archetech / archon / 28609494158

92%

main: 92%

Pull #676

github

refactor(gatekeeper): drop non-standard confirm/verify params from dereference endpoint

confirm and verify are not DID Core DID-URL parameters, so they don't
belong on the conformant /1.0/identifiers surface. Hard-code the
underlying resolveDID call to { confirm: true, verify: true } so the
endpoint always returns confirmed, cryptographically verified state:
verify rejects operations with invalid signatures, and confirm returns
the settled state (the create event is always confirmed, so freshly
created DIDs still dereference; only pending updates are withheld).

Callers needing raw or unconfirmed state continue to use the internal
/api/v1/did/:did endpoint. Regenerates the OpenAPI spec accordingly.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2787 of 3292 branches covered (84.66%)

Branch coverage included in aggregate %.

5797 of 6088 relevant lines covered (95.22%)

889.35 hits per line