@inversealtruism/cairn-sdk 0.2.3 → 0.3.0

package/dist/board.cjs

@@ -27,7 +27,7 @@ var import_csd_codec = require("@inversealtruism/csd-codec");
 var import_csd_codec2 = require("@inversealtruism/csd-codec");
 
 // src/errors.ts
-var SDK_VERSION = "0.2.3";
+var SDK_VERSION = "0.3.0";
 var DOCS_BASE = "https://cairn-substrate.com/docs/sdk";
 var CairnError = class extends Error {
   /** Stable machine code for programmatic branching. */
@@ -38,6 +38,12 @@ var CairnError = class extends Error {
   docsPath;
   /** The cairn-sdk version that produced this error. */
   version = SDK_VERSION;
+  /**
+   * Whether a dApp may safely AUTO-retry this failure. `false` for fund-safety refusals and user-intent
+   * declines (the default); `true` only for provably transient infra faults where nothing was signed.
+   * A `SubmitInFlightError` is `false` too: reconcile its `txid`, never blind-retry.
+   */
+  retryable;
   constructor(shortMessage, opts = {}) {
     const docs = opts.docsPath;
     super(
@@ -48,6 +54,7 @@ var CairnError = class extends Error {
     this.code = opts.code ?? "UNKNOWN";
     this.shortMessage = shortMessage;
     this.docsPath = docs;
+    this.retryable = opts.retryable ?? false;
   }
   /**
    * Walk the `cause` chain. With a predicate, returns the FIRST matching error (or null). Without one,

package/dist/board.js

@@ -1,7 +1,7 @@
 import {
   BoardClient
-} from "./chunk-SVW7FUBJ.js";
-import "./chunk-M6OSWJVC.js";
+} from "./chunk-NLCF5T2F.js";
+import "./chunk-E2Z3XSCW.js";
 export {
   BoardClient
 };

package/dist/{chunk-AAOETAUE.js → chunk-4RDXEW35.js}

@@ -1,6 +1,6 @@
 import {
   ContentVerificationError
-} from "./chunk-M6OSWJVC.js";
+} from "./chunk-E2Z3XSCW.js";
 
 // src/content.ts
 import { payloadHash, canonicalJson, verifyContentBytes } from "@inversealtruism/csd-codec";

package/dist/{chunk-M6OSWJVC.js → chunk-E2Z3XSCW.js}

@@ -1,5 +1,5 @@
 // src/errors.ts
-var SDK_VERSION = "0.2.3";
+var SDK_VERSION = "0.3.0";
 var DOCS_BASE = "https://cairn-substrate.com/docs/sdk";
 var CairnError = class extends Error {
   /** Stable machine code for programmatic branching. */
@@ -10,6 +10,12 @@ var CairnError = class extends Error {
   docsPath;
   /** The cairn-sdk version that produced this error. */
   version = SDK_VERSION;
+  /**
+   * Whether a dApp may safely AUTO-retry this failure. `false` for fund-safety refusals and user-intent
+   * declines (the default); `true` only for provably transient infra faults where nothing was signed.
+   * A `SubmitInFlightError` is `false` too: reconcile its `txid`, never blind-retry.
+   */
+  retryable;
   constructor(shortMessage, opts = {}) {
     const docs = opts.docsPath;
     super(
@@ -20,6 +26,7 @@ var CairnError = class extends Error {
     this.code = opts.code ?? "UNKNOWN";
     this.shortMessage = shortMessage;
     this.docsPath = docs;
+    this.retryable = opts.retryable ?? false;
   }
   /**
    * Walk the `cause` chain. With a predicate, returns the FIRST matching error (or null). Without one,
@@ -74,11 +81,43 @@ var ContentVerificationError = class extends CairnError {
     this.expected = expected;
   }
 };
+var SubmitInFlightError = class extends CairnError {
+  /** The locally-computed consensus txid to reconcile against the chain (may be undefined if the wallet omitted it). */
+  txid;
+  /** Always true: the tx MAY be in the mempool. Reconcile via `txid`; never blind-retry. */
+  maybeSent = true;
+  constructor(message, code, txid) {
+    super(message, { code, docsPath: "/errors#submit-inflight", retryable: false });
+    this.txid = txid;
+  }
+};
 var NATIVE_CODES = /* @__PURE__ */ new Set(["ACCOUNT_CHANGED", "FIRST_PARTY_ONLY", "RATE_LIMITED", "APPROVAL_CLOSED", "FORBIDDEN", "INTERNAL"]);
+var NESTED_TRANSIENT = /* @__PURE__ */ new Set(["VERIFY_UNAVAILABLE", "OFFER_UNKNOWN"]);
+var NESTED_TERMINAL = /* @__PURE__ */ new Set([
+  "FILL_UNSAFE",
+  "FILL_WRONG_TARGET",
+  "SOURCE_DIVERGENCE",
+  "VERIFY_TAMPER",
+  "SUBMIT_REJECTED",
+  "BAD_REQUEST",
+  "BAD_FEE",
+  "BAD_OUTPUTS",
+  "NO_OUTPUTS",
+  "ZERO_ADDR_REFUSED",
+  "TOO_MANY_INPUTS",
+  "INSUFFICIENT",
+  "FEE_CAP",
+  "FEE_TOO_LOW",
+  "ACCOUNT_CHANGED",
+  "GHOST_INPUTS_SKIPPED",
+  "NOTHING_TO_CONSOLIDATE"
+]);
 function mapProviderError(error, code) {
   if (code === "USER_REJECTED" || code === "APPROVAL_CLOSED") return new UserRejectedError(error);
   if (code === "WALLET_LOCKED") return new WalletLockedError(error);
   if (code === "UNSUPPORTED_METHOD" || code === "UNKNOWN_KIND") return new UnsupportedMethodError(error);
+  if (code && NESTED_TRANSIENT.has(code)) return new CairnError(error || code, { code, retryable: true });
+  if (code && NESTED_TERMINAL.has(code)) return new CairnError(error || code, { code, retryable: false });
   if (code && NATIVE_CODES.has(code)) return new CairnError(error || code, { code });
   const e = String(error || "").toLowerCase();
   if (e.includes("rejected by user")) return new UserRejectedError(error);
@@ -86,6 +125,14 @@ function mapProviderError(error, code) {
   if (e.includes("unsupported dapp method") || e.includes("predates") || e.includes("too old")) return new UnsupportedMethodError(error);
   return new CairnError(error || "Unknown wallet error");
 }
+function mapSubmitResultError(result) {
+  const code = result?.code;
+  const msg = typeof result?.error === "string" && result.error || code || "The wallet refused the transaction.";
+  if (code === "SUBMIT_MAYBE_INFLIGHT" || code === "SUBMIT_DUPLICATE") {
+    return new SubmitInFlightError(msg, code, typeof result?.txid === "string" ? result.txid : void 0);
+  }
+  return mapProviderError(msg, code);
+}
 function errorCode(err) {
   return err instanceof CairnError ? err.code : "UNKNOWN";
 }
@@ -99,6 +146,8 @@ export {
   UnsupportedMethodError,
   HttpError,
   ContentVerificationError,
+  SubmitInFlightError,
   mapProviderError,
+  mapSubmitResultError,
   errorCode
 };

package/dist/{chunk-SVW7FUBJ.js → chunk-NLCF5T2F.js}

@@ -1,6 +1,6 @@
 import {
   CairnError
-} from "./chunk-M6OSWJVC.js";
+} from "./chunk-E2Z3XSCW.js";
 
 // src/board.ts
 import { payloadHash } from "@inversealtruism/csd-codec";

package/dist/{chunk-TKZXUBDX.js → chunk-QV2GIXO7.js}

@@ -1,8 +1,9 @@
 import {
   NotInstalledError,
   UnsupportedMethodError,
-  mapProviderError
-} from "./chunk-M6OSWJVC.js";
+  mapProviderError,
+  mapSubmitResultError
+} from "./chunk-E2Z3XSCW.js";
 
 // src/connect.ts
 function discoverProviders(opts = {}) {
@@ -74,6 +75,13 @@ function unwrap(reply) {
   if (reply && reply.ok) return reply.result;
   throw mapProviderError(reply?.error ?? "Unknown wallet error", reply?.code);
 }
+function unwrapWrite(reply) {
+  const result = unwrap(reply);
+  if (result && typeof result === "object" && result.ok === false) {
+    throw mapSubmitResultError(result);
+  }
+  return result;
+}
 var WalletConnection = class {
   provider;
   _addr = null;
@@ -140,12 +148,18 @@ var WalletConnection = class {
       return null;
     }
   }
-  /** Atomic fill (CairnX DvP): pay + attest in ONE tx. Always prompts with clear-signing. */
+  /**
+   * CairnX fill: pay + attest in ONE tx (atomic SETTLEMENT SHAPE, both revert together). Always prompts with
+   * clear-signing. The payment recipient in `params.outputs` is RESOLVER-TRUSTED here: this SDK does NOT
+   * SPV-verify it, so a lying resolver can redirect the payment. A dApp settling real value MUST corroborate
+   * the offer on-chain before building `outputs` (F13). The wallet's own fill-SPV boundary (cairn-wallet
+   * 0.2.60+, which binds payment/rebate/fee to the merkle-proven offer) is the payment-grade check; see FillParams.
+   */
   fillOffer(params) {
     if (typeof this.provider.fillOffer !== "function") {
       return Promise.reject(new UnsupportedMethodError("this wallet predates fillOffer() \u2014 ask the user to update the Cairn Wallet"));
     }
-    return Promise.resolve(this.provider.fillOffer(params)).then(unwrap);
+    return Promise.resolve(this.provider.fillOffer(params)).then(unwrapWrite);
   }
   /** This origin's current permission grant (EIP-2255-style). Silent; [] if none / unsupported. */
   async getPermissions() {
@@ -178,26 +192,26 @@ var WalletConnection = class {
   }
   /** Send CSD (always prompts with clear-signing; wallet picks inputs + returns change to itself). */
   send(params) {
-    return Promise.resolve(this.provider.send(params)).then(unwrap);
+    return Promise.resolve(this.provider.send(params)).then(unwrapWrite);
   }
   /** Low-level Propose (always prompts). Prefer `cairn.board.propose()` which computes the hash/uri/expiry. */
   propose(params) {
-    return Promise.resolve(this.provider.propose(params)).then(unwrap);
+    return Promise.resolve(this.provider.propose(params)).then(unwrapWrite);
   }
   /** Attest/support a proposal (always prompts). */
   attest(params) {
-    return Promise.resolve(this.provider.attest(params)).then(unwrap);
+    return Promise.resolve(this.provider.attest(params)).then(unwrapWrite);
   }
   /** Seal a commit-reveal claim (always prompts; salt stays inside the wallet). */
   sealClaim(params) {
-    return Promise.resolve(this.provider.sealClaim(params)).then(unwrap);
+    return Promise.resolve(this.provider.sealClaim(params)).then(unwrapWrite);
   }
   /** Reveal a previously sealed claim by its sealing txid (always prompts). */
   revealClaim(txid) {
     if (typeof txid !== "string" || !txid) {
       return Promise.reject(new UnsupportedMethodError("revealClaim requires the sealing txid"));
     }
-    return Promise.resolve(this.provider.revealClaim(txid)).then(unwrap);
+    return Promise.resolve(this.provider.revealClaim(txid)).then(unwrapWrite);
   }
 };
 async function getWallet(opts = {}) {

package/dist/{chunk-72YSLTLO.js → chunk-UMXLWUEF.js}

@@ -1,6 +1,6 @@
 import {
   getWallet
-} from "./chunk-TKZXUBDX.js";
+} from "./chunk-QV2GIXO7.js";
 
 // src/controller.ts
 var DISCONNECTED = Object.freeze({ status: "disconnected", account: null, error: null });

package/dist/connect.cjs

@@ -30,7 +30,7 @@ __export(connect_exports, {
 module.exports = __toCommonJS(connect_exports);
 
 // src/errors.ts
-var SDK_VERSION = "0.2.3";
+var SDK_VERSION = "0.3.0";
 var DOCS_BASE = "https://cairn-substrate.com/docs/sdk";
 var CairnError = class extends Error {
   /** Stable machine code for programmatic branching. */
@@ -41,6 +41,12 @@ var CairnError = class extends Error {
   docsPath;
   /** The cairn-sdk version that produced this error. */
   version = SDK_VERSION;
+  /**
+   * Whether a dApp may safely AUTO-retry this failure. `false` for fund-safety refusals and user-intent
+   * declines (the default); `true` only for provably transient infra faults where nothing was signed.
+   * A `SubmitInFlightError` is `false` too: reconcile its `txid`, never blind-retry.
+   */
+  retryable;
   constructor(shortMessage, opts = {}) {
     const docs = opts.docsPath;
     super(
@@ -51,6 +57,7 @@ var CairnError = class extends Error {
     this.code = opts.code ?? "UNKNOWN";
     this.shortMessage = shortMessage;
     this.docsPath = docs;
+    this.retryable = opts.retryable ?? false;
   }
   /**
    * Walk the `cause` chain. With a predicate, returns the FIRST matching error (or null). Without one,
@@ -87,11 +94,43 @@ var UnsupportedMethodError = class extends CairnError {
     super(message, { code: "UNSUPPORTED_METHOD", docsPath: "/errors#unsupported-method" });
   }
 };
+var SubmitInFlightError = class extends CairnError {
+  /** The locally-computed consensus txid to reconcile against the chain (may be undefined if the wallet omitted it). */
+  txid;
+  /** Always true: the tx MAY be in the mempool. Reconcile via `txid`; never blind-retry. */
+  maybeSent = true;
+  constructor(message, code, txid) {
+    super(message, { code, docsPath: "/errors#submit-inflight", retryable: false });
+    this.txid = txid;
+  }
+};
 var NATIVE_CODES = /* @__PURE__ */ new Set(["ACCOUNT_CHANGED", "FIRST_PARTY_ONLY", "RATE_LIMITED", "APPROVAL_CLOSED", "FORBIDDEN", "INTERNAL"]);
+var NESTED_TRANSIENT = /* @__PURE__ */ new Set(["VERIFY_UNAVAILABLE", "OFFER_UNKNOWN"]);
+var NESTED_TERMINAL = /* @__PURE__ */ new Set([
+  "FILL_UNSAFE",
+  "FILL_WRONG_TARGET",
+  "SOURCE_DIVERGENCE",
+  "VERIFY_TAMPER",
+  "SUBMIT_REJECTED",
+  "BAD_REQUEST",
+  "BAD_FEE",
+  "BAD_OUTPUTS",
+  "NO_OUTPUTS",
+  "ZERO_ADDR_REFUSED",
+  "TOO_MANY_INPUTS",
+  "INSUFFICIENT",
+  "FEE_CAP",
+  "FEE_TOO_LOW",
+  "ACCOUNT_CHANGED",
+  "GHOST_INPUTS_SKIPPED",
+  "NOTHING_TO_CONSOLIDATE"
+]);
 function mapProviderError(error, code) {
   if (code === "USER_REJECTED" || code === "APPROVAL_CLOSED") return new UserRejectedError(error);
   if (code === "WALLET_LOCKED") return new WalletLockedError(error);
   if (code === "UNSUPPORTED_METHOD" || code === "UNKNOWN_KIND") return new UnsupportedMethodError(error);
+  if (code && NESTED_TRANSIENT.has(code)) return new CairnError(error || code, { code, retryable: true });
+  if (code && NESTED_TERMINAL.has(code)) return new CairnError(error || code, { code, retryable: false });
   if (code && NATIVE_CODES.has(code)) return new CairnError(error || code, { code });
   const e = String(error || "").toLowerCase();
   if (e.includes("rejected by user")) return new UserRejectedError(error);
@@ -99,6 +138,14 @@ function mapProviderError(error, code) {
   if (e.includes("unsupported dapp method") || e.includes("predates") || e.includes("too old")) return new UnsupportedMethodError(error);
   return new CairnError(error || "Unknown wallet error");
 }
+function mapSubmitResultError(result) {
+  const code = result?.code;
+  const msg = typeof result?.error === "string" && result.error || code || "The wallet refused the transaction.";
+  if (code === "SUBMIT_MAYBE_INFLIGHT" || code === "SUBMIT_DUPLICATE") {
+    return new SubmitInFlightError(msg, code, typeof result?.txid === "string" ? result.txid : void 0);
+  }
+  return mapProviderError(msg, code);
+}
 
 // src/connect.ts
 function discoverProviders(opts = {}) {
@@ -170,6 +217,13 @@ function unwrap(reply) {
   if (reply && reply.ok) return reply.result;
   throw mapProviderError(reply?.error ?? "Unknown wallet error", reply?.code);
 }
+function unwrapWrite(reply) {
+  const result = unwrap(reply);
+  if (result && typeof result === "object" && result.ok === false) {
+    throw mapSubmitResultError(result);
+  }
+  return result;
+}
 var WalletConnection = class {
   provider;
   _addr = null;
@@ -236,12 +290,18 @@ var WalletConnection = class {
       return null;
     }
   }
-  /** Atomic fill (CairnX DvP): pay + attest in ONE tx. Always prompts with clear-signing. */
+  /**
+   * CairnX fill: pay + attest in ONE tx (atomic SETTLEMENT SHAPE, both revert together). Always prompts with
+   * clear-signing. The payment recipient in `params.outputs` is RESOLVER-TRUSTED here: this SDK does NOT
+   * SPV-verify it, so a lying resolver can redirect the payment. A dApp settling real value MUST corroborate
+   * the offer on-chain before building `outputs` (F13). The wallet's own fill-SPV boundary (cairn-wallet
+   * 0.2.60+, which binds payment/rebate/fee to the merkle-proven offer) is the payment-grade check; see FillParams.
+   */
   fillOffer(params) {
     if (typeof this.provider.fillOffer !== "function") {
       return Promise.reject(new UnsupportedMethodError("this wallet predates fillOffer() \u2014 ask the user to update the Cairn Wallet"));
     }
-    return Promise.resolve(this.provider.fillOffer(params)).then(unwrap);
+    return Promise.resolve(this.provider.fillOffer(params)).then(unwrapWrite);
   }
   /** This origin's current permission grant (EIP-2255-style). Silent; [] if none / unsupported. */
   async getPermissions() {
@@ -274,26 +334,26 @@ var WalletConnection = class {
   }
   /** Send CSD (always prompts with clear-signing; wallet picks inputs + returns change to itself). */
   send(params) {
-    return Promise.resolve(this.provider.send(params)).then(unwrap);
+    return Promise.resolve(this.provider.send(params)).then(unwrapWrite);
   }
   /** Low-level Propose (always prompts). Prefer `cairn.board.propose()` which computes the hash/uri/expiry. */
   propose(params) {
-    return Promise.resolve(this.provider.propose(params)).then(unwrap);
+    return Promise.resolve(this.provider.propose(params)).then(unwrapWrite);
   }
   /** Attest/support a proposal (always prompts). */
   attest(params) {
-    return Promise.resolve(this.provider.attest(params)).then(unwrap);
+    return Promise.resolve(this.provider.attest(params)).then(unwrapWrite);
   }
   /** Seal a commit-reveal claim (always prompts; salt stays inside the wallet). */
   sealClaim(params) {
-    return Promise.resolve(this.provider.sealClaim(params)).then(unwrap);
+    return Promise.resolve(this.provider.sealClaim(params)).then(unwrapWrite);
   }
   /** Reveal a previously sealed claim by its sealing txid (always prompts). */
   revealClaim(txid) {
     if (typeof txid !== "string" || !txid) {
       return Promise.reject(new UnsupportedMethodError("revealClaim requires the sealing txid"));
     }
-    return Promise.resolve(this.provider.revealClaim(txid)).then(unwrap);
+    return Promise.resolve(this.provider.revealClaim(txid)).then(unwrapWrite);
   }
 };
 async function getWallet(opts = {}) {

package/dist/connect.d.cts

@@ -49,7 +49,16 @@ interface SealClaimParams {
     claim: string;
     fee?: number;
 }
-/** Atomic fill (CairnX delivery-vs-payment): an Attest + payment outputs in ONE tx. */
+/**
+ * CairnX fill: an Attest plus the caller-supplied payment `outputs`, settled in ONE tx (both land or both
+ * revert). "Atomic" here describes only that single-tx SETTLEMENT SHAPE. It does NOT mean this SDK verifies
+ * that `outputs` pay the offer's true on-chain recipient: the payment legs are RESOLVER-TRUSTED unless the
+ * caller independently SPV-corroborates the offer. A lying/MITM'd resolver can return a wrong payment target,
+ * so a dApp settling real value MUST merkle-prove the offer and derive the recipient from its on-chain author
+ * before building `outputs`. Payment-grade offer verification is the wallet's on-device fill-SPV path (F13;
+ * added in cairn-wallet 0.2.60, which binds the fill payment/rebate/fee legs to the merkle-proven offer; see
+ * docs/SDK-GUIDE.md verifies-vs-trusts). An SPV pre-verify helper in this SDK is roadmapped.
+ */
 interface FillParams {
     proposalId: string;
     outputs: {
@@ -226,7 +235,13 @@ declare class WalletConnection {
     get supportsSiwc(): boolean;
     /** Feature/capability detection. Returns null if the wallet predates `getCapabilities`. */
     getCapabilities(): Promise<WalletCapabilities | null>;
-    /** Atomic fill (CairnX DvP): pay + attest in ONE tx. Always prompts with clear-signing. */
+    /**
+     * CairnX fill: pay + attest in ONE tx (atomic SETTLEMENT SHAPE, both revert together). Always prompts with
+     * clear-signing. The payment recipient in `params.outputs` is RESOLVER-TRUSTED here: this SDK does NOT
+     * SPV-verify it, so a lying resolver can redirect the payment. A dApp settling real value MUST corroborate
+     * the offer on-chain before building `outputs` (F13). The wallet's own fill-SPV boundary (cairn-wallet
+     * 0.2.60+, which binds payment/rebate/fee to the merkle-proven offer) is the payment-grade check; see FillParams.
+     */
     fillOffer(params: FillParams): Promise<TxResult>;
     /** This origin's current permission grant (EIP-2255-style). Silent; [] if none / unsupported. */
     getPermissions(): Promise<WalletPermission[]>;

package/dist/connect.d.ts

@@ -49,7 +49,16 @@ interface SealClaimParams {
     claim: string;
     fee?: number;
 }
-/** Atomic fill (CairnX delivery-vs-payment): an Attest + payment outputs in ONE tx. */
+/**
+ * CairnX fill: an Attest plus the caller-supplied payment `outputs`, settled in ONE tx (both land or both
+ * revert). "Atomic" here describes only that single-tx SETTLEMENT SHAPE. It does NOT mean this SDK verifies
+ * that `outputs` pay the offer's true on-chain recipient: the payment legs are RESOLVER-TRUSTED unless the
+ * caller independently SPV-corroborates the offer. A lying/MITM'd resolver can return a wrong payment target,
+ * so a dApp settling real value MUST merkle-prove the offer and derive the recipient from its on-chain author
+ * before building `outputs`. Payment-grade offer verification is the wallet's on-device fill-SPV path (F13;
+ * added in cairn-wallet 0.2.60, which binds the fill payment/rebate/fee legs to the merkle-proven offer; see
+ * docs/SDK-GUIDE.md verifies-vs-trusts). An SPV pre-verify helper in this SDK is roadmapped.
+ */
 interface FillParams {
     proposalId: string;
     outputs: {
@@ -226,7 +235,13 @@ declare class WalletConnection {
     get supportsSiwc(): boolean;
     /** Feature/capability detection. Returns null if the wallet predates `getCapabilities`. */
     getCapabilities(): Promise<WalletCapabilities | null>;
-    /** Atomic fill (CairnX DvP): pay + attest in ONE tx. Always prompts with clear-signing. */
+    /**
+     * CairnX fill: pay + attest in ONE tx (atomic SETTLEMENT SHAPE, both revert together). Always prompts with
+     * clear-signing. The payment recipient in `params.outputs` is RESOLVER-TRUSTED here: this SDK does NOT
+     * SPV-verify it, so a lying resolver can redirect the payment. A dApp settling real value MUST corroborate
+     * the offer on-chain before building `outputs` (F13). The wallet's own fill-SPV boundary (cairn-wallet
+     * 0.2.60+, which binds payment/rebate/fee to the merkle-proven offer) is the payment-grade check; see FillParams.
+     */
     fillOffer(params: FillParams): Promise<TxResult>;
     /** This origin's current permission grant (EIP-2255-style). Silent; [] if none / unsupported. */
     getPermissions(): Promise<WalletPermission[]>;

package/dist/connect.js

@@ -5,8 +5,8 @@ import {
   discoverProviders,
   getWallet,
   isInstalled
-} from "./chunk-TKZXUBDX.js";
-import "./chunk-M6OSWJVC.js";
+} from "./chunk-QV2GIXO7.js";
+import "./chunk-E2Z3XSCW.js";
 export {
   WalletConnection,
   connect,

package/dist/content.cjs

@@ -26,7 +26,7 @@ module.exports = __toCommonJS(content_exports);
 var import_csd_codec = require("@inversealtruism/csd-codec");
 
 // src/errors.ts
-var SDK_VERSION = "0.2.3";
+var SDK_VERSION = "0.3.0";
 var DOCS_BASE = "https://cairn-substrate.com/docs/sdk";
 var CairnError = class extends Error {
   /** Stable machine code for programmatic branching. */
@@ -37,6 +37,12 @@ var CairnError = class extends Error {
   docsPath;
   /** The cairn-sdk version that produced this error. */
   version = SDK_VERSION;
+  /**
+   * Whether a dApp may safely AUTO-retry this failure. `false` for fund-safety refusals and user-intent
+   * declines (the default); `true` only for provably transient infra faults where nothing was signed.
+   * A `SubmitInFlightError` is `false` too: reconcile its `txid`, never blind-retry.
+   */
+  retryable;
   constructor(shortMessage, opts = {}) {
     const docs = opts.docsPath;
     super(
@@ -47,6 +53,7 @@ var CairnError = class extends Error {
     this.code = opts.code ?? "UNKNOWN";
     this.shortMessage = shortMessage;
     this.docsPath = docs;
+    this.retryable = opts.retryable ?? false;
   }
   /**
    * Walk the `cause` chain. With a predicate, returns the FIRST matching error (or null). Without one,

package/dist/content.js

@@ -1,7 +1,7 @@
 import {
   ContentClient
-} from "./chunk-AAOETAUE.js";
-import "./chunk-M6OSWJVC.js";
+} from "./chunk-4RDXEW35.js";
+import "./chunk-E2Z3XSCW.js";
 export {
   ContentClient
 };