@artblocks/abx-cli 0.1.0-alpha.23 → 0.1.0-alpha.26

package/CHANGELOG.md

@@ -1,5 +1,327 @@
 # @artblocks/abx-cli
 
+## 0.1.0-alpha.26
+
+### Patch Changes
+
+- 77a6248: Fixes from the 2026-08-18 eight-room agent sweep of the content-addressed lanes (ipfs · arweave ·
+  preferred gateways). The v11 gateway projection worked end to end on a live testnet round trip — bare
+  CID on chain, one `set-gateway` tx, byte-identical content id before and after — but the surfaces
+  around it lied, hid, or degraded in five ways that cold agents hit immediately.
+
+  **Both `AbxGenerator` addresses in the manifest had a broken EIP-55 checksum.** The addresses were
+  right; the casing was mangled in transcription. viem validates checksums, so
+  `readContract`/`writeContract` against the recorded value threw `Address "0x2c1b7Cf6…" is invalid` —
+  `abx verify` could not run its on-chain-URI check on **either** testnet. Corrected in
+  `deployments.ts` and the docs mirror, with the code at both fixed addresses re-confirmed on chain
+  (identical bytecode, as CREATE2 requires). The per-entry equality tests stayed green through all of
+  it because they compared against the same mangled string, so the manifest now carries a **property
+  test**: every recorded address must be a valid checksum.
+
+  **A deploy narrated the upload gateway as if it were the served URL.** With
+  `--onchain-uri --backend ipfs`, the progress line printed the backend's own locator
+  (`https://gateway.pinata.cloud/ipfs/<cid>/0.png`) while the chain got a bare CID served from
+  somewhere else entirely — in one run, from `ipfs.io`, because that is the floor and no preference was
+  written. The line now shows the URL the token will actually carry, resolved through the same
+  precedence that decides what gets written (`--ipfs-gateway`/`--arweave-gateway` → `--gateway` for the
+  backend in use → env → floor), and says whether that prefix is the project's choice or the public
+  default filling a silence.
+
+  **`--ipfs-gateway` / `--arweave-gateway` were absent from every deploy command's `--help`.** They
+  appeared only in `set-gateway --help` and the skill's reference pages, so an agent reading the CLI
+  alone could not find the flags the CLI itself tells you to use. All three deploy commands now name
+  them, with the floors (`https://ipfs.io/ipfs/`, `https://arweave.net/`) and the upload-vs-serving
+  distinction stated where the decision is made.
+
+  **`abx storage upload` handed `abx attach` a locator that silently downgraded the attachment.** It
+  printed `abx attach <address> <key> https://gateway.pinata.cloud/ipfs/<cid>/file.png` — and `attach`
+  picks the on-chain representation from the scheme, so an `https://` locator stores a plain `url` with
+  the gateway host welded into the value: no `set-gateway` repoint, exactly the coupling the
+  content-addressed representations exist to remove. Following the command's own printed next step was
+  the wrong move — and the skill had promised the scheme form all along, so the doc was right and the
+  command was wrong. It now hands back `ipfs://<cid>/file.png` / `ar://<txid>/file.png` (both in the prose
+  hint and as `attachLocator` in `--json`), keeps the https URL as the browsable one, and says why they
+  differ.
+
+  **`.abx-self-host/` is now self-ignoring.** It holds this node's projection and, for the Arweave
+  backend, a signing-capable key that carries prepaid upload credits. This repo gitignores that
+  directory and the skill said so — but a _creator's_ repo does not, so a first `--backend arweave` run
+  could leave a key staged for commit with nothing having said a word. The CLI writes a `.gitignore`
+  containing `*` inside the directory before anything sensitive lands there: it ignores the whole tree
+  regardless of the enclosing repo's config, needs no edit to a file we don't own, and never overwrites
+  one that already exists.
+
+  The **local-gateway warning** also stopped over-claiming. It said a `127.0.0.1` gateway means "the
+  served image URL resolves only on THIS machine" — true when the gateway host was welded into the
+  field, false now that the field holds a bare CID, and it aimed the creator at the wrong repair. It now
+  names the damage that is still real: bytes pinned only to a local node cannot be retrieved by anyone,
+  and no gateway can serve content that was never pinned publicly.
+
+  Also: `abx storage status --json` no longer warns `unrecognized flag(s), ignored: --json` about a flag
+  its own usage documents and that visibly works (a readout contradicting itself is worse than no
+  readout), and the `--unsigned` epilogue names `abx add <address>` rather than `abx index <address>`,
+  which fails on a node that never registered the project — the common case for a tx handed to someone
+  else's signer.
+
+- 77a6248: Fixes from the 2026-08-18 six-room agent sweep of the hosted-services lane (managed provider ·
+  self-hosting · conformance). Three surfaces reported a credential problem as something else.
+
+  **`abx remote --conformance` blamed the service for our key.** With a rejected token it correctly
+  reported `the provided token was rejected (401)` — and then ran the authed-tier probes anyway. Each
+  one 401s, and each asserts on a 400, so one stale key produced four further failures reading
+  `bytes for a REFERENCED output (image) → 401 (expected 400; accepting this is how a resolver becomes
+an object store)`. That is an accusation against the operator, and it is the exact inverse of what
+  this command is for: conformance is meant to be checkable from OUTSIDE, before you sign up. A cold
+  agent hit it and had to choose between believing five ✗ marks and explaining them away — it chose to
+  explain them away and told the creator the service was trustworthy. Now a rejected token skips the
+  authed tiers with one note (naming the descriptor's own signup URL), the public tier still runs in
+  full, and the run reports the one failure that is real. 401 is also handled like 403 inside the probe
+  helper, which already knew a credential problem is not a conformance verdict.
+
+  **`abx doctor` reported a dead credential as configured.** It printed `remotes: meridian` for a token
+  the service rejects, because it only checked that the variable was _present_. Doctor is the command a
+  creator is told to run first, so the 401 surfaced much later, from `abx remote <name>`, after that
+  line had already been trusted. Same class as an RPC that answers `[]` because it pruned its logs:
+  presence is not capability. It now makes one cheap authed call per named remote and reports
+  `✓ good · 1 project(s) visible` or `✗ meridian — token rejected (401) — fix or rotate
+ABX_REMOTE_MERIDIAN_TOKEN`. A short timeout with no backoff keeps it quick, a 403 stays a note
+  (provider scoping is not a misconfiguration), and an unreachable provider is a soft note rather than
+  a ✗ — nothing here can fail doctor for a reason the creator cannot act on.
+
+  **`abx deploy-effects` told operators to set a variable that is never read.** The Fly scaffold's
+  storage-secrets block emitted `fly secrets set ABX_ARWEAVE_KEY=…`; no such variable exists anywhere in
+  the toolkit. A hosted runner cannot use the CLI's managed key file either (that path is on the
+  operator's machine), so the line now names `ARWEAVE_JWK` with the JWK inline, which is the form that
+  actually works remotely.
+
+  **A remote register on a self-resolving project claimed a win it did not deliver.** `abx add --remote`
+  printed its successes and stopped. But a project whose `tokenURIRenderer` is set answers `tokenURI`
+  from the chain, so marketplaces and wallets read that document and never touch the service — the
+  registration is still worth having (indexing, the live view, managed rendering) and changes nothing a
+  collector sees. A cold agent, told "put it on a hosted service so it shows up properly", had to
+  reconstruct that from `state` → `tokenuri` → `contracturi` → the docs → a raw curl before it could
+  answer honestly. The register now says it, and the skill states the inverse rule the reference pages
+  never had: a resolver adds nothing marketplace-facing to a project that already resolves on-chain.
+
+  `abx verify`'s help also stopped contradicting itself — "no server needed" read as "needs nothing"
+  while the command refuses until the project is registered locally with `abx add`. It now says "no
+  resolver in the path" and names the prerequisite.
+
+  Skill: stop asserting third-party prices and free tiers. Two rooms in one sweep quoted plan costs to a
+  creator — one lifted "free tier" from our own `hosting.md` (Fly's has since changed), the other
+  invented a monthly Pinata figure out of nothing. We cannot keep another company's pricing current, so
+  the skill now says to name the provider and point at its pricing page, and to compare _shapes_
+  (pay-once vs. monthly; lapses vs. nothing-to-renew) which stay true. Turbo's under-100 KB free tier
+  stays, because the CLI enforces and prints it. The never-read-`.env` rule also moved to the top of
+  SKILL.md: an agent listed and read files while orienting, before it reached that rule twenty lines
+  down, and printed credentials into its own transcript.
+
+- Updated dependencies [77a6248]
+- Updated dependencies [77a6248]
+  - @artblocks/abx-sdk@0.1.0-alpha.18
+  - @artblocks/abx-indexer@0.1.0-alpha.19
+  - @artblocks/abx-storage@0.1.0-alpha.18
+  - @artblocks/abx-token-api@0.1.0-alpha.21
+
+## 0.1.0-alpha.25
+
+### Minor Changes
+
+- c5b8ec3: `ipfs` and `arweave` metadata fields now resolve on both planes, through a gateway the collection
+  chooses — renderer **spec v11**.
+
+  These are the two representations that are content-addressed, the two where the locator IS the
+  integrity hash, and the two this protocol tells creators to prefer. They were also the two the
+  on-chain renderer could not serve. So `abx deploy --onchain-uri --backend ipfs|arweave` worked around
+  it by baking a gateway HOST into a `url` field, which welded a hostname the creator could never
+  migrate and made `abx_provenance` report `source: url` for bytes that live on IPFS.
+
+  The fix separates the two facts that the baked URL had fused. The CID/txid stays in the field, as
+  identity, under that field's own lock. The HTTPS prefix becomes a project-wide preference in two
+  reserved collection-scope fields, `abx_gateway_ipfs` / `abx_gateway_arweave`, with `https://ipfs.io/ipfs/`
+  and `https://arweave.net/` as floors. The renderer, the canonical generator, and the off-chain
+  resolver all read those two fields and apply the same wrap, so a token served from the chain and from
+  a resolver produces the same URL.
+
+  A dead or slow gateway is now a **repoint**, not a rewrite:
+
+  ```bash
+  abx set-gateway 0xYourContract --ipfs https://your-dedicated.mypinata.cloud/ipfs/
+  ```
+
+  One transaction, every token, no re-upload — and it works on fields you have already locked, because
+  the locked value is the CID and the gateway was never in it.
+
+  **What changes for you**
+
+  - `--onchain-uri --backend ipfs|arweave` writes the bare CID (or `cid/{id}.ext` for the O(1) directory)
+    as an `ipfs`/`arweave` field instead of a gateway URL as `url`/`url-template`. `--backend cloud` is
+    unchanged — an HTTPS CDN locator _is_ the address.
+  - New `abx set-gateway <addr> [--ipfs <prefix>] [--arweave <prefix>]` (`none` clears to the public
+    default). Two flags, so a project can pay for a dedicated IPFS gateway and leave Arweave public.
+  - New `--ipfs-gateway` / `--arweave-gateway` on every deploy command. Plain `--gateway` (the
+    storage/upload gateway) seeds the preference for the backend in use, so passing it still does what
+    you meant. Nothing is written when no gateway is named — silence keeps the floor live.
+  - `abx set-field` refuses the two gateway keys and points at `set-gateway`, which validates the
+    prefix, the scope and the representation. Every way to set them by hand fails silently.
+  - The `display.gateway` contract param is **superseded and no longer read**. It could name only one
+    prefix for both schemes and existed only on code projects.
+  - SDK: `projectGatewayPrefix`, `projectGatewayUrl`, `gatewayPrefixFrom`, `contentIdFromLocator`,
+    `GATEWAY_FIELD`, `GATEWAY_FLOOR`. For a host running its own resolver, `ABX_IPFS_GATEWAY` /
+    `ABX_ARWEAVE_GATEWAY` are now a **floor**: a project that stated a preference on chain gets that
+    preference from every conforming resolver, and host config only fills a silence.
+
+  **New canonical addresses** (both testnets; nothing else moved — no token implementation, factory, or
+  `initialize` ABI changed):
+
+  | Contract                         | Address                                      |
+  | -------------------------------- | -------------------------------------------- |
+  | `AbxMetadataRenderer` (spec v11) | `0x85C1aE1F076d808fF7c1729F21B85038Fa16105E` |
+  | `AbxGenerator` (Sepolia)         | `0xb7104AdFa6Fb5615e46E2a681A2Ff043B08fADB5` |
+  | `AbxGenerator` (Base Sepolia)    | `0x2c1b7Cf6C54E4acBcB54FCc395f7Af88eB4fC8Ce` |
+
+  Also fixes a crash on `abx deploy-code --copies`: an undefined `bytes` reference threw a
+  `ReferenceError` at the end of the dry-run plan and, worse, at the confirmation prompt of a real
+  deploy.
+
+### Patch Changes
+
+- Updated dependencies [c5b8ec3]
+- Updated dependencies [5b29f53]
+  - @artblocks/abx-sdk@0.1.0-alpha.17
+  - @artblocks/abx-token-api@0.1.0-alpha.20
+  - @artblocks/abx-indexer@0.1.0-alpha.18
+  - @artblocks/abx-storage@0.1.0-alpha.17
+
+## 0.1.0-alpha.24
+
+### Patch Changes
+
+- 9c287c0: The CLI no longer double-wraps a data URI, lie about managed rendering, or hand zsh an unquoted schema.
+
+  - Inline `image` that is already a `data:` URI is refused — the renderer wraps bytes itself, and
+    storing one produced a blank token with no warning.
+  - Surfaces consult `render.attached` on the public resolver before warning that local `fs` means
+    "placeholder forever".
+  - Undeclared-param advice no longer tells you to schema-declare keys an augment hook supplies.
+  - `--schema` Select/Range examples (help and errors) are quoted so zsh does not glob them.
+  - `attach --help` states URI pairs and `--file` are mutually exclusive.
+  - The skill refuses unfilled `⟨your idea⟩` placeholders and documents one-EOA nonce serialization
+    plus "no replace-script CLI".
+
+  Reported in the 2026-08-18 tester batch (feedback 111e2489, a07e0449, 4cedba82, 52487cde, d5423af5, 58984086, 735ed464, 7ff05a6b).
+
+- b5744a1: `deploy-series` no longer uploads your art before checking it can sign the deploy
+
+  The signing lanes were checked at _signing_ time, which is the end of a deploy. Off-chain custody
+  (`--backend arweave|ipfs|cloud`) uploads the art near the start, before any transaction exists. So
+  `abx deploy-series --dir … --onchain-uri --backend arweave` with no key and no `--dry-run` minted a
+  Turbo identity and pushed the files, then discovered it could never have deployed. Under Turbo's
+  100 KB free tier that upload _succeeds_ — so a run that was always going to fail published the
+  creator's work permanently.
+
+  `assertLaneCanSign` refuses the keyless hot lane and names all three lanes plus the preview. The rule
+  it enforces is the sibling of the `--dry-run` guard on every signing choke point: **a spend or a
+  publish never precedes the check that this run can be signed at all.**
+
+  It sits at the spend, not at the front door. A _validation_ refusal (an ipfs-shaped `--image-base`, a
+  missing `--name`, off-chain metadata with no public URL) must still reach a creator who has no key,
+  because it costs nothing to check and is the more specific answer — so the four image deploy bodies
+  assert just before their first byte leaves. `abx deploy` (1/1) turned out never to have been exposed:
+  it needs the deployer address to predict the clone, so it already refused before uploading.
+  `deploy-code` has no deploy-time upload and is untouched.
+
+  Found by a cold agent that forgot `--dry-run` once and watched it try to spend anyway.
+
+- 9c287c0: PostParams commands refuse unsupported contract kinds before any signing prompt.
+
+  `set-schema`, `configure-param`, and `retire-param` used to surface a raw viem revert on a 1/1 or
+  plain Series. They now detect the kind first and fail as a capability mismatch: SeriesCode /
+  EditionCode only. Help text says the same.
+
+  Reported in the 2026-08-18 tester batch (feedback e47b8ed5, 018ec58a).
+
+- b5744a1: An RPC that has pruned its log history is now detected, named, and routed around
+
+  A public endpoint that no longer holds old logs does not fail your scan — it answers `eth_getLogs`
+  with `[]` and HTTP 200, which is a success. Everything downstream believed it:
+
+  - **`abx doctor` graded it `best`.** The archive probe was
+    `getLogs({address: zeroAddress, fromBlock: old, toBlock: old})` and counted any non-throw as archive
+    access — but `zeroAddress` never emits logs, so an empty result is exactly what a _perfect_ archive
+    node returns too. The assertion could not fail; it only ever caught endpoints that _error_ on old
+    blocks. `ARCHIVE_DEPTH` was also 100k blocks, which on a 2-second chain is inside the retained window
+    of the very endpoints that prune.
+  - **The client never failed over.** The read transport is a viem `fallback` across every configured
+    endpoint, and `fallback` rotates on an _error_. So every retry asked the same endpoint the same
+    question, and a project whose logs sit ready on the SECOND configured endpoint reconstructed as
+    empty.
+  - **`abx add` then registered the project with no state at all**, after grinding half a million blocks,
+    and suggested re-running `--full` "in a minute" — advice that can never work for a pruned index.
+
+  Measured on the two default Base Sepolia endpoints, same address and same window: one returns zero
+  logs for the project's entire history, the other returns them instantly. Ethereum Sepolia's keyless
+  default endpoint shows the same shape past a few hundred thousand blocks.
+
+  - **The probe asserts on something that must come back.** Blocks are retained by everyone; receipts
+    and the log index are what get pruned. `probeHistoryAt` (new SDK export) reads the probe block, asks
+    for one of its transactions' receipts, and — when that receipt carries a log — requires `getLogs` to
+    return that same log. No hardcoded address, no fixture block. `ARCHIVE_DEPTH` is now 500k.
+    It fails **safe**: a probe block with no transactions, or whose transactions logged nothing, keeps the
+    old lenient verdict rather than inventing a failure.
+  - **`abx doctor` names a reachable endpoint that can't serve history**, with the fault and the fix
+    ("history pruned ~500000 blocks back … list a full-archive endpoint FIRST in `ABX_RPC_URLS_<CHAIN>`").
+    Collapsing to the best endpoint hid this, and ordering is what decides who answers the scan.
+  - **An empty scan now retries each endpoint on its own** before giving up, and says which one served
+    the logs. Cheap by construction: each endpoint is first asked whether it holds history at _this
+    project's_ deploy block — three calls — and only one that passes gets a scan.
+  - **`SelfHostIndexer.reindex(address, {rpcUrl})`** pins a single endpoint instead of the pool, which is
+    what makes that rotation expressible. Clients are pooled per (chain, endpoint), so the default path
+    is unchanged.
+  - The final failure message now separates the two cases it had merged: a project you _just_ deployed
+    (transient, retry) from one that is not new (retention — check `abx doctor`).
+
+  Found by direct probing during the 2026-08-17 agent sweep, after an `abx add` of a 12-day-old Base
+  Sepolia edition reconstructed zero of its 18 events.
+
+- 9c287c0: On-chain script chunks no longer insert a newline in the middle of a token.
+
+  The generator joins chunks with `'\n'`. A fixed 22 kB slice could split `mass` into `ma` + `ss`,
+  producing a SyntaxError on chain while `abx verify` still went green. Template-mode deploys now
+  split at an existing newline so that join is byte-identical to the source, refuse a 22 kB+ span
+  with no newline, and parse the program before any gas.
+
+  Reported in the 2026-08-18 tester batch (feedback 38455765, 038d7ed2, 8c256d9d, 50e53193).
+
+- b5744a1: Four wording fixes from the 2026-08-17 agent sweep
+
+  - **A broken sentence at a decision point.** An edition's allocation warning read _"To sell 250, raise
+    this id's cap is not possible (caps only decrease) — set --allocation 15"_ — pattern-matched off the
+    721 branch, where "redeploy a Series with a higher `--max`" fits the grammar and an edition's
+    decrease-only cap does not. Now: _"Selling 250 isn't reachable: this id's cap can only ever
+    DECREASE."_ The warning stays a warning: allocation is a ceiling, over-allocating isn't destructive,
+    and holding reserves is legitimate.
+  - **`abx help`'s `--copies` line promised a guard that doesn't exist**, claiming deploy-code's edition
+    lane is "--script only, no --dep/--code-dir/--image-renderer". `--dep`/`--dep-registry` are fully
+    wired on EditionCode and `abx help deploy-code` already documented them as working — only the
+    top-level summary was stale, which is the line an agent reads first. The flag allowlist's comment
+    said the same thing and is corrected too.
+  - **`reference/decisions.md` pattern 4** stated `--onchain-uri` for a 1/1 inline SVG without the size
+    crossover the same file gives 58 lines later, so the row alone pointed the wrong way for the 2.4 KB
+    example art.
+  - **The eval harness** now allowlists `ABX_CHAIN=<chain> abx …` in a clean room (`Bash(abx:*)` does not
+    match an env-prefixed command, which left three rooms unable to reach a contract on the non-default
+    chain), and `docs/agent-eval/README.md` records both that trap and the one where a room reaches
+    outside its sandbox via `abx skill install --global`.
+
+- Updated dependencies [9c287c0]
+- Updated dependencies [b5744a1]
+- Updated dependencies [9c287c0]
+  - @artblocks/abx-sdk@0.1.0-alpha.16
+  - @artblocks/abx-indexer@0.1.0-alpha.17
+  - @artblocks/abx-storage@0.1.0-alpha.16
+  - @artblocks/abx-token-api@0.1.0-alpha.19
+
 ## 0.1.0-alpha.23
 
 ### Patch Changes

package/dist/commands/deploy.d.ts

@@ -64,6 +64,21 @@ export declare const imageUrlField: (url: string) => OnChainFieldInput;
 /** An `image` field as a `url-template` — `{id}` is substituted with the tokenId at render, so ONE
  *  (collection-scope) field addresses a whole pinned directory / Arweave manifest. */
 export declare const imageUrlTemplateField: (template: string) => OnChainFieldInput;
+/**
+ * An `image` field carrying a CONTENT-ADDRESSED identity — the bare CID / txid, with the serving
+ * gateway supplied at read time from the collection's `abx_gateway_*` preference (renderer spec v11).
+ *
+ * This replaces what `--onchain-uri --backend ipfs|arweave` used to write. That path stored the
+ * backend's gateway HTTPS URL as a `url` field, which looked identical in a marketplace and was
+ * wrong in two ways that only showed up later: the creator's chosen gateway host was welded into a
+ * value they might have locked, so a dead gateway became a dead token rather than a repoint; and
+ * `abx_provenance` reported `source: url` for bytes that live on IPFS, so the chain stopped saying
+ * where the work actually was. The CID is identity and the gateway is a preference — one field each.
+ *
+ * `{id}` in the value still substitutes at read (the O(1) directory pattern), so a collection-scope
+ * `ipfs` field addresses a whole pinned folder exactly as `url-template` does for a plain CDN.
+ */
+export declare const imageContentAddressedField: (network: "ipfs" | "arweave", contentId: string) => OnChainFieldInput;
 export declare const looksLikeSvg: (s: string) => boolean;
 /**
  * Does the IMAGE itself end up on-chain for this deploy? Two ways it can:
@@ -95,7 +110,8 @@ export type RemoteEthUpload = {
 export declare function prepareContent(imagePath: string | undefined, clone: Address, overrides: StorageOverrides, store?: boolean, // false for --dry-run: compute the hash but don't custody bytes
 onChain?: boolean, // true (--onchain-uri): put the image ON-CHAIN (inline SVG) so it self-resolves
 remoteEth?: RemoteEthUpload, // wallet-lane Turbo uploads: sign+pay with the connected browser wallet
-walletAddr?: string): Promise<{
+walletAddr?: string, // the deployer wallet — checked for existing Turbo credits if the managed key is short
+gatewayFlags?: Flags): Promise<{
     tokenFields: OnChainFieldInput[];
     contentNote: string;
 }>;
@@ -107,9 +123,16 @@ walletAddr?: string): Promise<{
 export declare function parseDeployTraits(flags: Flags): OpenSeaAttribute[];
 /** Encode creator traits as the on-chain `attributes` field (inline JSON bytes) — for `--traits-onchain`. */
 export declare const attributesInlineField: (attrs: OpenSeaAttribute[]) => OnChainFieldInput;
-/** Warn when IPFS/Arweave custody is pointed at a LOCAL gateway: the served image URL
- *  (`<gateway>/ipfs/<cid>`) would resolve only on this machine, so marketplaces/wallets can't
- *  load it — a pinning service + a PUBLIC gateway is part of operating off-chain custody. */
+/**
+ * Warn when IPFS/Arweave custody is pointed at a LOCAL gateway.
+ *
+ * Two distinct problems ride on one flag, and the warning names the one that actually applies. The
+ * bytes are pinned only to a node on this machine, so nothing off it can retrieve them — that is the
+ * real damage and it survives any later `set-gateway`. It ALSO used to weld that localhost host into
+ * the on-chain value; since the field holds a bare CID it no longer does (the serving prefix is the
+ * collection's preference), so promising "the served URL resolves only on THIS machine" would now be
+ * false and would point the creator at the wrong repair.
+ */
 export declare function localGatewayWarning(flags: Flags): string | null;
 /** A readout line for an optional creator text field — states exactly what's written (and where),
  *  or that NOTHING is, so the deploy never silently invents one. */

package/dist/commands/deploy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/commands/deploy.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAC,eAAe,EAAC,MAAM,wBAAwB,CAAC;AACvD,OAAO,EACL,KAAK,OAAO,EAKZ,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,YAAY,EAKjB,KAAK,qBAAqB,EAkD3B,MAAM,oBAAoB,CAAC;AAY5B,OAAO,EAAC,KAAK,GAAG,EAAyC,MAAM,MAAM,CAAC;AACtE,OAAO,EAGL,KAAK,gBAAgB,EAmBtB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAyB,KAAK,KAAK,EAA8E,MAAM,aAAa,CAAC;AA2D5I,eAAO,MAAM,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAC,CAGzE,CAAC;AACF,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAOrD;AAQD;;;gEAGgE;AAChE,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAQ3D;AAED;;;0CAG0C;AAC1C,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED;oFACoF;AACpF,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAGzE;AAED;;;;;GAKG;AACH;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAShH;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAC,GAAG,IAAI,CASzG;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAWxD;AAID,wBAAsB,YAAY,CAAC,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAO9F;AAUD,wBAAgB,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAEvC;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAiBpE;AAKD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAiB1E;AAID,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAmBxE;AAOD,eAAO,MAAM,gBAAgB,GAAI,OAAO,GAAG,KAAG,iBAI5C,CAAC;AAEH,eAAO,MAAM,gBAAgB,GAAI,KAAK,MAAM,KAAG,iBAI7C,CAAC;AAEH,sFAAsF;AACtF,eAAO,MAAM,aAAa,GAAI,KAAK,MAAM,KAAG,iBAI1C,CAAC;AAEH;sFACsF;AACtF,eAAO,MAAM,qBAAqB,GAAI,UAAU,MAAM,KAAG,iBAIvD,CAAC;AAEH,eAAO,MAAM,YAAY,GAAI,GAAG,MAAM,KAAG,OAAsC,CAAC;AAEhF;;;;;;;;GAQG;AACH;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,GAAG,OAAO,CAGvF;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,GAAG,OAAO,CAY/E;AAED;mGACmG;AACnG,MAAM,MAAM,eAAe,GAAG;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,CAAC,OAAO,EAAE,UAAU,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;CAAC,CAAC;AAExG,wBAAsB,cAAc,CAClC,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,gBAAgB,EAC3B,KAAK,UAAO,EAAE,gEAAgE;AAC9E,OAAO,UAAQ,EAAE,gFAAgF;AACjG,SAAS,CAAC,EAAE,eAAe,EAAE,wEAAwE;AACrG,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC;IAAC,WAAW,EAAE,iBAAiB,EAAE,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAC,CAAC,CAgGlE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,KAAK,GAAG,gBAAgB,EAAE,CAQlE;AAED,6GAA6G;AAC7G,eAAO,MAAM,qBAAqB,GAAI,OAAO,gBAAgB,EAAE,KAAG,iBAIhE,CAAC;AAEH;;6FAE6F;AAC7F,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,GAAG,IAAI,CAW/D;AAED;oEACoE;AACpE,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAGtG;AAED;kGACkG;AAClG,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,EAAE,CAExD;AAED,kGAAkG;AAClG,wBAAgB,cAAc,CAAC,MAAM,EAAE,gBAAgB,EAAE,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAInF;AAGD,wBAAsB,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,iBAiBhE;AAED,wBAAsB,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,iBAwnBhH;AAkBD,wBAAsB,4BAA4B,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAkW1H;AAgBD,eAAO,MAAM,YAAY,GAAI,SAAS,MAAM,EAAE,GAAG,iBAAiB,KAAG,qBAKnE,CAAC;AAEH,wBAAsB,eAAe,CAAC,KAAK,EAAE,KAAK,iBAMjD;AAED,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,iBAyhBjG;AAeD,wBAAsB,yBAAyB,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAybvH;AAkED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,YAAY,GAAG,MAAM,CAgB7D;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAmB1D;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAqBxH;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAmDlH;AAED;iGACiG;AACjG,eAAO,MAAM,iBAAiB,aAmB5B,CAAC;AAGH,eAAO,MAAM,mBAAmB,UAK/B,CAAC;AAEF,eAAO,MAAM,YAAY,aAKvB,CAAC;AAEH,eAAO,MAAM,mBAAmB,aAM9B,CAAC;AASH,eAAO,MAAM,oBAAoB,aAAqG,CAAC;AACvI,eAAO,MAAM,2BAA2B,aAAqE,CAAC;AAE9G,wBAAsB,aAAa,CAAC,KAAK,EAAE,KAAK,iBAiB/C;AAED,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,iBA2kC/F;AAmBD,eAAO,MAAM,yBAAyB,aAcpC,CAAC;AAEH,wBAAsB,wBAAwB,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAiXtH;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,KAAK,EACZ,YAAY,EAAE,YAAY,EAC1B,MAAM,EAAE,OAAO,EACf,QAAQ,GAAE,MAAM,GAAG,OAAgB,GAClC,OAAO,CAAC,OAAO,CAAC,CAmClB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,KAAK,EACZ,YAAY,EAAE,YAAY,EAC1B,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,OAAO,CAAC,CAoDlB"}
+{"version":3,"file":"deploy.d.ts","sourceRoot":"","sources":["../../src/commands/deploy.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAC,eAAe,EAAC,MAAM,wBAAwB,CAAC;AACvD,OAAO,EACL,KAAK,OAAO,EAMZ,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,YAAY,EAKjB,KAAK,qBAAqB,EAmD3B,MAAM,oBAAoB,CAAC;AAY5B,OAAO,EAAC,KAAK,GAAG,EAAyC,MAAM,MAAM,CAAC;AACtE,OAAO,EAGL,KAAK,gBAAgB,EAmBtB,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAyB,KAAK,KAAK,EAA8E,MAAM,aAAa,CAAC;AA+D5I,eAAO,MAAM,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAA;CAAC,CAGzE,CAAC;AACF,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAOrD;AAQD;;;gEAGgE;AAChE,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAQ3D;AAED;;;0CAG0C;AAC1C,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEjD;AAED;oFACoF;AACpF,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAGzE;AAED;;;;;GAKG;AACH;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAShH;AAED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAC,GAAG,IAAI,CASzG;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAWxD;AAID,wBAAsB,YAAY,CAAC,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAO9F;AAUD,wBAAgB,KAAK,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAEvC;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAkBpE;AAKD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAkB1E;AAID,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAoBxE;AAOD,eAAO,MAAM,gBAAgB,GAAI,OAAO,GAAG,KAAG,iBAI5C,CAAC;AAEH,eAAO,MAAM,gBAAgB,GAAI,KAAK,MAAM,KAAG,iBAO9C,CAAC;AAEF,sFAAsF;AACtF,eAAO,MAAM,aAAa,GAAI,KAAK,MAAM,KAAG,iBAI1C,CAAC;AAEH;sFACsF;AACtF,eAAO,MAAM,qBAAqB,GAAI,UAAU,MAAM,KAAG,iBAIvD,CAAC;AAEH;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,0BAA0B,GACrC,SAAS,MAAM,GAAG,SAAS,EAC3B,WAAW,MAAM,KAChB,iBAID,CAAC;AA6DH,eAAO,MAAM,YAAY,GAAI,GAAG,MAAM,KAAG,OAAsC,CAAC;AAEhF;;;;;;;;GAQG;AACH;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,GAAG,OAAO,CAGvF;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,GAAG,OAAO,CAY/E;AAED;mGACmG;AACnG,MAAM,MAAM,eAAe,GAAG;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,WAAW,EAAE,CAAC,OAAO,EAAE,UAAU,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;CAAC,CAAC;AAExG,wBAAsB,cAAc,CAClC,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,KAAK,EAAE,OAAO,EACd,SAAS,EAAE,gBAAgB,EAC3B,KAAK,UAAO,EAAE,gEAAgE;AAC9E,OAAO,UAAQ,EAAE,gFAAgF;AACjG,SAAS,CAAC,EAAE,eAAe,EAAE,wEAAwE;AACrG,UAAU,CAAC,EAAE,MAAM,EAAE,uFAAuF;AAC5G,YAAY,GAAE,KAAU,GACvB,OAAO,CAAC;IAAC,WAAW,EAAE,iBAAiB,EAAE,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAC,CAAC,CAkGlE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,KAAK,GAAG,gBAAgB,EAAE,CAQlE;AAED,6GAA6G;AAC7G,eAAO,MAAM,qBAAqB,GAAI,OAAO,gBAAgB,EAAE,KAAG,iBAIhE,CAAC;AAEH;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,GAAG,IAAI,CAY/D;AAED;oEACoE;AACpE,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAGtG;AAED;kGACkG;AAClG,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,EAAE,CAExD;AAED,kGAAkG;AAClG,wBAAgB,cAAc,CAAC,MAAM,EAAE,gBAAgB,EAAE,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAInF;AAGD,wBAAsB,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,iBAiBhE;AAED,wBAAsB,aAAa,CAAC,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,iBAynBhH;AAkBD,wBAAsB,4BAA4B,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAmW1H;AAgBD,eAAO,MAAM,YAAY,GAAI,SAAS,MAAM,EAAE,GAAG,iBAAiB,KAAG,qBAKnE,CAAC;AAEH,wBAAsB,eAAe,CAAC,KAAK,EAAE,KAAK,iBAMjD;AAED,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,iBAwiBjG;AAeD,wBAAsB,yBAAyB,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAkcvH;AAkED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,YAAY,GAAG,MAAM,CAgB7D;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAmB1D;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAqBxH;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAmDlH;AAED;iGACiG;AACjG,eAAO,MAAM,iBAAiB,aAmB5B,CAAC;AAGH,eAAO,MAAM,mBAAmB,UAU/B,CAAC;AAEF,eAAO,MAAM,YAAY,aAKvB,CAAC;AAEH,eAAO,MAAM,mBAAmB,aAM9B,CAAC;AASH,eAAO,MAAM,oBAAoB,aAAqG,CAAC;AACvI,eAAO,MAAM,2BAA2B,aAAqE,CAAC;AAE9G,wBAAsB,aAAa,CAAC,KAAK,EAAE,KAAK,iBAiB/C;AAED,wBAAsB,iBAAiB,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,iBAwlC/F;AAmBD,eAAO,MAAM,yBAAyB,aAkBpC,CAAC;AAEH,wBAAsB,wBAAwB,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAoXtH;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,4BAA4B,CAChD,KAAK,EAAE,KAAK,EACZ,YAAY,EAAE,YAAY,EAC1B,MAAM,EAAE,OAAO,EACf,QAAQ,GAAE,MAAM,GAAG,OAAgB,GAClC,OAAO,CAAC,OAAO,CAAC,CAmClB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,KAAK,EACZ,YAAY,EAAE,YAAY,EAC1B,MAAM,EAAE,OAAO,EACf,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,OAAO,CAAC,CAoDlB"}