2b4fdff0c0
end-to-end working wallet: paste 24-word mnemonic, age-encrypt at rest,
on unlock derive root + payment + stake keys, build cip-19 base address,
serve four tools over mcp stdio (wallet.address, wallet.network,
wallet.balance, wallet.utxos).
deps added: ed25519-bip32 0.4 (pallas only ships raw ed25519, not the
cardano variant of bip32 hd derivation), cryptoxide 0.4 for pbkdf2-hmac-sha512,
age 0.10 for at-rest mnemonic encryption, rpassword 7 for tty-only passphrase
prompts, toml 0.9 for config.toml.
new modules:
- crates/aldabra-core/src/derive.rs — payment + stake key derivation, hash
- crates/aldabra-chain/src/koios.rs — real reqwest impl, asset aggregation
- crates/aldabra-mcp/src/{bootstrap,config,tools}.rs
caught one bug pre-flight: get_balance was clobbering same-asset
quantities across utxos instead of summing. fixed + regression test.
headless support via ALDABRA_PASSPHRASE env (mcp clients own stdin so
the rpassword prompt path can't run). docker secret / systemd
EnvironmentFile sources it in production.
dockerfile: multi-stage rust:1.95-bookworm → debian:bookworm-slim, tini
as pid1, non-root aldabra user, /var/lib/aldabra owned 700.
29 unit tests + 1 ignored live-koios test. preprod smoke test exercised
initialize → tools/list → tools/call wallet.address end-to-end via
piped json-rpc; correct preprod address came back from canonical
abandon-art mnemonic.
phase 2 (send) is next.
37 lines
1.2 KiB
TOML
37 lines
1.2 KiB
TOML
# aldabra-core — pure crypto + types. No I/O, no network. Deterministic
|
|
# given the same mnemonic + derivation path.
|
|
#
|
|
# This crate is intentionally narrow:
|
|
# - Mnemonic → root key
|
|
# - Root key → payment / stake key (CIP-1852 derivation)
|
|
# - Address construction (mainnet, testnet)
|
|
# - Transaction signing (given an unsigned TX builder output from
|
|
# aldabra-chain or pallas-txbuilder)
|
|
#
|
|
# It deliberately does NOT:
|
|
# - Do any chain queries (that's aldabra-chain's job)
|
|
# - Talk to MCP (that's aldabra-mcp's job)
|
|
# - Touch files (the daemon owns disk I/O; we get keys handed in)
|
|
#
|
|
# Rationale: this is the most security-sensitive crate. Keeping it
|
|
# narrow + I/O-free makes it auditable.
|
|
|
|
[package]
|
|
name = "aldabra-core"
|
|
version.workspace = true
|
|
edition.workspace = true
|
|
license-file.workspace = true
|
|
repository.workspace = true
|
|
authors.workspace = true
|
|
|
|
[dependencies]
|
|
pallas-primitives = { workspace = true }
|
|
pallas-codec = { workspace = true }
|
|
pallas-crypto = { workspace = true }
|
|
pallas-addresses = { workspace = true }
|
|
bip39 = { workspace = true }
|
|
ed25519-bip32 = { workspace = true }
|
|
cryptoxide = { workspace = true }
|
|
zeroize = { workspace = true }
|
|
thiserror = { workspace = true }
|
|
serde = { workspace = true }
|