npub12m5exm2uk3xa674cc5r0hlyvccs5xxn7qv83ezuteefv5972nquq4j4szl/esp32-tollgate/tests/unit/test_identity, branch feature/cvm-integration[no description]https://upleb.uk/npub12m5exm2uk3xa674cc5r0hlyvccs5xxn7qv83ezuteefv5972nquq4j4szl/esp32-tollgate/atom?h=feature%2Fcvm-integration2026-05-17T11:09:31+00:00feat: per-client NAT filtering via LWIP_HOOK_IP4_CANFORWARD2026-05-17T11:09:31+00:00Your Nameyou@example.com2026-05-17T11:09:31+00:00urn:sha1:0c2c67b463d6a90aaa0bb69bf3c91dba1d9ec3ec
- Add lwip_tollgate_hooks.h defining LWIP_HOOK_IP4_CANFORWARD macro
- Inject hook into lwIP build via CMakeLists.txt ESP_IDF_LWIP_HOOK_FILENAME
- Filter forwarded packets by source IP against firewall allowed list
- Only filter packets from AP subnet (10.192.45.0/24), allow all others
- Fix byte order bug: use network byte order for firewall_is_client_allowed
- NAT always enabled, removed global NAT toggle functions
- Remove spent-secret tracking from session.c (mint is authority)
- Remove unused get_ap_netif() function
- Reduce API server stack from 32KB to 16KB (fixes ESP_ERR_HTTPD_TASK)
- Add esp_random.h stub for unit tests
- All 186 unit tests passing
- Verified on hardware: block->pay->allow->revoke->block E2E works
Phase 5: Lightning auto-payout with LNURL-pay and NUT-05 melt2026-05-16T23:07:15+00:00Your Nameyou@example.com2026-05-16T23:07:15+00:00urn:sha1:cb4bd7d7c10cadcb43f82c09b13ffed744e541f7
- New lnurl_pay.c/h: LNURL-pay protocol (GET .well-known/lnurlp + callback)
- New lightning_payout.c/h: threshold-based auto-payout with multi-recipient split
- Extended nucula_wallet bridge with nucula_wallet_melt() (NUT-05)
- Config: payout section with multi-mint, multi-recipient, fee_tolerance
- Default: enabled, TollGate@coinos.io, min_payout=128, min_balance=64
- 18 new unit tests (all passing), 134 total
test_identity: 24/24 passing — HMAC-SHA512 derivation, MAC bits, SSID/IP determinism2026-05-16T20:03:11+00:00Your Nameyou@example.com2026-05-16T20:03:11+00:00urn:sha1:72f7b68b93ed6b237775eb2caf516a1503675614