@dxos/echo-pipeline 0.6.3-main.9e4e207 → 0.6.3-next.2f65b78

package/dist/lib/node/{chunk-RLTLWNAY.cjs → chunk-RH6TDRML.cjs}

@@ -26,19 +26,16 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var chunk_RLTLWNAY_exports = {};
-__export(chunk_RLTLWNAY_exports, {
+var chunk_RH6TDRML_exports = {};
+__export(chunk_RH6TDRML_exports, {
   AuthExtension: () => AuthExtension,
   AuthStatus: () => AuthStatus,
-  AutomergeHost: () => AutomergeHost,
   CredentialRetrieverExtension: () => CredentialRetrieverExtension,
   CredentialServerExtension: () => CredentialServerExtension,
   DataServiceImpl: () => DataServiceImpl,
   DocumentsSynchronizer: () => DocumentsSynchronizer,
-  LevelDBStorageAdapter: () => LevelDBStorageAdapter,
   MOCK_AUTH_PROVIDER: () => MOCK_AUTH_PROVIDER,
   MOCK_AUTH_VERIFIER: () => MOCK_AUTH_VERIFIER,
-  MeshEchoReplicator: () => MeshEchoReplicator,
   MetadataStore: () => MetadataStore,
   Pipeline: () => Pipeline,
   SnapshotManager: () => SnapshotManager,
@@ -51,18 +48,13 @@ __export(chunk_RLTLWNAY_exports, {
   codec: () => codec,
   createIdFromSpaceKey: () => createIdFromSpaceKey,
   createMappedFeedWriter: () => createMappedFeedWriter,
-  deriveCollectionIdFromSpaceId: () => deriveCollectionIdFromSpaceId,
-  diffCollectionState: () => diffCollectionState,
-  encodingOptions: () => encodingOptions,
-  getSpaceIdFromCollectionId: () => getSpaceIdFromCollectionId,
-  getSpaceKeyFromDoc: () => getSpaceKeyFromDoc,
   hasInvitationExpired: () => hasInvitationExpired,
   mapFeedIndexesToTimeframe: () => mapFeedIndexesToTimeframe,
   mapTimeframeToFeedIndexes: () => mapTimeframeToFeedIndexes,
   startAfter: () => startAfter,
   valueEncoding: () => valueEncoding
 });
-module.exports = __toCommonJS(chunk_RLTLWNAY_exports);
+module.exports = __toCommonJS(chunk_RH6TDRML_exports);
 var import_hypercore = require("@dxos/hypercore");
 var import_protocols = require("@dxos/protocols");
 var import_invariant = require("@dxos/invariant");
@@ -77,111 +69,77 @@ var import_automerge = require("@dxos/automerge/automerge");
 var import_context2 = require("@dxos/context");
 var import_invariant2 = require("@dxos/invariant");
 var import_log = require("@dxos/log");
+var import_codec_protobuf = require("@dxos/codec-protobuf");
+var import_invariant3 = require("@dxos/invariant");
+var import_log2 = require("@dxos/log");
+var import_crc_32 = __toESM(require("crc-32"));
 var import_async2 = require("@dxos/async");
-var import_automerge2 = require("@dxos/automerge/automerge");
 var import_context3 = require("@dxos/context");
-var import_util = require("@dxos/util");
-var import_context4 = require("@dxos/context");
-var import_async3 = require("@dxos/async");
-var import_automerge3 = require("@dxos/automerge/automerge");
-var import_automerge_repo = require("@dxos/automerge/automerge-repo");
-var import_context5 = require("@dxos/context");
-var import_invariant3 = require("@dxos/invariant");
+var import_invariant4 = require("@dxos/invariant");
 var import_keys2 = require("@dxos/keys");
-var import_log2 = require("@dxos/log");
+var import_log3 = require("@dxos/log");
 var import_protocols4 = require("@dxos/protocols");
-var import_tracing = require("@dxos/tracing");
-var import_util2 = require("@dxos/util");
+var import_services = require("@dxos/protocols/proto/dxos/client/services");
+var import_util = require("@dxos/util");
+var import_async3 = require("@dxos/async");
+var import_debug = require("@dxos/debug");
+var import_log4 = require("@dxos/log");
+var import_timeframe = require("@dxos/timeframe");
 var import_async4 = require("@dxos/async");
-var import_automerge_repo2 = require("@dxos/automerge/automerge-repo");
-var import_context6 = require("@dxos/context");
-var import_invariant4 = require("@dxos/invariant");
-var import_log3 = require("@dxos/log");
-var import_util3 = require("@dxos/util");
-var import_indexing = require("@dxos/indexing");
+var import_context4 = require("@dxos/context");
+var import_debug2 = require("@dxos/debug");
+var import_feed_store = require("@dxos/feed-store");
 var import_invariant5 = require("@dxos/invariant");
 var import_keys3 = require("@dxos/keys");
+var import_log5 = require("@dxos/log");
+var import_timeframe2 = require("@dxos/timeframe");
+var import_util2 = require("@dxos/util");
+var import_invariant6 = require("@dxos/invariant");
+var import_log6 = require("@dxos/log");
 var import_async5 = require("@dxos/async");
-var import_context7 = require("@dxos/context");
+var import_context5 = require("@dxos/context");
 var import_crypto2 = require("@dxos/crypto");
-var import_invariant6 = require("@dxos/invariant");
-var import_log4 = require("@dxos/log");
+var import_invariant7 = require("@dxos/invariant");
+var import_log7 = require("@dxos/log");
 var import_protocols5 = require("@dxos/protocols");
 var import_teleport = require("@dxos/teleport");
 var import_async6 = require("@dxos/async");
-var import_debug = require("@dxos/debug");
-var import_log5 = require("@dxos/log");
-var import_timeframe = require("@dxos/timeframe");
-var import_async7 = require("@dxos/async");
-var import_context8 = require("@dxos/context");
-var import_debug2 = require("@dxos/debug");
-var import_feed_store = require("@dxos/feed-store");
-var import_invariant7 = require("@dxos/invariant");
-var import_keys4 = require("@dxos/keys");
-var import_log6 = require("@dxos/log");
-var import_timeframe2 = require("@dxos/timeframe");
-var import_util4 = require("@dxos/util");
-var import_invariant8 = require("@dxos/invariant");
-var import_log7 = require("@dxos/log");
-var import_async8 = require("@dxos/async");
-var import_context9 = require("@dxos/context");
+var import_context6 = require("@dxos/context");
 var import_crypto3 = require("@dxos/crypto");
-var import_invariant9 = require("@dxos/invariant");
-var import_keys5 = require("@dxos/keys");
+var import_invariant8 = require("@dxos/invariant");
+var import_keys4 = require("@dxos/keys");
 var import_log8 = require("@dxos/log");
 var import_credentials = require("@dxos/protocols/proto/dxos/halo/credentials");
-var import_tracing2 = require("@dxos/tracing");
-var import_util5 = require("@dxos/util");
-var import_async9 = require("@dxos/async");
-var import_context10 = require("@dxos/context");
+var import_tracing = require("@dxos/tracing");
+var import_util3 = require("@dxos/util");
+var import_async7 = require("@dxos/async");
+var import_context7 = require("@dxos/context");
 var import_credentials2 = require("@dxos/credentials");
-var import_keys6 = require("@dxos/keys");
+var import_keys5 = require("@dxos/keys");
 var import_log9 = require("@dxos/log");
 var import_credentials3 = require("@dxos/protocols/proto/dxos/halo/credentials");
 var import_timeframe3 = require("@dxos/timeframe");
-var import_tracing3 = require("@dxos/tracing");
-var import_util6 = require("@dxos/util");
-var import_async10 = require("@dxos/async");
-var import_context11 = require("@dxos/context");
+var import_tracing2 = require("@dxos/tracing");
+var import_util4 = require("@dxos/util");
+var import_async8 = require("@dxos/async");
+var import_context8 = require("@dxos/context");
 var import_protocols6 = require("@dxos/protocols");
 var import_teleport2 = require("@dxos/teleport");
 var import_crypto4 = require("@dxos/crypto");
-var import_keys7 = require("@dxos/keys");
+var import_keys6 = require("@dxos/keys");
 var import_log10 = require("@dxos/log");
 var import_network_manager = require("@dxos/network-manager");
 var import_teleport3 = require("@dxos/teleport");
 var import_teleport_extension_object_sync = require("@dxos/teleport-extension-object-sync");
 var import_teleport_extension_replicator = require("@dxos/teleport-extension-replicator");
-var import_tracing4 = require("@dxos/tracing");
-var import_util7 = require("@dxos/util");
-var import_async11 = require("@dxos/async");
+var import_tracing3 = require("@dxos/tracing");
+var import_util5 = require("@dxos/util");
+var import_async9 = require("@dxos/async");
 var import_debug3 = require("@dxos/debug");
-var import_keys8 = require("@dxos/keys");
+var import_keys7 = require("@dxos/keys");
 var import_log11 = require("@dxos/log");
 var import_protocols7 = require("@dxos/protocols");
-var import_util8 = require("@dxos/util");
-var import_codec_protobuf = require("@dxos/codec-protobuf");
-var import_invariant10 = require("@dxos/invariant");
-var import_keys9 = require("@dxos/keys");
-var import_log12 = require("@dxos/log");
-var import_invariant11 = require("@dxos/invariant");
-var import_keys10 = require("@dxos/keys");
-var import_log13 = require("@dxos/log");
-var import_util9 = require("@dxos/util");
-var import_automerge_repo3 = require("@dxos/automerge/automerge-repo");
-var import_context12 = require("@dxos/context");
-var import_invariant12 = require("@dxos/invariant");
-var import_log14 = require("@dxos/log");
-var import_teleport_extension_automerge_replicator = require("@dxos/teleport-extension-automerge-replicator");
-var import_crc_32 = __toESM(require("crc-32"));
-var import_async12 = require("@dxos/async");
-var import_context13 = require("@dxos/context");
-var import_invariant13 = require("@dxos/invariant");
-var import_keys11 = require("@dxos/keys");
-var import_log15 = require("@dxos/log");
-var import_protocols8 = require("@dxos/protocols");
-var import_services = require("@dxos/protocols/proto/dxos/client/services");
-var import_util10 = require("@dxos/util");
+var import_util6 = require("@dxos/util");
 var codec = import_protocols.schema.getCodecForType("dxos.echo.feed.FeedMessage");
 var valueEncoding = (0, import_hypercore.createCodecEncoding)(codec);
 var __dxlog_file = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/common/feeds.ts";
@@ -413,241 +371,92 @@ var DocumentsSynchronizer = class extends import_context2.Resource {
     });
   }
 };
-var MIN_QUERY_INTERVAL = 5e3;
-var POLL_INTERVAL = 3e4;
-var CollectionSynchronizer = class extends import_context3.Resource {
+var __dxlog_file3 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/db-host/data-service.ts";
+var DataServiceImpl = class {
   constructor(params) {
-    super();
-    this._perCollectionStates = /* @__PURE__ */ new Map();
-    this._connectedPeers = /* @__PURE__ */ new Set();
-    this.remoteStateUpdated = new import_async2.Event();
-    this._sendCollectionState = params.sendCollectionState;
-    this._queryCollectionState = params.queryCollectionState;
-    this._shouldSyncCollection = params.shouldSyncCollection;
+    this._subscriptions = /* @__PURE__ */ new Map();
+    this._automergeHost = params.automergeHost;
+    this._updateIndexes = params.updateIndexes;
   }
-  async _open(ctx) {
-    (0, import_async2.scheduleTaskInterval)(this._ctx, async () => {
-      for (const collectionId of this._perCollectionStates.keys()) {
-        this.refreshCollection(collectionId);
-        await (0, import_async2.asyncReturn)();
-      }
-    }, POLL_INTERVAL);
-  }
-  getRegisteredCollectionIds() {
-    return [
-      ...this._perCollectionStates.keys()
-    ];
-  }
-  getLocalCollectionState(collectionId) {
-    return this._getPerCollectionState(collectionId).localState;
-  }
-  setLocalCollectionState(collectionId, state) {
-    this._getPerCollectionState(collectionId).localState = state;
-    queueMicrotask(async () => {
-      if (!this._ctx.disposed) {
-        this._refreshInterestedPeers(collectionId);
-        this.refreshCollection(collectionId);
-      }
+  subscribe(request) {
+    return new import_codec_protobuf.Stream(({ next, ready }) => {
+      const synchronizer = new DocumentsSynchronizer({
+        repo: this._automergeHost.repo,
+        sendUpdates: (updates) => next(updates)
+      });
+      synchronizer.open().then(() => {
+        this._subscriptions.set(request.subscriptionId, synchronizer);
+        ready();
+      }).catch((err) => import_log2.log.catch(err, void 0, {
+        F: __dxlog_file3,
+        L: 62,
+        S: this,
+        C: (f, a) => f(...a)
+      }));
+      return () => synchronizer.close();
     });
   }
-  getRemoteCollectionStates(collectionId) {
-    return this._getPerCollectionState(collectionId).remoteStates;
-  }
-  refreshCollection(collectionId) {
-    let scheduleAnotherRefresh = false;
-    const state = this._getPerCollectionState(collectionId);
-    for (const peerId of this._connectedPeers) {
-      if (state.interestedPeers.has(peerId)) {
-        const lastQueried = state.lastQueried.get(peerId) ?? 0;
-        if (Date.now() - lastQueried > MIN_QUERY_INTERVAL) {
-          state.lastQueried.set(peerId, Date.now());
-          this._queryCollectionState(collectionId, peerId);
-        } else {
-          scheduleAnotherRefresh = true;
-        }
-      }
-    }
-    if (scheduleAnotherRefresh) {
-      (0, import_async2.scheduleTask)(this._ctx, () => this.refreshCollection(collectionId), MIN_QUERY_INTERVAL);
-    }
-  }
-  /**
-  * Callback when a connection to a peer is established.
-  */
-  onConnectionOpen(peerId) {
-    this._connectedPeers.add(peerId);
-    queueMicrotask(async () => {
-      if (this._ctx.disposed) {
-        return;
-      }
-      for (const [collectionId, state] of this._perCollectionStates.entries()) {
-        if (this._shouldSyncCollection(collectionId, peerId)) {
-          state.interestedPeers.add(peerId);
-          state.lastQueried.set(peerId, Date.now());
-          this._queryCollectionState(collectionId, peerId);
-        }
-      }
+  async updateSubscription(request) {
+    const synchronizer = this._subscriptions.get(request.subscriptionId);
+    (0, import_invariant3.invariant)(synchronizer, "Subscription not found", {
+      F: __dxlog_file3,
+      L: 69,
+      S: this,
+      A: [
+        "synchronizer",
+        "'Subscription not found'"
+      ]
     });
-  }
-  /**
-  * Callback when a connection to a peer is closed.
-  */
-  onConnectionClosed(peerId) {
-    this._connectedPeers.delete(peerId);
-    for (const perCollectionState of this._perCollectionStates.values()) {
-      perCollectionState.remoteStates.delete(peerId);
-    }
-  }
-  /**
-  * Callback when a peer queries the state of a collection.
-  */
-  onCollectionStateQueried(collectionId, peerId) {
-    const perCollectionState = this._getPerCollectionState(collectionId);
-    if (perCollectionState.localState) {
-      this._sendCollectionState(collectionId, peerId, perCollectionState.localState);
+    if (request.addIds?.length) {
+      await synchronizer.addDocuments(request.addIds);
     }
-  }
-  /**
-  * Callback when a peer sends the state of a collection.
-  */
-  onRemoteStateReceived(collectionId, peerId, state) {
-    const perCollectionState = this._getPerCollectionState(collectionId);
-    perCollectionState.remoteStates.set(peerId, state);
-    this.remoteStateUpdated.emit({
-      peerId,
-      collectionId
-    });
-  }
-  _getPerCollectionState(collectionId) {
-    return (0, import_util.defaultMap)(this._perCollectionStates, collectionId, () => ({
-      localState: void 0,
-      remoteStates: /* @__PURE__ */ new Map(),
-      interestedPeers: /* @__PURE__ */ new Set(),
-      lastQueried: /* @__PURE__ */ new Map()
-    }));
-  }
-  _refreshInterestedPeers(collectionId) {
-    for (const peerId of this._connectedPeers) {
-      if (this._shouldSyncCollection(collectionId, peerId)) {
-        this._getPerCollectionState(collectionId).interestedPeers.add(peerId);
-      } else {
-        this._getPerCollectionState(collectionId).interestedPeers.delete(peerId);
-      }
+    if (request.removeIds?.length) {
+      await synchronizer.removeDocuments(request.removeIds);
     }
   }
-};
-var diffCollectionState = (local, remote) => {
-  const allDocuments = /* @__PURE__ */ new Set([
-    ...Object.keys(local.documents),
-    ...Object.keys(remote.documents)
-  ]);
-  const different = [];
-  for (const documentId of allDocuments) {
-    if (!local.documents[documentId] || !remote.documents[documentId] || !import_automerge2.next.equals(local.documents[documentId], remote.documents[documentId])) {
-      different.push(documentId);
+  async update(request) {
+    if (!request.updates) {
+      return;
     }
+    const synchronizer = this._subscriptions.get(request.subscriptionId);
+    (0, import_invariant3.invariant)(synchronizer, "Subscription not found", {
+      F: __dxlog_file3,
+      L: 84,
+      S: this,
+      A: [
+        "synchronizer",
+        "'Subscription not found'"
+      ]
+    });
+    synchronizer.update(request.updates);
   }
-  return {
-    different
-  };
-};
-var LevelDBStorageAdapter = class extends import_context4.Resource {
-  constructor(_params) {
-    super();
-    this._params = _params;
+  async flush(request) {
+    await this._automergeHost.flush(request);
   }
-  async load(keyArray) {
-    try {
-      if (this._lifecycleState !== import_context4.LifecycleState.OPEN) {
-        return void 0;
-      }
-      return await this._params.db.get(keyArray, {
-        ...encodingOptions
-      });
-    } catch (err) {
-      if (isLevelDbNotFoundError(err)) {
-        return void 0;
+  async getDocumentHeads(request) {
+    const entries = await Promise.all(request.documentIds?.map(async (documentId) => {
+      const heads = await this._automergeHost.getHeads(documentId);
+      return {
+        documentId,
+        heads
+      };
+    }) ?? []);
+    return {
+      heads: {
+        entries
       }
-      throw err;
-    }
-  }
-  async save(keyArray, binary) {
-    if (this._lifecycleState !== import_context4.LifecycleState.OPEN) {
-      return void 0;
-    }
-    const batch = this._params.db.batch();
-    await this._params.callbacks?.beforeSave?.({
-      path: keyArray,
-      batch
-    });
-    batch.put(keyArray, Buffer.from(binary), {
-      ...encodingOptions
-    });
-    await batch.write();
-    await this._params.callbacks?.afterSave?.(keyArray);
+    };
   }
-  async remove(keyArray) {
-    if (this._lifecycleState !== import_context4.LifecycleState.OPEN) {
-      return void 0;
-    }
-    await this._params.db.del(keyArray, {
-      ...encodingOptions
-    });
+  async waitUntilHeadsReplicated(request, options) {
+    await this._automergeHost.waitUntilHeadsReplicated(request.heads);
   }
-  async loadRange(keyPrefix) {
-    if (this._lifecycleState !== import_context4.LifecycleState.OPEN) {
-      return [];
-    }
-    const result = [];
-    for await (const [key, value] of this._params.db.iterator({
-      gte: keyPrefix,
-      lte: [
-        ...keyPrefix,
-        "\uFFFF"
-      ],
-      ...encodingOptions
-    })) {
-      result.push({
-        key,
-        data: value
-      });
-    }
-    return result;
+  async reIndexHeads(request, options) {
+    await this._automergeHost.reIndexHeads(request.documentIds ?? []);
   }
-  async removeRange(keyPrefix) {
-    if (this._lifecycleState !== import_context4.LifecycleState.OPEN) {
-      return void 0;
-    }
-    const batch = this._params.db.batch();
-    for await (const [key] of this._params.db.iterator({
-      gte: keyPrefix,
-      lte: [
-        ...keyPrefix,
-        "\uFFFF"
-      ],
-      ...encodingOptions
-    })) {
-      batch.del(key, {
-        ...encodingOptions
-      });
-    }
-    await batch.write();
+  async updateIndexes() {
+    await this._updateIndexes();
   }
 };
-var keyEncoder = {
-  encode: (key) => Buffer.from(key.map((k) => k.replaceAll("%", "%25").replaceAll("-", "%2D")).join("-")),
-  decode: (key) => Buffer.from(key).toString().split("-").map((k) => k.replaceAll("%2D", "-").replaceAll("%25", "%")),
-  format: "buffer"
-};
-var encodingOptions = {
-  keyEncoding: keyEncoder,
-  valueEncoding: "buffer"
-};
-var isLevelDbNotFoundError = (err) => err.code === "LEVEL_NOT_FOUND";
-var MESSAGE_TYPE_COLLECTION_QUERY = "collection-query";
-var isCollectionQueryMessage = (message) => message.type === MESSAGE_TYPE_COLLECTION_QUERY;
-var MESSAGE_TYPE_COLLECTION_STATE = "collection-state";
-var isCollectionStateMessage = (message) => message.type === MESSAGE_TYPE_COLLECTION_STATE;
 function _ts_decorate(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
@@ -658,1049 +467,446 @@ function _ts_decorate(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file3 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/echo-network-adapter.ts";
-var EchoNetworkAdapter = class extends import_automerge_repo2.NetworkAdapter {
-  constructor(_params) {
-    super();
-    this._params = _params;
-    this._replicators = /* @__PURE__ */ new Set();
-    this._connections = /* @__PURE__ */ new Map();
-    this._lifecycleState = import_context6.LifecycleState.CLOSED;
-    this._connected = new import_async4.Trigger();
-  }
-  connect(peerId, peerMetadata) {
-    this.peerId = peerId;
-    this.peerMetadata = peerMetadata;
-    this._connected.wake();
-  }
-  send(message) {
-    const connectionEntry = this._connections.get(message.targetId);
-    if (!connectionEntry) {
-      throw new Error("Connection not found.");
-    }
-    connectionEntry.writer.write(message).catch((err) => {
-      if (connectionEntry.isOpen) {
-        import_log3.log.catch(err, void 0, {
-          F: __dxlog_file3,
-          L: 63,
-          S: this,
-          C: (f, a) => f(...a)
-        });
-      }
+var __dxlog_file4 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/metadata/metadata-store.ts";
+var EXPIRED_INVITATION_CLEANUP_INTERVAL = 60 * 60 * 1e3;
+var emptyEchoMetadata = () => ({
+  version: import_protocols4.STORAGE_VERSION,
+  spaces: [],
+  created: /* @__PURE__ */ new Date(),
+  updated: /* @__PURE__ */ new Date()
+});
+var emptyLargeSpaceMetadata = () => ({});
+var EchoMetadata = import_protocols4.schema.getCodecForType("dxos.echo.metadata.EchoMetadata");
+var LargeSpaceMetadata = import_protocols4.schema.getCodecForType("dxos.echo.metadata.LargeSpaceMetadata");
+var MetadataStore = class {
+  constructor(directory) {
+    this._metadata = emptyEchoMetadata();
+    this._spaceLargeMetadata = new import_util.ComplexMap(import_keys2.PublicKey.hash);
+    this._metadataFile = void 0;
+    this.update = new import_async2.Event();
+    this._invitationCleanupCtx = new import_context3.Context(void 0, {
+      F: __dxlog_file4,
+      L: 53
     });
+    this._directory = directory;
   }
-  disconnect() {
-  }
-  async open() {
-    if (this._lifecycleState === import_context6.LifecycleState.OPEN) {
-      return;
-    }
-    this._lifecycleState = import_context6.LifecycleState.OPEN;
-    (0, import_log3.log)("emit ready", void 0, {
-      F: __dxlog_file3,
-      L: 79,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    this.emit("ready", {
-      network: this
-    });
+  get metadata() {
+    return this._metadata;
   }
-  async close() {
-    if (this._lifecycleState === import_context6.LifecycleState.CLOSED) {
-      return this;
-    }
-    for (const replicator of this._replicators) {
-      await replicator.disconnect();
-    }
-    this._replicators.clear();
-    this._lifecycleState = import_context6.LifecycleState.CLOSED;
+  get version() {
+    return this._metadata.version ?? 0;
   }
-  async whenConnected() {
-    await this._connected.wait({
-      timeout: 1e4
-    });
+  /**
+  * Returns a list of currently saved spaces. The list and objects in it can be modified addSpace and
+  * addSpaceFeed functions.
+  */
+  get spaces() {
+    return this._metadata.spaces ?? [];
   }
-  async addReplicator(replicator) {
-    (0, import_invariant4.invariant)(this._lifecycleState === import_context6.LifecycleState.OPEN, void 0, {
-      F: __dxlog_file3,
-      L: 105,
-      S: this,
-      A: [
-        "this._lifecycleState === LifecycleState.OPEN",
-        ""
-      ]
-    });
-    (0, import_invariant4.invariant)(this.peerId, void 0, {
-      F: __dxlog_file3,
-      L: 106,
-      S: this,
-      A: [
-        "this.peerId",
-        ""
-      ]
-    });
-    (0, import_invariant4.invariant)(!this._replicators.has(replicator), void 0, {
-      F: __dxlog_file3,
-      L: 107,
-      S: this,
-      A: [
-        "!this._replicators.has(replicator)",
-        ""
-      ]
-    });
-    this._replicators.add(replicator);
-    await replicator.connect({
-      peerId: this.peerId,
-      onConnectionOpen: this._onConnectionOpen.bind(this),
-      onConnectionClosed: this._onConnectionClosed.bind(this),
-      onConnectionAuthScopeChanged: this._onConnectionAuthScopeChanged.bind(this),
-      getContainingSpaceForDocument: this._params.getContainingSpaceForDocument
-    });
-  }
-  async removeReplicator(replicator) {
-    (0, import_invariant4.invariant)(this._lifecycleState === import_context6.LifecycleState.OPEN, void 0, {
-      F: __dxlog_file3,
-      L: 121,
-      S: this,
-      A: [
-        "this._lifecycleState === LifecycleState.OPEN",
-        ""
-      ]
-    });
-    (0, import_invariant4.invariant)(this._replicators.has(replicator), void 0, {
-      F: __dxlog_file3,
-      L: 122,
-      S: this,
-      A: [
-        "this._replicators.has(replicator)",
-        ""
-      ]
-    });
-    await replicator.disconnect();
-    this._replicators.delete(replicator);
-  }
-  async shouldAdvertise(peerId, params) {
-    const connection = this._connections.get(peerId);
-    if (!connection) {
-      return false;
-    }
-    return connection.connection.shouldAdvertise(params);
-  }
-  shouldSyncCollection(peerId, params) {
-    const connection = this._connections.get(peerId);
-    if (!connection) {
-      return false;
-    }
-    return connection.connection.shouldSyncCollection(params);
-  }
-  queryCollectionState(collectionId, targetId) {
-    const message = {
-      type: "collection-query",
-      senderId: this.peerId,
-      targetId,
-      collectionId
-    };
-    this.send(message);
-  }
-  sendCollectionState(collectionId, targetId, state) {
-    const message = {
-      type: "collection-state",
-      senderId: this.peerId,
-      targetId,
-      collectionId,
-      state
-    };
-    this.send(message);
-  }
-  // TODO(dmaretskyi): Remove.
-  getPeersInterestedInCollection(collectionId) {
-    return Array.from(this._connections.values()).map((connection) => {
-      return connection.connection.shouldSyncCollection({
-        collectionId
-      }) ? connection.connection.peerId : null;
-    }).filter(import_util3.nonNullable);
-  }
-  _onConnectionOpen(connection) {
-    (0, import_log3.log)("Connection opened", {
-      peerId: connection.peerId
-    }, {
-      F: __dxlog_file3,
-      L: 178,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    (0, import_invariant4.invariant)(!this._connections.has(connection.peerId), void 0, {
-      F: __dxlog_file3,
-      L: 179,
-      S: this,
-      A: [
-        "!this._connections.has(connection.peerId as PeerId)",
-        ""
-      ]
-    });
-    const reader = connection.readable.getReader();
-    const writer = connection.writable.getWriter();
-    const connectionEntry = {
-      connection,
-      reader,
-      writer,
-      isOpen: true
-    };
-    this._connections.set(connection.peerId, connectionEntry);
-    queueMicrotask(async () => {
-      try {
-        while (true) {
-          const { done, value } = await reader.read();
-          if (done) {
-            break;
-          }
-          this._onMessage(value);
-        }
-      } catch (err) {
-        if (connectionEntry.isOpen) {
-          import_log3.log.catch(err, void 0, {
-            F: __dxlog_file3,
-            L: 198,
-            S: this,
-            C: (f, a) => f(...a)
-          });
-        }
+  async _readFile(file, codec2) {
+    try {
+      const { size: fileLength } = await file.stat();
+      if (fileLength < 8) {
+        return;
       }
-    });
-    (0, import_log3.log)("emit peer-candidate", {
-      peerId: connection.peerId
-    }, {
-      F: __dxlog_file3,
-      L: 203,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    this._emitPeerCandidate(connection);
-  }
-  _onMessage(message) {
-    if (isCollectionQueryMessage(message)) {
-      this._params.onCollectionStateQueried(message.collectionId, message.senderId);
-    } else if (isCollectionStateMessage(message)) {
-      this._params.onCollectionStateReceived(message.collectionId, message.senderId, message.state);
-    } else {
-      this.emit("message", message);
+      const dataSize = fromBytesInt32(await file.read(0, 4));
+      const checksum = fromBytesInt32(await file.read(4, 4));
+      (0, import_log3.log)("loaded", {
+        size: dataSize,
+        checksum,
+        name: file.filename
+      }, {
+        F: __dxlog_file4,
+        L: 89,
+        S: this,
+        C: (f, a) => f(...a)
+      });
+      if (fileLength < dataSize + 8) {
+        throw new import_protocols4.DataCorruptionError("Metadata size is smaller than expected.", {
+          fileLength,
+          dataSize
+        });
+      }
+      const data = await file.read(8, dataSize);
+      const calculatedChecksum = import_crc_32.default.buf(data);
+      if (calculatedChecksum !== checksum) {
+        throw new import_protocols4.DataCorruptionError("Metadata checksum is invalid.");
+      }
+      return codec2.decode(data);
+    } finally {
+      await file.close();
     }
   }
   /**
-  * Trigger doc-synchronizer shared documents set recalculation. Happens on peer-candidate.
-  * TODO(y): replace with a proper API call when sharePolicy update becomes supported by automerge-repo
+  * @internal
   */
-  _onConnectionAuthScopeChanged(connection) {
-    (0, import_log3.log)("Connection auth scope changed", {
-      peerId: connection.peerId
-    }, {
-      F: __dxlog_file3,
-      L: 222,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    const entry = this._connections.get(connection.peerId);
-    (0, import_invariant4.invariant)(entry, void 0, {
-      F: __dxlog_file3,
-      L: 224,
-      S: this,
-      A: [
-        "entry",
-        ""
-      ]
-    });
-    this.emit("peer-disconnected", {
-      peerId: connection.peerId
-    });
-    this._emitPeerCandidate(connection);
-  }
-  _onConnectionClosed(connection) {
-    (0, import_log3.log)("Connection closed", {
-      peerId: connection.peerId
+  async _writeFile(file, codec2, data) {
+    const encoded = (0, import_util.arrayToBuffer)(codec2.encode(data));
+    const checksum = import_crc_32.default.buf(encoded);
+    const result = Buffer.alloc(8 + encoded.length);
+    result.writeInt32LE(encoded.length, 0);
+    result.writeInt32LE(checksum, 4);
+    encoded.copy(result, 8);
+    await file.write(0, result);
+    (0, import_log3.log)("saved", {
+      size: encoded.length,
+      checksum
     }, {
-      F: __dxlog_file3,
-      L: 230,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    const entry = this._connections.get(connection.peerId);
-    (0, import_invariant4.invariant)(entry, void 0, {
-      F: __dxlog_file3,
-      L: 232,
-      S: this,
-      A: [
-        "entry",
-        ""
-      ]
-    });
-    entry.isOpen = false;
-    this.emit("peer-disconnected", {
-      peerId: connection.peerId
-    });
-    void entry.reader.cancel().catch((err) => import_log3.log.catch(err, void 0, {
-      F: __dxlog_file3,
-      L: 237,
-      S: this,
-      C: (f, a) => f(...a)
-    }));
-    void entry.writer.abort().catch((err) => import_log3.log.catch(err, void 0, {
-      F: __dxlog_file3,
-      L: 238,
+      F: __dxlog_file4,
+      L: 124,
       S: this,
       C: (f, a) => f(...a)
-    }));
-    this._connections.delete(connection.peerId);
-  }
-  _emitPeerCandidate(connection) {
-    this.emit("peer-candidate", {
-      peerId: connection.peerId,
-      peerMetadata: createEchoPeerMetadata()
-    });
-  }
-};
-_ts_decorate([
-  import_async4.synchronized
-], EchoNetworkAdapter.prototype, "open", null);
-_ts_decorate([
-  import_async4.synchronized
-], EchoNetworkAdapter.prototype, "close", null);
-_ts_decorate([
-  import_async4.synchronized
-], EchoNetworkAdapter.prototype, "addReplicator", null);
-_ts_decorate([
-  import_async4.synchronized
-], EchoNetworkAdapter.prototype, "removeReplicator", null);
-var createEchoPeerMetadata = () => ({
-  // TODO(dmaretskyi): Refactor this.
-  dxos_peerSource: "EchoNetworkAdapter"
-});
-var isEchoPeerMetadata = (metadata) => metadata?.dxos_peerSource === "EchoNetworkAdapter";
-var HeadsStore = class {
-  constructor({ db }) {
-    this._db = db;
-  }
-  setHeads(documentId, heads, batch) {
-    batch.put(documentId, heads, {
-      sublevel: this._db,
-      keyEncoding: "utf8",
-      valueEncoding: import_indexing.headsEncoding
-    });
-  }
-  // TODO(dmaretskyi): Make batched.
-  async getHeads(documentIds) {
-    return this._db.getMany(documentIds, {
-      keyEncoding: "utf8",
-      valueEncoding: import_indexing.headsEncoding
-    });
-  }
-};
-function _ts_decorate2(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
-    r = Reflect.decorate(decorators, target, key, desc);
-  else
-    for (var i = decorators.length - 1; i >= 0; i--)
-      if (d = decorators[i])
-        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-var __dxlog_file4 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/automerge-host.ts";
-var AutomergeHost = class extends import_context5.Resource {
-  constructor({ db, indexMetadataStore }) {
-    super();
-    this._echoNetworkAdapter = new EchoNetworkAdapter({
-      getContainingSpaceForDocument: this._getContainingSpaceForDocument.bind(this),
-      onCollectionStateQueried: this._onCollectionStateQueried.bind(this),
-      onCollectionStateReceived: this._onCollectionStateReceived.bind(this)
-    });
-    this._collectionSynchronizer = new CollectionSynchronizer({
-      queryCollectionState: this._queryCollectionState.bind(this),
-      sendCollectionState: this._sendCollectionState.bind(this),
-      shouldSyncCollection: this._shouldSyncCollection.bind(this)
-    });
-    this._db = db;
-    this._storage = new LevelDBStorageAdapter({
-      db: db.sublevel("automerge"),
-      callbacks: {
-        beforeSave: async (params) => this._beforeSave(params),
-        afterSave: async (key) => this._afterSave(key)
-      }
-    });
-    this._headsStore = new HeadsStore({
-      db: db.sublevel("heads")
-    });
-    this._indexMetadataStore = indexMetadataStore;
-  }
-  async _open() {
-    this._peerId = `host-${import_keys2.PublicKey.random().toHex()}`;
-    await this._storage.open?.();
-    this._repo = new import_automerge_repo.Repo({
-      peerId: this._peerId,
-      sharePolicy: this._sharePolicy.bind(this),
-      storage: this._storage,
-      network: [
-        // Upstream swarm.
-        this._echoNetworkAdapter
-      ]
-    });
-    import_async3.Event.wrap(this._echoNetworkAdapter, "peer-candidate").on(this._ctx, (e) => this._onPeerConnected(e.peerId));
-    import_async3.Event.wrap(this._echoNetworkAdapter, "peer-disconnected").on(this._ctx, (e) => this._onPeerDisconnected(e.peerId));
-    this._collectionSynchronizer.remoteStateUpdated.on(this._ctx, ({ collectionId, peerId }) => {
-      this._onRemoteCollectionStateUpdated(collectionId, peerId);
     });
-    await this._echoNetworkAdapter.open();
-    await this._collectionSynchronizer.open();
-    await this._echoNetworkAdapter.open();
-    await this._echoNetworkAdapter.whenConnected();
-  }
-  async _close() {
-    await this._collectionSynchronizer.close();
-    await this._storage.close?.();
-    await this._echoNetworkAdapter.close();
-    await this._ctx.dispose();
-  }
-  /**
-  * @deprecated To be abstracted away.
-  */
-  get repo() {
-    return this._repo;
   }
-  get peerId() {
-    return this._peerId;
-  }
-  get loadedDocsCount() {
-    return Object.keys(this._repo.handles).length;
-  }
-  async addReplicator(replicator) {
-    await this._echoNetworkAdapter.addReplicator(replicator);
-  }
-  async removeReplicator(replicator) {
-    await this._echoNetworkAdapter.removeReplicator(replicator);
-  }
-  /**
-  * Loads the document handle from the repo and waits for it to be ready.
-  */
-  async loadDoc(ctx, documentId, opts) {
-    let handle;
-    if (typeof documentId === "string") {
-      handle = this._repo.handles[documentId];
-    }
-    if (!handle) {
-      handle = this._repo.find(documentId);
-    }
-    if (!handle.isReady()) {
-      if (!opts?.timeout) {
-        await (0, import_context5.cancelWithContext)(ctx, handle.whenReady());
-      } else {
-        await (0, import_context5.cancelWithContext)(ctx, (0, import_async3.asyncTimeout)(handle.whenReady(), opts.timeout));
-      }
-    }
-    return handle;
+  async close() {
+    await this._invitationCleanupCtx.dispose();
+    await this.flush();
+    await this._metadataFile?.close();
+    this._metadataFile = void 0;
+    this._metadata = emptyEchoMetadata();
+    this._spaceLargeMetadata.clear();
   }
   /**
-  * Create new persisted document.
+  * Loads metadata from persistent storage.
   */
-  createDoc(initialValue, opts) {
-    if (opts?.preserveHistory) {
-      if (!(0, import_automerge3.isAutomerge)(initialValue)) {
-        throw new TypeError("Initial value must be an Automerge document");
-      }
-      return this._repo.import((0, import_automerge3.save)(initialValue));
-    } else {
-      return this._repo.create(initialValue);
-    }
-  }
-  async waitUntilHeadsReplicated(heads) {
-    const entries = heads.entries;
-    if (!entries?.length) {
-      return;
+  async load() {
+    if (!this._metadataFile || this._metadataFile.closed) {
+      this._metadataFile = this._directory.getOrCreateFile("EchoMetadata");
     }
-    const documentIds = entries.map((entry) => entry.documentId);
-    const documentHeads = await this.getHeads(documentIds);
-    const headsToWait = entries.filter((entry, index) => {
-      const targetHeads = entry.heads;
-      if (!targetHeads || targetHeads.length === 0) {
-        return false;
+    try {
+      const metadata = await this._readFile(this._metadataFile, EchoMetadata);
+      if (metadata) {
+        this._metadata = metadata;
       }
-      const currentHeads = documentHeads[index];
-      return !(currentHeads !== null && (0, import_automerge3.equals)(currentHeads, targetHeads));
-    });
-    if (headsToWait.length > 0) {
-      await Promise.all(headsToWait.map(async (entry, index) => {
-        const handle = await this.loadDoc(import_context5.Context.default(void 0, {
-          F: __dxlog_file4,
-          L: 223
-        }), entry.documentId);
-        await waitForHeads(handle, entry.heads);
-      }));
-    }
-    await this._repo.flush(heads.entries?.map((entry) => entry.documentId) ?? []);
-  }
-  async reIndexHeads(documentIds) {
-    for (const documentId of documentIds) {
-      import_log2.log.info("re-indexing heads for document", {
-        documentId
+      this._metadata.spaces?.forEach((space) => {
+        space.state ??= import_services.SpaceState.ACTIVE;
+      });
+    } catch (err) {
+      import_log3.log.error("failed to load metadata", {
+        err
       }, {
         F: __dxlog_file4,
-        L: 235,
+        L: 156,
         S: this,
         C: (f, a) => f(...a)
       });
-      const handle = this._repo.find(documentId);
-      await handle.whenReady([
-        "ready",
-        "requesting"
-      ]);
-      if (handle.inState([
-        "requesting"
-      ])) {
-        import_log2.log.warn("document is not available locally, skipping", {
-          documentId
+      this._metadata = emptyEchoMetadata();
+    }
+    await (0, import_util.forEachAsync)([
+      this._metadata.identity?.haloSpace.key,
+      ...this._metadata.spaces?.map((space) => space.key) ?? []
+    ].filter(import_util.isNotNullOrUndefined), async (key) => {
+      try {
+        await this._loadSpaceLargeMetadata(key);
+      } catch (err) {
+        import_log3.log.error("failed to load space large metadata", {
+          err
         }, {
           F: __dxlog_file4,
-          L: 239,
+          L: 168,
           S: this,
           C: (f, a) => f(...a)
         });
-        continue;
       }
-      const doc = handle.docSync();
-      (0, import_invariant3.invariant)(doc, void 0, {
+    });
+    (0, import_async2.scheduleTaskInterval)(this._invitationCleanupCtx, async () => {
+      for (const invitation of this._metadata.invitations ?? []) {
+        if (hasInvitationExpired(invitation) || isLegacyInvitationFormat(invitation)) {
+          await this.removeInvitation(invitation.invitationId);
+        }
+      }
+    }, EXPIRED_INVITATION_CLEANUP_INTERVAL);
+  }
+  async _save() {
+    const data = {
+      ...this._metadata,
+      version: import_protocols4.STORAGE_VERSION,
+      created: this._metadata.created ?? /* @__PURE__ */ new Date(),
+      updated: /* @__PURE__ */ new Date()
+    };
+    this.update.emit(data);
+    const file = this._directory.getOrCreateFile("EchoMetadata");
+    await this._writeFile(file, EchoMetadata, data);
+  }
+  async _loadSpaceLargeMetadata(key) {
+    const file = this._directory.getOrCreateFile(`space_${key.toHex()}_large`);
+    try {
+      const metadata = await this._readFile(file, LargeSpaceMetadata);
+      if (metadata) {
+        this._spaceLargeMetadata.set(key, metadata);
+      }
+    } catch (err) {
+      import_log3.log.error("failed to load space large metadata", {
+        err
+      }, {
         F: __dxlog_file4,
-        L: 244,
+        L: 210,
         S: this,
-        A: [
-          "doc",
-          ""
-        ]
+        C: (f, a) => f(...a)
       });
-      const heads = (0, import_automerge3.getHeads)(doc);
-      const batch = this._db.batch();
-      this._headsStore.setHeads(documentId, heads, batch);
-      await batch.write();
     }
-    import_log2.log.info("done re-indexing heads", void 0, {
-      F: __dxlog_file4,
-      L: 251,
-      S: this,
-      C: (f, a) => f(...a)
-    });
   }
-  // TODO(dmaretskyi): Share based on HALO permissions and space affinity.
-  // Hosts, running in the worker, don't share documents unless requested by other peers.
-  // NOTE: If both peers return sharePolicy=false the replication will not happen
-  // https://github.com/automerge/automerge-repo/pull/292
-  async _sharePolicy(peerId, documentId) {
-    if (peerId.startsWith("client-")) {
-      return false;
-    }
-    if (!documentId) {
-      return false;
-    }
-    const peerMetadata = this.repo.peerMetadataByPeerId[peerId];
-    if (isEchoPeerMetadata(peerMetadata)) {
-      return this._echoNetworkAdapter.shouldAdvertise(peerId, {
-        documentId
-      });
-    }
-    return false;
+  async _saveSpaceLargeMetadata(key) {
+    const data = this._getLargeSpaceMetadata(key);
+    const file = this._directory.getOrCreateFile(`space_${key.toHex()}_large`);
+    await this._writeFile(file, LargeSpaceMetadata, data);
   }
-  async _beforeSave({ path, batch }) {
-    const handle = this._repo.handles[path[0]];
-    if (!handle) {
-      return;
-    }
-    const doc = handle.docSync();
-    if (!doc) {
-      return;
+  async flush() {
+    await this._directory.flush();
+  }
+  _getSpace(spaceKey) {
+    if (this._metadata.identity?.haloSpace.key.equals(spaceKey)) {
+      return this._metadata.identity.haloSpace;
     }
-    const heads = (0, import_automerge3.getHeads)(doc);
-    this._headsStore.setHeads(handle.documentId, heads, batch);
-    const spaceKey = getSpaceKeyFromDoc(doc) ?? void 0;
-    const objectIds = Object.keys(doc.objects ?? {});
-    const encodedIds = objectIds.map((objectId) => import_protocols4.objectPointerCodec.encode({
-      documentId: handle.documentId,
-      objectId,
-      spaceKey
-    }));
-    const idToLastHash = new Map(encodedIds.map((id) => [
-      id,
-      heads
-    ]));
-    this._indexMetadataStore.markDirty(idToLastHash, batch);
+    const space = this.spaces.find((space2) => space2.key === spaceKey);
+    (0, import_invariant4.invariant)(space, "Space not found", {
+      F: __dxlog_file4,
+      L: 232,
+      S: this,
+      A: [
+        "space",
+        "'Space not found'"
+      ]
+    });
+    return space;
   }
-  _shouldSyncCollection(collectionId, peerId) {
-    const peerMetadata = this._repo.peerMetadataByPeerId[peerId];
-    if (isEchoPeerMetadata(peerMetadata)) {
-      return this._echoNetworkAdapter.shouldSyncCollection(peerId, {
-        collectionId
-      });
+  _getLargeSpaceMetadata(key) {
+    let entry = this._spaceLargeMetadata.get(key);
+    if (entry) {
+      return entry;
     }
-    return false;
+    entry = emptyLargeSpaceMetadata();
+    this._spaceLargeMetadata.set(key, entry);
+    return entry;
   }
   /**
-  * Called by AutomergeStorageAdapter after levelDB batch commit.
+  * Clears storage - doesn't work for now.
   */
-  async _afterSave(path) {
-    this._indexMetadataStore.notifyMarkedDirty();
-    const documentId = path[0];
-    const document = this._repo.handles[documentId]?.docSync();
-    if (document) {
-      const heads = (0, import_automerge3.getHeads)(document);
-      this._onHeadsChanged(documentId, heads);
-    }
+  async clear() {
+    (0, import_log3.log)("clearing all metadata", void 0, {
+      F: __dxlog_file4,
+      L: 251,
+      S: this,
+      C: (f, a) => f(...a)
+    });
+    await this._directory.delete();
+    this._metadata = emptyEchoMetadata();
   }
-  _automergeDocs() {
-    return (0, import_util2.mapValues)(this._repo.handles, (handle) => ({
-      state: handle.state,
-      hasDoc: !!handle.docSync(),
-      heads: handle.docSync() ? import_automerge3.next.getHeads(handle.docSync()) : null,
-      data: handle.docSync() && (0, import_util2.mapValues)(handle.docSync(), (value, key) => {
-        try {
-          switch (key) {
-            case "access":
-            case "links":
-              return value;
-            case "objects":
-              return Object.keys(value);
-            default:
-              return `${value}`;
-          }
-        } catch (err) {
-          return `${err}`;
-        }
-      })
-    }));
+  getIdentityRecord() {
+    return this._metadata.identity;
+  }
+  async setIdentityRecord(record) {
+    (0, import_invariant4.invariant)(!this._metadata.identity, "Cannot overwrite existing identity in metadata", {
+      F: __dxlog_file4,
+      L: 261,
+      S: this,
+      A: [
+        "!this._metadata.identity",
+        "'Cannot overwrite existing identity in metadata'"
+      ]
+    });
+    this._metadata.identity = record;
+    await this._save();
+    await this.flush();
   }
-  _automergePeers() {
-    return this._repo.peers;
+  getInvitations() {
+    return this._metadata.invitations ?? [];
   }
-  async _getContainingSpaceForDocument(documentId) {
-    const doc = this._repo.handles[documentId]?.docSync();
-    if (!doc) {
-      return null;
-    }
-    const spaceKeyHex = getSpaceKeyFromDoc(doc);
-    if (!spaceKeyHex) {
-      return null;
+  async addInvitation(invitation) {
+    if (this._metadata.invitations?.find((i) => i.invitationId === invitation.invitationId)) {
+      return;
     }
-    return import_keys2.PublicKey.from(spaceKeyHex);
+    (this._metadata.invitations ??= []).push(invitation);
+    await this._save();
+    await this.flush();
   }
-  /**
-  * Flush documents to disk.
-  */
-  async flush({ documentIds } = {}) {
-    await this._repo.flush(documentIds);
+  async removeInvitation(invitationId) {
+    this._metadata.invitations = (this._metadata.invitations ?? []).filter((i) => i.invitationId !== invitationId);
+    await this._save();
+    await this.flush();
   }
-  async getHeads(documentIds) {
-    const result = [];
-    const storeRequestIds = [];
-    const storeResultIndices = [];
-    for (const documentId of documentIds) {
-      const doc = this._repo.handles[documentId]?.docSync();
-      if (doc) {
-        result.push((0, import_automerge3.getHeads)(doc));
-      } else {
-        storeRequestIds.push(documentId);
-        storeResultIndices.push(result.length);
-        result.push(void 0);
-      }
-    }
-    if (storeRequestIds.length > 0) {
-      const storedHeads = await this._headsStore.getHeads(storeRequestIds);
-      for (let i = 0; i < storedHeads.length; i++) {
-        result[storeResultIndices[i]] = storedHeads[i];
-      }
-    }
-    return result;
+  async addSpace(record) {
+    (0, import_invariant4.invariant)(!(this._metadata.spaces ?? []).find((space) => space.key === record.key), "Cannot overwrite existing space in metadata", {
+      F: __dxlog_file4,
+      L: 289,
+      S: this,
+      A: [
+        "!(this._metadata.spaces ?? []).find((space) => space.key === record.key)",
+        "'Cannot overwrite existing space in metadata'"
+      ]
+    });
+    (this._metadata.spaces ??= []).push(record);
+    await this._save();
+    await this.flush();
+  }
+  async setSpaceDataLatestTimeframe(spaceKey, timeframe) {
+    this._getSpace(spaceKey).dataTimeframe = timeframe;
+    await this._save();
   }
-  //
-  // Collection sync.
-  //
-  getLocalCollectionState(collectionId) {
-    return this._collectionSynchronizer.getLocalCollectionState(collectionId);
+  async setSpaceControlLatestTimeframe(spaceKey, timeframe) {
+    this._getSpace(spaceKey).controlTimeframe = timeframe;
+    await this._save();
+    await this.flush();
   }
-  getRemoteCollectionStates(collectionId) {
-    return this._collectionSynchronizer.getRemoteCollectionStates(collectionId);
+  async setCache(spaceKey, cache) {
+    this._getSpace(spaceKey).cache = cache;
+    await this._save();
   }
-  refreshCollection(collectionId) {
-    this._collectionSynchronizer.refreshCollection(collectionId);
+  async setWritableFeedKeys(spaceKey, controlFeedKey, dataFeedKey) {
+    const space = this._getSpace(spaceKey);
+    space.controlFeedKey = controlFeedKey;
+    space.dataFeedKey = dataFeedKey;
+    await this._save();
+    await this.flush();
   }
-  async getCollectionSyncState(collectionId) {
-    const result = {
-      peers: []
-    };
-    const localState = this.getLocalCollectionState(collectionId);
-    const remoteState = this.getRemoteCollectionStates(collectionId);
-    if (!localState) {
-      return result;
-    }
-    for (const [peerId, state] of remoteState) {
-      const diff = diffCollectionState(localState, state);
-      result.peers.push({
-        peerId,
-        differentDocuments: diff.different.length
-      });
-    }
-    return result;
+  async setSpaceState(spaceKey, state) {
+    this._getSpace(spaceKey).state = state;
+    await this._save();
+    await this.flush();
+  }
+  getSpaceControlPipelineSnapshot(spaceKey) {
+    return this._getLargeSpaceMetadata(spaceKey).controlPipelineSnapshot;
+  }
+  async setSpaceControlPipelineSnapshot(spaceKey, snapshot) {
+    this._getLargeSpaceMetadata(spaceKey).controlPipelineSnapshot = snapshot;
+    await this._saveSpaceLargeMetadata(spaceKey);
+    await this.flush();
+  }
+};
+_ts_decorate([
+  import_async2.synchronized
+], MetadataStore.prototype, "load", null);
+_ts_decorate([
+  import_async2.synchronized
+], MetadataStore.prototype, "_save", null);
+_ts_decorate([
+  import_async2.synchronized
+], MetadataStore.prototype, "_saveSpaceLargeMetadata", null);
+var fromBytesInt32 = (buf) => buf.readInt32LE(0);
+var hasInvitationExpired = (invitation) => {
+  return Boolean(invitation.created && invitation.lifetime && invitation.lifetime !== 0 && invitation.created.getTime() + invitation.lifetime * 1e3 < Date.now());
+};
+var isLegacyInvitationFormat = (invitation) => {
+  return invitation.type === import_services.Invitation.Type.MULTIUSE;
+};
+function _ts_decorate2(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
+    r = Reflect.decorate(decorators, target, key, desc);
+  else
+    for (var i = decorators.length - 1; i >= 0; i--)
+      if (d = decorators[i])
+        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+var __dxlog_file5 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/pipeline/timeframe-clock.ts";
+var mapTimeframeToFeedIndexes = (timeframe) => timeframe.frames().map(([feedKey, index]) => ({
+  feedKey,
+  index
+}));
+var mapFeedIndexesToTimeframe = (indexes) => new import_timeframe.Timeframe(indexes.map(({ feedKey, index }) => [
+  feedKey,
+  index
+]));
+var startAfter = (timeframe) => timeframe.frames().map(([feedKey, index]) => ({
+  feedKey,
+  index: index + 1
+}));
+var TimeframeClock = class {
+  constructor(_timeframe = new import_timeframe.Timeframe()) {
+    this._timeframe = _timeframe;
+    this.update = new import_async3.Event();
+    this._pendingTimeframe = _timeframe;
   }
   /**
-  * Update the local collection state based on the locally stored document heads.
+  * Timeframe that was processed by ECHO.
   */
-  async updateLocalCollectionState(collectionId, documentIds) {
-    const heads = await this.getHeads(documentIds);
-    const documents = Object.fromEntries(heads.map((heads2, index) => [
-      documentIds[index],
-      heads2 ?? []
-    ]));
-    this._collectionSynchronizer.setLocalCollectionState(collectionId, {
-      documents
-    });
-  }
-  _onCollectionStateQueried(collectionId, peerId) {
-    this._collectionSynchronizer.onCollectionStateQueried(collectionId, peerId);
+  get timeframe() {
+    return this._timeframe;
   }
-  _onCollectionStateReceived(collectionId, peerId, state) {
-    this._collectionSynchronizer.onRemoteStateReceived(collectionId, peerId, decodeCollectionState(state));
+  /**
+  * Timeframe that is currently being processed by ECHO.
+  * Will be equal to `timeframe` after the processing is complete.
+  */
+  get pendingTimeframe() {
+    return this._pendingTimeframe;
   }
-  _queryCollectionState(collectionId, peerId) {
-    this._echoNetworkAdapter.queryCollectionState(collectionId, peerId);
+  setTimeframe(timeframe) {
+    this._timeframe = timeframe;
+    this._pendingTimeframe = timeframe;
+    this.update.emit(this._timeframe);
   }
-  _sendCollectionState(collectionId, peerId, state) {
-    this._echoNetworkAdapter.sendCollectionState(collectionId, peerId, encodeCollectionState(state));
+  updatePendingTimeframe(key, seq) {
+    this._pendingTimeframe = import_timeframe.Timeframe.merge(this._pendingTimeframe, new import_timeframe.Timeframe([
+      [
+        key,
+        seq
+      ]
+    ]));
   }
-  _onPeerConnected(peerId) {
-    this._collectionSynchronizer.onConnectionOpen(peerId);
+  updateTimeframe() {
+    this._timeframe = this._pendingTimeframe;
+    this.update.emit(this._timeframe);
   }
-  _onPeerDisconnected(peerId) {
-    this._collectionSynchronizer.onConnectionClosed(peerId);
+  hasGaps(timeframe) {
+    const gaps = import_timeframe.Timeframe.dependencies(timeframe, this._timeframe);
+    return !gaps.isEmpty();
   }
-  _onRemoteCollectionStateUpdated(collectionId, peerId) {
-    const localState = this._collectionSynchronizer.getLocalCollectionState(collectionId);
-    const remoteState = this._collectionSynchronizer.getRemoteCollectionStates(collectionId).get(peerId);
-    if (!localState || !remoteState) {
-      return;
-    }
-    const { different } = diffCollectionState(localState, remoteState);
-    if (different.length === 0) {
-      return;
-    }
-    import_log2.log.info("replication documents after collection sync", {
-      count: different.length
+  async waitUntilReached(target) {
+    (0, import_log4.log)("waitUntilReached", {
+      target,
+      current: this._timeframe
     }, {
-      F: __dxlog_file4,
-      L: 486,
+      F: __dxlog_file5,
+      L: 70,
       S: this,
       C: (f, a) => f(...a)
     });
-    for (const documentId of different) {
-      this._repo.find(documentId);
-    }
-  }
-  _onHeadsChanged(documentId, heads) {
-    for (const collectionId of this._collectionSynchronizer.getRegisteredCollectionIds()) {
-      const state = this._collectionSynchronizer.getLocalCollectionState(collectionId);
-      if (state?.documents[documentId]) {
-        const newState = structuredClone(state);
-        newState.documents[documentId] = heads;
-        this._collectionSynchronizer.setLocalCollectionState(collectionId, newState);
-      }
-    }
+    await this.update.waitForCondition(() => {
+      (0, import_log4.log)("check if reached", {
+        target,
+        current: this._timeframe,
+        deps: import_timeframe.Timeframe.dependencies(target, this._timeframe)
+      }, {
+        F: __dxlog_file5,
+        L: 72,
+        S: this,
+        C: (f, a) => f(...a)
+      });
+      return import_timeframe.Timeframe.dependencies(target, this._timeframe).isEmpty();
+    });
   }
 };
 _ts_decorate2([
-  import_tracing.trace.info()
-], AutomergeHost.prototype, "_peerId", void 0);
-_ts_decorate2([
-  import_tracing.trace.info({
-    depth: null
-  })
-], AutomergeHost.prototype, "_automergeDocs", null);
-_ts_decorate2([
-  import_tracing.trace.info({
-    depth: null
-  })
-], AutomergeHost.prototype, "_automergePeers", null);
-_ts_decorate2([
-  import_tracing.trace.span({
-    showInBrowserTimeline: true
-  })
-], AutomergeHost.prototype, "flush", null);
-AutomergeHost = _ts_decorate2([
-  import_tracing.trace.resource()
-], AutomergeHost);
-var getSpaceKeyFromDoc = (doc) => {
-  const rawSpaceKey = doc.access?.spaceKey ?? doc.experimental_spaceKey;
-  if (rawSpaceKey == null) {
-    return null;
-  }
-  return String(rawSpaceKey);
-};
-var waitForHeads = async (handle, heads) => {
-  const unavailableHeads = new Set(heads);
-  await handle.whenReady();
-  await import_async3.Event.wrap(handle, "change").waitForCondition(() => {
-    for (const changeHash of unavailableHeads.values()) {
-      if (changeIsPresentInDoc(handle.docSync(), changeHash)) {
-        unavailableHeads.delete(changeHash);
+  (0, import_debug.timed)(5e3)
+], TimeframeClock.prototype, "waitUntilReached", null);
+var __dxlog_file6 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/pipeline/message-selector.ts";
+var createMessageSelector = (timeframeClock) => {
+  return (messages) => {
+    for (let i = 0; i < messages.length; i++) {
+      const { data: { timeframe } } = messages[i];
+      (0, import_invariant6.invariant)(timeframe, void 0, {
+        F: __dxlog_file6,
+        L: 25,
+        S: void 0,
+        A: [
+          "timeframe",
+          ""
+        ]
+      });
+      if (!timeframeClock.hasGaps(timeframe)) {
+        return i;
       }
     }
-    return unavailableHeads.size === 0;
-  });
-};
-var changeIsPresentInDoc = (doc, changeHash) => {
-  return !!(0, import_automerge3.getBackend)(doc).getChangeByHash(changeHash);
-};
-var decodeCollectionState = (state) => {
-  (0, import_invariant3.invariant)(typeof state === "object" && state !== null, "Invalid state", {
-    F: __dxlog_file4,
-    L: 539,
-    S: void 0,
-    A: [
-      "typeof state === 'object' && state !== null",
-      "'Invalid state'"
-    ]
-  });
-  return state;
-};
-var encodeCollectionState = (state) => {
-  return state;
-};
-var __dxlog_file5 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/space-collection.ts";
-var deriveCollectionIdFromSpaceId = (spaceId) => `space:${spaceId}`;
-var getSpaceIdFromCollectionId = (collectionId) => {
-  const spaceId = collectionId.replace(/^space:/, "");
-  (0, import_invariant5.invariant)(import_keys3.SpaceId.isValid(spaceId), void 0, {
-    F: __dxlog_file5,
-    L: 12,
-    S: void 0,
-    A: [
-      "SpaceId.isValid(spaceId)",
-      ""
-    ]
-  });
-  return spaceId;
-};
-var __dxlog_file6 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/auth.ts";
-var AuthExtension = class extends import_teleport.RpcExtension {
-  constructor(_authParams) {
-    super({
-      requested: {
-        AuthService: import_protocols5.schema.getService("dxos.mesh.teleport.auth.AuthService")
-      },
-      exposed: {
-        AuthService: import_protocols5.schema.getService("dxos.mesh.teleport.auth.AuthService")
-      },
-      timeout: 60 * 1e3
-    });
-    this._authParams = _authParams;
-    this._ctx = new import_context7.Context({
-      onError: (err) => {
-        import_log4.log.catch(err, void 0, {
-          F: __dxlog_file6,
-          L: 28,
-          S: this,
-          C: (f, a) => f(...a)
-        });
-      }
-    }, {
+    (0, import_log6.log)("Skipping...", void 0, {
       F: __dxlog_file6,
-      L: 26
-    });
-  }
-  async getHandlers() {
-    return {
-      AuthService: {
-        authenticate: async ({ challenge }) => {
-          try {
-            const credential = await this._authParams.provider(challenge);
-            if (!credential) {
-              throw new Error("auth rejected");
-            }
-            return {
-              credential
-            };
-          } catch (err) {
-            import_log4.log.error("failed to generate auth credentials", err, {
-              F: __dxlog_file6,
-              L: 55,
-              S: this,
-              C: (f, a) => f(...a)
-            });
-            throw new Error("auth rejected");
-          }
-        }
-      }
-    };
-  }
-  async onOpen(context) {
-    await super.onOpen(context);
-    (0, import_async5.scheduleTask)(this._ctx, async () => {
-      try {
-        const challenge = (0, import_crypto2.randomBytes)(32);
-        const { credential } = await this.rpc.AuthService.authenticate({
-          challenge
-        });
-        (0, import_invariant6.invariant)(credential?.length > 0, "invalid credential", {
-          F: __dxlog_file6,
-          L: 69,
-          S: this,
-          A: [
-            "credential?.length > 0",
-            "'invalid credential'"
-          ]
-        });
-        const success = await this._authParams.verifier(challenge, credential);
-        (0, import_invariant6.invariant)(success, "credential not verified", {
-          F: __dxlog_file6,
-          L: 71,
-          S: this,
-          A: [
-            "success",
-            "'credential not verified'"
-          ]
-        });
-        (0, import_async5.runInContext)(this._ctx, () => this._authParams.onAuthSuccess());
-      } catch (err) {
-        (0, import_log4.log)("auth failed", err, {
-          F: __dxlog_file6,
-          L: 74,
-          S: this,
-          C: (f, a) => f(...a)
-        });
-        this.close();
-        this._authParams.onAuthFailure();
-      }
-    });
-  }
-  async onClose() {
-    await this._ctx.dispose();
-    await super.onClose();
-  }
-  async onAbort() {
-    await this._ctx.dispose();
-    await super.onAbort();
-  }
-};
-function _ts_decorate3(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
-    r = Reflect.decorate(decorators, target, key, desc);
-  else
-    for (var i = decorators.length - 1; i >= 0; i--)
-      if (d = decorators[i])
-        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-var __dxlog_file7 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/pipeline/timeframe-clock.ts";
-var mapTimeframeToFeedIndexes = (timeframe) => timeframe.frames().map(([feedKey, index]) => ({
-  feedKey,
-  index
-}));
-var mapFeedIndexesToTimeframe = (indexes) => new import_timeframe.Timeframe(indexes.map(({ feedKey, index }) => [
-  feedKey,
-  index
-]));
-var startAfter = (timeframe) => timeframe.frames().map(([feedKey, index]) => ({
-  feedKey,
-  index: index + 1
-}));
-var TimeframeClock = class {
-  constructor(_timeframe = new import_timeframe.Timeframe()) {
-    this._timeframe = _timeframe;
-    this.update = new import_async6.Event();
-    this._pendingTimeframe = _timeframe;
-  }
-  /**
-  * Timeframe that was processed by ECHO.
-  */
-  get timeframe() {
-    return this._timeframe;
-  }
-  /**
-  * Timeframe that is currently being processed by ECHO.
-  * Will be equal to `timeframe` after the processing is complete.
-  */
-  get pendingTimeframe() {
-    return this._pendingTimeframe;
-  }
-  setTimeframe(timeframe) {
-    this._timeframe = timeframe;
-    this._pendingTimeframe = timeframe;
-    this.update.emit(this._timeframe);
-  }
-  updatePendingTimeframe(key, seq) {
-    this._pendingTimeframe = import_timeframe.Timeframe.merge(this._pendingTimeframe, new import_timeframe.Timeframe([
-      [
-        key,
-        seq
-      ]
-    ]));
-  }
-  updateTimeframe() {
-    this._timeframe = this._pendingTimeframe;
-    this.update.emit(this._timeframe);
-  }
-  hasGaps(timeframe) {
-    const gaps = import_timeframe.Timeframe.dependencies(timeframe, this._timeframe);
-    return !gaps.isEmpty();
-  }
-  async waitUntilReached(target) {
-    (0, import_log5.log)("waitUntilReached", {
-      target,
-      current: this._timeframe
-    }, {
-      F: __dxlog_file7,
-      L: 70,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    await this.update.waitForCondition(() => {
-      (0, import_log5.log)("check if reached", {
-        target,
-        current: this._timeframe,
-        deps: import_timeframe.Timeframe.dependencies(target, this._timeframe)
-      }, {
-        F: __dxlog_file7,
-        L: 72,
-        S: this,
-        C: (f, a) => f(...a)
-      });
-      return import_timeframe.Timeframe.dependencies(target, this._timeframe).isEmpty();
-    });
-  }
-};
-_ts_decorate3([
-  (0, import_debug.timed)(5e3)
-], TimeframeClock.prototype, "waitUntilReached", null);
-var __dxlog_file8 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/pipeline/message-selector.ts";
-var createMessageSelector = (timeframeClock) => {
-  return (messages) => {
-    for (let i = 0; i < messages.length; i++) {
-      const { data: { timeframe } } = messages[i];
-      (0, import_invariant8.invariant)(timeframe, void 0, {
-        F: __dxlog_file8,
-        L: 25,
-        S: void 0,
-        A: [
-          "timeframe",
-          ""
-        ]
-      });
-      if (!timeframeClock.hasGaps(timeframe)) {
-        return i;
-      }
-    }
-    (0, import_log7.log)("Skipping...", void 0, {
-      F: __dxlog_file8,
       L: 33,
       S: void 0,
       C: (f, a) => f(...a)
     });
   };
 };
-function _ts_decorate4(decorators, target, key, desc) {
+function _ts_decorate3(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
     r = Reflect.decorate(decorators, target, key, desc);
@@ -1710,17 +916,17 @@ function _ts_decorate4(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file9 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/pipeline/pipeline.ts";
+var __dxlog_file7 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/pipeline/pipeline.ts";
 var PipelineState = class {
   constructor(_feeds, _timeframeClock) {
     this._feeds = _feeds;
     this._timeframeClock = _timeframeClock;
-    this._ctx = new import_context8.Context(void 0, {
-      F: __dxlog_file9,
+    this._ctx = new import_context4.Context(void 0, {
+      F: __dxlog_file7,
       L: 41
     });
     this.timeframeUpdate = this._timeframeClock.update;
-    this.stalled = new import_async7.Event();
+    this.stalled = new import_async4.Event();
     this._startTimeframe = new import_timeframe2.Timeframe();
     this._reachedTarget = false;
   }
@@ -1766,16 +972,16 @@ var PipelineState = class {
   *
   * @param timeout Timeout in milliseconds to specify the maximum wait time.
   */
-  async waitUntilReachedTargetTimeframe({ ctx = new import_context8.Context(void 0, {
-    F: __dxlog_file9,
+  async waitUntilReachedTargetTimeframe({ ctx = new import_context4.Context(void 0, {
+    F: __dxlog_file7,
     L: 129
   }), timeout, breakOnStall = true } = {}) {
-    (0, import_log6.log)("waitUntilReachedTargetTimeframe", {
+    (0, import_log5.log)("waitUntilReachedTargetTimeframe", {
       timeout,
       current: this.timeframe,
       target: this.targetTimeframe
     }, {
-      F: __dxlog_file9,
+      F: __dxlog_file7,
       L: 133,
       S: this,
       C: (f, a) => f(...a)
@@ -1791,23 +997,23 @@ var PipelineState = class {
     let done = false;
     if (timeout) {
       return Promise.race([
-        (0, import_context8.rejectOnDispose)(ctx),
-        (0, import_context8.rejectOnDispose)(this._ctx),
+        (0, import_context4.rejectOnDispose)(ctx),
+        (0, import_context4.rejectOnDispose)(this._ctx),
         this._reachedTargetPromise.then(() => {
           done = true;
           this._reachedTarget = true;
         }),
-        (0, import_async7.sleepWithContext)(this._ctx, timeout).then(() => {
+        (0, import_async4.sleepWithContext)(this._ctx, timeout).then(() => {
           if (done) {
             return;
           }
-          import_log6.log.warn("waitUntilReachedTargetTimeframe timed out", {
+          import_log5.log.warn("waitUntilReachedTargetTimeframe timed out", {
             timeout,
             current: this.timeframe,
             target: this.targetTimeframe,
             dependencies: import_timeframe2.Timeframe.dependencies(this.targetTimeframe, this.timeframe)
           }, {
-            F: __dxlog_file9,
+            F: __dxlog_file7,
             L: 161,
             S: this,
             C: (f, a) => f(...a)
@@ -1822,11 +1028,11 @@ var PipelineState = class {
 var Pipeline = class {
   constructor() {
     this._timeframeClock = new TimeframeClock(new import_timeframe2.Timeframe());
-    this._feeds = new import_util4.ComplexMap(import_keys4.PublicKey.hash);
+    this._feeds = new import_util2.ComplexMap(import_keys3.PublicKey.hash);
     this._state = new PipelineState(this._feeds, this._timeframeClock);
-    this._processingTrigger = new import_async7.Trigger().wake();
-    this._pauseTrigger = new import_async7.Trigger().wake();
-    this._downloads = new import_util4.ComplexMap((value) => import_keys4.PublicKey.hash(value.key));
+    this._processingTrigger = new import_async4.Trigger().wake();
+    this._pauseTrigger = new import_async4.Trigger().wake();
+    this._downloads = new import_util2.ComplexMap((value) => import_keys3.PublicKey.hash(value.key));
     this._isStopping = false;
     this._isStarted = false;
     this._isBeingConsumed = false;
@@ -1836,8 +1042,8 @@ var Pipeline = class {
     return this._state;
   }
   get writer() {
-    (0, import_invariant7.invariant)(this._writer, "Writer not set.", {
-      F: __dxlog_file9,
+    (0, import_invariant5.invariant)(this._writer, "Writer not set.", {
+      F: __dxlog_file7,
       L: 243,
       S: this,
       A: [
@@ -1865,8 +1071,8 @@ var Pipeline = class {
     }
   }
   setWriteFeed(feed) {
-    (0, import_invariant7.invariant)(!this._writer, "Writer already set.", {
-      F: __dxlog_file9,
+    (0, import_invariant5.invariant)(!this._writer, "Writer already set.", {
+      F: __dxlog_file7,
       L: 270,
       S: this,
       A: [
@@ -1874,8 +1080,8 @@ var Pipeline = class {
         "'Writer already set.'"
       ]
     });
-    (0, import_invariant7.invariant)(feed.properties.writable, "Feed must be writable.", {
-      F: __dxlog_file9,
+    (0, import_invariant5.invariant)(feed.properties.writable, "Feed must be writable.", {
+      F: __dxlog_file7,
       L: 271,
       S: this,
       A: [
@@ -1889,8 +1095,8 @@ var Pipeline = class {
     }), feed.createFeedWriter());
   }
   async start() {
-    (0, import_invariant7.invariant)(!this._isStarted, "Pipeline is already started.", {
-      F: __dxlog_file9,
+    (0, import_invariant5.invariant)(!this._isStarted, "Pipeline is already started.", {
+      F: __dxlog_file7,
       L: 284,
       S: this,
       A: [
@@ -1898,8 +1104,8 @@ var Pipeline = class {
         "'Pipeline is already started.'"
       ]
     });
-    (0, import_log6.log)("starting...", void 0, {
-      F: __dxlog_file9,
+    (0, import_log5.log)("starting...", void 0, {
+      F: __dxlog_file7,
       L: 285,
       S: this,
       C: (f, a) => f(...a)
@@ -1907,8 +1113,8 @@ var Pipeline = class {
     await this._initIterator();
     await this._feedSetIterator.open();
     this._isStarted = true;
-    (0, import_log6.log)("started", void 0, {
-      F: __dxlog_file9,
+    (0, import_log5.log)("started", void 0, {
+      F: __dxlog_file7,
       L: 289,
       S: this,
       C: (f, a) => f(...a)
@@ -1920,8 +1126,8 @@ var Pipeline = class {
     }
   }
   async stop() {
-    (0, import_log6.log)("stopping...", void 0, {
-      F: __dxlog_file9,
+    (0, import_log5.log)("stopping...", void 0, {
+      F: __dxlog_file7,
       L: 300,
       S: this,
       C: (f, a) => f(...a)
@@ -1934,15 +1140,15 @@ var Pipeline = class {
     await this._feedSetIterator?.close();
     await this._processingTrigger.wait();
     await this._state._ctx.dispose();
-    this._state._ctx = new import_context8.Context(void 0, {
-      F: __dxlog_file9,
+    this._state._ctx = new import_context4.Context(void 0, {
+      F: __dxlog_file7,
       L: 309
     });
     this._state._reachedTargetPromise = void 0;
     this._state._reachedTarget = false;
     this._isStarted = false;
-    (0, import_log6.log)("stopped", void 0, {
-      F: __dxlog_file9,
+    (0, import_log5.log)("stopped", void 0, {
+      F: __dxlog_file7,
       L: 313,
       S: this,
       C: (f, a) => f(...a)
@@ -1953,8 +1159,8 @@ var Pipeline = class {
   *  The pipeline will start processing messages AFTER this timeframe.
   */
   async setCursor(timeframe) {
-    (0, import_invariant7.invariant)(!this._isStarted || this._isPaused, "Invalid state.", {
-      F: __dxlog_file9,
+    (0, import_invariant5.invariant)(!this._isStarted || this._isPaused, "Invalid state.", {
+      F: __dxlog_file7,
       L: 322,
       S: this,
       A: [
@@ -1982,8 +1188,8 @@ var Pipeline = class {
     this._isPaused = true;
   }
   async unpause() {
-    (0, import_invariant7.invariant)(this._isPaused, "Pipeline is not paused.", {
-      F: __dxlog_file9,
+    (0, import_invariant5.invariant)(this._isPaused, "Pipeline is not paused.", {
+      F: __dxlog_file7,
       L: 351,
       S: this,
       A: [
@@ -2002,8 +1208,8 @@ var Pipeline = class {
   * Updates the timeframe clock after the message has bee processed.
   */
   async *consume() {
-    (0, import_invariant7.invariant)(!this._isBeingConsumed, "Pipeline is already being consumed.", {
-      F: __dxlog_file9,
+    (0, import_invariant5.invariant)(!this._isBeingConsumed, "Pipeline is already being consumed.", {
+      F: __dxlog_file7,
       L: 366,
       S: this,
       A: [
@@ -2012,8 +1218,8 @@ var Pipeline = class {
       ]
     });
     this._isBeingConsumed = true;
-    (0, import_invariant7.invariant)(this._feedSetIterator, "Iterator not initialized.", {
-      F: __dxlog_file9,
+    (0, import_invariant5.invariant)(this._feedSetIterator, "Iterator not initialized.", {
+      F: __dxlog_file7,
       L: 369,
       S: this,
       A: [
@@ -2026,8 +1232,8 @@ var Pipeline = class {
     while (!this._isStopping) {
       await this._pauseTrigger.wait();
       if (lastFeedSetIterator !== this._feedSetIterator) {
-        (0, import_invariant7.invariant)(this._feedSetIterator, "Iterator not initialized.", {
-          F: __dxlog_file9,
+        (0, import_invariant5.invariant)(this._feedSetIterator, "Iterator not initialized.", {
+          F: __dxlog_file7,
           L: 378,
           S: this,
           A: [
@@ -2042,7 +1248,7 @@ var Pipeline = class {
       if (!done) {
         const block = value ?? (0, import_debug2.failUndefined)();
         this._processingTrigger.reset();
-        this._timeframeClock.updatePendingTimeframe(import_keys4.PublicKey.from(block.feedKey), block.seq);
+        this._timeframeClock.updatePendingTimeframe(import_keys3.PublicKey.from(block.feedKey), block.seq);
         yield block;
         this._processingTrigger.wake();
         this._timeframeClock.updateTimeframe();
@@ -2057,12 +1263,12 @@ var Pipeline = class {
     }
     const timeframe = this._state._startTimeframe;
     const seq = timeframe.get(feed.key) ?? -1;
-    (0, import_log6.log)("download", {
+    (0, import_log5.log)("download", {
       feed: feed.key.truncate(),
       seq,
       length: feed.length
     }, {
-      F: __dxlog_file9,
+      F: __dxlog_file7,
       L: 407,
       S: this,
       C: (f, a) => f(...a)
@@ -2073,10 +1279,10 @@ var Pipeline = class {
     }, (err, data) => {
       if (err) {
       } else {
-        import_log6.log.info("downloaded", {
+        import_log5.log.info("downloaded", {
           data
         }, {
-          F: __dxlog_file9,
+          F: __dxlog_file7,
           L: 412,
           S: this,
           C: (f, a) => f(...a)
@@ -2091,8 +1297,8 @@ var Pipeline = class {
       stallTimeout: 1e3
     });
     this._feedSetIterator.stalled.on((iterator) => {
-      import_log6.log.warn(`Stalled after ${iterator.options.stallTimeout}ms with ${iterator.size} feeds.`, void 0, {
-        F: __dxlog_file9,
+      import_log5.log.warn(`Stalled after ${iterator.options.stallTimeout}ms with ${iterator.size} feeds.`, void 0, {
+        F: __dxlog_file7,
         L: 426,
         S: this,
         C: (f, a) => f(...a)
@@ -2104,22 +1310,123 @@ var Pipeline = class {
     }
   }
 };
-_ts_decorate4([
-  import_async7.synchronized
+_ts_decorate3([
+  import_async4.synchronized
 ], Pipeline.prototype, "start", null);
-_ts_decorate4([
-  import_async7.synchronized
+_ts_decorate3([
+  import_async4.synchronized
 ], Pipeline.prototype, "stop", null);
-_ts_decorate4([
-  import_async7.synchronized
+_ts_decorate3([
+  import_async4.synchronized
 ], Pipeline.prototype, "setCursor", null);
-_ts_decorate4([
-  import_async7.synchronized
+_ts_decorate3([
+  import_async4.synchronized
 ], Pipeline.prototype, "pause", null);
-_ts_decorate4([
-  import_async7.synchronized
+_ts_decorate3([
+  import_async4.synchronized
 ], Pipeline.prototype, "unpause", null);
-function _ts_decorate5(decorators, target, key, desc) {
+var __dxlog_file8 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/auth.ts";
+var AuthExtension = class extends import_teleport.RpcExtension {
+  constructor(_authParams) {
+    super({
+      requested: {
+        AuthService: import_protocols5.schema.getService("dxos.mesh.teleport.auth.AuthService")
+      },
+      exposed: {
+        AuthService: import_protocols5.schema.getService("dxos.mesh.teleport.auth.AuthService")
+      },
+      timeout: 60 * 1e3
+    });
+    this._authParams = _authParams;
+    this._ctx = new import_context5.Context({
+      onError: (err) => {
+        import_log7.log.catch(err, void 0, {
+          F: __dxlog_file8,
+          L: 28,
+          S: this,
+          C: (f, a) => f(...a)
+        });
+      }
+    }, {
+      F: __dxlog_file8,
+      L: 26
+    });
+  }
+  async getHandlers() {
+    return {
+      AuthService: {
+        authenticate: async ({ challenge }) => {
+          try {
+            const credential = await this._authParams.provider(challenge);
+            if (!credential) {
+              throw new Error("auth rejected");
+            }
+            return {
+              credential
+            };
+          } catch (err) {
+            import_log7.log.error("failed to generate auth credentials", err, {
+              F: __dxlog_file8,
+              L: 55,
+              S: this,
+              C: (f, a) => f(...a)
+            });
+            throw new Error("auth rejected");
+          }
+        }
+      }
+    };
+  }
+  async onOpen(context) {
+    await super.onOpen(context);
+    (0, import_async5.scheduleTask)(this._ctx, async () => {
+      try {
+        const challenge = (0, import_crypto2.randomBytes)(32);
+        const { credential } = await this.rpc.AuthService.authenticate({
+          challenge
+        });
+        (0, import_invariant7.invariant)(credential?.length > 0, "invalid credential", {
+          F: __dxlog_file8,
+          L: 69,
+          S: this,
+          A: [
+            "credential?.length > 0",
+            "'invalid credential'"
+          ]
+        });
+        const success = await this._authParams.verifier(challenge, credential);
+        (0, import_invariant7.invariant)(success, "credential not verified", {
+          F: __dxlog_file8,
+          L: 71,
+          S: this,
+          A: [
+            "success",
+            "'credential not verified'"
+          ]
+        });
+        (0, import_async5.runInContext)(this._ctx, () => this._authParams.onAuthSuccess());
+      } catch (err) {
+        (0, import_log7.log)("auth failed", err, {
+          F: __dxlog_file8,
+          L: 74,
+          S: this,
+          C: (f, a) => f(...a)
+        });
+        this.close();
+        this._authParams.onAuthFailure();
+      }
+    });
+  }
+  async onClose() {
+    await this._ctx.dispose();
+    await super.onClose();
+  }
+  async onAbort() {
+    await this._ctx.dispose();
+    await super.onAbort();
+  }
+};
+function _ts_decorate4(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2129,22 +1436,22 @@ function _ts_decorate5(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file10 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/control-pipeline.ts";
+var __dxlog_file9 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/control-pipeline.ts";
 var TIMEFRAME_SAVE_DEBOUNCE_INTERVAL = 500;
 var CONTROL_PIPELINE_SNAPSHOT_DELAY = 1e4;
 var USE_SNAPSHOTS = true;
 var ControlPipeline = class {
   constructor({ spaceKey, genesisFeed, feedProvider, metadataStore }) {
-    this._ctx = new import_context10.Context(void 0, {
-      F: __dxlog_file10,
+    this._ctx = new import_context7.Context(void 0, {
+      F: __dxlog_file9,
       L: 47
     });
     this._lastTimeframeSaveTime = Date.now();
-    this.onFeedAdmitted = new import_util6.Callback();
-    this._usage = new import_tracing3.TimeUsageCounter();
-    this._mutations = new import_tracing3.TimeSeriesCounter();
-    this._snapshotTask = new import_async9.DeferredTask(this._ctx, async () => {
-      await (0, import_async9.sleepWithContext)(this._ctx, CONTROL_PIPELINE_SNAPSHOT_DELAY);
+    this.onFeedAdmitted = new import_util4.Callback();
+    this._usage = new import_tracing2.TimeUsageCounter();
+    this._mutations = new import_tracing2.TimeSeriesCounter();
+    this._snapshotTask = new import_async7.DeferredTask(this._ctx, async () => {
+      await (0, import_async7.sleepWithContext)(this._ctx, CONTROL_PIPELINE_SNAPSHOT_DELAY);
       await this._saveSnapshot();
     });
     this._spaceKey = spaceKey;
@@ -2156,7 +1463,7 @@ var ControlPipeline = class {
       (0, import_log9.log)("feed admitted", {
         key: info.key
       }, {
-        F: __dxlog_file10,
+        F: __dxlog_file9,
         L: 82,
         S: this,
         C: (f, a) => f(...a)
@@ -2170,7 +1477,7 @@ var ControlPipeline = class {
             }
           } catch (err) {
             import_log9.log.catch(err, void 0, {
-              F: __dxlog_file10,
+              F: __dxlog_file9,
               L: 93,
               S: this,
               C: (f, a) => f(...a)
@@ -2202,7 +1509,7 @@ var ControlPipeline = class {
       present: !!snapshot,
       tf: snapshot?.timeframe
     }, {
-      F: __dxlog_file10,
+      F: __dxlog_file9,
       L: 123,
       S: this,
       C: (f, a) => f(...a)
@@ -2211,20 +1518,20 @@ var ControlPipeline = class {
       await this._processSnapshot(snapshot);
     }
     (0, import_log9.log)("starting...", void 0, {
-      F: __dxlog_file10,
+      F: __dxlog_file9,
       L: 128,
       S: this,
       C: (f, a) => f(...a)
     });
     setTimeout(async () => {
-      void this._consumePipeline(new import_context10.Context(void 0, {
-        F: __dxlog_file10,
+      void this._consumePipeline(new import_context7.Context(void 0, {
+        F: __dxlog_file9,
         L: 130
       }));
     });
     await this._pipeline.start();
     (0, import_log9.log)("started", void 0, {
-      F: __dxlog_file10,
+      F: __dxlog_file9,
       L: 134,
       S: this,
       C: (f, a) => f(...a)
@@ -2241,7 +1548,7 @@ var ControlPipeline = class {
         import_log9.log.warn("credential processing failed from snapshot", {
           message
         }, {
-          F: __dxlog_file10,
+          F: __dxlog_file9,
           L: 147,
           S: this,
           C: (f, a) => f(...a)
@@ -2263,7 +1570,7 @@ var ControlPipeline = class {
       key: this._spaceKey,
       snapshot
     }, {
-      F: __dxlog_file10,
+      F: __dxlog_file9,
       L: 163,
       S: this,
       C: (f, a) => f(...a)
@@ -2278,7 +1585,7 @@ var ControlPipeline = class {
         await this._processMessage(ctx, msg);
       } catch (err) {
         import_log9.log.catch(err, void 0, {
-          F: __dxlog_file10,
+          F: __dxlog_file9,
           L: 176,
           S: this,
           C: (f, a) => f(...a)
@@ -2292,22 +1599,22 @@ var ControlPipeline = class {
       key: msg.feedKey,
       seq: msg.seq
     }, {
-      F: __dxlog_file10,
+      F: __dxlog_file9,
       L: 186,
       S: this,
       C: (f, a) => f(...a)
     });
     if (msg.data.payload.credential) {
-      const timer = import_util6.tracer.mark("dxos.echo.pipeline.control");
+      const timer = import_util4.tracer.mark("dxos.echo.pipeline.control");
       const result = await this._spaceStateMachine.process(msg.data.payload.credential.credential, {
-        sourceFeed: import_keys6.PublicKey.from(msg.feedKey)
+        sourceFeed: import_keys5.PublicKey.from(msg.feedKey)
       });
       timer.end();
       if (!result) {
         import_log9.log.warn("processing failed", {
           msg
         }, {
-          F: __dxlog_file10,
+          F: __dxlog_file9,
           L: 195,
           S: this,
           C: (f, a) => f(...a)
@@ -2326,7 +1633,7 @@ var ControlPipeline = class {
   }
   async stop() {
     (0, import_log9.log)("stopping...", void 0, {
-      F: __dxlog_file10,
+      F: __dxlog_file9,
       L: 215,
       S: this,
       C: (f, a) => f(...a)
@@ -2335,7 +1642,7 @@ var ControlPipeline = class {
     await this._pipeline.stop();
     await this._saveTargetTimeframe(this._pipeline.state.timeframe);
     (0, import_log9.log)("stopped", void 0, {
-      F: __dxlog_file10,
+      F: __dxlog_file9,
       L: 219,
       S: this,
       C: (f, a) => f(...a)
@@ -2348,7 +1655,7 @@ var ControlPipeline = class {
       this._targetTimeframe = newTimeframe;
     } catch (err) {
       (0, import_log9.log)(err, void 0, {
-        F: __dxlog_file10,
+        F: __dxlog_file9,
         L: 228,
         S: this,
         C: (f, a) => f(...a)
@@ -2356,28 +1663,28 @@ var ControlPipeline = class {
     }
   }
 };
-_ts_decorate5([
-  import_tracing3.trace.metricsCounter()
+_ts_decorate4([
+  import_tracing2.trace.metricsCounter()
 ], ControlPipeline.prototype, "_usage", void 0);
-_ts_decorate5([
-  import_tracing3.trace.metricsCounter()
+_ts_decorate4([
+  import_tracing2.trace.metricsCounter()
 ], ControlPipeline.prototype, "_mutations", void 0);
-_ts_decorate5([
-  import_tracing3.trace.span({
+_ts_decorate4([
+  import_tracing2.trace.span({
     showInBrowserTimeline: true
   })
 ], ControlPipeline.prototype, "start", null);
-_ts_decorate5([
-  import_tracing3.trace.span()
+_ts_decorate4([
+  import_tracing2.trace.span()
 ], ControlPipeline.prototype, "_consumePipeline", null);
-_ts_decorate5([
-  import_tracing3.trace.span()
+_ts_decorate4([
+  import_tracing2.trace.span()
 ], ControlPipeline.prototype, "_processMessage", null);
-ControlPipeline = _ts_decorate5([
-  import_tracing3.trace.resource(),
-  (0, import_async9.trackLeaks)("start", "stop")
+ControlPipeline = _ts_decorate4([
+  import_tracing2.trace.resource(),
+  (0, import_async7.trackLeaks)("start", "stop")
 ], ControlPipeline);
-function _ts_decorate6(decorators, target, key, desc) {
+function _ts_decorate5(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2387,15 +1694,15 @@ function _ts_decorate6(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file11 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/space.ts";
-var Space = class extends import_context9.Resource {
+var __dxlog_file10 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/space.ts";
+var Space = class extends import_context6.Resource {
   constructor(params) {
     super();
-    this._addFeedMutex = new import_async8.Mutex();
-    this.onCredentialProcessed = new import_util5.Callback();
-    this.stateUpdate = new import_async8.Event();
-    (0, import_invariant9.invariant)(params.spaceKey && params.feedProvider, void 0, {
-      F: __dxlog_file11,
+    this._addFeedMutex = new import_async6.Mutex();
+    this.onCredentialProcessed = new import_util3.Callback();
+    this.stateUpdate = new import_async6.Event();
+    (0, import_invariant8.invariant)(params.spaceKey && params.feedProvider, void 0, {
+      F: __dxlog_file10,
       L: 78,
       S: this,
       A: [
@@ -2429,7 +1736,7 @@ var Space = class extends import_context9.Resource {
       (0, import_log8.log)("onCredentialProcessed", {
         credential
       }, {
-        F: __dxlog_file11,
+        F: __dxlog_file10,
         L: 106,
         S: this,
         C: (f, a) => f(...a)
@@ -2440,7 +1747,7 @@ var Space = class extends import_context9.Resource {
       (0, import_log8.log)("onDelegatedInvitation", {
         invitation
       }, {
-        F: __dxlog_file11,
+        F: __dxlog_file10,
         L: 110,
         S: this,
         C: (f, a) => f(...a)
@@ -2451,7 +1758,7 @@ var Space = class extends import_context9.Resource {
       (0, import_log8.log)("onDelegatedInvitationRemoved", {
         invitation
       }, {
-        F: __dxlog_file11,
+        F: __dxlog_file10,
         L: 114,
         S: this,
         C: (f, a) => f(...a)
@@ -2465,7 +1772,7 @@ var Space = class extends import_context9.Resource {
           m.role
         ])
       }), {
-        F: __dxlog_file11,
+        F: __dxlog_file10,
         L: 118,
         S: this,
         C: (f, a) => f(...a)
@@ -2482,7 +1789,7 @@ var Space = class extends import_context9.Resource {
     return this._key;
   }
   get isOpen() {
-    return this._lifecycleState === import_context9.LifecycleState.OPEN;
+    return this._lifecycleState === import_context6.LifecycleState.OPEN;
   }
   get genesisFeedKey() {
     return this._genesisFeedKey;
@@ -2506,8 +1813,8 @@ var Space = class extends import_context9.Resource {
     return this._snapshotManager;
   }
   async setControlFeed(feed) {
-    (0, import_invariant9.invariant)(!this._controlFeed, "Control feed already set.", {
-      F: __dxlog_file11,
+    (0, import_invariant8.invariant)(!this._controlFeed, "Control feed already set.", {
+      F: __dxlog_file10,
       L: 171,
       S: this,
       A: [
@@ -2520,8 +1827,8 @@ var Space = class extends import_context9.Resource {
     return this;
   }
   async setDataFeed(feed) {
-    (0, import_invariant9.invariant)(!this._dataFeed, "Data feed already set.", {
-      F: __dxlog_file11,
+    (0, import_invariant8.invariant)(!this._dataFeed, "Data feed already set.", {
+      F: __dxlog_file10,
       L: 178,
       S: this,
       A: [
@@ -2540,7 +1847,7 @@ var Space = class extends import_context9.Resource {
   }
   async _open(ctx) {
     (0, import_log8.log)("opening...", void 0, {
-      F: __dxlog_file11,
+      F: __dxlog_file10,
       L: 192,
       S: this,
       C: (f, a) => f(...a)
@@ -2548,7 +1855,7 @@ var Space = class extends import_context9.Resource {
     await this._controlPipeline.start();
     await this.protocol.start();
     (0, import_log8.log)("opened", void 0, {
-      F: __dxlog_file11,
+      F: __dxlog_file10,
       L: 198,
       S: this,
       C: (f, a) => f(...a)
@@ -2558,7 +1865,7 @@ var Space = class extends import_context9.Resource {
     (0, import_log8.log)("closing...", {
       key: this._key
     }, {
-      F: __dxlog_file11,
+      F: __dxlog_file10,
       L: 203,
       S: this,
       C: (f, a) => f(...a)
@@ -2566,50 +1873,50 @@ var Space = class extends import_context9.Resource {
     await this.protocol.stop();
     await this._controlPipeline.stop();
     (0, import_log8.log)("closed", void 0, {
-      F: __dxlog_file11,
+      F: __dxlog_file10,
       L: 209,
       S: this,
       C: (f, a) => f(...a)
     });
   }
 };
-_ts_decorate6([
-  import_tracing2.trace.info()
+_ts_decorate5([
+  import_tracing.trace.info()
 ], Space.prototype, "protocol", void 0);
-_ts_decorate6([
-  import_tracing2.trace.info()
+_ts_decorate5([
+  import_tracing.trace.info()
 ], Space.prototype, "_controlPipeline", void 0);
-_ts_decorate6([
+_ts_decorate5([
   import_log8.logInfo,
-  import_tracing2.trace.info()
+  import_tracing.trace.info()
 ], Space.prototype, "id", null);
-_ts_decorate6([
+_ts_decorate5([
   import_log8.logInfo,
-  import_tracing2.trace.info()
+  import_tracing.trace.info()
 ], Space.prototype, "key", null);
-_ts_decorate6([
-  import_tracing2.trace.span()
+_ts_decorate5([
+  import_tracing.trace.span()
 ], Space.prototype, "_open", null);
-_ts_decorate6([
-  import_async8.synchronized
+_ts_decorate5([
+  import_async6.synchronized
 ], Space.prototype, "_close", null);
-Space = _ts_decorate6([
-  (0, import_async8.trackLeaks)("open", "close"),
-  import_tracing2.trace.resource()
+Space = _ts_decorate5([
+  (0, import_async6.trackLeaks)("open", "close"),
+  import_tracing.trace.resource()
 ], Space);
-var SPACE_IDS_CACHE = new import_util5.ComplexMap(import_keys5.PublicKey.hash);
+var SPACE_IDS_CACHE = new import_util3.ComplexMap(import_keys4.PublicKey.hash);
 var createIdFromSpaceKey = async (spaceKey) => {
   const cachedValue = SPACE_IDS_CACHE.get(spaceKey);
   if (cachedValue !== void 0) {
     return cachedValue;
   }
   const digest = await import_crypto3.subtleCrypto.digest("SHA-256", spaceKey.asUint8Array());
-  const bytes = new Uint8Array(digest).slice(0, import_keys5.SpaceId.byteLength);
-  const spaceId = import_keys5.SpaceId.encode(bytes);
+  const bytes = new Uint8Array(digest).slice(0, import_keys4.SpaceId.byteLength);
+  const spaceId = import_keys4.SpaceId.encode(bytes);
   SPACE_IDS_CACHE.set(spaceKey, spaceId);
   return spaceId;
 };
-var __dxlog_file12 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/admission-discovery-extension.ts";
+var __dxlog_file11 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/admission-discovery-extension.ts";
 var CredentialRetrieverExtension = class extends import_teleport2.RpcExtension {
   constructor(_request, _onResult) {
     super({
@@ -2619,8 +1926,8 @@ var CredentialRetrieverExtension = class extends import_teleport2.RpcExtension {
     });
     this._request = _request;
     this._onResult = _onResult;
-    this._ctx = new import_context11.Context(void 0, {
-      F: __dxlog_file12,
+    this._ctx = new import_context8.Context(void 0, {
+      F: __dxlog_file11,
       L: 25
     });
   }
@@ -2629,7 +1936,7 @@ var CredentialRetrieverExtension = class extends import_teleport2.RpcExtension {
   }
   async onOpen(context) {
     await super.onOpen(context);
-    (0, import_async10.scheduleTask)(this._ctx, async () => {
+    (0, import_async8.scheduleTask)(this._ctx, async () => {
       try {
         const result = await this.rpc.AdmissionDiscoveryService.getAdmissionCredential(this._request);
         this._onResult.wake(result.admissionCredential);
@@ -2670,7 +1977,7 @@ var CredentialServerExtension = class extends import_teleport2.RpcExtension {
     };
   }
 };
-function _ts_decorate7(decorators, target, key, desc) {
+function _ts_decorate6(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2680,13 +1987,13 @@ function _ts_decorate7(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file13 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/space-protocol.ts";
+var __dxlog_file12 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/space-protocol.ts";
 var MOCK_AUTH_PROVIDER = async (nonce) => Buffer.from("mock");
 var MOCK_AUTH_VERIFIER = async (nonce, credential) => true;
 var SpaceProtocol = class {
   constructor({ topic, swarmIdentity, networkManager, onSessionAuth, onAuthFailure, blobStore }) {
     this._feeds = /* @__PURE__ */ new Set();
-    this._sessions = new import_util7.ComplexMap(import_keys7.PublicKey.hash);
+    this._sessions = new import_util5.ComplexMap(import_keys6.PublicKey.hash);
     this._topology = new import_network_manager.MMSTTopology({
       originateConnections: 4,
       maxPeers: 10,
@@ -2700,7 +2007,7 @@ var SpaceProtocol = class {
     this.blobSync = new import_teleport_extension_object_sync.BlobSync({
       blobStore
     });
-    this._topic = import_crypto4.subtleCrypto.digest("SHA-256", topic.asBuffer()).then(import_crypto4.discoveryKey).then(import_keys7.PublicKey.from);
+    this._topic = import_crypto4.subtleCrypto.digest("SHA-256", topic.asBuffer()).then(import_crypto4.discoveryKey).then(import_keys6.PublicKey.from);
   }
   get sessions() {
     return this._sessions;
@@ -2716,7 +2023,7 @@ var SpaceProtocol = class {
     (0, import_log10.log)("addFeed", {
       key: feed.key
     }, {
-      F: __dxlog_file13,
+      F: __dxlog_file12,
       L: 109,
       S: this,
       C: (f, a) => f(...a)
@@ -2734,7 +2041,7 @@ var SpaceProtocol = class {
     const credentials = await this._swarmIdentity.credentialProvider(Buffer.from(""));
     await this.blobSync.open();
     (0, import_log10.log)("starting...", void 0, {
-      F: __dxlog_file13,
+      F: __dxlog_file12,
       L: 128,
       S: this,
       C: (f, a) => f(...a)
@@ -2748,7 +2055,7 @@ var SpaceProtocol = class {
       label: `swarm ${topic.truncate()} for space ${this._spaceKey.truncate()}`
     });
     (0, import_log10.log)("started", void 0, {
-      F: __dxlog_file13,
+      F: __dxlog_file12,
       L: 138,
       S: this,
       C: (f, a) => f(...a)
@@ -2761,14 +2068,14 @@ var SpaceProtocol = class {
     await this.blobSync.close();
     if (this._connection) {
       (0, import_log10.log)("stopping...", void 0, {
-        F: __dxlog_file13,
+        F: __dxlog_file12,
         L: 149,
         S: this,
         C: (f, a) => f(...a)
       });
       await this._connection.close();
       (0, import_log10.log)("stopped", void 0, {
-        F: __dxlog_file13,
+        F: __dxlog_file12,
         L: 151,
         S: this,
         C: (f, a) => f(...a)
@@ -2792,18 +2099,18 @@ var SpaceProtocol = class {
     };
   }
 };
-_ts_decorate7([
+_ts_decorate6([
   import_log10.logInfo,
-  import_tracing4.trace.info()
+  import_tracing3.trace.info()
 ], SpaceProtocol.prototype, "_topic", void 0);
-_ts_decorate7([
-  import_tracing4.trace.info()
+_ts_decorate6([
+  import_tracing3.trace.info()
 ], SpaceProtocol.prototype, "_spaceKey", void 0);
-_ts_decorate7([
+_ts_decorate6([
   import_log10.logInfo
 ], SpaceProtocol.prototype, "_ownPeerKey", null);
-SpaceProtocol = _ts_decorate7([
-  import_tracing4.trace.resource()
+SpaceProtocol = _ts_decorate6([
+  import_tracing3.trace.resource()
 ], SpaceProtocol);
 var AuthStatus;
 (function(AuthStatus2) {
@@ -2841,7 +2148,7 @@ var SpaceProtocolSession = class {
       verifier: this._swarmIdentity.credentialAuthenticator,
       onAuthSuccess: () => {
         (0, import_log10.log)("Peer authenticated", void 0, {
-          F: __dxlog_file13,
+          F: __dxlog_file12,
           L: 248,
           S: this,
           C: (f, a) => f(...a)
@@ -2859,7 +2166,7 @@ var SpaceProtocolSession = class {
   }
   async close() {
     (0, import_log10.log)("close", void 0, {
-      F: __dxlog_file13,
+      F: __dxlog_file12,
       L: 264,
       S: this,
       C: (f, a) => f(...a)
@@ -2870,466 +2177,49 @@ var SpaceProtocolSession = class {
     await this._teleport.abort();
   }
 };
-_ts_decorate7([
+_ts_decorate6([
   import_log10.logInfo
 ], SpaceProtocolSession.prototype, "_wireParams", void 0);
-_ts_decorate7([
+_ts_decorate6([
   import_log10.logInfo
 ], SpaceProtocolSession.prototype, "authStatus", null);
-var __dxlog_file14 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/mesh-echo-replicator-connection.ts";
-var DEFAULT_FACTORY = (params) => new import_teleport_extension_automerge_replicator.AutomergeReplicator(...params);
-var MeshReplicatorConnection = class extends import_context12.Resource {
-  constructor(_params) {
-    super();
-    this._params = _params;
-    this.remoteDeviceKey = null;
-    this._remotePeerId = null;
-    this._isEnabled = false;
-    let readableStreamController;
-    this.readable = new ReadableStream({
-      start: (controller) => {
-        readableStreamController = controller;
-        this._ctx.onDispose(() => controller.close());
-      }
-    });
-    this.writable = new WritableStream({
-      write: async (message, controller) => {
-        (0, import_invariant12.invariant)(this._isEnabled, "Writing to a disabled connection", {
-          F: __dxlog_file14,
-          L: 48,
-          S: this,
-          A: [
-            "this._isEnabled",
-            "'Writing to a disabled connection'"
-          ]
-        });
-        try {
-          await this.replicatorExtension.sendSyncMessage({
-            payload: import_automerge_repo3.cbor.encode(message)
-          });
-        } catch (err) {
-          controller.error(err);
-          this._disconnectIfEnabled();
-        }
-      }
-    });
-    const createAutomergeReplicator = this._params.replicatorFactory ?? DEFAULT_FACTORY;
-    this.replicatorExtension = createAutomergeReplicator([
-      {
-        peerId: this._params.ownPeerId
-      },
-      {
-        onStartReplication: async (info, remotePeerId) => {
-          this.remoteDeviceKey = remotePeerId;
-          this._remotePeerId = info.id;
-          (0, import_log14.log)("onStartReplication", {
-            id: info.id,
-            thisPeerId: this.peerId,
-            remotePeerId: remotePeerId.toHex()
-          }, {
-            F: __dxlog_file14,
-            L: 82,
-            S: this,
-            C: (f, a) => f(...a)
-          });
-          this._params.onRemoteConnected();
-        },
-        onSyncMessage: async ({ payload }) => {
-          if (!this._isEnabled) {
-            return;
-          }
-          const message = import_automerge_repo3.cbor.decode(payload);
-          readableStreamController.enqueue(message);
-        },
-        onClose: async () => {
-          this._disconnectIfEnabled();
-        }
-      }
-    ]);
-  }
-  _disconnectIfEnabled() {
-    if (this._isEnabled) {
-      this._params.onRemoteDisconnected();
-    }
+function _ts_decorate7(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
+    r = Reflect.decorate(decorators, target, key, desc);
+  else
+    for (var i = decorators.length - 1; i >= 0; i--)
+      if (d = decorators[i])
+        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+var __dxlog_file13 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/space-manager.ts";
+var SpaceManager = class {
+  constructor({ feedStore, networkManager, metadataStore, snapshotStore, blobStore }) {
+    this._spaces = new import_util6.ComplexMap(import_keys7.PublicKey.hash);
+    this._instanceId = import_keys7.PublicKey.random().toHex();
+    this._feedStore = feedStore;
+    this._networkManager = networkManager;
+    this._metadataStore = metadataStore;
+    this._snapshotStore = snapshotStore;
+    this._blobStore = blobStore;
   }
-  get peerId() {
-    (0, import_invariant12.invariant)(this._remotePeerId != null, "Remote peer has not connected yet.", {
-      F: __dxlog_file14,
-      L: 108,
-      S: this,
-      A: [
-        "this._remotePeerId != null",
-        "'Remote peer has not connected yet.'"
-      ]
-    });
-    return this._remotePeerId;
+  // TODO(burdon): Remove.
+  get spaces() {
+    return this._spaces;
   }
-  async shouldAdvertise(params) {
-    return this._params.shouldAdvertise(params);
+  async open() {
   }
-  shouldSyncCollection(params) {
-    return this._params.shouldSyncCollection(params);
-  }
-  /**
-  * Start exchanging messages with the remote peer.
-  * Call after the remote peer has connected.
-  */
-  enable() {
-    (0, import_invariant12.invariant)(this._remotePeerId != null, "Remote peer has not connected yet.", {
-      F: __dxlog_file14,
-      L: 125,
-      S: this,
-      A: [
-        "this._remotePeerId != null",
-        "'Remote peer has not connected yet.'"
-      ]
-    });
-    this._isEnabled = true;
-  }
-  /**
-  * Stop exchanging messages with the remote peer.
-  */
-  disable() {
-    this._isEnabled = false;
-  }
-};
-var __dxlog_file15 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/mesh-echo-replicator.ts";
-var MeshEchoReplicator = class {
-  constructor() {
-    this._connections = /* @__PURE__ */ new Set();
-    this._connectionsPerPeer = /* @__PURE__ */ new Map();
-    this._authorizedDevices = /* @__PURE__ */ new Map();
-    this._context = null;
-  }
-  async connect(context) {
-    this._context = context;
-  }
-  async disconnect() {
-    for (const connection of this._connectionsPerPeer.values()) {
-      this._context?.onConnectionClosed(connection);
-    }
-    for (const connection of this._connections) {
-      await connection.close();
-    }
-    this._connections.clear();
-    this._connectionsPerPeer.clear();
-    this._context = null;
-  }
-  createExtension(extensionFactory) {
-    (0, import_invariant11.invariant)(this._context, void 0, {
-      F: __dxlog_file15,
-      L: 56,
-      S: this,
-      A: [
-        "this._context",
-        ""
-      ]
-    });
-    const connection = new MeshReplicatorConnection({
-      ownPeerId: this._context.peerId,
-      replicatorFactory: extensionFactory,
-      onRemoteConnected: async () => {
-        (0, import_log13.log)("onRemoteConnected", {
-          peerId: connection.peerId
-        }, {
-          F: __dxlog_file15,
-          L: 62,
-          S: this,
-          C: (f, a) => f(...a)
-        });
-        (0, import_invariant11.invariant)(this._context, void 0, {
-          F: __dxlog_file15,
-          L: 63,
-          S: this,
-          A: [
-            "this._context",
-            ""
-          ]
-        });
-        if (this._connectionsPerPeer.has(connection.peerId)) {
-          this._context.onConnectionAuthScopeChanged(connection);
-        } else {
-          this._connectionsPerPeer.set(connection.peerId, connection);
-          this._context.onConnectionOpen(connection);
-          connection.enable();
-        }
-      },
-      onRemoteDisconnected: async () => {
-        (0, import_log13.log)("onRemoteDisconnected", {
-          peerId: connection.peerId
-        }, {
-          F: __dxlog_file15,
-          L: 74,
-          S: this,
-          C: (f, a) => f(...a)
-        });
-        this._context?.onConnectionClosed(connection);
-        this._connectionsPerPeer.delete(connection.peerId);
-        connection.disable();
-        this._connections.delete(connection);
-      },
-      shouldAdvertise: async (params) => {
-        (0, import_log13.log)("shouldAdvertise", {
-          peerId: connection.peerId,
-          documentId: params.documentId
-        }, {
-          F: __dxlog_file15,
-          L: 81,
-          S: this,
-          C: (f, a) => f(...a)
-        });
-        (0, import_invariant11.invariant)(this._context, void 0, {
-          F: __dxlog_file15,
-          L: 82,
-          S: this,
-          A: [
-            "this._context",
-            ""
-          ]
-        });
-        try {
-          const spaceKey = await this._context.getContainingSpaceForDocument(params.documentId);
-          if (!spaceKey) {
-            (0, import_log13.log)("space key not found for share policy check", {
-              peerId: connection.peerId,
-              documentId: params.documentId
-            }, {
-              F: __dxlog_file15,
-              L: 86,
-              S: this,
-              C: (f, a) => f(...a)
-            });
-            return false;
-          }
-          const spaceId = await createIdFromSpaceKey(spaceKey);
-          const authorizedDevices = this._authorizedDevices.get(spaceId);
-          if (!connection.remoteDeviceKey) {
-            (0, import_log13.log)("device key not found for share policy check", {
-              peerId: connection.peerId,
-              documentId: params.documentId
-            }, {
-              F: __dxlog_file15,
-              L: 98,
-              S: this,
-              C: (f, a) => f(...a)
-            });
-            return false;
-          }
-          const isAuthorized = authorizedDevices?.has(connection.remoteDeviceKey) ?? false;
-          (0, import_log13.log)("share policy check", {
-            localPeer: this._context.peerId,
-            remotePeer: connection.peerId,
-            documentId: params.documentId,
-            deviceKey: connection.remoteDeviceKey,
-            spaceKey,
-            isAuthorized
-          }, {
-            F: __dxlog_file15,
-            L: 106,
-            S: this,
-            C: (f, a) => f(...a)
-          });
-          return isAuthorized;
-        } catch (err) {
-          import_log13.log.catch(err, void 0, {
-            F: __dxlog_file15,
-            L: 116,
-            S: this,
-            C: (f, a) => f(...a)
-          });
-          return false;
-        }
-      },
-      shouldSyncCollection: ({ collectionId }) => {
-        const spaceId = getSpaceIdFromCollectionId(collectionId);
-        const authorizedDevices = this._authorizedDevices.get(spaceId);
-        if (!connection.remoteDeviceKey) {
-          (0, import_log13.log)("device key not found for collection sync check", {
-            peerId: connection.peerId,
-            collectionId
-          }, {
-            F: __dxlog_file15,
-            L: 126,
-            S: this,
-            C: (f, a) => f(...a)
-          });
-          return false;
-        }
-        const isAuthorized = authorizedDevices?.has(connection.remoteDeviceKey) ?? false;
-        return isAuthorized;
-      }
-    });
-    this._connections.add(connection);
-    return connection.replicatorExtension;
-  }
-  async authorizeDevice(spaceKey, deviceKey) {
-    (0, import_log13.log)("authorizeDevice", {
-      spaceKey,
-      deviceKey
-    }, {
-      F: __dxlog_file15,
-      L: 143,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    const spaceId = await createIdFromSpaceKey(spaceKey);
-    (0, import_util9.defaultMap)(this._authorizedDevices, spaceId, () => new import_util9.ComplexSet(import_keys10.PublicKey.hash)).add(deviceKey);
-    for (const connection of this._connections) {
-      if (connection.remoteDeviceKey && connection.remoteDeviceKey.equals(deviceKey)) {
-        if (this._connectionsPerPeer.has(connection.peerId)) {
-          this._context?.onConnectionAuthScopeChanged(connection);
-        }
-      }
-    }
-  }
-};
-var __dxlog_file16 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/db-host/data-service.ts";
-var DataServiceImpl = class {
-  constructor(params) {
-    this._subscriptions = /* @__PURE__ */ new Map();
-    this._automergeHost = params.automergeHost;
-    this._updateIndexes = params.updateIndexes;
-  }
-  subscribe(request) {
-    return new import_codec_protobuf.Stream(({ next, ready }) => {
-      const synchronizer = new DocumentsSynchronizer({
-        repo: this._automergeHost.repo,
-        sendUpdates: (updates) => next(updates)
-      });
-      synchronizer.open().then(() => {
-        this._subscriptions.set(request.subscriptionId, synchronizer);
-        ready();
-      }).catch((err) => import_log12.log.catch(err, void 0, {
-        F: __dxlog_file16,
-        L: 64,
-        S: this,
-        C: (f, a) => f(...a)
-      }));
-      return () => synchronizer.close();
-    });
-  }
-  async updateSubscription(request) {
-    const synchronizer = this._subscriptions.get(request.subscriptionId);
-    (0, import_invariant10.invariant)(synchronizer, "Subscription not found", {
-      F: __dxlog_file16,
-      L: 71,
-      S: this,
-      A: [
-        "synchronizer",
-        "'Subscription not found'"
-      ]
-    });
-    if (request.addIds?.length) {
-      await synchronizer.addDocuments(request.addIds);
-    }
-    if (request.removeIds?.length) {
-      await synchronizer.removeDocuments(request.removeIds);
-    }
-  }
-  async update(request) {
-    if (!request.updates) {
-      return;
-    }
-    const synchronizer = this._subscriptions.get(request.subscriptionId);
-    (0, import_invariant10.invariant)(synchronizer, "Subscription not found", {
-      F: __dxlog_file16,
-      L: 86,
-      S: this,
-      A: [
-        "synchronizer",
-        "'Subscription not found'"
-      ]
-    });
-    synchronizer.update(request.updates);
-  }
-  async flush(request) {
-    await this._automergeHost.flush(request);
-  }
-  async getDocumentHeads(request) {
-    const documentIds = request.documentIds;
-    if (!documentIds) {
-      return {
-        heads: {
-          entries: []
-        }
-      };
-    }
-    const heads = await this._automergeHost.getHeads(documentIds);
-    return {
-      heads: {
-        entries: heads.map((heads2, idx) => ({
-          documentId: documentIds[idx],
-          heads: heads2
-        }))
-      }
-    };
-  }
-  async waitUntilHeadsReplicated(request, options) {
-    await this._automergeHost.waitUntilHeadsReplicated(request.heads);
-  }
-  async reIndexHeads(request, options) {
-    await this._automergeHost.reIndexHeads(request.documentIds ?? []);
-  }
-  async updateIndexes() {
-    await this._updateIndexes();
-  }
-  async getSpaceSyncState(request, options) {
-    (0, import_invariant10.invariant)(import_keys9.SpaceId.isValid(request.spaceId), void 0, {
-      F: __dxlog_file16,
-      L: 127,
-      S: this,
-      A: [
-        "SpaceId.isValid(request.spaceId)",
-        ""
-      ]
-    });
-    const collectionId = deriveCollectionIdFromSpaceId(request.spaceId);
-    const state = await this._automergeHost.getCollectionSyncState(collectionId);
-    return {
-      peers: state.peers.map((peer) => ({
-        peerId: peer.peerId,
-        documentsToReconcile: peer.differentDocuments
-      }))
-    };
-  }
-};
-function _ts_decorate8(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
-    r = Reflect.decorate(decorators, target, key, desc);
-  else
-    for (var i = decorators.length - 1; i >= 0; i--)
-      if (d = decorators[i])
-        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-var __dxlog_file17 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/space-manager.ts";
-var SpaceManager = class {
-  constructor({ feedStore, networkManager, metadataStore, snapshotStore, blobStore }) {
-    this._spaces = new import_util8.ComplexMap(import_keys8.PublicKey.hash);
-    this._instanceId = import_keys8.PublicKey.random().toHex();
-    this._feedStore = feedStore;
-    this._networkManager = networkManager;
-    this._metadataStore = metadataStore;
-    this._snapshotStore = snapshotStore;
-    this._blobStore = blobStore;
-  }
-  // TODO(burdon): Remove.
-  get spaces() {
-    return this._spaces;
-  }
-  async open() {
-  }
-  async close() {
-    await Promise.all([
-      ...this._spaces.values()
-    ].map((space) => space.close()));
+  async close() {
+    await Promise.all([
+      ...this._spaces.values()
+    ].map((space) => space.close()));
   }
   async constructSpace({ metadata, swarmIdentity, onAuthorizedConnection, onAuthFailure, onDelegatedInvitationStatusChange, onMemberRolesChanged, memberKey }) {
     import_log11.log.trace("dxos.echo.space-manager.construct-space", import_protocols7.trace.begin({
       id: this._instanceId
     }), {
-      F: __dxlog_file17,
+      F: __dxlog_file13,
       L: 103,
       S: this,
       C: (f, a) => f(...a)
@@ -3337,7 +2227,7 @@ var SpaceManager = class {
     (0, import_log11.log)("constructing space...", {
       spaceKey: metadata.genesisFeedKey
     }, {
-      F: __dxlog_file17,
+      F: __dxlog_file13,
       L: 104,
       S: this,
       C: (f, a) => f(...a)
@@ -3370,7 +2260,7 @@ var SpaceManager = class {
     import_log11.log.trace("dxos.echo.space-manager.construct-space", import_protocols7.trace.end({
       id: this._instanceId
     }), {
-      F: __dxlog_file17,
+      F: __dxlog_file13,
       L: 135,
       S: this,
       C: (f, a) => f(...a)
@@ -3382,7 +2272,7 @@ var SpaceManager = class {
     import_log11.log.trace(traceKey, import_protocols7.trace.begin({
       id: this._instanceId
     }), {
-      F: __dxlog_file17,
+      F: __dxlog_file13,
       L: 141,
       S: this,
       C: (f, a) => f(...a)
@@ -3390,12 +2280,12 @@ var SpaceManager = class {
     (0, import_log11.log)("requesting space admission credential...", {
       spaceKey: params.spaceKey
     }, {
-      F: __dxlog_file17,
+      F: __dxlog_file13,
       L: 142,
       S: this,
       C: (f, a) => f(...a)
     });
-    const onCredentialResolved = new import_async11.Trigger();
+    const onCredentialResolved = new import_async9.Trigger();
     const protocol = new SpaceProtocol({
       topic: params.spaceKey,
       swarmIdentity: params.swarmIdentity,
@@ -3417,7 +2307,7 @@ var SpaceManager = class {
       import_log11.log.trace(traceKey, import_protocols7.trace.end({
         id: this._instanceId
       }), {
-        F: __dxlog_file17,
+        F: __dxlog_file13,
         L: 165,
         S: this,
         C: (f, a) => f(...a)
@@ -3428,7 +2318,7 @@ var SpaceManager = class {
         id: this._instanceId,
         error: err
       }), {
-        F: __dxlog_file17,
+        F: __dxlog_file13,
         L: 168,
         S: this,
         C: (f, a) => f(...a)
@@ -3439,360 +2329,25 @@ var SpaceManager = class {
     }
   }
 };
-_ts_decorate8([
-  import_async11.synchronized
+_ts_decorate7([
+  import_async9.synchronized
 ], SpaceManager.prototype, "open", null);
-_ts_decorate8([
-  import_async11.synchronized
+_ts_decorate7([
+  import_async9.synchronized
 ], SpaceManager.prototype, "close", null);
-SpaceManager = _ts_decorate8([
-  (0, import_async11.trackLeaks)("open", "close")
+SpaceManager = _ts_decorate7([
+  (0, import_async9.trackLeaks)("open", "close")
 ], SpaceManager);
-function _ts_decorate9(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
-    r = Reflect.decorate(decorators, target, key, desc);
-  else
-    for (var i = decorators.length - 1; i >= 0; i--)
-      if (d = decorators[i])
-        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-var __dxlog_file18 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/metadata/metadata-store.ts";
-var EXPIRED_INVITATION_CLEANUP_INTERVAL = 60 * 60 * 1e3;
-var emptyEchoMetadata = () => ({
-  version: import_protocols8.STORAGE_VERSION,
-  spaces: [],
-  created: /* @__PURE__ */ new Date(),
-  updated: /* @__PURE__ */ new Date()
-});
-var emptyLargeSpaceMetadata = () => ({});
-var EchoMetadata = import_protocols8.schema.getCodecForType("dxos.echo.metadata.EchoMetadata");
-var LargeSpaceMetadata = import_protocols8.schema.getCodecForType("dxos.echo.metadata.LargeSpaceMetadata");
-var MetadataStore = class {
-  constructor(directory) {
-    this._metadata = emptyEchoMetadata();
-    this._spaceLargeMetadata = new import_util10.ComplexMap(import_keys11.PublicKey.hash);
-    this._metadataFile = void 0;
-    this.update = new import_async12.Event();
-    this._invitationCleanupCtx = new import_context13.Context(void 0, {
-      F: __dxlog_file18,
-      L: 53
-    });
-    this._directory = directory;
-  }
-  get metadata() {
-    return this._metadata;
-  }
-  get version() {
-    return this._metadata.version ?? 0;
-  }
-  /**
-  * Returns a list of currently saved spaces. The list and objects in it can be modified addSpace and
-  * addSpaceFeed functions.
-  */
-  get spaces() {
-    return this._metadata.spaces ?? [];
-  }
-  async _readFile(file, codec2) {
-    try {
-      const { size: fileLength } = await file.stat();
-      if (fileLength < 8) {
-        return;
-      }
-      const dataSize = fromBytesInt32(await file.read(0, 4));
-      const checksum = fromBytesInt32(await file.read(4, 4));
-      (0, import_log15.log)("loaded", {
-        size: dataSize,
-        checksum,
-        name: file.filename
-      }, {
-        F: __dxlog_file18,
-        L: 89,
-        S: this,
-        C: (f, a) => f(...a)
-      });
-      if (fileLength < dataSize + 8) {
-        throw new import_protocols8.DataCorruptionError("Metadata size is smaller than expected.", {
-          fileLength,
-          dataSize
-        });
-      }
-      const data = await file.read(8, dataSize);
-      const calculatedChecksum = import_crc_32.default.buf(data);
-      if (calculatedChecksum !== checksum) {
-        throw new import_protocols8.DataCorruptionError("Metadata checksum is invalid.");
-      }
-      return codec2.decode(data);
-    } finally {
-      await file.close();
-    }
-  }
-  /**
-  * @internal
-  */
-  async _writeFile(file, codec2, data) {
-    const encoded = (0, import_util10.arrayToBuffer)(codec2.encode(data));
-    const checksum = import_crc_32.default.buf(encoded);
-    const result = Buffer.alloc(8 + encoded.length);
-    result.writeInt32LE(encoded.length, 0);
-    result.writeInt32LE(checksum, 4);
-    encoded.copy(result, 8);
-    await file.write(0, result);
-    (0, import_log15.log)("saved", {
-      size: encoded.length,
-      checksum
-    }, {
-      F: __dxlog_file18,
-      L: 124,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-  }
-  async close() {
-    await this._invitationCleanupCtx.dispose();
-    await this.flush();
-    await this._metadataFile?.close();
-    this._metadataFile = void 0;
-    this._metadata = emptyEchoMetadata();
-    this._spaceLargeMetadata.clear();
-  }
-  /**
-  * Loads metadata from persistent storage.
-  */
-  async load() {
-    if (!this._metadataFile || this._metadataFile.closed) {
-      this._metadataFile = this._directory.getOrCreateFile("EchoMetadata");
-    }
-    try {
-      const metadata = await this._readFile(this._metadataFile, EchoMetadata);
-      if (metadata) {
-        this._metadata = metadata;
-      }
-      this._metadata.spaces?.forEach((space) => {
-        space.state ??= import_services.SpaceState.ACTIVE;
-      });
-    } catch (err) {
-      import_log15.log.error("failed to load metadata", {
-        err
-      }, {
-        F: __dxlog_file18,
-        L: 156,
-        S: this,
-        C: (f, a) => f(...a)
-      });
-      this._metadata = emptyEchoMetadata();
-    }
-    await (0, import_util10.forEachAsync)([
-      this._metadata.identity?.haloSpace.key,
-      ...this._metadata.spaces?.map((space) => space.key) ?? []
-    ].filter(import_util10.isNotNullOrUndefined), async (key) => {
-      try {
-        await this._loadSpaceLargeMetadata(key);
-      } catch (err) {
-        import_log15.log.error("failed to load space large metadata", {
-          err
-        }, {
-          F: __dxlog_file18,
-          L: 168,
-          S: this,
-          C: (f, a) => f(...a)
-        });
-      }
-    });
-    (0, import_async12.scheduleTaskInterval)(this._invitationCleanupCtx, async () => {
-      for (const invitation of this._metadata.invitations ?? []) {
-        if (hasInvitationExpired(invitation) || isLegacyInvitationFormat(invitation)) {
-          await this.removeInvitation(invitation.invitationId);
-        }
-      }
-    }, EXPIRED_INVITATION_CLEANUP_INTERVAL);
-  }
-  async _save() {
-    const data = {
-      ...this._metadata,
-      version: import_protocols8.STORAGE_VERSION,
-      created: this._metadata.created ?? /* @__PURE__ */ new Date(),
-      updated: /* @__PURE__ */ new Date()
-    };
-    this.update.emit(data);
-    const file = this._directory.getOrCreateFile("EchoMetadata");
-    await this._writeFile(file, EchoMetadata, data);
-  }
-  async _loadSpaceLargeMetadata(key) {
-    const file = this._directory.getOrCreateFile(`space_${key.toHex()}_large`);
-    try {
-      const metadata = await this._readFile(file, LargeSpaceMetadata);
-      if (metadata) {
-        this._spaceLargeMetadata.set(key, metadata);
-      }
-    } catch (err) {
-      import_log15.log.error("failed to load space large metadata", {
-        err
-      }, {
-        F: __dxlog_file18,
-        L: 210,
-        S: this,
-        C: (f, a) => f(...a)
-      });
-    }
-  }
-  async _saveSpaceLargeMetadata(key) {
-    const data = this._getLargeSpaceMetadata(key);
-    const file = this._directory.getOrCreateFile(`space_${key.toHex()}_large`);
-    await this._writeFile(file, LargeSpaceMetadata, data);
-  }
-  async flush() {
-    await this._directory.flush();
-  }
-  _getSpace(spaceKey) {
-    if (this._metadata.identity?.haloSpace.key.equals(spaceKey)) {
-      return this._metadata.identity.haloSpace;
-    }
-    const space = this.spaces.find((space2) => space2.key === spaceKey);
-    (0, import_invariant13.invariant)(space, "Space not found", {
-      F: __dxlog_file18,
-      L: 232,
-      S: this,
-      A: [
-        "space",
-        "'Space not found'"
-      ]
-    });
-    return space;
-  }
-  _getLargeSpaceMetadata(key) {
-    let entry = this._spaceLargeMetadata.get(key);
-    if (entry) {
-      return entry;
-    }
-    entry = emptyLargeSpaceMetadata();
-    this._spaceLargeMetadata.set(key, entry);
-    return entry;
-  }
-  /**
-  * Clears storage - doesn't work for now.
-  */
-  async clear() {
-    (0, import_log15.log)("clearing all metadata", void 0, {
-      F: __dxlog_file18,
-      L: 251,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    await this._directory.delete();
-    this._metadata = emptyEchoMetadata();
-  }
-  getIdentityRecord() {
-    return this._metadata.identity;
-  }
-  async setIdentityRecord(record) {
-    (0, import_invariant13.invariant)(!this._metadata.identity, "Cannot overwrite existing identity in metadata", {
-      F: __dxlog_file18,
-      L: 261,
-      S: this,
-      A: [
-        "!this._metadata.identity",
-        "'Cannot overwrite existing identity in metadata'"
-      ]
-    });
-    this._metadata.identity = record;
-    await this._save();
-    await this.flush();
-  }
-  getInvitations() {
-    return this._metadata.invitations ?? [];
-  }
-  async addInvitation(invitation) {
-    if (this._metadata.invitations?.find((i) => i.invitationId === invitation.invitationId)) {
-      return;
-    }
-    (this._metadata.invitations ??= []).push(invitation);
-    await this._save();
-    await this.flush();
-  }
-  async removeInvitation(invitationId) {
-    this._metadata.invitations = (this._metadata.invitations ?? []).filter((i) => i.invitationId !== invitationId);
-    await this._save();
-    await this.flush();
-  }
-  async addSpace(record) {
-    (0, import_invariant13.invariant)(!(this._metadata.spaces ?? []).find((space) => space.key === record.key), "Cannot overwrite existing space in metadata", {
-      F: __dxlog_file18,
-      L: 289,
-      S: this,
-      A: [
-        "!(this._metadata.spaces ?? []).find((space) => space.key === record.key)",
-        "'Cannot overwrite existing space in metadata'"
-      ]
-    });
-    (this._metadata.spaces ??= []).push(record);
-    await this._save();
-    await this.flush();
-  }
-  async setSpaceDataLatestTimeframe(spaceKey, timeframe) {
-    this._getSpace(spaceKey).dataTimeframe = timeframe;
-    await this._save();
-  }
-  async setSpaceControlLatestTimeframe(spaceKey, timeframe) {
-    this._getSpace(spaceKey).controlTimeframe = timeframe;
-    await this._save();
-    await this.flush();
-  }
-  async setCache(spaceKey, cache) {
-    this._getSpace(spaceKey).cache = cache;
-    await this._save();
-  }
-  async setWritableFeedKeys(spaceKey, controlFeedKey, dataFeedKey) {
-    const space = this._getSpace(spaceKey);
-    space.controlFeedKey = controlFeedKey;
-    space.dataFeedKey = dataFeedKey;
-    await this._save();
-    await this.flush();
-  }
-  async setSpaceState(spaceKey, state) {
-    this._getSpace(spaceKey).state = state;
-    await this._save();
-    await this.flush();
-  }
-  getSpaceControlPipelineSnapshot(spaceKey) {
-    return this._getLargeSpaceMetadata(spaceKey).controlPipelineSnapshot;
-  }
-  async setSpaceControlPipelineSnapshot(spaceKey, snapshot) {
-    this._getLargeSpaceMetadata(spaceKey).controlPipelineSnapshot = snapshot;
-    await this._saveSpaceLargeMetadata(spaceKey);
-    await this.flush();
-  }
-};
-_ts_decorate9([
-  import_async12.synchronized
-], MetadataStore.prototype, "load", null);
-_ts_decorate9([
-  import_async12.synchronized
-], MetadataStore.prototype, "_save", null);
-_ts_decorate9([
-  import_async12.synchronized
-], MetadataStore.prototype, "_saveSpaceLargeMetadata", null);
-var fromBytesInt32 = (buf) => buf.readInt32LE(0);
-var hasInvitationExpired = (invitation) => {
-  return Boolean(invitation.created && invitation.lifetime && invitation.lifetime !== 0 && invitation.created.getTime() + invitation.lifetime * 1e3 < Date.now());
-};
-var isLegacyInvitationFormat = (invitation) => {
-  return invitation.type === import_services.Invitation.Type.MULTIUSE;
-};
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
   AuthExtension,
   AuthStatus,
-  AutomergeHost,
   CredentialRetrieverExtension,
   CredentialServerExtension,
   DataServiceImpl,
   DocumentsSynchronizer,
-  LevelDBStorageAdapter,
   MOCK_AUTH_PROVIDER,
   MOCK_AUTH_VERIFIER,
-  MeshEchoReplicator,
   MetadataStore,
   Pipeline,
   SnapshotManager,
@@ -3805,15 +2360,10 @@ var isLegacyInvitationFormat = (invitation) => {
   codec,
   createIdFromSpaceKey,
   createMappedFeedWriter,
-  deriveCollectionIdFromSpaceId,
-  diffCollectionState,
-  encodingOptions,
-  getSpaceIdFromCollectionId,
-  getSpaceKeyFromDoc,
   hasInvitationExpired,
   mapFeedIndexesToTimeframe,
   mapTimeframeToFeedIndexes,
   startAfter,
   valueEncoding
 });
-//# sourceMappingURL=chunk-RLTLWNAY.cjs.map
+//# sourceMappingURL=chunk-RH6TDRML.cjs.map