thunder-bridge 1.5.0 → 2.1.1

package/dist/nwc.cjs

@@ -206,6 +206,7 @@ function rotate(value, by) {
 
 // ../core/bolt11.ts
 var BECH32_CHARSET = "qpzry9x8gf2tvdw0s3jn54khce6mua7l";
+var BECH32_GENERATOR = [996825010, 642813549, 513874426, 1027748829, 705979059];
 var CHECKSUM_WORDS = 6;
 var TIMESTAMP_WORDS = 7;
 var SIGNATURE_WORDS = 104;
@@ -223,18 +224,27 @@ var HRP_MULTIPLIER_MSAT = {
   n: MSAT_PER_BTC / 1e9,
   p: MSAT_PER_BTC / 1e12
 };
-var HRP_AMOUNT = /^ln[a-z]+?(\d+)([munp]?)$/;
+var HRP = /^ln(?:bcrt|bc|tbs|tb|sb)(?:(\d+)([munp]?))?$/;
 function decodeInvoice(bolt11) {
   const parts = splitBech32(bolt11);
   if (parts === null) {
-    return { paymentHash: null, descriptionHash: null, amountMsat: null, expiresAt: null };
+    return {
+      paymentHash: null,
+      descriptionHash: null,
+      amountMsat: null,
+      issuedAt: null,
+      expiresAt: null
+    };
   }
   const tagged = taggedFields(parts.words);
+  const issuedAt = issuedAtOf(parts.words);
+  const expiry = tagged.get(EXPIRY_TAG);
   return {
     paymentHash: hexTag(tagged, PAYMENT_HASH_TAG, PAYMENT_HASH_WORDS),
     descriptionHash: hexTag(tagged, DESCRIPTION_HASH_TAG, DESCRIPTION_HASH_WORDS),
     amountMsat: amountFromHrp(parts.hrp),
-    expiresAt: expiryOf(parts.words, tagged)
+    issuedAt,
+    expiresAt: issuedAt === null ? null : issuedAt + (expiry ? readNumber(expiry) : DEFAULT_EXPIRY_SECS)
   };
 }
 function preimageMatchesHash(preimage, paymentHash) {
@@ -245,7 +255,7 @@ function preimageMatchesHash(preimage, paymentHash) {
 }
 function splitBech32(bolt11) {
   const lower = bolt11.toLowerCase();
-  if (isBolt12Encoding(lower)) {
+  if (isBolt12Encoding(lower) || bolt11 !== lower && bolt11 !== bolt11.toUpperCase()) {
     return null;
   }
   const separator = lower.lastIndexOf("1");
@@ -264,7 +274,28 @@ function splitBech32(bolt11) {
     }
     words.push(value);
   }
-  return { hrp: lower.slice(0, separator), words: words.slice(0, -CHECKSUM_WORDS) };
+  const hrp = lower.slice(0, separator);
+  if (!HRP.test(hrp) || bech32Polymod([...expandedHrp(hrp), ...words]) !== 1) {
+    return null;
+  }
+  return { hrp, words: words.slice(0, -CHECKSUM_WORDS) };
+}
+function expandedHrp(hrp) {
+  const codes = [...hrp].map((char) => char.charCodeAt(0));
+  return [...codes.map((code) => code >> 5), 0, ...codes.map((code) => code & 31)];
+}
+function bech32Polymod(values) {
+  let checksum = 1;
+  for (const value of values) {
+    const top = checksum >> 25;
+    checksum = (checksum & 33554431) << 5 ^ value;
+    for (let bit = 0; bit < 5; bit++) {
+      if (top >> bit & 1) {
+        checksum ^= BECH32_GENERATOR[bit];
+      }
+    }
+  }
+  return checksum;
 }
 function isBolt12Encoding(lower) {
   return lower.startsWith("lno") || lower.startsWith("lni") || lower.startsWith("lnr");
@@ -294,19 +325,17 @@ function hexTag(fields, tag, expectedWords) {
   }
   return bytesToHex(wordsToBytes(words));
 }
-function expiryOf(words, fields) {
+function issuedAtOf(words) {
   if (words.length < TIMESTAMP_WORDS + SIGNATURE_WORDS) {
     return null;
   }
-  const expiry = fields.get(EXPIRY_TAG);
-  return readNumber(words.slice(0, TIMESTAMP_WORDS)) + (expiry ? readNumber(expiry) : DEFAULT_EXPIRY_SECS);
+  return readNumber(words.slice(0, TIMESTAMP_WORDS));
 }
 function amountFromHrp(hrp) {
-  const match = HRP_AMOUNT.exec(hrp);
-  if (match === null) {
+  const [, digits, multiplier] = HRP.exec(hrp) ?? [];
+  if (digits === void 0 || multiplier === "p" && !digits.endsWith("0")) {
     return null;
   }
-  const [, digits, multiplier] = match;
   return multiplier ? Number(digits) * HRP_MULTIPLIER_MSAT[multiplier] : Number(digits) * MSAT_PER_BTC;
 }
 function readNumber(words) {
@@ -337,27 +366,38 @@ var WalletRefused = class extends Error {
 };
 
 // ../core/sealed.ts
-var VERSION = "v1";
+var VERSION = "v2";
+var UNPADDED_VERSION = "v1";
 var IV_BYTES = 12;
 var MIN_SECRET_CHARS = 32;
 var MAX_PLAIN_BYTES = 3e3;
+var SIZE_CLASSES = [256, 1024, MAX_PLAIN_BYTES];
+var END_OF_TEXT = 128;
 var INFO = new TextEncoder().encode("thunder-bridge/sealed");
-async function seal(secret, plaintext) {
-  const body = new TextEncoder().encode(plaintext);
-  if (body.length > MAX_PLAIN_BYTES) {
-    throw new Error(`sealed takes at most ${MAX_PLAIN_BYTES} bytes, this was ${body.length}`);
-  }
+async function seal(secret, plaintext, paymentHash) {
+  return await sealUnder(
+    secret,
+    plaintext,
+    crypto.getRandomValues(new Uint8Array(IV_BYTES)),
+    boundTo(paymentHash)
+  );
+}
+async function sealUnder(secret, plaintext, iv, additionalData) {
+  const body = padToClass(plaintext);
   const key = await keyFor(secret);
-  const iv = crypto.getRandomValues(new Uint8Array(IV_BYTES));
-  const cipher = new Uint8Array(await crypto.subtle.encrypt({ name: "AES-GCM", iv }, key, body));
+  const cipher = new Uint8Array(
+    await crypto.subtle.encrypt({ name: "AES-GCM", iv, additionalData }, key, body)
+  );
   const joined2 = new Uint8Array(iv.length + cipher.length);
   joined2.set(iv);
   joined2.set(cipher, iv.length);
   return `${VERSION}.${toBase64Url(joined2)}`;
 }
-async function unseal(secret, sealed) {
+async function unseal(secret, sealed, paymentHash) {
   const key = await keyFor(secret);
-  if (!sealed.startsWith(`${VERSION}.`)) {
+  const padded2 = sealed.startsWith(`${VERSION}.`);
+  const unbound = !padded2 && sealed.startsWith(`${UNPADDED_VERSION}.`);
+  if (!padded2 && (!unbound || paymentHash !== void 0)) {
     return null;
   }
   const joined2 = fromBase64Url(sealed.slice(VERSION.length + 1));
@@ -365,20 +405,50 @@ async function unseal(secret, sealed) {
     return null;
   }
   try {
-    const body = await crypto.subtle.decrypt(
-      { name: "AES-GCM", iv: joined2.slice(0, IV_BYTES) },
-      key,
-      joined2.slice(IV_BYTES)
+    const body = new Uint8Array(
+      await crypto.subtle.decrypt(
+        {
+          name: "AES-GCM",
+          iv: joined2.slice(0, IV_BYTES),
+          additionalData: padded2 ? boundTo(paymentHash) : void 0
+        },
+        key,
+        joined2.slice(IV_BYTES)
+      )
     );
-    return new TextDecoder().decode(body);
+    const text = padded2 ? unpad(body) : body;
+    return text === null ? null : new TextDecoder().decode(text);
   } catch {
     return null;
   }
 }
-async function keyFor(secret) {
+function refuseAWeakSecret(secret) {
   if (secret.length < MIN_SECRET_CHARS) {
     throw new Error(`the sealing secret needs ${MIN_SECRET_CHARS} characters of randomness`);
   }
+}
+function boundTo(paymentHash) {
+  return new TextEncoder().encode(
+    paymentHash === void 0 ? VERSION : `${VERSION}|${paymentHash.toLowerCase()}`
+  );
+}
+function padToClass(plaintext) {
+  const text = new TextEncoder().encode(plaintext);
+  const size = SIZE_CLASSES.find((limit) => text.length <= limit);
+  if (size === void 0) {
+    throw new Error(`sealed takes at most ${MAX_PLAIN_BYTES} bytes, this was ${text.length}`);
+  }
+  const body = new Uint8Array(size + 1);
+  body.set(text);
+  body[text.length] = END_OF_TEXT;
+  return body;
+}
+function unpad(body) {
+  const end = body.lastIndexOf(END_OF_TEXT);
+  return end === -1 ? null : body.subarray(0, end);
+}
+async function keyFor(secret) {
+  refuseAWeakSecret(secret);
   const material = await crypto.subtle.importKey(
     "raw",
     new TextEncoder().encode(secret),
@@ -421,7 +491,7 @@ function fromBase64Url(text) {
 var import_chacha = require("@noble/ciphers/chacha.js");
 var import_secp256k1 = require("@noble/curves/secp256k1.js");
 var import_hkdf = require("@noble/hashes/hkdf.js");
-var import_hmac = require("@noble/hashes/hmac.js");
+var import_hmac2 = require("@noble/hashes/hmac.js");
 var import_sha2 = require("@noble/hashes/sha2.js");
 var NIP44_SALT = new TextEncoder().encode("nip44-v2");
 var NIP44_VERSION = 2;
@@ -479,7 +549,7 @@ function encryptNip44(conversationKey, plaintext) {
 function sealNip44(conversationKey, plaintext, nonce) {
   const keys = messageKeysFrom(conversationKey, nonce);
   const ciphertext = (0, import_chacha.chacha20)(keys.chachaKey, keys.chachaNonce, padded(plaintext));
-  const mac = (0, import_hmac.hmac)(import_sha2.sha256, keys.hmacKey, joined(nonce, ciphertext));
+  const mac = (0, import_hmac2.hmac)(import_sha2.sha256, keys.hmacKey, joined(nonce, ciphertext));
   return toBase64(joined(Uint8Array.of(NIP44_VERSION), nonce, ciphertext, mac));
 }
 function decryptNip44(conversationKey, payload) {
@@ -497,7 +567,7 @@ function decryptNip44(conversationKey, payload) {
   const ciphertext = raw.subarray(1 + NONCE_BYTES, raw.length - MAC_BYTES);
   const mac = raw.subarray(raw.length - MAC_BYTES);
   const keys = messageKeysFrom(conversationKey, nonce);
-  if (!sameBytes((0, import_hmac.hmac)(import_sha2.sha256, keys.hmacKey, joined(nonce, ciphertext)), mac)) {
+  if (!sameBytes((0, import_hmac2.hmac)(import_sha2.sha256, keys.hmacKey, joined(nonce, ciphertext)), mac)) {
     throw new Error("nip44 payload failed its mac, so it was not written with this key");
   }
   return unpadded((0, import_chacha.chacha20)(keys.chachaKey, keys.chachaNonce, ciphertext));
@@ -796,6 +866,15 @@ async function amountNow(amount) {
 
 // ../core/ed25519.ts
 var PKCS8_HEADER = hexToBytes("302e020100300506032b657004220420");
+var SMALL_ORDER = [
+  "00".repeat(32),
+  `01${"00".repeat(31)}`,
+  "26e8958fc2b227b045c3f489f2ef98f0d5dfac05d3c63339b13802886d53fc05",
+  "c7176a703d4dd84fba3c0b760d10670f2a2053fa2c39ccc64ec7fd7792ac037a",
+  `ec${"ff".repeat(30)}7f`,
+  `ed${"ff".repeat(30)}7f`,
+  `ee${"ff".repeat(30)}7f`
+];
 
 // src/webhook.ts
 var VERIFY_CHALLENGE = "verify-challenge";
@@ -1126,11 +1205,16 @@ function nwcRail(gateway, config) {
       expiresAt: invoice.expiresAt,
       trigger: config.trigger,
       replay: config.replay,
-      sealed: await config.sealed?.(order),
+      sealed: config.sealed ? await seal(
+        config.sealed.secret,
+        JSON.stringify(config.sealed.data(order)),
+        invoice.paymentHash
+      ) : void 0,
       webhookUrl: config.webhookUrl
     });
     return {
       id: watched.id,
+      paymentHash: invoice.paymentHash,
       rail: config.name ?? "lightning",
       scan: invoice.bolt11,
       qr: toLightningUri(invoice.bolt11),

package/dist/nwc.d.cts

@@ -1,7 +1,6 @@
-import { A as Amount, T as Ticker } from './types-BNPmVnA7.cjs';
-import { R as RailConfig, O as Order, T as ThunderBridge, a as Rail } from './client-CzGZcByI.cjs';
+import { A as Amount, T as Ticker } from './types-DYZ9EkmJ.cjs';
+import { R as RailConfig, O as Order, T as ThunderBridge, f as Rail } from './bank-CEIuNhV_.cjs';
 import './qr-CF-YeXU1.cjs';
-import './bank-B3mHISn1.cjs';
 
 /** A wallet reachable over NIP-47, as its `nostr+walletconnect://` URI describes it */
 interface NwcConnection {
@@ -104,7 +103,10 @@ interface NwcRailConfig extends RailConfig {
     /** What the payer's wallet shows, the order's reference by default */
     description?: (order: Order) => string;
     /** Sealed before the gateway sees it, the way the blind Lightning rail does */
-    sealed?: (order: Order) => string | Promise<string>;
+    sealed?: {
+        secret: string;
+        data: (order: Order) => unknown;
+    };
 }
 /**
  * Sell for Lightning against a wallet of your own over NIP-47, for a wallet that

package/dist/nwc.d.ts

@@ -1,7 +1,6 @@
-import { A as Amount, T as Ticker } from './types-BNPmVnA7.js';
-import { R as RailConfig, O as Order, T as ThunderBridge, a as Rail } from './client-Cc5gtjGV.js';
+import { A as Amount, T as Ticker } from './types-DYZ9EkmJ.js';
+import { R as RailConfig, O as Order, T as ThunderBridge, f as Rail } from './bank-M8flcMks.js';
 import './qr-CF-YeXU1.js';
-import './bank-B3mHISn1.js';
 
 /** A wallet reachable over NIP-47, as its `nostr+walletconnect://` URI describes it */
 interface NwcConnection {
@@ -104,7 +103,10 @@ interface NwcRailConfig extends RailConfig {
     /** What the payer's wallet shows, the order's reference by default */
     description?: (order: Order) => string;
     /** Sealed before the gateway sees it, the way the blind Lightning rail does */
-    sealed?: (order: Order) => string | Promise<string>;
+    sealed?: {
+        secret: string;
+        data: (order: Order) => unknown;
+    };
 }
 /**
  * Sell for Lightning against a wallet of your own over NIP-47, for a wallet that

package/dist/nwc.js

@@ -172,6 +172,7 @@ function rotate(value, by) {
 
 // ../core/bolt11.ts
 var BECH32_CHARSET = "qpzry9x8gf2tvdw0s3jn54khce6mua7l";
+var BECH32_GENERATOR = [996825010, 642813549, 513874426, 1027748829, 705979059];
 var CHECKSUM_WORDS = 6;
 var TIMESTAMP_WORDS = 7;
 var SIGNATURE_WORDS = 104;
@@ -189,18 +190,27 @@ var HRP_MULTIPLIER_MSAT = {
   n: MSAT_PER_BTC / 1e9,
   p: MSAT_PER_BTC / 1e12
 };
-var HRP_AMOUNT = /^ln[a-z]+?(\d+)([munp]?)$/;
+var HRP = /^ln(?:bcrt|bc|tbs|tb|sb)(?:(\d+)([munp]?))?$/;
 function decodeInvoice(bolt11) {
   const parts = splitBech32(bolt11);
   if (parts === null) {
-    return { paymentHash: null, descriptionHash: null, amountMsat: null, expiresAt: null };
+    return {
+      paymentHash: null,
+      descriptionHash: null,
+      amountMsat: null,
+      issuedAt: null,
+      expiresAt: null
+    };
   }
   const tagged = taggedFields(parts.words);
+  const issuedAt = issuedAtOf(parts.words);
+  const expiry = tagged.get(EXPIRY_TAG);
   return {
     paymentHash: hexTag(tagged, PAYMENT_HASH_TAG, PAYMENT_HASH_WORDS),
     descriptionHash: hexTag(tagged, DESCRIPTION_HASH_TAG, DESCRIPTION_HASH_WORDS),
     amountMsat: amountFromHrp(parts.hrp),
-    expiresAt: expiryOf(parts.words, tagged)
+    issuedAt,
+    expiresAt: issuedAt === null ? null : issuedAt + (expiry ? readNumber(expiry) : DEFAULT_EXPIRY_SECS)
   };
 }
 function preimageMatchesHash(preimage, paymentHash) {
@@ -211,7 +221,7 @@ function preimageMatchesHash(preimage, paymentHash) {
 }
 function splitBech32(bolt11) {
   const lower = bolt11.toLowerCase();
-  if (isBolt12Encoding(lower)) {
+  if (isBolt12Encoding(lower) || bolt11 !== lower && bolt11 !== bolt11.toUpperCase()) {
     return null;
   }
   const separator = lower.lastIndexOf("1");
@@ -230,7 +240,28 @@ function splitBech32(bolt11) {
     }
     words.push(value);
   }
-  return { hrp: lower.slice(0, separator), words: words.slice(0, -CHECKSUM_WORDS) };
+  const hrp = lower.slice(0, separator);
+  if (!HRP.test(hrp) || bech32Polymod([...expandedHrp(hrp), ...words]) !== 1) {
+    return null;
+  }
+  return { hrp, words: words.slice(0, -CHECKSUM_WORDS) };
+}
+function expandedHrp(hrp) {
+  const codes = [...hrp].map((char) => char.charCodeAt(0));
+  return [...codes.map((code) => code >> 5), 0, ...codes.map((code) => code & 31)];
+}
+function bech32Polymod(values) {
+  let checksum = 1;
+  for (const value of values) {
+    const top = checksum >> 25;
+    checksum = (checksum & 33554431) << 5 ^ value;
+    for (let bit = 0; bit < 5; bit++) {
+      if (top >> bit & 1) {
+        checksum ^= BECH32_GENERATOR[bit];
+      }
+    }
+  }
+  return checksum;
 }
 function isBolt12Encoding(lower) {
   return lower.startsWith("lno") || lower.startsWith("lni") || lower.startsWith("lnr");
@@ -260,19 +291,17 @@ function hexTag(fields, tag, expectedWords) {
   }
   return bytesToHex(wordsToBytes(words));
 }
-function expiryOf(words, fields) {
+function issuedAtOf(words) {
   if (words.length < TIMESTAMP_WORDS + SIGNATURE_WORDS) {
     return null;
   }
-  const expiry = fields.get(EXPIRY_TAG);
-  return readNumber(words.slice(0, TIMESTAMP_WORDS)) + (expiry ? readNumber(expiry) : DEFAULT_EXPIRY_SECS);
+  return readNumber(words.slice(0, TIMESTAMP_WORDS));
 }
 function amountFromHrp(hrp) {
-  const match = HRP_AMOUNT.exec(hrp);
-  if (match === null) {
+  const [, digits, multiplier] = HRP.exec(hrp) ?? [];
+  if (digits === void 0 || multiplier === "p" && !digits.endsWith("0")) {
     return null;
   }
-  const [, digits, multiplier] = match;
   return multiplier ? Number(digits) * HRP_MULTIPLIER_MSAT[multiplier] : Number(digits) * MSAT_PER_BTC;
 }
 function readNumber(words) {
@@ -303,27 +332,38 @@ var WalletRefused = class extends Error {
 };
 
 // ../core/sealed.ts
-var VERSION = "v1";
+var VERSION = "v2";
+var UNPADDED_VERSION = "v1";
 var IV_BYTES = 12;
 var MIN_SECRET_CHARS = 32;
 var MAX_PLAIN_BYTES = 3e3;
+var SIZE_CLASSES = [256, 1024, MAX_PLAIN_BYTES];
+var END_OF_TEXT = 128;
 var INFO = new TextEncoder().encode("thunder-bridge/sealed");
-async function seal(secret, plaintext) {
-  const body = new TextEncoder().encode(plaintext);
-  if (body.length > MAX_PLAIN_BYTES) {
-    throw new Error(`sealed takes at most ${MAX_PLAIN_BYTES} bytes, this was ${body.length}`);
-  }
+async function seal(secret, plaintext, paymentHash) {
+  return await sealUnder(
+    secret,
+    plaintext,
+    crypto.getRandomValues(new Uint8Array(IV_BYTES)),
+    boundTo(paymentHash)
+  );
+}
+async function sealUnder(secret, plaintext, iv, additionalData) {
+  const body = padToClass(plaintext);
   const key = await keyFor(secret);
-  const iv = crypto.getRandomValues(new Uint8Array(IV_BYTES));
-  const cipher = new Uint8Array(await crypto.subtle.encrypt({ name: "AES-GCM", iv }, key, body));
+  const cipher = new Uint8Array(
+    await crypto.subtle.encrypt({ name: "AES-GCM", iv, additionalData }, key, body)
+  );
   const joined2 = new Uint8Array(iv.length + cipher.length);
   joined2.set(iv);
   joined2.set(cipher, iv.length);
   return `${VERSION}.${toBase64Url(joined2)}`;
 }
-async function unseal(secret, sealed) {
+async function unseal(secret, sealed, paymentHash) {
   const key = await keyFor(secret);
-  if (!sealed.startsWith(`${VERSION}.`)) {
+  const padded2 = sealed.startsWith(`${VERSION}.`);
+  const unbound = !padded2 && sealed.startsWith(`${UNPADDED_VERSION}.`);
+  if (!padded2 && (!unbound || paymentHash !== void 0)) {
     return null;
   }
   const joined2 = fromBase64Url(sealed.slice(VERSION.length + 1));
@@ -331,20 +371,50 @@ async function unseal(secret, sealed) {
     return null;
   }
   try {
-    const body = await crypto.subtle.decrypt(
-      { name: "AES-GCM", iv: joined2.slice(0, IV_BYTES) },
-      key,
-      joined2.slice(IV_BYTES)
+    const body = new Uint8Array(
+      await crypto.subtle.decrypt(
+        {
+          name: "AES-GCM",
+          iv: joined2.slice(0, IV_BYTES),
+          additionalData: padded2 ? boundTo(paymentHash) : void 0
+        },
+        key,
+        joined2.slice(IV_BYTES)
+      )
     );
-    return new TextDecoder().decode(body);
+    const text = padded2 ? unpad(body) : body;
+    return text === null ? null : new TextDecoder().decode(text);
   } catch {
     return null;
   }
 }
-async function keyFor(secret) {
+function refuseAWeakSecret(secret) {
   if (secret.length < MIN_SECRET_CHARS) {
     throw new Error(`the sealing secret needs ${MIN_SECRET_CHARS} characters of randomness`);
   }
+}
+function boundTo(paymentHash) {
+  return new TextEncoder().encode(
+    paymentHash === void 0 ? VERSION : `${VERSION}|${paymentHash.toLowerCase()}`
+  );
+}
+function padToClass(plaintext) {
+  const text = new TextEncoder().encode(plaintext);
+  const size = SIZE_CLASSES.find((limit) => text.length <= limit);
+  if (size === void 0) {
+    throw new Error(`sealed takes at most ${MAX_PLAIN_BYTES} bytes, this was ${text.length}`);
+  }
+  const body = new Uint8Array(size + 1);
+  body.set(text);
+  body[text.length] = END_OF_TEXT;
+  return body;
+}
+function unpad(body) {
+  const end = body.lastIndexOf(END_OF_TEXT);
+  return end === -1 ? null : body.subarray(0, end);
+}
+async function keyFor(secret) {
+  refuseAWeakSecret(secret);
   const material = await crypto.subtle.importKey(
     "raw",
     new TextEncoder().encode(secret),
@@ -762,6 +832,15 @@ async function amountNow(amount) {
 
 // ../core/ed25519.ts
 var PKCS8_HEADER = hexToBytes("302e020100300506032b657004220420");
+var SMALL_ORDER = [
+  "00".repeat(32),
+  `01${"00".repeat(31)}`,
+  "26e8958fc2b227b045c3f489f2ef98f0d5dfac05d3c63339b13802886d53fc05",
+  "c7176a703d4dd84fba3c0b760d10670f2a2053fa2c39ccc64ec7fd7792ac037a",
+  `ec${"ff".repeat(30)}7f`,
+  `ed${"ff".repeat(30)}7f`,
+  `ee${"ff".repeat(30)}7f`
+];
 
 // src/webhook.ts
 var VERIFY_CHALLENGE = "verify-challenge";
@@ -1092,11 +1171,16 @@ function nwcRail(gateway, config) {
       expiresAt: invoice.expiresAt,
       trigger: config.trigger,
       replay: config.replay,
-      sealed: await config.sealed?.(order),
+      sealed: config.sealed ? await seal(
+        config.sealed.secret,
+        JSON.stringify(config.sealed.data(order)),
+        invoice.paymentHash
+      ) : void 0,
       webhookUrl: config.webhookUrl
     });
     return {
       id: watched.id,
+      paymentHash: invoice.paymentHash,
       rail: config.name ?? "lightning",
       scan: invoice.bolt11,
       qr: toLightningUri(invoice.bolt11),

package/dist/price.d.cts

@@ -1,5 +1,5 @@
-export { A as AmountError, a as AmountFault } from './errors-Dmh-Uoh8.cjs';
-export { M as MedianOptions, T as Ticker, b as bitstamp, c as coinbase, a as coinmate, k as kraken, m as medianOf, d as msatFor } from './types-BNPmVnA7.cjs';
+export { A as AmountError, a as AmountFault } from './errors-DriqW-lp.cjs';
+export { M as MedianOptions, T as Ticker, b as bitstamp, c as coinbase, a as coinmate, k as kraken, m as medianOf, d as msatFor } from './types-DYZ9EkmJ.cjs';
 
 /**
  * How many digits ISO 4217 gives the currency's minor unit, so 2 for a crown and a

package/dist/price.d.ts

@@ -1,5 +1,5 @@
-export { A as AmountError, a as AmountFault } from './errors-0vbVoISA.js';
-export { M as MedianOptions, T as Ticker, b as bitstamp, c as coinbase, a as coinmate, k as kraken, m as medianOf, d as msatFor } from './types-BNPmVnA7.js';
+export { A as AmountError, a as AmountFault } from './errors-ZEUT-MhO.js';
+export { M as MedianOptions, T as Ticker, b as bitstamp, c as coinbase, a as coinmate, k as kraken, m as medianOf, d as msatFor } from './types-DYZ9EkmJ.js';
 
 /**
  * How many digits ISO 4217 gives the currency's minor unit, so 2 for a crown and a

package/dist/qr.cjs

@@ -111,6 +111,8 @@ var INITIAL_STATE = new Uint32Array([
 ]);
 
 // ../core/bolt11.ts
+var BECH32_CHARSET = "qpzry9x8gf2tvdw0s3jn54khce6mua7l";
+var BECH32_GENERATOR = [996825010, 642813549, 513874426, 1027748829, 705979059];
 var MSAT_PER_BTC = 1e11;
 var HRP_MULTIPLIER_MSAT = {
   m: MSAT_PER_BTC / 1e3,
@@ -118,10 +120,25 @@ var HRP_MULTIPLIER_MSAT = {
   n: MSAT_PER_BTC / 1e9,
   p: MSAT_PER_BTC / 1e12
 };
+function expandedHrp(hrp) {
+  const codes = [...hrp].map((char) => char.charCodeAt(0));
+  return [...codes.map((code) => code >> 5), 0, ...codes.map((code) => code & 31)];
+}
+function bech32Polymod(values) {
+  let checksum = 1;
+  for (const value of values) {
+    const top = checksum >> 25;
+    checksum = (checksum & 33554431) << 5 ^ value;
+    for (let bit = 0; bit < 5; bit++) {
+      if (top >> bit & 1) {
+        checksum ^= BECH32_GENERATOR[bit];
+      }
+    }
+  }
+  return checksum;
+}
 
 // ../core/lnurl.ts
-var BECH32_CHARSET = "qpzry9x8gf2tvdw0s3jn54khce6mua7l";
-var BECH32_GENERATOR = [996825010, 642813549, 513874426, 1027748829, 705979059];
 var CHECKSUM_SLOTS = [0, 1, 2, 3, 4, 5];
 var LNURL_HRP = "lnurl";
 function toLnurl(endpoint) {
@@ -158,30 +175,10 @@ function toWords(bytes) {
   return words;
 }
 function checksumWords(hrp, words) {
-  const expanded = [...hrp].map((char) => char.charCodeAt(0));
-  const values = [
-    ...expanded.map((code) => code >> 5),
-    0,
-    ...expanded.map((code) => code & 31),
-    ...words,
-    ...CHECKSUM_SLOTS.map(() => 0)
-  ];
+  const values = [...expandedHrp(hrp), ...words, ...CHECKSUM_SLOTS.map(() => 0)];
   const polymod = bech32Polymod(values) ^ 1;
   return CHECKSUM_SLOTS.map((slot) => polymod >> 5 * (5 - slot) & 31);
 }
-function bech32Polymod(values) {
-  let checksum = 1;
-  for (const value of values) {
-    const top = checksum >> 25;
-    checksum = (checksum & 33554431) << 5 ^ value;
-    for (let bit = 0; bit < 5; bit++) {
-      if (top >> bit & 1) {
-        checksum ^= BECH32_GENERATOR[bit];
-      }
-    }
-  }
-  return checksum;
-}
 
 // src/qr.ts
 var import_uqr = require("uqr");