@inversealtruism/cairn-sdk 0.1.3 → 0.2.0

package/dist/content.js

@@ -1,7 +1,7 @@
 import {
   ContentClient
-} from "./chunk-OSXS26RA.js";
-import "./chunk-UMGWVOOT.js";
+} from "./chunk-SIUUY6FZ.js";
+import "./chunk-JGXD3WIC.js";
 export {
   ContentClient
 };

package/dist/controller.cjs

@@ -25,7 +25,7 @@ __export(controller_exports, {
 module.exports = __toCommonJS(controller_exports);
 
 // src/errors.ts
-var SDK_VERSION = "0.1.2";
+var SDK_VERSION = "0.2.0";
 var DOCS_BASE = "https://cairn-substrate.com/docs/sdk";
 var CairnError = class extends Error {
   /** Stable machine code for programmatic branching. */
@@ -82,7 +82,12 @@ var UnsupportedMethodError = class extends CairnError {
     super(message, { code: "UNSUPPORTED_METHOD", docsPath: "/errors#unsupported-method" });
   }
 };
-function mapProviderError(error) {
+var NATIVE_CODES = /* @__PURE__ */ new Set(["ACCOUNT_CHANGED", "FIRST_PARTY_ONLY", "RATE_LIMITED", "APPROVAL_CLOSED", "FORBIDDEN", "INTERNAL"]);
+function mapProviderError(error, code) {
+  if (code === "USER_REJECTED" || code === "APPROVAL_CLOSED") return new UserRejectedError(error);
+  if (code === "WALLET_LOCKED") return new WalletLockedError(error);
+  if (code === "UNSUPPORTED_METHOD" || code === "UNKNOWN_KIND") return new UnsupportedMethodError(error);
+  if (code && NATIVE_CODES.has(code)) return new CairnError(error || code, { code });
   const e = String(error || "").toLowerCase();
   if (e.includes("rejected by user")) return new UserRejectedError(error);
   if (e.includes("wallet locked")) return new WalletLockedError(error);
@@ -135,7 +140,7 @@ function detectProvider(opts = {}) {
 }
 function unwrap(reply) {
   if (reply && reply.ok) return reply.result;
-  throw mapProviderError(reply?.error ?? "Unknown wallet error");
+  throw mapProviderError(reply?.error ?? "Unknown wallet error", reply?.code);
 }
 var WalletConnection = class {
   provider;
@@ -169,6 +174,9 @@ var WalletConnection = class {
    * Passwordless sign-in: a signature over a login nonce (always prompts; structurally cannot sign a tx).
    */
   signIn() {
+    if (typeof this.provider.signIn !== "function") {
+      return Promise.reject(new UnsupportedMethodError("this wallet does not expose signIn()"));
+    }
     return Promise.resolve(this.provider.signIn()).then(unwrap);
   }
   /**
@@ -202,6 +210,9 @@ var WalletConnection = class {
   }
   /** Atomic fill (CairnX DvP): pay + attest in ONE tx. Always prompts with clear-signing. */
   fillOffer(params) {
+    if (typeof this.provider.fillOffer !== "function") {
+      return Promise.reject(new UnsupportedMethodError("this wallet predates fillOffer() \u2014 ask the user to update the Cairn Wallet"));
+    }
     return Promise.resolve(this.provider.fillOffer(params)).then(unwrap);
   }
   /** This origin's current permission grant (EIP-2255-style). Silent; [] if none / unsupported. */
@@ -294,12 +305,28 @@ var CairnController = class {
     for (const l of [...this.listeners]) l();
   }
   onAccounts = (accounts) => {
-    if (!Array.isArray(accounts) || accounts.length === 0) this.setState({ status: "disconnected", account: null });
-    else this.setState({ status: "connected", account: String(accounts[0]), error: null });
+    if (!Array.isArray(accounts) || accounts.length === 0) {
+      this.setState({ status: "disconnected", account: null });
+      return;
+    }
+    const next = String(accounts[0]);
+    if (this.state.status === "connected" && this.state.account && next.toLowerCase() === this.state.account.toLowerCase()) {
+      this.setState({ status: "connected", account: next, error: null });
+    } else {
+      this.setState({ status: "disconnected", account: null });
+    }
   };
   onDisconnect = () => {
     this.setState({ status: "disconnected", account: null });
   };
+  // Detach the provider listeners (ghost-reconnect fix). Idempotent + best-effort.
+  detach() {
+    try {
+      this.conn?.off?.("accountsChanged", this.onAccounts);
+      this.conn?.off?.("disconnect", this.onDisconnect);
+    } catch {
+    }
+  }
   /** Detect + connect (prompts the user the first time per origin). Resolves the connected address. */
   connect = async () => {
     this.setState({ status: "connecting", error: null });
@@ -323,6 +350,8 @@ var CairnController = class {
       await this.conn?.revokePermissions();
     } catch {
     }
+    this.detach();
+    this.conn = null;
     this.setState({ status: "disconnected", account: null, error: null });
   };
   /** Audience-bound sign-in (must connect() first). Returns the signed artifact to verify server-side. */

package/dist/controller.d.cts

@@ -25,6 +25,7 @@ declare class CairnController {
     private setState;
     private onAccounts;
     private onDisconnect;
+    private detach;
     /** Detect + connect (prompts the user the first time per origin). Resolves the connected address. */
     connect: () => Promise<string>;
     /** Forget the connection locally AND revoke this origin's wallet-side permission (best-effort). */

package/dist/controller.d.ts

@@ -25,6 +25,7 @@ declare class CairnController {
     private setState;
     private onAccounts;
     private onDisconnect;
+    private detach;
     /** Detect + connect (prompts the user the first time per origin). Resolves the connected address. */
     connect: () => Promise<string>;
     /** Forget the connection locally AND revoke this origin's wallet-side permission (best-effort). */

package/dist/controller.js

@@ -1,8 +1,8 @@
 import {
   CairnController
-} from "./chunk-ZAE2BIH5.js";
-import "./chunk-G4OZKZSJ.js";
-import "./chunk-UMGWVOOT.js";
+} from "./chunk-PYREGAB3.js";
+import "./chunk-UIEOBVFI.js";
+import "./chunk-JGXD3WIC.js";
 export {
   CairnController
 };

package/dist/{http-D2CzfOsm.d.cts → http-C9C4L4hz.d.cts}

@@ -6,18 +6,29 @@ interface HttpOptions {
     fetch?: FetchLike;
     /** Per-request timeout in ms (default 15000). */
     timeoutMs?: number;
+    /** Max response body bytes accepted before aborting (default 16 MiB — matches the cairn proxy cap).
+     *  CAIRNSDK-DESER-4: the SDK's sources (indexer/content) are self-classified UNTRUSTED; without a cap a
+     *  hostile/MITM'd source can stream an unbounded body and OOM the client (browser tab / MV3 worker / bot). */
+    maxBytes?: number;
     /** Extra headers sent on every request. */
     headers?: Record<string, string>;
+    /** Opt-in retry budget for IDEMPOTENT GETs only (default 0 = today's behavior). Retries fire on
+     *  network errors/timeouts and 5xx, never on 4xx (mirrors csd-client's posture), with full-jitter
+     *  backoff. POSTs are never retried (they may not be idempotent). */
+    retries?: number;
 }
 declare class Http {
     readonly baseUrl: string;
     private readonly _fetch;
     private readonly timeoutMs;
+    private readonly maxBytes;
     private readonly headers;
+    private readonly retries;
     constructor(opts: HttpOptions);
     /** Build an absolute URL from a path + optional query params. */
     url(path: string, query?: Record<string, string | number | boolean | undefined>): string;
     private raw;
+    private parseJson;
     getJson<T = unknown>(path: string, query?: Record<string, string | number | boolean | undefined>): Promise<T>;
     postJson<T = unknown>(path: string, body: unknown, headers?: Record<string, string>): Promise<T>;
     /** GET raw bytes (for content retrieval). Returns null on 404. */

package/dist/{http-D2CzfOsm.d.ts → http-C9C4L4hz.d.ts}

@@ -6,18 +6,29 @@ interface HttpOptions {
     fetch?: FetchLike;
     /** Per-request timeout in ms (default 15000). */
     timeoutMs?: number;
+    /** Max response body bytes accepted before aborting (default 16 MiB — matches the cairn proxy cap).
+     *  CAIRNSDK-DESER-4: the SDK's sources (indexer/content) are self-classified UNTRUSTED; without a cap a
+     *  hostile/MITM'd source can stream an unbounded body and OOM the client (browser tab / MV3 worker / bot). */
+    maxBytes?: number;
     /** Extra headers sent on every request. */
     headers?: Record<string, string>;
+    /** Opt-in retry budget for IDEMPOTENT GETs only (default 0 = today's behavior). Retries fire on
+     *  network errors/timeouts and 5xx, never on 4xx (mirrors csd-client's posture), with full-jitter
+     *  backoff. POSTs are never retried (they may not be idempotent). */
+    retries?: number;
 }
 declare class Http {
     readonly baseUrl: string;
     private readonly _fetch;
     private readonly timeoutMs;
+    private readonly maxBytes;
     private readonly headers;
+    private readonly retries;
     constructor(opts: HttpOptions);
     /** Build an absolute URL from a path + optional query params. */
     url(path: string, query?: Record<string, string | number | boolean | undefined>): string;
     private raw;
+    private parseJson;
     getJson<T = unknown>(path: string, query?: Record<string, string | number | boolean | undefined>): Promise<T>;
     postJson<T = unknown>(path: string, body: unknown, headers?: Record<string, string>): Promise<T>;
     /** GET raw bytes (for content retrieval). Returns null on 404. */