lnurlcash-conformance 0.2.1 → 0.2.3

package/CHANGELOG.md

@@ -4,6 +4,28 @@ Semantic versioning. While the LUD-25 draft is unmerged, `0.x` minor bumps
 may add or tighten checks that a previously-passing mint now fails; pin an
 exact version if you gate CI on the grade.
 
+## 0.2.3 - 2026-08-22
+
+- **New check: `keeps signatures off the informational endpoint`.** LUD-25
+  says signatures are only ever delivered in the `withdrawSuccessResponse`
+  of a rotate, split or merge, and that the informational endpoint never
+  returns one. Nothing graded it. A mint that hands one out there lets
+  anyone holding a note's public URL mint an offline certificate for it,
+  and invites a wallet to treat an online answer as offline proof. Both
+  known mints pass; the check exists so a third cannot quietly not.
+
+## 0.2.2 - 2026-08-22
+
+- The mock mint publishes `payLink` on a note's informational GET, as the
+  reference mint does. That is the way home for a holder who has nothing
+  but a note: without it a wallet that only ever received notes cannot
+  reach the document carrying the mint's retired signing keys, so a
+  correctly announced key rotation is indistinguishable from a substituted
+  key. `noteInfoPayLink: false` models a mint that does not publish it, and
+  `payLinkOffOrigin: true` is the misbehaviour where a mint points its
+  `payLink` at a different origin, nominating a third party to vouch for
+  its own key history - a client must ignore that.
+
 ## 0.2.1 - 2026-08-22
 
 - The grader ships its own TypeScript declarations. The mock mint had them

package/mock-mint/index.d.ts

@@ -38,7 +38,19 @@ export interface MockMintOptions {
   verify?: boolean
   privateKey?: string
 
+  /**
+   * Publish `payLink` on a note's informational GET - the way home for a
+   * holder who has nothing but the note. On by default, as the reference
+   * mint does it.
+   */
+  noteInfoPayLink?: boolean
+
   // ---- misbehaviour ----
+  /**
+   * Point `payLink` at a different origin, nominating a third party to
+   * vouch for this mint's key history. A client must ignore it.
+   */
+  payLinkOffOrigin?: boolean
   /** answer the informational GET with a k1 other than the one queried */
   echoWrongK1?: boolean
   /** report a maxWithdrawable that is not what the note is worth */

package/mock-mint/index.mjs

@@ -70,7 +70,14 @@ const DEFAULTS = {
   // preimage it serves IS a bearer secret, so an operator needs a real
   // off switch.
   verify: true,
+  // Publish `payLink` on a note's informational GET, the way home for a
+  // holder who has nothing but the note. On by default because the
+  // reference mint does it; turn it off for a mint that does not.
+  noteInfoPayLink: true,
   // ---- misbehaviour ----
+  // point `payLink` at a DIFFERENT origin, nominating a third party to
+  // vouch for this mint's key history. A client must ignore it.
+  payLinkOffOrigin: false,
   // answer the informational GET with a k1 other than the one queried
   echoWrongK1: false,
   // report a maxWithdrawable that is not what the note is worth
@@ -673,6 +680,19 @@ export const createMockMint = async (options = {}) => {
         minWithdrawable: 0,
         maxWithdrawable: note.amountMsat + opts.lieAboutValue,
         defaultDescription: 'an LNURLcash note',
+        // The way home, as the reference mint publishes it. A holder with
+        // nothing but a note can reach the document carrying this mint's
+        // terms and its retired signing keys; without it a wallet that only
+        // ever received notes cannot tell an announced key rotation from a
+        // substituted key, because the document lives under a username the
+        // note never mentions.
+        ...(opts.noteInfoPayLink
+          ? {
+              payLink: opts.payLinkOffOrigin
+                ? 'https://elsewhere.example/.well-known/lnurlp/mint'
+                : `${origin}/.well-known/lnurlp/${opts.username}`
+            }
+          : {}),
         mintPubkey: pubkey
       })
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lnurlcash-conformance",
-  "version": "0.2.1",
+  "version": "0.2.3",
   "description": "Language-neutral conformance vectors, an adversarial mock mint, and a grader for LNURLcash (LUD-25) implementations",
   "author": "TheCryptoDonkey",
   "license": "MIT",

package/runner/index.mjs

@@ -848,6 +848,22 @@ export const gradeNote = async (noteUrl, report, options = {}) => {
       : `verified offline against a previous signing key (${signedBy.slice(0, 16)}...)`
   })
 
+  await report.check('keeps signatures off the informational endpoint', async () => {
+    // LUD-25: "Signatures are only ever delivered in the
+    // withdrawSuccessResponse of a rotate, split or merge, the
+    // informational endpoint never returns one." A mint that hands one out
+    // here lets anyone holding only a note's PUBLIC url mint a certificate
+    // for it, and invites a wallet to treat the informational answer as an
+    // offline proof when it is an online one.
+    const here = new URL(url)
+    here.searchParams.set('k1', current)
+    const body = await get(here)
+    assert(body.status !== 'ERROR', `informational GET refused: ${body.reason}`)
+    assert(body.sig === undefined, 'the informational GET returned a sig')
+    assert(body.sig2 === undefined, 'the informational GET returned a sig2')
+    return 'no signature where the spec forbids one'
+  })
+
   // The still-alive probe the three adversarial checks below share: a
   // compliant refusal is ATOMIC, so the note it refused to touch must
   // still be spendable afterwards.