zeekay
08c09c0349
feat(zapauth): JWKS-bearer gate on KMS-facing ZAP server (LP-103)
...
New pkg/zapauth verifies a JWT presented in OpAuthHello (0x00EF)
BEFORE the X25519+ML-KEM-768 hybrid handshake. Per-peer claims are
attached by ZAP peer ID and consulted on every opcode dispatch.
Backwards compatible: defaults to auth=off so v1.13.x clients keep
working. ZAP_AUTH_REQUIRED=true rejects unauthenticated peers; the
flip happens after every KMS deploys with bearer minting (luxfi/kms
v1.9.0 pkg/iamclient).
- pkg/zapauth/{verifier,verifier_test}.go — Verifier, JWKS cache,
AuthHello frame, stdlib-only signature verification (RS/ES/EdDSA).
- pkg/api/zap_kms_server.go — KMSZapConfig, StartKMSZAPWith, per-op
checkAuth gate, OpAuthHello handler.
- pkg/api/zap_kms_server_auth_test.go — required+advisory+missing+bad
token + nil-verifier integration tests against a self-contained
ES256 JWKS endpoint.
- cmd/mpcd/main.go — wires ZAP_JWKS_URL / ZAP_EXPECTED_ISS /
ZAP_EXPECTED_AUDIENCES / ZAP_AUTH_REQUIRED env vars.
- docs/zap-auth.md, LLM.md — protocol reference + LLM map entry.
Tests: pkg/zapauth (13/13), pkg/api KMSZAP (10/10 — 5 original +
5 new auth integration), pkg/zap (existing untouched).
2026-05-02 09:30:48 -07:00
zeekay
e32d6d0c56
neutral: drop 'Lux'/'Hanzo' brand prefixes in user-facing strings
...
MPC and KMS are protocols, not products. The Go module path
github.com/luxfi/mpc remains canonical (location), but user-facing
strings (--help, README, comments, banners) are brand-neutral.
'Lux MPC' → 'MPC', 'Lux KMS' → 'KMS', 'Hanzo MPC' → 'MPC'.
2025-12-28 15:34:18 -08:00
zeekay
dee0f7a593
fix: Geist fonts in docs, round buttons across dashboard
...
- Replace Inter with Geist Sans/Mono in docs site
- Add geist package to docs dependencies
- Round all buttons to rounded-lg in dashboard and login pages
2025-12-27 10:26:05 -08:00
zeekay
0e2abd6ae1
Update docs
2025-12-25 13:12:32 -08:00
zeekay
871a101457
docs: fix fumadocs imports and dependencies
...
- Change RootProvider import to fumadocs-ui/provider/next
- Change DocsLayout import to fumadocs-ui/layouts/docs
- Change DocsPage/DocsBody imports to fumadocs-ui/page
- Change loader import to fumadocs-core/source
- Add missing dependencies: fumadocs-core, fumadocs-mdx, fumadocs-ui
- Add react-day-picker and react-resizable-panels
- Update zod to v4.2.1
- Add .docs/ to gitignore
2025-12-25 11:01:10 -08:00
zeekay
04315470a0
docs: add comprehensive documentation site
...
- Next.js 16 + React 19 with @hanzo/mdx and @hanzo/ui
- Full protocol documentation (ECDSA, EdDSA, Taproot)
- Architecture and component guides
- CLI reference and deployment configs
- Network integration guides (XRPL, Bitcoin, Ethereum)
- API reference documentation
2025-12-25 10:51:11 -08:00
zeekay
207b5e7bb4
docs: add documentation and threshold crypto adapter
2025-12-25 09:13:09 -08:00
zeekay
6c52623dc0
Add docs
2025-12-13 00:12:21 -08:00
zeekay
83969bc35e
feat: Complete migration to luxfi/threshold library
...
Major changes:
- Replaced Binance TSS library with luxfi/threshold (supports CGGMP21 & FROST)
- Added XRPL network support for secp256k1 signatures
- Implemented resharing functionality for both ECDSA and EdDSA
- Fixed protocol adapters for CGGMP21 and FROST
- Updated event consumer to use new node methods
- Fixed all build errors in core packages
Technical improvements:
- Simplified party.ID usage (now string-based)
- Added proper message types and encoding
- Updated session interfaces with required methods
- Fixed test suite to work with new library structure
All core package tests passing. Ready for mainnet deployment.
2025-08-02 20:49:39 -05:00
zeekay
0b8661ced9
Use new threshold lib
2025-08-02 15:49:26 -05:00
zeekay
4ec50522c9
Add benchmarks, tests, updated docs
2025-08-02 15:27:50 -05:00
zeekay