From 4d40a3f2ad7048ce52c85388b175f06487603897 Mon Sep 17 00:00:00 2001
From: ghzhost <patricknasci@ghzhost.com>
Date: Fri, 21 Aug 2026 16:30:46 +0000
Subject: [PATCH] fix(sponsor-wallet): align live error status, cross-tab
 wallet logout and address reconciliation (#269, #270, #283)

---
 src/app/connect/ConnectPanel.tsx   | 24 ++++++++++++++++++++----
 src/app/dashboard/sponsor/page.tsx |  2 +-
 src/context/WalletContext.tsx      |  8 ++++++++
 3 files changed, 29 insertions(+), 5 deletions(-)

diff --git a/src/app/connect/ConnectPanel.tsx b/src/app/connect/ConnectPanel.tsx
index 5fe2f77..f6706d1 100644
--- a/src/app/connect/ConnectPanel.tsx
+++ b/src/app/connect/ConnectPanel.tsx
@@ -1,6 +1,6 @@
 "use client";
 
-import { Code2, Wallet as WalletIcon, CheckCircle2 } from "lucide-react";
+import { Code2, Wallet as WalletIcon, CheckCircle2, AlertTriangle } from "lucide-react";
 import { Button } from "@/components/ui/Button";
 import { GITHUB_OAUTH_URL } from "@/lib/config";
 import { useAuth } from "@/context/AuthContext";
@@ -10,6 +10,9 @@ export function ConnectPanel() {
   const { user } = useAuth();
   const { address, network, connecting, error, connect } = useWallet();
 
+  const addressMismatch =
+    Boolean(user?.stellarAddress && address && user.stellarAddress !== address);
+
   return (
     <div className="mx-auto max-w-lg space-y-6 px-6 py-16">
       <div>
@@ -62,9 +65,22 @@ export function ConnectPanel() {
           </div>
         </div>
         {address ? (
-          <div className="mt-4 flex items-center gap-2 rounded-lg bg-emerald-50 px-4 py-3 text-sm text-emerald-700 ring-1 ring-inset ring-emerald-200">
-            <CheckCircle2 className="h-4 w-4" />
-            Connected: {address.slice(0, 4)}...{address.slice(-4)} ({network})
+          <div className="space-y-3 mt-4">
+            <div className="flex items-center gap-2 rounded-lg bg-emerald-50 px-4 py-3 text-sm text-emerald-700 ring-1 ring-inset ring-emerald-200">
+              <CheckCircle2 className="h-4 w-4" />
+              Connected: {address.slice(0, 4)}...{address.slice(-4)} ({network})
+            </div>
+            {addressMismatch && (
+              <div className="flex items-start gap-2 rounded-lg bg-amber-50 px-4 py-3 text-sm text-amber-800 ring-1 ring-inset ring-amber-200 dark:bg-amber-950/40 dark:text-amber-300 dark:ring-amber-800/60">
+                <AlertTriangle className="h-4 w-4 shrink-0 mt-0.5" />
+                <div>
+                  <p className="font-medium">Wallet address mismatch</p>
+                  <p className="mt-0.5 text-xs text-amber-700 dark:text-amber-400">
+                    Connected wallet ({address.slice(0, 4)}...{address.slice(-4)}) differs from your registered payout address ({user?.stellarAddress?.slice(0, 4)}...{user?.stellarAddress?.slice(-4)}). Reconnect to update your registered address.
+                  </p>
+                </div>
+              </div>
+            )}
           </div>
         ) : (
           <Button
diff --git a/src/app/dashboard/sponsor/page.tsx b/src/app/dashboard/sponsor/page.tsx
index 28a4801..b3ac1cf 100644
--- a/src/app/dashboard/sponsor/page.tsx
+++ b/src/app/dashboard/sponsor/page.tsx
@@ -90,7 +90,7 @@ export default function SponsorDashboardPage() {
         // real zero balance, which is a trust-eroding false signal for a sponsor.
         setData(null);
         setFetchStatus("error");
-        setIsLive(false);
+        setIsLive(true);
       });
   }, [user, loading]);
 
diff --git a/src/context/WalletContext.tsx b/src/context/WalletContext.tsx
index 82e2761..e26756e 100644
--- a/src/context/WalletContext.tsx
+++ b/src/context/WalletContext.tsx
@@ -49,6 +49,14 @@ export function WalletProvider({ children }: { children: React.ReactNode }) {
   }, []);
   useCrossTabStorage(WALLET_KEY, handleWalletKeyChangedElsewhere);
 
+  // When the user logs out (e.g. across tabs or in current session), clear the connected wallet
+  // to prevent an unauthenticated user from retaining an active connected wallet state (#270).
+  useEffect(() => {
+    if (!user && address) {
+      disconnect();
+    }
+  }, [user, address, disconnect]);
+
   const connect = useCallback(async () => {
     setError(null);
     setConnecting(true);