[FRONTEND]: Guardian recovery system missing in ZHTP node

[umwelt]

Problem

The API client expects a complete guardian-based social recovery system that doesn't exist in the ZHTP node.

Missing Endpoints (HIGH PRIORITY)

1. POST /api/v1/guardian/add - Add a guardian
2. GET /api/v1/guardian/list/{id} - List guardians for identity
3. POST /api/v1/guardian/remove - Remove guardian
4. POST /api/v1/guardian/accept - Accept guardian invite
5. POST /api/v1/guardian/decline - Decline guardian invite
6. POST /api/v1/guardian/recovery/initiate - Start recovery process
7. POST /api/v1/guardian/recovery/approve - Guardian approves recovery
8. GET /api/v1/guardian/recovery/status/{id} - Check recovery status
9. POST /api/v1/guardian/recovery/cancel - Cancel recovery

Current Node Implementation

• NONE - Guardian subsystem entirely missing

Impact

• HIGH PRIORITY - Social recovery unavailable
• Users cannot add guardians for account security
• No multi-party account recovery
• Missing key security feature

Expected Behavior

POST /api/v1/guardian/add

• Request: { identity_id: string, guardian_id: string }
• Response: GuardianResponse with guardian info
• Should add guardian and send invite

GET /api/v1/guardian/list/{id}

• Response: Guardian array
• Should return all guardians for identity

POST /api/v1/guardian/recovery/initiate

• Request: { identity_id: string, guardian_ids: string array }
• Response: RecoverySession with recovery_id
• Should start recovery process requiring guardian approval

POST /api/v1/guardian/recovery/approve

• Request: { guardian_id: string, recovery_id: string, approval: boolean }
• Should record guardian approval for recovery

Implementation Location

ZHTP Node: New handler needed - zhtp/src/api/handlers/guardian/mod.rs

Priority

HIGH - Important security feature for alpha

[umwelt]

Closing as IMPLEMENTED in PR #106.

Guardian recovery endpoints implemented:

• POST /api/v1/identity/guardians/add - Add guardian
• DELETE /api/v1/identity/guardians/{id} - Remove guardian
• GET /api/v1/identity/guardians - List guardians
• POST /api/v1/identity/recovery/initiate - Start recovery
• POST /api/v1/identity/recovery/{id}/approve - Guardian approves
• POST /api/v1/identity/recovery/{id}/complete - Complete recovery
• GET /api/v1/identity/recovery/{id}/status - Check status
• GET /api/v1/identity/recovery/pending - List pending requests
• POST /api/v1/identity/recovery/{id}/reject - Reject recovery

Implementation: zhtp/src/api/handlers/guardian.rs
Security fixes applied for CRITICAL vulnerabilities
Merged in: SOVEREIGN-NET/The-Sovereign-Network#106