coinos-server.git/meltguard.ts, branch mastercoinos server — legacy coinos.io backend (Lightning, on-chain, Liquid)https://git.coinos.io/coinos-server.git/atom?h=master2026-09-05T02:04:11Zmeltguard: guard /v1/xpay and parse form-encoded melt bodies2026-09-05T02:04:11ZAdam Soltysadam@coinos.io2026-09-05T02:04:08Zurn:sha1:08c9eca46469af21aeb209066401aad8808920d7
nutshell >= 0.20.3.1 melts via POST /v1/xpay (form field invstring),
while older CLNRest wallets post /v1/pay form-encoded under `invoice`
or `bolt11`. The guard only parsed JSON `bolt11`, so form bodies never
yielded an amount and were rejected, and an xpay backend would have
bypassed the caps entirely. Accept both endpoints and all three field
names, forward as form on the same endpoint preserving fee params.
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014uxZLvYS4gH9UqUX2Ey8TV
mint-recovery: add meltguard + mintdemux proxies; ignore local *.bak2026-07-30T17:38:43ZAdam Soltysadam@coinos.io2026-07-30T17:37:53Zurn:sha1:1d48335f47bbb673b89b42a9ef2984eaae7b02d2
- meltguard: out-of-band CLNRest spend limiter (per-melt cap + cumulative
hard-freeze) that sits between the panic-mode mint and the node
- mintdemux: fronts the mint hostname, routing between the retired and current
mint instances after the hostname swap
- gitignore *.bak / *.bak-* so local backups (some hold secrets) never commit
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>