@forgesworn/moneyer 0.9.0 → 0.9.1

package/CHANGELOG.md

@@ -2,6 +2,14 @@
 
 ## Unreleased
 
+## 0.9.1 - 2026-09-01
+
+**Fix: the LUD-25 informational GET now accepts `h=sha256(k1)`.** A
+receipt-aware wallet can verify that a bound mint payment created its note
+without disclosing the bearer secret. The hash-only reply deliberately omits
+`k1`; lazy settlement works on this path as it does on the secret-bearing
+path, and conflicting `k1` and `h` parameters are refused.
+
 ## 0.9.0 - 2026-08-31
 
 **LUD-25 comment-bound minting is now unconditional.** Every mint quote must

package/README.md

@@ -576,7 +576,7 @@ clearnet.
 | `/p/cb` | LUD-06 pay callback; issues the mint invoice, and takes an optional `h` naming the note |
 | `/z/cb/<zap name>` | the zap callback; validates the kind 9734 and issues the invoice |
 | `/verify/<hash>` | LUD-21 verify, for mint invoices and melt payments |
-| `/w` | LUD-03 informational GET; a live note also carries `payLink`, the route back to this mint's discovery document |
+| `/w` | LUD-03 informational GET; accepts `k1` or the non-disclosing LUD-25 `h=sha256(k1)` check; a live note also carries `payLink` |
 | `/w/cb` | the mutating callback: melt, rotate, split, merge |
 | `POST /names` | claim a lightning address, authenticated by NIP-98 |
 | `/.well-known/nostr.json` | NIP-05 for the names this mint serves |

package/dist/server.js

@@ -140,8 +140,7 @@ export const createMoneyer = async (config, deps = {}) => {
     // A note whose id we do not know yet may be a settled mint invoice whose
     // claim simply has not been observed: settle it lazily against the
     // funding source, which is what makes paying an invoice mint the note.
-    const resolveNote = async (k1) => {
-        const id = hashK1(k1);
+    const resolveNoteId = async (id) => {
         const note = store.noteById(id);
         if (note)
             return note;
@@ -161,6 +160,7 @@ export const createMoneyer = async (config, deps = {}) => {
         }
         return null;
     };
+    const resolveNote = async (k1) => resolveNoteId(hashK1(k1));
     // ---- transparency: what the mint owes, and what the node holds ----
     //
     // Cached for 30 seconds so a public endpoint cannot be turned into a
@@ -754,10 +754,22 @@ export const createMoneyer = async (config, deps = {}) => {
         }
         // ---- LUD-03 informational GET ----
         if (requestUrl.pathname === '/w') {
+            const hasK1 = q.has('k1');
+            const hasH = q.has('h');
             const k1 = q.get('k1')?.toLowerCase();
-            if (!k1 || !HEX32.test(k1))
+            const h = q.get('h')?.toLowerCase();
+            if ((!hasK1 && !hasH) ||
+                (hasK1 && (!k1 || !HEX32.test(k1))) ||
+                (hasH && (!h || !HEX32.test(h)))) {
+                return fail('Unknown note.');
+            }
+            // LUD-25's hash-only check lets a wallet prove that the note it just
+            // bought exists without sending the bearer secret to the service a
+            // second time. If both spellings are present, they must name the same
+            // note; choosing one would make a malformed URL an ownership oracle.
+            if (k1 && h && hashK1(k1) !== h)
                 return fail('Unknown note.');
-            const note = await resolveNote(k1);
+            const note = h ? await resolveNoteId(h) : await resolveNote(k1);
             if (!note)
                 return fail('Unknown note.');
             if (note.state === 'burned')
@@ -780,7 +792,10 @@ export const createMoneyer = async (config, deps = {}) => {
             return send({
                 tag: 'withdrawRequest',
                 callback: `${origin}/w/cb`,
-                k1,
+                // A hash-only query deliberately does not echo or invent k1. The
+                // wallet already has the secret; this endpoint only confirms the
+                // mint's record at sha256(k1).
+                ...(k1 ? { k1 } : {}),
                 minWithdrawable: wholeSatFloor(note.amountMsat),
                 maxWithdrawable: note.amountMsat,
                 defaultDescription: config.description,

package/llms.txt

@@ -82,5 +82,5 @@ NoteStore - SQLite store; notes by sha256(k1), never secrets
 /.well-known/lnurlw/{user}  LUD-25 mint address (experimental)
 /p/cb                       LUD-06 pay callback (optional h names the note)
 /verify/{payment_hash}      LUD-21 verify (mint invoices AND melt payments)
-/w                          LUD-03 informational GET
+/w                          LUD-03 informational GET by k1 or hash-only h
 /w/cb                       melt / rotate / split / merge

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forgesworn/moneyer",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "description": "An LNURLcash (LUD-25) mint - strikes Lightning bearer notes. Independent implementation, cln/lnd funding sources, SQLite, zero HTTP framework.",
   "author": "TheCryptoDonkey",
   "license": "MIT",