@optimystic/db-p2p 0.14.1 → 0.16.2

package/dist/src/cohort-topic/host.d.ts

@@ -31,8 +31,9 @@
  * driver to call.
  *
  * **Anti-DoS + cold-start (gaps 6–7).** Each {@link CoordEngine} is injected its own per-coord anti-DoS
- * guards — a `RegisterRateLimiter` (4/min per peer-topic), a `CorrelationReplayGuard` (60 s freshness),
- * and a `TopicBudget` (2048 topics, LRU) — so a budget/limit at one coord is independent of another. The
+ * guards — a `RegisterRateLimiter` (4/min per peer-topic), a `CorrelationReplayGuard` (60 s freshness,
+ * hard `maxKeys` LRU cap), and a `TopicBudget` (2048 topics, LRU) — so a budget/limit at one coord is
+ * independent of another. The
  * node-level {@link BootstrapEvidence} policy (one tier→verifier policy, no per-coord state) is built once
  * and shared. db-core embeds no PoW / reputation scheme, so the host supplies the real verifiers
  * ({@link createPoWVerifier} / {@link createReputationVerifier}) and the participant-side PoW minter
@@ -42,8 +43,8 @@
  * backing keeps T0/T1 permissive-but-logged so cold-root origination is not blocked
  * (`cohort-topic-bootstrap-coldstart-origination-regression`), and an entirely unconfigured host stays
  * permissive-but-logged at every tier (never an undefined gate). A cold-started tier-`d > 0` forwarder registers with
- * its tier-`(d − 1)` parent by routing a forwarder-link frame over the router (gap 7), staying
- * `awaiting_parent` until the ack.
+ * its tier-`(d − 1)` parent by routing a (child-cohort-signed) {@link ChildLinkV1} over the router; the parent
+ * authenticates + records the child and acks, and the forwarder stays `awaiting_parent` until that `linked` ack.
  *
  * **Scope.** `followOn` derivation for a promoted-redirect arrival is parked in backlog
  * (`cohort-topic-followon-derivation`); this milestone serves a **single tier-0 cohort**, so `followOn`
@@ -55,7 +56,7 @@
 import type { Libp2p } from "libp2p";
 import type { PrivateKey } from "@libp2p/interface";
 import type { FretService } from "p2p-fret";
-import { LruMap, type BootstrapEvidenceDeps, type CohortGossipV1, type CohortTopicService, type CohortMemberEngine, type CohortSnapshotView, type CohortView, type CorrelationReplayGuardConfig, type DemotionNoticeV1, type Forwarder, type MembershipCertV1, type MembershipVerifier, type NodeProfile, type PromotionConfig, type PromotionNoticeV1, type RegisterRateLimiter, type RegisterRateLimiterConfig, type RegistrationRecord, type RenewReplyV1, type RenewV1, type RingCoord, type SignReplyV1, type SignRequestV1, type TopicBudgetConfig, type TopicTrafficV1, type TrustRoot } from "@optimystic/db-core";
+import { LruMap, type BootstrapEvidenceDeps, type ChildLinkV1, type ChildLinkReplyV1, type CohortGossipV1, type CohortTopicService, type CohortMemberEngine, type CohortSnapshotView, type CohortView, type CorrelationReplayGuardConfig, type DemotionNoticeV1, type Forwarder, type MembershipCertV1, type MembershipVerifier, type NodeProfile, type PromotionConfig, type PromotionNoticeV1, type RegisterRateLimiter, type RegisterRateLimiterConfig, type RegistrationRecord, type RenewReplyV1, type RenewV1, type RingCoord, type SignReplyV1, type SignRequestV1, type TopicBudgetConfig, type TopicTrafficV1, type TrustRoot } from "@optimystic/db-core";
 import { FretCohortGossipTransport } from "./cohort-gossip-transport.js";
 import { type BootstrapReputationView } from "./bootstrap-evidence-verifiers.js";
 import { type BootstrapParentTopicView } from "./bootstrap-parent-reference.js";
@@ -80,6 +81,16 @@ export interface CohortTopicHostOptions {
      * self-gate on elapsed time, so a fast tick is safe.
      */
     readonly gossipIntervalMs?: number;
+    /**
+     * `T_willingness_heartbeat` (ms): how often a genuinely-**idle but willing** {@link CoordEngine}
+     * re-broadcasts a willingness-only heartbeat so a cold cohort can bootstrap (siblings hear it, instantiate
+     * their own engine, and reciprocate — §Cold-start instantiation). Default
+     * {@link DEFAULT_WILLINGNESS_HEARTBEAT_MS} (~30 s). The first idle round after an engine is created emits
+     * immediately regardless of this interval; a record-carrying round resets the clock, so this only paces the
+     * steady-state re-broadcast of an idle willing cohort. Independent of {@link gossipIntervalMs} (the tick
+     * cadence): the tick can fire fast while heartbeats stay throttled.
+     */
+    readonly willingnessHeartbeatMs?: number;
     /**
      * The node's libp2p Ed25519 private key. Required for the live participant signer: register/renew
      * bodies are peer-key-signed over their canonical image, and inbound register/`reattach` signatures
@@ -154,6 +165,15 @@ export interface CohortTopicAntiDosOptions {
     readonly replayGuard?: CorrelationReplayGuardConfig;
     /** Per-cohort forwarder-state budget. Default `topics_max = 2048`, LRU by participant count. */
     readonly topicBudget?: TopicBudgetConfig;
+    /**
+     * Hard cap on the number of live per-coord cohort engines this node keeps. The served coord is a hash
+     * over attacker-chosen `(treeTier, participantCoord, topicId)`, and an engine is created **before** the
+     * per-coord anti-DoS gates run, so without this cap one peer spraying distinct coords forces unbounded
+     * engine allocation. On overflow the registry evicts the least-recently-used **idle** engine (no records,
+     * no cold-start forwarder) and tears it down; if every slot holds a live cohort it refuses the new coord.
+     * Default {@link DEFAULT_COORD_ENGINES_MAX}.
+     */
+    readonly coordEnginesMax?: number;
     /**
      * Bootstrap-evidence verifiers for cold-root instantiation. db-core embeds no PoW / reputation /
      * committed-work scheme; inject the real checks here. Any verifier supplied wins over the defaults
@@ -221,6 +241,13 @@ export interface CoordEngine {
     cohortIdentityAt(epoch: Uint8Array): readonly string[] | undefined;
     /** True iff this engine currently holds any registration record (a cold probe leaves it empty). */
     hasState(): boolean;
+    /**
+     * True iff this engine currently holds any cold-start forwarder (possibly `awaiting_parent`). Together
+     * with {@link hasState}, this is the "engine is idle / safe to reclaim" predicate the coord-engine
+     * registry's LRU eviction reads: an engine with neither a record nor a forwarder is a throwaway (an
+     * attacker-sprayed cold coord), an engine with either holds genuine cohort state and is never evicted.
+     */
+    hasForwarders(): boolean;
     /** True iff this engine holds the record for `(topicId, participantId)` — the renewal lookup key. */
     holds(topicId: Uint8Array, participantId: Uint8Array): boolean;
     /**
@@ -237,9 +264,19 @@ export interface CoordEngine {
      * lagging at most one gossip round (it reflects the last frozen summaries, never raw mid-round counts).
      */
     topicTraffic(topicId: Uint8Array): TopicTrafficV1;
+    /**
+     * Record that an application-level query (matchmaking `QueryV1`, and any future genuine cohort query
+     * such as the `AggregateCountV1` sweep) was served against `topicId` at `now`. Feeds `queriesPerMin`.
+     * Pure passthrough to this engine's `TrafficCounters` — no store lookup, no instantiation. The counter
+     * surfaces in {@link topicTraffic} only after the next {@link gossipRound} freezes it (lags ≤ one round,
+     * exactly like the arrivals counter). Non-fatal / synchronous — a separate mutating accessor from the
+     * pure-read {@link topicTraffic}; the two are never overloaded.
+     */
+    recordQuery(topicId: Uint8Array, now: number): void;
     /**
      * Publish a fresh threshold-signed `MembershipCertV1` on a cohort-membership-change / stabilization
-     * event (republishes only when the first `k − x` members changed). Returns the cert if published.
+     * event (republishes only when the cohort epoch — `H(sorted members)` — changed, i.e. on any member
+     * change, head or tail). Returns the cert if published.
      * Resolves `undefined` if no republish was needed or the quorum was unreachable this round.
      */
     onStabilized(now: number): Promise<MembershipCertV1 | undefined>;
@@ -283,6 +320,24 @@ export interface CoordEngine {
      * Exposes the parent-link lifecycle (`awaiting_parent` → `serving`) for the cold-start wiring (gap 7).
      */
     forwarder(topicId: Uint8Array): Forwarder | undefined;
+    /**
+     * Record a verified child cohort (served at `childCohortCoord`) as this cohort's child for `topicId`.
+     * Freshness-ordered per child coord (a stale replay cannot flip a newer state) and idempotent (re-linking
+     * an already-linked coord is a no-op). Driven by the parent-side child-link dispatch. See
+     * {@link CoordEngine.childCohortCount}.
+     */
+    recordChild(topicId: Uint8Array, childCohortCoord: Uint8Array, effectiveAt: number): void;
+    /**
+     * Release a child cohort (served at `childCohortCoord`) this cohort parented — driven by the demoting
+     * child's threshold-signed demotion notice fanned to the parent coord. Freshness-ordered per child coord
+     * and idempotent (a stale/duplicate release is a no-op); unrecording a never-seen child writes a
+     * `linked = false` tombstone (never a negative count) so a later stale link cannot resurrect it. The child
+     * set converges across the parent cohort via gossip, so once the last child is released the parent's
+     * `childCohortCount` falls to 0 and it can demote in turn. See {@link CoordEngine.childCohortCount}.
+     */
+    unrecordChild(topicId: Uint8Array, childCohortCoord: Uint8Array, effectiveAt: number): void;
+    /** Count of distinct linked child cohorts this engine parents for `topicId` (the demotion-gate input). */
+    childCohortCount(topicId: Uint8Array): number;
     /** Whether `topicId` is in promoted mode here — reflects both locally-originated and remotely-applied state. */
     isPromoted(topicId: Uint8Array): boolean;
     /** Adopt a verified promotion notice into this cohort's local state (see {@link NoticeApplyTarget}). */
@@ -299,6 +354,12 @@ export interface CoordRegistry {
      * `participantCoord` seed a freshly-created engine's coord-derived tier inputs (ignored if the
      * engine already exists). Synchronous, so concurrent activity callbacks for the same coord share
      * one engine without a second being constructed.
+     *
+     * **Capacity.** The registry is hard-capped (see {@link CohortTopicAntiDosOptions.coordEnginesMax}). A
+     * lookup that returns an already-resident engine always succeeds. A *creation* over a full registry
+     * first evicts the least-recently-used idle engine; when every slot holds a live cohort it throws
+     * {@link CoordEngineRegistryFullError} rather than growing unbounded — callers on the register /
+     * child-link / cold-sibling paths catch it and answer a clean capacity refusal.
      */
     forCoord(coord: RingCoord, treeTier: number, participantCoord: Uint8Array): CoordEngine;
     /** The engine holding the record for `(topicId, participantId)`, or `undefined` (renewal dispatch). */
@@ -311,10 +372,16 @@ export interface CoordRegistry {
      */
     findByCoord(coord: RingCoord): CoordEngine | undefined;
     /**
-     * The engine serving `topicId` at `treeTier`, or `undefined` (inbound promote/demote notice dispatch).
-     * A served coord embeds `(tier, topic)`, so at most one engine matches — the cohort the notice's
-     * signers belong to. `undefined` means this node serves no such cohort (e.g. a demotion arriving at a
-     * parent that does not track the child), so the notice is dropped rather than applied.
+     * The **first** engine serving `topicId` at `treeTier`, or `undefined`. Used by the tier-0 read paths —
+     * matchmaking query serve and the reactivity direct-subscriber lookup — that resolve a served engine by
+     * `(topic, tier)` rather than by an exact coord.
+     *
+     * **First-match caveat.** At `d ≥ 1` a node can serve several sibling cohorts for one `(topic, tier)` under
+     * distinct served coords, and this returns whichever iterates first — exact at the single-cohort / tier-0
+     * milestone, but not a coord-precise lookup. The promote/demote notice path deliberately does **not** use
+     * this: it routes by the notice's signed `cohortCoord` via {@link findByCoord} so a multi-cohort node
+     * applies each notice to the cohort that produced it. Reconciling these tier-0 readers with multi-cohort
+     * serving is follow-on work (`cohort-topic-followon-derivation`).
      */
     findServing(topicId: Uint8Array, treeTier: number): CoordEngine | undefined;
     /** Every live engine (stop + sweep). */
@@ -347,6 +414,16 @@ export interface CohortTopicHost {
      * limiter's `size` and the `highWater` `LruMap` — and so the gossip-cadence sweep wiring is observable.
      */
     readonly promoteGate: PromoteGate;
+    /**
+     * The node's local membership-cert cache. Exposed for test/diagnostic introspection: seed an entry via
+     * `cache(coord, encoded)` to prime the verifier's stale-refetch path over the real `/membership` protocol
+     * without marking it trusted (unlike `verifier.cache()`, which records the cert as self-published), and
+     * read it back via `current(coord)` to observe that a `/membership` refetch replaced a stale cached view.
+     */
+    readonly membershipSource: {
+        cache(coord: RingCoord, encoded: Uint8Array): void;
+        current(coord: RingCoord): Promise<Uint8Array | undefined>;
+    };
     /** Unregister the four protocols and tear down every coord engine. */
     stop(): Promise<void>;
 }
@@ -356,6 +433,21 @@ export interface CohortTopicHost {
  * `hashPeerId`.
  */
 export declare function createCohortTopicHost(node: Libp2p, fret: FretService, options?: CohortTopicHostOptions): Promise<CohortTopicHost>;
+/**
+ * Default hard cap on the number of live per-coord cohort engines (see
+ * {@link CohortTopicAntiDosOptions.coordEnginesMax}). Aligned in order of magnitude with the topic-budget
+ * `topics_max` (2048): the same "this many distinct served units before an anti-abuse ceiling bites" scale.
+ */
+export declare const DEFAULT_COORD_ENGINES_MAX = 2048;
+/**
+ * Thrown by {@link CoordRegistry.forCoord} when it must create a new engine but the registry is full of
+ * **live** cohorts (every slot holds records or a cold-start forwarder, so nothing is idle-evictable).
+ * Signals a capacity refusal, not a bug — the register / child-link / cold-sibling dispatch paths catch it
+ * and answer a clean refusal (`unwilling_cohort` / `rejected` / drop) rather than letting it escape.
+ */
+export declare class CoordEngineRegistryFullError extends Error {
+    constructor(maxEngines: number);
+}
 /**
  * Resolve an inbound `RenewV1` to the coord engine holding its record and run the renewal. A `RenewV1`
  * carries no `treeTier`, so the held record — not a recomputed coord — names the cohort. If no engine
@@ -364,6 +456,40 @@ export declare function createCohortTopicHost(node: Libp2p, fret: FretService, o
  * the `d_max` lookup (§TTL and renewal) — never throw.
  */
 export declare function resolveRenew(registry: CoordRegistry, renew: RenewV1, now: number): RenewReplyV1;
+/**
+ * Dependencies for {@link dispatchChildLink}. Small seam so the parent-side child-link handling is unit-
+ * testable without a live node (mirrors {@link handleSignRequest} / {@link verifyAndApplyNotice}).
+ */
+export interface DispatchChildLinkDeps {
+    /** Recompute a served coord for a tier — `addressing.coord(tier, participantCoord, topicId)`. */
+    readonly coord: (tier: number, participantCoord: Uint8Array, topicId: Uint8Array) => RingCoord;
+    /**
+     * Resolve (creating if absent) the parent {@link CoordEngine} for its served coord — `registry.forCoord`.
+     * Only its {@link CoordEngine.recordChild} is used. May throw {@link CoordEngineRegistryFullError} when
+     * creating over a full-of-live registry; {@link dispatchChildLink} catches it and replies `rejected`.
+     */
+    readonly resolveParent: (parentServedCoord: RingCoord, parentTier: number, childParticipantCoord: Uint8Array) => Pick<CoordEngine, "recordChild">;
+    /**
+     * Verify the child cohort threshold signature against the child cohort's cert (live-key mode). `undefined`
+     * → key-less-permissive: the link is recorded without a signature check (matching the register-sig
+     * fallback). A live-key host supplies this, and an unsigned link then fails it (never a silent record).
+     */
+    readonly verifyChildLinkSig?: (link: ChildLinkV1, now: number) => Promise<boolean>;
+}
+/**
+ * Parent-side handling of an inbound {@link ChildLinkV1}: bind the parent-child relationship, verify the
+ * child cohort's threshold signature, record the child, and ack. Steps:
+ *
+ * 1. **Bind.** Recompute `coord_childTier(childParticipantCoord, topicId)` and reject unless it equals the
+ *    signed `childCohortCoord`; `coord_(childTier−1)(...)` is this parent's served coord. An attacker cannot
+ *    point the link at an unrelated parent without a `childParticipantCoord` that also hashes to the signed
+ *    child coord (which it cannot, absent the prefix-class membership).
+ * 2. **Verify** (live-key) the child cohort threshold sig against the child cohort's cert; key-less-permissive
+ *    short-circuits it. A non-verified result → `rejected`.
+ * 3. **Record** the child on the parent engine (freshness-ordered, idempotent).
+ * 4. Reply `linked`.
+ */
+export declare function dispatchChildLink(link: ChildLinkV1, deps: DispatchChildLinkDeps, now: number): Promise<ChildLinkReplyV1>;
 /** Dependencies for the `/sign` endorsement policy ({@link handleSignRequest}). */
 export interface SignEndorsementDeps {
     /** The node's libp2p key (signs the endorsement). Absent → every request is refused (no key to sign with). */
@@ -452,10 +578,13 @@ export type NoticeOutcome = "applied" | "untrusted" | "dropped";
  *
  * - `"undecodable"`  — the frame is neither a promotion nor a demotion notice.
  * - `"rate-limited"` — the dialing `(peer, topic)` is over its `register_rate_per_peer` ceiling.
- * - `"stale"`        — the notice's `effectiveAt` is at or below the last *applied* notice for its
- *   `(topic, tier)` (a replay / out-of-order frame); dropped before `verifyMessage`.
+ * - `"stale"`        — the notice's `effectiveAt` is at or below the last *applied* notice for its served
+ *   cohort coord (a replay / out-of-order frame); dropped before `verifyMessage`.
+ * - `"unlinked"`     — a demotion notice that did not sibling-adopt on this node (no local child-coord engine,
+ *   or that path was stale) but **did** verify + unrecord the demoting child at its parent cohort here (the
+ *   parent-unlink path). Distinct from `"applied"` (a sibling-adopt) so a test can assert the parent-only case.
  */
-export type InboundNoticeResult = NoticeOutcome | "undecodable" | "rate-limited" | "stale";
+export type InboundNoticeResult = NoticeOutcome | "undecodable" | "rate-limited" | "stale" | "unlinked";
 /**
  * Node-level anti-abuse state for the `promote` handler (`cohort-topic-promote-handler-verify-amplification`).
  * The handler is node-level (one per node, not per coord), so unlike the per-{@link CoordEngine} register-path
@@ -468,10 +597,12 @@ export interface PromoteGate {
      */
     readonly rateLimiter: RegisterRateLimiter;
     /**
-     * Per-`(topicId, tier)` high-water of the last *applied* notice's `effectiveAt`. A notice at or below the
-     * water is a replay / out-of-order frame and is dropped before verification. Updated **only** on an
-     * `"applied"` outcome (never on an unverified frame), so a forged notice carrying `effectiveAt = Infinity`
-     * cannot poison the water and lock out legitimate notices.
+     * Per-served-coord high-water (key: `` `${cohortCoord}|${tier}` ``) of the last *applied* notice's
+     * `effectiveAt`. A notice at or below the water is a replay / out-of-order frame and is dropped before
+     * verification. Keyed by the served coord — not `(topic, tier)` — so two sibling cohorts a node serves for
+     * one `(topic, tier)` do not share an entry (an applied notice for one must not stale-drop a legitimate
+     * notice for the other). Updated **only** on an `"applied"` outcome (never on an unverified frame), so a
+     * forged notice carrying `effectiveAt = Infinity` cannot poison the water and lock out legitimate notices.
      *
      * **Bounded.** An {@link LruMap} capped at {@link PROMOTE_HIGHWATER_MAX_KEYS} so the retain-forever shape
      * cannot leak on a long-lived node. Unlike the limiter this is *not* attacker-growable (it is written only
@@ -485,7 +616,7 @@ export interface PromoteGate {
     readonly highWater: LruMap<string, number>;
 }
 /**
- * Hard cap on tracked `(topicId, tier)` high-water entries; the least-recently-touched are evicted beyond
+ * Hard cap on tracked per-served-coord high-water entries; the least-recently-touched are evicted beyond
  * this. A modest bound is plenty — only verified applies grow the map, so it never evicts under legitimate
  * load — but it caps the otherwise retain-forever shape on a long-lived node.
  */
@@ -494,13 +625,15 @@ export declare const PROMOTE_HIGHWATER_MAX_KEYS = 8192;
 export declare function createPromoteGate(rateLimiterConfig?: RegisterRateLimiterConfig): PromoteGate;
 /**
  * The slice of a {@link CoordEngine} the inbound notice path needs: the cohort coord the signers should
- * belong to (for verification) and the apply hooks. {@link CoordEngine} satisfies this; tests can pass a
- * minimal stand-in.
+ * belong to (for verification), the sibling-adopt apply hooks, and — for the demotion parent-unlink path
+ * ({@link applyDemotionUnlinkAtParent}) — {@link CoordEngine.unrecordChild}. {@link CoordEngine} satisfies
+ * this; tests can pass a minimal stand-in.
  */
 export interface NoticeApplyTarget {
     readonly servedCoord: RingCoord;
     applyPromotionNotice(notice: PromotionNoticeV1, now: number): void;
     applyDemotionNotice(notice: DemotionNoticeV1, now: number): void;
+    unrecordChild(topicId: Uint8Array, childCohortCoord: Uint8Array, effectiveAt: number): void;
 }
 /**
  * Decode a `promote`-protocol frame as a {@link PromotionNoticeV1} or {@link DemotionNoticeV1} (try one,
@@ -520,8 +653,8 @@ export declare const PROMOTE_REFETCH_MIN_INTERVAL_MS = 60000;
  * Verify an inbound notice's threshold signature against the cohort `MembershipCertV1` for
  * `target.servedCoord` and, on success, apply it to the target's promotion lifecycle. Returns:
  *
- * - `"dropped"`  — no local engine serves the notice's `(topic, tier)` (e.g. a demotion arriving at a
- *   parent that does not track the child); nothing to apply to.
+ * - `"dropped"`  — no local engine serves the notice's carried `cohortCoord` (e.g. a demotion arriving at a
+ *   parent-only node that does not serve the demoting child's coord); nothing to apply to.
  * - `"untrusted"` — the `signers` are not a `≥ minSigs` subset of the cohort cert, or the multisig does
  *   not verify (a forged single-signer / short-quorum notice); local state is left unchanged.
  * - `"applied"`  — verified and applied.
@@ -539,6 +672,30 @@ export declare const PROMOTE_REFETCH_MIN_INTERVAL_MS = 60000;
  * cold-cache receiver pays one bounded fetch. Per `cohort-topic-promote-handler-verify-amplification`.
  */
 export declare function verifyAndApplyNotice(inbound: InboundNotice, target: NoticeApplyTarget | undefined, verifier: MembershipVerifier, now: number): Promise<NoticeOutcome>;
+/** Outcome of {@link applyDemotionUnlinkAtParent}. */
+export type ParentUnlinkOutcome = "unlinked" | "no-parent" | "untrusted";
+/**
+ * Parent-side apply of a demotion notice: release (unrecord) the demoting child at its parent cohort. A
+ * demoting child threshold-signs its {@link DemotionNoticeV1} and fans it to **both** its own served coord
+ * (siblings adopt `promoted = false` via {@link verifyAndApplyNotice}) and its `parentCohortCoord`. This is the
+ * second, independent apply semantics at the parent: resolve the parent engine at `parentCohortCoord`, verify
+ * the notice's threshold signature against the **child** cohort cert (identical verify to the sibling-adopt —
+ * signers ⊆ the child cohort cert at the notice's `tier`, keyed by the child's `cohortCoord`), and on
+ * `verified` call `parent.unrecordChild(topicId, cohortCoord, effectiveAt)`.
+ *
+ * Returns:
+ * - `"no-parent"` — this node does not serve `parentCohortCoord`; nothing to unrecord (a pure sibling-adopt node).
+ * - `"untrusted"` — the signature does not verify against the child cohort cert (a forged / under-quorum notice).
+ * - `"unlinked"`  — verified; the child was unrecorded (or was already released — the child registry's own
+ *   per-`(topic, childCoord)` freshness makes a replay an idempotent no-op).
+ *
+ * **Freshness is the child registry's, not the promote-gate high-water.** The sibling-adopt high-water is keyed
+ * by the child coord and advanced only on a sibling-adopt `"applied"`; the unlink is ordered independently by
+ * the child registry's per-child `lastEffectiveAt`, so a demotion that is a stale no-op for the sibling-adopt
+ * target still applies the unlink at the parent, and vice-versa. The verify carries the same
+ * {@link PROMOTE_REFETCH_MIN_INTERVAL_MS} bound as the sibling-adopt, so it cannot amplify into dials.
+ */
+export declare function applyDemotionUnlinkAtParent(notice: DemotionNoticeV1, registry: CoordRegistry, verifier: MembershipVerifier, now: number): Promise<ParentUnlinkOutcome>;
 /**
  * Full inbound `promote`-frame pipeline with the anti-abuse gate, exported so it is unit-testable without a
  * live node (`cohort-topic-promote-handler-verify-amplification`). Runs the cheapest checks first — each
@@ -546,14 +703,27 @@ export declare function verifyAndApplyNotice(inbound: InboundNotice, target: Not
  * work:
  *
  * ```
- *   decode → per-(peer,topic) rate limit → findServing → effectiveAt high-water → verify+apply
+ *   decode → per-(peer,topic) rate limit → resolve engine by carried cohortCoord → effectiveAt high-water → verify+apply
+ *                                                                                                          ↘ (demotion) parent-unlink at parentCohortCoord
  * ```
  *
+ * A **demotion** carries a second, independent apply semantics: beyond the sibling-adopt above, it also
+ * releases the demoting child at its parent cohort ({@link applyDemotionUnlinkAtParent}). Both paths may fire
+ * on one node (one that serves both the child coord and the parent coord). The parent-unlink runs OUTSIDE the
+ * sibling-adopt high-water (which is keyed by the child coord and would otherwise stale-drop the parent-coord
+ * frame after the child-coord frame advanced it); its freshness is the child registry's own per-child key.
+ * `"unlinked"` is returned when the unlink fired but the sibling-adopt did not (a parent-only node).
+ *
  * - **Rate limit** (`gate.rateLimiter`) keys on `(from, topicId)`; an over-rate peer is dropped before the
- *   `findServing` map scan and the verify, so a peer cannot amplify junk into verify/network work.
- * - **High-water** (`gate.highWater`, per `(topicId, tier)`) drops a notice whose `effectiveAt` is at or
- *   below the last *applied* one — a replay / out-of-order frame — before `verifyMessage`. It is advanced
- *   **only** on an `"applied"` outcome, so a forged frame (which never verifies) cannot poison it.
+ *   coord lookup and the verify, so a peer cannot amplify junk into verify/network work.
+ * - **Resolve engine by `cohortCoord`** ({@link CoordRegistry.findByCoord}) — the exact served coord the
+ *   notice was decided for, covered by its signature. A node serving several sibling cohorts for one
+ *   `(topic, tier)` applies the notice to the cohort that produced it, never a first-match `(topic, tier)`
+ *   scan; a coord this node does not serve is dropped.
+ * - **High-water** (`gate.highWater`, keyed per served `cohortCoord`) drops a notice whose `effectiveAt` is
+ *   at or below the last *applied* one — a replay / out-of-order frame — before `verifyMessage`. It is
+ *   advanced **only** on an `"applied"` outcome, so a forged frame (which never verifies) cannot poison it.
+ *   Keying by coord (not `(topic, tier)`) keeps two sibling cohorts on one node from sharing a water.
  * - The receiver-side `cohortEpoch` is intentionally **not** gated on: the epoch rotates on every
  *   membership change, so a legitimately in-flight notice can briefly carry the prior epoch right after a
  *   rotation — making an epoch check a brittle, false-positive-prone filter. The rate limiter + high-water

package/dist/src/cohort-topic/host.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"host.d.ts","sourceRoot":"","sources":["../../../src/cohort-topic/host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,KAAK,EAAsB,UAAU,EAAU,MAAM,mBAAmB,CAAC;AAChF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAE5C,OAAO,EAsBN,MAAM,EA2BN,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EAEnB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EAEvB,KAAK,kBAAkB,EAEvB,KAAK,UAAU,EACf,KAAK,4BAA4B,EACjC,KAAK,gBAAgB,EACrB,KAAK,SAAS,EAGd,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,WAAW,EAEhB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAG9B,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,OAAO,EACZ,KAAK,SAAS,EAGd,KAAK,WAAW,EAChB,KAAK,aAAa,EAElB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EAEnB,KAAK,SAAS,EACd,MAAM,qBAAqB,CAAC;AAI7B,OAAO,EAAE,yBAAyB,EAA2B,MAAM,8BAA8B,CAAC;AASlG,OAAO,EAA+C,KAAK,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAC9H,OAAO,EAA+D,KAAK,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAE7I,OAAO,EAA2D,KAAK,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAMpH,MAAM,WAAW,sBAAsB;IACtC,0DAA0D;IAC1D,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC;IAC/B,uFAAuF;IACvF,QAAQ,CAAC,SAAS,CAAC,EAAE,oBAAoB,CAAC;IAC1C,iDAAiD;IACjD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,wCAAwC;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC;;;;;;;;OAQG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,yBAAyB,CAAC;IAC7C;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IACrC;;;;;;;;OAQG;IACH,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,OAAO,CAAC;IACpE;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;IAClD;;;;;;;OAOG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC5B;AAKD,YAAY,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAEjF;;;;;;;GAOG;AACH,MAAM,WAAW,yBAAyB;IACzC,oHAAoH;IACpH,QAAQ,CAAC,WAAW,CAAC,EAAE,yBAAyB,CAAC;IACjD,4FAA4F;IAC5F,QAAQ,CAAC,WAAW,CAAC,EAAE,4BAA4B,CAAC;IACpD,gGAAgG;IAChG,QAAQ,CAAC,WAAW,CAAC,EAAE,iBAAiB,CAAC;IACzC;;;;;OAKG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,qBAAqB,CAAC;IACnD;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,uBAAuB,CAAC;IAC9C;;;;OAIG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC;;;OAGG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC;;;;;;;;;OASG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,wBAAwB,CAAC;CACpD;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC3B,gEAAgE;IAChE,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC;IAChC,wFAAwF;IACxF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,mGAAmG;IACnG,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,8FAA8F;IAC9F,MAAM,IAAI,kBAAkB,CAAC;IAC7B;;;;;;OAMG;IACH,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACnE,mGAAmG;IACnG,QAAQ,IAAI,OAAO,CAAC;IACpB,qGAAqG;IACrG,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU,GAAG,OAAO,CAAC;IAC/D;;;;OAIG;IACH,OAAO,CAAC,OAAO,EAAE,UAAU,GAAG,SAAS,kBAAkB,EAAE,CAAC;IAC5D;;;;;;OAMG;IACH,YAAY,CAAC,OAAO,EAAE,UAAU,GAAG,cAAc,CAAC;IAClD;;;;OAIG;IACH,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;IACjE;;;OAGG;IACH,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;IACnE;;;;;OAKG;IACH,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IAC9D;;;;OAIG;IACH,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,oGAAoG;IACpG,UAAU,IAAI,UAAU,CAAC;IACzB,yGAAyG;IACzG,WAAW,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC;IAC1C;;;;;OAKG;IACH,cAAc,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC;IAC7C;;;;OAIG;IACH,sBAAsB,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;IAChE;;;OAGG;IACH,SAAS,CAAC,OAAO,EAAE,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC;IACtD,gHAAgH;IAChH,UAAU,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC;IACzC,wGAAwG;IACxG,oBAAoB,CAAC,MAAM,EAAE,iBAAiB,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnE,uGAAuG;IACvG,mBAAmB,CAAC,MAAM,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACjE,mDAAmD;IACnD,KAAK,IAAI,IAAI,CAAC;CACd;AAED,gGAAgG;AAChG,MAAM,WAAW,aAAa;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,EAAE,UAAU,GAAG,WAAW,CAAC;IACxF,uGAAuG;IACvG,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU,GAAG,WAAW,GAAG,SAAS,CAAC;IACpF;;;;;OAKG;IACH,WAAW,CAAC,KAAK,EAAE,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;IACvD;;;;;OAKG;IACH,WAAW,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAAC;IAC5E,wCAAwC;IACxC,GAAG,IAAI,SAAS,WAAW,EAAE,CAAC;IAC9B,gDAAgD;IAChD,KAAK,IAAI,IAAI,CAAC;CACd;AAED,iHAAiH;AACjH,MAAM,WAAW,eAAe;IAC/B,kEAAkE;IAClE,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;IACrC,6FAA6F;IAC7F,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,wCAAwC;IACxC,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,eAAe,EAAE,yBAAyB,CAAC;IACpD;;;;OAIG;IACH,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,sEAAsE;IACtE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACtB;AAqED;;;;GAIG;AACH,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,GAAE,sBAA2B,GAAG,OAAO,CAAC,eAAe,CAAC,CAyV3I;AAyqBD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,YAAY,CAQ/F;AAID,mFAAmF;AACnF,MAAM,WAAW,mBAAmB;IACnC,8GAA8G;IAC9G,QAAQ,CAAC,UAAU,EAAE,UAAU,GAAG,SAAS,CAAC;IAC5C,8DAA8D;IAC9D,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,oEAAoE;IACpE,QAAQ,CAAC,mBAAmB,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,MAAM,EAAE,CAAC;IAC7D,oDAAoD;IACpD,QAAQ,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,UAAU,CAAC;IACxD;;;;;OAKG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,KAAK,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACvG;;;;;;;;OAQG;IACH,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC1H;;;;OAIG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC5B;AAoCD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,WAAW,CAAC,CA2FpI;AAID,wEAAwE;AACxE,MAAM,MAAM,aAAa,GACtB;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,GAClE;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAA;CAAE,CAAC;AAEpE,+CAA+C;AAC/C,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;AAEhE;;;;;;;;GAQG;AACH,MAAM,MAAM,mBAAmB,GAAG,aAAa,GAAG,aAAa,GAAG,cAAc,GAAG,OAAO,CAAC;AAE3F;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC3B;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAC;IAC1C;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC3C;AAED;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,OAAO,CAAC;AAE/C,8FAA8F;AAC9F,wBAAgB,iBAAiB,CAAC,iBAAiB,CAAC,EAAE,yBAAyB,GAAG,WAAW,CAE5F;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC;IAChC,oBAAoB,CAAC,MAAM,EAAE,iBAAiB,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnE,mBAAmB,CAAC,MAAM,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CACjE;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAWnG;AAED;;;;;GAKG;AACH,eAAO,MAAM,+BAA+B,QAAS,CAAC;AAEtD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,oBAAoB,CACzC,OAAO,EAAE,aAAa,EACtB,MAAM,EAAE,iBAAiB,GAAG,SAAS,EACrC,QAAQ,EAAE,kBAAkB,EAC5B,GAAG,EAAE,MAAM,GACT,OAAO,CAAC,aAAa,CAAC,CA6BxB;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAsB,mBAAmB,CACxC,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,UAAU,EAChB,QAAQ,EAAE,aAAa,EACvB,QAAQ,EAAE,kBAAkB,EAC5B,IAAI,EAAE,WAAW,EACjB,GAAG,EAAE,MAAM,EACX,QAAQ,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,mBAAmB,CAAC,CAqC9B;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,iBAAiB,GAAG,gBAAgB,EAAE,WAAW,EAAE,SAAS,GAAG,SAAS,EAAE,CAKvH"}
+{"version":3,"file":"host.d.ts","sourceRoot":"","sources":["../../../src/cohort-topic/host.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,KAAK,EAAsB,UAAU,EAAU,MAAM,mBAAmB,CAAC;AAChF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAE5C,OAAO,EAuBN,MAAM,EA6BN,KAAK,qBAAqB,EAE1B,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,cAAc,EAEnB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EAEvB,KAAK,kBAAkB,EAEvB,KAAK,UAAU,EACf,KAAK,4BAA4B,EACjC,KAAK,gBAAgB,EACrB,KAAK,SAAS,EAGd,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,EACvB,KAAK,WAAW,EAEhB,KAAK,eAAe,EACpB,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAG9B,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,OAAO,EACZ,KAAK,SAAS,EAGd,KAAK,WAAW,EAChB,KAAK,aAAa,EAElB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EAEnB,KAAK,SAAS,EACd,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,yBAAyB,EAA2B,MAAM,8BAA8B,CAAC;AASlG,OAAO,EAA+C,KAAK,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAC9H,OAAO,EAA+D,KAAK,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAE7I,OAAO,EAA2D,KAAK,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAMpH,MAAM,WAAW,sBAAsB;IACtC,0DAA0D;IAC1D,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC;IAC/B,uFAAuF;IACvF,QAAQ,CAAC,SAAS,CAAC,EAAE,oBAAoB,CAAC;IAC1C,iDAAiD;IACjD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,wCAAwC;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,mEAAmE;IACnE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B;;;;;OAKG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC;;;;;;;;OAQG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IACzC;;;;;;;;OAQG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC;IACjC;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,yBAAyB,CAAC;IAC7C;;;;;;OAMG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IACrC;;;;;;;;OAQG;IACH,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,OAAO,CAAC;IACpE;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;IAClD;;;;;;;OAOG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC5B;AAKD,YAAY,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAEjF;;;;;;;GAOG;AACH,MAAM,WAAW,yBAAyB;IACzC,oHAAoH;IACpH,QAAQ,CAAC,WAAW,CAAC,EAAE,yBAAyB,CAAC;IACjD,4FAA4F;IAC5F,QAAQ,CAAC,WAAW,CAAC,EAAE,4BAA4B,CAAC;IACpD,gGAAgG;IAChG,QAAQ,CAAC,WAAW,CAAC,EAAE,iBAAiB,CAAC;IACzC;;;;;;;OAOG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC;;;;;OAKG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,qBAAqB,CAAC;IACnD;;;;;;;;;;;;OAYG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,uBAAuB,CAAC;IAC9C;;;;OAIG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC;;;OAGG;IACH,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC;;;;;;;;;OASG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,wBAAwB,CAAC;CACpD;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC3B,gEAAgE;IAChE,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC;IAChC,wFAAwF;IACxF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,mGAAmG;IACnG,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,8FAA8F;IAC9F,MAAM,IAAI,kBAAkB,CAAC;IAC7B;;;;;;OAMG;IACH,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACnE,mGAAmG;IACnG,QAAQ,IAAI,OAAO,CAAC;IACpB;;;;;OAKG;IACH,aAAa,IAAI,OAAO,CAAC;IACzB,qGAAqG;IACrG,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU,GAAG,OAAO,CAAC;IAC/D;;;;OAIG;IACH,OAAO,CAAC,OAAO,EAAE,UAAU,GAAG,SAAS,kBAAkB,EAAE,CAAC;IAC5D;;;;;;OAMG;IACH,YAAY,CAAC,OAAO,EAAE,UAAU,GAAG,cAAc,CAAC;IAClD;;;;;;;OAOG;IACH,WAAW,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACpD;;;;;OAKG;IACH,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;IACjE;;;OAGG;IACH,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;IACnE;;;;;OAKG;IACH,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IAC9D;;;;OAIG;IACH,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,oGAAoG;IACpG,UAAU,IAAI,UAAU,CAAC;IACzB,yGAAyG;IACzG,WAAW,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC;IAC1C;;;;;OAKG;IACH,cAAc,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC;IAC7C;;;;OAIG;IACH,sBAAsB,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,GAAG,SAAS,CAAC;IAChE;;;OAGG;IACH,SAAS,CAAC,OAAO,EAAE,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC;IACtD;;;;;OAKG;IACH,WAAW,CAAC,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1F;;;;;;;OAOG;IACH,aAAa,CAAC,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5F,0GAA0G;IAC1G,gBAAgB,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAAC;IAC9C,gHAAgH;IAChH,UAAU,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC;IACzC,wGAAwG;IACxG,oBAAoB,CAAC,MAAM,EAAE,iBAAiB,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnE,uGAAuG;IACvG,mBAAmB,CAAC,MAAM,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACjE,mDAAmD;IACnD,KAAK,IAAI,IAAI,CAAC;CACd;AAED,gGAAgG;AAChG,MAAM,WAAW,aAAa;IAC7B;;;;;;;;;;;OAWG;IACH,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,EAAE,UAAU,GAAG,WAAW,CAAC;IACxF,uGAAuG;IACvG,UAAU,CAAC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU,GAAG,WAAW,GAAG,SAAS,CAAC;IACpF;;;;;OAKG;IACH,WAAW,CAAC,KAAK,EAAE,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;IACvD;;;;;;;;;;;OAWG;IACH,WAAW,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CAAC;IAC5E,wCAAwC;IACxC,GAAG,IAAI,SAAS,WAAW,EAAE,CAAC;IAC9B,gDAAgD;IAChD,KAAK,IAAI,IAAI,CAAC;CACd;AAED,iHAAiH;AACjH,MAAM,WAAW,eAAe;IAC/B,kEAAkE;IAClE,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;IACrC,6FAA6F;IAC7F,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,wCAAwC;IACxC,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,eAAe,EAAE,yBAAyB,CAAC;IACpD;;;;OAIG;IACH,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC;;;;;OAKG;IACH,QAAQ,CAAC,gBAAgB,EAAE;QAAE,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC;QAAC,OAAO,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAAA;KAAE,CAAC;IAC9I,sEAAsE;IACtE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACtB;AAuED;;;;GAIG;AACH,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,GAAE,sBAA2B,GAAG,OAAO,CAAC,eAAe,CAAC,CA2e3I;AAqOD;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,OAAO,CAAC;AAE9C;;;;;GAKG;AACH,qBAAa,4BAA6B,SAAQ,KAAK;gBAC1C,UAAU,EAAE,MAAM;CAI9B;AAguBD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,YAAY,CAQ/F;AAID;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACrC,iGAAiG;IACjG,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,KAAK,SAAS,CAAC;IAC/F;;;;OAIG;IACH,QAAQ,CAAC,aAAa,EAAE,CAAC,iBAAiB,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,qBAAqB,EAAE,UAAU,KAAK,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAClJ;;;;OAIG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;CACnF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,qBAAqB,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAkC9H;AAID,mFAAmF;AACnF,MAAM,WAAW,mBAAmB;IACnC,8GAA8G;IAC9G,QAAQ,CAAC,UAAU,EAAE,UAAU,GAAG,SAAS,CAAC;IAC5C,8DAA8D;IAC9D,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,oEAAoE;IACpE,QAAQ,CAAC,mBAAmB,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,MAAM,EAAE,CAAC;IAC7D,oDAAoD;IACpD,QAAQ,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK,UAAU,CAAC;IACxD;;;;;OAKG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,KAAK,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACvG;;;;;;;;OAQG;IACH,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,KAAK;QAAE,WAAW,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAC1H;;;;OAIG;IACH,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC5B;AAqCD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,WAAW,CAAC,CA8FpI;AAID,wEAAwE;AACxE,MAAM,MAAM,aAAa,GACtB;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,GAClE;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAA;CAAE,CAAC;AAEpE,+CAA+C;AAC/C,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;AAEhE;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,mBAAmB,GAAG,aAAa,GAAG,aAAa,GAAG,cAAc,GAAG,OAAO,GAAG,UAAU,CAAC;AAExG;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC3B;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAC;IAC1C;;;;;;;;;;;;;;;;OAgBG;IACH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC3C;AAED;;;;GAIG;AACH,eAAO,MAAM,0BAA0B,OAAO,CAAC;AAE/C,8FAA8F;AAC9F,wBAAgB,iBAAiB,CAAC,iBAAiB,CAAC,EAAE,yBAAyB,GAAG,WAAW,CAE5F;AAED;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IACjC,QAAQ,CAAC,WAAW,EAAE,SAAS,CAAC;IAChC,oBAAoB,CAAC,MAAM,EAAE,iBAAiB,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnE,mBAAmB,CAAC,MAAM,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACjE,aAAa,CAAC,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5F;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAWnG;AAED;;;;;GAKG;AACH,eAAO,MAAM,+BAA+B,QAAS,CAAC;AAEtD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,oBAAoB,CACzC,OAAO,EAAE,aAAa,EACtB,MAAM,EAAE,iBAAiB,GAAG,SAAS,EACrC,QAAQ,EAAE,kBAAkB,EAC5B,GAAG,EAAE,MAAM,GACT,OAAO,CAAC,aAAa,CAAC,CA6BxB;AAED,sDAAsD;AACtD,MAAM,MAAM,mBAAmB,GAAG,UAAU,GAAG,WAAW,GAAG,WAAW,CAAC;AAEzE;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,2BAA2B,CAChD,MAAM,EAAE,gBAAgB,EACxB,QAAQ,EAAE,aAAa,EACvB,QAAQ,EAAE,kBAAkB,EAC5B,GAAG,EAAE,MAAM,GACT,OAAO,CAAC,mBAAmB,CAAC,CAuB9B;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,wBAAsB,mBAAmB,CACxC,KAAK,EAAE,UAAU,EACjB,IAAI,EAAE,UAAU,EAChB,QAAQ,EAAE,aAAa,EACvB,QAAQ,EAAE,kBAAkB,EAC5B,IAAI,EAAE,WAAW,EACjB,GAAG,EAAE,MAAM,EACX,QAAQ,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,mBAAmB,CAAC,CAuE9B;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,iBAAiB,GAAG,gBAAgB,EAAE,WAAW,EAAE,SAAS,GAAG,SAAS,EAAE,CAKvH"}