jwinterm a80fa46daf feat(config): configurable restart_apply_mode + graceful shutdown (Stage 3b) ...

- console section: restart_apply_mode (manual | auto), an operator setting (runtime-safe,
  DB-overridable via /admin/config), env RESTART_APPLY_MODE default manual.
- Graceful shutdown: main serve now awaits SIGTERM/Ctrl-C OR an in-app shutdown signal
  (AppState.shutdown Notify) via with_graceful_shutdown, draining in-flight requests.
- PUT /admin/config in `auto` mode self-restarts shortly after responding to apply a
  restart-required change (systemd Restart=always brings it back with the new config);
  `manual` just flags restart_pending. The console warns before an auto save.

Stage 3 complete: operator config is readable + editable through the real validated,
audited, precedence-based layer; runtime-safe edits apply live, infra edits restart.
cargo all-targets clean, lib tests pass.

2026-07-18 14:08:33 -04:00

..

common

feat(config): configurable restart_apply_mode + graceful shutdown (Stage 3b)

2026-07-18 14:08:33 -04:00

.env.example

test: L1 integration harness (Postgres-backed, fundless)

2026-06-22 18:54:24 -04:00

admin_audit.rs

feat(admin): tamper-evident privileged-action audit chain [operator §0.4]

2026-06-26 06:06:54 -04:00

admin_auth.rs

feat(config): effective config via ArcSwap + DB overlay at boot (Stage 2)

2026-07-18 06:00:16 -04:00

admin_keys.rs

feat(admin): allowlist + integrity-MAC data model [operator §0.3/§1.2]

2026-06-25 18:38:57 -04:00

admin_plane.rs

feat(admin,landing): admin-plane hardening + public landing [operator §2]

2026-06-27 15:32:11 -04:00

admin_sessions.rs

feat(admin): admin session JWTs + admin_sessions queries [operator §0.3]

2026-06-25 18:46:50 -04:00

auth_flow.rs

test: L1 integration harness (Postgres-backed, fundless)

2026-06-22 18:54:24 -04:00

capabilities.rs

feat(capabilities): honest secret-presence downgrade + admin features view [operator §4]

2026-06-27 15:35:56 -04:00

challenges.rs

feat(db): unified single-use challenge store [operator §0.2]

2026-06-25 17:33:59 -04:00

cors.rs

test(harness): expose response headers + config override; verify per-route CORS

2026-07-08 09:23:17 -04:00

db_queries.rs

test: L1 integration harness (Postgres-backed, fundless)

2026-06-22 18:54:24 -04:00

erasure.rs

feat(config): effective config via ArcSwap + DB overlay at boot (Stage 2)

2026-07-18 06:00:16 -04:00

invite_codes.rs

feat(registration): composable gate framework + invite codes (gate #1)

2026-06-30 17:14:53 -04:00

landing.rs

feat(admin,landing): admin-plane hardening + public landing [operator §2]

2026-06-27 15:32:11 -04:00

nostr_auth.rs

feat(config): effective config via ArcSwap + DB overlay at boot (Stage 2)

2026-07-18 06:00:16 -04:00

nostr_register.rs

feat(config): effective config via ArcSwap + DB overlay at boot (Stage 2)

2026-07-18 06:00:16 -04:00

payment_invoices.rs

feat(registration): pay-to-register via pluggable payment provider (gate #3)

2026-06-30 21:30:12 -04:00

premium.rs

fix(config): fail closed on POW_REQUIRED without FEATURE_POW; harden premium key check

2026-07-02 19:47:38 -04:00

prices.rs

fix(prices,config): harden per-feed control + fail-closed gaps (adversarial review)

2026-06-25 17:25:52 -04:00

rate_limit.rs

feat: per-IP rate limiting (tower_governor tiers) + ConnectInfo wiring

2026-06-23 19:02:03 -04:00

registration_atomicity.rs

security(auth): make gated registration fully atomic (F3/F4 fast-follow)

2026-07-06 05:58:04 -04:00

relay_admission.rs

feat(config): effective config via ArcSwap + DB overlay at boot (Stage 2)

2026-07-18 06:00:16 -04:00

server_config.rs

fix(admin): create-admin-wallet fully bootstraps a fresh instance (latch + compose)

2026-07-02 03:19:32 -04:00

tips.rs

tips: grin config gate, reorg sweep_txid preservation, LWS import retry

2026-07-11 12:21:03 -04:00

wallet_btc_ltc.rs

feat: BTC/LTC wallet handlers (electrum proxy, authenticated)

2026-06-23 11:57:43 -04:00

wallet_grin_relay.rs

feat: Grin slatepack relay (non-custodial async mailbox, feature-flagged)

2026-06-23 17:39:13 -04:00

wallet_grin.rs

feat: Grin wallet handlers (view-only, non-custodial)

2026-06-23 16:02:44 -04:00

wallet_xmr_wow.rs

feat: XMR/WOW wallet handlers (LWS proxy, stateless-forward)

2026-06-23 14:32:38 -04:00