@artblocks/abx-cli 0.1.0-alpha.4 → 0.1.0-alpha.40

package/dist/remote.js

@@ -1,54 +1,443 @@
 /**
- * Talk to a REMOTE resolver's admin control plane — the HTTP form of `abx add` /
- * `abx index` / `abx forget`, pointed at a hosted node (fly/render/vps) instead of
- * this machine's local projection. This is the bridge the toolkit was missing: a
- * contract you deploy here is registered with the *local* store; the resolver baked
- * into your on-chain tokenURI is a *different* store and must be told separately, or
- * it answers "unknown project". These helpers do the telling.
+ * Remote-resolver resolution — which service `--remote` means, and whose credential drives it.
+ * The HTTP client itself lives in the SDK (`AbxServiceClient`, speaking the /v1 control plane from
+ * site/content/docs/using-abx/remote-services.mdx); this module owns the CLI conventions around it:
  *
- * The admin token authorizes indexing control only — never on-chain signing — so the
- * "no signing key on the host" rule is intact. It lives in `.env` as
- * ABX_RESOLVER_ADMIN_TOKEN and must match the token set on the resolver.
+ *   --remote <name>   a NAMED remote — `ABX_REMOTE_<NAME>_URL` + `ABX_REMOTE_<NAME>_TOKEN` in .env
+ *                     (same env-name normalization as ABX_RPC_URLS_<CHAIN>). "self" is just a name
+ *                     under this SAME convention — the node YOU run reads ABX_REMOTE_SELF_URL/_TOKEN
+ *                     with zero special-casing below. A managed provider's per-account API key lives
+ *                     under its own name — and deliberately NEVER falls back to ABX_REMOTE_SELF_TOKEN,
+ *                     so your node-admin secret can't silently go to a third party.
+ *                     `abx` is the built-in first-party name: https://services.abx.io plus
+ *                     ABX_SERVICES_API_KEY. It needs no URL pasted into project configuration.
+ *   --remote <url>    an ad-hoc URL — token from --remote-token or ABX_REMOTE_SELF_TOKEN (the local
+ *                     client credential for a node you run; `abx deploy-resolver` generates it).
+ *   --remote          bare: the self-host default — ABX_PUBLIC_BASE_URL (the URL baked on-chain,
+ *                     else ABX_RESOLVER_URL) + ABX_REMOTE_SELF_TOKEN.
+ *
+ * Every token here authorizes indexing/metadata control only — never on-chain signing — so the
+ * "no signing key on the host" rule is intact. (`--remote-token`, not `--token`: `--token` already
+ * means a token ID across the owner ops.)
+ *
+ * The RESOLVER's own env var — what gates ITS control plane, server-side (packages/token-api/src/
+ * control-plane.ts) — is unchanged: still `ABX_RESOLVER_ADMIN_TOKEN`. Only the CLIENT-side lookup
+ * for a self-run node moved to the named-remote grammar above; `abx deploy-resolver` prints the exact
+ * command that carries the value across the name boundary (fly secrets set ABX_RESOLVER_ADMIN_TOKEN
+ * from your local ABX_REMOTE_SELF_TOKEN).
+ */
+import { AbxIndexTimeoutError, AbxServiceClient, AbxServiceError, envSuffix, indexProgress, isAccepted, } from '@artblocks/abx-sdk';
+import { CHAIN } from './config.js';
+import { bold, c, dim, g, info, ok, warn } from './output.js';
+export const ABX_SERVICES_URL = 'https://services.abx.io';
+export const ABX_SERVICES_API_KEY_VAR = 'ABX_SERVICES_API_KEY';
+/** How to refer to the credential this target is using, in an error the creator has to act on. */
+export function tokenSourceLabel(t) {
+    return t.tokenFrom === 'flag' ? 'the token you passed with --remote-token' : t.tokenVar;
+}
+/**
+ * Resolve the `--remote` flag value (undefined = local op → null). Pure: pass `env` in tests.
+ * `tokenFlag` is `--remote-token` and wins over any env token for this invocation.
+ */
+export function resolveRemote(spec, tokenFlag, env = process.env) {
+    if (spec === undefined)
+        return null;
+    const strip = (u) => u.replace(/\/+$/, '');
+    // bare `--remote` — the self-host default (the resolver this project's on-chain URIs point at)
+    if (spec === 'true' || spec === '') {
+        const base = env.ABX_PUBLIC_BASE_URL ?? env.ABX_RESOLVER_URL;
+        if (!base) {
+            throw new Error('`--remote` needs a target: pass `--remote <name>` (ABX_REMOTE_<NAME>_URL in .env), `--remote https://host`, or set ABX_PUBLIC_BASE_URL in .env');
+        }
+        return { url: strip(base), token: tokenFlag ?? env.ABX_REMOTE_SELF_TOKEN, source: 'default', tokenVar: 'ABX_REMOTE_SELF_TOKEN', tokenFrom: tokenFlag ? 'flag' : 'env' };
+    }
+    // `--remote <url>` — ad-hoc URL, self-host credential conventions
+    if (spec.includes('://')) {
+        return { url: strip(spec), token: tokenFlag ?? env.ABX_REMOTE_SELF_TOKEN, source: 'url', tokenVar: 'ABX_REMOTE_SELF_TOKEN', tokenFrom: tokenFlag ? 'flag' : 'env' };
+    }
+    // The first-party provider has a stable, verified identity. Keep it out of standing agent docs
+    // and generic URL config: a user stores only the credential, while an explicit URL remains the
+    // escape hatch for local/staging services.
+    if (envSuffix(spec) === 'ABX') {
+        return {
+            url: ABX_SERVICES_URL,
+            token: tokenFlag ?? env[ABX_SERVICES_API_KEY_VAR],
+            name: 'ABX',
+            source: 'builtin',
+            tokenVar: ABX_SERVICES_API_KEY_VAR,
+            tokenFrom: tokenFlag ? 'flag' : 'env',
+        };
+    }
+    // `--remote <name>` — a named remote (a managed provider, another node of yours, a staging box)
+    const name = envSuffix(spec);
+    const urlVar = `ABX_REMOTE_${name}_URL`;
+    const tokenVar = `ABX_REMOTE_${name}_TOKEN`;
+    const url = env[urlVar];
+    if (!url) {
+        throw new Error(`--remote ${spec}: no ${urlVar} in your .env. Set ${urlVar}=<the provider's base URL> (+ ${tokenVar}=<your API key>). ` +
+            `(Meant a URL? Pass a scheme: --remote https://host)`);
+    }
+    return { url: strip(url), token: tokenFlag ?? env[tokenVar], name, source: 'named', tokenVar, tokenFrom: tokenFlag ? 'flag' : 'env' };
+}
+/**
+ * The OLD client-side var (`ABX_RESOLVER_ADMIN_TOKEN`) sitting unused in `.env` because the
+ * self-host default's credential moved to the named-remote grammar (`ABX_REMOTE_SELF_TOKEN`) — a
+ * silent fallback would mean an operator's `.env` never gets renamed, so this is the ONE place both
+ * {@link requireRemoteToken} (the hard-stop for a real command) and `abx doctor` (the same fault,
+ * surfaced before a command needs it) decide whether to flag it — sharing the check means they can
+ * never drift on the condition. `null` when there's nothing to flag (old var absent, or the new one
+ * is already set and simply wins).
+ */
+export function selfTokenMigrationWarning(env = process.env) {
+    if (!env.ABX_RESOLVER_ADMIN_TOKEN || env.ABX_REMOTE_SELF_TOKEN)
+        return null;
+    return ('ABX_RESOLVER_ADMIN_TOKEN is set but is no longer read for the self-host default — rename it to ' +
+        'ABX_REMOTE_SELF_TOKEN (and, if you address it by name, ABX_REMOTE_SELF_URL).');
+}
+/** The token, when the remote is the command's OBJECT (add/index/forget/render/migrate-dest) —
+ *  a missing credential is a hard stop that names the exact var to set. */
+export function requireRemoteToken(t, env = process.env) {
+    if (t.token)
+        return t.token;
+    if (t.source === 'builtin') {
+        throw new Error(`remote 'abx' needs ${ABX_SERVICES_API_KEY_VAR} in your private .env, or --remote-token. ` +
+            `Run \`abx auth login\` for the browser-approved flow (manual fallback: ${ABX_SERVICES_URL}/signup).`);
+    }
+    if (t.source === 'named') {
+        // The likeliest cause of "URL but no token" is a near-miss var name, and the value is sitting
+        // right there in .env — so name it instead of letting them diff strings by eye.
+        const nearMiss = misnamedRemoteVars(env).find((v) => v.suggestion === t.tokenVar);
+        throw new Error(`remote '${t.name}' has a URL but no token — set ${t.tokenVar} in your .env (the API key the provider issued), or pass --remote-token.` +
+            (nearMiss ? `\n  Found ${nearMiss.key} in your env — that name isn't read; rename it to ${t.tokenVar}.` : ''));
+    }
+    // The self-host default/URL lane used to read ABX_RESOLVER_ADMIN_TOKEN directly. It's now just
+    // the named remote called "self" — no special-casing, same grammar as any other name — so the OLD
+    // var is never read here. No silent fallback: point at both new vars, once, by name.
+    const migration = selfTokenMigrationWarning(env);
+    if (migration)
+        throw new Error(`${migration} Or pass --remote-token.`);
+    throw new Error(`remote ops need ${t.tokenVar} in your .env — it must match the token set on the resolver ` +
+        '(`abx deploy-resolver` generates one and wires both sides). Or pass --remote-token.');
+}
+/** Every named remote configured in the env (`ABX_REMOTE_<NAME>_URL`). The normalized name is
+ *  canonical — the env convention is lossy, so enumeration reads the env, never inverts it. */
+export function listConfiguredRemotes(env = process.env) {
+    const out = [
+        { name: 'ABX', url: ABX_SERVICES_URL, hasToken: !!env[ABX_SERVICES_API_KEY_VAR] },
+    ];
+    for (const [key, value] of Object.entries(env)) {
+        const m = /^ABX_REMOTE_(.+)_URL$/.exec(key);
+        if (!m || !value)
+            continue;
+        if (m[1] === 'ABX')
+            continue;
+        out.push({ name: m[1], url: value.replace(/\/+$/, ''), hasToken: !!env[`ABX_REMOTE_${m[1]}_TOKEN`] });
+    }
+    return out.sort((a, b) => a.name.localeCompare(b.name));
+}
+/**
+ * `ABX_REMOTE_*` vars that follow no recognized suffix — i.e. a typo. The convention has exactly two
+ * suffixes (`_URL`, `_TOKEN`), and anything else (`_KEY`, `_APIKEY`, `_SECRET`) is silently ignored:
+ * the CLI reports "no token" while the value sits right there in `.env`. Cheap to detect, so detect
+ * it rather than leaving the creator to compare strings by eye.
+ */
+export function misnamedRemoteVars(env = process.env) {
+    const out = [];
+    for (const key of Object.keys(env)) {
+        if (!key.startsWith('ABX_REMOTE_') || key === 'ABX_REMOTE_TOKEN')
+            continue;
+        if (/_URL$/.test(key) || /_TOKEN$/.test(key))
+            continue;
+        // Strip a trailing credential-ish word to recover the intended remote name.
+        const name = key.replace(/^ABX_REMOTE_/, '').replace(/_(KEY|APIKEY|API_KEY|SECRET|PASS|PASSWORD|BEARER|AUTH)$/, '');
+        out.push({ key, suggestion: `ABX_REMOTE_${name}_TOKEN` });
+    }
+    return out.sort((a, b) => a.key.localeCompare(b.key));
+}
+/** The SDK service client bound to this target (call {@link requireRemoteToken} first when the
+ *  operation needs auth). */
+export function serviceClient(t) {
+    return new AbxServiceClient({ baseUrl: t.url, token: t.token });
+}
+/**
+ * Is this named remote's stored credential actually accepted? One cheap authed read, so `doctor` can
+ * report capability instead of mere presence.
+ *
+ * Doctor is the command a creator runs FIRST, and it used to print a clean `remotes: meridian` for a
+ * key the service rejects — the 401 only surfaced later, from `abx remote <name>`, after they had
+ * already trusted the line. Same class as an RPC that answers `[]` because it pruned its logs: an
+ * empty success is not evidence of capability.
+ *
+ * Never throws and never blocks doctor for long: a short per-attempt timeout, and anything that is
+ * not a definitive rejection is reported as a soft note rather than a ✗, because a slow or briefly
+ * unreachable provider is not a misconfiguration the creator can act on.
+ */
+export async function probeRemoteCredential(name, timeoutMs = 4000) {
+    const target = resolveRemote(name);
+    if (!target)
+        return { ok: false, fatal: false, detail: '(unresolved)' };
+    try {
+        // retryDelayMs 0: a 401 is definitive and never retries anyway, but an unreachable provider
+        // would otherwise back off across four attempts and stall the one command that must stay quick.
+        const client = new AbxServiceClient({ baseUrl: target.url, token: target.token, timeoutMs, retryDelayMs: 0 });
+        const projects = await client.listProjects();
+        return { ok: true, fatal: false, detail: `· ${projects.length} project(s) visible` };
+    }
+    catch (err) {
+        if (err instanceof AbxServiceError && err.status === 401) {
+            return { ok: false, fatal: true, detail: `token rejected (401) — fix or rotate ${tokenVarFor(name)}` };
+        }
+        if (err instanceof AbxServiceError && err.status === 403) {
+            return { ok: false, fatal: false, detail: '(authorized key, scoped by the provider — not a misconfiguration)' };
+        }
+        return { ok: false, fatal: false, detail: `(unreachable right now: ${err.message.slice(0, 60)})` };
+    }
+}
+/** The env var a named remote's token is read from — the one to name when it is rejected. */
+export function tokenVarFor(name) {
+    if (name.toUpperCase() === 'ABX')
+        return ABX_SERVICES_API_KEY_VAR;
+    return `ABX_REMOTE_${name.toUpperCase()}_TOKEN`;
+}
+/**
+ * Map a control-plane failure to an actionable CLI error. Keys off `AbxServiceError.code`/status,
+ * never off message prose (the machine-code half of the interface spec):
+ *   401 — the credential itself was rejected → name the var that supplied it.
+ *   403 — credential fine, not authorized for this resource → provider scoping, don't retry.
+ *   `disabled` — the node has no control-plane token configured at all.
+ *   bare 404 on /v1 — no control plane at this URL (pre-/v1 node, or not an ABX service).
  */
-/** Normalize a resolver base URL to its `/admin/projects` control-plane endpoint. */
-export function adminProjectsUrl(base) {
-    return base.replace(/\/+$/, '') + '/admin/projects';
+export function describeRemoteError(err, t, label) {
+    if (!(err instanceof AbxServiceError))
+        return err;
+    if (err.status === 0) {
+        // Nothing answered. Say WHERE we asked and, for the bare form, which env var chose it — a lone
+        // `fetch failed` leaves the creator with no idea which URL was even tried.
+        const from = t.source === 'default'
+            ? ' (bare `--remote` uses ABX_PUBLIC_BASE_URL, else ABX_RESOLVER_URL)'
+            : t.source === 'named'
+                ? ` (from ABX_REMOTE_${t.name}_URL)`
+                : t.source === 'builtin'
+                    ? ' (built-in first-party ABX Services target)'
+                    : '';
+        return new Error(`${label}: nothing responded at ${t.url}${from}. Is it running, and is that the right address?`);
+    }
+    if (err.status === 401) {
+        return new Error(`${label}: 401 unauthorized — ${t.url} rejected ${tokenSourceLabel(t)}. ` +
+            (t.tokenFrom === 'flag'
+                ? `That value is wrong or stale — get a fresh key from the provider (${t.tokenVar} in .env is what a normal run reads).`
+                : 'Fix or rotate the key (or pass --remote-token to test a replacement).'));
+    }
+    if (err.status === 403) {
+        return new Error(`${label}: 403 forbidden — the token is valid but not authorized for this project/chain (provider-side scoping, not a typo). ` +
+            `Check the provider's dashboard and its descriptor (\`abx remote ${t.name ?? t.url}\`).`);
+    }
+    if (err.code === 'not_registered') {
+        // The likeliest cause when READING a remote (status/index/render) is that the bridge step was
+        // never done — the service has no idea this contract exists. Name the fix, not the 404.
+        return new Error(`${label}: ${t.url} doesn't have this project registered — it can't serve or report on a contract it was never told about. ` +
+            `Register it: \`abx add <address> --remote ${t.name?.toLowerCase() ?? t.url}\`.`);
+    }
+    if (err.code === 'disabled') {
+        return new Error(`${label}: the resolver at ${t.url} has no control-plane token configured — it can't accept remote registrations. For your own node, set ABX_RESOLVER_ADMIN_TOKEN on it (\`abx deploy-resolver\` wires it).`);
+    }
+    if (err.status === 404 && !err.code) {
+        return new Error(`${label}: ${t.url} has no /v1 control plane — an older resolver (redeploy it: \`abx deploy-resolver\`), or not an ABX service. ` +
+            `Check: curl ${t.url}/.well-known/abx-service`);
+    }
+    // A 5xx that volunteered a failure CLASS is the difference between "wait" and "something is
+    // broken" — and it's the only thing a credential-free 500 body is allowed to tell us, so use it.
+    if (err.class === 'rpc_rate_limited' || err.class === 'rpc_unavailable') {
+        return new Error(`${label}: the service reached its chain RPC ${err.class === 'rpc_rate_limited' ? 'rate limit' : 'and got no answer'} (${err.class}) — ` +
+            `not your credential and not your address. It retries with backoff; check progress with \`abx status <address> --remote ${t.name?.toLowerCase() ?? t.url}\`.`);
+    }
+    return new Error(`${label}: ${err.message}`);
+}
+// The `--remote <name|url>` target (remote.ts owns the convention): a named remote's
+// `ABX_REMOTE_<NAME>_URL/_TOKEN`, an ad-hoc URL, or bare `--remote` = the self-host default.
+// Returns null for a local op (the default).
+export function remoteFlag(flags) {
+    return resolveRemote(flags.remote, flags['remote-token']);
+}
+/**
+ * The factory-verification tri-state, said plainly. `null` means the check never ran (no factory
+ * configured, or the configured one has no code on this chain — common on a local/dev chain), which
+ * is NOT the same as the chain telling us this contract isn't a clone of it.
+ */
+export function canonicalLabel(isCanonical, provenance) {
+    if (isCanonical === true) {
+        // Say WHICH generation stamped it, and its core version — "canonically ABX v2" is a thing a
+        // consumer can repeat, and `abxVersion()` on the clone is where they can verify it themselves.
+        const v = provenance?.coreVersion !== null && provenance?.coreVersion !== undefined ? ` — ABX v${provenance.coreVersion}` : '';
+        if (provenance?.generation === 'prior') {
+            return `${g('yes (factory-verified)')}${dim(`${v}, a PRIOR anchor generation — canonically ABX, deployed by a factory since replaced`)}`;
+        }
+        return g(`yes (factory-verified${v})`);
+    }
+    // "the configured factory" (singular) understated the check and misdirected the reader: since the
+    // edition anchors were added, `detectCanonicalFactory` probes ALL SIX trust anchors (three 721 +
+    // three ERC-1155) and only falls back to the 1/1 anchor when none of them claim the clone. So a
+    // `false` means "no trust anchor this CLI knows deployed this", not "you configured the wrong one" —
+    // and the usual real cause is a contract from a SUPERSEDED factory, or one deployed by hand.
+    if (isCanonical === false) {
+        return `${c.orange}NO — not a clone of any trust anchor this CLI knows${c.reset}${dim(' (a superseded factory, or deployed outside one — `abx doctor` lists the current anchors)')}`;
+    }
+    if (provenance && provenance.anchorsAnswered === 0) {
+        return dim('not checked (no anchor answered — a coverage gap, not a verdict; retry or check the RPC)');
+    }
+    return dim('not checked (no canonical factory for this chain — `abx doctor` shows which)');
+}
+/** How a lifecycle state reads at a glance — the same word everywhere it's printed. */
+export function statusLabel(s) {
+    if (s === 'live')
+        return g('live');
+    if (s === 'failed')
+        return `${c.orange}failed${c.reset}`;
+    if (s === 'stale')
+        return `${c.orange}stale${c.reset}`;
+    return dim(s); // queued | backfilling — in progress, not a problem
+}
+/** `label   value` with only the label dimmed — status values carry their own color, and wrapping
+ *  them in `info()` would fight it. */
+export const statusRow = (label, value) => console.log(`    ${dim(label.padEnd(10))} ${value}`);
+/**
+ * What to DO about a failure class — whose problem it is and whether waiting is the answer.
+ * The class alone told an agent enough to reason it out; it does not tell a creator, and "whose
+ * problem is this" is the single question a failed catch-up has to answer.
+ */
+export function indexErrorAction(cls) {
+    if (cls === 'rpc_rate_limited')
+        return "the SERVICE's chain RPC is throttled — not your key, address, or chain. It retries on its own; if it stays this way, that's the operator's to fix.";
+    if (cls === 'rpc_unavailable')
+        return "the SERVICE can't reach its chain RPC — not your key, address, or chain. It retries on its own; if it stays this way, contact the operator.";
+    if (cls === 'not_abx_contract')
+        return 'the service found no ABX events at that address on this chain — check the address and that the service serves the right chain.';
+    return 'the cause is in the service operator’s logs — nothing you can fix from here; contact them if it persists.';
+}
+/** The one wording for "registered, but catch-up failed" — shared by add/index so both say the same
+ *  thing: what failed, whose problem it is, and that the registration survived. */
+export function failedCatchUpMessage(address, remote, err, check) {
+    const cls = err?.class;
+    return (`${address} is registered on ${remote.url}, but its catch-up FAILED` +
+        `${cls ? ` (${cls}${err?.message ? `: ${err.message}` : ''})` : ''}.\n` +
+        `  ${cls ? `→ ${indexErrorAction(cls)}\n  ` : ''}` +
+        `The registration is durable and the service retries with backoff — watch it with ${bold(check + ' --watch')}.`);
 }
-function authHeaders(token) {
-    return { authorization: `Bearer ${token}`, 'content-type': 'application/json' };
+/**
+ * One human line for a status read: where it is, how far along, and why if it's unhappy.
+ *
+ * What "where" means depends on the state, so say the right thing rather than one number that reads
+ * differently in each: a percentage is only honest while BACKFILLING (see indexProgress). A `live`
+ * project's `toBlock` only advances when that project has events, so on a busy chain a perfectly
+ * current project sits far below head — printing that as a ratio makes healthy look broken.
+ */
+export function statusLine(s) {
+    const p = indexProgress(s);
+    let where;
+    if (p)
+        where = `${s.toBlock}/${s.headBlock} ${dim(`(${p.percent}%)`)}`;
+    else if (!s.toBlock)
+        where = dim('not indexed yet');
+    else if (s.status === 'live')
+        where = `${g('caught up')} ${dim(`· scanned through block ${s.toBlock}`)}`;
+    else if (s.status === 'stale')
+        where = `${dim('not tracking head right now')} ${dim(`· scanned through block ${s.toBlock}${s.headBlock ? ` of ${s.headBlock}` : ''}`)}`;
+    else
+        where = dim(`scanned through block ${s.toBlock}`);
+    const why = s.error ? `  ${c.orange}${s.error.class}${c.reset}${s.error.message ? dim(` — ${s.error.message}`) : ''}` : '';
+    return `${statusLabel(s.status)}  ${where}${why}`;
 }
-/** Map a non-2xx admin response into a useful Error (surfaces the server's message). */
-async function asError(label, resp) {
-    let detail = '';
+/**
+ * Report a register/reindex answer, whichever of the two conformant shapes the service used.
+ *
+ * A `200` already carries the counts. A `202` means the registration is durable and catch-up is still
+ * running — so by default we poll to a terminal state and print the SAME summary line, giving the
+ * human the "waits, then tells you what happened" UX without the service holding a socket open for
+ * minutes. `--no-wait` stops at the 202 and names the command that checks later.
+ */
+export async function reportRemoteIndexing(remote, chainId, address, r, flags, verb) {
+    // A real ABX clone ALWAYS emits a spine (its extension registrations at minimum), so a caught-up
+    // projection with zero events means the service scanned the wrong chain/floor or its RPC hasn't
+    // served the logs — not that the project is empty. A ✓ there is the lie that produces an empty
+    // dashboard (the same guard `reindexAfterDeploy` applies locally).
+    const settledLine = (events, tail) => {
+        if (events > 0)
+            ok(`remote resolver ${verb} ${address}: ${tail}`);
+        else
+            warn(`${address} is registered and caught up on ${remote.url}, but with ${bold('0 events')} — it will serve nothing. Check the service covers ${CHAIN} and that its RPC serves logs from the deploy block.`);
+    };
+    if (!isAccepted(r)) {
+        settledLine(r.project.eventCount, `${r.project.eventCount} events ${dim(`(${r.mode}, ${r.elapsedMs}ms)`)}`);
+        return;
+    }
+    const spec = remote.name ? remote.name.toLowerCase() : remote.source === 'default' ? '' : remote.url;
+    const check = `abx status ${address} --remote${spec ? ` ${spec}` : ''}`;
+    // The registration is durable in EVERY branch here — but don't claim it "is catching up" when the
+    // service already told us the catch-up failed. Two different sentences for two different facts.
+    if (r.project.status === 'failed') {
+        // Lead with the outcome, not the successful sub-step: a line starting "registered on …" reads
+        // as success even with the failure later in the sentence.
+        warn(`${bold('catch-up FAILED')} on ${remote.url} — nothing is being served yet ${dim('(the registration itself is durable; the service retries it)')}`);
+    }
+    else {
+        info(`registered — ${r.project.status} ${dim('(the service accepted it and is catching up; the registration is durable)')}`);
+    }
+    // A known failure is not something to "not wait" for — we already have the answer, so report it as
+    // one regardless of --no-wait (never a ✓ over a broken index).
+    if (flags['no-wait'] !== undefined && r.project.status !== 'failed') {
+        info(`not waiting (--no-wait). Check with ${bold(check)}`);
+        return;
+    }
+    const label = `remote ${verb === 'indexed' ? 'add' : 'index'}`;
+    if (r.project.status === 'failed') {
+        // Fetch the class the register response may not have carried, so the "whose problem" line is
+        // never missing on the path that reports the failure soonest.
+        const st = await serviceClient(remote).projectStatus(chainId, address).catch(() => undefined);
+        throw new Error(`${label}: ${failedCatchUpMessage(address, remote, st?.error ?? undefined, check)}`);
+    }
+    let shown = -100;
+    let lastStatus;
     try {
-        detail = (await resp.json()).error ?? '';
-    }
-    catch {
-        /* non-JSON body */
-    }
-    if (resp.status === 401) {
-        return new Error(`${label}: 401 unauthorized — ABX_RESOLVER_ADMIN_TOKEN doesn't match the token on the resolver.`);
-    }
-    if (resp.status === 404 && detail.includes('disabled')) {
-        return new Error(`${label}: the resolver has no admin token set — it can't accept remote add/remove. ${detail}`);
-    }
-    return new Error(`${label}: ${resp.status} ${detail || resp.statusText}`);
-}
-/** Register + index a project with a remote resolver (remote `abx add`/`index`). */
-export async function remoteAddProject(base, token, body) {
-    const resp = await fetch(adminProjectsUrl(base), {
-        method: 'POST',
-        headers: authHeaders(token),
-        body: JSON.stringify(body),
-    });
-    if (!resp.ok)
-        throw await asError('remote add', resp);
-    return (await resp.json());
-}
-/** Stop a remote resolver from indexing a project (remote `abx forget`). */
-export async function remoteRemoveProject(base, token, address) {
-    const resp = await fetch(`${adminProjectsUrl(base)}/${address}`, { method: 'DELETE', headers: authHeaders(token) });
-    if (!resp.ok && resp.status !== 404)
-        throw await asError('remote remove', resp);
+        const final = await serviceClient(remote).awaitIndexed(chainId, address, {
+            onProgress: (s) => {
+                const p = indexProgress(s);
+                // Print on a state change or a meaningful step — a poll line every 3s is noise in a log an
+                // agent has to read back.
+                if (s.status !== lastStatus || (p && p.percent - shown >= 10)) {
+                    lastStatus = s.status;
+                    if (p)
+                        shown = p.percent;
+                    console.log(`      ${statusLine(s)}`);
+                }
+            },
+        });
+        if (final.status === 'failed') {
+            throw new Error(`${label}: ${failedCatchUpMessage(address, remote, final.error, check)}`);
+        }
+        settledLine(final.eventCount, `${final.eventCount} events, ${final.tokenCount} token(s) ${dim('(live)')}`);
+    }
+    catch (err) {
+        if (err instanceof AbxIndexTimeoutError) {
+            warn(`${address} is still ${err.last?.status ?? 'catching up'} on ${remote.url} — nothing is lost, it just isn't done.`);
+            info(`follow it with ${bold(check + ' --watch')}`);
+            return;
+        }
+        // The service went away mid-wait (or rejected the poll). The registration still landed — say
+        // which failure this is, in the same words every other remote command uses.
+        if (err instanceof AbxServiceError)
+            throw describeRemoteError(err, remote, `remote ${verb}: registered, but polling status`);
+        throw err;
+    }
+}
+/** "3 live, 1 backfilling, 1 failed (rpc_rate_limited)" — the one-line answer to "is my stuff ok?" */
+export function rollUp(projects) {
+    const counts = new Map();
+    for (const p of projects) {
+        const k = p.status ?? 'unknown';
+        counts.set(k, (counts.get(k) ?? 0) + 1);
+    }
+    const classes = [...new Set(projects.filter((p) => p.error).map((p) => p.error.class))];
+    const parts = [...counts.entries()].map(([k, n]) => `${n} ${k}`);
+    return `${parts.join(', ')}${classes.length ? ` ${dim(`(${classes.join(', ')})`)}` : ''}`;
 }
 //# sourceMappingURL=remote.js.map

package/dist/remote.js.map

@@ -1 +1 @@
-{"version":3,"file":"remote.js","sourceRoot":"","sources":["../src/remote.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AA6BH,qFAAqF;AACrF,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,iBAAiB,CAAC;AACtD,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,EAAC,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAC,CAAC;AAChF,CAAC;AAED,wFAAwF;AACxF,KAAK,UAAU,OAAO,CAAC,KAAa,EAAE,IAAc;IAClD,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAI,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAsB,CAAC,KAAK,IAAI,EAAE,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,mBAAmB;IACrB,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACxB,OAAO,IAAI,KAAK,CAAC,GAAG,KAAK,wFAAwF,CAAC,CAAC;IACrH,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACvD,OAAO,IAAI,KAAK,CAAC,GAAG,KAAK,8EAA8E,MAAM,EAAE,CAAC,CAAC;IACnH,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,IAAI,CAAC,MAAM,IAAI,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAa,EAAE,IAAmB;IACrF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE;QAC/C,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC;QAC3B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,MAAM,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IACtD,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAoB,CAAC;AAChD,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAY,EAAE,KAAa,EAAE,OAAe;IACpF,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,OAAO,EAAE,EAAE,EAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,EAAC,CAAC,CAAC;IAClH,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG;QAAE,MAAM,MAAM,OAAO,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;AAClF,CAAC"}
+{"version":3,"file":"remote.js","sourceRoot":"","sources":["../src/remote.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,eAAe,EACf,SAAS,EACT,aAAa,EACb,UAAU,GAQX,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAC,KAAK,EAAC,MAAM,aAAa,CAAC;AAElC,OAAO,EAAC,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAC,MAAM,aAAa,CAAC;AAE5D,MAAM,CAAC,MAAM,gBAAgB,GAAG,yBAAyB,CAAC;AAC1D,MAAM,CAAC,MAAM,wBAAwB,GAAG,sBAAsB,CAAC;AAmB/D,kGAAkG;AAClG,MAAM,UAAU,gBAAgB,CAAC,CAAe;IAC9C,OAAO,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,0CAA0C,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC1F,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAwB,EACxB,SAAkB,EAClB,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAEnD,+FAA+F;IAC/F,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,GAAG,CAAC,mBAAmB,IAAI,GAAG,CAAC,gBAAgB,CAAC;QAC7D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CACb,gJAAgJ,CACjJ,CAAC;QACJ,CAAC;QACD,OAAO,EAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,IAAI,GAAG,CAAC,qBAAqB,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,uBAAuB,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAC,CAAC;IACxK,CAAC;IAED,kEAAkE;IAClE,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,IAAI,GAAG,CAAC,qBAAqB,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,uBAAuB,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAC,CAAC;IACpK,CAAC;IAED,+FAA+F;IAC/F,+FAA+F;IAC/F,2CAA2C;IAC3C,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;QAC9B,OAAO;YACL,GAAG,EAAE,gBAAgB;YACrB,KAAK,EAAE,SAAS,IAAI,GAAG,CAAC,wBAAwB,CAAC;YACjD,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE,wBAAwB;YAClC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK;SACtC,CAAC;IACJ,CAAC;IAED,gGAAgG;IAChG,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,cAAc,IAAI,MAAM,CAAC;IACxC,MAAM,QAAQ,GAAG,cAAc,IAAI,QAAQ,CAAC;IAC5C,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACxB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,YAAY,IAAI,QAAQ,MAAM,sBAAsB,MAAM,iCAAiC,QAAQ,oBAAoB;YACrH,qDAAqD,CACxD,CAAC;IACJ,CAAC;IACD,OAAO,EAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,SAAS,IAAI,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAC,CAAC;AACtI,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC5E,IAAI,CAAC,GAAG,CAAC,wBAAwB,IAAI,GAAG,CAAC,qBAAqB;QAAE,OAAO,IAAI,CAAC;IAC5E,OAAO,CACL,iGAAiG;QACjG,8EAA8E,CAC/E,CAAC;AACJ,CAAC;AAED;2EAC2E;AAC3E,MAAM,UAAU,kBAAkB,CAAC,CAAe,EAAE,MAAyB,OAAO,CAAC,GAAG;IACtF,IAAI,CAAC,CAAC,KAAK;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC;IAC5B,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,sBAAsB,wBAAwB,4CAA4C;YACxF,0EAA0E,gBAAgB,WAAW,CACxG,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QACzB,8FAA8F;QAC9F,gFAAgF;QAChF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC;QAClF,MAAM,IAAI,KAAK,CACb,WAAW,CAAC,CAAC,IAAI,kCAAkC,CAAC,CAAC,QAAQ,0EAA0E;YACrI,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,QAAQ,CAAC,GAAG,qDAAqD,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAChH,CAAC;IACJ,CAAC;IACD,+FAA+F;IAC/F,kGAAkG;IAClG,qFAAqF;IACrF,MAAM,SAAS,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC;IACjD,IAAI,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,0BAA0B,CAAC,CAAC;IACvE,MAAM,IAAI,KAAK,CACb,mBAAmB,CAAC,CAAC,QAAQ,8DAA8D;QACzF,qFAAqF,CACxF,CAAC;AACJ,CAAC;AAED;+FAC+F;AAC/F,MAAM,UAAU,qBAAqB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACxE,MAAM,GAAG,GAA0D;QACjE,EAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAC;KAChF,CAAC;IACF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,CAAC,GAAG,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK;YAAE,SAAS;QAC3B,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK;YAAE,SAAS;QAC7B,GAAG,CAAC,IAAI,CAAC,EAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAC,CAAC,CAAC;IACtG,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACrE,MAAM,GAAG,GAA6C,EAAE,CAAC;IACzD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,GAAG,KAAK,kBAAkB;YAAE,SAAS;QAC3E,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,SAAS;QACvD,4EAA4E;QAC5E,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,yDAAyD,EAAE,EAAE,CAAC,CAAC;QACpH,GAAG,CAAC,IAAI,CAAC,EAAC,GAAG,EAAE,UAAU,EAAE,cAAc,IAAI,QAAQ,EAAC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;6BAC6B;AAC7B,MAAM,UAAU,aAAa,CAAC,CAAe;IAC3C,OAAO,IAAI,gBAAgB,CAAC,EAAC,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAC,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAY,EACZ,SAAS,GAAG,IAAI;IAEhB,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAC,CAAC;IACtE,IAAI,CAAC;QACH,4FAA4F;QAC5F,gGAAgG;QAChG,MAAM,MAAM,GAAG,IAAI,gBAAgB,CAAC,EAAC,OAAO,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,EAAC,CAAC,CAAC;QAC5G,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,YAAY,EAAE,CAAC;QAC7C,OAAO,EAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,QAAQ,CAAC,MAAM,qBAAqB,EAAC,CAAC;IACrF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,eAAe,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACzD,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,wCAAwC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAC,CAAC;QACvG,CAAC;QACD,IAAI,GAAG,YAAY,eAAe,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACzD,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,mEAAmE,EAAC,CAAC;QAChH,CAAC;QACD,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA4B,GAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,EAAC,CAAC;IAC9G,CAAC;AACH,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK;QAAE,OAAO,wBAAwB,CAAC;IAClE,OAAO,cAAc,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC;AAClD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAY,EAAE,CAAe,EAAE,KAAa;IAC9E,IAAI,CAAC,CAAC,GAAG,YAAY,eAAe,CAAC;QAAE,OAAO,GAAY,CAAC;IAC3D,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,+FAA+F;QAC/F,2EAA2E;QAC3E,MAAM,IAAI,GACR,CAAC,CAAC,MAAM,KAAK,SAAS;YACpB,CAAC,CAAC,oEAAoE;YACtE,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO;gBACpB,CAAC,CAAC,qBAAqB,CAAC,CAAC,IAAI,OAAO;gBACpC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS;oBACtB,CAAC,CAAC,6CAA6C;oBACjD,CAAC,CAAC,EAAE,CAAC;QACX,OAAO,IAAI,KAAK,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAC,GAAG,GAAG,IAAI,iDAAiD,CAAC,CAAC;IACpH,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO,IAAI,KAAK,CACd,GAAG,KAAK,wBAAwB,CAAC,CAAC,GAAG,aAAa,gBAAgB,CAAC,CAAC,CAAC,IAAI;YACvE,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM;gBACrB,CAAC,CAAC,qEAAqE,CAAC,CAAC,QAAQ,uCAAuC;gBACxH,CAAC,CAAC,uEAAuE,CAAC,CAC/E,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO,IAAI,KAAK,CACd,GAAG,KAAK,sHAAsH;YAC5H,mEAAmE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,MAAM,CAC3F,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAClC,8FAA8F;QAC9F,wFAAwF;QACxF,OAAO,IAAI,KAAK,CACd,GAAG,KAAK,KAAK,CAAC,CAAC,GAAG,0GAA0G;YAC1H,6CAA6C,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,GAAG,KAAK,CACnF,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC5B,OAAO,IAAI,KAAK,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC,GAAG,0KAA0K,CAAC,CAAC;IACjO,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACpC,OAAO,IAAI,KAAK,CACd,GAAG,KAAK,KAAK,CAAC,CAAC,GAAG,+GAA+G;YAC/H,eAAe,CAAC,CAAC,GAAG,0BAA0B,CACjD,CAAC;IACJ,CAAC;IACD,4FAA4F;IAC5F,iGAAiG;IACjG,IAAI,GAAG,CAAC,KAAK,KAAK,kBAAkB,IAAI,GAAG,CAAC,KAAK,KAAK,iBAAiB,EAAE,CAAC;QACxE,OAAO,IAAI,KAAK,CACd,GAAG,KAAK,uCAAuC,GAAG,CAAC,KAAK,KAAK,kBAAkB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,mBAAmB,KAAK,GAAG,CAAC,KAAK,MAAM;YACtI,0HAA0H,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,GAAG,KAAK,CAChK,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,qFAAqF;AACrF,6FAA6F;AAC7F,6CAA6C;AAC7C,MAAM,UAAU,UAAU,CAAC,KAAY;IACrC,OAAO,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,cAAc,CAAuB,CAAC,CAAC;AAClF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,WAAuC,EAAE,UAA6B;IACnG,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACzB,4FAA4F;QAC5F,+FAA+F;QAC/F,MAAM,CAAC,GAAG,UAAU,EAAE,WAAW,KAAK,IAAI,IAAI,UAAU,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/H,IAAI,UAAU,EAAE,UAAU,KAAK,OAAO,EAAE,CAAC;YACvC,OAAO,GAAG,CAAC,CAAC,wBAAwB,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,qFAAqF,CAAC,EAAE,CAAC;QAC3I,CAAC;QACD,OAAO,CAAC,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;IACzC,CAAC;IACD,kGAAkG;IAClG,iGAAiG;IACjG,gGAAgG;IAChG,qGAAqG;IACrG,6FAA6F;IAC7F,IAAI,WAAW,KAAK,KAAK,EAAE,CAAC;QAC1B,OAAO,GAAG,CAAC,CAAC,MAAM,sDAAsD,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,2FAA2F,CAAC,EAAE,CAAC;IACvL,CAAC;IACD,IAAI,UAAU,IAAI,UAAU,CAAC,eAAe,KAAK,CAAC,EAAE,CAAC;QACnD,OAAO,GAAG,CAAC,0FAA0F,CAAC,CAAC;IACzG,CAAC;IACD,OAAO,GAAG,CAAC,8EAA8E,CAAC,CAAC;AAC7F,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,WAAW,CAAC,CAAc;IACxC,IAAI,CAAC,KAAK,MAAM;QAAE,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC,KAAK,EAAE,CAAC;IACzD,IAAI,CAAC,KAAK,OAAO;QAAE,OAAO,GAAG,CAAC,CAAC,MAAM,QAAQ,CAAC,CAAC,KAAK,EAAE,CAAC;IACvD,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,oDAAoD;AACrE,CAAC;AAED;uCACuC;AACvC,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;AAEhH;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAoB;IACnD,IAAI,GAAG,KAAK,kBAAkB;QAAE,OAAO,oJAAoJ,CAAC;IAC5L,IAAI,GAAG,KAAK,iBAAiB;QAAE,OAAO,6IAA6I,CAAC;IACpL,IAAI,GAAG,KAAK,kBAAkB;QAAE,OAAO,gIAAgI,CAAC;IACxK,OAAO,2GAA2G,CAAC;AACrH,CAAC;AAED;mFACmF;AACnF,MAAM,UAAU,oBAAoB,CAAC,OAAgB,EAAE,MAAoB,EAAE,GAA2B,EAAE,KAAa;IACrH,MAAM,GAAG,GAAG,GAAG,EAAE,KAAK,CAAC;IACvB,OAAO,CACL,GAAG,OAAO,qBAAqB,MAAM,CAAC,GAAG,2BAA2B;QACpE,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,GAAG,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK;QACvE,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAClD,oFAAoF,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,CAChH,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,CAAsB;IAC/C,MAAM,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QAAE,KAAK,GAAG,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,EAAE,CAAC;SAClE,IAAI,CAAC,CAAC,CAAC,OAAO;QAAE,KAAK,GAAG,GAAG,CAAC,iBAAiB,CAAC,CAAC;SAC/C,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;QAAE,KAAK,GAAG,GAAG,CAAC,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,2BAA2B,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;SACpG,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO;QAAE,KAAK,GAAG,GAAG,GAAG,CAAC,6BAA6B,CAAC,IAAI,GAAG,CAAC,2BAA2B,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;;QACnK,KAAK,GAAG,GAAG,CAAC,yBAAyB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3H,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,KAAK,GAAG,GAAG,EAAE,CAAC;AACpD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAoB,EACpB,OAAe,EACf,OAAgB,EAChB,CAAwB,EACxB,KAAY,EACZ,IAAY;IAEZ,iGAAiG;IACjG,gGAAgG;IAChG,+FAA+F;IAC/F,mEAAmE;IACnE,MAAM,WAAW,GAAG,CAAC,MAAc,EAAE,IAAY,EAAE,EAAE;QACnD,IAAI,MAAM,GAAG,CAAC;YAAE,EAAE,CAAC,mBAAmB,IAAI,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC,CAAC;;YAC7D,IAAI,CAAC,GAAG,OAAO,mCAAmC,MAAM,CAAC,GAAG,cAAc,IAAI,CAAC,UAAU,CAAC,sDAAsD,KAAK,sDAAsD,CAAC,CAAC;IACpN,CAAC,CAAC;IACF,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QACnB,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,WAAW,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,SAAS,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5G,OAAO;IACT,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;IACrG,MAAM,KAAK,GAAG,cAAc,OAAO,YAAY,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACxE,kGAAkG;IAClG,gGAAgG;IAChG,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClC,8FAA8F;QAC9F,0DAA0D;QAC1D,IAAI,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,MAAM,CAAC,GAAG,kCAAkC,GAAG,CAAC,8DAA8D,CAAC,EAAE,CAAC,CAAC;IAC3J,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,2EAA2E,CAAC,EAAE,CAAC,CAAC;IAC/H,CAAC;IACD,mGAAmG;IACnG,+DAA+D;IAC/D,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACpE,IAAI,CAAC,uCAAuC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3D,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC/D,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClC,6FAA6F;QAC7F,8DAA8D;QAC9D,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC9F,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,IAAI,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,IAAI,KAAK,GAAG,CAAC,GAAG,CAAC;IACjB,IAAI,UAAmC,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE;YACvE,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE;gBAChB,MAAM,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;gBAC3B,2FAA2F;gBAC3F,0BAA0B;gBAC1B,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;oBAC9D,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;oBACtB,IAAI,CAAC;wBAAE,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC;oBACzB,OAAO,CAAC,GAAG,CAAC,SAAS,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACxC,CAAC;YACH,CAAC;SACF,CAAC,CAAC;QACH,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,WAAW,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,KAAK,CAAC,UAAU,YAAY,KAAK,CAAC,UAAU,aAAa,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC7G,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,oBAAoB,EAAE,CAAC;YACxC,IAAI,CAAC,GAAG,OAAO,aAAa,GAAG,CAAC,IAAI,EAAE,MAAM,IAAI,aAAa,OAAO,MAAM,CAAC,GAAG,yCAAyC,CAAC,CAAC;YACzH,IAAI,CAAC,kBAAkB,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;YACnD,OAAO;QACT,CAAC;QACD,6FAA6F;QAC7F,4EAA4E;QAC5E,IAAI,GAAG,YAAY,eAAe;YAAE,MAAM,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,IAAI,kCAAkC,CAAC,CAAC;QAC7H,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,MAAM,CAAC,QAAgE;IACrF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,SAAS,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzF,MAAM,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjE,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC5F,CAAC"}

package/dist/riskgate.d.ts

@@ -0,0 +1,62 @@
+import { type Address } from '@artblocks/abx-sdk';
+import { type Lane, type SignResult, type TxProvider } from './signer.js';
+import { type Flags } from './flags.js';
+/** Resolve the signing lane from flags: `--unsigned` (cold) · `--sign` (wallet) · default hot. The
+ *  one place this decision is made — every write reads the same three flags the same way. */
+export declare function laneFromFlags(flags: Flags): Lane;
+/**
+ * Refuse a real deploy on the HOT lane when there is no key to sign with — before the command has
+ * spent anything.
+ *
+ * The signing lanes are checked at *signing* time, which is the end of a deploy. Everything that
+ * makes a deploy possible happens first, and some of it is neither free nor reversible: `--backend
+ * arweave|ipfs|cloud` UPLOADS the creator's art before any transaction is prepared. So a deploy run
+ * with no key, and no `--dry-run` to say "preview only", would mint an Arweave identity, publish the
+ * art, and only THEN discover it could never have deployed. Under Turbo's free tier the upload
+ * *succeeds*, so the art is published permanently — an irreversible side effect from a run that was
+ * always going to fail.
+ *
+ * `--dry-run` guards every signing choke point (`isDryRun`, `gatedSend`); this is the same idea one
+ * step earlier, and the rule it enforces is the sibling of that one: **a spend or a publish never
+ * precedes the check that this run can be signed at all.** Only the hot lane is checked — `--sign`
+ * (browser wallet) and `--unsigned` (offline signer) deliberately have no local key, and a preview
+ * spends nothing.
+ */
+export declare function assertLaneCanSign(flags: Flags): void;
+/**
+ * Opt-in pre-send confirmation gate (`--confirm`). OFF by default → scripted use is untouched. Even
+ * when opted in, it never blocks automation: `--yes` or a non-TTY stdin proceeds silently. Only an
+ * interactive `--confirm` prints the summary and waits for a y/N. Aborts on anything but yes.
+ */
+export declare function confirmSend(summary: string, flags: Flags): Promise<void>;
+export interface DryRunSimulation {
+    status: 'would-succeed' | 'would-revert' | 'unknown';
+    reason?: string;
+}
+/**
+ * A revert's own name, when the payload carries one — `RoyaltyTooHigh()` instead of a raw hex dump
+ * or "reverted for an unknown reason".
+ *
+ * Whether we get one is the NODE's choice, not ours: many public endpoints (measured:
+ * `base-sepolia-rpc.publicnode.com` and `sepolia.base.org`) answer a failed `eth_call` with a bare
+ * `execution reverted` and no data at all. So the no-data case says *that*, rather than implying we
+ * looked at a reason and couldn't read it.
+ */
+export declare function revertReason(err: unknown): string;
+export interface GatedSendOptions {
+    chainKey: string;
+    /** The address that must sign (onlyOwner / token holder) — shown to the human, guards the hot
+     *  lane, and (when set) printed on the dry-run preview. */
+    expectedSigner?: Address;
+}
+/**
+ * The one send choke point for a SINGLE already-prepared write: `--dry-run` preview (nothing sent,
+ * returns `null`) → optional `--confirm` prompt → lane selection → `signTx`. Every caller — an
+ * owner-op's `runWrite`/`runMinterWrite`, or the deploy family's resumed-setup send — resolves to
+ * this, so the two families can never again each carry their own (possibly diverging) idea of what
+ * `--dry-run` or `--confirm` means. The historical bug class this forecloses structurally: a write
+ * reaching the send lane under `--dry-run` because some caller re-derived the check by hand and
+ * missed a branch.
+ */
+export declare function gatedSend(provider: TxProvider, flags: Flags, opts: GatedSendOptions): Promise<SignResult | null>;
+//# sourceMappingURL=riskgate.d.ts.map

package/dist/riskgate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"riskgate.d.ts","sourceRoot":"","sources":["../src/riskgate.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAgE,KAAK,OAAO,EAAkB,MAAM,oBAAoB,CAAC;AAChI,OAAO,EAAS,KAAK,IAAI,EAAE,KAAK,UAAU,EAAE,KAAK,UAAU,EAAC,MAAM,aAAa,CAAC;AAChF,OAAO,EAAW,KAAK,KAAK,EAAC,MAAM,YAAY,CAAC;AAOhD;6FAC6F;AAC7F,wBAAgB,aAAa,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAoBhD;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAUpD;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAO9E;AAaD,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,eAAe,GAAG,cAAc,GAAG,SAAS,CAAC;IACrD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAkBjD;AA4DD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB;+DAC2D;IAC3D,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED;;;;;;;;GAQG;AACH,wBAAsB,SAAS,CAAC,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CA+BtH"}