aboutsummaryrefslogtreecommitdiffstats
path: root/lib
Commit message (Expand)AuthorAgeFilesLines
* nwc: budget keysend, atomic dedup, serialize spends (S4/S6/S8)Adam Soltys2026-08-071-12/+66
* logging: redact auth headers; set cookie flags on session token (S5)Adam Soltys2026-08-071-1/+12
* auth: hash passwords at bcrypt cost 12 with transparent upgrade (S2)Adam Soltys2026-08-071-1/+1
* sockets: verify JWT signatures on the websocket auth path (S1)Adam Soltys2026-08-071-2/+14
* nwc: republish 13194 info events unconditionally every 2 minutesAdam Soltys2026-08-041-53/+18
* Let a migrated account hand its address to coinos v3Adam Soltys2026-08-032-0/+3
* payments: guard tip credit and self-referential autowithdrawAdam Soltys2026-08-031-1/+20
* sendKeysend: verify a thrown keysend by label, not the caller's hash (COINOS-1)Adam Soltys2026-07-311-14/+55
* nwc: conform pay/receive to the BIP-321 methods spec (nwc#2)Adam Soltys2026-07-311-15/+116
* zaps: stop spurious "failed to handle zap" warnings on non-zap invoicesAdam Soltys2026-07-301-10/+21
* nwc: guard missing app record in the notification loopAdam Soltys2026-07-301-2/+7
* mint/lightning: refuse caller-supplied invoices, tiered fees, log hygieneAdam Soltys2026-07-304-41/+147
* bolt12 payer proofs: disclose zap fields, lightningd v26.06.2 in sampleAdam Soltys2026-07-301-10/+17
* bolt12 zaps: pay offers, NWC pay/receive, per-user offers, NIP-44Adam Soltys2026-07-306-71/+425
* preimages: support fiat prices, converted at invoice-creation timeAdam Soltys2026-07-141-6/+24
* preimages: enforce a merchant-set price per preimage batchAdam Soltys2026-07-132-8/+32
* Merge remote-tracking branch 'origin/master'Adam Soltys2026-07-112-2/+50
|\
| * invoices: sell merchant-supplied preimages via a usePreimage queueAdam Soltys2026-07-102-2/+50
* | rates: source Iranian IRR/IRT from Wallex, decoupled from the tick loopAdam Soltys2026-07-101-19/+44
* | invoices: reject sub-300-sat on-chain invoice amountsAdam Soltys2026-07-101-0/+12
* | logging: redact password fields from the request logAdam Soltys2026-07-101-1/+12
* | payments: use the debited tip when crediting internal transfersAdam Soltys2026-07-101-3/+10
|/
* rates: fix Iranian IRR/IRT feed after nobitex API host moveAdam Soltys2026-07-041-6/+19
* nwc: confirm 13194 info-event publish so it cannot be silently droppedAdam Soltys2026-06-281-3/+47
* auth: log evicted-account auth attempts with source IPAdam Soltys2026-06-281-1/+7
* auth: hard-evict banned accounts at the JWT layerAdam Soltys2026-06-271-0/+14
* payments: normalize bolt11 to lowercase so failed uppercase sends get reconciledAdam Soltys2026-06-181-1/+12
* payments: don't let check() reverse an in-flight lightning sendAdam Soltys2026-06-181-2/+19
* invoices: don't re-list an invoice id on update (dedupe :invoices)Adam Soltys2026-06-181-1/+7
* lnurl: SSRF-guard user-supplied URL fetches + validate zap eventsAdam Soltys2026-06-151-0/+88
* Push broadcast txs directly to public explorersAdam Soltys2026-06-151-0/+16
* payments: guard /replay double-credit race with SET NX idempotencyAdam Soltys2026-06-131-0/+15
* payments: freeze matches uid as well as username (rename-proof)Adam Soltys2026-06-131-4/+6
* lightning: watchdog only recycles on real backlog, not normal idleAdam Soltys2026-06-061-17/+24
* nwc: fix pay_invoice reply reliability, rate-limit drops, notificationsAdam Soltys2026-06-061-36/+81
* payments: clarify deposit log (pending vs confirmed) to stop phantom double-r...Adam Soltys2026-06-041-1/+9
* nwc: pay_invoice honors request amount for amountless bolt11Adam Soltys2026-06-041-2/+14
* nwc: fix make_invoice timestamps (ms -> seconds) breaking NWC clientsAdam Soltys2026-06-041-5/+8
* ln/lightning: watchdog recycles zombie receive-listener socketAdam Soltys2026-06-042-1/+81
* analytics: monthly insight reports + signup instrumentationAdam Soltys2026-06-031-0/+3
* nwc: publish 13194 info event only when missing, recheck hourlyAdam Soltys2026-06-021-26/+65
* ln: time out short-lived RPCs so a hung cl reconnects without restartAdam Soltys2026-05-311-2/+64
* debit: exempt internal sends from server liquidity limitAdam Soltys2026-05-311-8/+16
* sendLightning / finalize: drop chatty per-send INFO logsAdam Soltys2026-05-251-5/+7
* sendLightning: stop warning on healthy multi-path paymentsAdam Soltys2026-05-251-11/+13
* finalize: don't crash on non-integer fee delta (db.incrBy NaN)Adam Soltys2026-05-251-5/+25
* sendLightning: silence success-case xpay log, re-read db before leak guardAdam Soltys2026-05-211-17/+21
* tighten LEAKED DEBIT guard: don't false-alarm on successful-via-fallback pathsAdam Soltys2026-05-201-7/+23
* sendLightning/sendKeysend: instrument exit paths to surface stuck-debit casesAdam Soltys2026-05-201-12/+91
* withdraw-lock: refuse external sends when /locks/<type>.locked is presentAdam Soltys2026-05-191-0/+25