update

.github/workflows/npm-test.yml

@@ -0,0 +1,39 @@
+name: npm test
+
+on:
+  push:
+  pull_request:
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@v6
+
+      - name: Set up Node.js
+        uses: actions/setup-node@v6
+        with:
+          node-version: 24
+          package-manager-cache: false
+
+      - name: Scan tracked files for sensitive data
+        run: node scripts/lint-sensitive-data.js
+
+      - name: Install native build dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y libboost-date-time-dev libboost-dev libsodium-dev libssl-dev
+
+      - name: Install dependencies
+        run: npm install --no-package-lock
+
+      - name: Generate test TLS certificate
+        run: openssl req -x509 -newkey rsa:2048 -nodes -days 1 -subj "/CN=localhost" -keyout cert.key -out cert.pem
+
+      - name: Run tests
+        run: npm test

.gitignore

@@ -1,77 +1,48 @@
-# Covers JetBrains IDEs: IntelliJ, RubyMine, PhpStorm, AppCode, PyCharm, CLion, Android Studio and Webstorm
-# Reference: https://intellij-support.jetbrains.com/hc/en-us/articles/206544839
-
-# User-specific stuff:
-.idea
-
-## File-based project format:
-*.iws
-
-## Plugin-specific files:
-
-# IntelliJ
-/out/
-
-# mpeltonen/sbt-idea plugin
-.idea_modules/
-
-# JIRA plugin
-atlassian-ide-plugin.xml
-
-# Crashlytics plugin (for Android Studio and IntelliJ)
-com_crashlytics_export_strings.xml
-crashlytics.properties
-crashlytics-build.properties
-fabric.properties
-
 #NodeJs Ignores
 
-# Logs
-logs
-*.log
 npm-debug.log*
 
-# Runtime data
-pids
-*.pid
-*.seed
-*.pid.lock
-
-# Directory for instrumented libs generated by jscoverage/JSCover
-lib-cov
-
-# Coverage directory used by tools like istanbul
-coverage
-
-# nyc test coverage
-.nyc_output
-
-# Grunt intermediate storage (http://gruntjs.com/creating-plugins#storing-task-files)
-.grunt
-
-# node-waf configuration
-.lock-wscript
-
-# Compiled binary addons (http://nodejs.org/api/addons.html)
-build/Release
-
 # Dependency directories
 node_modules
-jspm_packages
 
-# Optional npm cache directory
-.npm
+# Local editor / workstation artifacts
+.DS_Store
+.codex
+lib2/
+_*.js
+*~
+*.un~
 
-# Optional eslint cache
-.eslintcache
-
-# Optional REPL history
-.node_repl_history
-
-# Output of 'npm pack'
-*.tgz
-
-# Yarn Integrity file
-.yarn-integrity
+# Untracked dependency locks
+package-lock.json
 
+# Local runtime config and TLS files
+cert*
 config.json
+
+# Generated local runtime outputs
+core.*
+dump
+dump_[0-9]*
+wallet_trust_*
+miner_agents
+extra_verify_wallet_hashes_*
+block_share_dumps/*.cvs
+block_share_dumps/*.cvs.xz
+block_share_dumps/process.sh
+block_template_is_stuck
+ex_keys.json
+
+# Local runtime control files
+*.stop.txt*
+extra_wallet_verify.txt
+ip_whitelist.txt
+wallet_debug.txt
+
+# Generated local test outputs
+.cache/live-miners
+test-artifacts/
+plan.txt
+
+# Local security audit notes (contain exploit detail; never commit)
+audit.md

.npmrc

@@ -0,0 +1,5 @@
+engine-strict=true
+min-release-age=7
+audit=false
+fund=false
+save-exact=true

LICENSE

@@ -1,36 +1,19 @@
 MIT License
 
 Copyright (c) 2017 Snipa22 <Alexander Blair, alex@snipanet.com>
+Copyright (c) 2019-2026 MoneroOcean
 
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and
+associated documentation files (the "Software"), to deal in the Software without restriction, including
+without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the
+following conditions:
 
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
+The above copyright notice and this permission notice shall be included in all copies or substantial
+portions of the Software.
 
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
-
-This work is a derivitive work from Zone117x's node-cryptonote-pool, permission
-has been granted from Zone117x via IRC conversation to re-license this code as
-MIT for all portions of the work derived from his original source as of 2/11/2017
-Original work: https://github.com/zone117x/node-cryptonote-pool
-
-Log snippet:
-Feb 11 15:59:02 <Snipa>	Hallo!  Wanted to reach out as we finally released the pool software w/ the FFS funded at this point.  https://github.com/Snipa22/nodejs-pool  <redacted>.  The following code: https://pb.junaos.xyz/view/cd3d7e27 is what was snagged, and mostly rebuilt along the way for good measure.
-Feb 11 15:59:02 <Snipa>	 I'm not sure how deeply the GPL requires me to go to claim it as "new code" given that the logic behind it all is about the same.
-<redacted>
-Feb 11 16:09:39 <Snipa>	.fr is now 1/5th of the overall mining power, DP is another 1/5th.
-Feb 11 16:09:48 <Snipa>	We're getting scary-close to the 50% attacks.
-Feb 11 16:10:08 <zone117x>	You have my permission to MIT
-Feb 11 16:10:31 <Snipa>	Thank you.  I'll get our licenses updated and such today.
-Feb 11 16:12:08 <zone117x>	What payment systems did you get implemented?
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT
+LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO
+EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE
+USE OR OTHER DEALINGS IN THE SOFTWARE.