archetech / archon / 28623026323

92%

push

github

feat(gatekeeper): conformant DID resolution + dereferencing at /1.0/identifiers (#676)

* feat(gatekeeper): dereference did:cid data via /1.0/identifiers/:did/data

Add a standards-conformant DID URL dereferencing endpoint for the
did:cid method-specific data resource (the DID URL did:cid:<cid>/data),
served under the Universal Resolver driver convention
/1.0/identifiers/:did on a dedicated router.

Because did:cid is content-addressed, the resource is retrieved by
content rather than an external location. The endpoint reshapes the
existing resolveDID() output at the route layer — no gatekeeper.ts
change — and returns the data resource itself (empty object for agent
DIDs) rather than the resolution triple. Honors versionTime,
versionSequence, confirm, and verify, mirroring the resolve route;
maps invalidDid to 400 and notFound to 404.

The internal /api/v1/did/:did family is left untouched for backwards
compatibility. Also normalizes /identifiers/:did for metrics labeling
and regenerates the Gatekeeper OpenAPI spec.

Implements #671. Refs #672, #673.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* refactor(gatekeeper): drop non-standard confirm/verify params from dereference endpoint

confirm and verify are not DID Core DID-URL parameters, so they don't
belong on the conformant /1.0/identifiers surface. Hard-code the
underlying resolveDID call to { confirm: true, verify: true } so the
endpoint always returns confirmed, cryptographically verified state:
verify rejects operations with invalid signatures, and confirm returns
the settled state (the create event is always confirmed, so freshly
created DIDs still dereference; only pending updates are withheld).

Callers needing raw or unconfirmed state continue to use the internal
/api/v1/did/:did endpoint. Regenerates the OpenAPI spec accordingly.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

* feat(gatekeeper): add conformant resolve + registration derefer... (continued)

2787 of 3292 branches covered (84.66%)

Branch coverage included in aggregate %.

5797 of 6088 relevant lines covered (95.22%)

889.35 hits per line