@0xio/sdk 2.7.0 → 2.7.1

package/dist/index.js

@@ -1,27 +1,15 @@
 'use strict';
 
-/**
- * 0xio Wallet SDK - Event System
- * Type-safe event emitter for wallet events
- */
 class EventEmitter {
-    constructor(debug = false) {
+    constructor(_debug = false) {
         this.listeners = new Map();
-        this.debug = debug;
     }
-    /**
-     * Add event listener
-     */
     on(eventType, listener) {
         if (!this.listeners.has(eventType)) {
             this.listeners.set(eventType, new Set());
         }
         this.listeners.get(eventType).add(listener);
-        if (this.debug) ;
     }
-    /**
-     * Remove event listener
-     */
     off(eventType, listener) {
         const eventListeners = this.listeners.get(eventType);
         if (eventListeners) {
@@ -29,12 +17,8 @@ class EventEmitter {
             if (eventListeners.size === 0) {
                 this.listeners.delete(eventType);
             }
-            if (this.debug) ;
         }
     }
-    /**
-     * Add one-time event listener
-     */
     once(eventType, listener) {
         const onceListener = (event) => {
             // Remove BEFORE calling so a throwing listener doesn't stay registered
@@ -43,9 +27,6 @@ class EventEmitter {
         };
         this.on(eventType, onceListener);
     }
-    /**
-     * Emit event to all listeners
-     */
     emit(eventType, data) {
         const event = {
             type: eventType,
@@ -54,49 +35,32 @@ class EventEmitter {
         };
         const eventListeners = this.listeners.get(eventType);
         if (eventListeners && eventListeners.size > 0) {
-            if (this.debug) ;
-            // Create a copy to avoid issues if listeners modify the set during iteration
-            const listenersArray = Array.from(eventListeners);
-            for (const listener of listenersArray) {
+            // snapshot to avoid issues if listeners modify the set during iteration
+            for (const listener of Array.from(eventListeners)) {
                 try {
                     listener(event);
                 }
-                catch (error) {
-                    // console.error(`[0xio SDK] Error in event listener for '${eventType}':`, error);
+                catch {
+                    // listener errors are swallowed to keep the event loop running
                 }
             }
         }
-        else if (this.debug) ;
     }
-    /**
-     * Remove all listeners for a specific event type
-     */
     removeAllListeners(eventType) {
         if (eventType) {
             this.listeners.delete(eventType);
-            if (this.debug) ;
         }
         else {
             this.listeners.clear();
-            if (this.debug) ;
         }
     }
-    /**
-     * Get number of listeners for an event type
-     */
     listenerCount(eventType) {
         const eventListeners = this.listeners.get(eventType);
         return eventListeners ? eventListeners.size : 0;
     }
-    /**
-     * Get all event types that have listeners
-     */
     eventTypes() {
         return Array.from(this.listeners.keys());
     }
-    /**
-     * Check if there are any listeners for an event type
-     */
     hasListeners(eventType) {
         return this.listenerCount(eventType) > 0;
     }
@@ -269,16 +233,6 @@ function createZeroXIOAdapter(extraTrustedOrigins = []) {
 /** Default 0xio adapter instance (no extra trusted origins). */
 const ZeroXIOAdapter = createZeroXIOAdapter();
 
-/**
- * 0xio Wallet SDK - Utilities
- * Helper functions for validation, formatting, and common operations
- */
-// ===================
-// VALIDATION UTILITIES
-// ===================
-/**
- * Validate wallet address for Octra blockchain
- */
 function isValidAddress(address) {
     if (!address || typeof address !== 'string') {
         return false;
@@ -302,9 +256,6 @@ function isValidAmount(amount) {
         Number.isFinite(amount) &&
         amount <= Number.MAX_SAFE_INTEGER;
 }
-/**
- * Validate transaction message
- */
 function isValidMessage(message) {
     // Type check first — falsy non-strings (0, false, null) are NOT valid messages
     if (typeof message !== 'string') {
@@ -317,15 +268,9 @@ function isValidMessage(message) {
     // 100KB limit — contract call params can be large (serialized JSON)
     return message.length <= 100000;
 }
-/**
- * Validate fee level
- */
 function isValidFeeLevel(feeLevel) {
     return feeLevel === 1 || feeLevel === 3;
 }
-// ===================
-// ADDRESS DERIVATION
-// ===================
 const _B58_ALPHA = '123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz';
 function _base58Encode(buf) {
     let zeros = 0;
@@ -370,12 +315,6 @@ async function deriveOctraAddress(publicKeyBase64) {
     const hashBuf = await crypto.subtle.digest('SHA-256', bytes);
     return 'oct' + _base58Encode(new Uint8Array(hashBuf));
 }
-// ===================
-// FORMATTING UTILITIES
-// ===================
-/**
- * Format OCT amount for display
- */
 function formatOCT(amount, decimals = 6) {
     const n = typeof amount === 'string' ? parseFloat(amount) : amount;
     if (!isValidAmount(n)) {
@@ -386,9 +325,6 @@ function formatOCT(amount, decimals = 6) {
         maximumFractionDigits: decimals
     });
 }
-/**
- * Format address for display (truncated)
- */
 function formatAddress(address, prefixLength = 6, suffixLength = 4) {
     if (!isValidAddress(address)) {
         return 'Invalid Address';
@@ -398,16 +334,10 @@ function formatAddress(address, prefixLength = 6, suffixLength = 4) {
     }
     return `${address.slice(0, prefixLength)}...${address.slice(-suffixLength)}`;
 }
-/**
- * Format timestamp for display
- */
 function formatTimestamp(timestamp) {
     const date = new Date(timestamp);
     return date.toLocaleString();
 }
-/**
- * Format transaction hash for display
- */
 function formatTxHash(hash, length = 12) {
     if (!hash || typeof hash !== 'string') {
         return 'Invalid Hash';
@@ -419,12 +349,6 @@ function formatTxHash(hash, length = 12) {
     const suffixLength = Math.floor(length / 2);
     return `${hash.slice(0, prefixLength)}...${hash.slice(-suffixLength)}`;
 }
-// ===================
-// CONVERSION UTILITIES
-// ===================
-/**
- * Convert OCT to micro OCT (for network transmission)
- */
 function toMicroOCT(amount) {
     if (!isValidAmount(amount)) {
         throw new ZeroXIOWalletError(exports.ErrorCode.INVALID_AMOUNT, 'Invalid amount for conversion');
@@ -433,9 +357,6 @@ function toMicroOCT(amount) {
     const microOCT = Math.round(amount * 1000000);
     return microOCT.toString();
 }
-/**
- * Convert micro OCT to OCT (for display)
- */
 function fromMicroOCT(microAmount) {
     const amount = typeof microAmount === 'string' ? parseInt(microAmount, 10) : microAmount;
     if (!Number.isFinite(amount) || amount < 0) {
@@ -443,12 +364,6 @@ function fromMicroOCT(microAmount) {
     }
     return amount / 1000000;
 }
-// ===================
-// ERROR UTILITIES
-// ===================
-/**
- * Create standardized error messages
- */
 function createErrorMessage(code, context) {
     const baseMessages = {
         [exports.ErrorCode.EXTENSION_NOT_FOUND]: '0xio Wallet extension is not installed or enabled',
@@ -475,24 +390,12 @@ function createErrorMessage(code, context) {
     const baseMessage = baseMessages[code] || 'Unknown error';
     return context ? `${baseMessage}: ${context}` : baseMessage;
 }
-/**
- * Check if error is a specific type
- */
 function isErrorType(error, code) {
     return error instanceof ZeroXIOWalletError && error.code === code;
 }
-// ===================
-// ASYNC UTILITIES
-// ===================
-/**
- * Create a promise that resolves after a delay
- */
 function delay(ms) {
     return new Promise(resolve => setTimeout(resolve, ms));
 }
-/**
- * Retry an async operation with exponential backoff
- */
 async function retry(operation, maxRetries = 3, baseDelay = 1000) {
     let lastError;
     // maxRetries = number of retries AFTER the first attempt
@@ -532,18 +435,9 @@ function withTimeout(promise, timeoutMs, timeoutMessage = 'Operation timed out')
         clearTimeout(timer);
     });
 }
-// ===================
-// BROWSER UTILITIES
-// ===================
-/**
- * Check if running in browser environment
- */
 function isBrowser() {
     return typeof window !== 'undefined' && typeof document !== 'undefined';
 }
-/**
- * Check if browser supports required features
- */
 function checkBrowserSupport() {
     const missingFeatures = [];
     if (!isBrowser()) {
@@ -565,12 +459,6 @@ function checkBrowserSupport() {
         missingFeatures
     };
 }
-// ===================
-// DEVELOPMENT UTILITIES
-// ===================
-/**
- * Generate mock data for development/testing
- */
 function generateMockData() {
     return {
         address: 'oct' + Math.random().toString(36).substring(2, 22) + Math.random().toString(36).substring(2, 26),
@@ -593,9 +481,6 @@ function generateMockData() {
         }
     };
 }
-/**
- * Create development logger
- */
 function createLogger(prefix, debug) {
     const isDevelopment = typeof window !== 'undefined' && ((typeof globalThis !== 'undefined' && globalThis.process?.env?.NODE_ENV === 'development') ||
         window.location.hostname === 'localhost' ||
@@ -648,17 +533,6 @@ function createLogger(prefix, debug) {
     };
 }
 
-/**
- * 0xio Wallet SDK - Extension Communication Module
- *
- * @fileoverview Manages secure communication between the SDK and browser extension.
- * Implements message passing, request/response handling, rate limiting, and origin validation
- * to ensure secure wallet interactions.
- *
- * @module communication
- * @version 2.7.0
- * @license MIT
- */
 class ExtensionCommunicator extends EventEmitter {
     constructor(debug = false, trustedOrigins = [], adapter) {
         super(debug);
@@ -909,9 +783,12 @@ class ExtensionCommunicator extends EventEmitter {
                 return;
             }
             const isSameOrigin = event.origin === window.location.origin;
-            const isLocalhost = event.origin.startsWith('http://localhost:') || event.origin.startsWith('http://127.0.0.1:');
             const isTauri = event.origin === 'tauri://localhost' || event.origin === 'https://tauri.localhost';
-            const isTrustedOrigin = this.trustedOrigins.includes(event.origin) || isTauri || isLocalhost;
+            const hasExplicitList = this.trustedOrigins.length > 0;
+            // When trustedParentOrigins is explicitly set, implicit localhost trust is disabled
+            const isLocalhostAllowed = !hasExplicitList &&
+                (event.origin.startsWith('http://localhost:') || event.origin.startsWith('http://127.0.0.1:'));
+            const isTrustedOrigin = this.trustedOrigins.includes(event.origin) || isTauri || isLocalhostAllowed;
             // In iframe mode, only trust the actual parent window
             const inIframe = window.parent !== window;
             if (inIframe && event.source !== window.parent) {
@@ -1072,6 +949,7 @@ class ExtensionCommunicator extends EventEmitter {
 // causing double popups where the second tx fails (stale nonce/state).
 ExtensionCommunicator.NO_RETRY_METHODS = new Set([
     'connect', 'send_transaction', 'call_contract', 'signMessage',
+    'sign_transaction', 'broadcast_only',
     'send_private_transfer', 'claim_private_transfer',
     'encrypt_balance', 'decrypt_balance',
 ]);
@@ -1079,8 +957,8 @@ ExtensionCommunicator.INTERACTIVE_METHODS = ExtensionCommunicator.NO_RETRY_METHO
 // only forward known event types
 ExtensionCommunicator.VALID_EVENT_TYPES = new Set([
     'connect', 'disconnect', 'accountChanged', 'balanceChanged',
-    'networkChanged', 'transactionConfirmed', 'error',
-    'extensionLocked', 'extensionUnlocked'
+    'networkChanged', 'transactionConfirmed', 'permissionsChanged', 'message',
+    'error', 'extensionLocked', 'extensionUnlocked'
 ]);
 
 /**
@@ -1163,6 +1041,14 @@ function validateNetworkInfo(raw) {
         return null;
     if (typeof raw.rpcUrl !== 'string' || (!raw.rpcUrl && raw.id !== 'custom'))
         return null;
+    if (raw.rpcUrl) {
+        const isHttps = raw.rpcUrl.startsWith('https://');
+        const isLocal = raw.rpcUrl.startsWith('http://localhost') || raw.rpcUrl.startsWith('http://127.0.0.1');
+        const isTestnet = raw.isTestnet === true;
+        // Reject plain-http RPC URLs from untrusted sources unless testnet-flagged or local
+        if (!isHttps && !isLocal && !isTestnet)
+            return null;
+    }
     if (typeof raw.supportsPrivacy !== 'boolean')
         return null;
     return Object.freeze({
@@ -1178,9 +1064,6 @@ function validateNetworkInfo(raw) {
     });
 }
 
-/**
- * SDK Configuration
- */
 /**
  * Default balance structure.
  * Accepts a numeric total or undefined — never pass a Balance object here.
@@ -1216,27 +1099,17 @@ function validateBalance(raw) {
         currency: 'OCT'
     };
 }
-/**
- * SDK Configuration constants
- */
 const SDK_CONFIG = {
-    version: '2.7.0',
+    version: '2.7.1',
     defaultNetworkId: DEFAULT_NETWORK_ID,
     communicationTimeout: 30000, // 30 seconds
     retryAttempts: 3,
     retryDelay: 1000, // 1 second
 };
-/**
- * Get default network configuration
- */
 function getDefaultNetwork() {
     return getNetworkConfig(SDK_CONFIG.defaultNetworkId);
 }
 
-/**
- * 0xio Wallet SDK - Main Wallet Class
- * Primary interface for DApp developers to interact with 0xio Wallet
- */
 class ZeroXIOWallet extends EventEmitter {
     constructor(config) {
         super(config.debug);
@@ -1252,32 +1125,22 @@ class ZeroXIOWallet extends EventEmitter {
             debug: config.debug || false
         };
         this.logger = createLogger('ZeroXIOWallet', this.config.debug || false);
-        this.communicator = new ExtensionCommunicator(this.config.debug, [], this.config.adapter);
+        this.communicator = new ExtensionCommunicator(this.config.debug, this.config.trustedParentOrigins ?? [], this.config.adapter);
         this.logger.log('Wallet instance created with config:', this.config);
     }
-    // ===================
-    // INITIALIZATION
-    // ===================
-    /**
-     * Initialize the SDK
-     * Must be called before using any other methods
-     */
     async initialize() {
         if (this.isInitialized) {
             return true;
         }
-        // single-flight init
         if (this._initPromise) {
             return this._initPromise;
         }
         this._initPromise = (async () => {
             try {
-                // Initialize extension communication
                 const communicationReady = await this.communicator.initialize();
                 if (!communicationReady) {
                     throw new ZeroXIOWalletError(exports.ErrorCode.EXTENSION_NOT_FOUND, 'Failed to establish communication with 0xio Wallet extension');
                 }
-                // Register this DApp with the extension
                 await this.communicator.sendRequest('register_dapp', {
                     appName: this.config.appName,
                     appDescription: this.config.appDescription,
@@ -1287,7 +1150,6 @@ class ZeroXIOWallet extends EventEmitter {
                     requiredPermissions: this.config.requiredPermissions,
                     networkId: this.config.networkId
                 });
-                // Setup event forwarding from extension
                 this.setupExtensionEventListeners();
                 this.isInitialized = true;
                 this.logger.log('SDK initialized successfully');
@@ -1306,29 +1168,21 @@ class ZeroXIOWallet extends EventEmitter {
         })();
         return this._initPromise;
     }
-    /**
-     * Check if SDK is initialized
-     */
     isReady() {
         return this.isInitialized && this.communicator.isExtensionAvailable();
     }
-    // ===================
-    // CONNECTION MANAGEMENT
-    // ===================
-    /**
-     * Connect to wallet
-     */
     async connect(options = {}) {
         this.ensureInitialized();
         try {
             this.logger.log('Attempting to connect with options:', options);
-            // filter to declared perms only
+            // filter to declared perms only — accept both RFC 'permissions' and legacy 'requestPermissions'
             const declaredPermissions = this.config.requiredPermissions || [];
-            const requestPermissions = options.requestPermissions
-                ? options.requestPermissions.filter(p => declaredPermissions.includes(p))
+            const requestedPerms = options.permissions ?? options.requestPermissions;
+            const requestedPermissions = requestedPerms
+                ? requestedPerms.filter(p => declaredPermissions.includes(p))
                 : declaredPermissions;
             const result = await this.communicator.sendRequest('connect', {
-                requestPermissions,
+                permissions: requestedPermissions,
                 networkId: options.networkId || this.config.networkId
             });
             // verify pubkey→addr binding
@@ -1345,9 +1199,12 @@ class ZeroXIOWallet extends EventEmitter {
                     this.logger.warn('Address derivation check skipped (crypto unavailable):', e);
                 }
             }
-            // Use networkInfo from extension response — validate before caching
+            // Use networkInfo from extension response — validate before caching.
             const networkInfo = validateNetworkInfo(result.networkInfo)
-                ?? getNetworkConfig(result.networkId || this.config.networkId);
+                ?? (result.networkId ? getNetworkConfig(result.networkId) : null);
+            if (!networkInfo) {
+                throw new ZeroXIOWalletError(exports.ErrorCode.NETWORK_ERROR, 'Wallet did not return valid network metadata.');
+            }
             const permissions = result.permissions || [];
             // Update connection info — including permissions
             this.connectionInfo = {
@@ -1440,7 +1297,11 @@ class ZeroXIOWallet extends EventEmitter {
                 // validate untrusted balance/networkInfo before caching
                 const balanceInfo = validateBalance(result.balance) ?? createDefaultBalance();
                 const networkInfo = validateNetworkInfo(result.networkInfo)
-                    ?? getNetworkConfig(result.networkId || this.config.networkId);
+                    ?? (result.networkId ? getNetworkConfig(result.networkId) : null);
+                if (!networkInfo) {
+                    this.logger.warn('getConnectionStatus: wallet returned no network metadata — returning cached state');
+                    return this.connectionInfo;
+                }
                 const wasConnected = this.connectionInfo.isConnected;
                 const permissions = result.permissions || [];
                 // preserve existing connectedAt
@@ -1513,18 +1374,9 @@ class ZeroXIOWallet extends EventEmitter {
     getNetworkId() {
         return this.connectionInfo.networkInfo?.id || null;
     }
-    // ===================
-    // WALLET INFORMATION
-    // ===================
-    /**
-     * Get current wallet address
-     */
     getAddress() {
         return this.connectionInfo.address || null;
     }
-    /**
-     * Get current balance
-     */
     async getBalance(forceRefresh = false) {
         this.ensureConnected();
         try {
@@ -1549,7 +1401,6 @@ class ZeroXIOWallet extends EventEmitter {
             // skip if session changed mid-flight
             if (this._sessionVersion !== sv)
                 return result;
-            // Update cached balance
             if (this.connectionInfo.balance) {
                 const previousBalance = this.connectionInfo.balance;
                 this.connectionInfo.balance = result;
@@ -1576,15 +1427,11 @@ class ZeroXIOWallet extends EventEmitter {
             throw new ZeroXIOWalletError(exports.ErrorCode.NETWORK_ERROR, 'Failed to get balance', error);
         }
     }
-    /**
-     * Get network information
-     */
     async getNetworkInfo() {
         this.ensureInitialized();
         try {
             const sv = this._sessionVersion;
             const result = await this.communicator.sendRequest('get_network_info');
-            // validate network info before caching
             const networkInfo = validateNetworkInfo(result);
             if (!networkInfo) {
                 throw new ZeroXIOWalletError(exports.ErrorCode.NETWORK_ERROR, 'Extension returned invalid network info');
@@ -1592,11 +1439,9 @@ class ZeroXIOWallet extends EventEmitter {
             // skip if session changed mid-flight
             if (this._sessionVersion !== sv)
                 return networkInfo;
-            // Update cached network info
             if (this.connectionInfo.networkInfo) {
                 const previousNetwork = this.connectionInfo.networkInfo;
                 this.connectionInfo.networkInfo = networkInfo;
-                // Emit network changed event if different
                 if (previousNetwork.id !== networkInfo.id) {
                     const networkChangedEvent = {
                         previousNetwork,
@@ -1616,22 +1461,14 @@ class ZeroXIOWallet extends EventEmitter {
             throw new ZeroXIOWalletError(exports.ErrorCode.NETWORK_ERROR, 'Failed to get network info', error);
         }
     }
-    // ===================
-    // TRANSACTIONS
-    // ===================
-    /**
-     * Send transaction
-     */
     async sendTransaction(txData) {
         this.ensureConnected();
-        // validate inputs
         if (!isValidAddress(txData.to)) {
             throw new ZeroXIOWalletError(exports.ErrorCode.INVALID_ADDRESS, 'Invalid recipient address');
         }
         if (!isValidAmount(txData.amount)) {
             throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Invalid transaction amount');
         }
-        // bound memo
         if (txData.message && txData.message.length > 1000) {
             throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Transaction message too long (max 1,000 characters)');
         }
@@ -1640,8 +1477,8 @@ class ZeroXIOWallet extends EventEmitter {
             this.logger.log('Sending transaction:', { to: txData.to });
             const result = await this.communicator.sendRequest('send_transaction', txData);
             this.logger.log('Transaction result:', result);
-            // Refresh balance after successful transaction
-            if (result.success) {
+            // Refresh balance after successful transaction (accept RFC 'accepted' or legacy 'success')
+            if (result.accepted ?? result.success) {
                 setTimeout(() => {
                     this.getBalance(true).catch(error => {
                         this.logger.warn('Failed to refresh balance after transaction:', error);
@@ -1658,23 +1495,70 @@ class ZeroXIOWallet extends EventEmitter {
             throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Failed to send transaction', error);
         }
     }
+    /**
+     * Sign a transaction without broadcasting it (RFC-O-1 octra_signTransaction).
+     * Returns the signed transaction object for manual submission via submitTransaction().
+     */
+    async signTransaction(txData) {
+        this.ensureConnected();
+        if (!isValidAddress(txData.to)) {
+            throw new ZeroXIOWalletError(exports.ErrorCode.INVALID_ADDRESS, 'Invalid recipient address');
+        }
+        if (!isValidAmount(txData.amount)) {
+            throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Invalid transaction amount');
+        }
+        if (txData.message && txData.message.length > 1000) {
+            throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Transaction message too long (max 1,000 characters)');
+        }
+        try {
+            this.logger.log('Requesting transaction signature:', { to: txData.to });
+            const result = await this.communicator.sendRequest('sign_transaction', txData);
+            return result;
+        }
+        catch (error) {
+            if (error instanceof ZeroXIOWalletError)
+                throw error;
+            throw new ZeroXIOWalletError(exports.ErrorCode.SIGNATURE_FAILED, 'Failed to sign transaction', error);
+        }
+    }
+    /**
+     * Broadcast a pre-signed transaction (RFC-O-1 octra_submitTransaction).
+     * Use after signTransaction() to submit the signed tx to the network.
+     */
+    async submitTransaction(signedTx) {
+        this.ensureConnected();
+        if (!signedTx || typeof signedTx !== 'object') {
+            throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'signedTx must be an object');
+        }
+        try {
+            this.logger.log('Submitting pre-signed transaction');
+            const result = await this.communicator.sendRequest('broadcast_only', { signedTx });
+            return result;
+        }
+        catch (error) {
+            if (error instanceof ZeroXIOWalletError)
+                throw error;
+            throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Failed to submit transaction', error);
+        }
+    }
     /**
      * Call a smart contract method (state-changing).
      * The extension builds, signs, and submits the transaction via octra_submit.
      */
     async callContract(callData) {
         this.ensureConnected();
-        // validate inputs
         if (!isValidAddress(callData.contract)) {
             throw new ZeroXIOWalletError(exports.ErrorCode.INVALID_ADDRESS, 'Invalid contract address');
         }
         if (!callData.method || typeof callData.method !== 'string') {
             throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Contract method is required');
         }
-        // bound method + params size
         if (callData.method.length > 200) {
             throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Contract method name too long (max 200 characters)');
         }
+        if (callData.amount != null) {
+            this.assertExactOCTAmount(callData.amount, 'Contract call amount');
+        }
         try {
             if (JSON.stringify(callData.params).length > 65536) {
                 throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Contract params too large (max 64 KB)');
@@ -1712,14 +1596,12 @@ class ZeroXIOWallet extends EventEmitter {
      */
     async contractCallView(viewData) {
         this.ensureInitialized();
-        // validate inputs
         if (!isValidAddress(viewData.contract)) {
             throw new ZeroXIOWalletError(exports.ErrorCode.INVALID_ADDRESS, 'Invalid contract address');
         }
         if (!viewData.method || typeof viewData.method !== 'string') {
             throw new ZeroXIOWalletError(exports.ErrorCode.NETWORK_ERROR, 'Contract method is required');
         }
-        // bound method + params size
         if (viewData.method.length > 200) {
             throw new ZeroXIOWalletError(exports.ErrorCode.NETWORK_ERROR, 'Contract method name too long (max 200 characters)');
         }
@@ -1759,7 +1641,6 @@ class ZeroXIOWallet extends EventEmitter {
      */
     async getContractStorage(contract, key) {
         this.ensureInitialized();
-        // validate inputs
         if (!isValidAddress(contract)) {
             throw new ZeroXIOWalletError(exports.ErrorCode.INVALID_ADDRESS, 'Invalid contract address');
         }
@@ -1801,12 +1682,6 @@ class ZeroXIOWallet extends EventEmitter {
             throw new ZeroXIOWalletError(exports.ErrorCode.NETWORK_ERROR, 'Failed to get transaction history', error);
         }
     }
-    // ===================
-    // PRIVATE FEATURES
-    // ===================
-    /**
-     * Get private balance information
-     */
     async getPrivateBalanceInfo() {
         this.ensureConnected();
         try {
@@ -1822,7 +1697,7 @@ class ZeroXIOWallet extends EventEmitter {
      */
     async encryptBalance(amount) {
         this.ensureConnected();
-        // validate amount
+        this.assertExactOCTAmount(amount, 'Encrypt amount');
         if (!isValidAmount(amount)) {
             throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Invalid amount');
         }
@@ -1843,7 +1718,7 @@ class ZeroXIOWallet extends EventEmitter {
      */
     async decryptBalance(amount) {
         this.ensureConnected();
-        // validate amount
+        this.assertExactOCTAmount(amount, 'Decrypt amount');
         if (!isValidAmount(amount)) {
             throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Invalid amount');
         }
@@ -1869,21 +1744,21 @@ class ZeroXIOWallet extends EventEmitter {
      */
     async sendPrivateTransfer(transferData) {
         this.ensureConnected();
-        // validate inputs
         if (!isValidAddress(transferData.to)) {
             throw new ZeroXIOWalletError(exports.ErrorCode.INVALID_ADDRESS, 'Invalid recipient address');
         }
         if (!isValidAmount(transferData.amount)) {
             throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Invalid transfer amount');
         }
+        this.assertExactOCTAmount(transferData.amount, 'Transfer amount');
         // bound msg size
         if (transferData.message && transferData.message.length > 1000) {
             throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Transfer message too long (max 1,000 characters)');
         }
         try {
             const result = await this.communicator.sendRequest('send_private_transfer', transferData);
-            // Refresh balance after transfer
-            if (result.success) {
+            // Refresh balance after transfer (accept RFC 'accepted' or legacy 'success')
+            if (result.accepted ?? result.success) {
                 setTimeout(() => {
                     this.getBalance(true).catch(() => { });
                 }, 1000);
@@ -1923,8 +1798,8 @@ class ZeroXIOWallet extends EventEmitter {
             const result = await this.communicator.sendRequest('claim_private_transfer', {
                 transferId
             });
-            // Refresh balance after claiming
-            if (result.success) {
+            // Refresh balance after claiming (accept RFC 'accepted' or legacy 'success')
+            if (result.accepted ?? result.success) {
                 setTimeout(() => {
                     this.getBalance(true).catch(() => { });
                 }, 1000);
@@ -1935,9 +1810,6 @@ class ZeroXIOWallet extends EventEmitter {
             throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Failed to claim private transfer', error);
         }
     }
-    // ===================
-    // MESSAGE SIGNING
-    // ===================
     /**
      * Sign an arbitrary message with the wallet's private key
      * The user will be prompted to approve the signature request in the extension
@@ -1975,9 +1847,6 @@ class ZeroXIOWallet extends EventEmitter {
             throw new ZeroXIOWalletError(exports.ErrorCode.SIGNATURE_FAILED, 'Failed to sign message', error);
         }
     }
-    // ===================
-    // AUTHENTICATION HELPERS
-    // ===================
     /**
      * Sign a domain-separated authentication message.
      * Unlike `signMessage()`, this prepends a standard header that binds the signature
@@ -1999,9 +1868,6 @@ class ZeroXIOWallet extends EventEmitter {
         const domainSeparated = `0xio auth\nService: ${service}\nNonce: ${nonce}\nOrigin: ${origin}`;
         return this.signMessage(domainSeparated);
     }
-    // ===================
-    // PRIVATE METHODS
-    // ===================
     ensureInitialized() {
         if (!this.isInitialized) {
             throw new ZeroXIOWalletError(exports.ErrorCode.UNKNOWN_ERROR, 'SDK not initialized. Call initialize() first.');
@@ -2014,7 +1880,6 @@ class ZeroXIOWallet extends EventEmitter {
         }
     }
     setupExtensionEventListeners() {
-        // Listen for extension events through the communicator
         this.communicator.on('accountChanged', (event) => {
             this.handleAccountChanged(event.data);
         });
@@ -2033,11 +1898,18 @@ class ZeroXIOWallet extends EventEmitter {
         this.communicator.on('transactionConfirmed', (event) => {
             this.handleTransactionConfirmed(event.data);
         });
+        this.communicator.on('permissionsChanged', (event) => {
+            const permissions = event.data ?? event;
+            if (this.connectionInfo.isConnected) {
+                this.connectionInfo.permissions = Array.isArray(permissions) ? permissions : [];
+            }
+            this.emit('permissionsChanged', permissions);
+        });
+        this.communicator.on('message', (event) => {
+            this.emit('message', event.data ?? event);
+        });
         this.logger.log('Extension event listeners setup complete');
     }
-    /**
-     * Handle account changed event from extension
-     */
     handleAccountChanged(data) {
         ++this._sessionVersion;
         const previousAddress = this.connectionInfo.address;
@@ -2045,7 +1917,6 @@ class ZeroXIOWallet extends EventEmitter {
         // clear stale pubkey on acct change
         this.connectionInfo.publicKey = data.publicKey;
         if (data.balance) {
-            // validate balance before caching
             const validated = validateBalance(data.balance);
             if (validated) {
                 this.connectionInfo.balance = validated;
@@ -2063,9 +1934,6 @@ class ZeroXIOWallet extends EventEmitter {
         this.emit('accountChanged', accountChangedEvent);
         this.logger.log('Account changed:', { newAddress: accountChangedEvent.newAddress });
     }
-    /**
-     * Handle network changed event from extension
-     */
     handleNetworkChanged(data) {
         const previousNetwork = this.connectionInfo.networkInfo;
         // validate networkInfo — drop invalid
@@ -2084,11 +1952,7 @@ class ZeroXIOWallet extends EventEmitter {
         this.emit('networkChanged', networkChangedEvent);
         this.logger.log('Network changed:', networkChangedEvent);
     }
-    /**
-     * Handle balance changed event from extension
-     */
     handleBalanceChanged(data) {
-        // validate balance before caching
         const balance = validateBalance(data.balance);
         if (!balance) {
             this.logger.warn('Received invalid balance in balanceChanged event, ignoring');
@@ -2104,13 +1968,9 @@ class ZeroXIOWallet extends EventEmitter {
         this.emit('balanceChanged', balanceChangedEvent);
         this.logger.log('Balance changed:', { public: balance.public });
     }
-    /**
-     * Handle extension locked event
-     */
     handleExtensionLocked() {
         ++this._sessionVersion;
         this.connectionInfo = { isConnected: false };
-        // emit extensionLocked then disconnect
         this.emit('extensionLocked', {});
         const disconnectEvent = {
             reason: 'extension_locked'
@@ -2118,21 +1978,13 @@ class ZeroXIOWallet extends EventEmitter {
         this.emit('disconnect', disconnectEvent);
         this.logger.log('Extension locked - disconnected');
     }
-    /**
-     * Handle extension unlocked event
-     */
     handleExtensionUnlocked() {
-        // emit extensionUnlocked
         this.emit('extensionUnlocked', {});
-        // Attempt to restore connection
         this.getConnectionStatus().catch(() => {
             this.logger.warn('Could not restore connection after unlock');
         });
         this.logger.log('Extension unlocked');
     }
-    /**
-     * Handle transaction confirmed event
-     */
     handleTransactionConfirmed(data) {
         this.emit('transactionConfirmed', {
             txHash: data.txHash,
@@ -2145,12 +1997,21 @@ class ZeroXIOWallet extends EventEmitter {
         }, 2000);
         this.logger.log('Transaction confirmed:', data.txHash);
     }
-    // ===================
-    // CLEANUP
-    // ===================
     /**
-     * Clean up SDK resources
+     * Reject numeric amounts that cannot be represented exactly in micro-OCT.
+     * e.g. 0.1 + 0.2 = 0.30000000000000004 — the extension would sign the wrong value.
+     * String amounts bypass this check (caller is responsible for correctness).
      */
+    assertExactOCTAmount(amount, label) {
+        if (typeof amount === 'number') {
+            const micro = Math.round(amount * 1000000);
+            if (Math.abs(amount - micro / 1000000) > 1e-10) {
+                const suggested = (micro / 1000000).toFixed(6);
+                throw new ZeroXIOWalletError(exports.ErrorCode.INVALID_AMOUNT, `${label} cannot be represented exactly in micro-OCT. ` +
+                    `Pass a string instead (e.g. "${suggested}").`);
+            }
+        }
+    }
     cleanup() {
         this.communicator.cleanup();
         this.removeAllListeners();
@@ -2187,7 +2048,9 @@ const SDK_TO_RFC = {
     switch_network: 'octra_switchNetwork',
     signMessage: 'octra_signMessage',
     send_transaction: 'octra_sendTransaction',
-    call_contract: 'octra_callContract',
+    sign_transaction: 'octra_signTransaction',
+    broadcast_only: 'octra_submitTransaction',
+    call_contract: 'octra_sendContractTransaction',
     contract_call_view: 'octra_callContract',
     get_private_balance_info: 'octra_getEncryptedBalance',
     encrypt_balance: 'octra_encryptBalance',
@@ -2199,7 +2062,7 @@ const SDK_TO_RFC = {
 const RFC_TO_SDK_ERROR = {
     4001: 'USER_REJECTED',
     4100: 'PERMISSION_DENIED',
-    4200: 'NETWORK_ERROR',
+    4200: 'UNKNOWN_ERROR',
     4900: 'CONNECTION_REFUSED',
     4901: 'NETWORK_ERROR',
 };
@@ -2216,7 +2079,7 @@ function mapError(err) {
  * three RFC-O-1 calls: octra_requestAccounts, octra_networkInfo, octra_permissions.
  */
 async function rfcConnect(provider, params) {
-    const requestPerms = params?.requestPermissions ?? [];
+    const requestPerms = params?.permissions ?? params?.requestPermissions ?? [];
     const accounts = (await provider.request({
         method: 'octra_requestAccounts',
         params: [{ permissions: requestPerms }],
@@ -2304,12 +2167,14 @@ function createOctraProviderAdapter() {
             const onNetworkChanged = (data) => handler({ eventType: 'networkChanged', eventData: { networkInfo: data } });
             const onBalanceChanged = (data) => handler({ eventType: 'balanceChanged', eventData: data });
             const onTransactionChanged = (data) => handler({ eventType: 'transactionConfirmed', eventData: data });
+            const onPermissionsChanged = (data) => handler({ eventType: 'permissionsChanged', eventData: data });
             provider.on('connect', onConnect);
             provider.on('disconnect', onDisconnect);
             provider.on('accountsChanged', onAccountsChanged);
             provider.on('networkChanged', onNetworkChanged);
             provider.on('balanceChanged', onBalanceChanged);
             provider.on('transactionChanged', onTransactionChanged);
+            provider.on('permissionsChanged', onPermissionsChanged);
             const cleanup = () => {
                 provider.removeListener('connect', onConnect);
                 provider.removeListener('disconnect', onDisconnect);
@@ -2317,6 +2182,7 @@ function createOctraProviderAdapter() {
                 provider.removeListener('networkChanged', onNetworkChanged);
                 provider.removeListener('balanceChanged', onBalanceChanged);
                 provider.removeListener('transactionChanged', onTransactionChanged);
+                provider.removeListener('permissionsChanged', onPermissionsChanged);
                 _handler = null;
             };
             return cleanup;
@@ -2324,7 +2190,11 @@ function createOctraProviderAdapter() {
         listenForReady(onReady) {
             const handler = () => onReady();
             window.addEventListener('octraWalletReady', handler);
-            return () => window.removeEventListener('octraWalletReady', handler);
+            window.addEventListener('octra#initialized', handler);
+            return () => {
+                window.removeEventListener('octraWalletReady', handler);
+                window.removeEventListener('octra#initialized', handler);
+            };
         },
     };
 }
@@ -2387,7 +2257,7 @@ function getAllAdapters() {
  */
 // Main exports
 // Version information
-const SDK_VERSION = '2.7.0';
+const SDK_VERSION = '2.7.1';
 const MIN_EXTENSION_VERSION = '2.0.1'; // Mainnet Alpha
 const MIN_EXTENSION_VERSION_DEVNET = '2.2.1'; // Devnet (contract calls, privacy)
 const SUPPORTED_EXTENSION_VERSIONS = '^2.0.1'; // Supports all versions >= 2.0.1
@@ -2405,8 +2275,7 @@ async function createZeroXIOWallet(config) {
         try {
             await wallet$1.connect();
         }
-        catch (error) {
-            if (config.debug) ;
+        catch {
             // Don't throw - let the app handle connection manually
         }
     }