@dxos/echo-pipeline 0.5.2 → 0.5.3-main.056e7da

package/dist/lib/node/index.cjs

@@ -18,38 +18,38 @@ var __copyProps = (to, from, except, desc) => {
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var node_exports = {};
 __export(node_exports, {
-  AuthExtension: () => import_chunk_P7L7ICAH.AuthExtension,
-  AuthStatus: () => import_chunk_P7L7ICAH.AuthStatus,
+  AuthExtension: () => import_chunk_M475BGBI.AuthExtension,
+  AuthStatus: () => import_chunk_M475BGBI.AuthStatus,
   AutomergeDocumentLoaderImpl: () => AutomergeDocumentLoaderImpl,
   AutomergeHost: () => AutomergeHost,
   AutomergeStorageAdapter: () => AutomergeStorageAdapter,
-  DataServiceImpl: () => import_chunk_P7L7ICAH.DataServiceImpl,
+  DataServiceImpl: () => import_chunk_M475BGBI.DataServiceImpl,
   LevelDBStorageAdapter: () => LevelDBStorageAdapter,
   LocalHostNetworkAdapter: () => LocalHostNetworkAdapter,
-  MOCK_AUTH_PROVIDER: () => import_chunk_P7L7ICAH.MOCK_AUTH_PROVIDER,
-  MOCK_AUTH_VERIFIER: () => import_chunk_P7L7ICAH.MOCK_AUTH_VERIFIER,
-  MeshNetworkAdapter: () => MeshNetworkAdapter,
-  MetadataStore: () => import_chunk_P7L7ICAH.MetadataStore,
-  Pipeline: () => import_chunk_P7L7ICAH.Pipeline,
-  SnapshotManager: () => import_chunk_P7L7ICAH.SnapshotManager,
-  SnapshotStore: () => import_chunk_P7L7ICAH.SnapshotStore,
-  Space: () => import_chunk_P7L7ICAH.Space,
-  SpaceManager: () => import_chunk_P7L7ICAH.SpaceManager,
-  SpaceProtocol: () => import_chunk_P7L7ICAH.SpaceProtocol,
-  SpaceProtocolSession: () => import_chunk_P7L7ICAH.SpaceProtocolSession,
-  TimeframeClock: () => import_chunk_P7L7ICAH.TimeframeClock,
-  codec: () => import_chunk_P7L7ICAH.codec,
-  createMappedFeedWriter: () => import_chunk_P7L7ICAH.createMappedFeedWriter,
+  MOCK_AUTH_PROVIDER: () => import_chunk_M475BGBI.MOCK_AUTH_PROVIDER,
+  MOCK_AUTH_VERIFIER: () => import_chunk_M475BGBI.MOCK_AUTH_VERIFIER,
+  MeshEchoReplicator: () => MeshEchoReplicator,
+  MetadataStore: () => import_chunk_M475BGBI.MetadataStore,
+  Pipeline: () => import_chunk_M475BGBI.Pipeline,
+  SnapshotManager: () => import_chunk_M475BGBI.SnapshotManager,
+  SnapshotStore: () => import_chunk_M475BGBI.SnapshotStore,
+  Space: () => import_chunk_M475BGBI.Space,
+  SpaceManager: () => import_chunk_M475BGBI.SpaceManager,
+  SpaceProtocol: () => import_chunk_M475BGBI.SpaceProtocol,
+  SpaceProtocolSession: () => import_chunk_M475BGBI.SpaceProtocolSession,
+  TimeframeClock: () => import_chunk_M475BGBI.TimeframeClock,
+  codec: () => import_chunk_M475BGBI.codec,
+  createMappedFeedWriter: () => import_chunk_M475BGBI.createMappedFeedWriter,
   encodingOptions: () => encodingOptions,
   getSpaceKeyFromDoc: () => getSpaceKeyFromDoc,
-  hasInvitationExpired: () => import_chunk_P7L7ICAH.hasInvitationExpired,
-  mapFeedIndexesToTimeframe: () => import_chunk_P7L7ICAH.mapFeedIndexesToTimeframe,
-  mapTimeframeToFeedIndexes: () => import_chunk_P7L7ICAH.mapTimeframeToFeedIndexes,
-  startAfter: () => import_chunk_P7L7ICAH.startAfter,
-  valueEncoding: () => import_chunk_P7L7ICAH.valueEncoding
+  hasInvitationExpired: () => import_chunk_M475BGBI.hasInvitationExpired,
+  mapFeedIndexesToTimeframe: () => import_chunk_M475BGBI.mapFeedIndexesToTimeframe,
+  mapTimeframeToFeedIndexes: () => import_chunk_M475BGBI.mapTimeframeToFeedIndexes,
+  startAfter: () => import_chunk_M475BGBI.startAfter,
+  valueEncoding: () => import_chunk_M475BGBI.valueEncoding
 });
 module.exports = __toCommonJS(node_exports);
-var import_chunk_P7L7ICAH = require("./chunk-P7L7ICAH.cjs");
+var import_chunk_M475BGBI = require("./chunk-M475BGBI.cjs");
 var import_async = require("@dxos/async");
 var import_automerge = require("@dxos/automerge/automerge");
 var import_automerge_repo = require("@dxos/automerge/automerge-repo");
@@ -70,21 +70,23 @@ var import_async3 = require("@dxos/async");
 var import_automerge_repo3 = require("@dxos/automerge/automerge-repo");
 var import_codec_protobuf = require("@dxos/codec-protobuf");
 var import_invariant3 = require("@dxos/invariant");
-var import_async4 = require("@dxos/async");
-var import_automerge_repo4 = require("@dxos/automerge/automerge-repo");
-var import_invariant4 = require("@dxos/invariant");
-var import_log3 = require("@dxos/log");
-var import_teleport_extension_automerge_replicator = require("@dxos/teleport-extension-automerge-replicator");
 var import_automerge_repo_storage_indexeddb = require("@dxos/automerge/automerge-repo-storage-indexeddb");
-var import_log4 = require("@dxos/log");
+var import_log3 = require("@dxos/log");
 var import_random_access_storage = require("@dxos/random-access-storage");
 var import_util2 = require("@dxos/util");
-var import_async5 = require("@dxos/async");
+var import_async4 = require("@dxos/async");
 var import_context4 = require("@dxos/context");
 var import_debug = require("@dxos/debug");
+var import_invariant4 = require("@dxos/invariant");
+var import_log4 = require("@dxos/log");
+var import_tracing2 = require("@dxos/tracing");
+var import_automerge_repo4 = require("@dxos/automerge/automerge-repo");
+var import_context5 = require("@dxos/context");
 var import_invariant5 = require("@dxos/invariant");
+var import_keys2 = require("@dxos/keys");
 var import_log5 = require("@dxos/log");
-var import_tracing2 = require("@dxos/tracing");
+var import_teleport_extension_automerge_replicator = require("@dxos/teleport-extension-automerge-replicator");
+var import_util3 = require("@dxos/util");
 function _ts_decorate(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
@@ -97,8 +99,9 @@ function _ts_decorate(decorators, target, key, desc) {
 }
 var __dxlog_file = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/echo-network-adapter.ts";
 var EchoNetworkAdapter = class extends import_automerge_repo2.NetworkAdapter {
-  constructor() {
-    super(...arguments);
+  constructor(_params) {
+    super();
+    this._params = _params;
     this._replicators = /* @__PURE__ */ new Set();
     this._connections = /* @__PURE__ */ new Map();
     this._lifecycleState = import_context2.LifecycleState.CLOSED;
@@ -118,7 +121,7 @@ var EchoNetworkAdapter = class extends import_automerge_repo2.NetworkAdapter {
       if (connectionEntry.isOpen) {
         import_log2.log.catch(err, void 0, {
           F: __dxlog_file,
-          L: 40,
+          L: 49,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -130,7 +133,7 @@ var EchoNetworkAdapter = class extends import_automerge_repo2.NetworkAdapter {
   async open() {
     (0, import_invariant2.invariant)(this._lifecycleState === import_context2.LifecycleState.CLOSED, void 0, {
       F: __dxlog_file,
-      L: 51,
+      L: 60,
       S: this,
       A: [
         "this._lifecycleState === LifecycleState.CLOSED",
@@ -138,6 +141,12 @@ var EchoNetworkAdapter = class extends import_automerge_repo2.NetworkAdapter {
       ]
     });
     this._lifecycleState = import_context2.LifecycleState.OPEN;
+    (0, import_log2.log)("emit ready", void 0, {
+      F: __dxlog_file,
+      L: 63,
+      S: this,
+      C: (f, a) => f(...a)
+    });
     this.emit("ready", {
       network: this
     });
@@ -145,7 +154,7 @@ var EchoNetworkAdapter = class extends import_automerge_repo2.NetworkAdapter {
   async close() {
     (0, import_invariant2.invariant)(this._lifecycleState === import_context2.LifecycleState.OPEN, void 0, {
       F: __dxlog_file,
-      L: 61,
+      L: 71,
       S: this,
       A: [
         "this._lifecycleState === LifecycleState.OPEN",
@@ -164,9 +173,18 @@ var EchoNetworkAdapter = class extends import_automerge_repo2.NetworkAdapter {
     });
   }
   async addReplicator(replicator) {
+    (0, import_invariant2.invariant)(this._lifecycleState === import_context2.LifecycleState.OPEN, void 0, {
+      F: __dxlog_file,
+      L: 87,
+      S: this,
+      A: [
+        "this._lifecycleState === LifecycleState.OPEN",
+        ""
+      ]
+    });
     (0, import_invariant2.invariant)(this.peerId, void 0, {
       F: __dxlog_file,
-      L: 77,
+      L: 88,
       S: this,
       A: [
         "this.peerId",
@@ -175,30 +193,43 @@ var EchoNetworkAdapter = class extends import_automerge_repo2.NetworkAdapter {
     });
     (0, import_invariant2.invariant)(!this._replicators.has(replicator), void 0, {
       F: __dxlog_file,
-      L: 78,
+      L: 89,
       S: this,
       A: [
         "!this._replicators.has(replicator)",
         ""
       ]
     });
+    this._replicators.add(replicator);
     await replicator.connect({
       peerId: this.peerId,
       onConnectionOpen: this._onConnectionOpen.bind(this),
-      onConnectionClosed: this._onConnectionClosed.bind(this)
+      onConnectionClosed: this._onConnectionClosed.bind(this),
+      getContainingSpaceForDocument: this._params.getContainingSpaceForDocument
     });
   }
   async removeReplicator(replicator) {
+    (0, import_invariant2.invariant)(this._lifecycleState === import_context2.LifecycleState.OPEN, void 0, {
+      F: __dxlog_file,
+      L: 102,
+      S: this,
+      A: [
+        "this._lifecycleState === LifecycleState.OPEN",
+        ""
+      ]
+    });
     (0, import_invariant2.invariant)(this._replicators.has(replicator), void 0, {
       F: __dxlog_file,
-      L: 89,
+      L: 103,
       S: this,
       A: [
         "this._replicators.has(replicator)",
         ""
       ]
     });
+    "";
     await replicator.disconnect();
+    this._replicators.delete(replicator);
   }
   async shouldAdvertize(peerId, params) {
     const connection = this._connections.get(peerId);
@@ -208,9 +239,17 @@ var EchoNetworkAdapter = class extends import_automerge_repo2.NetworkAdapter {
     return connection.connection.shouldAdvertize(params);
   }
   _onConnectionOpen(connection) {
+    (0, import_log2.log)("Connection opened", {
+      peerId: connection.peerId
+    }, {
+      F: __dxlog_file,
+      L: 119,
+      S: this,
+      C: (f, a) => f(...a)
+    });
     (0, import_invariant2.invariant)(!this._connections.has(connection.peerId), void 0, {
       F: __dxlog_file,
-      L: 103,
+      L: 120,
       S: this,
       A: [
         "!this._connections.has(connection.peerId as PeerId)",
@@ -239,13 +278,21 @@ var EchoNetworkAdapter = class extends import_automerge_repo2.NetworkAdapter {
         if (connectionEntry.isOpen) {
           import_log2.log.catch(err, void 0, {
             F: __dxlog_file,
-            L: 122,
+            L: 139,
             S: this,
             C: (f, a) => f(...a)
           });
         }
       }
     });
+    (0, import_log2.log)("emit peer-candidate", {
+      peerId: connection.peerId
+    }, {
+      F: __dxlog_file,
+      L: 144,
+      S: this,
+      C: (f, a) => f(...a)
+    });
     this.emit("peer-candidate", {
       peerId: connection.peerId,
       peerMetadata: {
@@ -255,10 +302,18 @@ var EchoNetworkAdapter = class extends import_automerge_repo2.NetworkAdapter {
     });
   }
   _onConnectionClosed(connection) {
+    (0, import_log2.log)("Connection closed", {
+      peerId: connection.peerId
+    }, {
+      F: __dxlog_file,
+      L: 155,
+      S: this,
+      C: (f, a) => f(...a)
+    });
     const entry = this._connections.get(connection.peerId);
     (0, import_invariant2.invariant)(entry, void 0, {
       F: __dxlog_file,
-      L: 138,
+      L: 157,
       S: this,
       A: [
         "entry",
@@ -271,13 +326,13 @@ var EchoNetworkAdapter = class extends import_automerge_repo2.NetworkAdapter {
     });
     void entry.reader.cancel().catch((err) => import_log2.log.catch(err, void 0, {
       F: __dxlog_file,
-      L: 143,
+      L: 162,
       S: this,
       C: (f, a) => f(...a)
     }));
     void entry.writer.abort().catch((err) => import_log2.log.catch(err, void 0, {
       F: __dxlog_file,
-      L: 144,
+      L: 163,
       S: this,
       C: (f, a) => f(...a)
     }));
@@ -521,116 +576,6 @@ var LocalHostNetworkAdapter = class extends import_automerge_repo3.NetworkAdapte
     return id;
   }
 };
-var __dxlog_file3 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/mesh-network-adapter.ts";
-var MeshNetworkAdapter = class extends import_automerge_repo4.NetworkAdapter {
-  constructor() {
-    super(...arguments);
-    this._extensions = /* @__PURE__ */ new Map();
-    this._connected = new import_async4.Trigger();
-  }
-  /**
-  * Emits `ready` event. That signals to `Repo` that it can start using the adapter.
-  */
-  ready() {
-    this.emit("ready", {
-      network: this
-    });
-  }
-  connect(peerId) {
-    this.peerId = peerId;
-    this._connected.wake();
-  }
-  send(message) {
-    const receiverId = message.targetId;
-    const extension = this._extensions.get(receiverId);
-    (0, import_invariant4.invariant)(extension, "Extension not found.", {
-      F: __dxlog_file3,
-      L: 38,
-      S: this,
-      A: [
-        "extension",
-        "'Extension not found.'"
-      ]
-    });
-    extension.sendSyncMessage({
-      payload: import_automerge_repo4.cbor.encode(message)
-    }).catch((err) => import_log3.log.catch(err, void 0, {
-      F: __dxlog_file3,
-      L: 39,
-      S: this,
-      C: (f, a) => f(...a)
-    }));
-  }
-  disconnect() {
-  }
-  createExtension() {
-    (0, import_invariant4.invariant)(this.peerId, "Peer id not set.", {
-      F: __dxlog_file3,
-      L: 47,
-      S: this,
-      A: [
-        "this.peerId",
-        "'Peer id not set.'"
-      ]
-    });
-    let peerInfo;
-    const extension = new import_teleport_extension_automerge_replicator.AutomergeReplicator({
-      peerId: this.peerId
-    }, {
-      onStartReplication: async (info, remotePeerId) => {
-        await this._connected.wait();
-        (0, import_log3.log)("onStartReplication", {
-          id: info.id,
-          thisPeerId: this.peerId,
-          remotePeerId: remotePeerId.toHex()
-        }, {
-          F: __dxlog_file3,
-          L: 70,
-          S: this,
-          C: (f, a) => f(...a)
-        });
-        if (!this._extensions.has(info.id)) {
-          peerInfo = info;
-          this._extensions.set(info.id, extension);
-          (0, import_log3.log)("peer-candidate", {
-            id: info.id,
-            thisPeerId: this.peerId,
-            remotePeerId: remotePeerId.toHex()
-          }, {
-            F: __dxlog_file3,
-            L: 76,
-            S: this,
-            C: (f, a) => f(...a)
-          });
-          this.emit("peer-candidate", {
-            // TODO(mykola): Hack, stop abusing `peerMetadata` field.
-            peerMetadata: {
-              dxos_deviceKey: remotePeerId.toHex()
-            },
-            peerId: info.id
-          });
-        }
-      },
-      onSyncMessage: async ({ payload }) => {
-        if (!peerInfo) {
-          return;
-        }
-        const message = import_automerge_repo4.cbor.decode(payload);
-        this.emit("message", message);
-      },
-      onClose: async () => {
-        if (!peerInfo) {
-          return;
-        }
-        this.emit("peer-disconnected", {
-          peerId: peerInfo.id
-        });
-        this._extensions.delete(peerInfo.id);
-      }
-    });
-    return extension;
-  }
-};
 var AutomergeStorageAdapter = class {
   constructor(_directory) {
     this._directory = _directory;
@@ -704,7 +649,7 @@ var AutomergeStorageAdapter = class {
     return filename.split("-").map((k) => k.replaceAll("%2D", "-").replaceAll("%25", "%"));
   }
 };
-var __dxlog_file4 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/migrations.ts";
+var __dxlog_file3 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/migrations.ts";
 var levelMigration = async ({ db, directory }) => {
   const isNewLevel = !await db.iterator({
     ...encodingOptions
@@ -718,10 +663,10 @@ var levelMigration = async ({ db, directory }) => {
     return;
   }
   const batch = db.batch();
-  import_log4.log.info("found chunks on old storage adapter", {
+  import_log3.log.info("found chunks on old storage adapter", {
     chunks: chunks.length
   }, {
-    F: __dxlog_file4,
+    F: __dxlog_file3,
     L: 36,
     S: void 0,
     C: (f, a) => f(...a)
@@ -743,12 +688,13 @@ function _ts_decorate2(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file5 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/automerge-host.ts";
+var __dxlog_file4 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/automerge-host.ts";
 var AutomergeHost = class {
   constructor({ directory, db, indexMetadataStore }) {
     this._ctx = new import_context.Context();
-    this._echoNetworkAdapter = new EchoNetworkAdapter();
-    this._authorizedDevices = new import_util.ComplexMap(import_keys.PublicKey.hash);
+    this._echoNetworkAdapter = new EchoNetworkAdapter({
+      getContainingSpaceForDocument: this._getContainingSpaceForDocument.bind(this)
+    });
     this._requestedDocs = /* @__PURE__ */ new Set();
     this._directory = directory;
     this._db = db;
@@ -768,103 +714,17 @@ var AutomergeHost = class {
     });
     await this._storage.open?.();
     this._peerId = `host-${import_keys.PublicKey.random().toHex()}`;
-    this._meshNetwork = new MeshNetworkAdapter();
     this._clientNetwork = new LocalHostNetworkAdapter();
     this._repo = new import_automerge_repo.Repo({
       peerId: this._peerId,
       network: [
         this._clientNetwork,
-        this._meshNetwork,
         this._echoNetworkAdapter
       ],
       storage: this._storage,
-      // TODO(dmaretskyi): Share based on HALO permissions and space affinity.
-      // Hosts, running in the worker, don't share documents unless requested by other peers.
-      sharePolicy: async (peerId, documentId) => {
-        if (peerId.startsWith("client-")) {
-          return false;
-        }
-        if (!documentId) {
-          return false;
-        }
-        const peerMetadata = this.repo.peerMetadataByPeerId[peerId];
-        if (peerMetadata?.dxos_peerSource === "EchoNetworkAdapter") {
-          return this._echoNetworkAdapter.shouldAdvertize(peerId, {
-            documentId
-          });
-        }
-        const doc = this._repo.handles[documentId]?.docSync();
-        if (!doc) {
-          const isRequested = this._requestedDocs.has(`automerge:${documentId}`);
-          (0, import_log.log)("doc share policy check", {
-            peerId,
-            documentId,
-            isRequested
-          }, {
-            F: __dxlog_file5,
-            L: 124,
-            S: this,
-            C: (f, a) => f(...a)
-          });
-          return isRequested;
-        }
-        try {
-          const spaceKey = getSpaceKeyFromDoc(doc);
-          if (!spaceKey) {
-            (0, import_log.log)("space key not found for share policy check", {
-              peerId,
-              documentId
-            }, {
-              F: __dxlog_file5,
-              L: 131,
-              S: this,
-              C: (f, a) => f(...a)
-            });
-            return false;
-          }
-          const authorizedDevices = this._authorizedDevices.get(import_keys.PublicKey.from(spaceKey));
-          const deviceKeyHex = peerMetadata?.dxos_deviceKey;
-          if (!deviceKeyHex) {
-            (0, import_log.log)("device key not found for share policy check", {
-              peerId,
-              documentId
-            }, {
-              F: __dxlog_file5,
-              L: 140,
-              S: this,
-              C: (f, a) => f(...a)
-            });
-            return false;
-          }
-          const deviceKey = import_keys.PublicKey.from(deviceKeyHex);
-          const isAuthorized = authorizedDevices?.has(deviceKey) ?? false;
-          (0, import_log.log)("share policy check", {
-            localPeer: this._peerId,
-            remotePeer: peerId,
-            documentId,
-            deviceKey,
-            spaceKey,
-            isAuthorized
-          }, {
-            F: __dxlog_file5,
-            L: 146,
-            S: this,
-            C: (f, a) => f(...a)
-          });
-          return isAuthorized;
-        } catch (err) {
-          import_log.log.catch(err, void 0, {
-            F: __dxlog_file5,
-            L: 156,
-            S: this,
-            C: (f, a) => f(...a)
-          });
-          return false;
-        }
-      }
+      sharePolicy: this._sharePolicy.bind(this)
     });
     this._clientNetwork.ready();
-    this._meshNetwork.ready();
     await this._echoNetworkAdapter.open();
     await this._clientNetwork.whenConnected();
     await this._echoNetworkAdapter.whenConnected();
@@ -884,6 +744,40 @@ var AutomergeHost = class {
   async removeReplicator(replicator) {
     await this._echoNetworkAdapter.removeReplicator(replicator);
   }
+  // TODO(dmaretskyi): Share based on HALO permissions and space affinity.
+  // Hosts, running in the worker, don't share documents unless requested by other peers.
+  // NOTE: If both peers return sharePolicy=false the replication will not happen
+  // https://github.com/automerge/automerge-repo/pull/292
+  async _sharePolicy(peerId, documentId) {
+    if (peerId.startsWith("client-")) {
+      return false;
+    }
+    if (!documentId) {
+      return false;
+    }
+    const doc = this._repo.handles[documentId]?.docSync();
+    if (!doc) {
+      const isRequested = this._requestedDocs.has(`automerge:${documentId}`);
+      (0, import_log.log)("doc share policy check", {
+        peerId,
+        documentId,
+        isRequested
+      }, {
+        F: __dxlog_file4,
+        L: 149,
+        S: this,
+        C: (f, a) => f(...a)
+      });
+      return isRequested;
+    }
+    const peerMetadata = this.repo.peerMetadataByPeerId[peerId];
+    if (peerMetadata?.dxos_peerSource === "EchoNetworkAdapter") {
+      return this._echoNetworkAdapter.shouldAdvertize(peerId, {
+        documentId
+      });
+    }
+    return false;
+  }
   async _beforeSave({ path, batch }) {
     const handle = this._repo.handles[path[0]];
     if (!handle) {
@@ -893,11 +787,13 @@ var AutomergeHost = class {
     if (!doc) {
       return;
     }
+    const spaceKey = getSpaceKeyFromDoc(doc) ?? void 0;
     const lastAvailableHash = (0, import_automerge.getHeads)(doc);
     const objectIds = Object.keys(doc.objects ?? {});
-    const encodedIds = objectIds.map((objectId) => import_protocols.idCodec.encode({
+    const encodedIds = objectIds.map((objectId) => import_protocols.objectPointerCodec.encode({
       documentId: handle.documentId,
-      objectId
+      objectId,
+      spaceKey
     }));
     const idToLastHash = new Map(encodedIds.map((id) => [
       id,
@@ -936,14 +832,25 @@ var AutomergeHost = class {
   _automergePeers() {
     return this._repo.peers;
   }
+  async _getContainingSpaceForDocument(documentId) {
+    const doc = this._repo.handles[documentId]?.docSync();
+    if (!doc) {
+      return null;
+    }
+    const spaceKeyHex = getSpaceKeyFromDoc(doc);
+    if (!spaceKeyHex) {
+      return null;
+    }
+    return import_keys.PublicKey.from(spaceKeyHex);
+  }
   //
   // Methods for client-services.
   //
   async flush({ states }) {
     await Promise.all(states?.map(async ({ heads, documentId }) => {
       (0, import_invariant.invariant)(heads, "heads are required for flush", {
-        F: __dxlog_file5,
-        L: 252,
+        F: __dxlog_file4,
+        L: 243,
         S: this,
         A: [
           "heads",
@@ -964,24 +871,6 @@ var AutomergeHost = class {
   async getHostInfo() {
     return this._clientNetwork.getHostInfo();
   }
-  //
-  // Mesh replication.
-  //
-  createExtension() {
-    return this._meshNetwork.createExtension();
-  }
-  authorizeDevice(spaceKey, deviceKey) {
-    (0, import_log.log)("authorizeDevice", {
-      spaceKey,
-      deviceKey
-    }, {
-      F: __dxlog_file5,
-      L: 282,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    (0, import_util.defaultMap)(this._authorizedDevices, spaceKey, () => new import_util.ComplexSet(import_keys.PublicKey.hash)).add(deviceKey);
-  }
 };
 _ts_decorate2([
   import_tracing.trace.info()
@@ -1039,7 +928,7 @@ function _ts_decorate3(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file6 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/automerge-doc-loader.ts";
+var __dxlog_file5 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/automerge-doc-loader.ts";
 var AutomergeDocumentLoaderImpl = class {
   constructor(_spaceKey, _repo) {
     this._spaceKey = _spaceKey;
@@ -1047,7 +936,7 @@ var AutomergeDocumentLoaderImpl = class {
     this._spaceRootDocHandle = null;
     this._objectDocumentHandles = /* @__PURE__ */ new Map();
     this._objectsPendingDocumentLoad = /* @__PURE__ */ new Set();
-    this.onObjectDocumentLoaded = new import_async5.Event();
+    this.onObjectDocumentLoaded = new import_async4.Event();
   }
   getAllHandles() {
     return this._spaceRootDocHandle != null ? [
@@ -1060,10 +949,10 @@ var AutomergeDocumentLoaderImpl = class {
       return;
     }
     if (!spaceState.rootUrl) {
-      import_log5.log.error("Database opened with no rootUrl", {
+      import_log4.log.error("Database opened with no rootUrl", {
         spaceKey: this._spaceKey
       }, {
-        F: __dxlog_file6,
+        F: __dxlog_file5,
         L: 70,
         S: this,
         C: (f, a) => f(...a)
@@ -1072,8 +961,8 @@ var AutomergeDocumentLoaderImpl = class {
     } else {
       const existingDocHandle = await this._initDocHandle(ctx, spaceState.rootUrl);
       const doc = existingDocHandle.docSync();
-      (0, import_invariant5.invariant)(doc, void 0, {
-        F: __dxlog_file6,
+      (0, import_invariant4.invariant)(doc, void 0, {
+        F: __dxlog_file5,
         L: 75,
         S: this,
         A: [
@@ -1094,8 +983,8 @@ var AutomergeDocumentLoaderImpl = class {
     let hasUrlsToLoad = false;
     const urlsToLoad = {};
     for (const objectId of objectIds) {
-      (0, import_invariant5.invariant)(this._spaceRootDocHandle, void 0, {
-        F: __dxlog_file6,
+      (0, import_invariant4.invariant)(this._spaceRootDocHandle, void 0, {
+        F: __dxlog_file5,
         L: 88,
         S: this,
         A: [
@@ -1107,8 +996,8 @@ var AutomergeDocumentLoaderImpl = class {
         continue;
       }
       const spaceRootDoc = this._spaceRootDocHandle.docSync();
-      (0, import_invariant5.invariant)(spaceRootDoc, void 0, {
-        F: __dxlog_file6,
+      (0, import_invariant4.invariant)(spaceRootDoc, void 0, {
+        F: __dxlog_file5,
         L: 93,
         S: this,
         A: [
@@ -1119,10 +1008,10 @@ var AutomergeDocumentLoaderImpl = class {
       const documentUrl = (spaceRootDoc.links ?? {})[objectId];
       if (documentUrl == null) {
         this._objectsPendingDocumentLoad.add(objectId);
-        import_log5.log.info("loading delayed until object links are initialized", {
+        import_log4.log.info("loading delayed until object links are initialized", {
           objectId
         }, {
-          F: __dxlog_file6,
+          F: __dxlog_file5,
           L: 97,
           S: this,
           C: (f, a) => f(...a)
@@ -1145,8 +1034,8 @@ var AutomergeDocumentLoaderImpl = class {
     linksAwaitingLoad.forEach(([objectId]) => this._objectsPendingDocumentLoad.delete(objectId));
   }
   getSpaceRootDocHandle() {
-    (0, import_invariant5.invariant)(this._spaceRootDocHandle, void 0, {
-      F: __dxlog_file6,
+    (0, import_invariant4.invariant)(this._spaceRootDocHandle, void 0, {
+      F: __dxlog_file5,
       L: 120,
       S: this,
       A: [
@@ -1157,8 +1046,8 @@ var AutomergeDocumentLoaderImpl = class {
     return this._spaceRootDocHandle;
   }
   createDocumentForObject(objectId) {
-    (0, import_invariant5.invariant)(this._spaceRootDocHandle, void 0, {
-      F: __dxlog_file6,
+    (0, import_invariant4.invariant)(this._spaceRootDocHandle, void 0, {
+      F: __dxlog_file5,
       L: 125,
       S: this,
       A: [
@@ -1197,11 +1086,11 @@ var AutomergeDocumentLoaderImpl = class {
       };
       const objectDocumentHandle = this._objectDocumentHandles.get(objectId);
       if (objectDocumentHandle != null && objectDocumentHandle.url !== automergeUrl) {
-        import_log5.log.warn("object already inlined in a different document, ignoring the link", {
+        import_log4.log.warn("object already inlined in a different document, ignoring the link", {
           ...logMeta,
           actualDocumentUrl: objectDocumentHandle.url
         }, {
-          F: __dxlog_file6,
+          F: __dxlog_file5,
           L: 155,
           S: this,
           C: (f, a) => f(...a)
@@ -1209,8 +1098,8 @@ var AutomergeDocumentLoaderImpl = class {
         continue;
       }
       if (objectDocumentHandle?.url === automergeUrl) {
-        import_log5.log.warn("object document was already loaded", logMeta, {
-          F: __dxlog_file6,
+        import_log4.log.warn("object document was already loaded", logMeta, {
+          F: __dxlog_file5,
           L: 162,
           S: this,
           C: (f, a) => f(...a)
@@ -1218,8 +1107,8 @@ var AutomergeDocumentLoaderImpl = class {
         continue;
       }
       const handle = this._repo.find(automergeUrl);
-      import_log5.log.debug("document loading triggered", logMeta, {
-        F: __dxlog_file6,
+      import_log4.log.debug("document loading triggered", logMeta, {
+        F: __dxlog_file5,
         L: 166,
         S: this,
         C: (f, a) => f(...a)
@@ -1238,11 +1127,11 @@ var AutomergeDocumentLoaderImpl = class {
         break;
       } catch (err) {
         if (`${err}`.includes("Timeout")) {
-          import_log5.log.info("wraparound", {
+          import_log4.log.info("wraparound", {
             id: docHandle.documentId,
             state: docHandle.state
           }, {
-            F: __dxlog_file6,
+            F: __dxlog_file5,
             L: 182,
             S: this,
             C: (f, a) => f(...a)
@@ -1283,8 +1172,8 @@ var AutomergeDocumentLoaderImpl = class {
         docUrl: handle.url
       };
       if (this.onObjectDocumentLoaded.listenerCount() === 0) {
-        import_log5.log.info("document loaded after all listeners were removed", logMeta, {
-          F: __dxlog_file6,
+        import_log4.log.info("document loaded after all listeners were removed", logMeta, {
+          F: __dxlog_file5,
           L: 218,
           S: this,
           C: (f, a) => f(...a)
@@ -1293,8 +1182,8 @@ var AutomergeDocumentLoaderImpl = class {
       }
       const objectDocHandle = this._objectDocumentHandles.get(objectId);
       if (objectDocHandle?.url !== handle.url) {
-        import_log5.log.warn("object was rebound while a document was loading, discarding handle", logMeta, {
-          F: __dxlog_file6,
+        import_log4.log.warn("object was rebound while a document was loading, discarding handle", logMeta, {
+          F: __dxlog_file5,
           L: 223,
           S: this,
           C: (f, a) => f(...a)
@@ -1307,13 +1196,13 @@ var AutomergeDocumentLoaderImpl = class {
       });
     } catch (err) {
       const shouldRetryLoading = this.onObjectDocumentLoaded.listenerCount() > 0;
-      import_log5.log.warn("failed to load a document", {
+      import_log4.log.warn("failed to load a document", {
         objectId,
         automergeUrl: handle.url,
         retryLoading: shouldRetryLoading,
         err
       }, {
-        F: __dxlog_file6,
+        F: __dxlog_file5,
         L: 229,
         S: this,
         C: (f, a) => f(...a)
@@ -1332,6 +1221,257 @@ _ts_decorate3([
 AutomergeDocumentLoaderImpl = _ts_decorate3([
   import_tracing2.trace.resource()
 ], AutomergeDocumentLoaderImpl);
+var __dxlog_file6 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/mesh-echo-replicator.ts";
+var MeshEchoReplicator = class {
+  constructor() {
+    this._connections = /* @__PURE__ */ new Set();
+    this._connectionsPerPeer = /* @__PURE__ */ new Map();
+    this._authorizedDevices = new import_util3.ComplexMap(import_keys2.PublicKey.hash);
+    this._context = null;
+  }
+  async connect(context) {
+    this._context = context;
+  }
+  async disconnect() {
+    for (const connection of this._connections) {
+      await connection.close();
+    }
+    this._connections.clear();
+    this._connectionsPerPeer.clear();
+    this._context = null;
+  }
+  createExtension() {
+    (0, import_invariant5.invariant)(this._context, void 0, {
+      F: __dxlog_file6,
+      L: 54,
+      S: this,
+      A: [
+        "this._context",
+        ""
+      ]
+    });
+    const connection = new MeshReplicatorConnection({
+      ownPeerId: this._context.peerId,
+      onRemoteConnected: async () => {
+        (0, import_log5.log)("onRemoteConnected", {
+          peerId: connection.peerId
+        }, {
+          F: __dxlog_file6,
+          L: 59,
+          S: this,
+          C: (f, a) => f(...a)
+        });
+        (0, import_invariant5.invariant)(this._context, void 0, {
+          F: __dxlog_file6,
+          L: 60,
+          S: this,
+          A: [
+            "this._context",
+            ""
+          ]
+        });
+        if (!this._connectionsPerPeer.has(connection.peerId)) {
+          this._connectionsPerPeer.set(connection.peerId, connection);
+          await connection.enable();
+          this._context.onConnectionOpen(connection);
+        }
+      },
+      onRemoteDisconnected: async () => {
+        (0, import_log5.log)("onRemoteDisconnected", {
+          peerId: connection.peerId
+        }, {
+          F: __dxlog_file6,
+          L: 69,
+          S: this,
+          C: (f, a) => f(...a)
+        });
+        this._context?.onConnectionClosed(connection);
+        await connection.disable();
+        this._connectionsPerPeer.delete(connection.peerId);
+        this._connections.delete(connection);
+      },
+      shouldAdvertize: async (params) => {
+        (0, import_log5.log)("shouldAdvertize", {
+          peerId: connection.peerId,
+          documentId: params.documentId
+        }, {
+          F: __dxlog_file6,
+          L: 76,
+          S: this,
+          C: (f, a) => f(...a)
+        });
+        (0, import_invariant5.invariant)(this._context, void 0, {
+          F: __dxlog_file6,
+          L: 77,
+          S: this,
+          A: [
+            "this._context",
+            ""
+          ]
+        });
+        try {
+          const spaceKey = await this._context.getContainingSpaceForDocument(params.documentId);
+          if (!spaceKey) {
+            (0, import_log5.log)("space key not found for share policy check", {
+              peerId: connection.peerId,
+              documentId: params.documentId
+            }, {
+              F: __dxlog_file6,
+              L: 81,
+              S: this,
+              C: (f, a) => f(...a)
+            });
+            return false;
+          }
+          const authorizedDevices = this._authorizedDevices.get(spaceKey);
+          if (!connection.remoteDeviceKey) {
+            (0, import_log5.log)("device key not found for share policy check", {
+              peerId: connection.peerId,
+              documentId: params.documentId
+            }, {
+              F: __dxlog_file6,
+              L: 91,
+              S: this,
+              C: (f, a) => f(...a)
+            });
+            return false;
+          }
+          const isAuthorized = authorizedDevices?.has(connection.remoteDeviceKey) ?? false;
+          (0, import_log5.log)("share policy check", {
+            localPeer: this._context.peerId,
+            remotePeer: connection.peerId,
+            documentId: params.documentId,
+            deviceKey: connection.remoteDeviceKey,
+            spaceKey,
+            isAuthorized
+          }, {
+            F: __dxlog_file6,
+            L: 99,
+            S: this,
+            C: (f, a) => f(...a)
+          });
+          return isAuthorized;
+        } catch (err) {
+          import_log5.log.catch(err, void 0, {
+            F: __dxlog_file6,
+            L: 109,
+            S: this,
+            C: (f, a) => f(...a)
+          });
+          return false;
+        }
+      }
+    });
+    this._connections.add(connection);
+    return connection.replicatorExtension;
+  }
+  authorizeDevice(spaceKey, deviceKey) {
+    (0, import_log5.log)("authorizeDevice", {
+      spaceKey,
+      deviceKey
+    }, {
+      F: __dxlog_file6,
+      L: 120,
+      S: this,
+      C: (f, a) => f(...a)
+    });
+    (0, import_util3.defaultMap)(this._authorizedDevices, spaceKey, () => new import_util3.ComplexSet(import_keys2.PublicKey.hash)).add(deviceKey);
+  }
+};
+var MeshReplicatorConnection = class extends import_context5.Resource {
+  constructor(_params) {
+    super();
+    this._params = _params;
+    this.remoteDeviceKey = null;
+    this._remotePeerId = null;
+    this._isEnabled = false;
+    let readableStreamController;
+    this.readable = new ReadableStream({
+      start: (controller) => {
+        readableStreamController = controller;
+        this._ctx.onDispose(() => controller.close());
+      }
+    });
+    this.writable = new WritableStream({
+      write: async (message, controller) => {
+        this.replicatorExtension.sendSyncMessage({
+          payload: import_automerge_repo4.cbor.encode(message)
+        }).catch((err) => {
+          controller.error(err);
+        });
+      }
+    });
+    this.replicatorExtension = new import_teleport_extension_automerge_replicator.AutomergeReplicator({
+      peerId: this._params.ownPeerId
+    }, {
+      onStartReplication: async (info, remotePeerId) => {
+        this.remoteDeviceKey = remotePeerId;
+        this._remotePeerId = info.id;
+        (0, import_log5.log)("onStartReplication", {
+          id: info.id,
+          thisPeerId: this.peerId,
+          remotePeerId: remotePeerId.toHex()
+        }, {
+          F: __dxlog_file6,
+          L: 185,
+          S: this,
+          C: (f, a) => f(...a)
+        });
+        await this._params.onRemoteConnected();
+      },
+      onSyncMessage: async ({ payload }) => {
+        if (!this._isEnabled) {
+          return;
+        }
+        const message = import_automerge_repo4.cbor.decode(payload);
+        readableStreamController.enqueue(message);
+      },
+      onClose: async () => {
+        if (!this._isEnabled) {
+          return;
+        }
+        await this._params.onRemoteDisconnected();
+      }
+    });
+  }
+  get peerId() {
+    (0, import_invariant5.invariant)(this._remotePeerId != null, "Remote peer has not connected yet.", {
+      F: __dxlog_file6,
+      L: 208,
+      S: this,
+      A: [
+        "this._remotePeerId != null",
+        "'Remote peer has not connected yet.'"
+      ]
+    });
+    return this._remotePeerId;
+  }
+  async shouldAdvertize(params) {
+    return this._params.shouldAdvertize(params);
+  }
+  /**
+  * Start exchanging messages with the remote peer.
+  * Call after the remote peer has connected.
+  */
+  async enable() {
+    (0, import_invariant5.invariant)(this._remotePeerId != null, "Remote peer has not connected yet.", {
+      F: __dxlog_file6,
+      L: 221,
+      S: this,
+      A: [
+        "this._remotePeerId != null",
+        "'Remote peer has not connected yet.'"
+      ]
+    });
+    this._isEnabled = true;
+  }
+  /**
+  * Stop exchanging messages with the remote peer.
+  */
+  async disable() {
+    this._isEnabled = false;
+  }
+};
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AuthExtension,
@@ -1344,7 +1484,7 @@ AutomergeDocumentLoaderImpl = _ts_decorate3([
   LocalHostNetworkAdapter,
   MOCK_AUTH_PROVIDER,
   MOCK_AUTH_VERIFIER,
-  MeshNetworkAdapter,
+  MeshEchoReplicator,
   MetadataStore,
   Pipeline,
   SnapshotManager,