@ibgib/core-gib 0.1.57 → 0.1.58

package/src/sync/sync-conflict-basic-multitimelines.respec.mts

@@ -216,7 +216,7 @@ await respecfully(sir, `Two different fields and rel8d`, async () => {
 
     // Verify Receiver has correct KV (Pre-Sync Check)
     // This ensures the conflict precondition exists.
-    await ifWeMight(sir, 'verify receiver KV pre-sync', async () => {
+    await ifWe(sir, 'verify receiver KV pre-sync', async () => {
         try {
             const destKV = await receiverCoordinator.getKnowledgeMap({
                 space: destSpace,
@@ -316,7 +316,7 @@ await respecfully(sir, `Two different fields and rel8d`, async () => {
             const resTip = await getFromSpace({ space: sourceSpace, addr: sourceTipAddr });
             const newTip = resTip.ibGibs![0] as IbGib_V1<TestData>;
 
-            await ifWeMight(sir, 'basics of alpha merge', async () => {
+            await ifWe(sir, 'basics of alpha merge', async () => {
                 iReckon(sir, sourceTipAddr).asTo(`Source Tip (${sourceTipAddr}) should NOT be alpha_v3_source_rel8beta`).not.isGonnaBe(getIbGibAddr({ ibGib: alpha_v3_source_rel8beta }));
                 iReckon(sir, sourceTipAddr).asTo(`Source Tip (${sourceTipAddr}) should NOT be v2dest`).not.isGonnaBe(getIbGibAddr({ ibGib: alpha_v2_dest }));
 
@@ -329,7 +329,7 @@ await respecfully(sir, `Two different fields and rel8d`, async () => {
             // Check Graft Structure
             // Look for 'graftinfo' rel8n
 
-            await ifWeMight(sir, 'graft info is valid', async () => {
+            await ifWe(sir, 'graft info is valid', async () => {
                 if (!newTip.rel8ns) { throw new Error(`(UNEXPECTED) newTip.rel8ns falsy? (E: eb4078712ea2f02c7ee84b983ed77826)`); }
                 const graftInfoRel = newTip.rel8ns[GRAFT_INFO_REL8N_NAME];
                 iReckon(sir, graftInfoRel).asTo('New Tip should have graftinfo rel8n').isGonnaBeTruthy();
@@ -353,7 +353,7 @@ await respecfully(sir, `Two different fields and rel8d`, async () => {
                 iReckon(sir, orphanRel![0]).asTo('orphan rel8ns will be later addr').isGonnaBe(orphanAddr);
             });
 
-            await ifWeMight(sir, 'alpha and deps synced', async () => {
+            await ifWe(sir, 'alpha and deps synced', async () => {
                 // alpha's full dep graph should exist on dest
                 const [beta_dest] = await getIbGibsFromCache_fallbackToSpaces({
                     addrs: [betaAddr_v0],
@@ -373,7 +373,7 @@ await respecfully(sir, `Two different fields and rel8d`, async () => {
                 }
             });
 
-            await ifWeMight(sir, 'beta and deps synced', async () => {
+            await ifWe(sir, 'beta and deps synced', async () => {
                 // beta's full dep graph should exist on dest
                 const [beta_dest] = await getIbGibsFromCache_fallbackToSpaces({
                     addrs: [betaAddr_v0],

package/src/sync/sync-conflict-text-merge.respec.mts

@@ -147,7 +147,7 @@ await respecfully(sir, `Text merge (LCS) conflict resolution`, async () => {
             });
             const r1_alpha_source_tipAddr = r1_alpha_sourceKV[alpha_tjpAddr];
             if (!r1_alpha_source_tipAddr) {
-                await ifWeMight(sir, 'r1_alpha_source_tipAddr is falsy?', async () => {
+                await ifWe(sir, 'r1_alpha_source_tipAddr is falsy?', async () => {
                     iReckon(sir, true).asTo('fail').isGonnaBeFalse();
                 });
                 return; /* <<<< returns early */
@@ -160,17 +160,17 @@ await respecfully(sir, `Text merge (LCS) conflict resolution`, async () => {
             });
             const r1_alpha_dest_tipAddr = r1_alpha_destKV[alpha_tjpAddr];
             if (!r1_alpha_dest_tipAddr) {
-                await ifWeMight(sir, 'r1_alpha_dest_tipAddr is falsy?', async () => {
+                await ifWe(sir, 'r1_alpha_dest_tipAddr is falsy?', async () => {
                     iReckon(sir, true).asTo('fail').isGonnaBeFalse();
                 });
                 return; /* <<<< returns early */
             }
 
-            await ifWeMight(sir, 'r1 tip addrs match', async () => {
+            await ifWe(sir, 'r1 tip addrs match', async () => {
                 iReckon(sir, r1_alpha_source_tipAddr).asTo('R1 source/dest have same tip').isGonnaBe(r1_alpha_dest_tipAddr);
             });
 
-            await ifWeMight(sir, 'r1 text synced correctly', async () => {
+            await ifWe(sir, 'r1 text synced correctly', async () => {
                 if (!r1_alpha_dest_tipAddr) {
                     throw new Error(`r1_dest_tipAddr is null/undefined (E: 1a2b3c4d5e6f7a8b9c0d1e2f3a4b5c6d)`);
                 }
@@ -180,7 +180,7 @@ await respecfully(sir, `Text merge (LCS) conflict resolution`, async () => {
                 iReckon(sir, destTipIbGib.data!.text).asTo('Dest has initial text').isGonnaBe(INITIAL_TEXT);
             });
 
-            await ifWeMight(sir, 'r1 dep graphs synced', async () => {
+            await ifWe(sir, 'r1 dep graphs synced', async () => {
                 const [r1_alpha_source_tip] = await getIbGibsFromCache_fallbackToSpaces({
                     addrs: [r1_alpha_source_tipAddr],
                     space: sourceSpace,
@@ -259,7 +259,7 @@ await respecfully(sir, `Text merge (LCS) conflict resolution`, async () => {
     // #endregion r2 dest edits
 
     await respecfully(sir, `r2 verify pre`, async () => {
-        await ifWeMight(sir, 'texts as expected', async () => {
+        await ifWe(sir, 'texts as expected', async () => {
             // before the sync, each side only has their edit. after the sync,
             // both sides should have both prepended and appended text
             iReckon(sir, r2_alpha_v1_source_appendedText.ibGib.data?.text.includes(INITIAL_TEXT)).asTo('alpha source has initial text').isGonnaBeTrue();
@@ -294,14 +294,14 @@ await respecfully(sir, `Text merge (LCS) conflict resolution`, async () => {
         const kv_dest = await senderCoordinator.getKnowledgeMap({ space: destSpace, metaspace, domainIbGibs: [r1_alpha_v0_source.ibGib] });
         const r2_alpha_source_tipAddr = kv_source[alpha_tjpAddr];
         if (!r2_alpha_source_tipAddr) {
-            await ifWeMight(sir, 'r2_alpha_source_tipAddr falsy?', async () => {
+            await ifWe(sir, 'r2_alpha_source_tipAddr falsy?', async () => {
                 iReckon(sir, true).asTo('fails').isGonnaBe(false);
             });
             return; /* <<<< returns early */
         }
         const r2_alpha_dest_tipAddr = kv_dest[alpha_tjpAddr];
         if (!r2_alpha_dest_tipAddr) {
-            await ifWeMight(sir, 'r2_alpha_dest_tipAddr falsy?', async () => {
+            await ifWe(sir, 'r2_alpha_dest_tipAddr falsy?', async () => {
                 iReckon(sir, true).asTo('fails').isGonnaBe(false);
             });
             return; /* <<<< returns early */
@@ -315,11 +315,11 @@ await respecfully(sir, `Text merge (LCS) conflict resolution`, async () => {
             space: sourceSpace,
         });
 
-        await ifWeMight(sir, 'r2 tip addrs match', async () => {
+        await ifWe(sir, 'r2 tip addrs match', async () => {
             iReckon(sir, r2_alpha_source_tipAddr).asTo('alpha').isGonnaBe(r2_alpha_dest_tipAddr);
         });
 
-        await ifWeMight(sir, 'r2 text merged correctly', async () => {
+        await ifWe(sir, 'r2 text merged correctly', async () => {
             // before the sync, each side only has their edit. after the sync,
             // both sides should have both prepended and appended text
             iReckon(sir, r2_alpha_v1_source_appendedText.ibGib.data?.text.includes(INITIAL_TEXT)).asTo('alpha source has initial text').isGonnaBeTrue();
@@ -338,7 +338,7 @@ await respecfully(sir, `Text merge (LCS) conflict resolution`, async () => {
             iReckon(sir, text).asTo('R2 has both prepend and append').isGonnaBe(DEST_PREPEND + INITIAL_TEXT + SOURCE_APPEND);
         });
 
-        await ifWeMight(sir, 'r2 dep graphs synced', async () => {
+        await ifWe(sir, 'r2 dep graphs synced', async () => {
             // alpha's full dep graph should exist on dest
             const depGraph_alpha_source = await getDependencyGraph({
                 ibGib: r2_alpha_source_tip,
@@ -412,7 +412,7 @@ await respecfully(sir, `Text merge (LCS) conflict resolution`, async () => {
     // // #endregion r3 dest edits
 
     // await respecfully(sir, `r3 verify pre`, async () => {
-    //     await ifWeMight(sir, 'dest has alpha after R2 graft', async () => {
+    //     await ifWe(sir, 'dest has alpha after R2 graft', async () => {
     //         const kv = await receiverCoordinator.getKnowledgeMap({ space: destSpace, metaspace, domainIbGibs: [r3_v0_graft_fromDest] });
     //         iReckon(sir, !!kv[alpha_tjpAddr]).asTo('dest has tip').isGonnaBeTrue();
     //     });
@@ -442,11 +442,11 @@ await respecfully(sir, `Text merge (LCS) conflict resolution`, async () => {
     //     const r3_tip_s = kv_s[alpha_tjpAddr];
     //     const r3_tip_d = kv_d[alpha_tjpAddr];
 
-    //     await ifWeMight(sir, 'r3 tip addrs match', async () => {
+    //     await ifWe(sir, 'r3 tip addrs match', async () => {
     //         iReckon(sir, r3_tip_s).asTo('R3 tips match').isGonnaBe(r3_tip_d);
     //     });
 
-    //     await ifWeMight(sir, 'r3 both paragraph edits merged', async () => {
+    //     await ifWe(sir, 'r3 both paragraph edits merged', async () => {
     //         const res = await getFromSpace({ space: sourceSpace, addr: r3_tip_s! });
     //         const tip = res.ibGibs![0] as IbGib_V1<TestData>;
     //         const mergedText = tip.data!.text!;
@@ -465,7 +465,7 @@ await respecfully(sir, `Text merge (LCS) conflict resolution`, async () => {
     //             .isGonnaBeTrue();
     //     });
 
-    //     await ifWeMight(sir, 'r3 dep graphs synced', async () => {
+    //     await ifWe(sir, 'r3 dep graphs synced', async () => {
     //         const [d] = await getIbGibsFromCache_fallbackToSpaces({ addrs: [r3_tip_s!], space: destSpace });
     //         iReckon(sir, d).asTo('exists dest').isGonnaBeTruthy();
     //     });
@@ -499,7 +499,7 @@ await respecfully(sir, `Text merge (LCS) conflict resolution`, async () => {
     // // #endregion r4 dest edits
 
     // await respecfully(sir, `r4 verify pre`, async () => {
-    //     await ifWeMight(sir, 'dest has alpha after R3 graft', async () => {
+    //     await ifWe(sir, 'dest has alpha after R3 graft', async () => {
     //         // TODO: Verify pre-sync state
     //     });
     // });
@@ -509,16 +509,16 @@ await respecfully(sir, `Text merge (LCS) conflict resolution`, async () => {
     // // TODO: Add sync operation
 
     // await respecfully(sir, `r4 verify post`, async () => {
-    //     await ifWeMight(sir, 'r4 tip addrs match', async () => {
+    //     await ifWe(sir, 'r4 tip addrs match', async () => {
     //         // TODO: Verify tips match
     //     });
 
-    //     await ifWeMight(sir, 'r4 LCS merged both word changes', async () => {
+    //     await ifWe(sir, 'r4 LCS merged both word changes', async () => {
     //         // TODO: Verify text has both source and dest word changes
     //         // TODO: Verify LCS algorithm preserved both edits correctly
     //     });
 
-    //     await ifWeMight(sir, 'r4 dep graphs synced', async () => {
+    //     await ifWe(sir, 'r4 dep graphs synced', async () => {
     //         // TODO: Verify dep graphs
     //     });
     // });
@@ -553,7 +553,7 @@ await respecfully(sir, `Text merge (LCS) conflict resolution`, async () => {
     // // #endregion r5 dest edits
 
     // await respecfully(sir, `r5 verify pre`, async () => {
-    //     await ifWeMight(sir, 'dest has alpha after R4 graft', async () => {
+    //     await ifWe(sir, 'dest has alpha after R4 graft', async () => {
     //         // TODO: Verify pre-sync state
     //     });
     // });
@@ -563,24 +563,24 @@ await respecfully(sir, `Text merge (LCS) conflict resolution`, async () => {
     // // TODO: Add sync operation
 
     // await respecfully(sir, `r5 verify post`, async () => {
-    //     await ifWeMight(sir, 'r5 tip addrs match', async () => {
+    //     await ifWe(sir, 'r5 tip addrs match', async () => {
     //         // TODO: Verify tips match
     //     });
 
-    //     await ifWeMight(sir, 'r5 text field merged', async () => {
+    //     await ifWe(sir, 'r5 text field merged', async () => {
     //         // TODO: Verify text field has both source and dest changes
     //     });
 
-    //     await ifWeMight(sir, 'r5 description field merged', async () => {
+    //     await ifWe(sir, 'r5 description field merged', async () => {
     //         // TODO: Verify description field has both source and dest changes
     //     });
 
-    //     await ifWeMight(sir, 'r5 both fields independently LCS-merged', async () => {
+    //     await ifWe(sir, 'r5 both fields independently LCS-merged', async () => {
     //         // TODO: Verify each field was merged independently
     //         // TODO: Ensure one field's merge didn't affect the other
     //     });
 
-    //     await ifWeMight(sir, 'r5 dep graphs synced', async () => {
+    //     await ifWe(sir, 'r5 dep graphs synced', async () => {
     //         // TODO: Verify dep graphs
     //     });
     // });

package/src/sync/sync-helpers.mts

@@ -20,6 +20,8 @@ import { SyncSagaConflictInfo, SyncSagaMessageCommitData_V1, SyncSagaMessageDelt
 import { getIbGibsFromCache_fallbackToSpaces } from "../common/other/ibgib-helper.mjs";
 import { isGraftInfo } from "./graft-info/graft-info-helpers.mjs";
 import { GRAFT_ORPHAN_REL8N_NAME } from "./graft-info/graft-info-constants.mjs";
+import { deriveKey } from "../keystone/kdf/kdf-helpers.mjs";
+import { KdfStrategy } from "../keystone/kdf/kdf-constants.mjs";
 
 const logalot = GLOBAL_LOG_A_LOT;
 
@@ -70,7 +72,7 @@ export async function parseSyncIb({
         ] = parts;
 
         if (atom !== SYNC_ATOM) {
-            throw new Error(`Atom mismatch. Expected ${SYNC_ATOM}. Got ${atom}.`);
+            throw new Error(`Atom mismatch. Expected ${SYNC_ATOM}. Got ${atom}. (E: cc6a48143be7de70bafbfdbbc0776826)`);
         }
 
         return { atom, uuid };
@@ -527,3 +529,51 @@ export async function getAllOrphanedAddresses({
         if (logalot) { console.log(`${lc} complete.`); }
     }
 }
+
+/**
+ * Derives a saga-specific session secret from the sender's master secret.
+ *
+ * Uses `KDF(senderSecret, sagaId)` via the `recursive_salt_wrap` strategy so
+ * the session secret is:
+ * - **Deterministic**: same inputs → same output (needed for the receiver to
+ *   independently reproduce the session keystone genesis).
+ * - **Saga-bound**: different sagaId → completely different sessionSecret →
+ *   completely different session keystone S.
+ * - **One-way**: knowing S cannot recover `senderSecret`.
+ *
+ * @param senderSecret - The sender's plaintext master secret (never transmitted).
+ * @param sagaId       - The unique UUID for this sync saga.
+ * @returns The derived session secret string.
+ */
+export async function deriveSessionSecret({
+    senderSecret,
+    sagaId,
+}: {
+    senderSecret: string;
+    sagaId: string;
+}): Promise<string> {
+    const lc = `[${deriveSessionSecret.name}]`;
+    try {
+        if (logalot) { console.log(`${lc} starting... (I: 0de03f8dcd3e32f1fca244e8f2a8a826)`); }
+
+        if (!senderSecret) { throw new Error(`(UNEXPECTED) senderSecret falsy? (E: 8ce053fe59825a6678713128953b9d26)`); }
+        if (!sagaId) { throw new Error(`(UNEXPECTED) sagaId falsy? (E: 3a17e0c1b2f849de8a42cd15b8ee6826)`); }
+
+        const sessionSecret = await deriveKey({
+            masterSecret: senderSecret,
+            kdfOpts: {
+                strategy: KdfStrategy.recursive_salt_wrap,
+                salt: sagaId,
+                rounds: 10000,
+                algorithm: 'SHA-256',
+            }
+        });
+
+        return sessionSecret;
+    } catch (error) {
+        console.error(`${lc} ${extractErrorMsg(error)}`);
+        throw error;
+    } finally {
+        if (logalot) { console.log(`${lc} complete.`); }
+    }
+}

package/src/sync/sync-innerspace-constants.respec.mts

@@ -25,7 +25,7 @@ const lc = `[sync-innerspace-constants.respec]`;
 
 await respecfully(sir, `Sync Constants (No TJP)`, async () => {
 
-    await ifWeMight(sir, `Verify Constants Sync`, async () => {
+    await ifWe(sir, `Verify Constants Sync`, async () => {
         // 1. Setup Spaces
         const metaspace = new Metaspace_Innerspace(undefined);
         await metaspace.initialize({

package/src/sync/sync-innerspace-deep-updates.respec.mts

@@ -127,7 +127,7 @@ await respecfully(sir, `Sync InnerSpaces (Deep Updates)`, async () => {
         // 5. Verify Dest
         console.log(`${lc} Verifying Destination...`);
 
-        await ifWeMight(sir, `verify deep timeline present`, async () => {
+        await ifWe(sir, `verify deep timeline present`, async () => {
             // Verify Tip (V2)
             const getV2 = await getFromSpace({ space: destSpace, addr: addrV2 });
             iReckon(sir, getV2.success).asTo('Tip V2 present').isGonnaBeTrue();

package/src/sync/sync-innerspace-dest-ahead.respec.mts

@@ -116,7 +116,7 @@ await respecfully(sir, `Sync InnerSpaces (Dest Ahead)`, async () => {
             return resGet.success && resGet.ibGibs && resGet.ibGibs.length === 1;
         }
 
-        await ifWeMight(sir, 'verify setup', async () => {
+        await ifWe(sir, 'verify setup', async () => {
             // Ensure V2 is ONLY in Dest (it is, per `space: destSpace`)
             // Ensure Source does NOT have V2
             iReckon(sir, await fnAddrExistsInSpace(addrV0, sourceSpace)).asTo('source has V0').isGonnaBeTrue();
@@ -154,7 +154,7 @@ await respecfully(sir, `Sync InnerSpaces (Dest Ahead)`, async () => {
         // 5. Verify Sync (v2 should be in both source and dest now)
         console.log(`${lc} Verifying Sync...`);
 
-        await ifWeMight(sir, `verify v2 now also in source`, async () => {
+        await ifWe(sir, `verify v2 now also in source`, async () => {
             // Verify Tip (V2)
 
             iReckon(sir, await fnAddrExistsInSpace(addrV0, sourceSpace)).asTo('source has V0').isGonnaBeTrue();
@@ -166,7 +166,7 @@ await respecfully(sir, `Sync InnerSpaces (Dest Ahead)`, async () => {
 
         });
 
-        await ifWeMight(sir, `dependency graphs the same`, async () => {
+        await ifWe(sir, `dependency graphs the same`, async () => {
 
             const sourceDepGraph = await getDependencyGraph({
                 ibGibAddr: addrV2,

package/src/sync/sync-innerspace-multiple-timelines.respec.mts

@@ -129,7 +129,7 @@ await respecfully(sir, `Sync InnerSpaces (Multiple Timelines)`, async () => {
         // 5. Verify Dest
         console.log(`${lc} Verifying Destination...`);
 
-        await ifWeMight(sir, `verify timelines present`, async () => {
+        await ifWe(sir, `verify timelines present`, async () => {
             // Verify A
             const getA = await getFromSpace({ space: destSpace, addr: addrA });
             iReckon(sir, getA.success).asTo('Timeline A present').isGonnaBeTrue();

package/src/sync/sync-innerspace-partial-update.respec.mts

@@ -98,7 +98,7 @@ await respecfully(sir, `Sync InnerSpaces (Partial Update)`, async () => {
         // Transfer Root & V1 to Dest (Simulate previous sync)
         await putInSpace({ space: destSpace, ibGibs: [root, v1] });
 
-        await ifWeMight(sir, 'verify setup', async () => {
+        await ifWe(sir, 'verify setup', async () => {
             // Verify Dest has V1
             const checkV1 = await getFromSpace({ space: destSpace, addr: getIbGibAddr({ ibGib: v1 }) });
             iReckon(sir, checkV1.success).asTo('Dest has V1').isGonnaBeTrue();
@@ -136,7 +136,7 @@ await respecfully(sir, `Sync InnerSpaces (Partial Update)`, async () => {
         // 5. Verify Dest (Should now have V2)
         console.log(`${lc} Verifying Destination...`);
 
-        await ifWeMight(sir, `verify dest updated`, async () => {
+        await ifWe(sir, `verify dest updated`, async () => {
             // Verify Tip (V2)
             const getV2 = await getFromSpace({ space: destSpace, addr: addrV2 });
             iReckon(sir, getV2.success).asTo('V2 present in Dest').isGonnaBeTrue();

package/src/sync/sync-innerspace.respec.mts

@@ -152,18 +152,18 @@ await respecfully(sir, `Sync InnerSpaces`, async () => {
         try {
             const getChildInDest = await getFromSpace({ space: destSpace, addr: childAddr });
 
-            await ifWeMight(sir, `verify success getChildInDest`, async () => {
+            await ifWe(sir, `verify success getChildInDest`, async () => {
                 iReckon(sir, getChildInDest.success).asTo('Child present in Dest').isGonnaBeTrue();
             });
 
-            await ifWeMight(sir, `verify getChildInDest.ibGibs`, async () => {
+            await ifWe(sir, `verify getChildInDest.ibGibs`, async () => {
                 const firstChild = getChildInDest.ibGibs?.[0];
                 if (logalot) { console.log(`${lc} firstChild: ${pretty(firstChild)}`); }
                 iReckon(sir, firstChild?.data?.n).asTo('Child content matches').isGonnaBe(2);
             });
 
         } catch (error) {
-            await ifWeMight(sir, `doh`, async () => {
+            await ifWe(sir, `doh`, async () => {
                 // hack here I'm getting tired...
                 iReckon(sir, true).asTo(`error: ${extractErrorMsg(error)}`).isGonnaBeFalse();
             });

package/src/sync/sync-peer/sync-peer-http-receiver/sync-peer-http-receiver-v1.mts

@@ -18,6 +18,7 @@ import {
     ConnectSyncPeerHttpReceiverOpts
 } from './sync-peer-http-receiver-types.mjs';
 import { putInSpace, registerNewIbGib } from '../../../witness/space/space-helper.mjs';
+import { KeystoneIbGib_V1 } from '../../../keystone/keystone-types.mjs';
 
 const logalot = GLOBAL_LOG_A_LOT;
 
@@ -72,6 +73,25 @@ export class SyncPeerHttpReceiver_V1
         }
     }
 
+    protected override async postEstablishToReceiver({
+        newSenderIdentity,
+        sessionIdentity,
+    }: {
+        newSenderIdentity: KeystoneIbGib_V1;
+        sessionIdentity: KeystoneIbGib_V1;
+    }): Promise<void> {
+        const lc = `${this.lc}[${this.postEstablishToReceiver.name}]`;
+        try {
+            if (logalot) { console.log(`${lc} starting... (I: f8d7c6b5a4e3d2c1b0a9f8e7d6c5b4a3)`); }
+            throw new Error(`not implemented for HTTP receiver peer yet (E: a1b2c3d4e5f67890abcdef1234567890)`);
+        } catch (error) {
+            console.error(`${lc} ${extractErrorMsg(error)}`);
+            throw error;
+        } finally {
+            if (logalot) { console.log(`${lc} complete.`); }
+        }
+    }
+
     protected async ensureLocalTempSpace(): Promise<IbGibSpaceAny> {
         const lc = `${this.lc}[${this.ensureLocalTempSpace.name}]`;
         try {

package/src/sync/sync-peer/sync-peer-http-sender/sync-peer-http-sender-v1.mts

@@ -14,6 +14,7 @@ import {
     SyncPeerHttpSenderIbGib_V1,
     ConnectSyncPeerHttpSenderOpts
 } from './sync-peer-http-sender-types.mjs';
+import { KeystoneIbGib_V1 } from '../../../keystone/keystone-types.mjs';
 
 const logalot = GLOBAL_LOG_A_LOT;
 
@@ -75,13 +76,32 @@ export class SyncPeerHttpSender_V1
         }
     }
 
+    protected override async postEstablishToReceiver({
+        newSenderIdentity,
+        sessionIdentity,
+    }: {
+        newSenderIdentity: KeystoneIbGib_V1;
+        sessionIdentity: KeystoneIbGib_V1;
+    }): Promise<void> {
+        const lc = `${this.lc}[${this.postEstablishToReceiver.name}]`;
+        try {
+            if (logalot) { console.log(`${lc} starting... (I: a3b2c1d0e9f8e7d6c5b4a3f2e1d0c9b8)`); }
+            throw new Error(`not implemented for HTTP sender peer yet (E: b1c2d3e4f5a67890abcdef1234567890)`);
+        } catch (error) {
+            console.error(`${lc} ${extractErrorMsg(error)}`);
+            throw error;
+        } finally {
+            if (logalot) { console.log(`${lc} complete.`); }
+        }
+    }
+
     protected override async sendContextRequest(context: SyncSagaContextIbGib_V1): Promise<SyncSagaContextIbGib_V1 | undefined> {
         const lc = `${this.lc}[${this.sendContextRequest.name}]`;
         try {
             if (logalot) { console.log(`${lc} starting...`); }
 
-            if (!this.data?.syncEventsRoute) { throw new Error(`data.syncEventsRoute required.`); }
-            if (!this.data?.syncRoute) { throw new Error(`data.syncRoute required.`); }
+            if (!this.data?.syncEventsRoute) { throw new Error(`data.syncEventsRoute required. (E: 0338214dcd6fbe80f93a24e8a3df3226)`); }
+            if (!this.data?.syncRoute) { throw new Error(`data.syncRoute required. (E: eda70809feb81c880c6accf83fc38826)`); }
 
             // 1. Establish SSE connection to `this.data.syncEventsRoute` if not already open
             //    (In a real implementation, you might initialize this elsewhere or ensure it stays reconnecting)
@@ -136,7 +156,7 @@ export class SyncPeerHttpSender_V1
                     });
 
                     if (!response.ok) {
-                        throw new Error(`HTTP Sync Error: ${response.status} ${await response.text()}`);
+                        throw new Error(`HTTP Sync Error: ${response.status} ${await response.text()} (E: f086e8ae65780182b894f638933ca826)`);
                     }
 
                     // 5. Wait for the SSE stream response to resolve with the responseContext

package/src/sync/sync-peer/sync-peer-innerspace/sync-peer-innerspace-v1.mts

@@ -19,7 +19,7 @@ import { ConnectSyncPeerOpts, InitializeSyncPeerOpts } from '../sync-peer-types.
 import { getSyncSagaFrameDependencyGraph, putInSpace_dnasThenNonDnas } from '../../sync-helpers.mjs';
 import { getDependencyGraph } from '../../../common/other/graph-helper.mjs';
 import { SyncStage } from '../../sync-constants.mjs';
-import { toDto } from '../../../common/other/ibgib-helper.mjs';
+import { toDto } from '../../../common/other/ibgib-helper.mjs';import { KeystoneIbGib_V1 } from '../../../keystone/keystone-types.mjs';
 
 
 const logalot = GLOBAL_LOG_A_LOT;
@@ -114,6 +114,43 @@ export class SyncPeerInnerspace_V1 extends SyncPeer_V1<ConnectSyncPeerInnerspace
         }
     }
 
+    /**
+     * Innerspace implementation of the establish receiver post.
+     *
+     * Simulates the domain provider registration by putting `newSenderIdentity`
+     * (I1) and `sessionIdentity` (S) directly into `receiverMetaspace` /
+     * `receiverSpace`. In a real WebSocket peer this would be an HTTP POST.
+     */
+    protected override async postEstablishToReceiver({
+        newSenderIdentity,
+        sessionIdentity,
+    }: {
+        newSenderIdentity: KeystoneIbGib_V1;
+        sessionIdentity: KeystoneIbGib_V1;
+    }): Promise<void> {
+        const lc = `${this.lc}[${this.postEstablishToReceiver.name}]`;
+        try {
+            if (logalot) { console.log(`${lc} starting... (I: a7b8c9d0e1f2a3b4c5d6e7f8a9b0c126)`); }
+
+            if (!this.opts) { throw new Error(`(UNEXPECTED) this.opts falsy? (E: b8c9d0e1f2a3b4c5d6e7f8a9b0c1d226)`); }
+            const { receiverMetaspace, receiverSpace } = this.opts;
+
+            // Post newSenderIdentity (I1) to receiver
+            await receiverMetaspace.put({ ibGib: newSenderIdentity, space: receiverSpace });
+            await receiverMetaspace.registerNewIbGib({ ibGib: newSenderIdentity, space: receiverSpace });
+
+            // Post sessionIdentity (S) to receiver
+            await receiverMetaspace.put({ ibGib: sessionIdentity, space: receiverSpace });
+            await receiverMetaspace.registerNewIbGib({ ibGib: sessionIdentity, space: receiverSpace });
+
+        } catch (error) {
+            console.error(`${lc} ${extractErrorMsg(error)}`);
+            throw error;
+        } finally {
+            if (logalot) { console.log(`${lc} complete.`); }
+        }
+    }
+
     protected async ensureReceiverTempSpace(): Promise<IbGibSpaceAny> {
         const lc = `${this.lc}[${this.ensureReceiverTempSpace.name}]`;
         try {

package/src/sync/sync-peer/sync-peer-types.mts

@@ -9,6 +9,7 @@ import { SyncSagaContextData_V1, SyncSagaContextIbGib_V1, SyncSagaContextRel8ns_
 import { Witness_V1 } from '../../witness/witness-types.mjs';
 import { IbGibSpaceAny } from '../../witness/space/space-base-v1.mjs';
 import { MetaspaceService } from '../../witness/space/metaspace/metaspace-types.mjs';
+import { KeystoneIbGib_V1, KeystonePoolConfig } from '../../keystone/keystone-types.mjs';
 
 /**
  * Data for the SyncPeer witness.
@@ -36,13 +37,29 @@ export interface SyncPeerIbGib_V1 extends IbGib_V1<SyncPeerData_V1, SyncPeerRel8
  * opts used in `connect(opts)`
  */
 export interface ConnectSyncPeerOpts {
+    /**
+     * TODO: sagaId is now also on {@link InitializeSyncPeerOpts} since a peer
+     * is scoped to a single sync saga. Evaluate whether this duplicate is still
+     * needed when implementing the connect phase (Phase 2).
+     */
     sagaId: string;
 }
 
 /**
- * base initialization opts
+ * base initialization opts.
+ *
+ * A sync peer is scoped to exactly one sync saga. A new peer instance must be
+ * created for each `sync(...)` call. Reusing a peer across multiple sagas is
+ * not supported and would compromise the identity security model.
  */
 export interface InitializeSyncPeerOpts {
+    /**
+     * Unique id for the sync saga this peer is servicing.
+     * Generated by `SyncSagaCoordinator.sync()` and passed here so that
+     * `establishSessionIdentity` can derive the session secret via
+     * `KDF(senderSecret, sagaId)`.
+     */
+    sagaId?: string;
     /**
      * reference to the local metaspace
      */
@@ -62,6 +79,44 @@ export interface InitializeSyncPeerOpts {
      * received/created throughout the transaction until commit.
      */
     localTempSpace?: IbGibSpaceAny;
+    /**
+     * The sender's long-lived Domain Keystone (I) — Alice's identity.
+     * Optional; if omitted the sync runs without identity (anonymous).
+     * Must be the current tip frame of I's timeline.
+     *
+     * Both {@link senderIdentity} and {@link fnSenderSecret} must be provided
+     * together or omitted together.
+     */
+    senderIdentity?: KeystoneIbGib_V1;
+    /**
+     * Returns the plaintext secret corresponding to {@link senderIdentity}.
+     * Wrapped in a function to avoid holding the secret in memory longer than needed.
+     *
+     * Both {@link senderIdentity} and {@link fnSenderSecret} must be provided
+     * together or omitted together.
+     */
+    fnSenderSecret?: () => Promise<string>;
+    /**
+     * Pool config for the session keystone's transport connect handshake pool.
+     * Required when {@link senderIdentity} is provided.
+     *
+     * @see {@link POOL_ID_CONNECT}
+     */
+    sessionConnectPoolConfig?: KeystonePoolConfig;
+    /**
+     * Pool config for the session keystone's per-turn signing pool (`sync`).
+     * Required when {@link senderIdentity} is provided.
+     *
+     * @see {@link POOL_ID_SYNC}
+     */
+    sessionSyncPoolConfig?: KeystonePoolConfig;
+    /**
+     * Addresses of the synced domains (ibgibs).
+     * Used during `establishSessionIdentity` to bind the session keystone (S)
+     * strictly to these domains, preventing S from acting as a "blank check"
+     * for unauthorized domains.
+     */
+    targetAddrs?: string[];
 }
 
 /**
@@ -107,6 +162,20 @@ export interface SyncPeerWitness<TInitializeOpts extends InitializeSyncPeerOpts
      */
     payloadIbGibsDomainReceived$: SubjectWitness<IbGib_V1>;
 
+    /**
+     * Pre-connect phase: creates the session keystone (S) locally, evolves
+     * `senderIdentity` (I → I1) with a `sync` claim targeting S, and posts
+     * both to the receiver's domain registry.
+     *
+     * Must be called before `connect()`. No-op if `senderIdentity` was not
+     * provided in {@link InitializeSyncPeerOpts}.
+     *
+     * @returns The session keystone genesis (S^Stjp). The coordinator holds
+     * this reference for the remainder of the saga. The name `newSenderIdentity`
+     * (I1) is intentionally scoped only within this method to avoid confusion.
+     */
+    establishSessionIdentity(): Promise<KeystoneIbGib_V1 | undefined>;
+
     /**
      * Establishes the connection context.
      *