@qrlwallet/connect 5.1.0 → 5.1.2

package/README.md

@@ -286,6 +286,9 @@ npm run dev
 # Type-check
 npm run typecheck
 
+# Type-check tests
+npm run typecheck:test
+
 # Unit tests (vitest)
 npm test
 
@@ -296,6 +299,8 @@ npm run lint
 node test-e2e.mjs
 ```
 
+CI runs `node scripts/audit-gate.mjs` after the SDK install and `node scripts/audit-gate.mjs --dir ui` after the UI install; both read `audit-allowlist.json` at the repository root. The gate blocks high and critical production advisories unless a matching, dated exception in `audit-allowlist.json` explains why the advisory cannot reach users.
+
 ## Running the example dApp
 
 The `example/` directory contains a Vite test dApp with QR code generation, transaction sending, message signing, and read-only RPC calls.

package/dist/index.js

@@ -121,7 +121,8 @@ var import_ml_kem = require("@noble/post-quantum/ml-kem.js");
 var import_sha3 = require("@noble/hashes/sha3.js");
 var mldsa = __toESM(require("@theqrl/mldsa87"));
 function webCrypto() {
-  const c = globalThis.crypto;
+  const environment = globalThis;
+  const c = environment.crypto;
   if (!c) {
     throw new Error("crypto: WebCrypto is not available in this environment");
   }
@@ -641,7 +642,8 @@ var KeyExchange = class extends import_eventemitter3.default {
     this.lastAck = null;
     this.isOriginator = isOriginator;
     if (restored) {
-      if (restored.protocolVersion !== PROTOCOL_VERSION) {
+      const protocolVersion = restored.protocolVersion;
+      if (protocolVersion !== PROTOCOL_VERSION) {
         throw new Error("KeyExchange: cannot restore a pre-v3 session");
       }
       this.session = snapshotSession(restored);
@@ -975,7 +977,8 @@ var KeyExchange = class extends import_eventemitter3.default {
   }
   /** Rehydrate a Session from its persisted form. */
   static async sessionFromPersisted(p) {
-    if (p.protocolVersion !== PROTOCOL_VERSION) {
+    const protocolVersion = p.protocolVersion;
+    if (protocolVersion !== PROTOCOL_VERSION) {
       throw new Error("KeyExchange: cannot hydrate a pre-v3 session");
     }
     const kAeadRaw = fromBase64Exact(p.kAeadRaw, 32, "persisted AEAD key");
@@ -1553,7 +1556,12 @@ function startsWith(buf, prefix) {
   }
   return true;
 }
-async function parseConnectionURI(uri) {
+function parseConnectionURI(uri) {
+  return new Promise((resolve) => {
+    resolve(parseURI(uri));
+  });
+}
+function parseURI(uri) {
   if (typeof uri !== "string" || uri.length === 0) {
     throw new Error("qrUri: empty URI");
   }
@@ -1598,7 +1606,7 @@ async function parseConnectionURI(uri) {
     blob = base45Decode(q);
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    throw new Error(`qrUri: base45 decode failed: ${msg}`);
+    throw new Error(`qrUri: base45 decode failed: ${msg}`, { cause: err });
   }
   try {
     if (blob.length !== BLOB_LEN) {
@@ -1671,7 +1679,8 @@ function getBrowserStorage() {
 function getBrowserLockManager() {
   try {
     if (typeof navigator === "undefined") return null;
-    return navigator.locks ?? null;
+    const browserNavigator = navigator;
+    return browserNavigator.locks ?? null;
   } catch {
     return null;
   }
@@ -2012,7 +2021,8 @@ var _ConnectionManager = class _ConnectionManager extends import_eventemitter33.
     });
     socketClient.on("participants_changed", (data) => {
       if (!isCurrentSocket()) return;
-      if (data.clientType !== "wallet") return;
+      const clientType = data.clientType;
+      if (clientType !== "wallet") return;
       if (data.event === "join" && data.clientType === "wallet") {
         this.walletPresent = true;
         log("ConnectionManager", "Wallet joined channel");
@@ -2179,7 +2189,8 @@ var _ConnectionManager = class _ConnectionManager extends import_eventemitter33.
       log("ConnectionManager", `Generated v3 connection URI for channel ${context.channelId}`);
       return uri;
     } catch (err) {
-      if (context ? this.isSessionWorkCurrent(context) : this.keyExchange !== null) {
+      const keyExchange = this.keyExchange;
+      if (context ? this.isSessionWorkCurrent(context) : keyExchange !== null) {
         this.invalidateSessionWork();
         this.keyExchange = null;
         this.socketClient.leaveChannel();
@@ -3001,7 +3012,7 @@ var _ConnectionManager = class _ConnectionManager extends import_eventemitter33.
     const persistedKex = await context.keyExchange.exportPersisted();
     if (!persistedKex) throw new Error("Cannot export established AEAD session");
     this.assertSessionWorkCurrent(context);
-    if (!this.sessionOwnership?.isOwned()) {
+    if (!this.sessionOwnership.isOwned()) {
       throw new Error("Browser-tab ownership changed while persisting AEAD counters");
     }
     const session = {
@@ -3020,7 +3031,7 @@ var _ConnectionManager = class _ConnectionManager extends import_eventemitter33.
       this.persistenceBroken = true;
       this.removeStoredSession();
       error("ConnectionManager", "Failed to persist AEAD counters:", err);
-      throw new Error("Failed to persist AEAD counters");
+      throw new Error("Failed to persist AEAD counters", { cause: err });
     }
   }
   readStoredSession() {
@@ -3197,17 +3208,20 @@ function consumeValue(budget) {
   budget.remainingValues--;
   if (budget.remainingValues < 0) throw new Error("typed data contains too many encoded values");
 }
+function inputPreview(value) {
+  return value.length > 32 ? `${value.slice(0, 32)}... (length ${value.length})` : value;
+}
 function assertIdentifier(value, label) {
   if (!IDENTIFIER_RE.test(value) || value.length > TYPED_DATA_LIMITS.maxIdentifierLength || UNSAFE_OBJECT_KEYS.has(value)) {
-    throw new Error(`invalid ${label}: ${value}`);
+    throw new Error(`invalid ${label}: ${inputPreview(value)}`);
   }
 }
 function parseFieldType(type, types, depth = 0) {
   if (depth > TYPED_DATA_LIMITS.maxArrayNesting) {
-    throw new Error(`type nesting too deep: ${type}`);
+    throw new Error(`type nesting too deep: ${inputPreview(type)}`);
   }
   if (type.length > TYPED_DATA_LIMITS.maxFieldTypeLength) {
-    throw new Error(`field type too long: ${type}`);
+    throw new Error(`field type too long: ${inputPreview(type)}`);
   }
   const m = ATOMIC_RE.exec(type);
   if (m) {
@@ -3218,14 +3232,14 @@ function parseFieldType(type, types, depth = 0) {
     if (intKind) {
       const width = Number(intWidthStr);
       if (!Number.isInteger(width) || width < 8 || width > 256 || width % 8 !== 0) {
-        throw new Error(`invalid int width: ${type}`);
+        throw new Error(`invalid int width: ${inputPreview(type)}`);
       }
       return { kind: intKind === "uint" ? "uintN" : "intN", width };
     }
     if (bytesWidthStr) {
       const width = Number(bytesWidthStr);
       if (!Number.isInteger(width) || width < 1 || width > 32) {
-        throw new Error(`invalid bytesN width: ${type}`);
+        throw new Error(`invalid bytesN width: ${inputPreview(type)}`);
       }
       return { kind: "bytesN", width };
     }
@@ -3234,7 +3248,7 @@ function parseFieldType(type, types, depth = 0) {
       if (sizeStr) {
         const size = Number(sizeStr);
         if (!Number.isSafeInteger(size) || size <= 0 || size > TYPED_DATA_LIMITS.maxArrayLength) {
-          throw new Error(`invalid array size: ${type}`);
+          throw new Error(`invalid array size: ${inputPreview(type)}`);
         }
         return { kind: "array", inner: innerType, size };
       }
@@ -3244,7 +3258,7 @@ function parseFieldType(type, types, depth = 0) {
   if (Object.prototype.hasOwnProperty.call(types, type)) {
     return { kind: "ref", name: type };
   }
-  throw new Error(`unknown type: ${type}`);
+  throw new Error(`unknown type: ${inputPreview(type)}`);
 }
 function isReservedAtomicTypeName(name) {
   if (/^(?:address|bool|string|bytes)$/.test(name)) return true;
@@ -3261,24 +3275,35 @@ function isReservedAtomicTypeName(name) {
   return false;
 }
 function baseTypeName(type) {
-  return type.replace(/(\[\d*\])+$/, "");
+  let end = type.length;
+  while (end > 0 && type[end - 1] === "]") {
+    let start = end - 2;
+    while (start >= 0) {
+      const code = type.charCodeAt(start);
+      if (code < 48 || code > 57) break;
+      start--;
+    }
+    if (start < 0 || type[start] !== "[") break;
+    end = start;
+  }
+  return type.slice(0, end);
 }
 function collectDependencies(primary, types) {
   if (!Object.prototype.hasOwnProperty.call(types, primary)) {
-    throw new Error(`unknown primary type: ${primary}`);
+    throw new Error(`unknown primary type: ${inputPreview(primary)}`);
   }
   const visited = /* @__PURE__ */ new Set();
   const visit = (name, path) => {
     if (path.length > TYPED_DATA_LIMITS.maxTypeGraphDepth) {
-      throw new Error(`type graph nesting too deep: ${[...path, name].join(" -> ")}`);
+      throw new Error(`type graph nesting too deep: ${inputPreview([...path, name].join(" -> "))}`);
     }
     if (path.includes(name)) {
-      throw new Error(`cyclic type reference: ${[...path, name].join(" -> ")}`);
+      throw new Error(`cyclic type reference: ${inputPreview([...path, name].join(" -> "))}`);
     }
     if (visited.has(name)) return;
     visited.add(name);
     const def = types[name];
-    if (!def) throw new Error(`unknown type: ${name}`);
+    if (!def) throw new Error(`unknown type: ${inputPreview(name)}`);
     for (const f of def) {
       const base = baseTypeName(f.type);
       if (Object.prototype.hasOwnProperty.call(types, base)) {
@@ -3299,11 +3324,11 @@ function validateTypeMap(types) {
   for (const [name, def] of entries) {
     assertIdentifier(name, "struct name");
     if (name !== "QRLDomain" && isReservedAtomicTypeName(name)) {
-      throw new Error(`struct name is reserved by an atomic type: ${name}`);
+      throw new Error(`struct name is reserved by an atomic type: ${inputPreview(name)}`);
     }
     const defUnknown = def;
     if (!Array.isArray(defUnknown) || def.length === 0 || def.length > TYPED_DATA_LIMITS.maxFieldsPerType) {
-      throw new Error(`empty or invalid struct: ${name}`);
+      throw new Error(`empty or invalid struct: ${inputPreview(name)}`);
     }
     totalFields += def.length;
     if (totalFields > TYPED_DATA_LIMITS.maxTotalFields) {
@@ -3312,14 +3337,17 @@ function validateTypeMap(types) {
     const seen = /* @__PURE__ */ new Set();
     for (const f of def) {
       if (!f || typeof f.name !== "string" || !f.name) {
-        throw new Error(`bad field in ${name}`);
+        throw new Error(`bad field in ${inputPreview(name)}`);
       }
-      assertIdentifier(f.name, `field name in ${name}`);
+      assertIdentifier(f.name, `field name in ${inputPreview(name)}`);
       if (typeof f.type !== "string" || !f.type) {
-        throw new Error(`bad field type in ${name}.${f.name}`);
+        throw new Error(`bad field type in ${inputPreview(name)}.${inputPreview(f.name)}`);
+      }
+      if (f.type.length > TYPED_DATA_LIMITS.maxFieldTypeLength) {
+        throw new Error(`field type too long: ${inputPreview(f.type)}`);
       }
       if (seen.has(f.name)) {
-        throw new Error(`duplicate field "${f.name}" in ${name}`);
+        throw new Error(`duplicate field "${inputPreview(f.name)}" in ${inputPreview(name)}`);
       }
       seen.add(f.name);
     }
@@ -3331,7 +3359,7 @@ function encodeType(primary, types) {
   const others = [...deps].filter((n) => n !== primary).sort();
   return [primary, ...others].map((name) => {
     const fields = types[name];
-    if (!fields) throw new Error(`unknown type: ${name}`);
+    if (!fields) throw new Error(`unknown type: ${inputPreview(name)}`);
     const inner = fields.map((f) => `${f.type} ${f.name}`).join(",");
     return `${name}(${inner})`;
   }).join("");
@@ -3341,7 +3369,7 @@ function typeHash(primary, types) {
 }
 function parseQAddress(addr, slot) {
   if (!isCurrentQrlAddress(addr)) {
-    throw new Error(`invalid Q-address: ${String(addr)}`);
+    throw new Error(`invalid Q-address: ${inputPreview(String(addr))}`);
   }
   const bytes = hexToBytes("0x" + addr.slice(1).toLowerCase());
   if (bytes.length > slot) {
@@ -3365,12 +3393,13 @@ function bigIntToSlot(value, width, signed, slot) {
   if (signed) {
     const limit = 1n << BigInt(width - 1);
     if (value >= limit || value < -limit) {
-      throw new Error(`int${width} out of range: ${value}`);
+      throw new Error(`int${width} out of range: ${inputPreview(String(value))}`);
     }
   } else {
-    if (value < 0n) throw new Error(`uint${width} negative: ${value}`);
+    if (value < 0n) throw new Error(`uint${width} negative: ${inputPreview(String(value))}`);
     const limit = 1n << BigInt(width);
-    if (value >= limit) throw new Error(`uint${width} out of range: ${value}`);
+    if (value >= limit)
+      throw new Error(`uint${width} out of range: ${inputPreview(String(value))}`);
   }
   const slotBits = BigInt(slot * 8);
   const slotMask = (1n << slotBits) - 1n;
@@ -3393,7 +3422,7 @@ function parseIntValue(v, typeLabel) {
       return isNegative ? -abs : abs;
     }
     if (!/^-?(0|[1-9]\d*)$/.test(v)) {
-      throw new Error(`invalid ${typeLabel} string: ${v}`);
+      throw new Error(`invalid ${typeLabel} string: ${inputPreview(v)}`);
     }
     return BigInt(v);
   }
@@ -3407,14 +3436,14 @@ function parseIntValue(v, typeLabel) {
 }
 function encodeFieldWithBudget(type, value, types, budget, depth) {
   if (depth > TYPED_DATA_LIMITS.maxTypeGraphDepth + TYPED_DATA_LIMITS.maxArrayNesting) {
-    throw new Error(`value nesting too deep: ${type}`);
+    throw new Error(`value nesting too deep: ${inputPreview(type)}`);
   }
   consumeValue(budget);
   const parsed = parseFieldType(type, types);
   switch (parsed.kind) {
     case "ref":
       if (!isMessageObject(value)) {
-        throw new Error(`struct field expects object: ${type}`);
+        throw new Error(`struct field expects object: ${inputPreview(type)}`);
       }
       return hashStructWithBudget(parsed.name, value, types, budget, depth + 1);
     case "address":
@@ -3480,10 +3509,12 @@ function encodeFieldWithBudget(type, value, types, budget, depth) {
         throw new Error(`array field expects array: ${typeof value}`);
       }
       if (value.length > TYPED_DATA_LIMITS.maxArrayLength) {
-        throw new Error(`array ${type} exceeds length limit`);
+        throw new Error(`array ${inputPreview(type)} exceeds length limit`);
       }
       if (parsed.size !== void 0 && value.length !== parsed.size) {
-        throw new Error(`fixed array ${type} requires length ${parsed.size}, got ${value.length}`);
+        throw new Error(
+          `fixed array ${inputPreview(type)} requires length ${parsed.size}, got ${value.length}`
+        );
       }
       const chunks = value.map(
         (v) => encodeFieldWithBudget(parsed.inner, v, types, budget, depth + 1)
@@ -3500,7 +3531,7 @@ function encodeField(type, value, types, schemeVersion) {
 function hashStructWithBudget(primary, data, types, budget, depth) {
   consumeValue(budget);
   const fields = types[primary];
-  if (!fields) throw new Error(`unknown struct: ${primary}`);
+  if (!fields) throw new Error(`unknown struct: ${inputPreview(primary)}`);
   const expected = new Set(fields.map((f) => f.name));
   let ownFieldCount = 0;
   for (const k in data) {
@@ -3509,12 +3540,14 @@ function hashStructWithBudget(primary, data, types, budget, depth) {
     if (ownFieldCount > TYPED_DATA_LIMITS.maxEncodedValues) {
       throw new Error("typed data object contains too many fields");
     }
-    if (!expected.has(k)) throw new Error(`unknown field in ${primary}: ${k}`);
+    if (!expected.has(k)) {
+      throw new Error(`unknown field in ${inputPreview(primary)}: ${inputPreview(k)}`);
+    }
   }
   const parts = [typeHash(primary, types)];
   for (const f of fields) {
     if (!Object.prototype.hasOwnProperty.call(data, f.name)) {
-      throw new Error(`missing field ${primary}.${f.name}`);
+      throw new Error(`missing field ${inputPreview(primary)}.${inputPreview(f.name)}`);
     }
     parts.push(encodeFieldWithBudget(f.type, data[f.name], types, budget, depth + 1));
   }
@@ -3540,11 +3573,13 @@ function validateDomainTypes(types) {
     const expected = RESERVED_DOMAIN_FIELDS[f.name];
     if (!expected) {
       throw new Error(
-        `QRLDomain field "${f.name}" not in reserved set (name, version, chainId, verifyingContract, salt)`
+        `QRLDomain field "${inputPreview(f.name)}" not in reserved set (name, version, chainId, verifyingContract, salt)`
       );
     }
     if (f.type !== expected) {
-      throw new Error(`QRLDomain field "${f.name}" must be type "${expected}", got "${f.type}"`);
+      throw new Error(
+        `QRLDomain field "${inputPreview(f.name)}" must be type "${expected}", got "${inputPreview(f.type)}"`
+      );
     }
     if (f.name === "name") hasName = true;
   }
@@ -3556,7 +3591,7 @@ function validatePayloadReachability(primary, types) {
     for (const t of collectDependencies(root, types)) reachable.add(t);
   }
   for (const k of Object.keys(types)) {
-    if (!reachable.has(k)) throw new Error(`unused referenced type: ${k}`);
+    if (!reachable.has(k)) throw new Error(`unused referenced type: ${inputPreview(k)}`);
   }
 }
 function parseAndValidatePayload(payload) {
@@ -3678,7 +3713,8 @@ function canonicalChainId2(value) {
   return `0x${BigInt(value).toString(16)}`;
 }
 function requestedSwitchChainId(params) {
-  if (params?.length !== 1) {
+  const parameterCount = params?.length;
+  if (parameterCount !== 1) {
     throw new Error("wallet_switchQrlChain requires one chain configuration object");
   }
   const request = params?.[0];
@@ -3744,7 +3780,7 @@ function snapshotRequestParams(params) {
     return snapshot;
   } catch (error2) {
     const detail = error2 instanceof Error ? error2.message : String(error2);
-    throw new Error(`Request params must be JSON-serializable: ${detail}`);
+    throw new Error(`Request params must be JSON-serializable: ${detail}`, { cause: error2 });
   }
 }
 function validateRestrictedRequest(method, params, authorizedAccounts, currentChainId) {

package/dist/index.mjs

@@ -12,7 +12,8 @@ import { ml_kem768 } from "@noble/post-quantum/ml-kem.js";
 import { shake256 } from "@noble/hashes/sha3.js";
 import * as mldsa from "@theqrl/mldsa87";
 function webCrypto() {
-  const c = globalThis.crypto;
+  const environment = globalThis;
+  const c = environment.crypto;
   if (!c) {
     throw new Error("crypto: WebCrypto is not available in this environment");
   }
@@ -532,7 +533,8 @@ var KeyExchange = class extends EventEmitter {
     this.lastAck = null;
     this.isOriginator = isOriginator;
     if (restored) {
-      if (restored.protocolVersion !== PROTOCOL_VERSION) {
+      const protocolVersion = restored.protocolVersion;
+      if (protocolVersion !== PROTOCOL_VERSION) {
         throw new Error("KeyExchange: cannot restore a pre-v3 session");
       }
       this.session = snapshotSession(restored);
@@ -866,7 +868,8 @@ var KeyExchange = class extends EventEmitter {
   }
   /** Rehydrate a Session from its persisted form. */
   static async sessionFromPersisted(p) {
-    if (p.protocolVersion !== PROTOCOL_VERSION) {
+    const protocolVersion = p.protocolVersion;
+    if (protocolVersion !== PROTOCOL_VERSION) {
       throw new Error("KeyExchange: cannot hydrate a pre-v3 session");
     }
     const kAeadRaw = fromBase64Exact(p.kAeadRaw, 32, "persisted AEAD key");
@@ -1444,7 +1447,12 @@ function startsWith(buf, prefix) {
   }
   return true;
 }
-async function parseConnectionURI(uri) {
+function parseConnectionURI(uri) {
+  return new Promise((resolve) => {
+    resolve(parseURI(uri));
+  });
+}
+function parseURI(uri) {
   if (typeof uri !== "string" || uri.length === 0) {
     throw new Error("qrUri: empty URI");
   }
@@ -1489,7 +1497,7 @@ async function parseConnectionURI(uri) {
     blob = base45Decode(q);
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
-    throw new Error(`qrUri: base45 decode failed: ${msg}`);
+    throw new Error(`qrUri: base45 decode failed: ${msg}`, { cause: err });
   }
   try {
     if (blob.length !== BLOB_LEN) {
@@ -1562,7 +1570,8 @@ function getBrowserStorage() {
 function getBrowserLockManager() {
   try {
     if (typeof navigator === "undefined") return null;
-    return navigator.locks ?? null;
+    const browserNavigator = navigator;
+    return browserNavigator.locks ?? null;
   } catch {
     return null;
   }
@@ -1903,7 +1912,8 @@ var _ConnectionManager = class _ConnectionManager extends EventEmitter3 {
     });
     socketClient.on("participants_changed", (data) => {
       if (!isCurrentSocket()) return;
-      if (data.clientType !== "wallet") return;
+      const clientType = data.clientType;
+      if (clientType !== "wallet") return;
       if (data.event === "join" && data.clientType === "wallet") {
         this.walletPresent = true;
         log("ConnectionManager", "Wallet joined channel");
@@ -2070,7 +2080,8 @@ var _ConnectionManager = class _ConnectionManager extends EventEmitter3 {
       log("ConnectionManager", `Generated v3 connection URI for channel ${context.channelId}`);
       return uri;
     } catch (err) {
-      if (context ? this.isSessionWorkCurrent(context) : this.keyExchange !== null) {
+      const keyExchange = this.keyExchange;
+      if (context ? this.isSessionWorkCurrent(context) : keyExchange !== null) {
         this.invalidateSessionWork();
         this.keyExchange = null;
         this.socketClient.leaveChannel();
@@ -2892,7 +2903,7 @@ var _ConnectionManager = class _ConnectionManager extends EventEmitter3 {
     const persistedKex = await context.keyExchange.exportPersisted();
     if (!persistedKex) throw new Error("Cannot export established AEAD session");
     this.assertSessionWorkCurrent(context);
-    if (!this.sessionOwnership?.isOwned()) {
+    if (!this.sessionOwnership.isOwned()) {
       throw new Error("Browser-tab ownership changed while persisting AEAD counters");
     }
     const session = {
@@ -2911,7 +2922,7 @@ var _ConnectionManager = class _ConnectionManager extends EventEmitter3 {
       this.persistenceBroken = true;
       this.removeStoredSession();
       error("ConnectionManager", "Failed to persist AEAD counters:", err);
-      throw new Error("Failed to persist AEAD counters");
+      throw new Error("Failed to persist AEAD counters", { cause: err });
     }
   }
   readStoredSession() {
@@ -3088,17 +3099,20 @@ function consumeValue(budget) {
   budget.remainingValues--;
   if (budget.remainingValues < 0) throw new Error("typed data contains too many encoded values");
 }
+function inputPreview(value) {
+  return value.length > 32 ? `${value.slice(0, 32)}... (length ${value.length})` : value;
+}
 function assertIdentifier(value, label) {
   if (!IDENTIFIER_RE.test(value) || value.length > TYPED_DATA_LIMITS.maxIdentifierLength || UNSAFE_OBJECT_KEYS.has(value)) {
-    throw new Error(`invalid ${label}: ${value}`);
+    throw new Error(`invalid ${label}: ${inputPreview(value)}`);
   }
 }
 function parseFieldType(type, types, depth = 0) {
   if (depth > TYPED_DATA_LIMITS.maxArrayNesting) {
-    throw new Error(`type nesting too deep: ${type}`);
+    throw new Error(`type nesting too deep: ${inputPreview(type)}`);
   }
   if (type.length > TYPED_DATA_LIMITS.maxFieldTypeLength) {
-    throw new Error(`field type too long: ${type}`);
+    throw new Error(`field type too long: ${inputPreview(type)}`);
   }
   const m = ATOMIC_RE.exec(type);
   if (m) {
@@ -3109,14 +3123,14 @@ function parseFieldType(type, types, depth = 0) {
     if (intKind) {
       const width = Number(intWidthStr);
       if (!Number.isInteger(width) || width < 8 || width > 256 || width % 8 !== 0) {
-        throw new Error(`invalid int width: ${type}`);
+        throw new Error(`invalid int width: ${inputPreview(type)}`);
       }
       return { kind: intKind === "uint" ? "uintN" : "intN", width };
     }
     if (bytesWidthStr) {
       const width = Number(bytesWidthStr);
       if (!Number.isInteger(width) || width < 1 || width > 32) {
-        throw new Error(`invalid bytesN width: ${type}`);
+        throw new Error(`invalid bytesN width: ${inputPreview(type)}`);
       }
       return { kind: "bytesN", width };
     }
@@ -3125,7 +3139,7 @@ function parseFieldType(type, types, depth = 0) {
       if (sizeStr) {
         const size = Number(sizeStr);
         if (!Number.isSafeInteger(size) || size <= 0 || size > TYPED_DATA_LIMITS.maxArrayLength) {
-          throw new Error(`invalid array size: ${type}`);
+          throw new Error(`invalid array size: ${inputPreview(type)}`);
         }
         return { kind: "array", inner: innerType, size };
       }
@@ -3135,7 +3149,7 @@ function parseFieldType(type, types, depth = 0) {
   if (Object.prototype.hasOwnProperty.call(types, type)) {
     return { kind: "ref", name: type };
   }
-  throw new Error(`unknown type: ${type}`);
+  throw new Error(`unknown type: ${inputPreview(type)}`);
 }
 function isReservedAtomicTypeName(name) {
   if (/^(?:address|bool|string|bytes)$/.test(name)) return true;
@@ -3152,24 +3166,35 @@ function isReservedAtomicTypeName(name) {
   return false;
 }
 function baseTypeName(type) {
-  return type.replace(/(\[\d*\])+$/, "");
+  let end = type.length;
+  while (end > 0 && type[end - 1] === "]") {
+    let start = end - 2;
+    while (start >= 0) {
+      const code = type.charCodeAt(start);
+      if (code < 48 || code > 57) break;
+      start--;
+    }
+    if (start < 0 || type[start] !== "[") break;
+    end = start;
+  }
+  return type.slice(0, end);
 }
 function collectDependencies(primary, types) {
   if (!Object.prototype.hasOwnProperty.call(types, primary)) {
-    throw new Error(`unknown primary type: ${primary}`);
+    throw new Error(`unknown primary type: ${inputPreview(primary)}`);
   }
   const visited = /* @__PURE__ */ new Set();
   const visit = (name, path) => {
     if (path.length > TYPED_DATA_LIMITS.maxTypeGraphDepth) {
-      throw new Error(`type graph nesting too deep: ${[...path, name].join(" -> ")}`);
+      throw new Error(`type graph nesting too deep: ${inputPreview([...path, name].join(" -> "))}`);
     }
     if (path.includes(name)) {
-      throw new Error(`cyclic type reference: ${[...path, name].join(" -> ")}`);
+      throw new Error(`cyclic type reference: ${inputPreview([...path, name].join(" -> "))}`);
     }
     if (visited.has(name)) return;
     visited.add(name);
     const def = types[name];
-    if (!def) throw new Error(`unknown type: ${name}`);
+    if (!def) throw new Error(`unknown type: ${inputPreview(name)}`);
     for (const f of def) {
       const base = baseTypeName(f.type);
       if (Object.prototype.hasOwnProperty.call(types, base)) {
@@ -3190,11 +3215,11 @@ function validateTypeMap(types) {
   for (const [name, def] of entries) {
     assertIdentifier(name, "struct name");
     if (name !== "QRLDomain" && isReservedAtomicTypeName(name)) {
-      throw new Error(`struct name is reserved by an atomic type: ${name}`);
+      throw new Error(`struct name is reserved by an atomic type: ${inputPreview(name)}`);
     }
     const defUnknown = def;
     if (!Array.isArray(defUnknown) || def.length === 0 || def.length > TYPED_DATA_LIMITS.maxFieldsPerType) {
-      throw new Error(`empty or invalid struct: ${name}`);
+      throw new Error(`empty or invalid struct: ${inputPreview(name)}`);
     }
     totalFields += def.length;
     if (totalFields > TYPED_DATA_LIMITS.maxTotalFields) {
@@ -3203,14 +3228,17 @@ function validateTypeMap(types) {
     const seen = /* @__PURE__ */ new Set();
     for (const f of def) {
       if (!f || typeof f.name !== "string" || !f.name) {
-        throw new Error(`bad field in ${name}`);
+        throw new Error(`bad field in ${inputPreview(name)}`);
       }
-      assertIdentifier(f.name, `field name in ${name}`);
+      assertIdentifier(f.name, `field name in ${inputPreview(name)}`);
       if (typeof f.type !== "string" || !f.type) {
-        throw new Error(`bad field type in ${name}.${f.name}`);
+        throw new Error(`bad field type in ${inputPreview(name)}.${inputPreview(f.name)}`);
+      }
+      if (f.type.length > TYPED_DATA_LIMITS.maxFieldTypeLength) {
+        throw new Error(`field type too long: ${inputPreview(f.type)}`);
       }
       if (seen.has(f.name)) {
-        throw new Error(`duplicate field "${f.name}" in ${name}`);
+        throw new Error(`duplicate field "${inputPreview(f.name)}" in ${inputPreview(name)}`);
       }
       seen.add(f.name);
     }
@@ -3222,7 +3250,7 @@ function encodeType(primary, types) {
   const others = [...deps].filter((n) => n !== primary).sort();
   return [primary, ...others].map((name) => {
     const fields = types[name];
-    if (!fields) throw new Error(`unknown type: ${name}`);
+    if (!fields) throw new Error(`unknown type: ${inputPreview(name)}`);
     const inner = fields.map((f) => `${f.type} ${f.name}`).join(",");
     return `${name}(${inner})`;
   }).join("");
@@ -3232,7 +3260,7 @@ function typeHash(primary, types) {
 }
 function parseQAddress(addr, slot) {
   if (!isCurrentQrlAddress(addr)) {
-    throw new Error(`invalid Q-address: ${String(addr)}`);
+    throw new Error(`invalid Q-address: ${inputPreview(String(addr))}`);
   }
   const bytes = hexToBytes("0x" + addr.slice(1).toLowerCase());
   if (bytes.length > slot) {
@@ -3256,12 +3284,13 @@ function bigIntToSlot(value, width, signed, slot) {
   if (signed) {
     const limit = 1n << BigInt(width - 1);
     if (value >= limit || value < -limit) {
-      throw new Error(`int${width} out of range: ${value}`);
+      throw new Error(`int${width} out of range: ${inputPreview(String(value))}`);
     }
   } else {
-    if (value < 0n) throw new Error(`uint${width} negative: ${value}`);
+    if (value < 0n) throw new Error(`uint${width} negative: ${inputPreview(String(value))}`);
     const limit = 1n << BigInt(width);
-    if (value >= limit) throw new Error(`uint${width} out of range: ${value}`);
+    if (value >= limit)
+      throw new Error(`uint${width} out of range: ${inputPreview(String(value))}`);
   }
   const slotBits = BigInt(slot * 8);
   const slotMask = (1n << slotBits) - 1n;
@@ -3284,7 +3313,7 @@ function parseIntValue(v, typeLabel) {
       return isNegative ? -abs : abs;
     }
     if (!/^-?(0|[1-9]\d*)$/.test(v)) {
-      throw new Error(`invalid ${typeLabel} string: ${v}`);
+      throw new Error(`invalid ${typeLabel} string: ${inputPreview(v)}`);
     }
     return BigInt(v);
   }
@@ -3298,14 +3327,14 @@ function parseIntValue(v, typeLabel) {
 }
 function encodeFieldWithBudget(type, value, types, budget, depth) {
   if (depth > TYPED_DATA_LIMITS.maxTypeGraphDepth + TYPED_DATA_LIMITS.maxArrayNesting) {
-    throw new Error(`value nesting too deep: ${type}`);
+    throw new Error(`value nesting too deep: ${inputPreview(type)}`);
   }
   consumeValue(budget);
   const parsed = parseFieldType(type, types);
   switch (parsed.kind) {
     case "ref":
       if (!isMessageObject(value)) {
-        throw new Error(`struct field expects object: ${type}`);
+        throw new Error(`struct field expects object: ${inputPreview(type)}`);
       }
       return hashStructWithBudget(parsed.name, value, types, budget, depth + 1);
     case "address":
@@ -3371,10 +3400,12 @@ function encodeFieldWithBudget(type, value, types, budget, depth) {
         throw new Error(`array field expects array: ${typeof value}`);
       }
       if (value.length > TYPED_DATA_LIMITS.maxArrayLength) {
-        throw new Error(`array ${type} exceeds length limit`);
+        throw new Error(`array ${inputPreview(type)} exceeds length limit`);
       }
       if (parsed.size !== void 0 && value.length !== parsed.size) {
-        throw new Error(`fixed array ${type} requires length ${parsed.size}, got ${value.length}`);
+        throw new Error(
+          `fixed array ${inputPreview(type)} requires length ${parsed.size}, got ${value.length}`
+        );
       }
       const chunks = value.map(
         (v) => encodeFieldWithBudget(parsed.inner, v, types, budget, depth + 1)
@@ -3391,7 +3422,7 @@ function encodeField(type, value, types, schemeVersion) {
 function hashStructWithBudget(primary, data, types, budget, depth) {
   consumeValue(budget);
   const fields = types[primary];
-  if (!fields) throw new Error(`unknown struct: ${primary}`);
+  if (!fields) throw new Error(`unknown struct: ${inputPreview(primary)}`);
   const expected = new Set(fields.map((f) => f.name));
   let ownFieldCount = 0;
   for (const k in data) {
@@ -3400,12 +3431,14 @@ function hashStructWithBudget(primary, data, types, budget, depth) {
     if (ownFieldCount > TYPED_DATA_LIMITS.maxEncodedValues) {
       throw new Error("typed data object contains too many fields");
     }
-    if (!expected.has(k)) throw new Error(`unknown field in ${primary}: ${k}`);
+    if (!expected.has(k)) {
+      throw new Error(`unknown field in ${inputPreview(primary)}: ${inputPreview(k)}`);
+    }
   }
   const parts = [typeHash(primary, types)];
   for (const f of fields) {
     if (!Object.prototype.hasOwnProperty.call(data, f.name)) {
-      throw new Error(`missing field ${primary}.${f.name}`);
+      throw new Error(`missing field ${inputPreview(primary)}.${inputPreview(f.name)}`);
     }
     parts.push(encodeFieldWithBudget(f.type, data[f.name], types, budget, depth + 1));
   }
@@ -3431,11 +3464,13 @@ function validateDomainTypes(types) {
     const expected = RESERVED_DOMAIN_FIELDS[f.name];
     if (!expected) {
       throw new Error(
-        `QRLDomain field "${f.name}" not in reserved set (name, version, chainId, verifyingContract, salt)`
+        `QRLDomain field "${inputPreview(f.name)}" not in reserved set (name, version, chainId, verifyingContract, salt)`
       );
     }
     if (f.type !== expected) {
-      throw new Error(`QRLDomain field "${f.name}" must be type "${expected}", got "${f.type}"`);
+      throw new Error(
+        `QRLDomain field "${inputPreview(f.name)}" must be type "${expected}", got "${inputPreview(f.type)}"`
+      );
     }
     if (f.name === "name") hasName = true;
   }
@@ -3447,7 +3482,7 @@ function validatePayloadReachability(primary, types) {
     for (const t of collectDependencies(root, types)) reachable.add(t);
   }
   for (const k of Object.keys(types)) {
-    if (!reachable.has(k)) throw new Error(`unused referenced type: ${k}`);
+    if (!reachable.has(k)) throw new Error(`unused referenced type: ${inputPreview(k)}`);
   }
 }
 function parseAndValidatePayload(payload) {
@@ -3569,7 +3604,8 @@ function canonicalChainId2(value) {
   return `0x${BigInt(value).toString(16)}`;
 }
 function requestedSwitchChainId(params) {
-  if (params?.length !== 1) {
+  const parameterCount = params?.length;
+  if (parameterCount !== 1) {
     throw new Error("wallet_switchQrlChain requires one chain configuration object");
   }
   const request = params?.[0];
@@ -3635,7 +3671,7 @@ function snapshotRequestParams(params) {
     return snapshot;
   } catch (error2) {
     const detail = error2 instanceof Error ? error2.message : String(error2);
-    throw new Error(`Request params must be JSON-serializable: ${detail}`);
+    throw new Error(`Request params must be JSON-serializable: ${detail}`, { cause: error2 });
   }
 }
 function validateRestrictedRequest(method, params, authorizedAccounts, currentChainId) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qrlwallet/connect",
-  "version": "5.1.0",
+  "version": "5.1.2",
   "packageManager": "npm@10.9.8",
   "description": "Connect your dApp to QRL Wallet via QR code or deep link",
   "main": "dist/index.js",
@@ -13,16 +13,19 @@
   "scripts": {
     "build": "tsup src/index.ts --format cjs,esm --dts --clean",
     "dev": "tsup src/index.ts --format cjs,esm --dts --watch",
-    "typecheck": "tsc --noEmit",
+    "typecheck": "tsc --noEmit && npm run typecheck:test",
+    "typecheck:test": "tsc --noEmit -p tsconfig.eslint.json",
     "test": "vitest run",
     "test:watch": "vitest",
-    "lint": "eslint src/ test/ --ext .ts",
-    "lint:fix": "eslint src/ test/ --ext .ts --fix",
+    "lint": "eslint --config eslint.config.mjs src test scripts \"*.mjs\" vitest.config.ts --report-unused-disable-directives --max-warnings 0",
+    "lint:fix": "eslint --config eslint.config.mjs src test scripts \"*.mjs\" vitest.config.ts --report-unused-disable-directives --max-warnings 0 --fix",
     "format": "prettier --write src/",
     "format:check": "prettier --check src/",
     "size": "size-limit",
     "size:check": "size-limit --highlight-less",
-    "prepublishOnly": "npm run lint && npm run typecheck && npm test && npm run build"
+    "prepublishOnly": "npm run lint && npm run typecheck && npm test && npm run build",
+    "lint:ratchet": "node scripts/lint-ratchet.mjs --check",
+    "lint:ratchet:update": "node scripts/lint-ratchet.mjs"
   },
   "keywords": [
     "qrl",
@@ -49,13 +52,15 @@
     "socket.io-client": "^4.8.1"
   },
   "devDependencies": {
+    "@eslint/js": "^10.0.1",
     "@size-limit/file": "^11.0.0",
     "@theqrl/wallet.js": "^6.3.0",
     "@types/node": "^25.3.3",
     "@typescript-eslint/eslint-plugin": "^8.0.0",
     "@typescript-eslint/parser": "^8.0.0",
-    "eslint": "^8.57.0",
+    "eslint": "^10.12.0",
     "eslint-config-prettier": "^9.1.0",
+    "globals": "^17.13.0",
     "prettier": "^3.4.0",
     "size-limit": "^11.0.0",
     "tsup": "^8.4.0",