archon-keymaster

Files (77)

• README.md
• SKILL.md
• _meta.json
• add-alias.sh · scripts/aliases/
• list-aliases.sh · scripts/aliases/
• remove-alias.sh · scripts/aliases/
• resolve-did.sh · scripts/aliases/
• create-asset-file.sh · scripts/assets/
• create-asset-image.sh · scripts/assets/
• create-asset-json.sh · scripts/assets/
• create-asset.sh · scripts/assets/
• get-asset-file.sh · scripts/assets/
• get-asset-image.sh · scripts/assets/
• get-asset-json.sh · scripts/assets/
• get-asset.sh · scripts/assets/
• list-assets.sh · scripts/assets/
• transfer-asset.sh · scripts/assets/
• update-asset-file.sh · scripts/assets/
• update-asset-image.sh · scripts/assets/
• update-asset-json.sh · scripts/assets/
• update-asset.sh · scripts/assets/
• create-challenge-cc.sh · scripts/auth/
• create-challenge.sh · scripts/auth/
• create-response.sh · scripts/auth/
• verify-response.sh · scripts/auth/
• accept-credential.sh · scripts/credentials/
• bind-credential.sh · scripts/credentials/
• get-credential.sh · scripts/credentials/
• issue-credential.sh · scripts/credentials/
• list-credentials.sh · scripts/credentials/
• list-issued.sh · scripts/credentials/
• publish-credential.sh · scripts/credentials/
• revoke-credential.sh · scripts/credentials/
• decrypt-file.sh · scripts/crypto/
• decrypt-message.sh · scripts/crypto/
• encrypt-file.sh · scripts/crypto/
• encrypt-message.sh · scripts/crypto/
• sign-file.sh · scripts/crypto/
• verify-file.sh · scripts/crypto/
• add-member.sh · scripts/groups/
• create-group.sh · scripts/groups/
• get-group.sh · scripts/groups/
• list-groups.sh · scripts/groups/
• remove-member.sh · scripts/groups/
• test-member.sh · scripts/groups/
• create-additional-id.sh · scripts/identity/
• create-id.sh · scripts/identity/
• list-ids.sh · scripts/identity/
• switch-id.sh · scripts/identity/
• archive.sh · scripts/messaging/
• attach.sh · scripts/messaging/
• delete.sh · scripts/messaging/
• forward.sh · scripts/messaging/
• get-attachment.sh · scripts/messaging/
• list.sh · scripts/messaging/
• read.sh · scripts/messaging/
• refresh.sh · scripts/messaging/
• reply.sh · scripts/messaging/
• send.sh · scripts/messaging/
• derive-nostr.sh · scripts/nostr/
• …and 17 more

SKILL.md (first lines)

# Archon Keymaster - Core DID Toolkit

Core toolkit for Archon decentralized identities (DIDs). Manages identity lifecycle, encrypted communication, cryptographic operations, and authorization.

**Related skills:**
- `archon-vault` — Vault management and encrypted distributed backups
- `archon-cashu` — Cashu ecash with DID-locked tokens

## Capabilities

- **Identity Management** - Create, manage multiple DIDs, recover from mnemonic
- **Verifiable Credentials** - Create schemas, issue/accept/revoke credentials
- **Encrypted Messaging (Dmail)** - Send/receive end-to-end encrypted messages between DIDs
- **Nostr Integration** - Derive Nostr keypairs from your DID (same secp256k1 key)
- **File Encryption** - Encrypt files for specific DIDs
- **Digital Signatures** - Sign and verify files with your DID
- **DID Aliasing** - Friendly names for DIDs (contacts, schemas, credentials)
- **Authorization** - Challenge/response verification between DIDs
- **Groups** - Create and manage DID groups for access control and multi-party operations
- **Polls** - Cryptographic voting with transparent or secret ballots
- **Assets** - Store and retrieve content-addressed assets in the registry

## Prerequisites

- Node.js installed (for `npx @didcid/keymaster`)
- Environment: `~/.archon.env` with:
  - `ARCHON_WALLET_PATH` - path to your wallet file (required)
  - `ARCHON_PASSPHRASE` - wallet encryption passphrase (required)
  - `ARCHON_GATEKEEPER_URL` - gatekeeper endpoint (optional, defaults to public)
- All created automatically by `create-id.sh`

## Security Notes

This skill handles cryptographic identity operations:

1. **Passphrase in environment**: `ARCHON_PASSPHRASE` is stored in `~/.archon.env` for non-interactive script execution. The file should be `chmod 600`.

2. **Sensitive files accessed**:
   - `~/.archon.wallet.json` — encrypted wallet containing DID private keys
   - `~/.archon.env` — wallet encryption passphrase

3. **Network**: Data is encrypted before transmission to Archon gatekeeper/hyperswarm. Only intended recipients can decrypt.

4. **Key recovery**: Your 12-word mnemonic is the master recovery key. Store it offline, never in digital form.

## Quick Start

### First-Time Setup

```bash
./scripts/identity/create-id.sh [wallet-path]
```

Creates your first DID, generates passphrase, saves to `~/.archon.env`. 

- Default wallet location: `~/.archon.wallet.json`
- You can specify a custom path: `./scripts/identity/create-id.sh ~/my-wallet.json`
- **Write down your 12-word mnemonic** - it's your master recovery key.

### Load Environment

All scripts require `~/.archon.env` to be configured. Simply run:

```bash
source ~/.archon.env
```

The environment file sets `ARCHON_WALLET_PATH` and `ARCHON_PASSPHRASE`. Scripts will error if these are not set.

## Identity Management

### Create Additional Identity

```bash
./scripts/identity/create-additional-id.sh <name>
```

Create pseudonymous personas or role-separated identities (all share same mnemonic).

### List All DIDs

```bash
./scripts/identity/list-ids.sh
```

### Switch Active Identity

```bash
./scripts/identity/switch-id.sh <name>
```

### Recovery

For disaster recovery and vault restore operations, see the `archon-backup` skill.

## Verifiable Credential Schemas

Create and manage schemas for verifiable credentials.

### Create Schema

```bash
./scripts/schemas/create-schema.sh <schema-file.json>
```

Create a credential schema from a JSON file.

**Example schema (proof-of-human.json):**
```json
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "$credentialContext": [
    "https://www.w3.org/ns/credentials/v2",
    "https://archetech.com/schemas/credentials/agent/v1"
  ],
  "$credentialType": [
    "VerifiableCredential",
    "AgentCredential",
    "ProofOfHumanCredential"

From LeoYeAI/openclaw-master-skills, MIT.

More from LeoYeAI/openclaw-master-skills