@anywalletkit/wallet-near 0.3.0 → 0.3.1

package/dist/index.cjs

@@ -45,6 +45,7 @@ __export(src_exports, {
   WalletAccountReadOnlyNear: () => WalletAccountReadOnlyNear,
   WalletManagerNear: () => WalletManagerNear,
   YOCTO: () => YOCTO,
+  accessKeyPermissionTag: () => accessKeyPermissionTag,
   actionKey: () => actionKey,
   argsBytes: () => argsBytes,
   assertWellFormed: () => assertWellFormed,
@@ -361,17 +362,34 @@ function argsBytes(args) {
   if (!isPlainObject(args)) throw new TypeError("function-call args must be bytes, a string or a plain object");
   return utf8.encode(JSON.stringify(args));
 }
+var FUNCTION_CALL_PERMISSION_KEYS = /* @__PURE__ */ new Set(["allowance", "receiverId", "methodNames"]);
+function accessKeyPermissionTag(permission) {
+  const keys = isPlainObject(permission) ? Object.keys(permission) : [];
+  if (keys.length !== 1) throw new TypeError(`an access-key permission must have exactly one variant, fullAccess or functionCall (has: ${keys.join(", ") || "none"})`);
+  const variant = permission[keys[0]];
+  if (keys[0] === "fullAccess") {
+    if (!isPlainObject(variant)) throw new TypeError("fullAccess must be a plain object");
+    return 1;
+  }
+  if (keys[0] === "functionCall") {
+    if (!isPlainObject(variant) || Object.keys(variant).some((k) => !FUNCTION_CALL_PERMISSION_KEYS.has(k))) throw new TypeError("functionCall must be a plain { receiverId, methodNames, allowance? } object");
+    if (typeof variant.receiverId !== "string") throw new TypeError("functionCall.receiverId must be a string");
+    if (!Array.isArray(variant.methodNames) || !variant.methodNames.every((m) => typeof m === "string")) throw new TypeError("functionCall.methodNames must be an array of strings");
+    if (variant.allowance !== void 0 && typeof variant.allowance !== "bigint") throw new TypeError("functionCall.allowance must be a bigint or absent");
+    return 0;
+  }
+  throw new TypeError(`unknown access-key permission ${JSON.stringify(keys[0])}`);
+}
 function writeAccessKey(w, k) {
   w.u64(k.nonce);
-  if ("functionCall" in k.permission) {
+  const tag = accessKeyPermissionTag(k.permission);
+  w.u8(tag);
+  if (tag === 0) {
     const p = k.permission.functionCall;
-    w.u8(0);
     w.option(p.allowance, (a) => w.u128(a));
     w.string(p.receiverId);
     w.u32(p.methodNames.length);
     for (const m of p.methodNames) w.string(m);
-  } else {
-    w.u8(1);
   }
 }
 function readAccessKey(r) {
@@ -767,8 +785,15 @@ function describeTransaction(tx, ctx = {}) {
     if (DANGEROUS_ACTIONS.has(key)) {
       dangerous ??= KIND_OF_DANGEROUS[key];
       warnings.push({ code: "dangerous-action", message: `${key} changes the account, its keys or its code.` });
-      if (key === "addKey" && "fullAccess" in a.addKey.accessKey.permission) {
-        warnings.push({ code: "full-access-key", message: "Adds a FULL ACCESS key: whoever holds it owns the account." });
+      if (key === "addKey") {
+        let tag;
+        try {
+          tag = accessKeyPermissionTag(a.addKey?.accessKey?.permission);
+        } catch {
+          tag = void 0;
+        }
+        if (tag === 1) warnings.push({ code: "full-access-key", message: "Adds a FULL ACCESS key: whoever holds it owns the account." });
+        else if (tag === void 0) warnings.push({ code: "dangerous-action", message: "Malformed access-key permission: neither fullAccess nor functionCall. The wallet refuses to sign it." });
       }
       continue;
     }
@@ -1166,6 +1191,15 @@ function assertShape(actions, depth = 0) {
       if (!(f.args instanceof Uint8Array) && typeof f.args !== "string" && !isPlainObject(f.args)) throw new UnsafeTransactionError("malformed-action", "Function-call args must be bytes, a string or a plain object.");
       if (f.gas !== void 0 && typeof f.gas !== "bigint" || f.deposit !== void 0 && typeof f.deposit !== "bigint") throw new UnsafeTransactionError("malformed-action", "Function-call gas and deposit must be bigints.");
     }
+    if ("addKey" in a) {
+      const k = a.addKey;
+      if (!isPlainObject(k) || !isPlainObject(k.accessKey)) throw new UnsafeTransactionError("malformed-action", "addKey must carry an accessKey object.");
+      try {
+        accessKeyPermissionTag(k.accessKey.permission);
+      } catch (e) {
+        throw new UnsafeTransactionError("malformed-action", `AddKey: ${e.message}.`);
+      }
+    }
     if ("signedDelegate" in a && depth === 0) assertShape(a.signedDelegate.delegateAction.actions, depth + 1);
   }
 }