aboutsummaryrefslogtreecommitdiffstats
Commit message (Expand)AuthorAgeFilesLines
* printer: publish receipts at QoS 1 and clean LNURL metadata memosAdam Soltys2026-09-142-1/+19
* ecash: make claims work against the v1 keyset mintAdam Soltys2026-09-142-25/+67
* security: drop the admin endpoint surface and land pending hardeningAdam Soltys2026-09-1318-100/+280
* ln listener: skip a settlement whose account is gone before creditingAdam Soltys2026-09-051-0/+9
* credit: skip settlements for a deleted account instead of throwingAdam Soltys2026-09-051-0/+10
* flash: build each config image in its own temp dirAdam Soltys2026-09-041-6/+16
* sockets: accept read-only tokens on login, deliver payment events onlyAdam Soltys2026-09-041-1/+12
* meltguard: guard /v1/xpay and parse form-encoded melt bodiesAdam Soltys2026-09-041-8/+38
* payments: finalize settled keysends in sendKeysendAdam Soltys2026-09-041-1/+54
* flash: create printer dir and return errors instead of unhandled 500Adam Soltys2026-09-041-7/+13
* fund: authenticated recovery of a rotated fund's old linkAdam Soltys2026-08-282-5/+30
* scripts: stubborn peer-force LN payer + boltz stuck-swap recoveryAdam Soltys2026-08-272-0/+250
* health: tolerate a transient receive-listener lag, fail only if it's stuckAdam Soltys2026-08-271-4/+15
* lnurl: pin SSRF-guard fetches to the validated IP (close DNS-rebinding)Adam Soltys2026-08-271-51/+92
* harden: remove debug /echo endpoint; widen LN health probe timeoutAdam Soltys2026-08-272-6/+1
* login: fail-open recaptcha verify on infrastructure errorsAdam Soltys2026-08-251-2/+17
* take/authorize: kill-switch + validate fund-claim amountsAdam Soltys2026-08-251-4/+37
* nwc: 404 missing connections + require key rotation to revive retired onesAdam Soltys2026-08-221-2/+31
* gitignore: exclude incident-response tooling, data, and peerswap artifactsAdam Soltys2026-08-221-0/+12
* scripts: add lightning-backlog audit + kvrocks archive merge toolingAdam Soltys2026-08-223-0/+416
* deps: upgrade fastify v4 to v5 line to fix dependabot alertsAdam Soltys2026-08-223-11/+11
* log: redact secret and otpsecret from request bodiesAdam Soltys2026-08-221-1/+1
* ln: bound receive-listener wait, phase-aware watchdog, re-enable health checkAdam Soltys2026-08-223-42/+144
* nwc: enforce per-connection spend budgets + flag-gated incident containmentAdam Soltys2026-08-225-20/+279
* confirm: never re-credit receive outputs on wallet-funded txsAdam Soltys2026-08-221-0/+20
* nostr: resolve NIP-05 via the v3 registrar first; empty (not 500) on unknown ...Adam Soltys2026-08-171-1/+15
* nwc: reply UNAUTHORIZED on unknown connection instead of returning silentlyAdam Soltys2026-08-171-2/+13
* mintdemux: forward client IP for per-IP rate limiting + partner whitelist + /...Adam Soltys2026-08-171-14/+86
* deps: patch @asoltys/clightning-client to fix cl reconnectAdam Soltys2026-08-164-0/+98
* ln: tear down dead cl clients fully + recover invoice listener on socket deathAdam Soltys2026-08-152-10/+74
* payments: prevent same-invoice retry from orphaning an unreconciled debitAdam Soltys2026-08-081-1/+21
* mintdemux: fix old-ecash recovery meltsAdam Soltys2026-08-071-5/+38
* test: regtest regression suite for the security-disclosure fixesAdam Soltys2026-08-072-0/+242
* deps: refresh bun.lockb with sharp 0.35.3 (S7/S19)Adam Soltys2026-08-071-0/+0
* ecash: serialize the shared cash-key read-modify-write (S13)Adam Soltys2026-08-071-11/+36
* users: sum sub-account balances in the deleteSelf guard (S12)Adam Soltys2026-08-071-4/+13
* payments: never lose a settled deposit to an oversized memo (S9/S10)Adam Soltys2026-08-072-2/+12
* nwc: budget keysend, atomic dedup, serialize spends (S4/S6/S8)Adam Soltys2026-08-071-12/+66
* upload: require auth on /upload/:type; bump sharp past libvips CVEs (S7)Adam Soltys2026-08-072-2/+2
* logging: redact auth headers; set cookie flags on session token (S5)Adam Soltys2026-08-072-3/+26
* auth: fail closed on adminpass, scrub sample secrets (S3)Adam Soltys2026-08-074-8/+22
* auth: hash passwords at bcrypt cost 12 with transparent upgrade (S2)Adam Soltys2026-08-072-3/+18
* sockets: verify JWT signatures on the websocket auth path (S1)Adam Soltys2026-08-072-6/+18
* lnurl: defer to the v3 registrar for names it has claimedAdam Soltys2026-08-041-15/+53
* lnurl: serve local accounts directly instead of deferring to v3 registrarAdam Soltys2026-08-041-19/+9
* nwc: republish 13194 info events unconditionally every 2 minutesAdam Soltys2026-08-041-53/+18
* Let a migrated account hand its address to coinos v3Adam Soltys2026-08-034-4/+8
* payments: guard tip credit and self-referential autowithdrawAdam Soltys2026-08-031-1/+20
* LNURL: fall back to the v3 names registrar for unknown usersAdam Soltys2026-08-021-1/+21
* sendKeysend: verify a thrown keysend by label, not the caller's hash (COINOS-1)Adam Soltys2026-07-311-14/+55
generated by cgit v1.2.3 (git 2.51.0) at 2026-10-15 04:51:25 +0000