AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Informational 19 Bitcoin

lightningd: include offer_id in invoice_creation notification

Public commit record

What the developer wrote

Authored by Vincenzo Palazzo

81/100 · Strong
lightningd: include offer_id in invoice_creation notification

When a BOLT 12 invoice is created via createinvoice and is associated
with a local offer, include the offer_id in the invoice_creation event
notification. This allows plugins to determine which offer triggered
an invoice creation without having to call listinvoices for every
created invoice.

For bolt11 invoices and bolt12 invoices not associated with a local
offer, the field is omitted.

Fixes #8191

Changelog-Added: The `invoice_creation` notification now includes `offer_id` when the invoice is associated with a BOLT 12 offer.
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Links an issue, advisory, or supporting reference
The short version

What changed, and why it matters

This commit is a straightforward feature addition, not a security fix. It adds an optional `offer_id` field to the `invoice_creation` event notification that plugins can subscribe to. This lets plugins know which BOLT 12 offer triggered a newly created invoice, avoiding the need to repeatedly query the node for invoice details. There is no vulnerability being patched here.

Recommended action

No security action required. Treat as a normal feature/documentation update during review or deployment.

Security signals we found

No strong security signals were identified.

Risk score

Why this scored 19/100

Our methodology →
Potential impact 0/30
Exploitability 0/25
Stealth signal 0/15
Affected reach 5/15
Confidence 9/10
Evidence quality 5/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.