3 Commits

Include renames

Author	SHA1	Message	Date
zeekay	3954d11f50	fix: goimports formatting + CGO_ENABLED=0 for CI tests ... - Run goimports -w on all 17 Go files with formatting issues - Set CGO_ENABLED=0 on all CI steps (test, lint, build, CodeQL, SBOM) - Remove -race flag from tests (requires CGO which pulls in blst.h) - All 17 test packages pass with CGO_ENABLED=0	2025-12-27 23:01:00 -08:00
zeekay	353850b5a7	feat: dashboard pages + security hardening for intents, settlements, tx lifecycle ... Backend: - Reorg detection in tx tracker (re-verify block hash, detect receipt disappearance) - Post-finalization safety margin (6 extra blocks before stopping tracking) - Server-side HSM co-signing (HSMProvider interface, server calls HSM directly) - Background intent expiry reaper (5-min sweep for stuck intents) - Domain-separated intent hashing (lux-mpc-intent:v1 prefix) - Backup rate limiting (max 3 active per wallet) - Default backup changed to 2-of-3 (iCloud + HSM + offline) for fault tolerance - All status transitions now use RecordTransition with proper actors Frontend: - Intents list page with status filter - Intent detail page with lifecycle progress bar, sign/co-sign actions - Settlements list page with status filter - Settlement detail page with lifecycle, HSM signatures, transfer agency - Enhanced transaction detail with on-chain confirmation, revert reason, status history - Wallet backup UI with Shamir shard visualization - Updated StatusBadge with all new status colors - Nav updated with Intents + Settlements links - Co-sign UI updated for server-side HSM flow (key_id only, no client signature)	2025-12-27 18:16:15 -08:00
zeekay	a42050c830	feat: tx lifecycle tracking, Shamir backup sharding, settlement engine ... Transaction Lifecycle ("did the tx land?"): - TxTracker polls eth_getTransactionReceipt for block inclusion - Receipt fields: blockNumber, blockHash, receiptStatus, gasUsed, revertReason - Confirmation counter with configurable target (default 12) - StatusHistory records every state transition with timestamp and actor - Stuck/dropped tx detection with webhook alerts Backup Key Sharding (Secure Recovery Flow): - GF(2^8) Shamir Secret Sharing (ShamirSplit/ShamirCombine) - WalletBackup: AES-256-GCM encrypt key share, Shamir-split the key - Labeled shard destinations: icloud, hsm, offline, custody, device - Default 2-of-2 (iCloud + Platform HSM), institutional 3-of-5 Settlement & Intent Engine: - Intent lifecycle: pending_sign → signed → co_signed → recorded → matched - HSM co-signing as second signer in multisig flow - Settlement with HSM multisig attestation collection - TransferAgency hash registration and verification - WalletBackup, Intent, Settlement DB models API Routes: - POST/GET /intents, /intents/:id/sign, /intents/:id/co-sign - GET /settlements, /settlements/:id - POST/GET /wallets/:id/backup - New webhooks: tx.included, tx.finalized, tx.reverted, intent.* 40 tests passing across backup, settlement, txtracker, api packages.	2025-12-27 18:09:37 -08:00