@artblocks/abx-cli 0.1.0-alpha.0

package/dist/signer.js

@@ -0,0 +1,520 @@
+import { createServer } from 'node:http';
+import { writeFileSync } from 'node:fs';
+import { makePublicClient, makeWalletClient, resolveChain, } from '@artblocks/abx-sdk';
+/** Announce the wallet sign-page URL: a stable, greppable line for humans/agents, plus an
+ *  optional file write so a backgrounding agent can read the URL without parsing stdout. */
+function announceSignUrl(signUrl, file) {
+    // A machine-stable marker line (distinct from the prose below) — easy to grep from a
+    // backgrounded process's output: `ABX_SIGN_URL=http://localhost:8799`.
+    console.log(`  ${dim('ABX_SIGN_URL=')}${bold(signUrl)}`);
+    if (file) {
+        try {
+            writeFileSync(file, signUrl + '\n');
+        }
+        catch {
+            /* best-effort — the printed line is the fallback */
+        }
+    }
+}
+const DEFAULT_SIGN_PORT = 8799;
+const TESTNETS = new Set(['sepolia', 'base-sepolia']);
+// ── tiny ANSI (kept local so this module stands alone) ───────────────────────
+const C = { reset: '\x1b[0m', dim: '\x1b[2m', bold: '\x1b[1m', green: '\x1b[38;5;115m', purple: '\x1b[38;5;141m', orange: '\x1b[38;5;215m' };
+const dim = (s) => `${C.dim}${s}${C.reset}`;
+const bold = (s) => `${C.bold}${s}${C.reset}`;
+const purple = (s) => `${C.purple}${s}${C.reset}`;
+const green = (s) => `${C.green}${s}${C.reset}`;
+function explorerFor(chainKey) {
+    const chain = resolveChain(chainKey);
+    return chain.blockExplorers?.default?.url ?? '';
+}
+async function resolveTx(provider, signer) {
+    return typeof provider === 'function' ? await provider(signer) : provider;
+}
+const delay = (ms) => new Promise((r) => setTimeout(r, ms));
+/**
+ * Bind the sign page to a *fresh* port, robustly.
+ *
+ * Each owner op is a separate short-lived CLI process, and they all prefer the same port
+ * (8799) — nice for humans, and it lets the wallet remember the connection across a
+ * sequence. But that also means a previous op's server can still be draining on it (a
+ * finished session lingers ~1s before its socket drops), or a stuck/abandoned session can
+ * still be holding it. Binding naively then either (a) hands the new action to a server that
+ * is *already finished* — so the page connects and instantly shows "done" (last op's success,
+ * not this one) — or (b) throws EADDRINUSE and the process dies before its page ever appears.
+ *
+ * So: try the preferred port with a few quick retries (covers a previous session draining),
+ * then fall back to an OS-assigned ephemeral port. A new action therefore ALWAYS gets its own
+ * fresh server — never one a finished session is still answering. Callers must announce the
+ * ACTUAL bound port (returned here), never the requested one.
+ */
+async function listenAvailable(server, preferred) {
+    const tryListen = (port) => new Promise((resolve) => {
+        const onError = () => {
+            server.removeListener('error', onError);
+            resolve(false); // EADDRINUSE (or any bind failure) → unavailable; caller retries / falls back
+        };
+        server.once('error', onError);
+        server.listen(port, () => {
+            server.removeListener('error', onError);
+            resolve(true);
+        });
+    });
+    // ~1.8s of quick retries: reclaim the friendly port the moment a draining prior session lets go.
+    for (let i = 0; i < 6; i++) {
+        if (await tryListen(preferred))
+            return preferred;
+        await delay(300);
+    }
+    // Still held (a stuck/abandoned session) → don't block or crash; take a fresh ephemeral port.
+    if (await tryListen(0))
+        return server.address().port;
+    throw new Error('could not bind a local port for the wallet signing page');
+}
+function printIntent(prepared, opts) {
+    console.log(`\n  ${purple('◆')} ${bold(prepared.summary)}`);
+    for (const [k, v] of Object.entries(prepared.fields))
+        console.log(`    ${dim(k.padEnd(10))} ${v}`);
+    if (opts.expectedSigner)
+        console.log(`    ${dim('sign as'.padEnd(10))} ${opts.expectedSigner}`);
+}
+/**
+ * Sign and (for hot/wallet) broadcast a prepared tx via the chosen lane. Returns
+ * the broadcast tx hash, or `null` for the cold lane (nothing is sent — the
+ * caller hands the printed tx to an external signer).
+ */
+export async function signTx(provider, opts) {
+    switch (opts.lane) {
+        case 'send':
+            return signHot(provider, opts);
+        case 'sign':
+            return signWallet(provider, opts);
+        case 'unsigned':
+            return signCold(provider, opts);
+    }
+}
+// ── hot lane: env key signs + broadcasts ─────────────────────────────────────
+async function signHot(provider, opts) {
+    if (!TESTNETS.has(opts.chainKey) && !opts.yes) {
+        throw new Error(`Refusing to sign on '${opts.chainKey}' with the env key without --yes. ` +
+            `For real value, prefer the wallet lane (--sign) so the key never touches this process.`);
+    }
+    const { wallet, account } = makeWalletClient({ chainKey: opts.chainKey });
+    const publicClient = makePublicClient({ chainKey: opts.chainKey });
+    const prepared = await resolveTx(provider, account.address);
+    printIntent(prepared, opts);
+    if (opts.expectedSigner && opts.expectedSigner.toLowerCase() !== account.address.toLowerCase()) {
+        console.log(`\n  ${C.orange}⚠${C.reset} env key ${account.address} is not the expected signer ${opts.expectedSigner} — this will likely revert.`);
+    }
+    console.log(`\n  ${dim(`signing with env key ${account.address} …`)}`);
+    const txHash = await wallet.sendTransaction({
+        account,
+        chain: wallet.chain,
+        to: prepared.to ?? undefined,
+        data: prepared.data,
+        value: BigInt(prepared.value),
+    });
+    console.log(`  ${dim('tx')} ${explorerFor(opts.chainKey)}/tx/${txHash}`);
+    const receipt = await publicClient.waitForTransactionReceipt({ hash: txHash });
+    console.log(`  ${green('✓')} confirmed`);
+    return { txHash, prepared, blockNumber: receipt.blockNumber };
+}
+// ── cold lane: print the tx for an external signer ───────────────────────────
+async function signCold(provider, opts) {
+    if (typeof provider === 'function' && !opts.expectedSigner) {
+        throw new Error('This op needs the signer address to build its tx. Pass --from <address> with --unsigned.');
+    }
+    const prepared = await resolveTx(provider, opts.expectedSigner ?? '0x0000000000000000000000000000000000000000');
+    printIntent(prepared, opts);
+    console.log(`\n  ${bold('unsigned transaction')} ${dim('— sign + broadcast this with your own signer (multisig / offline):')}\n`);
+    console.log(JSON.stringify({ to: prepared.to, data: prepared.data, value: prepared.value, chainId: prepared.chainId }, null, 2)
+        .split('\n')
+        .map((l) => '    ' + l)
+        .join('\n'));
+    console.log(`\n  ${dim('Then run')} ${bold('abx index <address>')} ${dim('to reflect it once mined.')}\n`);
+    return null;
+}
+// ── wallet lane: a single tx, on the SAME hardened session as staged deploys ──
+// Owner ops and off-chain-custody deploys are a single tx, but they get the exact same
+// guard-rich page: connect once, network + signer verified (and re-verified live right
+// before signing), then approve. A builder provider (deploy) is resolved against the
+// CONNECTED signer — which the session pins to `expectedSigner` (page + server both refuse a
+// mismatch) — so the owner/mintTo can never be a wallet you didn't intend.
+async function signWallet(provider, opts) {
+    const session = await openWalletSession({
+        chainKey: opts.chainKey,
+        expectedSigner: opts.expectedSigner,
+        port: opts.port,
+        signUrlFile: opts.signUrlFile,
+        total: 1,
+    });
+    try {
+        const signer = await session.connect();
+        const prepared = await resolveTx(provider, signer);
+        const { txHash, receipt } = await session.send(prepared);
+        return { txHash, prepared, blockNumber: receipt.blockNumber };
+    }
+    finally {
+        session.close();
+    }
+}
+function readBody(req) {
+    return new Promise((resolve, reject) => {
+        let data = '';
+        req.on('data', (c) => (data += c));
+        req.on('end', () => resolve(data));
+        req.on('error', reject);
+    });
+}
+/** Uint8Array → `0x…` hex (for handing a data-item's signature-data to the browser to personal_sign). */
+function bytesToHex(b) {
+    let s = '0x';
+    for (const byte of b)
+        s += byte.toString(16).padStart(2, '0');
+    return s;
+}
+export async function openWalletSession(opts) {
+    const preferredPort = opts.port ?? DEFAULT_SIGN_PORT;
+    const chain = resolveChain(opts.chainKey);
+    const publicClient = makePublicClient({ chainKey: opts.chainKey });
+    const explorer = explorerFor(opts.chainKey);
+    let resolveConnect;
+    let rejectAll;
+    const connected = new Promise((res, rej) => {
+        resolveConnect = res;
+        rejectAll = rej;
+    });
+    // The single item the page should currently show; `consumed` flips once it's signed, so `/next`
+    // returns idle until the CLI queues the next. An item is either an EVM tx (eth_sendTransaction →
+    // txHash) or a message to sign (personal_sign → signature) — the latter is how the wallet signs
+    // Turbo (Arweave) upload data-items so its own credits pay. Both resolve `pendingResolve` with a
+    // Hex value (a txHash or a signature); only one item is ever in flight.
+    let current = null;
+    let pendingResolve = null;
+    let pendingReject = null;
+    let index = 0;
+    let finished = false;
+    const fail = (e) => {
+        pendingReject?.(e);
+        rejectAll?.(e);
+    };
+    const server = createServer(async (req, res) => {
+        res.setHeader('access-control-allow-origin', '*');
+        const url = new URL(req.url ?? '/', 'http://localhost');
+        try {
+            if (url.pathname === '/') {
+                res.writeHead(200, { 'content-type': 'text/html; charset=utf-8' });
+                // A finished session must NOT re-serve the live connect page: a stale hit (an old tab, a
+                // reused bookmark, a page opened while this server drains) would connect and instantly
+                // read `/next` → done, looking like THIS action succeeded when it was the last one. Serve
+                // an unambiguous ended-state instead — the next action opens its own fresh link.
+                res.end(finished ? endedPage() : sessionPage({ chainId: chain.id, chainName: chain.name, explorer, expectedSigner: opts.expectedSigner, total: opts.total }));
+                return;
+            }
+            if (url.pathname === '/connect' && req.method === 'POST') {
+                const { signer } = JSON.parse((await readBody(req)) || '{}');
+                // Hard server-side guard: never let the deployer/owner resolve to anything but the
+                // expected signer (the page enforces this too, but the CLI builds owner/mintTo from
+                // whatever connects, so a wrong signer here would silently mis-own the contract).
+                if (signer && opts.expectedSigner && signer.toLowerCase() !== opts.expectedSigner.toLowerCase()) {
+                    res.writeHead(409, { 'content-type': 'application/json' });
+                    res.end(JSON.stringify({ ok: false, error: `connected ${signer} but this is prepared for ${opts.expectedSigner}` }));
+                    return;
+                }
+                res.writeHead(200, { 'content-type': 'application/json' });
+                res.end(JSON.stringify({ ok: true }));
+                if (signer)
+                    resolveConnect(signer);
+                return;
+            }
+            if (url.pathname === '/next') {
+                res.writeHead(200, { 'content-type': 'application/json' });
+                if (finished)
+                    res.end(JSON.stringify({ done: true }));
+                else if (current && !current.consumed) {
+                    const base = { index: current.index, total: opts.total ?? null };
+                    res.end(JSON.stringify(current.kind === 'msg' ? { ...base, msg: current.msg } : { ...base, tx: current.tx }));
+                }
+                else
+                    res.end(JSON.stringify({ idle: true }));
+                return;
+            }
+            if (url.pathname === '/signed' && req.method === 'POST') {
+                // A tx item returns `txHash`; a message item returns `signature`. Both are Hex; the awaiting
+                // caller (send vs signMessage) knows which it queued.
+                const { index: i, txHash, signature } = JSON.parse((await readBody(req)) || '{}');
+                const value = (txHash ?? signature);
+                res.writeHead(200, { 'content-type': 'application/json' });
+                res.end(JSON.stringify({ ok: true }));
+                if (current && current.index === i && value && pendingResolve) {
+                    current.consumed = true;
+                    pendingResolve(value);
+                }
+                return;
+            }
+            if (url.pathname === '/cancel' && req.method === 'POST') {
+                res.writeHead(200);
+                res.end('ok');
+                fail(new Error('signing cancelled in the browser'));
+                return;
+            }
+            res.writeHead(404);
+            res.end('not found');
+        }
+        catch (err) {
+            res.writeHead(500, { 'content-type': 'application/json' });
+            res.end(JSON.stringify({ error: err.message }));
+        }
+    });
+    const boundPort = await listenAvailable(server, preferredPort);
+    const signUrl = `http://localhost:${boundPort}`;
+    console.log(`\n  ${purple('◆')} ${bold('wallet signing')}  ${dim(`(${chain.name}${opts.total ? `, ${opts.total} transactions` : ''})`)}`);
+    console.log(`\n  Open ${bold(signUrl)} , connect a wallet${opts.expectedSigner ? ` (${opts.expectedSigner})` : ''}, and approve each step.`);
+    announceSignUrl(signUrl, opts.signUrlFile);
+    console.log(`  ${dim('The key never touches this process — only signed tx hashes come back. Ctrl-C to cancel.')}\n`);
+    const onSigint = () => fail(new Error('cancelled'));
+    process.once('SIGINT', onSigint);
+    return {
+        connect: () => connected,
+        async send(tx) {
+            index += 1;
+            current = { index, kind: 'tx', tx, consumed: false };
+            console.log(`  ${dim(`tx ${opts.total ? `${index}/${opts.total}` : index}:`)} ${tx.summary} ${dim('— approve in your wallet …')}`);
+            const txHash = await new Promise((resolve, reject) => {
+                pendingResolve = resolve;
+                pendingReject = reject;
+            });
+            pendingResolve = null;
+            pendingReject = null;
+            console.log(`  ${dim('tx')} ${explorer}/tx/${txHash}  ${dim('— confirming …')}`);
+            const receipt = await publicClient.waitForTransactionReceipt({ hash: txHash });
+            console.log(`  ${green('✓')} confirmed`);
+            current = null; // back to idle until the next send()
+            return { txHash, receipt };
+        },
+        async signMessage(message, summary) {
+            index += 1;
+            current = { index, kind: 'msg', msg: { messageHex: bytesToHex(message), summary: summary ?? 'Sign storage upload (Arweave/Turbo)' }, consumed: false };
+            console.log(`  ${dim(`sign ${opts.total ? `${index}/${opts.total}` : index}:`)} ${current.msg.summary} ${dim('— approve in your wallet …')}`);
+            const sig = await new Promise((resolve, reject) => {
+                pendingResolve = resolve;
+                pendingReject = reject;
+            });
+            pendingResolve = null;
+            pendingReject = null;
+            console.log(`  ${green('✓')} signed`);
+            current = null; // back to idle
+            return sig;
+        },
+        close() {
+            finished = true;
+            process.removeListener('SIGINT', onSigint);
+            // Brief grace so the page's next poll can render "all done" before the socket drops.
+            setTimeout(() => server.close(), 1200).unref();
+        },
+    };
+}
+/** The page a *finished* session serves on a fresh load — so a stale/reused hit reads as
+ *  "over", never as the current action's success. Deliberately inert: no wallet JS, no poll. */
+function endedPage() {
+    return `<!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
+<title>ABX · session ended</title><style>
+:root{color-scheme:dark}
+body{margin:0;font:15px/1.55 ui-monospace,SFMono-Regular,Menlo,monospace;background:#0c0c10;color:#e7e7ea;display:flex;min-height:100vh;align-items:center;justify-content:center}
+.card{width:min(560px,92vw);background:#15151c;border-radius:14px;padding:26px 28px;box-shadow:0 12px 40px #0008}
+h1{font-size:13px;letter-spacing:.14em;text-transform:uppercase;color:#a98bff;margin:0 0 10px}
+p{margin:0 0 8px;color:#c9c9d0}
+.dim{color:#7d7d88;font-size:13px}
+</style></head><body><div class="card">
+<h1>ABX · signing session ended</h1>
+<p>This signing session is finished — nothing is pending here.</p>
+<p class="dim">This is <b>not</b> a fresh action. Each new action opens its own link: return to the terminal, wait for the next sign URL, and open that one. Don't reuse this tab.</p>
+</div></body></html>`;
+}
+function sessionPage(o) {
+    const cfg = JSON.stringify({
+        chainId: o.chainId,
+        chainName: o.chainName,
+        explorer: o.explorer,
+        expectedSigner: o.expectedSigner ?? null,
+        total: o.total ?? null,
+    });
+    return `<!doctype html><html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
+<title>ABX · sign</title><style>
+:root{color-scheme:dark}
+body{margin:0;font:15px/1.55 ui-monospace,SFMono-Regular,Menlo,monospace;background:#0c0c10;color:#e7e7ea;display:flex;min-height:100vh;align-items:center;justify-content:center}
+.card{width:min(560px,92vw);background:#15151c;border:1px solid #26263200;border-radius:14px;padding:26px 28px;box-shadow:0 12px 40px #0008}
+h1{font-size:13px;letter-spacing:.14em;text-transform:uppercase;color:#a98bff;margin:0 0 4px}
+.prog{font-size:12px;letter-spacing:.08em;text-transform:uppercase;color:#7d7d88;margin:0 0 10px;min-height:14px}
+.ctx{margin:0 0 16px;font-size:12.5px}
+.ctx .row{display:flex;align-items:flex-start;gap:8px;padding:3px 0}
+.ctx .dot{flex:none;width:8px;height:8px;border-radius:50%;margin-top:6px;background:#5a5a66}
+.ctx .dot.good{background:#7fe0a0}.ctx .dot.bad{background:#ff8b8b}
+.ctx .v{word-break:break-all}
+.ctx .good{color:#9be8b6}.ctx .bad{color:#ff9d9d}
+.summary{font-size:18px;font-weight:600;margin:10px 0 4px}
+.tlabel{font-size:11px;letter-spacing:.1em;text-transform:uppercase;color:#8a8a96;margin:8px 0 2px}
+table{width:100%;border-collapse:collapse;margin:0 0 16px;font-size:13px}
+td{padding:5px 0;vertical-align:top;border-bottom:1px solid #ffffff10}
+td.k{color:#8a8a96;width:104px;padding-right:12px}
+td.v{word-break:break-all;color:#d6d6dc}
+button{font:inherit;font-weight:600;border:0;border-radius:9px;padding:12px 18px;width:100%;cursor:pointer;background:#7c5cff;color:#fff;margin-top:6px}
+button:disabled{opacity:.4;cursor:not-allowed}
+button.secondary{background:#23232e;color:#cfcfd6}
+.note{font-size:12px;color:#7d7d88;margin-top:14px}
+.status{font-size:13px;margin-top:14px;padding:10px 12px;border-radius:8px;background:#1c1c25;display:none}
+.status.show{display:block}
+.ok{color:#7fe0a0}.err{color:#ff8b8b}.warn{color:#ffcf8b}
+a{color:#a98bff}
+</style></head><body><div class="card">
+<h1>ABX · approve to sign</h1>
+<div class="prog" id="progress"></div>
+<div class="ctx">
+  <div class="row"><span class="dot" id="netDot"></span><span class="v" id="netText">Network: …</span></div>
+  <div class="row"><span class="dot" id="acctDot"></span><span class="v" id="acctText">Wallet: not connected</span></div>
+</div>
+<div class="tlabel" id="tlabel" style="display:none">This transaction does</div>
+<div class="summary" id="summary">Connect your wallet to begin.</div>
+<table id="fields"></table>
+<button id="connect">Connect wallet</button>
+<button id="switch" class="secondary" style="display:none">Switch network to ${o.chainName}</button>
+<button id="sign" disabled style="display:none">Sign &amp; send</button>
+<div class="status" id="status"></div>
+<div class="note" id="note"></div>
+</div>
+<script>
+const CFG = ${cfg};
+const $ = (id) => document.getElementById(id);
+let account=null, chainId=null, connected=false, curTx=null, curMsg=null, curKind=null, curIndex=0, signing=false, stopped=false;
+const toHexChain = (n) => '0x' + n.toString(16);
+const eq = (a,b) => a && b && a.toLowerCase() === b.toLowerCase();
+function status(msg, cls){ const s=$('status'); s.className='status show '+(cls||''); s.innerHTML=msg; }
+function progress(i, label){ $('progress').textContent = i ? ((label||'Step') + ' ' + i + (CFG.total ? ' of ' + CFG.total : '')) : ''; }
+const signerOk = () => !CFG.expectedSigner || eq(account, CFG.expectedSigner);
+const chainOk  = () => chainId === CFG.chainId;
+// A message signature (personal_sign, for Arweave/Turbo uploads) is chain-agnostic; only a tx needs the network right.
+const needChain = () => curKind !== 'msg';
+
+// Every signature is gated on THREE things being right: the network, the signing wallet,
+// and a tx to sign. The page renders all three and refuses to enable signing unless they hold.
+function renderCtx(){
+  const nd=$('netDot'), nt=$('netText');
+  if (chainId == null){ nd.className='dot'; nt.className='v'; nt.textContent='Network: connect to check'; }
+  else if (chainOk()){ nd.className='dot good'; nt.className='v good'; nt.textContent='Network: '+CFG.chainName+' (chainId '+CFG.chainId+') ✓'; }
+  else { nd.className='dot bad'; nt.className='v bad'; nt.innerHTML='Wrong network: wallet is on chainId '+chainId+', this needs <b>'+CFG.chainName+' ('+CFG.chainId+')</b>'; }
+  const ad=$('acctDot'), at=$('acctText');
+  if (!account){ ad.className='dot'; at.className='v'; at.textContent='Wallet: not connected'; }
+  else if (signerOk()){ ad.className='dot good'; at.className='v good'; at.innerHTML='Wallet: '+account+' ✓'+(CFG.expectedSigner?'':' — this wallet will be the owner'); }
+  else { ad.className='dot bad'; at.className='v bad'; at.innerHTML='Wrong wallet: connected <b>'+account+'</b>, but this was prepared for <b>'+CFG.expectedSigner+'</b>. Switch accounts in your wallet.'; }
+  $('switch').style.display = (account && !chainOk()) ? 'block' : 'none';
+  gateSign();
+}
+function gateSign(){
+  const hasItem = !!curTx || !!curMsg;
+  const ready = hasItem && !signing && signerOk() && (!needChain() || chainOk());
+  $('sign').disabled = !ready;
+  if (hasItem && !signing && !ready){
+    if (needChain() && !chainOk()) status('Can\\'t sign: wrong network. Switch your wallet to '+CFG.chainName+' ('+CFG.chainId+').','err');
+    else if (!signerOk()) status('Can\\'t sign: wrong wallet. Switch to '+CFG.expectedSigner+'.','err');
+  }
+}
+function renderTx(t,i){
+  curTx=t; curMsg=null; curKind='tx'; curIndex=i; progress(i,'Transaction');
+  $('tlabel').style.display='block'; $('tlabel').textContent='This transaction does';
+  $('summary').textContent=t.summary;
+  $('fields').innerHTML=Object.entries(t.fields).map(([k,v]) =>
+    '<tr><td class="k">'+k+'</td><td class="v">'+v+'</td></tr>').join('');
+  $('connect').style.display='none';
+  $('sign').textContent='Sign & send';
+  $('sign').style.display='block';
+  if (signerOk() && chainOk()) status('Review the details above, then approve in your wallet.','');
+  gateSign();
+}
+function renderMsg(m,i){
+  curMsg=m; curTx=null; curKind='msg'; curIndex=i; progress(i,'Signature');
+  $('tlabel').style.display='block'; $('tlabel').textContent='This signature authorizes';
+  $('summary').textContent=m.summary;
+  $('fields').innerHTML='<tr><td class="k">action</td><td class="v">Sign a storage upload (Arweave / Turbo). This is a message signature — <b>no gas, no funds move</b>; the upload is paid from your Turbo credits.</td></tr>';
+  $('connect').style.display='none';
+  $('sign').textContent='Sign message';
+  $('sign').style.display='block';
+  if (signerOk()) status('Review, then sign in your wallet (a signature, not a transaction).','');
+  gateSign();
+}
+async function readChain(){
+  try { chainId = parseInt(await window.ethereum.request({method:'eth_chainId'}),16); } catch(e){ chainId=null; }
+}
+async function trySwitch(){
+  try { await window.ethereum.request({method:'wallet_switchEthereumChain', params:[{chainId: toHexChain(CFG.chainId)}]}); }
+  catch(e){ status('Couldn\\'t switch automatically — switch to '+CFG.chainName+' ('+CFG.chainId+') in your wallet manually.','err'); }
+  await readChain(); renderCtx(); maybeConnect();
+}
+$('switch').onclick = trySwitch;
+// Tell the CLI which wallet is signing — but ONLY once it's the right wallet on the right
+// network, so the deployer/owner the CLI builds can never be a wallet you didn't intend.
+async function maybeConnect(){
+  if (connected || !account) return;
+  if (!signerOk() || !chainOk()){ gateSign(); return; }
+  const r = await fetch('/connect', {method:'POST', headers:{'content-type':'application/json'}, body: JSON.stringify({signer: account})});
+  if (!r.ok){ const e = await r.json().catch(()=>({})); status('Rejected: '+(e.error||'signer mismatch'),'err'); return; }
+  connected=true;
+  status('Connected '+account+' on '+CFG.chainName+'. Waiting for the first transaction…','ok');
+  poll();
+}
+$('connect').onclick = async () => {
+  const eth = window.ethereum;
+  if (!eth){ status('No injected wallet found. Install MetaMask (or use the hot lane: <code>--send</code>).','err'); return; }
+  try {
+    const accs = await eth.request({method:'eth_requestAccounts'});
+    account = accs[0] || null;
+    await readChain();
+    if (!chainOk()) await trySwitch(); else { renderCtx(); maybeConnect(); }
+  } catch(e){ status(e.message||String(e),'err'); }
+};
+$('sign').onclick = async () => {
+  if ((!curTx && !curMsg) || signing) return;
+  // Re-verify LIVE against the wallet right before signing — the user may have switched the
+  // account or network since we last checked. Never send a tx to the wrong place.
+  try {
+    const live = (await window.ethereum.request({method:'eth_accounts'}))[0] || null;
+    if (live) account = live;
+    await readChain(); renderCtx();
+  } catch(e){}
+  if (!signerOk() || (needChain() && !chainOk())){ gateSign(); return; }
+  signing=true; $('sign').disabled=true;
+  try {
+    if (curKind==='msg'){
+      // Sign the Arweave data-item's signature-data with the wallet (EIP-191). No gas, no chain.
+      const signature = await window.ethereum.request({method:'personal_sign', params:[curMsg.messageHex, account]});
+      await fetch('/signed', {method:'POST', headers:{'content-type':'application/json'}, body: JSON.stringify({index: curIndex, signature})});
+      status('Signed ✓ — continuing…','ok');
+      $('sign').style.display='none'; curMsg=null; signing=false;
+    } else {
+      const params = {from: account, data: curTx.data, value: curTx.value};
+      if (curTx.to) params.to = curTx.to;
+      const txHash = await window.ethereum.request({method:'eth_sendTransaction', params:[params]});
+      await fetch('/signed', {method:'POST', headers:{'content-type':'application/json'}, body: JSON.stringify({index: curIndex, txHash})});
+      const link = CFG.explorer ? '<a href="'+CFG.explorer+'/tx/'+txHash+'" target="_blank">'+txHash+'</a>' : txHash;
+      status('Sent ✓ '+link+'<br>Confirming on-chain…','ok');
+      $('sign').style.display='none'; curTx=null; signing=false;
+    }
+  } catch(e){ status((e&&e.message)||String(e),'err'); signing=false; gateSign(); }
+};
+if (window.ethereum){
+  window.ethereum.on && window.ethereum.on('accountsChanged', (accs)=>{ account=(accs&&accs[0])||null; renderCtx(); maybeConnect(); });
+  window.ethereum.on && window.ethereum.on('chainChanged', async ()=>{ await readChain(); renderCtx(); maybeConnect(); });
+}
+renderCtx();
+async function poll(){
+  if (stopped) return;
+  try {
+    const r = await fetch('/next'); const d = await r.json();
+    if (d.done){ stopped=true; progress(0); $('tlabel').style.display='none'; $('summary').textContent='All done — everything signed.'; $('fields').innerHTML=''; status('Done ✓ — you can close this tab.','ok'); return; }
+    if (d.tx && d.index !== curIndex && !signing) renderTx(d.tx, d.index);
+    else if (d.msg && d.index !== curIndex && !signing) renderMsg(d.msg, d.index);
+  } catch(e){ /* server finishing/closing — keep trying briefly */ }
+  if (!stopped) setTimeout(poll, 700);
+}
+</script></body></html>`;
+}
+//# sourceMappingURL=signer.js.map

package/dist/signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer.js","sourceRoot":"","sources":["../src/signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,YAAY,EAAyD,MAAM,WAAW,CAAC;AAE/F,OAAO,EAAC,aAAa,EAAC,MAAM,SAAS,CAAC;AACtC,OAAO,EACL,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,GAIb,MAAM,oBAAoB,CAAC;AAoC5B;4FAC4F;AAC5F,SAAS,eAAe,CAAC,OAAe,EAAE,IAAa;IACrD,qFAAqF;IACrF,uEAAuE;IACvE,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACzD,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,CAAC;YACH,aAAa,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,oDAAoD;QACtD,CAAC;IACH,CAAC;AACH,CAAC;AAQD,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAC/B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;AAEtD,gFAAgF;AAChF,MAAM,CAAC,GAAG,EAAC,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,EAAE,gBAAgB,EAAC,CAAC;AAC3I,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC;AACpD,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC;AACtD,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC;AAC1D,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC;AAExD,SAAS,WAAW,CAAC,QAAgB;IACnC,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACrC,OAAO,KAAK,CAAC,cAAc,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,CAAC;AAClD,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,QAAoB,EAAE,MAAe;IAC5D,OAAO,OAAO,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC5E,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAE1E;;;;;;;;;;;;;;;GAeG;AACH,KAAK,UAAU,eAAe,CAAC,MAAc,EAAE,SAAiB;IAC9D,MAAM,SAAS,GAAG,CAAC,IAAY,EAAoB,EAAE,CACnD,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QACtB,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACxC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,8EAA8E;QAChG,CAAC,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC9B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;YACvB,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACxC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEL,iGAAiG;IACjG,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,IAAI,MAAM,SAAS,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;QACjD,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,8FAA8F;IAC9F,IAAI,MAAM,SAAS,CAAC,CAAC,CAAC;QAAE,OAAQ,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,CAAC;IACtE,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,WAAW,CAAC,QAAoB,EAAE,IAAiB;IAC1D,OAAO,CAAC,GAAG,CAAC,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC5D,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnG,IAAI,IAAI,CAAC,cAAc;QAAE,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;AAClG,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,QAAoB,EAAE,IAAiB;IAClE,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,MAAM;YACT,OAAO,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACjC,KAAK,MAAM;YACT,OAAO,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;QACpC,KAAK,UAAU;YACb,OAAO,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,KAAK,UAAU,OAAO,CAAC,QAAoB,EAAE,IAAiB;IAC5D,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,wBAAwB,IAAI,CAAC,QAAQ,oCAAoC;YACvE,wFAAwF,CAC3F,CAAC;IACJ,CAAC;IACD,MAAM,EAAC,MAAM,EAAE,OAAO,EAAC,GAAG,gBAAgB,CAAC,EAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAC,CAAC,CAAC;IACtE,MAAM,YAAY,GAAG,gBAAgB,CAAC,EAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAC,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5D,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC5B,IAAI,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;QAC/F,OAAO,CAAC,GAAG,CACT,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,YAAY,OAAO,CAAC,OAAO,+BAA+B,IAAI,CAAC,cAAc,6BAA6B,CACrI,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,wBAAwB,OAAO,CAAC,OAAO,IAAI,CAAC,EAAE,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC;QAC1C,OAAO;QACP,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,EAAE,EAAE,QAAQ,CAAC,EAAE,IAAI,SAAS;QAC5B,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;KAC9B,CAAC,CAAC;IACH,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,MAAM,EAAE,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,yBAAyB,CAAC,EAAC,IAAI,EAAE,MAAM,EAAC,CAAC,CAAC;IAC7E,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACzC,OAAO,EAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAC,CAAC;AAC9D,CAAC;AAED,gFAAgF;AAChF,KAAK,UAAU,QAAQ,CAAC,QAAoB,EAAE,IAAiB;IAC7D,IAAI,OAAO,QAAQ,KAAK,UAAU,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,0FAA0F,CAAC,CAAC;IAC9G,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,cAAc,IAAK,4CAAwD,CAAC,CAAC;IAC7H,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,GAAG,CAAC,oEAAoE,CAAC,IAAI,CAAC,CAAC;IAClI,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ,EAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAC,EACxF,IAAI,EACJ,CAAC,CACF;SACE,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;SACtB,IAAI,CAAC,IAAI,CAAC,CACd,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,qBAAqB,CAAC,IAAI,GAAG,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC;IAC3G,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iFAAiF;AACjF,uFAAuF;AACvF,uFAAuF;AACvF,qFAAqF;AACrF,6FAA6F;AAC7F,2EAA2E;AAC3E,KAAK,UAAU,UAAU,CAAC,QAAoB,EAAE,IAAiB;IAC/D,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC;QACtC,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,KAAK,EAAE,CAAC;KACT,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QACnD,MAAM,EAAC,MAAM,EAAE,OAAO,EAAC,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvD,OAAO,EAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAC,CAAC;IAC9D,CAAC;YAAS,CAAC;QACT,OAAO,CAAC,KAAK,EAAE,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,GAAoB;IACpC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;QACnC,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACnC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AA8BD,yGAAyG;AACzG,SAAS,UAAU,CAAC,CAAa;IAC/B,IAAI,CAAC,GAAG,IAAI,CAAC;IACb,KAAK,MAAM,IAAI,IAAI,CAAC;QAAE,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9D,OAAO,CAAQ,CAAC;AAClB,CAAC;AAaD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAA0B;IAChE,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,IAAI,iBAAiB,CAAC;IACrD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,YAAY,GAAG,gBAAgB,CAAC,EAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAC,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAE5C,IAAI,cAAoC,CAAC;IACzC,IAAI,SAA6B,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,OAAO,CAAU,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAClD,cAAc,GAAG,GAAG,CAAC;QACrB,SAAS,GAAG,GAAG,CAAC;IAClB,CAAC,CAAC,CAAC;IAEH,gGAAgG;IAChG,iGAAiG;IACjG,gGAAgG;IAChG,iGAAiG;IACjG,wEAAwE;IACxE,IAAI,OAAO,GAA6H,IAAI,CAAC;IAC7I,IAAI,cAAc,GAAkC,IAAI,CAAC;IACzD,IAAI,aAAa,GAAgC,IAAI,CAAC;IACtD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,MAAM,IAAI,GAAG,CAAC,CAAQ,EAAE,EAAE;QACxB,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC;QACnB,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,GAAoB,EAAE,GAAmB,EAAE,EAAE;QAC9E,GAAG,CAAC,SAAS,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACxD,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,EAAE,CAAC;gBACzB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAC,cAAc,EAAE,0BAA0B,EAAC,CAAC,CAAC;gBACjE,yFAAyF;gBACzF,uFAAuF;gBACvF,0FAA0F;gBAC1F,iFAAiF;gBACjF,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,EAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAC,CAAC,CAAC,CAAC;gBAC5J,OAAO;YACT,CAAC;YACD,IAAI,GAAG,CAAC,QAAQ,KAAK,UAAU,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBACzD,MAAM,EAAC,MAAM,EAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;gBAC3D,mFAAmF;gBACnF,oFAAoF;gBACpF,kFAAkF;gBAClF,IAAI,MAAM,IAAI,IAAI,CAAC,cAAc,IAAK,MAAiB,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,EAAE,CAAC;oBAC5G,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAC,cAAc,EAAE,kBAAkB,EAAC,CAAC,CAAC;oBACzD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,MAAM,6BAA6B,IAAI,CAAC,cAAc,EAAE,EAAC,CAAC,CAAC,CAAC;oBACnH,OAAO;gBACT,CAAC;gBACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAC,cAAc,EAAE,kBAAkB,EAAC,CAAC,CAAC;gBACzD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAC,EAAE,EAAE,IAAI,EAAC,CAAC,CAAC,CAAC;gBACpC,IAAI,MAAM;oBAAE,cAAc,CAAC,MAAiB,CAAC,CAAC;gBAC9C,OAAO;YACT,CAAC;YACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;gBAC7B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAC,cAAc,EAAE,kBAAkB,EAAC,CAAC,CAAC;gBACzD,IAAI,QAAQ;oBAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAC,IAAI,EAAE,IAAI,EAAC,CAAC,CAAC,CAAC;qBAC/C,IAAI,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;oBACtC,MAAM,IAAI,GAAG,EAAC,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI,EAAC,CAAC;oBAC/D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,EAAC,GAAG,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAC,CAAC,CAAC,CAAC,EAAC,GAAG,IAAI,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAC,CAAC,CAAC,CAAC;gBAC5G,CAAC;;oBAAM,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAC,IAAI,EAAE,IAAI,EAAC,CAAC,CAAC,CAAC;gBAC7C,OAAO;YACT,CAAC;YACD,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBACxD,6FAA6F;gBAC7F,sDAAsD;gBACtD,MAAM,EAAC,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;gBAChF,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,SAAS,CAAoB,CAAC;gBACvD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAC,cAAc,EAAE,kBAAkB,EAAC,CAAC,CAAC;gBACzD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAC,EAAE,EAAE,IAAI,EAAC,CAAC,CAAC,CAAC;gBACpC,IAAI,OAAO,IAAI,OAAO,CAAC,KAAK,KAAK,CAAC,IAAI,KAAK,IAAI,cAAc,EAAE,CAAC;oBAC9D,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC;oBACxB,cAAc,CAAC,KAAK,CAAC,CAAC;gBACxB,CAAC;gBACD,OAAO;YACT,CAAC;YACD,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBACxD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACd,IAAI,CAAC,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;YACD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACvB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAC,cAAc,EAAE,kBAAkB,EAAC,CAAC,CAAC;YACzD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAC,KAAK,EAAG,GAAa,CAAC,OAAO,EAAC,CAAC,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,oBAAoB,SAAS,EAAE,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,gBAAgB,CAAC,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,eAAe,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC1I,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,sBAAsB,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,EAAE,0BAA0B,CAAC,CAAC;IAC7I,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAC3C,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,yFAAyF,CAAC,IAAI,CAAC,CAAC;IAErH,MAAM,QAAQ,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAEjC,OAAO;QACL,OAAO,EAAE,GAAG,EAAE,CAAC,SAAS;QACxB,KAAK,CAAC,IAAI,CAAC,EAAc;YACvB,KAAK,IAAI,CAAC,CAAC;YACX,OAAO,GAAG,EAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAC,CAAC;YACnD,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,IAAI,GAAG,CAAC,4BAA4B,CAAC,EAAE,CAAC,CAAC;YACnI,MAAM,MAAM,GAAG,MAAM,IAAI,OAAO,CAAM,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACxD,cAAc,GAAG,OAAO,CAAC;gBACzB,aAAa,GAAG,MAAM,CAAC;YACzB,CAAC,CAAC,CAAC;YACH,cAAc,GAAG,IAAI,CAAC;YACtB,aAAa,GAAG,IAAI,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,QAAQ,OAAO,MAAM,KAAK,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;YACjF,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,yBAAyB,CAAC,EAAC,IAAI,EAAE,MAAM,EAAC,CAAC,CAAC;YAC7E,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YACzC,OAAO,GAAG,IAAI,CAAC,CAAC,qCAAqC;YACrD,OAAO,EAAC,MAAM,EAAE,OAAO,EAAC,CAAC;QAC3B,CAAC;QACD,KAAK,CAAC,WAAW,CAAC,OAAmB,EAAE,OAAgB;YACrD,KAAK,IAAI,CAAC,CAAC;YACX,OAAO,GAAG,EAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAC,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,IAAI,qCAAqC,EAAC,EAAE,QAAQ,EAAE,KAAK,EAAC,CAAC;YACnJ,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,QAAQ,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,OAAO,CAAC,GAAI,CAAC,OAAO,IAAI,GAAG,CAAC,4BAA4B,CAAC,EAAE,CAAC,CAAC;YAC/I,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAAM,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACrD,cAAc,GAAG,OAAO,CAAC;gBACzB,aAAa,GAAG,MAAM,CAAC;YACzB,CAAC,CAAC,CAAC;YACH,cAAc,GAAG,IAAI,CAAC;YACtB,aAAa,GAAG,IAAI,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACtC,OAAO,GAAG,IAAI,CAAC,CAAC,eAAe;YAC/B,OAAO,GAAG,CAAC;QACb,CAAC;QACD,KAAK;YACH,QAAQ,GAAG,IAAI,CAAC;YAChB,OAAO,CAAC,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAC3C,qFAAqF;YACrF,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QACjD,CAAC;KACF,CAAC;AACJ,CAAC;AAED;gGACgG;AAChG,SAAS,SAAS;IAChB,OAAO;;;;;;;;;;;;qBAYY,CAAC;AACtB,CAAC;AAED,SAAS,WAAW,CAAC,CAMpB;IACC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC;QACzB,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,SAAS,EAAE,CAAC,CAAC,SAAS;QACtB,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,cAAc,EAAE,CAAC,CAAC,cAAc,IAAI,IAAI;QACxC,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI;KACvB,CAAC,CAAC;IACH,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;+EAsCsE,CAAC,CAAC,SAAS;;;;;;cAM5E,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;wBAoIO,CAAC;AACzB,CAAC"}

package/dist/upload.d.ts

@@ -0,0 +1,28 @@
+/**
+ * `abx storage upload` core — upload ONE file and return a public locator that PRESERVES the
+ * filename, so the declared mimeType survives when the locator is later attached (`abx attach`).
+ * The on-chain metadata field has no MIME slot: the URL extension IS the type declaration, so a
+ * bare content-addressed locator (`ar://<txid>`, `<gw>/ipfs/<cid>`) — which has no extension —
+ * would make the attached artifact `application/octet-stream`. Extracted from main.ts so the
+ * capability-based branch (the exact bug this guards) is unit-testable with fake backends.
+ */
+import type { StorageBackend, StoredContent } from '@artblocks/abx-storage';
+export interface UploadResult {
+    /** A fetchable public URL for the file. */
+    locator: string;
+    /** True when `locator` carries the filename (extension → correct declared type on attach). */
+    filenamePreserved: boolean;
+    /** Set when we had to fall back to a bare (extension-less) locator — the caller warns. */
+    fallbackReason?: string;
+}
+/**
+ * Store `content` under `name` and return the best available public locator. Preference order:
+ *  1. path-addressed host (cloud/S3/R2): the object key IS the filename → `<publicBase>/<name>`.
+ *  2. content-addressed host with directory support (ipfs/arweave): wrap the single file in a
+ *     one-entry directory → `<base>/<name>` (filename preserved).
+ *  3. bare content-addressed locator (e.g. kubo IPFS with no dir-add): `<gw>/ipfs/<cid>` — no
+ *     extension; `filenamePreserved: false` so the caller can warn about the octet-stream type.
+ * Throws for a backend that can't produce any public URL (e.g. `fs`).
+ */
+export declare function uploadAndLocate(backend: StorageBackend, name: string, content: StoredContent): Promise<UploadResult>;
+//# sourceMappingURL=upload.d.ts.map

package/dist/upload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload.d.ts","sourceRoot":"","sources":["../src/upload.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAC,cAAc,EAAE,aAAa,EAAC,MAAM,wBAAwB,CAAC;AAG1E,MAAM,WAAW,YAAY;IAC3B,2CAA2C;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,8FAA8F;IAC9F,iBAAiB,EAAE,OAAO,CAAC;IAC3B,0FAA0F;IAC1F,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAID;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAyB1H"}

package/dist/upload.js

@@ -0,0 +1,41 @@
+import { hashContent } from '@artblocks/abx-storage';
+const trimSlash = (s) => s.replace(/\/+$/, '');
+/**
+ * Store `content` under `name` and return the best available public locator. Preference order:
+ *  1. path-addressed host (cloud/S3/R2): the object key IS the filename → `<publicBase>/<name>`.
+ *  2. content-addressed host with directory support (ipfs/arweave): wrap the single file in a
+ *     one-entry directory → `<base>/<name>` (filename preserved).
+ *  3. bare content-addressed locator (e.g. kubo IPFS with no dir-add): `<gw>/ipfs/<cid>` — no
+ *     extension; `filenamePreserved: false` so the caller can warn about the octet-stream type.
+ * Throws for a backend that can't produce any public URL (e.g. `fs`).
+ */
+export async function uploadAndLocate(backend, name, content) {
+    if (backend.publicBase && backend.putObject) {
+        await backend.putObject(name, content);
+        return { locator: `${trimSlash(backend.publicBase)}/${name}`, filenamePreserved: true };
+    }
+    if (backend.putDirectory && backend.locator) {
+        try {
+            const { base } = await backend.putDirectory([{ name, bytes: content.bytes, contentType: content.contentType }]);
+            return { locator: `${trimSlash(base)}/${name}`, filenamePreserved: true };
+        }
+        catch (e) {
+            const hash = hashContent(content.bytes);
+            await backend.put(hash, content);
+            const loc = await backend.locator(hash);
+            if (!loc)
+                throw e;
+            return { locator: loc, filenamePreserved: false, fallbackReason: e.message };
+        }
+    }
+    if (backend.locator) {
+        const hash = hashContent(content.bytes);
+        await backend.put(hash, content);
+        const loc = await backend.locator(hash);
+        if (!loc)
+            throw new Error(`backend '${backend.id}' stored the file but returned no durable locator`);
+        return { locator: loc, filenamePreserved: false };
+    }
+    throw new Error(`backend '${backend.id}' can't produce a public URL for an attached file — use ipfs, arweave, or cloud (with a public base).`);
+}
+//# sourceMappingURL=upload.js.map

package/dist/upload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upload.js","sourceRoot":"","sources":["../src/upload.ts"],"names":[],"mappings":"AASA,OAAO,EAAC,WAAW,EAAC,MAAM,wBAAwB,CAAC;AAWnD,MAAM,SAAS,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAEvD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAuB,EAAE,IAAY,EAAE,OAAsB;IACjG,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QAC5C,MAAM,OAAO,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACvC,OAAO,EAAC,OAAO,EAAE,GAAG,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAC,CAAC;IACxF,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAC5C,IAAI,CAAC;YACH,MAAM,EAAC,IAAI,EAAC,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,CAAC,EAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAC,CAAC,CAAC,CAAC;YAC5G,OAAO,EAAC,OAAO,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAC,CAAC;QAC1E,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACxC,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACjC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,CAAC,GAAG;gBAAE,MAAM,CAAC,CAAC;YAClB,OAAO,EAAC,OAAO,EAAE,GAAG,EAAE,iBAAiB,EAAE,KAAK,EAAE,cAAc,EAAG,CAAW,CAAC,OAAO,EAAC,CAAC;QACxF,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,YAAY,OAAO,CAAC,EAAE,mDAAmD,CAAC,CAAC;QACrG,OAAO,EAAC,OAAO,EAAE,GAAG,EAAE,iBAAiB,EAAE,KAAK,EAAC,CAAC;IAClD,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,YAAY,OAAO,CAAC,EAAE,uGAAuG,CAAC,CAAC;AACjJ,CAAC"}