@1sat/connect 0.0.48 → 0.0.49

package/dist/index.js

@@ -100267,6 +100267,9 @@ class LocalWalletPermissionsManager extends import_index_client.WalletPermission
     return super.bindCallback(eventName, wrapped);
   }
   async ensureProtocolPermission(args) {
+    if (this.isAdminProtocolUpstream(args.protocolID)) {
+      return super.ensureProtocolPermission(args);
+    }
     const counterparty = args.protocolID[0] === 1 ? "" : args.counterparty ?? "self";
     const key = {
       type: "protocol",
@@ -100281,6 +100284,9 @@ class LocalWalletPermissionsManager extends import_index_client.WalletPermission
     return super.ensureProtocolPermission(args);
   }
   async ensureBasketAccess(args) {
+    if (this.isAdminBasketUpstream(args.basket)) {
+      return super.ensureBasketAccess(args);
+    }
     const key = {
       type: "basket",
       originator: normalizeOriginator(args.originator),
@@ -100318,6 +100324,20 @@ class LocalWalletPermissionsManager extends import_index_client.WalletPermission
     const grant = await this.permissionStore.findGrant(key);
     return !!grant && !isExpired(grant.expiry);
   }
+  isAdminBasketUpstream(basket) {
+    const fn = this.isAdminBasket;
+    if (typeof fn !== "function") {
+      throw new Error("LocalWalletPermissionsManager: super.isAdminBasket is unavailable; admin-basket checks would silently bypass");
+    }
+    return fn.call(this, basket);
+  }
+  isAdminProtocolUpstream(proto) {
+    const fn = this.isAdminProtocol;
+    if (typeof fn !== "function") {
+      throw new Error("LocalWalletPermissionsManager: super.isAdminProtocol is unavailable; admin-protocol checks would silently bypass");
+    }
+    return fn.call(this, proto);
+  }
   async grantPermission(params) {
     const request3 = this.pendingSingle.get(params.requestID);
     if (request3) {
@@ -100360,6 +100380,8 @@ class LocalWalletPermissionsManager extends import_index_client.WalletPermission
       for (const p of params.granted.protocolPermissions ?? []) {
         if (p.counterparty === "")
           continue;
+        if (this.isAdminProtocolUpstream(p.protocolID))
+          continue;
         const level = p.protocolID[0];
         const counterparty = level === 1 ? "" : p.counterparty ?? "self";
         await this.permissionStore.putGrant({
@@ -100377,6 +100399,8 @@ class LocalWalletPermissionsManager extends import_index_client.WalletPermission
         });
       }
       for (const b of params.granted.basketAccess ?? []) {
+        if (this.isAdminBasketUpstream(b.basket))
+          continue;
         await this.permissionStore.putGrant({
           key: { type: "basket", originator, basket: b.basket },
           expiry,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@1sat/connect",
-  "version": "0.0.48",
+  "version": "0.0.49",
   "description": "Connection layer for 1Sat wallet - popup flow, events, session management",
   "type": "module",
   "main": "./dist/index.js",
@@ -28,7 +28,7 @@
   ],
   "license": "MIT",
   "dependencies": {
-    "@1sat/wallet": "0.0.62",
+    "@1sat/wallet": "0.0.63",
     "@sigma-auth/better-auth-plugin": "^0.0.84",
     "better-auth": "^1.5.4",
     "eventemitter3": "^5.0.1"