@inversealtruism/cairn-sdk 0.8.0 → 0.8.1

package/dist/{chunk-DTPADO7N.js → chunk-23ATXZKM.js}

@@ -1,7 +1,7 @@
 import {
   CairnError,
   ContentVerificationError
-} from "./chunk-UAPWZZQK.js";
+} from "./chunk-X7J6ECNV.js";
 
 // src/content.ts
 import { payloadHash, canonicalJson, verifyContentBytes } from "@inversealtruism/csd-codec";

package/dist/{chunk-WWO3FXHG.js → chunk-F3KJPQXM.js}

@@ -4,7 +4,7 @@ import {
   UnsupportedMethodError,
   mapProviderError,
   mapSubmitResultError
-} from "./chunk-UAPWZZQK.js";
+} from "./chunk-X7J6ECNV.js";
 
 // src/connect.ts
 var DEFAULT_PROVIDER_TIMEOUT_MS = 10 * 6e4;

package/dist/{chunk-JXBO4LV6.js → chunk-QWGR5J5D.js}

@@ -1,6 +1,6 @@
 import {
   getWallet
-} from "./chunk-WWO3FXHG.js";
+} from "./chunk-F3KJPQXM.js";
 
 // src/controller.ts
 var DISCONNECTED = Object.freeze({ status: "disconnected", account: null, error: null });

package/dist/{chunk-UAPWZZQK.js → chunk-X7J6ECNV.js}

@@ -1,5 +1,5 @@
 // src/errors.ts
-var SDK_VERSION = "0.8.0";
+var SDK_VERSION = "0.8.1";
 var DOCS_BASE = "https://cairn-substrate.com/docs/sdk";
 var CairnError = class extends Error {
   /** Stable machine code for programmatic branching. */

package/dist/connect.cjs

@@ -30,7 +30,7 @@ __export(connect_exports, {
 module.exports = __toCommonJS(connect_exports);
 
 // src/errors.ts
-var SDK_VERSION = "0.8.0";
+var SDK_VERSION = "0.8.1";
 var DOCS_BASE = "https://cairn-substrate.com/docs/sdk";
 var CairnError = class extends Error {
   /** Stable machine code for programmatic branching. */

package/dist/connect.js

@@ -5,8 +5,8 @@ import {
   discoverProviders,
   getWallet,
   isInstalled
-} from "./chunk-WWO3FXHG.js";
-import "./chunk-UAPWZZQK.js";
+} from "./chunk-F3KJPQXM.js";
+import "./chunk-X7J6ECNV.js";
 export {
   WalletConnection,
   connect,

package/dist/content.cjs

@@ -26,7 +26,7 @@ module.exports = __toCommonJS(content_exports);
 var import_csd_codec = require("@inversealtruism/csd-codec");
 
 // src/errors.ts
-var SDK_VERSION = "0.8.0";
+var SDK_VERSION = "0.8.1";
 var DOCS_BASE = "https://cairn-substrate.com/docs/sdk";
 var CairnError = class extends Error {
   /** Stable machine code for programmatic branching. */

package/dist/content.js

@@ -1,7 +1,7 @@
 import {
   ContentClient
-} from "./chunk-DTPADO7N.js";
-import "./chunk-UAPWZZQK.js";
+} from "./chunk-23ATXZKM.js";
+import "./chunk-X7J6ECNV.js";
 export {
   ContentClient
 };

package/dist/controller.cjs

@@ -25,7 +25,7 @@ __export(controller_exports, {
 module.exports = __toCommonJS(controller_exports);
 
 // src/errors.ts
-var SDK_VERSION = "0.8.0";
+var SDK_VERSION = "0.8.1";
 var DOCS_BASE = "https://cairn-substrate.com/docs/sdk";
 var CairnError = class extends Error {
   /** Stable machine code for programmatic branching. */

package/dist/controller.js

@@ -1,8 +1,8 @@
 import {
   CairnController
-} from "./chunk-JXBO4LV6.js";
-import "./chunk-WWO3FXHG.js";
-import "./chunk-UAPWZZQK.js";
+} from "./chunk-QWGR5J5D.js";
+import "./chunk-F3KJPQXM.js";
+import "./chunk-X7J6ECNV.js";
 export {
   CairnController
 };

package/dist/index.cjs

@@ -58,7 +58,7 @@ __export(index_exports, {
 module.exports = __toCommonJS(index_exports);
 
 // src/errors.ts
-var SDK_VERSION = "0.8.0";
+var SDK_VERSION = "0.8.1";
 var DOCS_BASE = "https://cairn-substrate.com/docs/sdk";
 var CairnError = class extends Error {
   /** Stable machine code for programmatic branching. */
@@ -1172,6 +1172,7 @@ async function connect(opts = {}) {
 // src/fillverify.ts
 var import_csd_client3 = require("@inversealtruism/csd-client");
 var import_csd_codec4 = require("@inversealtruism/csd-codec");
+var import_csd_crypto3 = require("@inversealtruism/csd-crypto");
 var import_cairnx_core2 = require("@inversealtruism/cairnx-core");
 var ADDR = /^0x[0-9a-f]{40}$/;
 var BELOW_BASE = /^tx below the synced base \((\d+)\)/;
@@ -1212,9 +1213,7 @@ async function provenAuthor(client, provenTx) {
     return null;
   }
   if (String((0, import_csd_codec4.txid)(src)).toLowerCase() !== String(in0.prevTxid).toLowerCase()) return null;
-  const out = src.outputs?.[Number(in0.vout)];
-  const spk = out?.scriptPubkey ? String(out.scriptPubkey).toLowerCase() : null;
-  return spk && ADDR.test(spk) ? spk : null;
+  return (0, import_csd_crypto3.authorOf)(provenTx, src.outputs?.[Number(in0.vout)]?.scriptPubkey);
 }
 async function preverifyOffer(opts) {
   const id = String(opts.offerId).toLowerCase();
@@ -1242,8 +1241,6 @@ async function preverifyOffer(opts) {
   if (String(provenId).toLowerCase() !== id) return { ok: false, trust: "unverified", reason: "the merkle-proven tx doesn't match the offer id" };
   const app = incl.tx.app;
   if (!app || app.type !== "Propose") return { ok: false, trust: "unverified", reason: "the offer tx is not a Propose" };
-  if (String(app.domain) !== import_cairnx_core2.DOMAIN)
-    return { ok: false, trust: "unverified", reason: `the offer tx is not a ${import_cairnx_core2.DOMAIN} Propose (wrong settlement domain)` };
   let rec;
   try {
     rec = (0, import_cairnx_core2.parseRecord)(app.uri, incl.appPayloadHash);
@@ -1256,14 +1253,12 @@ async function preverifyOffer(opts) {
   const seller = await provenAuthor(opts.client, provenTx);
   if (!seller) return { ok: false, trust: "verified", transient: true, blockHeight, reason: "couldn't prove the offer's on-chain author yet; the chain view may be catching up, try again" };
   const offerRec = rec;
+  const ee = app.expires_epoch;
+  const refusal = (0, import_cairnx_core2.provenOfferRefusal)(offerRec, { domain: String(app.domain), height: blockHeight, expiresEpoch: typeof ee === "bigint" ? ee : Number(ee), seller });
+  if (refusal) return { ok: false, trust: "verified", blockHeight, reason: `CairnX rejects this offer (${refusal}) - a fill would move CSD for nothing` };
   const w = rec.want ?? {};
   const payto = w.payto && ADDR.test(String(w.payto).toLowerCase()) ? String(w.payto).toLowerCase() : seller;
   const terms = (0, import_cairnx_core2.provenOfferTerms)(offerRec, blockHeight);
-  if (payto === import_cairnx_core2.TREASURY_ADDR)
-    return { ok: false, trust: "verified", blockHeight, reason: "the offer's payment recipient is the protocol treasury - the chain rejects it, and a fill would move CSD for nothing" };
-  const provenExpiresEpoch = Number(app.expires_epoch);
-  if (!Number.isSafeInteger(provenExpiresEpoch) || (0, import_cairnx_core2.epochOf)(blockHeight) > provenExpiresEpoch)
-    return { ok: false, trust: "verified", blockHeight, reason: "the offer was already expired when it was mined - the chain rejects it, and a fill would move CSD for nothing" };
   let outputPlan;
   let sumsMismatch;
   let planReason;
@@ -1320,10 +1315,8 @@ async function preverifyOffer(opts) {
       return { ok: false, trust: "verified", reason: "the served offer is missing seller (the rebate recipient) - pass the resolver's full offer object, or omit servedOffer", ...base };
     if (String(so.seller).toLowerCase() !== seller)
       return { ok: false, trust: "verified", reason: "the served seller doesn't match the offer's on-chain author (a lying resolver may be redirecting your payment)", ...base };
-    if ((0, import_cairnx_core2.isTokenWant)(offerRec.want) && (String(so?.want?.ticker) !== String(offerRec.want.ticker) || String(so?.want?.amount) !== String(offerRec.want.amount)))
-      return { ok: false, trust: "verified", reason: "the served want ticker/amount don't match the offer's on-chain record (a lying resolver could bait-and-switch the token price)", ...base };
     if ((0, import_cairnx_core2.bindOfferTerms)(opts.servedOffer, terms, { give: true, wantType: true }))
-      return { ok: false, trust: "verified", reason: "the served terms don't match the offer's on-chain record (fee, rebate, partial sizing, the give, or the want type - a lying resolver could mis-size or re-route the fill, redirecting or burning your payment)", ...base };
+      return { ok: false, trust: "verified", reason: "the served terms don't match the offer's on-chain record (fee, rebate, partial sizing, the give, or the want's type or token price - a lying resolver could mis-size, re-price or re-route the fill, redirecting or burning your payment)", ...base };
   }
   if (sumsMismatch) return { ok: false, trust: "verified", reason: sumsMismatch, ...base };
   return { ok: true, trust: "verified", ...base };

package/dist/index.d.cts

@@ -198,7 +198,7 @@ declare function preverifyOffer(opts: {
 
 /** Stable machine-readable error codes (branch on these, not the message text). */
 type CairnErrorCode = "NOT_INSTALLED" | "USER_REJECTED" | "WALLET_LOCKED" | "UNSUPPORTED_METHOD" | "HTTP_ERROR" | "CONTENT_VERIFICATION" | "CONTENT_NOT_JSON" | "ACCOUNT_CHANGED" | "FIRST_PARTY_ONLY" | "RATE_LIMITED" | "APPROVAL_CLOSED" | "FORBIDDEN" | "INTERNAL" | "GHOST_INPUTS_SKIPPED" | "VERIFY_UNAVAILABLE" | "VERIFY_TAMPER" | "INSUFFICIENT" | "TOO_MANY_INPUTS" | "FEE_TOO_LOW" | "FEE_CAP" | "BAD_FEE" | "ZERO_ADDR_REFUSED" | "BAD_OUTPUTS" | "NO_OUTPUTS" | "BAD_REQUEST" | "OFFER_UNKNOWN" | "FILL_UNSAFE" | "FILL_WRONG_TARGET" | "SOURCE_DIVERGENCE" | "SUBMIT_REJECTED" | "SUBMIT_MAYBE_INFLIGHT" | "SUBMIT_DUPLICATE" | "NOTHING_TO_CONSOLIDATE" | "OFFER_SOURCE_CONFLICT" | "FILL_LEGACY_SUNSET" | "VERIFY_HORIZON" | "VERIFY_UNREPRESENTABLE" | "WALLET_UNAVAILABLE" | "REVIEW_REQUIRED" | "UNKNOWN";
-declare const SDK_VERSION = "0.8.0";
+declare const SDK_VERSION = "0.8.1";
 interface CairnErrorOptions {
     code?: CairnErrorCode;
     docsPath?: string;
@@ -218,7 +218,7 @@ declare class CairnError extends Error {
     /** Relative docs path (under the SDK docs base), if any. */
     readonly docsPath?: string;
     /** The cairn-sdk version that produced this error. */
-    readonly version = "0.8.0";
+    readonly version = "0.8.1";
     /**
      * Whether a dApp may safely AUTO-retry this failure. `false` for fund-safety refusals and user-intent
      * declines (the default); `true` only for provably transient infra faults where nothing was signed.

package/dist/index.d.ts

@@ -198,7 +198,7 @@ declare function preverifyOffer(opts: {
 
 /** Stable machine-readable error codes (branch on these, not the message text). */
 type CairnErrorCode = "NOT_INSTALLED" | "USER_REJECTED" | "WALLET_LOCKED" | "UNSUPPORTED_METHOD" | "HTTP_ERROR" | "CONTENT_VERIFICATION" | "CONTENT_NOT_JSON" | "ACCOUNT_CHANGED" | "FIRST_PARTY_ONLY" | "RATE_LIMITED" | "APPROVAL_CLOSED" | "FORBIDDEN" | "INTERNAL" | "GHOST_INPUTS_SKIPPED" | "VERIFY_UNAVAILABLE" | "VERIFY_TAMPER" | "INSUFFICIENT" | "TOO_MANY_INPUTS" | "FEE_TOO_LOW" | "FEE_CAP" | "BAD_FEE" | "ZERO_ADDR_REFUSED" | "BAD_OUTPUTS" | "NO_OUTPUTS" | "BAD_REQUEST" | "OFFER_UNKNOWN" | "FILL_UNSAFE" | "FILL_WRONG_TARGET" | "SOURCE_DIVERGENCE" | "SUBMIT_REJECTED" | "SUBMIT_MAYBE_INFLIGHT" | "SUBMIT_DUPLICATE" | "NOTHING_TO_CONSOLIDATE" | "OFFER_SOURCE_CONFLICT" | "FILL_LEGACY_SUNSET" | "VERIFY_HORIZON" | "VERIFY_UNREPRESENTABLE" | "WALLET_UNAVAILABLE" | "REVIEW_REQUIRED" | "UNKNOWN";
-declare const SDK_VERSION = "0.8.0";
+declare const SDK_VERSION = "0.8.1";
 interface CairnErrorOptions {
     code?: CairnErrorCode;
     docsPath?: string;
@@ -218,7 +218,7 @@ declare class CairnError extends Error {
     /** Relative docs path (under the SDK docs base), if any. */
     readonly docsPath?: string;
     /** The cairn-sdk version that produced this error. */
-    readonly version = "0.8.0";
+    readonly version = "0.8.1";
     /**
      * Whether a dApp may safely AUTO-retry this failure. `false` for fund-safety refusals and user-intent
      * declines (the default); `true` only for provably transient infra faults where nothing was signed.

package/dist/index.js

@@ -4,13 +4,13 @@ import {
 } from "./chunk-C452UODV.js";
 import {
   ContentClient
-} from "./chunk-DTPADO7N.js";
+} from "./chunk-23ATXZKM.js";
 import {
   IndexerClient
 } from "./chunk-CI7YODPP.js";
 import {
   CairnController
-} from "./chunk-JXBO4LV6.js";
+} from "./chunk-QWGR5J5D.js";
 import {
   WalletConnection,
   connect,
@@ -18,7 +18,7 @@ import {
   discoverProviders,
   getWallet,
   isInstalled
-} from "./chunk-WWO3FXHG.js";
+} from "./chunk-F3KJPQXM.js";
 import {
   CairnError,
   ContentVerificationError,
@@ -32,7 +32,7 @@ import {
   errorCode,
   mapProviderError,
   mapSubmitResultError
-} from "./chunk-UAPWZZQK.js";
+} from "./chunk-X7J6ECNV.js";
 
 // src/http.ts
 var DEFAULT_MAX_BYTES = 16 * 1024 * 1024;
@@ -358,20 +358,19 @@ var NamesClient = class {
 // src/fillverify.ts
 import { rpcTxToTx } from "@inversealtruism/csd-client";
 import { txid, payloadHash } from "@inversealtruism/csd-codec";
+import { authorOf } from "@inversealtruism/csd-crypto";
 import {
-  DOMAIN,
   parseRecord,
   feeBpsAt,
   bindOfferTerms,
   provenOfferTerms,
+  provenOfferRefusal,
   fillOutputPlan,
   isTokenWant,
   fillEndorsement,
   fillIsSafe,
   requiredFillOutputs,
-  previewFill,
-  TREASURY_ADDR,
-  epochOf
+  previewFill
 } from "@inversealtruism/cairnx-core";
 var ADDR = /^0x[0-9a-f]{40}$/;
 var BELOW_BASE = /^tx below the synced base \((\d+)\)/;
@@ -412,9 +411,7 @@ async function provenAuthor(client, provenTx) {
     return null;
   }
   if (String(txid(src)).toLowerCase() !== String(in0.prevTxid).toLowerCase()) return null;
-  const out = src.outputs?.[Number(in0.vout)];
-  const spk = out?.scriptPubkey ? String(out.scriptPubkey).toLowerCase() : null;
-  return spk && ADDR.test(spk) ? spk : null;
+  return authorOf(provenTx, src.outputs?.[Number(in0.vout)]?.scriptPubkey);
 }
 async function preverifyOffer(opts) {
   const id = String(opts.offerId).toLowerCase();
@@ -442,8 +439,6 @@ async function preverifyOffer(opts) {
   if (String(provenId).toLowerCase() !== id) return { ok: false, trust: "unverified", reason: "the merkle-proven tx doesn't match the offer id" };
   const app = incl.tx.app;
   if (!app || app.type !== "Propose") return { ok: false, trust: "unverified", reason: "the offer tx is not a Propose" };
-  if (String(app.domain) !== DOMAIN)
-    return { ok: false, trust: "unverified", reason: `the offer tx is not a ${DOMAIN} Propose (wrong settlement domain)` };
   let rec;
   try {
     rec = parseRecord(app.uri, incl.appPayloadHash);
@@ -456,14 +451,12 @@ async function preverifyOffer(opts) {
   const seller = await provenAuthor(opts.client, provenTx);
   if (!seller) return { ok: false, trust: "verified", transient: true, blockHeight, reason: "couldn't prove the offer's on-chain author yet; the chain view may be catching up, try again" };
   const offerRec = rec;
+  const ee = app.expires_epoch;
+  const refusal = provenOfferRefusal(offerRec, { domain: String(app.domain), height: blockHeight, expiresEpoch: typeof ee === "bigint" ? ee : Number(ee), seller });
+  if (refusal) return { ok: false, trust: "verified", blockHeight, reason: `CairnX rejects this offer (${refusal}) - a fill would move CSD for nothing` };
   const w = rec.want ?? {};
   const payto = w.payto && ADDR.test(String(w.payto).toLowerCase()) ? String(w.payto).toLowerCase() : seller;
   const terms = provenOfferTerms(offerRec, blockHeight);
-  if (payto === TREASURY_ADDR)
-    return { ok: false, trust: "verified", blockHeight, reason: "the offer's payment recipient is the protocol treasury - the chain rejects it, and a fill would move CSD for nothing" };
-  const provenExpiresEpoch = Number(app.expires_epoch);
-  if (!Number.isSafeInteger(provenExpiresEpoch) || epochOf(blockHeight) > provenExpiresEpoch)
-    return { ok: false, trust: "verified", blockHeight, reason: "the offer was already expired when it was mined - the chain rejects it, and a fill would move CSD for nothing" };
   let outputPlan;
   let sumsMismatch;
   let planReason;
@@ -520,10 +513,8 @@ async function preverifyOffer(opts) {
       return { ok: false, trust: "verified", reason: "the served offer is missing seller (the rebate recipient) - pass the resolver's full offer object, or omit servedOffer", ...base };
     if (String(so.seller).toLowerCase() !== seller)
       return { ok: false, trust: "verified", reason: "the served seller doesn't match the offer's on-chain author (a lying resolver may be redirecting your payment)", ...base };
-    if (isTokenWant(offerRec.want) && (String(so?.want?.ticker) !== String(offerRec.want.ticker) || String(so?.want?.amount) !== String(offerRec.want.amount)))
-      return { ok: false, trust: "verified", reason: "the served want ticker/amount don't match the offer's on-chain record (a lying resolver could bait-and-switch the token price)", ...base };
     if (bindOfferTerms(opts.servedOffer, terms, { give: true, wantType: true }))
-      return { ok: false, trust: "verified", reason: "the served terms don't match the offer's on-chain record (fee, rebate, partial sizing, the give, or the want type - a lying resolver could mis-size or re-route the fill, redirecting or burning your payment)", ...base };
+      return { ok: false, trust: "verified", reason: "the served terms don't match the offer's on-chain record (fee, rebate, partial sizing, the give, or the want's type or token price - a lying resolver could mis-size, re-price or re-route the fill, redirecting or burning your payment)", ...base };
   }
   if (sumsMismatch) return { ok: false, trust: "verified", reason: sumsMismatch, ...base };
   return { ok: true, trust: "verified", ...base };

package/dist/react.cjs

@@ -26,7 +26,7 @@ __export(react_exports, {
 module.exports = __toCommonJS(react_exports);
 
 // src/errors.ts
-var SDK_VERSION = "0.8.0";
+var SDK_VERSION = "0.8.1";
 var DOCS_BASE = "https://cairn-substrate.com/docs/sdk";
 var CairnError = class extends Error {
   /** Stable machine code for programmatic branching. */

package/dist/react.js

@@ -1,8 +1,8 @@
 import {
   CairnController
-} from "./chunk-JXBO4LV6.js";
-import "./chunk-WWO3FXHG.js";
-import "./chunk-UAPWZZQK.js";
+} from "./chunk-QWGR5J5D.js";
+import "./chunk-F3KJPQXM.js";
+import "./chunk-X7J6ECNV.js";
 
 // src/react.ts
 function createCairnHooks(React, controllerOrOpts) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inversealtruism/cairn-sdk",
-  "version": "0.8.0",
+  "version": "0.8.1",
   "description": "The Compute Substrate dApp kit: one cohesive toolkit to connect the Cairn Wallet, read the chain, the indexer and .csd names, verify self-certifying content, and resolve .csd names. Composes the published csd-* primitives.",
   "type": "module",
   "main": "./dist/index.cjs",
@@ -49,11 +49,11 @@
     "README.md"
   ],
   "dependencies": {
-    "@inversealtruism/cairnx-core": "0.2.2",
-    "@inversealtruism/csd-client": "0.1.19",
+    "@inversealtruism/cairnx-core": "0.2.3",
+    "@inversealtruism/csd-client": "0.1.20",
     "@inversealtruism/csd-codec": "0.1.18",
     "@inversealtruism/csd-crypto": "0.1.20",
-    "@inversealtruism/csd-light": "0.1.25",
+    "@inversealtruism/csd-light": "0.1.26",
     "@inversealtruism/csd-tx": "0.1.23"
   },
   "devDependencies": {