Repository-generated scenario index
These are the exact fault programs checked into the repository. Each run stays deterministic under the demo seed and links back to its reviewable source.
Fault family
Injects 49 HTTP and 50 Nostr duplicates on a single delivery. Verifies at-most-once settlement and credit across dual transport storm.
Cashu Fault Labpnpm lab run concurrency/cross-transport-storm --seed demoInjects 99 HTTP duplicates on a single delivery. Verifies the receiver creates exactly one settlement plan and one merchant credit.
pnpm lab run concurrency/duplicate-storm --seed demoFault family
Sends a delivery that settles, then sends a second delivery under the same delivery ID with different proofs. Verifies the receiver rejects the second delivery with DELIVERY_CONFLICT and never starts a second mint swap or credits the merchant twice.
pnpm lab run conformance/conflict-delivery --seed demoSends a delivery that settles and consumes proof set A, then sends a second delivery with a new delivery ID reusing the same proofs. Verifies the receiver rejects the second delivery with PROOF_CONFLICT and never starts a second mint swap or credits the merchant twice.
pnpm lab run conformance/conflict-proof --seed demoSends a delivery that settles and claims a single-use request, then sends a second delivery with a new delivery ID and new proofs under the same request. Verifies the receiver rejects the second delivery with SINGLE_USE_CONFLICT and never starts a second mint swap or credits the merchant twice.
pnpm lab run conformance/conflict-single-use --seed demoAdvances virtual time past the delivery validity window before the first send. Verifies the receiver rejects the delivery as expired, never starts mint redemption, and never credits the merchant.
pnpm lab run conformance/created-expired --seed demoValidates delivery-v1 codec conformance: parses pinned wire-format vectors and fingerprint preimages from spec/vectors/.
pnpm lab run conformance/delivery-v1 --seed demoValidates legacy NUT-18 codec conformance: parses upstream creqA payment requests with NIP-17 nprofile targets.
pnpm lab run conformance/legacy-nut18 --seed demoDocuments the known NUT-26/NUT-18 incompatibility: NIP-04 raw-key vs NIP-17 nprofile transport mapping mismatch.
pnpm lab run conformance/nut26-known-mismatch --seed demoFault family
Terminates after durable merchant credit and finalizes one monotonic receipt.
pnpm lab run crash-recovery/boundaries/receiver_after_credit_before_receipt_persistence --seed demoTerminates after possible mint consumption and recovers without unsafe redispatch.
pnpm lab run crash-recovery/boundaries/receiver_after_mint_request_before_response --seed demoTerminates after mint success and restores the exact outputs before settlement.
pnpm lab run crash-recovery/boundaries/receiver_after_mint_response_before_output_persistence --seed demoTerminates after durable output persistence and credits the merchant exactly once.
pnpm lab run crash-recovery/boundaries/receiver_after_output_persistence_before_merchant_credit --seed demoTerminates after durable settled receipt/outbox state and returns the stable receipt after restart.
pnpm lab run crash-recovery/boundaries/receiver_after_receipt_persistence_before_response_or_outbox --seed demoTerminates the receiver before mint dispatch and resumes from the prepared delivery.
pnpm lab run crash-recovery/boundaries/receiver_before_mint_request --seed demoTerminates after exact payload persistence and verifies restart sends the stored bytes.
pnpm lab run crash-recovery/boundaries/sender_after_payload_persistence_before_network_send --seed demoTerminates after durable proof reservation and verifies the exact reservation is reused.
pnpm lab run crash-recovery/boundaries/sender_after_reservation_before_payload_persistence --seed demoTerminates after delivery dispatch and verifies retry converges on the same identity.
pnpm lab run crash-recovery/boundaries/sender_after_send_before_response --seed demoTerminates the funded sender before proof reservation and verifies deterministic retry after restart.
pnpm lab run crash-recovery/boundaries/sender_before_proof_reservation --seed demoAn external receiver adapter settles a delivery, restarts, then accepts the same delivery again without creating a second merchant credit.
pnpm lab run crash-recovery/external-receiver-restart-after-settlement --seed demoMint commits the swap but drops the response. Receiver restarts, recovers via NUT-19 replay or NUT-09 restore, and settles without double credit.
pnpm lab run crash-recovery/mint-response-lost --seed demoMint commits the swap and drops the response. Receiver restart replays the byte-identical NUT-19 cached swap request inside TTL and settles without NUT-09 restore or double credit.
pnpm lab run crash-recovery/nut19-cache-hit-recovery --seed demoReceiver accepts a delivery and starts redemption, then restarts before the swap completes. After clearing the mint fault, the receiver recovers via NUT-09 restore and settles without double credit.
pnpm lab run crash-recovery/receiver-restart-mid-swap --seed demoMint commits the swap but drops the response. Receiver restarts and recovers via NUT-09, then sender restarts and resumes the in-flight delivery, converging on the settled receipt without a second mint swap.
pnpm lab run crash-recovery/sender-restart-mid-delivery --seed demoFault family
Drops the HTTP response so the sender falls back to Nostr transport. Verifies both transports converge on the same settled receipt.
pnpm lab run retry/cross-transport-fallback --seed demoDrops the first Nostr response. Verifies sender retries through NIP-17 gift-wrap delivery and the receiver deduplicates.
pnpm lab run retry/nostr-response-lost --seed demoDrops the first HTTP request before it reaches the receiver. Verifies sender resends the entire delivery payload.
pnpm lab run retry/request-lost --seed demoDrops the first HTTP response. Verifies sender retries with the same delivery ID and payload bytes, converging on a settled receipt.
pnpm lab run retry/response-lost --seed demoFault family
Probes CORS origin enforcement. Verifies trusted origins can access the payment endpoint and attacker origins are blocked.
pnpm lab run security/cors --seed demoSends malformed payloads (invalid JSON, non-UTF-8, oversized). Verifies all inputs are rejected with stable, deterministic error codes.
pnpm lab run security/malformed-input --seed demoProbes that HTTP redirects are disabled. Verifies proof bearer material is never leaked to attacker-controlled redirect targets.
pnpm lab run security/redirect-leak --seed demoProbes that DNS rebinding to private IPs is blocked. Verifies proof material is never sent to internal network addresses.
pnpm lab run security/ssrf --seed demo