Module keychain 

Re-exports

use crate::cmd::auth::confirm_and_build; 🔒

use crate::cmd::print_json_or; 🔒

use crate::cmd::send::SendOptions; 🔒

use crate::cmd::send::cast_send; 🔒

use crate::cmd::tempo_policy_args::parse_period; 🔒

use crate::cmd::tempo_policy_args::parse_scope; 🔒

use crate::cmd::tempo_policy_args::parse_selector_bytes; 🔒

use crate::tempo::apply_fee_payment; 🔒

use crate::tempo::print_expires; 🔒

use crate::tempo::require_hardfork; 🔒

use crate::tempo::sponsor_hash; 🔒

use crate::tempo::tempo_provider; 🔒

use crate::tx::CastTxBuilder; 🔒

use crate::tx::SendTxOpts; 🔒

use crate::tx::SenderKind; 🔒

use crate::tx::apply_poll_interval; 🔒

use alloy_consensus::BlockHeader; 🔒

use alloy_ens::NameOrAddress; 🔒

use alloy_network::EthereumWallet; 🔒

use alloy_network::NetworkTransactionBuilder; 🔒

use alloy_primitives::Address; 🔒

use alloy_primitives::B256; 🔒

use alloy_primitives::Bytes; 🔒

use alloy_primitives::U256; 🔒

use alloy_primitives::hex; 🔒

use alloy_primitives::hex; 🔒

use alloy_provider::Provider; 🔒

use alloy_provider::ProviderBuilder as AlloyProviderBuilder; 🔒

use alloy_rpc_types::BlockId; 🔒

use alloy_signer::Signer; 🔒

use alloy_sol_types::SolCall; 🔒

use chrono::DateTime; 🔒

use clap::Parser; 🔒

use eyre::Result; 🔒

use foundry_cli::json::print_json_object; 🔒

use foundry_cli::json::print_json_success; 🔒

use foundry_cli::opts::RpcOpts; 🔒

use foundry_cli::opts::TempoOpts; 🔒

use foundry_cli::opts::TransactionOpts; 🔒

use foundry_cli::utils::LoadConfig; 🔒

use foundry_cli::utils::now; 🔒

use foundry_cli::utils::parse_fee_token_address; 🔒

use foundry_cli::utils::parse_json; 🔒

use foundry_cli::utils::resolve_lane; 🔒

use foundry_common::provider::ProviderBuilder; 🔒

use foundry_common::sh_warn; 🔒

use foundry_common::shell; 🔒

use foundry_common::tempo; 🔒

use foundry_common::tempo::AccountsStoreView; 🔒

use foundry_common::tempo::KeyType; 🔒

use foundry_common::tempo::active_tempo_hardfork; 🔒

use foundry_common::tempo::is_tempo_hardfork_active; 🔒

use foundry_common::tempo::read_tempo_accounts_store; 🔒

use foundry_common::tempo::tempo_accounts_store_path; 🔒

use foundry_evm::hardfork::TempoHardfork; 🔒

use foundry_wallets::BrowserWalletOpts; 🔒

use foundry_wallets::WalletOpts; 🔒

use foundry_wallets::WalletSigner; 🔒

use foundry_wallets::wallet_browser::signer::BrowserSigner; 🔒

use serde::Deserialize; 🔒

use serde::Deserialize; 🔒

use serde_json::Value; 🔒

use serde_json::json; 🔒

use std::fmt::Display; 🔒

use tempo_alloy::TempoNetwork; 🔒

use tempo_alloy::provider::TempoProviderExt; 🔒

use tempo_contracts::precompiles::ACCOUNT_KEYCHAIN_ADDRESS; 🔒

use tempo_contracts::precompiles::DEFAULT_FEE_TOKEN; 🔒

use tempo_contracts::precompiles::IAccountKeychain; 🔒

use tempo_contracts::precompiles::IAccountKeychain::CallScope; 🔒

use tempo_contracts::precompiles::IAccountKeychain::KeyInfo; 🔒

use tempo_contracts::precompiles::IAccountKeychain::KeyRestrictions; 🔒

use tempo_contracts::precompiles::IAccountKeychain::LegacyTokenLimit; 🔒

use tempo_contracts::precompiles::IAccountKeychain::SelectorRule; 🔒

use tempo_contracts::precompiles::IAccountKeychain::SignatureType; 🔒

use tempo_contracts::precompiles::IAccountKeychain::TokenLimit; 🔒

use tempo_contracts::precompiles::ISignatureVerifier; 🔒

use tempo_contracts::precompiles::ITIP20; 🔒

use tempo_contracts::precompiles::PATH_USD_ADDRESS; 🔒

use tempo_contracts::precompiles::SIGNATURE_VERIFIER_ADDRESS; 🔒

use tempo_contracts::precompiles::account_keychain::authorizeAdminKeyCall; 🔒

use tempo_contracts::precompiles::account_keychain::authorizeKeyCall; 🔒

use tempo_contracts::precompiles::account_keychain::authorizeKeyWithWitnessCall; 🔒

use tempo_contracts::precompiles::account_keychain::legacyAuthorizeKeyCall; 🔒

use tempo_primitives::transaction::CallScope as AuthCallScope; 🔒

use tempo_primitives::transaction::KeyAuthorization; 🔒

use tempo_primitives::transaction::PrimitiveSignature; 🔒

use tempo_primitives::transaction::SignatureType as AuthSignatureType; 🔒

use tempo_primitives::transaction::SignedKeyAuthorization; 🔒

use tempo_primitives::transaction::TokenLimit as AuthTokenLimit; 🔒

use yansi::Paint; 🔒

Structs

AuthScopesJson

Newtype wrapper for parsed key-authorization --scopes JSON.

Doctor 🔒

Accumulated cast keychain doctor report.

DoctorCandidate 🔒

Candidate subject collected before the RPC chain is known.

DoctorContext 🔒

DoctorStep 🔒

DoctorSubject 🔒

Result of resolving a Tempo Accounts store entry for the doctor.

InspectedLimit 🔒

JsonCallScope 🔒

Represents a single scope entry in JSON format for --scopes.

JsonSelectorWithRecipients 🔒

KeyAuthorizationArgs

Common fields for cast key-authorization encode and cast key-authorization sign.

ScopesJson

Newtype wrapper for parsed --scopes JSON so clap can treat it as a single value.

Enums

AllowedCallMatch 🔒

Outcome of TIP-1011 allowed-call matching.

AllowedCallsView 🔒

ChainTimestamp 🔒

DoctorStatus 🔒

JsonSelectorEntry 🔒

A selector entry can be either a plain string or an object with recipients.

KeyAuthorizationSubcommand

Tempo key-authorization artifact helpers.

KeyRegistration 🔒

KeychainPolicySubcommand

Higher-level access-key policy editing commands.

KeychainRootSigner 🔒

KeychainSubcommand

Tempo keychain management commands.

KeychainTxOutcome 🔒

Constants

ACCOUNTS_STORE 🔒

ALLOWED_CALLS 🔒

CHAIN_ID 🔒

EXPIRING_NONCE 🔒

EXPIRY 🔒

FEE_TOKEN_BALANCE 🔒

HARDFORK 🔒

HARDFORK_UNKNOWN_HINT 🔒

KEY_REGISTRATION 🔒

LOCAL_SIGNING 🔒

REVOCATION 🔒

RPC 🔒

SPENDING_LIMITS 🔒

SPONSORSHIP 🔒

WIDEN_POLICY_HINT 🔒

Functions

abi_key_type 🔒

The key type of an ABI signature type; None for values outside the known variants.

add_selector_rule_to_scope 🔒

Merges rule into scope; returns whether the scope changed.

address_label 🔒

address_label_with_address 🔒

allowed_calls_to_json 🔒

check_allowed_calls 🔒

Step 10 helper: allowed calls (TIP-1011) of the on-chain key, or of pending when the key is not registered yet.

check_authorization_spending_limits 🔒

Step 9 helper: spending limits of a pending key_authorization.

check_expiring_nonce 🔒

Validate TIP-1009 expiring-nonce options, if supplied.

check_expiring_nonce_window 🔒

Checks the validity window against the chain timestamp. The upper bound depends on the active hardfork and is skipped when it is unknown.

check_expiry 🔒

Expiry check shared by on-chain keys (prefix empty) and pending authorizations (prefix = "key_authorization "). None means the key never expires.

check_fee_token_balance 🔒

Fee-token balance of the account paying for the transaction.

check_hardfork 🔒

check_local_signing_readiness 🔒

Step 4 helper: verify whether the local side can actually sign as the key.

check_spending_limits 🔒

Step 9 helper: spending limits of an on-chain key.

check_sponsorship 🔒

Validate sponsorship configuration, if supplied; returns the step and the fee payer.

collect_local_candidates 🔒

Step 1 helper: collect Tempo Accounts store candidates.

decode_and_validate_key_authorization 🔒

Decode a hex RLP key authorization (signed or unsigned) and validate its account binding.

diagnose_allowed_scopes 🔒

ensure_root_sender 🔒

Ensures what is signed by the expected root account when one is known.

fetch_chain_timestamp 🔒

format_duration_words 🔒

format_expiry 🔒

format_expiry_for_inspect 🔒

format_period_end 🔒

format_period_suffix 🔒

(period resets ...) for a non-zero period end, empty otherwise.

format_recipients 🔒

format_relative_timestamp 🔒

format_relative_timestamp_from 🔒

format_selector 🔒

format_timestamp_iso 🔒

format_utc 🔒

inspected_limit_to_json 🔒

key_entry_to_json 🔒

key_role 🔒

root when the key is the account EOA itself, admin when it is a T6 admin key, otherwise limited.

key_type_label 🔒

key_type_name 🔒

list_keys 🔒

cast keychain list / cast keychain show <wallet_address> — display Tempo Accounts store entries, optionally filtered to one wallet.

load_accounts_store 🔒

match_allowed_call 🔒

Pure TIP-1011 matching logic.

parse_auth_limit 🔒

Parse a --limit TOKEN:AMOUNT[:PERIOD] flag value.

parse_auth_scope 🔒

parse_auth_scopes_json_wrapped 🔒

parse_auth_signature_type 🔒

parse_limit 🔒

parse_scopes_json 🔒

Parse --scopes JSON flag value.

parse_scopes_json_wrapped 🔒

parse_signature_type 🔒

print_allowed_calls 🔒

print_inspected_limits 🔒

print_key_entry 🔒

print_signed_key_authorization 🔒

redact_private_key_uri_tokens 🔒

remaining_limit 🔒

Remaining spending limit for token and, on T3+, the current period end.

resolve_key_metadata 🔒

Resolves the root account of key_address and its local Accounts store entry, if any.

resolve_keychain_root_signer 🔒

Resolve the root-authorized signer used for AccountKeychain policy changes.

run_authorize 🔒

cast keychain authorize / cast keychain auth — authorize a key on-chain.

run_check 🔒

cast keychain check / cast keychain info — query on-chain key status.

run_inspect 🔒

cast keychain inspect <key_address> — inspect on-chain key policy.

run_key_auth_inspect 🔒

cast key-authorization inspect — decode a signed or unsigned key authorization and print its fields, including the T6 is_admin / account fields.

run_key_auth_sign 🔒

run_policy_add_call 🔒

cast keychain policy add-call — merge a selector rule into a target scope.

run_verify_keychain 🔒

cast keychain verify / verify-admin — verify a Tempo keychain signature (T6).

sanitize_sponsor_config_error 🔒

select_subject_for_chain 🔒

Step 3 helper: filter candidates to the RPC chain id and pick a single entry.

selector_signature 🔒

send_keychain_call 🔒

Send an AccountKeychain precompile call as a root-authorized transaction.

send_keychain_tx 🔒

Send calldata to the Tempo AccountKeychain precompile as a root-authorized transaction.

send_keychain_tx_with_root_signer 🔒

Send AccountKeychain calldata with an already-resolved root signer.

tempo_accounts_store_path_display 🔒

validate_pending_key_authorization 🔒

Validates the local pending key_authorization, returning it with its pass detail.

Type Aliases

Check 🔒

A doctor check as (name, label).