@anywalletkit/wallet-near 0.1.9 → 0.3.0

package/dist/index.d.cts

@@ -266,7 +266,7 @@ declare const STORAGE_DEPOSIT_GAS: bigint;
 declare const IMPLICIT_ACCOUNT_MIN_DEPOSIT: bigint;
 
 /** Why a transaction was refused before signing. */
-type UnsafeTransactionCode = 'signer-mismatch' | 'public-key-mismatch' | 'dangerous-action' | 'invalid-account' | 'no-actions' | 'gas-limit' | 'fee-limit' | 'missing-block-hash' | 'missing-nonce' | 'unknown-action' | 'insufficient-balance' | 'implicit-account-min-deposit' | 'no-access-key' | 'storage-deposit';
+type UnsafeTransactionCode = 'signer-mismatch' | 'public-key-mismatch' | 'dangerous-action' | 'invalid-account' | 'no-actions' | 'gas-limit' | 'fee-limit' | 'missing-block-hash' | 'missing-nonce' | 'unknown-action' | 'insufficient-balance' | 'implicit-account-min-deposit' | 'no-access-key' | 'storage-deposit' | 'non-canonical' | 'invalid-method' | 'malformed-action';
 /** A transaction failed a hard check and was not signed. */
 declare class UnsafeTransactionError extends Error {
     readonly code: UnsafeTransactionCode;
@@ -395,8 +395,11 @@ declare const ACTION_TAG: {
     readonly useGlobalContract: 10;
 };
 type NearActionKey = keyof typeof ACTION_TAG;
+/** The one key an action object has. Two keys (a deleteAccount next to a functionCall) is no action: whichever a reader picks, another reader may pick the other (scan 2026-10-27 F6). */
 declare function actionKey(a: NearAction): NearActionKey;
-/** Function-call args as bytes: raw bytes pass through; objects / strings become UTF-8 JSON / UTF-8. */
+/** A plain `{…}` object: not an array, not a class instance. */
+declare function isPlainObject(v: unknown): v is Record<string, unknown>;
+/** Function-call args as bytes: raw bytes pass through; plain objects / strings become UTF-8 JSON / UTF-8. Anything else throws. */
 declare function argsBytes(args: Uint8Array | Record<string, unknown> | string): Uint8Array;
 declare function writeAction(w: BorshWriter, a: NearAction): void;
 declare function readAction(r: BorshReader): NearAction;
@@ -618,6 +621,13 @@ declare class WalletAccountReadOnlyNear implements IWalletAccountReadOnly {
 }
 declare function receiptOf(hash: string, o: RawFinalOutcome): NearReceipt;
 declare function parseSignature(signature: string): Uint8Array;
+/**
+ * An object transaction has exactly the shape the encoder writes, before it is built or signed (also
+ * `signBuilt`): every action one known key; a function call's `methodName` a string of the method
+ * grammar, `args` bytes, a string or a plain object, `gas` / `deposit` bigints; every account id and
+ * method name well formed. What the policies read is then what gets encoded (scan 2026-10-27 F6, F28).
+ */
+declare function assertWellFormed(tx: Pick<NearBuiltTransaction, 'receiverId' | 'actions'>): void;
 
 interface NearTransferResult extends TransferResult {
     estimate?: NearFeeEstimate;
@@ -633,12 +643,13 @@ interface NearTransferResult extends TransferResult {
  * `accountId` for a named account whose full-access key this is.
  */
 declare class WalletAccountNear extends WalletAccountReadOnlyNear implements IWalletAccount {
+    #private;
     /** nonce / block hash come from the node, so building needs the network. */
     readonly needsNetwork = true;
     /** Derivation path, or `external` for an external signer. */
     readonly path: string;
-    /** The signer that holds the key. */
-    readonly signer: Signer;
+    /** What holds the key: `seed`, `key` (one imported key) or `external`. */
+    readonly signerKind: Signer['kind'];
     private _disposed;
     private _readOnly;
     constructor(signer: Signer, publicKey: Uint8Array, path: string, config?: NearConfig, accountId?: string);
@@ -649,7 +660,6 @@ declare class WalletAccountNear extends WalletAccountReadOnlyNear implements IWa
     /** The same key bound to a named account (`alice.near`) that lists it as a full-access key. */
     withAccountId(accountId: string): WalletAccountNear;
     private key;
-    private signBytes;
     /**
      * Raw ed25519 signature over the message bytes, as NEAR tooling prints it: "ed25519:<base58>".
      * A 32-byte message — string or bytes — is refused with {@link MessageIsTransactionError}: a NEAR
@@ -709,4 +719,4 @@ declare class WalletManagerNear extends WalletManager<WalletAccountNear, NearCon
     getFeeRates(): Promise<FeeRates>;
 }
 
-export { ACTION_TAG, BorshReader, BorshWriter, BroadcastUnknownError, CAIP2, DANGEROUS_ACTIONS, type DescribeContext, FT_TRANSFER_GAS, IMPLICIT_ACCOUNT_MIN_DEPOSIT, MAX_GAS, MessageIsTransactionError, NEAR_BASE_PATH, NEP413_PREFIX, type NearAccessKey, type NearAccountView, type NearAction, type NearAddKeyAction, type NearBuiltTransaction, type NearConfig, type NearCreateAccountAction, type NearDelegateAction, type NearDeleteAccountAction, type NearDeleteKeyAction, type NearDeployContractAction, type NearDeployGlobalContractAction, type NearFeeEstimate, type NearFetch, type NearFunctionCallAction, type NearProvider, type NearPublicKey, type NearQuote, type NearReceipt, NearRpc, NearRpcError, type NearSignature, type NearSignedDelegateAction, type NearSignedTransaction, type NearSimulation, type NearStakeAction, type NearTransaction, type NearTransferAction, type NearTransferOptions, type NearTransferResult, type NearTxDescription, type NearTxKind, type NearTxWarning, type NearTxWarningCode, type NearUseGlobalContractAction, type Nep413Payload, type Nep413Signed, ONE_YOCTO, type RawAccessKeyView, type RawAccountView, type RawFinalOutcome, STORAGE_DEPOSIT_GAS, STORAGE_PRICE_PER_BYTE, SimulationError, TGAS, type UnsafeTransactionCode, UnsafeTransactionError, WalletAccountNear, WalletAccountReadOnlyNear, WalletManagerNear, YOCTO, actionKey, argsBytes, base58ToBytes, bytesToBase58, createClient, decodeAnyTransaction, decodeSignedTransaction, decodeTransaction, WalletManagerNear as default, describeTransaction, ed25519Key, encodeSignedTransaction, encodeTransaction, failureOf, fromBase64, implicitAccountId, isDangerous, isImplicitAccountId, isValidAccountId, nep413Bytes, nep413Hash, outcomeFailed, parsePublicKey, parseSignature, publicKeyOfImplicit, publicKeyToString, readAction, readPublicKey, readSignature, receiptOf, toBase64, writeAction, writePublicKey, writeSignature };
+export { ACTION_TAG, BorshReader, BorshWriter, BroadcastUnknownError, CAIP2, DANGEROUS_ACTIONS, type DescribeContext, FT_TRANSFER_GAS, IMPLICIT_ACCOUNT_MIN_DEPOSIT, MAX_GAS, MessageIsTransactionError, NEAR_BASE_PATH, NEP413_PREFIX, type NearAccessKey, type NearAccountView, type NearAction, type NearAddKeyAction, type NearBuiltTransaction, type NearConfig, type NearCreateAccountAction, type NearDelegateAction, type NearDeleteAccountAction, type NearDeleteKeyAction, type NearDeployContractAction, type NearDeployGlobalContractAction, type NearFeeEstimate, type NearFetch, type NearFunctionCallAction, type NearProvider, type NearPublicKey, type NearQuote, type NearReceipt, NearRpc, NearRpcError, type NearSignature, type NearSignedDelegateAction, type NearSignedTransaction, type NearSimulation, type NearStakeAction, type NearTransaction, type NearTransferAction, type NearTransferOptions, type NearTransferResult, type NearTxDescription, type NearTxKind, type NearTxWarning, type NearTxWarningCode, type NearUseGlobalContractAction, type Nep413Payload, type Nep413Signed, ONE_YOCTO, type RawAccessKeyView, type RawAccountView, type RawFinalOutcome, STORAGE_DEPOSIT_GAS, STORAGE_PRICE_PER_BYTE, SimulationError, TGAS, type UnsafeTransactionCode, UnsafeTransactionError, WalletAccountNear, WalletAccountReadOnlyNear, WalletManagerNear, YOCTO, actionKey, argsBytes, assertWellFormed, base58ToBytes, bytesToBase58, createClient, decodeAnyTransaction, decodeSignedTransaction, decodeTransaction, WalletManagerNear as default, describeTransaction, ed25519Key, encodeSignedTransaction, encodeTransaction, failureOf, fromBase64, implicitAccountId, isDangerous, isImplicitAccountId, isPlainObject, isValidAccountId, nep413Bytes, nep413Hash, outcomeFailed, parsePublicKey, parseSignature, publicKeyOfImplicit, publicKeyToString, readAction, readPublicKey, readSignature, receiptOf, toBase64, writeAction, writePublicKey, writeSignature };

package/dist/index.d.ts

@@ -266,7 +266,7 @@ declare const STORAGE_DEPOSIT_GAS: bigint;
 declare const IMPLICIT_ACCOUNT_MIN_DEPOSIT: bigint;
 
 /** Why a transaction was refused before signing. */
-type UnsafeTransactionCode = 'signer-mismatch' | 'public-key-mismatch' | 'dangerous-action' | 'invalid-account' | 'no-actions' | 'gas-limit' | 'fee-limit' | 'missing-block-hash' | 'missing-nonce' | 'unknown-action' | 'insufficient-balance' | 'implicit-account-min-deposit' | 'no-access-key' | 'storage-deposit';
+type UnsafeTransactionCode = 'signer-mismatch' | 'public-key-mismatch' | 'dangerous-action' | 'invalid-account' | 'no-actions' | 'gas-limit' | 'fee-limit' | 'missing-block-hash' | 'missing-nonce' | 'unknown-action' | 'insufficient-balance' | 'implicit-account-min-deposit' | 'no-access-key' | 'storage-deposit' | 'non-canonical' | 'invalid-method' | 'malformed-action';
 /** A transaction failed a hard check and was not signed. */
 declare class UnsafeTransactionError extends Error {
     readonly code: UnsafeTransactionCode;
@@ -395,8 +395,11 @@ declare const ACTION_TAG: {
     readonly useGlobalContract: 10;
 };
 type NearActionKey = keyof typeof ACTION_TAG;
+/** The one key an action object has. Two keys (a deleteAccount next to a functionCall) is no action: whichever a reader picks, another reader may pick the other (scan 2026-10-27 F6). */
 declare function actionKey(a: NearAction): NearActionKey;
-/** Function-call args as bytes: raw bytes pass through; objects / strings become UTF-8 JSON / UTF-8. */
+/** A plain `{…}` object: not an array, not a class instance. */
+declare function isPlainObject(v: unknown): v is Record<string, unknown>;
+/** Function-call args as bytes: raw bytes pass through; plain objects / strings become UTF-8 JSON / UTF-8. Anything else throws. */
 declare function argsBytes(args: Uint8Array | Record<string, unknown> | string): Uint8Array;
 declare function writeAction(w: BorshWriter, a: NearAction): void;
 declare function readAction(r: BorshReader): NearAction;
@@ -618,6 +621,13 @@ declare class WalletAccountReadOnlyNear implements IWalletAccountReadOnly {
 }
 declare function receiptOf(hash: string, o: RawFinalOutcome): NearReceipt;
 declare function parseSignature(signature: string): Uint8Array;
+/**
+ * An object transaction has exactly the shape the encoder writes, before it is built or signed (also
+ * `signBuilt`): every action one known key; a function call's `methodName` a string of the method
+ * grammar, `args` bytes, a string or a plain object, `gas` / `deposit` bigints; every account id and
+ * method name well formed. What the policies read is then what gets encoded (scan 2026-10-27 F6, F28).
+ */
+declare function assertWellFormed(tx: Pick<NearBuiltTransaction, 'receiverId' | 'actions'>): void;
 
 interface NearTransferResult extends TransferResult {
     estimate?: NearFeeEstimate;
@@ -633,12 +643,13 @@ interface NearTransferResult extends TransferResult {
  * `accountId` for a named account whose full-access key this is.
  */
 declare class WalletAccountNear extends WalletAccountReadOnlyNear implements IWalletAccount {
+    #private;
     /** nonce / block hash come from the node, so building needs the network. */
     readonly needsNetwork = true;
     /** Derivation path, or `external` for an external signer. */
     readonly path: string;
-    /** The signer that holds the key. */
-    readonly signer: Signer;
+    /** What holds the key: `seed`, `key` (one imported key) or `external`. */
+    readonly signerKind: Signer['kind'];
     private _disposed;
     private _readOnly;
     constructor(signer: Signer, publicKey: Uint8Array, path: string, config?: NearConfig, accountId?: string);
@@ -649,7 +660,6 @@ declare class WalletAccountNear extends WalletAccountReadOnlyNear implements IWa
     /** The same key bound to a named account (`alice.near`) that lists it as a full-access key. */
     withAccountId(accountId: string): WalletAccountNear;
     private key;
-    private signBytes;
     /**
      * Raw ed25519 signature over the message bytes, as NEAR tooling prints it: "ed25519:<base58>".
      * A 32-byte message — string or bytes — is refused with {@link MessageIsTransactionError}: a NEAR
@@ -709,4 +719,4 @@ declare class WalletManagerNear extends WalletManager<WalletAccountNear, NearCon
     getFeeRates(): Promise<FeeRates>;
 }
 
-export { ACTION_TAG, BorshReader, BorshWriter, BroadcastUnknownError, CAIP2, DANGEROUS_ACTIONS, type DescribeContext, FT_TRANSFER_GAS, IMPLICIT_ACCOUNT_MIN_DEPOSIT, MAX_GAS, MessageIsTransactionError, NEAR_BASE_PATH, NEP413_PREFIX, type NearAccessKey, type NearAccountView, type NearAction, type NearAddKeyAction, type NearBuiltTransaction, type NearConfig, type NearCreateAccountAction, type NearDelegateAction, type NearDeleteAccountAction, type NearDeleteKeyAction, type NearDeployContractAction, type NearDeployGlobalContractAction, type NearFeeEstimate, type NearFetch, type NearFunctionCallAction, type NearProvider, type NearPublicKey, type NearQuote, type NearReceipt, NearRpc, NearRpcError, type NearSignature, type NearSignedDelegateAction, type NearSignedTransaction, type NearSimulation, type NearStakeAction, type NearTransaction, type NearTransferAction, type NearTransferOptions, type NearTransferResult, type NearTxDescription, type NearTxKind, type NearTxWarning, type NearTxWarningCode, type NearUseGlobalContractAction, type Nep413Payload, type Nep413Signed, ONE_YOCTO, type RawAccessKeyView, type RawAccountView, type RawFinalOutcome, STORAGE_DEPOSIT_GAS, STORAGE_PRICE_PER_BYTE, SimulationError, TGAS, type UnsafeTransactionCode, UnsafeTransactionError, WalletAccountNear, WalletAccountReadOnlyNear, WalletManagerNear, YOCTO, actionKey, argsBytes, base58ToBytes, bytesToBase58, createClient, decodeAnyTransaction, decodeSignedTransaction, decodeTransaction, WalletManagerNear as default, describeTransaction, ed25519Key, encodeSignedTransaction, encodeTransaction, failureOf, fromBase64, implicitAccountId, isDangerous, isImplicitAccountId, isValidAccountId, nep413Bytes, nep413Hash, outcomeFailed, parsePublicKey, parseSignature, publicKeyOfImplicit, publicKeyToString, readAction, readPublicKey, readSignature, receiptOf, toBase64, writeAction, writePublicKey, writeSignature };
+export { ACTION_TAG, BorshReader, BorshWriter, BroadcastUnknownError, CAIP2, DANGEROUS_ACTIONS, type DescribeContext, FT_TRANSFER_GAS, IMPLICIT_ACCOUNT_MIN_DEPOSIT, MAX_GAS, MessageIsTransactionError, NEAR_BASE_PATH, NEP413_PREFIX, type NearAccessKey, type NearAccountView, type NearAction, type NearAddKeyAction, type NearBuiltTransaction, type NearConfig, type NearCreateAccountAction, type NearDelegateAction, type NearDeleteAccountAction, type NearDeleteKeyAction, type NearDeployContractAction, type NearDeployGlobalContractAction, type NearFeeEstimate, type NearFetch, type NearFunctionCallAction, type NearProvider, type NearPublicKey, type NearQuote, type NearReceipt, NearRpc, NearRpcError, type NearSignature, type NearSignedDelegateAction, type NearSignedTransaction, type NearSimulation, type NearStakeAction, type NearTransaction, type NearTransferAction, type NearTransferOptions, type NearTransferResult, type NearTxDescription, type NearTxKind, type NearTxWarning, type NearTxWarningCode, type NearUseGlobalContractAction, type Nep413Payload, type Nep413Signed, ONE_YOCTO, type RawAccessKeyView, type RawAccountView, type RawFinalOutcome, STORAGE_DEPOSIT_GAS, STORAGE_PRICE_PER_BYTE, SimulationError, TGAS, type UnsafeTransactionCode, UnsafeTransactionError, WalletAccountNear, WalletAccountReadOnlyNear, WalletManagerNear, YOCTO, actionKey, argsBytes, assertWellFormed, base58ToBytes, bytesToBase58, createClient, decodeAnyTransaction, decodeSignedTransaction, decodeTransaction, WalletManagerNear as default, describeTransaction, ed25519Key, encodeSignedTransaction, encodeTransaction, failureOf, fromBase64, implicitAccountId, isDangerous, isImplicitAccountId, isPlainObject, isValidAccountId, nep413Bytes, nep413Hash, outcomeFailed, parsePublicKey, parseSignature, publicKeyOfImplicit, publicKeyToString, readAction, readPublicKey, readSignature, receiptOf, toBase64, writeAction, writePublicKey, writeSignature };

package/dist/index.js

@@ -30,7 +30,7 @@ import {
   outcomeFailed,
   parseJsonPreservingBigInts,
   toBase64
-} from "./chunk-4FHO2WJN.js";
+} from "./chunk-ZWMEZA5A.js";
 
 // src/address.ts
 import { base58 } from "@scure/base";
@@ -74,7 +74,7 @@ var bytesToBase58 = (b) => base58.encode(b);
 
 // src/borsh.ts
 var utf8 = new TextEncoder();
-var utf8d = new TextDecoder();
+var utf8d = new TextDecoder("utf-8", { fatal: true, ignoreBOM: true });
 var BorshWriter = class {
   _buf = new Uint8Array(256);
   _len = 0;
@@ -176,7 +176,10 @@ var BorshReader = class {
     return utf8d.decode(this.vecU8());
   }
   option(read) {
-    return this.u8() === 0 ? void 0 : read();
+    const tag = this.u8();
+    if (tag === 0) return void 0;
+    if (tag !== 1) throw new RangeError(`borsh: option tag ${tag}`);
+    return read();
   }
   done() {
     if (this.remaining !== 0) throw new RangeError(`borsh: ${this.remaining} trailing bytes`);
@@ -219,13 +222,21 @@ var ACTION_TAG = {
   useGlobalContract: 10
 };
 function actionKey(a) {
-  const k = Object.keys(a)[0];
-  if (!k || !(k in ACTION_TAG)) throw new RangeError(`unknown action ${k}`);
+  const keys = typeof a === "object" && a !== null ? Object.keys(a) : [];
+  if (keys.length !== 1) throw new RangeError(`an action must have exactly one key (has: ${keys.join(", ") || "none"})`);
+  const k = keys[0];
+  if (!Object.prototype.hasOwnProperty.call(ACTION_TAG, k)) throw new RangeError(`unknown action ${k}`);
   return k;
 }
+function isPlainObject(v) {
+  if (typeof v !== "object" || v === null || Array.isArray(v)) return false;
+  const proto = Object.getPrototypeOf(v);
+  return proto === Object.prototype || proto === null;
+}
 function argsBytes(args) {
   if (args instanceof Uint8Array) return args;
   if (typeof args === "string") return utf8.encode(args);
+  if (!isPlainObject(args)) throw new TypeError("function-call args must be bytes, a string or a plain object");
   return utf8.encode(JSON.stringify(args));
 }
 function writeAccessKey(w, k) {
@@ -283,6 +294,8 @@ function writeAction(w, a) {
       return;
     case "functionCall": {
       const f = a.functionCall;
+      if (typeof f.methodName !== "string") throw new TypeError("functionCall.methodName must be a string");
+      if (f.gas !== void 0 && typeof f.gas !== "bigint" || f.deposit !== void 0 && typeof f.deposit !== "bigint") throw new TypeError("functionCall gas and deposit must be bigints");
       w.string(f.methodName).vecU8(argsBytes(f.args)).u64(f.gas ?? 30n * 10n ** 12n).u128(f.deposit ?? 0n);
       return;
     }
@@ -329,6 +342,11 @@ function writeAction(w, a) {
     }
   }
 }
+function mode(r) {
+  const m = r.u8();
+  if (m !== 0 && m !== 1) throw new RangeError(`borsh: unknown global-contract mode ${m}`);
+  return m;
+}
 function readAction(r) {
   const tag = r.u8();
   switch (tag) {
@@ -363,11 +381,11 @@ function readAction(r) {
     }
     case 9: {
       const code = r.vecU8();
-      const m = r.u8();
+      const m = mode(r);
       return { deployGlobalContract: { code, deployMode: m === 0 ? "codeHash" : "accountId" } };
     }
     case 10: {
-      const m = r.u8();
+      const m = mode(r);
       return { useGlobalContract: m === 0 ? { codeHash: r.bytes(32) } : { accountId: r.string() } };
     }
     default:
@@ -682,7 +700,8 @@ var WalletAccountReadOnlyNear = class _WalletAccountReadOnlyNear {
   }
   /** Fill `signerId` / `publicKey` / `nonce` / `blockHash` (the last two from the node when missing). */
   async buildTransaction(tx) {
-    if (typeof tx === "string") return decodeAnyTransaction(fromBase64(tx)).transaction;
+    if (typeof tx === "string") return canonicalTransaction(tx);
+    assertWellFormed(tx);
     const signerId = tx.signerId ?? this.address;
     const publicKey = tx.publicKey ?? this.publicKey;
     let nonce = tx.nonce;
@@ -796,6 +815,7 @@ var WalletAccountReadOnlyNear = class _WalletAccountReadOnlyNear {
     if (tx.publicKey.keyType !== this.publicKey.keyType || !equalBytes(tx.publicKey.data, this.publicKey.data)) throw new UnsafeTransactionError("public-key-mismatch", "The transaction public key is not this account's key.");
     if (!tx.actions.length) throw new UnsafeTransactionError("no-actions", "The transaction has no actions.");
     if (!isValidAccountId(tx.receiverId)) throw new UnsafeTransactionError("invalid-account", `"${tx.receiverId}" is not a valid NEAR account id.`);
+    assertWellFormed(tx);
     if (tx.blockHash.length !== 32) throw new UnsafeTransactionError("missing-block-hash", "The transaction has no 32-byte block hash.");
     if (tx.nonce <= 0n) throw new UnsafeTransactionError("missing-nonce", "The transaction nonce must be positive.");
     if (!this._config.allowDangerousActions) {
@@ -851,6 +871,64 @@ function parseSignature(signature) {
   }
   return base58ToBytes(s, 64);
 }
+var METHOD_NAME = /^[A-Za-z0-9_]{1,256}$/;
+function assertWellFormed(tx) {
+  if (!Array.isArray(tx.actions)) throw new UnsafeTransactionError("malformed-action", "actions must be an array.");
+  assertShape(tx.actions);
+  assertNames(tx.actions);
+}
+function assertShape(actions, depth = 0) {
+  for (const a of actions) {
+    const keys = typeof a === "object" && a !== null ? Object.keys(a) : [];
+    if (keys.length !== 1 || !Object.prototype.hasOwnProperty.call(ACTION_TAG, keys[0])) {
+      throw new UnsafeTransactionError("malformed-action", `An action must have exactly one known key (has: ${keys.join(", ") || "none"}).`);
+    }
+    if ("functionCall" in a) {
+      const f = a.functionCall;
+      if (!(f.args instanceof Uint8Array) && typeof f.args !== "string" && !isPlainObject(f.args)) throw new UnsafeTransactionError("malformed-action", "Function-call args must be bytes, a string or a plain object.");
+      if (f.gas !== void 0 && typeof f.gas !== "bigint" || f.deposit !== void 0 && typeof f.deposit !== "bigint") throw new UnsafeTransactionError("malformed-action", "Function-call gas and deposit must be bigints.");
+    }
+    if ("signedDelegate" in a && depth === 0) assertShape(a.signedDelegate.delegateAction.actions, depth + 1);
+  }
+}
+function assertNames(actions, depth = 0) {
+  const account = (id) => {
+    if (typeof id !== "string" || !isValidAccountId(id)) throw new UnsafeTransactionError("invalid-account", `${JSON.stringify(id)} is not a valid NEAR account id.`);
+  };
+  const method = (name) => {
+    if (typeof name !== "string" || !METHOD_NAME.test(name)) throw new UnsafeTransactionError("invalid-method", `${JSON.stringify(name)} is not a method name this wallet signs (ASCII letters, digits, '_').`);
+  };
+  for (const a of actions) {
+    if ("functionCall" in a) method(a.functionCall.methodName);
+    else if ("deleteAccount" in a) account(a.deleteAccount.beneficiaryId);
+    else if ("addKey" in a && "functionCall" in a.addKey.accessKey.permission) {
+      const p = a.addKey.accessKey.permission.functionCall;
+      account(p.receiverId);
+      for (const m of p.methodNames) method(m);
+    } else if ("useGlobalContract" in a && "accountId" in a.useGlobalContract) account(a.useGlobalContract.accountId);
+    else if ("signedDelegate" in a) {
+      const d = a.signedDelegate.delegateAction;
+      account(d.senderId);
+      account(d.receiverId);
+      if (depth > 0) throw new UnsafeTransactionError("unknown-action", "A delegated action inside a delegated action is not signed.");
+      assertNames(d.actions, depth + 1);
+    }
+  }
+}
+function canonicalTransaction(b64) {
+  const bytes = fromBase64(b64);
+  let decoded;
+  try {
+    decoded = decodeAnyTransaction(bytes);
+  } catch (e) {
+    throw new UnsafeTransactionError("non-canonical", `Not a borsh NEAR transaction: ${e.message}`);
+  }
+  const again = decoded.signature ? encodeSignedTransaction({ transaction: decoded.transaction, signature: decoded.signature }) : encodeTransaction(decoded.transaction);
+  if (!equalBytes(again, bytes)) throw new UnsafeTransactionError("non-canonical", "This borsh transaction does not re-encode to the same bytes, so what was reviewed may not be what gets signed.");
+  if (!isValidAccountId(decoded.transaction.signerId) || !isValidAccountId(decoded.transaction.receiverId)) throw new UnsafeTransactionError("invalid-account", "The transaction names an invalid NEAR account id.");
+  assertWellFormed(decoded.transaction);
+  return decoded.transaction;
+}
 function equalBytes(a, b) {
   if (a.length !== b.length) return false;
   let diff = 0;
@@ -872,13 +950,20 @@ var WalletAccountNear = class _WalletAccountNear extends WalletAccountReadOnlyNe
   needsNetwork = true;
   /** Derivation path, or `external` for an external signer. */
   path;
-  /** The signer that holds the key. */
-  signer;
+  /**
+   * The signer that holds the key, in a private field: not a property of the account, so no code
+   * the account is handed to (a protocol module, a logger) can reach it and sign around the
+   * account's checks (audit 2026-10-29 A1).
+   */
+  #signer;
+  /** What holds the key: `seed`, `key` (one imported key) or `external`. */
+  signerKind;
   _disposed = false;
   _readOnly;
   constructor(signer, publicKey, path, config = {}, accountId) {
     super(accountId ?? implicitAccountId(publicKey), config, ed25519Key(publicKey));
-    this.signer = requireCurve(signer, "ed25519");
+    this.#signer = requireCurve(signer, "ed25519");
+    this.signerKind = this.#signer.kind;
     this.path = path;
   }
   /** Wrap a raw derived key (takes ownership; zeroized on dispose). */
@@ -892,14 +977,14 @@ var WalletAccountNear = class _WalletAccountNear extends WalletAccountReadOnlyNe
   }
   /** The same key bound to a named account (`alice.near`) that lists it as a full-access key. */
   withAccountId(accountId) {
-    return new _WalletAccountNear(this.signer, this.publicKey.data, this.path, this._config, accountId);
+    return new _WalletAccountNear(this.#signer, this.publicKey.data, this.path, this._config, accountId);
   }
   key() {
     if (this._disposed) throw new SignerError("This account has been disposed.");
   }
-  async signBytes(bytes, context) {
+  async #signBytes(bytes, context) {
     this.key();
-    return this.signer.sign(bytes, { scheme: "ed25519", context });
+    return this.#signer.sign(bytes, { scheme: "ed25519", context });
   }
   /**
    * Raw ed25519 signature over the message bytes, as NEAR tooling prints it: "ed25519:<base58>".
@@ -912,16 +997,17 @@ var WalletAccountNear = class _WalletAccountNear extends WalletAccountReadOnlyNe
   async sign(message) {
     const bytes = typeof message === "string" ? new TextEncoder().encode(message) : message;
     if (bytes.length === 32 || carriesKey(bytes, this.publicKey.data)) throw new MessageIsTransactionError();
-    return `ed25519:${bytesToBase58(await this.signBytes(bytes, "near-message"))}`;
+    return `ed25519:${bytesToBase58(await this.#signBytes(bytes, "near-message"))}`;
   }
   /** NEP-413 off-chain message (what NEAR Intents and dApps ask wallets to sign). */
   async signNep413(payload) {
-    const sig = await this.signBytes(nep413Hash(payload), "near-nep413");
+    const sig = await this.#signBytes(nep413Hash(payload), "near-nep413");
     return { signature: toBase64(sig), publicKey: publicKeyToString(this.publicKey), accountId: this.address };
   }
   /** Sign a fully built transaction. No checks — see `signTransaction`. */
   async signBuilt(tx) {
-    const sig = await this.signBytes(WalletAccountReadOnlyNear.hashOf(tx), "near-tx");
+    assertWellFormed(tx);
+    const sig = await this.#signBytes(WalletAccountReadOnlyNear.hashOf(tx), "near-tx");
     return { transaction: tx, signature: { keyType: "ed25519", data: sig } };
   }
   /** Build → hard checks → preflight → fee cap. Shared by sign / send / transfer. */
@@ -985,7 +1071,7 @@ var WalletAccountNear = class _WalletAccountNear extends WalletAccountReadOnlyNe
   /** Dispose the signer (zeroizes a local key). Idempotent. */
   dispose() {
     this._disposed = true;
-    this.signer.dispose();
+    this.#signer.dispose();
   }
 };
 function decodeSigned(b64) {
@@ -1075,6 +1161,7 @@ export {
   YOCTO,
   actionKey,
   argsBytes,
+  assertWellFormed,
   base58ToBytes,
   bytesToBase58,
   createClient,
@@ -1095,6 +1182,7 @@ export {
   implicitAccountId,
   isDangerous,
   isImplicitAccountId,
+  isPlainObject,
   isValidAccountId,
   mapNearblocksGroup,
   mapNearblocksTxn,