lnurlcash-conformance 0.2.1 → 0.2.2

package/CHANGELOG.md

@@ -4,6 +4,18 @@ Semantic versioning. While the LUD-25 draft is unmerged, `0.x` minor bumps
 may add or tighten checks that a previously-passing mint now fails; pin an
 exact version if you gate CI on the grade.
 
+## 0.2.2 - 2026-08-22
+
+- The mock mint publishes `payLink` on a note's informational GET, as the
+  reference mint does. That is the way home for a holder who has nothing
+  but a note: without it a wallet that only ever received notes cannot
+  reach the document carrying the mint's retired signing keys, so a
+  correctly announced key rotation is indistinguishable from a substituted
+  key. `noteInfoPayLink: false` models a mint that does not publish it, and
+  `payLinkOffOrigin: true` is the misbehaviour where a mint points its
+  `payLink` at a different origin, nominating a third party to vouch for
+  its own key history - a client must ignore that.
+
 ## 0.2.1 - 2026-08-22
 
 - The grader ships its own TypeScript declarations. The mock mint had them

package/mock-mint/index.d.ts

@@ -38,7 +38,19 @@ export interface MockMintOptions {
   verify?: boolean
   privateKey?: string
 
+  /**
+   * Publish `payLink` on a note's informational GET - the way home for a
+   * holder who has nothing but the note. On by default, as the reference
+   * mint does it.
+   */
+  noteInfoPayLink?: boolean
+
   // ---- misbehaviour ----
+  /**
+   * Point `payLink` at a different origin, nominating a third party to
+   * vouch for this mint's key history. A client must ignore it.
+   */
+  payLinkOffOrigin?: boolean
   /** answer the informational GET with a k1 other than the one queried */
   echoWrongK1?: boolean
   /** report a maxWithdrawable that is not what the note is worth */

package/mock-mint/index.mjs

@@ -70,7 +70,14 @@ const DEFAULTS = {
   // preimage it serves IS a bearer secret, so an operator needs a real
   // off switch.
   verify: true,
+  // Publish `payLink` on a note's informational GET, the way home for a
+  // holder who has nothing but the note. On by default because the
+  // reference mint does it; turn it off for a mint that does not.
+  noteInfoPayLink: true,
   // ---- misbehaviour ----
+  // point `payLink` at a DIFFERENT origin, nominating a third party to
+  // vouch for this mint's key history. A client must ignore it.
+  payLinkOffOrigin: false,
   // answer the informational GET with a k1 other than the one queried
   echoWrongK1: false,
   // report a maxWithdrawable that is not what the note is worth
@@ -673,6 +680,19 @@ export const createMockMint = async (options = {}) => {
         minWithdrawable: 0,
         maxWithdrawable: note.amountMsat + opts.lieAboutValue,
         defaultDescription: 'an LNURLcash note',
+        // The way home, as the reference mint publishes it. A holder with
+        // nothing but a note can reach the document carrying this mint's
+        // terms and its retired signing keys; without it a wallet that only
+        // ever received notes cannot tell an announced key rotation from a
+        // substituted key, because the document lives under a username the
+        // note never mentions.
+        ...(opts.noteInfoPayLink
+          ? {
+              payLink: opts.payLinkOffOrigin
+                ? 'https://elsewhere.example/.well-known/lnurlp/mint'
+                : `${origin}/.well-known/lnurlp/${opts.username}`
+            }
+          : {}),
         mintPubkey: pubkey
       })
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lnurlcash-conformance",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Language-neutral conformance vectors, an adversarial mock mint, and a grader for LNURLcash (LUD-25) implementations",
   "author": "TheCryptoDonkey",
   "license": "MIT",