Dash2

[shocknet-justin]

Note

Medium Risk
New admin-only endpoints expose user balances, operations, and liability data; incorrect auth or handler bugs could leak sensitive financial/user data, though scope is limited to documented Admin auth.

Overview
Bumps the package to 0.0.32 and adds express-ws (plus @types/express-ws) for WebSocket support on Express—likely to back live admin/dashboard streams alongside existing subscription RPCs.

The LightningPub API surface grows with three Admin endpoints (HTTP and Nostr): GetAssetsAndLiabilitiesV2 at POST /api/admin/assets/liabilities/v2, GetUserOperationsFromAdmin at POST /api/admin/user/operations, and GetUsersAdminInfo at POST /api/admin/users/info. Client docs are retitled with a LightningPub prefix on the main HTTP/Nostr sections.

Assets/liabilities v2 replaces coarse global limits with per-provider filters (LiquidityProviderFilter, LndProviderFilter) and returns paginated operation lists (LiquidityAssetOperationsPage, LndAssetOperationsPage with has_more and cursors/index offsets) on the V2 provider types. GetUserOperations gains optional user_id on request and response for admin-targeted queries. TrackedOperation adds optional user_id. New types UserAdminInfo, AppUserAdminInfo, and paginated UsersAdminInfo support listing users for admin UIs.

Autogenerated Go client (http_client.go, types.go) and client.md reflect these RPCs and messages; implementation handlers are not in this diff.

^{Reviewed by Cursor Bugbot for commit 3477bd3. Bugbot is set up for automated code reviews on this repo. Configure here.}

[shocknet-justin]

@BugBot review

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	express-ws@​5.0.2
	@​types/​express-ws@​3.0.6

View full report

[shocknet-justin]

@BugBot review

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 3477bd3. Configure here.}