@artblocks/abx-cli 0.1.0-alpha.14 → 0.1.0-alpha.15

package/dist/main.js

@@ -74,11 +74,11 @@ const SCHEMA_CATALOG = 'Types: Bool·Select·Uint256Range·Int256Range·DecimalR
     'Select needs options — key:Select[A|B|C]:Auth; a Range takes bounds — key:Uint256Range[0..100]:Auth. ' +
     'A palette collectors set = palette:HexColor:TokenOwner';
 import { uploadAndLocate } from './upload.js';
-import { assertChainId, discoverDeployBlock, deployFactory, deploySeriesFactory, deploySeries, deployOneOfOne, deployRenderer, predictRenderer, predictSeedSource, encodeTag, encodeFieldRenderer, isCodeProject, loadDotEnv, makePublicClient, makeWalletClient, oneOfOneImageAbi, oneOfOneImageFactoryAbi, seriesImageAbi, seriesImageFactoryAbi, abxMetadataRendererAbi, predictClone, probeRpcEndpoints, prepareDeployOneOfOne, prepareDeploySeries, reconstructProject, saltFor, saltGuard, resolveChain, resolveRpcUrl, redactRpcUrl, explorerUrl, DEFAULT_CHAIN_KEY, KNOWN_CHAIN_KEYS, normalizeAttributes, parseTraitPairs, METADATA_FIELD as F, METADATA_REPRESENTATION as R, indexProgress, isAccepted, AbxIndexTimeoutError, AbxServiceError, } from '@artblocks/abx-sdk';
+import { assertChainId, discoverDeployBlock, deployFactory, deploySeriesFactory, deploySeries, deployOneOfOne, deployRenderer, predictRenderer, predictSeedSource, encodeTag, encodeFieldRenderer, isCodeProject, loadDotEnv, makePublicClient, makeWalletClient, oneOfOneImageAbi, oneOfOneImageFactoryAbi, seriesImageAbi, seriesImageFactoryAbi, abxMetadataRendererAbi, predictClone, probeRpcEndpoints, prepareDeployOneOfOne, prepareDeploySeries, reconstructProject, saltFor, saltGuard, resolveChain, resolveRpcUrl, redactRpcUrl, explorerUrl, DEFAULT_CHAIN_KEY, KNOWN_CHAIN_KEYS, normalizeAttributes, parseTraitPairs, resolveRecommendedTransferValidator, CREATOR_TOKEN_INTERFACE_ID, METADATA_FIELD as F, METADATA_REPRESENTATION as R, indexProgress, isAccepted, AbxIndexTimeoutError, AbxServiceError, } from '@artblocks/abx-sdk';
 import { SelfHostIndexer, SqliteStore } from '@artblocks/abx-indexer';
 import { artContentHash, currentRenderArtifact, generateArt, resolveBaseUrl, startChainWatcher, startTokenApiServer, verifyProject, watchIntervalMs, DEFAULT_PORT, } from '@artblocks/abx-token-api';
 import { ARWEAVE_FREE_UPLOAD_LIMIT, arweaveAddress, arweaveFunding, contentTypeFromPath, hashContent, resolveBackend, turboBalanceForAddress, turboUploadCostUsd, turboUploadWinc } from '@artblocks/abx-storage';
-import { cmdTransfer, cmdMint, cmdSetMinter, cmdSetMaxInvocations, cmdConfigureParam, cmdSetSchema, cmdRetireParam, cmdSetParamHooks, cmdSetDependency, cmdRemoveLastDependency, cmdSetDependencyRegistry, cmdLockDependencies, cmdSetPrimaryPayee, cmdPause, cmdUnpause, cmdRefresh, cmdSetTokenUri, cmdSetContractUri, cmdSetRoyalty, cmdSetField, cmdAttach, cmdLockField, cmdSetRenderer, cmdLockUri, cmdSetAdmin, cmdMinterConfigure, cmdMinterShow, cmdMinterBuy, computeContentPlan, envStagingSender, laneFromFlags, ONCHAIN_PROJECT_SOFT_LIMIT, parseCompress, previewImageStaging, sessionStagingSender, stageImageField, stageImageFieldsBatch, authorshipContractFields, AUTHORSHIP_DEPLOY_FIELDS, } from './ownerops.js';
+import { cmdTransfer, cmdMint, cmdSetMinter, cmdSetMaxInvocations, cmdConfigureParam, cmdSetSchema, cmdRetireParam, cmdSetParamHooks, cmdSetDependency, cmdRemoveLastDependency, cmdSetDependencyRegistry, cmdLockDependencies, cmdSetPrimaryPayee, cmdPause, cmdUnpause, cmdRefresh, cmdSetTokenUri, cmdSetContractUri, cmdSetRoyalty, cmdSetTransferValidator, cmdSetField, cmdAttach, parseTransferValidatorValue, cmdLockField, cmdSetRenderer, cmdLockUri, cmdSetAdmin, cmdMinterConfigure, cmdMinterShow, cmdMinterBuy, computeContentPlan, envStagingSender, laneFromFlags, ONCHAIN_PROJECT_SOFT_LIMIT, parseCompress, previewImageStaging, sessionStagingSender, stageImageField, stageImageFieldsBatch, authorshipContractFields, AUTHORSHIP_DEPLOY_FIELDS, } from './ownerops.js';
 import { openWalletSession, signTx } from './signer.js';
 import { describeRemoteError, listConfiguredRemotes, misnamedRemoteVars, requireRemoteToken, resolveRemote, serviceClient, tokenSourceLabel } from './remote.js';
 import { buildMigrationPlan, repinNodeCustody, verifyParity } from './migrate.js';
@@ -245,6 +245,7 @@ async function main() {
         case 'deploy-effects': return cmdDeployEffects(flags);
         case 'mint-page': return cmdMintPage(rest[0], flags);
         case 'set-royalty': return cmdSetRoyalty(rest[0], flags);
+        case 'set-transfer-validator': return cmdSetTransferValidator(rest[0], rest.slice(1), flags);
         case 'set-field': return cmdSetField(rest[0], flags);
         case 'attach': return cmdAttach(rest, flags);
         case 'lock-field': return cmdLockField(rest[0], flags);
@@ -445,6 +446,7 @@ function deployCommandLine(flags, salt) {
     str('compress', flags.compress);
     str('royalty-bps', flags['royalty-bps']);
     bool('no-mint');
+    str('721c', flags['721c'] === 'true' ? 'recommended' : flags['721c']); // bare --721c ≡ recommended
     str('backend', flags.backend);
     str('gateway', flags.gateway);
     str('bucket', flags.bucket);
@@ -488,6 +490,7 @@ function deploySeriesCommandLine(flags, salt) {
     str('minter', flags.minter);
     str('primary-payee', flags['primary-payee']);
     str('royalty-bps', flags['royalty-bps']);
+    str('721c', flags['721c'] === 'true' ? 'recommended' : flags['721c']); // bare --721c ≡ recommended
     if (flags.sign !== undefined)
         parts.push('--sign');
     if (flags.unsigned !== undefined)
@@ -528,6 +531,7 @@ function deployCodeCommandLine(flags, salt) {
     str('minter', flags.minter);
     str('primary-payee', flags['primary-payee']);
     str('royalty-bps', flags['royalty-bps']);
+    str('721c', flags['721c'] === 'true' ? 'recommended' : flags['721c']); // bare --721c ≡ recommended
     str('backend', flags.backend);
     str('gateway', flags.gateway);
     str('public-base-url', flags['public-base-url']);
@@ -1210,6 +1214,8 @@ async function cmdDeploy(flags, serveAfter) {
     // a wrong-network RPC must still be caught with the clear mismatch message rather than failing
     // opaquely inside predict; `allowUnreachable` keeps a genuinely offline dry-run previewable.
     await assertChainId(CHAIN, { allowUnreachable: dryRun });
+    // --721c (opt-in ERC-721C): absent → zeroAddress, a plain ERC-721 exactly as before.
+    const transferValidator = await resolveTransferValidatorFlag(flags, publicClient, dryRun);
     // `demo` is exempt: its whole job is a zero-argument first token.
     if (!serveAfter)
         assertRealIdentity(flags, { name, symbol, dryRun });
@@ -1458,6 +1464,7 @@ async function cmdDeploy(flags, serveAfter) {
             contractURIRenderer: renderer,
             royaltyReceiver: deployer,
             royaltyBps,
+            transferValidator,
             tokenFields,
             // authorship + rights (artist / license / …) are collection-scope on-chain fields.
             contractFields: authorshipContractFields(flags),
@@ -1512,7 +1519,8 @@ async function cmdDeploy(flags, serveAfter) {
         return;
     }
     // opt-in --confirm: a final y/N before the real send (no-op without --confirm; never blocks scripts)
-    await confirmSend(`About to deploy 1/1 "${name}" (${symbol})${flags.image ? ' with your image' : ' (generative demo art)'}; mint: ${noMint ? 'deferred' : 'token #0 at deploy'}; owner+royalty: your wallet @ ${royaltyBps / 100}%.`, flags);
+    await confirmSend(`About to deploy 1/1 "${name}" (${symbol})${flags.image ? ' with your image' : ' (generative demo art)'}; mint: ${noMint ? 'deferred' : 'token #0 at deploy'}; owner+royalty: your wallet @ ${royaltyBps / 100}%.` +
+        (transferValidator !== zeroAddress ? ` ERC-721C: enrolled at deploy, permanently (validator ${transferValidator}).` : ''), flags);
     if (lane === 'send') {
         // hot lane: the env key is the deployer, known up front.
         const { wallet, account } = makeWalletClient({ chainKey: CHAIN });
@@ -1767,7 +1775,7 @@ async function cmdDeploySeries(flags) {
     if (!flags.dir) {
         throw new Error('abx deploy-series --dir <media-dir> [--count N] [--mint-all | --mint-count N | --no-mint] ' +
             '[--onchain-image [--compress fastlz] | --onchain-uri --backend ipfs|arweave|cloud (image off-chain, JSON on-chain; cloud needs --public-base) | --onchain-uri (inline SVG) | --public-base-url https://… (hosted resolver)] ' +
-            '[--minter 0x..] [--primary-payee 0x..] [--unpaused] --name "Title" --symbol SYM');
+            '[--minter 0x..] [--primary-payee 0x..] [--unpaused] [--721c recommended|0x..] --name "Title" --symbol SYM');
     }
     const dirPath = resolvePath(flags.dir);
     const files = readdirSync(dirPath)
@@ -1790,6 +1798,8 @@ async function cmdDeploySeries(flags) {
     // Catch a wrong-network RPC with the clear mismatch message even on dry-run (which still reads
     // the chain to predict the address); tolerate an unreachable RPC so an offline preview still works.
     await assertChainId(CHAIN, { allowUnreachable: dryRun });
+    // --721c (opt-in ERC-721C): absent → zeroAddress, a plain ERC-721 exactly as before.
+    const transferValidator = await resolveTransferValidatorFlag(flags, publicClient, dryRun);
     // (identity guard already ran above, via the shared assertRealIdentity — before any RPC)
     // Mint timing: mint-all → the whole series; mint-count N → the first N; else deferred.
     const mintCount = flags['mint-all'] !== undefined ? count : flags['mint-count'] ? Number(flags['mint-count']) : 0;
@@ -2004,7 +2014,8 @@ async function cmdDeploySeries(flags) {
                 : onChainUri
                     ? 'inline SVG on-chain'
                     : `off-chain custody → ${baseUrl}`;
-        await confirmSend(`About to deploy Series "${name}" (${symbol}) — ${count} token(s); ${custody}; mint: ${mintCount > 0 ? `${mintCount} at deploy` : 'deferred'}; owner+royalty: your wallet @ ${royaltyBps / 100}%.`, flags);
+        await confirmSend(`About to deploy Series "${name}" (${symbol}) — ${count} token(s); ${custody}; mint: ${mintCount > 0 ? `${mintCount} at deploy` : 'deferred'}; owner+royalty: your wallet @ ${royaltyBps / 100}%.` +
+            (transferValidator !== zeroAddress ? ` ERC-721C: enrolled at deploy, permanently (validator ${transferValidator}).` : ''), flags);
     }
     if (!onchainImage && !remoteEthUpload)
         await buildFields();
@@ -2023,6 +2034,7 @@ async function cmdDeploySeries(flags) {
             contractURIRenderer: renderer,
             royaltyReceiver: deployer,
             royaltyBps,
+            transferValidator,
             maxInvocations: count,
             primaryPayee,
             minter,
@@ -3092,7 +3104,7 @@ const DEPLOY_CODE_FLAGS = new Set([
     ...AUTHORSHIP_DEPLOY_FIELDS.map(([flag]) => flag), // artist · display-notes · artist-links · license
     'image-base', 'attributes-renderer', 'image-renderer',
     // supply + mint + economics
-    'max', 'mint-count', 'mint-all', 'no-mint', 'unpaused', 'minter', 'primary-payee', 'royalty-bps',
+    'max', 'mint-count', 'mint-all', 'no-mint', 'unpaused', 'minter', 'primary-payee', 'royalty-bps', '721c',
     // params + dependencies
     'schema', 'no-seed', 'no-delegation', 'dep', 'dep-registry',
     // serving lane
@@ -3108,6 +3120,7 @@ const DEPLOY_CODE_FLAGS = new Set([
 const SHARED_DEPLOY_FLAGS = [
     'backend', 'endpoint', 'bucket', 'region', 'prefix', 'public-base', 'gateway', 'mode', 'api-url', 'upload-url', 'provider', 'storage-signer',
     'sign', 'unsigned', 'for', 'sign-url-file', 'dry-run', 'confirm', 'yes', 'salt', 'factory', 'bootstrap-factory', 'port', 'renderer', 'public-base-url',
+    '721c', // opt-in ERC-721C enrollment (recommended | 0x…) — every deploy path takes it
 ];
 // A 1/1 `abx deploy` accepts these (see `abx help deploy`). Anything else warns (typo'd/unsupported).
 const DEPLOY_FLAGS = new Set([
@@ -3188,7 +3201,7 @@ async function cmdDeployCode(flags) {
         '[--description "<s>"] [--external-url <url>] [--image-base <url> | --image-renderer 0x..] [--attributes-renderer 0x..] ' +
         '[--max N] [--mint-count N | --mint-all] [--schema key:Type:Auth,…] [--no-seed] ' +
         '[--dep <name@version|0x..>[,…]] [--dep-registry 0x..] ' +
-        '[--unpaused] [--minter 0x..] [--primary-payee 0x..] [--royalty-bps N] [--backend ipfs|arweave] [--dry-run] [--confirm] [--bootstrap-factory]';
+        '[--unpaused] [--minter 0x..] [--primary-payee 0x..] [--royalty-bps N] [--721c recommended|0x..] [--backend ipfs|arweave] [--dry-run] [--confirm] [--bootstrap-factory]';
     const scriptPath = flags.script;
     const codeDir = flags['code-dir'];
     const hasProgram = !!(scriptPath || codeDir); // a JS program (script or built dir)
@@ -3261,6 +3274,8 @@ async function cmdDeployCode(flags) {
     // chain to resolve the factory/renderer and predict the address); tolerate an offline preview.
     await assertChainId(CHAIN, { allowUnreachable: dryRun });
     const chainId = dryRun ? resolveChain(CHAIN).id : (await publicClient.getChainId());
+    // --721c (opt-in ERC-721C): absent → zeroAddress, a plain ERC-721 exactly as before.
+    const transferValidator = await resolveTransferValidatorFlag(flags, publicClient, dryRun);
     step('Trust anchor');
     let factory;
     if (dryRun) {
@@ -3666,7 +3681,8 @@ async function cmdDeployCode(flags) {
             `dependencies: ${deps.length ? deps.map((d) => d.display).join(', ') + (depRegistry ? ` (registry ${depRegistry})` : '') : 'none'}; ` +
             `mint: ${mintCount > 0 ? `${mintCount} at deploy${foldIntoInit ? ' (in the deploy tx)' : ''}` : 'deferred'}; ` +
             `tx count: ${foldIntoInit ? (schemas.length ? '2 (deploy + enable your params)' : '1 (everything in the deploy tx)') : '2 (deploy + setup)'}; ` +
-            `owner+royalty: ${flags.for ? `pinned to ${String(flags.for)}` : flags.sign !== undefined ? '⚠ the wallet you connect (NOT pinned — pass --for to enforce)' : 'your wallet'} @ ${royaltyBps / 100}%.\n` +
+            `owner+royalty: ${flags.for ? `pinned to ${String(flags.for)}` : flags.sign !== undefined ? '⚠ the wallet you connect (NOT pinned — pass --for to enforce)' : 'your wallet'} @ ${royaltyBps / 100}%.` +
+            (transferValidator !== zeroAddress ? ` ERC-721C: enrolled at deploy, permanently (validator ${transferValidator}).` : '') + `\n` +
             `  Surfaces — thumbnail: ${imageDisposition}. traits: ${traitsDisposition}. postparams: ${paramsDisposition}.` +
             ((imageOrphaned || traitsBroken || undeclaredParams.length)
                 ? `\n  ⚠ One or more surfaces resolve to NOTHING marketplaces can see — these are DEPLOY-TIME decisions, not backfillable. Re-run --dry-run after fixing, or pass --yes to ship as-is.`
@@ -3863,6 +3879,7 @@ async function cmdDeployCode(flags) {
         contractURIRenderer: foldIntoInit ? metadataRenderer : zeroAddress,
         royaltyReceiver: owner,
         royaltyBps,
+        transferValidator,
         maxInvocations: BigInt(max),
         primaryPayee: flags['primary-payee'] ?? zeroAddress,
         minter: flags.minter ?? zeroAddress,
@@ -5045,6 +5062,9 @@ const STATE_ABI = [
     { type: 'function', name: 'primaryPayee', stateMutability: 'view', inputs: [], outputs: [{ type: 'address' }] },
     { type: 'function', name: 'tokenURIRenderer', stateMutability: 'view', inputs: [], outputs: [{ type: 'address' }] },
     { type: 'function', name: 'royaltyInfo', stateMutability: 'view', inputs: [{ type: 'uint256' }, { type: 'uint256' }], outputs: [{ type: 'address' }, { type: 'uint256' }] },
+    // ERC-721C (creator token) — ERC-165 advertises ICreatorToken ONLY when enrolled at deploy.
+    { type: 'function', name: 'supportsInterface', stateMutability: 'view', inputs: [{ type: 'bytes4' }], outputs: [{ type: 'bool' }] },
+    { type: 'function', name: 'getTransferValidator', stateMutability: 'view', inputs: [], outputs: [{ type: 'address' }] },
 ];
 async function cmdState(address, flags) {
     if (!address || address.startsWith('--')) {
@@ -5061,7 +5081,7 @@ async function cmdState(address, flags) {
             return undefined; // getter absent (extension not composed) or contract has no code
         }
     };
-    const [owner, totalSupply, nextTokenId, maxInvocations, paused, minter, primaryPayee, renderer, royalty] = await Promise.all([
+    const [owner, totalSupply, nextTokenId, maxInvocations, paused, minter, primaryPayee, renderer, royalty, creatorToken, transferValidator] = await Promise.all([
         read('owner'),
         read('totalSupply'),
         read('nextTokenId'),
@@ -5071,6 +5091,8 @@ async function cmdState(address, flags) {
         read('primaryPayee'),
         read('tokenURIRenderer'),
         read('royaltyInfo', [0n, 10000n]),
+        read('supportsInterface', [CREATOR_TOKEN_INTERFACE_ID]),
+        read('getTransferValidator'),
     ]);
     if (owner === undefined && totalSupply === undefined) {
         throw new Error(`no ABX contract state at ${address} on ${CHAIN} (no code, or not an ABX token).`);
@@ -5095,6 +5117,11 @@ async function cmdState(address, flags) {
     if (royalty)
         info(`royalty        ${Number(royalty[1]) / 100}% → ${royalty[0]}`);
     info(`renderer       ${renderer && renderer !== zeroAddress ? `on-chain (${renderer})` : dim('off-chain (stored URI base / override)')}`);
+    // ERC-721C: shown ONLY for an enrolled collection — an unenrolled token is a plain ERC-721
+    // (indistinguishable from a pre-721C token) and shows nothing new here.
+    if (creatorToken) {
+        info(`721C validator ${transferValidator && transferValidator !== zeroAddress ? transferValidator : `${c.orange}suspended${c.reset} ${dim('(zero — enforcement off; re-enable with `abx set-transfer-validator`)')}`}`);
+    }
     // The PostParam surface, read straight from chain: `paramSchemaKeys()` is the DECLARED (governed)
     // set — append-only, and it includes keys declared but never yet written, which nothing off-chain
     // could otherwise discover — and `contractParamKeys()` is the collection-scope set values. Both
@@ -6041,6 +6068,10 @@ const COMMAND_HELP = {
     ${g('--compress')} none|fastlz|gzip   for --onchain-image (default none): ${g('fastlz')} = on-chain decode (stays renderable);
                             ${g('gzip')} = smaller but off-chain decode only
     --royalty-bps <0-10000>   default 500 (5%)
+    ${g('--721c')} [recommended|0x..]   opt-in ERC-721C: enroll at deploy, PERMANENTLY, with that transfer validator
+                            (${g('recommended')} = OpenSea's validator for creator-fee enforcement — only owner-initiated
+                            transfers + authorized sales move the token). Absent = plain ERC-721, forever (the default).
+                            Manage later with ${g('abx set-transfer-validator')} (re-point or suspend; never un-enroll).
     ${g('--no-mint')}             deploy without minting (warm the resolver, then ${g('abx mint')})
     --salt 0x..<64hex>    deploy to a reserved / vanity address (see ${g('abx predict')})
     --public-base-url <url>   bake a public resolver URL on-chain (off-chain custody REQUIRES a public URL; localhost is refused)
@@ -6070,6 +6101,8 @@ const COMMAND_HELP = {
                           a huge collection should set traits post-deploy via ${g('abx set-field')} under a gas budget.
     --minter 0x..         authorize a single minting contract   --primary-payee 0x..   primary-sale payout
     --unpaused            open the mint at deploy (default: paused ⇒ owner-only until ${g('abx unpause')})
+    ${g('--721c')} [recommended|0x..]   opt-in ERC-721C: enroll at deploy, PERMANENTLY, with that transfer validator (absent = plain
+                          ERC-721 forever). ${g('recommended')} = OpenSea's creator-fee-enforcement validator. Manage: ${g('abx set-transfer-validator')}
     --salt 0x.. · --backend … (storage override) · ${g('--storage-signer')} arweave|eth (who pays Turbo uploads) · signing: ${g('--send')} · ${g('--sign')} · ${g('--unsigned')}
     ${g('--dry-run')}             preview (address · per-token plan · custody · mint plan) WITHOUT sending or storing
                             ${dim('(a dry-run needs a deployer to compute the address — pass --for 0x.. if no signing key is set)')}
@@ -6151,6 +6184,8 @@ const COMMAND_HELP = {
                           a CDN-served record is the normal production path, on-chain bytes are the durability floor).
     --max N               supply cap (default 16)   mint timing: ${g('--mint-all')} · ${g('--mint-count')} N · (default: defer, then ${g('abx mint')})
     --no-seed             opt out of the canonical mint-time seed (seeds settle once assigned; curated pre-set seeds win)
+    ${g('--721c')} [recommended|0x..]   opt-in ERC-721C: enroll at deploy, PERMANENTLY, with that transfer validator (absent = plain
+                          ERC-721 forever). ${g('recommended')} = OpenSea's creator-fee-enforcement validator. Manage: ${g('abx set-transfer-validator')}
     --backend ipfs|arweave   directory-mode custody for the build upload   ${g('--unpaused')} · --minter 0x.. · --primary-payee 0x..
     ${dim('a fixed-price PRIMARY SALE is set up AFTER deploy, not by these flags: ')}${g('abx minter configure <addr> --price <eth>')}${dim(' → ')}${g('set-minter')}${dim(' → ')}${g('set-primary-payee')}${dim(' → ')}${g('unpause')}${dim(' (see `abx minter --help`). --minter/--primary-payee here only pre-authorize an already-known minter.')}
     signing: ${g('--send')} (default) · ${g('--sign')} · ${g('--unsigned')} ${dim('(needs --for 0x..)')}   ${g('--bootstrap-factory')} ${dim('(private chains/sandboxes only)')}
@@ -6255,7 +6290,8 @@ const COMMAND_HELP = {
     signing: ${g('--send')} (default) · ${g('--sign')} · ${g('--unsigned')}`,
     state: `
   ${bold('abx state')} <address> ${dim('— read-only, on-chain operational snapshot (no tx, no local index).')}
-    Shows owner · supply (minted / max, nextTokenId) · paused · minter · primary payee · royalty · renderer.
+    Shows owner · supply (minted / max, nextTokenId) · paused · minter · primary payee · royalty · renderer
+    (+ the 721C transfer validator, for a collection that enrolled at deploy — plain ERC-721s show nothing new).
     Series-only fields are shown for a Series; a 1/1 shows just supply + royalty + renderer.
     Handy before/after owner ops (mint · pause/unpause · set-minter · set-primary-payee).
     ${dim('state = what the CHAIN says. For who is SERVING it and how fresh that is, see `abx status`.')}`,
@@ -6310,6 +6346,14 @@ const COMMAND_HELP = {
     deploy to Vercel). ${dim('Offer this after a sale is live (configure → set-minter → set-primary-payee → unpause).')}`,
     'set-royalty': `
   ${bold('abx set-royalty')} <address> --bps <0-10000> [--receiver 0x..] ${dim('— change the royalty. Sends a tx.')}`,
+    'set-transfer-validator': `
+  ${bold('abx set-transfer-validator')} <address> <0x..|none|recommended> ${dim('— manage an ERC-721C collection\'s transfer validator. Owner-only. Sends a tx.')}
+    <0x..>                re-point enforcement at that validator (must be a DEPLOYED contract — checked before any gas)
+    ${g('none')}                  suspend enforcement (validator → address(0); the collection STAYS enrolled)
+    ${g('recommended')}           the chain's recommended validator (OpenSea's, for creator-fee enforcement)
+    ${dim('Only for a collection that enrolled AT DEPLOY (--721c on the deploy commands) — a plain ERC-721 is refused')}
+    ${dim('up front: enrollment is a deploy-time decision and can never be added (or fully removed) later.')}
+    signing: ${g('--send')} (default) · ${g('--sign')} · ${g('--unsigned')} · ${g('--dry-run')} preview (encodes + shows the tx, sends nothing)`,
     attach: `
   ${bold('abx attach')} <address> <key> <ipfs://… | ar://… | https://…> ${dim('— attach a named file to a token. Sends a tx.')}
     ${dim('The data-plane verb: the file joins the token\'s served')} ${bold('artifacts')} ${dim('manifest as {key, mimeType, uri}.')}
@@ -6543,6 +6587,7 @@ function help() {
     ${g('abx set-contract-uri')} <addr> re-point the collection URI        --uri <url>
     ${g('abx migrate')} <addr>       move off-chain state to a NEW resolver (verifies parity; no cutover)   --from <old> --to <new>
     ${g('abx set-royalty')} <addr>  change royalty   --bps <0-10000> [--receiver 0x..]
+    ${g('abx set-transfer-validator')} <addr> <0x..|none|recommended>   manage an ERC-721C collection's validator (enrolled-at-deploy only)
     ${g('abx attach')} <addr> <key> <ipfs://…|ar://…|https://…>   attach a named file → the token's ${bold('artifacts')} manifest (data plane)
     ${g('abx set-field')} <addr>    set an on-chain metadata field (low-level)   --field <name> (--text "…" | --value 0x..) [--collection]
     ${g('abx lock-field')} <addr>   freeze a field forever   --field <name> [--collection]
@@ -6576,6 +6621,48 @@ function help() {
   ${dim('abx checks npm for a newer release (every 6h, notify-only). Silence with')} ${g('ABX_NO_UPDATE_CHECK=1')} ${dim('or')} ${g('--no-update-check')}${dim('.')}
 `);
 }
+/**
+ * Resolve `--721c` into the InitParams `transferValidator`. Absent → `zeroAddress`: a plain
+ * ERC-721, byte-for-byte the pre-721C deploy — no prompts, no output, no mention of 721C.
+ * `--721c` / `--721c recommended` → the per-chain recommended validator (refused, naming the
+ * chains that have one, when the manifest has no entry); `--721c 0x…` → checksum-validated AND
+ * pre-checked for code on this chain (the factory would revert `InvalidTransferValidator()` —
+ * surface it before any upload/staging/gas). When enrolling, prints the one plain statement of
+ * what enforcement means — once, adapted to the chosen validator.
+ */
+async function resolveTransferValidatorFlag(flags, publicClient, dryRun) {
+    const raw = flags['721c'];
+    if (raw === undefined)
+        return zeroAddress;
+    const chainId = resolveChain(CHAIN).id;
+    const validator = parseTransferValidatorValue(raw, { chainId, chainLabel: CHAIN });
+    // Has-code precheck — for the recommended constant too (presence on THIS chain is the fact that
+    // matters; a sandbox/private chain won't have it). A dry run tolerates an unreachable RPC (it
+    // sends nothing); a real deploy refuses to enroll blind.
+    let code;
+    try {
+        code = await publicClient.getCode({ address: validator });
+    }
+    catch (err) {
+        if (!dryRun)
+            throw new Error(`--721c: couldn't verify the validator has code at ${validator} (${err.message}) — refusing to enroll blind; retry when the RPC answers.`);
+        code = null; // offline preview — note it below
+    }
+    if (code === null) {
+        info(dim(`--721c: RPC unreachable, so the validator code check is deferred — a real deploy verifies ${validator} has code first.`));
+    }
+    else if (!code || code === '0x') {
+        const rec = resolveRecommendedTransferValidator(chainId);
+        throw new Error(`--721c: no contract code at ${validator} on ${CHAIN} — the deploy would revert InvalidTransferValidator(). ` +
+            `A transfer validator must be a DEPLOYED contract on this chain` +
+            (rec && rec !== validator ? ` (the known-good one: --721c recommended → ${rec})` : '') + `.`);
+    }
+    // The one plain statement — printed once, only when enrolling. Never appears un-enrolled.
+    info(validator === resolveRecommendedTransferValidator(chainId)
+        ? `ERC-721C enforcement: only owner-initiated transfers and OpenSea-authorized sales will transfer; other marketplaces/operators are blocked. Manage with \`abx set-transfer-validator\`.`
+        : `ERC-721C enforcement: every non-mint transfer is checked by validator ${validator} — its policy decides which operators may transfer. Manage with \`abx set-transfer-validator\`.`);
+    return validator;
+}
 /** Validate an explicit --salt (a 32-byte hex). Undefined when absent. */
 function parseSaltFlag(raw) {
     if (!raw || raw === 'true')