@0xio/sdk 2.7.0 → 2.8.0

package/dist/index.umd.js

@@ -4,28 +4,16 @@
     (global = typeof globalThis !== 'undefined' ? globalThis : global || self, factory(global.ZeroXIOWalletSDK = {}));
 })(this, (function (exports) { 'use strict';
 
-    /**
-     * 0xio Wallet SDK - Event System
-     * Type-safe event emitter for wallet events
-     */
     class EventEmitter {
-        constructor(debug = false) {
+        constructor(_debug = false) {
             this.listeners = new Map();
-            this.debug = debug;
         }
-        /**
-         * Add event listener
-         */
         on(eventType, listener) {
             if (!this.listeners.has(eventType)) {
                 this.listeners.set(eventType, new Set());
             }
             this.listeners.get(eventType).add(listener);
-            if (this.debug) ;
         }
-        /**
-         * Remove event listener
-         */
         off(eventType, listener) {
             const eventListeners = this.listeners.get(eventType);
             if (eventListeners) {
@@ -33,12 +21,8 @@
                 if (eventListeners.size === 0) {
                     this.listeners.delete(eventType);
                 }
-                if (this.debug) ;
             }
         }
-        /**
-         * Add one-time event listener
-         */
         once(eventType, listener) {
             const onceListener = (event) => {
                 // Remove BEFORE calling so a throwing listener doesn't stay registered
@@ -47,9 +31,6 @@
             };
             this.on(eventType, onceListener);
         }
-        /**
-         * Emit event to all listeners
-         */
         emit(eventType, data) {
             const event = {
                 type: eventType,
@@ -58,49 +39,32 @@
             };
             const eventListeners = this.listeners.get(eventType);
             if (eventListeners && eventListeners.size > 0) {
-                if (this.debug) ;
-                // Create a copy to avoid issues if listeners modify the set during iteration
-                const listenersArray = Array.from(eventListeners);
-                for (const listener of listenersArray) {
+                // snapshot to avoid issues if listeners modify the set during iteration
+                for (const listener of Array.from(eventListeners)) {
                     try {
                         listener(event);
                     }
-                    catch (error) {
-                        // console.error(`[0xio SDK] Error in event listener for '${eventType}':`, error);
+                    catch {
+                        // listener errors are swallowed to keep the event loop running
                     }
                 }
             }
-            else if (this.debug) ;
         }
-        /**
-         * Remove all listeners for a specific event type
-         */
         removeAllListeners(eventType) {
             if (eventType) {
                 this.listeners.delete(eventType);
-                if (this.debug) ;
             }
             else {
                 this.listeners.clear();
-                if (this.debug) ;
             }
         }
-        /**
-         * Get number of listeners for an event type
-         */
         listenerCount(eventType) {
             const eventListeners = this.listeners.get(eventType);
             return eventListeners ? eventListeners.size : 0;
         }
-        /**
-         * Get all event types that have listeners
-         */
         eventTypes() {
             return Array.from(this.listeners.keys());
         }
-        /**
-         * Check if there are any listeners for an event type
-         */
         hasListeners(eventType) {
             return this.listenerCount(eventType) > 0;
         }
@@ -134,6 +98,16 @@
         ErrorCode["DUPLICATE_TRANSACTION"] = "DUPLICATE_TRANSACTION";
         ErrorCode["NONCE_TOO_FAR"] = "NONCE_TOO_FAR";
         ErrorCode["INTERNAL_ERROR"] = "INTERNAL_ERROR";
+        // Codes the 0xio wallet returns over the bridge
+        ErrorCode["NOT_CONNECTED"] = "NOT_CONNECTED";
+        ErrorCode["INVALID_PARAMS"] = "INVALID_PARAMS";
+        ErrorCode["METHOD_NOT_ALLOWED"] = "METHOD_NOT_ALLOWED";
+        ErrorCode["NOT_AVAILABLE"] = "NOT_AVAILABLE";
+        ErrorCode["PRIVATE_PROOF_FAILED"] = "PRIVATE_PROOF_FAILED";
+        ErrorCode["PRIVATE_TRANSFER_FAILED"] = "PRIVATE_TRANSFER_FAILED";
+        ErrorCode["CONTRACT_CALL_FAILED"] = "CONTRACT_CALL_FAILED";
+        ErrorCode["SIGN_FAILED"] = "SIGN_FAILED";
+        ErrorCode["RECIPIENT_NOT_REGISTERED"] = "RECIPIENT_NOT_REGISTERED";
     })(exports.ErrorCode || (exports.ErrorCode = {}));
     class ZeroXIOWalletError extends Error {
         constructor(code, message, details) {
@@ -156,7 +130,7 @@
      *   window.postMessage({ source: '0xio-sdk-bridge', response: { id, success, data, error }, sessionNonce })
      *   window.postMessage({ source: '0xio-sdk-bridge', event: { type, data } })
      *
-     * H-2: Session nonce validation — injected.ts broadcasts the nonce received from the
+     * Session nonce validation: injected.ts broadcasts the nonce received from the
      * isolated content script. Once set, any '0xio-sdk-bridge' response with a missing or
      * mismatched nonce is rejected, preventing response injection by malicious page scripts.
      */
@@ -189,7 +163,7 @@
                     window.parent.postMessage({ source: '0xio-sdk-request', request }, parentOrigin);
                 }
                 catch {
-                    // Do not fall back to '*' — silent failure is safer
+                    // Do not fall back to '*': silent failure is safer
                 }
             },
             listen(handler, options) {
@@ -204,7 +178,7 @@
                     ...(options?.trustedParentOrigins ?? []),
                 ]);
                 let _sessionNonce = null;
-                // H-2: receive session nonce from injected.ts (MAIN world content script)
+                // receive the session nonce from injected.ts (MAIN world content script)
                 const nonceListener = (e) => {
                     if (e.origin !== allowedOrigin)
                         return;
@@ -227,7 +201,7 @@
                         return;
                     if (!e.data || e.data.source !== '0xio-sdk-bridge')
                         return;
-                    // H-2: session nonce validation.
+                    // session nonce validation.
                     // Preferred path: nonce set via 0xio-sdk-nonce-init from injected.ts.
                     // Fallback path: if the init broadcast was missed (race between document_start
                     // content script and page script load), capture nonce from the first same-origin
@@ -273,16 +247,6 @@
     /** Default 0xio adapter instance (no extra trusted origins). */
     const ZeroXIOAdapter = createZeroXIOAdapter();
 
-    /**
-     * 0xio Wallet SDK - Utilities
-     * Helper functions for validation, formatting, and common operations
-     */
-    // ===================
-    // VALIDATION UTILITIES
-    // ===================
-    /**
-     * Validate wallet address for Octra blockchain
-     */
     function isValidAddress(address) {
         if (!address || typeof address !== 'string') {
             return false;
@@ -306,11 +270,8 @@
             Number.isFinite(amount) &&
             amount <= Number.MAX_SAFE_INTEGER;
     }
-    /**
-     * Validate transaction message
-     */
     function isValidMessage(message) {
-        // Type check first — falsy non-strings (0, false, null) are NOT valid messages
+        // Type check first: falsy non-strings (0, false, null) are not valid messages
         if (typeof message !== 'string') {
             return message === undefined || message === null ? true : false;
         }
@@ -318,18 +279,12 @@
         if (message.length === 0) {
             return true;
         }
-        // 100KB limit — contract call params can be large (serialized JSON)
+        // 100KB limit: contract call params can be large (serialized JSON)
         return message.length <= 100000;
     }
-    /**
-     * Validate fee level
-     */
     function isValidFeeLevel(feeLevel) {
         return feeLevel === 1 || feeLevel === 3;
     }
-    // ===================
-    // ADDRESS DERIVATION
-    // ===================
     const _B58_ALPHA = '123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz';
     function _base58Encode(buf) {
         let zeros = 0;
@@ -357,7 +312,7 @@
     }
     /**
      * Derive the canonical Octra address from a base64-encoded Ed25519 public key.
-     * Algorithm: SHA-256(pubkey_bytes) → base58 → prepend "oct"
+     * Algorithm: SHA-256 of the pubkey bytes, base58-encoded, with "oct" prepended
      * Source of truth: ocho-push-server/src/index.ts#deriveAddressFromPubkey
      */
     async function deriveOctraAddress(publicKeyBase64) {
@@ -374,12 +329,6 @@
         const hashBuf = await crypto.subtle.digest('SHA-256', bytes);
         return 'oct' + _base58Encode(new Uint8Array(hashBuf));
     }
-    // ===================
-    // FORMATTING UTILITIES
-    // ===================
-    /**
-     * Format OCT amount for display
-     */
     function formatOCT(amount, decimals = 6) {
         const n = typeof amount === 'string' ? parseFloat(amount) : amount;
         if (!isValidAmount(n)) {
@@ -390,9 +339,6 @@
             maximumFractionDigits: decimals
         });
     }
-    /**
-     * Format address for display (truncated)
-     */
     function formatAddress(address, prefixLength = 6, suffixLength = 4) {
         if (!isValidAddress(address)) {
             return 'Invalid Address';
@@ -402,16 +348,10 @@
         }
         return `${address.slice(0, prefixLength)}...${address.slice(-suffixLength)}`;
     }
-    /**
-     * Format timestamp for display
-     */
     function formatTimestamp(timestamp) {
         const date = new Date(timestamp);
         return date.toLocaleString();
     }
-    /**
-     * Format transaction hash for display
-     */
     function formatTxHash(hash, length = 12) {
         if (!hash || typeof hash !== 'string') {
             return 'Invalid Hash';
@@ -423,12 +363,6 @@
         const suffixLength = Math.floor(length / 2);
         return `${hash.slice(0, prefixLength)}...${hash.slice(-suffixLength)}`;
     }
-    // ===================
-    // CONVERSION UTILITIES
-    // ===================
-    /**
-     * Convert OCT to micro OCT (for network transmission)
-     */
     function toMicroOCT(amount) {
         if (!isValidAmount(amount)) {
             throw new ZeroXIOWalletError(exports.ErrorCode.INVALID_AMOUNT, 'Invalid amount for conversion');
@@ -438,8 +372,21 @@
         return microOCT.toString();
     }
     /**
-     * Convert micro OCT to OCT (for display)
+     * Exact OCT to raw micro-OCT conversion using string arithmetic (no float rounding).
+     * Accepts up to 6 decimals; anything else is rejected.
      */
+    function octToMicro(amount) {
+        const text = typeof amount === 'number' ? amount.toFixed(6) : String(amount).trim();
+        if (!/^\d+(\.\d{1,6})?$/.test(text)) {
+            throw new ZeroXIOWalletError(exports.ErrorCode.INVALID_AMOUNT, 'Amount must be a positive decimal with at most 6 places');
+        }
+        const [whole, frac = ''] = text.split('.');
+        const micro = BigInt(whole) * BigInt(1000000) + BigInt(frac.padEnd(6, '0'));
+        if (micro <= BigInt(0)) {
+            throw new ZeroXIOWalletError(exports.ErrorCode.INVALID_AMOUNT, 'Amount must be greater than zero');
+        }
+        return micro.toString();
+    }
     function fromMicroOCT(microAmount) {
         const amount = typeof microAmount === 'string' ? parseInt(microAmount, 10) : microAmount;
         if (!Number.isFinite(amount) || amount < 0) {
@@ -447,12 +394,6 @@
         }
         return amount / 1000000;
     }
-    // ===================
-    // ERROR UTILITIES
-    // ===================
-    /**
-     * Create standardized error messages
-     */
     function createErrorMessage(code, context) {
         const baseMessages = {
             [exports.ErrorCode.EXTENSION_NOT_FOUND]: '0xio Wallet extension is not installed or enabled',
@@ -474,29 +415,26 @@
             [exports.ErrorCode.INVALID_SIGNATURE]: 'Invalid transaction signature',
             [exports.ErrorCode.DUPLICATE_TRANSACTION]: 'Duplicate transaction detected',
             [exports.ErrorCode.NONCE_TOO_FAR]: 'Transaction nonce is too far ahead',
-            [exports.ErrorCode.INTERNAL_ERROR]: 'Internal server error'
+            [exports.ErrorCode.INTERNAL_ERROR]: 'Internal server error',
+            [exports.ErrorCode.NOT_CONNECTED]: 'Connect the wallet before this request',
+            [exports.ErrorCode.INVALID_PARAMS]: 'Invalid request parameters',
+            [exports.ErrorCode.METHOD_NOT_ALLOWED]: 'This method is not permitted through the wallet',
+            [exports.ErrorCode.NOT_AVAILABLE]: 'Not available through the wallet bridge',
+            [exports.ErrorCode.PRIVATE_PROOF_FAILED]: 'Private proof generation failed',
+            [exports.ErrorCode.PRIVATE_TRANSFER_FAILED]: 'Private transfer failed',
+            [exports.ErrorCode.CONTRACT_CALL_FAILED]: 'Contract call failed',
+            [exports.ErrorCode.SIGN_FAILED]: 'Signing failed',
+            [exports.ErrorCode.RECIPIENT_NOT_REGISTERED]: 'Recipient has no private view key registered'
         };
         const baseMessage = baseMessages[code] || 'Unknown error';
         return context ? `${baseMessage}: ${context}` : baseMessage;
     }
-    /**
-     * Check if error is a specific type
-     */
     function isErrorType(error, code) {
         return error instanceof ZeroXIOWalletError && error.code === code;
     }
-    // ===================
-    // ASYNC UTILITIES
-    // ===================
-    /**
-     * Create a promise that resolves after a delay
-     */
     function delay(ms) {
         return new Promise(resolve => setTimeout(resolve, ms));
     }
-    /**
-     * Retry an async operation with exponential backoff
-     */
     async function retry(operation, maxRetries = 3, baseDelay = 1000) {
         let lastError;
         // maxRetries = number of retries AFTER the first attempt
@@ -507,7 +445,7 @@
             }
             catch (error) {
                 lastError = error;
-                // Never retry user rejections — these are intentional
+                // Never retry user rejections, they are intentional
                 const msg = lastError.message?.toLowerCase() || '';
                 if (msg.includes('rejected') || msg.includes('denied') || msg.includes('cancelled') || msg.includes('user refused')) {
                     throw lastError;
@@ -536,18 +474,9 @@
             clearTimeout(timer);
         });
     }
-    // ===================
-    // BROWSER UTILITIES
-    // ===================
-    /**
-     * Check if running in browser environment
-     */
     function isBrowser() {
         return typeof window !== 'undefined' && typeof document !== 'undefined';
     }
-    /**
-     * Check if browser supports required features
-     */
     function checkBrowserSupport() {
         const missingFeatures = [];
         if (!isBrowser()) {
@@ -569,12 +498,6 @@
             missingFeatures
         };
     }
-    // ===================
-    // DEVELOPMENT UTILITIES
-    // ===================
-    /**
-     * Generate mock data for development/testing
-     */
     function generateMockData() {
         return {
             address: 'oct' + Math.random().toString(36).substring(2, 22) + Math.random().toString(36).substring(2, 26),
@@ -597,9 +520,6 @@
             }
         };
     }
-    /**
-     * Create development logger
-     */
     function createLogger(prefix, debug) {
         const isDevelopment = typeof window !== 'undefined' && ((typeof globalThis !== 'undefined' && globalThis.process?.env?.NODE_ENV === 'development') ||
             window.location.hostname === 'localhost' ||
@@ -652,17 +572,6 @@
         };
     }
 
-    /**
-     * 0xio Wallet SDK - Extension Communication Module
-     *
-     * @fileoverview Manages secure communication between the SDK and browser extension.
-     * Implements message passing, request/response handling, rate limiting, and origin validation
-     * to ensure secure wallet interactions.
-     *
-     * @module communication
-     * @version 2.7.0
-     * @license MIT
-     */
     class ExtensionCommunicator extends EventEmitter {
         constructor(debug = false, trustedOrigins = [], adapter) {
             super(debug);
@@ -678,14 +587,14 @@
             this._adapterReadyTeardown = null;
             /**
              * Set when a trusted walletReady has been received from window.parent.
-             * The polling fallback must NOT clear this flag.
+             * The polling fallback must not clear this flag.
              */
             this._parentTrusted = false;
             /** walletReady postMessage listener stored for cleanup */
             this._walletReadyMessageListener = null;
             /**
              * In-flight interactive request lock.
-             * Methods that open approval popups are serialized — only one at a time.
+             * Methods that open approval popups are serialized: only one at a time.
              */
             this._interactiveInFlight = false;
             this.MAX_CONCURRENT_REQUESTS = 50;
@@ -726,9 +635,15 @@
             return this.isExtensionAvailableState && this.hasExtensionContext();
         }
         async sendRequest(method, params = {}, timeout = 30000) {
-            const isInteractive = ExtensionCommunicator.NO_RETRY_METHODS.has(method);
-            const maxRetries = isInteractive ? 0 : 1;
-            const effectiveTimeout = isInteractive ? Math.max(timeout, 180000) : timeout;
+            // No-retry + long timeout for both popup/broadcast methods and long compute primitives.
+            const longOrNoRetry = ExtensionCommunicator.NO_RETRY_METHODS.has(method) ||
+                ExtensionCommunicator.LONG_COMPUTE_METHODS.has(method);
+            const maxRetries = longOrNoRetry ? 0 : 1;
+            const effectiveTimeout = ExtensionCommunicator.PROOF_METHODS.has(method)
+                ? Math.max(timeout, 600000)
+                : longOrNoRetry
+                    ? Math.max(timeout, 180000)
+                    : timeout;
             return this.sendRequestWithRetry(method, params, maxRetries, effectiveTimeout);
         }
         async sendRequestWithRetry(method, params = {}, maxRetries = 3, timeout = 30000) {
@@ -797,7 +712,7 @@
                 return;
             this._adapterTeardown = this.adapter.listen((msg) => {
                 if (msg.requestId !== undefined) {
-                    // response — map AdapterIncomingMessage → ExtensionResponse shape
+                    // response: map AdapterIncomingMessage to the ExtensionResponse shape
                     if (this.pendingRequests.has(msg.requestId)) {
                         this.handleExtensionResponse({
                             id: msg.requestId,
@@ -831,7 +746,7 @@
             }
             clearTimeout(pending.timeout);
             this.pendingRequests.delete(response.id);
-            // Require strict boolean true — "false" string or other truthy values are failures
+            // Require strict boolean true: a "false" string or other truthy values are failures
             if (response.success === true) {
                 pending.resolve(response.data);
             }
@@ -856,7 +771,7 @@
         }
         postMessageToExtension(request) {
             this.adapter.postRequest(request);
-            // Parent bridge (iframe/desktop mode) — only when a trusted origin is established.
+            // Parent bridge (iframe/desktop mode), only when a trusted origin is established.
             // Sending with '*' would leak method + params to any intercepting frame.
             if (window.parent !== window && this._parentOrigin) {
                 if (this.adapter.postRequestToParent) {
@@ -873,7 +788,7 @@
             if (this.pendingRequests.size >= this.MAX_CONCURRENT_REQUESTS) {
                 throw new ZeroXIOWalletError(exports.ErrorCode.RATE_LIMIT_EXCEEDED, `Too many concurrent requests (max: ${this.MAX_CONCURRENT_REQUESTS})`);
             }
-            // Trim expired timestamps — cap array size to prevent unbounded growth in idle tabs
+            // Trim expired timestamps and cap the array size to prevent unbounded growth in idle tabs
             this.requestTimestamps = this.requestTimestamps.filter(t => now - t < this.RATE_LIMIT_WINDOW);
             if (this.requestTimestamps.length > this.MAX_REQUESTS_PER_WINDOW) {
                 this.requestTimestamps = this.requestTimestamps.slice(-this.MAX_REQUESTS_PER_WINDOW);
@@ -893,7 +808,7 @@
                 const hex = Array.from(array, b => b.toString(16).padStart(2, '0')).join('');
                 return `0xio-sdk-${hex}`;
             }
-            // Crypto API unavailable — throw rather than produce a guessable ID that
+            // Crypto API unavailable: throw rather than produce a guessable ID that
             // could allow response spoofing via a known requestId.
             throw new ZeroXIOWalletError(exports.ErrorCode.UNKNOWN_ERROR, 'Cryptographic random number generation is not available in this environment');
         }
@@ -907,15 +822,18 @@
                     this.isExtensionAvailableState = true;
                 });
             }
-            // walletReady via postMessage (desktop/mobile iframe bridge) — store ref for cleanup
+            // walletReady via postMessage (desktop/mobile iframe bridge), store the ref for cleanup
             this._walletReadyMessageListener = (event) => {
                 if (event.data?.source !== '0xio-sdk-bridge' || event.data?.event?.type !== 'walletReady') {
                     return;
                 }
                 const isSameOrigin = event.origin === window.location.origin;
-                const isLocalhost = event.origin.startsWith('http://localhost:') || event.origin.startsWith('http://127.0.0.1:');
                 const isTauri = event.origin === 'tauri://localhost' || event.origin === 'https://tauri.localhost';
-                const isTrustedOrigin = this.trustedOrigins.includes(event.origin) || isTauri || isLocalhost;
+                const hasExplicitList = this.trustedOrigins.length > 0;
+                // When trustedParentOrigins is explicitly set, implicit localhost trust is disabled
+                const isLocalhostAllowed = !hasExplicitList &&
+                    (event.origin.startsWith('http://localhost:') || event.origin.startsWith('http://127.0.0.1:'));
+                const isTrustedOrigin = this.trustedOrigins.includes(event.origin) || isTauri || isLocalhostAllowed;
                 // In iframe mode, only trust the actual parent window
                 const inIframe = window.parent !== window;
                 if (inIframe && event.source !== window.parent) {
@@ -939,7 +857,7 @@
             };
             window.addEventListener('message', this._walletReadyMessageListener);
             if (window.parent !== window) {
-                this.logger.log('Running inside a frame — waiting for trusted walletReady signal');
+                this.logger.log('Running inside a frame, waiting for the trusted walletReady signal');
             }
             this.checkExtensionAvailability();
             this.extensionDetectionInterval = setInterval(() => {
@@ -948,7 +866,7 @@
         }
         checkExtensionAvailability() {
             // If parent-bridge readiness was established via a trusted walletReady handshake,
-            // preserve that state — the polling fallback (detectExtensionSignals) does not
+            // preserve that state: the polling fallback (detectExtensionSignals) does not
             // consider the iframe parent signal and would incorrectly flip state back
             if (this._parentTrusted) {
                 return;
@@ -1030,7 +948,7 @@
         }
         /**
          * Clean up SDK resources.
-         * After cleanup() the instance is terminal — do not call initialize() again.
+         * After cleanup() the instance is terminal: do not call initialize() again.
          * Construct a new instance instead.
          */
         cleanup() {
@@ -1071,20 +989,38 @@
             };
         }
     }
-    // Methods that trigger user-facing popups — NEVER retry these.
+    // Methods that trigger user-facing popups: never retry these.
     // Retrying sends a second request while the first popup is still open,
     // causing double popups where the second tx fails (stale nonce/state).
     ExtensionCommunicator.NO_RETRY_METHODS = new Set([
         'connect', 'send_transaction', 'call_contract', 'signMessage',
+        'sign_transaction', 'broadcast_only',
         'send_private_transfer', 'claim_private_transfer',
         'encrypt_balance', 'decrypt_balance',
+        // Broadcasts a sequence of contract txs, so it must never be retried (it would double-send).
+        'send_contract_transaction_sequence',
+        // Shows an approval popup + broadcasts a registration tx (offscreen cold-init can exceed
+        // 30s): interactive, long timeout, no retry.
+        'register_private_view_key',
+    ]);
+    // Long-running compute primitives (RFP): proof generation / decrypt take 10-120s, so
+    // they need the long (180s) timeout and must not be retried (a retry wastes ~a minute of
+    // compute). They do not show approval popups, so, unlike NO_RETRY_METHODS, they are not
+    // subject to the one-at-a-time interactive lock (a dapp may run several concurrently).
+    ExtensionCommunicator.LONG_COMPUTE_METHODS = new Set([
+        'make_zero_proof', 'make_range_proof', 'decrypt_value',
+        'get_private_balance', 'encrypt_value',
     ]);
+    // A private transfer runs proof generation after the approval (minutes on a slow machine),
+    // so its wait is longer than the popup window alone.
+    ExtensionCommunicator.PROOF_METHODS = new Set(['send_private_transfer']);
+    // The interactive lock applies only to methods that open a wallet popup / broadcast.
     ExtensionCommunicator.INTERACTIVE_METHODS = ExtensionCommunicator.NO_RETRY_METHODS;
     // only forward known event types
     ExtensionCommunicator.VALID_EVENT_TYPES = new Set([
         'connect', 'disconnect', 'accountChanged', 'balanceChanged',
-        'networkChanged', 'transactionConfirmed', 'error',
-        'extensionLocked', 'extensionUnlocked'
+        'networkChanged', 'transactionConfirmed', 'transactionFailed', 'permissionsChanged', 'message',
+        'error', 'extensionLocked', 'extensionUnlocked'
     ]);
 
     /**
@@ -1105,7 +1041,7 @@
         'devnet': {
             id: 'devnet',
             name: 'Octra Devnet',
-            rpcUrl: 'http://165.227.225.79:8080',
+            rpcUrl: 'https://devnet.octrascan.io',
             explorerUrl: 'https://devnet.octrascan.io/tx.html?hash=',
             explorerAddressUrl: 'https://devnet.octrascan.io/address.html?addr=',
             indexerUrl: 'https://devnet.octrascan.io',
@@ -1133,7 +1069,7 @@
     const DEFAULT_NETWORK_ID = 'mainnet';
     /**
      * Get network configuration by ID.
-     * Returns a frozen copy — callers cannot mutate SDK-internal state.
+     * Returns a frozen copy, so callers cannot mutate SDK-internal state.
      */
     function getNetworkConfig(networkId = DEFAULT_NETWORK_ID) {
         if (!Object.prototype.hasOwnProperty.call(_NETWORKS, networkId)) {
@@ -1143,7 +1079,7 @@
     }
     /**
      * Get all available networks.
-     * Returns frozen copies — callers cannot mutate SDK-internal state.
+     * Returns frozen copies, so callers cannot mutate SDK-internal state.
      */
     function getAllNetworks() {
         return Object.values(_NETWORKS).map(n => Object.freeze({ ...n }));
@@ -1167,6 +1103,14 @@
             return null;
         if (typeof raw.rpcUrl !== 'string' || (!raw.rpcUrl && raw.id !== 'custom'))
             return null;
+        if (raw.rpcUrl) {
+            const isHttps = raw.rpcUrl.startsWith('https://');
+            const isLocal = raw.rpcUrl.startsWith('http://localhost') || raw.rpcUrl.startsWith('http://127.0.0.1');
+            const isTestnet = raw.isTestnet === true;
+            // Reject plain-http RPC URLs from untrusted sources unless testnet-flagged or local
+            if (!isHttps && !isLocal && !isTestnet)
+                return null;
+        }
         if (typeof raw.supportsPrivacy !== 'boolean')
             return null;
         return Object.freeze({
@@ -1182,12 +1126,9 @@
         });
     }
 
-    /**
-     * SDK Configuration
-     */
     /**
      * Default balance structure.
-     * Accepts a numeric total or undefined — never pass a Balance object here.
+     * Accepts a numeric total or undefined. Never pass a Balance object here.
      */
     function createDefaultBalance(total = 0) {
         const safeTotal = typeof total === 'number' && Number.isFinite(total) && total >= 0 ? total : 0;
@@ -1206,7 +1147,7 @@
         if (raw === null || raw === undefined)
             return null;
         // If it's already a Balance-shaped object, extract numeric fields
-        // Use Number() not parseFloat() — parseFloat('10abc') silently returns 10
+        // Use Number() not parseFloat(): parseFloat('10abc') silently returns 10
         const pub = typeof raw === 'object' ? Number(raw.public ?? raw.total ?? 0) : Number(raw);
         const priv = typeof raw === 'object' ? Number(raw.private ?? 0) : 0;
         if (!Number.isFinite(pub) || pub < 0)
@@ -1220,34 +1161,165 @@
             currency: 'OCT'
         };
     }
-    /**
-     * SDK Configuration constants
-     */
     const SDK_CONFIG = {
-        version: '2.7.0',
+        version: '2.8.0',
         defaultNetworkId: DEFAULT_NETWORK_ID,
         communicationTimeout: 30000, // 30 seconds
         retryAttempts: 3,
         retryDelay: 1000, // 1 second
     };
-    /**
-     * Get default network configuration
-     */
     function getDefaultNetwork() {
         return getNetworkConfig(SDK_CONFIG.defaultNetworkId);
     }
 
+    /** Scope names the 0xio wallet enforces. Any other name is dropped at connect. */
+    const WALLET_PERMISSIONS = [
+        'accounts',
+        'public_transactions',
+        'contract_calls',
+        'contract_views',
+        'private_balance_read',
+        'private_proofs',
+        'private_transfers',
+        'private_claims',
+    ];
+    /** Older SDK permission names and the wallet scope each one means. */
+    const LEGACY_PERMISSION_MAP = {
+        read_address: 'accounts',
+        read_balance: 'accounts',
+        read_public_key: 'accounts',
+        send_transactions: 'public_transactions',
+        sign_messages: 'public_transactions',
+        contract_calls: 'contract_calls',
+        view_private_balance: 'private_balance_read',
+        view_encrypted_balance: 'private_balance_read',
+        stealth_scan: 'private_balance_read',
+        decrypt_balance: 'private_balance_read',
+        encrypt_balance: 'private_proofs',
+        private_transfers: 'private_transfers',
+        stealth_claim: 'private_claims',
+    };
+    /** Translate any mix of old and new names into the wallet's scope names, without duplicates. */
+    function toWalletPermissions(perms) {
+        const out = [];
+        for (const p of perms ?? []) {
+            const canonical = WALLET_PERMISSIONS.includes(p)
+                ? p
+                : LEGACY_PERMISSION_MAP[p];
+            if (canonical && !out.includes(canonical))
+                out.push(canonical);
+        }
+        return out;
+    }
     /**
-     * 0xio Wallet SDK - Main Wallet Class
-     * Primary interface for DApp developers to interact with 0xio Wallet
+     * The granted wallet scopes plus every requested old name they satisfy, so a dapp that checks
+     * for the name it asked for (for example 'read_balance') keeps seeing it.
      */
+    function withLegacyAliases(granted, requested) {
+        const set = new Set(granted ?? []);
+        for (const p of requested ?? []) {
+            const canonical = LEGACY_PERMISSION_MAP[p];
+            if (canonical && set.has(canonical))
+                set.add(p);
+        }
+        return [...set];
+    }
+
+    /**
+     * 0xio Signed Message standard (v1).
+     *
+     * `wallet.signMessage(message)` never signs the raw message. The wallet frames it first so a signed
+     * "message" can never collide with a transaction pre-image (a transaction is canonical JSON that
+     * begins with '{'). The framing is:
+     *
+     *     "Octra Signed Message:\n" + utf8ByteLength(message) + "\n" + message
+     *
+     * signed as an Ed25519 detached signature over the UTF-8 bytes of that string. The leading 'O'
+     * guarantees the signed bytes never begin with '{', so a personal-message signature can never be a
+     * valid transaction. Any verifier MUST reconstruct the same bytes: use `getSignedMessageBytes()`
+     * with any Ed25519 library, or `verifyMessage()` for a batteries-included check.
+     */
+    /** Fixed prefix tag for the 0xio Signed Message scheme. */
+    const SIGNED_MESSAGE_PREFIX = 'Octra Signed Message:';
+    /** Scheme version, bumped if the framing ever changes so verifiers can detect it. */
+    const SIGNED_MESSAGE_VERSION = 1;
+    /** UTF-8 byte length of a string (JS `.length` counts UTF-16 units, not bytes). */
+    function utf8ByteLength(s) {
+        return new TextEncoder().encode(s).length;
+    }
+    function base64ToBytes(b64) {
+        // atob is available in browsers and Node 16+; utils.deriveOctraAddress uses the same path.
+        const bin = atob(b64);
+        const out = new Uint8Array(bin.length);
+        for (let i = 0; i < bin.length; i++)
+            out[i] = bin.charCodeAt(i);
+        return out;
+    }
+    /**
+     * The exact bytes that `wallet.signMessage(message)` produces a signature over. Verify a 0xio
+     * message signature by checking an Ed25519 signature against these bytes with the signer's public
+     * key. Zero-dependency - bring your own Ed25519 verifier, or use `verifyMessage`.
+     */
+    function getSignedMessageBytes(message) {
+        if (typeof message !== 'string') {
+            throw new TypeError('message must be a string');
+        }
+        const framed = `${SIGNED_MESSAGE_PREFIX}\n${utf8ByteLength(message)}\n${message}`;
+        return new TextEncoder().encode(framed);
+    }
+    /**
+     * Reconstruct the auth message that `wallet.signAuthMessage(service, nonce)` signs. A relying
+     * service verifies an auth signature with `verifyMessage(buildAuthMessage(service, nonce, origin),
+     * signature, publicKey)`, where `origin` is the caller's page origin.
+     */
+    function buildAuthMessage(service, nonce, origin) {
+        return `0xio auth\nService: ${service}\nNonce: ${nonce}\nOrigin: ${origin}`;
+    }
+    /**
+     * Verify a 0xio message signature produced by `wallet.signMessage`.
+     *
+     * @param message   The original message passed to `wallet.signMessage`.
+     * @param signature Base64 Ed25519 signature returned by `wallet.signMessage`.
+     * @param publicKey Base64 Ed25519 public key of the signer (from `wallet.getPublicKey()`).
+     * @returns         Whether the signature is valid for this message and key.
+     *
+     * Uses the Web Crypto Ed25519 primitive (Node 18+, Chrome 137+, Safari 17+, Firefox 129+). In an
+     * environment without it, verify `getSignedMessageBytes(message)` with your own Ed25519 library.
+     */
+    async function verifyMessage(message, signature, publicKey) {
+        if (typeof crypto === 'undefined' || !crypto.subtle) {
+            throw new Error('Web Crypto API unavailable; verify getSignedMessageBytes(message) with your own Ed25519 library');
+        }
+        let sigBytes;
+        let pubBytes;
+        try {
+            sigBytes = base64ToBytes(signature);
+            pubBytes = base64ToBytes(publicKey);
+        }
+        catch {
+            return false;
+        }
+        try {
+            const data = new Uint8Array(getSignedMessageBytes(message));
+            const key = await crypto.subtle.importKey('raw', pubBytes, { name: 'Ed25519' }, false, [
+                'verify',
+            ]);
+            return await crypto.subtle.verify({ name: 'Ed25519' }, key, sigBytes, data);
+        }
+        catch {
+            // importKey/verify can throw (rather than return false) on malformed input or an environment
+            // that recognizes Ed25519 only partially; treat any such failure as "not verified".
+            return false;
+        }
+    }
+
     class ZeroXIOWallet extends EventEmitter {
         constructor(config) {
             super(config.debug);
             this.connectionInfo = { isConnected: false };
             this.isInitialized = false;
             this._initPromise = null;
-            // session version — stale write detection
+            // session version, for stale write detection
             this._sessionVersion = 0;
             this.config = {
                 ...config,
@@ -1256,42 +1328,31 @@
                 debug: config.debug || false
             };
             this.logger = createLogger('ZeroXIOWallet', this.config.debug || false);
-            this.communicator = new ExtensionCommunicator(this.config.debug, [], this.config.adapter);
+            this.communicator = new ExtensionCommunicator(this.config.debug, this.config.trustedParentOrigins ?? [], this.config.adapter);
             this.logger.log('Wallet instance created with config:', this.config);
         }
-        // ===================
-        // INITIALIZATION
-        // ===================
-        /**
-         * Initialize the SDK
-         * Must be called before using any other methods
-         */
         async initialize() {
             if (this.isInitialized) {
                 return true;
             }
-            // single-flight init
             if (this._initPromise) {
                 return this._initPromise;
             }
             this._initPromise = (async () => {
                 try {
-                    // Initialize extension communication
                     const communicationReady = await this.communicator.initialize();
                     if (!communicationReady) {
                         throw new ZeroXIOWalletError(exports.ErrorCode.EXTENSION_NOT_FOUND, 'Failed to establish communication with 0xio Wallet extension');
                     }
-                    // Register this DApp with the extension
                     await this.communicator.sendRequest('register_dapp', {
                         appName: this.config.appName,
                         appDescription: this.config.appDescription,
                         appVersion: this.config.appVersion,
                         appUrl: typeof window !== 'undefined' ? window.location.origin : undefined,
                         appIcon: this.config.appIcon,
-                        requiredPermissions: this.config.requiredPermissions,
+                        requiredPermissions: toWalletPermissions(this.config.requiredPermissions),
                         networkId: this.config.networkId
                     });
-                    // Setup event forwarding from extension
                     this.setupExtensionEventListeners();
                     this.isInitialized = true;
                     this.logger.log('SDK initialized successfully');
@@ -1310,37 +1371,29 @@
             })();
             return this._initPromise;
         }
-        /**
-         * Check if SDK is initialized
-         */
         isReady() {
             return this.isInitialized && this.communicator.isExtensionAvailable();
         }
-        // ===================
-        // CONNECTION MANAGEMENT
-        // ===================
-        /**
-         * Connect to wallet
-         */
         async connect(options = {}) {
             this.ensureInitialized();
             try {
                 this.logger.log('Attempting to connect with options:', options);
-                // filter to declared perms only
+                // filter to declared perms only: accept both RFC 'permissions' and legacy 'requestPermissions'
                 const declaredPermissions = this.config.requiredPermissions || [];
-                const requestPermissions = options.requestPermissions
-                    ? options.requestPermissions.filter(p => declaredPermissions.includes(p))
+                const requestedPerms = options.permissions ?? options.requestPermissions;
+                const requestedPermissions = requestedPerms
+                    ? requestedPerms.filter(p => declaredPermissions.includes(p))
                     : declaredPermissions;
                 const result = await this.communicator.sendRequest('connect', {
-                    requestPermissions,
+                    permissions: toWalletPermissions(requestedPermissions),
                     networkId: options.networkId || this.config.networkId
                 });
-                // verify pubkey→addr binding
+                // verify the public key to address binding
                 if (result.publicKey && result.address) {
                     try {
                         const derived = await deriveOctraAddress(result.publicKey);
                         if (derived !== result.address) {
-                            throw new ZeroXIOWalletError(exports.ErrorCode.UNKNOWN_ERROR, 'Address-key binding verification failed — the reported public key does not derive to the reported address');
+                            throw new ZeroXIOWalletError(exports.ErrorCode.UNKNOWN_ERROR, 'Address-key binding verification failed: the reported public key does not derive to the reported address');
                         }
                     }
                     catch (e) {
@@ -1349,11 +1402,16 @@
                         this.logger.warn('Address derivation check skipped (crypto unavailable):', e);
                     }
                 }
-                // Use networkInfo from extension response — validate before caching
+                // Use networkInfo from the extension response, validated before caching.
                 const networkInfo = validateNetworkInfo(result.networkInfo)
-                    ?? getNetworkConfig(result.networkId || this.config.networkId);
-                const permissions = result.permissions || [];
-                // Update connection info — including permissions
+                    ?? (result.networkId ? getNetworkConfig(result.networkId) : null);
+                if (!networkInfo) {
+                    throw new ZeroXIOWalletError(exports.ErrorCode.NETWORK_ERROR, 'Wallet did not return valid network metadata.');
+                }
+                // The wallet answers with its own scope names; the names the dapp asked for are kept as
+                // aliases so existing permission checks keep working.
+                const permissions = withLegacyAliases(result.permissions, requestedPermissions);
+                // Update connection info, including permissions
                 this.connectionInfo = {
                     isConnected: true,
                     address: result.address,
@@ -1427,12 +1485,12 @@
                 if (this._sessionVersion !== sv)
                     return { ...this.connectionInfo };
                 if (result.isConnected && result.address) {
-                    // verify pubkey→addr binding
+                    // verify the public key to address binding
                     if (result.publicKey) {
                         try {
                             const derived = await deriveOctraAddress(result.publicKey);
                             if (derived !== result.address) {
-                                this.logger.warn('Address-key binding mismatch on session restore — ignoring stale session');
+                                this.logger.warn('Address-key binding mismatch on session restore, ignoring stale session');
                                 this.connectionInfo = { isConnected: false };
                                 return { ...this.connectionInfo };
                             }
@@ -1444,9 +1502,13 @@
                     // validate untrusted balance/networkInfo before caching
                     const balanceInfo = validateBalance(result.balance) ?? createDefaultBalance();
                     const networkInfo = validateNetworkInfo(result.networkInfo)
-                        ?? getNetworkConfig(result.networkId || this.config.networkId);
+                        ?? (result.networkId ? getNetworkConfig(result.networkId) : null);
+                    if (!networkInfo) {
+                        this.logger.warn('getConnectionStatus: wallet returned no network metadata, returning cached state');
+                        return this.connectionInfo;
+                    }
                     const wasConnected = this.connectionInfo.isConnected;
-                    const permissions = result.permissions || [];
+                    const permissions = withLegacyAliases(result.permissions, this.config.requiredPermissions);
                     // preserve existing connectedAt
                     const connectedAt = this.connectionInfo.connectedAt || result.connectedAt || Date.now();
                     this.connectionInfo = {
@@ -1459,7 +1521,7 @@
                         permissions
                     };
                     this.logger.log('Discovered existing connection:', { address: result.address, network: networkInfo.id });
-                    // only emit on disconnected→connected transition
+                    // only emit on the disconnected to connected transition
                     if (!wasConnected) {
                         const connectEvent = {
                             address: result.address,
@@ -1484,8 +1546,8 @@
             }
         }
         /**
-         * Switch the extension's active network (e.g. 'mainnet' → 'devnet').
-         * Works silently — no popup, no user confirmation needed.
+         * Switch the extension's active network (e.g. 'mainnet' to 'devnet').
+         * Works silently: no popup, no user confirmation needed.
          * The extension broadcasts 'networkChanged' event to all connected dApps.
          */
         async switchNetwork(networkId) {
@@ -1517,18 +1579,25 @@
         getNetworkId() {
             return this.connectionInfo.networkInfo?.id || null;
         }
-        // ===================
-        // WALLET INFORMATION
-        // ===================
-        /**
-         * Get current wallet address
-         */
         getAddress() {
             return this.connectionInfo.address || null;
         }
         /**
-         * Get current balance
+         * The connected account's Ed25519 public key (base64). Served from the session when the
+         * wallet reported it at connect, otherwise asked from the wallet.
          */
+        async getPublicKey() {
+            this.ensureConnected();
+            if (this.connectionInfo.publicKey)
+                return this.connectionInfo.publicKey;
+            const result = await this.communicator.sendRequest('getPublicKey');
+            const publicKey = result?.publicKey;
+            if (typeof publicKey !== 'string' || !publicKey) {
+                throw new ZeroXIOWalletError(exports.ErrorCode.UNKNOWN_ERROR, 'Wallet did not return a public key');
+            }
+            this.connectionInfo.publicKey = publicKey;
+            return publicKey;
+        }
         async getBalance(forceRefresh = false) {
             this.ensureConnected();
             try {
@@ -1553,7 +1622,6 @@
                 // skip if session changed mid-flight
                 if (this._sessionVersion !== sv)
                     return result;
-                // Update cached balance
                 if (this.connectionInfo.balance) {
                     const previousBalance = this.connectionInfo.balance;
                     this.connectionInfo.balance = result;
@@ -1580,15 +1648,11 @@
                 throw new ZeroXIOWalletError(exports.ErrorCode.NETWORK_ERROR, 'Failed to get balance', error);
             }
         }
-        /**
-         * Get network information
-         */
         async getNetworkInfo() {
             this.ensureInitialized();
             try {
                 const sv = this._sessionVersion;
                 const result = await this.communicator.sendRequest('get_network_info');
-                // validate network info before caching
                 const networkInfo = validateNetworkInfo(result);
                 if (!networkInfo) {
                     throw new ZeroXIOWalletError(exports.ErrorCode.NETWORK_ERROR, 'Extension returned invalid network info');
@@ -1596,11 +1660,9 @@
                 // skip if session changed mid-flight
                 if (this._sessionVersion !== sv)
                     return networkInfo;
-                // Update cached network info
                 if (this.connectionInfo.networkInfo) {
                     const previousNetwork = this.connectionInfo.networkInfo;
                     this.connectionInfo.networkInfo = networkInfo;
-                    // Emit network changed event if different
                     if (previousNetwork.id !== networkInfo.id) {
                         const networkChangedEvent = {
                             previousNetwork,
@@ -1620,32 +1682,22 @@
                 throw new ZeroXIOWalletError(exports.ErrorCode.NETWORK_ERROR, 'Failed to get network info', error);
             }
         }
-        // ===================
-        // TRANSACTIONS
-        // ===================
-        /**
-         * Send transaction
-         */
         async sendTransaction(txData) {
             this.ensureConnected();
-            // validate inputs
             if (!isValidAddress(txData.to)) {
                 throw new ZeroXIOWalletError(exports.ErrorCode.INVALID_ADDRESS, 'Invalid recipient address');
             }
-            if (!isValidAmount(txData.amount)) {
-                throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Invalid transaction amount');
-            }
-            // bound memo
+            const amount = this.resolveRawAmount(txData.amount, txData.amountOct, 'Transaction amount');
             if (txData.message && txData.message.length > 1000) {
                 throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Transaction message too long (max 1,000 characters)');
             }
             try {
                 // log non-sensitive only
                 this.logger.log('Sending transaction:', { to: txData.to });
-                const result = await this.communicator.sendRequest('send_transaction', txData);
+                const result = await this.communicator.sendRequest('send_transaction', { ...txData, amount });
                 this.logger.log('Transaction result:', result);
-                // Refresh balance after successful transaction
-                if (result.success) {
+                // Refresh balance after successful transaction (accept RFC 'accepted' or legacy 'success')
+                if (result.accepted ?? result.success) {
                     setTimeout(() => {
                         this.getBalance(true).catch(error => {
                             this.logger.warn('Failed to refresh balance after transaction:', error);
@@ -1662,23 +1714,74 @@
                 throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Failed to send transaction', error);
             }
         }
+        /**
+         * Sign a transaction without broadcasting it (RFC-O-1 octra_signTransaction).
+         * Returns the signed transaction object for manual submission via submitTransaction().
+         */
+        async signTransaction(txData) {
+            this.ensureConnected();
+            if (!isValidAddress(txData.to)) {
+                throw new ZeroXIOWalletError(exports.ErrorCode.INVALID_ADDRESS, 'Invalid recipient address');
+            }
+            const amount = this.resolveRawAmount(txData.amount, txData.amountOct, 'Transaction amount');
+            if (txData.message && txData.message.length > 1000) {
+                throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Transaction message too long (max 1,000 characters)');
+            }
+            try {
+                this.logger.log('Requesting transaction signature:', { to: txData.to });
+                const result = await this.communicator.sendRequest('sign_transaction', { ...txData, amount });
+                return result;
+            }
+            catch (error) {
+                if (error instanceof ZeroXIOWalletError)
+                    throw error;
+                throw new ZeroXIOWalletError(exports.ErrorCode.SIGNATURE_FAILED, 'Failed to sign transaction', error);
+            }
+        }
+        /**
+         * Broadcast a pre-signed transaction (RFC-O-1 octra_submitTransaction).
+         * Use after signTransaction() to submit the signed tx to the network.
+         */
+        async submitTransaction(signedTx) {
+            this.ensureConnected();
+            if (!signedTx || typeof signedTx !== 'object') {
+                throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'signedTx must be an object');
+            }
+            try {
+                this.logger.log('Submitting pre-signed transaction');
+                const result = await this.communicator.sendRequest('broadcast_only', { signedTx });
+                return result;
+            }
+            catch (error) {
+                if (error instanceof ZeroXIOWalletError)
+                    throw error;
+                throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Failed to submit transaction', error);
+            }
+        }
         /**
          * Call a smart contract method (state-changing).
          * The extension builds, signs, and submits the transaction via octra_submit.
          */
         async callContract(callData) {
             this.ensureConnected();
-            // validate inputs
             if (!isValidAddress(callData.contract)) {
                 throw new ZeroXIOWalletError(exports.ErrorCode.INVALID_ADDRESS, 'Invalid contract address');
             }
             if (!callData.method || typeof callData.method !== 'string') {
                 throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Contract method is required');
             }
-            // bound method + params size
             if (callData.method.length > 200) {
                 throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Contract method name too long (max 200 characters)');
             }
+            if (callData.amount != null && callData.amountOct != null) {
+                throw new ZeroXIOWalletError(exports.ErrorCode.INVALID_AMOUNT, 'Contract call amount: pass amount or amountOct, not both');
+            }
+            if (callData.amount != null) {
+                this.assertExactOCTAmount(callData.amount, 'Contract call amount');
+            }
+            if (callData.amountOct != null) {
+                this.assertExactOCTAmount(callData.amountOct, 'Contract call amount');
+            }
             try {
                 if (JSON.stringify(callData.params).length > 65536) {
                     throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Contract params too large (max 64 KB)');
@@ -1696,7 +1799,11 @@
                     contract: callData.contract,
                     method: callData.method,
                     params: callData.params,
-                    amount: callData.amount != null ? String(callData.amount) : '0',
+                    amount: callData.amountOct != null
+                        ? octToMicro(callData.amountOct)
+                        : callData.amount != null
+                            ? String(callData.amount)
+                            : '0',
                     ou: callData.ou != null ? String(callData.ou) : '10000',
                 });
                 this.logger.log('Contract call result:', result);
@@ -1716,14 +1823,12 @@
          */
         async contractCallView(viewData) {
             this.ensureInitialized();
-            // validate inputs
             if (!isValidAddress(viewData.contract)) {
                 throw new ZeroXIOWalletError(exports.ErrorCode.INVALID_ADDRESS, 'Invalid contract address');
             }
             if (!viewData.method || typeof viewData.method !== 'string') {
                 throw new ZeroXIOWalletError(exports.ErrorCode.NETWORK_ERROR, 'Contract method is required');
             }
-            // bound method + params size
             if (viewData.method.length > 200) {
                 throw new ZeroXIOWalletError(exports.ErrorCode.NETWORK_ERROR, 'Contract method name too long (max 200 characters)');
             }
@@ -1763,7 +1868,6 @@
          */
         async getContractStorage(contract, key) {
             this.ensureInitialized();
-            // validate inputs
             if (!isValidAddress(contract)) {
                 throw new ZeroXIOWalletError(exports.ErrorCode.INVALID_ADDRESS, 'Invalid contract address');
             }
@@ -1805,12 +1909,6 @@
                 throw new ZeroXIOWalletError(exports.ErrorCode.NETWORK_ERROR, 'Failed to get transaction history', error);
             }
         }
-        // ===================
-        // PRIVATE FEATURES
-        // ===================
-        /**
-         * Get private balance information
-         */
         async getPrivateBalanceInfo() {
             this.ensureConnected();
             try {
@@ -1822,11 +1920,13 @@
             }
         }
         /**
-         * Encrypt public balance to private
+         * Encrypt public balance to private.
+         * @deprecated The 0xio extension does not serve this through the bridge (it answers
+         * NOT_AVAILABLE); users encrypt from the extension's Privacy screen.
          */
         async encryptBalance(amount) {
             this.ensureConnected();
-            // validate amount
+            this.assertExactOCTAmount(amount, 'Encrypt amount');
             if (!isValidAmount(amount)) {
                 throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Invalid amount');
             }
@@ -1843,11 +1943,13 @@
             }
         }
         /**
-         * Decrypt private balance to public
+         * Decrypt private balance to public.
+         * @deprecated The 0xio extension does not serve this through the bridge (it answers
+         * NOT_AVAILABLE); users decrypt from the extension's Privacy screen.
          */
         async decryptBalance(amount) {
             this.ensureConnected();
-            // validate amount
+            this.assertExactOCTAmount(amount, 'Decrypt amount');
             if (!isValidAmount(amount)) {
                 throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Invalid amount');
             }
@@ -1873,21 +1975,24 @@
          */
         async sendPrivateTransfer(transferData) {
             this.ensureConnected();
-            // validate inputs
             if (!isValidAddress(transferData.to)) {
                 throw new ZeroXIOWalletError(exports.ErrorCode.INVALID_ADDRESS, 'Invalid recipient address');
             }
             if (!isValidAmount(transferData.amount)) {
                 throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Invalid transfer amount');
             }
+            this.assertExactOCTAmount(transferData.amount, 'Transfer amount');
             // bound msg size
             if (transferData.message && transferData.message.length > 1000) {
                 throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Transfer message too long (max 1,000 characters)');
             }
             try {
-                const result = await this.communicator.sendRequest('send_private_transfer', transferData);
-                // Refresh balance after transfer
-                if (result.success) {
+                const result = await this.communicator.sendRequest('send_private_transfer', {
+                    ...transferData,
+                    ...(transferData.amountRaw ? { amount_raw: transferData.amountRaw } : {}),
+                });
+                // Refresh balance after transfer (accept RFC 'accepted' or legacy 'success')
+                if (result.accepted ?? result.success) {
                     setTimeout(() => {
                         this.getBalance(true).catch(() => { });
                     }, 1000);
@@ -1927,8 +2032,8 @@
                 const result = await this.communicator.sendRequest('claim_private_transfer', {
                     transferId
                 });
-                // Refresh balance after claiming
-                if (result.success) {
+                // Refresh balance after claiming (accept RFC 'accepted' or legacy 'success')
+                if (result.accepted ?? result.success) {
                     setTimeout(() => {
                         this.getBalance(true).catch(() => { });
                     }, 1000);
@@ -1939,19 +2044,89 @@
                 throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, 'Failed to claim private transfer', error);
             }
         }
-        // ===================
-        // MESSAGE SIGNING
-        // ===================
+        // Generic provider passthrough and RFP private primitives (since 2.8.0)
+        // These route through the wallet bridge. The wallet keeps all private/FHE
+        // secret material internal and returns only ciphertexts/proofs/tx hashes.
+        /**
+         * Send any wallet method + params through the bridge. Escape hatch for
+         * primitives that don't have a typed helper yet (no SDK upgrade needed).
+         * @since 2.8.0
+         */
+        async request(method, params = {}) {
+            return this.communicator.sendRequest(method, params);
+        }
+        /**
+         * Read-only node RPC through the wallet. Only the wallet's allow-listed public methods work
+         * (octra_balance, octra_transaction, contract_call and similar); writes are refused.
+         * @since 2.8.0
+         */
+        async rpcCall(method, params = []) {
+            return this.communicator.sendRequest('rpc_call', { method, params });
+        }
         /**
-         * Sign an arbitrary message with the wallet's private key
-         * The user will be prompted to approve the signature request in the extension
+         * Feature-detect which private capabilities the connected wallet supports.
+         * Lets a dapp render the correct UI (or fail closed) before any action.
+         * @since 2.8.0
+         */
+        async getPrivateCapabilities() {
+            return this.communicator.sendRequest('get_private_capabilities');
+        }
+        /** Read-only contract view (no approval popup). @since 2.8.0 */
+        async callContractView(params) {
+            this.ensureConnected();
+            return this.communicator.sendRequest('contract_call_view', params);
+        }
+        /** Encrypt a raw integer value to a contract-ready ciphertext (keys stay in wallet). @since 2.8.0 */
+        async encryptValue(params) {
+            this.ensureConnected();
+            return this.communicator.sendRequest('encrypt_value', params);
+        }
+        /** Decrypt a ciphertext to a raw integer value. @since 2.8.0 */
+        async decryptValue(params) {
+            this.ensureConnected();
+            return this.communicator.sendRequest('decrypt_value', params);
+        }
+        /** Zero proof for a ciphertext (proves it encrypts the given value, default 0). @since 2.8.0 */
+        async makeZeroProof(params) {
+            this.ensureConnected();
+            return this.communicator.sendRequest('make_zero_proof', params);
+        }
+        /** Range proof for a ciphertext. @since 2.8.0 */
+        async makeRangeProof(params) {
+            this.ensureConnected();
+            return this.communicator.sendRequest('make_range_proof', params);
+        }
+        /** Private OCT + private token balances (decrypted inside the wallet). @since 2.8.0 */
+        async getPrivateBalance(params = {}) {
+            this.ensureConnected();
+            return this.communicator.sendRequest('get_private_balance', params);
+        }
+        /** Register a receive/view public key so an address can receive private transfers. @since 2.8.0 */
+        async registerPrivateViewKey(params) {
+            this.ensureConnected();
+            return this.communicator.sendRequest('register_private_view_key', params);
+        }
+        /** Submit an ordered multi-step public contract flow under one approval. @since 2.8.0 */
+        async sendContractTransactionSequence(params) {
+            this.ensureConnected();
+            return this.communicator.sendRequest('send_contract_transaction_sequence', params);
+        }
+        /**
+         * Sign an arbitrary message with the wallet's private key.
+         * The user will be prompted to approve the signature request in the extension.
+         *
+         * The wallet does not sign the raw message: it signs the 0xio Signed Message framing
+         * (`"Octra Signed Message:\n" + byteLength + "\n" + message`) so a signed message can never be a
+         * transaction pre-image. Verify with `verifyMessage(message, signature, publicKey)`, or check an
+         * Ed25519 signature against `getSignedMessageBytes(message)` with your own library.
+         *
          * @param message - The message to sign (non-empty string)
          * @returns Promise resolving to the base64-encoded Ed25519 signature
          * @throws ZeroXIOWalletError with code SIGNATURE_FAILED if signing fails
          * @example
          * ```typescript
          * const signature = await wallet.signMessage('Hello, 0xio!');
-         * console.log('Signature:', signature);
+         * const ok = await verifyMessage('Hello, 0xio!', signature, await wallet.getPublicKey());
          * ```
          */
         async signMessage(message) {
@@ -1979,16 +2154,13 @@
                 throw new ZeroXIOWalletError(exports.ErrorCode.SIGNATURE_FAILED, 'Failed to sign message', error);
             }
         }
-        // ===================
-        // AUTHENTICATION HELPERS
-        // ===================
         /**
          * Sign a domain-separated authentication message.
          * Unlike `signMessage()`, this prepends a standard header that binds the signature
          * to the calling service and a one-time nonce, preventing cross-service replay attacks.
          *
          * @param service - Identifies the relying service (e.g. 'MyDApp' or 'api.mydapp.com')
-         * @param nonce   - Unique one-time value — use a server-generated UUID or challenge
+         * @param nonce   - Unique one-time value. Use a server-generated UUID or challenge
          * @returns Promise resolving to the base64-encoded Ed25519 signature
          */
         async signAuthMessage(service, nonce) {
@@ -2000,12 +2172,8 @@
                 throw new ZeroXIOWalletError(exports.ErrorCode.SIGNATURE_FAILED, 'Nonce is required');
             }
             const origin = typeof window !== 'undefined' ? window.location.origin : 'unknown';
-            const domainSeparated = `0xio auth\nService: ${service}\nNonce: ${nonce}\nOrigin: ${origin}`;
-            return this.signMessage(domainSeparated);
+            return this.signMessage(buildAuthMessage(service, nonce, origin));
         }
-        // ===================
-        // PRIVATE METHODS
-        // ===================
         ensureInitialized() {
             if (!this.isInitialized) {
                 throw new ZeroXIOWalletError(exports.ErrorCode.UNKNOWN_ERROR, 'SDK not initialized. Call initialize() first.');
@@ -2018,7 +2186,6 @@
             }
         }
         setupExtensionEventListeners() {
-            // Listen for extension events through the communicator
             this.communicator.on('accountChanged', (event) => {
                 this.handleAccountChanged(event.data);
             });
@@ -2037,11 +2204,21 @@
             this.communicator.on('transactionConfirmed', (event) => {
                 this.handleTransactionConfirmed(event.data);
             });
+            this.communicator.on('transactionFailed', (event) => {
+                this.emit('transactionFailed', event.data ?? event);
+            });
+            this.communicator.on('permissionsChanged', (event) => {
+                const permissions = event.data ?? event;
+                if (this.connectionInfo.isConnected) {
+                    this.connectionInfo.permissions = Array.isArray(permissions) ? permissions : [];
+                }
+                this.emit('permissionsChanged', permissions);
+            });
+            this.communicator.on('message', (event) => {
+                this.emit('message', event.data ?? event);
+            });
             this.logger.log('Extension event listeners setup complete');
         }
-        /**
-         * Handle account changed event from extension
-         */
         handleAccountChanged(data) {
             ++this._sessionVersion;
             const previousAddress = this.connectionInfo.address;
@@ -2049,7 +2226,6 @@
             // clear stale pubkey on acct change
             this.connectionInfo.publicKey = data.publicKey;
             if (data.balance) {
-                // validate balance before caching
                 const validated = validateBalance(data.balance);
                 if (validated) {
                     this.connectionInfo.balance = validated;
@@ -2067,12 +2243,9 @@
             this.emit('accountChanged', accountChangedEvent);
             this.logger.log('Account changed:', { newAddress: accountChangedEvent.newAddress });
         }
-        /**
-         * Handle network changed event from extension
-         */
         handleNetworkChanged(data) {
             const previousNetwork = this.connectionInfo.networkInfo;
-            // validate networkInfo — drop invalid
+            // validate networkInfo, drop invalid
             const networkInfo = validateNetworkInfo(data.networkInfo);
             if (!networkInfo) {
                 this.logger.warn('Received invalid networkInfo in networkChanged event, ignoring');
@@ -2088,11 +2261,7 @@
             this.emit('networkChanged', networkChangedEvent);
             this.logger.log('Network changed:', networkChangedEvent);
         }
-        /**
-         * Handle balance changed event from extension
-         */
         handleBalanceChanged(data) {
-            // validate balance before caching
             const balance = validateBalance(data.balance);
             if (!balance) {
                 this.logger.warn('Received invalid balance in balanceChanged event, ignoring');
@@ -2108,13 +2277,9 @@
             this.emit('balanceChanged', balanceChangedEvent);
             this.logger.log('Balance changed:', { public: balance.public });
         }
-        /**
-         * Handle extension locked event
-         */
         handleExtensionLocked() {
             ++this._sessionVersion;
             this.connectionInfo = { isConnected: false };
-            // emit extensionLocked then disconnect
             this.emit('extensionLocked', {});
             const disconnectEvent = {
                 reason: 'extension_locked'
@@ -2122,21 +2287,13 @@
             this.emit('disconnect', disconnectEvent);
             this.logger.log('Extension locked - disconnected');
         }
-        /**
-         * Handle extension unlocked event
-         */
         handleExtensionUnlocked() {
-            // emit extensionUnlocked
             this.emit('extensionUnlocked', {});
-            // Attempt to restore connection
             this.getConnectionStatus().catch(() => {
                 this.logger.warn('Could not restore connection after unlock');
             });
             this.logger.log('Extension unlocked');
         }
-        /**
-         * Handle transaction confirmed event
-         */
         handleTransactionConfirmed(data) {
             this.emit('transactionConfirmed', {
                 txHash: data.txHash,
@@ -2149,12 +2306,38 @@
             }, 2000);
             this.logger.log('Transaction confirmed:', data.txHash);
         }
-        // ===================
-        // CLEANUP
-        // ===================
         /**
-         * Clean up SDK resources
+         * The wallet takes raw micro-OCT. `amount` passes through unchanged (what every existing
+         * dapp sends today); `amountOct` is converted exactly. Never both.
+         */
+        resolveRawAmount(amount, amountOct, label) {
+            if (amount != null && amountOct != null) {
+                throw new ZeroXIOWalletError(exports.ErrorCode.INVALID_AMOUNT, `${label}: pass amount or amountOct, not both`);
+            }
+            if (amountOct != null) {
+                this.assertExactOCTAmount(amountOct, label);
+                return octToMicro(amountOct);
+            }
+            if (amount == null || !isValidAmount(amount)) {
+                throw new ZeroXIOWalletError(exports.ErrorCode.TRANSACTION_FAILED, `Invalid ${label.toLowerCase()}`);
+            }
+            return amount;
+        }
+        /**
+         * Reject numeric amounts that cannot be represented exactly in micro-OCT.
+         * e.g. 0.1 + 0.2 = 0.30000000000000004: the extension would sign the wrong value.
+         * String amounts bypass this check (caller is responsible for correctness).
          */
+        assertExactOCTAmount(amount, label) {
+            if (typeof amount === 'number') {
+                const micro = Math.round(amount * 1000000);
+                if (Math.abs(amount - micro / 1000000) > 1e-10) {
+                    const suggested = (micro / 1000000).toFixed(6);
+                    throw new ZeroXIOWalletError(exports.ErrorCode.INVALID_AMOUNT, `${label} cannot be represented exactly in micro-OCT. ` +
+                        `Pass a string instead (e.g. "${suggested}").`);
+                }
+            }
+        }
         cleanup() {
             this.communicator.cleanup();
             this.removeAllListeners();
@@ -2176,7 +2359,7 @@
      *
      * Targets any wallet that exposes `window.octra` per the RFC-O-1 specification:
      *   window.octra.isOctra === true
-     *   window.octra.request({ method, params }) → Promise<unknown>
+     *   window.octra.request({ method, params }) returns Promise<unknown>
      *   window.octra.on(event, listener) / removeListener(event, listener)
      *
      * This adapter translates the SDK's internal method names into RFC-O-1 method
@@ -2185,25 +2368,35 @@
      * Non-standard SDK methods (ping, register_dapp, getTransactionHistory, etc.)
      * are passed through as-is; the wallet's request() handles or rejects them.
      */
-    /** SDK method → RFC-O-1 method name */
+    /** SDK method to RFC-O-1 method name */
     const SDK_TO_RFC = {
         get_network_info: 'octra_networkInfo',
         switch_network: 'octra_switchNetwork',
         signMessage: 'octra_signMessage',
         send_transaction: 'octra_sendTransaction',
-        call_contract: 'octra_callContract',
+        sign_transaction: 'octra_signTransaction',
+        broadcast_only: 'octra_submitTransaction',
+        call_contract: 'octra_sendContractTransaction',
         contract_call_view: 'octra_callContract',
         get_private_balance_info: 'octra_getEncryptedBalance',
         encrypt_balance: 'octra_encryptBalance',
         decrypt_balance: 'octra_decryptBalance',
         send_private_transfer: 'octra_sendPrivateTransfer',
         claim_private_transfer: 'octra_claimStealth',
+        get_private_capabilities: 'octra_getPrivateCapabilities',
+        encrypt_value: 'octra_encryptValue',
+        decrypt_value: 'octra_decryptValue',
+        make_zero_proof: 'octra_makeZeroProof',
+        make_range_proof: 'octra_makeRangeProof',
+        get_private_balance: 'octra_getPrivateBalance',
+        register_private_view_key: 'octra_registerPrivateViewKey',
+        send_contract_transaction_sequence: 'octra_sendContractTransactionSequence',
     };
-    /** RFC-O-1 error code → SDK ErrorCode string */
+    /** RFC-O-1 error code to SDK ErrorCode string */
     const RFC_TO_SDK_ERROR = {
         4001: 'USER_REJECTED',
         4100: 'PERMISSION_DENIED',
-        4200: 'NETWORK_ERROR',
+        4200: 'UNKNOWN_ERROR',
         4900: 'CONNECTION_REFUSED',
         4901: 'NETWORK_ERROR',
     };
@@ -2220,7 +2413,7 @@
      * three RFC-O-1 calls: octra_requestAccounts, octra_networkInfo, octra_permissions.
      */
     async function rfcConnect(provider, params) {
-        const requestPerms = params?.requestPermissions ?? [];
+        const requestPerms = params?.permissions ?? params?.requestPermissions ?? [];
         const accounts = (await provider.request({
             method: 'octra_requestAccounts',
             params: [{ permissions: requestPerms }],
@@ -2301,19 +2494,21 @@
                 const provider = getProvider();
                 if (!provider)
                     return () => { _handler = null; };
-                // RFC-O-1 event → SDK event name + data shape
+                // RFC-O-1 event to SDK event name and data shape
                 const onConnect = (data) => handler({ eventType: 'connect', eventData: data });
                 const onDisconnect = (data) => handler({ eventType: 'disconnect', eventData: { reason: 'network_error', ...data } });
                 const onAccountsChanged = (accounts) => handler({ eventType: 'accountChanged', eventData: { address: accounts?.[0] ?? null } });
                 const onNetworkChanged = (data) => handler({ eventType: 'networkChanged', eventData: { networkInfo: data } });
                 const onBalanceChanged = (data) => handler({ eventType: 'balanceChanged', eventData: data });
                 const onTransactionChanged = (data) => handler({ eventType: 'transactionConfirmed', eventData: data });
+                const onPermissionsChanged = (data) => handler({ eventType: 'permissionsChanged', eventData: data });
                 provider.on('connect', onConnect);
                 provider.on('disconnect', onDisconnect);
                 provider.on('accountsChanged', onAccountsChanged);
                 provider.on('networkChanged', onNetworkChanged);
                 provider.on('balanceChanged', onBalanceChanged);
                 provider.on('transactionChanged', onTransactionChanged);
+                provider.on('permissionsChanged', onPermissionsChanged);
                 const cleanup = () => {
                     provider.removeListener('connect', onConnect);
                     provider.removeListener('disconnect', onDisconnect);
@@ -2321,6 +2516,7 @@
                     provider.removeListener('networkChanged', onNetworkChanged);
                     provider.removeListener('balanceChanged', onBalanceChanged);
                     provider.removeListener('transactionChanged', onTransactionChanged);
+                    provider.removeListener('permissionsChanged', onPermissionsChanged);
                     _handler = null;
                 };
                 return cleanup;
@@ -2328,7 +2524,11 @@
             listenForReady(onReady) {
                 const handler = () => onReady();
                 window.addEventListener('octraWalletReady', handler);
-                return () => window.removeEventListener('octraWalletReady', handler);
+                window.addEventListener('octra#initialized', handler);
+                return () => {
+                    window.removeEventListener('octraWalletReady', handler);
+                    window.removeEventListener('octra#initialized', handler);
+                };
             },
         };
     }
@@ -2336,15 +2536,15 @@
     const OctraProviderAdapter = createOctraProviderAdapter();
 
     /**
-     * 0xio SDK — Wallet Adapter Registry
+     * 0xio SDK: Wallet Adapter Registry
      *
      * Add new wallet adapters here. Detection order determines which wallet takes
      * priority when multiple wallets are installed at the same time.
      */
     const REGISTERED_ADAPTERS = [
-        ZeroXIOAdapter, // 0xio extension (postMessage protocol) — highest priority
+        ZeroXIOAdapter, // 0xio extension (postMessage protocol), highest priority
         OctraProviderAdapter, // any RFC-O-1 compliant wallet (window.octra)
-        // Add new wallet adapters here — detection runs in order, first match wins
+        // Add new wallet adapters here: detection runs in order, first match wins
     ];
     /**
      * Auto-detects the first available wallet in the current page.
@@ -2391,7 +2591,7 @@
      */
     // Main exports
     // Version information
-    const SDK_VERSION = '2.7.0';
+    const SDK_VERSION = '2.8.0';
     const MIN_EXTENSION_VERSION = '2.0.1'; // Mainnet Alpha
     const MIN_EXTENSION_VERSION_DEVNET = '2.2.1'; // Devnet (contract calls, privacy)
     const SUPPORTED_EXTENSION_VERSIONS = '^2.0.1'; // Supports all versions >= 2.0.1
@@ -2409,8 +2609,7 @@
             try {
                 await wallet$1.connect();
             }
-            catch (error) {
-                if (config.debug) ;
+            catch {
                 // Don't throw - let the app handle connection manually
             }
         }
@@ -2420,7 +2619,7 @@
     function checkSDKCompatibility() {
         const issues = [];
         const recommendations = [];
-        // Hard blockers — SDK cannot function without these
+        // Hard blockers: the SDK cannot function without these
         if (typeof window === 'undefined') {
             issues.push('Window object not available');
             recommendations.push('SDK must be used in a browser environment');
@@ -2485,7 +2684,7 @@
                     debugMode: !!window.__ZEROXIO_SDK_DEBUG__,
                     environment: isDevelopment ? 'development' : 'production'
                 }),
-                // simulateExtensionEvent removed for security — could be exploited on staging builds
+                // simulateExtensionEvent removed for security: it could be exploited on staging builds
                 showWelcome: () => {
                     console.log(`[0xio SDK] Development mode - SDK v${SDK_VERSION}`);
                     console.log('[0xio SDK] Debug utilities available at window.__ZEROXIO_SDK_UTILS__');
@@ -2503,16 +2702,21 @@
     exports.DEFAULT_NETWORK_ID = DEFAULT_NETWORK_ID;
     exports.EventEmitter = EventEmitter;
     exports.ExtensionCommunicator = ExtensionCommunicator;
+    exports.LEGACY_PERMISSION_MAP = LEGACY_PERMISSION_MAP;
     exports.MIN_EXTENSION_VERSION = MIN_EXTENSION_VERSION;
     exports.MIN_EXTENSION_VERSION_DEVNET = MIN_EXTENSION_VERSION_DEVNET;
     exports.NETWORKS = NETWORKS;
     exports.OctraProviderAdapter = OctraProviderAdapter;
     exports.SDK_CONFIG = SDK_CONFIG;
     exports.SDK_VERSION = SDK_VERSION;
+    exports.SIGNED_MESSAGE_PREFIX = SIGNED_MESSAGE_PREFIX;
+    exports.SIGNED_MESSAGE_VERSION = SIGNED_MESSAGE_VERSION;
     exports.SUPPORTED_EXTENSION_VERSIONS = SUPPORTED_EXTENSION_VERSIONS;
+    exports.WALLET_PERMISSIONS = WALLET_PERMISSIONS;
     exports.ZeroXIOAdapter = ZeroXIOAdapter;
     exports.ZeroXIOWallet = ZeroXIOWallet;
     exports.ZeroXIOWalletError = ZeroXIOWalletError;
+    exports.buildAuthMessage = buildAuthMessage;
     exports.checkBrowserSupport = checkBrowserSupport;
     exports.checkSDKCompatibility = checkSDKCompatibility;
     exports.createDefaultBalance = createDefaultBalance;
@@ -2536,6 +2740,7 @@
     exports.getAllNetworks = getAllNetworks;
     exports.getDefaultNetwork = getDefaultNetwork;
     exports.getNetworkConfig = getNetworkConfig;
+    exports.getSignedMessageBytes = getSignedMessageBytes;
     exports.isBrowser = isBrowser;
     exports.isErrorType = isErrorType;
     exports.isValidAddress = isValidAddress;
@@ -2543,8 +2748,12 @@
     exports.isValidFeeLevel = isValidFeeLevel;
     exports.isValidMessage = isValidMessage;
     exports.isValidNetworkId = isValidNetworkId;
+    exports.octToMicro = octToMicro;
     exports.toMicroOCT = toMicroOCT;
     exports.toMicroZeroXIO = toMicroOCT;
+    exports.toWalletPermissions = toWalletPermissions;
+    exports.verifyMessage = verifyMessage;
+    exports.withLegacyAliases = withLegacyAliases;
 
 }));
 //# sourceMappingURL=index.umd.js.map