@0xio/sdk 2.7.0 → 2.7.1

package/dist/index.umd.js

@@ -4,28 +4,16 @@
     (global = typeof globalThis !== 'undefined' ? globalThis : global || self, factory(global.ZeroXIOWalletSDK = {}));
 })(this, (function (exports) { 'use strict';
 
-    /**
-     * 0xio Wallet SDK - Event System
-     * Type-safe event emitter for wallet events
-     */
     class EventEmitter {
-        constructor(debug = false) {
+        constructor(_debug = false) {
             this.listeners = new Map();
-            this.debug = debug;
         }
-        /**
-         * Add event listener
-         */
         on(eventType, listener) {
             if (!this.listeners.has(eventType)) {
                 this.listeners.set(eventType, new Set());
             }
             this.listeners.get(eventType).add(listener);
-            if (this.debug) ;
         }
-        /**
-         * Remove event listener
-         */
         off(eventType, listener) {
             const eventListeners = this.listeners.get(eventType);
             if (eventListeners) {
@@ -33,12 +21,8 @@
                 if (eventListeners.size === 0) {
                     this.listeners.delete(eventType);
                 }
-                if (this.debug) ;
             }
         }
-        /**
-         * Add one-time event listener
-         */
         once(eventType, listener) {
             const onceListener = (event) => {
                 // Remove BEFORE calling so a throwing listener doesn't stay registered
@@ -47,9 +31,6 @@
             };
             this.on(eventType, onceListener);
         }
-        /**
-         * Emit event to all listeners
-         */
         emit(eventType, data) {
             const event = {
                 type: eventType,
@@ -58,49 +39,32 @@
             };
             const eventListeners = this.listeners.get(eventType);
             if (eventListeners && eventListeners.size > 0) {
-                if (this.debug) ;
-                // Create a copy to avoid issues if listeners modify the set during iteration
-                const listenersArray = Array.from(eventListeners);
-                for (const listener of listenersArray) {
+                // snapshot to avoid issues if listeners modify the set during iteration
+                for (const listener of Array.from(eventListeners)) {
                     try {
                         listener(event);
                     }
-                    catch (error) {
-                        // console.error(`[0xio SDK] Error in event listener for '${eventType}':`, error);
+                    catch {
+                        // listener errors are swallowed to keep the event loop running
                     }
                 }
             }
-            else if (this.debug) ;
         }
-        /**
-         * Remove all listeners for a specific event type
-         */
         removeAllListeners(eventType) {
             if (eventType) {
                 this.listeners.delete(eventType);
-                if (this.debug) ;
             }
             else {
                 this.listeners.clear();
-                if (this.debug) ;
             }
         }
-        /**
-         * Get number of listeners for an event type
-         */
         listenerCount(eventType) {
             const eventListeners = this.listeners.get(eventType);
             return eventListeners ? eventListeners.size : 0;
         }
-        /**
-         * Get all event types that have listeners
-         */
         eventTypes() {
             return Array.from(this.listeners.keys());
         }
-        /**
-         * Check if there are any listeners for an event type
-         */
         hasListeners(eventType) {
             return this.listenerCount(eventType) > 0;
         }
@@ -273,16 +237,6 @@
     /** Default 0xio adapter instance (no extra trusted origins). */
     const ZeroXIOAdapter = createZeroXIOAdapter();
 
-    /**
-     * 0xio Wallet SDK - Utilities
-     * Helper functions for validation, formatting, and common operations
-     */
-    // ===================
-    // VALIDATION UTILITIES
-    // ===================
-    /**
-     * Validate wallet address for Octra blockchain
-     */
     function isValidAddress(address) {
         if (!address || typeof address !== 'string') {
             return false;
@@ -306,9 +260,6 @@
             Number.isFinite(amount) &&
             amount <= Number.MAX_SAFE_INTEGER;
     }
-    /**
-     * Validate transaction message
-     */
     function isValidMessage(message) {
         // Type check first — falsy non-strings (0, false, null) are NOT valid messages
         if (typeof message !== 'string') {
@@ -321,15 +272,9 @@
         // 100KB limit — contract call params can be large (serialized JSON)
         return message.length <= 100000;
     }
-    /**
-     * Validate fee level
-     */
     function isValidFeeLevel(feeLevel) {
         return feeLevel === 1 || feeLevel === 3;
     }
-    // ===================
-    // ADDRESS DERIVATION
-    // ===================
     const _B58_ALPHA = '123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz';
     function _base58Encode(buf) {
         let zeros = 0;
@@ -374,12 +319,6 @@
         const hashBuf = await crypto.subtle.digest('SHA-256', bytes);
         return 'oct' + _base58Encode(new Uint8Array(hashBuf));
     }
-    // ===================
-    // FORMATTING UTILITIES
-    // ===================
-    /**
-     * Format OCT amount for display
-     */
     function formatOCT(amount, decimals = 6) {
         const n = typeof amount === 'string' ? parseFloat(amount) : amount;
         if (!isValidAmount(n)) {
@@ -390,9 +329,6 @@
             maximumFractionDigits: decimals
         });
     }
-    /**
-     * Format address for display (truncated)
-     */
     function formatAddress(address, prefixLength = 6, suffixLength = 4) {
         if (!isValidAddress(address)) {
             return 'Invalid Address';
@@ -402,16 +338,10 @@
         }
         return `${address.slice(0, prefixLength)}...${address.slice(-suffixLength)}`;
     }
-    /**
-     * Format timestamp for display
-     */
     function formatTimestamp(timestamp) {
         const date = new Date(timestamp);
         return date.toLocaleString();
     }
-    /**
-     * Format transaction hash for display
-     */
     function formatTxHash(hash, length = 12) {
         if (!hash || typeof hash !== 'string') {
             return 'Invalid Hash';
@@ -423,12 +353,6 @@
         const suffixLength = Math.floor(length / 2);
         return `${hash.slice(0, prefixLength)}...${hash.slice(-suffixLength)}`;
     }
-    // ===================
-    // CONVERSION UTILITIES
-    // ===================
-    /**
-     * Convert OCT to micro OCT (for network transmission)
-     */
     function toMicroOCT(amount) {
         if (!isValidAmount(amount)) {
             throw new ZeroXIOWalletError(exports.ErrorCode.INVALID_AMOUNT, 'Invalid amount for conversion');
@@ -437,9 +361,6 @@
         const microOCT = Math.round(amount * 1000000);
         return microOCT.toString();
     }
-    /**
-     * Convert micro OCT to OCT (for display)
-     */
     function fromMicroOCT(microAmount) {
         const amount = typeof microAmount === 'string' ? parseInt(microAmount, 10) : microAmount;
         if (!Number.isFinite(amount) || amount < 0) {
@@ -447,12 +368,6 @@
         }
         return amount / 1000000;
     }
-    // ===================
-    // ERROR UTILITIES
-    // ===================
-    /**
-     * Create standardized error messages
-     */
     function createErrorMessage(code, context) {
         const baseMessages = {
             [exports.ErrorCode.EXTENSION_NOT_FOUND]: '0xio Wallet extension is not installed or enabled',
@@ -479,24 +394,12 @@
         const baseMessage = baseMessages[code] || 'Unknown error';
         return context ? `${baseMessage}: ${context}` : baseMessage;
     }
-    /**
-     * Check if error is a specific type
-     */
     function isErrorType(error, code) {
         return error instanceof ZeroXIOWalletError && error.code === code;
     }
-    // ===================
-    // ASYNC UTILITIES
-    // ===================
-    /**
-     * Create a promise that resolves after a delay
-     */
     function delay(ms) {
         return new Promise(resolve => setTimeout(resolve, ms));
     }
-    /**
-     * Retry an async operation with exponential backoff
-     */
     async function retry(operation, maxRetries = 3, baseDelay = 1000) {
         let lastError;
         // maxRetries = number of retries AFTER the first attempt
@@ -536,18 +439,9 @@
             clearTimeout(timer);
         });
     }
-    // ===================
-    // BROWSER UTILITIES
-    // ===================
-    /**
-     * Check if running in browser environment
-     */
     function isBrowser() {
         return typeof window !== 'undefined' && typeof document !== 'undefined';
     }
-    /**
-     * Check if browser supports required features
-     */
     function checkBrowserSupport() {
         const missingFeatures = [];
         if (!isBrowser()) {
@@ -569,12 +463,6 @@
             missingFeatures
         };
     }
-    // ===================
-    // DEVELOPMENT UTILITIES
-    // ===================
-    /**
-     * Generate mock data for development/testing
-     */
     function generateMockData() {
         return {
             address: 'oct' + Math.random().toString(36).substring(2, 22) + Math.random().toString(36).substring(2, 26),
@@ -597,9 +485,6 @@
             }
         };
     }
-    /**
-     * Create development logger
-     */
     function createLogger(prefix, debug) {
         const isDevelopment = typeof window !== 'undefined' && ((typeof globalThis !== 'undefined' && globalThis.process?.env?.NODE_ENV === 'development') ||
             window.location.hostname === 'localhost' ||
@@ -652,17 +537,6 @@
         };
     }
 
-    /**
-     * 0xio Wallet SDK - Extension Communication Module
-     *
-     * @fileoverview Manages secure communication between the SDK and browser extension.
-     * Implements message passing, request/response handling, rate limiting, and origin validation
-     * to ensure secure wallet interactions.
-     *
-     * @module communication
-     * @version 2.7.0
-     * @license MIT
-     */
     class ExtensionCommunicator extends EventEmitter {
         constructor(debug = false, trustedOrigins = [], adapter) {
             super(debug);
@@ -913,9 +787,12 @@
                     return;
                 }
                 const isSameOrigin = event.origin === window.location.origin;
-                const isLocalhost = event.origin.startsWith('http://localhost:') || event.origin.startsWith('http://127.0.0.1:');
                 const isTauri = event.origin === 'tauri://localhost' || event.origin === 'https://tauri.localhost';
-                const isTrustedOrigin = this.trustedOrigins.includes(event.origin) || isTauri || isLocalhost;
+                const hasExplicitList = this.trustedOrigins.length > 0;
+                // When trustedParentOrigins is explicitly set, implicit localhost trust is disabled
+                const isLocalhostAllowed = !hasExplicitList &&
+                    (event.origin.startsWith('http://localhost:') || event.origin.startsWith('http://127.0.0.1:'));
+                const isTrustedOrigin = this.trustedOrigins.includes(event.origin) || isTauri || isLocalhostAllowed;
                 // In iframe mode, only trust the actual parent window
                 const inIframe = window.parent !== window;
                 if (inIframe && event.source !== window.parent) {
@@ -1076,6 +953,7 @@
     // causing double popups where the second tx fails (stale nonce/state).
     ExtensionCommunicator.NO_RETRY_METHODS = new Set([
         'connect', 'send_transaction', 'call_contract', 'signMessage',
+        'sign_transaction', 'broadcast_only',
         'send_private_transfer', 'claim_private_transfer',
         'encrypt_balance', 'decrypt_balance',
     ]);
@@ -1083,8 +961,8 @@
     // only forward known event types
     ExtensionCommunicator.VALID_EVENT_TYPES = new Set([
         'connect', 'disconnect', 'accountChanged', 'balanceChanged',
-        'networkChanged', 'transactionConfirmed', 'error',
-        'extensionLocked', 'extensionUnlocked'
+        'networkChanged', 'transactionConfirmed', 'permissionsChanged', 'message',
+        'error', 'extensionLocked', 'extensionUnlocked'
     ]);
 
     /**
@@ -1167,6 +1045,14 @@
             return null;
         if (typeof raw.rpcUrl !== 'string' || (!raw.rpcUrl && raw.id !== 'custom'))
             return null;
+        if (raw.rpcUrl) {
+            const isHttps = raw.rpcUrl.startsWith('https://');
+            const isLocal = raw.rpcUrl.startsWith('http://localhost') || raw.rpcUrl.startsWith('http://127.0.0.1');
+            const isTestnet = raw.isTestnet === true;
+            // Reject plain-http RPC URLs from untrusted sources unless testnet-flagged or local
+            if (!isHttps && !isLocal && !isTestnet)
+                return null;
+        }
         if (typeof raw.supportsPrivacy !== 'boolean')
             return null;
         return Object.freeze({
@@ -1182,9 +1068,6 @@
         });
     }
 
-    /**
-     * SDK Configuration
-     */
     /**
      * Default balance structure.
      * Accepts a numeric total or undefined — never pass a Balance object here.
@@ -1220,27 +1103,17 @@
             currency: 'OCT'
         };
     }
-    /**
-     * SDK Configuration constants
-     */
     const SDK_CONFIG = {
-        version: '2.7.0',
+        version: '2.7.1',
         defaultNetworkId: DEFAULT_NETWORK_ID,
         communicationTimeout: 30000, // 30 seconds
         retryAttempts: 3,
         retryDelay: 1000, // 1 second
     };
-    /**
-     * Get default network configuration
-     */
     function getDefaultNetwork() {
         return getNetworkConfig(SDK_CONFIG.defaultNetworkId);
     }
 
-    /**
-     * 0xio Wallet SDK - Main Wallet Class
-     * Primary interface for DApp developers to interact with 0xio Wallet
-     */
     class ZeroXIOWallet extends EventEmitter {
         constructor(config) {
             super(config.debug);
@@ -1256,32 +1129,22 @@
                 debug: config.debug || false
             };
             this.logger = createLogger('ZeroXIOWallet', this.config.debug || false);
-            this.communicator = new ExtensionCommunicator(this.config.debug, [], this.config.adapter);
+            this.communicator = new ExtensionCommunicator(this.config.debug, this.config.trustedParentOrigins ?? [], this.config.adapter);
             this.logger.log('Wallet instance created with config:', this.config);
         }
-        // ===================
-        // INITIALIZATION
-        // ===================
-        /**
-         * Initialize the SDK
-         * Must be called before using any other methods
-         */
         async initialize() {
             if (this.isInitialized) {
                 return true;
             }
-            // single-flight init
             if (this._initPromise) {
                 return this._initPromise;
             }
             this._initPromise = (async () => {
                 try {
-                    // Initialize extension communication
                     const communicationReady = await this.communicator.initialize();
                     if (!communicationReady) {
                         throw new ZeroXIOWalletError(exports.ErrorCode.EXTENSION_NOT_FOUND, 'Failed to establish communication with 0xio Wallet extension');
                     }
-                    // Register this DApp with the extension
                     await this.communicator.sendRequest('register_dapp', {
                         appName: this.config.appName,
                         appDescription: this.config.appDescription,
@@ -1291,7 +1154,6 @@
                         requiredPermissions: this.config.requiredPermissions,
                         networkId: this.config.networkId
                     });
-                    // Setup event forwarding from extension
                     this.setupExtensionEventListeners();
                     this.isInitialized = true;
                     this.logger.log('SDK initialized successfully');
@@ -1310,29 +1172,21 @@
             })();
             return this._initPromise;
         }
-        /**
-         * Check if SDK is initialized
-         */
         isReady() {
             return this.isInitialized && this.communicator.isExtensionAvailable();
         }
-        // ===================
-        // CONNECTION MANAGEMENT
-        // ===================
-        /**
-         * Connect to wallet
-         */
         async connect(options = {}) {
             this.ensureInitialized();
             try {
                 this.logger.log('Attempting to connect with options:', options);
-                // filter to declared perms only
+                // filter to declared perms only — accept both RFC 'permissions' and legacy 'requestPermissions'
                 const declaredPermissions = this.config.requiredPermissions || [];
-                const requestPermissions = options.requestPermissions
-                    ? options.requestPermissions.filter(p => declaredPermissions.includes(p))
+                const requestedPerms = options.permissions ?? options.requestPermissions;
+                const requestedPermissions = requestedPerms
+                    ? requestedPerms.filter(p => declaredPermissions.includes(p))
                     : declaredPermissions;
                 const result = await this.communicator.sendRequest('connect', {
-                    requestPermissions,
+                    permissions: requestedPermissions,
                     networkId: options.networkId || this.config.networkId
                 });
                 // verify pubkey→addr binding
@@ -1349,9 +1203,12 @@
                         this.logger.warn('Address derivation check skipped (crypto unavailable):', e);
                     }
                 }
-                // Use networkInfo from extension response — validate before caching
+                // Use networkInfo from extension response — validate before caching.
                 const networkInfo = validateNetworkInfo(result.networkInfo)
-                    ?? getNetworkConfig(result.networkId || this.config.networkId);
+                    ?? (result.networkId ? getNetworkConfig(result.networkId) : null);
+                if (!networkInfo) {
+                    throw new ZeroXIOWalletError(exports.ErrorCode.NETWORK_ERROR, 'Wallet did not return valid network metadata.');
+                }
                 const permissions = result.permissions || [];
                 // Update connection info — including permissions
                 this.connectionInfo = {
@@ -1444,7 +1301,11 @@
                     // validate untrusted balance/networkInfo before caching
                     const balanceInfo = validateBalance(result.balance) ?? createDefaultBalance();
                     const networkInfo = validateNetworkInfo(result.networkInfo)
-                        ?? getNetworkConfig(result.networkId || this.config.networkId);
+                        ?? (result.networkId ? getNetworkConfig(result.networkId) : null);
+                    if (!networkInfo) {
+                        this.logger.warn('getConnectionStatus: wallet returned no network metadata — returning cached state');
+                        return this.connectionInfo;
+                    }
                     const wasConnected = this.connectionInfo.isConnected;
                     const permissions = result.permissions || [];
                     // preserve existing connectedAt
@@ -1517,18 +1378,9 @@
         getNetworkId() {
             return this.connectionInfo.networkInfo?.id || null;
         }
-        // ===================
-        // WALLET INFORMATION
-        // ===================
-        /**
-         * Get current wallet address
-         */
         getAddress() {
             return this.connectionInfo.address || null;
         }
-        /**
-         * Get current balance
-         */
         async getBalance(forceRefresh = false) {
             this.ensureConnected();
             try {
@@ -1553,7 +1405,6 @@
                 // skip if session changed mid-flight
                 if (this._sessionVersion !== sv)
                     return result;
-                // Update cached balance
                 if (this.connectionInfo.balance) {
                     const previousBalance = this.connectionInfo.balance;
                     this.connectionInfo.balance = result;
@@ -1580,15 +1431,11 @@
                 throw new ZeroXIOWalletError(exports.ErrorCode.NETWORK_ERROR, 'Failed to get balance', error);
             }
         }
-        /**
-         * Get network information
-         */
         async getNetworkInfo() {
             this.ensureInitialized();
             try {
                 const sv = this._sessionVersion;
                 const result = await this.communicator.sendRequest('get_network_info');
-                // validate network info before caching
                 const networkInfo = validateNetworkInfo(result);
                 if (!networkInfo) {
                     throw new ZeroXIOWalletError(exports.ErrorCode.NETWORK_ERROR, 'Extension returned invalid network info');
@@ -1596,11 +1443,9 @@
                 // skip if session changed mid-flight
                 if (this._sessionVersion !== sv)
                     return networkInfo;
-                // Update cached network info
                 if (this.connectionInfo.networkInfo) {
                     const previousNetwork = this.connectionInfo.networkInfo;
                     this.connectionInfo.networkInfo = networkInfo;
-                    // Emit network changed event if different
                     if (previousNetwork.id !== networkInfo.id) {
                         const networkChangedEvent = {
                             previousNetwork,
@@ -1620,22 +1465,14 @@
                 throw new ZeroXIOWalletError(exports.ErrorCode.NETWORK_ERROR, 'Failed to get network info', error);
             }
         }
-        // ===================
-        // TRANSACTIONS
-        // ===================
-        /**
-         * Send transaction
-         */
         async sendTransaction(txData) {
             this.ensureConnected();
-            // validate inputs
             if (!isValidAddress(txData.to)) {
                 throw new ZeroXIOWalletError(exports.ErrorCode.INVALID_ADDRESS, 'Invalid recipient address');
             }
             if (!isValidAmount(txData.amount)) {
                 throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Invalid transaction amount');
             }
-            // bound memo
             if (txData.message && txData.message.length > 1000) {
                 throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Transaction message too long (max 1,000 characters)');
             }
@@ -1644,8 +1481,8 @@
                 this.logger.log('Sending transaction:', { to: txData.to });
                 const result = await this.communicator.sendRequest('send_transaction', txData);
                 this.logger.log('Transaction result:', result);
-                // Refresh balance after successful transaction
-                if (result.success) {
+                // Refresh balance after successful transaction (accept RFC 'accepted' or legacy 'success')
+                if (result.accepted ?? result.success) {
                     setTimeout(() => {
                         this.getBalance(true).catch(error => {
                             this.logger.warn('Failed to refresh balance after transaction:', error);
@@ -1662,23 +1499,70 @@
                 throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Failed to send transaction', error);
             }
         }
+        /**
+         * Sign a transaction without broadcasting it (RFC-O-1 octra_signTransaction).
+         * Returns the signed transaction object for manual submission via submitTransaction().
+         */
+        async signTransaction(txData) {
+            this.ensureConnected();
+            if (!isValidAddress(txData.to)) {
+                throw new ZeroXIOWalletError(exports.ErrorCode.INVALID_ADDRESS, 'Invalid recipient address');
+            }
+            if (!isValidAmount(txData.amount)) {
+                throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Invalid transaction amount');
+            }
+            if (txData.message && txData.message.length > 1000) {
+                throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Transaction message too long (max 1,000 characters)');
+            }
+            try {
+                this.logger.log('Requesting transaction signature:', { to: txData.to });
+                const result = await this.communicator.sendRequest('sign_transaction', txData);
+                return result;
+            }
+            catch (error) {
+                if (error instanceof ZeroXIOWalletError)
+                    throw error;
+                throw new ZeroXIOWalletError(exports.ErrorCode.SIGNATURE_FAILED, 'Failed to sign transaction', error);
+            }
+        }
+        /**
+         * Broadcast a pre-signed transaction (RFC-O-1 octra_submitTransaction).
+         * Use after signTransaction() to submit the signed tx to the network.
+         */
+        async submitTransaction(signedTx) {
+            this.ensureConnected();
+            if (!signedTx || typeof signedTx !== 'object') {
+                throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'signedTx must be an object');
+            }
+            try {
+                this.logger.log('Submitting pre-signed transaction');
+                const result = await this.communicator.sendRequest('broadcast_only', { signedTx });
+                return result;
+            }
+            catch (error) {
+                if (error instanceof ZeroXIOWalletError)
+                    throw error;
+                throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Failed to submit transaction', error);
+            }
+        }
         /**
          * Call a smart contract method (state-changing).
          * The extension builds, signs, and submits the transaction via octra_submit.
          */
         async callContract(callData) {
             this.ensureConnected();
-            // validate inputs
             if (!isValidAddress(callData.contract)) {
                 throw new ZeroXIOWalletError(exports.ErrorCode.INVALID_ADDRESS, 'Invalid contract address');
             }
             if (!callData.method || typeof callData.method !== 'string') {
                 throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Contract method is required');
             }
-            // bound method + params size
             if (callData.method.length > 200) {
                 throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Contract method name too long (max 200 characters)');
             }
+            if (callData.amount != null) {
+                this.assertExactOCTAmount(callData.amount, 'Contract call amount');
+            }
             try {
                 if (JSON.stringify(callData.params).length > 65536) {
                     throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Contract params too large (max 64 KB)');
@@ -1716,14 +1600,12 @@
          */
         async contractCallView(viewData) {
             this.ensureInitialized();
-            // validate inputs
             if (!isValidAddress(viewData.contract)) {
                 throw new ZeroXIOWalletError(exports.ErrorCode.INVALID_ADDRESS, 'Invalid contract address');
             }
             if (!viewData.method || typeof viewData.method !== 'string') {
                 throw new ZeroXIOWalletError(exports.ErrorCode.NETWORK_ERROR, 'Contract method is required');
             }
-            // bound method + params size
             if (viewData.method.length > 200) {
                 throw new ZeroXIOWalletError(exports.ErrorCode.NETWORK_ERROR, 'Contract method name too long (max 200 characters)');
             }
@@ -1763,7 +1645,6 @@
          */
         async getContractStorage(contract, key) {
             this.ensureInitialized();
-            // validate inputs
             if (!isValidAddress(contract)) {
                 throw new ZeroXIOWalletError(exports.ErrorCode.INVALID_ADDRESS, 'Invalid contract address');
             }
@@ -1805,12 +1686,6 @@
                 throw new ZeroXIOWalletError(exports.ErrorCode.NETWORK_ERROR, 'Failed to get transaction history', error);
             }
         }
-        // ===================
-        // PRIVATE FEATURES
-        // ===================
-        /**
-         * Get private balance information
-         */
         async getPrivateBalanceInfo() {
             this.ensureConnected();
             try {
@@ -1826,7 +1701,7 @@
          */
         async encryptBalance(amount) {
             this.ensureConnected();
-            // validate amount
+            this.assertExactOCTAmount(amount, 'Encrypt amount');
             if (!isValidAmount(amount)) {
                 throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Invalid amount');
             }
@@ -1847,7 +1722,7 @@
          */
         async decryptBalance(amount) {
             this.ensureConnected();
-            // validate amount
+            this.assertExactOCTAmount(amount, 'Decrypt amount');
             if (!isValidAmount(amount)) {
                 throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Invalid amount');
             }
@@ -1873,21 +1748,21 @@
          */
         async sendPrivateTransfer(transferData) {
             this.ensureConnected();
-            // validate inputs
             if (!isValidAddress(transferData.to)) {
                 throw new ZeroXIOWalletError(exports.ErrorCode.INVALID_ADDRESS, 'Invalid recipient address');
             }
             if (!isValidAmount(transferData.amount)) {
                 throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Invalid transfer amount');
             }
+            this.assertExactOCTAmount(transferData.amount, 'Transfer amount');
             // bound msg size
             if (transferData.message && transferData.message.length > 1000) {
                 throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Transfer message too long (max 1,000 characters)');
             }
             try {
                 const result = await this.communicator.sendRequest('send_private_transfer', transferData);
-                // Refresh balance after transfer
-                if (result.success) {
+                // Refresh balance after transfer (accept RFC 'accepted' or legacy 'success')
+                if (result.accepted ?? result.success) {
                     setTimeout(() => {
                         this.getBalance(true).catch(() => { });
                     }, 1000);
@@ -1927,8 +1802,8 @@
                 const result = await this.communicator.sendRequest('claim_private_transfer', {
                     transferId
                 });
-                // Refresh balance after claiming
-                if (result.success) {
+                // Refresh balance after claiming (accept RFC 'accepted' or legacy 'success')
+                if (result.accepted ?? result.success) {
                     setTimeout(() => {
                         this.getBalance(true).catch(() => { });
                     }, 1000);
@@ -1939,9 +1814,6 @@
                 throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Failed to claim private transfer', error);
             }
         }
-        // ===================
-        // MESSAGE SIGNING
-        // ===================
         /**
          * Sign an arbitrary message with the wallet's private key
          * The user will be prompted to approve the signature request in the extension
@@ -1979,9 +1851,6 @@
                 throw new ZeroXIOWalletError(exports.ErrorCode.SIGNATURE_FAILED, 'Failed to sign message', error);
             }
         }
-        // ===================
-        // AUTHENTICATION HELPERS
-        // ===================
         /**
          * Sign a domain-separated authentication message.
          * Unlike `signMessage()`, this prepends a standard header that binds the signature
@@ -2003,9 +1872,6 @@
             const domainSeparated = `0xio auth\nService: ${service}\nNonce: ${nonce}\nOrigin: ${origin}`;
             return this.signMessage(domainSeparated);
         }
-        // ===================
-        // PRIVATE METHODS
-        // ===================
         ensureInitialized() {
             if (!this.isInitialized) {
                 throw new ZeroXIOWalletError(exports.ErrorCode.UNKNOWN_ERROR, 'SDK not initialized. Call initialize() first.');
@@ -2018,7 +1884,6 @@
             }
         }
         setupExtensionEventListeners() {
-            // Listen for extension events through the communicator
             this.communicator.on('accountChanged', (event) => {
                 this.handleAccountChanged(event.data);
             });
@@ -2037,11 +1902,18 @@
             this.communicator.on('transactionConfirmed', (event) => {
                 this.handleTransactionConfirmed(event.data);
             });
+            this.communicator.on('permissionsChanged', (event) => {
+                const permissions = event.data ?? event;
+                if (this.connectionInfo.isConnected) {
+                    this.connectionInfo.permissions = Array.isArray(permissions) ? permissions : [];
+                }
+                this.emit('permissionsChanged', permissions);
+            });
+            this.communicator.on('message', (event) => {
+                this.emit('message', event.data ?? event);
+            });
             this.logger.log('Extension event listeners setup complete');
         }
-        /**
-         * Handle account changed event from extension
-         */
         handleAccountChanged(data) {
             ++this._sessionVersion;
             const previousAddress = this.connectionInfo.address;
@@ -2049,7 +1921,6 @@
             // clear stale pubkey on acct change
             this.connectionInfo.publicKey = data.publicKey;
             if (data.balance) {
-                // validate balance before caching
                 const validated = validateBalance(data.balance);
                 if (validated) {
                     this.connectionInfo.balance = validated;
@@ -2067,9 +1938,6 @@
             this.emit('accountChanged', accountChangedEvent);
             this.logger.log('Account changed:', { newAddress: accountChangedEvent.newAddress });
         }
-        /**
-         * Handle network changed event from extension
-         */
         handleNetworkChanged(data) {
             const previousNetwork = this.connectionInfo.networkInfo;
             // validate networkInfo — drop invalid
@@ -2088,11 +1956,7 @@
             this.emit('networkChanged', networkChangedEvent);
             this.logger.log('Network changed:', networkChangedEvent);
         }
-        /**
-         * Handle balance changed event from extension
-         */
         handleBalanceChanged(data) {
-            // validate balance before caching
             const balance = validateBalance(data.balance);
             if (!balance) {
                 this.logger.warn('Received invalid balance in balanceChanged event, ignoring');
@@ -2108,13 +1972,9 @@
             this.emit('balanceChanged', balanceChangedEvent);
             this.logger.log('Balance changed:', { public: balance.public });
         }
-        /**
-         * Handle extension locked event
-         */
         handleExtensionLocked() {
             ++this._sessionVersion;
             this.connectionInfo = { isConnected: false };
-            // emit extensionLocked then disconnect
             this.emit('extensionLocked', {});
             const disconnectEvent = {
                 reason: 'extension_locked'
@@ -2122,21 +1982,13 @@
             this.emit('disconnect', disconnectEvent);
             this.logger.log('Extension locked - disconnected');
         }
-        /**
-         * Handle extension unlocked event
-         */
         handleExtensionUnlocked() {
-            // emit extensionUnlocked
             this.emit('extensionUnlocked', {});
-            // Attempt to restore connection
             this.getConnectionStatus().catch(() => {
                 this.logger.warn('Could not restore connection after unlock');
             });
             this.logger.log('Extension unlocked');
         }
-        /**
-         * Handle transaction confirmed event
-         */
         handleTransactionConfirmed(data) {
             this.emit('transactionConfirmed', {
                 txHash: data.txHash,
@@ -2149,12 +2001,21 @@
             }, 2000);
             this.logger.log('Transaction confirmed:', data.txHash);
         }
-        // ===================
-        // CLEANUP
-        // ===================
         /**
-         * Clean up SDK resources
+         * Reject numeric amounts that cannot be represented exactly in micro-OCT.
+         * e.g. 0.1 + 0.2 = 0.30000000000000004 — the extension would sign the wrong value.
+         * String amounts bypass this check (caller is responsible for correctness).
          */
+        assertExactOCTAmount(amount, label) {
+            if (typeof amount === 'number') {
+                const micro = Math.round(amount * 1000000);
+                if (Math.abs(amount - micro / 1000000) > 1e-10) {
+                    const suggested = (micro / 1000000).toFixed(6);
+                    throw new ZeroXIOWalletError(exports.ErrorCode.INVALID_AMOUNT, `${label} cannot be represented exactly in micro-OCT. ` +
+                        `Pass a string instead (e.g. "${suggested}").`);
+                }
+            }
+        }
         cleanup() {
             this.communicator.cleanup();
             this.removeAllListeners();
@@ -2191,7 +2052,9 @@
         switch_network: 'octra_switchNetwork',
         signMessage: 'octra_signMessage',
         send_transaction: 'octra_sendTransaction',
-        call_contract: 'octra_callContract',
+        sign_transaction: 'octra_signTransaction',
+        broadcast_only: 'octra_submitTransaction',
+        call_contract: 'octra_sendContractTransaction',
         contract_call_view: 'octra_callContract',
         get_private_balance_info: 'octra_getEncryptedBalance',
         encrypt_balance: 'octra_encryptBalance',
@@ -2203,7 +2066,7 @@
     const RFC_TO_SDK_ERROR = {
         4001: 'USER_REJECTED',
         4100: 'PERMISSION_DENIED',
-        4200: 'NETWORK_ERROR',
+        4200: 'UNKNOWN_ERROR',
         4900: 'CONNECTION_REFUSED',
         4901: 'NETWORK_ERROR',
     };
@@ -2220,7 +2083,7 @@
      * three RFC-O-1 calls: octra_requestAccounts, octra_networkInfo, octra_permissions.
      */
     async function rfcConnect(provider, params) {
-        const requestPerms = params?.requestPermissions ?? [];
+        const requestPerms = params?.permissions ?? params?.requestPermissions ?? [];
         const accounts = (await provider.request({
             method: 'octra_requestAccounts',
             params: [{ permissions: requestPerms }],
@@ -2308,12 +2171,14 @@
                 const onNetworkChanged = (data) => handler({ eventType: 'networkChanged', eventData: { networkInfo: data } });
                 const onBalanceChanged = (data) => handler({ eventType: 'balanceChanged', eventData: data });
                 const onTransactionChanged = (data) => handler({ eventType: 'transactionConfirmed', eventData: data });
+                const onPermissionsChanged = (data) => handler({ eventType: 'permissionsChanged', eventData: data });
                 provider.on('connect', onConnect);
                 provider.on('disconnect', onDisconnect);
                 provider.on('accountsChanged', onAccountsChanged);
                 provider.on('networkChanged', onNetworkChanged);
                 provider.on('balanceChanged', onBalanceChanged);
                 provider.on('transactionChanged', onTransactionChanged);
+                provider.on('permissionsChanged', onPermissionsChanged);
                 const cleanup = () => {
                     provider.removeListener('connect', onConnect);
                     provider.removeListener('disconnect', onDisconnect);
@@ -2321,6 +2186,7 @@
                     provider.removeListener('networkChanged', onNetworkChanged);
                     provider.removeListener('balanceChanged', onBalanceChanged);
                     provider.removeListener('transactionChanged', onTransactionChanged);
+                    provider.removeListener('permissionsChanged', onPermissionsChanged);
                     _handler = null;
                 };
                 return cleanup;
@@ -2328,7 +2194,11 @@
             listenForReady(onReady) {
                 const handler = () => onReady();
                 window.addEventListener('octraWalletReady', handler);
-                return () => window.removeEventListener('octraWalletReady', handler);
+                window.addEventListener('octra#initialized', handler);
+                return () => {
+                    window.removeEventListener('octraWalletReady', handler);
+                    window.removeEventListener('octra#initialized', handler);
+                };
             },
         };
     }
@@ -2391,7 +2261,7 @@
      */
     // Main exports
     // Version information
-    const SDK_VERSION = '2.7.0';
+    const SDK_VERSION = '2.7.1';
     const MIN_EXTENSION_VERSION = '2.0.1'; // Mainnet Alpha
     const MIN_EXTENSION_VERSION_DEVNET = '2.2.1'; // Devnet (contract calls, privacy)
     const SUPPORTED_EXTENSION_VERSIONS = '^2.0.1'; // Supports all versions >= 2.0.1
@@ -2409,8 +2279,7 @@
             try {
                 await wallet$1.connect();
             }
-            catch (error) {
-                if (config.debug) ;
+            catch {
                 // Don't throw - let the app handle connection manually
             }
         }