feat(api): refuse issuance and ramps outside their release channel

[Windscar]

PR 2 of 5, on #2220. Refuses Issuance and Ramps outside the release channel. No change on dev.

• Gates run before auth (requireModule), so an excluded module answers 403 to everyone.
• Per ramp provider: routing skips excluded providers; naming one, its webhooks, lifecycle events, cancel, simulate and off-ramp deposit funding via /v1/payments/transfers get 403; replay and BVNK payout jobs skip it.
• provider-access reports excluded ramp/Earn providers as enabled: false.
• Issuance excluded → token metadata.json is not served (intended, see ADR).

API before/after (local, all ramp providers dev)

                                         dev   stable
GET  /v1/issuance/tokens                 200   403 "The issuance module is not available in this release channel."
GET  /v1/payments/ramps/onramp/currency  200   403 "The ramps module is not available …"
POST /webhooks/payments/ramps/sandbox/moonpay (unsigned)   401   403
GET  /v1/organizations/:orgId/provider-access   ramps.*.enabled: true → false
GET  /v1/payments/transfers, /v1/wallets 200   200

Verification: typecheck + Biome clean; API 6875, web 3062, sdp-policy 90; 20/21 gate mutations caught (survivor is an equivalent early return).

🤖 Generated with Claude Code

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
sdp-docs	Ready	Preview	Oct 5, 2026 8:56pm UTC
sdp-web	Ready	Preview	Oct 5, 2026 8:56pm UTC

[greptile-apps]

Confidence Score: 5/5

[High risk] Adds release channel gating to ramp providers and modules.

The PR appears safe to merge; both previous findings are fixed and no new blocking issue remains.

What we checked:

• Excluded accounts stay out: The handler removes excluded rows before reading payout details or funding-wallet balances. The database query has no page limit that could hide included rows.
• Replay leaves excluded rows alone: Replay supplies the excluded providers to all three database updates. Each update filters those providers out before changing rows.

Summary

Adds release-channel checks for issuance and ramps while preserving the default dev behavior.

• Excluded modules and providers are refused at their API boundaries.
• Provider selection, account enrichment, webhook replay, and BVNK payout jobs skip excluded providers.
• Both previous findings are fixed. No new actionable issue was found.

_{Reviews (2) · Last reviewed commit: "feat(api): refuse issuance and ramps out..."}

[greptile-apps]

Want your agent to iterate on Greptile's feedback? Try greploops.