@artblocks/abx-cli 0.1.0-alpha.2 → 0.1.0-alpha.21

package/dist/scaffold.js

@@ -0,0 +1,52 @@
+/**
+ * Copying the bundled renderer scaffold onto a creator's disk.
+ *
+ * This lives in its own module because the inline version of it shipped broken for six releases
+ * (alpha.9 → alpha.14) and could not be reproduced in a dev checkout. `abx scaffold-renderer`
+ * created the directory, printed the whole success walkthrough, exited 0, and wrote **zero files** —
+ * for every user, on every invocation form, while working perfectly for us.
+ *
+ * The cause was a path filter that judged absolute paths:
+ *
+ *     filter: (s) => !/(^|\/)(out|cache|dependencies|broadcast|node_modules)(\/|$)/.test(s)
+ *
+ * `cpSync` hands `filter` ABSOLUTE source paths. An installed CLI lives at
+ * `…/node_modules/@artblocks/abx-cli/assets/renderer-scaffold`, so that pattern matched the source
+ * ROOT — `cpSync` skips a directory's entire subtree when the directory itself is filtered out, and
+ * silently copies nothing rather than erroring. A dev checkout's path
+ * (`…/plan/abx/packages/cli/assets/…`) contains no `node_modules`, so every test we ran passed.
+ *
+ * Two rules follow, and the tests in `test/scaffold.test.ts` pin both:
+ *   1. Judge paths RELATIVE to the source root, never the absolute string.
+ *   2. Never report success without asserting the output actually landed.
+ */
+import { cpSync, existsSync, mkdirSync } from 'node:fs';
+import { join, relative } from 'node:path';
+/** Build/dependency dirs that must never ride along into a fresh scaffold. Matched against the
+ *  path RELATIVE to the scaffold root — see the module note. */
+const SKIP_DIR = /^(out|cache|dependencies|broadcast|node_modules)(\/|$)/;
+/** The file whose presence means the copy genuinely happened (not just `mkdir`). */
+export const SCAFFOLD_ANCHOR = join('src', 'MyRenderer.sol');
+/**
+ * Copy the scaffold at `src` into `dir`, omitting build/dependency dirs.
+ *
+ * Throws if the copy produced no files — the caller must not print a success banner over an empty
+ * directory. Returns nothing on success; the anchor file is guaranteed to exist.
+ */
+export function copyRendererScaffold(src, dir) {
+    mkdirSync(dir, { recursive: true });
+    cpSync(src, dir, {
+        recursive: true,
+        filter: (s) => {
+            // Normalise separators so the same pattern holds on Windows.
+            const rel = relative(src, s).split(/[/\\]/).join('/');
+            return rel === '' || !SKIP_DIR.test(rel);
+        },
+    });
+    if (!existsSync(join(dir, SCAFFOLD_ANCHOR))) {
+        throw new Error(`scaffold copy wrote no files into ${dir} (expected ${SCAFFOLD_ANCHOR}) — nothing was written, ` +
+            `so don't build here. Scaffold source: ${src}. ` +
+            `Please report this along with your install path: https://abx.docs.artblocks.io`);
+    }
+}
+//# sourceMappingURL=scaffold.js.map

package/dist/scaffold.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scaffold.js","sourceRoot":"","sources":["../src/scaffold.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAC,MAAM,SAAS,CAAC;AACtD,OAAO,EAAC,IAAI,EAAE,QAAQ,EAAC,MAAM,WAAW,CAAC;AAEzC;gEACgE;AAChE,MAAM,QAAQ,GAAG,wDAAwD,CAAC;AAE1E,oFAAoF;AACpF,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,EAAE,gBAAgB,CAAC,CAAC;AAE7D;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAW,EAAE,GAAW;IAC3D,SAAS,CAAC,GAAG,EAAE,EAAC,SAAS,EAAE,IAAI,EAAC,CAAC,CAAC;IAClC,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE;QACf,SAAS,EAAE,IAAI;QACf,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE;YACZ,6DAA6D;YAC7D,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACtD,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3C,CAAC;KACF,CAAC,CAAC;IACH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CACb,qCAAqC,GAAG,cAAc,eAAe,2BAA2B;YAC9F,yCAAyC,GAAG,IAAI;YAChD,gFAAgF,CACnF,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/schema.d.ts

@@ -1,12 +1,29 @@
-import type { Hex } from 'viem';
+import type { Address, Hex } from 'viem';
+/** The `--schema` type/auth/format catalog, shown wherever the CLI nudges `--schema`. Kept accurate
+ *  to the on-chain enums (PARAM_TYPES / AUTH_OPTIONS) + the Select-options / Range-bounds format —
+ *  the old hint advertised non-existent `Anyone`/`Admin` auth legs. Used by both `deploy-code`
+ *  (commands/deploy.ts) and `inspect` (commands/reads.ts), so it lives here beside the rest of the
+ *  `--schema` machinery rather than in either command module. */
+export declare const SCHEMA_CATALOG: string;
 export interface ParsedSchema {
     key: string;
     paramType: number;
     auth: number;
+    /** Required by (and only valid for) an Address-bearing auth leg; the contract pairs them strictly. */
+    authAddress: Address;
+    /** Unix seconds after which the VALUE can no longer change. 0 = never locks. A timestamp in the
+     *  past locks it immediately and permanently — that is the supported way to retire a parameter. */
+    lockAfter: number;
     min: Hex;
     max: Hex;
     selectOptions: string[];
 }
+/**
+ * A point in time for `lock=`: unix seconds, an ISO date, or `now` (which means "immediately and
+ * forever" — the retire idiom). Reuses the Timestamp encoder so `lock=2026-12-31` parses exactly
+ * like a `Timestamp[..]` bound does; one date grammar for the whole flag.
+ */
+export declare function parseWhen(raw: string): number;
 export declare function parseSchemaSpec(spec: string): ParsedSchema;
 /** Parse a full `--schema` value: comma-separated specs. */
 export declare function parseSchemaSpecs(raw: string | undefined): ParsedSchema[];

package/dist/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAC,GAAG,EAAC,MAAM,MAAM,CAAC;AAO9B,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,GAAG,CAAC;IACT,GAAG,EAAE,GAAG,CAAC;IACT,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAQD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CAyD1D;AAED,4DAA4D;AAC5D,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,YAAY,EAAE,CAMxE;AAED,+EAA+E;AAC/E,wBAAgB,cAAc,CAAC,CAAC,EAAE,YAAY,GAAG,MAAM,CAWtD"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAC,OAAO,EAAE,GAAG,EAAC,MAAM,MAAM,CAAC;AAIvC;;;;iEAIiE;AACjE,eAAO,MAAM,cAAc,QAI+B,CAAC;AAK3D,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,sGAAsG;IACtG,WAAW,EAAE,OAAO,CAAC;IACrB;uGACmG;IACnG,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,GAAG,CAAC;IACT,GAAG,EAAE,GAAG,CAAC;IACT,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAID;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAU7C;AAQD,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CA2F1D;AAED,4DAA4D;AAC5D,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,YAAY,EAAE,CAMxE;AAED,+EAA+E;AAC/E,wBAAgB,cAAc,CAAC,CAAC,EAAE,YAAY,GAAG,MAAM,CAatD"}

package/dist/schema.js

@@ -19,10 +19,40 @@
  * outer delimiters appear there. Omit the bracket on a Range → unbounded (min=max=0, the prior
  * behavior). A Select with no bracket, or a bracket on a type that takes none, is a clear error.
  */
-import { PARAM_TYPES, AUTH_OPTIONS, encodeScalarParam } from '@artblocks/abx-sdk';
+import { PARAM_TYPES, AUTH_OPTIONS, decodeScalarParam, encodeScalarParam } from '@artblocks/abx-sdk';
 const ZERO32 = `0x${'0'.repeat(64)}`;
+/** The `--schema` type/auth/format catalog, shown wherever the CLI nudges `--schema`. Kept accurate
+ *  to the on-chain enums (PARAM_TYPES / AUTH_OPTIONS) + the Select-options / Range-bounds format —
+ *  the old hint advertised non-existent `Anyone`/`Admin` auth legs. Used by both `deploy-code`
+ *  (commands/deploy.ts) and `inspect` (commands/reads.ts), so it lives here beside the rest of the
+ *  `--schema` machinery rather than in either command module. */
+export const SCHEMA_CATALOG = 'Types: Bool·Select·Uint256Range·Int256Range·DecimalRange·HexColor·Timestamp·String·Bytes; ' +
+    'Auth: Artist·TokenOwner·Address (or the Or-combos, e.g. ArtistOrTokenOwner). ' +
+    'Select needs options — key:Select[A|B|C]:Auth; a Range takes bounds — key:Uint256Range[0..100]:Auth. ' +
+    'A palette collectors set = palette:HexColor:TokenOwner';
 /** The types that accept a `[min..max]` bound (the contract's min/max fields are meaningful here). */
 const BOUNDED_TYPES = new Set(['Uint256Range', 'Int256Range', 'DecimalRange', 'Timestamp']);
+const ZERO_ADDR = '0x0000000000000000000000000000000000000000';
+/**
+ * A point in time for `lock=`: unix seconds, an ISO date, or `now` (which means "immediately and
+ * forever" — the retire idiom). Reuses the Timestamp encoder so `lock=2026-12-31` parses exactly
+ * like a `Timestamp[..]` bound does; one date grammar for the whole flag.
+ */
+export function parseWhen(raw) {
+    const t = raw.trim();
+    if (t === '')
+        throw new Error('lock= needs a value (unix seconds, an ISO date, or `now`)');
+    // `now` locks on the next block. Anything already past is equally permanent — the contract's test
+    // is `block.timestamp > lockAfter`.
+    if (t.toLowerCase() === 'now')
+        return Math.floor(Date.now() / 1000) - 1;
+    const secs = Number(BigInt(encodeScalarParam('Timestamp', t, []).value));
+    if (!Number.isSafeInteger(secs) || secs < 0)
+        throw new Error(`bad time "${raw}"`);
+    if (secs > 0xffffffffffff)
+        throw new Error(`"${raw}" exceeds the uint48 lock field`);
+    return secs;
+}
 /** min ≤ max in the type's own ordering (mirrors AbxParamsLib's on-chain check, but earlier + clearer). */
 function orderedBounds(typeName, min, max) {
     if (typeName === 'Int256Range')
@@ -31,22 +61,54 @@ function orderedBounds(typeName, min, max) {
 }
 export function parseSchemaSpec(spec) {
     const parts = spec.split(':');
-    if (parts.length !== 3) {
-        throw new Error(`--schema "${spec}" — expected key:Type:Auth (a Select adds options: key:Select[A|B|C]:Auth; a Range adds bounds: key:Uint256Range[0..100]:Auth).`);
+    if (parts.length !== 3 && parts.length !== 4) {
+        throw new Error(`--schema "${spec}" — expected key:Type:Auth (a Select adds options: key:Select[A|B|C]:Auth; a Range adds bounds: key:Uint256Range[0..100]:Auth; add :lock=<when> to freeze the value after a date).`);
+    }
+    const [key, typeToken, authToken, lockToken] = parts;
+    // A 4th field is ONLY ever `lock=…`. Anything else there means a colon leaked out of a label or
+    // bound and split the spec wrong — report that as the shape error it is, rather than letting the
+    // mangled fragments fail later with a confusing "malformed type".
+    if (lockToken !== undefined && !/^lock=/.test(lockToken)) {
+        throw new Error(`--schema "${spec}" — expected key:Type:Auth (with an optional 4th field, lock=<when>). ` +
+            `Got ${parts.length} colon-separated fields: a ':' inside a Select option or a bound splits the spec — use simpler labels.`);
     }
-    const [key, typeToken, authName] = parts;
     const m = typeToken.match(/^([A-Za-z0-9]+)(?:\[(.*)\])?$/);
     if (!key || !m)
         throw new Error(`--schema "${spec}" — malformed type "${typeToken}".`);
     const typeName = m[1];
     const bracket = m[2]; // undefined when there is no [...]
     const paramType = PARAM_TYPES.indexOf(typeName);
+    // An Address-bearing leg names its holder inline: `Address(0x…)`, `ArtistOrAddress(0x…)`. The
+    // contract pairs auth and authAddress strictly (one without the other reverts InvalidParamSchema),
+    // so they belong in one token rather than a second flag that could be forgotten.
+    const am = authToken.match(/^([A-Za-z]+)(?:\((0x[0-9a-fA-F]{40})\))?$/);
+    if (!am)
+        throw new Error(`--schema "${spec}" — malformed auth "${authToken}" (an Address leg looks like Address(0x…)).`);
+    const authName = am[1];
     const auth = AUTH_OPTIONS.indexOf(authName);
     if (paramType < 0 || auth < 0) {
         throw new Error(`--schema "${spec}" — Type ∈ {${PARAM_TYPES.join('|')}}, Auth ∈ {${AUTH_OPTIONS.join('|')}}.`);
     }
-    if (AUTH_OPTIONS[auth].includes('Address')) {
-        throw new Error(`--schema "${spec}" — Address-auth legs need an authAddress; set that schema post-deploy via the contract.`);
+    const wantsAddress = AUTH_OPTIONS[auth].includes('Address');
+    const authAddress = (am[2] ?? ZERO_ADDR);
+    if (wantsAddress && authAddress === ZERO_ADDR) {
+        throw new Error(`--schema "${spec}" — ${authName} names a specific writer, so it needs one: ${key}:${typeToken}:${authName}(0xYourAddress). ` +
+            `A CONTRACT may hold this leg — that is how open/multi-party participation is built (a controller applies its own rules and forwards the write).`);
+    }
+    if (!wantsAddress && am[2]) {
+        throw new Error(`--schema "${spec}" — ${authName} takes no address; only an Address-bearing leg does.`);
+    }
+    let lockAfter = 0;
+    if (lockToken !== undefined) {
+        const lm = lockToken.match(/^lock=(.*)$/);
+        if (!lm)
+            throw new Error(`--schema "${spec}" — the 4th field must be lock=<when> (unix seconds, an ISO date, or "now").`);
+        try {
+            lockAfter = parseWhen(lm[1]);
+        }
+        catch (e) {
+            throw new Error(`--schema "${spec}" — ${e.message}`);
+        }
     }
     let min = ZERO32;
     let max = ZERO32;
@@ -85,7 +147,7 @@ export function parseSchemaSpec(spec) {
             throw new Error(`--schema "${spec}" — min must be ≤ max (got ${mm[0].trim()}..${mm[1].trim()}).`);
         }
     }
-    return { key, paramType, auth, min, max, selectOptions };
+    return { key, paramType, auth, authAddress, lockAfter, min, max, selectOptions };
 }
 /** Parse a full `--schema` value: comma-separated specs. */
 export function parseSchemaSpecs(raw) {
@@ -103,23 +165,12 @@ export function describeSchema(s) {
     if (type === 'Select')
         detail = `[${s.selectOptions.join(' | ')}]`;
     else if (s.min !== ZERO32 || s.max !== ZERO32) {
-        const lo = decodeBound(type, s.min);
-        const hi = decodeBound(type, s.max);
+        const lo = decodeScalarParam(type, s.min);
+        const hi = decodeScalarParam(type, s.max);
         detail = `[${lo}..${hi}]`;
     }
-    return `${s.key}:${type}${detail}:${auth}`;
-}
-function decodeBound(typeName, v) {
-    // Cheap display-only decode (the SDK's decodeScalarParam is the canonical one, but this keeps the
-    // readout dependency-light for the two Range cases that matter in a bound).
-    if (typeName === 'Int256Range')
-        return BigInt.asIntN(256, BigInt(v)).toString();
-    if (typeName === 'DecimalRange') {
-        const scaled = BigInt(v);
-        const whole = scaled / 10000000000n;
-        const frac = (scaled % 10000000000n).toString().padStart(10, '0').replace(/0+$/, '');
-        return frac ? `${whole}.${frac}` : `${whole}`;
-    }
-    return BigInt(v).toString();
+    const who = s.authAddress && s.authAddress !== ZERO_ADDR ? `(${s.authAddress})` : '';
+    const lock = s.lockAfter ? `:lock=${new Date(s.lockAfter * 1000).toISOString().slice(0, 19)}Z` : '';
+    return `${s.key}:${type}${detail}:${auth}${who}${lock}`;
 }
 //# sourceMappingURL=schema.js.map

package/dist/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAC,WAAW,EAAE,YAAY,EAAE,iBAAiB,EAAqB,MAAM,oBAAoB,CAAC;AAGpG,MAAM,MAAM,GAAG,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAS,CAAC;AAE5C,sGAAsG;AACtG,MAAM,aAAa,GAAG,IAAI,GAAG,CAAS,CAAC,cAAc,EAAE,aAAa,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC;AAWpG,2GAA2G;AAC3G,SAAS,aAAa,CAAC,QAAgB,EAAE,GAAQ,EAAE,GAAQ;IACzD,IAAI,QAAQ,KAAK,aAAa;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1G,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,aAAa,IAAI,iIAAiI,CACnJ,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,GAAG,KAAK,CAAC;IACzC,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC3D,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,uBAAuB,SAAS,IAAI,CAAC,CAAC;IACvF,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACtB,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,mCAAmC;IACzD,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,QAAyB,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,QAAyC,CAAC,CAAC;IAC7E,IAAI,SAAS,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,eAAe,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjH,CAAC;IACD,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,0FAA0F,CAAC,CAAC;IAC/H,CAAC;IAED,IAAI,GAAG,GAAG,MAAM,CAAC;IACjB,IAAI,GAAG,GAAG,MAAM,CAAC;IACjB,IAAI,aAAa,GAAa,EAAE,CAAC;IAEjC,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,mCAAmC,GAAG,uCAAuC,QAAQ,GAAG,CAAC,CAAC;QAC7H,CAAC;QACD,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,8CAA8C,GAAG,kBAAkB,QAAQ,GAAG,CAAC,CAAC;QACnH,CAAC;QACD,IAAI,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,MAAM,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,mCAAmC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnG,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;YAC9B,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,oDAAoD,CAAC,yBAAyB,CAAC,CAAC;QACzI,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,OAAO,QAAQ,yBAAyB,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;QACxJ,CAAC;QACD,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,mCAAmC,GAAG,IAAI,QAAQ,YAAY,QAAQ,GAAG,CAAC,CAAC;QACjI,IAAI,CAAC;YACH,GAAG,GAAG,iBAAiB,CAAC,QAAyB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC;YAC3E,GAAG,GAAG,iBAAiB,CAAC,QAAyB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC;QAC7E,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,kBAAmB,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,8BAA8B,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACpG,CAAC;IACH,CAAC;IAED,OAAO,EAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,aAAa,EAAC,CAAC;AACzD,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,gBAAgB,CAAC,GAAuB;IACtD,OAAO,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;SACrB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,eAAe,CAAC,CAAC;AAC1B,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,cAAc,CAAC,CAAe;IAC5C,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,IAAI,KAAK,QAAQ;QAAE,MAAM,GAAG,IAAI,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;SAC9D,IAAI,CAAC,CAAC,GAAG,KAAK,MAAM,IAAI,CAAC,CAAC,GAAG,KAAK,MAAM,EAAE,CAAC;QAC9C,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;QACpC,MAAM,GAAG,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC;IAC5B,CAAC;IACD,OAAO,GAAG,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB,EAAE,CAAM;IAC3C,kGAAkG;IAClG,4EAA4E;IAC5E,IAAI,QAAQ,KAAK,aAAa;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAChF,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,KAAK,GAAG,MAAM,GAAG,YAAe,CAAC;QACvC,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,YAAe,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACxF,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,EAAE,CAAC;IAChD,CAAC;IACD,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;AAC9B,CAAC"}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,EAAC,WAAW,EAAE,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAqB,MAAM,oBAAoB,CAAC;AAGvH,MAAM,MAAM,GAAG,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAS,CAAC;AAE5C;;;;iEAIiE;AACjE,MAAM,CAAC,MAAM,cAAc,GACzB,4FAA4F;IAC5F,+EAA+E;IAC/E,uGAAuG;IACvG,wDAAwD,CAAC;AAE3D,sGAAsG;AACtG,MAAM,aAAa,GAAG,IAAI,GAAG,CAAS,CAAC,cAAc,EAAE,aAAa,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC;AAgBpG,MAAM,SAAS,GAAG,4CAAuD,CAAC;AAE1E;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACrB,IAAI,CAAC,KAAK,EAAE;QAAG,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC5F,kGAAkG;IAClG,oCAAoC;IACpC,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACxE,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACzE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,GAAG,GAAG,CAAC,CAAC;IAClF,IAAI,IAAI,GAAG,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,IAAI,GAAG,iCAAiC,CAAC,CAAC;IACrF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2GAA2G;AAC3G,SAAS,aAAa,CAAC,QAAgB,EAAE,GAAQ,EAAE,GAAQ;IACzD,IAAI,QAAQ,KAAK,aAAa;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1G,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CACb,aAAa,IAAI,oLAAoL,CACtM,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,GAAG,KAAK,CAAC;IACrD,gGAAgG;IAChG,iGAAiG;IACjG,kEAAkE;IAClE,IAAI,SAAS,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CACb,aAAa,IAAI,wEAAwE;YACvF,OAAO,KAAK,CAAC,MAAM,wGAAwG,CAC9H,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAC;IAC3D,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,uBAAuB,SAAS,IAAI,CAAC,CAAC;IACvF,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACtB,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,mCAAmC;IACzD,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,QAAyB,CAAC,CAAC;IACjE,8FAA8F;IAC9F,mGAAmG;IACnG,iFAAiF;IACjF,MAAM,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACxE,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,uBAAuB,SAAS,6CAA6C,CAAC,CAAC;IACzH,MAAM,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IACvB,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,QAAyC,CAAC,CAAC;IAC7E,IAAI,SAAS,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,eAAe,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjH,CAAC;IACD,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS,CAAY,CAAC;IACpD,IAAI,YAAY,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,aAAa,IAAI,OAAO,QAAQ,8CAA8C,GAAG,IAAI,SAAS,IAAI,QAAQ,mBAAmB;YAC3H,iJAAiJ,CACpJ,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,OAAO,QAAQ,sDAAsD,CAAC,CAAC;IAC1G,CAAC;IAED,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAC1C,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,8EAA8E,CAAC,CAAC;QAC1H,IAAI,CAAC;YACH,SAAS,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,OAAQ,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,IAAI,GAAG,GAAG,MAAM,CAAC;IACjB,IAAI,GAAG,GAAG,MAAM,CAAC;IACjB,IAAI,aAAa,GAAa,EAAE,CAAC;IAEjC,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,mCAAmC,GAAG,uCAAuC,QAAQ,GAAG,CAAC,CAAC;QAC7H,CAAC;QACD,aAAa,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACxD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC;YACtE,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,8CAA8C,GAAG,kBAAkB,QAAQ,GAAG,CAAC,CAAC;QACnH,CAAC;QACD,IAAI,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,MAAM,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,mCAAmC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnG,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;YAC9B,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,oDAAoD,CAAC,yBAAyB,CAAC,CAAC;QACzI,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,OAAO,QAAQ,yBAAyB,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;QACxJ,CAAC;QACD,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,mCAAmC,GAAG,IAAI,QAAQ,YAAY,QAAQ,GAAG,CAAC,CAAC;QACjI,IAAI,CAAC;YACH,GAAG,GAAG,iBAAiB,CAAC,QAAyB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC;YAC3E,GAAG,GAAG,iBAAiB,CAAC,QAAyB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC;QAC7E,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,kBAAmB,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,aAAa,IAAI,8BAA8B,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACpG,CAAC;IACH,CAAC;IAED,OAAO,EAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,EAAE,aAAa,EAAC,CAAC;AACjF,CAAC;AAED,4DAA4D;AAC5D,MAAM,UAAU,gBAAgB,CAAC,GAAuB;IACtD,OAAO,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;SACrB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,eAAe,CAAC,CAAC;AAC1B,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,cAAc,CAAC,CAAe;IAC5C,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAClC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,IAAI,KAAK,QAAQ;QAAE,MAAM,GAAG,IAAI,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;SAC9D,IAAI,CAAC,CAAC,GAAG,KAAK,MAAM,IAAI,CAAC,CAAC,GAAG,KAAK,MAAM,EAAE,CAAC;QAC9C,MAAM,EAAE,GAAG,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,EAAE,GAAG,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;QAC1C,MAAM,GAAG,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC;IAC5B,CAAC;IACD,MAAM,GAAG,GAAG,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACrF,MAAM,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACpG,OAAO,GAAG,CAAC,CAAC,GAAG,IAAI,IAAI,GAAG,MAAM,IAAI,IAAI,GAAG,GAAG,GAAG,IAAI,EAAE,CAAC;AAC1D,CAAC"}

package/dist/served.d.ts

@@ -0,0 +1,30 @@
+export interface ServedTokenUri {
+    /** The URL followed, verbatim from the contract. `null` when the tokenURI isn't fetchable. */
+    url: string | null;
+    /** Why there was nothing to fetch, when there was nothing to fetch. */
+    skipped: string | null;
+    status: number | null;
+    contentType: string | null;
+    /** The response body as text, untruncated. `null` when the request never completed. */
+    body: string | null;
+    /** Transport-level failure (DNS, refused, timeout) — distinct from a served error status. */
+    error?: string;
+}
+export interface FetchServedOptions {
+    timeoutMs?: number;
+    fetchFn?: typeof fetch;
+}
+/**
+ * Follow a `tokenURI` and return what came back.
+ *
+ * A `data:` URI is **not** an error here — it IS the document, and a fully-on-chain project's whole
+ * point is that there is no server to ask. Saying so plainly is the honest answer; reporting it as a
+ * failure would punish the strongest configuration the protocol offers.
+ */
+export declare function fetchServedTokenUri(uri: string, opts?: FetchServedOptions): Promise<ServedTokenUri>;
+/** Whether the served answer is one a marketplace could actually use. */
+export declare function servedOk(served: ServedTokenUri): boolean;
+/** Pretty-print a served body when it is JSON, else return it unchanged. Never throws. */
+export declare function prettyBody(body: string | null): string;
+export declare function decodeOnChainJson(uri: string, verbatim?: boolean): string | null;
+//# sourceMappingURL=served.d.ts.map

package/dist/served.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"served.d.ts","sourceRoot":"","sources":["../src/served.ts"],"names":[],"mappings":"AAmBA,MAAM,WAAW,cAAc;IAC7B,8FAA8F;IAC9F,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,uEAAuE;IACvE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,uFAAuF;IACvF,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,6FAA6F;IAC7F,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;CACxB;AAID;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,GAAE,kBAAuB,GAAG,OAAO,CAAC,cAAc,CAAC,CAsC7G;AAED,yEAAyE;AACzE,wBAAgB,QAAQ,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAExD;AAED,0FAA0F;AAC1F,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAOtD;AAKD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,UAAQ,GAAG,MAAM,GAAG,IAAI,CAqB9E"}

package/dist/served.js

@@ -0,0 +1,112 @@
+/**
+ * What a URL-valued `tokenURI` **actually returns** — the served answer, not the pointer.
+ *
+ * Backlog B14. `abx tokenuri` read the chain, `abx verify` re-hashed bytes, `abx status` reported the
+ * indexing lifecycle — each a different slice, none of them the served JSON body. An agent in a cold
+ * sweep fell back to raw `curl` for exactly this, which is the tell that a command was missing.
+ *
+ * It also answers the question a *warning* couldn't. "Nothing tells you the provider you registered
+ * with isn't the base baked on-chain" is real, but the obvious check — compare the remote's base URL
+ * to the on-chain one — false-positives on the common custom-domain case (a baked `meta.artist.xyz`
+ * fronting `api.provider.xyz`), and a warning that cries wolf on the correct setup is worse than none.
+ * Fetching what the **baked** base serves makes the mismatch self-evident instead: you see the other
+ * provider's 404, or another project's document.
+ *
+ * Lives in its own module because `main.ts` exports nothing (it runs `main()` unconditionally), so
+ * anything that needs a test seam has to be extracted — the same reason `scaffold.ts` exists.
+ */
+import { parseDataUri } from '@artblocks/abx-sdk';
+const DEFAULT_TIMEOUT_MS = 10_000;
+/**
+ * Follow a `tokenURI` and return what came back.
+ *
+ * A `data:` URI is **not** an error here — it IS the document, and a fully-on-chain project's whole
+ * point is that there is no server to ask. Saying so plainly is the honest answer; reporting it as a
+ * failure would punish the strongest configuration the protocol offers.
+ */
+export async function fetchServedTokenUri(uri, opts = {}) {
+    if (!/^https?:\/\//i.test(uri)) {
+        return {
+            url: null,
+            skipped: uri.startsWith('data:')
+                ? 'the tokenURI IS the document (a data: URI) — it resolves on-chain, so there is no server to ask'
+                : `the tokenURI is not an http(s) URL (${uri.slice(0, 40)}…) — nothing to fetch`,
+            status: null,
+            contentType: null,
+            body: null,
+        };
+    }
+    const doFetch = opts.fetchFn ?? fetch;
+    const timeoutMs = opts.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    const ctrl = new AbortController();
+    const timer = setTimeout(() => ctrl.abort(), timeoutMs);
+    try {
+        const res = await doFetch(uri, { signal: ctrl.signal, redirect: 'follow' });
+        return {
+            url: uri,
+            skipped: null,
+            status: res.status,
+            contentType: res.headers.get('content-type'),
+            body: await res.text(),
+        };
+    }
+    catch (err) {
+        const aborted = err.name === 'AbortError' || ctrl.signal.aborted;
+        return {
+            url: uri,
+            skipped: null,
+            status: null,
+            contentType: null,
+            body: null,
+            error: aborted ? `no response in ${timeoutMs}ms` : err.message,
+        };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+/** Whether the served answer is one a marketplace could actually use. */
+export function servedOk(served) {
+    return served.status !== null && served.status >= 200 && served.status < 300;
+}
+/** Pretty-print a served body when it is JSON, else return it unchanged. Never throws. */
+export function prettyBody(body) {
+    if (!body)
+        return '';
+    try {
+        return JSON.stringify(JSON.parse(body), null, 2);
+    }
+    catch {
+        return body; // not JSON — a provider's HTML error page is still worth seeing verbatim
+    }
+}
+// Read tokenURI(id) STRAIGHT FROM THE CONTRACT on-chain (no server, no node) and decode
+// the data: URI. For a fully on-chain token (`--onchain-uri`), this is the proof it
+// self-resolves: the renderer assembles the JSON on-chain; any RPC returns it.
+export function decodeOnChainJson(uri, verbatim = false) {
+    const parsed = parseDataUri(uri);
+    if (!parsed || parsed.mime !== 'application/json')
+        return null;
+    const raw = parsed.base64 ? Buffer.from(parsed.body, 'base64').toString('utf8') : decodeURIComponent(parsed.body);
+    try {
+        const obj = JSON.parse(raw);
+        // `verbatim` (--json) returns the document EXACTLY as the chain assembled it. Everything below is
+        // a courtesy for human eyes, and abbreviating for eyes is fine — abbreviating for a PROGRAM is
+        // not. An integrator scraped this output, got a `data:` URI cut to 96 chars that still looked
+        // valid, and stored it; the only way to read their own token was to reimplement `eth_call`.
+        if (verbatim)
+            return JSON.stringify(obj, null, 2);
+        for (const k of Object.keys(obj)) {
+            const v = obj[k];
+            // Truncate only huge inline `data:` blobs (base64 SVGs/images); show plain locator URLs
+            // (http/ipfs/ar) IN FULL so the creator can verify where the image actually resolves.
+            if (typeof v === 'string' && v.startsWith('data:') && v.length > 96)
+                obj[k] = `${v.slice(0, 96)}… (${v.length} chars)  [--json for the full value]`;
+        }
+        return JSON.stringify(obj, null, 2);
+    }
+    catch {
+        return verbatim ? raw : raw.slice(0, 600);
+    }
+}
+//# sourceMappingURL=served.js.map

package/dist/served.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"served.js","sourceRoot":"","sources":["../src/served.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAC,YAAY,EAAC,MAAM,oBAAoB,CAAC;AAoBhD,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAElC;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAAW,EAAE,OAA2B,EAAE;IAClF,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO;YACL,GAAG,EAAE,IAAI;YACT,OAAO,EAAE,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;gBAC9B,CAAC,CAAC,iGAAiG;gBACnG,CAAC,CAAC,uCAAuC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,uBAAuB;YAClF,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,IAAI;YACjB,IAAI,EAAE,IAAI;SACX,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;IACtC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;IACvD,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IACxD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAC,CAAC,CAAC;QAC1E,OAAO;YACL,GAAG,EAAE,GAAG;YACR,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;YAC5C,IAAI,EAAE,MAAM,GAAG,CAAC,IAAI,EAAE;SACvB,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAI,GAAa,CAAC,IAAI,KAAK,YAAY,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;QAC5E,OAAO;YACL,GAAG,EAAE,GAAG;YACR,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,IAAI;YACZ,WAAW,EAAE,IAAI;YACjB,IAAI,EAAE,IAAI;YACV,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,kBAAkB,SAAS,IAAI,CAAC,CAAC,CAAE,GAAa,CAAC,OAAO;SAC1E,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,QAAQ,CAAC,MAAsB;IAC7C,OAAO,MAAM,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC;AAC/E,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,UAAU,CAAC,IAAmB;IAC5C,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,yEAAyE;IACxF,CAAC;AACH,CAAC;AAED,wFAAwF;AACxF,oFAAoF;AACpF,+EAA+E;AAC/E,MAAM,UAAU,iBAAiB,CAAC,GAAW,EAAE,QAAQ,GAAG,KAAK;IAC7D,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,KAAK,kBAAkB;QAAE,OAAO,IAAI,CAAC;IAC/D,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAClH,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QACvD,kGAAkG;QAClG,+FAA+F;QAC/F,8FAA8F;QAC9F,4FAA4F;QAC5F,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAClD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;YACjB,wFAAwF;YACxF,sFAAsF;YACtF,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,EAAE;gBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,MAAM,sCAAsC,CAAC;QACtJ,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC5C,CAAC;AACH,CAAC"}

package/dist/signer.d.ts

@@ -41,6 +41,19 @@ export interface SignResult {
  * caller hands the printed tx to an external signer).
  */
 export declare function signTx(provider: TxProvider, opts: SignOptions): Promise<SignResult | null>;
+/**
+ * Sign + broadcast a SEQUENCE of prepared txs on the hot lane, in order — the hot-lane sibling of
+ * the wallet lane's `openWalletSession({total: N})` (one session, N approvals) and the cold lane's
+ * per-tx `signTx` loop (see e.g. `deploy-code`'s cold-lane branch in main.ts). One
+ * {@link makeHotSender} for the whole sequence, so the nonce is pinned once and gas is re-checked
+ * per tx against the target a PRIOR tx in this same sequence may just have created (a multi-tx code
+ * deploy: the setup multicall targets the clone the deploy tx just made). Replaces what used to be
+ * a hand-rolled nonce/gas loop at the one call site that needed it.
+ */
+export declare function signHotSequence(txs: PreparedTx[], opts: {
+    chainKey: string;
+    yes?: boolean;
+}): Promise<SignResult[]>;
 /**
  * The one sign-page implementation behind the whole wallet lane — single owner ops AND
  * multi-tx staged deploys both run through it ({@link signWallet} just opens one with

package/dist/signer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"signer.d.ts","sourceRoot":"","sources":["../src/signer.ts"],"names":[],"mappings":"AAGA,OAAO,EAIL,KAAK,OAAO,EACZ,KAAK,GAAG,EACR,KAAK,UAAU,EAChB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAC,kBAAkB,EAAC,MAAM,MAAM,CAAC;AAE7C;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC;AAEhD,uGAAuG;AACvG,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,KAAK,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;AAE9F,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,IAAI,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,sGAAsG;IACtG,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,8EAA8E;IAC9E,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,0CAA0C;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;gGAC4F;IAC5F,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAiBD,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,GAAG,CAAC;IACZ,QAAQ,EAAE,UAAU,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAqED;;;;GAIG;AACH,wBAAsB,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAShG;AAyFD;;;;;;;;;GASG;AACH,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,GAAG,CAAC;IACZ,OAAO,EAAE,kBAAkB,CAAC;CAC7B;AAED,MAAM,WAAW,aAAa;IAC5B,8FAA8F;IAC9F,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5B,6FAA6F;IAC7F,IAAI,CAAC,EAAE,EAAE,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC7C;oGACgG;IAChG,WAAW,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACjE,yEAAyE;IACzE,KAAK,IAAI,IAAI,CAAC;CACf;AASD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,2FAA2F;IAC3F,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+EAA+E;IAC/E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4FAA4F;IAC5F,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC,CA8I1F"}
+{"version":3,"file":"signer.d.ts","sourceRoot":"","sources":["../src/signer.ts"],"names":[],"mappings":"AAGA,OAAO,EASL,KAAK,OAAO,EACZ,KAAK,GAAG,EACR,KAAK,UAAU,EAChB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAC,kBAAkB,EAAC,MAAM,MAAM,CAAC;AAG7C;;;;;;;;;;;;;GAaG;AACH,MAAM,MAAM,IAAI,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC;AAEhD,uGAAuG;AACvG,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,KAAK,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;AAE9F,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,IAAI,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,sGAAsG;IACtG,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,8EAA8E;IAC9E,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,0CAA0C;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;gGAC4F;IAC5F,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAiBD,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,GAAG,CAAC;IACZ,QAAQ,EAAE,UAAU,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;CACrB;AAmED;;;;GAIG;AACH,wBAAsB,MAAM,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAShG;AA+BD;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,OAAO,CAAA;CAAC,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAqBvH;AA4ED;;;;;;;;;GASG;AACH,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,GAAG,CAAC;IACZ,OAAO,EAAE,kBAAkB,CAAC;CAC7B;AAED,MAAM,WAAW,aAAa;IAC5B,8FAA8F;IAC9F,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5B,6FAA6F;IAC7F,IAAI,CAAC,EAAE,EAAE,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC7C;oGACgG;IAChG,WAAW,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IACjE,yEAAyE;IACzE,KAAK,IAAI,IAAI,CAAC;CACf;AASD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,CAAC;IACjB,2FAA2F;IAC3F,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+EAA+E;IAC/E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4FAA4F;IAC5F,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,oBAAoB,GAAG,OAAO,CAAC,aAAa,CAAC,CA8J1F"}

package/dist/signer.js

@@ -1,6 +1,7 @@
 import { createServer } from 'node:http';
 import { writeFileSync } from 'node:fs';
-import { makePublicClient, makeWalletClient, resolveChain, } from '@artblocks/abx-sdk';
+import { makeHotSender, makePublicClient, makeWalletClient, pinGas, resolveChain, runPrepared, sleep, waitForCodeAt, } from '@artblocks/abx-sdk';
+import { faucetHint } from './config.js';
 /** Announce the wallet sign-page URL: a stable, greppable line for humans/agents, plus an
  *  optional file write so a backgrounding agent can read the URL without parsing stdout. */
 function announceSignUrl(signUrl, file) {
@@ -31,7 +32,6 @@ function explorerFor(chainKey) {
 async function resolveTx(provider, signer) {
     return typeof provider === 'function' ? await provider(signer) : provider;
 }
-const delay = (ms) => new Promise((r) => setTimeout(r, ms));
 /**
  * Bind the sign page to a *fresh* port, robustly.
  *
@@ -64,7 +64,7 @@ async function listenAvailable(server, preferred) {
     for (let i = 0; i < 6; i++) {
         if (await tryListen(preferred))
             return preferred;
-        await delay(300);
+        await sleep(300);
     }
     // Still held (a stuck/abandoned session) → don't block or crash; take a fresh ephemeral port.
     if (await tryListen(0))
@@ -107,17 +107,46 @@ async function signHot(provider, opts) {
         console.log(`\n  ${C.orange}⚠${C.reset} env key ${account.address} is not the expected signer ${opts.expectedSigner} — this will likely revert.`);
     }
     console.log(`\n  ${dim(`signing with env key ${account.address} …`)}`);
-    const txHash = await wallet.sendTransaction({
+    // makeHotSender pins the gas (rather than letting viem re-estimate at send time — see
+    // execute.ts's pinGas for why an estimate can come back as the calldata cost alone and silently
+    // underfund a CREATE) and throws a typed error on a `reverted` receipt instead of reporting a
+    // burned transaction as "confirmed".
+    const send = makeHotSender({ wallet, account, publicClient });
+    const receipt = await send(prepared);
+    console.log(`  ${dim('tx')} ${explorerFor(opts.chainKey)}/tx/${receipt.transactionHash}`);
+    console.log(`  ${green('✓')} confirmed`);
+    return { txHash: receipt.transactionHash, prepared, blockNumber: receipt.blockNumber };
+}
+/**
+ * Sign + broadcast a SEQUENCE of prepared txs on the hot lane, in order — the hot-lane sibling of
+ * the wallet lane's `openWalletSession({total: N})` (one session, N approvals) and the cold lane's
+ * per-tx `signTx` loop (see e.g. `deploy-code`'s cold-lane branch in main.ts). One
+ * {@link makeHotSender} for the whole sequence, so the nonce is pinned once and gas is re-checked
+ * per tx against the target a PRIOR tx in this same sequence may just have created (a multi-tx code
+ * deploy: the setup multicall targets the clone the deploy tx just made). Replaces what used to be
+ * a hand-rolled nonce/gas loop at the one call site that needed it.
+ */
+export async function signHotSequence(txs, opts) {
+    if (!TESTNETS.has(opts.chainKey) && !opts.yes) {
+        throw new Error(`Refusing to sign on '${opts.chainKey}' with the env key without --yes. ` +
+            `For real value, prefer the wallet lane (--sign) so the key never touches this process.`);
+    }
+    const { wallet, account } = makeWalletClient({ chainKey: opts.chainKey });
+    const publicClient = makePublicClient({ chainKey: opts.chainKey });
+    console.log(`\n  ${dim(`signing ${txs.length} transaction(s) with env key ${account.address} …`)}`);
+    const send = makeHotSender({
+        wallet,
         account,
-        chain: wallet.chain,
-        to: prepared.to ?? undefined,
-        data: prepared.data,
-        value: BigInt(prepared.value),
+        publicClient,
+        onEvent: (e) => {
+            if (e.kind === 'sending')
+                console.log(`  ${purple('◆')} ${bold(e.tx.summary)}`);
+            else
+                console.log(`  ${dim('tx')} ${explorerFor(opts.chainKey)}/tx/${e.receipt.transactionHash}  ${green('✓')} confirmed`);
+        },
     });
-    console.log(`  ${dim('tx')} ${explorerFor(opts.chainKey)}/tx/${txHash}`);
-    const receipt = await publicClient.waitForTransactionReceipt({ hash: txHash });
-    console.log(`  ${green('✓')} confirmed`);
-    return { txHash, prepared, blockNumber: receipt.blockNumber };
+    const receipts = await runPrepared(txs, send);
+    return receipts.map((receipt, i) => ({ txHash: receipt.transactionHash, prepared: txs[i], blockNumber: receipt.blockNumber }));
 }
 // ── cold lane: print the tx for an external signer ───────────────────────────
 async function signCold(provider, opts) {
@@ -127,10 +156,26 @@ async function signCold(provider, opts) {
     const prepared = await resolveTx(provider, opts.expectedSigner ?? '0x0000000000000000000000000000000000000000');
     printIntent(prepared, opts);
     console.log(`\n  ${bold('unsigned transaction')} ${dim('— sign + broadcast this with your own signer (multisig / offline):')}\n`);
-    console.log(JSON.stringify({ to: prepared.to, data: prepared.data, value: prepared.value, chainId: prepared.chainId }, null, 2)
+    console.log(JSON.stringify({
+        to: prepared.to,
+        data: prepared.data,
+        value: prepared.value,
+        chainId: prepared.chainId,
+        // NOT a gas limit — a floor the external signer's own estimate must clear. Emitting it as
+        // `gas` would be wrong: it covers only the provable code-deposit cost, not the schema /
+        // dependency / mint legs riding the same multicall, so a signer that used it verbatim would
+        // under-fund the transaction. See execute.ts.
+        ...(prepared.gasFloor ? { gasMustExceed: prepared.gasFloor } : {}),
+    }, null, 2)
         .split('\n')
         .map((l) => '    ' + l)
         .join('\n'));
+    if (prepared.gasFloor) {
+        console.log(`\n  ${C.orange}⚠${C.reset} ${bold('gasMustExceed')} ${dim('is a floor, not a limit.')} This tx stores bytes on-chain, which costs\n` +
+            `    200 gas/byte in code deposit alone. If your signer's gas estimate comes back BELOW ${BigInt(prepared.gasFloor)},\n` +
+            `    it is estimating against stale state (the target contract not visible yet) — re-estimate rather than\n` +
+            `    sending, or it reverts ${bold('DeploymentFailed()')} and the gas is lost.`);
+    }
     console.log(`\n  ${dim('Then run')} ${bold('abx index <address>')} ${dim('to reflect it once mined.')}\n`);
     return null;
 }
@@ -189,6 +234,8 @@ export async function openWalletSession(opts) {
     // txHash) or a message to sign (personal_sign → signature) — the latter is how the wallet signs
     // Turbo (Arweave) upload data-items so its own credits pay. Both resolve `pendingResolve` with a
     // Hex value (a txHash or a signature); only one item is ever in flight.
+    // `tx` carries an optional resolved `gas` (hex) the CLI pinned for this item — the page forwards it
+    // to `eth_sendTransaction` rather than letting the wallet estimate. See send() below.
     let current = null;
     let pendingResolve = null;
     let pendingReject = null;
@@ -270,6 +317,12 @@ export async function openWalletSession(opts) {
     const signUrl = `http://localhost:${boundPort}`;
     console.log(`\n  ${purple('◆')} ${bold('wallet signing')}  ${dim(`(${chain.name}${opts.total ? `, ${opts.total} transactions` : ''})`)}`);
     console.log(`\n  Open ${bold(signUrl)} , connect a wallet${opts.expectedSigner ? ` (${opts.expectedSigner})` : ''}, and approve each step.`);
+    // Funding, said out loud at the one moment it matters. `warnUnfunded` can't help here: on the
+    // wallet lane without --for we don't know the address until the browser connects, so an empty
+    // wallet's first and only signal used to be a failed transaction. Name the requirement and the
+    // fix BEFORE they go pick a wallet, not after it reverts.
+    console.log(`  ${dim(`Use a wallet holding a little ${chain.name} ETH — it pays gas, and it's free test ETH, not real money.`)}`);
+    console.log(`  ${dim(`None yet? ${faucetHint(opts.chainKey)}.`)}`);
     announceSignUrl(signUrl, opts.signUrlFile);
     console.log(`  ${dim('The key never touches this process — only signed tx hashes come back. Ctrl-C to cancel.')}\n`);
     const onSigint = () => fail(new Error('cancelled'));
@@ -278,7 +331,16 @@ export async function openWalletSession(opts) {
         connect: () => connected,
         async send(tx) {
             index += 1;
-            current = { index, kind: 'tx', tx, consumed: false };
+            // A wallet session spans blocks: the deploy is approved, then setup targets the contract it
+            // just created. The browser wallet estimates against ITS OWN RPC, which we don't control and
+            // which can lag — so wait for the code to be visible and hand the page an explicit gas limit
+            // instead of letting the wallet guess. Same reasoning as the hot lane (see execute.ts).
+            if (tx.to && tx.gasFloor)
+                await waitForCodeAt(publicClient, tx.to);
+            const gas = opts.expectedSigner
+                ? await pinGas(publicClient, { from: opts.expectedSigner, to: tx.to, data: tx.data, value: tx.value, gasFloor: tx.gasFloor }).catch(() => undefined)
+                : undefined;
+            current = { index, kind: 'tx', tx: gas === undefined ? tx : { ...tx, gas: `0x${gas.toString(16)}` }, consumed: false };
             console.log(`  ${dim(`tx ${opts.total ? `${index}/${opts.total}` : index}:`)} ${tx.summary} ${dim('— approve in your wallet …')}`);
             const txHash = await new Promise((resolve, reject) => {
                 pendingResolve = resolve;
@@ -492,6 +554,10 @@ $('sign').onclick = async () => {
     } else {
       const params = {from: account, data: curTx.data, value: curTx.value};
       if (curTx.to) params.to = curTx.to;
+      // An explicit limit the CLI resolved for this tx. Wallets that would otherwise estimate against
+      // a node lagging behind the deploy block send ~200k for a call needing ~941k, and the on-chain
+      // content write reverts DeploymentFailed(). The user can still edit it in the wallet UI.
+      if (curTx.gas) params.gas = curTx.gas;
       const txHash = await window.ethereum.request({method:'eth_sendTransaction', params:[params]});
       await fetch('/signed', {method:'POST', headers:{'content-type':'application/json'}, body: JSON.stringify({index: curIndex, txHash})});
       const link = CFG.explorer ? '<a href="'+CFG.explorer+'/tx/'+txHash+'" target="_blank">'+txHash+'</a>' : txHash;