Commit Graph

Select branches

Hide Pull Requests

feat/delegated-verify-endpoint

feat/grin-lws-integration

fix/pre-ship-audit

fix/v030-backend-review-20260927

main

#1

#1

v0.3.0

Mono Color

• 99b3a490ea fix(ci): bind backend candidates to exact main dispatch fix/v030-backend-review-20260927 such-gitea 2026-09-27 10:28:48 -04:00
• 6ec84f3e4d ci: add exact-source Gitea backend builds such-gitea 2026-09-27 10:20:32 -04:00
• d90a57bb11 fix(wallet): resume restores and preserve invoice payment policy such-gitea 2026-09-27 07:23:09 -04:00
• 9536dd099c feat(premium): invoice through more than one processor main such-gitea 2026-09-26 10:52:50 -04:00
• 73d7730c33 fix(logging): load .env before building the log filter such-gitea 2026-09-24 20:49:47 -04:00
• e24dd44c69 feat(utxo): report per-transaction amounts in BTC/LTC history such-gitea 2026-09-20 11:33:56 -04:00
• c653dec341 feat(tips): targeted tips, off until an operator asks for one such-gitea 2026-09-17 19:34:01 -04:00
• 7592034546 feat(keys): give an encryption subkey its own row such-gitea 2026-09-17 19:13:39 -04:00
• 309da0073b feat(migration): adopt a legacy identity on proven sign-in such-gitea 2026-09-15 10:35:53 -04:00
• 468d3f0add feat(migration): read-only legacy directory, off unless configured such-gitea 2026-09-15 10:33:15 -04:00
• ddbba30765 fix(grin): keep the slatepack address from overwriting the signing key such-gitea 2026-09-14 23:03:13 -04:00
• 985a05adf8 fix(website): resolve sign-in by the asset that signed, not only the BTC hash such-gitea 2026-09-14 22:07:20 -04:00
• 1d7e1d5a78 fix(grin): serve the height endpoint through grin-lws like the rest such-gitea 2026-09-12 19:32:14 -04:00
• d04d1c789d fix(nip98): widen the clock window and say what actually failed such-gitea 2026-09-09 11:00:31 -04:00
• d48936308e fix(lws): count unconfirmed change as pending instead of erasing it such-gitea 2026-09-08 09:55:49 -04:00
• afa3ec7679 fix(lws): treat an existing account as registered, not as a node outage such-gitea 2026-09-08 09:44:23 -04:00
• bd5c861436 feat(config): make the per-IP rate-limit tiers operator-tunable jw 2026-08-24 08:47:07 -04:00
• f38cae9581 prices: add neroswap provider, make it the default jwinterm 2026-08-15 20:14:36 -04:00
• c1539d96e7 chore: cargo fmt with rustfmt 1.9.0 (repo-wide) fix/pre-ship-audit jwintermandClaude Opus 5 2026-08-13 10:37:13 -04:00
• c2c07db34a chore: cargo fmt with rustfmt 1.9.0 (repo-wide) v0.3.0 jwinterm 2026-08-13 10:37:13 -04:00
• d9523de008 chore(openapi): regenerate for the auth rotation-proof doc changes jwintermandClaude Opus 5 2026-08-13 10:37:13 -04:00
• 63fe704ef1 chore(openapi): regenerate for the auth rotation-proof doc changes jwinterm 2026-08-13 10:37:13 -04:00
• 0a6ae18f80 fix: pre-ship audit remediation for auth identity, abuse control and retention jwandClaude Opus 5 2026-08-13 10:31:02 -04:00
• 81a3e4cf58 fix: pre-ship audit remediation for auth identity, abuse control and retention jw 2026-08-13 10:31:02 -04:00
• 23659dfd5a capabilities: nip05_domain must keep the handle domain users already have jwinterm 2026-08-04 06:05:17 -04:00
• bdc76bd3a8 examples: ADMIN_BIND collides with SERVER_PORT=8081 jwinterm 2026-08-03 15:46:07 -04:00
• c64cd9be8e fix(auth): the session row must carry the id the token claims jwinterm 2026-08-02 21:32:58 -04:00
• f48373282f electrum: make the fallback privacy tradeoff visible to operators jwinterm 2026-08-02 20:56:32 -04:00
• 465ffe5cbd capabilities: advertise nip05_domain jwinterm 2026-08-02 13:25:15 -04:00
• 38489986af docs(env): show how to verify max_subaddresses before enabling jwinterm 2026-08-01 16:23:10 -04:00
• 87a7317df3 docs(verify): document the grin tx_ref output-commitment contract feat/delegated-verify-endpoint jwinterm 2026-08-01 08:14:28 -04:00
• e2589d4835 auth: make access tokens revocable jwinterm 2026-08-01 08:00:38 -04:00
• f26b432999 feat(verify): implement grin (Mimblewimble) settlement verification jwinterm 2026-08-01 07:36:34 -04:00
• 11cf5947ce fix(nip05): repoint stale test to renamed INTEROP_RELAY_HINTS jwinterm 2026-08-01 07:36:34 -04:00
• 0b410c2b00 nip05: advertise only the relays the operator chose jwinterm 2026-08-01 05:39:24 -04:00
• ae118edf86 premium: publish the relay posting decision, not its inputs jwinterm 2026-07-31 17:17:58 -04:00
• 0f0ec2af49 feat(verify): delegated settlement verification endpoint jwinterm 2026-07-29 07:39:08 -04:00
• fb48e04ea6 feat(wallet): subaddress provisioning and batched UTXO endpoints (off by default) jwinterm 2026-07-28 16:01:25 -04:00
• cf85dce89f privacy: drop raw-IP PII columns and the dead wallets table jwinterm 2026-07-28 16:01:07 -04:00
• 74884e368d Merge operator config layer + console + pre-ship audit fixes jwinterm 2026-07-20 06:59:24 -04:00
• b2d727be08 fix(lws): serialize XMR/WOW atomic amounts as strings (u64 > 2^53 safe) jwinterm 2026-07-19 18:12:14 -04:00
• 54fe344d14 security: scanner covers nsec/pepper classes; ignore bare-hex key files; PRIVACY.md jwinterm 2026-07-19 15:52:07 -04:00
• a455c60ed0 docs: operator console guide + fix example recipes + document all env vars jwinterm 2026-07-19 15:52:07 -04:00
• fe2fc91cdd fix(admin-ui): repair Keys tab + console UX jwinterm 2026-07-19 05:30:33 -04:00
• ea2230164e fix(config): runtime-safe PUT no longer drags pending restart-required changes live jwinterm 2026-07-19 05:30:16 -04:00
• 586d29efe7 chore: cargo fmt with current stable rustfmt (repo-wide) jwinterm 2026-07-19 03:44:47 -04:00
• 13b2557b9b feat(config): editable registration, pow, features, relay, premium sections jwinterm 2026-07-19 03:34:39 -04:00
• 542e70b8e0 chore: satisfy clippy 1.95 (-D warnings) across the branch jwinterm 2026-07-19 03:34:29 -04:00
• 864724085c ci: gate on operator console dist freshness jwinterm 2026-07-18 20:06:04 -04:00
• e125f4fcc2 fix(admin): console requests challenge with POST, matching the route jwinterm 2026-07-18 16:18:33 -04:00
• d33a777556 test(admin): assert /admin serves the console over HTTP jwinterm 2026-07-18 16:15:17 -04:00
• 35447868d4 feat(admin): serve Operator Console SPA at /admin (rust-embed) jwinterm 2026-07-18 16:03:03 -04:00
• 8b408a063a feat(admin): invite mint/list endpoints (POST+GET /admin/invites) jwinterm 2026-07-18 15:39:51 -04:00
• a80fa46daf feat(config): configurable restart_apply_mode + graceful shutdown (Stage 3b) jwinterm 2026-07-18 14:08:33 -04:00
• 22d362b62f feat(config): GET/PUT /admin/config endpoints on the settings layer (Stage 3a) jwinterm 2026-07-18 14:00:43 -04:00
• 4c83e53839 feat(config): effective config via ArcSwap + DB overlay at boot (Stage 2) jwinterm 2026-07-18 06:00:16 -04:00
• 00968a9c05 feat(config): operator settings overlay foundation (storage + validated merge) jwinterm 2026-07-18 04:33:20 -04:00
• ede7bec4a6 fix(electrum): tighter connect timeout + primary circuit breaker jwinterm 2026-07-15 05:39:50 -04:00
• 00be0d2088 docs(README): document the social-tips subsystem and grin voucher model jwinterm 2026-07-11 12:21:03 -04:00
• c5c8dd5bf1 tips: grin config gate, reorg sweep_txid preservation, LWS import retry jwinterm 2026-07-11 12:21:03 -04:00
• 533f945290 feat(tips): serve /tips/social/received + /claimable as empty (public-only) jwinterm 2026-07-10 22:35:44 -04:00
• 1d6d67faa5 feat(tips): grin public tips (voucher model via grin node get_outputs + get_kernel) jwinterm 2026-07-10 18:40:56 -04:00
• 5d8d5e193f feat(tips): stage 5 — GC workers + fail-closed flag + capabilities + openapi jwinterm 2026-07-10 15:51:20 -04:00
• b7e3510553 feat(tips): stage 4 — claim / clawback / confirm-sweep + sweep reconciler (money-out) jwinterm 2026-07-10 15:34:14 -04:00
• b63cac19e2 feat(tips): stage 3 — attach-funding + funding-verification worker (money-in) jwinterm 2026-07-10 14:53:46 -04:00
• f3d6be95b8 feat(tips): stage 2 — create / get-public / get-sent / cancel routes jwinterm 2026-07-10 08:50:28 -04:00
• 6f34cb9245 feat(tips): stage 1 — social_tips schema + TipStatus enum + row model jwinterm 2026-07-10 08:17:06 -04:00
• 81148945c0 fix(lws): make import_account idempotent for an existing account feat/grin-lws-integration jwinterm 2026-07-10 07:29:57 -04:00
• 4d1d9006bc feat(grin): proxy scans through grin-lws (default) with grin-wallet fallback jwinterm 2026-07-09 16:26:23 -04:00
• a7c4bbd238 feat(grin): address→npub bridge + mark relay same-instance-only jwinterm 2026-07-09 04:47:13 -04:00
• 57ebb2a5aa fix(electrum): accept self-signed certs by default so ssl:// fallbacks work jwinterm 2026-07-08 13:59:49 -04:00
• 2f610aecb2 test(harness): expose response headers + config override; verify per-route CORS jwinterm 2026-07-08 09:23:17 -04:00
• fea90e3bf1 fix(nip05): always serve the well-known directory with CORS * (federation) jwinterm 2026-07-08 08:58:50 -04:00
• 2f248c2c3d feat(relay): operator write-allowlist (owner/announcements exemption) jwinterm 2026-07-07 04:56:55 -04:00
• 00c0f9302e feat(prices): Kraken + nonlogs provider with User-Agent (v0.2.x parity) jwinterm 2026-07-06 17:08:48 -04:00
• b32b8a9059 security(auth): make gated registration fully atomic (F3/F4 fast-follow) jwinterm 2026-07-06 05:58:04 -04:00
• c802f416cd security(auth): harden registration/identity against verified review findings jwinterm 2026-07-06 04:23:11 -04:00
• 1232a80cc8 feat(capabilities): advertise features.nostr_native_auth (npub register available) jwinterm 2026-07-05 08:04:32 -04:00
• c49872b62b feat(auth): npub-native registration (POST /auth/nostr/register) - Nostr-native identity jwinterm 2026-07-05 08:02:47 -04:00
• 6f0fca532d feat(registration): add gate mode (all|any) for alternative registration methods jwinterm 2026-07-04 22:34:58 -04:00
• ef6d280412 feat(feed): operator-configurable public feed advertised via /capabilities jwinterm 2026-07-03 16:58:22 -04:00
• a166ef56d7 chore: gitignore the target-deb container-build output jwinterm 2026-07-02 22:05:17 -04:00
• 394abd5ab7 fix(config): exempt loopback from the PAYMENT_PROVIDER_URL https-in-prod guard jwinterm 2026-07-02 22:04:58 -04:00
• d96f457b69 docs(examples): operator cookbook — six deployment recipes + premium-relay spec jwinterm 2026-07-02 19:47:46 -04:00
• dec9994e06 fix(config): fail closed on POW_REQUIRED without FEATURE_POW; harden premium key check jwinterm 2026-07-02 19:47:38 -04:00
• 9c75bc6bdd docs(examples): operator cookbook + premium-relay spec jwinterm 2026-07-02 17:57:13 -04:00
• eb98e4d625 feat(premium): recurring tiered relay-posting subscription (premium-post) jwinterm 2026-07-02 17:56:44 -04:00
• b4935b15e8 feat(admin): migrate-legacy — import v0.2.x user identity into v0.3 jwinterm 2026-07-02 13:49:45 -04:00
• 635cb64601 fix(relay): harden admission (fail-safe, loopback-only, bounded, size cap) [review] jwinterm 2026-07-02 08:35:37 -04:00
• 17bb7bcc20 docs(relay): packaging (deploy/relay) + operator guide + .env.example jwinterm 2026-07-02 07:06:36 -04:00
• f1872c781c feat(relay): advertise the relay via /capabilities + NIP-05 relay hints jwinterm 2026-07-02 07:00:02 -04:00
• 63d2c75194 feat(relay): gRPC event-admission (nauthz) service enforcing the write policy jwinterm 2026-07-02 06:46:59 -04:00
• a8f1a9e50c feat(relay): messaging-plane config + provider seam + pure admission policy engine jwinterm 2026-07-02 06:29:38 -04:00
• 1181b5938a fix(auth): canonicalize verified Nostr pubkey + harden the link/login grade jwinterm 2026-07-02 05:43:20 -04:00
• 8d4f78a8a3 feat(auth): wire the Nostr link nonce — link-challenge endpoint + atomic consume jwinterm 2026-07-02 04:36:40 -04:00
• d3dd3fc113 fix(admin): create-admin-wallet fully bootstraps a fresh instance (latch + compose) jwinterm 2026-07-02 03:19:32 -04:00
• a919ea7b52 docs(operator): OPERATOR_SETUP guide + fix .env.example peppers + README bootstrap jwinterm 2026-06-30 23:19:05 -04:00
• 54ae9fadac feat(registration): pay-to-register via pluggable payment provider (gate #3) jwinterm 2026-06-30 21:30:12 -04:00
• 56238dcac8 feat(restore): default create-only + PoW-priced restore depth (gate #2) jwinterm 2026-06-30 18:35:20 -04:00
• 610819bb5d feat(registration): composable gate framework + invite codes (gate #1) jwinterm 2026-06-30 17:14:53 -04:00