Version 0.90.6

A single malformed upload request can no longer take the credit-paid upload lane down for everybody.

Every credit-paid upload starts by asking our server to buy the storage, and that request carries the identifier the storage network gave your file. The server checked only how long that text was, while the part of NMTS holding the payment key has to turn it back into a number first and fails on text that is not one — by which time the gas for that transaction is already set aside against the day’s spending limit. About forty requests carrying nonsense were enough to close credit-paid uploads for everyone until midnight UTC, at no cost to the sender, whose credit came back. Both doors now check the shape rather than the length: a storage identifier is 43 base64url characters.