@dxos/echo-pipeline 0.3.11-next.0fb359e → 0.3.11-next.e28df4f

package/dist/lib/browser/{chunk-W3SSYW3X.mjs → chunk-D7UMNYLJ.mjs}

@@ -519,12 +519,12 @@ var emptyLargeSpaceMetadata = () => ({});
 var EchoMetadata = schema4.getCodecForType("dxos.echo.metadata.EchoMetadata");
 var LargeSpaceMetadata = schema4.getCodecForType("dxos.echo.metadata.LargeSpaceMetadata");
 var MetadataStore = class {
-  constructor(_directory) {
-    this._directory = _directory;
+  constructor(directory) {
     this._metadata = emptyEchoMetadata();
     this._spaceLargeMetadata = new ComplexMap3(PublicKey3.hash);
     this._metadataFile = void 0;
     this.update = new Event();
+    this._directory = directory;
   }
   get metadata() {
     return this._metadata;
@@ -553,7 +553,7 @@ var MetadataStore = class {
         name: file.filename
       }, {
         F: __dxlog_file4,
-        L: 78,
+        L: 85,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -573,6 +573,9 @@ var MetadataStore = class {
       await file.close();
     }
   }
+  /**
+  * @internal
+  */
   async _writeFile(file, codec2, data) {
     const encoded = arrayToBuffer(codec2.encode(data));
     const checksum = CRC32.buf(encoded);
@@ -586,7 +589,7 @@ var MetadataStore = class {
       checksum
     }, {
       F: __dxlog_file4,
-      L: 110,
+      L: 120,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -618,7 +621,7 @@ var MetadataStore = class {
         err
       }, {
         F: __dxlog_file4,
-        L: 141,
+        L: 151,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -635,7 +638,7 @@ var MetadataStore = class {
           err
         }, {
           F: __dxlog_file4,
-          L: 153,
+          L: 163,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -665,7 +668,7 @@ var MetadataStore = class {
         err
       }, {
         F: __dxlog_file4,
-        L: 182,
+        L: 192,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -686,7 +689,7 @@ var MetadataStore = class {
     const space = this.spaces.find((space2) => space2.key === spaceKey);
     invariant4(space, "Space not found", {
       F: __dxlog_file4,
-      L: 204,
+      L: 214,
       S: this,
       A: [
         "space",
@@ -710,7 +713,7 @@ var MetadataStore = class {
   async clear() {
     log3("clearing all metadata", void 0, {
       F: __dxlog_file4,
-      L: 223,
+      L: 233,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -723,7 +726,7 @@ var MetadataStore = class {
   async setIdentityRecord(record) {
     invariant4(!this._metadata.identity, "Cannot overwrite existing identity in metadata", {
       F: __dxlog_file4,
-      L: 233,
+      L: 243,
       S: this,
       A: [
         "!this._metadata.identity",
@@ -737,7 +740,7 @@ var MetadataStore = class {
   async addSpace(record) {
     invariant4(!(this._metadata.spaces ?? []).find((space) => space.key === record.key), "Cannot overwrite existing space in metadata", {
       F: __dxlog_file4,
-      L: 241,
+      L: 251,
       S: this,
       A: [
         "!(this._metadata.spaces ?? []).find((space) => space.key === record.key)",
@@ -1478,7 +1481,7 @@ var __dxlog_file9 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipelin
 var MESSAGES_PER_SNAPSHOT = 10;
 var AUTOMATIC_SNAPSHOT_DEBOUNCE_INTERVAL = 5e3;
 var TIMEFRAME_SAVE_DEBOUNCE_INTERVAL = 5e3;
-var DataPipeline = class DataPipeline2 {
+var DataPipeline = class {
   constructor(_params) {
     this._params = _params;
     this._ctx = new Context4();
@@ -1599,22 +1602,23 @@ var DataPipeline = class DataPipeline2 {
     this._epochCtx = void 0;
   }
   async _consumePipeline() {
+    const pipeline = this._pipeline;
     if (this.currentEpoch) {
       const waitForOneEpoch = this.onNewEpoch.waitForCount(1);
       await this._processEpochInSeparateTask(this.currentEpoch);
       await waitForOneEpoch;
     }
     let messageCounter = 0;
-    invariant8(this._pipeline, "Pipeline is not initialized.", {
+    invariant8(pipeline, "Pipeline is not initialized.", {
       F: __dxlog_file9,
-      L: 228,
+      L: 229,
       S: this,
       A: [
-        "this._pipeline",
+        "pipeline",
         "'Pipeline is not initialized.'"
       ]
     });
-    for await (const msg of this._pipeline.consume()) {
+    for await (const msg of pipeline.consume()) {
       const span = this._usage.beginRecording();
       this._mutations.inc();
       const { feedKey, seq, data } = msg;
@@ -1623,7 +1627,7 @@ var DataPipeline = class DataPipeline2 {
         seq
       }, {
         F: __dxlog_file9,
-        L: 234,
+        L: 235,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -1635,7 +1639,7 @@ var DataPipeline = class DataPipeline2 {
               feedKey
             }, {
               F: __dxlog_file9,
-              L: 240,
+              L: 241,
               S: this,
               C: (f, a) => f(...a)
             });
@@ -1658,16 +1662,16 @@ var DataPipeline = class DataPipeline2 {
             spaceKey: this._params.spaceKey.toHex()
           }, {
             F: __dxlog_file9,
-            L: 257,
+            L: 258,
             S: this,
             C: (f, a) => f(...a)
           });
-          await this._noteTargetStateIfNeeded(this._pipeline.state.pendingTimeframe);
+          await this._noteTargetStateIfNeeded(pipeline.state.pendingTimeframe);
         }
       } catch (err) {
         log8.catch(err, void 0, {
           F: __dxlog_file9,
-          L: 267,
+          L: 268,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -1682,7 +1686,7 @@ var DataPipeline = class DataPipeline2 {
   _createSnapshot() {
     invariant8(this.databaseHost, "Database backend is not initialized.", {
       F: __dxlog_file9,
-      L: 281,
+      L: 282,
       S: this,
       A: [
         "this.databaseHost",
@@ -1711,7 +1715,7 @@ var DataPipeline = class DataPipeline2 {
     } catch (err) {
       log8.warn("Failed to cache properties", err, {
         F: __dxlog_file9,
-        L: 310,
+        L: 311,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -1740,14 +1744,14 @@ var DataPipeline = class DataPipeline2 {
         if (err instanceof CancelledError) {
           log8("Epoch processing cancelled.", void 0, {
             F: __dxlog_file9,
-            L: 346,
+            L: 347,
             S: this,
             C: (f, a) => f(...a)
           });
         } else {
           log8.catch(err, void 0, {
             F: __dxlog_file9,
-            L: 348,
+            L: 349,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1770,7 +1774,7 @@ var DataPipeline = class DataPipeline2 {
   async _processEpoch(ctx, epoch) {
     invariant8(this._isOpen, "Space is closed.", {
       F: __dxlog_file9,
-      L: 372,
+      L: 373,
       S: this,
       A: [
         "this._isOpen",
@@ -1779,7 +1783,7 @@ var DataPipeline = class DataPipeline2 {
     });
     invariant8(this._pipeline, void 0, {
       F: __dxlog_file9,
-      L: 373,
+      L: 374,
       S: this,
       A: [
         "this._pipeline",
@@ -1791,7 +1795,7 @@ var DataPipeline = class DataPipeline2 {
       epoch: omit(epoch, "proof")
     }, {
       F: __dxlog_file9,
-      L: 376,
+      L: 377,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -1801,7 +1805,7 @@ var DataPipeline = class DataPipeline2 {
     }
     log8("restarting pipeline from epoch", void 0, {
       F: __dxlog_file9,
-      L: 382,
+      L: 383,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -1812,7 +1816,7 @@ var DataPipeline = class DataPipeline2 {
   async waitUntilTimeframe(timeframe) {
     invariant8(this._pipeline, "Pipeline is not initialized.", {
       F: __dxlog_file9,
-      L: 389,
+      L: 390,
       S: this,
       A: [
         "this._pipeline",
@@ -1824,7 +1828,7 @@ var DataPipeline = class DataPipeline2 {
   async createEpoch() {
     invariant8(this._pipeline, void 0, {
       F: __dxlog_file9,
-      L: 395,
+      L: 396,
       S: this,
       A: [
         "this._pipeline",
@@ -1833,7 +1837,7 @@ var DataPipeline = class DataPipeline2 {
     });
     invariant8(this.currentEpoch, void 0, {
       F: __dxlog_file9,
-      L: 396,
+      L: 397,
       S: this,
       A: [
         "this.currentEpoch",
@@ -1864,7 +1868,7 @@ var DataPipeline = class DataPipeline2 {
     } catch (err) {
       log8.catch(err, void 0, {
         F: __dxlog_file9,
-        L: 426,
+        L: 427,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -1921,7 +1925,7 @@ var idle = async (timeout) => {
 };
 
 // packages/core/echo/echo-pipeline/src/space/space.ts
-import { Event as Event5, synchronized as synchronized4, trackLeaks as trackLeaks3, Lock } from "@dxos/async";
+import { Event as Event5, synchronized as synchronized4, trackLeaks as trackLeaks3, Mutex } from "@dxos/async";
 import { invariant as invariant9 } from "@dxos/invariant";
 import { log as log10, logInfo } from "@dxos/log";
 import { AdmittedFeed as AdmittedFeed2 } from "@dxos/protocols/proto/dxos/halo/credentials";
@@ -1952,7 +1956,7 @@ var __dxlog_file10 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeli
 var TIMEFRAME_SAVE_DEBOUNCE_INTERVAL2 = 500;
 var CONTROL_PIPELINE_SNAPSHOT_DELAY = 1e4;
 var USE_SNAPSHOTS = true;
-var ControlPipeline = class ControlPipeline2 {
+var ControlPipeline = class {
   constructor({ spaceKey, genesisFeed, feedProvider, metadataStore }) {
     this._ctx = new Context5();
     this._lastTimeframeSaveTime = Date.now();
@@ -2198,15 +2202,15 @@ function _ts_decorate6(decorators, target, key, desc) {
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
 var __dxlog_file11 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/space.ts";
-var Space = class Space2 {
+var Space = class {
   constructor(params) {
-    this._addFeedLock = new Lock();
+    this._addFeedMutex = new Mutex();
     this.onCredentialProcessed = new Callback2();
     this.stateUpdate = new Event5();
     this._isOpen = false;
     invariant9(params.spaceKey && params.feedProvider, void 0, {
       F: __dxlog_file11,
-      L: 73,
+      L: 78,
       S: this,
       A: [
         "params.spaceKey && params.feedProvider",
@@ -2250,7 +2254,7 @@ var Space = class Space2 {
         credential
       }, {
         F: __dxlog_file11,
-        L: 111,
+        L: 116,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -2270,7 +2274,7 @@ var Space = class Space2 {
         if (this._dataFeed) {
           pipeline.setWriteFeed(this._dataFeed);
         }
-        await this._addFeedLock.executeSynchronized(async () => {
+        await this._addFeedMutex.executeSynchronized(async () => {
           for (const feed of this._controlPipeline.spaceState.feeds.values()) {
             if (feed.assertion.designation === AdmittedFeed2.Designation.DATA && !pipeline.hasFeed(feed.key)) {
               await pipeline.addFeed(await this._feedProvider(feed.key, {
@@ -2315,7 +2319,7 @@ var Space = class Space2 {
   setControlFeed(feed) {
     invariant9(!this._controlFeed, "Control feed already set.", {
       F: __dxlog_file11,
-      L: 186,
+      L: 191,
       S: this,
       A: [
         "!this._controlFeed",
@@ -2329,7 +2333,7 @@ var Space = class Space2 {
   setDataFeed(feed) {
     invariant9(!this._dataFeed, "Data feed already set.", {
       F: __dxlog_file11,
-      L: 193,
+      L: 198,
       S: this,
       A: [
         "!this._dataFeed",
@@ -2355,7 +2359,7 @@ var Space = class Space2 {
   async open(ctx) {
     log10("opening...", void 0, {
       F: __dxlog_file11,
-      L: 215,
+      L: 220,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2368,7 +2372,7 @@ var Space = class Space2 {
     this._isOpen = true;
     log10("opened", void 0, {
       F: __dxlog_file11,
-      L: 226,
+      L: 231,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2378,7 +2382,7 @@ var Space = class Space2 {
       key: this._key
     }, {
       F: __dxlog_file11,
-      L: 231,
+      L: 236,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2392,7 +2396,7 @@ var Space = class Space2 {
     this._isOpen = false;
     log10("closed", void 0, {
       F: __dxlog_file11,
-      L: 244,
+      L: 249,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2400,13 +2404,13 @@ var Space = class Space2 {
   async initializeDataPipeline() {
     log10("initializeDataPipeline", void 0, {
       F: __dxlog_file11,
-      L: 249,
+      L: 254,
       S: this,
       C: (f, a) => f(...a)
     });
     invariant9(this._isOpen, "Space must be open to initialize data pipeline.", {
       F: __dxlog_file11,
-      L: 250,
+      L: 255,
       S: this,
       A: [
         "this._isOpen",
@@ -2416,6 +2420,15 @@ var Space = class Space2 {
     await this._dataPipeline.open();
   }
 };
+_ts_decorate6([
+  trace3.info()
+], Space.prototype, "protocol", void 0);
+_ts_decorate6([
+  trace3.info()
+], Space.prototype, "_controlPipeline", void 0);
+_ts_decorate6([
+  trace3.info()
+], Space.prototype, "_dataPipeline", void 0);
 _ts_decorate6([
   logInfo,
   trace3.info()
@@ -2443,6 +2456,7 @@ import { MMSTTopology } from "@dxos/network-manager";
 import { Teleport } from "@dxos/teleport";
 import { BlobSync } from "@dxos/teleport-extension-object-sync";
 import { ReplicatorExtension } from "@dxos/teleport-extension-replicator";
+import { trace as trace4 } from "@dxos/tracing";
 import { ComplexMap as ComplexMap5 } from "@dxos/util";
 function _ts_decorate7(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
@@ -2486,7 +2500,7 @@ var SpaceProtocol = class {
       key: feed.key
     }, {
       F: __dxlog_file12,
-      L: 99,
+      L: 103,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2509,7 +2523,7 @@ var SpaceProtocol = class {
     await this.blobSync.open();
     log11("starting...", void 0, {
       F: __dxlog_file12,
-      L: 125,
+      L: 129,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2523,7 +2537,7 @@ var SpaceProtocol = class {
     });
     log11("started", void 0, {
       F: __dxlog_file12,
-      L: 135,
+      L: 139,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2533,14 +2547,14 @@ var SpaceProtocol = class {
     if (this._connection) {
       log11("stopping...", void 0, {
         F: __dxlog_file12,
-        L: 142,
+        L: 146,
         S: this,
         C: (f, a) => f(...a)
       });
       await this._connection.close();
       log11("stopped", void 0, {
         F: __dxlog_file12,
-        L: 144,
+        L: 148,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -2564,11 +2578,18 @@ var SpaceProtocol = class {
   }
 };
 _ts_decorate7([
-  logInfo2
+  logInfo2,
+  trace4.info()
 ], SpaceProtocol.prototype, "_topic", void 0);
+_ts_decorate7([
+  trace4.info()
+], SpaceProtocol.prototype, "_spaceKey", void 0);
 _ts_decorate7([
   logInfo2
 ], SpaceProtocol.prototype, "_ownPeerKey", null);
+SpaceProtocol = _ts_decorate7([
+  trace4.resource()
+], SpaceProtocol);
 var AuthStatus;
 (function(AuthStatus2) {
   AuthStatus2["INITIAL"] = "INITIAL";
@@ -2582,7 +2603,7 @@ var SpaceProtocolSession = class {
     this.replicator = new ReplicatorExtension().setOptions({
       upload: true
     });
-    this._authStatus = AuthStatus.INITIAL;
+    this._authStatus = "INITIAL";
     this._wireParams = wireParams;
     this._swarmIdentity = swarmIdentity;
     this._onSessionAuth = onSessionAuth;
@@ -2607,15 +2628,15 @@ var SpaceProtocolSession = class {
       onAuthSuccess: () => {
         log11("Peer authenticated", void 0, {
           F: __dxlog_file12,
-          L: 241,
+          L: 245,
           S: this,
           C: (f, a) => f(...a)
         });
-        this._authStatus = AuthStatus.SUCCESS;
+        this._authStatus = "SUCCESS";
         this._onSessionAuth?.(this._teleport);
       },
       onAuthFailure: () => {
-        this._authStatus = AuthStatus.FAILURE;
+        this._authStatus = "FAILURE";
         this._onAuthFailure?.(this._teleport);
       }
     }));
@@ -2625,7 +2646,7 @@ var SpaceProtocolSession = class {
   async close() {
     log11("close", void 0, {
       F: __dxlog_file12,
-      L: 257,
+      L: 261,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -2647,7 +2668,7 @@ import { synchronized as synchronized5, trackLeaks as trackLeaks4 } from "@dxos/
 import { failUndefined as failUndefined2 } from "@dxos/debug";
 import { PublicKey as PublicKey7 } from "@dxos/keys";
 import { log as log12 } from "@dxos/log";
-import { trace as trace4 } from "@dxos/protocols";
+import { trace as trace5 } from "@dxos/protocols";
 import { ComplexMap as ComplexMap6 } from "@dxos/util";
 function _ts_decorate8(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
@@ -2660,7 +2681,7 @@ function _ts_decorate8(decorators, target, key, desc) {
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
 var __dxlog_file13 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/space-manager.ts";
-var SpaceManager = class SpaceManager2 {
+var SpaceManager = class {
   constructor({ feedStore, networkManager, modelFactory, metadataStore, snapshotStore, blobStore }) {
     this._spaces = new ComplexMap6(PublicKey7.hash);
     this._instanceId = PublicKey7.random().toHex();
@@ -2682,8 +2703,8 @@ var SpaceManager = class SpaceManager2 {
       ...this._spaces.values()
     ].map((space) => space.close()));
   }
-  async constructSpace({ metadata, swarmIdentity, onNetworkConnection, onAuthFailure, memberKey }) {
-    log12.trace("dxos.echo.space-manager.construct-space", trace4.begin({
+  async constructSpace({ metadata, swarmIdentity, onAuthorizedConnection, onAuthFailure, memberKey }) {
+    log12.trace("dxos.echo.space-manager.construct-space", trace5.begin({
       id: this._instanceId
     }), {
       F: __dxlog_file13,
@@ -2705,7 +2726,7 @@ var SpaceManager = class SpaceManager2 {
       topic: spaceKey,
       swarmIdentity,
       networkManager: this._networkManager,
-      onSessionAuth: onNetworkConnection,
+      onSessionAuth: onAuthorizedConnection,
       onAuthFailure,
       blobStore: this._blobStore
     });
@@ -2721,7 +2742,7 @@ var SpaceManager = class SpaceManager2 {
       memberKey
     });
     this._spaces.set(space.key, space);
-    log12.trace("dxos.echo.space-manager.construct-space", trace4.end({
+    log12.trace("dxos.echo.space-manager.construct-space", trace5.end({
       id: this._instanceId
     }), {
       F: __dxlog_file13,
@@ -2743,26 +2764,120 @@ SpaceManager = _ts_decorate8([
 ], SpaceManager);
 
 // packages/core/echo/echo-pipeline/src/automerge/automerge-host.ts
+import { Trigger as Trigger2 } from "@dxos/async";
+import { next as automerge } from "@dxos/automerge/automerge";
 import { Repo, NetworkAdapter, StorageAdapter, cbor } from "@dxos/automerge/automerge-repo";
+import { IndexedDBStorageAdapter } from "@dxos/automerge/automerge-repo-storage-indexeddb";
 import { Stream as Stream2 } from "@dxos/codec-protobuf";
 import { invariant as invariant10 } from "@dxos/invariant";
+import { PublicKey as PublicKey8 } from "@dxos/keys";
 import { log as log13 } from "@dxos/log";
+import { StorageType } from "@dxos/random-access-storage";
 import { AutomergeReplicator } from "@dxos/teleport-extension-automerge-replicator";
-import { arrayToBuffer as arrayToBuffer2, bufferToArray } from "@dxos/util";
+import { trace as trace6 } from "@dxos/tracing";
+import { ComplexMap as ComplexMap7, ComplexSet, arrayToBuffer as arrayToBuffer2, bufferToArray, defaultMap, mapValues } from "@dxos/util";
+function _ts_decorate9(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
+    r = Reflect.decorate(decorators, target, key, desc);
+  else
+    for (var i = decorators.length - 1; i >= 0; i--)
+      if (d = decorators[i])
+        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
 var __dxlog_file14 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/automerge-host.ts";
 var AutomergeHost = class {
   constructor(storageDirectory) {
+    /**
+    * spaceKey -> deviceKey[]
+    */
+    this._authorizedDevices = new ComplexMap7(PublicKey8.hash);
     this._meshNetwork = new MeshNetworkAdapter();
     this._clientNetwork = new LocalHostNetworkAdapter();
-    this._storage = new AutomergeStorageAdapter(storageDirectory);
+    this._storage = storageDirectory.type === StorageType.IDB ? new IndexedDBStorageAdapter(storageDirectory.path, "data") : new AutomergeStorageAdapter(storageDirectory);
     this._repo = new Repo({
+      peerId: `host-${PublicKey8.random().toHex()}`,
       network: [
         this._clientNetwork,
         this._meshNetwork
       ],
       storage: this._storage,
       // TODO(dmaretskyi): Share based on HALO permissions and space affinity.
-      sharePolicy: async (peerId, documentId) => true
+      // Hosts, running in the worker, don't share documents unless requested by other peers.
+      sharePolicy: async (peerId, documentId) => {
+        if (peerId.startsWith("client-")) {
+          return true;
+        }
+        if (!documentId) {
+          return false;
+        }
+        const doc = this._repo.handles[documentId]?.docSync();
+        if (!doc) {
+          log13("doc not found for share policy check", {
+            peerId,
+            documentId
+          }, {
+            F: __dxlog_file14,
+            L: 68,
+            S: this,
+            C: (f, a) => f(...a)
+          });
+          return false;
+        }
+        try {
+          if (!doc.experimental_spaceKey) {
+            log13("space key not found for share policy check", {
+              peerId,
+              documentId
+            }, {
+              F: __dxlog_file14,
+              L: 74,
+              S: this,
+              C: (f, a) => f(...a)
+            });
+            return false;
+          }
+          const spaceKey = PublicKey8.from(doc.experimental_spaceKey);
+          const authorizedDevices = this._authorizedDevices.get(spaceKey);
+          const deviceKeyHex = this.repo.peerMetadataByPeerId[peerId]?.dxos_deviceKey;
+          if (!deviceKeyHex) {
+            log13("device key not found for share policy check", {
+              peerId,
+              documentId
+            }, {
+              F: __dxlog_file14,
+              L: 84,
+              S: this,
+              C: (f, a) => f(...a)
+            });
+            return false;
+          }
+          const deviceKey = PublicKey8.from(deviceKeyHex);
+          const isAuthorized = authorizedDevices?.has(deviceKey) ?? false;
+          log13("share policy check", {
+            peerId,
+            documentId,
+            deviceKey,
+            spaceKey,
+            isAuthorized
+          }, {
+            F: __dxlog_file14,
+            L: 90,
+            S: this,
+            C: (f, a) => f(...a)
+          });
+          return isAuthorized;
+        } catch (err) {
+          log13.catch(err, void 0, {
+            F: __dxlog_file14,
+            L: 93,
+            S: this,
+            C: (f, a) => f(...a)
+          });
+          return false;
+        }
+      }
     });
     this._clientNetwork.ready();
     this._meshNetwork.ready();
@@ -2770,7 +2885,18 @@ var AutomergeHost = class {
   get repo() {
     return this._repo;
   }
+  _automergeDocs() {
+    return mapValues(this._repo.handles, (handle) => ({
+      state: handle.state,
+      hasDoc: !!handle.docSync(),
+      heads: handle.docSync() ? automerge.getHeads(handle.docSync()) : null
+    }));
+  }
+  _automergePeers() {
+    return this._repo.peers;
+  }
   async close() {
+    this._storage instanceof AutomergeStorageAdapter && await this._storage.close();
     await this._clientNetwork.close();
   }
   //
@@ -2782,7 +2908,7 @@ var AutomergeHost = class {
   sendSyncMessage(request) {
     return this._clientNetwork.sendSyncMessage(request);
   }
-  getHostInfo() {
+  async getHostInfo() {
     return this._clientNetwork.getHostInfo();
   }
   //
@@ -2791,11 +2917,28 @@ var AutomergeHost = class {
   createExtension() {
     return this._meshNetwork.createExtension();
   }
+  authorizeDevice(spaceKey, deviceKey) {
+    defaultMap(this._authorizedDevices, spaceKey, () => new ComplexSet(PublicKey8.hash)).add(deviceKey);
+  }
 };
+_ts_decorate9([
+  trace6.info({
+    depth: null
+  })
+], AutomergeHost.prototype, "_automergeDocs", null);
+_ts_decorate9([
+  trace6.info({
+    depth: null
+  })
+], AutomergeHost.prototype, "_automergePeers", null);
+AutomergeHost = _ts_decorate9([
+  trace6.resource()
+], AutomergeHost);
 var LocalHostNetworkAdapter = class extends NetworkAdapter {
   constructor() {
     super(...arguments);
     this._peers = /* @__PURE__ */ new Map();
+    this._connected = new Trigger2();
   }
   /**
   * Emits `ready` event. That signals to `Repo` that it can start using the adapter.
@@ -2807,12 +2950,13 @@ var LocalHostNetworkAdapter = class extends NetworkAdapter {
   }
   connect(peerId) {
     this.peerId = peerId;
+    this._connected.wake();
   }
   send(message) {
     const peer = this._peers.get(message.targetId);
     invariant10(peer, "Peer not found.", {
       F: __dxlog_file14,
-      L: 108,
+      L: 187,
       S: this,
       A: [
         "peer",
@@ -2832,7 +2976,7 @@ var LocalHostNetworkAdapter = class extends NetworkAdapter {
     return new Stream2(({ next, close }) => {
       invariant10(!this._peers.has(peerId), "Peer already connected.", {
         F: __dxlog_file14,
-        L: 126,
+        L: 205,
         S: this,
         A: [
           "!this._peers.has(peerId)",
@@ -2854,19 +2998,35 @@ var LocalHostNetworkAdapter = class extends NetworkAdapter {
           });
         }
       });
-      this.emit("peer-candidate", {
-        peerId
-      });
+      this._connected.wait({
+        timeout: 1e3
+      }).then(() => {
+        this.emit("peer-candidate", {
+          peerMetadata: {},
+          peerId
+        });
+      }).catch((err) => log13.catch(err, void 0, {
+        F: __dxlog_file14,
+        L: 230,
+        S: this,
+        C: (f, a) => f(...a)
+      }));
     });
   }
   async sendSyncMessage({ id, syncMessage }) {
+    await this._connected.wait({
+      timeout: 1e3
+    });
     const message = cbor.decode(syncMessage);
     this.emit("message", message);
   }
-  getHostInfo() {
+  async getHostInfo() {
+    await this._connected.wait({
+      timeout: 1e3
+    });
     invariant10(this.peerId, "Peer id not set.", {
       F: __dxlog_file14,
-      L: 155,
+      L: 242,
       S: this,
       A: [
         "this.peerId",
@@ -2902,7 +3062,7 @@ var MeshNetworkAdapter = class extends NetworkAdapter {
     const extension = this._extensions.get(receiverId);
     invariant10(extension, "Extension not found.", {
       F: __dxlog_file14,
-      L: 190,
+      L: 277,
       S: this,
       A: [
         "extension",
@@ -2913,7 +3073,7 @@ var MeshNetworkAdapter = class extends NetworkAdapter {
       payload: cbor.encode(message)
     }).catch((err) => log13.catch(err, void 0, {
       F: __dxlog_file14,
-      L: 191,
+      L: 278,
       S: this,
       C: (f, a) => f(...a)
     }));
@@ -2923,7 +3083,7 @@ var MeshNetworkAdapter = class extends NetworkAdapter {
   createExtension() {
     invariant10(this.peerId, "Peer id not set.", {
       F: __dxlog_file14,
-      L: 199,
+      L: 286,
       S: this,
       A: [
         "this.peerId",
@@ -2934,13 +3094,17 @@ var MeshNetworkAdapter = class extends NetworkAdapter {
     const extension = new AutomergeReplicator({
       peerId: this.peerId
     }, {
-      onStartReplication: async (info) => {
+      onStartReplication: async (info, remotePeerId) => {
         if (this._extensions.has(info.id)) {
           return;
         }
         peerInfo = info;
         this._extensions.set(info.id, extension);
         this.emit("peer-candidate", {
+          // TODO(mykola): Hack, stop abusing `peerMetadata` field.
+          peerMetadata: {
+            dxos_deviceKey: remotePeerId.toHex()
+          },
           peerId: info.id
         });
       },
@@ -2949,9 +3113,13 @@ var MeshNetworkAdapter = class extends NetworkAdapter {
         this.emit("message", message);
       },
       onClose: async () => {
-        peerInfo && this.emit("peer-disconnected", {
+        if (!peerInfo) {
+          return;
+        }
+        this.emit("peer-disconnected", {
           peerId: peerInfo.id
         });
+        this._extensions.delete(peerInfo.id);
       }
     });
     return extension;
@@ -2961,8 +3129,12 @@ var AutomergeStorageAdapter = class extends StorageAdapter {
   constructor(_directory) {
     super();
     this._directory = _directory;
+    this._state = "opened";
   }
   async load(key) {
+    if (this._state !== "opened") {
+      return void 0;
+    }
     const filename = this._getFilename(key);
     const file = this._directory.getOrCreateFile(filename);
     const { size } = await file.stat();
@@ -2973,6 +3145,9 @@ var AutomergeStorageAdapter = class extends StorageAdapter {
     return bufferToArray(buffer);
   }
   async save(key, data) {
+    if (this._state !== "opened") {
+      return void 0;
+    }
     const filename = this._getFilename(key);
     const file = this._directory.getOrCreateFile(filename);
     await file.write(0, arrayToBuffer2(data));
@@ -2980,11 +3155,17 @@ var AutomergeStorageAdapter = class extends StorageAdapter {
     await file.flush?.();
   }
   async remove(key) {
+    if (this._state !== "opened") {
+      return void 0;
+    }
     const filename = this._getFilename(key);
     const file = this._directory.getOrCreateFile(filename);
-    await file.truncate?.(0);
+    await file.destroy();
   }
   async loadRange(keyPrefix) {
+    if (this._state !== "opened") {
+      return [];
+    }
     const filename = this._getFilename(keyPrefix);
     const entries = await this._directory.list();
     return Promise.all(entries.filter((entry) => entry.startsWith(filename)).map(async (entry) => {
@@ -2998,13 +3179,19 @@ var AutomergeStorageAdapter = class extends StorageAdapter {
     }));
   }
   async removeRange(keyPrefix) {
+    if (this._state !== "opened") {
+      return void 0;
+    }
     const filename = this._getFilename(keyPrefix);
     const entries = await this._directory.list();
     await Promise.all(entries.filter((entry) => entry.startsWith(filename)).map(async (entry) => {
-      const file = this._directory.getOrCreateFile(filename);
-      await file.truncate?.(0);
+      const file = this._directory.getOrCreateFile(entry);
+      await file.destroy();
     }));
   }
+  async close() {
+    this._state = "closed";
+  }
   _getFilename(key) {
     return key.map((k) => k.replaceAll("%", "%25").replaceAll("-", "%2D")).join("-");
   }
@@ -3040,4 +3227,4 @@ export {
   SpaceManager,
   AutomergeHost
 };
-//# sourceMappingURL=chunk-W3SSYW3X.mjs.map
+//# sourceMappingURL=chunk-D7UMNYLJ.mjs.map