@optimystic/db-p2p 0.24.1 → 0.25.0

package/dist/src/cluster/block-transfer.js

@@ -1,5 +1,5 @@
 import { peerIdFromString } from '@libp2p/peer-id';
-import { BlockTransferClient } from './block-transfer-service.js';
+import { BlockTransferClient, sourceBlockCertification } from './block-transfer-service.js';
 import { createLogger } from '../logger.js';
 const log = createLogger('block-transfer');
 /**
@@ -24,7 +24,15 @@ export class BlockTransferCoordinator {
     inFlight = new Set();
     concurrency = 0;
     waitQueue = [];
-    constructor(repo, peerNetwork, restorationCoordinator, partitionDetector, protocolPrefix = '', config = {}) {
+    constructor(
+    /**
+     * The node's OWN store, proof accessor REQUIRED (not the optional `ArchiveServingRepo`
+     * shape): every push this class makes is certified out of it, and a repo without the
+     * accessor would make `sourceBlockCertification` return meta-only for every block — so
+     * every push would be refused by a receiver running the default `requirePushCertificate`,
+     * silently and with no type error. Same reasoning as `createServedRepoProxy`'s.
+     */
+    repo, peerNetwork, restorationCoordinator, partitionDetector, protocolPrefix = '', config = {}) {
         this.repo = repo;
         this.peerNetwork = peerNetwork;
         this.restorationCoordinator = restorationCoordinator;
@@ -78,21 +86,92 @@ export class BlockTransferCoordinator {
      * hole (`docs/arachnode-ring-handoff.md` § Why the current code violates it #2).
      */
     async handleRebalanceEvent(event) {
-        log('rebalance:start gained=%d lost=%d floor=%d', event.gained.length, event.lost.length, event.floor);
+        log('rebalance:start gained=%d lost=%d grown=%d floor=%d', event.gained.length, event.lost.length, event.grown.size, event.floor);
         const floor = Math.max(1, event.floor);
-        const [pullResult, confirmResult] = await Promise.all([
+        const [pullResult, confirmResult, growResult] = await Promise.all([
             event.gained.length > 0 ? this.pullBlocks(event.gained) : { succeeded: [], failed: [] },
             event.lost.length > 0 && event.newOwners.size > 0
                 ? this.confirmReplicated(event.lost, event.newOwners, floor)
-                : { confirmed: [], unconfirmed: [...event.lost] }
+                : { confirmed: [], unconfirmed: [...event.lost] },
+            this.replicateGrown(event.grown, floor)
         ]);
-        log('rebalance:done pull=%d/%d released=%d/%d', pullResult.succeeded.length, event.gained.length, confirmResult.confirmed.length, event.lost.length);
+        log('rebalance:done pull=%d/%d released=%d/%d replicated=%d/%d', pullResult.succeeded.length, event.gained.length, confirmResult.confirmed.length, event.lost.length, growResult.confirmed.length, event.grown.size);
         return {
             pulled: pullResult.succeeded,
             released: confirmResult.confirmed,
-            retained: confirmResult.unconfirmed
+            retained: confirmResult.unconfirmed,
+            replicated: growResult.confirmed,
+            underReplicated: growResult.unconfirmed,
+            growth: growResult.growth
         };
     }
+    /**
+     * Push each GROWN block (still owned; new peers became co-responsible) to its newly
+     * co-responsible peers, reusing {@link executeConfirm} per block. The per-block floor is
+     * `min(event floor, new-peer count)`: passing the raw event floor would be wrong when fewer new
+     * peers exist than the floor — `executeConfirm` could then never reach the floor and would burn
+     * `maxRetries` re-pushing peers that already accepted. Nothing is released off this path (the
+     * node KEEPS the block either way); the confirmed/unconfirmed split is reporting only. The
+     * in-flight `confirm:<id>` key dedups against a concurrent lost-confirm for the same block —
+     * such a block gets NO `growth` entry (no information), so the monitor leaves it untouched.
+     * `enablePush` deliberately does not gate this (same rationale as the NOTE in
+     * {@link confirmReplicated}); the growth arm as a whole is gated by the `rebalance.enabled`
+     * wiring in `libp2p-node-base`.
+     *
+     * Per-block {@link GrowthOutcome} rules:
+     * - floor met → all reported peers satisfied, complete. Deliberately includes peers
+     *   `executeConfirm` skipped once the floor was reached — the block is adequately replicated,
+     *   and re-pushing the remainder on every check forever would be a live loop.
+     * - no local data → all reported peers satisfied, complete (nothing to replicate; see NOTE).
+     * - otherwise → only the peers that actually confirmed, incomplete (retried by the monitor).
+     */
+    async replicateGrown(grown, floor) {
+        const confirmed = [];
+        const unconfirmed = [];
+        const growth = new Map();
+        if (grown.size === 0) {
+            return { confirmed, unconfirmed, growth };
+        }
+        if (this.partitionDetector.detectPartition()) {
+            // Mirrors confirmReplicated's guard (replicateGrown drives executeConfirm directly). An
+            // incomplete outcome with nothing satisfied keeps every reported peer un-seen AND counts an
+            // attempt, so a partition mid-reaction is retried like any other failed push.
+            log('grow:partition-detected, leaving %d blocks unconfirmed', grown.size);
+            for (const [blockId, newPeers] of grown) {
+                if (newPeers.length === 0)
+                    continue;
+                unconfirmed.push(blockId);
+                growth.set(blockId, { satisfiedPeers: [], complete: false });
+            }
+            return { confirmed, unconfirmed, growth };
+        }
+        await Promise.all([...grown.entries()].map(async ([blockId, newPeers]) => {
+            if (newPeers.length === 0)
+                return;
+            const result = await this.executeConfirm(blockId, new Map([[blockId, newPeers]]), Math.min(floor, newPeers.length) // both ≥ 1 here: the caller clamps floor, empty newPeers returned above
+            );
+            if (result === null)
+                return; // confirm already in flight — no information, no entry
+            if (result.confirmed) {
+                confirmed.push(blockId);
+                growth.set(blockId, { satisfiedPeers: [...newPeers], complete: true });
+            }
+            else if (result.noLocalData) {
+                // NOTE: nothing local to replicate (the gained∩grown first-observation case) — the
+                // reported peers are recorded satisfied so this does not become a permanent retry loop
+                // (those cohort peers are the pull's own source). If the node later obtains the block by
+                // another route (a fresh local commit, a spread push), these peers stay recorded and are
+                // never pushed — benign today, since a gained block's data comes from these very peers.
+                unconfirmed.push(blockId);
+                growth.set(blockId, { satisfiedPeers: [...newPeers], complete: true });
+            }
+            else {
+                unconfirmed.push(blockId);
+                growth.set(blockId, { satisfiedPeers: [...result.confirmedPeers], complete: false });
+            }
+        }));
+        return { confirmed, unconfirmed, growth };
+    }
     /**
      * Confirm each block is replicated to at least `floor` qualifying owners — the gate the ring-shift
      * handoff (Phase B) and the rebalance release both open before a block may stop being served.
@@ -127,7 +206,12 @@ export class BlockTransferCoordinator {
         const confirmed = [];
         const unconfirmed = [];
         const ids = blockIds.filter(id => !this.inFlight.has(`confirm:${id}`));
-        await Promise.all(ids.map(id => this.executeConfirm(id, owners, floor, confirmed, unconfirmed)));
+        await Promise.all(ids.map(async (id) => {
+            const result = await this.executeConfirm(id, owners, floor);
+            if (result === null)
+                return; // raced into flight after the filter — no information
+            (result.confirmed ? confirmed : unconfirmed).push(id);
+        }));
         return { confirmed, unconfirmed };
     }
     async executePull(blockId, succeeded, failed) {
@@ -188,12 +272,17 @@ export class BlockTransferCoordinator {
                         return;
                     }
                     const blockData = new TextEncoder().encode(JSON.stringify(blockResult.block));
+                    // Revision metadata AND the cohort proof for that revision, from this one unpinned
+                    // read. A receiver running the default `requirePushCertificate` rejects a push with
+                    // no proof, so a block whose proof this node never retained (pre-proof history, a
+                    // diverged commit) simply fails to place here and is retried/kept as today.
+                    const certification = await sourceBlockCertification(this.repo, blockId, blockResult);
                     // Push to at least one new owner
                     for (const ownerPeerIdStr of owners) {
                         try {
                             const peerId = peerIdFromString(ownerPeerIdStr);
                             const client = new BlockTransferClient(peerId, this.peerNetwork, this.protocolPrefix);
-                            const response = await this.withTimeout(client.pushBlocks([blockId], [blockData]), this.transferTimeoutMs);
+                            const response = await this.withTimeout(client.pushBlocks([blockId], [blockData], 'rebalance', certification), this.transferTimeoutMs);
                             if (response && !response.missing.includes(blockId)) {
                                 pushed = true;
                                 log('push:ok block=%s peer=%s', blockId, ownerPeerIdStr);
@@ -227,22 +316,29 @@ export class BlockTransferCoordinator {
         }
     }
     /**
-     * Confirm one block replicated to ≥ `floor` distinct qualifying owners. Reads the local block once,
-     * pushes to each candidate owner (stopping once the floor is reached), and counts distinct owners
-     * that report holding it (not `missing`). Retries the whole round up to `maxRetries` before giving
-     * up. Records the block in `confirmed` iff the floor was met, otherwise in `unconfirmed`.
+     * Confirm one block replicated to ≥ `floor` distinct qualifying owners. Reads the local block once
+     * per attempt, pushes to each candidate owner (stopping once the floor is reached), and counts
+     * distinct owners that report holding it (not `missing`). Retries the whole round up to
+     * `maxRetries` before giving up.
+     *
+     * Returns `null` when a confirm for this block is already in flight (no information — the caller
+     * must not record anything for it). Otherwise: `confirmed` iff the floor was met; `confirmedPeers`
+     * is the union of owners that confirmed across every attempt (a peer that accepted a push holds a
+     * replica even if a later round missed it — the floor decision itself stays per-round, unchanged);
+     * `noLocalData` marks the nothing-local-to-push case. The lost-block release path uses only
+     * `confirmed`; the growth arm consumes the other two.
      */
-    async executeConfirm(blockId, owners, floor, confirmed, unconfirmed) {
+    async executeConfirm(blockId, owners, floor) {
         const key = `confirm:${blockId}`;
         if (this.inFlight.has(key))
-            return;
+            return null;
         this.inFlight.add(key);
         try {
+            const allConfirmedPeers = new Set();
             const candidateOwners = owners.get(blockId) ?? [];
             if (candidateOwners.length === 0) {
                 // No qualifying holder to confirm against — cannot release; keep serving.
-                unconfirmed.push(blockId);
-                return;
+                return { confirmed: false, confirmedPeers: allConfirmedPeers, noLocalData: false };
             }
             for (let attempt = 0;; attempt++) {
                 await this.acquireSemaphore();
@@ -254,10 +350,12 @@ export class BlockTransferCoordinator {
                     if (!blockResult?.block) {
                         // No local bytes to prove replication with — cannot confirm; keep serving.
                         log('confirm:no-local-data block=%s', blockId);
-                        unconfirmed.push(blockId);
-                        return;
+                        return { confirmed: false, confirmedPeers: allConfirmedPeers, noLocalData: true };
                     }
                     const blockData = new TextEncoder().encode(JSON.stringify(blockResult.block));
+                    // See executePush: meta + proof are built together from this one unpinned read, so a
+                    // confirming holder either takes a certified replica or reports the block missing.
+                    const certification = await sourceBlockCertification(this.repo, blockId, blockResult);
                     // Count DISTINCT owners that hold a current replica; stop once the floor is reached.
                     const confirmedPeers = new Set();
                     for (const ownerPeerIdStr of candidateOwners) {
@@ -266,9 +364,16 @@ export class BlockTransferCoordinator {
                         try {
                             const peerId = peerIdFromString(ownerPeerIdStr);
                             const client = new BlockTransferClient(peerId, this.peerNetwork, this.protocolPrefix);
-                            const response = await this.withTimeout(client.pushBlocks([blockId], [blockData]), this.transferTimeoutMs);
+                            const response = await this.withTimeout(client.pushBlocks([blockId], [blockData], 'rebalance', certification), this.transferTimeoutMs);
                             if (response && !response.missing.includes(blockId)) {
                                 confirmedPeers.add(ownerPeerIdStr);
+                                // NOTE: allConfirmedPeers never un-records a peer. A holder that confirms in one
+                                // round and reports `missing` in a later one stays recorded, on the reasoning that
+                                // `handlePush` answers non-missing only after persisting. If the receiver ever
+                                // gains a path that drops a just-persisted block (an eviction sweep, a rejected
+                                // revision), the growth arm would record a peer that no longer holds a replica —
+                                // intersect against the LAST round's confirmedPeers instead of unioning.
+                                allConfirmedPeers.add(ownerPeerIdStr);
                             }
                         }
                         catch (err) {
@@ -282,8 +387,7 @@ export class BlockTransferCoordinator {
                 }
                 if (confirmCount >= floor) {
                     log('confirm:ok block=%s holders=%d/%d', blockId, confirmCount, floor);
-                    confirmed.push(blockId);
-                    return;
+                    return { confirmed: true, confirmedPeers: allConfirmedPeers, noLocalData: false };
                 }
                 if (attempt < this.maxRetries) {
                     log('confirm:retry block=%s holders=%d/%d attempt=%d', blockId, confirmCount, floor, attempt + 1);
@@ -291,8 +395,7 @@ export class BlockTransferCoordinator {
                     continue;
                 }
                 log('confirm:unmet block=%s holders=%d/%d', blockId, confirmCount, floor);
-                unconfirmed.push(blockId);
-                return;
+                return { confirmed: false, confirmedPeers: allConfirmedPeers, noLocalData: false };
             }
         }
         finally {

package/dist/src/cluster/block-transfer.js.map

@@ -1 +1 @@
-{"version":3,"file":"block-transfer.js","sourceRoot":"","sources":["../../../src/cluster/block-transfer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAGnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAElE,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,MAAM,GAAG,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;AA6B3C;;;;;;;;GAQG;AACH,MAAM,OAAO,wBAAwB;IAUlB;IACA;IACA;IACA;IACA;IAbD,cAAc,CAAS;IACvB,iBAAiB,CAAS;IAC1B,UAAU,CAAS;IACnB,UAAU,CAAU;IAC7B,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAC7B,WAAW,GAAG,CAAC,CAAC;IACP,SAAS,GAAsB,EAAE,CAAC;IAEnD,YACkB,IAAW,EACX,WAAyB,EACzB,sBAA8C,EAC9C,iBAAoC,EACpC,iBAAyB,EAAE,EAC5C,SAA8B,EAAE;QALf,SAAI,GAAJ,IAAI,CAAO;QACX,gBAAW,GAAX,WAAW,CAAc;QACzB,2BAAsB,GAAtB,sBAAsB,CAAwB;QAC9C,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,mBAAc,GAAd,cAAc,CAAa;QAG5C,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,IAAI,KAAK,CAAC;QAC3D,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC;IAC7C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CAAC,QAAkB;QAClC,IAAI,IAAI,CAAC,iBAAiB,CAAC,eAAe,EAAE,EAAE,CAAC;YAC9C,GAAG,CAAC,6CAA6C,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YACpE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC5C,CAAC;QAED,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;QAEpE,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAE1E,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CACf,QAAkB,EAClB,SAAgC;QAEhC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACtB,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACtC,CAAC;QACD,IAAI,IAAI,CAAC,iBAAiB,CAAC,eAAe,EAAE,EAAE,CAAC;YAC9C,GAAG,CAAC,6CAA6C,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YACpE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC5C,CAAC;QAED,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAEzF,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAErF,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,oBAAoB,CAAC,KAAqB;QAC/C,GAAG,CAAC,4CAA4C,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAEvG,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,UAAU,EAAE,aAAa,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACrD,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YACvF,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC;gBAChD,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC;gBAC5D,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE;SAClD,CAAC,CAAC;QAEH,GAAG,CAAC,0CAA0C,EAC7C,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAChD,aAAa,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEpD,OAAO;YACN,MAAM,EAAE,UAAU,CAAC,SAAS;YAC5B,QAAQ,EAAE,aAAa,CAAC,SAAS;YACjC,QAAQ,EAAE,aAAa,CAAC,WAAW;SACnC,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,iBAAiB,CACtB,QAAkB,EAClB,MAA6B,EAC7B,KAAa;QAEb,wFAAwF;QACxF,0FAA0F;QAC1F,6FAA6F;QAC7F,+FAA+F;QAC/F,8FAA8F;QAC9F,sBAAsB;QACtB,IAAI,IAAI,CAAC,iBAAiB,CAAC,eAAe,EAAE,EAAE,CAAC;YAC9C,GAAG,CAAC,2DAA2D,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YAClF,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC;QACtD,CAAC;QACD,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YAChB,+FAA+F;YAC/F,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC;QACtD,CAAC;QAED,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,MAAM,WAAW,GAAa,EAAE,CAAC;QAEjC,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;QACvE,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;QAEjG,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IACnC,CAAC;IAEO,KAAK,CAAC,WAAW,CACxB,OAAe,EACf,SAAmB,EACnB,MAAgB;QAEhB,MAAM,GAAG,GAAG,QAAQ,OAAO,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO;QACnC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEvB,IAAI,CAAC;YACJ,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;gBACnC,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAC9B,IAAI,OAA+D,CAAC;gBACpE,IAAI,CAAC;oBACJ,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAC/B,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC,EAC5C,IAAI,CAAC,iBAAiB,CACtB,CAAC;gBACH,CAAC;wBAAS,CAAC;oBACV,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACzB,CAAC;gBAED,IAAI,OAAO,EAAE,CAAC;oBACb,GAAG,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;oBACjC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACxB,OAAO;gBACR,CAAC;gBACD,IAAI,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;oBAC/B,GAAG,CAAC,gCAAgC,EAAE,OAAO,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;oBAC5D,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;oBAC1C,SAAS;gBACV,CAAC;gBACD,GAAG,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAC;gBACrC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACrB,OAAO;YACR,CAAC;QACF,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,WAAW,CACxB,OAAe,EACf,SAAgC,EAChC,SAAmB,EACnB,MAAgB;QAEhB,MAAM,GAAG,GAAG,QAAQ,OAAO,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO;QACnC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEvB,IAAI,CAAC;YACJ,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;gBACnC,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAC9B,IAAI,MAAM,GAAG,KAAK,CAAC;gBACnB,IAAI,CAAC;oBACJ,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;oBACtC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBACpC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;wBACrB,OAAO;oBACR,CAAC;oBAED,qCAAqC;oBACrC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBAC5D,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;oBACpC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC;wBACzB,GAAG,CAAC,6BAA6B,EAAE,OAAO,CAAC,CAAC;wBAC5C,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;wBACrB,OAAO;oBACR,CAAC;oBAED,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;oBAE9E,iCAAiC;oBACjC,KAAK,MAAM,cAAc,IAAI,MAAM,EAAE,CAAC;wBACrC,IAAI,CAAC;4BACJ,MAAM,MAAM,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;4BAChD,MAAM,MAAM,GAAG,IAAI,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;4BACtF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CACtC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,EACzC,IAAI,CAAC,iBAAiB,CACtB,CAAC;4BAEF,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gCACrD,MAAM,GAAG,IAAI,CAAC;gCACd,GAAG,CAAC,0BAA0B,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;gCACzD,MAAM;4BACP,CAAC;wBACF,CAAC;wBAAC,OAAO,GAAG,EAAE,CAAC;4BACd,GAAG,CAAC,yCAAyC,EAC5C,OAAO,EAAE,cAAc,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;wBACnD,CAAC;oBACF,CAAC;gBACF,CAAC;wBAAS,CAAC;oBACV,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACzB,CAAC;gBAED,IAAI,MAAM,EAAE,CAAC;oBACZ,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACxB,OAAO;gBACR,CAAC;gBACD,IAAI,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;oBAC/B,GAAG,CAAC,gCAAgC,EAAE,OAAO,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;oBAC5D,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;oBAC1C,SAAS;gBACV,CAAC;gBACD,GAAG,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAC;gBACrC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACrB,OAAO;YACR,CAAC;QACF,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;IACF,CAAC;IAED;;;;;OAKG;IACK,KAAK,CAAC,cAAc,CAC3B,OAAe,EACf,MAA6B,EAC7B,KAAa,EACb,SAAmB,EACnB,WAAqB;QAErB,MAAM,GAAG,GAAG,WAAW,OAAO,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO;QACnC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEvB,IAAI,CAAC;YACJ,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClD,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClC,0EAA0E;gBAC1E,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC1B,OAAO;YACR,CAAC;YAED,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;gBACnC,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAC9B,IAAI,YAAY,GAAG,CAAC,CAAC;gBACrB,IAAI,CAAC;oBACJ,uDAAuD;oBACvD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBAC5D,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;oBACpC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC;wBACzB,2EAA2E;wBAC3E,GAAG,CAAC,gCAAgC,EAAE,OAAO,CAAC,CAAC;wBAC/C,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;wBAC1B,OAAO;oBACR,CAAC;oBAED,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;oBAE9E,qFAAqF;oBACrF,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;oBACzC,KAAK,MAAM,cAAc,IAAI,eAAe,EAAE,CAAC;wBAC9C,IAAI,cAAc,CAAC,IAAI,IAAI,KAAK;4BAAE,MAAM;wBACxC,IAAI,CAAC;4BACJ,MAAM,MAAM,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;4BAChD,MAAM,MAAM,GAAG,IAAI,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;4BACtF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CACtC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,EACzC,IAAI,CAAC,iBAAiB,CACtB,CAAC;4BACF,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gCACrD,cAAc,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;4BACpC,CAAC;wBACF,CAAC;wBAAC,OAAO,GAAG,EAAE,CAAC;4BACd,GAAG,CAAC,4CAA4C,EAC/C,OAAO,EAAE,cAAc,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;wBACnD,CAAC;oBACF,CAAC;oBACD,YAAY,GAAG,cAAc,CAAC,IAAI,CAAC;gBACpC,CAAC;wBAAS,CAAC;oBACV,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACzB,CAAC;gBAED,IAAI,YAAY,IAAI,KAAK,EAAE,CAAC;oBAC3B,GAAG,CAAC,mCAAmC,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;oBACvE,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACxB,OAAO;gBACR,CAAC;gBACD,IAAI,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;oBAC/B,GAAG,CAAC,iDAAiD,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;oBAClG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;oBAC1C,SAAS;gBACV,CAAC;gBACD,GAAG,CAAC,sCAAsC,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;gBAC1E,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC1B,OAAO;YACR,CAAC;QACF,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;IACF,CAAC;IAED,6CAA6C;IAErC,KAAK,CAAC,gBAAgB;QAC7B,IAAI,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;YAC5C,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,OAAO;QACR,CAAC;QACD,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,WAAW,EAAE,CAAC;IACpB,CAAC;IAEO,gBAAgB;QACvB,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACpC,IAAI,IAAI;YAAE,IAAI,EAAE,CAAC;IAClB,CAAC;IAED,kBAAkB;IAEV,SAAS,CAAC,OAAe;QAChC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IACrD,CAAC;IAEO,KAAK,CAAC,EAAU;QACvB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IACxD,CAAC;IAEO,WAAW,CAAI,OAAmB,EAAE,EAAU;QACrD,OAAO,OAAO,CAAC,IAAI,CAAC;YACnB,OAAO;YACP,IAAI,OAAO,CAAY,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;SAC3E,CAAC,CAAC;IACJ,CAAC;CACD"}
+{"version":3,"file":"block-transfer.js","sourceRoot":"","sources":["../../../src/cluster/block-transfer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAInD,OAAO,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAE5F,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5C,MAAM,GAAG,GAAG,YAAY,CAAC,gBAAgB,CAAC,CAAC;AA6C3C;;;;;;;;GAQG;AACH,MAAM,OAAO,wBAAwB;IAiBlB;IACA;IACA;IACA;IACA;IApBD,cAAc,CAAS;IACvB,iBAAiB,CAAS;IAC1B,UAAU,CAAS;IACnB,UAAU,CAAU;IAC7B,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAC7B,WAAW,GAAG,CAAC,CAAC;IACP,SAAS,GAAsB,EAAE,CAAC;IAEnD;IACC;;;;;;OAMG;IACc,IAAwB,EACxB,WAAyB,EACzB,sBAA8C,EAC9C,iBAAoC,EACpC,iBAAyB,EAAE,EAC5C,SAA8B,EAAE;QALf,SAAI,GAAJ,IAAI,CAAoB;QACxB,gBAAW,GAAX,WAAW,CAAc;QACzB,2BAAsB,GAAtB,sBAAsB,CAAwB;QAC9C,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,mBAAc,GAAd,cAAc,CAAa;QAG5C,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,IAAI,KAAK,CAAC;QAC3D,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC;IAC7C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CAAC,QAAkB;QAClC,IAAI,IAAI,CAAC,iBAAiB,CAAC,eAAe,EAAE,EAAE,CAAC;YAC9C,GAAG,CAAC,6CAA6C,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YACpE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC5C,CAAC;QAED,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;QAEpE,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAE1E,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CACf,QAAkB,EAClB,SAAgC;QAEhC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACtB,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACtC,CAAC;QACD,IAAI,IAAI,CAAC,iBAAiB,CAAC,eAAe,EAAE,EAAE,CAAC;YAC9C,GAAG,CAAC,6CAA6C,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YACpE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAC5C,CAAC;QAED,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAa,EAAE,CAAC;QAE5B,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAEzF,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAErF,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,oBAAoB,CAAC,KAAqB;QAC/C,GAAG,CAAC,qDAAqD,EACxD,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QAExE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;QACvC,MAAM,CAAC,UAAU,EAAE,aAAa,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACjE,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;YACvF,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC;gBAChD,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC;gBAC5D,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE;YAClD,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC;SACvC,CAAC,CAAC;QAEH,GAAG,CAAC,2DAA2D,EAC9D,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAChD,aAAa,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EACjD,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAEhD,OAAO;YACN,MAAM,EAAE,UAAU,CAAC,SAAS;YAC5B,QAAQ,EAAE,aAAa,CAAC,SAAS;YACjC,QAAQ,EAAE,aAAa,CAAC,WAAW;YACnC,UAAU,EAAE,UAAU,CAAC,SAAS;YAChC,eAAe,EAAE,UAAU,CAAC,WAAW;YACvC,MAAM,EAAE,UAAU,CAAC,MAAM;SACzB,CAAC;IACH,CAAC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACK,KAAK,CAAC,cAAc,CAC3B,KAA4B,EAC5B,KAAa;QAEb,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,MAAM,WAAW,GAAa,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAyB,CAAC;QAChD,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;QAC3C,CAAC;QAED,IAAI,IAAI,CAAC,iBAAiB,CAAC,eAAe,EAAE,EAAE,CAAC;YAC9C,wFAAwF;YACxF,4FAA4F;YAC5F,8EAA8E;YAC9E,GAAG,CAAC,wDAAwD,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC1E,KAAK,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAC;gBACzC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;oBAAE,SAAS;gBACpC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC1B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YAC9D,CAAC;YACD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;QAC3C,CAAC;QAED,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,EAAE;YACxE,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAClC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CACvC,OAAO,EACP,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,EAC9B,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,wEAAwE;aACzG,CAAC;YACF,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO,CAAC,uDAAuD;YACpF,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;gBACtB,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACxB,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YACxE,CAAC;iBAAM,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBAC/B,mFAAmF;gBACnF,uFAAuF;gBACvF,yFAAyF;gBACzF,yFAAyF;gBACzF,wFAAwF;gBACxF,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC1B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YACxE,CAAC;iBAAM,CAAC;gBACP,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAC1B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,CAAC,GAAG,MAAM,CAAC,cAAc,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YACtF,CAAC;QACF,CAAC,CAAC,CAAC,CAAC;QAEJ,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;IAC3C,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,iBAAiB,CACtB,QAAkB,EAClB,MAA6B,EAC7B,KAAa;QAEb,wFAAwF;QACxF,0FAA0F;QAC1F,6FAA6F;QAC7F,+FAA+F;QAC/F,8FAA8F;QAC9F,sBAAsB;QACtB,IAAI,IAAI,CAAC,iBAAiB,CAAC,eAAe,EAAE,EAAE,CAAC;YAC9C,GAAG,CAAC,2DAA2D,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YAClF,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC;QACtD,CAAC;QACD,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;YAChB,+FAA+F;YAC/F,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC;QACtD,CAAC;QAED,MAAM,SAAS,GAAa,EAAE,CAAC;QAC/B,MAAM,WAAW,GAAa,EAAE,CAAC;QAEjC,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;QACvE,MAAM,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAC,EAAE,EAAC,EAAE;YACpC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;YAC5D,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO,CAAC,sDAAsD;YACnF,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC,CAAC;QAEJ,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;IACnC,CAAC;IAEO,KAAK,CAAC,WAAW,CACxB,OAAe,EACf,SAAmB,EACnB,MAAgB;QAEhB,MAAM,GAAG,GAAG,QAAQ,OAAO,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO;QACnC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEvB,IAAI,CAAC;YACJ,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;gBACnC,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAC9B,IAAI,OAA+D,CAAC;gBACpE,IAAI,CAAC;oBACJ,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAC/B,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,OAAO,CAAC,EAC5C,IAAI,CAAC,iBAAiB,CACtB,CAAC;gBACH,CAAC;wBAAS,CAAC;oBACV,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACzB,CAAC;gBAED,IAAI,OAAO,EAAE,CAAC;oBACb,GAAG,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;oBACjC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACxB,OAAO;gBACR,CAAC;gBACD,IAAI,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;oBAC/B,GAAG,CAAC,gCAAgC,EAAE,OAAO,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;oBAC5D,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;oBAC1C,SAAS;gBACV,CAAC;gBACD,GAAG,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAC;gBACrC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACrB,OAAO;YACR,CAAC;QACF,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;IACF,CAAC;IAEO,KAAK,CAAC,WAAW,CACxB,OAAe,EACf,SAAgC,EAChC,SAAmB,EACnB,MAAgB;QAEhB,MAAM,GAAG,GAAG,QAAQ,OAAO,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO;QACnC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEvB,IAAI,CAAC;YACJ,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;gBACnC,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAC9B,IAAI,MAAM,GAAG,KAAK,CAAC;gBACnB,IAAI,CAAC;oBACJ,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;oBACtC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;wBACpC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;wBACrB,OAAO;oBACR,CAAC;oBAED,qCAAqC;oBACrC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBAC5D,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;oBACpC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC;wBACzB,GAAG,CAAC,6BAA6B,EAAE,OAAO,CAAC,CAAC;wBAC5C,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;wBACrB,OAAO;oBACR,CAAC;oBAED,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;oBAC9E,mFAAmF;oBACnF,oFAAoF;oBACpF,kFAAkF;oBAClF,4EAA4E;oBAC5E,MAAM,aAAa,GAAG,MAAM,wBAAwB,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;oBAEtF,iCAAiC;oBACjC,KAAK,MAAM,cAAc,IAAI,MAAM,EAAE,CAAC;wBACrC,IAAI,CAAC;4BACJ,MAAM,MAAM,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;4BAChD,MAAM,MAAM,GAAG,IAAI,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;4BACtF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CACtC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,aAAa,CAAC,EACrE,IAAI,CAAC,iBAAiB,CACtB,CAAC;4BAEF,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gCACrD,MAAM,GAAG,IAAI,CAAC;gCACd,GAAG,CAAC,0BAA0B,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;gCACzD,MAAM;4BACP,CAAC;wBACF,CAAC;wBAAC,OAAO,GAAG,EAAE,CAAC;4BACd,GAAG,CAAC,yCAAyC,EAC5C,OAAO,EAAE,cAAc,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;wBACnD,CAAC;oBACF,CAAC;gBACF,CAAC;wBAAS,CAAC;oBACV,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACzB,CAAC;gBAED,IAAI,MAAM,EAAE,CAAC;oBACZ,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACxB,OAAO;gBACR,CAAC;gBACD,IAAI,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;oBAC/B,GAAG,CAAC,gCAAgC,EAAE,OAAO,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;oBAC5D,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;oBAC1C,SAAS;gBACV,CAAC;gBACD,GAAG,CAAC,sBAAsB,EAAE,OAAO,CAAC,CAAC;gBACrC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACrB,OAAO;YACR,CAAC;QACF,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;IACF,CAAC;IAED;;;;;;;;;;;;OAYG;IACK,KAAK,CAAC,cAAc,CAC3B,OAAe,EACf,MAA6B,EAC7B,KAAa;QAEb,MAAM,GAAG,GAAG,WAAW,OAAO,EAAE,CAAC;QACjC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACxC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEvB,IAAI,CAAC;YACJ,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;YAC5C,MAAM,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAClD,IAAI,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAClC,0EAA0E;gBAC1E,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;YACpF,CAAC;YAED,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;gBACnC,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBAC9B,IAAI,YAAY,GAAG,CAAC,CAAC;gBACrB,IAAI,CAAC;oBACJ,uDAAuD;oBACvD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;oBAC5D,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;oBACpC,IAAI,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC;wBACzB,2EAA2E;wBAC3E,GAAG,CAAC,gCAAgC,EAAE,OAAO,CAAC,CAAC;wBAC/C,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;oBACnF,CAAC;oBAED,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;oBAC9E,qFAAqF;oBACrF,mFAAmF;oBACnF,MAAM,aAAa,GAAG,MAAM,wBAAwB,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;oBAEtF,qFAAqF;oBACrF,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;oBACzC,KAAK,MAAM,cAAc,IAAI,eAAe,EAAE,CAAC;wBAC9C,IAAI,cAAc,CAAC,IAAI,IAAI,KAAK;4BAAE,MAAM;wBACxC,IAAI,CAAC;4BACJ,MAAM,MAAM,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;4BAChD,MAAM,MAAM,GAAG,IAAI,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;4BACtF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,WAAW,CACtC,MAAM,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,aAAa,CAAC,EACrE,IAAI,CAAC,iBAAiB,CACtB,CAAC;4BACF,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gCACrD,cAAc,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;gCACnC,iFAAiF;gCACjF,mFAAmF;gCACnF,+EAA+E;gCAC/E,gFAAgF;gCAChF,iFAAiF;gCACjF,yEAAyE;gCACzE,iBAAiB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;4BACvC,CAAC;wBACF,CAAC;wBAAC,OAAO,GAAG,EAAE,CAAC;4BACd,GAAG,CAAC,4CAA4C,EAC/C,OAAO,EAAE,cAAc,EAAG,GAAa,CAAC,OAAO,CAAC,CAAC;wBACnD,CAAC;oBACF,CAAC;oBACD,YAAY,GAAG,cAAc,CAAC,IAAI,CAAC;gBACpC,CAAC;wBAAS,CAAC;oBACV,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACzB,CAAC;gBAED,IAAI,YAAY,IAAI,KAAK,EAAE,CAAC;oBAC3B,GAAG,CAAC,mCAAmC,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;oBACvE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,cAAc,EAAE,iBAAiB,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;gBACnF,CAAC;gBACD,IAAI,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;oBAC/B,GAAG,CAAC,iDAAiD,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;oBAClG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;oBAC1C,SAAS;gBACV,CAAC;gBACD,GAAG,CAAC,sCAAsC,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;gBAC1E,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;YACpF,CAAC;QACF,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;IACF,CAAC;IAED,6CAA6C;IAErC,KAAK,CAAC,gBAAgB;QAC7B,IAAI,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;YAC5C,IAAI,CAAC,WAAW,EAAE,CAAC;YACnB,OAAO;QACR,CAAC;QACD,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,WAAW,EAAE,CAAC;IACpB,CAAC;IAEO,gBAAgB;QACvB,IAAI,CAAC,WAAW,EAAE,CAAC;QACnB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACpC,IAAI,IAAI;YAAE,IAAI,EAAE,CAAC;IAClB,CAAC;IAED,kBAAkB;IAEV,SAAS,CAAC,OAAe;QAChC,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IACrD,CAAC;IAEO,KAAK,CAAC,EAAU;QACvB,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;IACxD,CAAC;IAEO,WAAW,CAAI,OAAmB,EAAE,EAAU;QACrD,OAAO,OAAO,CAAC,IAAI,CAAC;YACnB,OAAO;YACP,IAAI,OAAO,CAAY,OAAO,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC;SAC3E,CAAC,CAAC;IACJ,CAAC;CACD"}

package/dist/src/cluster/certified-claims.d.ts

@@ -0,0 +1,170 @@
+import type { ActionId, BlockId, IBlock } from "@optimystic/db-core";
+import { type BlockCommitProof, type ProofClaim, type ProofFailure, type ProofThresholds } from "./commit-proof.js";
+/**
+ * Certification of repair claims by cohort commit proof — the shared layer both block-restoration
+ * paths (read-repair in `CoordinatorRepo`, reconcile in `reconcile-block`) run a peer-attached
+ * {@link BlockCommitProof} through before marking a `RevClaim` / `BlockHashCandidate` as
+ * `certified` for the selection helpers in `quorum-restore.ts`.
+ *
+ * Mirrors the layered posture of `verifyInvalidationCertificate` (`dispute/invalidation.ts`):
+ *
+ *  - **Layer 1 (always)**: offline cryptographic verification — thresholds of Ed25519 votes from
+ *    the proof's own signer list (`verifyBlockCommitProofClaim` / `...Content`), preceded by the
+ *    {@link MAX_PROOF_SIGNERS} cap this module owes the verifier (its caller obligation #2:
+ *    verification cost is attacker-chosen, so bound the cohort BEFORE any hashing).
+ *  - **Layer 2 (optional, observational)**: {@link ProofAnchoring.recomputeBlockCohort} re-derives
+ *    the block's cohort from the caller's own topology view and the overlap with the proof's
+ *    signers is LOGGED — never gated on. Historic cohort rotation makes zero overlap legitimate
+ *    for old data; gating would re-create the very lone-holder-unreadable defect the certified
+ *    path exists to fix. Like invalidation's `recomputeArbitratorSet`, no production caller wires
+ *    this yet (see the note at the `clusterMember` construction in `libp2p-node-base.ts`).
+ *  - **Degradation**: with no recompute capability, or an infeasible recompute, an accepted proof
+ *    is certified anyway but never silently — logged, and surfaced via
+ *    {@link ProofAnchoring.onUnanchored} so callers can count/report the residual, exactly as
+ *    invalidation's `acceptUnanchored` does.
+ */
+/**
+ * Verdict from a {@link RecomputeBlockCohort}:
+ *  - `{ feasible: false }` — the caller could not re-derive the block's current cohort (no routing
+ *    view, lookup failed); anchoring degrades to accept-and-surface.
+ *  - `{ feasible: true, cohortPeerIds }` — the currently-derived cohort, compared (log-only)
+ *    against the proof's signer list.
+ */
+export type CohortRecomputeVerdict = {
+    readonly feasible: false;
+} | {
+    readonly feasible: true;
+    readonly cohortPeerIds: string[];
+};
+/**
+ * Injected layer-2 capability: re-derive the block's responsible cohort from the caller's own
+ * topology view. A real implementation would come from `IKeyNetwork.findCluster` — the same source
+ * `deriveExpectedCluster` uses in `libp2p-node-base.ts`. NOT wired in production yet; the overlap
+ * it enables is observational (logged), never a gate.
+ */
+export type RecomputeBlockCohort = (blockId: BlockId) => Promise<CohortRecomputeVerdict>;
+/** Reported when a proof is accepted on layer-1 cryptography alone — see {@link ProofAnchoring.onUnanchored}. */
+export type UnanchoredProofAcceptance = {
+    readonly blockId: BlockId;
+    readonly rev: number;
+    readonly actionId: ActionId;
+    /** Size of the proof's signer list (`proof.peerIds.length`). */
+    readonly signerCount: number;
+    /** Why the anchoring layer did not run to a comparison. */
+    readonly reason: 'no-recompute-capability' | 'recompute-infeasible';
+};
+/** Optional anchoring capabilities a caller threads into {@link certifyClaim} / {@link certifyContent}. */
+export type ProofAnchoring = {
+    /** Layer-2 recompute; omitted → layer-1-only certification with the documented surfacing. */
+    readonly recomputeBlockCohort?: RecomputeBlockCohort;
+    /**
+     * Invoked when a proof is accepted without a cohort comparison (capability absent or
+     * infeasible). Lets a caller surface "certified a claim it could not anchor to topology"
+     * alongside the internal log. Exceptions thrown from it are swallowed (logged), never allowed
+     * to un-certify an already-verified proof.
+     */
+    readonly onUnanchored?: (info: UnanchoredProofAcceptance) => void;
+};
+/** Everything {@link ProofFailure} names, plus the pre-verification cap decline this module adds. */
+export type CertifyFailure = ProofFailure | 'oversized-cohort';
+/**
+ * Hard bound on `proof.peerIds.length`, enforced BEFORE any hashing or signature work. Nothing on
+ * the repair wire bounds a proof's cohort count — only byte caps apply (1 MiB control / 8 MiB sync
+ * response), which would still admit ~80k signature verifications — so this module enforces the
+ * bound `commit-proof.ts` declares as its caller obligation #2. 256 is far above any plausible
+ * cohort (deployments run ~10) while keeping the worst-case verification cost trivial.
+ *
+ * NOTE: this cap bounds the SIGNATURE count (at most `MAX_PROOF_SIGNERS` Ed25519 verifies per
+ * round, since `countApprovals` skips signers outside `peerIds` before any crypto). It does NOT
+ * bound the proof's serialized SIZE: `computeClusterMessageHash` / `...PromiseHash` /
+ * `...CommitHash` canonically serialize `message`, `promises` and `commits`, whose entry counts a
+ * peer chooses freely inside the transport byte cap. That cost is linear and today bounded by the
+ * 1 MiB control-message cap; if repair verification ever shows up in a profile, or a deployment
+ * raises those transport caps, add a serialized-size bound here alongside the signer count.
+ */
+export declare const MAX_PROOF_SIGNERS = 256;
+/**
+ * Failure reasons that must NEVER become a reputation penalty for the serving peer — the `false`
+ * half of {@link ATTRIBUTABLE_PROOF_FAILURES}, derived so the set and
+ * {@link isAttributableProofFailure} cannot drift apart. Prefer the predicate; this set is exported
+ * for callers that want to name the whole population (logs, tests).
+ */
+export declare const NON_ATTRIBUTABLE_PROOF_FAILURES: ReadonlySet<CertifyFailure>;
+/**
+ * May this failure be held against the peer that served the proof? One predicate so the two repair
+ * paths cannot drift on the classification — see {@link ATTRIBUTABLE_PROOF_FAILURES} for the
+ * per-reason rationale.
+ */
+export declare function isAttributableProofFailure(failure: CertifyFailure): boolean;
+/**
+ * The {@link ProofThresholds} both repair paths verify against, from the cohort's configured
+ * `superMajorityThreshold`.
+ *
+ * `simpleMajorityThreshold` is hardcoded 0.5 — NOT the deployment's configured value (0.51 by
+ * default): cohort members enforce `count > total / 2` (`ClusterMember.hasMajority`), and
+ * `ProofThresholds` requires a verifier to mirror what the members actually enforced. Verifying
+ * against the configured value would reject proofs real cohorts produce.
+ *
+ * One function so the read path (`CoordinatorRepo.queryClusterForLatest`) and the commit-path
+ * reconcile (`cluster/reconcile-block.ts`) cannot drift on the one number that has to match
+ * `hasMajority`.
+ */
+export declare function proofThresholds(superMajorityThreshold: number): ProofThresholds;
+/**
+ * Certification verdict for a claim — a discriminated union, mirroring `ProofVerdict`
+ * (`commit-proof.ts`) so "certified" and "why not" cannot disagree: a failure reason is REQUIRED
+ * when uncertified and unrepresentable when certified.
+ */
+export type ClaimCertification = 
+/** The proof certifies `claim` — cap passed, thresholds of valid cohort signatures met. */
+{
+    certified: true;
+}
+/** Classify the reason via {@link isAttributableProofFailure} before penalizing anyone. */
+ | {
+    certified: false;
+    failure: CertifyFailure;
+};
+/**
+ * Certification verdict for a claim AND the block bytes served for it. Three reachable outcomes,
+ * spelled as three arms so an impossible mix (content certified while the rev is not, a failure
+ * alongside full success) cannot be constructed:
+ */
+export type ContentCertification = 
+/** Both halves passed: the proof certifies `(blockId, rev, actionId)` AND these exact bytes. */
+{
+    revCertified: true;
+    contentCertified: true;
+}
+/**
+ * The claim half passed, the content half did not: `digest-mismatch` (attributable — drop AND
+ * penalize the served bytes) or `no-digest-declared` (drop only; the cohort declared nothing to
+ * compare against). The `(rev, actionId)` is certified either way.
+ */
+ | {
+    revCertified: true;
+    contentCertified: false;
+    failure: 'digest-mismatch' | 'no-digest-declared';
+}
+/** The claim half failed, so nothing is certified. Classify via {@link isAttributableProofFailure}. */
+ | {
+    revCertified: false;
+    contentCertified: false;
+    failure: CertifyFailure;
+};
+/**
+ * Certify a repair claim by its attached cohort commit proof: cap the cohort, verify offline
+ * ({@link verifyBlockCommitProofClaim}), then run the anchoring layer on success. Total on hostile
+ * input like the verifier it wraps — never throws.
+ */
+export declare function certifyClaim(proof: BlockCommitProof, claim: ProofClaim, thresholds: ProofThresholds, anchoring?: ProofAnchoring): Promise<ClaimCertification>;
+/**
+ * Certify a claim AND the served block bytes ({@link verifyBlockCommitProofContent}). The two
+ * halves are reported separately because the content checks (`digest-mismatch` /
+ * `no-digest-declared`) only run after the claim half has already PASSED — a proof that certifies
+ * the revision while the bytes disagree still certifies the revision; the caller drops (and, for
+ * `digest-mismatch`, penalizes) the bytes. Anchoring runs whenever the claim half passed: that is
+ * the moment a proof was accepted as evidence.
+ */
+export declare function certifyContent(proof: BlockCommitProof, claim: ProofClaim, block: IBlock, thresholds: ProofThresholds, anchoring?: ProofAnchoring): Promise<ContentCertification>;
+//# sourceMappingURL=certified-claims.d.ts.map

package/dist/src/cluster/certified-claims.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"certified-claims.d.ts","sourceRoot":"","sources":["../../../src/cluster/certified-claims.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAEN,KAAK,gBAAgB,EAAE,KAAK,UAAU,EAAE,KAAK,YAAY,EAAE,KAAK,eAAe,EAC/E,MAAM,mBAAmB,CAAC;AAK3B;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH;;;;;;GAMG;AACH,MAAM,MAAM,sBAAsB,GAC/B;IAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAA;CAAE,GAC5B;IAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAEjE;;;;;GAKG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,sBAAsB,CAAC,CAAC;AAEzF,iHAAiH;AACjH,MAAM,MAAM,yBAAyB,GAAG;IACvC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,gEAAgE;IAChE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,2DAA2D;IAC3D,QAAQ,CAAC,MAAM,EAAE,yBAAyB,GAAG,sBAAsB,CAAC;CACpE,CAAC;AAEF,2GAA2G;AAC3G,MAAM,MAAM,cAAc,GAAG;IAC5B,6FAA6F;IAC7F,QAAQ,CAAC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IACrD;;;;;OAKG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,yBAAyB,KAAK,IAAI,CAAC;CAClE,CAAC;AAEF,qGAAqG;AACrG,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG,kBAAkB,CAAC;AAE/D;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,iBAAiB,MAAM,CAAC;AA6CrC;;;;;GAKG;AACH,eAAO,MAAM,+BAA+B,EAAE,WAAW,CAAC,cAAc,CAGvE,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAE3E;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAAC,sBAAsB,EAAE,MAAM,GAAG,eAAe,CAE/E;AAED;;;;GAIG;AACH,MAAM,MAAM,kBAAkB;AAC7B,2FAA2F;AACzF;IAAE,SAAS,EAAE,IAAI,CAAA;CAAE;AACrB,2FAA2F;GACzF;IAAE,SAAS,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,cAAc,CAAA;CAAE,CAAC;AAEjD;;;;GAIG;AACH,MAAM,MAAM,oBAAoB;AAC/B,gGAAgG;AAC9F;IAAE,YAAY,EAAE,IAAI,CAAC;IAAC,gBAAgB,EAAE,IAAI,CAAA;CAAE;AAChD;;;;GAIG;GACD;IAAE,YAAY,EAAE,IAAI,CAAC;IAAC,gBAAgB,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,iBAAiB,GAAG,oBAAoB,CAAA;CAAE;AACpG,uGAAuG;GACrG;IAAE,YAAY,EAAE,KAAK,CAAC;IAAC,gBAAgB,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,cAAc,CAAA;CAAE,CAAC;AAE7E;;;;GAIG;AACH,wBAAsB,YAAY,CACjC,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,SAAS,GAAE,cAAmB,GACrG,OAAO,CAAC,kBAAkB,CAAC,CAU7B;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CACnC,KAAK,EAAE,gBAAgB,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,eAAe,EACtF,SAAS,GAAE,cAAmB,GAC5B,OAAO,CAAC,oBAAoB,CAAC,CAc/B"}