@forgesworn/moneyer 0.11.0 → 0.11.1

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## 0.11.1 - 2026-09-07
+
+- Hash lookups report `Note already spent.` for retained burned notes,
+  `Unknown note.` for unregistered hashes, and `pending` for unresolved
+  melts. This follows the proposed LUD-25 status revision and lets wallets
+  recognise a redeemed note without sending its bearer secret. Existing
+  burned rows are retained already; no database migration is required.
+- Test tooling uses an immutable conformance commit matching this response
+  contract. It is a development dependency, not a runtime dependency.
+
 ## 0.11.0 - 2026-09-06
 
 **Three fields the reference mint publishes and moneyer did not.** Each

package/dist/server.js

@@ -837,12 +837,10 @@ export const createMoneyer = async (config, deps = {}) => {
             const note = h ? await resolveNoteId(h) : await resolveNote(k1);
             if (!note)
                 return fail('Unknown note.');
-            // A hash-only lookup must not disclose whether a note id once existed:
-            // LUD-25 gives a never-registered and an already-spent h the same
-            // response as an unknown k1. A caller presenting the bearer k1 still
-            // receives the useful already-spent distinction.
+            // Hash lookups protect the secret, not the note's spent state.
+            // Retained burned rows let a wallet reconcile without revealing k1.
             if (note.state === 'burned')
-                return fail(h ? 'Unknown note.' : 'Note already spent.');
+                return fail('Note already spent.');
             // A note reserved by an in-flight melt is not withdrawable, and must
             // not be advertised as though it were. LUD-25 makes this GET the way
             // anyone checks what a note is worth, so answering "live, worth all

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forgesworn/moneyer",
-  "version": "0.11.0",
+  "version": "0.11.1",
   "description": "An LNURLcash (LUD-25) mint - strikes Lightning bearer notes. Independent implementation, cln/lnd funding sources, SQLite, zero HTTP framework.",
   "author": "TheCryptoDonkey",
   "license": "MIT",
@@ -70,7 +70,7 @@
     "@types/node": "^24.0.0",
     "animejs": "^4.0.0",
     "happy-dom": "^20.0.0",
-    "lnurlcash-conformance": "^0.7.0",
+    "lnurlcash-conformance": "https://codeload.github.com/lnurlcash/lnurlcash-conformance/tar.gz/6c6aee66cf1b6cba72a03af976ecec113f470c9e",
     "playwright": "^1.62.1",
     "typescript": "^5.7.0",
     "uqr": "^0.1.2",