wip: v1

.changeset/abi-anonymous-events.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `AbiEvent.encode` and `AbiEvent.decode` to honor the `anonymous` flag -- anonymous events no longer prepend or expect a selector topic.

.changeset/abi-constructor-bytecode-prefix.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `AbiConstructor.decode` to assert that `data` begins with the provided `bytecode` and throw a new `BytecodeMismatchError` instead of silently returning garbage when the prefix does not match.

.changeset/abi-event-hex-topic-normalization.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `AbiEvent.assertArgs` and `AbiEvent.encode` to always hash `string`/`bytes` indexed inputs to hex via `Hash.keccak256(value, { as: 'Hex' })`, so topic comparisons and emitted topics are reliably hex regardless of whether the input is a `Hex.Hex` or a `Bytes.Bytes`.

.changeset/abi-function-selector-only-calldata.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `AbiFunction.decodeData` to throw `AbiParameters.DataSizeTooSmallError` when the calldata is exactly the 4-byte selector but the function declares inputs, instead of silently returning `undefined`.

.changeset/abi-parameters-data-size-bound.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `AbiParameters.decode` to surface a `DataSizeTooSmallError` (with parameter context) instead of leaking a `Cursor.PositionOutOfBoundsError` when the encoded payload is shorter than the parameter list requires.

.changeset/abi-parameters-encode-packed.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `AbiParameters.encodePacked` to validate that fixed-array lengths match the supplied value, throwing `ArrayLengthMismatchError` (e.g. for `uint256[2]` with three elements) instead of silently encoding the wrong arity.

.changeset/account-proof-converters.md

@@ -0,0 +1,5 @@
+---
+"ox": minor
+---
+
+Added `AccountProof.fromRpc` and `AccountProof.toRpc` for converting between RPC and instantiated `AccountProof` shapes returned by `eth_getProof`.

.changeset/address-keys-keystore-async-pbkdf2.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `Keystore.toKeyAsync` to use the async PBKDF2 implementation -- previously it called the synchronous `pbkdf2` helper and blocked the main thread when decrypting PBKDF2-backed keystores.

.changeset/address-keys-keystore-kdf-validation.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Added validation of KDF parameters in `Keystore.pbkdf2`, `Keystore.pbkdf2Async`, `Keystore.scrypt`, and `Keystore.scryptAsync` -- PBKDF2 now requires `iterations` to be an integer `>= 1000`, and scrypt now requires `n` to be a power of two `>= 1024` with positive integer `r` and `p`, rejecting trivially weak parameters that previously produced formally valid but cryptographically insecure keystores.

.changeset/address-keys-keystore-scrypt-async-pr.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `Keystore.scryptAsync` to honor caller-provided `p` and `r` options -- previously they were silently overridden with `p=8` and `r=1`, producing keystores that disagreed with the synchronous `Keystore.scrypt` for the same inputs.

.changeset/address-keys-mnemonic-default.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `Mnemonic.toPrivateKey` to return `Bytes` by default to match its declared return type -- previously it returned a `Hex` string at runtime even though the default `as` was `'Bytes'`.

.changeset/anchor-crypto-webcrypto-verify-padding.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `WebCryptoP256.verify` rejecting valid signatures whose `r` or `s` value has a leading zero byte by padding both components to 32 bytes.

.changeset/anchor-publickey-assert-shape.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `PublicKey.assert` so it rejects objects missing `x`/`y` when the `compressed` option is set explicitly.

.changeset/anchor-publickey-fromhex-validate.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `PublicKey.fromHex` and `PublicKey.fromBytes` so they reject deserialized public keys with an invalid SEC1 prefix.

.changeset/block-state-block-fromrpc-required-fields.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Preserved `Block.fromRpc().totalDifficulty` as `undefined` instead of silently coercing missing values to `0n`.

.changeset/block-state-bloom-contains-validate-length.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Made `Bloom.contains` validate the bloom argument length and throw `Bloom.InvalidBloomError` instead of silently returning `false` for malformed bloom inputs.

.changeset/block-state-filter-torpc-address-null.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Made `Filter.toRpc` preserve explicit `address: null` (and `topics: null`) instead of stripping it via truthy checks.

.changeset/block-state-quantity-converters.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Unified the RPC-quantity conversion blocks across `Block`, `BlockOverrides`, and `StateOverrides` behind an internal helper so optional bigint fields with explicit `'0x0'` (e.g. `baseFeePerGas: '0x0'` on a post-merge block) round-trip as `0n` instead of being silently dropped by the previous truthy checks.

.changeset/block-state-typed-data-array-validation.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Validated array element types and fixed-array lengths in `TypedData.assert` and `TypedData.encodeField`, throwing `InvalidArrayError`/`InvalidArrayLengthError` instead of silently passing malformed input through to the encoder.

.changeset/block-state-validator-data-validate-address.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Made `ValidatorData.encode` call `Address.assert` on the validator argument so malformed validator addresses are rejected instead of producing invalid ERC-191 payloads.

.changeset/block-state-value-validation.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Tightened `Value.from` input validation to reject malformed numeric strings (`''`, `'.'`, `'-'`, `'-.'`) and to reject non-integer or negative `decimals`, and replaced `Number`/`Math.round` rounding with string-carry rounding so very long fractions no longer lose precision.

.changeset/bloom-prepared.md

@@ -0,0 +1,5 @@
+---
+"ox": minor
+---
+
+Added `Bloom.prepare`, `Bloom.containsPrepared`, and `Bloom.containsHash` for membership checks against a precomputed bloom filter. Use `Bloom.prepare(bloom)` once and `Bloom.containsPrepared(prepared, input)` (or `Bloom.containsHash(prepared, hash)` when the caller already has the keccak hash) inside hot loops to avoid the per-call `Bytes.fromHex` allocation that `Bloom.contains` pays.

.changeset/bytes-rlp-odd-length-pad.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `Bytes.fromNumber` and `Rlp.fromHex` rejecting valid odd-nibble hex output produced by `Hex.fromNumber` (e.g. `0x7`, `0x311`); both now even-pad before handing the value to the strict `Bytes.fromHex` parser.

.changeset/cosekey-topublickey-bytes-options.md

@@ -0,0 +1,5 @@
+---
+"ox": minor
+---
+
+Added `returnByteLength` and `returnDecoded` options to `CoseKey.toPublicKey` and accepted `Uint8Array` input in addition to `Hex`.

.changeset/crypto-bls-aggregate-validate.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `Bls.aggregate` to reject empty arrays and mixed G1/G2 input, and added a fast path that returns the input directly when only one point is supplied.

.changeset/crypto-blspoint-frombytes-group.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `BlsPoint.fromBytes` to honor its declared `group` argument and assert the input length matches the requested G1 (48 bytes) or G2 (96 bytes) shape.

.changeset/crypto-cosekey-validate-header.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Hardened `CoseKey.toPublicKey` to reject COSE_Key inputs with a non-P-256 `kty`, `alg`, or `crv` header, or with `x`/`y` byte arrays that are not exactly 32 bytes long.

.changeset/crypto-extra-entropy-default-doc.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Documented `extraEntropy` on `Secp256k1.sign` and `P256.sign` correctly as `@default false` so the JSDoc matches the runtime default.

.changeset/crypto-kzg-from-receiver.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `Kzg.from` to preserve `this` binding by wrapping method calls instead of destructuring, so class instances or method-style implementations work correctly.

.changeset/crypto-serialized-inputs-and-as-option.md

@@ -0,0 +1,5 @@
+---
+"ox": minor
+---
+
+Added `as: 'Hex' | 'Bytes' | 'Object'` option to `Secp256k1.sign` / `getPublicKey` / `recoverPublicKey`, `P256.sign` / `getPublicKey` / `recoverPublicKey`, `WebCryptoP256.sign`, and `Bls.sign` / `getPublicKey` (default `'Object'` keeps existing behavior); plus accept `Hex.Hex | Bytes.Bytes | Signature.Signature` for `signature` params and `Hex.Hex | Bytes.Bytes | PublicKey.PublicKey` for `publicKey` params on `verify`, `recoverAddress`, `recoverPublicKey`, `getSharedSecret` across the same modules.

.changeset/crypto-webcrypto-doc-corrections.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Documented `WebCryptoP256.sign` low-S normalization as always-on and corrected the `WebCryptoP256.createKeyPair` / `createKeyPairECDH` JSDoc to describe `publicKey` as a `PublicKey.PublicKey`.

.changeset/crypto-webcrypto-shared-secret-typed-error.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Replaced the plain `Error` thrown by `WebCryptoP256.getSharedSecret` when given an ECDSA private key with a typed `WebCryptoP256.InvalidPrivateKeyAlgorithmError`.

.changeset/erc4337-user-operation-from-packed-typing.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Narrowed `UserOperation.fromPacked` return type to `UserOperation<'0.7', true>` to reflect that the packed format does not carry v0.8 `authorization`.

.changeset/erc4337-user-operation-gas-v08.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Added v0.8 EntryPoint support to `UserOperationGas` (and `RpcSchema.Bundler` via inheritance) by introducing `V08` and `RpcV08` aliases over the v0.7 gas shape.

.changeset/erc4337-user-operation-v08-authorization.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `UserOperation.fromRpc` and `UserOperation.toRpc` to parse and serialize the v0.8 `authorization` field instead of dropping it.

.changeset/erc6492-strip-magic-and-validate.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `SignatureErc6492.unwrap` to strip the trailing magic bytes before ABI-decoding, and made `SignatureErc6492.from` and `assert` validate object inputs by throwing the new `InvalidUnwrappedSignatureError` on malformed values.

.changeset/erc7821-execute-structural-detection.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Replaced the exception-driven opData fallback in `Execute.decodeBatchOfBatchesData` with structural detection of the ABI head word, so malformed inputs surface as decode errors instead of being masked by the catch.

.changeset/erc8010-assert-suffix-and-recovery.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Hardened ERC-8010 by validating the full unwrapped object in `SignatureErc8010.assert`, capping the suffix length parsed by `unwrap` against the wrapped size to reject overflowing inputs, and skipping `Secp256k1.recoverAddress` in `wrap` when `to` is already provided.

.changeset/fee-helpers.md

@@ -0,0 +1,5 @@
+---
+"ox": minor
+---
+
+Added `Fee.fromHistoryRpc`, `Fee.toHistoryRpc`, `Fee.estimateMaxFeePerGas`, and `Fee.effectiveGasPrice` for converting between RPC/instantiated `FeeHistory` shapes and computing common EIP-1559 fee values.

.changeset/hex-tobytes-buffer-pool-fix.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `Hex.toBytes` and `Bytes.fromHex` returning a `Uint8Array` view that aliased Node's shared `Buffer` pool memory, which broke callers that read `.buffer` (e.g. WebAuthn `attestationObject` round-trips).

.changeset/parts-types-and-codecs.md

@@ -0,0 +1,5 @@
+---
+"ox": minor
+---
+
+Added `Signature.Parts`, `PublicKey.Parts`, and `BlsPoint.G1Parts` / `G2Parts` types with matching `toParts` / `fromParts` codecs.

.changeset/promise-with-timeout-single-reject.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `RpcTransport.fromHttp` (via internal `withTimeout`) producing an unhandled rejection when the wrapped fetch threw a non-`AbortError` after the timeout setup ran.

.changeset/provider-from-prototype.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `Provider.from` to preserve wrapped providers' prototype methods, accessors, and non-enumerable property descriptors instead of dropping them via object spread.

.changeset/provider-from-strict-eip1193.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `Provider.from` to stop sniffing successful EIP-1193 payloads for a `jsonrpc` field and reparsing them as JSON-RPC envelopes.

.changeset/rpc-response-from-validation.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `RpcResponse.from` crashing when called without a `request` option and missing `jsonrpc` -- it now validates the envelope and throws `RpcResponse.ParseError` for missing `id`/`jsonrpc`.

.changeset/rpc-response-parse-error-preserve.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `RpcResponse.parseError` re-wrapping existing `RpcResponse.BaseError` instances as `InternalError` -- existing instances are now returned as-is.

.changeset/rpc-response-parse-validation.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `RpcResponse.parse` silently returning `undefined` for malformed payloads -- it now validates the JSON-RPC envelope (`jsonrpc === '2.0'`, presence of `id`, and presence of either `result` or `error`) and throws `RpcResponse.ParseError` otherwise.

.changeset/rpc-transport-empty-body.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `RpcTransport.fromHttp` to throw `RpcTransport.MalformedResponseError` for empty `2xx` HTTP bodies instead of silently returning `undefined`.

.changeset/rpc-transport-http-error-details.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `RpcTransport.HttpError.details` to render raw-text error bodies verbatim instead of JSON-stringifying them with surrounding quotes.

.changeset/rpc-transport-signal-compose.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `RpcTransport.fromHttp` ignoring its own `timeout` when the caller supplied a `fetchOptions.signal`; both signals are now composed via `AbortSignal.any` so the timeout always fires.

.changeset/signature-byte-helpers.md

@@ -0,0 +1,5 @@
+---
+"ox": minor
+---
+
+Added `Signature.toCompactBytes`, `Signature.fromCompactBytes`, `Signature.toRecoveredBytes`, and `Signature.fromRecoveredBytes` for direct 64 and 65 byte encoded signature interop.

.changeset/solidity-helpers.md

@@ -0,0 +1,5 @@
+---
+"ox": minor
+---
+
+Added `Solidity.intRange(bits, signed)` and `Solidity.maxUint(bits)` helpers that compute the inclusive range or maximum unsigned value of a Solidity integer of the given bit width without importing one of the `Solidity.maxInt*`/`Solidity.maxUint*` constants by name.

.changeset/tempo-authorization-signature-normalize.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `tempo.AuthorizationTempo.from` to normalize `options.signature` through `SignatureEnvelope.from` so serialized or convenience-shape signatures are accepted as documented.

.changeset/tempo-noncekey-random.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `tempo.TransactionRequest.toRpc` to generate a full 192-bit `nonceKey` when called with `nonceKey: 'random'`, matching the documented field width.

.changeset/tempo-poolid-canonical.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `PoolId.from` to be order-independent by sorting token addresses canonically before hashing.

.changeset/tempo-txenvelope-validate-prefix.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `tempo.TxEnvelopeTempo.deserialize` to validate the `0x76` envelope-type prefix before RLP decoding, rejecting payloads from other envelope types.

.changeset/transactions-access-list-strict-storage-keys.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `AccessList.fromTupleList` silently normalizing non-32-byte storage keys; it now throws `InvalidStorageKeySizeError` to match the symmetric `toTupleList` validation.

.changeset/transactions-authorization-fromtuplelist-return-type.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `Authorization.fromTupleList` declaring its return type as `TupleList` instead of `List`.

.changeset/transactions-eip4844-blob-validation.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Required `blobVersionedHashes` to be present and non-empty in `TxEnvelopeEip4844.assert`; the previous `if (blobVersionedHashes)` guard let envelopes serialize as "blob transactions with no blob hashes".

.changeset/transactions-eip4844-deserialize-error-attributes.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Improved `TxEnvelopeEip4844.deserialize` `InvalidSerializedError` diagnostics by including `maxFeePerBlobGas` and `blobVersionedHashes` in the attributes map and using the EIP-4844 signature-presence threshold (`length > 11`) instead of the EIP-1559 `> 9` copy-paste.

.changeset/transactions-eip4844-input-alias.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `TxEnvelopeEip4844.serialize` ignoring the `input` alias for `data`; calldata supplied via `input` is now included in the serialized envelope and sign payload.

.changeset/transactions-eip4844-sidecar-cardinality.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Validated sidecar wrapper cardinality in `TxEnvelopeEip4844.deserialize` so that mismatched `blobs` / `commitments` / `proofs` / `blobVersionedHashes` lengths throw `InvalidSerializedError` instead of fabricating `undefined` sidecar entries via blind indexing in `Blobs.toSidecars`.

.changeset/transactions-eip7702-torpc.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Added the missing `TxEnvelopeEip7702.toRpc` to mirror `Eip1559`/`Eip2930`/`Eip4844`/`Legacy`, restoring symmetry for callers building EIP-7702 RPC requests.

.changeset/transactions-legacy-v-fromrpc.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `Transaction.fromRpc` clobbering legacy (`type: '0x0'`) `v` with `27`/`28`; the original RPC `v` is now preserved when present.

.changeset/transactions-legacy-v-torpc.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `TxEnvelopeLegacy.toRpc` collapsing every signed legacy envelope to `v: '0x1b'`/`'0x1c'`; it now preserves an explicit `envelope.v`, otherwise derives EIP-155 `v = chainId * 2 + 35 + yParity` when a chain ID is present.

.changeset/transactions-transaction-request-fromrpc-no-mutate.md

@@ -0,0 +1,5 @@
+---
+"ox": patch
+---
+
+Fixed `TransactionRequest.fromRpc` mutating the caller-provided RPC object by cloning before assigning parsed fields.