@artblocks/abx-sdk 0.1.0-alpha.4 → 0.1.0-alpha.41

package/dist/gateways.js

@@ -0,0 +1,156 @@
+/**
+ * Gateway resolution for content-addressed locators (`ipfs://…`, `ar://…`) is split into a pure
+ * resolver and a
+ * separate env-reading piece so a host with its own gateway config never has to touch
+ * `process.env` through this module at all, and so this stays reachable from a browser bundle
+ * (see `test/browser-bundle.test.ts` — no `process.env` read outside {@link gatewayConfigFromEnv},
+ * which itself goes through {@link readEnv} and degrades to "no override" rather than throwing
+ * where `process` doesn't exist).
+ */
+import { readEnv } from './util.js';
+import { GATEWAY_FIELD, GATEWAY_FLOOR, METADATA_REPRESENTATION as R } from './spine.js';
+import { inlineText } from './token.js';
+/**
+ * The gateway BASE for a locator network, given already-resolved `overrides` — PURE, no env
+ * read. Defaults to the generic public gateways (`ipfs.io` / `arweave.net`) when `overrides`
+ * doesn't name one; any other `network` (e.g. `http`, which carries its own base) resolves to
+ * `''`. Callers that want override → env → default precedence compose this with
+ * {@link gatewayConfigFromEnv} themselves (see `@artblocks/abx-storage`'s `resolveGatewayBase`
+ * for the reference compose) — kept separate so a host with its own config source never has this
+ * function reach into `process.env` on its behalf.
+ */
+export function resolveGatewayBase(network, overrides) {
+    if (network === 'ipfs')
+        return overrides?.ipfs || 'https://ipfs.io';
+    if (network === 'arweave')
+        return overrides?.arweave || 'https://arweave.net';
+    return '';
+}
+/**
+ * The ONLY env-reading piece of this module: `ABX_IPFS_GATEWAY` / `ABX_ARWEAVE_GATEWAY`, read via
+ * {@link readEnv} (safe where `process` doesn't exist). Exported separately from
+ * {@link resolveGatewayBase} so a host with its own gateway configuration (a database row, a
+ * remote config service) never has to touch `process.env` through this package at all — it just
+ * never calls this function and passes its own overrides straight to the pure resolver instead.
+ */
+export function gatewayConfigFromEnv() {
+    const ipfs = readEnv('ABX_IPFS_GATEWAY');
+    const arweave = readEnv('ABX_ARWEAVE_GATEWAY');
+    const out = {};
+    if (ipfs)
+        out.ipfs = ipfs;
+    if (arweave)
+        out.arweave = arweave;
+    return out;
+}
+/** Build the URL that asks `gateway` for `id`. A locator that is already an absolute URL is asked
+ *  verbatim — rewriting someone's URL would answer a question they didn't ask. */
+export function gatewayUrlFor(network, id, gateway) {
+    if (/^https?:\/\//i.test(id))
+        return id;
+    const base = gateway.replace(/\/+$/, '');
+    // A path suffix (a directory manifest entry, e.g. `<txid>/index.html`) rides along untouched.
+    return network === 'ipfs' ? `${base}/ipfs/${id}` : `${base}/${id}`;
+}
+const SCHEME = { ipfs: 'ipfs://', arweave: 'ar://' };
+/**
+ * Normalize a gateway HOST (the `ABX_IPFS_GATEWAY` / `ABX_ARWEAVE_GATEWAY` shape, and what
+ * {@link resolveGatewayBase} returns) into the on-chain PREFIX shape — trailing path included, so
+ * projection is a raw concat. A value that already ends in the scheme's path segment is left
+ * alone, so an operator may configure either form.
+ */
+export function gatewayPrefixFrom(network, base) {
+    const trimmed = base.replace(/\/+$/, '');
+    if (!trimmed)
+        return GATEWAY_FLOOR[network];
+    if (network === 'arweave')
+        return `${trimmed}/`;
+    return trimmed.endsWith('/ipfs') ? `${trimmed}/` : `${trimmed}/ipfs/`;
+}
+/**
+ * The gateway prefix this project prefers for a scheme: the collection's reserved
+ * `abx_gateway_*` field, else the host's env/override default, else the public floor.
+ *
+ * The env read is a FLOOR, never an override. When a project has stated a preference on chain,
+ * every conforming resolver must serve that one — otherwise the same token renders differently
+ * depending on who is serving it, which is the property `abx_provenance` exists to make checkable.
+ * When a project has stated nothing, a host with its own gateway is strictly better than
+ * `ipfs.io`, and a managed provider serving a token it does not own has no other way to say so.
+ */
+export function projectGatewayPrefix(state, network, overrides) {
+    const onChain = state.collectionFields.find(
+    // Only `inline` counts. A prefix is a short UTF-8 string, and accepting exactly one
+    // representation keeps this rule identical on the renderer, the generator and here.
+    (f) => f.field === GATEWAY_FIELD[network] && f.representation === R.inline);
+    if (onChain) {
+        // No `.trim()`: the on-chain `_gatewayPrefix` returns the stored bytes verbatim (any non-empty
+        // `inline` value wins), so trimming here would make the two serving planes disagree on a
+        // whitespace-padded prefix — the same byte-parity class this projection exists to hold. The field
+        // store rejects an empty value, so a set field is always non-empty.
+        const stated = inlineText(onChain);
+        if (stated)
+            return stated;
+    }
+    const host = overrides?.[network];
+    return host ? gatewayPrefixFrom(network, host) : GATEWAY_FLOOR[network];
+}
+/**
+ * Project a content-addressed field value into its https URL, byte-identically to the deployed
+ * renderer. `null` when the value locates nothing (`ipfs://` with no CID) — the caller omits an
+ * optional field or falls back on a required one, rather than emitting a bare prefix that 404s.
+ *
+ * Order is load-bearing and mirrors the Solidity exactly: strip the scheme, THEN substitute
+ * `{id}`, THEN check for an absolute URL. That last check is what stops a value which already
+ * names its own host — precisely what a `backend.locator()` return looks like — from coming back
+ * as `https://arweave.net/https://arweave.net/<txid>`.
+ */
+export function projectGatewayUrl(network, value, prefix, tokenId) {
+    let id = value;
+    const scheme = SCHEME[network];
+    if (id.startsWith(scheme))
+        id = id.slice(scheme.length);
+    if (!id)
+        return null;
+    // One collection-scope `ipfs` field addresses a whole pinned directory. Skipped on the
+    // collection surface, which has no tokenId — the same reason `url-template` is omitted there.
+    if (tokenId !== undefined)
+        id = id.split('{id}').join(tokenId);
+    if (/^https?:\/\//i.test(id))
+        return id;
+    return prefix + id;
+}
+/**
+ * The inverse of {@link gatewayUrlFor} / {@link projectGatewayUrl}: recover the bare content id
+ * (CID or txid, plus any path suffix) from whatever form a locator arrived in.
+ *
+ * This exists because a storage backend's `locator()` returns a **gateway HTTPS URL** — the form an
+ * operator can click — while an `ipfs` / `arweave` metadata field must hold IDENTITY, with the
+ * gateway supplied at read time. Baking the operator's gateway host into the field is exactly the
+ * weld this projection was built to remove: it makes a CID unmigratable and makes the chain report
+ * `source: url` for bytes that live on IPFS.
+ *
+ * `null` when no id can be recovered — notably a subdomain-style gateway
+ * (`https://<cid>.ipfs.dweb.link`), which ABX's own backends never produce. A caller that gets
+ * `null` should keep the URL as a plain `url` field and SAY so, rather than guess.
+ */
+export function contentIdFromLocator(network, locator) {
+    const trimmed = locator.trim();
+    if (!trimmed)
+        return null;
+    const scheme = SCHEME[network];
+    if (trimmed.startsWith(scheme))
+        return trimmed.slice(scheme.length) || null;
+    if (!/^https?:\/\//i.test(trimmed))
+        return trimmed; // already bare
+    if (network === 'ipfs') {
+        const at = trimmed.lastIndexOf('/ipfs/');
+        return at === -1 ? null : trimmed.slice(at + '/ipfs/'.length) || null;
+    }
+    // Strip the origin by hand rather than via `new URL().pathname`, which percent-encodes: an Arweave
+    // directory template `https://arweave.net/TXDIR/{id}.png` came back as `TXDIR/%7Bid%7D.png`, and
+    // that value would have been COMMITTED ON CHAIN — where nothing substitutes `%7Bid%7D`, so every
+    // token in the collection would resolve to the same missing file.
+    const afterOrigin = trimmed.replace(/^https?:\/\/[^/]*\/?/i, '');
+    return afterOrigin || null;
+}
+//# sourceMappingURL=gateways.js.map

package/dist/gateways.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateways.js","sourceRoot":"","sources":["../src/gateways.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAC,OAAO,EAAC,MAAM,WAAW,CAAC;AAClC,OAAO,EAAC,aAAa,EAAE,aAAa,EAAE,uBAAuB,IAAI,CAAC,EAAC,MAAM,YAAY,CAAC;AACtF,OAAO,EAAC,UAAU,EAAC,MAAM,YAAY,CAAC;AAetC;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAoC,EAAE,SAA4B;IACnG,IAAI,OAAO,KAAK,MAAM;QAAE,OAAO,SAAS,EAAE,IAAI,IAAI,iBAAiB,CAAC;IACpE,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,EAAE,OAAO,IAAI,qBAAqB,CAAC;IAC9E,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,IAAI,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,IAAI,IAAI;QAAE,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;IAC1B,IAAI,OAAO;QAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;IACnC,OAAO,GAAG,CAAC;AACb,CAAC;AAED;kFACkF;AAClF,MAAM,UAAU,aAAa,CAAC,OAAuB,EAAE,EAAU,EAAE,OAAe;IAChF,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACzC,8FAA8F;IAC9F,OAAO,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,EAAE,EAAE,CAAC;AACrE,CAAC;AAgBD,MAAM,MAAM,GAA4C,EAAC,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAC,CAAC;AAE5F;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAgC,EAAE,IAAY;IAC9E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACzC,IAAI,CAAC,OAAO;QAAE,OAAO,aAAa,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,GAAG,OAAO,GAAG,CAAC;IAChD,OAAO,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,QAAQ,CAAC;AACxE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAA6C,EAC7C,OAAgC,EAChC,SAA4B;IAE5B,MAAM,OAAO,GAAG,KAAK,CAAC,gBAAgB,CAAC,IAAI;IACzC,oFAAoF;IACpF,oFAAoF;IACpF,CAAC,CAAgB,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,cAAc,KAAK,CAAC,CAAC,MAAM,CAC1F,CAAC;IACF,IAAI,OAAO,EAAE,CAAC;QACZ,+FAA+F;QAC/F,yFAAyF;QACzF,kGAAkG;QAClG,oEAAoE;QACpE,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QACnC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;IAC5B,CAAC;IACD,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC;IAClC,OAAO,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAgC,EAChC,KAAa,EACb,MAAc,EACd,OAAgB;IAEhB,IAAI,EAAE,GAAG,KAAK,CAAC;IACf,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACrB,uFAAuF;IACvF,8FAA8F;IAC9F,IAAI,OAAO,KAAK,SAAS;QAAE,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC/D,IAAI,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,EAAE,CAAC;IACxC,OAAO,MAAM,GAAG,EAAE,CAAC;AACrB,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAgC,EAAE,OAAe;IACpF,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;IAC5E,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC,CAAC,eAAe;IACnE,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QACzC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;IACxE,CAAC;IACD,mGAAmG;IACnG,iGAAiG;IACjG,iGAAiG;IACjG,kEAAkE;IAClE,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC;IACjE,OAAO,WAAW,IAAI,IAAI,CAAC;AAC7B,CAAC"}

package/dist/generator-document.d.ts

@@ -0,0 +1,57 @@
+/**
+ * The generator-document family — the template-mode runtime companion, the inline-safety
+ * escapes, and the pure document-shape builders. Every piece here is a pure string operation with no chain
+ * access and no Node dependency, so it belongs in the neutral layer a resolver, a CLI preview,
+ * and any third-party provider all consume identically — one definition of the runtime surface
+ * and the document shape, so none of them can quietly drift from what the others emit.
+ */
+/**
+ * `abx.js` — the runtime companion (the hl-gen.js analog), served at `/abx.js` and
+ * inlined into template-mode documents. Convention, not protocol: a directory build
+ * includes it; the generator injects the same surface.
+ *
+ * tokenData resolution order (the durability chain): the injected `window.abxTokenData`
+ * global (template mode) → the `?abx=` query param (base64url canonical JSON — the
+ * live-view route) → the `?chainId&contract&tokenId` coordinate floor (a build opened
+ * bare from a gateway still knows which token it is; full param reads from RPC are the
+ * render-node's job, not this shim's).
+ */
+export declare const ABX_JS = "(function () {\n  var abx = (window.abx = window.abx || {});\n  function fromQuery() {\n    try {\n      var q = new URLSearchParams(location.search);\n      var packed = q.get('abx');\n      if (packed) {\n        var b64 = packed.replace(/-/g, '+').replace(/_/g, '/');\n        return JSON.parse(new TextDecoder().decode(Uint8Array.from(atob(b64), function (c) { return c.charCodeAt(0); })));\n      }\n      // coordinate floor: enough for a deterministic piece opened bare from a gateway\n      if (q.get('contract') && q.get('tokenId')) {\n        return {\n          chainId: Number(q.get('chainId') || 1),\n          contractAddress: String(q.get('contract')).toLowerCase(),\n          tokenId: String(q.get('tokenId')),\n        };\n      }\n    } catch (e) {}\n    return null;\n  }\n  abx.tokenData = window.abxTokenData || fromQuery();\n  abx.__traits = null;\n  abx.__done = false;\n  /** The script reports its computed traits (script-defined features; captured at render). */\n  abx.traits = function (t) {\n    abx.__traits = t;\n    try { document.dispatchEvent(new CustomEvent('abx:traits', {detail: t})); } catch (e) {}\n    return t;\n  };\n  /** Output-complete \u2014 the capture point for the render effect. Optional (timeout fallback). */\n  abx.done = function () {\n    abx.__done = true;\n    try { document.dispatchEvent(new CustomEvent('abx:done')); } catch (e) {}\n  };\n})();\n";
+/**
+ * Inline-document safety — the one HTML parsing rule that matters when embedding
+ * content inside <script> elements: the parser ends the element at the first
+ * `</script`, regardless of JS string/comment context. Two content shapes, two
+ * semantics-preserving escapes:
+ *
+ *  - JS source (libraries, creator scripts): `</script` → `<\/script`. In valid JS the
+ *    sequence can only occur inside a string, template, regex, or comment — contexts
+ *    where `\/` is identical to `/` — so the transform never changes behavior.
+ *  - JSON (the injected `window.abxTokenData`): every `<` → `\u003c`. `<` only occurs
+ *    inside JSON strings (never in the syntax), and `\u003c` parses to the same
+ *    character — the canonical (hashed) serialization is untouched; only the delivery
+ *    form differs.
+ */
+/** JS source safe to inline inside a <script> element. Case-insensitive because HTML end tags
+ *  are; the on-chain generator matches this (see `AbxGenerator._escapedScript`). */
+export declare function escapeInlineScript(src: string): string;
+/** A JSON payload safe to inline inside a <script> element (parse-identical). */
+export declare function escapeInlineJson(json: string): string;
+/**
+ * Inject `window.abxTokenData` (and, when the document doesn't already carry one, a
+ * `<base href="{code root}/">` so relative asset paths keep riding the gateway) at the
+ * very top of `<head>` — before any build script can execute; abx.js resolves the global
+ * first. String-level and deliberately robust rather than a full HTML parse: no `<head>`
+ * → inject right after `<html …>`; neither → prepend. First `<base>` wins in HTML, so an
+ * existing one is never doubled.
+ */
+export declare function injectTokenDataIntoHtml(html: string, tokenDataJson: string, codeRoot: string): string;
+/**
+ * The template-mode document shape, pure — no chain access, so a caller that already has a
+ * script + dep tags in hand (the resolver's own chain-fetched assembly; `abx preview`'s offline
+ * studio, local-file + CDN-resolved) can build the byte-identical document. Exported for exactly
+ * that reason: **one** definition of the shape, so a caller can never quietly drift from what the
+ * generator actually serves — the failure mode a hand-maintained duplicate (with a "keep these in
+ * sync" comment and nothing enforcing it) invites.
+ */
+export declare function buildGeneratorDocument(script: string, tokenDataJson: string, depTags: string[]): string;
+//# sourceMappingURL=generator-document.d.ts.map

package/dist/generator-document.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generator-document.d.ts","sourceRoot":"","sources":["../src/generator-document.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;;;;;GAUG;AACH,eAAO,MAAM,MAAM,o4CAoClB,CAAC;AAEF;;;;;;;;;;;;;GAaG;AAEH;oFACoF;AACpF,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,iFAAiF;AACjF,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAErD;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAcrG;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAYvG"}

package/dist/generator-document.js

@@ -0,0 +1,123 @@
+/**
+ * The generator-document family — the template-mode runtime companion, the inline-safety
+ * escapes, and the pure document-shape builders. Every piece here is a pure string operation with no chain
+ * access and no Node dependency, so it belongs in the neutral layer a resolver, a CLI preview,
+ * and any third-party provider all consume identically — one definition of the runtime surface
+ * and the document shape, so none of them can quietly drift from what the others emit.
+ */
+/**
+ * `abx.js` — the runtime companion (the hl-gen.js analog), served at `/abx.js` and
+ * inlined into template-mode documents. Convention, not protocol: a directory build
+ * includes it; the generator injects the same surface.
+ *
+ * tokenData resolution order (the durability chain): the injected `window.abxTokenData`
+ * global (template mode) → the `?abx=` query param (base64url canonical JSON — the
+ * live-view route) → the `?chainId&contract&tokenId` coordinate floor (a build opened
+ * bare from a gateway still knows which token it is; full param reads from RPC are the
+ * render-node's job, not this shim's).
+ */
+export const ABX_JS = `(function () {
+  var abx = (window.abx = window.abx || {});
+  function fromQuery() {
+    try {
+      var q = new URLSearchParams(location.search);
+      var packed = q.get('abx');
+      if (packed) {
+        var b64 = packed.replace(/-/g, '+').replace(/_/g, '/');
+        return JSON.parse(new TextDecoder().decode(Uint8Array.from(atob(b64), function (c) { return c.charCodeAt(0); })));
+      }
+      // coordinate floor: enough for a deterministic piece opened bare from a gateway
+      if (q.get('contract') && q.get('tokenId')) {
+        return {
+          chainId: Number(q.get('chainId') || 1),
+          contractAddress: String(q.get('contract')).toLowerCase(),
+          tokenId: String(q.get('tokenId')),
+        };
+      }
+    } catch (e) {}
+    return null;
+  }
+  abx.tokenData = window.abxTokenData || fromQuery();
+  abx.__traits = null;
+  abx.__done = false;
+  /** The script reports its computed traits (script-defined features; captured at render). */
+  abx.traits = function (t) {
+    abx.__traits = t;
+    try { document.dispatchEvent(new CustomEvent('abx:traits', {detail: t})); } catch (e) {}
+    return t;
+  };
+  /** Output-complete — the capture point for the render effect. Optional (timeout fallback). */
+  abx.done = function () {
+    abx.__done = true;
+    try { document.dispatchEvent(new CustomEvent('abx:done')); } catch (e) {}
+  };
+})();
+`;
+/**
+ * Inline-document safety — the one HTML parsing rule that matters when embedding
+ * content inside <script> elements: the parser ends the element at the first
+ * `</script`, regardless of JS string/comment context. Two content shapes, two
+ * semantics-preserving escapes:
+ *
+ *  - JS source (libraries, creator scripts): `</script` → `<\/script`. In valid JS the
+ *    sequence can only occur inside a string, template, regex, or comment — contexts
+ *    where `\/` is identical to `/` — so the transform never changes behavior.
+ *  - JSON (the injected `window.abxTokenData`): every `<` → `\u003c`. `<` only occurs
+ *    inside JSON strings (never in the syntax), and `\u003c` parses to the same
+ *    character — the canonical (hashed) serialization is untouched; only the delivery
+ *    form differs.
+ */
+/** JS source safe to inline inside a <script> element. Case-insensitive because HTML end tags
+ *  are; the on-chain generator matches this (see `AbxGenerator._escapedScript`). */
+export function escapeInlineScript(src) {
+    return src.replace(/<\/(script)/gi, '<\\/$1');
+}
+/** A JSON payload safe to inline inside a <script> element (parse-identical). */
+export function escapeInlineJson(json) {
+    return json.replace(/</g, '\\u003c');
+}
+/**
+ * Inject `window.abxTokenData` (and, when the document doesn't already carry one, a
+ * `<base href="{code root}/">` so relative asset paths keep riding the gateway) at the
+ * very top of `<head>` — before any build script can execute; abx.js resolves the global
+ * first. String-level and deliberately robust rather than a full HTML parse: no `<head>`
+ * → inject right after `<html …>`; neither → prepend. First `<base>` wins in HTML, so an
+ * existing one is never doubled.
+ */
+export function injectTokenDataIntoHtml(html, tokenDataJson, codeRoot) {
+    const baseTag = /<base[\s/>]/i.test(html) ? '' : `<base href="${codeRoot}">`;
+    const injection = `${baseTag}<script>window.abxTokenData=${escapeInlineJson(tokenDataJson)};</script>`;
+    const head = /<head(\s[^>]*)?>/i.exec(html);
+    if (head) {
+        const at = head.index + head[0].length;
+        return html.slice(0, at) + injection + html.slice(at);
+    }
+    const htmlTag = /<html(\s[^>]*)?>/i.exec(html);
+    if (htmlTag) {
+        const at = htmlTag.index + htmlTag[0].length;
+        return html.slice(0, at) + injection + html.slice(at);
+    }
+    return injection + html;
+}
+/**
+ * The template-mode document shape, pure — no chain access, so a caller that already has a
+ * script + dep tags in hand (the resolver's own chain-fetched assembly; `abx preview`'s offline
+ * studio, local-file + CDN-resolved) can build the byte-identical document. Exported for exactly
+ * that reason: **one** definition of the shape, so a caller can never quietly drift from what the
+ * generator actually serves — the failure mode a hand-maintained duplicate (with a "keep these in
+ * sync" comment and nothing enforcing it) invites.
+ */
+export function buildGeneratorDocument(script, tokenDataJson, depTags) {
+    return [
+        '<!doctype html>',
+        '<html><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">',
+        '<style>html,body{margin:0;padding:0;overflow:hidden}canvas{display:block}</style>',
+        `<script>window.abxTokenData=${escapeInlineJson(tokenDataJson)};</script>`,
+        `<script>${ABX_JS}</script>`,
+        ...depTags,
+        '</head><body>',
+        `<script>\n${escapeInlineScript(script)}\n</script>`,
+        '</body></html>',
+    ].join('\n');
+}
+//# sourceMappingURL=generator-document.js.map

package/dist/generator-document.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generator-document.js","sourceRoot":"","sources":["../src/generator-document.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAoCrB,CAAC;AAEF;;;;;;;;;;;;;GAaG;AAEH;oFACoF;AACpF,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,OAAO,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;AAChD,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAY,EAAE,aAAqB,EAAE,QAAgB;IAC3F,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,QAAQ,IAAI,CAAC;IAC7E,MAAM,SAAS,GAAG,GAAG,OAAO,+BAA+B,gBAAgB,CAAC,aAAa,CAAC,YAAY,CAAC;IACvG,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACvC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/C,IAAI,OAAO,EAAE,CAAC;QACZ,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,SAAS,GAAG,IAAI,CAAC;AAC1B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAc,EAAE,aAAqB,EAAE,OAAiB;IAC7F,OAAO;QACL,iBAAiB;QACjB,uGAAuG;QACvG,mFAAmF;QACnF,+BAA+B,gBAAgB,CAAC,aAAa,CAAC,YAAY;QAC1E,WAAW,MAAM,WAAW;QAC5B,GAAG,OAAO;QACV,eAAe;QACf,aAAa,kBAAkB,CAAC,MAAM,CAAC,aAAa;QACpD,gBAAgB;KACjB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/generator.d.ts

@@ -1,5 +1,5 @@
 /**
- * The canonical on-chain generator — `AbxGenerator` (specs/protocol/code-projects.md →
+ * The canonical on-chain generator — `AbxGenerator` (site/content/docs/protocol/code-projects.mdx →
  * "The canonical generator"). One field renderer for the `animation_url` field serving both
  * code custody modes: **template** (script chunks → the full HTML document, chain-complete
  * when every dependency resolves to on-chain bytes) and **directory** (`code` field → a
@@ -98,6 +98,42 @@ export declare const abxGeneratorAbi: readonly [{
         readonly name: "";
         readonly type: "string";
     }];
+}, {
+    readonly type: "function";
+    readonly name: "abxJs";
+    readonly stateMutability: "view";
+    readonly inputs: readonly [];
+    readonly outputs: readonly [{
+        readonly name: "";
+        readonly type: "string";
+    }];
+}, {
+    readonly type: "function";
+    readonly name: "gunzipScript";
+    readonly stateMutability: "view";
+    readonly inputs: readonly [];
+    readonly outputs: readonly [{
+        readonly name: "";
+        readonly type: "string";
+    }];
+}, {
+    readonly type: "function";
+    readonly name: "registryScriptChunk";
+    readonly stateMutability: "view";
+    readonly inputs: readonly [{
+        readonly name: "registry";
+        readonly type: "address";
+    }, {
+        readonly name: "ref";
+        readonly type: "bytes32";
+    }, {
+        readonly name: "index";
+        readonly type: "uint256";
+    }];
+    readonly outputs: readonly [{
+        readonly name: "";
+        readonly type: "string";
+    }];
 }];
 /** `AbxGenerator`'s branch constants, by index: 0 = none, 1 = template, 2 = directory. */
 export declare const GENERATOR_BRANCHES: readonly ["none", "template", "directory"];
@@ -108,7 +144,13 @@ export declare const GENERATOR_URL_BUDGET_BYTES = 8192;
 export interface GeneratorStatus {
     branch: number;
     branchName: GeneratorBranch;
-    /** Template branch with EVERY dependency resolved to proven on-chain bytes. Always false off it. */
+    /** Template branch with EVERY dependency resolved to on-chain bytes — no server, gateway, or CDN
+     *  in the graph. Always false off it.
+     *
+     *  A claim about WHERE the bytes come from, never about whether they are frozen: a `Registry`
+     *  dependency is re-fetched from the registry contract on every read, so its bytes can change while
+     *  this stays `true` — including after `lockDependencies` (which freezes the ref and the registry
+     *  pointer, not another contract's storage). Don't render this as "immutable" in a UI. */
     chainComplete: boolean;
     /** Refs that emit `<!-- abx:unresolved … -->` markers, decoded to their readable tags. */
     unresolvedRefs: string[];

package/dist/generator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"generator.d.ts","sourceRoot":"","sources":["../src/generator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAC,OAAO,EAAM,MAAM,MAAM,CAAC;AAGvC,sFAAsF;AACtF,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAyDlB,CAAC;AAEX,0FAA0F;AAC1F,eAAO,MAAM,kBAAkB,4CAA6C,CAAC;AAC7E,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE,2FAA2F;AAC3F,eAAO,MAAM,0BAA0B,OAAO,CAAC;AAE/C,yFAAyF;AACzF,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,eAAe,CAAC;IAC5B,oGAAoG;IACpG,aAAa,EAAE,OAAO,CAAC;IACvB,0FAA0F;IAC1F,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,qFAAqF;IACrF,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,uGAAuG;AACvG,MAAM,WAAW,mBAAmB;IAClC,YAAY,CAAC,IAAI,EAAE;QACjB,OAAO,EAAE,OAAO,CAAC;QACjB,GAAG,EAAE,SAAS,OAAO,EAAE,CAAC;QACxB,YAAY,EAAE,MAAM,CAAC;QACrB,IAAI,EAAE,SAAS,OAAO,EAAE,CAAC;KAC1B,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtB;AAED,6FAA6F;AAC7F,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,mBAAmB,EAC3B,SAAS,EAAE,OAAO,EAClB,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,eAAe,CAAC,CAc1B"}
+{"version":3,"file":"generator.d.ts","sourceRoot":"","sources":["../src/generator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAC,OAAO,EAAM,MAAM,MAAM,CAAC;AAGvC,sFAAsF;AACtF,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsFlB,CAAC;AAEX,0FAA0F;AAC1F,eAAO,MAAM,kBAAkB,4CAA6C,CAAC;AAC7E,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE,2FAA2F;AAC3F,eAAO,MAAM,0BAA0B,OAAO,CAAC;AAE/C,yFAAyF;AACzF,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,eAAe,CAAC;IAC5B;;;;;;8FAM0F;IAC1F,aAAa,EAAE,OAAO,CAAC;IACvB,0FAA0F;IAC1F,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,qFAAqF;IACrF,aAAa,EAAE,OAAO,CAAC;CACxB;AAED,uGAAuG;AACvG,MAAM,WAAW,mBAAmB;IAClC,YAAY,CAAC,IAAI,EAAE;QACjB,OAAO,EAAE,OAAO,CAAC;QACjB,GAAG,EAAE,SAAS,OAAO,EAAE,CAAC;QACxB,YAAY,EAAE,MAAM,CAAC;QACrB,IAAI,EAAE,SAAS,OAAO,EAAE,CAAC;KAC1B,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtB;AAED,6FAA6F;AAC7F,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,mBAAmB,EAC3B,SAAS,EAAE,OAAO,EAClB,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,eAAe,CAAC,CAc1B"}

package/dist/generator.js

@@ -57,6 +57,35 @@ export const abxGeneratorAbi = [
         ],
         outputs: [{ name: '', type: 'string' }],
     },
+    // The rest of the piecewise set. `document` on a large project can exceed a node's eth_call gas cap
+    // (tokenURI assembly measures ~360-405k gas per KB, climbing with size), and these are how a client assembles the same
+    // document from pieces instead: the two baked runtime blobs, plus a registry dependency's chunks
+    // one at a time. Every read here is an OFF-CHAIN view call by design — no contract calls them.
+    {
+        type: 'function',
+        name: 'abxJs',
+        stateMutability: 'view',
+        inputs: [],
+        outputs: [{ name: '', type: 'string' }],
+    },
+    {
+        type: 'function',
+        name: 'gunzipScript',
+        stateMutability: 'view',
+        inputs: [],
+        outputs: [{ name: '', type: 'string' }],
+    },
+    {
+        type: 'function',
+        name: 'registryScriptChunk',
+        stateMutability: 'view',
+        inputs: [
+            { name: 'registry', type: 'address' },
+            { name: 'ref', type: 'bytes32' },
+            { name: 'index', type: 'uint256' },
+        ],
+        outputs: [{ name: '', type: 'string' }],
+    },
 ];
 /** `AbxGenerator`'s branch constants, by index: 0 = none, 1 = template, 2 = directory. */
 export const GENERATOR_BRANCHES = ['none', 'template', 'directory'];

package/dist/generator.js.map

@@ -1 +1 @@
-{"version":3,"file":"generator.js","sourceRoot":"","sources":["../src/generator.ts"],"names":[],"mappings":"AAYA,OAAO,EAAC,SAAS,EAAC,MAAM,YAAY,CAAC;AAErC,sFAAsF;AACtF,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,QAAQ;QACd,eAAe,EAAE,MAAM;QACvB,MAAM,EAAE;YACN,EAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAC;YAChC,EAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAC;YAClC,EAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAC;SACjC;QACD,OAAO,EAAE;YACP,EAAC,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAC;YACrC,EAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAC;SAC9B;KACF;IACD;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,eAAe;QACrB,eAAe,EAAE,MAAM;QACvB,MAAM,EAAE,CAAC,EAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAC,CAAC;QAC1C,OAAO,EAAE;YACP,EAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAC;YAC/B,EAAC,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAC;YACrC,EAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,WAAW,EAAC;YAC3C,EAAC,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAC;SACtC;KACF;IACD;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,UAAU;QAChB,eAAe,EAAE,MAAM;QACvB,MAAM,EAAE;YACN,EAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAC;YAChC,EAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAC;SACnC;QACD,OAAO,EAAE,CAAC,EAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAC,CAAC;KACtC;IACD;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,eAAe;QACrB,eAAe,EAAE,MAAM;QACvB,MAAM,EAAE;YACN,EAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAC;YAChC,EAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAC;SACnC;QACD,OAAO,EAAE,CAAC,EAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAC,CAAC;KACtC;IACD;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,eAAe;QACrB,eAAe,EAAE,MAAM;QACvB,MAAM,EAAE;YACN,EAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAC;YAChC,EAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAC;SACjC;QACD,OAAO,EAAE,CAAC,EAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAC,CAAC;KACtC;CACO,CAAC;AAEX,0FAA0F;AAC1F,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,CAAU,CAAC;AAG7E,2FAA2F;AAC3F,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,CAAC;AAwB/C,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAA2B,EAC3B,SAAkB,EAClB,KAAc;IAEd,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,YAAY,CAAC;QACxF,OAAO,EAAE,SAAS;QAClB,GAAG,EAAE,eAAe;QACpB,YAAY,EAAE,eAAe;QAC7B,IAAI,EAAE,CAAC,KAAK,CAAC;KACd,CAAC,CAA+C,CAAC;IAClD,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;QACtB,UAAU,EAAE,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,MAAM;QACxD,aAAa;QACb,cAAc,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC3D,aAAa;KACd,CAAC;AACJ,CAAC"}
+{"version":3,"file":"generator.js","sourceRoot":"","sources":["../src/generator.ts"],"names":[],"mappings":"AAYA,OAAO,EAAC,SAAS,EAAC,MAAM,YAAY,CAAC;AAErC,sFAAsF;AACtF,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,QAAQ;QACd,eAAe,EAAE,MAAM;QACvB,MAAM,EAAE;YACN,EAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAC;YAChC,EAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAC;YAClC,EAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAC;SACjC;QACD,OAAO,EAAE;YACP,EAAC,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAC;YACrC,EAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAC;SAC9B;KACF;IACD;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,eAAe;QACrB,eAAe,EAAE,MAAM;QACvB,MAAM,EAAE,CAAC,EAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAC,CAAC;QAC1C,OAAO,EAAE;YACP,EAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAC;YAC/B,EAAC,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAC;YACrC,EAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,WAAW,EAAC;YAC3C,EAAC,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,EAAC;SACtC;KACF;IACD;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,UAAU;QAChB,eAAe,EAAE,MAAM;QACvB,MAAM,EAAE;YACN,EAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAC;YAChC,EAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAC;SACnC;QACD,OAAO,EAAE,CAAC,EAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAC,CAAC;KACtC;IACD;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,eAAe;QACrB,eAAe,EAAE,MAAM;QACvB,MAAM,EAAE;YACN,EAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAC;YAChC,EAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAC;SACnC;QACD,OAAO,EAAE,CAAC,EAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAC,CAAC;KACtC;IACD;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,eAAe;QACrB,eAAe,EAAE,MAAM;QACvB,MAAM,EAAE;YACN,EAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAC;YAChC,EAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAC;SACjC;QACD,OAAO,EAAE,CAAC,EAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAC,CAAC;KACtC;IACD,oGAAoG;IACpG,uHAAuH;IACvH,iGAAiG;IACjG,+FAA+F;IAC/F;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,OAAO;QACb,eAAe,EAAE,MAAM;QACvB,MAAM,EAAE,EAAE;QACV,OAAO,EAAE,CAAC,EAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAC,CAAC;KACtC;IACD;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,cAAc;QACpB,eAAe,EAAE,MAAM;QACvB,MAAM,EAAE,EAAE;QACV,OAAO,EAAE,CAAC,EAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAC,CAAC;KACtC;IACD;QACE,IAAI,EAAE,UAAU;QAChB,IAAI,EAAE,qBAAqB;QAC3B,eAAe,EAAE,MAAM;QACvB,MAAM,EAAE;YACN,EAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAC;YACnC,EAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAC;YAC9B,EAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAC;SACjC;QACD,OAAO,EAAE,CAAC,EAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAC,CAAC;KACtC;CACO,CAAC;AAEX,0FAA0F;AAC1F,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,CAAU,CAAC;AAG7E,2FAA2F;AAC3F,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,CAAC;AA8B/C,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAA2B,EAC3B,SAAkB,EAClB,KAAc;IAEd,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,YAAY,CAAC;QACxF,OAAO,EAAE,SAAS;QAClB,GAAG,EAAE,eAAe;QACpB,YAAY,EAAE,eAAe;QAC7B,IAAI,EAAE,CAAC,KAAK,CAAC;KACd,CAAC,CAA+C,CAAC;IAClD,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC;QACtB,UAAU,EAAE,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,MAAM;QACxD,aAAa;QACb,cAAc,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC3D,aAAa;KACd,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -11,22 +11,38 @@
 export type { Address, Hex, PublicClient, WalletClient, Account } from 'viem';
 export * from './types.js';
 export * from './spine.js';
+export * from './chain-support.js';
 export * from './chains.js';
 export * from './clients.js';
-export * from './deploy.js';
 export * from './ops.js';
+export * from './execute.js';
+export * from './errors.js';
+export * from './deploy.js';
+export * from './anchors.js';
 export * from './reconstruct.js';
+export * from './resume.js';
 export * from './tokendata.js';
 export * from './probe.js';
 export * from './token.js';
+export * from './tokens.js';
 export * from './traits.js';
 export * from './fastlz.js';
 export * from './chunks.js';
 export * from './create2.js';
+export * from './creator-token.js';
 export * from './deployments.js';
 export * from './deps.js';
+export * from './gateways.js';
 export * from './generator.js';
+export * from './generator-document.js';
+export * from './inspect.js';
+export * from './script-chunks.js';
+export * from './migrate.js';
+export * from './mime.js';
+export * from './onchain-uri.js';
+export * from './policy.js';
 export * from './service.js';
-export { loadDotEnv, parseEnvContent } from './env.js';
-export { oneOfOneImageAbi, oneOfOneImageFactoryAbi, seriesImageAbi, seriesImageFactoryAbi, seriesCodeAbi, seriesCodeFactoryAbi, abxSeedSourceAbi, abxMetadataRendererAbi, abxChunkStoreAbi, abxFixedPriceMinterAbi, spineEventAbi, } from './abi/index.js';
+export * from './staging.js';
+export * from './util.js';
+export { oneOfOneImageAbi, oneOfOneImageFactoryAbi, seriesImageAbi, seriesImageFactoryAbi, seriesCodeAbi, seriesCodeFactoryAbi, oneOfOneEditionAbi, oneOfOneEditionFactoryAbi, editionImageAbi, editionImageFactoryAbi, editionCodeAbi, editionCodeFactoryAbi, abxSeedSourceAbi, abxMetadataRendererAbi, abxChunkStoreAbi, abxFixedPriceMinterAbi, abxFixedPriceMinter1155Abi, spineEventAbi, } from './abi/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,YAAY,EAAC,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,YAAY,EAAE,OAAO,EAAC,MAAM,MAAM,CAAC;AAE5E,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC;AACzB,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,OAAO,EAAC,UAAU,EAAE,eAAe,EAAC,MAAM,UAAU,CAAC;AACrD,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,cAAc,EACd,qBAAqB,EACrB,aAAa,EACb,oBAAoB,EACpB,gBAAgB,EAChB,sBAAsB,EACtB,gBAAgB,EAChB,sBAAsB,EACtB,aAAa,GACd,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,YAAY,EAAC,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,YAAY,EAAE,OAAO,EAAC,MAAM,MAAM,CAAC;AAE5E,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,UAAU,CAAC;AACzB,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC;AACxC,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,cAAc,EACd,qBAAqB,EACrB,aAAa,EACb,oBAAoB,EACpB,kBAAkB,EAClB,yBAAyB,EACzB,eAAe,EACf,sBAAsB,EACtB,cAAc,EACd,qBAAqB,EACrB,gBAAgB,EAChB,sBAAsB,EACtB,gBAAgB,EAChB,sBAAsB,EACtB,0BAA0B,EAC1B,aAAa,GACd,MAAM,gBAAgB,CAAC"}

package/dist/index.js

@@ -1,21 +1,37 @@
 export * from './types.js';
 export * from './spine.js';
+export * from './chain-support.js';
 export * from './chains.js';
 export * from './clients.js';
-export * from './deploy.js';
 export * from './ops.js';
+export * from './execute.js';
+export * from './errors.js';
+export * from './deploy.js';
+export * from './anchors.js';
 export * from './reconstruct.js';
+export * from './resume.js';
 export * from './tokendata.js';
 export * from './probe.js';
 export * from './token.js';
+export * from './tokens.js';
 export * from './traits.js';
 export * from './fastlz.js';
 export * from './chunks.js';
 export * from './create2.js';
+export * from './creator-token.js';
 export * from './deployments.js';
 export * from './deps.js';
+export * from './gateways.js';
 export * from './generator.js';
+export * from './generator-document.js';
+export * from './inspect.js';
+export * from './script-chunks.js';
+export * from './migrate.js';
+export * from './mime.js';
+export * from './onchain-uri.js';
+export * from './policy.js';
 export * from './service.js';
-export { loadDotEnv, parseEnvContent } from './env.js';
-export { oneOfOneImageAbi, oneOfOneImageFactoryAbi, seriesImageAbi, seriesImageFactoryAbi, seriesCodeAbi, seriesCodeFactoryAbi, abxSeedSourceAbi, abxMetadataRendererAbi, abxChunkStoreAbi, abxFixedPriceMinterAbi, spineEventAbi, } from './abi/index.js';
+export * from './staging.js';
+export * from './util.js';
+export { oneOfOneImageAbi, oneOfOneImageFactoryAbi, seriesImageAbi, seriesImageFactoryAbi, seriesCodeAbi, seriesCodeFactoryAbi, oneOfOneEditionAbi, oneOfOneEditionFactoryAbi, editionImageAbi, editionImageFactoryAbi, editionCodeAbi, editionCodeFactoryAbi, abxSeedSourceAbi, abxMetadataRendererAbi, abxChunkStoreAbi, abxFixedPriceMinterAbi, abxFixedPriceMinter1155Abi, spineEventAbi, } from './abi/index.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAaA,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC;AACzB,cAAc,kBAAkB,CAAC;AACjC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,OAAO,EAAC,UAAU,EAAE,eAAe,EAAC,MAAM,UAAU,CAAC;AACrD,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,cAAc,EACd,qBAAqB,EACrB,aAAa,EACb,oBAAoB,EACpB,gBAAgB,EAChB,sBAAsB,EACtB,gBAAgB,EAChB,sBAAsB,EACtB,aAAa,GACd,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAaA,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,UAAU,CAAC;AACzB,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAC9B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,yBAAyB,CAAC;AACxC,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,cAAc,kBAAkB,CAAC;AACjC,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,cAAc,CAAC;AAC7B,cAAc,WAAW,CAAC;AAC1B,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,cAAc,EACd,qBAAqB,EACrB,aAAa,EACb,oBAAoB,EACpB,kBAAkB,EAClB,yBAAyB,EACzB,eAAe,EACf,sBAAsB,EACtB,cAAc,EACd,qBAAqB,EACrB,gBAAgB,EAChB,sBAAsB,EACtB,gBAAgB,EAChB,sBAAsB,EACtB,0BAA0B,EAC1B,aAAa,GACd,MAAM,gBAAgB,CAAC"}

package/dist/inspect.d.ts

@@ -0,0 +1,48 @@
+/**
+ * `abx inspect <script.js>` — static analysis of a generative script, BEFORE picking a lane.
+ *
+ * The membrane fix behind this: an agent (or creator) should DERIVE the deployment lane from what
+ * the script actually needs — are there traits? are they reproducible on-chain? how big is the
+ * assembled document (does a single `tokenURI` eth_call even fit)? — instead of guessing "fully
+ * on-chain!" and walking it back. This module is the pure analysis; `cmdInspect` formats it.
+ *
+ * Static only — it never executes the script (that's the resolver/runner's job, and executing
+ * untrusted code in the CLI would be a footgun). Everything here is regex/heuristic over the source.
+ */
+export type TraitFeasibility = 'none' | 'exact-likely' | 'careful' | 'infeasible' | 'unknown';
+export interface ScriptAnalysis {
+    bytes: number;
+    estChunks: number;
+    traits: {
+        present: boolean;
+        keys: string[];
+    };
+    paramHints: string[];
+    prng: {
+        seeded: boolean;
+        usesBareRandom: boolean;
+        usesMathRandom: boolean;
+        usesNoise: boolean;
+    };
+    depHints: string[];
+    looksP5: boolean;
+    feasibility: {
+        verdict: TraitFeasibility;
+        reason: string;
+    };
+    doc: {
+        estBytes: number;
+        deps: string[];
+        fitsSingleCall: boolean;
+        unknownDepSizes: boolean;
+    };
+    runtime: {
+        readsTokenData: boolean;
+        reportsTraits: boolean;
+        wrongGlobal: string | null;
+    };
+}
+export declare function analyzeScript(source: string, declaredDeps?: string[]): ScriptAnalysis;
+/** A one-line lane recommendation derived from the analysis (the decision-tree output). */
+export declare function recommendLane(a: ScriptAnalysis): string;
+//# sourceMappingURL=inspect.d.ts.map

package/dist/inspect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inspect.d.ts","sourceRoot":"","sources":["../src/inspect.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAgBH,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,cAAc,GAAG,SAAS,GAAG,YAAY,GAAG,SAAS,CAAC;AAE9F,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAA;KAAC,CAAC;IAC3C,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,IAAI,EAAE;QAAC,MAAM,EAAE,OAAO,CAAC;QAAC,cAAc,EAAE,OAAO,CAAC;QAAC,cAAc,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,OAAO,CAAA;KAAC,CAAC;IAC9F,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE;QAAC,OAAO,EAAE,gBAAgB,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAC,CAAC;IACzD,GAAG,EAAE;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,EAAE,CAAC;QAAC,cAAc,EAAE,OAAO,CAAC;QAAC,eAAe,EAAE,OAAO,CAAA;KAAC,CAAC;IAM3F,OAAO,EAAE;QAAC,cAAc,EAAE,OAAO,CAAC;QAAC,aAAa,EAAE,OAAO,CAAC;QAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;KAAC,CAAC;CACxF;AAoID,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,YAAY,GAAE,MAAM,EAAO,GAAG,cAAc,CA+FzF;AAED,2FAA2F;AAC3F,wBAAgB,aAAa,CAAC,CAAC,EAAE,cAAc,GAAG,MAAM,CA0BvD"}