@unicitylabs/sphere-sdk 0.14.8 → 0.14.9-dev.1

package/dist/core/index.cjs

@@ -11416,6 +11416,15 @@ var ListStore = class {
     return await this.kv.get(this.storeKey) ?? [];
   }
 };
+function senderNametagOption(ownNametag) {
+  let nametag;
+  try {
+    nametag = ownNametag?.();
+  } catch {
+    return {};
+  }
+  return nametag === void 0 || nametag === "" ? {} : { senderNametag: nametag };
+}
 var DeliveryJournal = class extends ListStore {
   constructor(kv) {
     super(kv, STORE_KEYS.deliveryJournal, (e) => `${e.transferId}:${String(e.opIndex)}`);
@@ -11466,7 +11475,8 @@ var DeliveryJournal = class extends ListStore {
     try {
       await deps.delivery.deliver(entry.recipientPubkey, hexToBytes4(entry.blobHex), {
         transferId: entry.transferId,
-        ...entry.memo !== void 0 ? { memo: entry.memo } : {}
+        ...entry.memo !== void 0 ? { memo: entry.memo } : {},
+        ...senderNametagOption(deps.ownNametag)
       });
       await this.remove(entry.transferId, entry.opIndex);
       stats.delivered += 1;
@@ -11734,7 +11744,11 @@ var TransferMachine = class {
     const journaled = committed.filter((o) => o.error === void 0 && o.recipientBlob !== void 0);
     let pending = journaled.length < committed.length;
     if (journaled.length === 0) return pending;
-    const options = { transferId, ...memo !== void 0 ? { memo } : {} };
+    const options = {
+      transferId,
+      ...memo !== void 0 ? { memo } : {},
+      ...senderNametagOption(this.deps.ownNametag)
+    };
     if (await this.tryBatchDeposit(recipientPubkey, journaled, options)) return pending;
     for (const outcome of journaled) {
       const stillPending = await this.deliverOne(recipientPubkey, outcome, options);
@@ -12168,6 +12182,9 @@ var Converger = class {
     return {
       delivery: this.deps.delivery,
       now: () => this.deps.now(),
+      // sphere#487: a replayed leg carries the sender's name too — the machine
+      // deps hold the one live getter, so replay can never drift from a send.
+      ...this.deps.machineDeps.ownNametag !== void 0 ? { ownNametag: this.deps.machineDeps.ownNametag } : {},
       attention: (transferId, code, detail) => {
         this.deps.emit(
           "transfer:attention",
@@ -13811,6 +13828,9 @@ function buildMachineDeps(deps, hooks, historyStore) {
     decryptPayload: async (envelope) => JSON.parse(decryptField(deps.fieldKey, envelope)),
     signComplete: deps.signComplete,
     ownPubkey: hexToBytes4(deps.ownPubkey),
+    // sphere#487: the same live getter Requests uses — the delivery envelope is
+    // the recipient's ONLY source for the sender's Unicity ID.
+    ...deps.ownNametag !== void 0 ? { ownNametag: deps.ownNametag } : {},
     emit: deps.emit,
     now: deps.now ?? Date.now,
     recordHistory: async ({ transferId, payload, committedAmount }) => {
@@ -15287,10 +15307,14 @@ var WalletApiDeliveryPort = class {
       sha: bytesToHex3(sha256(bytes))
     };
   }
+  // sphere#487: the nametag is a per-call option and NOT port config — a
+  // construction-time copy would silently go stale on registration, and only a
+  // caller-supplied value is enforceable by the port contract suite (which any
+  // swapped DeliveryPort must pass).
   buildEnvelope(recipientPubkey, options) {
     const key = deriveDeliveryEncryptionKey(this.identity.privateKey, recipientPubkey);
     return encryptDeliveryBundle(key, {
-      senderNametag: options.senderNametag ?? this.identity.nametag,
+      senderNametag: options.senderNametag,
       memo: options.memo
     });
   }
@@ -18342,6 +18366,7 @@ var Sphere = class _Sphere {
         "INVALID_CONFIG"
       );
     }
+    const facadeAddressId = identity.directAddress === void 0 ? void 0 : getAddressId(identity.directAddress);
     const facade = composePaymentsV2({
       identity,
       composition: this._paymentsV2Composition,
@@ -18355,7 +18380,12 @@ var Sphere = class _Sphere {
         price: this._priceProvider,
         emit: (event, payload) => this.emitEvent(event, payload),
         resolvePeer: (identifier) => this._transport.resolve?.(identifier) ?? Promise.resolve(null),
-        nametag: () => this.getNametagForAddress()
+        // Scoped to THIS facade's address, never "whichever is active":
+        // switchToAddress moves _currentAddressIndex BEFORE stopping this
+        // vertical, so the argument-less getter would hand an in-flight
+        // deliver the NEXT address's Unicity ID — a name the sending key does
+        // not own (sphere#487 review).
+        nametag: () => this.getNametagForAddress(facadeAddressId)
       }
     });
     this._paymentsV2Active = { index, facade };