@serfab/cadre-core 0.13.0 → 1.1.0

package/dist/strand-watcher.js.map

@@ -1 +1 @@
-{"version":3,"file":"strand-watcher.js","sourceRoot":"","sources":["../src/strand-watcher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B,MAAM,GAAG,GAAG,KAAK,CAAC,6BAA6B,CAAC,CAAC;AAUjD;;;;;GAKG;AACH,MAAM,oBAAoB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AA0C3C;;;;;GAKG;AACH,MAAM,OAAO,aAAa;IAwBxB,YACE,SAA0B,EAC1B,SAAiC,EACjC,SAAuB,EAAE,IAAI,EAAE,KAAK,EAAE,EACtC,eAAuB,IAAI,EAC3B,YAA2B,EAC3B,MAAoB,IAAI,CAAC,GAAG;QAftB,iBAAY,GAA2B,IAAI,GAAG,EAAE,CAAC;QACzD,wFAAwF;QAChF,gBAAW,GAAgB,IAAI,GAAG,EAAE,CAAC;QAC7C,gFAAgF;QACxE,kBAAa,GAAoC,IAAI,GAAG,EAAE,CAAC;QAC3D,cAAS,GAA0C,IAAI,CAAC;QACxD,qBAAgB,GAAyC,IAAI,CAAC;QAC9D,YAAO,GAAG,KAAK,CAAC;QAUtB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,GAAG,CAAC,uDAAuD,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IACrF,CAAC;IAED;;;;OAIG;IACK,cAAc,CAAC,MAAiB;QACtC,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACzB,KAAK,KAAK;gBACR,OAAO,MAAM,CAAC;YAChB,KAAK,MAAM;gBACT,OAAO,QAAQ,CAAC;YAClB,KAAK,UAAU;gBACb,OAAO,MAAM,CAAC,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;YAChE,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;oBACvB,oEAAoE;oBACpE,OAAO,MAAM,CAAC;gBAChB,CAAC;gBACD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACtD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACzB,wEAAwE;oBACxE,GAAG,CAAC,0DAA0D,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;oBAC3E,OAAO,OAAO,CAAC;gBACjB,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;gBAC9C,GAAG,CAAC,mEAAmE,EACnE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBACpD,OAAO,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;YACrC,CAAC;YACD;gBACE,OAAO,MAAM,CAAC;QAClB,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,aAAa,CAAC,QAAgB;QACpC,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;QACtF,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QAClF,GAAG,CAAC,iEAAiE,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACpG,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,IAAI;QAChB,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAE1B,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;YAC3D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAE/D,qBAAqB;YACrB,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;gBACpC,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;oBAAE,SAAS;gBAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAClD,0EAA0E;gBAC1E,qEAAqE;gBACrE,IAAI,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,aAAa;oBAAE,SAAS,CAAC,oCAAoC;gBACjG,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;gBAC7C,IAAI,QAAQ,KAAK,QAAQ;oBAAE,SAAS;gBACpC,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;gBACnC,2EAA2E;gBAC3E,+EAA+E;gBAC/E,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;gBACzC,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;oBACzB,kEAAkE;oBAClE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAClC,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;oBAC3C,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACvC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,GAAG,CAAC,sCAAsC,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;oBAC9D,0EAA0E;oBAC1E,yEAAyE;oBACzE,0EAA0E;oBAC1E,qEAAqE;oBACrE,4EAA4E;oBAC5E,6EAA6E;oBAC7E,2EAA2E;oBAC3E,0EAA0E;oBAC1E,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBACpC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBACnC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;YAED,yEAAyE;YACzE,0EAA0E;YAC1E,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC7C,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACxC,IAAI,CAAC,MAAM;oBAAE,SAAS,CAAC,2CAA2C;gBAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;gBAC7C,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;oBACxB,gDAAgD;oBAChD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACpC,CAAC;qBAAM,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBACjC,oEAAoE;oBACpE,GAAG,CAAC,kDAAkD,EAAE,QAAQ,CAAC,CAAC;oBAClE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBACnC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAClC,IAAI,CAAC;wBACH,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;oBACjD,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,GAAG,CAAC,yCAAyC,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;oBAClE,CAAC;gBACH,CAAC;gBACD,wEAAwE;YAC1E,CAAC;YAED,qEAAqE;YACrE,0EAA0E;YAC1E,uBAAuB;YACvB,KAAK,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC3C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC9B,GAAG,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;oBACpC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBACnC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAClC,IAAI,CAAC;wBACH,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;oBACjD,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,GAAG,CAAC,yCAAyC,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;oBAClE,CAAC;gBACH,CAAC;YACH,CAAC;YAED,0EAA0E;YAC1E,mEAAmE;YACnE,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;gBACtD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC9B,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,GAAG,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,GAAG,CAAC,+BAA+B,CAAC,CAAC;YACrC,OAAO;QACT,CAAC;QAED,GAAG,CAAC,wBAAwB,CAAC,CAAC;QAC9B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QAEpB,0BAA0B;QAC1B,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;YAChC,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QACnB,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAEtB,4DAA4D;QAC5D,0EAA0E;QAC1E,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC,GAAG,EAAE;YACtC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;YAC7B,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QACnB,CAAC,EAAE,GAAG,CAAC,CAAC;QAER,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO;QACT,CAAC;QAED,GAAG,CAAC,wBAAwB,CAAC,CAAC;QAC9B,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QAErB,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,YAAY,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACpC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAC/B,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC9B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QAC3B,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,eAAe;QACb,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS;QACb,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;CACF"}
+{"version":3,"file":"strand-watcher.js","sourceRoot":"","sources":["../src/strand-watcher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAG1B,MAAM,GAAG,GAAG,KAAK,CAAC,6BAA6B,CAAC,CAAC;AAUjD;;;;;GAKG;AACH,MAAM,oBAAoB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AA0C3C;;;;;GAKG;AACH,MAAM,OAAO,aAAa;IAwBxB,YACE,SAA0B,EAC1B,SAAiC,EACjC,SAAuB,EAAE,IAAI,EAAE,KAAK,EAAE,EACtC,eAAuB,IAAI,EAC3B,YAA2B,EAC3B,MAAoB,IAAI,CAAC,GAAG;QAftB,iBAAY,GAA2B,IAAI,GAAG,EAAE,CAAC;QACzD,wFAAwF;QAChF,gBAAW,GAAgB,IAAI,GAAG,EAAE,CAAC;QAC7C,gFAAgF;QACxE,kBAAa,GAAoC,IAAI,GAAG,EAAE,CAAC;QAC3D,cAAS,GAA0C,IAAI,CAAC;QACxD,qBAAgB,GAAyC,IAAI,CAAC;QAC9D,YAAO,GAAG,KAAK,CAAC;QAUtB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,GAAG,CAAC,uDAAuD,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;IACrF,CAAC;IAED;;;;OAIG;IACK,cAAc,CAAC,MAAiB;QACtC,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACzB,KAAK,KAAK;gBACR,OAAO,MAAM,CAAC;YAChB,KAAK,MAAM;gBACT,OAAO,QAAQ,CAAC;YAClB,KAAK,UAAU;gBACb,OAAO,MAAM,CAAC,EAAE,KAAK,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;YAChE,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;oBACvB,oEAAoE;oBACpE,OAAO,MAAM,CAAC;gBAChB,CAAC;gBACD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACtD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACzB,wEAAwE;oBACxE,GAAG,CAAC,0DAA0D,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;oBAC3E,OAAO,OAAO,CAAC;gBACjB,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;gBAC9C,GAAG,CAAC,mEAAmE,EACnE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBACpD,OAAO,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;YACrC,CAAC;YACD;gBACE,OAAO,MAAM,CAAC;QAClB,CAAC;IACH,CAAC;IAED;;;OAGG;IACK,aAAa,CAAC,QAAgB;QACpC,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;QACtF,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;QAClF,GAAG,CAAC,iEAAiE,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACpG,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,IAAI;QAChB,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAE1B,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;YAC3D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAE/D,qBAAqB;YACrB,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;gBACpC,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;oBAAE,SAAS;gBAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAClD,0EAA0E;gBAC1E,qEAAqE;gBACrE,IAAI,OAAO,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,aAAa;oBAAE,SAAS,CAAC,oCAAoC;gBACjG,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;gBAC7C,IAAI,QAAQ,KAAK,QAAQ;oBAAE,SAAS;gBACpC,GAAG,CAAC,kBAAkB,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;gBACnC,2EAA2E;gBAC3E,+EAA+E;gBAC/E,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;gBACzC,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;oBACzB,kEAAkE;oBAClE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAClC,CAAC;gBACD,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;oBAC3C,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACvC,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,GAAG,CAAC,sCAAsC,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;oBAC9D,0EAA0E;oBAC1E,yEAAyE;oBACzE,0EAA0E;oBAC1E,qEAAqE;oBACrE,4EAA4E;oBAC5E,6EAA6E;oBAC7E,2EAA2E;oBAC3E,0EAA0E;oBAC1E,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBACpC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBACnC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBAChC,CAAC;YACH,CAAC;YAED,yEAAyE;YACzE,0EAA0E;YAC1E,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC7C,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACxC,IAAI,CAAC,MAAM;oBAAE,SAAS,CAAC,2CAA2C;gBAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;gBAC7C,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;oBACxB,gDAAgD;oBAChD,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACpC,CAAC;qBAAM,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;oBACjC,oEAAoE;oBACpE,GAAG,CAAC,kDAAkD,EAAE,QAAQ,CAAC,CAAC;oBAClE,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBACnC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAClC,IAAI,CAAC;wBACH,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;oBACjD,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,GAAG,CAAC,yCAAyC,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;oBAClE,CAAC;gBACH,CAAC;gBACD,wEAAwE;YAC1E,CAAC;YAED,qEAAqE;YACrE,0EAA0E;YAC1E,uBAAuB;YACvB,KAAK,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;gBAC3C,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC9B,GAAG,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC;oBACpC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBACnC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;oBAClC,IAAI,CAAC;wBACH,MAAM,IAAI,CAAC,SAAS,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;oBACjD,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,GAAG,CAAC,yCAAyC,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;oBAClE,CAAC;gBACH,CAAC;YACH,CAAC;YAED,0EAA0E;YAC1E,mEAAmE;YACnE,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;gBACtD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC9B,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACtC,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,oFAAoF;YACpF,gFAAgF;YAChF,wFAAwF;YACxF,mFAAmF;YACnF,sFAAsF;YACtF,qFAAqF;YACrF,GAAG,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,GAAG,CAAC,+BAA+B,CAAC,CAAC;YACrC,OAAO;QACT,CAAC;QAED,GAAG,CAAC,wBAAwB,CAAC,CAAC;QAC9B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QAEpB,0BAA0B;QAC1B,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;YAChC,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QACnB,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QAEtB,4DAA4D;QAC5D,0EAA0E;QAC1E,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC,GAAG,EAAE;YACtC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;YAC7B,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QACnB,CAAC,EAAE,GAAG,CAAC,CAAC;QAER,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,IAAI;QACR,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,OAAO;QACT,CAAC;QAED,GAAG,CAAC,wBAAwB,CAAC,CAAC;QAC9B,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QAErB,IAAI,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,YAAY,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACpC,IAAI,CAAC,gBAAgB,GAAG,IAAI,CAAC;QAC/B,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC9B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC;QAED,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;QAC3B,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAC/B,CAAC;IAED;;OAEG;IACH,eAAe;QACb,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS;QACb,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IACpB,CAAC;CACF"}

package/dist/timed-step.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Await one step of a longer operation between two `sereus:cadre:timing` lines:
+ * `[<scope>:<id>] <step>: start` before it, then `<step>: <n>ms` — or
+ * `<step>: failed after <n>ms` — once it settles. The start line is what matters on a
+ * device: a step that never settles leaves a start with no matching end, so a trace
+ * names the step that hung rather than only the last one that finished.
+ *
+ * The text is built here rather than passed as `%s`/`%d` arguments: `debug`'s browser
+ * build, which React Native bundles, leaves placeholders for the console to fill, and
+ * RN's console prints them unfilled, so a device trace would read `[%s:%s] %s: start`.
+ */
+export declare function timedStep<T>(scope: string, id: string, step: string, op: () => Promise<T>): Promise<T>;

package/dist/timed-step.js

@@ -0,0 +1,28 @@
+import debug from 'debug';
+const timing = debug('sereus:cadre:timing');
+/**
+ * Await one step of a longer operation between two `sereus:cadre:timing` lines:
+ * `[<scope>:<id>] <step>: start` before it, then `<step>: <n>ms` — or
+ * `<step>: failed after <n>ms` — once it settles. The start line is what matters on a
+ * device: a step that never settles leaves a start with no matching end, so a trace
+ * names the step that hung rather than only the last one that finished.
+ *
+ * The text is built here rather than passed as `%s`/`%d` arguments: `debug`'s browser
+ * build, which React Native bundles, leaves placeholders for the console to fill, and
+ * RN's console prints them unfilled, so a device trace would read `[%s:%s] %s: start`.
+ */
+export async function timedStep(scope, id, step, op) {
+    const label = `[${scope}:${id}] ${step}`;
+    timing(`${label}: start`);
+    const t0 = performance.now();
+    try {
+        const result = await op();
+        timing(`${label}: ${Math.round(performance.now() - t0)}ms`);
+        return result;
+    }
+    catch (error) {
+        timing(`${label}: failed after ${Math.round(performance.now() - t0)}ms`);
+        throw error;
+    }
+}
+//# sourceMappingURL=timed-step.js.map

package/dist/timed-step.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"timed-step.js","sourceRoot":"","sources":["../src/timed-step.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,MAAM,MAAM,GAAG,KAAK,CAAC,qBAAqB,CAAC,CAAC;AAE5C;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAI,KAAa,EAAE,EAAU,EAAE,IAAY,EAAE,EAAoB;IAC/F,MAAM,KAAK,GAAG,IAAI,KAAK,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;IACzC,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC;IAC1B,MAAM,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAC7B,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,EAAE,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,KAAK,KAAK,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QAC5D,OAAO,MAAM,CAAC;IACf,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,CAAC,GAAG,KAAK,kBAAkB,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACzE,MAAM,KAAK,CAAC;IACb,CAAC;AACF,CAAC"}

package/dist/timeout-scheduler.d.ts

@@ -0,0 +1,19 @@
+/**
+ * The timer seam shared by the strand bring-up loops that re-arm themselves one step at a
+ * time — the first-sync write gate's probe loop (`strand-first-sync-gate.ts`) and the
+ * membership reconciler's retry ladder (`strand-membership-reconciler.ts`). `setTimeout`
+ * rather than a repeating interval because the next step is armed only once the previous
+ * one settles, so a slow network read never stacks steps behind it, and because the delay
+ * can differ per step.
+ *
+ * Tests inject a hand-cranked clock; production omits it and gets real timers, `unref`'d so
+ * a loop that is only waiting never holds a Node process open (the call is optional —
+ * browsers and React Native return a plain handle with no `unref`).
+ */
+/** Timer seam for a self-rescheduling loop; omit for real (unref'd) timeouts. */
+export interface TimeoutScheduler {
+    setTimeout(fn: () => void, ms: number): unknown;
+    clearTimeout(handle: unknown): void;
+}
+/** Real timers, `unref`'d where the runtime supports it. */
+export declare const defaultTimeoutScheduler: TimeoutScheduler;

package/dist/timeout-scheduler.js

@@ -0,0 +1,22 @@
+/**
+ * The timer seam shared by the strand bring-up loops that re-arm themselves one step at a
+ * time — the first-sync write gate's probe loop (`strand-first-sync-gate.ts`) and the
+ * membership reconciler's retry ladder (`strand-membership-reconciler.ts`). `setTimeout`
+ * rather than a repeating interval because the next step is armed only once the previous
+ * one settles, so a slow network read never stacks steps behind it, and because the delay
+ * can differ per step.
+ *
+ * Tests inject a hand-cranked clock; production omits it and gets real timers, `unref`'d so
+ * a loop that is only waiting never holds a Node process open (the call is optional —
+ * browsers and React Native return a plain handle with no `unref`).
+ */
+/** Real timers, `unref`'d where the runtime supports it. */
+export const defaultTimeoutScheduler = {
+    setTimeout: (fn, ms) => {
+        const handle = setTimeout(fn, ms);
+        handle.unref?.();
+        return handle;
+    },
+    clearTimeout: (handle) => clearTimeout(handle)
+};
+//# sourceMappingURL=timeout-scheduler.js.map

package/dist/timeout-scheduler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"timeout-scheduler.js","sourceRoot":"","sources":["../src/timeout-scheduler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAQH,4DAA4D;AAC5D,MAAM,CAAC,MAAM,uBAAuB,GAAqB;IACvD,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE;QACrB,MAAM,MAAM,GAAG,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACjC,MAAiC,CAAC,KAAK,EAAE,EAAE,CAAC;QAC7C,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAA4C,CAAC;CACrF,CAAC"}

package/dist/types.d.ts

@@ -3,6 +3,8 @@ import type { IRawStorage, Libp2pTransports } from '@optimystic/db-p2p';
 import type { IPeerNetwork, IRepo } from '@optimystic/db-core';
 import type { PeerJoinBackfillConfig } from './peer-join-backfill.js';
 import type { StrandRevocationEnforcementConfig } from './strand-revocation-enforcer.js';
+import type { StrandMembershipReconciliationConfig } from './strand-membership-reconciler.js';
+import type { StrandFirstSyncConfig } from './strand-first-sync-gate.js';
 import type { StrandDatabase } from './strand-database.js';
 import type { SeedTrustPolicy } from './seed-trust-policy.js';
 import type { KeyStore, KeyId } from './key-store.js';
@@ -11,6 +13,7 @@ import type { BootstrapPeerStore } from './bootstrap-peer-store.js';
 import type { EnrolledMachineStore } from './enrolled-machine-store.js';
 import type { PushNotifier } from './push-notifier.js';
 import type { RevocableTable } from './control-authorization.js';
+import type { ControlRetryAbandonment } from './control-retry.js';
 /**
  * Extended Libp2p node with the coordinatedRepo attached by db-p2p's
  * createLibp2pNode after node creation (not surfaced on the base Libp2p type).
@@ -85,12 +88,27 @@ export interface HibernationTimeouts {
 export declare const HIBERNATION_TIMEOUTS: Record<LatencyHint, HibernationTimeouts>;
 /**
  * Storage provider - either an `IRawStorage` instance or a factory function.
- * Factory functions are useful for creating strand-specific storage instances.
+ * Factory functions are useful for creating per-scope storage instances.
  *
- * **Called once per scope per runtime lifetime.** The scopes are the literal string
- * `'control'` (once per `CadreNode.start()`) and each strand id (once per
- * `startStrand`). Hibernation — `quiesceStrand` then `resumeStrand` — reuses the
- * store already resolved for that strand and does NOT re-enter this callback.
+ * **The argument is an opaque scope key.** Use it directly as a file name, directory
+ * name or database name: every key cadre-core mints stays within `[A-Za-z0-9._-]`, so
+ * no escaping is needed and none should be assumed. Do not parse it;
+ * `controlStorageScope` / `isControlStorageScope` (`storage-scope.ts`) are the
+ * supported way to mint and recognize the control key. The strand arm of that charset
+ * rule is intended but not yet checked — a strand id replicated in from another node
+ * in the party reaches this callback verbatim; see
+ * `tickets/backlog/bug-strand-scope-key-charset-unenforced`.
+ *
+ * **Called once per scope per runtime lifetime.** The scopes are the control database
+ * (once per `CadreNode.start()`) and each strand id (once per `startStrand`).
+ * Hibernation — `quiesceStrand` then `resumeStrand` — reuses the store already
+ * resolved for that strand and does NOT re-enter this callback.
+ *
+ * **The control scope is party-specific.** It is `controlStorageScope(partyId)`, not a
+ * fixed string, because the control database holds one party's own records — its
+ * strands, owner keys, peers, invitations, revocations. Two parties on one device ask
+ * for two different keys and MUST get two different stores, or a node started for one
+ * party reads the other's rows as its own.
  *
  * It IS re-entered for a scope after that scope's runtime has stopped
  * (`stopStrand`, or a `stop()` then `start()` cycle on one `CadreNode`), so it must
@@ -100,33 +118,40 @@ export declare const HIBERNATION_TIMEOUTS: Record<LatencyHint, HibernationTimeou
  * cadre-core disposes only its own cache wrapper — it never closes the store you
  * returned. Closing the underlying handle stays the embedder's job.
  *
- * Either form is safe with a persistent backend. One instance handed to every scope
+ * **The single-instance form shares data across scopes by construction** — one store
+ * for every strand AND for every party's control database. An embedder that can serve
+ * more than one party must use the factory form. One instance handed to every scope
  * also shares ONE cache wrapper (`wrapStorageWithCache` memoizes per inner instance),
  * which counts its holders: a scope stopping releases only its own claim, and the
- * wrapper is retired when the last scope releases it. The factory form is still the
- * better default for a different reason — it partitions each strand's data, which
+ * wrapper is retired when the last scope releases it. The factory form is the better
+ * default for the further reason that it partitions each strand's data, which
  * simplifies cleanup.
  */
-export type RawStorageProvider = IRawStorage | ((strandId: string) => IRawStorage);
+export type RawStorageProvider = IRawStorage | ((scope: string) => IRawStorage);
 /**
  * Storage configuration for storage profile nodes
  */
 export interface StorageConfig {
     /**
      * Storage provider - either an IRawStorage instance or a factory function.
-     * See {@link RawStorageProvider} for how often cadre-core calls it.
+     * See {@link RawStorageProvider} for how often cadre-core calls it, and for why
+     * the single-instance form cannot serve more than one party.
+     *
+     * The `scope` a factory receives is an opaque key already safe as a path or
+     * database-name segment (always within `[A-Za-z0-9._-]`), so each example below
+     * interpolates it directly.
      *
      * For Node.js environments, use FileRawStorage from @optimystic/db-p2p-storage-fs:
      * ```typescript
      * import { FileRawStorage } from '@optimystic/db-p2p-storage-fs';
-     * storage: { provider: (strandId) => new FileRawStorage(`./data/${strandId}`) }
+     * storage: { provider: (scope) => new FileRawStorage(`./data/${scope}`) }
      * ```
      *
      * For React Native, use the appropriate storage from @optimystic/db-p2p-storage-rn:
      * ```typescript
      * import { LevelDBRawStorage } from '@optimystic/db-p2p-storage-rn';
      * // `db` is an open LevelDB handle (see `openOptimysticRNDb` over `rn-leveldb`)
-     * storage: { provider: (strandId) => new LevelDBRawStorage(openDb(`sereus-${strandId}`)) }
+     * storage: { provider: (scope) => new LevelDBRawStorage(openDb(`sereus-${scope}`)) }
      * ```
      *
      * For in-memory storage (testing):
@@ -224,8 +249,9 @@ export interface NetworkConfig {
      * because a listener that dials its relay from inside `libp2p.start()` put a
      * sibling in this node's cohort before its own database existed, and a sibling
      * that had not yet replicated this node's membership row refused the bring-up.
-     * STRAND nodes inherit the older per-relay `<relay>/p2p-circuit` listener, which
-     * has no such ordering hazard. A relay named here also becomes a
+     * STRAND nodes take the same search shape, one bare listener plus one reservation
+     * supervisor PER relay, fail-soft (`strand-network-config.ts`,
+     * `strand-instance-manager.ts`). A relay named here also becomes a
      * delegate-announce target, so this node's strand nodes may reserve on it too
      * (see `delegate-admission.ts`).
      *
@@ -235,11 +261,46 @@ export interface NetworkConfig {
      * must not acquire a listener by accident.
      *
      * FAIL-FAST both ways: a malformed entry throws at node start rather than being
-     * silently dropped, and a first reservation attempt that lands no
-     * `/p2p-circuit` address throws `RelayReservationFailedError` out of `start()`.
-     * The fail-soft posture over the same machinery is `CadreNode.reserveRelays()`.
+     * silently dropped, and — while {@link requireRelay} stays at its default —
+     * a first reservation attempt that lands no `/p2p-circuit` address throws
+     * `RelayReservationFailedError` out of `start()`. The fail-soft posture over
+     * the same machinery is `CadreNode.reserveRelays()`.
      */
     relayAddrs?: string[];
+    /**
+     * Must a relay named in {@link relayAddrs} have granted a reservation before
+     * `start()` is allowed to succeed? Default `true`: an operator who names a
+     * relay is telling this machine it has no other reachability, so a relay
+     * that will not have us on the first attempt should stop the boot loudly
+     * rather than leave a node nobody can reach.
+     *
+     * Set `false` for a node that must still boot with no network — a phone or a
+     * browser tab. The first attempt is still driven at the same point in
+     * `start()`; a lost reservation just logs instead of throwing, and the
+     * retry supervisor keeps trying in the background exactly as it does after a
+     * `CadreNode.reserveRelays()` call. A caller on this posture cannot infer
+     * dialability from `start()` resolving — read
+     * {@link CadreNode.getRelayReservationState} to find out.
+     *
+     * It buys a node that BOOTS, not a node that boots fast: `start()` still waits
+     * out that first attempt, which costs the drive's whole timeout
+     * (`DEFAULT_RELAY_RESERVE_TIMEOUT_MS`, 10 s) against a relay that is unreachable
+     * rather than merely refusing (`relay-reservation.ts` polls to the deadline, in
+     * case libp2p's own discovery lands a reservation independently).
+     *
+     * Softens only the RESERVATION half of {@link relayAddrs}'s fail-fast
+     * contract. A malformed `relayAddrs` entry still throws at config
+     * resolution regardless of this setting — a typo is an operator error
+     * whatever the posture — and a hand-written `<relay>/p2p-circuit` entry in
+     * {@link listenAddrs} is still rejected on the control node, since that
+     * rejection is about the listener shape, not about whether reachability is
+     * required.
+     *
+     * Has no effect on STRAND nodes, which are already fail-soft over
+     * `relayAddrs` regardless of this field (`strand-network-config.ts`,
+     * `strand-instance-manager.ts`).
+     */
+    requireRelay?: boolean;
     /**
      * Enable circuit relay server - allows this node to relay connections for other peers.
      * When undefined, defaults to true for storage profile nodes (they typically have
@@ -314,7 +375,8 @@ export interface NetworkConfig {
      * Every field is optional; omit for the defaults
      * ({@link DEFAULT_CONTROL_COHORT_TARGET_DEGREE} /
      * {@link DEFAULT_CONTROL_COHORT_RECONCILE_MS} /
-     * {@link DEFAULT_CONTROL_COHORT_DIAL_TIMEOUT_MS} / `STRAND_PEER_ADDR_REFRESH_MS`).
+     * {@link DEFAULT_CONTROL_COHORT_DIAL_TIMEOUT_MS} /
+     * {@link DEFAULT_CONTROL_COHORT_PER_ADDRESS_DIAL_TIMEOUT_MS} / `STRAND_PEER_ADDR_REFRESH_MS`).
      */
     controlCohort?: {
         /**
@@ -329,12 +391,20 @@ export interface NetworkConfig {
          */
         reconcileMs?: number;
         /**
-         * Budget for ONE sibling's proactive dial, in ms. Bounds a pass at
-         * (dialed siblings) × this, instead of leaving it to each address's own
-         * libp2p attempt timeout multiplied by address fan-out and relay hops.
-         * Defaults to {@link DEFAULT_CONTROL_COHORT_DIAL_TIMEOUT_MS}.
+         * Limit on dialing ONE peer — all of its candidate addresses together — in
+         * ms. Bounds a reconcile pass at (dialed siblings) × this. The same limit
+         * applies to the owner dials of `applySeed` and to `dialInvite`. Defaults to
+         * {@link DEFAULT_CONTROL_COHORT_DIAL_TIMEOUT_MS}.
          */
         dialTimeoutMs?: number;
+        /**
+         * Limit on ONE candidate address's dial attempt, in ms, inside
+         * {@link dialTimeoutMs}. Each address is dialed on its own under this limit,
+         * so an address that never answers cannot use up the time the peer's other
+         * addresses needed. Defaults to
+         * {@link DEFAULT_CONTROL_COHORT_PER_ADDRESS_DIAL_TIMEOUT_MS}.
+         */
+        perAddressDialTimeoutMs?: number;
         /**
          * How often each running strand re-resolves its siblings' strand-network
          * addresses into its own libp2p address book — a step of the reconcile pass,
@@ -489,6 +559,36 @@ export interface CadreNodeConfig {
      * `{ enabled: false }` restores the pre-existing behaviour.
      */
     strandRevocationEnforcement?: StrandRevocationEnforcementConfig;
+    /**
+     * Tuning for the CLOSED-strand membership reconciler
+     * (`strand-membership-reconciler.ts`), applied to every closed strand this
+     * node launches with a party identity key: at bring-up each machine redeems a
+     * pending formation invitation (seating the party's `Strand.Member` row) and
+     * writes its own machine→party `Strand.MemberPeer` binding, retrying in the
+     * background without blocking bring-up. `pollIntervalMs` is the IDLE cadence
+     * (how often a machine nobody has admitted re-checks) and the cap of the
+     * unfinished-join retry ladder, NOT the retry cadence itself — an unfinished
+     * join retries from 1 s, doubling. Omit for the defaults (it mirrors
+     * {@link strandRevocationEnforcement}'s `pollIntervalMs`);
+     * `{ enabled: false }` disarms the loop — for test fixtures that hand-drive
+     * the membership writers and assert exact row sets.
+     */
+    strandMembershipReconciliation?: StrandMembershipReconciliationConfig;
+    /**
+     * Tuning for the JOINING machine's first-sync write gate
+     * (`strand-first-sync-gate.ts`), applied to every strand this node launches as a
+     * non-founder: the strand's database is withheld from the app (`StrandInstance.database`
+     * unset, status `'syncing'`) until the strand's `Strand.Header` has been received from
+     * another member and every `App` table has been read once, because a machine that writes
+     * to a table it has never fetched creates a private copy of it that never merges.
+     * `timeoutMs` bounds how long {@link CadreNode.addStrand} waits before rejecting with
+     * `StrandAwaitingFirstSyncError` (retryable — the launch stays up and keeps probing);
+     * `pollIntervalMs` is the probe cadence. Omit for the defaults (`DEFAULT_STRAND_FIRST_SYNC_TIMEOUT_MS`, 30 s;
+     * `DEFAULT_STRAND_FIRST_SYNC_POLL_MS`, 500 ms). There is deliberately no way to disable
+     * the gate: a machine that already holds the Header is never gated, so nothing that works
+     * today is blocked by it.
+     */
+    strandFirstSync?: StrandFirstSyncConfig;
     /** Hibernation configuration */
     hibernation?: HibernationConfig;
     /** Polling interval for strand watcher in ms (default: 5000) */
@@ -634,9 +734,16 @@ export interface CadreNodeConfig {
     };
 }
 /**
- * Status of a strand instance
+ * Status of a strand instance.
+ *
+ * `'syncing'` is a JOINING machine whose runtime is up (strand libp2p node, background
+ * loops) but whose database is held back from the app until the strand's `Strand.Header`
+ * has been received from another member — see `strand-first-sync-gate.ts`. In that state
+ * `StrandInstance.database` is unset; the instance goes `'active'` (and `CadreNode` emits
+ * `strand:writable`) the moment the Header is readable. A founder, or a machine that has
+ * synced this strand before (restart, hibernation resume), never passes through it.
  */
-export type StrandStatus = 'starting' | 'active' | 'idle' | 'hibernating' | 'stopping' | 'stopped' | 'error';
+export type StrandStatus = 'starting' | 'syncing' | 'active' | 'idle' | 'hibernating' | 'stopping' | 'stopped' | 'error';
 /**
  * App information from strand header
  */
@@ -653,9 +760,15 @@ export interface StrandInstance {
     strandId: string;
     status: StrandStatus;
     sAppInfo?: SAppInfo;
-    /** The libp2p node for this strand (only when active/idle) */
+    /** The libp2p node for this strand (only when live: syncing/active/idle) */
     libp2pNode?: Libp2p;
-    /** The Quereus database for this strand (only when active/idle) */
+    /**
+     * The Quereus database for this strand — set only while the strand is live AND
+     * this machine may write to it. A joining machine that has not yet received the
+     * strand's `Strand.Header` from another member runs with `libp2pNode` set and this
+     * unset (status `'syncing'`); it is published when the Header arrives
+     * (`strand:writable`). Unset while hibernating.
+     */
     database?: StrandDatabase;
     /** Membership info for closed strands */
     memberKey?: string;
@@ -753,6 +866,30 @@ export interface StrandConfig {
      * it deliberately, since a consent-seated row carries a null column.
      */
     founder?: boolean;
+    /**
+     * THIS party's own strand membership private key (base64 protobuf, as
+     * `generateStrandMemberKey` mints) for a CLOSED strand — the identity whose public
+     * key seats the founding `Member`/`Manager`. The explicit sibling of
+     * {@link founder}: normally the launch reads it from the party's control-layer
+     * `StrandPartyKey` row (minting one on the founding machine when absent), and an
+     * explicit value here WINS over that read — for callers whose row carries no
+     * founder provenance to heal against (an explicit `founder: true` over a hand-built
+     * row, as the test harness does). Deliberately NOT
+     * {@link StrandRow.MemberPrivateKey}, the strand-wide read secret every joining
+     * party receives — that key derives nobody's identity.
+     */
+    partyMemberPrivateKey?: string;
+    /**
+     * Whether {@link CadreNode.addStrand} waits for a JOINING machine's first sync before it
+     * resolves. Default `true`: the returned instance is writable (`database` set, status
+     * `'active'`), or the call rejects with `StrandAwaitingFirstSyncError` after
+     * `CadreNodeConfig.strandFirstSync.timeoutMs` — retryable, the launch stays up. `false`
+     * returns as soon as the runtime is launched, possibly `'syncing'` with no `database`;
+     * the caller then wires its own peers (a hand-dialed test fixture) and awaits
+     * {@link CadreNode.whenStrandWritable} or the `strand:writable` event. A founder, or a
+     * machine that already holds the strand's `Strand.Header`, is never gated either way.
+     */
+    awaitFirstSync?: boolean;
 }
 /**
  * What {@link CadreNode.foundStrand} needs to publish a strand's control row AND start it
@@ -776,6 +913,14 @@ export interface FoundStrandConfig {
     memberPrivateKey?: string;
     /** sApp configuration the hosting application provides, as for {@link StrandConfig}. */
     sAppConfig: SAppConfig;
+    /**
+     * Forwarded to the attach ({@link StrandConfig.awaitFirstSync}). Matters only when the
+     * call ATTACHES rather than founds — the stored row was published by a sibling machine
+     * that won the founding race — in which case this machine is a joiner whose database
+     * is withheld until that sibling's `Strand.Header` reaches it; default `true` waits
+     * for that inside the call. A founding launch is never gated.
+     */
+    awaitFirstSync?: boolean;
 }
 /**
  * What {@link CadreNode.foundStrand} hands back: the running instance PLUS the `Strand` row
@@ -841,6 +986,26 @@ export interface OpenInvitation {
     /** Bootstrap addresses to contact the inviter's cadre */
     bootstrap: string[];
 }
+/**
+ * A single-use strand membership invitation carried on a closed-strand formation
+ * result: the `Strand.Invite` keypair the responder (the host strand's founder party)
+ * issued for this redemption. The joiner spends it — `consumeInvite` on its own strand
+ * replica — to seat a `Strand.Member` row under its OWN party key, so joining no longer
+ * hands out the founder's identity. Structurally identical to
+ * `strand-membership-writer`'s `IssuedInvite`; declared here so the wire/type layer does
+ * not import the writer.
+ */
+export interface StrandMembershipInvite {
+    /** The invite ed25519 PUBLIC key (base64url) — the `Strand.Invite.Key` row. */
+    inviteKey: string;
+    /**
+     * The invite ed25519 PRIVATE seed (base64url). A single-use bearer credential:
+     * whoever holds it can `consumeInvite` exactly once. Same sensitivity class and
+     * handling as `memberPrivateKey` — delivered only inside the validated,
+     * post-approval formation result, never written to either side's control DB.
+     */
+    invitePrivateKey: string;
+}
 /**
  * Result of forming a strand via open invitation
  */
@@ -858,6 +1023,15 @@ export interface FormStrandResult {
      * from {@link invitePrivateKey} (the initiator's own generated signing key).
      */
     memberPrivateKey?: string;
+    /**
+     * The joiner's own single-use membership invitation into the (closed, bound) host
+     * strand — see {@link StrandMembershipInvite}. Present only when the responder's
+     * host strand is closed and its runtime issued one; absent for open strands and the
+     * responder-provisions (unbound) path. `CadreNode.formStrand` itself persists the
+     * joiner's party key and caches this invitation for the strand bring-up to redeem,
+     * so an embedding app normally never touches it.
+     */
+    membershipInvite?: StrandMembershipInvite;
     /**
      * The responder's live STRAND-network multiaddrs for the formed strand — the only
      * cross-party discovery seed there is, since the strand-addr RPC that resolves a
@@ -925,6 +1099,18 @@ export interface CadreNodeEvents {
     'strand:waking': {
         strandId: string;
     };
+    /**
+     * Emitted when a strand that came up `'syncing'` — a joining machine whose database was
+     * withheld until it received the strand's `Strand.Header` from another member — becomes
+     * writable: `StrandInstance.database` is now set and the status is `'active'`. A strand
+     * whose `strand:started` already reported `'active'` (a founder, or a machine that had
+     * synced before) never emits this. The event form of what {@link CadreNode.addStrand}
+     * awaits; an app that attaches without waiting (`awaitFirstSync: false`, or a strand the
+     * watcher auto-launched) hangs its "waiting for the other member" screen on the pair.
+     */
+    'strand:writable': {
+        strandId: string;
+    };
     /**
      * Emitted when this node discovers it is no longer a member of a CLOSED
      * strand — its party was removed by a manager, or it left. Detected by the
@@ -947,10 +1133,28 @@ export interface CadreNodeEvents {
     };
     /**
      * Emitted when the control network advertises a strand this node has no
-     * registered `sAppConfig` for — i.e. a strand created by another member. The
-     * hosting app decides whether to join it (register a config + `addStrand`,
-     * e.g. via a chat `joinChatStrand` helper). Carries the full {@link StrandRow}
-     * so the app can join without re-querying the control DB.
+     * registered `sAppConfig` for — i.e. a strand created by another member, or
+     * one this node ran in a previous session (sApp configs are in-memory only and
+     * do not survive `stop()`). The hosting app decides whether to join it
+     * (register a config + `addStrand`, e.g. via a chat `joinChatStrand` helper).
+     * Carries the full {@link StrandRow} so the app can join without re-querying
+     * the control DB.
+     *
+     * **Fired exactly ONCE per strand per session, and it can fire before your
+     * listener is attached.** The strand watcher's first poll runs inside
+     * `CadreNode.start()` (100 ms after the watcher starts), so every strand
+     * already stored for this party is normally offered while the embedding app is
+     * still inside its own `start()` await. The watcher then records the strand as
+     * seen and no later poll re-offers it, so a listener attached a moment late
+     * misses those strands for the life of the process.
+     *
+     * So an app that auto-joins discovered strands must **subscribe first, then
+     * drain `CadreNode.getDiscoveredStrands()`** — the map of strands no local
+     * config claims. In that order a strand discovered between the two steps is
+     * handled twice rather than not at all, which is why the join handler needs to
+     * be idempotent (guard on an in-flight set, not only on
+     * `getStrands().has(id)` — the strand manager tracks an instance only once
+     * `addStrand` has resolved).
      */
     'strand:discovered': {
         strandId: string;
@@ -958,6 +1162,25 @@ export interface CadreNodeEvents {
     };
     'control:connected': void;
     'control:disconnected': void;
+    /**
+     * Emitted when the control-write retry funnel GAVE UP on a local control write — the
+     * classifier declined the failure as non-transient, or every attempt (or the elapsed
+     * budget) ran out. One event per abandoned write, carrying the operation label, how far
+     * it got, why it stopped and the error.
+     *
+     * Exists because an abandoned BACKGROUND write is otherwise invisible: the node's own
+     * self-address republish, the post-connect drain and the replication drain all fire
+     * their writes unawaited with a `debug`-only catch, and that namespace is off unless
+     * something enabled it — so the write is lost and nobody is told. A FOREGROUND write's
+     * caller sees the rethrown error as well as this event.
+     *
+     * What an app does with it is its own call; the node itself only escalates ONE case to
+     * the operator (a self-address republish that has been failing longer than a peer
+     * record stays fresh, at which point other machines are already discarding this node's
+     * address). Treat the rest as telemetry — a control write that was lost, not a strand
+     * or connection state change.
+     */
+    'control:write-abandoned': ControlRetryAbandonment;
     /** Emitted when a seed is received via the seed protocol */
     'seed:received': {
         partyId: string;
@@ -1031,6 +1254,8 @@ export type CadrePeerVoucherFields = Pick<CadrePeerRow, 'peerId' | 'stampId' | '
  * `ControlDatabase.queryRevocations`: the identity triple plus the `ReissuedAt`
  * counter an owner bumps (`ControlDatabase.reissueRevocations`) to re-write — and
  * therefore re-broadcast — a tombstone that committed while the node was alone.
+ * Never the ledger marker: that row names no guarded table, and `queryRevocations`
+ * skips it, which is what keeps `tableName` a {@link RevocableTable}.
  */
 export interface RevocationRow {
     /** Which guarded table's stamp was retired. */
@@ -1042,6 +1267,13 @@ export interface RevocationRow {
     /** Monotonic re-issue counter; carries no semantics (see the schema comment). */
     reissuedAt: number;
 }
+/**
+ * Outcome of `ControlDatabase.openRevocationLedger`: `'opened'` when this call filed the
+ * singleton `Revocation` ledger marker, `'already-open'` when it was already filed (seen
+ * by the in-lock guard, or filed first by another owner and refused on the primary key).
+ * Either way the marker exists afterwards.
+ */
+export type RevocationLedgerOpenResult = 'opened' | 'already-open';
 /**
  * Outcome of {@link CadreNode.registerSelf}, surfaced so callers (e.g. the CLI
  * `--owner` branch) can log what happened:

package/dist/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AA6EA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA6C;IAC5E,QAAQ,EAAE;QACR,WAAW,EAAE,QAAQ,EAAS,aAAa;QAC3C,gBAAgB,EAAE,QAAQ,EAAI,kBAAkB;QAChD,eAAe,EAAE,QAAQ,EAAK,MAAM;QACpC,oBAAoB,EAAE,CAAC;QACvB,kBAAkB,EAAE,QAAQ,CAAE,MAAM;KACrC;IACD,WAAW,EAAE;QACX,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,EAAI,YAAY;QAC1C,gBAAgB,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,wBAAwB;QAC1D,eAAe,EAAE,EAAE,GAAG,IAAI,EAAI,mBAAmB;QACjD,oBAAoB,EAAE,CAAC;QACvB,kBAAkB,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,eAAe;KACnD;IACD,UAAU,EAAE;QACV,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,EAAI,WAAW;QACzC,gBAAgB,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,EAAG,uBAAuB;QACzD,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,EAAI,kBAAkB;QACpD,oBAAoB,EAAE,CAAC;QACvB,kBAAkB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,gBAAgB;KACxD;IACD,OAAO,EAAE;QACP,WAAW,EAAE,EAAE,GAAG,IAAI,EAAQ,aAAa;QAC3C,gBAAgB,EAAE,EAAE,GAAG,IAAI,EAAG,wBAAwB;QACtD,eAAe,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAG,eAAe;QACjD,oBAAoB,EAAE,CAAC;QACvB,kBAAkB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,eAAe;KAC5D;CACF,CAAC;AA2RF;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,GAAG,IAAI,CAAC;AAYnD;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EACL,gBAAgB,EAChB,2BAA2B,EAC3B,sBAAsB,EACtB,2BAA2B,EAC3B,qBAAqB,EACrB,wBAAwB,EACxB,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,EACpB,MAAM,+BAA+B,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAgFA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA6C;IAC5E,QAAQ,EAAE;QACR,WAAW,EAAE,QAAQ,EAAS,aAAa;QAC3C,gBAAgB,EAAE,QAAQ,EAAI,kBAAkB;QAChD,eAAe,EAAE,QAAQ,EAAK,MAAM;QACpC,oBAAoB,EAAE,CAAC;QACvB,kBAAkB,EAAE,QAAQ,CAAE,MAAM;KACrC;IACD,WAAW,EAAE;QACX,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,EAAI,YAAY;QAC1C,gBAAgB,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,wBAAwB;QAC1D,eAAe,EAAE,EAAE,GAAG,IAAI,EAAI,mBAAmB;QACjD,oBAAoB,EAAE,CAAC;QACvB,kBAAkB,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,eAAe;KACnD;IACD,UAAU,EAAE;QACV,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,EAAI,WAAW;QACzC,gBAAgB,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,EAAG,uBAAuB;QACzD,eAAe,EAAE,CAAC,GAAG,EAAE,GAAG,IAAI,EAAI,kBAAkB;QACpD,oBAAoB,EAAE,CAAC;QACvB,kBAAkB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,gBAAgB;KACxD;IACD,OAAO,EAAE;QACP,WAAW,EAAE,EAAE,GAAG,IAAI,EAAQ,aAAa;QAC3C,gBAAgB,EAAE,EAAE,GAAG,IAAI,EAAG,wBAAwB;QACtD,eAAe,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAG,eAAe;QACjD,oBAAoB,EAAE,CAAC;QACvB,kBAAkB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,eAAe;KAC5D;CACF,CAAC;AA8VF;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,GAAG,IAAI,CAAC;AAYnD;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EACL,gBAAgB,EAChB,2BAA2B,EAC3B,sBAAsB,EACtB,2BAA2B,EAC3B,qBAAqB,EACrB,wBAAwB,EACxB,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,EACpB,MAAM,+BAA+B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@serfab/cadre-core",
-  "version": "0.13.0",
+  "version": "1.1.0",
   "type": "module",
   "description": "Core library for Sereus cadre nodes - manages control networks and strand participation",
   "main": "dist/index.js",
@@ -73,7 +73,7 @@
     "@libp2p/tcp": "^11.0.10",
     "@libp2p/webrtc": "6.0.14",
     "@libp2p/websockets": "^10.1.3",
-    "@optimystic/db-p2p-storage-fs": "^1.0.0-beta.2",
+    "@optimystic/db-p2p-storage-fs": "^1.1.0",
     "@types/debug": "^4.1.12",
     "@types/node": "^25.0.10",
     "@vitest/coverage-v8": "^4.0.17",
@@ -88,12 +88,12 @@
     "@libp2p/interface": "^3.1.0",
     "@libp2p/peer-id": "^6.0.4",
     "@multiformats/multiaddr": "^12.5.1",
-    "@optimystic/db-core": "^1.0.0-beta.2",
-    "@optimystic/db-p2p": "^1.0.0-beta.2",
-    "@optimystic/quereus-plugin-crypto": "^1.0.0-beta.2",
-    "@optimystic/quereus-plugin-optimystic": "^1.0.0-beta.2",
-    "@quereus/quereus": "^4.19.0",
-    "@serfab/quereus-plugin-sereus": "^0.13.0",
+    "@optimystic/db-core": "^1.1.0",
+    "@optimystic/db-p2p": "^1.1.0",
+    "@optimystic/quereus-plugin-crypto": "^1.1.0",
+    "@optimystic/quereus-plugin-optimystic": "^1.1.0",
+    "@quereus/quereus": "^4.19.4",
+    "@serfab/quereus-plugin-sereus": "^1.1.0",
     "debug": "^4.4.3",
     "libp2p": "^3.1.3",
     "uint8arrays": "^5.1.0"

package/src/bootstrap-peer-store-file.ts

@@ -1,8 +1,8 @@
 /**
  * Node-only file-backed {@link BootstrapPeerStore}: one JSON file per party under
  * a configured directory (the node's state directory — `cadre-cli` passes
- * `ResolvedConfig.nodeStateDir`), holding the node-local, non-replicated
- * cold-start dial targets a seed nominated.
+ * `ResolvedConfig.nodeStateDir`), holding the node-local, non-replicated dial
+ * targets learned out of band (a seed's owner peers, and nodes this node added).
  *
  * Nothing but the file itself lives here: the envelope, load policy, per-entry
  * validation (shape only — never signatures; see the `bootstrap-peer-store.ts`