@inversealtruism/cairn-sdk 0.6.0 → 0.8.0

package/dist/chunk-67QBDZPW.js

@@ -1,254 +0,0 @@
-import {
-  HttpError
-} from "./chunk-2A4AJBO5.js";
-
-// src/registry.ts
-import { fromRecords } from "@inversealtruism/csd-registry";
-
-// src/http.ts
-var DEFAULT_MAX_BYTES = 16 * 1024 * 1024;
-var ERR_TEXT_CAP = 8 * 1024;
-var MAX_RETRY_AFTER_MS = 6e4;
-function retryAfterMs(res) {
-  const secs = Number(res.headers.get("retry-after"));
-  return Number.isFinite(secs) && secs > 0 ? Math.min(secs * 1e3, MAX_RETRY_AFTER_MS) : 0;
-}
-var RetryWaitBudget = class {
-  left;
-  constructor(totalMs) {
-    this.left = totalMs;
-  }
-  /** The ms to sleep before the next attempt (`ownMs` is the caller's backoff, clipped to what is left), or
-   *  null when the server's hint exceeds the remaining budget. */
-  take(ownMs, serverMs) {
-    if (serverMs > this.left) return null;
-    const ms = Math.min(Math.max(ownMs, serverMs), this.left);
-    this.left -= ms;
-    return ms;
-  }
-};
-var HTTP_RETRY_WAIT_BUDGET_MS = 3e4;
-async function readCapped(res, maxBytes) {
-  const cl = Number(res.headers.get("content-length"));
-  if (Number.isFinite(cl) && cl > maxBytes) throw new HttpError(res.status, res.url, `response too large (content-length ${cl} > ${maxBytes})`);
-  const body = res.body;
-  if (!body || typeof body.getReader !== "function") {
-    const buf = new Uint8Array(await res.arrayBuffer());
-    if (buf.byteLength > maxBytes) throw new HttpError(res.status, res.url, `response too large (${buf.byteLength} > ${maxBytes})`);
-    return buf;
-  }
-  const reader = body.getReader();
-  const chunks = [];
-  let total = 0;
-  for (; ; ) {
-    const { done, value } = await reader.read();
-    if (done) break;
-    if (value) {
-      total += value.byteLength;
-      if (total > maxBytes) {
-        try {
-          await reader.cancel();
-        } catch {
-        }
-        throw new HttpError(res.status, res.url, `response exceeded ${maxBytes} bytes`);
-      }
-      chunks.push(value);
-    }
-  }
-  const out = new Uint8Array(total);
-  let off = 0;
-  for (const c of chunks) {
-    out.set(c, off);
-    off += c.byteLength;
-  }
-  return out;
-}
-var Http = class {
-  baseUrl;
-  _fetch;
-  timeoutMs;
-  maxBytes;
-  headers;
-  retries;
-  constructor(opts) {
-    this.baseUrl = opts.baseUrl.replace(/\/+$/, "");
-    const f = opts.fetch ?? globalThis.fetch;
-    if (!f) throw new Error("No fetch available \u2014 pass `fetch` in the SDK options.");
-    this._fetch = opts.fetch ? opts.fetch : f.bind(globalThis);
-    this.timeoutMs = opts.timeoutMs ?? 15e3;
-    this.maxBytes = Number.isFinite(opts.maxBytes) && opts.maxBytes >= 1 ? Math.floor(opts.maxBytes) : DEFAULT_MAX_BYTES;
-    this.headers = opts.headers ?? {};
-    const retries = Number(opts.retries ?? 0);
-    this.retries = Number.isNaN(retries) ? 0 : Math.min(10, Math.max(0, Math.floor(retries)));
-  }
-  /** Build an absolute URL from a path + optional query params. */
-  url(path, query) {
-    const p = path.startsWith("/") ? path : `/${path}`;
-    const u = new URL(this.baseUrl + p);
-    const basePath = new URL(this.baseUrl + "/").pathname;
-    if (basePath !== "/" && !(u.pathname + "/").startsWith(basePath)) {
-      throw new Error(`illegal path '${path}' \u2014 escapes base ${basePath}`);
-    }
-    if (query) {
-      for (const [k, v] of Object.entries(query)) {
-        if (v !== void 0 && v !== null) u.searchParams.set(k, String(v));
-      }
-    }
-    return u.toString();
-  }
-  async raw(method, path, opts) {
-    const url = this.url(path, opts?.query);
-    const ctrl = new AbortController();
-    const timer = setTimeout(() => ctrl.abort(), this.timeoutMs);
-    try {
-      const res = await this._fetch(url, {
-        method,
-        signal: ctrl.signal,
-        headers: {
-          ...opts?.body !== void 0 ? { "content-type": "application/json" } : {},
-          ...this.headers,
-          ...opts?.headers ?? {}
-        },
-        body: opts?.body !== void 0 ? JSON.stringify(opts.body) : void 0
-      });
-      const body = await readCapped(res, this.maxBytes);
-      return { res, body };
-    } finally {
-      clearTimeout(timer);
-    }
-  }
-  // A malformed 2xx body must surface as a TYPED HttpError, not a leaked SyntaxError (B10: dApp
-  // code branches on `instanceof CairnError`; a raw parse error escaped that contract).
-  parseJson(res, text, url) {
-    try {
-      return JSON.parse(text);
-    } catch (e) {
-      throw new HttpError(res.status, url, `invalid JSON body: ${text.slice(0, 120)}`);
-    }
-  }
-  async getJson(path, query) {
-    const url = this.url(path, query);
-    const budget = new RetryWaitBudget(HTTP_RETRY_WAIT_BUDGET_MS);
-    for (let attempt = 0; ; attempt++) {
-      let serverWaitMs = 0;
-      let last;
-      try {
-        const { res, body } = await this.raw("GET", path, { query });
-        if (!res.ok) {
-          last = new HttpError(res.status, url, errText(body));
-          if (!(res.status >= 500 && attempt < this.retries)) throw last;
-          serverWaitMs = retryAfterMs(res);
-        } else {
-          return this.parseJson(res, new TextDecoder().decode(body), url);
-        }
-      } catch (e) {
-        if (e instanceof HttpError && e.status < 500) throw e;
-        if (attempt >= this.retries) throw e;
-      }
-      const jitterMs = Math.floor(Math.random() * Math.min(4e3, 250 * 2 ** attempt));
-      const waitMs = budget.take(jitterMs, serverWaitMs);
-      if (waitMs === null) throw last ?? new HttpError(0, url, "retry wait budget exhausted");
-      await new Promise((r) => setTimeout(r, waitMs));
-    }
-  }
-  async postJson(path, body, headers) {
-    const url = this.url(path);
-    const { res, body: respBody } = await this.raw("POST", path, { body, headers });
-    if (!res.ok) throw new HttpError(res.status, url, errText(respBody));
-    return this.parseJson(res, new TextDecoder().decode(respBody), url);
-  }
-  /** GET raw bytes (for content retrieval). Returns null on 404. */
-  async getBytes(path) {
-    const { res, body } = await this.raw("GET", path);
-    if (res.status === 404) return null;
-    if (!res.ok) throw new HttpError(res.status, this.url(path), errText(body));
-    return { bytes: body, headers: res.headers };
-  }
-};
-function errText(body) {
-  try {
-    return new TextDecoder().decode(body).slice(0, ERR_TEXT_CAP);
-  } catch {
-    return "";
-  }
-}
-
-// src/registry.ts
-import {
-  fromRecords as fromRecords2,
-  verifyPeer,
-  verifyGateway,
-  verifyIdentitySig,
-  DOMAINS,
-  buildPeerRecord,
-  buildGatewayRecord,
-  buildIdentityCommit,
-  buildIdentityReveal,
-  epochOf
-} from "@inversealtruism/csd-registry";
-var RegistryClient = class {
-  http;
-  /** Accepts the SDK's hardened Http directly (the Cairn facade path) or the legacy
-   *  { baseUrl, fetch } options (kept for direct constructors; they now get the same
-   *  hardened transport, built internally). */
-  constructor(src) {
-    this.http = src instanceof Http ? src : new Http({ baseUrl: src.baseUrl, fetch: src.fetch });
-  }
-  /** Discover ranked content/pin gateways (GET /registry/gateways). */
-  gateways() {
-    return this.http.getJson("/registry/gateways");
-  }
-  /** Discover ranked libp2p peers (GET /registry/peers). */
-  peers() {
-    return this.http.getJson("/registry/peers");
-  }
-  /**
-   * Resolve a handle → identity (GET /identity/:handle). Returns null if unresolved.
-   *
-   * ⚠ TRUST (CAIRN-SDK-RESOLVE-VERIFIED-FOOTGUN): the returned `verified` flag is the INDEXER's assertion,
-   * NOT a client-side proof. A hostile/compromised indexer (or a MITM of the read proxy) can return
-   * `verified:true` for a wrong address. Do NOT use this directly as a payee/login target without either (a)
-   * recomputing from raw records via `fromRecords.name(...)`, or (b) cross-checking a second independent
-   * source (the wallet's namespv union cure). Treat `verified` here as a hint, not a guarantee.
-   */
-  resolveName(handle) {
-    return this.getOr404Null(`/identity/${encodeURIComponent(handle)}`);
-  }
-  /** Reverse-resolve an address → identity (GET /address/:addr/identity).
-   *  ⚠ Same indexer-trust caveat as resolveName — `verified` is the indexer's claim, not a client proof. */
-  reverseName(address) {
-    return this.getOr404Null(`/address/${encodeURIComponent(address)}/identity`);
-  }
-  // MF-12: 404 → null (the preserved csd-registry contract for both name resolvers); every other
-  // failure rethrows the typed HttpError/CairnError the hardened Http raises.
-  async getOr404Null(path) {
-    try {
-      return await this.http.getJson(path);
-    } catch (e) {
-      if (e instanceof HttpError && e.status === 404) return null;
-      return Promise.reject(e);
-    }
-  }
-  /** The deterministic, client-side resolvers (recompute from raw ChainRecord[]). */
-  get fromRecords() {
-    return fromRecords;
-  }
-};
-
-export {
-  retryAfterMs,
-  RetryWaitBudget,
-  readCapped,
-  Http,
-  RegistryClient,
-  fromRecords2 as fromRecords,
-  verifyPeer,
-  verifyGateway,
-  verifyIdentitySig,
-  DOMAINS,
-  buildPeerRecord,
-  buildGatewayRecord,
-  buildIdentityCommit,
-  buildIdentityReveal,
-  epochOf
-};

package/dist/registry.cjs

@@ -1,326 +0,0 @@
-"use strict";
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-
-// src/registry.ts
-var registry_exports = {};
-__export(registry_exports, {
-  DOMAINS: () => import_csd_registry2.DOMAINS,
-  RegistryClient: () => RegistryClient,
-  buildGatewayRecord: () => import_csd_registry2.buildGatewayRecord,
-  buildIdentityCommit: () => import_csd_registry2.buildIdentityCommit,
-  buildIdentityReveal: () => import_csd_registry2.buildIdentityReveal,
-  buildPeerRecord: () => import_csd_registry2.buildPeerRecord,
-  epochOf: () => import_csd_registry2.epochOf,
-  fromRecords: () => import_csd_registry2.fromRecords,
-  verifyGateway: () => import_csd_registry2.verifyGateway,
-  verifyIdentitySig: () => import_csd_registry2.verifyIdentitySig,
-  verifyPeer: () => import_csd_registry2.verifyPeer
-});
-module.exports = __toCommonJS(registry_exports);
-var import_csd_registry = require("@inversealtruism/csd-registry");
-
-// src/errors.ts
-var SDK_VERSION = "0.6.0";
-var DOCS_BASE = "https://cairn-substrate.com/docs/sdk";
-var CairnError = class extends Error {
-  /** Stable machine code for programmatic branching. */
-  code;
-  /** The human message without the appended docs/version footer. */
-  shortMessage;
-  /** Relative docs path (under the SDK docs base), if any. */
-  docsPath;
-  /** The cairn-sdk version that produced this error. */
-  version = SDK_VERSION;
-  /**
-   * Whether a dApp may safely AUTO-retry this failure. `false` for fund-safety refusals and user-intent
-   * declines (the default); `true` only for provably transient infra faults where nothing was signed.
-   * A `SubmitInFlightError` is `false` too: reconcile its `txid`, never blind-retry.
-   */
-  retryable;
-  constructor(shortMessage, opts = {}) {
-    const docs = opts.docsPath;
-    super(
-      [shortMessage, docs ? `Docs: ${DOCS_BASE}${docs}` : "", `Version: cairn-sdk@${SDK_VERSION}`].filter(Boolean).join("\n"),
-      { cause: opts.cause }
-    );
-    this.name = new.target.name;
-    this.code = opts.code ?? "UNKNOWN";
-    this.shortMessage = shortMessage;
-    this.docsPath = docs;
-    this.retryable = opts.retryable ?? false;
-  }
-  /**
-   * Walk the `cause` chain. With a predicate, returns the FIRST matching error (or null). Without one,
-   * returns the DEEPEST cause (the root). Mirrors viem's `BaseError.walk()`.
-   */
-  walk(fn) {
-    let current = this;
-    let last = this;
-    while (current != null) {
-      if (fn && fn(current)) return current;
-      last = current;
-      current = current?.cause;
-    }
-    return fn ? null : last;
-  }
-};
-var HttpError = class extends CairnError {
-  status;
-  url;
-  body;
-  constructor(status, url, body) {
-    super(`HTTP ${status} for ${url}${body ? `: ${String(body).slice(0, 200)}` : ""}`, { code: "HTTP_ERROR" });
-    this.status = status;
-    this.url = url;
-    this.body = body;
-  }
-};
-
-// src/http.ts
-var DEFAULT_MAX_BYTES = 16 * 1024 * 1024;
-var ERR_TEXT_CAP = 8 * 1024;
-var MAX_RETRY_AFTER_MS = 6e4;
-function retryAfterMs(res) {
-  const secs = Number(res.headers.get("retry-after"));
-  return Number.isFinite(secs) && secs > 0 ? Math.min(secs * 1e3, MAX_RETRY_AFTER_MS) : 0;
-}
-var RetryWaitBudget = class {
-  left;
-  constructor(totalMs) {
-    this.left = totalMs;
-  }
-  /** The ms to sleep before the next attempt (`ownMs` is the caller's backoff, clipped to what is left), or
-   *  null when the server's hint exceeds the remaining budget. */
-  take(ownMs, serverMs) {
-    if (serverMs > this.left) return null;
-    const ms = Math.min(Math.max(ownMs, serverMs), this.left);
-    this.left -= ms;
-    return ms;
-  }
-};
-var HTTP_RETRY_WAIT_BUDGET_MS = 3e4;
-async function readCapped(res, maxBytes) {
-  const cl = Number(res.headers.get("content-length"));
-  if (Number.isFinite(cl) && cl > maxBytes) throw new HttpError(res.status, res.url, `response too large (content-length ${cl} > ${maxBytes})`);
-  const body = res.body;
-  if (!body || typeof body.getReader !== "function") {
-    const buf = new Uint8Array(await res.arrayBuffer());
-    if (buf.byteLength > maxBytes) throw new HttpError(res.status, res.url, `response too large (${buf.byteLength} > ${maxBytes})`);
-    return buf;
-  }
-  const reader = body.getReader();
-  const chunks = [];
-  let total = 0;
-  for (; ; ) {
-    const { done, value } = await reader.read();
-    if (done) break;
-    if (value) {
-      total += value.byteLength;
-      if (total > maxBytes) {
-        try {
-          await reader.cancel();
-        } catch {
-        }
-        throw new HttpError(res.status, res.url, `response exceeded ${maxBytes} bytes`);
-      }
-      chunks.push(value);
-    }
-  }
-  const out = new Uint8Array(total);
-  let off = 0;
-  for (const c of chunks) {
-    out.set(c, off);
-    off += c.byteLength;
-  }
-  return out;
-}
-var Http = class {
-  baseUrl;
-  _fetch;
-  timeoutMs;
-  maxBytes;
-  headers;
-  retries;
-  constructor(opts) {
-    this.baseUrl = opts.baseUrl.replace(/\/+$/, "");
-    const f = opts.fetch ?? globalThis.fetch;
-    if (!f) throw new Error("No fetch available \u2014 pass `fetch` in the SDK options.");
-    this._fetch = opts.fetch ? opts.fetch : f.bind(globalThis);
-    this.timeoutMs = opts.timeoutMs ?? 15e3;
-    this.maxBytes = Number.isFinite(opts.maxBytes) && opts.maxBytes >= 1 ? Math.floor(opts.maxBytes) : DEFAULT_MAX_BYTES;
-    this.headers = opts.headers ?? {};
-    const retries = Number(opts.retries ?? 0);
-    this.retries = Number.isNaN(retries) ? 0 : Math.min(10, Math.max(0, Math.floor(retries)));
-  }
-  /** Build an absolute URL from a path + optional query params. */
-  url(path, query) {
-    const p = path.startsWith("/") ? path : `/${path}`;
-    const u = new URL(this.baseUrl + p);
-    const basePath = new URL(this.baseUrl + "/").pathname;
-    if (basePath !== "/" && !(u.pathname + "/").startsWith(basePath)) {
-      throw new Error(`illegal path '${path}' \u2014 escapes base ${basePath}`);
-    }
-    if (query) {
-      for (const [k, v] of Object.entries(query)) {
-        if (v !== void 0 && v !== null) u.searchParams.set(k, String(v));
-      }
-    }
-    return u.toString();
-  }
-  async raw(method, path, opts) {
-    const url = this.url(path, opts?.query);
-    const ctrl = new AbortController();
-    const timer = setTimeout(() => ctrl.abort(), this.timeoutMs);
-    try {
-      const res = await this._fetch(url, {
-        method,
-        signal: ctrl.signal,
-        headers: {
-          ...opts?.body !== void 0 ? { "content-type": "application/json" } : {},
-          ...this.headers,
-          ...opts?.headers ?? {}
-        },
-        body: opts?.body !== void 0 ? JSON.stringify(opts.body) : void 0
-      });
-      const body = await readCapped(res, this.maxBytes);
-      return { res, body };
-    } finally {
-      clearTimeout(timer);
-    }
-  }
-  // A malformed 2xx body must surface as a TYPED HttpError, not a leaked SyntaxError (B10: dApp
-  // code branches on `instanceof CairnError`; a raw parse error escaped that contract).
-  parseJson(res, text, url) {
-    try {
-      return JSON.parse(text);
-    } catch (e) {
-      throw new HttpError(res.status, url, `invalid JSON body: ${text.slice(0, 120)}`);
-    }
-  }
-  async getJson(path, query) {
-    const url = this.url(path, query);
-    const budget = new RetryWaitBudget(HTTP_RETRY_WAIT_BUDGET_MS);
-    for (let attempt = 0; ; attempt++) {
-      let serverWaitMs = 0;
-      let last;
-      try {
-        const { res, body } = await this.raw("GET", path, { query });
-        if (!res.ok) {
-          last = new HttpError(res.status, url, errText(body));
-          if (!(res.status >= 500 && attempt < this.retries)) throw last;
-          serverWaitMs = retryAfterMs(res);
-        } else {
-          return this.parseJson(res, new TextDecoder().decode(body), url);
-        }
-      } catch (e) {
-        if (e instanceof HttpError && e.status < 500) throw e;
-        if (attempt >= this.retries) throw e;
-      }
-      const jitterMs = Math.floor(Math.random() * Math.min(4e3, 250 * 2 ** attempt));
-      const waitMs = budget.take(jitterMs, serverWaitMs);
-      if (waitMs === null) throw last ?? new HttpError(0, url, "retry wait budget exhausted");
-      await new Promise((r) => setTimeout(r, waitMs));
-    }
-  }
-  async postJson(path, body, headers) {
-    const url = this.url(path);
-    const { res, body: respBody } = await this.raw("POST", path, { body, headers });
-    if (!res.ok) throw new HttpError(res.status, url, errText(respBody));
-    return this.parseJson(res, new TextDecoder().decode(respBody), url);
-  }
-  /** GET raw bytes (for content retrieval). Returns null on 404. */
-  async getBytes(path) {
-    const { res, body } = await this.raw("GET", path);
-    if (res.status === 404) return null;
-    if (!res.ok) throw new HttpError(res.status, this.url(path), errText(body));
-    return { bytes: body, headers: res.headers };
-  }
-};
-function errText(body) {
-  try {
-    return new TextDecoder().decode(body).slice(0, ERR_TEXT_CAP);
-  } catch {
-    return "";
-  }
-}
-
-// src/registry.ts
-var import_csd_registry2 = require("@inversealtruism/csd-registry");
-var RegistryClient = class {
-  http;
-  /** Accepts the SDK's hardened Http directly (the Cairn facade path) or the legacy
-   *  { baseUrl, fetch } options (kept for direct constructors; they now get the same
-   *  hardened transport, built internally). */
-  constructor(src) {
-    this.http = src instanceof Http ? src : new Http({ baseUrl: src.baseUrl, fetch: src.fetch });
-  }
-  /** Discover ranked content/pin gateways (GET /registry/gateways). */
-  gateways() {
-    return this.http.getJson("/registry/gateways");
-  }
-  /** Discover ranked libp2p peers (GET /registry/peers). */
-  peers() {
-    return this.http.getJson("/registry/peers");
-  }
-  /**
-   * Resolve a handle → identity (GET /identity/:handle). Returns null if unresolved.
-   *
-   * ⚠ TRUST (CAIRN-SDK-RESOLVE-VERIFIED-FOOTGUN): the returned `verified` flag is the INDEXER's assertion,
-   * NOT a client-side proof. A hostile/compromised indexer (or a MITM of the read proxy) can return
-   * `verified:true` for a wrong address. Do NOT use this directly as a payee/login target without either (a)
-   * recomputing from raw records via `fromRecords.name(...)`, or (b) cross-checking a second independent
-   * source (the wallet's namespv union cure). Treat `verified` here as a hint, not a guarantee.
-   */
-  resolveName(handle) {
-    return this.getOr404Null(`/identity/${encodeURIComponent(handle)}`);
-  }
-  /** Reverse-resolve an address → identity (GET /address/:addr/identity).
-   *  ⚠ Same indexer-trust caveat as resolveName — `verified` is the indexer's claim, not a client proof. */
-  reverseName(address) {
-    return this.getOr404Null(`/address/${encodeURIComponent(address)}/identity`);
-  }
-  // MF-12: 404 → null (the preserved csd-registry contract for both name resolvers); every other
-  // failure rethrows the typed HttpError/CairnError the hardened Http raises.
-  async getOr404Null(path) {
-    try {
-      return await this.http.getJson(path);
-    } catch (e) {
-      if (e instanceof HttpError && e.status === 404) return null;
-      return Promise.reject(e);
-    }
-  }
-  /** The deterministic, client-side resolvers (recompute from raw ChainRecord[]). */
-  get fromRecords() {
-    return import_csd_registry.fromRecords;
-  }
-};
-// Annotate the CommonJS export names for ESM import in node:
-0 && (module.exports = {
-  DOMAINS,
-  RegistryClient,
-  buildGatewayRecord,
-  buildIdentityCommit,
-  buildIdentityReveal,
-  buildPeerRecord,
-  epochOf,
-  fromRecords,
-  verifyGateway,
-  verifyIdentitySig,
-  verifyPeer
-});

package/dist/registry.d.cts

@@ -1,44 +0,0 @@
-import * as _inversealtruism_csd_registry from '@inversealtruism/csd-registry';
-import { RankedGateway, RankedPeer, ResolvedIdentity } from '@inversealtruism/csd-registry';
-export { BuiltRecord, ChainRecord, DOMAINS, RankedGateway, RankedPeer, ResolveOpts, ResolvedIdentity, buildGatewayRecord, buildIdentityCommit, buildIdentityReveal, buildPeerRecord, epochOf, fromRecords, verifyGateway, verifyIdentitySig, verifyPeer } from '@inversealtruism/csd-registry';
-import { H as Http, F as FetchLike } from './http-C9C4L4hz.cjs';
-
-interface RegistryClientOptions {
-    /** Indexer base URL exposing /registry/* + /identity/* (e.g. https://cairn-substrate.com/indexer). */
-    baseUrl: string;
-    fetch?: FetchLike;
-}
-declare class RegistryClient {
-    private readonly http;
-    /** Accepts the SDK's hardened Http directly (the Cairn facade path) or the legacy
-     *  { baseUrl, fetch } options (kept for direct constructors; they now get the same
-     *  hardened transport, built internally). */
-    constructor(src: Http | RegistryClientOptions);
-    /** Discover ranked content/pin gateways (GET /registry/gateways). */
-    gateways(): Promise<RankedGateway[]>;
-    /** Discover ranked libp2p peers (GET /registry/peers). */
-    peers(): Promise<RankedPeer[]>;
-    /**
-     * Resolve a handle → identity (GET /identity/:handle). Returns null if unresolved.
-     *
-     * ⚠ TRUST (CAIRN-SDK-RESOLVE-VERIFIED-FOOTGUN): the returned `verified` flag is the INDEXER's assertion,
-     * NOT a client-side proof. A hostile/compromised indexer (or a MITM of the read proxy) can return
-     * `verified:true` for a wrong address. Do NOT use this directly as a payee/login target without either (a)
-     * recomputing from raw records via `fromRecords.name(...)`, or (b) cross-checking a second independent
-     * source (the wallet's namespv union cure). Treat `verified` here as a hint, not a guarantee.
-     */
-    resolveName(handle: string): Promise<ResolvedIdentity | null>;
-    /** Reverse-resolve an address → identity (GET /address/:addr/identity).
-     *  ⚠ Same indexer-trust caveat as resolveName — `verified` is the indexer's claim, not a client proof. */
-    reverseName(address: string): Promise<ResolvedIdentity | null>;
-    private getOr404Null;
-    /** The deterministic, client-side resolvers (recompute from raw ChainRecord[]). */
-    get fromRecords(): {
-        peers: (records: _inversealtruism_csd_registry.ChainRecord[], opts: _inversealtruism_csd_registry.ResolveOpts) => RankedPeer[];
-        gateways: (records: _inversealtruism_csd_registry.ChainRecord[], opts: _inversealtruism_csd_registry.ResolveOpts) => RankedGateway[];
-        name: (records: _inversealtruism_csd_registry.ChainRecord[], handle: string, opts: _inversealtruism_csd_registry.ResolveOpts) => ResolvedIdentity | null;
-        reverse: (records: _inversealtruism_csd_registry.ChainRecord[], address: string, opts: _inversealtruism_csd_registry.ResolveOpts) => ResolvedIdentity | null;
-    };
-}
-
-export { RegistryClient, type RegistryClientOptions };

package/dist/registry.d.ts

@@ -1,44 +0,0 @@
-import * as _inversealtruism_csd_registry from '@inversealtruism/csd-registry';
-import { RankedGateway, RankedPeer, ResolvedIdentity } from '@inversealtruism/csd-registry';
-export { BuiltRecord, ChainRecord, DOMAINS, RankedGateway, RankedPeer, ResolveOpts, ResolvedIdentity, buildGatewayRecord, buildIdentityCommit, buildIdentityReveal, buildPeerRecord, epochOf, fromRecords, verifyGateway, verifyIdentitySig, verifyPeer } from '@inversealtruism/csd-registry';
-import { H as Http, F as FetchLike } from './http-C9C4L4hz.js';
-
-interface RegistryClientOptions {
-    /** Indexer base URL exposing /registry/* + /identity/* (e.g. https://cairn-substrate.com/indexer). */
-    baseUrl: string;
-    fetch?: FetchLike;
-}
-declare class RegistryClient {
-    private readonly http;
-    /** Accepts the SDK's hardened Http directly (the Cairn facade path) or the legacy
-     *  { baseUrl, fetch } options (kept for direct constructors; they now get the same
-     *  hardened transport, built internally). */
-    constructor(src: Http | RegistryClientOptions);
-    /** Discover ranked content/pin gateways (GET /registry/gateways). */
-    gateways(): Promise<RankedGateway[]>;
-    /** Discover ranked libp2p peers (GET /registry/peers). */
-    peers(): Promise<RankedPeer[]>;
-    /**
-     * Resolve a handle → identity (GET /identity/:handle). Returns null if unresolved.
-     *
-     * ⚠ TRUST (CAIRN-SDK-RESOLVE-VERIFIED-FOOTGUN): the returned `verified` flag is the INDEXER's assertion,
-     * NOT a client-side proof. A hostile/compromised indexer (or a MITM of the read proxy) can return
-     * `verified:true` for a wrong address. Do NOT use this directly as a payee/login target without either (a)
-     * recomputing from raw records via `fromRecords.name(...)`, or (b) cross-checking a second independent
-     * source (the wallet's namespv union cure). Treat `verified` here as a hint, not a guarantee.
-     */
-    resolveName(handle: string): Promise<ResolvedIdentity | null>;
-    /** Reverse-resolve an address → identity (GET /address/:addr/identity).
-     *  ⚠ Same indexer-trust caveat as resolveName — `verified` is the indexer's claim, not a client proof. */
-    reverseName(address: string): Promise<ResolvedIdentity | null>;
-    private getOr404Null;
-    /** The deterministic, client-side resolvers (recompute from raw ChainRecord[]). */
-    get fromRecords(): {
-        peers: (records: _inversealtruism_csd_registry.ChainRecord[], opts: _inversealtruism_csd_registry.ResolveOpts) => RankedPeer[];
-        gateways: (records: _inversealtruism_csd_registry.ChainRecord[], opts: _inversealtruism_csd_registry.ResolveOpts) => RankedGateway[];
-        name: (records: _inversealtruism_csd_registry.ChainRecord[], handle: string, opts: _inversealtruism_csd_registry.ResolveOpts) => ResolvedIdentity | null;
-        reverse: (records: _inversealtruism_csd_registry.ChainRecord[], address: string, opts: _inversealtruism_csd_registry.ResolveOpts) => ResolvedIdentity | null;
-    };
-}
-
-export { RegistryClient, type RegistryClientOptions };