archetech / archon

94%

main: 95%

LAST BUILD ON BRANCH release-npm-20260305

branch: release-npm-20260305

CHANGE BRANCH

x

Reset

Sync Branches

• release-npm-20260305
• 101-challenge-in-url
• 102-create-id
• 111-change-passphrase
• 114-add-change-passphrase
• 116-importbatch-fix
• 123-did-version-explorer
• 129-challenge-schemas
• 129-improved-auth
• 13-upgrade-kubo-ipfs
• 136-lightning-wallets
• 137-explorer-export-unrestricted
• 14-merge-search-server
• 141-l402-disable
• 143-version-endpoints
• 145-decode-lightning-invoice
• 147-lightning-web-client
• 149-local-lightning-stack
• 151-grafana-dashboard-styling
• 153-change-registry
• 154-lightning-zap
• 159-lightning-zap-web-ui
• 164-lightning-payment-history
• 17-report-version
• 180-android-apk-fix
• 181-liquid-btc
• 181-liquid-registry
• 184-did-properties
• 190-wallet-metrics
• 198-filter-alias
• 2-remove-deprecated
• 201-standalone-clients
• 203-vite-build-args
• 205-get-version-method
• 206-drawbridge-public-only
• 207-settings-tab
• 208-streaming-file-uploads
• 21-rename-groupvault
• 210-firefox-extension
• 212-refresh-properties-after-add
• 213-remove-version-footer
• 216-upgrade-kubo
• 22-rename-version
• 220-firefox-protocol-handler
• 221-persist-passphrase-session-storage
• 223-filter-unpaid-invoices
• 227-alias-accept-link
• 229-android-wallet-download
• 231-android-signing-key
• 234-hybrid-fee-estimation
• 236-lightning-payment-filtering
• 24-refactor-keymaster
• 246-dmail-name-resolution
• 248-add-docker-healthchecks
• 26-support-mainnet
• 28-import-schema-pack
• 3-refactor-credentials
• 31-observability
• 36-avoid-duplicating-verifiablecredential
• 38-add-cli-to-keymaster-package
• 410-add-email-dmail-bridge
• 44-get-vault-item
• 47-transition-schemas
• 51-wallet-is-missing
• 55-add-dmail-commands
• 56-did-aliases
• 57-cl-hive
• 58-missing-update-credential-command
• 6-fix-lint-errors
• 60-refactor-cli-tests
• 64-improve-security
• 68-add-get-property
• 69-rename-updateasset
• 70-make-upload-limit-configurable
• 74-rename-document-assets
• 77-image-assets-should-be-file-assets
• 8-rename-cas
• 81-universal-resolver
• 84-cli-vote-poll
• 85-add-JOSE
• 86-credentialsubjects
• 88-refactor-polls
• 91-incorrect-passphrase
• 93-view-credential
• 95-edit-credential
• bounty-ledger
• bump-versions-0.8.0
• chore/consolidate-dependabot-groups
• chore/init-v0.5
• chore/keymaster-py-version-bump
• chore/move-satoshi-wallet-service
• chore/replace-icons-156
• chore/standardize-admin-header
• chore/update-mediator-checkpoints
• chore/use-patched-lnbits-image
• cli-test-assets
• cln-rtl
• codex/add-did-resolution-benchmark
• codex/aliases-ui-rename
• codex/configure-dependabot-monorepo
• codex/extract-lightning-mediator
• codex/fix-herald-client-allowed-hosts
• codex/fix-herald-well-known-proxy
• codex/fix-hyperswarm-healthcheck
• codex/harden-ci-supply-chain
• codex/herald-address-cli-docs
• codex/import-herald-service
• codex/issue-247-node-url-labels
• codex/issue-253-keymaster-installer
• codex/match-extension-alias-confirmation
• codex/pin-npm-toolchain
• codex/react-wallet-build-env-override
• codex/remove-herald-write-well-known
• codex/rename-satoshi-wallet-service
• codex/test-cl-hive-node-3-1-0
• codex/throttle-dependabot-prs
• codex/use-wallet-url-for-herald-alias-qr
• codex/wallet-handoff-deep-links
• dependabot/cargo/rust/services/gatekeeper/cargo-8056535635
• dependabot/cargo/rust/services/gatekeeper/cargo-bad20da00d
• dependabot/github_actions/actions/setup-python-6.2.0
• dependabot/github_actions/anchore/scan-action-7.4.0
• dependabot/github_actions/docker/build-push-action-7.0.0
• dependabot/github_actions/docker/metadata-action-6.0.0
• dependabot/github_actions/docker/setup-buildx-action-4.0.0
• dependabot/github_actions/github-actions-minor-and-patch-d2d9db5a03
• dependabot/github_actions/github-actions-minor-and-patch-f536dadcea
• dependabot/npm_and_yarn/apps/browser-extension/lodash-4.18.1
• dependabot/npm_and_yarn/apps/browser-extension/npm_and_yarn-2126ddaa05
• dependabot/npm_and_yarn/apps/browser-extension/npm_and_yarn-b1d91c4252
• dependabot/npm_and_yarn/apps/browser-extension/npm_and_yarn-b4b6aa0ffb
• dependabot/npm_and_yarn/apps/browser-extension/npm_and_yarn-d567ba7369
• dependabot/npm_and_yarn/apps/browser-extension/postcss-8.5.13
• dependabot/npm_and_yarn/apps/gatekeeper-client/axios-1.15.0
• dependabot/npm_and_yarn/apps/gatekeeper-client/follow-redirects-1.16.0
• dependabot/npm_and_yarn/apps/gatekeeper-client/postcss-8.5.13
• dependabot/npm_and_yarn/apps/gatekeeper-client/vite-8.0.5
• dependabot/npm_and_yarn/apps/gatekeeper-client/vite-8.0.8
• dependabot/npm_and_yarn/apps/herald-client/axios-1.15.0
• dependabot/npm_and_yarn/apps/herald-client/esbuild-0.25.12
• dependabot/npm_and_yarn/apps/herald-client/follow-redirects-1.16.0
• dependabot/npm_and_yarn/apps/herald-client/npm_and_yarn-6c2b7fe5d9
• dependabot/npm_and_yarn/apps/herald-client/npm_and_yarn-d93b56d3ab
• dependabot/npm_and_yarn/apps/herald-client/postcss-8.5.13
• dependabot/npm_and_yarn/apps/herald-client/vite-6.4.2
• dependabot/npm_and_yarn/apps/herald-client/vite-8.0.10
• dependabot/npm_and_yarn/apps/herald-client/vite-8.0.8
• dependabot/npm_and_yarn/apps/herald-client/vite-8.0.9
• dependabot/npm_and_yarn/apps/keymaster-client/axios-1.15.0
• dependabot/npm_and_yarn/apps/keymaster-client/follow-redirects-1.16.0
• dependabot/npm_and_yarn/apps/keymaster-client/postcss-8.5.13
• dependabot/npm_and_yarn/apps/keymaster-client/vite-8.0.5
• dependabot/npm_and_yarn/apps/keymaster-client/vite-8.0.8
• dependabot/npm_and_yarn/apps/react-wallet/esbuild-0.28.0
• dependabot/npm_and_yarn/apps/react-wallet/lodash-4.18.1
• dependabot/npm_and_yarn/apps/react-wallet/npm_and_yarn-04351d2771
• dependabot/npm_and_yarn/apps/react-wallet/npm_and_yarn-844dcdb493
• dependabot/npm_and_yarn/apps/react-wallet/npm_and_yarn-bf05dc1ecf
• dependabot/npm_and_yarn/apps/react-wallet/npm_and_yarn-c4fb857816
• dependabot/npm_and_yarn/apps/react-wallet/vite-8.0.10
• dependabot/npm_and_yarn/apps/react-wallet/vite-8.0.5
• dependabot/npm_and_yarn/apps/react-wallet/vite-8.0.8
• dependabot/npm_and_yarn/apps/react-wallet/vite-8.0.9
• dependabot/npm_and_yarn/axios-1.15.0
• dependabot/npm_and_yarn/brace-expansion-1.1.13
• dependabot/npm_and_yarn/file-type-21.3.2
• dependabot/npm_and_yarn/file-type-22.0.0
• dependabot/npm_and_yarn/flatted-3.4.2
• dependabot/npm_and_yarn/follow-redirects-1.16.0
• dependabot/npm_and_yarn/lodash-4.18.1
• dependabot/npm_and_yarn/node-forge-1.4.0
• dependabot/npm_and_yarn/npm_and_yarn-6e15a28541
• dependabot/npm_and_yarn/npm_and_yarn-8c7b98fe3a
• dependabot/npm_and_yarn/npm_and_yarn-960c982be2
• dependabot/npm_and_yarn/npm_and_yarn-c202cd394c
• dependabot/npm_and_yarn/rollup-4.60.2
• dependabot/npm_and_yarn/services/drawbridge/server/npm_and_yarn-5fdcb96cbe
• dependabot/npm_and_yarn/services/drawbridge/server/path-to-regexp-0.1.13
• dependabot/npm_and_yarn/services/explorer/axios-1.13.5
• dependabot/npm_and_yarn/services/explorer/axios-1.15.0
• dependabot/npm_and_yarn/services/explorer/follow-redirects-1.16.0
• dependabot/npm_and_yarn/services/explorer/form-data-4.0.5
• dependabot/npm_and_yarn/services/explorer/multi-4ba2d64a52
• dependabot/npm_and_yarn/services/explorer/multi-6cb4a7dc76
• dependabot/npm_and_yarn/services/explorer/multi-bfc14d0f24
• dependabot/npm_and_yarn/services/explorer/npm_and_yarn-21a4bf3b45
• dependabot/npm_and_yarn/services/explorer/path-to-regexp-8.4.1
• dependabot/npm_and_yarn/services/explorer/path-to-regexp-8.4.2
• dependabot/npm_and_yarn/services/explorer/postcss-8.5.13
• dependabot/npm_and_yarn/services/explorer/qs-6.15.1
• dependabot/npm_and_yarn/services/explorer/rollup-3.30.0
• dependabot/npm_and_yarn/services/explorer/rollup-4.60.2
• dependabot/npm_and_yarn/services/explorer/vite-5.4.21
• dependabot/npm_and_yarn/services/explorer/vite-8.0.10
• dependabot/npm_and_yarn/services/explorer/vite-8.0.8
• dependabot/npm_and_yarn/services/explorer/vite-8.0.9
• dependabot/npm_and_yarn/services/explorer/yaml-1.10.3
• dependabot/npm_and_yarn/services/gatekeeper/server/multi-a07fd7252a
• dependabot/npm_and_yarn/services/gatekeeper/server/multi-c6f6658ed3
• dependabot/npm_and_yarn/services/gatekeeper/server/multi-d31b51a7f2
• dependabot/npm_and_yarn/services/gatekeeper/server/npm_and_yarn-516916688b
• dependabot/npm_and_yarn/services/gatekeeper/server/path-to-regexp-0.1.13
• dependabot/npm_and_yarn/services/herald/server/path-to-regexp-8.4.1
• dependabot/npm_and_yarn/services/herald/server/qs-6.15.0
• dependabot/npm_and_yarn/services/herald/server/undici-7.24.6
• dependabot/npm_and_yarn/services/herald/server/undici-7.24.7
• dependabot/npm_and_yarn/services/keymaster/server/multi-a07fd7252a
• dependabot/npm_and_yarn/services/keymaster/server/multi-c6f6658ed3
• dependabot/npm_and_yarn/services/keymaster/server/multi-d31b51a7f2
• dependabot/npm_and_yarn/services/keymaster/server/path-to-regexp-0.1.13
• dependabot/npm_and_yarn/services/mediators/hyperswarm/multi-a07fd7252a
• dependabot/npm_and_yarn/services/mediators/hyperswarm/multi-c6f6658ed3
• dependabot/npm_and_yarn/services/mediators/hyperswarm/multi-d31b51a7f2
• dependabot/npm_and_yarn/services/mediators/hyperswarm/path-to-regexp-0.1.13
• dependabot/npm_and_yarn/services/mediators/lightning/npm_and_yarn-34cf670699
• dependabot/npm_and_yarn/services/mediators/lightning/npm_and_yarn-f1ef2aecd7
• dependabot/npm_and_yarn/services/mediators/satoshi/ajv-6.14.0
• dependabot/npm_and_yarn/services/mediators/satoshi/axios-1.14.0
• dependabot/npm_and_yarn/services/mediators/satoshi/axios-1.15.0
• dependabot/npm_and_yarn/services/mediators/satoshi/brace-expansion-1.1.13
• dependabot/npm_and_yarn/services/mediators/satoshi/follow-redirects-1.16.0
• dependabot/npm_and_yarn/services/mediators/satoshi/lodash-4.17.23
• dependabot/npm_and_yarn/services/mediators/satoshi/lodash-4.18.1
• dependabot/npm_and_yarn/services/mediators/satoshi/minimatch-3.1.5
• dependabot/npm_and_yarn/services/mediators/satoshi/multi-c6f6658ed3
• dependabot/npm_and_yarn/services/mediators/satoshi/path-to-regexp-0.1.13
• dependabot/npm_and_yarn/services/mediators/satoshi/picomatch-2.3.2
• dependabot/npm_and_yarn/services/mediators/satoshi/yaml-2.8.3
• dependabot/npm_and_yarn/services/satoshi-wallet/server/axios-1.14.0
• dependabot/npm_and_yarn/services/satoshi-wallet/server/brace-expansion-1.1.13
• dependabot/npm_and_yarn/services/satoshi-wallet/server/path-to-regexp-0.1.13
• dependabot/npm_and_yarn/services/satoshi-wallet/server/picomatch-2.3.2
• dependabot/npm_and_yarn/services/satoshi-wallet/server/yaml-2.8.3
• dependabot/npm_and_yarn/undici-6.25.0
• dependabot/pip/python/keymaster/pip-88c005e9f0
• docs/cli-lightning-commands
• docs/flatten-protocol-dir
• docs/keymaster-readme-commands-table
• docs/lightning-zap-did-lud16-comparison
• docs/lightning-zap-sequence-diagram
• docs/readme-expand-intro
• docs/rename-doc-to-docs
• docs/runtime-container-architecture
• docs/service-specs
• docs/update-readme-and-deployment
• docs/whitepaper-v1.1
• e2e-report
• explorer-admin-api-key
• feat/avatar-identity-tab
• feat/configurable-refresh-interval
• feat/deployment-docs
• feat/gatekeeper-client-addresses
• feat/identity-name-tab
• feat/import-nsec
• feat/keymaster-cli-addresses
• feat/keymaster-py-http-metrics
• feat/lightning-export-import
• feat/publish-address-actions
• feat/python-keymaster-service
• feat/python-sdk-lightning-sync
• feat/qr-scan-deep-link
• feat/rust-gatekeeper
• feat/wallet-service
• feature/auto-auth-response
• fix-buffer-deserialization
• fix-satoshi-sync-backfill
• fix-test-safety
• fix/did-metrics-normalization
• fix/grafana-live-version-labels
• fix/herald-admin-header-split
• fix/herald-avatar-endpoint
• fix/keymaster-py-parity-with-ts
• fix/keymaster-py-volume-permissions
• fix/l402-default
• fix/lightning-invoice-did-lookup
• fix/lint-warnings
• fix/pending-zap-payment-history
• fix/persist-tor-key
• fix/rust-gatekeeper-cargo-lock
• fix/rust-gatekeeper-dmail-perf
• fix/rust-gatekeeper-upperbound-timestamp
• fix/satoshi-sync-pruned-blocks
• herald-client-avatar-directory
• init-v0.3
• init-v0.4
• init-v0.6
• init-v0.7
• issue-160-lud16-zap
• issue-166-l402-default-false
• lightning-zap-check-status
• lnbits-clnrest-readiness
• main
• nostr-accordion
• nostr-accordion-apps
• op-mining
• pin-cl-hive-2.13.2
• pre-release
• prerelease
• refactor-satoshi
• refactor-version
• release-0.1
• release-0.2
• release-0.3
• release-0.4
• release-0.5
• release-0.6
• release-0.7
• release-npm-20260130
• release-npm-20260202
• release-npm-20260209
• release-npm-20260211
• release-npm-20260212
• release-npm-20260213
• release-npm-20260216
• release-npm-20260219
• release-npm-20260221
• release-npm-20260304
• release-npm-20260320
• release-npm-20260323
• release-npm-20260406
• remediate-audit-runtime-1
• test-performance
• test/improve-keymaster-client-coverage
• test/improve-keymaster-coverage
• test/improve-l402-coverage

Build # 22725772458

Build Type

push

github

Committed by web-flow

Commit Message

feat: Support LUD-16 Lightning Addresses in zapLightning (#168)

* feat: Support LUD-16 Lightning Addresses in zapLightning (#160)

Closes #160

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* fix: Harden LUD-16 SSRF validation

Enforce exactly one @ in Lightning Address, parse constructed URL and
validate hostname to prevent userinfo bypass. Wrap callback URL parsing
in try/catch for clearer error messages.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Coverage Stats

1740 of 1918 branches covered (90.72%)

Branch coverage included in aggregate %.

7 of 8 new or added lines in 1 file covered. (87.5%)

3714 of 3871 relevant lines covered (95.94%)

1183.18 hits per line