@anywalletkit/wallet-near 0.2.0 → 0.3.0

package/dist/index.cjs

@@ -1228,13 +1228,20 @@ var WalletAccountNear = class _WalletAccountNear extends WalletAccountReadOnlyNe
   needsNetwork = true;
   /** Derivation path, or `external` for an external signer. */
   path;
-  /** The signer that holds the key. */
-  signer;
+  /**
+   * The signer that holds the key, in a private field: not a property of the account, so no code
+   * the account is handed to (a protocol module, a logger) can reach it and sign around the
+   * account's checks (audit 2026-10-29 A1).
+   */
+  #signer;
+  /** What holds the key: `seed`, `key` (one imported key) or `external`. */
+  signerKind;
   _disposed = false;
   _readOnly;
   constructor(signer, publicKey, path, config = {}, accountId) {
     super(accountId ?? implicitAccountId(publicKey), config, ed25519Key(publicKey));
-    this.signer = (0, import_core4.requireCurve)(signer, "ed25519");
+    this.#signer = (0, import_core4.requireCurve)(signer, "ed25519");
+    this.signerKind = this.#signer.kind;
     this.path = path;
   }
   /** Wrap a raw derived key (takes ownership; zeroized on dispose). */
@@ -1248,14 +1255,14 @@ var WalletAccountNear = class _WalletAccountNear extends WalletAccountReadOnlyNe
   }
   /** The same key bound to a named account (`alice.near`) that lists it as a full-access key. */
   withAccountId(accountId) {
-    return new _WalletAccountNear(this.signer, this.publicKey.data, this.path, this._config, accountId);
+    return new _WalletAccountNear(this.#signer, this.publicKey.data, this.path, this._config, accountId);
   }
   key() {
     if (this._disposed) throw new import_core4.SignerError("This account has been disposed.");
   }
   async #signBytes(bytes, context) {
     this.key();
-    return this.signer.sign(bytes, { scheme: "ed25519", context });
+    return this.#signer.sign(bytes, { scheme: "ed25519", context });
   }
   /**
    * Raw ed25519 signature over the message bytes, as NEAR tooling prints it: "ed25519:<base58>".
@@ -1342,7 +1349,7 @@ var WalletAccountNear = class _WalletAccountNear extends WalletAccountReadOnlyNe
   /** Dispose the signer (zeroizes a local key). Idempotent. */
   dispose() {
     this._disposed = true;
-    this.signer.dispose();
+    this.#signer.dispose();
   }
 };
 function decodeSigned(b64) {