@forgesworn/moneyer 0.13.0 → 0.13.1

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 0.13.1 - 2026-09-11
+
+- A name's owner can set or clear its `cx1` while self-service registration
+  is closed. Closing registration stops new names; it no longer stops the
+  owner of an existing one, an operator name included, from choosing where
+  it pays. A request for a new name still gets the same 404.
+
 ## 0.13.0 - 2026-09-11
 
 - **Names that pay to the holder's own keys.** `POST /names` takes a `cx1`,

package/README.md

@@ -561,6 +561,9 @@ and spends with its own `ck1`. A wallet that only knows note URLs sees no
 branch.
 
 `"cx1": null` clears the branch and puts the name back on the custodial path.
+This works while registration is closed too: closing it stops new names, not
+the owner of one choosing where it pays, including a name the operator set up
+in `MONEYER_ZAP_NAMES`.
 Sending a new branch starts it at index 0; sending the same one again keeps
 its place. Zap receipts are unchanged.
 

package/dist/names.js

@@ -94,8 +94,6 @@ export const isRefusal = (result) => 'reason' in result;
 // the same name at once.
 export const registerName = (args) => {
     const { store, pubkey, priceMsat } = args;
-    if (priceMsat === undefined)
-        return refuse('This mint is not registering names.', 404);
     const raw = typeof args.body.name === 'string' ? args.body.name.trim().toLowerCase() : '';
     if (!NAME_RULE.test(raw)) {
         return refuse('A name is 3 to 32 characters of a-z, 0-9, dot, dash or underscore, starting with a letter or digit.', 400);
@@ -124,6 +122,10 @@ export const registerName = (args) => {
         }
         return refuse('That name is taken.', 409);
     }
+    // Checked after the owner's update above: closing registration stops new
+    // names, not a holder choosing where their own name pays.
+    if (priceMsat === undefined)
+        return refuse('This mint is not registering names.', 404);
     let paidMsat = 0;
     let noteId;
     if (priceMsat === 0) {

package/dist/server.js

@@ -449,7 +449,10 @@ export const createMoneyer = async (config, deps = {}) => {
         // a POST because it creates something, and it is authenticated by
         // NIP-98 rather than by anything this mint has to store.
         if (requestUrl.pathname === '/names' && req.method === 'POST') {
-            if (config.namePriceMsat === undefined)
+            // Closed registration still lets a name's owner set where it pays;
+            // registerName refuses a new name there. Without zaps there are no
+            // names at all.
+            if (!zap)
                 return fail('This mint is not registering names.', 404);
             const body = await readBody(req);
             if (body === null)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forgesworn/moneyer",
-  "version": "0.13.0",
+  "version": "0.13.1",
   "description": "An LNURLcash (LUD-25) mint - strikes Lightning bearer notes. Independent implementation, cln/lnd funding sources, SQLite, zero HTTP framework.",
   "author": "TheCryptoDonkey",
   "license": "MIT",