@anywalletkit/wallet-ton 0.3.1 → 0.5.0

package/dist/index.d.cts

@@ -67,6 +67,12 @@ interface TonConfig {
     validUntilSeconds?: number;
     /** Nanotons attached to a jetton transfer on top of `forwardTonAmount` (default 0.05 TON). */
     jettonAttachedValue?: bigint | number | string;
+    /**
+     * Most nanotons a jetton `transfer()` may attach to the jetton-wallet call, `forwardTonAmount`
+     * included (default 1 TON). The contract that receives them is the one the jetton master names,
+     * so a fake master gets all of it: the cap bounds what such a call can cost.
+     */
+    maxJettonAttachedValue?: bigint | number | string;
     /**
      * 'mainnet' (ton:-239, default) or 'testnet' (ton:-3). Sets the CAIP-2 id, the address flags and the
      * wallet_id network (-239 / -3), so a testnet wallet has its own address and its signed messages are
@@ -122,8 +128,14 @@ interface TonTransferOptions {
     memo?: string;
     /** Jetton only: custom payload cell (rarely needed; e.g. mintless jettons). */
     customPayload?: Cell;
-    /** Jetton only: where excess TON returns (default: this wallet). */
+    /**
+     * Jetton only: where excess TON returns (default: this wallet). Another address is refused
+     * unless `allowForeignResponseDestination` is set: it receives TON the policies' recipient
+     * check never sees.
+     */
     responseDestination?: string;
+    /** Jetton only: let `responseDestination` be another address than this wallet. Off by default. */
+    allowForeignResponseDestination?: boolean;
     /** Jetton only: query id (default random). */
     queryId?: bigint | number;
     /** Jetton only: nanotons attached to the jetton-wallet call (default config.jettonAttachedValue + forwardTonAmount). */
@@ -469,12 +481,6 @@ interface ParsedV5R1Body {
 /** Parse a signed (or zero-signed) V5R1 external body back into its messages. Returns null for anything else. */
 declare function parseV5R1Body(body: Cell): ParsedV5R1Body | null;
 
-/**
- * "What am I signing" for TON — offline. Decodes the messages of a
- * {@link TonSendable} (or a prebuilt V5R1 body) into human-checkable items and
- * flags the classic mistakes before any key is touched.
- */
-
 /** TEP-74 `transfer` op code of a jetton wallet. */
 declare const JETTON_TRANSFER_OP = 260734629;
 /** What one outgoing message does. */
@@ -553,6 +559,21 @@ type DecodedBody = {
 };
 /** Decode a message body cell. */
 declare function decodeBody(body: Cell): DecodedBody;
+/**
+ * A base64 BoC as its single root Cell, refused when its layout is one other readers may parse
+ * differently from @ton/core: a magic other than the generic one, more than one root, absent cells,
+ * or any cell that stores its hashes (with_hashes: @ton/core skips a hash area another reader takes
+ * for data), has a level mask, or is exotic. What remains is read the same by every reader, the
+ * kit's policy reader included, whatever order the serializer put the cells in (scan 2026-10-27
+ * F2, F4). Real provider BoCs order cells differently from @ton/core, so the bytes are not required
+ * to round-trip.
+ */
+declare function canonicalBocCell(b64: string, what?: string): Cell;
+/**
+ * The body a message is built with: a Cell, a text comment, or a canonical `bodyBoc`. A `body` that is
+ * neither a string nor a Cell is refused rather than replaced by `bodyBoc` (scan 2026-10-27 F4).
+ */
+declare function messageBody(tx: TonTransaction): Cell | undefined;
 /** A text comment body (op 0 plus the text), as wallets show it. */
 declare function commentCell(text: string): Cell;
 /** Describe one outgoing message and push its warnings into `warnings`. */
@@ -723,12 +744,13 @@ declare function tonSignDataDigest(address: TonAddressParts, request: TonSignDat
  * once the transaction has passed.
  */
 declare class WalletAccountTon extends WalletAccountReadOnlyTon implements IWalletAccount {
+    #private;
     /** seqno and fees come from the network before signing. */
     readonly needsNetwork = true;
     /** Derivation path, `ton-mnemonic`, or `external`. */
     readonly path: string;
-    /** The signer that holds the key. */
-    readonly signer: Signer;
+    /** What holds the key: `seed`, `key` (one imported key) or `external`. */
+    readonly signerKind: Signer['kind'];
     private _readOnly;
     /** `publicKey` is the signer's 32-byte ed25519 key; the V5R1 address derives from it synchronously. */
     constructor(signer: Signer, publicKey: Uint8Array, path: string, config?: TonConfig);
@@ -766,7 +788,6 @@ declare class WalletAccountTon extends WalletAccountReadOnlyTon implements IWall
     private assertNoDrain;
     /** The send modes of a prebuilt V5R1 body; an unreadable body is left to the emulation and the node. */
     private bodyModes;
-    private signMessages;
     private preflight;
     /** Sign without broadcasting. Returns the external-message BODY as base64 BoC (pass it back to sendTransaction as a Cell). */
     signTransaction(tx: TonSendable, options?: WriteOptions): Promise<string>;
@@ -818,4 +839,4 @@ declare class WalletManagerTon extends WalletManager<WalletAccountTon, TonConfig
     getFeeRates(): Promise<FeeRates>;
 }
 
-export { BroadcastUnknownError, CAIP2, DEFAULT_SEND_MODE, DEFAULT_TONAPI, type DecodedBody, type EmulateOptions, type EmulationOutcome, type EmulationSource, type EmulationVerdict, type GetMethodResult, JETTON_TRANSFER_OP, MAINNET_GLOBAL_ID, MAX_ACTIONS, MessageIsTransactionError, type ParsedV5R1Body, SEND_MODE, SimulationError, TESTNET_GLOBAL_ID, TON_BASE_PATH, TON_MNEMONIC_PATH, type TonAccountState, type TonAccountStatus, type TonAddressParts, TonCenter, type TonConfig, type TonDescribedKind, type TonDescribedMessage, type TonDescription, type TonEmulateConfig, type TonEndpoint, type TonFees, type TonJettonDetails, type TonProof, type TonProofRequest, type TonProvider, type TonReceipt, type TonRisk, type TonRpc, type TonSendable, type TonSignDataPayload, type TonSignDataRequest, type TonSignedData, type TonSimulation, type TonSimulationSource, type TonTransaction, type TonTransferOptions, type TonWarning, type TonWarningCode, UnsafeTransactionError, type V5R1Message, type V5R1SigningParams, type V5R1WalletIdParts, V5R1_CODE_HEX, V5R1_OP, WalletAccountReadOnlyTon, WalletAccountTon, WalletManagerTon, commentCell, createTonRpc as createTonClient, createTonRpc, decodeBody, WalletManagerTon as default, describeMessageRelaxed, describeTransaction, emulateExternal, emulateViaTonapi, installBufferGlobal, isAnsweredRefusal, parseEmulation, parseTonapiConsequences, parseTonapiRisk, parseTonapiTrace, parseV5R1Body, resolveEmulate, runEmulation, tonCenterEndpoint, tonProofDigest, tonSignDataDigest, v5r1Address, v5r1Code, v5r1ExternalMessage, v5r1PackSigned, v5r1PackUnsigned, v5r1SigningMessage, v5r1StateInit, v5r1WalletId };
+export { BroadcastUnknownError, CAIP2, DEFAULT_SEND_MODE, DEFAULT_TONAPI, type DecodedBody, type EmulateOptions, type EmulationOutcome, type EmulationSource, type EmulationVerdict, type GetMethodResult, JETTON_TRANSFER_OP, MAINNET_GLOBAL_ID, MAX_ACTIONS, MessageIsTransactionError, type ParsedV5R1Body, SEND_MODE, SimulationError, TESTNET_GLOBAL_ID, TON_BASE_PATH, TON_MNEMONIC_PATH, type TonAccountState, type TonAccountStatus, type TonAddressParts, TonCenter, type TonConfig, type TonDescribedKind, type TonDescribedMessage, type TonDescription, type TonEmulateConfig, type TonEndpoint, type TonFees, type TonJettonDetails, type TonProof, type TonProofRequest, type TonProvider, type TonReceipt, type TonRisk, type TonRpc, type TonSendable, type TonSignDataPayload, type TonSignDataRequest, type TonSignedData, type TonSimulation, type TonSimulationSource, type TonTransaction, type TonTransferOptions, type TonWarning, type TonWarningCode, UnsafeTransactionError, type V5R1Message, type V5R1SigningParams, type V5R1WalletIdParts, V5R1_CODE_HEX, V5R1_OP, WalletAccountReadOnlyTon, WalletAccountTon, WalletManagerTon, canonicalBocCell, commentCell, createTonRpc as createTonClient, createTonRpc, decodeBody, WalletManagerTon as default, describeMessageRelaxed, describeTransaction, emulateExternal, emulateViaTonapi, installBufferGlobal, isAnsweredRefusal, messageBody, parseEmulation, parseTonapiConsequences, parseTonapiRisk, parseTonapiTrace, parseV5R1Body, resolveEmulate, runEmulation, tonCenterEndpoint, tonProofDigest, tonSignDataDigest, v5r1Address, v5r1Code, v5r1ExternalMessage, v5r1PackSigned, v5r1PackUnsigned, v5r1SigningMessage, v5r1StateInit, v5r1WalletId };

package/dist/index.d.ts

@@ -67,6 +67,12 @@ interface TonConfig {
     validUntilSeconds?: number;
     /** Nanotons attached to a jetton transfer on top of `forwardTonAmount` (default 0.05 TON). */
     jettonAttachedValue?: bigint | number | string;
+    /**
+     * Most nanotons a jetton `transfer()` may attach to the jetton-wallet call, `forwardTonAmount`
+     * included (default 1 TON). The contract that receives them is the one the jetton master names,
+     * so a fake master gets all of it: the cap bounds what such a call can cost.
+     */
+    maxJettonAttachedValue?: bigint | number | string;
     /**
      * 'mainnet' (ton:-239, default) or 'testnet' (ton:-3). Sets the CAIP-2 id, the address flags and the
      * wallet_id network (-239 / -3), so a testnet wallet has its own address and its signed messages are
@@ -122,8 +128,14 @@ interface TonTransferOptions {
     memo?: string;
     /** Jetton only: custom payload cell (rarely needed; e.g. mintless jettons). */
     customPayload?: Cell;
-    /** Jetton only: where excess TON returns (default: this wallet). */
+    /**
+     * Jetton only: where excess TON returns (default: this wallet). Another address is refused
+     * unless `allowForeignResponseDestination` is set: it receives TON the policies' recipient
+     * check never sees.
+     */
     responseDestination?: string;
+    /** Jetton only: let `responseDestination` be another address than this wallet. Off by default. */
+    allowForeignResponseDestination?: boolean;
     /** Jetton only: query id (default random). */
     queryId?: bigint | number;
     /** Jetton only: nanotons attached to the jetton-wallet call (default config.jettonAttachedValue + forwardTonAmount). */
@@ -469,12 +481,6 @@ interface ParsedV5R1Body {
 /** Parse a signed (or zero-signed) V5R1 external body back into its messages. Returns null for anything else. */
 declare function parseV5R1Body(body: Cell): ParsedV5R1Body | null;
 
-/**
- * "What am I signing" for TON — offline. Decodes the messages of a
- * {@link TonSendable} (or a prebuilt V5R1 body) into human-checkable items and
- * flags the classic mistakes before any key is touched.
- */
-
 /** TEP-74 `transfer` op code of a jetton wallet. */
 declare const JETTON_TRANSFER_OP = 260734629;
 /** What one outgoing message does. */
@@ -553,6 +559,21 @@ type DecodedBody = {
 };
 /** Decode a message body cell. */
 declare function decodeBody(body: Cell): DecodedBody;
+/**
+ * A base64 BoC as its single root Cell, refused when its layout is one other readers may parse
+ * differently from @ton/core: a magic other than the generic one, more than one root, absent cells,
+ * or any cell that stores its hashes (with_hashes: @ton/core skips a hash area another reader takes
+ * for data), has a level mask, or is exotic. What remains is read the same by every reader, the
+ * kit's policy reader included, whatever order the serializer put the cells in (scan 2026-10-27
+ * F2, F4). Real provider BoCs order cells differently from @ton/core, so the bytes are not required
+ * to round-trip.
+ */
+declare function canonicalBocCell(b64: string, what?: string): Cell;
+/**
+ * The body a message is built with: a Cell, a text comment, or a canonical `bodyBoc`. A `body` that is
+ * neither a string nor a Cell is refused rather than replaced by `bodyBoc` (scan 2026-10-27 F4).
+ */
+declare function messageBody(tx: TonTransaction): Cell | undefined;
 /** A text comment body (op 0 plus the text), as wallets show it. */
 declare function commentCell(text: string): Cell;
 /** Describe one outgoing message and push its warnings into `warnings`. */
@@ -723,12 +744,13 @@ declare function tonSignDataDigest(address: TonAddressParts, request: TonSignDat
  * once the transaction has passed.
  */
 declare class WalletAccountTon extends WalletAccountReadOnlyTon implements IWalletAccount {
+    #private;
     /** seqno and fees come from the network before signing. */
     readonly needsNetwork = true;
     /** Derivation path, `ton-mnemonic`, or `external`. */
     readonly path: string;
-    /** The signer that holds the key. */
-    readonly signer: Signer;
+    /** What holds the key: `seed`, `key` (one imported key) or `external`. */
+    readonly signerKind: Signer['kind'];
     private _readOnly;
     /** `publicKey` is the signer's 32-byte ed25519 key; the V5R1 address derives from it synchronously. */
     constructor(signer: Signer, publicKey: Uint8Array, path: string, config?: TonConfig);
@@ -766,7 +788,6 @@ declare class WalletAccountTon extends WalletAccountReadOnlyTon implements IWall
     private assertNoDrain;
     /** The send modes of a prebuilt V5R1 body; an unreadable body is left to the emulation and the node. */
     private bodyModes;
-    private signMessages;
     private preflight;
     /** Sign without broadcasting. Returns the external-message BODY as base64 BoC (pass it back to sendTransaction as a Cell). */
     signTransaction(tx: TonSendable, options?: WriteOptions): Promise<string>;
@@ -818,4 +839,4 @@ declare class WalletManagerTon extends WalletManager<WalletAccountTon, TonConfig
     getFeeRates(): Promise<FeeRates>;
 }
 
-export { BroadcastUnknownError, CAIP2, DEFAULT_SEND_MODE, DEFAULT_TONAPI, type DecodedBody, type EmulateOptions, type EmulationOutcome, type EmulationSource, type EmulationVerdict, type GetMethodResult, JETTON_TRANSFER_OP, MAINNET_GLOBAL_ID, MAX_ACTIONS, MessageIsTransactionError, type ParsedV5R1Body, SEND_MODE, SimulationError, TESTNET_GLOBAL_ID, TON_BASE_PATH, TON_MNEMONIC_PATH, type TonAccountState, type TonAccountStatus, type TonAddressParts, TonCenter, type TonConfig, type TonDescribedKind, type TonDescribedMessage, type TonDescription, type TonEmulateConfig, type TonEndpoint, type TonFees, type TonJettonDetails, type TonProof, type TonProofRequest, type TonProvider, type TonReceipt, type TonRisk, type TonRpc, type TonSendable, type TonSignDataPayload, type TonSignDataRequest, type TonSignedData, type TonSimulation, type TonSimulationSource, type TonTransaction, type TonTransferOptions, type TonWarning, type TonWarningCode, UnsafeTransactionError, type V5R1Message, type V5R1SigningParams, type V5R1WalletIdParts, V5R1_CODE_HEX, V5R1_OP, WalletAccountReadOnlyTon, WalletAccountTon, WalletManagerTon, commentCell, createTonRpc as createTonClient, createTonRpc, decodeBody, WalletManagerTon as default, describeMessageRelaxed, describeTransaction, emulateExternal, emulateViaTonapi, installBufferGlobal, isAnsweredRefusal, parseEmulation, parseTonapiConsequences, parseTonapiRisk, parseTonapiTrace, parseV5R1Body, resolveEmulate, runEmulation, tonCenterEndpoint, tonProofDigest, tonSignDataDigest, v5r1Address, v5r1Code, v5r1ExternalMessage, v5r1PackSigned, v5r1PackUnsigned, v5r1SigningMessage, v5r1StateInit, v5r1WalletId };
+export { BroadcastUnknownError, CAIP2, DEFAULT_SEND_MODE, DEFAULT_TONAPI, type DecodedBody, type EmulateOptions, type EmulationOutcome, type EmulationSource, type EmulationVerdict, type GetMethodResult, JETTON_TRANSFER_OP, MAINNET_GLOBAL_ID, MAX_ACTIONS, MessageIsTransactionError, type ParsedV5R1Body, SEND_MODE, SimulationError, TESTNET_GLOBAL_ID, TON_BASE_PATH, TON_MNEMONIC_PATH, type TonAccountState, type TonAccountStatus, type TonAddressParts, TonCenter, type TonConfig, type TonDescribedKind, type TonDescribedMessage, type TonDescription, type TonEmulateConfig, type TonEndpoint, type TonFees, type TonJettonDetails, type TonProof, type TonProofRequest, type TonProvider, type TonReceipt, type TonRisk, type TonRpc, type TonSendable, type TonSignDataPayload, type TonSignDataRequest, type TonSignedData, type TonSimulation, type TonSimulationSource, type TonTransaction, type TonTransferOptions, type TonWarning, type TonWarningCode, UnsafeTransactionError, type V5R1Message, type V5R1SigningParams, type V5R1WalletIdParts, V5R1_CODE_HEX, V5R1_OP, WalletAccountReadOnlyTon, WalletAccountTon, WalletManagerTon, canonicalBocCell, commentCell, createTonRpc as createTonClient, createTonRpc, decodeBody, WalletManagerTon as default, describeMessageRelaxed, describeTransaction, emulateExternal, emulateViaTonapi, installBufferGlobal, isAnsweredRefusal, messageBody, parseEmulation, parseTonapiConsequences, parseTonapiRisk, parseTonapiTrace, parseV5R1Body, resolveEmulate, runEmulation, tonCenterEndpoint, tonProofDigest, tonSignDataDigest, v5r1Address, v5r1Code, v5r1ExternalMessage, v5r1PackSigned, v5r1PackUnsigned, v5r1SigningMessage, v5r1StateInit, v5r1WalletId };

package/dist/index.js

@@ -10,7 +10,7 @@ import {
   rawTonAddress,
   tonExplorerTxUrl,
   valueFlowTransfers
-} from "./chunk-RCL4PSJZ.js";
+} from "./chunk-ZFENRKRW.js";
 
 // src/buffer-global.ts
 import { Buffer } from "buffer";
@@ -559,6 +559,7 @@ function parseV5R1Body(body) {
 }
 
 // src/describe.ts
+import { Buffer as Buffer4 } from "buffer";
 import { Address as Address3, Cell as Cell3, beginCell as beginCell2 } from "@ton/core";
 var JETTON_TRANSFER_OP = 260734629;
 var LARGE_FORWARD_NANOTON = 500000000n;
@@ -618,11 +619,67 @@ function parseTo(to) {
   const a = Address3.parse(to);
   return { to: a.toRawString(), bounceable: true, workchain: a.workChain };
 }
-function bodyOf(tx) {
+function canonicalBocCell(b64, what = "bodyBoc") {
+  if (!/^[A-Za-z0-9+/_-]+={0,2}$/.test(b64)) throw new UnsafeTransactionError("non-canonical-boc", `${what} is not a base64 string.`);
+  const bytes = Buffer4.from(b64, "base64");
+  const layout = plainBocLayout(bytes);
+  if (layout !== null) throw new UnsafeTransactionError("non-canonical-boc", `${what} is not a plain single-root BoC (${layout}), so what was reviewed may not be what is signed.`);
+  let roots;
+  try {
+    roots = Cell3.fromBoc(bytes);
+  } catch {
+    throw new UnsafeTransactionError("non-canonical-boc", `${what} is not a valid BoC.`);
+  }
+  if (roots.length !== 1) throw new UnsafeTransactionError("non-canonical-boc", `${what} has ${roots.length} roots.`);
+  return roots[0];
+}
+function plainBocLayout(b) {
+  if (b.length < 6 || b[0] !== 181 || b[1] !== 238 || b[2] !== 156 || b[3] !== 114) return "not the generic BoC magic";
+  const flags = b[4];
+  const size = flags & 7;
+  const offBytes = b[5];
+  if (size < 1 || size > 4 || offBytes < 1 || offBytes > 8) return "bad size fields";
+  let i = 6;
+  const int = (n) => {
+    if (i + n > b.length) throw new RangeError("truncated");
+    let v = 0;
+    for (let k = 0; k < n; k++) v = v * 256 + b[i++];
+    return v;
+  };
+  try {
+    const cells = int(size);
+    const roots = int(size);
+    const absent = int(size);
+    int(offBytes);
+    if (roots !== 1) return `${roots} roots`;
+    if (absent !== 0) return "absent cells";
+    i += roots * size;
+    if (flags & 128) i += cells * offBytes;
+    for (let c = 0; c < cells; c++) {
+      if (i + 2 > b.length) return "truncated";
+      const d1 = b[i++];
+      const d2 = b[i++];
+      if (d1 & 16) return "a cell stores its hashes";
+      if (d1 >> 5 !== 0) return "a cell has a level mask";
+      if (d1 & 8) return "an exotic cell";
+      if ((d1 & 7) > 4) return "a cell with more than 4 refs";
+      i += Math.ceil(d2 / 2) + (d1 & 7) * size;
+    }
+    if (i + (flags & 64 ? 4 : 0) !== b.length) return "trailing or missing bytes";
+  } catch {
+    return "truncated";
+  }
+  return null;
+}
+function messageBody(tx) {
   if (tx.body instanceof Cell3) return tx.body;
   if (typeof tx.body === "string") return tx.body === "" ? void 0 : commentCell(tx.body);
-  if (tx.bodyBoc) return Cell3.fromBase64(tx.bodyBoc);
-  return void 0;
+  if (tx.body !== void 0) throw new UnsafeTransactionError("body", "A message body must be a Cell or a string (a text comment).");
+  if (tx.bodyBoc !== void 0 && typeof tx.bodyBoc !== "string") throw new UnsafeTransactionError("body", "bodyBoc must be a base64 string.");
+  return tx.bodyBoc ? canonicalBocCell(tx.bodyBoc) : void 0;
+}
+function bodyOf(tx) {
+  return messageBody(tx);
 }
 function commentCell(text) {
   return beginCell2().storeUint(0, 32).storeStringTail(text).endCell();
@@ -728,6 +785,8 @@ import { ed25519 } from "@noble/curves/ed25519.js";
 import { Address as Address4, Cell as Cell4, beginCell as beginCell3, internal, loadStateInit } from "@ton/core";
 var JETTON_TRANSFER_OP2 = 260734629;
 var DEFAULT_JETTON_ATTACHED = 50000000n;
+var DEFAULT_MAX_JETTON_ATTACHED = 1000000000n;
+var RAW_ADDRESS = /^-?\d+:[0-9a-fA-F]{64}$/;
 var DEFAULT_INDEXER = "https://toncenter.com/api/v3";
 var DEFAULT_VALID_SECONDS = 60;
 var MAX_VALID_SECONDS = 600;
@@ -829,13 +888,15 @@ var WalletAccountReadOnlyTon = class {
     let address;
     let bounceable = true;
     let testOnly;
-    if (Address4.isFriendly(to)) {
+    if (typeof to === "string" && Address4.isFriendly(to)) {
       const f = Address4.parseFriendly(to);
       address = f.address;
       bounceable = f.isBounceable;
       testOnly = f.isTestOnly;
-    } else {
+    } else if (typeof to === "string" && RAW_ADDRESS.test(to)) {
       address = Address4.parse(to);
+    } else {
+      throw new UnsafeTransactionError("address", `${JSON.stringify(to)} is not a TON address in a strict form (raw wc:hex, or a friendly address with its checksum).`);
     }
     if (address.workChain !== 0 && address.workChain !== -1) throw new UnsafeTransactionError("exotic-workchain", `Refusing to send to workchain ${address.workChain}.`);
     const testnet = this._config.network === "testnet";
@@ -848,7 +909,7 @@ var WalletAccountReadOnlyTon = class {
     const value = big(tx.value);
     if (value <= 0n) throw new UnsafeTransactionError("zero-value", "TON message value must be positive.");
     const { address, bounceable } = this.checkedAddress(tx.to);
-    const body = tx.body instanceof Cell4 ? tx.body : typeof tx.body === "string" ? tx.body === "" ? void 0 : commentCell(tx.body) : tx.bodyBoc ? Cell4.fromBase64(tx.bodyBoc) : void 0;
+    const body = messageBody(tx);
     const init = this.stateInitOf(tx.stateInit);
     const message = internal({ to: address, value, bounce: tx.bounceable ?? bounceable, ...body ? { body } : {}, ...init ? { init } : {} });
     return { message, ...tx.sendMode !== void 0 ? { mode: tx.sendMode } : {} };
@@ -858,14 +919,22 @@ var WalletAccountReadOnlyTon = class {
     if (amount <= 0n) throw new UnsafeTransactionError("zero-value", "Jetton amount must be positive.");
     const recipient = this.checkedAddress(o.recipient).address;
     const response = o.responseDestination ? this.checkedAddress(o.responseDestination).address : void 0;
+    if (response && !response.equals(this._address) && o.allowForeignResponseDestination !== true) {
+      throw new UnsafeTransactionError("foreign-response-destination", `The excess TON of this jetton transfer would go to ${response.toString()}, not to this wallet; pass allowForeignResponseDestination to allow it.`);
+    }
+    const forwardTon = o.forwardTonAmount !== void 0 ? big(o.forwardTonAmount) : 1n;
+    const attached = o.attachedValue !== void 0 ? big(o.attachedValue) : (this._config.jettonAttachedValue !== void 0 ? big(this._config.jettonAttachedValue) : DEFAULT_JETTON_ATTACHED) + forwardTon;
+    const maxAttached = this._config.maxJettonAttachedValue !== void 0 ? big(this._config.maxJettonAttachedValue) : DEFAULT_MAX_JETTON_ATTACHED;
+    if (attached > maxAttached || forwardTon > attached) {
+      throw new UnsafeTransactionError("attached-value", `A jetton transfer may attach at most ${maxAttached} nanotons, forwardTonAmount included (asked: ${attached}, forward ${forwardTon}); raise config.maxJettonAttachedValue if this is intended.`);
+    }
     const jw = await this.getJettonWalletAddress(o.token);
     await this.jettonWalletData(o.token, jw);
-    const forwardTonAmount = o.forwardTonAmount !== void 0 ? big(o.forwardTonAmount) : 1n;
+    const forwardTonAmount = forwardTon;
     if (o.memo !== void 0 && o.forwardPayload !== void 0) throw new UnsafeTransactionError("memo-and-payload", "Pass either memo or forwardPayload, not both: a jetton transfer carries one forward payload.");
     const payload = o.forwardPayload ?? o.memo;
     const forwardPayload = payload === void 0 ? null : typeof payload === "string" ? commentCell(payload) : payload;
     const body = beginCell3().storeUint(JETTON_TRANSFER_OP2, 32).storeUint(o.queryId !== void 0 ? BigInt(o.queryId) : randomQueryId(), 64).storeCoins(amount).storeAddress(recipient).storeAddress(response ?? this._address).storeMaybeRef(o.customPayload ?? null).storeCoins(forwardTonAmount).storeMaybeRef(forwardPayload).endCell();
-    const attached = o.attachedValue !== void 0 ? big(o.attachedValue) : (this._config.jettonAttachedValue !== void 0 ? big(this._config.jettonAttachedValue) : DEFAULT_JETTON_ATTACHED) + forwardTonAmount;
     return { message: internal({ to: jw, value: attached, bounce: true, body }) };
   }
   toMessages(tx) {
@@ -982,12 +1051,12 @@ function randomQueryId() {
 
 // src/account.ts
 import { LocalSigner, feeLimit, requireCurve } from "@anywalletkit/core";
-import { Buffer as Buffer5 } from "buffer";
+import { Buffer as Buffer6 } from "buffer";
 import { Cell as Cell5 } from "@ton/core";
 
 // src/tonconnect.ts
 import { sha256 } from "@noble/hashes/sha2.js";
-import { Buffer as Buffer4 } from "buffer";
+import { Buffer as Buffer5 } from "buffer";
 var utf82 = (s) => new TextEncoder().encode(s);
 var int32BE = (n) => {
   const b = new Uint8Array(4);
@@ -1022,7 +1091,7 @@ function checkCommon(address, domain, timestamp) {
 function base64Bytes(raw) {
   const s = raw.replace(/[\t\n\f\r ]/g, "");
   if (!/^[A-Za-z0-9+/]*={0,2}$/.test(s) || s.replace(/=+$/, "").length % 4 === 1) throw new TypeError("signData binary payload must be base64.");
-  return new Uint8Array(Buffer4.from(s, "base64"));
+  return new Uint8Array(Buffer5.from(s, "base64"));
 }
 function tonProofDigest(address, request) {
   checkCommon(address, request.domain, request.timestamp);
@@ -1056,13 +1125,20 @@ var WalletAccountTon = class _WalletAccountTon extends WalletAccountReadOnlyTon
   needsNetwork = true;
   /** Derivation path, `ton-mnemonic`, or `external`. */
   path;
-  /** The signer that holds the key. */
-  signer;
+  /**
+   * The signer that holds the key, in a private field: not a property of the account, so no code
+   * the account is handed to (a protocol module, a logger) can reach it and sign around the
+   * account's checks (audit 2026-10-29 A1).
+   */
+  #signer;
+  /** What holds the key: `seed`, `key` (one imported key) or `external`. */
+  signerKind;
   _readOnly;
   /** `publicKey` is the signer's 32-byte ed25519 key; the V5R1 address derives from it synchronously. */
   constructor(signer, publicKey, path, config = {}) {
     super(publicKey, config);
-    this.signer = requireCurve(signer, "ed25519");
+    this.#signer = requireCurve(signer, "ed25519");
+    this.signerKind = this.#signer.kind;
     this.path = path;
   }
   /** Back-compat: wrap a raw derived key in a {@link LocalSigner} (the account takes ownership; it cannot derive). */
@@ -1085,7 +1161,7 @@ var WalletAccountTon = class _WalletAccountTon extends WalletAccountReadOnlyTon
   async sign(message) {
     const bytes = typeof message === "string" ? new TextEncoder().encode(message) : message;
     if (bytes.length === 32 || carriesKey(bytes, this.publicKey)) throw new MessageIsTransactionError();
-    return toHex(await this.signer.sign(bytes, { scheme: "ed25519", context: "ton-message" }));
+    return toHex(await this.#signer.sign(bytes, { scheme: "ed25519", context: "ton-message" }));
   }
   /**
    * TON Connect `ton_proof` for this wallet's address: the `proof` object of the connect reply. The
@@ -1094,20 +1170,20 @@ var WalletAccountTon = class _WalletAccountTon extends WalletAccountReadOnlyTon
    */
   async signTonProof(request) {
     const digest = tonProofDigest(this._address, request);
-    const signature = await this.signer.sign(digest, { scheme: "ed25519", context: "ton-proof" });
+    const signature = await this.#signer.sign(digest, { scheme: "ed25519", context: "ton-proof" });
     return {
       timestamp: request.timestamp,
       domain: { lengthBytes: new TextEncoder().encode(request.domain).length, value: request.domain },
       payload: request.payload,
-      signature: Buffer5.from(signature).toString("base64")
+      signature: Buffer6.from(signature).toString("base64")
     };
   }
   /** TON Connect `signData` (text / binary) for this wallet's address: the reply the dApp gets. */
   async signTonConnectData(request) {
     const digest = tonSignDataDigest(this._address, request);
-    const signature = await this.signer.sign(digest, { scheme: "ed25519", context: "ton-sign-data" });
+    const signature = await this.#signer.sign(digest, { scheme: "ed25519", context: "ton-sign-data" });
     return {
-      signature: Buffer5.from(signature).toString("base64"),
+      signature: Buffer6.from(signature).toString("base64"),
       address: this._address.toRawString(),
       timestamp: request.timestamp,
       domain: request.domain,
@@ -1135,7 +1211,7 @@ var WalletAccountTon = class _WalletAccountTon extends WalletAccountReadOnlyTon
   bodyModes(body) {
     return parseV5R1Body(body)?.messages.map((m) => m.mode) ?? [];
   }
-  async signMessages(messages, limit, op) {
+  async #signMessages(messages, limit, op) {
     this.assertNoDrain(messages.map((m) => sendModeOf(m.mode)));
     const want = messages.reduce((sum, m) => sum + (m.message.info.type === "internal" ? m.message.info.value.coins : 0n), 0n);
     if (want > 0n) {
@@ -1144,7 +1220,7 @@ var WalletAccountTon = class _WalletAccountTon extends WalletAccountReadOnlyTon
     }
     const { signing } = await this.signingCell(messages);
     const fee = await this.preflight(v5r1PackUnsigned(signing), limit, op, want);
-    const signature = await this.signer.sign(new Uint8Array(signing.hash()), { scheme: "ed25519", context: "ton-external" });
+    const signature = await this.#signer.sign(new Uint8Array(signing.hash()), { scheme: "ed25519", context: "ton-external" });
     return { body: v5r1PackSigned(signing, signature), fee };
   }
   async preflight(body, limit, op, expectedTonOut) {
@@ -1172,7 +1248,7 @@ var WalletAccountTon = class _WalletAccountTon extends WalletAccountReadOnlyTon
       await this.preflight(tx, feeLimit(this._config.transactionMaxFee, options), "transaction");
       return tx.toBoc().toString("base64");
     }
-    const { body } = await this.signMessages(this.toMessages(tx), feeLimit(this._config.transactionMaxFee, options), "transaction");
+    const { body } = await this.#signMessages(this.toMessages(tx), feeLimit(this._config.transactionMaxFee, options), "transaction");
     return body.toBoc().toString("base64");
   }
   async broadcast(body) {
@@ -1191,14 +1267,14 @@ var WalletAccountTon = class _WalletAccountTon extends WalletAccountReadOnlyTon
   async sendTransaction(tx, options = {}) {
     this.requireRpc("send transactions");
     if (tx instanceof Cell5) this.assertNoDrain(this.bodyModes(tx));
-    const { body, fee } = tx instanceof Cell5 ? { body: tx, fee: await this.preflight(tx, feeLimit(this._config.transactionMaxFee, options), "transaction") } : await this.signMessages(this.toMessages(tx), feeLimit(this._config.transactionMaxFee, options), "transaction");
+    const { body, fee } = tx instanceof Cell5 ? { body: tx, fee: await this.preflight(tx, feeLimit(this._config.transactionMaxFee, options), "transaction") } : await this.#signMessages(this.toMessages(tx), feeLimit(this._config.transactionMaxFee, options), "transaction");
     return { hash: await this.broadcast(body), fee };
   }
   /** TON (no `token`) or jetton transfer. */
   async transfer(o, writeOptions = {}) {
     this.requireRpc("transfer tokens");
     const message = o.token ? await this.jettonTransferMessage(o) : this.transactionMessage({ to: o.recipient, value: o.amount, ...o.memo !== void 0 ? { body: o.memo } : {} });
-    const { body, fee } = await this.signMessages([message], feeLimit(this._config.transferMaxFee, writeOptions), "transfer");
+    const { body, fee } = await this.#signMessages([message], feeLimit(this._config.transferMaxFee, writeOptions), "transfer");
     return { hash: await this.broadcast(body), fee };
   }
   /** The same wallet as a {@link WalletAccountReadOnlyTon}. */
@@ -1208,7 +1284,7 @@ var WalletAccountTon = class _WalletAccountTon extends WalletAccountReadOnlyTon
   }
   /** Disposes the signer: a local key is zeroized, an external one is released. */
   dispose() {
-    this.signer.dispose();
+    this.#signer.dispose();
   }
 };
 
@@ -1317,6 +1393,7 @@ export {
   WalletAccountReadOnlyTon,
   WalletAccountTon,
   WalletManagerTon,
+  canonicalBocCell,
   commentCell,
   createTonRpc as createTonClient,
   createTonHistory,
@@ -1334,6 +1411,7 @@ export {
   mapActions as mapTonapiActions,
   mapTonapiEvent,
   mapToncenterTransaction,
+  messageBody,
   parseEmulation,
   parseTonapiConsequences,
   parseTonapiRisk,