@1sat/wallet-toolbox 0.0.57 → 0.0.58

package/dist/api/ordinals/index.js

@@ -378,7 +378,18 @@ export const transferOrdinals = {
                 if (!ordinal.customInstructions) {
                     return { error: `missing-custom-instructions-for-${ordinal.outpoint}` };
                 }
-                const { protocolID, keyID } = JSON.parse(ordinal.customInstructions);
+                // Parse and validate customInstructions
+                let parsed;
+                try {
+                    parsed = JSON.parse(ordinal.customInstructions);
+                }
+                catch {
+                    return { error: `invalid-custom-instructions-not-json-for-${ordinal.outpoint}` };
+                }
+                const { protocolID, keyID } = parsed;
+                if (!protocolID || !keyID) {
+                    return { error: `invalid-custom-instructions-missing-protocol-or-key-for-${ordinal.outpoint}` };
+                }
                 console.log(`[transferOrdinals] Input ${i}: protocolID=${JSON.stringify(protocolID)}, keyID=${keyID}`);
                 const unlocking = await signP2PKHInput(ctx, tx, i, protocolID, keyID);
                 if (typeof unlocking !== "string")

package/dist/wallet/factory.d.ts

@@ -28,6 +28,8 @@ export interface WebWalletConfig {
     };
     /** Remote storage URL. If provided, attempts to connect for cloud backup. */
     remoteStorageUrl?: string;
+    /** Device ID for sync isolation. Each device should have a unique ID to prevent sync corruption. */
+    deviceId?: string;
     /** Callback when a transaction is broadcasted (called after remote sync if connected) */
     onTransactionBroadcasted?: (txid: string) => void;
     /** Callback when a transaction is proven (called after remote sync if connected) */

package/dist/wallet/factory.js

@@ -89,7 +89,8 @@ export async function createWebWallet(config) {
         try {
             // Create StorageClient with the REAL wallet (not a temp wallet)
             // StorageClient captures the wallet at construction for signing requests
-            remoteClient = new StorageClient(underlyingWallet, config.remoteStorageUrl);
+            // deviceId isolates sync state per device to prevent ID mapping corruption
+            remoteClient = new StorageClient(underlyingWallet, config.remoteStorageUrl, config.deviceId);
             const timeoutPromise = new Promise((_, reject) => setTimeout(() => reject(new Error("Remote storage connection timeout")), DEFAULT_REMOTE_STORAGE_TIMEOUT));
             await Promise.race([remoteClient.makeAvailable(), timeoutPromise]);
             // Add remote storage to the existing storage manager using public API

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@1sat/wallet-toolbox",
-  "version": "0.0.57",
+  "version": "0.0.58",
   "description": "BSV wallet library extending @bsv/wallet-toolbox with 1Sat Ordinals protocol support",
   "author": "1Sat Team",
   "license": "MIT",
@@ -38,14 +38,14 @@
   },
   "dependencies": {
     "@1sat/wallet-toolbox": "0.0.52",
-    "@bopen-io/templates": "^1.1.6",
-    "@bsv/sdk": "^1.10.1",
+    "@bopen-io/templates": "^1.1.7",
+    "@bsv/sdk": "^1.10.2",
     "@msgpack/msgpack": "^3.1.3",
     "buffer": "^6.0.3",
     "fflate": "^0.8.2"
   },
   "peerDependencies": {
-    "@bsv/wallet-toolbox-mobile": "npm:@bopen-io/wallet-toolbox-mobile@^1.7.20-idb-fix.30"
+    "@bsv/wallet-toolbox-mobile": "npm:@bopen-io/wallet-toolbox-mobile@^1.7.22-idb-fix.1"
   },
   "peerDependenciesMeta": {
     "@bsv/wallet-toolbox-mobile": {
@@ -54,8 +54,8 @@
   },
   "devDependencies": {
     "@biomejs/biome": "^1.9.4",
-    "@bsv/wallet-toolbox": "npm:@bopen-io/wallet-toolbox@^1.7.20-idb-fix.30",
-    "@bsv/wallet-toolbox-mobile": "npm:@bopen-io/wallet-toolbox-mobile@^1.7.20-idb-fix.30",
+    "@bsv/wallet-toolbox": "npm:@bopen-io/wallet-toolbox@^1.7.22-idb-fix.1",
+    "@bsv/wallet-toolbox-mobile": "npm:@bopen-io/wallet-toolbox-mobile@^1.7.22-idb-fix.1",
     "@types/bun": "^1.3.4",
     "@types/chrome": "^0.1.32",
     "typescript": "^5.9.3"