Module coordinator 

Async session coordinator for distributed threshold signing.

The coordinator service enables globally distributed threshold signers to participate when convenient — no simultaneity required.

This crate provides the session state machine, commitment/share buffering, audit logging, and a real TCP server + client for network communication.

See TODO.roadmap/29-tc-coordinator-design.md for the full spec.

Re-exports

pub use audit::*;

pub use coordinator::*;

pub use session::*;

Modules

abort

Identifiable abort — pinpoint which signer submitted a bad share.

admin

Coordinator admin API — privileged operations for operators.

alerts

Prometheus alerting rules for the coordinator metrics.

audit

Audit log for coordinator sessions.

backpressure

Backpressure — limits concurrent active sessions.

batch

Batch signing — coordinate multiple messages under one batch ID.

capabilities

Coordinator capability advertisement — feature flags.

checkpoint

Session checkpoint manager — periodic WAL checkpointing.

client

TCP signer client — connects to coordinator, participates in signing sessions.

connection_stats

Connection statistics — per-signer operational telemetry.

coordinator

Coordinator service — owns sessions, dispatches commitments/shares.

diagnostics

Coordinator diagnostics — self-health report generation.

frost_integration

FROST coordinator integration — wire FROST into the coordinator.

grafana

Grafana dashboard JSON generation for coordinator metrics.

idempotency

Idempotency keys — retry-safe session creation.

leader_election

Coordinator leader election — Raft-like leader election for HA.

metrics

Coordinator metrics — Prometheus-compatible counters and gauges.

metrics_aggregator

Multi-coordinator metrics aggregator.

middleware

Middleware pipeline — unified request processing chain.

net

TCP network protocol for coordinator ↔ signer communication.

net_server

TCP coordinator server — wraps the in-memory Coordinator with a TCP server.

otlp

OTLP (OpenTelemetry Protocol) span exporter.

policy

Policy engine — enforces access-control rules on session requests.

rate_limiter

Rate limiter — token bucket implementation for DoS protection.

reaper

Session reaper — background thread that expires stale sessions.

request_log

Server request log — structured per-request logging.

scheduler

Share rotation scheduler — triggers periodic Herzberg refresh.

session

Coordinator session state machine.

session_timeout

Signing session timeout — per-session deadline enforcement.

store

Persistent session store — pluggable backend for session state.

transport

Transport abstraction for authenticated encryption.

version_negotiation

Protocol version negotiation.