@multiplatform.one/web3 7.82.5 → 7.83.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@multiplatform.one/web3",
-  "version": "7.82.5",
+  "version": "7.83.0",
   "description": "Web3 wallet integration for multiplatform.one ecosystem with ConnectKit and wagmi",
   "keywords": [
     "connectkit",
@@ -120,10 +120,10 @@
     "@aave/account": "^0.2.1",
     "@coinbase/wallet-sdk": "^4.4.0",
     "@metamask/connect-evm": "^2.1.1",
-    "@multiplatform.one/connectkit": "^7.82.5",
-    "@multiplatform.one/gpg": "^7.82.5",
-    "@multiplatform.one/platform": "^7.82.5",
-    "@multiplatform.one/theme": "^7.82.5",
+    "@multiplatform.one/connectkit": "^7.83.0",
+    "@multiplatform.one/gpg": "^7.83.0",
+    "@multiplatform.one/platform": "^7.83.0",
+    "@multiplatform.one/theme": "^7.83.0",
     "@noble/ciphers": "^1.3.0",
     "@noble/curves": "^1.9.7",
     "@phosphor-icons/react": "^2.1.10",
@@ -147,7 +147,7 @@
     "wagmi": "^3.7.1"
   },
   "devDependencies": {
-    "@multiplatform.one/config": "7.82.5",
+    "@multiplatform.one/config": "7.83.0",
     "@tamagui/build": "2.7.6",
     "@tanstack/react-query": "^5.104.3",
     "@testing-library/jest-dom": "^7.0.1",

package/src/connectkit/connectors/metaMaskConnectConnector.spec.ts

@@ -390,6 +390,63 @@ describe("metaMaskConnect under wagmi", () => {
     );
   });
 
+  it("refuses a transaction and a typed signature with 4901 while the desktop extension sits on a chain the app does not list", async () => {
+    const codes = (error: unknown) => {
+      const found: unknown[] = [];
+      for (let at = error as { code?: unknown; cause?: unknown } | undefined; at; ) {
+        found.push(at.code);
+        at = at.cause as typeof at;
+      }
+      return found;
+    };
+    const provider = {
+      selectedChainId: "0x2105" as string | undefined,
+      request: vi.fn(async ({ method }: { method: string }) =>
+        method === "eth_chainId" ? provider.selectedChainId : "0xabc",
+      ),
+    };
+    client.getChainId.mockImplementation(() => provider.selectedChainId!);
+    client.getProvider.mockReturnValue(provider as never);
+    client.connect.mockImplementationOnce(async () => ({ accounts: [first], chainId: "0x1" }));
+    const config = createConfig({
+      chains: [polygon, mainnet],
+      connectors: [metaMaskConnect({ dapp: { name: "test", url: "https://example.test" } })],
+      transports: { [polygon.id]: http(), [mainnet.id]: http() },
+      multiInjectedProviderDiscovery: false,
+      storage: null,
+    });
+    await connect(config, { connector: config.connectors[0]! });
+    (await clientEvents()).chainChanged("0x2105");
+    const wrapped = (await config.connectors[0]!.getProvider()) as {
+      request(args: { method: string; params?: unknown }): Promise<unknown>;
+    };
+    const typedData = {
+      domain: { name: "t", chainId: base.id },
+      types: { Mail: [{ name: "body", type: "string" }] },
+      primaryType: "Mail",
+      message: { body: "x" },
+    } as const;
+
+    for (const method of [
+      "eth_sendTransaction",
+      "eth_signTypedData",
+      "eth_signTypedData_v3",
+      "eth_signTypedData_v4",
+    ])
+      await expect(wrapped.request({ method, params: [first, "{}"] })).rejects.toMatchObject({
+        code: 4901,
+      });
+    expect(
+      codes(await sendTransaction(config, { to: second, value: 1n, gas: 21000n }).catch((e) => e)),
+    ).toContain(4901);
+    expect(codes(await signTypedData(config, typedData).catch((e) => e))).toContain(4901);
+
+    const sent = provider.request.mock.calls.map(([call]) => call.method);
+    expect(sent).not.toContain("eth_sendTransaction");
+    expect(sent.filter((method) => method.startsWith("eth_signTypedData"))).toEqual([]);
+    expect(provider.selectedChainId).toBe("0x2105");
+  });
+
   it("sends no transaction or typed signature on mainnet for an app that does not list it", async () => {
     const request = vi.fn(async ({ method }: { method: string }) =>
       method === "eth_chainId" ? "0x1" : "0xabc",