lnurlcash-conformance 0.13.0 → 0.13.1

package/CHANGELOG.md

@@ -4,6 +4,15 @@ Semantic versioning. While the LUD-25 draft is unmerged, `0.x` minor bumps
 may add or tighten checks that a previously-passing mint now fails; pin an
 exact version if you gate CI on the grade.
 
+## 0.13.1 - 2026-09-16
+
+- The grader's own `ck1` (the one the Part 2 certification check spends
+  with) now signs `sha256("LNURLcash")`, like the vectors. It still signed
+  the raw 9-byte message, so a mint that dropped that older form would have
+  failed the check, and a mint that only read the older form would have
+  passed it. `ownershipProof` is exported, and the selfcheck holds it to the
+  digest.
+
 ## 0.13.0 - 2026-09-16
 
 **`ck1` and the LN-address register/unregister proof now sign a sha256

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lnurlcash-conformance",
-  "version": "0.13.0",
+  "version": "0.13.1",
   "description": "Language-neutral conformance vectors, an adversarial mock mint, and a grader for LNURLcash (LUD-25) implementations",
   "author": "TheCryptoDonkey",
   "license": "MIT",

package/runner/index.d.ts

@@ -43,6 +43,8 @@ export interface Report {
 export declare const createReport: () => Report
 
 /** an `lnurlw://` or `lnurlp://` URL as its https equivalent, per LUD-17 */
+/** A Part 2 note's ck1: x-only key || BIP-340 signature over sha256("LNURLcash"). */
+export declare const ownershipProof: (secretKey: Uint8Array) => string
 export declare const fromLud17: (value: string) => string
 
 /** a lightning address or LNURL as the payRequest URL to fetch */

package/runner/index.mjs

@@ -91,10 +91,12 @@ const decodeCertificate = value => {
 }
 
 // The bearer secret of a cp1 note: its x-only key followed by a BIP-340
-// Schnorr signature over the raw UTF-8 bytes of "LNURLcash".
-const ownershipProof = secretKey => {
+// Schnorr signature over sha256("LNURLcash"), the 32-byte digest part2.json
+// signs (luds#6de59b2). A mint may still read the raw-message form, but a
+// grader that only ever sends that form cannot tell whether it reads this one.
+export const ownershipProof = secretKey => {
   const pubkey = schnorr.getPublicKey(secretKey)
-  const signature = schnorr.sign(utf8ToBytes('LNURLcash'), secretKey)
+  const signature = schnorr.sign(sha256(utf8ToBytes('LNURLcash')), secretKey)
   return encodeCash('ck', new Uint8Array([...pubkey, ...signature]))
 }