@ibgib/space-gib 0.0.4 → 0.0.6

package/dist/server/server.mjs

@@ -17693,6 +17693,7 @@ var KeystoneVerb = {
 };
 var KEYSTONE_VERB_VALID_VALUES = Object.values(KeystoneVerb);
 var POOL_ID_REVOKE = KEYSTONE_VERB_REVOKE;
+var POOL_ID_MANAGE = KEYSTONE_VERB_MANAGE;
 var POOL_ID_CONNECT = KEYSTONE_VERB_CONNECT;
 var POOL_ID_SYNC = KEYSTONE_VERB_SYNC;
 var KEYSTONE_CONFIG_DEFAULT_SIZE = 200;
@@ -17940,6 +17941,14 @@ async function parseKeystoneIb({ ib }) {
     }
   }
 }
+async function validateKeystoneIb({ ib }) {
+  try {
+    await parseKeystoneIb({ ib });
+    return true;
+  } catch {
+    return false;
+  }
+}
 async function getDeterministicRequirements({ pool, requiredChallengeIds, targetAddr }) {
   const behavior = pool.config.behavior;
   const mandatory = /* @__PURE__ */ new Set();
@@ -18267,6 +18276,10 @@ async function validateGenesisKeystone({ keystoneIbGib }) {
     }
     const errors = [];
     const { data, rel8ns } = keystoneIbGib;
+    const isValidIb = await validateKeystoneIb({ ib: keystoneIbGib.ib });
+    if (!isValidIb) {
+      errors.push(`${lc2} invalid keystone ib (${keystoneIbGib.ib}). (E: ad7a88bc38c290a184dfbd42be48f526)`);
+    }
     const metadataErrors = validateKeystoneMetadata({ data });
     metadataErrors.forEach((x) => errors.push(x));
     if (data.proofs && data.proofs.length > 0) {
@@ -18292,6 +18305,54 @@ async function validateGenesisKeystone({ keystoneIbGib }) {
     }
   }
 }
+function isDelegatesChanged({ currDelegates, prevDelegates }) {
+  const curr = currDelegates || {};
+  const prev = prevDelegates || {};
+  const currKeys = Object.keys(curr);
+  const prevKeys = Object.keys(prev);
+  if (currKeys.length !== prevKeys.length) {
+    return true;
+  }
+  for (const key of currKeys) {
+    const currVal = curr[key];
+    const prevVal = prev[key];
+    if (!prevVal) {
+      return true;
+    }
+    if (currVal.delegateTjpAddr !== prevVal.delegateTjpAddr || currVal.delegateAddr !== prevVal.delegateAddr || currVal.thisAddr !== prevVal.thisAddr) {
+      return true;
+    }
+  }
+  return false;
+}
+async function validateDelegates({ currDelegates, prevIbGib, lc: lc2, errors }) {
+  const currKeys = Object.keys(currDelegates);
+  const prevAddr = getIbGibAddr({ ibGib: prevIbGib });
+  for (const key of currKeys) {
+    const info = currDelegates[key];
+    if (key !== info.delegateTjpAddr) {
+      errors.push(`${lc2} Invalid delegate mapping: Key '${key}' does not match delegateTjpAddr '${info.delegateTjpAddr}'. (E: 9c8da8bc38c290a184dfbd42be48f526)`);
+    }
+    const [parsedDelegateTjp, parsedDelegate, parsedThis] = await Promise.all([
+      validateKeystoneIb({ ib: info.delegateTjpAddr.split("^")[0] }),
+      validateKeystoneIb({ ib: info.delegateAddr.split("^")[0] }),
+      validateKeystoneIb({ ib: info.thisAddr.split("^")[0] })
+    ]);
+    if (!parsedDelegateTjp) {
+      errors.push(`${lc2} Delegate delegateTjpAddr '${info.delegateTjpAddr}' is not a valid keystone address. (E: 10d8a8bc38c290a184dfbd42be48f526)`);
+    }
+    if (!parsedDelegate) {
+      errors.push(`${lc2} Delegate delegateAddr '${info.delegateAddr}' is not a valid keystone address. (E: 20d8a8bc38c290a184dfbd42be48f526)`);
+    }
+    if (!parsedThis) {
+      errors.push(`${lc2} Delegate thisAddr '${info.thisAddr}' is not a valid keystone address. (E: 30d8a8bc38c290a184dfbd42be48f526)`);
+    }
+    const isHistoricalParent = info.thisAddr === prevAddr || (prevIbGib.rel8ns?.past || []).includes(info.thisAddr);
+    if (!isHistoricalParent) {
+      errors.push(`${lc2} Delegate thisAddr '${info.thisAddr}' is not a valid historical address in the parent keystone timeline. (E: 40d8a8bc38c290a184dfbd42be48f526)`);
+    }
+  }
+}
 async function validateKeystoneTransition({ currentIbGib, prevIbGib }) {
   const lc2 = `[${validateKeystoneTransition.name}]`;
   const errors = [];
@@ -18308,23 +18369,37 @@ async function validateKeystoneTransition({ currentIbGib, prevIbGib }) {
     }
     const currData = currentIbGib.data;
     const prevData = prevIbGib.data;
+    const isValidIb = await validateKeystoneIb({ ib: currentIbGib.ib });
+    if (!isValidIb) {
+      errors.push(`${lc2} invalid keystone ib (${currentIbGib.ib}). (E: a98dc8bc38c290a184dfbd42be48f526)`);
+    }
     const metadataErrors = validateKeystoneMetadata({ data: currData });
     metadataErrors.forEach((x) => errors.push(x));
+    const currDelegates = currData.delegates || {};
+    const prevDelegates = prevData.delegates || {};
+    const delegatesChanged = isDelegatesChanged({ currDelegates, prevDelegates });
+    if (delegatesChanged) {
+      const hasManageProof = currData.proofs?.some((proof) => proof.claim?.verb === KEYSTONE_VERB_MANAGE);
+      if (!hasManageProof) {
+        errors.push(`${lc2} Policy Violation: Delegates map was mutated but no proof for manage verb ('${KEYSTONE_VERB_MANAGE}') is present. (E: 819fa8cb28c9b60e68994511a5825)`);
+      }
+    }
+    await validateDelegates({ currDelegates, prevIbGib, lc: lc2, errors });
     const currDataN = currData.n ?? -2;
     const prevDataN = prevData.n ?? -2;
     if (currDataN < 0) {
-      errors.push("invalid keystone.currData.n is undefined or null.");
+      errors.push("invalid keystone.currData.n is undefined or null. (E: 9fbe38704b68829d18ea1d0940d0aa26)");
     }
     if (prevDataN < 0) {
-      errors.push("invalid keystone.prevData.n is undefined or null.");
+      errors.push("invalid keystone.prevData.n is undefined or null. (E: 6dc5aa9c87017db6080ed4268b07af26)");
     }
     ;
     if (currDataN !== prevDataN + 1) {
-      errors.push(`keystone data.n values are not sequential. prevData.n: ${prevDataN}, currData.n: ${currDataN}. `);
+      errors.push(`keystone data.n values are not sequential. prevData.n: ${prevDataN}, currData.n: ${currDataN}. (E: 5ae12809f2c67216d38d8ba8d6c42826)`);
     }
     for (const proof of currData.proofs) {
       if (proof.solutions.length === 0) {
-        errors.push(`Proof ${proof.id || "unknown"} has no solutions.`);
+        errors.push(`Proof ${proof.id || "unknown"} has no solutions. (E: e2b4683ce0ce30f798ec77841e88c826)`);
         continue;
       }
       const poolId = proof.solutions[0].poolId;
@@ -18432,6 +18507,9 @@ async function evolvePersistAndRegisterKeystone({ prevIbGib, newData, metaspace,
     if (prevData.checkpointDetails) {
       dataToRemove.checkpointDetails = {};
     }
+    if (prevData.delegates) {
+      dataToRemove.delegates = "remove";
+    }
     if (Object.keys(dataToRemove).length === 0) {
       dataToRemove = void 0;
     }
@@ -18694,7 +18772,7 @@ var KeystoneService_V1 = class _KeystoneService_V1 {
    *
    * todo: wrap this and other entire keystone sign/method implementations in locks on the keystone's tjpGib.
    */
-  async sign({ latestKeystone, masterSecret, claim, poolId, poolFilter, requiredChallengeIds = [], frameDetails, metaspace, space }) {
+  async sign({ latestKeystone, masterSecret, claim, poolId, poolFilter, requiredChallengeIds = [], frameDetails, metaspace, space, dataToPatch }) {
     const lc2 = `${this.lc}[${this.sign.name}]`;
     try {
       if (logalot41) {
@@ -18743,7 +18821,9 @@ var KeystoneService_V1 = class _KeystoneService_V1 {
         challengePools: nextPools,
         proofs: [proof],
         frameDetails,
-        checkpointDetails
+        checkpointDetails,
+        ...prevData.delegates ? { delegates: prevData.delegates } : {},
+        ...dataToPatch
       };
       const resKeystone = await evolvePersistAndRegisterKeystone({
         prevIbGib: latestKeystone,
@@ -18776,6 +18856,157 @@ var KeystoneService_V1 = class _KeystoneService_V1 {
     const errors = await validateKeystoneTransition({ currentIbGib, prevIbGib });
     return errors;
   }
+  /**
+   * Registers a delegate keystone on the parent keystone by appending its information
+   * to the parent's `delegates` map. This operation is signed using the parent's `manage` pool.
+   * Validates the delegate keystone's entire graph/timeline before registering.
+   */
+  async registerDelegate({ parentKeystone, delegateKeystone, masterSecret, frameDetails, metaspace, space, allowedVerbs }) {
+    const lc2 = `${this.lc}[${this.registerDelegate.name}]`;
+    try {
+      if (logalot41) {
+        console.log(`${lc2} starting...`);
+      }
+      const validationErrors = await validateKeystoneGraph({
+        keystoneIbGib: delegateKeystone,
+        getLatest: true,
+        invalidIfMoreRecentKeystoneFoundInSpace: false,
+        space
+      });
+      if (validationErrors.length > 0) {
+        throw new Error(`Delegate keystone validation failed: ${validationErrors.join(", ")} (E: 88fa8ab28c9b60e68994511a5825)`);
+      }
+      const prevData = parentKeystone.data;
+      const hasManagePool = prevData.challengePools.some((p) => p.id === POOL_ID_MANAGE);
+      if (!hasManagePool) {
+        throw new Error(`Parent keystone does not support delegation. Manage pool is required. (E: 818fa8ab28c9b60e68994511a5825)`);
+      }
+      const delegateTjpAddr = getTjpAddr({ ibGib: delegateKeystone });
+      if (!delegateTjpAddr) {
+        throw new Error(`(UNEXPECTED) delegateTjpAddr falsy? (E: d4d6e8ad03c8925d4838b9a87b8f2826)`);
+      }
+      const claim = {
+        target: delegateTjpAddr,
+        verb: KEYSTONE_VERB_MANAGE
+      };
+      const currentDelegates = prevData.delegates ? { ...prevData.delegates } : {};
+      currentDelegates[delegateTjpAddr] = {
+        delegateTjpAddr,
+        delegateAddr: getIbGibAddr({ ibGib: delegateKeystone }),
+        thisAddr: getIbGibAddr({ ibGib: parentKeystone }),
+        // allowedVerbs: allowedVerbs ?? [KEYSTONE_VERB_SYNC], // NO! We cannot default to sync just to get things to work right now
+        allowedVerbs
+      };
+      const evolved = await this.sign({
+        latestKeystone: parentKeystone,
+        masterSecret,
+        claim,
+        poolId: POOL_ID_MANAGE,
+        frameDetails,
+        metaspace,
+        space,
+        dataToPatch: {
+          delegates: currentDelegates
+        }
+      });
+      return evolved;
+    } catch (error) {
+      console.error(`${lc2} ${extractErrorMsg(error)}`);
+      throw error;
+    } finally {
+      if (logalot41) {
+        console.log(`${lc2} complete.`);
+      }
+    }
+  }
+  /**
+   * Unregisters a delegate keystone from the parent keystone by removing its entry
+   * from the parent's `delegates` map. This operation is signed using the parent's `manage` pool.
+   */
+  async unregisterDelegate({ parentKeystone, delegateTjpAddr, masterSecret, frameDetails, metaspace, space }) {
+    const lc2 = `${this.lc}[${this.unregisterDelegate.name}]`;
+    try {
+      if (logalot41) {
+        console.log(`${lc2} starting...`);
+      }
+      const prevData = parentKeystone.data;
+      const hasManagePool = prevData.challengePools.some((p) => p.id === POOL_ID_MANAGE);
+      if (!hasManagePool) {
+        throw new Error(`Parent keystone does not support delegation. Manage pool is required. (E: 3889f8ab28c9b60e68994511a5825)`);
+      }
+      const claim = {
+        target: delegateTjpAddr,
+        verb: KEYSTONE_VERB_MANAGE
+      };
+      const currentDelegates = prevData.delegates ? { ...prevData.delegates } : {};
+      if (!currentDelegates[delegateTjpAddr]) {
+        throw new Error(`Delegate ${delegateTjpAddr} is not registered on this parent. (E: 81d9f8ab28c9b60e68994511a5825)`);
+      }
+      delete currentDelegates[delegateTjpAddr];
+      const evolved = await this.sign({
+        latestKeystone: parentKeystone,
+        masterSecret,
+        claim,
+        poolId: POOL_ID_MANAGE,
+        frameDetails,
+        metaspace,
+        space,
+        dataToPatch: {
+          delegates: currentDelegates
+        }
+      });
+      return evolved;
+    } catch (error) {
+      console.error(`${lc2} ${extractErrorMsg(error)}`);
+      throw error;
+    } finally {
+      if (logalot41) {
+        console.log(`${lc2} complete.`);
+      }
+    }
+  }
+  /**
+   * Gets the registration status of a delegate keystone from the parent's latest tip frame.
+   */
+  async getDelegateStatus({ parentTjpAddr, delegateTjpAddr, metaspace, space }) {
+    const lc2 = `${this.lc}[${this.getDelegateStatus.name}]`;
+    try {
+      if (logalot41) {
+        console.log(`${lc2} starting...`);
+      }
+      const { ib, gib } = getIbAndGib({ ibGibAddr: parentTjpAddr });
+      const parentIbGib = { ib, gib };
+      const resGetLatest = await getLatestAddrs({
+        ibGibs: [parentIbGib],
+        space
+      });
+      if (!resGetLatest.data?.latestAddrsMap) {
+        return { registered: false };
+      }
+      const latestAddr = resGetLatest.data.latestAddrsMap[parentTjpAddr];
+      if (!latestAddr) {
+        return { registered: false };
+      }
+      const resGet = await metaspace.get({ addr: latestAddr, space });
+      const latestParent = resGet.ibGibs?.at(0);
+      if (!latestParent || !latestParent.data) {
+        return { registered: false };
+      }
+      const delegates = latestParent.data.delegates || {};
+      const delegateInfo = delegates[delegateTjpAddr];
+      return {
+        registered: !!delegateInfo,
+        delegateInfo
+      };
+    } catch (error) {
+      console.error(`${lc2} ${extractErrorMsg(error)}`);
+      throw error;
+    } finally {
+      if (logalot41) {
+        console.log(`${lc2} complete.`);
+      }
+    }
+  }
   /**
    * Validates a genesis keystone.
    *
@@ -18909,7 +19140,8 @@ var KeystoneService_V1 = class _KeystoneService_V1 {
         proofs: [proof],
         revocationInfo,
         frameDetails,
-        checkpointDetails
+        checkpointDetails,
+        ...prevData.delegates ? { delegates: prevData.delegates } : {}
       };
       const newKeystone = await evolvePersistAndRegisterKeystone({
         prevIbGib: latestKeystone,
@@ -19002,7 +19234,8 @@ var KeystoneService_V1 = class _KeystoneService_V1 {
         challengePools: finalPools,
         proofs: [proof],
         // The proof authorizes the structure change
-        checkpointDetails
+        checkpointDetails,
+        ...prevData.delegates ? { delegates: prevData.delegates } : {}
       };
       const newKeystone = await evolvePersistAndRegisterKeystone({
         prevIbGib: latestKeystone,
@@ -19246,30 +19479,64 @@ async function validateAndRegisterEvolveKeystone({ domainAddr, keystoneIbGib, re
     if (intrinsicErrors && intrinsicErrors.length > 0) {
       throw new Error(`Intrinsic keystone validation failed: ${intrinsicErrors.join(", ")} (E: 38ea984585edc6ee88d2a698c7895826)`);
     }
-    const infoAddr = getGibInfo({ ibGibAddr: addr });
-    const tjpGib = infoAddr.tjpGib ?? infoAddr.punctiliarHash;
-    const infoDomain = getGibInfo({ ibGibAddr: domainAddr });
-    const expectedTjpGib = infoDomain.tjpGib ?? infoDomain.punctiliarHash;
-    if (tjpGib !== expectedTjpGib) {
-      throw new Error(`Keystone tjpGib (${tjpGib}) does not match URL domainAddr tjpGib (${expectedTjpGib})`);
-    }
     const keystoneService = new KeystoneService_V1();
-    let prevIbGib;
+    let parentKeystone;
     try {
-      prevIbGib = await keystoneService.getLatestKeystone({
+      parentKeystone = await keystoneService.getLatestKeystone({
         addr: domainAddr,
         metaspace,
         space
       });
     } catch (error) {
-      throw new Error(`Could not retrieve previous keystone tip for ${domainAddr}: ${extractErrorMsg(error)} (E: b73ed8aeb0d837d248718b487345d326)`);
+      throw new Error(`Could not retrieve root Domain Identity tip for ${domainAddr}: ${extractErrorMsg(error)} (E: b73ed8aeb0d837d248718b487345d326)`);
     }
-    const validationErrors = await keystoneService.validate({
-      currentIbGib: keystoneIbGib,
-      prevIbGib
-    });
-    if (validationErrors && validationErrors.length > 0) {
-      throw new Error(`Keystone evolution validation failed: ${validationErrors.join(", ")} (E: 5212f8492ac839953842631834bcd826)`);
+    const parentTjpAddr = getTjpAddr({ ibGib: parentKeystone });
+    const incomingTjpAddr = getTjpAddr({ ibGib: keystoneIbGib });
+    if (!incomingTjpAddr) {
+      throw new Error(`Incoming keystone does not have a TJP address (E: d288fae39b7d825d)`);
+    }
+    const isDelegate = incomingTjpAddr !== parentTjpAddr;
+    let prevIbGib;
+    if (isDelegate) {
+      const delegateInfo = parentKeystone.data?.delegates?.[incomingTjpAddr];
+      if (!delegateInfo) {
+        throw new Error(`Incoming delegate keystone (${incomingTjpAddr}) is not registered under parent Domain Identity (${parentTjpAddr}) (E: c288fae39b7d82fe)`);
+      }
+      const allowedVerbs = delegateInfo.allowedVerbs ?? [];
+      if (!allowedVerbs.includes(KEYSTONE_VERB_SYNC)) {
+        throw new Error(`Incoming delegate keystone is not authorized for sync. Allowed verbs: ${allowedVerbs.join(", ")} (E: a288fae39b7d82ff)`);
+      }
+      const delegateLatestAddr = await metaspace.getLatestAddr({
+        addr: incomingTjpAddr,
+        space
+      });
+      if (delegateLatestAddr) {
+        const resGet = await metaspace.get({ addr: delegateLatestAddr, space });
+        if (resGet.success && resGet.ibGibs && resGet.ibGibs.length > 0) {
+          prevIbGib = resGet.ibGibs[0];
+        }
+      }
+    } else {
+      prevIbGib = parentKeystone;
+    }
+    if (prevIbGib) {
+      const validationErrors = await keystoneService.validate({
+        currentIbGib: keystoneIbGib,
+        prevIbGib
+      });
+      if (validationErrors && validationErrors.length > 0) {
+        throw new Error(`Keystone evolution validation failed: ${validationErrors.join(", ")} (E: 5212f8492ac839953842631834bcd826)`);
+      }
+    } else {
+      const validationErrors = await keystoneService.validateKeystoneGraph({
+        keystoneIbGib,
+        getLatest: false,
+        invalidIfMoreRecentKeystoneFoundInSpace: false,
+        space
+      });
+      if (validationErrors && validationErrors.length > 0) {
+        throw new Error(`Keystone graph validation failed: ${validationErrors.join(", ")} (E: 3a288fae39b7d82e)`);
+      }
     }
     const proofs = keystoneIbGib.data?.proofs ?? [];
     if (proofs.length === 0) {
@@ -19297,8 +19564,36 @@ async function validateAndRegisterEvolveKeystone({ domainAddr, keystoneIbGib, re
     if (!verb) {
       throw new Error(`claim.verb is falsy (E: 92cf38af58db2cd90e7132b8940fe326)`);
     }
+    if (verb === "manage") {
+      const prevDelegates = prevIbGib?.data?.delegates ?? {};
+      const currDelegates = keystoneIbGib.data?.delegates ?? {};
+      for (const [delegateTjpAddr, delegateInfo] of Object.entries(currDelegates)) {
+        if (!prevDelegates[delegateTjpAddr]) {
+          const delegateAddr = delegateInfo.delegateAddr;
+          const delegateIbGib = relatedIbGibs.find((ibGib) => getIbGibAddr({ ibGib }) === delegateAddr);
+          if (!delegateIbGib) {
+            throw new Error(`Evolved delegate keystone ${delegateAddr} must be provided in relatedIbGibs (E: 1fe5a68438e288ab4e86c90d81d142826)`);
+          }
+          const delegateErrors = await keystoneService.validateGenesisKeystone({ keystoneIbGib: delegateIbGib });
+          if (delegateErrors && delegateErrors.length > 0) {
+            throw new Error(`Genesis validation failed for delegate keystone ${delegateAddr}: ${delegateErrors.join(", ")} (E: d8afdc1dbed48c000455b35585dc26826)`);
+          }
+        }
+      }
+      await metaspace.put({ ibGibs: [keystoneIbGib, ...relatedIbGibs], space });
+      await metaspace.registerNewIbGib({ ibGib: keystoneIbGib, space });
+      for (const related of relatedIbGibs) {
+        if (related.ib?.startsWith("keystone")) {
+          await metaspace.registerNewIbGib({ ibGib: related, space });
+        }
+      }
+      return;
+    }
     if (verb !== "sync") {
-      throw new Error(`non-sync keystone evolution not yet implemented (E: eca4681b05486d1f784c0cb815ef9926)`);
+      throw new Error(`non-sync/non-manage keystone evolution not yet implemented (E: eca4681b05486d1f784c0cb815ef9926)`);
+    }
+    if (!isDelegate) {
+      throw new Error(`Root Domain Identity (${parentTjpAddr}) is not allowed to sync directly. A delegate must be used. (E: 2c88fae39b7d82fd)`);
     }
     const sAddr = claim.target;
     if (!sAddr) {
@@ -21390,13 +21685,16 @@ var SyncPeer_V1 = class _SyncPeer_V1 extends LightWitnessBase_V1 {
       if (!this.opts) {
         throw new Error(`(UNEXPECTED) this.opts falsy? Call initializeOpts first. (E: a1b2c3d4e5f6a7b8c9d0e1f2a3b4c526)`);
       }
-      const { senderIdentity, fnSenderSecret, sagaId, localMetaspace, localSpace } = this.opts;
+      const { senderIdentity, fnSenderSecret, senderDomainAddr, sagaId, localMetaspace, localSpace } = this.opts;
       if (!senderIdentity || !fnSenderSecret) {
         if (logalot54) {
           console.log(`${lc2} no senderIdentity/fnSenderSecret \u2014 skipping establish (I: f29348a77d1542326d14043ea4b69126)`);
         }
         return void 0;
       }
+      if (!senderDomainAddr) {
+        throw new Error(`(UNEXPECTED) senderDomainAddr falsy but senderIdentity/fnSenderSecret truthy? if identity is used, senderDomainAddr must be provided. (E: c288fa8e9d3d82fc)`);
+      }
       const senderIdentityAddr = getIbGibAddr({ ibGib: senderIdentity });
       const senderIdentityTjpAddr = getTjpAddr({ ibGib: senderIdentity });
       if (!senderIdentityTjpAddr) {
@@ -22680,7 +22978,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
    * **Execution Context**: **Sender (Local)**.
    * This method is the entry point for starting a sync saga.
    */
-  async sync({ peer, domainIbGibs, senderIdentity, fnSenderSecret, conflictStrategy = SyncConflictStrategy.abort, metaspace, localSpace }) {
+  async sync({ peer, domainIbGibs, senderIdentityInfo, fnSenderSecret, conflictStrategy = SyncConflictStrategy.abort, metaspace, localSpace }) {
     const lc2 = `${this.lc}[${this.sync.name}]`;
     if (logalot58) {
       console.log(`${lc2} starting...`);
@@ -22689,14 +22987,22 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
       debugger;
       throw new Error(`${lc2} source (or localSpace) required (E: 25df3761f7686a1099a552f83c95d326)`);
     }
-    if (senderIdentity || fnSenderSecret) {
-      if (!senderIdentity) {
-        throw new Error(`(UNEXPECTED) senderIdentity falsy but fnSenderSecret truthy? if either is used, both must be truthy. (E: e366628a4919c7d727d2cbd8e5b75e26)`);
+    if (senderIdentityInfo || fnSenderSecret) {
+      if (!senderIdentityInfo) {
+        throw new Error(`(UNEXPECTED) senderIdentityInfo falsy but fnSenderSecret truthy? if either is used, both must be truthy. (E: e366628a4919c7d727d2cbd8e5b75e26)`);
       }
       if (!fnSenderSecret) {
-        throw new Error(`(UNEXPECTED) fnSenderSecret falsy but senderIdentity truthy? if either is used, both must be truthy. (E: 7d55ce37ae482fec48e3398158161926)`);
+        throw new Error(`(UNEXPECTED) fnSenderSecret falsy but senderIdentityInfo truthy? if either is used, both must be truthy. (E: 7d55ce37ae482fec48e3398158161926)`);
+      }
+      const { senderIdentity: senderIdentity2, senderDomainAddr: senderDomainAddr2 } = senderIdentityInfo;
+      if (!senderIdentity2) {
+        throw new Error(`(UNEXPECTED) senderIdentity falsy in senderIdentityInfo? if senderIdentityInfo is provided, both senderIdentity and senderDomainAddr must be truthy. (E: a3c17fae2978926d)`);
+      }
+      if (!senderDomainAddr2) {
+        throw new Error(`(UNEXPECTED) senderDomainAddr falsy in senderIdentityInfo? if senderIdentityInfo is provided, both senderIdentity and senderDomainAddr must be truthy. (E: d288fae39b7d825c)`);
       }
     }
+    const { senderIdentity, senderDomainAddr } = senderIdentityInfo ?? {};
     const sagaId = await getUUID();
     const updates$ = await newupSubject();
     if (!updates$.next) {
@@ -22729,6 +23035,7 @@ var SyncSagaCoordinator = class _SyncSagaCoordinator {
         peer.setOptionalOpts({
           sagaId,
           senderIdentity,
+          senderDomainAddr,
           fnSenderSecret,
           sessionConnectPoolConfig: this.defaultSessionConnectPoolConfig(),
           sessionSyncPoolConfig: this.defaultSessionSyncPoolConfig(),