@metalabel/dfos-web-relay 0.9.0 → 0.11.0

package/dist/serve.js

@@ -1,11 +1,38 @@
 // src/serve.ts
 import { createServer } from "http";
+var MAX_STREAM_BODY_BYTES = (16 << 20) + (1 << 20);
 var serve = (app, options = {}) => {
   const { port = 4444, hostname } = options;
   const server = createServer(async (req, res) => {
     const url = new URL(req.url ?? "/", `http://${hostname ?? "localhost"}:${port}`);
+    const reject413 = () => {
+      if (res.headersSent) return;
+      res.writeHead(413, {
+        "content-type": "application/json",
+        connection: "close"
+      });
+      res.end(JSON.stringify({ error: "request body too large" }));
+    };
+    const declaredLength = Number(req.headers["content-length"]);
+    if (Number.isFinite(declaredLength) && declaredLength > MAX_STREAM_BODY_BYTES) {
+      reject413();
+      return;
+    }
     const chunks = [];
-    for await (const chunk of req) chunks.push(chunk);
+    let total = 0;
+    let aborted = false;
+    for await (const chunk of req) {
+      total += chunk.length;
+      if (total > MAX_STREAM_BODY_BYTES) {
+        aborted = true;
+        break;
+      }
+      chunks.push(chunk);
+    }
+    if (aborted) {
+      reject413();
+      return;
+    }
     const body = Buffer.concat(chunks);
     const headers = new Headers();
     for (const [k, v] of Object.entries(req.headers)) {

package/openapi.yaml

@@ -1,13 +1,13 @@
 openapi: 3.1.0
 info:
   title: DFOS Web Relay
-  version: 0.1.0
+  version: 0.9.0
   description: |
     HTTP relay for the DFOS protocol. Receives, verifies, stores, and serves
-    identity chains, content chains, beacons, countersignatures, and content blobs.
+    identity chains, content chains, countersignatures, and content blobs.
 
     Two data planes:
-    - **Proof plane** (public): signed chain operations, beacons, countersignatures
+    - **Proof plane** (public): signed chain operations, countersignatures
     - **Content plane** (authenticated): raw content blobs gated by DID auth tokens and DFOS credentials
 
 servers:
@@ -66,7 +66,7 @@ paths:
       summary: Submit operations for ingestion
       description: |
         Accept a batch of JWS tokens — identity operations, content operations,
-        beacons, and countersignatures. The relay classifies, dependency-sorts,
+        and countersignatures. The relay classifies, dependency-sorts,
         verifies, and stores each token.
       tags: [Proof Plane]
       requestBody:
@@ -185,7 +185,7 @@ paths:
           required: true
           schema:
             type: string
-          description: Content identifier (22-char hash)
+          description: Content identifier (31-char hash)
       responses:
         '200':
           description: Content chain state and log
@@ -416,6 +416,62 @@ paths:
         '501':
           description: Documents capability not enabled
 
+  /log:
+    get:
+      operationId: getLog
+      summary: Paginated global log of all accepted operations
+      description: |
+        Returns every operation the relay has accepted — across all identity and
+        content chains, plus countersignatures — in acceptance order.
+        Cursor-based pagination. Used by peer relays to background-sync. Available
+        only when the relay advertises the `log` capability; otherwise returns 501.
+      tags: [Proof Plane]
+      parameters:
+        - name: after
+          in: query
+          required: false
+          schema:
+            type: string
+          description: CID cursor — start after this operation CID
+        - name: limit
+          in: query
+          required: false
+          schema:
+            type: integer
+            default: 100
+            maximum: 1000
+      responses:
+        '200':
+          description: Global log entries
+          content:
+            application/json:
+              schema:
+                type: object
+                required: [entries, cursor]
+                properties:
+                  entries:
+                    type: array
+                    items:
+                      type: object
+                      required: [cid, jwsToken, kind, chainId]
+                      properties:
+                        cid:
+                          type: string
+                        jwsToken:
+                          type: string
+                        kind:
+                          type: string
+                          enum:
+                            [identity-op, content-op, artifact, countersign, revocation, credential]
+                        chainId:
+                          type: string
+                          description: Chain identifier (DID or contentId)
+                  cursor:
+                    type: string
+                    nullable: true
+        '501':
+          description: Global log capability not enabled
+
   /identities/{did}/log:
     get:
       operationId: getIdentityLog
@@ -483,7 +539,7 @@ paths:
           required: true
           schema:
             type: string
-          description: Content identifier (22-char hash)
+          description: Content identifier (31-char hash)
         - name: after
           in: query
           required: false
@@ -525,7 +581,7 @@ paths:
   /countersignatures/{cid}:
     get:
       operationId: getCountersignaturesByCID
-      summary: Get countersignatures for any CID (operation or beacon)
+      summary: Get countersignatures for an operation CID
       tags: [Proof Plane]
       parameters:
         - name: cid
@@ -533,7 +589,7 @@ paths:
           required: true
           schema:
             type: string
-          description: CIDv1 of the operation or beacon
+          description: CIDv1 of the operation
       responses:
         '200':
           description: Countersignatures
@@ -553,27 +609,6 @@ paths:
         '404':
           $ref: '#/components/responses/NotFound'
 
-  /beacons/{did}:
-    get:
-      operationId: getBeacon
-      summary: Get the latest beacon for a DID
-      tags: [Proof Plane]
-      parameters:
-        - name: did
-          in: path
-          required: true
-          schema:
-            type: string
-      responses:
-        '200':
-          description: Latest beacon
-          content:
-            application/json:
-              schema:
-                $ref: '#/components/schemas/BeaconResponse'
-        '404':
-          $ref: '#/components/responses/NotFound'
-
 components:
   securitySchemes:
     BearerAuth:
@@ -597,7 +632,7 @@ components:
           description: Error message if rejected
         kind:
           type: string
-          enum: [identity-op, content-op, beacon, artifact, countersign, revocation, credential]
+          enum: [identity-op, content-op, artifact, countersign, revocation, credential]
         chainId:
           type: string
           description: Chain identifier (DID or contentId)
@@ -612,7 +647,7 @@ components:
           type: string
         chainType:
           type: string
-          enum: [identity, content, artifact, beacon, countersign, revocation, credential]
+          enum: [identity, content, artifact, countersign, revocation, credential]
         chainId:
           type: string
 
@@ -627,7 +662,7 @@ components:
           description: CID of the current head operation
         state:
           type: object
-          required: [did, isDeleted, authKeys, assertKeys, controllerKeys]
+          required: [did, isDeleted, authKeys, assertKeys, controllerKeys, services]
           properties:
             did:
               type: string
@@ -645,6 +680,22 @@ components:
               type: array
               items:
                 $ref: '#/components/schemas/MultikeyPublicKey'
+            services:
+              type: array
+              description: >-
+                Resolved discovery vocabulary (controller-signed). Each entry has
+                a common envelope {id, type}; recognized types DfosRelay and
+                ContentAnchor carry type-specific fields. The namespace is open —
+                unrecognized types are preserved verbatim.
+              items:
+                type: object
+                required: [id, type]
+                properties:
+                  id:
+                    type: string
+                  type:
+                    type: string
+                additionalProperties: true
 
     ContentChainResponse:
       type: object
@@ -679,23 +730,6 @@ components:
             creatorDID:
               type: string
 
-    BeaconResponse:
-      type: object
-      required: [did, jwsToken, beaconCID, manifestContentId, createdAt]
-      properties:
-        did:
-          type: string
-        jwsToken:
-          type: string
-        beaconCID:
-          type: string
-        manifestContentId:
-          type: string
-          description: Content ID of the manifest chain
-        createdAt:
-          type: string
-          format: date-time
-
     MultikeyPublicKey:
       type: object
       required: [id, type, publicKeyMultibase]
@@ -745,6 +779,6 @@ tags:
   - name: Meta
     description: Relay metadata and discovery
   - name: Proof Plane
-    description: Public routes for signed chain operations, beacons, and countersignatures
+    description: Public routes for signed chain operations and countersignatures
   - name: Content Plane
     description: Authenticated routes for content blob storage and retrieval

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@metalabel/dfos-web-relay",
-  "version": "0.9.0",
+  "version": "0.11.0",
   "type": "module",
-  "description": "DFOS Web Relay — verifying HTTP relay for identity chains, content chains, beacons, and content blobs",
+  "description": "DFOS Web Relay — verifying HTTP relay for identity chains, content chains, and content blobs",
   "license": "MIT",
   "author": "Metalabel <hello@metalabel.com> (https://metalabel.com)",
   "repository": {
@@ -41,18 +41,18 @@
     "README.md"
   ],
   "dependencies": {
-    "hono": "^4.12.9",
-    "zod": "^4.3.6"
+    "hono": "^4.12.23",
+    "zod": "^4.4.3"
   },
   "peerDependencies": {
-    "@metalabel/dfos-protocol": "^0.6.0"
+    "@metalabel/dfos-protocol": "^0.11.0"
   },
   "devDependencies": {
     "@types/node": "^24.10.4",
     "tsup": "^8.5.1",
-    "tsx": "^4.20.3",
-    "vitest": "^4.1.2",
-    "@metalabel/dfos-protocol": "0.9.0"
+    "tsx": "^4.22.4",
+    "vitest": "^4.1.8",
+    "@metalabel/dfos-protocol": "0.11.0"
   },
   "scripts": {
     "build": "tsup",