@anywalletkit/wallet-near 0.2.0 → 0.3.1

package/dist/index.cjs

@@ -45,6 +45,7 @@ __export(src_exports, {
   WalletAccountReadOnlyNear: () => WalletAccountReadOnlyNear,
   WalletManagerNear: () => WalletManagerNear,
   YOCTO: () => YOCTO,
+  accessKeyPermissionTag: () => accessKeyPermissionTag,
   actionKey: () => actionKey,
   argsBytes: () => argsBytes,
   assertWellFormed: () => assertWellFormed,
@@ -361,17 +362,34 @@ function argsBytes(args) {
   if (!isPlainObject(args)) throw new TypeError("function-call args must be bytes, a string or a plain object");
   return utf8.encode(JSON.stringify(args));
 }
+var FUNCTION_CALL_PERMISSION_KEYS = /* @__PURE__ */ new Set(["allowance", "receiverId", "methodNames"]);
+function accessKeyPermissionTag(permission) {
+  const keys = isPlainObject(permission) ? Object.keys(permission) : [];
+  if (keys.length !== 1) throw new TypeError(`an access-key permission must have exactly one variant, fullAccess or functionCall (has: ${keys.join(", ") || "none"})`);
+  const variant = permission[keys[0]];
+  if (keys[0] === "fullAccess") {
+    if (!isPlainObject(variant)) throw new TypeError("fullAccess must be a plain object");
+    return 1;
+  }
+  if (keys[0] === "functionCall") {
+    if (!isPlainObject(variant) || Object.keys(variant).some((k) => !FUNCTION_CALL_PERMISSION_KEYS.has(k))) throw new TypeError("functionCall must be a plain { receiverId, methodNames, allowance? } object");
+    if (typeof variant.receiverId !== "string") throw new TypeError("functionCall.receiverId must be a string");
+    if (!Array.isArray(variant.methodNames) || !variant.methodNames.every((m) => typeof m === "string")) throw new TypeError("functionCall.methodNames must be an array of strings");
+    if (variant.allowance !== void 0 && typeof variant.allowance !== "bigint") throw new TypeError("functionCall.allowance must be a bigint or absent");
+    return 0;
+  }
+  throw new TypeError(`unknown access-key permission ${JSON.stringify(keys[0])}`);
+}
 function writeAccessKey(w, k) {
   w.u64(k.nonce);
-  if ("functionCall" in k.permission) {
+  const tag = accessKeyPermissionTag(k.permission);
+  w.u8(tag);
+  if (tag === 0) {
     const p = k.permission.functionCall;
-    w.u8(0);
     w.option(p.allowance, (a) => w.u128(a));
     w.string(p.receiverId);
     w.u32(p.methodNames.length);
     for (const m of p.methodNames) w.string(m);
-  } else {
-    w.u8(1);
   }
 }
 function readAccessKey(r) {
@@ -767,8 +785,15 @@ function describeTransaction(tx, ctx = {}) {
     if (DANGEROUS_ACTIONS.has(key)) {
       dangerous ??= KIND_OF_DANGEROUS[key];
       warnings.push({ code: "dangerous-action", message: `${key} changes the account, its keys or its code.` });
-      if (key === "addKey" && "fullAccess" in a.addKey.accessKey.permission) {
-        warnings.push({ code: "full-access-key", message: "Adds a FULL ACCESS key: whoever holds it owns the account." });
+      if (key === "addKey") {
+        let tag;
+        try {
+          tag = accessKeyPermissionTag(a.addKey?.accessKey?.permission);
+        } catch {
+          tag = void 0;
+        }
+        if (tag === 1) warnings.push({ code: "full-access-key", message: "Adds a FULL ACCESS key: whoever holds it owns the account." });
+        else if (tag === void 0) warnings.push({ code: "dangerous-action", message: "Malformed access-key permission: neither fullAccess nor functionCall. The wallet refuses to sign it." });
       }
       continue;
     }
@@ -1166,6 +1191,15 @@ function assertShape(actions, depth = 0) {
       if (!(f.args instanceof Uint8Array) && typeof f.args !== "string" && !isPlainObject(f.args)) throw new UnsafeTransactionError("malformed-action", "Function-call args must be bytes, a string or a plain object.");
       if (f.gas !== void 0 && typeof f.gas !== "bigint" || f.deposit !== void 0 && typeof f.deposit !== "bigint") throw new UnsafeTransactionError("malformed-action", "Function-call gas and deposit must be bigints.");
     }
+    if ("addKey" in a) {
+      const k = a.addKey;
+      if (!isPlainObject(k) || !isPlainObject(k.accessKey)) throw new UnsafeTransactionError("malformed-action", "addKey must carry an accessKey object.");
+      try {
+        accessKeyPermissionTag(k.accessKey.permission);
+      } catch (e) {
+        throw new UnsafeTransactionError("malformed-action", `AddKey: ${e.message}.`);
+      }
+    }
     if ("signedDelegate" in a && depth === 0) assertShape(a.signedDelegate.delegateAction.actions, depth + 1);
   }
 }
@@ -1228,13 +1262,20 @@ var WalletAccountNear = class _WalletAccountNear extends WalletAccountReadOnlyNe
   needsNetwork = true;
   /** Derivation path, or `external` for an external signer. */
   path;
-  /** The signer that holds the key. */
-  signer;
+  /**
+   * The signer that holds the key, in a private field: not a property of the account, so no code
+   * the account is handed to (a protocol module, a logger) can reach it and sign around the
+   * account's checks (audit 2026-10-29 A1).
+   */
+  #signer;
+  /** What holds the key: `seed`, `key` (one imported key) or `external`. */
+  signerKind;
   _disposed = false;
   _readOnly;
   constructor(signer, publicKey, path, config = {}, accountId) {
     super(accountId ?? implicitAccountId(publicKey), config, ed25519Key(publicKey));
-    this.signer = (0, import_core4.requireCurve)(signer, "ed25519");
+    this.#signer = (0, import_core4.requireCurve)(signer, "ed25519");
+    this.signerKind = this.#signer.kind;
     this.path = path;
   }
   /** Wrap a raw derived key (takes ownership; zeroized on dispose). */
@@ -1248,14 +1289,14 @@ var WalletAccountNear = class _WalletAccountNear extends WalletAccountReadOnlyNe
   }
   /** The same key bound to a named account (`alice.near`) that lists it as a full-access key. */
   withAccountId(accountId) {
-    return new _WalletAccountNear(this.signer, this.publicKey.data, this.path, this._config, accountId);
+    return new _WalletAccountNear(this.#signer, this.publicKey.data, this.path, this._config, accountId);
   }
   key() {
     if (this._disposed) throw new import_core4.SignerError("This account has been disposed.");
   }
   async #signBytes(bytes, context) {
     this.key();
-    return this.signer.sign(bytes, { scheme: "ed25519", context });
+    return this.#signer.sign(bytes, { scheme: "ed25519", context });
   }
   /**
    * Raw ed25519 signature over the message bytes, as NEAR tooling prints it: "ed25519:<base58>".
@@ -1342,7 +1383,7 @@ var WalletAccountNear = class _WalletAccountNear extends WalletAccountReadOnlyNe
   /** Dispose the signer (zeroizes a local key). Idempotent. */
   dispose() {
     this._disposed = true;
-    this.signer.dispose();
+    this.#signer.dispose();
   }
 };
 function decodeSigned(b64) {