@anywalletkit/wallet-ton 0.4.0 → 0.5.0

package/dist/index.cjs

@@ -1191,13 +1191,20 @@ var WalletAccountTon = class _WalletAccountTon extends WalletAccountReadOnlyTon
   needsNetwork = true;
   /** Derivation path, `ton-mnemonic`, or `external`. */
   path;
-  /** The signer that holds the key. */
-  signer;
+  /**
+   * The signer that holds the key, in a private field: not a property of the account, so no code
+   * the account is handed to (a protocol module, a logger) can reach it and sign around the
+   * account's checks (audit 2026-10-29 A1).
+   */
+  #signer;
+  /** What holds the key: `seed`, `key` (one imported key) or `external`. */
+  signerKind;
   _readOnly;
   /** `publicKey` is the signer's 32-byte ed25519 key; the V5R1 address derives from it synchronously. */
   constructor(signer, publicKey, path, config = {}) {
     super(publicKey, config);
-    this.signer = (0, import_core9.requireCurve)(signer, "ed25519");
+    this.#signer = (0, import_core9.requireCurve)(signer, "ed25519");
+    this.signerKind = this.#signer.kind;
     this.path = path;
   }
   /** Back-compat: wrap a raw derived key in a {@link LocalSigner} (the account takes ownership; it cannot derive). */
@@ -1220,7 +1227,7 @@ var WalletAccountTon = class _WalletAccountTon extends WalletAccountReadOnlyTon
   async sign(message) {
     const bytes = typeof message === "string" ? new TextEncoder().encode(message) : message;
     if (bytes.length === 32 || carriesKey(bytes, this.publicKey)) throw new MessageIsTransactionError();
-    return toHex(await this.signer.sign(bytes, { scheme: "ed25519", context: "ton-message" }));
+    return toHex(await this.#signer.sign(bytes, { scheme: "ed25519", context: "ton-message" }));
   }
   /**
    * TON Connect `ton_proof` for this wallet's address: the `proof` object of the connect reply. The
@@ -1229,7 +1236,7 @@ var WalletAccountTon = class _WalletAccountTon extends WalletAccountReadOnlyTon
    */
   async signTonProof(request) {
     const digest = tonProofDigest(this._address, request);
-    const signature = await this.signer.sign(digest, { scheme: "ed25519", context: "ton-proof" });
+    const signature = await this.#signer.sign(digest, { scheme: "ed25519", context: "ton-proof" });
     return {
       timestamp: request.timestamp,
       domain: { lengthBytes: new TextEncoder().encode(request.domain).length, value: request.domain },
@@ -1240,7 +1247,7 @@ var WalletAccountTon = class _WalletAccountTon extends WalletAccountReadOnlyTon
   /** TON Connect `signData` (text / binary) for this wallet's address: the reply the dApp gets. */
   async signTonConnectData(request) {
     const digest = tonSignDataDigest(this._address, request);
-    const signature = await this.signer.sign(digest, { scheme: "ed25519", context: "ton-sign-data" });
+    const signature = await this.#signer.sign(digest, { scheme: "ed25519", context: "ton-sign-data" });
     return {
       signature: import_buffer6.Buffer.from(signature).toString("base64"),
       address: this._address.toRawString(),
@@ -1279,7 +1286,7 @@ var WalletAccountTon = class _WalletAccountTon extends WalletAccountReadOnlyTon
     }
     const { signing } = await this.signingCell(messages);
     const fee = await this.preflight(v5r1PackUnsigned(signing), limit, op, want);
-    const signature = await this.signer.sign(new Uint8Array(signing.hash()), { scheme: "ed25519", context: "ton-external" });
+    const signature = await this.#signer.sign(new Uint8Array(signing.hash()), { scheme: "ed25519", context: "ton-external" });
     return { body: v5r1PackSigned(signing, signature), fee };
   }
   async preflight(body, limit, op, expectedTonOut) {
@@ -1343,7 +1350,7 @@ var WalletAccountTon = class _WalletAccountTon extends WalletAccountReadOnlyTon
   }
   /** Disposes the signer: a local key is zeroized, an external one is released. */
   dispose() {
-    this.signer.dispose();
+    this.#signer.dispose();
   }
 };