sendLightning / sendKeysend: only reverse when CLN reports the payment failed

The catch blocks for ln.xpay and ln.keysend reversed the user's debit
whenever the RPC call threw, regardless of the actual payment state in
CLN. If the RPC errored transiently while the payment was still pending,
the user's balance got refunded — and then the lightning payment could
still complete, leaving the user with both the refund and the outgoing
sats.

Both call sites now mirror the safe check() logic:

  const failed = !pays.length || pays.every((p) => p.status === "failed");
  if (completed) finalize ...
  else if (failed) reverse ...
  // else (pending) leave the debit; check() reconciles when CLN settles.

Co-Authored-By: Claude Opus 4.7 (1M context) <[email protected]>

0 files changed, 0 insertions, 0 deletions