mirror of
https://github.com/luxfi/cli.git
synced 2026-10-30 17:01:20 +00:00
zeekay
919e8605db
Adds .hanzo/workflows/cicd.yml calling the canonical pipeline and drops the GitHub-hosted workflows it replaces. Lands here because this is where the repo is written — git.hanzo.ai is upstream and github.com is its push mirror, so the same change made on github.com never reaches the runner fleet.
101 lines
3.9 KiB
Go
101 lines
3.9 KiB
Go
// Copyright (C) 2022-2025, Lux Industries, Inc. All rights reserved.
|
|
// See the file LICENSE for licensing terms.
|
|
|
|
// Package keycmd provides commands for managing cryptographic keys.
|
|
// Keys are stored in ~/.lux/keys/<name>/{ec,bls,rt,mldsa}/ directories.
|
|
package keycmd
|
|
|
|
import (
|
|
"github.com/luxfi/cli/pkg/application"
|
|
"github.com/luxfi/cli/pkg/cobrautils"
|
|
"github.com/spf13/cobra"
|
|
)
|
|
|
|
var app *application.Lux
|
|
|
|
// NewCmd creates the key command suite.
|
|
// Commands:
|
|
// - lux key create <name> - Generate new key set from mnemonic
|
|
// - lux key staker <dir> - Create a node identity (staking cert + BLS key)
|
|
// - lux key list - List all key sets
|
|
// - lux key show <name> - Show key set details and addresses
|
|
// - lux key delete <name> - Delete a key set
|
|
// - lux key export <name> - Export key set (mnemonic or individual keys)
|
|
// - lux key import <name> - Import key set from mnemonic
|
|
// - lux key lock [name] - Lock a key (clear from memory)
|
|
// - lux key unlock <name> - Unlock a key for use
|
|
// - lux key backend - Manage key storage backends
|
|
// - lux key kchain - K-Chain distributed key management
|
|
// - lux key migrate - Migrate plaintext keys to encrypted storage
|
|
func NewCmd(injectedApp *application.Lux) *cobra.Command {
|
|
app = injectedApp
|
|
cmd := &cobra.Command{
|
|
Use: "key",
|
|
Aliases: []string{"keys"},
|
|
Short: "Manage cryptographic keys for validators and accounts",
|
|
Long: `The key command suite provides tools for managing all cryptographic keys
|
|
used in the Lux network.
|
|
|
|
Key types managed:
|
|
- EC (secp256k1): Transaction signing, Ethereum compatibility
|
|
- BLS: Consensus participation, aggregated signatures
|
|
- Ring-sig (LSAG over secp256k1) for privacy
|
|
- ML-DSA: Post-quantum digital signatures (NIST Level 3)
|
|
|
|
All keys are derived from a single BIP39 mnemonic phrase using HKDF,
|
|
stored in ~/.lux/keys/<name>/ with separate subdirectories for each type.
|
|
|
|
Examples:
|
|
lux key create validator1 # Create new key set
|
|
lux key create validator1 --mnemonic # Create from existing mnemonic
|
|
lux key generate -n 5 # Batch generate 5 key sets (key-0 to key-4)
|
|
lux key generate -n 10 -p validator # Generate validator-0 to validator-9
|
|
lux key derive -n 5 # Derive 5 keys from MNEMONIC
|
|
lux key derive -n 5 --show # Show derived addresses without saving
|
|
lux key list # List all key sets
|
|
lux key show validator1 # Show public keys and addresses
|
|
lux key delete validator1 # Delete key set
|
|
lux key export validator1 # Export mnemonic (DANGER!)
|
|
lux key lock validator1 # Lock key (clear from memory)
|
|
lux key lock --all # Lock all keys
|
|
lux key unlock validator1 # Unlock key for use
|
|
lux key backend list # List available backends
|
|
lux key backend set keychain # Set default backend
|
|
lux key kchain status # Check K-Chain service
|
|
lux key kchain create mykey # Create distributed key
|
|
lux key kchain sign mykey "data" # Threshold sign data`,
|
|
RunE: cobrautils.CommandSuiteUsage,
|
|
}
|
|
|
|
// Key management commands
|
|
cmd.AddCommand(newCreateCmd())
|
|
cmd.AddCommand(newListCmd())
|
|
cmd.AddCommand(newShowCmd())
|
|
cmd.AddCommand(newDeleteCmd())
|
|
cmd.AddCommand(newExportCmd())
|
|
cmd.AddCommand(newImportCmd())
|
|
cmd.AddCommand(newGenerateCmd())
|
|
cmd.AddCommand(newDeriveCmd())
|
|
cmd.AddCommand(newGenesisCmd())
|
|
cmd.AddCommand(newExportSignerCmd())
|
|
cmd.AddCommand(newStakerCmd())
|
|
|
|
// Session management
|
|
cmd.AddCommand(newLockCmd())
|
|
cmd.AddCommand(newUnlockCmd())
|
|
|
|
// Backend management
|
|
cmd.AddCommand(newBackendCmd())
|
|
|
|
// K-Chain distributed key management
|
|
cmd.AddCommand(newKChainCmd())
|
|
|
|
// Ring signatures for anonymous signing
|
|
cmd.AddCommand(newRingCmd())
|
|
|
|
// Migration from plaintext to encrypted storage
|
|
cmd.AddCommand(newMigrateCmd())
|
|
|
|
return cmd
|
|
}
|