@anywalletkit/wallet-ton 0.2.4 → 0.2.5

package/dist/index.d.cts

@@ -218,6 +218,16 @@ declare class UnsafeTransactionError extends SignerError {
     readonly code: string;
     constructor(code: string, message: string);
 }
+/**
+ * `sign()` refused a 32-byte message: the wallet contract checks a transfer's signature over the
+ * 32-byte hash of its signing cell, so a signature over 32 raw bytes may authorise one. TON Connect
+ * proofs and signData go through `signTonProof` / `signTonConnectData`; transactions through
+ * `signTransaction` / `sendTransaction`, where they are reviewed.
+ */
+declare class MessageIsTransactionError extends SignerError {
+    readonly code = "message-is-transaction";
+    constructor();
+}
 /** Emulation of the external message failed (non-zero compute exit, aborted, action phase failed); nothing was signed or sent. */
 declare class SimulationError extends Error {
     readonly exitCode: number | undefined;
@@ -617,6 +627,62 @@ declare class WalletAccountReadOnlyTon implements IWalletAccountReadOnly {
     verify(message: string | Uint8Array, signature: string): Promise<boolean>;
 }
 
+/** What a dApp asks `ton_proof` for: its domain (host), the time of the proof, its nonce. */
+interface TonProofRequest {
+    /** The dApp's host as the wallet saw it (`app.example`), never the dApp's own claim. */
+    domain: string;
+    /** Unix seconds. */
+    timestamp: number;
+    /** The dApp's `ton_proof` payload. */
+    payload: string;
+}
+/** The `proof` object of a TON Connect `ton_proof` reply. */
+interface TonProof {
+    timestamp: number;
+    domain: {
+        lengthBytes: number;
+        value: string;
+    };
+    payload: string;
+    /** Base64 ed25519 signature. */
+    signature: string;
+}
+/** A `signData` payload. `cell` payloads need schema-aware rendering and are not signed here. */
+type TonSignDataPayload = {
+    type: 'text';
+    text: string;
+} | {
+    type: 'binary';
+    bytes: string;
+};
+/** What a dApp asks `signData` for. */
+interface TonSignDataRequest {
+    /** The dApp's host as the wallet saw it. */
+    domain: string;
+    /** Unix seconds. */
+    timestamp: number;
+    payload: TonSignDataPayload;
+}
+/** The TON Connect `signData` reply. */
+interface TonSignedData {
+    /** Base64 ed25519 signature. */
+    signature: string;
+    /** Raw form (`0:…`) of the address that signed. */
+    address: string;
+    timestamp: number;
+    domain: string;
+    payload: TonSignDataPayload;
+}
+/** The address parts the digests bind to. */
+interface TonAddressParts {
+    workChain: number;
+    hash: Uint8Array;
+}
+/** The 32 bytes a wallet signs for `ton_proof`. */
+declare function tonProofDigest(address: TonAddressParts, request: TonProofRequest): Uint8Array;
+/** The 32 bytes a wallet signs for `signData` (text / binary). */
+declare function tonSignDataDigest(address: TonAddressParts, request: TonSignDataRequest): Uint8Array;
+
 /**
  * Signing TON account on Wallet V5R1. It never holds a key: the V5R1 body is
  * signed by `signer.sign(signingCell.hash(), {scheme: 'ed25519', context:
@@ -642,14 +708,29 @@ declare class WalletAccountTon extends WalletAccountReadOnlyTon implements IWall
     static fromPrivateKey(privateKey: Uint8Array, publicKey: Uint8Array, path: string, config?: TonConfig): WalletAccountTon;
     /** Account index for the standard m/44'/607'/i' path. */
     get index(): number | undefined;
-    /** Hex ed25519 signature over the raw message bytes (ton_proof and the like). */
+    /**
+     * Hex ed25519 signature over the raw message bytes. A 32-byte message — string or bytes — is
+     * refused with {@link MessageIsTransactionError}: the wallet contract checks a transfer's
+     * signature over the 32-byte hash of its signing cell, so those bytes could be one. Bytes that
+     * carry this account's public key are refused as well: one ed25519 key (an external signer) may
+     * also be a Solana wallet, and a Solana transaction names its signer's key. TON Connect goes
+     * through {@link signTonProof} and {@link signTonConnectData}.
+     */
     sign(message: string | Uint8Array): Promise<string>;
+    /**
+     * TON Connect `ton_proof` for this wallet's address: the `proof` object of the connect reply. The
+     * digest is built here (0xffff ‖ "ton-connect" ‖ …), so no request can turn it into a transfer.
+     * `domain` is the host the wallet saw the request come from.
+     */
+    signTonProof(request: TonProofRequest): Promise<TonProof>;
+    /** TON Connect `signData` (text / binary) for this wallet's address: the reply the dApp gets. */
+    signTonConnectData(request: TonSignDataRequest): Promise<TonSignedData>;
     private checkMaxFee;
     /**
      * Checks → seqno → preflight → signed body. The preflight runs on the
      * zero-signed body (ignore_chksig), so nothing is signed before it passes.
      */
-    private prepare;
+    private signMessages;
     private preflight;
     /** Sign without broadcasting. Returns the external-message BODY as base64 BoC (pass it back to sendTransaction as a Cell). */
     signTransaction(tx: TonSendable, options?: WriteOptions): Promise<string>;
@@ -701,4 +782,4 @@ declare class WalletManagerTon extends WalletManager<WalletAccountTon, TonConfig
     getFeeRates(): Promise<FeeRates>;
 }
 
-export { CAIP2, DEFAULT_SEND_MODE, DEFAULT_TONAPI, type DecodedBody, type EmulateOptions, type EmulationOutcome, type EmulationSource, type EmulationVerdict, type GetMethodResult, JETTON_TRANSFER_OP, MAINNET_GLOBAL_ID, MAX_ACTIONS, type ParsedV5R1Body, SEND_MODE, SimulationError, TESTNET_GLOBAL_ID, TON_BASE_PATH, TON_MNEMONIC_PATH, type TonAccountState, type TonAccountStatus, TonCenter, type TonConfig, type TonDescribedKind, type TonDescribedMessage, type TonDescription, type TonEmulateConfig, type TonEndpoint, type TonFees, type TonJettonDetails, type TonProvider, type TonReceipt, type TonRisk, type TonRpc, type TonSendable, type TonSimulation, type TonSimulationSource, type TonTransaction, type TonTransferOptions, type TonWarning, type TonWarningCode, UnsafeTransactionError, type V5R1Message, type V5R1SigningParams, type V5R1WalletIdParts, V5R1_CODE_HEX, V5R1_OP, WalletAccountReadOnlyTon, WalletAccountTon, WalletManagerTon, commentCell, createTonRpc as createTonClient, createTonRpc, decodeBody, WalletManagerTon as default, describeMessageRelaxed, describeTransaction, emulateExternal, emulateViaTonapi, installBufferGlobal, parseEmulation, parseTonapiConsequences, parseTonapiRisk, parseTonapiTrace, parseV5R1Body, resolveEmulate, runEmulation, tonCenterEndpoint, v5r1Address, v5r1Code, v5r1ExternalMessage, v5r1PackSigned, v5r1PackUnsigned, v5r1SigningMessage, v5r1StateInit, v5r1WalletId };
+export { CAIP2, DEFAULT_SEND_MODE, DEFAULT_TONAPI, type DecodedBody, type EmulateOptions, type EmulationOutcome, type EmulationSource, type EmulationVerdict, type GetMethodResult, JETTON_TRANSFER_OP, MAINNET_GLOBAL_ID, MAX_ACTIONS, MessageIsTransactionError, type ParsedV5R1Body, SEND_MODE, SimulationError, TESTNET_GLOBAL_ID, TON_BASE_PATH, TON_MNEMONIC_PATH, type TonAccountState, type TonAccountStatus, type TonAddressParts, TonCenter, type TonConfig, type TonDescribedKind, type TonDescribedMessage, type TonDescription, type TonEmulateConfig, type TonEndpoint, type TonFees, type TonJettonDetails, type TonProof, type TonProofRequest, type TonProvider, type TonReceipt, type TonRisk, type TonRpc, type TonSendable, type TonSignDataPayload, type TonSignDataRequest, type TonSignedData, type TonSimulation, type TonSimulationSource, type TonTransaction, type TonTransferOptions, type TonWarning, type TonWarningCode, UnsafeTransactionError, type V5R1Message, type V5R1SigningParams, type V5R1WalletIdParts, V5R1_CODE_HEX, V5R1_OP, WalletAccountReadOnlyTon, WalletAccountTon, WalletManagerTon, commentCell, createTonRpc as createTonClient, createTonRpc, decodeBody, WalletManagerTon as default, describeMessageRelaxed, describeTransaction, emulateExternal, emulateViaTonapi, installBufferGlobal, parseEmulation, parseTonapiConsequences, parseTonapiRisk, parseTonapiTrace, parseV5R1Body, resolveEmulate, runEmulation, tonCenterEndpoint, tonProofDigest, tonSignDataDigest, v5r1Address, v5r1Code, v5r1ExternalMessage, v5r1PackSigned, v5r1PackUnsigned, v5r1SigningMessage, v5r1StateInit, v5r1WalletId };

package/dist/index.d.ts

@@ -218,6 +218,16 @@ declare class UnsafeTransactionError extends SignerError {
     readonly code: string;
     constructor(code: string, message: string);
 }
+/**
+ * `sign()` refused a 32-byte message: the wallet contract checks a transfer's signature over the
+ * 32-byte hash of its signing cell, so a signature over 32 raw bytes may authorise one. TON Connect
+ * proofs and signData go through `signTonProof` / `signTonConnectData`; transactions through
+ * `signTransaction` / `sendTransaction`, where they are reviewed.
+ */
+declare class MessageIsTransactionError extends SignerError {
+    readonly code = "message-is-transaction";
+    constructor();
+}
 /** Emulation of the external message failed (non-zero compute exit, aborted, action phase failed); nothing was signed or sent. */
 declare class SimulationError extends Error {
     readonly exitCode: number | undefined;
@@ -617,6 +627,62 @@ declare class WalletAccountReadOnlyTon implements IWalletAccountReadOnly {
     verify(message: string | Uint8Array, signature: string): Promise<boolean>;
 }
 
+/** What a dApp asks `ton_proof` for: its domain (host), the time of the proof, its nonce. */
+interface TonProofRequest {
+    /** The dApp's host as the wallet saw it (`app.example`), never the dApp's own claim. */
+    domain: string;
+    /** Unix seconds. */
+    timestamp: number;
+    /** The dApp's `ton_proof` payload. */
+    payload: string;
+}
+/** The `proof` object of a TON Connect `ton_proof` reply. */
+interface TonProof {
+    timestamp: number;
+    domain: {
+        lengthBytes: number;
+        value: string;
+    };
+    payload: string;
+    /** Base64 ed25519 signature. */
+    signature: string;
+}
+/** A `signData` payload. `cell` payloads need schema-aware rendering and are not signed here. */
+type TonSignDataPayload = {
+    type: 'text';
+    text: string;
+} | {
+    type: 'binary';
+    bytes: string;
+};
+/** What a dApp asks `signData` for. */
+interface TonSignDataRequest {
+    /** The dApp's host as the wallet saw it. */
+    domain: string;
+    /** Unix seconds. */
+    timestamp: number;
+    payload: TonSignDataPayload;
+}
+/** The TON Connect `signData` reply. */
+interface TonSignedData {
+    /** Base64 ed25519 signature. */
+    signature: string;
+    /** Raw form (`0:…`) of the address that signed. */
+    address: string;
+    timestamp: number;
+    domain: string;
+    payload: TonSignDataPayload;
+}
+/** The address parts the digests bind to. */
+interface TonAddressParts {
+    workChain: number;
+    hash: Uint8Array;
+}
+/** The 32 bytes a wallet signs for `ton_proof`. */
+declare function tonProofDigest(address: TonAddressParts, request: TonProofRequest): Uint8Array;
+/** The 32 bytes a wallet signs for `signData` (text / binary). */
+declare function tonSignDataDigest(address: TonAddressParts, request: TonSignDataRequest): Uint8Array;
+
 /**
  * Signing TON account on Wallet V5R1. It never holds a key: the V5R1 body is
  * signed by `signer.sign(signingCell.hash(), {scheme: 'ed25519', context:
@@ -642,14 +708,29 @@ declare class WalletAccountTon extends WalletAccountReadOnlyTon implements IWall
     static fromPrivateKey(privateKey: Uint8Array, publicKey: Uint8Array, path: string, config?: TonConfig): WalletAccountTon;
     /** Account index for the standard m/44'/607'/i' path. */
     get index(): number | undefined;
-    /** Hex ed25519 signature over the raw message bytes (ton_proof and the like). */
+    /**
+     * Hex ed25519 signature over the raw message bytes. A 32-byte message — string or bytes — is
+     * refused with {@link MessageIsTransactionError}: the wallet contract checks a transfer's
+     * signature over the 32-byte hash of its signing cell, so those bytes could be one. Bytes that
+     * carry this account's public key are refused as well: one ed25519 key (an external signer) may
+     * also be a Solana wallet, and a Solana transaction names its signer's key. TON Connect goes
+     * through {@link signTonProof} and {@link signTonConnectData}.
+     */
     sign(message: string | Uint8Array): Promise<string>;
+    /**
+     * TON Connect `ton_proof` for this wallet's address: the `proof` object of the connect reply. The
+     * digest is built here (0xffff ‖ "ton-connect" ‖ …), so no request can turn it into a transfer.
+     * `domain` is the host the wallet saw the request come from.
+     */
+    signTonProof(request: TonProofRequest): Promise<TonProof>;
+    /** TON Connect `signData` (text / binary) for this wallet's address: the reply the dApp gets. */
+    signTonConnectData(request: TonSignDataRequest): Promise<TonSignedData>;
     private checkMaxFee;
     /**
      * Checks → seqno → preflight → signed body. The preflight runs on the
      * zero-signed body (ignore_chksig), so nothing is signed before it passes.
      */
-    private prepare;
+    private signMessages;
     private preflight;
     /** Sign without broadcasting. Returns the external-message BODY as base64 BoC (pass it back to sendTransaction as a Cell). */
     signTransaction(tx: TonSendable, options?: WriteOptions): Promise<string>;
@@ -701,4 +782,4 @@ declare class WalletManagerTon extends WalletManager<WalletAccountTon, TonConfig
     getFeeRates(): Promise<FeeRates>;
 }
 
-export { CAIP2, DEFAULT_SEND_MODE, DEFAULT_TONAPI, type DecodedBody, type EmulateOptions, type EmulationOutcome, type EmulationSource, type EmulationVerdict, type GetMethodResult, JETTON_TRANSFER_OP, MAINNET_GLOBAL_ID, MAX_ACTIONS, type ParsedV5R1Body, SEND_MODE, SimulationError, TESTNET_GLOBAL_ID, TON_BASE_PATH, TON_MNEMONIC_PATH, type TonAccountState, type TonAccountStatus, TonCenter, type TonConfig, type TonDescribedKind, type TonDescribedMessage, type TonDescription, type TonEmulateConfig, type TonEndpoint, type TonFees, type TonJettonDetails, type TonProvider, type TonReceipt, type TonRisk, type TonRpc, type TonSendable, type TonSimulation, type TonSimulationSource, type TonTransaction, type TonTransferOptions, type TonWarning, type TonWarningCode, UnsafeTransactionError, type V5R1Message, type V5R1SigningParams, type V5R1WalletIdParts, V5R1_CODE_HEX, V5R1_OP, WalletAccountReadOnlyTon, WalletAccountTon, WalletManagerTon, commentCell, createTonRpc as createTonClient, createTonRpc, decodeBody, WalletManagerTon as default, describeMessageRelaxed, describeTransaction, emulateExternal, emulateViaTonapi, installBufferGlobal, parseEmulation, parseTonapiConsequences, parseTonapiRisk, parseTonapiTrace, parseV5R1Body, resolveEmulate, runEmulation, tonCenterEndpoint, v5r1Address, v5r1Code, v5r1ExternalMessage, v5r1PackSigned, v5r1PackUnsigned, v5r1SigningMessage, v5r1StateInit, v5r1WalletId };
+export { CAIP2, DEFAULT_SEND_MODE, DEFAULT_TONAPI, type DecodedBody, type EmulateOptions, type EmulationOutcome, type EmulationSource, type EmulationVerdict, type GetMethodResult, JETTON_TRANSFER_OP, MAINNET_GLOBAL_ID, MAX_ACTIONS, MessageIsTransactionError, type ParsedV5R1Body, SEND_MODE, SimulationError, TESTNET_GLOBAL_ID, TON_BASE_PATH, TON_MNEMONIC_PATH, type TonAccountState, type TonAccountStatus, type TonAddressParts, TonCenter, type TonConfig, type TonDescribedKind, type TonDescribedMessage, type TonDescription, type TonEmulateConfig, type TonEndpoint, type TonFees, type TonJettonDetails, type TonProof, type TonProofRequest, type TonProvider, type TonReceipt, type TonRisk, type TonRpc, type TonSendable, type TonSignDataPayload, type TonSignDataRequest, type TonSignedData, type TonSimulation, type TonSimulationSource, type TonTransaction, type TonTransferOptions, type TonWarning, type TonWarningCode, UnsafeTransactionError, type V5R1Message, type V5R1SigningParams, type V5R1WalletIdParts, V5R1_CODE_HEX, V5R1_OP, WalletAccountReadOnlyTon, WalletAccountTon, WalletManagerTon, commentCell, createTonRpc as createTonClient, createTonRpc, decodeBody, WalletManagerTon as default, describeMessageRelaxed, describeTransaction, emulateExternal, emulateViaTonapi, installBufferGlobal, parseEmulation, parseTonapiConsequences, parseTonapiRisk, parseTonapiTrace, parseV5R1Body, resolveEmulate, runEmulation, tonCenterEndpoint, tonProofDigest, tonSignDataDigest, v5r1Address, v5r1Code, v5r1ExternalMessage, v5r1PackSigned, v5r1PackUnsigned, v5r1SigningMessage, v5r1StateInit, v5r1WalletId };

package/dist/index.js

@@ -30,6 +30,13 @@ var UnsafeTransactionError = class extends SignerError {
     this.code = code;
   }
 };
+var MessageIsTransactionError = class extends SignerError {
+  code = "message-is-transaction";
+  constructor() {
+    super("This message has the shape of a transaction (a 32-byte TON hash, or bytes naming this key as a Solana signer) and is not signed; use signTonProof / signTonConnectData for TON Connect, or signTransaction so it can be reviewed.");
+    this.name = "MessageIsTransactionError";
+  }
+};
 var SimulationError = class extends Error {
   exitCode;
   aborted;
@@ -935,8 +942,75 @@ function randomQueryId() {
 
 // src/account.ts
 import { LocalSigner, feeLimit, requireCurve } from "@anywalletkit/core";
+import { Buffer as Buffer5 } from "buffer";
 import { Cell as Cell5 } from "@ton/core";
+
+// src/tonconnect.ts
+import { sha256 } from "@noble/hashes/sha2.js";
+import { Buffer as Buffer4 } from "buffer";
+var utf82 = (s) => new TextEncoder().encode(s);
+var int32BE = (n) => {
+  const b = new Uint8Array(4);
+  new DataView(b.buffer).setInt32(0, n, false);
+  return b;
+};
+var uint32 = (n, littleEndian) => {
+  const b = new Uint8Array(4);
+  new DataView(b.buffer).setUint32(0, n, littleEndian);
+  return b;
+};
+var uint64 = (n, littleEndian) => {
+  const b = new Uint8Array(8);
+  new DataView(b.buffer).setBigUint64(0, BigInt(n), littleEndian);
+  return b;
+};
+var concat = (...parts) => {
+  const out = new Uint8Array(parts.reduce((n, p) => n + p.length, 0));
+  let o = 0;
+  for (const p of parts) {
+    out.set(p, o);
+    o += p.length;
+  }
+  return out;
+};
+function checkCommon(address, domain, timestamp) {
+  if (address.hash.length !== 32) throw new RangeError("TON address hash must be 32 bytes.");
+  if (!Number.isInteger(address.workChain)) throw new TypeError("TON address workChain must be an integer.");
+  if (typeof domain !== "string" || domain.length === 0) throw new TypeError("TON Connect domain must be a non-empty string.");
+  if (typeof timestamp !== "number" || !Number.isSafeInteger(timestamp) || timestamp < 0) throw new TypeError("TON Connect timestamp must be a non-negative integer (unix seconds).");
+}
+function base64Bytes(raw) {
+  const s = raw.replace(/[\t\n\f\r ]/g, "");
+  if (!/^[A-Za-z0-9+/]*={0,2}$/.test(s) || s.replace(/=+$/, "").length % 4 === 1) throw new TypeError("signData binary payload must be base64.");
+  return new Uint8Array(Buffer4.from(s, "base64"));
+}
+function tonProofDigest(address, request) {
+  checkCommon(address, request.domain, request.timestamp);
+  if (typeof request.payload !== "string") throw new TypeError("ton_proof payload must be a string.");
+  const domain = utf82(request.domain);
+  const inner = concat(utf82("ton-proof-item-v2/"), int32BE(address.workChain), address.hash, uint32(domain.length, true), domain, uint64(request.timestamp, true), utf82(request.payload));
+  return sha256(concat(new Uint8Array([255, 255]), utf82("ton-connect"), sha256(inner)));
+}
+function tonSignDataDigest(address, request) {
+  checkCommon(address, request.domain, request.timestamp);
+  const p = request.payload;
+  let payload;
+  if (p?.type === "text" && typeof p.text === "string") payload = utf82(p.text);
+  else if (p?.type === "binary" && typeof p.bytes === "string") payload = base64Bytes(p.bytes);
+  else throw new TypeError('signData payload must be { type: "text", text } or { type: "binary", bytes }; cell payloads are not supported.');
+  const domain = utf82(request.domain);
+  return sha256(concat(new Uint8Array([255, 255]), utf82("ton-connect/sign-data/"), int32BE(address.workChain), address.hash, uint32(domain.length, false), domain, uint64(request.timestamp, false), utf82(p.type === "text" ? "txt" : "bin"), uint32(payload.length, false), payload));
+}
+
+// src/account.ts
 var toHex = (u8) => Array.from(u8, (b) => b.toString(16).padStart(2, "0")).join("");
+var carriesKey = (bytes, key) => {
+  outer: for (let i = 0; i + key.length <= bytes.length; i++) {
+    for (let j = 0; j < key.length; j++) if (bytes[i + j] !== key[j]) continue outer;
+    return true;
+  }
+  return false;
+};
 var WalletAccountTon = class _WalletAccountTon extends WalletAccountReadOnlyTon {
   /** seqno and fees come from the network before signing. */
   needsNetwork = true;
@@ -960,11 +1034,46 @@ var WalletAccountTon = class _WalletAccountTon extends WalletAccountReadOnlyTon
     const m = /^m\/44'\/607'\/(\d+)'$/.exec(this.path);
     return m ? Number(m[1]) : void 0;
   }
-  /** Hex ed25519 signature over the raw message bytes (ton_proof and the like). */
+  /**
+   * Hex ed25519 signature over the raw message bytes. A 32-byte message — string or bytes — is
+   * refused with {@link MessageIsTransactionError}: the wallet contract checks a transfer's
+   * signature over the 32-byte hash of its signing cell, so those bytes could be one. Bytes that
+   * carry this account's public key are refused as well: one ed25519 key (an external signer) may
+   * also be a Solana wallet, and a Solana transaction names its signer's key. TON Connect goes
+   * through {@link signTonProof} and {@link signTonConnectData}.
+   */
   async sign(message) {
     const bytes = typeof message === "string" ? new TextEncoder().encode(message) : message;
+    if (bytes.length === 32 || carriesKey(bytes, this.publicKey)) throw new MessageIsTransactionError();
     return toHex(await this.signer.sign(bytes, { scheme: "ed25519", context: "ton-message" }));
   }
+  /**
+   * TON Connect `ton_proof` for this wallet's address: the `proof` object of the connect reply. The
+   * digest is built here (0xffff ‖ "ton-connect" ‖ …), so no request can turn it into a transfer.
+   * `domain` is the host the wallet saw the request come from.
+   */
+  async signTonProof(request) {
+    const digest = tonProofDigest(this._address, request);
+    const signature = await this.signer.sign(digest, { scheme: "ed25519", context: "ton-proof" });
+    return {
+      timestamp: request.timestamp,
+      domain: { lengthBytes: new TextEncoder().encode(request.domain).length, value: request.domain },
+      payload: request.payload,
+      signature: Buffer5.from(signature).toString("base64")
+    };
+  }
+  /** TON Connect `signData` (text / binary) for this wallet's address: the reply the dApp gets. */
+  async signTonConnectData(request) {
+    const digest = tonSignDataDigest(this._address, request);
+    const signature = await this.signer.sign(digest, { scheme: "ed25519", context: "ton-sign-data" });
+    return {
+      signature: Buffer5.from(signature).toString("base64"),
+      address: this._address.toRawString(),
+      timestamp: request.timestamp,
+      domain: request.domain,
+      payload: request.payload.type === "text" ? { type: "text", text: request.payload.text } : { type: "binary", bytes: request.payload.bytes }
+    };
+  }
   checkMaxFee(fee, limit, op) {
     if (limit !== void 0 && fee > BigInt(limit)) throw new Error(`Exceeded maximum fee cost for ${op} operation.`);
   }
@@ -972,7 +1081,7 @@ var WalletAccountTon = class _WalletAccountTon extends WalletAccountReadOnlyTon
    * Checks → seqno → preflight → signed body. The preflight runs on the
    * zero-signed body (ignore_chksig), so nothing is signed before it passes.
    */
-  async prepare(messages, limit, op) {
+  async signMessages(messages, limit, op) {
     const want = messages.reduce((sum, m) => sum + (m.message.info.type === "internal" ? m.message.info.value.coins : 0n), 0n);
     if (want > 0n) {
       const balance = await this.getBalance();
@@ -1007,7 +1116,7 @@ var WalletAccountTon = class _WalletAccountTon extends WalletAccountReadOnlyTon
       await this.preflight(tx, feeLimit(this._config.transactionMaxFee, options), "transaction");
       return tx.toBoc().toString("base64");
     }
-    const { body } = await this.prepare(this.toMessages(tx), feeLimit(this._config.transactionMaxFee, options), "transaction");
+    const { body } = await this.signMessages(this.toMessages(tx), feeLimit(this._config.transactionMaxFee, options), "transaction");
     return body.toBoc().toString("base64");
   }
   async broadcast(body) {
@@ -1019,14 +1128,14 @@ var WalletAccountTon = class _WalletAccountTon extends WalletAccountReadOnlyTon
   /** Sign and broadcast; `hash` is the body hash (hex) — resolve it with getTransactionReceipt. */
   async sendTransaction(tx, options = {}) {
     this.requireRpc("send transactions");
-    const { body, fee } = tx instanceof Cell5 ? { body: tx, fee: await this.preflight(tx, feeLimit(this._config.transactionMaxFee, options), "transaction") } : await this.prepare(this.toMessages(tx), feeLimit(this._config.transactionMaxFee, options), "transaction");
+    const { body, fee } = tx instanceof Cell5 ? { body: tx, fee: await this.preflight(tx, feeLimit(this._config.transactionMaxFee, options), "transaction") } : await this.signMessages(this.toMessages(tx), feeLimit(this._config.transactionMaxFee, options), "transaction");
     return { hash: await this.broadcast(body), fee };
   }
   /** TON (no `token`) or jetton transfer. */
   async transfer(o, writeOptions = {}) {
     this.requireRpc("transfer tokens");
     const message = o.token ? await this.jettonTransferMessage(o) : this.transactionMessage({ to: o.recipient, value: o.amount, ...o.memo !== void 0 ? { body: o.memo } : {} });
-    const { body, fee } = await this.prepare([message], feeLimit(this._config.transferMaxFee, writeOptions), "transfer");
+    const { body, fee } = await this.signMessages([message], feeLimit(this._config.transferMaxFee, writeOptions), "transfer");
     return { hash: await this.broadcast(body), fee };
   }
   /** The same wallet as a {@link WalletAccountReadOnlyTon}. */
@@ -1130,6 +1239,7 @@ export {
   JETTON_TRANSFER_OP,
   MAINNET_GLOBAL_ID,
   MAX_ACTIONS,
+  MessageIsTransactionError,
   SEND_MODE,
   SimulationError,
   TESTNET_GLOBAL_ID,
@@ -1168,6 +1278,8 @@ export {
   runEmulation,
   tonCenterEndpoint,
   tonExplorerTxUrl,
+  tonProofDigest,
+  tonSignDataDigest,
   v5r1Address,
   v5r1Code,
   v5r1ExternalMessage,