archetech / archon / 34432555197

87%

push

github

feat(keymaster): Let a user publish the assertion key (#1102)

#1085 added the Ed25519 assertion key and left it on the Keymaster class
alone, so no shipped surface could reach it: nothing on main could opt an
identity in, and the eddsa-jcs-2022 path stayed dormant.

publish-assertion-key and unpublish-assertion-key now exist on all three
CLIs, KeymasterInterface, KeymasterClient, POST and DELETE /keys/assertion
with their Swagger blocks, the MCP tools, the Python service, and the
Python SDK.

Each seam is covered where it can break: nock tests for the client's two
calls and their error paths, the router's error-status table, the Python
handlers including the absent-body case FastAPI would otherwise 422, and
the SDK's request shapes. cli-parity, mcp-server parity and
python-service-parity all constrain this surface and all pass.

docs/keymaster-api.json regenerated from the annotations.


Claude-Session: https://claude.ai/code/session_01GYGMfX3foBcVqP7AQNXjWj

Co-authored-by: Claude Opus 5 <noreply@anthropic.com>

4083 of 4701 branches covered (86.85%)

Branch coverage included in aggregate %.

22 of 22 new or added lines in 3 files covered. (100.0%)

8766 of 9204 relevant lines covered (95.24%)

742.89 hits per line