rfq: add tls support for price oracles

address/event.go

@@ -41,6 +41,33 @@ const (
 	StatusCompleted Status = 3
 )
 
+// SortDirection is an enum used to specify the order of returned events.
+type SortDirection uint8
+
+const (
+	// UndefinedSortDirection indicates that the sort direction
+	// is not specified.
+	UndefinedSortDirection SortDirection = iota
+
+	// DescSortDirection indicates that the sort should be in
+	// descending order.
+	DescSortDirection
+
+	// AscSortDirection indicates that the sort should be in
+	// ascending order.
+	AscSortDirection
+)
+
+const (
+	// DefaultEventQueryLimit is the number of events returned
+	// when no limit is provided.
+	DefaultEventQueryLimit = 512
+
+	// MaxEventQueryLimit is the maximum number of events that can be
+	// returned in a single query.
+	MaxEventQueryLimit = 16384
+)
+
 // EventQueryParams holds the set of query params for address events.
 type EventQueryParams struct {
 	// AddrTaprootOutputKey is the optional 32-byte x-only serialized
@@ -65,6 +92,17 @@ type EventQueryParams struct {
 	// (inclusive). Can be set to nil to return events of all creation
 	// times.
 	CreationTimeTo *time.Time
+
+	// Offset is the offset into the result set to start returning events.
+	Offset int32
+
+	// Limit is the max number of events that should be returned. If zero,
+	// then DefaultEventQueryLimit will be used.
+	Limit int32
+
+	// SortDirection is the sort direction to use when returning the
+	// events. The default zero value sorts the events in ascending order.
+	SortDirection SortDirection
 }
 
 // AssetOutput holds the information about a single asset output that was sent

cmd/commands/addrs.go

@@ -158,6 +158,8 @@ const (
 	limitName = "limit"
 
 	offsetName = "offset"
+
+	directionName = "direction"
 )
 
 var queryAddrsCommand = cli.Command{
@@ -293,6 +295,20 @@ var receivesAddrCommand = cli.Command{
 			Usage: "filter transfers created before this + " +
 				"unix timestamp (seconds)",
 		},
+		cli.Int64Flag{
+			Name:  limitName,
+			Usage: "the max number of events returned",
+		},
+		cli.Int64Flag{
+			Name:  offsetName,
+			Usage: "the number of events to skip",
+		},
+		cli.StringFlag{
+			Name: directionName,
+			Usage: "the sort direction for events (asc or desc). " +
+				"Defaults to desc.",
+			Value: "desc",
+		},
 	},
 	Action: addrReceives,
 }
@@ -311,10 +327,18 @@ func addrReceives(ctx *cli.Context) error {
 		addr = ctx.Args().First()
 	}
 
+	direction := taprpc.SortDirection_SORT_DIRECTION_DESC
+	if ctx.String(directionName) == "asc" {
+		direction = taprpc.SortDirection_SORT_DIRECTION_ASC
+	}
+
 	resp, err := client.AddrReceives(ctxc, &taprpc.AddrReceivesRequest{
 		FilterAddr:     addr,
 		StartTimestamp: ctx.Uint64("start_timestamp"),
 		EndTimestamp:   ctx.Uint64("end_timestamp"),
+		Limit:          int32(ctx.Int64(limitName)),
+		Offset:         int32(ctx.Int64(offsetName)),
+		Direction:      direction,
 	})
 	if err != nil {
 		return fmt.Errorf("unable to query addr receives: %w", err)

docs/release-notes/release-notes-0.7.0.md

@@ -26,8 +26,8 @@
 - [An integration test flake was
   fixed](https://github.com/lightninglabs/taproot-assets/pull/1651).
 
-- Fixed two send related bugs that would lead to either a `invalid transfer 
-  asset witness` or `unable to fund address send: error funding packet: unable 
+- Fixed two send related bugs that would lead to either a `invalid transfer
+  asset witness` or `unable to fund address send: error funding packet: unable
   to list eligible coins: unable to query commitments: mismatch of managed utxo
   and constructed tap commitment root` error when sending assets.
   The [PR that fixed the two
@@ -36,7 +36,7 @@
   tombstone outputs on a full-value send (by using interactive transfers for V2
   addresses).
 
-- [Updated](https://github.com/lightninglabs/taproot-assets/pull/1774) 
+- [Updated](https://github.com/lightninglabs/taproot-assets/pull/1774)
   `BuyOrderRequest` and `SellOrderRequest` proto docs to mark `peer_pub_key` as
   required. Previously, the field was incorrectly documented as optional.
   This change corrects the documentation to match the current implementation.
@@ -179,20 +179,21 @@
 - [Rename](https://github.com/lightninglabs/taproot-assets/pull/1682) the
   `MintAsset` RPC message field from `universe_commitments` to
   `enable_supply_commitments`.
+
 - [Enhanced RFQ accepted quote messages with asset identification fields](https://github.com/lightninglabs/taproot-assets/pull/1805):
   The `PeerAcceptedBuyQuote` and `PeerAcceptedSellQuote` proto messages
   now include asset ID and asset group pub key fields (via the `AssetSpecBytes`
   message), allowing clients to directly associate quotes with their
   corresponding assets without manual tracking.
 
-- The `SubscribeSendEvents` RPC now supports [historical event replay of 
+- The `SubscribeSendEvents` RPC now supports [historical event replay of
   completed sends with efficient database-level
   filtering](https://github.com/lightninglabs/taproot-assets/pull/1685).
 - [Add universe RPC endpoint FetchSupplyLeaves](https://github.com/lightninglabs/taproot-assets/pull/1693)
   that allows users to fetch the supply leaves of a universe supply commitment.
   This is useful for verification.
 
-- A [new field `unconfirmed_transfers` was added to the response of the 
+- A [new field `unconfirmed_transfers` was added to the response of the
   `ListBalances` RPC
   method](https://github.com/lightninglabs/taproot-assets/pull/1691) to indicate
   that unconfirmed asset-related transactions don't count toward the balance.
@@ -204,9 +205,9 @@
 - The `AddrReceives` RPC now supports timestamp filtering with
   [new `StartTimestamp` and `EndTimestamp` fields](https://github.com/lightninglabs/taproot-assets/pull/1794).
 
-- The [FetchSupplyLeaves RPC endpoint](https://github.com/lightninglabs/taproot-assets/pull/1829)  
-  is now accessible without authentication when the universe server is  
-  configured with public read access. This matches the behavior of the  
+- The [FetchSupplyLeaves RPC endpoint](https://github.com/lightninglabs/taproot-assets/pull/1829)
+  is now accessible without authentication when the universe server is
+  configured with public read access. This matches the behavior of the
   existing FetchSupplyCommit RPC endpoint.
 
 - [PR#1839](https://github.com/lightninglabs/taproot-assets/pull/1839) The
@@ -218,6 +219,9 @@
   information directly from the RPC response without performing separate
   blockchain queries.
 
+- The `AddrReceives` RPC has new fields `limit`, `offset` and `direction` that
+  allows pagination and sorting. [See PR](https://github.com/lightninglabs/taproot-assets/pull/1813).
+
 ## tapcli Additions
 
 - [Rename](https://github.com/lightninglabs/taproot-assets/pull/1682) the mint
@@ -236,9 +240,12 @@
   includes unset and zero-valued proto fields (e.g. transaction output indexes).
   This ensures consistent output shape across all proto messages.
 
-- The `tapcli addrs receives` command now supports 
+- The `tapcli addrs receives` command now supports
   [new `--start_timestamp` and `--end_timestamp` flags](https://github.com/lightninglabs/taproot-assets/pull/1794).
 
+- The `tapcli addrs receives` command now has new flags `--limit`, `--offset` and
+  `--direction` that allows pagination and sorting. [See PR](https://github.com/lightninglabs/taproot-assets/pull/1813).
+
 - The `fetchsupplycommit` command [now supports](https://github.com/lightninglabs/taproot-assets/pull/1823)
   a `--first` flag to fetch the very first supply commitment; if no flag is
   provided, it defaults to fetching the latest. Only one of `--first`,

docs/release-notes/release-notes-0.8.0.md

@@ -0,0 +1,82 @@
+# Release Notes
+- [Bug Fixes](#bug-fixes)
+- [New Features](#new-features)
+    - [Functional Enhancements](#functional-enhancements)
+    - [RPC Additions](#rpc-additions)
+    - [tapcli Additions](#tapcli-additions)
+- [Improvements](#improvements)
+    - [Functional Updates](#functional-updates)
+    - [RPC Updates](#rpc-updates)
+    - [tapcli Updates](#tapcli-updates)
+    - [Breaking Changes](#breaking-changes)
+    - [Performance Improvements](#performance-improvements)
+    - [Deprecations](#deprecations)
+- [Technical and Architectural Updates](#technical-and-architectural-updates)
+    - [BIP/bLIP Spec Updates](#bipblip-spec-updates)
+    - [Testing](#testing)
+    - [Database](#database)
+    - [Code Health](#code-health)
+    - [Tooling and Documentation](#tooling-and-documentation)
+
+# Bug Fixes
+
+# New Features
+
+## Functional Enhancements
+
+## RPC Additions
+
+## tapcli Additions
+
+# Improvements
+
+## Functional Updates
+
+## RPC Updates
+
+- [TLS connections with price oracles will now be constructed by
+  default](https://github.com/lightninglabs/taproot-assets/pull/1775), using
+  the operating system's root CA list for certificate verification.
+  `experimental.rfq.priceoracletls` (default `true`) can be set to `false`
+  to disable TLS entirely. For certificate-level configuration,
+  `experimental.rfq.priceoracletlsnosystemcas` (default `false`) can be set
+  to `true` to disable use of the OS's root CA list, and
+  `experimental.rfq.priceoracletlscertpath` allows a custom (root CA or
+  self-signed) certificate to be used.
+  `experimental.rfq.priceoracletlsinsecure` can be used to skip certificate
+  verification (default `false`).
+
+- [PR#1841](https://github.com/lightninglabs/taproot-assets/pull/1841): Remove
+  the defaultMacaroonWhitelist map and inline its entries directly
+  into the conditional logic within MacaroonWhitelist. This ensures that
+  access to previously always-available endpoints is now governed by
+  explicit user configuration (read/write/courier), improving permission
+  control and aligning with expected access restrictions.
+
+- [PR#1841](https://github.com/lightninglabs/taproot-assets/pull/1841): Add
+  default RPC permissions for RPC endpoints universerpc.Universe/Info and
+  /authmailboxrpc.Mailbox/MailboxInfo.
+
+## tapcli Updates
+
+## Code Health
+
+## Breaking Changes
+
+## Performance Improvements
+
+## Deprecations
+
+# Technical and Architectural Updates
+
+## BIP/bLIP Spec Updates
+
+## Testing
+
+## Database
+
+## Code Health
+
+## Tooling and Documentation
+
+# Contributors (Alphabetical Order)