padreug

padreug pushed to feat/secure-cashin-rpc at aiolabs/spirekeeper

2026-06-22 10:17:21 +00:00

f518b15f5b feat(cash-in): secure create_withdraw nostr-transport RPC (#31)

padreug commented on issue aiolabs/spirekeeper#31

2026-06-22 10:05:32 +00:00

Secure cash-in: server-side stamped withdraw via signed kind-21000 RPC (no wallet key on the ATM, verified attribution)

Correction accepted — threat model point (1) was wrong

padreug commented on issue aiolabs/spirekeeper#31

2026-06-22 09:10:52 +00:00

Secure cash-in: server-side stamped withdraw via signed kind-21000 RPC (no wallet key on the ATM, verified attribution)

Consumer-side (bitspire) review. Strong agreement with the design — server-stamped create_withdraw is the right shape. One precision on the threat model that actually makes the change…

padreug opened issue aiolabs/spirekeeper#31

2026-06-22 09:00:55 +00:00

Secure cash-in: server-side stamped withdraw via signed kind-21000 RPC (no wallet key on the ATM, verified attribution)

padreug pushed to main at aiolabs/lnbits-extensions

2026-06-21 15:29:41 +00:00

e3ff933c88 withdraw: add v1.2.2-aio.2 (link extra -> payout passthrough)

padreug pushed tag v1.2.2-aio.2 to aiolabs/withdraw

2026-06-21 15:28:48 +00:00

padreug created pull request aiolabs/spirekeeper#30

2026-06-21 15:28:33 +00:00

fix(settlements): process cash-in (outbound) payments, not just cash-out

padreug created branch fix/cash-in-settlement in aiolabs/spirekeeper

2026-06-21 15:28:03 +00:00

padreug pushed to fix/cash-in-settlement at aiolabs/spirekeeper

2026-06-21 15:28:03 +00:00

7b55dc152b fix(settlements): process cash-in (outbound) payments, not just cash-out

padreug deleted branch feat/extra-passthrough from aiolabs/withdraw

2026-06-21 15:27:44 +00:00

padreug pushed to main at aiolabs/withdraw

2026-06-21 15:27:43 +00:00

9c0e58a87c feat: merge a link's extra into the payout payment (v1.2.2-aio.2)

padreug merged pull request aiolabs/withdraw#3

2026-06-21 15:27:43 +00:00

feat: merge a link's `extra` into the payout payment (v1.2.2-aio.2)

padreug created pull request aiolabs/withdraw#3

2026-06-21 15:26:41 +00:00

feat: merge a link's extra into the payout payment (v1.2.2-aio.2)

padreug created branch feat/extra-passthrough in aiolabs/withdraw

2026-06-21 15:26:18 +00:00

padreug pushed to feat/extra-passthrough at aiolabs/withdraw

2026-06-21 15:26:18 +00:00

9c0e58a87c feat: merge a link's extra into the payout payment (v1.2.2-aio.2)

padreug commented on issue aiolabs/nsecbunkerd#39

2026-06-21 14:13:23 +00:00

create_new_key clobbers an existing key — silent, unrecoverable identity loss on re-pair

Fixed via PR #40 (merged to dev @ 4a0a3e7). Verified on the dev bunker: a repeat /pair for an already-paired machine now returns the existing spire key with the on-disk entry unchanged…

padreug commented on issue aiolabs/nsecbunkerd#36

2026-06-21 14:13:21 +00:00

ACL: an expired/exhausted bound token should hard-reject (false), not fall through to prompt-admin (undefined) — clients time out instead of re-pairing

Fixed via PR #38 (merged to dev @ 3468972). Verified on hardware during the Sintra smoke: an expired/revoked token binding now hard-rejects (BunkerRejectedError → "Pairing Required")…

padreug pushed to dev at aiolabs/nsecbunkerd

2026-06-21 14:01:49 +00:00

4a0a3e7cd4 Merge pull request 'fix(admin): make create_new_key idempotent — never clobber an existing key (#39)' (#40) from fix-create-new-key-idempotent into dev

2cf3e55bf4 fix(admin): make create_new_key idempotent — never clobber an existing key

Compare 2 commits »

padreug deleted branch fix-create-new-key-idempotent from aiolabs/nsecbunkerd

2026-06-21 14:01:49 +00:00

padreug merged pull request aiolabs/nsecbunkerd#40

2026-06-21 14:01:48 +00:00

fix(admin): make create_new_key idempotent — never clobber an existing key (#39)