Monero LWS

This commit fixes a YAML syntax error in a GitHub Actions workflow file. A missing closing quote in the paths-ignore list caused the workflow configuration to be invalid. The change adds the missing quote so the workflow can parse correctly. There is no security-relevant code change.

This commit adds a single configuration file named 'cname' to the docs folder. The file contains the custom domain name 'docs.monerolws.com' for GitHub Pages documentation hosting. It makes no code changes and has no security relevance.

This commit fixes a typo in an automated documentation publishing script. The previous command incorrectly tried to run mkdocs as a Python module (python3 mkdocs build), which would fail. The corrected command simply runs mkdocs build. There is no security issue here.

This commit is a documentation-only change. It adds a new docs website for the monero-lws project, including Markdown guides, OpenAPI YAML specs, a GitHub Actions workflow to deploy the site, and a MkDocs configuration. No source code, build scripts, or runtime behavior of the application were modified. There is no security-relevant change in the software itself.

This is a one-line build-system change that tells CMake not to automatically build every target from the bundled Monero dependency when building monero-lws. It only affects which build targets are included by default and does not change any executable code, network behavior, or cryptographic logic.

This is a small performance optimization. When a user has disabled subaddresses, the scanner now skips a step that pre-generates future subaddress keys. This makes servers with subaddresses disabled run faster. There is no security problem visible in the change.

This commit adds subaddress lookahead support to the Monero Light Wallet Server (LWS). It lets wallets tell the server how many future subaddresses to precompute and watch, replacing a simple on/off subaddress flag with a configurable limit. The change touches the database format, admin and REST APIs, and the block scanner. It also adds automatic approval options for account creation and import requests. There is no explicit security bug visible in the diff, but the large schema migration and new resource-limit logic introduce ordinary operational risks: a misconfigured or maliciously large lookahead could make the server precompute huge numbers of subaddresses, consuming CPU and database space. The code does add a max_subaddresses cap and clamping helpers to mitigate this.

This commit adds a new public /get_version endpoint to the Monero Light Wallet Server. It also changes the server to accept GET requests for some endpoints and records the HTTP method used. The new endpoint exposes detailed version and build information, including the exact git commit hash, branch, build date, Monero version, blockchain height, and server configuration. This information could help an attacker identify outdated or vulnerable server versions, but the commit itself does not appear to introduce a direct exploit.

This change stops the program from writing a scary but harmless 'not found' log message when a subaddress lookup returns no result. It is a minor cleanup that reduces log noise; it does not fix a vulnerability that an attacker could exploit.

This commit adds a new optional 'from_height' field to the /import_wallet_request endpoint in the Monero Light Wallet Server. Previously, import requests always started scanning from block 0. Now users can request a later starting block height. The change appears to be a feature addition rather than a security fix, though it touches authentication-related code paths.