archetech / archon / 28178230559 / 1

86%

main: 92%

Pull #648

github

docs: bring Drawbridge spec up to date (DIDComm proxy + capabilities)

The spec predated the DIDComm proxy (Phases 7–8) entirely and #648's
capability manifest. Document:
- /didcomm/* proxy mount + GET /api/v1/didcomm-endpoint (public), and the
  application/didcomm-encrypted+json text body parser.
- GET /api/v1/capabilities and the optional-service model: each of
  didcomm/lightning/names is offered iff its downstream URL is configured;
  empty URL disables it (capability false + proxy mount 501).
- 501 (optional service disabled) and 503 (Lightning unavailable) in the
  error envelope; ARCHON_DIDCOMM_URL / ARCHON_DRAWBRIDGE_PUBLIC_HOST /
  ARCHON_DRAWBRIDGE_TOR_HOSTNAME_FILE env vars; the ??-vs-|| off-switch
  semantics; and conformance requirements for all of the above.

Also: add /capabilities to the L402 UNPROTECTED_PATHS (defense-in-depth;
auth is already per-route opt-in so it was public regardless).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2750 of 3414 branches covered (80.55%)

Branch coverage included in aggregate %.

10764 of 12170 relevant lines covered (88.45%)

440.53 hits per line