@artblocks/abx-token-api 0.1.0-alpha.4 → 0.1.0-alpha.5

package/dist/dashboard.js

@@ -160,11 +160,13 @@ function timeago(iso) {
 function esc(s) {
     return String(s).replace(/[&<>"']/g, (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' }[c]));
 }
+// `abx`, never `pnpm abx` — this page is served to a published user who has no repo and no pnpm
+// (the contributor invocation is `pnpm abx`, and leaking it here is an uncopyable command).
 const EMPTY_STATE = `<section class="empty">
   <h2>No project indexed yet</h2>
-  <p>Deploy a 1/1 to Sepolia and index it in one command:</p>
-  <pre>pnpm abx demo</pre>
-  <p class="muted">Then refresh this page.</p>
+  <p>Deploy a 1/1 and index it in one command:</p>
+  <pre>abx demo</pre>
+  <p class="muted">Already deployed elsewhere? Register it with this node: <code>abx add &lt;address&gt; --remote</code>. Then refresh this page.</p>
 </section>`;
 const CSS = `
 :root{--bg:#0a0a0f;--raised:#12121a;--card:#16161f;--ink:#e8e8ef;--dim:#9a9aad;--faint:#5b5b70;--accent:#7df9c6;--accent2:#8b7dff;--accent3:#ffb86b;--line:#26263a;--mono:"SF Mono","Fira Code",ui-monospace,Menlo,monospace;--sans:-apple-system,BlinkMacSystemFont,"Segoe UI",Helvetica,Arial,sans-serif}

package/dist/dashboard.js.map

@@ -1 +1 @@
-{"version":3,"file":"dashboard.js","sourceRoot":"","sources":["../src/dashboard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,WAAW,EAAoB,MAAM,oBAAoB,CAAC;AAElE,mEAAmE;AACnE,SAAS,IAAI,CAAC,KAAa,EAAE,OAAe,EAAE,IAAY;IACxD,OAAO;;;;SAIA,GAAG,CAAC,KAAK,CAAC;SACV,GAAG;;;;kCAIsB,GAAG,CAAC,OAAO,CAAC;;QAEtC,IAAI;;;;eAIG,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,OAAqB,EAAE,OAAe,EAAE,OAAe;IACrF,OAAO,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,QAAQ,EAAE,OAAO,EAAE;;;UAGzD,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,cAAc,CAAC;sDACS,OAAO;;IAEzD,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;AAChD,CAAC;AAED;wFACwF;AACxF,MAAM,UAAU,WAAW,CAAC,QAAwB,EAAE,OAAe,EAAE,OAAe;IACpF,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;IACjG,MAAM,IAAI,GAAG,OAAO;SACjB,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,mBAAmB,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,cAAc,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,cAAc,CACxN;SACA,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,OAAO,IAAI,CAAC,oBAAoB,EAAE,OAAO,EAAE;;;;;;IAMzC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,gDAAgD,IAAI,iBAAiB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AAC5G,CAAC;AAED,SAAS,aAAa,CAAC,CAAe,EAAE,OAAe,EAAE,OAAe;IACtE,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACxB,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,MAAM,OAAO,IAAI,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,MAAM,SAAS,GAAG,CAAC,CAAC,WAAW;QAC7B,CAAC,CAAC,8DAA8D;QAChE,CAAC,CAAC,6DAA6D,CAAC;IAElE,OAAO;wCAC+B,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;;yBAE7B,GAAG,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,UAAU;;mBAErE,OAAO,MAAM,OAAO,IAAI,CAAC,CAAC,OAAO,IAAI,GAAG,EAAE,OAAO,IAAI,GAAG;mBACxD,OAAO,MAAM,OAAO,IAAI,CAAC,CAAC,OAAO;;;;;YAKxC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,qBAAqB,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;;gCAEnE,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,wDAAwD,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;UACzI,SAAS;;;;UAIT,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,sCAAsC,CAAC,CAAC,CAAC,gDAAgD,CAAC;UACzH,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,qCAAqC,CAAC,CAAC,CAAC,GAAG,CAAC;UAC3J,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;UAC7G,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;UAC1E,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;;;;;UAKpF,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,cAAc,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,iCAAiC;;;QAGpJ,iBAAiB,CAAC,CAAC,CAAC;;;;;sCAKU,GAAG,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,UAAU,4BAA4B,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;;;;4BAIpJ,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,iDAAiD,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;;;;;;;;;;;UAW/F,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;;;aAG/C,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAe;IACxC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CACzC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAC,CAAC,CAAC,CACxE,CAAC;IACF,MAAM,UAAU,GAAG,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAC,CAAC,CAAC,CAAC;IAC/G,MAAM,GAAG,GAAG,CAAC,GAAG,WAAW,EAAE,GAAG,UAAU,CAAC,CAAC;IAC5C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,OAAO;;MAEH,GAAG;SACF,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,iCAAiC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,8BAA8B,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,sCAAsC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAC9L;SACA,IAAI,CAAC,EAAE,CAAC;SACN,CAAC;AACV,CAAC;AAED,SAAS,QAAQ,CAAC,CAAqF,EAAE,OAAe;IACtH,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,0DAA0D,CAAC,CAAC,CAAC,4DAA4D,CAAC;IACzJ,OAAO;UACC,GAAG;sBACS,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;uBACV,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;sBACZ,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC;mBACrB,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,qBAAqB,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QACpF,CAAC;AACT,CAAC;AAED,SAAS,IAAI,CAAC,KAAa,EAAE,KAAa;IACxC,OAAO,mCAAmC,GAAG,CAAC,KAAK,CAAC,2BAA2B,KAAK,eAAe,CAAC;AACtG,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,OAAe;IAC1C,OAAO,YAAY,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,qBAAqB,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC9F,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,IAAI,KAAK,uBAAuB;QAAE,OAAO,SAAS,CAAC;IACvD,IAAI,IAAI,KAAK,kCAAkC;QAAE,OAAO,oBAAoB,CAAC;IAC7E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,OAAO,CAAC,CAAS;IACxB,OAAO,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IACjE,IAAI,IAAI,GAAG,EAAE;QAAE,OAAO,GAAG,IAAI,OAAO,CAAC;IACrC,IAAI,IAAI,GAAG,IAAI;QAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC;IACxD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC;AAC3C,CAAC;AAED,SAAS,GAAG,CAAC,CAAS;IACpB,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;AAC3H,CAAC;AAED,MAAM,WAAW,GAAG;;;;;WAKT,CAAC;AAEZ,MAAM,GAAG,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgEX,CAAC"}
+{"version":3,"file":"dashboard.js","sourceRoot":"","sources":["../src/dashboard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,WAAW,EAAoB,MAAM,oBAAoB,CAAC;AAElE,mEAAmE;AACnE,SAAS,IAAI,CAAC,KAAa,EAAE,OAAe,EAAE,IAAY;IACxD,OAAO;;;;SAIA,GAAG,CAAC,KAAK,CAAC;SACV,GAAG;;;;kCAIsB,GAAG,CAAC,OAAO,CAAC;;QAEtC,IAAI;;;;eAIG,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,OAAqB,EAAE,OAAe,EAAE,OAAe;IACrF,OAAO,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,QAAQ,EAAE,OAAO,EAAE;;;UAGzD,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,cAAc,CAAC;sDACS,OAAO;;IAEzD,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;AAChD,CAAC;AAED;wFACwF;AACxF,MAAM,UAAU,WAAW,CAAC,QAAwB,EAAE,OAAe,EAAE,OAAe;IACpF,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC;IACjG,MAAM,IAAI,GAAG,OAAO;SACjB,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,mBAAmB,OAAO,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,cAAc,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,iCAAiC,CAAC,CAAC,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,cAAc,CACxN;SACA,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,OAAO,IAAI,CAAC,oBAAoB,EAAE,OAAO,EAAE;;;;;;IAMzC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,gDAAgD,IAAI,iBAAiB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AAC5G,CAAC;AAED,SAAS,aAAa,CAAC,CAAe,EAAE,OAAe,EAAE,OAAe;IACtE,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACxB,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,MAAM,OAAO,IAAI,CAAC,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,MAAM,SAAS,GAAG,CAAC,CAAC,WAAW;QAC7B,CAAC,CAAC,8DAA8D;QAChE,CAAC,CAAC,6DAA6D,CAAC;IAElE,OAAO;wCAC+B,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;;yBAE7B,GAAG,CAAC,CAAC,CAAC,aAAa,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,CAAC,UAAU;;mBAErE,OAAO,MAAM,OAAO,IAAI,CAAC,CAAC,OAAO,IAAI,GAAG,EAAE,OAAO,IAAI,GAAG;mBACxD,OAAO,MAAM,OAAO,IAAI,CAAC,CAAC,OAAO;;;;;YAKxC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,qBAAqB,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;;gCAEnE,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,OAAO,wDAAwD,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;UACzI,SAAS;;;;UAIT,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,sCAAsC,CAAC,CAAC,CAAC,gDAAgD,CAAC;UACzH,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,qCAAqC,CAAC,CAAC,CAAC,GAAG,CAAC;UAC3J,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;UAC7G,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;UAC1E,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;;;;;UAKpF,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,cAAc,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,iCAAiC;;;QAGpJ,iBAAiB,CAAC,CAAC,CAAC;;;;;sCAKU,GAAG,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,UAAU,4BAA4B,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC;;;;4BAIpJ,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,iDAAiD,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;;;;;;;;;;;UAW/F,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;;;aAG/C,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAe;IACxC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CACzC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAC,CAAC,CAAC,CACxE,CAAC;IACF,MAAM,UAAU,GAAG,CAAC,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAC,CAAC,CAAC,CAAC;IAC/G,MAAM,GAAG,GAAG,CAAC,GAAG,WAAW,EAAE,GAAG,UAAU,CAAC,CAAC;IAC5C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,OAAO;;MAEH,GAAG;SACF,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,iCAAiC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,cAAc,CAAC,8BAA8B,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,sCAAsC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAC9L;SACA,IAAI,CAAC,EAAE,CAAC;SACN,CAAC;AACV,CAAC;AAED,SAAS,QAAQ,CAAC,CAAqF,EAAE,OAAe;IACtH,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,0DAA0D,CAAC,CAAC,CAAC,4DAA4D,CAAC;IACzJ,OAAO;UACC,GAAG;sBACS,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;uBACV,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;sBACZ,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC;mBACrB,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,qBAAqB,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QACpF,CAAC;AACT,CAAC;AAED,SAAS,IAAI,CAAC,KAAa,EAAE,KAAa;IACxC,OAAO,mCAAmC,GAAG,CAAC,KAAK,CAAC,2BAA2B,KAAK,eAAe,CAAC;AACtG,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,OAAe;IAC1C,OAAO,YAAY,WAAW,CAAC,OAAO,CAAC,YAAY,CAAC,qBAAqB,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC9F,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,IAAI,KAAK,uBAAuB;QAAE,OAAO,SAAS,CAAC;IACvD,IAAI,IAAI,KAAK,kCAAkC;QAAE,OAAO,oBAAoB,CAAC;IAC7E,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,OAAO,CAAC,CAAS;IACxB,OAAO,CAAC,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IACjE,IAAI,IAAI,GAAG,EAAE;QAAE,OAAO,GAAG,IAAI,OAAO,CAAC;IACrC,IAAI,IAAI,GAAG,IAAI;QAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC;IACxD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC;AAC3C,CAAC;AAED,SAAS,GAAG,CAAC,CAAS;IACpB,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAC,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;AAC3H,CAAC;AAED,gGAAgG;AAChG,4FAA4F;AAC5F,MAAM,WAAW,GAAG;;;;;WAKT,CAAC;AAEZ,MAAM,GAAG,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgEX,CAAC"}

package/dist/server.d.ts

@@ -62,30 +62,4 @@ export declare function verifyProject(state: ProjectState | null, storage: Stora
     }[];
     error?: undefined;
 }>;
-/**
- * `POST /admin/projects {address, fromBlock?, factory?, label?, description?, externalUrl?,
- *    attributes?, contentLocators?}` — attributes are off-chain operator traits; contentLocators
- *    bridge `{ "0x<keccak>": "ipfs://<cid>" }` so the image points at IPFS without holding bytes.
- *   → register the contract with THIS node and replay it from chain. Idempotent: a
- *     re-POST is the post-deploy "nudge" that pulls events that landed since.
- * `DELETE /admin/projects/:address` → stop indexing it (drops the projection).
- *
- * We deliberately do NOT factory-scope here: if you own this resolver and you tell it
- * a contract, it does its best to index it. (Allowlisting by factory is a platform
- * concern — see docs/10-backlog.md B6 — not a self-hosting one.)
- */
-/**
- * Decide the scan floor + whether a full replay is needed when registering a project via the
- * admin control plane. Pure (the discovery/refusal fallback for the null case is the caller's):
- *   - explicit `bodyFromBlock` wins; else the `existingFromBlock` already stored.
- *   - `null` ⇒ NEITHER supplied nor stored — the caller must derive the deploy block or refuse
- *     (never default to genesis: a range-capped RPC would sweep millions of blocks).
- *   - `full` is true only when forced, on a first registration (no existing floor), or when the
- *     floor actually CHANGED — so re-sending the SAME floor (the CLI now always forwards the deploy
- *     block, even on a nudge) stays incremental: `abx add --remote` twice ≠ two full scans.
- */
-export declare function planRegistrationFloor(bodyFromBlock: string | undefined, existingFromBlock: string | undefined, forceFull?: boolean): {
-    fromBlock: string;
-    full: boolean;
-} | null;
 //# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqC,KAAK,MAAM,EAAsB,MAAM,WAAW,CAAC;AAE/F,OAAO,EAcL,KAAK,YAAY,EAEjB,KAAK,UAAU,EAChB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAC,eAAe,EAAC,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAiB,KAAK,cAAc,EAAC,MAAM,wBAAwB,CAAC;AAqB3E,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,eAAe,CAAC;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yGAAyG;IACzG,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B;AAED;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAClC,KAAK,EAAE,YAAY,EACnB,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAAA;CAAC,CAAC,CAsB3D;AAaD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAYxF;AAED,eAAO,MAAM,YAAY,OAAO,CAAC;AAEjC,mFAAmF;AACnF,wBAAgB,cAAc,CAAC,IAAI,SAAe,GAAG,MAAM,CAE1D;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAqB3D;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,CAchE;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAC,CAAC,CAO/F;AAgbD,wBAAsB,aAAa,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,EAAE,OAAO,EAAE,cAAc;;;;;;;;;;;;;;;GAetF;AAoED;;;;;;;;;;;GAWG;AACH;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CACnC,aAAa,EAAE,MAAM,GAAG,SAAS,EACjC,iBAAiB,EAAE,MAAM,GAAG,SAAS,EACrC,SAAS,UAAQ,GAChB;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAC,GAAG,IAAI,CAK3C"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqC,KAAK,MAAM,EAAsB,MAAM,WAAW,CAAC;AAC/F,OAAO,EAaL,KAAK,YAAY,EAEjB,KAAK,UAAU,EAChB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAC,eAAe,EAAC,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAiB,KAAK,cAAc,EAAC,MAAM,wBAAwB,CAAC;AAmC3E,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,eAAe,CAAC;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yGAAyG;IACzG,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B;AAED;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAClC,KAAK,EAAE,YAAY,EACnB,KAAK,EAAE,UAAU,EACjB,OAAO,EAAE,cAAc,GACtB,OAAO,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAAA;CAAC,CAAC,CAsB3D;AAaD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI,CAYxF;AAED,eAAO,MAAM,YAAY,OAAO,CAAC;AAEjC,mFAAmF;AACnF,wBAAgB,cAAc,CAAC,IAAI,SAAe,GAAG,MAAM,CAE1D;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAqB3D;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,aAAa,GAAG,MAAM,CAwBhE;AAYD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAC,CAAC,CAO/F;AAsZD,wBAAsB,aAAa,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,EAAE,OAAO,EAAE,cAAc;;;;;;;;;;;;;;;GAetF"}

package/dist/server.js

@@ -1,6 +1,5 @@
 import { createServer } from 'node:http';
-import { timingSafeEqual } from 'node:crypto';
-import { discoverDeployBlock, fieldOf, makePublicClient, normalizeAttributes, renderArtifactKey, resolveChain, DEFAULT_CHAIN_KEY, verifyAgainstHash, METADATA_FIELD as F, METADATA_REPRESENTATION as R, } from '@artblocks/abx-sdk';
+import { fieldOf, makePublicClient, normalizeAttributes, renderArtifactKey, resolveChain, DEFAULT_CHAIN_KEY, verifyAgainstHash, METADATA_FIELD as F, METADATA_REPRESENTATION as R, } from '@artblocks/abx-sdk';
 import { resolveBackend } from '@artblocks/abx-storage';
 import { fallbackImageSvg, IMAGE_MEDIA_TYPE } from './art.js';
 import { buildContractMetadata, buildTokenMetadata, fieldMimeType } from './metadata.js';
@@ -9,7 +8,8 @@ import { depStatusReport } from './deps.js';
 import { ABX_JS } from './abxjs.js';
 import { resolveFieldBytes, resolveFieldRendered, COLLECTION_TOKEN_ID } from './resolve.js';
 import { renderDashboard, renderIndex } from './dashboard.js';
-import { notifyEffects, watchIntervalMs } from './watcher.js';
+import { watchIntervalMs } from './watcher.js';
+import { requireBearer, routeControlPlane, safeLocators, sendJson, serviceDescriptor, summarize, } from './control-plane.js';
 // A read-only client for resolving on-chain `reader`-represented content (eth_call).
 const chainClient = makePublicClient();
 // The chain this resolver serves. The path grammar carries the chainId
@@ -17,8 +17,12 @@ const chainClient = makePublicClient();
 // paths for chains it doesn't index. Today one resolver = one chain; this gates that.
 const SERVER_CHAIN_ID = resolveChain(process.env.ABX_CHAIN).id;
 // The chain *key* ('sepolia', …) the indexer registers projects under — the string
-// form of the same chain SERVER_CHAIN_ID identifies. Used by the admin control plane.
+// form of the same chain SERVER_CHAIN_ID identifies. Used by the control plane.
 const SERVER_CHAIN_KEY = process.env.ABX_CHAIN ?? DEFAULT_CHAIN_KEY; // MUST match SERVER_CHAIN_ID's default (base-sepolia) — a stale 'sepolia' desynced the key from the id
+/** The context the /v1 control plane + descriptor run against (control-plane.ts owns the routes). */
+function controlPlaneCtx(indexer, storage, baseUrl) {
+    return { indexer, storage, chainId: SERVER_CHAIN_ID, chainKey: SERVER_CHAIN_KEY, baseUrl };
+}
 /**
  * Resolve a token's image bytes by dispatching on the `image` field's single active
  * representation (token scope first, else the collection-wide field — the same fallback the
@@ -130,10 +134,32 @@ export function createTokenApiServer(opts) {
             await route(req, res, indexer, baseUrl, storage);
         }
         catch (err) {
-            sendJson(res, 500, { error: err.message });
+            // NEVER hand a raw internal error to the client. An unexpected failure here is usually an
+            // upstream RPC error, and viem's message embeds the full endpoint URL — which for a keyed
+            // endpoint IS a credential. On a multi-tenant provider that would leak the operator's RPC key
+            // to any tenant who can trigger a 500 (see specs/self-host-toolkit/remote-services.md). So:
+            // full detail to the operator's log, a generic + redacted message on the wire.
+            const detail = err.message ?? 'unknown error';
+            console.error(`[server] ${req.method} ${req.url} failed: ${detail}`);
+            sendJson(res, 500, {
+                error: `internal error serving ${req.url ?? '/'} — see the node's logs for detail${upstreamHint(detail)}`,
+                code: 'internal_error',
+            });
         }
     });
 }
+/** A safe, credential-free hint about WHAT class of thing broke, so a caller isn't left blind by the
+ *  generic 500. Recognizes the common upstream-RPC failures by status text only — never echoes the
+ *  message (which can embed a keyed endpoint URL). */
+function upstreamHint(detail) {
+    if (/\b429\b|Too Many Requests|rate limit/i.test(detail))
+        return ' (upstream RPC rate-limited this node — its operator needs a higher-capacity endpoint)';
+    if (/\b(401|403)\b|Unauthorized|Forbidden/i.test(detail))
+        return " (this node's upstream RPC rejected its credentials)";
+    if (/\b5\d\d\b|ECONNREFUSED|ETIMEDOUT|fetch failed/i.test(detail))
+        return " (this node's upstream RPC is unreachable or erroring)";
+    return '';
+}
 export function startTokenApiServer(opts) {
     const port = opts.port ?? Number(process.env.ABX_PORT ?? DEFAULT_PORT);
     const baseUrl = opts.baseUrl ?? resolveBaseUrl(port);
@@ -147,6 +173,17 @@ async function route(req, res, indexer, baseUrl, storage) {
     const url = new URL(req.url ?? '/', 'http://localhost');
     const parts = url.pathname.split('/').filter(Boolean);
     const method = req.method ?? 'GET';
+    // CORS preflight — without this, a browser client can never send Authorization to the
+    // control plane (the wildcard origin above covers simple GETs only).
+    if (method === 'OPTIONS') {
+        res.writeHead(204, {
+            'access-control-allow-methods': 'GET,POST,DELETE,OPTIONS',
+            'access-control-allow-headers': 'authorization,content-type',
+            'access-control-max-age': '86400',
+        });
+        res.end();
+        return;
+    }
     // GET / — read-only node index: which contracts this resolver serves (no actions).
     if (parts.length === 0) {
         res.writeHead(200, { 'content-type': 'text/html; charset=utf-8' });
@@ -168,6 +205,12 @@ async function route(req, res, indexer, baseUrl, storage) {
     // GET /health
     if (parts[0] === 'health')
         return sendJson(res, 200, { ok: true, baseUrl });
+    // GET /.well-known/abx-service — the service descriptor (public): what this node supports,
+    // agent-readably, so a client can match a project's needs to this service BEFORE trusting it
+    // with a registration. See specs/self-host-toolkit/remote-services.md.
+    if (parts[0] === '.well-known' && parts[1] === 'abx-service') {
+        return sendJson(res, 200, await serviceDescriptor(controlPlaneCtx(indexer, storage, baseUrl)));
+    }
     // GET /abx.js — the runtime companion (directory builds include it; the generator inlines it).
     if (parts[0] === 'abx.js') {
         res.writeHead(200, {
@@ -203,25 +246,14 @@ async function route(req, res, indexer, baseUrl, storage) {
         res.end(view.html);
         return;
     }
-    // /admin/* — the control plane. This is the ONE write surface on the resolver, and
-    // it's a *remote `abx add`*: it tells THIS node (a different projection store from
-    // any local one) which contracts to index. It never signs anything on-chain — the
-    // "no signing key on the host" rule is intact; the bearer token authorizes indexing
-    // control only. Disabled unless ABX_RESOLVER_ADMIN_TOKEN is set on the resolver.
-    if (parts[0] === 'admin' && parts[1] === 'projects') {
-        return adminProjects(req, res, indexer, parts[2]);
-    }
-    // POST /admin/effect-artifacts — a conforming effect runner publishes a render output (a durable
-    // locator, or raw bytes for small must-inline outputs like traits) so a resolver that does NOT share
-    // the runner's storage disk can still serve it. Same bearer as the control plane; never signs on-chain.
-    if (parts[0] === 'admin' && parts[1] === 'effect-artifacts') {
-        return adminRenderArtifacts(req, res, indexer, storage);
-    }
-    // POST /admin/effect-status — a runner reports a run's transient state ('rendering' /
-    // 'failed{error}' / 'done'). Pure observability: correctness stays artifact-presence at the
-    // settled inputsHash; these rows are rebuildable and 'done' simply clears one. Admin-gated.
-    if (parts[0] === 'admin' && parts[1] === 'effect-status') {
-        return adminEffectStatus(req, res, indexer);
+    // /v1/* — the control plane (register/list/deregister/reindex/status + the effect-publish
+    // lane). This is the ONE write surface on the resolver, and it's a *remote `abx add`*: it
+    // tells THIS node (a different projection store from any local one) which contracts to index.
+    // It never signs anything on-chain — the "no signing key on the host" rule is intact; the
+    // bearer token authorizes indexing control only. Disabled unless ABX_RESOLVER_ADMIN_TOKEN is
+    // set on the resolver. Routes + auth live in control-plane.ts.
+    if (parts[0] === 'v1') {
+        return routeControlPlane(req, res, controlPlaneCtx(indexer, storage, baseUrl), parts.slice(1));
     }
     // /api/*
     if (parts[0] === 'api') {
@@ -247,21 +279,12 @@ async function route(req, res, indexer, baseUrl, storage) {
         }
         if (parts[1] === 'project' && parts[2]) {
             const address = parts[2];
-            // POST|GET /api/project/:addr/reindex — full replay from chain. ADMIN-ONLY: a full replay
-            // is expensive + mutating, so it must never be a public action (it's `abx index --remote`
-            // from the CLI). Gated by the same bearer as the control plane.
-            if (parts[3] === 'reindex') {
-                if (!requireAdmin(req, res))
-                    return;
-                const { state, elapsedMs } = await indexer.reindex(address, { full: true });
-                notifyEffects(address);
-                return sendJson(res, 200, { elapsedMs, state });
-            }
             // GET /api/project/:addr/verify — re-hashes served bytes against the on-chain anchor.
-            // ADMIN-ONLY: it triggers outbound chain + gateway fetches, so it isn't a public endpoint
+            // BEARER-ONLY: it triggers outbound chain + gateway fetches, so it isn't a public endpoint
             // (anyone can still verify independently via `abx verify` — no need for this node to do it).
+            // Reindex moved to the control plane: POST /v1/projects/{chainId}/{address}/reindex.
             if (parts[3] === 'verify') {
-                if (!requireAdmin(req, res))
+                if (!requireBearer(req, res))
                     return;
                 return sendJson(res, 200, await verifyProject(indexer.getProject(address), storage));
             }
@@ -523,32 +546,6 @@ function safeTokenAttributes(json) {
         return undefined;
     }
 }
-/** Parse a stored content-locators JSON column → `{hash: locator}` (lowercased keys, never throws). */
-function safeLocators(json) {
-    try {
-        const obj = JSON.parse(json);
-        const out = {};
-        for (const [k, v] of Object.entries(obj))
-            if (typeof v === 'string')
-                out[k.toLowerCase()] = v;
-        return Object.keys(out).length ? out : undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
-/** Merge incoming content locators over the stored ones (additive — a re-add can bring new hashes
- *  without dropping known ones). Returns a JSON string for the column, or undefined if empty. */
-function mergeLocators(existingJson, incoming) {
-    const base = existingJson ? safeLocators(existingJson) ?? {} : {};
-    if (incoming && typeof incoming === 'object') {
-        for (const [k, v] of Object.entries(incoming)) {
-            if (typeof v === 'string' && v)
-                base[k.toLowerCase()] = v;
-        }
-    }
-    return Object.keys(base).length ? JSON.stringify(base) : undefined;
-}
 export async function verifyProject(state, storage) {
     if (!state)
         return { error: 'unknown project' };
@@ -564,301 +561,6 @@ export async function verifyProject(state, storage) {
     }));
     return { address: state.address, tokens };
 }
-function summarize(s) {
-    return {
-        address: s.address,
-        name: s.name,
-        symbol: s.symbol,
-        owner: s.owner,
-        abxVersion: s.abxVersion,
-        isCanonical: s.isCanonical,
-        extensions: s.extensions.map((e) => e.name),
-        eventCount: s.eventCount,
-        tokenCount: s.tokens.length,
-        mintedCount: s.tokens.filter((t) => t.minted).length,
-        reconstructedAt: s.reconstructedAt,
-    };
-}
-function sendJson(res, status, body) {
-    res.writeHead(status, { 'content-type': 'application/json; charset=utf-8' });
-    res.end(JSON.stringify(body, null, 2));
-}
-// ── admin control plane (remote `abx add`) ───────────────────────────────────--
-/** Guard an admin-only API action (reindex/verify): 404 when no admin token is configured on the
- *  host (the action surface is disabled), 401 on a missing/bad bearer. Returns false if it handled
- *  the response (caller must stop), true when the request is authorized to proceed. */
-function requireAdmin(req, res) {
-    if (!process.env.ABX_RESOLVER_ADMIN_TOKEN) {
-        sendJson(res, 404, { error: 'admin action disabled — set ABX_RESOLVER_ADMIN_TOKEN on the resolver (operate via the abx CLI)' });
-        return false;
-    }
-    if (!adminAuthorized(req)) {
-        sendJson(res, 401, { error: 'unauthorized — this action needs Authorization: Bearer <ABX_RESOLVER_ADMIN_TOKEN>' });
-        return false;
-    }
-    return true;
-}
-/** Constant-time bearer check against ABX_RESOLVER_ADMIN_TOKEN. */
-function adminAuthorized(req) {
-    const token = process.env.ABX_RESOLVER_ADMIN_TOKEN;
-    if (!token)
-        return false;
-    const header = req.headers['authorization'];
-    const raw = (Array.isArray(header) ? header[0] : header) ?? '';
-    const m = /^Bearer\s+(.+)$/i.exec(raw.trim());
-    if (!m)
-        return false;
-    const got = Buffer.from(m[1]);
-    const want = Buffer.from(token);
-    return got.length === want.length && timingSafeEqual(got, want);
-}
-/** Read + JSON-parse a request body, capped so a bad caller can't exhaust memory. */
-async function readJsonBody(req, maxBytes = 64 * 1024) {
-    const chunks = [];
-    let size = 0;
-    for await (const chunk of req) {
-        size += chunk.length;
-        if (size > maxBytes)
-            throw new Error('request body too large');
-        chunks.push(chunk);
-    }
-    if (chunks.length === 0)
-        return {};
-    return JSON.parse(Buffer.concat(chunks).toString('utf8'));
-}
-const ADDRESS_RE = /^0x[0-9a-fA-F]{40}$/;
-/**
- * `POST /admin/projects {address, fromBlock?, factory?, label?, description?, externalUrl?,
- *    attributes?, contentLocators?}` — attributes are off-chain operator traits; contentLocators
- *    bridge `{ "0x<keccak>": "ipfs://<cid>" }` so the image points at IPFS without holding bytes.
- *   → register the contract with THIS node and replay it from chain. Idempotent: a
- *     re-POST is the post-deploy "nudge" that pulls events that landed since.
- * `DELETE /admin/projects/:address` → stop indexing it (drops the projection).
- *
- * We deliberately do NOT factory-scope here: if you own this resolver and you tell it
- * a contract, it does its best to index it. (Allowlisting by factory is a platform
- * concern — see docs/10-backlog.md B6 — not a self-hosting one.)
- */
-/**
- * Decide the scan floor + whether a full replay is needed when registering a project via the
- * admin control plane. Pure (the discovery/refusal fallback for the null case is the caller's):
- *   - explicit `bodyFromBlock` wins; else the `existingFromBlock` already stored.
- *   - `null` ⇒ NEITHER supplied nor stored — the caller must derive the deploy block or refuse
- *     (never default to genesis: a range-capped RPC would sweep millions of blocks).
- *   - `full` is true only when forced, on a first registration (no existing floor), or when the
- *     floor actually CHANGED — so re-sending the SAME floor (the CLI now always forwards the deploy
- *     block, even on a nudge) stays incremental: `abx add --remote` twice ≠ two full scans.
- */
-export function planRegistrationFloor(bodyFromBlock, existingFromBlock, forceFull = false) {
-    const fromBlock = bodyFromBlock !== undefined ? String(bodyFromBlock) : existingFromBlock;
-    if (fromBlock === undefined)
-        return null;
-    const full = forceFull || existingFromBlock === undefined || fromBlock !== existingFromBlock;
-    return { fromBlock, full };
-}
-async function adminProjects(req, res, indexer, addrSeg) {
-    if (!process.env.ABX_RESOLVER_ADMIN_TOKEN) {
-        return sendJson(res, 404, {
-            error: 'admin API disabled — set ABX_RESOLVER_ADMIN_TOKEN on the resolver to enable remote add/remove',
-        });
-    }
-    if (!adminAuthorized(req)) {
-        return sendJson(res, 401, { error: 'unauthorized — send Authorization: Bearer <ABX_RESOLVER_ADMIN_TOKEN>' });
-    }
-    const method = req.method ?? 'GET';
-    if (method === 'POST' && addrSeg === undefined) {
-        let body;
-        try {
-            body = await readJsonBody(req);
-        }
-        catch (err) {
-            return sendJson(res, 400, { error: err.message });
-        }
-        const address = body.address;
-        if (!address || !ADDRESS_RE.test(address)) {
-            return sendJson(res, 400, { error: 'body.address must be a 0x-prefixed 20-byte address' });
-        }
-        // A re-POST is the post-deploy nudge: preserve the existing scan floor + metadata
-        // (don't reset fromBlock and re-scan), and re-index incrementally. A first add — or one
-        // that supplies a *new* fromBlock — replays fully from that floor. (See planRegistrationFloor.)
-        const existing = indexer.store.getRegistration(address);
-        let plan = planRegistrationFloor(body.fromBlock, existing?.fromBlock, body.full === true);
-        if (!plan) {
-            // No floor supplied and none stored. NEVER default to genesis — a range-capped RPC would
-            // grind millions of blocks (the "resolver won't index" trap). Derive the deploy block from
-            // chain; refuse if we can't (archive getCode unavailable) rather than guess a bad floor.
-            const discovered = await discoverDeployBlock(indexer.publicClient(SERVER_CHAIN_KEY), address);
-            if (discovered === null) {
-                return sendJson(res, 400, {
-                    error: 'first registration needs fromBlock (the contract deploy block) — refusing a from-genesis scan. ' +
-                        'The abx CLI derives it automatically; if calling the API directly, pass fromBlock, or point the resolver at an archive RPC that serves historical eth_getCode.',
-                });
-            }
-            plan = { fromBlock: discovered.toString(), full: true };
-        }
-        const { fromBlock, full } = plan;
-        // Attributes / locators arrive as JSON values; store them as text. Normalize attributes so a
-        // bad payload can't poison the served traits. Each preserves the existing value when omitted.
-        let attributes = existing?.attributes;
-        if (body.attributes !== undefined) {
-            attributes = body.attributes === null ? undefined : JSON.stringify(normalizeAttributes(body.attributes));
-        }
-        // Per-token off-chain traits (a Series' editable attributes): a `{ "<tokenId>": attrs }` object,
-        // each value normalized. Same preserve-on-omit / clear-on-null semantics as `attributes`.
-        let tokenAttributes = existing?.tokenAttributes;
-        if (body.tokenAttributes !== undefined) {
-            if (body.tokenAttributes === null)
-                tokenAttributes = undefined;
-            else {
-                const norm = {};
-                for (const [tokenId, v] of Object.entries(body.tokenAttributes)) {
-                    const a = normalizeAttributes(v);
-                    if (a.length)
-                        norm[tokenId] = a;
-                }
-                tokenAttributes = Object.keys(norm).length ? JSON.stringify(norm) : undefined;
-            }
-        }
-        let contentLocators = existing?.contentLocators;
-        if (body.contentLocators !== undefined) {
-            contentLocators = mergeLocators(existing?.contentLocators, body.contentLocators);
-        }
-        indexer.register({
-            address: address,
-            chainKey: SERVER_CHAIN_KEY,
-            fromBlock,
-            factory: body.factory ?? existing?.factory ?? process.env.ABX_FACTORY ?? null,
-            label: body.label ?? existing?.label,
-            description: body.description ?? existing?.description,
-            externalUrl: body.externalUrl ?? existing?.externalUrl,
-            attributes,
-            tokenAttributes,
-            contentLocators,
-        });
-        const { state, elapsedMs, mode } = await indexer.reindex(address, { full });
-        notifyEffects(address);
-        return sendJson(res, 200, { ok: true, mode, elapsedMs, project: summarize(state) });
-    }
-    if (method === 'DELETE' && addrSeg) {
-        if (!ADDRESS_RE.test(addrSeg))
-            return sendJson(res, 400, { error: 'address path segment must be a 0x address' });
-        const existed = !!indexer.store.getRegistration(addrSeg);
-        indexer.store.deregister(addrSeg);
-        return sendJson(res, existed ? 200 : 404, existed ? { ok: true, address: addrSeg } : { error: 'not registered' });
-    }
-    return sendJson(res, 405, { error: 'use POST /admin/projects or DELETE /admin/projects/<address>' });
-}
-/**
- * `POST /admin/effect-artifacts {address, tokenId, inputsHash, output?, effectKey?, locator? |
- *    bytes_base64?, contentType?}` — a conforming effect runner publishes a render output so a
- *  resolver that does NOT share the runner's storage disk can serve it. Two modes:
- *    - `locator` (ipfs://<cid> | ar://<txid> | https://…): stored as a pointer; `/image` 302-redirects.
- *    - `bytes_base64`: stored in this node's own byte custody (what traits use — they inline into JSON).
- *  The artifact key is computed from the runner-supplied `inputsHash` — NOT recomputed from current
- *  state — so a render is never re-addressed to a state it doesn't depict (a param change instead makes
- *  it unreachable, the correct self-invalidation). Admin-token gated; never signs on-chain.
- */
-async function adminRenderArtifacts(req, res, indexer, storage) {
-    if (!process.env.ABX_RESOLVER_ADMIN_TOKEN) {
-        return sendJson(res, 404, { error: 'admin API disabled — set ABX_RESOLVER_ADMIN_TOKEN on the resolver' });
-    }
-    if (!adminAuthorized(req)) {
-        return sendJson(res, 401, { error: 'unauthorized — send Authorization: Bearer <ABX_RESOLVER_ADMIN_TOKEN>' });
-    }
-    if ((req.method ?? 'GET') !== 'POST') {
-        return sendJson(res, 405, { error: 'use POST /admin/effect-artifacts' });
-    }
-    let body;
-    try {
-        body = await readJsonBody(req, 8 * 1024 * 1024); // a thumbnail pushed as bytes can exceed the 64KB default
-    }
-    catch (err) {
-        return sendJson(res, 400, { error: err.message });
-    }
-    const address = body.address;
-    if (!address || !ADDRESS_RE.test(address)) {
-        return sendJson(res, 400, { error: 'body.address must be a 0x-prefixed 20-byte address' });
-    }
-    if (body.tokenId === undefined || body.tokenId === null) {
-        return sendJson(res, 400, { error: 'body.tokenId required' });
-    }
-    const tokenId = String(body.tokenId);
-    const inputsHashHex = body.inputsHash;
-    if (!inputsHashHex || !/^0x[0-9a-fA-F]{64}$/.test(inputsHashHex)) {
-        return sendJson(res, 400, { error: 'body.inputsHash must be the 0x 32-byte hash the runner rendered (this node does NOT recompute it)' });
-    }
-    // Any declared output key (the data plane's generality) — 'image'/'traits' are just the
-    // reference render effect's two.
-    const output = typeof body.output === 'string' && body.output ? body.output : 'image';
-    const effectKey = typeof body.effectKey === 'string' && body.effectKey ? body.effectKey : 'render';
-    const contentType = body.contentType ?? (output === 'traits' ? 'application/json' : 'image/png');
-    const key = renderArtifactKey(SERVER_CHAIN_ID, address, tokenId, inputsHashHex, output, effectKey);
-    // BOTH modes register a row — the row is the `artifacts` manifest's enumeration surface;
-    // locator NULL on the bytes mode means "the bytes live in this node's custody at the key".
-    const row = { key, address, tokenId, effectKey, outputKey: output, inputsHash: inputsHashHex, contentType };
-    const locator = typeof body.locator === 'string' && body.locator ? body.locator : undefined;
-    if (locator) {
-        indexer.store.putEffectArtifact({ ...row, locator });
-        return sendJson(res, 200, { ok: true, mode: 'locator', key, output, locator });
-    }
-    const bytesB64 = typeof body.bytes_base64 === 'string' && body.bytes_base64 ? body.bytes_base64 : undefined;
-    if (bytesB64) {
-        const bytes = new Uint8Array(Buffer.from(bytesB64, 'base64'));
-        await storage.put(key, { bytes, contentType });
-        indexer.store.putEffectArtifact({ ...row, locator: null });
-        return sendJson(res, 200, { ok: true, mode: 'bytes', key, output, bytes: bytes.length });
-    }
-    return sendJson(res, 400, { error: 'provide body.locator (a durable ipfs://ar://https URL) or body.bytes_base64' });
-}
-/**
- * `POST /admin/effect-status {key, address, tokenId, effectKey, status, error?, attempts?}` — a
- * runner reports one run's transient state for the artifact `key` it is producing (the runner
- * computes the key; this node never re-derives it, mirroring /admin/effect-artifacts). `status`
- * 'done' clears the row (artifact presence takes over as truth); 'rendering'/'failed' upsert.
- */
-async function adminEffectStatus(req, res, indexer) {
-    if (!process.env.ABX_RESOLVER_ADMIN_TOKEN) {
-        return sendJson(res, 404, { error: 'admin API disabled — set ABX_RESOLVER_ADMIN_TOKEN on the resolver' });
-    }
-    if (!adminAuthorized(req)) {
-        return sendJson(res, 401, { error: 'unauthorized — send Authorization: Bearer <ABX_RESOLVER_ADMIN_TOKEN>' });
-    }
-    if ((req.method ?? 'GET') !== 'POST')
-        return sendJson(res, 405, { error: 'use POST /admin/effect-status' });
-    let body;
-    try {
-        body = await readJsonBody(req);
-    }
-    catch (err) {
-        return sendJson(res, 400, { error: err.message });
-    }
-    const key = body.key;
-    if (!key || !/^0x[0-9a-fA-F]{64}$/.test(key)) {
-        return sendJson(res, 400, { error: 'body.key must be the 0x 32-byte artifact key this run produces' });
-    }
-    const address = body.address;
-    if (!address || !ADDRESS_RE.test(address)) {
-        return sendJson(res, 400, { error: 'body.address must be a 0x-prefixed 20-byte address' });
-    }
-    const status = body.status;
-    if (status === 'done') {
-        indexer.store.clearEffectStatus(key);
-        return sendJson(res, 200, { ok: true, cleared: key });
-    }
-    if (status !== 'rendering' && status !== 'failed') {
-        return sendJson(res, 400, { error: "body.status must be 'rendering' | 'failed' | 'done'" });
-    }
-    indexer.store.putEffectStatus({
-        key,
-        address,
-        tokenId: String(body.tokenId ?? ''),
-        effectKey: typeof body.effectKey === 'string' && body.effectKey ? body.effectKey : 'render',
-        status,
-        error: typeof body.error === 'string' ? body.error.slice(0, 2000) : null,
-        attempts: typeof body.attempts === 'number' ? body.attempts : undefined,
-    });
-    return sendJson(res, 200, { ok: true, key, status });
-}
 /**
  * Per-token effect status for a project — the "did every thumbnail land?" surface behind
  * `GET /api/project/:addr/effects` and `abx verify`. Status is DERIVED, in precedence order: