Zappable offer codes and per-name Lightning offers

CLINK offers (noffer): every wallet gets a static offer keypair (synced
across devices, first-minted wins) answering kind-21001 invoice
requests — from open tabs and from the service worker while closed,
which mints against the mirrored state (the record now carries chain-4
and chain-5 key windows) and raises an open-to-receive notification.
Zap requests ride along and their kind-9735 receipts publish once the
payment is claimed. The code is shown in the payment-address card for
pasting into a Nostr profile; the notifier watches and relays kind
21001 alongside NWC.

Payment names also gain a Lightning offer: the registrar creates a
BOLT 12 offer per name on the node and appends lno= to the DNS record;
a settle-forwarder pushes each received payment on to the name's ark
destination from a small float wallet (custody window: seconds between
Lightning settle and the ark send).

Name resolution now runs full client-side DNSSEC validation
(src/dnssec.js): binary DoH, root-anchor chain walk, RSA + ECDSA via
WebCrypto — the resolver is untrusted transport, verified against live
signed zones including the canonical BIP-353 test name.

Co-Authored-By: Claude Fable 5 <[email protected]>

1 files changed, 55 insertions, 0 deletions

diff --git a/src/noffer.js b/src/noffer.js
new file mode 100644
index 0000000..a211f66
--- /dev/null
+++ b/src/noffer.js
@@ -0,0 +1,55 @@
+// CLINK offer codes (`noffer1…`) — a static, nostr-native payment code.
+// Bech32 over TLV: 0 = service pubkey (32B), 1 = relay url, 2 = offer id,
+// 3 = pricing type (2 = payer chooses the amount). A payer decodes this,
+// sends a NIP-44-encrypted kind-21001 request to the pubkey via the relay,
+// and gets an invoice back — no web server involved.
+
+import { bech32 } from '@scure/base';
+import { hex } from '@scure/base';
+
+const te = new TextEncoder();
+const td = new TextDecoder();
+
+function tlv(items) {
+  const parts = [];
+  for (const [type, value] of items) {
+    if (value.length > 255) throw new Error('tlv value too long');
+    parts.push(new Uint8Array([type, value.length]), value);
+  }
+  const total = parts.reduce((n, p) => n + p.length, 0);
+  const out = new Uint8Array(total);
+  let off = 0;
+  for (const p of parts) { out.set(p, off); off += p.length; }
+  return out;
+}
+
+export function encodeNoffer({ pubkey, relay, offerId, priceType = 2 }) {
+  const data = tlv([
+    [0, hex.decode(pubkey)],
+    [1, te.encode(relay)],
+    [2, te.encode(offerId)],
+    [3, new Uint8Array([priceType])],
+  ]);
+  return bech32.encode('noffer', bech32.toWords(data), 2000);
+}
+
+export function decodeNoffer(str) {
+  const { prefix, words } = bech32.decode(String(str).trim(), 2000);
+  if (prefix !== 'noffer') throw new Error('not an offer code');
+  const data = bech32.fromWords(words);
+  const out = {};
+  let off = 0;
+  while (off + 2 <= data.length) {
+    const type = data[off], len = data[off + 1];
+    const value = data.slice(off + 2, off + 2 + len);
+    off += 2 + len;
+    if (type === 0) out.pubkey = hex.encode(value);
+    else if (type === 1) out.relay = td.decode(value);
+    else if (type === 2) out.offerId = td.decode(value);
+    else if (type === 3) out.priceType = value[0];
+    else if (type === 4) out.priceSats = [...value].reduce((n, b) => n * 256 + b, 0);
+    else if (type === 5) out.currency = td.decode(value);
+  }
+  if (!out.pubkey) throw new Error('offer code has no pubkey');
+  return out;
+}