Daochi

Lists registered apps, collection prefixes, visibility classes, and capabilities.

Registers or updates an app when the admin token is set and X-Daochi-Admin matches it. X-Ksync-Admin remains accepted for compatibility.

Issues a single-use 32-byte challenge nonce encoded as lowercase hex.

Verifies the challenge signature and returns a cacheable bearer token plus server clock time.

Upgrades to a WebSocket event stream authenticated with Authorization: Bearer <token>, or browser subprotocols daochi-sync-v1, bearer.<token>.

Applies typed local changes or stores an encrypted envelope, then returns remote changes newer than the requested server version.

Returns bearer-authenticated sync state, table counts, compaction position, legacy client hints, and recent sync audit metadata.

Creates a short-lived signed pairing payload with explicit replication scope.

Verifies and consumes a pairing invite, then pins the peer identity and approved scope.

Authenticates the accepting node back to the inviter and completes reciprocal trust.

Lists paired nodes and their approved addresses and replication policies.

Creates a local trust-space authority for signed mesh-native names.

Signs or updates a name claim in a locally controlled trust space.

Resolves a trust-space name to signed service endpoints.

Exports policy-filtered signed app manifests, encrypted records, deletion tombstones, and names to an authenticated peer node.

Verifies and imports policy-filtered app manifests, encrypted records, deletion tombstones, and names from an authenticated peer node.

Returns the configured token issuer key.

Lists configured token products and direct payment prices when direct purchases are enabled.

Returns the bearer-authenticated account's token balance computed from signed ledger events.

Returns the account's Dew balance and full newest-first activity history across every app for the profile's Dew screen.

Debits tokens with app policy and idempotency enforcement.

Sends Dew to a friend; the debit and the friend's credit commit together.

Lists the game rewards the node gives and their Dew.

Claims a game reward for the account; each reward credits an account once.

Creates a bearer-authenticated invoice for a configured token product.

Returns invoice status and settles a confirmed payment against the authenticated account.

Returns the authenticated account's permanent Monero purchase address.

Resolves an alias or public ID and returns the recipient's permanent Monero gift address.

Returns the authenticated account's detected and credited Monero deposits.

Lists or creates bearer-authenticated grants for sharing registered app collection prefixes across apps.

Returns encrypted records from a granted collection prefix for cross-app use.

Bearer-authenticated friend requests, accepted friends, and app-neutral shared profile stats.

Publishes level collections and finds the newest public ones or the ones an author lets the caller see.

Fetches a visible publication with its document, or lets its author unpublish it.

Deletes all remote data for the signed sync account without uploading the private key. It is kept on hold for 30 days, restorable with the same key, then deleted permanently.

Legacy signed deletion endpoint kept for older clients.

Deletes all remote data for the sync account after verifying exported account key text, with the same 30-day hold.