Lyra Sync API

Stateless post-quantum sync relay for Inner Breeze. The server stores public keys and mirrored app data, never client private keys.

OpenAPI JSON ยท Health check

GET/api/v1/sync/challenge?user_id=<sha256-public-key-hex>

Issues a single-use 32-byte challenge nonce encoded as lowercase hex.

POST/api/v1/sync

Applies a signed JSON snapshot containing preferences, habits, habit days, sessions, and rounds.

DELETE/api/v1/account

Deletes all remote data for the signed sync account.

POST/api/v1/account/delete-with-key

Deletes all remote data for the sync account after verifying an exported inbe-sync.key.

Signed Message

inbe-sync-v1
<HTTP_METHOD>
<HTTP_PATH>
<sha256 hex of exact raw request body bytes>
<challenge nonce hex>

Signed requests use X-Inbe-User, X-Inbe-Signature, and Content-Type: application/json.