@inversealtruism/cairn-sdk 0.1.3 → 0.2.0

package/dist/index.cjs

@@ -27,9 +27,11 @@ __export(index_exports, {
   Chain: () => Chain,
   ContentClient: () => ContentClient,
   ContentVerificationError: () => ContentVerificationError,
+  DEFAULT_SPV_CHECKPOINT: () => DEFAULT_SPV_CHECKPOINT,
   Http: () => Http,
   HttpError: () => HttpError,
   IndexerClient: () => IndexerClient,
+  NamesClient: () => NamesClient,
   NotInstalledError: () => NotInstalledError,
   RegistryClient: () => RegistryClient,
   SDK_VERSION: () => SDK_VERSION,
@@ -48,7 +50,7 @@ __export(index_exports, {
 module.exports = __toCommonJS(index_exports);
 
 // src/errors.ts
-var SDK_VERSION = "0.1.2";
+var SDK_VERSION = "0.2.0";
 var DOCS_BASE = "https://cairn-substrate.com/docs/sdk";
 var CairnError = class extends Error {
   /** Stable machine code for programmatic branching. */
@@ -123,7 +125,12 @@ var ContentVerificationError = class extends CairnError {
     this.expected = expected;
   }
 };
-function mapProviderError(error) {
+var NATIVE_CODES = /* @__PURE__ */ new Set(["ACCOUNT_CHANGED", "FIRST_PARTY_ONLY", "RATE_LIMITED", "APPROVAL_CLOSED", "FORBIDDEN", "INTERNAL"]);
+function mapProviderError(error, code) {
+  if (code === "USER_REJECTED" || code === "APPROVAL_CLOSED") return new UserRejectedError(error);
+  if (code === "WALLET_LOCKED") return new WalletLockedError(error);
+  if (code === "UNSUPPORTED_METHOD" || code === "UNKNOWN_KIND") return new UnsupportedMethodError(error);
+  if (code && NATIVE_CODES.has(code)) return new CairnError(error || code, { code });
   const e = String(error || "").toLowerCase();
   if (e.includes("rejected by user")) return new UserRejectedError(error);
   if (e.includes("wallet locked")) return new WalletLockedError(error);
@@ -135,23 +142,68 @@ function errorCode(err) {
 }
 
 // src/http.ts
+var DEFAULT_MAX_BYTES = 16 * 1024 * 1024;
+var ERR_TEXT_CAP = 8 * 1024;
+async function readCapped(res, maxBytes) {
+  const cl = Number(res.headers.get("content-length"));
+  if (Number.isFinite(cl) && cl > maxBytes) throw new HttpError(res.status, res.url, `response too large (content-length ${cl} > ${maxBytes})`);
+  const body = res.body;
+  if (!body || typeof body.getReader !== "function") {
+    const buf = new Uint8Array(await res.arrayBuffer());
+    if (buf.byteLength > maxBytes) throw new HttpError(res.status, res.url, `response too large (${buf.byteLength} > ${maxBytes})`);
+    return buf;
+  }
+  const reader = body.getReader();
+  const chunks = [];
+  let total = 0;
+  for (; ; ) {
+    const { done, value } = await reader.read();
+    if (done) break;
+    if (value) {
+      total += value.byteLength;
+      if (total > maxBytes) {
+        try {
+          await reader.cancel();
+        } catch {
+        }
+        throw new HttpError(res.status, res.url, `response exceeded ${maxBytes} bytes`);
+      }
+      chunks.push(value);
+    }
+  }
+  const out = new Uint8Array(total);
+  let off = 0;
+  for (const c of chunks) {
+    out.set(c, off);
+    off += c.byteLength;
+  }
+  return out;
+}
 var Http = class {
   baseUrl;
   _fetch;
   timeoutMs;
+  maxBytes;
   headers;
+  retries;
   constructor(opts) {
     this.baseUrl = opts.baseUrl.replace(/\/+$/, "");
     const f = opts.fetch ?? globalThis.fetch;
     if (!f) throw new Error("No fetch available \u2014 pass `fetch` in the SDK options.");
     this._fetch = opts.fetch ? opts.fetch : f.bind(globalThis);
     this.timeoutMs = opts.timeoutMs ?? 15e3;
+    this.maxBytes = opts.maxBytes ?? DEFAULT_MAX_BYTES;
     this.headers = opts.headers ?? {};
+    this.retries = Math.min(10, Math.max(0, Math.floor(opts.retries ?? 0)));
   }
   /** Build an absolute URL from a path + optional query params. */
   url(path, query) {
     const p = path.startsWith("/") ? path : `/${path}`;
     const u = new URL(this.baseUrl + p);
+    const basePath = new URL(this.baseUrl + "/").pathname;
+    if (basePath !== "/" && !(u.pathname + "/").startsWith(basePath)) {
+      throw new Error(`illegal path '${path}' \u2014 escapes base ${basePath}`);
+    }
     if (query) {
       for (const [k, v] of Object.entries(query)) {
         if (v !== void 0 && v !== null) u.searchParams.set(k, String(v));
@@ -179,28 +231,50 @@ var Http = class {
       clearTimeout(timer);
     }
   }
+  // A malformed 2xx body must surface as a TYPED HttpError, not a leaked SyntaxError (B10: dApp
+  // code branches on `instanceof CairnError`; a raw parse error escaped that contract).
+  parseJson(res, text, url) {
+    try {
+      return JSON.parse(text);
+    } catch (e) {
+      throw new HttpError(res.status, url, `invalid JSON body: ${text.slice(0, 120)}`);
+    }
+  }
   async getJson(path, query) {
-    const res = await this.raw("GET", path, { query });
-    if (!res.ok) throw new HttpError(res.status, this.url(path, query), await safeText(res));
-    return await res.json();
+    const url = this.url(path, query);
+    for (let attempt = 0; ; attempt++) {
+      try {
+        const res = await this.raw("GET", path, { query });
+        if (!res.ok) {
+          const err = new HttpError(res.status, url, await safeText(res));
+          if (!(res.status >= 500 && attempt < this.retries)) throw err;
+        } else {
+          return this.parseJson(res, new TextDecoder().decode(await readCapped(res, this.maxBytes)), url);
+        }
+      } catch (e) {
+        if (e instanceof HttpError && e.status < 500) throw e;
+        if (attempt >= this.retries) throw e;
+      }
+      await new Promise((r) => setTimeout(r, Math.floor(Math.random() * Math.min(4e3, 250 * 2 ** attempt))));
+    }
   }
   async postJson(path, body, headers) {
+    const url = this.url(path);
     const res = await this.raw("POST", path, { body, headers });
-    if (!res.ok) throw new HttpError(res.status, this.url(path), await safeText(res));
-    return await res.json();
+    if (!res.ok) throw new HttpError(res.status, url, await safeText(res));
+    return this.parseJson(res, new TextDecoder().decode(await readCapped(res, this.maxBytes)), url);
   }
   /** GET raw bytes (for content retrieval). Returns null on 404. */
   async getBytes(path) {
     const res = await this.raw("GET", path);
     if (res.status === 404) return null;
     if (!res.ok) throw new HttpError(res.status, this.url(path), await safeText(res));
-    const buf = new Uint8Array(await res.arrayBuffer());
-    return { bytes: buf, headers: res.headers };
+    return { bytes: await readCapped(res, this.maxBytes), headers: res.headers };
   }
 };
 async function safeText(res) {
   try {
-    return await res.text();
+    return new TextDecoder().decode(await readCapped(res, ERR_TEXT_CAP));
   } catch {
     return "";
   }
@@ -257,7 +331,7 @@ var Chain = class {
     });
     if (!built.ok || p.broadcast === false) return built;
     const submitResult = await this.client.submit(built.nodeJson);
-    return { ...built, submitResult };
+    return { ...built, ok: built.ok && submitResult.ok !== false, submitResult };
   }
   /** A verifying light client over the same RPC (built once, reused). */
   light() {
@@ -426,6 +500,13 @@ function sleep(ms) {
 
 // src/indexer.ts
 var import_csd_codec4 = require("@inversealtruism/csd-codec");
+var HEX64 = /^0x[0-9a-fA-F]{64}$/;
+var MAX_SSE_BUF = 1024 * 1024;
+function isValidMerkleProof(p) {
+  if (!p || typeof p !== "object") return false;
+  const m = p;
+  return Number.isInteger(m.block_height) && m.block_height >= 0 && Number.isInteger(m.pos) && m.pos >= 0 && typeof m.merkle_root === "string" && HEX64.test(m.merkle_root) && Array.isArray(m.merkle) && m.merkle.every((x) => typeof x === "string" && HEX64.test(x));
+}
 var IndexerClient = class {
   http;
   opts;
@@ -446,32 +527,35 @@ var IndexerClient = class {
   blockHashAtHeight(h) {
     return this.http.getJson(`/block-height/${h}`);
   }
+  // CAIRNSDK-CONTENT-HASH-PATH-1: encode every caller-supplied id segment. Raw interpolation let an id like
+  // `../../api/rpc/tip` walk `new URL` to a DIFFERENT same-origin endpoint whose body was then returned
+  // verbatim as the requested object (worse than the content case, which discards the walked-to response).
   block(hash) {
-    return this.http.getJson(`/block/${hash}`);
+    return this.http.getJson(`/block/${encodeURIComponent(hash)}`);
   }
   blockTxids(hash) {
-    return this.http.getJson(`/block/${hash}/txids`);
+    return this.http.getJson(`/block/${encodeURIComponent(hash)}/txids`);
   }
   tx(id) {
-    return this.http.getJson(`/tx/${id}`);
+    return this.http.getJson(`/tx/${encodeURIComponent(id)}`);
   }
   txStatus(id) {
-    return this.http.getJson(`/tx/${id}/status`);
+    return this.http.getJson(`/tx/${encodeURIComponent(id)}/status`);
   }
   txMerkleProof(id) {
-    return this.http.getJson(`/tx/${id}/merkle-proof`);
+    return this.http.getJson(`/tx/${encodeURIComponent(id)}/merkle-proof`);
   }
   address(a) {
-    return this.http.getJson(`/address/${a}`);
+    return this.http.getJson(`/address/${encodeURIComponent(a)}`);
   }
   addressTxs(a) {
-    return this.http.getJson(`/address/${a}/txs`);
+    return this.http.getJson(`/address/${encodeURIComponent(a)}/txs`);
   }
   addressUtxo(a) {
-    return this.http.getJson(`/address/${a}/utxo`);
+    return this.http.getJson(`/address/${encodeURIComponent(a)}/utxo`);
   }
   reputation(a) {
-    return this.http.getJson(`/address/${a}/reputation`);
+    return this.http.getJson(`/address/${encodeURIComponent(a)}/reputation`);
   }
   domains() {
     return this.http.getJson("/domains");
@@ -480,10 +564,10 @@ var IndexerClient = class {
     return this.http.getJson(`/domain/${encodeURIComponent(d)}/proposals`);
   }
   proposal(id) {
-    return this.http.getJson(`/proposal/${id}`);
+    return this.http.getJson(`/proposal/${encodeURIComponent(id)}`);
   }
   attestations(id) {
-    return this.http.getJson(`/proposal/${id}/attestations`);
+    return this.http.getJson(`/proposal/${encodeURIComponent(id)}/attestations`);
   }
   registryPeers() {
     return this.http.getJson("/registry/peers");
@@ -495,7 +579,7 @@ var IndexerClient = class {
     return this.http.getJson(`/identity/${encodeURIComponent(handle)}`);
   }
   reverseIdentity(addr) {
-    return this.http.getJson(`/address/${addr}/identity`);
+    return this.http.getJson(`/address/${encodeURIComponent(addr)}/identity`);
   }
   // ---- trust-minimized inclusion ----------------------------------------
   /**
@@ -504,9 +588,11 @@ var IndexerClient = class {
    * proof's root is cross-checked against the header merkle at that height →
    * trustLevel "verified-inclusion" (only as trustworthy as that header source —
    * see headerMerkleAt). Otherwise the proof is only internally consistent →
-   * "proof-consistent" (still useful, but the indexer is trusted). The Cairn
-   * facade wires headerMerkleAt ONLY when the node RPC is an independent origin
-   * from the indexer, so the default same-origin setup stays at "proof-consistent".
+   * "proof-consistent" (still useful, but the indexer is trusted). INDEXER-DOC-STALE-1: the Cairn facade now
+   * wires headerMerkleAt UNCONDITIONALLY via a PoW-verifying checkpoint light client (index.ts), so the
+   * default reaches "verified-inclusion" when the proof root matches the PoW-verified header — what makes a
+   * same-origin RPC safe is the forward PoW re-verification, not an origin gate (which no longer exists).
+   * Fails closed: a malformed proof or a chain-disagreement returns "not-found" (the latter with equivocation:true).
    */
   async verifyInclusion(txid2) {
     let proof;
@@ -515,7 +601,15 @@ var IndexerClient = class {
     } catch {
       return { included: false, trustLevel: "not-found", reason: "no merkle proof (tx not indexed)" };
     }
-    const folds = (0, import_csd_codec4.verifyMerkleProof)(txid2, proof.pos, proof.merkle, proof.merkle_root);
+    if (!isValidMerkleProof(proof)) {
+      return { included: false, trustLevel: "not-found", reason: "malformed merkle proof" };
+    }
+    let folds = false;
+    try {
+      folds = (0, import_csd_codec4.verifyMerkleProof)(txid2, proof.pos, proof.merkle, proof.merkle_root);
+    } catch {
+      return { included: false, trustLevel: "not-found", blockHeight: proof.block_height, reason: "malformed merkle proof" };
+    }
     if (!folds) {
       return { included: false, trustLevel: "not-found", blockHeight: proof.block_height, reason: "merkle branch does not fold to the claimed root" };
     }
@@ -523,7 +617,7 @@ var IndexerClient = class {
       try {
         const onchain = await this.opts.headerMerkleAt(proof.block_height);
         if (norm(onchain) !== norm(proof.merkle_root)) {
-          return { included: false, trustLevel: "not-found", blockHeight: proof.block_height, reason: "proof root != on-chain header merkle (indexer disagrees with chain)" };
+          return { included: false, trustLevel: "not-found", equivocation: true, blockHeight: proof.block_height, reason: "proof root != on-chain header merkle (indexer disagrees with chain)" };
         }
         return { included: true, trustLevel: "verified-inclusion", blockHeight: proof.block_height, pos: proof.pos, merkleRoot: proof.merkle_root };
       } catch {
@@ -547,6 +641,11 @@ var IndexerClient = class {
   /**
    * Subscribe over WebSocket with selective tracking. Returns a handle with
    * `.close()`. `onEvent` receives every matching IndexEvent (incl. reorgs).
+   *
+   * WS-NORECONNECT-1: unlike the SSE feeds (streamAll/streamBlocks/streamDomain, which auto-reconnect with
+   * backoff), this WebSocket subscription does NOT auto-reconnect — it surfaces a terminal error via
+   * `onError` (when provided) and stops. A consumer tracking reorgs over WS MUST re-`subscribe()` on error
+   * to avoid a silently-stale view; for built-in reconnect prefer the SSE `stream*` methods.
    */
   subscribe(sub, onEvent, onError) {
     const WS = this.opts.WebSocketImpl ?? globalThis.WebSocket;
@@ -609,13 +708,20 @@ var IndexerClient = class {
               buf = buf.slice(idx + 2);
               dispatchFrame(frame, handlers);
             }
+            if (buf.length > MAX_SSE_BUF) {
+              try {
+                await reader.cancel();
+              } catch {
+              }
+              throw new Error(`SSE buffer exceeded ${MAX_SSE_BUF} bytes with no frame delimiter \u2014 aborting`);
+            }
           }
         } catch (err) {
           if (closed) return;
           handlers.onError?.(err);
         }
         if (closed) return;
-        await new Promise((r) => setTimeout(r, 2e3));
+        await new Promise((r) => setTimeout(r, 1e3 + Math.floor(Math.random() * 2e3)));
       }
     };
     void run();
@@ -721,8 +827,9 @@ var ContentClient = class {
   }
 };
 function normalizeHash(hash) {
-  const h = hash.startsWith("0x") || hash.startsWith("0X") ? hash : `0x${hash}`;
-  return h.toLowerCase();
+  const h = (hash.startsWith("0x") || hash.startsWith("0X") ? hash : `0x${hash}`).toLowerCase();
+  if (!/^0x[0-9a-f]{64}$/.test(h)) throw new Error(`invalid content hash: ${hash}`);
+  return h;
 }
 
 // src/registry.ts
@@ -741,11 +848,20 @@ var RegistryClient = class {
   peers() {
     return (0, import_csd_registry.discoverPeers)(this.src);
   }
-  /** Resolve a handle → identity (GET /identity/:handle). Returns null if unresolved. */
+  /**
+   * Resolve a handle → identity (GET /identity/:handle). Returns null if unresolved.
+   *
+   * ⚠ TRUST (CAIRN-SDK-RESOLVE-VERIFIED-FOOTGUN): the returned `verified` flag is the INDEXER's assertion,
+   * NOT a client-side proof. A hostile/compromised indexer (or a MITM of the read proxy) can return
+   * `verified:true` for a wrong address. Do NOT use this directly as a payee/login target without either (a)
+   * recomputing from raw records via `fromRecords.name(...)`, or (b) cross-checking a second independent
+   * source (the wallet's namespv union cure). Treat `verified` here as a hint, not a guarantee.
+   */
   resolveName(handle) {
     return (0, import_csd_registry.resolveName)(this.src, handle);
   }
-  /** Reverse-resolve an address → identity (GET /address/:addr/identity). */
+  /** Reverse-resolve an address → identity (GET /address/:addr/identity).
+   *  ⚠ Same indexer-trust caveat as resolveName — `verified` is the indexer's claim, not a client proof. */
   reverseName(address) {
     return (0, import_csd_registry.reverseName)(this.src, address);
   }
@@ -755,6 +871,96 @@ var RegistryClient = class {
   }
 };
 
+// src/names.ts
+var import_cairnx_core = require("@inversealtruism/cairnx-core");
+var nameOk = (n) => typeof n === "string" && import_cairnx_core.NAME_RE.test(n) && !import_cairnx_core.RESERVED_NAMES.has(n);
+var NamesClient = class {
+  constructor(http) {
+    this.http = http;
+  }
+  http;
+  /** Resolve a .csd name for DISPLAY (server-trusted; see the module trust note). null = unknown/invalid name. */
+  async resolve(name) {
+    if (!nameOk(name)) return null;
+    try {
+      return await this.http.getJson(`/trade/api/cairnx/resolve/${name}`);
+    } catch (e) {
+      if (e?.status === 404) return null;
+      throw e;
+    }
+  }
+  /** Full detail for one name (lease, lock, resting offer, recapture). null = not registered/invalid. */
+  async name(name) {
+    if (!nameOk(name)) return null;
+    try {
+      return await this.http.getJson(`/trade/api/cairnx/name/${name}`);
+    } catch (e) {
+      if (e?.status === 404) return null;
+      throw e;
+    }
+  }
+  /** The event history of one name (registrations, transfers, sets, renewals). null = invalid name. */
+  async nameHistory(name) {
+    if (!nameOk(name)) return null;
+    try {
+      return await this.http.getJson(`/trade/api/cairnx/name-history/${name}`);
+    } catch (e) {
+      if (e?.status === 404) return null;
+      throw e;
+    }
+  }
+  /** Reverse lookup: an address's chosen primary .csd name (null name = none set). */
+  async primary(addr) {
+    if (typeof addr !== "string" || !/^0x[0-9a-fA-F]{40}$/.test(addr)) return null;
+    try {
+      return await this.http.getJson(`/trade/api/cairnx/primary/${addr.toLowerCase()}`);
+    } catch (e) {
+      if (e?.status === 404) return null;
+      throw e;
+    }
+  }
+  /** All names an address owns (plus its primary), as served by `/cairnx/address/:addr`. */
+  async namesOf(addr) {
+    if (typeof addr !== "string" || !/^0x[0-9a-fA-F]{40}$/.test(addr)) return null;
+    try {
+      return await this.http.getJson(`/trade/api/cairnx/address/${addr.toLowerCase()}`);
+    } catch (e) {
+      if (e?.status === 404) return null;
+      throw e;
+    }
+  }
+  /** All registered names (display list; short-edge-cached server-side). */
+  names() {
+    return this.http.getJson(`/trade/api/cairnx/names`);
+  }
+  /** All deployed tokens. */
+  tokens() {
+    return this.http.getJson(`/trade/api/cairnx/tokens`);
+  }
+  /** One token by ticker. null = unknown/invalid ticker. */
+  async token(ticker) {
+    if (typeof ticker !== "string" || !/^[A-Z][A-Z0-9]{2,11}$/.test(ticker)) return null;
+    try {
+      return await this.http.getJson(`/trade/api/cairnx/token/${ticker}`);
+    } catch (e) {
+      if (e?.status === 404) return null;
+      throw e;
+    }
+  }
+  /** Open offers (the market's display list). */
+  offers() {
+    return this.http.getJson(`/trade/api/cairnx/offers`);
+  }
+  /** Open bids. */
+  bids() {
+    return this.http.getJson(`/trade/api/cairnx/bids`);
+  }
+  /** The full canonical CairnX state (large; prefer the scoped reads above). */
+  state() {
+    return this.http.getJson(`/trade/api/cairnx/state`);
+  }
+};
+
 // src/connect.ts
 function discoverProviders(opts = {}) {
   const timeoutMs = opts.timeoutMs ?? 1e3;
@@ -823,7 +1029,7 @@ function isInstalled() {
 }
 function unwrap(reply) {
   if (reply && reply.ok) return reply.result;
-  throw mapProviderError(reply?.error ?? "Unknown wallet error");
+  throw mapProviderError(reply?.error ?? "Unknown wallet error", reply?.code);
 }
 var WalletConnection = class {
   provider;
@@ -857,6 +1063,9 @@ var WalletConnection = class {
    * Passwordless sign-in: a signature over a login nonce (always prompts; structurally cannot sign a tx).
    */
   signIn() {
+    if (typeof this.provider.signIn !== "function") {
+      return Promise.reject(new UnsupportedMethodError("this wallet does not expose signIn()"));
+    }
     return Promise.resolve(this.provider.signIn()).then(unwrap);
   }
   /**
@@ -890,6 +1099,9 @@ var WalletConnection = class {
   }
   /** Atomic fill (CairnX DvP): pay + attest in ONE tx. Always prompts with clear-signing. */
   fillOffer(params) {
+    if (typeof this.provider.fillOffer !== "function") {
+      return Promise.reject(new UnsupportedMethodError("this wallet predates fillOffer() \u2014 ask the user to update the Cairn Wallet"));
+    }
     return Promise.resolve(this.provider.fillOffer(params)).then(unwrap);
   }
   /** This origin's current permission grant (EIP-2255-style). Silent; [] if none / unsupported. */
@@ -987,12 +1199,28 @@ var CairnController = class {
     for (const l of [...this.listeners]) l();
   }
   onAccounts = (accounts) => {
-    if (!Array.isArray(accounts) || accounts.length === 0) this.setState({ status: "disconnected", account: null });
-    else this.setState({ status: "connected", account: String(accounts[0]), error: null });
+    if (!Array.isArray(accounts) || accounts.length === 0) {
+      this.setState({ status: "disconnected", account: null });
+      return;
+    }
+    const next = String(accounts[0]);
+    if (this.state.status === "connected" && this.state.account && next.toLowerCase() === this.state.account.toLowerCase()) {
+      this.setState({ status: "connected", account: next, error: null });
+    } else {
+      this.setState({ status: "disconnected", account: null });
+    }
   };
   onDisconnect = () => {
     this.setState({ status: "disconnected", account: null });
   };
+  // Detach the provider listeners (ghost-reconnect fix). Idempotent + best-effort.
+  detach() {
+    try {
+      this.conn?.off?.("accountsChanged", this.onAccounts);
+      this.conn?.off?.("disconnect", this.onDisconnect);
+    } catch {
+    }
+  }
   /** Detect + connect (prompts the user the first time per origin). Resolves the connected address. */
   connect = async () => {
     this.setState({ status: "connecting", error: null });
@@ -1016,6 +1244,8 @@ var CairnController = class {
       await this.conn?.revokePermissions();
     } catch {
     }
+    this.detach();
+    this.conn = null;
     this.setState({ status: "disconnected", account: null, error: null });
   };
   /** Audience-bound sign-in (must connect() first). Returns the signed artifact to verify server-side. */
@@ -1026,7 +1256,7 @@ var CairnController = class {
 };
 
 // src/index.ts
-var DEFAULT_SPV_CHECKPOINT = { height: 31310, hash: "0x000000000000138bd3eee4b8d2fbacb8d5433ac3040ddbf1c45a5e3e0cc9e814" };
+var DEFAULT_SPV_CHECKPOINT = { height: 38142, hash: "0x00000000000140f023cc0ee1457a40833f2fcb4de44291b9d373e50f17b97232" };
 var DEFAULT_CAIRN = "https://cairn-substrate.com";
 var Cairn = class {
   config;
@@ -1034,6 +1264,8 @@ var Cairn = class {
   index;
   content;
   registry;
+  /** .csd names + CairnX market READS (server-trusted display reads; see names.ts trust note). */
+  names;
   board;
   wallet;
   cairnHttp;
@@ -1062,6 +1294,7 @@ var Cairn = class {
     });
     this.content = new ContentClient({ swarm: swarmHttp, indexer: indexerHttp, cairn: this.cairnHttp });
     this.registry = new RegistryClient({ baseUrl: indexer, fetch });
+    this.names = new NamesClient(this.cairnHttp);
   }
   /**
    * PoW-VERIFIED header merkle at a height (audit M3 — the no-PoW half). Lazily seeds a light
@@ -1114,9 +1347,11 @@ var Cairn = class {
   Chain,
   ContentClient,
   ContentVerificationError,
+  DEFAULT_SPV_CHECKPOINT,
   Http,
   HttpError,
   IndexerClient,
+  NamesClient,
   NotInstalledError,
   RegistryClient,
   SDK_VERSION,