From 5afda54a21be72a5deaac04021d19718422958e0 Mon Sep 17 00:00:00 2001
From: thePR0M3TH3AN <53631862+PR0M3TH3AN@users.noreply.github.com>
Date: Fri, 5 Jun 2026 10:18:03 -0400
Subject: [PATCH] Keep content URL separate from poster URL

---
 docs/nostr-static-client-spec.md |  9 ++++++---
 site/nostr/index.html            |  4 ++--
 site/nostr/nostr-client.js       | 20 ++++++++++----------
 tests/test_nostr_schema.py       | 16 +++++++++++++++-
 voxvera/nostr/schema.py          |  4 ++++
 5 files changed, 37 insertions(+), 16 deletions(-)

diff --git a/docs/nostr-static-client-spec.md b/docs/nostr-static-client-spec.md
index eb24393..ead22cf 100644
--- a/docs/nostr-static-client-spec.md
+++ b/docs/nostr-static-client-spec.md
@@ -75,7 +75,8 @@ Payload:
   "headline": "OPERATION VOX VERA",
   "content": "Flyer body text",
   "url_message": "Follow this link to learn more.",
-  "url": "https://voxvera.org/",
+  "url": "https://creator.example/action",
+  "tear_off_link": "https://voxvera.org/nostr/?addr=naddr1...",
   "footer_message": "0110010",
   "qr_target": "flyer_url"
 }
@@ -87,11 +88,13 @@ The UI labels `folder_name` as `Flyer Name`; it acts as the event slug, not a lo
 
 Default behavior: `qr_target: "flyer_url"`.
 
-When publishing, the client computes the replaceable-event `naddr` and updates the poster URL to the current hosted client URL with `?addr=<naddr>`. The tear-off tabs and QR code point at that resolved poster URL.
+`url` is always the creator-controlled content destination shown in the body of the flyer. The editor must not overwrite this field with generated app URLs.
+
+When publishing, the client computes the replaceable-event `naddr` and writes the generated poster URL to `tear_off_link`. The tear-off tabs and tear-off QR code point at `tear_off_link`, so people can re-open and reprint the flyer. The main flyer QR code points at `url`, so viewers can visit the creator's intended destination.
 
 Supported values:
 
-- `flyer_url`: QR points to the hosted client URL for the poster
+- `flyer_url`: tear-off QR points to the hosted client URL for the poster
 - `content_url`: QR points to the payload's content URL
 - `nostr_event`: QR points to the Nostr source identifier when available
 
diff --git a/site/nostr/index.html b/site/nostr/index.html
index f395690..b9d8ccf 100644
--- a/site/nostr/index.html
+++ b/site/nostr/index.html
@@ -97,8 +97,8 @@
             <input id="field-url-message" name="url_message" maxlength="240" value="Follow this link to learn more.">
           </label>
           <label>
-            <span id="label-poster-url">Poster URL</span>
-            <input id="field-url" name="url" maxlength="2048" value="https://voxvera.org/" readonly>
+            <span id="label-poster-url">Content URL</span>
+            <input id="field-url" name="url" maxlength="2048" value="https://voxvera.org/">
           </label>
           <label>
             <span id="label-footer-message">Footer message</span>
diff --git a/site/nostr/nostr-client.js b/site/nostr/nostr-client.js
index 4895057..3a0fa77 100644
--- a/site/nostr/nostr-client.js
+++ b/site/nostr/nostr-client.js
@@ -21,6 +21,7 @@
     content: 10000,
     url_message: 240,
     url: 2048,
+    tear_off_link: 2048,
     footer_message: 240
   };
   const CONFIG_DEFAULTS = {
@@ -717,12 +718,14 @@ Join us in a revolution that values truth and transparency. Together, we can bui
         throw new Error(`${key} contains raw HTML.`);
       }
     });
-    if (payload.url) {
-      const parsed = new URL(payload.url);
-      if (!["http:", "https:", "nostr:"].includes(parsed.protocol)) {
-        throw new Error(`Unsupported URL scheme: ${parsed.protocol}`);
+    ["url", "tear_off_link"].forEach((key) => {
+      if (payload[key]) {
+        const parsed = new URL(payload[key]);
+        if (!["http:", "https:", "nostr:"].includes(parsed.protocol)) {
+          throw new Error(`Unsupported URL scheme: ${parsed.protocol}`);
+        }
       }
-    }
+    });
   }
 
   function normalizePayload(payload) {
@@ -739,6 +742,7 @@ Join us in a revolution that values truth and transparency. Together, we can bui
       content: htmlBreaksToNewlines(payload.content || CONFIG_DEFAULTS.content),
       url_message: payload.url_message || CONFIG_DEFAULTS.url_message,
       url: payload.url || CONFIG_DEFAULTS.url,
+      tear_off_link: payload.tear_off_link || CONFIG_DEFAULTS.tear_off_link,
       footer_message: payload.footer_message || CONFIG_DEFAULTS.footer_message,
       attachment_path: "",
       attachment_filename: ""
@@ -787,7 +791,7 @@ Join us in a revolution that values truth and transparency. Together, we can bui
     return {
       payload: {
         ...payload,
-        url: posterUrlForNaddr(naddr),
+        tear_off_link: posterUrlForNaddr(naddr),
         qr_target: "flyer_url"
       },
       naddr,
@@ -806,7 +810,6 @@ Join us in a revolution that values truth and transparency. Together, we can bui
       const poster = withPosterUrl(payload, identity, relays);
       naddrOutput.textContent = poster.naddr;
       posterUrlOutput.textContent = poster.posterUrl;
-      el("field-url").value = poster.posterUrl;
       return poster;
     } catch (_) {
       return null;
@@ -820,7 +823,6 @@ Join us in a revolution that values truth and transparency. Together, we can bui
     el("author-npub-output").textContent = identity.npub;
     el("naddr-output").textContent = poster.naddr;
     el("poster-url-output").textContent = poster.posterUrl;
-    el("field-url").value = poster.posterUrl;
     refreshIdentityState();
     if (!signed.id || !signed.sig) {
       throw new Error("Signer returned an event without id/sig.");
@@ -1087,7 +1089,6 @@ Join us in a revolution that values truth and transparency. Together, we can bui
     el("author-npub-output").textContent = identity.npub;
     el("naddr-output").textContent = poster.naddr;
     el("poster-url-output").textContent = poster.posterUrl;
-    el("field-url").value = poster.posterUrl;
     refreshIdentityState();
     syncUiLanguage(poster.payload.lang);
     renderPreview(normalizePayload(poster.payload));
@@ -1249,7 +1250,6 @@ Join us in a revolution that values truth and transparency. Together, we can bui
         el("author-npub-output").textContent = identity.npub;
         el("naddr-output").textContent = poster.naddr;
         el("poster-url-output").textContent = poster.posterUrl;
-        el("field-url").value = poster.posterUrl;
         el("event-json-output").value = JSON.stringify(event, null, 2);
         downloadJson(`${poster.payload.folder_name}-voxvera-event-unsigned.json`, event);
       } catch (error) {
diff --git a/tests/test_nostr_schema.py b/tests/test_nostr_schema.py
index 3e598d9..7960b84 100644
--- a/tests/test_nostr_schema.py
+++ b/tests/test_nostr_schema.py
@@ -17,6 +17,7 @@ def _payload(**overrides):
         "headline": "Publish once, render anywhere",
         "content": "This flyer came from a Nostr event.",
         "url": "https://voxvera.org",
+        "tear_off_link": "https://client.example/nostr/?addr=naddr1example",
         "url_message": "Open this poster",
         "footer_message": "share truth",
     }
@@ -55,7 +56,20 @@ def test_normalize_maps_to_flyer_config_defaults():
     assert config["folder_name"] == "nostr-flyer"
     assert config["lang"] == "en"
     assert config["url"] == "https://voxvera.org"
-    assert config["tear_off_link"] == ""
+    assert config["tear_off_link"] == "https://client.example/nostr/?addr=naddr1example"
+
+
+def test_normalize_keeps_content_url_separate_from_tear_off_link():
+    defaults = {"folder_name": "voxvera", "lang": "en", "tear_off_link": ""}
+    event = _event(_payload(
+        url="https://creator.example/action",
+        tear_off_link="https://client.example/nostr/?addr=naddr1example",
+    ))
+
+    config = normalize_event_source(event, defaults)
+
+    assert config["url"] == "https://creator.example/action"
+    assert config["tear_off_link"] == "https://client.example/nostr/?addr=naddr1example"
 
 
 def test_normalize_supports_content_url_qr_target():
diff --git a/voxvera/nostr/schema.py b/voxvera/nostr/schema.py
index 58f0d53..d55219a 100644
--- a/voxvera/nostr/schema.py
+++ b/voxvera/nostr/schema.py
@@ -21,6 +21,7 @@ CONFIG_FIELDS = {
     "content",
     "url_message",
     "url",
+    "tear_off_link",
     "footer_message",
     "attachment_path",
     "attachment_filename",
@@ -34,6 +35,7 @@ FIELD_LIMITS = {
     "content": 10000,
     "url_message": 240,
     "url": 2048,
+    "tear_off_link": 2048,
     "footer_message": 240,
 }
 HTML_PATTERN = re.compile(r"<\s*/?\s*[A-Za-z][^>]*>|on[A-Za-z]+\s*=", re.IGNORECASE)
@@ -167,6 +169,8 @@ def _validate_payload(payload: dict[str, Any]) -> None:
         _normalize_lang(payload["lang"])
     if "url" in payload:
         _validate_url(payload["url"])
+    if "tear_off_link" in payload:
+        _validate_url(payload["tear_off_link"])
     if payload.get("attachment_path") or payload.get("attachment_filename"):
         raise NostrValidationError("Attachments are not supported for Nostr flyer events in V1.")