@inversealtruism/cairn-sdk 0.1.3 → 0.2.0

package/dist/indexer.cjs

@@ -24,6 +24,13 @@ __export(indexer_exports, {
 });
 module.exports = __toCommonJS(indexer_exports);
 var import_csd_codec = require("@inversealtruism/csd-codec");
+var HEX64 = /^0x[0-9a-fA-F]{64}$/;
+var MAX_SSE_BUF = 1024 * 1024;
+function isValidMerkleProof(p) {
+  if (!p || typeof p !== "object") return false;
+  const m = p;
+  return Number.isInteger(m.block_height) && m.block_height >= 0 && Number.isInteger(m.pos) && m.pos >= 0 && typeof m.merkle_root === "string" && HEX64.test(m.merkle_root) && Array.isArray(m.merkle) && m.merkle.every((x) => typeof x === "string" && HEX64.test(x));
+}
 var IndexerClient = class {
   http;
   opts;
@@ -44,32 +51,35 @@ var IndexerClient = class {
   blockHashAtHeight(h) {
     return this.http.getJson(`/block-height/${h}`);
   }
+  // CAIRNSDK-CONTENT-HASH-PATH-1: encode every caller-supplied id segment. Raw interpolation let an id like
+  // `../../api/rpc/tip` walk `new URL` to a DIFFERENT same-origin endpoint whose body was then returned
+  // verbatim as the requested object (worse than the content case, which discards the walked-to response).
   block(hash) {
-    return this.http.getJson(`/block/${hash}`);
+    return this.http.getJson(`/block/${encodeURIComponent(hash)}`);
   }
   blockTxids(hash) {
-    return this.http.getJson(`/block/${hash}/txids`);
+    return this.http.getJson(`/block/${encodeURIComponent(hash)}/txids`);
   }
   tx(id) {
-    return this.http.getJson(`/tx/${id}`);
+    return this.http.getJson(`/tx/${encodeURIComponent(id)}`);
   }
   txStatus(id) {
-    return this.http.getJson(`/tx/${id}/status`);
+    return this.http.getJson(`/tx/${encodeURIComponent(id)}/status`);
   }
   txMerkleProof(id) {
-    return this.http.getJson(`/tx/${id}/merkle-proof`);
+    return this.http.getJson(`/tx/${encodeURIComponent(id)}/merkle-proof`);
   }
   address(a) {
-    return this.http.getJson(`/address/${a}`);
+    return this.http.getJson(`/address/${encodeURIComponent(a)}`);
   }
   addressTxs(a) {
-    return this.http.getJson(`/address/${a}/txs`);
+    return this.http.getJson(`/address/${encodeURIComponent(a)}/txs`);
   }
   addressUtxo(a) {
-    return this.http.getJson(`/address/${a}/utxo`);
+    return this.http.getJson(`/address/${encodeURIComponent(a)}/utxo`);
   }
   reputation(a) {
-    return this.http.getJson(`/address/${a}/reputation`);
+    return this.http.getJson(`/address/${encodeURIComponent(a)}/reputation`);
   }
   domains() {
     return this.http.getJson("/domains");
@@ -78,10 +88,10 @@ var IndexerClient = class {
     return this.http.getJson(`/domain/${encodeURIComponent(d)}/proposals`);
   }
   proposal(id) {
-    return this.http.getJson(`/proposal/${id}`);
+    return this.http.getJson(`/proposal/${encodeURIComponent(id)}`);
   }
   attestations(id) {
-    return this.http.getJson(`/proposal/${id}/attestations`);
+    return this.http.getJson(`/proposal/${encodeURIComponent(id)}/attestations`);
   }
   registryPeers() {
     return this.http.getJson("/registry/peers");
@@ -93,7 +103,7 @@ var IndexerClient = class {
     return this.http.getJson(`/identity/${encodeURIComponent(handle)}`);
   }
   reverseIdentity(addr) {
-    return this.http.getJson(`/address/${addr}/identity`);
+    return this.http.getJson(`/address/${encodeURIComponent(addr)}/identity`);
   }
   // ---- trust-minimized inclusion ----------------------------------------
   /**
@@ -102,9 +112,11 @@ var IndexerClient = class {
    * proof's root is cross-checked against the header merkle at that height →
    * trustLevel "verified-inclusion" (only as trustworthy as that header source —
    * see headerMerkleAt). Otherwise the proof is only internally consistent →
-   * "proof-consistent" (still useful, but the indexer is trusted). The Cairn
-   * facade wires headerMerkleAt ONLY when the node RPC is an independent origin
-   * from the indexer, so the default same-origin setup stays at "proof-consistent".
+   * "proof-consistent" (still useful, but the indexer is trusted). INDEXER-DOC-STALE-1: the Cairn facade now
+   * wires headerMerkleAt UNCONDITIONALLY via a PoW-verifying checkpoint light client (index.ts), so the
+   * default reaches "verified-inclusion" when the proof root matches the PoW-verified header — what makes a
+   * same-origin RPC safe is the forward PoW re-verification, not an origin gate (which no longer exists).
+   * Fails closed: a malformed proof or a chain-disagreement returns "not-found" (the latter with equivocation:true).
    */
   async verifyInclusion(txid) {
     let proof;
@@ -113,7 +125,15 @@ var IndexerClient = class {
     } catch {
       return { included: false, trustLevel: "not-found", reason: "no merkle proof (tx not indexed)" };
     }
-    const folds = (0, import_csd_codec.verifyMerkleProof)(txid, proof.pos, proof.merkle, proof.merkle_root);
+    if (!isValidMerkleProof(proof)) {
+      return { included: false, trustLevel: "not-found", reason: "malformed merkle proof" };
+    }
+    let folds = false;
+    try {
+      folds = (0, import_csd_codec.verifyMerkleProof)(txid, proof.pos, proof.merkle, proof.merkle_root);
+    } catch {
+      return { included: false, trustLevel: "not-found", blockHeight: proof.block_height, reason: "malformed merkle proof" };
+    }
     if (!folds) {
       return { included: false, trustLevel: "not-found", blockHeight: proof.block_height, reason: "merkle branch does not fold to the claimed root" };
     }
@@ -121,7 +141,7 @@ var IndexerClient = class {
       try {
         const onchain = await this.opts.headerMerkleAt(proof.block_height);
         if (norm(onchain) !== norm(proof.merkle_root)) {
-          return { included: false, trustLevel: "not-found", blockHeight: proof.block_height, reason: "proof root != on-chain header merkle (indexer disagrees with chain)" };
+          return { included: false, trustLevel: "not-found", equivocation: true, blockHeight: proof.block_height, reason: "proof root != on-chain header merkle (indexer disagrees with chain)" };
         }
         return { included: true, trustLevel: "verified-inclusion", blockHeight: proof.block_height, pos: proof.pos, merkleRoot: proof.merkle_root };
       } catch {
@@ -145,6 +165,11 @@ var IndexerClient = class {
   /**
    * Subscribe over WebSocket with selective tracking. Returns a handle with
    * `.close()`. `onEvent` receives every matching IndexEvent (incl. reorgs).
+   *
+   * WS-NORECONNECT-1: unlike the SSE feeds (streamAll/streamBlocks/streamDomain, which auto-reconnect with
+   * backoff), this WebSocket subscription does NOT auto-reconnect — it surfaces a terminal error via
+   * `onError` (when provided) and stops. A consumer tracking reorgs over WS MUST re-`subscribe()` on error
+   * to avoid a silently-stale view; for built-in reconnect prefer the SSE `stream*` methods.
    */
   subscribe(sub, onEvent, onError) {
     const WS = this.opts.WebSocketImpl ?? globalThis.WebSocket;
@@ -207,13 +232,20 @@ var IndexerClient = class {
               buf = buf.slice(idx + 2);
               dispatchFrame(frame, handlers);
             }
+            if (buf.length > MAX_SSE_BUF) {
+              try {
+                await reader.cancel();
+              } catch {
+              }
+              throw new Error(`SSE buffer exceeded ${MAX_SSE_BUF} bytes with no frame delimiter \u2014 aborting`);
+            }
           }
         } catch (err) {
           if (closed) return;
           handlers.onError?.(err);
         }
         if (closed) return;
-        await new Promise((r) => setTimeout(r, 2e3));
+        await new Promise((r) => setTimeout(r, 1e3 + Math.floor(Math.random() * 2e3)));
       }
     };
     void run();

package/dist/indexer.d.cts

@@ -1,4 +1,4 @@
-import { H as Http, F as FetchLike } from './http-D2CzfOsm.cjs';
+import { H as Http, F as FetchLike } from './http-C9C4L4hz.cjs';
 
 interface MerkleProof {
     block_height: number;
@@ -14,6 +14,10 @@ interface InclusionResult {
     pos?: number;
     merkleRoot?: string;
     reason?: string;
+    /** CAIRN-SPV-3: set true when a folding proof's root conflicts with the PoW-verified on-chain header
+     *  merkle (active indexer↔chain equivocation/tamper) — distinct from an honest tx-absence. Consumers that
+     *  retry on `not-found` MUST check this and treat it as a detected attack, NOT a benign miss. */
+    equivocation?: boolean;
 }
 /** A live index event ({ kind: "block" | "proposal" | "attestation" | "reorg", ... }). */
 interface IndexEvent {
@@ -71,9 +75,11 @@ declare class IndexerClient {
      * proof's root is cross-checked against the header merkle at that height →
      * trustLevel "verified-inclusion" (only as trustworthy as that header source —
      * see headerMerkleAt). Otherwise the proof is only internally consistent →
-     * "proof-consistent" (still useful, but the indexer is trusted). The Cairn
-     * facade wires headerMerkleAt ONLY when the node RPC is an independent origin
-     * from the indexer, so the default same-origin setup stays at "proof-consistent".
+     * "proof-consistent" (still useful, but the indexer is trusted). INDEXER-DOC-STALE-1: the Cairn facade now
+     * wires headerMerkleAt UNCONDITIONALLY via a PoW-verifying checkpoint light client (index.ts), so the
+     * default reaches "verified-inclusion" when the proof root matches the PoW-verified header — what makes a
+     * same-origin RPC safe is the forward PoW re-verification, not an origin gate (which no longer exists).
+     * Fails closed: a malformed proof or a chain-disagreement returns "not-found" (the latter with equivocation:true).
      */
     verifyInclusion(txid: string): Promise<InclusionResult>;
     /** Stream all events (blocks, proposals, attestations, reorgs) via SSE. */
@@ -85,6 +91,11 @@ declare class IndexerClient {
     /**
      * Subscribe over WebSocket with selective tracking. Returns a handle with
      * `.close()`. `onEvent` receives every matching IndexEvent (incl. reorgs).
+     *
+     * WS-NORECONNECT-1: unlike the SSE feeds (streamAll/streamBlocks/streamDomain, which auto-reconnect with
+     * backoff), this WebSocket subscription does NOT auto-reconnect — it surfaces a terminal error via
+     * `onError` (when provided) and stops. A consumer tracking reorgs over WS MUST re-`subscribe()` on error
+     * to avoid a silently-stale view; for built-in reconnect prefer the SSE `stream*` methods.
      */
     subscribe(sub: {
         all?: boolean;

package/dist/indexer.d.ts

@@ -1,4 +1,4 @@
-import { H as Http, F as FetchLike } from './http-D2CzfOsm.js';
+import { H as Http, F as FetchLike } from './http-C9C4L4hz.js';
 
 interface MerkleProof {
     block_height: number;
@@ -14,6 +14,10 @@ interface InclusionResult {
     pos?: number;
     merkleRoot?: string;
     reason?: string;
+    /** CAIRN-SPV-3: set true when a folding proof's root conflicts with the PoW-verified on-chain header
+     *  merkle (active indexer↔chain equivocation/tamper) — distinct from an honest tx-absence. Consumers that
+     *  retry on `not-found` MUST check this and treat it as a detected attack, NOT a benign miss. */
+    equivocation?: boolean;
 }
 /** A live index event ({ kind: "block" | "proposal" | "attestation" | "reorg", ... }). */
 interface IndexEvent {
@@ -71,9 +75,11 @@ declare class IndexerClient {
      * proof's root is cross-checked against the header merkle at that height →
      * trustLevel "verified-inclusion" (only as trustworthy as that header source —
      * see headerMerkleAt). Otherwise the proof is only internally consistent →
-     * "proof-consistent" (still useful, but the indexer is trusted). The Cairn
-     * facade wires headerMerkleAt ONLY when the node RPC is an independent origin
-     * from the indexer, so the default same-origin setup stays at "proof-consistent".
+     * "proof-consistent" (still useful, but the indexer is trusted). INDEXER-DOC-STALE-1: the Cairn facade now
+     * wires headerMerkleAt UNCONDITIONALLY via a PoW-verifying checkpoint light client (index.ts), so the
+     * default reaches "verified-inclusion" when the proof root matches the PoW-verified header — what makes a
+     * same-origin RPC safe is the forward PoW re-verification, not an origin gate (which no longer exists).
+     * Fails closed: a malformed proof or a chain-disagreement returns "not-found" (the latter with equivocation:true).
      */
     verifyInclusion(txid: string): Promise<InclusionResult>;
     /** Stream all events (blocks, proposals, attestations, reorgs) via SSE. */
@@ -85,6 +91,11 @@ declare class IndexerClient {
     /**
      * Subscribe over WebSocket with selective tracking. Returns a handle with
      * `.close()`. `onEvent` receives every matching IndexEvent (incl. reorgs).
+     *
+     * WS-NORECONNECT-1: unlike the SSE feeds (streamAll/streamBlocks/streamDomain, which auto-reconnect with
+     * backoff), this WebSocket subscription does NOT auto-reconnect — it surfaces a terminal error via
+     * `onError` (when provided) and stops. A consumer tracking reorgs over WS MUST re-`subscribe()` on error
+     * to avoid a silently-stale view; for built-in reconnect prefer the SSE `stream*` methods.
      */
     subscribe(sub: {
         all?: boolean;

package/dist/indexer.js

@@ -1,6 +1,6 @@
 import {
   IndexerClient
-} from "./chunk-FNBE2FPE.js";
+} from "./chunk-J5J4JEJ6.js";
 export {
   IndexerClient
 };

package/dist/react.cjs

@@ -26,7 +26,7 @@ __export(react_exports, {
 module.exports = __toCommonJS(react_exports);
 
 // src/errors.ts
-var SDK_VERSION = "0.1.2";
+var SDK_VERSION = "0.2.0";
 var DOCS_BASE = "https://cairn-substrate.com/docs/sdk";
 var CairnError = class extends Error {
   /** Stable machine code for programmatic branching. */
@@ -83,7 +83,12 @@ var UnsupportedMethodError = class extends CairnError {
     super(message, { code: "UNSUPPORTED_METHOD", docsPath: "/errors#unsupported-method" });
   }
 };
-function mapProviderError(error) {
+var NATIVE_CODES = /* @__PURE__ */ new Set(["ACCOUNT_CHANGED", "FIRST_PARTY_ONLY", "RATE_LIMITED", "APPROVAL_CLOSED", "FORBIDDEN", "INTERNAL"]);
+function mapProviderError(error, code) {
+  if (code === "USER_REJECTED" || code === "APPROVAL_CLOSED") return new UserRejectedError(error);
+  if (code === "WALLET_LOCKED") return new WalletLockedError(error);
+  if (code === "UNSUPPORTED_METHOD" || code === "UNKNOWN_KIND") return new UnsupportedMethodError(error);
+  if (code && NATIVE_CODES.has(code)) return new CairnError(error || code, { code });
   const e = String(error || "").toLowerCase();
   if (e.includes("rejected by user")) return new UserRejectedError(error);
   if (e.includes("wallet locked")) return new WalletLockedError(error);
@@ -136,7 +141,7 @@ function detectProvider(opts = {}) {
 }
 function unwrap(reply) {
   if (reply && reply.ok) return reply.result;
-  throw mapProviderError(reply?.error ?? "Unknown wallet error");
+  throw mapProviderError(reply?.error ?? "Unknown wallet error", reply?.code);
 }
 var WalletConnection = class {
   provider;
@@ -170,6 +175,9 @@ var WalletConnection = class {
    * Passwordless sign-in: a signature over a login nonce (always prompts; structurally cannot sign a tx).
    */
   signIn() {
+    if (typeof this.provider.signIn !== "function") {
+      return Promise.reject(new UnsupportedMethodError("this wallet does not expose signIn()"));
+    }
     return Promise.resolve(this.provider.signIn()).then(unwrap);
   }
   /**
@@ -203,6 +211,9 @@ var WalletConnection = class {
   }
   /** Atomic fill (CairnX DvP): pay + attest in ONE tx. Always prompts with clear-signing. */
   fillOffer(params) {
+    if (typeof this.provider.fillOffer !== "function") {
+      return Promise.reject(new UnsupportedMethodError("this wallet predates fillOffer() \u2014 ask the user to update the Cairn Wallet"));
+    }
     return Promise.resolve(this.provider.fillOffer(params)).then(unwrap);
   }
   /** This origin's current permission grant (EIP-2255-style). Silent; [] if none / unsupported. */
@@ -295,12 +306,28 @@ var CairnController = class {
     for (const l of [...this.listeners]) l();
   }
   onAccounts = (accounts) => {
-    if (!Array.isArray(accounts) || accounts.length === 0) this.setState({ status: "disconnected", account: null });
-    else this.setState({ status: "connected", account: String(accounts[0]), error: null });
+    if (!Array.isArray(accounts) || accounts.length === 0) {
+      this.setState({ status: "disconnected", account: null });
+      return;
+    }
+    const next = String(accounts[0]);
+    if (this.state.status === "connected" && this.state.account && next.toLowerCase() === this.state.account.toLowerCase()) {
+      this.setState({ status: "connected", account: next, error: null });
+    } else {
+      this.setState({ status: "disconnected", account: null });
+    }
   };
   onDisconnect = () => {
     this.setState({ status: "disconnected", account: null });
   };
+  // Detach the provider listeners (ghost-reconnect fix). Idempotent + best-effort.
+  detach() {
+    try {
+      this.conn?.off?.("accountsChanged", this.onAccounts);
+      this.conn?.off?.("disconnect", this.onDisconnect);
+    } catch {
+    }
+  }
   /** Detect + connect (prompts the user the first time per origin). Resolves the connected address. */
   connect = async () => {
     this.setState({ status: "connecting", error: null });
@@ -324,6 +351,8 @@ var CairnController = class {
       await this.conn?.revokePermissions();
     } catch {
     }
+    this.detach();
+    this.conn = null;
     this.setState({ status: "disconnected", account: null, error: null });
   };
   /** Audience-bound sign-in (must connect() first). Returns the signed artifact to verify server-side. */

package/dist/react.js

@@ -1,8 +1,8 @@
 import {
   CairnController
-} from "./chunk-ZAE2BIH5.js";
-import "./chunk-G4OZKZSJ.js";
-import "./chunk-UMGWVOOT.js";
+} from "./chunk-PYREGAB3.js";
+import "./chunk-UIEOBVFI.js";
+import "./chunk-JGXD3WIC.js";
 
 // src/react.ts
 function createCairnHooks(React, controllerOrOpts) {

package/dist/registry.cjs

@@ -48,11 +48,20 @@ var RegistryClient = class {
   peers() {
     return (0, import_csd_registry.discoverPeers)(this.src);
   }
-  /** Resolve a handle → identity (GET /identity/:handle). Returns null if unresolved. */
+  /**
+   * Resolve a handle → identity (GET /identity/:handle). Returns null if unresolved.
+   *
+   * ⚠ TRUST (CAIRN-SDK-RESOLVE-VERIFIED-FOOTGUN): the returned `verified` flag is the INDEXER's assertion,
+   * NOT a client-side proof. A hostile/compromised indexer (or a MITM of the read proxy) can return
+   * `verified:true` for a wrong address. Do NOT use this directly as a payee/login target without either (a)
+   * recomputing from raw records via `fromRecords.name(...)`, or (b) cross-checking a second independent
+   * source (the wallet's namespv union cure). Treat `verified` here as a hint, not a guarantee.
+   */
   resolveName(handle) {
     return (0, import_csd_registry.resolveName)(this.src, handle);
   }
-  /** Reverse-resolve an address → identity (GET /address/:addr/identity). */
+  /** Reverse-resolve an address → identity (GET /address/:addr/identity).
+   *  ⚠ Same indexer-trust caveat as resolveName — `verified` is the indexer's claim, not a client proof. */
   reverseName(address) {
     return (0, import_csd_registry.reverseName)(this.src, address);
   }

package/dist/registry.d.cts

@@ -1,6 +1,6 @@
 import * as _inversealtruism_csd_registry from '@inversealtruism/csd-registry';
 export { BuiltRecord, ChainRecord, DOMAINS, RankedGateway, RankedPeer, ResolveOpts, ResolvedIdentity, buildGatewayRecord, buildIdentityCommit, buildIdentityReveal, buildPeerRecord, epochOf, fromRecords, verifyGateway, verifyIdentitySig, verifyPeer } from '@inversealtruism/csd-registry';
-import { F as FetchLike } from './http-D2CzfOsm.cjs';
+import { F as FetchLike } from './http-C9C4L4hz.cjs';
 
 interface RegistryClientOptions {
     /** Indexer base URL exposing /registry/* + /identity/* (e.g. https://cairn-substrate.com/indexer). */
@@ -14,9 +14,18 @@ declare class RegistryClient {
     gateways(): Promise<_inversealtruism_csd_registry.RankedGateway[]>;
     /** Discover ranked libp2p peers (GET /registry/peers). */
     peers(): Promise<_inversealtruism_csd_registry.RankedPeer[]>;
-    /** Resolve a handle → identity (GET /identity/:handle). Returns null if unresolved. */
+    /**
+     * Resolve a handle → identity (GET /identity/:handle). Returns null if unresolved.
+     *
+     * ⚠ TRUST (CAIRN-SDK-RESOLVE-VERIFIED-FOOTGUN): the returned `verified` flag is the INDEXER's assertion,
+     * NOT a client-side proof. A hostile/compromised indexer (or a MITM of the read proxy) can return
+     * `verified:true` for a wrong address. Do NOT use this directly as a payee/login target without either (a)
+     * recomputing from raw records via `fromRecords.name(...)`, or (b) cross-checking a second independent
+     * source (the wallet's namespv union cure). Treat `verified` here as a hint, not a guarantee.
+     */
     resolveName(handle: string): Promise<_inversealtruism_csd_registry.ResolvedIdentity | null>;
-    /** Reverse-resolve an address → identity (GET /address/:addr/identity). */
+    /** Reverse-resolve an address → identity (GET /address/:addr/identity).
+     *  ⚠ Same indexer-trust caveat as resolveName — `verified` is the indexer's claim, not a client proof. */
     reverseName(address: string): Promise<_inversealtruism_csd_registry.ResolvedIdentity | null>;
     /** The deterministic, client-side resolvers (recompute from raw ChainRecord[]). */
     get fromRecords(): {

package/dist/registry.d.ts

@@ -1,6 +1,6 @@
 import * as _inversealtruism_csd_registry from '@inversealtruism/csd-registry';
 export { BuiltRecord, ChainRecord, DOMAINS, RankedGateway, RankedPeer, ResolveOpts, ResolvedIdentity, buildGatewayRecord, buildIdentityCommit, buildIdentityReveal, buildPeerRecord, epochOf, fromRecords, verifyGateway, verifyIdentitySig, verifyPeer } from '@inversealtruism/csd-registry';
-import { F as FetchLike } from './http-D2CzfOsm.js';
+import { F as FetchLike } from './http-C9C4L4hz.js';
 
 interface RegistryClientOptions {
     /** Indexer base URL exposing /registry/* + /identity/* (e.g. https://cairn-substrate.com/indexer). */
@@ -14,9 +14,18 @@ declare class RegistryClient {
     gateways(): Promise<_inversealtruism_csd_registry.RankedGateway[]>;
     /** Discover ranked libp2p peers (GET /registry/peers). */
     peers(): Promise<_inversealtruism_csd_registry.RankedPeer[]>;
-    /** Resolve a handle → identity (GET /identity/:handle). Returns null if unresolved. */
+    /**
+     * Resolve a handle → identity (GET /identity/:handle). Returns null if unresolved.
+     *
+     * ⚠ TRUST (CAIRN-SDK-RESOLVE-VERIFIED-FOOTGUN): the returned `verified` flag is the INDEXER's assertion,
+     * NOT a client-side proof. A hostile/compromised indexer (or a MITM of the read proxy) can return
+     * `verified:true` for a wrong address. Do NOT use this directly as a payee/login target without either (a)
+     * recomputing from raw records via `fromRecords.name(...)`, or (b) cross-checking a second independent
+     * source (the wallet's namespv union cure). Treat `verified` here as a hint, not a guarantee.
+     */
     resolveName(handle: string): Promise<_inversealtruism_csd_registry.ResolvedIdentity | null>;
-    /** Reverse-resolve an address → identity (GET /address/:addr/identity). */
+    /** Reverse-resolve an address → identity (GET /address/:addr/identity).
+     *  ⚠ Same indexer-trust caveat as resolveName — `verified` is the indexer's claim, not a client proof. */
     reverseName(address: string): Promise<_inversealtruism_csd_registry.ResolvedIdentity | null>;
     /** The deterministic, client-side resolvers (recompute from raw ChainRecord[]). */
     get fromRecords(): {

package/dist/registry.js

@@ -10,7 +10,7 @@ import {
   verifyGateway,
   verifyIdentitySig,
   verifyPeer
-} from "./chunk-G7FABIF4.js";
+} from "./chunk-BGJZF7S2.js";
 export {
   DOMAINS,
   RegistryClient,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@inversealtruism/cairn-sdk",
-  "version": "0.1.3",
-  "description": "The Compute Substrate dApp kit — one cohesive toolkit to connect the Cairn Wallet, read the chain/board, publish self-certifying content, and resolve registries. Composes the published csd-* primitives.",
+  "version": "0.2.0",
+  "description": "The Compute Substrate dApp kit \u2014 one cohesive toolkit to connect the Cairn Wallet, read the chain/board, publish self-certifying content, and resolve registries. Composes the published csd-* primitives.",
   "type": "module",
   "main": "./dist/index.cjs",
   "module": "./dist/index.js",
@@ -58,22 +58,43 @@
     "LICENSE",
     "README.md"
   ],
+  "scripts": {
+    "build": "tsup src/index.ts src/connect.ts src/board.ts src/indexer.ts src/content.ts src/registry.ts src/chain.ts src/controller.ts src/react.ts --format esm,cjs --dts --clean",
+    "test": "tsx test/sdk.test.ts && tsx test/connect.test.ts && tsx test/errors.test.ts && tsx test/controller.test.ts && tsx test/react.test.ts && tsx test/hardening.test.ts && tsx test/spv-checkpoint.test.ts && tsx test/names-b10.test.ts",
+    "test:live": "node examples/read-only.mjs",
+    "build:example": "node scripts/build-example.mjs",
+    "clean": "node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\"",
+    "test:e2e:read": "node test/e2e/e2e-read.mjs",
+    "test:e2e:wallet": "xvfb-run -a node test/e2e/e2e-wallet-connect.mjs",
+    "test:e2e:write": "node test/e2e/e2e-write.mjs",
+    "test:e2e": "node test/e2e/e2e-read.mjs && xvfb-run -a node test/e2e/e2e-wallet-connect.mjs",
+    "test:all": "pnpm test && pnpm test:e2e",
+    "prepublishOnly": "npm run build && npm test"
+  },
   "dependencies": {
-    "@inversealtruism/csd-client": "0.1.13",
-    "@inversealtruism/csd-codec": "0.1.13",
-    "@inversealtruism/csd-crypto": "0.1.13",
-    "@inversealtruism/csd-light": "0.1.13",
-    "@inversealtruism/csd-registry": "0.1.13",
-    "@inversealtruism/csd-tx": "0.1.13"
+    "@inversealtruism/cairnx-core": "0.1.31",
+    "@inversealtruism/csd-client": "0.1.15",
+    "@inversealtruism/csd-codec": "0.1.15",
+    "@inversealtruism/csd-crypto": "0.1.15",
+    "@inversealtruism/csd-light": "0.1.15",
+    "@inversealtruism/csd-registry": "0.1.15",
+    "@inversealtruism/csd-tx": "0.1.15"
   },
   "devDependencies": {
     "esbuild": "^0.27.0",
     "playwright-core": "^1.49.0",
     "tsup": "^8.5.1",
     "tsx": "^4.19.2",
-    "typescript": "^5.6.0"
+    "typescript": "^5.6.0",
+    "@inversealtruism/csd-siwc": "0.1.15"
   },
   "sideEffects": false,
+  "packageManager": "pnpm@10.32.1",
+  "pnpm": {
+    "onlyBuiltDependencies": [
+      "esbuild"
+    ]
+  },
   "license": "MIT",
   "publishConfig": {
     "access": "public"
@@ -91,17 +112,5 @@
     "dapp",
     "sdk",
     "blockchain"
-  ],
-  "scripts": {
-    "build": "tsup src/index.ts src/connect.ts src/board.ts src/indexer.ts src/content.ts src/registry.ts src/chain.ts src/controller.ts src/react.ts --format esm,cjs --dts --clean",
-    "test": "tsx test/sdk.test.ts && tsx test/connect.test.ts && tsx test/errors.test.ts && tsx test/controller.test.ts && tsx test/react.test.ts",
-    "test:live": "node examples/read-only.mjs",
-    "build:example": "node scripts/build-example.mjs",
-    "clean": "node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\"",
-    "test:e2e:read": "node test/e2e/e2e-read.mjs",
-    "test:e2e:wallet": "xvfb-run -a node test/e2e/e2e-wallet-connect.mjs",
-    "test:e2e:write": "node test/e2e/e2e-write.mjs",
-    "test:e2e": "node test/e2e/e2e-read.mjs && xvfb-run -a node test/e2e/e2e-wallet-connect.mjs",
-    "test:all": "pnpm test && pnpm test:e2e"
-  }
-}
+  ]
+}