coinos-server.git/routes/lnurl.ts, branch staging

fix lnurl description_hash mismatch when sender provides a comment

2026-05-18T06:49:22Z

The bolt11 description_hash is computed from the metadata JSON, which was being constructed with the sender's `comment` substituted into text/plain. Wallets verify description_hash against the metadata they received in the lnurl-pay response, so injecting the comment into the hash made the verification fail — the invoice would settle but description_hash verification would reject it as inconsistent. Keep metadata canonical ("Paying user@host") so the description_hash the wallet receives matches what they verify against. The comment is still preserved as the human-readable memo on the invoice record. Co-Authored-By: Claude Opus 4.7 (1M context)

feat: blocked address protection, LNURL proxy, replay timestamps

2026-03-28T06:58:56Z

- Add lib/changeid.ts for in-process account rekeying - Block sends to addresses in redis blocked_addresses set, auto-rekey on attempt - Add created param to credit() for accurate replay timestamps - Add paid_at to replay() for correct payment dates - Add /lnurl/proxy endpoint for server-side LNURL callback fetching Co-Authored-By: Claude Opus 4.6 (1M context)

add LNURL-withdraw endpoints for fund-based NFC payments

2026-03-09T05:23:17Z

Co-Authored-By: Claude Opus 4.6

bump nodemon

2026-03-02T06:36:10Z

fix typescript issues

2026-02-28T23:16:20Z

migrate to hono

2026-02-28T22:14:30Z

formatting

2026-02-24T21:18:42Z

consult archive for older payments

2026-01-30T20:31:59Z

rotate server key

2025-09-30T04:50:57Z

only record invoice if amount is defined

2025-08-01T04:45:58Z