@optimystic/db-core 0.13.5 → 0.14.1

package/dist/src/cohort-topic/walk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"walk.js","sourceRoot":"","sources":["../../../src/cohort-topic/walk.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAKH,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAkG5F,MAAM,gBAAgB;IAQQ;IAPZ,KAAK,CAAS;IACd,OAAO,CAAS;IAChB,gBAAgB,CAAS;IACzB,cAAc,CAAU;IACxB,kBAAkB,CAAU;IAC5B,eAAe,CAAU;IAE1C,YAA6B,IAAoB;QAApB,SAAI,GAAJ,IAAI,CAAgB;QAChD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;QAC9B,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,gBAAgB,GAAG,GAAG,CAAC,gBAAgB,IAAI,IAAI,CAAC,KAAK,CAAC;QAC3D,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC;QACjD,IAAI,CAAC,kBAAkB,GAAG,GAAG,CAAC,QAAQ,CAAC;QACvC,IAAI,CAAC,eAAe,GAAG,GAAG,CAAC,eAAe,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAmB,EAAE,IAAY,EAAE,UAAuB,EAAE,IAA0B;QACpG,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,gBAAgB,GAAG,CAAC,CAAC;QACvF,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,KAAK,CAAC;QAEnC,IAAI,CAAC,GAAG,IAAI,CAAC;QACb,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,cAAc,GAAG,CAAC,CAAC;QACvB,IAAI,UAA+B,CAAC;QACpC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,qBAAqB,GAAG,KAAK,CAAC;QAElC,SAAS,CAAC;YACT,IAAI,EAAE,KAAK,GAAG,QAAQ,EAAE,CAAC;gBACxB,wFAAwF;gBACxF,6BAA6B;gBAC7B,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5D,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;YACxG,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;YAChE,MAAM,GAAG,GAAG,UAAU,KAAK,SAAS;gBACnC,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,QAAQ,CAAC;gBACzD,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,QAAQ,EAAE;oBACtG,KAAK,EAAE,IAAI,CAAC,KAAK;oBACjB,OAAO,EAAE,IAAI,CAAC,OAAO;iBACrB,CAAC,CAAC;YACJ,MAAM,KAAK,GAAG,qBAAqB,CAAC,GAAG,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;YAE/D,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;gBACtB,KAAK,UAAU,CAAC,CAAC,CAAC;oBACjB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;gBACpC,CAAC;gBACD,KAAK,UAAU,CAAC,CAAC,CAAC;oBACjB,kFAAkF;oBAClF,UAAU,GAAG,SAAS,CAAC;oBACvB,cAAc,GAAG,CAAC,CAAC;oBACnB,IAAI,KAAK,IAAI,qBAAqB,EAAE,CAAC;wBACpC,oFAAoF;wBACpF,gFAAgF;wBAChF,6CAA6C;wBAC7C,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC5D,CAAC;oBACD,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;oBACnB,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;wBACd,IAAI,SAAS,EAAE,CAAC;4BACf,6EAA6E;4BAC7E,yDAAyD;4BACzD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC5D,CAAC;wBACD,IAAI,KAAK,EAAE,CAAC;4BACX,iFAAiF;4BACjF,6EAA6E;4BAC7E,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC5D,CAAC;wBACD,mFAAmF;wBACnF,CAAC,GAAG,CAAC,CAAC;wBACN,SAAS,GAAG,IAAI,CAAC;wBACjB,MAAM;oBACP,CAAC;oBACD,CAAC,GAAG,IAAI,CAAC;oBACT,SAAS,GAAG,KAAK,CAAC;oBAClB,MAAM;gBACP,CAAC;gBACD,KAAK,UAAU,CAAC,CAAC,CAAC;oBACjB,UAAU,GAAG,SAAS,CAAC;oBACvB,cAAc,GAAG,CAAC,CAAC;oBACnB,SAAS,GAAG,KAAK,CAAC;oBAClB,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,CAAC,GAAG,CAAC,CAAC;oBAC7C,IAAI,KAAK,EAAE,CAAC;wBACX,qBAAqB,GAAG,IAAI,CAAC;oBAC9B,CAAC;oBACD,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;wBAC1B,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;oBACzC,CAAC;oBACD,CAAC,GAAG,UAAU,CAAC,CAAC,gEAAgE;oBAChF,MAAM;gBACP,CAAC;gBACD,KAAK,kBAAkB,CAAC,CAAC,CAAC;oBACzB,MAAM,UAAU,GAAG,KAAK,CAAC,gBAAgB,IAAI,EAAE,CAAC;oBAChD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,cAAc,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;wBACxE,kFAAkF;wBAClF,gEAAgE;wBAChE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC5D,CAAC;oBACD,uFAAuF;oBACvF,UAAU,GAAG,EAAE,EAAE,EAAE,aAAa,CAAC,UAAU,CAAC,cAAc,GAAG,UAAU,CAAC,MAAM,CAAE,CAAC,EAAE,CAAC;oBACpF,cAAc,EAAE,CAAC;oBACjB,MAAM;gBACP,CAAC;gBACD,KAAK,kBAAkB,CAAC,CAAC,CAAC;oBACzB,mFAAmF;oBACnF,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,CAAC,YAAY,IAAI,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClF,CAAC;gBACD,OAAO,CAAC,CAAC,CAAC;oBACT,sFAAsF;oBACtF,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5D,CAAC;YACF,CAAC;QACF,CAAC;IACF,CAAC;CACD;AAED,qGAAqG;AACrG,MAAM,UAAU,gBAAgB,CAAC,IAAoB;IACpD,OAAO,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC"}

package/dist/src/cohort-topic/willingness.d.ts

@@ -0,0 +1,123 @@
+/**
+ * Cohort-topic substrate — per-member willingness / admission control.
+ *
+ * Transcribed from `docs/cohort-topic.md` §Willingness and §Tier ladder, folded back from the
+ * simulator-validated `packages/substrate-simulator/src/{willingness,backoff}.ts`. When FRET's
+ * `RouteAndMaybeAct` lands a `RegisterV1` on a member, that member runs this check and returns one
+ * of three outcomes:
+ *
+ * - **{@link AcceptedOutcome}** — the routed member is willing; it becomes `primary`.
+ * - **{@link UnwillingMemberOutcome}** — the routed member is personally unwilling, but the gossiped
+ *   willingness vector says siblings will serve this tier; the caller retries a named sibling at the
+ *   *same* coord (spatial move within the cohort).
+ * - **{@link UnwillingCohortOutcome}** — fewer than a quorum of members are willing to serve the
+ *   tier, so the cohort declines the tier entirely; the caller backs off in *time* (no spatial
+ *   move — see §Why the caller doesn't walk on UnwillingCohort). The `retryAfterMs` follows the
+ *   capped-doubling curve in {@link backoffRetryMs}.
+ *
+ * A member's *live* willingness for a tier is: its profile serves the tier, the tier's load bucket
+ * is below `overloadBucket`, **and** it is under its per-tier primary-topic budget. The coarse 1-bit
+ * gossiped willingness vector ({@link selfWillingnessBits}) carries only profile-∧-load — the budget
+ * is a per-registration gate applied live at the routed member. (Resolved open question: willingness
+ * stays at **1 bit per tier** — no finer T3 gradations; the load bucket already supplies coarse load.)
+ */
+import { type LoadBarometerState } from "./load/barometer.js";
+import type { CohortView } from "./gossip/view.js";
+import type { RegisterV1 } from "./wire/types.js";
+import { type NodeProfile, type Tier } from "./tiers.js";
+/** The routed member is willing and will serve as `primary`. */
+export interface AcceptedOutcome {
+    readonly kind: "accepted";
+}
+/** Routed member unwilling; these siblings (raw peer-id bytes) will serve — retry one at the same coord. */
+export interface UnwillingMemberOutcome {
+    readonly kind: "unwilling_member";
+    readonly candidateMembers: Uint8Array[];
+}
+/** No quorum of willing members; back off `retryAfterMs` in time and retry from `d_max`. */
+export interface UnwillingCohortOutcome {
+    readonly kind: "unwilling_cohort";
+    readonly retryAfterMs: number;
+}
+export type WillingnessOutcome = AcceptedOutcome | UnwillingMemberOutcome | UnwillingCohortOutcome;
+/** Per-member willingness / admission check. */
+export interface WillingnessCheck {
+    /** Classify `reg` routed onto this member, given the member's static profile and the clock. */
+    evaluate(reg: RegisterV1, self: NodeProfile, now: number): WillingnessOutcome;
+}
+/** Test bit `tier` (T0 = bit 0 … T3 = bit 3) of a packed 4-bit willingness vector. */
+export declare function tierBit(bits: number, tier: Tier): boolean;
+/** Pack a per-tier predicate into a 4-bit willingness vector (bit `t` set iff `willing(t)`). */
+export declare function packWillingnessBits(willing: (tier: Tier) => boolean): number;
+/** The packed vector as a single hex nibble — the `CohortGossipV1.willingnessBits` wire form. */
+export declare function willingnessBitsHex(bits: number): string;
+/**
+ * This member's gossiped (coarse) willingness vector: bit `t` set iff the profile serves `t` and the
+ * tier is not shed under load. The per-tier primary-topic budget is deliberately **not** folded in
+ * — it is a live per-registration gate, not a gossiped signal (§Willingness: the gossiped vector is
+ * "one bit per tier per member… refreshed every gossip round").
+ */
+export declare function selfWillingnessBits(self: NodeProfile, barometer: LoadBarometerState): number;
+export interface BackoffConfig {
+    /** First-rejection delay (ms). Default 1000. */
+    readonly baseMs: number;
+    /** Geometric growth per rejection. Default 2 (doubling). */
+    readonly factor: number;
+    /** Hard ceiling on a single delay (ms). Default 60000. */
+    readonly capMs: number;
+}
+/** Settled back-off curve (`docs/cohort-topic.md` §Willingness): `base = 1 s`, `factor = 2`, `cap = 60 s`. */
+export declare const DEFAULT_BACKOFF_CONFIG: BackoffConfig;
+/**
+ * `retryAfter` for the `attempt`-th rejection (0-based): `⌊base · factor^attempt⌋` capped at `capMs`.
+ * The capped doubling bounds the rejections a participant suffers across an overload window at
+ * `O(log(window/base))` (≤ ~6 to span 60 s) rather than the `window/base` a fixed interval incurs.
+ * As survivors of a burst back off geometrically, offered load sheds and accepted/sec holds at the
+ * willing-quorum capacity without a cascade.
+ */
+export declare function backoffRetryMs(attempt: number, config?: BackoffConfig): number;
+export interface WillingnessConfig {
+    /** Cohort size `k` (drives the default quorum). Default 16. */
+    cohortSize?: number;
+    /**
+     * Members that must be willing to serve a tier for the cohort to take it on. Default: strict
+     * majority of `cohortSize` (`⌊k/2⌋ + 1`). Not pinned by `docs/cohort-topic.md` — §Tier ladder
+     * only requires "a quorum"; configurable here, revisitable by the Edge/Core policy ticket.
+     */
+    quorum?: number;
+    /** Load bucket at/above which a tier is shed. Default {@link DEFAULT_OVERLOAD_BUCKET} (6). */
+    overloadBucket?: number;
+    /**
+     * Max topics this member may be `primary` for at a single tier. Default 2048 (`topics_max`).
+     * The doc names the per-member per-tier budget but pins no number; configurable here.
+     */
+    maxPrimaryTopicsPerTier?: number;
+    /** Back-off curve for `unwilling_cohort` retries. Default {@link DEFAULT_BACKOFF_CONFIG}. */
+    backoff?: BackoffConfig;
+}
+export interface WillingnessDeps {
+    /** This member's own per-tier load barometer (live willingness uses its buckets). */
+    barometer: LoadBarometerState;
+    /** Merged per-member gossip view — the sibling willingness vectors. */
+    view: CohortView;
+    /** This member's own id, base64url (the `fromMember` key) — excluded from the sibling scan. */
+    selfMember: string;
+    /** Count of topics this member is already `primary` for at `tier` (the budget gate input). */
+    primaryTopicCount: (tier: Tier) => number;
+    /**
+     * Rejection-attempt count for `reg`, driving the `retryAfter` curve. The anti-DoS rate limiter
+     * owns the counter; the *curve* lives here. Default `() => 0` (first-rejection delay).
+     */
+    attempts?: (reg: RegisterV1) => number;
+    config?: WillingnessConfig;
+}
+/** Default quorum: strict majority of the cohort. */
+export declare function defaultQuorum(cohortSize: number): number;
+/** Build a {@link WillingnessCheck} over the injected barometer + gossip view + budget source. */
+export declare function createWillingnessCheck(deps: WillingnessDeps): WillingnessCheck;
+/** Convenience: a willingness check with a fresh idle barometer (tests / single-tier callers). */
+export declare function createWillingnessCheckWithIdleBarometer(deps: Omit<WillingnessDeps, "barometer">): {
+    check: WillingnessCheck;
+    barometer: LoadBarometerState;
+};
+//# sourceMappingURL=willingness.d.ts.map

package/dist/src/cohort-topic/willingness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"willingness.d.ts","sourceRoot":"","sources":["../../../src/cohort-topic/willingness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAgD,KAAK,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC5G,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,EAAa,KAAK,WAAW,EAAE,KAAK,IAAI,EAAE,MAAM,YAAY,CAAC;AAEpE,gEAAgE;AAChE,MAAM,WAAW,eAAe;IAC/B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;CAC1B;AAED,4GAA4G;AAC5G,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,gBAAgB,EAAE,UAAU,EAAE,CAAC;CACxC;AAED,4FAA4F;AAC5F,MAAM,WAAW,sBAAsB;IACtC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,MAAM,kBAAkB,GAAG,eAAe,GAAG,sBAAsB,GAAG,sBAAsB,CAAC;AAEnG,gDAAgD;AAChD,MAAM,WAAW,gBAAgB;IAChC,+FAA+F;IAC/F,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,GAAG,kBAAkB,CAAC;CAC9E;AAID,sFAAsF;AACtF,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAEzD;AAED,gGAAgG;AAChG,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,GAAG,MAAM,CAM5E;AAED,iGAAiG;AACjG,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,kBAAkB,GAAG,MAAM,CAE5F;AAID,MAAM,WAAW,aAAa;IAC7B,gDAAgD;IAChD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,4DAA4D;IAC5D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,0DAA0D;IAC1D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACvB;AAED,8GAA8G;AAC9G,eAAO,MAAM,sBAAsB,EAAE,aAIpC,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,GAAE,aAAsC,GAAG,MAAM,CAMtG;AAID,MAAM,WAAW,iBAAiB;IACjC,+DAA+D;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8FAA8F;IAC9F,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,6FAA6F;IAC7F,OAAO,CAAC,EAAE,aAAa,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC/B,qFAAqF;IACrF,SAAS,EAAE,kBAAkB,CAAC;IAC9B,uEAAuE;IACvE,IAAI,EAAE,UAAU,CAAC;IACjB,+FAA+F;IAC/F,UAAU,EAAE,MAAM,CAAC;IACnB,8FAA8F;IAC9F,iBAAiB,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,MAAM,CAAC;IAC1C;;;OAGG;IACH,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,UAAU,KAAK,MAAM,CAAC;IACvC,MAAM,CAAC,EAAE,iBAAiB,CAAC;CAC3B;AAED,qDAAqD;AACrD,wBAAgB,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAExD;AAgED,kGAAkG;AAClG,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,eAAe,GAAG,gBAAgB,CAE9E;AAED,kGAAkG;AAClG,wBAAgB,uCAAuC,CACtD,IAAI,EAAE,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,GACtC;IAAE,KAAK,EAAE,gBAAgB,CAAC;IAAC,SAAS,EAAE,kBAAkB,CAAA;CAAE,CAG5D"}

package/dist/src/cohort-topic/willingness.js

@@ -0,0 +1,143 @@
+/**
+ * Cohort-topic substrate — per-member willingness / admission control.
+ *
+ * Transcribed from `docs/cohort-topic.md` §Willingness and §Tier ladder, folded back from the
+ * simulator-validated `packages/substrate-simulator/src/{willingness,backoff}.ts`. When FRET's
+ * `RouteAndMaybeAct` lands a `RegisterV1` on a member, that member runs this check and returns one
+ * of three outcomes:
+ *
+ * - **{@link AcceptedOutcome}** — the routed member is willing; it becomes `primary`.
+ * - **{@link UnwillingMemberOutcome}** — the routed member is personally unwilling, but the gossiped
+ *   willingness vector says siblings will serve this tier; the caller retries a named sibling at the
+ *   *same* coord (spatial move within the cohort).
+ * - **{@link UnwillingCohortOutcome}** — fewer than a quorum of members are willing to serve the
+ *   tier, so the cohort declines the tier entirely; the caller backs off in *time* (no spatial
+ *   move — see §Why the caller doesn't walk on UnwillingCohort). The `retryAfterMs` follows the
+ *   capped-doubling curve in {@link backoffRetryMs}.
+ *
+ * A member's *live* willingness for a tier is: its profile serves the tier, the tier's load bucket
+ * is below `overloadBucket`, **and** it is under its per-tier primary-topic budget. The coarse 1-bit
+ * gossiped willingness vector ({@link selfWillingnessBits}) carries only profile-∧-load — the budget
+ * is a per-registration gate applied live at the routed member. (Resolved open question: willingness
+ * stays at **1 bit per tier** — no finer T3 gradations; the load bucket already supplies coarse load.)
+ */
+import { createLoadBarometer, DEFAULT_OVERLOAD_BUCKET } from "./load/barometer.js";
+import { b64urlToBytes } from "./wire/codec.js";
+import { ALL_TIERS } from "./tiers.js";
+// --- willingness-vector bit packing (folded back from simulator `willingnessBits`) ---
+/** Test bit `tier` (T0 = bit 0 … T3 = bit 3) of a packed 4-bit willingness vector. */
+export function tierBit(bits, tier) {
+    return (bits & (1 << tier)) !== 0;
+}
+/** Pack a per-tier predicate into a 4-bit willingness vector (bit `t` set iff `willing(t)`). */
+export function packWillingnessBits(willing) {
+    let bits = 0;
+    for (const t of ALL_TIERS) {
+        if (willing(t))
+            bits |= 1 << t;
+    }
+    return bits;
+}
+/** The packed vector as a single hex nibble — the `CohortGossipV1.willingnessBits` wire form. */
+export function willingnessBitsHex(bits) {
+    return (bits & 0xf).toString(16);
+}
+/**
+ * This member's gossiped (coarse) willingness vector: bit `t` set iff the profile serves `t` and the
+ * tier is not shed under load. The per-tier primary-topic budget is deliberately **not** folded in
+ * — it is a live per-registration gate, not a gossiped signal (§Willingness: the gossiped vector is
+ * "one bit per tier per member… refreshed every gossip round").
+ */
+export function selfWillingnessBits(self, barometer) {
+    return packWillingnessBits((t) => self.willingTiers.has(t) && barometer.loadWilling(t));
+}
+/** Settled back-off curve (`docs/cohort-topic.md` §Willingness): `base = 1 s`, `factor = 2`, `cap = 60 s`. */
+export const DEFAULT_BACKOFF_CONFIG = {
+    baseMs: 1000,
+    factor: 2,
+    capMs: 60_000,
+};
+/**
+ * `retryAfter` for the `attempt`-th rejection (0-based): `⌊base · factor^attempt⌋` capped at `capMs`.
+ * The capped doubling bounds the rejections a participant suffers across an overload window at
+ * `O(log(window/base))` (≤ ~6 to span 60 s) rather than the `window/base` a fixed interval incurs.
+ * As survivors of a burst back off geometrically, offered load sheds and accepted/sec holds at the
+ * willing-quorum capacity without a cascade.
+ */
+export function backoffRetryMs(attempt, config = DEFAULT_BACKOFF_CONFIG) {
+    if (!Number.isInteger(attempt) || attempt < 0) {
+        throw new RangeError(`attempt must be a non-negative integer, got ${attempt}`);
+    }
+    const raw = config.baseMs * Math.pow(config.factor, attempt);
+    return Math.min(Math.floor(raw), config.capMs);
+}
+/** Default quorum: strict majority of the cohort. */
+export function defaultQuorum(cohortSize) {
+    return Math.floor(cohortSize / 2) + 1;
+}
+class GossipWillingnessCheck {
+    deps;
+    quorum;
+    overloadBucket;
+    maxPrimaryTopicsPerTier;
+    backoff;
+    attempts;
+    constructor(deps) {
+        this.deps = deps;
+        const cfg = deps.config ?? {};
+        const cohortSize = cfg.cohortSize ?? 16;
+        this.quorum = cfg.quorum ?? defaultQuorum(cohortSize);
+        this.overloadBucket = cfg.overloadBucket ?? DEFAULT_OVERLOAD_BUCKET;
+        this.maxPrimaryTopicsPerTier = cfg.maxPrimaryTopicsPerTier ?? 2048;
+        this.backoff = cfg.backoff ?? DEFAULT_BACKOFF_CONFIG;
+        this.attempts = deps.attempts ?? (() => 0);
+    }
+    evaluate(reg, self, now) {
+        const tier = reg.tier;
+        if (!ALL_TIERS.includes(tier)) {
+            // An op tier outside T0..T3 is not serviceable; treat as a cohort-level decline.
+            return { kind: "unwilling_cohort", retryAfterMs: backoffRetryMs(this.attempts(reg), this.backoff) };
+        }
+        const selfWilling = this.selfLiveWilling(self, tier);
+        const siblings = this.willingSiblings(tier);
+        const willingCount = siblings.length + (selfWilling ? 1 : 0);
+        // Quorum gate (§Tier ladder): the cohort takes on tier-T duties only if a quorum of members
+        // is willing; otherwise registrations get UnwillingCohort and the caller backs off in time.
+        if (willingCount < this.quorum) {
+            return { kind: "unwilling_cohort", retryAfterMs: backoffRetryMs(this.attempts(reg), this.backoff) };
+        }
+        if (selfWilling) {
+            return { kind: "accepted" };
+        }
+        // Quorum holds and self is unwilling → some sibling will serve.
+        return { kind: "unwilling_member", candidateMembers: siblings.map((m) => b64urlToBytes(m)) };
+    }
+    /** Live willingness of *this* member for `tier`: profile ∧ load-under-threshold ∧ under budget. */
+    selfLiveWilling(self, tier) {
+        return (self.willingTiers.has(tier) &&
+            this.deps.barometer.bucket(tier) < this.overloadBucket &&
+            this.deps.primaryTopicCount(tier) < this.maxPrimaryTopicsPerTier);
+    }
+    /** Sibling member keys (base64url) whose *gossiped* willingness vector serves `tier`. */
+    willingSiblings(tier) {
+        const out = [];
+        for (const [member, contribution] of this.deps.view.all()) {
+            if (member === this.deps.selfMember)
+                continue; // self counted via live willingness
+            if (tierBit(contribution.willingness, tier)) {
+                out.push(member);
+            }
+        }
+        return out;
+    }
+}
+/** Build a {@link WillingnessCheck} over the injected barometer + gossip view + budget source. */
+export function createWillingnessCheck(deps) {
+    return new GossipWillingnessCheck(deps);
+}
+/** Convenience: a willingness check with a fresh idle barometer (tests / single-tier callers). */
+export function createWillingnessCheckWithIdleBarometer(deps) {
+    const barometer = createLoadBarometer({ overloadBucket: deps.config?.overloadBucket });
+    return { check: createWillingnessCheck({ ...deps, barometer }), barometer };
+}
+//# sourceMappingURL=willingness.js.map

package/dist/src/cohort-topic/willingness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"willingness.js","sourceRoot":"","sources":["../../../src/cohort-topic/willingness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAA2B,MAAM,qBAAqB,CAAC;AAE5G,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,OAAO,EAAE,SAAS,EAA+B,MAAM,YAAY,CAAC;AA2BpE,wFAAwF;AAExF,sFAAsF;AACtF,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,IAAU;IAC/C,OAAO,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,mBAAmB,CAAC,OAAgC;IACnE,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC3B,IAAI,OAAO,CAAC,CAAC,CAAC;YAAE,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC9C,OAAO,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAClC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAiB,EAAE,SAA6B;IACnF,OAAO,mBAAmB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;AACzF,CAAC;AAaD,8GAA8G;AAC9G,MAAM,CAAC,MAAM,sBAAsB,GAAkB;IACpD,MAAM,EAAE,IAAI;IACZ,MAAM,EAAE,CAAC;IACT,KAAK,EAAE,MAAM;CACb,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,SAAwB,sBAAsB;IAC7F,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,UAAU,CAAC,+CAA+C,OAAO,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7D,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC;AAyCD,qDAAqD;AACrD,MAAM,UAAU,aAAa,CAAC,UAAkB;IAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,sBAAsB;IAOE;IANZ,MAAM,CAAS;IACf,cAAc,CAAS;IACvB,uBAAuB,CAAS;IAChC,OAAO,CAAgB;IACvB,QAAQ,CAA8B;IAEvD,YAA6B,IAAqB;QAArB,SAAI,GAAJ,IAAI,CAAiB;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;QAC9B,MAAM,UAAU,GAAG,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,aAAa,CAAC,UAAU,CAAC,CAAC;QACtD,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC,cAAc,IAAI,uBAAuB,CAAC;QACpE,IAAI,CAAC,uBAAuB,GAAG,GAAG,CAAC,uBAAuB,IAAI,IAAI,CAAC;QACnE,IAAI,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,sBAAsB,CAAC;QACrD,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,CAAC,GAAW,EAAE,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;IAED,QAAQ,CAAC,GAAe,EAAE,IAAiB,EAAE,GAAW;QACvD,MAAM,IAAI,GAAG,GAAG,CAAC,IAAY,CAAC;QAC9B,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,iFAAiF;YACjF,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,YAAY,EAAE,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACrG,CAAC;QAED,MAAM,WAAW,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAE7D,4FAA4F;QAC5F,4FAA4F;QAC5F,IAAI,YAAY,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,YAAY,EAAE,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACrG,CAAC;QACD,IAAI,WAAW,EAAE,CAAC;YACjB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QAC7B,CAAC;QACD,gEAAgE;QAChE,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9F,CAAC;IAED,mGAAmG;IAC3F,eAAe,CAAC,IAAiB,EAAE,IAAU;QACpD,OAAO,CACN,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC;YAC3B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,cAAc;YACtD,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,uBAAuB,CAChE,CAAC;IACH,CAAC;IAED,yFAAyF;IACjF,eAAe,CAAC,IAAU;QACjC,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YAC3D,IAAI,MAAM,KAAK,IAAI,CAAC,IAAI,CAAC,UAAU;gBAAE,SAAS,CAAC,oCAAoC;YACnF,IAAI,OAAO,CAAC,YAAY,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC;gBAC7C,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClB,CAAC;QACF,CAAC;QACD,OAAO,GAAG,CAAC;IACZ,CAAC;CACD;AAED,kGAAkG;AAClG,MAAM,UAAU,sBAAsB,CAAC,IAAqB;IAC3D,OAAO,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC;AACzC,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,uCAAuC,CACtD,IAAwC;IAExC,MAAM,SAAS,GAAG,mBAAmB,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;IACvF,OAAO,EAAE,KAAK,EAAE,sBAAsB,CAAC,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC;AAC7E,CAAC"}

package/dist/src/cohort-topic/wire/codec.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Cohort-topic substrate — wire codec.
+ *
+ * Framing: every message is a 4-byte big-endian unsigned length prefix followed by the UTF-8
+ * JSON body, so a framed message is self-delimiting on a stream. Frames whose declared body
+ * length exceeds {@link DEFAULT_MAX_MESSAGE_BYTES} (or a caller-supplied ceiling) are rejected
+ * with {@link CohortWireError} before any allocation against the declared size.
+ *
+ * Byte fields travel as base64url (no padding); {@link bytesToB64url} / {@link b64urlToBytes}
+ * are the shared, cross-platform (browser/node/RN) helpers — no Node `Buffer`.
+ */
+import type { CohortGossipV1, DemotionNoticeV1, MembershipCertV1, PromotionNoticeV1, RegisterReplyV1, RegisterV1, RenewReplyV1, RenewV1, SignRequestV1, SignReplyV1 } from "./types.js";
+/**
+ * Default ceiling on a framed body, in bytes. Sized conservatively at 1 MiB until the
+ * simulator-validated cohort-gossip worst case (`topics_max` topic summaries, see
+ * `docs/cohort-topic.md` §Configuration) is converted into an exact bound.
+ *
+ * TODO(cohort-topic): derive the exact ceiling from `topics_max` (2048) × the per-summary JSON
+ * size plus the willingness/load header, rather than this flat 1 MiB cap.
+ */
+export declare const DEFAULT_MAX_MESSAGE_BYTES: number;
+/** Encode bytes as base64url with no padding. */
+export declare function bytesToB64url(b: Uint8Array): string;
+/** Decode a base64url string (no padding) to bytes. Throws {@link CohortWireError} on bad input. */
+export declare function b64urlToBytes(s: string): Uint8Array;
+/** Encode a V1 message as a length-prefixed UTF-8 JSON frame. */
+export declare function encodeCohortMessage<T extends {
+    v: 1;
+}>(msg: T, maxMessageBytes?: number): Uint8Array;
+/** Strip the length prefix and `JSON.parse` the body. Throws {@link CohortWireError} on a malformed frame. */
+export declare function decodeCohortMessage(bytes: Uint8Array, maxMessageBytes?: number): unknown;
+export declare function decodeRegisterV1(bytes: Uint8Array, maxMessageBytes?: number): RegisterV1;
+export declare function decodeRegisterReplyV1(bytes: Uint8Array, maxMessageBytes?: number): RegisterReplyV1;
+export declare function decodeRenewV1(bytes: Uint8Array, maxMessageBytes?: number): RenewV1;
+export declare function decodeRenewReplyV1(bytes: Uint8Array, maxMessageBytes?: number): RenewReplyV1;
+export declare function decodePromotionNoticeV1(bytes: Uint8Array, maxMessageBytes?: number): PromotionNoticeV1;
+export declare function decodeDemotionNoticeV1(bytes: Uint8Array, maxMessageBytes?: number): DemotionNoticeV1;
+export declare function decodeCohortGossipV1(bytes: Uint8Array, maxMessageBytes?: number): CohortGossipV1;
+export declare function decodeMembershipCertV1(bytes: Uint8Array, maxMessageBytes?: number): MembershipCertV1;
+export declare function decodeSignRequestV1(bytes: Uint8Array, maxMessageBytes?: number): SignRequestV1;
+export declare function decodeSignReplyV1(bytes: Uint8Array, maxMessageBytes?: number): SignReplyV1;
+//# sourceMappingURL=codec.d.ts.map

package/dist/src/cohort-topic/wire/codec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codec.d.ts","sourceRoot":"","sources":["../../../../src/cohort-topic/wire/codec.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAeH,OAAO,KAAK,EACX,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,iBAAiB,EACjB,eAAe,EACf,UAAU,EACV,YAAY,EACZ,OAAO,EACP,aAAa,EACb,WAAW,EACX,MAAM,YAAY,CAAC;AAEpB;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,QAAc,CAAC;AAmBrD,iDAAiD;AACjD,wBAAgB,aAAa,CAAC,CAAC,EAAE,UAAU,GAAG,MAAM,CAgBnD;AAED,oGAAoG;AACpG,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,UAAU,CAkCnD;AAID,iEAAiE;AACjE,wBAAgB,mBAAmB,CAAC,CAAC,SAAS;IAAE,CAAC,EAAE,CAAC,CAAA;CAAE,EAAE,GAAG,EAAE,CAAC,EAAE,eAAe,GAAE,MAAkC,GAAG,UAAU,CAU/H;AAED,8GAA8G;AAC9G,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,UAAU,EAAE,eAAe,GAAE,MAAkC,GAAG,OAAO,CAwBnH;AAID,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,UAAU,CAExF;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,UAAU,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,eAAe,CAElG;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,OAAO,CAElF;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,YAAY,CAE5F;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,UAAU,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,iBAAiB,CAEtG;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,UAAU,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,gBAAgB,CAEpG;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,UAAU,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,cAAc,CAEhG;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,UAAU,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,gBAAgB,CAEpG;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,UAAU,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,aAAa,CAE9F;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,WAAW,CAE1F"}

package/dist/src/cohort-topic/wire/codec.js

@@ -0,0 +1,163 @@
+/**
+ * Cohort-topic substrate — wire codec.
+ *
+ * Framing: every message is a 4-byte big-endian unsigned length prefix followed by the UTF-8
+ * JSON body, so a framed message is self-delimiting on a stream. Frames whose declared body
+ * length exceeds {@link DEFAULT_MAX_MESSAGE_BYTES} (or a caller-supplied ceiling) are rejected
+ * with {@link CohortWireError} before any allocation against the declared size.
+ *
+ * Byte fields travel as base64url (no padding); {@link bytesToB64url} / {@link b64urlToBytes}
+ * are the shared, cross-platform (browser/node/RN) helpers — no Node `Buffer`.
+ */
+import { CohortWireError } from "./validate.js";
+import { validateCohortGossipV1, validateDemotionNoticeV1, validateMembershipCertV1, validatePromotionNoticeV1, validateRegisterReplyV1, validateRegisterV1, validateRenewReplyV1, validateRenewV1, validateSignRequestV1, validateSignReplyV1, } from "./validate.js";
+/**
+ * Default ceiling on a framed body, in bytes. Sized conservatively at 1 MiB until the
+ * simulator-validated cohort-gossip worst case (`topics_max` topic summaries, see
+ * `docs/cohort-topic.md` §Configuration) is converted into an exact bound.
+ *
+ * TODO(cohort-topic): derive the exact ceiling from `topics_max` (2048) × the per-summary JSON
+ * size plus the willingness/load header, rather than this flat 1 MiB cap.
+ */
+export const DEFAULT_MAX_MESSAGE_BYTES = 1024 * 1024;
+const LENGTH_PREFIX_BYTES = 4;
+const utf8Encoder = new TextEncoder();
+const utf8Decoder = new TextDecoder("utf-8", { fatal: true });
+// --- base64url helpers (no padding, cross-platform) ---
+const B64URL_ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";
+const B64URL_LOOKUP = (() => {
+    const table = new Array(128).fill(-1);
+    for (let i = 0; i < B64URL_ALPHABET.length; i++) {
+        table[B64URL_ALPHABET.charCodeAt(i)] = i;
+    }
+    return table;
+})();
+/** Encode bytes as base64url with no padding. */
+export function bytesToB64url(b) {
+    let out = "";
+    let i = 0;
+    for (; i + 3 <= b.length; i += 3) {
+        const n = (b[i] << 16) | (b[i + 1] << 8) | b[i + 2];
+        out += B64URL_ALPHABET[(n >> 18) & 63] + B64URL_ALPHABET[(n >> 12) & 63] + B64URL_ALPHABET[(n >> 6) & 63] + B64URL_ALPHABET[n & 63];
+    }
+    const rem = b.length - i;
+    if (rem === 1) {
+        const n = b[i] << 16;
+        out += B64URL_ALPHABET[(n >> 18) & 63] + B64URL_ALPHABET[(n >> 12) & 63];
+    }
+    else if (rem === 2) {
+        const n = (b[i] << 16) | (b[i + 1] << 8);
+        out += B64URL_ALPHABET[(n >> 18) & 63] + B64URL_ALPHABET[(n >> 12) & 63] + B64URL_ALPHABET[(n >> 6) & 63];
+    }
+    return out;
+}
+/** Decode a base64url string (no padding) to bytes. Throws {@link CohortWireError} on bad input. */
+export function b64urlToBytes(s) {
+    const len = s.length;
+    if (len % 4 === 1) {
+        throw new CohortWireError("base64url: invalid length");
+    }
+    const fullGroups = len >> 2;
+    const rem = len & 3;
+    const outLen = fullGroups * 3 + (rem === 0 ? 0 : rem - 1);
+    const out = new Uint8Array(outLen);
+    let si = 0;
+    let oi = 0;
+    const sext = (ch) => {
+        const v = ch < 128 ? B64URL_LOOKUP[ch] : -1;
+        if (v < 0) {
+            throw new CohortWireError("base64url: invalid character");
+        }
+        return v;
+    };
+    for (let g = 0; g < fullGroups; g++) {
+        const n = (sext(s.charCodeAt(si)) << 18) | (sext(s.charCodeAt(si + 1)) << 12) | (sext(s.charCodeAt(si + 2)) << 6) | sext(s.charCodeAt(si + 3));
+        out[oi++] = (n >> 16) & 0xff;
+        out[oi++] = (n >> 8) & 0xff;
+        out[oi++] = n & 0xff;
+        si += 4;
+    }
+    if (rem === 2) {
+        const n = (sext(s.charCodeAt(si)) << 18) | (sext(s.charCodeAt(si + 1)) << 12);
+        out[oi++] = (n >> 16) & 0xff;
+    }
+    else if (rem === 3) {
+        const n = (sext(s.charCodeAt(si)) << 18) | (sext(s.charCodeAt(si + 1)) << 12) | (sext(s.charCodeAt(si + 2)) << 6);
+        out[oi++] = (n >> 16) & 0xff;
+        out[oi++] = (n >> 8) & 0xff;
+    }
+    return out;
+}
+// --- framing ---
+/** Encode a V1 message as a length-prefixed UTF-8 JSON frame. */
+export function encodeCohortMessage(msg, maxMessageBytes = DEFAULT_MAX_MESSAGE_BYTES) {
+    const body = utf8Encoder.encode(JSON.stringify(msg));
+    if (body.length > maxMessageBytes) {
+        throw new CohortWireError(`message body ${body.length} exceeds max_message_bytes ${maxMessageBytes}`);
+    }
+    const frame = new Uint8Array(LENGTH_PREFIX_BYTES + body.length);
+    const view = new DataView(frame.buffer);
+    view.setUint32(0, body.length, false);
+    frame.set(body, LENGTH_PREFIX_BYTES);
+    return frame;
+}
+/** Strip the length prefix and `JSON.parse` the body. Throws {@link CohortWireError} on a malformed frame. */
+export function decodeCohortMessage(bytes, maxMessageBytes = DEFAULT_MAX_MESSAGE_BYTES) {
+    if (bytes.length < LENGTH_PREFIX_BYTES) {
+        throw new CohortWireError("frame too short for length prefix");
+    }
+    const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
+    const declared = view.getUint32(0, false);
+    if (declared > maxMessageBytes) {
+        throw new CohortWireError(`declared body length ${declared} exceeds max_message_bytes ${maxMessageBytes}`);
+    }
+    if (LENGTH_PREFIX_BYTES + declared !== bytes.length) {
+        throw new CohortWireError(`frame length mismatch: declared ${declared}, have ${bytes.length - LENGTH_PREFIX_BYTES}`);
+    }
+    const body = bytes.subarray(LENGTH_PREFIX_BYTES, LENGTH_PREFIX_BYTES + declared);
+    let text;
+    try {
+        text = utf8Decoder.decode(body);
+    }
+    catch {
+        throw new CohortWireError("frame body is not valid UTF-8");
+    }
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        throw new CohortWireError("frame body is not valid JSON");
+    }
+}
+// --- typed decoders (decode frame → validate → narrow) ---
+export function decodeRegisterV1(bytes, maxMessageBytes) {
+    return validateRegisterV1(decodeCohortMessage(bytes, maxMessageBytes));
+}
+export function decodeRegisterReplyV1(bytes, maxMessageBytes) {
+    return validateRegisterReplyV1(decodeCohortMessage(bytes, maxMessageBytes));
+}
+export function decodeRenewV1(bytes, maxMessageBytes) {
+    return validateRenewV1(decodeCohortMessage(bytes, maxMessageBytes));
+}
+export function decodeRenewReplyV1(bytes, maxMessageBytes) {
+    return validateRenewReplyV1(decodeCohortMessage(bytes, maxMessageBytes));
+}
+export function decodePromotionNoticeV1(bytes, maxMessageBytes) {
+    return validatePromotionNoticeV1(decodeCohortMessage(bytes, maxMessageBytes));
+}
+export function decodeDemotionNoticeV1(bytes, maxMessageBytes) {
+    return validateDemotionNoticeV1(decodeCohortMessage(bytes, maxMessageBytes));
+}
+export function decodeCohortGossipV1(bytes, maxMessageBytes) {
+    return validateCohortGossipV1(decodeCohortMessage(bytes, maxMessageBytes));
+}
+export function decodeMembershipCertV1(bytes, maxMessageBytes) {
+    return validateMembershipCertV1(decodeCohortMessage(bytes, maxMessageBytes));
+}
+export function decodeSignRequestV1(bytes, maxMessageBytes) {
+    return validateSignRequestV1(decodeCohortMessage(bytes, maxMessageBytes));
+}
+export function decodeSignReplyV1(bytes, maxMessageBytes) {
+    return validateSignReplyV1(decodeCohortMessage(bytes, maxMessageBytes));
+}
+//# sourceMappingURL=codec.js.map

package/dist/src/cohort-topic/wire/codec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codec.js","sourceRoot":"","sources":["../../../../src/cohort-topic/wire/codec.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EACN,sBAAsB,EACtB,wBAAwB,EACxB,wBAAwB,EACxB,yBAAyB,EACzB,uBAAuB,EACvB,kBAAkB,EAClB,oBAAoB,EACpB,eAAe,EACf,qBAAqB,EACrB,mBAAmB,GACnB,MAAM,eAAe,CAAC;AAcvB;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,IAAI,GAAG,IAAI,CAAC;AAErD,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAE9B,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AACtC,MAAM,WAAW,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAE9D,yDAAyD;AAEzD,MAAM,eAAe,GAAG,kEAAkE,CAAC;AAE3F,MAAM,aAAa,GAA0B,CAAC,GAAa,EAAE;IAC5D,MAAM,KAAK,GAAG,IAAI,KAAK,CAAS,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,eAAe,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACjD,KAAK,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC,CAAC,EAAE,CAAC;AAEL,iDAAiD;AACjD,MAAM,UAAU,aAAa,CAAC,CAAa;IAC1C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC;QACvD,GAAG,IAAI,eAAe,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,CAAE,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,CAAE,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAE,GAAG,eAAe,CAAC,CAAC,GAAG,EAAE,CAAE,CAAC;IACzI,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACzB,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;QACf,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,IAAI,EAAE,CAAC;QACtB,GAAG,IAAI,eAAe,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,CAAE,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,CAAE,CAAC;IAC5E,CAAC;SAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,IAAI,CAAC,CAAC,CAAC;QAC3C,GAAG,IAAI,eAAe,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,CAAE,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,CAAE,GAAG,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAE,CAAC;IAC9G,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,aAAa,CAAC,CAAS;IACtC,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC;IACrB,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,eAAe,CAAC,2BAA2B,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,UAAU,GAAG,GAAG,IAAI,CAAC,CAAC;IAC5B,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,CAAC;IACpB,MAAM,MAAM,GAAG,UAAU,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,IAAI,EAAE,GAAG,CAAC,CAAC;IACX,MAAM,IAAI,GAAG,CAAC,EAAU,EAAU,EAAE;QACnC,MAAM,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,eAAe,CAAC,8BAA8B,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,CAAC,CAAC;IACV,CAAC,CAAC;IACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QAC/I,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;QAC7B,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;QAC5B,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;QACrB,EAAE,IAAI,CAAC,CAAC;IACT,CAAC;IACD,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;QACf,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9E,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;IAC9B,CAAC;SAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAClH,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;QAC7B,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;IAC7B,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,kBAAkB;AAElB,iEAAiE;AACjE,MAAM,UAAU,mBAAmB,CAAqB,GAAM,EAAE,kBAA0B,yBAAyB;IAClH,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,IAAI,IAAI,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QACnC,MAAM,IAAI,eAAe,CAAC,gBAAgB,IAAI,CAAC,MAAM,8BAA8B,eAAe,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,mBAAmB,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAChE,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACtC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;IACrC,OAAO,KAAK,CAAC;AACd,CAAC;AAED,8GAA8G;AAC9G,MAAM,UAAU,mBAAmB,CAAC,KAAiB,EAAE,kBAA0B,yBAAyB;IACzG,IAAI,KAAK,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;QACxC,MAAM,IAAI,eAAe,CAAC,mCAAmC,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC5E,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC1C,IAAI,QAAQ,GAAG,eAAe,EAAE,CAAC;QAChC,MAAM,IAAI,eAAe,CAAC,wBAAwB,QAAQ,8BAA8B,eAAe,EAAE,CAAC,CAAC;IAC5G,CAAC;IACD,IAAI,mBAAmB,GAAG,QAAQ,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QACrD,MAAM,IAAI,eAAe,CAAC,mCAAmC,QAAQ,UAAU,KAAK,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC,CAAC;IACtH,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,mBAAmB,EAAE,mBAAmB,GAAG,QAAQ,CAAC,CAAC;IACjF,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACJ,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,eAAe,CAAC,+BAA+B,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,CAAC;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,eAAe,CAAC,8BAA8B,CAAC,CAAC;IAC3D,CAAC;AACF,CAAC;AAED,4DAA4D;AAE5D,MAAM,UAAU,gBAAgB,CAAC,KAAiB,EAAE,eAAwB;IAC3E,OAAO,kBAAkB,CAAC,mBAAmB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAiB,EAAE,eAAwB;IAChF,OAAO,uBAAuB,CAAC,mBAAmB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAiB,EAAE,eAAwB;IACxE,OAAO,eAAe,CAAC,mBAAmB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAiB,EAAE,eAAwB;IAC7E,OAAO,oBAAoB,CAAC,mBAAmB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAiB,EAAE,eAAwB;IAClF,OAAO,yBAAyB,CAAC,mBAAmB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAiB,EAAE,eAAwB;IACjF,OAAO,wBAAwB,CAAC,mBAAmB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAiB,EAAE,eAAwB;IAC/E,OAAO,sBAAsB,CAAC,mBAAmB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAiB,EAAE,eAAwB;IACjF,OAAO,wBAAwB,CAAC,mBAAmB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAiB,EAAE,eAAwB;IAC9E,OAAO,qBAAqB,CAAC,mBAAmB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAiB,EAAE,eAAwB;IAC5E,OAAO,mBAAmB,CAAC,mBAAmB,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC;AACzE,CAAC"}

package/dist/src/cohort-topic/wire/index.d.ts

@@ -0,0 +1,6 @@
+export * from "./types.js";
+export * from "./codec.js";
+export * from "./payloads.js";
+export { CohortWireError } from "./validate.js";
+export { validateRegisterV1, validateRegisterReplyV1, validateRenewV1, validateRenewReplyV1, validatePromotionNoticeV1, validateDemotionNoticeV1, validateCohortGossipV1, validateMembershipCertV1, validateSignRequestV1, validateSignReplyV1, } from "./validate.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/src/cohort-topic/wire/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/cohort-topic/wire/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EACN,kBAAkB,EAClB,uBAAuB,EACvB,eAAe,EACf,oBAAoB,EACpB,yBAAyB,EACzB,wBAAwB,EACxB,sBAAsB,EACtB,wBAAwB,EACxB,qBAAqB,EACrB,mBAAmB,GACnB,MAAM,eAAe,CAAC"}

package/dist/src/cohort-topic/wire/index.js

@@ -0,0 +1,6 @@
+export * from "./types.js";
+export * from "./codec.js";
+export * from "./payloads.js";
+export { CohortWireError } from "./validate.js";
+export { validateRegisterV1, validateRegisterReplyV1, validateRenewV1, validateRenewReplyV1, validatePromotionNoticeV1, validateDemotionNoticeV1, validateCohortGossipV1, validateMembershipCertV1, validateSignRequestV1, validateSignReplyV1, } from "./validate.js";
+//# sourceMappingURL=index.js.map

package/dist/src/cohort-topic/wire/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/cohort-topic/wire/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EACN,kBAAkB,EAClB,uBAAuB,EACvB,eAAe,EACf,oBAAoB,EACpB,yBAAyB,EACzB,wBAAwB,EACxB,sBAAsB,EACtB,wBAAwB,EACxB,qBAAqB,EACrB,mBAAmB,GACnB,MAAM,eAAe,CAAC"}

package/dist/src/cohort-topic/wire/payloads.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Cohort-topic substrate — canonical participant-signature payloads.
+ *
+ * A participant peer-key-signs its outbound `RegisterV1` / `RenewV1` bodies (db-p2p supplies the
+ * libp2p peer key); a cohort member recomputes the identical byte image to verify that signature
+ * before admitting a register (anti-DoS) or honoring a crash-failover `reattach` attestation (so a
+ * stray/MITM'd ping cannot usurp a live primary — `docs/cohort-topic.md` §TTL and renewal).
+ *
+ * Signer and verifier must agree byte-for-byte. Exactly like {@link import("../sig/payloads.js")}
+ * for the threshold-signed notices, determinism comes from encoding an explicitly-ordered JSON
+ * array (array order is stable, unlike object key order) as UTF-8 — never the `signature` envelope.
+ * Optional fields are normalized to a fixed placeholder (`bootstrap`→`false`, `probe`→`false`,
+ * `appPayload`→`null`, `bootstrapEvidence`→`null` with an empty string treated as absent,
+ * `reattach`→`false`, `withdraw`→`false`) so an absent optional and a present-but-default optional can
+ * never disagree across the wire round-trip.
+ */
+import type { CohortGossipV1, RegisterV1, RenewV1 } from "./types.js";
+/** A `RegisterV1` minus its `signature` envelope — the bytes the participant peer-key-signs. */
+export type RegisterSignable = Omit<RegisterV1, "signature">;
+/** A `RenewV1` minus its `signature` envelope — the bytes the participant peer-key-signs. */
+export type RenewSignable = Omit<RenewV1, "signature">;
+/** Canonical signed byte image of a `RegisterV1` body (every field except `signature`). */
+export declare function registerSigningPayload(body: RegisterSignable): Uint8Array;
+/** Canonical signed byte image of a `RenewV1` body (every field except `signature`). */
+export declare function renewSigningPayload(body: RenewSignable): Uint8Array;
+/** A `CohortGossipV1` minus its `signature` envelope — the bytes the gossiping member peer-key-signs. */
+export type CohortGossipSignable = Omit<CohortGossipV1, "signature">;
+/**
+ * Canonical signed byte image of a `CohortGossipV1` (every field except `signature`). Intra-cohort
+ * gossip is peer-key-signed by the originating member so a receiver can drop a frame whose `fromMember`
+ * signature does not verify or that comes from a non-cohort member (it can never spoof willingness/load
+ * or replicate forged records). Like the other payload helpers, determinism comes from an
+ * explicitly-ordered array — nested records/summaries/evictions are emitted as fixed ordered tuples so
+ * the signer and the receiver (which re-derives this image from the validated frame) agree byte-for-byte.
+ * Absent optionals (`records`/`evicted`) normalize to `[]`, and `appState` to `null`.
+ */
+export declare function cohortGossipSigningPayload(g: CohortGossipSignable): Uint8Array;
+//# sourceMappingURL=payloads.d.ts.map

package/dist/src/cohort-topic/wire/payloads.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payloads.d.ts","sourceRoot":"","sources":["../../../../src/cohort-topic/wire/payloads.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAItE,gGAAgG;AAChG,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;AAE7D,6FAA6F;AAC7F,MAAM,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;AAOvD,2FAA2F;AAC3F,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,gBAAgB,GAAG,UAAU,CAkBzE;AAED,wFAAwF;AACxF,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,aAAa,GAAG,UAAU,CAenE;AAED,yGAAyG;AACzG,MAAM,MAAM,oBAAoB,GAAG,IAAI,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;AAErE;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CAAC,CAAC,EAAE,oBAAoB,GAAG,UAAU,CAiC9E"}