@forgesworn/moneyer 0.13.0 → 0.13.2

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## 0.13.2 - 2026-09-11
+
+- An operator name that changes owner drops the branch the previous owner
+  set. `MONEYER_ZAP_NAMES` re-points a name at every startup, and until now
+  the old owner's `cx1` survived it, so the name went on paying the previous
+  owner's keys. The same owner keeps their branch and its index across a
+  restart, as before.
+
+## 0.13.1 - 2026-09-11
+
+- A name's owner can set or clear its `cx1` while self-service registration
+  is closed. Closing registration stops new names; it no longer stops the
+  owner of an existing one, an operator name included, from choosing where
+  it pays. A request for a new name still gets the same 404.
+
 ## 0.13.0 - 2026-09-11
 
 - **Names that pay to the holder's own keys.** `POST /names` takes a `cx1`,

package/README.md

@@ -561,6 +561,9 @@ and spends with its own `ck1`. A wallet that only knows note URLs sees no
 branch.
 
 `"cx1": null` clears the branch and puts the name back on the custodial path.
+This works while registration is closed too: closing it stops new names, not
+the owner of one choosing where it pays, including a name the operator set up
+in `MONEYER_ZAP_NAMES`.
 Sending a new branch starts it at index 0; sending the same one again keeps
 its place. Zap receipts are unchanged.
 

package/dist/names.js

@@ -94,8 +94,6 @@ export const isRefusal = (result) => 'reason' in result;
 // the same name at once.
 export const registerName = (args) => {
     const { store, pubkey, priceMsat } = args;
-    if (priceMsat === undefined)
-        return refuse('This mint is not registering names.', 404);
     const raw = typeof args.body.name === 'string' ? args.body.name.trim().toLowerCase() : '';
     if (!NAME_RULE.test(raw)) {
         return refuse('A name is 3 to 32 characters of a-z, 0-9, dot, dash or underscore, starting with a letter or digit.', 400);
@@ -124,6 +122,10 @@ export const registerName = (args) => {
         }
         return refuse('That name is taken.', 409);
     }
+    // Checked after the owner's update above: closing registration stops new
+    // names, not a holder choosing where their own name pays.
+    if (priceMsat === undefined)
+        return refuse('This mint is not registering names.', 404);
     let paidMsat = 0;
     let noteId;
     if (priceMsat === 0) {

package/dist/server.js

@@ -449,7 +449,10 @@ export const createMoneyer = async (config, deps = {}) => {
         // a POST because it creates something, and it is authenticated by
         // NIP-98 rather than by anything this mint has to store.
         if (requestUrl.pathname === '/names' && req.method === 'POST') {
-            if (config.namePriceMsat === undefined)
+            // Closed registration still lets a name's owner set where it pays;
+            // registerName refuses a new name there. Without zaps there are no
+            // names at all.
+            if (!zap)
                 return fail('This mint is not registering names.', 404);
             const body = await readBody(req);
             if (body === null)

package/dist/store.js

@@ -531,10 +531,18 @@ export class NoteStore {
     // The operator's own names, re-applied at every startup. Idempotent, and
     // the environment wins: it is the operator's mint, and a name they put
     // in the environment is one they mean to have.
+    //
+    // A branch the owner set survives a restart, but not a change of owner:
+    // it is the previous owner's keys, and keeping it would go on paying the
+    // name to someone the operator just took it from.
     putOperatorZapName(name, pubkey) {
         this.db
             .prepare(`INSERT INTO zap_names (name, pubkey, created_at, paid_msat, source) VALUES (?, ?, ?, 0, 'env')
-         ON CONFLICT(name) DO UPDATE SET pubkey = excluded.pubkey, source = 'env'`)
+         ON CONFLICT(name) DO UPDATE SET
+           cx1 = CASE WHEN zap_names.pubkey = excluded.pubkey THEN zap_names.cx1 ELSE NULL END,
+           next_index = CASE WHEN zap_names.pubkey = excluded.pubkey THEN zap_names.next_index ELSE 0 END,
+           pubkey = excluded.pubkey,
+           source = 'env'`)
             .run(name.toLowerCase(), pubkey, Date.now());
     }
     // A self-service registration: burn the note that paid for the name and

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@forgesworn/moneyer",
-  "version": "0.13.0",
+  "version": "0.13.2",
   "description": "An LNURLcash (LUD-25) mint - strikes Lightning bearer notes. Independent implementation, cln/lnd funding sources, SQLite, zero HTTP framework.",
   "author": "TheCryptoDonkey",
   "license": "MIT",