@ibgib/core-gib 0.1.57 → 0.1.59

package/src/sync/sync-conflict-text-merge.respec.mts

@@ -147,7 +147,7 @@ await respecfully(sir, `Text merge (LCS) conflict resolution`, async () => {
             });
             const r1_alpha_source_tipAddr = r1_alpha_sourceKV[alpha_tjpAddr];
             if (!r1_alpha_source_tipAddr) {
-                await ifWeMight(sir, 'r1_alpha_source_tipAddr is falsy?', async () => {
+                await ifWe(sir, 'r1_alpha_source_tipAddr is falsy?', async () => {
                     iReckon(sir, true).asTo('fail').isGonnaBeFalse();
                 });
                 return; /* <<<< returns early */
@@ -160,17 +160,17 @@ await respecfully(sir, `Text merge (LCS) conflict resolution`, async () => {
             });
             const r1_alpha_dest_tipAddr = r1_alpha_destKV[alpha_tjpAddr];
             if (!r1_alpha_dest_tipAddr) {
-                await ifWeMight(sir, 'r1_alpha_dest_tipAddr is falsy?', async () => {
+                await ifWe(sir, 'r1_alpha_dest_tipAddr is falsy?', async () => {
                     iReckon(sir, true).asTo('fail').isGonnaBeFalse();
                 });
                 return; /* <<<< returns early */
             }
 
-            await ifWeMight(sir, 'r1 tip addrs match', async () => {
+            await ifWe(sir, 'r1 tip addrs match', async () => {
                 iReckon(sir, r1_alpha_source_tipAddr).asTo('R1 source/dest have same tip').isGonnaBe(r1_alpha_dest_tipAddr);
             });
 
-            await ifWeMight(sir, 'r1 text synced correctly', async () => {
+            await ifWe(sir, 'r1 text synced correctly', async () => {
                 if (!r1_alpha_dest_tipAddr) {
                     throw new Error(`r1_dest_tipAddr is null/undefined (E: 1a2b3c4d5e6f7a8b9c0d1e2f3a4b5c6d)`);
                 }
@@ -180,7 +180,7 @@ await respecfully(sir, `Text merge (LCS) conflict resolution`, async () => {
                 iReckon(sir, destTipIbGib.data!.text).asTo('Dest has initial text').isGonnaBe(INITIAL_TEXT);
             });
 
-            await ifWeMight(sir, 'r1 dep graphs synced', async () => {
+            await ifWe(sir, 'r1 dep graphs synced', async () => {
                 const [r1_alpha_source_tip] = await getIbGibsFromCache_fallbackToSpaces({
                     addrs: [r1_alpha_source_tipAddr],
                     space: sourceSpace,
@@ -259,7 +259,7 @@ await respecfully(sir, `Text merge (LCS) conflict resolution`, async () => {
     // #endregion r2 dest edits
 
     await respecfully(sir, `r2 verify pre`, async () => {
-        await ifWeMight(sir, 'texts as expected', async () => {
+        await ifWe(sir, 'texts as expected', async () => {
             // before the sync, each side only has their edit. after the sync,
             // both sides should have both prepended and appended text
             iReckon(sir, r2_alpha_v1_source_appendedText.ibGib.data?.text.includes(INITIAL_TEXT)).asTo('alpha source has initial text').isGonnaBeTrue();
@@ -294,14 +294,14 @@ await respecfully(sir, `Text merge (LCS) conflict resolution`, async () => {
         const kv_dest = await senderCoordinator.getKnowledgeMap({ space: destSpace, metaspace, domainIbGibs: [r1_alpha_v0_source.ibGib] });
         const r2_alpha_source_tipAddr = kv_source[alpha_tjpAddr];
         if (!r2_alpha_source_tipAddr) {
-            await ifWeMight(sir, 'r2_alpha_source_tipAddr falsy?', async () => {
+            await ifWe(sir, 'r2_alpha_source_tipAddr falsy?', async () => {
                 iReckon(sir, true).asTo('fails').isGonnaBe(false);
             });
             return; /* <<<< returns early */
         }
         const r2_alpha_dest_tipAddr = kv_dest[alpha_tjpAddr];
         if (!r2_alpha_dest_tipAddr) {
-            await ifWeMight(sir, 'r2_alpha_dest_tipAddr falsy?', async () => {
+            await ifWe(sir, 'r2_alpha_dest_tipAddr falsy?', async () => {
                 iReckon(sir, true).asTo('fails').isGonnaBe(false);
             });
             return; /* <<<< returns early */
@@ -315,11 +315,11 @@ await respecfully(sir, `Text merge (LCS) conflict resolution`, async () => {
             space: sourceSpace,
         });
 
-        await ifWeMight(sir, 'r2 tip addrs match', async () => {
+        await ifWe(sir, 'r2 tip addrs match', async () => {
             iReckon(sir, r2_alpha_source_tipAddr).asTo('alpha').isGonnaBe(r2_alpha_dest_tipAddr);
         });
 
-        await ifWeMight(sir, 'r2 text merged correctly', async () => {
+        await ifWe(sir, 'r2 text merged correctly', async () => {
             // before the sync, each side only has their edit. after the sync,
             // both sides should have both prepended and appended text
             iReckon(sir, r2_alpha_v1_source_appendedText.ibGib.data?.text.includes(INITIAL_TEXT)).asTo('alpha source has initial text').isGonnaBeTrue();
@@ -338,7 +338,7 @@ await respecfully(sir, `Text merge (LCS) conflict resolution`, async () => {
             iReckon(sir, text).asTo('R2 has both prepend and append').isGonnaBe(DEST_PREPEND + INITIAL_TEXT + SOURCE_APPEND);
         });
 
-        await ifWeMight(sir, 'r2 dep graphs synced', async () => {
+        await ifWe(sir, 'r2 dep graphs synced', async () => {
             // alpha's full dep graph should exist on dest
             const depGraph_alpha_source = await getDependencyGraph({
                 ibGib: r2_alpha_source_tip,
@@ -412,7 +412,7 @@ await respecfully(sir, `Text merge (LCS) conflict resolution`, async () => {
     // // #endregion r3 dest edits
 
     // await respecfully(sir, `r3 verify pre`, async () => {
-    //     await ifWeMight(sir, 'dest has alpha after R2 graft', async () => {
+    //     await ifWe(sir, 'dest has alpha after R2 graft', async () => {
     //         const kv = await receiverCoordinator.getKnowledgeMap({ space: destSpace, metaspace, domainIbGibs: [r3_v0_graft_fromDest] });
     //         iReckon(sir, !!kv[alpha_tjpAddr]).asTo('dest has tip').isGonnaBeTrue();
     //     });
@@ -442,11 +442,11 @@ await respecfully(sir, `Text merge (LCS) conflict resolution`, async () => {
     //     const r3_tip_s = kv_s[alpha_tjpAddr];
     //     const r3_tip_d = kv_d[alpha_tjpAddr];
 
-    //     await ifWeMight(sir, 'r3 tip addrs match', async () => {
+    //     await ifWe(sir, 'r3 tip addrs match', async () => {
     //         iReckon(sir, r3_tip_s).asTo('R3 tips match').isGonnaBe(r3_tip_d);
     //     });
 
-    //     await ifWeMight(sir, 'r3 both paragraph edits merged', async () => {
+    //     await ifWe(sir, 'r3 both paragraph edits merged', async () => {
     //         const res = await getFromSpace({ space: sourceSpace, addr: r3_tip_s! });
     //         const tip = res.ibGibs![0] as IbGib_V1<TestData>;
     //         const mergedText = tip.data!.text!;
@@ -465,7 +465,7 @@ await respecfully(sir, `Text merge (LCS) conflict resolution`, async () => {
     //             .isGonnaBeTrue();
     //     });
 
-    //     await ifWeMight(sir, 'r3 dep graphs synced', async () => {
+    //     await ifWe(sir, 'r3 dep graphs synced', async () => {
     //         const [d] = await getIbGibsFromCache_fallbackToSpaces({ addrs: [r3_tip_s!], space: destSpace });
     //         iReckon(sir, d).asTo('exists dest').isGonnaBeTruthy();
     //     });
@@ -499,7 +499,7 @@ await respecfully(sir, `Text merge (LCS) conflict resolution`, async () => {
     // // #endregion r4 dest edits
 
     // await respecfully(sir, `r4 verify pre`, async () => {
-    //     await ifWeMight(sir, 'dest has alpha after R3 graft', async () => {
+    //     await ifWe(sir, 'dest has alpha after R3 graft', async () => {
     //         // TODO: Verify pre-sync state
     //     });
     // });
@@ -509,16 +509,16 @@ await respecfully(sir, `Text merge (LCS) conflict resolution`, async () => {
     // // TODO: Add sync operation
 
     // await respecfully(sir, `r4 verify post`, async () => {
-    //     await ifWeMight(sir, 'r4 tip addrs match', async () => {
+    //     await ifWe(sir, 'r4 tip addrs match', async () => {
     //         // TODO: Verify tips match
     //     });
 
-    //     await ifWeMight(sir, 'r4 LCS merged both word changes', async () => {
+    //     await ifWe(sir, 'r4 LCS merged both word changes', async () => {
     //         // TODO: Verify text has both source and dest word changes
     //         // TODO: Verify LCS algorithm preserved both edits correctly
     //     });
 
-    //     await ifWeMight(sir, 'r4 dep graphs synced', async () => {
+    //     await ifWe(sir, 'r4 dep graphs synced', async () => {
     //         // TODO: Verify dep graphs
     //     });
     // });
@@ -553,7 +553,7 @@ await respecfully(sir, `Text merge (LCS) conflict resolution`, async () => {
     // // #endregion r5 dest edits
 
     // await respecfully(sir, `r5 verify pre`, async () => {
-    //     await ifWeMight(sir, 'dest has alpha after R4 graft', async () => {
+    //     await ifWe(sir, 'dest has alpha after R4 graft', async () => {
     //         // TODO: Verify pre-sync state
     //     });
     // });
@@ -563,24 +563,24 @@ await respecfully(sir, `Text merge (LCS) conflict resolution`, async () => {
     // // TODO: Add sync operation
 
     // await respecfully(sir, `r5 verify post`, async () => {
-    //     await ifWeMight(sir, 'r5 tip addrs match', async () => {
+    //     await ifWe(sir, 'r5 tip addrs match', async () => {
     //         // TODO: Verify tips match
     //     });
 
-    //     await ifWeMight(sir, 'r5 text field merged', async () => {
+    //     await ifWe(sir, 'r5 text field merged', async () => {
     //         // TODO: Verify text field has both source and dest changes
     //     });
 
-    //     await ifWeMight(sir, 'r5 description field merged', async () => {
+    //     await ifWe(sir, 'r5 description field merged', async () => {
     //         // TODO: Verify description field has both source and dest changes
     //     });
 
-    //     await ifWeMight(sir, 'r5 both fields independently LCS-merged', async () => {
+    //     await ifWe(sir, 'r5 both fields independently LCS-merged', async () => {
     //         // TODO: Verify each field was merged independently
     //         // TODO: Ensure one field's merge didn't affect the other
     //     });
 
-    //     await ifWeMight(sir, 'r5 dep graphs synced', async () => {
+    //     await ifWe(sir, 'r5 dep graphs synced', async () => {
     //         // TODO: Verify dep graphs
     //     });
     // });

package/src/sync/sync-helpers.mts

@@ -20,6 +20,8 @@ import { SyncSagaConflictInfo, SyncSagaMessageCommitData_V1, SyncSagaMessageDelt
 import { getIbGibsFromCache_fallbackToSpaces } from "../common/other/ibgib-helper.mjs";
 import { isGraftInfo } from "./graft-info/graft-info-helpers.mjs";
 import { GRAFT_ORPHAN_REL8N_NAME } from "./graft-info/graft-info-constants.mjs";
+import { deriveKey } from "../keystone/kdf/kdf-helpers.mjs";
+import { KdfStrategy } from "../keystone/kdf/kdf-constants.mjs";
 
 const logalot = GLOBAL_LOG_A_LOT;
 
@@ -70,7 +72,7 @@ export async function parseSyncIb({
         ] = parts;
 
         if (atom !== SYNC_ATOM) {
-            throw new Error(`Atom mismatch. Expected ${SYNC_ATOM}. Got ${atom}.`);
+            throw new Error(`Atom mismatch. Expected ${SYNC_ATOM}. Got ${atom}. (E: cc6a48143be7de70bafbfdbbc0776826)`);
         }
 
         return { atom, uuid };
@@ -527,3 +529,51 @@ export async function getAllOrphanedAddresses({
         if (logalot) { console.log(`${lc} complete.`); }
     }
 }
+
+/**
+ * Derives a saga-specific session secret from the sender's master secret.
+ *
+ * Uses `KDF(senderSecret, sagaId)` via the `recursive_salt_wrap` strategy so
+ * the session secret is:
+ * - **Deterministic**: same inputs → same output (needed for the receiver to
+ *   independently reproduce the session keystone genesis).
+ * - **Saga-bound**: different sagaId → completely different sessionSecret →
+ *   completely different session keystone S.
+ * - **One-way**: knowing S cannot recover `senderSecret`.
+ *
+ * @param senderSecret - The sender's plaintext master secret (never transmitted).
+ * @param sagaId       - The unique UUID for this sync saga.
+ * @returns The derived session secret string.
+ */
+export async function deriveSessionSecret({
+    senderSecret,
+    sagaId,
+}: {
+    senderSecret: string;
+    sagaId: string;
+}): Promise<string> {
+    const lc = `[${deriveSessionSecret.name}]`;
+    try {
+        if (logalot) { console.log(`${lc} starting... (I: 0de03f8dcd3e32f1fca244e8f2a8a826)`); }
+
+        if (!senderSecret) { throw new Error(`(UNEXPECTED) senderSecret falsy? (E: 8ce053fe59825a6678713128953b9d26)`); }
+        if (!sagaId) { throw new Error(`(UNEXPECTED) sagaId falsy? (E: 3a17e0c1b2f849de8a42cd15b8ee6826)`); }
+
+        const sessionSecret = await deriveKey({
+            masterSecret: senderSecret,
+            kdfOpts: {
+                strategy: KdfStrategy.recursive_salt_wrap,
+                salt: sagaId,
+                rounds: 10000,
+                algorithm: 'SHA-256',
+            }
+        });
+
+        return sessionSecret;
+    } catch (error) {
+        console.error(`${lc} ${extractErrorMsg(error)}`);
+        throw error;
+    } finally {
+        if (logalot) { console.log(`${lc} complete.`); }
+    }
+}

package/src/sync/sync-innerspace-constants.respec.mts

@@ -25,7 +25,7 @@ const lc = `[sync-innerspace-constants.respec]`;
 
 await respecfully(sir, `Sync Constants (No TJP)`, async () => {
 
-    await ifWeMight(sir, `Verify Constants Sync`, async () => {
+    await ifWe(sir, `Verify Constants Sync`, async () => {
         // 1. Setup Spaces
         const metaspace = new Metaspace_Innerspace(undefined);
         await metaspace.initialize({

package/src/sync/sync-innerspace-deep-updates.respec.mts

@@ -127,7 +127,7 @@ await respecfully(sir, `Sync InnerSpaces (Deep Updates)`, async () => {
         // 5. Verify Dest
         console.log(`${lc} Verifying Destination...`);
 
-        await ifWeMight(sir, `verify deep timeline present`, async () => {
+        await ifWe(sir, `verify deep timeline present`, async () => {
             // Verify Tip (V2)
             const getV2 = await getFromSpace({ space: destSpace, addr: addrV2 });
             iReckon(sir, getV2.success).asTo('Tip V2 present').isGonnaBeTrue();

package/src/sync/sync-innerspace-dest-ahead.respec.mts

@@ -116,7 +116,7 @@ await respecfully(sir, `Sync InnerSpaces (Dest Ahead)`, async () => {
             return resGet.success && resGet.ibGibs && resGet.ibGibs.length === 1;
         }
 
-        await ifWeMight(sir, 'verify setup', async () => {
+        await ifWe(sir, 'verify setup', async () => {
             // Ensure V2 is ONLY in Dest (it is, per `space: destSpace`)
             // Ensure Source does NOT have V2
             iReckon(sir, await fnAddrExistsInSpace(addrV0, sourceSpace)).asTo('source has V0').isGonnaBeTrue();
@@ -154,7 +154,7 @@ await respecfully(sir, `Sync InnerSpaces (Dest Ahead)`, async () => {
         // 5. Verify Sync (v2 should be in both source and dest now)
         console.log(`${lc} Verifying Sync...`);
 
-        await ifWeMight(sir, `verify v2 now also in source`, async () => {
+        await ifWe(sir, `verify v2 now also in source`, async () => {
             // Verify Tip (V2)
 
             iReckon(sir, await fnAddrExistsInSpace(addrV0, sourceSpace)).asTo('source has V0').isGonnaBeTrue();
@@ -166,7 +166,7 @@ await respecfully(sir, `Sync InnerSpaces (Dest Ahead)`, async () => {
 
         });
 
-        await ifWeMight(sir, `dependency graphs the same`, async () => {
+        await ifWe(sir, `dependency graphs the same`, async () => {
 
             const sourceDepGraph = await getDependencyGraph({
                 ibGibAddr: addrV2,

package/src/sync/sync-innerspace-multiple-timelines.respec.mts

@@ -129,7 +129,7 @@ await respecfully(sir, `Sync InnerSpaces (Multiple Timelines)`, async () => {
         // 5. Verify Dest
         console.log(`${lc} Verifying Destination...`);
 
-        await ifWeMight(sir, `verify timelines present`, async () => {
+        await ifWe(sir, `verify timelines present`, async () => {
             // Verify A
             const getA = await getFromSpace({ space: destSpace, addr: addrA });
             iReckon(sir, getA.success).asTo('Timeline A present').isGonnaBeTrue();

package/src/sync/sync-innerspace-partial-update.respec.mts

@@ -98,7 +98,7 @@ await respecfully(sir, `Sync InnerSpaces (Partial Update)`, async () => {
         // Transfer Root & V1 to Dest (Simulate previous sync)
         await putInSpace({ space: destSpace, ibGibs: [root, v1] });
 
-        await ifWeMight(sir, 'verify setup', async () => {
+        await ifWe(sir, 'verify setup', async () => {
             // Verify Dest has V1
             const checkV1 = await getFromSpace({ space: destSpace, addr: getIbGibAddr({ ibGib: v1 }) });
             iReckon(sir, checkV1.success).asTo('Dest has V1').isGonnaBeTrue();
@@ -136,7 +136,7 @@ await respecfully(sir, `Sync InnerSpaces (Partial Update)`, async () => {
         // 5. Verify Dest (Should now have V2)
         console.log(`${lc} Verifying Destination...`);
 
-        await ifWeMight(sir, `verify dest updated`, async () => {
+        await ifWe(sir, `verify dest updated`, async () => {
             // Verify Tip (V2)
             const getV2 = await getFromSpace({ space: destSpace, addr: addrV2 });
             iReckon(sir, getV2.success).asTo('V2 present in Dest').isGonnaBeTrue();

package/src/sync/sync-innerspace.respec.mts

@@ -152,18 +152,18 @@ await respecfully(sir, `Sync InnerSpaces`, async () => {
         try {
             const getChildInDest = await getFromSpace({ space: destSpace, addr: childAddr });
 
-            await ifWeMight(sir, `verify success getChildInDest`, async () => {
+            await ifWe(sir, `verify success getChildInDest`, async () => {
                 iReckon(sir, getChildInDest.success).asTo('Child present in Dest').isGonnaBeTrue();
             });
 
-            await ifWeMight(sir, `verify getChildInDest.ibGibs`, async () => {
+            await ifWe(sir, `verify getChildInDest.ibGibs`, async () => {
                 const firstChild = getChildInDest.ibGibs?.[0];
                 if (logalot) { console.log(`${lc} firstChild: ${pretty(firstChild)}`); }
                 iReckon(sir, firstChild?.data?.n).asTo('Child content matches').isGonnaBe(2);
             });
 
         } catch (error) {
-            await ifWeMight(sir, `doh`, async () => {
+            await ifWe(sir, `doh`, async () => {
                 // hack here I'm getting tired...
                 iReckon(sir, true).asTo(`error: ${extractErrorMsg(error)}`).isGonnaBeFalse();
             });

package/src/sync/sync-peer/sync-peer-http-receiver/sync-peer-http-receiver-v1.mts

@@ -8,7 +8,7 @@ import { IbGib_V1 } from '@ibgib/ts-gib/dist/V1/types.mjs';
 import { GLOBAL_LOG_A_LOT } from '../../../core-constants.mjs';
 import { SyncPeer_V1 } from '../sync-peer-v1.mjs';
 import { SyncSagaContextIbGib_V1 } from '../../sync-saga-context/sync-saga-context-types.mjs';
-import { authenticateContext } from '../../sync-saga-context/sync-saga-context-helpers.mjs';
+import { authenticateContextIntrinsically } from '../../sync-saga-context/sync-saga-context-helpers.mjs';
 import { IbGibSpaceAny } from '../../../witness/space/space-base-v1.mjs';
 import {
     InitializeSyncPeerHttpReceiverOpts,
@@ -18,6 +18,7 @@ import {
     ConnectSyncPeerHttpReceiverOpts
 } from './sync-peer-http-receiver-types.mjs';
 import { putInSpace, registerNewIbGib } from '../../../witness/space/space-helper.mjs';
+import { KeystoneIbGib_V1 } from '../../../keystone/keystone-types.mjs';
 
 const logalot = GLOBAL_LOG_A_LOT;
 
@@ -72,6 +73,25 @@ export class SyncPeerHttpReceiver_V1
         }
     }
 
+    protected override async postEstablishToReceiver({
+        newSenderIdentity,
+        sessionIdentity,
+    }: {
+        newSenderIdentity: KeystoneIbGib_V1;
+        sessionIdentity: KeystoneIbGib_V1;
+    }): Promise<void> {
+        const lc = `${this.lc}[${this.postEstablishToReceiver.name}]`;
+        try {
+            if (logalot) { console.log(`${lc} starting... (I: f8d7c6b5a4e3d2c1b0a9f8e7d6c5b4a3)`); }
+            throw new Error(`not implemented for HTTP receiver peer yet (E: a1b2c3d4e5f67890abcdef1234567890)`);
+        } catch (error) {
+            console.error(`${lc} ${extractErrorMsg(error)}`);
+            throw error;
+        } finally {
+            if (logalot) { console.log(`${lc} complete.`); }
+        }
+    }
+
     protected async ensureLocalTempSpace(): Promise<IbGibSpaceAny> {
         const lc = `${this.lc}[${this.ensureLocalTempSpace.name}]`;
         try {
@@ -140,13 +160,16 @@ export class SyncPeerHttpReceiver_V1
 
             // Put control ibgibs into durable space
             const allControlIbGibs = [context, ...payloadIbGibsControl];
+            if (context.signedSessionIdentity) {
+                allControlIbGibs.push(context.signedSessionIdentity);
+            }
             for (const ibGib of allControlIbGibs) {
                 await putInSpace({ space: localSpace, ibGibs: [ibGib] });
                 await registerNewIbGib({ space: localSpace, ibGib });
             }
 
             // Auth verification (Bill architecture: turn-based context signing)
-            const authErrors = await authenticateContext({
+            const authErrors = await authenticateContextIntrinsically({
                 context,
                 space: localSpace,
             });
@@ -166,6 +189,7 @@ export class SyncPeerHttpReceiver_V1
                 metaspace: localMetaspace,
                 mySpace: localSpace,
                 myTempSpace: localTempSpace,
+                peer: this,
             });
 
             return responseCtx || undefined;

package/src/sync/sync-peer/sync-peer-http-sender/sync-peer-http-sender-v1.mts

@@ -14,6 +14,7 @@ import {
     SyncPeerHttpSenderIbGib_V1,
     ConnectSyncPeerHttpSenderOpts
 } from './sync-peer-http-sender-types.mjs';
+import { KeystoneIbGib_V1 } from '../../../keystone/keystone-types.mjs';
 
 const logalot = GLOBAL_LOG_A_LOT;
 
@@ -75,13 +76,32 @@ export class SyncPeerHttpSender_V1
         }
     }
 
+    protected override async postEstablishToReceiver({
+        newSenderIdentity,
+        sessionIdentity,
+    }: {
+        newSenderIdentity: KeystoneIbGib_V1;
+        sessionIdentity: KeystoneIbGib_V1;
+    }): Promise<void> {
+        const lc = `${this.lc}[${this.postEstablishToReceiver.name}]`;
+        try {
+            if (logalot) { console.log(`${lc} starting... (I: a3b2c1d0e9f8e7d6c5b4a3f2e1d0c9b8)`); }
+            throw new Error(`not implemented for HTTP sender peer yet (E: b1c2d3e4f5a67890abcdef1234567890)`);
+        } catch (error) {
+            console.error(`${lc} ${extractErrorMsg(error)}`);
+            throw error;
+        } finally {
+            if (logalot) { console.log(`${lc} complete.`); }
+        }
+    }
+
     protected override async sendContextRequest(context: SyncSagaContextIbGib_V1): Promise<SyncSagaContextIbGib_V1 | undefined> {
         const lc = `${this.lc}[${this.sendContextRequest.name}]`;
         try {
             if (logalot) { console.log(`${lc} starting...`); }
 
-            if (!this.data?.syncEventsRoute) { throw new Error(`data.syncEventsRoute required.`); }
-            if (!this.data?.syncRoute) { throw new Error(`data.syncRoute required.`); }
+            if (!this.data?.syncEventsRoute) { throw new Error(`data.syncEventsRoute required. (E: 0338214dcd6fbe80f93a24e8a3df3226)`); }
+            if (!this.data?.syncRoute) { throw new Error(`data.syncRoute required. (E: eda70809feb81c880c6accf83fc38826)`); }
 
             // 1. Establish SSE connection to `this.data.syncEventsRoute` if not already open
             //    (In a real implementation, you might initialize this elsewhere or ensure it stays reconnecting)
@@ -136,7 +156,7 @@ export class SyncPeerHttpSender_V1
                     });
 
                     if (!response.ok) {
-                        throw new Error(`HTTP Sync Error: ${response.status} ${await response.text()}`);
+                        throw new Error(`HTTP Sync Error: ${response.status} ${await response.text()} (E: f086e8ae65780182b894f638933ca826)`);
                     }
 
                     // 5. Wait for the SSE stream response to resolve with the responseContext

package/src/sync/sync-peer/sync-peer-innerspace/sync-peer-innerspace-types.mts

@@ -45,7 +45,7 @@ export interface SyncPeerInnerspaceOptions {
      */
     receiverTempSpace?: IbGibSpaceAny;
     /**
-     * The sender coordinator, used for authentication-related (k eystones).
+     * The sender coordinator, used for authentication-related (keystones).
      */
     senderCoordinator?: SyncSagaCoordinator;
 }

package/src/sync/sync-peer/sync-peer-innerspace/sync-peer-innerspace-v1.mts

@@ -12,14 +12,14 @@ import { SyncPeer_V1 } from '../sync-peer-v1.mjs';
 import { putInSpace, registerNewIbGib } from '../../../witness/space/space-helper.mjs';
 import { SyncSagaContextIbGib_V1, } from '../../sync-saga-context/sync-saga-context-types.mjs';
 import { SyncPeerInnerspaceData_V1, SyncPeerInnerspaceIbGib_V1, SyncPeerInnerspaceOptions, SyncPeerInnerspaceRel8ns_V1 } from './sync-peer-innerspace-types.mjs';
-import { authenticateContext } from '../../sync-saga-context/sync-saga-context-helpers.mjs';
+import { authenticateContextIntrinsically } from '../../sync-saga-context/sync-saga-context-helpers.mjs';
 import { MetaspaceService } from '../../../witness/space/metaspace/metaspace-types.mjs';
 import { SyncSagaCoordinator } from '../../sync-saga-coordinator.mjs';
 import { ConnectSyncPeerOpts, InitializeSyncPeerOpts } from '../sync-peer-types.mjs';
 import { getSyncSagaFrameDependencyGraph, putInSpace_dnasThenNonDnas } from '../../sync-helpers.mjs';
 import { getDependencyGraph } from '../../../common/other/graph-helper.mjs';
 import { SyncStage } from '../../sync-constants.mjs';
-import { toDto } from '../../../common/other/ibgib-helper.mjs';
+import { toDto } from '../../../common/other/ibgib-helper.mjs'; import { KeystoneIbGib_V1 } from '../../../keystone/keystone-types.mjs';
 
 
 const logalot = GLOBAL_LOG_A_LOT;
@@ -52,7 +52,7 @@ export interface InitializeSyncPeerInnerspaceOpts extends InitializeSyncPeerOpts
      */
     receiverTempSpace?: IbGibSpaceAny;
     /**
-     * The sender coordinator, used for authentication-related (k eystones).
+     * The sender coordinator, used for authentication-related (keystones).
      */
     senderCoordinator?: SyncSagaCoordinator;
 }
@@ -114,6 +114,43 @@ export class SyncPeerInnerspace_V1 extends SyncPeer_V1<ConnectSyncPeerInnerspace
         }
     }
 
+    /**
+     * Innerspace implementation of the establish receiver post.
+     *
+     * Simulates the domain provider registration by putting `newSenderIdentity`
+     * (I1) and `sessionIdentity` (S) directly into `receiverMetaspace` /
+     * `receiverSpace`. In a real WebSocket peer this would be an HTTP POST.
+     */
+    protected override async postEstablishToReceiver({
+        newSenderIdentity,
+        sessionIdentity,
+    }: {
+        newSenderIdentity: KeystoneIbGib_V1;
+        sessionIdentity: KeystoneIbGib_V1;
+    }): Promise<void> {
+        const lc = `${this.lc}[${this.postEstablishToReceiver.name}]`;
+        try {
+            if (logalot) { console.log(`${lc} starting... (I: a7b8c9d0e1f2a3b4c5d6e7f8a9b0c126)`); }
+
+            if (!this.opts) { throw new Error(`(UNEXPECTED) this.opts falsy? (E: b8c9d0e1f2a3b4c5d6e7f8a9b0c1d226)`); }
+            const { receiverMetaspace, receiverSpace } = this.opts;
+
+            // Post newSenderIdentity (I1) to receiver
+            await receiverMetaspace.put({ ibGib: newSenderIdentity, space: receiverSpace });
+            await receiverMetaspace.registerNewIbGib({ ibGib: newSenderIdentity, space: receiverSpace });
+
+            // Post sessionIdentity (S) to receiver
+            await receiverMetaspace.put({ ibGib: sessionIdentity, space: receiverSpace });
+            await receiverMetaspace.registerNewIbGib({ ibGib: sessionIdentity, space: receiverSpace });
+
+        } catch (error) {
+            console.error(`${lc} ${extractErrorMsg(error)}`);
+            throw error;
+        } finally {
+            if (logalot) { console.log(`${lc} complete.`); }
+        }
+    }
+
     protected async ensureReceiverTempSpace(): Promise<IbGibSpaceAny> {
         const lc = `${this.lc}[${this.ensureReceiverTempSpace.name}]`;
         try {
@@ -168,6 +205,7 @@ export class SyncPeerInnerspace_V1 extends SyncPeer_V1<ConnectSyncPeerInnerspace
 
             const { sagaFrame } = context;
 
+
             // The context has already been validated, authenticated and authorized at this point.
 
             // #region sanity validation assertions
@@ -205,8 +243,7 @@ export class SyncPeerInnerspace_V1 extends SyncPeer_V1<ConnectSyncPeerInnerspace
             const msg = msgStones[0];
             if (!msg.data) { throw new Error(`(UNEXPECTED) sync saga message ibgib.data falsy? (E: 61ec18743988ad3cbab2072d1dd69826)`); }
 
-
-            // this is where we did the i dentityIbGibs
+            // this is where we did the identityIbGibs
 
             // send the context itself, then send the payload ibgibs separately.
             // in this innerspace, this just means putting the control ibgibs
@@ -220,6 +257,9 @@ export class SyncPeerInnerspace_V1 extends SyncPeer_V1<ConnectSyncPeerInnerspace
             const payloadIbGibsControl = [
                 msg, sagaFrame, context
             ].map(x => toDto({ ibGib: x }));
+            if (context.signedSessionIdentity) {
+                payloadIbGibsControl.push(toDto({ ibGib: context.signedSessionIdentity }));
+            }
             if (logalot) { console.log(`${lc} putting into receiverSpace: ${receiverSpace.ib} (I: 1ba18b14a26bdd0e7800da4812898826)`); }
             await putInSpace({
                 ibGibs: payloadIbGibsControl,
@@ -251,20 +291,14 @@ export class SyncPeerInnerspace_V1 extends SyncPeer_V1<ConnectSyncPeerInnerspace
             // the payload ibgibs. so the receiver coordinator should be ready
             // to do its thing.
 
-            // Auth verification (Bill architecture: turn-based context signing)
-            const authErrors = await authenticateContext({
-                context,
-                space: receiverSpace,
-            });
-            if (authErrors.length > 0) {
-                throw new Error(`Context authentication failed: ${authErrors.join(', ')} (E: d34b8ad98d84e1ba8d8f7facd288826)`);
-            }
+            // NOTE: We have already validated/authenticated/authorized context at this point, as we called it before invoking this method (sendContextRequest)
 
             const responseCtx = await receiverCoordinator.continueSync({
                 sagaContext: context,
                 metaspace: receiverMetaspace,
                 mySpace: receiverSpace,
                 myTempSpace: receiverTempSpace,
+                peer: this,
             });
 
             if (logalot) { console.log(`${lc} receiverCoordinator.continueSync responseCtx: ${responseCtx ? pretty(responseCtx) : 'undefined'} (I: fb2831decde1f2b3589021f85ab19126)`); }