@artblocks/abx-cli 0.1.0-alpha.9 → 0.1.0

package/dist/creator-signer.js

@@ -0,0 +1,267 @@
+import { randomUUID } from 'node:crypto';
+import { spawn } from 'node:child_process';
+import { AbxServiceClient, CREATOR_WALLET_INTERFACE, CreatorApiClient, makePublicClient, pinGas, resolveChain, resolveServiceInterfaceEndpoint, sleep, TxRevertedError, waitForCodeAt, } from '@artblocks/abx-sdk';
+import { CreatorAgentAuthorization, CreatorAuthorizationError } from './creator-agent.js';
+import { CreatorKeyringStore } from './creator-keyring.js';
+import { warn } from './output.js';
+import { ABX_SERVICES_URL } from './remote.js';
+const SPONSORABLE_BASE_CHAINS = new Set([8_453, 84_532]);
+const CREATOR_GRANTS_URL = 'https://services.abx.io/authorize';
+/** Preserve the exact RPC estimate across the JSON service boundary. This is a serialization
+ * guard, not a sponsorship-policy ceiling; real EVM transaction limits are many orders of
+ * magnitude below Number.MAX_SAFE_INTEGER. */
+export function sponsoredGasLimit(gas) {
+    const limit = Number(gas);
+    if (!Number.isSafeInteger(limit) || limit <= 0) {
+        throw new Error(`Sponsored transaction gas estimate ${gas} cannot be represented safely.`);
+    }
+    return limit;
+}
+/** Synchronous preflight for commands that may upload content before opening the signing lane. */
+export function assertSponsorConfigured(chainKey) {
+    assertSponsorConfiguredWithEnv(chainKey, process.env);
+}
+function assertSponsorConfiguredWithEnv(chainKey, env) {
+    if (!SPONSORABLE_BASE_CHAINS.has(resolveChain(chainKey).id)) {
+        throw new Error('--sponsor is supported on eligible Base networks (Base and Base Sepolia only) and still requires live provider and account eligibility. Use --send, --sign, or --unsigned on this network.');
+    }
+    if (!env.ABX_SERVICES_API_KEY) {
+        throw new Error('--sponsor needs ABX_SERVICES_API_KEY in your ignored .env. Run `abx auth login` first.');
+    }
+}
+/**
+ * Resolve the existing account-bound creator wallet for a sponsored preview without provisioning
+ * a wallet or opening an authorization grant. A dry run must use the signer that the real send
+ * will use; silently falling back to a local env key changes the CREATE2 salt, owner, royalty
+ * receiver, and mint recipient shown in the preview.
+ */
+export async function sponsoredPreviewAddress(chainKey, options = {}) {
+    return sponsoredWalletAddress(chainKey, { ...options, provision: false });
+}
+/** Resolve the account-bound creator wallet for a transaction plan. Real sponsored sends may
+ * provision the stable wallet just as `openSponsoredSession` does; dry runs call the wrapper above
+ * and remain strictly read-only. */
+export async function sponsoredWalletAddress(chainKey, options = {}) {
+    const env = options.env ?? process.env;
+    const chain = resolveChain(chainKey);
+    assertSponsorConfiguredWithEnv(chainKey, env);
+    const apiKey = env.ABX_SERVICES_API_KEY;
+    const api = new CreatorApiClient({
+        baseUrl: await creatorApiUrl(chain.id, env),
+        token: apiKey,
+        fetchImpl: options.fetchImpl,
+    });
+    let account = await api.account();
+    if (!account.wallet && options.provision) {
+        await api.provisionWallet();
+        account = await api.account();
+    }
+    if (!account.wallet || !account.capabilities.wallet) {
+        throw new Error(options.provision
+            ? 'ABX Services did not return the creator wallet after provisioning.'
+            : 'Sponsored dry run needs an existing ABX creator wallet, but this account has not provisioned one yet. ' +
+                'Provision the wallet through ABX Services first, then rerun; the preview will not create external state.');
+    }
+    if (!account.capabilities.sponsorship || !account.capabilities.sponsoredChains.includes(chain.id)) {
+        throw new Error(`ABX gas sponsorship is not enabled for ${chain.name} on this account.`);
+    }
+    return account.wallet.address;
+}
+/** Pure boundary check shared by every sponsored operation. Privy's sponsored relay requires a
+ * call target, so custom-contract deployments must already be expressed as a call to the keyless
+ * CREATE2 proxy before they reach this boundary. */
+export function assertSponsoredPreparedTx(tx, chainId) {
+    if (tx.chainId !== chainId) {
+        throw new Error(`Refusing sponsored transaction for chain ${tx.chainId}; expected ${chainId}.`);
+    }
+    if (BigInt(tx.value) !== 0n) {
+        throw new Error('ABX sponsorship never covers a transaction that transfers ETH.');
+    }
+    if (tx.to === null) {
+        throw new Error('ABX sponsorship requires a call target; use `abx deploy-contract --sponsor` to route exact initcode through CREATE2.');
+    }
+}
+function checkedCreatorApiUrl(raw) {
+    const parsed = new URL(raw);
+    const local = parsed.hostname === 'localhost' || parsed.hostname === '127.0.0.1' || parsed.hostname === '[::1]';
+    if (parsed.username ||
+        parsed.password ||
+        parsed.search ||
+        parsed.hash ||
+        (parsed.protocol !== 'https:' && !(local && parsed.protocol === 'http:'))) {
+        throw new Error('ABX_CREATORS_API_URL must be HTTPS (or localhost HTTP for development) without credentials, a query, or a fragment.');
+    }
+    return parsed.toString().replace(/\/+$/, '');
+}
+/** Resolve the first-party wallet API from its public remote catalog. The env override is an
+ * explicit local/staging escape hatch; production callers discover the interface from the
+ * services catalog and do not need to know a deployment hostname. */
+export async function creatorApiUrl(chainId, env = process.env) {
+    if (env.ABX_CREATORS_API_URL)
+        return checkedCreatorApiUrl(env.ABX_CREATORS_API_URL);
+    const descriptor = await new AbxServiceClient({ baseUrl: ABX_SERVICES_URL, timeoutMs: 10_000 }).descriptor();
+    const endpoint = resolveServiceInterfaceEndpoint(ABX_SERVICES_URL, descriptor, CREATOR_WALLET_INTERFACE);
+    if (!endpoint) {
+        throw new Error('The ABX remote does not advertise an account-bound creator-wallet service. Use --send, --sign, or --unsigned.');
+    }
+    if (!endpoint.chains.includes(chainId)) {
+        throw new Error(`The ABX creator-wallet service does not support chain ${chainId}. Use --send, --sign, or --unsigned.`);
+    }
+    return endpoint.baseUrl;
+}
+function openBrowser(url) {
+    if (process.env.CI)
+        return;
+    try {
+        const command = process.platform === 'darwin'
+            ? { file: 'open', args: [url] }
+            : process.platform === 'win32'
+                ? { file: 'rundll32', args: ['url.dll,FileProtocolHandler', url] }
+                : { file: 'xdg-open', args: [url] };
+        const child = spawn(command.file, command.args, { detached: true, stdio: 'ignore' });
+        child.on('error', () => { });
+        child.unref();
+    }
+    catch {
+        // The complete URL and code are always printed below.
+    }
+}
+/**
+ * Open a creator authorization session. Privy's rotating grant is retained in the user's native OS
+ * credential store and reused across CLI invocations. The decrypted request-signing key remains
+ * memory-only and every exact transaction is still prepared, signed, and reconciled independently.
+ */
+export async function openSponsoredSession(chainKey) {
+    const chain = resolveChain(chainKey);
+    assertSponsorConfigured(chainKey);
+    const apiKey = process.env.ABX_SERVICES_API_KEY;
+    if (!apiKey)
+        throw new Error('ABX Services API key disappeared after sponsorship preflight.');
+    const api = new CreatorApiClient({ baseUrl: await creatorApiUrl(chain.id), token: apiKey });
+    const wallet = await api.provisionWallet();
+    const account = await api.account();
+    if (!account.wallet || account.wallet.address.toLowerCase() !== wallet.address.toLowerCase()) {
+        throw new Error('ABX Creators returned inconsistent wallet binding. Nothing was signed.');
+    }
+    if (!account.capabilities.sponsorship || !account.capabilities.sponsoredChains.includes(chain.id)) {
+        throw new Error(`ABX gas sponsorship is not enabled for ${chain.name} on this account.`);
+    }
+    let persistenceWarningShown = false;
+    const persistenceWarning = () => {
+        if (persistenceWarningShown)
+            return;
+        persistenceWarningShown = true;
+        warn('Could not use the OS credential store. This authorization works for the current command only.');
+    };
+    const store = new CreatorKeyringStore(wallet.providerAppId, wallet.address);
+    let authorization = new CreatorAgentAuthorization({
+        appId: wallet.providerAppId,
+        store,
+        onPersistenceError: persistenceWarning,
+    });
+    try {
+        let canPersist = true;
+        let newlyApproved = false;
+        let wallets;
+        try {
+            wallets = await authorization.restore();
+        }
+        catch (error) {
+            if (error instanceof CreatorAuthorizationError)
+                throw error;
+            persistenceWarning();
+            canPersist = false;
+            authorization.dispose();
+            authorization = new CreatorAgentAuthorization({ appId: wallet.providerAppId });
+            wallets = null;
+        }
+        if (!wallets) {
+            newlyApproved = true;
+            const device = await authorization.start();
+            const verificationUrl = device.verificationUriComplete ?? device.verificationUri;
+            console.log(`\n  Authorize this agent to use your ABX creator wallet:`);
+            console.log(`  ${verificationUrl}`);
+            console.log(`  Code: ${device.userCode}\n`);
+            openBrowser(verificationUrl);
+            wallets = await authorization.wait();
+        }
+        const authorized = wallets.find((candidate) => candidate.chainType === 'ethereum' && candidate.address.toLowerCase() === wallet.address.toLowerCase());
+        if (!authorized)
+            throw new Error(`Privy authorized a different wallet; expected ${wallet.address}.`);
+        if (newlyApproved && canPersist) {
+            try {
+                await authorization.remember();
+                console.log(`  Agent access saved in your OS credential store. Manage or revoke it at ${CREATOR_GRANTS_URL}.\n`);
+            }
+            catch {
+                persistenceWarning();
+            }
+        }
+        const publicClient = makePublicClient({ chainKey });
+        let closed = false;
+        return {
+            address: wallet.address,
+            async send(tx) {
+                if (closed)
+                    throw new Error('The creator authorization session is closed.');
+                assertSponsoredPreparedTx(tx, chain.id);
+                if (tx.gasFloor && tx.to)
+                    await waitForCodeAt(publicClient, tx.to);
+                const gas = await pinGas(publicClient, {
+                    from: wallet.address,
+                    to: tx.to,
+                    data: tx.data,
+                    value: tx.value,
+                    gasFloor: tx.gasFloor,
+                });
+                const operationId = `op_${randomUUID().replaceAll('-', '')}`;
+                const prepared = await api.prepare({
+                    operationId,
+                    chainId: chain.id,
+                    to: tx.to,
+                    value: tx.value,
+                    data: tx.data,
+                    gasLimit: sponsoredGasLimit(gas),
+                });
+                const signed = await authorization.sign({
+                    walletId: prepared.signingRequest.walletId,
+                    body: prepared.signingRequest.body,
+                    idempotencyKey: prepared.signingRequest.idempotencyKey,
+                    requestExpiry: prepared.signingRequest.requestExpiry,
+                });
+                let operation = await api.submit(operationId, {
+                    requestExpiry: prepared.signingRequest.requestExpiry,
+                    data: tx.data,
+                    signed,
+                });
+                const deadline = Date.now() + 180_000;
+                while (operation.state === 'prepared' ||
+                    operation.state === 'submitting' ||
+                    operation.state === 'pending' ||
+                    operation.state === 'unknown') {
+                    if (Date.now() >= deadline) {
+                        throw new Error(`Sponsored operation ${operationId} could not be reconciled. It may have been submitted; check its status before doing anything else and do not retry it.`);
+                    }
+                    await sleep(1_500);
+                    operation = await api.getOperation(operationId);
+                }
+                if (operation.state !== 'confirmed' || !operation.transactionHash) {
+                    throw new Error(`Sponsored operation ${operationId} failed${operation.errorCode ? ` (${operation.errorCode})` : ''}.`);
+                }
+                const receipt = await publicClient.waitForTransactionReceipt({ hash: operation.transactionHash });
+                if (receipt.status !== 'success')
+                    throw new TxRevertedError(tx.op, operation.transactionHash);
+                return { txHash: operation.transactionHash, receipt };
+            },
+            close() {
+                closed = true;
+                authorization.dispose();
+            },
+        };
+    }
+    catch (error) {
+        authorization.dispose();
+        throw error;
+    }
+}
+//# sourceMappingURL=creator-signer.js.map

package/dist/creator-signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"creator-signer.js","sourceRoot":"","sources":["../src/creator-signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAC,MAAM,aAAa,CAAC;AACvC,OAAO,EAAC,KAAK,EAAC,MAAM,oBAAoB,CAAC;AACzC,OAAO,EACL,gBAAgB,EAChB,wBAAwB,EACxB,gBAAgB,EAChB,gBAAgB,EAChB,MAAM,EACN,YAAY,EACZ,+BAA+B,EAC/B,KAAK,EACL,eAAe,EACf,aAAa,GAId,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAC,yBAAyB,EAAE,yBAAyB,EAAC,MAAM,oBAAoB,CAAC;AACxF,OAAO,EAAC,mBAAmB,EAAC,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAC,IAAI,EAAC,MAAM,aAAa,CAAC;AACjC,OAAO,EAAC,gBAAgB,EAAC,MAAM,aAAa,CAAC;AAE7C,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AACzD,MAAM,kBAAkB,GAAG,mCAAmC,CAAC;AAE/D;;8CAE8C;AAC9C,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,sCAAsC,GAAG,gCAAgC,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,uBAAuB,CAAC,QAAgB;IACtD,8BAA8B,CAAC,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,8BAA8B,CAAC,QAAgB,EAAE,GAAsB;IAC9E,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CACb,4LAA4L,CAC7L,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,wFAAwF,CAAC,CAAC;IAC5G,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,QAAgB,EAChB,UAA+D,EAAE;IAEjE,OAAO,sBAAsB,CAAC,QAAQ,EAAE,EAAC,GAAG,OAAO,EAAE,SAAS,EAAE,KAAK,EAAC,CAAC,CAAC;AAC1E,CAAC;AAED;;oCAEoC;AACpC,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,QAAgB,EAChB,UAAoF,EAAE;IAEtF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACrC,8BAA8B,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,GAAG,CAAC,oBAAqB,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,gBAAgB,CAAC;QAC/B,OAAO,EAAE,MAAM,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC;QAC3C,KAAK,EAAE,MAAM;QACb,SAAS,EAAE,OAAO,CAAC,SAAS;KAC7B,CAAC,CAAC;IACH,IAAI,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC;IAClC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACzC,MAAM,GAAG,CAAC,eAAe,EAAE,CAAC;QAC5B,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC;IAChC,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CACb,OAAO,CAAC,SAAS;YACf,CAAC,CAAC,oEAAoE;YACtE,CAAC,CAAC,wGAAwG;gBACxG,0GAA0G,CAC/G,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QAClG,MAAM,IAAI,KAAK,CAAC,0CAA0C,KAAK,CAAC,IAAI,mBAAmB,CAAC,CAAC;IAC3F,CAAC;IACD,OAAO,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;AAChC,CAAC;AAaD;;oDAEoD;AACpD,MAAM,UAAU,yBAAyB,CACvC,EAAc,EACd,OAAe;IAEf,IAAI,EAAE,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,4CAA4C,EAAE,CAAC,OAAO,cAAc,OAAO,GAAG,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,EAAE,CAAC,EAAE,KAAK,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CACb,sHAAsH,CACvH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAW;IACvC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC;IAChH,IACE,MAAM,CAAC,QAAQ;QACf,MAAM,CAAC,QAAQ;QACf,MAAM,CAAC,MAAM;QACb,MAAM,CAAC,IAAI;QACX,CAAC,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,EACzE,CAAC;QACD,MAAM,IAAI,KAAK,CACb,qHAAqH,CACtH,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED;;qEAEqE;AACrE,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAe,EAAE,MAAyB,OAAO,CAAC,GAAG;IACvF,IAAI,GAAG,CAAC,oBAAoB;QAAE,OAAO,oBAAoB,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;IACpF,MAAM,UAAU,GAAG,MAAM,IAAI,gBAAgB,CAAC,EAAC,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,EAAC,CAAC,CAAC,UAAU,EAAE,CAAC;IAC3G,MAAM,QAAQ,GAAG,+BAA+B,CAAC,gBAAgB,EAAE,UAAU,EAAE,wBAAwB,CAAC,CAAC;IACzG,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,+GAA+G,CAAC,CAAC;IACnI,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,yDAAyD,OAAO,sCAAsC,CAAC,CAAC;IAC1H,CAAC;IACD,OAAO,QAAQ,CAAC,OAAO,CAAC;AAC1B,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO;IAC3B,IAAI,CAAC;QACH,MAAM,OAAO,GACX,OAAO,CAAC,QAAQ,KAAK,QAAQ;YAC3B,CAAC,CAAC,EAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAC;YAC7B,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO;gBAC5B,CAAC,CAAC,EAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,6BAA6B,EAAE,GAAG,CAAC,EAAC;gBAChE,CAAC,CAAC,EAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAC,CAAC;QACxC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,EAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAC,CAAC,CAAC;QACnF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC5B,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,sDAAsD;IACxD,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,QAAgB;IACzD,MAAM,KAAK,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IACrC,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAChD,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IAE9F,MAAM,GAAG,GAAG,IAAI,gBAAgB,CAAC,EAAC,OAAO,EAAE,MAAM,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAC,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,eAAe,EAAE,CAAC;IAC3C,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC;IACpC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;QAC7F,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QAClG,MAAM,IAAI,KAAK,CAAC,0CAA0C,KAAK,CAAC,IAAI,mBAAmB,CAAC,CAAC;IAC3F,CAAC;IAED,IAAI,uBAAuB,GAAG,KAAK,CAAC;IACpC,MAAM,kBAAkB,GAAG,GAAG,EAAE;QAC9B,IAAI,uBAAuB;YAAE,OAAO;QACpC,uBAAuB,GAAG,IAAI,CAAC;QAC/B,IAAI,CAAC,+FAA+F,CAAC,CAAC;IACxG,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,IAAI,mBAAmB,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC5E,IAAI,aAAa,GAAG,IAAI,yBAAyB,CAAC;QAChD,KAAK,EAAE,MAAM,CAAC,aAAa;QAC3B,KAAK;QACL,kBAAkB,EAAE,kBAAkB;KACvC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,IAAI,UAAU,GAAG,IAAI,CAAC;QACtB,IAAI,aAAa,GAAG,KAAK,CAAC;QAC1B,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,yBAAyB;gBAAE,MAAM,KAAK,CAAC;YAC5D,kBAAkB,EAAE,CAAC;YACrB,UAAU,GAAG,KAAK,CAAC;YACnB,aAAa,CAAC,OAAO,EAAE,CAAC;YACxB,aAAa,GAAG,IAAI,yBAAyB,CAAC,EAAC,KAAK,EAAE,MAAM,CAAC,aAAa,EAAC,CAAC,CAAC;YAC7E,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;QACD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,aAAa,GAAG,IAAI,CAAC;YACrB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,CAAC;YAC3C,MAAM,eAAe,GAAG,MAAM,CAAC,uBAAuB,IAAI,MAAM,CAAC,eAAe,CAAC;YACjF,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;YACxE,OAAO,CAAC,GAAG,CAAC,KAAK,eAAe,EAAE,CAAC,CAAC;YACpC,OAAO,CAAC,GAAG,CAAC,WAAW,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;YAC5C,WAAW,CAAC,eAAe,CAAC,CAAC;YAC7B,OAAO,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;QACvC,CAAC;QACD,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAC7B,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,KAAK,UAAU,IAAI,SAAS,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CACtH,CAAC;QACF,IAAI,CAAC,UAAU;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC;QACrG,IAAI,aAAa,IAAI,UAAU,EAAE,CAAC;YAChC,IAAI,CAAC;gBACH,MAAM,aAAa,CAAC,QAAQ,EAAE,CAAC;gBAC/B,OAAO,CAAC,GAAG,CAAC,4EAA4E,kBAAkB,KAAK,CAAC,CAAC;YACnH,CAAC;YAAC,MAAM,CAAC;gBACP,kBAAkB,EAAE,CAAC;YACvB,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,gBAAgB,CAAC,EAAC,QAAQ,EAAC,CAAC,CAAC;QAClD,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,KAAK,CAAC,IAAI,CAAC,EAAc;gBACvB,IAAI,MAAM;oBAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;gBAC5E,yBAAyB,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;gBACxC,IAAI,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE;oBAAE,MAAM,aAAa,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;gBACnE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,YAAY,EAAE;oBACrC,IAAI,EAAE,MAAM,CAAC,OAAO;oBACpB,EAAE,EAAE,EAAE,CAAC,EAAE;oBACT,IAAI,EAAE,EAAE,CAAC,IAAI;oBACb,KAAK,EAAE,EAAE,CAAC,KAAK;oBACf,QAAQ,EAAE,EAAE,CAAC,QAAQ;iBACtB,CAAC,CAAC;gBACH,MAAM,WAAW,GAAG,MAAM,UAAU,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,CAAC;gBAC7D,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC;oBACjC,WAAW;oBACX,OAAO,EAAE,KAAK,CAAC,EAAE;oBACjB,EAAE,EAAE,EAAE,CAAC,EAAE;oBACT,KAAK,EAAE,EAAE,CAAC,KAAK;oBACf,IAAI,EAAE,EAAE,CAAC,IAAI;oBACb,QAAQ,EAAE,iBAAiB,CAAC,GAAG,CAAC;iBACjC,CAAC,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC;oBACtC,QAAQ,EAAE,QAAQ,CAAC,cAAc,CAAC,QAAQ;oBAC1C,IAAI,EAAE,QAAQ,CAAC,cAAc,CAAC,IAAI;oBAClC,cAAc,EAAE,QAAQ,CAAC,cAAc,CAAC,cAAc;oBACtD,aAAa,EAAE,QAAQ,CAAC,cAAc,CAAC,aAAa;iBACrD,CAAC,CAAC;gBACH,IAAI,SAAS,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE;oBAC5C,aAAa,EAAE,QAAQ,CAAC,cAAc,CAAC,aAAa;oBACpD,IAAI,EAAE,EAAE,CAAC,IAAI;oBACb,MAAM;iBACP,CAAC,CAAC;gBACH,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;gBACtC,OACE,SAAS,CAAC,KAAK,KAAK,UAAU;oBAC9B,SAAS,CAAC,KAAK,KAAK,YAAY;oBAChC,SAAS,CAAC,KAAK,KAAK,SAAS;oBAC7B,SAAS,CAAC,KAAK,KAAK,SAAS,EAC7B,CAAC;oBACD,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;wBAC3B,MAAM,IAAI,KAAK,CACb,uBAAuB,WAAW,wHAAwH,CAC3J,CAAC;oBACJ,CAAC;oBACD,MAAM,KAAK,CAAC,KAAK,CAAC,CAAC;oBACnB,SAAS,GAAG,MAAM,GAAG,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;gBAClD,CAAC;gBACD,IAAI,SAAS,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,CAAC;oBAClE,MAAM,IAAI,KAAK,CAAC,uBAAuB,WAAW,UAAU,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBACzH,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,yBAAyB,CAAC,EAAC,IAAI,EAAE,SAAS,CAAC,eAAe,EAAC,CAAC,CAAC;gBAChG,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;oBAAE,MAAM,IAAI,eAAe,CAAC,EAAE,CAAC,EAAE,EAAE,SAAS,CAAC,eAAe,CAAC,CAAC;gBAC9F,OAAO,EAAC,MAAM,EAAE,SAAS,CAAC,eAAe,EAAE,OAAO,EAAC,CAAC;YACtD,CAAC;YACD,KAAK;gBACH,MAAM,GAAG,IAAI,CAAC;gBACd,aAAa,CAAC,OAAO,EAAE,CAAC;YAC1B,CAAC;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,aAAa,CAAC,OAAO,EAAE,CAAC;QACxB,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/deploy-plan.d.ts

@@ -0,0 +1,218 @@
+/**
+ * The structured `--dry-run --json` / `--json` deploy plan.
+ *
+ * The JSON payload and human prose are rendered from the same values but remain separate surfaces.
+ * Deploy is a high-stakes command family (real gas, address pinning, salt reservation), its exact
+ * dry-run prose is covered extensively, and the end-user skill depends on that prose. This module
+ * therefore provides a versioned, typed object populated from the SAME locals `commands/deploy.ts`
+ * uses for human narration at every `emit(jsonSafe({...}))` call site.
+ *
+ * A field a lane genuinely has no answer for is explicit `null`, never silently absent — that
+ * distinction (present-but-empty vs. not-applicable-here) is the whole point of a schema. See each
+ * `deploy.ts` call site for the specific reasoning behind its nulls.
+ */
+import type { Address } from '@artblocks/abx-sdk';
+/** Bump whenever a field is added, renamed, or reinterpreted — a consumer keys behavior off this,
+ *  not off the CLI's own package version (that changes for reasons unrelated to this shape).
+ *
+ *  `as const` is load-bearing, not decoration: a plain `= 1` is a WIDENING literal, so the moment it
+ *  is read into an un-annotated intermediate object (the resume lane builds one and spreads it into
+ *  several emits) the property degrades to `number` and stops satisfying `DeployPlan`. Keep it.
+ *
+ *  v2 (this change): added `custody.renderer` and `custody.image`; reinterpreted `transactions.legs`
+ *  to end with `'deploy'` whenever it is non-null (previously silent about the deploy tx itself —
+ *  see each field's own doc comment). A consumer keying behavior off `legs`' shape needs to know
+ *  which version it's reading. */
+export declare const DEPLOY_PLAN_SCHEMA_VERSION: 2;
+/** The six product lanes `deploy.ts` implements — a stable discriminator independent of the legacy
+ *  `command`/`kind` fields already on the payload (which exist for backward compat and don't fully
+ *  agree with each other across lanes: `kind: 'edition-code'` vs. this union's `'code-edition'`). */
+export type DeployPlanFamily = '1of1' | '1of1-edition' | 'series' | 'series-edition' | 'code' | 'code-edition';
+/** The signing lanes `laneFromFlags` resolves to, reused verbatim. */
+export type DeployPlanLane = 'send' | 'sign' | 'sponsor' | 'unsigned';
+export interface DeployPlanTransactions {
+    /** Wallet TX SIGNATURES this run needs — the exact same count the lane's own dry-run/confirm
+     *  "approvals" line reports (an off-chain storage upload is a separate signature class, never
+     *  counted here — see the `approvals` local at each call site). */
+    approvals: number;
+    /**
+     * The ordered, NAMED stages this run signs, ending with `'deploy'` itself — e.g.
+     * `['onchain-image-staging', 'deploy']` for an image lane staging bytes into the chunk store first,
+     * or `['chunks', 'param-schemas', 'dependencies', 'onchain-uri', 'mints', 'deploy']` for a code
+     * project whose setup rides one or more gas-bounded transactions ahead of the deploy tx. `null`
+     * when the deploy is a single, self-contained transaction with no named stage worth calling out.
+     *
+     * A stage name is a GROUP, not a 1:1 tx count: `'chunks'`/`'onchain-image-staging'` can be one
+     * atomic write or SEVERAL gas-bounded batch transactions (a 60KB+ script's setup, in particular —
+     * see `commands/deploy.ts`'s `planCodeSetupBatches`), and `approvals` is what reports the real
+     * total signature count — `legs.length` never needs to equal `approvals`. The one invariant this
+     * schema DOES hold: `legs === null` iff `approvals` is exactly the trivial case for that lane (1 for
+     * a fresh deploy with nothing riding ahead of it; the resume lane's own fixed count when everything
+     * is already done) — i.e. non-null legs always means "something happens beyond the bare minimum."
+     *
+     * EXCEPTION: the `--resume` lane never deploys (the contract already exists), so its legs name only
+     * the groups riding the setup transaction(s) it sends (one or more, gas-bounded, same as a fresh
+     * deploy) and never include `'deploy'` — see the `resumeLegs` call sites in `commands/deploy.ts` for
+     * why that lane's unit model differs.
+     */
+    legs: string[] | null;
+}
+export interface DeployPlanRoles {
+    /** The address that signs this deploy. `null` only when genuinely unknown yet (a dry run with no
+     *  `--for` and no resolvable wallet key — the plan is still previewable; just not addressed to
+     *  anyone in particular). */
+    signer: string | null;
+    /** Always equal to `signer` in this codebase — every lane sets `owner: deployer` — carried as its
+     *  own field because a consumer reasoning about roles shouldn't have to know that fact. */
+    owner: string | null;
+    royaltyReceiver: string | null;
+    /** `null` when no `--primary-payee` was given (sale proceeds go to the owner) — the lanes with no
+     *  concept of a delegated payee at all (the plain 1/1) also report `null` here. */
+    primaryPayee: string | null;
+    /** `null` when no `--minter` was given (only the owner can mint) — same "no concept" case as
+     *  `primaryPayee` on the plain 1/1 lane. */
+    minter: string | null;
+}
+export interface DeployPlanRoyalty {
+    bps: number;
+    capBps: number;
+    burnable: boolean;
+}
+export interface DeployPlanCustody {
+    /** Does `tokenURI`/`contractURI` (or `uri`/`contractURI` on an edition) resolve on-chain via the
+     *  canonical renderer, vs. through a resolver base baked on-chain. */
+    onChainUri: boolean;
+    /** Are the IMAGE bytes themselves on-chain (a chunk-store `reader` field) — distinct from
+     *  `onChainUri`, which only says the metadata JSON resolves on-chain (see deploy.ts's own
+     *  "puts the metadata JSON on-chain, not the image" warning). `null` on the code lanes, where an
+     *  image is one of several independently-disposed surfaces — see `surfaces.thumbnail` instead. */
+    imageOnChain: boolean | null;
+    /** The off-chain storage backend holding bytes this deploy custodies (e.g. `ipfs`, `arweave`,
+     *  `fs`) — `null` when nothing is stored off-chain (fully on-chain content, or a code project
+     *  whose script chunks are on-chain and carries no directory build). */
+    backend: string | null;
+    /** The on-chain `tokenURIBase`/`contractURIBase` this deploy writes — `null`, not `''`, when the
+     *  lane deliberately leaves it empty because the on-chain renderer is authoritative (baking a
+     *  base anyway would be misleading: nothing ever reads it while a renderer is set). */
+    tokenUriBase: string | null;
+    contractUriBase: string | null;
+    /** The on-chain renderer address serving `tokenURI`/`contractURI` — the SAME address the "On-chain
+     *  renderer" step already prints (`would use renderer 0x…` on a dry run, `using renderer 0x…` on a
+     *  real send). The zero address there means "would deploy the canonical renderer fresh," never
+     *  "no renderer" — a consumer reading this field needs the same caveat the prose carries. `null`
+     *  when `onChainUri` is false: off-chain custody has no renderer question to answer. On a
+     *  `--resume` emit this is always `null` too — the renderer is an InitParams field fixed at the
+     *  ORIGINAL deploy (like `royalty`/`mint`, see their own doc comments), and a resume doesn't
+     *  re-read or re-decide it here. */
+    renderer: Address | null;
+    /** File-level facts about the `--onchain-image` bytes THIS deploy stages, read locally (no chain
+     *  call) from the exact path `--image` names — `null` unless `imageOnChain` is `true` on a lane
+     *  that stages a SINGLE file (the 1/1 and 1/1-edition lanes). `null` on `series`/`series-edition`
+     *  too even when `imageOnChain` is `true` there: those lanes stage ONE FILE PER TOKEN, so no
+     *  single-file shape fits — the per-token detail is prose-only today (see the `previewImageStaging`
+     *  loop in `commands/deploy.ts`). */
+    image: DeployPlanImageFile | null;
+}
+export interface DeployPlanImageFile {
+    /** Raw size of the file on disk, in bytes — the same number the "Stage on-chain image" step's
+     *  `NNNB → …` line already prints. */
+    bytes: number;
+    /** Size after the staging plan's chunking/compression (`--compress fastlz` shrinks per chunk;
+     *  `gzip` shrinks the whole file; `none` leaves it unchanged) — the same number that line's
+     *  `[fastlz NNN→MMMB]` bracket already prints. */
+    stagedBytes: number;
+    /** MIME type sniffed from the file's extension (the same `contentTypeFromPath` helper every other
+     *  content-type-aware line in this file uses) — not itself printed by the staging preview line,
+     *  but a deterministic fact about the exact file already opened for that preview, computed locally
+     *  with no chain read, so reporting it costs nothing and fabricates nothing. */
+    mimeType: string;
+    /** keccak256 of the RAW (pre-compression) file bytes. This is NOT an on-chain commitment — a
+     *  reader-backed on-chain image has none; the bytes themselves ARE the on-chain content, so there
+     *  is nothing to commit to separately. It is a content-addressing fact about the LOCAL file,
+     *  computed the same way (no chain read) for a `--json` consumer that wants to verify provenance
+     *  later against what actually got staged. */
+    contentHash: string;
+}
+export interface DeployPlanMint {
+    /** True when nothing mints at deploy (mint later, or via a delegated minter/sale). */
+    deferred: boolean;
+    /** How many distinct tokens/ids mint at deploy — `0` when deferred. */
+    count: number;
+    /** Copies PER id (edition lanes only) — `null` on a unique-token lane, where the concept doesn't
+     *  exist (every id is exactly one copy by construction). A bigint, stringified (see jsonSafe). */
+    amountPerId: string | null;
+    recipient: string | null;
+}
+export interface DeployPlanEstimate {
+    /**
+     * A rough, hedged order-of-magnitude ETH/gas figure for THIS deploy's on-chain write cost.
+     *
+     * `null` is not "not implemented yet" here — it is the honest answer on every lane that genuinely
+     * computes no such number today, including the image lanes' `--onchain-image` staging (1/1,
+     * 1/1-edition, series, series-edition all skip this: verified directly — none of them prices gas or
+     * prints an "est. on-chain cost" line anywhere on the dry-run path). The ONE lane that does compute
+     * and print one is the fresh `code` family's on-chain-byte-storage guidance (a best-effort
+     * `~200 gas/byte` heuristic priced at the live gas price, wrapped in a try/catch that skips silently
+     * if the RPC can't price gas) — see the `planEstimate` local in `commands/deploy.ts`.
+     *
+     * This field NEVER re-derives or newly computes a number for the plan — it only carries over the
+     * exact estimate the human readout already printed. Do not extend this to a lane that doesn't
+     * already print one without saying so explicitly wherever that change is made: an estimate implies
+     * an RPC gas-price read, which is a new class of work for a dry run that today makes none.
+     */
+    ethApprox: string | null;
+    gasApprox: string | null;
+}
+export interface DeployPlanSurface {
+    ok: boolean;
+    detail: string;
+}
+/** The code lane's "every marketplace-facing dimension, resolved now" block — `null` on every other
+ *  lane (an image lane's thumbnail is fully covered by `custody`; it has no separate traits/postParam
+ *  disposition to report). */
+export interface DeployPlanSurfaces {
+    thumbnail: DeployPlanSurface;
+    traits: DeployPlanSurface;
+    postParams: DeployPlanSurface;
+}
+/** `null` on the image lanes, which have no dependency-registry concept. */
+export interface DeployPlanDependencies {
+    count: number;
+    registry: string | null;
+}
+/** Present only on a `deploy-code --resume` emit — `null` on a fresh deploy. */
+export interface DeployPlanResume {
+    target: string;
+    sentLegs: number;
+    complete: boolean;
+}
+export interface DeployPlan {
+    schemaVersion: typeof DEPLOY_PLAN_SCHEMA_VERSION;
+    family: DeployPlanFamily;
+    lane: DeployPlanLane;
+    transactions: DeployPlanTransactions;
+    roles: DeployPlanRoles;
+    /** `null` on a `--resume` emit: royalty is an InitParams field fixed at the ORIGINAL deploy, and a
+     *  resume never touches it — reporting the flags passed to `--resume` here would misleadingly
+     *  imply this run writes them. */
+    royalty: DeployPlanRoyalty | null;
+    custody: DeployPlanCustody;
+    /** `null` on a `--resume` emit — see the field's own module doc for why the mint plan isn't
+     *  cleanly reducible to one shape there (edition resume mints are a PER-ID list, not a count). */
+    mint: DeployPlanMint | null;
+    estimate: DeployPlanEstimate;
+    /** Every `warn()` line this invocation raised, ANSI-stripped, in print order — see
+     *  `beginPlanWarnings`/the local `warn` wrapper in deploy.ts. Not exhaustive of every warning this
+     *  FILE can print (a trust-anchor bootstrap warning from `output.ts`'s `ensureFactory`/etc. isn't
+     *  captured — those only fire on a real send that also stands up a fresh trust anchor, and are
+     *  file-scoped to a different module), but covers every warning the LANE ITSELF raises, which is
+     *  what a dry-run consumer cares about. */
+    warnings: string[];
+    surfaces: DeployPlanSurfaces | null;
+    dependencies: DeployPlanDependencies | null;
+    resume: DeployPlanResume | null;
+}
+/** Strip the tiny ANSI color wrappers (`bold`/`dim`/`g` from output.ts) so a warning captured for the
+ *  plan reads as plain text — a JSON consumer has no terminal to render escape codes against. */
+export declare function stripAnsiForPlan(s: string): string;
+//# sourceMappingURL=deploy-plan.d.ts.map

package/dist/deploy-plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-plan.d.ts","sourceRoot":"","sources":["../src/deploy-plan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAC,OAAO,EAAC,MAAM,oBAAoB,CAAC;AAEhD;;;;;;;;;;kCAUkC;AAClC,eAAO,MAAM,0BAA0B,EAAG,CAAU,CAAC;AAErD;;qGAEqG;AACrG,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,cAAc,GAAG,QAAQ,GAAG,gBAAgB,GAAG,MAAM,GAAG,cAAc,CAAC;AAE/G,sEAAsE;AACtE,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,CAAC;AAEtE,MAAM,WAAW,sBAAsB;IACrC;;uEAEmE;IACnE,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;;;;;;;;;;;;;;OAmBG;IACH,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,eAAe;IAC9B;;iCAE6B;IAC7B,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB;+FAC2F;IAC3F,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B;uFACmF;IACnF,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B;gDAC4C;IAC5C,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC;0EACsE;IACtE,UAAU,EAAE,OAAO,CAAC;IACpB;;;sGAGkG;IAClG,YAAY,EAAE,OAAO,GAAG,IAAI,CAAC;IAC7B;;4EAEwE;IACxE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB;;2FAEuF;IACvF,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B;;;;;;;wCAOoC;IACpC,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC;IACzB;;;;;yCAKqC;IACrC,KAAK,EAAE,mBAAmB,GAAG,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,mBAAmB;IAClC;0CACsC;IACtC,KAAK,EAAE,MAAM,CAAC;IACd;;sDAEkD;IAClD,WAAW,EAAE,MAAM,CAAC;IACpB;;;oFAGgF;IAChF,QAAQ,EAAE,MAAM,CAAC;IACjB;;;;kDAI8C;IAC9C,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,cAAc;IAC7B,sFAAsF;IACtF,QAAQ,EAAE,OAAO,CAAC;IAClB,uEAAuE;IACvE,KAAK,EAAE,MAAM,CAAC;IACd;sGACkG;IAClG,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC;;;;;;;;;;;;;;;OAeG;IACH,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;8BAE8B;AAC9B,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,iBAAiB,CAAC;IAC7B,MAAM,EAAE,iBAAiB,CAAC;IAC1B,UAAU,EAAE,iBAAiB,CAAC;CAC/B;AAED,4EAA4E;AAC5E,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,gFAAgF;AAChF,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IACzB,aAAa,EAAE,OAAO,0BAA0B,CAAC;IACjD,MAAM,EAAE,gBAAgB,CAAC;IACzB,IAAI,EAAE,cAAc,CAAC;IACrB,YAAY,EAAE,sBAAsB,CAAC;IACrC,KAAK,EAAE,eAAe,CAAC;IACvB;;sCAEkC;IAClC,OAAO,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAClC,OAAO,EAAE,iBAAiB,CAAC;IAC3B;sGACkG;IAClG,IAAI,EAAE,cAAc,GAAG,IAAI,CAAC;IAC5B,QAAQ,EAAE,kBAAkB,CAAC;IAC7B;;;;;+CAK2C;IAC3C,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACpC,YAAY,EAAE,sBAAsB,GAAG,IAAI,CAAC;IAC5C,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC;CACjC;AAKD;iGACiG;AACjG,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAElD"}

package/dist/deploy-plan.js

@@ -0,0 +1,20 @@
+/** Bump whenever a field is added, renamed, or reinterpreted — a consumer keys behavior off this,
+ *  not off the CLI's own package version (that changes for reasons unrelated to this shape).
+ *
+ *  `as const` is load-bearing, not decoration: a plain `= 1` is a WIDENING literal, so the moment it
+ *  is read into an un-annotated intermediate object (the resume lane builds one and spreads it into
+ *  several emits) the property degrades to `number` and stops satisfying `DeployPlan`. Keep it.
+ *
+ *  v2 (this change): added `custody.renderer` and `custody.image`; reinterpreted `transactions.legs`
+ *  to end with `'deploy'` whenever it is non-null (previously silent about the deploy tx itself —
+ *  see each field's own doc comment). A consumer keying behavior off `legs`' shape needs to know
+ *  which version it's reading. */
+export const DEPLOY_PLAN_SCHEMA_VERSION = 2;
+// eslint-disable-next-line no-control-regex
+const ANSI = /\x1b\[[0-9;]*m/g;
+/** Strip the tiny ANSI color wrappers (`bold`/`dim`/`g` from output.ts) so a warning captured for the
+ *  plan reads as plain text — a JSON consumer has no terminal to render escape codes against. */
+export function stripAnsiForPlan(s) {
+    return s.replace(ANSI, '');
+}
+//# sourceMappingURL=deploy-plan.js.map

package/dist/deploy-plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deploy-plan.js","sourceRoot":"","sources":["../src/deploy-plan.ts"],"names":[],"mappings":"AAeA;;;;;;;;;;kCAUkC;AAClC,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAU,CAAC;AA4MrD,4CAA4C;AAC5C,MAAM,IAAI,GAAG,iBAAiB,CAAC;AAE/B;iGACiG;AACjG,MAAM,UAAU,gBAAgB,CAAC,CAAS;IACxC,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AAC7B,CAAC"}

package/dist/deps.d.ts

@@ -1,46 +1,13 @@
-import { type Address, type DependencyReadClient, type Hex, type ParsedDependencyRef, type RegistryDependencyDetails } from '@artblocks/abx-sdk';
+/**
+ * The `--dep` flag grammar for `abx deploy-code` — the one CLI-local piece of the dependency
+ * lane. Everything downstream of a parsed ref (registry-pointer resolution, setup-multicall leg
+ * composition, the selection-time registry check) lives in `@artblocks/abx-sdk`'s `deps.ts`.
+ */
+import { type ParsedDependencyRef } from '@artblocks/abx-sdk';
 /**
  * Parse the accumulated `--dep` flag value (repeats comma-join — see flags.ts — and each
  * value may itself be comma-separated) into ordered refs. Order is load-bearing: the first
  * ref becomes dependency index 0 — the runtime, by convention.
  */
 export declare function parseDepFlag(value: string | undefined): ParsedDependencyRef[];
-/**
- * The registry pointer a deploy with ≥1 Registry-resolution dep should set: an explicit
- * `--dep-registry` wins (validated), else the chain's known AB registry (env-overridable),
- * else none — the caller WARNS and skips the leg (soft pointer; the resolver falls back to
- * its built-in CDN map). Never a blocker.
- */
-export declare function resolveDepRegistryPointer(flagValue: string | undefined, chainId: number): {
-    registry: Address | null;
-    source: 'flag' | 'default' | 'none';
-};
-/**
- * The dependency legs of the setup multicall: one `setDependency(i, resolution, ref)` per
- * dep in index order, plus the `setDependencyRegistry` leg when a pointer resolved. These
- * ride the SAME atomic setup multicall as script chunks/schemas/mints, in every signing lane.
- */
-export declare function dependencySetupCalls(deps: ParsedDependencyRef[], registry: Address | null): Hex[];
-/** One dep's selection-time verdict (Registry-resolution deps only — OnChain refs never touch a registry). */
-export type DepCheck = {
-    dep: string;
-    status: 'found';
-    details: RegistryDependencyDetails;
-} | {
-    dep: string;
-    status: 'not-found';
-} | {
-    dep: string;
-    status: 'skipped';
-};
-/**
- * Best-effort existence/on-chain-ness check of every Registry-resolution dep against the
- * pointer registry. A revert or an empty record ⇒ `not-found` (a warning — the owner may
- * intend a custom registry). A transport failure ⇒ the remaining checks are `skipped` and
- * `rpcOk: false` — one info line, never an error: the deploy proceeds regardless.
- */
-export declare function checkRegistryDeps(client: DependencyReadClient, registry: Address, deps: ParsedDependencyRef[]): Promise<{
-    checks: DepCheck[];
-    rpcOk: boolean;
-}>;
 //# sourceMappingURL=deps.d.ts.map

package/dist/deps.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"deps.d.ts","sourceRoot":"","sources":["../src/deps.ts"],"names":[],"mappings":"AAOA,OAAO,EAML,KAAK,OAAO,EACZ,KAAK,oBAAoB,EACzB,KAAK,GAAG,EACR,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAC/B,MAAM,oBAAoB,CAAC;AAE5B;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,mBAAmB,EAAE,CAW7E;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,OAAO,EAAE,MAAM,GACd;IAAC,QAAQ,EAAE,OAAO,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAAA;CAAC,CASjE;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,mBAAmB,EAAE,EAAE,QAAQ,EAAE,OAAO,GAAG,IAAI,GAAG,GAAG,EAAE,CAQjG;AAED,8GAA8G;AAC9G,MAAM,MAAM,QAAQ,GAChB;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,yBAAyB,CAAA;CAAC,GAClE;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,WAAW,CAAA;CAAC,GAClC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,SAAS,CAAA;CAAC,CAAC;AAErC;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,oBAAoB,EAC5B,QAAQ,EAAE,OAAO,EACjB,IAAI,EAAE,mBAAmB,EAAE,GAC1B,OAAO,CAAC;IAAC,MAAM,EAAE,QAAQ,EAAE,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAC,CAAC,CAyB/C"}
+{"version":3,"file":"deps.d.ts","sourceRoot":"","sources":["../src/deps.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAqB,KAAK,mBAAmB,EAAC,MAAM,oBAAoB,CAAC;AAEhF;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,mBAAmB,EAAE,CAW7E"}