Boing Observer — See what happens on-chain
Boing Observer — an explorer with integrated QA transparency. Live at boing.observer.
Boing is an independent Layer 1 where quality is enforced by the protocol. Boing Network — Quality, enforced by the protocol.
Public testnet — mainnet not live.
| Product | Role |
|---|
| Boing Network | Core protocol and ecosystem. The quality-assured Layer 1 |
| Boing Express | Wallet. Your gateway to Boing |
| Boing Observer | Explorer and transparency layer. See what happens on-chain |
| Boing Finance | DeFi and liquidity. The DEX for Boing Network |
The Boing Quality Gate screens deployments against transparent rules before they reach the ledger. Automated checks handle clear cases. A decentralized community pool reviews edge cases. This explorer is where those rules, deployments, and outcomes stay visible and auditable.
Designed to reduce malicious, deceptive and low-quality deployments through transparent, protocol-level checks. Boing introduces protocol-level deployment checks designed to identify and restrict deployments that fail transparent quality criteria before they are accepted on-chain.
Observer reads Boing RPC through @boing-network/boing-sdk. Liquidity and EVM contract work live on Boing Finance.
People using the chain: paste a block height, block hash, or 64-character account into search. Testnet is the default. Get testnet coins at boing.network/faucet.
Developers: deployment QA status is on /qa and /tools/qa-check. Next.js 15 App Router. Browser traffic goes through same-origin POST /api/rpc (CORS-safe). Direct node calls happen only on the server.
Validators and node operators: participation and endpoint health are on /tools/node-health. NEXT_PUBLIC_TESTNET_RPC defaults to https://testnet-rpc.boing.network/. Upgrading a laptop node does not change the production explorer RPC.
flowchart LR
You[You] --> UI[boing.observer]
UI --> Proxy[POST /api/rpc]
Proxy -->|5xx / 530 / 403 failover| Public[testnet-rpc.boing.network]
Public --> Fly1[boing-testnet-1]
✨ What you can do
| Surface | URL | What it is |
|---|
| 🏠 Home | / | Chain height, latest blocks, search |
| 🧱 Block | /block/:height or /block/hash/:hash | Header + transactions |
| 👤 Account | /account/:address | Balance, nonce, stake (32-byte hex) |
| 📄 Transaction | /tx/:txId | Receipt when the node has one |
| Quality Gate | /qa | Live Boing Quality Gate: registry, pool, and public Allow/Reject voting |
| Gate rules | /qa/rules | Plain-language outcomes plus every Allow / Reject / Unsure rule + PDF |
| QA pre-flight | /tools/qa-check | Pre-flight boing_qaCheck |
| 💱 DEX | /dex/pools, /dex/quote | Read-only directory + CP quotes via @boing-network/boing-sdk |
| 🖼️ Asset | /asset/:address, /asset/:address/item/:tokenId, /tokens | Metadata scan, reference NFT collections with per-item profiles, and linked token/collection companions. Details: docs/ASSET-PAGES.md |
| 📡 RPC catalog | /tools/rpc-catalog | Live boing_getRpcMethodCatalog |
| ❤️ Node health | /tools/node-health | Height, sync, optional boing_health |
| Account proof | /tools/account-proof | boing_getAccountProof + boing_verifyAccountProof, root anchored to recent block state roots |
| 📖 About | |
Network selector: Testnet by default. Mainnet only appears as live when NEXT_PUBLIC_MAINNET_RPC is set to a distinct URL — never the testnet URL.
🧰 Tech stack
- Next.js 15 (App Router), React 18, TypeScript
- Tailwind CSS with Boing design tokens (Comfortaa, deep navy, electric blue accent)
- RPC — Browser: same-origin
POST /api/rpc. Server routes: direct HTTP. DEX tooling uses @boing-network/boing-sdk@^0.5.38 from npm
- Cloudflare — OpenNext adapter → Workers; custom domain boing.observer
🚀 Setup
npm ci --legacy-peer-deps # or npm install --legacy-peer-deps
cp .env.example .env.local
npm run dev
Open http://localhost:3000.
npm run lint
npm run typecheck
npm test
npm run build
npm run test:e2e # Playwright, mocked RPC; build first
(--legacy-peer-deps is required because the Cloudflare adapter’s peer range can lag the Next 15 line we actually run.)
⚙️ Config
| Variable | Description |
|---|
NEXT_PUBLIC_TESTNET_RPC | Testnet RPC (default https://testnet-rpc.boing.network/) |
NEXT_PUBLIC_TESTNET_RPC_FALLBACKS | Extra testnet origins (comma-separated). The proxy already failsovers to hosted Fly nodes |
NEXT_PUBLIC_MAINNET_RPC | Mainnet RPC. Leave unset until a distinct mainnet endpoint is published |
BOING_OPERATOR_RPC_TOKEN | Server-only; must match the validator's token (sent as X-Boing-Operator). Operator-only RPC methods are fail-closed: nodes reject them unless a token is configured. Also break-glass for blob download. Never NEXT_PUBLIC_ |
BOING_QA_VOTE_RPC | Validator JSON-RPC for boing_qaPoolVote (defaults to https://boing-testnet-1.fly.dev). Signed Express votes normally submit through the wallet RPC. |
BOING_BLOB_DOWNLOAD_TOKENS | Optional comma-separated operator override tokens for GET /api/blob/download (also accepts the operator token). Primary UX is Phase 34 wallet proof (publisher / ACL grantee). |
BOING_BLOB_DOWNLOAD_RPC | Origin for raw GET /v1/media/blob?id=… (defaults to Fly boing-testnet-1 only — boing-testnet-2 is retired; never the public gateway). |
NFT_OWNER_INDEXER_URL | Origin of workers/nft-owner-indexer (no trailing slash; alias BOING_NFT_OWNER_INDEXER_URL). Enables GET /api/account/nfts?network=&id=. |
NEXT_PUBLIC_BOING_LINKED_NFT_TOKEN_REGISTRY | Optional override for companions registry AccountId (public testnet default baked in) |
NEXT_PUBLIC_BOING_BUILDER_ATTESTATION_REGISTRY | Optional override for builder attestation registry AccountId (public testnet 0x734077a9…1816; for future read-only Builder attested UI) |
Server-side tuning (TOKEN_INDEX_CACHE_DIR, TOKEN_INDEX_CACHE_TTL_SEC, TOKEN_METADATA_GATEWAY_URLS, BOING_OBSERVER_ALLOW_DEX_DIAGNOSTICS, BOING_NATIVE_VM_DEX_FACTORY) and the Playwright live flags are documented in docs/OPERATIONS.md, which also lists every script.
No API keys for read-only RPC. Do not hardcode production RPC URLs.
Rate limiting, CSP and security headers
src/middleware.ts rate-limits /api/* per client (Workers Rate Limiting bindings declared in wrangler.toml, with an in-memory per-isolate fallback)
and sends an enforcing, nonce-based Content-Security-Policy (the root layout is dynamic so every page gets a nonce; set BOING_OBSERVER_CSP=report-only to roll back). Tune with BOING_OBSERVER_RATE_LIMIT, BOING_OBSERVER_RATE_LIMIT_SCALE and
BOING_OBSERVER_CSP; details and caveats in docs/OPERATIONS.md.
Network deep links and chain metadata
- Detail pages honor
?network=testnet|mainnet (URL beats the stored choice, which beats the testnet default). A request for
an unconfigured mainnet falls back to testnet and shows a notice. Data effects wait for the resolved network (ready), so a
deep link never queries the wrong chain first.
- Chain ids, native currency and explorer/wallet/faucet URLs come from
src/data/chain-metadata.json, a vendored copy of
boing.network docs/chain-metadata.json. Refresh with npm run sync:chain-metadata (reads a sibling boing.network checkout,
else GitHub raw); a unit test fails if the vendored copy drifts from a sibling checkout.
RPC retries and “Method not found”
- Browser calls
POST /api/rpc. Client retries once on network errors, HTTP 429, and 5xx. The proxy fails over to Fly origins on 403, 502-504, 521-526, 530 and Cloudflare challenge pages.
- The proxy only forwards an allow-list of methods (
src/lib/rpc-proxy-policy.ts), rejects batches, requires params to be an array of at most 8 items, and caps request bodies at 1 MiB and responses at 6 MiB (aligned with the public RPC gateway). Incomplete or non-JSON upstream bodies are not forwarded. Other methods get JSON-RPC -32601.
- Slim block fetches: home, block, tx, and search call
boing_getBlockByHeight / ByHash with include_code=false so PutBlob/deploy bytes stay { omitted, size, hash } stubs under the 6 MiB cap. Small ContractCall calldata may be restored best-effort afterward.
- PutBlob bytes are not on the JSON-RPC proxy.
GET /api/blob/download streams from Fly-direct: Phase 34 wallet proof (publisher / grant) first; operator / BOING_BLOB_DOWNLOAD_TOKENS as override. ACL metadata: GET /api/blob/access → boing_getBlobAccess.
- Global security headers (nosniff,
X-Frame-Options: DENY, HSTS, Permissions-Policy, baseline CSP) come from security-headers.mjs.
- There is no automatic failover on
Method not found. /qa still shows canonical QA JSON and doc links when boing_getQaRegistry fails. See THREE-CODEBASE-ALIGNMENT.md §2.1.
/dex/pools uses @boing-network/boing-sdk against RPC today. Optional Worker directory: HANDOFF_NATIVE_DEX_DIRECTORY_R2_AND_CHAIN.md.- Public testnet backend is
boing-testnet-1 only (boing-testnet-2 retired).
☁️ Hosting on Cloudflare
npx wrangler login
npm run deploy
Attach boing.observer under Workers & Pages → boing-observer → Domains & Routes.
GitHub Actions deploys on main after CI (lint, typecheck, unit tests, production build, Playwright) succeeds. Secrets: CLOUDFLARE_API_TOKEN, CLOUDFLARE_ACCOUNT_ID. Variables: NEXT_PUBLIC_TESTNET_RPC, NEXT_PUBLIC_MAINNET_RPC.
| Command | Description |
|---|
npm run dev | Local Next.js |
npm run build / npm start | Production Next build / serve it |
npm run lint / typecheck / test | ESLint / tsc --noEmit / Vitest (test:watch for watch mode) |
npm run test:e2e | Playwright (run build first) |
npm run preview | OpenNext in Workers runtime |
npm run deploy / upload | Build and deploy / upload a version to Cloudflare |
npm run sync:chain-metadata | Refresh src/data/chain-metadata.json from boing.network |
npm run generate:brand-assets | Regenerate brand icons and images |
npm run csp:summary -- <file> | Summarize a captured CSP report log (see docs/OPERATIONS.md) |
npm run cf-typegen | Regenerate Cloudflare env types |
💬 Community
Questions or feedback? Join the Boing Network Discord.
📚 Reference
- Protocol docs:
Boing-Network/boing.network on main under docs/
- Alignment: THREE-CODEBASE-ALIGNMENT.md
- Linked NFT↔token companions (on-chain registry, read-only on asset/account/NFT item pages): BOING-LINKED-NFT-TOKEN.md — public testnet registry v2
0xf704485ad29f56bb6516ac822fcf9ca8fcb6c4266e22c9ed7f9c6908668655dd (salt BOING_NFT_TOKEN_LINK_REG_V2, selectors 0xE0-0xE8; explorer reads links_count / get_link_at; v1 0xebf9f019...3dd8 is superseded)
- Builder attestation (on-chain builder signal; companions remain project authority): BOING-BUILDER-ATTESTATION.md — public testnet registry
0x734077a9f926077d39e84ec278b77b7b600c840f7101809646d8797a6a9e1816 (salt BOING_BUILDER_ATTEST_REG_V1, selectors 0xE0–0xE6; read via attestations_count / get_attestation_at). Explorer UI for Builder attested is not shipped yet — document the AccountId here for implementers.
- Local handoff (current state, known gaps): HANDOFF.md
- Operations (env, scripts, CI, indexing): docs/OPERATIONS.md; contract interface resolution: docs/CONTRACT-FUNCTIONS.md
Boing Network — Quality, enforced by the protocol.
Public testnet — mainnet not live.
