All 5 phases implemented and tested
Phase 1: MIT crypto primitives — AES-256-GCM, x25519 ECIES, HKDF key
hierarchy, doc key sharing. All benchmarks pass, ~2ms encrypt+share.
Phase 2: Encrypted IPFS storage — encrypt→upload→download→decrypt with
KuboBackend for self-hosted kubo. TipTap image extension with CID-based
attributes and ImageCache. 5/5 mock tests + 2/2 live tests pass.
Phase 3: Collab server + IPFS deployed on Netcup — Fileverse
collaboration-server (Y.js WebSocket relay + MongoDB) and kubo IPFS node
running via Docker Compose with Traefik routing through CF tunnel.
Phase 4: dSheet embed POC — React wrapper for @fileverse-dev/dsheet with
collaborative mode toggle, IndexedDB persistence, Vite dev server.
Phase 5: UCAN auth bridge — Ed25519 key generation, did:key encoding,
JWT signing/verification, collaboration tokens, owner tokens, delegated
access with proof chains. 9/9 tests pass. Zero external UCAN deps.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Jeff Emmett
b19d2c1ad7