Files
Satoshi Qazi Muhammed eb821b2ff5 Rewrite pezbridge-bot as notify-only, drop Noter key custody entirely
Renewing the automation key's spending allowance always needs 3-of-5
multisig approval regardless, so having this bot hold one signer's
(Noter's) private key on a VPS to auto-submit one of those three
signatures was never actually saving a real step - the other two
signers still had to sign manually every time. Once pwap-web shipped
a real multisig operations UI (and now wallet-android's Bridge screen
too), the bot's only remaining job is to detect a low allowance and
notify all 5 signers via Telegram - they each sign with their own
wallet through one of pwap-web, pezbridge-sign.pex.mom, or the wallet
app directly. Noter's mnemonic was removed from the VPS entirely
(shred -u) after this rewrite was deployed and verified.

Also adds gen_automation_key.rs (one-off key generation helper) and
the updated systemd unit with LoadCredential removed.
2026-07-14 07:38:24 -07:00

71 lines
1.9 KiB
TOML

[workspace]
[package]
name = "usdt-bridge"
version = "0.1.0"
edition = "2021"
description = "Custodial USDT Bridge: Polkadot Asset Hub <-> Pezkuwi Asset Hub (USDT.p)"
authors = ["Dijital Kurdistan Tech Institute"]
license = "Apache-2.0"
[[bin]]
name = "usdt-bridge"
path = "src/main.rs"
[[bin]]
name = "pezbridge-bot"
path = "src/bin/pezbridge_bot.rs"
[dependencies]
# Async runtime
tokio = { version = "1.36", features = ["full"] }
# Subxt for blockchain interaction
subxt = { version = "0.38" }
subxt-signer = { version = "0.38", features = ["sr25519", "subxt"] }
# Pezkuwi's own subxt fork - required for signing/submitting real transactions against
# Pezkuwi chains (vanilla subxt's default extrinsic params don't match this chain's actual
# signed-extension/hasher setup and produce "bad signature" errors on submission).
pezkuwi-subxt = "0.44.0"
pezkuwi-subxt-signer = { version = "0.44.0", features = ["sr25519"] }
# Crypto
sp-core = { version = "34.0.0", default-features = false }
sp-keyring = { version = "39.0.0" }
sp-runtime = { version = "39.0.5", default-features = false }
# Serialization
serde = { version = "1.0", features = ["derive"] }
serde_json = "1.0"
# CLI
clap = { version = "4.4", features = ["derive"] }
# Logging
tracing = "0.1"
tracing-subscriber = { version = "0.3", features = ["env-filter"] }
# Hex encoding
hex = "0.4"
# BIP39 mnemonic
bip39 = "2.0"
# Date/time
chrono = { version = "0.4", features = ["serde"] }
# Async streams
futures = "0.3"
# Telegram Bot API HTTP client (pezbridge-bot only). rustls instead of native-tls/OpenSSL so
# this cross-compiles cleanly to a static musl binary (no OpenSSL sysroot needed for the target).
reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls"] }
# Error handling
anyhow = "1.0"
thiserror = "1.0"
# Simple file-based storage (no native compilation needed)
# Database tracking via JSON files for simplicity