61 Commits

Author	SHA1	Message	Date
CleverWild	36249129d1	feat(vault)!: implement full Shamir re-key flow and governance execution (§3.3–§3.5) ... - Add `rekey.proto` with `ContributePassphrase` / `ContributeRecoveryPassphrase` / `RekeyResult` - Wire `rekey` as a 4th vault stream payload in `vault.proto` and gRPC dispatch - Add `RekeyRootKey` message to `Vault` actor: generates new random seal key, re-encrypts root key, writes new `root_key_history` row - Add `StartRekey`, `ContributeRekey`, `ContributeRecoveryRekey` messages to `VaultCoordinator`; `finalize_rekey` uses threshold-1 fast path identical to bootstrap - `execute_replace_operator` now UPDATEs `operator_identity.public_key` in-place (avoids FK constraint violation), deletes stale `operator` share row, then triggers `StartRekey` - `execute_update_shamir_parameters` triggers `StartRekey` instead of warning stub - `ProposalKind::ReplaceOperator` carries `old_operator_id`; encode/decode updated accordingly - `GlobalActors::spawn` extracts `vault_coordinator` before `Ok(Self { … })` so it can be cloned into `ProposalManager::new` - Add `handle_rekey` in session handlers forwarding passphrase contributions to `VaultCoordinator` - Fix test: rename `replace_operator_inserts_identity_row` → `replace_operator_updates_pubkey_and_starts_rekey`, assert count stays 1 and pubkey is updated	2026-08-26 13:01:44 +02:00
CleverWild	e1d060dd06	feat(vault): add recovery passphrase handling for bootstrap and unseal processes	2026-08-26 13:01:44 +02:00
CleverWild	57200cbc50	feat(server): two-operator vault requires at least one recovery share	2026-08-26 13:01:44 +02:00
CleverWild	291ef2e831	refactor(server): typed pubkey len via u32::try_from in ReplaceOperator	2026-08-26 13:01:44 +02:00
CleverWild	d12109c2c9	feat(server): ProposalKind::ApproveOneOffTransaction	2026-08-26 13:01:44 +02:00
CleverWild	277fb3c92d	feat(server): ProposalKind::ApprovePersistentGrant	2026-08-26 13:01:44 +02:00
CleverWild	9e42097683	feat(server): ProposalKind::UpdateShamirParameters	2026-08-26 13:01:44 +02:00
CleverWild	25b86b14e9	feat(server): ProposalKind::ReplaceOperator	2026-08-26 13:01:44 +02:00
CleverWild	ba8748a17b	feat(server): ProposalKind ::GrantWalletAccess and ::ApproveServerUpdate	2026-08-26 13:01:44 +02:00
CleverWild	e6459aade8	feat(server::grpc): wire governance RPCs through operator session	2026-08-26 13:01:44 +02:00
CleverWild	59cb65f3e1	feat(server::grpc): wire Shamir committee bootstrap and unseal proto messages ... Adds DeclareCommittee and ContributePassphrase variants to bootstrap.proto, ContributePassphrase to unseal.proto, and AwaitingContributions result codes to both. Implements corresponding inbound converters and outbound reply mappings. VaultGate handlers delegate to VaultCoordinator.	2026-08-26 13:01:44 +02:00
CleverWild	fc7f2b1a03	refactor(server::actors::vault): clean up Bootstrap/TryUnseal, remove Bootstrapping state ... Bootstrap and TryUnseal now accept a SafeCell<Vec<u8>> seal key directly. The Bootstrapping intermediate state is removed — multi-operator coordination is the responsibility of VaultCoordinator, which calls Bootstrap atomically once all shares are collected.	2026-08-26 13:01:44 +02:00
Skipper	28b7276e11	WIP: some things	2026-08-26 13:01:44 +02:00
Skipper	9ca2c4ed64	refactor(server::db): introduced newtype wrappers for entity id's in database	2026-08-26 13:01:44 +02:00
Skipper	ec5a8143fb	refactor: rename to to better reflect meaning	2026-08-26 13:01:44 +02:00
Skipper	602be3aa11	merge: feat-lints into main	2026-08-26 13:00:40 +02:00
CleverWild	d4084ded35	feat: rustc and clippy linting	2026-08-26 13:00:40 +02:00
Skipper	8392f27ce4	housekeeping(server): clippy warns fix	2026-08-26 13:00:40 +02:00
Skipper	6b572d0c86	housekeeping(server): clean too-broad visibility markers and organize imports	2026-08-26 13:00:40 +02:00
Skipper	0a48839321	refactor(server::{useragent::auth, client::auth}): use random based + timestamp nonce instead of monotonic counter in database	2026-08-26 13:00:40 +02:00
Skipper	3bbf713e67	refactor(server::grpc::vault_gate): standard approach using / traits	2026-08-26 13:00:40 +02:00
Skipper	810656702b	fix(server): sending fixed vault state when on stage	2026-08-26 13:00:40 +02:00
hdbg	4823a291f8	WIP: kameo::messages wiring for transport generalization	2026-08-26 13:00:40 +02:00
hdbg	1d9b572565	feat(user-agent): add VaultGate for sealed vault authentication	2026-08-26 13:00:40 +02:00
hdbg	d2f41e693c	fix(server::user_agent): useragents now self-sign themselves on bootstrap	2026-08-26 13:00:40 +02:00
hdbg	9650407093	refactor(server): reorganized client/user_agent actors into separate module peers and added event MessageBus	2026-08-26 13:00:40 +02:00
hdbg	6b814f4869	refactor(server): moved shared module crypto into arbiter-crypto	2026-08-26 13:00:39 +02:00
hdbg	4c2e00b56d	refactor(server): migrated auth to ml-dsa	2026-08-26 13:00:39 +02:00
hdbg	11ad5df426	feat(server): add integrity verification for client keys	2026-08-26 13:00:39 +02:00
hdbg	dcf42b0e4e	fix(server): added chain_id check and covered check_shared_constraints with unit tests	2026-08-26 13:00:39 +02:00
hdbg	d55e9880ec	refactor(server): rework envelopes and integrity check	2026-08-26 13:00:39 +02:00
CleverWild	4bd8a2df33	feat(server): integrity envelope engine for EVM grants with HMAC verification	2026-08-26 13:00:39 +02:00
hdbg	37fa954933	merge: @main into client-integrity-verification	2026-08-26 13:00:39 +02:00
hdbg	5c3421de1e	housekeeping(server): fixed clippy warns	2026-08-26 13:00:39 +02:00
hdbg	8aaeec078b	refactor(proto): restructure wallet access messages for improved data organization	2026-08-26 13:00:39 +02:00
hdbg	083ff66af2	refactor(server): removed miette out of server	2026-04-04 12:10:34 +02:00
hdbg	0362044b83	housekeeping(server): fixed clippy warns	2026-04-03 22:20:07 +02:00
hdbg	bc45b9b9ce	merge: @main into refactor-proto	2026-04-03 22:20:07 +02:00
hdbg	82b5b85f52	refactor(proto): nest client protocol and extract shared schemas	2026-04-03 22:20:07 +02:00
hdbg	cfe01ba1ad	refactor(server, protocol): split big message files into smaller and domain-based	2026-04-03 22:20:07 +02:00
hdbg	d5ec303b9a	merge: main	2026-04-03 22:20:07 +02:00
hdbg	523bf783ac	refactor(grpc): extract user agent request handlers into separate functions	2026-04-03 22:20:07 +02:00
hdbg	ca35b9fed7	refactor(proto): restructure wallet access messages for improved data organization	2026-04-03 22:20:07 +02:00
CleverWild	6987e5f70f	feat(evm): implement EVM sign transaction handling in client and user agent	2026-03-26 19:57:48 +01:00
hdbg	bbf8a8019c	feat(evm): add wallet access grant/revoke functionality	2026-03-25 16:33:55 +01:00
hdbg	ac04495480	refactor(server): grpc wire conversion	2026-03-25 15:25:24 +01:00
hdbg	c0b08e84cc	feat(useragent): callouts feature for approving new things	2026-03-24 20:22:13 +01:00
hdbg	d9b3694cab	feat(useragent): add SDK clients table screen	2026-03-22 17:40:48 +01:00
hdbg	4ebe7b6fc4	merge: new flow into main	2026-03-22 12:50:55 +01:00
hdbg	8043cdf8d8	feat(server): re-introduce client approval flow	2026-03-22 12:18:18 +01:00