lightning-agent 0.3.2 → 0.3.3

package/lib/auth.js

@@ -169,6 +169,18 @@ function createAuthServer(opts = {}) {
  * // Send sig + key back to the auth server
  */
 function signAuth(k1, privateKey) {
+  // Validate k1 is a 64-character hex string (32 bytes)
+  if (typeof k1 !== 'string' || !/^[0-9a-f]{64}$/i.test(k1)) {
+    throw new Error('k1 must be a 64-character hex string');
+  }
+
+  // Validate privateKey is valid hex when provided as string
+  if (typeof privateKey === 'string') {
+    if (!/^[0-9a-f]+$/i.test(privateKey) || privateKey.length === 0) {
+      throw new Error('privateKey must be a valid hex string');
+    }
+  }
+
   const privBuf = typeof privateKey === 'string'
     ? Buffer.from(privateKey, 'hex')
     : Buffer.from(privateKey);

package/lib/stream.js

@@ -415,14 +415,21 @@ function createStreamClient(wallet, opts = {}) {
 
                       // POST preimage back to provider
                       if (sessionId && payResult.preimage) {
-                        fetch(url, {
-                          method: 'POST',
-                          headers: { 'Content-Type': 'application/json' },
-                          body: JSON.stringify({
-                            sessionId,
-                            preimage: payResult.preimage
-                          })
-                        }).catch(() => {}); // Best effort
+                        try {
+                          const proofRes = await fetch(url, {
+                            method: 'POST',
+                            headers: { 'Content-Type': 'application/json' },
+                            body: JSON.stringify({
+                              sessionId,
+                              preimage: payResult.preimage
+                            })
+                          });
+                          if (!proofRes.ok) {
+                            console.error('Preimage POST failed:', proofRes.status);
+                          }
+                        } catch (postErr) {
+                          console.error('Preimage POST error:', postErr.message);
+                        }
                       }
                     } catch (err) {
                       // Payment failed — stream will pause

package/lib/wallet.js

@@ -90,9 +90,9 @@ function decodeBolt11(invoice) {
     amountSats,
     description,
     paymentHash,
-    network: hrp.startsWith('lntb') ? 'testnet' :
-             hrp.startsWith('lnbcrt') ? 'regtest' :
-             hrp.startsWith('lntbs') ? 'signet' : 'mainnet'
+    network: hrp.startsWith('lntbs') ? 'signet' :
+             hrp.startsWith('lntb') ? 'testnet' :
+             hrp.startsWith('lnbcrt') ? 'regtest' : 'mainnet'
   };
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lightning-agent",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "Lightning toolkit for AI agents. Payments, auth, escrow, and streaming micropayments.",
   "main": "lib/index.js",
   "bin": {