The wallet learns to read BOLT 12 for itself: offers and invoices decode client-side, and every invoice the ASP fetches over onion messages is verified here — payment hash read from the raw TLVs, offer terms mirrored byte-for-byte, the issuer's schnorr signature checked against LDK's exact merkle construction (proven against a live CLN-signed fixture) — so no server can hand back an invoice whose preimage it already holds. Paste an lno1 or resolve a name whose record carries one and the existing HTLC pay flow carries it (captaind's Invoice enum takes lni strings natively); a name's owner may now publish their OWN node's offer in their DNS record, retiring the registrar's stand-in — senders fetch invoices straight from their node and no coinos service ever touches the money. The /lnquote fallback prices blinded paths by entry node + advertised payinfo

Co-Authored-By: Claude Fable 5 <[email protected]>
Claude-Session: https://claude.ai/code/session_019WboeoetMF3MTmgT7Ew8yi

1 files changed, 34 insertions, 0 deletions

diff --git a/src/ark/lightning.js b/src/ark/lightning.js
index dab2d6d..da5ad8e 100644
--- a/src/ark/lightning.js
+++ b/src/ark/lightning.js
@@ -15,6 +15,7 @@ import { schnorr } from '@noble/curves/secp256k1';
 
 import { concatBytes, grpcCall, pbWriter, pbFields } from './proto.js';
 import { parsePackageCosignResponse } from './send.js';
+import { decodeBolt12Invoice } from '../bolt12.js';
 
 const te = new TextEncoder();
 const td = new TextDecoder();
@@ -68,6 +69,26 @@ export function maybeBolt11(text) {
   try { return decodeBolt11(text); } catch { return null; }
 }
 
+// Either invoice kind, one shape: bolt11 via decodeBolt11, bolt12 (lni…) via
+// the BOLT 12 decoder. network is null for a bolt12 on an unrecognized chain
+// (custom signets) — callers skip the network gate rather than guess.
+export function decodeLnInvoice(invoice) {
+  const s = String(invoice || '').trim().toLowerCase().replace(/^lightning:/, '');
+  if (/^lni1/.test(s)) {
+    const d = decodeBolt12Invoice(s);
+    return {
+      network: d.network, paymentHash: d.paymentHash,
+      amountMsat: d.amountMsat, amountSat: d.amountSat,
+      expiresAt: d.expiresAt, bolt12: true,
+    };
+  }
+  return decodeBolt11(invoice);
+}
+
+export function maybeLnInvoice(text) {
+  try { return decodeLnInvoice(text); } catch { return null; }
+}
+
 // ---------------------------------------------------------------------------
 // fee schedules (ArkInfo.fees.lightning_send / lightning_receive)
 // ---------------------------------------------------------------------------
@@ -127,6 +148,19 @@ export async function initiateLightningPayment(ark, { invoice, htlcVtxoIdRaws, a
   await grpcCall(ark, 'bark_server.ArkService/InitiateLightningPayment', w.finish());
 }
 
+// Ask the server's CLN to fetch a BOLT 12 invoice for an offer (it speaks
+// the onion messages the browser can't). Returns the invoice's raw TLV
+// bytes — the caller MUST decode and verify them (src/bolt12.js) before
+// locking anything to the payment hash inside.
+export async function fetchBolt12Invoice(ark, offerBytes, amountSat) {
+  const w = pbWriter();
+  w.bytesField(1, offerBytes);
+  if (amountSat) w.varintField(2, amountSat);
+  const data = await grpcCall(ark, 'bark_server.ArkService/FetchBolt12Invoice', w.finish());
+  for (const { field, value } of pbFields(data)) if (field === 1) return value;
+  throw new Error('server returned no invoice');
+}
+
 // -> { status: 'pending'|'success'|'failed', preimage? (hex) }
 export async function checkLightningPayment(ark, paymentHash, wait = false) {
   const w = pbWriter();