From 0319e2fd392fc7e8569fbb6a88a6a1dd65e9d539 Mon Sep 17 00:00:00 2001
From: Adam Soltys <adam@coinos.io>
Date: Sat, 1 Aug 2026 11:39:29 -0700
Subject: Sync NWC connections across devices
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

A connection made on the phone existed only there, so only that device could
answer it — and if that device was asleep, a client just spun. Connections now
ride the encrypted device-sync snapshot, so whichever device is awake can
serve them. The snapshot is nip44-encrypted to a key derived from the seed,
the same channel that already carries ark vtxo bytes and gift secrets.

The merge is a union by id with two rules that matter:
- REVOCATION WINS, so a stale snapshot can never resurrect a revoked
  connection
- the higher same-day spend wins, so a stale device cannot hand a connection
  back its daily budget

Creating or revoking a connection publishes the snapshot immediately rather
than waiting for the next state change.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
---
 tools/nwc-test.js | 35 +++++++++++++++++++++++++++++++++++
 1 file changed, 35 insertions(+)

(limited to 'tools')

diff --git a/tools/nwc-test.js b/tools/nwc-test.js
index 3df0f28..64d1cd6 100644
--- a/tools/nwc-test.js
+++ b/tools/nwc-test.js
@@ -27,6 +27,8 @@ const wallet = {
   nostrRelays: () => ['wss://relay.example'],
   nostrSubscribe: (filter, on) => { subHandler = on; return () => { subHandler = null; }; },
   nostrPublishSigned: async (evt) => { published.push(evt); return true; },
+  saveCache: () => {},
+  registerCacheExtension: (ext) => { wallet.__ext = ext; },
 };
 const hooks = {
   arkReady: () => true,
@@ -113,5 +115,38 @@ await subHandler(ev);
 await new Promise(r=>setTimeout(r,300));
 check('request from an unauthorized key is ignored', published.length === before);
 
+
+// ---------------------------------------------------------------------------
+console.log('\n[device sync of connections]');
+{
+  const ext = wallet.__ext;
+  check('feature registered a cache extension', !!ext);
+  // a connection made on another device arrives in a snapshot
+  const remote = { id:'phone1', name:'Phone app', servicePk:'aa'.repeat(32), serviceSk:'bb'.repeat(32),
+    clientPk:'cc'.repeat(32), secret:'dd'.repeat(32), maxSat:500, dailySat:1000, revoked:false, created:1 };
+  ext.load({ nwcConns: [remote] });
+  const after = JSON.parse(store['fs:nwc']).conns;
+  check('remote connection adopted', after.some(c => c.id === 'phone1'));
+  check('local connection kept', after.some(c => c.id === 'test1'));
+
+  // revoke locally, then receive a STALE snapshot that still says active
+  const st = JSON.parse(store['fs:nwc']);
+  st.conns.find(c => c.id === 'phone1').revoked = true;
+  store['fs:nwc'] = JSON.stringify(st);
+  ext.load({ nwcConns: [remote] }); // stale: revoked:false
+  const post = JSON.parse(store['fs:nwc']).conns.find(c => c.id === 'phone1');
+  check('revocation survives a stale snapshot', post.revoked === true);
+
+  // spend accounting must not be handed back by a stale device
+  const today = new Date().toISOString().slice(0,10);
+  const st2 = JSON.parse(store['fs:nwc']);
+  Object.assign(st2.conns.find(c => c.id === 'test1'), { spentDate: today, spentToday: 900 });
+  store['fs:nwc'] = JSON.stringify(st2);
+  ext.load({ nwcConns: [{ ...st2.conns.find(c=>c.id==='test1'), spentToday: 100 }] });
+  const t1 = JSON.parse(store['fs:nwc']).conns.find(c => c.id === 'test1');
+  check('higher same-day spend wins', t1.spentToday === 900, String(t1.spentToday));
+
+  check('what we publish carries the connections', Array.isArray(ext.save().nwcConns));
+}
 console.log(ok ? '\n✅ NWC service behaves' : '\n❌ failed');
 process.exit(ok?0:1);
-- 
cgit v1.2.3