Packages

@paramira/blob-store

A content-addressed BlobStore contract (put/get/has by sha256) with memory, relay-HTTP, local-disk and S3-compatible backends, an AES-GCM encrypting wrapper and replication across backends. Every read is re-verified against its hash.

License: MIT. Generic: content-addressed put/get/has contract with memory, relay-HTTP, local-disk and S3 backends, AES-GCM wrapper, replication.

Source: packages/blob-store

What it does

A content-addressed BlobStore contract (put/get/has by sha256) with pluggable backends. You encrypt the bytes before storing them, so a backend (relay, local disk, a bucket) only ever holds ciphertext plus the hash that ciphertext already implies.

Every get() re-hashes what the backend returned, and a mismatch counts as "not found". The hash is the only thing the caller trusts, so a buggy or hostile provider can't substitute different bytes.

Used by

Apps: abantu, companion, iwacu-nuxt

Packages: capture-inbox, family

Uses

No dependencies.

Entry points

@paramira/blob-store
@paramira/blob-store/fs
@paramira/blob-store/s3

blind-tokens

Anonymous, rate-limited, publicly verifiable membership tokens: an issuer signs a blinded message once per member per epoch (RFC 9474 blind RSA, via @cloudflare/blindrsa-ts), the member unblinds a token the issuer can't link back to them, and anyone can verify it against the epoch's public key. Plus an issuance ledger that refuses a second token and repeats a lost one.

broadcast-medium

In-process simulated physical-radio broadcast medium (BLE/LoRa/WiFi Direct) with optional DTN epidemic-buffering, for testing transports that assume one.