@dxos/echo-pipeline 0.6.5 → 0.6.6-staging.582ce24

package/dist/lib/browser/{chunk-2MII6KJX.mjs → chunk-P6XSIJKM.mjs}

@@ -434,138 +434,121 @@ var diffCollectionState = (local, remote) => {
   };
 };
 
-// packages/core/echo/echo-pipeline/src/automerge/leveldb-storage-adapter.ts
-import { LifecycleState, Resource as Resource3 } from "@dxos/context";
-var LevelDBStorageAdapter = class extends Resource3 {
-  constructor(_params) {
-    super();
-    this._params = _params;
-  }
-  async load(keyArray) {
-    try {
-      if (this._lifecycleState !== LifecycleState.OPEN) {
-        return void 0;
-      }
-      const startMs = Date.now();
-      const chunk = await this._params.db.get(keyArray, {
-        ...encodingOptions
-      });
-      this._params.monitor?.recordBytesLoaded(chunk.byteLength);
-      this._params.monitor?.recordLoadDuration(Date.now() - startMs);
-      return chunk;
-    } catch (err) {
-      if (isLevelDbNotFoundError(err)) {
-        return void 0;
-      }
-      throw err;
-    }
-  }
-  async save(keyArray, binary) {
-    if (this._lifecycleState !== LifecycleState.OPEN) {
-      return void 0;
-    }
-    const startMs = Date.now();
-    const batch = this._params.db.batch();
-    await this._params.callbacks?.beforeSave?.({
-      path: keyArray,
-      batch
+// packages/core/echo/echo-pipeline/src/space/auth.ts
+import { runInContext, scheduleTask as scheduleTask2 } from "@dxos/async";
+import { Context } from "@dxos/context";
+import { randomBytes } from "@dxos/crypto";
+import { invariant as invariant3 } from "@dxos/invariant";
+import { log as log2 } from "@dxos/log";
+import { schema as schema4 } from "@dxos/protocols";
+import { RpcExtension } from "@dxos/teleport";
+var __dxlog_file3 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/auth.ts";
+var AuthExtension = class extends RpcExtension {
+  constructor(_authParams) {
+    super({
+      requested: {
+        AuthService: schema4.getService("dxos.mesh.teleport.auth.AuthService")
+      },
+      exposed: {
+        AuthService: schema4.getService("dxos.mesh.teleport.auth.AuthService")
+      },
+      timeout: 60 * 1e3
     });
-    batch.put(keyArray, Buffer.from(binary), {
-      ...encodingOptions
+    this._authParams = _authParams;
+    this._ctx = new Context({
+      onError: (err) => {
+        log2.catch(err, void 0, {
+          F: __dxlog_file3,
+          L: 28,
+          S: this,
+          C: (f, a) => f(...a)
+        });
+      }
+    }, {
+      F: __dxlog_file3,
+      L: 26
     });
-    await batch.write();
-    this._params.monitor?.recordBytesStored(binary.byteLength);
-    await this._params.callbacks?.afterSave?.(keyArray);
-    this._params.monitor?.recordStoreDuration(Date.now() - startMs);
   }
-  async remove(keyArray) {
-    if (this._lifecycleState !== LifecycleState.OPEN) {
-      return void 0;
-    }
-    await this._params.db.del(keyArray, {
-      ...encodingOptions
+  async getHandlers() {
+    return {
+      AuthService: {
+        authenticate: async ({ challenge }) => {
+          try {
+            const credential = await this._authParams.provider(challenge);
+            if (!credential) {
+              throw new Error("auth rejected");
+            }
+            return {
+              credential
+            };
+          } catch (err) {
+            log2.error("failed to generate auth credentials", err, {
+              F: __dxlog_file3,
+              L: 55,
+              S: this,
+              C: (f, a) => f(...a)
+            });
+            throw new Error("auth rejected");
+          }
+        }
+      }
+    };
+  }
+  async onOpen(context) {
+    await super.onOpen(context);
+    scheduleTask2(this._ctx, async () => {
+      try {
+        const challenge = randomBytes(32);
+        const { credential } = await this.rpc.AuthService.authenticate({
+          challenge
+        });
+        invariant3(credential?.length > 0, "invalid credential", {
+          F: __dxlog_file3,
+          L: 69,
+          S: this,
+          A: [
+            "credential?.length > 0",
+            "'invalid credential'"
+          ]
+        });
+        const success = await this._authParams.verifier(challenge, credential);
+        invariant3(success, "credential not verified", {
+          F: __dxlog_file3,
+          L: 71,
+          S: this,
+          A: [
+            "success",
+            "'credential not verified'"
+          ]
+        });
+        runInContext(this._ctx, () => this._authParams.onAuthSuccess());
+      } catch (err) {
+        log2("auth failed", err, {
+          F: __dxlog_file3,
+          L: 74,
+          S: this,
+          C: (f, a) => f(...a)
+        });
+        this.close();
+        this._authParams.onAuthFailure();
+      }
     });
   }
-  async loadRange(keyPrefix) {
-    if (this._lifecycleState !== LifecycleState.OPEN) {
-      return [];
-    }
-    const startMs = Date.now();
-    const result = [];
-    for await (const [key, value] of this._params.db.iterator({
-      gte: keyPrefix,
-      lte: [
-        ...keyPrefix,
-        "\uFFFF"
-      ],
-      ...encodingOptions
-    })) {
-      result.push({
-        key,
-        data: value
-      });
-      this._params.monitor?.recordBytesLoaded(value.byteLength);
-    }
-    this._params.monitor?.recordLoadDuration(Date.now() - startMs);
-    return result;
+  async onClose() {
+    await this._ctx.dispose();
+    await super.onClose();
   }
-  async removeRange(keyPrefix) {
-    if (this._lifecycleState !== LifecycleState.OPEN) {
-      return void 0;
-    }
-    const batch = this._params.db.batch();
-    for await (const [key] of this._params.db.iterator({
-      gte: keyPrefix,
-      lte: [
-        ...keyPrefix,
-        "\uFFFF"
-      ],
-      ...encodingOptions
-    })) {
-      batch.del(key, {
-        ...encodingOptions
-      });
-    }
-    await batch.write();
+  async onAbort() {
+    await this._ctx.dispose();
+    await super.onAbort();
   }
 };
-var keyEncoder = {
-  encode: (key) => Buffer.from(key.map((k) => k.replaceAll("%", "%25").replaceAll("-", "%2D")).join("-")),
-  decode: (key) => Buffer.from(key).toString().split("-").map((k) => k.replaceAll("%2D", "-").replaceAll("%25", "%")),
-  format: "buffer"
-};
-var encodingOptions = {
-  keyEncoding: keyEncoder,
-  valueEncoding: "buffer"
-};
-var isLevelDbNotFoundError = (err) => err.code === "LEVEL_NOT_FOUND";
 
-// packages/core/echo/echo-pipeline/src/automerge/automerge-host.ts
-import { Event as Event2, asyncTimeout } from "@dxos/async";
-import { getBackend, getHeads, isAutomerge, equals as headsEquals, save } from "@dxos/automerge/automerge";
-import { Repo } from "@dxos/automerge/automerge-repo";
-import { Context, Resource as Resource4, cancelWithContext as cancelWithContext2 } from "@dxos/context";
-import { invariant as invariant4 } from "@dxos/invariant";
-import { PublicKey as PublicKey2 } from "@dxos/keys";
+// packages/core/echo/echo-pipeline/src/pipeline/timeframe-clock.ts
+import { Event as Event2 } from "@dxos/async";
+import { timed } from "@dxos/debug";
 import { log as log3 } from "@dxos/log";
-import { objectPointerCodec } from "@dxos/protocols";
-import { trace } from "@dxos/tracing";
-
-// packages/core/echo/echo-pipeline/src/automerge/echo-network-adapter.ts
-import { synchronized, Trigger } from "@dxos/async";
-import { NetworkAdapter } from "@dxos/automerge/automerge-repo";
-import { LifecycleState as LifecycleState2 } from "@dxos/context";
-import { invariant as invariant3 } from "@dxos/invariant";
-import { log as log2 } from "@dxos/log";
-import { nonNullable } from "@dxos/util";
-
-// packages/core/echo/echo-pipeline/src/automerge/network-protocol.ts
-var MESSAGE_TYPE_COLLECTION_QUERY = "collection-query";
-var isCollectionQueryMessage = (message) => message.type === MESSAGE_TYPE_COLLECTION_QUERY;
-var MESSAGE_TYPE_COLLECTION_STATE = "collection-state";
-var isCollectionStateMessage = (message) => message.type === MESSAGE_TYPE_COLLECTION_STATE;
-
-// packages/core/echo/echo-pipeline/src/automerge/echo-network-adapter.ts
+import { Timeframe } from "@dxos/timeframe";
 function _ts_decorate(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
@@ -576,360 +559,575 @@ function _ts_decorate(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file3 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/echo-network-adapter.ts";
-var EchoNetworkAdapter = class extends NetworkAdapter {
-  constructor(_params) {
-    super();
-    this._params = _params;
-    this._replicators = /* @__PURE__ */ new Set();
-    this._connections = /* @__PURE__ */ new Map();
-    this._lifecycleState = LifecycleState2.CLOSED;
-    this._connected = new Trigger();
+var __dxlog_file4 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/pipeline/timeframe-clock.ts";
+var mapTimeframeToFeedIndexes = (timeframe) => timeframe.frames().map(([feedKey, index]) => ({
+  feedKey,
+  index
+}));
+var mapFeedIndexesToTimeframe = (indexes) => new Timeframe(indexes.map(({ feedKey, index }) => [
+  feedKey,
+  index
+]));
+var startAfter = (timeframe) => timeframe.frames().map(([feedKey, index]) => ({
+  feedKey,
+  index: index + 1
+}));
+var TimeframeClock = class {
+  constructor(_timeframe = new Timeframe()) {
+    this._timeframe = _timeframe;
+    this.update = new Event2();
+    this._pendingTimeframe = _timeframe;
   }
-  connect(peerId, peerMetadata) {
-    this.peerId = peerId;
-    this.peerMetadata = peerMetadata;
-    this._connected.wake();
+  /**
+  * Timeframe that was processed by ECHO.
+  */
+  get timeframe() {
+    return this._timeframe;
   }
-  send(message) {
-    this._send(message);
+  /**
+  * Timeframe that is currently being processed by ECHO.
+  * Will be equal to `timeframe` after the processing is complete.
+  */
+  get pendingTimeframe() {
+    return this._pendingTimeframe;
   }
-  disconnect() {
+  setTimeframe(timeframe) {
+    this._timeframe = timeframe;
+    this._pendingTimeframe = timeframe;
+    this.update.emit(this._timeframe);
   }
-  async open() {
-    if (this._lifecycleState === LifecycleState2.OPEN) {
-      return;
-    }
-    this._lifecycleState = LifecycleState2.OPEN;
-    log2("emit ready", void 0, {
-      F: __dxlog_file3,
-      L: 78,
+  updatePendingTimeframe(key, seq) {
+    this._pendingTimeframe = Timeframe.merge(this._pendingTimeframe, new Timeframe([
+      [
+        key,
+        seq
+      ]
+    ]));
+  }
+  updateTimeframe() {
+    this._timeframe = this._pendingTimeframe;
+    this.update.emit(this._timeframe);
+  }
+  hasGaps(timeframe) {
+    const gaps = Timeframe.dependencies(timeframe, this._timeframe);
+    return !gaps.isEmpty();
+  }
+  async waitUntilReached(target) {
+    log3("waitUntilReached", {
+      target,
+      current: this._timeframe
+    }, {
+      F: __dxlog_file4,
+      L: 70,
       S: this,
       C: (f, a) => f(...a)
     });
-    this.emit("ready", {
-      network: this
+    await this.update.waitForCondition(() => {
+      log3("check if reached", {
+        target,
+        current: this._timeframe,
+        deps: Timeframe.dependencies(target, this._timeframe)
+      }, {
+        F: __dxlog_file4,
+        L: 72,
+        S: this,
+        C: (f, a) => f(...a)
+      });
+      return Timeframe.dependencies(target, this._timeframe).isEmpty();
     });
   }
-  async close() {
-    if (this._lifecycleState === LifecycleState2.CLOSED) {
-      return this;
-    }
-    for (const replicator of this._replicators) {
-      await replicator.disconnect();
+};
+_ts_decorate([
+  timed(5e3)
+], TimeframeClock.prototype, "waitUntilReached", null);
+
+// packages/core/echo/echo-pipeline/src/pipeline/pipeline.ts
+import { Event as Event3, sleepWithContext, synchronized, Trigger } from "@dxos/async";
+import { Context as Context2, rejectOnDispose } from "@dxos/context";
+import { failUndefined } from "@dxos/debug";
+import { FeedSetIterator } from "@dxos/feed-store";
+import { invariant as invariant5 } from "@dxos/invariant";
+import { PublicKey as PublicKey2 } from "@dxos/keys";
+import { log as log5 } from "@dxos/log";
+import { Timeframe as Timeframe2 } from "@dxos/timeframe";
+import { ComplexMap } from "@dxos/util";
+
+// packages/core/echo/echo-pipeline/src/pipeline/message-selector.ts
+import { invariant as invariant4 } from "@dxos/invariant";
+import { log as log4 } from "@dxos/log";
+var __dxlog_file5 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/pipeline/message-selector.ts";
+var createMessageSelector = (timeframeClock) => {
+  return (messages) => {
+    for (let i = 0; i < messages.length; i++) {
+      const { data: { timeframe } } = messages[i];
+      invariant4(timeframe, void 0, {
+        F: __dxlog_file5,
+        L: 25,
+        S: void 0,
+        A: [
+          "timeframe",
+          ""
+        ]
+      });
+      if (!timeframeClock.hasGaps(timeframe)) {
+        return i;
+      }
     }
-    this._replicators.clear();
-    this._lifecycleState = LifecycleState2.CLOSED;
+    log4("Skipping...", void 0, {
+      F: __dxlog_file5,
+      L: 33,
+      S: void 0,
+      C: (f, a) => f(...a)
+    });
+  };
+};
+
+// packages/core/echo/echo-pipeline/src/pipeline/pipeline.ts
+function _ts_decorate2(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
+    r = Reflect.decorate(decorators, target, key, desc);
+  else
+    for (var i = decorators.length - 1; i >= 0; i--)
+      if (d = decorators[i])
+        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+var __dxlog_file6 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/pipeline/pipeline.ts";
+var PipelineState = class {
+  constructor(_feeds, _timeframeClock) {
+    this._feeds = _feeds;
+    this._timeframeClock = _timeframeClock;
+    this._ctx = new Context2(void 0, {
+      F: __dxlog_file6,
+      L: 41
+    });
+    this.timeframeUpdate = this._timeframeClock.update;
+    this.stalled = new Event3();
+    this._startTimeframe = new Timeframe2();
+    this._reachedTarget = false;
   }
-  async whenConnected() {
-    await this._connected.wait({
-      timeout: 1e4
+  /**
+  * Latest theoretical timeframe based on the last mutation in each feed.
+  * NOTE: This might never be reached if the mutation dependencies
+  */
+  // TODO(dmaretskyi): Rename `totalTimeframe`? or `lastTimeframe`.
+  get endTimeframe() {
+    return mapFeedIndexesToTimeframe(Array.from(this._feeds.values()).filter((feed) => feed.length > 0).map((feed) => ({
+      feedKey: feed.key,
+      index: feed.length - 1
+    })));
+  }
+  get startTimeframe() {
+    return this._startTimeframe;
+  }
+  get timeframe() {
+    return this._timeframeClock.timeframe;
+  }
+  get pendingTimeframe() {
+    return this._timeframeClock.pendingTimeframe;
+  }
+  get targetTimeframe() {
+    return this._targetTimeframe ? this._targetTimeframe : new Timeframe2();
+  }
+  get reachedTarget() {
+    return this._reachedTarget;
+  }
+  get feeds() {
+    return Array.from(this._feeds.values());
+  }
+  async waitUntilTimeframe(target) {
+    await this._timeframeClock.waitUntilReached(target);
+  }
+  setTargetTimeframe(target) {
+    this._targetTimeframe = target;
+  }
+  /**
+  * Wait until the pipeline processes all messages in the feed and reaches the target timeframe if that is set.
+  *
+  * This function will resolve immediately if the pipeline is stalled.
+  *
+  * @param timeout Timeout in milliseconds to specify the maximum wait time.
+  */
+  async waitUntilReachedTargetTimeframe({ ctx = new Context2(void 0, {
+    F: __dxlog_file6,
+    L: 129
+  }), timeout, breakOnStall = true } = {}) {
+    log5("waitUntilReachedTargetTimeframe", {
+      timeout,
+      current: this.timeframe,
+      target: this.targetTimeframe
+    }, {
+      F: __dxlog_file6,
+      L: 133,
+      S: this,
+      C: (f, a) => f(...a)
     });
+    this._reachedTargetPromise ??= Promise.race([
+      this._timeframeClock.update.waitForCondition(() => {
+        return Timeframe2.dependencies(this.targetTimeframe, this.timeframe).isEmpty();
+      }),
+      ...breakOnStall ? [
+        this.stalled.discardParameter().waitForCount(1)
+      ] : []
+    ]);
+    let done = false;
+    if (timeout) {
+      return Promise.race([
+        rejectOnDispose(ctx),
+        rejectOnDispose(this._ctx),
+        this._reachedTargetPromise.then(() => {
+          done = true;
+          this._reachedTarget = true;
+        }),
+        sleepWithContext(this._ctx, timeout).then(() => {
+          if (done) {
+            return;
+          }
+          log5.warn("waitUntilReachedTargetTimeframe timed out", {
+            timeout,
+            current: this.timeframe,
+            target: this.targetTimeframe,
+            dependencies: Timeframe2.dependencies(this.targetTimeframe, this.timeframe)
+          }, {
+            F: __dxlog_file6,
+            L: 161,
+            S: this,
+            C: (f, a) => f(...a)
+          });
+        })
+      ]);
+    } else {
+      return this._reachedTargetPromise;
+    }
   }
-  async addReplicator(replicator) {
-    invariant3(this._lifecycleState === LifecycleState2.OPEN, void 0, {
-      F: __dxlog_file3,
-      L: 104,
+};
+var Pipeline = class {
+  constructor() {
+    this._timeframeClock = new TimeframeClock(new Timeframe2());
+    this._feeds = new ComplexMap(PublicKey2.hash);
+    // External state accessor.
+    this._state = new PipelineState(this._feeds, this._timeframeClock);
+    // Waits for the message consumer to process the message and yield control back to the pipeline.
+    this._processingTrigger = new Trigger().wake();
+    this._pauseTrigger = new Trigger().wake();
+    // Pending downloads.
+    this._downloads = new ComplexMap((value) => PublicKey2.hash(value.key));
+    this._isStopping = false;
+    this._isStarted = false;
+    this._isBeingConsumed = false;
+    this._isPaused = false;
+  }
+  get state() {
+    return this._state;
+  }
+  get writer() {
+    invariant5(this._writer, "Writer not set.", {
+      F: __dxlog_file6,
+      L: 243,
       S: this,
       A: [
-        "this._lifecycleState === LifecycleState.OPEN",
-        ""
+        "this._writer",
+        "'Writer not set.'"
       ]
     });
-    invariant3(this.peerId, void 0, {
-      F: __dxlog_file3,
-      L: 105,
+    return this._writer;
+  }
+  hasFeed(feedKey) {
+    return this._feeds.has(feedKey);
+  }
+  getFeeds() {
+    return this._feedSetIterator.feeds;
+  }
+  // NOTE: This cannot be synchronized with `stop` because stop waits for the mutation processing to complete,
+  // which might be opening feeds during the mutation processing, which w
+  async addFeed(feed) {
+    this._feeds.set(feed.key, feed);
+    if (this._feedSetIterator) {
+      await this._feedSetIterator.addFeed(feed);
+    }
+    if (this._isStarted && !this._isPaused) {
+      this._setFeedDownloadState(feed);
+    }
+  }
+  setWriteFeed(feed) {
+    invariant5(!this._writer, "Writer already set.", {
+      F: __dxlog_file6,
+      L: 270,
       S: this,
       A: [
-        "this.peerId",
-        ""
+        "!this._writer",
+        "'Writer already set.'"
       ]
     });
-    invariant3(!this._replicators.has(replicator), void 0, {
-      F: __dxlog_file3,
-      L: 106,
+    invariant5(feed.properties.writable, "Feed must be writable.", {
+      F: __dxlog_file6,
+      L: 271,
       S: this,
       A: [
-        "!this._replicators.has(replicator)",
-        ""
+        "feed.properties.writable",
+        "'Feed must be writable.'"
       ]
     });
-    this._replicators.add(replicator);
-    await replicator.connect({
-      peerId: this.peerId,
-      onConnectionOpen: this._onConnectionOpen.bind(this),
-      onConnectionClosed: this._onConnectionClosed.bind(this),
-      onConnectionAuthScopeChanged: this._onConnectionAuthScopeChanged.bind(this),
-      getContainingSpaceForDocument: this._params.getContainingSpaceForDocument
-    });
+    this._writer = createMappedFeedWriter((payload) => ({
+      timeframe: this._timeframeClock.timeframe,
+      payload
+    }), feed.createFeedWriter());
   }
-  async removeReplicator(replicator) {
-    invariant3(this._lifecycleState === LifecycleState2.OPEN, void 0, {
-      F: __dxlog_file3,
-      L: 120,
+  async start() {
+    invariant5(!this._isStarted, "Pipeline is already started.", {
+      F: __dxlog_file6,
+      L: 284,
       S: this,
       A: [
-        "this._lifecycleState === LifecycleState.OPEN",
-        ""
+        "!this._isStarted",
+        "'Pipeline is already started.'"
       ]
     });
-    invariant3(this._replicators.has(replicator), void 0, {
-      F: __dxlog_file3,
-      L: 121,
+    log5("starting...", void 0, {
+      F: __dxlog_file6,
+      L: 285,
       S: this,
-      A: [
-        "this._replicators.has(replicator)",
-        ""
-      ]
+      C: (f, a) => f(...a)
     });
-    await replicator.disconnect();
-    this._replicators.delete(replicator);
-  }
-  async shouldAdvertise(peerId, params) {
-    const connection = this._connections.get(peerId);
-    if (!connection) {
-      return false;
-    }
-    return connection.connection.shouldAdvertise(params);
-  }
-  shouldSyncCollection(peerId, params) {
-    const connection = this._connections.get(peerId);
-    if (!connection) {
-      return false;
+    await this._initIterator();
+    await this._feedSetIterator.open();
+    this._isStarted = true;
+    log5("started", void 0, {
+      F: __dxlog_file6,
+      L: 289,
+      S: this,
+      C: (f, a) => f(...a)
+    });
+    if (!this._isPaused) {
+      for (const feed of this._feeds.values()) {
+        this._setFeedDownloadState(feed);
+      }
     }
-    return connection.connection.shouldSyncCollection(params);
-  }
-  queryCollectionState(collectionId, targetId) {
-    const message = {
-      type: "collection-query",
-      senderId: this.peerId,
-      targetId,
-      collectionId
-    };
-    this._send(message);
-  }
-  sendCollectionState(collectionId, targetId, state) {
-    const message = {
-      type: "collection-state",
-      senderId: this.peerId,
-      targetId,
-      collectionId,
-      state
-    };
-    this._send(message);
   }
-  _send(message) {
-    const connectionEntry = this._connections.get(message.targetId);
-    if (!connectionEntry) {
-      throw new Error("Connection not found.");
+  async stop() {
+    log5("stopping...", void 0, {
+      F: __dxlog_file6,
+      L: 300,
+      S: this,
+      C: (f, a) => f(...a)
+    });
+    this._isStopping = true;
+    for (const [feed, handle] of this._downloads.entries()) {
+      feed.undownload(handle);
     }
-    const writeStart = Date.now();
-    connectionEntry.writer.write(message).then(() => {
-      const durationMs = Date.now() - writeStart;
-      this._params.monitor?.recordMessageSent(message, durationMs);
-    }).catch((err) => {
-      if (connectionEntry.isOpen) {
-        log2.catch(err, void 0, {
-          F: __dxlog_file3,
-          L: 181,
-          S: this,
-          C: (f, a) => f(...a)
-        });
-      }
-      this._params.monitor?.recordMessageSendingFailed(message);
+    this._downloads.clear();
+    await this._feedSetIterator?.close();
+    await this._processingTrigger.wait();
+    await this._state._ctx.dispose();
+    this._state._ctx = new Context2(void 0, {
+      F: __dxlog_file6,
+      L: 309
     });
-  }
-  // TODO(dmaretskyi): Remove.
-  getPeersInterestedInCollection(collectionId) {
-    return Array.from(this._connections.values()).map((connection) => {
-      return connection.connection.shouldSyncCollection({
-        collectionId
-      }) ? connection.connection.peerId : null;
-    }).filter(nonNullable);
-  }
-  _onConnectionOpen(connection) {
-    log2("Connection opened", {
-      peerId: connection.peerId
-    }, {
-      F: __dxlog_file3,
-      L: 199,
+    this._state._reachedTargetPromise = void 0;
+    this._state._reachedTarget = false;
+    this._isStarted = false;
+    log5("stopped", void 0, {
+      F: __dxlog_file6,
+      L: 313,
       S: this,
       C: (f, a) => f(...a)
     });
-    invariant3(!this._connections.has(connection.peerId), void 0, {
-      F: __dxlog_file3,
-      L: 200,
+  }
+  /**
+  * @param timeframe Timeframe of already processed messages.
+  *  The pipeline will start processing messages AFTER this timeframe.
+  */
+  async setCursor(timeframe) {
+    invariant5(!this._isStarted || this._isPaused, "Invalid state.", {
+      F: __dxlog_file6,
+      L: 322,
       S: this,
       A: [
-        "!this._connections.has(connection.peerId as PeerId)",
-        ""
+        "!this._isStarted || this._isPaused",
+        "'Invalid state.'"
       ]
     });
-    const reader = connection.readable.getReader();
-    const writer = connection.writable.getWriter();
-    const connectionEntry = {
-      connection,
-      reader,
-      writer,
-      isOpen: true
-    };
-    this._connections.set(connection.peerId, connectionEntry);
-    queueMicrotask(async () => {
-      try {
-        while (true) {
-          const { done, value } = await reader.read();
-          if (done) {
-            break;
-          }
-          this._onMessage(value);
-        }
-      } catch (err) {
-        if (connectionEntry.isOpen) {
-          log2.catch(err, void 0, {
-            F: __dxlog_file3,
-            L: 219,
-            S: this,
-            C: (f, a) => f(...a)
-          });
-        }
-      }
-    });
-    log2("emit peer-candidate", {
-      peerId: connection.peerId
-    }, {
-      F: __dxlog_file3,
-      L: 224,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    this._emitPeerCandidate(connection);
-    this._params.monitor?.recordPeerConnected(connection.peerId);
-  }
-  _onMessage(message) {
-    if (isCollectionQueryMessage(message)) {
-      this._params.onCollectionStateQueried(message.collectionId, message.senderId);
-    } else if (isCollectionStateMessage(message)) {
-      this._params.onCollectionStateReceived(message.collectionId, message.senderId, message.state);
-    } else {
-      this.emit("message", message);
+    this._state._startTimeframe = timeframe;
+    this._timeframeClock.setTimeframe(timeframe);
+    if (this._feedSetIterator) {
+      await this._feedSetIterator.close();
+      await this._initIterator();
+      await this._feedSetIterator.open();
     }
-    this._params.monitor?.recordMessageReceived(message);
   }
   /**
-  * Trigger doc-synchronizer shared documents set recalculation. Happens on peer-candidate.
-  * TODO(y): replace with a proper API call when sharePolicy update becomes supported by automerge-repo
+  * Calling pause while processing will cause a deadlock.
   */
-  _onConnectionAuthScopeChanged(connection) {
-    log2("Connection auth scope changed", {
-      peerId: connection.peerId
-    }, {
-      F: __dxlog_file3,
-      L: 245,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    const entry = this._connections.get(connection.peerId);
-    invariant3(entry, void 0, {
-      F: __dxlog_file3,
-      L: 247,
+  async pause() {
+    if (this._isPaused) {
+      return;
+    }
+    this._pauseTrigger.reset();
+    await this._processingTrigger.wait();
+    this._isPaused = true;
+  }
+  async unpause() {
+    invariant5(this._isPaused, "Pipeline is not paused.", {
+      F: __dxlog_file6,
+      L: 351,
       S: this,
       A: [
-        "entry",
-        ""
+        "this._isPaused",
+        "'Pipeline is not paused.'"
       ]
     });
-    this.emit("peer-disconnected", {
-      peerId: connection.peerId
-    });
-    this._emitPeerCandidate(connection);
+    this._pauseTrigger.wake();
+    this._isPaused = false;
+    for (const feed of this._feeds.values()) {
+      this._setFeedDownloadState(feed);
+    }
   }
-  _onConnectionClosed(connection) {
-    log2("Connection closed", {
-      peerId: connection.peerId
-    }, {
-      F: __dxlog_file3,
-      L: 253,
+  /**
+  * Starts to iterate over the ordered messages from the added feeds.
+  * Updates the timeframe clock after the message has bee processed.
+  */
+  async *consume() {
+    invariant5(!this._isBeingConsumed, "Pipeline is already being consumed.", {
+      F: __dxlog_file6,
+      L: 366,
       S: this,
-      C: (f, a) => f(...a)
+      A: [
+        "!this._isBeingConsumed",
+        "'Pipeline is already being consumed.'"
+      ]
     });
-    const entry = this._connections.get(connection.peerId);
-    invariant3(entry, void 0, {
-      F: __dxlog_file3,
-      L: 255,
+    this._isBeingConsumed = true;
+    invariant5(this._feedSetIterator, "Iterator not initialized.", {
+      F: __dxlog_file6,
+      L: 369,
       S: this,
       A: [
-        "entry",
-        ""
+        "this._feedSetIterator",
+        "'Iterator not initialized.'"
       ]
     });
-    entry.isOpen = false;
-    this.emit("peer-disconnected", {
-      peerId: connection.peerId
-    });
-    this._params.monitor?.recordPeerDisconnected(connection.peerId);
-    void entry.reader.cancel().catch((err) => log2.catch(err, void 0, {
-      F: __dxlog_file3,
-      L: 261,
-      S: this,
-      C: (f, a) => f(...a)
-    }));
-    void entry.writer.abort().catch((err) => log2.catch(err, void 0, {
-      F: __dxlog_file3,
-      L: 262,
+    let lastFeedSetIterator = this._feedSetIterator;
+    let iterable = lastFeedSetIterator[Symbol.asyncIterator]();
+    while (!this._isStopping) {
+      await this._pauseTrigger.wait();
+      if (lastFeedSetIterator !== this._feedSetIterator) {
+        invariant5(this._feedSetIterator, "Iterator not initialized.", {
+          F: __dxlog_file6,
+          L: 378,
+          S: this,
+          A: [
+            "this._feedSetIterator",
+            "'Iterator not initialized.'"
+          ]
+        });
+        lastFeedSetIterator = this._feedSetIterator;
+        iterable = lastFeedSetIterator[Symbol.asyncIterator]();
+      }
+      const { done, value } = await iterable.next();
+      if (!done) {
+        const block = value ?? failUndefined();
+        this._processingTrigger.reset();
+        this._timeframeClock.updatePendingTimeframe(PublicKey2.from(block.feedKey), block.seq);
+        yield block;
+        this._processingTrigger.wake();
+        this._timeframeClock.updateTimeframe();
+      }
+    }
+    this._isBeingConsumed = false;
+  }
+  _setFeedDownloadState(feed) {
+    let handle = this._downloads.get(feed);
+    if (handle) {
+      feed.undownload(handle);
+    }
+    const timeframe = this._state._startTimeframe;
+    const seq = timeframe.get(feed.key) ?? -1;
+    log5("download", {
+      feed: feed.key.truncate(),
+      seq,
+      length: feed.length
+    }, {
+      F: __dxlog_file6,
+      L: 407,
       S: this,
       C: (f, a) => f(...a)
-    }));
-    this._connections.delete(connection.peerId);
+    });
+    handle = feed.download({
+      start: seq + 1,
+      linear: true
+    }, (err, data) => {
+      if (err) {
+      } else {
+        log5.info("downloaded", {
+          data
+        }, {
+          F: __dxlog_file6,
+          L: 412,
+          S: this,
+          C: (f, a) => f(...a)
+        });
+      }
+    });
+    this._downloads.set(feed, handle);
   }
-  _emitPeerCandidate(connection) {
-    this.emit("peer-candidate", {
-      peerId: connection.peerId,
-      peerMetadata: createEchoPeerMetadata()
+  async _initIterator() {
+    this._feedSetIterator = new FeedSetIterator(createMessageSelector(this._timeframeClock), {
+      start: startAfter(this._timeframeClock.timeframe),
+      stallTimeout: 1e3
+    });
+    this._feedSetIterator.stalled.on((iterator) => {
+      log5.warn(`Stalled after ${iterator.options.stallTimeout}ms with ${iterator.size} feeds.`, void 0, {
+        F: __dxlog_file6,
+        L: 426,
+        S: this,
+        C: (f, a) => f(...a)
+      });
+      this._state.stalled.emit();
     });
+    for (const feed of this._feeds.values()) {
+      await this._feedSetIterator.addFeed(feed);
+    }
   }
 };
-_ts_decorate([
+_ts_decorate2([
   synchronized
-], EchoNetworkAdapter.prototype, "open", null);
-_ts_decorate([
+], Pipeline.prototype, "start", null);
+_ts_decorate2([
   synchronized
-], EchoNetworkAdapter.prototype, "close", null);
-_ts_decorate([
+], Pipeline.prototype, "stop", null);
+_ts_decorate2([
   synchronized
-], EchoNetworkAdapter.prototype, "addReplicator", null);
-_ts_decorate([
+], Pipeline.prototype, "setCursor", null);
+_ts_decorate2([
   synchronized
-], EchoNetworkAdapter.prototype, "removeReplicator", null);
-var createEchoPeerMetadata = () => ({
-  // TODO(dmaretskyi): Refactor this.
-  dxos_peerSource: "EchoNetworkAdapter"
-});
-var isEchoPeerMetadata = (metadata) => metadata?.dxos_peerSource === "EchoNetworkAdapter";
+], Pipeline.prototype, "pause", null);
+_ts_decorate2([
+  synchronized
+], Pipeline.prototype, "unpause", null);
 
-// packages/core/echo/echo-pipeline/src/automerge/heads-store.ts
-import { headsEncoding } from "@dxos/indexing";
-var HeadsStore = class {
-  constructor({ db }) {
-    this._db = db;
-  }
-  setHeads(documentId, heads, batch) {
-    batch.put(documentId, heads, {
-      sublevel: this._db,
-      keyEncoding: "utf8",
-      valueEncoding: headsEncoding
-    });
-  }
-  // TODO(dmaretskyi): Make batched.
-  async getHeads(documentIds) {
-    return this._db.getMany(documentIds, {
-      keyEncoding: "utf8",
-      valueEncoding: headsEncoding
-    });
-  }
-};
+// packages/core/echo/echo-pipeline/src/space/space.ts
+import { Event as Event4, scheduleMicroTask, synchronized as synchronized2, trackLeaks as trackLeaks2 } from "@dxos/async";
+import { LifecycleState, Resource as Resource3 } from "@dxos/context";
+import { subtleCrypto as subtleCrypto2 } from "@dxos/crypto";
+import { invariant as invariant6 } from "@dxos/invariant";
+import { PublicKey as PublicKey4, SpaceId } from "@dxos/keys";
+import { log as log7, logInfo } from "@dxos/log";
+import { AdmittedFeed as AdmittedFeed2 } from "@dxos/protocols/proto/dxos/halo/credentials";
+import { trace as trace2 } from "@dxos/tracing";
+import { Callback as Callback2, ComplexMap as ComplexMap2 } from "@dxos/util";
 
-// packages/core/echo/echo-pipeline/src/automerge/automerge-host.ts
-function _ts_decorate2(decorators, target, key, desc) {
+// packages/core/echo/echo-pipeline/src/space/control-pipeline.ts
+import { DeferredTask, sleepWithContext as sleepWithContext2, trackLeaks } from "@dxos/async";
+import { Context as Context3 } from "@dxos/context";
+import { SpaceStateMachine } from "@dxos/credentials";
+import { PublicKey as PublicKey3 } from "@dxos/keys";
+import { log as log6 } from "@dxos/log";
+import { AdmittedFeed } from "@dxos/protocols/proto/dxos/halo/credentials";
+import { Timeframe as Timeframe3 } from "@dxos/timeframe";
+import { TimeSeriesCounter, TimeUsageCounter, trace } from "@dxos/tracing";
+import { Callback, tracer } from "@dxos/util";
+function _ts_decorate3(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
     r = Reflect.decorate(decorators, target, key, desc);
@@ -939,579 +1137,566 @@ function _ts_decorate2(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file4 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/automerge-host.ts";
-var AutomergeHost = class extends Resource4 {
-  constructor({ db, indexMetadataStore, dataMonitor }) {
-    super();
-    this._collectionSynchronizer = new CollectionSynchronizer({
-      queryCollectionState: this._queryCollectionState.bind(this),
-      sendCollectionState: this._sendCollectionState.bind(this),
-      shouldSyncCollection: this._shouldSyncCollection.bind(this)
-    });
-    this._db = db;
-    this._storage = new LevelDBStorageAdapter({
-      db: db.sublevel("automerge"),
-      callbacks: {
-        beforeSave: async (params) => this._beforeSave(params),
-        afterSave: async (key) => this._afterSave(key)
-      },
-      monitor: dataMonitor
-    });
-    this._echoNetworkAdapter = new EchoNetworkAdapter({
-      getContainingSpaceForDocument: this._getContainingSpaceForDocument.bind(this),
-      onCollectionStateQueried: this._onCollectionStateQueried.bind(this),
-      onCollectionStateReceived: this._onCollectionStateReceived.bind(this),
-      monitor: dataMonitor
-    });
-    this._headsStore = new HeadsStore({
-      db: db.sublevel("heads")
+var __dxlog_file7 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/control-pipeline.ts";
+var TIMEFRAME_SAVE_DEBOUNCE_INTERVAL = 500;
+var CONTROL_PIPELINE_SNAPSHOT_DELAY = 1e4;
+var USE_SNAPSHOTS = true;
+var ControlPipeline = class {
+  constructor({ spaceKey, genesisFeed, feedProvider, metadataStore }) {
+    this._ctx = new Context3(void 0, {
+      F: __dxlog_file7,
+      L: 47
     });
-    this._indexMetadataStore = indexMetadataStore;
-  }
-  async _open() {
-    this._peerId = `host-${PublicKey2.random().toHex()}`;
-    await this._storage.open?.();
-    this._repo = new Repo({
-      peerId: this._peerId,
-      sharePolicy: this._sharePolicy.bind(this),
-      storage: this._storage,
-      network: [
-        // Upstream swarm.
-        this._echoNetworkAdapter
-      ]
+    this._lastTimeframeSaveTime = Date.now();
+    this.onFeedAdmitted = new Callback();
+    this._usage = new TimeUsageCounter();
+    this._mutations = new TimeSeriesCounter();
+    this._snapshotTask = new DeferredTask(this._ctx, async () => {
+      await sleepWithContext2(this._ctx, CONTROL_PIPELINE_SNAPSHOT_DELAY);
+      await this._saveSnapshot();
     });
-    Event2.wrap(this._echoNetworkAdapter, "peer-candidate").on(this._ctx, (e) => this._onPeerConnected(e.peerId));
-    Event2.wrap(this._echoNetworkAdapter, "peer-disconnected").on(this._ctx, (e) => this._onPeerDisconnected(e.peerId));
-    this._collectionSynchronizer.remoteStateUpdated.on(this._ctx, ({ collectionId, peerId }) => {
-      this._onRemoteCollectionStateUpdated(collectionId, peerId);
+    this._spaceKey = spaceKey;
+    this._metadata = metadataStore;
+    this._pipeline = new Pipeline();
+    void this._pipeline.addFeed(genesisFeed);
+    this._spaceStateMachine = new SpaceStateMachine(spaceKey);
+    this._spaceStateMachine.onFeedAdmitted.set(async (info) => {
+      log6("feed admitted", {
+        key: info.key
+      }, {
+        F: __dxlog_file7,
+        L: 82,
+        S: this,
+        C: (f, a) => f(...a)
+      });
+      if (info.assertion.designation === AdmittedFeed.Designation.CONTROL && !info.key.equals(genesisFeed.key)) {
+        queueMicrotask(async () => {
+          try {
+            const feed = await feedProvider(info.key);
+            if (!this._pipeline.hasFeed(feed.key)) {
+              await this._pipeline.addFeed(feed);
+            }
+          } catch (err) {
+            log6.catch(err, void 0, {
+              F: __dxlog_file7,
+              L: 93,
+              S: this,
+              C: (f, a) => f(...a)
+            });
+          }
+        });
+      }
+      await this.onFeedAdmitted.callIfSet(info);
     });
-    await this._echoNetworkAdapter.open();
-    await this._collectionSynchronizer.open();
-    await this._echoNetworkAdapter.open();
-    await this._echoNetworkAdapter.whenConnected();
-  }
-  async _close() {
-    await this._collectionSynchronizer.close();
-    await this._storage.close?.();
-    await this._echoNetworkAdapter.close();
-    await this._ctx.dispose();
-  }
-  /**
-  * @deprecated To be abstracted away.
-  */
-  get repo() {
-    return this._repo;
+    this.onMemberRoleChanged = this._spaceStateMachine.onMemberRoleChanged;
+    this.onCredentialProcessed = this._spaceStateMachine.onCredentialProcessed;
+    this.onDelegatedInvitation = this._spaceStateMachine.onDelegatedInvitation;
+    this.onDelegatedInvitationRemoved = this._spaceStateMachine.onDelegatedInvitationRemoved;
   }
-  get peerId() {
-    return this._peerId;
+  get spaceState() {
+    return this._spaceStateMachine;
   }
-  get loadedDocsCount() {
-    return Object.keys(this._repo.handles).length;
+  get pipeline() {
+    return this._pipeline;
   }
-  async addReplicator(replicator) {
-    await this._echoNetworkAdapter.addReplicator(replicator);
+  async setWriteFeed(feed) {
+    await this._pipeline.addFeed(feed);
+    this._pipeline.setWriteFeed(feed);
   }
-  async removeReplicator(replicator) {
-    await this._echoNetworkAdapter.removeReplicator(replicator);
-  }
-  /**
-  * Loads the document handle from the repo and waits for it to be ready.
-  */
-  async loadDoc(ctx, documentId, opts) {
-    let handle;
-    if (typeof documentId === "string") {
-      handle = this._repo.handles[documentId];
-    }
-    if (!handle) {
-      handle = this._repo.find(documentId);
-    }
-    if (!handle.isReady()) {
-      if (!opts?.timeout) {
-        await cancelWithContext2(ctx, handle.whenReady());
-      } else {
-        await cancelWithContext2(ctx, asyncTimeout(handle.whenReady(), opts.timeout));
-      }
-    }
-    return handle;
-  }
-  /**
-  * Create new persisted document.
-  */
-  createDoc(initialValue, opts) {
-    if (opts?.preserveHistory) {
-      if (!isAutomerge(initialValue)) {
-        throw new TypeError("Initial value must be an Automerge document");
-      }
-      return this._repo.import(save(initialValue));
-    } else {
-      return this._repo.create(initialValue);
-    }
-  }
-  async waitUntilHeadsReplicated(heads) {
-    const entries = heads.entries;
-    if (!entries?.length) {
-      return;
+  async start() {
+    const snapshot = this._metadata.getSpaceControlPipelineSnapshot(this._spaceKey);
+    log6("load snapshot", {
+      key: this._spaceKey,
+      present: !!snapshot,
+      tf: snapshot?.timeframe
+    }, {
+      F: __dxlog_file7,
+      L: 123,
+      S: this,
+      C: (f, a) => f(...a)
+    });
+    if (USE_SNAPSHOTS && snapshot) {
+      await this._processSnapshot(snapshot);
     }
-    const documentIds = entries.map((entry) => entry.documentId);
-    const documentHeads = await this.getHeads(documentIds);
-    const headsToWait = entries.filter((entry, index) => {
-      const targetHeads = entry.heads;
-      if (!targetHeads || targetHeads.length === 0) {
-        return false;
-      }
-      const currentHeads = documentHeads[index];
-      return !(currentHeads !== null && headsEquals(currentHeads, targetHeads));
+    log6("starting...", void 0, {
+      F: __dxlog_file7,
+      L: 128,
+      S: this,
+      C: (f, a) => f(...a)
     });
-    if (headsToWait.length > 0) {
-      await Promise.all(headsToWait.map(async (entry, index) => {
-        const handle = await this.loadDoc(Context.default(void 0, {
-          F: __dxlog_file4,
-          L: 226
-        }), entry.documentId);
-        await waitForHeads(handle, entry.heads);
+    setTimeout(async () => {
+      void this._consumePipeline(new Context3(void 0, {
+        F: __dxlog_file7,
+        L: 130
       }));
-    }
-    await this._repo.flush(documentIds.filter((documentId) => !!this._repo.handles[documentId]));
+    });
+    await this._pipeline.start();
+    log6("started", void 0, {
+      F: __dxlog_file7,
+      L: 134,
+      S: this,
+      C: (f, a) => f(...a)
+    });
   }
-  async reIndexHeads(documentIds) {
-    for (const documentId of documentIds) {
-      log3.info("re-indexing heads for document", {
-        documentId
-      }, {
-        F: __dxlog_file4,
-        L: 238,
-        S: this,
-        C: (f, a) => f(...a)
+  async _processSnapshot(snapshot) {
+    await this._pipeline.setCursor(snapshot.timeframe);
+    for (const message of snapshot.messages ?? []) {
+      const result = await this._spaceStateMachine.process(message.credential, {
+        sourceFeed: message.feedKey,
+        skipVerification: true
       });
-      const handle = this._repo.find(documentId);
-      await handle.whenReady([
-        "ready",
-        "requesting"
-      ]);
-      if (handle.inState([
-        "requesting"
-      ])) {
-        log3.warn("document is not available locally, skipping", {
-          documentId
+      if (!result) {
+        log6.warn("credential processing failed from snapshot", {
+          message
         }, {
-          F: __dxlog_file4,
-          L: 242,
+          F: __dxlog_file7,
+          L: 147,
           S: this,
           C: (f, a) => f(...a)
         });
-        continue;
       }
-      const doc = handle.docSync();
-      invariant4(doc, void 0, {
-        F: __dxlog_file4,
-        L: 247,
-        S: this,
-        A: [
-          "doc",
-          ""
-        ]
-      });
-      const heads = getHeads(doc);
-      const batch = this._db.batch();
-      this._headsStore.setHeads(documentId, heads, batch);
-      await batch.write();
     }
-    log3.info("done re-indexing heads", void 0, {
-      F: __dxlog_file4,
-      L: 254,
+  }
+  async _saveSnapshot() {
+    await this._pipeline.pause();
+    const snapshot = {
+      timeframe: this._pipeline.state.timeframe,
+      messages: this._spaceStateMachine.credentialEntries.map((entry) => ({
+        feedKey: entry.sourceFeed,
+        credential: entry.credential
+      }))
+    };
+    await this._pipeline.unpause();
+    log6("save snapshot", {
+      key: this._spaceKey,
+      snapshot
+    }, {
+      F: __dxlog_file7,
+      L: 163,
       S: this,
       C: (f, a) => f(...a)
     });
+    await this._metadata.setSpaceControlPipelineSnapshot(this._spaceKey, snapshot);
   }
-  // TODO(dmaretskyi): Share based on HALO permissions and space affinity.
-  // Hosts, running in the worker, don't share documents unless requested by other peers.
-  // NOTE: If both peers return sharePolicy=false the replication will not happen
-  // https://github.com/automerge/automerge-repo/pull/292
-  async _sharePolicy(peerId, documentId) {
-    if (peerId.startsWith("client-")) {
-      return false;
-    }
-    if (!documentId) {
-      return false;
+  async _consumePipeline(ctx) {
+    for await (const msg of this._pipeline.consume()) {
+      const span = this._usage.beginRecording();
+      this._mutations.inc();
+      try {
+        await this._processMessage(ctx, msg);
+      } catch (err) {
+        log6.catch(err, void 0, {
+          F: __dxlog_file7,
+          L: 176,
+          S: this,
+          C: (f, a) => f(...a)
+        });
+      }
+      span.end();
     }
-    const peerMetadata = this.repo.peerMetadataByPeerId[peerId];
-    if (isEchoPeerMetadata(peerMetadata)) {
-      return this._echoNetworkAdapter.shouldAdvertise(peerId, {
-        documentId
+  }
+  async _processMessage(ctx, msg) {
+    log6("processing", {
+      key: msg.feedKey,
+      seq: msg.seq
+    }, {
+      F: __dxlog_file7,
+      L: 186,
+      S: this,
+      C: (f, a) => f(...a)
+    });
+    if (msg.data.payload.credential) {
+      const timer = tracer.mark("dxos.echo.pipeline.control");
+      const result = await this._spaceStateMachine.process(msg.data.payload.credential.credential, {
+        sourceFeed: PublicKey3.from(msg.feedKey)
       });
+      timer.end();
+      if (!result) {
+        log6.warn("processing failed", {
+          msg
+        }, {
+          F: __dxlog_file7,
+          L: 195,
+          S: this,
+          C: (f, a) => f(...a)
+        });
+      } else {
+        await this._noteTargetStateIfNeeded(this._pipeline.state.pendingTimeframe);
+      }
+      this._snapshotTask.schedule();
     }
-    return false;
   }
-  async _beforeSave({ path, batch }) {
-    const handle = this._repo.handles[path[0]];
-    if (!handle) {
-      return;
-    }
-    const doc = handle.docSync();
-    if (!doc) {
-      return;
+  async _noteTargetStateIfNeeded(timeframe) {
+    if (Date.now() - this._lastTimeframeSaveTime > TIMEFRAME_SAVE_DEBOUNCE_INTERVAL) {
+      this._lastTimeframeSaveTime = Date.now();
+      await this._saveTargetTimeframe(timeframe);
     }
-    const heads = getHeads(doc);
-    this._headsStore.setHeads(handle.documentId, heads, batch);
-    const spaceKey = getSpaceKeyFromDoc(doc) ?? void 0;
-    const objectIds = Object.keys(doc.objects ?? {});
-    const encodedIds = objectIds.map((objectId) => objectPointerCodec.encode({
-      documentId: handle.documentId,
-      objectId,
-      spaceKey
-    }));
-    const idToLastHash = new Map(encodedIds.map((id) => [
-      id,
-      heads
-    ]));
-    this._indexMetadataStore.markDirty(idToLastHash, batch);
   }
-  _shouldSyncCollection(collectionId, peerId) {
-    const peerMetadata = this._repo.peerMetadataByPeerId[peerId];
-    if (isEchoPeerMetadata(peerMetadata)) {
-      return this._echoNetworkAdapter.shouldSyncCollection(peerId, {
-        collectionId
+  async stop() {
+    log6("stopping...", void 0, {
+      F: __dxlog_file7,
+      L: 215,
+      S: this,
+      C: (f, a) => f(...a)
+    });
+    await this._ctx.dispose();
+    await this._pipeline.stop();
+    await this._saveTargetTimeframe(this._pipeline.state.timeframe);
+    log6("stopped", void 0, {
+      F: __dxlog_file7,
+      L: 219,
+      S: this,
+      C: (f, a) => f(...a)
+    });
+  }
+  async _saveTargetTimeframe(timeframe) {
+    try {
+      const newTimeframe = Timeframe3.merge(this._targetTimeframe ?? new Timeframe3(), timeframe);
+      await this._metadata.setSpaceControlLatestTimeframe(this._spaceKey, newTimeframe);
+      this._targetTimeframe = newTimeframe;
+    } catch (err) {
+      log6(err, void 0, {
+        F: __dxlog_file7,
+        L: 228,
+        S: this,
+        C: (f, a) => f(...a)
       });
     }
-    return false;
   }
-  /**
-  * Called by AutomergeStorageAdapter after levelDB batch commit.
-  */
-  async _afterSave(path) {
-    this._indexMetadataStore.notifyMarkedDirty();
-    const documentId = path[0];
-    const document = this._repo.handles[documentId]?.docSync();
-    if (document) {
-      const heads = getHeads(document);
-      this._onHeadsChanged(documentId, heads);
-    }
-  }
-  _automergePeers() {
-    return this._repo.peers;
+};
+_ts_decorate3([
+  trace.metricsCounter()
+], ControlPipeline.prototype, "_usage", void 0);
+_ts_decorate3([
+  trace.metricsCounter()
+], ControlPipeline.prototype, "_mutations", void 0);
+_ts_decorate3([
+  trace.span({
+    showInBrowserTimeline: true
+  })
+], ControlPipeline.prototype, "start", null);
+_ts_decorate3([
+  trace.span()
+], ControlPipeline.prototype, "_consumePipeline", null);
+_ts_decorate3([
+  trace.span()
+], ControlPipeline.prototype, "_processMessage", null);
+ControlPipeline = _ts_decorate3([
+  trace.resource(),
+  trackLeaks("start", "stop")
+], ControlPipeline);
+
+// packages/core/echo/echo-pipeline/src/space/space.ts
+function _ts_decorate4(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
+    r = Reflect.decorate(decorators, target, key, desc);
+  else
+    for (var i = decorators.length - 1; i >= 0; i--)
+      if (d = decorators[i])
+        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+var __dxlog_file8 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/space.ts";
+var Space = class extends Resource3 {
+  constructor(params) {
+    super();
+    this.onCredentialProcessed = new Callback2();
+    this.stateUpdate = new Event4();
+    invariant6(params.spaceKey && params.feedProvider, void 0, {
+      F: __dxlog_file8,
+      L: 76,
+      S: this,
+      A: [
+        "params.spaceKey && params.feedProvider",
+        ""
+      ]
+    });
+    this._id = params.id;
+    this._key = params.spaceKey;
+    this._genesisFeedKey = params.genesisFeed.key;
+    this._feedProvider = params.feedProvider;
+    this._snapshotManager = params.snapshotManager;
+    this._controlPipeline = new ControlPipeline({
+      spaceKey: params.spaceKey,
+      genesisFeed: params.genesisFeed,
+      feedProvider: params.feedProvider,
+      metadataStore: params.metadataStore
+    });
+    this._controlPipeline.onFeedAdmitted.set(async (info) => {
+      const sparse = info.assertion.designation === AdmittedFeed2.Designation.DATA;
+      if (!info.key.equals(params.genesisFeed.key)) {
+        scheduleMicroTask(this._ctx, async () => {
+          await this.protocol.addFeed(await params.feedProvider(info.key, {
+            sparse
+          }));
+        });
+      }
+    });
+    this._controlPipeline.onCredentialProcessed.set(async (credential) => {
+      await this.onCredentialProcessed.callIfSet(credential);
+      log7("onCredentialProcessed", {
+        credential
+      }, {
+        F: __dxlog_file8,
+        L: 104,
+        S: this,
+        C: (f, a) => f(...a)
+      });
+      this.stateUpdate.emit();
+    });
+    this._controlPipeline.onDelegatedInvitation.set(async (invitation) => {
+      log7("onDelegatedInvitation", {
+        invitation
+      }, {
+        F: __dxlog_file8,
+        L: 108,
+        S: this,
+        C: (f, a) => f(...a)
+      });
+      await params.onDelegatedInvitationStatusChange(invitation, true);
+    });
+    this._controlPipeline.onDelegatedInvitationRemoved.set(async (invitation) => {
+      log7("onDelegatedInvitationRemoved", {
+        invitation
+      }, {
+        F: __dxlog_file8,
+        L: 112,
+        S: this,
+        C: (f, a) => f(...a)
+      });
+      await params.onDelegatedInvitationStatusChange(invitation, false);
+    });
+    this._controlPipeline.onMemberRoleChanged.set(async (changedMembers) => {
+      log7("onMemberRoleChanged", () => ({
+        changedMembers: changedMembers.map((m) => [
+          m.key,
+          m.role
+        ])
+      }), {
+        F: __dxlog_file8,
+        L: 116,
+        S: this,
+        C: (f, a) => f(...a)
+      });
+      await params.onMemberRolesChanged(changedMembers);
+    });
+    this.protocol = params.protocol;
   }
-  async _getContainingSpaceForDocument(documentId) {
-    const doc = this._repo.handles[documentId]?.docSync();
-    if (!doc) {
-      return null;
-    }
-    const spaceKeyHex = getSpaceKeyFromDoc(doc);
-    if (!spaceKeyHex) {
-      return null;
-    }
-    return PublicKey2.from(spaceKeyHex);
+  get id() {
+    return this._id;
   }
-  /**
-  * Flush documents to disk.
-  */
-  async flush({ documentIds } = {}) {
-    await this._repo.flush(documentIds);
+  get key() {
+    return this._key;
   }
-  async getHeads(documentIds) {
-    const result = [];
-    const storeRequestIds = [];
-    const storeResultIndices = [];
-    for (const documentId of documentIds) {
-      const doc = this._repo.handles[documentId]?.docSync();
-      if (doc) {
-        result.push(getHeads(doc));
-      } else {
-        storeRequestIds.push(documentId);
-        storeResultIndices.push(result.length);
-        result.push(void 0);
-      }
-    }
-    if (storeRequestIds.length > 0) {
-      const storedHeads = await this._headsStore.getHeads(storeRequestIds);
-      for (let i = 0; i < storedHeads.length; i++) {
-        result[storeResultIndices[i]] = storedHeads[i];
-      }
-    }
-    return result;
+  get isOpen() {
+    return this._lifecycleState === LifecycleState.OPEN;
   }
-  //
-  // Collection sync.
-  //
-  getLocalCollectionState(collectionId) {
-    return this._collectionSynchronizer.getLocalCollectionState(collectionId);
+  get genesisFeedKey() {
+    return this._genesisFeedKey;
   }
-  getRemoteCollectionStates(collectionId) {
-    return this._collectionSynchronizer.getRemoteCollectionStates(collectionId);
+  get controlFeedKey() {
+    return this._controlFeed?.key;
   }
-  refreshCollection(collectionId) {
-    this._collectionSynchronizer.refreshCollection(collectionId);
+  get dataFeedKey() {
+    return this._dataFeed?.key;
   }
-  async getCollectionSyncState(collectionId) {
-    const result = {
-      peers: []
-    };
-    const localState = this.getLocalCollectionState(collectionId);
-    const remoteState = this.getRemoteCollectionStates(collectionId);
-    if (!localState) {
-      return result;
-    }
-    for (const [peerId, state] of remoteState) {
-      const diff = diffCollectionState(localState, state);
-      result.peers.push({
-        peerId,
-        differentDocuments: diff.different.length
-      });
-    }
-    return result;
+  get spaceState() {
+    return this._controlPipeline.spaceState;
   }
   /**
-  * Update the local collection state based on the locally stored document heads.
+  * @test-only
   */
-  async updateLocalCollectionState(collectionId, documentIds) {
-    const heads = await this.getHeads(documentIds);
-    const documents = Object.fromEntries(heads.map((heads2, index) => [
-      documentIds[index],
-      heads2 ?? []
-    ]));
-    this._collectionSynchronizer.setLocalCollectionState(collectionId, {
-      documents
-    });
-  }
-  _onCollectionStateQueried(collectionId, peerId) {
-    this._collectionSynchronizer.onCollectionStateQueried(collectionId, peerId);
-  }
-  _onCollectionStateReceived(collectionId, peerId, state) {
-    this._collectionSynchronizer.onRemoteStateReceived(collectionId, peerId, decodeCollectionState(state));
+  get controlPipeline() {
+    return this._controlPipeline.pipeline;
   }
-  _queryCollectionState(collectionId, peerId) {
-    this._echoNetworkAdapter.queryCollectionState(collectionId, peerId);
+  get snapshotManager() {
+    return this._snapshotManager;
   }
-  _sendCollectionState(collectionId, peerId, state) {
-    this._echoNetworkAdapter.sendCollectionState(collectionId, peerId, encodeCollectionState(state));
+  async setControlFeed(feed) {
+    invariant6(!this._controlFeed, "Control feed already set.", {
+      F: __dxlog_file8,
+      L: 168,
+      S: this,
+      A: [
+        "!this._controlFeed",
+        "'Control feed already set.'"
+      ]
+    });
+    this._controlFeed = feed;
+    await this._controlPipeline.setWriteFeed(feed);
+    return this;
   }
-  _onPeerConnected(peerId) {
-    this._collectionSynchronizer.onConnectionOpen(peerId);
+  async setDataFeed(feed) {
+    invariant6(!this._dataFeed, "Data feed already set.", {
+      F: __dxlog_file8,
+      L: 175,
+      S: this,
+      A: [
+        "!this._dataFeed",
+        "'Data feed already set.'"
+      ]
+    });
+    this._dataFeed = feed;
+    return this;
   }
-  _onPeerDisconnected(peerId) {
-    this._collectionSynchronizer.onConnectionClosed(peerId);
+  /**
+  * Use for diagnostics.
+  */
+  getControlFeeds() {
+    return Array.from(this._controlPipeline.spaceState.feeds.values());
   }
-  _onRemoteCollectionStateUpdated(collectionId, peerId) {
-    const localState = this._collectionSynchronizer.getLocalCollectionState(collectionId);
-    const remoteState = this._collectionSynchronizer.getRemoteCollectionStates(collectionId).get(peerId);
-    if (!localState || !remoteState) {
-      return;
-    }
-    const { different } = diffCollectionState(localState, remoteState);
-    if (different.length === 0) {
-      return;
-    }
-    log3.info("replication documents after collection sync", {
-      count: different.length
-    }, {
-      F: __dxlog_file4,
-      L: 463,
+  async _open(ctx) {
+    log7("opening...", void 0, {
+      F: __dxlog_file8,
+      L: 189,
+      S: this,
+      C: (f, a) => f(...a)
+    });
+    await this._controlPipeline.start();
+    await this.protocol.start();
+    await this.protocol.addFeed(await this._feedProvider(this._genesisFeedKey));
+    log7("opened", void 0, {
+      F: __dxlog_file8,
+      L: 196,
       S: this,
       C: (f, a) => f(...a)
     });
-    for (const documentId of different) {
-      this._repo.find(documentId);
-    }
-  }
-  _onHeadsChanged(documentId, heads) {
-    for (const collectionId of this._collectionSynchronizer.getRegisteredCollectionIds()) {
-      const state = this._collectionSynchronizer.getLocalCollectionState(collectionId);
-      if (state?.documents[documentId]) {
-        const newState = structuredClone(state);
-        newState.documents[documentId] = heads;
-        this._collectionSynchronizer.setLocalCollectionState(collectionId, newState);
-      }
-    }
   }
-};
-_ts_decorate2([
-  trace.info()
-], AutomergeHost.prototype, "_peerId", void 0);
-_ts_decorate2([
-  trace.info({
-    depth: null
-  })
-], AutomergeHost.prototype, "_automergePeers", null);
-_ts_decorate2([
-  trace.span({
-    showInBrowserTimeline: true
-  })
-], AutomergeHost.prototype, "flush", null);
-AutomergeHost = _ts_decorate2([
-  trace.resource()
-], AutomergeHost);
-var getSpaceKeyFromDoc = (doc) => {
-  const rawSpaceKey = doc.access?.spaceKey ?? doc.experimental_spaceKey;
-  if (rawSpaceKey == null) {
-    return null;
+  async _close() {
+    log7("closing...", {
+      key: this._key
+    }, {
+      F: __dxlog_file8,
+      L: 201,
+      S: this,
+      C: (f, a) => f(...a)
+    });
+    await this.protocol.stop();
+    await this._controlPipeline.stop();
+    log7("closed", void 0, {
+      F: __dxlog_file8,
+      L: 207,
+      S: this,
+      C: (f, a) => f(...a)
+    });
   }
-  return String(rawSpaceKey);
-};
-var waitForHeads = async (handle, heads) => {
-  const unavailableHeads = new Set(heads);
-  await handle.whenReady();
-  await Event2.wrap(handle, "change").waitForCondition(() => {
-    for (const changeHash of unavailableHeads.values()) {
-      if (changeIsPresentInDoc(handle.docSync(), changeHash)) {
-        unavailableHeads.delete(changeHash);
-      }
-    }
-    return unavailableHeads.size === 0;
-  });
-};
-var changeIsPresentInDoc = (doc, changeHash) => {
-  return !!getBackend(doc).getChangeByHash(changeHash);
-};
-var decodeCollectionState = (state) => {
-  invariant4(typeof state === "object" && state !== null, "Invalid state", {
-    F: __dxlog_file4,
-    L: 516,
-    S: void 0,
-    A: [
-      "typeof state === 'object' && state !== null",
-      "'Invalid state'"
-    ]
-  });
-  return state;
-};
-var encodeCollectionState = (state) => {
-  return state;
 };
-
-// packages/core/echo/echo-pipeline/src/automerge/space-collection.ts
-import { invariant as invariant5 } from "@dxos/invariant";
-import { SpaceId } from "@dxos/keys";
-var __dxlog_file5 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/space-collection.ts";
-var deriveCollectionIdFromSpaceId = (spaceId) => `space:${spaceId}`;
-var getSpaceIdFromCollectionId = (collectionId) => {
-  const spaceId = collectionId.replace(/^space:/, "");
-  invariant5(SpaceId.isValid(spaceId), void 0, {
-    F: __dxlog_file5,
-    L: 12,
-    S: void 0,
-    A: [
-      "SpaceId.isValid(spaceId)",
-      ""
-    ]
-  });
+_ts_decorate4([
+  trace2.info()
+], Space.prototype, "protocol", void 0);
+_ts_decorate4([
+  trace2.info()
+], Space.prototype, "_controlPipeline", void 0);
+_ts_decorate4([
+  logInfo,
+  trace2.info()
+], Space.prototype, "id", null);
+_ts_decorate4([
+  logInfo,
+  trace2.info()
+], Space.prototype, "key", null);
+_ts_decorate4([
+  trace2.span()
+], Space.prototype, "_open", null);
+_ts_decorate4([
+  synchronized2
+], Space.prototype, "_close", null);
+Space = _ts_decorate4([
+  trackLeaks2("open", "close"),
+  trace2.resource()
+], Space);
+var SPACE_IDS_CACHE = new ComplexMap2(PublicKey4.hash);
+var createIdFromSpaceKey = async (spaceKey) => {
+  const cachedValue = SPACE_IDS_CACHE.get(spaceKey);
+  if (cachedValue !== void 0) {
+    return cachedValue;
+  }
+  const digest = await subtleCrypto2.digest("SHA-256", spaceKey.asUint8Array());
+  const bytes = new Uint8Array(digest).slice(0, SpaceId.byteLength);
+  const spaceId = SpaceId.encode(bytes);
+  SPACE_IDS_CACHE.set(spaceKey, spaceId);
   return spaceId;
 };
 
-// packages/core/echo/echo-pipeline/src/space/auth.ts
-import { runInContext, scheduleTask as scheduleTask2 } from "@dxos/async";
-import { Context as Context2 } from "@dxos/context";
-import { randomBytes } from "@dxos/crypto";
-import { invariant as invariant6 } from "@dxos/invariant";
-import { log as log4 } from "@dxos/log";
-import { schema as schema4 } from "@dxos/protocols";
-import { RpcExtension } from "@dxos/teleport";
-var __dxlog_file6 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/auth.ts";
-var AuthExtension = class extends RpcExtension {
-  constructor(_authParams) {
+// packages/core/echo/echo-pipeline/src/space/admission-discovery-extension.ts
+import { scheduleTask as scheduleTask3 } from "@dxos/async";
+import { Context as Context4 } from "@dxos/context";
+import { ProtocolError, schema as schema5 } from "@dxos/protocols";
+import { RpcExtension as RpcExtension2 } from "@dxos/teleport";
+var __dxlog_file9 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/admission-discovery-extension.ts";
+var CredentialRetrieverExtension = class extends RpcExtension2 {
+  constructor(_request, _onResult) {
     super({
       requested: {
-        AuthService: schema4.getService("dxos.mesh.teleport.auth.AuthService")
-      },
-      exposed: {
-        AuthService: schema4.getService("dxos.mesh.teleport.auth.AuthService")
-      },
-      timeout: 60 * 1e3
-    });
-    this._authParams = _authParams;
-    this._ctx = new Context2({
-      onError: (err) => {
-        log4.catch(err, void 0, {
-          F: __dxlog_file6,
-          L: 28,
-          S: this,
-          C: (f, a) => f(...a)
-        });
+        AdmissionDiscoveryService: schema5.getService("dxos.mesh.teleport.AdmissionDiscoveryService")
       }
-    }, {
-      F: __dxlog_file6,
-      L: 26
+    });
+    this._request = _request;
+    this._onResult = _onResult;
+    this._ctx = new Context4(void 0, {
+      F: __dxlog_file9,
+      L: 25
     });
   }
   async getHandlers() {
-    return {
-      AuthService: {
-        authenticate: async ({ challenge }) => {
-          try {
-            const credential = await this._authParams.provider(challenge);
-            if (!credential) {
-              throw new Error("auth rejected");
-            }
-            return {
-              credential
-            };
-          } catch (err) {
-            log4.error("failed to generate auth credentials", err, {
-              F: __dxlog_file6,
-              L: 55,
-              S: this,
-              C: (f, a) => f(...a)
-            });
-            throw new Error("auth rejected");
-          }
-        }
-      }
-    };
+    return {};
   }
   async onOpen(context) {
     await super.onOpen(context);
-    scheduleTask2(this._ctx, async () => {
+    scheduleTask3(this._ctx, async () => {
       try {
-        const challenge = randomBytes(32);
-        const { credential } = await this.rpc.AuthService.authenticate({
-          challenge
-        });
-        invariant6(credential?.length > 0, "invalid credential", {
-          F: __dxlog_file6,
-          L: 69,
-          S: this,
-          A: [
-            "credential?.length > 0",
-            "'invalid credential'"
-          ]
-        });
-        const success = await this._authParams.verifier(challenge, credential);
-        invariant6(success, "credential not verified", {
-          F: __dxlog_file6,
-          L: 71,
-          S: this,
-          A: [
-            "success",
-            "'credential not verified'"
-          ]
-        });
-        runInContext(this._ctx, () => this._authParams.onAuthSuccess());
+        const result = await this.rpc.AdmissionDiscoveryService.getAdmissionCredential(this._request);
+        this._onResult.wake(result.admissionCredential);
       } catch (err) {
-        log4("auth failed", err, {
-          F: __dxlog_file6,
-          L: 74,
-          S: this,
-          C: (f, a) => f(...a)
-        });
-        this.close();
-        this._authParams.onAuthFailure();
+        context.close(err);
       }
     });
   }
   async onClose() {
     await this._ctx.dispose();
-    await super.onClose();
   }
   async onAbort() {
     await this._ctx.dispose();
-    await super.onAbort();
+  }
+};
+var CredentialServerExtension = class extends RpcExtension2 {
+  constructor(_space) {
+    super({
+      exposed: {
+        AdmissionDiscoveryService: schema5.getService("dxos.mesh.teleport.AdmissionDiscoveryService")
+      }
+    });
+    this._space = _space;
+  }
+  async getHandlers() {
+    return {
+      AdmissionDiscoveryService: {
+        getAdmissionCredential: async (request) => {
+          const memberInfo = this._space.spaceState.members.get(request.memberKey);
+          if (!memberInfo?.credential) {
+            throw new ProtocolError("Space member not found.", request);
+          }
+          return {
+            admissionCredential: memberInfo.credential
+          };
+        }
+      }
+    };
   }
 };
 
-// packages/core/echo/echo-pipeline/src/pipeline/timeframe-clock.ts
-import { Event as Event3 } from "@dxos/async";
-import { timed } from "@dxos/debug";
-import { log as log5 } from "@dxos/log";
-import { Timeframe } from "@dxos/timeframe";
-function _ts_decorate3(decorators, target, key, desc) {
+// packages/core/echo/echo-pipeline/src/space/space-protocol.ts
+import { discoveryKey, subtleCrypto as subtleCrypto3 } from "@dxos/crypto";
+import { PublicKey as PublicKey5 } from "@dxos/keys";
+import { log as log8, logInfo as logInfo2 } from "@dxos/log";
+import { MMSTTopology } from "@dxos/network-manager";
+import { Teleport } from "@dxos/teleport";
+import { BlobSync } from "@dxos/teleport-extension-object-sync";
+import { ReplicatorExtension } from "@dxos/teleport-extension-replicator";
+import { trace as trace3 } from "@dxos/tracing";
+import { CallbackCollection, ComplexMap as ComplexMap3 } from "@dxos/util";
+function _ts_decorate5(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
     r = Reflect.decorate(decorators, target, key, desc);
@@ -1521,575 +1706,726 @@ function _ts_decorate3(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file7 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/pipeline/timeframe-clock.ts";
-var mapTimeframeToFeedIndexes = (timeframe) => timeframe.frames().map(([feedKey, index]) => ({
-  feedKey,
-  index
-}));
-var mapFeedIndexesToTimeframe = (indexes) => new Timeframe(indexes.map(({ feedKey, index }) => [
-  feedKey,
-  index
-]));
-var startAfter = (timeframe) => timeframe.frames().map(([feedKey, index]) => ({
-  feedKey,
-  index: index + 1
-}));
-var TimeframeClock = class {
-  constructor(_timeframe = new Timeframe()) {
-    this._timeframe = _timeframe;
-    this.update = new Event3();
-    this._pendingTimeframe = _timeframe;
-  }
-  /**
-  * Timeframe that was processed by ECHO.
-  */
-  get timeframe() {
-    return this._timeframe;
-  }
-  /**
-  * Timeframe that is currently being processed by ECHO.
-  * Will be equal to `timeframe` after the processing is complete.
-  */
-  get pendingTimeframe() {
-    return this._pendingTimeframe;
-  }
-  setTimeframe(timeframe) {
-    this._timeframe = timeframe;
-    this._pendingTimeframe = timeframe;
-    this.update.emit(this._timeframe);
+var __dxlog_file10 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/space-protocol.ts";
+var MOCK_AUTH_PROVIDER = async (nonce) => Buffer.from("mock");
+var MOCK_AUTH_VERIFIER = async (nonce, credential) => true;
+var SpaceProtocol = class {
+  constructor({ topic, swarmIdentity, networkManager, onSessionAuth, onAuthFailure, blobStore, disableP2pReplication }) {
+    this._feeds = /* @__PURE__ */ new Set();
+    this._sessions = new ComplexMap3(PublicKey5.hash);
+    // TODO(burdon): Move to config (with sensible defaults).
+    this._topology = new MMSTTopology({
+      originateConnections: 4,
+      maxPeers: 10,
+      sampleSize: 20
+    });
+    this.feedAdded = new CallbackCollection();
+    this._spaceKey = topic;
+    this._networkManager = networkManager;
+    this._swarmIdentity = swarmIdentity;
+    this._onSessionAuth = onSessionAuth;
+    this._onAuthFailure = onAuthFailure;
+    this.blobSync = new BlobSync({
+      blobStore
+    });
+    this._topic = subtleCrypto3.digest("SHA-256", topic.asBuffer()).then(discoveryKey).then(PublicKey5.from);
+    this._disableP2pReplication = disableP2pReplication ?? false;
   }
-  updatePendingTimeframe(key, seq) {
-    this._pendingTimeframe = Timeframe.merge(this._pendingTimeframe, new Timeframe([
-      [
-        key,
-        seq
-      ]
-    ]));
+  get sessions() {
+    return this._sessions;
   }
-  updateTimeframe() {
-    this._timeframe = this._pendingTimeframe;
-    this.update.emit(this._timeframe);
+  get feeds() {
+    return this._feeds;
   }
-  hasGaps(timeframe) {
-    const gaps = Timeframe.dependencies(timeframe, this._timeframe);
-    return !gaps.isEmpty();
+  get _ownPeerKey() {
+    return this._swarmIdentity.peerKey;
   }
-  async waitUntilReached(target) {
-    log5("waitUntilReached", {
-      target,
-      current: this._timeframe
+  // TODO(burdon): Create abstraction for Space (e.g., add keys and have provider).
+  async addFeed(feed) {
+    log8("addFeed", {
+      key: feed.key
     }, {
-      F: __dxlog_file7,
-      L: 70,
+      F: __dxlog_file10,
+      L: 127,
       S: this,
       C: (f, a) => f(...a)
     });
-    await this.update.waitForCondition(() => {
-      log5("check if reached", {
-        target,
-        current: this._timeframe,
-        deps: Timeframe.dependencies(target, this._timeframe)
-      }, {
-        F: __dxlog_file7,
-        L: 72,
-        S: this,
-        C: (f, a) => f(...a)
-      });
-      return Timeframe.dependencies(target, this._timeframe).isEmpty();
-    });
+    this._feeds.add(feed);
+    for (const session of this._sessions.values()) {
+      session.replicator.addFeed(feed);
+    }
+    await this.feedAdded.callSerial(feed);
   }
-};
-_ts_decorate3([
-  timed(5e3)
-], TimeframeClock.prototype, "waitUntilReached", null);
-
-// packages/core/echo/echo-pipeline/src/pipeline/pipeline.ts
-import { Event as Event4, sleepWithContext, synchronized as synchronized2, Trigger as Trigger2 } from "@dxos/async";
-import { Context as Context3, rejectOnDispose } from "@dxos/context";
-import { failUndefined } from "@dxos/debug";
-import { FeedSetIterator } from "@dxos/feed-store";
-import { invariant as invariant8 } from "@dxos/invariant";
-import { PublicKey as PublicKey3 } from "@dxos/keys";
-import { log as log7 } from "@dxos/log";
-import { Timeframe as Timeframe2 } from "@dxos/timeframe";
-import { ComplexMap } from "@dxos/util";
-
-// packages/core/echo/echo-pipeline/src/pipeline/message-selector.ts
-import { invariant as invariant7 } from "@dxos/invariant";
-import { log as log6 } from "@dxos/log";
-var __dxlog_file8 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/pipeline/message-selector.ts";
-var createMessageSelector = (timeframeClock) => {
-  return (messages) => {
-    for (let i = 0; i < messages.length; i++) {
-      const { data: { timeframe } } = messages[i];
-      invariant7(timeframe, void 0, {
-        F: __dxlog_file8,
-        L: 25,
-        S: void 0,
-        A: [
-          "timeframe",
-          ""
-        ]
-      });
-      if (!timeframeClock.hasGaps(timeframe)) {
-        return i;
-      }
+  // TODO(burdon): Rename open? Common open/close interfaces for all services?
+  async start() {
+    if (this._connection) {
+      return;
     }
-    log6("Skipping...", void 0, {
-      F: __dxlog_file8,
-      L: 33,
-      S: void 0,
+    const credentials = await this._swarmIdentity.credentialProvider(Buffer.from(""));
+    await this.blobSync.open();
+    log8("starting...", void 0, {
+      F: __dxlog_file10,
+      L: 148,
+      S: this,
       C: (f, a) => f(...a)
     });
-  };
-};
-
-// packages/core/echo/echo-pipeline/src/pipeline/pipeline.ts
-function _ts_decorate4(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
-    r = Reflect.decorate(decorators, target, key, desc);
-  else
-    for (var i = decorators.length - 1; i >= 0; i--)
-      if (d = decorators[i])
-        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-var __dxlog_file9 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/pipeline/pipeline.ts";
-var PipelineState = class {
-  constructor(_feeds, _timeframeClock) {
-    this._feeds = _feeds;
-    this._timeframeClock = _timeframeClock;
-    this._ctx = new Context3(void 0, {
-      F: __dxlog_file9,
-      L: 41
+    const topic = await this._topic;
+    this._connection = await this._networkManager.joinSwarm({
+      protocolProvider: this._createProtocolProvider(credentials),
+      peerId: this._swarmIdentity.peerKey,
+      topic,
+      topology: this._topology,
+      label: `swarm ${topic.truncate()} for space ${this._spaceKey.truncate()}`
+    });
+    log8("started", void 0, {
+      F: __dxlog_file10,
+      L: 158,
+      S: this,
+      C: (f, a) => f(...a)
     });
-    this.timeframeUpdate = this._timeframeClock.update;
-    this.stalled = new Event4();
-    this._startTimeframe = new Timeframe2();
-    this._reachedTarget = false;
   }
-  /**
-  * Latest theoretical timeframe based on the last mutation in each feed.
-  * NOTE: This might never be reached if the mutation dependencies
-  */
-  // TODO(dmaretskyi): Rename `totalTimeframe`? or `lastTimeframe`.
-  get endTimeframe() {
-    return mapFeedIndexesToTimeframe(Array.from(this._feeds.values()).filter((feed) => feed.length > 0).map((feed) => ({
-      feedKey: feed.key,
-      index: feed.length - 1
-    })));
+  updateTopology() {
+    this._topology.forceUpdate();
   }
-  get startTimeframe() {
-    return this._startTimeframe;
+  async stop() {
+    await this.blobSync.close();
+    if (this._connection) {
+      log8("stopping...", void 0, {
+        F: __dxlog_file10,
+        L: 169,
+        S: this,
+        C: (f, a) => f(...a)
+      });
+      await this._connection.close();
+      log8("stopped", void 0, {
+        F: __dxlog_file10,
+        L: 171,
+        S: this,
+        C: (f, a) => f(...a)
+      });
+    }
   }
-  get timeframe() {
-    return this._timeframeClock.timeframe;
+  _createProtocolProvider(credentials) {
+    return (wireParams) => {
+      const session = new SpaceProtocolSession({
+        wireParams,
+        swarmIdentity: this._swarmIdentity,
+        onSessionAuth: this._onSessionAuth,
+        onAuthFailure: this._onAuthFailure,
+        blobSync: this.blobSync,
+        disableP2pReplication: this._disableP2pReplication
+      });
+      this._sessions.set(wireParams.remotePeerId, session);
+      for (const feed of this._feeds) {
+        session.replicator.addFeed(feed);
+      }
+      return session;
+    };
   }
-  get pendingTimeframe() {
-    return this._timeframeClock.pendingTimeframe;
+};
+_ts_decorate5([
+  logInfo2,
+  trace3.info()
+], SpaceProtocol.prototype, "_topic", void 0);
+_ts_decorate5([
+  trace3.info()
+], SpaceProtocol.prototype, "_spaceKey", void 0);
+_ts_decorate5([
+  logInfo2
+], SpaceProtocol.prototype, "_ownPeerKey", null);
+SpaceProtocol = _ts_decorate5([
+  trace3.resource()
+], SpaceProtocol);
+var AuthStatus;
+(function(AuthStatus2) {
+  AuthStatus2["INITIAL"] = "INITIAL";
+  AuthStatus2["SUCCESS"] = "SUCCESS";
+  AuthStatus2["FAILURE"] = "FAILURE";
+})(AuthStatus || (AuthStatus = {}));
+var SpaceProtocolSession = class {
+  // TODO(dmaretskyi): Allow to pass in extra extensions.
+  constructor({ wireParams, swarmIdentity, onSessionAuth, onAuthFailure, blobSync, disableP2pReplication }) {
+    // TODO(dmaretskyi): Start with upload=false when switching it on the fly works.
+    this.replicator = new ReplicatorExtension().setOptions({
+      upload: true
+    });
+    this._authStatus = "INITIAL";
+    this._wireParams = wireParams;
+    this._swarmIdentity = swarmIdentity;
+    this._onSessionAuth = onSessionAuth;
+    this._onAuthFailure = onAuthFailure;
+    this._blobSync = blobSync;
+    this._teleport = new Teleport(wireParams);
+    this._disableP2pReplication = disableP2pReplication ?? false;
   }
-  get targetTimeframe() {
-    return this._targetTimeframe ? this._targetTimeframe : new Timeframe2();
+  get authStatus() {
+    return this._authStatus;
   }
-  get reachedTarget() {
-    return this._reachedTarget;
+  get stats() {
+    return this._teleport.stats;
   }
-  get feeds() {
-    return Array.from(this._feeds.values());
-  }
-  async waitUntilTimeframe(target) {
-    await this._timeframeClock.waitUntilReached(target);
+  get stream() {
+    return this._teleport.stream;
   }
-  setTargetTimeframe(target) {
-    this._targetTimeframe = target;
+  async open(sessionId) {
+    await this._teleport.open(sessionId);
+    this._teleport.addExtension("dxos.mesh.teleport.auth", new AuthExtension({
+      provider: this._swarmIdentity.credentialProvider,
+      verifier: this._swarmIdentity.credentialAuthenticator,
+      onAuthSuccess: () => {
+        log8("Peer authenticated", void 0, {
+          F: __dxlog_file10,
+          L: 282,
+          S: this,
+          C: (f, a) => f(...a)
+        });
+        this._authStatus = "SUCCESS";
+        this._onSessionAuth?.(this._teleport);
+      },
+      onAuthFailure: () => {
+        this._authStatus = "FAILURE";
+        this._onAuthFailure?.(this._teleport);
+      }
+    }));
+    if (!this._disableP2pReplication) {
+      this._teleport.addExtension("dxos.mesh.teleport.replicator", this.replicator);
+    }
+    this._teleport.addExtension("dxos.mesh.teleport.blobsync", this._blobSync.createExtension());
   }
-  /**
-  * Wait until the pipeline processes all messages in the feed and reaches the target timeframe if that is set.
-  *
-  * This function will resolve immediately if the pipeline is stalled.
-  *
-  * @param timeout Timeout in milliseconds to specify the maximum wait time.
-  */
-  async waitUntilReachedTargetTimeframe({ ctx = new Context3(void 0, {
-    F: __dxlog_file9,
-    L: 129
-  }), timeout, breakOnStall = true } = {}) {
-    log7("waitUntilReachedTargetTimeframe", {
-      timeout,
-      current: this.timeframe,
-      target: this.targetTimeframe
-    }, {
-      F: __dxlog_file9,
-      L: 133,
+  async close() {
+    log8("close", void 0, {
+      F: __dxlog_file10,
+      L: 301,
       S: this,
       C: (f, a) => f(...a)
     });
-    this._reachedTargetPromise ??= Promise.race([
-      this._timeframeClock.update.waitForCondition(() => {
-        return Timeframe2.dependencies(this.targetTimeframe, this.timeframe).isEmpty();
-      }),
-      ...breakOnStall ? [
-        this.stalled.discardParameter().waitForCount(1)
-      ] : []
-    ]);
-    let done = false;
-    if (timeout) {
-      return Promise.race([
-        rejectOnDispose(ctx),
-        rejectOnDispose(this._ctx),
-        this._reachedTargetPromise.then(() => {
-          done = true;
-          this._reachedTarget = true;
-        }),
-        sleepWithContext(this._ctx, timeout).then(() => {
-          if (done) {
-            return;
-          }
-          log7.warn("waitUntilReachedTargetTimeframe timed out", {
-            timeout,
-            current: this.timeframe,
-            target: this.targetTimeframe,
-            dependencies: Timeframe2.dependencies(this.targetTimeframe, this.timeframe)
-          }, {
-            F: __dxlog_file9,
-            L: 161,
-            S: this,
-            C: (f, a) => f(...a)
-          });
-        })
-      ]);
-    } else {
-      return this._reachedTargetPromise;
-    }
+    await this._teleport.close();
+  }
+  async abort() {
+    await this._teleport.abort();
   }
 };
-var Pipeline = class {
-  constructor() {
-    this._timeframeClock = new TimeframeClock(new Timeframe2());
-    this._feeds = new ComplexMap(PublicKey3.hash);
-    // External state accessor.
-    this._state = new PipelineState(this._feeds, this._timeframeClock);
-    // Waits for the message consumer to process the message and yield control back to the pipeline.
-    this._processingTrigger = new Trigger2().wake();
-    this._pauseTrigger = new Trigger2().wake();
-    // Pending downloads.
-    this._downloads = new ComplexMap((value) => PublicKey3.hash(value.key));
-    this._isStopping = false;
-    this._isStarted = false;
-    this._isBeingConsumed = false;
-    this._isPaused = false;
+_ts_decorate5([
+  logInfo2
+], SpaceProtocolSession.prototype, "_wireParams", void 0);
+_ts_decorate5([
+  logInfo2
+], SpaceProtocolSession.prototype, "authStatus", null);
+
+// packages/core/echo/echo-pipeline/src/space/space-manager.ts
+import { synchronized as synchronized4, trackLeaks as trackLeaks3, Trigger as Trigger3 } from "@dxos/async";
+import { failUndefined as failUndefined2 } from "@dxos/debug";
+import { PublicKey as PublicKey8 } from "@dxos/keys";
+import { log as log14 } from "@dxos/log";
+import { trace as trace6 } from "@dxos/protocols";
+import { ComplexMap as ComplexMap4 } from "@dxos/util";
+
+// packages/core/echo/echo-pipeline/src/db-host/data-service.ts
+import { Stream } from "@dxos/codec-protobuf";
+import { invariant as invariant12 } from "@dxos/invariant";
+import { SpaceId as SpaceId3 } from "@dxos/keys";
+import { log as log13 } from "@dxos/log";
+
+// packages/core/echo/echo-pipeline/src/automerge/automerge-host.ts
+import { Event as Event5, asyncTimeout } from "@dxos/async";
+import { getBackend, getHeads, isAutomerge, equals as headsEquals, save } from "@dxos/automerge/automerge";
+import { Repo } from "@dxos/automerge/automerge-repo";
+import { Context as Context5, Resource as Resource5, cancelWithContext as cancelWithContext2 } from "@dxos/context";
+import { invariant as invariant8 } from "@dxos/invariant";
+import { PublicKey as PublicKey6 } from "@dxos/keys";
+import { log as log10 } from "@dxos/log";
+import { objectPointerCodec } from "@dxos/protocols";
+import { trace as trace4 } from "@dxos/tracing";
+
+// packages/core/echo/echo-pipeline/src/automerge/echo-network-adapter.ts
+import { synchronized as synchronized3, Trigger as Trigger2 } from "@dxos/async";
+import { NetworkAdapter } from "@dxos/automerge/automerge-repo";
+import { LifecycleState as LifecycleState2 } from "@dxos/context";
+import { invariant as invariant7 } from "@dxos/invariant";
+import { log as log9 } from "@dxos/log";
+import { nonNullable } from "@dxos/util";
+
+// packages/core/echo/echo-pipeline/src/automerge/network-protocol.ts
+import { MESSAGE_TYPE_COLLECTION_QUERY, MESSAGE_TYPE_COLLECTION_STATE } from "@dxos/protocols";
+var isCollectionQueryMessage = (message) => message.type === MESSAGE_TYPE_COLLECTION_QUERY;
+var isCollectionStateMessage = (message) => message.type === MESSAGE_TYPE_COLLECTION_STATE;
+
+// packages/core/echo/echo-pipeline/src/automerge/echo-network-adapter.ts
+function _ts_decorate6(decorators, target, key, desc) {
+  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
+    r = Reflect.decorate(decorators, target, key, desc);
+  else
+    for (var i = decorators.length - 1; i >= 0; i--)
+      if (d = decorators[i])
+        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+  return c > 3 && r && Object.defineProperty(target, key, r), r;
+}
+var __dxlog_file11 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/echo-network-adapter.ts";
+var EchoNetworkAdapter = class extends NetworkAdapter {
+  constructor(_params) {
+    super();
+    this._params = _params;
+    this._replicators = /* @__PURE__ */ new Set();
+    this._connections = /* @__PURE__ */ new Map();
+    this._lifecycleState = LifecycleState2.CLOSED;
+    this._connected = new Trigger2();
   }
-  get state() {
-    return this._state;
+  connect(peerId, peerMetadata) {
+    this.peerId = peerId;
+    this.peerMetadata = peerMetadata;
+    this._connected.wake();
   }
-  get writer() {
-    invariant8(this._writer, "Writer not set.", {
-      F: __dxlog_file9,
-      L: 243,
-      S: this,
-      A: [
-        "this._writer",
-        "'Writer not set.'"
-      ]
-    });
-    return this._writer;
+  send(message) {
+    this._send(message);
   }
-  hasFeed(feedKey) {
-    return this._feeds.has(feedKey);
+  disconnect() {
   }
-  getFeeds() {
-    return this._feedSetIterator.feeds;
+  async open() {
+    if (this._lifecycleState === LifecycleState2.OPEN) {
+      return;
+    }
+    this._lifecycleState = LifecycleState2.OPEN;
+    log9("emit ready", void 0, {
+      F: __dxlog_file11,
+      L: 81,
+      S: this,
+      C: (f, a) => f(...a)
+    });
+    this.emit("ready", {
+      network: this
+    });
   }
-  // NOTE: This cannot be synchronized with `stop` because stop waits for the mutation processing to complete,
-  // which might be opening feeds during the mutation processing, which w
-  async addFeed(feed) {
-    this._feeds.set(feed.key, feed);
-    if (this._feedSetIterator) {
-      await this._feedSetIterator.addFeed(feed);
+  async close() {
+    if (this._lifecycleState === LifecycleState2.CLOSED) {
+      return this;
     }
-    if (this._isStarted && !this._isPaused) {
-      this._setFeedDownloadState(feed);
+    for (const replicator of this._replicators) {
+      await replicator.disconnect();
     }
+    this._replicators.clear();
+    this._lifecycleState = LifecycleState2.CLOSED;
   }
-  setWriteFeed(feed) {
-    invariant8(!this._writer, "Writer already set.", {
-      F: __dxlog_file9,
-      L: 270,
+  async whenConnected() {
+    await this._connected.wait({
+      timeout: 1e4
+    });
+  }
+  async addReplicator(replicator) {
+    invariant7(this._lifecycleState === LifecycleState2.OPEN, void 0, {
+      F: __dxlog_file11,
+      L: 107,
       S: this,
       A: [
-        "!this._writer",
-        "'Writer already set.'"
+        "this._lifecycleState === LifecycleState.OPEN",
+        ""
       ]
     });
-    invariant8(feed.properties.writable, "Feed must be writable.", {
-      F: __dxlog_file9,
-      L: 271,
+    invariant7(this.peerId, void 0, {
+      F: __dxlog_file11,
+      L: 108,
       S: this,
       A: [
-        "feed.properties.writable",
-        "'Feed must be writable.'"
+        "this.peerId",
+        ""
       ]
     });
-    this._writer = createMappedFeedWriter((payload) => ({
-      timeframe: this._timeframeClock.timeframe,
-      payload
-    }), feed.createFeedWriter());
-  }
-  async start() {
-    invariant8(!this._isStarted, "Pipeline is already started.", {
-      F: __dxlog_file9,
-      L: 284,
+    invariant7(!this._replicators.has(replicator), void 0, {
+      F: __dxlog_file11,
+      L: 109,
       S: this,
       A: [
-        "!this._isStarted",
-        "'Pipeline is already started.'"
+        "!this._replicators.has(replicator)",
+        ""
       ]
     });
-    log7("starting...", void 0, {
-      F: __dxlog_file9,
-      L: 285,
+    this._replicators.add(replicator);
+    await replicator.connect({
+      peerId: this.peerId,
+      onConnectionOpen: this._onConnectionOpen.bind(this),
+      onConnectionClosed: this._onConnectionClosed.bind(this),
+      onConnectionAuthScopeChanged: this._onConnectionAuthScopeChanged.bind(this),
+      isDocumentInRemoteCollection: this._params.isDocumentInRemoteCollection,
+      getContainingSpaceForDocument: this._params.getContainingSpaceForDocument,
+      getContainingSpaceIdForDocument: async (documentId) => {
+        const key = await this._params.getContainingSpaceForDocument(documentId);
+        return key ? createIdFromSpaceKey(key) : null;
+      }
+    });
+  }
+  async removeReplicator(replicator) {
+    invariant7(this._lifecycleState === LifecycleState2.OPEN, void 0, {
+      F: __dxlog_file11,
+      L: 128,
       S: this,
-      C: (f, a) => f(...a)
+      A: [
+        "this._lifecycleState === LifecycleState.OPEN",
+        ""
+      ]
     });
-    await this._initIterator();
-    await this._feedSetIterator.open();
-    this._isStarted = true;
-    log7("started", void 0, {
-      F: __dxlog_file9,
-      L: 289,
+    invariant7(this._replicators.has(replicator), void 0, {
+      F: __dxlog_file11,
+      L: 129,
       S: this,
-      C: (f, a) => f(...a)
+      A: [
+        "this._replicators.has(replicator)",
+        ""
+      ]
     });
-    if (!this._isPaused) {
-      for (const feed of this._feeds.values()) {
-        this._setFeedDownloadState(feed);
-      }
+    await replicator.disconnect();
+    this._replicators.delete(replicator);
+  }
+  async shouldAdvertise(peerId, params) {
+    const connection = this._connections.get(peerId);
+    if (!connection) {
+      return false;
     }
+    return connection.connection.shouldAdvertise(params);
   }
-  async stop() {
-    log7("stopping...", void 0, {
-      F: __dxlog_file9,
-      L: 300,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    this._isStopping = true;
-    for (const [feed, handle] of this._downloads.entries()) {
-      feed.undownload(handle);
+  shouldSyncCollection(peerId, params) {
+    const connection = this._connections.get(peerId);
+    if (!connection) {
+      return false;
     }
-    this._downloads.clear();
-    await this._feedSetIterator?.close();
-    await this._processingTrigger.wait();
-    await this._state._ctx.dispose();
-    this._state._ctx = new Context3(void 0, {
-      F: __dxlog_file9,
-      L: 309
+    return connection.connection.shouldSyncCollection(params);
+  }
+  queryCollectionState(collectionId, targetId) {
+    const message = {
+      type: "collection-query",
+      senderId: this.peerId,
+      targetId,
+      collectionId
+    };
+    this._send(message);
+  }
+  sendCollectionState(collectionId, targetId, state) {
+    const message = {
+      type: "collection-state",
+      senderId: this.peerId,
+      targetId,
+      collectionId,
+      state
+    };
+    this._send(message);
+  }
+  _send(message) {
+    const connectionEntry = this._connections.get(message.targetId);
+    if (!connectionEntry) {
+      throw new Error("Connection not found.");
+    }
+    const writeStart = Date.now();
+    connectionEntry.writer.write(message).then(() => {
+      const durationMs = Date.now() - writeStart;
+      this._params.monitor?.recordMessageSent(message, durationMs);
+    }).catch((err) => {
+      if (connectionEntry.isOpen) {
+        log9.catch(err, void 0, {
+          F: __dxlog_file11,
+          L: 189,
+          S: this,
+          C: (f, a) => f(...a)
+        });
+      }
+      this._params.monitor?.recordMessageSendingFailed(message);
     });
-    this._state._reachedTargetPromise = void 0;
-    this._state._reachedTarget = false;
-    this._isStarted = false;
-    log7("stopped", void 0, {
-      F: __dxlog_file9,
-      L: 313,
+  }
+  // TODO(dmaretskyi): Remove.
+  getPeersInterestedInCollection(collectionId) {
+    return Array.from(this._connections.values()).map((connection) => {
+      return connection.connection.shouldSyncCollection({
+        collectionId
+      }) ? connection.connection.peerId : null;
+    }).filter(nonNullable);
+  }
+  _onConnectionOpen(connection) {
+    log9("Connection opened", {
+      peerId: connection.peerId
+    }, {
+      F: __dxlog_file11,
+      L: 207,
       S: this,
       C: (f, a) => f(...a)
     });
-  }
-  /**
-  * @param timeframe Timeframe of already processed messages.
-  *  The pipeline will start processing messages AFTER this timeframe.
-  */
-  async setCursor(timeframe) {
-    invariant8(!this._isStarted || this._isPaused, "Invalid state.", {
-      F: __dxlog_file9,
-      L: 322,
+    invariant7(!this._connections.has(connection.peerId), void 0, {
+      F: __dxlog_file11,
+      L: 208,
       S: this,
       A: [
-        "!this._isStarted || this._isPaused",
-        "'Invalid state.'"
+        "!this._connections.has(connection.peerId as PeerId)",
+        ""
       ]
     });
-    this._state._startTimeframe = timeframe;
-    this._timeframeClock.setTimeframe(timeframe);
-    if (this._feedSetIterator) {
-      await this._feedSetIterator.close();
-      await this._initIterator();
-      await this._feedSetIterator.open();
-    }
-  }
-  /**
-  * Calling pause while processing will cause a deadlock.
-  */
-  async pause() {
-    if (this._isPaused) {
-      return;
-    }
-    this._pauseTrigger.reset();
-    await this._processingTrigger.wait();
-    this._isPaused = true;
-  }
-  async unpause() {
-    invariant8(this._isPaused, "Pipeline is not paused.", {
-      F: __dxlog_file9,
-      L: 351,
+    const reader = connection.readable.getReader();
+    const writer = connection.writable.getWriter();
+    const connectionEntry = {
+      connection,
+      reader,
+      writer,
+      isOpen: true
+    };
+    this._connections.set(connection.peerId, connectionEntry);
+    queueMicrotask(async () => {
+      try {
+        while (true) {
+          const { done, value } = await reader.read();
+          if (done) {
+            break;
+          }
+          this._onMessage(value);
+        }
+      } catch (err) {
+        if (connectionEntry.isOpen) {
+          log9.catch(err, void 0, {
+            F: __dxlog_file11,
+            L: 227,
+            S: this,
+            C: (f, a) => f(...a)
+          });
+        }
+      }
+    });
+    log9("emit peer-candidate", {
+      peerId: connection.peerId
+    }, {
+      F: __dxlog_file11,
+      L: 232,
       S: this,
-      A: [
-        "this._isPaused",
-        "'Pipeline is not paused.'"
-      ]
+      C: (f, a) => f(...a)
     });
-    this._pauseTrigger.wake();
-    this._isPaused = false;
-    for (const feed of this._feeds.values()) {
-      this._setFeedDownloadState(feed);
+    this._emitPeerCandidate(connection);
+    this._params.monitor?.recordPeerConnected(connection.peerId);
+  }
+  _onMessage(message) {
+    if (isCollectionQueryMessage(message)) {
+      this._params.onCollectionStateQueried(message.collectionId, message.senderId);
+    } else if (isCollectionStateMessage(message)) {
+      this._params.onCollectionStateReceived(message.collectionId, message.senderId, message.state);
+    } else {
+      this.emit("message", message);
     }
+    this._params.monitor?.recordMessageReceived(message);
   }
   /**
-  * Starts to iterate over the ordered messages from the added feeds.
-  * Updates the timeframe clock after the message has bee processed.
+  * Trigger doc-synchronizer shared documents set recalculation. Happens on peer-candidate.
+  * TODO(y): replace with a proper API call when sharePolicy update becomes supported by automerge-repo
   */
-  async *consume() {
-    invariant8(!this._isBeingConsumed, "Pipeline is already being consumed.", {
-      F: __dxlog_file9,
-      L: 366,
+  _onConnectionAuthScopeChanged(connection) {
+    log9("Connection auth scope changed", {
+      peerId: connection.peerId
+    }, {
+      F: __dxlog_file11,
+      L: 253,
       S: this,
-      A: [
-        "!this._isBeingConsumed",
-        "'Pipeline is already being consumed.'"
-      ]
+      C: (f, a) => f(...a)
     });
-    this._isBeingConsumed = true;
-    invariant8(this._feedSetIterator, "Iterator not initialized.", {
-      F: __dxlog_file9,
-      L: 369,
+    const entry = this._connections.get(connection.peerId);
+    invariant7(entry, void 0, {
+      F: __dxlog_file11,
+      L: 255,
       S: this,
       A: [
-        "this._feedSetIterator",
-        "'Iterator not initialized.'"
+        "entry",
+        ""
       ]
     });
-    let lastFeedSetIterator = this._feedSetIterator;
-    let iterable = lastFeedSetIterator[Symbol.asyncIterator]();
-    while (!this._isStopping) {
-      await this._pauseTrigger.wait();
-      if (lastFeedSetIterator !== this._feedSetIterator) {
-        invariant8(this._feedSetIterator, "Iterator not initialized.", {
-          F: __dxlog_file9,
-          L: 378,
-          S: this,
-          A: [
-            "this._feedSetIterator",
-            "'Iterator not initialized.'"
-          ]
-        });
-        lastFeedSetIterator = this._feedSetIterator;
-        iterable = lastFeedSetIterator[Symbol.asyncIterator]();
-      }
-      const { done, value } = await iterable.next();
-      if (!done) {
-        const block = value ?? failUndefined();
-        this._processingTrigger.reset();
-        this._timeframeClock.updatePendingTimeframe(PublicKey3.from(block.feedKey), block.seq);
-        yield block;
-        this._processingTrigger.wake();
-        this._timeframeClock.updateTimeframe();
-      }
-    }
-    this._isBeingConsumed = false;
+    this.emit("peer-disconnected", {
+      peerId: connection.peerId
+    });
+    this._emitPeerCandidate(connection);
   }
-  _setFeedDownloadState(feed) {
-    let handle = this._downloads.get(feed);
-    if (handle) {
-      feed.undownload(handle);
-    }
-    const timeframe = this._state._startTimeframe;
-    const seq = timeframe.get(feed.key) ?? -1;
-    log7("download", {
-      feed: feed.key.truncate(),
-      seq,
-      length: feed.length
+  _onConnectionClosed(connection) {
+    log9("Connection closed", {
+      peerId: connection.peerId
     }, {
-      F: __dxlog_file9,
-      L: 407,
+      F: __dxlog_file11,
+      L: 261,
       S: this,
       C: (f, a) => f(...a)
     });
-    handle = feed.download({
-      start: seq + 1,
-      linear: true
-    }, (err, data) => {
-      if (err) {
-      } else {
-        log7.info("downloaded", {
-          data
-        }, {
-          F: __dxlog_file9,
-          L: 412,
-          S: this,
-          C: (f, a) => f(...a)
-        });
-      }
+    const entry = this._connections.get(connection.peerId);
+    invariant7(entry, void 0, {
+      F: __dxlog_file11,
+      L: 263,
+      S: this,
+      A: [
+        "entry",
+        ""
+      ]
     });
-    this._downloads.set(feed, handle);
+    entry.isOpen = false;
+    this.emit("peer-disconnected", {
+      peerId: connection.peerId
+    });
+    this._params.monitor?.recordPeerDisconnected(connection.peerId);
+    void entry.reader.cancel().catch((err) => log9.catch(err, void 0, {
+      F: __dxlog_file11,
+      L: 269,
+      S: this,
+      C: (f, a) => f(...a)
+    }));
+    void entry.writer.abort().catch((err) => log9.catch(err, void 0, {
+      F: __dxlog_file11,
+      L: 270,
+      S: this,
+      C: (f, a) => f(...a)
+    }));
+    this._connections.delete(connection.peerId);
   }
-  async _initIterator() {
-    this._feedSetIterator = new FeedSetIterator(createMessageSelector(this._timeframeClock), {
-      start: startAfter(this._timeframeClock.timeframe),
-      stallTimeout: 1e3
+  _emitPeerCandidate(connection) {
+    this.emit("peer-candidate", {
+      peerId: connection.peerId,
+      peerMetadata: createEchoPeerMetadata()
     });
-    this._feedSetIterator.stalled.on((iterator) => {
-      log7.warn(`Stalled after ${iterator.options.stallTimeout}ms with ${iterator.size} feeds.`, void 0, {
-        F: __dxlog_file9,
-        L: 426,
-        S: this,
-        C: (f, a) => f(...a)
+  }
+};
+_ts_decorate6([
+  synchronized3
+], EchoNetworkAdapter.prototype, "open", null);
+_ts_decorate6([
+  synchronized3
+], EchoNetworkAdapter.prototype, "close", null);
+_ts_decorate6([
+  synchronized3
+], EchoNetworkAdapter.prototype, "addReplicator", null);
+_ts_decorate6([
+  synchronized3
+], EchoNetworkAdapter.prototype, "removeReplicator", null);
+var createEchoPeerMetadata = () => ({
+  // TODO(dmaretskyi): Refactor this.
+  dxos_peerSource: "EchoNetworkAdapter"
+});
+var isEchoPeerMetadata = (metadata) => metadata?.dxos_peerSource === "EchoNetworkAdapter";
+
+// packages/core/echo/echo-pipeline/src/automerge/heads-store.ts
+import { headsEncoding } from "@dxos/indexing";
+var HeadsStore = class {
+  constructor({ db }) {
+    this._db = db;
+  }
+  setHeads(documentId, heads, batch) {
+    batch.put(documentId, heads, {
+      sublevel: this._db,
+      keyEncoding: "utf8",
+      valueEncoding: headsEncoding
+    });
+  }
+  // TODO(dmaretskyi): Make batched.
+  async getHeads(documentIds) {
+    return this._db.getMany(documentIds, {
+      keyEncoding: "utf8",
+      valueEncoding: headsEncoding
+    });
+  }
+};
+
+// packages/core/echo/echo-pipeline/src/automerge/leveldb-storage-adapter.ts
+import { LifecycleState as LifecycleState3, Resource as Resource4 } from "@dxos/context";
+var LevelDBStorageAdapter = class extends Resource4 {
+  constructor(_params) {
+    super();
+    this._params = _params;
+  }
+  async load(keyArray) {
+    try {
+      if (this._lifecycleState !== LifecycleState3.OPEN) {
+        return void 0;
+      }
+      const startMs = Date.now();
+      const chunk = await this._params.db.get(keyArray, {
+        ...encodingOptions
       });
-      this._state.stalled.emit();
+      this._params.monitor?.recordBytesLoaded(chunk.byteLength);
+      this._params.monitor?.recordLoadDuration(Date.now() - startMs);
+      return chunk;
+    } catch (err) {
+      if (isLevelDbNotFoundError(err)) {
+        return void 0;
+      }
+      throw err;
+    }
+  }
+  async save(keyArray, binary) {
+    if (this._lifecycleState !== LifecycleState3.OPEN) {
+      return void 0;
+    }
+    const startMs = Date.now();
+    const batch = this._params.db.batch();
+    await this._params.callbacks?.beforeSave?.({
+      path: keyArray,
+      batch
     });
-    for (const feed of this._feeds.values()) {
-      await this._feedSetIterator.addFeed(feed);
+    batch.put(keyArray, Buffer.from(binary), {
+      ...encodingOptions
+    });
+    await batch.write();
+    this._params.monitor?.recordBytesStored(binary.byteLength);
+    await this._params.callbacks?.afterSave?.(keyArray);
+    this._params.monitor?.recordStoreDuration(Date.now() - startMs);
+  }
+  async remove(keyArray) {
+    if (this._lifecycleState !== LifecycleState3.OPEN) {
+      return void 0;
+    }
+    await this._params.db.del(keyArray, {
+      ...encodingOptions
+    });
+  }
+  async loadRange(keyPrefix) {
+    if (this._lifecycleState !== LifecycleState3.OPEN) {
+      return [];
+    }
+    const startMs = Date.now();
+    const result = [];
+    for await (const [key, value] of this._params.db.iterator({
+      gte: keyPrefix,
+      lte: [
+        ...keyPrefix,
+        "\uFFFF"
+      ],
+      ...encodingOptions
+    })) {
+      result.push({
+        key,
+        data: value
+      });
+      this._params.monitor?.recordBytesLoaded(value.byteLength);
+    }
+    this._params.monitor?.recordLoadDuration(Date.now() - startMs);
+    return result;
+  }
+  async removeRange(keyPrefix) {
+    if (this._lifecycleState !== LifecycleState3.OPEN) {
+      return void 0;
+    }
+    const batch = this._params.db.batch();
+    for await (const [key] of this._params.db.iterator({
+      gte: keyPrefix,
+      lte: [
+        ...keyPrefix,
+        "\uFFFF"
+      ],
+      ...encodingOptions
+    })) {
+      batch.del(key, {
+        ...encodingOptions
+      });
     }
+    await batch.write();
   }
 };
-_ts_decorate4([
-  synchronized2
-], Pipeline.prototype, "start", null);
-_ts_decorate4([
-  synchronized2
-], Pipeline.prototype, "stop", null);
-_ts_decorate4([
-  synchronized2
-], Pipeline.prototype, "setCursor", null);
-_ts_decorate4([
-  synchronized2
-], Pipeline.prototype, "pause", null);
-_ts_decorate4([
-  synchronized2
-], Pipeline.prototype, "unpause", null);
-
-// packages/core/echo/echo-pipeline/src/space/space.ts
-import { Event as Event5, synchronized as synchronized3, trackLeaks as trackLeaks2 } from "@dxos/async";
-import { LifecycleState as LifecycleState3, Resource as Resource5 } from "@dxos/context";
-import { subtleCrypto as subtleCrypto2 } from "@dxos/crypto";
-import { invariant as invariant9 } from "@dxos/invariant";
-import { PublicKey as PublicKey5, SpaceId as SpaceId2 } from "@dxos/keys";
-import { log as log9, logInfo } from "@dxos/log";
-import { AdmittedFeed as AdmittedFeed2 } from "@dxos/protocols/proto/dxos/halo/credentials";
-import { trace as trace3 } from "@dxos/tracing";
-import { Callback as Callback2, ComplexMap as ComplexMap2 } from "@dxos/util";
+var keyEncoder = {
+  encode: (key) => Buffer.from(key.map((k) => k.replaceAll("%", "%25").replaceAll("-", "%2D")).join("-")),
+  decode: (key) => Buffer.from(key).toString().split("-").map((k) => k.replaceAll("%2D", "-").replaceAll("%25", "%")),
+  format: "buffer"
+};
+var encodingOptions = {
+  keyEncoding: keyEncoder,
+  valueEncoding: "buffer"
+};
+var isLevelDbNotFoundError = (err) => err.code === "LEVEL_NOT_FOUND";
 
-// packages/core/echo/echo-pipeline/src/space/control-pipeline.ts
-import { DeferredTask, sleepWithContext as sleepWithContext2, trackLeaks } from "@dxos/async";
-import { Context as Context4 } from "@dxos/context";
-import { SpaceStateMachine } from "@dxos/credentials";
-import { PublicKey as PublicKey4 } from "@dxos/keys";
-import { log as log8 } from "@dxos/log";
-import { AdmittedFeed } from "@dxos/protocols/proto/dxos/halo/credentials";
-import { Timeframe as Timeframe3 } from "@dxos/timeframe";
-import { TimeSeriesCounter, TimeUsageCounter, trace as trace2 } from "@dxos/tracing";
-import { Callback, tracer } from "@dxos/util";
-function _ts_decorate5(decorators, target, key, desc) {
+// packages/core/echo/echo-pipeline/src/automerge/automerge-host.ts
+function _ts_decorate7(decorators, target, key, desc) {
   var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
   if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
     r = Reflect.decorate(decorators, target, key, desc);
@@ -2099,787 +2435,454 @@ function _ts_decorate5(decorators, target, key, desc) {
         r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
   return c > 3 && r && Object.defineProperty(target, key, r), r;
 }
-var __dxlog_file10 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/control-pipeline.ts";
-var TIMEFRAME_SAVE_DEBOUNCE_INTERVAL = 500;
-var CONTROL_PIPELINE_SNAPSHOT_DELAY = 1e4;
-var USE_SNAPSHOTS = true;
-var ControlPipeline = class {
-  constructor({ spaceKey, genesisFeed, feedProvider, metadataStore }) {
-    this._ctx = new Context4(void 0, {
-      F: __dxlog_file10,
-      L: 47
+var __dxlog_file12 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/automerge-host.ts";
+var AutomergeHost = class extends Resource5 {
+  constructor({ db, indexMetadataStore, dataMonitor }) {
+    super();
+    this._collectionSynchronizer = new CollectionSynchronizer({
+      queryCollectionState: this._queryCollectionState.bind(this),
+      sendCollectionState: this._sendCollectionState.bind(this),
+      shouldSyncCollection: this._shouldSyncCollection.bind(this)
     });
-    this._lastTimeframeSaveTime = Date.now();
-    this.onFeedAdmitted = new Callback();
-    this._usage = new TimeUsageCounter();
-    this._mutations = new TimeSeriesCounter();
-    this._snapshotTask = new DeferredTask(this._ctx, async () => {
-      await sleepWithContext2(this._ctx, CONTROL_PIPELINE_SNAPSHOT_DELAY);
-      await this._saveSnapshot();
+    this._db = db;
+    this._storage = new LevelDBStorageAdapter({
+      db: db.sublevel("automerge"),
+      callbacks: {
+        beforeSave: async (params) => this._beforeSave(params),
+        afterSave: async (key) => this._afterSave(key)
+      },
+      monitor: dataMonitor
     });
-    this._spaceKey = spaceKey;
-    this._metadata = metadataStore;
-    this._pipeline = new Pipeline();
-    void this._pipeline.addFeed(genesisFeed);
-    this._spaceStateMachine = new SpaceStateMachine(spaceKey);
-    this._spaceStateMachine.onFeedAdmitted.set(async (info) => {
-      log8("feed admitted", {
-        key: info.key
-      }, {
-        F: __dxlog_file10,
-        L: 82,
-        S: this,
-        C: (f, a) => f(...a)
-      });
-      if (info.assertion.designation === AdmittedFeed.Designation.CONTROL && !info.key.equals(genesisFeed.key)) {
-        queueMicrotask(async () => {
-          try {
-            const feed = await feedProvider(info.key);
-            if (!this._pipeline.hasFeed(feed.key)) {
-              await this._pipeline.addFeed(feed);
-            }
-          } catch (err) {
-            log8.catch(err, void 0, {
-              F: __dxlog_file10,
-              L: 93,
-              S: this,
-              C: (f, a) => f(...a)
-            });
-          }
-        });
-      }
-      await this.onFeedAdmitted.callIfSet(info);
+    this._echoNetworkAdapter = new EchoNetworkAdapter({
+      getContainingSpaceForDocument: this._getContainingSpaceForDocument.bind(this),
+      isDocumentInRemoteCollection: this._isDocumentInRemoteCollection.bind(this),
+      onCollectionStateQueried: this._onCollectionStateQueried.bind(this),
+      onCollectionStateReceived: this._onCollectionStateReceived.bind(this),
+      monitor: dataMonitor
     });
-    this.onMemberRoleChanged = this._spaceStateMachine.onMemberRoleChanged;
-    this.onCredentialProcessed = this._spaceStateMachine.onCredentialProcessed;
-    this.onDelegatedInvitation = this._spaceStateMachine.onDelegatedInvitation;
-    this.onDelegatedInvitationRemoved = this._spaceStateMachine.onDelegatedInvitationRemoved;
+    this._headsStore = new HeadsStore({
+      db: db.sublevel("heads")
+    });
+    this._indexMetadataStore = indexMetadataStore;
   }
-  get spaceState() {
-    return this._spaceStateMachine;
+  async _open() {
+    this._peerId = `host-${PublicKey6.random().toHex()}`;
+    await this._storage.open?.();
+    this._repo = new Repo({
+      peerId: this._peerId,
+      sharePolicy: this._sharePolicy.bind(this),
+      storage: this._storage,
+      network: [
+        // Upstream swarm.
+        this._echoNetworkAdapter
+      ]
+    });
+    Event5.wrap(this._echoNetworkAdapter, "peer-candidate").on(this._ctx, (e) => this._onPeerConnected(e.peerId));
+    Event5.wrap(this._echoNetworkAdapter, "peer-disconnected").on(this._ctx, (e) => this._onPeerDisconnected(e.peerId));
+    this._collectionSynchronizer.remoteStateUpdated.on(this._ctx, ({ collectionId, peerId }) => {
+      this._onRemoteCollectionStateUpdated(collectionId, peerId);
+    });
+    await this._echoNetworkAdapter.open();
+    await this._collectionSynchronizer.open();
+    await this._echoNetworkAdapter.open();
+    await this._echoNetworkAdapter.whenConnected();
   }
-  get pipeline() {
-    return this._pipeline;
+  async _close() {
+    await this._collectionSynchronizer.close();
+    await this._storage.close?.();
+    await this._echoNetworkAdapter.close();
+    await this._ctx.dispose();
   }
-  async setWriteFeed(feed) {
-    await this._pipeline.addFeed(feed);
-    this._pipeline.setWriteFeed(feed);
+  /**
+  * @deprecated To be abstracted away.
+  */
+  get repo() {
+    return this._repo;
   }
-  async start() {
-    const snapshot = this._metadata.getSpaceControlPipelineSnapshot(this._spaceKey);
-    log8("load snapshot", {
-      key: this._spaceKey,
-      present: !!snapshot,
-      tf: snapshot?.timeframe
-    }, {
-      F: __dxlog_file10,
-      L: 123,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    if (USE_SNAPSHOTS && snapshot) {
-      await this._processSnapshot(snapshot);
+  get peerId() {
+    return this._peerId;
+  }
+  get loadedDocsCount() {
+    return Object.keys(this._repo.handles).length;
+  }
+  async addReplicator(replicator) {
+    await this._echoNetworkAdapter.addReplicator(replicator);
+  }
+  async removeReplicator(replicator) {
+    await this._echoNetworkAdapter.removeReplicator(replicator);
+  }
+  /**
+  * Loads the document handle from the repo and waits for it to be ready.
+  */
+  async loadDoc(ctx, documentId, opts) {
+    let handle;
+    if (typeof documentId === "string") {
+      handle = this._repo.handles[documentId];
     }
-    log8("starting...", void 0, {
-      F: __dxlog_file10,
-      L: 128,
-      S: this,
-      C: (f, a) => f(...a)
+    if (!handle) {
+      handle = this._repo.find(documentId);
+    }
+    if (!handle.isReady()) {
+      if (!opts?.timeout) {
+        await cancelWithContext2(ctx, handle.whenReady());
+      } else {
+        await cancelWithContext2(ctx, asyncTimeout(handle.whenReady(), opts.timeout));
+      }
+    }
+    return handle;
+  }
+  /**
+  * Create new persisted document.
+  */
+  createDoc(initialValue, opts) {
+    if (opts?.preserveHistory) {
+      if (!isAutomerge(initialValue)) {
+        throw new TypeError("Initial value must be an Automerge document");
+      }
+      return this._repo.import(save(initialValue));
+    } else {
+      return this._repo.create(initialValue);
+    }
+  }
+  async waitUntilHeadsReplicated(heads) {
+    const entries = heads.entries;
+    if (!entries?.length) {
+      return;
+    }
+    const documentIds = entries.map((entry) => entry.documentId);
+    const documentHeads = await this.getHeads(documentIds);
+    const headsToWait = entries.filter((entry, index) => {
+      const targetHeads = entry.heads;
+      if (!targetHeads || targetHeads.length === 0) {
+        return false;
+      }
+      const currentHeads = documentHeads[index];
+      return !(currentHeads !== null && headsEquals(currentHeads, targetHeads));
     });
-    setTimeout(async () => {
-      void this._consumePipeline(new Context4(void 0, {
-        F: __dxlog_file10,
-        L: 130
+    if (headsToWait.length > 0) {
+      await Promise.all(headsToWait.map(async (entry, index) => {
+        const handle = await this.loadDoc(Context5.default(void 0, {
+          F: __dxlog_file12,
+          L: 227
+        }), entry.documentId);
+        await waitForHeads(handle, entry.heads);
       }));
-    });
-    await this._pipeline.start();
-    log8("started", void 0, {
-      F: __dxlog_file10,
-      L: 134,
-      S: this,
-      C: (f, a) => f(...a)
-    });
+    }
+    await this._repo.flush(documentIds.filter((documentId) => !!this._repo.handles[documentId]));
   }
-  async _processSnapshot(snapshot) {
-    await this._pipeline.setCursor(snapshot.timeframe);
-    for (const message of snapshot.messages ?? []) {
-      const result = await this._spaceStateMachine.process(message.credential, {
-        sourceFeed: message.feedKey,
-        skipVerification: true
+  async reIndexHeads(documentIds) {
+    for (const documentId of documentIds) {
+      log10.info("re-indexing heads for document", {
+        documentId
+      }, {
+        F: __dxlog_file12,
+        L: 239,
+        S: this,
+        C: (f, a) => f(...a)
       });
-      if (!result) {
-        log8.warn("credential processing failed from snapshot", {
-          message
+      const handle = this._repo.find(documentId);
+      await handle.whenReady([
+        "ready",
+        "requesting"
+      ]);
+      if (handle.inState([
+        "requesting"
+      ])) {
+        log10.warn("document is not available locally, skipping", {
+          documentId
         }, {
-          F: __dxlog_file10,
-          L: 147,
+          F: __dxlog_file12,
+          L: 243,
           S: this,
           C: (f, a) => f(...a)
         });
+        continue;
       }
+      const doc = handle.docSync();
+      invariant8(doc, void 0, {
+        F: __dxlog_file12,
+        L: 248,
+        S: this,
+        A: [
+          "doc",
+          ""
+        ]
+      });
+      const heads = getHeads(doc);
+      const batch = this._db.batch();
+      this._headsStore.setHeads(documentId, heads, batch);
+      await batch.write();
     }
-  }
-  async _saveSnapshot() {
-    await this._pipeline.pause();
-    const snapshot = {
-      timeframe: this._pipeline.state.timeframe,
-      messages: this._spaceStateMachine.credentialEntries.map((entry) => ({
-        feedKey: entry.sourceFeed,
-        credential: entry.credential
-      }))
-    };
-    await this._pipeline.unpause();
-    log8("save snapshot", {
-      key: this._spaceKey,
-      snapshot
-    }, {
-      F: __dxlog_file10,
-      L: 163,
+    log10.info("done re-indexing heads", void 0, {
+      F: __dxlog_file12,
+      L: 255,
       S: this,
       C: (f, a) => f(...a)
     });
-    await this._metadata.setSpaceControlPipelineSnapshot(this._spaceKey, snapshot);
   }
-  async _consumePipeline(ctx) {
-    for await (const msg of this._pipeline.consume()) {
-      const span = this._usage.beginRecording();
-      this._mutations.inc();
-      try {
-        await this._processMessage(ctx, msg);
-      } catch (err) {
-        log8.catch(err, void 0, {
-          F: __dxlog_file10,
-          L: 176,
-          S: this,
-          C: (f, a) => f(...a)
-        });
-      }
-      span.end();
+  // TODO(dmaretskyi): Share based on HALO permissions and space affinity.
+  // Hosts, running in the worker, don't share documents unless requested by other peers.
+  // NOTE: If both peers return sharePolicy=false the replication will not happen
+  // https://github.com/automerge/automerge-repo/pull/292
+  async _sharePolicy(peerId, documentId) {
+    if (peerId.startsWith("client-")) {
+      return false;
+    }
+    if (!documentId) {
+      return false;
     }
+    const peerMetadata = this.repo.peerMetadataByPeerId[peerId];
+    if (isEchoPeerMetadata(peerMetadata)) {
+      return this._echoNetworkAdapter.shouldAdvertise(peerId, {
+        documentId
+      });
+    }
+    return false;
   }
-  async _processMessage(ctx, msg) {
-    log8("processing", {
-      key: msg.feedKey,
-      seq: msg.seq
-    }, {
-      F: __dxlog_file10,
-      L: 186,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    if (msg.data.payload.credential) {
-      const timer = tracer.mark("dxos.echo.pipeline.control");
-      const result = await this._spaceStateMachine.process(msg.data.payload.credential.credential, {
-        sourceFeed: PublicKey4.from(msg.feedKey)
-      });
-      timer.end();
-      if (!result) {
-        log8.warn("processing failed", {
-          msg
-        }, {
-          F: __dxlog_file10,
-          L: 195,
-          S: this,
-          C: (f, a) => f(...a)
-        });
-      } else {
-        await this._noteTargetStateIfNeeded(this._pipeline.state.pendingTimeframe);
-      }
-      this._snapshotTask.schedule();
+  async _beforeSave({ path, batch }) {
+    const handle = this._repo.handles[path[0]];
+    if (!handle) {
+      return;
     }
-  }
-  async _noteTargetStateIfNeeded(timeframe) {
-    if (Date.now() - this._lastTimeframeSaveTime > TIMEFRAME_SAVE_DEBOUNCE_INTERVAL) {
-      this._lastTimeframeSaveTime = Date.now();
-      await this._saveTargetTimeframe(timeframe);
+    const doc = handle.docSync();
+    if (!doc) {
+      return;
     }
+    const heads = getHeads(doc);
+    this._headsStore.setHeads(handle.documentId, heads, batch);
+    const spaceKey = getSpaceKeyFromDoc(doc) ?? void 0;
+    const objectIds = Object.keys(doc.objects ?? {});
+    const encodedIds = objectIds.map((objectId) => objectPointerCodec.encode({
+      documentId: handle.documentId,
+      objectId,
+      spaceKey
+    }));
+    const idToLastHash = new Map(encodedIds.map((id) => [
+      id,
+      heads
+    ]));
+    this._indexMetadataStore.markDirty(idToLastHash, batch);
   }
-  async stop() {
-    log8("stopping...", void 0, {
-      F: __dxlog_file10,
-      L: 215,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    await this._ctx.dispose();
-    await this._pipeline.stop();
-    await this._saveTargetTimeframe(this._pipeline.state.timeframe);
-    log8("stopped", void 0, {
-      F: __dxlog_file10,
-      L: 219,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-  }
-  async _saveTargetTimeframe(timeframe) {
-    try {
-      const newTimeframe = Timeframe3.merge(this._targetTimeframe ?? new Timeframe3(), timeframe);
-      await this._metadata.setSpaceControlLatestTimeframe(this._spaceKey, newTimeframe);
-      this._targetTimeframe = newTimeframe;
-    } catch (err) {
-      log8(err, void 0, {
-        F: __dxlog_file10,
-        L: 228,
-        S: this,
-        C: (f, a) => f(...a)
+  _shouldSyncCollection(collectionId, peerId) {
+    const peerMetadata = this._repo.peerMetadataByPeerId[peerId];
+    if (isEchoPeerMetadata(peerMetadata)) {
+      return this._echoNetworkAdapter.shouldSyncCollection(peerId, {
+        collectionId
       });
     }
-  }
-};
-_ts_decorate5([
-  trace2.metricsCounter()
-], ControlPipeline.prototype, "_usage", void 0);
-_ts_decorate5([
-  trace2.metricsCounter()
-], ControlPipeline.prototype, "_mutations", void 0);
-_ts_decorate5([
-  trace2.span({
-    showInBrowserTimeline: true
-  })
-], ControlPipeline.prototype, "start", null);
-_ts_decorate5([
-  trace2.span()
-], ControlPipeline.prototype, "_consumePipeline", null);
-_ts_decorate5([
-  trace2.span()
-], ControlPipeline.prototype, "_processMessage", null);
-ControlPipeline = _ts_decorate5([
-  trace2.resource(),
-  trackLeaks("start", "stop")
-], ControlPipeline);
-
-// packages/core/echo/echo-pipeline/src/space/space.ts
-function _ts_decorate6(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
-    r = Reflect.decorate(decorators, target, key, desc);
-  else
-    for (var i = decorators.length - 1; i >= 0; i--)
-      if (d = decorators[i])
-        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-var __dxlog_file11 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/space.ts";
-var Space = class extends Resource5 {
-  constructor(params) {
-    super();
-    this.onCredentialProcessed = new Callback2();
-    this.stateUpdate = new Event5();
-    invariant9(params.spaceKey && params.feedProvider, void 0, {
-      F: __dxlog_file11,
-      L: 76,
-      S: this,
-      A: [
-        "params.spaceKey && params.feedProvider",
-        ""
-      ]
-    });
-    this._id = params.id;
-    this._key = params.spaceKey;
-    this._genesisFeedKey = params.genesisFeed.key;
-    this._feedProvider = params.feedProvider;
-    this._snapshotManager = params.snapshotManager;
-    this._controlPipeline = new ControlPipeline({
-      spaceKey: params.spaceKey,
-      genesisFeed: params.genesisFeed,
-      feedProvider: params.feedProvider,
-      metadataStore: params.metadataStore
-    });
-    this._controlPipeline.onFeedAdmitted.set(async (info) => {
-      const sparse = info.assertion.designation === AdmittedFeed2.Designation.DATA;
-      if (!info.key.equals(params.genesisFeed.key)) {
-        queueMicrotask(async () => {
-          this.protocol.addFeed(await params.feedProvider(info.key, {
-            sparse
-          }));
-        });
-      }
-    });
-    this._controlPipeline.onCredentialProcessed.set(async (credential) => {
-      await this.onCredentialProcessed.callIfSet(credential);
-      log9("onCredentialProcessed", {
-        credential
-      }, {
-        F: __dxlog_file11,
-        L: 104,
-        S: this,
-        C: (f, a) => f(...a)
-      });
-      this.stateUpdate.emit();
-    });
-    this._controlPipeline.onDelegatedInvitation.set(async (invitation) => {
-      log9("onDelegatedInvitation", {
-        invitation
-      }, {
-        F: __dxlog_file11,
-        L: 108,
-        S: this,
-        C: (f, a) => f(...a)
-      });
-      await params.onDelegatedInvitationStatusChange(invitation, true);
-    });
-    this._controlPipeline.onDelegatedInvitationRemoved.set(async (invitation) => {
-      log9("onDelegatedInvitationRemoved", {
-        invitation
-      }, {
-        F: __dxlog_file11,
-        L: 112,
-        S: this,
-        C: (f, a) => f(...a)
-      });
-      await params.onDelegatedInvitationStatusChange(invitation, false);
-    });
-    this._controlPipeline.onMemberRoleChanged.set(async (changedMembers) => {
-      log9("onMemberRoleChanged", () => ({
-        changedMembers: changedMembers.map((m) => [
-          m.key,
-          m.role
-        ])
-      }), {
-        F: __dxlog_file11,
-        L: 116,
-        S: this,
-        C: (f, a) => f(...a)
-      });
-      await params.onMemberRolesChanged(changedMembers);
-    });
-    this.protocol = params.protocol;
-    this.protocol.addFeed(params.genesisFeed);
-  }
-  get id() {
-    return this._id;
-  }
-  get key() {
-    return this._key;
-  }
-  get isOpen() {
-    return this._lifecycleState === LifecycleState3.OPEN;
-  }
-  get genesisFeedKey() {
-    return this._genesisFeedKey;
-  }
-  get controlFeedKey() {
-    return this._controlFeed?.key;
-  }
-  get dataFeedKey() {
-    return this._dataFeed?.key;
-  }
-  get spaceState() {
-    return this._controlPipeline.spaceState;
+    return false;
   }
   /**
-  * @test-only
+  * Called by AutomergeStorageAdapter after levelDB batch commit.
   */
-  get controlPipeline() {
-    return this._controlPipeline.pipeline;
+  async _afterSave(path) {
+    this._indexMetadataStore.notifyMarkedDirty();
+    const documentId = path[0];
+    const document = this._repo.handles[documentId]?.docSync();
+    if (document) {
+      const heads = getHeads(document);
+      this._onHeadsChanged(documentId, heads);
+    }
   }
-  get snapshotManager() {
-    return this._snapshotManager;
+  _automergePeers() {
+    return this._repo.peers;
   }
-  async setControlFeed(feed) {
-    invariant9(!this._controlFeed, "Control feed already set.", {
-      F: __dxlog_file11,
-      L: 169,
-      S: this,
-      A: [
-        "!this._controlFeed",
-        "'Control feed already set.'"
-      ]
-    });
-    this._controlFeed = feed;
-    await this._controlPipeline.setWriteFeed(feed);
-    return this;
+  async _isDocumentInRemoteCollection(params) {
+    for (const collectionId of this._collectionSynchronizer.getRegisteredCollectionIds()) {
+      const remoteCollections = this._collectionSynchronizer.getRemoteCollectionStates(collectionId);
+      const remotePeerDocs = remoteCollections.get(params.peerId)?.documents;
+      if (remotePeerDocs && params.documentId in remotePeerDocs) {
+        return true;
+      }
+    }
+    return false;
   }
-  async setDataFeed(feed) {
-    invariant9(!this._dataFeed, "Data feed already set.", {
-      F: __dxlog_file11,
-      L: 176,
-      S: this,
-      A: [
-        "!this._dataFeed",
-        "'Data feed already set.'"
-      ]
-    });
-    this._dataFeed = feed;
-    return this;
+  async _getContainingSpaceForDocument(documentId) {
+    const doc = this._repo.handles[documentId]?.docSync();
+    if (!doc) {
+      return null;
+    }
+    const spaceKeyHex = getSpaceKeyFromDoc(doc);
+    if (!spaceKeyHex) {
+      return null;
+    }
+    return PublicKey6.from(spaceKeyHex);
   }
   /**
-  * Use for diagnostics.
+  * Flush documents to disk.
   */
-  getControlFeeds() {
-    return Array.from(this._controlPipeline.spaceState.feeds.values());
-  }
-  async _open(ctx) {
-    log9("opening...", void 0, {
-      F: __dxlog_file11,
-      L: 190,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    await this._controlPipeline.start();
-    await this.protocol.start();
-    log9("opened", void 0, {
-      F: __dxlog_file11,
-      L: 196,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-  }
-  async _close() {
-    log9("closing...", {
-      key: this._key
-    }, {
-      F: __dxlog_file11,
-      L: 201,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    await this.protocol.stop();
-    await this._controlPipeline.stop();
-    log9("closed", void 0, {
-      F: __dxlog_file11,
-      L: 207,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-  }
-};
-_ts_decorate6([
-  trace3.info()
-], Space.prototype, "protocol", void 0);
-_ts_decorate6([
-  trace3.info()
-], Space.prototype, "_controlPipeline", void 0);
-_ts_decorate6([
-  logInfo,
-  trace3.info()
-], Space.prototype, "id", null);
-_ts_decorate6([
-  logInfo,
-  trace3.info()
-], Space.prototype, "key", null);
-_ts_decorate6([
-  trace3.span()
-], Space.prototype, "_open", null);
-_ts_decorate6([
-  synchronized3
-], Space.prototype, "_close", null);
-Space = _ts_decorate6([
-  trackLeaks2("open", "close"),
-  trace3.resource()
-], Space);
-var SPACE_IDS_CACHE = new ComplexMap2(PublicKey5.hash);
-var createIdFromSpaceKey = async (spaceKey) => {
-  const cachedValue = SPACE_IDS_CACHE.get(spaceKey);
-  if (cachedValue !== void 0) {
-    return cachedValue;
+  async flush({ documentIds } = {}) {
+    await this._repo.flush(documentIds);
   }
-  const digest = await subtleCrypto2.digest("SHA-256", spaceKey.asUint8Array());
-  const bytes = new Uint8Array(digest).slice(0, SpaceId2.byteLength);
-  const spaceId = SpaceId2.encode(bytes);
-  SPACE_IDS_CACHE.set(spaceKey, spaceId);
-  return spaceId;
-};
-
-// packages/core/echo/echo-pipeline/src/space/admission-discovery-extension.ts
-import { scheduleTask as scheduleTask3 } from "@dxos/async";
-import { Context as Context5 } from "@dxos/context";
-import { ProtocolError, schema as schema5 } from "@dxos/protocols";
-import { RpcExtension as RpcExtension2 } from "@dxos/teleport";
-var __dxlog_file12 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/admission-discovery-extension.ts";
-var CredentialRetrieverExtension = class extends RpcExtension2 {
-  constructor(_request, _onResult) {
-    super({
-      requested: {
-        AdmissionDiscoveryService: schema5.getService("dxos.mesh.teleport.AdmissionDiscoveryService")
+  async getHeads(documentIds) {
+    const result = [];
+    const storeRequestIds = [];
+    const storeResultIndices = [];
+    for (const documentId of documentIds) {
+      const doc = this._repo.handles[documentId]?.docSync();
+      if (doc) {
+        result.push(getHeads(doc));
+      } else {
+        storeRequestIds.push(documentId);
+        storeResultIndices.push(result.length);
+        result.push(void 0);
       }
-    });
-    this._request = _request;
-    this._onResult = _onResult;
-    this._ctx = new Context5(void 0, {
-      F: __dxlog_file12,
-      L: 25
-    });
-  }
-  async getHandlers() {
-    return {};
-  }
-  async onOpen(context) {
-    await super.onOpen(context);
-    scheduleTask3(this._ctx, async () => {
-      try {
-        const result = await this.rpc.AdmissionDiscoveryService.getAdmissionCredential(this._request);
-        this._onResult.wake(result.admissionCredential);
-      } catch (err) {
-        context.close(err);
+    }
+    if (storeRequestIds.length > 0) {
+      const storedHeads = await this._headsStore.getHeads(storeRequestIds);
+      for (let i = 0; i < storedHeads.length; i++) {
+        result[storeResultIndices[i]] = storedHeads[i];
       }
-    });
+    }
+    return result;
   }
-  async onClose() {
-    await this._ctx.dispose();
+  //
+  // Collection sync.
+  //
+  getLocalCollectionState(collectionId) {
+    return this._collectionSynchronizer.getLocalCollectionState(collectionId);
   }
-  async onAbort() {
-    await this._ctx.dispose();
+  getRemoteCollectionStates(collectionId) {
+    return this._collectionSynchronizer.getRemoteCollectionStates(collectionId);
   }
-};
-var CredentialServerExtension = class extends RpcExtension2 {
-  constructor(_space) {
-    super({
-      exposed: {
-        AdmissionDiscoveryService: schema5.getService("dxos.mesh.teleport.AdmissionDiscoveryService")
-      }
-    });
-    this._space = _space;
+  refreshCollection(collectionId) {
+    this._collectionSynchronizer.refreshCollection(collectionId);
   }
-  async getHandlers() {
-    return {
-      AdmissionDiscoveryService: {
-        getAdmissionCredential: async (request) => {
-          const memberInfo = this._space.spaceState.members.get(request.memberKey);
-          if (!memberInfo?.credential) {
-            throw new ProtocolError("Space member not found.", request);
-          }
-          return {
-            admissionCredential: memberInfo.credential
-          };
-        }
-      }
+  async getCollectionSyncState(collectionId) {
+    const result = {
+      peers: []
     };
+    const localState = this.getLocalCollectionState(collectionId);
+    const remoteState = this.getRemoteCollectionStates(collectionId);
+    if (!localState) {
+      return result;
+    }
+    for (const [peerId, state] of remoteState) {
+      const diff = diffCollectionState(localState, state);
+      result.peers.push({
+        peerId,
+        differentDocuments: diff.different.length
+      });
+    }
+    return result;
   }
-};
-
-// packages/core/echo/echo-pipeline/src/space/space-protocol.ts
-import { discoveryKey, subtleCrypto as subtleCrypto3 } from "@dxos/crypto";
-import { PublicKey as PublicKey6 } from "@dxos/keys";
-import { log as log10, logInfo as logInfo2 } from "@dxos/log";
-import { MMSTTopology } from "@dxos/network-manager";
-import { Teleport } from "@dxos/teleport";
-import { BlobSync } from "@dxos/teleport-extension-object-sync";
-import { ReplicatorExtension } from "@dxos/teleport-extension-replicator";
-import { trace as trace4 } from "@dxos/tracing";
-import { ComplexMap as ComplexMap3 } from "@dxos/util";
-function _ts_decorate7(decorators, target, key, desc) {
-  var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-  if (typeof Reflect === "object" && typeof Reflect.decorate === "function")
-    r = Reflect.decorate(decorators, target, key, desc);
-  else
-    for (var i = decorators.length - 1; i >= 0; i--)
-      if (d = decorators[i])
-        r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-  return c > 3 && r && Object.defineProperty(target, key, r), r;
-}
-var __dxlog_file13 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/space-protocol.ts";
-var MOCK_AUTH_PROVIDER = async (nonce) => Buffer.from("mock");
-var MOCK_AUTH_VERIFIER = async (nonce, credential) => true;
-var SpaceProtocol = class {
-  constructor({ topic, swarmIdentity, networkManager, onSessionAuth, onAuthFailure, blobStore }) {
-    this._feeds = /* @__PURE__ */ new Set();
-    this._sessions = new ComplexMap3(PublicKey6.hash);
-    // TODO(burdon): Move to config (with sensible defaults).
-    this._topology = new MMSTTopology({
-      originateConnections: 4,
-      maxPeers: 10,
-      sampleSize: 20
-    });
-    this._spaceKey = topic;
-    this._networkManager = networkManager;
-    this._swarmIdentity = swarmIdentity;
-    this._onSessionAuth = onSessionAuth;
-    this._onAuthFailure = onAuthFailure;
-    this.blobSync = new BlobSync({
-      blobStore
+  /**
+  * Update the local collection state based on the locally stored document heads.
+  */
+  async updateLocalCollectionState(collectionId, documentIds) {
+    const heads = await this.getHeads(documentIds);
+    const documents = Object.fromEntries(heads.map((heads2, index) => [
+      documentIds[index],
+      heads2 ?? []
+    ]));
+    this._collectionSynchronizer.setLocalCollectionState(collectionId, {
+      documents
     });
-    this._topic = subtleCrypto3.digest("SHA-256", topic.asBuffer()).then(discoveryKey).then(PublicKey6.from);
   }
-  get sessions() {
-    return this._sessions;
+  _onCollectionStateQueried(collectionId, peerId) {
+    this._collectionSynchronizer.onCollectionStateQueried(collectionId, peerId);
+  }
+  _onCollectionStateReceived(collectionId, peerId, state) {
+    this._collectionSynchronizer.onRemoteStateReceived(collectionId, peerId, decodeCollectionState(state));
+  }
+  _queryCollectionState(collectionId, peerId) {
+    this._echoNetworkAdapter.queryCollectionState(collectionId, peerId);
   }
-  get feeds() {
-    return this._feeds;
+  _sendCollectionState(collectionId, peerId, state) {
+    this._echoNetworkAdapter.sendCollectionState(collectionId, peerId, encodeCollectionState(state));
   }
-  get _ownPeerKey() {
-    return this._swarmIdentity.peerKey;
+  _onPeerConnected(peerId) {
+    this._collectionSynchronizer.onConnectionOpen(peerId);
   }
-  // TODO(burdon): Create abstraction for Space (e.g., add keys and have provider).
-  addFeed(feed) {
-    log10("addFeed", {
-      key: feed.key
-    }, {
-      F: __dxlog_file13,
-      L: 109,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    this._feeds.add(feed);
-    for (const session of this._sessions.values()) {
-      session.replicator.addFeed(feed);
-    }
+  _onPeerDisconnected(peerId) {
+    this._collectionSynchronizer.onConnectionClosed(peerId);
   }
-  // TODO(burdon): Rename open? Common open/close interfaces for all services?
-  async start() {
-    if (this._connection) {
+  _onRemoteCollectionStateUpdated(collectionId, peerId) {
+    const localState = this._collectionSynchronizer.getLocalCollectionState(collectionId);
+    const remoteState = this._collectionSynchronizer.getRemoteCollectionStates(collectionId).get(peerId);
+    if (!localState || !remoteState) {
       return;
     }
-    const credentials = await this._swarmIdentity.credentialProvider(Buffer.from(""));
-    await this.blobSync.open();
-    log10("starting...", void 0, {
-      F: __dxlog_file13,
-      L: 128,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    const topic = await this._topic;
-    this._connection = await this._networkManager.joinSwarm({
-      protocolProvider: this._createProtocolProvider(credentials),
-      peerId: this._swarmIdentity.peerKey,
-      topic,
-      topology: this._topology,
-      label: `swarm ${topic.truncate()} for space ${this._spaceKey.truncate()}`
-    });
-    log10("started", void 0, {
-      F: __dxlog_file13,
-      L: 138,
+    const { different } = diffCollectionState(localState, remoteState);
+    if (different.length === 0) {
+      return;
+    }
+    log10.info("replication documents after collection sync", {
+      count: different.length
+    }, {
+      F: __dxlog_file12,
+      L: 475,
       S: this,
       C: (f, a) => f(...a)
     });
-  }
-  updateTopology() {
-    this._topology.forceUpdate();
-  }
-  async stop() {
-    await this.blobSync.close();
-    if (this._connection) {
-      log10("stopping...", void 0, {
-        F: __dxlog_file13,
-        L: 149,
-        S: this,
-        C: (f, a) => f(...a)
-      });
-      await this._connection.close();
-      log10("stopped", void 0, {
-        F: __dxlog_file13,
-        L: 151,
-        S: this,
-        C: (f, a) => f(...a)
-      });
+    for (const documentId of different) {
+      this._repo.find(documentId);
     }
   }
-  _createProtocolProvider(credentials) {
-    return (wireParams) => {
-      const session = new SpaceProtocolSession({
-        wireParams,
-        swarmIdentity: this._swarmIdentity,
-        onSessionAuth: this._onSessionAuth,
-        onAuthFailure: this._onAuthFailure,
-        blobSync: this.blobSync
-      });
-      this._sessions.set(wireParams.remotePeerId, session);
-      for (const feed of this._feeds) {
-        session.replicator.addFeed(feed);
+  _onHeadsChanged(documentId, heads) {
+    for (const collectionId of this._collectionSynchronizer.getRegisteredCollectionIds()) {
+      const state = this._collectionSynchronizer.getLocalCollectionState(collectionId);
+      if (state?.documents[documentId]) {
+        const newState = structuredClone(state);
+        newState.documents[documentId] = heads;
+        this._collectionSynchronizer.setLocalCollectionState(collectionId, newState);
       }
-      return session;
-    };
+    }
   }
 };
 _ts_decorate7([
-  logInfo2,
   trace4.info()
-], SpaceProtocol.prototype, "_topic", void 0);
+], AutomergeHost.prototype, "_peerId", void 0);
 _ts_decorate7([
-  trace4.info()
-], SpaceProtocol.prototype, "_spaceKey", void 0);
+  trace4.info({
+    depth: null
+  })
+], AutomergeHost.prototype, "_automergePeers", null);
 _ts_decorate7([
-  logInfo2
-], SpaceProtocol.prototype, "_ownPeerKey", null);
-SpaceProtocol = _ts_decorate7([
+  trace4.span({
+    showInBrowserTimeline: true
+  })
+], AutomergeHost.prototype, "flush", null);
+AutomergeHost = _ts_decorate7([
   trace4.resource()
-], SpaceProtocol);
-var AuthStatus;
-(function(AuthStatus2) {
-  AuthStatus2["INITIAL"] = "INITIAL";
-  AuthStatus2["SUCCESS"] = "SUCCESS";
-  AuthStatus2["FAILURE"] = "FAILURE";
-})(AuthStatus || (AuthStatus = {}));
-var SpaceProtocolSession = class {
-  // TODO(dmaretskyi): Allow to pass in extra extensions.
-  constructor({ wireParams, swarmIdentity, onSessionAuth, onAuthFailure, blobSync }) {
-    // TODO(dmaretskyi): Start with upload=false when switching it on the fly works.
-    this.replicator = new ReplicatorExtension().setOptions({
-      upload: true
-    });
-    this._authStatus = "INITIAL";
-    this._wireParams = wireParams;
-    this._swarmIdentity = swarmIdentity;
-    this._onSessionAuth = onSessionAuth;
-    this._onAuthFailure = onAuthFailure;
-    this._blobSync = blobSync;
-    this._teleport = new Teleport(wireParams);
-  }
-  get authStatus() {
-    return this._authStatus;
-  }
-  get stats() {
-    return this._teleport.stats;
-  }
-  get stream() {
-    return this._teleport.stream;
+], AutomergeHost);
+var getSpaceKeyFromDoc = (doc) => {
+  const rawSpaceKey = doc.access?.spaceKey ?? doc.experimental_spaceKey;
+  if (rawSpaceKey == null) {
+    return null;
   }
-  async open(sessionId) {
-    await this._teleport.open(sessionId);
-    this._teleport.addExtension("dxos.mesh.teleport.auth", new AuthExtension({
-      provider: this._swarmIdentity.credentialProvider,
-      verifier: this._swarmIdentity.credentialAuthenticator,
-      onAuthSuccess: () => {
-        log10("Peer authenticated", void 0, {
-          F: __dxlog_file13,
-          L: 248,
-          S: this,
-          C: (f, a) => f(...a)
-        });
-        this._authStatus = "SUCCESS";
-        this._onSessionAuth?.(this._teleport);
-      },
-      onAuthFailure: () => {
-        this._authStatus = "FAILURE";
-        this._onAuthFailure?.(this._teleport);
+  return String(rawSpaceKey);
+};
+var waitForHeads = async (handle, heads) => {
+  const unavailableHeads = new Set(heads);
+  await handle.whenReady();
+  await Event5.wrap(handle, "change").waitForCondition(() => {
+    for (const changeHash of unavailableHeads.values()) {
+      if (changeIsPresentInDoc(handle.docSync(), changeHash)) {
+        unavailableHeads.delete(changeHash);
       }
-    }));
-    this._teleport.addExtension("dxos.mesh.teleport.replicator", this.replicator);
-    this._teleport.addExtension("dxos.mesh.teleport.blobsync", this._blobSync.createExtension());
-  }
-  async close() {
-    log10("close", void 0, {
-      F: __dxlog_file13,
-      L: 264,
-      S: this,
-      C: (f, a) => f(...a)
-    });
-    await this._teleport.close();
-  }
-  async abort() {
-    await this._teleport.abort();
-  }
+    }
+    return unavailableHeads.size === 0;
+  });
+};
+var changeIsPresentInDoc = (doc, changeHash) => {
+  return !!getBackend(doc).getChangeByHash(changeHash);
+};
+var decodeCollectionState = (state) => {
+  invariant8(typeof state === "object" && state !== null, "Invalid state", {
+    F: __dxlog_file12,
+    L: 528,
+    S: void 0,
+    A: [
+      "typeof state === 'object' && state !== null",
+      "'Invalid state'"
+    ]
+  });
+  return state;
+};
+var encodeCollectionState = (state) => {
+  return state;
 };
-_ts_decorate7([
-  logInfo2
-], SpaceProtocolSession.prototype, "_wireParams", void 0);
-_ts_decorate7([
-  logInfo2
-], SpaceProtocolSession.prototype, "authStatus", null);
-
-// packages/core/echo/echo-pipeline/src/space/space-manager.ts
-import { synchronized as synchronized4, trackLeaks as trackLeaks3, Trigger as Trigger3 } from "@dxos/async";
-import { failUndefined as failUndefined2 } from "@dxos/debug";
-import { PublicKey as PublicKey8 } from "@dxos/keys";
-import { log as log14 } from "@dxos/log";
-import { trace as trace6 } from "@dxos/protocols";
-import { ComplexMap as ComplexMap4 } from "@dxos/util";
-
-// packages/core/echo/echo-pipeline/src/db-host/data-service.ts
-import { Stream } from "@dxos/codec-protobuf";
-import { invariant as invariant12 } from "@dxos/invariant";
-import { SpaceId as SpaceId3 } from "@dxos/keys";
-import { log as log13 } from "@dxos/log";
 
 // packages/core/echo/echo-pipeline/src/automerge/mesh-echo-replicator.ts
 import { invariant as invariant11 } from "@dxos/invariant";
@@ -2888,12 +2891,13 @@ import { log as log12 } from "@dxos/log";
 import { ComplexSet, defaultMap as defaultMap2 } from "@dxos/util";
 
 // packages/core/echo/echo-pipeline/src/automerge/mesh-echo-replicator-connection.ts
+import * as A2 from "@dxos/automerge/automerge";
 import { cbor } from "@dxos/automerge/automerge-repo";
 import { Resource as Resource6 } from "@dxos/context";
-import { invariant as invariant10 } from "@dxos/invariant";
+import { invariant as invariant9 } from "@dxos/invariant";
 import { log as log11 } from "@dxos/log";
 import { AutomergeReplicator } from "@dxos/teleport-extension-automerge-replicator";
-var __dxlog_file14 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/mesh-echo-replicator-connection.ts";
+var __dxlog_file13 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/mesh-echo-replicator-connection.ts";
 var DEFAULT_FACTORY = (params) => new AutomergeReplicator(...params);
 var MeshReplicatorConnection = class extends Resource6 {
   constructor(_params) {
@@ -2911,9 +2915,9 @@ var MeshReplicatorConnection = class extends Resource6 {
     });
     this.writable = new WritableStream({
       write: async (message, controller) => {
-        invariant10(this._isEnabled, "Writing to a disabled connection", {
-          F: __dxlog_file14,
-          L: 48,
+        invariant9(this._isEnabled, "Writing to a disabled connection", {
+          F: __dxlog_file13,
+          L: 49,
           S: this,
           A: [
             "this._isEnabled",
@@ -2921,6 +2925,7 @@ var MeshReplicatorConnection = class extends Resource6 {
           ]
         });
         try {
+          logSendSync(message);
           await this.replicatorExtension.sendSyncMessage({
             payload: cbor.encode(message)
           });
@@ -2944,8 +2949,8 @@ var MeshReplicatorConnection = class extends Resource6 {
             thisPeerId: this.peerId,
             remotePeerId: remotePeerId.toHex()
           }, {
-            F: __dxlog_file14,
-            L: 82,
+            F: __dxlog_file13,
+            L: 84,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -2970,9 +2975,9 @@ var MeshReplicatorConnection = class extends Resource6 {
     }
   }
   get peerId() {
-    invariant10(this._remotePeerId != null, "Remote peer has not connected yet.", {
-      F: __dxlog_file14,
-      L: 108,
+    invariant9(this._remotePeerId != null, "Remote peer has not connected yet.", {
+      F: __dxlog_file13,
+      L: 110,
       S: this,
       A: [
         "this._remotePeerId != null",
@@ -2992,9 +2997,9 @@ var MeshReplicatorConnection = class extends Resource6 {
   * Call after the remote peer has connected.
   */
   enable() {
-    invariant10(this._remotePeerId != null, "Remote peer has not connected yet.", {
-      F: __dxlog_file14,
-      L: 125,
+    invariant9(this._remotePeerId != null, "Remote peer has not connected yet.", {
+      F: __dxlog_file13,
+      L: 127,
       S: this,
       A: [
         "this._remotePeerId != null",
@@ -3010,6 +3015,45 @@ var MeshReplicatorConnection = class extends Resource6 {
     this._isEnabled = false;
   }
 };
+var logSendSync = (message) => {
+  log11("sendSyncMessage", () => {
+    const decodedSyncMessage = message.type === "sync" && message.data ? A2.decodeSyncMessage(message.data) : void 0;
+    return {
+      sync: decodedSyncMessage && {
+        headsLength: decodedSyncMessage.heads.length,
+        requesting: decodedSyncMessage.need.length > 0,
+        sendingChanges: decodedSyncMessage.changes.length > 0
+      },
+      type: message.type,
+      from: message.senderId,
+      to: message.targetId
+    };
+  }, {
+    F: __dxlog_file13,
+    L: 140,
+    S: void 0,
+    C: (f, a) => f(...a)
+  });
+};
+
+// packages/core/echo/echo-pipeline/src/automerge/space-collection.ts
+import { invariant as invariant10 } from "@dxos/invariant";
+import { SpaceId as SpaceId2 } from "@dxos/keys";
+var __dxlog_file14 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/space-collection.ts";
+var deriveCollectionIdFromSpaceId = (spaceId) => `space:${spaceId}`;
+var getSpaceIdFromCollectionId = (collectionId) => {
+  const spaceId = collectionId.replace(/^space:/, "");
+  invariant10(SpaceId2.isValid(spaceId), void 0, {
+    F: __dxlog_file14,
+    L: 12,
+    S: void 0,
+    A: [
+      "SpaceId.isValid(spaceId)",
+      ""
+    ]
+  });
+  return spaceId;
+};
 
 // packages/core/echo/echo-pipeline/src/automerge/mesh-echo-replicator.ts
 var __dxlog_file15 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/automerge/mesh-echo-replicator.ts";
@@ -3115,16 +3159,21 @@ var MeshEchoReplicator = class {
         try {
           const spaceKey = await this._context.getContainingSpaceForDocument(params.documentId);
           if (!spaceKey) {
-            log12("space key not found for share policy check", {
+            const remoteDocumentExists = await this._context.isDocumentInRemoteCollection({
+              documentId: params.documentId,
+              peerId: connection.peerId
+            });
+            log12("document not found locally for share policy check, accepting the remote document", {
               peerId: connection.peerId,
-              documentId: params.documentId
+              documentId: params.documentId,
+              remoteDocumentExists
             }, {
               F: __dxlog_file15,
-              L: 86,
+              L: 90,
               S: this,
               C: (f, a) => f(...a)
             });
-            return false;
+            return remoteDocumentExists;
           }
           const spaceId = await createIdFromSpaceKey(spaceKey);
           const authorizedDevices = this._authorizedDevices.get(spaceId);
@@ -3134,7 +3183,7 @@ var MeshEchoReplicator = class {
               documentId: params.documentId
             }, {
               F: __dxlog_file15,
-              L: 98,
+              L: 106,
               S: this,
               C: (f, a) => f(...a)
             });
@@ -3150,7 +3199,7 @@ var MeshEchoReplicator = class {
             isAuthorized
           }, {
             F: __dxlog_file15,
-            L: 106,
+            L: 114,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -3158,7 +3207,7 @@ var MeshEchoReplicator = class {
         } catch (err) {
           log12.catch(err, void 0, {
             F: __dxlog_file15,
-            L: 116,
+            L: 124,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -3174,7 +3223,7 @@ var MeshEchoReplicator = class {
             collectionId
           }, {
             F: __dxlog_file15,
-            L: 126,
+            L: 134,
             S: this,
             C: (f, a) => f(...a)
           });
@@ -3193,7 +3242,7 @@ var MeshEchoReplicator = class {
       deviceKey
     }, {
       F: __dxlog_file15,
-      L: 143,
+      L: 151,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3703,7 +3752,7 @@ function _ts_decorate9(decorators, target, key, desc) {
 }
 var __dxlog_file17 = "/home/runner/work/dxos/dxos/packages/core/echo/echo-pipeline/src/space/space-manager.ts";
 var SpaceManager = class {
-  constructor({ feedStore, networkManager, metadataStore, snapshotStore, blobStore }) {
+  constructor({ feedStore, networkManager, metadataStore, snapshotStore, blobStore, disableP2pReplication }) {
     this._spaces = new ComplexMap4(PublicKey8.hash);
     this._instanceId = PublicKey8.random().toHex();
     this._feedStore = feedStore;
@@ -3711,6 +3760,7 @@ var SpaceManager = class {
     this._metadataStore = metadataStore;
     this._snapshotStore = snapshotStore;
     this._blobStore = blobStore;
+    this._disableP2pReplication = disableP2pReplication ?? false;
   }
   // TODO(burdon): Remove.
   get spaces() {
@@ -3728,7 +3778,7 @@ var SpaceManager = class {
       id: this._instanceId
     }), {
       F: __dxlog_file17,
-      L: 103,
+      L: 114,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3736,7 +3786,7 @@ var SpaceManager = class {
       spaceKey: metadata.genesisFeedKey
     }, {
       F: __dxlog_file17,
-      L: 104,
+      L: 115,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3749,7 +3799,8 @@ var SpaceManager = class {
       networkManager: this._networkManager,
       onSessionAuth: onAuthorizedConnection,
       onAuthFailure,
-      blobStore: this._blobStore
+      blobStore: this._blobStore,
+      disableP2pReplication: this._disableP2pReplication
     });
     const snapshotManager = new SnapshotManager(this._snapshotStore, this._blobStore, protocol.blobSync);
     const space = new Space({
@@ -3769,7 +3820,7 @@ var SpaceManager = class {
       id: this._instanceId
     }), {
       F: __dxlog_file17,
-      L: 135,
+      L: 147,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3781,7 +3832,7 @@ var SpaceManager = class {
       id: this._instanceId
     }), {
       F: __dxlog_file17,
-      L: 141,
+      L: 153,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3789,7 +3840,7 @@ var SpaceManager = class {
       spaceKey: params.spaceKey
     }, {
       F: __dxlog_file17,
-      L: 142,
+      L: 154,
       S: this,
       C: (f, a) => f(...a)
     });
@@ -3805,7 +3856,8 @@ var SpaceManager = class {
         }, onCredentialResolved));
       },
       onAuthFailure: (session) => session.close(),
-      blobStore: this._blobStore
+      blobStore: this._blobStore,
+      disableP2pReplication: this._disableP2pReplication
     });
     try {
       await protocol.start();
@@ -3816,7 +3868,7 @@ var SpaceManager = class {
         id: this._instanceId
       }), {
         F: __dxlog_file17,
-        L: 165,
+        L: 178,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -3827,7 +3879,7 @@ var SpaceManager = class {
         error: err
       }), {
         F: __dxlog_file17,
-        L: 168,
+        L: 181,
         S: this,
         C: (f, a) => f(...a)
       });
@@ -4198,12 +4250,6 @@ export {
   SnapshotStore,
   DocumentsSynchronizer,
   diffCollectionState,
-  LevelDBStorageAdapter,
-  encodingOptions,
-  AutomergeHost,
-  getSpaceKeyFromDoc,
-  deriveCollectionIdFromSpaceId,
-  getSpaceIdFromCollectionId,
   AuthExtension,
   mapTimeframeToFeedIndexes,
   mapFeedIndexesToTimeframe,
@@ -4220,10 +4266,16 @@ export {
   AuthStatus,
   SpaceProtocolSession,
   SpaceManager,
+  LevelDBStorageAdapter,
+  encodingOptions,
+  AutomergeHost,
+  getSpaceKeyFromDoc,
+  deriveCollectionIdFromSpaceId,
+  getSpaceIdFromCollectionId,
   MeshEchoReplicator,
   EchoDataMonitor,
   DataServiceImpl,
   MetadataStore,
   hasInvitationExpired
 };
-//# sourceMappingURL=chunk-2MII6KJX.mjs.map
+//# sourceMappingURL=chunk-P6XSIJKM.mjs.map