@serfab/cadre-core 0.6.0 → 0.8.1

package/dist/strand-instance-manager.js

@@ -7,9 +7,10 @@ const timing = debug('sereus:cadre:timing');
 /**
  * Get the isolated storage path for a specific strand.
  *
- * @deprecated This function uses Node.js path module which is not available in React Native.
- * Use a storage provider factory function instead, which receives the strandId and can
- * create strand-specific storage paths using platform-appropriate methods.
+ * @deprecated This helper is Node-only and throws in React Native (it assumes a
+ * filesystem layout). Use a storage provider factory function instead, which
+ * receives the strandId and can create strand-specific storage paths using
+ * platform-appropriate methods.
  *
  * @example
  * // Instead of using getStrandStoragePath, use a storage provider factory:
@@ -23,12 +24,15 @@ export function getStrandStoragePath(basePath, strandId) {
         throw new Error('getStrandStoragePath is not available in React Native. ' +
             'Use a storage provider factory function instead.');
     }
-    // Dynamically require path only in Node.js
-    // eslint-disable-next-line @typescript-eslint/no-require-imports
-    const path = require('path');
     // Sanitize strandId for filesystem safety (UUIDs should be safe, but just in case)
     const safeId = strandId.replace(/[^a-zA-Z0-9-]/g, '_');
-    return path.join(basePath, 'strands', safeId);
+    // Build the path with plain string joins rather than the Node `path` module.
+    // A static `require('path')` forces RN bundlers (e.g. Metro) to *resolve* the
+    // module at bundle time even though this Node-only helper throws above before
+    // ever reaching here — joining by hand keeps the module free of any Node
+    // built-in reference, so RN bundles need no `path` shim.
+    const trimmedBase = basePath.replace(/[\\/]+$/, '');
+    return `${trimmedBase}/strands/${safeId}`;
 }
 /**
  * Resolve a storage provider for a specific strand.
@@ -51,6 +55,12 @@ function resolveStrandStorage(provider, strandId) {
 export class StrandInstanceManager {
     constructor() {
         this.instances = new Map();
+        /**
+         * Retained launch config per strand, captured in `startStrand` and cleared in
+         * `stopStrand`. `resumeStrand` reuses it to rebuild a quiesced strand's runtime
+         * without the caller re-threading storage/network/profile/key/sApp config.
+         */
+        this.launchConfigs = new Map();
         this.stopping = false;
         log('StrandInstanceManager created');
     }
@@ -87,8 +97,9 @@ export class StrandInstanceManager {
         }
         log('Starting strand instance: %s (sApp: %s v%s)', strandId, sAppConfig.id, sAppConfig.version);
         const tTotal = performance.now();
-        // Verify schema signature before proceeding
-        assertSchemaSignature(sAppConfig);
+        // Verify schema signature before proceeding (fail-closed by default)
+        const requireSignature = config.requireSignedSchemas ?? true;
+        assertSchemaSignature(sAppConfig, { requireSignature });
         log('Strand %s sApp schema signature verified (author: %s)', strandId, sAppConfig.id);
         // Convert SAppConfig to SAppInfo for the instance
         const sAppInfo = {
@@ -109,25 +120,49 @@ export class StrandInstanceManager {
             latencyHint
         };
         this.instances.set(strandId, instance);
+        this.launchConfigs.set(strandId, config);
+        try {
+            await this.buildStrandRuntime(instance, config);
+            timing('[startStrand:%s] total: %dms', strandId, Math.round(performance.now() - tTotal));
+            log('Strand %s started successfully with sApp %s', strandId, sAppConfig.id);
+            return instance;
+        }
+        catch (error) {
+            instance.status = 'error';
+            instance.error = error instanceof Error ? error.message : String(error);
+            log('Failed to start strand %s: %s', strandId, instance.error);
+            throw error;
+        }
+    }
+    /**
+     * Build (or rebuild) the libp2p node + StrandDatabase for an instance and
+     * attach them, transitioning it to `active`. Shared by `startStrand` (fresh
+     * launch) and `resumeStrand` (rehydrating a quiesced instance). Reads all
+     * volatile inputs (bootstrapNodes, mode, storage, network, profile,
+     * privateKey, sApp config) from `config`, so the caller controls the
+     * cohort-derived values.
+     */
+    async buildStrandRuntime(instance, config) {
+        const strandId = instance.strandId;
+        const { sAppConfig } = config;
+        // Resolve storage for this strand. If a factory function is provided, it is
+        // called with the strandId to create strand-specific storage (e.g.,
+        // strand-isolated directories).
+        const strandStorage = resolveStrandStorage(config.storage?.provider, strandId);
+        if (strandStorage) {
+            log('Strand %s using provided storage provider', strandId);
+        }
+        // Note: protocolPrefix would be used by libp2p services, but createLibp2pNode
+        // may not support it yet - tracked for future implementation.
+        const _protocolPrefix = `/sereus/strand/${strandId}`;
+        // Determine relay mode: if explicitly set in config, use that;
+        // otherwise default to true for storage profile nodes.
+        const enableRelay = config.network?.enableRelay ?? (config.profile === 'storage');
         try {
-            // Resolve storage for this strand
-            // If a factory function is provided, it will be called with the strandId
-            // to create strand-specific storage (e.g., strand-isolated directories)
-            const strandStorage = resolveStrandStorage(config.storage?.provider, strandId);
-            if (strandStorage) {
-                log('Strand %s using provided storage provider', strandId);
-            }
-            // Create isolated libp2p node for this strand
-            // Note: protocolPrefix would be used by libp2p services, but createLibp2pNode
-            // may not support it yet - tracked for future implementation
-            const _protocolPrefix = `/sereus/strand/${strandId}`;
-            // Determine relay mode: if explicitly set in config, use that;
-            // otherwise default to true for storage profile nodes
-            const enableRelay = config.network?.enableRelay ?? (config.profile === 'storage');
             let t0 = performance.now();
             const node = await createLibp2pNode({
                 port: 0, // Random port
-                bootstrapNodes: [], // Will be populated from strand cohort
+                bootstrapNodes: config.bootstrapNodes ?? [],
                 networkName: `strand-${strandId}`,
                 storage: strandStorage,
                 fretProfile: config.profile === 'storage' ? 'core' : 'edge',
@@ -142,15 +177,19 @@ export class StrandInstanceManager {
                 },
                 ...(config.privateKey && { privateKey: config.privateKey }),
                 ...(config.network?.transports && { transports: config.network.transports }),
-                ...(config.network?.listenAddrs && { listenAddrs: config.network.listenAddrs })
+                ...(config.network?.listenAddrs && { listenAddrs: config.network.listenAddrs }),
+                ...(config.network?.connectionGater && { connectionGater: config.network.connectionGater })
             });
-            timing('[startStrand:%s] createLibp2pNode: %dms', strandId, Math.round(performance.now() - t0));
+            timing('[buildStrandRuntime:%s] createLibp2pNode: %dms', strandId, Math.round(performance.now() - t0));
             instance.libp2pNode = node;
             // Create and initialize the StrandDatabase. In bootstrap mode the same
             // strandStorage instance also backs the optimystic local transactor so
             // DML lands on the host's persistent storage (e.g. MMKV on RN). Sharing
             // the instance — not creating a second one over the same id+prefix —
             // avoids cache divergence between the libp2p and database paths.
+            //
+            // Attach before initialize so a failed init is cleaned up by
+            // releaseRuntime below (close() is safe on a partially-initialized db).
             t0 = performance.now();
             const strandDb = new StrandDatabase({
                 strandId,
@@ -158,21 +197,115 @@ export class StrandInstanceManager {
                 libp2pNode: node,
                 coordinatedRepo: node.coordinatedRepo,
                 mode: config.mode ?? 'networked',
-                rawStorage: strandStorage
+                rawStorage: strandStorage,
+                // Founder bootstrap inputs: the strand's type drives which membership rows
+                // are written, and the closed-strand MemberPrivateKey derives the founding
+                // Member/Authority key. Both come off the control-network strand row.
+                strandType: config.strandRow.Type,
+                memberPrivateKey: config.strandRow.MemberPrivateKey ?? undefined,
+                founder: config.founder
             });
-            await strandDb.initialize();
-            timing('[startStrand:%s] strandDatabase.initialize: %dms', strandId, Math.round(performance.now() - t0));
             instance.database = strandDb;
+            await strandDb.initialize();
+            timing('[buildStrandRuntime:%s] strandDatabase.initialize: %dms', strandId, Math.round(performance.now() - t0));
             instance.status = 'active';
             instance.lastActivity = new Date();
-            timing('[startStrand:%s] total: %dms', strandId, Math.round(performance.now() - tTotal));
-            log('Strand %s started successfully with sApp %s', strandId, sAppConfig.id);
+        }
+        catch (error) {
+            // Roll back any partially-attached runtime so the instance is left with
+            // NEITHER handle. Otherwise the `libp2pNode || database` "already live"
+            // guard in resumeStrand/handleStrandWake would treat a half-built strand
+            // as healthy — leaking the libp2p node and never retrying the rebuild.
+            await this.releaseRuntime(instance).catch((cleanupErr) => {
+                log('buildStrandRuntime cleanup for strand %s also failed: %o', strandId, cleanupErr);
+            });
+            throw error;
+        }
+    }
+    /**
+     * Release an instance's strand-network runtime: close the StrandDatabase, then
+     * stop the libp2p node (construction order in reverse), clearing both fields
+     * and zeroing connectedPeers. Tolerant of partially-built state — either handle
+     * may be absent — so it doubles as rollback for a failed `buildStrandRuntime`.
+     * Shared by `quiesceStrand`, `stopStrand`, and that rollback path.
+     */
+    async releaseRuntime(instance) {
+        if (instance.database) {
+            await instance.database.close();
+            instance.database = undefined;
+        }
+        if (instance.libp2pNode) {
+            await instance.libp2pNode.stop();
+            instance.libp2pNode = undefined;
+        }
+        instance.connectedPeers = 0;
+    }
+    /**
+     * Quiesce a strand: release its strand-network resources (stop the libp2p node,
+     * close the StrandDatabase) while RETAINING the instance record — identity,
+     * sAppInfo, keys, latency hint, metadata — and its launch config so it can be
+     * resumed later. Mechanically this is `stopStrand` minus the instance/config
+     * deletion. The caller sets the post-quiesce status (e.g. `hibernating`).
+     * No-ops when the strand is missing or already quiesced.
+     */
+    async quiesceStrand(strandId) {
+        const instance = this.instances.get(strandId);
+        if (!instance) {
+            log('quiesceStrand: strand %s not found', strandId);
+            return;
+        }
+        if (!instance.libp2pNode && !instance.database) {
+            log('quiesceStrand: strand %s already quiesced', strandId);
+            return;
+        }
+        log('Quiescing strand instance: %s', strandId);
+        await this.releaseRuntime(instance);
+        log('Strand %s quiesced (resources released, instance retained)', strandId);
+    }
+    /**
+     * Resume a previously-quiesced strand: rebuild its libp2p node + StrandDatabase
+     * from the retained launch config and re-attach them, transitioning it back to
+     * `active`. `overrides` re-applies volatile inputs that may have changed since
+     * launch (cohort `bootstrapNodes`, lifecycle `mode`) and updates the retained
+     * config so a later resume reuses the latest values. Returns the live instance
+     * unchanged if it is already running.
+     */
+    async resumeStrand(strandId, overrides) {
+        if (this.stopping) {
+            throw new Error('StrandInstanceManager is stopping');
+        }
+        const instance = this.instances.get(strandId);
+        if (!instance) {
+            throw new Error(`Cannot resume strand ${strandId}: not tracked`);
+        }
+        const launchConfig = this.launchConfigs.get(strandId);
+        if (!launchConfig) {
+            throw new Error(`Cannot resume strand ${strandId}: no retained launch config`);
+        }
+        if (instance.libp2pNode || instance.database) {
+            log('resumeStrand: strand %s already live', strandId);
+            return instance;
+        }
+        log('Resuming strand instance: %s', strandId);
+        const tTotal = performance.now();
+        // Re-apply volatile inputs and persist them so a subsequent resume reuses them.
+        const resumeConfig = {
+            ...launchConfig,
+            bootstrapNodes: overrides?.bootstrapNodes ?? launchConfig.bootstrapNodes,
+            mode: overrides?.mode ?? launchConfig.mode
+        };
+        this.launchConfigs.set(strandId, resumeConfig);
+        instance.status = 'starting';
+        try {
+            await this.buildStrandRuntime(instance, resumeConfig);
+            timing('[resumeStrand:%s] total: %dms', strandId, Math.round(performance.now() - tTotal));
+            log('Strand %s resumed successfully', strandId);
             return instance;
         }
         catch (error) {
             instance.status = 'error';
             instance.error = error instanceof Error ? error.message : String(error);
-            log('Failed to start strand %s: %s', strandId, instance.error);
+            log('Failed to resume strand %s: %s', strandId, instance.error);
             throw error;
         }
     }
@@ -188,17 +321,10 @@ export class StrandInstanceManager {
         log('Stopping strand instance: %s', strandId);
         instance.status = 'stopping';
         try {
-            // Close the database before stopping libp2p
-            if (instance.database) {
-                await instance.database.close();
-                instance.database = undefined;
-            }
-            if (instance.libp2pNode) {
-                await instance.libp2pNode.stop();
-                instance.libp2pNode = undefined;
-            }
+            await this.releaseRuntime(instance);
             instance.status = 'stopped';
             this.instances.delete(strandId);
+            this.launchConfigs.delete(strandId);
             log('Strand %s stopped successfully', strandId);
         }
         catch (error) {

package/dist/strand-instance-manager.js.map

@@ -1 +1 @@
-{"version":3,"file":"strand-instance-manager.js","sourceRoot":"","sources":["../src/strand-instance-manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,gBAAgB,EAAoB,MAAM,oBAAoB,CAAC;AAExE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAsBjE,MAAM,GAAG,GAAG,KAAK,CAAC,6BAA6B,CAAC,CAAC;AACjD,MAAM,MAAM,GAAG,KAAK,CAAC,qBAAqB,CAAC,CAAC;AAqB5C;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAgB,EAAE,QAAgB;IACrE,0CAA0C;IAC1C,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CACb,yDAAyD;YACzD,kDAAkD,CACnD,CAAC;IACJ,CAAC;IAED,2CAA2C;IAC3C,iEAAiE;IACjE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAE7B,mFAAmF;IACnF,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;IACvD,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,oBAAoB,CAC3B,QAAwC,EACxC,QAAgB;IAEhB,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,OAAO,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,qBAAqB;IAIhC;QAHQ,cAAS,GAAgC,IAAI,GAAG,EAAE,CAAC;QACnD,aAAQ,GAAG,KAAK,CAAC;QAGvB,GAAG,CAAC,+BAA+B,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,QAAgB;QAC1B,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,QAAgB;QACxB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,MAAyB;QACzC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;QACzC,MAAM,QAAQ,GAAG,SAAS,CAAC,EAAE,CAAC;QAE9B,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,2BAA2B,EAAE,QAAQ,CAAC,CAAC;YAC3C,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC;QACvC,CAAC;QAED,GAAG,CAAC,6CAA6C,EAAE,QAAQ,EAAE,UAAU,CAAC,EAAE,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;QAChG,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAEjC,4CAA4C;QAC5C,qBAAqB,CAAC,UAAU,CAAC,CAAC;QAClC,GAAG,CAAC,uDAAuD,EAAE,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;QAEtF,kDAAkD;QAClD,MAAM,QAAQ,GAAa;YACzB,EAAE,EAAE,UAAU,CAAC,EAAE;YACjB,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,SAAS,EAAE,UAAU,CAAC,SAAS;SAChC,CAAC;QAEF,gDAAgD;QAChD,MAAM,WAAW,GAAG,UAAU,CAAC,WAAW,IAAI,MAAM,CAAC,kBAAkB,CAAC;QAExE,MAAM,QAAQ,GAAmB;YAC/B,QAAQ;YACR,MAAM,EAAE,UAAU;YAClB,QAAQ;YACR,gBAAgB,EAAE,SAAS,CAAC,gBAAgB,IAAI,SAAS;YACzD,cAAc,EAAE,CAAC;YACjB,YAAY,EAAE,IAAI,IAAI,EAAE;YACxB,WAAW;SACZ,CAAC;QAEF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAEvC,IAAI,CAAC;YACH,kCAAkC;YAClC,yEAAyE;YACzE,wEAAwE;YACxE,MAAM,aAAa,GAAG,oBAAoB,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAC/E,IAAI,aAAa,EAAE,CAAC;gBAClB,GAAG,CAAC,2CAA2C,EAAE,QAAQ,CAAC,CAAC;YAC7D,CAAC;YAED,8CAA8C;YAC9C,8EAA8E;YAC9E,6DAA6D;YAC7D,MAAM,eAAe,GAAG,kBAAkB,QAAQ,EAAE,CAAC;YAErD,+DAA+D;YAC/D,sDAAsD;YACtD,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,EAAE,WAAW,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC;YAElF,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC;gBAClC,IAAI,EAAE,CAAC,EAAE,cAAc;gBACvB,cAAc,EAAE,EAAE,EAAE,uCAAuC;gBAC3D,WAAW,EAAE,UAAU,QAAQ,EAAE;gBACjC,OAAO,EAAE,aAAa;gBACtB,WAAW,EAAE,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;gBAC3D,KAAK,EAAE,WAAW;gBAClB,WAAW,EAAE,CAAC;gBACd,aAAa,EAAE;oBACb,aAAa,EAAE,IAAI;oBACnB,aAAa,EAAE,GAAG;iBACnB;gBACD,SAAS,EAAE;oBACT,cAAc,EAAE,MAAM,CAAC,OAAO,KAAK,SAAS;iBAC7C;gBACD,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;gBAC3D,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;gBAC5E,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;aAChF,CAAuB,CAAC;YACzB,MAAM,CAAC,yCAAyC,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;YAEhG,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC;YAE3B,uEAAuE;YACvE,uEAAuE;YACvE,wEAAwE;YACxE,qEAAqE;YACrE,iEAAiE;YACjE,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAC;gBAClC,QAAQ;gBACR,UAAU;gBACV,UAAU,EAAE,IAAI;gBAChB,eAAe,EAAE,IAAI,CAAC,eAAe;gBACrC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,WAAW;gBAChC,UAAU,EAAE,aAAa;aAC1B,CAAC,CAAC;YACH,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC5B,MAAM,CAAC,kDAAkD,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;YACzG,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAE7B,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC;YAC3B,QAAQ,CAAC,YAAY,GAAG,IAAI,IAAI,EAAE,CAAC;YAEnC,MAAM,CAAC,8BAA8B,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;YACzF,GAAG,CAAC,6CAA6C,EAAE,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;YAC5E,OAAO,QAAQ,CAAC;QAElB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,MAAM,GAAG,OAAO,CAAC;YAC1B,QAAQ,CAAC,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACxE,GAAG,CAAC,+BAA+B,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC/D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,QAAgB;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;YACrC,OAAO;QACT,CAAC;QAED,GAAG,CAAC,8BAA8B,EAAE,QAAQ,CAAC,CAAC;QAC9C,QAAQ,CAAC,MAAM,GAAG,UAAU,CAAC;QAE7B,IAAI,CAAC;YACH,4CAA4C;YAC5C,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;gBACtB,MAAM,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;gBAChC,QAAQ,CAAC,QAAQ,GAAG,SAAS,CAAC;YAChC,CAAC;YACD,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;gBACxB,MAAM,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;gBACjC,QAAQ,CAAC,UAAU,GAAG,SAAS,CAAC;YAClC,CAAC;YACD,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC;YAC5B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAChC,GAAG,CAAC,gCAAgC,EAAE,QAAQ,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,MAAM,GAAG,OAAO,CAAC;YAC1B,QAAQ,CAAC,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACxE,GAAG,CAAC,8BAA8B,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC9D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO;QACX,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,GAAG,CAAC,oCAAoC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAE/D,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAC9D,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;YAC9B,GAAG,CAAC,8CAA8C,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/D,CAAC,CAAC,CACH,CAAC;QAEF,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAChC,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACtB,GAAG,CAAC,8BAA8B,CAAC,CAAC;IACtC,CAAC;CACF"}
+{"version":3,"file":"strand-instance-manager.js","sourceRoot":"","sources":["../src/strand-instance-manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,gBAAgB,EAAoB,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAejE,MAAM,GAAG,GAAG,KAAK,CAAC,6BAA6B,CAAC,CAAC;AACjD,MAAM,MAAM,GAAG,KAAK,CAAC,qBAAqB,CAAC,CAAC;AAiD5C;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAgB,EAAE,QAAgB;IACrE,0CAA0C;IAC1C,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CACb,yDAAyD;YACzD,kDAAkD,CACnD,CAAC;IACJ,CAAC;IAED,mFAAmF;IACnF,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;IAEvD,6EAA6E;IAC7E,8EAA8E;IAC9E,8EAA8E;IAC9E,yEAAyE;IACzE,yDAAyD;IACzD,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IACpD,OAAO,GAAG,WAAW,YAAY,MAAM,EAAE,CAAC;AAC5C,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,oBAAoB,CAC3B,QAAwC,EACxC,QAAgB;IAEhB,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,OAAO,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,MAAM,OAAO,qBAAqB;IAUhC;QATQ,cAAS,GAAgC,IAAI,GAAG,EAAE,CAAC;QAC3D;;;;WAIG;QACK,kBAAa,GAAmC,IAAI,GAAG,EAAE,CAAC;QAC1D,aAAQ,GAAG,KAAK,CAAC;QAGvB,GAAG,CAAC,+BAA+B,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACjC,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,QAAgB;QAC1B,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,QAAgB;QACxB,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CAAC,MAAyB;QACzC,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;QACzC,MAAM,QAAQ,GAAG,SAAS,CAAC,EAAE,CAAC;QAE9B,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,2BAA2B,EAAE,QAAQ,CAAC,CAAC;YAC3C,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC;QACvC,CAAC;QAED,GAAG,CAAC,6CAA6C,EAAE,QAAQ,EAAE,UAAU,CAAC,EAAE,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC;QAChG,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAEjC,qEAAqE;QACrE,MAAM,gBAAgB,GAAG,MAAM,CAAC,oBAAoB,IAAI,IAAI,CAAC;QAC7D,qBAAqB,CAAC,UAAU,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACxD,GAAG,CAAC,uDAAuD,EAAE,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;QAEtF,kDAAkD;QAClD,MAAM,QAAQ,GAAa;YACzB,EAAE,EAAE,UAAU,CAAC,EAAE;YACjB,OAAO,EAAE,UAAU,CAAC,OAAO;YAC3B,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,SAAS,EAAE,UAAU,CAAC,SAAS;SAChC,CAAC;QAEF,gDAAgD;QAChD,MAAM,WAAW,GAAG,UAAU,CAAC,WAAW,IAAI,MAAM,CAAC,kBAAkB,CAAC;QAExE,MAAM,QAAQ,GAAmB;YAC/B,QAAQ;YACR,MAAM,EAAE,UAAU;YAClB,QAAQ;YACR,gBAAgB,EAAE,SAAS,CAAC,gBAAgB,IAAI,SAAS;YACzD,cAAc,EAAE,CAAC;YACjB,YAAY,EAAE,IAAI,IAAI,EAAE;YACxB,WAAW;SACZ,CAAC;QAEF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACvC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAEzC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAChD,MAAM,CAAC,8BAA8B,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;YACzF,GAAG,CAAC,6CAA6C,EAAE,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;YAC5E,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,MAAM,GAAG,OAAO,CAAC;YAC1B,QAAQ,CAAC,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACxE,GAAG,CAAC,+BAA+B,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC/D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,kBAAkB,CAAC,QAAwB,EAAE,MAAyB;QAClF,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC;QACnC,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;QAE9B,4EAA4E;QAC5E,oEAAoE;QACpE,gCAAgC;QAChC,MAAM,aAAa,GAAG,oBAAoB,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC/E,IAAI,aAAa,EAAE,CAAC;YAClB,GAAG,CAAC,2CAA2C,EAAE,QAAQ,CAAC,CAAC;QAC7D,CAAC;QAED,8EAA8E;QAC9E,8DAA8D;QAC9D,MAAM,eAAe,GAAG,kBAAkB,QAAQ,EAAE,CAAC;QAErD,+DAA+D;QAC/D,uDAAuD;QACvD,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,EAAE,WAAW,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC;QAElF,IAAI,CAAC;YACH,IAAI,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC;gBAClC,IAAI,EAAE,CAAC,EAAE,cAAc;gBACvB,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,EAAE;gBAC3C,WAAW,EAAE,UAAU,QAAQ,EAAE;gBACjC,OAAO,EAAE,aAAa;gBACtB,WAAW,EAAE,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;gBAC3D,KAAK,EAAE,WAAW;gBAClB,WAAW,EAAE,CAAC;gBACd,aAAa,EAAE;oBACb,aAAa,EAAE,IAAI;oBACnB,aAAa,EAAE,GAAG;iBACnB;gBACD,SAAS,EAAE;oBACT,cAAc,EAAE,MAAM,CAAC,OAAO,KAAK,SAAS;iBAC7C;gBACD,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;gBAC3D,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,IAAI,EAAE,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;gBAC5E,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,WAAW,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;gBAC/E,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,eAAe,IAAI,EAAE,eAAe,EAAE,MAAM,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;aAC5F,CAAuB,CAAC;YACzB,MAAM,CAAC,gDAAgD,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;YAEvG,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC;YAE3B,uEAAuE;YACvE,uEAAuE;YACvE,wEAAwE;YACxE,qEAAqE;YACrE,iEAAiE;YACjE,EAAE;YACF,6DAA6D;YAC7D,wEAAwE;YACxE,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,IAAI,cAAc,CAAC;gBAClC,QAAQ;gBACR,UAAU;gBACV,UAAU,EAAE,IAAI;gBAChB,eAAe,EAAE,IAAI,CAAC,eAAe;gBACrC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,WAAW;gBAChC,UAAU,EAAE,aAAa;gBACzB,2EAA2E;gBAC3E,2EAA2E;gBAC3E,sEAAsE;gBACtE,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI;gBACjC,gBAAgB,EAAE,MAAM,CAAC,SAAS,CAAC,gBAAgB,IAAI,SAAS;gBAChE,OAAO,EAAE,MAAM,CAAC,OAAO;aACxB,CAAC,CAAC;YACH,QAAQ,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAC7B,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;YAC5B,MAAM,CAAC,yDAAyD,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;YAEhH,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC;YAC3B,QAAQ,CAAC,YAAY,GAAG,IAAI,IAAI,EAAE,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,wEAAwE;YACxE,wEAAwE;YACxE,yEAAyE;YACzE,uEAAuE;YACvE,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,EAAE;gBACvD,GAAG,CAAC,0DAA0D,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;YACxF,CAAC,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,KAAK,CAAC,cAAc,CAAC,QAAwB;QACnD,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;YAChC,QAAQ,CAAC,QAAQ,GAAG,SAAS,CAAC;QAChC,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;YACxB,MAAM,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;YACjC,QAAQ,CAAC,UAAU,GAAG,SAAS,CAAC;QAClC,CAAC;QACD,QAAQ,CAAC,cAAc,GAAG,CAAC,CAAC;IAC9B,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,aAAa,CAAC,QAAgB;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,oCAAoC,EAAE,QAAQ,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,UAAU,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC/C,GAAG,CAAC,2CAA2C,EAAE,QAAQ,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QAED,GAAG,CAAC,+BAA+B,EAAE,QAAQ,CAAC,CAAC;QAC/C,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QACpC,GAAG,CAAC,4DAA4D,EAAE,QAAQ,CAAC,CAAC;IAC9E,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,YAAY,CAAC,QAAgB,EAAE,SAAiC;QACpE,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,eAAe,CAAC,CAAC;QACnE,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtD,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,wBAAwB,QAAQ,6BAA6B,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC7C,GAAG,CAAC,sCAAsC,EAAE,QAAQ,CAAC,CAAC;YACtD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAED,GAAG,CAAC,8BAA8B,EAAE,QAAQ,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAEjC,gFAAgF;QAChF,MAAM,YAAY,GAAsB;YACtC,GAAG,YAAY;YACf,cAAc,EAAE,SAAS,EAAE,cAAc,IAAI,YAAY,CAAC,cAAc;YACxE,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,YAAY,CAAC,IAAI;SAC3C,CAAC;QACF,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAE/C,QAAQ,CAAC,MAAM,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YACtD,MAAM,CAAC,+BAA+B,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;YAC1F,GAAG,CAAC,gCAAgC,EAAE,QAAQ,CAAC,CAAC;YAChD,OAAO,QAAQ,CAAC;QAClB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,MAAM,GAAG,OAAO,CAAC;YAC1B,QAAQ,CAAC,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACxE,GAAG,CAAC,gCAAgC,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YAChE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,QAAgB;QAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAC;YACrC,OAAO;QACT,CAAC;QAED,GAAG,CAAC,8BAA8B,EAAE,QAAQ,CAAC,CAAC;QAC9C,QAAQ,CAAC,MAAM,GAAG,UAAU,CAAC;QAE7B,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;YACpC,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC;YAC5B,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAChC,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACpC,GAAG,CAAC,gCAAgC,EAAE,QAAQ,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,QAAQ,CAAC,MAAM,GAAG,OAAO,CAAC;YAC1B,QAAQ,CAAC,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACxE,GAAG,CAAC,8BAA8B,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC9D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO;QACX,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,GAAG,CAAC,oCAAoC,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAE/D,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAC9D,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;YAC9B,GAAG,CAAC,8CAA8C,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/D,CAAC,CAAC,CACH,CAAC;QAEF,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAChC,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACtB,GAAG,CAAC,8BAA8B,CAAC,CAAC;IACtC,CAAC;CACF"}

package/dist/strand-member-key.d.ts

@@ -0,0 +1,29 @@
+import { type AuthorityKeyPair } from './authority-key.js';
+/**
+ * Mint a fresh ed25519 strand member private key, encoded as base64 protobuf.
+ *
+ * Closed strands (`Type:'c'`) gate membership on a `MemberPrivateKey` column
+ * (see the `Strand` control-schema table). This produces one in the SAME
+ * encoding {@link StrandSolicitationService.formStrand} uses for its
+ * `invitePrivateKey`, so a host-minted key and a formation-issued key are
+ * interchangeable when attaching a closed strand.
+ */
+export declare function generateStrandMemberKey(): Promise<string>;
+/**
+ * Bridge a strand's `MemberPrivateKey` (base64 protobuf libp2p ed25519 key, as
+ * minted by {@link generateStrandMemberKey} or issued by formation) into the
+ * base64url keypair the strand RBAC constraints consume.
+ *
+ * The `Strand` control-layer `MemberPrivateKey` is the closed-strand read-gating
+ * secret; the founding `Member.Key`/`Authority.MemberKey` (the strand RBAC layer)
+ * are *derived from it* — they are the `publicKeyB64` of the keypair this returns.
+ * Decode the protobuf to a libp2p private key, then reuse
+ * {@link authorityKeyFromLibp2p} so the same seed→public derivation used for node
+ * authority keys yields a stable `{ privateKeyB64, publicKeyB64 }` whose public
+ * key a later strand signature verifies against.
+ *
+ * @param memberPrivateKey - The strand's `MemberPrivateKey` (base64 protobuf).
+ * @returns The base64url seed/public-key pair for founding membership/authority.
+ * @throws If the decoded key is not Ed25519 or the raw bytes are malformed.
+ */
+export declare function strandMemberKeyPair(memberPrivateKey: string): AuthorityKeyPair;

package/dist/strand-member-key.js

@@ -0,0 +1,38 @@
+import { generateKeyPair, privateKeyToProtobuf, privateKeyFromProtobuf } from '@libp2p/crypto/keys';
+import { toString as uint8ArrayToString, fromString as uint8ArrayFromString } from 'uint8arrays';
+import { authorityKeyFromLibp2p } from './authority-key.js';
+/**
+ * Mint a fresh ed25519 strand member private key, encoded as base64 protobuf.
+ *
+ * Closed strands (`Type:'c'`) gate membership on a `MemberPrivateKey` column
+ * (see the `Strand` control-schema table). This produces one in the SAME
+ * encoding {@link StrandSolicitationService.formStrand} uses for its
+ * `invitePrivateKey`, so a host-minted key and a formation-issued key are
+ * interchangeable when attaching a closed strand.
+ */
+export async function generateStrandMemberKey() {
+    const privateKey = await generateKeyPair('Ed25519');
+    return uint8ArrayToString(privateKeyToProtobuf(privateKey), 'base64');
+}
+/**
+ * Bridge a strand's `MemberPrivateKey` (base64 protobuf libp2p ed25519 key, as
+ * minted by {@link generateStrandMemberKey} or issued by formation) into the
+ * base64url keypair the strand RBAC constraints consume.
+ *
+ * The `Strand` control-layer `MemberPrivateKey` is the closed-strand read-gating
+ * secret; the founding `Member.Key`/`Authority.MemberKey` (the strand RBAC layer)
+ * are *derived from it* — they are the `publicKeyB64` of the keypair this returns.
+ * Decode the protobuf to a libp2p private key, then reuse
+ * {@link authorityKeyFromLibp2p} so the same seed→public derivation used for node
+ * authority keys yields a stable `{ privateKeyB64, publicKeyB64 }` whose public
+ * key a later strand signature verifies against.
+ *
+ * @param memberPrivateKey - The strand's `MemberPrivateKey` (base64 protobuf).
+ * @returns The base64url seed/public-key pair for founding membership/authority.
+ * @throws If the decoded key is not Ed25519 or the raw bytes are malformed.
+ */
+export function strandMemberKeyPair(memberPrivateKey) {
+    const privateKey = privateKeyFromProtobuf(uint8ArrayFromString(memberPrivateKey, 'base64'));
+    return authorityKeyFromLibp2p(privateKey);
+}
+//# sourceMappingURL=strand-member-key.js.map

package/dist/strand-member-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"strand-member-key.js","sourceRoot":"","sources":["../src/strand-member-key.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AACpG,OAAO,EAAE,QAAQ,IAAI,kBAAkB,EAAE,UAAU,IAAI,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACjG,OAAO,EAAE,sBAAsB,EAAyB,MAAM,oBAAoB,CAAC;AAEnF;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB;IAC3C,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,CAAC;IACpD,OAAO,kBAAkB,CAAC,oBAAoB,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,mBAAmB,CAAC,gBAAwB;IAC1D,MAAM,UAAU,GAAG,sBAAsB,CAAC,oBAAoB,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC5F,OAAO,sBAAsB,CAAC,UAAU,CAAC,CAAC;AAC5C,CAAC"}

package/dist/strand-member-registry.d.ts

@@ -0,0 +1,98 @@
+import type { Database } from '@quereus/quereus';
+import type { MemberRegistration } from './types.js';
+import type { MemberRegistry, MemberVerifier } from './enrollment.js';
+import type { AuthorityKeyPair } from './authority-key.js';
+/**
+ * The canonical payload a joining member signs to prove ownership of its strand
+ * member key, verified by {@link StrandMemberVerifier.verifyMember}.
+ *
+ * Binds the member key to the strand id so a registration signature cannot be
+ * replayed against a different strand. Peer-id binding is intentionally NOT part
+ * of this payload — `MemberPeer` rows carry their OWN per-peer self-proofs
+ * (`MemberKey || '|' || PeerId`, signed by the member) and are written by the
+ * dedicated `registerMemberPeer` writer; see {@link StrandMemberRegistry}.
+ */
+export declare function memberRegistrationPayload(registration: MemberRegistration): string;
+/** How a {@link StrandMemberRegistry} admits a member into the strand. */
+export type StrandAdmission = {
+    /** Redeem a specific single-use invite (the invitee-side join). */
+    readonly mode: 'invite';
+    /** The `Invite.Key` (invite public key, base64url) to redeem. */
+    readonly inviteKey: string;
+    /** The matching invite private seed (base64url), received out-of-band. */
+    readonly invitePrivateKey: string;
+} | {
+    /** Admit directly by authority signature (the authority-side join). */
+    readonly mode: 'authority';
+    /** The admitting authority's strand keypair. */
+    readonly authorityKeyPair: AuthorityKeyPair;
+};
+/**
+ * Strand-`Database`-backed {@link MemberVerifier} — the reconciliation that lets
+ * {@link EnrollmentService} make real authorization decisions against a strand's
+ * `Invite`/`ConsumedInvite`/`Member` tables instead of a placeholder.
+ *
+ * Each instance is scoped to ONE strand's database (the `Strand.*` tables live
+ * inside the connected strand DB), so the `strandId` arguments on the interface
+ * are accepted for signature compatibility but the queries run against this db.
+ */
+export declare class StrandMemberVerifier implements MemberVerifier {
+    private readonly db;
+    constructor(db: Database);
+    /**
+     * Verify the member's self-proof over {@link memberRegistrationPayload} against
+     * the registration's own `key` (the member's ed25519 public key). This is the
+     * off-engine counterpart to the on-engine signature checks — a pre-flight gate
+     * before the constraint-enforced write.
+     */
+    verifyMember(registration: MemberRegistration, signature: string): Promise<boolean>;
+    /**
+     * A member is authorized to join when either it has already consumed an invite
+     * (a `ConsumedInvite` row bears its key) OR the strand has at least one
+     * outstanding `Invite` it could redeem.
+     *
+     * Strand invites are anonymous — `Invite.Key` is an invite public key, not a
+     * member key, so an un-consumed invite cannot be bound to a specific member
+     * here. This check is therefore a "door is open" pre-flight; the binding,
+     * single-use, and cryptographic gates are all enforced by the deferred
+     * `Strand.*` constraints when the member is actually written.
+     *
+     * Expired invites are filtered out so this pre-flight matches the on-engine
+     * `ConsumedInvite.NotExpired` gate — `Now` is canonicalised the same way the
+     * writer canonicalises it, so `Expiration > ?` compares like-for-like canonical
+     * strings. A member that already holds a `ConsumedInvite` short-circuits above,
+     * regardless of any invite's expiry.
+     */
+    isAuthorizedToJoin(_strandId: string, memberKey: string): Promise<boolean>;
+}
+/**
+ * Strand-`Database`-backed {@link MemberRegistry} — writes real `Strand.Member`
+ * (and, in invite mode, `Strand.ConsumedInvite`) rows through the signed writer
+ * primitives, so {@link EnrollmentService.registerMember} performs the actual
+ * per-strand join handshake rather than returning "MemberRegistry not configured".
+ *
+ * The {@link StrandAdmission} chosen at construction selects which branch of
+ * `Member.Authorized` is taken:
+ * - `invite`  → {@link consumeInvite} (atomic `Member` + `ConsumedInvite`), the
+ *   invitee-side flow that redeems a single-use invite.
+ * - `authority` → {@link addMemberByAuthority}, the authority-side flow that
+ *   seats a member already trusted by an authority.
+ *
+ * Scoped to one strand's db; the `strandId` argument is accepted for interface
+ * compatibility but writes target this db's `Strand.*` tables.
+ *
+ * NOTE: `peerIds` are NOT written as `MemberPeer` rows here. The signed peer path
+ * now exists as the standalone `registerMemberPeer` writer (each peer self-proof is
+ * signed by the member's own key), but wiring the enrollment `peerIds` through it is
+ * a deliberate follow-on — the member self-proof available here does not carry the
+ * per-peer signatures `MemberPeer.Authorized` requires. A non-empty `peerIds` is
+ * logged and otherwise ignored so the member still lands; peer rows are reconciled
+ * separately via `registerMemberPeer`.
+ */
+export declare class StrandMemberRegistry implements MemberRegistry {
+    private readonly db;
+    private readonly admission;
+    constructor(db: Database, admission: StrandAdmission);
+    registerMember(strandId: string, memberKey: string, peerIds: string[]): Promise<void>;
+    isMemberRegistered(_strandId: string, memberKey: string): Promise<boolean>;
+}

package/dist/strand-member-registry.js

@@ -0,0 +1,129 @@
+import debug from 'debug';
+import { verifyStrandPayload, consumeInvite, addMemberByAuthority, } from './strand-membership-writer.js';
+import { canonicalDatetime } from './canonical-datetime.js';
+const log = debug('sereus:cadre:strand-member-registry');
+/**
+ * The canonical payload a joining member signs to prove ownership of its strand
+ * member key, verified by {@link StrandMemberVerifier.verifyMember}.
+ *
+ * Binds the member key to the strand id so a registration signature cannot be
+ * replayed against a different strand. Peer-id binding is intentionally NOT part
+ * of this payload — `MemberPeer` rows carry their OWN per-peer self-proofs
+ * (`MemberKey || '|' || PeerId`, signed by the member) and are written by the
+ * dedicated `registerMemberPeer` writer; see {@link StrandMemberRegistry}.
+ */
+export function memberRegistrationPayload(registration) {
+    return `${registration.strandId}|${registration.key}`;
+}
+/**
+ * Strand-`Database`-backed {@link MemberVerifier} — the reconciliation that lets
+ * {@link EnrollmentService} make real authorization decisions against a strand's
+ * `Invite`/`ConsumedInvite`/`Member` tables instead of a placeholder.
+ *
+ * Each instance is scoped to ONE strand's database (the `Strand.*` tables live
+ * inside the connected strand DB), so the `strandId` arguments on the interface
+ * are accepted for signature compatibility but the queries run against this db.
+ */
+export class StrandMemberVerifier {
+    constructor(db) {
+        this.db = db;
+    }
+    /**
+     * Verify the member's self-proof over {@link memberRegistrationPayload} against
+     * the registration's own `key` (the member's ed25519 public key). This is the
+     * off-engine counterpart to the on-engine signature checks — a pre-flight gate
+     * before the constraint-enforced write.
+     */
+    async verifyMember(registration, signature) {
+        const ok = verifyStrandPayload(memberRegistrationPayload(registration), signature, registration.key);
+        if (!ok) {
+            log('verifyMember: bad self-proof for member %s on strand %s', registration.key, registration.strandId);
+        }
+        return ok;
+    }
+    /**
+     * A member is authorized to join when either it has already consumed an invite
+     * (a `ConsumedInvite` row bears its key) OR the strand has at least one
+     * outstanding `Invite` it could redeem.
+     *
+     * Strand invites are anonymous — `Invite.Key` is an invite public key, not a
+     * member key, so an un-consumed invite cannot be bound to a specific member
+     * here. This check is therefore a "door is open" pre-flight; the binding,
+     * single-use, and cryptographic gates are all enforced by the deferred
+     * `Strand.*` constraints when the member is actually written.
+     *
+     * Expired invites are filtered out so this pre-flight matches the on-engine
+     * `ConsumedInvite.NotExpired` gate — `Now` is canonicalised the same way the
+     * writer canonicalises it, so `Expiration > ?` compares like-for-like canonical
+     * strings. A member that already holds a `ConsumedInvite` short-circuits above,
+     * regardless of any invite's expiry.
+     */
+    async isAuthorizedToJoin(_strandId, memberKey) {
+        const consumed = await scalarCount(this.db, 'select count(1) as c from Strand.ConsumedInvite where MemberKey = ?', [memberKey]);
+        if (consumed > 0) {
+            return true;
+        }
+        const nowCanonical = await canonicalDatetime(this.db, Date.now());
+        const invites = await scalarCount(this.db, 'select count(1) as c from Strand.Invite where Expiration is null or Expiration > ?', [nowCanonical]);
+        return invites > 0;
+    }
+}
+/**
+ * Strand-`Database`-backed {@link MemberRegistry} — writes real `Strand.Member`
+ * (and, in invite mode, `Strand.ConsumedInvite`) rows through the signed writer
+ * primitives, so {@link EnrollmentService.registerMember} performs the actual
+ * per-strand join handshake rather than returning "MemberRegistry not configured".
+ *
+ * The {@link StrandAdmission} chosen at construction selects which branch of
+ * `Member.Authorized` is taken:
+ * - `invite`  → {@link consumeInvite} (atomic `Member` + `ConsumedInvite`), the
+ *   invitee-side flow that redeems a single-use invite.
+ * - `authority` → {@link addMemberByAuthority}, the authority-side flow that
+ *   seats a member already trusted by an authority.
+ *
+ * Scoped to one strand's db; the `strandId` argument is accepted for interface
+ * compatibility but writes target this db's `Strand.*` tables.
+ *
+ * NOTE: `peerIds` are NOT written as `MemberPeer` rows here. The signed peer path
+ * now exists as the standalone `registerMemberPeer` writer (each peer self-proof is
+ * signed by the member's own key), but wiring the enrollment `peerIds` through it is
+ * a deliberate follow-on — the member self-proof available here does not carry the
+ * per-peer signatures `MemberPeer.Authorized` requires. A non-empty `peerIds` is
+ * logged and otherwise ignored so the member still lands; peer rows are reconciled
+ * separately via `registerMemberPeer`.
+ */
+export class StrandMemberRegistry {
+    constructor(db, admission) {
+        this.db = db;
+        this.admission = admission;
+    }
+    async registerMember(strandId, memberKey, peerIds) {
+        if (peerIds.length > 0) {
+            log('registerMember: %d peerId(s) for member %s on strand %s deferred to the registerMemberPeer path (needs per-peer self-proofs); registering member only', peerIds.length, memberKey, strandId);
+        }
+        if (this.admission.mode === 'invite') {
+            await consumeInvite(this.db, {
+                inviteKey: this.admission.inviteKey,
+                invitePrivateKey: this.admission.invitePrivateKey,
+                memberKey,
+            });
+            return;
+        }
+        await addMemberByAuthority(this.db, {
+            authorityKeyPair: this.admission.authorityKeyPair,
+            memberKey,
+        });
+    }
+    async isMemberRegistered(_strandId, memberKey) {
+        const count = await scalarCount(this.db, 'select count(1) as c from Strand.Member where Key = ?', [memberKey]);
+        return count > 0;
+    }
+}
+/** Run a `select count(1) as c ...` and return the scalar (0 if no row). */
+async function scalarCount(db, sql, params) {
+    for await (const row of db.eval(sql, params)) {
+        return row.c ?? 0;
+    }
+    return 0;
+}
+//# sourceMappingURL=strand-member-registry.js.map

package/dist/strand-member-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"strand-member-registry.js","sourceRoot":"","sources":["../src/strand-member-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAK1B,OAAO,EACL,mBAAmB,EACnB,aAAa,EACb,oBAAoB,GACrB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAE5D,MAAM,GAAG,GAAG,KAAK,CAAC,qCAAqC,CAAC,CAAC;AAEzD;;;;;;;;;GASG;AACH,MAAM,UAAU,yBAAyB,CAAC,YAAgC;IACxE,OAAO,GAAG,YAAY,CAAC,QAAQ,IAAI,YAAY,CAAC,GAAG,EAAE,CAAC;AACxD,CAAC;AAmBD;;;;;;;;GAQG;AACH,MAAM,OAAO,oBAAoB;IAC/B,YAA6B,EAAY;QAAZ,OAAE,GAAF,EAAE,CAAU;IAAG,CAAC;IAE7C;;;;;OAKG;IACH,KAAK,CAAC,YAAY,CAAC,YAAgC,EAAE,SAAiB;QACpE,MAAM,EAAE,GAAG,mBAAmB,CAAC,yBAAyB,CAAC,YAAY,CAAC,EAAE,SAAS,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC;QACrG,IAAI,CAAC,EAAE,EAAE,CAAC;YACR,GAAG,CAAC,yDAAyD,EAAE,YAAY,CAAC,GAAG,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC;QAC1G,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED;;;;;;;;;;;;;;;;OAgBG;IACH,KAAK,CAAC,kBAAkB,CAAC,SAAiB,EAAE,SAAiB;QAC3D,MAAM,QAAQ,GAAG,MAAM,WAAW,CAChC,IAAI,CAAC,EAAE,EACP,qEAAqE,EACrE,CAAC,SAAS,CAAC,CACZ,CAAC;QACF,IAAI,QAAQ,GAAG,CAAC,EAAE,CAAC;YACjB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,MAAM,WAAW,CAC/B,IAAI,CAAC,EAAE,EACP,oFAAoF,EACpF,CAAC,YAAY,CAAC,CACf,CAAC;QACF,OAAO,OAAO,GAAG,CAAC,CAAC;IACrB,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,OAAO,oBAAoB;IAC/B,YACmB,EAAY,EACZ,SAA0B;QAD1B,OAAE,GAAF,EAAE,CAAU;QACZ,cAAS,GAAT,SAAS,CAAiB;IAC1C,CAAC;IAEJ,KAAK,CAAC,cAAc,CAAC,QAAgB,EAAE,SAAiB,EAAE,OAAiB;QACzE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,GAAG,CACD,uJAAuJ,EACvJ,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CACpC,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrC,MAAM,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE;gBAC3B,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS;gBACnC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB;gBACjD,SAAS;aACV,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,oBAAoB,CAAC,IAAI,CAAC,EAAE,EAAE;YAClC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,gBAAgB;YACjD,SAAS;SACV,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,SAAiB,EAAE,SAAiB;QAC3D,MAAM,KAAK,GAAG,MAAM,WAAW,CAC7B,IAAI,CAAC,EAAE,EACP,uDAAuD,EACvD,CAAC,SAAS,CAAC,CACZ,CAAC;QACF,OAAO,KAAK,GAAG,CAAC,CAAC;IACnB,CAAC;CACF;AAED,4EAA4E;AAC5E,KAAK,UAAU,WAAW,CAAC,EAAY,EAAE,GAAW,EAAE,MAAkB;IACtE,IAAI,KAAK,EAAE,MAAM,GAAG,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC;QAC7C,OAAQ,GAAG,CAAC,CAAY,IAAI,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}