@forgesworn/moneyer 0.20.1 → 0.21.0

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## 0.21.0 - 2026-10-16
+
+- **Certificates go out as `c` and `c2` only.** The `sig`/`sig2` that had
+  carried the same value alongside them since 0.17.0 are dropped, as dni
+  asked. The draft never named them, the reference mint emits only `c`/`c2`,
+  and every wallet that verifies a moneyer certificate reads `c` first:
+  notecase since 0.25.0, heartwood since 0.18.0-beta.24, lnurl-wallet,
+  lnurlcash-core and its Python and Go ports. The bound-mint receipt on
+  `/verify` is a different field and keeps its name.
+
 ## 0.20.1 - 2026-10-13
 
 - **A name with a cx1 issues invoices its payer's wallet will accept.** Its

package/README.md

@@ -393,9 +393,8 @@ spend is refused with a reason and the note stays outstanding; a verifier
 that crashes, errors or stalls refuses too, and never accepts.
 
 Every note gets a certificate, `cs1` over hex(Q) and its amount: `c` on
-the informational GET, `c`/`c2` on every rotate, split and merge. The same
-value also goes out as the older `sig`/`sig2` until wallets reading only
-those have moved on. The
+the informational GET, `c`/`c2` on every rotate, split and merge, and
+under no other name. The
 informational GET verifies a `k1` in full before answering, so a wallet
 checking a note it was handed learns whether its spend really opens it.
 
@@ -692,7 +691,7 @@ clearnet.
 | `/p/cb` | LUD-06 pay callback; issues the mint invoice for the note the `comment` names, a hash or a `cp1` key (`h` is an older spelling for a hash) |
 | `/z/cb/<zap name>` | the zap callback; validates the kind 9734 and issues the invoice. A name with a `cx1` calls back at `/z/cb/<zap name>/<index>`, the index its payRequest advertised, so the invoice commits to exactly the metadata the payer was shown |
 | `/verify/<hash>` | LUD-21 verify, for mint invoices and melt payments |
-| `/w` | LUD-03 informational GET; accepts `k1` (a preimage, `ck1` or `cw1`, verified in full) or the non-disclosing LUD-25 `p` check (a bearer note's h or any `cp1`; `h` is its older name, still accepted); a live note carries `payLink` and its `cs1` as `sig` |
+| `/w` | LUD-03 informational GET; accepts `k1` (a preimage, `ck1` or `cw1`, verified in full) or the non-disclosing LUD-25 `p` check (a bearer note's h or any `cp1`; `h` is its older name, still accepted); a live note carries `payLink` and its `cs1` as `c` |
 | `/w/cb` | the mutating callback: melt, rotate, split, merge; inputs as preimages, `ck1`s or `cw1`s, outputs as `p1`/`p2` (a bearer note's h or a `cp1`), or their older names `h`/`h2` |
 | `POST /names` | claim a lightning address, authenticated by NIP-98 |
 | `/.well-known/nostr.json` | NIP-05 for the names this mint serves |

package/dist/server.js

@@ -97,13 +97,12 @@ export const createMoneyer = async (config, deps = {}) => {
     // LUD-25 offline verification: a cs1 over hex(Q) and the amount, for
     // every note, bearer notes included.
     const certify = (q, amountMsat) => encodeCs1WithAmount(amountMsat, hexToBytes(signer.sign(q, amountMsat)));
-    // LUD-25 names the certificate `c` (and `c2` for split change). The old
-    // `sig`/`sig2` go out alongside it until the wallets that read only those
-    // have moved on.
-    const certified = (field, q, amountMsat) => {
-        const cs1 = certify(q, amountMsat);
-        return field === 'c' ? { c: cs1, sig: cs1 } : { c2: cs1, sig2: cs1 };
-    };
+    // LUD-25 names the certificate `c` (and `c2` for split change). The
+    // `sig`/`sig2` that went out alongside them from 0.17.0 to 0.20.1 are
+    // gone: the draft never named them, and every wallet reads `c`.
+    const certified = (field, q, amountMsat) => ({
+        [field]: certify(q, amountMsat)
+    });
     // Every host this mint answers on. A spend's signature is bound to one
     // domain, and a note travels as a URL naming one host, so a signature
     // bound to any of this mint's own hosts is this mint's. Without a

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forgesworn/moneyer",
-  "version": "0.20.1",
+  "version": "0.21.0",
   "description": "An LNURLcash (LUD-25) mint - strikes Lightning bearer notes. Independent implementation, cln/lnd funding sources, SQLite, zero HTTP framework.",
   "author": "TheCryptoDonkey",
   "license": "MIT",