@artblocks/abx-cli 0.1.0-alpha.7 → 0.1.0-alpha.70

package/dist/deploy-plan.d.ts

@@ -0,0 +1,218 @@
+/**
+ * The structured `--dry-run --json` / `--json` deploy plan.
+ *
+ * The JSON payload and human prose are rendered from the same values but remain separate surfaces.
+ * Deploy is a high-stakes command family (real gas, address pinning, salt reservation), its exact
+ * dry-run prose is covered extensively, and the end-user skill depends on that prose. This module
+ * therefore provides a versioned, typed object populated from the SAME locals `commands/deploy.ts`
+ * uses for human narration at every `emit(jsonSafe({...}))` call site.
+ *
+ * A field a lane genuinely has no answer for is explicit `null`, never silently absent — that
+ * distinction (present-but-empty vs. not-applicable-here) is the whole point of a schema. See each
+ * `deploy.ts` call site for the specific reasoning behind its nulls.
+ */
+import type { Address } from '@artblocks/abx-sdk';
+/** Bump whenever a field is added, renamed, or reinterpreted — a consumer keys behavior off this,
+ *  not off the CLI's own package version (that changes for reasons unrelated to this shape).
+ *
+ *  `as const` is load-bearing, not decoration: a plain `= 1` is a WIDENING literal, so the moment it
+ *  is read into an un-annotated intermediate object (the resume lane builds one and spreads it into
+ *  several emits) the property degrades to `number` and stops satisfying `DeployPlan`. Keep it.
+ *
+ *  v2 (this change): added `custody.renderer` and `custody.image`; reinterpreted `transactions.legs`
+ *  to end with `'deploy'` whenever it is non-null (previously silent about the deploy tx itself —
+ *  see each field's own doc comment). A consumer keying behavior off `legs`' shape needs to know
+ *  which version it's reading. */
+export declare const DEPLOY_PLAN_SCHEMA_VERSION: 2;
+/** The six product lanes `deploy.ts` implements — a stable discriminator independent of the legacy
+ *  `command`/`kind` fields already on the payload (which exist for backward compat and don't fully
+ *  agree with each other across lanes: `kind: 'edition-code'` vs. this union's `'code-edition'`). */
+export type DeployPlanFamily = '1of1' | '1of1-edition' | 'series' | 'series-edition' | 'code' | 'code-edition';
+/** The signing lanes `laneFromFlags` resolves to, reused verbatim. */
+export type DeployPlanLane = 'send' | 'sign' | 'sponsor' | 'unsigned';
+export interface DeployPlanTransactions {
+    /** Wallet TX SIGNATURES this run needs — the exact same count the lane's own dry-run/confirm
+     *  "approvals" line reports (an off-chain storage upload is a separate signature class, never
+     *  counted here — see the `approvals` local at each call site). */
+    approvals: number;
+    /**
+     * The ordered, NAMED stages this run signs, ending with `'deploy'` itself — e.g.
+     * `['onchain-image-staging', 'deploy']` for an image lane staging bytes into the chunk store first,
+     * or `['chunks', 'param-schemas', 'dependencies', 'onchain-uri', 'mints', 'deploy']` for a code
+     * project whose setup rides one or more gas-bounded transactions ahead of the deploy tx. `null`
+     * when the deploy is a single, self-contained transaction with no named stage worth calling out.
+     *
+     * A stage name is a GROUP, not a 1:1 tx count: `'chunks'`/`'onchain-image-staging'` can be one
+     * atomic write or SEVERAL gas-bounded batch transactions (a 60KB+ script's setup, in particular —
+     * see `commands/deploy.ts`'s `planCodeSetupBatches`), and `approvals` is what reports the real
+     * total signature count — `legs.length` never needs to equal `approvals`. The one invariant this
+     * schema DOES hold: `legs === null` iff `approvals` is exactly the trivial case for that lane (1 for
+     * a fresh deploy with nothing riding ahead of it; the resume lane's own fixed count when everything
+     * is already done) — i.e. non-null legs always means "something happens beyond the bare minimum."
+     *
+     * EXCEPTION: the `--resume` lane never deploys (the contract already exists), so its legs name only
+     * the groups riding the setup transaction(s) it sends (one or more, gas-bounded, same as a fresh
+     * deploy) and never include `'deploy'` — see the `resumeLegs` call sites in `commands/deploy.ts` for
+     * why that lane's unit model differs.
+     */
+    legs: string[] | null;
+}
+export interface DeployPlanRoles {
+    /** The address that signs this deploy. `null` only when genuinely unknown yet (a dry run with no
+     *  `--for` and no resolvable wallet key — the plan is still previewable; just not addressed to
+     *  anyone in particular). */
+    signer: string | null;
+    /** Always equal to `signer` in this codebase — every lane sets `owner: deployer` — carried as its
+     *  own field because a consumer reasoning about roles shouldn't have to know that fact. */
+    owner: string | null;
+    royaltyReceiver: string | null;
+    /** `null` when no `--primary-payee` was given (sale proceeds go to the owner) — the lanes with no
+     *  concept of a delegated payee at all (the plain 1/1) also report `null` here. */
+    primaryPayee: string | null;
+    /** `null` when no `--minter` was given (only the owner can mint) — same "no concept" case as
+     *  `primaryPayee` on the plain 1/1 lane. */
+    minter: string | null;
+}
+export interface DeployPlanRoyalty {
+    bps: number;
+    capBps: number;
+    burnable: boolean;
+}
+export interface DeployPlanCustody {
+    /** Does `tokenURI`/`contractURI` (or `uri`/`contractURI` on an edition) resolve on-chain via the
+     *  canonical renderer, vs. through a resolver base baked on-chain. */
+    onChainUri: boolean;
+    /** Are the IMAGE bytes themselves on-chain (a chunk-store `reader` field) — distinct from
+     *  `onChainUri`, which only says the metadata JSON resolves on-chain (see deploy.ts's own
+     *  "puts the metadata JSON on-chain, not the image" warning). `null` on the code lanes, where an
+     *  image is one of several independently-disposed surfaces — see `surfaces.thumbnail` instead. */
+    imageOnChain: boolean | null;
+    /** The off-chain storage backend holding bytes this deploy custodies (e.g. `ipfs`, `arweave`,
+     *  `fs`) — `null` when nothing is stored off-chain (fully on-chain content, or a code project
+     *  whose script chunks are on-chain and carries no directory build). */
+    backend: string | null;
+    /** The on-chain `tokenURIBase`/`contractURIBase` this deploy writes — `null`, not `''`, when the
+     *  lane deliberately leaves it empty because the on-chain renderer is authoritative (baking a
+     *  base anyway would be misleading: nothing ever reads it while a renderer is set). */
+    tokenUriBase: string | null;
+    contractUriBase: string | null;
+    /** The on-chain renderer address serving `tokenURI`/`contractURI` — the SAME address the "On-chain
+     *  renderer" step already prints (`would use renderer 0x…` on a dry run, `using renderer 0x…` on a
+     *  real send). The zero address there means "would deploy the canonical renderer fresh," never
+     *  "no renderer" — a consumer reading this field needs the same caveat the prose carries. `null`
+     *  when `onChainUri` is false: off-chain custody has no renderer question to answer. On a
+     *  `--resume` emit this is always `null` too — the renderer is an InitParams field fixed at the
+     *  ORIGINAL deploy (like `royalty`/`mint`, see their own doc comments), and a resume doesn't
+     *  re-read or re-decide it here. */
+    renderer: Address | null;
+    /** File-level facts about the `--onchain-image` bytes THIS deploy stages, read locally (no chain
+     *  call) from the exact path `--image` names — `null` unless `imageOnChain` is `true` on a lane
+     *  that stages a SINGLE file (the 1/1 and 1/1-edition lanes). `null` on `series`/`series-edition`
+     *  too even when `imageOnChain` is `true` there: those lanes stage ONE FILE PER TOKEN, so no
+     *  single-file shape fits — the per-token detail is prose-only today (see the `previewImageStaging`
+     *  loop in `commands/deploy.ts`). */
+    image: DeployPlanImageFile | null;
+}
+export interface DeployPlanImageFile {
+    /** Raw size of the file on disk, in bytes — the same number the "Stage on-chain image" step's
+     *  `NNNB → …` line already prints. */
+    bytes: number;
+    /** Size after the staging plan's chunking/compression (`--compress fastlz` shrinks per chunk;
+     *  `gzip` shrinks the whole file; `none` leaves it unchanged) — the same number that line's
+     *  `[fastlz NNN→MMMB]` bracket already prints. */
+    stagedBytes: number;
+    /** MIME type sniffed from the file's extension (the same `contentTypeFromPath` helper every other
+     *  content-type-aware line in this file uses) — not itself printed by the staging preview line,
+     *  but a deterministic fact about the exact file already opened for that preview, computed locally
+     *  with no chain read, so reporting it costs nothing and fabricates nothing. */
+    mimeType: string;
+    /** keccak256 of the RAW (pre-compression) file bytes. This is NOT an on-chain commitment — a
+     *  reader-backed on-chain image has none; the bytes themselves ARE the on-chain content, so there
+     *  is nothing to commit to separately. It is a content-addressing fact about the LOCAL file,
+     *  computed the same way (no chain read) for a `--json` consumer that wants to verify provenance
+     *  later against what actually got staged. */
+    contentHash: string;
+}
+export interface DeployPlanMint {
+    /** True when nothing mints at deploy (mint later, or via a delegated minter/sale). */
+    deferred: boolean;
+    /** How many distinct tokens/ids mint at deploy — `0` when deferred. */
+    count: number;
+    /** Copies PER id (edition lanes only) — `null` on a unique-token lane, where the concept doesn't
+     *  exist (every id is exactly one copy by construction). A bigint, stringified (see jsonSafe). */
+    amountPerId: string | null;
+    recipient: string | null;
+}
+export interface DeployPlanEstimate {
+    /**
+     * A rough, hedged order-of-magnitude ETH/gas figure for THIS deploy's on-chain write cost.
+     *
+     * `null` is not "not implemented yet" here — it is the honest answer on every lane that genuinely
+     * computes no such number today, including the image lanes' `--onchain-image` staging (1/1,
+     * 1/1-edition, series, series-edition all skip this: verified directly — none of them prices gas or
+     * prints an "est. on-chain cost" line anywhere on the dry-run path). The ONE lane that does compute
+     * and print one is the fresh `code` family's on-chain-byte-storage guidance (a best-effort
+     * `~200 gas/byte` heuristic priced at the live gas price, wrapped in a try/catch that skips silently
+     * if the RPC can't price gas) — see the `planEstimate` local in `commands/deploy.ts`.
+     *
+     * This field NEVER re-derives or newly computes a number for the plan — it only carries over the
+     * exact estimate the human readout already printed. Do not extend this to a lane that doesn't
+     * already print one without saying so explicitly wherever that change is made: an estimate implies
+     * an RPC gas-price read, which is a new class of work for a dry run that today makes none.
+     */
+    ethApprox: string | null;
+    gasApprox: string | null;
+}
+export interface DeployPlanSurface {
+    ok: boolean;
+    detail: string;
+}
+/** The code lane's "every marketplace-facing dimension, resolved now" block — `null` on every other
+ *  lane (an image lane's thumbnail is fully covered by `custody`; it has no separate traits/postParam
+ *  disposition to report). */
+export interface DeployPlanSurfaces {
+    thumbnail: DeployPlanSurface;
+    traits: DeployPlanSurface;
+    postParams: DeployPlanSurface;
+}
+/** `null` on the image lanes, which have no dependency-registry concept. */
+export interface DeployPlanDependencies {
+    count: number;
+    registry: string | null;
+}
+/** Present only on a `deploy-code --resume` emit — `null` on a fresh deploy. */
+export interface DeployPlanResume {
+    target: string;
+    sentLegs: number;
+    complete: boolean;
+}
+export interface DeployPlan {
+    schemaVersion: typeof DEPLOY_PLAN_SCHEMA_VERSION;
+    family: DeployPlanFamily;
+    lane: DeployPlanLane;
+    transactions: DeployPlanTransactions;
+    roles: DeployPlanRoles;
+    /** `null` on a `--resume` emit: royalty is an InitParams field fixed at the ORIGINAL deploy, and a
+     *  resume never touches it — reporting the flags passed to `--resume` here would misleadingly
+     *  imply this run writes them. */
+    royalty: DeployPlanRoyalty | null;
+    custody: DeployPlanCustody;
+    /** `null` on a `--resume` emit — see the field's own module doc for why the mint plan isn't
+     *  cleanly reducible to one shape there (edition resume mints are a PER-ID list, not a count). */
+    mint: DeployPlanMint | null;
+    estimate: DeployPlanEstimate;
+    /** Every `warn()` line this invocation raised, ANSI-stripped, in print order — see
+     *  `beginPlanWarnings`/the local `warn` wrapper in deploy.ts. Not exhaustive of every warning this
+     *  FILE can print (a trust-anchor bootstrap warning from `output.ts`'s `ensureFactory`/etc. isn't
+     *  captured — those only fire on a real send that also stands up a fresh trust anchor, and are
+     *  file-scoped to a different module), but covers every warning the LANE ITSELF raises, which is
+     *  what a dry-run consumer cares about. */
+    warnings: string[];
+    surfaces: DeployPlanSurfaces | null;
+    dependencies: DeployPlanDependencies | null;
+    resume: DeployPlanResume | null;
+}
+/** Strip the tiny ANSI color wrappers (`bold`/`dim`/`g` from output.ts) so a warning captured for the
+ *  plan reads as plain text — a JSON consumer has no terminal to render escape codes against. */
+export declare function stripAnsiForPlan(s: string): string;
+//# sourceMappingURL=deploy-plan.d.ts.map

package/dist/deploy-plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-plan.d.ts","sourceRoot":"","sources":["../src/deploy-plan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAC,OAAO,EAAC,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;kCAUkC;AAClC,eAAO,MAAM,0BAA0B,EAAG,CAAU,CAAC;AAErD;;qGAEqG;AACrG,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,cAAc,GAAG,QAAQ,GAAG,gBAAgB,GAAG,MAAM,GAAG,cAAc,CAAC;AAE/G,sEAAsE;AACtE,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,CAAC;AAEtE,MAAM,WAAW,sBAAsB;IACrC;;uEAEmE;IACnE,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;;;;;;;;;;;;;;OAmBG;IACH,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B;;iCAE6B;IAC7B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB;+FAC2F;IAC3F,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B;uFACmF;IACnF,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B;gDAC4C;IAC5C,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC;0EACsE;IACtE,UAAU,EAAE,OAAO,CAAC;IACpB;;;sGAGkG;IAClG,YAAY,EAAE,OAAO,GAAG,IAAI,CAAC;IAC7B;;4EAEwE;IACxE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB;;2FAEuF;IACvF,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B;;;;;;;wCAOoC;IACpC,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC;IACzB;;;;;yCAKqC;IACrC,KAAK,EAAE,mBAAmB,GAAG,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,mBAAmB;IAClC;0CACsC;IACtC,KAAK,EAAE,MAAM,CAAC;IACd;;sDAEkD;IAClD,WAAW,EAAE,MAAM,CAAC;IACpB;;;oFAGgF;IAChF,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;kDAI8C;IAC9C,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,sFAAsF;IACtF,QAAQ,EAAE,OAAO,CAAC;IAClB,uEAAuE;IACvE,KAAK,EAAE,MAAM,CAAC;IACd;sGACkG;IAClG,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC;;;;;;;;;;;;;;;OAeG;IACH,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;8BAE8B;AAC9B,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,iBAAiB,CAAC;IAC7B,MAAM,EAAE,iBAAiB,CAAC;IAC1B,UAAU,EAAE,iBAAiB,CAAC;CAC/B;AAED,4EAA4E;AAC5E,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,gFAAgF;AAChF,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,aAAa,EAAE,OAAO,0BAA0B,CAAC;IACjD,MAAM,EAAE,gBAAgB,CAAC;IACzB,IAAI,EAAE,cAAc,CAAC;IACrB,YAAY,EAAE,sBAAsB,CAAC;IACrC,KAAK,EAAE,eAAe,CAAC;IACvB;;sCAEkC;IAClC,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAClC,OAAO,EAAE,iBAAiB,CAAC;IAC3B;sGACkG;IAClG,IAAI,EAAE,cAAc,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE,kBAAkB,CAAC;IAC7B;;;;;+CAK2C;IAC3C,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACpC,YAAY,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC5C,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC;CACjC;AAKD;iGACiG;AACjG,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAElD"}

package/dist/deploy-plan.js

@@ -0,0 +1,20 @@
+/** Bump whenever a field is added, renamed, or reinterpreted — a consumer keys behavior off this,
+ *  not off the CLI's own package version (that changes for reasons unrelated to this shape).
+ *
+ *  `as const` is load-bearing, not decoration: a plain `= 1` is a WIDENING literal, so the moment it
+ *  is read into an un-annotated intermediate object (the resume lane builds one and spreads it into
+ *  several emits) the property degrades to `number` and stops satisfying `DeployPlan`. Keep it.
+ *
+ *  v2 (this change): added `custody.renderer` and `custody.image`; reinterpreted `transactions.legs`
+ *  to end with `'deploy'` whenever it is non-null (previously silent about the deploy tx itself —
+ *  see each field's own doc comment). A consumer keying behavior off `legs`' shape needs to know
+ *  which version it's reading. */
+export const DEPLOY_PLAN_SCHEMA_VERSION = 2;
+// eslint-disable-next-line no-control-regex
+const ANSI = /\x1b\[[0-9;]*m/g;
+/** Strip the tiny ANSI color wrappers (`bold`/`dim`/`g` from output.ts) so a warning captured for the
+ *  plan reads as plain text — a JSON consumer has no terminal to render escape codes against. */
+export function stripAnsiForPlan(s) {
+    return s.replace(ANSI, '');
+}
+//# sourceMappingURL=deploy-plan.js.map

package/dist/deploy-plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-plan.js","sourceRoot":"","sources":["../src/deploy-plan.ts"],"names":[],"mappings":"AAeA;;;;;;;;;;kCAUkC;AAClC,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAU,CAAC;AA4MrD,4CAA4C;AAC5C,MAAM,IAAI,GAAG,iBAAiB,CAAC;AAE/B;iGACiG;AACjG,MAAM,UAAU,gBAAgB,CAAC,CAAS;IACxC,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AAC7B,CAAC"}

package/dist/deps.d.ts

@@ -1,46 +1,13 @@
-import { type Address, type DependencyReadClient, type Hex, type ParsedDependencyRef, type RegistryDependencyDetails } from '@artblocks/abx-sdk';
+/**
+ * The `--dep` flag grammar for `abx deploy-code` — the one CLI-local piece of the dependency
+ * lane. Everything downstream of a parsed ref (registry-pointer resolution, setup-multicall leg
+ * composition, the selection-time registry check) lives in `@artblocks/abx-sdk`'s `deps.ts`.
+ */
+import { type ParsedDependencyRef } from '@artblocks/abx-sdk';
 /**
  * Parse the accumulated `--dep` flag value (repeats comma-join — see flags.ts — and each
  * value may itself be comma-separated) into ordered refs. Order is load-bearing: the first
  * ref becomes dependency index 0 — the runtime, by convention.
  */
 export declare function parseDepFlag(value: string | undefined): ParsedDependencyRef[];
-/**
- * The registry pointer a deploy with ≥1 Registry-resolution dep should set: an explicit
- * `--dep-registry` wins (validated), else the chain's known AB registry (env-overridable),
- * else none — the caller WARNS and skips the leg (soft pointer; the resolver falls back to
- * its built-in CDN map). Never a blocker.
- */
-export declare function resolveDepRegistryPointer(flagValue: string | undefined, chainId: number): {
-    registry: Address | null;
-    source: 'flag' | 'default' | 'none';
-};
-/**
- * The dependency legs of the setup multicall: one `setDependency(i, resolution, ref)` per
- * dep in index order, plus the `setDependencyRegistry` leg when a pointer resolved. These
- * ride the SAME atomic setup multicall as script chunks/schemas/mints, in every signing lane.
- */
-export declare function dependencySetupCalls(deps: ParsedDependencyRef[], registry: Address | null): Hex[];
-/** One dep's selection-time verdict (Registry-resolution deps only — OnChain refs never touch a registry). */
-export type DepCheck = {
-    dep: string;
-    status: 'found';
-    details: RegistryDependencyDetails;
-} | {
-    dep: string;
-    status: 'not-found';
-} | {
-    dep: string;
-    status: 'skipped';
-};
-/**
- * Best-effort existence/on-chain-ness check of every Registry-resolution dep against the
- * pointer registry. A revert or an empty record ⇒ `not-found` (a warning — the owner may
- * intend a custom registry). A transport failure ⇒ the remaining checks are `skipped` and
- * `rpcOk: false` — one info line, never an error: the deploy proceeds regardless.
- */
-export declare function checkRegistryDeps(client: DependencyReadClient, registry: Address, deps: ParsedDependencyRef[]): Promise<{
-    checks: DepCheck[];
-    rpcOk: boolean;
-}>;
 //# sourceMappingURL=deps.d.ts.map

package/dist/deps.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deps.d.ts","sourceRoot":"","sources":["../src/deps.ts"],"names":[],"mappings":"AAOA,OAAO,EAML,KAAK,OAAO,EACZ,KAAK,oBAAoB,EACzB,KAAK,GAAG,EACR,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC/B,MAAM,oBAAoB,CAAC;AAE5B;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,mBAAmB,EAAE,CAW7E;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,OAAO,EAAE,MAAM,GACd;IAAC,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAAA;CAAC,CASjE;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,mBAAmB,EAAE,EAAE,QAAQ,EAAE,OAAO,GAAG,IAAI,GAAG,GAAG,EAAE,CAQjG;AAED,8GAA8G;AAC9G,MAAM,MAAM,QAAQ,GAChB;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,yBAAyB,CAAA;CAAC,GAClE;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,WAAW,CAAA;CAAC,GAClC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,SAAS,CAAA;CAAC,CAAC;AAErC;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,oBAAoB,EAC5B,QAAQ,EAAE,OAAO,EACjB,IAAI,EAAE,mBAAmB,EAAE,GAC1B,OAAO,CAAC;IAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAC,CAAC,CAyB/C"}
+{"version":3,"file":"deps.d.ts","sourceRoot":"","sources":["../src/deps.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAqB,KAAK,mBAAmB,EAAC,MAAM,oBAAoB,CAAC;AAEhF;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,mBAAmB,EAAE,CAW7E"}

package/dist/deps.js

@@ -1,11 +1,9 @@
 /**
- * The deploy-time dependency lane for `abx deploy-code` — pure flag parsing, registry-pointer
- * defaulting, and setup-multicall leg composition (all unit-testable, no network), plus the
- * BEST-EFFORT selection-time registry check (an eth_call per Registry dep; never blocks a
- * deploy). See specs/protocol/dependency-registry.md — the pointer is soft and non-validating.
+ * The `--dep` flag grammar for `abx deploy-code` — the one CLI-local piece of the dependency
+ * lane. Everything downstream of a parsed ref (registry-pointer resolution, setup-multicall leg
+ * composition, the selection-time registry check) lives in `@artblocks/abx-sdk`'s `deps.ts`.
  */
-import { encodeFunctionData } from 'viem';
-import { DEP_RESOLUTION, parseDependencyRef, readRegistryDependency, resolveDependencyRegistry, seriesCodeAbi, } from '@artblocks/abx-sdk';
+import { parseDependencyRef } from '@artblocks/abx-sdk';
 /**
  * Parse the accumulated `--dep` flag value (repeats comma-join — see flags.ts — and each
  * value may itself be comma-separated) into ordered refs. Order is load-bearing: the first
@@ -25,66 +23,4 @@ export function parseDepFlag(value) {
         .filter((s) => s && s.toLowerCase() !== 'none')
         .map(parseDependencyRef);
 }
-/**
- * The registry pointer a deploy with ≥1 Registry-resolution dep should set: an explicit
- * `--dep-registry` wins (validated), else the chain's known AB registry (env-overridable),
- * else none — the caller WARNS and skips the leg (soft pointer; the resolver falls back to
- * its built-in CDN map). Never a blocker.
- */
-export function resolveDepRegistryPointer(flagValue, chainId) {
-    if (flagValue !== undefined) {
-        if (flagValue === 'true' || !/^0x[0-9a-fA-F]{40}$/.test(flagValue)) {
-            throw new Error(`--dep-registry must be an address (0x + 40 hex); got '${flagValue}'`);
-        }
-        return { registry: flagValue, source: 'flag' };
-    }
-    const known = resolveDependencyRegistry(chainId);
-    return known ? { registry: known, source: 'default' } : { registry: null, source: 'none' };
-}
-/**
- * The dependency legs of the setup multicall: one `setDependency(i, resolution, ref)` per
- * dep in index order, plus the `setDependencyRegistry` leg when a pointer resolved. These
- * ride the SAME atomic setup multicall as script chunks/schemas/mints, in every signing lane.
- */
-export function dependencySetupCalls(deps, registry) {
-    const calls = deps.map((d, i) => encodeFunctionData({ abi: seriesCodeAbi, functionName: 'setDependency', args: [BigInt(i), d.resolution, d.ref] }));
-    if (deps.length && registry) {
-        calls.push(encodeFunctionData({ abi: seriesCodeAbi, functionName: 'setDependencyRegistry', args: [registry] }));
-    }
-    return calls;
-}
-/**
- * Best-effort existence/on-chain-ness check of every Registry-resolution dep against the
- * pointer registry. A revert or an empty record ⇒ `not-found` (a warning — the owner may
- * intend a custom registry). A transport failure ⇒ the remaining checks are `skipped` and
- * `rpcOk: false` — one info line, never an error: the deploy proceeds regardless.
- */
-export async function checkRegistryDeps(client, registry, deps) {
-    const registryDeps = deps.filter((d) => d.resolution === DEP_RESOLUTION.registry);
-    const checks = [];
-    let rpcOk = true;
-    for (const d of registryDeps) {
-        if (!rpcOk) {
-            checks.push({ dep: d.display, status: 'skipped' });
-            continue;
-        }
-        try {
-            const details = await readRegistryDependency(client, registry, d.ref);
-            checks.push(details ? { dep: d.display, status: 'found', details } : { dep: d.display, status: 'not-found' });
-        }
-        catch (e) {
-            // A contract revert means the registry answered "no such dependency"; anything else
-            // (DNS, timeout, HTTP) means we couldn't ask — degrade to skipped, not failed.
-            const msg = `${e.name ?? ''} ${e.message ?? ''}`;
-            if (/ContractFunction|revert|returned no data/i.test(msg)) {
-                checks.push({ dep: d.display, status: 'not-found' });
-            }
-            else {
-                rpcOk = false;
-                checks.push({ dep: d.display, status: 'skipped' });
-            }
-        }
-    }
-    return { checks, rpcOk };
-}
 //# sourceMappingURL=deps.js.map

package/dist/deps.js.map

@@ -1 +1 @@
-{"version":3,"file":"deps.js","sourceRoot":"","sources":["../src/deps.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAC,kBAAkB,EAAC,MAAM,MAAM,CAAC;AACxC,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,sBAAsB,EACtB,yBAAyB,EACzB,aAAa,GAMd,MAAM,oBAAoB,CAAC;AAE5B;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,KAAyB;IACpD,IAAI,KAAK,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAC;IAC5H,4FAA4F;IAC5F,mGAAmG;IACnG,8FAA8F;IAC9F,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,EAAE,CAAC;IAChC,OAAO,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;SACvB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;SAC9C,GAAG,CAAC,kBAAkB,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACvC,SAA6B,EAC7B,OAAe;IAEf,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,IAAI,SAAS,KAAK,MAAM,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YACnE,MAAM,IAAI,KAAK,CAAC,yDAAyD,SAAS,GAAG,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,EAAC,QAAQ,EAAE,SAAoB,EAAE,MAAM,EAAE,MAAM,EAAC,CAAC;IAC1D,CAAC;IACD,MAAM,KAAK,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IACjD,OAAO,KAAK,CAAC,CAAC,CAAC,EAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAC,CAAC,CAAC,CAAC,EAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAC,CAAC;AACzF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAA2B,EAAE,QAAwB;IACxF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAC9B,kBAAkB,CAAC,EAAC,GAAG,EAAE,aAAa,EAAE,YAAY,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,EAAC,CAAC,CAChH,CAAC;IACF,IAAI,IAAI,CAAC,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,EAAC,GAAG,EAAE,aAAa,EAAE,YAAY,EAAE,uBAAuB,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAC,CAAC,CAAC,CAAC;IAChH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAQD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAA4B,EAC5B,QAAiB,EACjB,IAA2B;IAE3B,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,cAAc,CAAC,QAAQ,CAAC,CAAC;IAClF,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,IAAI,KAAK,GAAG,IAAI,CAAC;IACjB,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;QAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,EAAC,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAC,CAAC,CAAC;YACjD,SAAS;QACX,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;YACtE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAC,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAC,CAAC,CAAC,CAAC,EAAC,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAC,CAAC,CAAC;QAC5G,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,oFAAoF;YACpF,+EAA+E;YAC/E,MAAM,GAAG,GAAG,GAAI,CAAW,CAAC,IAAI,IAAI,EAAE,IAAK,CAAW,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;YACvE,IAAI,2CAA2C,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1D,MAAM,CAAC,IAAI,CAAC,EAAC,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAC,CAAC,CAAC;YACrD,CAAC;iBAAM,CAAC;gBACN,KAAK,GAAG,KAAK,CAAC;gBACd,MAAM,CAAC,IAAI,CAAC,EAAC,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAC,CAAC,CAAC;YACnD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAC,MAAM,EAAE,KAAK,EAAC,CAAC;AACzB,CAAC"}
+{"version":3,"file":"deps.js","sourceRoot":"","sources":["../src/deps.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAC,kBAAkB,EAA2B,MAAM,oBAAoB,CAAC;AAEhF;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,KAAyB;IACpD,IAAI,KAAK,KAAK,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAC;IAC5H,4FAA4F;IAC5F,mGAAmG;IACnG,8FAA8F;IAC9F,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,EAAE,CAAC;IAChC,OAAO,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;SACvB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;SAC9C,GAAG,CAAC,kBAAkB,CAAC,CAAC;AAC7B,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,22 @@
+/**
+ * The one error type a command throws when it needs to abort with a specific exit code. No command
+ * body calls `process.exit()` mid-flow: a local failure sets
+ * `process.exitCode` and returns; a DEEP failure that needs to unwind through several calls throws).
+ *
+ * A plain `Error` still works everywhere (the top-level catch in main.ts prints `.message` with the
+ * same `✗` prefix either way) — `CliError` adds two opt-ins:
+ *   - `exitCode`, for the rare case that isn't 1.
+ *   - `alreadyPrinted`, for a validation helper (e.g. ownerops.ts's `requireAddress`/`requireFlag`)
+ *     that has a non-`void` return type and so can't just set `exitCode` and `return` — it has to
+ *     `throw` to make the "unreachable after this" true to the type checker, but it already printed
+ *     its own usage text via `console.error` BEFORE this existed and that text doesn't have (and must
+ *     not gain) the generic catch's `✗` prefix. The top-level catch skips its own printing for these.
+ */
+export declare class CliError extends Error {
+    readonly exitCode: number;
+    readonly alreadyPrinted: boolean;
+    constructor(message: string, exitCode?: number, alreadyPrinted?: boolean);
+}
+/** Mark a completed batch command as failed when any item failed, while preserving command cleanup. */
+export declare function markBatchFailure(failed: number): boolean;
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,qBAAa,QAAS,SAAQ,KAAK;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;gBAErB,OAAO,EAAE,MAAM,EAAE,QAAQ,SAAI,EAAE,cAAc,UAAQ;CAMlE;AAED,uGAAuG;AACvG,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAIxD"}

package/dist/errors.js

@@ -0,0 +1,32 @@
+/**
+ * The one error type a command throws when it needs to abort with a specific exit code. No command
+ * body calls `process.exit()` mid-flow: a local failure sets
+ * `process.exitCode` and returns; a DEEP failure that needs to unwind through several calls throws).
+ *
+ * A plain `Error` still works everywhere (the top-level catch in main.ts prints `.message` with the
+ * same `✗` prefix either way) — `CliError` adds two opt-ins:
+ *   - `exitCode`, for the rare case that isn't 1.
+ *   - `alreadyPrinted`, for a validation helper (e.g. ownerops.ts's `requireAddress`/`requireFlag`)
+ *     that has a non-`void` return type and so can't just set `exitCode` and `return` — it has to
+ *     `throw` to make the "unreachable after this" true to the type checker, but it already printed
+ *     its own usage text via `console.error` BEFORE this existed and that text doesn't have (and must
+ *     not gain) the generic catch's `✗` prefix. The top-level catch skips its own printing for these.
+ */
+export class CliError extends Error {
+    exitCode;
+    alreadyPrinted;
+    constructor(message, exitCode = 1, alreadyPrinted = false) {
+        super(message);
+        this.name = 'CliError';
+        this.exitCode = exitCode;
+        this.alreadyPrinted = alreadyPrinted;
+    }
+}
+/** Mark a completed batch command as failed when any item failed, while preserving command cleanup. */
+export function markBatchFailure(failed) {
+    if (failed <= 0)
+        return false;
+    process.exitCode = 1;
+    return true;
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,QAAS,SAAQ,KAAK;IACxB,QAAQ,CAAS;IACjB,cAAc,CAAU;IAEjC,YAAY,OAAe,EAAE,QAAQ,GAAG,CAAC,EAAE,cAAc,GAAG,KAAK;QAC/D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC;QACvB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,cAAc,GAAG,cAAc,CAAC;IACvC,CAAC;CACF;AAED,uGAAuG;AACvG,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,IAAI,MAAM,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9B,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACrB,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/flag-allowlists.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Per-command flag allowlists — the one place that knows which flags each command accepts, so the
+ * dispatcher can surface a typo'd or unsupported flag instead of silently ignoring it.
+ *
+ * WHY THIS FILE EXISTS, and why the obvious shortcut doesn't work
+ * --------------------------------------------------------------
+ * The CLI used to have three different behaviors for an unrecognized flag: `deploy*` REFUSED,
+ * `preview`/`tokens`/`storage status`/`attach` WARNED, and ~35 other commands said nothing at all —
+ * so `abx set-royalty --bsp 500` or `abx minter buy --quantiy 5` did something quietly different from
+ * what was asked. That silence is the worst failure mode the CLI has, because the creator's next
+ * action is to believe it worked.
+ *
+ * The tempting fix is to DERIVE each allowlist from the `usage` string every command already declares.
+ * An audit of all ~45 commands says that would be actively harmful: several shared helpers read flags
+ * that appear in NO usage string anywhere. `storageOverrides()` reads twelve
+ * (`--backend`, `--gateway`, `--public-base`, `--storage-signer`, …) and is pulled in by `add`,
+ * `render`, `effects`, `migrate`, `storage upload`, and `storage balance|topup`; `--remote-token` is
+ * read by `index`, `verify`, `forget`, `status`, and `migrate`. A usage-derived allowlist would warn on
+ * every one of those — a false warning on a VALID flag, which is worse than the silence it replaces,
+ * because a notice people learn to distrust stops working for the real cases too.
+ *
+ * So the sets below are explicit, and composed from the shared groups by name. A command absent from
+ * `COMMAND_FLAGS` is simply not checked — this can grow incrementally, and an unlisted command keeps
+ * exactly its old behavior rather than acquiring a half-right allowlist.
+ */
+/**
+ * Flags EVERY owner write accepts: the signing lane (`laneFromFlags`), the opt-in confirm gate, the
+ * wallet-lane plumbing, the post-write reindex nudge (`reindexIfKnown` → `resolveRemote`), and
+ * `--json`. Sourced from `riskgate.ts` + `ownerops.ts`, never from a usage string.
+ */
+export declare const SHARED_WRITE: readonly ["send", "sign", "sponsor", "unsigned", "dry-run", "yes", "confirm", "port", "sign-url-file", "remote", "remote-token", "json"];
+/**
+ * What `storageOverrides()` (config.ts) reads. Any command that resolves a storage backend from flags
+ * accepts all twelve — and none of them are documented per-command, which is exactly why a
+ * usage-derived allowlist would have been wrong.
+ */
+export declare const STORAGE_OVERRIDE: readonly ["backend", "endpoint", "bucket", "region", "prefix", "public-base", "gateway", "mode", "api-url", "upload-url", "provider", "storage-signer"];
+/** `remoteFlag()` / `resolveRemote()` — a named service plus its token. */
+export declare const REMOTE: readonly ["remote", "remote-token"];
+/**
+ * Command → accepted flags. Keys are the dispatch names in `main.ts`; a two-word command is keyed by
+ * `"<cmd> <sub>"` (e.g. `"storage upload"`) and falls back to the bare command when no subcommand row
+ * exists. `deploy`/`deploy-series`/`deploy-code` are deliberately ABSENT: they already enforce their
+ * own exhaustive allowlists via `refuseStrayFlags`, and duplicating those sets here would be a second
+ * copy to drift.
+ */
+export declare const COMMAND_FLAGS: Record<string, ReadonlySet<string>>;
+/**
+ * The allowlist for a dispatched command, preferring a `"<cmd> <sub>"` row. Returns undefined when the
+ * command isn't listed, which means "don't check" — never "nothing is allowed".
+ */
+export declare function allowlistFor(cmd: string, sub?: string): ReadonlySet<string> | undefined;
+//# sourceMappingURL=flag-allowlists.d.ts.map

package/dist/flag-allowlists.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flag-allowlists.d.ts","sourceRoot":"","sources":["../src/flag-allowlists.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;;;;GAIG;AACH,eAAO,MAAM,YAAY,0IAaf,CAAC;AAEX;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,yJAanB,CAAC;AAEX,2EAA2E;AAC3E,eAAO,MAAM,MAAM,qCAAsC,CAAC;AAI1D;;;;;;GAMG;AACH,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAoH7D,CAAC;AAEF;;;GAGG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,GAAG,SAAS,CAMvF"}