backup: add immutable backups for HD-style recovery

[hieblmi]

only the last commit is relevant

This PR introduces an encrypted, immutable backup for each paid L402/static-address generation.
The backup preserves the paid L402 token and the stable static-address metadata required to
reconstruct legacy, receive, and change addresses from the corresponding lnd seed.

The backup intentionally does not store mutable address indexes or deposit state. Instead, it
establishes the foundation for a follow-up PR that will implement HD-wallet-style recovery by
deterministically deriving addresses, scanning the chain, and rebuilding Loop’s local state.

[gemini-code-assist]

Summary of Changes

Hello, I'm Gemini Code Assist¹! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request implements a foundational backup system for Loop's static-address state, enabling future HD-wallet-style recovery. It includes significant architectural improvements to deposit management, reconciliation, and database schema to support confirmation risk tracking and change address derivation. The changes also extend the CLI and RPC interfaces to provide better control over static address funding and deposit monitoring.

Highlights

• Immutable Backup Service: Introduced a new backup service that creates encrypted, immutable backups for L402 tokens and static-address metadata, laying the groundwork for future HD-wallet-style recovery.
• Database Schema Evolution: Applied multiple database migrations to support confirmation-risk decisions, track change addresses, and link deposits to specific static addresses.
• Deposit Management Enhancements: Refined deposit reconciliation and management logic to ensure wallet views remain fresh and to handle confirmation risk decisions durably.
• CLI and RPC Expansion: Added a new 'deposit' CLI command and updated RPC definitions to support funding static addresses and managing deposit-to-address metadata.

New Features

🧠 You can now enable Memory (public preview) to help Gemini Code Assist learn from your team's feedback. This makes future code reviews more consistent and personalized to your project's style. Click here to enable Memory in your admin console.

Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature	Command	Description
Code Review	/gemini review	Performs a code review for the current pull request in its current state.
Pull Request Summary	/gemini summary	Provides a summary of the current pull request in its current state.
Comment	@gemini-code-assist	Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help	/gemini help	Displays a list of available commands.

Customization

To customize the Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counterproductive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for GitHub and other Google products, sign up here.

Footnotes

1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution. ↩

[gemini-code-assist]

Code Review

This pull request introduces a new backup service for Loop static-address and L402 state, adds a deposit command to the loop CLI, and updates the loopd daemon to handle static address loop-in risk decisions. The reviewer identified potential nil pointer dereference issues in NewStaticAddress and ListUnspentDeposits and provided code suggestions to implement defensive nil checks.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.

[gemini-code-assist]

The staticAddressManager field can be nil in certain configurations or testing environments. To prevent a potential nil pointer dereference panic when calling NewAddress, add a defensive nil check at the beginning of NewStaticAddress.

Suggested change

	func (s *swapClientServer) NewStaticAddress(ctx context.Context,
	_ *looprpc.NewStaticAddressRequest) (
	req *looprpc.NewStaticAddressRequest) (
	*looprpc.NewStaticAddressResponse, error) {
	sendCoinsReq := req.GetSendCoinsRequest()
	func (s *swapClientServer) NewStaticAddress(ctx context.Context,
	req *looprpc.NewStaticAddressRequest) (
	*looprpc.NewStaticAddressResponse, error) {
	if s.staticAddressManager == nil {
	return nil, status.Errorf(codes.FailedPrecondition, "static address manager not configured")
	}
	sendCoinsReq := req.GetSendCoinsRequest()

[gemini-code-assist]

The staticAddressManager field can be nil in certain configurations or testing environments. To prevent a potential nil pointer dereference panic when calling ListUnspentRaw, add a defensive nil check at the beginning of ListUnspentDeposits.

func (s *swapClientServer) ListUnspentDeposits(ctx context.Context,
	req *looprpc.ListUnspentDepositsRequest) (
	*looprpc.ListUnspentDepositsResponse, error) {

	if s.staticAddressManager == nil {
		return nil, status.Errorf(codes.FailedPrecondition, "static address manager not configured")
	}