@ibgib/space-gib 0.0.19 → 0.0.21

package/dist/server/server.mjs

@@ -1,6 +1,6 @@
 // src/server/server.mts
 import { createServer } from "node:http";
-import { join as join10, dirname } from "node:path";
+import { join as join11, dirname } from "node:path";
 import { fileURLToPath } from "node:url";
 
 // ../../libs/helper-gib/dist/constants.mjs
@@ -247,10 +247,10 @@ function isExpired({ expirationTimestampUTC }) {
 function unique(arr) {
   return Array.from(new Set(arr));
 }
-function patchObject({ obj, value, path: path7, pathDelimiter, logalot: logalot74 }) {
+function patchObject({ obj, value, path: path8, pathDelimiter, logalot: logalot75 }) {
   const lc2 = `[${patchObject.name}]`;
   try {
-    if (logalot74) {
+    if (logalot75) {
       console.log(`${lc2} starting...`);
     }
     if (!obj) {
@@ -259,12 +259,12 @@ function patchObject({ obj, value, path: path7, pathDelimiter, logalot: logalot7
     if (typeof obj !== "object") {
       throw new Error(`obj must be type 'object' (E: 66fdc289b32c06492bd95f5d266e6a22)`);
     }
-    if (!path7) {
+    if (!path8) {
       throw new Error(`path required (at the very least should be the key in the root obj.) (E: fc779e7794ead8a0b44e5f2e776b0e22)`);
     }
     pathDelimiter = pathDelimiter || DEFAULT_DATA_PATH_DELIMITER;
     let targetObj = obj;
-    const pathPieces = path7.split(pathDelimiter).filter((x) => !!x);
+    const pathPieces = path8.split(pathDelimiter).filter((x) => !!x);
     const key = pathPieces.pop();
     pathPieces.forEach((piece) => {
       let currentValue = targetObj[piece];
@@ -282,7 +282,7 @@ function patchObject({ obj, value, path: path7, pathDelimiter, logalot: logalot7
     console.error(`${lc2} ${error.message}`);
     throw error;
   } finally {
-    if (logalot74) {
+    if (logalot75) {
       console.log(`${lc2} complete.`);
     }
   }
@@ -1149,18 +1149,18 @@ function validateRawPath(rawPath) {
     }
   }
 }
-function isSafePath(path7) {
-  const errors = validateRawPath(path7);
+function isSafePath(path8) {
+  const errors = validateRawPath(path8);
   return errors.length === 0;
 }
-function validateStaticPath(path7) {
+function validateStaticPath(path8) {
   const lc2 = `[${validateStaticPath.name}]`;
   try {
     if (logalot3) {
       console.log(`${lc2} starting... (I: 4f9cf8ffd528c7dd88324529528eeb26)`);
     }
     const errors = [];
-    if (!VALID_STATIC_PATH_REGEX.test(path7)) {
+    if (!VALID_STATIC_PATH_REGEX.test(path8)) {
       errors.push(`static path fails to match VALID_STATIC_PATH_REGEX of ${VALID_STATIC_PATH_REGEX} (E: dfdf38a0439d4d09186e6fa81ab66826) `);
     }
     return errors;
@@ -1172,11 +1172,11 @@ function validateStaticPath(path7) {
     }
   }
 }
-function isValidStaticPath(path7) {
-  if (!isSafePath(path7)) {
+function isValidStaticPath(path8) {
+  if (!isSafePath(path8)) {
     return false;
   }
-  const errors = validateStaticPath(path7);
+  const errors = validateStaticPath(path8);
   return errors.length === 0;
 }
 function validateAddressSegment(encodedAddr) {
@@ -9408,17 +9408,17 @@ var B2TFS_DEFAULT_ENCODINGS_TO_TRY = [
 
 // ../../libs/node-gib/dist/witness/space/node-filesystem-space/node-filesystem-space-helper.mjs
 var logalot15 = GLOBAL_LOG_A_LOT3;
-async function tryRead({ path: path7, directory, encoding }) {
+async function tryRead({ path: path8, directory, encoding }) {
   const lc2 = `[${tryRead.name}]`;
   try {
     if (logalot15) {
       console.log(`${lc2} starting...`);
       console.log(`${lc2} cwd: ${cwd()}`);
-      if (path7.includes("bootstrap^gib")) {
+      if (path8.includes("bootstrap^gib")) {
         console.log(`${lc2} trying bootstrap^gib... (I: dacfdbe5a2d640ab947a7c17e3c56f78)`);
       }
     }
-    const fullPath = pathUtils.join(directory, path7);
+    const fullPath = pathUtils.join(directory, path8);
     if (logalot15) {
       console.log(`${lc2} fullPath: ${fullPath} (I: 459b416ac32c711bfbab54177839b323)`);
     }
@@ -9432,7 +9432,7 @@ async function tryRead({ path: path7, directory, encoding }) {
     return resRead;
   } catch (error) {
     if (logalot15) {
-      console.log(`${lc2} fullPath not found from directory (${directory}) and path (${path7})
+      console.log(`${lc2} fullPath not found from directory (${directory}) and path (${path8})
 error:
 ${extractErrorMsg(error)} (I: 1fde689d29aa47fcb589b3e7dac8929b)`);
     }
@@ -9443,17 +9443,17 @@ ${extractErrorMsg(error)} (I: 1fde689d29aa47fcb589b3e7dac8929b)`);
     }
   }
 }
-async function tryRead_bin({ path: path7, directory, encoding }) {
+async function tryRead_bin({ path: path8, directory, encoding }) {
   const lc2 = `[${tryRead_bin.name}]`;
   try {
     if (logalot15) {
       console.log(`${lc2} starting...`);
       console.log(`${lc2} cwd: ${cwd()}`);
-      if (path7.includes("bootstrap^gib")) {
+      if (path8.includes("bootstrap^gib")) {
         console.log(`${lc2} trying bootstrap^gib... (I: 5eb010444b814addb1a6bbe18ca3dbfa)`);
       }
     }
-    const fullPath = pathUtils.join(directory, path7);
+    const fullPath = pathUtils.join(directory, path8);
     if (logalot15) {
       console.log(`${lc2} fullPath: ${fullPath} (I: c342bf56df354e9ab2653855a458b99d)`);
     }
@@ -9483,7 +9483,7 @@ async function tryRead_bin({ path: path7, directory, encoding }) {
     };
   } catch (error) {
     if (logalot15) {
-      console.log(`${lc2} fullPath not found from directory (${directory}) and path (${path7})
+      console.log(`${lc2} fullPath not found from directory (${directory}) and path (${path8})
 error:
 ${extractErrorMsg(error)} (I: 882e54f079024c94864bdaa74979b397)`);
     }
@@ -9692,23 +9692,23 @@ var NodeFilesystemSpace_V1 = class _NodeFilesystemSpace_V1 extends FilesystemSpa
       }
       ;
       const thisData = this.data;
-      let path7 = "";
+      let path8 = "";
       let data = "";
       const addr = getIbGibAddr({ ibGib });
       const isBin = isBinary({ addr });
-      path7 = await this.buildPath({
+      path8 = await this.buildPath({
         addr,
         isDna: isDna2 ?? false,
         isBin,
         ensureMetaStonePaths: true
       });
-      await this.ensureDirsImpl([pathUtils2.dirname(path7)]);
-      let fullPath = pathUtils2.join(thisData.baseDir, path7);
+      await this.ensureDirsImpl([pathUtils2.dirname(path8)]);
+      let fullPath = pathUtils2.join(thisData.baseDir, path8);
       if (logalot16) {
         console.log(`${lc2} fullPath: ${fullPath} (I: 2441a896f7e6418db57c0341d5c65ef2)`);
       }
       if (logalot16) {
-        console.log(`${lc2} path: ${path7}, directory: ${thisData.baseDir}, thisData.encoding: ${thisData.encoding} (I: d4440ececbe6c859f8fcf6d7ece12522)`);
+        console.log(`${lc2} path: ${path8}, directory: ${thisData.baseDir}, thisData.encoding: ${thisData.encoding} (I: d4440ececbe6c859f8fcf6d7ece12522)`);
       }
       let encoding;
       if (!isBin) {
@@ -9744,15 +9744,15 @@ var NodeFilesystemSpace_V1 = class _NodeFilesystemSpace_V1 extends FilesystemSpa
         throw new Error(`this.data required (E: 27e1f5206d96d635e617f5ba69141423)`);
       }
       const data = this.data;
-      let path7 = "";
+      let path8 = "";
       if (!isBinary({ addr })) {
-        path7 = await this.buildPath({
+        path8 = await this.buildPath({
           addr,
           isDna: isDna2 ?? false,
           ensureMetaStonePaths: true
         });
       } else {
-        path7 = await this.buildPath({
+        path8 = await this.buildPath({
           addr,
           isDna: false,
           isBin: true,
@@ -9760,12 +9760,12 @@ var NodeFilesystemSpace_V1 = class _NodeFilesystemSpace_V1 extends FilesystemSpa
         });
       }
       if (logalot16) {
-        console.log(`${lc2} path: ${path7}, directory: ${data.baseDir}`);
+        console.log(`${lc2} path: ${path8}, directory: ${data.baseDir}`);
       }
-      const fullPath = pathUtils2.join(this.data.baseDir, path7);
+      const fullPath = pathUtils2.join(this.data.baseDir, path8);
       await rm(fullPath, { force: true });
       if (logalot16) {
-        console.log(`${lc2} deleted. path: ${path7}`);
+        console.log(`${lc2} deleted. path: ${path8}`);
       }
       result.success = true;
     } catch (error) {
@@ -9967,10 +9967,10 @@ var NodeFilesystemSpace_V1 = class _NodeFilesystemSpace_V1 extends FilesystemSpa
         return;
       }
       for (let i = 0; i < paths.length; i++) {
-        const path7 = paths[i];
-        const lc22 = `${lc2}[(path: ${path7}, directory: ${directory})]`;
-        const fullPath = pathUtils2.join(directory, path7);
-        const pathExistsKey = getPathKey(path7);
+        const path8 = paths[i];
+        const lc22 = `${lc2}[(path: ${path8}, directory: ${directory})]`;
+        const fullPath = pathUtils2.join(directory, path8);
+        const pathExistsKey = getPathKey(path8);
         let exists = this.pathExistsMap[pathExistsKey] || false;
         if (!exists) {
           try {
@@ -12316,19 +12316,19 @@ var DynamicFormFactoryBase = class _DynamicFormFactoryBase extends WitnessFactor
       }
       for (let i = 0; i < items.length; i++) {
         const item = items[i];
-        const path7 = contextPath ? contextPath + pathDelimiter + item.name : item.name;
+        const path8 = contextPath ? contextPath + pathDelimiter + item.name : item.name;
         if (!item.items) {
           patchObject({
             obj: data,
             value: item.value,
-            path: path7,
+            path: path8,
             logalot: logalot21,
             pathDelimiter
           });
         } else if (item.items.length > 0) {
           this.patchDataFromItems({
             data,
-            contextPath: path7,
+            contextPath: path8,
             items: item.items,
             pathDelimiter
           });
@@ -17609,28 +17609,41 @@ var IdentityIndexService = class _IdentityIndexService {
    * Throws `duplicate_identity_409` error if email is already registered.
    */
   async registerEmailIndex({ email, tjpAddr, primaryTjpAddr }) {
-    const targetAddr = tjpAddr || primaryTjpAddr;
-    if (!targetAddr) {
-      throw new Error("Either tjpAddr or primaryTjpAddr must be provided. (E: 62f15851b9a8c8d718279ab84e426826)");
-    }
-    const emailHash = await getIdentityEmailHash({ email, salt: this.salt });
-    const { folderPath, filePath } = getShardedIndexPath({
-      baseDir: this.baseDir,
-      emailHash
-    });
-    await fs.mkdir(folderPath, { recursive: true });
-    const record = {
-      tjpAddr: targetAddr,
-      createdAt: Date.now()
-    };
+    const lc2 = `${this.lc}[${this.registerEmailIndex.name}]`;
     try {
-      await fs.writeFile(filePath, JSON.stringify(record, null, 2), { flag: "wx" });
-      return { emailHash, filePath, record };
-    } catch (error) {
-      if (error.code === "EEXIST") {
-        throw new Error(`Email is already registered (E: duplicate_identity_409)`);
+      if (logalot38) {
+        console.log(`${lc2} starting... (I: 5d1728a955657616a8cf6ce8b5afa226)`);
+      }
+      const targetAddr = tjpAddr || primaryTjpAddr;
+      if (!targetAddr) {
+        throw new Error("Either tjpAddr or primaryTjpAddr must be provided. (E: 62f15851b9a8c8d718279ab84e426826)");
+      }
+      const emailHash = await getIdentityEmailHash({ email, salt: this.salt });
+      const { folderPath, filePath } = getShardedIndexPath({
+        baseDir: this.baseDir,
+        emailHash
+      });
+      await fs.mkdir(folderPath, { recursive: true });
+      const record = {
+        tjpAddr: targetAddr,
+        createdAt: Date.now()
+      };
+      try {
+        await fs.writeFile(filePath, JSON.stringify(record, null, 2), { flag: "wx" });
+        return { emailHash, filePath, record };
+      } catch (error) {
+        if (error.code === "EEXIST") {
+          throw new Error(`Email is already registered (E: duplicate_identity_409)`);
+        }
+        throw error;
       }
+    } catch (error) {
+      console.error(`${lc2} ${extractErrorMsg(error)}`);
       throw error;
+    } finally {
+      if (logalot38) {
+        console.log(`${lc2} complete.`);
+      }
     }
   }
   /**
@@ -18123,6 +18136,9 @@ var StaticFileHandler = class _StaticFileHandler extends ServeGibHandlerBase {
       if (existsSync3(filePath) && statSync(filePath).isDirectory()) {
         filePath = join6(filePath, "index.html");
       }
+      if (!existsSync3(filePath) && existsSync3(filePath + ".html")) {
+        filePath = filePath + ".html";
+      }
       if (!existsSync3(filePath)) {
         filePath = join6(this.clientDir, "index.html");
       }
@@ -19239,6 +19255,7 @@ var KeystoneProfileBuilder = class _KeystoneProfileBuilder {
 };
 
 // ../../libs/core-gib/dist/keystone/delegate/delegate-constants.mjs
+var KEYSTONE_ROLE_CUSTODIAL_SYNC = "custodial-sync";
 var DEFAULT_DELEGATE_TTL_SECONDS = 30 * 24 * 60 * 60;
 var CUSTODIAN_POOL_ID_PREFIX = "custodian-manage-";
 
@@ -19264,6 +19281,9 @@ function isKeystoneExpired({ keystone, nowUTC }) {
   return currentMs > expirationMs;
 }
 function isDelegateExpired({ delegateInfo, delegateKeystone, nowUTC }) {
+  if (!delegateInfo && !delegateKeystone) {
+    throw new Error(`either delegateInfo or delegateKeystone required. (E: d1baa55ca8d23b26f8562a28179d2126)`);
+  }
   if (delegateKeystone) {
     return isKeystoneExpired({ keystone: delegateKeystone, nowUTC });
   }
@@ -19277,6 +19297,35 @@ function isDelegateExpired({ delegateInfo, delegateKeystone, nowUTC }) {
   const currentMs = nowUTC !== void 0 ? typeof nowUTC === "number" ? nowUTC : nowUTC instanceof Date ? nowUTC.getTime() : Date.parse(nowUTC) : Date.now();
   return currentMs > expirationMs;
 }
+function isCustodialDelegate({ delegateInfo, delegateKeystone, providerId }) {
+  if (!delegateInfo && !delegateKeystone) {
+    return false;
+  }
+  const role = delegateInfo?.role || delegateKeystone?.data?.frameDetails?.role;
+  const deviceName = delegateInfo?.deviceName || delegateKeystone?.data?.frameDetails?.deviceTag;
+  const metadataProvider = delegateInfo?.metadata?.provider || delegateKeystone?.data?.frameDetails?.custodianProvider || delegateKeystone?.data?.frameDetails?.metadata?.provider;
+  const isExplicitCustodialRole = role === KEYSTONE_ROLE_CUSTODIAL_SYNC || role === "custodial-sync";
+  if (metadataProvider) {
+    if (providerId) {
+      return String(metadataProvider).toLowerCase() === String(providerId).toLowerCase();
+    }
+    return true;
+  }
+  if (deviceName) {
+    const lowerDevice = deviceName.toLowerCase();
+    if (providerId) {
+      const lowerProvider = String(providerId).toLowerCase();
+      return lowerDevice.includes(lowerProvider) || isExplicitCustodialRole && lowerDevice.includes("custodian");
+    }
+    if (lowerDevice.includes("custodian") || lowerDevice.includes("oauth2") || lowerDevice.includes("google") || lowerDevice.includes("github") || lowerDevice.startsWith("email-") || lowerDevice.includes("@")) {
+      return true;
+    }
+  }
+  if (!providerId && isExplicitCustodialRole) {
+    return true;
+  }
+  return false;
+}
 
 // ../../libs/core-gib/dist/keystone/strategy/hash-reveal-v1/hash-reveal-v1.mjs
 var KeystoneStrategy_HashRevealV1 = class _KeystoneStrategy_HashRevealV1 extends KeystoneStrategy {
@@ -20437,7 +20486,7 @@ var KeystoneService_V1 = class _KeystoneService_V1 {
   /**
    * Creates a brand new Keystone Identity Timeline.
    */
-  async genesis({ masterSecret, emails, frameDetails, configs, metaspace, space, isPrimary }) {
+  async genesis({ masterSecret, emails, frameDetails, credentialIds, dataToPatch, configs, metaspace, space, isPrimary }) {
     const lc2 = `${this.lc}[${this.genesis.name}]`;
     try {
       if (logalot46) {
@@ -20462,12 +20511,18 @@ var KeystoneService_V1 = class _KeystoneService_V1 {
       if (emails && emails.length > 0) {
         data.emails = [...emails];
       }
+      if (credentialIds && credentialIds.length > 0) {
+        data.credentialIds = [...credentialIds];
+      }
       if (frameDetails || isPrimary !== void 0) {
         data.frameDetails = { ...frameDetails || {} };
         if (isPrimary !== void 0) {
           data.frameDetails.isPrimary = isPrimary;
         }
       }
+      if (dataToPatch) {
+        Object.assign(data, dataToPatch);
+      }
       const keystoneIbGib = await createKeystoneIbGibImpl({ data, metaspace, space });
       return keystoneIbGib;
     } catch (error) {
@@ -20580,12 +20635,15 @@ var KeystoneService_V1 = class _KeystoneService_V1 {
    * to the parent's `delegates` map. This operation is signed using the parent's `manage` pool.
    * Validates the delegate keystone's entire graph/timeline before registering.
    */
-  async registerDelegate({ parentKeystone, delegateKeystone, masterSecret, frameDetails, metaspace, space, allowedVerbs, deviceName, expirationUTC, ttlSeconds }) {
+  async registerDelegate({ parentKeystone, delegateKeystone, masterSecret, signingPoolId, frameDetails, metaspace, space, allowedVerbs, deviceName, expirationUTC, ttlSeconds }) {
     const lc2 = `${this.lc}[${this.registerDelegate.name}]`;
     try {
       if (logalot46) {
         console.log(`${lc2} starting...`);
       }
+      if (!signingPoolId) {
+        throw new Error(`signingPoolId is required (E: a1b2c3d4e5f6818fa8ab28c9b60e6899)`);
+      }
       const validationErrors = await validateKeystoneGraph({
         keystoneIbGib: delegateKeystone,
         getLatest: true,
@@ -20596,9 +20654,14 @@ var KeystoneService_V1 = class _KeystoneService_V1 {
         throw new Error(`Delegate keystone validation failed: ${validationErrors.join(", ")} (E: 88fa8ab28c9b60e68994511a5825)`);
       }
       const prevData = parentKeystone.data;
-      const hasManagePool = prevData.challengePools.some((p) => p.id === POOL_ID_MANAGE);
-      if (!hasManagePool) {
-        throw new Error(`Parent keystone does not support delegation. Manage pool is required. (E: 818fa8ab28c9b60e68994511a5825)`);
+      const signingPool = prevData.challengePools.find((p) => p.id === signingPoolId);
+      if (!signingPool) {
+        throw new Error(`Parent keystone does not contain signing pool: ${signingPoolId} (E: 818fa8ab28c9b60e68994511a5825)`);
+      }
+      if (signingPool.config.allowedVerbs && signingPool.config.allowedVerbs.length > 0) {
+        if (!signingPool.config.allowedVerbs.includes(KEYSTONE_VERB_MANAGE)) {
+          throw new Error(`Signing pool ${signingPoolId} is not authorized for verb: ${KEYSTONE_VERB_MANAGE} (E: 918fa8ab28c9b60e68994511a5825)`);
+        }
       }
       const delegateTjpAddr = getTjpAddr({ ibGib: delegateKeystone });
       if (!delegateTjpAddr) {
@@ -20618,13 +20681,14 @@ var KeystoneService_V1 = class _KeystoneService_V1 {
         deviceName,
         allowedVerbs,
         spaceId,
-        expirationUTC: effectiveExpirationUTC
+        expirationUTC: effectiveExpirationUTC,
+        role: delegateKeystone.data?.frameDetails?.role
       };
       const evolved = await this.sign({
         latestKeystone: parentKeystone,
         masterSecret,
         claim,
-        poolId: POOL_ID_MANAGE,
+        poolId: signingPoolId,
         frameDetails,
         metaspace,
         space,
@@ -20644,18 +20708,26 @@ var KeystoneService_V1 = class _KeystoneService_V1 {
   }
   /**
    * Unregisters a delegate keystone from the parent keystone by removing its entry
-   * from the parent's `delegates` map. This operation is signed using the parent's `manage` pool.
+   * from the parent's `delegates` map.
    */
-  async unregisterDelegate({ parentKeystone, delegateTjpAddr, masterSecret, frameDetails, metaspace, space }) {
+  async unregisterDelegate({ parentKeystone, delegateTjpAddr, masterSecret, signingPoolId, frameDetails, metaspace, space }) {
     const lc2 = `${this.lc}[${this.unregisterDelegate.name}]`;
     try {
       if (logalot46) {
         console.log(`${lc2} starting...`);
       }
+      if (!signingPoolId) {
+        throw new Error(`signingPoolId is required (E: b2c3d4e5f6a13889f8ab28c9b60e6899)`);
+      }
       const prevData = parentKeystone.data;
-      const hasManagePool = prevData.challengePools.some((p) => p.id === POOL_ID_MANAGE);
-      if (!hasManagePool) {
-        throw new Error(`Parent keystone does not support delegation. Manage pool is required. (E: 3889f8ab28c9b60e68994511a5825)`);
+      const signingPool = prevData.challengePools.find((p) => p.id === signingPoolId);
+      if (!signingPool) {
+        throw new Error(`Parent keystone does not contain signing pool: ${signingPoolId} (E: 3889f8ab28c9b60e68994511a5825)`);
+      }
+      if (signingPool.config.allowedVerbs && signingPool.config.allowedVerbs.length > 0) {
+        if (!signingPool.config.allowedVerbs.includes(KEYSTONE_VERB_MANAGE)) {
+          throw new Error(`Signing pool ${signingPoolId} is not authorized for verb: ${KEYSTONE_VERB_MANAGE} (E: 4889f8ab28c9b60e68994511a5825)`);
+        }
       }
       const claim = {
         target: delegateTjpAddr,
@@ -20670,7 +20742,7 @@ var KeystoneService_V1 = class _KeystoneService_V1 {
         latestKeystone: parentKeystone,
         masterSecret,
         claim,
-        poolId: POOL_ID_MANAGE,
+        poolId: signingPoolId,
         frameDetails,
         metaspace,
         space,
@@ -20753,7 +20825,7 @@ var KeystoneService_V1 = class _KeystoneService_V1 {
       if (logalot46) {
         console.log(`${lc2} starting...`);
       }
-      const latestAddr = await metaspace.getLatestAddr({ tjpAddr: addr, space });
+      const latestAddr = await metaspace.getLatestAddr({ addr, space });
       if (!latestAddr) {
         throw new Error(`could not find latest addr for ${addr}`);
       }
@@ -20891,7 +20963,7 @@ var KeystoneService_V1 = class _KeystoneService_V1 {
    * Requires the Master Secret to authorize the change via a pool containing
    * the 'manage' verb.
    */
-  async addPools({ latestKeystone, masterSecret, newPools, metaspace, space }) {
+  async addPools({ latestKeystone, masterSecret, signingPoolId, newPools, frameDetails, dataToPatch, metaspace, space }) {
     const lc2 = `${this.lc}[${this.addPools.name}]`;
     try {
       if (logalot46) {
@@ -20909,6 +20981,7 @@ var KeystoneService_V1 = class _KeystoneService_V1 {
       }
       const adminPool = resolveTargetPool({
         pools: prevData.challengePools,
+        poolId: signingPoolId,
         verb: KEYSTONE_VERB_MANAGE
       });
       if (logalot46) {
@@ -20947,7 +21020,7 @@ var KeystoneService_V1 = class _KeystoneService_V1 {
       if (n % KEYSTONE_CHECKPOINT_FREQUENCY === 0) {
         const currentFrameView = {
           ...latestKeystone,
-          data: { ...prevData, challengePools: finalPools }
+          data: { ...prevData, challengePools: finalPools, frameDetails }
         };
         checkpointDetails = await this.getAggregateDetails({
           latestKeystone: currentFrameView,
@@ -20959,8 +21032,10 @@ var KeystoneService_V1 = class _KeystoneService_V1 {
         challengePools: finalPools,
         proofs: [proof],
         // The proof authorizes the structure change
+        frameDetails,
         checkpointDetails,
-        ...prevData.delegates ? { delegates: prevData.delegates } : {}
+        ...prevData.delegates ? { delegates: prevData.delegates } : {},
+        ...dataToPatch
       };
       const newKeystone = await evolvePersistAndRegisterKeystone({
         prevIbGib: latestKeystone,
@@ -20986,7 +21061,7 @@ var KeystoneService_V1 = class _KeystoneService_V1 {
    * Requires the Master Secret to authorize the change via a pool containing
    * the 'manage' verb (the administrative manage pool).
    */
-  async removePools({ latestKeystone, masterSecret, poolIds, metaspace, space }) {
+  async removePools({ latestKeystone, masterSecret, signingPoolId, poolIds, frameDetails, dataToPatch, metaspace, space }) {
     const lc2 = `${this.lc}[${this.removePools.name}]`;
     try {
       if (logalot46) {
@@ -21004,6 +21079,7 @@ var KeystoneService_V1 = class _KeystoneService_V1 {
       }
       const adminPool = resolveTargetPool({
         pools: prevData.challengePools,
+        poolId: signingPoolId,
         verb: KEYSTONE_VERB_MANAGE
       });
       if (logalot46) {
@@ -21040,7 +21116,7 @@ var KeystoneService_V1 = class _KeystoneService_V1 {
       if (n % KEYSTONE_CHECKPOINT_FREQUENCY === 0) {
         const currentFrameView = {
           ...latestKeystone,
-          data: { ...prevData, challengePools: finalPools }
+          data: { ...prevData, challengePools: finalPools, frameDetails }
         };
         checkpointDetails = await this.getAggregateDetails({
           latestKeystone: currentFrameView,
@@ -21051,8 +21127,10 @@ var KeystoneService_V1 = class _KeystoneService_V1 {
       const newData = {
         challengePools: finalPools,
         proofs: [proof],
+        frameDetails,
         checkpointDetails,
-        ...prevData.delegates ? { delegates: prevData.delegates } : {}
+        ...prevData.delegates ? { delegates: prevData.delegates } : {},
+        ...dataToPatch
       };
       const newKeystone = await evolvePersistAndRegisterKeystone({
         prevIbGib: latestKeystone,
@@ -21104,10 +21182,12 @@ var KeystoneService_V1 = class _KeystoneService_V1 {
         }
         const res = await metaspace.get({ addr: prevAddr, space });
         if (!res.success || !res.ibGibs || res.ibGibs.length === 0) {
-          throw new Error(`Could not find previous keystone frame at ${prevAddr} (E: e3d069b22e11e550e58844889ddb5325)`);
+          console.warn(`${lc2} Could not find previous keystone frame at ${prevAddr} (W: e3d069b22e11e550e58844889ddb5325). Returning aggregated details collected so far.`);
+          break;
         }
         current = res.ibGibs[0];
       }
+      this.pruneTombstoneNulls(aggregated);
       return aggregated;
     } catch (error) {
       console.error(`${lc2} ${extractErrorMsg(error)}`);
@@ -21397,22 +21477,32 @@ var KeystoneService_V1 = class _KeystoneService_V1 {
       if ((poolIds ?? []).length === 0) {
         const delegateSigningSecret = await deriveDelegateSecret({ masterSecret: signingSecret });
         const delegateNewMasterSecret = await deriveDelegateSecret({ masterSecret: newMasterSecret });
-        const delegateTjpAddrs = Object.keys(latestKeystone.data.delegates ?? {});
-        for (const delegateTjpAddr of delegateTjpAddrs) {
-          const { newKeystone: newDelegate, newDelegates: newDelegatesSecondOrder } = await this.changePassword({
-            keystoneAddr: delegateTjpAddr,
-            metaspace,
-            space,
-            newMasterSecret: delegateNewMasterSecret,
-            signingSecret: delegateSigningSecret,
-            signingPoolId,
-            poolIds: void 0,
-            frameDetails
-          });
-          if (newDelegatesSecondOrder && newDelegatesSecondOrder.length > 0) {
-            throw new Error(`(UNEXPECTED) Delegate keystone has its own delegate(s)? ATOW (07/20/2026) second order delegates are not supported. (E: de45a7b7d9b8f61f6e58158269acba26)`);
+        const delegatesMap = latestKeystone.data.delegates ?? {};
+        for (const [delegateTjpAddr, delegateInfo] of Object.entries(delegatesMap)) {
+          if (isCustodialDelegate({ delegateInfo })) {
+            if (logalot46) {
+              console.log(`${lc2} Skipping custodial delegate rotation for ${delegateTjpAddr} (${delegateInfo.deviceName})`);
+            }
+            continue;
+          }
+          try {
+            const { newKeystone: newDelegate, newDelegates: newDelegatesSecondOrder } = await this.changePassword({
+              keystoneAddr: delegateTjpAddr,
+              metaspace,
+              space,
+              newMasterSecret: delegateNewMasterSecret,
+              signingSecret: delegateSigningSecret,
+              signingPoolId,
+              poolIds: void 0,
+              frameDetails
+            });
+            if (newDelegatesSecondOrder && newDelegatesSecondOrder.length > 0) {
+              throw new Error(`(UNEXPECTED) Delegate keystone has its own delegate(s)? ATOW (07/20/2026) second order delegates are not supported. (E: de45a7b7d9b8f61f6e58158269acba26)`);
+            }
+            newDelegates.push(newDelegate);
+          } catch (delegateErr) {
+            console.warn(`${lc2} Error rotating user delegate ${delegateTjpAddr}: ${extractErrorMsg(delegateErr)}. Continuing.`);
           }
-          newDelegates.push(newDelegate);
         }
       }
       return { newKeystone: newKeystoneIbGib, newDelegates: newDelegates.length > 0 ? newDelegates : void 0 };
@@ -21429,20 +21519,55 @@ var KeystoneService_V1 = class _KeystoneService_V1 {
    * Verifies if a candidate signing secret (password) is correct for a specific challenge pool.
    * Does not mutate any state.
    */
-  async verifySigningSecret({ keystoneIbGib, signingSecret, poolId }) {
+  /**
+   * Verifies if a given secret successfully solves challenges in the specified pool
+   * (or any candidate manage pool if poolId is omitted).
+   */
+  async verifySigningSecret({ keystoneIbGib, signingSecret, poolId, verb = KEYSTONE_VERB_MANAGE }) {
     const lc2 = `${this.lc}[${this.verifySigningSecret.name}]`;
     try {
       if (!keystoneIbGib.data)
         return false;
-      const pool = keystoneIbGib.data.challengePools.find((p) => p.id === poolId);
-      if (!pool)
-        return false;
-      return await verifyPoolSecret({ pool, signingSecret });
+      const pools = keystoneIbGib.data.challengePools;
+      if (poolId) {
+        const pool = pools.find((p) => p.id === poolId);
+        if (!pool)
+          return false;
+        return await verifyPoolSecret({ pool, signingSecret });
+      }
+      const candidatePools = pools.filter((p) => p.id === "manage" || p.id.startsWith("passkey-manage-") || p.config.allowedVerbs && verb && p.config.allowedVerbs.includes(verb));
+      for (const candidate of candidatePools) {
+        const isValid = await verifyPoolSecret({ pool: candidate, signingSecret });
+        if (isValid) {
+          return true;
+        }
+      }
+      return false;
     } catch (error) {
       console.warn(`${lc2} Exception during verification: ${extractErrorMsg(error)}`);
       return false;
     }
   }
+  /**
+   * Recursively prunes keys whose value is strictly `null` (tombstone records)
+   * from aggregated detail maps/arrays.
+   */
+  pruneTombstoneNulls(obj) {
+    if (!obj || typeof obj !== "object") {
+      return obj;
+    }
+    if (Array.isArray(obj)) {
+      return obj.filter((item) => item !== null).map((item) => this.pruneTombstoneNulls(item));
+    }
+    for (const key of Object.keys(obj)) {
+      if (obj[key] === null) {
+        delete obj[key];
+      } else if (typeof obj[key] === "object") {
+        this.pruneTombstoneNulls(obj[key]);
+      }
+    }
+    return obj;
+  }
 };
 
 // ../../libs/node-gib/dist/email/verify/email-verify-helpers.mjs
@@ -21811,16 +21936,20 @@ function generateVerificationCode() {
   const codeNum = Math.floor(1e5 + Math.random() * 9e5);
   return codeNum.toString();
 }
-async function savePendingCodeRecord({ pendingDir, code, maxAttempts = 5, ttlMs = DEFAULT_MAGIC_LINK_TTL_MS }) {
+async function savePendingCodeRecord({ pendingDir, code, maxAttempts = 5, ttlMs = DEFAULT_MAGIC_LINK_TTL_MS, resendCount = 0, attempts = 0 }) {
   const codeHash = await hash({ s: `verificationcode${code}` });
   const record = {
     codeHash,
-    attempts: 0,
+    rawCode: code,
+    attempts,
     maxAttempts,
-    expiresAt: Date.now() + ttlMs
+    expiresAt: Date.now() + ttlMs,
+    dispatchedAt: Date.now(),
+    resendCount
   };
   const codeFilePath = path4.join(pendingDir, "code.json");
   await fs2.writeFile(codeFilePath, JSON.stringify(record, null, 2), "utf-8");
+  return record;
 }
 function createDefaultEmailSender() {
   const rawMode = process.env.EMAIL_MODE;
@@ -22493,6 +22622,7 @@ function loadSsoServerConfig() {
 
 // ../../libs/node-gib/dist/identity/sso/sso-custodian-service.mjs
 import { createPublicKey, verify } from "node:crypto";
+var logalot49 = GLOBAL_LOG_A_LOT || true;
 var SsoCustodianService = class _SsoCustodianService {
   config;
   lc = `[${_SsoCustodianService.name}]`;
@@ -22524,25 +22654,37 @@ var SsoCustodianService = class _SsoCustodianService {
    *   - Generator: Client/Server (Derived from environmental configuration and sent by client).
    */
   async getOAuthUserInfo(providerId, code, redirectUri) {
-    const lc2 = `${this.lc}[${this.getOAuthUserInfo.name}]`;
-    const providerConfig = this.config.providers[providerId];
-    if (!providerConfig) {
-      throw new Error(`Provider '${providerId}' is not configured on this server. (E: c28900abfefd23e89cf23f12)`);
-    }
-    console.log(`${lc2} Exchanging code for provider: ${providerId}`);
-    const tokens = await this.exchangeCodeForTokens(providerConfig, code, redirectUri);
-    if (providerId === "google") {
-      if (!tokens.id_token) {
-        throw new Error(`Google token exchange did not return id_token. (E: e28900abfefd23e89cf45f23)`);
+    const lc2 = `[${this.getOAuthUserInfo.name}]`;
+    try {
+      if (logalot49) {
+        console.log(`${lc2} starting... (I: 3ad578b5065ec6d5517469571a4da826)`);
+      }
+      const providerConfig = this.config.providers[providerId];
+      if (!providerConfig) {
+        throw new Error(`Provider '${providerId}' is not configured on this server. (E: c28900abfefd23e89cf23f12)`);
+      }
+      console.log(`${lc2} Exchanging code for provider: ${providerId}`);
+      const tokens = await this.exchangeCodeForTokens(providerConfig, code, redirectUri);
+      if (providerId === "google") {
+        if (!tokens.id_token) {
+          throw new Error(`Google token exchange did not return id_token. (E: e28900abfefd23e89cf45f23)`);
+        }
+        return this.verifyAndNormalizeGoogleToken(tokens.id_token);
+      } else if (providerId === "github") {
+        if (!tokens.access_token) {
+          throw new Error(`GitHub token exchange did not return access_token. (E: a28900abfefd23e89cf56f34)`);
+        }
+        return this.fetchAndNormalizeGithubUser(providerConfig, tokens.access_token);
       }
-      return this.verifyAndNormalizeGoogleToken(tokens.id_token);
-    } else if (providerId === "github") {
-      if (!tokens.access_token) {
-        throw new Error(`GitHub token exchange did not return access_token. (E: a28900abfefd23e89cf56f34)`);
+      throw new Error(`Unsupported provider: ${providerId}. (E: d28900abfefd23e89cf67f45)`);
+    } catch (error) {
+      console.error(`${lc2} ${extractErrorMsg(error)}`);
+      throw error;
+    } finally {
+      if (logalot49) {
+        console.log(`${lc2} complete.`);
       }
-      return this.fetchAndNormalizeGithubUser(providerConfig, tokens.access_token);
     }
-    throw new Error(`Unsupported provider: ${providerId}. (E: d28900abfefd23e89cf67f45)`);
   }
   /**
    * Directly validates a Google ID Token (JWT) locally and returns normalized user info.
@@ -22799,62 +22941,75 @@ var SsoCustodianService = class _SsoCustodianService {
    *   - Generator: Client (Generated on user's device).
    */
   async createCustodianChallengePool({ providerId, providerKey, userNonce, keystoneAddr, metaspace, space }) {
-    const keystoneService = new KeystoneService_V1();
-    const targetKeystone = await keystoneService.getLatestKeystone({
-      addr: keystoneAddr,
-      metaspace,
-      space
-    });
-    if (!targetKeystone) {
-      throw new Error(`Keystone not found for address: ${keystoneAddr} (E: 8a9c2b1d3e5f6a7b8c9d0e1f2a3b4c5d)`);
-    }
-    const userManagePool = targetKeystone.data?.challengePools.find((p) => p.id === POOL_ID_MANAGE);
-    if (!userManagePool) {
-      throw new Error(`Keystone manage pool not found. Custodian manage pool must match the user manage pool's security config. (E: 7c4e5f6a7b8c9d0e1f2a3b4c5e6f7a8b)`);
-    }
-    if (!providerId || !KEYSTONE_POOL_ID_REGEXP.test(providerId)) {
-      throw new Error(`Invalid providerId: "${providerId}". Must match ${KEYSTONE_POOL_ID_REGEXP} (E: 3a2c4e5f6a7b8c9d0e1f2a3b4c5e6f)`);
-    }
-    const poolId = `custodian-manage-${providerId}`;
-    const custodianSecret = await this.deriveServerDelegateSecret(providerKey, userNonce);
-    const poolSalt = await hash({
-      s: `${providerKey}:${userNonce}:salt`,
-      algorithm: HashAlgorithm.sha_256
-    });
-    const poolSaltShort = poolSalt.substring(0, 16);
-    const config = {
-      ...userManagePool.config,
-      id: poolId,
-      salt: poolSaltShort,
-      allowedVerbs: [KEYSTONE_VERB_MANAGE, KEYSTONE_VERB_REVOKE]
-    };
-    const strategy = KeystoneStrategyFactory.create({ config });
-    const poolSecret = await strategy.derivePoolSecret({ masterSecret: custodianSecret });
-    const challenges = {};
-    const timestamp = Date.now().toString();
-    for (let i = 0; i < config.behavior.size; i++) {
-      const challengeId = await generateOpaqueChallengeId({
-        salt: config.salt,
-        timestamp,
-        index: i
+    const lc2 = `[${this.createCustodianChallengePool.name}]`;
+    try {
+      if (logalot49) {
+        console.log(`${lc2} starting... (I: 4238580990ff19dd2815d5186ffa0826)`);
+      }
+      const keystoneService = new KeystoneService_V1();
+      const targetKeystone = await keystoneService.getLatestKeystone({
+        addr: keystoneAddr,
+        metaspace,
+        space
       });
-      const solution = await strategy.generateSolution({
-        poolSecret,
-        poolId: config.id,
-        challengeId
+      if (!targetKeystone) {
+        throw new Error(`Keystone not found for address: ${keystoneAddr} (E: 8a9c2b1d3e5f6a7b8c9d0e1f2a3b4c5d)`);
+      }
+      const userManagePool = targetKeystone.data?.challengePools.find((p) => p.id === POOL_ID_MANAGE);
+      if (!userManagePool) {
+        throw new Error(`Keystone manage pool not found. Custodian manage pool must match the user manage pool's security config. (E: 7c4e5f6a7b8c9d0e1f2a3b4c5e6f7a8b)`);
+      }
+      if (!providerId || !KEYSTONE_POOL_ID_REGEXP.test(providerId)) {
+        throw new Error(`Invalid providerId: "${providerId}". Must match ${KEYSTONE_POOL_ID_REGEXP} (E: 3a2c4e5f6a7b8c9d0e1f2a3b4c5e6f)`);
+      }
+      const poolId = `custodian-manage-${providerId}`;
+      const custodianSecret = await this.deriveServerDelegateSecret(providerKey, userNonce);
+      const poolSalt = await hash({
+        s: `${providerKey}:${userNonce}:salt`,
+        algorithm: HashAlgorithm.sha_256
       });
-      challenges[challengeId] = await strategy.generateChallenge({ solution });
-    }
-    return {
-      id: poolId,
-      config,
-      challenges,
-      isForeign: true,
-      metadata: {
-        owner: "custodian",
-        providerKey
+      const poolSaltShort = poolSalt.substring(0, 16);
+      const config = {
+        ...userManagePool.config,
+        id: poolId,
+        salt: poolSaltShort,
+        allowedVerbs: [KEYSTONE_VERB_MANAGE, KEYSTONE_VERB_REVOKE]
+      };
+      const strategy = KeystoneStrategyFactory.create({ config });
+      const poolSecret = await strategy.derivePoolSecret({ masterSecret: custodianSecret });
+      const challenges = {};
+      const timestamp = Date.now().toString();
+      for (let i = 0; i < config.behavior.size; i++) {
+        const challengeId = await generateOpaqueChallengeId({
+          salt: config.salt,
+          timestamp,
+          index: i
+        });
+        const solution = await strategy.generateSolution({
+          poolSecret,
+          poolId: config.id,
+          challengeId
+        });
+        challenges[challengeId] = await strategy.generateChallenge({ solution });
       }
-    };
+      return {
+        id: poolId,
+        config,
+        challenges,
+        isForeign: true,
+        metadata: {
+          owner: "custodian",
+          providerKey
+        }
+      };
+    } catch (error) {
+      console.error(`${lc2} ${extractErrorMsg(error)}`);
+      throw error;
+    } finally {
+      if (logalot49) {
+        console.log(`${lc2} complete.`);
+      }
+    }
   }
   /**
    * Maps private server configuration to safe public client configurations.
@@ -22930,9 +23085,17 @@ var SsoCustodianService = class _SsoCustodianService {
     }
   }
 };
+var ssoCustodianService;
+function getSsoCustodianService() {
+  if (!ssoCustodianService) {
+    const config = loadSsoServerConfig();
+    ssoCustodianService = new SsoCustodianService(config);
+  }
+  return ssoCustodianService;
+}
 
 // ../../libs/node-gib/dist/serve-gib/handlers/api/keystone/keystone-evolve.handler.mjs
-var logalot49 = GLOBAL_LOG_A_LOT;
+var logalot50 = GLOBAL_LOG_A_LOT;
 var KeystoneEvolveHandler = class _KeystoneEvolveHandler extends ServeGibHandlerWithMetaspaceBase {
   lc = `[${_KeystoneEvolveHandler.name}]`;
   method = "PUT";
@@ -22942,7 +23105,11 @@ var KeystoneEvolveHandler = class _KeystoneEvolveHandler extends ServeGibHandler
     if (match && match.length >= 3) {
       const domainIb = decodeURIComponent(match[1]);
       const domainGib = decodeURIComponent(match[2]);
-      const domainAddr = getIbGibAddr({ ib: domainIb, gib: domainGib });
+      let domainAddr = getIbGibAddr({ ib: domainIb, gib: domainGib });
+      const { tjpGib } = getGibInfo({ ibGibAddr: domainAddr });
+      if (tjpGib && domainIb) {
+        domainAddr = `${domainIb}^${tjpGib}`;
+      }
       return {
         domainAddr,
         domainInfo: this.getDomainInfo({ domainAddr })
@@ -22957,7 +23124,7 @@ var KeystoneEvolveHandler = class _KeystoneEvolveHandler extends ServeGibHandler
   async handleRouteImpl(reqCtx) {
     const lc2 = `${this.lc}[handleRouteImpl]`;
     try {
-      if (logalot49) {
+      if (logalot50) {
         console.log(`${lc2} starting...`);
       }
       if (!reqCtx.params) {
@@ -23028,7 +23195,7 @@ var KeystoneEvolveHandler = class _KeystoneEvolveHandler extends ServeGibHandler
         const removeInfo = claim.details.info;
         if (removeInfo && Array.isArray(removeInfo.remove)) {
           const config = loadSsoServerConfig();
-          const custodian5 = new SsoCustodianService(config);
+          const custodian = new SsoCustodianService(config);
           for (const poolId of removeInfo.remove) {
             if (poolId.startsWith("custodian-manage-")) {
               const providerId = poolId.replace("custodian-manage-", "");
@@ -23036,7 +23203,7 @@ var KeystoneEvolveHandler = class _KeystoneEvolveHandler extends ServeGibHandler
               const token = parsed.revokeTokens?.[providerId];
               if (token) {
                 try {
-                  await custodian5.revokeToken(providerId, token);
+                  await custodian.revokeToken(providerId, token);
                 } catch (e) {
                   console.warn(`${lc2} Failed to revoke token for provider ${providerId}: ${extractErrorMsg(e)}`);
                 }
@@ -23054,7 +23221,7 @@ var KeystoneEvolveHandler = class _KeystoneEvolveHandler extends ServeGibHandler
       console.error(`${lc2} ${extractErrorMsg(error)}`);
       return this.error(422, `Evolve validation/persistence failed: ${extractErrorMsg(error)}`);
     } finally {
-      if (logalot49) {
+      if (logalot50) {
         console.log(`${lc2} complete.`);
       }
     }
@@ -23062,7 +23229,7 @@ var KeystoneEvolveHandler = class _KeystoneEvolveHandler extends ServeGibHandler
 };
 
 // ../../libs/node-gib/dist/serve-gib/handlers/api/keystone/keystone-post.handler.mjs
-var logalot50 = GLOBAL_LOG_A_LOT;
+var logalot51 = GLOBAL_LOG_A_LOT;
 var KeystonePostHandler = class _KeystonePostHandler extends ServeGibHandlerWithMetaspaceBase {
   lc = `[${_KeystonePostHandler.name}]`;
   method = "POST";
@@ -23092,7 +23259,7 @@ var KeystonePostHandler = class _KeystonePostHandler extends ServeGibHandlerWith
   async handleRouteImpl(reqCtx) {
     const lc2 = `[${this.handleRouteImpl.name}]`;
     try {
-      if (logalot50) {
+      if (logalot51) {
         console.log(`${lc2} starting... (I: 63bab8214834cb6e383e0fc364ee8826)`);
       }
       const { metaspace } = reqCtx;
@@ -23117,7 +23284,7 @@ var KeystonePostHandler = class _KeystonePostHandler extends ServeGibHandlerWith
       console.error(emsg);
       return this.error(500, emsg);
     } finally {
-      if (logalot50) {
+      if (logalot51) {
         console.log(`${lc2} complete.`);
       }
     }
@@ -23125,7 +23292,7 @@ var KeystonePostHandler = class _KeystonePostHandler extends ServeGibHandlerWith
 };
 
 // ../../libs/node-gib/dist/serve-gib/handlers/api/keystone/keystone-get.handler.mjs
-var logalot51 = GLOBAL_LOG_A_LOT;
+var logalot52 = GLOBAL_LOG_A_LOT;
 var KeystoneGetHandler = class _KeystoneGetHandler extends ServeGibHandlerWithMetaspaceBase {
   lc = `[${_KeystoneGetHandler.name}]`;
   method = "GET";
@@ -23133,7 +23300,7 @@ var KeystoneGetHandler = class _KeystoneGetHandler extends ServeGibHandlerWithMe
   async parseParamsImpl(reqCtx) {
     const lc2 = `${this.lc}[${this.parseParamsImpl.name}]`;
     try {
-      if (logalot51) {
+      if (logalot52) {
         console.log(`${lc2} starting...`);
       }
       const match = reqCtx.pathname.match(this.regex);
@@ -23150,7 +23317,7 @@ var KeystoneGetHandler = class _KeystoneGetHandler extends ServeGibHandlerWithMe
       console.error(`${lc2} ${extractErrorMsg(error)}`);
       throw error;
     } finally {
-      if (logalot51) {
+      if (logalot52) {
         console.log(`${lc2} complete.`);
       }
     }
@@ -23158,7 +23325,7 @@ var KeystoneGetHandler = class _KeystoneGetHandler extends ServeGibHandlerWithMe
   async validateQueryParams({ queryParams }) {
     const lc2 = `${this.lc}[${this.validateQueryParams.name}]`;
     try {
-      if (logalot51) {
+      if (logalot52) {
         console.log(`${lc2} starting... (I: f619e8121988498cd8e8928986663826)`);
       }
       const errors = [];
@@ -23183,7 +23350,7 @@ var KeystoneGetHandler = class _KeystoneGetHandler extends ServeGibHandlerWithMe
       console.error(`${lc2} ${extractErrorMsg(error)}`);
       throw error;
     } finally {
-      if (logalot51) {
+      if (logalot52) {
         console.log(`${lc2} complete.`);
       }
     }
@@ -23191,7 +23358,7 @@ var KeystoneGetHandler = class _KeystoneGetHandler extends ServeGibHandlerWithMe
   async handleRouteImpl(reqCtx) {
     const lc2 = `[${this.handleRouteImpl.name}]`;
     try {
-      if (logalot51) {
+      if (logalot52) {
         console.log(`${lc2} starting...`);
       }
       const { metaspace } = reqCtx;
@@ -23203,7 +23370,7 @@ var KeystoneGetHandler = class _KeystoneGetHandler extends ServeGibHandlerWithMe
         throw new Error(`(UNEXPECTED) reqCtx.params.domainInfo falsy? at this point, we've passed canHandleRoute so this should be truthy (E: 5d3e96d9f8d8f65258d530af0e223826)`);
       }
       const { addr: domainAddr } = domainInfo;
-      if (logalot51) {
+      if (logalot52) {
         console.log(`${lc2} domainAddr: ${domainAddr} (I: ea08786359e85481a89c77d84e8f0826)`);
       }
       const queryParams = {
@@ -23261,7 +23428,7 @@ var KeystoneGetHandler = class _KeystoneGetHandler extends ServeGibHandlerWithMe
       console.error(emsg);
       return this.error(500, emsg);
     } finally {
-      if (logalot51) {
+      if (logalot52) {
         console.log(`${lc2} complete.`);
       }
     }
@@ -23269,7 +23436,7 @@ var KeystoneGetHandler = class _KeystoneGetHandler extends ServeGibHandlerWithMe
 };
 
 // ../../libs/node-gib/dist/serve-gib/handlers/api/keystone/keystone-lookup.handler.mjs
-var logalot52 = GLOBAL_LOG_A_LOT2 || true;
+var logalot53 = GLOBAL_LOG_A_LOT2 || true;
 var KeystoneLookupHandler = class _KeystoneLookupHandler extends ServeGibHandlerBase {
   lc = `[${_KeystoneLookupHandler.name}]`;
   method = "POST";
@@ -23292,11 +23459,11 @@ var KeystoneLookupHandler = class _KeystoneLookupHandler extends ServeGibHandler
         return this.error(400, "Identifier is required");
       }
       const indexService = getIdentityIndexService();
-      if (logalot52) {
+      if (logalot53) {
         console.log(`${lc2} identifier: ${identifier} (I: 1c417812d9781c5888090ae8d18d0826)`);
       }
       const record = await indexService.getEmailIndex({ email: identifier });
-      if (logalot52) {
+      if (logalot53) {
         console.log(`${lc2} record: ${record ? pretty(record) : "undefined"} (I: 7c6ce86b3ad8e3a138991211b5ec5826)`);
       }
       if (!record) {
@@ -23368,15 +23535,7 @@ var KeystoneCheckEmailHandler = class _KeystoneCheckEmailHandler extends ServeGi
 };
 
 // ../../libs/node-gib/dist/serve-gib/handlers/api/keystone/sso-config.handler.mjs
-var logalot53 = GLOBAL_LOG_A_LOT;
-var custodian;
-function getCustodian() {
-  if (!custodian) {
-    const config = loadSsoServerConfig();
-    custodian = new SsoCustodianService(config);
-  }
-  return custodian;
-}
+var logalot54 = GLOBAL_LOG_A_LOT;
 var SsoConfigHandler = class _SsoConfigHandler extends ServeGibHandlerBase {
   lc = `[${_SsoConfigHandler.name}]`;
   method = "GET";
@@ -23395,10 +23554,10 @@ var SsoConfigHandler = class _SsoConfigHandler extends ServeGibHandlerBase {
   async handleRouteImpl(reqCtx) {
     const lc2 = `${this.lc}[${this.handleRouteImpl.name}]`;
     try {
-      if (logalot53) {
+      if (logalot54) {
         console.log(`${lc2} starting...`);
       }
-      const service = getCustodian();
+      const service = getSsoCustodianService();
       const hostUrl = `${reqCtx.protocol}://${reqCtx.headers.host}`;
       const providers = service.getSsoClientConfigs(hostUrl);
       return this.ok({
@@ -23410,7 +23569,7 @@ var SsoConfigHandler = class _SsoConfigHandler extends ServeGibHandlerBase {
       console.error(`${lc2} Fetching SSO config failed: ${emsg}`);
       return this.error(500, `SSO configuration retrieval failed: ${emsg}`);
     } finally {
-      if (logalot53) {
+      if (logalot54) {
         console.log(`${lc2} complete.`);
       }
     }
@@ -23425,43 +23584,133 @@ function isSsoProviderLinked({ keystone, providerId }) {
   return keystone.data.challengePools.some((p) => p.id === targetPoolId);
 }
 
-// ../../libs/node-gib/dist/serve-gib/handlers/api/keystone/sso-link.handler.mjs
-var logalot54 = GLOBAL_LOG_A_LOT;
-var custodian2;
-function getCustodian2() {
-  if (!custodian2) {
-    const config = loadSsoServerConfig();
-    custodian2 = new SsoCustodianService(config);
+// ../../libs/node-gib/dist/identity/sso/custodian-auth-helpers.mjs
+async function deriveCustodianAuthCode({ custodianReqsOmitAuthCode, serverSecret }) {
+  const lc2 = `[${deriveCustodianAuthCode.name}]`;
+  try {
+    if (!serverSecret) {
+      throw new Error("serverSecret required for custodian auth code derivation (E: a1b2c3d4e5f67890123456789abcdef0)");
+    }
+    const salt = await hash({
+      s: JSON.stringify(custodianReqsOmitAuthCode),
+      algorithm: HashAlgorithm.sha_512
+    });
+    return await kdf_recursiveSaltWrap({
+      masterSecret: serverSecret,
+      salt,
+      rounds: 1e3,
+      algorithm: HashAlgorithm.sha_512
+    });
+  } catch (error) {
+    console.error(`${lc2} ${extractErrorMsg(error)}`);
+    throw error;
   }
-  return custodian2;
 }
-var SsoLinkHandler = class _SsoLinkHandler extends ServeGibHandlerWithMetaspaceBase {
-  lc = `[${_SsoLinkHandler.name}]`;
-  method = "POST";
-  regex = API_PATH_REGEXES.IDENTITY_SSO_LINK;
-  async parseParamsImpl(reqCtx) {
-    let parsed;
-    try {
-      parsed = JSON.parse(reqCtx.body);
-    } catch {
-      return void 0;
+async function generateCustodianRequirements({ primaryTjpAddr, ttlMs = 15 * 60 * 1e3, allowedVerbs = [KEYSTONE_VERB_SYNC, KEYSTONE_VERB_CONNECT], serverSecret }) {
+  const lc2 = `[${generateCustodianRequirements.name}]`;
+  try {
+    if (!primaryTjpAddr) {
+      throw new Error("primaryTjpAddr is required to generate custodian requirements (E: b2c3d4e5f67890123456789abcdef01)");
     }
-    const parentTjpAddr = parsed?.parentTjpAddr;
-    if (!parentTjpAddr) {
-      return void 0;
+    if (!serverSecret) {
+      throw new Error("serverSecret is required to generate custodian requirements (E: c3d4e5f67890123456789abcdef012)");
     }
+    const nonce = await getUUID();
+    const expiresAt = Date.now() + ttlMs;
+    const custodianReqsOmitAuthCode = {
+      primaryTjpAddr,
+      nonce,
+      expiresAt,
+      allowedVerbs
+    };
+    const authCode = await deriveCustodianAuthCode({
+      custodianReqsOmitAuthCode,
+      serverSecret
+    });
     return {
-      parentTjpAddr,
-      domainInfo: this.getDomainInfo({ domainAddr: parentTjpAddr })
+      ...custodianReqsOmitAuthCode,
+      authCode
     };
+  } catch (error) {
+    console.error(`${lc2} ${extractErrorMsg(error)}`);
+    throw error;
   }
-  async validateQueryParams({ queryParams }) {
-    return [];
-  }
-  async handleRouteImpl(reqCtx) {
-    const lc2 = `${this.lc}[${this.handleRouteImpl.name}]`;
-    try {
-      if (logalot54) {
+}
+async function getAuthCustodianIndex({ custodianReqs }) {
+  return await hash({
+    s: JSON.stringify(custodianReqs),
+    algorithm: HashAlgorithm.sha_256
+  });
+}
+async function verifyCustodianRequirements({ custodianReqs, serverSecret }) {
+  try {
+    if (!custodianReqs || !custodianReqs.authCode || !custodianReqs.nonce || !custodianReqs.expiresAt || !custodianReqs.primaryTjpAddr) {
+      return { valid: false, error: "Malformed custodian requirements structure. (E: d4e5f67890123456789abcdef0123)" };
+    }
+    if (Date.now() > custodianReqs.expiresAt) {
+      return { valid: false, error: "Custodian requirements have expired. (E: e5f67890123456789abcdef01234)" };
+    }
+    const { authCode, ...custodianReqsOmitAuthCode } = custodianReqs;
+    const expectedAuthCode = await deriveCustodianAuthCode({
+      custodianReqsOmitAuthCode,
+      serverSecret
+    });
+    if (authCode !== expectedAuthCode) {
+      return { valid: false, error: "Cryptographic authCode mismatch. Requirement payload tampered or invalid. (E: f67890123456789abcdef012345)" };
+    }
+    return { valid: true };
+  } catch (error) {
+    return { valid: false, error: `Verification failed: ${extractErrorMsg(error)} (E: 7890123456789abcdef0123456)` };
+  }
+}
+
+// ../../libs/node-gib/dist/serve-gib/handlers/api/keystone/sso-link.handler.mjs
+var logalot55 = GLOBAL_LOG_A_LOT || true;
+var SsoLinkHandler = class _SsoLinkHandler extends ServeGibHandlerWithMetaspaceBase {
+  lc = `[${_SsoLinkHandler.name}]`;
+  method = "POST";
+  regex = API_PATH_REGEXES.IDENTITY_SSO_LINK;
+  async parseParamsImpl(reqCtx) {
+    const lc2 = `${this.lc}[${this.parseParamsImpl.name}]`;
+    try {
+      if (logalot55) {
+        console.log(`${lc2} starting... (I: a38f2cee647c127b48ec6ad1e8d1e826)`);
+      }
+      let parsed;
+      try {
+        parsed = JSON.parse(reqCtx.body);
+      } catch {
+        return void 0;
+      }
+      let parentTjpAddr = parsed?.parentTjpAddr;
+      if (!parentTjpAddr) {
+        return void 0;
+      }
+      const { ib } = getIbAndGib({ ibGibAddr: parentTjpAddr });
+      const { tjpGib } = getGibInfo({ ibGibAddr: parentTjpAddr });
+      if (tjpGib && ib) {
+        parentTjpAddr = `${ib}^${tjpGib}`;
+      }
+      return {
+        parentTjpAddr,
+        domainInfo: this.getDomainInfo({ domainAddr: parentTjpAddr })
+      };
+    } catch (error) {
+      console.error(`${lc2} ${extractErrorMsg(error)}`);
+      throw error;
+    } finally {
+      if (logalot55) {
+        console.log(`${lc2} complete.`);
+      }
+    }
+  }
+  async validateQueryParams({ queryParams }) {
+    return [];
+  }
+  async handleRouteImpl(reqCtx) {
+    const lc2 = `${this.lc}[${this.handleRouteImpl.name}]`;
+    try {
+      if (logalot55) {
         console.log(`${lc2} starting... (I: 8a4c1f930e7b2d5a6c1e9f8a3b5c7d1e)`);
       }
       if (!reqCtx.params) {
@@ -23476,10 +23725,18 @@ var SsoLinkHandler = class _SsoLinkHandler extends ServeGibHandlerWithMetaspaceB
       } catch {
         return this.error(400, "Request body must be valid JSON (E: e1b2c3d4e5f67890a1b2c3d4e5f67890)");
       }
-      const { code, providerId, parentTjpAddr, userNonce, redirectUri } = parsed;
+      let { code, providerId, parentTjpAddr, userNonce, redirectUri } = parsed;
       if (!code || !providerId || !parentTjpAddr || !userNonce || !redirectUri) {
         return this.error(400, "Body missing required parameters (code, providerId, parentTjpAddr, userNonce, redirectUri) (E: f2c3d4e5f6789012a3b4c5d6e7f89012)");
       }
+      if (logalot55) {
+        console.log(`${lc2} LinkBody parsed (I: 7525b8bd29c8504e989e918825d4e826)`);
+      }
+      const { ib } = getIbAndGib({ ibGibAddr: parentTjpAddr });
+      const { tjpGib } = getGibInfo({ ibGibAddr: parentTjpAddr });
+      if (tjpGib && ib) {
+        parentTjpAddr = `${ib}^${tjpGib}`;
+      }
       const space = await reqCtx.metaspace.getLocalUserSpace({ lock: false });
       if (!space) {
         return this.error(500, "No local user space found in domain metaspace (E: 03d4e5f678901234b5c6d7e8f9012345)");
@@ -23493,10 +23750,20 @@ var SsoLinkHandler = class _SsoLinkHandler extends ServeGibHandlerWithMetaspaceB
       if (!targetKeystone) {
         return this.error(400, `Keystone not found for address: ${parentTjpAddr} (E: 14e5f67890123456c7d8e9f012345678)`);
       }
-      if (isSsoProviderLinked({ keystone: targetKeystone, providerId })) {
+      if (logalot55) {
+        console.log(`${lc2} targetKeystone gotten. addr: ${getIbGibAddr({ ibGib: targetKeystone })}, pools: ${JSON.stringify(targetKeystone.data?.challengePools?.map((p) => p.id))}, frameDetails: ${JSON.stringify(targetKeystone.data?.frameDetails)} (I: 3d2068e16cb4da0428d601a7a74e3826)`);
+      }
+      const isLinked = isSsoProviderLinked({ keystone: targetKeystone, providerId });
+      if (logalot55) {
+        console.log(`${lc2} isSsoProviderLinked for ${providerId}: ${isLinked}`);
+      }
+      if (isLinked) {
         return this.error(400, `SSO provider "${providerId}" is already linked to this keystone. (E: 25f6789012345678d9e0f12345678901)`);
       }
-      const service = getCustodian2();
+      const service = getSsoCustodianService();
+      if (logalot55) {
+        console.log(`${lc2} getSsoCustodianService returned (I: f7e0b290ed2a2dcde807ff2853016226)`);
+      }
       const userInfo = await service.getOAuthUserInfo(providerId, code, redirectUri);
       if (userInfo.email) {
         try {
@@ -23518,112 +23785,31 @@ var SsoLinkHandler = class _SsoLinkHandler extends ServeGibHandlerWithMetaspaceB
         space
       });
       console.log(`${lc2} created custodian pool for: ${userInfo.providerKey} (I: 4718901234567890f1a2b34567890123)`);
+      const ssoConfig = loadSsoServerConfig();
+      const serverSecret = ssoConfig.ssoServerKdfSecret;
+      const custodianReqs = await generateCustodianRequirements({
+        primaryTjpAddr: parentTjpAddr,
+        serverSecret
+      });
       return this.ok({
         success: true,
-        custodianPool
+        custodianPool,
+        custodianReqs
       }, 200);
     } catch (error) {
       const emsg = extractErrorMsg(error);
       console.error(`${lc2} Link failed: ${emsg} (E: 5829012345678901a2b3c45678901234)`);
       return this.error(500, `Link failed: ${emsg} (E: 693a012345678901b2c3d45678901234)`);
     } finally {
-      if (logalot54) {
+      if (logalot55) {
         console.log(`${lc2} complete. (I: 7a4b123456789012c3d4e56789012345)`);
       }
     }
   }
 };
 
-// ../../libs/node-gib/dist/identity/sso/custodian-auth-helpers.mjs
-async function deriveCustodianAuthCode({ custodianReqsOmitAuthCode, serverSecret }) {
-  const lc2 = `[${deriveCustodianAuthCode.name}]`;
-  try {
-    if (!serverSecret) {
-      throw new Error("serverSecret required for custodian auth code derivation (E: a1b2c3d4e5f67890123456789abcdef0)");
-    }
-    const salt = await hash({
-      s: JSON.stringify(custodianReqsOmitAuthCode),
-      algorithm: HashAlgorithm.sha_512
-    });
-    return await kdf_recursiveSaltWrap({
-      masterSecret: serverSecret,
-      salt,
-      rounds: 1e3,
-      algorithm: HashAlgorithm.sha_512
-    });
-  } catch (error) {
-    console.error(`${lc2} ${extractErrorMsg(error)}`);
-    throw error;
-  }
-}
-async function generateCustodianRequirements({ primaryTjpAddr, ttlMs = 15 * 60 * 1e3, allowedVerbs = [KEYSTONE_VERB_SYNC, KEYSTONE_VERB_CONNECT], serverSecret }) {
-  const lc2 = `[${generateCustodianRequirements.name}]`;
-  try {
-    if (!primaryTjpAddr) {
-      throw new Error("primaryTjpAddr is required to generate custodian requirements (E: b2c3d4e5f67890123456789abcdef01)");
-    }
-    if (!serverSecret) {
-      throw new Error("serverSecret is required to generate custodian requirements (E: c3d4e5f67890123456789abcdef012)");
-    }
-    const nonce = await getUUID();
-    const expiresAt = Date.now() + ttlMs;
-    const custodianReqsOmitAuthCode = {
-      primaryTjpAddr,
-      nonce,
-      expiresAt,
-      allowedVerbs
-    };
-    const authCode = await deriveCustodianAuthCode({
-      custodianReqsOmitAuthCode,
-      serverSecret
-    });
-    return {
-      ...custodianReqsOmitAuthCode,
-      authCode
-    };
-  } catch (error) {
-    console.error(`${lc2} ${extractErrorMsg(error)}`);
-    throw error;
-  }
-}
-async function getAuthCustodianIndex({ custodianReqs }) {
-  return await hash({
-    s: JSON.stringify(custodianReqs),
-    algorithm: HashAlgorithm.sha_256
-  });
-}
-async function verifyCustodianRequirements({ custodianReqs, serverSecret }) {
-  try {
-    if (!custodianReqs || !custodianReqs.authCode || !custodianReqs.nonce || !custodianReqs.expiresAt || !custodianReqs.primaryTjpAddr) {
-      return { valid: false, error: "Malformed custodian requirements structure. (E: d4e5f67890123456789abcdef0123)" };
-    }
-    if (Date.now() > custodianReqs.expiresAt) {
-      return { valid: false, error: "Custodian requirements have expired. (E: e5f67890123456789abcdef01234)" };
-    }
-    const { authCode, ...custodianReqsOmitAuthCode } = custodianReqs;
-    const expectedAuthCode = await deriveCustodianAuthCode({
-      custodianReqsOmitAuthCode,
-      serverSecret
-    });
-    if (authCode !== expectedAuthCode) {
-      return { valid: false, error: "Cryptographic authCode mismatch. Requirement payload tampered or invalid. (E: f67890123456789abcdef012345)" };
-    }
-    return { valid: true };
-  } catch (error) {
-    return { valid: false, error: `Verification failed: ${extractErrorMsg(error)} (E: 7890123456789abcdef0123456)` };
-  }
-}
-
 // ../../libs/node-gib/dist/serve-gib/handlers/api/keystone/sso-login.handler.mjs
-var logalot55 = GLOBAL_LOG_A_LOT;
-var custodian3;
-function getCustodian3() {
-  if (!custodian3) {
-    const config = loadSsoServerConfig();
-    custodian3 = new SsoCustodianService(config);
-  }
-  return custodian3;
-}
+var logalot56 = GLOBAL_LOG_A_LOT;
 var SsoLoginHandler = class _SsoLoginHandler extends ServeGibHandlerBase {
   lc = `[${_SsoLoginHandler.name}]`;
   method = "POST";
@@ -23637,7 +23823,7 @@ var SsoLoginHandler = class _SsoLoginHandler extends ServeGibHandlerBase {
   async handleRouteImpl(reqCtx) {
     const lc2 = `${this.lc}[${this.handleRouteImpl.name}]`;
     try {
-      if (logalot55) {
+      if (logalot56) {
         console.log(`${lc2} starting... (I: 9b5d2a3c4e5f67890a1b2c3d4e5f6789)`);
       }
       if (reqCtx.method !== "POST") {
@@ -23656,7 +23842,7 @@ var SsoLoginHandler = class _SsoLoginHandler extends ServeGibHandlerBase {
       if (!code || !providerId || !redirectUri) {
         return this.error(400, "Body missing required parameters (code, providerId, redirectUri) (E: 2b2c3d4e5f678901b2c3d4e5f6789012)");
       }
-      const service = getCustodian3();
+      const service = getSsoCustodianService();
       const userInfo = await service.getOAuthUserInfo(providerId, code, redirectUri);
       if (!userInfo || !userInfo.email) {
         return this.error(400, `No email address returned from SSO provider ${providerId} (E: 3c3d4e5f67890123c4d5e6f789012345)`);
@@ -23738,7 +23924,7 @@ var SsoLoginHandler = class _SsoLoginHandler extends ServeGibHandlerBase {
       console.error(`${lc2} SSO login failed: ${emsg} (E: 4d5e6f7890123456e7f8901234567890)`);
       return this.error(500, `SSO login failed: ${emsg}`);
     } finally {
-      if (logalot55) {
+      if (logalot56) {
         console.log(`${lc2} complete.`);
       }
     }
@@ -23747,7 +23933,7 @@ var SsoLoginHandler = class _SsoLoginHandler extends ServeGibHandlerBase {
 
 // ../../libs/node-gib/dist/serve-gib/handlers/api/identity/keystone-custodian-genesis.handler.mjs
 import * as fs3 from "node:fs/promises";
-var logalot56 = GLOBAL_LOG_A_LOT || true;
+var logalot57 = GLOBAL_LOG_A_LOT || true;
 var KeystoneCustodianGenesisHandler = class _KeystoneCustodianGenesisHandler extends ServeGibHandlerBase {
   lc = `[${_KeystoneCustodianGenesisHandler.name}]`;
   method = "POST";
@@ -23755,7 +23941,7 @@ var KeystoneCustodianGenesisHandler = class _KeystoneCustodianGenesisHandler ext
   async handleRouteImpl(reqCtx) {
     const lc2 = `${this.lc}[${this.handleRouteImpl.name}]`;
     try {
-      if (logalot56) {
+      if (logalot57) {
         console.log(`${lc2} starting... (I: a123456789abcdef0123456789b0001)`);
       }
       if (reqCtx.method !== "POST") {
@@ -23894,7 +24080,7 @@ var KeystoneCustodianGenesisHandler = class _KeystoneCustodianGenesisHandler ext
       console.error(`${lc2} ${emsg}`);
       return this.error(500, emsg);
     } finally {
-      if (logalot56) {
+      if (logalot57) {
         console.log(`${lc2} complete.`);
       }
     }
@@ -23904,7 +24090,7 @@ var KeystoneCustodianGenesisHandler = class _KeystoneCustodianGenesisHandler ext
 // ../../libs/node-gib/dist/serve-gib/handlers/api/identity/keystone-custodian-register-delegate.handler.mjs
 import * as fs4 from "fs/promises";
 import * as path5 from "path";
-var logalot57 = GLOBAL_LOG_A_LOT || true;
+var logalot58 = GLOBAL_LOG_A_LOT || true;
 var KeystoneCustodianRegisterDelegateHandler = class _KeystoneCustodianRegisterDelegateHandler extends ServeGibHandlerBase {
   lc = `[${_KeystoneCustodianRegisterDelegateHandler.name}]`;
   method = "POST";
@@ -23913,7 +24099,7 @@ var KeystoneCustodianRegisterDelegateHandler = class _KeystoneCustodianRegisterD
     const lc2 = `${this.lc}[${this.handleRouteImpl.name}]`;
     let authFilePathToClean;
     try {
-      if (logalot57) {
+      if (logalot58) {
         console.log(`${lc2} starting... (I: a23456789abcdef0123456789c0001)`);
       }
       if (reqCtx.method !== "POST") {
@@ -23991,14 +24177,16 @@ var KeystoneCustodianRegisterDelegateHandler = class _KeystoneCustodianRegisterD
         return this.error(500, `Could not determine primary email for identity ${custodianReqs.primaryTjpAddr}`);
       }
       const primarySecret = await hash({ s: `${serverSecret}_custodian_${primaryEmail}` });
+      const delegateDeviceName = delegateKeystone.data?.frameDetails?.deviceTag || frameDetails?.deviceTag || "client-delegate";
       const evolvedPrimaryKeystone = await keystoneService.registerDelegate({
         parentKeystone,
         delegateKeystone,
         masterSecret: primarySecret,
+        signingPoolId: "manage",
         metaspace,
         space,
         allowedVerbs: custodianReqs.allowedVerbs || [KEYSTONE_VERB_SYNC, KEYSTONE_VERB_CONNECT],
-        deviceName: frameDetails?.deviceTag || "client-delegate"
+        deviceName: delegateDeviceName
       });
       await metaspace.put({ ibGibs: [delegateKeystone], space });
       await metaspace.registerNewIbGib({ ibGib: delegateKeystone, space });
@@ -24026,7 +24214,7 @@ var KeystoneCustodianRegisterDelegateHandler = class _KeystoneCustodianRegisterD
         } catch {
         }
       }
-      if (logalot57) {
+      if (logalot58) {
         console.log(`${lc2} complete.`);
       }
     }
@@ -24034,15 +24222,7 @@ var KeystoneCustodianRegisterDelegateHandler = class _KeystoneCustodianRegisterD
 };
 
 // ../../libs/node-gib/dist/serve-gib/handlers/api/identity/keystone-custodian-add-master-password.handler.mjs
-var logalot58 = GLOBAL_LOG_A_LOT || true;
-var custodian4;
-function getCustodian4() {
-  if (!custodian4) {
-    const config = loadSsoServerConfig();
-    custodian4 = new SsoCustodianService(config);
-  }
-  return custodian4;
-}
+var logalot59 = GLOBAL_LOG_A_LOT || true;
 var KeystoneCustodianAddMasterPasswordHandler = class _KeystoneCustodianAddMasterPasswordHandler extends ServeGibHandlerBase {
   lc = `[${_KeystoneCustodianAddMasterPasswordHandler.name}]`;
   method = "POST";
@@ -24050,7 +24230,7 @@ var KeystoneCustodianAddMasterPasswordHandler = class _KeystoneCustodianAddMaste
   async handleRouteImpl(reqCtx) {
     const lc2 = `${this.lc}[${this.handleRouteImpl.name}]`;
     try {
-      if (logalot58) {
+      if (logalot59) {
         console.log(`${lc2} starting... (I: 8a1b2c3d4e5f67890a1b2c3d4e5f6790)`);
       }
       if (reqCtx.method !== "POST") {
@@ -24078,7 +24258,7 @@ var KeystoneCustodianAddMasterPasswordHandler = class _KeystoneCustodianAddMaste
       let verifiedEmail;
       let effectiveProvider = providerId || "email";
       if (providerId && code && redirectUri) {
-        const service = getCustodian4();
+        const service = getSsoCustodianService();
         const userInfo = await service.getOAuthUserInfo(providerId, code, redirectUri);
         if (!userInfo || !userInfo.email) {
           return this.error(401, `Failed to authenticate with SSO provider ${providerId} (E: 8a1b2c3d4e5f67890a1b2c3d4e5f6796)`);
@@ -24090,7 +24270,11 @@ var KeystoneCustodianAddMasterPasswordHandler = class _KeystoneCustodianAddMaste
         }
         verifiedEmail = normalizeEmail(email);
         const tjpHash = await getPendingTjpHash(primaryTjpAddr);
-        const pendingInfo = reqCtx.dataDir && tjpHash ? await getPendingStagingDir({ dataDir: reqCtx.dataDir, tjpHash }) : void 0;
+        let pendingInfo = reqCtx.dataDir && tjpHash ? await getPendingStagingDir({ dataDir: reqCtx.dataDir, tjpHash }) : void 0;
+        if (!pendingInfo) {
+          const emailTjpHash = await getPendingTjpHash(`pending:${verifiedEmail}`);
+          pendingInfo = reqCtx.dataDir && emailTjpHash ? await getPendingStagingDir({ dataDir: reqCtx.dataDir, tjpHash: emailTjpHash }) : void 0;
+        }
         if (!pendingInfo || pendingInfo.isExpired) {
           return this.error(400, "Verification record missing or expired. Please request a new verification code. (E: 8a1b2c3d4e5f67890a1b2c3d4e5f6798)");
         }
@@ -24171,10 +24355,16 @@ var KeystoneCustodianAddMasterPasswordHandler = class _KeystoneCustodianAddMaste
       });
       await metaspace.put({ ibGibs: [evolvedKeystone], space });
       await metaspace.registerNewIbGib({ ibGib: evolvedKeystone, space });
+      const primaryGraph = await getDependencyGraph({
+        ibGib: evolvedKeystone,
+        space,
+        live: false
+      });
       const response = {
         success: true,
         primaryTjpAddr,
         primaryKeystone: evolvedKeystone,
+        primaryGraph,
         message: "Successfully elevated identity to sovereign master password"
       };
       return this.ok(response);
@@ -24364,7 +24554,10 @@ var EmailOutboundHandler = class _EmailOutboundHandler extends ServeGibHandlerBa
 };
 
 // ../../libs/node-gib/dist/serve-gib/handlers/api/email/email-verification-code.handler.mjs
-var logalot59 = GLOBAL_LOG_A_LOT || true;
+import * as path6 from "node:path";
+import * as fs5 from "node:fs/promises";
+import { existsSync as existsSync6 } from "node:fs";
+var logalot60 = GLOBAL_LOG_A_LOT || true;
 var EmailVerificationCodeHandler = class _EmailVerificationCodeHandler extends ServeGibHandlerBase {
   lc = `[${_EmailVerificationCodeHandler.name}]`;
   method = "POST";
@@ -24378,10 +24571,10 @@ var EmailVerificationCodeHandler = class _EmailVerificationCodeHandler extends S
     const lc2 = `${this.lc}[${this.handleRouteImpl.name}]`;
     const timestampUUID = `${lc2}[${(await getUUID()).substring(0, 8)}]`;
     try {
-      if (logalot59) {
+      if (logalot60) {
         console.log(`${lc2} starting... (I: f123456789abcdef0123456789a0001)`);
       }
-      if (logalot59) {
+      if (logalot60) {
         console.time(timestampUUID);
       }
       if (reqCtx.method !== "POST") {
@@ -24396,17 +24589,18 @@ var EmailVerificationCodeHandler = class _EmailVerificationCodeHandler extends S
       } catch {
         return this.error(400, "Request body must be valid JSON (E: d2e3f4a5b67890123456789abcdef01)");
       }
-      if (logalot59) {
+      if (logalot60) {
         console.timeLog(timestampUUID, "parse complete");
       }
       const { email, primaryTjpAddr } = body;
       if (!email || !validateEmail3(email)) {
         return this.error(400, "Invalid email address format (E: e3f4a5b67890123456789abcdef012)");
       }
+      await delay(1e3 + Math.random() * 500);
       const normEmail = normalizeEmail(email);
       const effectivePrimaryTjpAddr = primaryTjpAddr || `pending:${normEmail}`;
       const tjpHash = await getPendingTjpHash(effectivePrimaryTjpAddr);
-      const code = generateVerificationCode();
+      let code = generateVerificationCode();
       if (reqCtx.dataDir && tjpHash) {
         let info = await getPendingStagingDir({ dataDir: reqCtx.dataDir, tjpHash });
         if (!info) {
@@ -24418,9 +24612,44 @@ var EmailVerificationCodeHandler = class _EmailVerificationCodeHandler extends S
           info = await getPendingStagingDir({ dataDir: reqCtx.dataDir, tjpHash });
         }
         if (info) {
-          await savePendingCodeRecord({ pendingDir: info.pendingDir, code });
-          if (logalot59) {
-            console.timeLog(timestampUUID, "code record saved to pending staging");
+          const codeFilePath = path6.join(info.pendingDir, "code.json");
+          let existingRecord;
+          if (existsSync6(codeFilePath)) {
+            try {
+              existingRecord = JSON.parse(await fs5.readFile(codeFilePath, "utf-8"));
+            } catch {
+            }
+          }
+          const now = Date.now();
+          if (existingRecord) {
+            const elapsedMs = now - (existingRecord.dispatchedAt || 0);
+            if (elapsedMs < 3e4) {
+              const remainingSecs = Math.ceil((3e4 - elapsedMs) / 1e3);
+              return this.error(429, `Please wait ${remainingSecs}s before requesting another verification code.`);
+            }
+            if (existingRecord.resendCount >= 5 && now < existingRecord.expiresAt) {
+              return this.error(429, "Too many verification code requests. Please wait 15 minutes before trying again.");
+            }
+            if (existingRecord.rawCode && now < existingRecord.expiresAt && existingRecord.attempts < existingRecord.maxAttempts) {
+              code = existingRecord.rawCode;
+              existingRecord.dispatchedAt = now;
+              existingRecord.resendCount = (existingRecord.resendCount || 0) + 1;
+              await fs5.writeFile(codeFilePath, JSON.stringify(existingRecord, null, 2), "utf-8");
+            } else {
+              code = generateVerificationCode();
+              await savePendingCodeRecord({
+                pendingDir: info.pendingDir,
+                code,
+                resendCount: (existingRecord.resendCount || 0) + 1,
+                attempts: 0
+              });
+            }
+          } else {
+            code = generateVerificationCode();
+            await savePendingCodeRecord({ pendingDir: info.pendingDir, code, resendCount: 0, attempts: 0 });
+          }
+          if (logalot60) {
+            console.timeLog(timestampUUID, "code record processed in pending staging");
           }
         } else {
           console.warn(`${lc2} Failed to create or access pending staging directory for tjpHash ${tjpHash}`);
@@ -24447,7 +24676,7 @@ If you did not request this, please ignore this email.`,
 </div>`
       };
       const sendResult = await this.sender.sendEmail(outboundEmail);
-      if (logalot59) {
+      if (logalot60) {
         console.timeLog(timestampUUID, "email send complete");
       }
       if (sendResult.success) {
@@ -24467,7 +24696,7 @@ If you did not request this, please ignore this email.`,
       console.error(`${lc2} Magic link dispatch error: ${emsg} (E: 67890123456789abcdef0123456789a)`);
       return this.error(500, `Magic link dispatch error: ${emsg}`);
     } finally {
-      if (logalot59) {
+      if (logalot60) {
         console.log(`${lc2} complete.`);
         console.timeEnd(timestampUUID);
       }
@@ -24476,10 +24705,10 @@ If you did not request this, please ignore this email.`,
 };
 
 // ../../libs/node-gib/dist/serve-gib/handlers/api/email/email-verify-code-onetime.handler.mjs
-import * as fs5 from "node:fs/promises";
-import { existsSync as existsSync6 } from "node:fs";
-import * as path6 from "node:path";
-var logalot60 = GLOBAL_LOG_A_LOT || true;
+import * as fs6 from "node:fs/promises";
+import { existsSync as existsSync7 } from "node:fs";
+import * as path7 from "node:path";
+var logalot61 = GLOBAL_LOG_A_LOT || true;
 var EmailVerifyCodeOnetimeHandler = class _EmailVerifyCodeOnetimeHandler extends ServeGibHandlerBase {
   lc = `[${_EmailVerifyCodeOnetimeHandler.name}]`;
   method = "POST";
@@ -24488,10 +24717,10 @@ var EmailVerifyCodeOnetimeHandler = class _EmailVerifyCodeOnetimeHandler extends
     const lc2 = `${this.lc}[${this.handleRouteImpl.name}]`;
     const timestampUUID = `${lc2}[${(await getUUID()).substring(0, 8)}]`;
     try {
-      if (logalot60) {
+      if (logalot61) {
         console.log(`${lc2} starting... (I: e123456789abcdef0123456789a0001)`);
       }
-      if (logalot60) {
+      if (logalot61) {
         console.time(timestampUUID);
       }
       if (reqCtx.method !== "POST") {
@@ -24506,7 +24735,7 @@ var EmailVerifyCodeOnetimeHandler = class _EmailVerifyCodeOnetimeHandler extends
       } catch {
         return this.error(400, "Request body must be valid JSON (E: 123456789abcdef0123456789a0002)");
       }
-      if (logalot60) {
+      if (logalot61) {
         console.timeLog(timestampUUID, "parse complete");
       }
       const { email, primaryTjpAddr, code } = body;
@@ -24528,7 +24757,7 @@ var EmailVerifyCodeOnetimeHandler = class _EmailVerifyCodeOnetimeHandler extends
         dataDir: reqCtx.dataDir,
         tjpHash
       });
-      if (logalot60) {
+      if (logalot61) {
         console.timeLog(timestampUUID, "pending staging lookup complete");
       }
       if (!pendingInfo || pendingInfo.isExpired) {
@@ -24550,7 +24779,7 @@ var EmailVerifyCodeOnetimeHandler = class _EmailVerifyCodeOnetimeHandler extends
         pendingDir,
         code
       });
-      if (logalot60) {
+      if (logalot61) {
         console.timeLog(timestampUUID, "code verification check complete");
       }
       if (!codeVerifyResult.valid) {
@@ -24559,20 +24788,20 @@ var EmailVerifyCodeOnetimeHandler = class _EmailVerifyCodeOnetimeHandler extends
         console.error(`${lc2} Code verification failed for ${normEmail}: ${codeVerifyResult.error} (E: 123456789abcdef0123456789a0008)`);
         return this.error(statusCode, codeVerifyResult.error || "Incorrect verification code.");
       }
-      const emailsDir = path6.join(pendingDir, "emails");
+      const emailsDir = path7.join(pendingDir, "emails");
       const emailHash = await hash({ s: `emailindex${normEmail}` });
-      const emailMetaPath = path6.join(emailsDir, `${emailHash}.json`);
-      await fs5.writeFile(emailMetaPath, JSON.stringify({ email: normEmail, verified: true, verifiedAt: Date.now() }, null, 2), "utf-8");
-      if (logalot60) {
+      const emailMetaPath = path7.join(emailsDir, `${emailHash}.json`);
+      await fs6.writeFile(emailMetaPath, JSON.stringify({ email: normEmail, verified: true, verifiedAt: Date.now() }, null, 2), "utf-8");
+      if (logalot61) {
         console.timeLog(timestampUUID, "email metadata marked verified");
       }
-      const emailFiles = await fs5.readdir(emailsDir);
+      const emailFiles = await fs6.readdir(emailsDir);
       const verifiedEmails = [];
       let allVerified = true;
       for (const file of emailFiles) {
         if (file.endsWith(".json")) {
           try {
-            const content = await fs5.readFile(path6.join(emailsDir, file), "utf-8");
+            const content = await fs6.readFile(path7.join(emailsDir, file), "utf-8");
             const meta = JSON.parse(content);
             if (meta.verified === true && meta.email) {
               verifiedEmails.push(meta.email);
@@ -24585,14 +24814,14 @@ var EmailVerifyCodeOnetimeHandler = class _EmailVerifyCodeOnetimeHandler extends
         }
       }
       if (allVerified) {
-        const keystonePath = path6.join(pendingDir, "keystone.json");
-        if (existsSync6(keystonePath)) {
+        const keystonePath = path7.join(pendingDir, "keystone.json");
+        if (existsSync7(keystonePath)) {
           try {
-            const keystoneContent = await fs5.readFile(keystonePath, "utf-8");
+            const keystoneContent = await fs6.readFile(keystonePath, "utf-8");
             const keystone = JSON.parse(keystoneContent);
             const addr = getIbGibAddr({ ibGib: keystone });
             const metaspace = await bootstrapDomainMetaspace(addr, reqCtx.dataDir);
-            if (logalot60) {
+            if (logalot61) {
               console.timeLog(timestampUUID, "domain metaspace bootstrap complete");
             }
             const space = await metaspace.getLocalUserSpace({ lock: false });
@@ -24600,7 +24829,7 @@ var EmailVerifyCodeOnetimeHandler = class _EmailVerifyCodeOnetimeHandler extends
               await metaspace.put({ ibGibs: [keystone], space });
               await metaspace.registerNewIbGib({ ibGib: keystone, space });
             }
-            if (logalot60) {
+            if (logalot61) {
               console.timeLog(timestampUUID, "keystone promoted to domain space");
             }
           } catch (promoErr) {
@@ -24619,14 +24848,14 @@ var EmailVerifyCodeOnetimeHandler = class _EmailVerifyCodeOnetimeHandler extends
             }
           }
         }
-        if (logalot60) {
+        if (logalot61) {
           console.timeLog(timestampUUID, "official email indices registered");
         }
         try {
-          await fs5.rm(pendingDir, { recursive: true, force: true });
+          await fs6.rm(pendingDir, { recursive: true, force: true });
         } catch {
         }
-        if (logalot60) {
+        if (logalot61) {
           console.timeLog(timestampUUID, "pending staging directory cleaned");
         }
         console.log(`${lc2} 100% verification achieved via 6-digit code. Promoted identity & registered indices for ${primaryTjpAddr} (I: 123456789abcdef0123456789a0011)`);
@@ -24647,7 +24876,7 @@ var EmailVerifyCodeOnetimeHandler = class _EmailVerifyCodeOnetimeHandler extends
       console.error(`${lc2} Error verifying code: ${emsg} (E: 123456789abcdef0123456789a0012)`);
       return this.error(500, `Code verification error: ${emsg}`);
     } finally {
-      if (logalot60) {
+      if (logalot61) {
         console.log(`${lc2} complete.`);
         console.timeEnd(timestampUUID);
       }
@@ -24793,7 +25022,7 @@ var WebSocketFrameDecoder = class {
 };
 
 // ../../libs/node-gib/dist/serve-gib/handlers/api/debug/ws-echo.handler.mjs
-var logalot61 = GLOBAL_LOG_A_LOT;
+var logalot62 = GLOBAL_LOG_A_LOT;
 var lc = `[WsEchoHandler]`;
 function canHandleWsUpgrade(req) {
   const pathname = new URL(req.url ?? "/", "http://localhost").pathname;
@@ -24802,7 +25031,7 @@ function canHandleWsUpgrade(req) {
 function handleWsEchoUpgrade(req, socket, head) {
   const lc_fn = `${lc}[handleWsEchoUpgrade]`;
   try {
-    if (logalot61) {
+    if (logalot62) {
       console.log(`${lc_fn} starting...`);
     }
     const ok = performConnect(req, socket);
@@ -24816,7 +25045,7 @@ function handleWsEchoUpgrade(req, socket, head) {
         decoder.addChunk(data);
         let frameText = decoder.nextFrame();
         while (frameText !== null) {
-          if (logalot61) {
+          if (logalot62) {
             console.log(`${lc_fn} echo: ${frameText}`);
           }
           socket.write(encodeTextFrame(JSON.stringify({ echo: frameText })));
@@ -24832,7 +25061,7 @@ function handleWsEchoUpgrade(req, socket, head) {
       console.error(`${lc_fn} socket error: ${extractErrorMsg(error)}`);
     });
     socket.on("close", () => {
-      if (logalot61) {
+      if (logalot62) {
         console.log(`${lc_fn} socket closed.`);
       }
     });
@@ -24840,7 +25069,7 @@ function handleWsEchoUpgrade(req, socket, head) {
     console.error(`${lc_fn} ${extractErrorMsg(error)}`);
     socket.destroy();
   } finally {
-    if (logalot61) {
+    if (logalot62) {
       console.log(`${lc_fn} complete.`);
     }
   }
@@ -24944,7 +25173,7 @@ var MergeTextStrategy = {
 var MERGE_TEXT_STRATEGY_VALID_VALUES = Object.values(MergeTextStrategy);
 
 // ../../libs/core-gib/dist/sync/graft-info/graft-info-helpers.mjs
-var logalot62 = GLOBAL_LOG_A_LOT3;
+var logalot63 = GLOBAL_LOG_A_LOT3;
 async function getGraftInfoIb({ data }) {
   if (!data.conflictStrategy) {
     throw new Error(`(UNEXPECTED) data.conflictStrategy required for GraftInfoIb (E: 2c0968a0dac8d0ab3d67da9756d6df26)`);
@@ -24960,7 +25189,7 @@ async function getGraftInfoIb({ data }) {
 async function createGraftInfo({ conflictStrategy, details, addlGraftDetails, latestCommonFrameAddr, baseAddrsSinceLCA, orphanAddrsSinceLCA, dnaAddrsApplied }) {
   const lc2 = `[${createGraftInfo.name}]`;
   try {
-    if (logalot62) {
+    if (logalot63) {
       console.log(`${lc2} starting... (I: 0030f62cbae28cf5882f87981edc3826)`);
     }
     if (baseAddrsSinceLCA.length === 0) {
@@ -24995,7 +25224,7 @@ async function createGraftInfo({ conflictStrategy, details, addlGraftDetails, la
     console.error(`${lc2} ${extractErrorMsg(error)}`);
     throw error;
   } finally {
-    if (logalot62) {
+    if (logalot63) {
       console.log(`${lc2} complete.`);
     }
   }
@@ -25070,7 +25299,7 @@ async function mergeTextByLongestCommonSubsequence({ textA, textB }) {
 function isGraftInfo(ibGib) {
   const lc2 = `[${isGraftInfo.name}]`;
   try {
-    if (logalot62) {
+    if (logalot63) {
       console.log(`${lc2} starting... (I: fe9adfe1a3175d87982507c8851f5826)`);
     }
     if (!ibGib) {
@@ -25084,19 +25313,19 @@ function isGraftInfo(ibGib) {
     }
     return true;
   } catch (error) {
-    if (logalot62) {
+    if (logalot63) {
       console.error(`${lc2} ${extractErrorMsg(error)}`);
     }
     return false;
   } finally {
-    if (logalot62) {
+    if (logalot63) {
       console.log(`${lc2} complete.`);
     }
   }
 }
 
 // ../../libs/core-gib/dist/sync/sync-helpers.mjs
-var logalot63 = GLOBAL_LOG_A_LOT3;
+var logalot64 = GLOBAL_LOG_A_LOT3;
 async function getSyncIb({ data }) {
   const lc2 = `[${getSyncIb.name}]`;
   try {
@@ -25117,7 +25346,7 @@ async function getTempSpaceName() {
 async function isPastFrame({ olderAddr, newerAddr, space }) {
   const lc2 = `[${isPastFrame.name}]`;
   try {
-    if (logalot63) {
+    if (logalot64) {
       console.log(`${lc2} starting... (I: 4b3548cbc9a2eb749f447ed82fdcf826)`);
     }
     if (olderAddr === newerAddr) {
@@ -25152,7 +25381,7 @@ async function isPastFrame({ olderAddr, newerAddr, space }) {
     console.error(`${lc2} ${extractErrorMsg(error)}`);
     throw error;
   } finally {
-    if (logalot63) {
+    if (logalot64) {
       console.log(`${lc2} complete.`);
     }
   }
@@ -25185,7 +25414,7 @@ async function getSyncSagaFrameDependencyGraph({ sagaIbGib, localSpace }) {
 async function getFullSyncSagaHistory({ sagaIbGib, space }) {
   const lc2 = `[${getFullSyncSagaHistory.name}]`;
   try {
-    if (logalot63) {
+    if (logalot64) {
       console.log(`${lc2} starting... (I: 1ea3f804dd07d1e917a2afaaad497826)`);
     }
     if (!sagaIbGib.data) {
@@ -25203,7 +25432,7 @@ async function getFullSyncSagaHistory({ sagaIbGib, space }) {
       if (resGet.success && resGet.ibGibs && resGet.ibGibs.length === 1) {
         sagaFrame = resGet.ibGibs[0];
       } else {
-        if (logalot63) {
+        if (logalot64) {
           console.log(`${lc2} failed getting full history of sagaIbGib:
 ${pretty(sagaIbGib)} (I: 2a35685bfe038f63182c7db39b44c826)`);
         }
@@ -25220,7 +25449,7 @@ ${pretty(sagaIbGib)} (I: 2a35685bfe038f63182c7db39b44c826)`);
     console.error(`${lc2} ${extractErrorMsg(error)}`);
     throw error;
   } finally {
-    if (logalot63) {
+    if (logalot64) {
       console.log(`${lc2} complete.`);
     }
   }
@@ -25228,7 +25457,7 @@ ${pretty(sagaIbGib)} (I: 2a35685bfe038f63182c7db39b44c826)`);
 async function validateSyncSagaFrame({ sagaIbGib }) {
   const lc2 = `[${validateSyncSagaFrame.name}]`;
   try {
-    if (logalot63) {
+    if (logalot64) {
       console.log(`${lc2} starting... (I: dac978e9ec5820f128fbbff817b82826)`);
     }
     const errors = await validateIbGibIntrinsically({ ibGib: sagaIbGib }) ?? [];
@@ -25279,7 +25508,7 @@ async function validateSyncSagaFrame({ sagaIbGib }) {
     console.error(`${lc2} ${extractErrorMsg(error)}`);
     throw error;
   } finally {
-    if (logalot63) {
+    if (logalot64) {
       console.log(`${lc2} complete.`);
     }
   }
@@ -25287,7 +25516,7 @@ async function validateSyncSagaFrame({ sagaIbGib }) {
 async function validateFullSyncSagaHistory({ history }) {
   const lc2 = `[${validateFullSyncSagaHistory.name}]`;
   try {
-    if (logalot63) {
+    if (logalot64) {
       console.log(`${lc2} starting... (I: df02b802f6989096b8d8f728e2c0a526)`);
     }
     console.error(`${lc2} NAG ERROR (NOT THROWN) need to implement more validation on full saga history. (E: 9bfcc9247a1c783fd361a4a8216fef26)`);
@@ -25296,7 +25525,7 @@ async function validateFullSyncSagaHistory({ history }) {
     console.error(`${lc2} ${extractErrorMsg(error)}`);
     throw error;
   } finally {
-    if (logalot63) {
+    if (logalot64) {
       console.log(`${lc2} complete.`);
     }
   }
@@ -25304,7 +25533,7 @@ async function validateFullSyncSagaHistory({ history }) {
 async function putInSpace_dnasThenNonDnas({ ibGibs, space }) {
   const lc2 = `[${putInSpace_dnasThenNonDnas.name}]`;
   try {
-    if (logalot63) {
+    if (logalot64) {
       console.log(`${lc2} starting... (I: aa3ab828402836b3914800a8ffa1b826)`);
     }
     const payload_Dnas = [];
@@ -25330,7 +25559,7 @@ async function putInSpace_dnasThenNonDnas({ ibGibs, space }) {
     console.error(`${lc2} ${extractErrorMsg(error)}`);
     throw error;
   } finally {
-    if (logalot63) {
+    if (logalot64) {
       console.log(`${lc2} complete.`);
     }
   }
@@ -25338,7 +25567,7 @@ async function putInSpace_dnasThenNonDnas({ ibGibs, space }) {
 function getSyncSagaFrameOrigin({ sagaFrame }) {
   const lc2 = `[${getSyncSagaFrameOrigin.name}]`;
   try {
-    if (logalot63) {
+    if (logalot64) {
       console.log(`${lc2} starting... (I: 93521332d0dd2f5e88398b7db95e8126)`);
     }
     if (!sagaFrame) {
@@ -25362,7 +25591,7 @@ function getSyncSagaFrameOrigin({ sagaFrame }) {
     console.error(`${lc2} ${extractErrorMsg(error)}`);
     throw error;
   } finally {
-    if (logalot63) {
+    if (logalot64) {
       console.log(`${lc2} complete.`);
     }
   }
@@ -25370,7 +25599,7 @@ function getSyncSagaFrameOrigin({ sagaFrame }) {
 async function getFinalConflictsInfo({ sagaHistory }) {
   const lc2 = `[${getFinalConflictsInfo.name}]`;
   try {
-    if (logalot63) {
+    if (logalot64) {
       console.log(`${lc2} starting... (I: fe93a8f29e5d8ab2c8bd0e08e56f7826)`);
     }
     const lastDeltaHistorySlice = sagaHistory.findLast((x) => x.msgStones.some((msgStone) => msgStone.data.stage === SyncStage.delta));
@@ -25387,7 +25616,7 @@ async function getFinalConflictsInfo({ sagaHistory }) {
     console.error(`${lc2} ${extractErrorMsg(error)}`);
     throw error;
   } finally {
-    if (logalot63) {
+    if (logalot64) {
       console.log(`${lc2} complete.`);
     }
   }
@@ -25395,12 +25624,12 @@ async function getFinalConflictsInfo({ sagaHistory }) {
 async function getAllOrphanedAddresses({ sagaHistory, myTempSpace }) {
   const lc2 = `[${getAllOrphanedAddresses.name}]`;
   try {
-    if (logalot63) {
+    if (logalot64) {
       console.log(`${lc2} starting... (I: b755627e99c9a221566d86a81b0da526)`);
     }
     const conflicts = await getFinalConflictsInfo({ sagaHistory });
     if (!conflicts || conflicts.length === 0) {
-      if (logalot63) {
+      if (logalot64) {
         console.log(`${lc2} no conflicts found. returning empty array (I: 5dce98010128a284c8ec92cd466a3826)`);
       }
       return [];
@@ -25435,7 +25664,7 @@ async function getAllOrphanedAddresses({ sagaHistory, myTempSpace }) {
     console.error(`${lc2} ${extractErrorMsg(error)}`);
     throw error;
   } finally {
-    if (logalot63) {
+    if (logalot64) {
       console.log(`${lc2} complete.`);
     }
   }
@@ -25443,7 +25672,7 @@ async function getAllOrphanedAddresses({ sagaHistory, myTempSpace }) {
 async function deriveSessionSecret({ senderSecret, sagaId }) {
   const lc2 = `[${deriveSessionSecret.name}]`;
   try {
-    if (logalot63) {
+    if (logalot64) {
       console.log(`${lc2} starting... (I: 0de03f8dcd3e32f1fca244e8f2a8a826)`);
     }
     if (!senderSecret) {
@@ -25466,14 +25695,14 @@ async function deriveSessionSecret({ senderSecret, sagaId }) {
     console.error(`${lc2} ${extractErrorMsg(error)}`);
     throw error;
   } finally {
-    if (logalot63) {
+    if (logalot64) {
       console.log(`${lc2} complete.`);
     }
   }
 }
 
 // ../../libs/core-gib/dist/sync/sync-saga-context/sync-saga-context-helpers.mjs
-var logalot64 = GLOBAL_LOG_A_LOT3;
+var logalot65 = GLOBAL_LOG_A_LOT3;
 async function getSyncSagaContextIb({ data }) {
   const lc2 = `[${getSyncSagaContextIb.name}]`;
   try {
@@ -25495,7 +25724,7 @@ async function getSyncSagaContextIb({ data }) {
 async function validateContextAndSagaFrame({ context }) {
   const lc2 = `[${validateContextAndSagaFrame.name}]`;
   try {
-    if (logalot64) {
+    if (logalot65) {
       console.log(`${lc2} starting... (I: 7797f8294bd8f7e5089cb722ad468226)`);
     }
     const errors = [];
@@ -25535,7 +25764,7 @@ async function validateContextAndSagaFrame({ context }) {
     console.error(`${lc2} ${extractErrorMsg(error)}`);
     throw error;
   } finally {
-    if (logalot64) {
+    if (logalot65) {
       console.log(`${lc2} complete.`);
     }
   }
@@ -25547,7 +25776,7 @@ async function authenticateContextIntrinsically({
 }) {
   const lc2 = `[${authenticateContextIntrinsically.name}]`;
   try {
-    if (logalot64) {
+    if (logalot65) {
       console.log(`${lc2} starting... (I: 3c34e8f1d6ef965f98725c88459ea926)`);
     }
     const errors = [];
@@ -25570,7 +25799,7 @@ async function authenticateContextIntrinsically({
         errors.push("Context has no signed session identity, but context.rel8ns.sessionIdentity is truthy. (E: 96a04a8a6c88ea8bf88118f89ad8e326)");
         return errors;
       } else {
-        if (logalot64) {
+        if (logalot65) {
           console.log(`${lc2} context has no signedSessionIdentity and sync saga frame doesn't state there should be session identity. So nothing further to authenticate - returning early with no authentication errors. (I: d708735f9a2899ee98f762b8a09ed826)`);
         }
         return [];
@@ -25725,14 +25954,14 @@ async function authenticateContextIntrinsically({
     console.error(emsg);
     return [`authentication produced an error: ${emsg} (E: 45e014b82af81993d936611ca6fc4d26)`];
   } finally {
-    if (logalot64) {
+    if (logalot65) {
       console.log(`${lc2} complete.`);
     }
   }
 }
 
 // ../../libs/core-gib/dist/sync/sync-peer/sync-peer-v1.mjs
-var logalot65 = GLOBAL_LOG_A_LOT3;
+var logalot66 = GLOBAL_LOG_A_LOT3;
 var SyncPeer_V1 = class _SyncPeer_V1 extends LightWitnessBase_V1 {
   lc = `[${_SyncPeer_V1.name}]`;
   opts;
@@ -25845,7 +26074,7 @@ var SyncPeer_V1 = class _SyncPeer_V1 extends LightWitnessBase_V1 {
   async connect(opts) {
     const lc2 = `${this.lc}[${this.connect.name}]`;
     try {
-      if (logalot65) {
+      if (logalot66) {
         console.log(`${lc2} starting... (I: ad89d8137351662fb8a30114a1fa4826)`);
       }
       await this.preConnectCheck(opts);
@@ -25854,7 +26083,7 @@ var SyncPeer_V1 = class _SyncPeer_V1 extends LightWitnessBase_V1 {
       console.error(`${lc2} ${extractErrorMsg(error)}`);
       throw error;
     } finally {
-      if (logalot65) {
+      if (logalot66) {
         console.log(`${lc2} complete.`);
       }
     }
@@ -25879,7 +26108,7 @@ var SyncPeer_V1 = class _SyncPeer_V1 extends LightWitnessBase_V1 {
   async establishSessionIdentity() {
     const lc2 = `${this.lc}[${this.establishSessionIdentity.name}]`;
     try {
-      if (logalot65) {
+      if (logalot66) {
         console.log(`${lc2} starting... (I: f2a1b3c4d5e6f7a8b9c0d1e2f3a4b526)`);
       }
       if (!this.opts) {
@@ -25887,7 +26116,7 @@ var SyncPeer_V1 = class _SyncPeer_V1 extends LightWitnessBase_V1 {
       }
       const { senderIdentity, fnSenderSecret, senderDomainAddr, sagaId, localMetaspace, localSpace } = this.opts;
       if (!senderIdentity || !fnSenderSecret) {
-        if (logalot65) {
+        if (logalot66) {
           console.log(`${lc2} no senderIdentity/fnSenderSecret \u2014 skipping establish (I: f29348a77d1542326d14043ea4b69126)`);
         }
         return void 0;
@@ -25946,7 +26175,7 @@ var SyncPeer_V1 = class _SyncPeer_V1 extends LightWitnessBase_V1 {
       console.error(`${lc2} ${extractErrorMsg(error)}`);
       throw error;
     } finally {
-      if (logalot65) {
+      if (logalot66) {
         console.log(`${lc2} complete.`);
       }
     }
@@ -25962,7 +26191,7 @@ var SyncPeer_V1 = class _SyncPeer_V1 extends LightWitnessBase_V1 {
   async initializeOpts(opts) {
     const lc2 = `${this.lc}[${this.initializeOpts.name}]`;
     try {
-      if (logalot65) {
+      if (logalot66) {
         console.log(`${lc2} starting... (I: 31bd5fda37c89fa37fbaf14daf5fe726)`);
       }
       this.opts = opts;
@@ -25970,7 +26199,7 @@ var SyncPeer_V1 = class _SyncPeer_V1 extends LightWitnessBase_V1 {
       console.error(`${lc2} ${extractErrorMsg(error)}`);
       throw error;
     } finally {
-      if (logalot65) {
+      if (logalot66) {
         console.log(`${lc2} complete.`);
       }
     }
@@ -25978,13 +26207,13 @@ var SyncPeer_V1 = class _SyncPeer_V1 extends LightWitnessBase_V1 {
   setOptionalOpts(arg) {
     const lc2 = `${this.lc}[${this.setOptionalOpts.name}]`;
     try {
-      if (logalot65) {
+      if (logalot66) {
         console.log(`${lc2} starting... (I: ae5ddbd3577db267f84743175a736626)`);
       }
       if (!this.opts) {
         throw new Error(`(UNEXPECTED) this.opts falsy? (E: 0dd4d6080a6e2f31d86cf4d86e11b826)`);
       }
-      if (logalot65) {
+      if (logalot66) {
         console.log(`${lc2} updating opts. arg keys: ${Object.keys(arg)} (I: 452d78a558f8fc3468c8e2e68c70b226)`);
       }
       this.opts = { ...this.opts, ...arg };
@@ -25992,7 +26221,7 @@ var SyncPeer_V1 = class _SyncPeer_V1 extends LightWitnessBase_V1 {
       console.error(`${lc2} ${extractErrorMsg(error)}`);
       throw error;
     } finally {
-      if (logalot65) {
+      if (logalot66) {
         console.log(`${lc2} complete.`);
       }
     }
@@ -26017,7 +26246,7 @@ var SyncPeer_V1 = class _SyncPeer_V1 extends LightWitnessBase_V1 {
   async authenticateAndValidate({ context }) {
     const lc2 = `${this.lc}[${this.authenticateAndValidate.name}]`;
     try {
-      if (logalot65) {
+      if (logalot66) {
         console.log(`${lc2} starting... (I: add238055cd84a222c5b8c89913af526)`);
       }
       if (!this.opts) {
@@ -26039,7 +26268,7 @@ var SyncPeer_V1 = class _SyncPeer_V1 extends LightWitnessBase_V1 {
       console.error(`${lc2} ${extractErrorMsg(error)}`);
       throw error;
     } finally {
-      if (logalot65) {
+      if (logalot66) {
         console.log(`${lc2} complete.`);
       }
     }
@@ -26056,7 +26285,7 @@ var SyncPeer_V1 = class _SyncPeer_V1 extends LightWitnessBase_V1 {
   async witness(context) {
     const lc2 = `${this.lc}[${this.witness.name}]`;
     try {
-      if (logalot65) {
+      if (logalot66) {
         console.log(`${lc2} starting...`);
       }
       if (!this.opts) {
@@ -26074,7 +26303,7 @@ var SyncPeer_V1 = class _SyncPeer_V1 extends LightWitnessBase_V1 {
         });
         return response;
       } else {
-        if (logalot65) {
+        if (logalot66) {
           console.log(`${lc2} No response from peer. this may be normal if we just sent the very last commit frame. (I: 1855b7728c8898e1f9c001f8170ba826)`);
         }
         return void 0;
@@ -26083,7 +26312,7 @@ var SyncPeer_V1 = class _SyncPeer_V1 extends LightWitnessBase_V1 {
       console.error(`${lc2} ${extractErrorMsg(error)}`);
       throw error;
     } finally {
-      if (logalot65) {
+      if (logalot66) {
         console.log(`${lc2} complete.`);
       }
     }
@@ -26097,7 +26326,7 @@ var SyncPeer_V1 = class _SyncPeer_V1 extends LightWitnessBase_V1 {
   async getLocalIbGib(addr) {
     const lc2 = `${this.lc}[${this.getLocalIbGib.name}]`;
     try {
-      if (logalot65) {
+      if (logalot66) {
         console.log(`${lc2} starting... (I: 27b248cb9801eeb2386b71485389a826)`);
       }
       console.warn(`${lc2} possibly a bottleneck here, getLocalIbGib only gets a single ibgib... (W: 2fd448a435480e6b128f6b8bcbef4826)`);
@@ -26115,7 +26344,7 @@ var SyncPeer_V1 = class _SyncPeer_V1 extends LightWitnessBase_V1 {
       console.error(`${lc2} ${extractErrorMsg(error)}`);
       throw error;
     } finally {
-      if (logalot65) {
+      if (logalot66) {
         console.log(`${lc2} complete.`);
       }
     }
@@ -26164,7 +26393,7 @@ var SyncWebSocketMsgType = {
 var SYNC_WEB_SOCKET_MSG_TYPE_VALID_VALUES = Object.values(SyncWebSocketMsgType);
 
 // ../../libs/core-gib/dist/sync/sync-peer/sync-peer-websocket/sync-peer-websocket-receiver/sync-peer-websocket-receiver-v1.mjs
-var logalot66 = GLOBAL_LOG_A_LOT3;
+var logalot67 = GLOBAL_LOG_A_LOT3;
 var SyncPeerWebSocketReceiver_V1 = class _SyncPeerWebSocketReceiver_V1 extends SyncPeer_V1 {
   lc = `[${_SyncPeerWebSocketReceiver_V1.name}]`;
   get classname() {
@@ -26241,7 +26470,7 @@ var SyncPeerWebSocketReceiver_V1 = class _SyncPeerWebSocketReceiver_V1 extends S
             allowCancel: false,
             spaceName: tempSpaceName,
             getFnPrompt: localMetaspace.getFnPrompt,
-            logalot: logalot66
+            logalot: logalot67
           }
         });
         if (!localTempSpace) {
@@ -26266,7 +26495,7 @@ var SyncPeerWebSocketReceiver_V1 = class _SyncPeerWebSocketReceiver_V1 extends S
         throw new Error(`WebSocket wrapper not bound to receiver peer (E: ad4c5838d1b87259586b21a89b2c7726)`);
       }
       const msg = JSON.parse(messageText);
-      if (logalot66) {
+      if (logalot67) {
         console.log(`${lc2} received frame: ${msg.type}`);
       }
       if (!this.isAuthenticated) {
@@ -26367,7 +26596,7 @@ var SyncPeerWebSocketReceiver_V1 = class _SyncPeerWebSocketReceiver_V1 extends S
     const space = this.opts.localSpace;
     if (msg.type === SyncWebSocketMsgType.auth_init) {
       const { sAddr } = msg;
-      if (logalot66) {
+      if (logalot67) {
         console.log(`${lc2} auth-init for ${sAddr}`);
       }
       const authorizedS = await this.getSessionKeystone(sAddr);
@@ -26386,7 +26615,7 @@ var SyncPeerWebSocketReceiver_V1 = class _SyncPeerWebSocketReceiver_V1 extends S
       }));
     } else if (msg.type === SyncWebSocketMsgType.auth_proof) {
       const { proofFrame } = msg;
-      if (logalot66) {
+      if (logalot67) {
         console.log(`${lc2} verifying auth-proof...`);
       }
       if (!this.sessionS_tjpAddr) {
@@ -26405,7 +26634,7 @@ var SyncPeerWebSocketReceiver_V1 = class _SyncPeerWebSocketReceiver_V1 extends S
       });
       await metaspace.put({ ibGibs: [proofFrame], space });
       await metaspace.registerNewIbGib({ ibGib: proofFrame, space });
-      if (logalot66) {
+      if (logalot67) {
         console.log(`${lc2} connect validation successful! Connection upgraded to active sync session.`);
       }
       this.isAuthenticated = true;
@@ -26422,7 +26651,7 @@ var SyncPeerWebSocketReceiver_V1 = class _SyncPeerWebSocketReceiver_V1 extends S
   async executeIncomingSyncRequestAndRespond({ context }) {
     const lc2 = `${this.lc}[${this.executeIncomingSyncRequestAndRespond.name}]`;
     try {
-      if (logalot66) {
+      if (logalot67) {
         console.log(`${lc2} executing incoming sync turn...`);
       }
       if (!this.opts) {
@@ -26446,7 +26675,7 @@ var SyncPeerWebSocketReceiver_V1 = class _SyncPeerWebSocketReceiver_V1 extends S
           context: responseCtx
         }));
       } else {
-        if (logalot66) {
+        if (logalot67) {
           console.log(`${lc2} synchronization session completed successfully.`);
         }
       }
@@ -26466,11 +26695,11 @@ var GraftPreference;
 })(GraftPreference || (GraftPreference = {}));
 
 // ../../libs/core-gib/dist/timeline/timeline-api.mjs
-var logalot67 = GLOBAL_LOG_A_LOT3;
+var logalot68 = GLOBAL_LOG_A_LOT3;
 async function getLockScope({ timeline }) {
   const lc2 = `[${getLockScope.name}]`;
   try {
-    if (logalot67) {
+    if (logalot68) {
       console.log(`${lc2} starting...`);
     }
     if (isPrimitive({ ibGib: timeline })) {
@@ -26488,7 +26717,7 @@ async function getLockScope({ timeline }) {
     console.error(`${lc2} ${extractErrorMsg(error)}`);
     throw error;
   } finally {
-    if (logalot67) {
+    if (logalot68) {
       console.log(`${lc2} complete.`);
     }
   }
@@ -26496,7 +26725,7 @@ async function getLockScope({ timeline }) {
 async function appendToTimeline({ timeline, rel8nInfos, rel8nRemovalInfos, timelineIndexInfo, metaspace, space, skipLock, noDna }) {
   const lc2 = `[${appendToTimeline.name}]`;
   try {
-    if (logalot67) {
+    if (logalot68) {
       console.log(`${lc2} starting... (I: fcdff10832215068019355265f4cbc25)`);
     }
     space ??= await metaspace.getLocalUserSpace({ lock: false });
@@ -26592,7 +26821,7 @@ async function appendToTimeline({ timeline, rel8nInfos, rel8nRemovalInfos, timel
     console.error(`${lc2} ${extractErrorMsg(error)}`);
     throw error;
   } finally {
-    if (logalot67) {
+    if (logalot68) {
       console.log(`${lc2} complete.`);
     }
   }
@@ -26600,7 +26829,7 @@ async function appendToTimeline({ timeline, rel8nInfos, rel8nRemovalInfos, timel
 async function updateSpecialIndex({ type, rel8nInfos, dataToAddOrPatch, metaspace, space, skipLock }) {
   const lc2 = `[${updateSpecialIndex.name}]`;
   try {
-    if (logalot67) {
+    if (logalot68) {
       console.log(`${lc2} starting... (I: 6e7d05fe916d813b71766e2eaa747c25)`);
     }
     if (type === "latest") {
@@ -26698,7 +26927,7 @@ async function updateSpecialIndex({ type, rel8nInfos, dataToAddOrPatch, metaspac
     console.error(`${lc2} ${extractErrorMsg(error)}`);
     throw error;
   } finally {
-    if (logalot67) {
+    if (logalot68) {
       console.log(`${lc2} complete.`);
     }
   }
@@ -26706,7 +26935,7 @@ async function updateSpecialIndex({ type, rel8nInfos, dataToAddOrPatch, metaspac
 async function getLatestTimelineIbGibDto_nonLocking({ timeline, timelineAddr, metaspace, space }) {
   const lc2 = `[${getLatestTimelineIbGibDto_nonLocking.name}]`;
   try {
-    if (logalot67) {
+    if (logalot68) {
       console.log(`${lc2} starting... (I: f2b605361368e1956f6db878dbfeb825)`);
     }
     if (!timeline && !timelineAddr) {
@@ -26748,7 +26977,7 @@ async function getLatestTimelineIbGibDto_nonLocking({ timeline, timelineAddr, me
     console.error(`${lc2} ${extractErrorMsg(error)}`);
     throw error;
   } finally {
-    if (logalot67) {
+    if (logalot68) {
       console.log(`${lc2} complete.`);
     }
   }
@@ -26756,7 +26985,7 @@ async function getLatestTimelineIbGibDto_nonLocking({ timeline, timelineAddr, me
 async function createTimeline({ ib, data, rel8ns, noDna, parentIb, parentIbGib, metaspace, space }) {
   const lc2 = `[${createTimeline.name}]`;
   try {
-    if (logalot67) {
+    if (logalot68) {
       console.log(`${lc2} starting...`);
     }
     space ??= await metaspace.getLocalUserSpace({ lock: false });
@@ -26800,7 +27029,7 @@ async function createTimeline({ ib, data, rel8ns, noDna, parentIb, parentIbGib,
 async function getDna({ ibGib, metaspace, space }) {
   const lc2 = `[${getDna.name}]`;
   try {
-    if (logalot67) {
+    if (logalot68) {
       console.log(`${lc2} starting...`);
     }
     space ??= await metaspace.getLocalUserSpace({ lock: false });
@@ -26825,7 +27054,7 @@ async function getDna({ ibGib, metaspace, space }) {
 async function getHistory({ timeline, getLatest, includeDna, metaspace, space }) {
   const lc2 = `[${getHistory.name}]`;
   try {
-    if (logalot67) {
+    if (logalot68) {
       console.log(`${lc2} starting... (I: 7fbc442a27e8f9fda8ac4228ded84825)`);
     }
     space ??= await metaspace.getLocalUserSpace({ lock: false });
@@ -26871,7 +27100,7 @@ async function getHistory({ timeline, getLatest, includeDna, metaspace, space })
     console.error(`${lc2} ${extractErrorMsg(error)}`);
     throw error;
   } finally {
-    if (logalot67) {
+    if (logalot68) {
       console.log(`${lc2} complete.`);
     }
   }
@@ -26879,7 +27108,7 @@ async function getHistory({ timeline, getLatest, includeDna, metaspace, space })
 async function getHistoryAddrs({ timeline, getLatest, metaspace, space }) {
   const lc2 = `[${getHistoryAddrs.name}]`;
   try {
-    if (logalot67) {
+    if (logalot68) {
       console.log(`${lc2} starting... (I: c7a328b14018642138ebb47870c15626)`);
     }
     const historyInfo = await getHistory({
@@ -26895,7 +27124,7 @@ async function getHistoryAddrs({ timeline, getLatest, metaspace, space }) {
     console.error(`${lc2} ${extractErrorMsg(error)}`);
     throw error;
   } finally {
-    if (logalot67) {
+    if (logalot68) {
       console.log(`${lc2} complete.`);
     }
   }
@@ -26942,11 +27171,11 @@ async function getSyncSagaMessageFromFrame({ frameIbGib, space }) {
 }
 
 // ../../libs/core-gib/dist/witness/space/reconciliation-space/reconciliation-space-helper.mjs
-var logalot68 = GLOBAL_LOG_A_LOT3;
+var logalot69 = GLOBAL_LOG_A_LOT3;
 function getUniqueDnas({ base, extended, throwIfExtendedDoesntContainBase }) {
   const lc2 = `[${getUniqueDnas.name}]`;
   try {
-    if (logalot68) {
+    if (logalot69) {
       console.log(`${lc2} starting... (I: 00d70d79a0249165c2a230389c962526)`);
     }
     let baseIsStartingSubsetOfExtended = true;
@@ -26975,7 +27204,7 @@ function getUniqueDnas({ base, extended, throwIfExtendedDoesntContainBase }) {
     console.error(`${lc2} ${extractErrorMsg(error)}`);
     throw error;
   } finally {
-    if (logalot68) {
+    if (logalot69) {
       console.log(`${lc2} complete.`);
     }
   }
@@ -27037,7 +27266,7 @@ async function applyTransforms({ src, createdIbGibs_Running, dnaAddrsToApplyToSt
 }
 
 // ../../libs/core-gib/dist/sync/graft-info/graft-merge-strategy-base-v1.mjs
-var logalot69 = GLOBAL_LOG_A_LOT3;
+var logalot70 = GLOBAL_LOG_A_LOT3;
 var GraftMergeStrategyBase_V1 = class {
   defaultGraftPreference;
   constructor(opts) {
@@ -27094,7 +27323,7 @@ var GraftMergeStrategyBase_V1 = class {
   async applyTransformAndRegister({ resTransform, space, newGraftDnaIbGibs, newGraftedIntermediateIbGibs_ordered }) {
     const lc2 = `[${this.constructor.name}][${this.applyTransformAndRegister.name}]`;
     try {
-      if (logalot69) {
+      if (logalot70) {
         console.log(`${lc2} starting... (I: 2e8a1d7f6c4342138901a1b2c3d4e5f6)`);
       }
       if (!resTransform) {
@@ -27119,7 +27348,7 @@ var GraftMergeStrategyBase_V1 = class {
       console.error(`${lc2} ${extractErrorMsg(error)} (E: d2384a8b792e42429bc7891234567826)`);
       throw error;
     } finally {
-      if (logalot69) {
+      if (logalot70) {
         console.log(`${lc2} complete.`);
       }
     }
@@ -27127,7 +27356,7 @@ var GraftMergeStrategyBase_V1 = class {
 };
 
 // ../../libs/core-gib/dist/sync/graft-info/strategies/default-dna-replay-graft-strategy.mjs
-var logalot70 = GLOBAL_LOG_A_LOT3;
+var logalot71 = GLOBAL_LOG_A_LOT3;
 var DefaultDnaReplayGraftStrategy = class extends GraftMergeStrategyBase_V1 {
   strategyId = "DefaultDnaReplayGraftStrategy";
   canGraft(context) {
@@ -27157,7 +27386,7 @@ var DefaultDnaReplayGraftStrategy = class extends GraftMergeStrategyBase_V1 {
         }
       };
       var throwIfUnexpected = throwIfUnexpected2;
-      if (logalot70) {
+      if (logalot71) {
         console.log(`${lc2} starting default DNA replay graft... (I: 8a9b0c1d2e3f4a5b6c7d8e9f0a1b2c3d)`);
       }
       const { conflictStrategy, timelineAddrsA, timelineAddrsB, latestCommonFrameAddr, ibGibReadCache, space, graftPreference } = context;
@@ -27198,10 +27427,10 @@ var DefaultDnaReplayGraftStrategy = class extends GraftMergeStrategyBase_V1 {
       const baseBranchAddrs = baseBranch.map((x) => getIbGibAddr({ ibGib: x }));
       const orphanTipAddr = getIbGibAddr({ ibGib: orphanTip });
       const orphanBranchAddrs = orphanBranch.map((x) => getIbGibAddr({ ibGib: x }));
-      if (logalot70) {
+      if (logalot71) {
         console.log(`${lc2} baseTipAddr: ${baseTipAddr} (I: 93353d9b9b68b17088f57958df85e826)`);
       }
-      if (logalot70) {
+      if (logalot71) {
         console.log(`${lc2} orphanTipAddr: ${orphanTipAddr} (I: 14df8867adc5dab97ff3c1e989b40e26)`);
       }
       const [latestCommonFrameIbGib] = await getIbGibsFromCache_fallbackToSpaces({
@@ -27324,7 +27553,7 @@ var DefaultDnaReplayGraftStrategy = class extends GraftMergeStrategyBase_V1 {
       console.error(`${lc2} ${extractErrorMsg(error)} (E: 7c8d9e0f1a2b3c4d5e6f7a8b9c0d1e2f)`);
       throw error;
     } finally {
-      if (logalot70) {
+      if (logalot71) {
         console.log(`${lc2} complete.`);
       }
     }
@@ -27332,7 +27561,7 @@ var DefaultDnaReplayGraftStrategy = class extends GraftMergeStrategyBase_V1 {
 };
 
 // ../../libs/core-gib/dist/sync/graft-info/graft-strategy-service.mjs
-var logalot71 = GLOBAL_LOG_A_LOT3;
+var logalot72 = GLOBAL_LOG_A_LOT3;
 var lcFile = `[graft-strategy-service]`;
 var GraftStrategyService = class _GraftStrategyService {
   static _instance;
@@ -27354,7 +27583,7 @@ var GraftStrategyService = class _GraftStrategyService {
       throw new Error(`(UNEXPECTED) strategy falsy (E: 7c8b9a0d1e2f3a4b5c6d7e8f9a0b1c2d)`);
     }
     if (!this._registeredStrategies.some((s) => s.strategyId === strategy.strategyId)) {
-      if (logalot71) {
+      if (logalot72) {
         console.log(`${lc2} registering strategy ${strategy.strategyId} (I: 8b9a0c1d2e3f4a5b6c7d8e9f0a1b2c3d)`);
       }
       this._registeredStrategies.push(strategy);
@@ -27368,7 +27597,7 @@ var GraftStrategyService = class _GraftStrategyService {
     if (!strategy) {
       throw new Error(`(UNEXPECTED) fallback strategy falsy (E: 9c0a1b2c3d4e5f6a7b8c9d0e1f2a3b4c)`);
     }
-    if (logalot71) {
+    if (logalot72) {
       console.log(`${lc2} setting fallback strategy ${strategy.strategyId} (I: 0a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d)`);
     }
     this._fallbackStrategy = strategy;
@@ -27384,7 +27613,7 @@ var GraftStrategyService = class _GraftStrategyService {
    */
   reset() {
     const lc2 = `${lcFile}[${this.reset.name}]`;
-    if (logalot71) {
+    if (logalot72) {
       console.log(`${lc2} resetting strategies to default fallback... (I: 1a2b3c4d5e6f7a8b9c0d1e2f3a4b5c6d)`);
     }
     this._registeredStrategies = [];
@@ -27400,7 +27629,7 @@ var GraftStrategyService = class _GraftStrategyService {
   async graftTimelines({ timelineAddrsA, timelineAddrsB, latestCommonFrameAddr, conflictStrategy, ibGibReadCache, space, graftPreference }) {
     const lc2 = `[${this.graftTimelines.name}]`;
     try {
-      if (logalot71) {
+      if (logalot72) {
         console.log(`${lc2} starting... (I: 3b4c3e8e59c883d9d3c352efd6380826)`);
       }
       if (timelineAddrsA.length === 0) {
@@ -27453,7 +27682,7 @@ var GraftStrategyService = class _GraftStrategyService {
       }
       let resGraft = void 0;
       for (const strategy of strategyPipeline) {
-        if (logalot71) {
+        if (logalot72) {
           console.log(`${lc2} executing graft strategy ${strategy.strategyId} (I: 5c6d7e8f9a0b1c2d3e4f5a6b7c8d9e0f)`);
         }
         resGraft = await strategy.graft(context);
@@ -27469,7 +27698,7 @@ var GraftStrategyService = class _GraftStrategyService {
       console.error(`${lc2} ${extractErrorMsg(error)} (E: 9a0b1c2d3e4f5a6b7c8d9e0f1a2b3c4d)`);
       throw error;
     } finally {
-      if (logalot71) {
+      if (logalot72) {
         console.log(`${lc2} complete.`);
       }
     }
@@ -27477,7 +27706,7 @@ var GraftStrategyService = class _GraftStrategyService {
 };
 
 // ../../libs/core-gib/dist/sync/sync-saga-coordinator.mjs
-var logalot72 = GLOBAL_LOG_A_LOT3;
+var logalot73 = GLOBAL_LOG_A_LOT3;
 var logalotControlDomain = false;
 var lcControlDomain = "[ControlDomain]";
 var SyncSagaCoordinator = class _SyncSagaCoordinator {
@@ -27531,7 +27760,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
    */
   async sync({ peer, domainIbGibs, senderIdentityInfo, fnSenderSecret, conflictStrategy = SyncConflictStrategy.abort, graftPreference, metaspace, localSpace }) {
     const lc2 = `${this.lc}[${this.sync.name}]`;
-    if (logalot72) {
+    if (logalot73) {
       console.log(`${lc2} starting...`);
     }
     if (!localSpace) {
@@ -27571,7 +27800,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
         allowCancel: false,
         spaceName: tempSpaceName,
         getFnPrompt: metaspace.getFnPrompt,
-        logalot: logalot72
+        logalot: logalot73
       }
     });
     if (!tempSpace) {
@@ -27645,7 +27874,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
   async continueSync({ sagaContext, mySpace, myTempSpace, metaspace, peer }) {
     const lc2 = `${this.lc}[${this.continueSync.name}]`;
     try {
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} starting... (I: f64e08bf77d1425378601f380384ec26)`);
       }
       const contextResult = await this.handleResponseSagaContext({
@@ -27655,7 +27884,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
         metaspace
       });
       if (!contextResult) {
-        if (logalot72) {
+        if (logalot73) {
           console.log(`${lc2} Handler returned null (Saga End). (I: 43da8bb6c846b1fe7766332643be0e26)`);
         }
         return null;
@@ -27688,7 +27917,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
       console.error(`${lc2} ${extractErrorMsg(error)}`);
       throw error;
     } finally {
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} complete.`);
       }
     }
@@ -27717,7 +27946,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
       const sublc = `${lc2}[peer.payloadIbGibsDomainReceived$]`;
       const subscription = await peer.payloadIbGibsDomainReceived$.subscribe(fnObs({
         next: async (ibgib) => {
-          if (logalot72) {
+          if (logalot73) {
             console.log(`${sublc} next fired. (I: 2b4bdf502a38a90ba33d9711e7cb7826)`);
           }
           const addr = getIbGibAddr({ ibGib: ibgib });
@@ -27735,7 +27964,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
           }
         },
         complete: async () => {
-          if (logalot72) {
+          if (logalot73) {
             console.log(`${sublc} complete fired. (I: a47218aa9e4433fdb97c068880a45826)`);
           }
           await subscription.unsubscribe();
@@ -27770,7 +27999,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
           if (currentFrame) {
             const msg = await getSyncSagaMessageFromFrame({ frameIbGib: currentFrame, space: localSpace });
             if (msg?.data?.stage === SyncStage.commit) {
-              if (logalot72) {
+              if (logalot73) {
                 console.log(`${lc2} Sender sent Commit. Peer returned no response. Saga Complete. (I: 26f9ee073858ca78b8284753368b5226)`);
               }
               currentFrame = null;
@@ -27830,7 +28059,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
           console.error(`${lc2} NAG ERROR (DOES NOT THROW): does this ever hit now? (E: e04d02efc2a8e72a88b79f1f0f95ca26)`);
           break;
         } else if (contextResult.nextFrameInfo?.sagaComplete) {
-          if (logalot72) {
+          if (logalot73) {
             console.log(`${lc2} Handler returned null (Saga End). (I: 123bf9e7dca8886de72553a8d4f29e26)`);
           }
           break;
@@ -27868,7 +28097,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
   async createSyncSagaContext({ sagaFrame, payloadIbGibsDomain, metaspace, localSpace, sessionIdentityAddr, peer, skipSign }) {
     const lc2 = `[${this.createSyncSagaContext.name}]`;
     try {
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} starting... (I: 6b87bee313e811d1d2fc90e87fbec826)`);
       }
       if (!sagaFrame.data) {
@@ -27942,7 +28171,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
       console.error(`${lc2} ${extractErrorMsg(error)}`);
       throw error;
     } finally {
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} complete.`);
       }
     }
@@ -27954,7 +28183,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
   async getKnowledgeMap({ space, metaspace, domainIbGibs, tjpAddrs }) {
     const lc2 = `${this.lc}[${this.getKnowledgeMap.name}]`;
     try {
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} starting... (I: e184f8a7818666febfbbd2d841ed3826)`);
       }
       if (!(domainIbGibs && domainIbGibs.length > 0) && !(tjpAddrs && tjpAddrs.length > 0)) {
@@ -27987,7 +28216,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
       console.error(`${lc2} ${extractErrorMsg(error)}`);
       throw error;
     } finally {
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} complete.`);
       }
     }
@@ -28003,7 +28232,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
       space
     });
     const graphIsValid = fullGraph && Object.keys(fullGraph).length > 0;
-    if (logalot72) {
+    if (logalot73) {
       console.log(`${lc2} graph generated. nodes: ${graphIsValid ? Object.keys(fullGraph).length : 0}`);
     }
     const srcIbGibs = graphIsValid ? Object.values(fullGraph) : [];
@@ -28026,7 +28255,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
   async createInitFrame({ sagaId, domainIbGibs, conflictStrategy, graftPreference, metaspace, localSpace, tempSpace, peer }) {
     const lc2 = `${this.lc}[${this.createInitFrame.name}]`;
     try {
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} starting... (I: 551af8b411ae9be712ce3358d43ee726)`);
       }
       const analysis = await this.analyzeDomainIbGibs({ domainIbGibs, space: localSpace });
@@ -28045,7 +28274,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
         mode: SyncMode.sync,
         stones: srcStones.map((s) => getIbGibAddr({ ibGib: s }))
       };
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} SyncStage.init: ${SyncStage.init}, SyncStage.commit: ${SyncStage.commit}`);
         console.log(`${lc2} initData.stage: ${initData.stage}`);
       }
@@ -28062,7 +28291,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
         localSpace,
         sessionIdentity: peer.currentSessionIdentity
       });
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} sagaFrame (init): ${pretty(sagaFrame)} (I: b3d6a8be69248f18713cc3073cb08626)`);
       }
       return { initFrame: sagaFrame, initDomainGraph: fullGraph };
@@ -28070,7 +28299,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
       console.error(`${lc2} ${extractErrorMsg(error)}`);
       throw error;
     } finally {
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} complete.`);
       }
     }
@@ -28111,7 +28340,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
     } catch (error) {
       errors.push(`Error during validateReturnContext: ${extractErrorMsg(error)} (E: da878e1239aa88ee27bdfca005c28226)`);
     }
-    if (logalot72 && errors.length > 0) {
+    if (logalot73 && errors.length > 0) {
       console.log(`${lc2} errors: ${errors.join("\n")} (I: cbc119df45aa13daa9009de392c4b226)`);
     }
     return errors;
@@ -28125,7 +28354,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
   async pollForDomainPayloads({ expectedAddrs, pollIntervalMs, domainPayloadsMap, tempSpace }) {
     const lc2 = `${this.lc}[${this.pollForDomainPayloads.name}]`;
     try {
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} starting... (I: 26dce86bfca572939885798802d6e926)`);
       }
       let resultDomainPayloads = [];
@@ -28164,7 +28393,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
       console.error(`${lc2} ${extractErrorMsg(error)}`);
       throw error;
     } finally {
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} complete.`);
       }
     }
@@ -28198,18 +28427,18 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
   async handleResponseSagaContext({ sagaContext, initDomainGraph, mySpace, myTempSpace, metaspace }) {
     const lc2 = `${this.lc}[${this.handleResponseSagaContext.name}]`;
     try {
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} starting... (I: 5deec8a1f7a6d263c88cd458ad990826)`);
       }
       const sagaIbGib = sagaContext.sagaFrame;
       if (!sagaIbGib.data) {
         throw new Error(`(UNEXPECTED) sagaIbGib.data falsy? (E: 71b938adf1d87c2527bfd4f86dfd0826)`);
       }
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} sagaIbGib: ${pretty(sagaIbGib)} (I: 1b99d87d262e9d18d8a607a80b1a0126)`);
       }
       const { stage, messageData } = await this.getStageAndPayloadFromFrame({ sagaFrame: sagaIbGib, space: mySpace });
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} handling frame stage: ${stage}`);
       }
       let nextFrameInfo;
@@ -28246,7 +28475,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
           });
           break;
         case SyncStage.commit:
-          if (logalot72) {
+          if (logalot73) {
             console.log(`${lc2}[${getSyncSagaFrameOrigin({ sagaFrame: sagaIbGib })}] mySpace.ib: ${mySpace.ib} (I: 5b270996d848907238d817fffa64a126)`);
           }
           nextFrameInfo = await this.handleCommitFrame({
@@ -28259,7 +28488,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
         default:
           throw new Error(`${lc2} (UNEXPECTED) Unknown sync stage: ${stage} (E: 9c2b4c8a6d34469f8263544710183355)`);
       }
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} nextFrameInfo: ${nextFrameInfo ? pretty(nextFrameInfo) : "undefined"} (I: a8ad281ca8e89385686d18327a105726)`);
       }
       return { errorMsg: void 0, nextFrameInfo };
@@ -28268,7 +28497,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
       console.error(errorMsg);
       return { errorMsg };
     } finally {
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} complete.`);
       }
     }
@@ -28289,10 +28518,10 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
   async handleInitFrame({ sagaIbGib, messageData, mySpace, myTempSpace, metaspace }) {
     const lc2 = `${this.lc}[${this.handleInitFrame.name}]`;
     try {
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} starting... (I: 9d88dcad0408c029e898a4bcf3b08426)`);
       }
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} [TEST DEBUG] Receiver mySpace: ${mySpace.ib}`);
       }
       const initData = messageData;
@@ -28308,7 +28537,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
       const pushOfferInfos = [];
       const stones = initData.stones || [];
       if (stones.length > 0) {
-        if (logalot72) {
+        if (logalot73) {
           console.log(`${lc2} processing stones: ${stones.length}`);
         }
         const resStones = await getFromSpace({ space: mySpace, addrs: stones });
@@ -28318,7 +28547,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
         }
         const addrsNotFound = rawResultIbGib.data.addrsNotFound;
         if (addrsNotFound && addrsNotFound.length > 0) {
-          if (logalot72) {
+          if (logalot73) {
             console.log(`${lc2} stones missing (requesting): ${addrsNotFound.length}`);
           }
           addrsNotFound.forEach((addr) => {
@@ -28329,14 +28558,14 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
         }
       }
       const senderKnowledge = initData.knowledgeMap;
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} senderKnowledge: ${pretty(senderKnowledge)} (I: 9f957862356dfeae183c200854e86e26)`);
       }
       const senderTjpAddrs = Object.keys(senderKnowledge);
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} [TEST DEBUG] senderTjpAddrs: ${JSON.stringify(senderTjpAddrs)}`);
       }
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} senderTjpAddrs: ${pretty(senderTjpAddrs)} (I: 86ea4c53db0dc184c8b253386c402126)`);
       }
       let receiverLatestAddrsMap = {};
@@ -28353,10 +28582,10 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
           throw new Error(`(UNEXPECTED) resGetLatestAddrs.data.latestAddrsMap falsy? (E: 16bc386dd51d0ff53a49620b1e641826)`);
         }
         receiverLatestAddrsMap = resGetLatestAddrs.data.latestAddrsMap;
-        if (logalot72) {
+        if (logalot73) {
           console.log(`${lc2} [TEST DEBUG] receiverLatestAddrsMap: ${JSON.stringify(receiverLatestAddrsMap)}`);
         }
-        if (logalot72) {
+        if (logalot73) {
           console.log(`${lc2} receiverLatestAddrsMap: ${pretty(receiverLatestAddrsMap)} (I: 980975642cbccd8018cf0cd808d30826)`);
         }
       }
@@ -28364,7 +28593,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
         const senderTipAddr = senderKnowledge[tjpAddr];
         const receiverTipAddr = receiverLatestAddrsMap[tjpAddr];
         if (!receiverTipAddr) {
-          if (logalot72) {
+          if (logalot73) {
             console.log(`${lc2} [TEST DEBUG] Missing receiver timeline for TJP: ${tjpAddr}. Requesting remoteAddr: ${senderTipAddr}`);
           }
           deltaRequestAddrInfos.push({
@@ -28376,12 +28605,12 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
           continue;
         }
         if (receiverTipAddr === senderTipAddr) {
-          if (logalot72) {
+          if (logalot73) {
             console.log(`${lc2} [TEST DEBUG] TJP ${tjpAddr}: Synced (receiverTipAddr === remoteAddr)`);
           }
           continue;
         }
-        if (logalot72) {
+        if (logalot73) {
           console.log(`${lc2} [TEST DEBUG] TJP ${tjpAddr}: receiverTipAddr=${receiverTipAddr}, remoteAddr=${senderTipAddr} - checking for divergence...`);
         }
         let remoteIsInPast;
@@ -28396,7 +28625,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
           remoteIsInPast = false;
         }
         if (remoteIsInPast) {
-          if (logalot72) {
+          if (logalot73) {
             console.log(`${lc2} [TEST DEBUG] TJP ${tjpAddr}: Remote (sender) is in past - offering push`);
           }
           const deltaGraph = await getDeltaDependencyGraph({
@@ -28416,12 +28645,12 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
               space: mySpace
             });
           } catch (error) {
-            if (logalot72) {
+            if (logalot73) {
               console.log(`${lc2} isPastFrame just threw, but is an expected error if we don't have remote. verbose logging error though: ${extractErrorMsg(error)} (I: 47ea08d0b418cf4aa8a502a7bcb80826)`);
             }
           }
           if (receiverIsInPast) {
-            if (logalot72) {
+            if (logalot73) {
               console.log(`${lc2} [TEST DEBUG] TJP ${tjpAddr}: receiver is in past - requesting delta`);
             }
             deltaRequestAddrInfos.push({
@@ -28430,7 +28659,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
               latestAddrAlreadyHave: receiverTipAddr
             });
           } else {
-            if (logalot72) {
+            if (logalot73) {
               console.log(`${lc2} [TEST DEBUG] TJP ${tjpAddr}: DIVERGENCE DETECTED! conflictStrategy=${conflictStrategy}`);
             }
             if (conflictStrategy === "abort") {
@@ -28470,7 +28699,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
       }
       const hasTerminalConflicts = conflicts.some((c) => c.terminal);
       if (hasTerminalConflicts) {
-        if (logalot72) {
+        if (logalot73) {
           console.warn(`${lc2} ABORTING Sync Saga due to terminal conflicts: ${JSON.stringify(conflicts)}`);
         }
         throw new Error(`the saga has terminal conflicts. conflicts: ${JSON.stringify(conflicts)} (E: f2edbe93cc07a63b38bfc013d2213b26)`);
@@ -28493,7 +28722,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
         localSpace: mySpace,
         metaspace
       });
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} ackStone created: ${pretty(ackStone)} (I: 313708132dd53ff946befb7833657826)`);
       }
       const ackFrame = await this.evolveSyncSagaIbGib({
@@ -28536,7 +28765,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
           domainAddrs.forEach((x) => searchSecondSpaceAddrs.push(x));
         }
         if (searchSecondSpaceAddrs.length > 0) {
-          if (logalot72) {
+          if (logalot73) {
             console.log(`${lc2} couldn't get all addrs in mySpace (${mySpace.ib}). searchSecondSpaceAddrs: ${searchSecondSpaceAddrs} (I: 233fd954dbd84e51bca02fa8eed5f826)`);
           }
           const resGet2 = await getFromSpace({ addrs: searchSecondSpaceAddrs, space: myTempSpace });
@@ -28557,7 +28786,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
       console.error(`${lc2} ${extractErrorMsg(error)}`);
       throw error;
     } finally {
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} complete.`);
       }
     }
@@ -28580,7 +28809,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
   async handleAckFrame({ sagaContext, sagaIbGib, initDomainGraph, mySpace, myTempSpace, metaspace }) {
     const lc2 = `${this.lc}[${this.handleAckFrame.name}]`;
     try {
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} starting... (I: 605b6860e898267a5b50c6d85704be26)`);
       }
       const { messageData } = await this.getStageAndPayloadFromFrame({ sagaFrame: sagaIbGib, space: mySpace });
@@ -28592,22 +28821,22 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
       if (ackData.stage !== SyncStage.ack) {
         throw new Error(`${lc2} Invalid ack frame: ackData.stage !== SyncStage.ack (E: 2e8b0a94b5954a66a6a1a7a0b3f5b7a1)`);
       }
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} ackData: ${pretty(ackData)} (I: b817c5571c5e916fe8f90b892b3e8e26)`);
       }
       if (!sagaIbGib.data) {
         throw new Error(`(UNEXPECTED) sagaIbGib.data falsy? (E: e3f2e8f162484859787651b85c011826)`);
       }
       const conflicts = ackData.conflicts ? clone(ackData.conflicts) : [];
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} [CONFLICT DEBUG] Received conflicts from Ack: ${conflicts.length}`);
       }
-      if (logalot72 && conflicts.length > 0) {
+      if (logalot73 && conflicts.length > 0) {
         console.log(`${lc2} [CONFLICT DEBUG] Conflicts detail: ${JSON.stringify(conflicts, null, 2)}`);
       }
       const terminalConflicts = conflicts.filter((c) => c.terminal);
       if (terminalConflicts.length > 0) {
-        if (logalot72) {
+        if (logalot73) {
           console.warn(`${lc2} Received terminal conflicts from Ack: ${JSON.stringify(terminalConflicts)}`);
         }
         throw new Error(`${lc2} Peer reported terminal conflicts. (E: 23a0096ee05a2ccfa89334e8f156b426)`);
@@ -28615,7 +28844,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
       const outgoingPayloadIbGibsDomain_conflicts = [];
       const activeConflicts = [];
       if (conflicts.length > 0) {
-        if (logalot72) {
+        if (logalot73) {
           console.log(`${lc2} [CONFLICT DEBUG] Processing ${conflicts.length} non-terminal conflicts`);
         }
         for (const conflict of conflicts) {
@@ -28678,7 +28907,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
           });
           const isFastForward = latestCommonFrameAddr === receiverTipAddr;
           if (isFastForward) {
-            if (logalot72) {
+            if (logalot73) {
               console.log(`${lc2} [CONFLICT DEBUG] TJP ${tjpAddr}: Fast-forward detected (receiver behind sender). Excluding from active conflicts and sending delta payload.`);
             }
           } else {
@@ -28694,11 +28923,11 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
         } else {
           proposeCommit = true;
         }
-        if (logalot72) {
+        if (logalot73) {
           console.log(`${lc2} [CONFLICT DEBUG] Finished processing ${conflicts.length} conflicts. Active (divergent) conflicts: ${activeConflicts.length}. outgoingPayloadIbGibsDomain_conflicts.length (total outgoing payload ibgibs for ALL conflicts): ${outgoingPayloadIbGibsDomain_conflicts.length}`);
         }
       } else {
-        if (logalot72) {
+        if (logalot73) {
           console.log(`${lc2} [CONFLICT DEBUG] No optimistic conflicts to process`);
         }
       }
@@ -28749,7 +28978,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
         proposeCommit
       };
       let rel8ns = void 0;
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} Creating Delta Stone. Data stage: ${deltaData.stage}`);
       }
       const deltaStone = await this.createSyncMsgStone({
@@ -28764,7 +28993,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
         localSpace: mySpace,
         metaspace
       });
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} Delta Frame created. Rel8ns: ${JSON.stringify(deltaFrame.rel8ns)}`);
       }
       return { frame: deltaFrame, payloadIbGibsDomain: outgoingPayloadsDomain_all };
@@ -28772,7 +29001,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
       console.error(`${lc2} ${extractErrorMsg(error)}`);
       throw error;
     } finally {
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} complete.`);
       }
     }
@@ -28793,7 +29022,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
   async handleDeltaFrame({ sagaContext, sagaIbGib, mySpace, myTempSpace, metaspace }) {
     const lc2 = `${this.lc}[${this.handleDeltaFrame.name}]`;
     try {
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} starting... (I: a1d0a85eb4189466f86dfd61e3df2626)`);
       }
       const { messageData } = await this.getStageAndPayloadFromFrame({ sagaFrame: sagaIbGib, space: mySpace });
@@ -28810,24 +29039,24 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
       if (deltaData.stage !== SyncStage.delta) {
         throw new Error(`${lc2} Invalid delta frame: deltaData.stage !== SyncStage.delta (E: 0c28c8d8f08a4421b8344e6727271421)`);
       }
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} deltaData: ${pretty(deltaData)} (I: a76008681df458cfbcdc4848f825a826)`);
       }
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} [CONFLICT DEBUG] deltaData.payloadAddrsDomain count: ${deltaData.payloadAddrsDomain?.length || 0}`);
       }
       const { conflictStrategy, graftPreference } = sagaIbGib.data;
       const { deltaRequestAddrInfos, payloadAddrsDomain, proposeCommit } = deltaData;
       const peerProposesCommit = deltaData.proposeCommit ?? false;
       const receivedPayloadIbGibs = sagaContext.payloadIbGibsDomain ?? [];
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} [CONFLICT DEBUG] Fulfilling ${(deltaData.deltaRequestAddrInfos || []).length} peer requests`);
       }
       const outgoingPayload = await this.getPayloadsForRequestedInfos({
         deltaRequestAddrInfos: deltaData.deltaRequestAddrInfos || [],
         mySpace
       });
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} [CONFLICT DEBUG] Outgoing payload size (with deps): ${outgoingPayload.length}`);
       }
       const conflicts = deltaData.conflicts ? clone(deltaData.conflicts) : [];
@@ -29028,7 +29257,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
             metaspace
           });
           if (deltaData.proposeCommit) {
-            if (logalot72) {
+            if (logalot73) {
               console.log(`${lc2} Peer proposed commit. Accepting & Committing.`);
             }
             const commitData = {
@@ -29057,7 +29286,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
       console.error(`${lc2} ${extractErrorMsg(error)}`);
       throw error;
     } finally {
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} complete.`);
       }
     }
@@ -29068,7 +29297,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
   async executeLocalCommit({ deltaFrame, commitFrame, sagaHistory, metaspace, localSpace, localTempSpace }) {
     const lc2 = `${this.lc}[${this.executeLocalCommit.name}]`;
     try {
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} starting... (I: 6734980446b86a63c1af6e2e206de826)`);
       }
       if (!deltaFrame && !commitFrame) {
@@ -29082,7 +29311,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
         throw new Error(`(UNEXPECTED) !currentFrame? something wrong with my logic. (E: 4ec0ce6625cc1d677bc902c839ca1a26)`);
       }
       const currentFrameOrigin = getSyncSagaFrameOrigin({ sagaFrame: currentFrame });
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} currentFrameOrigin: ${currentFrameOrigin} (I: 3add8f8390c89743ae554bd3cc60b826)`);
       }
       if (!currentFrame.data) {
@@ -29125,7 +29354,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
           }
         });
       });
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2}[${currentFrameOrigin}] allPayloadAddrsDomainTransferred: ${allPayloadAddrsDomainReceived.length > 0 ? allPayloadAddrsDomainReceived.join(", ") : "none"} (I: a1950eb3ca95bdc9ec18a4b8823e9826)`);
       }
       let allPayloadIbGibsDomainTransferred = [];
@@ -29164,7 +29393,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
             throw new Error(`(UNEXPECTED) finalConflict.createdDnaAddrs falsy/empty? (E: 9689f8be5bd19650b8d4a058b65db826)`);
           }
           if (!replayedDnaAddrs || replayedDnaAddrs.length === 0) {
-            if (logalot72) {
+            if (logalot73) {
               console.log(`${lc2} finalConflict.replayedDnaAddrs falsy/empty (I: e88eb8a76b5815e07f10cbb2fa2ab826)`);
             }
           }
@@ -29182,21 +29411,21 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
       allPayloadIbGibsDomainTransferred.forEach((x) => allTransferredOrCreatedFromGraftIbGibs.push(x));
       createdFromConflictGraftsIbGibs.forEach((x) => allTransferredOrCreatedFromGraftIbGibs.push(x));
       if (allTransferredOrCreatedFromGraftIbGibs.length === 0) {
-        if (logalot72) {
+        if (logalot73) {
           console.log(`${lc2}[${currentFrameOrigin}] no changes on this end (I: fa30d18e83a87ee9e8487fbb5d632b26)`);
         }
       } else {
-        if (logalot72) {
+        if (logalot73) {
           console.log(`${lc2}[${currentFrameOrigin}] ${allTransferredOrCreatedFromGraftIbGibs.length} changes detected (I: fa30d18e83a87ee9e8487fbb5d632b26)`);
         }
-        if (logalot72) {
+        if (logalot73) {
           console.log(`${lc2} put all into localSpace (${localSpace.ib}) starting... (I: d5e0d9870e380b61e80c729660058826)`);
         }
         const { payload_Dnas, payload_NonDnas } = await putInSpace_dnasThenNonDnas({
           ibGibs: allTransferredOrCreatedFromGraftIbGibs,
           space: localSpace
         });
-        if (logalot72) {
+        if (logalot73) {
           console.log(`${lc2} put all into localSpace (${localSpace.ib}) complete. (I: d5e0d9870e380b61e80c729660058826)`);
         }
         const orphanedAddresses = await getAllOrphanedAddresses({
@@ -29207,12 +29436,12 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
           myTempSpace: localTempSpace
         });
         const { mapWithTjp_NoDna, mapWithTjp_YesDna, mapWithoutTjps } = splitPerTjpAndOrDna({ ibGibs: payload_NonDnas, filterPrimitives: true });
-        if (logalot72) {
+        if (logalot73) {
           console.log(`${lc2} register mapWithoutTjps starting... (I: 2b84d8f8dda85adde88696d8419bf726)`);
         }
         const nonTjpIbGibs = Object.values(mapWithoutTjps);
         for (const nontjp of nonTjpIbGibs) {
-          if (logalot72) {
+          if (logalot73) {
             console.log(`${lc2} registering ${getIbGibAddr({ ibGib: nontjp })} (I: 4647b4f42d27cffe0fbfce8846755826)`);
           }
           await metaspace.registerNewIbGib({
@@ -29220,10 +29449,10 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
             space: localSpace
           });
         }
-        if (logalot72) {
+        if (logalot73) {
           console.log(`${lc2} mapWithoutTjps complete. (I: 2b84d8f8dda85adde88696d8419bf726)`);
         }
-        if (logalot72) {
+        if (logalot73) {
           console.log(`${lc2} register mapWithTjp_NoDna starting... (I: 96e648e4db382499b8bfaa1b37c24826)`);
         }
         const timelinesByTjpAddr_NoDna = getTimelinesGroupedByTjp({ ibGibs: Object.values(mapWithTjp_NoDna) });
@@ -29237,10 +29466,10 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
             });
           }
         }
-        if (logalot72) {
+        if (logalot73) {
           console.log(`${lc2} register mapWithTjp_NoDna complete. (I: 96e648e4db382499b8bfaa1b37c24826)`);
         }
-        if (logalot72) {
+        if (logalot73) {
           console.log(`${lc2} register mapWithTjp_YesDna starting... (I: d54a820e9442dee4681f6228a6795926)`);
         }
         const timelinesByTjpAddr_YesDna = getTimelinesGroupedByTjp({ ibGibs: Object.values(mapWithTjp_YesDna) });
@@ -29256,7 +29485,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
             }
           }
         }
-        if (logalot72) {
+        if (logalot73) {
           console.log(`${lc2} register mapWithTjp_YesDna complete. (I: d54a820e9442dee4681f6228a6795926)`);
         }
       }
@@ -29264,7 +29493,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
       console.error(`${lc2} ${extractErrorMsg(error)}`);
       throw error;
     } finally {
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} complete.`);
       }
     }
@@ -29272,7 +29501,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
   async createCommitFrame({ sagaIbGib, errors, metaspace, mySpace }) {
     const lc2 = `[${this.createCommitFrame.name}]`;
     try {
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} starting... (I: 48fc57c023f80122135a284855757526)`);
       }
       const commitData = errors && errors.length > 0 ? {
@@ -29303,7 +29532,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
       console.error(`${lc2} ${extractErrorMsg(error)}`);
       throw error;
     } finally {
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} complete.`);
       }
     }
@@ -29311,7 +29540,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
   async handleCommitFrame({ sagaIbGib, mySpace, myTempSpace, metaspace }) {
     const lc2 = `${this.lc}[${this.handleCommitFrame.name}]`;
     try {
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} starting... (I: e179573bdd881202f8ba3168da1c3826)`);
       }
       if (!sagaIbGib.data) {
@@ -29344,7 +29573,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
           metaspace
         });
         console.error(`${lc2} NAG ERROR (NOT THROWN): implement cleanup logic, including add a cleanup method to the peer (E: 3a9a24befb98a981a88fbdbf52920e26)`);
-        if (logalot72) {
+        if (logalot73) {
           console.log(`${lc2} Peer committed. Finalizing saga locally. Saga Complete.`);
         }
         return { sagaComplete: true };
@@ -29360,7 +29589,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
       });
       return { frame: errorCommitFrame };
     } finally {
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} complete.`);
       }
     }
@@ -29369,7 +29598,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
   async createSyncMsgStone({ data, rel8ns, localSpace, metaspace }) {
     const lc2 = `${this.lc}[${this.createSyncMsgStone.name}]`;
     try {
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} starting... (I: 5f7f98e8ff980364f7191fcee4531e26)`);
       }
       const ib = await getSyncSagaMessageIb({ data });
@@ -29381,7 +29610,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
         uuid: true
         // we want the stone to have its own uniqueness
       });
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} Created stone: ${getIbGibAddr({ ibGib: stone })}`);
       }
       await metaspace.put({ ibGib: stone, space: localSpace });
@@ -29391,7 +29620,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
       console.error(`${lc2} ${extractErrorMsg(error)}`);
       throw error;
     } finally {
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} complete.`);
       }
     }
@@ -29399,7 +29628,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
   async getPayloadsForRequestedInfos({ deltaRequestAddrInfos, mySpace }) {
     const lc2 = `${this.lc}[${this.getPayloadsForRequestedInfos.name}]`;
     try {
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} starting... (I: 4fe13d0d80050f20a8b74ba80cee5826)`);
       }
       const outgoingPayloadIbGibsDomainGraph = {};
@@ -29434,7 +29663,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
       console.error(`${lc2} ${extractErrorMsg(error)}`);
       throw error;
     } finally {
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} complete.`);
       }
     }
@@ -29537,7 +29766,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
   async getStageAndPayloadFromFrame({ sagaFrame, space }) {
     const lc2 = `${this.lc}[${this.getStageAndPayloadFromFrame.name}]`;
     try {
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} starting... (I: fddc287bd4d55253dc50e519fd352226)`);
       }
       if (!sagaFrame.rel8ns) {
@@ -29566,7 +29795,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
       console.error(`${lc2} ${extractErrorMsg(error)}`);
       throw error;
     } finally {
-      if (logalot72) {
+      if (logalot73) {
         console.log(`${lc2} complete.`);
       }
     }
@@ -29626,7 +29855,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
 };
 
 // ../../libs/node-gib/dist/serve-gib/handlers/ws/sync-upgrade-handler-base.mjs
-var logalot73 = GLOBAL_LOG_A_LOT;
+var logalot74 = GLOBAL_LOG_A_LOT;
 var SyncUpgradeHandlerBase = class _SyncUpgradeHandlerBase extends ServeGibHandlerWithMetaspaceBase {
   lc = `[${_SyncUpgradeHandlerBase.name}]`;
   method = "GET";
@@ -29637,7 +29866,7 @@ var SyncUpgradeHandlerBase = class _SyncUpgradeHandlerBase extends ServeGibHandl
   async handleUpgrade(reqCtx, socket, head) {
     const lc_fn = `${this.lc}[handleUpgrade]`;
     try {
-      if (logalot73) {
+      if (logalot74) {
         console.log(`${lc_fn} starting...`);
       }
       if (!this.canHandleRoute(reqCtx)) {
@@ -29675,7 +29904,7 @@ var SyncUpgradeHandlerBase = class _SyncUpgradeHandlerBase extends ServeGibHandl
         // Resolved dynamically inside runtime turns
       });
       socket.on("error", (err) => {
-        if (logalot73) {
+        if (logalot74) {
           console.warn(`[SyncUpgradeHandlerBase] Socket error: ${extractErrorMsg(err)}`);
         }
         try {
@@ -29689,7 +29918,7 @@ var SyncUpgradeHandlerBase = class _SyncUpgradeHandlerBase extends ServeGibHandl
             try {
               socket.write(encodeTextFrame(data));
             } catch (e) {
-              if (logalot73) {
+              if (logalot74) {
                 console.warn(`[SyncUpgradeHandlerBase] failed to write message frame: ${extractErrorMsg(e)}`);
               }
             }
@@ -29706,7 +29935,7 @@ var SyncUpgradeHandlerBase = class _SyncUpgradeHandlerBase extends ServeGibHandl
                 frameText = decoder.nextFrame();
               }
             } catch (error) {
-              if (logalot73) {
+              if (logalot74) {
                 console.warn(`[SyncUpgradeHandlerBase] closing connection due to decoder error: ${extractErrorMsg(error)}`);
               }
               if (socket.writable) {
@@ -29843,8 +30072,8 @@ function getStandardServeGibHandlers(opts = {}) {
 // src/server/server.mts
 var __dirname = dirname(fileURLToPath(import.meta.url));
 var PORT = parseInt(process.env.PORT ?? "3000", 10);
-var DATA_DIR = process.env.DATA_DIR ?? join10(__dirname, "../../.data/ibgib-space");
-var CLIENT_DIR = join10(__dirname, "../client");
+var DATA_DIR = process.env.DATA_DIR ?? join11(__dirname, "../../.data/ibgib-space");
+var CLIENT_DIR = join11(__dirname, "../client");
 async function main() {
   const lc2 = "[space-gib server]";
   try {