storacha-space-setup

Provision Storacha spaces, UCAN delegations, and Lit AES-256-GCM encryption for worker profiles.

1|Updated Feb 8, 2026
One-click install
npx skills add https://github.com/leomanza/delibera.xyz --skill storacha-space-setup
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: storacha-space-setup
Source: https://github.com/leomanza/delibera.xyz/tree/main/.claude/skills/storacha-space-setup
Command: npx skills add https://github.com/leomanza/delibera.xyz --skill storacha-space-setup

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

It prevents Delibera worker agents from starting with a blank identity by guiding you through provisioning a new Storacha space, creating correct UCAN delegation capabilities, and configuring Lit + AES-256-GCM encryption so profile data can be read and persisted reliably across Ensue (hot) and Storacha (warm).

Core Features & Use Cases

  • Storacha space provisioning: Create a dedicated space and provision it for uploads with the correct provider.
  • UCAN delegation setup: Generate a delegation proof with all required capabilities, including the critical space/content/decrypt capability needed for reads.
  • Two-tier encrypted identity + profile migration: Seed and migrate worker profile data into both Ensue (AES-256-GCM cache) and Storacha+Lit (encrypted backup), including CID pointer writes and idempotent re-runs.
  • Operational troubleshooting: Diagnose common delegation, gateway, and encryption/auth issues (e.g., missing capability, stale Lit auth storage, legacy CID entries).

Quick Start

Ask the skill to help you create and provision a new Storacha space for a Delibera worker, generate the UCAN delegation with decryption capability, and run the profile migration so the worker loads a non-blank identity.

Frequently Asked Questions about storacha-space-setup

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I set up Storacha encrypted storage for a new worker agent?

To set up Storacha encrypted storage, provision a Storacha space DID, generate a UCAN delegation with the `space/content/decrypt` capability, configure Lit Protocol auth storage, and run an idempotent migration script to seed AES-256-GCM encrypted profile data into Ensue and Storacha.

Why does my worker agent load with a blank identity despite having Storacha configured?

A worker agent loads with a blank identity when the UCAN delegation lacks the `space/content/decrypt` capability or Lit Protocol auth storage is stale. You must provision correct UCAN delegations and run the AES-256-GCM profile migration script to ensure persistent identity data.

How does two-tier encrypted identity migration work with Ensue and Storacha?

Two-tier encrypted identity migration works by seeding profile data into Ensue as an AES-256-GCM hot cache and writing encrypted backups with CID pointers to Storacha. Lit Protocol manages the encryption context, ensuring data persists reliably across both storage tiers.

Can I re-run the profile migration script if a Storacha delegation fails?

Yes, you can re-run the profile migration script because it is designed to be idempotent. Re-running safely handles existing Ensue cache entries and Storacha CID pointers, replacing or updating worker spaces without duplicating encrypted profile sections.

How do I troubleshoot missing decryption capabilities in my Storacha worker space?

To troubleshoot missing decryption capabilities, verify the UCAN delegation proof includes `space/content/decrypt`, check for stale Lit Protocol auth storage configurations, and clear any legacy CID entries blocking the AES-256-GCM cache from reading encrypted profile sections.