@inversealtruism/cairn-sdk 0.8.0 → 0.8.2

package/dist/connect.cjs

@@ -30,7 +30,7 @@ __export(connect_exports, {
 module.exports = __toCommonJS(connect_exports);
 
 // src/errors.ts
-var SDK_VERSION = "0.8.0";
+var SDK_VERSION = "0.8.2";
 var DOCS_BASE = "https://cairn-substrate.com/docs/sdk";
 var CairnError = class extends Error {
   /** Stable machine code for programmatic branching. */
@@ -95,17 +95,22 @@ var UnsupportedMethodError = class extends CairnError {
   }
 };
 var SubmitInFlightError = class extends CairnError {
-  /** The locally-computed consensus txid to reconcile against the chain (may be undefined if the wallet omitted it). */
+  /** The locally-computed consensus txid to reconcile against the chain (undefined when it is not known). */
   txid;
-  /** Always true: the tx MAY be in the mempool. Reconcile via `txid`; never blind-retry. */
+  /** The signed transaction, set only when `Chain.send` threw this (a wallet write keeps it in the wallet).
+   *  `chain.submit(nodeJson)` resends it unchanged: the same coins under the same txid, so it cannot pay twice,
+   *  where a new send may select other coins. */
+  nodeJson;
+  /** Always true: the tx MAY be in the mempool. Reconcile via `txid` or the balance; never blind-retry. */
   maybeSent = true;
-  constructor(message, code, txid) {
-    super(message, { code, docsPath: "/errors#submit-inflight", retryable: false });
+  constructor(message, code, txid, cause, nodeJson) {
+    super(message, { code, docsPath: "/errors#submit-inflight", retryable: false, cause });
     this.txid = txid;
+    this.nodeJson = nodeJson;
   }
 };
 var NATIVE_CODES = /* @__PURE__ */ new Set(["FIRST_PARTY_ONLY", "RATE_LIMITED", "FORBIDDEN", "INTERNAL"]);
-var NESTED_TRANSIENT = /* @__PURE__ */ new Set(["VERIFY_UNAVAILABLE", "OFFER_UNKNOWN", "WALLET_UNAVAILABLE", "REVIEW_REQUIRED"]);
+var NESTED_TRANSIENT = /* @__PURE__ */ new Set(["VERIFY_UNAVAILABLE", "OFFER_UNKNOWN", "WALLET_UNAVAILABLE", "REVIEW_REQUIRED", "SEAL_NOT_MINED"]);
 var NESTED_TERMINAL = /* @__PURE__ */ new Set([
   "FILL_UNSAFE",
   "FILL_WRONG_TARGET",
@@ -127,7 +132,9 @@ var NESTED_TERMINAL = /* @__PURE__ */ new Set([
   "OFFER_SOURCE_CONFLICT",
   "FILL_LEGACY_SUNSET",
   "VERIFY_HORIZON",
-  "VERIFY_UNREPRESENTABLE"
+  "VERIFY_UNREPRESENTABLE",
+  "RESERVATION_DENIED",
+  "RPC_BLOCK_MISMATCH"
 ]);
 function mapProviderError(error, code) {
   if (code === "USER_REJECTED" || code === "APPROVAL_CLOSED") return new UserRejectedError(error);
@@ -145,11 +152,15 @@ function mapProviderError(error, code) {
 function mapSubmitResultError(result) {
   const code = result?.code;
   const msg = typeof result?.error === "string" && result.error || code || "The wallet refused the transaction.";
-  if (code === "SUBMIT_MAYBE_INFLIGHT" || code === "SUBMIT_DUPLICATE") {
+  if (code === "SUBMIT_MAYBE_INFLIGHT" || code === "SUBMIT_DUPLICATE" || code === "WALLET_UNAVAILABLE") {
     return new SubmitInFlightError(msg, code, typeof result?.txid === "string" ? result.txid : void 0);
   }
   return mapProviderError(msg, code);
 }
+function mapWriteProviderError(error, code) {
+  if (code === "WALLET_UNAVAILABLE") return new SubmitInFlightError(error || code, code);
+  return mapProviderError(error, code);
+}
 
 // src/connect.ts
 var DEFAULT_PROVIDER_TIMEOUT_MS = 10 * 6e4;
@@ -223,7 +234,8 @@ function unwrap(reply) {
   throw mapProviderError(reply?.error ?? "Unknown wallet error", reply?.code);
 }
 function unwrapWrite(reply) {
-  const result = unwrap(reply);
+  if (!reply || !reply.ok) throw mapWriteProviderError(reply?.error ?? "Unknown wallet error", reply?.code);
+  const result = reply.result;
   if (result && typeof result === "object" && result.ok === false) {
     throw mapSubmitResultError(result);
   }
@@ -239,10 +251,12 @@ var WalletConnection = class {
     this.provider = provider;
     this._timeoutMs = opts.timeoutMs ?? DEFAULT_PROVIDER_TIMEOUT_MS;
   }
-  // B7c: race a provider call against the per-call timeout. On timeout, throw a fail-closed CairnError
-  // (retryable:false: a write may already have reached the wallet, so never invite a blind auto-retry). The
-  // genuine wallet resolves quickly once the user acts; this only fires on a truly hung/absent response.
-  call(op, label) {
+  // B7c: race a provider call against the per-call timeout. On timeout, throw a fail-closed error
+  // (retryable:false). A write's request stays open in the wallet and may still be approved and sent, so its
+  // timeout is a maybe-sent SubmitInFlightError (WALLET_TIMEOUT, no txid); while that request stays open, a resend
+  // opens a second one, and approving both sends twice. The genuine wallet resolves quickly
+  // once the user acts; this only fires on a truly hung/absent response.
+  call(op, label, write = false) {
     const ms = this._timeoutMs;
     const invoke = () => new Promise((resolve) => {
       resolve(op());
@@ -250,7 +264,7 @@ var WalletConnection = class {
     if (!Number.isFinite(ms) || ms <= 0) return invoke();
     let timer;
     const timeout = new Promise((_, reject) => {
-      timer = setTimeout(() => reject(new CairnError(`the wallet did not respond to ${label} within ${ms}ms`, { retryable: false })), ms);
+      timer = setTimeout(() => reject(write ? new SubmitInFlightError(`the wallet did not respond to ${label} within ${ms}ms; the request may still be open in the wallet and be sent if approved, so reject it in the wallet and check the chain before sending it again`, "WALLET_TIMEOUT") : new CairnError(`the wallet did not respond to ${label} within ${ms}ms`, { retryable: false })), ms);
     });
     return Promise.race([invoke(), timeout]).finally(() => clearTimeout(timer));
   }
@@ -326,7 +340,7 @@ var WalletConnection = class {
       return Promise.reject(new UnsupportedMethodError("this wallet predates fillOffer() \u2014 ask the user to update the Cairn Wallet"));
     }
     this.adviseFillSpvCapability();
-    return this.call(() => this.provider.fillOffer(params), "fillOffer").then(unwrapWrite);
+    return this.call(() => this.provider.fillOffer(params), "fillOffer", true).then(unwrapWrite);
   }
   // P75-5 MF-10: ONE capability advisory per connection. The wallet's on-device fill-SPV (0.2.60+) is the
   // payment-grade fill boundary; when the provider SELF-REPORTS an older version, warn the integrator once
@@ -374,26 +388,26 @@ var WalletConnection = class {
   }
   /** Send CSD (always prompts with clear-signing; wallet picks inputs + returns change to itself). */
   send(params) {
-    return this.call(() => this.provider.send(params), "send").then(unwrapWrite);
+    return this.call(() => this.provider.send(params), "send", true).then(unwrapWrite);
   }
   /** Low-level Propose (always prompts). The caller computes the payload hash, uri and expiry epoch. */
   propose(params) {
-    return this.call(() => this.provider.propose(params), "propose").then(unwrapWrite);
+    return this.call(() => this.provider.propose(params), "propose", true).then(unwrapWrite);
   }
   /** Attest/support a proposal (always prompts). */
   attest(params) {
-    return this.call(() => this.provider.attest(params), "attest").then(unwrapWrite);
+    return this.call(() => this.provider.attest(params), "attest", true).then(unwrapWrite);
   }
   /** Seal a commit-reveal claim (always prompts; salt stays inside the wallet). */
   sealClaim(params) {
-    return this.call(() => this.provider.sealClaim(params), "sealClaim").then(unwrapWrite);
+    return this.call(() => this.provider.sealClaim(params), "sealClaim", true).then(unwrapWrite);
   }
   /** Reveal a previously sealed claim by its sealing txid (always prompts). */
   revealClaim(txid) {
     if (typeof txid !== "string" || !txid) {
       return Promise.reject(new UnsupportedMethodError("revealClaim requires the sealing txid"));
     }
-    return this.call(() => this.provider.revealClaim(txid), "revealClaim").then(unwrapWrite);
+    return this.call(() => this.provider.revealClaim(txid), "revealClaim", true).then(unwrapWrite);
   }
 };
 async function getWallet(opts = {}) {

package/dist/connect.js

@@ -5,8 +5,8 @@ import {
   discoverProviders,
   getWallet,
   isInstalled
-} from "./chunk-WWO3FXHG.js";
-import "./chunk-UAPWZZQK.js";
+} from "./chunk-EVEBQSDK.js";
+import "./chunk-37OHCH7R.js";
 export {
   WalletConnection,
   connect,

package/dist/content.cjs

@@ -26,7 +26,7 @@ module.exports = __toCommonJS(content_exports);
 var import_csd_codec = require("@inversealtruism/csd-codec");
 
 // src/errors.ts
-var SDK_VERSION = "0.8.0";
+var SDK_VERSION = "0.8.2";
 var DOCS_BASE = "https://cairn-substrate.com/docs/sdk";
 var CairnError = class extends Error {
   /** Stable machine code for programmatic branching. */

package/dist/content.js

@@ -1,7 +1,7 @@
 import {
   ContentClient
-} from "./chunk-DTPADO7N.js";
-import "./chunk-UAPWZZQK.js";
+} from "./chunk-2RR4ZJPQ.js";
+import "./chunk-37OHCH7R.js";
 export {
   ContentClient
 };

package/dist/controller.cjs

@@ -25,7 +25,7 @@ __export(controller_exports, {
 module.exports = __toCommonJS(controller_exports);
 
 // src/errors.ts
-var SDK_VERSION = "0.8.0";
+var SDK_VERSION = "0.8.2";
 var DOCS_BASE = "https://cairn-substrate.com/docs/sdk";
 var CairnError = class extends Error {
   /** Stable machine code for programmatic branching. */
@@ -90,17 +90,22 @@ var UnsupportedMethodError = class extends CairnError {
   }
 };
 var SubmitInFlightError = class extends CairnError {
-  /** The locally-computed consensus txid to reconcile against the chain (may be undefined if the wallet omitted it). */
+  /** The locally-computed consensus txid to reconcile against the chain (undefined when it is not known). */
   txid;
-  /** Always true: the tx MAY be in the mempool. Reconcile via `txid`; never blind-retry. */
+  /** The signed transaction, set only when `Chain.send` threw this (a wallet write keeps it in the wallet).
+   *  `chain.submit(nodeJson)` resends it unchanged: the same coins under the same txid, so it cannot pay twice,
+   *  where a new send may select other coins. */
+  nodeJson;
+  /** Always true: the tx MAY be in the mempool. Reconcile via `txid` or the balance; never blind-retry. */
   maybeSent = true;
-  constructor(message, code, txid) {
-    super(message, { code, docsPath: "/errors#submit-inflight", retryable: false });
+  constructor(message, code, txid, cause, nodeJson) {
+    super(message, { code, docsPath: "/errors#submit-inflight", retryable: false, cause });
     this.txid = txid;
+    this.nodeJson = nodeJson;
   }
 };
 var NATIVE_CODES = /* @__PURE__ */ new Set(["FIRST_PARTY_ONLY", "RATE_LIMITED", "FORBIDDEN", "INTERNAL"]);
-var NESTED_TRANSIENT = /* @__PURE__ */ new Set(["VERIFY_UNAVAILABLE", "OFFER_UNKNOWN", "WALLET_UNAVAILABLE", "REVIEW_REQUIRED"]);
+var NESTED_TRANSIENT = /* @__PURE__ */ new Set(["VERIFY_UNAVAILABLE", "OFFER_UNKNOWN", "WALLET_UNAVAILABLE", "REVIEW_REQUIRED", "SEAL_NOT_MINED"]);
 var NESTED_TERMINAL = /* @__PURE__ */ new Set([
   "FILL_UNSAFE",
   "FILL_WRONG_TARGET",
@@ -122,7 +127,9 @@ var NESTED_TERMINAL = /* @__PURE__ */ new Set([
   "OFFER_SOURCE_CONFLICT",
   "FILL_LEGACY_SUNSET",
   "VERIFY_HORIZON",
-  "VERIFY_UNREPRESENTABLE"
+  "VERIFY_UNREPRESENTABLE",
+  "RESERVATION_DENIED",
+  "RPC_BLOCK_MISMATCH"
 ]);
 function mapProviderError(error, code) {
   if (code === "USER_REJECTED" || code === "APPROVAL_CLOSED") return new UserRejectedError(error);
@@ -140,11 +147,15 @@ function mapProviderError(error, code) {
 function mapSubmitResultError(result) {
   const code = result?.code;
   const msg = typeof result?.error === "string" && result.error || code || "The wallet refused the transaction.";
-  if (code === "SUBMIT_MAYBE_INFLIGHT" || code === "SUBMIT_DUPLICATE") {
+  if (code === "SUBMIT_MAYBE_INFLIGHT" || code === "SUBMIT_DUPLICATE" || code === "WALLET_UNAVAILABLE") {
     return new SubmitInFlightError(msg, code, typeof result?.txid === "string" ? result.txid : void 0);
   }
   return mapProviderError(msg, code);
 }
+function mapWriteProviderError(error, code) {
+  if (code === "WALLET_UNAVAILABLE") return new SubmitInFlightError(error || code, code);
+  return mapProviderError(error, code);
+}
 
 // src/connect.ts
 var DEFAULT_PROVIDER_TIMEOUT_MS = 10 * 6e4;
@@ -195,7 +206,8 @@ function unwrap(reply) {
   throw mapProviderError(reply?.error ?? "Unknown wallet error", reply?.code);
 }
 function unwrapWrite(reply) {
-  const result = unwrap(reply);
+  if (!reply || !reply.ok) throw mapWriteProviderError(reply?.error ?? "Unknown wallet error", reply?.code);
+  const result = reply.result;
   if (result && typeof result === "object" && result.ok === false) {
     throw mapSubmitResultError(result);
   }
@@ -211,10 +223,12 @@ var WalletConnection = class {
     this.provider = provider;
     this._timeoutMs = opts.timeoutMs ?? DEFAULT_PROVIDER_TIMEOUT_MS;
   }
-  // B7c: race a provider call against the per-call timeout. On timeout, throw a fail-closed CairnError
-  // (retryable:false: a write may already have reached the wallet, so never invite a blind auto-retry). The
-  // genuine wallet resolves quickly once the user acts; this only fires on a truly hung/absent response.
-  call(op, label) {
+  // B7c: race a provider call against the per-call timeout. On timeout, throw a fail-closed error
+  // (retryable:false). A write's request stays open in the wallet and may still be approved and sent, so its
+  // timeout is a maybe-sent SubmitInFlightError (WALLET_TIMEOUT, no txid); while that request stays open, a resend
+  // opens a second one, and approving both sends twice. The genuine wallet resolves quickly
+  // once the user acts; this only fires on a truly hung/absent response.
+  call(op, label, write = false) {
     const ms = this._timeoutMs;
     const invoke = () => new Promise((resolve) => {
       resolve(op());
@@ -222,7 +236,7 @@ var WalletConnection = class {
     if (!Number.isFinite(ms) || ms <= 0) return invoke();
     let timer;
     const timeout = new Promise((_, reject) => {
-      timer = setTimeout(() => reject(new CairnError(`the wallet did not respond to ${label} within ${ms}ms`, { retryable: false })), ms);
+      timer = setTimeout(() => reject(write ? new SubmitInFlightError(`the wallet did not respond to ${label} within ${ms}ms; the request may still be open in the wallet and be sent if approved, so reject it in the wallet and check the chain before sending it again`, "WALLET_TIMEOUT") : new CairnError(`the wallet did not respond to ${label} within ${ms}ms`, { retryable: false })), ms);
     });
     return Promise.race([invoke(), timeout]).finally(() => clearTimeout(timer));
   }
@@ -298,7 +312,7 @@ var WalletConnection = class {
       return Promise.reject(new UnsupportedMethodError("this wallet predates fillOffer() \u2014 ask the user to update the Cairn Wallet"));
     }
     this.adviseFillSpvCapability();
-    return this.call(() => this.provider.fillOffer(params), "fillOffer").then(unwrapWrite);
+    return this.call(() => this.provider.fillOffer(params), "fillOffer", true).then(unwrapWrite);
   }
   // P75-5 MF-10: ONE capability advisory per connection. The wallet's on-device fill-SPV (0.2.60+) is the
   // payment-grade fill boundary; when the provider SELF-REPORTS an older version, warn the integrator once
@@ -346,26 +360,26 @@ var WalletConnection = class {
   }
   /** Send CSD (always prompts with clear-signing; wallet picks inputs + returns change to itself). */
   send(params) {
-    return this.call(() => this.provider.send(params), "send").then(unwrapWrite);
+    return this.call(() => this.provider.send(params), "send", true).then(unwrapWrite);
   }
   /** Low-level Propose (always prompts). The caller computes the payload hash, uri and expiry epoch. */
   propose(params) {
-    return this.call(() => this.provider.propose(params), "propose").then(unwrapWrite);
+    return this.call(() => this.provider.propose(params), "propose", true).then(unwrapWrite);
   }
   /** Attest/support a proposal (always prompts). */
   attest(params) {
-    return this.call(() => this.provider.attest(params), "attest").then(unwrapWrite);
+    return this.call(() => this.provider.attest(params), "attest", true).then(unwrapWrite);
   }
   /** Seal a commit-reveal claim (always prompts; salt stays inside the wallet). */
   sealClaim(params) {
-    return this.call(() => this.provider.sealClaim(params), "sealClaim").then(unwrapWrite);
+    return this.call(() => this.provider.sealClaim(params), "sealClaim", true).then(unwrapWrite);
   }
   /** Reveal a previously sealed claim by its sealing txid (always prompts). */
   revealClaim(txid) {
     if (typeof txid !== "string" || !txid) {
       return Promise.reject(new UnsupportedMethodError("revealClaim requires the sealing txid"));
     }
-    return this.call(() => this.provider.revealClaim(txid), "revealClaim").then(unwrapWrite);
+    return this.call(() => this.provider.revealClaim(txid), "revealClaim", true).then(unwrapWrite);
   }
 };
 async function getWallet(opts = {}) {

package/dist/controller.js

@@ -1,8 +1,8 @@
 import {
   CairnController
-} from "./chunk-JXBO4LV6.js";
-import "./chunk-WWO3FXHG.js";
-import "./chunk-UAPWZZQK.js";
+} from "./chunk-AHPXOYCC.js";
+import "./chunk-EVEBQSDK.js";
+import "./chunk-37OHCH7R.js";
 export {
   CairnController
 };