Boing Observer — See what happens on-chain

Boing Observer — an explorer with integrated QA transparency. Live at boing.observer.

Boing is an independent Layer 1 where quality is enforced by the protocol. Boing Network — Quality, enforced by the protocol.

Public testnet — mainnet not live.

Product	Role
Boing Network	Core protocol and ecosystem. The quality-assured Layer 1
Boing Express	Wallet. Your gateway to Boing
Boing Observer	Explorer and transparency layer. See what happens on-chain
Boing Finance	DeFi and liquidity. The DEX for Boing Network

The Boing Quality Gate screens deployments against transparent rules before they reach the ledger. Automated checks handle clear cases. A decentralized community pool reviews edge cases. This explorer is where those rules, deployments, and outcomes stay visible and auditable.

Designed to reduce malicious, deceptive and low-quality deployments through transparent, protocol-level checks. Boing introduces protocol-level deployment checks designed to identify and restrict deployments that fail transparent quality criteria before they are accepted on-chain.

Observer reads Boing RPC through @boing-network/boing-sdk. Liquidity and EVM contract work live on Boing Finance.

People using the chain: paste a block height, block hash, or 64-character account into search. Testnet is the default. Get testnet coins at boing.network/faucet.
Developers: deployment QA status is on /qa and /tools/qa-check. Next.js 15 App Router. Browser traffic goes through same-origin POST /api/rpc (CORS-safe). Direct node calls happen only on the server.
Validators and node operators: participation and endpoint health are on /tools/node-health. NEXT_PUBLIC_TESTNET_RPC defaults to https://testnet-rpc.boing.network/. Upgrading a laptop node does not change the production explorer RPC.

flowchart LR
  You[You] --> UI[boing.observer]
  UI --> Proxy[POST /api/rpc]
  Proxy -->|5xx / 530 / 403 failover| Public[testnet-rpc.boing.network]
  Public --> Fly1[boing-testnet-1]

Loading

✨ What you can do

Surface	URL	What it is
🏠 Home	/	Chain height, latest blocks, search
🧱 Block	/block/:height or /block/hash/:hash	Header + transactions
👤 Account	/account/:address	Balance, nonce, stake (32-byte hex)
📄 Transaction	/tx/:txId	Receipt when the node has one
Quality Gate	/qa	Live Boing Quality Gate: registry, pool, and public Allow/Reject voting
Gate rules	/qa/rules	Plain-language outcomes plus every Allow / Reject / Unsure rule + PDF
QA pre-flight	/tools/qa-check	Pre-flight boing_qaCheck
💱 DEX	/dex/pools, /dex/quote	Read-only directory + CP quotes via @boing-network/boing-sdk
🖼️ Asset	/asset/:address, /asset/:address/item/:tokenId, /tokens	Metadata scan, reference NFT collections with per-item profiles, and linked token/collection companions. Details: docs/ASSET-PAGES.md
📡 RPC catalog	/tools/rpc-catalog	Live boing_getRpcMethodCatalog
❤️ Node health	/tools/node-health	Height, sync, optional boing_health
Account proof	/tools/account-proof	boing_getAccountProof + boing_verifyAccountProof, root anchored to recent block state roots
📖 About	/about	Six pillars PDF

Network selector: Testnet by default. Mainnet only appears as live when NEXT_PUBLIC_MAINNET_RPC is set to a distinct URL — never the testnet URL.

🧰 Tech stack

• Next.js 15 (App Router), React 18, TypeScript
• Tailwind CSS with Boing design tokens (Comfortaa, deep navy, electric blue accent)
• RPC — Browser: same-origin POST /api/rpc. Server routes: direct HTTP. DEX tooling uses @boing-network/boing-sdk@^0.5.38 from npm
• Cloudflare — OpenNext adapter → Workers; custom domain boing.observer

🚀 Setup

npm ci --legacy-peer-deps   # or npm install --legacy-peer-deps
cp .env.example .env.local
npm run dev

Open http://localhost:3000.

npm run lint
npm run typecheck
npm test
npm run build
npm run test:e2e   # Playwright, mocked RPC; build first

(--legacy-peer-deps is required because the Cloudflare adapter’s peer range can lag the Next 15 line we actually run.)

⚙️ Config

Variable	Description
NEXT_PUBLIC_TESTNET_RPC	Testnet RPC (default https://testnet-rpc.boing.network/)
NEXT_PUBLIC_TESTNET_RPC_FALLBACKS	Extra testnet origins (comma-separated). The proxy already failsovers to hosted Fly nodes
NEXT_PUBLIC_MAINNET_RPC	Mainnet RPC. Leave unset until a distinct mainnet endpoint is published
BOING_OPERATOR_RPC_TOKEN	Server-only; must match the validator's token (sent as X-Boing-Operator). Operator-only RPC methods are fail-closed: nodes reject them unless a token is configured. Also break-glass for blob download. Never NEXT_PUBLIC_
BOING_QA_VOTE_RPC	Validator JSON-RPC for boing_qaPoolVote (defaults to https://boing-testnet-1.fly.dev). Signed Express votes normally submit through the wallet RPC.
BOING_BLOB_DOWNLOAD_TOKENS	Optional comma-separated operator override tokens for GET /api/blob/download (also accepts the operator token). Primary UX is Phase 34 wallet proof (publisher / ACL grantee).
BOING_BLOB_DOWNLOAD_RPC	Origin for raw GET /v1/media/blob?id=… (defaults to Fly boing-testnet-1 only — boing-testnet-2 is retired; never the public gateway).
NFT_OWNER_INDEXER_URL	Origin of workers/nft-owner-indexer (no trailing slash; alias BOING_NFT_OWNER_INDEXER_URL). Enables GET /api/account/nfts?network=&id=.
NEXT_PUBLIC_BOING_LINKED_NFT_TOKEN_REGISTRY	Optional override for companions registry AccountId (public testnet default baked in)
NEXT_PUBLIC_BOING_BUILDER_ATTESTATION_REGISTRY	Optional override for builder attestation registry AccountId (public testnet 0x734077a9…1816; for future read-only Builder attested UI)

Server-side tuning (TOKEN_INDEX_CACHE_DIR, TOKEN_INDEX_CACHE_TTL_SEC, TOKEN_METADATA_GATEWAY_URLS, BOING_OBSERVER_ALLOW_DEX_DIAGNOSTICS, BOING_NATIVE_VM_DEX_FACTORY) and the Playwright live flags are documented in docs/OPERATIONS.md, which also lists every script.

No API keys for read-only RPC. Do not hardcode production RPC URLs.

Rate limiting, CSP and security headers

src/middleware.ts rate-limits /api/* per client (Workers Rate Limiting bindings declared in wrangler.toml, with an in-memory per-isolate fallback) and sends an enforcing, nonce-based Content-Security-Policy (the root layout is dynamic so every page gets a nonce; set BOING_OBSERVER_CSP=report-only to roll back). Tune with BOING_OBSERVER_RATE_LIMIT, BOING_OBSERVER_RATE_LIMIT_SCALE and BOING_OBSERVER_CSP; details and caveats in docs/OPERATIONS.md.

Network deep links and chain metadata

• Detail pages honor ?network=testnet|mainnet (URL beats the stored choice, which beats the testnet default). A request for an unconfigured mainnet falls back to testnet and shows a notice. Data effects wait for the resolved network (ready), so a deep link never queries the wrong chain first.
• Chain ids, native currency and explorer/wallet/faucet URLs come from src/data/chain-metadata.json, a vendored copy of boing.network docs/chain-metadata.json. Refresh with npm run sync:chain-metadata (reads a sibling boing.network checkout, else GitHub raw); a unit test fails if the vendored copy drifts from a sibling checkout.

RPC retries and “Method not found”

• Browser calls POST /api/rpc. Client retries once on network errors, HTTP 429, and 5xx. The proxy fails over to Fly origins on 403, 502-504, 521-526, 530 and Cloudflare challenge pages.
• The proxy only forwards an allow-list of methods (src/lib/rpc-proxy-policy.ts), rejects batches, requires params to be an array of at most 8 items, and caps request bodies at 1 MiB and responses at 6 MiB (aligned with the public RPC gateway). Incomplete or non-JSON upstream bodies are not forwarded. Other methods get JSON-RPC -32601.
• Slim block fetches: home, block, tx, and search call boing_getBlockByHeight / ByHash with include_code=false so PutBlob/deploy bytes stay { omitted, size, hash } stubs under the 6 MiB cap. Small ContractCall calldata may be restored best-effort afterward.
• PutBlob bytes are not on the JSON-RPC proxy. GET /api/blob/download streams from Fly-direct: Phase 34 wallet proof (publisher / grant) first; operator / BOING_BLOB_DOWNLOAD_TOKENS as override. ACL metadata: GET /api/blob/access → boing_getBlobAccess.
• Global security headers (nosniff, X-Frame-Options: DENY, HSTS, Permissions-Policy, baseline CSP) come from security-headers.mjs.
• There is no automatic failover on Method not found. /qa still shows canonical QA JSON and doc links when boing_getQaRegistry fails. See THREE-CODEBASE-ALIGNMENT.md §2.1.
• /dex/pools uses @boing-network/boing-sdk against RPC today. Optional Worker directory: HANDOFF_NATIVE_DEX_DIRECTORY_R2_AND_CHAIN.md.
• Public testnet backend is boing-testnet-1 only (boing-testnet-2 retired).

☁️ Hosting on Cloudflare

npx wrangler login
npm run deploy

Attach boing.observer under Workers & Pages → boing-observer → Domains & Routes.

GitHub Actions deploys on main after CI (lint, typecheck, unit tests, production build, Playwright) succeeds. Secrets: CLOUDFLARE_API_TOKEN, CLOUDFLARE_ACCOUNT_ID. Variables: NEXT_PUBLIC_TESTNET_RPC, NEXT_PUBLIC_MAINNET_RPC.

Command	Description
npm run dev	Local Next.js
npm run build / npm start	Production Next build / serve it
npm run lint / typecheck / test	ESLint / tsc --noEmit / Vitest (test:watch for watch mode)
npm run test:e2e	Playwright (run build first)
npm run preview	OpenNext in Workers runtime
npm run deploy / upload	Build and deploy / upload a version to Cloudflare
npm run sync:chain-metadata	Refresh src/data/chain-metadata.json from boing.network
npm run generate:brand-assets	Regenerate brand icons and images
npm run csp:summary -- <file>	Summarize a captured CSP report log (see docs/OPERATIONS.md)
npm run cf-typegen	Regenerate Cloudflare env types

💬 Community

Questions or feedback? Join the Boing Network Discord.

📚 Reference

• Protocol docs: Boing-Network/boing.network on main under docs/
• Alignment: THREE-CODEBASE-ALIGNMENT.md
• Linked NFT↔token companions (on-chain registry, read-only on asset/account/NFT item pages): BOING-LINKED-NFT-TOKEN.md — public testnet registry v2 0xf704485ad29f56bb6516ac822fcf9ca8fcb6c4266e22c9ed7f9c6908668655dd (salt BOING_NFT_TOKEN_LINK_REG_V2, selectors 0xE0-0xE8; explorer reads links_count / get_link_at; v1 0xebf9f019...3dd8 is superseded)
• Builder attestation (on-chain builder signal; companions remain project authority): BOING-BUILDER-ATTESTATION.md — public testnet registry 0x734077a9f926077d39e84ec278b77b7b600c840f7101809646d8797a6a9e1816 (salt BOING_BUILDER_ATTEST_REG_V1, selectors 0xE0–0xE6; read via attestations_count / get_attestation_at). Explorer UI for Builder attested is not shipped yet — document the AccountId here for implementers.
• Local handoff (current state, known gaps): HANDOFF.md
• Operations (env, scripts, CI, indexing): docs/OPERATIONS.md; contract interface resolution: docs/CONTRACT-FUNCTIONS.md

---

Boing Network — Quality, enforced by the protocol.

Public testnet — mainnet not live.