@did-btcr2/api 0.3.1 → 0.5.0

package/dist/types/method.d.ts

@@ -1,10 +1,10 @@
-import { BitcoinConnection } from '@did-btcr2/bitcoin';
+import type { BitcoinConnection } from '@did-btcr2/bitcoin';
 import type { DocumentBytes, HexString, KeyBytes, PatchOperation } from '@did-btcr2/common';
-import { SignedBTCR2Update } from '@did-btcr2/cryptosuite';
+import type { SignedBTCR2Update } from '@did-btcr2/cryptosuite';
 import type { Btcr2DidDocument, DidCreateOptions, ResolutionOptions } from '@did-btcr2/method';
 import type { DidResolutionResult, DidVerificationMethod } from '@web5/dids';
-import { BitcoinApi } from './bitcoin.js';
-import { CasApi } from './cas.js';
+import type { BitcoinApi } from './bitcoin.js';
+import type { CasApi } from './cas.js';
 import type { Logger } from './types.js';
 /**
  * DID method operations sub-facade: create, resolve, update, deactivate.
@@ -33,7 +33,7 @@ export declare class DidMethodApi {
      */
     createExternal(genesisBytes: DocumentBytes, options?: Omit<DidCreateOptions, 'idType'>): string;
     /**
-     * Resolve a DID by driving the sans-I/O {@link Resolver} state machine.
+     * Resolve a DID by driving the sans-I/O `Resolver` state machine (from @did-btcr2/method).
      * If a Bitcoin connection is configured on the API, it is used automatically
      * to fetch beacon signals. Sidecar data flows through `options.sidecar`.
      * @param did The DID to resolve.

package/dist/types/method.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"method.d.ts","sourceRoot":"","sources":["../../src/method.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAE5F,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,KAAK,EAAE,gBAAgB,EAAmB,gBAAgB,EAA8D,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE5K,OAAO,KAAK,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAElC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAEzC;;;;;;GAMG;AACH,qBAAa,YAAY;;gBAKX,GAAG,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;IAM3D;;;;;;OAMG;IACH,mBAAmB,CAAC,YAAY,EAAE,QAAQ,EAAE,OAAO,GAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAM,GAAG,MAAM;IAKnG;;;;;;OAMG;IACH,cAAc,CAAC,YAAY,EAAE,aAAa,EAAE,OAAO,GAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAM,GAAG,MAAM;IAKnG;;;;;;;OAOG;IACG,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAqGrF;;;;;OAKG;IACG,MAAM,CAAC,EACX,cAAc,EACd,OAAO,EACP,eAAe,EACf,oBAAoB,EACpB,QAAQ,EACR,eAAe,EACf,OAAO,GACR,EAAE;QACD,cAAc,EAAE,gBAAgB,CAAC;QACjC,OAAO,EAAE,cAAc,EAAE,CAAC;QAC1B,eAAe,EAAE,MAAM,CAAC;QACxB,oBAAoB,EAAE,MAAM,CAAC;QAC7B,QAAQ,EAAE,MAAM,CAAC;QACjB,eAAe,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;QACvC,OAAO,CAAC,EAAE,iBAAiB,CAAC;KAC7B,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAa9B;;;;;OAKG;IACH,gBAAgB,CAAC,WAAW,EAAE,gBAAgB,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,qBAAqB;IAIzF;;;;;;;;;;;;;;;OAeG;IACH,WAAW,CAAC,cAAc,EAAE,gBAAgB,GAAG,aAAa;IAI5D,iEAAiE;IAC3D,UAAU,IAAI,OAAO,CAAC,iBAAiB,CAAC;CAS/C;AAED;;;;;;GAMG;AACH,qBAAa,aAAa;;IAUxB,gBAAgB;gBACJ,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,gBAAgB;IAKrE,uEAAuE;IACvE,KAAK,CAAC,EAAE,EAAE,cAAc,GAAG,IAAI;IAK/B,+DAA+D;IAC/D,OAAO,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,IAAI;IAKpC,iCAAiC;IACjC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAKzB,uDAAuD;IACvD,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAK9B,qDAAqD;IACrD,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAK9B,0DAA0D;IAC1D,eAAe,CAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS,GAAG,IAAI;IAKrD,uDAAuD;IACvD,WAAW,CAAC,UAAU,EAAE,iBAAiB,GAAG,IAAI;IAKhD;;;OAGG;IACG,OAAO,IAAI,OAAO,CAAC,iBAAiB,CAAC;CAqB5C"}
+{"version":3,"file":"method.d.ts","sourceRoot":"","sources":["../../src/method.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAE5F,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,KAAK,EAAE,gBAAgB,EAAmB,gBAAgB,EAA8D,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE5K,OAAO,KAAK,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAC7E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAEvC,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAEzC;;;;;;GAMG;AACH,qBAAa,YAAY;;gBAKX,GAAG,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM;IAM3D;;;;;;OAMG;IACH,mBAAmB,CAAC,YAAY,EAAE,QAAQ,EAAE,OAAO,GAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAM,GAAG,MAAM;IAKnG;;;;;;OAMG;IACH,cAAc,CAAC,YAAY,EAAE,aAAa,EAAE,OAAO,GAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAM,GAAG,MAAM;IAKnG;;;;;;;OAOG;IACG,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAqGrF;;;;;OAKG;IACG,MAAM,CAAC,EACX,cAAc,EACd,OAAO,EACP,eAAe,EACf,oBAAoB,EACpB,QAAQ,EACR,eAAe,EACf,OAAO,GACR,EAAE;QACD,cAAc,EAAE,gBAAgB,CAAC;QACjC,OAAO,EAAE,cAAc,EAAE,CAAC;QAC1B,eAAe,EAAE,MAAM,CAAC;QACxB,oBAAoB,EAAE,MAAM,CAAC;QAC7B,QAAQ,EAAE,MAAM,CAAC;QACjB,eAAe,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;QACvC,OAAO,CAAC,EAAE,iBAAiB,CAAC;KAC7B,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAa9B;;;;;OAKG;IACH,gBAAgB,CAAC,WAAW,EAAE,gBAAgB,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,qBAAqB;IAIzF;;;;;;;;;;;;;;;OAeG;IACH,WAAW,CAAC,cAAc,EAAE,gBAAgB,GAAG,aAAa;IAI5D,iEAAiE;IAC3D,UAAU,IAAI,OAAO,CAAC,iBAAiB,CAAC;CAS/C;AAED;;;;;;GAMG;AACH,qBAAa,aAAa;;IAUxB,gBAAgB;gBACJ,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,gBAAgB;IAKrE,uEAAuE;IACvE,KAAK,CAAC,EAAE,EAAE,cAAc,GAAG,IAAI;IAK/B,+DAA+D;IAC/D,OAAO,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,IAAI;IAKpC,iCAAiC;IACjC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAKzB,uDAAuD;IACvD,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAK9B,qDAAqD;IACrD,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAK9B,0DAA0D;IAC1D,eAAe,CAAC,QAAQ,EAAE,QAAQ,GAAG,SAAS,GAAG,IAAI;IAKrD,uDAAuD;IACvD,WAAW,CAAC,UAAU,EAAE,iBAAiB,GAAG,IAAI;IAKhD;;;OAGG;IACG,OAAO,IAAI,OAAO,CAAC,iBAAiB,CAAC;CAqB5C"}

package/dist/types/types.d.ts

@@ -6,7 +6,6 @@ import type { CasConfig } from './cas.js';
 /**
  * Pluggable logger interface. All methods are optional-call; the default
  * implementation is a silent no-op.
- * @public
  */
 export type Logger = {
     debug(message: string, ...args: unknown[]): void;
@@ -21,7 +20,6 @@ export type Logger = {
  * than a union. This local alias provides compile-time safety at the API
  * facade level. Upstream runtime validation in `Identifier.encode()` still
  * catches invalid values.
- * @public
  */
 export type IdType = 'KEY' | 'EXTERNAL';
 /**
@@ -35,14 +33,12 @@ export type IdType = 'KEY' | 'EXTERNAL';
  * api.resolveDid(did); // OK
  * api.btc.getTransaction(did); // Type error — DidString is not TxId
  * ```
- * @public
  */
 export type DidString = string & {
     readonly __brand: 'DidString';
 };
 /**
  * A branded string representing a Bitcoin transaction ID (64-char hex).
- * @public
  */
 export type TxId = string & {
     readonly __brand: 'TxId';
@@ -61,7 +57,6 @@ export type TxId = string & {
  *   console.log(result.error, result.errorMessage);
  * }
  * ```
- * @public
  */
 export type ResolutionResult = {
     ok: true;
@@ -91,7 +86,6 @@ export type ResolutionResult = {
  * // Use regtest with custom RPC credentials, default REST
  * { network: 'regtest', rpc: { host: 'http://mynode:18443', username: 'u', password: 'p' } }
  * ```
- * @public
  */
 export type BitcoinApiConfig = {
     /** Bitcoin network name (e.g., 'regtest', 'testnet4', 'bitcoin'). */
@@ -116,7 +110,6 @@ export type BitcoinApiConfig = {
 };
 /**
  * Top-level API configuration options.
- * @public
  */
 export type ApiConfig = {
     btc?: BitcoinApiConfig;

package/dist/types/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC3F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAE1C;;;;GAIG;AACH,MAAM,MAAM,MAAM,GAAG;IACnB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACjD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAChD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAChD,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;CAClD,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,MAAM,MAAM,GAAG,KAAK,GAAG,UAAU,CAAC;AAExC;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;CAAE,CAAC;AAEnE;;;GAGG;AACH,MAAM,MAAM,IAAI,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAE,QAAQ,EAAE,gBAAgB,CAAC;IAAC,QAAQ,EAAE,mBAAmB,CAAC,qBAAqB,CAAC,CAAC;IAAC,GAAG,EAAE,mBAAmB,CAAA;CAAE,GACzH;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,mBAAmB,CAAA;CAAE,CAAC;AAElF;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,qEAAqE;IACrE,OAAO,EAAE,WAAW,CAAC;IACrB,gEAAgE;IAChE,IAAI,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3B,+DAA+D;IAC/D,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,SAAS,GAAG;IACtB,GAAG,CAAC,EAAE,gBAAgB,CAAC;IACvB,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,0DAA0D;IAC1D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC3F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAE1C;;;GAGG;AACH,MAAM,MAAM,MAAM,GAAG;IACnB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACjD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAChD,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IAChD,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;CAClD,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,MAAM,MAAM,GAAG,KAAK,GAAG,UAAU,CAAC;AAExC;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;CAAE,CAAC;AAEnE;;GAEG;AACH,MAAM,MAAM,IAAI,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzD;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAE,QAAQ,EAAE,gBAAgB,CAAC;IAAC,QAAQ,EAAE,mBAAmB,CAAC,qBAAqB,CAAC,CAAC;IAAC,GAAG,EAAE,mBAAmB,CAAA;CAAE,GACzH;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,mBAAmB,CAAA;CAAE,CAAC;AAElF;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,qEAAqE;IACrE,OAAO,EAAE,WAAW,CAAC;IACrB,gEAAgE;IAChE,IAAI,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;IAC3B,+DAA+D;IAC/D,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,SAAS,GAAG;IACtB,GAAG,CAAC,EAAE,gBAAgB,CAAC;IACvB,GAAG,CAAC,EAAE,SAAS,CAAC;IAChB,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,0DAA0D;IAC1D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@did-btcr2/api",
-  "version": "0.3.1",
+  "version": "0.5.0",
   "type": "module",
   "description": "SDK for accessing the did:btcr2 method functionality.",
   "main": "./dist/cjs/index.js",
@@ -84,12 +84,12 @@
     "multiformats": "^13.3.1",
     "nostr-tools": "^2.15.0",
     "tiny-secp256k1": "^2.2.3",
-    "@did-btcr2/common": "^8.0.1",
-    "@did-btcr2/cryptosuite": "^6.0.5",
-    "@did-btcr2/keypair": "^0.11.3",
-    "@did-btcr2/bitcoin": "^0.5.2",
-    "@did-btcr2/kms": "^0.4.1",
-    "@did-btcr2/method": "^0.25.3"
+    "@did-btcr2/bitcoin": "^0.5.3",
+    "@did-btcr2/cryptosuite": "^6.0.6",
+    "@did-btcr2/common": "^9.0.0",
+    "@did-btcr2/keypair": "^0.11.4",
+    "@did-btcr2/kms": "^0.4.2",
+    "@did-btcr2/method": "^0.26.0"
   },
   "devDependencies": {
     "@eslint/js": "^9.22.0",
@@ -111,6 +111,7 @@
     "mocha-junit-reporter": "^2.2.1",
     "node-stdlib-browser": "^1.3.1",
     "rimraf": "^6.0.1",
+    "tsup": "^8.5.1",
     "typedoc-plugin-markdown": "^4.7.0",
     "typescript": "^5.6.2",
     "typescript-eslint": "^8.19.1"
@@ -124,7 +125,7 @@
     "reinstall": "pnpm install --force",
     "build": "pnpm clean:build && pnpm build:esm && pnpm build:cjs && pnpm build:browser",
     "build:esm": "rimraf dist/esm dist/types && pnpm tsc -p tsconfig.json",
-    "build:cjs": "rimraf dist/cjs && tsc -p tsconfig.cjs.json && echo '{\"type\": \"commonjs\"}' > ./dist/cjs/package.json",
+    "build:cjs": "tsup && echo '{\"type\": \"commonjs\"}' > ./dist/cjs/package.json",
     "build:browser": "rimraf dist/browser.mjs dist/browser.js && node build/bundles.js",
     "build:tests": "pnpm clean:tests && pnpm tsc -p tests/tsconfig.json",
     "build:all": "pnpm build && pnpm build:tests",

package/src/api.ts

@@ -1,12 +1,12 @@
 import type { NetworkName } from '@did-btcr2/bitcoin';
 import type { DocumentBytes, KeyBytes, PatchOperation } from '@did-btcr2/common';
-import { SignedBTCR2Update } from '@did-btcr2/cryptosuite';
+import type { SignedBTCR2Update } from '@did-btcr2/cryptosuite';
 import { SchnorrKeyPair } from '@did-btcr2/keypair';
-import { KeyIdentifier } from '@did-btcr2/kms';
+import type { KeyIdentifier } from '@did-btcr2/kms';
 import type { Btcr2DidDocument, DidCreateOptions, ResolutionOptions } from '@did-btcr2/method';
 import type { DidResolutionResult } from '@web5/dids';
 import { BitcoinApi } from './bitcoin.js';
-import { CasApi, type CasConfig } from './cas.js';
+import { CasApi, DEFAULT_CAS_GATEWAY, type CasConfig } from './cas.js';
 import { CryptoApi } from './crypto.js';
 import { DidApi } from './did.js';
 import { assertString, NOOP_LOGGER } from './helpers.js';
@@ -67,19 +67,16 @@ export class DidBtcr2Api {
 
   /**
    * CAS API sub-facade (lazily initialized).
-   * Only available when `cas` config was provided to the constructor.
-   * @throws {Error} If the instance has been disposed or no CAS config was provided.
+   *
+   * When no `cas` config was provided to the constructor, defaults to a
+   * read-only {@link HttpGatewayCasExecutor} backed by the public IPFS
+   * gateway (`https://ipfs.io`). Override via `createApi({ cas: { ... } })`.
+   * @throws {Error} If the instance has been disposed.
    */
   get cas(): CasApi {
     this.#assertNotDisposed();
     if (!this.#cas) {
-      if (!this.#casConfig) {
-        throw new Error(
-          'CAS not configured. Pass a cas config to createApi(), e.g.: '
-          + 'createApi({ cas: { helia: await createHelia() } })'
-        );
-      }
-      this.#cas = new CasApi(this.#casConfig);
+      this.#cas = new CasApi(this.#casConfig ?? { gateway: DEFAULT_CAS_GATEWAY });
     }
     return this.#cas;
   }
@@ -93,7 +90,7 @@ export class DidBtcr2Api {
     if (!this.#btcr2) {
       this.#btcr2 = new DidMethodApi(
         this.#btcConfig ? this.btc : undefined,
-        this.#casConfig ? this.cas : undefined,
+        this.cas,
         this.#log
       );
     }
@@ -267,7 +264,7 @@ export class DidBtcr2Api {
    * Release internal references. After disposal, accessing `btc`, `btcr2`,
    * or calling top-level methods will throw.
    *
-   * Note: the underlying {@link BitcoinConnection} does not hold persistent
+   * Note: the underlying `BitcoinConnection` does not hold persistent
    * connections, so this is primarily a guard against accidental reuse.
    */
   dispose(): void {

package/src/bitcoin.ts

@@ -1,7 +1,8 @@
+import type {
+  BitcoinCoreRpcClient,
+  BitcoinRestClient} from '@did-btcr2/bitcoin';
 import {
   BitcoinConnection,
-  BitcoinCoreRpcClient,
-  BitcoinRestClient,
   type RawTransactionRest
 } from '@did-btcr2/bitcoin';
 import { assertString } from './helpers.js';

package/src/cas.ts

@@ -1,10 +1,13 @@
-import { canonicalize, decode as decodeHash } from '@did-btcr2/common';
+import type { HashBytes } from '@did-btcr2/common';
+import { canonicalize, decode as decodeHash, encode as encodeHash } from '@did-btcr2/common';
 import type { Helia } from 'helia';
 import { CID } from 'multiformats/cid';
 import * as raw from 'multiformats/codecs/raw';
 import { create as createDigest } from 'multiformats/hashes/digest';
 import { sha256 } from 'multiformats/hashes/sha2';
-import { assertString } from './helpers.js';
+
+/** Default IPFS HTTP gateway used for CAS reads when no CAS config is provided. */
+export const DEFAULT_CAS_GATEWAY = 'https://ipfs.io';
 
 /**
  * Executor interface for content-addressed storage.
@@ -36,7 +39,7 @@ export class IpfsCasExecutor implements CasExecutor {
   }
 
   async retrieve(hash: string): Promise<Uint8Array | null> {
-    const hashBytes = decodeHash(hash, 'base64url');
+    const hashBytes = decodeHash(hash, 'base64urlnopad');
     const cid = CID.create(1, raw.code, createDigest(sha256.code, hashBytes));
     try {
       return await this.#helia.blockstore.get(cid);
@@ -55,15 +58,70 @@ export class IpfsCasExecutor implements CasExecutor {
   }
 }
 
+/**
+ * Read-only {@link CasExecutor} backed by an IPFS HTTP gateway.
+ *
+ * Converts the base64url SHA-256 hash to a CIDv1 (raw codec) and fetches
+ * the raw block via the
+ * {@link https://specs.ipfs.tech/http-gateways/trustless-gateway/ | Trustless Gateway}
+ * protocol.
+ *
+ * Publishing is not supported — use {@link IpfsCasExecutor} with a Helia
+ * instance for writes.
+ * @public
+ */
+export class HttpGatewayCasExecutor implements CasExecutor {
+  readonly #gatewayUrl: string;
+
+  constructor(gatewayUrl: string) {
+    this.#gatewayUrl = gatewayUrl.replace(/\/+$/, '');
+  }
+
+  async retrieve(hash: string): Promise<Uint8Array | null> {
+    const hashBytes = decodeHash(hash, 'base64urlnopad');
+    const cid = CID.create(1, raw.code, createDigest(sha256.code, hashBytes));
+    try {
+      const res = await fetch(`${this.#gatewayUrl}/ipfs/${cid.toString()}?format=raw`, {
+        headers : { Accept: 'application/vnd.ipld.raw' },
+      });
+      if (!res.ok) return null;
+      return new Uint8Array(await res.arrayBuffer());
+    } catch {
+      return null;
+    }
+  }
+
+  async publish(): Promise<string> {
+    throw new Error(
+      'HttpGatewayCasExecutor is read-only. '
+      + 'Publishing requires a full IPFS node (use IpfsCasExecutor with Helia).'
+    );
+  }
+}
+
+/** Default timeout (ms) for CAS operations. */
+export const DEFAULT_CAS_TIMEOUT_MS = 30_000;
+
 /**
  * Configuration for the CAS (Content-Addressed Storage) driver.
+ *
+ * Provide exactly one of `executor`, `helia`, or `gateway`.
+ * Priority if multiple are set: `executor` > `helia` > `gateway`.
  * @public
  */
 export type CasConfig = {
-  /** Custom executor implementation (overrides the default IPFS executor). */
+  /** Custom executor implementation (overrides all other options). */
   executor?: CasExecutor;
   /** Pre-existing Helia instance for the default IPFS executor. */
   helia?: Helia;
+  /** IPFS HTTP gateway URL for read-only CAS access (e.g. `'https://ipfs.io'`). */
+  gateway?: string;
+  /**
+   * Timeout in milliseconds for CAS operations. Prevents indefinite hangs
+   * when a Helia DHT lookup or gateway request stalls. Default: 30 000 ms.
+   * Set to `0` to disable.
+   */
+  timeoutMs?: number;
 };
 
 /**
@@ -81,28 +139,32 @@ export type CasConfig = {
  */
 export class CasApi {
   readonly #executor: CasExecutor;
+  readonly #timeoutMs: number;
 
   constructor(config: CasConfig) {
     if (config.executor) {
       this.#executor = config.executor;
     } else if (config.helia) {
       this.#executor = new IpfsCasExecutor(config.helia);
+    } else if (config.gateway) {
+      this.#executor = new HttpGatewayCasExecutor(config.gateway);
     } else {
       throw new Error(
-        'CAS configuration requires either an executor or a Helia instance. '
-        + 'Example: createApi({ cas: { helia: await createHelia() } })'
+        'CAS configuration requires an executor, Helia instance, or gateway URL. '
+        + 'Example: createApi({ cas: { gateway: \'https://ipfs.io\' } })'
       );
     }
+    this.#timeoutMs = config.timeoutMs ?? DEFAULT_CAS_TIMEOUT_MS;
   }
 
   /**
-   * Retrieve a JSON object from the CAS by its base64url SHA-256 hash.
-   * @param hash Base64url-encoded SHA-256 hash of the JCS-canonicalized object.
+   * Retrieve a JSON object from the CAS by its SHA-256 hash bytes.
+   * @param hashBytes Raw SHA-256 hash bytes of the JCS-canonicalized object.
    * @returns The parsed JSON object, or `null` if not found.
    */
-  async retrieve(hash: string): Promise<object | null> {
-    assertString(hash, 'hash');
-    const bytes = await this.#executor.retrieve(hash);
+  async retrieve(hashBytes: HashBytes): Promise<object | null> {
+    const hash = encodeHash(hashBytes, 'base64urlnopad');
+    const bytes = await this.#withTimeout(this.#executor.retrieve(hash));
     if (!bytes) return null;
     return JSON.parse(new TextDecoder().decode(bytes)) as object;
   }
@@ -110,12 +172,29 @@ export class CasApi {
   /**
    * Publish a JSON object to the CAS.
    * The object is JCS-canonicalized before storage; the returned hash
-   * matches what {@link canonicalHash} would produce.
+   * matches what `canonicalHash` (from @did-btcr2/common) would produce.
    * @param object The JSON object to publish.
    * @returns The base64url-encoded SHA-256 hash (content address).
    */
   async publish(object: object): Promise<string> {
     const bytes = new TextEncoder().encode(canonicalize(object as Record<string, any>));
-    return await this.#executor.publish(bytes);
+    return await this.#withTimeout(this.#executor.publish(bytes));
+  }
+
+  /**
+   * Wraps a promise with a timeout. If `#timeoutMs` is 0, no timeout is applied.
+   */
+  #withTimeout<T>(promise: Promise<T>): Promise<T> {
+    if (!this.#timeoutMs) return promise;
+    return new Promise<T>((resolve, reject) => {
+      const timer = setTimeout(
+        () => reject(new Error(`CAS operation timed out after ${this.#timeoutMs}ms`)),
+        this.#timeoutMs
+      );
+      promise.then(
+        (val) => { clearTimeout(timer); resolve(val); },
+        (err) => { clearTimeout(timer); reject(err); },
+      );
+    });
   }
 }

package/src/crypto.ts

@@ -1,21 +1,23 @@
 import type { Bytes, Entropy, HexString, KeyBytes, SchnorrKeyPairObject, SignatureBytes } from '@did-btcr2/common';
-import {
-  BIP340Cryptosuite,
-  BIP340DataIntegrityProof,
+import type {
   BTCR2Update,
   DataIntegrityConfig,
   DataIntegrityProofObject,
-  type FromPublicKey,
-  type Multikey,
-  SchnorrMultikey,
   SignedBTCR2Update,
   UnsignedBTCR2Update,
   VerificationResult
 } from '@did-btcr2/cryptosuite';
+import {
+  BIP340Cryptosuite,
+  BIP340DataIntegrityProof,
+  type FromPublicKey,
+  type Multikey,
+  SchnorrMultikey
+} from '@did-btcr2/cryptosuite';
 import { CompressedSecp256k1PublicKey, SchnorrKeyPair, Secp256k1SecretKey } from '@did-btcr2/keypair';
-import { KeyIdentifier } from '@did-btcr2/kms';
+import type { KeyIdentifier } from '@did-btcr2/kms';
 import type { DidVerificationMethod } from '@web5/dids';
-import { KeyManagerApi } from './kms.js';
+import type { KeyManagerApi } from './kms.js';
 
 /**
  * Schnorr keypair operations.

package/src/did.ts

@@ -3,8 +3,8 @@ import type { DocumentBytes } from '@did-btcr2/common';
 import { IdentifierTypes } from '@did-btcr2/common';
 import { SchnorrKeyPair } from '@did-btcr2/keypair';
 import type { SchnorrKeyPairObject } from '@did-btcr2/common';
-import type { DidCreateOptions } from '@did-btcr2/method';
-import { Identifier, IdentifierComponents } from '@did-btcr2/method';
+import type { DidCreateOptions , IdentifierComponents } from '@did-btcr2/method';
+import { Identifier } from '@did-btcr2/method';
 import { Did } from '@web5/dids';
 import { assertBytes, assertString } from './helpers.js';
 

package/src/kms.ts

@@ -1,10 +1,11 @@
 import type { Bytes, HashBytes, SignatureBytes } from '@did-btcr2/common';
-import { SchnorrKeyPair } from '@did-btcr2/keypair';
+import type { SchnorrKeyPair } from '@did-btcr2/keypair';
+import type {
+  KeyIdentifier,
+  KeyManager} from '@did-btcr2/kms';
 import {
   type GenerateKeyOptions,
   type ImportKeyOptions,
-  KeyIdentifier,
-  KeyManager,
   Kms,
   type SignOptions,
 } from '@did-btcr2/kms';

package/src/method.ts

@@ -1,12 +1,12 @@
-import { BitcoinConnection } from '@did-btcr2/bitcoin';
+import type { BitcoinConnection } from '@did-btcr2/bitcoin';
 import type { DocumentBytes, HexString, KeyBytes, PatchOperation } from '@did-btcr2/common';
-import { IdentifierTypes, NotImplementedError } from '@did-btcr2/common';
-import { SignedBTCR2Update } from '@did-btcr2/cryptosuite';
+import { decode as decodeHash, IdentifierTypes, NotImplementedError } from '@did-btcr2/common';
+import type { SignedBTCR2Update } from '@did-btcr2/cryptosuite';
 import type { Btcr2DidDocument, CASAnnouncement, DidCreateOptions, NeedCASAnnouncement, NeedGenesisDocument, NeedSignedUpdate, ResolutionOptions } from '@did-btcr2/method';
 import { BeaconSignalDiscovery, DidBtcr2 } from '@did-btcr2/method';
 import type { DidResolutionResult, DidVerificationMethod } from '@web5/dids';
-import { BitcoinApi } from './bitcoin.js';
-import { CasApi } from './cas.js';
+import type { BitcoinApi } from './bitcoin.js';
+import type { CasApi } from './cas.js';
 import { assertBytes, assertCompressedPubkey, assertString, NOOP_LOGGER } from './helpers.js';
 import type { Logger } from './types.js';
 
@@ -53,7 +53,7 @@ export class DidMethodApi {
   }
 
   /**
-   * Resolve a DID by driving the sans-I/O {@link Resolver} state machine.
+   * Resolve a DID by driving the sans-I/O `Resolver` state machine (from @did-btcr2/method).
    * If a Bitcoin connection is configured on the API, it is used automatically
    * to fetch beacon signals. Sidecar data flows through `options.sidecar`.
    * @param did The DID to resolve.
@@ -96,7 +96,7 @@ export class DidMethodApi {
                 );
               }
               this.#log.debug('Fetching genesis document from CAS: %s', need.genesisHash);
-              const doc = await this.#cas.retrieve(need.genesisHash);
+              const doc = await this.#cas.retrieve(decodeHash(need.genesisHash, 'hex'));
               if(!doc) {
                 throw new Error(
                   `Genesis document not found in CAS (hash: ${need.genesisHash}).`
@@ -114,7 +114,7 @@ export class DidMethodApi {
                 );
               }
               this.#log.debug('Fetching CAS announcement from CAS: %s', need.announcementHash);
-              const announcement = await this.#cas.retrieve(need.announcementHash);
+              const announcement = await this.#cas.retrieve(decodeHash(need.announcementHash, 'hex'));
               if(!announcement) {
                 throw new Error(
                   `CAS announcement not found in CAS (hash: ${need.announcementHash}).`
@@ -132,7 +132,7 @@ export class DidMethodApi {
                 );
               }
               this.#log.debug('Fetching signed update from CAS: %s', need.updateHash);
-              const update = await this.#cas.retrieve(need.updateHash);
+              const update = await this.#cas.retrieve(decodeHash(need.updateHash, 'hex'));
               if(!update) {
                 throw new Error(
                   `Signed update not found in CAS (hash: ${need.updateHash}).`

package/src/types.ts

@@ -7,7 +7,6 @@ import type { CasConfig } from './cas.js';
 /**
  * Pluggable logger interface. All methods are optional-call; the default
  * implementation is a silent no-op.
- * @public
  */
 export type Logger = {
   debug(message: string, ...args: unknown[]): void;
@@ -23,7 +22,6 @@ export type Logger = {
  * than a union. This local alias provides compile-time safety at the API
  * facade level. Upstream runtime validation in `Identifier.encode()` still
  * catches invalid values.
- * @public
  */
 export type IdType = 'KEY' | 'EXTERNAL';
 
@@ -38,13 +36,11 @@ export type IdType = 'KEY' | 'EXTERNAL';
  * api.resolveDid(did); // OK
  * api.btc.getTransaction(did); // Type error — DidString is not TxId
  * ```
- * @public
  */
 export type DidString = string & { readonly __brand: 'DidString' };
 
 /**
  * A branded string representing a Bitcoin transaction ID (64-char hex).
- * @public
  */
 export type TxId = string & { readonly __brand: 'TxId' };
 
@@ -62,7 +58,6 @@ export type TxId = string & { readonly __brand: 'TxId' };
  *   console.log(result.error, result.errorMessage);
  * }
  * ```
- * @public
  */
 export type ResolutionResult =
   | { ok: true;  document: Btcr2DidDocument; metadata: DidResolutionResult['didDocumentMetadata']; raw: DidResolutionResult }
@@ -85,7 +80,6 @@ export type ResolutionResult =
  * // Use regtest with custom RPC credentials, default REST
  * { network: 'regtest', rpc: { host: 'http://mynode:18443', username: 'u', password: 'p' } }
  * ```
- * @public
  */
 export type BitcoinApiConfig = {
   /** Bitcoin network name (e.g., 'regtest', 'testnet4', 'bitcoin'). */
@@ -111,7 +105,6 @@ export type BitcoinApiConfig = {
 
 /**
  * Top-level API configuration options.
- * @public
  */
 export type ApiConfig = {
   btc?: BitcoinApiConfig;