jwinterm f3d6be95b8 feat(tips): stage 2 — create / get-public / get-sent / cancel routes ...

Public-tip create/read/cancel surface matching the client contract:
- POST /tips/social (draft or funded), GET /tips/social/sent,
  GET /tips/social/:id/public (unauth; 404s non-public), POST .../:id/cancel.
- DB: insert (draft/pending_confirmation), get_sent, guarded cancel_draft
  (owner + draft-only).
- Validates is_public (targeted rejected), amount>0, claim_key_hash 64-hex,
  encrypted_key <=4096 hex, tip_address; share_url from TIP_SHARE_BASE_URL.
- ensure_tips_enabled gate; openapi paths+schemas+tag registered.
No funds move. 5 route/DB tests pass.

2026-07-10 08:50:28 -04:00

..

common

test(harness): expose response headers + config override; verify per-route CORS

2026-07-08 09:23:17 -04:00

.env.example

test: L1 integration harness (Postgres-backed, fundless)

2026-06-22 18:54:24 -04:00

admin_audit.rs

feat(admin): tamper-evident privileged-action audit chain [operator §0.4]

2026-06-26 06:06:54 -04:00

admin_auth.rs

feat(admin): allowlist key CRUD + kill-switches [operator §1.5]

2026-06-26 06:46:07 -04:00

admin_keys.rs

feat(admin): allowlist + integrity-MAC data model [operator §0.3/§1.2]

2026-06-25 18:38:57 -04:00

admin_plane.rs

feat(admin,landing): admin-plane hardening + public landing [operator §2]

2026-06-27 15:32:11 -04:00

admin_sessions.rs

feat(admin): admin session JWTs + admin_sessions queries [operator §0.3]

2026-06-25 18:46:50 -04:00

auth_flow.rs

test: L1 integration harness (Postgres-backed, fundless)

2026-06-22 18:54:24 -04:00

capabilities.rs

feat(capabilities): honest secret-presence downgrade + admin features view [operator §4]

2026-06-27 15:35:56 -04:00

challenges.rs

feat(db): unified single-use challenge store [operator §0.2]

2026-06-25 17:33:59 -04:00

cors.rs

test(harness): expose response headers + config override; verify per-route CORS

2026-07-08 09:23:17 -04:00

db_queries.rs

test: L1 integration harness (Postgres-backed, fundless)

2026-06-22 18:54:24 -04:00

erasure.rs

fix(erasure): harden per adversarial review (Subsystem 5)

2026-06-28 07:59:52 -04:00

invite_codes.rs

feat(registration): composable gate framework + invite codes (gate #1)

2026-06-30 17:14:53 -04:00

landing.rs

feat(admin,landing): admin-plane hardening + public landing [operator §2]

2026-06-27 15:32:11 -04:00

nostr_auth.rs

feat(auth): wire the Nostr link nonce — link-challenge endpoint + atomic consume

2026-07-02 04:36:40 -04:00

nostr_register.rs

security(auth): harden registration/identity against verified review findings

2026-07-06 04:23:11 -04:00

payment_invoices.rs

feat(registration): pay-to-register via pluggable payment provider (gate #3)

2026-06-30 21:30:12 -04:00

premium.rs

fix(config): fail closed on POW_REQUIRED without FEATURE_POW; harden premium key check

2026-07-02 19:47:38 -04:00

prices.rs

fix(prices,config): harden per-feed control + fail-closed gaps (adversarial review)

2026-06-25 17:25:52 -04:00

rate_limit.rs

feat: per-IP rate limiting (tower_governor tiers) + ConnectInfo wiring

2026-06-23 19:02:03 -04:00

registration_atomicity.rs

security(auth): make gated registration fully atomic (F3/F4 fast-follow)

2026-07-06 05:58:04 -04:00

relay_admission.rs

feat(relay): gRPC event-admission (nauthz) service enforcing the write policy

2026-07-02 06:46:59 -04:00

server_config.rs

fix(admin): create-admin-wallet fully bootstraps a fresh instance (latch + compose)

2026-07-02 03:19:32 -04:00

tips.rs

feat(tips): stage 2 — create / get-public / get-sent / cancel routes

2026-07-10 08:50:28 -04:00

wallet_btc_ltc.rs

feat: BTC/LTC wallet handlers (electrum proxy, authenticated)

2026-06-23 11:57:43 -04:00

wallet_grin_relay.rs

feat: Grin slatepack relay (non-custodial async mailbox, feature-flagged)

2026-06-23 17:39:13 -04:00

wallet_grin.rs

feat: Grin wallet handlers (view-only, non-custodial)

2026-06-23 16:02:44 -04:00

wallet_xmr_wow.rs

feat: XMR/WOW wallet handlers (LWS proxy, stateless-forward)

2026-06-23 14:32:38 -04:00