@qrlwallet/connect 4.0.0 → 5.0.1

package/README.md

@@ -2,6 +2,18 @@
 
 Connect your dApp to QRL Wallet. Users scan a QR code (desktop) or tap a button (mobile) to pair their wallet, then approve transactions right from the app.
 
+## Version 5 migration
+
+Version 5 requires QIP-55 addresses: `Q` followed by 128 hexadecimal characters.
+Account validation and message-signature verification use the complete 64-byte
+address. Applications using legacy 20-byte addresses must remain on version 4
+until their network and wallet support QIP-55.
+
+Wallet typed-data requests are disabled pending a versioned 64-byte address
+encoding. The local verifier remains available for address-free typed data.
+The private v3 network is a test network; its availability does not establish
+compatibility with legacy deployments or contracts.
+
 ## How it works
 
 1. Your dApp generates a connection URI and shows it as a QR code
@@ -78,7 +90,7 @@ const txHash = await qrl.request({
   params: [
     {
       from: accounts[0],
-      to: 'Q20E7Bde67f00EA38ABb2aC57e1B0DD93f518446c',
+      to: 'Q22222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222222',
       value: '0x2386F26FC10000', // 0.01 QRL
     },
   ],
@@ -161,15 +173,16 @@ The main class. Creates a connection manager and EIP-1193 provider.
 **Require user approval:**
 `qrl_requestAccounts`, `qrl_sendTransaction`, `qrl_signTransaction`, `qrl_signMessage`, `qrl_signTypedData`, `wallet_switchQrlChain`
 
-`qrl_signMessage` and `qrl_signTypedData` (v3.0.0) replace the Ethereum-flavored `personal_sign` / `qrl_sign` / `qrl_signTypedData_v3` / `qrl_signTypedData_v4`. Both use SHAKE256 + native ML-DSA-87 ctx and return a rich `{ signature, publicKey, descriptor, signer, digest, schemeVersion }` object.
+`qrl_signMessage` uses SHAKE256 plus native ML-DSA-87 ctx and returns a rich `{ signature, publicKey, descriptor, signer, digest, schemeVersion }` object. During the QIP-55 port, `qrl_signTypedData` stays in the approval policy and fails locally before relay use. Its v1 encoding fixes addresses to a 32-byte slot, so a new 64-byte encoding needs a new scheme version and regenerated wallet parity vectors.
 
 `request()` returns `unknown`. First validate the exact response shape with
 `isQrlSignedMessageResult` or `isQrlSignedTypedDataResult`, then require
 `hasSigningDescriptor`. PQP3 authenticates the paired transport session. It
 does not prove that the returned ML-DSA signature is valid or that its public
 key belongs to the claimed signer. Authentication and authorization flows must
-call `verifyMessageForSigner` or `verifyTypedDataForSigner` with the original
-challenge or payload and the expected current Q + 40 hex address.
+call `verifyMessageForSigner` or the historical v1 `verifyTypedDataForSigner`
+with the original challenge or payload and the expected QIP-55 Q + 128 hex
+address.
 
 The lower-level `verifyMessageSignature` / `verifyTypedDataSignature` helpers
 verify only the supplied key and signature; they do not prove that the key
@@ -195,6 +208,18 @@ field must exactly match that approved address.
 An account string is not proof of control. For authentication, request a fresh
 challenge with `qrl_signMessage` and verify it with `verifyMessageForSigner`.
 
+## Address display
+
+Use `formatQrlAddressFingerprint(address)` for compact QRL account labels. It
+preserves checksum case and shows the first, exact middle, and final 8 hex
+characters. Keep the complete raw address in links, clipboard values, QR codes,
+RPC requests, and signing payloads.
+
+```typescript
+const label = formatQrlAddressFingerprint(account);
+// Q11111111...33333333...55555555
+```
+
 ## Sessions
 
 Established v5 sessions persist in `localStorage` for 7 days. When a user

package/dist/index.d.mts

@@ -269,10 +269,10 @@ interface EIP6963ProviderInfoOverride {
     rdns?: string;
 }
 /**
- * Rich response object returned by both `qrl_signMessage` and
- * `qrl_signTypedData`. The signature alone is not enough to verify since
- * ML-DSA-87 public keys cannot be recovered from a signature, so the
- * wallet always returns the public key explicitly. Stateless verifiers need
+ * Rich response object returned by `qrl_signMessage` and retained for locked
+ * `qrl_signTypedData` v1 fixtures. The signature alone is not enough to
+ * verify since ML-DSA-87 public keys cannot be recovered from a signature,
+ * so the wallet returns the public key explicitly. Stateless verifiers need
  * the original payload plus the signature fields below.
  */
 interface QrlSignedResult {
@@ -286,7 +286,7 @@ interface QrlSignedResult {
      * requires it.
      */
     descriptor?: string;
-    /** Current 41-character checksummed Q-address derived from descriptor + key. */
+    /** QIP-55 129-character checksummed Q-address derived from descriptor + key. */
     signer: string;
     /** 0x-hex of the 64-byte SHAKE256 digest that was signed. */
     digest: string;
@@ -303,8 +303,8 @@ interface QrlSignedMessageResult extends QrlSignedResult {
     schemeVersion: 'QRL-SIGN-MSG-v1';
 }
 /**
- * Response from `qrl_signTypedData`. Echoes `domain` so a stateless
- * verifier doesn't need to be told the domain out-of-band.
+ * Historical v1 response from `qrl_signTypedData`. It echoes `domain` so a
+ * stateless verifier does not need to be told the domain out-of-band.
  */
 interface QrlSignedTypedDataResult extends QrlSignedResult {
     schemeVersion: 'QRL-SIGN-TYPED-v1';
@@ -338,10 +338,10 @@ declare function hasSigningDescriptor(result: unknown): result is QrlSigningResu
  */
 type QrlSignMessageParams = [string, string];
 /**
- * `qrl_signTypedData` params: `[signer, payload]`. Payload mirrors EIP-712
- * shape: `{ types, primaryType, domain, message }`, but with `QRLDomain`
- * in place of `EIP712Domain` and SHAKE256-based hashing. See `signing/`
- * for the full encoder.
+ * Reserved `qrl_signTypedData` params: `[signer, payload]`. This interface
+ * describes the historical v1 payload retained by the verifier exports. The
+ * QIP-55 provider rejects requests until a versioned 64-byte encoding is
+ * defined.
  */
 interface QrlTypedDataPayload {
     types: Record<string, readonly {
@@ -887,13 +887,17 @@ declare const DIGEST_LEN = 64;
 declare function computeMessageDigest(messageBytes: Uint8Array): Uint8Array;
 
 /**
- * EIP-712-shaped typed-data encoding for `qrl_signTypedData` v1.
+ * Historical EIP-712-shaped typed-data encoding for `qrl_signTypedData` v1.
  *
  * Byte-identical algorithm with the wallet's signing/typedData.ts; this
  * file is the SDK port (only the import block differs: the SDK routes
  * SHAKE256 through src/crypto/primitives.ts, its crypto boundary). See
  * the wallet copy for the spec-level comments; behavior must stay in
  * lock-step or the cross-repo parity test fails on next CI.
+ *
+ * The v1 address slot is 32 bytes. QIP-55 address fields fail closed until a
+ * 64-byte encoding receives a new scheme tag and lockstep wallet fixtures.
+ * Address-free digests retain their existing encoding.
  */
 declare const TYPED_DATA_LIMITS: Readonly<{
     maxTypes: 32;
@@ -965,7 +969,7 @@ interface VerifyTypedDataParams {
  */
 declare function verifyTypedDataSignature({ signature, publicKey, payload, }: VerifyTypedDataParams): boolean;
 interface VerifyMessageForSignerParams extends VerifyMessageParams {
-    /** Current Q + 40 hex address expected by the dApp. */
+    /** QIP-55 Q + 128 hex address expected by the dApp. */
     expectedSigner: string;
     /** Exact 3-byte wallet descriptor. Missing legacy values fail closed. */
     descriptor?: Uint8Array | string | undefined;
@@ -973,7 +977,7 @@ interface VerifyMessageForSignerParams extends VerifyMessageParams {
 /** Verify both the message signature and public-key-to-signer binding. */
 declare function verifyMessageForSigner({ expectedSigner, descriptor, signature, publicKey, messageBytes, }: VerifyMessageForSignerParams): boolean;
 interface VerifyTypedDataForSignerParams extends VerifyTypedDataParams {
-    /** Current Q + 40 hex address expected by the dApp. */
+    /** QIP-55 Q + 128 hex address expected by the dApp. */
     expectedSigner: string;
     /** Exact 3-byte wallet descriptor. Missing legacy values fail closed. */
     descriptor?: Uint8Array | string | undefined;
@@ -1093,6 +1097,19 @@ declare function getAppStoreUrl(): string;
  */
 declare function attemptWalletRedirect(uri: string, timeoutMs?: number): Promise<boolean>;
 
+declare const QRL_ADDRESS_BYTES = 64;
+declare const QRL_ADDRESS_HEX_LENGTH: number;
+/**
+ * Validate the QRL 2.0 text form. The prefix is the network's uppercase Q.
+ * A case-uniform hex body is accepted for compatibility. Mixed-case input
+ * must carry the canonical SHAKE256 QIP-55 checksum.
+ */
+declare function isCurrentQrlAddress(value: unknown): value is string;
+/** Stable visual fingerprint for long QRL addresses. */
+declare function formatQrlAddressFingerprint(address: string): string;
+/** Format exactly 64 address bytes as the canonical mixed-case QIP-55 form. */
+declare function qip55AddressFromBytes(address: Uint8Array): string;
+
 declare const DEFAULT_RELAY_URL = "https://qrlwallet.com";
 declare const PROTOCOL_VERSION = 3;
 declare const PAIRING_CAPABILITY_LEN = 32;
@@ -1118,4 +1135,4 @@ declare function isValidJsonRpcMethod(value: unknown): value is string;
  */
 declare function classifyRpcMethod(method: string): RpcMethodPolicy;
 
-export { type AckMessage, BLOB_LEN, CAP_LEN, CID_LEN, ConnectionManager, ConnectionStatus, type DAppMetadata, type DAppSession, DEFAULT_RELAY_URL, DIGEST_LEN, type Domain, type EIP6963ProviderInfoOverride, EXPLICITLY_UNSUPPORTED_METHODS, FP_LEN, type InitiatedKeyExchange, type JsonRpcRequest, type JsonRpcResponse, KeyExchange, KeyExchangeMessageType, MAX_CONNECTION_URI_LENGTH, MAX_JSON_RPC_ID_LENGTH, MAX_JSON_RPC_METHOD_LENGTH, MAX_RELAY_URL_LENGTH, ML_DSA_87_PUBLIC_KEY_BYTES, ML_DSA_87_SIGNATURE_BYTES, ML_DSA_DESCRIPTOR_BYTES, type Message, MessageType, PAIRING_CAPABILITY_LEN, PROTOCOL_VERSION, type ParsedURI, type PendingRequest, type PersistedSession, type ProviderEvents, QRLConnectProvider as QRLConnect, type QRLConnectOptions, QRLConnectProvider, QRL_CONNECT_PROVIDER_INFO, type QrlSignMessageParams, type QrlSignTypedDataParams, type QrlSignedMessageResult, type QrlSignedResult, type QrlSignedResultWithDescriptor, type QrlSignedTypedDataResult, type QrlSigningResult, type QrlSigningSchemeVersion, type QrlTypedDataPayload, RESTRICTED_METHODS, type RelayMessage, type RpcMethodPolicy, SCHEME_TAG_MSG, SCHEME_TAG_TYPED, SCHEME_VERSION_MSG, SCHEME_VERSION_TYPED, type Session, SocketClient, type StructDef, type SynAckMessage, TYPED_DATA_LIMITS, type TypeMap, type TypedDataPayload, type TypedField, UNRESTRICTED_METHODS, type VerifyMessageForSignerParams, type VerifyMessageParams, type VerifyTypedDataForSignerParams, type VerifyTypedDataParams, attemptWalletRedirect, bytesToHex, cidFromString, cidRandom, cidToString, classifyRpcMethod, computeFingerprint, computeMessageDigest, computeTypedDataDigest, concatBytes, encodeField, encodeType, fingerprintEquals, generateConnectionURI, getAppStoreUrl, hasSigningDescriptor, hashStruct, hexToBytes, isMobileBrowser, isQrlSignedMessageResult, isQrlSignedResult, isQrlSignedTypedDataResult, isValidJsonRpcId, isValidJsonRpcMethod, normalizeRelayUrl, parseConnectionURI, typeHash, verifyMessage, verifyMessageForSigner, verifyMessageSignature, verifyTypedData, verifyTypedDataForSigner, verifyTypedDataSignature };
+export { type AckMessage, BLOB_LEN, CAP_LEN, CID_LEN, ConnectionManager, ConnectionStatus, type DAppMetadata, type DAppSession, DEFAULT_RELAY_URL, DIGEST_LEN, type Domain, type EIP6963ProviderInfoOverride, EXPLICITLY_UNSUPPORTED_METHODS, FP_LEN, type InitiatedKeyExchange, type JsonRpcRequest, type JsonRpcResponse, KeyExchange, KeyExchangeMessageType, MAX_CONNECTION_URI_LENGTH, MAX_JSON_RPC_ID_LENGTH, MAX_JSON_RPC_METHOD_LENGTH, MAX_RELAY_URL_LENGTH, ML_DSA_87_PUBLIC_KEY_BYTES, ML_DSA_87_SIGNATURE_BYTES, ML_DSA_DESCRIPTOR_BYTES, type Message, MessageType, PAIRING_CAPABILITY_LEN, PROTOCOL_VERSION, type ParsedURI, type PendingRequest, type PersistedSession, type ProviderEvents, QRLConnectProvider as QRLConnect, type QRLConnectOptions, QRLConnectProvider, QRL_ADDRESS_BYTES, QRL_ADDRESS_HEX_LENGTH, QRL_CONNECT_PROVIDER_INFO, type QrlSignMessageParams, type QrlSignTypedDataParams, type QrlSignedMessageResult, type QrlSignedResult, type QrlSignedResultWithDescriptor, type QrlSignedTypedDataResult, type QrlSigningResult, type QrlSigningSchemeVersion, type QrlTypedDataPayload, RESTRICTED_METHODS, type RelayMessage, type RpcMethodPolicy, SCHEME_TAG_MSG, SCHEME_TAG_TYPED, SCHEME_VERSION_MSG, SCHEME_VERSION_TYPED, type Session, SocketClient, type StructDef, type SynAckMessage, TYPED_DATA_LIMITS, type TypeMap, type TypedDataPayload, type TypedField, UNRESTRICTED_METHODS, type VerifyMessageForSignerParams, type VerifyMessageParams, type VerifyTypedDataForSignerParams, type VerifyTypedDataParams, attemptWalletRedirect, bytesToHex, cidFromString, cidRandom, cidToString, classifyRpcMethod, computeFingerprint, computeMessageDigest, computeTypedDataDigest, concatBytes, encodeField, encodeType, fingerprintEquals, formatQrlAddressFingerprint, generateConnectionURI, getAppStoreUrl, hasSigningDescriptor, hashStruct, hexToBytes, isCurrentQrlAddress, isMobileBrowser, isQrlSignedMessageResult, isQrlSignedResult, isQrlSignedTypedDataResult, isValidJsonRpcId, isValidJsonRpcMethod, normalizeRelayUrl, parseConnectionURI, qip55AddressFromBytes, typeHash, verifyMessage, verifyMessageForSigner, verifyMessageSignature, verifyTypedData, verifyTypedDataForSigner, verifyTypedDataSignature };

package/dist/index.d.ts

@@ -269,10 +269,10 @@ interface EIP6963ProviderInfoOverride {
     rdns?: string;
 }
 /**
- * Rich response object returned by both `qrl_signMessage` and
- * `qrl_signTypedData`. The signature alone is not enough to verify since
- * ML-DSA-87 public keys cannot be recovered from a signature, so the
- * wallet always returns the public key explicitly. Stateless verifiers need
+ * Rich response object returned by `qrl_signMessage` and retained for locked
+ * `qrl_signTypedData` v1 fixtures. The signature alone is not enough to
+ * verify since ML-DSA-87 public keys cannot be recovered from a signature,
+ * so the wallet returns the public key explicitly. Stateless verifiers need
  * the original payload plus the signature fields below.
  */
 interface QrlSignedResult {
@@ -286,7 +286,7 @@ interface QrlSignedResult {
      * requires it.
      */
     descriptor?: string;
-    /** Current 41-character checksummed Q-address derived from descriptor + key. */
+    /** QIP-55 129-character checksummed Q-address derived from descriptor + key. */
     signer: string;
     /** 0x-hex of the 64-byte SHAKE256 digest that was signed. */
     digest: string;
@@ -303,8 +303,8 @@ interface QrlSignedMessageResult extends QrlSignedResult {
     schemeVersion: 'QRL-SIGN-MSG-v1';
 }
 /**
- * Response from `qrl_signTypedData`. Echoes `domain` so a stateless
- * verifier doesn't need to be told the domain out-of-band.
+ * Historical v1 response from `qrl_signTypedData`. It echoes `domain` so a
+ * stateless verifier does not need to be told the domain out-of-band.
  */
 interface QrlSignedTypedDataResult extends QrlSignedResult {
     schemeVersion: 'QRL-SIGN-TYPED-v1';
@@ -338,10 +338,10 @@ declare function hasSigningDescriptor(result: unknown): result is QrlSigningResu
  */
 type QrlSignMessageParams = [string, string];
 /**
- * `qrl_signTypedData` params: `[signer, payload]`. Payload mirrors EIP-712
- * shape: `{ types, primaryType, domain, message }`, but with `QRLDomain`
- * in place of `EIP712Domain` and SHAKE256-based hashing. See `signing/`
- * for the full encoder.
+ * Reserved `qrl_signTypedData` params: `[signer, payload]`. This interface
+ * describes the historical v1 payload retained by the verifier exports. The
+ * QIP-55 provider rejects requests until a versioned 64-byte encoding is
+ * defined.
  */
 interface QrlTypedDataPayload {
     types: Record<string, readonly {
@@ -887,13 +887,17 @@ declare const DIGEST_LEN = 64;
 declare function computeMessageDigest(messageBytes: Uint8Array): Uint8Array;
 
 /**
- * EIP-712-shaped typed-data encoding for `qrl_signTypedData` v1.
+ * Historical EIP-712-shaped typed-data encoding for `qrl_signTypedData` v1.
  *
  * Byte-identical algorithm with the wallet's signing/typedData.ts; this
  * file is the SDK port (only the import block differs: the SDK routes
  * SHAKE256 through src/crypto/primitives.ts, its crypto boundary). See
  * the wallet copy for the spec-level comments; behavior must stay in
  * lock-step or the cross-repo parity test fails on next CI.
+ *
+ * The v1 address slot is 32 bytes. QIP-55 address fields fail closed until a
+ * 64-byte encoding receives a new scheme tag and lockstep wallet fixtures.
+ * Address-free digests retain their existing encoding.
  */
 declare const TYPED_DATA_LIMITS: Readonly<{
     maxTypes: 32;
@@ -965,7 +969,7 @@ interface VerifyTypedDataParams {
  */
 declare function verifyTypedDataSignature({ signature, publicKey, payload, }: VerifyTypedDataParams): boolean;
 interface VerifyMessageForSignerParams extends VerifyMessageParams {
-    /** Current Q + 40 hex address expected by the dApp. */
+    /** QIP-55 Q + 128 hex address expected by the dApp. */
     expectedSigner: string;
     /** Exact 3-byte wallet descriptor. Missing legacy values fail closed. */
     descriptor?: Uint8Array | string | undefined;
@@ -973,7 +977,7 @@ interface VerifyMessageForSignerParams extends VerifyMessageParams {
 /** Verify both the message signature and public-key-to-signer binding. */
 declare function verifyMessageForSigner({ expectedSigner, descriptor, signature, publicKey, messageBytes, }: VerifyMessageForSignerParams): boolean;
 interface VerifyTypedDataForSignerParams extends VerifyTypedDataParams {
-    /** Current Q + 40 hex address expected by the dApp. */
+    /** QIP-55 Q + 128 hex address expected by the dApp. */
     expectedSigner: string;
     /** Exact 3-byte wallet descriptor. Missing legacy values fail closed. */
     descriptor?: Uint8Array | string | undefined;
@@ -1093,6 +1097,19 @@ declare function getAppStoreUrl(): string;
  */
 declare function attemptWalletRedirect(uri: string, timeoutMs?: number): Promise<boolean>;
 
+declare const QRL_ADDRESS_BYTES = 64;
+declare const QRL_ADDRESS_HEX_LENGTH: number;
+/**
+ * Validate the QRL 2.0 text form. The prefix is the network's uppercase Q.
+ * A case-uniform hex body is accepted for compatibility. Mixed-case input
+ * must carry the canonical SHAKE256 QIP-55 checksum.
+ */
+declare function isCurrentQrlAddress(value: unknown): value is string;
+/** Stable visual fingerprint for long QRL addresses. */
+declare function formatQrlAddressFingerprint(address: string): string;
+/** Format exactly 64 address bytes as the canonical mixed-case QIP-55 form. */
+declare function qip55AddressFromBytes(address: Uint8Array): string;
+
 declare const DEFAULT_RELAY_URL = "https://qrlwallet.com";
 declare const PROTOCOL_VERSION = 3;
 declare const PAIRING_CAPABILITY_LEN = 32;
@@ -1118,4 +1135,4 @@ declare function isValidJsonRpcMethod(value: unknown): value is string;
  */
 declare function classifyRpcMethod(method: string): RpcMethodPolicy;
 
-export { type AckMessage, BLOB_LEN, CAP_LEN, CID_LEN, ConnectionManager, ConnectionStatus, type DAppMetadata, type DAppSession, DEFAULT_RELAY_URL, DIGEST_LEN, type Domain, type EIP6963ProviderInfoOverride, EXPLICITLY_UNSUPPORTED_METHODS, FP_LEN, type InitiatedKeyExchange, type JsonRpcRequest, type JsonRpcResponse, KeyExchange, KeyExchangeMessageType, MAX_CONNECTION_URI_LENGTH, MAX_JSON_RPC_ID_LENGTH, MAX_JSON_RPC_METHOD_LENGTH, MAX_RELAY_URL_LENGTH, ML_DSA_87_PUBLIC_KEY_BYTES, ML_DSA_87_SIGNATURE_BYTES, ML_DSA_DESCRIPTOR_BYTES, type Message, MessageType, PAIRING_CAPABILITY_LEN, PROTOCOL_VERSION, type ParsedURI, type PendingRequest, type PersistedSession, type ProviderEvents, QRLConnectProvider as QRLConnect, type QRLConnectOptions, QRLConnectProvider, QRL_CONNECT_PROVIDER_INFO, type QrlSignMessageParams, type QrlSignTypedDataParams, type QrlSignedMessageResult, type QrlSignedResult, type QrlSignedResultWithDescriptor, type QrlSignedTypedDataResult, type QrlSigningResult, type QrlSigningSchemeVersion, type QrlTypedDataPayload, RESTRICTED_METHODS, type RelayMessage, type RpcMethodPolicy, SCHEME_TAG_MSG, SCHEME_TAG_TYPED, SCHEME_VERSION_MSG, SCHEME_VERSION_TYPED, type Session, SocketClient, type StructDef, type SynAckMessage, TYPED_DATA_LIMITS, type TypeMap, type TypedDataPayload, type TypedField, UNRESTRICTED_METHODS, type VerifyMessageForSignerParams, type VerifyMessageParams, type VerifyTypedDataForSignerParams, type VerifyTypedDataParams, attemptWalletRedirect, bytesToHex, cidFromString, cidRandom, cidToString, classifyRpcMethod, computeFingerprint, computeMessageDigest, computeTypedDataDigest, concatBytes, encodeField, encodeType, fingerprintEquals, generateConnectionURI, getAppStoreUrl, hasSigningDescriptor, hashStruct, hexToBytes, isMobileBrowser, isQrlSignedMessageResult, isQrlSignedResult, isQrlSignedTypedDataResult, isValidJsonRpcId, isValidJsonRpcMethod, normalizeRelayUrl, parseConnectionURI, typeHash, verifyMessage, verifyMessageForSigner, verifyMessageSignature, verifyTypedData, verifyTypedDataForSigner, verifyTypedDataSignature };
+export { type AckMessage, BLOB_LEN, CAP_LEN, CID_LEN, ConnectionManager, ConnectionStatus, type DAppMetadata, type DAppSession, DEFAULT_RELAY_URL, DIGEST_LEN, type Domain, type EIP6963ProviderInfoOverride, EXPLICITLY_UNSUPPORTED_METHODS, FP_LEN, type InitiatedKeyExchange, type JsonRpcRequest, type JsonRpcResponse, KeyExchange, KeyExchangeMessageType, MAX_CONNECTION_URI_LENGTH, MAX_JSON_RPC_ID_LENGTH, MAX_JSON_RPC_METHOD_LENGTH, MAX_RELAY_URL_LENGTH, ML_DSA_87_PUBLIC_KEY_BYTES, ML_DSA_87_SIGNATURE_BYTES, ML_DSA_DESCRIPTOR_BYTES, type Message, MessageType, PAIRING_CAPABILITY_LEN, PROTOCOL_VERSION, type ParsedURI, type PendingRequest, type PersistedSession, type ProviderEvents, QRLConnectProvider as QRLConnect, type QRLConnectOptions, QRLConnectProvider, QRL_ADDRESS_BYTES, QRL_ADDRESS_HEX_LENGTH, QRL_CONNECT_PROVIDER_INFO, type QrlSignMessageParams, type QrlSignTypedDataParams, type QrlSignedMessageResult, type QrlSignedResult, type QrlSignedResultWithDescriptor, type QrlSignedTypedDataResult, type QrlSigningResult, type QrlSigningSchemeVersion, type QrlTypedDataPayload, RESTRICTED_METHODS, type RelayMessage, type RpcMethodPolicy, SCHEME_TAG_MSG, SCHEME_TAG_TYPED, SCHEME_VERSION_MSG, SCHEME_VERSION_TYPED, type Session, SocketClient, type StructDef, type SynAckMessage, TYPED_DATA_LIMITS, type TypeMap, type TypedDataPayload, type TypedField, UNRESTRICTED_METHODS, type VerifyMessageForSignerParams, type VerifyMessageParams, type VerifyTypedDataForSignerParams, type VerifyTypedDataParams, attemptWalletRedirect, bytesToHex, cidFromString, cidRandom, cidToString, classifyRpcMethod, computeFingerprint, computeMessageDigest, computeTypedDataDigest, concatBytes, encodeField, encodeType, fingerprintEquals, formatQrlAddressFingerprint, generateConnectionURI, getAppStoreUrl, hasSigningDescriptor, hashStruct, hexToBytes, isCurrentQrlAddress, isMobileBrowser, isQrlSignedMessageResult, isQrlSignedResult, isQrlSignedTypedDataResult, isValidJsonRpcId, isValidJsonRpcMethod, normalizeRelayUrl, parseConnectionURI, qip55AddressFromBytes, typeHash, verifyMessage, verifyMessageForSigner, verifyMessageSignature, verifyTypedData, verifyTypedDataForSigner, verifyTypedDataSignature };

package/dist/index.js

@@ -53,6 +53,8 @@ __export(index_exports, {
   PROTOCOL_VERSION: () => PROTOCOL_VERSION,
   QRLConnect: () => QRLConnectProvider,
   QRLConnectProvider: () => QRLConnectProvider,
+  QRL_ADDRESS_BYTES: () => QRL_ADDRESS_BYTES,
+  QRL_ADDRESS_HEX_LENGTH: () => QRL_ADDRESS_HEX_LENGTH,
   QRL_CONNECT_PROVIDER_INFO: () => QRL_CONNECT_PROVIDER_INFO,
   RESTRICTED_METHODS: () => RESTRICTED_METHODS,
   SCHEME_TAG_MSG: () => SCHEME_TAG_MSG,
@@ -75,11 +77,13 @@ __export(index_exports, {
   encodeField: () => encodeField,
   encodeType: () => encodeType,
   fingerprintEquals: () => fingerprintEquals,
+  formatQrlAddressFingerprint: () => formatQrlAddressFingerprint,
   generateConnectionURI: () => generateConnectionURI,
   getAppStoreUrl: () => getAppStoreUrl,
   hasSigningDescriptor: () => hasSigningDescriptor,
   hashStruct: () => hashStruct,
   hexToBytes: () => hexToBytes,
+  isCurrentQrlAddress: () => isCurrentQrlAddress,
   isMobileBrowser: () => isMobileBrowser,
   isQrlSignedMessageResult: () => isQrlSignedMessageResult,
   isQrlSignedResult: () => isQrlSignedResult,
@@ -88,6 +92,7 @@ __export(index_exports, {
   isValidJsonRpcMethod: () => isValidJsonRpcMethod,
   normalizeRelayUrl: () => normalizeRelayUrl,
   parseConnectionURI: () => parseConnectionURI,
+  qip55AddressFromBytes: () => qip55AddressFromBytes,
   typeHash: () => typeHash,
   verifyMessage: () => verifyMessage,
   verifyMessageForSigner: () => verifyMessageForSigner,
@@ -209,6 +214,54 @@ function constantTimeEquals(a, b) {
   return d === 0;
 }
 
+// src/utils/qrlAddress.ts
+var QRL_ADDRESS_BYTES = 64;
+var QRL_ADDRESS_HEX_LENGTH = QRL_ADDRESS_BYTES * 2;
+var QRL_ADDRESS_RE = new RegExp(`^Q[0-9a-fA-F]{${QRL_ADDRESS_HEX_LENGTH}}$`);
+var textEncoder = new TextEncoder();
+function checksummedHex(lowerHex) {
+  const hash = shake256Digest(textEncoder.encode(lowerHex), QRL_ADDRESS_BYTES);
+  let result = "";
+  for (let index = 0; index < lowerHex.length; index++) {
+    const char = lowerHex[index] ?? "";
+    if (char >= "a" && char <= "f") {
+      const byte = hash[index >> 1] ?? 0;
+      const nibble = (index & 1) === 0 ? byte >> 4 : byte & 15;
+      result += nibble >= 8 ? char.toUpperCase() : char;
+    } else {
+      result += char;
+    }
+  }
+  return result;
+}
+function isCurrentQrlAddress(value) {
+  if (typeof value !== "string" || !QRL_ADDRESS_RE.test(value)) return false;
+  const body = value.slice(1);
+  const lower = body.toLowerCase();
+  if (body === lower || body === body.toUpperCase()) return true;
+  return body === checksummedHex(lower);
+}
+function formatQrlAddressFingerprint(address) {
+  if (!/^Q(?:[0-9a-fA-F]{40}|[0-9a-fA-F]{128})$/.test(address)) return address;
+  const body = address.slice(1);
+  const segmentLength = 8;
+  if (body.length < segmentLength * 3) return address;
+  const middleStart = Math.floor((body.length - segmentLength) / 2);
+  return [
+    `Q${body.slice(0, segmentLength)}`,
+    body.slice(middleStart, middleStart + segmentLength),
+    body.slice(-segmentLength)
+  ].join("...");
+}
+function qip55AddressFromBytes(address) {
+  if (!(address instanceof Uint8Array) || address.length !== QRL_ADDRESS_BYTES) {
+    throw new Error(`address must be exactly ${QRL_ADDRESS_BYTES} bytes`);
+  }
+  let lower = "";
+  for (const byte of address) lower += byte.toString(16).padStart(2, "0");
+  return `Q${checksummedHex(lower)}`;
+}
+
 // src/config.ts
 var DEFAULT_RELAY_URL = "https://qrlwallet.com";
 var RELAY_PATH = "/relay";
@@ -222,10 +275,6 @@ var MAX_JSON_RPC_ID_LENGTH = 128;
 var MAX_JSON_RPC_METHOD_LENGTH = 128;
 var MAX_RELAY_URL_LENGTH = 2048;
 var RECONNECT_WALLET_PROBE_MS = 12 * 1e3;
-var CURRENT_QRL_ADDRESS_RE = /^Q[0-9a-fA-F]{40}$/;
-function isCurrentQrlAddress(value) {
-  return typeof value === "string" && CURRENT_QRL_ADDRESS_RE.test(value);
-}
 function isExplicitLoopbackHostname(value) {
   const hostname = value.toLowerCase();
   return hostname === "localhost" || hostname.endsWith(".localhost") || hostname === "127.0.0.1" || hostname === "::1" || hostname === "[::1]";
@@ -301,9 +350,9 @@ function classifyRpcMethod(method) {
 }
 
 // src/PQCrypto.ts
-var textEncoder = new TextEncoder();
-var LABEL = textEncoder.encode("pq-pair/v3");
-var LABEL_AEAD_SUFFIX = textEncoder.encode(" aead");
+var textEncoder2 = new TextEncoder();
+var LABEL = textEncoder2.encode("pq-pair/v3");
+var LABEL_AEAD_SUFFIX = textEncoder2.encode(" aead");
 var DIR_DAPP_TX = new Uint8Array([0, 0, 0, 1]);
 var DIR_WALLET_TX = new Uint8Array([0, 0, 0, 2]);
 var ML_KEM_768_PK_LEN = 1184;
@@ -502,7 +551,7 @@ function isSigningDescriptor(value) {
   return typeof value === "string" && /^0x01[0-9a-fA-F]{4}$/.test(value);
 }
 function hasValidSigningFields(record) {
-  return isFixedHex(record.signature, SIGNATURE_HEX_BYTES) && isFixedHex(record.publicKey, PUBLIC_KEY_HEX_BYTES) && (!hasOwn(record, "descriptor") || isSigningDescriptor(record.descriptor)) && typeof record.signer === "string" && /^Q[0-9a-fA-F]{40}$/.test(record.signer) && isFixedHex(record.digest, DIGEST_HEX_BYTES);
+  return isFixedHex(record.signature, SIGNATURE_HEX_BYTES) && isFixedHex(record.publicKey, PUBLIC_KEY_HEX_BYTES) && (!hasOwn(record, "descriptor") || isSigningDescriptor(record.descriptor)) && typeof record.signer === "string" && isCurrentQrlAddress(record.signer) && isFixedHex(record.digest, DIGEST_HEX_BYTES);
 }
 function isQrlSignedMessageResult(value) {
   try {
@@ -551,10 +600,10 @@ function error(tag, ...args) {
 }
 
 // src/KeyExchange.ts
-var textEncoder2 = new TextEncoder();
+var textEncoder3 = new TextEncoder();
 var textDecoder = new TextDecoder();
-var HELLO_WALLET = textEncoder2.encode("hello/wallet/v1");
-var HELLO_DAPP = textEncoder2.encode("hello/dapp/v1");
+var HELLO_WALLET = textEncoder3.encode("hello/wallet/v1");
+var HELLO_DAPP = textEncoder3.encode("hello/dapp/v1");
 var AES_GCM_TAG_LEN = 16;
 var SYNACK_C0_LEN = HELLO_WALLET.length + AES_GCM_TAG_LEN;
 var ACK_C1_LEN = HELLO_DAPP.length + AES_GCM_TAG_LEN;
@@ -828,7 +877,7 @@ var KeyExchange = class extends import_eventemitter3.default {
       throw new Error("KeyExchange: send counter exhausted");
     }
     const seq = session.sendSeq++;
-    const pt = textEncoder2.encode(data);
+    const pt = textEncoder3.encode(data);
     try {
       const ct = await seal(session.key, session.sendDir, seq, session.htx, pt);
       if (this.stateGeneration !== generation || this.session !== session) {
@@ -3272,10 +3321,14 @@ function typeHash(primary, types) {
   return shake256Digest(new TextEncoder().encode(encodeType(primary, types)), DIGEST_LEN);
 }
 function parseQAddress(addr) {
-  if (typeof addr !== "string" || !/^Q[0-9a-fA-F]{40}$/.test(addr)) {
-    throw new Error(`invalid Q-address: ${addr}`);
+  if (!isCurrentQrlAddress(addr)) {
+    throw new Error(`invalid Q-address: ${String(addr)}`);
+  }
+  const bytes = hexToBytes("0x" + addr.slice(1).toLowerCase());
+  if (bytes.length > SLOT) {
+    throw new Error("qrl_signTypedData v1 does not support QIP-55 address fields");
   }
-  return hexToBytes("0x" + addr.slice(1).toLowerCase());
+  return bytes;
 }
 function padLeft32(bytes) {
   if (bytes.length > SLOT) throw new Error("cannot pad: bytes > 32");
@@ -3592,7 +3645,7 @@ function requestedSwitchChainId(params) {
   }
   return canonicalChainId2(request.chainId);
 }
-var TRANSACTION_FIELDS = /* @__PURE__ */ new Set(["from", "to", "value", "gas", "data"]);
+var TRANSACTION_FIELDS = /* @__PURE__ */ new Set(["from", "to", "value", "gas", "data", "chainId"]);
 var QRL_TRANSACTION_MAX_DATA_BYTES = 128 * 1024;
 var QRL_TRANSACTION_MAX_QUANTITY_HEX_DIGITS = 64;
 var RPC_QUANTITY_RE = /^0x(?:0|[1-9a-fA-F][0-9a-fA-F]*)$/;
@@ -3607,8 +3660,11 @@ function validateRpcQuantity(value, field) {
   if (field === "gas" && BigInt(value) > BigInt(Number.MAX_SAFE_INTEGER)) {
     throw new Error("transaction gas exceeds the wallet safe-integer limit");
   }
+  if (field === "chainId" && BigInt(value) === 0n) {
+    throw new Error("transaction chainId must be positive");
+  }
 }
-function validateTransactionRequest(method, params, authorizedAccount) {
+function validateTransactionRequest(method, params, authorizedAccount, currentChainId) {
   if (params?.length !== 1 || !isRecordObj(params[0])) {
     throw new Error(`${method} requires exactly one transaction object`);
   }
@@ -3626,6 +3682,12 @@ function validateTransactionRequest(method, params, authorizedAccount) {
   }
   if ("value" in tx) validateRpcQuantity(tx.value, "value");
   if ("gas" in tx) validateRpcQuantity(tx.gas, "gas");
+  if ("chainId" in tx) {
+    validateRpcQuantity(tx.chainId, "chainId");
+    if (canonicalChainId2(tx.chainId) !== canonicalChainId2(currentChainId)) {
+      throw new Error("transaction chainId does not match the connected wallet");
+    }
+  }
   if ("data" in tx && (typeof tx.data !== "string" || tx.data.length > QRL_TRANSACTION_MAX_DATA_BYTES * 2 + 2 || !/^0x(?:[0-9a-fA-F]{2})*$/.test(tx.data))) {
     throw new Error("transaction data must be bounded 0x-prefixed bytes");
   }
@@ -3643,7 +3705,7 @@ function snapshotRequestParams(params) {
     throw new Error(`Request params must be JSON-serializable: ${detail}`);
   }
 }
-function validateRestrictedRequest(method, params, authorizedAccounts) {
+function validateRestrictedRequest(method, params, authorizedAccounts, currentChainId) {
   if (method === "qrl_requestAccounts") {
     if (params !== void 0 && params.length !== 0) {
       throw new Error("qrl_requestAccounts does not accept parameters");
@@ -3658,7 +3720,7 @@ function validateRestrictedRequest(method, params, authorizedAccounts) {
     throw new Error("No authorized account: call qrl_requestAccounts first");
   }
   if (method === "qrl_sendTransaction" || method === "qrl_signTransaction") {
-    validateTransactionRequest(method, params, authorizedAccount);
+    validateTransactionRequest(method, params, authorizedAccount, currentChainId);
     return void 0;
   }
   if (method === "qrl_signMessage") {
@@ -3687,8 +3749,9 @@ function validateRestrictedRequest(method, params, authorizedAccounts) {
   if (params[0] !== authorizedAccount) {
     throw new Error("qrl_signTypedData signer is not the authorized account");
   }
-  computeTypedDataDigest(params[1]);
-  return void 0;
+  throw new Error(
+    "qrl_signTypedData is unavailable for QIP-55 until the 64-byte word encoding and signing scheme version are finalized"
+  );
 }
 function requiresAuthorizedAccount(method) {
   return method === "qrl_sendTransaction" || method === "qrl_signTransaction" || method === "qrl_signMessage" || method === "qrl_signTypedData";
@@ -3896,7 +3959,12 @@ var QRLConnectProvider = class extends import_eventemitter34.default {
     }
     this.pendingRequests.delete(response.id);
     if (response.error) {
-      pending.reject(new Error(response.error.message || "Request failed"));
+      pending.reject(
+        Object.assign(new Error(response.error.message || "Request failed"), {
+          code: response.error.code,
+          ...response.error.data === void 0 ? {} : { data: response.error.data }
+        })
+      );
       return;
     }
     try {
@@ -4000,7 +4068,8 @@ var QRLConnectProvider = class extends import_eventemitter34.default {
       const expectedChainId = validateRestrictedRequest(
         method,
         stableParams,
-        this.connectionManager.getAccounts()
+        this.connectionManager.getAccounts(),
+        this.connectionManager.getChainId()
       );
       return this.enqueueRestrictedRequest(method, stableParams, expectedChainId, generation);
     }
@@ -4065,6 +4134,14 @@ var QRLConnectProvider = class extends import_eventemitter34.default {
         throw new Error("Not connected to QRL Wallet");
       }
     }
+    if (restricted) {
+      validateRestrictedRequest(
+        method,
+        params,
+        this.connectionManager.getAccounts(),
+        this.connectionManager.getChainId()
+      );
+    }
     if (this.requestCounter >= Number.MAX_SAFE_INTEGER) {
       throw new Error("JSON-RPC request id counter exhausted");
     }
@@ -4143,9 +4220,10 @@ var QRLConnectProvider = class extends import_eventemitter34.default {
   }
   // ── In-flight persistence (survive the return-redirect reload) ──────
   readInflight() {
-    if (typeof localStorage === "undefined") return [];
+    const storage = getBrowserStorage();
+    if (!storage) return [];
     try {
-      const raw = localStorage.getItem(this.inflightKey);
+      const raw = storage.getItem(this.inflightKey);
       if (!raw) return [];
       const parsed = JSON.parse(raw);
       if (!Array.isArray(parsed)) return [];
@@ -4161,12 +4239,13 @@ var QRLConnectProvider = class extends import_eventemitter34.default {
     }
   }
   writeInflight(records) {
-    if (typeof localStorage === "undefined") return;
+    const storage = getBrowserStorage();
+    if (!storage) return;
     try {
       if (records.length === 0) {
-        localStorage.removeItem(this.inflightKey);
+        storage.removeItem(this.inflightKey);
       } else {
-        localStorage.setItem(this.inflightKey, JSON.stringify(records));
+        storage.setItem(this.inflightKey, JSON.stringify(records));
       }
     } catch {
     }
@@ -4300,7 +4379,6 @@ var ML_DSA_87_DESCRIPTOR_TYPE = 1;
 var ML_DSA_DESCRIPTOR_BYTES = 3;
 var ML_DSA_87_PUBLIC_KEY_BYTES = 2592;
 var ML_DSA_87_SIGNATURE_BYTES = 4627;
-var CURRENT_QRL_ADDRESS_BYTES = 20;
 function bytesOrHex(v) {
   if (v instanceof Uint8Array) return new Uint8Array(v);
   if (typeof v === "string") return hexToBytes(v);
@@ -4357,11 +4435,8 @@ function publicKeyMatchesSigner(expectedSigner, descriptor, publicKey) {
   if (descriptor[0] !== ML_DSA_87_DESCRIPTOR_TYPE) {
     return false;
   }
-  const addressBytes = shake256Digest(
-    concatBytes(descriptor, publicKey),
-    CURRENT_QRL_ADDRESS_BYTES
-  );
-  const derived = `Q${bytesToHex(addressBytes).slice(2)}`;
+  const addressBytes = shake256Digest(concatBytes(descriptor, publicKey), QRL_ADDRESS_BYTES);
+  const derived = qip55AddressFromBytes(addressBytes);
   return derived.toLowerCase() === expectedSigner.toLowerCase();
 }
 function verifyMessageForSigner({
@@ -4432,6 +4507,8 @@ function verifyTypedData(params) {
   PROTOCOL_VERSION,
   QRLConnect,
   QRLConnectProvider,
+  QRL_ADDRESS_BYTES,
+  QRL_ADDRESS_HEX_LENGTH,
   QRL_CONNECT_PROVIDER_INFO,
   RESTRICTED_METHODS,
   SCHEME_TAG_MSG,
@@ -4454,11 +4531,13 @@ function verifyTypedData(params) {
   encodeField,
   encodeType,
   fingerprintEquals,
+  formatQrlAddressFingerprint,
   generateConnectionURI,
   getAppStoreUrl,
   hasSigningDescriptor,
   hashStruct,
   hexToBytes,
+  isCurrentQrlAddress,
   isMobileBrowser,
   isQrlSignedMessageResult,
   isQrlSignedResult,
@@ -4467,6 +4546,7 @@ function verifyTypedData(params) {
   isValidJsonRpcMethod,
   normalizeRelayUrl,
   parseConnectionURI,
+  qip55AddressFromBytes,
   typeHash,
   verifyMessage,
   verifyMessageForSigner,

package/dist/index.mjs

@@ -109,6 +109,54 @@ function constantTimeEquals(a, b) {
   return d === 0;
 }
 
+// src/utils/qrlAddress.ts
+var QRL_ADDRESS_BYTES = 64;
+var QRL_ADDRESS_HEX_LENGTH = QRL_ADDRESS_BYTES * 2;
+var QRL_ADDRESS_RE = new RegExp(`^Q[0-9a-fA-F]{${QRL_ADDRESS_HEX_LENGTH}}$`);
+var textEncoder = new TextEncoder();
+function checksummedHex(lowerHex) {
+  const hash = shake256Digest(textEncoder.encode(lowerHex), QRL_ADDRESS_BYTES);
+  let result = "";
+  for (let index = 0; index < lowerHex.length; index++) {
+    const char = lowerHex[index] ?? "";
+    if (char >= "a" && char <= "f") {
+      const byte = hash[index >> 1] ?? 0;
+      const nibble = (index & 1) === 0 ? byte >> 4 : byte & 15;
+      result += nibble >= 8 ? char.toUpperCase() : char;
+    } else {
+      result += char;
+    }
+  }
+  return result;
+}
+function isCurrentQrlAddress(value) {
+  if (typeof value !== "string" || !QRL_ADDRESS_RE.test(value)) return false;
+  const body = value.slice(1);
+  const lower = body.toLowerCase();
+  if (body === lower || body === body.toUpperCase()) return true;
+  return body === checksummedHex(lower);
+}
+function formatQrlAddressFingerprint(address) {
+  if (!/^Q(?:[0-9a-fA-F]{40}|[0-9a-fA-F]{128})$/.test(address)) return address;
+  const body = address.slice(1);
+  const segmentLength = 8;
+  if (body.length < segmentLength * 3) return address;
+  const middleStart = Math.floor((body.length - segmentLength) / 2);
+  return [
+    `Q${body.slice(0, segmentLength)}`,
+    body.slice(middleStart, middleStart + segmentLength),
+    body.slice(-segmentLength)
+  ].join("...");
+}
+function qip55AddressFromBytes(address) {
+  if (!(address instanceof Uint8Array) || address.length !== QRL_ADDRESS_BYTES) {
+    throw new Error(`address must be exactly ${QRL_ADDRESS_BYTES} bytes`);
+  }
+  let lower = "";
+  for (const byte of address) lower += byte.toString(16).padStart(2, "0");
+  return `Q${checksummedHex(lower)}`;
+}
+
 // src/config.ts
 var DEFAULT_RELAY_URL = "https://qrlwallet.com";
 var RELAY_PATH = "/relay";
@@ -122,10 +170,6 @@ var MAX_JSON_RPC_ID_LENGTH = 128;
 var MAX_JSON_RPC_METHOD_LENGTH = 128;
 var MAX_RELAY_URL_LENGTH = 2048;
 var RECONNECT_WALLET_PROBE_MS = 12 * 1e3;
-var CURRENT_QRL_ADDRESS_RE = /^Q[0-9a-fA-F]{40}$/;
-function isCurrentQrlAddress(value) {
-  return typeof value === "string" && CURRENT_QRL_ADDRESS_RE.test(value);
-}
 function isExplicitLoopbackHostname(value) {
   const hostname = value.toLowerCase();
   return hostname === "localhost" || hostname.endsWith(".localhost") || hostname === "127.0.0.1" || hostname === "::1" || hostname === "[::1]";
@@ -201,9 +245,9 @@ function classifyRpcMethod(method) {
 }
 
 // src/PQCrypto.ts
-var textEncoder = new TextEncoder();
-var LABEL = textEncoder.encode("pq-pair/v3");
-var LABEL_AEAD_SUFFIX = textEncoder.encode(" aead");
+var textEncoder2 = new TextEncoder();
+var LABEL = textEncoder2.encode("pq-pair/v3");
+var LABEL_AEAD_SUFFIX = textEncoder2.encode(" aead");
 var DIR_DAPP_TX = new Uint8Array([0, 0, 0, 1]);
 var DIR_WALLET_TX = new Uint8Array([0, 0, 0, 2]);
 var ML_KEM_768_PK_LEN = 1184;
@@ -402,7 +446,7 @@ function isSigningDescriptor(value) {
   return typeof value === "string" && /^0x01[0-9a-fA-F]{4}$/.test(value);
 }
 function hasValidSigningFields(record) {
-  return isFixedHex(record.signature, SIGNATURE_HEX_BYTES) && isFixedHex(record.publicKey, PUBLIC_KEY_HEX_BYTES) && (!hasOwn(record, "descriptor") || isSigningDescriptor(record.descriptor)) && typeof record.signer === "string" && /^Q[0-9a-fA-F]{40}$/.test(record.signer) && isFixedHex(record.digest, DIGEST_HEX_BYTES);
+  return isFixedHex(record.signature, SIGNATURE_HEX_BYTES) && isFixedHex(record.publicKey, PUBLIC_KEY_HEX_BYTES) && (!hasOwn(record, "descriptor") || isSigningDescriptor(record.descriptor)) && typeof record.signer === "string" && isCurrentQrlAddress(record.signer) && isFixedHex(record.digest, DIGEST_HEX_BYTES);
 }
 function isQrlSignedMessageResult(value) {
   try {
@@ -451,10 +495,10 @@ function error(tag, ...args) {
 }
 
 // src/KeyExchange.ts
-var textEncoder2 = new TextEncoder();
+var textEncoder3 = new TextEncoder();
 var textDecoder = new TextDecoder();
-var HELLO_WALLET = textEncoder2.encode("hello/wallet/v1");
-var HELLO_DAPP = textEncoder2.encode("hello/dapp/v1");
+var HELLO_WALLET = textEncoder3.encode("hello/wallet/v1");
+var HELLO_DAPP = textEncoder3.encode("hello/dapp/v1");
 var AES_GCM_TAG_LEN = 16;
 var SYNACK_C0_LEN = HELLO_WALLET.length + AES_GCM_TAG_LEN;
 var ACK_C1_LEN = HELLO_DAPP.length + AES_GCM_TAG_LEN;
@@ -728,7 +772,7 @@ var KeyExchange = class extends EventEmitter {
       throw new Error("KeyExchange: send counter exhausted");
     }
     const seq = session.sendSeq++;
-    const pt = textEncoder2.encode(data);
+    const pt = textEncoder3.encode(data);
     try {
       const ct = await seal(session.key, session.sendDir, seq, session.htx, pt);
       if (this.stateGeneration !== generation || this.session !== session) {
@@ -3172,10 +3216,14 @@ function typeHash(primary, types) {
   return shake256Digest(new TextEncoder().encode(encodeType(primary, types)), DIGEST_LEN);
 }
 function parseQAddress(addr) {
-  if (typeof addr !== "string" || !/^Q[0-9a-fA-F]{40}$/.test(addr)) {
-    throw new Error(`invalid Q-address: ${addr}`);
+  if (!isCurrentQrlAddress(addr)) {
+    throw new Error(`invalid Q-address: ${String(addr)}`);
+  }
+  const bytes = hexToBytes("0x" + addr.slice(1).toLowerCase());
+  if (bytes.length > SLOT) {
+    throw new Error("qrl_signTypedData v1 does not support QIP-55 address fields");
   }
-  return hexToBytes("0x" + addr.slice(1).toLowerCase());
+  return bytes;
 }
 function padLeft32(bytes) {
   if (bytes.length > SLOT) throw new Error("cannot pad: bytes > 32");
@@ -3492,7 +3540,7 @@ function requestedSwitchChainId(params) {
   }
   return canonicalChainId2(request.chainId);
 }
-var TRANSACTION_FIELDS = /* @__PURE__ */ new Set(["from", "to", "value", "gas", "data"]);
+var TRANSACTION_FIELDS = /* @__PURE__ */ new Set(["from", "to", "value", "gas", "data", "chainId"]);
 var QRL_TRANSACTION_MAX_DATA_BYTES = 128 * 1024;
 var QRL_TRANSACTION_MAX_QUANTITY_HEX_DIGITS = 64;
 var RPC_QUANTITY_RE = /^0x(?:0|[1-9a-fA-F][0-9a-fA-F]*)$/;
@@ -3507,8 +3555,11 @@ function validateRpcQuantity(value, field) {
   if (field === "gas" && BigInt(value) > BigInt(Number.MAX_SAFE_INTEGER)) {
     throw new Error("transaction gas exceeds the wallet safe-integer limit");
   }
+  if (field === "chainId" && BigInt(value) === 0n) {
+    throw new Error("transaction chainId must be positive");
+  }
 }
-function validateTransactionRequest(method, params, authorizedAccount) {
+function validateTransactionRequest(method, params, authorizedAccount, currentChainId) {
   if (params?.length !== 1 || !isRecordObj(params[0])) {
     throw new Error(`${method} requires exactly one transaction object`);
   }
@@ -3526,6 +3577,12 @@ function validateTransactionRequest(method, params, authorizedAccount) {
   }
   if ("value" in tx) validateRpcQuantity(tx.value, "value");
   if ("gas" in tx) validateRpcQuantity(tx.gas, "gas");
+  if ("chainId" in tx) {
+    validateRpcQuantity(tx.chainId, "chainId");
+    if (canonicalChainId2(tx.chainId) !== canonicalChainId2(currentChainId)) {
+      throw new Error("transaction chainId does not match the connected wallet");
+    }
+  }
   if ("data" in tx && (typeof tx.data !== "string" || tx.data.length > QRL_TRANSACTION_MAX_DATA_BYTES * 2 + 2 || !/^0x(?:[0-9a-fA-F]{2})*$/.test(tx.data))) {
     throw new Error("transaction data must be bounded 0x-prefixed bytes");
   }
@@ -3543,7 +3600,7 @@ function snapshotRequestParams(params) {
     throw new Error(`Request params must be JSON-serializable: ${detail}`);
   }
 }
-function validateRestrictedRequest(method, params, authorizedAccounts) {
+function validateRestrictedRequest(method, params, authorizedAccounts, currentChainId) {
   if (method === "qrl_requestAccounts") {
     if (params !== void 0 && params.length !== 0) {
       throw new Error("qrl_requestAccounts does not accept parameters");
@@ -3558,7 +3615,7 @@ function validateRestrictedRequest(method, params, authorizedAccounts) {
     throw new Error("No authorized account: call qrl_requestAccounts first");
   }
   if (method === "qrl_sendTransaction" || method === "qrl_signTransaction") {
-    validateTransactionRequest(method, params, authorizedAccount);
+    validateTransactionRequest(method, params, authorizedAccount, currentChainId);
     return void 0;
   }
   if (method === "qrl_signMessage") {
@@ -3587,8 +3644,9 @@ function validateRestrictedRequest(method, params, authorizedAccounts) {
   if (params[0] !== authorizedAccount) {
     throw new Error("qrl_signTypedData signer is not the authorized account");
   }
-  computeTypedDataDigest(params[1]);
-  return void 0;
+  throw new Error(
+    "qrl_signTypedData is unavailable for QIP-55 until the 64-byte word encoding and signing scheme version are finalized"
+  );
 }
 function requiresAuthorizedAccount(method) {
   return method === "qrl_sendTransaction" || method === "qrl_signTransaction" || method === "qrl_signMessage" || method === "qrl_signTypedData";
@@ -3796,7 +3854,12 @@ var QRLConnectProvider = class extends EventEmitter4 {
     }
     this.pendingRequests.delete(response.id);
     if (response.error) {
-      pending.reject(new Error(response.error.message || "Request failed"));
+      pending.reject(
+        Object.assign(new Error(response.error.message || "Request failed"), {
+          code: response.error.code,
+          ...response.error.data === void 0 ? {} : { data: response.error.data }
+        })
+      );
       return;
     }
     try {
@@ -3900,7 +3963,8 @@ var QRLConnectProvider = class extends EventEmitter4 {
       const expectedChainId = validateRestrictedRequest(
         method,
         stableParams,
-        this.connectionManager.getAccounts()
+        this.connectionManager.getAccounts(),
+        this.connectionManager.getChainId()
       );
       return this.enqueueRestrictedRequest(method, stableParams, expectedChainId, generation);
     }
@@ -3965,6 +4029,14 @@ var QRLConnectProvider = class extends EventEmitter4 {
         throw new Error("Not connected to QRL Wallet");
       }
     }
+    if (restricted) {
+      validateRestrictedRequest(
+        method,
+        params,
+        this.connectionManager.getAccounts(),
+        this.connectionManager.getChainId()
+      );
+    }
     if (this.requestCounter >= Number.MAX_SAFE_INTEGER) {
       throw new Error("JSON-RPC request id counter exhausted");
     }
@@ -4043,9 +4115,10 @@ var QRLConnectProvider = class extends EventEmitter4 {
   }
   // ── In-flight persistence (survive the return-redirect reload) ──────
   readInflight() {
-    if (typeof localStorage === "undefined") return [];
+    const storage = getBrowserStorage();
+    if (!storage) return [];
     try {
-      const raw = localStorage.getItem(this.inflightKey);
+      const raw = storage.getItem(this.inflightKey);
       if (!raw) return [];
       const parsed = JSON.parse(raw);
       if (!Array.isArray(parsed)) return [];
@@ -4061,12 +4134,13 @@ var QRLConnectProvider = class extends EventEmitter4 {
     }
   }
   writeInflight(records) {
-    if (typeof localStorage === "undefined") return;
+    const storage = getBrowserStorage();
+    if (!storage) return;
     try {
       if (records.length === 0) {
-        localStorage.removeItem(this.inflightKey);
+        storage.removeItem(this.inflightKey);
       } else {
-        localStorage.setItem(this.inflightKey, JSON.stringify(records));
+        storage.setItem(this.inflightKey, JSON.stringify(records));
       }
     } catch {
     }
@@ -4200,7 +4274,6 @@ var ML_DSA_87_DESCRIPTOR_TYPE = 1;
 var ML_DSA_DESCRIPTOR_BYTES = 3;
 var ML_DSA_87_PUBLIC_KEY_BYTES = 2592;
 var ML_DSA_87_SIGNATURE_BYTES = 4627;
-var CURRENT_QRL_ADDRESS_BYTES = 20;
 function bytesOrHex(v) {
   if (v instanceof Uint8Array) return new Uint8Array(v);
   if (typeof v === "string") return hexToBytes(v);
@@ -4257,11 +4330,8 @@ function publicKeyMatchesSigner(expectedSigner, descriptor, publicKey) {
   if (descriptor[0] !== ML_DSA_87_DESCRIPTOR_TYPE) {
     return false;
   }
-  const addressBytes = shake256Digest(
-    concatBytes(descriptor, publicKey),
-    CURRENT_QRL_ADDRESS_BYTES
-  );
-  const derived = `Q${bytesToHex(addressBytes).slice(2)}`;
+  const addressBytes = shake256Digest(concatBytes(descriptor, publicKey), QRL_ADDRESS_BYTES);
+  const derived = qip55AddressFromBytes(addressBytes);
   return derived.toLowerCase() === expectedSigner.toLowerCase();
 }
 function verifyMessageForSigner({
@@ -4331,6 +4401,8 @@ export {
   PROTOCOL_VERSION,
   QRLConnectProvider as QRLConnect,
   QRLConnectProvider,
+  QRL_ADDRESS_BYTES,
+  QRL_ADDRESS_HEX_LENGTH,
   QRL_CONNECT_PROVIDER_INFO,
   RESTRICTED_METHODS,
   SCHEME_TAG_MSG,
@@ -4353,11 +4425,13 @@ export {
   encodeField,
   encodeType,
   fingerprintEquals,
+  formatQrlAddressFingerprint,
   generateConnectionURI,
   getAppStoreUrl,
   hasSigningDescriptor,
   hashStruct,
   hexToBytes,
+  isCurrentQrlAddress,
   isMobileBrowser,
   isQrlSignedMessageResult,
   isQrlSignedResult,
@@ -4366,6 +4440,7 @@ export {
   isValidJsonRpcMethod,
   normalizeRelayUrl,
   parseConnectionURI,
+  qip55AddressFromBytes,
   typeHash,
   verifyMessage,
   verifyMessageForSigner,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qrlwallet/connect",
-  "version": "4.0.0",
+  "version": "5.0.1",
   "packageManager": "npm@10.9.8",
   "description": "Connect your dApp to QRL Wallet via QR code or deep link",
   "main": "dist/index.js",
@@ -44,13 +44,13 @@
   "dependencies": {
     "@noble/hashes": "^2.2.0",
     "@noble/post-quantum": "^0.5.4",
-    "@theqrl/mldsa87": "^2.1.1",
+    "@theqrl/mldsa87": "^2.1.4",
     "eventemitter3": "^5.0.1",
     "socket.io-client": "^4.8.1"
   },
   "devDependencies": {
     "@size-limit/file": "^11.0.0",
-    "@theqrl/wallet.js": "^3.0.1",
+    "@theqrl/wallet.js": "^6.2.4",
     "@types/node": "^25.3.3",
     "@typescript-eslint/eslint-plugin": "^8.0.0",
     "@typescript-eslint/parser": "^8.0.0",
@@ -60,10 +60,13 @@
     "size-limit": "^11.0.0",
     "tsup": "^8.4.0",
     "typescript": "^5.7.0",
-    "vitest": "^3.0.0"
+    "vitest": "4.1.11"
   },
   "overrides": {
-    "esbuild": "0.28.1"
+    "esbuild": "0.28.1",
+    "vitest": {
+      "vite": "7.3.5"
+    }
   },
   "size-limit": [
     {