CleverWild
|
8421a09d9f
|
refactor(db!: store the one-off transaction signature by component
|
2026-08-27 12:46:40 +02:00 |
|
CleverWild
|
15b826310b
|
refactor(db): replace the proposal payload blob with typed child tables
|
2026-08-27 00:45:35 +02:00 |
|
CleverWild
|
f881102f0a
|
refactor(proposal): drop the expired status, enforce expiry on every vote
|
2026-08-26 13:01:44 +02:00 |
|
CleverWild
|
f13c1cf9d1
|
fix(db): require share_salt to be supplied by the daemon
|
2026-08-26 13:01:44 +02:00 |
|
CleverWild
|
e1d060dd06
|
feat(vault): add recovery passphrase handling for bootstrap and unseal processes
|
2026-08-26 13:01:44 +02:00 |
|
CleverWild
|
6e3fa736e0
|
feat(server): recovery operators with sleeping/wakeup mechanism (§3.5/§3.6)
|
2026-08-26 13:01:44 +02:00 |
|
CleverWild
|
d12109c2c9
|
feat(server): ProposalKind::ApproveOneOffTransaction
|
2026-08-26 13:01:44 +02:00 |
|
CleverWild
|
b2632661f8
|
feat(db): add proposal and proposal_vote tables
|
2026-08-26 13:01:44 +02:00 |
|
CleverWild
|
8159902027
|
feat(server::db): add share_salt column to operator table
Each operator row now stores a 32-byte random salt used to derive the
per-operator share encryption key from their passphrase (Argon2 KDF).
|
2026-08-26 13:01:44 +02:00 |
|
Skipper
|
9ca2c4ed64
|
refactor(server::db): introduced newtype wrappers for entity id's in database
|
2026-08-26 13:01:44 +02:00 |
|
Skipper
|
ec5a8143fb
|
refactor: rename to to better reflect meaning
|
2026-08-26 13:01:44 +02:00 |
|
Skipper
|
539265e3b1
|
docs: updated to new auth challenge format and removed stale TOCTOU race condition note
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
270e843598
|
fix(server::tests): api surface of auth challenge changed
|
2026-08-26 13:00:40 +02:00 |
|
Skipper
|
0a48839321
|
refactor(server::{useragent::auth, client::auth}): use random based + timestamp nonce instead of monotonic counter in database
|
2026-08-26 13:00:40 +02:00 |
|
hdbg
|
4c2e00b56d
|
refactor(server): migrated auth to ml-dsa
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
d55e9880ec
|
refactor(server): rework envelopes and integrity check
|
2026-08-26 13:00:39 +02:00 |
|
CleverWild
|
4bd8a2df33
|
feat(server): integrity envelope engine for EVM grants with HMAC verification
|
2026-08-26 13:00:39 +02:00 |
|
CleverWild
|
e2e2c4fc07
|
feat(auth): add seal-key-derived pubkey integrity tags with auth enforcement and unseal backfill
|
2026-08-26 13:00:39 +02:00 |
|
hdbg
|
4ebe7b6fc4
|
merge: new flow into main
|
2026-03-22 12:50:55 +01:00 |
|
hdbg
|
cd07ab7a78
|
refactor(server): renamed 'wallet_visibility' to 'wallet_access'
|
2026-03-21 13:06:25 +01:00 |
|
hdbg
|
cfa6e068eb
|
feat(client): add client metadata and wallet visibility support
|
2026-03-20 20:41:00 +01:00 |
|
CleverWild
|
77c3babec7
|
feat: compat migrations
ci/woodpecker/pr/server-vet Pipeline failed
ci/woodpecker/pr/server-audit Pipeline was successful
ci/woodpecker/pr/server-lint Pipeline was successful
ci/woodpecker/pr/server-test Pipeline was successful
|
2026-03-17 19:44:58 +01:00 |
|
|
|
d29bca853b
|
chore: squash migrations
|
2026-03-14 13:22:47 +01:00 |
|
hdbg
|
67fce6f06a
|
feat(server::evm): more criterion types
|
2026-03-11 14:08:33 +01:00 |
|
hdbg
|
191b126462
|
feat(server): initial EVM functionality impl
|
2026-03-11 14:08:33 +01:00 |
|
hdbg
|
9dca7aff27
|
feat(proto): add URL parsing and TLS certificate management
|
2026-03-11 14:07:06 +01:00 |
|
hdbg
|
46a3c1768c
|
feat(server::key_holder): unique index on (root_key_id, nonce) to avoid nonce reuse
|
2026-03-11 14:05:42 +01:00 |
|
hdbg
|
281fbcb31d
|
feat(server): UserAgent seal/unseal
|
2026-03-11 14:05:42 +01:00 |
|
hdbg
|
69dd8f57ca
|
tests(server): UserAgent bootstrap token auth flow test
|
2026-02-14 18:16:19 +01:00 |
|
