diff options
| author | Adam Soltys <[email protected]> | 2026-07-30 10:28:23 -0700 |
|---|---|---|
| committer | Adam Soltys <[email protected]> | 2026-07-30 10:38:43 -0700 |
| commit | fd1617ea66e01557e71debc7e45ca08cfe01bf70 (patch) | |
| tree | 8c3600a86d60dc7731130397c98e818970d63990 /lib/notifications.js.map | |
| parent | f5a5b1ff856efcd2849275a301daabb80ef76638 (diff) | |
| download | coinos-server-fd1617ea66e01557e71debc7e45ca08cfe01bf70.tar.gz coinos-server-fd1617ea66e01557e71debc7e45ca08cfe01bf70.zip | |
mint/lightning: refuse caller-supplied invoices, tiered fees, log hygiene
- invoices: reject caller-supplied bolt11/bolt12; the server always mints its
own. Closes the invoice-registration path behind the shared-node credit and
payment-hijack vectors.
- lightning: skip mint-owned invoices (lbl* label) in the paid-invoice listener.
- payments: lightning free-tier fee credit, withheld for flagged high-throughput
(ln:nofree) accounts which pay an elevated rate; the failed-send reversal
restores credit at the same rate. freezeCheck made crash-resilient. Lightning
and bolt12 sends stay pending until the preimage settles.
- payments (route): validate payment-request / invoice input types.
- logging: collapse repeated xpay failure lines into one.
Co-Authored-By: Claude Opus 4.8 <[email protected]>
Diffstat (limited to 'lib/notifications.js.map')
0 files changed, 0 insertions, 0 deletions