3 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
jwinterm	416fa53c17	feat: Nostr-native data models + initial schema ... models/db.rs: User keyed by pubkey_hash/nostr_pubkey/username (pubkey_hash and seed_fingerprint peppered at rest); Wallet, Session (platform=extension|web|nostr), UserKey, GrinSlatepack, AuditLog. Dropped all telegram/discord/social-identity columns and every tip/social/swap struct (swaps land as their own feature unit). migrations/20260622000001_initial_schema: consolidated clean schema; enum types; UNIQUE on identity columns; FK ON DELETE (CASCADE/SET NULL) for self-service erasure; indexes on every lookup column. PostgreSQL 13+.	2026-06-22 07:10:55 -04:00
jwinterm	f958aaf0f7	feat: config (fail-closed) + error handling ... config.rs (keystone, audited): - single env reader; validate() FAILS CLOSED on weak/placeholder/missing secrets (JWT_SECRET >=32 + non-placeholder, required peppers, PUBLIC_API_URL required + url-validated + https-in-prod when Nostr identity on, PoW/admin secrets when those features enabled, per-enabled-chain infra secrets hard-fail in prod) - Nostr-native + feature-flagged; NO telegram/discord/trocador; no dev-fallback keys - typed sections: auth, identity, secrets(peppers), trusted_proxies, features, chains, pow, admin, landing, retention; deployment_mode single|fleet - secret-bearing structs do not derive Debug; 7 fail-closed validation tests error.rs: CWE-209 LEAKY/SAFE split (log-private + generic public), error_code mapping, 5 regression tests.	2026-06-22 07:00:09 -04:00
jwinterm	143f00701b	chore: initial foundation — server skeleton, autodocs, CI ... - minimal Axum server exposing GET /health - OpenAPI contract generated from handlers (gen_openapi -> openapi.json), drift-gated in CI so the spec can never silently diverge from the code - CI: secret-scan + gitleaks, openapi drift gate, fmt/clippy/build/test/doc-test, cargo-deny - Cargo.lock tracked for reproducible builds; publish=false; pinned toolchain - README, SECURITY.md, deny.toml, .env.example	2026-06-22 06:18:57 -04:00