release/nodectl:v0.3.0

[Keshoid]

Added

• JWT-based authentication for REST API — login, token revocation, auth middleware with login rate limiter, argon2 password hashing, and NODECTL_API_TOKEN env support; new auth and api login CLI commands
• Election status dashboard — /v1/elections API endpoint and nodectl api elections CLI table with participation lifecycle tracking (Idle → Participating → Submitted → Accepted → Elected → Validating), stake sums, and election metadata
• Validation keys listing — /v1/validators API endpoint and nodectl api validators command displays validator information including validator key with election ID, created/expires timestamps, validator status, key ID, and ADNL address
• Kubernetes internal DNS support — control server address now accepts DNS names (e.g. validator-0-control.ton.svc.cluster.local) in addition to IP addresses
• JWT authorization in Swagger UI — added bearerAuth security scheme to OpenAPI spec; Swagger UI now shows an "Authorize" button for Bearer token authentication
• --filter for elections and validators API — nodectl api elections and nodectl api validators accept --filter=<name> to limit output to specific nodes
• --format=json|table flag — added --format=json|table flag to all config ... ls subcommands (config bind ls, config elections ls, config log ls, config node ls, config pool ls, config wallet ls, master-wallet ls)

Changed

• Bounceable base64 wallet addresses — config wallet ls now displays addresses in bounceable URL-safe base64 format
• Improved endpoint round-robin — lowered retry loop log level to debug, shortened error messages when all endpoints fail, fixed rr_cursor initial value starting from 1 instead of 0
• Graceful RPC error handling in wallet ls — wallet listing no longer fails when TON API is unreachable; addresses are still displayed with - for unavailable state/balance fields; unified warning format
• Hot reload for auth state — JWT TTL changes, newly added users, and token revocations take effect on config reload without service restart; JWT signing key is generated on first start even if auth is disabled
• Extended version command — nodectl --version now prints build artifacts (git hash, build date, features)
• Updated documentation — added descriptions for new commands and flags, fixed documentation errors, added document on nodectl security model, added documentation for first elections with Rust node, added documentation for REST API authentication

Fixed

• State column alignment in wallet ls — adjusted column width to fix misalignment in config wallet ls output
• Missing OpenAPI schema references — registered ElectionsStatus, NodeListRequest, and nested election schemas (OurElectionParticipant, ParticipationStatus, StakeSubmission) in OpenAPI components, fixing Swagger resolver errors

[Copilot]

Pull request overview

Release PR for nodectl v0.3.0, expanding the node-control service with JWT auth + Swagger bearer support, richer elections/validators monitoring, CLI UX improvements (tables/json/filter), and Helm/CI/release process updates.

Changes:

• Add JWT-based REST authentication with runtime-config hot reload, Swagger bearerAuth, and new CLI auth/login flows.
• Extend elections/validators snapshots (participants view, validator key metadata, next vset/p36 support) and CLI table output + filtering.
• Bump crate/chart versions to 0.3.0, refresh docs/changelog, and add a dedicated nodectl release workflow.

Reviewed changes

Copilot reviewed 51 out of 52 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
src/node-control/ton-http-api-client/src/v2/client_json_rpc.rs	Improves JSON-RPC error context messages.
src/node-control/ton-http-api-client/Cargo.toml	Bumps crate version and removes unused deps.
src/node-control/service/src/http/http_server_task.rs	Always-instantiated JWT auth + middleware-based enforcement; elections response/query additions; OpenAPI bearer auth scheme.
src/node-control/service/src/http/auth_tests.rs	Updates auth tests for new JwtAuth API + always-present auth manager.
src/node-control/service/src/contracts/contracts_task.rs	Raises deploy balance threshold and updates docs/comments.
src/node-control/service/src/auth/middleware.rs	Auth decision moved to “live config” check for runtime enable/disable.
src/node-control/service/src/auth/jwt.rs	Refactors JwtAuth construction and makes token TTL caller-provided for hot reload.
src/node-control/service/Cargo.toml	Version bump + dependency cleanup.
src/node-control/nodectl/src/app_cli_args.rs	Extends --version output with build metadata.
src/node-control/nodectl/Cargo.toml	Adds build script hook and bumps version/metadata.
src/node-control/elections/src/runner_tests.rs	Adds coverage for lifecycle statuses, participant stake stats, p36 access, and pubkey encoding changes.
src/node-control/elections/src/runner.rs	Adds p36 support, stake submission history, our-participants snapshot, and richer validator key metadata in snapshots.
src/node-control/elections/src/providers/traits.rs	Extends provider trait with get_next_vset.
src/node-control/elections/src/providers/default.rs	Implements config param 36 parsing for “next vset” support.
src/node-control/elections/Cargo.toml	Version bump + dependency cleanup.
src/node-control/docs/nodectl-setup.md	Reorders setup flow and adds REST auth configuration section.
src/node-control/docs/nodectl-security.md	Adds operational-state model + detailed TTL/TLS/auth behavior docs.
src/node-control/control-client/src/config_params.rs	Generalizes validator set parsing; adds p36 parser.
src/node-control/control-client/Cargo.toml	Version bump + dependency cleanup.
src/node-control/contracts/Cargo.toml	Version bump + dependency cleanup.
src/node-control/common/src/ton_utils.rs	Adds TON display helpers for CLI formatting.
src/node-control/common/src/snapshot.rs	Extends snapshot schema (our participants, stake min/max, validator key metadata, validation range, etc.).
src/node-control/common/src/app_config.rs	Makes auth enabled by default; default bind changes; updates auth docs.
src/node-control/common/Cargo.toml	Version bump + dependency cleanup.
src/node-control/commands/src/commands/nodectl/utils.rs	Improves warnings, adds TON API connectivity check, refactors wallet address/info helpers.
src/node-control/commands/src/commands/nodectl/service_api_cmd.rs	Adds elections/validators table/json output + filtering and auth token/url behavior updates.
src/node-control/commands/src/commands/nodectl/output_format.rs	Introduces shared OutputFormat enum.
src/node-control/commands/src/commands/nodectl/mod.rs	Exposes new output_format module.
src/node-control/commands/src/commands/nodectl/master_wallet_cmd.rs	Adds --format support and richer master-wallet output.
src/node-control/commands/src/commands/nodectl/config_wallet_cmd.rs	Adds wallet ls json/table, TON API graceful degradation, and manual stake command + confirmations.
src/node-control/commands/src/commands/nodectl/config_pool_cmd.rs	Adds --format + unified TON API warning + structured output views.
src/node-control/commands/src/commands/nodectl/config_node_cmd.rs	Adds --format + JSON output for node listing.
src/node-control/commands/src/commands/nodectl/config_log_cmd.rs	Switches to shared OutputFormat.
src/node-control/commands/src/commands/nodectl/config_elections_cmd.rs	Switches to shared OutputFormat.
src/node-control/commands/src/commands/nodectl/config_bind_cmd.rs	Adds --format + JSON output for bindings listing.
src/node-control/commands/src/commands/nodectl/auth_cmd.rs	Updates auth enable/disabled messaging.
src/node-control/commands/Cargo.toml	Version bump + dependency cleanup.
src/node-control/README.md	Documents new auth flows, REST API behavior, new flags, and manual stake.
src/node-control/CHANGELOG.md	Adds v0.3.0 changelog entry in Keep-a-Changelog format.
src/Cargo.lock	Updates lockfile for version bumps and dependency removals.
nodectl/CHANGELOG.md	Removes obsolete duplicate changelog (now consolidated).
helm/nodectl/values.yaml	Bumps image tag; adds service/networkPolicy options and docs.
helm/nodectl/templates/service.yaml	Adds service fields (clusterIP/LB IP/externalTrafficPolicy/nodePort/targetPort).
helm/nodectl/templates/networkpolicy.yaml	Replaces allowCIDRs with allowFrom peers.
helm/nodectl/docs/setup.md	Adds REST auth setup guidance; updates probe/bind notes.
helm/nodectl/docs/first-elections.md	Adds first-elections migration/staking guidance doc.
helm/nodectl/README.md	Links new docs.
helm/nodectl/Chart.yaml	Chart/appVersion bump.
helm/nodectl/CHANGELOG.md	Adds chart v0.2.0 entry documenting new values.
RELEASE.md	Updates release branching/tagging and CI/release process docs.
.github/workflows/nodectl-release.yml	Adds multi-platform binary + container publishing workflow for nodectl tags.
.github/workflows/ci.yml	Narrows PR CI branches to master + release/**.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

let red_dash = Cow::Borrowed(&"-".red()); stores a reference to a temporary ColoredString produced by "-".red(). That temporary will be dropped immediately, so this won’t compile (borrowed value does not live long enough). Store the colored dash in a local variable first (e.g., keep a ColoredString), or use Cow::Owned instead of borrowing a temporary.

Suggested change

	let red_dash = Cow::Borrowed(&"-".red());
	let red_dash = Cow::Owned("-".red());