Skip to main content

CHIP-0035 store-coin spends & delegation

A store is a CHIP-0035 DataLayer singleton on Chia mainnet: minting it and advancing its root are store-coin spends. This page is the protocol-level view of how those spends are built and how authority over a store is delegated.

The canonical wasm builder​

Every store-coin spend — mint, root advance (commit), metadata update, melt, ownership/delegation change — is constructed by the canonical CHIP-0035 wasm builder (@dignetwork/chip35-dl-coin-wasm, re-exported by the SDK at /spend). It is the single source of spend bundles across the CLI, the hub, and any integrating app, so every surface produces byte-identical spends.

The split is always build (wasm) → sign (wallet) → broadcast. Nothing hand-rolls a puzzle or coin spell. → Building spends

The capsule price in $DIG is included atomically in the same spend as the root advance — there is no separate payment transaction. → On-chain anchoring → costs

Delegation — admin / writer / oracle​

CHIP-0035 supports delegating authority over a store's singleton to additional keys, in roles:

  • admin — full control, including managing other delegates and ownership.
  • writer — may advance the store's root (publish capsules) but not change ownership/delegation.
  • oracle — read/attestation authority for metadata, without write authority.

Delegation is itself an on-chain store-coin spend, built through the same wasm — never a hand-written puzzle.

What delegation powers​

  • Teams / orgs — share write access to a store across people without sharing one private key; revoke a member by removing their delegated key.
  • CI deploy tokens — a deploy token is a revocable writer key. Keyless CI deploys hand a runner writer authority scoped to one store; revoke it without touching the owner key. This is why a leaked deploy token can advance a capsule but never seize a store.