : _a.forEach((object) => {
-          (0, import_echo_db.setMetadataOnObject)(object, {
-            ...meta
-          });
-        });
-        if (clientTag) {
-          (0, import_echo_db.tagMutationsInBatch)(batch, clientTag, 0);
-        }
-        next({
-          clientTag,
-          feedKey: message.meta.feedKey,
-          seq: message.meta.seq,
-          batch
-        });
-      });
-    });
-  }
-  async write(request) {
-    var _a, _b;
-    (0, import_tiny_invariant6.default)(!this._ctx.disposed, "Cannot write to closed DataServiceHost");
-    (0, import_tiny_invariant6.default)(this._writeStream, "Cannot write mutations in readonly mode");
-    (0, import_log7.log)("write", {
-      clientTag: request.clientTag,
-      objectCount: (_b = (_a = request.batch.objects) == null ? void 0 : _a.length) != null ? _b : 0
-    }, {
-      F: __dxlog_file7,
-      L: 92,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    const message = createDataMessage(request.batch);
-    const receipt = await this._writeStream.write(message, {
-      afterWrite: async (receipt2) => {
-        if (request.clientTag) {
-          (0, import_log7.log)("tag", {
-            clientTag: request.clientTag,
-            feedKey: receipt2.feedKey,
-            seq: receipt2.seq
-          }, {
-            F: __dxlog_file7,
-            L: 101,
-            S: this,
-            C: (f, a) => f(...a)
-          });
-          this._clientTagMap.set([
-            receipt2.feedKey,
-            receipt2.seq
-          ], request.clientTag);
-        }
-      }
-    });
-    return receipt;
-  }
-};
-var createDataMessage = (batch) => {
-  var _a;
-  return {
-    batch: {
-      objects: (_a = batch.objects) == null ? void 0 : _a.map((object) => {
-        var _a2;
-        return {
-          ...object,
-          mutations: (_a2 = object.mutations) == null ? void 0 : _a2.map((mutation) => ({
-            ...mutation,
-            meta: void 0
-          })),
-          meta: void 0
-        };
-      })
-    }
-  };
-};
-
-// packages/core/echo/echo-pipeline/src/dbhost/database-host.ts
-var import_echo_db2 = require("@dxos/echo-db");
-var DatabaseHost = class {
-  constructor(_outboundStream) {
-    this._outboundStream = _outboundStream;
-  }
-  get isReadOnly() {
-    return !!this._outboundStream;
-  }
-  get echoProcessor() {
-    return this._echoProcessor;
-  }
-  async open(itemManager, modelFactory) {
-    this._itemManager = itemManager;
-    this._itemManager._debugLabel = "host";
-    this._itemDemuxer = new import_echo_db2.ItemDemuxer(itemManager, modelFactory);
-    this._echoProcessor = this._itemDemuxer.open();
-  }
-  async close() {
-  }
-  getWriteStream() {
-    return this._outboundStream;
-  }
-  createSnapshot() {
-    return this._itemDemuxer.createSnapshot();
-  }
-  createDataServiceHost() {
-    var _a;
-    return new DataServiceHost(this._itemManager, this._itemDemuxer, (_a = this._outboundStream) != null ? _a : void 0);
-  }
-};
-
-// packages/core/echo/echo-pipeline/src/dbhost/snapshot-manager.ts
-var import_async5 = require("@dxos/async");
-var import_context4 = require("@dxos/context");
-var import_debug3 = require("@dxos/debug");
-var import_keys3 = require("@dxos/keys");
-var import_protocols4 = require("@dxos/protocols");
-var import_blob = require("@dxos/protocols/proto/dxos/echo/blob");
-function _ts_decorate4(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
-    r = Reflect.decorate(decorators, target, key, desc);
-  else
-    for (var i = decorators.length - 1; i >= 0; i--)
-      if (d = decorators[i])
-        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-var SpaceSnapshot = import_protocols4.schema.getCodecForType("dxos.echo.snapshot.SpaceSnapshot");
-var SnapshotManager = class SnapshotManager2 {
-  // prettier-ignore
-  constructor(_snapshotStore, _blobStore, _blobSync) {
-    this._snapshotStore = _snapshotStore;
-    this._blobStore = _blobStore;
-    this._blobSync = _blobSync;
-  }
-  async _getBlob(blobId) {
-    const blob = await this._blobStore.get(blobId);
-    return SpaceSnapshot.decode(blob);
-  }
-  async load(ctx, id) {
-    const blobId = import_keys3.PublicKey.fromHex(id).asUint8Array();
-    const blobMeta = await this._blobStore.getMeta(blobId);
-    if (blobMeta && blobMeta.state === import_blob.BlobMeta.State.FULLY_PRESENT) {
-      return this._getBlob(blobId);
-    }
-    const fallbackStore = await (0, import_context4.cancelWithContext)(ctx, this._snapshotStore.loadSnapshot(id));
-    if (fallbackStore) {
-      return fallbackStore;
-    }
-    await this._blobSync.download(ctx, blobId);
-    return this._getBlob(blobId);
-  }
-  async store(snapshot) {
-    const { id } = await this._blobStore.set(SpaceSnapshot.encode(snapshot));
-    await this._blobSync.notifyBlobAdded(id);
-    return import_keys3.PublicKey.from(id).toHex();
-  }
-};
 _ts_decorate4([
-  (0, import_debug3.timed)(1e4)
-], SnapshotManager.prototype, "load", null);
-SnapshotManager = _ts_decorate4([
-  (0, import_async5.trackLeaks)("open", "close")
-], SnapshotManager);
+  import_async4.synchronized
+], Pipeline.prototype, "unpause", null);
 
-// packages/core/echo/echo-pipeline/src/dbhost/snapshot-store.ts
+// packages/core/echo/echo-pipeline/src/space/auth.ts
+var import_tiny_invariant7 = __toESM(require("tiny-invariant"));
+var import_async5 = require("@dxos/async");
+var import_context4 = require("@dxos/context");
 var import_crypto2 = require("@dxos/crypto");
+var import_log7 = require("@dxos/log");
 var import_protocols5 = require("@dxos/protocols");
-var SpaceSnapshot2 = import_protocols5.schema.getCodecForType("dxos.echo.snapshot.SpaceSnapshot");
-var SnapshotStore = class {
-  // prettier-ignore
-  constructor(_directory) {
-    this._directory = _directory;
+var import_teleport = require("@dxos/teleport");
+var __dxlog_file7 = "/mnt/ramdisk/work/packages/core/echo/echo-pipeline/src/space/auth.ts";
+var AuthExtension = class extends import_teleport.RpcExtension {
+  constructor(_authParams) {
+    super({
+      requested: {
+        AuthService: import_protocols5.schema.getService("dxos.mesh.teleport.auth.AuthService")
+      },
+      exposed: {
+        AuthService: import_protocols5.schema.getService("dxos.mesh.teleport.auth.AuthService")
+      },
+      timeout: 60 * 1e3
+    });
+    this._authParams = _authParams;
+    this._ctx = new import_context4.Context({
+      onError: (err) => {
+        import_log7.log.catch(err, void 0, {
+          F: __dxlog_file7,
+          L: 29,
+          S: this,
+          C: (f, a) => f(...a)
+        });
+      }
+    });
   }
-  async saveSnapshot(snapshot) {
-    const encoded = SpaceSnapshot2.encode(snapshot);
-    const key = await import_crypto2.subtleCrypto.digest("SHA-256", encoded);
-    const keyString = Buffer.from(key).toString("hex");
-    const file = await this._directory.getOrCreateFile(keyString);
-    try {
-      await file.write(0, Buffer.from(encoded));
-    } finally {
-      await file.close();
-    }
-    return keyString;
+  async getHandlers() {
+    return {
+      AuthService: {
+        authenticate: async ({ challenge }) => {
+          try {
+            const credential = await this._authParams.provider(challenge);
+            if (!credential) {
+              throw new Error("auth rejected");
+            }
+            return {
+              credential
+            };
+          } catch (err) {
+            import_log7.log.error("failed to generate auth credentials", err, {
+              F: __dxlog_file7,
+              L: 56,
+              S: this,
+              C: (f, a) => f(...a)
+            });
+            throw new Error("auth rejected");
+          }
+        }
+      }
+    };
   }
-  async loadSnapshot(key) {
-    const file = await this._directory.getOrCreateFile(key);
-    try {
-      const { size } = await file.stat();
-      if (size === 0) {
-        return void 0;
+  async onOpen(context) {
+    await super.onOpen(context);
+    (0, import_async5.scheduleTask)(this._ctx, async () => {
+      try {
+        const challenge = (0, import_crypto2.randomBytes)(32);
+        const { credential } = await this.rpc.AuthService.authenticate({
+          challenge
+        });
+        (0, import_tiny_invariant7.default)((credential == null ? void 0 : credential.length) > 0, "invalid credential");
+        const success = await this._authParams.verifier(challenge, credential);
+        (0, import_tiny_invariant7.default)(success, "credential not verified");
+        (0, import_async5.runInContext)(this._ctx, () => this._authParams.onAuthSuccess());
+      } catch (err) {
+        (0, import_log7.log)("auth failed", err, {
+          F: __dxlog_file7,
+          L: 75,
+          S: this,
+          C: (f, a) => f(...a)
+        });
+        this.close();
+        this._authParams.onAuthFailure();
       }
-      const buffer = await file.read(0, size);
-      return SpaceSnapshot2.decode(buffer);
-    } finally {
-      await file.close();
-    }
+    });
   }
-  async listSnapshots() {
-    const entries = await this._directory.list();
-    return await Promise.all(entries.map(async (key) => {
-      const { size } = await this._directory.getOrCreateFile(key).stat();
-      return {
-        key,
-        size
-      };
-    }));
+  async onClose() {
+    await this._ctx.dispose();
+    await super.onClose();
   }
 };
 
-// packages/core/echo/echo-pipeline/src/dbhost/data-service.ts
-var import_tiny_invariant7 = __toESM(require("tiny-invariant"));
-var import_debug4 = require("@dxos/debug");
+// packages/core/echo/echo-pipeline/src/space/space.ts
+var import_tiny_invariant9 = __toESM(require("tiny-invariant"));
+var import_async7 = require("@dxos/async");
+var import_log10 = require("@dxos/log");
+var import_credentials4 = require("@dxos/protocols/proto/dxos/halo/credentials");
+var import_util7 = require("@dxos/util");
+
+// packages/core/echo/echo-pipeline/src/space/control-pipeline.ts
+var import_credentials = require("@dxos/credentials");
 var import_keys4 = require("@dxos/keys");
 var import_log8 = require("@dxos/log");
+var import_credentials2 = require("@dxos/protocols/proto/dxos/halo/credentials");
+var import_timeframe3 = require("@dxos/timeframe");
 var import_util5 = require("@dxos/util");
-var __dxlog_file8 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/dbhost/data-service.ts";
-var DataServiceSubscriptions = class {
-  constructor() {
-    this._spaces = new import_util5.ComplexMap(import_keys4.PublicKey.hash);
+var __dxlog_file8 = "/mnt/ramdisk/work/packages/core/echo/echo-pipeline/src/space/control-pipeline.ts";
+var TIMEFRAME_SAVE_DEBOUNCE_INTERVAL = 500;
+var ControlPipeline = class {
+  constructor({ spaceKey, genesisFeed, feedProvider, metadataStore }) {
+    this._lastTimeframeSaveTime = Date.now();
+    this.onFeedAdmitted = new import_util5.Callback();
+    this._spaceKey = spaceKey;
+    this._metadata = metadataStore;
+    this._pipeline = new Pipeline();
+    void this._pipeline.addFeed(genesisFeed);
+    this._spaceStateMachine = new import_credentials.SpaceStateMachine(spaceKey);
+    this._spaceStateMachine.onFeedAdmitted.set(async (info) => {
+      (0, import_log8.log)("feed admitted", {
+        key: info.key
+      }, {
+        F: __dxlog_file8,
+        L: 51,
+        S: this,
+        C: (f, a) => f(...a)
+      });
+      if (info.assertion.designation === import_credentials2.AdmittedFeed.Designation.CONTROL && !info.key.equals(genesisFeed.key)) {
+        try {
+          const feed = await feedProvider(info.key);
+          await this._pipeline.addFeed(feed);
+        } catch (err) {
+          import_log8.log.catch(err, void 0, {
+            F: __dxlog_file8,
+            L: 59,
+            S: this,
+            C: (f, a) => f(...a)
+          });
+        }
+      }
+      await this.onFeedAdmitted.callIfSet(info);
+    });
+    this.onMemberAdmitted = this._spaceStateMachine.onMemberAdmitted;
+    this.onCredentialProcessed = this._spaceStateMachine.onCredentialProcessed;
   }
-  clear() {
-    this._spaces.clear();
+  get spaceState() {
+    return this._spaceStateMachine;
   }
-  async registerSpace(spaceKey, host) {
-    (0, import_log8.log)("Registering space", {
-      spaceKey
-    }, {
+  get pipeline() {
+    return this._pipeline;
+  }
+  setWriteFeed(feed) {
+    this._pipeline.setWriteFeed(feed);
+  }
+  async start() {
+    (0, import_log8.log)("starting...", void 0, {
       F: __dxlog_file8,
-      L: 31,
+      L: 83,
       S: this,
       C: (f, a) => f(...a)
     });
-    (0, import_tiny_invariant7.default)(!this._spaces.has(spaceKey));
-    await host.open();
-    this._spaces.set(spaceKey, host);
-  }
-  async unregisterSpace(spaceKey) {
-    (0, import_log8.log)("Unregistering space", {
-      spaceKey
-    }, {
+    setTimeout(async () => {
+      for await (const msg of this._pipeline.consume()) {
+        try {
+          (0, import_log8.log)("processing", {
+            key: msg.feedKey,
+            seq: msg.seq
+          }, {
+            F: __dxlog_file8,
+            L: 88,
+            S: this,
+            C: (f, a) => f(...a)
+          });
+          if (msg.data.payload.credential) {
+            const timer = import_util5.tracer.mark("dxos.echo.pipeline.control");
+            const result = await this._spaceStateMachine.process(msg.data.payload.credential.credential, import_keys4.PublicKey.from(msg.feedKey));
+            timer.end();
+            if (!result) {
+              import_log8.log.warn("processing failed", {
+                msg
+              }, {
+                F: __dxlog_file8,
+                L: 98,
+                S: this,
+                C: (f, a) => f(...a)
+              });
+            } else {
+              await this._noteTargetStateIfNeeded(this._pipeline.state.pendingTimeframe);
+            }
+          }
+        } catch (err) {
+          import_log8.log.catch(err, void 0, {
+            F: __dxlog_file8,
+            L: 104,
+            S: this,
+            C: (f, a) => f(...a)
+          });
+        }
+      }
+    });
+    await this._pipeline.start();
+    (0, import_log8.log)("started", void 0, {
       F: __dxlog_file8,
-      L: 38,
+      L: 110,
       S: this,
       C: (f, a) => f(...a)
     });
-    const host = this._spaces.get(spaceKey);
-    await (host == null ? void 0 : host.close());
-    this._spaces.delete(spaceKey);
-  }
-  getDataService(spaceKey) {
-    return this._spaces.get(spaceKey);
   }
-};
-var DataServiceImpl = class {
-  constructor(_subscriptions) {
-    this._subscriptions = _subscriptions;
+  async _noteTargetStateIfNeeded(timeframe) {
+    if (Date.now() - this._lastTimeframeSaveTime > TIMEFRAME_SAVE_DEBOUNCE_INTERVAL) {
+      this._lastTimeframeSaveTime = Date.now();
+      await this._saveTargetTimeframe(timeframe);
+    }
   }
-  subscribe(request) {
-    var _a;
-    (0, import_tiny_invariant7.default)(request.spaceKey);
-    const host = (_a = this._subscriptions.getDataService(request.spaceKey)) != null ? _a : (0, import_debug4.raise)(new Error(`space not found: ${request.spaceKey}`));
-    return host.subscribe();
+  async stop() {
+    (0, import_log8.log)("stopping...", void 0, {
+      F: __dxlog_file8,
+      L: 124,
+      S: this,
+      C: (f, a) => f(...a)
+    });
+    await this._pipeline.stop();
+    await this._saveTargetTimeframe(this._pipeline.state.timeframe);
+    (0, import_log8.log)("stopped", void 0, {
+      F: __dxlog_file8,
+      L: 127,
+      S: this,
+      C: (f, a) => f(...a)
+    });
   }
-  write(request) {
+  async _saveTargetTimeframe(timeframe) {
     var _a;
-    (0, import_tiny_invariant7.default)(request.spaceKey);
-    (0, import_tiny_invariant7.default)(request.batch);
-    const host = (_a = this._subscriptions.getDataService(request.spaceKey)) != null ? _a : (0, import_debug4.raise)(new Error(`space not found: ${request.spaceKey}`));
-    return host.write(request);
+    try {
+      const newTimeframe = import_timeframe3.Timeframe.merge((_a = this._targetTimeframe) != null ? _a : new import_timeframe3.Timeframe(), timeframe);
+      await this._metadata.setSpaceControlLatestTimeframe(this._spaceKey, newTimeframe);
+      this._targetTimeframe = newTimeframe;
+    } catch (err) {
+      (0, import_log8.log)(err, void 0, {
+        F: __dxlog_file8,
+        L: 136,
+        S: this,
+        C: (f, a) => f(...a)
+      });
+    }
   }
 };
 
 // packages/core/echo/echo-pipeline/src/space/data-pipeline.ts
+var import_tiny_invariant8 = __toESM(require("tiny-invariant"));
+var import_async6 = require("@dxos/async");
+var import_context5 = require("@dxos/context");
+var import_credentials3 = require("@dxos/credentials");
+var import_echo_db3 = require("@dxos/echo-db");
+var import_errors2 = require("@dxos/errors");
+var import_log9 = require("@dxos/log");
+var import_timeframe4 = require("@dxos/timeframe");
+var import_util6 = require("@dxos/util");
 function _ts_decorate5(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
@@ -1354,7 +1355,7 @@ function _ts_decorate5(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file9 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/data-pipeline.ts";
+var __dxlog_file9 = "/mnt/ramdisk/work/packages/core/echo/echo-pipeline/src/space/data-pipeline.ts";
 var MESSAGES_PER_SNAPSHOT = 10;
 var AUTOMATIC_SNAPSHOT_DEBOUNCE_INTERVAL = 5e3;
 var TIMEFRAME_SAVE_DEBOUNCE_INTERVAL2 = 500;
@@ -1368,9 +1369,9 @@ var DataPipeline = class DataPipeline2 {
     this._isOpen = false;
     this._lastTimeframeSaveTime = 0;
     this._lastSnapshotSaveTime = 0;
+    this._lastProcessedEpoch = -1;
     this.currentEpoch = void 0;
     this.appliedEpoch = void 0;
-    this._lastProcessedEpoch = -1;
     this.onNewEpoch = new import_async6.Event();
   }
   get isOpen() {
@@ -1485,7 +1486,7 @@ var DataPipeline = class DataPipeline2 {
         if (data.payload.data) {
           const feedInfo = this._params.feedInfoProvider(feedKey);
           if (!feedInfo) {
-            import_log9.log.error("Could not find feed.", {
+            import_log9.log.warn("Could not find feed", {
               feedKey
             }, {
               F: __dxlog_file9,
@@ -1495,7 +1496,8 @@ var DataPipeline = class DataPipeline2 {
             });
             continue;
           }
-          await this.databaseHost.echoProcessor({
+          const timer = import_util6.tracer.mark("dxos.echo.pipeline.data");
+          this.databaseHost.echoProcessor({
             batch: data.payload.data.batch,
             meta: {
               feedKey,
@@ -1504,13 +1506,14 @@ var DataPipeline = class DataPipeline2 {
               memberKey: feedInfo.assertion.identityKey
             }
           });
+          timer.end();
           import_log9.log.trace("dxos.echo.data-pipeline.processed", {
             feedKey: feedKey.toHex(),
             seq,
             spaceKey: this._params.spaceKey.toHex()
           }, {
             F: __dxlog_file9,
-            L: 230,
+            L: 233,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1519,7 +1522,7 @@ var DataPipeline = class DataPipeline2 {
       } catch (err) {
         import_log9.log.catch(err, void 0, {
           F: __dxlog_file9,
-          L: 240,
+          L: 243,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -1554,7 +1557,7 @@ var DataPipeline = class DataPipeline2 {
     } catch (err) {
       import_log9.log.warn("Failed to cache properties", err, {
         F: __dxlog_file9,
-        L: 275,
+        L: 278,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -1581,14 +1584,14 @@ var DataPipeline = class DataPipeline2 {
         if (err instanceof import_errors2.CancelledError) {
           (0, import_log9.log)("Epoch processing cancelled.", void 0, {
             F: __dxlog_file9,
-            L: 307,
+            L: 310,
             S: this,
             C: (f, a) => f(...a)
           });
         } else {
           import_log9.log.catch(err, void 0, {
             F: __dxlog_file9,
-            L: 309,
+            L: 312,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1604,7 +1607,7 @@ var DataPipeline = class DataPipeline2 {
         epoch
       }, {
         F: __dxlog_file9,
-        L: 319,
+        L: 322,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -1621,7 +1624,7 @@ var DataPipeline = class DataPipeline2 {
       epoch
     }, {
       F: __dxlog_file9,
-      L: 333,
+      L: 336,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -1631,7 +1634,7 @@ var DataPipeline = class DataPipeline2 {
     }
     (0, import_log9.log)("restarting pipeline for epoch", void 0, {
       F: __dxlog_file9,
-      L: 341,
+      L: 344,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -1689,11 +1692,11 @@ function _ts_decorate6(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file10 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/space.ts";
+var __dxlog_file10 = "/mnt/ramdisk/work/packages/core/echo/echo-pipeline/src/space/space.ts";
 var Space = class Space2 {
   constructor(params) {
     this._addFeedLock = new import_async7.Lock();
-    this.onCredentialProcessed = new import_util6.Callback();
+    this.onCredentialProcessed = new import_util7.Callback();
     this.stateUpdate = new import_async7.Event();
     this._isOpen = false;
     (0, import_tiny_invariant9.default)(params.spaceKey && params.feedProvider);
@@ -1899,7 +1902,7 @@ var import_debug5 = require("@dxos/debug");
 var import_keys6 = require("@dxos/keys");
 var import_log12 = require("@dxos/log");
 var import_protocols6 = require("@dxos/protocols");
-var import_util8 = require("@dxos/util");
+var import_util9 = require("@dxos/util");
 
 // packages/core/echo/echo-pipeline/src/space/space-protocol.ts
 var import_crypto3 = require("@dxos/crypto");
@@ -1909,7 +1912,7 @@ var import_network_manager = require("@dxos/network-manager");
 var import_teleport2 = require("@dxos/teleport");
 var import_teleport_extension_object_sync = require("@dxos/teleport-extension-object-sync");
 var import_teleport_extension_replicator = require("@dxos/teleport-extension-replicator");
-var import_util7 = require("@dxos/util");
+var import_util8 = require("@dxos/util");
 function _ts_decorate7(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
@@ -1920,13 +1923,13 @@ function _ts_decorate7(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file11 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/space-protocol.ts";
+var __dxlog_file11 = "/mnt/ramdisk/work/packages/core/echo/echo-pipeline/src/space/space-protocol.ts";
 var MOCK_AUTH_PROVIDER = async (nonce) => Buffer.from("mock");
 var MOCK_AUTH_VERIFIER = async (nonce, credential) => true;
 var SpaceProtocol = class {
   constructor({ topic, swarmIdentity, networkManager, onSessionAuth, onAuthFailure, blobStore }) {
     this._feeds = /* @__PURE__ */ new Set();
-    this._sessions = new import_util7.ComplexMap(import_keys5.PublicKey.hash);
+    this._sessions = new import_util8.ComplexMap(import_keys5.PublicKey.hash);
     this._networkManager = networkManager;
     this._swarmIdentity = swarmIdentity;
     this._onSessionAuth = onSessionAuth;
@@ -1951,7 +1954,7 @@ var SpaceProtocol = class {
       key: feed.key
     }, {
       F: __dxlog_file11,
-      L: 96,
+      L: 95,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -1973,7 +1976,7 @@ var SpaceProtocol = class {
     await this.blobSync.open();
     (0, import_log11.log)("starting...", void 0, {
       F: __dxlog_file11,
-      L: 121,
+      L: 120,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -1986,7 +1989,7 @@ var SpaceProtocol = class {
     });
     (0, import_log11.log)("started", void 0, {
       F: __dxlog_file11,
-      L: 130,
+      L: 129,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -1996,14 +1999,14 @@ var SpaceProtocol = class {
     if (this._connection) {
       (0, import_log11.log)("stopping...", void 0, {
         F: __dxlog_file11,
-        L: 137,
+        L: 136,
         S: this,
         C: (f, a) => f(...a)
       });
       await this._connection.close();
       (0, import_log11.log)("stopped", void 0, {
         F: __dxlog_file11,
-        L: 139,
+        L: 138,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -2071,7 +2074,7 @@ var SpaceProtocolSession = class {
         var _a;
         (0, import_log11.log)("Peer authenticated", void 0, {
           F: __dxlog_file11,
-          L: 236,
+          L: 235,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -2109,10 +2112,10 @@ function _ts_decorate8(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file12 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/space-manager.ts";
+var __dxlog_file12 = "/mnt/ramdisk/work/packages/core/echo/echo-pipeline/src/space/space-manager.ts";
 var SpaceManager = class SpaceManager2 {
   constructor({ feedStore, networkManager, modelFactory, metadataStore, snapshotStore, blobStore }) {
-    this._spaces = new import_util8.ComplexMap(import_keys6.PublicKey.hash);
+    this._spaces = new import_util9.ComplexMap(import_keys6.PublicKey.hash);
     this._instanceId = import_keys6.PublicKey.random().toHex();
     this._feedStore = feedStore;
     this._networkManager = networkManager;