@ibgib/node-gib 0.0.10 → 0.0.14

package/dist/serve-gib/handlers/api/keystone/keystone-evolve.handler.mjs

@@ -0,0 +1,127 @@
+/**
+ * @module serve-gib/handlers/api/keystone/keystone-evolve.handler
+ *
+ * PUT /api/keystone/evolve/:domainAddr
+ *
+ * Receives an evolved domain keystone (`I^I1.Itjp`) and any related
+ * ibgibs (e.g., the `S^Stjp` session keystone).
+ *
+ * Validates the evolution, verifies the `S` session keystone, and persists
+ * them to the domain metaspace to authorize the sync session.
+ */
+import { extractErrorMsg } from '@ibgib/helper-gib/dist/helpers/utils-helper.mjs';
+import { getIbGibAddr } from '@ibgib/ts-gib/dist/helper.mjs';
+import { validateAndRegisterEvolveKeystone } from '@ibgib/core-gib/dist/sync/sync-peer/sync-peer-websocket/sync-peer-websocket-receiver/sync-websocket-peer-helpers.mjs';
+import { loadSsoServerConfig } from '@ibgib/web-gib/dist/identity/sso/sso-config-helper.mjs';
+import { SsoCustodianService } from '@ibgib/web-gib/dist/identity/sso/sso-custodian-service.mjs';
+import { GLOBAL_LOG_A_LOT } from '../../../constants.mjs';
+import { ServeGibHandlerWithMetaspaceBase } from '../../handler-base.mjs';
+import { API_PATH_REGEXES } from '../../../path-constants.mjs';
+const logalot = GLOBAL_LOG_A_LOT || true;
+export class KeystoneEvolveHandler extends ServeGibHandlerWithMetaspaceBase {
+    lc = `[${KeystoneEvolveHandler.name}]`;
+    method = 'PUT';
+    regex = API_PATH_REGEXES.KEYSTONE_EVOLVE;
+    async parseParamsImpl(reqCtx) {
+        const match = reqCtx.pathname.match(this.regex);
+        if (match && match.length >= 3) {
+            const domainIb = decodeURIComponent(match[1]);
+            const domainGib = decodeURIComponent(match[2]);
+            const domainAddr = getIbGibAddr({ ib: domainIb, gib: domainGib });
+            return {
+                domainAddr,
+                domainInfo: this.getDomainInfo({ domainAddr })
+            };
+        }
+        else {
+            return undefined;
+        }
+    }
+    async validateQueryParams({ queryParams }) {
+        return []; // We don't expect any query parameters for evolution
+    }
+    async handleRouteImpl(reqCtx) {
+        const lc = `${this.lc}[handleRouteImpl]`;
+        try {
+            if (logalot) {
+                console.log(`${lc} starting...`);
+            }
+            if (!reqCtx.params) {
+                return this.error(400, 'Invalid parameters');
+            }
+            if (!reqCtx.metaspace) {
+                return this.error(500, 'Metaspace not initialized');
+            }
+            const { domainAddr } = reqCtx.params;
+            const bodyStr = reqCtx.body;
+            if (!bodyStr) {
+                return this.error(400, 'Empty body');
+            }
+            let parsed;
+            try {
+                parsed = JSON.parse(bodyStr);
+            }
+            catch (err) {
+                return this.error(400, 'Invalid request JSON body: bodyStr does NOT parse. (E: 2f81c8c80a6884ff32b877671e92f326)');
+            }
+            const { keystoneIbGib, relatedKeystoneIbGibs = [] } = parsed;
+            if (!keystoneIbGib) {
+                return this.error(400, 'Invalid request. Body must contain keystoneIbGib (E: e234647f79282982c8012fe8015f5826)');
+            }
+            const space = await reqCtx.metaspace.getLocalUserSpace({ lock: false });
+            if (!space) {
+                return this.error(500, 'No local user space found (E: a1144e5d6cd9641fb82d6b359f131126)');
+            }
+            // Delegate all intrinsic checks, transition rules, pool restrictions, and registration/persistence to core-gib helper
+            await validateAndRegisterEvolveKeystone({
+                domainAddr,
+                keystoneIbGib,
+                relatedKeystoneIbGibs,
+                metaspace: reqCtx.metaspace,
+                space
+            });
+            // Post-Evolution Hook: Handle SSO provider unlinking
+            const claim = keystoneIbGib.data?.proofs?.[0]?.claim;
+            if (claim?.details?.type === 'remove-pool') {
+                const removeInfo = claim.details.info;
+                if (removeInfo && Array.isArray(removeInfo.remove)) {
+                    // Lazy-load custodian service config
+                    const config = loadSsoServerConfig();
+                    const custodian = new SsoCustodianService(config);
+                    for (const poolId of removeInfo.remove) {
+                        if (poolId.startsWith('custodian-manage-')) {
+                            const providerId = poolId.replace('custodian-manage-', '');
+                            console.log(`${lc} Evolved keystone removed custodian pool: ${poolId}. Performing unlink cleanup for provider: ${providerId}`);
+                            // Revoke token if supplied by the client
+                            const token = parsed.revokeTokens?.[providerId];
+                            if (token) {
+                                try {
+                                    await custodian.revokeToken(providerId, token);
+                                }
+                                catch (e) {
+                                    console.warn(`${lc} Failed to revoke token for provider ${providerId}: ${extractErrorMsg(e)}`);
+                                }
+                            }
+                            else {
+                                console.log(`${lc} No OAuth token supplied by client for revocation of provider: ${providerId}`);
+                            }
+                        }
+                    }
+                }
+            }
+            return this.ok({
+                message: `Successfully evolved domain keystone with session keystone`,
+            });
+        }
+        catch (error) {
+            console.error(`${lc} ${extractErrorMsg(error)}`);
+            return this.error(422, `Evolve validation/persistence failed: ${extractErrorMsg(error)}`);
+        }
+        finally {
+            if (logalot) {
+                console.log(`${lc} complete.`);
+            }
+        }
+    }
+}
+//# sourceMappingURL=keystone-evolve.handler.mjs.map

package/dist/serve-gib/handlers/api/keystone/keystone-evolve.handler.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"keystone-evolve.handler.mjs","sourceRoot":"","sources":["../../../../../src/serve-gib/handlers/api/keystone/keystone-evolve.handler.mts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,iDAAiD,CAAC;AAClF,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAE7D,OAAO,EAAE,iCAAiC,EAAE,MAAM,sHAAsH,CAAC;AAEzK,OAAO,EAAE,mBAAmB,EAAE,MAAM,wDAAwD,CAAC;AAC7F,OAAO,EAAE,mBAAmB,EAAE,MAAM,4DAA4D,CAAC;AAEjG,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,gCAAgC,EAAE,MAAM,wBAAwB,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAG/D,MAAM,OAAO,GAAG,gBAAgB,IAAI,IAAI,CAAC;AAqBzC,MAAM,OAAO,qBAAsB,SAAQ,gCAA0D;IAC9E,EAAE,GAAW,IAAI,qBAAqB,CAAC,IAAI,GAAG,CAAC;IAC/C,MAAM,GAAU,KAAK,CAAC;IACtB,KAAK,GAAG,gBAAgB,CAAC,eAAe,CAAC;IAEzC,KAAK,CAAC,eAAe,CAAC,MAAyC;QAC9E,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9C,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/C,MAAM,UAAU,GAAG,YAAY,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;YAClE,OAAO;gBACH,UAAU;gBACV,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,CAAC;aACjD,CAAC;QACN,CAAC;aAAM,CAAC;YACJ,OAAO,SAAS,CAAC;QACrB,CAAC;IACL,CAAC;IAEkB,KAAK,CAAC,mBAAmB,CAAC,EAAE,WAAW,EAAyB;QAC/E,OAAO,EAAE,CAAC,CAAC,qDAAqD;IACpE,CAAC;IAEkB,KAAK,CAAC,eAAe,CAAC,MAAoC;QACzE,MAAM,EAAE,GAAG,GAAG,IAAI,CAAC,EAAE,mBAAmB,CAAC;QACzC,IAAI,CAAC;YACD,IAAI,OAAO,EAAE,CAAC;gBAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;YAAC,CAAC;YAElD,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;gBAAC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;YAAC,CAAC;YACrE,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;gBAAC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,2BAA2B,CAAC,CAAC;YAAC,CAAC;YAE/E,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC;YACrC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC;YAC5B,IAAI,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YAAC,CAAC;YAEvD,IAAI,MAAkB,CAAC;YACvB,IAAI,CAAC;gBACD,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACjC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACX,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,0FAA0F,CAAC,CAAC;YACvH,CAAC;YAED,MAAM,EAAE,aAAa,EAAE,qBAAqB,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC;YAC7D,IAAI,CAAC,aAAa,EAAE,CAAC;gBACjB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,wFAAwF,CAAC,CAAC;YACrH,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACxE,IAAI,CAAC,KAAK,EAAE,CAAC;gBACT,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,iEAAiE,CAAC,CAAC;YAC9F,CAAC;YAED,sHAAsH;YACtH,MAAM,iCAAiC,CAAC;gBACpC,UAAU;gBACV,aAAa;gBACb,qBAAqB;gBACrB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,KAAK;aACR,CAAC,CAAC;YAEH,qDAAqD;YACrD,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;YACrD,IAAI,KAAK,EAAE,OAAO,EAAE,IAAI,KAAK,aAAa,EAAE,CAAC;gBACzC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;gBACtC,IAAI,UAAU,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;oBACjD,qCAAqC;oBACrC,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;oBACrC,MAAM,SAAS,GAAG,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAC;oBAElD,KAAK,MAAM,MAAM,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;wBACrC,IAAI,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,CAAC;4BACzC,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC;4BAC3D,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,6CAA6C,MAAM,6CAA6C,UAAU,EAAE,CAAC,CAAC;4BAE/H,yCAAyC;4BACzC,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC,UAAU,CAAC,CAAC;4BAChD,IAAI,KAAK,EAAE,CAAC;gCACR,IAAI,CAAC;oCACD,MAAM,SAAS,CAAC,WAAW,CAAC,UAAiB,EAAE,KAAK,CAAC,CAAC;gCAC1D,CAAC;gCAAC,OAAO,CAAC,EAAE,CAAC;oCACT,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,wCAAwC,UAAU,KAAK,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gCACnG,CAAC;4BACL,CAAC;iCAAM,CAAC;gCACJ,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,kEAAkE,UAAU,EAAE,CAAC,CAAC;4BACrG,CAAC;wBACL,CAAC;oBACL,CAAC;gBACL,CAAC;YACL,CAAC;YAED,OAAO,IAAI,CAAC,EAAE,CAAC;gBACX,OAAO,EAAE,4DAA4D;aACxE,CAAC,CAAC;QAEP,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACjD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,yCAAyC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC9F,CAAC;gBAAS,CAAC;YACP,IAAI,OAAO,EAAE,CAAC;gBAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YAAC,CAAC;QACpD,CAAC;IACL,CAAC;CACJ"}

package/dist/serve-gib/handlers/api/keystone/keystone-genesis.handler.d.mts

@@ -0,0 +1,45 @@
+/**
+ * @module serve-gib/handlers/api/keystone/keystone-genesis.handler
+ *
+ * POST /api/keystone/genesis
+ *
+ * Accepts a single genesis-frame keystone ibgib from the client and
+ * bootstraps a new domain-isolated metaspace for it.
+ *
+ * ## request body
+ *
+ * ```json
+ * { "keystoneIbGib": <KeystoneIbGib_V1> }
+ * ```
+ *
+ * ## validation steps
+ *
+ * 1. Body contains `keystoneIbGib` (single ibgib, not an array).
+ * 2. Intrinsic hash validation passes (`validateIbGibIntrinsically`).
+ * 3. Structural keystone check: `ib` starts with `"keystone"`, no `past` in
+ *    `rel8ns` (genesis = TJP frame, no prior timeline).
+ * 4. Domain uniqueness: the path derived from the keystone's tjpGib must not
+ *    already exist on disk — if it does, return 409 Conflict.
+ * 5. Bootstrap: call `bootstrapDomainMetaspace` to create folders + metaspace.
+ * 6. Persist the keystone ibgib into the newly created domain space.
+ *
+ * ## notes
+ *
+ * Unlike domain-scoped handlers, this handler does NOT rely on
+ * `reqCtx.metaspace` (which is undefined when no domain exists yet). It
+ * creates the metaspace itself using `bootstrapDomainMetaspace`.
+ */
+import { ServeGibHandlerBase } from '../../handler-base.mjs';
+import { RequestContext, ResponseResult, ServeGibHttpMethod } from '../../../types.mjs';
+/**
+ * POST /api/keystone/genesis
+ *
+ * No path params — the domain is derived from the incoming keystone ibgib.
+ */
+export declare class KeystoneGenesisHandler extends ServeGibHandlerBase<undefined, undefined> {
+    protected lc: string;
+    protected method: ServeGibHttpMethod;
+    protected regex: RegExp;
+    protected handleRouteImpl(reqCtx: RequestContext<undefined, undefined>): Promise<ResponseResult | undefined>;
+}
+//# sourceMappingURL=keystone-genesis.handler.d.mts.map

package/dist/serve-gib/handlers/api/keystone/keystone-genesis.handler.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keystone-genesis.handler.d.mts","sourceRoot":"","sources":["../../../../../src/serve-gib/handlers/api/keystone/keystone-genesis.handler.mts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAaH,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAUxF;;;;GAIG;AACH,qBAAa,sBAAuB,SAAQ,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC;IACjF,UAAmB,EAAE,EAAE,MAAM,CAAsC;IACnE,UAAmB,MAAM,EAAE,kBAAkB,CAAU;IACvD,UAAmB,KAAK,SAAqC;IAE7D,UAAgB,eAAe,CAC3B,MAAM,EAAE,cAAc,CAAC,SAAS,EAAE,SAAS,CAAC,GAC7C,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAuGrC;CACJ"}

package/dist/serve-gib/handlers/api/keystone/keystone-genesis.handler.mjs

@@ -0,0 +1,159 @@
+/**
+ * @module serve-gib/handlers/api/keystone/keystone-genesis.handler
+ *
+ * POST /api/keystone/genesis
+ *
+ * Accepts a single genesis-frame keystone ibgib from the client and
+ * bootstraps a new domain-isolated metaspace for it.
+ *
+ * ## request body
+ *
+ * ```json
+ * { "keystoneIbGib": <KeystoneIbGib_V1> }
+ * ```
+ *
+ * ## validation steps
+ *
+ * 1. Body contains `keystoneIbGib` (single ibgib, not an array).
+ * 2. Intrinsic hash validation passes (`validateIbGibIntrinsically`).
+ * 3. Structural keystone check: `ib` starts with `"keystone"`, no `past` in
+ *    `rel8ns` (genesis = TJP frame, no prior timeline).
+ * 4. Domain uniqueness: the path derived from the keystone's tjpGib must not
+ *    already exist on disk — if it does, return 409 Conflict.
+ * 5. Bootstrap: call `bootstrapDomainMetaspace` to create folders + metaspace.
+ * 6. Persist the keystone ibgib into the newly created domain space.
+ *
+ * ## notes
+ *
+ * Unlike domain-scoped handlers, this handler does NOT rely on
+ * `reqCtx.metaspace` (which is undefined when no domain exists yet). It
+ * creates the metaspace itself using `bootstrapDomainMetaspace`.
+ */
+import { existsSync } from 'node:fs';
+import * as path from 'node:path';
+import { extractErrorMsg } from '@ibgib/helper-gib/dist/helpers/utils-helper.mjs';
+import { getIbGibAddr } from '@ibgib/ts-gib/dist/helper.mjs';
+import { validateIbGibIntrinsically } from '@ibgib/ts-gib/dist/V1/validate-helper.mjs';
+import { getGibInfo } from '@ibgib/ts-gib/dist/V1/transforms/transform-helper.mjs';
+import { KeystoneService_V1 } from '@ibgib/core-gib/dist/keystone/keystone-service-v1.mjs';
+import { IdentityIndexService } from '../../../identity-index/identity-index-service.mjs';
+import { GLOBAL_LOG_A_LOT } from '../../../constants.mjs';
+import { ServeGibHandlerBase } from '../../handler-base.mjs';
+import { API_PATH_REGEXES } from '../../../path-constants.mjs';
+import { getDomainRootPath } from '../../../bootstrap-helper.mjs';
+import { bootstrapDomainMetaspace } from '../../../bootstrap-helper.mjs';
+const logalot = GLOBAL_LOG_A_LOT || true;
+/**
+ * POST /api/keystone/genesis
+ *
+ * No path params — the domain is derived from the incoming keystone ibgib.
+ */
+export class KeystoneGenesisHandler extends ServeGibHandlerBase {
+    lc = `[${KeystoneGenesisHandler.name}]`;
+    method = 'POST';
+    regex = API_PATH_REGEXES.KEYSTONE_GENESIS;
+    async handleRouteImpl(reqCtx) {
+        const lc = `${this.lc}[${this.handleRouteImpl.name}]`;
+        try {
+            if (logalot) {
+                console.log(`${lc} starting... (I: a1b2c3d4e5f6a7b8c9d0e1f2a3b4c526)`);
+            }
+            // ----------------------------------------------------------------
+            // 1. Parse body — expect { keystoneIbGib }
+            // ----------------------------------------------------------------
+            let parsed;
+            try {
+                parsed = JSON.parse(reqCtx.body);
+            }
+            catch {
+                return this.error(400, 'Request body must be valid JSON (E: dd8618857568f8fc5e9c62b8ed135826)');
+            }
+            const { keystoneIbGib } = parsed;
+            if (!keystoneIbGib) {
+                return this.error(400, 'Body must contain keystoneIbGib (E: 9c8c5d979d7842cd716ba64f69349c26)');
+            }
+            // ----------------------------------------------------------------
+            // 2. Intrinsic hash validation
+            // ----------------------------------------------------------------
+            const intrinsicErrors = await validateIbGibIntrinsically({ ibGib: keystoneIbGib });
+            if (intrinsicErrors) {
+                return this.error(422, 'Intrinsic keystone validation failed (E: 76d388e198f23a87dd6596f59c36e826)', { errors: intrinsicErrors });
+            }
+            // ----------------------------------------------------------------
+            // 3. Structural keystone + genesis-frame checks
+            // ----------------------------------------------------------------
+            const keystoneService = new KeystoneService_V1();
+            const keystoneErrors = await keystoneService.validateGenesisKeystone({
+                keystoneIbGib
+            });
+            if (keystoneErrors && keystoneErrors.length > 0) {
+                return this.error(422, `Keystone genesis validation failed. Errors: ${keystoneErrors} (E: 8384285be7a8ab0d41cfd1df2e2aa826)`, { errors: keystoneErrors });
+            }
+            // ----------------------------------------------------------------
+            // 4. Domain uniqueness & Email Index Registration
+            // ----------------------------------------------------------------
+            const addr = getIbGibAddr({ ibGib: keystoneIbGib });
+            const { tjpGib, punctiliarHash } = getGibInfo({ ibGibAddr: addr });
+            const domainGib = tjpGib || punctiliarHash;
+            if (!domainGib) {
+                return this.error(422, `Could not extract domain identifier from keystone address: ${addr} (E: 2758588a6d7cc77f078e97989feed326)`);
+            }
+            const domainRootPath = getDomainRootPath(domainGib, reqCtx.dataDir);
+            if (existsSync(domainRootPath)) {
+                return this.error(409, `Domain already exists for this keystone (tjpGib: ${domainGib}). Use PUT /api/keystone/evolve/:domainAddr to evolve. (E: 1c56c8885781c86df89cbdfc1b310626)`);
+            }
+            // Extract email addresses attached to primary identity keystone (if present)
+            const emails = keystoneIbGib.data?.emails ?? keystoneIbGib.data?.frameDetails?.emails ?? [];
+            const indexService = new IdentityIndexService({ baseDir: path.join(reqCtx.dataDir, 'index') });
+            const registeredHashes = [];
+            if (emails.length > 0) {
+                try {
+                    for (const email of emails) {
+                        const { emailHash } = await indexService.registerEmailIndex({ email, tjpAddr: addr });
+                        registeredHashes.push(emailHash);
+                    }
+                }
+                catch (err) {
+                    if (err.message.includes('duplicate_identity_409')) {
+                        // Roll back any hashes registered in this transaction before throwing
+                        for (const emailHash of registeredHashes) {
+                            try {
+                                await indexService.getEmailIndexByHash({ emailHash });
+                            }
+                            catch { /* ignore */ }
+                        }
+                        return this.error(409, `Email/Identity already registered (E: duplicate_identity_409)`);
+                    }
+                    throw err;
+                }
+            }
+            // ----------------------------------------------------------------
+            // 5. Bootstrap the new domain metaspace (creates folders)
+            // ----------------------------------------------------------------
+            const metaspace = await bootstrapDomainMetaspace(addr, reqCtx.dataDir);
+            // ----------------------------------------------------------------
+            // 6. Persist the genesis keystone into the new domain space
+            // ----------------------------------------------------------------
+            const space = await metaspace.getLocalUserSpace({ lock: false });
+            if (!space) {
+                throw new Error(`(UNEXPECTED) Could not get local user space after bootstrapping domain for ${addr} (E: b1c2d3e4f5a6b7c8d9e0f1a2b3c4d526)`);
+            }
+            await metaspace.put({ ibGibs: [keystoneIbGib], space });
+            await metaspace.registerNewIbGib({ ibGib: keystoneIbGib, space });
+            console.log(`${lc} domain created and keystone persisted: ${addr}`);
+            // if (logalot) { console.log(`${lc} keystoneIbGib: ${pretty(keystoneIbGib)} (I: d598c6ff7a48997d585b84c19c464826)`); }
+            return this.ok({ success: true, addr }, 201);
+        }
+        catch (error) {
+            const emsg = extractErrorMsg(error);
+            console.error(`${lc} ${emsg}`);
+            return this.error(500, emsg);
+        }
+        finally {
+            if (logalot) {
+                console.log(`${lc} complete.`);
+            }
+        }
+    }
+}
+//# sourceMappingURL=keystone-genesis.handler.mjs.map

package/dist/serve-gib/handlers/api/keystone/keystone-genesis.handler.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"keystone-genesis.handler.mjs","sourceRoot":"","sources":["../../../../../src/serve-gib/handlers/api/keystone/keystone-genesis.handler.mts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,eAAe,EAAU,MAAM,iDAAiD,CAAC;AAC1F,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAC7D,OAAO,EAAE,0BAA0B,EAAE,MAAM,2CAA2C,CAAC;AACvF,OAAO,EAAE,UAAU,EAAE,MAAM,uDAAuD,CAAC;AACnF,OAAO,EAAE,kBAAkB,EAAE,MAAM,uDAAuD,CAAC;AAC3F,OAAO,EAAE,oBAAoB,EAAE,MAAM,oDAAoD,CAAC;AAE1F,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAE7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,wBAAwB,EAAE,MAAM,+BAA+B,CAAC;AAEzE,MAAM,OAAO,GAAG,gBAAgB,IAAI,IAAI,CAAC;AAKzC;;;;GAIG;AACH,MAAM,OAAO,sBAAuB,SAAQ,mBAAyC;IAC9D,EAAE,GAAW,IAAI,sBAAsB,CAAC,IAAI,GAAG,CAAC;IAChD,MAAM,GAAuB,MAAM,CAAC;IACpC,KAAK,GAAG,gBAAgB,CAAC,gBAAgB,CAAC;IAEnD,KAAK,CAAC,eAAe,CAC3B,MAA4C;QAE5C,MAAM,EAAE,GAAG,GAAG,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC;QACtD,IAAI,CAAC;YACD,IAAI,OAAO,EAAE,CAAC;gBAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,oDAAoD,CAAC,CAAC;YAAC,CAAC;YAExF,mEAAmE;YACnE,2CAA2C;YAC3C,mEAAmE;YACnE,IAAI,MAAW,CAAC;YAChB,IAAI,CAAC;gBACD,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACrC,CAAC;YAAC,MAAM,CAAC;gBACL,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,uEAAuE,CAAC,CAAC;YACpG,CAAC;YAED,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC;YACjC,IAAI,CAAC,aAAa,EAAE,CAAC;gBACjB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,uEAAuE,CAAC,CAAC;YACpG,CAAC;YAED,mEAAmE;YACnE,+BAA+B;YAC/B,mEAAmE;YACnE,MAAM,eAAe,GAAG,MAAM,0BAA0B,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;YACnF,IAAI,eAAe,EAAE,CAAC;gBAClB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,4EAA4E,EAAE,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;YACtI,CAAC;YAED,mEAAmE;YACnE,gDAAgD;YAChD,mEAAmE;YACnE,MAAM,eAAe,GAAG,IAAI,kBAAkB,EAAE,CAAC;YACjD,MAAM,cAAc,GAAG,MAAM,eAAe,CAAC,uBAAuB,CAAC;gBACjE,aAAa;aAChB,CAAC,CAAC;YACH,IAAI,cAAc,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,+CAA+C,cAAc,wCAAwC,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;YAC9J,CAAC;YAED,mEAAmE;YACnE,kDAAkD;YAClD,mEAAmE;YACnE,MAAM,IAAI,GAAG,YAAY,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;YACpD,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,UAAU,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACnE,MAAM,SAAS,GAAG,MAAM,IAAI,cAAc,CAAC;YAC3C,IAAI,CAAC,SAAS,EAAE,CAAC;gBACb,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,8DAA8D,IAAI,wCAAwC,CAAC,CAAC;YACvI,CAAC;YAED,MAAM,cAAc,GAAG,iBAAiB,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YACpE,IAAI,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;gBAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,oDAAoD,SAAS,8FAA8F,CAAC,CAAC;YACxL,CAAC;YAED,6EAA6E;YAC7E,MAAM,MAAM,GAAa,aAAa,CAAC,IAAI,EAAE,MAAM,IAAI,aAAa,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,IAAI,EAAE,CAAC;YACtG,MAAM,YAAY,GAAG,IAAI,oBAAoB,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;YAC/F,MAAM,gBAAgB,GAAa,EAAE,CAAC;YAEtC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACpB,IAAI,CAAC;oBACD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;wBACzB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,YAAY,CAAC,kBAAkB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;wBACtF,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACrC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAQ,EAAE,CAAC;oBAChB,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,wBAAwB,CAAC,EAAE,CAAC;wBACjD,sEAAsE;wBACtE,KAAK,MAAM,SAAS,IAAI,gBAAgB,EAAE,CAAC;4BACvC,IAAI,CAAC;gCAAC,MAAM,YAAY,CAAC,mBAAmB,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC;4BAAC,CAAC;4BAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;wBACzF,CAAC;wBACD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,+DAA+D,CAAC,CAAC;oBAC5F,CAAC;oBACD,MAAM,GAAG,CAAC;gBACd,CAAC;YACL,CAAC;YAED,mEAAmE;YACnE,0DAA0D;YAC1D,mEAAmE;YACnE,MAAM,SAAS,GAAG,MAAM,wBAAwB,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;YAEvE,mEAAmE;YACnE,4DAA4D;YAC5D,mEAAmE;YACnE,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACjE,IAAI,CAAC,KAAK,EAAE,CAAC;gBACT,MAAM,IAAI,KAAK,CAAC,8EAA8E,IAAI,wCAAwC,CAAC,CAAC;YAChJ,CAAC;YAED,MAAM,SAAS,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YACxD,MAAM,SAAS,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;YAElE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,2CAA2C,IAAI,EAAE,CAAC,CAAC;YACpE,uHAAuH;YACvH,OAAO,IAAI,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;QACjD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;YACpC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;YAC/B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACjC,CAAC;gBAAS,CAAC;YACP,IAAI,OAAO,EAAE,CAAC;gBAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YAAC,CAAC;QACpD,CAAC;IACL,CAAC;CACJ"}

package/dist/serve-gib/handlers/api/keystone/keystone-get.handler.d.mts

@@ -0,0 +1,25 @@
+/**
+ * @module serve-gib/handlers/api/keystone
+ */
+import { KeystoneIbGib_V1 } from '@ibgib/core-gib/dist/keystone/keystone-types.mjs';
+import { ServeGibHandlerWithMetaspaceBase } from '../../handler-base.mjs';
+import { RequestContext, ResponseResult, ServeGibHttpMethod } from '../../../types.mjs';
+import { KeystoneGetQueryParams, KeystoneParams } from './keystone-handler-types.mjs';
+export interface KeystoneGetResponseBody {
+    domainGraph: Record<string, KeystoneIbGib_V1>;
+}
+/**
+ * GET /api/keystone/:domainAddr
+ * GET /api/keystone/:domainAddr&getLatest=true
+ */
+export declare class KeystoneGetHandler extends ServeGibHandlerWithMetaspaceBase<KeystoneParams, KeystoneGetQueryParams> {
+    protected lc: string;
+    protected method: ServeGibHttpMethod;
+    protected regex: RegExp;
+    protected parseParamsImpl(reqCtx: RequestContext<KeystoneParams, KeystoneGetQueryParams>): Promise<KeystoneParams | undefined>;
+    protected validateQueryParams({ queryParams }: {
+        queryParams: any;
+    }): Promise<string[]>;
+    protected handleRouteImpl(reqCtx: RequestContext<KeystoneParams, KeystoneGetQueryParams>): Promise<ResponseResult | undefined>;
+}
+//# sourceMappingURL=keystone-get.handler.d.mts.map

package/dist/serve-gib/handlers/api/keystone/keystone-get.handler.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keystone-get.handler.d.mts","sourceRoot":"","sources":["../../../../../src/serve-gib/handlers/api/keystone/keystone-get.handler.mts"],"names":[],"mappings":"AAAA;;GAEG;AASH,OAAO,EAAE,gBAAgB,EAAE,MAAM,kDAAkD,CAAC;AAIpF,OAAO,EAAE,gCAAgC,EAAE,MAAM,wBAAwB,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAExF,OAAO,EAEH,sBAAsB,EAAE,cAAc,EACzC,MAAM,8BAA8B,CAAC;AAGtC,MAAM,WAAW,uBAAuB;IACpC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CACjD;AAID;;;GAGG;AACH,qBAAa,kBAAmB,SAAQ,gCAAgC,CAAC,cAAc,EAAE,sBAAsB,CAAC;IAC5G,UAAmB,EAAE,EAAE,MAAM,CAAkC;IAC/D,UAAmB,MAAM,EAAE,kBAAkB,CAAS;IACtD,UAAmB,KAAK,SAAkC;IAE1D,UAAyB,eAAe,CAAC,MAAM,EAAE,cAAc,CAAC,cAAc,EAAE,sBAAsB,CAAC,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAmB5I;IAED,UAAyB,mBAAmB,CAAC,EAAE,WAAW,EAAE,EAAE;QAAE,WAAW,EAAE,GAAG,CAAC;KAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAsCtG;IAED,UAAgB,eAAe,CAAC,MAAM,EAAE,cAAc,CAAC,cAAc,EAAE,sBAAsB,CAAC,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAgGnI;CACJ"}

package/dist/serve-gib/handlers/api/keystone/keystone-get.handler.mjs

@@ -0,0 +1,183 @@
+/**
+ * @module serve-gib/handlers/api/keystone
+ */
+import { extractErrorMsg } from '@ibgib/helper-gib/dist/helpers/utils-helper.mjs';
+import { getIbGibAddr } from '@ibgib/ts-gib/dist/helper.mjs';
+import { validateKeystoneGraph } from '@ibgib/core-gib/dist/keystone/keystone-helpers.mjs';
+import { GLOBAL_LOG_A_LOT } from '../../../constants.mjs';
+import { ServeGibHandlerWithMetaspaceBase } from '../../handler-base.mjs';
+import { API_PATH_REGEXES } from '../../../path-constants.mjs';
+import { DEFAULT_QUERY_PARAMS_GET_KEYSTONE, isKnownQueryParamsKey_KeystoneGet, KNOWN_QUERY_PARAMS_KEYSTONE_GET } from './keystone-handler-types.mjs';
+import { validateAndCoerceBooleanQueryParam } from '../../../serve-gib-helpers.mjs';
+const logalot = GLOBAL_LOG_A_LOT;
+/**
+ * GET /api/keystone/:domainAddr
+ * GET /api/keystone/:domainAddr&getLatest=true
+ */
+export class KeystoneGetHandler extends ServeGibHandlerWithMetaspaceBase {
+    lc = `[${KeystoneGetHandler.name}]`;
+    method = 'GET';
+    regex = API_PATH_REGEXES.KEYSTONE_ADDR;
+    async parseParamsImpl(reqCtx) {
+        const lc = `${this.lc}[${this.parseParamsImpl.name}]`;
+        try {
+            if (logalot) {
+                console.log(`${lc} starting...`);
+            }
+            const match = reqCtx.pathname.match(this.regex);
+            if (!match) {
+                throw new Error(`(UNEXPECTED) match falsy for regex? at this point, we have passed canHandleRoute, so this should parse correctly. (E: 02c868316604c7c26823380885b79c26)`);
+            }
+            const domainIb = decodeURIComponent(match[1]);
+            const domainGib = decodeURIComponent(match[2]);
+            const domainAddr = getIbGibAddr({ ib: domainIb, gib: domainGib });
+            return {
+                domainInfo: this.getDomainInfo({ domainAddr }),
+            };
+        }
+        catch (error) {
+            console.error(`${lc} ${extractErrorMsg(error)}`);
+            throw error;
+        }
+        finally {
+            if (logalot) {
+                console.log(`${lc} complete.`);
+            }
+        }
+    }
+    async validateQueryParams({ queryParams }) {
+        const lc = `${this.lc}[${this.validateQueryParams.name}]`;
+        try {
+            if (logalot) {
+                console.log(`${lc} starting... (I: f619e8121988498cd8e8928986663826)`);
+            }
+            const errors = [];
+            // strict checking
+            const queryParamsKeys = Object.keys(queryParams);
+            const invalidKeys = queryParamsKeys.filter(x => !isKnownQueryParamsKey_KeystoneGet(x));
+            if (invalidKeys.length > 0) {
+                throw new Error(`invalid query params keys: ${invalidKeys.join(', ')}. valid query params keys: ${KNOWN_QUERY_PARAMS_KEYSTONE_GET.join(', ')} (E: f9642823b568a1cfe89e0401567ac826)`);
+            }
+            const ValidationFns = {
+                getLatest: async () => {
+                    validateAndCoerceBooleanQueryParam(queryParams, 'getLatest', errors);
+                },
+                getGraph: async () => {
+                    validateAndCoerceBooleanQueryParam(queryParams, 'getGraph', errors);
+                },
+            };
+            // execute all validation functions
+            for (const fn of Object.values(ValidationFns)) {
+                await fn();
+            }
+            return errors;
+        }
+        catch (error) {
+            console.error(`${lc} ${extractErrorMsg(error)}`);
+            throw error;
+        }
+        finally {
+            if (logalot) {
+                console.log(`${lc} complete.`);
+            }
+        }
+    }
+    async handleRouteImpl(reqCtx) {
+        const lc = `[${this.handleRouteImpl.name}]`;
+        try {
+            if (logalot) {
+                console.log(`${lc} starting...`);
+            }
+            const { metaspace } = reqCtx;
+            if (!metaspace) {
+                throw new Error(`(UNEXPECTED) reqCtx.metaspace falsy? (E: 871a396f7e824989981a1508d0d17826)`);
+            }
+            const { domainInfo } = reqCtx.params;
+            if (!domainInfo) {
+                throw new Error(`(UNEXPECTED) reqCtx.params.domainInfo falsy? at this point, we've passed canHandleRoute so this should be truthy (E: 5d3e96d9f8d8f65258d530af0e223826)`);
+            }
+            const { addr: domainAddr } = domainInfo;
+            // if (!domainIb || !domainGib) { return this.error(400, 'Keystone address required'); }
+            // const addr = `${domainIb}^${domainGib}`;
+            if (logalot) {
+                console.log(`${lc} domainAddr: ${domainAddr} (I: ea08786359e85481a89c77d84e8f0826)`);
+            }
+            // there are two paths for this: getLatest or not (get exact given addr)
+            // this should be driven by queryParams
+            const queryParams = {
+                ...DEFAULT_QUERY_PARAMS_GET_KEYSTONE,
+                ...(reqCtx.queryParams ?? {}),
+            };
+            const { getLatest, getGraph } = queryParams;
+            if (!getLatest) {
+                throw new Error(`"getLatest: false" not implemented yet. currently this always returns the graph. (E: befd28156438a0b538cf107872e89b26)`);
+            }
+            if (!getGraph) {
+                throw new Error(`"getGraph: false" not implemented yet. currently this always returns the graph. (E: 84c8a88fdb28e72d884addb8f43fc826)`);
+            }
+            /**
+             * get the default local user space that corresponds to the current
+             * keystone domain (which is what the metaspace was initialized
+             * with).
+             */
+            const space = await metaspace.getLocalUserSpace({ lock: false });
+            if (!space) {
+                throw new Error(`(UNEXPECTED) space falsy? we couldn't get the default local userspace from the metaspace for the addr (${domainAddr}) (E: 934551f1845f94c8320a8a980025c526)`);
+            }
+            // use this code later if we de
+            let domainAddr_latest = domainAddr;
+            if (getLatest) {
+                const latestAddr = await metaspace.getLatestAddr({ addr: domainAddr, space });
+                if (latestAddr) {
+                    domainAddr_latest = latestAddr;
+                }
+            }
+            const domainGraph = await metaspace.getDependencyGraph({
+                ibGibAddr: domainAddr_latest,
+                /**
+                 * since domain is a keystone, "live" is not needed because the
+                 * entire graph is composed of stones with no timelines.
+                 */
+                live: false,
+                space,
+            });
+            let keystoneIbGib = domainGraph[domainAddr_latest];
+            if (!keystoneIbGib) {
+                const errorMsg_addrInfo = domainAddr_latest === domainAddr ?
+                    `domainAddr: ${domainAddr}` :
+                    `domainAddr: ${domainAddr}, domainAddr_latest: `;
+                return this.error(404, `Keystone not found. ${errorMsg_addrInfo} (E: 0238c85f94889607088220a324db1826)`); /* <<<< returns early */
+            }
+            // go ahead and validate even though we just pulled this (should be
+            // valid or it shouldn't have been persisted)
+            const keystoneValidationErrors = await validateKeystoneGraph({
+                keystoneIbGib,
+                getLatest,
+                invalidIfMoreRecentKeystoneFoundInSpace: getLatest,
+                space,
+            });
+            if (keystoneValidationErrors.length > 0) {
+                const errorMsg_addrInfo = domainAddr_latest === domainAddr ?
+                    `domainAddr: ${domainAddr}` :
+                    `domainAddr: ${domainAddr}, domainAddr_latest: `;
+                return this.error(404, `Keystone invalid for ${errorMsg_addrInfo}. validationErrors: ${keystoneValidationErrors.join('|')}`); /* <<<< returns early */
+            }
+            // valid keystone graph
+            const responseBody = {
+                domainGraph: domainGraph,
+            };
+            return this.ok(responseBody);
+        }
+        catch (error) {
+            const emsg = `${lc} ${extractErrorMsg(error)}`;
+            console.error(emsg);
+            return this.error(500, emsg);
+        }
+        finally {
+            if (logalot) {
+                console.log(`${lc} complete.`);
+            }
+        }
+    }
+}
+//# sourceMappingURL=keystone-get.handler.mjs.map

package/dist/serve-gib/handlers/api/keystone/keystone-get.handler.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"keystone-get.handler.mjs","sourceRoot":"","sources":["../../../../../src/serve-gib/handlers/api/keystone/keystone-get.handler.mts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,iDAAiD,CAAC;AAClF,OAAO,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAK7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,oDAAoD,CAAC;AAI3F,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,gCAAgC,EAAE,MAAM,wBAAwB,CAAC;AAE1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EACH,iCAAiC,EAAE,iCAAiC,EAC5B,+BAA+B,EAC1E,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,kCAAkC,EAAE,MAAM,gCAAgC,CAAC;AAMpF,MAAM,OAAO,GAAG,gBAAgB,CAAC;AAEjC;;;GAGG;AACH,MAAM,OAAO,kBAAmB,SAAQ,gCAAwE;IACzF,EAAE,GAAW,IAAI,kBAAkB,CAAC,IAAI,GAAG,CAAC;IAC5C,MAAM,GAAuB,KAAK,CAAC;IACnC,KAAK,GAAG,gBAAgB,CAAC,aAAa,CAAC;IAEvC,KAAK,CAAC,eAAe,CAAC,MAA8D;QACnG,MAAM,EAAE,GAAG,GAAG,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC;QACtD,IAAI,CAAC;YACD,IAAI,OAAO,EAAE,CAAC;gBAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;YAAC,CAAC;YAClD,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAChD,IAAI,CAAC,KAAK,EAAE,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,yJAAyJ,CAAC,CAAC;YAAC,CAAC;YAE3L,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9C,MAAM,SAAS,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/C,MAAM,UAAU,GAAG,YAAY,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;YAClE,OAAO;gBACH,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,EAAE,UAAU,EAAE,CAAC;aACjD,CAAC;QACN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACjD,MAAM,KAAK,CAAC;QAChB,CAAC;gBAAS,CAAC;YACP,IAAI,OAAO,EAAE,CAAC;gBAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YAAC,CAAC;QACpD,CAAC;IACL,CAAC;IAEkB,KAAK,CAAC,mBAAmB,CAAC,EAAE,WAAW,EAAyB;QAC/E,MAAM,EAAE,GAAG,GAAG,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC;QAC1D,IAAI,CAAC;YACD,IAAI,OAAO,EAAE,CAAC;gBAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,oDAAoD,CAAC,CAAC;YAAC,CAAC;YAExF,MAAM,MAAM,GAAa,EAAE,CAAC;YAE5B,kBAAkB;YAClB,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACjD,MAAM,WAAW,GAAa,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,CAAC,CAAC;YACjG,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,8BAA8B,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,8BAA8B,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;YAC1L,CAAC;YAID,MAAM,aAAa,GAA0D;gBACzE,SAAS,EAAE,KAAK,IAAI,EAAE;oBAClB,kCAAkC,CAAC,WAAW,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;gBACzE,CAAC;gBACD,QAAQ,EAAE,KAAK,IAAI,EAAE;oBACjB,kCAAkC,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;gBACxE,CAAC;aACJ,CAAC;YAEF,mCAAmC;YACnC,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC5C,MAAM,EAAE,EAAE,CAAC;YACf,CAAC;YAED,OAAO,MAAM,CAAC;QAElB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACjD,MAAM,KAAK,CAAC;QAChB,CAAC;gBAAS,CAAC;YACP,IAAI,OAAO,EAAE,CAAC;gBAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YAAC,CAAC;QACpD,CAAC;IACL,CAAC;IAES,KAAK,CAAC,eAAe,CAAC,MAA8D;QAC1F,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,GAAG,CAAC;QAC5C,IAAI,CAAC;YACD,IAAI,OAAO,EAAE,CAAC;gBAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;YAAC,CAAC;YAElD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;YAC7B,IAAI,CAAC,SAAS,EAAE,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;YAAC,CAAC;YAElH,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,MAAwB,CAAC;YACvD,IAAI,CAAC,UAAU,EAAE,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,wJAAwJ,CAAC,CAAC;YAAC,CAAC;YAC/L,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,UAAU,CAAC;YAExC,wFAAwF;YACxF,2CAA2C;YAE3C,IAAI,OAAO,EAAE,CAAC;gBAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,gBAAgB,UAAU,wCAAwC,CAAC,CAAC;YAAC,CAAC;YAEtG,wEAAwE;YACxE,uCAAuC;YAEvC,MAAM,WAAW,GAAG;gBAChB,GAAG,iCAAiC;gBACpC,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,EAAE,CAAC;aAChC,CAAA;YAED,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,WAAW,CAAC;YAE5C,IAAI,CAAC,SAAS,EAAE,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,wHAAwH,CAAC,CAAC;YAAC,CAAC;YAC9J,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,uHAAuH,CAAC,CAAC;YAAC,CAAC;YAE5J;;;;eAIG;YACH,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YACjE,IAAI,CAAC,KAAK,EAAE,CAAC;gBAAC,MAAM,IAAI,KAAK,CAAC,0GAA0G,UAAU,yCAAyC,CAAC,CAAC;YAAC,CAAC;YAG/L,+BAA+B;YAC/B,IAAI,iBAAiB,GAAc,UAAU,CAAC;YAC9C,IAAI,SAAS,EAAE,CAAC;gBACZ,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC9E,IAAI,UAAU,EAAE,CAAC;oBAAC,iBAAiB,GAAG,UAAU,CAAC;gBAAC,CAAC;YACvD,CAAC;YAGD,MAAM,WAAW,GAAG,MAAM,SAAS,CAAC,kBAAkB,CAAC;gBACnD,SAAS,EAAE,iBAAiB;gBAC5B;;;mBAGG;gBACH,IAAI,EAAE,KAAK;gBACX,KAAK;aACR,CAAC,CAAC;YAEH,IAAI,aAAa,GAAqB,WAAW,CAAC,iBAAiB,CAAqB,CAAC;YACzF,IAAI,CAAC,aAAa,EAAE,CAAC;gBACjB,MAAM,iBAAiB,GAAG,iBAAiB,KAAK,UAAU,CAAC,CAAC;oBACxD,eAAe,UAAU,EAAE,CAAC,CAAC;oBAC7B,eAAe,UAAU,uBAAuB,CAAA;gBACpD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,uBAAuB,iBAAiB,wCAAwC,CAAC,CAAC,CAAC,wBAAwB;YACtI,CAAC;YAED,mEAAmE;YACnE,6CAA6C;YAE7C,MAAM,wBAAwB,GAAG,MAAM,qBAAqB,CAAC;gBACzD,aAAa;gBACb,SAAS;gBACT,uCAAuC,EAAE,SAAS;gBAClD,KAAK;aACR,CAAC,CAAC;YAEH,IAAI,wBAAwB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtC,MAAM,iBAAiB,GAAG,iBAAiB,KAAK,UAAU,CAAC,CAAC;oBACxD,eAAe,UAAU,EAAE,CAAC,CAAC;oBAC7B,eAAe,UAAU,uBAAuB,CAAA;gBAEpD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,wBAAwB,iBAAiB,uBAAuB,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,wBAAwB;YAC1J,CAAC;YAED,uBAAuB;YACvB,MAAM,YAAY,GAA4B;gBAC1C,WAAW,EAAE,WAA+C;aAC/D,CAAC;YACF,OAAO,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC;QAEjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,GAAG,EAAE,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;YAC/C,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACpB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACjC,CAAC;gBAAS,CAAC;YACP,IAAI,OAAO,EAAE,CAAC;gBAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YAAC,CAAC;QACpD,CAAC;IACL,CAAC;CACJ"}

package/dist/serve-gib/handlers/api/keystone/keystone-get.respec.d.mts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=keystone-get.respec.d.mts.map

package/dist/serve-gib/handlers/api/keystone/keystone-get.respec.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keystone-get.respec.d.mts","sourceRoot":"","sources":["../../../../../src/serve-gib/handlers/api/keystone/keystone-get.respec.mts"],"names":[],"mappings":""}