From 2023fe06d5cc4867f09d5916680b5fe92394dacb Mon Sep 17 00:00:00 2001
From: Adam Soltys <adam@coinos.io>
Date: Sat, 29 Aug 2026 00:50:09 -0700
Subject: The wallet learns to read BOLT 12 for itself: offers and invoices
 decode client-side, and every invoice the ASP fetches over onion messages is
 verified here — payment hash read from the raw TLVs, offer terms mirrored
 byte-for-byte, the issuer's schnorr signature checked against LDK's exact
 merkle construction (proven against a live CLN-signed fixture) — so no server
 can hand back an invoice whose preimage it already holds. Paste an lno1 or
 resolve a name whose record carries one and the existing HTLC pay flow
 carries it (captaind's Invoice enum takes lni strings natively); a name's
 owner may now publish their OWN node's offer in their DNS record, retiring
 the registrar's stand-in — senders fetch invoices straight from their node
 and no coinos service ever touches the money. The /lnquote fallback prices
 blinded paths by entry node + advertised payinfo
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_019WboeoetMF3MTmgT7Ew8yi
---
 src/ark/lightning.js | 34 ++++++++++++++++++++++++++++++++++
 1 file changed, 34 insertions(+)

(limited to 'src/ark/lightning.js')

diff --git a/src/ark/lightning.js b/src/ark/lightning.js
index dab2d6d..da5ad8e 100644
--- a/src/ark/lightning.js
+++ b/src/ark/lightning.js
@@ -15,6 +15,7 @@ import { schnorr } from '@noble/curves/secp256k1';
 
 import { concatBytes, grpcCall, pbWriter, pbFields } from './proto.js';
 import { parsePackageCosignResponse } from './send.js';
+import { decodeBolt12Invoice } from '../bolt12.js';
 
 const te = new TextEncoder();
 const td = new TextDecoder();
@@ -68,6 +69,26 @@ export function maybeBolt11(text) {
   try { return decodeBolt11(text); } catch { return null; }
 }
 
+// Either invoice kind, one shape: bolt11 via decodeBolt11, bolt12 (lni…) via
+// the BOLT 12 decoder. network is null for a bolt12 on an unrecognized chain
+// (custom signets) — callers skip the network gate rather than guess.
+export function decodeLnInvoice(invoice) {
+  const s = String(invoice || '').trim().toLowerCase().replace(/^lightning:/, '');
+  if (/^lni1/.test(s)) {
+    const d = decodeBolt12Invoice(s);
+    return {
+      network: d.network, paymentHash: d.paymentHash,
+      amountMsat: d.amountMsat, amountSat: d.amountSat,
+      expiresAt: d.expiresAt, bolt12: true,
+    };
+  }
+  return decodeBolt11(invoice);
+}
+
+export function maybeLnInvoice(text) {
+  try { return decodeLnInvoice(text); } catch { return null; }
+}
+
 // ---------------------------------------------------------------------------
 // fee schedules (ArkInfo.fees.lightning_send / lightning_receive)
 // ---------------------------------------------------------------------------
@@ -127,6 +148,19 @@ export async function initiateLightningPayment(ark, { invoice, htlcVtxoIdRaws, a
   await grpcCall(ark, 'bark_server.ArkService/InitiateLightningPayment', w.finish());
 }
 
+// Ask the server's CLN to fetch a BOLT 12 invoice for an offer (it speaks
+// the onion messages the browser can't). Returns the invoice's raw TLV
+// bytes — the caller MUST decode and verify them (src/bolt12.js) before
+// locking anything to the payment hash inside.
+export async function fetchBolt12Invoice(ark, offerBytes, amountSat) {
+  const w = pbWriter();
+  w.bytesField(1, offerBytes);
+  if (amountSat) w.varintField(2, amountSat);
+  const data = await grpcCall(ark, 'bark_server.ArkService/FetchBolt12Invoice', w.finish());
+  for (const { field, value } of pbFields(data)) if (field === 1) return value;
+  throw new Error('server returned no invoice');
+}
+
 // -> { status: 'pending'|'success'|'failed', preimage? (hex) }
 export async function checkLightningPayment(ark, paymentHash, wait = false) {
   const w = pbWriter();
-- 
cgit v1.2.3