Zappable offer codes and per-name Lightning offers

CLINK offers (noffer): every wallet gets a static offer keypair (synced
across devices, first-minted wins) answering kind-21001 invoice
requests — from open tabs and from the service worker while closed,
which mints against the mirrored state (the record now carries chain-4
and chain-5 key windows) and raises an open-to-receive notification.
Zap requests ride along and their kind-9735 receipts publish once the
payment is claimed. The code is shown in the payment-address card for
pasting into a Nostr profile; the notifier watches and relays kind
21001 alongside NWC.

Payment names also gain a Lightning offer: the registrar creates a
BOLT 12 offer per name on the node and appends lno= to the DNS record;
a settle-forwarder pushes each received payment on to the name's ark
destination from a small float wallet (custody window: seconds between
Lightning settle and the ark send).

Name resolution now runs full client-side DNSSEC validation
(src/dnssec.js): binary DoH, root-anchor chain walk, RSA + ECDSA via
WebCrypto — the resolver is untrusted transport, verified against live
signed zones including the canonical BIP-353 test name.

Co-Authored-By: Claude Fable 5 <[email protected]>

1 files changed, 7 insertions, 4 deletions

diff --git a/src/i18n.js b/src/i18n.js
index 16da899..62e7b07 100644
--- a/src/i18n.js
+++ b/src/i18n.js
@@ -429,18 +429,21 @@ const STR = {
     arkLnRefunded: 'Payment failed — funds returned to your Ark balance.',
     arkLnPaidTitle: 'Paid!',
     namesTitle: 'Payment address',
-    namesDesc: 'Claim a human-readable payment address (₿[email protected]) that anyone with a BIP-353 wallet can pay. It points at this wallet’s reusable Ark address and follows the wallet if that changes.',
+    namesDesc: 'Claim your payment address — like [email protected]. People can pay you just by typing it, no codes to copy or QR to scan.',
     namesPlaceholder: 'username',
     namesClaim: 'Claim',
     namesClaimed: 'You are now {name}',
     namesCopy: 'Copy address',
     namesRelease: 'Release',
     namesReleased: 'Name released',
-    namesNeedArk: 'Ark must be connected to claim a name',
+    namesNeedArk: 'Your wallet is still connecting — try again in a moment',
     namesNotFound: 'No payment record found for {name}',
-    namesNoUsableInstruction: 'That name has a payment record, but nothing this wallet can pay',
+    namesNoUsableInstruction: 'That address exists, but this wallet has no way to pay it',
+    namesZapCode: 'Get zapped on Nostr',
+    namesZapCodeHow: 'Paste this code into your Nostr app profile and zaps land straight in this wallet:',
+    namesZapCodeCopy: 'Copy code',
     namesOwnDomain: 'Use your own domain',
-    namesOwnDomainHow: 'Add this CNAME in your DNS (your zone must have DNSSEC enabled) and your name works at your own domain:',
+    namesOwnDomainHow: 'Have your own domain? Add this line to its DNS records (DNSSEC must be enabled) and your address works there too:',
     nwcTitle: 'Nostr Wallet Connect',
     nwcDesc: 'Let another app pay from this wallet over nostr — it never sees your keys, only spends within the limits you set, and you can cut it off at any time. Payments go out over Ark.',
     nwcTabWarning: 'Only works while Hal is open in a tab — it is not an always-on service.',