Skip to main contentModule keychain
Source - AuthScopesJson
- Newtype wrapper for parsed key-authorization
--scopes JSON. - Doctor 🔒
- Accumulated
cast keychain doctor report. - DoctorCandidate 🔒
- Candidate subject collected before the RPC chain is known.
- DoctorContext 🔒
- DoctorStep 🔒
- DoctorSubject 🔒
- Result of resolving a Tempo Accounts store entry for the doctor.
- InspectedLimit 🔒
- JsonCallScope 🔒
- Represents a single scope entry in JSON format for
--scopes. - JsonSelectorWithRecipients 🔒
- KeyAuthorizationArgs
- Common fields for
cast key-authorization encode and cast key-authorization sign. - ScopesJson
- Newtype wrapper for parsed
--scopes JSON so clap can treat it as a single value.
- AllowedCallMatch 🔒
- Outcome of TIP-1011 allowed-call matching.
- AllowedCallsView 🔒
- ChainTimestamp 🔒
- DoctorStatus 🔒
- JsonSelectorEntry 🔒
- A selector entry can be either a plain string or an object with recipients.
- KeyAuthorizationSubcommand
- Tempo key-authorization artifact helpers.
- KeyRegistration 🔒
- KeychainPolicySubcommand
- Higher-level access-key policy editing commands.
- KeychainRootSigner 🔒
- KeychainSubcommand
- Tempo keychain management commands.
- KeychainTxOutcome 🔒
- ACCOUNTS_STORE 🔒
- ALLOWED_CALLS 🔒
- CHAIN_ID 🔒
- EXPIRING_NONCE 🔒
- EXPIRY 🔒
- FEE_TOKEN_BALANCE 🔒
- HARDFORK 🔒
- HARDFORK_UNKNOWN_HINT 🔒
- KEY_REGISTRATION 🔒
- LOCAL_SIGNING 🔒
- REVOCATION 🔒
- RPC 🔒
- SPENDING_LIMITS 🔒
- SPONSORSHIP 🔒
- WIDEN_POLICY_HINT 🔒
- abi_key_type 🔒
- The key type of an ABI signature type;
None for values outside the known variants. - add_selector_rule_to_scope 🔒
- Merges
rule into scope; returns whether the scope changed. - address_label 🔒
- address_label_with_address 🔒
- allowed_calls_to_json 🔒
- check_allowed_calls 🔒
- Step 10 helper: allowed calls (TIP-1011) of the on-chain key, or of
pending when the key is
not registered yet. - check_authorization_spending_limits 🔒
- Step 9 helper: spending limits of a pending
key_authorization. - check_expiring_nonce 🔒
- Validate TIP-1009 expiring-nonce options, if supplied.
- check_expiring_nonce_window 🔒
- check_expiry 🔒
- Expiry check shared by on-chain keys (
prefix empty) and pending authorizations
(prefix = "key_authorization "). None means the key never expires. - check_fee_token_balance 🔒
- Fee-token balance of the account paying for the transaction.
- check_hardfork 🔒
- check_local_signing_readiness 🔒
- Step 4 helper: verify whether the local side can actually sign as the key.
- check_spending_limits 🔒
- Step 9 helper: spending limits of an on-chain key.
- check_sponsorship 🔒
- Validate sponsorship configuration, if supplied; returns the step and the fee payer.
- collect_local_candidates 🔒
- Step 1 helper: collect Tempo Accounts store candidates.
- decode_and_validate_key_authorization 🔒
- Decode a hex RLP key authorization (signed or unsigned) and validate its account binding.
- diagnose_allowed_scopes 🔒
- ensure_root_sender 🔒
- Ensures
what is signed by the expected root account when one is known. - fetch_chain_timestamp 🔒
- format_duration_words 🔒
- format_expiry 🔒
- format_expiry_for_inspect 🔒
- format_period_end 🔒
- format_period_suffix 🔒
(period resets ...) for a non-zero period end, empty otherwise.- format_recipients 🔒
- format_relative_timestamp 🔒
- format_relative_timestamp_from 🔒
- format_selector 🔒
- format_timestamp_iso 🔒
- format_utc 🔒
- inspected_limit_to_json 🔒
- key_entry_to_json 🔒
- key_role 🔒
root when the key is the account EOA itself, admin when it is a T6 admin key, otherwise
limited.- key_type_label 🔒
- key_type_name 🔒
- list_keys 🔒
cast keychain list / cast keychain show <wallet_address> — display Tempo Accounts store
entries, optionally filtered to one wallet.- load_accounts_store 🔒
- match_allowed_call 🔒
- Pure TIP-1011 matching logic.
- parse_auth_limit 🔒
- Parse a
--limit TOKEN:AMOUNT[:PERIOD] flag value. - parse_auth_scope 🔒
- parse_auth_scopes_json_wrapped 🔒
- parse_auth_signature_type 🔒
- parse_limit 🔒
- parse_scopes_json 🔒
- Parse
--scopes JSON flag value. - parse_scopes_json_wrapped 🔒
- parse_signature_type 🔒
- print_allowed_calls 🔒
- print_inspected_limits 🔒
- print_key_entry 🔒
- print_signed_key_authorization 🔒
- redact_private_key_uri_tokens 🔒
- remaining_limit 🔒
- Remaining spending limit for
token and, on T3+, the current period end. - resolve_key_metadata 🔒
- Resolves the root account of
key_address and its local Accounts store entry, if any. - resolve_keychain_root_signer 🔒
- Resolve the root-authorized signer used for AccountKeychain policy changes.
- run_authorize 🔒
cast keychain authorize / cast keychain auth — authorize a key on-chain.- run_check 🔒
cast keychain check / cast keychain info — query on-chain key status.- run_inspect 🔒
cast keychain inspect <key_address> — inspect on-chain key policy.- run_key_auth_inspect 🔒
cast key-authorization inspect — decode a signed or unsigned key authorization and print its
fields, including the T6 is_admin / account fields.- run_key_auth_sign 🔒
- run_policy_add_call 🔒
cast keychain policy add-call — merge a selector rule into a target scope.- run_verify_keychain 🔒
cast keychain verify / verify-admin — verify a Tempo keychain signature (T6).- sanitize_sponsor_config_error 🔒
- select_subject_for_chain 🔒
- Step 3 helper: filter candidates to the RPC chain id and pick a single entry.
- selector_signature 🔒
- send_keychain_call 🔒
- Send an AccountKeychain precompile call as a root-authorized transaction.
- send_keychain_tx 🔒
- Send calldata to the Tempo AccountKeychain precompile as a root-authorized transaction.
- send_keychain_tx_with_root_signer 🔒
- Send AccountKeychain calldata with an already-resolved root signer.
- tempo_accounts_store_path_display 🔒
- validate_pending_key_authorization 🔒
- Validates the local pending
key_authorization, returning it with its pass detail.
- Check 🔒
- A doctor check as
(name, label).