2 Commits

Include renames

Author	SHA1	Message	Date
jwinterm	00e04c74bb	security: harden admin auth, reconciler locking, and connection pooling ... - Use secrets.compare_digest for timing-safe admin key comparison - Strip whitespace from ADMIN_API_KEY env var - Add PostgreSQL advisory locks per-invoice in reconciler to prevent duplicate processing during deployments - Add wallet-RPC retry with backoff (3 attempts: 0.5s, 1s, 2s) - Raise MAX_SUBADDRESS_INDEX from 100 to 300 - Tune DB connection pool (pool_size=20, max_overflow=10, recycle=3600) - Add 1-hour admin session timeout - Regenerate UI lockfile	2026-03-15 10:49:55 -04:00
jwinterm	d85e26fbbd	Add admin panel for merchant management ... - POST/GET/DELETE /api/admin/users endpoints - Admin UI at /admin with login, user list, create/delete - Auth via ADMIN_API_KEY env var (separate from tenant auth) - Tenants remain scoped to their own store only	2026-03-10 11:25:02 -04:00