@0xio/sdk 2.7.0 → 2.8.0

package/dist/index.esm.js

@@ -1,25 +1,13 @@
-/**
- * 0xio Wallet SDK - Event System
- * Type-safe event emitter for wallet events
- */
 class EventEmitter {
-    constructor(debug = false) {
+    constructor(_debug = false) {
         this.listeners = new Map();
-        this.debug = debug;
     }
-    /**
-     * Add event listener
-     */
     on(eventType, listener) {
         if (!this.listeners.has(eventType)) {
             this.listeners.set(eventType, new Set());
         }
         this.listeners.get(eventType).add(listener);
-        if (this.debug) ;
     }
-    /**
-     * Remove event listener
-     */
     off(eventType, listener) {
         const eventListeners = this.listeners.get(eventType);
         if (eventListeners) {
@@ -27,12 +15,8 @@ class EventEmitter {
             if (eventListeners.size === 0) {
                 this.listeners.delete(eventType);
             }
-            if (this.debug) ;
         }
     }
-    /**
-     * Add one-time event listener
-     */
     once(eventType, listener) {
         const onceListener = (event) => {
             // Remove BEFORE calling so a throwing listener doesn't stay registered
@@ -41,9 +25,6 @@ class EventEmitter {
         };
         this.on(eventType, onceListener);
     }
-    /**
-     * Emit event to all listeners
-     */
     emit(eventType, data) {
         const event = {
             type: eventType,
@@ -52,49 +33,32 @@ class EventEmitter {
         };
         const eventListeners = this.listeners.get(eventType);
         if (eventListeners && eventListeners.size > 0) {
-            if (this.debug) ;
-            // Create a copy to avoid issues if listeners modify the set during iteration
-            const listenersArray = Array.from(eventListeners);
-            for (const listener of listenersArray) {
+            // snapshot to avoid issues if listeners modify the set during iteration
+            for (const listener of Array.from(eventListeners)) {
                 try {
                     listener(event);
                 }
-                catch (error) {
-                    // console.error(`[0xio SDK] Error in event listener for '${eventType}':`, error);
+                catch {
+                    // listener errors are swallowed to keep the event loop running
                 }
             }
         }
-        else if (this.debug) ;
     }
-    /**
-     * Remove all listeners for a specific event type
-     */
     removeAllListeners(eventType) {
         if (eventType) {
             this.listeners.delete(eventType);
-            if (this.debug) ;
         }
         else {
             this.listeners.clear();
-            if (this.debug) ;
         }
     }
-    /**
-     * Get number of listeners for an event type
-     */
     listenerCount(eventType) {
         const eventListeners = this.listeners.get(eventType);
         return eventListeners ? eventListeners.size : 0;
     }
-    /**
-     * Get all event types that have listeners
-     */
     eventTypes() {
         return Array.from(this.listeners.keys());
     }
-    /**
-     * Check if there are any listeners for an event type
-     */
     hasListeners(eventType) {
         return this.listenerCount(eventType) > 0;
     }
@@ -128,6 +92,16 @@ var ErrorCode;
     ErrorCode["DUPLICATE_TRANSACTION"] = "DUPLICATE_TRANSACTION";
     ErrorCode["NONCE_TOO_FAR"] = "NONCE_TOO_FAR";
     ErrorCode["INTERNAL_ERROR"] = "INTERNAL_ERROR";
+    // Codes the 0xio wallet returns over the bridge
+    ErrorCode["NOT_CONNECTED"] = "NOT_CONNECTED";
+    ErrorCode["INVALID_PARAMS"] = "INVALID_PARAMS";
+    ErrorCode["METHOD_NOT_ALLOWED"] = "METHOD_NOT_ALLOWED";
+    ErrorCode["NOT_AVAILABLE"] = "NOT_AVAILABLE";
+    ErrorCode["PRIVATE_PROOF_FAILED"] = "PRIVATE_PROOF_FAILED";
+    ErrorCode["PRIVATE_TRANSFER_FAILED"] = "PRIVATE_TRANSFER_FAILED";
+    ErrorCode["CONTRACT_CALL_FAILED"] = "CONTRACT_CALL_FAILED";
+    ErrorCode["SIGN_FAILED"] = "SIGN_FAILED";
+    ErrorCode["RECIPIENT_NOT_REGISTERED"] = "RECIPIENT_NOT_REGISTERED";
 })(ErrorCode || (ErrorCode = {}));
 class ZeroXIOWalletError extends Error {
     constructor(code, message, details) {
@@ -150,7 +124,7 @@ class ZeroXIOWalletError extends Error {
  *   window.postMessage({ source: '0xio-sdk-bridge', response: { id, success, data, error }, sessionNonce })
  *   window.postMessage({ source: '0xio-sdk-bridge', event: { type, data } })
  *
- * H-2: Session nonce validation — injected.ts broadcasts the nonce received from the
+ * Session nonce validation: injected.ts broadcasts the nonce received from the
  * isolated content script. Once set, any '0xio-sdk-bridge' response with a missing or
  * mismatched nonce is rejected, preventing response injection by malicious page scripts.
  */
@@ -183,7 +157,7 @@ function createZeroXIOAdapter(extraTrustedOrigins = []) {
                 window.parent.postMessage({ source: '0xio-sdk-request', request }, parentOrigin);
             }
             catch {
-                // Do not fall back to '*' — silent failure is safer
+                // Do not fall back to '*': silent failure is safer
             }
         },
         listen(handler, options) {
@@ -198,7 +172,7 @@ function createZeroXIOAdapter(extraTrustedOrigins = []) {
                 ...(options?.trustedParentOrigins ?? []),
             ]);
             let _sessionNonce = null;
-            // H-2: receive session nonce from injected.ts (MAIN world content script)
+            // receive the session nonce from injected.ts (MAIN world content script)
             const nonceListener = (e) => {
                 if (e.origin !== allowedOrigin)
                     return;
@@ -221,7 +195,7 @@ function createZeroXIOAdapter(extraTrustedOrigins = []) {
                     return;
                 if (!e.data || e.data.source !== '0xio-sdk-bridge')
                     return;
-                // H-2: session nonce validation.
+                // session nonce validation.
                 // Preferred path: nonce set via 0xio-sdk-nonce-init from injected.ts.
                 // Fallback path: if the init broadcast was missed (race between document_start
                 // content script and page script load), capture nonce from the first same-origin
@@ -267,16 +241,6 @@ function createZeroXIOAdapter(extraTrustedOrigins = []) {
 /** Default 0xio adapter instance (no extra trusted origins). */
 const ZeroXIOAdapter = createZeroXIOAdapter();
 
-/**
- * 0xio Wallet SDK - Utilities
- * Helper functions for validation, formatting, and common operations
- */
-// ===================
-// VALIDATION UTILITIES
-// ===================
-/**
- * Validate wallet address for Octra blockchain
- */
 function isValidAddress(address) {
     if (!address || typeof address !== 'string') {
         return false;
@@ -300,11 +264,8 @@ function isValidAmount(amount) {
         Number.isFinite(amount) &&
         amount <= Number.MAX_SAFE_INTEGER;
 }
-/**
- * Validate transaction message
- */
 function isValidMessage(message) {
-    // Type check first — falsy non-strings (0, false, null) are NOT valid messages
+    // Type check first: falsy non-strings (0, false, null) are not valid messages
     if (typeof message !== 'string') {
         return message === undefined || message === null ? true : false;
     }
@@ -312,18 +273,12 @@ function isValidMessage(message) {
     if (message.length === 0) {
         return true;
     }
-    // 100KB limit — contract call params can be large (serialized JSON)
+    // 100KB limit: contract call params can be large (serialized JSON)
     return message.length <= 100000;
 }
-/**
- * Validate fee level
- */
 function isValidFeeLevel(feeLevel) {
     return feeLevel === 1 || feeLevel === 3;
 }
-// ===================
-// ADDRESS DERIVATION
-// ===================
 const _B58_ALPHA = '123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz';
 function _base58Encode(buf) {
     let zeros = 0;
@@ -351,7 +306,7 @@ function _base58Encode(buf) {
 }
 /**
  * Derive the canonical Octra address from a base64-encoded Ed25519 public key.
- * Algorithm: SHA-256(pubkey_bytes) → base58 → prepend "oct"
+ * Algorithm: SHA-256 of the pubkey bytes, base58-encoded, with "oct" prepended
  * Source of truth: ocho-push-server/src/index.ts#deriveAddressFromPubkey
  */
 async function deriveOctraAddress(publicKeyBase64) {
@@ -368,12 +323,6 @@ async function deriveOctraAddress(publicKeyBase64) {
     const hashBuf = await crypto.subtle.digest('SHA-256', bytes);
     return 'oct' + _base58Encode(new Uint8Array(hashBuf));
 }
-// ===================
-// FORMATTING UTILITIES
-// ===================
-/**
- * Format OCT amount for display
- */
 function formatOCT(amount, decimals = 6) {
     const n = typeof amount === 'string' ? parseFloat(amount) : amount;
     if (!isValidAmount(n)) {
@@ -384,9 +333,6 @@ function formatOCT(amount, decimals = 6) {
         maximumFractionDigits: decimals
     });
 }
-/**
- * Format address for display (truncated)
- */
 function formatAddress(address, prefixLength = 6, suffixLength = 4) {
     if (!isValidAddress(address)) {
         return 'Invalid Address';
@@ -396,16 +342,10 @@ function formatAddress(address, prefixLength = 6, suffixLength = 4) {
     }
     return `${address.slice(0, prefixLength)}...${address.slice(-suffixLength)}`;
 }
-/**
- * Format timestamp for display
- */
 function formatTimestamp(timestamp) {
     const date = new Date(timestamp);
     return date.toLocaleString();
 }
-/**
- * Format transaction hash for display
- */
 function formatTxHash(hash, length = 12) {
     if (!hash || typeof hash !== 'string') {
         return 'Invalid Hash';
@@ -417,12 +357,6 @@ function formatTxHash(hash, length = 12) {
     const suffixLength = Math.floor(length / 2);
     return `${hash.slice(0, prefixLength)}...${hash.slice(-suffixLength)}`;
 }
-// ===================
-// CONVERSION UTILITIES
-// ===================
-/**
- * Convert OCT to micro OCT (for network transmission)
- */
 function toMicroOCT(amount) {
     if (!isValidAmount(amount)) {
         throw new ZeroXIOWalletError(ErrorCode.INVALID_AMOUNT, 'Invalid amount for conversion');
@@ -432,8 +366,21 @@ function toMicroOCT(amount) {
     return microOCT.toString();
 }
 /**
- * Convert micro OCT to OCT (for display)
+ * Exact OCT to raw micro-OCT conversion using string arithmetic (no float rounding).
+ * Accepts up to 6 decimals; anything else is rejected.
  */
+function octToMicro(amount) {
+    const text = typeof amount === 'number' ? amount.toFixed(6) : String(amount).trim();
+    if (!/^\d+(\.\d{1,6})?$/.test(text)) {
+        throw new ZeroXIOWalletError(ErrorCode.INVALID_AMOUNT, 'Amount must be a positive decimal with at most 6 places');
+    }
+    const [whole, frac = ''] = text.split('.');
+    const micro = BigInt(whole) * BigInt(1000000) + BigInt(frac.padEnd(6, '0'));
+    if (micro <= BigInt(0)) {
+        throw new ZeroXIOWalletError(ErrorCode.INVALID_AMOUNT, 'Amount must be greater than zero');
+    }
+    return micro.toString();
+}
 function fromMicroOCT(microAmount) {
     const amount = typeof microAmount === 'string' ? parseInt(microAmount, 10) : microAmount;
     if (!Number.isFinite(amount) || amount < 0) {
@@ -441,12 +388,6 @@ function fromMicroOCT(microAmount) {
     }
     return amount / 1000000;
 }
-// ===================
-// ERROR UTILITIES
-// ===================
-/**
- * Create standardized error messages
- */
 function createErrorMessage(code, context) {
     const baseMessages = {
         [ErrorCode.EXTENSION_NOT_FOUND]: '0xio Wallet extension is not installed or enabled',
@@ -468,29 +409,26 @@ function createErrorMessage(code, context) {
         [ErrorCode.INVALID_SIGNATURE]: 'Invalid transaction signature',
         [ErrorCode.DUPLICATE_TRANSACTION]: 'Duplicate transaction detected',
         [ErrorCode.NONCE_TOO_FAR]: 'Transaction nonce is too far ahead',
-        [ErrorCode.INTERNAL_ERROR]: 'Internal server error'
+        [ErrorCode.INTERNAL_ERROR]: 'Internal server error',
+        [ErrorCode.NOT_CONNECTED]: 'Connect the wallet before this request',
+        [ErrorCode.INVALID_PARAMS]: 'Invalid request parameters',
+        [ErrorCode.METHOD_NOT_ALLOWED]: 'This method is not permitted through the wallet',
+        [ErrorCode.NOT_AVAILABLE]: 'Not available through the wallet bridge',
+        [ErrorCode.PRIVATE_PROOF_FAILED]: 'Private proof generation failed',
+        [ErrorCode.PRIVATE_TRANSFER_FAILED]: 'Private transfer failed',
+        [ErrorCode.CONTRACT_CALL_FAILED]: 'Contract call failed',
+        [ErrorCode.SIGN_FAILED]: 'Signing failed',
+        [ErrorCode.RECIPIENT_NOT_REGISTERED]: 'Recipient has no private view key registered'
     };
     const baseMessage = baseMessages[code] || 'Unknown error';
     return context ? `${baseMessage}: ${context}` : baseMessage;
 }
-/**
- * Check if error is a specific type
- */
 function isErrorType(error, code) {
     return error instanceof ZeroXIOWalletError && error.code === code;
 }
-// ===================
-// ASYNC UTILITIES
-// ===================
-/**
- * Create a promise that resolves after a delay
- */
 function delay(ms) {
     return new Promise(resolve => setTimeout(resolve, ms));
 }
-/**
- * Retry an async operation with exponential backoff
- */
 async function retry(operation, maxRetries = 3, baseDelay = 1000) {
     let lastError;
     // maxRetries = number of retries AFTER the first attempt
@@ -501,7 +439,7 @@ async function retry(operation, maxRetries = 3, baseDelay = 1000) {
         }
         catch (error) {
             lastError = error;
-            // Never retry user rejections — these are intentional
+            // Never retry user rejections, they are intentional
             const msg = lastError.message?.toLowerCase() || '';
             if (msg.includes('rejected') || msg.includes('denied') || msg.includes('cancelled') || msg.includes('user refused')) {
                 throw lastError;
@@ -530,18 +468,9 @@ function withTimeout(promise, timeoutMs, timeoutMessage = 'Operation timed out')
         clearTimeout(timer);
     });
 }
-// ===================
-// BROWSER UTILITIES
-// ===================
-/**
- * Check if running in browser environment
- */
 function isBrowser() {
     return typeof window !== 'undefined' && typeof document !== 'undefined';
 }
-/**
- * Check if browser supports required features
- */
 function checkBrowserSupport() {
     const missingFeatures = [];
     if (!isBrowser()) {
@@ -563,12 +492,6 @@ function checkBrowserSupport() {
         missingFeatures
     };
 }
-// ===================
-// DEVELOPMENT UTILITIES
-// ===================
-/**
- * Generate mock data for development/testing
- */
 function generateMockData() {
     return {
         address: 'oct' + Math.random().toString(36).substring(2, 22) + Math.random().toString(36).substring(2, 26),
@@ -591,9 +514,6 @@ function generateMockData() {
         }
     };
 }
-/**
- * Create development logger
- */
 function createLogger(prefix, debug) {
     const isDevelopment = typeof window !== 'undefined' && ((typeof globalThis !== 'undefined' && globalThis.process?.env?.NODE_ENV === 'development') ||
         window.location.hostname === 'localhost' ||
@@ -646,17 +566,6 @@ function createLogger(prefix, debug) {
     };
 }
 
-/**
- * 0xio Wallet SDK - Extension Communication Module
- *
- * @fileoverview Manages secure communication between the SDK and browser extension.
- * Implements message passing, request/response handling, rate limiting, and origin validation
- * to ensure secure wallet interactions.
- *
- * @module communication
- * @version 2.7.0
- * @license MIT
- */
 class ExtensionCommunicator extends EventEmitter {
     constructor(debug = false, trustedOrigins = [], adapter) {
         super(debug);
@@ -672,14 +581,14 @@ class ExtensionCommunicator extends EventEmitter {
         this._adapterReadyTeardown = null;
         /**
          * Set when a trusted walletReady has been received from window.parent.
-         * The polling fallback must NOT clear this flag.
+         * The polling fallback must not clear this flag.
          */
         this._parentTrusted = false;
         /** walletReady postMessage listener stored for cleanup */
         this._walletReadyMessageListener = null;
         /**
          * In-flight interactive request lock.
-         * Methods that open approval popups are serialized — only one at a time.
+         * Methods that open approval popups are serialized: only one at a time.
          */
         this._interactiveInFlight = false;
         this.MAX_CONCURRENT_REQUESTS = 50;
@@ -720,9 +629,15 @@ class ExtensionCommunicator extends EventEmitter {
         return this.isExtensionAvailableState && this.hasExtensionContext();
     }
     async sendRequest(method, params = {}, timeout = 30000) {
-        const isInteractive = ExtensionCommunicator.NO_RETRY_METHODS.has(method);
-        const maxRetries = isInteractive ? 0 : 1;
-        const effectiveTimeout = isInteractive ? Math.max(timeout, 180000) : timeout;
+        // No-retry + long timeout for both popup/broadcast methods and long compute primitives.
+        const longOrNoRetry = ExtensionCommunicator.NO_RETRY_METHODS.has(method) ||
+            ExtensionCommunicator.LONG_COMPUTE_METHODS.has(method);
+        const maxRetries = longOrNoRetry ? 0 : 1;
+        const effectiveTimeout = ExtensionCommunicator.PROOF_METHODS.has(method)
+            ? Math.max(timeout, 600000)
+            : longOrNoRetry
+                ? Math.max(timeout, 180000)
+                : timeout;
         return this.sendRequestWithRetry(method, params, maxRetries, effectiveTimeout);
     }
     async sendRequestWithRetry(method, params = {}, maxRetries = 3, timeout = 30000) {
@@ -791,7 +706,7 @@ class ExtensionCommunicator extends EventEmitter {
             return;
         this._adapterTeardown = this.adapter.listen((msg) => {
             if (msg.requestId !== undefined) {
-                // response — map AdapterIncomingMessage → ExtensionResponse shape
+                // response: map AdapterIncomingMessage to the ExtensionResponse shape
                 if (this.pendingRequests.has(msg.requestId)) {
                     this.handleExtensionResponse({
                         id: msg.requestId,
@@ -825,7 +740,7 @@ class ExtensionCommunicator extends EventEmitter {
         }
         clearTimeout(pending.timeout);
         this.pendingRequests.delete(response.id);
-        // Require strict boolean true — "false" string or other truthy values are failures
+        // Require strict boolean true: a "false" string or other truthy values are failures
         if (response.success === true) {
             pending.resolve(response.data);
         }
@@ -850,7 +765,7 @@ class ExtensionCommunicator extends EventEmitter {
     }
     postMessageToExtension(request) {
         this.adapter.postRequest(request);
-        // Parent bridge (iframe/desktop mode) — only when a trusted origin is established.
+        // Parent bridge (iframe/desktop mode), only when a trusted origin is established.
         // Sending with '*' would leak method + params to any intercepting frame.
         if (window.parent !== window && this._parentOrigin) {
             if (this.adapter.postRequestToParent) {
@@ -867,7 +782,7 @@ class ExtensionCommunicator extends EventEmitter {
         if (this.pendingRequests.size >= this.MAX_CONCURRENT_REQUESTS) {
             throw new ZeroXIOWalletError(ErrorCode.RATE_LIMIT_EXCEEDED, `Too many concurrent requests (max: ${this.MAX_CONCURRENT_REQUESTS})`);
         }
-        // Trim expired timestamps — cap array size to prevent unbounded growth in idle tabs
+        // Trim expired timestamps and cap the array size to prevent unbounded growth in idle tabs
         this.requestTimestamps = this.requestTimestamps.filter(t => now - t < this.RATE_LIMIT_WINDOW);
         if (this.requestTimestamps.length > this.MAX_REQUESTS_PER_WINDOW) {
             this.requestTimestamps = this.requestTimestamps.slice(-this.MAX_REQUESTS_PER_WINDOW);
@@ -887,7 +802,7 @@ class ExtensionCommunicator extends EventEmitter {
             const hex = Array.from(array, b => b.toString(16).padStart(2, '0')).join('');
             return `0xio-sdk-${hex}`;
         }
-        // Crypto API unavailable — throw rather than produce a guessable ID that
+        // Crypto API unavailable: throw rather than produce a guessable ID that
         // could allow response spoofing via a known requestId.
         throw new ZeroXIOWalletError(ErrorCode.UNKNOWN_ERROR, 'Cryptographic random number generation is not available in this environment');
     }
@@ -901,15 +816,18 @@ class ExtensionCommunicator extends EventEmitter {
                 this.isExtensionAvailableState = true;
             });
         }
-        // walletReady via postMessage (desktop/mobile iframe bridge) — store ref for cleanup
+        // walletReady via postMessage (desktop/mobile iframe bridge), store the ref for cleanup
         this._walletReadyMessageListener = (event) => {
             if (event.data?.source !== '0xio-sdk-bridge' || event.data?.event?.type !== 'walletReady') {
                 return;
             }
             const isSameOrigin = event.origin === window.location.origin;
-            const isLocalhost = event.origin.startsWith('http://localhost:') || event.origin.startsWith('http://127.0.0.1:');
             const isTauri = event.origin === 'tauri://localhost' || event.origin === 'https://tauri.localhost';
-            const isTrustedOrigin = this.trustedOrigins.includes(event.origin) || isTauri || isLocalhost;
+            const hasExplicitList = this.trustedOrigins.length > 0;
+            // When trustedParentOrigins is explicitly set, implicit localhost trust is disabled
+            const isLocalhostAllowed = !hasExplicitList &&
+                (event.origin.startsWith('http://localhost:') || event.origin.startsWith('http://127.0.0.1:'));
+            const isTrustedOrigin = this.trustedOrigins.includes(event.origin) || isTauri || isLocalhostAllowed;
             // In iframe mode, only trust the actual parent window
             const inIframe = window.parent !== window;
             if (inIframe && event.source !== window.parent) {
@@ -933,7 +851,7 @@ class ExtensionCommunicator extends EventEmitter {
         };
         window.addEventListener('message', this._walletReadyMessageListener);
         if (window.parent !== window) {
-            this.logger.log('Running inside a frame — waiting for trusted walletReady signal');
+            this.logger.log('Running inside a frame, waiting for the trusted walletReady signal');
         }
         this.checkExtensionAvailability();
         this.extensionDetectionInterval = setInterval(() => {
@@ -942,7 +860,7 @@ class ExtensionCommunicator extends EventEmitter {
     }
     checkExtensionAvailability() {
         // If parent-bridge readiness was established via a trusted walletReady handshake,
-        // preserve that state — the polling fallback (detectExtensionSignals) does not
+        // preserve that state: the polling fallback (detectExtensionSignals) does not
         // consider the iframe parent signal and would incorrectly flip state back
         if (this._parentTrusted) {
             return;
@@ -1024,7 +942,7 @@ class ExtensionCommunicator extends EventEmitter {
     }
     /**
      * Clean up SDK resources.
-     * After cleanup() the instance is terminal — do not call initialize() again.
+     * After cleanup() the instance is terminal: do not call initialize() again.
      * Construct a new instance instead.
      */
     cleanup() {
@@ -1065,20 +983,38 @@ class ExtensionCommunicator extends EventEmitter {
         };
     }
 }
-// Methods that trigger user-facing popups — NEVER retry these.
+// Methods that trigger user-facing popups: never retry these.
 // Retrying sends a second request while the first popup is still open,
 // causing double popups where the second tx fails (stale nonce/state).
 ExtensionCommunicator.NO_RETRY_METHODS = new Set([
     'connect', 'send_transaction', 'call_contract', 'signMessage',
+    'sign_transaction', 'broadcast_only',
     'send_private_transfer', 'claim_private_transfer',
     'encrypt_balance', 'decrypt_balance',
+    // Broadcasts a sequence of contract txs, so it must never be retried (it would double-send).
+    'send_contract_transaction_sequence',
+    // Shows an approval popup + broadcasts a registration tx (offscreen cold-init can exceed
+    // 30s): interactive, long timeout, no retry.
+    'register_private_view_key',
+]);
+// Long-running compute primitives (RFP): proof generation / decrypt take 10-120s, so
+// they need the long (180s) timeout and must not be retried (a retry wastes ~a minute of
+// compute). They do not show approval popups, so, unlike NO_RETRY_METHODS, they are not
+// subject to the one-at-a-time interactive lock (a dapp may run several concurrently).
+ExtensionCommunicator.LONG_COMPUTE_METHODS = new Set([
+    'make_zero_proof', 'make_range_proof', 'decrypt_value',
+    'get_private_balance', 'encrypt_value',
 ]);
+// A private transfer runs proof generation after the approval (minutes on a slow machine),
+// so its wait is longer than the popup window alone.
+ExtensionCommunicator.PROOF_METHODS = new Set(['send_private_transfer']);
+// The interactive lock applies only to methods that open a wallet popup / broadcast.
 ExtensionCommunicator.INTERACTIVE_METHODS = ExtensionCommunicator.NO_RETRY_METHODS;
 // only forward known event types
 ExtensionCommunicator.VALID_EVENT_TYPES = new Set([
     'connect', 'disconnect', 'accountChanged', 'balanceChanged',
-    'networkChanged', 'transactionConfirmed', 'error',
-    'extensionLocked', 'extensionUnlocked'
+    'networkChanged', 'transactionConfirmed', 'transactionFailed', 'permissionsChanged', 'message',
+    'error', 'extensionLocked', 'extensionUnlocked'
 ]);
 
 /**
@@ -1099,7 +1035,7 @@ const _NETWORKS = {
     'devnet': {
         id: 'devnet',
         name: 'Octra Devnet',
-        rpcUrl: 'http://165.227.225.79:8080',
+        rpcUrl: 'https://devnet.octrascan.io',
         explorerUrl: 'https://devnet.octrascan.io/tx.html?hash=',
         explorerAddressUrl: 'https://devnet.octrascan.io/address.html?addr=',
         indexerUrl: 'https://devnet.octrascan.io',
@@ -1127,7 +1063,7 @@ const NETWORKS = Object.freeze(Object.fromEntries(Object.entries(_NETWORKS).map(
 const DEFAULT_NETWORK_ID = 'mainnet';
 /**
  * Get network configuration by ID.
- * Returns a frozen copy — callers cannot mutate SDK-internal state.
+ * Returns a frozen copy, so callers cannot mutate SDK-internal state.
  */
 function getNetworkConfig(networkId = DEFAULT_NETWORK_ID) {
     if (!Object.prototype.hasOwnProperty.call(_NETWORKS, networkId)) {
@@ -1137,7 +1073,7 @@ function getNetworkConfig(networkId = DEFAULT_NETWORK_ID) {
 }
 /**
  * Get all available networks.
- * Returns frozen copies — callers cannot mutate SDK-internal state.
+ * Returns frozen copies, so callers cannot mutate SDK-internal state.
  */
 function getAllNetworks() {
     return Object.values(_NETWORKS).map(n => Object.freeze({ ...n }));
@@ -1161,6 +1097,14 @@ function validateNetworkInfo(raw) {
         return null;
     if (typeof raw.rpcUrl !== 'string' || (!raw.rpcUrl && raw.id !== 'custom'))
         return null;
+    if (raw.rpcUrl) {
+        const isHttps = raw.rpcUrl.startsWith('https://');
+        const isLocal = raw.rpcUrl.startsWith('http://localhost') || raw.rpcUrl.startsWith('http://127.0.0.1');
+        const isTestnet = raw.isTestnet === true;
+        // Reject plain-http RPC URLs from untrusted sources unless testnet-flagged or local
+        if (!isHttps && !isLocal && !isTestnet)
+            return null;
+    }
     if (typeof raw.supportsPrivacy !== 'boolean')
         return null;
     return Object.freeze({
@@ -1176,12 +1120,9 @@ function validateNetworkInfo(raw) {
     });
 }
 
-/**
- * SDK Configuration
- */
 /**
  * Default balance structure.
- * Accepts a numeric total or undefined — never pass a Balance object here.
+ * Accepts a numeric total or undefined. Never pass a Balance object here.
  */
 function createDefaultBalance(total = 0) {
     const safeTotal = typeof total === 'number' && Number.isFinite(total) && total >= 0 ? total : 0;
@@ -1200,7 +1141,7 @@ function validateBalance(raw) {
     if (raw === null || raw === undefined)
         return null;
     // If it's already a Balance-shaped object, extract numeric fields
-    // Use Number() not parseFloat() — parseFloat('10abc') silently returns 10
+    // Use Number() not parseFloat(): parseFloat('10abc') silently returns 10
     const pub = typeof raw === 'object' ? Number(raw.public ?? raw.total ?? 0) : Number(raw);
     const priv = typeof raw === 'object' ? Number(raw.private ?? 0) : 0;
     if (!Number.isFinite(pub) || pub < 0)
@@ -1214,34 +1155,165 @@ function validateBalance(raw) {
         currency: 'OCT'
     };
 }
-/**
- * SDK Configuration constants
- */
 const SDK_CONFIG = {
-    version: '2.7.0',
+    version: '2.8.0',
     defaultNetworkId: DEFAULT_NETWORK_ID,
     communicationTimeout: 30000, // 30 seconds
     retryAttempts: 3,
     retryDelay: 1000, // 1 second
 };
-/**
- * Get default network configuration
- */
 function getDefaultNetwork() {
     return getNetworkConfig(SDK_CONFIG.defaultNetworkId);
 }
 
+/** Scope names the 0xio wallet enforces. Any other name is dropped at connect. */
+const WALLET_PERMISSIONS = [
+    'accounts',
+    'public_transactions',
+    'contract_calls',
+    'contract_views',
+    'private_balance_read',
+    'private_proofs',
+    'private_transfers',
+    'private_claims',
+];
+/** Older SDK permission names and the wallet scope each one means. */
+const LEGACY_PERMISSION_MAP = {
+    read_address: 'accounts',
+    read_balance: 'accounts',
+    read_public_key: 'accounts',
+    send_transactions: 'public_transactions',
+    sign_messages: 'public_transactions',
+    contract_calls: 'contract_calls',
+    view_private_balance: 'private_balance_read',
+    view_encrypted_balance: 'private_balance_read',
+    stealth_scan: 'private_balance_read',
+    decrypt_balance: 'private_balance_read',
+    encrypt_balance: 'private_proofs',
+    private_transfers: 'private_transfers',
+    stealth_claim: 'private_claims',
+};
+/** Translate any mix of old and new names into the wallet's scope names, without duplicates. */
+function toWalletPermissions(perms) {
+    const out = [];
+    for (const p of perms ?? []) {
+        const canonical = WALLET_PERMISSIONS.includes(p)
+            ? p
+            : LEGACY_PERMISSION_MAP[p];
+        if (canonical && !out.includes(canonical))
+            out.push(canonical);
+    }
+    return out;
+}
 /**
- * 0xio Wallet SDK - Main Wallet Class
- * Primary interface for DApp developers to interact with 0xio Wallet
+ * The granted wallet scopes plus every requested old name they satisfy, so a dapp that checks
+ * for the name it asked for (for example 'read_balance') keeps seeing it.
  */
+function withLegacyAliases(granted, requested) {
+    const set = new Set(granted ?? []);
+    for (const p of requested ?? []) {
+        const canonical = LEGACY_PERMISSION_MAP[p];
+        if (canonical && set.has(canonical))
+            set.add(p);
+    }
+    return [...set];
+}
+
+/**
+ * 0xio Signed Message standard (v1).
+ *
+ * `wallet.signMessage(message)` never signs the raw message. The wallet frames it first so a signed
+ * "message" can never collide with a transaction pre-image (a transaction is canonical JSON that
+ * begins with '{'). The framing is:
+ *
+ *     "Octra Signed Message:\n" + utf8ByteLength(message) + "\n" + message
+ *
+ * signed as an Ed25519 detached signature over the UTF-8 bytes of that string. The leading 'O'
+ * guarantees the signed bytes never begin with '{', so a personal-message signature can never be a
+ * valid transaction. Any verifier MUST reconstruct the same bytes: use `getSignedMessageBytes()`
+ * with any Ed25519 library, or `verifyMessage()` for a batteries-included check.
+ */
+/** Fixed prefix tag for the 0xio Signed Message scheme. */
+const SIGNED_MESSAGE_PREFIX = 'Octra Signed Message:';
+/** Scheme version, bumped if the framing ever changes so verifiers can detect it. */
+const SIGNED_MESSAGE_VERSION = 1;
+/** UTF-8 byte length of a string (JS `.length` counts UTF-16 units, not bytes). */
+function utf8ByteLength(s) {
+    return new TextEncoder().encode(s).length;
+}
+function base64ToBytes(b64) {
+    // atob is available in browsers and Node 16+; utils.deriveOctraAddress uses the same path.
+    const bin = atob(b64);
+    const out = new Uint8Array(bin.length);
+    for (let i = 0; i < bin.length; i++)
+        out[i] = bin.charCodeAt(i);
+    return out;
+}
+/**
+ * The exact bytes that `wallet.signMessage(message)` produces a signature over. Verify a 0xio
+ * message signature by checking an Ed25519 signature against these bytes with the signer's public
+ * key. Zero-dependency - bring your own Ed25519 verifier, or use `verifyMessage`.
+ */
+function getSignedMessageBytes(message) {
+    if (typeof message !== 'string') {
+        throw new TypeError('message must be a string');
+    }
+    const framed = `${SIGNED_MESSAGE_PREFIX}\n${utf8ByteLength(message)}\n${message}`;
+    return new TextEncoder().encode(framed);
+}
+/**
+ * Reconstruct the auth message that `wallet.signAuthMessage(service, nonce)` signs. A relying
+ * service verifies an auth signature with `verifyMessage(buildAuthMessage(service, nonce, origin),
+ * signature, publicKey)`, where `origin` is the caller's page origin.
+ */
+function buildAuthMessage(service, nonce, origin) {
+    return `0xio auth\nService: ${service}\nNonce: ${nonce}\nOrigin: ${origin}`;
+}
+/**
+ * Verify a 0xio message signature produced by `wallet.signMessage`.
+ *
+ * @param message   The original message passed to `wallet.signMessage`.
+ * @param signature Base64 Ed25519 signature returned by `wallet.signMessage`.
+ * @param publicKey Base64 Ed25519 public key of the signer (from `wallet.getPublicKey()`).
+ * @returns         Whether the signature is valid for this message and key.
+ *
+ * Uses the Web Crypto Ed25519 primitive (Node 18+, Chrome 137+, Safari 17+, Firefox 129+). In an
+ * environment without it, verify `getSignedMessageBytes(message)` with your own Ed25519 library.
+ */
+async function verifyMessage(message, signature, publicKey) {
+    if (typeof crypto === 'undefined' || !crypto.subtle) {
+        throw new Error('Web Crypto API unavailable; verify getSignedMessageBytes(message) with your own Ed25519 library');
+    }
+    let sigBytes;
+    let pubBytes;
+    try {
+        sigBytes = base64ToBytes(signature);
+        pubBytes = base64ToBytes(publicKey);
+    }
+    catch {
+        return false;
+    }
+    try {
+        const data = new Uint8Array(getSignedMessageBytes(message));
+        const key = await crypto.subtle.importKey('raw', pubBytes, { name: 'Ed25519' }, false, [
+            'verify',
+        ]);
+        return await crypto.subtle.verify({ name: 'Ed25519' }, key, sigBytes, data);
+    }
+    catch {
+        // importKey/verify can throw (rather than return false) on malformed input or an environment
+        // that recognizes Ed25519 only partially; treat any such failure as "not verified".
+        return false;
+    }
+}
+
 class ZeroXIOWallet extends EventEmitter {
     constructor(config) {
         super(config.debug);
         this.connectionInfo = { isConnected: false };
         this.isInitialized = false;
         this._initPromise = null;
-        // session version — stale write detection
+        // session version, for stale write detection
         this._sessionVersion = 0;
         this.config = {
             ...config,
@@ -1250,42 +1322,31 @@ class ZeroXIOWallet extends EventEmitter {
             debug: config.debug || false
         };
         this.logger = createLogger('ZeroXIOWallet', this.config.debug || false);
-        this.communicator = new ExtensionCommunicator(this.config.debug, [], this.config.adapter);
+        this.communicator = new ExtensionCommunicator(this.config.debug, this.config.trustedParentOrigins ?? [], this.config.adapter);
         this.logger.log('Wallet instance created with config:', this.config);
     }
-    // ===================
-    // INITIALIZATION
-    // ===================
-    /**
-     * Initialize the SDK
-     * Must be called before using any other methods
-     */
     async initialize() {
         if (this.isInitialized) {
             return true;
         }
-        // single-flight init
         if (this._initPromise) {
             return this._initPromise;
         }
         this._initPromise = (async () => {
             try {
-                // Initialize extension communication
                 const communicationReady = await this.communicator.initialize();
                 if (!communicationReady) {
                     throw new ZeroXIOWalletError(ErrorCode.EXTENSION_NOT_FOUND, 'Failed to establish communication with 0xio Wallet extension');
                 }
-                // Register this DApp with the extension
                 await this.communicator.sendRequest('register_dapp', {
                     appName: this.config.appName,
                     appDescription: this.config.appDescription,
                     appVersion: this.config.appVersion,
                     appUrl: typeof window !== 'undefined' ? window.location.origin : undefined,
                     appIcon: this.config.appIcon,
-                    requiredPermissions: this.config.requiredPermissions,
+                    requiredPermissions: toWalletPermissions(this.config.requiredPermissions),
                     networkId: this.config.networkId
                 });
-                // Setup event forwarding from extension
                 this.setupExtensionEventListeners();
                 this.isInitialized = true;
                 this.logger.log('SDK initialized successfully');
@@ -1304,37 +1365,29 @@ class ZeroXIOWallet extends EventEmitter {
         })();
         return this._initPromise;
     }
-    /**
-     * Check if SDK is initialized
-     */
     isReady() {
         return this.isInitialized && this.communicator.isExtensionAvailable();
     }
-    // ===================
-    // CONNECTION MANAGEMENT
-    // ===================
-    /**
-     * Connect to wallet
-     */
     async connect(options = {}) {
         this.ensureInitialized();
         try {
             this.logger.log('Attempting to connect with options:', options);
-            // filter to declared perms only
+            // filter to declared perms only: accept both RFC 'permissions' and legacy 'requestPermissions'
             const declaredPermissions = this.config.requiredPermissions || [];
-            const requestPermissions = options.requestPermissions
-                ? options.requestPermissions.filter(p => declaredPermissions.includes(p))
+            const requestedPerms = options.permissions ?? options.requestPermissions;
+            const requestedPermissions = requestedPerms
+                ? requestedPerms.filter(p => declaredPermissions.includes(p))
                 : declaredPermissions;
             const result = await this.communicator.sendRequest('connect', {
-                requestPermissions,
+                permissions: toWalletPermissions(requestedPermissions),
                 networkId: options.networkId || this.config.networkId
             });
-            // verify pubkey→addr binding
+            // verify the public key to address binding
             if (result.publicKey && result.address) {
                 try {
                     const derived = await deriveOctraAddress(result.publicKey);
                     if (derived !== result.address) {
-                        throw new ZeroXIOWalletError(ErrorCode.UNKNOWN_ERROR, 'Address-key binding verification failed — the reported public key does not derive to the reported address');
+                        throw new ZeroXIOWalletError(ErrorCode.UNKNOWN_ERROR, 'Address-key binding verification failed: the reported public key does not derive to the reported address');
                     }
                 }
                 catch (e) {
@@ -1343,11 +1396,16 @@ class ZeroXIOWallet extends EventEmitter {
                     this.logger.warn('Address derivation check skipped (crypto unavailable):', e);
                 }
             }
-            // Use networkInfo from extension response — validate before caching
+            // Use networkInfo from the extension response, validated before caching.
             const networkInfo = validateNetworkInfo(result.networkInfo)
-                ?? getNetworkConfig(result.networkId || this.config.networkId);
-            const permissions = result.permissions || [];
-            // Update connection info — including permissions
+                ?? (result.networkId ? getNetworkConfig(result.networkId) : null);
+            if (!networkInfo) {
+                throw new ZeroXIOWalletError(ErrorCode.NETWORK_ERROR, 'Wallet did not return valid network metadata.');
+            }
+            // The wallet answers with its own scope names; the names the dapp asked for are kept as
+            // aliases so existing permission checks keep working.
+            const permissions = withLegacyAliases(result.permissions, requestedPermissions);
+            // Update connection info, including permissions
             this.connectionInfo = {
                 isConnected: true,
                 address: result.address,
@@ -1421,12 +1479,12 @@ class ZeroXIOWallet extends EventEmitter {
             if (this._sessionVersion !== sv)
                 return { ...this.connectionInfo };
             if (result.isConnected && result.address) {
-                // verify pubkey→addr binding
+                // verify the public key to address binding
                 if (result.publicKey) {
                     try {
                         const derived = await deriveOctraAddress(result.publicKey);
                         if (derived !== result.address) {
-                            this.logger.warn('Address-key binding mismatch on session restore — ignoring stale session');
+                            this.logger.warn('Address-key binding mismatch on session restore, ignoring stale session');
                             this.connectionInfo = { isConnected: false };
                             return { ...this.connectionInfo };
                         }
@@ -1438,9 +1496,13 @@ class ZeroXIOWallet extends EventEmitter {
                 // validate untrusted balance/networkInfo before caching
                 const balanceInfo = validateBalance(result.balance) ?? createDefaultBalance();
                 const networkInfo = validateNetworkInfo(result.networkInfo)
-                    ?? getNetworkConfig(result.networkId || this.config.networkId);
+                    ?? (result.networkId ? getNetworkConfig(result.networkId) : null);
+                if (!networkInfo) {
+                    this.logger.warn('getConnectionStatus: wallet returned no network metadata, returning cached state');
+                    return this.connectionInfo;
+                }
                 const wasConnected = this.connectionInfo.isConnected;
-                const permissions = result.permissions || [];
+                const permissions = withLegacyAliases(result.permissions, this.config.requiredPermissions);
                 // preserve existing connectedAt
                 const connectedAt = this.connectionInfo.connectedAt || result.connectedAt || Date.now();
                 this.connectionInfo = {
@@ -1453,7 +1515,7 @@ class ZeroXIOWallet extends EventEmitter {
                     permissions
                 };
                 this.logger.log('Discovered existing connection:', { address: result.address, network: networkInfo.id });
-                // only emit on disconnected→connected transition
+                // only emit on the disconnected to connected transition
                 if (!wasConnected) {
                     const connectEvent = {
                         address: result.address,
@@ -1478,8 +1540,8 @@ class ZeroXIOWallet extends EventEmitter {
         }
     }
     /**
-     * Switch the extension's active network (e.g. 'mainnet' → 'devnet').
-     * Works silently — no popup, no user confirmation needed.
+     * Switch the extension's active network (e.g. 'mainnet' to 'devnet').
+     * Works silently: no popup, no user confirmation needed.
      * The extension broadcasts 'networkChanged' event to all connected dApps.
      */
     async switchNetwork(networkId) {
@@ -1511,18 +1573,25 @@ class ZeroXIOWallet extends EventEmitter {
     getNetworkId() {
         return this.connectionInfo.networkInfo?.id || null;
     }
-    // ===================
-    // WALLET INFORMATION
-    // ===================
-    /**
-     * Get current wallet address
-     */
     getAddress() {
         return this.connectionInfo.address || null;
     }
     /**
-     * Get current balance
+     * The connected account's Ed25519 public key (base64). Served from the session when the
+     * wallet reported it at connect, otherwise asked from the wallet.
      */
+    async getPublicKey() {
+        this.ensureConnected();
+        if (this.connectionInfo.publicKey)
+            return this.connectionInfo.publicKey;
+        const result = await this.communicator.sendRequest('getPublicKey');
+        const publicKey = result?.publicKey;
+        if (typeof publicKey !== 'string' || !publicKey) {
+            throw new ZeroXIOWalletError(ErrorCode.UNKNOWN_ERROR, 'Wallet did not return a public key');
+        }
+        this.connectionInfo.publicKey = publicKey;
+        return publicKey;
+    }
     async getBalance(forceRefresh = false) {
         this.ensureConnected();
         try {
@@ -1547,7 +1616,6 @@ class ZeroXIOWallet extends EventEmitter {
             // skip if session changed mid-flight
             if (this._sessionVersion !== sv)
                 return result;
-            // Update cached balance
             if (this.connectionInfo.balance) {
                 const previousBalance = this.connectionInfo.balance;
                 this.connectionInfo.balance = result;
@@ -1574,15 +1642,11 @@ class ZeroXIOWallet extends EventEmitter {
             throw new ZeroXIOWalletError(ErrorCode.NETWORK_ERROR, 'Failed to get balance', error);
         }
     }
-    /**
-     * Get network information
-     */
     async getNetworkInfo() {
         this.ensureInitialized();
         try {
             const sv = this._sessionVersion;
             const result = await this.communicator.sendRequest('get_network_info');
-            // validate network info before caching
             const networkInfo = validateNetworkInfo(result);
             if (!networkInfo) {
                 throw new ZeroXIOWalletError(ErrorCode.NETWORK_ERROR, 'Extension returned invalid network info');
@@ -1590,11 +1654,9 @@ class ZeroXIOWallet extends EventEmitter {
             // skip if session changed mid-flight
             if (this._sessionVersion !== sv)
                 return networkInfo;
-            // Update cached network info
             if (this.connectionInfo.networkInfo) {
                 const previousNetwork = this.connectionInfo.networkInfo;
                 this.connectionInfo.networkInfo = networkInfo;
-                // Emit network changed event if different
                 if (previousNetwork.id !== networkInfo.id) {
                     const networkChangedEvent = {
                         previousNetwork,
@@ -1614,32 +1676,22 @@ class ZeroXIOWallet extends EventEmitter {
             throw new ZeroXIOWalletError(ErrorCode.NETWORK_ERROR, 'Failed to get network info', error);
         }
     }
-    // ===================
-    // TRANSACTIONS
-    // ===================
-    /**
-     * Send transaction
-     */
     async sendTransaction(txData) {
         this.ensureConnected();
-        // validate inputs
         if (!isValidAddress(txData.to)) {
             throw new ZeroXIOWalletError(ErrorCode.INVALID_ADDRESS, 'Invalid recipient address');
         }
-        if (!isValidAmount(txData.amount)) {
-            throw new ZeroXIOWalletError(ErrorCode.TRANSACTION_FAILED, 'Invalid transaction amount');
-        }
-        // bound memo
+        const amount = this.resolveRawAmount(txData.amount, txData.amountOct, 'Transaction amount');
         if (txData.message && txData.message.length > 1000) {
             throw new ZeroXIOWalletError(ErrorCode.TRANSACTION_FAILED, 'Transaction message too long (max 1,000 characters)');
         }
         try {
             // log non-sensitive only
             this.logger.log('Sending transaction:', { to: txData.to });
-            const result = await this.communicator.sendRequest('send_transaction', txData);
+            const result = await this.communicator.sendRequest('send_transaction', { ...txData, amount });
             this.logger.log('Transaction result:', result);
-            // Refresh balance after successful transaction
-            if (result.success) {
+            // Refresh balance after successful transaction (accept RFC 'accepted' or legacy 'success')
+            if (result.accepted ?? result.success) {
                 setTimeout(() => {
                     this.getBalance(true).catch(error => {
                         this.logger.warn('Failed to refresh balance after transaction:', error);
@@ -1656,23 +1708,74 @@ class ZeroXIOWallet extends EventEmitter {
             throw new ZeroXIOWalletError(ErrorCode.TRANSACTION_FAILED, 'Failed to send transaction', error);
         }
     }
+    /**
+     * Sign a transaction without broadcasting it (RFC-O-1 octra_signTransaction).
+     * Returns the signed transaction object for manual submission via submitTransaction().
+     */
+    async signTransaction(txData) {
+        this.ensureConnected();
+        if (!isValidAddress(txData.to)) {
+            throw new ZeroXIOWalletError(ErrorCode.INVALID_ADDRESS, 'Invalid recipient address');
+        }
+        const amount = this.resolveRawAmount(txData.amount, txData.amountOct, 'Transaction amount');
+        if (txData.message && txData.message.length > 1000) {
+            throw new ZeroXIOWalletError(ErrorCode.TRANSACTION_FAILED, 'Transaction message too long (max 1,000 characters)');
+        }
+        try {
+            this.logger.log('Requesting transaction signature:', { to: txData.to });
+            const result = await this.communicator.sendRequest('sign_transaction', { ...txData, amount });
+            return result;
+        }
+        catch (error) {
+            if (error instanceof ZeroXIOWalletError)
+                throw error;
+            throw new ZeroXIOWalletError(ErrorCode.SIGNATURE_FAILED, 'Failed to sign transaction', error);
+        }
+    }
+    /**
+     * Broadcast a pre-signed transaction (RFC-O-1 octra_submitTransaction).
+     * Use after signTransaction() to submit the signed tx to the network.
+     */
+    async submitTransaction(signedTx) {
+        this.ensureConnected();
+        if (!signedTx || typeof signedTx !== 'object') {
+            throw new ZeroXIOWalletError(ErrorCode.TRANSACTION_FAILED, 'signedTx must be an object');
+        }
+        try {
+            this.logger.log('Submitting pre-signed transaction');
+            const result = await this.communicator.sendRequest('broadcast_only', { signedTx });
+            return result;
+        }
+        catch (error) {
+            if (error instanceof ZeroXIOWalletError)
+                throw error;
+            throw new ZeroXIOWalletError(ErrorCode.TRANSACTION_FAILED, 'Failed to submit transaction', error);
+        }
+    }
     /**
      * Call a smart contract method (state-changing).
      * The extension builds, signs, and submits the transaction via octra_submit.
      */
     async callContract(callData) {
         this.ensureConnected();
-        // validate inputs
         if (!isValidAddress(callData.contract)) {
             throw new ZeroXIOWalletError(ErrorCode.INVALID_ADDRESS, 'Invalid contract address');
         }
         if (!callData.method || typeof callData.method !== 'string') {
             throw new ZeroXIOWalletError(ErrorCode.TRANSACTION_FAILED, 'Contract method is required');
         }
-        // bound method + params size
         if (callData.method.length > 200) {
             throw new ZeroXIOWalletError(ErrorCode.TRANSACTION_FAILED, 'Contract method name too long (max 200 characters)');
         }
+        if (callData.amount != null && callData.amountOct != null) {
+            throw new ZeroXIOWalletError(ErrorCode.INVALID_AMOUNT, 'Contract call amount: pass amount or amountOct, not both');
+        }
+        if (callData.amount != null) {
+            this.assertExactOCTAmount(callData.amount, 'Contract call amount');
+        }
+        if (callData.amountOct != null) {
+            this.assertExactOCTAmount(callData.amountOct, 'Contract call amount');
+        }
         try {
             if (JSON.stringify(callData.params).length > 65536) {
                 throw new ZeroXIOWalletError(ErrorCode.TRANSACTION_FAILED, 'Contract params too large (max 64 KB)');
@@ -1690,7 +1793,11 @@ class ZeroXIOWallet extends EventEmitter {
                 contract: callData.contract,
                 method: callData.method,
                 params: callData.params,
-                amount: callData.amount != null ? String(callData.amount) : '0',
+                amount: callData.amountOct != null
+                    ? octToMicro(callData.amountOct)
+                    : callData.amount != null
+                        ? String(callData.amount)
+                        : '0',
                 ou: callData.ou != null ? String(callData.ou) : '10000',
             });
             this.logger.log('Contract call result:', result);
@@ -1710,14 +1817,12 @@ class ZeroXIOWallet extends EventEmitter {
      */
     async contractCallView(viewData) {
         this.ensureInitialized();
-        // validate inputs
         if (!isValidAddress(viewData.contract)) {
             throw new ZeroXIOWalletError(ErrorCode.INVALID_ADDRESS, 'Invalid contract address');
         }
         if (!viewData.method || typeof viewData.method !== 'string') {
             throw new ZeroXIOWalletError(ErrorCode.NETWORK_ERROR, 'Contract method is required');
         }
-        // bound method + params size
         if (viewData.method.length > 200) {
             throw new ZeroXIOWalletError(ErrorCode.NETWORK_ERROR, 'Contract method name too long (max 200 characters)');
         }
@@ -1757,7 +1862,6 @@ class ZeroXIOWallet extends EventEmitter {
      */
     async getContractStorage(contract, key) {
         this.ensureInitialized();
-        // validate inputs
         if (!isValidAddress(contract)) {
             throw new ZeroXIOWalletError(ErrorCode.INVALID_ADDRESS, 'Invalid contract address');
         }
@@ -1799,12 +1903,6 @@ class ZeroXIOWallet extends EventEmitter {
             throw new ZeroXIOWalletError(ErrorCode.NETWORK_ERROR, 'Failed to get transaction history', error);
         }
     }
-    // ===================
-    // PRIVATE FEATURES
-    // ===================
-    /**
-     * Get private balance information
-     */
     async getPrivateBalanceInfo() {
         this.ensureConnected();
         try {
@@ -1816,11 +1914,13 @@ class ZeroXIOWallet extends EventEmitter {
         }
     }
     /**
-     * Encrypt public balance to private
+     * Encrypt public balance to private.
+     * @deprecated The 0xio extension does not serve this through the bridge (it answers
+     * NOT_AVAILABLE); users encrypt from the extension's Privacy screen.
      */
     async encryptBalance(amount) {
         this.ensureConnected();
-        // validate amount
+        this.assertExactOCTAmount(amount, 'Encrypt amount');
         if (!isValidAmount(amount)) {
             throw new ZeroXIOWalletError(ErrorCode.TRANSACTION_FAILED, 'Invalid amount');
         }
@@ -1837,11 +1937,13 @@ class ZeroXIOWallet extends EventEmitter {
         }
     }
     /**
-     * Decrypt private balance to public
+     * Decrypt private balance to public.
+     * @deprecated The 0xio extension does not serve this through the bridge (it answers
+     * NOT_AVAILABLE); users decrypt from the extension's Privacy screen.
      */
     async decryptBalance(amount) {
         this.ensureConnected();
-        // validate amount
+        this.assertExactOCTAmount(amount, 'Decrypt amount');
         if (!isValidAmount(amount)) {
             throw new ZeroXIOWalletError(ErrorCode.TRANSACTION_FAILED, 'Invalid amount');
         }
@@ -1867,21 +1969,24 @@ class ZeroXIOWallet extends EventEmitter {
      */
     async sendPrivateTransfer(transferData) {
         this.ensureConnected();
-        // validate inputs
         if (!isValidAddress(transferData.to)) {
             throw new ZeroXIOWalletError(ErrorCode.INVALID_ADDRESS, 'Invalid recipient address');
         }
         if (!isValidAmount(transferData.amount)) {
             throw new ZeroXIOWalletError(ErrorCode.TRANSACTION_FAILED, 'Invalid transfer amount');
         }
+        this.assertExactOCTAmount(transferData.amount, 'Transfer amount');
         // bound msg size
         if (transferData.message && transferData.message.length > 1000) {
             throw new ZeroXIOWalletError(ErrorCode.TRANSACTION_FAILED, 'Transfer message too long (max 1,000 characters)');
         }
         try {
-            const result = await this.communicator.sendRequest('send_private_transfer', transferData);
-            // Refresh balance after transfer
-            if (result.success) {
+            const result = await this.communicator.sendRequest('send_private_transfer', {
+                ...transferData,
+                ...(transferData.amountRaw ? { amount_raw: transferData.amountRaw } : {}),
+            });
+            // Refresh balance after transfer (accept RFC 'accepted' or legacy 'success')
+            if (result.accepted ?? result.success) {
                 setTimeout(() => {
                     this.getBalance(true).catch(() => { });
                 }, 1000);
@@ -1921,8 +2026,8 @@ class ZeroXIOWallet extends EventEmitter {
             const result = await this.communicator.sendRequest('claim_private_transfer', {
                 transferId
             });
-            // Refresh balance after claiming
-            if (result.success) {
+            // Refresh balance after claiming (accept RFC 'accepted' or legacy 'success')
+            if (result.accepted ?? result.success) {
                 setTimeout(() => {
                     this.getBalance(true).catch(() => { });
                 }, 1000);
@@ -1933,19 +2038,89 @@ class ZeroXIOWallet extends EventEmitter {
             throw new ZeroXIOWalletError(ErrorCode.TRANSACTION_FAILED, 'Failed to claim private transfer', error);
         }
     }
-    // ===================
-    // MESSAGE SIGNING
-    // ===================
+    // Generic provider passthrough and RFP private primitives (since 2.8.0)
+    // These route through the wallet bridge. The wallet keeps all private/FHE
+    // secret material internal and returns only ciphertexts/proofs/tx hashes.
+    /**
+     * Send any wallet method + params through the bridge. Escape hatch for
+     * primitives that don't have a typed helper yet (no SDK upgrade needed).
+     * @since 2.8.0
+     */
+    async request(method, params = {}) {
+        return this.communicator.sendRequest(method, params);
+    }
+    /**
+     * Read-only node RPC through the wallet. Only the wallet's allow-listed public methods work
+     * (octra_balance, octra_transaction, contract_call and similar); writes are refused.
+     * @since 2.8.0
+     */
+    async rpcCall(method, params = []) {
+        return this.communicator.sendRequest('rpc_call', { method, params });
+    }
     /**
-     * Sign an arbitrary message with the wallet's private key
-     * The user will be prompted to approve the signature request in the extension
+     * Feature-detect which private capabilities the connected wallet supports.
+     * Lets a dapp render the correct UI (or fail closed) before any action.
+     * @since 2.8.0
+     */
+    async getPrivateCapabilities() {
+        return this.communicator.sendRequest('get_private_capabilities');
+    }
+    /** Read-only contract view (no approval popup). @since 2.8.0 */
+    async callContractView(params) {
+        this.ensureConnected();
+        return this.communicator.sendRequest('contract_call_view', params);
+    }
+    /** Encrypt a raw integer value to a contract-ready ciphertext (keys stay in wallet). @since 2.8.0 */
+    async encryptValue(params) {
+        this.ensureConnected();
+        return this.communicator.sendRequest('encrypt_value', params);
+    }
+    /** Decrypt a ciphertext to a raw integer value. @since 2.8.0 */
+    async decryptValue(params) {
+        this.ensureConnected();
+        return this.communicator.sendRequest('decrypt_value', params);
+    }
+    /** Zero proof for a ciphertext (proves it encrypts the given value, default 0). @since 2.8.0 */
+    async makeZeroProof(params) {
+        this.ensureConnected();
+        return this.communicator.sendRequest('make_zero_proof', params);
+    }
+    /** Range proof for a ciphertext. @since 2.8.0 */
+    async makeRangeProof(params) {
+        this.ensureConnected();
+        return this.communicator.sendRequest('make_range_proof', params);
+    }
+    /** Private OCT + private token balances (decrypted inside the wallet). @since 2.8.0 */
+    async getPrivateBalance(params = {}) {
+        this.ensureConnected();
+        return this.communicator.sendRequest('get_private_balance', params);
+    }
+    /** Register a receive/view public key so an address can receive private transfers. @since 2.8.0 */
+    async registerPrivateViewKey(params) {
+        this.ensureConnected();
+        return this.communicator.sendRequest('register_private_view_key', params);
+    }
+    /** Submit an ordered multi-step public contract flow under one approval. @since 2.8.0 */
+    async sendContractTransactionSequence(params) {
+        this.ensureConnected();
+        return this.communicator.sendRequest('send_contract_transaction_sequence', params);
+    }
+    /**
+     * Sign an arbitrary message with the wallet's private key.
+     * The user will be prompted to approve the signature request in the extension.
+     *
+     * The wallet does not sign the raw message: it signs the 0xio Signed Message framing
+     * (`"Octra Signed Message:\n" + byteLength + "\n" + message`) so a signed message can never be a
+     * transaction pre-image. Verify with `verifyMessage(message, signature, publicKey)`, or check an
+     * Ed25519 signature against `getSignedMessageBytes(message)` with your own library.
+     *
      * @param message - The message to sign (non-empty string)
      * @returns Promise resolving to the base64-encoded Ed25519 signature
      * @throws ZeroXIOWalletError with code SIGNATURE_FAILED if signing fails
      * @example
      * ```typescript
      * const signature = await wallet.signMessage('Hello, 0xio!');
-     * console.log('Signature:', signature);
+     * const ok = await verifyMessage('Hello, 0xio!', signature, await wallet.getPublicKey());
      * ```
      */
     async signMessage(message) {
@@ -1973,16 +2148,13 @@ class ZeroXIOWallet extends EventEmitter {
             throw new ZeroXIOWalletError(ErrorCode.SIGNATURE_FAILED, 'Failed to sign message', error);
         }
     }
-    // ===================
-    // AUTHENTICATION HELPERS
-    // ===================
     /**
      * Sign a domain-separated authentication message.
      * Unlike `signMessage()`, this prepends a standard header that binds the signature
      * to the calling service and a one-time nonce, preventing cross-service replay attacks.
      *
      * @param service - Identifies the relying service (e.g. 'MyDApp' or 'api.mydapp.com')
-     * @param nonce   - Unique one-time value — use a server-generated UUID or challenge
+     * @param nonce   - Unique one-time value. Use a server-generated UUID or challenge
      * @returns Promise resolving to the base64-encoded Ed25519 signature
      */
     async signAuthMessage(service, nonce) {
@@ -1994,12 +2166,8 @@ class ZeroXIOWallet extends EventEmitter {
             throw new ZeroXIOWalletError(ErrorCode.SIGNATURE_FAILED, 'Nonce is required');
         }
         const origin = typeof window !== 'undefined' ? window.location.origin : 'unknown';
-        const domainSeparated = `0xio auth\nService: ${service}\nNonce: ${nonce}\nOrigin: ${origin}`;
-        return this.signMessage(domainSeparated);
+        return this.signMessage(buildAuthMessage(service, nonce, origin));
     }
-    // ===================
-    // PRIVATE METHODS
-    // ===================
     ensureInitialized() {
         if (!this.isInitialized) {
             throw new ZeroXIOWalletError(ErrorCode.UNKNOWN_ERROR, 'SDK not initialized. Call initialize() first.');
@@ -2012,7 +2180,6 @@ class ZeroXIOWallet extends EventEmitter {
         }
     }
     setupExtensionEventListeners() {
-        // Listen for extension events through the communicator
         this.communicator.on('accountChanged', (event) => {
             this.handleAccountChanged(event.data);
         });
@@ -2031,11 +2198,21 @@ class ZeroXIOWallet extends EventEmitter {
         this.communicator.on('transactionConfirmed', (event) => {
             this.handleTransactionConfirmed(event.data);
         });
+        this.communicator.on('transactionFailed', (event) => {
+            this.emit('transactionFailed', event.data ?? event);
+        });
+        this.communicator.on('permissionsChanged', (event) => {
+            const permissions = event.data ?? event;
+            if (this.connectionInfo.isConnected) {
+                this.connectionInfo.permissions = Array.isArray(permissions) ? permissions : [];
+            }
+            this.emit('permissionsChanged', permissions);
+        });
+        this.communicator.on('message', (event) => {
+            this.emit('message', event.data ?? event);
+        });
         this.logger.log('Extension event listeners setup complete');
     }
-    /**
-     * Handle account changed event from extension
-     */
     handleAccountChanged(data) {
         ++this._sessionVersion;
         const previousAddress = this.connectionInfo.address;
@@ -2043,7 +2220,6 @@ class ZeroXIOWallet extends EventEmitter {
         // clear stale pubkey on acct change
         this.connectionInfo.publicKey = data.publicKey;
         if (data.balance) {
-            // validate balance before caching
             const validated = validateBalance(data.balance);
             if (validated) {
                 this.connectionInfo.balance = validated;
@@ -2061,12 +2237,9 @@ class ZeroXIOWallet extends EventEmitter {
         this.emit('accountChanged', accountChangedEvent);
         this.logger.log('Account changed:', { newAddress: accountChangedEvent.newAddress });
     }
-    /**
-     * Handle network changed event from extension
-     */
     handleNetworkChanged(data) {
         const previousNetwork = this.connectionInfo.networkInfo;
-        // validate networkInfo — drop invalid
+        // validate networkInfo, drop invalid
         const networkInfo = validateNetworkInfo(data.networkInfo);
         if (!networkInfo) {
             this.logger.warn('Received invalid networkInfo in networkChanged event, ignoring');
@@ -2082,11 +2255,7 @@ class ZeroXIOWallet extends EventEmitter {
         this.emit('networkChanged', networkChangedEvent);
         this.logger.log('Network changed:', networkChangedEvent);
     }
-    /**
-     * Handle balance changed event from extension
-     */
     handleBalanceChanged(data) {
-        // validate balance before caching
         const balance = validateBalance(data.balance);
         if (!balance) {
             this.logger.warn('Received invalid balance in balanceChanged event, ignoring');
@@ -2102,13 +2271,9 @@ class ZeroXIOWallet extends EventEmitter {
         this.emit('balanceChanged', balanceChangedEvent);
         this.logger.log('Balance changed:', { public: balance.public });
     }
-    /**
-     * Handle extension locked event
-     */
     handleExtensionLocked() {
         ++this._sessionVersion;
         this.connectionInfo = { isConnected: false };
-        // emit extensionLocked then disconnect
         this.emit('extensionLocked', {});
         const disconnectEvent = {
             reason: 'extension_locked'
@@ -2116,21 +2281,13 @@ class ZeroXIOWallet extends EventEmitter {
         this.emit('disconnect', disconnectEvent);
         this.logger.log('Extension locked - disconnected');
     }
-    /**
-     * Handle extension unlocked event
-     */
     handleExtensionUnlocked() {
-        // emit extensionUnlocked
         this.emit('extensionUnlocked', {});
-        // Attempt to restore connection
         this.getConnectionStatus().catch(() => {
             this.logger.warn('Could not restore connection after unlock');
         });
         this.logger.log('Extension unlocked');
     }
-    /**
-     * Handle transaction confirmed event
-     */
     handleTransactionConfirmed(data) {
         this.emit('transactionConfirmed', {
             txHash: data.txHash,
@@ -2143,12 +2300,38 @@ class ZeroXIOWallet extends EventEmitter {
         }, 2000);
         this.logger.log('Transaction confirmed:', data.txHash);
     }
-    // ===================
-    // CLEANUP
-    // ===================
     /**
-     * Clean up SDK resources
+     * The wallet takes raw micro-OCT. `amount` passes through unchanged (what every existing
+     * dapp sends today); `amountOct` is converted exactly. Never both.
+     */
+    resolveRawAmount(amount, amountOct, label) {
+        if (amount != null && amountOct != null) {
+            throw new ZeroXIOWalletError(ErrorCode.INVALID_AMOUNT, `${label}: pass amount or amountOct, not both`);
+        }
+        if (amountOct != null) {
+            this.assertExactOCTAmount(amountOct, label);
+            return octToMicro(amountOct);
+        }
+        if (amount == null || !isValidAmount(amount)) {
+            throw new ZeroXIOWalletError(ErrorCode.TRANSACTION_FAILED, `Invalid ${label.toLowerCase()}`);
+        }
+        return amount;
+    }
+    /**
+     * Reject numeric amounts that cannot be represented exactly in micro-OCT.
+     * e.g. 0.1 + 0.2 = 0.30000000000000004: the extension would sign the wrong value.
+     * String amounts bypass this check (caller is responsible for correctness).
      */
+    assertExactOCTAmount(amount, label) {
+        if (typeof amount === 'number') {
+            const micro = Math.round(amount * 1000000);
+            if (Math.abs(amount - micro / 1000000) > 1e-10) {
+                const suggested = (micro / 1000000).toFixed(6);
+                throw new ZeroXIOWalletError(ErrorCode.INVALID_AMOUNT, `${label} cannot be represented exactly in micro-OCT. ` +
+                    `Pass a string instead (e.g. "${suggested}").`);
+            }
+        }
+    }
     cleanup() {
         this.communicator.cleanup();
         this.removeAllListeners();
@@ -2170,7 +2353,7 @@ var wallet = /*#__PURE__*/Object.freeze({
  *
  * Targets any wallet that exposes `window.octra` per the RFC-O-1 specification:
  *   window.octra.isOctra === true
- *   window.octra.request({ method, params }) → Promise<unknown>
+ *   window.octra.request({ method, params }) returns Promise<unknown>
  *   window.octra.on(event, listener) / removeListener(event, listener)
  *
  * This adapter translates the SDK's internal method names into RFC-O-1 method
@@ -2179,25 +2362,35 @@ var wallet = /*#__PURE__*/Object.freeze({
  * Non-standard SDK methods (ping, register_dapp, getTransactionHistory, etc.)
  * are passed through as-is; the wallet's request() handles or rejects them.
  */
-/** SDK method → RFC-O-1 method name */
+/** SDK method to RFC-O-1 method name */
 const SDK_TO_RFC = {
     get_network_info: 'octra_networkInfo',
     switch_network: 'octra_switchNetwork',
     signMessage: 'octra_signMessage',
     send_transaction: 'octra_sendTransaction',
-    call_contract: 'octra_callContract',
+    sign_transaction: 'octra_signTransaction',
+    broadcast_only: 'octra_submitTransaction',
+    call_contract: 'octra_sendContractTransaction',
     contract_call_view: 'octra_callContract',
     get_private_balance_info: 'octra_getEncryptedBalance',
     encrypt_balance: 'octra_encryptBalance',
     decrypt_balance: 'octra_decryptBalance',
     send_private_transfer: 'octra_sendPrivateTransfer',
     claim_private_transfer: 'octra_claimStealth',
+    get_private_capabilities: 'octra_getPrivateCapabilities',
+    encrypt_value: 'octra_encryptValue',
+    decrypt_value: 'octra_decryptValue',
+    make_zero_proof: 'octra_makeZeroProof',
+    make_range_proof: 'octra_makeRangeProof',
+    get_private_balance: 'octra_getPrivateBalance',
+    register_private_view_key: 'octra_registerPrivateViewKey',
+    send_contract_transaction_sequence: 'octra_sendContractTransactionSequence',
 };
-/** RFC-O-1 error code → SDK ErrorCode string */
+/** RFC-O-1 error code to SDK ErrorCode string */
 const RFC_TO_SDK_ERROR = {
     4001: 'USER_REJECTED',
     4100: 'PERMISSION_DENIED',
-    4200: 'NETWORK_ERROR',
+    4200: 'UNKNOWN_ERROR',
     4900: 'CONNECTION_REFUSED',
     4901: 'NETWORK_ERROR',
 };
@@ -2214,7 +2407,7 @@ function mapError(err) {
  * three RFC-O-1 calls: octra_requestAccounts, octra_networkInfo, octra_permissions.
  */
 async function rfcConnect(provider, params) {
-    const requestPerms = params?.requestPermissions ?? [];
+    const requestPerms = params?.permissions ?? params?.requestPermissions ?? [];
     const accounts = (await provider.request({
         method: 'octra_requestAccounts',
         params: [{ permissions: requestPerms }],
@@ -2295,19 +2488,21 @@ function createOctraProviderAdapter() {
             const provider = getProvider();
             if (!provider)
                 return () => { _handler = null; };
-            // RFC-O-1 event → SDK event name + data shape
+            // RFC-O-1 event to SDK event name and data shape
             const onConnect = (data) => handler({ eventType: 'connect', eventData: data });
             const onDisconnect = (data) => handler({ eventType: 'disconnect', eventData: { reason: 'network_error', ...data } });
             const onAccountsChanged = (accounts) => handler({ eventType: 'accountChanged', eventData: { address: accounts?.[0] ?? null } });
             const onNetworkChanged = (data) => handler({ eventType: 'networkChanged', eventData: { networkInfo: data } });
             const onBalanceChanged = (data) => handler({ eventType: 'balanceChanged', eventData: data });
             const onTransactionChanged = (data) => handler({ eventType: 'transactionConfirmed', eventData: data });
+            const onPermissionsChanged = (data) => handler({ eventType: 'permissionsChanged', eventData: data });
             provider.on('connect', onConnect);
             provider.on('disconnect', onDisconnect);
             provider.on('accountsChanged', onAccountsChanged);
             provider.on('networkChanged', onNetworkChanged);
             provider.on('balanceChanged', onBalanceChanged);
             provider.on('transactionChanged', onTransactionChanged);
+            provider.on('permissionsChanged', onPermissionsChanged);
             const cleanup = () => {
                 provider.removeListener('connect', onConnect);
                 provider.removeListener('disconnect', onDisconnect);
@@ -2315,6 +2510,7 @@ function createOctraProviderAdapter() {
                 provider.removeListener('networkChanged', onNetworkChanged);
                 provider.removeListener('balanceChanged', onBalanceChanged);
                 provider.removeListener('transactionChanged', onTransactionChanged);
+                provider.removeListener('permissionsChanged', onPermissionsChanged);
                 _handler = null;
             };
             return cleanup;
@@ -2322,7 +2518,11 @@ function createOctraProviderAdapter() {
         listenForReady(onReady) {
             const handler = () => onReady();
             window.addEventListener('octraWalletReady', handler);
-            return () => window.removeEventListener('octraWalletReady', handler);
+            window.addEventListener('octra#initialized', handler);
+            return () => {
+                window.removeEventListener('octraWalletReady', handler);
+                window.removeEventListener('octra#initialized', handler);
+            };
         },
     };
 }
@@ -2330,15 +2530,15 @@ function createOctraProviderAdapter() {
 const OctraProviderAdapter = createOctraProviderAdapter();
 
 /**
- * 0xio SDK — Wallet Adapter Registry
+ * 0xio SDK: Wallet Adapter Registry
  *
  * Add new wallet adapters here. Detection order determines which wallet takes
  * priority when multiple wallets are installed at the same time.
  */
 const REGISTERED_ADAPTERS = [
-    ZeroXIOAdapter, // 0xio extension (postMessage protocol) — highest priority
+    ZeroXIOAdapter, // 0xio extension (postMessage protocol), highest priority
     OctraProviderAdapter, // any RFC-O-1 compliant wallet (window.octra)
-    // Add new wallet adapters here — detection runs in order, first match wins
+    // Add new wallet adapters here: detection runs in order, first match wins
 ];
 /**
  * Auto-detects the first available wallet in the current page.
@@ -2385,7 +2585,7 @@ function getAllAdapters() {
  */
 // Main exports
 // Version information
-const SDK_VERSION = '2.7.0';
+const SDK_VERSION = '2.8.0';
 const MIN_EXTENSION_VERSION = '2.0.1'; // Mainnet Alpha
 const MIN_EXTENSION_VERSION_DEVNET = '2.2.1'; // Devnet (contract calls, privacy)
 const SUPPORTED_EXTENSION_VERSIONS = '^2.0.1'; // Supports all versions >= 2.0.1
@@ -2403,8 +2603,7 @@ async function createZeroXIOWallet(config) {
         try {
             await wallet$1.connect();
         }
-        catch (error) {
-            if (config.debug) ;
+        catch {
             // Don't throw - let the app handle connection manually
         }
     }
@@ -2414,7 +2613,7 @@ async function createZeroXIOWallet(config) {
 function checkSDKCompatibility() {
     const issues = [];
     const recommendations = [];
-    // Hard blockers — SDK cannot function without these
+    // Hard blockers: the SDK cannot function without these
     if (typeof window === 'undefined') {
         issues.push('Window object not available');
         recommendations.push('SDK must be used in a browser environment');
@@ -2479,7 +2678,7 @@ if (typeof window !== 'undefined') {
                 debugMode: !!window.__ZEROXIO_SDK_DEBUG__,
                 environment: isDevelopment ? 'development' : 'production'
             }),
-            // simulateExtensionEvent removed for security — could be exploited on staging builds
+            // simulateExtensionEvent removed for security: it could be exploited on staging builds
             showWelcome: () => {
                 console.log(`[0xio SDK] Development mode - SDK v${SDK_VERSION}`);
                 console.log('[0xio SDK] Debug utilities available at window.__ZEROXIO_SDK_UTILS__');
@@ -2494,5 +2693,5 @@ if (typeof window !== 'undefined') {
     }
 }
 
-export { DEFAULT_NETWORK_ID, ErrorCode, EventEmitter, ExtensionCommunicator, MIN_EXTENSION_VERSION, MIN_EXTENSION_VERSION_DEVNET, NETWORKS, OctraProviderAdapter, SDK_CONFIG, SDK_VERSION, SUPPORTED_EXTENSION_VERSIONS, ZeroXIOAdapter, ZeroXIOWallet, ZeroXIOWalletError, checkBrowserSupport, checkSDKCompatibility, createDefaultBalance, createErrorMessage, createLogger, createOctraProviderAdapter, createZeroXIOAdapter, createZeroXIOWallet, delay, deriveOctraAddress, detectWalletAdapter, formatAddress, formatOCT, formatTimestamp, formatTxHash, formatOCT as formatZeroXIO, fromMicroOCT, fromMicroOCT as fromMicroZeroXIO, generateMockData, getAllAdapters, getAllNetworks, getDefaultNetwork, getNetworkConfig, isBrowser, isErrorType, isValidAddress, isValidAmount, isValidFeeLevel, isValidMessage, isValidNetworkId, toMicroOCT, toMicroOCT as toMicroZeroXIO };
+export { DEFAULT_NETWORK_ID, ErrorCode, EventEmitter, ExtensionCommunicator, LEGACY_PERMISSION_MAP, MIN_EXTENSION_VERSION, MIN_EXTENSION_VERSION_DEVNET, NETWORKS, OctraProviderAdapter, SDK_CONFIG, SDK_VERSION, SIGNED_MESSAGE_PREFIX, SIGNED_MESSAGE_VERSION, SUPPORTED_EXTENSION_VERSIONS, WALLET_PERMISSIONS, ZeroXIOAdapter, ZeroXIOWallet, ZeroXIOWalletError, buildAuthMessage, checkBrowserSupport, checkSDKCompatibility, createDefaultBalance, createErrorMessage, createLogger, createOctraProviderAdapter, createZeroXIOAdapter, createZeroXIOWallet, delay, deriveOctraAddress, detectWalletAdapter, formatAddress, formatOCT, formatTimestamp, formatTxHash, formatOCT as formatZeroXIO, fromMicroOCT, fromMicroOCT as fromMicroZeroXIO, generateMockData, getAllAdapters, getAllNetworks, getDefaultNetwork, getNetworkConfig, getSignedMessageBytes, isBrowser, isErrorType, isValidAddress, isValidAmount, isValidFeeLevel, isValidMessage, isValidNetworkId, octToMicro, toMicroOCT, toMicroOCT as toMicroZeroXIO, toWalletPermissions, verifyMessage, withLegacyAliases };
 //# sourceMappingURL=index.esm.js.map