feat(air-d): built-in attestation endpoint for hosted gateway
AIR Improvement D: ships a self-contained attestation service inside the existing gateway Netlify Function so hosted users no longer need to bring their own endpoint.
- POST /api/v1/attest: creates HMAC-SHA256 signed attestation records stored in Netlify Blobs (gateway-attestation store); returns {id, timestamp} - GET /api/v1/attest/:id: verifies record integrity; returns {verified, record} with sig omitted from response - Auto-configure: when ATTESTATION_SECRET is set and no explicit KNOWTATION_AIR_ENDPOINT exists, gateway points AIR at itself - Local dev: file-based fallback (data/hosted_attestations.json) matching the billing-store.mjs pattern - Zero new dependencies (node:crypto built-ins only) - 8 passing tests (attest-endpoint.test.mjs) - Docs: DEPLOY-HOSTED.md updated with env vars and checklist item - No changes to A/B/C code (lib/air.mjs, lib/write.mjs untouched)
0 comments
muse hub commit comment sha256:005396d048baaf7d8c788e4fac31bbdf705001010c4113e7b31a395527602738 --body "your comment"
No comments yet. Be the first to start the discussion.