milestone 17: real deadlines, validator holes, upstream editor, trusted proxies, contract samples, badvers

src/web/openapi.yaml

@@ -2092,8 +2092,9 @@ components:
       properties:
         upstream:
           type: object
-          required: [read_timeout_ms, total_timeout_ms]
+          required: [attempt_timeout_ms, read_timeout_ms, total_timeout_ms]
           properties:
+            attempt_timeout_ms: { type: integer }
             read_timeout_ms: { type: integer }
             total_timeout_ms: { type: integer }
         dns:
@@ -2121,7 +2122,7 @@ components:
             negative_ttl_max: { type: integer }
         web:
           type: object
-          required: [enabled, bind, port, session_ttl_hours, api_rate_limit_per_min, api_localhost_exempt, sse_max_connections_per_ip, auth_enabled]
+          required: [enabled, bind, port, session_ttl_hours, api_rate_limit_per_min, api_localhost_exempt, sse_max_connections_per_ip, trusted_proxies, auth_enabled]
           properties:
             enabled: { type: boolean }
             bind: { type: string }
@@ -2130,6 +2131,12 @@ components:
             api_rate_limit_per_min: { type: integer }
             api_localhost_exempt: { type: boolean }
             sse_max_connections_per_ip: { type: integer }
+            trusted_proxies:
+              type: string
+              description: |
+                Comma-separated IP literals. A request from one of these peers
+                is identified by the last entry of its X-Forwarded-For header.
+                Empty trusts no proxy.
             auth_enabled:
               type: boolean
               description: Derived, read-only; true iff a password hash is stored.
@@ -2208,6 +2215,7 @@ components:
         upstream:
           type: object
           properties:
+            attempt_timeout_ms: { type: integer }
             read_timeout_ms: { type: integer }
             total_timeout_ms: { type: integer }
         dns:
@@ -2243,6 +2251,7 @@ components:
             api_rate_limit_per_min: { type: integer }
             api_localhost_exempt: { type: boolean }
             sse_max_connections_per_ip: { type: integer }
+            trusted_proxies: { type: string }
         doh_server:
           $ref: "#/components/schemas/TlsListenerPatch"
         dot_server: