| Commit message (Expand) | Author | Age | Files | Lines |
| * | deps: upgrade fastify v4 to v5 line to fix dependabot alerts | Adam Soltys | 2026-08-22 | 1 | -2/+2 |
| * | log: redact secret and otpsecret from request bodies | Adam Soltys | 2026-08-22 | 1 | -1/+1 |
| * | ln: bound receive-listener wait, phase-aware watchdog, re-enable health check | Adam Soltys | 2026-08-22 | 2 | -41/+143 |
| * | nwc: enforce per-connection spend budgets + flag-gated incident containment | Adam Soltys | 2026-08-22 | 3 | -18/+211 |
| * | nwc: reply UNAUTHORIZED on unknown connection instead of returning silently | Adam Soltys | 2026-08-17 | 1 | -2/+13 |
| * | ln: tear down dead cl clients fully + recover invoice listener on socket death | Adam Soltys | 2026-08-15 | 2 | -10/+74 |
| * | payments: prevent same-invoice retry from orphaning an unreconciled debit | Adam Soltys | 2026-08-08 | 1 | -1/+21 |
| * | ecash: serialize the shared cash-key read-modify-write (S13) | Adam Soltys | 2026-08-07 | 1 | -11/+36 |
| * | payments: never lose a settled deposit to an oversized memo (S9/S10) | Adam Soltys | 2026-08-07 | 1 | -1/+8 |
| * | nwc: budget keysend, atomic dedup, serialize spends (S4/S6/S8) | Adam Soltys | 2026-08-07 | 1 | -12/+66 |
| * | logging: redact auth headers; set cookie flags on session token (S5) | Adam Soltys | 2026-08-07 | 1 | -1/+12 |
| * | auth: hash passwords at bcrypt cost 12 with transparent upgrade (S2) | Adam Soltys | 2026-08-07 | 1 | -1/+1 |
| * | sockets: verify JWT signatures on the websocket auth path (S1) | Adam Soltys | 2026-08-07 | 1 | -2/+14 |
| * | nwc: republish 13194 info events unconditionally every 2 minutes | Adam Soltys | 2026-08-04 | 1 | -53/+18 |
| * | Let a migrated account hand its address to coinos v3 | Adam Soltys | 2026-08-03 | 2 | -0/+3 |
| * | payments: guard tip credit and self-referential autowithdraw | Adam Soltys | 2026-08-03 | 1 | -1/+20 |
| * | sendKeysend: verify a thrown keysend by label, not the caller's hash (COINOS-1) | Adam Soltys | 2026-07-31 | 1 | -14/+55 |
| * | nwc: conform pay/receive to the BIP-321 methods spec (nwc#2) | Adam Soltys | 2026-07-31 | 1 | -15/+116 |
| * | zaps: stop spurious "failed to handle zap" warnings on non-zap invoices | Adam Soltys | 2026-07-30 | 1 | -10/+21 |
| * | nwc: guard missing app record in the notification loop | Adam Soltys | 2026-07-30 | 1 | -2/+7 |
| * | mint/lightning: refuse caller-supplied invoices, tiered fees, log hygiene | Adam Soltys | 2026-07-30 | 4 | -41/+147 |
| * | bolt12 payer proofs: disclose zap fields, lightningd v26.06.2 in sample | Adam Soltys | 2026-07-30 | 1 | -10/+17 |
| * | bolt12 zaps: pay offers, NWC pay/receive, per-user offers, NIP-44 | Adam Soltys | 2026-07-30 | 6 | -71/+425 |
| * | preimages: support fiat prices, converted at invoice-creation time | Adam Soltys | 2026-07-14 | 1 | -6/+24 |
| * | preimages: enforce a merchant-set price per preimage batch | Adam Soltys | 2026-07-13 | 2 | -8/+32 |
| * | Merge remote-tracking branch 'origin/master' | Adam Soltys | 2026-07-11 | 2 | -2/+50 |
| |\ |
|
| | * | invoices: sell merchant-supplied preimages via a usePreimage queue | Adam Soltys | 2026-07-10 | 2 | -2/+50 |
| * | | rates: source Iranian IRR/IRT from Wallex, decoupled from the tick loop | Adam Soltys | 2026-07-10 | 1 | -19/+44 |
| * | | invoices: reject sub-300-sat on-chain invoice amounts | Adam Soltys | 2026-07-10 | 1 | -0/+12 |
| * | | logging: redact password fields from the request log | Adam Soltys | 2026-07-10 | 1 | -1/+12 |
| * | | payments: use the debited tip when crediting internal transfers | Adam Soltys | 2026-07-10 | 1 | -3/+10 |
| |/ |
|
| * | rates: fix Iranian IRR/IRT feed after nobitex API host move | Adam Soltys | 2026-07-04 | 1 | -6/+19 |
| * | nwc: confirm 13194 info-event publish so it cannot be silently dropped | Adam Soltys | 2026-06-28 | 1 | -3/+47 |
| * | auth: log evicted-account auth attempts with source IP | Adam Soltys | 2026-06-28 | 1 | -1/+7 |
| * | auth: hard-evict banned accounts at the JWT layer | Adam Soltys | 2026-06-27 | 1 | -0/+14 |
| * | payments: normalize bolt11 to lowercase so failed uppercase sends get reconciled | Adam Soltys | 2026-06-18 | 1 | -1/+12 |
| * | payments: don't let check() reverse an in-flight lightning send | Adam Soltys | 2026-06-18 | 1 | -2/+19 |
| * | invoices: don't re-list an invoice id on update (dedupe :invoices) | Adam Soltys | 2026-06-18 | 1 | -1/+7 |
| * | lnurl: SSRF-guard user-supplied URL fetches + validate zap events | Adam Soltys | 2026-06-15 | 1 | -0/+88 |
| * | Push broadcast txs directly to public explorers | Adam Soltys | 2026-06-15 | 1 | -0/+16 |
| * | payments: guard /replay double-credit race with SET NX idempotency | Adam Soltys | 2026-06-13 | 1 | -0/+15 |
| * | payments: freeze matches uid as well as username (rename-proof) | Adam Soltys | 2026-06-13 | 1 | -4/+6 |
| * | lightning: watchdog only recycles on real backlog, not normal idle | Adam Soltys | 2026-06-06 | 1 | -17/+24 |
| * | nwc: fix pay_invoice reply reliability, rate-limit drops, notifications | Adam Soltys | 2026-06-06 | 1 | -36/+81 |
| * | payments: clarify deposit log (pending vs confirmed) to stop phantom double-r... | Adam Soltys | 2026-06-04 | 1 | -1/+9 |
| * | nwc: pay_invoice honors request amount for amountless bolt11 | Adam Soltys | 2026-06-04 | 1 | -2/+14 |
| * | nwc: fix make_invoice timestamps (ms -> seconds) breaking NWC clients | Adam Soltys | 2026-06-04 | 1 | -5/+8 |
| * | ln/lightning: watchdog recycles zombie receive-listener socket | Adam Soltys | 2026-06-04 | 2 | -1/+81 |
| * | analytics: monthly insight reports + signup instrumentation | Adam Soltys | 2026-06-03 | 1 | -0/+3 |
| * | nwc: publish 13194 info event only when missing, recheck hourly | Adam Soltys | 2026-06-02 | 1 | -26/+65 |