Test lane: fee-charging signet mint on CLN (inr2) + rune-authorized driver
I maintainer di solito rispondono entro 1 giorno
Nessuno ha ancora preso questa issue.
Valutazione
- Difficoltà
- 5/5
- Tempo stimato
- Più di una settimana
- Idoneità per principianti
- 25/100
- Tipo di issue
- Funzionalità
- Chiarezza
- Abbastanza chiara
- Stato di attività
- Attiva
- Stack tecnologico
- go
- Ambito
- infrastructure, payments, testing
Direzione di ricerca
Start by reading the cloud-lab/QEMU suite and its existing mint-fees profile from #413, then inspect SECURITY.md and the cdk-mintd 0.17.6 CLN configuration referenced here (src/env_vars/cln.rs). First resolve whether inr2 exposes a co-locatable lightning-rpc socket or only clnrest; that decision determines the mint integration. Done means a signet profile tests fee refusal, net-of-fee credit, settled melts, reseller fees, rune-restricted access, and a keyset fee change across rotation.
Scritto dal modello di indicizzazione a partire dal testo della issue.
Descrizione
Test-lane request: fee-charging signet mint backed by our CLN (inr2.cashu.exchange), rune-authorized test driver — the "real world" tier of the fee-mirroring test programme.
Why: real-world mints charge input fees; our signet mint does not. Verified today: testnut.cashu.exchange is a nutshell FakeWallet mint whose keysets all report input_fee_ppk: 0 — every fee behavior #409/#413 hardened (below-fee refusal, net-of-fee credit, keyset resolution) is currently invisible on the fleet that most resembles production. The lab's mint-fees (#413) covers the hermetic tier; what's missing is the signet tier where settlement is real (melt → Lightning invoice → payout lands) and keyset IDs/rotation shapes come from a real operator setup.
Proposed architecture (two components):
mint-signet-fees— cdk-mintd 0.17.6 with the CLN backend (env vars verified against the 0.17.6 source,src/env_vars/cln.rs):CDK_MINTD_LN_BACKEND=cln,CDK_MINTD_CLN_RPC_PATH=<lightning-rpc socket>,CDK_MINTD_CLN_FEE_PERCENT,CDK_MINTD_CLN_RESERVE_FEE_MIN, plusCDK_MINTD_INPUT_FEE_PPK=100to mirror coinos. cdk's CLN backend speaks the raw UNIX socket, not clnrest — so the wiring depends on what inr2 exposes (see decision below).- Rune-authorized test driver — the test runner gets a CLN rune (restricted:
invoice,listpays,listfunds) and drives/asserts the settlement loop directly: melt with fees → invoice created via rune → signet payment → payout observed. Runes also gate the driver's access without handing it the node.
Decision needed (infra, @Amperstrand): does inr2 expose lightning-rpc co-locatable (mount/socket-forward) or only clnrest (HTTPS+rune)?
- (a) socket available → run
mint-signet-feesco-located with (or SSH-forwarded to) the socket; no rune needed for the mint itself; driver uses clnrest+rune. - (b) clnrest only → a small socket↔clnrest bridge is required for cdk-mintd, or we contribute/reuse an existing one; alternatively evaluate cdk's
grpc-processor/LND backends if the node multiplexes those.
Acceptance criteria:
- A signet mint at a stable host with
input_fee_ppk=100, settling through inr2's CLN. - Cloud-lab/QEMU suite extended with a
signetprofile: below-fee refusal + net-of-fee credit + melt-with-fee settlement (invoice paid on signet, payout received) + reseller chain with asymmetric fees (free upstream / fee downstream). - Test driver authenticated by a restricted rune; rune stored per the SECURITY.md secret rules (never committed).
- Keyset rotation on the signet mint exercised at least once (fee change across rotation) to cover
mintKeysetFees' inactive-keyset branch in production shape.
Hermetic predecessor landed meanwhile: #413 (mint-fees in cloud-lab, 4 e2e tests green). A keyset-rotation variant using cdk-mintd's CDK_MINTD_FAKE_WALLET_KEYSET_ROTATIONS (env verified in 0.17.6 source) is being added on top of it.
Refs: #409 (swap-fee handling), #413 (hermetic fee mint), #339 (v0.6.0), #403 (the fund-safety family that started this).
- Lingua principale
- Go
- Stelle
- 12
- Fork
- 14
- Merge medio
- 1g 7h
- PR unite (30g)
- 205
Preparare l'ambiente
- Nessun Dockerfile né file Docker Compose
- Nessun modello di pull request
- Leggi la guida per i contributori
Come iniziare
- Leggi tutta la issue e poi la guida ai contributi del progetto.
- Commenta sulla issue per dire che te ne occupi tu — evita che due persone facciano lo stesso lavoro.
- Fai un fork del repository e lavora su un branch.
- Apri una pull request che faccia riferimento al numero della issue.
Altre issue di OpenTollGate/tollgate-module-basic-go
-
Difficoltà 2/5 1-3 ore Idoneità per principianti 78/100
OpenTollGate/tollgate-module-basic-go#1027 ·
I maintainer di solito rispondono entro 1 giorno
-
bug
Difficoltà 2/5 1-3 ore Idoneità per principianti 72/100
OpenTollGate/tollgate-module-basic-go#1026 ·
I maintainer di solito rispondono entro 1 giorno
-
Session event emits the customer's MAC address in the p tag — spec-invalid value on every payment responseForse già presa @Amperstrand l’ha presa 7 giorni fa. Aperta
Difficoltà 2/5 1-3 ore Idoneità per principianti 70/100
OpenTollGate/tollgate-module-basic-go#949 ·
I maintainer di solito rispondono entro 1 giorno
-
Difficoltà 2/5 1-3 ore Idoneità per principianti 68/100
OpenTollGate/tollgate-module-basic-go#833 · 1 commento ·
I maintainer di solito rispondono entro 1 giorno
-
Difficoltà 2/5 1-3 ore Idoneità per principianti 65/100
OpenTollGate/tollgate-module-basic-go#813 ·
I maintainer di solito rispondono entro 1 giorno
Tutte le issue di OpenTollGate/tollgate-module-basic-go
Issue simili
-
Difficoltà 2/5 1-3 ore Idoneità per principianti 82/100
I maintainer di solito rispondono entro 1 giorno
-
kind/engineering pulumi/pulumi-terraform Task Workflow Failure
Difficoltà 2/5 1-3 ore Idoneità per principianti 64/100
pulumi/pulumi-terraform#1261 ·
I maintainer di solito rispondono entro 1 giorno
-
Controllers integration tests fail when port 8080 is in useForse già presa @noahnut l’ha presa oggi. Apertaarea/cluster-autoscaler kind/bug needs-triage
Difficoltà 2/5 1-3 ore Idoneità per principianti 78/100
kubernetes-sigs/cluster-autoscaler#236 · 1 commento ·
I maintainer di solito rispondono entro 1 giorno
-
MCP: `tasks_bulk_update` always fails with "Need at least one field" — the `fields` projection argument is stripped from non-read tools tooForse già presa @tink-bot l’ha presa oggi. Apertaagent-processed area/api-v2 integration/inbound
Difficoltà 2/5 1-3 ore Idoneità per principianti 82/100
go-vikunja/vikunja#4235 ·
I maintainer di solito rispondono entro 1 giorno
-
Difficoltà 2/5 1-3 ore Idoneità per principianti 84/100
google/osv-scalibr#2503 ·
I maintainer di solito rispondono entro 1 giorno