Add /internal/config-dump endpoint (redacted) for on-call diagnostics

[thlpkee20-wq]

Description

Return the effective runtime configuration with secret fields redacted using the existing safe_value helper. Bound to loopback or admin-authenticated only.

Requirements and context

• Must be secure, tested, and documented
• Should be efficient and easy to review
• Relevant code: internal/config/config.go, internal/secrets/safe_value.go
• Redact fields tagged secret:"true"

Suggested execution

• Fork the repo and create a branch
• git checkout -b feat/config-dump-redacted
• Implement changes
  • Add reflection-based dumper
  • Add handler on internal port with RBAC
  • Add integration test asserting no secrets leak
• Validate security and correctness assumptions

Test and commit

• Run tests
  • go test ./internal/handlers/... ./internal/config/...
• Cover edge cases
  • Nested structs redact recursively
• Include test output and notes

Example commit message

feat: expose redacted config dump for diagnostics

Guidelines

• Minimum 95 percent test coverage
• Clear documentation
• Timeframe: 96 hours

[Mayor-Isaac]

@Mayor-Isaac has applied to work on this issue as part of the Stellar Wave Program's 7th wave.

Hi Maintainer, I've read through the issue and I'm confident I can handle it well. Could you assign it to me

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Mayor-Isaac to this issue.

[Miraclechukwuemeka]

@Miraclechukwuemeka has applied to work on this issue as part of the Stellar Wave Program's 7th wave.

Hi maintainer, i would love to work on this issue kindly assign me. Thanks

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Miraclechukwuemeka to this issue.

[OLAMIGHTY010]

@OLAMIGHTY010 has applied to work on this issue as part of the Stellar Wave Program's 7th wave.

I would like to work on this project

ℹ️ Repo Maintainers: To accept this application, review their application or assign @OLAMIGHTY010 to this issue.

[kodinaka30-ship-it]

@kodinaka30-ship-it has applied to work on this issue as part of the Stellar Wave Program's 7th wave.

Hello maintainer please kindly review my application and assign this issue to me. I'll add a reflection-based config dumper redacting secret:"true"-tagged fields (including nested structs) via the existing safe_value helper, expose it at /internal/config-dump bound to loopback/admin-authenticated access, with an integration test asserting no secrets leak.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @kodinaka30-ship-it to this issue.

[Mitch5000]

@Mitch5000 has applied to work on this issue as part of the Stellar Wave Program's 7th wave.

Can I work on this issue?

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Mitch5000 to this issue.

[drips-wave]

Congratulations, @Mayor-Isaac! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on July 30, 2026.

🧑‍💻 @Mayor-Isaac: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊

[drips-wave]

This issue is assigned to @Mayor-Isaac via the Stellar Wave Program.

Other assignees have been removed. To reassign, please unassign the current contributor through Drips Wave first.

[drips-wave]

This issue is assigned to @Mayor-Isaac via the Stellar Wave Program.

Other assignees have been removed. To reassign, please unassign the current contributor through Drips Wave first.