@ibgib/core-gib 0.1.58 → 0.1.60

package/src/sync/sync-saga-coordinator.mts

@@ -32,7 +32,7 @@ import {
     HandleSagaResponseContextResult,
     SyncSagaFrameDependencyGraph,
 } from "./sync-types.mjs";
-import { getSyncSagaFrameOrigin, getFullSyncSagaHistory, getSyncIb, getTempSpaceName, isPastFrame, putInSpace_dnasThenNonDnas, validateFullSyncSagaHistory, getAllOrphanedAddresses, getFinalConflictsInfo } from "./sync-helpers.mjs";
+import { getSyncSagaFrameOrigin, getFullSyncSagaHistory, getSyncIb, getTempSpaceName, isPastFrame, putInSpace_dnasThenNonDnas, validateFullSyncSagaHistory, getAllOrphanedAddresses, getFinalConflictsInfo, getSyncSagaFrameDependencyGraph } from "./sync-helpers.mjs";
 import { getDeltaDependencyGraph, getDependencyGraph, toFlatGraph } from "../common/other/graph-helper.mjs";
 import {
     SyncSagaMessageData_V1, SyncSagaMessageInitData_V1,
@@ -44,7 +44,7 @@ import {
 import { getSyncSagaMessageIb } from "./sync-saga-message/sync-saga-message-helpers.mjs";
 import { SYNC_SAGA_MSG_ATOM } from "./sync-saga-message/sync-saga-message-constants.mjs";
 import { SyncSagaInfo } from "./sync-types.mjs";
-import { splitPerTjpAndOrDna, getTimelinesGroupedByTjp, isIbGib, getIbGibsFromCache_fallbackToSpaces } from "../common/other/ibgib-helper.mjs";
+import { splitPerTjpAndOrDna, getTimelinesGroupedByTjp, isIbGib, getIbGibsFromCache_fallbackToSpaces, toDto, getTjpAddr } from "../common/other/ibgib-helper.mjs";
 import { SyncPeerWitness } from "./sync-peer/sync-peer-types.mjs";
 import { SyncSagaContextData_V1, SyncSagaContextIbGib_V1, SyncSagaContextRel8ns_V1, } from "./sync-saga-context/sync-saga-context-types.mjs";
 import { getSyncSagaContextIb, validateContextAndSagaFrame } from "./sync-saga-context/sync-saga-context-helpers.mjs";
@@ -66,10 +66,11 @@ import {
     POOL_ID_CONNECT, POOL_ID_SYNC, KEYSTONE_VERB_CONNECT, KEYSTONE_VERB_SYNC
 } from "../keystone/keystone-constants.mjs";
 import { KeystonePoolConfig, KeystoneReplenishStrategy } from "../keystone/keystone-types.mjs";
+import { SyncPeer_V1 } from "./sync-peer/sync-peer-v1.mjs";
 
 
-const logalot = GLOBAL_LOG_A_LOT;
-const logalotControlDomain = false;
+const logalot = GLOBAL_LOG_A_LOT || true;
+const logalotControlDomain = true;
 const lcControlDomain = '[ControlDomain]';
 
 /**
@@ -253,7 +254,7 @@ export class SyncSagaCoordinator {
                 } as any);
 
                 // ESTABLISH SESSION IDENTITY (pre-connect, if identity provided)
-                const sessionIdentity = await peer.establishSessionIdentity();
+                await peer.establishSessionIdentity();
 
                 // CONNECT PEER (if needed)
                 await peer.connect({ sagaId });
@@ -264,6 +265,7 @@ export class SyncSagaCoordinator {
                     domainIbGibs,
                     conflictStrategy,
                     metaspace, localSpace, tempSpace,
+                    peer,
                 });
 
                 // KICK OFF THE PING-PONG SAGA LOOP (FSM)
@@ -309,6 +311,7 @@ export class SyncSagaCoordinator {
         mySpace,
         myTempSpace,
         metaspace,
+        peer,
     }: {
         sagaContext: SyncSagaContextIbGib_V1,
         /**
@@ -320,6 +323,10 @@ export class SyncSagaCoordinator {
          */
         myTempSpace: IbGibSpaceAny,
         metaspace: MetaspaceService,
+        /**
+         * the peer that is continuing the sync
+         */
+        peer: SyncPeer_V1,
     }): Promise<SyncSagaContextIbGib_V1 | null> {
         const lc = `${this.lc}[${this.continueSync.name}]`;
         try {
@@ -357,6 +364,9 @@ export class SyncSagaCoordinator {
                 localSpace: mySpace,
                 payloadIbGibsDomain,
                 metaspace,
+                sessionIdentityAddr: sagaContext.rel8ns?.sessionIdentity?.[0],
+                peer,
+                skipSign: true,
             });
 
 
@@ -468,6 +478,8 @@ export class SyncSagaCoordinator {
                 payloadIbGibsDomain: nextDomainIbGibs,
                 localSpace,
                 metaspace,
+                sessionIdentityAddr: peer.currentSessionIdentityAddr,
+                peer,
             });
 
             // #region Log what we're sending
@@ -521,6 +533,16 @@ export class SyncSagaCoordinator {
                 await validateContextAndSagaFrame({ context: responseCtx });
             if (contextAndSagaFrameValidationErrors.length > 0) { throw new Error(`contextAndSagaFrameValidationErrors: ${contextAndSagaFrameValidationErrors} (E: 6eebe8e7fa437c00a8cde3ada3c66826)`); }
 
+            // Turn-by-turn continuation & identity checks
+            const returnContextErrors = await this.validateReturnContext({
+                requestCtx,
+                responseCtx,
+                localSpace,
+            });
+            if (returnContextErrors.length > 0) {
+                throw new Error(`validateReturnContext errors: ${returnContextErrors.join(', ')} (E: cb8a023b9d0728cceb09fa3da0bb8226)`);
+            }
+
             // Extract expected domain addresses from response context
             const responsePayloadAddrsDomain = responseCtx.data[SYNC_SAGA_PAYLOAD_ADDRS_DOMAIN] as string[] || [];
 
@@ -612,6 +634,9 @@ export class SyncSagaCoordinator {
         payloadIbGibsDomain,
         metaspace,
         localSpace,
+        sessionIdentityAddr,
+        peer,
+        skipSign,
     }: {
         /**
          * The main saga frame (Init, Ack, etc.).
@@ -631,6 +656,22 @@ export class SyncSagaCoordinator {
          * execution POV) right when we create it.
          */
         localSpace: IbGibSpaceAny;
+        sessionIdentityAddr?: string;
+        peer: SyncPeerWitness;
+        /**
+         * If true, will not sign context.
+         *
+         * For now, this should be true when we call {@link continueSync}, as
+         * the receiver does not sign any keystones.
+         *
+         * ## intent
+         *
+         * In V1, our receiving endpoint is not signing the context, rather, it
+         * is just returning its response context ibgib with the same session
+         * identity addr. We are thus trusting the security of the transport
+         * itself for now.
+         */
+        skipSign?: boolean,
     }): Promise<SyncSagaContextIbGib_V1> {
         const lc = `[${this.createSyncSagaContext.name}]`;
         try {
@@ -664,6 +705,20 @@ export class SyncSagaCoordinator {
                 sagaFrame: [getIbGibAddr({ ibGib: sagaFrame })],
             };
 
+            let sessionIdentity: KeystoneIbGib_V1 | undefined = undefined;
+            if (sessionIdentityAddr) {
+                sessionIdentityAddr =
+                    await metaspace.getLatestAddr({ addr: sessionIdentityAddr, space: localSpace }) ?? sessionIdentityAddr;
+                const resGet = await getFromSpace({ addr: sessionIdentityAddr, space: localSpace });
+                if (resGet.success && resGet.ibGibs?.length === 1) {
+                    sessionIdentity = resGet.ibGibs![0]! as KeystoneIbGib_V1;
+                    rel8ns.sessionIdentity = [sessionIdentityAddr];
+                } else {
+                    debugger; // what stage of the algo is this? which side?
+                    throw new Error(`Couldn't get sessionIdentityAddr (${sessionIdentityAddr}) in space: ${localSpace.ib} (E: 5c29e80d68dbd1749866c358be093826)`);
+                }
+            }
+
             // Generate standard ib
             const ib = await getSyncSagaContextIb({ data });
 
@@ -674,8 +729,16 @@ export class SyncSagaCoordinator {
                 rel8ns,
             }) as SyncSagaContextIbGib_V1;
 
-            // put/register immediately. Note that contextIbGib at this point is
-            // pure DTO, i.e., only ib, gib, data, rel8ns props.
+            const contextAddr = getIbGibAddr({ ibGib: contextIbGib });
+            let signedSessionIdentity: KeystoneIbGib_V1 | undefined = undefined;
+            if (sessionIdentity && !skipSign) {
+                // signing context persists and registers the new keystone
+                // using the peer's localMetaspace and localSpace
+                signedSessionIdentity = await peer.signContext({ contextAddr });
+            }
+
+            // put/register context immediately in local space (currently is a
+            // DTO) but we don't want a broadcast on the metaspace
             await putInSpace({ ibGib: contextIbGib, space: localSpace, });
             await registerNewIbGib({
                 ibGib: contextIbGib,
@@ -683,11 +746,24 @@ export class SyncSagaCoordinator {
                 fnBroadcast: undefined,
             });
 
-            // Attach actual ibgibs for transport (not pure DTO now)
+            // Attach actual ibgibs for transport
             contextIbGib.sagaFrame = sagaFrame;
+
+            const { msgStones } = await getSyncSagaFrameDependencyGraph({
+                sagaIbGib: sagaFrame,
+                localSpace: localSpace,
+            });
+            if (msgStones.length !== 1) {
+                throw new Error(`(UNEXPECTED) msgStones.length !== 1 inside createSyncSagaContext? (E: a98165cf46ab4e82b7bd5e45a273b826)`);
+            }
+            contextIbGib.sagaFrameMsg = msgStones[0];
+
             if (payloadIbGibsDomain && payloadIbGibsDomain.length > 0) {
                 contextIbGib.payloadIbGibsDomain = payloadIbGibsDomain;
             }
+            if (signedSessionIdentity) {
+                contextIbGib.signedSessionIdentity = signedSessionIdentity;
+            }
 
             return contextIbGib;
         } catch (error) {
@@ -817,6 +893,7 @@ export class SyncSagaCoordinator {
         metaspace,
         localSpace,
         tempSpace,
+        peer,
     }: {
         sagaId: string,
         domainIbGibs: IbGib_V1[],
@@ -824,6 +901,7 @@ export class SyncSagaCoordinator {
         metaspace: MetaspaceService,
         localSpace: IbGibSpaceAny,
         tempSpace: IbGibSpaceAny,
+        peer: SyncPeerWitness,
     }): Promise<{ initFrame: SyncIbGib_V1, initDomainGraph: { [addr: string]: IbGib_V1 } }> {
         const lc = `${this.lc}[${this.createInitFrame.name}]`;
         try {
@@ -870,6 +948,7 @@ export class SyncSagaCoordinator {
                 conflictStrategy,
                 metaspace,
                 localSpace,
+                sessionIdentity: peer.currentSessionIdentity,
             });
 
             if (logalot) { console.log(`${lc} sagaFrame (init): ${pretty(sagaFrame)} (I: b3d6a8be69248f18713cc3073cb08626)`); }
@@ -883,6 +962,54 @@ export class SyncSagaCoordinator {
         }
     }
 
+    /**
+     * Validates that the return context received from a peer is a valid
+     * continuation of the outbound context and that the session identity
+     * is consistent.
+     */
+    private async validateReturnContext({
+        requestCtx,
+        responseCtx,
+        localSpace,
+    }: {
+        requestCtx: SyncSagaContextIbGib_V1,
+        responseCtx: SyncSagaContextIbGib_V1,
+        localSpace: IbGibSpaceAny,
+    }): Promise<string[]> {
+        const lc = `${this.lc}[${this.validateReturnContext.name}]`;
+        const errors: string[] = [];
+        try {
+            // 1. Verify saga frame continuation
+            if (requestCtx.sagaFrame && responseCtx.sagaFrame) {
+                const requestFrameAddr = getIbGibAddr({ ibGib: requestCtx.sagaFrame });
+                const responseFrameAddr = getIbGibAddr({ ibGib: responseCtx.sagaFrame });
+                
+                const isContinuation = await isPastFrame({
+                    olderAddr: requestFrameAddr,
+                    newerAddr: responseFrameAddr,
+                    space: localSpace,
+                });
+                if (!isContinuation) {
+                    errors.push(`Response saga frame (${responseFrameAddr}) is not a valid continuation of request saga frame (${requestFrameAddr}). (E: 2c85e8d97318ff24ac8a02bd3a068226)`);
+                }
+            } else {
+                errors.push(`Missing sagaFrame on requestCtx or responseCtx. (E: b65c68ff891000ddca8d22384a088226)`);
+            }
+
+            // 2. Verify session identity has not changed
+            const expectedSessionIdAddr = requestCtx.signedSessionIdentity ?
+                getIbGibAddr({ ibGib: requestCtx.signedSessionIdentity }) :
+                requestCtx.rel8ns?.sessionIdentity?.[0];
+            const responseSessionIdAddr = responseCtx.rel8ns?.sessionIdentity?.[0];
+            if (expectedSessionIdAddr !== responseSessionIdAddr) {
+                errors.push(`Session identity mismatch. Expected ${expectedSessionIdAddr}, got ${responseSessionIdAddr}. (E: ab98716bca88d2243cc822187768226)`);
+            }
+        } catch (error) {
+            errors.push(`Error during validateReturnContext: ${extractErrorMsg(error)} (E: da878e1239aa88ee27bdfca005c28226)`);
+        }
+        return errors;
+    }
+
     /**
      * Helper to poll for streaming domain payloads and put them in the
      * local {@link tempSpace}.
@@ -2593,12 +2720,19 @@ export class SyncSagaCoordinator {
         msgStones,
         localSpace,
         metaspace,
+        sessionIdentity,
     }: {
         prevSagaIbGib?: SyncIbGib_V1,
         conflictStrategy?: SyncConflictStrategy,
         msgStones: IbGib_V1[],
         localSpace: IbGibSpaceAny,
         metaspace: MetaspaceService,
+        /**
+         * this is only used on the init frame ({@link prevSagaIbGib}).
+         * otherwise, the sessionIdentityTjpAddr for the next sync saga ibgib
+         * frame will be driven by the {@link prevSagaIbGib}.
+         */
+        sessionIdentity?: KeystoneIbGib_V1 | undefined,
     }): Promise<SyncIbGib_V1> {
         const lc = `${this.lc}[${this.evolveSyncSagaIbGib.name}]`;
         try {
@@ -2668,6 +2802,12 @@ export class SyncSagaCoordinator {
                     isTjp: true,
                     conflictStrategy,
                 };
+                if (sessionIdentity) {
+                    const sessionIdentityTjpAddr =
+                        getTjpAddr({ ibGib: sessionIdentity });
+                    if (!sessionIdentityTjpAddr) { throw new Error(`(UNEXPECTED) sessionIdentity is truthy but sessionIdentityTjpAddr falsy? (E: f52004c10288987a6886f4e8fdf90826)`); }
+                    data.sessionIdentityTjpAddr = sessionIdentityTjpAddr;
+                }
                 // ib
                 const ib = await getSyncIb({ data });
                 // rel8ns

package/src/sync/sync-types.mts

@@ -4,11 +4,8 @@ import { IbGib_V1, IbGibData_V1, IbGibRel8ns_V1 } from "@ibgib/ts-gib/dist/V1/ty
 import { SubjectWitness } from "../common/pubsub/subject/subject-types.mjs";
 import { SyncSagaContextIbGib_V1 } from "./sync-saga-context/sync-saga-context-types.mjs";
 import { SYNC_ATOM, SYNC_MSG_REL8N_NAME, SyncConflictStrategy, } from "./sync-constants.mjs";
-import { IbGibSpaceAny } from "../witness/space/space-base-v1.mjs";
-import { MetaspaceService } from "../witness/space/metaspace/metaspace-types.mjs";
-import { SyncPeerWitness } from "./sync-peer/sync-peer-types.mjs";
 import { FlatIbGibGraph } from "../common/other/graph-types.mjs";
-import { SyncSagaConflictInfo, SyncSagaMessageIbGib_V1 } from "./sync-saga-message/sync-saga-message-types.mjs";
+import { SyncSagaMessageIbGib_V1 } from "./sync-saga-message/sync-saga-message-types.mjs";
 
 
 // #region SyncMode
@@ -184,6 +181,14 @@ export interface SyncData_V1 extends IbGibData_V1 {
      * 2. Rate limiting / Backpressure (Don't process this old request).
      */
     expirationTimestamp?: string;
+
+    /**
+     * If using session identity in the sync saga, this should be set and
+     * carried over in each saga frame
+     *
+     * TODO: IMPLEMENT THIS IN CODE. I HAVE JUST STUBBED THIS PROPERTY BUT IT DOES NOT EXIST IN CODE.
+     */
+    sessionIdentityTjpAddr?: IbGibAddr;
 }
 
 export interface SyncRel8ns_V1 extends IbGibRel8ns_V1 {
@@ -197,3 +202,22 @@ export interface SyncRel8ns_V1 extends IbGibRel8ns_V1 {
 export interface SyncIbGib_V1 extends IbGib_V1<SyncData_V1, SyncRel8ns_V1> { }
 
 // #endregion Sync Ib, Data, Rel8ns, IbGib
+
+/**
+ * A session keystone should have this info in
+ * `sessionIdentity.data.frameDetails`.
+ */
+export interface SessionGenesisFrameDetails {
+    senderIdentityAddr: IbGibAddr;
+    senderIdentityTjpAddr: IbGibAddr;
+    targetAddrs?: IbGibAddr[];
+}
+
+/**
+ * used in authentication/validation/authorization
+ * basically, **when** are we calling this validation method?
+ *
+ * terrible name, probably a code smell, but i'm getting desperate here
+ * to get this working.
+ */
+export type StageInProtocol = "beforeSend" | "beforeReceive";

package/src/sync/sync-withid.connect.respec.mts

@@ -10,7 +10,7 @@
  */
 
 import {
-    respecfully, ifWeMight, iReckon,
+    respecfully, ifWe, iReckon,
 } from '@ibgib/helper-gib/dist/respec-gib/respec-gib.mjs';
 const maam = `[${import.meta.url}]`, sir = maam;
 import { clone, delay, extractErrorMsg } from '@ibgib/helper-gib/dist/helpers/utils-helper.mjs';
@@ -200,14 +200,14 @@ await respecfully(sir, `Test Phase 2: peer.connect()`, async () => {
 
     // #region Step 3: Check states
 
-    await ifWeMight(sir, 'does not throw connection-specific errors', async () => {
+    await ifWe(sir, 'does not throw connection-specific errors', async () => {
         const errorMsg = syncError ? extractErrorMsg(syncError) : '';
         // If it throws, the error should NOT be related to establishment or connection.
         // It's expected to throw downstream in executeSagaLoop or continueSync due to missing context authentication/turn signing.
         iReckon(sir, errorMsg.includes('establish') || errorMsg.includes('connect')).asTo('error is NOT related to establish or connect').isGonnaBeFalsy();
     });
 
-    await ifWeMight(sir, 'session identity S connect pool is not depleted (innerspace no-op asymmetry)', async () => {
+    await ifWe(sir, 'session identity S connect pool is not depleted (innerspace no-op asymmetry)', async () => {
         // Resolve latest evolved I1
         const newSenderIdentityAddr = await metaspace.getLatestAddr({
             ibGib: senderIdentity,

package/src/sync/sync-withid.pingpong.respec.mts

@@ -0,0 +1,234 @@
+/**
+ * @module sync-withid.pingpong.respec
+ *
+ * Phase 3A — Basic Single-Timeline Sync with Identity
+ *
+ * Goal: Verify that the ping pong sync process completes successfully with identity.
+ *
+ * @see libs/core-gib/src/sync/docs/ping_pong_plan.md
+ */
+
+import {
+    respecfully, ifWeMight, iReckon,
+} from '@ibgib/helper-gib/dist/respec-gib/respec-gib.mjs';
+const maam = `[${import.meta.url}]`, sir = maam;
+import { clone, delay, extractErrorMsg } from '@ibgib/helper-gib/dist/helpers/utils-helper.mjs';
+import { getIbGibAddr } from '@ibgib/ts-gib/dist/helper.mjs';
+
+import { GLOBAL_LOG_A_LOT } from '../core-constants.mjs';
+import { SyncSagaCoordinator } from './sync-saga-coordinator.mjs';
+import { Metaspace_Innerspace } from '../witness/space/metaspace/metaspace-innerspace/metaspace-innerspace.mjs';
+import { InnerSpace_V1 } from '../witness/space/inner-space/inner-space-v1.mjs';
+import { SyncPeerInnerspace_V1 } from './sync-peer/sync-peer-innerspace/sync-peer-innerspace-v1.mjs';
+import { DEFAULT_INNER_SPACE_DATA_V1 } from '../witness/space/inner-space/inner-space-types.mjs';
+import { SYNC_PEER_INNERSPACE_DEFAULT_DATA_V1 } from './sync-peer/sync-peer-innerspace/sync-peer-innerspace-constants.mjs';
+import { KeystoneService_V1 } from '../keystone/keystone-service-v1.mjs';
+import { KeystoneIbGib_V1 } from '../keystone/keystone-types.mjs';
+import {
+    KEYSTONE_VERB_SYNC, POOL_ID_SYNC, POOL_ID_CONNECT, KEYSTONE_VERB_CONNECT,
+} from '../keystone/keystone-constants.mjs';
+import { createStandardPoolConfig } from '../keystone/keystone-config-builder.mjs';
+import { KeystoneReplenishStrategy } from '../keystone/keystone-types.mjs';
+import { SyncConflictStrategy } from './sync-constants.mjs';
+import { IbGibAddr } from '@ibgib/ts-gib/dist/types.mjs';
+import { getIdentity_throwIfUndefined } from '../keystone/keystone-helpers.mjs';
+import { Factory_V1 } from '@ibgib/ts-gib/dist/V1/factory.mjs';
+import { IbGib_V1 } from '@ibgib/ts-gib/dist/V1/types.mjs';
+import { getDependencyGraph, graphsAreEquivalent } from '../common/other/graph-helper.mjs';
+import { getFromSpace } from '../witness/space/space-helper.mjs';
+
+const logalot = GLOBAL_LOG_A_LOT;
+const lc = sir;
+
+const SENDER_SECRET = 'test-sender-secret-phase1';
+
+const SENDER_IDENTITY_SYNC_POOL_CONFIG = createStandardPoolConfig({
+    id: POOL_ID_SYNC,
+    salt: 'senderidentitysyncsaltphase1',
+    verbs: [KEYSTONE_VERB_SYNC],
+    size: 200,
+    sequential: 1,
+    random: 1,
+    targetBinding: 2,
+    replenishStrategy: KeystoneReplenishStrategy.topUp,
+});
+
+await respecfully(sir, `Test Phase 3A: Ping Pong Sync with Identity`, async () => {
+
+    // #region Init/Setup
+
+    const metaspace = new Metaspace_Innerspace(undefined);
+    await metaspace.initialize({
+        getFnAlert: () => async ({ title, msg }) => { console.log(`[Alert] ${title}: ${msg}`); },
+        getFnPrompt: () => async ({ title, msg }) => { console.log(`[Prompt] ${title}: ${msg}`); return ''; },
+        getFnPromptPassword: () => async (title, msg) => { console.log(`[PromptPwd] ${title}: ${msg}`); return null; },
+    });
+    while (!metaspace.initialized) { await delay(10); }
+
+    const defaultLocalUserSpace = await metaspace.getLocalUserSpace({ lock: false });
+    await defaultLocalUserSpace!.initialized;
+
+    const sourceSpace = new InnerSpace_V1({
+        ...DEFAULT_INNER_SPACE_DATA_V1,
+        name: 'source',
+        uuid: 'source_uuid',
+        description: 'sender durable space',
+    });
+    await sourceSpace.initialized;
+
+    const destSpace = new InnerSpace_V1({
+        ...DEFAULT_INNER_SPACE_DATA_V1,
+        name: 'dest',
+        uuid: 'dest_uuid',
+        description: 'receiver (domain provider) durable space',
+    });
+    await destSpace.initialized;
+
+    const senderCoordinator = new SyncSagaCoordinator();
+    const receiverCoordinator = new SyncSagaCoordinator();
+
+    async function newTestIbGib_stone({ ib = 'test', data }: { ib: string, data?: any }): Promise<IbGib_V1> {
+        const stone = await Factory_V1.stone({
+            parentPrimitiveIb: ib.split(' ').at(0) ?? 'test',
+            ib,
+            data,
+            uuid: true,
+        });
+        return stone;
+    }
+
+    async function newTestPeer(): Promise<SyncPeerInnerspace_V1> {
+        const peer = new SyncPeerInnerspace_V1(clone(SYNC_PEER_INNERSPACE_DEFAULT_DATA_V1));
+        await peer.initialized;
+        await peer.initializeOpts({
+            sagaId: '',
+            localMetaspace: metaspace,
+            localSpace: sourceSpace,
+            receiverSpace: destSpace,
+            receiverCoordinator,
+            receiverMetaspace: metaspace,
+        });
+        return peer;
+    }
+
+    const keystoneSvc = new KeystoneService_V1();
+
+    // #endregion Init/Setup
+
+    let senderIdentity = await keystoneSvc.genesis({
+        masterSecret: SENDER_SECRET,
+        configs: [SENDER_IDENTITY_SYNC_POOL_CONFIG],
+        metaspace,
+        space: sourceSpace,
+    });
+
+    // post the senderIdentity to receiver
+    await metaspace.put({ ibGib: senderIdentity, space: destSpace });
+    await metaspace.registerNewIbGib({ ibGib: senderIdentity, space: destSpace });
+
+    let syncError: any = null;
+    let xStone: IbGib_V1;
+    let xStoneAddr: IbGibAddr;
+    let peer: SyncPeerInnerspace_V1;
+
+    try {
+        xStone = await newTestIbGib_stone({ ib: 'test-pingpong' });
+        xStoneAddr = getIbGibAddr({ ibGib: xStone });
+        await metaspace.put({ ibGib: xStone, space: sourceSpace });
+        await metaspace.registerNewIbGib({ ibGib: xStone, space: sourceSpace });
+
+        peer = await newTestPeer();
+
+        const syncSaga = await senderCoordinator.sync({
+            domainIbGibs: [xStone],
+            senderIdentity,
+            fnSenderSecret: async () => SENDER_SECRET,
+            peer,
+            localSpace: sourceSpace,
+            metaspace,
+            conflictStrategy: SyncConflictStrategy.optimisticWithLCS,
+        });
+        await syncSaga.done;
+
+    } catch (error) {
+        syncError = error;
+    }
+
+    await ifWeMight(sir, 'completes the entire sync saga successfully', async () => {
+        const errorMsg = syncError ? extractErrorMsg(syncError) : '';
+        iReckon(sir, syncError).asTo(`syncError: ${errorMsg}`).isGonnaBeFalsy();
+    });
+
+    await ifWeMight(sir, 'alpha dep graph matches on source and dest', async () => {
+        const resGetDest = await getFromSpace({ space: destSpace, addr: xStoneAddr });
+        iReckon(sir, resGetDest.success && resGetDest.ibGibs?.length === 1).asTo('xStone exists in destSpace').isGonnaBeTrue();
+        if (resGetDest.success && resGetDest.ibGibs?.[0]) {
+            const xStoneDest = resGetDest.ibGibs[0];
+            const depGraphSource = await getDependencyGraph({ ibGib: xStone, space: sourceSpace });
+            const depGraphDest = await getDependencyGraph({ ibGib: xStoneDest, space: destSpace });
+            const equal = graphsAreEquivalent({ graphA: depGraphSource, graphB: depGraphDest });
+            iReckon(sir, equal).asTo('graphs are equivalent').isGonnaBeTrue();
+        }
+    });
+
+    await ifWeMight(sir, 'sessionIdentity evolved the expected number of times', async () => {
+        const latestS = peer.currentSessionIdentity;
+        iReckon(sir, latestS).asTo('latest session identity exists on peer').isGonnaBeTruthy();
+        if (latestS) {
+            iReckon(sir, latestS.data?.n).asTo('session identity data.n').isGonnaBe(2);
+        }
+    });
+
+    await ifWeMight(sir, 'sender durable space has I (evolved frame)', async () => {
+        const latestSenderIdentityAddr = await metaspace.getLatestAddr({
+            addr: getIbGibAddr({ ibGib: senderIdentity }),
+            space: sourceSpace,
+        });
+        iReckon(sir, latestSenderIdentityAddr).asTo('latestSenderIdentityAddr exists').isGonnaBeTruthy();
+        if (latestSenderIdentityAddr) {
+            const resGetSourceI = await getFromSpace({ space: sourceSpace, addr: latestSenderIdentityAddr });
+            iReckon(sir, resGetSourceI.success && resGetSourceI.ibGibs?.length === 1).asTo('evolved I exists in sourceSpace').isGonnaBeTrue();
+            if (resGetSourceI.success && resGetSourceI.ibGibs?.[0]) {
+                const evolvedI = resGetSourceI.ibGibs[0];
+                iReckon(sir, evolvedI.data?.n).asTo('evolved I data.n').isGonnaBe(1);
+            }
+        }
+    });
+
+    await ifWeMight(sir, 'receiver durable space has I (evolved frame)', async () => {
+        const latestSenderIdentityAddr = await metaspace.getLatestAddr({
+            addr: getIbGibAddr({ ibGib: senderIdentity }),
+            space: sourceSpace,
+        });
+        iReckon(sir, latestSenderIdentityAddr).asTo('latestSenderIdentityAddr exists').isGonnaBeTruthy();
+        if (latestSenderIdentityAddr) {
+            const resGetDestI = await getFromSpace({ space: destSpace, addr: latestSenderIdentityAddr });
+            iReckon(sir, resGetDestI.success && resGetDestI.ibGibs?.length === 1).asTo('evolved I exists in destSpace').isGonnaBeTrue();
+            if (resGetDestI.success && resGetDestI.ibGibs?.[0]) {
+                const evolvedI = resGetDestI.ibGibs[0];
+                iReckon(sir, evolvedI.data?.n).asTo('evolved I data.n').isGonnaBe(1);
+            }
+        }
+    });
+
+    await ifWeMight(sir, 'sender durable space has full S dep graph', async () => {
+        const latestS = peer.currentSessionIdentity;
+        iReckon(sir, latestS).asTo('latestS exists').isGonnaBeTruthy();
+        if (latestS) {
+            const depGraphS = await getDependencyGraph({ ibGib: latestS, space: sourceSpace });
+            const addrs = Object.keys(depGraphS);
+            iReckon(sir, addrs.length > 2).asTo('number of nodes in S graph > 2').isGonnaBeTrue();
+        }
+    });
+
+    await ifWeMight(sir, 'receiver durable space has full S dep graph', async () => {
+        const latestS = peer.currentSessionIdentity;
+        iReckon(sir, latestS).asTo('latestS exists').isGonnaBeTruthy();
+        if (latestS) {
+            const depGraphS = await getDependencyGraph({ ibGib: latestS, space: destSpace });
+            const addrs = Object.keys(depGraphS);
+            iReckon(sir, addrs.length > 2).asTo('number of nodes in S graph in destSpace > 2').isGonnaBeTrue();
+        }
+    });
+
+});

package/src/witness/space/inner-space/inner-space-v1.mts

@@ -5,19 +5,18 @@ import { validateIbGibIntrinsically } from '@ibgib/ts-gib/dist/V1/validate-helpe
 
 import { GLOBAL_LOG_A_LOT } from '../../../core-constants.mjs';
 import {
-    IbGibSpaceData, IbGibSpaceOptionsData, IbGibSpaceOptionsRel8ns,
+    IbGibSpaceOptionsData, IbGibSpaceOptionsRel8ns,
     IbGibSpaceOptionsIbGib, IbGibSpaceResultData, IbGibSpaceResultRel8ns,
-    IbGibSpaceResultIbGib, IbGibSpaceRel8ns,
+    IbGibSpaceResultIbGib,
 } from '../space-types.mjs';
 import { getSpaceIb, } from '../space-helper.mjs';
 import { getTjpAddr } from '../../../common/other/ibgib-helper.mjs';
-import { ReconciliationSpaceBase, ReconciliationSpaceData, ReconciliationSpaceRel8ns } from '../reconciliation-space/reconciliation-space-base.mjs';
+import { ReconciliationSpaceBase, } from '../reconciliation-space/reconciliation-space-base.mjs';
 import { DEFAULT_INNER_SPACE_DATA_V1, InnerSpaceData_V1, InnerSpaceRel8ns_V1 } from './inner-space-types.mjs';
 import { IbGib_V1 } from '@ibgib/ts-gib/dist/V1/types.mjs';
 import { getGib } from '@ibgib/ts-gib/dist/V1/transforms/transform-helper.mjs';
-import { isMetaStone, newUpMetaStone, parseMetaStoneIb } from '../../../common/meta-stone/meta-stone-helper.mjs';
+import { isMetaStone, parseMetaStoneIb } from '../../../common/meta-stone/meta-stone-helper.mjs';
 import { MetaStoneIbGib_V1, MetaStoneIbInfo } from '../../../common/meta-stone/meta-stone-types.mjs';
-import { GIB } from '@ibgib/ts-gib/dist/V1/constants.mjs';
 import { META_STONE_TARGET_REL8N_NAME } from '../../../common/meta-stone/meta-stone-constants.mjs';
 
 const logalot = GLOBAL_LOG_A_LOT;

package/dist/sync/sync-peer/sync-peer-websocket-receiver/sync-peer-websocket-receiver-types.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sync-peer-websocket-receiver-types.d.mts","sourceRoot":"","sources":["../../../../src/sync/sync-peer/sync-peer-websocket-receiver/sync-peer-websocket-receiver-types.mts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAC3D,OAAO,EACH,eAAe,EAAE,iBAAiB,EAClC,sBAAsB,EAAE,mBAAmB,EAC9C,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AAEtE;;GAEG;AACH,MAAM,WAAW,gCAAiC,SAAQ,eAAe;CACxE;AAED;;GAEG;AACH,MAAM,WAAW,kCAAmC,SAAQ,iBAAiB;CAC5E;AAED;;GAEG;AACH,MAAM,WAAW,iCAAkC,SAAQ,QAAQ,CAAC,gCAAgC,EAAE,kCAAkC,CAAC;CAAI;AAE7I,MAAM,WAAW,oCAAqC,SAAQ,mBAAmB;CAChF;AAED,MAAM,WAAW,uCAAwC,SAAQ,sBAAsB;IACnF;;OAEG;IACH,gBAAgB,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/sync/sync-peer/sync-peer-websocket-receiver/sync-peer-websocket-receiver-types.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"sync-peer-websocket-receiver-types.mjs","sourceRoot":"","sources":["../../../../src/sync/sync-peer/sync-peer-websocket-receiver/sync-peer-websocket-receiver-types.mts"],"names":[],"mappings":""}

package/dist/sync/sync-peer/sync-peer-websocket-receiver/sync-peer-websocket-receiver-v1.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sync-peer-websocket-receiver-v1.d.mts","sourceRoot":"","sources":["../../../../src/sync/sync-peer/sync-peer-websocket-receiver/sync-peer-websocket-receiver-v1.mts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAG3D,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,MAAM,qDAAqD,CAAC;AAE9F,OAAO,EAAE,aAAa,EAAE,MAAM,0CAA0C,CAAC;AAEzE,OAAO,EACH,oCAAoC,EACpC,uCAAuC,EACvC,gCAAgC,EAAE,kCAAkC,EACpE,iCAAiC,EACpC,MAAM,0CAA0C,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sCAAsC,CAAC;AAKxE;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAC9B,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI,CAAC;IAClD,OAAO,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,IAAI,CAAC;CACvC;AAED;;;;;GAKG;AACH,qBAAa,4BACT,SAAQ,WAAW,CAAC,oCAAoC,EAAE,uCAAuC,CACjG,YAAW,iCAAiC;IAE5C,UAAmB,EAAE,EAAE,MAAM,CAA4C;IAEzE,IAAa,SAAS,IAAI,MAAM,CAE/B;IAEO,IAAI,EAAE,gCAAgC,GAAG,SAAS,CAAC;IACnD,MAAM,EAAE,kCAAkC,GAAG,SAAS,CAAC;IAE/D,SAAS,CAAC,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAG5C,SAAS,CAAC,eAAe,UAAS;IAClC,SAAS,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IACjC,SAAS,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACjC,SAAS,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;gBAGhC,WAAW,EAAE,gCAAgC,EAC7C,aAAa,CAAC,EAAE,kCAAkC;IAKtD;;;OAGG;IACU,UAAU,CAAC,aAAa,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;cAqB/C,eAAe,CAAC,IAAI,EAAE,oCAAoC,GAAG,OAAO,CAAC,IAAI,CAAC;cAI1E,WAAW,CAAC,IAAI,EAAE,oCAAoC,GAAG,OAAO,CAAC,IAAI,CAAC;cAItE,uBAAuB,CAAC,IAAI,EAAE;QACnD,iBAAiB,EAAE,gBAAgB,CAAC;QACpC,eAAe,EAAE,gBAAgB,CAAC;KACrC,GAAG,OAAO,CAAC,IAAI,CAAC;cAIQ,kBAAkB,CAAC,OAAO,EAAE,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC;IAI3H,qDAAqD;cACrC,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;cAU5D,oBAAoB,IAAI,OAAO,CAAC,aAAa,CAAC;IA8B9D;;OAEG;IACU,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAuDtE;;OAEG;cACa,kBAAkB,CAAC,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC;IAmE3D;;OAEG;IACU,yBAAyB,CAAC,EACnC,OAAO,EACP,oBAAyB,GAC5B,EAAE;QACC,OAAO,EAAE,uBAAuB,CAAC;QACjC,oBAAoB,CAAC,EAAE,QAAQ,EAAE,CAAC;KACrC,GAAG,OAAO,CAAC,uBAAuB,GAAG,SAAS,CAAC;CA8CnD"}