@anywalletkit/wallet-zcash 0.4.0 → 0.5.0

package/dist/index.cjs

@@ -1104,15 +1104,22 @@ var WalletAccountZcash = class _WalletAccountZcash extends WalletAccountReadOnly
   path;
   /** Compressed secp256k1 public key. */
   publicKey;
-  /** The signer that holds the key. */
-  signer;
+  /**
+   * The signer that holds the key, in a private field: not a property of the account, so no code
+   * the account is handed to (a protocol module, a logger) can reach it and sign around the
+   * account's checks (audit 2026-10-29 A1).
+   */
+  #signer;
+  /** What holds the key: `seed`, `key` (one imported key) or `external`. */
+  signerKind;
   _disposed = false;
   _readOnly;
   /** `publicKey` is the signer's compressed secp256k1 key (33 bytes); it is needed synchronously for the address. */
   constructor(signer, publicKey, path, config = {}) {
     super(addressFromPublicKey(publicKey, config.network ?? "mainnet"), config);
-    this.signer = (0, import_core7.requireCurve)(signer, "secp256k1");
-    if (!this.signer.schemes.includes("ecdsa")) throw new import_core7.SignerError(`A Zcash account needs a signer with the 'ecdsa' scheme (has: ${this.signer.schemes.join(", ")}).`);
+    this.#signer = (0, import_core7.requireCurve)(signer, "secp256k1");
+    this.signerKind = this.#signer.kind;
+    if (!this.#signer.schemes.includes("ecdsa")) throw new import_core7.SignerError(`A Zcash account needs a signer with the 'ecdsa' scheme (has: ${this.#signer.schemes.join(", ")}).`);
     this.publicKey = publicKey;
     this.path = path;
   }
@@ -1131,7 +1138,7 @@ var WalletAccountZcash = class _WalletAccountZcash extends WalletAccountReadOnly
   /** Zcash message signature (zcashd `signmessage` encoding), base64. */
   async sign(message) {
     this.live();
-    return signMessageWith(message, this.signer);
+    return signMessageWith(message, this.#signer);
   }
   ctx(intended) {
     return { network: this._network, ownAddress: this.address, intended, maxFee: this.maxFee };
@@ -1163,7 +1170,7 @@ var WalletAccountZcash = class _WalletAccountZcash extends WalletAccountReadOnly
   async #signInputs(tx, spent) {
     for (let i = 0; i < tx.inputs.length; i++) {
       const digest = sighashAll(tx, i, spent);
-      const rs = await this.signer.sign(digest, { scheme: "ecdsa", context: "zcash-sighash" });
+      const rs = await this.#signer.sign(digest, { scheme: "ecdsa", context: "zcash-sighash" });
       const der = import_secp256k12.secp256k1.Signature.fromBytes(rs, "compact").toBytes("der");
       tx.inputs[i].scriptSig = p2pkhScriptSig(der, this.publicKey);
     }
@@ -1278,7 +1285,7 @@ var WalletAccountZcash = class _WalletAccountZcash extends WalletAccountReadOnly
   }
   dispose() {
     this._disposed = true;
-    this.signer.dispose();
+    this.#signer.dispose();
   }
 };