Conversation
…roxy Replace placeholder worker with a real Cloudflare Worker that: - Routes /mainnet/* and /regtest/* as API calls, everything else as static site - Validates X-Signature-256 HMAC-SHA256 signature before forwarding - Proxies authenticated API requests to the private ord backend (ORD_BACKEND_URL) - Returns JSON errors for missing config or invalid signatures - Add ORD_BACKEND_URL to wrangler.toml [vars] Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
…helpers - run_ord_command: exponential-backoff retry on transient errors (connection refused, timeout, etc.) - sanitize_error: strip RPC passwords from stderr before returning - write_temp_yaml: UUID-suffixed temp files to avoid race conditions Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- make_base_command: build ord CLI prefix for mainnet/regtest - make_wallet_args: build wallet sub-command args per network - validate_fee_rate: range check (1-10000 sat/vbyte) - Fix mainnet RPC URL default port (8332, not 18443) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- validate_live_auth: constant-time password check via hmac.compare_digest (prevents timing side-channel attacks on the wallet password) - Refactor all 3 endpoints to use make_base_command, make_wallet_args, run_ord_command, sanitize_error, write_temp_yaml, validate_fee_rate - Temp YAML files are cleaned up after each request - Add requests to requirements.txt Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Add /mainnet/etch-rune and /regtest/etch-rune POST endpoints for creating new Runes on Bitcoin. Supports rune name, symbol, divisibility, premine, open-mint terms (cap, amount, height/offset windows), turbo flag, and dry-run mode. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
📊 Monthly LeaderboardHi @Neurvinch! Here's how you rank for March 2026:
Scoring this month (across OWASP-BLT org): Open PRs (+1 each), Merged PRs (+10), Closed (not merged) (−2), Reviews (+5; first two per PR in-month), Comments (+2, excludes CodeRabbit). Run |
owasp-blt
bot
added
unresolved-conversations: 0
needs-peer-review
|
👋 Hi @Neurvinch! This pull request needs a peer review before it can be merged. Please request a review from a team member who is not:
Once a valid peer review is submitted, this check will pass automatically. Thank you!
|
|
Warning Rate limit exceeded
⌛ How to resolve this issue?After the wait time has elapsed, a review can be triggered using the We recommend that you space out your commits to avoid hitting the rate limit. 🚦 How do rate limits work?CodeRabbit enforces hourly rate limits for each developer per organization. Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout. Please see our FAQ for further information. ℹ️ Review info⚙️ Run configurationConfiguration used: Repository: OWASP-BLT/coderabbit/.coderabbit.yml Review profile: CHILL Plan: Pro Run ID: 📒 Files selected for processing (5)
✨ Finishing Touches🧪 Generate unit tests (beta)
📝 Coding Plan
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
1 participant
Summary
Add
/mainnet/etch-runeand/regtest/etch-runePOST endpoints for creating new Runes on Bitcoin.Supported parameters
rune_name"BLT•BACON•TOKENS"symbolfee_ratedivisibilitypreminemint_capmint_amountmint_height_start/endmint_offset_start/endturbodry_runpassworddry_run=false*At least one of
premineormint_cap/mint_amountmust be provided.Changes
ord-server/ord-api.py—_etch_rune()shared handler + 2 route endpointsTest plan