Profiles wear their latest notes, each one zappable; a zap with no ark address to land on becomes a gift only their key can open

Co-Authored-By: Claude Fable 5 <[email protected]>

2 files changed, 126 insertions, 0 deletions

diff --git a/tools/locked-gift-test.js b/tools/locked-gift-test.js
new file mode 100644
index 0000000..12c0dff
--- /dev/null
+++ b/tools/locked-gift-test.js
@@ -0,0 +1,59 @@
+// An npub-locked ark gift link must show who it's for and gate the code
+// behind the claim code (or the recipient's NIP-07 key) — a wrong code stays
+// on the unlock screen, the right one walks into the ordinary claim flow.
+//
+// Run: bun tools/locked-gift-test.js
+import puppeteer from 'puppeteer-core';
+import { hex, base32nopad } from '@scure/base';
+import { buildHtml } from '../build.js';
+import { lockGift, previewLockedGift } from '../src/features/gifts-wallet.js';
+import { generateSecretKey, getPublicKey } from 'nostr-tools/pure';
+
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+let ok = true;
+const check = (n, c, d = '') => { console.log(` ${c ? '✓' : '✗'} ${n}${d ? ' — ' + d : ''}`); if (!c) ok = false; };
+
+// A syntactically valid mainnet ark gift code (random secret — nothing real).
+const secret = crypto.getRandomValues(new Uint8Array(32));
+const raw = new Uint8Array(42);
+raw[0] = 0x11; raw[1] = 0; // magic, mainnet
+new DataView(raw.buffer).setBigUint64(2, 2100n, true);
+raw.set(secret, 10);
+const giftCode = base32nopad.encode(raw);
+
+const recipientSk = generateSecretKey();
+const recipientPk = getPublicKey(recipientSk);
+const { blob, claimCode } = lockGift(giftCode, 2100, recipientPk);
+check('blob previews', !!previewLockedGift(blob));
+
+const html = await buildHtml({ minify: true, pwa: false });
+const server = Bun.serve({ port: 5233, fetch: () => new Response(html, { headers: { 'content-type': 'text/html' } }) });
+const browser = await puppeteer.launch({ executablePath: '/usr/bin/google-chrome', headless: 'new', args: ['--no-sandbox'] });
+const page = await browser.newPage();
+const bodyText = () => page.evaluate(() => document.body.innerText);
+const setInput = (sel, v) => page.evaluate((s, val) => { const e = document.querySelector(s); if (!e) return false; e.value = val; e.dispatchEvent(new Event('input', { bubbles: true })); return true; }, sel, v);
+const click = (t) => page.evaluate((x) => { const e = [...document.querySelectorAll('button')].find((n) => n.textContent.trim().toLowerCase().includes(x.toLowerCase())); if (e) { e.click(); return true; } return false; }, t);
+const waitText = async (x, ms = 15000) => { for (let i = 0; i < ms / 250; i++) { if ((await bodyText()).toLowerCase().includes(x.toLowerCase())) return true; await sleep(250); } return false; };
+
+await page.goto(`http://localhost:5233/lg/${blob}`, { waitUntil: 'networkidle2' });
+check('unlock screen shows', await waitText('A gift for you'));
+check('amount shows', (await bodyText()).includes('2,100') || (await bodyText()).includes('2100'));
+check('locked-to line shows', (await bodyText()).toLowerCase().includes('locked to'));
+check('code field present', await page.evaluate(() => !!document.querySelector('input.mono-input')));
+
+// wrong code: stay put, say so
+check('typed wrong code', await setInput('input.mono-input', 'definitely-not-the-code'));
+check('clicked claim', await click('claim it'));
+check('wrong code rejected', await waitText('doesn’t unlock', 5000));
+
+// right code: advances into the ordinary gift claim flow (fresh wallet path)
+check('typed right code', await setInput('input.mono-input', claimCode));
+check('clicked claim again', await click('claim it'));
+const advanced = await waitText('checking', 10000) || await waitText('claim', 10000);
+const stillLocked = (await bodyText()).includes('A gift for you');
+check('unlock advanced to claim flow', advanced && !stillLocked, stillLocked ? 'still on unlock screen' : '');
+
+await browser.close();
+server.stop();
+console.log(ok ? '\n✅ locked gift unlock flow works' : '\n❌ locked gift flow broken');
+process.exit(ok ? 0 : 1);
diff --git a/tools/profile-feed-test.js b/tools/profile-feed-test.js
new file mode 100644
index 0000000..e499e5a
--- /dev/null
+++ b/tools/profile-feed-test.js
@@ -0,0 +1,67 @@
+// A profile screen must show the person's latest nostr posts and replies —
+// and a zap button on each note when the wallet can pay. Driven against the
+// live coinos community: open chat, tap an avatar, land on their profile.
+//
+// Run: bun tools/profile-feed-test.js
+import puppeteer from 'puppeteer-core';
+import { generateMnemonic } from '@scure/bip39';
+import { wordlist } from '@scure/bip39/wordlists/english';
+import { buildHtml } from '../build.js';
+
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+let ok = true;
+const check = (n, c, d = '') => { console.log(` ${c ? '✓' : '✗'} ${n}${d ? ' — ' + d : ''}`); if (!c) ok = false; };
+
+const html = await buildHtml({ minify: true, pwa: false });
+const server = Bun.serve({ port: 5234, fetch: () => new Response(html, { headers: { 'content-type': 'text/html' } }) });
+const browser = await puppeteer.launch({ executablePath: '/usr/bin/google-chrome', headless: 'new', args: ['--no-sandbox'] });
+const page = await browser.newPage();
+const pageErrors = [];
+page.on('pageerror', (e) => pageErrors.push(String(e)));
+const click = (sel, t) => page.evaluate((s, x) => { const e = [...document.querySelectorAll(s)].find((n) => n.textContent.trim().toLowerCase().includes(x.toLowerCase())); if (e) { e.click(); return true; } return false; }, sel, t);
+const bodyText = () => page.evaluate(() => document.body.innerText);
+const waitText = async (x, ms = 20000) => { for (let i = 0; i < ms / 250; i++) { if ((await bodyText()).toLowerCase().includes(x.toLowerCase())) return true; await sleep(250); } return false; };
+
+try {
+  await page.goto('http://localhost:5234/', { waitUntil: 'domcontentloaded' });
+  await sleep(400);
+  await click('button', 'I already have a wallet');
+  await sleep(300);
+  await click('button', 'Import existing');
+  await sleep(300);
+  await page.waitForSelector('textarea');
+  await page.type('textarea', generateMnemonic(wordlist));
+  await click('button', 'Open wallet');
+  check('wallet opens', await waitText('receive', 20000));
+
+  await page.evaluate(() => document.querySelector('.header-msgs')?.click());
+  await sleep(800);
+  check('chat home opens', await waitText('coinos', 10000));
+  await click('.item, .chat-thread-row', 'coinos');
+  const gotChat = await page.waitForSelector('.chat-avatar.clickable', { timeout: 25000 }).then(() => true).catch(() => false);
+  check('community chat shows avatars', gotChat);
+
+  if (gotChat) {
+    await page.evaluate(() => document.querySelector('.chat-avatar.clickable')?.click());
+    check('profile screen opens', await waitText('back', 10000));
+    // the feed: either notes arrive or the explicit empty state shows
+    const fed = await waitText('Latest posts', 15000);
+    const empty = !fed && (await bodyText()).includes('No recent posts');
+    check('note feed resolves', fed || empty, fed ? 'notes shown' : 'no posts for this pk');
+    if (fed) {
+      const zaps = await page.evaluate(() => [...document.querySelectorAll('button')].filter((b) => b.textContent.trim() === '⚡').length);
+      check('zap buttons on notes', zaps > 0, `${zaps} note(s) zappable`);
+      const imgsBroken = await page.evaluate(() => [...document.querySelectorAll('.note-img')].some((i) => i.style.display !== 'none' && i.complete && i.naturalWidth === 0));
+      check('no broken inline images', !imgsBroken);
+      // tap a zap: should land on the send tab's zap card (resolution ladder)
+      await page.evaluate(() => [...document.querySelectorAll('button')].find((b) => b.textContent.trim() === '⚡')?.click());
+      check('zap flow opens', await waitText('Send a zap', 10000));
+    }
+  }
+  check('no page errors', pageErrors.length === 0, pageErrors.slice(0, 2).join(' | '));
+} finally {
+  await browser.close();
+  server.stop();
+}
+console.log(ok ? '\n✅ profile feed works' : '\n❌ profile feed broken');
+process.exit(ok ? 0 : 1);