// Gift records must not follow you from one wallet into the next. // // The records live under a seed-derived localStorage key, so on disk they were // always separate. The leak was in memory: giftRecords() caches the parsed blob // on the wallet object, the app runs a single Wallet for its whole lifetime, // and load() never dropped that cache. Switch wallets and the old wallet's // gifts were still sitting there — every one of them rendering as "claimed", // since none of their outpoints are live in the new wallet. import { Wallet } from '../src/wallet.js'; import { installGiftWallet } from '../src/features/gifts-wallet.js'; const store = new Map(); globalThis.localStorage = { getItem: (k) => (store.has(k) ? store.get(k) : null), setItem: (k, v) => store.set(k, String(v)), removeItem: (k) => store.delete(k), }; const A = 'abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon abandon about'; const B = 'legal winner thank year wave sausage worth useful legal winner thank yellow'; const wallet = new Wallet(); installGiftWallet(wallet); let failures = 0; const check = (name, ok, detail) => { console.log(`${ok ? 'ok ' : 'FAIL'} ${name}${ok || !detail ? '' : ` — ${detail}`}`); if (!ok) failures++; }; // Wallet A creates a gift and its record is cached in memory. wallet.load({ mnemonic: A }); wallet.giftRecords()['g1'] = { id: 'g1', amount: 2100, created: Date.now() - 28 * 864e5, outpoints: ['deadbeef:0'], }; wallet._saveGiftRecords(); check('wallet A sees its own gift', Object.keys(wallet.giftRecords()).length === 1); // Switch to a brand new wallet B. wallet.load({ mnemonic: B }); const leaked = Object.keys(wallet.giftRecords()); check('wallet B starts with no gift records', leaked.length === 0, `saw ${JSON.stringify(leaked)}`); // And B must not write A's records under its own key. wallet.giftRecords()['g2'] = { id: 'g2', amount: 500, created: Date.now(), outpoints: ['cafe:1'] }; wallet._saveGiftRecords(); wallet.load({ mnemonic: A }); const backInA = Object.keys(wallet.giftRecords()); check('wallet A is untouched by B', backInA.length === 1 && backInA[0] === 'g1', `saw ${JSON.stringify(backInA)}`); wallet.load({ mnemonic: B }); const backInB = Object.keys(wallet.giftRecords()); check('wallet B kept only its own', backInB.length === 1 && backInB[0] === 'g2', `saw ${JSON.stringify(backInB)}`); // Records an older build already wrote under the wrong key are forgotten on // sight: their funding tx isn't in this wallet's history. wallet.load({ mnemonic: B }); store.set(wallet._giftRecordsKey(), JSON.stringify({ 'aa:0': { id: 'aa:0', amount: 2100, created: Date.now() - 28 * 864e5, outpoints: ['aa:0'] }, 'bb:0': { id: 'bb:0', amount: 2100, created: Date.now() - 28 * 864e5, outpoints: ['bb:0'] }, })); wallet.loaded = true; wallet.txs = []; check('foreign records are dropped from history', wallet.claimedGifts().length === 0); check('and purged from storage', JSON.parse(store.get(wallet._giftRecordsKey())) && !Object.keys(JSON.parse(store.get(wallet._giftRecordsKey()))).length); // But a gift this wallet really did issue still shows. wallet.load({ mnemonic: B }); store.set(wallet._giftRecordsKey(), JSON.stringify({ 'cc:0': { id: 'cc:0', amount: 2100, created: Date.now() - 864e5, outpoints: ['cc:0'] }, })); wallet.loaded = true; wallet.txs = [{ txid: 'cc' }]; wallet.utxos = []; check('our own claimed gift survives', wallet.claimedGifts().length === 1); console.log(failures ? `\n${failures} failing` : '\nall passing'); process.exit(failures ? 1 : 0); { color: #000000; background-color: #ffffc0; padding-left: 5px; padding-right: 5px; } .highlight .hll { background-color: #ffffcc } .highlight .c { color: #888 } /* Comment */ .highlight .err { color: #A61717; background-color: #E3D2D2 } /* Error */ .highlight .k { color: #080; font-weight: bold } /* Keyword */ .highlight .ch { color: #888 } /* Comment.Hashbang */ .highlight .cm { color: #888 } /* Comment.Multiline */ .highlight .cp { color: #C00; font-weight: bold } /* Comment.Preproc */ .highlight .cpf { color: #888 } /* Comment.PreprocFile */ .highlight .c1 { color: #888 } /* Comment.Single */ .highlight .cs { color: #C00; font-weight: bold; background-color: #FFF0F0 } /* Comment.Special */ .highlight .gd { color: #000; background-color: #FDD } /* Generic.Deleted */ .highlight .ge { font-style: italic } /* Generic.Emph */ .highlight .ges { font-weight: bold; font-style: italic } /* Generic.EmphStrong */ .highlight .gr { color: #A00 } /* Generic.Error */ .highlight .gh { color: #333 } /* Generic.Heading */ .highlight .gi { color: #000; background-color: #DFD } /* Generic.Inserted */ .highlight .go { color: #888 } /* Generic.Output */ .highlight .gp { color: #555 } /* Generic.Prompt */ .highlight .gs { font-weight: bold } /* Generic.Strong */ .highlight .gu { color: #666 } /* Generic.Subheading */ .highlight .gt { color: #A00 } /* Generic.Traceback */ .highlight .kc { color: #080; font-weight: bold } /* Keyword.Constant */ .highlight .kd { color: #080; font-weight: bold } /* Keyword.Declaration */ .highlight .kn { color: #080; font-weight: bold } /* Keyword.Namespace */ .highlight .kp { color: #080 } /* Keyword.Pseudo */ .highlight .kr { color: #080; font-weight: bold } /* Keyword.Reserved */ .highlight .kt { color: #888; font-weight: bold } /* Keyword.Type */ .highlight .m { color: #00D; font-weight: bold } /* Literal.Number */ .highlight .s { color: #D20; background-color: #FFF0F0 } /* Literal.String */ .highlight .na { color: #369 } /* Name.Attribute */ .highlight .nb { color: #038 } /* Name.Builtin */ .highlight .nc { color: #B06; font-weight: bold } /* Name.Class */ .highlight .no { color: #036; font-weight: bold } /* Name.Constant */ .highlight .nd { color: #555 } /* Name.Decorator */ .highlight .ne { color: #B06; font-weight: bold } /* Name.Exception */ .highlight .nf { color: #06B; font-weight: bold } /* Name.Function */ .highlight .nl { color: #369; font-style: italic } /* Name.Label */ .highlight .nn { color: #B06; font-weight: bold } /* Name.Namespace */ .highlight .py { color: #369; font-weight: bold } /* Name.Property */ .highlight .nt { color: #B06; font-weight: bold } /* Name.Tag */ .highlight .nv { color: #369 } /* Name.Variable */ .highlight .ow { color: #080 } /* Operator.Word */ .highlight .w { color: #BBB } /* Text.Whitespace */ .highlight .mb { color: #00D; font-weight: bold } /* Literal.Number.Bin */ .highlight .mf { color: #00D; font-weight: bold } /* Literal.Number.Float */ .highlight .mh { color: #00D; font-weight: bold } /* Literal.Number.Hex */ .highlight .mi { color: #00D; font-weight: bold } /* Literal.Number.Integer */ .highlight .mo { color: #00D; font-weight: bold } /* Literal.Number.Oct */ .highlight .sa { color: #D20; background-color: #FFF0F0 } /* Literal.String.Affix */ .highlight .sb { color: #D20; background-color: #FFF0F0 } /* Literal.String.Backtick */ .highlight .sc { color: #D20; background-color: #FFF0F0 } /* Literal.String.Char */ .highlight .dl { color: #D20; background-color: #FFF0F0 } /* Literal.String.Delimiter */ .highlight .sd { color: #D20; background-color: #FFF0F0 } /* Literal.String.Doc */ .highlight .s2 { color: #D20; background-color: #FFF0F0 } /* Literal.String.Double */ .highlight .se { color: #04D; background-color: #FFF0F0 } /* Literal.String.Escape */ .highlight .sh { color: #D20; background-color: #FFF0F0 } /* Literal.String.Heredoc */ .highlight .si { color: #33B; background-color: #FFF0F0 } /* Literal.String.Interpol */ .highlight .sx { color: #2B2; background-color: #F0FFF0 } /* Literal.String.Other */ .highlight .sr { color: #080; background-color: #FFF0FF } /* Literal.String.Regex */ .highlight .s1 { color: #D20; background-color: #FFF0F0 } /* Literal.String.Single */ .highlight .ss { color: #A60; background-color: #FFF0F0 } /* Literal.String.Symbol */ .highlight .bp { color: #038 } /* Name.Builtin.Pseudo */ .highlight .fm { color: #06B; font-weight: bold } /* Name.Function.Magic */ .highlight .vc { color: #369 } /* Name.Variable.Class */ .highlight .vg { color: #D70 } /* Name.Variable.Global */ .highlight .vi { color: #33B } /* Name.Variable.Instance */ .highlight .vm { color: #369 } /* Name.Variable.Magic */ .highlight .il { color: #00D; font-weight: bold } /* Literal.Number.Integer.Long */
// Build-time flags. This module ships its defaults (a production build); the
// deploy hook builds the staging webroot with COINOS_TARGET=staging and build.js
// swaps these values in the bundle (same mechanism as features/index.js) — so
// staging behavior lives on master instead of a perpetually-rebased branch.
//
// STAGING: new profiles default to Mutinynet (Settings can still switch to
// mainnet), and the header logo wears a staging stamp so nobody mistakes
// which site their sats are on.
export const STAGING = false;