archetech / archon

95%

main: 94%

LAST BUILD ON BRANCH 86-credentialsubjects

branch: 86-credentialsubjects

CHANGE BRANCH

x

Reset

Sync Branches

• 86-credentialsubjects
• 101-challenge-in-url
• 102-create-id
• 111-change-passphrase
• 114-add-change-passphrase
• 123-did-version-explorer
• 13-upgrade-kubo-ipfs
• 136-lightning-wallets
• 137-explorer-export-unrestricted
• 14-merge-search-server
• 2-remove-deprecated
• 21-rename-groupvault
• 22-rename-version
• 24-refactor-keymaster
• 26-support-mainnet
• 28-import-schema-pack
• 3-refactor-credentials
• 31-observability
• 36-avoid-duplicating-verifiablecredential
• 38-add-cli-to-keymaster-package
• 44-get-vault-item
• 47-transition-schemas
• 51-wallet-is-missing
• 55-add-dmail-commands
• 56-did-aliases
• 57-cl-hive
• 58-missing-update-credential-command
• 6-fix-lint-errors
• 60-refactor-cli-tests
• 64-improve-security
• 68-add-get-property
• 69-rename-updateasset
• 70-make-upload-limit-configurable
• 74-rename-document-assets
• 77-image-assets-should-be-file-assets
• 8-rename-cas
• 81-universal-resolver
• 84-cli-vote-poll
• 85-add-JOSE
• 88-refactor-polls
• 91-incorrect-passphrase
• 93-view-credential
• 95-edit-credential
• cln-rtl
• e2e-report
• explorer-admin-api-key
• init-v0.3
• init-v0.4
• main
• op-mining
• pre-release
• prerelease
• refactor-satoshi
• refactor-version
• release-0.1
• release-0.2
• release-0.3
• release-npm-20260130
• release-npm-20260202
• release-npm-20260209
• release-npm-20260211
• release-npm-20260212
• release-npm-20260213
• release-npm-20260216
• release-npm-20260219
• release-npm-20260221
• test-performance

Build # 22152423513

Build Type

push

github

Committed by web-flow

Commit Message

feat: Adopt W3C JWE standard for encryption (#90)

* feat: Adopt W3C JWE standard for encryption

Replace custom ECIES (secp256k1 ECDH + XChaCha20-Poly1305) with
standard JWE Compact Serialization (ECDH-ES + A256GCM) per the
W3C VC-JOSE-COSE spec. Built using existing @noble primitives to
maintain browser compatibility (Web Crypto doesn't support secp256k1).

Backward compatible: legacy ciphertext is auto-detected and decrypted
via decryptMessageLegacy/decryptBytesLegacy methods.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Remove redundant fields

* Wallet fix

* refactor: Move JWE/legacy compat logic into cipher-base

The decrypt methods now accept an optional legacyPubKey parameter,
centralizing format detection. Removes decryptMessageCompat and
decryptBytesCompat from keymaster.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Fix python test

* Wallet fixes

* Updated archon version

* Fixes for copilot

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Run Details

1634 of 1778 branches covered (91.9%)

Branch coverage included in aggregate %.

118 of 122 new or added lines in 4 files covered. (96.72%)

3395 of 3493 relevant lines covered (97.19%)

1083.47 hits per line