privval

type PrivValidator struct {
	// contains filtered or unexported fields
}

type PrivValidatorConfig struct {
	// File path configuration.
	RootDir     string `json:"home" toml:"home"`
	SignState   string `` /* 129-byte string literal not displayed */
	LocalSigner string `` /* 138-byte string literal not displayed */

	// Remote Signer configuration (tm2-native protocol; validator dials gnokms).
	RemoteSigner *rsclient.RemoteSignerClientConfig `json:"remote_signer" toml:"remote_signer" comment:"Configuration for the remote signer client (gnokms)"`

	// TmkmsListener configures the upstream-Tendermint-protocol listener (validator
	// listens for tmkms / Horcrux to dial in). Mutually exclusive with RemoteSigner;
	// see upstream_config.go.
	TmkmsListener *TmkmsListenerConfig `` /* 164-byte string literal not displayed */
}

type TmkmsListenerConfig struct {
	// ListenAddr is the validator's listen address for inbound signer
	// connections. Format: "tcp://0.0.0.0:26659" or
	// "unix:///var/run/gnoland/privval.sock". An empty value disables
	// this mode (the existing local/remote-client paths apply).
	ListenAddr string `` /* 141-byte string literal not displayed */

	// AllowedKMSPubKeys is the allowlist of expected signer pubkeys.
	// Each entry is a hex-encoded ed25519 pubkey (32 bytes → 64 hex
	// chars), optionally with an "ed25519:" prefix. It is the only
	// authorization control on a tcp:// listener and is required there
	// (an empty list would accept any peer that completes the
	// SecretConnection handshake). On a unix:// listener it is ignored —
	// the boundary is filesystem permissions, not the pubkey allowlist.
	AllowedKMSPubKeys []string `` /* 204-byte string literal not displayed */

	// ChainID is sent in PubKeyRequest/SignVoteRequest/SignProposalRequest.
	// tmkms verifies its configured chain_id matches, refusing to sign
	// for a different network. Required for production; equivalent to
	// the chain_id field in tmkms's [[validator]] block.
	ChainID string `json:"chain_id" toml:"chain_id" comment:"Chain ID sent to the signer; must match tmkms.toml's [[validator]] chain_id."`

	// ProtocolVersion pins the upstream Tendermint privval dialect.
	// Today only "v0.34" is supported — the canonical sign-bytes in
	// upstreampb are wired to v0.34's protobuf shape. Mirrors tmkms's
	// [[validator]].protocol_version; both sides MUST agree. We refuse
	// any other value at startup rather than silently misencode votes.
	ProtocolVersion string `` /* 186-byte string literal not displayed */

	// TimeoutReadWrite is the read/write deadline applied to the held
	// signer connection. Default 5s, matching cometbft.
	TimeoutReadWrite time.Duration `json:"timeout_read_write" toml:"timeout_read_write" comment:"Read/write deadline for signer connections (default 5s)."`

	// WaitForConnectionTimeout caps how long Init() blocks waiting for
	// the signer to dial in at startup. Default 60s.
	WaitForConnectionTimeout time.Duration `` /* 144-byte string literal not displayed */

	// Retries is the per-Sign retry budget on transient errors. Zero
	// means retry forever (matches cometbft's RetrySignerClient
	// convention). Default 5.
	Retries int `json:"retries" toml:"retries" comment:"Per-Sign retry attempts on transient errors. 0 = infinite (default 5)."`

	// RetryTimeout is the sleep between retry attempts. Default 1s.
	RetryTimeout time.Duration `json:"retry_timeout" toml:"retry_timeout" comment:"Sleep between retry attempts (default 1s)."`
}