[corpetty]

Summary

• Members' own accounts (exo-1f9). A member shares an account their muster keystore holds with the room (a LEZ public account first), so anyone in the room can use it where an account of theirs is needed.
  • The proof. member/<who>/account/<address> is author-signed and carries the account key's BIP-340 signature over hash-input muster.member-account.v1 {room, member, chain, kind, key}. So it counts only for that member, only in this room, and only for the first member who proved that key.
  • Stopping. /retract takes an account back.
  • Labels. The keystore label is never sent. The owner's client derives the candidates (crypto/account_labels.nim: lez-member/0, the paying account; lez-account/<n>, fresh ones).
  • Hosted: coordinate_disclose_my_account, coordinate_member_accounts, coordinate_retract_my_account.
• LEZ multisig setup with them.
  • lez_msig_open {accounts: {identity: key}} picks, for any member, one of the accounts they shared as their approval key. It counts as their join, so their client derives no fresh key.
  • The driver, settlement and proposing find a member's key through myMsigLabel: the derived key or a shared account, whichever the config holds.
  • An account the member did not share is refused at open.
  • The fresh per-multisig key stays the default, because the public posture puts keys on chain and one account used in several multisigs links them. The UI says so.
• UI. The room's accounts panel gets "Members' own accounts" (Share a new LEZ account, Share my paying account, Stop sharing). The LEZ multisig form gets each member's approval key: a new key, or one of the accounts they shared. Looking at it on a display found two layout problems, both fixed: a row that widened the whole narrow panel, and a Create button placed before the choices it depends on.
• Releases ship every platform (exo-04f). catalog-release.sh takes muster_module and muster_ui from the lgx variants run that built HEAD (linux-amd64, linux-arm64, darwin-arm64). When no run built HEAD, it dispatches one and waits. --here builds for this host only, as every release so far did.

Tests

• module/tests/run-suite.sh: 278/278.
• member_accounts_test 5/5:
  • disclosure and proof;
  • another member's key, another room's proof, and an unauthored disclosure are all refused;
  • retract;
  • a multisig set up with Bob's account: his join, the config's key, his approval counted;
  • his proposal.
• lez_msig_live_e2e §7 on a local LEZ v0.3 zone: the program paid on Bob's approval and on his proposal, both signed with his shared account.
• On a display (two runners, Xvfb): A shared an account, picked it as its own approval key, and created a 2-of-2. The program's config holds that key.
• scripts/ui-parity.sh 12/12; scripts/ui-lint.sh 0 new; check-action-corpus (new room/share-my-account).

🤖 Generated with Claude Code