@inversealtruism/cairn-sdk 0.6.0 → 0.8.0

package/dist/index.js

@@ -4,13 +4,13 @@ import {
 } from "./chunk-C452UODV.js";
 import {
   ContentClient
-} from "./chunk-QEYBWBXC.js";
+} from "./chunk-DTPADO7N.js";
 import {
   IndexerClient
-} from "./chunk-K5MGEYEU.js";
+} from "./chunk-CI7YODPP.js";
 import {
   CairnController
-} from "./chunk-MLNW2RQB.js";
+} from "./chunk-JXBO4LV6.js";
 import {
   WalletConnection,
   connect,
@@ -18,14 +18,7 @@ import {
   discoverProviders,
   getWallet,
   isInstalled
-} from "./chunk-BMH2MACB.js";
-import {
-  Http,
-  RegistryClient,
-  RetryWaitBudget,
-  readCapped,
-  retryAfterMs
-} from "./chunk-67QBDZPW.js";
+} from "./chunk-WWO3FXHG.js";
 import {
   CairnError,
   ContentVerificationError,
@@ -39,12 +32,181 @@ import {
   errorCode,
   mapProviderError,
   mapSubmitResultError
-} from "./chunk-2A4AJBO5.js";
+} from "./chunk-UAPWZZQK.js";
+
+// src/http.ts
+var DEFAULT_MAX_BYTES = 16 * 1024 * 1024;
+var ERR_TEXT_CAP = 8 * 1024;
+var MAX_RETRY_AFTER_MS = 6e4;
+function retryAfterMs(res) {
+  const secs = Number(res.headers.get("retry-after"));
+  return Number.isFinite(secs) && secs > 0 ? Math.min(secs * 1e3, MAX_RETRY_AFTER_MS) : 0;
+}
+var RetryWaitBudget = class {
+  left;
+  constructor(totalMs) {
+    this.left = totalMs;
+  }
+  /** The ms to sleep before the next attempt (`ownMs` is the caller's backoff, clipped to what is left), or
+   *  null when the server's hint exceeds the remaining budget. */
+  take(ownMs, serverMs) {
+    if (serverMs > this.left) return null;
+    const ms = Math.min(Math.max(ownMs, serverMs), this.left);
+    this.left -= ms;
+    return ms;
+  }
+};
+var HTTP_RETRY_WAIT_BUDGET_MS = 3e4;
+async function readCapped(res, maxBytes) {
+  const cl = Number(res.headers.get("content-length"));
+  if (Number.isFinite(cl) && cl > maxBytes) throw new HttpError(res.status, res.url, `response too large (content-length ${cl} > ${maxBytes})`);
+  const body = res.body;
+  if (!body || typeof body.getReader !== "function") {
+    const buf = new Uint8Array(await res.arrayBuffer());
+    if (buf.byteLength > maxBytes) throw new HttpError(res.status, res.url, `response too large (${buf.byteLength} > ${maxBytes})`);
+    return buf;
+  }
+  const reader = body.getReader();
+  const chunks = [];
+  let total = 0;
+  for (; ; ) {
+    const { done, value } = await reader.read();
+    if (done) break;
+    if (value) {
+      total += value.byteLength;
+      if (total > maxBytes) {
+        try {
+          await reader.cancel();
+        } catch {
+        }
+        throw new HttpError(res.status, res.url, `response exceeded ${maxBytes} bytes`);
+      }
+      chunks.push(value);
+    }
+  }
+  const out = new Uint8Array(total);
+  let off = 0;
+  for (const c of chunks) {
+    out.set(c, off);
+    off += c.byteLength;
+  }
+  return out;
+}
+var Http = class {
+  baseUrl;
+  _fetch;
+  timeoutMs;
+  maxBytes;
+  headers;
+  retries;
+  constructor(opts) {
+    this.baseUrl = opts.baseUrl.replace(/\/+$/, "");
+    const f = opts.fetch ?? globalThis.fetch;
+    if (!f) throw new Error("No fetch available \u2014 pass `fetch` in the SDK options.");
+    this._fetch = opts.fetch ? opts.fetch : f.bind(globalThis);
+    this.timeoutMs = opts.timeoutMs ?? 15e3;
+    this.maxBytes = Number.isFinite(opts.maxBytes) && opts.maxBytes >= 1 ? Math.floor(opts.maxBytes) : DEFAULT_MAX_BYTES;
+    this.headers = opts.headers ?? {};
+    const retries = Number(opts.retries ?? 0);
+    this.retries = Number.isNaN(retries) ? 0 : Math.min(10, Math.max(0, Math.floor(retries)));
+  }
+  /** Build an absolute URL from a path + optional query params. */
+  url(path, query) {
+    const p = path.startsWith("/") ? path : `/${path}`;
+    const u = new URL(this.baseUrl + p);
+    const basePath = new URL(this.baseUrl + "/").pathname;
+    if (basePath !== "/" && !(u.pathname + "/").startsWith(basePath)) {
+      throw new Error(`illegal path '${path}' \u2014 escapes base ${basePath}`);
+    }
+    if (query) {
+      for (const [k, v] of Object.entries(query)) {
+        if (v !== void 0 && v !== null) u.searchParams.set(k, String(v));
+      }
+    }
+    return u.toString();
+  }
+  async raw(method, path, opts) {
+    const url = this.url(path, opts?.query);
+    const ctrl = new AbortController();
+    const timer = setTimeout(() => ctrl.abort(), this.timeoutMs);
+    try {
+      const res = await this._fetch(url, {
+        method,
+        signal: ctrl.signal,
+        headers: {
+          ...opts?.body !== void 0 ? { "content-type": "application/json" } : {},
+          ...this.headers,
+          ...opts?.headers ?? {}
+        },
+        body: opts?.body !== void 0 ? JSON.stringify(opts.body) : void 0
+      });
+      const body = await readCapped(res, this.maxBytes);
+      return { res, body };
+    } finally {
+      clearTimeout(timer);
+    }
+  }
+  // A malformed 2xx body must surface as a TYPED HttpError, not a leaked SyntaxError (B10: dApp
+  // code branches on `instanceof CairnError`; a raw parse error escaped that contract).
+  parseJson(res, text, url) {
+    try {
+      return JSON.parse(text);
+    } catch (e) {
+      throw new HttpError(res.status, url, `invalid JSON body: ${text.slice(0, 120)}`);
+    }
+  }
+  async getJson(path, query) {
+    const url = this.url(path, query);
+    const budget = new RetryWaitBudget(HTTP_RETRY_WAIT_BUDGET_MS);
+    for (let attempt = 0; ; attempt++) {
+      let serverWaitMs = 0;
+      let last;
+      try {
+        const { res, body } = await this.raw("GET", path, { query });
+        if (!res.ok) {
+          last = new HttpError(res.status, url, errText(body));
+          if (!(res.status >= 500 && attempt < this.retries)) throw last;
+          serverWaitMs = retryAfterMs(res);
+        } else {
+          return this.parseJson(res, new TextDecoder().decode(body), url);
+        }
+      } catch (e) {
+        if (e instanceof HttpError && e.status < 500) throw e;
+        if (attempt >= this.retries) throw e;
+      }
+      const jitterMs = Math.floor(Math.random() * Math.min(4e3, 250 * 2 ** attempt));
+      const waitMs = budget.take(jitterMs, serverWaitMs);
+      if (waitMs === null) throw last ?? new HttpError(0, url, "retry wait budget exhausted");
+      await new Promise((r) => setTimeout(r, waitMs));
+    }
+  }
+  async postJson(path, body, headers) {
+    const url = this.url(path);
+    const { res, body: respBody } = await this.raw("POST", path, { body, headers });
+    if (!res.ok) throw new HttpError(res.status, url, errText(respBody));
+    return this.parseJson(res, new TextDecoder().decode(respBody), url);
+  }
+  /** GET raw bytes (for content retrieval). Returns null on 404. */
+  async getBytes(path) {
+    const { res, body } = await this.raw("GET", path);
+    if (res.status === 404) return null;
+    if (!res.ok) throw new HttpError(res.status, this.url(path), errText(body));
+    return { bytes: body, headers: res.headers };
+  }
+};
+function errText(body) {
+  try {
+    return new TextDecoder().decode(body).slice(0, ERR_TEXT_CAP);
+  } catch {
+    return "";
+  }
+}
 
 // src/names.ts
-import { NAME_RE, RESERVED_NAMES, TICKER_RE, AMOUNT_RE, HASH_RE } from "@inversealtruism/cairnx-core";
+import { NAME_RE, RESERVED_NAMES, TICKER_RE, HASH_RE, MAX_TOKEN_DECIMALS, parseAmount } from "@inversealtruism/cairnx-core";
 var nameOk = (n) => typeof n === "string" && NAME_RE.test(n) && !RESERVED_NAMES.has(n);
-var amountOk = (v) => typeof v === "string" && AMOUNT_RE.test(v);
+var amountOk = (v) => parseAmount(v, { allowZero: true }) !== null;
+var decimalsOk = (d) => Number.isSafeInteger(d) && d >= 0 && d <= MAX_TOKEN_DECIMALS;
 var heightOk = (v) => Number.isSafeInteger(v) && v >= 0;
 function nameHistoryProblem(h, name) {
   if (!h || typeof h !== "object" || Array.isArray(h)) return "not an object";
@@ -61,14 +223,15 @@ function nameHistoryProblem(h, name) {
   }
   return null;
 }
-function tokenProblem(t) {
+function tokenProblem(t, ticker) {
   if (!t || typeof t !== "object") return "not an object";
   const r = t;
   if (typeof r.ticker !== "string" || !TICKER_RE.test(r.ticker)) return "bad ticker";
-  if (!Number.isSafeInteger(r.decimals) || r.decimals < 0) return `bad decimals (${String(r.decimals)})`;
-  if (!amountOk(r.supply)) return "supply is not a base-unit integer string";
-  if (!amountOk(r.minted)) return "minted is not a base-unit integer string";
-  if (r.mintLimit !== void 0 && !amountOk(r.mintLimit)) return "mintLimit is not a base-unit integer string";
+  if (ticker !== void 0 && r.ticker !== ticker) return `ticker is ${JSON.stringify(r.ticker)}, expected ${JSON.stringify(ticker)}`;
+  if (!decimalsOk(r.decimals)) return `bad decimals (${String(r.decimals)}), not an integer in the consensus range`;
+  if (!amountOk(r.supply)) return "supply is not a base-unit integer string within MAX_AMOUNT";
+  if (!amountOk(r.minted)) return "minted is not a base-unit integer string within MAX_AMOUNT";
+  if (r.mintLimit !== void 0 && !amountOk(r.mintLimit)) return "mintLimit is not a base-unit integer string within MAX_AMOUNT";
   return null;
 }
 var NamesClient = class {
@@ -79,11 +242,17 @@ var NamesClient = class {
   malformed(path, what) {
     return new HttpError(200, this.http.url(path), `malformed response: ${what}`);
   }
-  async list(path) {
-    const body = await this.http.getJson(path);
+  async list(path, query) {
+    const body = await this.http.getJson(path, query);
     if (!Array.isArray(body)) throw this.malformed(path, "expected an array");
     return body;
   }
+  /** Rows of a market list with one status, or every row for "all". */
+  async byStatus(path, status) {
+    if (status === "all") return this.list(path);
+    const rows = await this.list(path, { status });
+    return rows.filter((r) => r?.status === status);
+  }
   /** Resolve a .csd name for DISPLAY (server-trusted; see the module trust note). null = unknown/invalid name. */
   async resolve(name) {
     if (!nameOk(name)) return null;
@@ -154,7 +323,8 @@ var NamesClient = class {
     });
     return rows;
   }
-  /** One token by ticker. null = unknown/invalid ticker. Throws a typed HttpError on a malformed body. */
+  /** One token by ticker. null = unknown/invalid ticker. Throws a typed HttpError on a malformed body or a
+   *  record for another ticker. */
   async token(ticker) {
     if (typeof ticker !== "string" || !TICKER_RE.test(ticker)) return null;
     const path = `/trade/api/cairnx/token/${ticker}`;
@@ -165,17 +335,19 @@ var NamesClient = class {
       if (e?.status === 404) return null;
       throw e;
     }
-    const p = tokenProblem(t);
+    const p = tokenProblem(t, ticker);
     if (p) throw this.malformed(path, p);
     return t;
   }
-  /** Open offers (the market's display list). */
-  offers() {
-    return this.list(`/trade/api/cairnx/offers`);
+  /** Offers with one status, open ones by default (the market's display list). `{ status: "all" }` returns every
+   *  offer the server holds, filled, cancelled and expired ones included. */
+  offers(opts = {}) {
+    return this.byStatus(`/trade/api/cairnx/offers`, opts.status ?? "open");
   }
-  /** Open bids. */
-  bids() {
-    return this.list(`/trade/api/cairnx/bids`);
+  /** Bids with one status, open ones by default. `{ status: "all" }` returns every bid the server holds, done,
+   *  cancelled and expired ones included. */
+  bids(opts = {}) {
+    return this.byStatus(`/trade/api/cairnx/bids`, opts.status ?? "open");
   }
   /** The full canonical CairnX state (large; prefer the scoped reads above). */
   state() {
@@ -348,10 +520,10 @@ async function preverifyOffer(opts) {
       return { ok: false, trust: "verified", reason: "the served offer is missing seller (the rebate recipient) - pass the resolver's full offer object, or omit servedOffer", ...base };
     if (String(so.seller).toLowerCase() !== seller)
       return { ok: false, trust: "verified", reason: "the served seller doesn't match the offer's on-chain author (a lying resolver may be redirecting your payment)", ...base };
-    if (bindOfferTerms(opts.servedOffer, terms, { give: true, wantType: true }))
-      return { ok: false, trust: "verified", reason: "the served terms don't match the offer's on-chain record (fee, rebate, partial sizing, the give, or the want type - a lying resolver could mis-size or re-route the fill, redirecting or burning your payment)", ...base };
     if (isTokenWant(offerRec.want) && (String(so?.want?.ticker) !== String(offerRec.want.ticker) || String(so?.want?.amount) !== String(offerRec.want.amount)))
       return { ok: false, trust: "verified", reason: "the served want ticker/amount don't match the offer's on-chain record (a lying resolver could bait-and-switch the token price)", ...base };
+    if (bindOfferTerms(opts.servedOffer, terms, { give: true, wantType: true }))
+      return { ok: false, trust: "verified", reason: "the served terms don't match the offer's on-chain record (fee, rebate, partial sizing, the give, or the want type - a lying resolver could mis-size or re-route the fill, redirecting or burning your payment)", ...base };
   }
   if (sumsMismatch) return { ok: false, trust: "verified", reason: sumsMismatch, ...base };
   return { ok: true, trust: "verified", ...base };
@@ -379,7 +551,6 @@ var Cairn = class {
   chain;
   index;
   content;
-  registry;
   /** .csd names + CairnX market READS (server-trusted display reads; see names.ts trust note). */
   names;
   wallet;
@@ -403,7 +574,6 @@ var Cairn = class {
     this.cairnHttp = new Http({ baseUrl: cairn, fetch, timeoutMs });
     this._cairnBase = cairn;
     const indexerHttp = new Http({ baseUrl: indexer, fetch, timeoutMs });
-    const swarmHttp = config.baseUrls?.swarm ? new Http({ baseUrl: config.baseUrls.swarm.replace(/\/+$/, ""), fetch, timeoutMs }) : void 0;
     this._spvCp = config.spvCheckpoint ?? DEFAULT_SPV_CHECKPOINT;
     this.chain = new Chain({ rpcUrl: rpc, fetch, timeoutMs });
     this.wallet = config.wallet;
@@ -412,8 +582,7 @@ var Cairn = class {
       WebSocketImpl: config.WebSocketImpl,
       headerMerkleAt: (h) => this.verifiedHeaderMerkleAt(h)
     });
-    this.content = new ContentClient({ swarm: swarmHttp, indexer: indexerHttp, cairn: this.cairnHttp });
-    this.registry = new RegistryClient(indexerHttp);
+    this.content = new ContentClient({ cairn: this.cairnHttp });
     this.names = new NamesClient(this.cairnHttp);
   }
   /**
@@ -621,7 +790,6 @@ export {
   IndexerClient,
   NamesClient,
   NotInstalledError,
-  RegistryClient,
   SDK_VERSION,
   SubmitInFlightError,
   UnsupportedMethodError,

package/dist/indexer.cjs

@@ -93,18 +93,6 @@ var IndexerClient = class {
   attestations(id) {
     return this.http.getJson(`/proposal/${encodeURIComponent(id)}/attestations`);
   }
-  registryPeers() {
-    return this.http.getJson("/registry/peers");
-  }
-  registryGateways() {
-    return this.http.getJson("/registry/gateways");
-  }
-  identity(handle) {
-    return this.http.getJson(`/identity/${encodeURIComponent(handle)}`);
-  }
-  reverseIdentity(addr) {
-    return this.http.getJson(`/address/${encodeURIComponent(addr)}/identity`);
-  }
   // ---- trust-minimized inclusion ----------------------------------------
   /**
    * Verify a tx is included in a block by folding its merkle branch to the root

package/dist/indexer.d.cts

@@ -68,10 +68,6 @@ declare class IndexerClient {
     domainProposals(d: string): Promise<unknown[]>;
     proposal(id: string): Promise<unknown>;
     attestations(id: string): Promise<unknown[]>;
-    registryPeers(): Promise<unknown[]>;
-    registryGateways(): Promise<unknown[]>;
-    identity(handle: string): Promise<unknown>;
-    reverseIdentity(addr: string): Promise<unknown>;
     /**
      * Verify a tx is included in a block by folding its merkle branch to the root
      * with csd-codec.verifyMerkleProof. If `headerMerkleAt` was provided, the

package/dist/indexer.d.ts

@@ -68,10 +68,6 @@ declare class IndexerClient {
     domainProposals(d: string): Promise<unknown[]>;
     proposal(id: string): Promise<unknown>;
     attestations(id: string): Promise<unknown[]>;
-    registryPeers(): Promise<unknown[]>;
-    registryGateways(): Promise<unknown[]>;
-    identity(handle: string): Promise<unknown>;
-    reverseIdentity(addr: string): Promise<unknown>;
     /**
      * Verify a tx is included in a block by folding its merkle branch to the root
      * with csd-codec.verifyMerkleProof. If `headerMerkleAt` was provided, the

package/dist/indexer.js

@@ -1,6 +1,6 @@
 import {
   IndexerClient
-} from "./chunk-K5MGEYEU.js";
+} from "./chunk-CI7YODPP.js";
 export {
   IndexerClient
 };

package/dist/react.cjs

@@ -26,7 +26,7 @@ __export(react_exports, {
 module.exports = __toCommonJS(react_exports);
 
 // src/errors.ts
-var SDK_VERSION = "0.6.0";
+var SDK_VERSION = "0.8.0";
 var DOCS_BASE = "https://cairn-substrate.com/docs/sdk";
 var CairnError = class extends Error {
   /** Stable machine code for programmatic branching. */

package/dist/react.js

@@ -1,8 +1,8 @@
 import {
   CairnController
-} from "./chunk-MLNW2RQB.js";
-import "./chunk-BMH2MACB.js";
-import "./chunk-2A4AJBO5.js";
+} from "./chunk-JXBO4LV6.js";
+import "./chunk-WWO3FXHG.js";
+import "./chunk-UAPWZZQK.js";
 
 // src/react.ts
 function createCairnHooks(React, controllerOrOpts) {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@inversealtruism/cairn-sdk",
-  "version": "0.6.0",
-  "description": "The Compute Substrate dApp kit: one cohesive toolkit to connect the Cairn Wallet, read the chain, the indexer and .csd names, verify self-certifying content, and resolve registries. Composes the published csd-* primitives.",
+  "version": "0.8.0",
+  "description": "The Compute Substrate dApp kit: one cohesive toolkit to connect the Cairn Wallet, read the chain, the indexer and .csd names, verify self-certifying content, and resolve .csd names. Composes the published csd-* primitives.",
   "type": "module",
   "main": "./dist/index.cjs",
   "module": "./dist/index.js",
@@ -27,11 +27,6 @@
       "import": "./dist/content.js",
       "require": "./dist/content.cjs"
     },
-    "./registry": {
-      "types": "./dist/registry.d.ts",
-      "import": "./dist/registry.js",
-      "require": "./dist/registry.cjs"
-    },
     "./chain": {
       "types": "./dist/chain.d.ts",
       "import": "./dist/chain.js",
@@ -54,21 +49,22 @@
     "README.md"
   ],
   "dependencies": {
-    "@inversealtruism/cairnx-core": "0.2.0",
-    "@inversealtruism/csd-client": "0.1.18",
+    "@inversealtruism/cairnx-core": "0.2.2",
+    "@inversealtruism/csd-client": "0.1.19",
     "@inversealtruism/csd-codec": "0.1.18",
-    "@inversealtruism/csd-crypto": "0.1.18",
-    "@inversealtruism/csd-light": "0.1.23",
-    "@inversealtruism/csd-registry": "0.1.20",
-    "@inversealtruism/csd-tx": "0.1.21"
+    "@inversealtruism/csd-crypto": "0.1.20",
+    "@inversealtruism/csd-light": "0.1.25",
+    "@inversealtruism/csd-tx": "0.1.23"
   },
   "devDependencies": {
-    "@inversealtruism/csd-siwc": "0.1.19",
-    "esbuild": "^0.27.0",
-    "playwright-core": "^1.49.0",
-    "tsup": "^8.5.1",
-    "tsx": "^4.19.2",
-    "typescript": "^5.6.0"
+    "@biomejs/biome": "2.5.15",
+    "@inversealtruism/csd-siwc": "0.1.21",
+    "@types/node": "22.19.20",
+    "esbuild": "0.28.2",
+    "playwright-core": "1.60.0",
+    "tsup": "8.5.1",
+    "tsx": "4.22.4",
+    "typescript": "5.9.3"
   },
   "sideEffects": false,
   "license": "MIT",
@@ -90,14 +86,15 @@
     "blockchain"
   ],
   "scripts": {
-    "build": "tsup src/index.ts src/connect.ts src/indexer.ts src/content.ts src/registry.ts src/chain.ts src/controller.ts src/react.ts --format esm,cjs --dts --clean",
+    "build": "tsup src/index.ts src/connect.ts src/indexer.ts src/content.ts src/chain.ts src/controller.ts src/react.ts --format esm,cjs --dts --clean",
+    "typecheck": "tsc -p tsconfig.typecheck.json",
+    "lint": "biome lint --max-diagnostics=none .",
+    "check:dashes-paths": "node scripts/check-dashes-paths.mjs",
     "test": "node test/run.mjs",
-    "test:live": "node examples/read-only.mjs",
+    "test:live": "node examples/read-only.mjs && node test/e2e/e2e-read.mjs",
+    "test:live:wallet": "xvfb-run -a node test/e2e/e2e-wallet-connect.mjs",
     "build:example": "node scripts/build-example.mjs",
     "clean": "node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\"",
-    "test:e2e:read": "node test/e2e/e2e-read.mjs",
-    "test:e2e:wallet": "xvfb-run -a node test/e2e/e2e-wallet-connect.mjs",
-    "test:e2e": "node test/e2e/e2e-read.mjs && xvfb-run -a node test/e2e/e2e-wallet-connect.mjs",
-    "test:all": "pnpm test && pnpm test:e2e"
+    "test:all": "pnpm test && pnpm test:live && pnpm test:live:wallet"
   }
 }