@dxos/echo-pipeline 0.3.11-main.4feb9c9 → 0.3.11-main.5052d1a

package/dist/lib/browser/{chunk-EM4RCBYQ.mjs → chunk-PB5T4DLC.mjs}

@@ -1481,7 +1481,7 @@ var __dxlog_file9 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipelin
 var MESSAGES_PER_SNAPSHOT = 10;
 var AUTOMATIC_SNAPSHOT_DEBOUNCE_INTERVAL = 5e3;
 var TIMEFRAME_SAVE_DEBOUNCE_INTERVAL = 5e3;
-var DataPipeline = class DataPipeline2 {
+var DataPipeline = class {
   constructor(_params) {
     this._params = _params;
     this._ctx = new Context4();
@@ -1955,7 +1955,7 @@ var __dxlog_file10 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeli
 var TIMEFRAME_SAVE_DEBOUNCE_INTERVAL2 = 500;
 var CONTROL_PIPELINE_SNAPSHOT_DELAY = 1e4;
 var USE_SNAPSHOTS = true;
-var ControlPipeline = class ControlPipeline2 {
+var ControlPipeline = class {
   constructor({ spaceKey, genesisFeed, feedProvider, metadataStore }) {
     this._ctx = new Context5();
     this._lastTimeframeSaveTime = Date.now();
@@ -2201,7 +2201,7 @@ function _ts_decorate6(decorators, target, key, desc) {
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
 var __dxlog_file11 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/space.ts";
-var Space = class Space2 {
+var Space = class {
   constructor(params) {
     this._addFeedLock = new Lock();
     this.onCredentialProcessed = new Callback2();
@@ -2585,7 +2585,7 @@ var SpaceProtocolSession = class {
     this.replicator = new ReplicatorExtension().setOptions({
       upload: true
     });
-    this._authStatus = AuthStatus.INITIAL;
+    this._authStatus = "INITIAL";
     this._wireParams = wireParams;
     this._swarmIdentity = swarmIdentity;
     this._onSessionAuth = onSessionAuth;
@@ -2614,11 +2614,11 @@ var SpaceProtocolSession = class {
           S: this,
           C: (f, a) => f(...a)
         });
-        this._authStatus = AuthStatus.SUCCESS;
+        this._authStatus = "SUCCESS";
         this._onSessionAuth?.(this._teleport);
       },
       onAuthFailure: () => {
-        this._authStatus = AuthStatus.FAILURE;
+        this._authStatus = "FAILURE";
         this._onAuthFailure?.(this._teleport);
       }
     }));
@@ -2663,7 +2663,7 @@ function _ts_decorate8(decorators, target, key, desc) {
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
 var __dxlog_file13 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/space-manager.ts";
-var SpaceManager = class SpaceManager2 {
+var SpaceManager = class {
   constructor({ feedStore, networkManager, modelFactory, metadataStore, snapshotStore, blobStore }) {
     this._spaces = new ComplexMap6(PublicKey7.hash);
     this._instanceId = PublicKey7.random().toHex();
@@ -2685,7 +2685,7 @@ var SpaceManager = class SpaceManager2 {
       ...this._spaces.values()
     ].map((space) => space.close()));
   }
-  async constructSpace({ metadata, swarmIdentity, onNetworkConnection, onAuthFailure, memberKey }) {
+  async constructSpace({ metadata, swarmIdentity, onAuthorizedConnection, onAuthFailure, memberKey }) {
     log12.trace("dxos.echo.space-manager.construct-space", trace4.begin({
       id: this._instanceId
     }), {
@@ -2708,7 +2708,7 @@ var SpaceManager = class SpaceManager2 {
       topic: spaceKey,
       swarmIdentity,
       networkManager: this._networkManager,
-      onSessionAuth: onNetworkConnection,
+      onSessionAuth: onAuthorizedConnection,
       onAuthFailure,
       blobStore: this._blobStore
     });
@@ -2746,26 +2746,108 @@ SpaceManager = _ts_decorate8([
 ], SpaceManager);
 
 // packages/core/echo/echo-pipeline/src/automerge/automerge-host.ts
+import { Trigger as Trigger2 } from "@dxos/async";
 import { Repo, NetworkAdapter, StorageAdapter, cbor } from "@dxos/automerge/automerge-repo";
+import { IndexedDBStorageAdapter } from "@dxos/automerge/automerge-repo-storage-indexeddb";
 import { Stream as Stream2 } from "@dxos/codec-protobuf";
 import { invariant as invariant10 } from "@dxos/invariant";
+import { PublicKey as PublicKey8 } from "@dxos/keys";
 import { log as log13 } from "@dxos/log";
+import { StorageType } from "@dxos/random-access-storage";
 import { AutomergeReplicator } from "@dxos/teleport-extension-automerge-replicator";
-import { arrayToBuffer as arrayToBuffer2, bufferToArray } from "@dxos/util";
+import { ComplexMap as ComplexMap7, ComplexSet, arrayToBuffer as arrayToBuffer2, bufferToArray, defaultMap } from "@dxos/util";
 var __dxlog_file14 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/automerge-host.ts";
 var AutomergeHost = class {
   constructor(storageDirectory) {
+    /**
+    * spaceKey -> deviceKey[]
+    */
+    this._authorizedDevices = new ComplexMap7(PublicKey8.hash);
     this._meshNetwork = new MeshNetworkAdapter();
     this._clientNetwork = new LocalHostNetworkAdapter();
-    this._storage = new AutomergeStorageAdapter(storageDirectory);
+    this._storage = storageDirectory.type === StorageType.IDB ? new IndexedDBStorageAdapter(storageDirectory.path, "data") : new AutomergeStorageAdapter(storageDirectory);
     this._repo = new Repo({
+      peerId: `host-${PublicKey8.random().toHex()}`,
       network: [
         this._clientNetwork,
         this._meshNetwork
       ],
       storage: this._storage,
       // TODO(dmaretskyi): Share based on HALO permissions and space affinity.
-      sharePolicy: async (peerId, documentId) => true
+      // Hosts, running in the worker, don't share documents unless requested by other peers.
+      sharePolicy: async (peerId, documentId) => {
+        if (peerId.startsWith("client-")) {
+          return true;
+        }
+        if (!documentId) {
+          return false;
+        }
+        const doc = this._repo.handles[documentId]?.docSync();
+        if (!doc) {
+          log13("doc not found for share policy check", {
+            peerId,
+            documentId
+          }, {
+            F: __dxlog_file14,
+            L: 65,
+            S: this,
+            C: (f, a) => f(...a)
+          });
+          return false;
+        }
+        try {
+          if (!doc.experimental_spaceKey) {
+            log13.warn("space key not found for share policy check", {
+              peerId,
+              documentId
+            }, {
+              F: __dxlog_file14,
+              L: 71,
+              S: this,
+              C: (f, a) => f(...a)
+            });
+            return false;
+          }
+          const spaceKey = PublicKey8.from(doc.experimental_spaceKey);
+          const authorizedDevices = this._authorizedDevices.get(spaceKey);
+          const deviceKeyHex = this.repo.peerMetadataByPeerId[peerId]?.dxos_deviceKey;
+          if (!deviceKeyHex) {
+            log13.warn("device key not found for share policy check", {
+              peerId,
+              documentId
+            }, {
+              F: __dxlog_file14,
+              L: 81,
+              S: this,
+              C: (f, a) => f(...a)
+            });
+            return false;
+          }
+          const deviceKey = PublicKey8.from(deviceKeyHex);
+          const isAuthorized = authorizedDevices?.has(deviceKey) ?? false;
+          log13.info("share policy check", {
+            peerId,
+            documentId,
+            deviceKey,
+            spaceKey,
+            isAuthorized
+          }, {
+            F: __dxlog_file14,
+            L: 87,
+            S: this,
+            C: (f, a) => f(...a)
+          });
+          return isAuthorized;
+        } catch (err) {
+          log13.catch(err, void 0, {
+            F: __dxlog_file14,
+            L: 90,
+            S: this,
+            C: (f, a) => f(...a)
+          });
+          return false;
+        }
+      }
     });
     this._clientNetwork.ready();
     this._meshNetwork.ready();
@@ -2774,6 +2856,7 @@ var AutomergeHost = class {
     return this._repo;
   }
   async close() {
+    this._storage instanceof AutomergeStorageAdapter && await this._storage.close();
     await this._clientNetwork.close();
   }
   //
@@ -2785,7 +2868,7 @@ var AutomergeHost = class {
   sendSyncMessage(request) {
     return this._clientNetwork.sendSyncMessage(request);
   }
-  getHostInfo() {
+  async getHostInfo() {
     return this._clientNetwork.getHostInfo();
   }
   //
@@ -2794,11 +2877,15 @@ var AutomergeHost = class {
   createExtension() {
     return this._meshNetwork.createExtension();
   }
+  authorizeDevice(spaceKey, deviceKey) {
+    defaultMap(this._authorizedDevices, spaceKey, () => new ComplexSet(PublicKey8.hash)).add(deviceKey);
+  }
 };
 var LocalHostNetworkAdapter = class extends NetworkAdapter {
   constructor() {
     super(...arguments);
     this._peers = /* @__PURE__ */ new Map();
+    this._connected = new Trigger2();
   }
   /**
   * Emits `ready` event. That signals to `Repo` that it can start using the adapter.
@@ -2810,12 +2897,13 @@ var LocalHostNetworkAdapter = class extends NetworkAdapter {
   }
   connect(peerId) {
     this.peerId = peerId;
+    this._connected.wake();
   }
   send(message) {
     const peer = this._peers.get(message.targetId);
     invariant10(peer, "Peer not found.", {
       F: __dxlog_file14,
-      L: 108,
+      L: 170,
       S: this,
       A: [
         "peer",
@@ -2835,7 +2923,7 @@ var LocalHostNetworkAdapter = class extends NetworkAdapter {
     return new Stream2(({ next, close }) => {
       invariant10(!this._peers.has(peerId), "Peer already connected.", {
         F: __dxlog_file14,
-        L: 126,
+        L: 188,
         S: this,
         A: [
           "!this._peers.has(peerId)",
@@ -2857,19 +2945,35 @@ var LocalHostNetworkAdapter = class extends NetworkAdapter {
           });
         }
       });
-      this.emit("peer-candidate", {
-        peerId
-      });
+      this._connected.wait({
+        timeout: 1e3
+      }).then(() => {
+        this.emit("peer-candidate", {
+          peerMetadata: {},
+          peerId
+        });
+      }).catch((err) => log13.catch(err, void 0, {
+        F: __dxlog_file14,
+        L: 213,
+        S: this,
+        C: (f, a) => f(...a)
+      }));
     });
   }
   async sendSyncMessage({ id, syncMessage }) {
+    await this._connected.wait({
+      timeout: 1e3
+    });
     const message = cbor.decode(syncMessage);
     this.emit("message", message);
   }
-  getHostInfo() {
+  async getHostInfo() {
+    await this._connected.wait({
+      timeout: 1e3
+    });
     invariant10(this.peerId, "Peer id not set.", {
       F: __dxlog_file14,
-      L: 155,
+      L: 225,
       S: this,
       A: [
         "this.peerId",
@@ -2905,7 +3009,7 @@ var MeshNetworkAdapter = class extends NetworkAdapter {
     const extension = this._extensions.get(receiverId);
     invariant10(extension, "Extension not found.", {
       F: __dxlog_file14,
-      L: 190,
+      L: 260,
       S: this,
       A: [
         "extension",
@@ -2916,7 +3020,7 @@ var MeshNetworkAdapter = class extends NetworkAdapter {
       payload: cbor.encode(message)
     }).catch((err) => log13.catch(err, void 0, {
       F: __dxlog_file14,
-      L: 191,
+      L: 261,
       S: this,
       C: (f, a) => f(...a)
     }));
@@ -2926,7 +3030,7 @@ var MeshNetworkAdapter = class extends NetworkAdapter {
   createExtension() {
     invariant10(this.peerId, "Peer id not set.", {
       F: __dxlog_file14,
-      L: 199,
+      L: 269,
       S: this,
       A: [
         "this.peerId",
@@ -2937,13 +3041,17 @@ var MeshNetworkAdapter = class extends NetworkAdapter {
     const extension = new AutomergeReplicator({
       peerId: this.peerId
     }, {
-      onStartReplication: async (info) => {
+      onStartReplication: async (info, remotePeerId) => {
         if (this._extensions.has(info.id)) {
           return;
         }
         peerInfo = info;
         this._extensions.set(info.id, extension);
         this.emit("peer-candidate", {
+          // TODO(mykola): Hack, stop abusing `peerMetadata` field.
+          peerMetadata: {
+            dxos_deviceKey: remotePeerId.toHex()
+          },
           peerId: info.id
         });
       },
@@ -2952,9 +3060,13 @@ var MeshNetworkAdapter = class extends NetworkAdapter {
         this.emit("message", message);
       },
       onClose: async () => {
-        peerInfo && this.emit("peer-disconnected", {
+        if (!peerInfo) {
+          return;
+        }
+        this.emit("peer-disconnected", {
           peerId: peerInfo.id
         });
+        this._extensions.delete(peerInfo.id);
       }
     });
     return extension;
@@ -2964,8 +3076,12 @@ var AutomergeStorageAdapter = class extends StorageAdapter {
   constructor(_directory) {
     super();
     this._directory = _directory;
+    this._state = "opened";
   }
   async load(key) {
+    if (this._state !== "opened") {
+      return void 0;
+    }
     const filename = this._getFilename(key);
     const file = this._directory.getOrCreateFile(filename);
     const { size } = await file.stat();
@@ -2976,6 +3092,9 @@ var AutomergeStorageAdapter = class extends StorageAdapter {
     return bufferToArray(buffer);
   }
   async save(key, data) {
+    if (this._state !== "opened") {
+      return void 0;
+    }
     const filename = this._getFilename(key);
     const file = this._directory.getOrCreateFile(filename);
     await file.write(0, arrayToBuffer2(data));
@@ -2983,11 +3102,17 @@ var AutomergeStorageAdapter = class extends StorageAdapter {
     await file.flush?.();
   }
   async remove(key) {
+    if (this._state !== "opened") {
+      return void 0;
+    }
     const filename = this._getFilename(key);
     const file = this._directory.getOrCreateFile(filename);
-    await file.truncate?.(0);
+    await file.destroy();
   }
   async loadRange(keyPrefix) {
+    if (this._state !== "opened") {
+      return [];
+    }
     const filename = this._getFilename(keyPrefix);
     const entries = await this._directory.list();
     return Promise.all(entries.filter((entry) => entry.startsWith(filename)).map(async (entry) => {
@@ -3001,13 +3126,19 @@ var AutomergeStorageAdapter = class extends StorageAdapter {
     }));
   }
   async removeRange(keyPrefix) {
+    if (this._state !== "opened") {
+      return void 0;
+    }
     const filename = this._getFilename(keyPrefix);
     const entries = await this._directory.list();
     await Promise.all(entries.filter((entry) => entry.startsWith(filename)).map(async (entry) => {
-      const file = this._directory.getOrCreateFile(filename);
-      await file.truncate?.(0);
+      const file = this._directory.getOrCreateFile(entry);
+      await file.destroy();
     }));
   }
+  async close() {
+    this._state = "closed";
+  }
   _getFilename(key) {
     return key.map((k) => k.replaceAll("%", "%25").replaceAll("-", "%2D")).join("-");
   }
@@ -3041,7 +3172,6 @@ export {
   AuthStatus,
   SpaceProtocolSession,
   SpaceManager,
-  AutomergeHost,
-  AutomergeStorageAdapter
+  AutomergeHost
 };
-//# sourceMappingURL=chunk-EM4RCBYQ.mjs.map
+//# sourceMappingURL=chunk-PB5T4DLC.mjs.map