@ibgib/space-gib 0.0.2 → 0.0.4

package/src/client/ui/shell/space-gib-shell-constants.mts

@@ -20,5 +20,3 @@ export const ID_BTN_CREATE_KEYSTONE = 'btn-create-keystone';
 // Other
 export const ID_CENTER_PANEL_CONTENT = 'center-panel-content';
 
-// Events
-export const EVENT_SHELL_READY = 'space-gib-shell-ready';

package/src/client/ui/shell/space-gib-shell-service.mts

@@ -9,11 +9,14 @@ import {
     ID_APP_ROOT, ID_HEADER_PANEL, ID_LEFT_PANEL, ID_CENTER_PANEL,
     ID_RIGHT_PANEL, ID_FOOTER_PANEL, ID_LEFT_RESIZER, ID_RIGHT_RESIZER,
     ID_FOOTER_RESIZER, ID_BTN_LEFT_PANEL_TOGGLE, ID_BTN_RIGHT_PANEL_TOGGLE,
-    ID_BTN_CREATE_KEYSTONE, ID_CENTER_PANEL_CONTENT,
-    EVENT_SHELL_READY
+    ID_BTN_CREATE_KEYSTONE, ID_CENTER_PANEL_CONTENT
 } from "./space-gib-shell-constants.mjs";
+import { EVENT_IBGIB_SHELL_READY, EVENT_IBGIB_UI_BUSY } from "@ibgib/web-gib/dist/ui/ui-constants.mjs";
+import { showFullscreenDialog, FullscreenDialogController } from "@ibgib/web-gib/dist/ui/ui-helpers.mjs";
 import { PanelState } from "./space-gib-shell-types.mjs";
 import { KeystoneCreatorComponentMeta } from "../../components/keystone-creator/keystone-creator.mjs";
+import { IdentityManagerComponentMeta } from "../../components/identity-manager/identity-manager.mjs";
+import { IdentityHeaderComponentMeta } from "../../components/identity-header/identity-header.mjs";
 
 export class SpaceGibShellService {
     private lc: string = `[SpaceGibShellService]`;
@@ -93,9 +96,66 @@ export class SpaceGibShellService {
             // Create Keystone Button
             const btnCreate = document.getElementById(ID_BTN_CREATE_KEYSTONE);
             if (btnCreate) {
-                btnCreate.addEventListener('click', () => this.showKeystoneCreator());
+                btnCreate.addEventListener('click', () => this.showIdentityManager());
             }
 
+            // Listen for global busy events from components
+            let currentBusyOverlay: FullscreenDialogController | undefined;
+            let isShellBusy = false;
+            window.addEventListener(EVENT_IBGIB_UI_BUSY, (ev: any) => {
+                const { isBusy, title, msg, animationEmoji } = ev.detail;
+                if (isBusy) {
+                    isShellBusy = true;
+                    if (currentBusyOverlay) {
+                        currentBusyOverlay.update({ title, msg, animationEmoji });
+                    } else {
+                        // we use a .then() only because we are within
+                        // synchronous code.
+                        showFullscreenDialog({
+                            title: title || 'Processing...',
+                            msg: msg || 'Please do not navigate away or refresh.',
+                            isBusy: true,
+                            animationEmoji
+                        }).then((overlay) => {
+                            if (isShellBusy) {
+                                currentBusyOverlay = overlay;
+                            } else {
+                                overlay.close();
+                            }
+                        }).catch((e) => {
+                            console.error(`${lc}[showFullscreenDialog] ${extractErrorMsg(e)}`)
+                        });
+                    }
+                } else {
+                    isShellBusy = false;
+                    if (currentBusyOverlay) {
+                        currentBusyOverlay.close();
+                        currentBusyOverlay = undefined;
+                    }
+                }
+            });
+
+        } catch (error) {
+            console.error(`${lc} ${extractErrorMsg(error)}`);
+        }
+    }
+
+    public async showIdentityManager() {
+        const lc = `${this.lc}[${this.showIdentityManager.name}]`;
+        try {
+            // 2. Instantiate and inject the component
+            const componentSvc = await getComponentSvc();
+            const component = await componentSvc.getComponentInstance({
+                path: 'ibgib-identity-manager',
+                ibGibAddr: ROOT_ADDR, // Virtual address for initial render
+                useRegExpPrefilter: true,
+            });
+
+            const centerPanel = document.getElementById(ID_CENTER_PANEL_CONTENT);
+            if (centerPanel && component) {
+                centerPanel.innerHTML = ''; // Clear hero section
+                centerPanel.appendChild(component as any);
+            }
         } catch (error) {
             console.error(`${lc} ${extractErrorMsg(error)}`);
         }
@@ -104,19 +164,15 @@ export class SpaceGibShellService {
     private async showKeystoneCreator() {
         const lc = `${this.lc}[${this.showKeystoneCreator.name}]`;
         try {
-            // 1. Expand side panels (as requested for visual transition)
-            if (this.leftPanelState === 'collapsed') { this.toggleLeftPanel(); }
-            if (this.rightPanelState === 'collapsed') { this.toggleRightPanel(); }
-
             // 2. Instantiate and inject the component
             const componentSvc = await getComponentSvc();
             const component = await componentSvc.getComponentInstance({
-                path: 'space-gib-keystone-creator',
+                path: 'ibgib-keystone-creator',
                 ibGibAddr: ROOT_ADDR, // Virtual address for initial render
                 useRegExpPrefilter: true,
             });
 
-            const centerPanel = document.getElementById(ID_CENTER_PANEL);
+            const centerPanel = document.getElementById(ID_CENTER_PANEL_CONTENT);
             if (centerPanel && component) {
                 centerPanel.innerHTML = ''; // Clear hero section
                 centerPanel.appendChild(component as any);
@@ -190,6 +246,8 @@ export class SpaceGibShellService {
         try {
             const componentsMeta: IbGibDynamicComponentMeta[] = [
                 new KeystoneCreatorComponentMeta(),
+                new IdentityManagerComponentMeta(),
+                new IdentityHeaderComponentMeta(),
             ];
             const componentSvc = await getComponentSvc();
             for (let componentMeta of componentsMeta) {
@@ -213,7 +271,21 @@ export class SpaceGibShellService {
                 statusSection.style.display = 'none';
             }
 
-            window.dispatchEvent(new CustomEvent(EVENT_SHELL_READY, { detail: { timestamp: Date.now() } }));
+            // Mount identity-header component in the header bar
+            const componentSvc = await getComponentSvc();
+            const identityHeader = await componentSvc.getComponentInstance({
+                path: 'ibgib-identity-header',
+                ibGibAddr: ROOT_ADDR,
+                useRegExpPrefilter: true,
+            });
+
+            const headerContainer = document.getElementById('identity-header-container');
+            if (headerContainer && identityHeader) {
+                headerContainer.innerHTML = '';
+                headerContainer.appendChild(identityHeader as any);
+            }
+
+            window.dispatchEvent(new CustomEvent(EVENT_IBGIB_SHELL_READY, { detail: { timestamp: Date.now() } }));
         } catch (error) {
             console.error(`${lc} ${extractErrorMsg(error)}`);
         }

package/src/common/keystone-policies.json

@@ -1,64 +1,61 @@
 {
-  "$schema": "../../../../libs/core-gib/src/keystone/keystone-policy.schema.json",
-  "behaviorProfiles": {
-    "standard": {
-      "size": 200,
-      "replenish": "top-up",
-      "selectSequentially": 2,
-      "selectRandomly": 2,
-      "targetBindingChars": 5
-    },
-    "high-security": {
-      "size": 2000,
-      "replenish": "replace-all",
-      "selectSequentially": 5,
-      "selectRandomly": 5,
-      "targetBindingChars": 16
-    },
-    "session-connect": {
-      "size": 20,
-      "replenish": "top-up",
-      "selectSequentially": 2,
-      "selectRandomly": 2,
-      "targetBindingChars": 3
-    }
+  "$schema": "../../../../libs/core-gib/dist/keystone/policy/schemas/keystone.medium.schema.json",
+  "metadata": {
+    "name": "Space-Gib Default Identity Policy",
+    "securityLevel": "medium"
   },
   "pools": {
     "sync": {
       "id": "sync",
-      "allowedVerbs": [
-        "sync"
-      ],
-      "behaviorProfile": "standard",
+      "allowedVerbs": ["sync"],
       "algo": "SHA-256",
-      "rounds": 1
+      "rounds": 1,
+      "behavior": {
+        "size": 200,
+        "replenish": "top-up",
+        "selectSequentially": 2,
+        "selectRandomly": 2,
+        "targetBindingCount": 5
+      }
     },
     "manage": {
       "id": "manage",
-      "allowedVerbs": [
-        "manage"
-      ],
-      "behaviorProfile": "high-security",
+      "allowedVerbs": ["manage"],
       "algo": "SHA-512",
-      "rounds": 10
+      "rounds": 10,
+      "behavior": {
+        "size": 2000,
+        "replenish": "replace-all",
+        "selectSequentially": 5,
+        "selectRandomly": 5,
+        "targetBindingCount": 16
+      }
     },
     "revoke": {
       "id": "revoke",
-      "allowedVerbs": [
-        "revoke"
-      ],
-      "behaviorProfile": "high-security",
+      "allowedVerbs": ["revoke"],
       "algo": "SHA-512",
-      "rounds": 10
+      "rounds": 10,
+      "behavior": {
+        "size": 2000,
+        "replenish": "delete-all",
+        "selectSequentially": 5,
+        "selectRandomly": 5,
+        "targetBindingCount": 16
+      }
     },
     "connect": {
       "id": "connect",
-      "allowedVerbs": [
-        "connect"
-      ],
-      "behaviorProfile": "session-connect",
+      "allowedVerbs": ["connect"],
       "algo": "SHA-256",
-      "rounds": 1
+      "rounds": 1,
+      "behavior": {
+        "size": 20,
+        "replenish": "top-up",
+        "selectSequentially": 2,
+        "selectRandomly": 2,
+        "targetBindingCount": 3
+      }
     }
   }
 }

package/src/common/keystone-policies.mts

@@ -15,8 +15,8 @@ import {
     SESSION_KEYSTONE_POLICY as CORE_SESSION_KEYSTONE_POLICY,
     getConnectChallenge as coreGetConnectChallenge,
     checkConnectSolution as coreCheckConnectSolution
-} from '@ibgib/core-gib/dist/sync/sync-peer/sync-peer-websocket-receiver/sync-websocket-peer-helpers.mjs';
-import { createPoolConfigFromJson, KeystonePoolTemplate, KeystoneBehaviorProfileTemplate } from '@ibgib/core-gib/dist/keystone/keystone-config-builder.mjs';
+} from '@ibgib/core-gib/dist/sync/sync-peer/sync-peer-websocket/sync-peer-websocket-receiver/sync-websocket-peer-helpers.mjs';
+import { createPoolConfigFromJson, KeystonePoolTemplate } from '@ibgib/core-gib/dist/keystone/keystone-config-builder.mjs';
 import { KeystonePoolConfig } from '@ibgib/core-gib/dist/keystone/keystone-types.mjs';
 
 import rawPolicies from './keystone-policies.json' assert { type: 'json' };
@@ -25,8 +25,7 @@ import rawPolicies from './keystone-policies.json' assert { type: 'json' };
 // 1. JSON Configuration Mapping & Hybrid Fallbacks
 // ---------------------------------------------------------------------------
 
-export const behaviorProfiles = rawPolicies.behaviorProfiles as Record<string, KeystoneBehaviorProfileTemplate>;
-export const pools = rawPolicies.pools as Record<string, KeystonePoolTemplate>;
+export const pools = rawPolicies.pools as unknown as Record<string, KeystonePoolTemplate>;
 
 /**
  * Resolves a pool config by key from the JSON policy file, with fallback behavior.
@@ -38,7 +37,6 @@ export function getSpaceGibPoolConfig(poolKey: string, salt: string): KeystonePo
     }
     return createPoolConfigFromJson({
         template,
-        behaviorProfiles,
         salt
     });
 }
@@ -69,7 +67,7 @@ export const SESSION_KEYSTONE_POLICY = {
          * We want more for this, with future implementations we will not have
          * resource exhaustion.
          */
-        TARGET_BINDING_CHARS: 3,
+        TARGET_BINDING_COUNT: 3,
     },
 
     /**

package/src/server/path-helper.respec.mts

@@ -1,94 +1,99 @@
-import { respecfully, iReckon, ifWe } from '@ibgib/helper-gib/dist/respec-gib/respec-gib.mjs';
-import { isSafePath, isValidStaticPath, API_PATHS, getPathParams, MAX_PATH_LENGTH, validateAddressSegment } from './path-helper.mjs';
-
-const sir = `[${import.meta.url}]`;
-
-await respecfully(sir, 'Path Helper Validation', async () => {
-
-    await respecfully(sir, 'isSafePath', async () => {
-        await ifWe(sir, 'valid simple paths', async () => {
-            iReckon(sir, isSafePath('/api/health')).isGonnaBeTrue();
-            iReckon(sir, isSafePath('/index.html')).isGonnaBeTrue();
-        });
-
-        await ifWe(sir, 'too long paths', async () => {
-            const longPath = '/'.repeat(MAX_PATH_LENGTH + 1);
-            iReckon(sir, isSafePath(longPath)).isGonnaBeFalse();
-        });
-
-        await ifWe(sir, 'directory traversal attempts', async () => {
-            iReckon(sir, isSafePath('/../etc/passwd')).isGonnaBeFalse();
-            iReckon(sir, isSafePath('/api/../../etc/passwd')).isGonnaBeFalse();
-        });
-
-        await ifWe(sir, 'null bytes', async () => {
-            iReckon(sir, isSafePath('/api/health\0')).isGonnaBeFalse();
-        });
-
-        await ifWe(sir, 'redundant slashes', async () => {
-            iReckon(sir, isSafePath('/api//health')).isGonnaBeFalse();
-        });
-
-        await ifWe(sir, 'dot-file access', async () => {
-            iReckon(sir, isSafePath('/.env')).isGonnaBeFalse();
-            iReckon(sir, isSafePath('/scripts/.hidden')).isGonnaBeFalse();
-            iReckon(sir, isSafePath('/.git/config')).isGonnaBeFalse();
-        });
-    });
-
-    await respecfully(sir, 'validateAddressSegment', async () => {
-        await ifWe(sir, 'valid encoded addresses', async () => {
-            const validGib = 'a'.repeat(64);
-            iReckon(sir, validateAddressSegment(`someib%5E${validGib}`)).isGonnaBeTrue();
-            // gib with dots (common in sha256.sha256)
-            const dotGib = `${validGib}.${validGib}`;
-            iReckon(sir, validateAddressSegment(`someib%5E${dotGib}`)).isGonnaBeTrue();
-        });
-
-        await ifWe(sir, 'invalid encoded addresses', async () => {
-            iReckon(sir, validateAddressSegment('no_delim')).isGonnaBeFalse();
-            iReckon(sir, validateAddressSegment('%5Estarts_with_delim')).isGonnaBeFalse();
-            iReckon(sir, validateAddressSegment('too%5Emany%5Edelims')).isGonnaBeFalse();
-            iReckon(sir, validateAddressSegment('too%5Emany..dots')).isGonnaBeFalse();
-            iReckon(sir, validateAddressSegment('invalid_chars_!%5Eabc')).isGonnaBeFalse();
-        });
-    });
-
-    await respecfully(sir, 'API_PATHS Regexes', async () => {
-        await ifWe(sir, 'HEALTH regex', async () => {
-            iReckon(sir, API_PATHS.HEALTH.test('/api/health')).isGonnaBeTrue();
-            iReckon(sir, API_PATHS.HEALTH.test('/api/health/')).isGonnaBeTrue();
-            iReckon(sir, API_PATHS.HEALTH.test('/api/health/more')).isGonnaBeFalse();
-        });
-
-        await ifWe(sir, 'IBGIB_ADDR regex', async () => {
-            // valid encoded addr: someib%5Esomegib
-            const addr = '/api/ibgib/someib%5Esomegib';
-            iReckon(sir, API_PATHS.IBGIB_ADDR.test(addr)).isGonnaBeTrue();
-            
-            const params = getPathParams(addr, API_PATHS.IBGIB_ADDR);
-            iReckon(sir, params?.[0]).isGonnaBe('someib%5Esomegib');
-        });
-
-        await ifWe(sir, 'IBGIB_GRAPH regex', async () => {
-            const path = '/api/ibgib/graph/someib%5Esomegib';
-            iReckon(sir, API_PATHS.IBGIB_GRAPH.test(path)).isGonnaBeTrue();
-            
-            const params = getPathParams(path, API_PATHS.IBGIB_GRAPH);
-            iReckon(sir, params?.[0]).isGonnaBe('someib%5Esomegib');
-        });
-
-        await ifWe(sir, 'KEYSTONE regex', async () => {
-            iReckon(sir, API_PATHS.KEYSTONE.test('/api/keystone')).isGonnaBeTrue();
-            iReckon(sir, API_PATHS.KEYSTONE.test('/api/keystone/')).isGonnaBeTrue();
-        });
-
-        await ifWe(sir, 'KEYSTONE_EVOLVE regex', async () => {
-            const path = '/api/keystone/evolve/someib%5Esomegib';
-            iReckon(sir, API_PATHS.KEYSTONE_EVOLVE.test(path)).isGonnaBeTrue();
-            
-            const params = getPathParams(path, API_PATHS.KEYSTONE_EVOLVE);
-            iReckon(sir, params?.[0]).isGonnaBe('someib%5Esomegib');
-        });
-    });
-});
+// import { respecfully, iReckon, ifWe } from '@ibgib/helper-gib/dist/respec-gib/respec-gib.mjs';
+// import {
+//     isSafePath, isValidStaticPath,
+//     // API_PATHS, getPathParams, MAX_PATH_LENGTH,
+//     validateAddressSegment
+// } from './path-helper.mjs';
+// import { MAX_PATH_LENGTH } from './path-constants.mts';
+
+// const sir = `[${import.meta.url}]`;
+
+// await respecfully(sir, 'Path Helper Validation', async () => {
+
+//     await respecfully(sir, 'isSafePath', async () => {
+//         await ifWe(sir, 'valid simple paths', async () => {
+//             iReckon(sir, isSafePath('/api/health')).isGonnaBeTrue();
+//             iReckon(sir, isSafePath('/index.html')).isGonnaBeTrue();
+//         });
+
+//         await ifWe(sir, 'too long paths', async () => {
+//             const longPath = '/'.repeat(MAX_PATH_LENGTH + 1);
+//             iReckon(sir, isSafePath(longPath)).isGonnaBeFalse();
+//         });
+
+//         await ifWe(sir, 'directory traversal attempts', async () => {
+//             iReckon(sir, isSafePath('/../etc/passwd')).isGonnaBeFalse();
+//             iReckon(sir, isSafePath('/api/../../etc/passwd')).isGonnaBeFalse();
+//         });
+
+//         await ifWe(sir, 'null bytes', async () => {
+//             iReckon(sir, isSafePath('/api/health\0')).isGonnaBeFalse();
+//         });
+
+//         await ifWe(sir, 'redundant slashes', async () => {
+//             iReckon(sir, isSafePath('/api//health')).isGonnaBeFalse();
+//         });
+
+//         await ifWe(sir, 'dot-file access', async () => {
+//             iReckon(sir, isSafePath('/.env')).isGonnaBeFalse();
+//             iReckon(sir, isSafePath('/scripts/.hidden')).isGonnaBeFalse();
+//             iReckon(sir, isSafePath('/.git/config')).isGonnaBeFalse();
+//         });
+//     });
+
+//     await respecfully(sir, 'validateAddressSegment', async () => {
+//         await ifWe(sir, 'valid encoded addresses', async () => {
+//             const validGib = 'a'.repeat(64);
+//             iReckon(sir, validateAddressSegment(`someib%5E${validGib}`)).isGonnaBeTrue();
+//             // gib with dots (common in sha256.sha256)
+//             const dotGib = `${validGib}.${validGib}`;
+//             iReckon(sir, validateAddressSegment(`someib%5E${dotGib}`)).isGonnaBeTrue();
+//         });
+
+//         await ifWe(sir, 'invalid encoded addresses', async () => {
+//             iReckon(sir, validateAddressSegment('no_delim')).isGonnaBeFalse();
+//             iReckon(sir, validateAddressSegment('%5Estarts_with_delim')).isGonnaBeFalse();
+//             iReckon(sir, validateAddressSegment('too%5Emany%5Edelims')).isGonnaBeFalse();
+//             iReckon(sir, validateAddressSegment('too%5Emany..dots')).isGonnaBeFalse();
+//             iReckon(sir, validateAddressSegment('invalid_chars_!%5Eabc')).isGonnaBeFalse();
+//         });
+//     });
+
+//     await respecfully(sir, 'API_PATHS Regexes', async () => {
+//         await ifWe(sir, 'HEALTH regex', async () => {
+//             iReckon(sir, API_PATHS.HEALTH.test('/api/health')).isGonnaBeTrue();
+//             iReckon(sir, API_PATHS.HEALTH.test('/api/health/')).isGonnaBeTrue();
+//             iReckon(sir, API_PATHS.HEALTH.test('/api/health/more')).isGonnaBeFalse();
+//         });
+
+//         await ifWe(sir, 'IBGIB_ADDR regex', async () => {
+//             // valid encoded addr: someib%5Esomegib
+//             const addr = '/api/ibgib/someib%5Esomegib';
+//             iReckon(sir, API_PATHS.IBGIB_ADDR.test(addr)).isGonnaBeTrue();
+
+//             const params = getPathParams(addr, API_PATHS.IBGIB_ADDR);
+//             iReckon(sir, params?.[0]).isGonnaBe('someib%5Esomegib');
+//         });
+
+//         await ifWe(sir, 'IBGIB_GRAPH regex', async () => {
+//             const path = '/api/ibgib/graph/someib%5Esomegib';
+//             iReckon(sir, API_PATHS.IBGIB_GRAPH.test(path)).isGonnaBeTrue();
+
+//             const params = getPathParams(path, API_PATHS.IBGIB_GRAPH);
+//             iReckon(sir, params?.[0]).isGonnaBe('someib%5Esomegib');
+//         });
+
+//         await ifWe(sir, 'KEYSTONE regex', async () => {
+//             iReckon(sir, API_PATHS.KEYSTONE.test('/api/keystone')).isGonnaBeTrue();
+//             iReckon(sir, API_PATHS.KEYSTONE.test('/api/keystone/')).isGonnaBeTrue();
+//         });
+
+//         await ifWe(sir, 'KEYSTONE_EVOLVE regex', async () => {
+//             const path = '/api/keystone/evolve/someib%5Esomegib';
+//             iReckon(sir, API_PATHS.KEYSTONE_EVOLVE.test(path)).isGonnaBeTrue();
+
+//             const params = getPathParams(path, API_PATHS.KEYSTONE_EVOLVE);
+//             iReckon(sir, params?.[0]).isGonnaBe('someib%5Esomegib');
+//         });
+//     });
+// });

package/src/server/serve-gib/README.md

@@ -32,3 +32,12 @@ The `RouteInfo` object provides an enriched view of the incoming request:
 The `ServeGib_V1` executes handlers in the order they are provided in the `handlers` array. The first handler to return a non-undefined `ResponseResult` wins.
 *   **Tip**: Order specific routes (like `/api/ibgib/graph`) before more general ones (like `/api/ibgib`).
 *   **Fallback**: The `ErrorHandler` is used as a final catch-all for 404s and fatal errors.
+
+## Docker / Server Resilience Note
+When deploying or running this service (or any downstream applications) within a Docker Compose environment, ensure that the `docker-compose.yml` configuration specifies a restart policy such as:
+```yaml
+services:
+  space-gib:
+    restart: unless-stopped
+```
+This ensures that the container auto-recovers and restarts if the node process crashes due to unhandled events (such as raw TCP socket `ECONNRESET` exceptions from client refreshes).

package/src/server/serve-gib/handlers/api/keystone/keystone-evolve.handler.mts

@@ -13,7 +13,7 @@
 import { extractErrorMsg } from '@ibgib/helper-gib/dist/helpers/utils-helper.mjs';
 import { getIbGibAddr } from '@ibgib/ts-gib/dist/helper.mjs';
 import { IbGib_V1 } from '@ibgib/ts-gib/dist/V1/types.mjs';
-import { validateAndRegisterEvolveKeystone } from '@ibgib/core-gib/dist/sync/sync-peer/sync-peer-websocket-receiver/sync-websocket-peer-helpers.mjs';
+import { validateAndRegisterEvolveKeystone } from '@ibgib/core-gib/dist/sync/sync-peer/sync-peer-websocket/sync-peer-websocket-receiver/sync-websocket-peer-helpers.mjs';
 import { KeystoneIbGib_V1 } from '@ibgib/core-gib/dist/keystone/keystone-types.mjs';
 
 import { GLOBAL_LOG_A_LOT } from '../../../constants.mjs';

package/src/server/serve-gib/handlers/api/keystone/keystone-genesis.handler.mts

@@ -133,7 +133,7 @@ export class KeystoneGenesisHandler extends ServeGibHandlerBase<undefined, undef
             await metaspace.registerNewIbGib({ ibGib: keystoneIbGib, space });
 
             console.log(`${lc} domain created and keystone persisted: ${addr}`);
-            if (logalot) { console.log(`${lc} keystoneIbGib: ${pretty(keystoneIbGib)} (I: d598c6ff7a48997d585b84c19c464826)`); }
+            // if (logalot) { console.log(`${lc} keystoneIbGib: ${pretty(keystoneIbGib)} (I: d598c6ff7a48997d585b84c19c464826)`); }
             return this.ok({ success: true, addr }, 201);
         } catch (error) {
             const emsg = extractErrorMsg(error);

package/src/server/serve-gib/handlers/api/keystone/keystone-get.respec.mts

@@ -38,7 +38,7 @@ await respecfully(sir, 'Keystone GET Integration', async () => {
     }
     mkdirSync(testDataDir, { recursive: true });
 
-    await ifWeMight(sir, 'retrieve a keystone chain via GET /api/keystone/:addr', async () => {
+    await ifWe(sir, 'retrieve a keystone chain via GET /api/keystone/:addr', async () => {
         const keystoneService = new KeystoneService_V1();
         const config = createStandardPoolConfig({ id: POOL_ID_DEFAULT, salt: POOL_ID_DEFAULT });
 
@@ -67,8 +67,8 @@ await respecfully(sir, 'Keystone GET Integration', async () => {
             method: 'POST',
             headers: { 'ibgib-domain': addr, 'content-type': 'application/json' },
             on: (event: string, cb: any) => {
-                if (event === 'data') cb(Buffer.from(JSON.stringify({ ibGibs: [genesis] })));
-                if (event === 'end') cb();
+                if (event === 'data') { cb(Buffer.from(JSON.stringify({ ibGibs: [genesis] }))); }
+                if (event === 'end') { cb(); }
             }
         };
         const postRes: any = {
@@ -83,7 +83,7 @@ await respecfully(sir, 'Keystone GET Integration', async () => {
             method: 'GET',
             headers: { 'ibgib-domain': addr },
             on: (event: string, cb: any) => {
-                if (event === 'end') cb();
+                if (event === 'end') { cb(); }
             }
         };
 

package/src/server/serve-gib/handlers/api/keystone/keystone-post.handler.mts

@@ -3,7 +3,7 @@
  */
 
 import { extractErrorMsg } from '@ibgib/helper-gib/dist/helpers/utils-helper.mjs';
-import { validateAndRegisterPostKeystones } from '@ibgib/core-gib/dist/sync/sync-peer/sync-peer-websocket-receiver/sync-websocket-peer-helpers.mjs';
+import { validateAndRegisterPostKeystones } from '@ibgib/core-gib/dist/sync/sync-peer/sync-peer-websocket/sync-peer-websocket-receiver/sync-websocket-peer-helpers.mjs';
 
 import { GLOBAL_LOG_A_LOT } from '../../../constants.mjs';
 import { ServeGibHandlerBase } from '../../handler-base.mjs';

package/src/server/serve-gib/handlers/ws/sync-upgrade-handler-base.mts

@@ -11,8 +11,8 @@ import { extractErrorMsg } from '@ibgib/helper-gib/dist/helpers/utils-helper.mjs
 import { getIbGibAddr, getIbAndGib } from '@ibgib/ts-gib/dist/helper.mjs';
 import { validateIbGibAddr } from '@ibgib/ts-gib/dist/V1/validate-helper.mjs';
 import { parseKeystoneIb } from '@ibgib/core-gib/dist/keystone/keystone-helpers.mjs';
-import { SyncPeerWebSocketReceiver_V1, IWebSocketWrapper } from '@ibgib/core-gib/dist/sync/sync-peer/sync-peer-websocket-receiver/sync-peer-websocket-receiver-v1.mjs';
-import { validateUpfrontConnect } from '@ibgib/core-gib/dist/sync/sync-peer/sync-peer-websocket-receiver/sync-websocket-peer-helpers.mjs';
+import { SyncPeerWebSocketReceiver_V1, IWebSocketWrapper } from '@ibgib/core-gib/dist/sync/sync-peer/sync-peer-websocket/sync-peer-websocket-receiver/sync-peer-websocket-receiver-v1.mjs';
+import { validateUpfrontConnect } from '@ibgib/core-gib/dist/sync/sync-peer/sync-peer-websocket/sync-peer-websocket-receiver/sync-websocket-peer-helpers.mjs';
 import { SyncSagaCoordinator } from '@ibgib/core-gib/dist/sync/sync-saga-coordinator.mjs';
 
 import { GLOBAL_LOG_A_LOT } from '../../constants.mjs';
@@ -94,10 +94,26 @@ export abstract class SyncUpgradeHandlerBase extends ServeGibHandlerWithMetaspac
                 sagaId: undefined, // Resolved dynamically inside runtime turns
             });
 
+            // Handle raw socket errors to prevent unhandled 'error' crash (e.g. ECONNRESET)
+            socket.on('error', (err) => {
+                if (logalot) { console.warn(`[SyncUpgradeHandlerBase] Socket error: ${extractErrorMsg(err)}`); }
+                try {
+                    socket.destroy();
+                } catch (e) {
+                    // ignore
+                }
+            });
+
             // 6. Map standard Node.js Socket to platform-agnostic IWebSocketWrapper
             const socketWrapper: IWebSocketWrapper = {
                 send(data: string): void {
-                    socket.write(encodeTextFrame(data));
+                    if (socket.writable) {
+                        try {
+                            socket.write(encodeTextFrame(data));
+                        } catch (e) {
+                            if (logalot) { console.warn(`[SyncUpgradeHandlerBase] failed to write message frame: ${extractErrorMsg(e)}`); }
+                        }
+                    }
                 },
                 onMessage(callback: (data: string) => void): void {
                     const decoder = new WebSocketFrameDecoder();
@@ -111,13 +127,29 @@ export abstract class SyncUpgradeHandlerBase extends ServeGibHandlerWithMetaspac
                             }
                         } catch (error) {
                             if (logalot) { console.warn(`[SyncUpgradeHandlerBase] closing connection due to decoder error: ${extractErrorMsg(error)}`); }
-                            socket.write(encodeCloseFrame());
+                            if (socket.writable) {
+                                try {
+                                    socket.write(encodeCloseFrame());
+                                } catch (e) {
+                                    // ignore
+                                }
+                            }
                             socket.end();
                         }
                     });
                 },
                 onClose(callback: () => void): void {
                     socket.on('close', callback);
+                },
+                close(): void {
+                    if (socket.writable) {
+                        try {
+                            socket.write(encodeCloseFrame());
+                        } catch (e) {
+                            // ignore
+                        }
+                    }
+                    socket.end();
                 }
             };
 
@@ -134,7 +166,7 @@ export abstract class SyncUpgradeHandlerBase extends ServeGibHandlerWithMetaspac
 
     protected override async parseParamsImpl(reqCtx: RequestContext<ParamsWithDomain>): Promise<ParamsWithDomain | undefined> {
         const match = reqCtx.pathname.match(this.regex);
-        if (!match) return undefined;
+        if (!match) { return undefined; }
         const domainIb = decodeURIComponent(match[1]);
         const domainGib = decodeURIComponent(match[2]);
         const domainAddr = getIbGibAddr({ ib: domainIb, gib: domainGib });