@dxos/echo-pipeline 0.6.5 → 0.6.6-staging.23d123d

package/dist/lib/node/{chunk-6MWU4MHX.cjs → chunk-IYTGTZ7D.cjs}

@@ -26,8 +26,8 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-var chunk_6MWU4MHX_exports = {};
-__export(chunk_6MWU4MHX_exports, {
+var chunk_IYTGTZ7D_exports = {};
+__export(chunk_IYTGTZ7D_exports, {
   AuthExtension: () => AuthExtension,
   AuthStatus: () => AuthStatus,
   AutomergeHost: () => AutomergeHost,
@@ -63,7 +63,7 @@ __export(chunk_6MWU4MHX_exports, {
   startAfter: () => startAfter,
   valueEncoding: () => valueEncoding
 });
-module.exports = __toCommonJS(chunk_6MWU4MHX_exports);
+module.exports = __toCommonJS(chunk_IYTGTZ7D_exports);
 var import_hypercore = require("@dxos/hypercore");
 var import_protocols = require("@dxos/protocols");
 var import_invariant = require("@dxos/invariant");
@@ -82,97 +82,99 @@ var import_async2 = require("@dxos/async");
 var import_automerge2 = require("@dxos/automerge/automerge");
 var import_context3 = require("@dxos/context");
 var import_util = require("@dxos/util");
-var import_context4 = require("@dxos/context");
 var import_async3 = require("@dxos/async");
-var import_automerge3 = require("@dxos/automerge/automerge");
-var import_automerge_repo = require("@dxos/automerge/automerge-repo");
-var import_context5 = require("@dxos/context");
+var import_context4 = require("@dxos/context");
+var import_crypto2 = require("@dxos/crypto");
 var import_invariant3 = require("@dxos/invariant");
-var import_keys2 = require("@dxos/keys");
 var import_log2 = require("@dxos/log");
 var import_protocols4 = require("@dxos/protocols");
-var import_tracing = require("@dxos/tracing");
-var import_async4 = require("@dxos/async");
-var import_automerge_repo2 = require("@dxos/automerge/automerge-repo");
-var import_context6 = require("@dxos/context");
-var import_invariant4 = require("@dxos/invariant");
-var import_log3 = require("@dxos/log");
-var import_util2 = require("@dxos/util");
-var import_indexing = require("@dxos/indexing");
-var import_invariant5 = require("@dxos/invariant");
-var import_keys3 = require("@dxos/keys");
-var import_async5 = require("@dxos/async");
-var import_context7 = require("@dxos/context");
-var import_crypto2 = require("@dxos/crypto");
-var import_invariant6 = require("@dxos/invariant");
-var import_log4 = require("@dxos/log");
-var import_protocols5 = require("@dxos/protocols");
 var import_teleport = require("@dxos/teleport");
-var import_async6 = require("@dxos/async");
+var import_async4 = require("@dxos/async");
 var import_debug = require("@dxos/debug");
-var import_log5 = require("@dxos/log");
+var import_log3 = require("@dxos/log");
 var import_timeframe = require("@dxos/timeframe");
-var import_async7 = require("@dxos/async");
-var import_context8 = require("@dxos/context");
+var import_async5 = require("@dxos/async");
+var import_context5 = require("@dxos/context");
 var import_debug2 = require("@dxos/debug");
 var import_feed_store = require("@dxos/feed-store");
-var import_invariant7 = require("@dxos/invariant");
-var import_keys4 = require("@dxos/keys");
-var import_log6 = require("@dxos/log");
+var import_invariant4 = require("@dxos/invariant");
+var import_keys2 = require("@dxos/keys");
+var import_log4 = require("@dxos/log");
 var import_timeframe2 = require("@dxos/timeframe");
-var import_util3 = require("@dxos/util");
-var import_invariant8 = require("@dxos/invariant");
-var import_log7 = require("@dxos/log");
-var import_async8 = require("@dxos/async");
-var import_context9 = require("@dxos/context");
+var import_util2 = require("@dxos/util");
+var import_invariant5 = require("@dxos/invariant");
+var import_log5 = require("@dxos/log");
+var import_async6 = require("@dxos/async");
+var import_context6 = require("@dxos/context");
 var import_crypto3 = require("@dxos/crypto");
-var import_invariant9 = require("@dxos/invariant");
-var import_keys5 = require("@dxos/keys");
-var import_log8 = require("@dxos/log");
+var import_invariant6 = require("@dxos/invariant");
+var import_keys3 = require("@dxos/keys");
+var import_log6 = require("@dxos/log");
 var import_credentials = require("@dxos/protocols/proto/dxos/halo/credentials");
-var import_tracing2 = require("@dxos/tracing");
-var import_util4 = require("@dxos/util");
-var import_async9 = require("@dxos/async");
-var import_context10 = require("@dxos/context");
+var import_tracing = require("@dxos/tracing");
+var import_util3 = require("@dxos/util");
+var import_async7 = require("@dxos/async");
+var import_context7 = require("@dxos/context");
 var import_credentials2 = require("@dxos/credentials");
-var import_keys6 = require("@dxos/keys");
-var import_log9 = require("@dxos/log");
+var import_keys4 = require("@dxos/keys");
+var import_log7 = require("@dxos/log");
 var import_credentials3 = require("@dxos/protocols/proto/dxos/halo/credentials");
 var import_timeframe3 = require("@dxos/timeframe");
-var import_tracing3 = require("@dxos/tracing");
-var import_util5 = require("@dxos/util");
-var import_async10 = require("@dxos/async");
-var import_context11 = require("@dxos/context");
-var import_protocols6 = require("@dxos/protocols");
+var import_tracing2 = require("@dxos/tracing");
+var import_util4 = require("@dxos/util");
+var import_async8 = require("@dxos/async");
+var import_context8 = require("@dxos/context");
+var import_protocols5 = require("@dxos/protocols");
 var import_teleport2 = require("@dxos/teleport");
 var import_crypto4 = require("@dxos/crypto");
-var import_keys7 = require("@dxos/keys");
-var import_log10 = require("@dxos/log");
+var import_keys5 = require("@dxos/keys");
+var import_log8 = require("@dxos/log");
 var import_network_manager = require("@dxos/network-manager");
 var import_teleport3 = require("@dxos/teleport");
 var import_teleport_extension_object_sync = require("@dxos/teleport-extension-object-sync");
 var import_teleport_extension_replicator = require("@dxos/teleport-extension-replicator");
-var import_tracing4 = require("@dxos/tracing");
-var import_util6 = require("@dxos/util");
-var import_async11 = require("@dxos/async");
+var import_tracing3 = require("@dxos/tracing");
+var import_util5 = require("@dxos/util");
+var import_async9 = require("@dxos/async");
 var import_debug3 = require("@dxos/debug");
+var import_keys6 = require("@dxos/keys");
+var import_log9 = require("@dxos/log");
+var import_protocols6 = require("@dxos/protocols");
+var import_util6 = require("@dxos/util");
+var import_codec_protobuf = require("@dxos/codec-protobuf");
+var import_invariant7 = require("@dxos/invariant");
+var import_keys7 = require("@dxos/keys");
+var import_log10 = require("@dxos/log");
+var import_async10 = require("@dxos/async");
+var import_automerge3 = require("@dxos/automerge/automerge");
+var import_automerge_repo = require("@dxos/automerge/automerge-repo");
+var import_context9 = require("@dxos/context");
+var import_invariant8 = require("@dxos/invariant");
 var import_keys8 = require("@dxos/keys");
 var import_log11 = require("@dxos/log");
 var import_protocols7 = require("@dxos/protocols");
+var import_tracing4 = require("@dxos/tracing");
+var import_async11 = require("@dxos/async");
+var import_automerge_repo2 = require("@dxos/automerge/automerge-repo");
+var import_context10 = require("@dxos/context");
+var import_invariant9 = require("@dxos/invariant");
+var import_log12 = require("@dxos/log");
 var import_util7 = require("@dxos/util");
-var import_codec_protobuf = require("@dxos/codec-protobuf");
+var import_protocols8 = require("@dxos/protocols");
+var import_indexing = require("@dxos/indexing");
+var import_context11 = require("@dxos/context");
 var import_invariant10 = require("@dxos/invariant");
 var import_keys9 = require("@dxos/keys");
-var import_log12 = require("@dxos/log");
-var import_invariant11 = require("@dxos/invariant");
-var import_keys10 = require("@dxos/keys");
 var import_log13 = require("@dxos/log");
 var import_util8 = require("@dxos/util");
+var A2 = __toESM(require("@dxos/automerge/automerge"));
 var import_automerge_repo3 = require("@dxos/automerge/automerge-repo");
 var import_context12 = require("@dxos/context");
-var import_invariant12 = require("@dxos/invariant");
+var import_invariant11 = require("@dxos/invariant");
 var import_log14 = require("@dxos/log");
 var import_teleport_extension_automerge_replicator = require("@dxos/teleport-extension-automerge-replicator");
+var import_invariant12 = require("@dxos/invariant");
+var import_keys10 = require("@dxos/keys");
 var import_tracing5 = require("@dxos/tracing");
 var import_util9 = require("@dxos/util");
 var import_crc_32 = __toESM(require("crc-32"));
@@ -181,7 +183,7 @@ var import_context13 = require("@dxos/context");
 var import_invariant13 = require("@dxos/invariant");
 var import_keys11 = require("@dxos/keys");
 var import_log15 = require("@dxos/log");
-var import_protocols8 = require("@dxos/protocols");
+var import_protocols9 = require("@dxos/protocols");
 var import_services = require("@dxos/protocols/proto/dxos/client/services");
 var import_util10 = require("@dxos/util");
 var codec = import_protocols.schema.getCodecForType("dxos.echo.feed.FeedMessage");
@@ -578,113 +580,107 @@ var diffCollectionState = (local, remote) => {
     different
   };
 };
-var LevelDBStorageAdapter = class extends import_context4.Resource {
-  constructor(_params) {
-    super();
-    this._params = _params;
-  }
-  async load(keyArray) {
-    try {
-      if (this._lifecycleState !== import_context4.LifecycleState.OPEN) {
-        return void 0;
-      }
-      const startMs = Date.now();
-      const chunk = await this._params.db.get(keyArray, {
-        ...encodingOptions
-      });
-      this._params.monitor?.recordBytesLoaded(chunk.byteLength);
-      this._params.monitor?.recordLoadDuration(Date.now() - startMs);
-      return chunk;
-    } catch (err) {
-      if (isLevelDbNotFoundError(err)) {
-        return void 0;
-      }
-      throw err;
-    }
-  }
-  async save(keyArray, binary) {
-    if (this._lifecycleState !== import_context4.LifecycleState.OPEN) {
-      return void 0;
-    }
-    const startMs = Date.now();
-    const batch = this._params.db.batch();
-    await this._params.callbacks?.beforeSave?.({
-      path: keyArray,
-      batch
+var __dxlog_file3 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/auth.ts";
+var AuthExtension = class extends import_teleport.RpcExtension {
+  constructor(_authParams) {
+    super({
+      requested: {
+        AuthService: import_protocols4.schema.getService("dxos.mesh.teleport.auth.AuthService")
+      },
+      exposed: {
+        AuthService: import_protocols4.schema.getService("dxos.mesh.teleport.auth.AuthService")
+      },
+      timeout: 60 * 1e3
     });
-    batch.put(keyArray, Buffer.from(binary), {
-      ...encodingOptions
+    this._authParams = _authParams;
+    this._ctx = new import_context4.Context({
+      onError: (err) => {
+        import_log2.log.catch(err, void 0, {
+          F: __dxlog_file3,
+          L: 28,
+          S: this,
+          C: (f, a) => f(...a)
+        });
+      }
+    }, {
+      F: __dxlog_file3,
+      L: 26
     });
-    await batch.write();
-    this._params.monitor?.recordBytesStored(binary.byteLength);
-    await this._params.callbacks?.afterSave?.(keyArray);
-    this._params.monitor?.recordStoreDuration(Date.now() - startMs);
   }
-  async remove(keyArray) {
-    if (this._lifecycleState !== import_context4.LifecycleState.OPEN) {
-      return void 0;
-    }
-    await this._params.db.del(keyArray, {
-      ...encodingOptions
+  async getHandlers() {
+    return {
+      AuthService: {
+        authenticate: async ({ challenge }) => {
+          try {
+            const credential = await this._authParams.provider(challenge);
+            if (!credential) {
+              throw new Error("auth rejected");
+            }
+            return {
+              credential
+            };
+          } catch (err) {
+            import_log2.log.error("failed to generate auth credentials", err, {
+              F: __dxlog_file3,
+              L: 55,
+              S: this,
+              C: (f, a) => f(...a)
+            });
+            throw new Error("auth rejected");
+          }
+        }
+      }
+    };
+  }
+  async onOpen(context) {
+    await super.onOpen(context);
+    (0, import_async3.scheduleTask)(this._ctx, async () => {
+      try {
+        const challenge = (0, import_crypto2.randomBytes)(32);
+        const { credential } = await this.rpc.AuthService.authenticate({
+          challenge
+        });
+        (0, import_invariant3.invariant)(credential?.length > 0, "invalid credential", {
+          F: __dxlog_file3,
+          L: 69,
+          S: this,
+          A: [
+            "credential?.length > 0",
+            "'invalid credential'"
+          ]
+        });
+        const success = await this._authParams.verifier(challenge, credential);
+        (0, import_invariant3.invariant)(success, "credential not verified", {
+          F: __dxlog_file3,
+          L: 71,
+          S: this,
+          A: [
+            "success",
+            "'credential not verified'"
+          ]
+        });
+        (0, import_async3.runInContext)(this._ctx, () => this._authParams.onAuthSuccess());
+      } catch (err) {
+        (0, import_log2.log)("auth failed", err, {
+          F: __dxlog_file3,
+          L: 74,
+          S: this,
+          C: (f, a) => f(...a)
+        });
+        this.close();
+        this._authParams.onAuthFailure();
+      }
     });
   }
-  async loadRange(keyPrefix) {
-    if (this._lifecycleState !== import_context4.LifecycleState.OPEN) {
-      return [];
-    }
-    const startMs = Date.now();
-    const result = [];
-    for await (const [key, value] of this._params.db.iterator({
-      gte: keyPrefix,
-      lte: [
-        ...keyPrefix,
-        "\uFFFF"
-      ],
-      ...encodingOptions
-    })) {
-      result.push({
-        key,
-        data: value
-      });
-      this._params.monitor?.recordBytesLoaded(value.byteLength);
-    }
-    this._params.monitor?.recordLoadDuration(Date.now() - startMs);
-    return result;
+  async onClose() {
+    await this._ctx.dispose();
+    await super.onClose();
   }
-  async removeRange(keyPrefix) {
-    if (this._lifecycleState !== import_context4.LifecycleState.OPEN) {
-      return void 0;
-    }
-    const batch = this._params.db.batch();
-    for await (const [key] of this._params.db.iterator({
-      gte: keyPrefix,
-      lte: [
-        ...keyPrefix,
-        "\uFFFF"
-      ],
-      ...encodingOptions
-    })) {
-      batch.del(key, {
-        ...encodingOptions
-      });
-    }
-    await batch.write();
+  async onAbort() {
+    await this._ctx.dispose();
+    await super.onAbort();
   }
 };
-var keyEncoder = {
-  encode: (key) => Buffer.from(key.map((k) => k.replaceAll("%", "%25").replaceAll("-", "%2D")).join("-")),
-  decode: (key) => Buffer.from(key).toString().split("-").map((k) => k.replaceAll("%2D", "-").replaceAll("%25", "%")),
-  format: "buffer"
-};
-var encodingOptions = {
-  keyEncoding: keyEncoder,
-  valueEncoding: "buffer"
-};
-var isLevelDbNotFoundError = (err) => err.code === "LEVEL_NOT_FOUND";
-var MESSAGE_TYPE_COLLECTION_QUERY = "collection-query";
-var isCollectionQueryMessage = (message) => message.type === MESSAGE_TYPE_COLLECTION_QUERY;
-var MESSAGE_TYPE_COLLECTION_STATE = "collection-state";
-var isCollectionStateMessage = (message) => message.type === MESSAGE_TYPE_COLLECTION_STATE;
 function _ts_decorate(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
@@ -695,1035 +691,1083 @@ function _ts_decorate(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file3 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/echo-network-adapter.ts";
-var EchoNetworkAdapter = class extends import_automerge_repo2.NetworkAdapter {
-  constructor(_params) {
-    super();
-    this._params = _params;
-    this._replicators = /* @__PURE__ */ new Set();
-    this._connections = /* @__PURE__ */ new Map();
-    this._lifecycleState = import_context6.LifecycleState.CLOSED;
-    this._connected = new import_async4.Trigger();
+var __dxlog_file4 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/pipeline/timeframe-clock.ts";
+var mapTimeframeToFeedIndexes = (timeframe) => timeframe.frames().map(([feedKey, index]) => ({
+  feedKey,
+  index
+}));
+var mapFeedIndexesToTimeframe = (indexes) => new import_timeframe.Timeframe(indexes.map(({ feedKey, index }) => [
+  feedKey,
+  index
+]));
+var startAfter = (timeframe) => timeframe.frames().map(([feedKey, index]) => ({
+  feedKey,
+  index: index + 1
+}));
+var TimeframeClock = class {
+  constructor(_timeframe = new import_timeframe.Timeframe()) {
+    this._timeframe = _timeframe;
+    this.update = new import_async4.Event();
+    this._pendingTimeframe = _timeframe;
   }
-  connect(peerId, peerMetadata) {
-    this.peerId = peerId;
-    this.peerMetadata = peerMetadata;
-    this._connected.wake();
+  /**
+  * Timeframe that was processed by ECHO.
+  */
+  get timeframe() {
+    return this._timeframe;
   }
-  send(message) {
-    this._send(message);
+  /**
+  * Timeframe that is currently being processed by ECHO.
+  * Will be equal to `timeframe` after the processing is complete.
+  */
+  get pendingTimeframe() {
+    return this._pendingTimeframe;
   }
-  disconnect() {
+  setTimeframe(timeframe) {
+    this._timeframe = timeframe;
+    this._pendingTimeframe = timeframe;
+    this.update.emit(this._timeframe);
   }
-  async open() {
-    if (this._lifecycleState === import_context6.LifecycleState.OPEN) {
-      return;
-    }
-    this._lifecycleState = import_context6.LifecycleState.OPEN;
-    (0, import_log3.log)("emit ready", void 0, {
-      F: __dxlog_file3,
-      L: 78,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    this.emit("ready", {
-      network: this
-    });
+  updatePendingTimeframe(key, seq) {
+    this._pendingTimeframe = import_timeframe.Timeframe.merge(this._pendingTimeframe, new import_timeframe.Timeframe([
+      [
+        key,
+        seq
+      ]
+    ]));
   }
-  async close() {
-    if (this._lifecycleState === import_context6.LifecycleState.CLOSED) {
-      return this;
-    }
-    for (const replicator of this._replicators) {
-      await replicator.disconnect();
-    }
-    this._replicators.clear();
-    this._lifecycleState = import_context6.LifecycleState.CLOSED;
+  updateTimeframe() {
+    this._timeframe = this._pendingTimeframe;
+    this.update.emit(this._timeframe);
   }
-  async whenConnected() {
-    await this._connected.wait({
-      timeout: 1e4
-    });
+  hasGaps(timeframe) {
+    const gaps = import_timeframe.Timeframe.dependencies(timeframe, this._timeframe);
+    return !gaps.isEmpty();
   }
-  async addReplicator(replicator) {
-    (0, import_invariant4.invariant)(this._lifecycleState === import_context6.LifecycleState.OPEN, void 0, {
-      F: __dxlog_file3,
-      L: 104,
-      S: this,
-      A: [
-        "this._lifecycleState === LifecycleState.OPEN",
-        ""
-      ]
-    });
-    (0, import_invariant4.invariant)(this.peerId, void 0, {
-      F: __dxlog_file3,
-      L: 105,
-      S: this,
-      A: [
-        "this.peerId",
-        ""
-      ]
-    });
-    (0, import_invariant4.invariant)(!this._replicators.has(replicator), void 0, {
-      F: __dxlog_file3,
-      L: 106,
+  async waitUntilReached(target) {
+    (0, import_log3.log)("waitUntilReached", {
+      target,
+      current: this._timeframe
+    }, {
+      F: __dxlog_file4,
+      L: 70,
       S: this,
-      A: [
-        "!this._replicators.has(replicator)",
-        ""
-      ]
+      C: (f, a) => f(...a)
     });
-    this._replicators.add(replicator);
-    await replicator.connect({
-      peerId: this.peerId,
-      onConnectionOpen: this._onConnectionOpen.bind(this),
-      onConnectionClosed: this._onConnectionClosed.bind(this),
-      onConnectionAuthScopeChanged: this._onConnectionAuthScopeChanged.bind(this),
-      getContainingSpaceForDocument: this._params.getContainingSpaceForDocument
+    await this.update.waitForCondition(() => {
+      (0, import_log3.log)("check if reached", {
+        target,
+        current: this._timeframe,
+        deps: import_timeframe.Timeframe.dependencies(target, this._timeframe)
+      }, {
+        F: __dxlog_file4,
+        L: 72,
+        S: this,
+        C: (f, a) => f(...a)
+      });
+      return import_timeframe.Timeframe.dependencies(target, this._timeframe).isEmpty();
     });
   }
-  async removeReplicator(replicator) {
-    (0, import_invariant4.invariant)(this._lifecycleState === import_context6.LifecycleState.OPEN, void 0, {
-      F: __dxlog_file3,
-      L: 120,
-      S: this,
-      A: [
-        "this._lifecycleState === LifecycleState.OPEN",
-        ""
-      ]
+};
+_ts_decorate([
+  (0, import_debug.timed)(5e3)
+], TimeframeClock.prototype, "waitUntilReached", null);
+var __dxlog_file5 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/pipeline/message-selector.ts";
+var createMessageSelector = (timeframeClock) => {
+  return (messages) => {
+    for (let i = 0; i < messages.length; i++) {
+      const { data: { timeframe } } = messages[i];
+      (0, import_invariant5.invariant)(timeframe, void 0, {
+        F: __dxlog_file5,
+        L: 25,
+        S: void 0,
+        A: [
+          "timeframe",
+          ""
+        ]
+      });
+      if (!timeframeClock.hasGaps(timeframe)) {
+        return i;
+      }
+    }
+    (0, import_log5.log)("Skipping...", void 0, {
+      F: __dxlog_file5,
+      L: 33,
+      S: void 0,
+      C: (f, a) => f(...a)
     });
-    (0, import_invariant4.invariant)(this._replicators.has(replicator), void 0, {
-      F: __dxlog_file3,
-      L: 121,
-      S: this,
-      A: [
-        "this._replicators.has(replicator)",
-        ""
-      ]
+  };
+};
+function _ts_decorate2(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
+    r = Reflect.decorate(decorators, target, key, desc);
+  else
+    for (var i = decorators.length - 1; i >= 0; i--)
+      if (d = decorators[i])
+        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+var __dxlog_file6 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/pipeline/pipeline.ts";
+var PipelineState = class {
+  constructor(_feeds, _timeframeClock) {
+    this._feeds = _feeds;
+    this._timeframeClock = _timeframeClock;
+    this._ctx = new import_context5.Context(void 0, {
+      F: __dxlog_file6,
+      L: 41
     });
-    await replicator.disconnect();
-    this._replicators.delete(replicator);
+    this.timeframeUpdate = this._timeframeClock.update;
+    this.stalled = new import_async5.Event();
+    this._startTimeframe = new import_timeframe2.Timeframe();
+    this._reachedTarget = false;
   }
-  async shouldAdvertise(peerId, params) {
-    const connection = this._connections.get(peerId);
-    if (!connection) {
-      return false;
-    }
-    return connection.connection.shouldAdvertise(params);
+  /**
+  * Latest theoretical timeframe based on the last mutation in each feed.
+  * NOTE: This might never be reached if the mutation dependencies
+  */
+  // TODO(dmaretskyi): Rename `totalTimeframe`? or `lastTimeframe`.
+  get endTimeframe() {
+    return mapFeedIndexesToTimeframe(Array.from(this._feeds.values()).filter((feed) => feed.length > 0).map((feed) => ({
+      feedKey: feed.key,
+      index: feed.length - 1
+    })));
   }
-  shouldSyncCollection(peerId, params) {
-    const connection = this._connections.get(peerId);
-    if (!connection) {
-      return false;
-    }
-    return connection.connection.shouldSyncCollection(params);
+  get startTimeframe() {
+    return this._startTimeframe;
   }
-  queryCollectionState(collectionId, targetId) {
-    const message = {
-      type: "collection-query",
-      senderId: this.peerId,
-      targetId,
-      collectionId
-    };
-    this._send(message);
+  get timeframe() {
+    return this._timeframeClock.timeframe;
   }
-  sendCollectionState(collectionId, targetId, state) {
-    const message = {
-      type: "collection-state",
-      senderId: this.peerId,
-      targetId,
-      collectionId,
-      state
-    };
-    this._send(message);
+  get pendingTimeframe() {
+    return this._timeframeClock.pendingTimeframe;
   }
-  _send(message) {
-    const connectionEntry = this._connections.get(message.targetId);
-    if (!connectionEntry) {
-      throw new Error("Connection not found.");
-    }
-    const writeStart = Date.now();
-    connectionEntry.writer.write(message).then(() => {
-      const durationMs = Date.now() - writeStart;
-      this._params.monitor?.recordMessageSent(message, durationMs);
-    }).catch((err) => {
-      if (connectionEntry.isOpen) {
-        import_log3.log.catch(err, void 0, {
-          F: __dxlog_file3,
-          L: 181,
-          S: this,
-          C: (f, a) => f(...a)
-        });
-      }
-      this._params.monitor?.recordMessageSendingFailed(message);
-    });
+  get targetTimeframe() {
+    return this._targetTimeframe ? this._targetTimeframe : new import_timeframe2.Timeframe();
   }
-  // TODO(dmaretskyi): Remove.
-  getPeersInterestedInCollection(collectionId) {
-    return Array.from(this._connections.values()).map((connection) => {
-      return connection.connection.shouldSyncCollection({
-        collectionId
-      }) ? connection.connection.peerId : null;
-    }).filter(import_util2.nonNullable);
+  get reachedTarget() {
+    return this._reachedTarget;
   }
-  _onConnectionOpen(connection) {
-    (0, import_log3.log)("Connection opened", {
-      peerId: connection.peerId
+  get feeds() {
+    return Array.from(this._feeds.values());
+  }
+  async waitUntilTimeframe(target) {
+    await this._timeframeClock.waitUntilReached(target);
+  }
+  setTargetTimeframe(target) {
+    this._targetTimeframe = target;
+  }
+  /**
+  * Wait until the pipeline processes all messages in the feed and reaches the target timeframe if that is set.
+  *
+  * This function will resolve immediately if the pipeline is stalled.
+  *
+  * @param timeout Timeout in milliseconds to specify the maximum wait time.
+  */
+  async waitUntilReachedTargetTimeframe({ ctx = new import_context5.Context(void 0, {
+    F: __dxlog_file6,
+    L: 129
+  }), timeout, breakOnStall = true } = {}) {
+    (0, import_log4.log)("waitUntilReachedTargetTimeframe", {
+      timeout,
+      current: this.timeframe,
+      target: this.targetTimeframe
     }, {
-      F: __dxlog_file3,
-      L: 199,
+      F: __dxlog_file6,
+      L: 133,
       S: this,
       C: (f, a) => f(...a)
     });
-    (0, import_invariant4.invariant)(!this._connections.has(connection.peerId), void 0, {
-      F: __dxlog_file3,
-      L: 200,
-      S: this,
-      A: [
-        "!this._connections.has(connection.peerId as PeerId)",
-        ""
-      ]
-    });
-    const reader = connection.readable.getReader();
-    const writer = connection.writable.getWriter();
-    const connectionEntry = {
-      connection,
-      reader,
-      writer,
-      isOpen: true
-    };
-    this._connections.set(connection.peerId, connectionEntry);
-    queueMicrotask(async () => {
-      try {
-        while (true) {
-          const { done, value } = await reader.read();
+    this._reachedTargetPromise ??= Promise.race([
+      this._timeframeClock.update.waitForCondition(() => {
+        return import_timeframe2.Timeframe.dependencies(this.targetTimeframe, this.timeframe).isEmpty();
+      }),
+      ...breakOnStall ? [
+        this.stalled.discardParameter().waitForCount(1)
+      ] : []
+    ]);
+    let done = false;
+    if (timeout) {
+      return Promise.race([
+        (0, import_context5.rejectOnDispose)(ctx),
+        (0, import_context5.rejectOnDispose)(this._ctx),
+        this._reachedTargetPromise.then(() => {
+          done = true;
+          this._reachedTarget = true;
+        }),
+        (0, import_async5.sleepWithContext)(this._ctx, timeout).then(() => {
           if (done) {
-            break;
+            return;
           }
-          this._onMessage(value);
-        }
-      } catch (err) {
-        if (connectionEntry.isOpen) {
-          import_log3.log.catch(err, void 0, {
-            F: __dxlog_file3,
-            L: 219,
+          import_log4.log.warn("waitUntilReachedTargetTimeframe timed out", {
+            timeout,
+            current: this.timeframe,
+            target: this.targetTimeframe,
+            dependencies: import_timeframe2.Timeframe.dependencies(this.targetTimeframe, this.timeframe)
+          }, {
+            F: __dxlog_file6,
+            L: 161,
             S: this,
             C: (f, a) => f(...a)
           });
-        }
-      }
-    });
-    (0, import_log3.log)("emit peer-candidate", {
-      peerId: connection.peerId
-    }, {
-      F: __dxlog_file3,
-      L: 224,
+        })
+      ]);
+    } else {
+      return this._reachedTargetPromise;
+    }
+  }
+};
+var Pipeline = class {
+  constructor() {
+    this._timeframeClock = new TimeframeClock(new import_timeframe2.Timeframe());
+    this._feeds = new import_util2.ComplexMap(import_keys2.PublicKey.hash);
+    this._state = new PipelineState(this._feeds, this._timeframeClock);
+    this._processingTrigger = new import_async5.Trigger().wake();
+    this._pauseTrigger = new import_async5.Trigger().wake();
+    this._downloads = new import_util2.ComplexMap((value) => import_keys2.PublicKey.hash(value.key));
+    this._isStopping = false;
+    this._isStarted = false;
+    this._isBeingConsumed = false;
+    this._isPaused = false;
+  }
+  get state() {
+    return this._state;
+  }
+  get writer() {
+    (0, import_invariant4.invariant)(this._writer, "Writer not set.", {
+      F: __dxlog_file6,
+      L: 243,
       S: this,
-      C: (f, a) => f(...a)
+      A: [
+        "this._writer",
+        "'Writer not set.'"
+      ]
     });
-    this._emitPeerCandidate(connection);
-    this._params.monitor?.recordPeerConnected(connection.peerId);
+    return this._writer;
   }
-  _onMessage(message) {
-    if (isCollectionQueryMessage(message)) {
-      this._params.onCollectionStateQueried(message.collectionId, message.senderId);
-    } else if (isCollectionStateMessage(message)) {
-      this._params.onCollectionStateReceived(message.collectionId, message.senderId, message.state);
-    } else {
-      this.emit("message", message);
+  hasFeed(feedKey) {
+    return this._feeds.has(feedKey);
+  }
+  getFeeds() {
+    return this._feedSetIterator.feeds;
+  }
+  // NOTE: This cannot be synchronized with `stop` because stop waits for the mutation processing to complete,
+  // which might be opening feeds during the mutation processing, which w
+  async addFeed(feed) {
+    this._feeds.set(feed.key, feed);
+    if (this._feedSetIterator) {
+      await this._feedSetIterator.addFeed(feed);
+    }
+    if (this._isStarted && !this._isPaused) {
+      this._setFeedDownloadState(feed);
     }
-    this._params.monitor?.recordMessageReceived(message);
   }
-  /**
-  * Trigger doc-synchronizer shared documents set recalculation. Happens on peer-candidate.
-  * TODO(y): replace with a proper API call when sharePolicy update becomes supported by automerge-repo
-  */
-  _onConnectionAuthScopeChanged(connection) {
-    (0, import_log3.log)("Connection auth scope changed", {
-      peerId: connection.peerId
-    }, {
-      F: __dxlog_file3,
-      L: 245,
+  setWriteFeed(feed) {
+    (0, import_invariant4.invariant)(!this._writer, "Writer already set.", {
+      F: __dxlog_file6,
+      L: 270,
       S: this,
-      C: (f, a) => f(...a)
+      A: [
+        "!this._writer",
+        "'Writer already set.'"
+      ]
     });
-    const entry = this._connections.get(connection.peerId);
-    (0, import_invariant4.invariant)(entry, void 0, {
-      F: __dxlog_file3,
-      L: 247,
+    (0, import_invariant4.invariant)(feed.properties.writable, "Feed must be writable.", {
+      F: __dxlog_file6,
+      L: 271,
       S: this,
       A: [
-        "entry",
-        ""
+        "feed.properties.writable",
+        "'Feed must be writable.'"
       ]
     });
-    this.emit("peer-disconnected", {
-      peerId: connection.peerId
-    });
-    this._emitPeerCandidate(connection);
+    this._writer = createMappedFeedWriter((payload) => ({
+      timeframe: this._timeframeClock.timeframe,
+      payload
+    }), feed.createFeedWriter());
   }
-  _onConnectionClosed(connection) {
-    (0, import_log3.log)("Connection closed", {
-      peerId: connection.peerId
-    }, {
-      F: __dxlog_file3,
-      L: 253,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    const entry = this._connections.get(connection.peerId);
-    (0, import_invariant4.invariant)(entry, void 0, {
-      F: __dxlog_file3,
-      L: 255,
+  async start() {
+    (0, import_invariant4.invariant)(!this._isStarted, "Pipeline is already started.", {
+      F: __dxlog_file6,
+      L: 284,
       S: this,
       A: [
-        "entry",
-        ""
+        "!this._isStarted",
+        "'Pipeline is already started.'"
       ]
     });
-    entry.isOpen = false;
-    this.emit("peer-disconnected", {
-      peerId: connection.peerId
-    });
-    this._params.monitor?.recordPeerDisconnected(connection.peerId);
-    void entry.reader.cancel().catch((err) => import_log3.log.catch(err, void 0, {
-      F: __dxlog_file3,
-      L: 261,
+    (0, import_log4.log)("starting...", void 0, {
+      F: __dxlog_file6,
+      L: 285,
       S: this,
       C: (f, a) => f(...a)
-    }));
-    void entry.writer.abort().catch((err) => import_log3.log.catch(err, void 0, {
-      F: __dxlog_file3,
-      L: 262,
+    });
+    await this._initIterator();
+    await this._feedSetIterator.open();
+    this._isStarted = true;
+    (0, import_log4.log)("started", void 0, {
+      F: __dxlog_file6,
+      L: 289,
       S: this,
       C: (f, a) => f(...a)
-    }));
-    this._connections.delete(connection.peerId);
-  }
-  _emitPeerCandidate(connection) {
-    this.emit("peer-candidate", {
-      peerId: connection.peerId,
-      peerMetadata: createEchoPeerMetadata()
     });
+    if (!this._isPaused) {
+      for (const feed of this._feeds.values()) {
+        this._setFeedDownloadState(feed);
+      }
+    }
   }
-};
-_ts_decorate([
-  import_async4.synchronized
-], EchoNetworkAdapter.prototype, "open", null);
-_ts_decorate([
-  import_async4.synchronized
-], EchoNetworkAdapter.prototype, "close", null);
-_ts_decorate([
-  import_async4.synchronized
-], EchoNetworkAdapter.prototype, "addReplicator", null);
-_ts_decorate([
-  import_async4.synchronized
-], EchoNetworkAdapter.prototype, "removeReplicator", null);
-var createEchoPeerMetadata = () => ({
-  // TODO(dmaretskyi): Refactor this.
-  dxos_peerSource: "EchoNetworkAdapter"
-});
-var isEchoPeerMetadata = (metadata) => metadata?.dxos_peerSource === "EchoNetworkAdapter";
-var HeadsStore = class {
-  constructor({ db }) {
-    this._db = db;
-  }
-  setHeads(documentId, heads, batch) {
-    batch.put(documentId, heads, {
-      sublevel: this._db,
-      keyEncoding: "utf8",
-      valueEncoding: import_indexing.headsEncoding
-    });
-  }
-  // TODO(dmaretskyi): Make batched.
-  async getHeads(documentIds) {
-    return this._db.getMany(documentIds, {
-      keyEncoding: "utf8",
-      valueEncoding: import_indexing.headsEncoding
-    });
-  }
-};
-function _ts_decorate2(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
-    r = Reflect.decorate(decorators, target, key, desc);
-  else
-    for (var i = decorators.length - 1; i >= 0; i--)
-      if (d = decorators[i])
-        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-var __dxlog_file4 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/automerge-host.ts";
-var AutomergeHost = class extends import_context5.Resource {
-  constructor({ db, indexMetadataStore, dataMonitor }) {
-    super();
-    this._collectionSynchronizer = new CollectionSynchronizer({
-      queryCollectionState: this._queryCollectionState.bind(this),
-      sendCollectionState: this._sendCollectionState.bind(this),
-      shouldSyncCollection: this._shouldSyncCollection.bind(this)
-    });
-    this._db = db;
-    this._storage = new LevelDBStorageAdapter({
-      db: db.sublevel("automerge"),
-      callbacks: {
-        beforeSave: async (params) => this._beforeSave(params),
-        afterSave: async (key) => this._afterSave(key)
-      },
-      monitor: dataMonitor
-    });
-    this._echoNetworkAdapter = new EchoNetworkAdapter({
-      getContainingSpaceForDocument: this._getContainingSpaceForDocument.bind(this),
-      onCollectionStateQueried: this._onCollectionStateQueried.bind(this),
-      onCollectionStateReceived: this._onCollectionStateReceived.bind(this),
-      monitor: dataMonitor
-    });
-    this._headsStore = new HeadsStore({
-      db: db.sublevel("heads")
+  async stop() {
+    (0, import_log4.log)("stopping...", void 0, {
+      F: __dxlog_file6,
+      L: 300,
+      S: this,
+      C: (f, a) => f(...a)
     });
-    this._indexMetadataStore = indexMetadataStore;
-  }
-  async _open() {
-    this._peerId = `host-${import_keys2.PublicKey.random().toHex()}`;
-    await this._storage.open?.();
-    this._repo = new import_automerge_repo.Repo({
-      peerId: this._peerId,
-      sharePolicy: this._sharePolicy.bind(this),
-      storage: this._storage,
-      network: [
-        // Upstream swarm.
-        this._echoNetworkAdapter
-      ]
+    this._isStopping = true;
+    for (const [feed, handle] of this._downloads.entries()) {
+      feed.undownload(handle);
+    }
+    this._downloads.clear();
+    await this._feedSetIterator?.close();
+    await this._processingTrigger.wait();
+    await this._state._ctx.dispose();
+    this._state._ctx = new import_context5.Context(void 0, {
+      F: __dxlog_file6,
+      L: 309
     });
-    import_async3.Event.wrap(this._echoNetworkAdapter, "peer-candidate").on(this._ctx, (e) => this._onPeerConnected(e.peerId));
-    import_async3.Event.wrap(this._echoNetworkAdapter, "peer-disconnected").on(this._ctx, (e) => this._onPeerDisconnected(e.peerId));
-    this._collectionSynchronizer.remoteStateUpdated.on(this._ctx, ({ collectionId, peerId }) => {
-      this._onRemoteCollectionStateUpdated(collectionId, peerId);
+    this._state._reachedTargetPromise = void 0;
+    this._state._reachedTarget = false;
+    this._isStarted = false;
+    (0, import_log4.log)("stopped", void 0, {
+      F: __dxlog_file6,
+      L: 313,
+      S: this,
+      C: (f, a) => f(...a)
     });
-    await this._echoNetworkAdapter.open();
-    await this._collectionSynchronizer.open();
-    await this._echoNetworkAdapter.open();
-    await this._echoNetworkAdapter.whenConnected();
-  }
-  async _close() {
-    await this._collectionSynchronizer.close();
-    await this._storage.close?.();
-    await this._echoNetworkAdapter.close();
-    await this._ctx.dispose();
   }
   /**
-  * @deprecated To be abstracted away.
+  * @param timeframe Timeframe of already processed messages.
+  *  The pipeline will start processing messages AFTER this timeframe.
   */
-  get repo() {
-    return this._repo;
-  }
-  get peerId() {
-    return this._peerId;
-  }
-  get loadedDocsCount() {
-    return Object.keys(this._repo.handles).length;
-  }
-  async addReplicator(replicator) {
-    await this._echoNetworkAdapter.addReplicator(replicator);
-  }
-  async removeReplicator(replicator) {
-    await this._echoNetworkAdapter.removeReplicator(replicator);
+  async setCursor(timeframe) {
+    (0, import_invariant4.invariant)(!this._isStarted || this._isPaused, "Invalid state.", {
+      F: __dxlog_file6,
+      L: 322,
+      S: this,
+      A: [
+        "!this._isStarted || this._isPaused",
+        "'Invalid state.'"
+      ]
+    });
+    this._state._startTimeframe = timeframe;
+    this._timeframeClock.setTimeframe(timeframe);
+    if (this._feedSetIterator) {
+      await this._feedSetIterator.close();
+      await this._initIterator();
+      await this._feedSetIterator.open();
+    }
   }
   /**
-  * Loads the document handle from the repo and waits for it to be ready.
+  * Calling pause while processing will cause a deadlock.
   */
-  async loadDoc(ctx, documentId, opts) {
-    let handle;
-    if (typeof documentId === "string") {
-      handle = this._repo.handles[documentId];
-    }
-    if (!handle) {
-      handle = this._repo.find(documentId);
+  async pause() {
+    if (this._isPaused) {
+      return;
     }
-    if (!handle.isReady()) {
-      if (!opts?.timeout) {
-        await (0, import_context5.cancelWithContext)(ctx, handle.whenReady());
-      } else {
-        await (0, import_context5.cancelWithContext)(ctx, (0, import_async3.asyncTimeout)(handle.whenReady(), opts.timeout));
-      }
+    this._pauseTrigger.reset();
+    await this._processingTrigger.wait();
+    this._isPaused = true;
+  }
+  async unpause() {
+    (0, import_invariant4.invariant)(this._isPaused, "Pipeline is not paused.", {
+      F: __dxlog_file6,
+      L: 351,
+      S: this,
+      A: [
+        "this._isPaused",
+        "'Pipeline is not paused.'"
+      ]
+    });
+    this._pauseTrigger.wake();
+    this._isPaused = false;
+    for (const feed of this._feeds.values()) {
+      this._setFeedDownloadState(feed);
     }
-    return handle;
   }
   /**
-  * Create new persisted document.
+  * Starts to iterate over the ordered messages from the added feeds.
+  * Updates the timeframe clock after the message has bee processed.
   */
-  createDoc(initialValue, opts) {
-    if (opts?.preserveHistory) {
-      if (!(0, import_automerge3.isAutomerge)(initialValue)) {
-        throw new TypeError("Initial value must be an Automerge document");
+  async *consume() {
+    (0, import_invariant4.invariant)(!this._isBeingConsumed, "Pipeline is already being consumed.", {
+      F: __dxlog_file6,
+      L: 366,
+      S: this,
+      A: [
+        "!this._isBeingConsumed",
+        "'Pipeline is already being consumed.'"
+      ]
+    });
+    this._isBeingConsumed = true;
+    (0, import_invariant4.invariant)(this._feedSetIterator, "Iterator not initialized.", {
+      F: __dxlog_file6,
+      L: 369,
+      S: this,
+      A: [
+        "this._feedSetIterator",
+        "'Iterator not initialized.'"
+      ]
+    });
+    let lastFeedSetIterator = this._feedSetIterator;
+    let iterable = lastFeedSetIterator[Symbol.asyncIterator]();
+    while (!this._isStopping) {
+      await this._pauseTrigger.wait();
+      if (lastFeedSetIterator !== this._feedSetIterator) {
+        (0, import_invariant4.invariant)(this._feedSetIterator, "Iterator not initialized.", {
+          F: __dxlog_file6,
+          L: 378,
+          S: this,
+          A: [
+            "this._feedSetIterator",
+            "'Iterator not initialized.'"
+          ]
+        });
+        lastFeedSetIterator = this._feedSetIterator;
+        iterable = lastFeedSetIterator[Symbol.asyncIterator]();
+      }
+      const { done, value } = await iterable.next();
+      if (!done) {
+        const block = value ?? (0, import_debug2.failUndefined)();
+        this._processingTrigger.reset();
+        this._timeframeClock.updatePendingTimeframe(import_keys2.PublicKey.from(block.feedKey), block.seq);
+        yield block;
+        this._processingTrigger.wake();
+        this._timeframeClock.updateTimeframe();
       }
-      return this._repo.import((0, import_automerge3.save)(initialValue));
-    } else {
-      return this._repo.create(initialValue);
     }
+    this._isBeingConsumed = false;
   }
-  async waitUntilHeadsReplicated(heads) {
-    const entries = heads.entries;
-    if (!entries?.length) {
-      return;
+  _setFeedDownloadState(feed) {
+    let handle = this._downloads.get(feed);
+    if (handle) {
+      feed.undownload(handle);
     }
-    const documentIds = entries.map((entry) => entry.documentId);
-    const documentHeads = await this.getHeads(documentIds);
-    const headsToWait = entries.filter((entry, index) => {
-      const targetHeads = entry.heads;
-      if (!targetHeads || targetHeads.length === 0) {
-        return false;
+    const timeframe = this._state._startTimeframe;
+    const seq = timeframe.get(feed.key) ?? -1;
+    (0, import_log4.log)("download", {
+      feed: feed.key.truncate(),
+      seq,
+      length: feed.length
+    }, {
+      F: __dxlog_file6,
+      L: 407,
+      S: this,
+      C: (f, a) => f(...a)
+    });
+    handle = feed.download({
+      start: seq + 1,
+      linear: true
+    }, (err, data) => {
+      if (err) {
+      } else {
+        import_log4.log.info("downloaded", {
+          data
+        }, {
+          F: __dxlog_file6,
+          L: 412,
+          S: this,
+          C: (f, a) => f(...a)
+        });
       }
-      const currentHeads = documentHeads[index];
-      return !(currentHeads !== null && (0, import_automerge3.equals)(currentHeads, targetHeads));
     });
-    if (headsToWait.length > 0) {
-      await Promise.all(headsToWait.map(async (entry, index) => {
-        const handle = await this.loadDoc(import_context5.Context.default(void 0, {
-          F: __dxlog_file4,
-          L: 226
-        }), entry.documentId);
-        await waitForHeads(handle, entry.heads);
-      }));
+    this._downloads.set(feed, handle);
+  }
+  async _initIterator() {
+    this._feedSetIterator = new import_feed_store.FeedSetIterator(createMessageSelector(this._timeframeClock), {
+      start: startAfter(this._timeframeClock.timeframe),
+      stallTimeout: 1e3
+    });
+    this._feedSetIterator.stalled.on((iterator) => {
+      import_log4.log.warn(`Stalled after ${iterator.options.stallTimeout}ms with ${iterator.size} feeds.`, void 0, {
+        F: __dxlog_file6,
+        L: 426,
+        S: this,
+        C: (f, a) => f(...a)
+      });
+      this._state.stalled.emit();
+    });
+    for (const feed of this._feeds.values()) {
+      await this._feedSetIterator.addFeed(feed);
     }
-    await this._repo.flush(documentIds.filter((documentId) => !!this._repo.handles[documentId]));
   }
-  async reIndexHeads(documentIds) {
-    for (const documentId of documentIds) {
-      import_log2.log.info("re-indexing heads for document", {
-        documentId
+};
+_ts_decorate2([
+  import_async5.synchronized
+], Pipeline.prototype, "start", null);
+_ts_decorate2([
+  import_async5.synchronized
+], Pipeline.prototype, "stop", null);
+_ts_decorate2([
+  import_async5.synchronized
+], Pipeline.prototype, "setCursor", null);
+_ts_decorate2([
+  import_async5.synchronized
+], Pipeline.prototype, "pause", null);
+_ts_decorate2([
+  import_async5.synchronized
+], Pipeline.prototype, "unpause", null);
+function _ts_decorate3(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
+    r = Reflect.decorate(decorators, target, key, desc);
+  else
+    for (var i = decorators.length - 1; i >= 0; i--)
+      if (d = decorators[i])
+        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+var __dxlog_file7 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/control-pipeline.ts";
+var TIMEFRAME_SAVE_DEBOUNCE_INTERVAL = 500;
+var CONTROL_PIPELINE_SNAPSHOT_DELAY = 1e4;
+var USE_SNAPSHOTS = true;
+var ControlPipeline = class {
+  constructor({ spaceKey, genesisFeed, feedProvider, metadataStore }) {
+    this._ctx = new import_context7.Context(void 0, {
+      F: __dxlog_file7,
+      L: 47
+    });
+    this._lastTimeframeSaveTime = Date.now();
+    this.onFeedAdmitted = new import_util4.Callback();
+    this._usage = new import_tracing2.TimeUsageCounter();
+    this._mutations = new import_tracing2.TimeSeriesCounter();
+    this._snapshotTask = new import_async7.DeferredTask(this._ctx, async () => {
+      await (0, import_async7.sleepWithContext)(this._ctx, CONTROL_PIPELINE_SNAPSHOT_DELAY);
+      await this._saveSnapshot();
+    });
+    this._spaceKey = spaceKey;
+    this._metadata = metadataStore;
+    this._pipeline = new Pipeline();
+    void this._pipeline.addFeed(genesisFeed);
+    this._spaceStateMachine = new import_credentials2.SpaceStateMachine(spaceKey);
+    this._spaceStateMachine.onFeedAdmitted.set(async (info) => {
+      (0, import_log7.log)("feed admitted", {
+        key: info.key
       }, {
-        F: __dxlog_file4,
-        L: 238,
+        F: __dxlog_file7,
+        L: 82,
         S: this,
         C: (f, a) => f(...a)
       });
-      const handle = this._repo.find(documentId);
-      await handle.whenReady([
-        "ready",
-        "requesting"
-      ]);
-      if (handle.inState([
-        "requesting"
-      ])) {
-        import_log2.log.warn("document is not available locally, skipping", {
-          documentId
+      if (info.assertion.designation === import_credentials3.AdmittedFeed.Designation.CONTROL && !info.key.equals(genesisFeed.key)) {
+        queueMicrotask(async () => {
+          try {
+            const feed = await feedProvider(info.key);
+            if (!this._pipeline.hasFeed(feed.key)) {
+              await this._pipeline.addFeed(feed);
+            }
+          } catch (err) {
+            import_log7.log.catch(err, void 0, {
+              F: __dxlog_file7,
+              L: 93,
+              S: this,
+              C: (f, a) => f(...a)
+            });
+          }
+        });
+      }
+      await this.onFeedAdmitted.callIfSet(info);
+    });
+    this.onMemberRoleChanged = this._spaceStateMachine.onMemberRoleChanged;
+    this.onCredentialProcessed = this._spaceStateMachine.onCredentialProcessed;
+    this.onDelegatedInvitation = this._spaceStateMachine.onDelegatedInvitation;
+    this.onDelegatedInvitationRemoved = this._spaceStateMachine.onDelegatedInvitationRemoved;
+  }
+  get spaceState() {
+    return this._spaceStateMachine;
+  }
+  get pipeline() {
+    return this._pipeline;
+  }
+  async setWriteFeed(feed) {
+    await this._pipeline.addFeed(feed);
+    this._pipeline.setWriteFeed(feed);
+  }
+  async start() {
+    const snapshot = this._metadata.getSpaceControlPipelineSnapshot(this._spaceKey);
+    (0, import_log7.log)("load snapshot", {
+      key: this._spaceKey,
+      present: !!snapshot,
+      tf: snapshot?.timeframe
+    }, {
+      F: __dxlog_file7,
+      L: 123,
+      S: this,
+      C: (f, a) => f(...a)
+    });
+    if (USE_SNAPSHOTS && snapshot) {
+      await this._processSnapshot(snapshot);
+    }
+    (0, import_log7.log)("starting...", void 0, {
+      F: __dxlog_file7,
+      L: 128,
+      S: this,
+      C: (f, a) => f(...a)
+    });
+    setTimeout(async () => {
+      void this._consumePipeline(new import_context7.Context(void 0, {
+        F: __dxlog_file7,
+        L: 130
+      }));
+    });
+    await this._pipeline.start();
+    (0, import_log7.log)("started", void 0, {
+      F: __dxlog_file7,
+      L: 134,
+      S: this,
+      C: (f, a) => f(...a)
+    });
+  }
+  async _processSnapshot(snapshot) {
+    await this._pipeline.setCursor(snapshot.timeframe);
+    for (const message of snapshot.messages ?? []) {
+      const result = await this._spaceStateMachine.process(message.credential, {
+        sourceFeed: message.feedKey,
+        skipVerification: true
+      });
+      if (!result) {
+        import_log7.log.warn("credential processing failed from snapshot", {
+          message
         }, {
-          F: __dxlog_file4,
-          L: 242,
+          F: __dxlog_file7,
+          L: 147,
           S: this,
           C: (f, a) => f(...a)
         });
-        continue;
       }
-      const doc = handle.docSync();
-      (0, import_invariant3.invariant)(doc, void 0, {
-        F: __dxlog_file4,
-        L: 247,
-        S: this,
-        A: [
-          "doc",
-          ""
-        ]
-      });
-      const heads = (0, import_automerge3.getHeads)(doc);
-      const batch = this._db.batch();
-      this._headsStore.setHeads(documentId, heads, batch);
-      await batch.write();
     }
-    import_log2.log.info("done re-indexing heads", void 0, {
-      F: __dxlog_file4,
-      L: 254,
+  }
+  async _saveSnapshot() {
+    await this._pipeline.pause();
+    const snapshot = {
+      timeframe: this._pipeline.state.timeframe,
+      messages: this._spaceStateMachine.credentialEntries.map((entry) => ({
+        feedKey: entry.sourceFeed,
+        credential: entry.credential
+      }))
+    };
+    await this._pipeline.unpause();
+    (0, import_log7.log)("save snapshot", {
+      key: this._spaceKey,
+      snapshot
+    }, {
+      F: __dxlog_file7,
+      L: 163,
       S: this,
       C: (f, a) => f(...a)
     });
+    await this._metadata.setSpaceControlPipelineSnapshot(this._spaceKey, snapshot);
   }
-  // TODO(dmaretskyi): Share based on HALO permissions and space affinity.
-  // Hosts, running in the worker, don't share documents unless requested by other peers.
-  // NOTE: If both peers return sharePolicy=false the replication will not happen
-  // https://github.com/automerge/automerge-repo/pull/292
-  async _sharePolicy(peerId, documentId) {
-    if (peerId.startsWith("client-")) {
-      return false;
-    }
-    if (!documentId) {
-      return false;
+  async _consumePipeline(ctx) {
+    for await (const msg of this._pipeline.consume()) {
+      const span = this._usage.beginRecording();
+      this._mutations.inc();
+      try {
+        await this._processMessage(ctx, msg);
+      } catch (err) {
+        import_log7.log.catch(err, void 0, {
+          F: __dxlog_file7,
+          L: 176,
+          S: this,
+          C: (f, a) => f(...a)
+        });
+      }
+      span.end();
     }
-    const peerMetadata = this.repo.peerMetadataByPeerId[peerId];
-    if (isEchoPeerMetadata(peerMetadata)) {
-      return this._echoNetworkAdapter.shouldAdvertise(peerId, {
-        documentId
+  }
+  async _processMessage(ctx, msg) {
+    (0, import_log7.log)("processing", {
+      key: msg.feedKey,
+      seq: msg.seq
+    }, {
+      F: __dxlog_file7,
+      L: 186,
+      S: this,
+      C: (f, a) => f(...a)
+    });
+    if (msg.data.payload.credential) {
+      const timer = import_util4.tracer.mark("dxos.echo.pipeline.control");
+      const result = await this._spaceStateMachine.process(msg.data.payload.credential.credential, {
+        sourceFeed: import_keys4.PublicKey.from(msg.feedKey)
       });
+      timer.end();
+      if (!result) {
+        import_log7.log.warn("processing failed", {
+          msg
+        }, {
+          F: __dxlog_file7,
+          L: 195,
+          S: this,
+          C: (f, a) => f(...a)
+        });
+      } else {
+        await this._noteTargetStateIfNeeded(this._pipeline.state.pendingTimeframe);
+      }
+      this._snapshotTask.schedule();
     }
-    return false;
   }
-  async _beforeSave({ path, batch }) {
-    const handle = this._repo.handles[path[0]];
-    if (!handle) {
-      return;
-    }
-    const doc = handle.docSync();
-    if (!doc) {
-      return;
+  async _noteTargetStateIfNeeded(timeframe) {
+    if (Date.now() - this._lastTimeframeSaveTime > TIMEFRAME_SAVE_DEBOUNCE_INTERVAL) {
+      this._lastTimeframeSaveTime = Date.now();
+      await this._saveTargetTimeframe(timeframe);
     }
-    const heads = (0, import_automerge3.getHeads)(doc);
-    this._headsStore.setHeads(handle.documentId, heads, batch);
-    const spaceKey = getSpaceKeyFromDoc(doc) ?? void 0;
-    const objectIds = Object.keys(doc.objects ?? {});
-    const encodedIds = objectIds.map((objectId) => import_protocols4.objectPointerCodec.encode({
-      documentId: handle.documentId,
-      objectId,
-      spaceKey
-    }));
-    const idToLastHash = new Map(encodedIds.map((id) => [
-      id,
-      heads
-    ]));
-    this._indexMetadataStore.markDirty(idToLastHash, batch);
   }
-  _shouldSyncCollection(collectionId, peerId) {
-    const peerMetadata = this._repo.peerMetadataByPeerId[peerId];
-    if (isEchoPeerMetadata(peerMetadata)) {
-      return this._echoNetworkAdapter.shouldSyncCollection(peerId, {
-        collectionId
-      });
-    }
-    return false;
-  }
-  /**
-  * Called by AutomergeStorageAdapter after levelDB batch commit.
-  */
-  async _afterSave(path) {
-    this._indexMetadataStore.notifyMarkedDirty();
-    const documentId = path[0];
-    const document = this._repo.handles[documentId]?.docSync();
-    if (document) {
-      const heads = (0, import_automerge3.getHeads)(document);
-      this._onHeadsChanged(documentId, heads);
-    }
-  }
-  _automergePeers() {
-    return this._repo.peers;
-  }
-  async _getContainingSpaceForDocument(documentId) {
-    const doc = this._repo.handles[documentId]?.docSync();
-    if (!doc) {
-      return null;
-    }
-    const spaceKeyHex = getSpaceKeyFromDoc(doc);
-    if (!spaceKeyHex) {
-      return null;
-    }
-    return import_keys2.PublicKey.from(spaceKeyHex);
-  }
-  /**
-  * Flush documents to disk.
-  */
-  async flush({ documentIds } = {}) {
-    await this._repo.flush(documentIds);
-  }
-  async getHeads(documentIds) {
-    const result = [];
-    const storeRequestIds = [];
-    const storeResultIndices = [];
-    for (const documentId of documentIds) {
-      const doc = this._repo.handles[documentId]?.docSync();
-      if (doc) {
-        result.push((0, import_automerge3.getHeads)(doc));
-      } else {
-        storeRequestIds.push(documentId);
-        storeResultIndices.push(result.length);
-        result.push(void 0);
-      }
-    }
-    if (storeRequestIds.length > 0) {
-      const storedHeads = await this._headsStore.getHeads(storeRequestIds);
-      for (let i = 0; i < storedHeads.length; i++) {
-        result[storeResultIndices[i]] = storedHeads[i];
-      }
-    }
-    return result;
-  }
-  //
-  // Collection sync.
-  //
-  getLocalCollectionState(collectionId) {
-    return this._collectionSynchronizer.getLocalCollectionState(collectionId);
-  }
-  getRemoteCollectionStates(collectionId) {
-    return this._collectionSynchronizer.getRemoteCollectionStates(collectionId);
-  }
-  refreshCollection(collectionId) {
-    this._collectionSynchronizer.refreshCollection(collectionId);
-  }
-  async getCollectionSyncState(collectionId) {
-    const result = {
-      peers: []
-    };
-    const localState = this.getLocalCollectionState(collectionId);
-    const remoteState = this.getRemoteCollectionStates(collectionId);
-    if (!localState) {
-      return result;
-    }
-    for (const [peerId, state] of remoteState) {
-      const diff = diffCollectionState(localState, state);
-      result.peers.push({
-        peerId,
-        differentDocuments: diff.different.length
-      });
-    }
-    return result;
-  }
-  /**
-  * Update the local collection state based on the locally stored document heads.
-  */
-  async updateLocalCollectionState(collectionId, documentIds) {
-    const heads = await this.getHeads(documentIds);
-    const documents = Object.fromEntries(heads.map((heads2, index) => [
-      documentIds[index],
-      heads2 ?? []
-    ]));
-    this._collectionSynchronizer.setLocalCollectionState(collectionId, {
-      documents
+  async stop() {
+    (0, import_log7.log)("stopping...", void 0, {
+      F: __dxlog_file7,
+      L: 215,
+      S: this,
+      C: (f, a) => f(...a)
     });
-  }
-  _onCollectionStateQueried(collectionId, peerId) {
-    this._collectionSynchronizer.onCollectionStateQueried(collectionId, peerId);
-  }
-  _onCollectionStateReceived(collectionId, peerId, state) {
-    this._collectionSynchronizer.onRemoteStateReceived(collectionId, peerId, decodeCollectionState(state));
-  }
-  _queryCollectionState(collectionId, peerId) {
-    this._echoNetworkAdapter.queryCollectionState(collectionId, peerId);
-  }
-  _sendCollectionState(collectionId, peerId, state) {
-    this._echoNetworkAdapter.sendCollectionState(collectionId, peerId, encodeCollectionState(state));
-  }
-  _onPeerConnected(peerId) {
-    this._collectionSynchronizer.onConnectionOpen(peerId);
-  }
-  _onPeerDisconnected(peerId) {
-    this._collectionSynchronizer.onConnectionClosed(peerId);
-  }
-  _onRemoteCollectionStateUpdated(collectionId, peerId) {
-    const localState = this._collectionSynchronizer.getLocalCollectionState(collectionId);
-    const remoteState = this._collectionSynchronizer.getRemoteCollectionStates(collectionId).get(peerId);
-    if (!localState || !remoteState) {
-      return;
-    }
-    const { different } = diffCollectionState(localState, remoteState);
-    if (different.length === 0) {
-      return;
-    }
-    import_log2.log.info("replication documents after collection sync", {
-      count: different.length
-    }, {
-      F: __dxlog_file4,
-      L: 463,
+    await this._ctx.dispose();
+    await this._pipeline.stop();
+    await this._saveTargetTimeframe(this._pipeline.state.timeframe);
+    (0, import_log7.log)("stopped", void 0, {
+      F: __dxlog_file7,
+      L: 219,
       S: this,
       C: (f, a) => f(...a)
     });
-    for (const documentId of different) {
-      this._repo.find(documentId);
-    }
   }
-  _onHeadsChanged(documentId, heads) {
-    for (const collectionId of this._collectionSynchronizer.getRegisteredCollectionIds()) {
-      const state = this._collectionSynchronizer.getLocalCollectionState(collectionId);
-      if (state?.documents[documentId]) {
-        const newState = structuredClone(state);
-        newState.documents[documentId] = heads;
-        this._collectionSynchronizer.setLocalCollectionState(collectionId, newState);
-      }
+  async _saveTargetTimeframe(timeframe) {
+    try {
+      const newTimeframe = import_timeframe3.Timeframe.merge(this._targetTimeframe ?? new import_timeframe3.Timeframe(), timeframe);
+      await this._metadata.setSpaceControlLatestTimeframe(this._spaceKey, newTimeframe);
+      this._targetTimeframe = newTimeframe;
+    } catch (err) {
+      (0, import_log7.log)(err, void 0, {
+        F: __dxlog_file7,
+        L: 228,
+        S: this,
+        C: (f, a) => f(...a)
+      });
     }
   }
 };
-_ts_decorate2([
-  import_tracing.trace.info()
-], AutomergeHost.prototype, "_peerId", void 0);
-_ts_decorate2([
-  import_tracing.trace.info({
-    depth: null
-  })
-], AutomergeHost.prototype, "_automergePeers", null);
-_ts_decorate2([
-  import_tracing.trace.span({
+_ts_decorate3([
+  import_tracing2.trace.metricsCounter()
+], ControlPipeline.prototype, "_usage", void 0);
+_ts_decorate3([
+  import_tracing2.trace.metricsCounter()
+], ControlPipeline.prototype, "_mutations", void 0);
+_ts_decorate3([
+  import_tracing2.trace.span({
     showInBrowserTimeline: true
   })
-], AutomergeHost.prototype, "flush", null);
-AutomergeHost = _ts_decorate2([
-  import_tracing.trace.resource()
-], AutomergeHost);
-var getSpaceKeyFromDoc = (doc) => {
-  const rawSpaceKey = doc.access?.spaceKey ?? doc.experimental_spaceKey;
-  if (rawSpaceKey == null) {
-    return null;
-  }
-  return String(rawSpaceKey);
-};
-var waitForHeads = async (handle, heads) => {
-  const unavailableHeads = new Set(heads);
-  await handle.whenReady();
-  await import_async3.Event.wrap(handle, "change").waitForCondition(() => {
-    for (const changeHash of unavailableHeads.values()) {
-      if (changeIsPresentInDoc(handle.docSync(), changeHash)) {
-        unavailableHeads.delete(changeHash);
-      }
-    }
-    return unavailableHeads.size === 0;
-  });
-};
-var changeIsPresentInDoc = (doc, changeHash) => {
-  return !!(0, import_automerge3.getBackend)(doc).getChangeByHash(changeHash);
-};
-var decodeCollectionState = (state) => {
-  (0, import_invariant3.invariant)(typeof state === "object" && state !== null, "Invalid state", {
-    F: __dxlog_file4,
-    L: 516,
-    S: void 0,
-    A: [
-      "typeof state === 'object' && state !== null",
-      "'Invalid state'"
-    ]
-  });
-  return state;
-};
-var encodeCollectionState = (state) => {
-  return state;
-};
-var __dxlog_file5 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/space-collection.ts";
-var deriveCollectionIdFromSpaceId = (spaceId) => `space:${spaceId}`;
-var getSpaceIdFromCollectionId = (collectionId) => {
-  const spaceId = collectionId.replace(/^space:/, "");
-  (0, import_invariant5.invariant)(import_keys3.SpaceId.isValid(spaceId), void 0, {
-    F: __dxlog_file5,
-    L: 12,
-    S: void 0,
-    A: [
-      "SpaceId.isValid(spaceId)",
-      ""
-    ]
-  });
-  return spaceId;
-};
-var __dxlog_file6 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/auth.ts";
-var AuthExtension = class extends import_teleport.RpcExtension {
-  constructor(_authParams) {
-    super({
-      requested: {
-        AuthService: import_protocols5.schema.getService("dxos.mesh.teleport.auth.AuthService")
-      },
-      exposed: {
-        AuthService: import_protocols5.schema.getService("dxos.mesh.teleport.auth.AuthService")
-      },
-      timeout: 60 * 1e3
+], ControlPipeline.prototype, "start", null);
+_ts_decorate3([
+  import_tracing2.trace.span()
+], ControlPipeline.prototype, "_consumePipeline", null);
+_ts_decorate3([
+  import_tracing2.trace.span()
+], ControlPipeline.prototype, "_processMessage", null);
+ControlPipeline = _ts_decorate3([
+  import_tracing2.trace.resource(),
+  (0, import_async7.trackLeaks)("start", "stop")
+], ControlPipeline);
+function _ts_decorate4(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
+    r = Reflect.decorate(decorators, target, key, desc);
+  else
+    for (var i = decorators.length - 1; i >= 0; i--)
+      if (d = decorators[i])
+        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+var __dxlog_file8 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/space.ts";
+var Space = class extends import_context6.Resource {
+  constructor(params) {
+    super();
+    this.onCredentialProcessed = new import_util3.Callback();
+    this.stateUpdate = new import_async6.Event();
+    (0, import_invariant6.invariant)(params.spaceKey && params.feedProvider, void 0, {
+      F: __dxlog_file8,
+      L: 76,
+      S: this,
+      A: [
+        "params.spaceKey && params.feedProvider",
+        ""
+      ]
     });
-    this._authParams = _authParams;
-    this._ctx = new import_context7.Context({
-      onError: (err) => {
-        import_log4.log.catch(err, void 0, {
-          F: __dxlog_file6,
-          L: 28,
-          S: this,
-          C: (f, a) => f(...a)
-        });
-      }
-    }, {
-      F: __dxlog_file6,
-      L: 26
+    this._id = params.id;
+    this._key = params.spaceKey;
+    this._genesisFeedKey = params.genesisFeed.key;
+    this._feedProvider = params.feedProvider;
+    this._snapshotManager = params.snapshotManager;
+    this._controlPipeline = new ControlPipeline({
+      spaceKey: params.spaceKey,
+      genesisFeed: params.genesisFeed,
+      feedProvider: params.feedProvider,
+      metadataStore: params.metadataStore
     });
-  }
-  async getHandlers() {
-    return {
-      AuthService: {
-        authenticate: async ({ challenge }) => {
-          try {
-            const credential = await this._authParams.provider(challenge);
-            if (!credential) {
-              throw new Error("auth rejected");
-            }
-            return {
-              credential
-            };
-          } catch (err) {
-            import_log4.log.error("failed to generate auth credentials", err, {
-              F: __dxlog_file6,
-              L: 55,
-              S: this,
-              C: (f, a) => f(...a)
-            });
-            throw new Error("auth rejected");
-          }
-        }
-      }
-    };
-  }
-  async onOpen(context) {
-    await super.onOpen(context);
-    (0, import_async5.scheduleTask)(this._ctx, async () => {
-      try {
-        const challenge = (0, import_crypto2.randomBytes)(32);
-        const { credential } = await this.rpc.AuthService.authenticate({
-          challenge
-        });
-        (0, import_invariant6.invariant)(credential?.length > 0, "invalid credential", {
-          F: __dxlog_file6,
-          L: 69,
-          S: this,
-          A: [
-            "credential?.length > 0",
-            "'invalid credential'"
-          ]
-        });
-        const success = await this._authParams.verifier(challenge, credential);
-        (0, import_invariant6.invariant)(success, "credential not verified", {
-          F: __dxlog_file6,
-          L: 71,
-          S: this,
-          A: [
-            "success",
-            "'credential not verified'"
-          ]
-        });
-        (0, import_async5.runInContext)(this._ctx, () => this._authParams.onAuthSuccess());
-      } catch (err) {
-        (0, import_log4.log)("auth failed", err, {
-          F: __dxlog_file6,
-          L: 74,
-          S: this,
-          C: (f, a) => f(...a)
+    this._controlPipeline.onFeedAdmitted.set(async (info) => {
+      const sparse = info.assertion.designation === import_credentials.AdmittedFeed.Designation.DATA;
+      if (!info.key.equals(params.genesisFeed.key)) {
+        (0, import_async6.scheduleMicroTask)(this._ctx, async () => {
+          await this.protocol.addFeed(await params.feedProvider(info.key, {
+            sparse
+          }));
         });
-        this.close();
-        this._authParams.onAuthFailure();
       }
     });
+    this._controlPipeline.onCredentialProcessed.set(async (credential) => {
+      await this.onCredentialProcessed.callIfSet(credential);
+      (0, import_log6.log)("onCredentialProcessed", {
+        credential
+      }, {
+        F: __dxlog_file8,
+        L: 104,
+        S: this,
+        C: (f, a) => f(...a)
+      });
+      this.stateUpdate.emit();
+    });
+    this._controlPipeline.onDelegatedInvitation.set(async (invitation) => {
+      (0, import_log6.log)("onDelegatedInvitation", {
+        invitation
+      }, {
+        F: __dxlog_file8,
+        L: 108,
+        S: this,
+        C: (f, a) => f(...a)
+      });
+      await params.onDelegatedInvitationStatusChange(invitation, true);
+    });
+    this._controlPipeline.onDelegatedInvitationRemoved.set(async (invitation) => {
+      (0, import_log6.log)("onDelegatedInvitationRemoved", {
+        invitation
+      }, {
+        F: __dxlog_file8,
+        L: 112,
+        S: this,
+        C: (f, a) => f(...a)
+      });
+      await params.onDelegatedInvitationStatusChange(invitation, false);
+    });
+    this._controlPipeline.onMemberRoleChanged.set(async (changedMembers) => {
+      (0, import_log6.log)("onMemberRoleChanged", () => ({
+        changedMembers: changedMembers.map((m) => [
+          m.key,
+          m.role
+        ])
+      }), {
+        F: __dxlog_file8,
+        L: 116,
+        S: this,
+        C: (f, a) => f(...a)
+      });
+      await params.onMemberRolesChanged(changedMembers);
+    });
+    this.protocol = params.protocol;
   }
-  async onClose() {
-    await this._ctx.dispose();
-    await super.onClose();
+  get id() {
+    return this._id;
   }
-  async onAbort() {
-    await this._ctx.dispose();
-    await super.onAbort();
+  get key() {
+    return this._key;
   }
-};
-function _ts_decorate3(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
-    r = Reflect.decorate(decorators, target, key, desc);
-  else
-    for (var i = decorators.length - 1; i >= 0; i--)
-      if (d = decorators[i])
-        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-var __dxlog_file7 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/pipeline/timeframe-clock.ts";
-var mapTimeframeToFeedIndexes = (timeframe) => timeframe.frames().map(([feedKey, index]) => ({
-  feedKey,
-  index
-}));
-var mapFeedIndexesToTimeframe = (indexes) => new import_timeframe.Timeframe(indexes.map(({ feedKey, index }) => [
-  feedKey,
-  index
-]));
-var startAfter = (timeframe) => timeframe.frames().map(([feedKey, index]) => ({
-  feedKey,
-  index: index + 1
-}));
-var TimeframeClock = class {
-  constructor(_timeframe = new import_timeframe.Timeframe()) {
-    this._timeframe = _timeframe;
-    this.update = new import_async6.Event();
-    this._pendingTimeframe = _timeframe;
+  get isOpen() {
+    return this._lifecycleState === import_context6.LifecycleState.OPEN;
   }
-  /**
-  * Timeframe that was processed by ECHO.
-  */
-  get timeframe() {
-    return this._timeframe;
+  get genesisFeedKey() {
+    return this._genesisFeedKey;
+  }
+  get controlFeedKey() {
+    return this._controlFeed?.key;
+  }
+  get dataFeedKey() {
+    return this._dataFeed?.key;
+  }
+  get spaceState() {
+    return this._controlPipeline.spaceState;
   }
   /**
-  * Timeframe that is currently being processed by ECHO.
-  * Will be equal to `timeframe` after the processing is complete.
+  * @test-only
   */
-  get pendingTimeframe() {
-    return this._pendingTimeframe;
+  get controlPipeline() {
+    return this._controlPipeline.pipeline;
   }
-  setTimeframe(timeframe) {
-    this._timeframe = timeframe;
-    this._pendingTimeframe = timeframe;
-    this.update.emit(this._timeframe);
+  get snapshotManager() {
+    return this._snapshotManager;
   }
-  updatePendingTimeframe(key, seq) {
-    this._pendingTimeframe = import_timeframe.Timeframe.merge(this._pendingTimeframe, new import_timeframe.Timeframe([
-      [
-        key,
-        seq
+  async setControlFeed(feed) {
+    (0, import_invariant6.invariant)(!this._controlFeed, "Control feed already set.", {
+      F: __dxlog_file8,
+      L: 168,
+      S: this,
+      A: [
+        "!this._controlFeed",
+        "'Control feed already set.'"
       ]
-    ]));
+    });
+    this._controlFeed = feed;
+    await this._controlPipeline.setWriteFeed(feed);
+    return this;
   }
-  updateTimeframe() {
-    this._timeframe = this._pendingTimeframe;
-    this.update.emit(this._timeframe);
+  async setDataFeed(feed) {
+    (0, import_invariant6.invariant)(!this._dataFeed, "Data feed already set.", {
+      F: __dxlog_file8,
+      L: 175,
+      S: this,
+      A: [
+        "!this._dataFeed",
+        "'Data feed already set.'"
+      ]
+    });
+    this._dataFeed = feed;
+    return this;
   }
-  hasGaps(timeframe) {
-    const gaps = import_timeframe.Timeframe.dependencies(timeframe, this._timeframe);
-    return !gaps.isEmpty();
+  /**
+  * Use for diagnostics.
+  */
+  getControlFeeds() {
+    return Array.from(this._controlPipeline.spaceState.feeds.values());
   }
-  async waitUntilReached(target) {
-    (0, import_log5.log)("waitUntilReached", {
-      target,
-      current: this._timeframe
+  async _open(ctx) {
+    (0, import_log6.log)("opening...", void 0, {
+      F: __dxlog_file8,
+      L: 189,
+      S: this,
+      C: (f, a) => f(...a)
+    });
+    await this._controlPipeline.start();
+    await this.protocol.start();
+    await this.protocol.addFeed(await this._feedProvider(this._genesisFeedKey));
+    (0, import_log6.log)("opened", void 0, {
+      F: __dxlog_file8,
+      L: 196,
+      S: this,
+      C: (f, a) => f(...a)
+    });
+  }
+  async _close() {
+    (0, import_log6.log)("closing...", {
+      key: this._key
     }, {
-      F: __dxlog_file7,
-      L: 70,
+      F: __dxlog_file8,
+      L: 201,
       S: this,
       C: (f, a) => f(...a)
     });
-    await this.update.waitForCondition(() => {
-      (0, import_log5.log)("check if reached", {
-        target,
-        current: this._timeframe,
-        deps: import_timeframe.Timeframe.dependencies(target, this._timeframe)
-      }, {
-        F: __dxlog_file7,
-        L: 72,
-        S: this,
-        C: (f, a) => f(...a)
-      });
-      return import_timeframe.Timeframe.dependencies(target, this._timeframe).isEmpty();
+    await this.protocol.stop();
+    await this._controlPipeline.stop();
+    (0, import_log6.log)("closed", void 0, {
+      F: __dxlog_file8,
+      L: 207,
+      S: this,
+      C: (f, a) => f(...a)
     });
   }
 };
-_ts_decorate3([
-  (0, import_debug.timed)(5e3)
-], TimeframeClock.prototype, "waitUntilReached", null);
-var __dxlog_file8 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/pipeline/message-selector.ts";
-var createMessageSelector = (timeframeClock) => {
-  return (messages) => {
-    for (let i = 0; i < messages.length; i++) {
-      const { data: { timeframe } } = messages[i];
-      (0, import_invariant8.invariant)(timeframe, void 0, {
-        F: __dxlog_file8,
-        L: 25,
-        S: void 0,
-        A: [
-          "timeframe",
-          ""
-        ]
-      });
-      if (!timeframeClock.hasGaps(timeframe)) {
-        return i;
+_ts_decorate4([
+  import_tracing.trace.info()
+], Space.prototype, "protocol", void 0);
+_ts_decorate4([
+  import_tracing.trace.info()
+], Space.prototype, "_controlPipeline", void 0);
+_ts_decorate4([
+  import_log6.logInfo,
+  import_tracing.trace.info()
+], Space.prototype, "id", null);
+_ts_decorate4([
+  import_log6.logInfo,
+  import_tracing.trace.info()
+], Space.prototype, "key", null);
+_ts_decorate4([
+  import_tracing.trace.span()
+], Space.prototype, "_open", null);
+_ts_decorate4([
+  import_async6.synchronized
+], Space.prototype, "_close", null);
+Space = _ts_decorate4([
+  (0, import_async6.trackLeaks)("open", "close"),
+  import_tracing.trace.resource()
+], Space);
+var SPACE_IDS_CACHE = new import_util3.ComplexMap(import_keys3.PublicKey.hash);
+var createIdFromSpaceKey = async (spaceKey) => {
+  const cachedValue = SPACE_IDS_CACHE.get(spaceKey);
+  if (cachedValue !== void 0) {
+    return cachedValue;
+  }
+  const digest = await import_crypto3.subtleCrypto.digest("SHA-256", spaceKey.asUint8Array());
+  const bytes = new Uint8Array(digest).slice(0, import_keys3.SpaceId.byteLength);
+  const spaceId = import_keys3.SpaceId.encode(bytes);
+  SPACE_IDS_CACHE.set(spaceKey, spaceId);
+  return spaceId;
+};
+var __dxlog_file9 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/admission-discovery-extension.ts";
+var CredentialRetrieverExtension = class extends import_teleport2.RpcExtension {
+  constructor(_request, _onResult) {
+    super({
+      requested: {
+        AdmissionDiscoveryService: import_protocols5.schema.getService("dxos.mesh.teleport.AdmissionDiscoveryService")
+      }
+    });
+    this._request = _request;
+    this._onResult = _onResult;
+    this._ctx = new import_context8.Context(void 0, {
+      F: __dxlog_file9,
+      L: 25
+    });
+  }
+  async getHandlers() {
+    return {};
+  }
+  async onOpen(context) {
+    await super.onOpen(context);
+    (0, import_async8.scheduleTask)(this._ctx, async () => {
+      try {
+        const result = await this.rpc.AdmissionDiscoveryService.getAdmissionCredential(this._request);
+        this._onResult.wake(result.admissionCredential);
+      } catch (err) {
+        context.close(err);
       }
-    }
-    (0, import_log7.log)("Skipping...", void 0, {
-      F: __dxlog_file8,
-      L: 33,
-      S: void 0,
-      C: (f, a) => f(...a)
     });
-  };
+  }
+  async onClose() {
+    await this._ctx.dispose();
+  }
+  async onAbort() {
+    await this._ctx.dispose();
+  }
 };
-function _ts_decorate4(decorators, target, key, desc) {
+var CredentialServerExtension = class extends import_teleport2.RpcExtension {
+  constructor(_space) {
+    super({
+      exposed: {
+        AdmissionDiscoveryService: import_protocols5.schema.getService("dxos.mesh.teleport.AdmissionDiscoveryService")
+      }
+    });
+    this._space = _space;
+  }
+  async getHandlers() {
+    return {
+      AdmissionDiscoveryService: {
+        getAdmissionCredential: async (request) => {
+          const memberInfo = this._space.spaceState.members.get(request.memberKey);
+          if (!memberInfo?.credential) {
+            throw new import_protocols5.ProtocolError("Space member not found.", request);
+          }
+          return {
+            admissionCredential: memberInfo.credential
+          };
+        }
+      }
+    };
+  }
+};
+function _ts_decorate5(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
     r = Reflect.decorate(decorators, target, key, desc);
@@ -1733,674 +1777,678 @@ function _ts_decorate4(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file9 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/pipeline/pipeline.ts";
-var PipelineState = class {
-  constructor(_feeds, _timeframeClock) {
-    this._feeds = _feeds;
-    this._timeframeClock = _timeframeClock;
-    this._ctx = new import_context8.Context(void 0, {
-      F: __dxlog_file9,
-      L: 41
+var __dxlog_file10 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/space-protocol.ts";
+var MOCK_AUTH_PROVIDER = async (nonce) => Buffer.from("mock");
+var MOCK_AUTH_VERIFIER = async (nonce, credential) => true;
+var SpaceProtocol = class {
+  constructor({ topic, swarmIdentity, networkManager, onSessionAuth, onAuthFailure, blobStore, disableP2pReplication }) {
+    this._feeds = /* @__PURE__ */ new Set();
+    this._sessions = new import_util5.ComplexMap(import_keys5.PublicKey.hash);
+    this._topology = new import_network_manager.MMSTTopology({
+      originateConnections: 4,
+      maxPeers: 10,
+      sampleSize: 20
     });
-    this.timeframeUpdate = this._timeframeClock.update;
-    this.stalled = new import_async7.Event();
-    this._startTimeframe = new import_timeframe2.Timeframe();
-    this._reachedTarget = false;
-  }
-  /**
-  * Latest theoretical timeframe based on the last mutation in each feed.
-  * NOTE: This might never be reached if the mutation dependencies
-  */
-  // TODO(dmaretskyi): Rename `totalTimeframe`? or `lastTimeframe`.
-  get endTimeframe() {
-    return mapFeedIndexesToTimeframe(Array.from(this._feeds.values()).filter((feed) => feed.length > 0).map((feed) => ({
-      feedKey: feed.key,
-      index: feed.length - 1
-    })));
+    this.feedAdded = new import_util5.CallbackCollection();
+    this._spaceKey = topic;
+    this._networkManager = networkManager;
+    this._swarmIdentity = swarmIdentity;
+    this._onSessionAuth = onSessionAuth;
+    this._onAuthFailure = onAuthFailure;
+    this.blobSync = new import_teleport_extension_object_sync.BlobSync({
+      blobStore
+    });
+    this._topic = import_crypto4.subtleCrypto.digest("SHA-256", topic.asBuffer()).then(import_crypto4.discoveryKey).then(import_keys5.PublicKey.from);
+    this._disableP2pReplication = disableP2pReplication ?? false;
   }
-  get startTimeframe() {
-    return this._startTimeframe;
+  get sessions() {
+    return this._sessions;
   }
-  get timeframe() {
-    return this._timeframeClock.timeframe;
+  get feeds() {
+    return this._feeds;
   }
-  get pendingTimeframe() {
-    return this._timeframeClock.pendingTimeframe;
+  get _ownPeerKey() {
+    return this._swarmIdentity.peerKey;
   }
-  get targetTimeframe() {
-    return this._targetTimeframe ? this._targetTimeframe : new import_timeframe2.Timeframe();
+  // TODO(burdon): Create abstraction for Space (e.g., add keys and have provider).
+  async addFeed(feed) {
+    (0, import_log8.log)("addFeed", {
+      key: feed.key
+    }, {
+      F: __dxlog_file10,
+      L: 127,
+      S: this,
+      C: (f, a) => f(...a)
+    });
+    this._feeds.add(feed);
+    for (const session of this._sessions.values()) {
+      session.replicator.addFeed(feed);
+    }
+    await this.feedAdded.callSerial(feed);
   }
-  get reachedTarget() {
-    return this._reachedTarget;
+  // TODO(burdon): Rename open? Common open/close interfaces for all services?
+  async start() {
+    if (this._connection) {
+      return;
+    }
+    const credentials = await this._swarmIdentity.credentialProvider(Buffer.from(""));
+    await this.blobSync.open();
+    (0, import_log8.log)("starting...", void 0, {
+      F: __dxlog_file10,
+      L: 148,
+      S: this,
+      C: (f, a) => f(...a)
+    });
+    const topic = await this._topic;
+    this._connection = await this._networkManager.joinSwarm({
+      protocolProvider: this._createProtocolProvider(credentials),
+      peerId: this._swarmIdentity.peerKey,
+      topic,
+      topology: this._topology,
+      label: `swarm ${topic.truncate()} for space ${this._spaceKey.truncate()}`
+    });
+    (0, import_log8.log)("started", void 0, {
+      F: __dxlog_file10,
+      L: 158,
+      S: this,
+      C: (f, a) => f(...a)
+    });
   }
-  get feeds() {
-    return Array.from(this._feeds.values());
+  updateTopology() {
+    this._topology.forceUpdate();
   }
-  async waitUntilTimeframe(target) {
-    await this._timeframeClock.waitUntilReached(target);
+  async stop() {
+    await this.blobSync.close();
+    if (this._connection) {
+      (0, import_log8.log)("stopping...", void 0, {
+        F: __dxlog_file10,
+        L: 169,
+        S: this,
+        C: (f, a) => f(...a)
+      });
+      await this._connection.close();
+      (0, import_log8.log)("stopped", void 0, {
+        F: __dxlog_file10,
+        L: 171,
+        S: this,
+        C: (f, a) => f(...a)
+      });
+    }
   }
-  setTargetTimeframe(target) {
-    this._targetTimeframe = target;
+  _createProtocolProvider(credentials) {
+    return (wireParams) => {
+      const session = new SpaceProtocolSession({
+        wireParams,
+        swarmIdentity: this._swarmIdentity,
+        onSessionAuth: this._onSessionAuth,
+        onAuthFailure: this._onAuthFailure,
+        blobSync: this.blobSync,
+        disableP2pReplication: this._disableP2pReplication
+      });
+      this._sessions.set(wireParams.remotePeerId, session);
+      for (const feed of this._feeds) {
+        session.replicator.addFeed(feed);
+      }
+      return session;
+    };
   }
-  /**
-  * Wait until the pipeline processes all messages in the feed and reaches the target timeframe if that is set.
-  *
-  * This function will resolve immediately if the pipeline is stalled.
-  *
-  * @param timeout Timeout in milliseconds to specify the maximum wait time.
-  */
-  async waitUntilReachedTargetTimeframe({ ctx = new import_context8.Context(void 0, {
-    F: __dxlog_file9,
-    L: 129
-  }), timeout, breakOnStall = true } = {}) {
-    (0, import_log6.log)("waitUntilReachedTargetTimeframe", {
-      timeout,
-      current: this.timeframe,
-      target: this.targetTimeframe
-    }, {
-      F: __dxlog_file9,
-      L: 133,
-      S: this,
-      C: (f, a) => f(...a)
+};
+_ts_decorate5([
+  import_log8.logInfo,
+  import_tracing3.trace.info()
+], SpaceProtocol.prototype, "_topic", void 0);
+_ts_decorate5([
+  import_tracing3.trace.info()
+], SpaceProtocol.prototype, "_spaceKey", void 0);
+_ts_decorate5([
+  import_log8.logInfo
+], SpaceProtocol.prototype, "_ownPeerKey", null);
+SpaceProtocol = _ts_decorate5([
+  import_tracing3.trace.resource()
+], SpaceProtocol);
+var AuthStatus;
+(function(AuthStatus2) {
+  AuthStatus2["INITIAL"] = "INITIAL";
+  AuthStatus2["SUCCESS"] = "SUCCESS";
+  AuthStatus2["FAILURE"] = "FAILURE";
+})(AuthStatus || (AuthStatus = {}));
+var SpaceProtocolSession = class {
+  // TODO(dmaretskyi): Allow to pass in extra extensions.
+  constructor({ wireParams, swarmIdentity, onSessionAuth, onAuthFailure, blobSync, disableP2pReplication }) {
+    this.replicator = new import_teleport_extension_replicator.ReplicatorExtension().setOptions({
+      upload: true
     });
-    this._reachedTargetPromise ??= Promise.race([
-      this._timeframeClock.update.waitForCondition(() => {
-        return import_timeframe2.Timeframe.dependencies(this.targetTimeframe, this.timeframe).isEmpty();
-      }),
-      ...breakOnStall ? [
-        this.stalled.discardParameter().waitForCount(1)
-      ] : []
-    ]);
-    let done = false;
-    if (timeout) {
-      return Promise.race([
-        (0, import_context8.rejectOnDispose)(ctx),
-        (0, import_context8.rejectOnDispose)(this._ctx),
-        this._reachedTargetPromise.then(() => {
-          done = true;
-          this._reachedTarget = true;
-        }),
-        (0, import_async7.sleepWithContext)(this._ctx, timeout).then(() => {
-          if (done) {
-            return;
-          }
-          import_log6.log.warn("waitUntilReachedTargetTimeframe timed out", {
-            timeout,
-            current: this.timeframe,
-            target: this.targetTimeframe,
-            dependencies: import_timeframe2.Timeframe.dependencies(this.targetTimeframe, this.timeframe)
-          }, {
-            F: __dxlog_file9,
-            L: 161,
-            S: this,
-            C: (f, a) => f(...a)
-          });
-        })
-      ]);
-    } else {
-      return this._reachedTargetPromise;
+    this._authStatus = "INITIAL";
+    this._wireParams = wireParams;
+    this._swarmIdentity = swarmIdentity;
+    this._onSessionAuth = onSessionAuth;
+    this._onAuthFailure = onAuthFailure;
+    this._blobSync = blobSync;
+    this._teleport = new import_teleport3.Teleport(wireParams);
+    this._disableP2pReplication = disableP2pReplication ?? false;
+  }
+  get authStatus() {
+    return this._authStatus;
+  }
+  get stats() {
+    return this._teleport.stats;
+  }
+  get stream() {
+    return this._teleport.stream;
+  }
+  async open(sessionId) {
+    await this._teleport.open(sessionId);
+    this._teleport.addExtension("dxos.mesh.teleport.auth", new AuthExtension({
+      provider: this._swarmIdentity.credentialProvider,
+      verifier: this._swarmIdentity.credentialAuthenticator,
+      onAuthSuccess: () => {
+        (0, import_log8.log)("Peer authenticated", void 0, {
+          F: __dxlog_file10,
+          L: 282,
+          S: this,
+          C: (f, a) => f(...a)
+        });
+        this._authStatus = "SUCCESS";
+        this._onSessionAuth?.(this._teleport);
+      },
+      onAuthFailure: () => {
+        this._authStatus = "FAILURE";
+        this._onAuthFailure?.(this._teleport);
+      }
+    }));
+    if (!this._disableP2pReplication) {
+      this._teleport.addExtension("dxos.mesh.teleport.replicator", this.replicator);
     }
+    this._teleport.addExtension("dxos.mesh.teleport.blobsync", this._blobSync.createExtension());
+  }
+  async close() {
+    (0, import_log8.log)("close", void 0, {
+      F: __dxlog_file10,
+      L: 301,
+      S: this,
+      C: (f, a) => f(...a)
+    });
+    await this._teleport.close();
+  }
+  async abort() {
+    await this._teleport.abort();
   }
 };
-var Pipeline = class {
-  constructor() {
-    this._timeframeClock = new TimeframeClock(new import_timeframe2.Timeframe());
-    this._feeds = new import_util3.ComplexMap(import_keys4.PublicKey.hash);
-    this._state = new PipelineState(this._feeds, this._timeframeClock);
-    this._processingTrigger = new import_async7.Trigger().wake();
-    this._pauseTrigger = new import_async7.Trigger().wake();
-    this._downloads = new import_util3.ComplexMap((value) => import_keys4.PublicKey.hash(value.key));
-    this._isStopping = false;
-    this._isStarted = false;
-    this._isBeingConsumed = false;
-    this._isPaused = false;
+_ts_decorate5([
+  import_log8.logInfo
+], SpaceProtocolSession.prototype, "_wireParams", void 0);
+_ts_decorate5([
+  import_log8.logInfo
+], SpaceProtocolSession.prototype, "authStatus", null);
+var isCollectionQueryMessage = (message) => message.type === import_protocols8.MESSAGE_TYPE_COLLECTION_QUERY;
+var isCollectionStateMessage = (message) => message.type === import_protocols8.MESSAGE_TYPE_COLLECTION_STATE;
+function _ts_decorate6(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
+    r = Reflect.decorate(decorators, target, key, desc);
+  else
+    for (var i = decorators.length - 1; i >= 0; i--)
+      if (d = decorators[i])
+        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+var __dxlog_file11 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/echo-network-adapter.ts";
+var EchoNetworkAdapter = class extends import_automerge_repo2.NetworkAdapter {
+  constructor(_params) {
+    super();
+    this._params = _params;
+    this._replicators = /* @__PURE__ */ new Set();
+    this._connections = /* @__PURE__ */ new Map();
+    this._lifecycleState = import_context10.LifecycleState.CLOSED;
+    this._connected = new import_async11.Trigger();
   }
-  get state() {
-    return this._state;
+  connect(peerId, peerMetadata) {
+    this.peerId = peerId;
+    this.peerMetadata = peerMetadata;
+    this._connected.wake();
   }
-  get writer() {
-    (0, import_invariant7.invariant)(this._writer, "Writer not set.", {
-      F: __dxlog_file9,
-      L: 243,
-      S: this,
-      A: [
-        "this._writer",
-        "'Writer not set.'"
-      ]
-    });
-    return this._writer;
+  send(message) {
+    this._send(message);
   }
-  hasFeed(feedKey) {
-    return this._feeds.has(feedKey);
+  disconnect() {
   }
-  getFeeds() {
-    return this._feedSetIterator.feeds;
+  async open() {
+    if (this._lifecycleState === import_context10.LifecycleState.OPEN) {
+      return;
+    }
+    this._lifecycleState = import_context10.LifecycleState.OPEN;
+    (0, import_log12.log)("emit ready", void 0, {
+      F: __dxlog_file11,
+      L: 81,
+      S: this,
+      C: (f, a) => f(...a)
+    });
+    this.emit("ready", {
+      network: this
+    });
   }
-  // NOTE: This cannot be synchronized with `stop` because stop waits for the mutation processing to complete,
-  // which might be opening feeds during the mutation processing, which w
-  async addFeed(feed) {
-    this._feeds.set(feed.key, feed);
-    if (this._feedSetIterator) {
-      await this._feedSetIterator.addFeed(feed);
+  async close() {
+    if (this._lifecycleState === import_context10.LifecycleState.CLOSED) {
+      return this;
     }
-    if (this._isStarted && !this._isPaused) {
-      this._setFeedDownloadState(feed);
+    for (const replicator of this._replicators) {
+      await replicator.disconnect();
     }
+    this._replicators.clear();
+    this._lifecycleState = import_context10.LifecycleState.CLOSED;
   }
-  setWriteFeed(feed) {
-    (0, import_invariant7.invariant)(!this._writer, "Writer already set.", {
-      F: __dxlog_file9,
-      L: 270,
+  async whenConnected() {
+    await this._connected.wait({
+      timeout: 1e4
+    });
+  }
+  async addReplicator(replicator) {
+    (0, import_invariant9.invariant)(this._lifecycleState === import_context10.LifecycleState.OPEN, void 0, {
+      F: __dxlog_file11,
+      L: 107,
       S: this,
       A: [
-        "!this._writer",
-        "'Writer already set.'"
+        "this._lifecycleState === LifecycleState.OPEN",
+        ""
       ]
     });
-    (0, import_invariant7.invariant)(feed.properties.writable, "Feed must be writable.", {
-      F: __dxlog_file9,
-      L: 271,
+    (0, import_invariant9.invariant)(this.peerId, void 0, {
+      F: __dxlog_file11,
+      L: 108,
       S: this,
       A: [
-        "feed.properties.writable",
-        "'Feed must be writable.'"
+        "this.peerId",
+        ""
       ]
     });
-    this._writer = createMappedFeedWriter((payload) => ({
-      timeframe: this._timeframeClock.timeframe,
-      payload
-    }), feed.createFeedWriter());
-  }
-  async start() {
-    (0, import_invariant7.invariant)(!this._isStarted, "Pipeline is already started.", {
-      F: __dxlog_file9,
-      L: 284,
+    (0, import_invariant9.invariant)(!this._replicators.has(replicator), void 0, {
+      F: __dxlog_file11,
+      L: 109,
       S: this,
       A: [
-        "!this._isStarted",
-        "'Pipeline is already started.'"
+        "!this._replicators.has(replicator)",
+        ""
       ]
     });
-    (0, import_log6.log)("starting...", void 0, {
-      F: __dxlog_file9,
-      L: 285,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    await this._initIterator();
-    await this._feedSetIterator.open();
-    this._isStarted = true;
-    (0, import_log6.log)("started", void 0, {
-      F: __dxlog_file9,
-      L: 289,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    if (!this._isPaused) {
-      for (const feed of this._feeds.values()) {
-        this._setFeedDownloadState(feed);
+    this._replicators.add(replicator);
+    await replicator.connect({
+      peerId: this.peerId,
+      onConnectionOpen: this._onConnectionOpen.bind(this),
+      onConnectionClosed: this._onConnectionClosed.bind(this),
+      onConnectionAuthScopeChanged: this._onConnectionAuthScopeChanged.bind(this),
+      isDocumentInRemoteCollection: this._params.isDocumentInRemoteCollection,
+      getContainingSpaceForDocument: this._params.getContainingSpaceForDocument,
+      getContainingSpaceIdForDocument: async (documentId) => {
+        const key = await this._params.getContainingSpaceForDocument(documentId);
+        return key ? createIdFromSpaceKey(key) : null;
       }
-    }
-  }
-  async stop() {
-    (0, import_log6.log)("stopping...", void 0, {
-      F: __dxlog_file9,
-      L: 300,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    this._isStopping = true;
-    for (const [feed, handle] of this._downloads.entries()) {
-      feed.undownload(handle);
-    }
-    this._downloads.clear();
-    await this._feedSetIterator?.close();
-    await this._processingTrigger.wait();
-    await this._state._ctx.dispose();
-    this._state._ctx = new import_context8.Context(void 0, {
-      F: __dxlog_file9,
-      L: 309
     });
-    this._state._reachedTargetPromise = void 0;
-    this._state._reachedTarget = false;
-    this._isStarted = false;
-    (0, import_log6.log)("stopped", void 0, {
-      F: __dxlog_file9,
-      L: 313,
+  }
+  async removeReplicator(replicator) {
+    (0, import_invariant9.invariant)(this._lifecycleState === import_context10.LifecycleState.OPEN, void 0, {
+      F: __dxlog_file11,
+      L: 128,
       S: this,
-      C: (f, a) => f(...a)
+      A: [
+        "this._lifecycleState === LifecycleState.OPEN",
+        ""
+      ]
     });
-  }
-  /**
-  * @param timeframe Timeframe of already processed messages.
-  *  The pipeline will start processing messages AFTER this timeframe.
-  */
-  async setCursor(timeframe) {
-    (0, import_invariant7.invariant)(!this._isStarted || this._isPaused, "Invalid state.", {
-      F: __dxlog_file9,
-      L: 322,
+    (0, import_invariant9.invariant)(this._replicators.has(replicator), void 0, {
+      F: __dxlog_file11,
+      L: 129,
       S: this,
       A: [
-        "!this._isStarted || this._isPaused",
-        "'Invalid state.'"
+        "this._replicators.has(replicator)",
+        ""
       ]
     });
-    this._state._startTimeframe = timeframe;
-    this._timeframeClock.setTimeframe(timeframe);
-    if (this._feedSetIterator) {
-      await this._feedSetIterator.close();
-      await this._initIterator();
-      await this._feedSetIterator.open();
+    await replicator.disconnect();
+    this._replicators.delete(replicator);
+  }
+  async shouldAdvertise(peerId, params) {
+    const connection = this._connections.get(peerId);
+    if (!connection) {
+      return false;
     }
+    return connection.connection.shouldAdvertise(params);
   }
-  /**
-  * Calling pause while processing will cause a deadlock.
-  */
-  async pause() {
-    if (this._isPaused) {
-      return;
+  shouldSyncCollection(peerId, params) {
+    const connection = this._connections.get(peerId);
+    if (!connection) {
+      return false;
     }
-    this._pauseTrigger.reset();
-    await this._processingTrigger.wait();
-    this._isPaused = true;
+    return connection.connection.shouldSyncCollection(params);
   }
-  async unpause() {
-    (0, import_invariant7.invariant)(this._isPaused, "Pipeline is not paused.", {
-      F: __dxlog_file9,
-      L: 351,
-      S: this,
-      A: [
-        "this._isPaused",
-        "'Pipeline is not paused.'"
-      ]
-    });
-    this._pauseTrigger.wake();
-    this._isPaused = false;
-    for (const feed of this._feeds.values()) {
-      this._setFeedDownloadState(feed);
+  queryCollectionState(collectionId, targetId) {
+    const message = {
+      type: "collection-query",
+      senderId: this.peerId,
+      targetId,
+      collectionId
+    };
+    this._send(message);
+  }
+  sendCollectionState(collectionId, targetId, state) {
+    const message = {
+      type: "collection-state",
+      senderId: this.peerId,
+      targetId,
+      collectionId,
+      state
+    };
+    this._send(message);
+  }
+  _send(message) {
+    const connectionEntry = this._connections.get(message.targetId);
+    if (!connectionEntry) {
+      throw new Error("Connection not found.");
     }
+    const writeStart = Date.now();
+    connectionEntry.writer.write(message).then(() => {
+      const durationMs = Date.now() - writeStart;
+      this._params.monitor?.recordMessageSent(message, durationMs);
+    }).catch((err) => {
+      if (connectionEntry.isOpen) {
+        import_log12.log.catch(err, void 0, {
+          F: __dxlog_file11,
+          L: 189,
+          S: this,
+          C: (f, a) => f(...a)
+        });
+      }
+      this._params.monitor?.recordMessageSendingFailed(message);
+    });
   }
-  /**
-  * Starts to iterate over the ordered messages from the added feeds.
-  * Updates the timeframe clock after the message has bee processed.
-  */
-  async *consume() {
-    (0, import_invariant7.invariant)(!this._isBeingConsumed, "Pipeline is already being consumed.", {
-      F: __dxlog_file9,
-      L: 366,
+  // TODO(dmaretskyi): Remove.
+  getPeersInterestedInCollection(collectionId) {
+    return Array.from(this._connections.values()).map((connection) => {
+      return connection.connection.shouldSyncCollection({
+        collectionId
+      }) ? connection.connection.peerId : null;
+    }).filter(import_util7.nonNullable);
+  }
+  _onConnectionOpen(connection) {
+    (0, import_log12.log)("Connection opened", {
+      peerId: connection.peerId
+    }, {
+      F: __dxlog_file11,
+      L: 207,
       S: this,
-      A: [
-        "!this._isBeingConsumed",
-        "'Pipeline is already being consumed.'"
-      ]
+      C: (f, a) => f(...a)
     });
-    this._isBeingConsumed = true;
-    (0, import_invariant7.invariant)(this._feedSetIterator, "Iterator not initialized.", {
-      F: __dxlog_file9,
-      L: 369,
+    (0, import_invariant9.invariant)(!this._connections.has(connection.peerId), void 0, {
+      F: __dxlog_file11,
+      L: 208,
       S: this,
       A: [
-        "this._feedSetIterator",
-        "'Iterator not initialized.'"
+        "!this._connections.has(connection.peerId as PeerId)",
+        ""
       ]
     });
-    let lastFeedSetIterator = this._feedSetIterator;
-    let iterable = lastFeedSetIterator[Symbol.asyncIterator]();
-    while (!this._isStopping) {
-      await this._pauseTrigger.wait();
-      if (lastFeedSetIterator !== this._feedSetIterator) {
-        (0, import_invariant7.invariant)(this._feedSetIterator, "Iterator not initialized.", {
-          F: __dxlog_file9,
-          L: 378,
-          S: this,
-          A: [
-            "this._feedSetIterator",
-            "'Iterator not initialized.'"
-          ]
-        });
-        lastFeedSetIterator = this._feedSetIterator;
-        iterable = lastFeedSetIterator[Symbol.asyncIterator]();
-      }
-      const { done, value } = await iterable.next();
-      if (!done) {
-        const block = value ?? (0, import_debug2.failUndefined)();
-        this._processingTrigger.reset();
-        this._timeframeClock.updatePendingTimeframe(import_keys4.PublicKey.from(block.feedKey), block.seq);
-        yield block;
-        this._processingTrigger.wake();
-        this._timeframeClock.updateTimeframe();
+    const reader = connection.readable.getReader();
+    const writer = connection.writable.getWriter();
+    const connectionEntry = {
+      connection,
+      reader,
+      writer,
+      isOpen: true
+    };
+    this._connections.set(connection.peerId, connectionEntry);
+    queueMicrotask(async () => {
+      try {
+        while (true) {
+          const { done, value } = await reader.read();
+          if (done) {
+            break;
+          }
+          this._onMessage(value);
+        }
+      } catch (err) {
+        if (connectionEntry.isOpen) {
+          import_log12.log.catch(err, void 0, {
+            F: __dxlog_file11,
+            L: 227,
+            S: this,
+            C: (f, a) => f(...a)
+          });
+        }
       }
-    }
-    this._isBeingConsumed = false;
-  }
-  _setFeedDownloadState(feed) {
-    let handle = this._downloads.get(feed);
-    if (handle) {
-      feed.undownload(handle);
-    }
-    const timeframe = this._state._startTimeframe;
-    const seq = timeframe.get(feed.key) ?? -1;
-    (0, import_log6.log)("download", {
-      feed: feed.key.truncate(),
-      seq,
-      length: feed.length
+    });
+    (0, import_log12.log)("emit peer-candidate", {
+      peerId: connection.peerId
     }, {
-      F: __dxlog_file9,
-      L: 407,
+      F: __dxlog_file11,
+      L: 232,
       S: this,
       C: (f, a) => f(...a)
     });
-    handle = feed.download({
-      start: seq + 1,
-      linear: true
-    }, (err, data) => {
-      if (err) {
-      } else {
-        import_log6.log.info("downloaded", {
-          data
-        }, {
-          F: __dxlog_file9,
-          L: 412,
-          S: this,
-          C: (f, a) => f(...a)
-        });
-      }
-    });
-    this._downloads.set(feed, handle);
+    this._emitPeerCandidate(connection);
+    this._params.monitor?.recordPeerConnected(connection.peerId);
   }
-  async _initIterator() {
-    this._feedSetIterator = new import_feed_store.FeedSetIterator(createMessageSelector(this._timeframeClock), {
-      start: startAfter(this._timeframeClock.timeframe),
-      stallTimeout: 1e3
-    });
-    this._feedSetIterator.stalled.on((iterator) => {
-      import_log6.log.warn(`Stalled after ${iterator.options.stallTimeout}ms with ${iterator.size} feeds.`, void 0, {
-        F: __dxlog_file9,
-        L: 426,
-        S: this,
-        C: (f, a) => f(...a)
-      });
-      this._state.stalled.emit();
-    });
-    for (const feed of this._feeds.values()) {
-      await this._feedSetIterator.addFeed(feed);
+  _onMessage(message) {
+    if (isCollectionQueryMessage(message)) {
+      this._params.onCollectionStateQueried(message.collectionId, message.senderId);
+    } else if (isCollectionStateMessage(message)) {
+      this._params.onCollectionStateReceived(message.collectionId, message.senderId, message.state);
+    } else {
+      this.emit("message", message);
     }
+    this._params.monitor?.recordMessageReceived(message);
   }
-};
-_ts_decorate4([
-  import_async7.synchronized
-], Pipeline.prototype, "start", null);
-_ts_decorate4([
-  import_async7.synchronized
-], Pipeline.prototype, "stop", null);
-_ts_decorate4([
-  import_async7.synchronized
-], Pipeline.prototype, "setCursor", null);
-_ts_decorate4([
-  import_async7.synchronized
-], Pipeline.prototype, "pause", null);
-_ts_decorate4([
-  import_async7.synchronized
-], Pipeline.prototype, "unpause", null);
-function _ts_decorate5(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
-    r = Reflect.decorate(decorators, target, key, desc);
-  else
-    for (var i = decorators.length - 1; i >= 0; i--)
-      if (d = decorators[i])
-        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-var __dxlog_file10 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/control-pipeline.ts";
-var TIMEFRAME_SAVE_DEBOUNCE_INTERVAL = 500;
-var CONTROL_PIPELINE_SNAPSHOT_DELAY = 1e4;
-var USE_SNAPSHOTS = true;
-var ControlPipeline = class {
-  constructor({ spaceKey, genesisFeed, feedProvider, metadataStore }) {
-    this._ctx = new import_context10.Context(void 0, {
-      F: __dxlog_file10,
-      L: 47
-    });
-    this._lastTimeframeSaveTime = Date.now();
-    this.onFeedAdmitted = new import_util5.Callback();
-    this._usage = new import_tracing3.TimeUsageCounter();
-    this._mutations = new import_tracing3.TimeSeriesCounter();
-    this._snapshotTask = new import_async9.DeferredTask(this._ctx, async () => {
-      await (0, import_async9.sleepWithContext)(this._ctx, CONTROL_PIPELINE_SNAPSHOT_DELAY);
-      await this._saveSnapshot();
+  /**
+  * Trigger doc-synchronizer shared documents set recalculation. Happens on peer-candidate.
+  * TODO(y): replace with a proper API call when sharePolicy update becomes supported by automerge-repo
+  */
+  _onConnectionAuthScopeChanged(connection) {
+    (0, import_log12.log)("Connection auth scope changed", {
+      peerId: connection.peerId
+    }, {
+      F: __dxlog_file11,
+      L: 253,
+      S: this,
+      C: (f, a) => f(...a)
     });
-    this._spaceKey = spaceKey;
-    this._metadata = metadataStore;
-    this._pipeline = new Pipeline();
-    void this._pipeline.addFeed(genesisFeed);
-    this._spaceStateMachine = new import_credentials2.SpaceStateMachine(spaceKey);
-    this._spaceStateMachine.onFeedAdmitted.set(async (info) => {
-      (0, import_log9.log)("feed admitted", {
-        key: info.key
-      }, {
-        F: __dxlog_file10,
-        L: 82,
-        S: this,
-        C: (f, a) => f(...a)
-      });
-      if (info.assertion.designation === import_credentials3.AdmittedFeed.Designation.CONTROL && !info.key.equals(genesisFeed.key)) {
-        queueMicrotask(async () => {
-          try {
-            const feed = await feedProvider(info.key);
-            if (!this._pipeline.hasFeed(feed.key)) {
-              await this._pipeline.addFeed(feed);
-            }
-          } catch (err) {
-            import_log9.log.catch(err, void 0, {
-              F: __dxlog_file10,
-              L: 93,
-              S: this,
-              C: (f, a) => f(...a)
-            });
-          }
-        });
-      }
-      await this.onFeedAdmitted.callIfSet(info);
+    const entry = this._connections.get(connection.peerId);
+    (0, import_invariant9.invariant)(entry, void 0, {
+      F: __dxlog_file11,
+      L: 255,
+      S: this,
+      A: [
+        "entry",
+        ""
+      ]
     });
-    this.onMemberRoleChanged = this._spaceStateMachine.onMemberRoleChanged;
-    this.onCredentialProcessed = this._spaceStateMachine.onCredentialProcessed;
-    this.onDelegatedInvitation = this._spaceStateMachine.onDelegatedInvitation;
-    this.onDelegatedInvitationRemoved = this._spaceStateMachine.onDelegatedInvitationRemoved;
-  }
-  get spaceState() {
-    return this._spaceStateMachine;
-  }
-  get pipeline() {
-    return this._pipeline;
-  }
-  async setWriteFeed(feed) {
-    await this._pipeline.addFeed(feed);
-    this._pipeline.setWriteFeed(feed);
-  }
-  async start() {
-    const snapshot = this._metadata.getSpaceControlPipelineSnapshot(this._spaceKey);
-    (0, import_log9.log)("load snapshot", {
-      key: this._spaceKey,
-      present: !!snapshot,
-      tf: snapshot?.timeframe
+    this.emit("peer-disconnected", {
+      peerId: connection.peerId
+    });
+    this._emitPeerCandidate(connection);
+  }
+  _onConnectionClosed(connection) {
+    (0, import_log12.log)("Connection closed", {
+      peerId: connection.peerId
     }, {
-      F: __dxlog_file10,
-      L: 123,
+      F: __dxlog_file11,
+      L: 261,
       S: this,
       C: (f, a) => f(...a)
     });
-    if (USE_SNAPSHOTS && snapshot) {
-      await this._processSnapshot(snapshot);
-    }
-    (0, import_log9.log)("starting...", void 0, {
-      F: __dxlog_file10,
-      L: 128,
+    const entry = this._connections.get(connection.peerId);
+    (0, import_invariant9.invariant)(entry, void 0, {
+      F: __dxlog_file11,
+      L: 263,
       S: this,
-      C: (f, a) => f(...a)
+      A: [
+        "entry",
+        ""
+      ]
     });
-    setTimeout(async () => {
-      void this._consumePipeline(new import_context10.Context(void 0, {
-        F: __dxlog_file10,
-        L: 130
-      }));
+    entry.isOpen = false;
+    this.emit("peer-disconnected", {
+      peerId: connection.peerId
     });
-    await this._pipeline.start();
-    (0, import_log9.log)("started", void 0, {
-      F: __dxlog_file10,
-      L: 134,
+    this._params.monitor?.recordPeerDisconnected(connection.peerId);
+    void entry.reader.cancel().catch((err) => import_log12.log.catch(err, void 0, {
+      F: __dxlog_file11,
+      L: 269,
       S: this,
       C: (f, a) => f(...a)
-    });
-  }
-  async _processSnapshot(snapshot) {
-    await this._pipeline.setCursor(snapshot.timeframe);
-    for (const message of snapshot.messages ?? []) {
-      const result = await this._spaceStateMachine.process(message.credential, {
-        sourceFeed: message.feedKey,
-        skipVerification: true
-      });
-      if (!result) {
-        import_log9.log.warn("credential processing failed from snapshot", {
-          message
-        }, {
-          F: __dxlog_file10,
-          L: 147,
-          S: this,
-          C: (f, a) => f(...a)
-        });
-      }
-    }
-  }
-  async _saveSnapshot() {
-    await this._pipeline.pause();
-    const snapshot = {
-      timeframe: this._pipeline.state.timeframe,
-      messages: this._spaceStateMachine.credentialEntries.map((entry) => ({
-        feedKey: entry.sourceFeed,
-        credential: entry.credential
-      }))
-    };
-    await this._pipeline.unpause();
-    (0, import_log9.log)("save snapshot", {
-      key: this._spaceKey,
-      snapshot
-    }, {
-      F: __dxlog_file10,
-      L: 163,
+    }));
+    void entry.writer.abort().catch((err) => import_log12.log.catch(err, void 0, {
+      F: __dxlog_file11,
+      L: 270,
       S: this,
       C: (f, a) => f(...a)
+    }));
+    this._connections.delete(connection.peerId);
+  }
+  _emitPeerCandidate(connection) {
+    this.emit("peer-candidate", {
+      peerId: connection.peerId,
+      peerMetadata: createEchoPeerMetadata()
     });
-    await this._metadata.setSpaceControlPipelineSnapshot(this._spaceKey, snapshot);
   }
-  async _consumePipeline(ctx) {
-    for await (const msg of this._pipeline.consume()) {
-      const span = this._usage.beginRecording();
-      this._mutations.inc();
-      try {
-        await this._processMessage(ctx, msg);
-      } catch (err) {
-        import_log9.log.catch(err, void 0, {
-          F: __dxlog_file10,
-          L: 176,
-          S: this,
-          C: (f, a) => f(...a)
-        });
-      }
-      span.end();
-    }
+};
+_ts_decorate6([
+  import_async11.synchronized
+], EchoNetworkAdapter.prototype, "open", null);
+_ts_decorate6([
+  import_async11.synchronized
+], EchoNetworkAdapter.prototype, "close", null);
+_ts_decorate6([
+  import_async11.synchronized
+], EchoNetworkAdapter.prototype, "addReplicator", null);
+_ts_decorate6([
+  import_async11.synchronized
+], EchoNetworkAdapter.prototype, "removeReplicator", null);
+var createEchoPeerMetadata = () => ({
+  // TODO(dmaretskyi): Refactor this.
+  dxos_peerSource: "EchoNetworkAdapter"
+});
+var isEchoPeerMetadata = (metadata) => metadata?.dxos_peerSource === "EchoNetworkAdapter";
+var HeadsStore = class {
+  constructor({ db }) {
+    this._db = db;
   }
-  async _processMessage(ctx, msg) {
-    (0, import_log9.log)("processing", {
-      key: msg.feedKey,
-      seq: msg.seq
-    }, {
-      F: __dxlog_file10,
-      L: 186,
-      S: this,
-      C: (f, a) => f(...a)
+  setHeads(documentId, heads, batch) {
+    batch.put(documentId, heads, {
+      sublevel: this._db,
+      keyEncoding: "utf8",
+      valueEncoding: import_indexing.headsEncoding
     });
-    if (msg.data.payload.credential) {
-      const timer = import_util5.tracer.mark("dxos.echo.pipeline.control");
-      const result = await this._spaceStateMachine.process(msg.data.payload.credential.credential, {
-        sourceFeed: import_keys6.PublicKey.from(msg.feedKey)
+  }
+  // TODO(dmaretskyi): Make batched.
+  async getHeads(documentIds) {
+    return this._db.getMany(documentIds, {
+      keyEncoding: "utf8",
+      valueEncoding: import_indexing.headsEncoding
+    });
+  }
+};
+var LevelDBStorageAdapter = class extends import_context11.Resource {
+  constructor(_params) {
+    super();
+    this._params = _params;
+  }
+  async load(keyArray) {
+    try {
+      if (this._lifecycleState !== import_context11.LifecycleState.OPEN) {
+        return void 0;
+      }
+      const startMs = Date.now();
+      const chunk = await this._params.db.get(keyArray, {
+        ...encodingOptions
       });
-      timer.end();
-      if (!result) {
-        import_log9.log.warn("processing failed", {
-          msg
-        }, {
-          F: __dxlog_file10,
-          L: 195,
-          S: this,
-          C: (f, a) => f(...a)
-        });
-      } else {
-        await this._noteTargetStateIfNeeded(this._pipeline.state.pendingTimeframe);
+      this._params.monitor?.recordBytesLoaded(chunk.byteLength);
+      this._params.monitor?.recordLoadDuration(Date.now() - startMs);
+      return chunk;
+    } catch (err) {
+      if (isLevelDbNotFoundError(err)) {
+        return void 0;
       }
-      this._snapshotTask.schedule();
+      throw err;
     }
   }
-  async _noteTargetStateIfNeeded(timeframe) {
-    if (Date.now() - this._lastTimeframeSaveTime > TIMEFRAME_SAVE_DEBOUNCE_INTERVAL) {
-      this._lastTimeframeSaveTime = Date.now();
-      await this._saveTargetTimeframe(timeframe);
+  async save(keyArray, binary) {
+    if (this._lifecycleState !== import_context11.LifecycleState.OPEN) {
+      return void 0;
     }
-  }
-  async stop() {
-    (0, import_log9.log)("stopping...", void 0, {
-      F: __dxlog_file10,
-      L: 215,
-      S: this,
-      C: (f, a) => f(...a)
+    const startMs = Date.now();
+    const batch = this._params.db.batch();
+    await this._params.callbacks?.beforeSave?.({
+      path: keyArray,
+      batch
     });
-    await this._ctx.dispose();
-    await this._pipeline.stop();
-    await this._saveTargetTimeframe(this._pipeline.state.timeframe);
-    (0, import_log9.log)("stopped", void 0, {
-      F: __dxlog_file10,
-      L: 219,
-      S: this,
-      C: (f, a) => f(...a)
+    batch.put(keyArray, Buffer.from(binary), {
+      ...encodingOptions
     });
+    await batch.write();
+    this._params.monitor?.recordBytesStored(binary.byteLength);
+    await this._params.callbacks?.afterSave?.(keyArray);
+    this._params.monitor?.recordStoreDuration(Date.now() - startMs);
   }
-  async _saveTargetTimeframe(timeframe) {
-    try {
-      const newTimeframe = import_timeframe3.Timeframe.merge(this._targetTimeframe ?? new import_timeframe3.Timeframe(), timeframe);
-      await this._metadata.setSpaceControlLatestTimeframe(this._spaceKey, newTimeframe);
-      this._targetTimeframe = newTimeframe;
-    } catch (err) {
-      (0, import_log9.log)(err, void 0, {
-        F: __dxlog_file10,
-        L: 228,
-        S: this,
-        C: (f, a) => f(...a)
+  async remove(keyArray) {
+    if (this._lifecycleState !== import_context11.LifecycleState.OPEN) {
+      return void 0;
+    }
+    await this._params.db.del(keyArray, {
+      ...encodingOptions
+    });
+  }
+  async loadRange(keyPrefix) {
+    if (this._lifecycleState !== import_context11.LifecycleState.OPEN) {
+      return [];
+    }
+    const startMs = Date.now();
+    const result = [];
+    for await (const [key, value] of this._params.db.iterator({
+      gte: keyPrefix,
+      lte: [
+        ...keyPrefix,
+        "\uFFFF"
+      ],
+      ...encodingOptions
+    })) {
+      result.push({
+        key,
+        data: value
+      });
+      this._params.monitor?.recordBytesLoaded(value.byteLength);
+    }
+    this._params.monitor?.recordLoadDuration(Date.now() - startMs);
+    return result;
+  }
+  async removeRange(keyPrefix) {
+    if (this._lifecycleState !== import_context11.LifecycleState.OPEN) {
+      return void 0;
+    }
+    const batch = this._params.db.batch();
+    for await (const [key] of this._params.db.iterator({
+      gte: keyPrefix,
+      lte: [
+        ...keyPrefix,
+        "\uFFFF"
+      ],
+      ...encodingOptions
+    })) {
+      batch.del(key, {
+        ...encodingOptions
       });
     }
+    await batch.write();
   }
 };
-_ts_decorate5([
-  import_tracing3.trace.metricsCounter()
-], ControlPipeline.prototype, "_usage", void 0);
-_ts_decorate5([
-  import_tracing3.trace.metricsCounter()
-], ControlPipeline.prototype, "_mutations", void 0);
-_ts_decorate5([
-  import_tracing3.trace.span({
-    showInBrowserTimeline: true
-  })
-], ControlPipeline.prototype, "start", null);
-_ts_decorate5([
-  import_tracing3.trace.span()
-], ControlPipeline.prototype, "_consumePipeline", null);
-_ts_decorate5([
-  import_tracing3.trace.span()
-], ControlPipeline.prototype, "_processMessage", null);
-ControlPipeline = _ts_decorate5([
-  import_tracing3.trace.resource(),
-  (0, import_async9.trackLeaks)("start", "stop")
-], ControlPipeline);
-function _ts_decorate6(decorators, target, key, desc) {
+var keyEncoder = {
+  encode: (key) => Buffer.from(key.map((k) => k.replaceAll("%", "%25").replaceAll("-", "%2D")).join("-")),
+  decode: (key) => Buffer.from(key).toString().split("-").map((k) => k.replaceAll("%2D", "-").replaceAll("%25", "%")),
+  format: "buffer"
+};
+var encodingOptions = {
+  keyEncoding: keyEncoder,
+  valueEncoding: "buffer"
+};
+var isLevelDbNotFoundError = (err) => err.code === "LEVEL_NOT_FOUND";
+function _ts_decorate7(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2410,495 +2458,455 @@ function _ts_decorate6(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file11 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/space.ts";
-var Space = class extends import_context9.Resource {
-  constructor(params) {
+var __dxlog_file12 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/automerge-host.ts";
+var AutomergeHost = class extends import_context9.Resource {
+  constructor({ db, indexMetadataStore, dataMonitor }) {
     super();
-    this.onCredentialProcessed = new import_util4.Callback();
-    this.stateUpdate = new import_async8.Event();
-    (0, import_invariant9.invariant)(params.spaceKey && params.feedProvider, void 0, {
-      F: __dxlog_file11,
-      L: 76,
-      S: this,
-      A: [
-        "params.spaceKey && params.feedProvider",
-        ""
-      ]
+    this._collectionSynchronizer = new CollectionSynchronizer({
+      queryCollectionState: this._queryCollectionState.bind(this),
+      sendCollectionState: this._sendCollectionState.bind(this),
+      shouldSyncCollection: this._shouldSyncCollection.bind(this)
     });
-    this._id = params.id;
-    this._key = params.spaceKey;
-    this._genesisFeedKey = params.genesisFeed.key;
-    this._feedProvider = params.feedProvider;
-    this._snapshotManager = params.snapshotManager;
-    this._controlPipeline = new ControlPipeline({
-      spaceKey: params.spaceKey,
-      genesisFeed: params.genesisFeed,
-      feedProvider: params.feedProvider,
-      metadataStore: params.metadataStore
+    this._db = db;
+    this._storage = new LevelDBStorageAdapter({
+      db: db.sublevel("automerge"),
+      callbacks: {
+        beforeSave: async (params) => this._beforeSave(params),
+        afterSave: async (key) => this._afterSave(key)
+      },
+      monitor: dataMonitor
     });
-    this._controlPipeline.onFeedAdmitted.set(async (info) => {
-      const sparse = info.assertion.designation === import_credentials.AdmittedFeed.Designation.DATA;
-      if (!info.key.equals(params.genesisFeed.key)) {
-        queueMicrotask(async () => {
-          this.protocol.addFeed(await params.feedProvider(info.key, {
-            sparse
-          }));
-        });
-      }
+    this._echoNetworkAdapter = new EchoNetworkAdapter({
+      getContainingSpaceForDocument: this._getContainingSpaceForDocument.bind(this),
+      isDocumentInRemoteCollection: this._isDocumentInRemoteCollection.bind(this),
+      onCollectionStateQueried: this._onCollectionStateQueried.bind(this),
+      onCollectionStateReceived: this._onCollectionStateReceived.bind(this),
+      monitor: dataMonitor
     });
-    this._controlPipeline.onCredentialProcessed.set(async (credential) => {
-      await this.onCredentialProcessed.callIfSet(credential);
-      (0, import_log8.log)("onCredentialProcessed", {
-        credential
-      }, {
-        F: __dxlog_file11,
-        L: 104,
-        S: this,
-        C: (f, a) => f(...a)
-      });
-      this.stateUpdate.emit();
+    this._headsStore = new HeadsStore({
+      db: db.sublevel("heads")
     });
-    this._controlPipeline.onDelegatedInvitation.set(async (invitation) => {
-      (0, import_log8.log)("onDelegatedInvitation", {
-        invitation
-      }, {
-        F: __dxlog_file11,
-        L: 108,
-        S: this,
-        C: (f, a) => f(...a)
-      });
-      await params.onDelegatedInvitationStatusChange(invitation, true);
+    this._indexMetadataStore = indexMetadataStore;
+  }
+  async _open() {
+    this._peerId = `host-${import_keys8.PublicKey.random().toHex()}`;
+    await this._storage.open?.();
+    this._repo = new import_automerge_repo.Repo({
+      peerId: this._peerId,
+      sharePolicy: this._sharePolicy.bind(this),
+      storage: this._storage,
+      network: [
+        // Upstream swarm.
+        this._echoNetworkAdapter
+      ]
     });
-    this._controlPipeline.onDelegatedInvitationRemoved.set(async (invitation) => {
-      (0, import_log8.log)("onDelegatedInvitationRemoved", {
-        invitation
+    import_async10.Event.wrap(this._echoNetworkAdapter, "peer-candidate").on(this._ctx, (e) => this._onPeerConnected(e.peerId));
+    import_async10.Event.wrap(this._echoNetworkAdapter, "peer-disconnected").on(this._ctx, (e) => this._onPeerDisconnected(e.peerId));
+    this._collectionSynchronizer.remoteStateUpdated.on(this._ctx, ({ collectionId, peerId }) => {
+      this._onRemoteCollectionStateUpdated(collectionId, peerId);
+    });
+    await this._echoNetworkAdapter.open();
+    await this._collectionSynchronizer.open();
+    await this._echoNetworkAdapter.open();
+    await this._echoNetworkAdapter.whenConnected();
+  }
+  async _close() {
+    await this._collectionSynchronizer.close();
+    await this._storage.close?.();
+    await this._echoNetworkAdapter.close();
+    await this._ctx.dispose();
+  }
+  /**
+  * @deprecated To be abstracted away.
+  */
+  get repo() {
+    return this._repo;
+  }
+  get peerId() {
+    return this._peerId;
+  }
+  get loadedDocsCount() {
+    return Object.keys(this._repo.handles).length;
+  }
+  async addReplicator(replicator) {
+    await this._echoNetworkAdapter.addReplicator(replicator);
+  }
+  async removeReplicator(replicator) {
+    await this._echoNetworkAdapter.removeReplicator(replicator);
+  }
+  /**
+  * Loads the document handle from the repo and waits for it to be ready.
+  */
+  async loadDoc(ctx, documentId, opts) {
+    let handle;
+    if (typeof documentId === "string") {
+      handle = this._repo.handles[documentId];
+    }
+    if (!handle) {
+      handle = this._repo.find(documentId);
+    }
+    if (!handle.isReady()) {
+      if (!opts?.timeout) {
+        await (0, import_context9.cancelWithContext)(ctx, handle.whenReady());
+      } else {
+        await (0, import_context9.cancelWithContext)(ctx, (0, import_async10.asyncTimeout)(handle.whenReady(), opts.timeout));
+      }
+    }
+    return handle;
+  }
+  /**
+  * Create new persisted document.
+  */
+  createDoc(initialValue, opts) {
+    if (opts?.preserveHistory) {
+      if (!(0, import_automerge3.isAutomerge)(initialValue)) {
+        throw new TypeError("Initial value must be an Automerge document");
+      }
+      return this._repo.import((0, import_automerge3.save)(initialValue));
+    } else {
+      return this._repo.create(initialValue);
+    }
+  }
+  async waitUntilHeadsReplicated(heads) {
+    const entries = heads.entries;
+    if (!entries?.length) {
+      return;
+    }
+    const documentIds = entries.map((entry) => entry.documentId);
+    const documentHeads = await this.getHeads(documentIds);
+    const headsToWait = entries.filter((entry, index) => {
+      const targetHeads = entry.heads;
+      if (!targetHeads || targetHeads.length === 0) {
+        return false;
+      }
+      const currentHeads = documentHeads[index];
+      return !(currentHeads !== null && (0, import_automerge3.equals)(currentHeads, targetHeads));
+    });
+    if (headsToWait.length > 0) {
+      await Promise.all(headsToWait.map(async (entry, index) => {
+        const handle = await this.loadDoc(import_context9.Context.default(void 0, {
+          F: __dxlog_file12,
+          L: 227
+        }), entry.documentId);
+        await waitForHeads(handle, entry.heads);
+      }));
+    }
+    await this._repo.flush(documentIds.filter((documentId) => !!this._repo.handles[documentId]));
+  }
+  async reIndexHeads(documentIds) {
+    for (const documentId of documentIds) {
+      import_log11.log.info("re-indexing heads for document", {
+        documentId
       }, {
-        F: __dxlog_file11,
-        L: 112,
+        F: __dxlog_file12,
+        L: 239,
         S: this,
         C: (f, a) => f(...a)
       });
-      await params.onDelegatedInvitationStatusChange(invitation, false);
-    });
-    this._controlPipeline.onMemberRoleChanged.set(async (changedMembers) => {
-      (0, import_log8.log)("onMemberRoleChanged", () => ({
-        changedMembers: changedMembers.map((m) => [
-          m.key,
-          m.role
-        ])
-      }), {
-        F: __dxlog_file11,
-        L: 116,
+      const handle = this._repo.find(documentId);
+      await handle.whenReady([
+        "ready",
+        "requesting"
+      ]);
+      if (handle.inState([
+        "requesting"
+      ])) {
+        import_log11.log.warn("document is not available locally, skipping", {
+          documentId
+        }, {
+          F: __dxlog_file12,
+          L: 243,
+          S: this,
+          C: (f, a) => f(...a)
+        });
+        continue;
+      }
+      const doc = handle.docSync();
+      (0, import_invariant8.invariant)(doc, void 0, {
+        F: __dxlog_file12,
+        L: 248,
         S: this,
-        C: (f, a) => f(...a)
+        A: [
+          "doc",
+          ""
+        ]
       });
-      await params.onMemberRolesChanged(changedMembers);
+      const heads = (0, import_automerge3.getHeads)(doc);
+      const batch = this._db.batch();
+      this._headsStore.setHeads(documentId, heads, batch);
+      await batch.write();
+    }
+    import_log11.log.info("done re-indexing heads", void 0, {
+      F: __dxlog_file12,
+      L: 255,
+      S: this,
+      C: (f, a) => f(...a)
     });
-    this.protocol = params.protocol;
-    this.protocol.addFeed(params.genesisFeed);
-  }
-  get id() {
-    return this._id;
-  }
-  get key() {
-    return this._key;
-  }
-  get isOpen() {
-    return this._lifecycleState === import_context9.LifecycleState.OPEN;
-  }
-  get genesisFeedKey() {
-    return this._genesisFeedKey;
   }
-  get controlFeedKey() {
-    return this._controlFeed?.key;
+  // TODO(dmaretskyi): Share based on HALO permissions and space affinity.
+  // Hosts, running in the worker, don't share documents unless requested by other peers.
+  // NOTE: If both peers return sharePolicy=false the replication will not happen
+  // https://github.com/automerge/automerge-repo/pull/292
+  async _sharePolicy(peerId, documentId) {
+    if (peerId.startsWith("client-")) {
+      return false;
+    }
+    if (!documentId) {
+      return false;
+    }
+    const peerMetadata = this.repo.peerMetadataByPeerId[peerId];
+    if (isEchoPeerMetadata(peerMetadata)) {
+      return this._echoNetworkAdapter.shouldAdvertise(peerId, {
+        documentId
+      });
+    }
+    return false;
   }
-  get dataFeedKey() {
-    return this._dataFeed?.key;
+  async _beforeSave({ path, batch }) {
+    const handle = this._repo.handles[path[0]];
+    if (!handle) {
+      return;
+    }
+    const doc = handle.docSync();
+    if (!doc) {
+      return;
+    }
+    const heads = (0, import_automerge3.getHeads)(doc);
+    this._headsStore.setHeads(handle.documentId, heads, batch);
+    const spaceKey = getSpaceKeyFromDoc(doc) ?? void 0;
+    const objectIds = Object.keys(doc.objects ?? {});
+    const encodedIds = objectIds.map((objectId) => import_protocols7.objectPointerCodec.encode({
+      documentId: handle.documentId,
+      objectId,
+      spaceKey
+    }));
+    const idToLastHash = new Map(encodedIds.map((id) => [
+      id,
+      heads
+    ]));
+    this._indexMetadataStore.markDirty(idToLastHash, batch);
   }
-  get spaceState() {
-    return this._controlPipeline.spaceState;
+  _shouldSyncCollection(collectionId, peerId) {
+    const peerMetadata = this._repo.peerMetadataByPeerId[peerId];
+    if (isEchoPeerMetadata(peerMetadata)) {
+      return this._echoNetworkAdapter.shouldSyncCollection(peerId, {
+        collectionId
+      });
+    }
+    return false;
   }
   /**
-  * @test-only
+  * Called by AutomergeStorageAdapter after levelDB batch commit.
   */
-  get controlPipeline() {
-    return this._controlPipeline.pipeline;
+  async _afterSave(path) {
+    this._indexMetadataStore.notifyMarkedDirty();
+    const documentId = path[0];
+    const document = this._repo.handles[documentId]?.docSync();
+    if (document) {
+      const heads = (0, import_automerge3.getHeads)(document);
+      this._onHeadsChanged(documentId, heads);
+    }
   }
-  get snapshotManager() {
-    return this._snapshotManager;
+  _automergePeers() {
+    return this._repo.peers;
   }
-  async setControlFeed(feed) {
-    (0, import_invariant9.invariant)(!this._controlFeed, "Control feed already set.", {
-      F: __dxlog_file11,
-      L: 169,
-      S: this,
-      A: [
-        "!this._controlFeed",
-        "'Control feed already set.'"
-      ]
-    });
-    this._controlFeed = feed;
-    await this._controlPipeline.setWriteFeed(feed);
-    return this;
+  async _isDocumentInRemoteCollection(params) {
+    for (const collectionId of this._collectionSynchronizer.getRegisteredCollectionIds()) {
+      const remoteCollections = this._collectionSynchronizer.getRemoteCollectionStates(collectionId);
+      const remotePeerDocs = remoteCollections.get(params.peerId)?.documents;
+      if (remotePeerDocs && params.documentId in remotePeerDocs) {
+        return true;
+      }
+    }
+    return false;
   }
-  async setDataFeed(feed) {
-    (0, import_invariant9.invariant)(!this._dataFeed, "Data feed already set.", {
-      F: __dxlog_file11,
-      L: 176,
-      S: this,
-      A: [
-        "!this._dataFeed",
-        "'Data feed already set.'"
-      ]
-    });
-    this._dataFeed = feed;
-    return this;
+  async _getContainingSpaceForDocument(documentId) {
+    const doc = this._repo.handles[documentId]?.docSync();
+    if (!doc) {
+      return null;
+    }
+    const spaceKeyHex = getSpaceKeyFromDoc(doc);
+    if (!spaceKeyHex) {
+      return null;
+    }
+    return import_keys8.PublicKey.from(spaceKeyHex);
   }
   /**
-  * Use for diagnostics.
+  * Flush documents to disk.
   */
-  getControlFeeds() {
-    return Array.from(this._controlPipeline.spaceState.feeds.values());
-  }
-  async _open(ctx) {
-    (0, import_log8.log)("opening...", void 0, {
-      F: __dxlog_file11,
-      L: 190,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    await this._controlPipeline.start();
-    await this.protocol.start();
-    (0, import_log8.log)("opened", void 0, {
-      F: __dxlog_file11,
-      L: 196,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-  }
-  async _close() {
-    (0, import_log8.log)("closing...", {
-      key: this._key
-    }, {
-      F: __dxlog_file11,
-      L: 201,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    await this.protocol.stop();
-    await this._controlPipeline.stop();
-    (0, import_log8.log)("closed", void 0, {
-      F: __dxlog_file11,
-      L: 207,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-  }
-};
-_ts_decorate6([
-  import_tracing2.trace.info()
-], Space.prototype, "protocol", void 0);
-_ts_decorate6([
-  import_tracing2.trace.info()
-], Space.prototype, "_controlPipeline", void 0);
-_ts_decorate6([
-  import_log8.logInfo,
-  import_tracing2.trace.info()
-], Space.prototype, "id", null);
-_ts_decorate6([
-  import_log8.logInfo,
-  import_tracing2.trace.info()
-], Space.prototype, "key", null);
-_ts_decorate6([
-  import_tracing2.trace.span()
-], Space.prototype, "_open", null);
-_ts_decorate6([
-  import_async8.synchronized
-], Space.prototype, "_close", null);
-Space = _ts_decorate6([
-  (0, import_async8.trackLeaks)("open", "close"),
-  import_tracing2.trace.resource()
-], Space);
-var SPACE_IDS_CACHE = new import_util4.ComplexMap(import_keys5.PublicKey.hash);
-var createIdFromSpaceKey = async (spaceKey) => {
-  const cachedValue = SPACE_IDS_CACHE.get(spaceKey);
-  if (cachedValue !== void 0) {
-    return cachedValue;
+  async flush({ documentIds } = {}) {
+    await this._repo.flush(documentIds);
   }
-  const digest = await import_crypto3.subtleCrypto.digest("SHA-256", spaceKey.asUint8Array());
-  const bytes = new Uint8Array(digest).slice(0, import_keys5.SpaceId.byteLength);
-  const spaceId = import_keys5.SpaceId.encode(bytes);
-  SPACE_IDS_CACHE.set(spaceKey, spaceId);
-  return spaceId;
-};
-var __dxlog_file12 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/admission-discovery-extension.ts";
-var CredentialRetrieverExtension = class extends import_teleport2.RpcExtension {
-  constructor(_request, _onResult) {
-    super({
-      requested: {
-        AdmissionDiscoveryService: import_protocols6.schema.getService("dxos.mesh.teleport.AdmissionDiscoveryService")
+  async getHeads(documentIds) {
+    const result = [];
+    const storeRequestIds = [];
+    const storeResultIndices = [];
+    for (const documentId of documentIds) {
+      const doc = this._repo.handles[documentId]?.docSync();
+      if (doc) {
+        result.push((0, import_automerge3.getHeads)(doc));
+      } else {
+        storeRequestIds.push(documentId);
+        storeResultIndices.push(result.length);
+        result.push(void 0);
       }
-    });
-    this._request = _request;
-    this._onResult = _onResult;
-    this._ctx = new import_context11.Context(void 0, {
-      F: __dxlog_file12,
-      L: 25
-    });
-  }
-  async getHandlers() {
-    return {};
-  }
-  async onOpen(context) {
-    await super.onOpen(context);
-    (0, import_async10.scheduleTask)(this._ctx, async () => {
-      try {
-        const result = await this.rpc.AdmissionDiscoveryService.getAdmissionCredential(this._request);
-        this._onResult.wake(result.admissionCredential);
-      } catch (err) {
-        context.close(err);
+    }
+    if (storeRequestIds.length > 0) {
+      const storedHeads = await this._headsStore.getHeads(storeRequestIds);
+      for (let i = 0; i < storedHeads.length; i++) {
+        result[storeResultIndices[i]] = storedHeads[i];
       }
-    });
+    }
+    return result;
   }
-  async onClose() {
-    await this._ctx.dispose();
+  //
+  // Collection sync.
+  //
+  getLocalCollectionState(collectionId) {
+    return this._collectionSynchronizer.getLocalCollectionState(collectionId);
   }
-  async onAbort() {
-    await this._ctx.dispose();
+  getRemoteCollectionStates(collectionId) {
+    return this._collectionSynchronizer.getRemoteCollectionStates(collectionId);
   }
-};
-var CredentialServerExtension = class extends import_teleport2.RpcExtension {
-  constructor(_space) {
-    super({
-      exposed: {
-        AdmissionDiscoveryService: import_protocols6.schema.getService("dxos.mesh.teleport.AdmissionDiscoveryService")
-      }
-    });
-    this._space = _space;
+  refreshCollection(collectionId) {
+    this._collectionSynchronizer.refreshCollection(collectionId);
   }
-  async getHandlers() {
-    return {
-      AdmissionDiscoveryService: {
-        getAdmissionCredential: async (request) => {
-          const memberInfo = this._space.spaceState.members.get(request.memberKey);
-          if (!memberInfo?.credential) {
-            throw new import_protocols6.ProtocolError("Space member not found.", request);
-          }
-          return {
-            admissionCredential: memberInfo.credential
-          };
-        }
-      }
+  async getCollectionSyncState(collectionId) {
+    const result = {
+      peers: []
     };
-  }
-};
-function _ts_decorate7(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
-    r = Reflect.decorate(decorators, target, key, desc);
-  else
-    for (var i = decorators.length - 1; i >= 0; i--)
-      if (d = decorators[i])
-        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-var __dxlog_file13 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/space-protocol.ts";
-var MOCK_AUTH_PROVIDER = async (nonce) => Buffer.from("mock");
-var MOCK_AUTH_VERIFIER = async (nonce, credential) => true;
-var SpaceProtocol = class {
-  constructor({ topic, swarmIdentity, networkManager, onSessionAuth, onAuthFailure, blobStore }) {
-    this._feeds = /* @__PURE__ */ new Set();
-    this._sessions = new import_util6.ComplexMap(import_keys7.PublicKey.hash);
-    this._topology = new import_network_manager.MMSTTopology({
-      originateConnections: 4,
-      maxPeers: 10,
-      sampleSize: 20
-    });
-    this._spaceKey = topic;
-    this._networkManager = networkManager;
-    this._swarmIdentity = swarmIdentity;
-    this._onSessionAuth = onSessionAuth;
-    this._onAuthFailure = onAuthFailure;
-    this.blobSync = new import_teleport_extension_object_sync.BlobSync({
-      blobStore
+    const localState = this.getLocalCollectionState(collectionId);
+    const remoteState = this.getRemoteCollectionStates(collectionId);
+    if (!localState) {
+      return result;
+    }
+    for (const [peerId, state] of remoteState) {
+      const diff = diffCollectionState(localState, state);
+      result.peers.push({
+        peerId,
+        differentDocuments: diff.different.length
+      });
+    }
+    return result;
+  }
+  /**
+  * Update the local collection state based on the locally stored document heads.
+  */
+  async updateLocalCollectionState(collectionId, documentIds) {
+    const heads = await this.getHeads(documentIds);
+    const documents = Object.fromEntries(heads.map((heads2, index) => [
+      documentIds[index],
+      heads2 ?? []
+    ]));
+    this._collectionSynchronizer.setLocalCollectionState(collectionId, {
+      documents
     });
-    this._topic = import_crypto4.subtleCrypto.digest("SHA-256", topic.asBuffer()).then(import_crypto4.discoveryKey).then(import_keys7.PublicKey.from);
   }
-  get sessions() {
-    return this._sessions;
+  _onCollectionStateQueried(collectionId, peerId) {
+    this._collectionSynchronizer.onCollectionStateQueried(collectionId, peerId);
   }
-  get feeds() {
-    return this._feeds;
+  _onCollectionStateReceived(collectionId, peerId, state) {
+    this._collectionSynchronizer.onRemoteStateReceived(collectionId, peerId, decodeCollectionState(state));
   }
-  get _ownPeerKey() {
-    return this._swarmIdentity.peerKey;
+  _queryCollectionState(collectionId, peerId) {
+    this._echoNetworkAdapter.queryCollectionState(collectionId, peerId);
   }
-  // TODO(burdon): Create abstraction for Space (e.g., add keys and have provider).
-  addFeed(feed) {
-    (0, import_log10.log)("addFeed", {
-      key: feed.key
-    }, {
-      F: __dxlog_file13,
-      L: 109,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    this._feeds.add(feed);
-    for (const session of this._sessions.values()) {
-      session.replicator.addFeed(feed);
-    }
+  _sendCollectionState(collectionId, peerId, state) {
+    this._echoNetworkAdapter.sendCollectionState(collectionId, peerId, encodeCollectionState(state));
   }
-  // TODO(burdon): Rename open? Common open/close interfaces for all services?
-  async start() {
-    if (this._connection) {
+  _onPeerConnected(peerId) {
+    this._collectionSynchronizer.onConnectionOpen(peerId);
+  }
+  _onPeerDisconnected(peerId) {
+    this._collectionSynchronizer.onConnectionClosed(peerId);
+  }
+  _onRemoteCollectionStateUpdated(collectionId, peerId) {
+    const localState = this._collectionSynchronizer.getLocalCollectionState(collectionId);
+    const remoteState = this._collectionSynchronizer.getRemoteCollectionStates(collectionId).get(peerId);
+    if (!localState || !remoteState) {
       return;
     }
-    const credentials = await this._swarmIdentity.credentialProvider(Buffer.from(""));
-    await this.blobSync.open();
-    (0, import_log10.log)("starting...", void 0, {
-      F: __dxlog_file13,
-      L: 128,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    const topic = await this._topic;
-    this._connection = await this._networkManager.joinSwarm({
-      protocolProvider: this._createProtocolProvider(credentials),
-      peerId: this._swarmIdentity.peerKey,
-      topic,
-      topology: this._topology,
-      label: `swarm ${topic.truncate()} for space ${this._spaceKey.truncate()}`
-    });
-    (0, import_log10.log)("started", void 0, {
-      F: __dxlog_file13,
-      L: 138,
+    const { different } = diffCollectionState(localState, remoteState);
+    if (different.length === 0) {
+      return;
+    }
+    import_log11.log.info("replication documents after collection sync", {
+      count: different.length
+    }, {
+      F: __dxlog_file12,
+      L: 475,
       S: this,
       C: (f, a) => f(...a)
     });
-  }
-  updateTopology() {
-    this._topology.forceUpdate();
-  }
-  async stop() {
-    await this.blobSync.close();
-    if (this._connection) {
-      (0, import_log10.log)("stopping...", void 0, {
-        F: __dxlog_file13,
-        L: 149,
-        S: this,
-        C: (f, a) => f(...a)
-      });
-      await this._connection.close();
-      (0, import_log10.log)("stopped", void 0, {
-        F: __dxlog_file13,
-        L: 151,
-        S: this,
-        C: (f, a) => f(...a)
-      });
+    for (const documentId of different) {
+      this._repo.find(documentId);
     }
   }
-  _createProtocolProvider(credentials) {
-    return (wireParams) => {
-      const session = new SpaceProtocolSession({
-        wireParams,
-        swarmIdentity: this._swarmIdentity,
-        onSessionAuth: this._onSessionAuth,
-        onAuthFailure: this._onAuthFailure,
-        blobSync: this.blobSync
-      });
-      this._sessions.set(wireParams.remotePeerId, session);
-      for (const feed of this._feeds) {
-        session.replicator.addFeed(feed);
+  _onHeadsChanged(documentId, heads) {
+    for (const collectionId of this._collectionSynchronizer.getRegisteredCollectionIds()) {
+      const state = this._collectionSynchronizer.getLocalCollectionState(collectionId);
+      if (state?.documents[documentId]) {
+        const newState = structuredClone(state);
+        newState.documents[documentId] = heads;
+        this._collectionSynchronizer.setLocalCollectionState(collectionId, newState);
       }
-      return session;
-    };
+    }
   }
 };
 _ts_decorate7([
-  import_log10.logInfo,
   import_tracing4.trace.info()
-], SpaceProtocol.prototype, "_topic", void 0);
+], AutomergeHost.prototype, "_peerId", void 0);
 _ts_decorate7([
-  import_tracing4.trace.info()
-], SpaceProtocol.prototype, "_spaceKey", void 0);
+  import_tracing4.trace.info({
+    depth: null
+  })
+], AutomergeHost.prototype, "_automergePeers", null);
 _ts_decorate7([
-  import_log10.logInfo
-], SpaceProtocol.prototype, "_ownPeerKey", null);
-SpaceProtocol = _ts_decorate7([
+  import_tracing4.trace.span({
+    showInBrowserTimeline: true
+  })
+], AutomergeHost.prototype, "flush", null);
+AutomergeHost = _ts_decorate7([
   import_tracing4.trace.resource()
-], SpaceProtocol);
-var AuthStatus;
-(function(AuthStatus2) {
-  AuthStatus2["INITIAL"] = "INITIAL";
-  AuthStatus2["SUCCESS"] = "SUCCESS";
-  AuthStatus2["FAILURE"] = "FAILURE";
-})(AuthStatus || (AuthStatus = {}));
-var SpaceProtocolSession = class {
-  // TODO(dmaretskyi): Allow to pass in extra extensions.
-  constructor({ wireParams, swarmIdentity, onSessionAuth, onAuthFailure, blobSync }) {
-    this.replicator = new import_teleport_extension_replicator.ReplicatorExtension().setOptions({
-      upload: true
-    });
-    this._authStatus = "INITIAL";
-    this._wireParams = wireParams;
-    this._swarmIdentity = swarmIdentity;
-    this._onSessionAuth = onSessionAuth;
-    this._onAuthFailure = onAuthFailure;
-    this._blobSync = blobSync;
-    this._teleport = new import_teleport3.Teleport(wireParams);
-  }
-  get authStatus() {
-    return this._authStatus;
-  }
-  get stats() {
-    return this._teleport.stats;
-  }
-  get stream() {
-    return this._teleport.stream;
+], AutomergeHost);
+var getSpaceKeyFromDoc = (doc) => {
+  const rawSpaceKey = doc.access?.spaceKey ?? doc.experimental_spaceKey;
+  if (rawSpaceKey == null) {
+    return null;
   }
-  async open(sessionId) {
-    await this._teleport.open(sessionId);
-    this._teleport.addExtension("dxos.mesh.teleport.auth", new AuthExtension({
-      provider: this._swarmIdentity.credentialProvider,
-      verifier: this._swarmIdentity.credentialAuthenticator,
-      onAuthSuccess: () => {
-        (0, import_log10.log)("Peer authenticated", void 0, {
-          F: __dxlog_file13,
-          L: 248,
-          S: this,
-          C: (f, a) => f(...a)
-        });
-        this._authStatus = "SUCCESS";
-        this._onSessionAuth?.(this._teleport);
-      },
-      onAuthFailure: () => {
-        this._authStatus = "FAILURE";
-        this._onAuthFailure?.(this._teleport);
+  return String(rawSpaceKey);
+};
+var waitForHeads = async (handle, heads) => {
+  const unavailableHeads = new Set(heads);
+  await handle.whenReady();
+  await import_async10.Event.wrap(handle, "change").waitForCondition(() => {
+    for (const changeHash of unavailableHeads.values()) {
+      if (changeIsPresentInDoc(handle.docSync(), changeHash)) {
+        unavailableHeads.delete(changeHash);
       }
-    }));
-    this._teleport.addExtension("dxos.mesh.teleport.replicator", this.replicator);
-    this._teleport.addExtension("dxos.mesh.teleport.blobsync", this._blobSync.createExtension());
-  }
-  async close() {
-    (0, import_log10.log)("close", void 0, {
-      F: __dxlog_file13,
-      L: 264,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    await this._teleport.close();
-  }
-  async abort() {
-    await this._teleport.abort();
-  }
+    }
+    return unavailableHeads.size === 0;
+  });
 };
-_ts_decorate7([
-  import_log10.logInfo
-], SpaceProtocolSession.prototype, "_wireParams", void 0);
-_ts_decorate7([
-  import_log10.logInfo
-], SpaceProtocolSession.prototype, "authStatus", null);
-var __dxlog_file14 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/mesh-echo-replicator-connection.ts";
+var changeIsPresentInDoc = (doc, changeHash) => {
+  return !!(0, import_automerge3.getBackend)(doc).getChangeByHash(changeHash);
+};
+var decodeCollectionState = (state) => {
+  (0, import_invariant8.invariant)(typeof state === "object" && state !== null, "Invalid state", {
+    F: __dxlog_file12,
+    L: 528,
+    S: void 0,
+    A: [
+      "typeof state === 'object' && state !== null",
+      "'Invalid state'"
+    ]
+  });
+  return state;
+};
+var encodeCollectionState = (state) => {
+  return state;
+};
+var __dxlog_file13 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/mesh-echo-replicator-connection.ts";
 var DEFAULT_FACTORY = (params) => new import_teleport_extension_automerge_replicator.AutomergeReplicator(...params);
 var MeshReplicatorConnection = class extends import_context12.Resource {
   constructor(_params) {
@@ -2916,9 +2924,9 @@ var MeshReplicatorConnection = class extends import_context12.Resource {
     });
     this.writable = new WritableStream({
       write: async (message, controller) => {
-        (0, import_invariant12.invariant)(this._isEnabled, "Writing to a disabled connection", {
-          F: __dxlog_file14,
-          L: 48,
+        (0, import_invariant11.invariant)(this._isEnabled, "Writing to a disabled connection", {
+          F: __dxlog_file13,
+          L: 49,
           S: this,
           A: [
             "this._isEnabled",
@@ -2926,6 +2934,7 @@ var MeshReplicatorConnection = class extends import_context12.Resource {
           ]
         });
         try {
+          logSendSync(message);
           await this.replicatorExtension.sendSyncMessage({
             payload: import_automerge_repo3.cbor.encode(message)
           });
@@ -2949,8 +2958,8 @@ var MeshReplicatorConnection = class extends import_context12.Resource {
             thisPeerId: this.peerId,
             remotePeerId: remotePeerId.toHex()
           }, {
-            F: __dxlog_file14,
-            L: 82,
+            F: __dxlog_file13,
+            L: 84,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -2975,9 +2984,9 @@ var MeshReplicatorConnection = class extends import_context12.Resource {
     }
   }
   get peerId() {
-    (0, import_invariant12.invariant)(this._remotePeerId != null, "Remote peer has not connected yet.", {
-      F: __dxlog_file14,
-      L: 108,
+    (0, import_invariant11.invariant)(this._remotePeerId != null, "Remote peer has not connected yet.", {
+      F: __dxlog_file13,
+      L: 110,
       S: this,
       A: [
         "this._remotePeerId != null",
@@ -2997,9 +3006,9 @@ var MeshReplicatorConnection = class extends import_context12.Resource {
   * Call after the remote peer has connected.
   */
   enable() {
-    (0, import_invariant12.invariant)(this._remotePeerId != null, "Remote peer has not connected yet.", {
-      F: __dxlog_file14,
-      L: 125,
+    (0, import_invariant11.invariant)(this._remotePeerId != null, "Remote peer has not connected yet.", {
+      F: __dxlog_file13,
+      L: 127,
       S: this,
       A: [
         "this._remotePeerId != null",
@@ -3015,6 +3024,41 @@ var MeshReplicatorConnection = class extends import_context12.Resource {
     this._isEnabled = false;
   }
 };
+var logSendSync = (message) => {
+  (0, import_log14.log)("sendSyncMessage", () => {
+    const decodedSyncMessage = message.type === "sync" && message.data ? A2.decodeSyncMessage(message.data) : void 0;
+    return {
+      sync: decodedSyncMessage && {
+        headsLength: decodedSyncMessage.heads.length,
+        requesting: decodedSyncMessage.need.length > 0,
+        sendingChanges: decodedSyncMessage.changes.length > 0
+      },
+      type: message.type,
+      from: message.senderId,
+      to: message.targetId
+    };
+  }, {
+    F: __dxlog_file13,
+    L: 140,
+    S: void 0,
+    C: (f, a) => f(...a)
+  });
+};
+var __dxlog_file14 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/space-collection.ts";
+var deriveCollectionIdFromSpaceId = (spaceId) => `space:${spaceId}`;
+var getSpaceIdFromCollectionId = (collectionId) => {
+  const spaceId = collectionId.replace(/^space:/, "");
+  (0, import_invariant12.invariant)(import_keys10.SpaceId.isValid(spaceId), void 0, {
+    F: __dxlog_file14,
+    L: 12,
+    S: void 0,
+    A: [
+      "SpaceId.isValid(spaceId)",
+      ""
+    ]
+  });
+  return spaceId;
+};
 var __dxlog_file15 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/mesh-echo-replicator.ts";
 var MeshEchoReplicator = class {
   constructor() {
@@ -3038,7 +3082,7 @@ var MeshEchoReplicator = class {
     this._context = null;
   }
   createExtension(extensionFactory) {
-    (0, import_invariant11.invariant)(this._context, void 0, {
+    (0, import_invariant10.invariant)(this._context, void 0, {
       F: __dxlog_file15,
       L: 56,
       S: this,
@@ -3059,7 +3103,7 @@ var MeshEchoReplicator = class {
           S: this,
           C: (f, a) => f(...a)
         });
-        (0, import_invariant11.invariant)(this._context, void 0, {
+        (0, import_invariant10.invariant)(this._context, void 0, {
           F: __dxlog_file15,
           L: 63,
           S: this,
@@ -3100,7 +3144,7 @@ var MeshEchoReplicator = class {
           S: this,
           C: (f, a) => f(...a)
         });
-        (0, import_invariant11.invariant)(this._context, void 0, {
+        (0, import_invariant10.invariant)(this._context, void 0, {
           F: __dxlog_file15,
           L: 82,
           S: this,
@@ -3112,16 +3156,21 @@ var MeshEchoReplicator = class {
         try {
           const spaceKey = await this._context.getContainingSpaceForDocument(params.documentId);
           if (!spaceKey) {
-            (0, import_log13.log)("space key not found for share policy check", {
+            const remoteDocumentExists = await this._context.isDocumentInRemoteCollection({
+              documentId: params.documentId,
+              peerId: connection.peerId
+            });
+            (0, import_log13.log)("document not found locally for share policy check, accepting the remote document", {
               peerId: connection.peerId,
-              documentId: params.documentId
+              documentId: params.documentId,
+              remoteDocumentExists
             }, {
               F: __dxlog_file15,
-              L: 86,
+              L: 90,
               S: this,
               C: (f, a) => f(...a)
             });
-            return false;
+            return remoteDocumentExists;
           }
           const spaceId = await createIdFromSpaceKey(spaceKey);
           const authorizedDevices = this._authorizedDevices.get(spaceId);
@@ -3131,7 +3180,7 @@ var MeshEchoReplicator = class {
               documentId: params.documentId
             }, {
               F: __dxlog_file15,
-              L: 98,
+              L: 106,
               S: this,
               C: (f, a) => f(...a)
             });
@@ -3147,7 +3196,7 @@ var MeshEchoReplicator = class {
             isAuthorized
           }, {
             F: __dxlog_file15,
-            L: 106,
+            L: 114,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -3155,7 +3204,7 @@ var MeshEchoReplicator = class {
         } catch (err) {
           import_log13.log.catch(err, void 0, {
             F: __dxlog_file15,
-            L: 116,
+            L: 124,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -3171,7 +3220,7 @@ var MeshEchoReplicator = class {
             collectionId
           }, {
             F: __dxlog_file15,
-            L: 126,
+            L: 134,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -3190,12 +3239,12 @@ var MeshEchoReplicator = class {
       deviceKey
     }, {
       F: __dxlog_file15,
-      L: 143,
+      L: 151,
       S: this,
       C: (f, a) => f(...a)
     });
     const spaceId = await createIdFromSpaceKey(spaceKey);
-    (0, import_util8.defaultMap)(this._authorizedDevices, spaceId, () => new import_util8.ComplexSet(import_keys10.PublicKey.hash)).add(deviceKey);
+    (0, import_util8.defaultMap)(this._authorizedDevices, spaceId, () => new import_util8.ComplexSet(import_keys9.PublicKey.hash)).add(deviceKey);
     for (const connection of this._connections) {
       if (connection.remoteDeviceKey && connection.remoteDeviceKey.equals(deviceKey)) {
         if (this._connectionsPerPeer.has(connection.peerId)) {
@@ -3582,7 +3631,7 @@ var DataServiceImpl = class {
       synchronizer.open().then(() => {
         this._subscriptions.set(request.subscriptionId, synchronizer);
         ready();
-      }).catch((err) => import_log12.log.catch(err, void 0, {
+      }).catch((err) => import_log10.log.catch(err, void 0, {
         F: __dxlog_file16,
         L: 64,
         S: this,
@@ -3593,7 +3642,7 @@ var DataServiceImpl = class {
   }
   async updateSubscription(request) {
     const synchronizer = this._subscriptions.get(request.subscriptionId);
-    (0, import_invariant10.invariant)(synchronizer, "Subscription not found", {
+    (0, import_invariant7.invariant)(synchronizer, "Subscription not found", {
       F: __dxlog_file16,
       L: 71,
       S: this,
@@ -3614,7 +3663,7 @@ var DataServiceImpl = class {
       return;
     }
     const synchronizer = this._subscriptions.get(request.subscriptionId);
-    (0, import_invariant10.invariant)(synchronizer, "Subscription not found", {
+    (0, import_invariant7.invariant)(synchronizer, "Subscription not found", {
       F: __dxlog_file16,
       L: 86,
       S: this,
@@ -3657,7 +3706,7 @@ var DataServiceImpl = class {
     await this._updateIndexes();
   }
   async getSpaceSyncState(request, options) {
-    (0, import_invariant10.invariant)(import_keys9.SpaceId.isValid(request.spaceId), void 0, {
+    (0, import_invariant7.invariant)(import_keys7.SpaceId.isValid(request.spaceId), void 0, {
       F: __dxlog_file16,
       L: 127,
       S: this,
@@ -3688,14 +3737,15 @@ function _ts_decorate9(decorators, target, key, desc) {
 }
 var __dxlog_file17 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/space-manager.ts";
 var SpaceManager = class {
-  constructor({ feedStore, networkManager, metadataStore, snapshotStore, blobStore }) {
-    this._spaces = new import_util7.ComplexMap(import_keys8.PublicKey.hash);
-    this._instanceId = import_keys8.PublicKey.random().toHex();
+  constructor({ feedStore, networkManager, metadataStore, snapshotStore, blobStore, disableP2pReplication }) {
+    this._spaces = new import_util6.ComplexMap(import_keys6.PublicKey.hash);
+    this._instanceId = import_keys6.PublicKey.random().toHex();
     this._feedStore = feedStore;
     this._networkManager = networkManager;
     this._metadataStore = metadataStore;
     this._snapshotStore = snapshotStore;
     this._blobStore = blobStore;
+    this._disableP2pReplication = disableP2pReplication ?? false;
   }
   // TODO(burdon): Remove.
   get spaces() {
@@ -3709,19 +3759,19 @@ var SpaceManager = class {
     ].map((space) => space.close()));
   }
   async constructSpace({ metadata, swarmIdentity, onAuthorizedConnection, onAuthFailure, onDelegatedInvitationStatusChange, onMemberRolesChanged, memberKey }) {
-    import_log11.log.trace("dxos.echo.space-manager.construct-space", import_protocols7.trace.begin({
+    import_log9.log.trace("dxos.echo.space-manager.construct-space", import_protocols6.trace.begin({
       id: this._instanceId
     }), {
       F: __dxlog_file17,
-      L: 103,
+      L: 114,
       S: this,
       C: (f, a) => f(...a)
     });
-    (0, import_log11.log)("constructing space...", {
+    (0, import_log9.log)("constructing space...", {
       spaceKey: metadata.genesisFeedKey
     }, {
       F: __dxlog_file17,
-      L: 104,
+      L: 115,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3734,7 +3784,8 @@ var SpaceManager = class {
       networkManager: this._networkManager,
       onSessionAuth: onAuthorizedConnection,
       onAuthFailure,
-      blobStore: this._blobStore
+      blobStore: this._blobStore,
+      disableP2pReplication: this._disableP2pReplication
     });
     const snapshotManager = new SnapshotManager(this._snapshotStore, this._blobStore, protocol.blobSync);
     const space = new Space({
@@ -3750,11 +3801,11 @@ var SpaceManager = class {
       onMemberRolesChanged
     });
     this._spaces.set(space.key, space);
-    import_log11.log.trace("dxos.echo.space-manager.construct-space", import_protocols7.trace.end({
+    import_log9.log.trace("dxos.echo.space-manager.construct-space", import_protocols6.trace.end({
       id: this._instanceId
     }), {
       F: __dxlog_file17,
-      L: 135,
+      L: 147,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3762,23 +3813,23 @@ var SpaceManager = class {
   }
   async requestSpaceAdmissionCredential(params) {
     const traceKey = "dxos.echo.space-manager.request-space-admission";
-    import_log11.log.trace(traceKey, import_protocols7.trace.begin({
+    import_log9.log.trace(traceKey, import_protocols6.trace.begin({
       id: this._instanceId
     }), {
       F: __dxlog_file17,
-      L: 141,
+      L: 153,
       S: this,
       C: (f, a) => f(...a)
     });
-    (0, import_log11.log)("requesting space admission credential...", {
+    (0, import_log9.log)("requesting space admission credential...", {
       spaceKey: params.spaceKey
     }, {
       F: __dxlog_file17,
-      L: 142,
+      L: 154,
       S: this,
       C: (f, a) => f(...a)
     });
-    const onCredentialResolved = new import_async11.Trigger();
+    const onCredentialResolved = new import_async9.Trigger();
     const protocol = new SpaceProtocol({
       topic: params.spaceKey,
       swarmIdentity: params.swarmIdentity,
@@ -3790,29 +3841,30 @@ var SpaceManager = class {
         }, onCredentialResolved));
       },
       onAuthFailure: (session) => session.close(),
-      blobStore: this._blobStore
+      blobStore: this._blobStore,
+      disableP2pReplication: this._disableP2pReplication
     });
     try {
       await protocol.start();
       const credential = await onCredentialResolved.wait({
         timeout: params.timeout
       });
-      import_log11.log.trace(traceKey, import_protocols7.trace.end({
+      import_log9.log.trace(traceKey, import_protocols6.trace.end({
         id: this._instanceId
       }), {
         F: __dxlog_file17,
-        L: 165,
+        L: 178,
         S: this,
         C: (f, a) => f(...a)
       });
       return credential;
     } catch (err) {
-      import_log11.log.trace(traceKey, import_protocols7.trace.error({
+      import_log9.log.trace(traceKey, import_protocols6.trace.error({
         id: this._instanceId,
         error: err
       }), {
         F: __dxlog_file17,
-        L: 168,
+        L: 181,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -3823,13 +3875,13 @@ var SpaceManager = class {
   }
 };
 _ts_decorate9([
-  import_async11.synchronized
+  import_async9.synchronized
 ], SpaceManager.prototype, "open", null);
 _ts_decorate9([
-  import_async11.synchronized
+  import_async9.synchronized
 ], SpaceManager.prototype, "close", null);
 SpaceManager = _ts_decorate9([
-  (0, import_async11.trackLeaks)("open", "close")
+  (0, import_async9.trackLeaks)("open", "close")
 ], SpaceManager);
 function _ts_decorate10(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
@@ -3844,14 +3896,14 @@ function _ts_decorate10(decorators, target, key, desc) {
 var __dxlog_file18 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/metadata/metadata-store.ts";
 var EXPIRED_INVITATION_CLEANUP_INTERVAL = 60 * 60 * 1e3;
 var emptyEchoMetadata = () => ({
-  version: import_protocols8.STORAGE_VERSION,
+  version: import_protocols9.STORAGE_VERSION,
   spaces: [],
   created: /* @__PURE__ */ new Date(),
   updated: /* @__PURE__ */ new Date()
 });
 var emptyLargeSpaceMetadata = () => ({});
-var EchoMetadata = import_protocols8.schema.getCodecForType("dxos.echo.metadata.EchoMetadata");
-var LargeSpaceMetadata = import_protocols8.schema.getCodecForType("dxos.echo.metadata.LargeSpaceMetadata");
+var EchoMetadata = import_protocols9.schema.getCodecForType("dxos.echo.metadata.EchoMetadata");
+var LargeSpaceMetadata = import_protocols9.schema.getCodecForType("dxos.echo.metadata.LargeSpaceMetadata");
 var MetadataStore = class {
   constructor(directory) {
     this._metadata = emptyEchoMetadata();
@@ -3896,7 +3948,7 @@ var MetadataStore = class {
         C: (f, a) => f(...a)
       });
       if (fileLength < dataSize + 8) {
-        throw new import_protocols8.DataCorruptionError("Metadata size is smaller than expected.", {
+        throw new import_protocols9.DataCorruptionError("Metadata size is smaller than expected.", {
           fileLength,
           dataSize
         });
@@ -3904,7 +3956,7 @@ var MetadataStore = class {
       const data = await file.read(8, dataSize);
       const calculatedChecksum = import_crc_32.default.buf(data);
       if (calculatedChecksum !== checksum) {
-        throw new import_protocols8.DataCorruptionError("Metadata checksum is invalid.");
+        throw new import_protocols9.DataCorruptionError("Metadata checksum is invalid.");
       }
       return codec2.decode(data);
     } finally {
@@ -3994,7 +4046,7 @@ var MetadataStore = class {
   async _save() {
     const data = {
       ...this._metadata,
-      version: import_protocols8.STORAGE_VERSION,
+      version: import_protocols9.STORAGE_VERSION,
       created: this._metadata.created ?? /* @__PURE__ */ new Date(),
       updated: /* @__PURE__ */ new Date()
     };
@@ -4200,4 +4252,4 @@ var isLegacyInvitationFormat = (invitation) => {
   startAfter,
   valueEncoding
 });
-//# sourceMappingURL=chunk-6MWU4MHX.cjs.map
+//# sourceMappingURL=chunk-IYTGTZ7D.cjs.map