admin.proto

syntax = "proto3";

package mostro.admin.v1;

// Admin service for direct communication with Mostro daemon
service AdminService {
  // Cancel an order as admin
  rpc CancelOrder(CancelOrderRequest) returns (CancelOrderResponse);
  
  // Settle a disputed order as admin
  rpc SettleOrder(SettleOrderRequest) returns (SettleOrderResponse);
  
  // Add a new dispute solver
  rpc AddSolver(AddSolverRequest) returns (AddSolverResponse);
  
  // Take a dispute for resolution
  rpc TakeDispute(TakeDisputeRequest) returns (TakeDisputeResponse);

  // Backward compatibility only: password is ignored; SQLite is not encrypted
  rpc ValidateDbPassword(ValidateDbPasswordRequest) returns (ValidateDbPasswordResponse);

  // Get Mostro version
  rpc GetVersion(GetVersionRequest) returns (GetVersionResponse);

  // Enable/disable maintenance (drain) mode. Loopback peers only.
  // While enabled the daemon rejects new-order/take-buy/take-sell with
  // CantDo(maintenance_mode); everything on existing orders keeps working.
  rpc SetMaintenanceMode(SetMaintenanceModeRequest) returns (SetMaintenanceModeResponse);

  // Maintenance flag plus the counters of what is still bound to the
  // connected Lightning node (docs/MAINTENANCE_MODE_LN_MIGRATION.md §1.3).
  rpc GetMaintenanceStatus(GetMaintenanceStatusRequest) returns (GetMaintenanceStatusResponse);
}

// Request to cancel an order
message CancelOrderRequest {
  string order_id = 1;
  optional string request_id = 2;
  // When true the daemon refuses any order that is not still pre-trade
  // (pending / waiting-taker-bond) instead of falling through to the
  // dispute-resolution cancel. Operator tooling that means "cancel this
  // pending order" must set it so a mistyped id can never close a dispute.
  optional bool pretrade_only = 3;
}

// Response for order cancellation
message CancelOrderResponse {
  bool success = 1;
  optional string error_message = 2;
}

// Request to settle a disputed order
message SettleOrderRequest {
  string order_id = 1;
  optional string request_id = 2;
}

// Response for order settlement
message SettleOrderResponse {
  bool success = 1;
  optional string error_message = 2;
}

// Request to add a new solver
message AddSolverRequest {
  string solver_pubkey = 1;
  optional string request_id = 2;
}

// Response for adding a solver
message AddSolverResponse {
  bool success = 1;
  optional string error_message = 2;
}

// Request to take a dispute
message TakeDisputeRequest {
  string dispute_id = 1;
  optional string request_id = 2;
}

// Response for taking a dispute
message TakeDisputeResponse {
  bool success = 1;
  optional string error_message = 2;
}

// Backward compatibility: `password` is ignored (no DB encryption)
message ValidateDbPasswordRequest {
  string password = 1;
}

message ValidateDbPasswordResponse {
  bool success = 1;
  optional string error_message = 2;
}

// Get Mostro version
message GetVersionRequest {}

message GetVersionResponse {
  string version = 1;
}

message SetMaintenanceModeRequest {
  bool enabled = 1;
  optional string reason = 2;
  optional string request_id = 3;
}

message SetMaintenanceModeResponse {
  bool success = 1;
  optional string error_message = 2;
}

message GetMaintenanceStatusRequest {
  optional string request_id = 1;
}

// What is still bound to the connected Lightning node.
message DrainCounters {
  // A: orders with a hold invoice in a non-terminal status
  uint32 escrowed_orders = 1;
  // B: buyer payouts in flight (settled-hold-invoice + payout hash)
  uint32 inflight_payouts = 2;
  // C: dev-fee payouts claimed or in flight (marker set, not yet paid);
  // a merely unpaid dev fee is not node-bound and is not counted
  uint32 inflight_dev_fees = 3;
  // D: bond hold invoices still open (requested / locked)
  uint32 open_bonds = 4;
  // E: slashed-bond payouts in flight (pending-payout + payout hash)
  uint32 pending_bond_payouts = 5;
  // Informational: pending orders hold no escrow and do not block a switch
  uint32 pending_orders = 6;
}

message GetMaintenanceStatusResponse {
  bool enabled = 1;
  optional string reason = 2;
  // unix seconds of the last enable; absent while disabled
  optional int64 since = 3;
  DrainCounters counters = 4;
  // true when counters A..E are all zero
  bool drained = 5;
  // identity pubkey of the connected Lightning node (empty if unknown)
  string ln_node_pubkey = 6;
  // pubkey persisted by the boot guard (Phase 4); absent until first written
  optional string stored_ln_node_pubkey = 7;
}