101 Commits

Author	SHA1	Message	Date
hdbg	6b814f4869	refactor(server): moved shared module crypto into arbiter-crypto	2026-08-26 13:00:39 +02:00
hdbg	4c2e00b56d	refactor(server): migrated auth to ml-dsa	2026-08-26 13:00:39 +02:00
hdbg	13fb31f841	fix(server::bootsrapper): token compare is now constant-time	2026-08-26 13:00:39 +02:00
hdbg	11ad5df426	feat(server): add integrity verification for client keys	2026-08-26 13:00:39 +02:00
hdbg	d482ed37aa	fix(server): replaced postcard-based integrity fingerprint with custom trait providing order-independent hashing	2026-08-26 13:00:39 +02:00
hdbg	dcf42b0e4e	fix(server): added chain_id check and covered check_shared_constraints with unit tests	2026-08-26 13:00:39 +02:00
hdbg	9173be2920	tests(server): fixed for new integrity checks	2026-08-26 13:00:39 +02:00
hdbg	d55e9880ec	refactor(server): rework envelopes and integrity check	2026-08-26 13:00:39 +02:00
hdbg	ba7bfe9b6f	fix(server): remove stale mentions of miette	2026-08-26 13:00:39 +02:00
CleverWild	4bd8a2df33	feat(server): integrity envelope engine for EVM grants with HMAC verification	2026-08-26 13:00:39 +02:00
hdbg	37fa954933	merge: @main into client-integrity-verification	2026-08-26 13:00:39 +02:00
hdbg	5c3421de1e	housekeeping(server): fixed clippy warns	2026-08-26 13:00:39 +02:00
hdbg	be23f87e67	refactor(user-agent): remove backfill pubkey integrity tags	2026-08-26 13:00:39 +02:00
hdbg	29f2174dcf	fix(server): previously, user agent auth accepted invalid signatures	2026-08-26 13:00:39 +02:00
hdbg	149035ecf5	refactor(server): separate crypto by purpose and moved outside of actor into separate module	2026-08-26 13:00:39 +02:00
CleverWild	17ea8d8dc9	feat(auth): implement attestation status verification for public keys	2026-08-26 13:00:39 +02:00
CleverWild	e9e2888e95	fix(keyholder): comment drift	2026-08-26 13:00:39 +02:00
CleverWild	0b30416a7b	refactor(keyholder): generalize derive_useragent_integrity_key and compute_useragent_pubkey_integrity_tag corespondenly to derive_integrity_key and compute_integrity_tag	2026-08-26 13:00:39 +02:00
CleverWild	e2e2c4fc07	feat(auth): add seal-key-derived pubkey integrity tags with auth enforcement and unseal backfill	2026-08-26 13:00:39 +02:00
hdbg	8aaeec078b	refactor(proto): restructure wallet access messages for improved data organization	2026-08-26 13:00:39 +02:00
hdbg	3ca2554468	refactor(server::evm): removed repetetive errors and error variants	2026-08-26 13:00:39 +02:00
hdbg	083ff66af2	refactor(server): removed miette out of server	2026-04-04 12:10:34 +02:00
hdbg	0362044b83	housekeeping(server): fixed clippy warns	2026-04-03 22:20:07 +02:00
Stas	4af172e49a	Merge branch 'main' into feat--self-signed-transactions	2026-04-03 22:20:07 +02:00
hdbg	d5ec303b9a	merge: main	2026-04-03 22:20:07 +02:00
CleverWild	63a4875fdb	fix(keyholder): remove dead overwritten select in try_unseal query	2026-04-03 22:20:07 +02:00
CleverWild	8feda7990c	fix(auth): reject invalid challenge signatures instead of transitioning to AuthOk	2026-04-03 22:20:07 +02:00
hdbg	ca35b9fed7	refactor(proto): restructure wallet access messages for improved data organization	2026-04-03 22:20:07 +02:00
hdbg	27428f709a	refactor(server::evm): removed repetetive errors and error variants	2026-04-03 22:20:07 +02:00
CleverWild	6987e5f70f	feat(evm): implement EVM sign transaction handling in client and user agent	2026-03-26 19:57:48 +01:00
hdbg	bbf8a8019c	feat(evm): add wallet access grant/revoke functionality	2026-03-25 16:33:55 +01:00
hdbg	ac04495480	refactor(server): grpc wire conversion	2026-03-25 15:25:24 +01:00
hdbg	d9b3694cab	feat(useragent): add SDK clients table screen	2026-03-22 17:40:48 +01:00
hdbg	4ebe7b6fc4	merge: new flow into main	2026-03-22 12:50:55 +01:00
hdbg	8043cdf8d8	feat(server): re-introduce client approval flow	2026-03-22 12:18:18 +01:00
CleverWild	f015d345f4	Merge remote-tracking branch 'origin/main' into SDK-client-UA-registration	2026-03-21 21:14:41 +01:00
hdbg	51674bb39c	refactor(actors): rename MessageRouter to FlowCoordinator	2026-03-21 13:12:06 +01:00
hdbg	cd07ab7a78	refactor(server): renamed 'wallet_visibility' to 'wallet_access'	2026-03-21 13:06:25 +01:00
hdbg	cfa6e068eb	feat(client): add client metadata and wallet visibility support	2026-03-20 20:41:00 +01:00
CleverWild	784261f4d8	perf(user-agent): use sqlite INSERT ... RETURNING for sdk client approve	2026-03-19 19:07:28 +01:00
CleverWild	971db0e919	refactor(client-auth): introduce ClientId newtype to avoid client_id/nonce confusion ... refactor(user-agent): replace manual terminality helper with fatality::Fatality	2026-03-19 19:07:19 +01:00
CleverWild	e1a8553142	feat(client-auth): emit and require AuthOk for SDK client challenge flow	2026-03-19 19:06:27 +01:00
CleverWild	e89983de3a	refactor(proto): align remaining ClientConnection protobuf pairs with SdkClient* naming	2026-03-19 18:00:10 +01:00
CleverWild	434738bae5	fix: return very important comment	2026-03-19 17:52:11 +01:00
hdbg	915540de32	housekeeping(server): fixed clippy warns	2026-03-19 07:53:55 +00:00
hdbg	60ce1cc110	test(user-agent): add test helpers and update actor integration tests	2026-03-19 07:53:55 +00:00
hdbg	2ff4d0961c	refactor(server::client): migrated to new connection design	2026-03-19 07:53:55 +00:00
hdbg	d61dab3285	refactor(server::useragent): migrated to new connection design	2026-03-19 07:53:55 +00:00
hdbg	712f114763	style(encryption): suppress clippy unwrap lints with justifications	2026-03-17 11:39:52 +01:00
hdbg	c56184d30b	refactor(server): rewrote cell access using new helpers and added ast-grep rules for it	2026-03-16 20:50:19 +01:00