From 145a196171ecb1651ffc0d3c5f28576a16b6b892 Mon Sep 17 00:00:00 2001
From: Chris Duncan <chris@codecow.com>
Date: Sun, 9 Aug 2026 02:40:40 -0700
Subject: [PATCH] Throw if more than one index passed in signing request.

---
 src/lib/vault/vault-worker.ts | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/lib/vault/vault-worker.ts b/src/lib/vault/vault-worker.ts
index d507b1e..c54bedb 100644
--- a/src/lib/vault/vault-worker.ts
+++ b/src/lib/vault/vault-worker.ts
@@ -263,6 +263,9 @@ function sign (index?: Uint32Array, data?: ArrayBuffer): Promise<Record<string,
 		if (index == null) {
 			throw new VaultError('Wallet account index is required to sign')
 		}
+		if (index.length !== 1) {
+			throw new VaultError('Wallet cannot sign from multiple account indexes')
+		}
 		if (data == null) {
 			throw new VaultError('Data to sign not found')
 		}
-- 
2.52.0