@forgesworn/moneyer 0.3.2 → 0.3.3

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Changelog
 
+## [0.3.3] - 2026-08-22
+
+- **Refusals are logged, so an operator can see why a wallet is failing.**
+  A holder reported "notes already spent" on every melt and the journal for
+  that whole day carried startup banners and one invoice sweep - nothing to
+  compare the report against. Refusals now log the method, the path and the
+  reason. Never the query string, because a note URL carries the k1 and log
+  files travel; and never the informational GET, which a single restore
+  walks twenty-odd unknown indexes of by design.
+
 ## [0.3.2] - 2026-08-22
 
 - **A note with a melt in flight is no longer advertised as withdrawable.**

package/dist/server.js

@@ -312,7 +312,20 @@ export const createMoneyer = async (config, deps = {}) => {
             });
             res.end(JSON.stringify(body));
         };
-        const fail = (reason, status = 200) => send({ status: 'ERROR', reason }, status);
+        // Refusals go to the operator's log, because a mint that refuses in
+        // silence cannot be debugged from the outside: a wallet shows its user
+        // "already spent" and the operator has nothing at all to compare it to.
+        //
+        // The PATHNAME only, never the query string: a note URL carries the k1,
+        // and a k1 is the money. And never the informational GET, which a
+        // single restore walks twenty-odd unknown indexes of by design - that
+        // is not news, and burying the rare refusals under it defeats the point.
+        const fail = (reason, status = 200) => {
+            if (requestUrl.pathname !== '/w') {
+                log(`refused ${req.method ?? 'GET'} ${requestUrl.pathname}: ${reason}`);
+            }
+            send({ status: 'ERROR', reason }, status);
+        };
         const knownUser = (user) => user === config.username || user === '_';
         // ---- the mint's face ----
         if (requestUrl.pathname === '/' && (req.method === 'GET' || req.method === 'HEAD')) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forgesworn/moneyer",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "An LNURLcash (LUD-25) mint - strikes Lightning bearer notes. Independent implementation, cln/lnd funding sources, SQLite, zero HTTP framework.",
   "author": "TheCryptoDonkey",
   "license": "MIT",