@artblocks/abx-cli 0.1.0-alpha.9 → 0.2.0

package/dist/remote.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remote.d.ts","sourceRoot":"","sources":["../src/remote.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAC,gBAAgB,EAA6B,MAAM,oBAAoB,CAAC;AAEhF,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,OAAO,GAAG,SAAS,CAAC;AAEvD,MAAM,WAAW,YAAY;IAC3B,2CAA2C;IAC3C,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oDAAoD;IACpD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,YAAY,CAAC;IACrB,4FAA4F;IAC5F,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,SAAS,CAAC,EAAE,MAAM,EAClB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,YAAY,GAAG,IAAI,CAgCrB;AAED;2EAC2E;AAC3E,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAehG;AAED;+FAC+F;AAC/F,wBAAgB,qBAAqB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAC,CAAC,CAQjI;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,KAAK,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAC,CAAC,CAUjH;AAED;6BAC6B;AAC7B,wBAAgB,aAAa,CAAC,CAAC,EAAE,YAAY,GAAG,gBAAgB,CAE/D;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,KAAK,CAgCvF"}
+{"version":3,"file":"remote.d.ts","sourceRoot":"","sources":["../src/remote.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAEL,gBAAgB,EAMhB,KAAK,OAAO,EACZ,KAAK,UAAU,EACf,KAAK,eAAe,EACpB,KAAK,WAAW,EAChB,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACvB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAC,KAAK,KAAK,EAAC,MAAM,YAAY,CAAC;AAGtC,eAAO,MAAM,gBAAgB,4BAA4B,CAAC;AAC1D,eAAO,MAAM,wBAAwB,yBAAyB,CAAC;AAE/D,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC;AAEnE,MAAM,WAAW,YAAY;IAC3B,2CAA2C;IAC3C,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oDAAoD;IACpD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,YAAY,CAAC;IACrB,4FAA4F;IAC5F,QAAQ,EAAE,MAAM,CAAC;IACjB;;wCAEoC;IACpC,SAAS,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;CAC5B;AAED,qEAAqE;AACrE,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,WAAW,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,kGAAkG;AAClG,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,YAAY,GAAG,MAAM,CAExD;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,SAAS,CAAC,EAAE,MAAM,EAClB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,YAAY,GAAG,IAAI,CA8CrB;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,GAAG,IAAI,CAM7F;AAED;2EAC2E;AAC3E,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CA0BhG;AAED;+FAC+F;AAC/F,wBAAgB,qBAAqB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAC,CAAC,CAWjI;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,KAAK,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAC,CAAC,CAUjH;AAED;6BAC6B;AAC7B,wBAAgB,aAAa,CAAC,CAAC,EAAE,YAAY,GAAG,gBAAgB,CAE/D;AAED,8EAA8E;AAC9E,wBAAsB,sBAAsB,CAC1C,CAAC,EAAE,YAAY,EACf,WAAW,EAAE,MAAM,EACnB,UAAU,CAAC,EAAE,iBAAiB,GAC7B,OAAO,CAAC,gBAAgB,CAAC,CAW3B;AAED,kGAAkG;AAClG,wBAAsB,kBAAkB,CACtC,CAAC,EAAE,YAAY,EACf,UAAU,CAAC,EAAE,iBAAiB,GAC7B,OAAO,CAAC,gBAAgB,CAAC,CAE3B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,MAAM,EACZ,SAAS,SAAO,GACf,OAAO,CAAC;IAAC,EAAE,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAC,CAAC,CAyBxD;AAED,6FAA6F;AAC7F,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGhD;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,KAAK,CAuDvF;AAKD,wBAAgB,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,YAAY,GAAG,IAAI,CAE5D;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,OAAO,GAAG,IAAI,GAAG,SAAS,EAAE,UAAU,CAAC,EAAE,gBAAgB,GAAG,MAAM,CAsB7G;AAED,uFAAuF;AACvF,wBAAgB,WAAW,CAAC,CAAC,EAAE,WAAW,GAAG,MAAM,CAKlD;AAED;uCACuC;AACvC,eAAO,MAAM,SAAS,GAAI,OAAO,MAAM,EAAE,OAAO,MAAM,SAAyD,CAAC;AAEhH;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,eAAe,GAAG,MAAM,CAK7D;AAED;mFACmF;AACnF,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,UAAU,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAQ/H;AAED;;;;;;;GAOG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,mBAAmB,GAAG,MAAM,CAUzD;AAED;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,OAAO,EAChB,CAAC,EAAE,qBAAqB,EACxB,KAAK,EAAE,KAAK,EACZ,IAAI,EAAE,MAAM,EACZ,MAAM,CAAC,EAAE,gBAAgB,GACxB,OAAO,CAAC,qBAAqB,CAAC,CA4FhC;AAED,sGAAsG;AACtG,wBAAgB,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,KAAK,CAAC,EAAE;QAAC,KAAK,EAAE,MAAM,CAAA;KAAC,CAAA;CAAC,CAAC,GAAG,MAAM,CAS/F"}

package/dist/remote.js

@@ -1,22 +1,40 @@
 /**
  * Remote-resolver resolution — which service `--remote` means, and whose credential drives it.
  * The HTTP client itself lives in the SDK (`AbxServiceClient`, speaking the /v1 control plane from
- * specs/self-host-toolkit/remote-services.md); this module owns the CLI conventions around it:
+ * site/content/docs/using-abx/remote-services.mdx); this module owns the CLI conventions around it:
  *
  *   --remote <name>   a NAMED remote — `ABX_REMOTE_<NAME>_URL` + `ABX_REMOTE_<NAME>_TOKEN` in .env
- *                     (same env-name normalization as ABX_RPC_URLS_<CHAIN>). A managed provider's
- *                     per-account API key lives here — and deliberately NEVER falls back to
- *                     ABX_RESOLVER_ADMIN_TOKEN, so your node-admin secret can't silently go to a
- *                     third party.
- *   --remote <url>    an ad-hoc URL — token from --remote-token or ABX_RESOLVER_ADMIN_TOKEN.
+ *                     (same env-name normalization as ABX_RPC_URLS_<CHAIN>). "self" is just a name
+ *                     under this SAME convention — the node YOU run reads ABX_REMOTE_SELF_URL/_TOKEN
+ *                     with zero special-casing below. A managed provider's per-account API key lives
+ *                     under its own name — and deliberately NEVER falls back to ABX_REMOTE_SELF_TOKEN,
+ *                     so your node-admin secret can't silently go to a third party.
+ *                     `abx` is the built-in first-party name: https://services.abx.io plus
+ *                     ABX_SERVICES_API_KEY. It needs no URL pasted into project configuration.
+ *   --remote <url>    an ad-hoc URL — token from --remote-token or ABX_REMOTE_SELF_TOKEN (the local
+ *                     client credential for a node you run; `abx deploy-resolver` generates it).
  *   --remote          bare: the self-host default — ABX_PUBLIC_BASE_URL (the URL baked on-chain,
- *                     else ABX_RESOLVER_URL) + ABX_RESOLVER_ADMIN_TOKEN. Unchanged from day one.
+ *                     else ABX_RESOLVER_URL) + ABX_REMOTE_SELF_TOKEN.
  *
  * Every token here authorizes indexing/metadata control only — never on-chain signing — so the
  * "no signing key on the host" rule is intact. (`--remote-token`, not `--token`: `--token` already
  * means a token ID across the owner ops.)
+ *
+ * The RESOLVER's own env var — what gates ITS control plane, server-side (packages/token-api/src/
+ * control-plane.ts) — is unchanged: still `ABX_RESOLVER_ADMIN_TOKEN`. Only the CLIENT-side lookup
+ * for a self-run node moved to the named-remote grammar above; `abx deploy-resolver` prints the exact
+ * command that carries the value across the name boundary (fly secrets set ABX_RESOLVER_ADMIN_TOKEN
+ * from your local ABX_REMOTE_SELF_TOKEN).
  */
-import { AbxServiceClient, AbxServiceError, envSuffix } from '@artblocks/abx-sdk';
+import { AbxIndexTimeoutError, AbxServiceClient, AbxServiceError, CONTROL_PLANE_INTERFACE, envSuffix, indexProgress, isAccepted, } from '@artblocks/abx-sdk';
+import { CHAIN } from './config.js';
+import { bold, c, dim, g, info, ok, warn } from './output.js';
+export const ABX_SERVICES_URL = 'https://services.abx.io';
+export const ABX_SERVICES_API_KEY_VAR = 'ABX_SERVICES_API_KEY';
+/** How to refer to the credential this target is using, in an error the creator has to act on. */
+export function tokenSourceLabel(t) {
+    return t.tokenFrom === 'flag' ? 'the token you passed with --remote-token' : t.tokenVar;
+}
 /**
  * Resolve the `--remote` flag value (undefined = local op → null). Pure: pass `env` in tests.
  * `tokenFlag` is `--remote-token` and wins over any env token for this invocation.
@@ -31,11 +49,24 @@ export function resolveRemote(spec, tokenFlag, env = process.env) {
         if (!base) {
             throw new Error('`--remote` needs a target: pass `--remote <name>` (ABX_REMOTE_<NAME>_URL in .env), `--remote https://host`, or set ABX_PUBLIC_BASE_URL in .env');
         }
-        return { url: strip(base), token: tokenFlag ?? env.ABX_RESOLVER_ADMIN_TOKEN, source: 'default', tokenVar: 'ABX_RESOLVER_ADMIN_TOKEN' };
+        return { url: strip(base), token: tokenFlag ?? env.ABX_REMOTE_SELF_TOKEN, source: 'default', tokenVar: 'ABX_REMOTE_SELF_TOKEN', tokenFrom: tokenFlag ? 'flag' : 'env' };
     }
     // `--remote <url>` — ad-hoc URL, self-host credential conventions
     if (spec.includes('://')) {
-        return { url: strip(spec), token: tokenFlag ?? env.ABX_RESOLVER_ADMIN_TOKEN, source: 'url', tokenVar: 'ABX_RESOLVER_ADMIN_TOKEN' };
+        return { url: strip(spec), token: tokenFlag ?? env.ABX_REMOTE_SELF_TOKEN, source: 'url', tokenVar: 'ABX_REMOTE_SELF_TOKEN', tokenFrom: tokenFlag ? 'flag' : 'env' };
+    }
+    // The first-party provider has a stable, verified identity. Keep it out of standing agent docs
+    // and generic URL config: a user stores only the credential, while an explicit URL remains the
+    // escape hatch for local/staging services.
+    if (envSuffix(spec) === 'ABX') {
+        return {
+            url: ABX_SERVICES_URL,
+            token: tokenFlag ?? env[ABX_SERVICES_API_KEY_VAR],
+            name: 'ABX',
+            source: 'builtin',
+            tokenVar: ABX_SERVICES_API_KEY_VAR,
+            tokenFrom: tokenFlag ? 'flag' : 'env',
+        };
     }
     // `--remote <name>` — a named remote (a managed provider, another node of yours, a staging box)
     const name = envSuffix(spec);
@@ -46,13 +77,32 @@ export function resolveRemote(spec, tokenFlag, env = process.env) {
         throw new Error(`--remote ${spec}: no ${urlVar} in your .env. Set ${urlVar}=<the provider's base URL> (+ ${tokenVar}=<your API key>). ` +
             `(Meant a URL? Pass a scheme: --remote https://host)`);
     }
-    return { url: strip(url), token: tokenFlag ?? env[tokenVar], name, source: 'named', tokenVar };
+    return { url: strip(url), token: tokenFlag ?? env[tokenVar], name, source: 'named', tokenVar, tokenFrom: tokenFlag ? 'flag' : 'env' };
+}
+/**
+ * The OLD client-side var (`ABX_RESOLVER_ADMIN_TOKEN`) sitting unused in `.env` because the
+ * self-host default's credential moved to the named-remote grammar (`ABX_REMOTE_SELF_TOKEN`) — a
+ * silent fallback would mean an operator's `.env` never gets renamed, so this is the ONE place both
+ * {@link requireRemoteToken} (the hard-stop for a real command) and `abx doctor` (the same fault,
+ * surfaced before a command needs it) decide whether to flag it — sharing the check means they can
+ * never drift on the condition. `null` when there's nothing to flag (old var absent, or the new one
+ * is already set and simply wins).
+ */
+export function selfTokenMigrationWarning(env = process.env) {
+    if (!env.ABX_RESOLVER_ADMIN_TOKEN || env.ABX_REMOTE_SELF_TOKEN)
+        return null;
+    return ('ABX_RESOLVER_ADMIN_TOKEN is set but is no longer read for the self-host default — rename it to ' +
+        'ABX_REMOTE_SELF_TOKEN (and, if you address it by name, ABX_REMOTE_SELF_URL).');
 }
 /** The token, when the remote is the command's OBJECT (add/index/forget/render/migrate-dest) —
  *  a missing credential is a hard stop that names the exact var to set. */
 export function requireRemoteToken(t, env = process.env) {
     if (t.token)
         return t.token;
+    if (t.source === 'builtin') {
+        throw new Error(`remote 'abx' needs ${ABX_SERVICES_API_KEY_VAR} in your private .env, or --remote-token. ` +
+            `Run \`abx auth login\` for the browser-approved flow (manual fallback: ${ABX_SERVICES_URL}/signup).`);
+    }
     if (t.source === 'named') {
         // The likeliest cause of "URL but no token" is a near-miss var name, and the value is sitting
         // right there in .env — so name it instead of letting them diff strings by eye.
@@ -60,17 +110,27 @@ export function requireRemoteToken(t, env = process.env) {
         throw new Error(`remote '${t.name}' has a URL but no token — set ${t.tokenVar} in your .env (the API key the provider issued), or pass --remote-token.` +
             (nearMiss ? `\n  Found ${nearMiss.key} in your env — that name isn't read; rename it to ${t.tokenVar}.` : ''));
     }
+    // The self-host default/URL lane used to read ABX_RESOLVER_ADMIN_TOKEN directly. It's now just
+    // the named remote called "self" — no special-casing, same grammar as any other name — so the OLD
+    // var is never read here. No silent fallback: point at both new vars, once, by name.
+    const migration = selfTokenMigrationWarning(env);
+    if (migration)
+        throw new Error(`${migration} Or pass --remote-token.`);
     throw new Error(`remote ops need ${t.tokenVar} in your .env — it must match the token set on the resolver ` +
         '(`abx deploy-resolver` generates one and wires both sides). Or pass --remote-token.');
 }
 /** Every named remote configured in the env (`ABX_REMOTE_<NAME>_URL`). The normalized name is
  *  canonical — the env convention is lossy, so enumeration reads the env, never inverts it. */
 export function listConfiguredRemotes(env = process.env) {
-    const out = [];
+    const out = [
+        { name: 'ABX', url: ABX_SERVICES_URL, hasToken: !!env[ABX_SERVICES_API_KEY_VAR] },
+    ];
     for (const [key, value] of Object.entries(env)) {
         const m = /^ABX_REMOTE_(.+)_URL$/.exec(key);
         if (!m || !value)
             continue;
+        if (m[1] === 'ABX')
+            continue;
         out.push({ name: m[1], url: value.replace(/\/+$/, ''), hasToken: !!env[`ABX_REMOTE_${m[1]}_TOKEN`] });
     }
     return out.sort((a, b) => a.name.localeCompare(b.name));
@@ -99,6 +159,74 @@ export function misnamedRemoteVars(env = process.env) {
 export function serviceClient(t) {
     return new AbxServiceClient({ baseUrl: t.url, token: t.token });
 }
+/** Resolve one provider interface from the catalog selected by `--remote`. */
+export async function serviceInterfaceClient(t, interfaceId, descriptor) {
+    const catalog = serviceClient(t);
+    try {
+        return await catalog.forInterface(interfaceId, descriptor);
+    }
+    catch (err) {
+        // Pre-descriptor self-hosted resolvers served every route from the supplied origin. Preserve
+        // that compatibility only when discovery itself is absent; a catalog that answers and omits an
+        // interface is an intentional capability boundary and must not be guessed around.
+        if (!descriptor && err instanceof AbxServiceError && err.status === 404)
+            return catalog;
+        throw err;
+    }
+}
+/** The provider-neutral control-plane client used by registration, status and artifact writes. */
+export async function controlPlaneClient(t, descriptor) {
+    return serviceInterfaceClient(t, CONTROL_PLANE_INTERFACE, descriptor);
+}
+/**
+ * Is this named remote's stored credential actually accepted? One cheap authed read, so `doctor` can
+ * report capability instead of mere presence.
+ *
+ * Doctor is the command a creator runs FIRST, and it used to print a clean `remotes: meridian` for a
+ * key the service rejects — the 401 only surfaced later, from `abx remote <name>`, after they had
+ * already trusted the line. Same class as an RPC that answers `[]` because it pruned its logs: an
+ * empty success is not evidence of capability.
+ *
+ * Never throws and never blocks doctor for long: a short per-attempt timeout, and anything that is
+ * not a definitive rejection is reported as a soft note rather than a ✗, because a slow or briefly
+ * unreachable provider is not a misconfiguration the creator can act on.
+ */
+export async function probeRemoteCredential(name, timeoutMs = 4000) {
+    const target = resolveRemote(name);
+    if (!target)
+        return { ok: false, fatal: false, detail: '(unresolved)' };
+    try {
+        // retryDelayMs 0: a 401 is definitive and never retries anyway, but an unreachable provider
+        // would otherwise back off across four attempts and stall the one command that must stay quick.
+        const catalog = new AbxServiceClient({ baseUrl: target.url, token: target.token, timeoutMs, retryDelayMs: 0 });
+        let client;
+        try {
+            client = await catalog.forInterface(CONTROL_PLANE_INTERFACE);
+        }
+        catch (err) {
+            if (!(err instanceof AbxServiceError && err.status === 404))
+                throw err;
+            client = catalog;
+        }
+        const projects = await client.listProjects();
+        return { ok: true, fatal: false, detail: `· ${projects.length} project(s) visible` };
+    }
+    catch (err) {
+        if (err instanceof AbxServiceError && err.status === 401) {
+            return { ok: false, fatal: true, detail: `token rejected (401) — fix or rotate ${tokenVarFor(name)}` };
+        }
+        if (err instanceof AbxServiceError && err.status === 403) {
+            return { ok: false, fatal: false, detail: '(authorized key, scoped by the provider — not a misconfiguration)' };
+        }
+        return { ok: false, fatal: false, detail: `(unreachable right now: ${err.message.slice(0, 60)})` };
+    }
+}
+/** The env var a named remote's token is read from — the one to name when it is rejected. */
+export function tokenVarFor(name) {
+    if (name.toUpperCase() === 'ABX')
+        return ABX_SERVICES_API_KEY_VAR;
+    return `ABX_REMOTE_${name.toUpperCase()}_TOKEN`;
+}
 /**
  * Map a control-plane failure to an actionable CLI error. Keys off `AbxServiceError.code`/status,
  * never off message prose (the machine-code half of the interface spec):
@@ -117,16 +245,27 @@ export function describeRemoteError(err, t, label) {
             ? ' (bare `--remote` uses ABX_PUBLIC_BASE_URL, else ABX_RESOLVER_URL)'
             : t.source === 'named'
                 ? ` (from ABX_REMOTE_${t.name}_URL)`
-                : '';
+                : t.source === 'builtin'
+                    ? ' (built-in first-party ABX Services target)'
+                    : '';
         return new Error(`${label}: nothing responded at ${t.url}${from}. Is it running, and is that the right address?`);
     }
     if (err.status === 401) {
-        return new Error(`${label}: 401 unauthorized — ${t.url} rejected the token from ${t.tokenVar}. Fix or rotate the key (or pass --remote-token).`);
+        return new Error(`${label}: 401 unauthorized — ${t.url} rejected ${tokenSourceLabel(t)}. ` +
+            (t.tokenFrom === 'flag'
+                ? `That value is wrong or stale — get a fresh key from the provider (${t.tokenVar} in .env is what a normal run reads).`
+                : 'Fix or rotate the key (or pass --remote-token to test a replacement).'));
     }
     if (err.status === 403) {
         return new Error(`${label}: 403 forbidden — the token is valid but not authorized for this project/chain (provider-side scoping, not a typo). ` +
             `Check the provider's dashboard and its descriptor (\`abx remote ${t.name ?? t.url}\`).`);
     }
+    if (err.code === 'not_registered') {
+        // The likeliest cause when READING a remote (status/index/render) is that the bridge step was
+        // never done — the service has no idea this contract exists. Name the fix, not the 404.
+        return new Error(`${label}: ${t.url} doesn't have this project registered — it can't serve or report on a contract it was never told about. ` +
+            `Register it: \`abx add <address> --remote ${t.name?.toLowerCase() ?? t.url}\`.`);
+    }
     if (err.code === 'disabled') {
         return new Error(`${label}: the resolver at ${t.url} has no control-plane token configured — it can't accept remote registrations. For your own node, set ABX_RESOLVER_ADMIN_TOKEN on it (\`abx deploy-resolver\` wires it).`);
     }
@@ -134,6 +273,224 @@ export function describeRemoteError(err, t, label) {
         return new Error(`${label}: ${t.url} has no /v1 control plane — an older resolver (redeploy it: \`abx deploy-resolver\`), or not an ABX service. ` +
             `Check: curl ${t.url}/.well-known/abx-service`);
     }
+    // A 5xx that volunteered a failure CLASS is the difference between "wait" and "something is
+    // broken" — and it's the only thing a credential-free 500 body is allowed to tell us, so use it.
+    if (err.class === 'rpc_rate_limited' || err.class === 'rpc_unavailable') {
+        return new Error(`${label}: the service reached its chain RPC ${err.class === 'rpc_rate_limited' ? 'rate limit' : 'and got no answer'} (${err.class}) — ` +
+            `not your credential and not your address. It retries with backoff; check progress with \`abx status <address> --remote ${t.name?.toLowerCase() ?? t.url}\`.`);
+    }
     return new Error(`${label}: ${err.message}`);
 }
+// The `--remote <name|url>` target (remote.ts owns the convention): a named remote's
+// `ABX_REMOTE_<NAME>_URL/_TOKEN`, an ad-hoc URL, or bare `--remote` = the self-host default.
+// Returns null for a local op (the default).
+export function remoteFlag(flags) {
+    return resolveRemote(flags.remote, flags['remote-token']);
+}
+/**
+ * The factory-verification tri-state, said plainly. `null` means the check never ran (no factory
+ * configured, or the configured one has no code on this chain — common on a local/dev chain), which
+ * is NOT the same as the chain telling us this contract isn't a clone of it.
+ */
+export function canonicalLabel(isCanonical, provenance) {
+    if (isCanonical === true) {
+        // Say WHICH generation stamped it, and its core version — "canonically ABX v3" is a thing a
+        // consumer can repeat, and `abxVersion()` on the clone is where they can verify it themselves.
+        const v = provenance?.coreVersion !== null && provenance?.coreVersion !== undefined ? ` — ABX v${provenance.coreVersion}` : '';
+        if (provenance?.generation === 'prior') {
+            return `${g('yes (factory-verified)')}${dim(`${v}, a PRIOR anchor generation — canonically ABX, deployed by a factory since replaced`)}`;
+        }
+        return g(`yes (factory-verified${v})`);
+    }
+    // "the configured factory" (singular) understated the check and misdirected the reader: since the
+    // edition anchors were added, `detectCanonicalFactory` probes ALL SIX trust anchors (three 721 +
+    // three ERC-1155) and only falls back to the 1/1 anchor when none of them claim the clone. So a
+    // `false` means "no trust anchor this CLI knows deployed this", not "you configured the wrong one" —
+    // and the usual real cause is a contract from a SUPERSEDED factory, or one deployed by hand.
+    if (isCanonical === false) {
+        return `${c.orange}NO — not a clone of any trust anchor this CLI knows${c.reset}${dim(' (a superseded factory, or deployed outside one — `abx doctor` lists the current anchors)')}`;
+    }
+    if (provenance && provenance.anchorsAnswered === 0) {
+        return dim('not checked (no anchor answered — a coverage gap, not a verdict; retry or check the RPC)');
+    }
+    return dim('not checked (no canonical factory for this chain — `abx doctor` shows which)');
+}
+/** How a lifecycle state reads at a glance — the same word everywhere it's printed. */
+export function statusLabel(s) {
+    if (s === 'live')
+        return g('live');
+    if (s === 'failed')
+        return `${c.orange}failed${c.reset}`;
+    if (s === 'stale')
+        return `${c.orange}stale${c.reset}`;
+    return dim(s); // queued | backfilling — in progress, not a problem
+}
+/** `label   value` with only the label dimmed — status values carry their own color, and wrapping
+ *  them in `info()` would fight it. */
+export const statusRow = (label, value) => console.log(`    ${dim(label.padEnd(10))} ${value}`);
+/**
+ * What to DO about a failure class — whose problem it is and whether waiting is the answer.
+ * The class alone told an agent enough to reason it out; it does not tell a creator, and "whose
+ * problem is this" is the single question a failed catch-up has to answer.
+ */
+export function indexErrorAction(cls) {
+    if (cls === 'rpc_rate_limited')
+        return "the SERVICE's chain RPC is throttled — not your key, address, or chain. It retries on its own; if it stays this way, that's the operator's to fix.";
+    if (cls === 'rpc_unavailable')
+        return "the SERVICE can't reach its chain RPC — not your key, address, or chain. It retries on its own; if it stays this way, contact the operator.";
+    if (cls === 'not_abx_contract')
+        return 'the service found no ABX events at that address on this chain — check the address and that the service serves the right chain.';
+    return 'the cause is in the service operator’s logs — nothing you can fix from here; contact them if it persists.';
+}
+/** The one wording for "registered, but catch-up failed" — shared by add/index so both say the same
+ *  thing: what failed, whose problem it is, and that the registration survived. */
+export function failedCatchUpMessage(address, remote, err, check) {
+    const cls = err?.class;
+    return (`${address} is registered on ${remote.url}, but its catch-up FAILED` +
+        `${cls ? ` (${cls}${err?.message ? `: ${err.message}` : ''})` : ''}.\n` +
+        `  ${cls ? `→ ${indexErrorAction(cls)}\n  ` : ''}` +
+        `The registration is durable and the service retries with backoff — watch it with ${bold(check + ' --watch')}.`);
+}
+/**
+ * One human line for a status read: where it is, how far along, and why if it's unhappy.
+ *
+ * What "where" means depends on the state, so say the right thing rather than one number that reads
+ * differently in each: a percentage is only honest while BACKFILLING (see indexProgress). A `live`
+ * project's `toBlock` only advances when that project has events, so on a busy chain a perfectly
+ * current project sits far below head — printing that as a ratio makes healthy look broken.
+ */
+export function statusLine(s) {
+    const p = indexProgress(s);
+    let where;
+    if (p)
+        where = `${s.toBlock}/${s.headBlock} ${dim(`(${p.percent}%)`)}`;
+    else if (!s.toBlock)
+        where = dim('not indexed yet');
+    else if (s.status === 'live')
+        where = `${g('caught up')} ${dim(`· scanned through block ${s.toBlock}`)}`;
+    else if (s.status === 'stale')
+        where = `${dim('not tracking head right now')} ${dim(`· scanned through block ${s.toBlock}${s.headBlock ? ` of ${s.headBlock}` : ''}`)}`;
+    else
+        where = dim(`scanned through block ${s.toBlock}`);
+    const why = s.error ? `  ${c.orange}${s.error.class}${c.reset}${s.error.message ? dim(` — ${s.error.message}`) : ''}` : '';
+    return `${statusLabel(s.status)}  ${where}${why}`;
+}
+/**
+ * Report a register/reindex answer, whichever of the two conformant shapes the service used.
+ *
+ * A `200` already carries the counts. A `202` means the registration is durable and catch-up is still
+ * running — so by default we poll to a terminal state and print the SAME summary line, giving the
+ * human the "waits, then tells you what happened" UX without the service holding a socket open for
+ * minutes. `--no-wait` stops at the 202 and names the command that checks later.
+ */
+export async function reportRemoteIndexing(remote, chainId, address, r, flags, verb, client) {
+    const control = client ?? (await controlPlaneClient(remote));
+    // A real ABX clone ALWAYS emits a spine (its extension registrations at minimum), so a caught-up
+    // projection with zero events means the service scanned the wrong chain/floor or its RPC hasn't
+    // served the logs — not that the project is empty. A ✓ there is the lie that produces an empty
+    // dashboard (the same guard `reindexAfterDeploy` applies locally).
+    const settledLine = (events, tail) => {
+        if (events > 0)
+            ok(`remote resolver ${verb} ${address}: ${tail}`);
+        else
+            warn(`${address} is registered and caught up on ${remote.url}, but with ${bold('0 events')} — it will serve nothing. Check the service covers ${CHAIN} and that its RPC serves logs from the deploy block.`);
+    };
+    if (!isAccepted(r)) {
+        settledLine(r.project.eventCount, `${r.project.eventCount} events ${dim(`(${r.mode}, ${r.elapsedMs}ms)`)}`);
+        return {
+            status: r.project.status ?? 'live',
+            completed: true,
+            backfilling: false,
+            eventCount: r.project.eventCount,
+            tokenCount: r.project.tokenCount,
+        };
+    }
+    const spec = remote.name ? remote.name.toLowerCase() : remote.source === 'default' ? '' : remote.url;
+    const check = `abx status ${address} --remote${spec ? ` ${spec}` : ''}`;
+    // The registration is durable in EVERY branch here — but don't claim it "is catching up" when the
+    // service already told us the catch-up failed. Two different sentences for two different facts.
+    if (r.project.status === 'failed') {
+        // Lead with the outcome, not the successful sub-step: a line starting "registered on …" reads
+        // as success even with the failure later in the sentence.
+        warn(`${bold('catch-up FAILED')} on ${remote.url} — nothing is being served yet ${dim('(the registration itself is durable; the service retries it)')}`);
+    }
+    else {
+        info(`registered — ${r.project.status} ${dim('(the service accepted it and is catching up; the registration is durable)')}`);
+    }
+    // A known failure is not something to "not wait" for — we already have the answer, so report it as
+    // one regardless of --no-wait (never a ✓ over a broken index).
+    if (flags['no-wait'] !== undefined && r.project.status !== 'failed') {
+        info(`not waiting (--no-wait). Check with ${bold(check)}`);
+        return {
+            status: r.project.status,
+            completed: false,
+            backfilling: r.project.status === 'queued' || r.project.status === 'backfilling',
+        };
+    }
+    const label = `remote ${verb === 'indexed' ? 'add' : 'index'}`;
+    if (r.project.status === 'failed') {
+        // Fetch the class the register response may not have carried, so the "whose problem" line is
+        // never missing on the path that reports the failure soonest.
+        const st = await control.projectStatus(chainId, address).catch(() => undefined);
+        throw new Error(`${label}: ${failedCatchUpMessage(address, remote, st?.error ?? undefined, check)}`);
+    }
+    let shown = -100;
+    let lastStatus;
+    try {
+        const final = await control.awaitIndexed(chainId, address, {
+            onProgress: (s) => {
+                const p = indexProgress(s);
+                // Print on a state change or a meaningful step — a poll line every 3s is noise in a log an
+                // agent has to read back.
+                if (s.status !== lastStatus || (p && p.percent - shown >= 10)) {
+                    lastStatus = s.status;
+                    if (p)
+                        shown = p.percent;
+                    console.log(`      ${statusLine(s)}`);
+                }
+            },
+        });
+        if (final.status === 'failed') {
+            throw new Error(`${label}: ${failedCatchUpMessage(address, remote, final.error, check)}`);
+        }
+        settledLine(final.eventCount, `${final.eventCount} events, ${final.tokenCount} token(s) ${dim('(live)')}`);
+        return {
+            status: final.status,
+            completed: final.status === 'live',
+            backfilling: final.status === 'backfilling',
+            eventCount: final.eventCount,
+            tokenCount: final.tokenCount,
+        };
+    }
+    catch (err) {
+        if (err instanceof AbxIndexTimeoutError) {
+            warn(`${address} is still ${err.last?.status ?? 'catching up'} on ${remote.url} — nothing is lost, it just isn't done.`);
+            info(`follow it with ${bold(check + ' --watch')}`);
+            const status = err.last?.status ?? r.project.status;
+            return {
+                status,
+                completed: false,
+                backfilling: status === 'queued' || status === 'backfilling',
+                eventCount: err.last?.eventCount,
+                tokenCount: err.last?.tokenCount,
+            };
+        }
+        // The service went away mid-wait (or rejected the poll). The registration still landed — say
+        // which failure this is, in the same words every other remote command uses.
+        if (err instanceof AbxServiceError)
+            throw describeRemoteError(err, remote, `remote ${verb}: registered, but polling status`);
+        throw err;
+    }
+}
+/** "3 live, 1 backfilling, 1 failed (rpc_rate_limited)" — the one-line answer to "is my stuff ok?" */
+export function rollUp(projects) {
+    const counts = new Map();
+    for (const p of projects) {
+        const k = p.status ?? 'unknown';
+        counts.set(k, (counts.get(k) ?? 0) + 1);
+    }
+    const classes = [...new Set(projects.filter((p) => p.error).map((p) => p.error.class))];
+    const parts = [...counts.entries()].map(([k, n]) => `${n} ${k}`);
+    return `${parts.join(', ')}${classes.length ? ` ${dim(`(${classes.join(', ')})`)}` : ''}`;
+}
 //# sourceMappingURL=remote.js.map

package/dist/remote.js.map

@@ -1 +1 @@
-{"version":3,"file":"remote.js","sourceRoot":"","sources":["../src/remote.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAC,gBAAgB,EAAE,eAAe,EAAE,SAAS,EAAC,MAAM,oBAAoB,CAAC;AAehF;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAwB,EACxB,SAAkB,EAClB,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAEnD,+FAA+F;IAC/F,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,GAAG,CAAC,mBAAmB,IAAI,GAAG,CAAC,gBAAgB,CAAC;QAC7D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CACb,gJAAgJ,CACjJ,CAAC;QACJ,CAAC;QACD,OAAO,EAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,IAAI,GAAG,CAAC,wBAAwB,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,0BAA0B,EAAC,CAAC;IACvI,CAAC;IAED,kEAAkE;IAClE,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,IAAI,GAAG,CAAC,wBAAwB,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,0BAA0B,EAAC,CAAC;IACnI,CAAC;IAED,gGAAgG;IAChG,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,cAAc,IAAI,MAAM,CAAC;IACxC,MAAM,QAAQ,GAAG,cAAc,IAAI,QAAQ,CAAC;IAC5C,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACxB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,YAAY,IAAI,QAAQ,MAAM,sBAAsB,MAAM,iCAAiC,QAAQ,oBAAoB;YACrH,qDAAqD,CACxD,CAAC;IACJ,CAAC;IACD,OAAO,EAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,SAAS,IAAI,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAC,CAAC;AAC/F,CAAC;AAED;2EAC2E;AAC3E,MAAM,UAAU,kBAAkB,CAAC,CAAe,EAAE,MAAyB,OAAO,CAAC,GAAG;IACtF,IAAI,CAAC,CAAC,KAAK;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC;IAC5B,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QACzB,8FAA8F;QAC9F,gFAAgF;QAChF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC;QAClF,MAAM,IAAI,KAAK,CACb,WAAW,CAAC,CAAC,IAAI,kCAAkC,CAAC,CAAC,QAAQ,0EAA0E;YACrI,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,QAAQ,CAAC,GAAG,qDAAqD,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAChH,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,KAAK,CACb,mBAAmB,CAAC,CAAC,QAAQ,8DAA8D;QACzF,qFAAqF,CACxF,CAAC;AACJ,CAAC;AAED;+FAC+F;AAC/F,MAAM,UAAU,qBAAqB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACxE,MAAM,GAAG,GAA0D,EAAE,CAAC;IACtE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,CAAC,GAAG,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK;YAAE,SAAS;QAC3B,GAAG,CAAC,IAAI,CAAC,EAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAC,CAAC,CAAC;IACtG,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACrE,MAAM,GAAG,GAA6C,EAAE,CAAC;IACzD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,GAAG,KAAK,kBAAkB;YAAE,SAAS;QAC3E,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,SAAS;QACvD,4EAA4E;QAC5E,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,yDAAyD,EAAE,EAAE,CAAC,CAAC;QACpH,GAAG,CAAC,IAAI,CAAC,EAAC,GAAG,EAAE,UAAU,EAAE,cAAc,IAAI,QAAQ,EAAC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;6BAC6B;AAC7B,MAAM,UAAU,aAAa,CAAC,CAAe;IAC3C,OAAO,IAAI,gBAAgB,CAAC,EAAC,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAC,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAY,EAAE,CAAe,EAAE,KAAa;IAC9E,IAAI,CAAC,CAAC,GAAG,YAAY,eAAe,CAAC;QAAE,OAAO,GAAY,CAAC;IAC3D,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,+FAA+F;QAC/F,2EAA2E;QAC3E,MAAM,IAAI,GACR,CAAC,CAAC,MAAM,KAAK,SAAS;YACpB,CAAC,CAAC,oEAAoE;YACtE,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO;gBACpB,CAAC,CAAC,qBAAqB,CAAC,CAAC,IAAI,OAAO;gBACpC,CAAC,CAAC,EAAE,CAAC;QACX,OAAO,IAAI,KAAK,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAC,GAAG,GAAG,IAAI,iDAAiD,CAAC,CAAC;IACpH,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO,IAAI,KAAK,CAAC,GAAG,KAAK,wBAAwB,CAAC,CAAC,GAAG,4BAA4B,CAAC,CAAC,QAAQ,mDAAmD,CAAC,CAAC;IACnJ,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO,IAAI,KAAK,CACd,GAAG,KAAK,sHAAsH;YAC5H,mEAAmE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,MAAM,CAC3F,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC5B,OAAO,IAAI,KAAK,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC,GAAG,0KAA0K,CAAC,CAAC;IACjO,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACpC,OAAO,IAAI,KAAK,CACd,GAAG,KAAK,KAAK,CAAC,CAAC,GAAG,+GAA+G;YAC/H,eAAe,CAAC,CAAC,GAAG,0BAA0B,CACjD,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;AAC/C,CAAC"}
+{"version":3,"file":"remote.js","sourceRoot":"","sources":["../src/remote.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EACL,oBAAoB,EACpB,gBAAgB,EAChB,eAAe,EACf,uBAAuB,EACvB,SAAS,EACT,aAAa,EACb,UAAU,GASX,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAC,KAAK,EAAC,MAAM,aAAa,CAAC;AAElC,OAAO,EAAC,IAAI,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAC,MAAM,aAAa,CAAC;AAE5D,MAAM,CAAC,MAAM,gBAAgB,GAAG,yBAAyB,CAAC;AAC1D,MAAM,CAAC,MAAM,wBAAwB,GAAG,sBAAsB,CAAC;AA4B/D,kGAAkG;AAClG,MAAM,UAAU,gBAAgB,CAAC,CAAe;IAC9C,OAAO,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,0CAA0C,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC1F,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAwB,EACxB,SAAkB,EAClB,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAEnD,+FAA+F;IAC/F,IAAI,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,GAAG,CAAC,mBAAmB,IAAI,GAAG,CAAC,gBAAgB,CAAC;QAC7D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CACb,gJAAgJ,CACjJ,CAAC;QACJ,CAAC;QACD,OAAO,EAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,IAAI,GAAG,CAAC,qBAAqB,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,uBAAuB,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAC,CAAC;IACxK,CAAC;IAED,kEAAkE;IAClE,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,IAAI,GAAG,CAAC,qBAAqB,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,uBAAuB,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAC,CAAC;IACpK,CAAC;IAED,+FAA+F;IAC/F,+FAA+F;IAC/F,2CAA2C;IAC3C,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;QAC9B,OAAO;YACL,GAAG,EAAE,gBAAgB;YACrB,KAAK,EAAE,SAAS,IAAI,GAAG,CAAC,wBAAwB,CAAC;YACjD,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,SAAS;YACjB,QAAQ,EAAE,wBAAwB;YAClC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK;SACtC,CAAC;IACJ,CAAC;IAED,gGAAgG;IAChG,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7B,MAAM,MAAM,GAAG,cAAc,IAAI,MAAM,CAAC;IACxC,MAAM,QAAQ,GAAG,cAAc,IAAI,QAAQ,CAAC;IAC5C,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACxB,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,YAAY,IAAI,QAAQ,MAAM,sBAAsB,MAAM,iCAAiC,QAAQ,oBAAoB;YACrH,qDAAqD,CACxD,CAAC;IACJ,CAAC;IACD,OAAO,EAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,SAAS,IAAI,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,EAAC,CAAC;AACtI,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC5E,IAAI,CAAC,GAAG,CAAC,wBAAwB,IAAI,GAAG,CAAC,qBAAqB;QAAE,OAAO,IAAI,CAAC;IAC5E,OAAO,CACL,iGAAiG;QACjG,8EAA8E,CAC/E,CAAC;AACJ,CAAC;AAED;2EAC2E;AAC3E,MAAM,UAAU,kBAAkB,CAAC,CAAe,EAAE,MAAyB,OAAO,CAAC,GAAG;IACtF,IAAI,CAAC,CAAC,KAAK;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC;IAC5B,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CACb,sBAAsB,wBAAwB,4CAA4C;YACxF,0EAA0E,gBAAgB,WAAW,CACxG,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QACzB,8FAA8F;QAC9F,gFAAgF;QAChF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC;QAClF,MAAM,IAAI,KAAK,CACb,WAAW,CAAC,CAAC,IAAI,kCAAkC,CAAC,CAAC,QAAQ,0EAA0E;YACrI,CAAC,QAAQ,CAAC,CAAC,CAAC,aAAa,QAAQ,CAAC,GAAG,qDAAqD,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAChH,CAAC;IACJ,CAAC;IACD,+FAA+F;IAC/F,kGAAkG;IAClG,qFAAqF;IACrF,MAAM,SAAS,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC;IACjD,IAAI,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,SAAS,0BAA0B,CAAC,CAAC;IACvE,MAAM,IAAI,KAAK,CACb,mBAAmB,CAAC,CAAC,QAAQ,8DAA8D;QACzF,qFAAqF,CACxF,CAAC;AACJ,CAAC;AAED;+FAC+F;AAC/F,MAAM,UAAU,qBAAqB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACxE,MAAM,GAAG,GAA0D;QACjE,EAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC,EAAC;KAChF,CAAC;IACF,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,CAAC,GAAG,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK;YAAE,SAAS;QAC3B,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK;YAAE,SAAS;QAC7B,GAAG,CAAC,IAAI,CAAC,EAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAC,CAAC,CAAC;IACtG,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACrE,MAAM,GAAG,GAA6C,EAAE,CAAC;IACzD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,aAAa,CAAC,IAAI,GAAG,KAAK,kBAAkB;YAAE,SAAS;QAC3E,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,SAAS;QACvD,4EAA4E;QAC5E,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,yDAAyD,EAAE,EAAE,CAAC,CAAC;QACpH,GAAG,CAAC,IAAI,CAAC,EAAC,GAAG,EAAE,UAAU,EAAE,cAAc,IAAI,QAAQ,EAAC,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;6BAC6B;AAC7B,MAAM,UAAU,aAAa,CAAC,CAAe;IAC3C,OAAO,IAAI,gBAAgB,CAAC,EAAC,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAC,CAAC,CAAC;AAChE,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,CAAe,EACf,WAAmB,EACnB,UAA8B;IAE9B,MAAM,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,YAAY,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,6FAA6F;QAC7F,+FAA+F;QAC/F,kFAAkF;QAClF,IAAI,CAAC,UAAU,IAAI,GAAG,YAAY,eAAe,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,OAAO,CAAC;QACxF,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,CAAe,EACf,UAA8B;IAE9B,OAAO,sBAAsB,CAAC,CAAC,EAAE,uBAAuB,EAAE,UAAU,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAY,EACZ,SAAS,GAAG,IAAI;IAEhB,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM;QAAE,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAC,CAAC;IACtE,IAAI,CAAC;QACH,4FAA4F;QAC5F,gGAAgG;QAChG,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAC,EAAC,OAAO,EAAE,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,EAAC,CAAC,CAAC;QAC7G,IAAI,MAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,uBAAuB,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,GAAG,YAAY,eAAe,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,CAAC;gBAAE,MAAM,GAAG,CAAC;YACvE,MAAM,GAAG,OAAO,CAAC;QACnB,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,YAAY,EAAE,CAAC;QAC7C,OAAO,EAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,QAAQ,CAAC,MAAM,qBAAqB,EAAC,CAAC;IACrF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,eAAe,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACzD,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,wCAAwC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAC,CAAC;QACvG,CAAC;QACD,IAAI,GAAG,YAAY,eAAe,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACzD,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,mEAAmE,EAAC,CAAC;QAChH,CAAC;QACD,OAAO,EAAC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA4B,GAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,EAAC,CAAC;IAC9G,CAAC;AACH,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,KAAK;QAAE,OAAO,wBAAwB,CAAC;IAClE,OAAO,cAAc,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC;AAClD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAY,EAAE,CAAe,EAAE,KAAa;IAC9E,IAAI,CAAC,CAAC,GAAG,YAAY,eAAe,CAAC;QAAE,OAAO,GAAY,CAAC;IAC3D,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,+FAA+F;QAC/F,2EAA2E;QAC3E,MAAM,IAAI,GACR,CAAC,CAAC,MAAM,KAAK,SAAS;YACpB,CAAC,CAAC,oEAAoE;YACtE,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO;gBACpB,CAAC,CAAC,qBAAqB,CAAC,CAAC,IAAI,OAAO;gBACpC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS;oBACtB,CAAC,CAAC,6CAA6C;oBACjD,CAAC,CAAC,EAAE,CAAC;QACX,OAAO,IAAI,KAAK,CAAC,GAAG,KAAK,0BAA0B,CAAC,CAAC,GAAG,GAAG,IAAI,iDAAiD,CAAC,CAAC;IACpH,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO,IAAI,KAAK,CACd,GAAG,KAAK,wBAAwB,CAAC,CAAC,GAAG,aAAa,gBAAgB,CAAC,CAAC,CAAC,IAAI;YACvE,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM;gBACrB,CAAC,CAAC,qEAAqE,CAAC,CAAC,QAAQ,uCAAuC;gBACxH,CAAC,CAAC,uEAAuE,CAAC,CAC/E,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACvB,OAAO,IAAI,KAAK,CACd,GAAG,KAAK,sHAAsH;YAC5H,mEAAmE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,MAAM,CAC3F,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAClC,8FAA8F;QAC9F,wFAAwF;QACxF,OAAO,IAAI,KAAK,CACd,GAAG,KAAK,KAAK,CAAC,CAAC,GAAG,0GAA0G;YAC1H,6CAA6C,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,GAAG,KAAK,CACnF,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC5B,OAAO,IAAI,KAAK,CAAC,GAAG,KAAK,qBAAqB,CAAC,CAAC,GAAG,0KAA0K,CAAC,CAAC;IACjO,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACpC,OAAO,IAAI,KAAK,CACd,GAAG,KAAK,KAAK,CAAC,CAAC,GAAG,+GAA+G;YAC/H,eAAe,CAAC,CAAC,GAAG,0BAA0B,CACjD,CAAC;IACJ,CAAC;IACD,4FAA4F;IAC5F,iGAAiG;IACjG,IAAI,GAAG,CAAC,KAAK,KAAK,kBAAkB,IAAI,GAAG,CAAC,KAAK,KAAK,iBAAiB,EAAE,CAAC;QACxE,OAAO,IAAI,KAAK,CACd,GAAG,KAAK,uCAAuC,GAAG,CAAC,KAAK,KAAK,kBAAkB,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,mBAAmB,KAAK,GAAG,CAAC,KAAK,MAAM;YACtI,0HAA0H,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,CAAC,GAAG,KAAK,CAChK,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;AAC/C,CAAC;AAED,qFAAqF;AACrF,6FAA6F;AAC7F,6CAA6C;AAC7C,MAAM,UAAU,UAAU,CAAC,KAAY;IACrC,OAAO,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,cAAc,CAAuB,CAAC,CAAC;AAClF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,WAAuC,EAAE,UAA6B;IACnG,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;QACzB,4FAA4F;QAC5F,+FAA+F;QAC/F,MAAM,CAAC,GAAG,UAAU,EAAE,WAAW,KAAK,IAAI,IAAI,UAAU,EAAE,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/H,IAAI,UAAU,EAAE,UAAU,KAAK,OAAO,EAAE,CAAC;YACvC,OAAO,GAAG,CAAC,CAAC,wBAAwB,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,qFAAqF,CAAC,EAAE,CAAC;QAC3I,CAAC;QACD,OAAO,CAAC,CAAC,wBAAwB,CAAC,GAAG,CAAC,CAAC;IACzC,CAAC;IACD,kGAAkG;IAClG,iGAAiG;IACjG,gGAAgG;IAChG,qGAAqG;IACrG,6FAA6F;IAC7F,IAAI,WAAW,KAAK,KAAK,EAAE,CAAC;QAC1B,OAAO,GAAG,CAAC,CAAC,MAAM,sDAAsD,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC,2FAA2F,CAAC,EAAE,CAAC;IACvL,CAAC;IACD,IAAI,UAAU,IAAI,UAAU,CAAC,eAAe,KAAK,CAAC,EAAE,CAAC;QACnD,OAAO,GAAG,CAAC,0FAA0F,CAAC,CAAC;IACzG,CAAC;IACD,OAAO,GAAG,CAAC,8EAA8E,CAAC,CAAC;AAC7F,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,WAAW,CAAC,CAAc;IACxC,IAAI,CAAC,KAAK,MAAM;QAAE,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC,KAAK,EAAE,CAAC;IACzD,IAAI,CAAC,KAAK,OAAO;QAAE,OAAO,GAAG,CAAC,CAAC,MAAM,QAAQ,CAAC,CAAC,KAAK,EAAE,CAAC;IACvD,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,oDAAoD;AACrE,CAAC;AAED;uCACuC;AACvC,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAAa,EAAE,KAAa,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC;AAEhH;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAoB;IACnD,IAAI,GAAG,KAAK,kBAAkB;QAAE,OAAO,oJAAoJ,CAAC;IAC5L,IAAI,GAAG,KAAK,iBAAiB;QAAE,OAAO,6IAA6I,CAAC;IACpL,IAAI,GAAG,KAAK,kBAAkB;QAAE,OAAO,gIAAgI,CAAC;IACxK,OAAO,2GAA2G,CAAC;AACrH,CAAC;AAED;mFACmF;AACnF,MAAM,UAAU,oBAAoB,CAAC,OAAgB,EAAE,MAAoB,EAAE,GAA2B,EAAE,KAAa;IACrH,MAAM,GAAG,GAAG,GAAG,EAAE,KAAK,CAAC;IACvB,OAAO,CACL,GAAG,OAAO,qBAAqB,MAAM,CAAC,GAAG,2BAA2B;QACpE,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,GAAG,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK;QACvE,KAAK,GAAG,CAAC,CAAC,CAAC,KAAK,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAClD,oFAAoF,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,CAChH,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,CAAsB;IAC/C,MAAM,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QAAE,KAAK,GAAG,GAAG,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,SAAS,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,EAAE,CAAC;SAClE,IAAI,CAAC,CAAC,CAAC,OAAO;QAAE,KAAK,GAAG,GAAG,CAAC,iBAAiB,CAAC,CAAC;SAC/C,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;QAAE,KAAK,GAAG,GAAG,CAAC,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,2BAA2B,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;SACpG,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO;QAAE,KAAK,GAAG,GAAG,GAAG,CAAC,6BAA6B,CAAC,IAAI,GAAG,CAAC,2BAA2B,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;;QACnK,KAAK,GAAG,GAAG,CAAC,yBAAyB,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3H,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,KAAK,GAAG,GAAG,EAAE,CAAC;AACpD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAoB,EACpB,OAAe,EACf,OAAgB,EAChB,CAAwB,EACxB,KAAY,EACZ,IAAY,EACZ,MAAyB;IAEzB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7D,iGAAiG;IACjG,gGAAgG;IAChG,+FAA+F;IAC/F,mEAAmE;IACnE,MAAM,WAAW,GAAG,CAAC,MAAc,EAAE,IAAY,EAAE,EAAE;QACnD,IAAI,MAAM,GAAG,CAAC;YAAE,EAAE,CAAC,mBAAmB,IAAI,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC,CAAC;;YAC7D,IAAI,CAAC,GAAG,OAAO,mCAAmC,MAAM,CAAC,GAAG,cAAc,IAAI,CAAC,UAAU,CAAC,sDAAsD,KAAK,sDAAsD,CAAC,CAAC;IACpN,CAAC,CAAC;IACF,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QACnB,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,UAAU,WAAW,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,SAAS,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5G,OAAO;YACL,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,MAAM;YAClC,SAAS,EAAE,IAAI;YACf,WAAW,EAAE,KAAK;YAClB,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU;YAChC,UAAU,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU;SACjC,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;IACrG,MAAM,KAAK,GAAG,cAAc,OAAO,YAAY,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACxE,kGAAkG;IAClG,gGAAgG;IAChG,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClC,8FAA8F;QAC9F,0DAA0D;QAC1D,IAAI,CAAC,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,MAAM,CAAC,GAAG,kCAAkC,GAAG,CAAC,8DAA8D,CAAC,EAAE,CAAC,CAAC;IAC3J,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,2EAA2E,CAAC,EAAE,CAAC,CAAC;IAC/H,CAAC;IACD,mGAAmG;IACnG,+DAA+D;IAC/D,IAAI,KAAK,CAAC,SAAS,CAAC,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACpE,IAAI,CAAC,uCAAuC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC3D,OAAO;YACL,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM;YACxB,SAAS,EAAE,KAAK;YAChB,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,aAAa;SACjF,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;IAC/D,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAClC,6FAA6F;QAC7F,8DAA8D;QAC9D,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAChF,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,IAAI,SAAS,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IACvG,CAAC;IACD,IAAI,KAAK,GAAG,CAAC,GAAG,CAAC;IACjB,IAAI,UAAmC,CAAC;IACxC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,EAAE;YACzD,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE;gBAChB,MAAM,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;gBAC3B,2FAA2F;gBAC3F,0BAA0B;gBAC1B,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,GAAG,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;oBAC9D,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;oBACtB,IAAI,CAAC;wBAAE,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC;oBACzB,OAAO,CAAC,GAAG,CAAC,SAAS,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACxC,CAAC;YACH,CAAC;SACF,CAAC,CAAC;QACH,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,WAAW,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,KAAK,CAAC,UAAU,YAAY,KAAK,CAAC,UAAU,aAAa,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC3G,OAAO;YACL,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,SAAS,EAAE,KAAK,CAAC,MAAM,KAAK,MAAM;YAClC,WAAW,EAAE,KAAK,CAAC,MAAM,KAAK,aAAa;YAC3C,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;SAC7B,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,oBAAoB,EAAE,CAAC;YACxC,IAAI,CAAC,GAAG,OAAO,aAAa,GAAG,CAAC,IAAI,EAAE,MAAM,IAAI,aAAa,OAAO,MAAM,CAAC,GAAG,yCAAyC,CAAC,CAAC;YACzH,IAAI,CAAC,kBAAkB,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,MAAM,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;YACpD,OAAO;gBACL,MAAM;gBACN,SAAS,EAAE,KAAK;gBAChB,WAAW,EAAE,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,aAAa;gBAC5D,UAAU,EAAE,GAAG,CAAC,IAAI,EAAE,UAAU;gBAChC,UAAU,EAAE,GAAG,CAAC,IAAI,EAAE,UAAU;aACjC,CAAC;QACJ,CAAC;QACD,6FAA6F;QAC7F,4EAA4E;QAC5E,IAAI,GAAG,YAAY,eAAe;YAAE,MAAM,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,IAAI,kCAAkC,CAAC,CAAC;QAC7H,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,MAAM,CAAC,QAAgE;IACrF,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,SAAS,CAAC;QAChC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACzF,MAAM,KAAK,GAAG,CAAC,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjE,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC5F,CAAC"}

package/dist/riskgate.d.ts

@@ -0,0 +1,101 @@
+/**
+ * The CLI's one risk gate for a write — the choke point every signing path (owner-op or deploy)
+ * routes an already-prepared tx through, so `--dry-run` and `--confirm` behave IDENTICALLY no
+ * matter which command reached them.
+ *
+ * Before this module existed, the same three-part shape (preview-and-stop under `--dry-run` →
+ * optional interactive `--confirm` → pick a lane → sign) was hand-written THREE times: ownerops.ts's
+ * `runWrite` (every owner-op), a near-identical `runMinterWrite` ("the minter path does not go
+ * through runWrite, so it needs its OWN dry-run guard" — its own comment conceding the duplication),
+ * and a third copy inline in main.ts's `deploy-code --resume` send path. Each could drift from the
+ * others without anyone deciding it should — and the two owner-op copies HAD already drifted: only
+ * one of them printed the `owner` line on a dry-run preview when the caller supplied one.
+ *
+ * `gatedSend` is the merge. Callers that had NO `--confirm` support (every owner-op) gain it for
+ * free just by routing through here — there is no owner-op-specific reason they lacked it; it was
+ * simply never wired.
+ */
+import { type PublicClient } from 'viem';
+import { type Address } from '@artblocks/abx-sdk';
+import { type Lane, type SignResult, type TxProvider } from './signer.js';
+import { type Flags } from './flags.js';
+/** Resolve the signing lane from flags: `--unsigned` (cold) · `--sign` (wallet) · `--sponsor`
+ *  (ABX creator wallet) · default hot. The one place every write makes this decision. */
+export declare function laneFromFlags(flags: Flags): Lane;
+/**
+ * Refuse a real deploy on the HOT lane when there is no key to sign with — before the command has
+ * spent anything.
+ *
+ * The signing lanes are checked at *signing* time, which is the end of a deploy. Everything that
+ * makes a deploy possible happens first, and some of it is neither free nor reversible: `--backend
+ * arweave|ipfs|cloud` UPLOADS the creator's art before any transaction is prepared. So a deploy run
+ * with no key, and no `--dry-run` to say "preview only", would mint an Arweave identity, publish the
+ * art, and only THEN discover it could never have deployed. Under Turbo's free tier the upload
+ * *succeeds*, so the art is published permanently — an irreversible side effect from a run that was
+ * always going to fail.
+ *
+ * `--dry-run` guards every signing choke point (`isDryRun`, `gatedSend`); this is the same idea one
+ * step earlier, and the rule it enforces is the sibling of that one: **a spend or a publish never
+ * precedes the check that this run can be signed at all.** Only the hot lane is checked — `--sign`
+ * (browser wallet) and `--unsigned` (offline signer) deliberately have no local key, and a preview
+ * spends nothing.
+ */
+export declare function assertLaneCanSign(flags: Flags): void;
+/**
+ * Opt-in pre-send confirmation gate (`--confirm`). OFF by default → scripted use is untouched. Even
+ * when opted in, it never blocks automation: `--yes` or a non-TTY stdin proceeds silently. Only an
+ * interactive `--confirm` prints the summary and waits for a y/N. Aborts on anything but yes.
+ */
+export declare function confirmSend(summary: string, flags: Flags): Promise<void>;
+export interface DryRunSimulation {
+    /** Three honest states, never collapsed into one another: `would-succeed` is earned (state check
+     *  passed AND the signer can afford it), `would-revert` is a proven failure (a state revert OR an
+     *  insufficient-funds shortfall — see `reason`), and `unknown` means neither could be established —
+     *  it is NOT a synonym for "probably fine" and must never be reported as `would-succeed`. */
+    status: 'would-succeed' | 'would-revert' | 'unknown';
+    reason?: string;
+    /** The gas the REAL send would use, from the same {@link pinGas} `makeHotSender` calls at send
+     *  time — never `transaction.gasFloor` (a proven MINIMUM used to detect an implausible estimate,
+     *  not a prediction of what the send needs; see `pinGas`'s own doc in execute.ts). Present only
+     *  when a real estimate was obtained. Decimal string — a `bigint` doesn't survive `JSON.stringify`. */
+    estimatedGas?: string;
+    /** `estimatedGas × current gas price`, plus the tx's own value if any — in wei, decimal string. */
+    estimatedCostWei?: string;
+    /** The signer's current balance, in wei, decimal string — present whenever a balance read was
+     *  attempted, so the numbers behind an insufficient-funds verdict are visible even to a caller
+     *  that only reads the JSON. */
+    balanceWei?: string;
+}
+/**
+ * A revert's own name, when the payload carries one — `RoyaltyTooHigh()` instead of a raw hex dump
+ * or "reverted for an unknown reason".
+ *
+ * Whether we get one is the NODE's choice, not ours: many public endpoints (measured:
+ * `base-sepolia-rpc.publicnode.com` and `sepolia.base.org`) answer a failed `eth_call` with a bare
+ * `execution reverted` and no data at all. So the no-data case says *that*, rather than implying we
+ * looked at a reason and couldn't read it.
+ */
+export declare function revertReason(err: unknown): string;
+export interface GatedSendOptions {
+    chainKey: string;
+    /** The address that must sign (onlyOwner / token holder) — shown to the human, guards the hot
+     *  lane, and (when set) printed on the dry-run preview. */
+    expectedSigner?: Address;
+    /** Test-only seam: a pre-built client for the dry-run simulation, instead of one `simulateDryRun`
+     *  would otherwise construct from `chainKey`. Every production caller omits this. */
+    client?: PublicClient;
+}
+/** Resolve the signer a preview should simulate from the same source the hot send will use.
+ * Explicit owner/buyer pinning always wins; wallet and cold lanes cannot be inferred locally. */
+export declare function previewSigner(flags: Flags, explicit?: Address, signingKey?: `0x${string}` | undefined): Address | undefined;
+/**
+ * The one send choke point for a SINGLE already-prepared write: `--dry-run` preview (nothing sent,
+ * returns `null`) → optional `--confirm` prompt → lane selection → `signTx`. Every caller — an
+ * owner-op's `runWrite`/`runMinterWrite`, or the deploy family's resumed-setup send — resolves to
+ * this, so the two families can never again each carry their own (possibly diverging) idea of what
+ * `--dry-run` or `--confirm` means. The historical bug class this forecloses structurally: a write
+ * reaching the send lane under `--dry-run` because some caller re-derived the check by hand and
+ * missed a branch.
+ */
+export declare function gatedSend(provider: TxProvider, flags: Flags, opts: GatedSendOptions): Promise<SignResult | null>;
+//# sourceMappingURL=riskgate.d.ts.map