Claude 42e69fd424 fix(bolt12): audit fixes — verify crash, decode hardening, send robustness ...

- amy bolt12 verify: the id-only query with a <Bolt12ZapEvent> type crashed
  with ClassCastException when the id pointed at a non-9736 event. Constrain
  the filter to kind 9736 and cast defensively (query<Event>() as?), returning
  a clean not_found instead.
- Bolt12ZapActions.decodeOffer/decodeProof: a parseable bech32 with an
  over-8-byte amount TLV threw in tu64 on field read instead of honoring the
  null contract; guarded the field extraction in runCatching. Adds a
  malformed-amount regression test.
- Account.sendBolt12Zap: wrap the NWC response callback in try/catch/finally so
  a post-payment receipt-assembly failure (e.g. a remote signer error) steps
  progress and surfaces "paid, no receipt" instead of vanishing as an uncaught
  coroutine exception.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01SpgpWLKzgD7vS9Fs4CXTR3

2026-07-25 01:23:23 +00:00

..

main/kotlin/com/vitorpamplona/amethyst/cli

fix(bolt12): audit fixes — verify crash, decode hardening, send robustness

2026-07-25 01:23:23 +00:00

test/kotlin/com/vitorpamplona/amethyst/cli

fix(cli): repair the exit-code and flag-parsing contract

2026-07-18 20:54:14 +00:00