62 Commits

Author	SHA1	Message	Date
CleverWild	2b02d4a9b1	fix(bootstrap): keep the token valid until the vault is bootstrapped	2026-09-08 16:11:42 +02:00
CleverWild	f32da65467	refactor(proposal): put DB access behind a mockable ProposalStore trait	2026-09-08 16:11:42 +02:00
CleverWild	a501283b0c	refactor(crypto): replace byte-slice signing contexts with SigningContext enum	2026-08-26 14:08:32 +02:00
CleverWild	957c5096df	chore(deps): bump kameo version	2026-08-26 13:01:44 +02:00
CleverWild	277fb3c92d	feat(server): ProposalKind::ApprovePersistentGrant	2026-08-26 13:01:44 +02:00
CleverWild	83075e9df7	feat(server): introduce VaultCoordinator for multi-operator Shamir bootstrap/unseal ... VaultCoordinator collects operator passphrases, splits the seal key into Shamir shares on bootstrap (encrypting each share with the operator's passphrase via Argon2 + XChaCha20-Poly1305), and reconstructs the seal key from threshold shares on unseal. Adds vsss-rs 5.4.0 and rand_core 0.6 dependencies.	2026-08-26 13:01:44 +02:00
Skipper	28b7276e11	WIP: some things	2026-08-26 13:01:44 +02:00
Skipper	ab79959dce	housekeeping(server): deps upgrade + diesel migration to AsyncFnOnce	2026-08-26 13:01:44 +02:00
Skipper	a31ef99338	housekeeping(server): removed unused deps	2026-08-26 13:01:44 +02:00
Skipper	8392f27ce4	housekeeping(server): clippy warns fix	2026-08-26 13:00:40 +02:00
Skipper	e6724cb8d3	merge: refactor-integrity-check into main	2026-08-26 13:00:40 +02:00
Skipper	d7ca0b4fc8	housekeeping(server): dependencies upgrade	2026-08-26 13:00:40 +02:00
Skipper	bf63279f73	merge: refactor-integrity-check into main	2026-08-26 13:00:40 +02:00
Skipper	0a48839321	refactor(server::{useragent::auth, client::auth}): use random based + timestamp nonce instead of monotonic counter in database	2026-08-26 13:00:40 +02:00
hdbg	4823a291f8	WIP: kameo::messages wiring for transport generalization	2026-08-26 13:00:40 +02:00
hdbg	1d9b572565	feat(user-agent): add VaultGate for sealed vault authentication	2026-08-26 13:00:40 +02:00
hdbg	9650407093	refactor(server): reorganized client/user_agent actors into separate module peers and added event MessageBus	2026-08-26 13:00:40 +02:00
CleverWild	247cb90fbf	refactor(hashing): introduce Hashable derive macro and migrate server types	2026-08-26 13:00:39 +02:00
hdbg	6b814f4869	refactor(server): moved shared module crypto into arbiter-crypto	2026-08-26 13:00:39 +02:00
hdbg	4c2e00b56d	refactor(server): migrated auth to ml-dsa	2026-08-26 13:00:39 +02:00
hdbg	13fb31f841	fix(server::bootsrapper): token compare is now constant-time	2026-08-26 13:00:39 +02:00
hdbg	bd0a8f3907	tests(server): property-based testing for ordering independency for hash	2026-08-26 13:00:39 +02:00
hdbg	d482ed37aa	fix(server): replaced postcard-based integrity fingerprint with custom trait providing order-independent hashing	2026-08-26 13:00:39 +02:00
hdbg	dcf42b0e4e	fix(server): added chain_id check and covered check_shared_constraints with unit tests	2026-08-26 13:00:39 +02:00
hdbg	38284d84b6	tests(server): initial cargo-mutants	2026-08-26 13:00:39 +02:00
hdbg	d55e9880ec	refactor(server): rework envelopes and integrity check	2026-08-26 13:00:39 +02:00
CleverWild	4bd8a2df33	feat(server): integrity envelope engine for EVM grants with HMAC verification	2026-08-26 13:00:39 +02:00
hdbg	37fa954933	merge: @main into client-integrity-verification	2026-08-26 13:00:39 +02:00
CleverWild	e2e2c4fc07	feat(auth): add seal-key-derived pubkey integrity tags with auth enforcement and unseal backfill	2026-08-26 13:00:39 +02:00
hdbg	083ff66af2	refactor(server): removed miette out of server	2026-04-04 12:10:34 +02:00
hdbg	e135519c06	chore(deps): update Rust dependencies and add cargo-edit	2026-03-22 00:10:18 +01:00
CleverWild	f015d345f4	Merge remote-tracking branch 'origin/main' into SDK-client-UA-registration	2026-03-21 21:14:41 +01:00
CleverWild	971db0e919	refactor(client-auth): introduce ClientId newtype to avoid client_id/nonce confusion ... refactor(user-agent): replace manual terminality helper with fatality::Fatality	2026-03-19 19:07:19 +01:00
hdbg	d61dab3285	refactor(server::useragent): migrated to new connection design	2026-03-19 07:53:55 +00:00
hdbg	088fa6fe72	feat(evm): add grant management for EVM wallets	2026-03-16 18:53:10 +01:00
hdbg	549a0f5f52	refactor(server): removed grpc adapter and replaced with concrete implementations	2026-03-16 03:12:29 +01:00
CleverWild	099f76166e	feat(PoC): terrors crate usage	2026-03-15 21:11:23 +01:00
CleverWild	02980468db	feat(poc): add terrors PoC crate scaffold and error types ... Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-03-15 19:21:55 +01:00
hdbg	013af7e65f	fix(server): remove useless vendored protoc	2026-03-15 16:43:30 +01:00
CleverWild	47144bdf81	feat(auth): limited RSA support for signing ... see server/clippy.toml	2026-03-14 13:57:13 +01:00
CleverWild	42760bbd79	revert(auth): remove RSA support from authentication and related components	2026-03-14 13:23:06 +01:00
CleverWild	6030f30901	feat(user-agent-auth): add RSA and ECDSA auth key types ... Extend user-agent authentication to support Ed25519, ECDSA (secp256k1), and RSA (PSS+SHA-256) with minimal protocol and storage changes. Add key_type to auth requests and useragent_client, update key parsing/signature verification paths, and keep backward compatibility by treating UNSPECIFIED as Ed25519.	2026-03-14 12:14:30 +01:00
hdbg	67fce6f06a	feat(server::evm): more criterion types	2026-03-11 14:08:33 +01:00
hdbg	191b126462	feat(server): initial EVM functionality impl	2026-03-11 14:08:33 +01:00
hdbg	657f47e32f	refactor(transport): convert Bi trait to use async_trait	2026-03-11 14:08:15 +01:00
hdbg	6deec731e2	feat(useragent): initial connection impl	2026-03-11 14:07:46 +01:00
hdbg	b8afd94b21	refactor(transport): implemented Bi stream based abstraction for actor communication with next loop override	2026-03-11 14:07:46 +01:00
hdbg	9dca7aff27	feat(proto): add URL parsing and TLS certificate management	2026-03-11 14:07:06 +01:00
hdbg	6c8a67c520	feat(server::key_holder): ability to remotely get current state	2026-03-11 14:05:42 +01:00
hdbg	281fbcb31d	feat(server): UserAgent seal/unseal	2026-03-11 14:05:42 +01:00