6 Commits

Include renames

Author	SHA1	Message	Date
archipelago	f4d3455496	Fix paid-file recovery, app lifecycle regressions and wallet controls	2026-10-01 10:31:55 -04:00
archipelago	971d477795	Merge current main and harden paid-download delivery	2026-09-30 07:25:47 -04:00
ssmithxandClaude Opus 5.5	03e38d1ca3	test: regression tests for the paid-download fixes ... - mint_client: a stub mint shows swap() sends the full v2 keyset id when given a cashuB short id, and leaves complete v1/v2 ids unchanged. - fips::dial: the single-delivery decisions are now small functions (fips_answer_is_final, fips_retryable). Tests cover them and, against a silent local peer, check that a single-delivery request isn't resent after a timeout while an ordinary one still is. - content_server: an unreadable paid file returns Unavailable before the payment gate runs, and a readable one still returns 402. Also covers ensure_readable's grant/reopen behaviour. The podman grant is replaced by a refusal under cfg(test) so results don't depend on the host. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-09-29 20:12:16 +00:00
archipelago	0f85f588fb	Fix Cashu file redemption and Bitcoin-dependent wallet readiness	2026-09-29 14:42:44 -04:00
ssmithxandClaude Opus 5.5	e5fc99d66c	fix(content): never charge for a file the seller can't serve or replay a spent token ... After the keyset-id fix, a Minibits paid download still failed and the buyer lost the sats. What happened, 2026-09-29, amishparadise: 1. The seller redeemed the token, then failed to read the file. It was a FileBrowser upload owned by the container subuid (100999) with mode 0640. The handler mapped that Err to 404. 2. The buyer's FIPS dial treats 404 as "fall back to Tor" and resent the request with the same, now spent, token. The seller answered 402, and the buyer showed "seller doesn't accept your Cashu mint". Fixes: - serve_content checks the file is readable before the paid gate. If it isn't, it grants read with `podman unshare chmod a+r`, which matches the other shared files. If that also fails it returns Unavailable (503) without taking payment. - The content handler returns 500 on internal errors and logs them, instead of a silent 404. - New PeerRequest::single_delivery(), used for the paid download: the FIPS answer is final, FIPS retries only when it never connected, and there's no Tor replay once the request may have been delivered. - The buyer shows the seller's error text for non-402 failures. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>	2026-09-29 18:42:20 +00:00
Archipelago	b67e1527a2	Archipelago — open-source initial import	2026-08-12 10:55:50 +00:00