@inversealtruism/cairn-sdk 0.4.5 → 0.5.0

package/dist/index.d.cts

@@ -1,17 +1,15 @@
 import { H as Http, F as FetchLike } from './http-C9C4L4hz.cjs';
 export { a as HttpOptions } from './http-C9C4L4hz.cjs';
 import { Chain } from './chain.cjs';
-import { BoardClient } from './board.cjs';
-export { BoardItemContent, BoardWindow, ProposeInput, ProposeResult, RankedItem, SupportInput } from './board.cjs';
 import { IndexerClient } from './indexer.cjs';
 export { InclusionResult, IndexEvent, MerkleProof, StreamHandle, StreamHandlers, TrustLevel } from './indexer.cjs';
 import { ContentClient } from './content.cjs';
 export { ContentClientOptions, PreparedContent } from './content.cjs';
 import { RegistryClient } from './registry.cjs';
+import { NameState, ProvenOfferTerms } from '@inversealtruism/cairnx-core';
+export { FillEndorsement, FillOutputPlan, FillPreview, FillSafety, ProvenOfferTerms, bindOfferTerms, feeBpsAt, fillEndorsement, fillIsSafe, fillOutputPlan, previewFill, requiredFillOutputs } from '@inversealtruism/cairnx-core';
 import { WalletConnection, DetectOptions } from './connect.cjs';
 export { AttestParams, CairnProvider, ConnectResult, FillParams, ProposeParams, ProviderDetail, ProviderInfo, SealClaimParams, SendParams, SignInResult, SiwcParams, SiwcResult, TxResult, WalletCapabilities, WalletPermission, connect, detectProvider, discoverProviders, getWallet, isInstalled } from './connect.cjs';
-import { ProvenOfferTerms } from '@inversealtruism/cairnx-core';
-export { FillEndorsement, FillOutputPlan, FillPreview, FillSafety, ProvenOfferTerms, bindOfferTerms, feeBpsAt, fillEndorsement, fillIsSafe, fillOutputPlan, previewFill, requiredFillOutputs } from '@inversealtruism/cairnx-core';
 import { InclusionResult } from '@inversealtruism/csd-light';
 export { CairnController, CairnControllerOptions, CairnState } from './controller.cjs';
 import '@inversealtruism/csd-client';
@@ -75,6 +73,27 @@ interface PrimaryName {
     address: string;
     name?: string | null;
 }
+/** One `/cairnx/name-history` event: the txid a wallet fetches and merkle-verifies. `kind` is diagnostic only. */
+interface NameHistoryEntry {
+    txid: string;
+    height: number;
+    pos: number;
+    kind: string;
+}
+/** `/cairnx/name-history/:name`: the server's current claim plus the UNTRUSTED txid hints a verifier replays. */
+interface NameHistory {
+    ok: boolean;
+    name: string;
+    tipHeight: number;
+    /** the server's forward resolution (what a verifier recomputes and must match) */
+    resolve: Omit<NameResolution, "ok">;
+    /** the server's full name record */
+    record?: NameState;
+    events: NameHistoryEntry[];
+    /** `false`: replaying only `events` cannot prove this name's owner (see `caveat`); never treat a match as verified. */
+    scopedReplaySufficient: boolean;
+    caveat?: string;
+}
 /**
  * Read client for the CairnX convention (names + token market) over a Cairn front door.
  * Construct via the main `Cairn` class (`cairn.names`); all methods are read-only.
@@ -82,21 +101,24 @@ interface PrimaryName {
 declare class NamesClient {
     private readonly http;
     constructor(http: Http);
+    private malformed;
+    private list;
     /** Resolve a .csd name for DISPLAY (server-trusted; see the module trust note). null = unknown/invalid name. */
     resolve(name: string): Promise<NameResolution | null>;
     /** Full detail for one name (lease, lock, resting offer, recapture). null = not registered/invalid. */
     name(name: string): Promise<NameDetail | null>;
-    /** The event history of one name (registrations, transfers, sets, renewals). null = invalid name. */
-    nameHistory(name: string): Promise<unknown[] | null>;
+    /** The event history of one name (registrations, transfers, sets, renewals) with the server's current
+     *  claim. null = invalid or unregistered name. Throws a typed HttpError on a malformed body. */
+    nameHistory(name: string): Promise<NameHistory | null>;
     /** Reverse lookup: an address's chosen primary .csd name (null name = none set). */
     primary(addr: string): Promise<PrimaryName | null>;
     /** All names an address owns (plus its primary), as served by `/cairnx/address/:addr`. */
     namesOf(addr: string): Promise<unknown | null>;
     /** All registered names (display list; short-edge-cached server-side). */
     names(): Promise<unknown[]>;
-    /** All deployed tokens. */
+    /** All deployed tokens. Throws a typed HttpError if any row has a malformed ticker, decimals or amount. */
     tokens(): Promise<TokenInfo[]>;
-    /** One token by ticker. null = unknown/invalid ticker. */
+    /** One token by ticker. null = unknown/invalid ticker. Throws a typed HttpError on a malformed body. */
     token(ticker: string): Promise<TokenInfo | null>;
     /** Open offers (the market's display list). */
     offers(): Promise<unknown[]>;
@@ -121,13 +143,21 @@ interface OfferFillCheck {
     blockHeight?: number;
     /** B7b (REBIND W3/M1): the PROVEN CSD outputs to build for `pay` (a WHOLE fill of a non-partial offer),
      *  sized from the merkle-proven offer by the single-sourced `fillOutputPlan`. Present only when `pay` was
-     *  passed and the offer could be sized. Build EXACTLY these; never the resolver-served outputs a lying
-     *  resolver could redirect. A partial (min-bearing) offer is left unsized (its running paid/delivered is
-     *  not provable at this corroboration layer; the wallet's fill-SPV is the payment-grade sizer). */
+     *  passed, the served offer carried a `status` and the offer could be sized. Build EXACTLY these; never the
+     *  resolver-served outputs a lying resolver could redirect. A partial (min-bearing) offer is left unsized
+     *  (its running paid/delivered is not provable at this corroboration layer; the wallet's fill-SPV is the
+     *  payment-grade sizer). Liveness is never proven here: the plan is sized only for the status the resolver
+     *  served, so an offer with no served status gets no plan. */
     outputPlan?: {
         to: string;
         value: bigint;
     }[];
+    /** Present when `plannedOutputs` was passed: `true` when they were bound to `outputPlan` (a mismatch
+     *  refuses with `ok: false`), `false` when there was no proven plan to bind them to (`planReason` says why).
+     *  `ok: true` with `planBound: false` means your planned outputs were NOT checked. */
+    planBound?: boolean;
+    /** Why no output plan was sized (set whenever `outputPlan` is absent after `pay` or `plannedOutputs` was passed). */
+    planReason?: string;
 }
 
 /**
@@ -159,8 +189,8 @@ declare function preverifyOffer(opts: {
 }): Promise<OfferFillCheck>;
 
 /** Stable machine-readable error codes (branch on these, not the message text). */
-type CairnErrorCode = "NOT_INSTALLED" | "USER_REJECTED" | "WALLET_LOCKED" | "UNSUPPORTED_METHOD" | "HTTP_ERROR" | "CONTENT_VERIFICATION" | "ACCOUNT_CHANGED" | "FIRST_PARTY_ONLY" | "RATE_LIMITED" | "APPROVAL_CLOSED" | "FORBIDDEN" | "INTERNAL" | "GHOST_INPUTS_SKIPPED" | "VERIFY_UNAVAILABLE" | "VERIFY_TAMPER" | "INSUFFICIENT" | "TOO_MANY_INPUTS" | "FEE_TOO_LOW" | "FEE_CAP" | "BAD_FEE" | "ZERO_ADDR_REFUSED" | "BAD_OUTPUTS" | "NO_OUTPUTS" | "BAD_REQUEST" | "OFFER_UNKNOWN" | "FILL_UNSAFE" | "FILL_WRONG_TARGET" | "SOURCE_DIVERGENCE" | "SUBMIT_REJECTED" | "SUBMIT_MAYBE_INFLIGHT" | "SUBMIT_DUPLICATE" | "NOTHING_TO_CONSOLIDATE" | "UNKNOWN";
-declare const SDK_VERSION = "0.4.5";
+type CairnErrorCode = "NOT_INSTALLED" | "USER_REJECTED" | "WALLET_LOCKED" | "UNSUPPORTED_METHOD" | "HTTP_ERROR" | "CONTENT_VERIFICATION" | "CONTENT_NOT_JSON" | "ACCOUNT_CHANGED" | "FIRST_PARTY_ONLY" | "RATE_LIMITED" | "APPROVAL_CLOSED" | "FORBIDDEN" | "INTERNAL" | "GHOST_INPUTS_SKIPPED" | "VERIFY_UNAVAILABLE" | "VERIFY_TAMPER" | "INSUFFICIENT" | "TOO_MANY_INPUTS" | "FEE_TOO_LOW" | "FEE_CAP" | "BAD_FEE" | "ZERO_ADDR_REFUSED" | "BAD_OUTPUTS" | "NO_OUTPUTS" | "BAD_REQUEST" | "OFFER_UNKNOWN" | "FILL_UNSAFE" | "FILL_WRONG_TARGET" | "SOURCE_DIVERGENCE" | "SUBMIT_REJECTED" | "SUBMIT_MAYBE_INFLIGHT" | "SUBMIT_DUPLICATE" | "NOTHING_TO_CONSOLIDATE" | "OFFER_SOURCE_CONFLICT" | "FILL_LEGACY_SUNSET" | "VERIFY_HORIZON" | "VERIFY_UNREPRESENTABLE" | "WALLET_UNAVAILABLE" | "REVIEW_REQUIRED" | "UNKNOWN";
+declare const SDK_VERSION = "0.5.0";
 interface CairnErrorOptions {
     code?: CairnErrorCode;
     docsPath?: string;
@@ -180,7 +210,7 @@ declare class CairnError extends Error {
     /** Relative docs path (under the SDK docs base), if any. */
     readonly docsPath?: string;
     /** The cairn-sdk version that produced this error. */
-    readonly version = "0.4.5";
+    readonly version = "0.5.0";
     /**
      * Whether a dApp may safely AUTO-retry this failure. `false` for fund-safety refusals and user-intent
      * declines (the default); `true` only for provably transient infra faults where nothing was signed.
@@ -260,7 +290,7 @@ declare function mapSubmitResultError(result: {
 declare function errorCode(err: unknown): CairnErrorCode;
 
 interface CairnBaseUrls {
-    /** Cairn board server (board + /api/rpc proxy + /content origin). Default https://cairn-substrate.com */
+    /** Cairn server (/api/rpc proxy, /api/headers, /content origin, /trade/api names reads). Default https://cairn-substrate.com */
     cairn?: string;
     /** Node RPC base. Default `${cairn}/api/rpc` (the public proxy — no local node needed). */
     rpc?: string;
@@ -315,7 +345,6 @@ declare class Cairn {
     readonly registry: RegistryClient;
     /** .csd names + CairnX market READS (server-trusted display reads; see names.ts trust note). */
     readonly names: NamesClient;
-    board: BoardClient;
     wallet?: WalletConnection;
     private readonly cairnHttp;
     private _spvLight;
@@ -331,12 +360,13 @@ declare class Cairn {
      * to the honest "proof-consistent" instead of over-claiming "verified-inclusion". The verified
      * header chain is cached across calls; the first call near tip syncs the post-checkpoint span.
      * MF-03: a STRUCTURAL forward-sync break (a reorg orphaned the cached tip) reseeds ONCE via
-     * withSpvReseed. RESIDUAL: a height at or below the cached tip answers from the cached branch with
-     * NO network touch, so a tx in a reorg-orphaned block can still read "verified-inclusion" until a
-     * read PAST the tip trips the reseed; this closes the permanent post-reorg brick, not reorg-blindness.
+     * withSpvReseed. A height within SPV_RECHECK_DEPTH of the cached tip is re-checked against the served
+     * chain first (recheckCachedHeader), so a block orphaned after it was cached stops backing
+     * "verified-inclusion". Deeper heights answer from the cache with no network touch.
      */
     private verifiedHeaderMerkleAt;
     private withSpvReseed;
+    private recheckCachedHeader;
     private seedFreshSpvLight;
     /** The PoW-verifying SPV light client, seeded from the pinned checkpoint and cached across calls
      *  (shared by the M3 header-merkle bind and the F13 offer pre-verify). The client is committed to
@@ -383,8 +413,8 @@ declare class Cairn {
         plannedOutputs?: Record<string, bigint | string | number>;
     }): Promise<OfferFillCheck>;
     /**
-     * Detect + connect the Cairn Wallet (browser only). Wires the wallet into
-     * `cairn.board` for signed writes. Resolves to the connected address.
+     * Detect + connect the Cairn Wallet (browser only) and attach it as `cairn.wallet`.
+     * Resolves to the connected address.
      */
     connect(opts?: DetectOptions): Promise<string>;
     /** Attach an already-connected wallet (e.g. one you constructed yourself). */
@@ -393,4 +423,4 @@ declare class Cairn {
     get connected(): boolean;
 }
 
-export { BoardClient, Cairn, type CairnBaseUrls, type CairnConfig, CairnError, type CairnErrorCode, type CairnErrorOptions, Chain, ContentClient, ContentVerificationError, DEFAULT_SPV_CHECKPOINT, DetectOptions, FetchLike, Http, HttpError, IndexerClient, type NameDetail, type NameResolution, NamesClient, NotInstalledError, type OfferFillCheck, type PrimaryName, RegistryClient, SDK_VERSION, SubmitInFlightError, type TokenInfo, UnsupportedMethodError, UserRejectedError, WalletConnection, WalletLockedError, errorCode, mapProviderError, mapSubmitResultError, preverifyOffer };
+export { Cairn, type CairnBaseUrls, type CairnConfig, CairnError, type CairnErrorCode, type CairnErrorOptions, Chain, ContentClient, ContentVerificationError, DEFAULT_SPV_CHECKPOINT, DetectOptions, FetchLike, Http, HttpError, IndexerClient, type NameDetail, type NameHistory, type NameHistoryEntry, type NameResolution, NamesClient, NotInstalledError, type OfferFillCheck, type PrimaryName, RegistryClient, SDK_VERSION, SubmitInFlightError, type TokenInfo, UnsupportedMethodError, UserRejectedError, WalletConnection, WalletLockedError, errorCode, mapProviderError, mapSubmitResultError, preverifyOffer };

package/dist/index.d.ts

@@ -1,17 +1,15 @@
 import { H as Http, F as FetchLike } from './http-C9C4L4hz.js';
 export { a as HttpOptions } from './http-C9C4L4hz.js';
 import { Chain } from './chain.js';
-import { BoardClient } from './board.js';
-export { BoardItemContent, BoardWindow, ProposeInput, ProposeResult, RankedItem, SupportInput } from './board.js';
 import { IndexerClient } from './indexer.js';
 export { InclusionResult, IndexEvent, MerkleProof, StreamHandle, StreamHandlers, TrustLevel } from './indexer.js';
 import { ContentClient } from './content.js';
 export { ContentClientOptions, PreparedContent } from './content.js';
 import { RegistryClient } from './registry.js';
+import { NameState, ProvenOfferTerms } from '@inversealtruism/cairnx-core';
+export { FillEndorsement, FillOutputPlan, FillPreview, FillSafety, ProvenOfferTerms, bindOfferTerms, feeBpsAt, fillEndorsement, fillIsSafe, fillOutputPlan, previewFill, requiredFillOutputs } from '@inversealtruism/cairnx-core';
 import { WalletConnection, DetectOptions } from './connect.js';
 export { AttestParams, CairnProvider, ConnectResult, FillParams, ProposeParams, ProviderDetail, ProviderInfo, SealClaimParams, SendParams, SignInResult, SiwcParams, SiwcResult, TxResult, WalletCapabilities, WalletPermission, connect, detectProvider, discoverProviders, getWallet, isInstalled } from './connect.js';
-import { ProvenOfferTerms } from '@inversealtruism/cairnx-core';
-export { FillEndorsement, FillOutputPlan, FillPreview, FillSafety, ProvenOfferTerms, bindOfferTerms, feeBpsAt, fillEndorsement, fillIsSafe, fillOutputPlan, previewFill, requiredFillOutputs } from '@inversealtruism/cairnx-core';
 import { InclusionResult } from '@inversealtruism/csd-light';
 export { CairnController, CairnControllerOptions, CairnState } from './controller.js';
 import '@inversealtruism/csd-client';
@@ -75,6 +73,27 @@ interface PrimaryName {
     address: string;
     name?: string | null;
 }
+/** One `/cairnx/name-history` event: the txid a wallet fetches and merkle-verifies. `kind` is diagnostic only. */
+interface NameHistoryEntry {
+    txid: string;
+    height: number;
+    pos: number;
+    kind: string;
+}
+/** `/cairnx/name-history/:name`: the server's current claim plus the UNTRUSTED txid hints a verifier replays. */
+interface NameHistory {
+    ok: boolean;
+    name: string;
+    tipHeight: number;
+    /** the server's forward resolution (what a verifier recomputes and must match) */
+    resolve: Omit<NameResolution, "ok">;
+    /** the server's full name record */
+    record?: NameState;
+    events: NameHistoryEntry[];
+    /** `false`: replaying only `events` cannot prove this name's owner (see `caveat`); never treat a match as verified. */
+    scopedReplaySufficient: boolean;
+    caveat?: string;
+}
 /**
  * Read client for the CairnX convention (names + token market) over a Cairn front door.
  * Construct via the main `Cairn` class (`cairn.names`); all methods are read-only.
@@ -82,21 +101,24 @@ interface PrimaryName {
 declare class NamesClient {
     private readonly http;
     constructor(http: Http);
+    private malformed;
+    private list;
     /** Resolve a .csd name for DISPLAY (server-trusted; see the module trust note). null = unknown/invalid name. */
     resolve(name: string): Promise<NameResolution | null>;
     /** Full detail for one name (lease, lock, resting offer, recapture). null = not registered/invalid. */
     name(name: string): Promise<NameDetail | null>;
-    /** The event history of one name (registrations, transfers, sets, renewals). null = invalid name. */
-    nameHistory(name: string): Promise<unknown[] | null>;
+    /** The event history of one name (registrations, transfers, sets, renewals) with the server's current
+     *  claim. null = invalid or unregistered name. Throws a typed HttpError on a malformed body. */
+    nameHistory(name: string): Promise<NameHistory | null>;
     /** Reverse lookup: an address's chosen primary .csd name (null name = none set). */
     primary(addr: string): Promise<PrimaryName | null>;
     /** All names an address owns (plus its primary), as served by `/cairnx/address/:addr`. */
     namesOf(addr: string): Promise<unknown | null>;
     /** All registered names (display list; short-edge-cached server-side). */
     names(): Promise<unknown[]>;
-    /** All deployed tokens. */
+    /** All deployed tokens. Throws a typed HttpError if any row has a malformed ticker, decimals or amount. */
     tokens(): Promise<TokenInfo[]>;
-    /** One token by ticker. null = unknown/invalid ticker. */
+    /** One token by ticker. null = unknown/invalid ticker. Throws a typed HttpError on a malformed body. */
     token(ticker: string): Promise<TokenInfo | null>;
     /** Open offers (the market's display list). */
     offers(): Promise<unknown[]>;
@@ -121,13 +143,21 @@ interface OfferFillCheck {
     blockHeight?: number;
     /** B7b (REBIND W3/M1): the PROVEN CSD outputs to build for `pay` (a WHOLE fill of a non-partial offer),
      *  sized from the merkle-proven offer by the single-sourced `fillOutputPlan`. Present only when `pay` was
-     *  passed and the offer could be sized. Build EXACTLY these; never the resolver-served outputs a lying
-     *  resolver could redirect. A partial (min-bearing) offer is left unsized (its running paid/delivered is
-     *  not provable at this corroboration layer; the wallet's fill-SPV is the payment-grade sizer). */
+     *  passed, the served offer carried a `status` and the offer could be sized. Build EXACTLY these; never the
+     *  resolver-served outputs a lying resolver could redirect. A partial (min-bearing) offer is left unsized
+     *  (its running paid/delivered is not provable at this corroboration layer; the wallet's fill-SPV is the
+     *  payment-grade sizer). Liveness is never proven here: the plan is sized only for the status the resolver
+     *  served, so an offer with no served status gets no plan. */
     outputPlan?: {
         to: string;
         value: bigint;
     }[];
+    /** Present when `plannedOutputs` was passed: `true` when they were bound to `outputPlan` (a mismatch
+     *  refuses with `ok: false`), `false` when there was no proven plan to bind them to (`planReason` says why).
+     *  `ok: true` with `planBound: false` means your planned outputs were NOT checked. */
+    planBound?: boolean;
+    /** Why no output plan was sized (set whenever `outputPlan` is absent after `pay` or `plannedOutputs` was passed). */
+    planReason?: string;
 }
 
 /**
@@ -159,8 +189,8 @@ declare function preverifyOffer(opts: {
 }): Promise<OfferFillCheck>;
 
 /** Stable machine-readable error codes (branch on these, not the message text). */
-type CairnErrorCode = "NOT_INSTALLED" | "USER_REJECTED" | "WALLET_LOCKED" | "UNSUPPORTED_METHOD" | "HTTP_ERROR" | "CONTENT_VERIFICATION" | "ACCOUNT_CHANGED" | "FIRST_PARTY_ONLY" | "RATE_LIMITED" | "APPROVAL_CLOSED" | "FORBIDDEN" | "INTERNAL" | "GHOST_INPUTS_SKIPPED" | "VERIFY_UNAVAILABLE" | "VERIFY_TAMPER" | "INSUFFICIENT" | "TOO_MANY_INPUTS" | "FEE_TOO_LOW" | "FEE_CAP" | "BAD_FEE" | "ZERO_ADDR_REFUSED" | "BAD_OUTPUTS" | "NO_OUTPUTS" | "BAD_REQUEST" | "OFFER_UNKNOWN" | "FILL_UNSAFE" | "FILL_WRONG_TARGET" | "SOURCE_DIVERGENCE" | "SUBMIT_REJECTED" | "SUBMIT_MAYBE_INFLIGHT" | "SUBMIT_DUPLICATE" | "NOTHING_TO_CONSOLIDATE" | "UNKNOWN";
-declare const SDK_VERSION = "0.4.5";
+type CairnErrorCode = "NOT_INSTALLED" | "USER_REJECTED" | "WALLET_LOCKED" | "UNSUPPORTED_METHOD" | "HTTP_ERROR" | "CONTENT_VERIFICATION" | "CONTENT_NOT_JSON" | "ACCOUNT_CHANGED" | "FIRST_PARTY_ONLY" | "RATE_LIMITED" | "APPROVAL_CLOSED" | "FORBIDDEN" | "INTERNAL" | "GHOST_INPUTS_SKIPPED" | "VERIFY_UNAVAILABLE" | "VERIFY_TAMPER" | "INSUFFICIENT" | "TOO_MANY_INPUTS" | "FEE_TOO_LOW" | "FEE_CAP" | "BAD_FEE" | "ZERO_ADDR_REFUSED" | "BAD_OUTPUTS" | "NO_OUTPUTS" | "BAD_REQUEST" | "OFFER_UNKNOWN" | "FILL_UNSAFE" | "FILL_WRONG_TARGET" | "SOURCE_DIVERGENCE" | "SUBMIT_REJECTED" | "SUBMIT_MAYBE_INFLIGHT" | "SUBMIT_DUPLICATE" | "NOTHING_TO_CONSOLIDATE" | "OFFER_SOURCE_CONFLICT" | "FILL_LEGACY_SUNSET" | "VERIFY_HORIZON" | "VERIFY_UNREPRESENTABLE" | "WALLET_UNAVAILABLE" | "REVIEW_REQUIRED" | "UNKNOWN";
+declare const SDK_VERSION = "0.5.0";
 interface CairnErrorOptions {
     code?: CairnErrorCode;
     docsPath?: string;
@@ -180,7 +210,7 @@ declare class CairnError extends Error {
     /** Relative docs path (under the SDK docs base), if any. */
     readonly docsPath?: string;
     /** The cairn-sdk version that produced this error. */
-    readonly version = "0.4.5";
+    readonly version = "0.5.0";
     /**
      * Whether a dApp may safely AUTO-retry this failure. `false` for fund-safety refusals and user-intent
      * declines (the default); `true` only for provably transient infra faults where nothing was signed.
@@ -260,7 +290,7 @@ declare function mapSubmitResultError(result: {
 declare function errorCode(err: unknown): CairnErrorCode;
 
 interface CairnBaseUrls {
-    /** Cairn board server (board + /api/rpc proxy + /content origin). Default https://cairn-substrate.com */
+    /** Cairn server (/api/rpc proxy, /api/headers, /content origin, /trade/api names reads). Default https://cairn-substrate.com */
     cairn?: string;
     /** Node RPC base. Default `${cairn}/api/rpc` (the public proxy — no local node needed). */
     rpc?: string;
@@ -315,7 +345,6 @@ declare class Cairn {
     readonly registry: RegistryClient;
     /** .csd names + CairnX market READS (server-trusted display reads; see names.ts trust note). */
     readonly names: NamesClient;
-    board: BoardClient;
     wallet?: WalletConnection;
     private readonly cairnHttp;
     private _spvLight;
@@ -331,12 +360,13 @@ declare class Cairn {
      * to the honest "proof-consistent" instead of over-claiming "verified-inclusion". The verified
      * header chain is cached across calls; the first call near tip syncs the post-checkpoint span.
      * MF-03: a STRUCTURAL forward-sync break (a reorg orphaned the cached tip) reseeds ONCE via
-     * withSpvReseed. RESIDUAL: a height at or below the cached tip answers from the cached branch with
-     * NO network touch, so a tx in a reorg-orphaned block can still read "verified-inclusion" until a
-     * read PAST the tip trips the reseed; this closes the permanent post-reorg brick, not reorg-blindness.
+     * withSpvReseed. A height within SPV_RECHECK_DEPTH of the cached tip is re-checked against the served
+     * chain first (recheckCachedHeader), so a block orphaned after it was cached stops backing
+     * "verified-inclusion". Deeper heights answer from the cache with no network touch.
      */
     private verifiedHeaderMerkleAt;
     private withSpvReseed;
+    private recheckCachedHeader;
     private seedFreshSpvLight;
     /** The PoW-verifying SPV light client, seeded from the pinned checkpoint and cached across calls
      *  (shared by the M3 header-merkle bind and the F13 offer pre-verify). The client is committed to
@@ -383,8 +413,8 @@ declare class Cairn {
         plannedOutputs?: Record<string, bigint | string | number>;
     }): Promise<OfferFillCheck>;
     /**
-     * Detect + connect the Cairn Wallet (browser only). Wires the wallet into
-     * `cairn.board` for signed writes. Resolves to the connected address.
+     * Detect + connect the Cairn Wallet (browser only) and attach it as `cairn.wallet`.
+     * Resolves to the connected address.
      */
     connect(opts?: DetectOptions): Promise<string>;
     /** Attach an already-connected wallet (e.g. one you constructed yourself). */
@@ -393,4 +423,4 @@ declare class Cairn {
     get connected(): boolean;
 }
 
-export { BoardClient, Cairn, type CairnBaseUrls, type CairnConfig, CairnError, type CairnErrorCode, type CairnErrorOptions, Chain, ContentClient, ContentVerificationError, DEFAULT_SPV_CHECKPOINT, DetectOptions, FetchLike, Http, HttpError, IndexerClient, type NameDetail, type NameResolution, NamesClient, NotInstalledError, type OfferFillCheck, type PrimaryName, RegistryClient, SDK_VERSION, SubmitInFlightError, type TokenInfo, UnsupportedMethodError, UserRejectedError, WalletConnection, WalletLockedError, errorCode, mapProviderError, mapSubmitResultError, preverifyOffer };
+export { Cairn, type CairnBaseUrls, type CairnConfig, CairnError, type CairnErrorCode, type CairnErrorOptions, Chain, ContentClient, ContentVerificationError, DEFAULT_SPV_CHECKPOINT, DetectOptions, FetchLike, Http, HttpError, IndexerClient, type NameDetail, type NameHistory, type NameHistoryEntry, type NameResolution, NamesClient, NotInstalledError, type OfferFillCheck, type PrimaryName, RegistryClient, SDK_VERSION, SubmitInFlightError, type TokenInfo, UnsupportedMethodError, UserRejectedError, WalletConnection, WalletLockedError, errorCode, mapProviderError, mapSubmitResultError, preverifyOffer };