You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Reorganize the codebase into a clean per-mode architecture (cli, pipe, interactive, tui, rpc, rest, session) with types split into config/domain/limits/protocol modules, routing all CLI output through Agent-First Data event emitters
Add a full-screen TUI mode (--mode tui) driving the same command interface as the interactive REPL for human terminal workflows
Add a REST server mode (--mode rest) exposing POST /v1/afpay with Bearer-token auth alongside the encrypted gRPC RPC mode, both enforcing spend limits independently
Make sends idempotent: replaying a Send or CashuSend with the same agent-supplied idempotency key returns the original result instead of double-spending on retry
Add spend reservations with per-network TTLs and reservation_ids on Sent outputs, cross-linked into history, plus an operator-only ReconcileReservation input to repair stuck reservations
Pin EVM chain_id and Solana cluster at send time and fail closed when omitted or mismatched, preventing cross-chain/cross-cluster misdelivery
Harden the RPC transport with a per-session handshake (random salt, TTL-bounded replay cache) and rate-limit handshakes to bound session-table flooding
Add structured PayError and retry_after_ms on Output::Error so agents can pace retries, plus a Request wrapper and dry_run support across all modes
Expose Input::Schema in every mode and a /v1/schema REST endpoint, and emit schema_version for protocol discoverability
Add receive-watching that waits for on-chain/Lightning confirmation across Bitcoin, EVM, and Solana
Add a container orchestration command with an operator allowlist and a Docker deployment (Dockerfile/compose/entrypoint/backup/restore + .dockerignore), dropping the Apple container scripts
Replace silent numeric truncation/saturation in fee paths with checked arithmetic, tighten ledger accounting across confirm/cancel/wallet-id paths, and scrub errors on public pipe/listen surfaces
Migrate to Agent-First Data 0.22 (builder APIs, structured CLI exits, config-on-DocumentFile, protocol-v1 --version with DISPLAY_NAME + git SHA, skill-admin asset bundling) and ship an embedded Agent Skill (afpay skill install/status) with restructured docs