archetech / archon / 28070760268

90%

push

github

feat: DIDComm Messaging v2 (Phases 0–7): TS + Python parity, transport, protocols, auto-discovery (#633)

* docs: add DIDComm messaging support design doc

Research and a phased plan for adding standards-based DIDComm v2
messaging to Archon: the secp256k1-vs-key-agreement-curve constraint,
the existing reuse surface (JWE, sign/verify, service endpoints, Dmail),
build-vs-buy decision, and a Phase 0-7 implementation plan. Linked from
the docs index.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* chore: add DIDComm Phase 0 spike (didcomm-node round-trip)

Self-contained, throwaway spike validating the DIDComm design doc's
build-vs-buy and curve decisions. Packs/unpacks DIDComm v2 envelopes
between two Archon-shaped DIDs via the didcomm-node library and the
DIDResolver/SecretsResolver adapter interfaces later phases will back
with the gatekeeper and wallet.

All three round-trips pass: anoncrypt (XC20P/ECDH-ES over X25519),
authcrypt (A256CBC-HS512/ECDH-1PU over X25519), and authcrypt+sign with
a secp256k1 key (ES256K) — confirming Archon's existing keys can sign
DIDComm as-is and only a new X25519 key-agreement key is required.

Not wired into the monorepo (root workspaces is packages/* only); runs
standalone via `npm ci && node spike.mjs` in spike/didcomm-phase0.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* feat: DIDComm Phase 1 — X25519 key-agreement keys in DID documents

Adds the standards-curve key-agreement key that DIDComm v2 encryption
requires (secp256k1 cannot do key agreement; it keeps signing).

- cipher: generateX25519Jwk(seed) + OKP JWK types. Derives a deterministic
  X25519 keypair from 32 bytes of seed material (@noble/curves, already a
  dependency).
- keymaster: fetchDidCommKeyPair derives the key on a dedicated HD branch
  (m/44'/0'/{account}'/1/0) so it never collides with the signing key at
  change=0 and survives backup/recovery with no extra stored material.
  publishDidComm wr... (continued)

2695 of 3288 branches covered (81.96%)

Branch coverage included in aggregate %.

575 of 688 new or added lines in 12 files covered. (83.58%)

5507 of 6111 relevant lines covered (90.12%)

911.51 hits per line