Splora paths, mailbox password, Rust 1.99, and deploy command names

[cryptoquick]

What this branch does

Nine signed commits on HB-1, based on main. This is the mail-host tree through 2026-10-10. It does not switch the live host. just deploy-dry-run exited 0 on this tip and did not connect. grok-oss itself was not compiled here. The host switch is still the first real grok-oss build on rustc 1.99.0.

Splora on one host

The Axum edge routes Splora by path on one portal host, not by *.esplora hostnames. /testnet/ is testnet3, /testnet4/ is testnet4, and mutinynet and liquid stay paths on that same host. Mainnet stays off. The Rust explorer UI is not in this repo. Indexer units still do not start without real cookie files.

Public onions

Each public HTTP site can get its own Arti v3 onion. Mail hosts stay unmapped. www does not get a second onion of its own. Esplora subdomain hosts do not get an onion. Hidden-service private keys are not in this tree.

Mailbox create

Creating a mailbox and setting its password in the same step no longer drops the address. The password call can use the account id returned by create, and a local-part matches only the mailbox on that domain. Tests cover tony@example.test.

Pins, audit, and the mail VM

• Crane and the grok-oss build use rustc 1.99.0 from nixpkgs commit c9f19b6 (the nixpkgs commit that moved rustc 1.98.1 to 1.99.0). The NixOS 26.05 channel rustc stays 1.95.0 and is not used for those builds. Arti stays 2.6.0 because that snapshot's pkgs.arti is 2.6.0.
• grok-oss tracks github:SurmountSystems/grok-oss/main.
• Stalwart mail stays a Surmount fixed-output package at 0.16.24, not nixpkgs Stalwart. CLI 1.0.13, web UI 1.0.11, spam filter 3.0.2, Vandelay 1.0.11.
• cargo update on this lock locked 0 further packages (481 packages). just audit-remote exited 0: 1290 advisories, 481 dependencies, no new RustSec id. Ignores stay RUSTSEC-2024-0436 (paste) and RUSTSEC-2026-0173 (proc-macro-error2). reqwest 0.12.28, tower-http 0.6.11, rustls 0.23.45, and nostr 0.45.5 did not move.
• The mail VM directory setup and SMTP accept check are Rust programs in surmount-stalwart-ops. tests/mail.nix does not call pkgs.python3 for those guests. The NixOS test driver is still Python because that is upstream.

Deploy commands and dropped SSH

• just publish publishes the static sites.
• just deploy is the mail-host switch. Agents do not run it.
• just deploy-dry-run is that switch with --dry-run before the target.
• just deploy-host stays the form with no default target.
• A dropped ssh-ng build retries. A nixos-rebuild switch that already started does not get a second switch.
• just btop runs Eternal Terminal as et -e -c btop. Packaged Eternal Terminal 6.2.11 stays in a shell after btop exits. The btop tests were updated and were not run on the builder after that edit.

Mail DNS note

surmount.systems SPF in the docs is v=spf1 a:mail.surmount.systems include:_spf.google.com -all. DMARC stays p=quarantine. google._domainkey is not published. That record has to come from Google Admin.

Issues this closes

Closes #8
Closes #10
Closes #11
Closes #12

Issues this does not close

• Feature: distinct v3 onion per public HTTP site #5. Per-site onions are in this branch. www does not get its own onion, and the issue asked for one onion per www host as well.
• Feature: splora.surmount.systems portal Host and onion #6. Path routing for splora.surmount.systems is in this branch. The four indexers are still down without cookie files, and this PR does not prove that host's onion.
• Bug: splora units 226/NAMESPACE on missing cookie BindReadOnlyPaths #7. The Splora indexer module comment moved. The missing-cookie 226/NAMESPACE fix is not in this diff.
• Finish open pins, prove the suite, and harden SSH drops #13. SSH retry, grok-oss on main, Stalwart 0.16.24, and rustc 1.99.0 are in this branch. just check-remote was not re-run after the rustc 1.99 commit and the btop change. The live switch has not succeeded on this tip.
• Mail from hunter@surmount.systems is rejected by mx.custler.net as similar to reported spam #14. The custler 550 5.7.1 spam-similarity reject is not fixed. The Google DKIM public TXT is still empty.