Overview

The Tawa Console (tawa-web) edits services' runtime settings. The convention is tawa-platform/reference/runtime-settings (published from tawa-docs as conventions/runtime-settings.md). Shipped to prod 2026-10-04 as build 2118712e. PR: https://git.insureco.io/insureco/tawa-web/pulls/34.

Pages

Page	Service
/console/admin/janus-settings (Janus Switches)	iec-janus, see tawa-platform/architecture/janus-internal-auth-verified
/console/admin/wallet-settings (Wallet Switches)	iec-wallet, see insecowallet/architecture/architecture

How it works

• The pages are generic. The keys come from the service's GET /admin/settings (iec-wallet: /api/wallets/admin/settings), and the editor for each key is chosen by its editor hint: boolean, number, string, url or json.
• authz and gas.systemPaidRoutes (Janus) keep dedicated editors.
• Shared code lives in src/app/console/admin/_settings. Per-service descriptors live in src/lib/settings-services.ts. Adding a service means adding a descriptor and a page that uses the shared code.
• Writes forward the signed-in user's Bio-ID token. The service accepts a write only when the token sub is in its owners list (JANUS_SETTINGS_OWNERS, SETTINGS_OWNERS). The internal key is refused on writes.