@metalabel/dfos-protocol 0.0.3 → 0.2.0

package/dist/index.js

@@ -1,20 +1,5 @@
 import {
-  ChainStore,
-  ContentOperationsParams,
-  ContentOperationsResponse,
-  IdentityOperationsParams,
-  IdentityOperationsResponse,
-  RegistryError,
-  ResolveContentResponse,
-  ResolveIdentityResponse,
-  ResolveOperationResponse,
-  SubmitContentChainRequest,
-  SubmitContentChainResponse,
-  SubmitIdentityChainRequest,
-  SubmitIdentityChainResponse,
-  createRegistryServer
-} from "./chunk-U6DANYPT.js";
-import {
+  BeaconPayload,
   ContentOperation,
   ED25519_PRIV_MULTICODEC,
   ED25519_PUB_MULTICODEC,
@@ -25,11 +10,40 @@ import {
   deriveChainIdentifier,
   deriveContentId,
   encodeEd25519Multikey,
+  signBeacon,
   signContentOperation,
+  signCountersignature,
   signIdentityOperation,
+  verifyBeacon,
+  verifyBeaconCountersignature,
   verifyContentChain,
+  verifyCountersignature,
   verifyIdentityChain
-} from "./chunk-VEBMLR37.js";
+} from "./chunk-GEVJ3SEV.js";
+import {
+  buildMerkleTree,
+  generateMerkleProof,
+  hashLeaf,
+  hexToBytes,
+  verifyMerkleProof
+} from "./chunk-E5CFQG2B.js";
+import {
+  AuthTokenClaims,
+  AuthTokenVerificationError,
+  ContentReadSubject,
+  ContentWriteSubject,
+  CredentialClaims,
+  CredentialVerificationError,
+  DFOSCredentialType,
+  VCClaim,
+  VC_TYPE_CONTENT_READ,
+  VC_TYPE_CONTENT_WRITE,
+  createAuthToken,
+  createCredential,
+  decodeCredentialUnsafe,
+  verifyAuthToken,
+  verifyCredential
+} from "./chunk-CZSEEZLL.js";
 import {
   JwsVerificationError,
   JwtVerificationError,
@@ -54,34 +68,35 @@ import {
   verifyJwt
 } from "./chunk-ZXXP5W5N.js";
 export {
-  ChainStore,
+  AuthTokenClaims,
+  AuthTokenVerificationError,
+  BeaconPayload,
   ContentOperation,
-  ContentOperationsParams,
-  ContentOperationsResponse,
+  ContentReadSubject,
+  ContentWriteSubject,
+  CredentialClaims,
+  CredentialVerificationError,
+  DFOSCredentialType,
   ED25519_PRIV_MULTICODEC,
   ED25519_PUB_MULTICODEC,
   IdentityOperation,
-  IdentityOperationsParams,
-  IdentityOperationsResponse,
   JwsVerificationError,
   JwtVerificationError,
   MultikeyPublicKey,
-  RegistryError,
-  ResolveContentResponse,
-  ResolveIdentityResponse,
-  ResolveOperationResponse,
-  SubmitContentChainRequest,
-  SubmitContentChainResponse,
-  SubmitIdentityChainRequest,
-  SubmitIdentityChainResponse,
+  VCClaim,
+  VC_TYPE_CONTENT_READ,
+  VC_TYPE_CONTENT_WRITE,
   VerifiedIdentity,
   base64urlDecode,
   base64urlEncode,
+  buildMerkleTree,
+  createAuthToken,
+  createCredential,
   createJws,
   createJwt,
   createNewEd25519Keypair,
-  createRegistryServer,
   dagCborCanonicalEncode,
+  decodeCredentialUnsafe,
   decodeJwsUnsafe,
   decodeJwtUnsafe,
   decodeMultikey,
@@ -90,17 +105,28 @@ export {
   encodeEd25519Multikey,
   generateId,
   generateIdNoPrefix,
+  generateMerkleProof,
+  hashLeaf,
+  hexToBytes,
   importEd25519Keypair,
   isCanonicallyEqual,
   isValidEd25519Signature,
   isValidId,
   normalizedId,
   parseDagCborCID,
+  signBeacon,
   signContentOperation,
+  signCountersignature,
   signIdentityOperation,
   signPayloadEd25519,
+  verifyAuthToken,
+  verifyBeacon,
+  verifyBeaconCountersignature,
   verifyContentChain,
+  verifyCountersignature,
+  verifyCredential,
   verifyIdentityChain,
   verifyJws,
-  verifyJwt
+  verifyJwt,
+  verifyMerkleProof
 };

package/dist/merkle/index.d.ts

@@ -0,0 +1,45 @@
+declare const hexToBytes: (hex: string) => Uint8Array;
+/**
+ * Hash a leaf node — SHA-256 of UTF-8 encoded contentId
+ */
+declare const hashLeaf: (contentId: string) => Promise<Uint8Array>;
+/**
+ * Build a sorted binary Merkle tree over content identifiers
+ *
+ * ContentIds are sorted lexicographically, hashed to leaves, then paired
+ * and hashed up to the root. Odd nodes are promoted to the next level.
+ *
+ * Returns null root for empty input. Deduplicates contentIds.
+ */
+declare const buildMerkleTree: (contentIds: string[]) => Promise<{
+    root: string | null;
+    leafCount: number;
+}>;
+
+interface MerkleProof {
+    /** The contentId being proven */
+    contentId: string;
+    /** Hex SHA-256 root of the tree */
+    root: string;
+    /** Sibling hashes along the path from leaf to root */
+    path: Array<{
+        /** Hex SHA-256 of sibling node */
+        hash: string;
+        /** Position of the sibling relative to the current node */
+        position: 'left' | 'right';
+    }>;
+}
+/**
+ * Generate an inclusion proof for a contentId in the set
+ *
+ * Returns null if the contentId is not in the set.
+ */
+declare const generateMerkleProof: (contentIds: string[], targetId: string) => Promise<MerkleProof | null>;
+/**
+ * Verify a Merkle inclusion proof
+ *
+ * Recomputes the root from the leaf and proof path, compares to the claimed root.
+ */
+declare const verifyMerkleProof: (proof: MerkleProof) => Promise<boolean>;
+
+export { type MerkleProof, buildMerkleTree, generateMerkleProof, hashLeaf, hexToBytes, verifyMerkleProof };

package/dist/merkle/index.js

@@ -0,0 +1,14 @@
+import {
+  buildMerkleTree,
+  generateMerkleProof,
+  hashLeaf,
+  hexToBytes,
+  verifyMerkleProof
+} from "../chunk-E5CFQG2B.js";
+export {
+  buildMerkleTree,
+  generateMerkleProof,
+  hashLeaf,
+  hexToBytes,
+  verifyMerkleProof
+};

package/examples/beacon.json

@@ -0,0 +1,14 @@
+{
+  "description": "Beacon: signed merkle root announcement with witness countersignature",
+  "type": "beacon",
+  "controllerJws": "eyJhbGciOiJFZERTQSIsInR5cCI6ImRpZDpkZm9zOmJlYWNvbiIsImtpZCI6ImRpZDpkZm9zOmUzdnZ0Y2s0MmQ0ZWFjZG56dnRybjYja2V5X3I5ZXYzNGZ2YzIzejk5OXZlYWFmdDgiLCJjaWQiOiJiYWZ5cmVpaGhvbHV1aTdzN25zNzRpZW02YWhmeHNiNDcyaHdvZ2JxZDMyeXJycDVmenRjM2t4YTVxdSJ9.eyJ2ZXJzaW9uIjoxLCJ0eXBlIjoiYmVhY29uIiwiZGlkIjoiZGlkOmRmb3M6ZTN2dnRjazQyZDRlYWNkbnp2dHJuNiIsIm1lcmtsZVJvb3QiOiI3ZTgwZDQ3ODBmNDU0ZTBmY2EwYjA5MGQ4YzY0NmY1NzJiNDkzNTRmNTQxNTQ1MzE2MDYxMDVhYWQyZmRhMjhlIiwiY3JlYXRlZEF0IjoiMjAyNi0wMy0wN1QwMDowNTowMC4wMDBaIn0._1RgZpMv63-M3ZUeTNX679xkAeX3TY0PJ0ImH7422cKA7I88Hf8bBVQMVVhP3oNdvX7i7Q4se5EP3kk5aEuxDQ",
+  "witnessJws": "eyJhbGciOiJFZERTQSIsInR5cCI6ImRpZDpkZm9zOmJlYWNvbiIsImtpZCI6ImRpZDpkZm9zOmUzdnZ0Y2s0MmQ0ZWFjZG56dnRybjYja2V5X2V6OWE4NzR0Y2tyM2R2OTMzZDNja2QiLCJjaWQiOiJiYWZ5cmVpaGhvbHV1aTdzN25zNzRpZW02YWhmeHNiNDcyaHdvZ2JxZDMyeXJycDVmenRjM2t4YTVxdSJ9.eyJ2ZXJzaW9uIjoxLCJ0eXBlIjoiYmVhY29uIiwiZGlkIjoiZGlkOmRmb3M6ZTN2dnRjazQyZDRlYWNkbnp2dHJuNiIsIm1lcmtsZVJvb3QiOiI3ZTgwZDQ3ODBmNDU0ZTBmY2EwYjA5MGQ4YzY0NmY1NzJiNDkzNTRmNTQxNTQ1MzE2MDYxMDVhYWQyZmRhMjhlIiwiY3JlYXRlZEF0IjoiMjAyNi0wMy0wN1QwMDowNTowMC4wMDBaIn0.awA8ctmLHjJCHZcH0lav7HpadkIoGiG2WR-pCf-0XfPVi9dD8Z2at0E7iAnOUnVEc5VthBo-mMklSIJFK28IDw",
+  "controllerPublicKey": "z6MkrzLMNwoJSV4P3YccWcbtk8vd9LtgMKnLeaDLUqLuASjb",
+  "witnessPublicKey": "z6MkfUd65JrAhfdgFuMCccU9ThQvjB2fJAMUHkuuajF992gK",
+  "expected": {
+    "beaconCID": "bafyreihholuui7s7ns74iem6ahfxsb472hwogbqd32yrrp5fztc3kxa5qu",
+    "did": "did:dfos:e3vvtck42d4eacdnzvtrn6",
+    "merkleRoot": "7e80d4780f454e0fca0b090d8c646f572b49354f54154531606105aad2fda28e",
+    "createdAt": "2026-03-07T00:05:00.000Z"
+  }
+}

package/examples/content-delegated.json

@@ -0,0 +1,44 @@
+{
+  "description": "Content chain: creator signs genesis, delegate signs update with write VC",
+  "type": "content-delegated",
+  "chain": [
+    "eyJhbGciOiJFZERTQSIsInR5cCI6ImRpZDpkZm9zOmNvbnRlbnQtb3AiLCJraWQiOiJkaWQ6ZGZvczplM3Z2dGNrNDJkNGVhY2RuenZ0cm42I2tleV9yOWV2MzRmdmMyM3o5OTl2ZWFhZnQ4IiwiY2lkIjoiYmFmeXJlaWFmeG9ka290ZzJpZGE1eHBjZWR2MzdrMmtqZDdqbmJ5Z2hhamhub3VvYm9qaWF4eGo1eGkifQ.eyJ2ZXJzaW9uIjoxLCJ0eXBlIjoiY3JlYXRlIiwiZGlkIjoiZGlkOmRmb3M6ZTN2dnRjazQyZDRlYWNkbnp2dHJuNiIsImRvY3VtZW50Q0lEIjoiYmFmeXJlaWduN2dmdXU1NHdvMmdlZzN0ZjV0ZXBlcGxibGt0YWhqZnpxanB1aml6YzdhMmJvZXljY2EiLCJiYXNlRG9jdW1lbnRDSUQiOm51bGwsImNyZWF0ZWRBdCI6IjIwMjYtMDMtMDdUMDA6MTA6MDAuMDAwWiIsIm5vdGUiOm51bGx9.oanyS9rbkqrxd1j8T172jVG4ILKFwW2t1JhkQLxsFqHMMURqA5Hl-0GzGFrfSkQT02Nq5RMYXzhcToqbjoV8AQ",
+    "eyJhbGciOiJFZERTQSIsInR5cCI6ImRpZDpkZm9zOmNvbnRlbnQtb3AiLCJraWQiOiJkaWQ6ZGZvczpuemtmODM4ZWZyNDI0NDMzcm4ycnprI2tleV9hOHIyNzQzNGFhcjc2YWU3MmM4NzdmIiwiY2lkIjoiYmFmeXJlaWJtMjRmNjY3cGlsNHhiZ2M3emZhM3lvdXRkandya3B4YTJjbWQ3Zm50aWxhYWljMmRlNzQifQ.eyJ2ZXJzaW9uIjoxLCJ0eXBlIjoidXBkYXRlIiwiZGlkIjoiZGlkOmRmb3M6bnprZjgzOGVmcjQyNDQzM3JuMnJ6ayIsInByZXZpb3VzT3BlcmF0aW9uQ0lEIjoiYmFmeXJlaWFmeG9ka290ZzJpZGE1eHBjZWR2MzdrMmtqZDdqbmJ5Z2hhamhub3VvYm9qaWF4eGo1eGkiLCJkb2N1bWVudENJRCI6ImJhZnlyZWlmbml5bmQ2aGV2NjQ2dW9hamFjM2VnYWs3cDJxZmhyaGhvNG1mbXBwYTNydGNqcGV0Z2RlIiwiYmFzZURvY3VtZW50Q0lEIjoiYmFmeXJlaWduN2dmdXU1NHdvMmdlZzN0ZjV0ZXBlcGxibGt0YWhqZnpxanB1aml6YzdhMmJvZXljY2EiLCJjcmVhdGVkQXQiOiIyMDI2LTAzLTA3VDAwOjExOjAwLjAwMFoiLCJub3RlIjoiZGVsZWdhdGVkIGVkaXQgYnkga2V5MyIsImF1dGhvcml6YXRpb24iOiJleUpoYkdjaU9pSkZaRVJUUVNJc0luUjVjQ0k2SW5aaksycDNkQ0lzSW10cFpDSTZJbVJwWkRwa1ptOXpPbVV6ZG5aMFkyczBNbVEwWldGalpHNTZkblJ5YmpZamEyVjVYM0k1WlhZek5HWjJZekl6ZWprNU9YWmxZV0ZtZERnaWZRLmV5SnBjM01pT2lKa2FXUTZaR1p2Y3pwbE0zWjJkR05yTkRKa05HVmhZMlJ1ZW5aMGNtNDJJaXdpYzNWaUlqb2laR2xrT21SbWIzTTZibnByWmpnek9HVm1jalF5TkRRek0zSnVNbko2YXlJc0ltVjRjQ0k2TVRjNU9EYzJNVFl3TUN3aWFXRjBJam94TnpjeU9EUXhOakF3TENKMll5STZleUpBWTI5dWRHVjRkQ0k2V3lKb2RIUndjem92TDNkM2R5NTNNeTV2Y21jdmJuTXZZM0psWkdWdWRHbGhiSE12ZGpJaVhTd2lkSGx3WlNJNld5SldaWEpwWm1saFlteGxRM0psWkdWdWRHbGhiQ0lzSWtSR1QxTkRiMjUwWlc1MFYzSnBkR1VpWFN3aVkzSmxaR1Z1ZEdsaGJGTjFZbXBsWTNRaU9uc2lZMjl1ZEdWdWRFbGtJam9pWVdNeU5ubzRlbXRyWlRZM2VqUTRZV1l6Y21ob09TSjlmWDAuZG5vN2lkcnVTMUZDVzl2ZEp5TjAyT1g0a05vcEh0RGlvRE5feHo3MzdBb2tmT1FZa0c3VHFzcXlmM3VPQ0p1MTRtZmhLbGNsb2RMT01LcVBGcGJNQkEifQ.8CiWJSk5Aw0OntAj_vxMawd4rDx42SwhlaPFpevthXVYqXLIOjEeyUO59YnbfQ4dSoz2PfEoRTrBnm4oXIPYAg"
+  ],
+  "creatorPublicKey": "z6MkrzLMNwoJSV4P3YccWcbtk8vd9LtgMKnLeaDLUqLuASjb",
+  "delegatePublicKey": "z6MkvsvmSh2dGnu2qw1Tnw7M5fz98ycfuYGxqnpfgmPkLv7o",
+  "documents": [
+    {
+      "content": {
+        "$schema": "https://schemas.dfos.com/post/v1",
+        "format": "short-post",
+        "title": "Original Post",
+        "body": "Content created by the chain owner.",
+        "createdByDID": "did:dfos:e3vvtck42d4eacdnzvtrn6"
+      },
+      "baseDocumentCID": null,
+      "createdByDID": "did:dfos:e3vvtck42d4eacdnzvtrn6",
+      "createdAt": "2026-03-07T00:10:00.000Z"
+    },
+    {
+      "content": {
+        "$schema": "https://schemas.dfos.com/post/v1",
+        "format": "short-post",
+        "title": "Delegated Edit",
+        "body": "Content updated by an authorized delegate.",
+        "createdByDID": "did:dfos:nzkf838efr424433rn2rzk"
+      },
+      "baseDocumentCID": "bafyreign7gfuu54wo2geg3tf5tepeplblktahjfzqjpujizc7a2boeycca",
+      "createdByDID": "did:dfos:nzkf838efr424433rn2rzk",
+      "createdAt": "2026-03-07T00:11:00.000Z"
+    }
+  ],
+  "authorization": "eyJhbGciOiJFZERTQSIsInR5cCI6InZjK2p3dCIsImtpZCI6ImRpZDpkZm9zOmUzdnZ0Y2s0MmQ0ZWFjZG56dnRybjYja2V5X3I5ZXYzNGZ2YzIzejk5OXZlYWFmdDgifQ.eyJpc3MiOiJkaWQ6ZGZvczplM3Z2dGNrNDJkNGVhY2RuenZ0cm42Iiwic3ViIjoiZGlkOmRmb3M6bnprZjgzOGVmcjQyNDQzM3JuMnJ6ayIsImV4cCI6MTc5ODc2MTYwMCwiaWF0IjoxNzcyODQxNjAwLCJ2YyI6eyJAY29udGV4dCI6WyJodHRwczovL3d3dy53My5vcmcvbnMvY3JlZGVudGlhbHMvdjIiXSwidHlwZSI6WyJWZXJpZmlhYmxlQ3JlZGVudGlhbCIsIkRGT1NDb250ZW50V3JpdGUiXSwiY3JlZGVudGlhbFN1YmplY3QiOnsiY29udGVudElkIjoiYWMyNno4emtrZTY3ejQ4YWYzcmhoOSJ9fX0.dno7idruS1FCW9vdJyN02OX4kNopHtDioDN_xz737AokfOQYkG7Tqsqyf3uOCJu14mfhKlclodLOMKqPFpbMBA",
+  "expected": {
+    "contentId": "ac26z8zkke67z48af3rhh9",
+    "creatorDID": "did:dfos:e3vvtck42d4eacdnzvtrn6",
+    "isDeleted": false,
+    "currentDocumentCID": "bafyreifniynd6hev646uoajac3egak7p2qfhrhho4mfmppa3rtcjpetgde",
+    "length": 2
+  }
+}

package/examples/content-delete.json

@@ -2,8 +2,8 @@
   "description": "Content chain: create + delete",
   "type": "content",
   "chain": [
-    "eyJhbGciOiJFZERTQSIsInR5cCI6ImRpZDpkZm9zOmNvbnRlbnQtb3AiLCJraWQiOiJkaWQ6ZGZvczplM3Z2dGNrNDJkNGVhY2RuenZ0cm42I2tleV9lejlhODc0dGNrcjNkdjkzM2QzY2tkIiwiY2lkIjoiYmFmeXJlaWE1ejd6eGtuYWU1ZHM3MmV1aWh1ZjJyZzNpeGw2dDRmYnpqZWZoY29nZzNucXBweW9ncXUifQ.eyJ2ZXJzaW9uIjoxLCJ0eXBlIjoiY3JlYXRlIiwiZG9jdW1lbnRDSUQiOiJiYWZ5cmVpZnB2d3Vhcm1sNjJzZm9nZHBpMnZsbHR2ZzJldjZvNHh0dzc0emZ1ZDdjcGtnNzQyNnpuZSIsImNyZWF0ZWRBdCI6IjIwMjYtMDMtMDdUMDA6MDI6MDAuMDAwWiIsIm5vdGUiOm51bGx9.t_DDkJ_TmNekIGUFO22G-W78QoE4XTg9LKQ4gzAQHaK3B6491Tir9b-wtp-hcwmENu2Hqnieqv5ASiqfFrEbDw",
-    "eyJhbGciOiJFZERTQSIsInR5cCI6ImRpZDpkZm9zOmNvbnRlbnQtb3AiLCJraWQiOiJkaWQ6ZGZvczplM3Z2dGNrNDJkNGVhY2RuenZ0cm42I2tleV9lejlhODc0dGNrcjNkdjkzM2QzY2tkIiwiY2lkIjoiYmFmeXJlaWVwamFzN3JzdHV5aWI0eDY0NHYyeXJxN3c3MmV0dG5xcWozbzdhcmRhcWN1NnVzZml6b3kifQ.eyJ2ZXJzaW9uIjoxLCJ0eXBlIjoiZGVsZXRlIiwicHJldmlvdXNPcGVyYXRpb25DSUQiOiJiYWZ5cmVpYTV6N3p4a25hZTVkczcyZXVpaHVmMnJnM2l4bDZ0NGZiemplZmhjb2dnM25xcHB5b2dxdSIsImNyZWF0ZWRBdCI6IjIwMjYtMDMtMDdUMDA6MDM6MDAuMDAwWiIsIm5vdGUiOiJyZW1vdmluZyBjb250ZW50In0.VkfUjFIz40nBOMzCTtoO1nhExzQHB4QX9PIOe2MmDwC-nilMStTwdiRcxRskPRg0gw8eM5Mz9hNQ8dZfCJ9JAg"
+    "eyJhbGciOiJFZERTQSIsInR5cCI6ImRpZDpkZm9zOmNvbnRlbnQtb3AiLCJraWQiOiJkaWQ6ZGZvczplM3Z2dGNrNDJkNGVhY2RuenZ0cm42I2tleV9lejlhODc0dGNrcjNkdjkzM2QzY2tkIiwiY2lkIjoiYmFmeXJlaWFlZGhqcTY0YWFqcHdvY2lhaGw1dzM3ajZ1b3hyNW1vam9xNWRuYWg2ZnB2eHI1ZDRseHUifQ.eyJ2ZXJzaW9uIjoxLCJ0eXBlIjoiY3JlYXRlIiwiZGlkIjoiZGlkOmRmb3M6ZTN2dnRjazQyZDRlYWNkbnp2dHJuNiIsImRvY3VtZW50Q0lEIjoiYmFmeXJlaWh6d3VvdXBmZzNkeGlwNnhtZ3pteHN5d3lpaTJqZW94eHpiZ3gzenhtMmluN2tub2kzZzQiLCJiYXNlRG9jdW1lbnRDSUQiOm51bGwsImNyZWF0ZWRBdCI6IjIwMjYtMDMtMDdUMDA6MDI6MDAuMDAwWiIsIm5vdGUiOm51bGx9.Rv6vlz5MfrwqDUrSVIGs4ZfeBbkQUSBcXhxwZ6hfudSr5MxhYl08hTqLDOA0W1NMjN0Hs0IW9jXTwLwP1dMDBg",
+    "eyJhbGciOiJFZERTQSIsInR5cCI6ImRpZDpkZm9zOmNvbnRlbnQtb3AiLCJraWQiOiJkaWQ6ZGZvczplM3Z2dGNrNDJkNGVhY2RuenZ0cm42I2tleV9lejlhODc0dGNrcjNkdjkzM2QzY2tkIiwiY2lkIjoiYmFmeXJlaWQydjUyN2lxMzZ2dnUyNWc3b3BjczJudjRjbmRhcWdrd29naHEzdHB3Z215cnBxZWVuZ2EifQ.eyJ2ZXJzaW9uIjoxLCJ0eXBlIjoiZGVsZXRlIiwiZGlkIjoiZGlkOmRmb3M6ZTN2dnRjazQyZDRlYWNkbnp2dHJuNiIsInByZXZpb3VzT3BlcmF0aW9uQ0lEIjoiYmFmeXJlaWFlZGhqcTY0YWFqcHdvY2lhaGw1dzM3ajZ1b3hyNW1vam9xNWRuYWg2ZnB2eHI1ZDRseHUiLCJjcmVhdGVkQXQiOiIyMDI2LTAzLTA3VDAwOjAzOjAwLjAwMFoiLCJub3RlIjoicmVtb3ZpbmcgY29udGVudCJ9.9DTnVeYjVV6Kc971etvWeNn9iMme7RnrRZRmYBO0iaYeePJDblL_p2uuEIuxtAQQp1bATpsQ475zpK6N2A0eAg"
   ],
   "signerPublicKey": "z6MkfUd65JrAhfdgFuMCccU9ThQvjB2fJAMUHkuuajF992gK",
   "documents": [
@@ -12,7 +12,8 @@
         "$schema": "https://schemas.dfos.com/post/v1",
         "format": "short-post",
         "title": "Hello World",
-        "body": "First post on the protocol."
+        "body": "First post on the protocol.",
+        "createdByDID": "did:dfos:e3vvtck42d4eacdnzvtrn6"
       },
       "baseDocumentCID": null,
       "createdByDID": "did:dfos:e3vvtck42d4eacdnzvtrn6",
@@ -20,7 +21,7 @@
     }
   ],
   "expected": {
-    "contentId": "67t27rzc83v7c22n9t6z7c",
+    "contentId": "a82z92a3hndk6c97thcrn8",
     "isDeleted": true,
     "currentDocumentCID": null,
     "length": 2

package/examples/content-lifecycle.json

@@ -2,8 +2,8 @@
   "description": "Content chain: create + update (with both documents)",
   "type": "content",
   "chain": [
-    "eyJhbGciOiJFZERTQSIsInR5cCI6ImRpZDpkZm9zOmNvbnRlbnQtb3AiLCJraWQiOiJkaWQ6ZGZvczplM3Z2dGNrNDJkNGVhY2RuenZ0cm42I2tleV9lejlhODc0dGNrcjNkdjkzM2QzY2tkIiwiY2lkIjoiYmFmeXJlaWE1ejd6eGtuYWU1ZHM3MmV1aWh1ZjJyZzNpeGw2dDRmYnpqZWZoY29nZzNucXBweW9ncXUifQ.eyJ2ZXJzaW9uIjoxLCJ0eXBlIjoiY3JlYXRlIiwiZG9jdW1lbnRDSUQiOiJiYWZ5cmVpZnB2d3Vhcm1sNjJzZm9nZHBpMnZsbHR2ZzJldjZvNHh0dzc0emZ1ZDdjcGtnNzQyNnpuZSIsImNyZWF0ZWRBdCI6IjIwMjYtMDMtMDdUMDA6MDI6MDAuMDAwWiIsIm5vdGUiOm51bGx9.t_DDkJ_TmNekIGUFO22G-W78QoE4XTg9LKQ4gzAQHaK3B6491Tir9b-wtp-hcwmENu2Hqnieqv5ASiqfFrEbDw",
-    "eyJhbGciOiJFZERTQSIsInR5cCI6ImRpZDpkZm9zOmNvbnRlbnQtb3AiLCJraWQiOiJkaWQ6ZGZvczplM3Z2dGNrNDJkNGVhY2RuenZ0cm42I2tleV9lejlhODc0dGNrcjNkdjkzM2QzY2tkIiwiY2lkIjoiYmFmeXJlaWJiNGxzdnFtejRqNzZyc3Zoa3F3M3YyYjR2cDIzdDdkaW1tNnZsNWc1d2xuaW52a2VteHEifQ.eyJ2ZXJzaW9uIjoxLCJ0eXBlIjoidXBkYXRlIiwicHJldmlvdXNPcGVyYXRpb25DSUQiOiJiYWZ5cmVpYTV6N3p4a25hZTVkczcyZXVpaHVmMnJnM2l4bDZ0NGZiemplZmhjb2dnM25xcHB5b2dxdSIsImRvY3VtZW50Q0lEIjoiYmFmeXJlaWV1bzI2emZtanh3cG13NWprNmJxenFodml2eGNiY2tneHR5ZXVjN3lwZjNwNHNpaGdxNHEiLCJjcmVhdGVkQXQiOiIyMDI2LTAzLTA3VDAwOjAzOjAwLjAwMFoiLCJub3RlIjoiZWRpdGVkIHRpdGxlIGFuZCBib2R5In0.v2BnXflq3lAiDqCpCuAoXUURY1scOGb9AMHHfCMxj1bD0GJOgdV_klv7KfqDLlSfF3Sn6CK1RDeLniF_UTKXAQ"
+    "eyJhbGciOiJFZERTQSIsInR5cCI6ImRpZDpkZm9zOmNvbnRlbnQtb3AiLCJraWQiOiJkaWQ6ZGZvczplM3Z2dGNrNDJkNGVhY2RuenZ0cm42I2tleV9lejlhODc0dGNrcjNkdjkzM2QzY2tkIiwiY2lkIjoiYmFmeXJlaWFlZGhqcTY0YWFqcHdvY2lhaGw1dzM3ajZ1b3hyNW1vam9xNWRuYWg2ZnB2eHI1ZDRseHUifQ.eyJ2ZXJzaW9uIjoxLCJ0eXBlIjoiY3JlYXRlIiwiZGlkIjoiZGlkOmRmb3M6ZTN2dnRjazQyZDRlYWNkbnp2dHJuNiIsImRvY3VtZW50Q0lEIjoiYmFmeXJlaWh6d3VvdXBmZzNkeGlwNnhtZ3pteHN5d3lpaTJqZW94eHpiZ3gzenhtMmluN2tub2kzZzQiLCJiYXNlRG9jdW1lbnRDSUQiOm51bGwsImNyZWF0ZWRBdCI6IjIwMjYtMDMtMDdUMDA6MDI6MDAuMDAwWiIsIm5vdGUiOm51bGx9.Rv6vlz5MfrwqDUrSVIGs4ZfeBbkQUSBcXhxwZ6hfudSr5MxhYl08hTqLDOA0W1NMjN0Hs0IW9jXTwLwP1dMDBg",
+    "eyJhbGciOiJFZERTQSIsInR5cCI6ImRpZDpkZm9zOmNvbnRlbnQtb3AiLCJraWQiOiJkaWQ6ZGZvczplM3Z2dGNrNDJkNGVhY2RuenZ0cm42I2tleV9lejlhODc0dGNrcjNkdjkzM2QzY2tkIiwiY2lkIjoiYmFmeXJlaWg2ZTVjYmppdHBvemh6aGdtZmt0bWlvaG14eW4zdWN3aHFkM21qaXhpenZ3bWxodjdobTQifQ.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.46H3WBKigCzUrIOvS2ekYJFdK1OeLhqvcZTj8FBqFNKO1ivs3oC0ui_hzTKkKO-8uevMjf9-k0GOjyw2u16PDA"
   ],
   "signerPublicKey": "z6MkfUd65JrAhfdgFuMCccU9ThQvjB2fJAMUHkuuajF992gK",
   "documents": [
@@ -12,7 +12,8 @@
         "$schema": "https://schemas.dfos.com/post/v1",
         "format": "short-post",
         "title": "Hello World",
-        "body": "First post on the protocol."
+        "body": "First post on the protocol.",
+        "createdByDID": "did:dfos:e3vvtck42d4eacdnzvtrn6"
       },
       "baseDocumentCID": null,
       "createdByDID": "did:dfos:e3vvtck42d4eacdnzvtrn6",
@@ -23,17 +24,18 @@
         "$schema": "https://schemas.dfos.com/post/v1",
         "format": "short-post",
         "title": "Hello World (edited)",
-        "body": "Updated content."
+        "body": "Updated content.",
+        "createdByDID": "did:dfos:e3vvtck42d4eacdnzvtrn6"
       },
-      "baseDocumentCID": "bafyreifpvwuarml62sfogdpi2vlltvg2ev6o4xtw74zfud7cpkg7426zne",
+      "baseDocumentCID": "bafyreihzwuoupfg3dxip6xmgzmxsywyii2jeoxxzbgx3zxm2in7knoi3g4",
       "createdByDID": "did:dfos:e3vvtck42d4eacdnzvtrn6",
       "createdAt": "2026-03-07T00:03:00.000Z"
     }
   ],
   "expected": {
-    "contentId": "67t27rzc83v7c22n9t6z7c",
+    "contentId": "a82z92a3hndk6c97thcrn8",
     "isDeleted": false,
-    "currentDocumentCID": "bafyreieuo26zfmjxwpmw5jk6bqzqhvivxcbckgxtyeuc7ypf3p4sihgq4q",
+    "currentDocumentCID": "bafyreidh7e36cvwy3uw5ypitcqk7uoktbkkkj7e6hxhky4o75rxn7kxilu",
     "length": 2
   }
 }

package/examples/credential-read.json

@@ -0,0 +1,12 @@
+{
+  "description": "VC-JWT: DFOSContentRead credential",
+  "type": "credential",
+  "credential": "eyJhbGciOiJFZERTQSIsInR5cCI6InZjK2p3dCIsImtpZCI6ImRpZDpkZm9zOmUzdnZ0Y2s0MmQ0ZWFjZG56dnRybjYja2V5X3I5ZXYzNGZ2YzIzejk5OXZlYWFmdDgifQ.eyJpc3MiOiJkaWQ6ZGZvczplM3Z2dGNrNDJkNGVhY2RuenZ0cm42Iiwic3ViIjoiZGlkOmRmb3M6bnprZjgzOGVmcjQyNDQzM3JuMnJ6ayIsImV4cCI6MTc5ODc2MTYwMCwiaWF0IjoxNzcyODQxNjAwLCJ2YyI6eyJAY29udGV4dCI6WyJodHRwczovL3d3dy53My5vcmcvbnMvY3JlZGVudGlhbHMvdjIiXSwidHlwZSI6WyJWZXJpZmlhYmxlQ3JlZGVudGlhbCIsIkRGT1NDb250ZW50UmVhZCJdLCJjcmVkZW50aWFsU3ViamVjdCI6e319fQ.zGC2aUOgqXlVwTxSFSa_6g_gGEDEtS5YMLfIJNyPC9hn5IcbHtHxET8MqOKmFfKm9xJgA8uyDv12sr_D3hF9DQ",
+  "issuerPublicKey": "z6MkrzLMNwoJSV4P3YccWcbtk8vd9LtgMKnLeaDLUqLuASjb",
+  "subjectPublicKey": "z6MkvsvmSh2dGnu2qw1Tnw7M5fz98ycfuYGxqnpfgmPkLv7o",
+  "expected": {
+    "iss": "did:dfos:e3vvtck42d4eacdnzvtrn6",
+    "sub": "did:dfos:nzkf838efr424433rn2rzk",
+    "vcType": "DFOSContentRead"
+  }
+}

package/examples/credential-write.json

@@ -0,0 +1,14 @@
+{
+  "description": "VC-JWT: DFOSContentWrite credential (broad + narrowed)",
+  "type": "credential",
+  "broadCredential": "eyJhbGciOiJFZERTQSIsInR5cCI6InZjK2p3dCIsImtpZCI6ImRpZDpkZm9zOmUzdnZ0Y2s0MmQ0ZWFjZG56dnRybjYja2V5X3I5ZXYzNGZ2YzIzejk5OXZlYWFmdDgifQ.eyJpc3MiOiJkaWQ6ZGZvczplM3Z2dGNrNDJkNGVhY2RuenZ0cm42Iiwic3ViIjoiZGlkOmRmb3M6bnprZjgzOGVmcjQyNDQzM3JuMnJ6ayIsImV4cCI6MTc5ODc2MTYwMCwiaWF0IjoxNzcyODQxNjAwLCJ2YyI6eyJAY29udGV4dCI6WyJodHRwczovL3d3dy53My5vcmcvbnMvY3JlZGVudGlhbHMvdjIiXSwidHlwZSI6WyJWZXJpZmlhYmxlQ3JlZGVudGlhbCIsIkRGT1NDb250ZW50V3JpdGUiXSwiY3JlZGVudGlhbFN1YmplY3QiOnt9fX0.Oj0wl8jjzJtT7nluaTa3e9UgdDBnAYagTRs5ZnlW3Dvfxw8BUkEuZ2o_gu80QBl1cHUUxLwmc3-lToPPT7iMCQ",
+  "narrowCredential": "eyJhbGciOiJFZERTQSIsInR5cCI6InZjK2p3dCIsImtpZCI6ImRpZDpkZm9zOmUzdnZ0Y2s0MmQ0ZWFjZG56dnRybjYja2V5X3I5ZXYzNGZ2YzIzejk5OXZlYWFmdDgifQ.eyJpc3MiOiJkaWQ6ZGZvczplM3Z2dGNrNDJkNGVhY2RuenZ0cm42Iiwic3ViIjoiZGlkOmRmb3M6bnprZjgzOGVmcjQyNDQzM3JuMnJ6ayIsImV4cCI6MTc5ODc2MTYwMCwiaWF0IjoxNzcyODQxNjAwLCJ2YyI6eyJAY29udGV4dCI6WyJodHRwczovL3d3dy53My5vcmcvbnMvY3JlZGVudGlhbHMvdjIiXSwidHlwZSI6WyJWZXJpZmlhYmxlQ3JlZGVudGlhbCIsIkRGT1NDb250ZW50V3JpdGUiXSwiY3JlZGVudGlhbFN1YmplY3QiOnsiY29udGVudElkIjoiYTgyejkyYTNobmRrNmM5N3RoY3JuOCJ9fX0.XecRGtsjHJbE5S2AxNLkfvnHof_t7gZRe_qrbBCLogvzPule51CWVWFsgJctgWu2jEPGiFxAedPOuuhXitSLBA",
+  "issuerPublicKey": "z6MkrzLMNwoJSV4P3YccWcbtk8vd9LtgMKnLeaDLUqLuASjb",
+  "subjectPublicKey": "z6MkvsvmSh2dGnu2qw1Tnw7M5fz98ycfuYGxqnpfgmPkLv7o",
+  "expected": {
+    "iss": "did:dfos:e3vvtck42d4eacdnzvtrn6",
+    "sub": "did:dfos:nzkf838efr424433rn2rzk",
+    "vcType": "DFOSContentWrite",
+    "narrowContentId": "a82z92a3hndk6c97thcrn8"
+  }
+}

package/examples/merkle-tree.json

@@ -0,0 +1,28 @@
+{
+  "description": "Merkle tree: 5 content IDs → sorted → leaf hashes → root, with inclusion proof for \"charlie\"",
+  "type": "merkle",
+  "contentIds": ["alpha", "bravo", "charlie", "delta", "echo"],
+  "expected": {
+    "sortedIds": ["alpha", "bravo", "charlie", "delta", "echo"],
+    "root": "7e80d4780f454e0fca0b090d8c646f572b49354f54154531606105aad2fda28e",
+    "leafCount": 5,
+    "charlieProof": {
+      "contentId": "charlie",
+      "root": "7e80d4780f454e0fca0b090d8c646f572b49354f54154531606105aad2fda28e",
+      "path": [
+        {
+          "hash": "4f4a9410ffcdf895c4adb880659e9b5c0dd1f23a30790684340b3eaacb045398",
+          "position": "right"
+        },
+        {
+          "hash": "90d39555bb3c223e12f5a375c3011d2462fe2e1e36b8416a0b623d5831a9b4f3",
+          "position": "left"
+        },
+        {
+          "hash": "092c79e8f80e559e404bcf660c48f3522b67aba9ff1484b0367e1a4ddef7431d",
+          "position": "right"
+        }
+      ]
+    }
+  }
+}

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@metalabel/dfos-protocol",
-  "version": "0.0.3",
+  "version": "0.2.0",
   "type": "module",
-  "description": "DFOS Protocol — Ed25519 signed chain primitives, registry, and verification",
+  "description": "DFOS Protocol — Ed25519 signed chain primitives, beacons, merkle trees, and verification",
   "license": "MIT",
   "author": "Metalabel <hello@metalabel.com> (https://metalabel.com)",
   "repository": {
@@ -37,9 +37,13 @@
       "import": "./dist/chain/index.js",
       "types": "./dist/chain/index.d.ts"
     },
-    "./registry": {
-      "import": "./dist/registry/index.js",
-      "types": "./dist/registry/index.d.ts"
+    "./merkle": {
+      "import": "./dist/merkle/index.js",
+      "types": "./dist/merkle/index.d.ts"
+    },
+    "./credentials": {
+      "import": "./dist/credentials/index.js",
+      "types": "./dist/credentials/index.d.ts"
     }
   },
   "files": [
@@ -49,8 +53,6 @@
     "PROTOCOL.md",
     "DID-METHOD.md",
     "CONTENT-MODEL.md",
-    "REGISTRY-API.md",
-    "openapi.yaml",
     "LICENSE",
     "README.md"
   ],
@@ -58,7 +60,6 @@
     "@ipld/dag-cbor": "^9.2.5",
     "@noble/curves": "^2.0.1",
     "@noble/hashes": "^2.0.1",
-    "hono": "^4.12.3",
     "multiformats": "^13.4.2",
     "zod": "^4.3.6"
   },
@@ -75,6 +76,6 @@
     "clean": "rm -rf dist",
     "typecheck": "tsc --noEmit",
     "test": "vitest run",
-    "generate-examples": "vitest run --config vitest.scripts.config.ts"
+    "generate-examples": "tsx scripts/generate-examples.ts"
   }
 }

package/schemas/manifest.v1.json

@@ -0,0 +1,29 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://schemas.dfos.com/manifest/v1",
+  "title": "Manifest",
+  "description": "A manifest — a named map of protocol object references for semantic navigation. Keys are path-like labels. Values are protocol references: content chain identifiers (22-char bare hash), DIDs (did:dfos:...), or CIDs (bafyrei...). The document layer of the dark forest. Discovery is social or out-of-band.",
+  "type": "object",
+  "required": ["$schema", "entries"],
+  "properties": {
+    "$schema": {
+      "const": "https://schemas.dfos.com/manifest/v1"
+    },
+    "entries": {
+      "type": "object",
+      "propertyNames": {
+        "pattern": "^[a-z0-9][a-z0-9._/-]*[a-z0-9]$",
+        "minLength": 2,
+        "maxLength": 128
+      },
+      "additionalProperties": {
+        "type": "string",
+        "pattern": "^[a-z0-9][a-z0-9:._/-]*$",
+        "minLength": 1,
+        "maxLength": 512
+      },
+      "description": "Named entries mapping path-like keys to protocol object references (contentId, DID, or CID)."
+    }
+  },
+  "additionalProperties": false
+}

package/schemas/post.v1.json

@@ -35,6 +35,11 @@
       "type": "array",
       "items": { "type": "string" },
       "description": "Topic names this post belongs to. Stored as names for portability."
+    },
+    "createdByDID": {
+      "type": "string",
+      "pattern": "^did:",
+      "description": "DID of the identity that authored this content. Optional — omit when the signer IS the author."
     }
   },
   "additionalProperties": false,

package/schemas/profile.v1.json

@@ -28,6 +28,11 @@
     "background": {
       "$ref": "#/$defs/media",
       "description": "Background image."
+    },
+    "createdByDID": {
+      "type": "string",
+      "pattern": "^did:",
+      "description": "DID of the identity that authored this content. Optional — omit when the signer IS the author."
     }
   },
   "additionalProperties": false,