@inversealtruism/cairn-sdk 0.1.3 → 0.1.4

package/dist/board.cjs

@@ -27,7 +27,7 @@ var import_csd_codec = require("@inversealtruism/csd-codec");
 var import_csd_codec2 = require("@inversealtruism/csd-codec");
 
 // src/errors.ts
-var SDK_VERSION = "0.1.2";
+var SDK_VERSION = "0.1.4";
 var DOCS_BASE = "https://cairn-substrate.com/docs/sdk";
 var CairnError = class extends Error {
   /** Stable machine code for programmatic branching. */

package/dist/board.d.cts

@@ -1,4 +1,4 @@
-import { H as Http } from './http-D2CzfOsm.cjs';
+import { H as Http } from './http-CQsNL8w9.cjs';
 import { WalletConnection, TxResult } from './connect.cjs';
 
 type BoardWindow = "24h" | "7d" | "30d" | "all";

package/dist/board.d.ts

@@ -1,4 +1,4 @@
-import { H as Http } from './http-D2CzfOsm.js';
+import { H as Http } from './http-CQsNL8w9.js';
 import { WalletConnection, TxResult } from './connect.js';
 
 type BoardWindow = "24h" | "7d" | "30d" | "all";

package/dist/board.js

@@ -1,7 +1,7 @@
 import {
   BoardClient
-} from "./chunk-645CYBVN.js";
-import "./chunk-UMGWVOOT.js";
+} from "./chunk-FSQZVNEM.js";
+import "./chunk-RELP23CH.js";
 export {
   BoardClient
 };

package/dist/chain.cjs

@@ -115,7 +115,7 @@ var Chain = class {
     });
     if (!built.ok || p.broadcast === false) return built;
     const submitResult = await this.client.submit(built.nodeJson);
-    return { ...built, submitResult };
+    return { ...built, ok: built.ok && submitResult.ok !== false, submitResult };
   }
   /** A verifying light client over the same RPC (built once, reused). */
   light() {

package/dist/chain.d.cts

@@ -7,7 +7,7 @@ export { App, BlockHeader, Tx, TxInput, TxOutput, canonicalJson, deserialize, hb
 export { ADDR_RE, addrFromPriv, addrFromPub, hash160, isValidAddr, isValidPriv, keygen, pubFromPriv, randomNonce, signDigest, verifyDigest } from '@inversealtruism/csd-crypto';
 import { LightClient } from '@inversealtruism/csd-light';
 export { InclusionResult, LightClient, ReorgResult, TrustLevel, VerifiedHeader, expectedBits, expectedBitsFromWindow } from '@inversealtruism/csd-light';
-import { F as FetchLike } from './http-D2CzfOsm.cjs';
+import { F as FetchLike } from './http-CQsNL8w9.cjs';
 
 interface ChainOptions {
     /** Node RPC base URL — defaults to the public Cairn proxy (no local node needed). */

package/dist/chain.d.ts

@@ -7,7 +7,7 @@ export { App, BlockHeader, Tx, TxInput, TxOutput, canonicalJson, deserialize, hb
 export { ADDR_RE, addrFromPriv, addrFromPub, hash160, isValidAddr, isValidPriv, keygen, pubFromPriv, randomNonce, signDigest, verifyDigest } from '@inversealtruism/csd-crypto';
 import { LightClient } from '@inversealtruism/csd-light';
 export { InclusionResult, LightClient, ReorgResult, TrustLevel, VerifiedHeader, expectedBits, expectedBitsFromWindow } from '@inversealtruism/csd-light';
-import { F as FetchLike } from './http-D2CzfOsm.js';
+import { F as FetchLike } from './http-CQsNL8w9.js';
 
 interface ChainOptions {
     /** Node RPC base URL — defaults to the public Cairn proxy (no local node needed). */

package/dist/chain.js

@@ -42,7 +42,7 @@ import {
   verifyDigest,
   verifyInputValues,
   verifyMerkleProof
-} from "./chunk-5KAUQH72.js";
+} from "./chunk-C452UODV.js";
 export {
   ADDR_RE,
   Chain,

package/dist/{chunk-G7FABIF4.js → chunk-BGJZF7S2.js}

@@ -31,11 +31,20 @@ var RegistryClient = class {
   peers() {
     return discoverPeers(this.src);
   }
-  /** Resolve a handle → identity (GET /identity/:handle). Returns null if unresolved. */
+  /**
+   * Resolve a handle → identity (GET /identity/:handle). Returns null if unresolved.
+   *
+   * ⚠ TRUST (CAIRN-SDK-RESOLVE-VERIFIED-FOOTGUN): the returned `verified` flag is the INDEXER's assertion,
+   * NOT a client-side proof. A hostile/compromised indexer (or a MITM of the read proxy) can return
+   * `verified:true` for a wrong address. Do NOT use this directly as a payee/login target without either (a)
+   * recomputing from raw records via `fromRecords.name(...)`, or (b) cross-checking a second independent
+   * source (the wallet's namespv union cure). Treat `verified` here as a hint, not a guarantee.
+   */
   resolveName(handle) {
     return resolveName(this.src, handle);
   }
-  /** Reverse-resolve an address → identity (GET /address/:addr/identity). */
+  /** Reverse-resolve an address → identity (GET /address/:addr/identity).
+   *  ⚠ Same indexer-trust caveat as resolveName — `verified` is the indexer's claim, not a client proof. */
   reverseName(address) {
     return reverseName(this.src, address);
   }

package/dist/{chunk-5KAUQH72.js → chunk-C452UODV.js}

@@ -92,7 +92,7 @@ var Chain = class {
     });
     if (!built.ok || p.broadcast === false) return built;
     const submitResult = await this.client.submit(built.nodeJson);
-    return { ...built, submitResult };
+    return { ...built, ok: built.ok && submitResult.ok !== false, submitResult };
   }
   /** A verifying light client over the same RPC (built once, reused). */
   light() {

package/dist/{chunk-645CYBVN.js → chunk-FSQZVNEM.js}

@@ -1,6 +1,6 @@
 import {
   CairnError
-} from "./chunk-UMGWVOOT.js";
+} from "./chunk-RELP23CH.js";
 
 // src/board.ts
 import { payloadHash } from "@inversealtruism/csd-codec";

package/dist/{chunk-G4OZKZSJ.js → chunk-K7SJOW3O.js}

@@ -2,7 +2,7 @@ import {
   NotInstalledError,
   UnsupportedMethodError,
   mapProviderError
-} from "./chunk-UMGWVOOT.js";
+} from "./chunk-RELP23CH.js";
 
 // src/connect.ts
 function discoverProviders(opts = {}) {

package/dist/{chunk-ZAE2BIH5.js → chunk-MBSPHWZG.js}

@@ -1,6 +1,6 @@
 import {
   getWallet
-} from "./chunk-G4OZKZSJ.js";
+} from "./chunk-K7SJOW3O.js";
 
 // src/controller.ts
 var DISCONNECTED = Object.freeze({ status: "disconnected", account: null, error: null });
@@ -35,12 +35,28 @@ var CairnController = class {
     for (const l of [...this.listeners]) l();
   }
   onAccounts = (accounts) => {
-    if (!Array.isArray(accounts) || accounts.length === 0) this.setState({ status: "disconnected", account: null });
-    else this.setState({ status: "connected", account: String(accounts[0]), error: null });
+    if (!Array.isArray(accounts) || accounts.length === 0) {
+      this.setState({ status: "disconnected", account: null });
+      return;
+    }
+    const next = String(accounts[0]);
+    if (this.state.status === "connected" && this.state.account && next.toLowerCase() === this.state.account.toLowerCase()) {
+      this.setState({ status: "connected", account: next, error: null });
+    } else {
+      this.setState({ status: "disconnected", account: null });
+    }
   };
   onDisconnect = () => {
     this.setState({ status: "disconnected", account: null });
   };
+  // Detach the provider listeners (ghost-reconnect fix). Idempotent + best-effort.
+  detach() {
+    try {
+      this.conn?.off?.("accountsChanged", this.onAccounts);
+      this.conn?.off?.("disconnect", this.onDisconnect);
+    } catch {
+    }
+  }
   /** Detect + connect (prompts the user the first time per origin). Resolves the connected address. */
   connect = async () => {
     this.setState({ status: "connecting", error: null });
@@ -64,6 +80,8 @@ var CairnController = class {
       await this.conn?.revokePermissions();
     } catch {
     }
+    this.detach();
+    this.conn = null;
     this.setState({ status: "disconnected", account: null, error: null });
   };
   /** Audience-bound sign-in (must connect() first). Returns the signed artifact to verify server-side. */

package/dist/{chunk-OSXS26RA.js → chunk-MVX7VQT4.js}

@@ -1,6 +1,6 @@
 import {
   ContentVerificationError
-} from "./chunk-UMGWVOOT.js";
+} from "./chunk-RELP23CH.js";
 
 // src/content.ts
 import { payloadHash, canonicalJson, verifyContentBytes } from "@inversealtruism/csd-codec";
@@ -67,8 +67,9 @@ var ContentClient = class {
   }
 };
 function normalizeHash(hash) {
-  const h = hash.startsWith("0x") || hash.startsWith("0X") ? hash : `0x${hash}`;
-  return h.toLowerCase();
+  const h = (hash.startsWith("0x") || hash.startsWith("0X") ? hash : `0x${hash}`).toLowerCase();
+  if (!/^0x[0-9a-f]{64}$/.test(h)) throw new Error(`invalid content hash: ${hash}`);
+  return h;
 }
 
 export {

package/dist/{chunk-FNBE2FPE.js → chunk-OG4KA3LS.js}

@@ -1,5 +1,12 @@
 // src/indexer.ts
 import { verifyMerkleProof } from "@inversealtruism/csd-codec";
+var HEX64 = /^0x[0-9a-fA-F]{64}$/;
+var MAX_SSE_BUF = 1024 * 1024;
+function isValidMerkleProof(p) {
+  if (!p || typeof p !== "object") return false;
+  const m = p;
+  return Number.isInteger(m.block_height) && m.block_height >= 0 && Number.isInteger(m.pos) && m.pos >= 0 && typeof m.merkle_root === "string" && HEX64.test(m.merkle_root) && Array.isArray(m.merkle) && m.merkle.every((x) => typeof x === "string" && HEX64.test(x));
+}
 var IndexerClient = class {
   http;
   opts;
@@ -20,32 +27,35 @@ var IndexerClient = class {
   blockHashAtHeight(h) {
     return this.http.getJson(`/block-height/${h}`);
   }
+  // CAIRNSDK-CONTENT-HASH-PATH-1: encode every caller-supplied id segment. Raw interpolation let an id like
+  // `../../api/rpc/tip` walk `new URL` to a DIFFERENT same-origin endpoint whose body was then returned
+  // verbatim as the requested object (worse than the content case, which discards the walked-to response).
   block(hash) {
-    return this.http.getJson(`/block/${hash}`);
+    return this.http.getJson(`/block/${encodeURIComponent(hash)}`);
   }
   blockTxids(hash) {
-    return this.http.getJson(`/block/${hash}/txids`);
+    return this.http.getJson(`/block/${encodeURIComponent(hash)}/txids`);
   }
   tx(id) {
-    return this.http.getJson(`/tx/${id}`);
+    return this.http.getJson(`/tx/${encodeURIComponent(id)}`);
   }
   txStatus(id) {
-    return this.http.getJson(`/tx/${id}/status`);
+    return this.http.getJson(`/tx/${encodeURIComponent(id)}/status`);
   }
   txMerkleProof(id) {
-    return this.http.getJson(`/tx/${id}/merkle-proof`);
+    return this.http.getJson(`/tx/${encodeURIComponent(id)}/merkle-proof`);
   }
   address(a) {
-    return this.http.getJson(`/address/${a}`);
+    return this.http.getJson(`/address/${encodeURIComponent(a)}`);
   }
   addressTxs(a) {
-    return this.http.getJson(`/address/${a}/txs`);
+    return this.http.getJson(`/address/${encodeURIComponent(a)}/txs`);
   }
   addressUtxo(a) {
-    return this.http.getJson(`/address/${a}/utxo`);
+    return this.http.getJson(`/address/${encodeURIComponent(a)}/utxo`);
   }
   reputation(a) {
-    return this.http.getJson(`/address/${a}/reputation`);
+    return this.http.getJson(`/address/${encodeURIComponent(a)}/reputation`);
   }
   domains() {
     return this.http.getJson("/domains");
@@ -54,10 +64,10 @@ var IndexerClient = class {
     return this.http.getJson(`/domain/${encodeURIComponent(d)}/proposals`);
   }
   proposal(id) {
-    return this.http.getJson(`/proposal/${id}`);
+    return this.http.getJson(`/proposal/${encodeURIComponent(id)}`);
   }
   attestations(id) {
-    return this.http.getJson(`/proposal/${id}/attestations`);
+    return this.http.getJson(`/proposal/${encodeURIComponent(id)}/attestations`);
   }
   registryPeers() {
     return this.http.getJson("/registry/peers");
@@ -69,7 +79,7 @@ var IndexerClient = class {
     return this.http.getJson(`/identity/${encodeURIComponent(handle)}`);
   }
   reverseIdentity(addr) {
-    return this.http.getJson(`/address/${addr}/identity`);
+    return this.http.getJson(`/address/${encodeURIComponent(addr)}/identity`);
   }
   // ---- trust-minimized inclusion ----------------------------------------
   /**
@@ -78,9 +88,11 @@ var IndexerClient = class {
    * proof's root is cross-checked against the header merkle at that height →
    * trustLevel "verified-inclusion" (only as trustworthy as that header source —
    * see headerMerkleAt). Otherwise the proof is only internally consistent →
-   * "proof-consistent" (still useful, but the indexer is trusted). The Cairn
-   * facade wires headerMerkleAt ONLY when the node RPC is an independent origin
-   * from the indexer, so the default same-origin setup stays at "proof-consistent".
+   * "proof-consistent" (still useful, but the indexer is trusted). INDEXER-DOC-STALE-1: the Cairn facade now
+   * wires headerMerkleAt UNCONDITIONALLY via a PoW-verifying checkpoint light client (index.ts), so the
+   * default reaches "verified-inclusion" when the proof root matches the PoW-verified header — what makes a
+   * same-origin RPC safe is the forward PoW re-verification, not an origin gate (which no longer exists).
+   * Fails closed: a malformed proof or a chain-disagreement returns "not-found" (the latter with equivocation:true).
    */
   async verifyInclusion(txid) {
     let proof;
@@ -89,7 +101,15 @@ var IndexerClient = class {
     } catch {
       return { included: false, trustLevel: "not-found", reason: "no merkle proof (tx not indexed)" };
     }
-    const folds = verifyMerkleProof(txid, proof.pos, proof.merkle, proof.merkle_root);
+    if (!isValidMerkleProof(proof)) {
+      return { included: false, trustLevel: "not-found", reason: "malformed merkle proof" };
+    }
+    let folds = false;
+    try {
+      folds = verifyMerkleProof(txid, proof.pos, proof.merkle, proof.merkle_root);
+    } catch {
+      return { included: false, trustLevel: "not-found", blockHeight: proof.block_height, reason: "malformed merkle proof" };
+    }
     if (!folds) {
       return { included: false, trustLevel: "not-found", blockHeight: proof.block_height, reason: "merkle branch does not fold to the claimed root" };
     }
@@ -97,7 +117,7 @@ var IndexerClient = class {
       try {
         const onchain = await this.opts.headerMerkleAt(proof.block_height);
         if (norm(onchain) !== norm(proof.merkle_root)) {
-          return { included: false, trustLevel: "not-found", blockHeight: proof.block_height, reason: "proof root != on-chain header merkle (indexer disagrees with chain)" };
+          return { included: false, trustLevel: "not-found", equivocation: true, blockHeight: proof.block_height, reason: "proof root != on-chain header merkle (indexer disagrees with chain)" };
         }
         return { included: true, trustLevel: "verified-inclusion", blockHeight: proof.block_height, pos: proof.pos, merkleRoot: proof.merkle_root };
       } catch {
@@ -121,6 +141,11 @@ var IndexerClient = class {
   /**
    * Subscribe over WebSocket with selective tracking. Returns a handle with
    * `.close()`. `onEvent` receives every matching IndexEvent (incl. reorgs).
+   *
+   * WS-NORECONNECT-1: unlike the SSE feeds (streamAll/streamBlocks/streamDomain, which auto-reconnect with
+   * backoff), this WebSocket subscription does NOT auto-reconnect — it surfaces a terminal error via
+   * `onError` (when provided) and stops. A consumer tracking reorgs over WS MUST re-`subscribe()` on error
+   * to avoid a silently-stale view; for built-in reconnect prefer the SSE `stream*` methods.
    */
   subscribe(sub, onEvent, onError) {
     const WS = this.opts.WebSocketImpl ?? globalThis.WebSocket;
@@ -183,6 +208,13 @@ var IndexerClient = class {
               buf = buf.slice(idx + 2);
               dispatchFrame(frame, handlers);
             }
+            if (buf.length > MAX_SSE_BUF) {
+              try {
+                await reader.cancel();
+              } catch {
+              }
+              throw new Error(`SSE buffer exceeded ${MAX_SSE_BUF} bytes with no frame delimiter \u2014 aborting`);
+            }
           }
         } catch (err) {
           if (closed) return;

package/dist/{chunk-UMGWVOOT.js → chunk-RELP23CH.js}

@@ -1,5 +1,5 @@
 // src/errors.ts
-var SDK_VERSION = "0.1.2";
+var SDK_VERSION = "0.1.4";
 var DOCS_BASE = "https://cairn-substrate.com/docs/sdk";
 var CairnError = class extends Error {
   /** Stable machine code for programmatic branching. */

package/dist/connect.cjs

@@ -30,7 +30,7 @@ __export(connect_exports, {
 module.exports = __toCommonJS(connect_exports);
 
 // src/errors.ts
-var SDK_VERSION = "0.1.2";
+var SDK_VERSION = "0.1.4";
 var DOCS_BASE = "https://cairn-substrate.com/docs/sdk";
 var CairnError = class extends Error {
   /** Stable machine code for programmatic branching. */

package/dist/connect.d.cts

@@ -188,6 +188,12 @@ declare function isInstalled(): boolean;
 /**
  * High-level, typed wallet handle. Construct via `connect()` or `new WalletConnection(provider)`.
  * Methods throw `UserRejectedError` / `WalletLockedError` / `UnsupportedMethodError` on failure.
+ *
+ * Note (typed-error contract): the genuine Cairn Wallet always RESOLVES a `{ok,result|error}` reply, so a
+ * failure is mapped to a typed `CairnError` via `unwrap`. A non-conformant or SPOOFED provider that instead
+ * REJECTS its promise will surface that raw rejection un-mapped (it bypasses `unwrap`), so a dApp's
+ * `catch (e) { errorCode(e) }` may see `UNKNOWN` from such a provider. The real auth boundary is server-side
+ * SIWC verification, never a client-side error code.
  */
 declare class WalletConnection {
     readonly provider: CairnProvider;

package/dist/connect.d.ts

@@ -188,6 +188,12 @@ declare function isInstalled(): boolean;
 /**
  * High-level, typed wallet handle. Construct via `connect()` or `new WalletConnection(provider)`.
  * Methods throw `UserRejectedError` / `WalletLockedError` / `UnsupportedMethodError` on failure.
+ *
+ * Note (typed-error contract): the genuine Cairn Wallet always RESOLVES a `{ok,result|error}` reply, so a
+ * failure is mapped to a typed `CairnError` via `unwrap`. A non-conformant or SPOOFED provider that instead
+ * REJECTS its promise will surface that raw rejection un-mapped (it bypasses `unwrap`), so a dApp's
+ * `catch (e) { errorCode(e) }` may see `UNKNOWN` from such a provider. The real auth boundary is server-side
+ * SIWC verification, never a client-side error code.
  */
 declare class WalletConnection {
     readonly provider: CairnProvider;

package/dist/connect.js

@@ -5,8 +5,8 @@ import {
   discoverProviders,
   getWallet,
   isInstalled
-} from "./chunk-G4OZKZSJ.js";
-import "./chunk-UMGWVOOT.js";
+} from "./chunk-K7SJOW3O.js";
+import "./chunk-RELP23CH.js";
 export {
   WalletConnection,
   connect,

package/dist/content.cjs

@@ -26,7 +26,7 @@ module.exports = __toCommonJS(content_exports);
 var import_csd_codec = require("@inversealtruism/csd-codec");
 
 // src/errors.ts
-var SDK_VERSION = "0.1.2";
+var SDK_VERSION = "0.1.4";
 var DOCS_BASE = "https://cairn-substrate.com/docs/sdk";
 var CairnError = class extends Error {
   /** Stable machine code for programmatic branching. */
@@ -135,8 +135,9 @@ var ContentClient = class {
   }
 };
 function normalizeHash(hash) {
-  const h = hash.startsWith("0x") || hash.startsWith("0X") ? hash : `0x${hash}`;
-  return h.toLowerCase();
+  const h = (hash.startsWith("0x") || hash.startsWith("0X") ? hash : `0x${hash}`).toLowerCase();
+  if (!/^0x[0-9a-f]{64}$/.test(h)) throw new Error(`invalid content hash: ${hash}`);
+  return h;
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {

package/dist/content.d.cts

@@ -1,4 +1,4 @@
-import { H as Http } from './http-D2CzfOsm.cjs';
+import { H as Http } from './http-CQsNL8w9.cjs';
 
 interface ContentClientOptions {
     /** Swarm gateway HTTP client (e.g. https://cairn-substrate.com/swarm). */

package/dist/content.d.ts

@@ -1,4 +1,4 @@
-import { H as Http } from './http-D2CzfOsm.js';
+import { H as Http } from './http-CQsNL8w9.js';
 
 interface ContentClientOptions {
     /** Swarm gateway HTTP client (e.g. https://cairn-substrate.com/swarm). */

package/dist/content.js

@@ -1,7 +1,7 @@
 import {
   ContentClient
-} from "./chunk-OSXS26RA.js";
-import "./chunk-UMGWVOOT.js";
+} from "./chunk-MVX7VQT4.js";
+import "./chunk-RELP23CH.js";
 export {
   ContentClient
 };

package/dist/controller.cjs

@@ -25,7 +25,7 @@ __export(controller_exports, {
 module.exports = __toCommonJS(controller_exports);
 
 // src/errors.ts
-var SDK_VERSION = "0.1.2";
+var SDK_VERSION = "0.1.4";
 var DOCS_BASE = "https://cairn-substrate.com/docs/sdk";
 var CairnError = class extends Error {
   /** Stable machine code for programmatic branching. */
@@ -294,12 +294,28 @@ var CairnController = class {
     for (const l of [...this.listeners]) l();
   }
   onAccounts = (accounts) => {
-    if (!Array.isArray(accounts) || accounts.length === 0) this.setState({ status: "disconnected", account: null });
-    else this.setState({ status: "connected", account: String(accounts[0]), error: null });
+    if (!Array.isArray(accounts) || accounts.length === 0) {
+      this.setState({ status: "disconnected", account: null });
+      return;
+    }
+    const next = String(accounts[0]);
+    if (this.state.status === "connected" && this.state.account && next.toLowerCase() === this.state.account.toLowerCase()) {
+      this.setState({ status: "connected", account: next, error: null });
+    } else {
+      this.setState({ status: "disconnected", account: null });
+    }
   };
   onDisconnect = () => {
     this.setState({ status: "disconnected", account: null });
   };
+  // Detach the provider listeners (ghost-reconnect fix). Idempotent + best-effort.
+  detach() {
+    try {
+      this.conn?.off?.("accountsChanged", this.onAccounts);
+      this.conn?.off?.("disconnect", this.onDisconnect);
+    } catch {
+    }
+  }
   /** Detect + connect (prompts the user the first time per origin). Resolves the connected address. */
   connect = async () => {
     this.setState({ status: "connecting", error: null });
@@ -323,6 +339,8 @@ var CairnController = class {
       await this.conn?.revokePermissions();
     } catch {
     }
+    this.detach();
+    this.conn = null;
     this.setState({ status: "disconnected", account: null, error: null });
   };
   /** Audience-bound sign-in (must connect() first). Returns the signed artifact to verify server-side. */

package/dist/controller.d.cts

@@ -25,6 +25,7 @@ declare class CairnController {
     private setState;
     private onAccounts;
     private onDisconnect;
+    private detach;
     /** Detect + connect (prompts the user the first time per origin). Resolves the connected address. */
     connect: () => Promise<string>;
     /** Forget the connection locally AND revoke this origin's wallet-side permission (best-effort). */

package/dist/controller.d.ts

@@ -25,6 +25,7 @@ declare class CairnController {
     private setState;
     private onAccounts;
     private onDisconnect;
+    private detach;
     /** Detect + connect (prompts the user the first time per origin). Resolves the connected address. */
     connect: () => Promise<string>;
     /** Forget the connection locally AND revoke this origin's wallet-side permission (best-effort). */

package/dist/controller.js

@@ -1,8 +1,8 @@
 import {
   CairnController
-} from "./chunk-ZAE2BIH5.js";
-import "./chunk-G4OZKZSJ.js";
-import "./chunk-UMGWVOOT.js";
+} from "./chunk-MBSPHWZG.js";
+import "./chunk-K7SJOW3O.js";
+import "./chunk-RELP23CH.js";
 export {
   CairnController
 };

package/dist/{http-D2CzfOsm.d.ts → http-CQsNL8w9.d.cts}

@@ -6,6 +6,10 @@ interface HttpOptions {
     fetch?: FetchLike;
     /** Per-request timeout in ms (default 15000). */
     timeoutMs?: number;
+    /** Max response body bytes accepted before aborting (default 16 MiB — matches the cairn proxy cap).
+     *  CAIRNSDK-DESER-4: the SDK's sources (indexer/content) are self-classified UNTRUSTED; without a cap a
+     *  hostile/MITM'd source can stream an unbounded body and OOM the client (browser tab / MV3 worker / bot). */
+    maxBytes?: number;
     /** Extra headers sent on every request. */
     headers?: Record<string, string>;
 }
@@ -13,6 +17,7 @@ declare class Http {
     readonly baseUrl: string;
     private readonly _fetch;
     private readonly timeoutMs;
+    private readonly maxBytes;
     private readonly headers;
     constructor(opts: HttpOptions);
     /** Build an absolute URL from a path + optional query params. */

package/dist/{http-D2CzfOsm.d.cts → http-CQsNL8w9.d.ts}

@@ -6,6 +6,10 @@ interface HttpOptions {
     fetch?: FetchLike;
     /** Per-request timeout in ms (default 15000). */
     timeoutMs?: number;
+    /** Max response body bytes accepted before aborting (default 16 MiB — matches the cairn proxy cap).
+     *  CAIRNSDK-DESER-4: the SDK's sources (indexer/content) are self-classified UNTRUSTED; without a cap a
+     *  hostile/MITM'd source can stream an unbounded body and OOM the client (browser tab / MV3 worker / bot). */
+    maxBytes?: number;
     /** Extra headers sent on every request. */
     headers?: Record<string, string>;
 }
@@ -13,6 +17,7 @@ declare class Http {
     readonly baseUrl: string;
     private readonly _fetch;
     private readonly timeoutMs;
+    private readonly maxBytes;
     private readonly headers;
     constructor(opts: HttpOptions);
     /** Build an absolute URL from a path + optional query params. */