@dxos/echo-pipeline 0.5.9-main.bf0ae3e → 0.5.9-main.bf3bb8f

package/dist/lib/node/index.cjs

@@ -18,69 +18,71 @@ var __copyProps = (to, from, except, desc) => {
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 var node_exports = {};
 __export(node_exports, {
-  AuthExtension: () => import_chunk_QPCNQ4ZK.AuthExtension,
-  AuthStatus: () => import_chunk_QPCNQ4ZK.AuthStatus,
+  AuthExtension: () => import_chunk_Y5U7UXEL.AuthExtension,
+  AuthStatus: () => import_chunk_Y5U7UXEL.AuthStatus,
   AutomergeDocumentLoaderImpl: () => AutomergeDocumentLoaderImpl,
   AutomergeHost: () => AutomergeHost,
-  DataServiceImpl: () => import_chunk_QPCNQ4ZK.DataServiceImpl,
+  CredentialRetrieverExtension: () => import_chunk_Y5U7UXEL.CredentialRetrieverExtension,
+  CredentialServerExtension: () => import_chunk_Y5U7UXEL.CredentialServerExtension,
+  DataServiceImpl: () => import_chunk_Y5U7UXEL.DataServiceImpl,
   LevelDBStorageAdapter: () => LevelDBStorageAdapter,
   LocalHostNetworkAdapter: () => LocalHostNetworkAdapter,
-  MOCK_AUTH_PROVIDER: () => import_chunk_QPCNQ4ZK.MOCK_AUTH_PROVIDER,
-  MOCK_AUTH_VERIFIER: () => import_chunk_QPCNQ4ZK.MOCK_AUTH_VERIFIER,
+  MOCK_AUTH_PROVIDER: () => import_chunk_Y5U7UXEL.MOCK_AUTH_PROVIDER,
+  MOCK_AUTH_VERIFIER: () => import_chunk_Y5U7UXEL.MOCK_AUTH_VERIFIER,
   MeshEchoReplicator: () => MeshEchoReplicator,
-  MetadataStore: () => import_chunk_QPCNQ4ZK.MetadataStore,
-  Pipeline: () => import_chunk_QPCNQ4ZK.Pipeline,
-  SnapshotManager: () => import_chunk_QPCNQ4ZK.SnapshotManager,
-  SnapshotStore: () => import_chunk_QPCNQ4ZK.SnapshotStore,
-  Space: () => import_chunk_QPCNQ4ZK.Space,
-  SpaceManager: () => import_chunk_QPCNQ4ZK.SpaceManager,
-  SpaceProtocol: () => import_chunk_QPCNQ4ZK.SpaceProtocol,
-  SpaceProtocolSession: () => import_chunk_QPCNQ4ZK.SpaceProtocolSession,
-  TimeframeClock: () => import_chunk_QPCNQ4ZK.TimeframeClock,
-  codec: () => import_chunk_QPCNQ4ZK.codec,
-  createIdFromSpaceKey: () => import_chunk_QPCNQ4ZK.createIdFromSpaceKey,
-  createMappedFeedWriter: () => import_chunk_QPCNQ4ZK.createMappedFeedWriter,
+  MetadataStore: () => import_chunk_Y5U7UXEL.MetadataStore,
+  Pipeline: () => import_chunk_Y5U7UXEL.Pipeline,
+  SnapshotManager: () => import_chunk_Y5U7UXEL.SnapshotManager,
+  SnapshotStore: () => import_chunk_Y5U7UXEL.SnapshotStore,
+  Space: () => import_chunk_Y5U7UXEL.Space,
+  SpaceManager: () => import_chunk_Y5U7UXEL.SpaceManager,
+  SpaceProtocol: () => import_chunk_Y5U7UXEL.SpaceProtocol,
+  SpaceProtocolSession: () => import_chunk_Y5U7UXEL.SpaceProtocolSession,
+  TimeframeClock: () => import_chunk_Y5U7UXEL.TimeframeClock,
+  codec: () => import_chunk_Y5U7UXEL.codec,
+  createIdFromSpaceKey: () => import_chunk_Y5U7UXEL.createIdFromSpaceKey,
+  createMappedFeedWriter: () => import_chunk_Y5U7UXEL.createMappedFeedWriter,
   encodingOptions: () => encodingOptions,
   getSpaceKeyFromDoc: () => getSpaceKeyFromDoc,
-  hasInvitationExpired: () => import_chunk_QPCNQ4ZK.hasInvitationExpired,
-  mapFeedIndexesToTimeframe: () => import_chunk_QPCNQ4ZK.mapFeedIndexesToTimeframe,
-  mapTimeframeToFeedIndexes: () => import_chunk_QPCNQ4ZK.mapTimeframeToFeedIndexes,
-  startAfter: () => import_chunk_QPCNQ4ZK.startAfter,
-  valueEncoding: () => import_chunk_QPCNQ4ZK.valueEncoding
+  hasInvitationExpired: () => import_chunk_Y5U7UXEL.hasInvitationExpired,
+  mapFeedIndexesToTimeframe: () => import_chunk_Y5U7UXEL.mapFeedIndexesToTimeframe,
+  mapTimeframeToFeedIndexes: () => import_chunk_Y5U7UXEL.mapTimeframeToFeedIndexes,
+  startAfter: () => import_chunk_Y5U7UXEL.startAfter,
+  valueEncoding: () => import_chunk_Y5U7UXEL.valueEncoding
 });
 module.exports = __toCommonJS(node_exports);
-var import_chunk_QPCNQ4ZK = require("./chunk-QPCNQ4ZK.cjs");
+var import_chunk_Y5U7UXEL = require("./chunk-Y5U7UXEL.cjs");
 var import_async = require("@dxos/async");
 var import_automerge = require("@dxos/automerge/automerge");
 var import_automerge_repo = require("@dxos/automerge/automerge-repo");
 var import_context = require("@dxos/context");
-var import_invariant = require("@dxos/invariant");
 var import_keys = require("@dxos/keys");
-var import_log = require("@dxos/log");
 var import_protocols = require("@dxos/protocols");
 var import_tracing = require("@dxos/tracing");
 var import_util = require("@dxos/util");
 var import_async2 = require("@dxos/async");
 var import_automerge_repo2 = require("@dxos/automerge/automerge-repo");
 var import_context2 = require("@dxos/context");
-var import_invariant2 = require("@dxos/invariant");
-var import_log2 = require("@dxos/log");
+var import_invariant = require("@dxos/invariant");
+var import_log = require("@dxos/log");
 var import_context3 = require("@dxos/context");
 var import_async3 = require("@dxos/async");
 var import_automerge_repo3 = require("@dxos/automerge/automerge-repo");
 var import_codec_protobuf = require("@dxos/codec-protobuf");
-var import_invariant3 = require("@dxos/invariant");
+var import_invariant2 = require("@dxos/invariant");
 var import_async4 = require("@dxos/async");
+var import_automerge_repo4 = require("@dxos/automerge/automerge-repo");
 var import_context4 = require("@dxos/context");
 var import_debug = require("@dxos/debug");
-var import_invariant4 = require("@dxos/invariant");
-var import_log3 = require("@dxos/log");
+var import_echo_protocol = require("@dxos/echo-protocol");
+var import_invariant3 = require("@dxos/invariant");
+var import_log2 = require("@dxos/log");
 var import_tracing2 = require("@dxos/tracing");
-var import_automerge_repo4 = require("@dxos/automerge/automerge-repo");
+var import_automerge_repo5 = require("@dxos/automerge/automerge-repo");
 var import_context5 = require("@dxos/context");
-var import_invariant5 = require("@dxos/invariant");
+var import_invariant4 = require("@dxos/invariant");
 var import_keys2 = require("@dxos/keys");
-var import_log4 = require("@dxos/log");
+var import_log3 = require("@dxos/log");
 var import_teleport_extension_automerge_replicator = require("@dxos/teleport-extension-automerge-replicator");
 var import_util2 = require("@dxos/util");
 function _ts_decorate(decorators, target, key, desc) {
@@ -115,7 +117,7 @@ var EchoNetworkAdapter = class extends import_automerge_repo2.NetworkAdapter {
     }
     connectionEntry.writer.write(message).catch((err) => {
       if (connectionEntry.isOpen) {
-        import_log2.log.catch(err, void 0, {
+        import_log.log.catch(err, void 0, {
           F: __dxlog_file,
           L: 49,
           S: this,
@@ -127,7 +129,7 @@ var EchoNetworkAdapter = class extends import_automerge_repo2.NetworkAdapter {
   disconnect() {
   }
   async open() {
-    (0, import_invariant2.invariant)(this._lifecycleState === import_context2.LifecycleState.CLOSED, void 0, {
+    (0, import_invariant.invariant)(this._lifecycleState === import_context2.LifecycleState.CLOSED, void 0, {
       F: __dxlog_file,
       L: 60,
       S: this,
@@ -137,7 +139,7 @@ var EchoNetworkAdapter = class extends import_automerge_repo2.NetworkAdapter {
       ]
     });
     this._lifecycleState = import_context2.LifecycleState.OPEN;
-    (0, import_log2.log)("emit ready", void 0, {
+    (0, import_log.log)("emit ready", void 0, {
       F: __dxlog_file,
       L: 63,
       S: this,
@@ -148,7 +150,7 @@ var EchoNetworkAdapter = class extends import_automerge_repo2.NetworkAdapter {
     });
   }
   async close() {
-    (0, import_invariant2.invariant)(this._lifecycleState === import_context2.LifecycleState.OPEN, void 0, {
+    (0, import_invariant.invariant)(this._lifecycleState === import_context2.LifecycleState.OPEN, void 0, {
       F: __dxlog_file,
       L: 71,
       S: this,
@@ -169,7 +171,7 @@ var EchoNetworkAdapter = class extends import_automerge_repo2.NetworkAdapter {
     });
   }
   async addReplicator(replicator) {
-    (0, import_invariant2.invariant)(this._lifecycleState === import_context2.LifecycleState.OPEN, void 0, {
+    (0, import_invariant.invariant)(this._lifecycleState === import_context2.LifecycleState.OPEN, void 0, {
       F: __dxlog_file,
       L: 87,
       S: this,
@@ -178,7 +180,7 @@ var EchoNetworkAdapter = class extends import_automerge_repo2.NetworkAdapter {
         ""
       ]
     });
-    (0, import_invariant2.invariant)(this.peerId, void 0, {
+    (0, import_invariant.invariant)(this.peerId, void 0, {
       F: __dxlog_file,
       L: 88,
       S: this,
@@ -187,7 +189,7 @@ var EchoNetworkAdapter = class extends import_automerge_repo2.NetworkAdapter {
         ""
       ]
     });
-    (0, import_invariant2.invariant)(!this._replicators.has(replicator), void 0, {
+    (0, import_invariant.invariant)(!this._replicators.has(replicator), void 0, {
       F: __dxlog_file,
       L: 89,
       S: this,
@@ -206,7 +208,7 @@ var EchoNetworkAdapter = class extends import_automerge_repo2.NetworkAdapter {
     });
   }
   async removeReplicator(replicator) {
-    (0, import_invariant2.invariant)(this._lifecycleState === import_context2.LifecycleState.OPEN, void 0, {
+    (0, import_invariant.invariant)(this._lifecycleState === import_context2.LifecycleState.OPEN, void 0, {
       F: __dxlog_file,
       L: 103,
       S: this,
@@ -215,7 +217,7 @@ var EchoNetworkAdapter = class extends import_automerge_repo2.NetworkAdapter {
         ""
       ]
     });
-    (0, import_invariant2.invariant)(this._replicators.has(replicator), void 0, {
+    (0, import_invariant.invariant)(this._replicators.has(replicator), void 0, {
       F: __dxlog_file,
       L: 104,
       S: this,
@@ -235,7 +237,7 @@ var EchoNetworkAdapter = class extends import_automerge_repo2.NetworkAdapter {
     return connection.connection.shouldAdvertize(params);
   }
   _onConnectionOpen(connection) {
-    (0, import_log2.log)("Connection opened", {
+    (0, import_log.log)("Connection opened", {
       peerId: connection.peerId
     }, {
       F: __dxlog_file,
@@ -243,7 +245,7 @@ var EchoNetworkAdapter = class extends import_automerge_repo2.NetworkAdapter {
       S: this,
       C: (f, a) => f(...a)
     });
-    (0, import_invariant2.invariant)(!this._connections.has(connection.peerId), void 0, {
+    (0, import_invariant.invariant)(!this._connections.has(connection.peerId), void 0, {
       F: __dxlog_file,
       L: 120,
       S: this,
@@ -272,7 +274,7 @@ var EchoNetworkAdapter = class extends import_automerge_repo2.NetworkAdapter {
         }
       } catch (err) {
         if (connectionEntry.isOpen) {
-          import_log2.log.catch(err, void 0, {
+          import_log.log.catch(err, void 0, {
             F: __dxlog_file,
             L: 139,
             S: this,
@@ -281,7 +283,7 @@ var EchoNetworkAdapter = class extends import_automerge_repo2.NetworkAdapter {
         }
       }
     });
-    (0, import_log2.log)("emit peer-candidate", {
+    (0, import_log.log)("emit peer-candidate", {
       peerId: connection.peerId
     }, {
       F: __dxlog_file,
@@ -296,7 +298,7 @@ var EchoNetworkAdapter = class extends import_automerge_repo2.NetworkAdapter {
   * TODO(y): replace with a proper API call when sharePolicy update becomes supported by automerge-repo
   */
   _onConnectionAuthScopeChanged(connection) {
-    (0, import_log2.log)("Connection auth scope changed", {
+    (0, import_log.log)("Connection auth scope changed", {
       peerId: connection.peerId
     }, {
       F: __dxlog_file,
@@ -305,7 +307,7 @@ var EchoNetworkAdapter = class extends import_automerge_repo2.NetworkAdapter {
       C: (f, a) => f(...a)
     });
     const entry = this._connections.get(connection.peerId);
-    (0, import_invariant2.invariant)(entry, void 0, {
+    (0, import_invariant.invariant)(entry, void 0, {
       F: __dxlog_file,
       L: 155,
       S: this,
@@ -320,7 +322,7 @@ var EchoNetworkAdapter = class extends import_automerge_repo2.NetworkAdapter {
     this._emitPeerCandidate(connection);
   }
   _onConnectionClosed(connection) {
-    (0, import_log2.log)("Connection closed", {
+    (0, import_log.log)("Connection closed", {
       peerId: connection.peerId
     }, {
       F: __dxlog_file,
@@ -329,7 +331,7 @@ var EchoNetworkAdapter = class extends import_automerge_repo2.NetworkAdapter {
       C: (f, a) => f(...a)
     });
     const entry = this._connections.get(connection.peerId);
-    (0, import_invariant2.invariant)(entry, void 0, {
+    (0, import_invariant.invariant)(entry, void 0, {
       F: __dxlog_file,
       L: 163,
       S: this,
@@ -342,13 +344,13 @@ var EchoNetworkAdapter = class extends import_automerge_repo2.NetworkAdapter {
     this.emit("peer-disconnected", {
       peerId: connection.peerId
     });
-    void entry.reader.cancel().catch((err) => import_log2.log.catch(err, void 0, {
+    void entry.reader.cancel().catch((err) => import_log.log.catch(err, void 0, {
       F: __dxlog_file,
       L: 168,
       S: this,
       C: (f, a) => f(...a)
     }));
-    void entry.writer.abort().catch((err) => import_log2.log.catch(err, void 0, {
+    void entry.writer.abort().catch((err) => import_log.log.catch(err, void 0, {
       F: __dxlog_file,
       L: 169,
       S: this,
@@ -359,10 +361,7 @@ var EchoNetworkAdapter = class extends import_automerge_repo2.NetworkAdapter {
   _emitPeerCandidate(connection) {
     this.emit("peer-candidate", {
       peerId: connection.peerId,
-      peerMetadata: {
-        // TODO(dmaretskyi): Refactor this.
-        dxos_peerSource: "EchoNetworkAdapter"
-      }
+      peerMetadata: createEchoPeerMetadata()
     });
   }
 };
@@ -378,6 +377,11 @@ _ts_decorate([
 _ts_decorate([
   import_async2.synchronized
 ], EchoNetworkAdapter.prototype, "removeReplicator", null);
+var createEchoPeerMetadata = () => ({
+  // TODO(dmaretskyi): Refactor this.
+  dxos_peerSource: "EchoNetworkAdapter"
+});
+var isEchoPeerMetadata = (metadata) => metadata?.dxos_peerSource === "EchoNetworkAdapter";
 var LevelDBStorageAdapter = class extends import_context3.Resource {
   constructor(_params) {
     super();
@@ -499,7 +503,7 @@ var LocalHostNetworkAdapter = class extends import_automerge_repo3.NetworkAdapte
   }
   send(message) {
     const peer = this._peers.get(message.targetId);
-    (0, import_invariant3.invariant)(peer, "Peer not found.", {
+    (0, import_invariant2.invariant)(peer, "Peer not found.", {
       F: __dxlog_file2,
       L: 51,
       S: this,
@@ -524,7 +528,7 @@ var LocalHostNetworkAdapter = class extends import_automerge_repo3.NetworkAdapte
   syncRepo({ id, syncMessage }) {
     const peerId = this._getPeerId(id);
     return new import_codec_protobuf.Stream(({ next, close }) => {
-      (0, import_invariant3.invariant)(!this._peers.has(peerId), "Peer already connected.", {
+      (0, import_invariant2.invariant)(!this._peers.has(peerId), "Peer already connected.", {
         F: __dxlog_file2,
         L: 73,
         S: this,
@@ -548,7 +552,7 @@ var LocalHostNetworkAdapter = class extends import_automerge_repo3.NetworkAdapte
           });
         }
       });
-      (0, import_invariant3.invariant)(this._isConnected, void 0, {
+      (0, import_invariant2.invariant)(this._isConnected, void 0, {
         F: __dxlog_file2,
         L: 90,
         S: this,
@@ -564,7 +568,7 @@ var LocalHostNetworkAdapter = class extends import_automerge_repo3.NetworkAdapte
     });
   }
   async sendSyncMessage({ id, syncMessage }) {
-    (0, import_invariant3.invariant)(this._isConnected, void 0, {
+    (0, import_invariant2.invariant)(this._isConnected, void 0, {
       F: __dxlog_file2,
       L: 99,
       S: this,
@@ -577,7 +581,7 @@ var LocalHostNetworkAdapter = class extends import_automerge_repo3.NetworkAdapte
     this.emit("message", message);
   }
   async getHostInfo() {
-    (0, import_invariant3.invariant)(this._isConnected, void 0, {
+    (0, import_invariant2.invariant)(this._isConnected, void 0, {
       F: __dxlog_file2,
       L: 105,
       S: this,
@@ -586,7 +590,7 @@ var LocalHostNetworkAdapter = class extends import_automerge_repo3.NetworkAdapte
         ""
       ]
     });
-    (0, import_invariant3.invariant)(this.peerId, "Peer id not set.", {
+    (0, import_invariant2.invariant)(this.peerId, "Peer id not set.", {
       F: __dxlog_file2,
       L: 106,
       S: this,
@@ -616,11 +620,13 @@ function _ts_decorate2(decorators, target, key, desc) {
 var __dxlog_file3 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/automerge-host.ts";
 var AutomergeHost = class {
   constructor({ db, indexMetadataStore }) {
-    this._ctx = new import_context.Context();
+    this._ctx = new import_context.Context(void 0, {
+      F: __dxlog_file3,
+      L: 71
+    });
     this._echoNetworkAdapter = new EchoNetworkAdapter({
       getContainingSpaceForDocument: this._getContainingSpaceForDocument.bind(this)
     });
-    this._requestedDocs = /* @__PURE__ */ new Set();
     this._storage = new LevelDBStorageAdapter({
       db,
       callbacks: {
@@ -656,6 +662,9 @@ var AutomergeHost = class {
     await this._echoNetworkAdapter.close();
     await this._ctx.dispose();
   }
+  /**
+  * @deprecated To be abstracted away.
+  */
   get repo() {
     return this._repo;
   }
@@ -665,6 +674,39 @@ var AutomergeHost = class {
   async removeReplicator(replicator) {
     await this._echoNetworkAdapter.removeReplicator(replicator);
   }
+  /**
+  * Loads the document handle from the repo and waits for it to be ready.
+  */
+  async loadDoc(ctx, documentId, opts) {
+    let handle;
+    if (typeof documentId === "string") {
+      handle = this._repo.handles[documentId];
+    }
+    if (!handle) {
+      handle = this._repo.find(documentId);
+    }
+    if (!handle.isReady()) {
+      if (!opts?.timeout) {
+        await (0, import_context.cancelWithContext)(ctx, handle.whenReady());
+      } else {
+        await (0, import_context.cancelWithContext)(ctx, (0, import_async.asyncTimeout)(handle.whenReady(), opts.timeout));
+      }
+    }
+    return handle;
+  }
+  /**
+  * Create new persisted document.
+  */
+  createDoc(initialValue, opts) {
+    if (opts?.preserveHistory) {
+      if (!(0, import_automerge.isAutomerge)(initialValue)) {
+        throw new TypeError("Initial value must be an Automerge document");
+      }
+      return this._repo.import((0, import_automerge.save)(initialValue));
+    } else {
+      return this._repo.create(initialValue);
+    }
+  }
   // TODO(dmaretskyi): Share based on HALO permissions and space affinity.
   // Hosts, running in the worker, don't share documents unless requested by other peers.
   // NOTE: If both peers return sharePolicy=false the replication will not happen
@@ -676,23 +718,8 @@ var AutomergeHost = class {
     if (!documentId) {
       return false;
     }
-    const doc = this._repo.handles[documentId]?.docSync();
-    if (!doc) {
-      const isRequested = this._requestedDocs.has(`automerge:${documentId}`);
-      (0, import_log.log)("doc share policy check", {
-        peerId,
-        documentId,
-        isRequested
-      }, {
-        F: __dxlog_file3,
-        L: 143,
-        S: this,
-        C: (f, a) => f(...a)
-      });
-      return isRequested;
-    }
     const peerMetadata = this.repo.peerMetadataByPeerId[peerId];
-    if (peerMetadata?.dxos_peerSource === "EchoNetworkAdapter") {
+    if (isEchoPeerMetadata(peerMetadata)) {
       return this._echoNetworkAdapter.shouldAdvertize(peerId, {
         documentId
       });
@@ -764,31 +791,36 @@ var AutomergeHost = class {
     }
     return import_keys.PublicKey.from(spaceKeyHex);
   }
-  //
-  // Methods for client-services.
-  //
+  /**
+  * Flush documents to disk.
+  */
   async flush({ states }) {
-    await Promise.all(states?.map(async ({ heads, documentId }) => {
-      (0, import_invariant.invariant)(heads, "heads are required for flush", {
-        F: __dxlog_file3,
-        L: 237,
-        S: this,
-        A: [
-          "heads",
-          "'heads are required for flush'"
-        ]
-      });
-      const handle = this.repo.handles[documentId] ?? this._repo.find(documentId);
-      await waitForHeads(handle, heads);
-    }) ?? []);
+    if (states) {
+      await Promise.all(states.map(async ({ heads, documentId }) => {
+        if (!heads) {
+          return;
+        }
+        const handle = this.repo.handles[documentId] ?? this._repo.find(documentId);
+        await waitForHeads(handle, heads);
+      }) ?? []);
+    }
     await this._repo.flush(states?.map(({ documentId }) => documentId));
   }
+  /**
+  * Host <-> Client sync.
+  */
   syncRepo(request) {
     return this._clientNetwork.syncRepo(request);
   }
+  /**
+  * Host <-> Client sync.
+  */
   sendSyncMessage(request) {
     return this._clientNetwork.sendSyncMessage(request);
   }
+  /**
+  * Host <-> Client sync.
+  */
   async getHostInfo() {
     return this._clientNetwork.getHostInfo();
   }
@@ -871,32 +903,32 @@ var AutomergeDocumentLoaderImpl = class {
       return;
     }
     if (!spaceState.rootUrl) {
-      import_log3.log.error("Database opened with no rootUrl", {
-        spaceId: this._spaceId
-      }, {
-        F: __dxlog_file4,
-        L: 72,
-        S: this,
-        C: (f, a) => f(...a)
-      });
-      this._createContextBoundSpaceRootDocument(ctx);
-    } else {
-      const existingDocHandle = await this._initDocHandle(ctx, spaceState.rootUrl);
-      const doc = existingDocHandle.docSync();
-      (0, import_invariant4.invariant)(doc, void 0, {
-        F: __dxlog_file4,
-        L: 77,
-        S: this,
-        A: [
-          "doc",
-          ""
-        ]
-      });
-      if (doc.access == null) {
-        this._initDocAccess(existingDocHandle);
-      }
-      this._spaceRootDocHandle = existingDocHandle;
+      throw new Error("Database opened with no rootUrl");
+    }
+    const existingDocHandle = await this._initDocHandle(ctx, spaceState.rootUrl);
+    const doc = existingDocHandle.docSync();
+    (0, import_invariant3.invariant)(doc, void 0, {
+      F: __dxlog_file4,
+      L: 84,
+      S: this,
+      A: [
+        "doc",
+        ""
+      ]
+    });
+    (0, import_invariant3.invariant)(doc.version === import_echo_protocol.SpaceDocVersion.CURRENT, void 0, {
+      F: __dxlog_file4,
+      L: 85,
+      S: this,
+      A: [
+        "doc.version === SpaceDocVersion.CURRENT",
+        ""
+      ]
+    });
+    if (doc.access == null) {
+      this._initDocAccess(existingDocHandle);
     }
+    this._spaceRootDocHandle = existingDocHandle;
   }
   loadObjectDocument(objectIdOrMany) {
     const objectIds = Array.isArray(objectIdOrMany) ? objectIdOrMany : [
@@ -905,9 +937,9 @@ var AutomergeDocumentLoaderImpl = class {
     let hasUrlsToLoad = false;
     const urlsToLoad = {};
     for (const objectId of objectIds) {
-      (0, import_invariant4.invariant)(this._spaceRootDocHandle, void 0, {
+      (0, import_invariant3.invariant)(this._spaceRootDocHandle, void 0, {
         F: __dxlog_file4,
-        L: 90,
+        L: 97,
         S: this,
         A: [
           "this._spaceRootDocHandle",
@@ -918,9 +950,9 @@ var AutomergeDocumentLoaderImpl = class {
         continue;
       }
       const spaceRootDoc = this._spaceRootDocHandle.docSync();
-      (0, import_invariant4.invariant)(spaceRootDoc, void 0, {
+      (0, import_invariant3.invariant)(spaceRootDoc, void 0, {
         F: __dxlog_file4,
-        L: 95,
+        L: 102,
         S: this,
         A: [
           "spaceRootDoc",
@@ -930,11 +962,11 @@ var AutomergeDocumentLoaderImpl = class {
       const documentUrl = (spaceRootDoc.links ?? {})[objectId];
       if (documentUrl == null) {
         this._objectsPendingDocumentLoad.add(objectId);
-        import_log3.log.info("loading delayed until object links are initialized", {
+        import_log2.log.info("loading delayed until object links are initialized", {
           objectId
         }, {
           F: __dxlog_file4,
-          L: 99,
+          L: 106,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -947,6 +979,32 @@ var AutomergeDocumentLoaderImpl = class {
       this._loadLinkedObjects(urlsToLoad);
     }
   }
+  getObjectDocumentId(objectId) {
+    (0, import_invariant3.invariant)(this._spaceRootDocHandle, void 0, {
+      F: __dxlog_file4,
+      L: 118,
+      S: this,
+      A: [
+        "this._spaceRootDocHandle",
+        ""
+      ]
+    });
+    const spaceRootDoc = this._spaceRootDocHandle.docSync();
+    (0, import_invariant3.invariant)(spaceRootDoc, void 0, {
+      F: __dxlog_file4,
+      L: 120,
+      S: this,
+      A: [
+        "spaceRootDoc",
+        ""
+      ]
+    });
+    if (spaceRootDoc.objects?.[objectId]) {
+      return this._spaceRootDocHandle.documentId;
+    }
+    const documentUrl = (spaceRootDoc.links ?? {})[objectId];
+    return documentUrl && (0, import_automerge_repo4.interpretAsDocumentId)(documentUrl);
+  }
   onObjectLinksUpdated(links) {
     if (!links) {
       return;
@@ -956,9 +1014,9 @@ var AutomergeDocumentLoaderImpl = class {
     linksAwaitingLoad.forEach(([objectId]) => this._objectsPendingDocumentLoad.delete(objectId));
   }
   getSpaceRootDocHandle() {
-    (0, import_invariant4.invariant)(this._spaceRootDocHandle, void 0, {
+    (0, import_invariant3.invariant)(this._spaceRootDocHandle, void 0, {
       F: __dxlog_file4,
-      L: 122,
+      L: 140,
       S: this,
       A: [
         "this._spaceRootDocHandle",
@@ -968,16 +1026,18 @@ var AutomergeDocumentLoaderImpl = class {
     return this._spaceRootDocHandle;
   }
   createDocumentForObject(objectId) {
-    (0, import_invariant4.invariant)(this._spaceRootDocHandle, void 0, {
+    (0, import_invariant3.invariant)(this._spaceRootDocHandle, void 0, {
       F: __dxlog_file4,
-      L: 127,
+      L: 145,
       S: this,
       A: [
         "this._spaceRootDocHandle",
         ""
       ]
     });
-    const spaceDocHandle = this._repo.create();
+    const spaceDocHandle = this._repo.create({
+      version: import_echo_protocol.SpaceDocVersion.CURRENT
+    });
     this._initDocAccess(spaceDocHandle);
     this.onObjectBoundToDocument(spaceDocHandle, objectId);
     this._spaceRootDocHandle.change((newDoc) => {
@@ -1008,30 +1068,30 @@ var AutomergeDocumentLoaderImpl = class {
       };
       const objectDocumentHandle = this._objectDocumentHandles.get(objectId);
       if (objectDocumentHandle != null && objectDocumentHandle.url !== automergeUrl) {
-        import_log3.log.warn("object already inlined in a different document, ignoring the link", {
+        import_log2.log.warn("object already inlined in a different document, ignoring the link", {
           ...logMeta,
           actualDocumentUrl: objectDocumentHandle.url
         }, {
           F: __dxlog_file4,
-          L: 157,
+          L: 177,
           S: this,
           C: (f, a) => f(...a)
         });
         continue;
       }
       if (objectDocumentHandle?.url === automergeUrl) {
-        import_log3.log.warn("object document was already loaded", logMeta, {
+        import_log2.log.warn("object document was already loaded", logMeta, {
           F: __dxlog_file4,
-          L: 164,
+          L: 184,
           S: this,
           C: (f, a) => f(...a)
         });
         continue;
       }
       const handle = this._repo.find(automergeUrl);
-      import_log3.log.debug("document loading triggered", logMeta, {
+      import_log2.log.debug("document loading triggered", logMeta, {
         F: __dxlog_file4,
-        L: 168,
+        L: 188,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -1049,12 +1109,12 @@ var AutomergeDocumentLoaderImpl = class {
         break;
       } catch (err) {
         if (`${err}`.includes("Timeout")) {
-          import_log3.log.info("wraparound", {
+          import_log2.log.info("wraparound", {
             id: docHandle.documentId,
             state: docHandle.state
           }, {
             F: __dxlog_file4,
-            L: 184,
+            L: 204,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -1068,14 +1128,6 @@ var AutomergeDocumentLoaderImpl = class {
     }
     return docHandle;
   }
-  _createContextBoundSpaceRootDocument(ctx) {
-    const docHandle = this._repo.create();
-    this._spaceRootDocHandle = docHandle;
-    ctx.onDispose(() => {
-      docHandle.delete();
-      this._spaceRootDocHandle = null;
-    });
-  }
   _initDocAccess(handle) {
     handle.change((newDoc) => {
       newDoc.access ??= {
@@ -1094,9 +1146,9 @@ var AutomergeDocumentLoaderImpl = class {
         docUrl: handle.url
       };
       if (this.onObjectDocumentLoaded.listenerCount() === 0) {
-        import_log3.log.info("document loaded after all listeners were removed", logMeta, {
+        import_log2.log.info("document loaded after all listeners were removed", logMeta, {
           F: __dxlog_file4,
-          L: 220,
+          L: 231,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -1104,9 +1156,9 @@ var AutomergeDocumentLoaderImpl = class {
       }
       const objectDocHandle = this._objectDocumentHandles.get(objectId);
       if (objectDocHandle?.url !== handle.url) {
-        import_log3.log.warn("object was rebound while a document was loading, discarding handle", logMeta, {
+        import_log2.log.warn("object was rebound while a document was loading, discarding handle", logMeta, {
           F: __dxlog_file4,
-          L: 225,
+          L: 236,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -1118,14 +1170,14 @@ var AutomergeDocumentLoaderImpl = class {
       });
     } catch (err) {
       const shouldRetryLoading = this.onObjectDocumentLoaded.listenerCount() > 0;
-      import_log3.log.warn("failed to load a document", {
+      import_log2.log.warn("failed to load a document", {
         objectId,
         automergeUrl: handle.url,
         retryLoading: shouldRetryLoading,
         err
       }, {
         F: __dxlog_file4,
-        L: 231,
+        L: 242,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -1163,7 +1215,7 @@ var MeshEchoReplicator = class {
     this._context = null;
   }
   createExtension() {
-    (0, import_invariant5.invariant)(this._context, void 0, {
+    (0, import_invariant4.invariant)(this._context, void 0, {
       F: __dxlog_file5,
       L: 54,
       S: this,
@@ -1175,7 +1227,7 @@ var MeshEchoReplicator = class {
     const connection = new MeshReplicatorConnection({
       ownPeerId: this._context.peerId,
       onRemoteConnected: async () => {
-        (0, import_log4.log)("onRemoteConnected", {
+        (0, import_log3.log)("onRemoteConnected", {
           peerId: connection.peerId
         }, {
           F: __dxlog_file5,
@@ -1183,7 +1235,7 @@ var MeshEchoReplicator = class {
           S: this,
           C: (f, a) => f(...a)
         });
-        (0, import_invariant5.invariant)(this._context, void 0, {
+        (0, import_invariant4.invariant)(this._context, void 0, {
           F: __dxlog_file5,
           L: 60,
           S: this,
@@ -1196,12 +1248,12 @@ var MeshEchoReplicator = class {
           this._context.onConnectionAuthScopeChanged(connection);
         } else {
           this._connectionsPerPeer.set(connection.peerId, connection);
-          await connection.enable();
           this._context.onConnectionOpen(connection);
+          await connection.enable();
         }
       },
       onRemoteDisconnected: async () => {
-        (0, import_log4.log)("onRemoteDisconnected", {
+        (0, import_log3.log)("onRemoteDisconnected", {
           peerId: connection.peerId
         }, {
           F: __dxlog_file5,
@@ -1210,12 +1262,12 @@ var MeshEchoReplicator = class {
           C: (f, a) => f(...a)
         });
         this._context?.onConnectionClosed(connection);
-        await connection.disable();
         this._connectionsPerPeer.delete(connection.peerId);
+        await connection.disable();
         this._connections.delete(connection);
       },
       shouldAdvertize: async (params) => {
-        (0, import_log4.log)("shouldAdvertize", {
+        (0, import_log3.log)("shouldAdvertize", {
           peerId: connection.peerId,
           documentId: params.documentId
         }, {
@@ -1224,7 +1276,7 @@ var MeshEchoReplicator = class {
           S: this,
           C: (f, a) => f(...a)
         });
-        (0, import_invariant5.invariant)(this._context, void 0, {
+        (0, import_invariant4.invariant)(this._context, void 0, {
           F: __dxlog_file5,
           L: 79,
           S: this,
@@ -1236,7 +1288,7 @@ var MeshEchoReplicator = class {
         try {
           const spaceKey = await this._context.getContainingSpaceForDocument(params.documentId);
           if (!spaceKey) {
-            (0, import_log4.log)("space key not found for share policy check", {
+            (0, import_log3.log)("space key not found for share policy check", {
               peerId: connection.peerId,
               documentId: params.documentId
             }, {
@@ -1249,7 +1301,7 @@ var MeshEchoReplicator = class {
           }
           const authorizedDevices = this._authorizedDevices.get(spaceKey);
           if (!connection.remoteDeviceKey) {
-            (0, import_log4.log)("device key not found for share policy check", {
+            (0, import_log3.log)("device key not found for share policy check", {
               peerId: connection.peerId,
               documentId: params.documentId
             }, {
@@ -1261,7 +1313,7 @@ var MeshEchoReplicator = class {
             return false;
           }
           const isAuthorized = authorizedDevices?.has(connection.remoteDeviceKey) ?? false;
-          (0, import_log4.log)("share policy check", {
+          (0, import_log3.log)("share policy check", {
             localPeer: this._context.peerId,
             remotePeer: connection.peerId,
             documentId: params.documentId,
@@ -1276,7 +1328,7 @@ var MeshEchoReplicator = class {
           });
           return isAuthorized;
         } catch (err) {
-          import_log4.log.catch(err, void 0, {
+          import_log3.log.catch(err, void 0, {
             F: __dxlog_file5,
             L: 111,
             S: this,
@@ -1290,7 +1342,7 @@ var MeshEchoReplicator = class {
     return connection.replicatorExtension;
   }
   authorizeDevice(spaceKey, deviceKey) {
-    (0, import_log4.log)("authorizeDevice", {
+    (0, import_log3.log)("authorizeDevice", {
       spaceKey,
       deviceKey
     }, {
@@ -1300,6 +1352,11 @@ var MeshEchoReplicator = class {
       C: (f, a) => f(...a)
     });
     (0, import_util2.defaultMap)(this._authorizedDevices, spaceKey, () => new import_util2.ComplexSet(import_keys2.PublicKey.hash)).add(deviceKey);
+    for (const connection of this._connections) {
+      if (connection.remoteDeviceKey && connection.remoteDeviceKey.equals(deviceKey)) {
+        this._context?.onConnectionAuthScopeChanged(connection);
+      }
+    }
   }
 };
 var MeshReplicatorConnection = class extends import_context5.Resource {
@@ -1319,7 +1376,7 @@ var MeshReplicatorConnection = class extends import_context5.Resource {
     this.writable = new WritableStream({
       write: async (message, controller) => {
         this.replicatorExtension.sendSyncMessage({
-          payload: import_automerge_repo4.cbor.encode(message)
+          payload: import_automerge_repo5.cbor.encode(message)
         }).catch((err) => {
           controller.error(err);
         });
@@ -1331,13 +1388,13 @@ var MeshReplicatorConnection = class extends import_context5.Resource {
       onStartReplication: async (info, remotePeerId) => {
         this.remoteDeviceKey = remotePeerId;
         this._remotePeerId = info.id;
-        (0, import_log4.log)("onStartReplication", {
+        (0, import_log3.log)("onStartReplication", {
           id: info.id,
           thisPeerId: this.peerId,
           remotePeerId: remotePeerId.toHex()
         }, {
           F: __dxlog_file5,
-          L: 187,
+          L: 192,
           S: this,
           C: (f, a) => f(...a)
         });
@@ -1347,7 +1404,7 @@ var MeshReplicatorConnection = class extends import_context5.Resource {
         if (!this._isEnabled) {
           return;
         }
-        const message = import_automerge_repo4.cbor.decode(payload);
+        const message = import_automerge_repo5.cbor.decode(payload);
         readableStreamController.enqueue(message);
       },
       onClose: async () => {
@@ -1359,9 +1416,9 @@ var MeshReplicatorConnection = class extends import_context5.Resource {
     });
   }
   get peerId() {
-    (0, import_invariant5.invariant)(this._remotePeerId != null, "Remote peer has not connected yet.", {
+    (0, import_invariant4.invariant)(this._remotePeerId != null, "Remote peer has not connected yet.", {
       F: __dxlog_file5,
-      L: 210,
+      L: 215,
       S: this,
       A: [
         "this._remotePeerId != null",
@@ -1378,9 +1435,9 @@ var MeshReplicatorConnection = class extends import_context5.Resource {
   * Call after the remote peer has connected.
   */
   async enable() {
-    (0, import_invariant5.invariant)(this._remotePeerId != null, "Remote peer has not connected yet.", {
+    (0, import_invariant4.invariant)(this._remotePeerId != null, "Remote peer has not connected yet.", {
       F: __dxlog_file5,
-      L: 223,
+      L: 228,
       S: this,
       A: [
         "this._remotePeerId != null",
@@ -1402,6 +1459,8 @@ var MeshReplicatorConnection = class extends import_context5.Resource {
   AuthStatus,
   AutomergeDocumentLoaderImpl,
   AutomergeHost,
+  CredentialRetrieverExtension,
+  CredentialServerExtension,
   DataServiceImpl,
   LevelDBStorageAdapter,
   LocalHostNetworkAdapter,