keyshare

type Config ¶ added in v0.0.48

type Config struct {
	Keyshares     KeyshareStore
	PushCore      PushCoreClient
	CheckInterval time.Duration
	Logger        zerolog.Logger
}

Config holds configuration for the keyshare sweeper.

type KeyshareStore ¶ added in v0.0.48

type KeyshareStore interface {
	List() ([]string, error)
	Delete(id string) error
}

KeyshareStore is the subset of keyshare.Manager the sweeper depends on.

type Manager ¶

type Manager struct {
	// contains filtered or unexported fields
}

Manager provides methods for storing and retrieving encrypted keyshares from files.

func NewManager(homeDir string, encryptionPassword string) (*Manager, error)

func (m *Manager) Delete(id string) error

func (m *Manager) Exists(id string) (bool, error)

func (m *Manager) Get(id string) ([]byte, error)

func (m *Manager) List() ([]string, error)

func (m *Manager) Store(keyshareBytes []byte, id string) error

type PushCoreClient ¶ added in v0.0.48

type PushCoreClient interface {
	GetCurrentKey(ctx context.Context) (*utsstypes.TssKey, error)
	GetKeyByID(ctx context.Context, keyID string) (*utsstypes.TssKey, error)
}

PushCoreClient is the subset of pushcore.Client the sweeper depends on. Defined as an interface so tests can inject a mock. *pushcore.Client satisfies it.

type Sweeper ¶ added in v0.0.48

type Sweeper struct {
	// contains filtered or unexported fields
}

Sweeper deletes local keyshares that chain state proves are redundant.

A keyshare is deleted only when every one of these holds:

• it is not the current key ID;
• its TSS pubkey equals the current key's pubkey, i.e. a quorum change or key refresh superseded it while preserving the vault key.

Those two conditions are sufficient. The current key only changes when a key process finalizes, so while one is in flight the predecessor is still current and therefore never a deletion candidate. Fund migrations only exist across a pubkey rotation, so they can only reference a key this sweeper already keeps.

Shares whose pubkey differs from the current one are kept: they belong to a rotated-away key that fund migration still needs to sweep its vault. Retiring those is an explicit operator action, since a chain that was never migrated is indistinguishable from one with nothing to migrate.

Every chain-state lookup fails closed: on error the sweep is skipped and retried next tick rather than deleting on incomplete information. Pubkeys are resolved per held share rather than from the full key history, which grows unbounded and would need paging.

func NewSweeper(cfg Config) *Sweeper

func (s *Sweeper) Start(ctx context.Context)