The protocol explorer for the Stellar network.

Cross-origin session auth (F-03) — the in-site `/account` section now authenticates on the apex. The session cookie is issued SameSite=None when Secure (prod), so the explorer at stellarindex.io can send it on credentialed requests to the API at api.stellarindex.io; useMe + the account API client send credentials: include. Requires allow_credentials = true + cookie_domain = ".stellarindex.io" in the API config (set on r1). Replaces the prior "explorer always renders signed-out" limitation.

Full web redesign — a unified light-mode design system across all three surfaces (explorer, status, dashboard). Modern, minimal, tech-forward: Inter + JetBrains Mono (now actually loaded via next/font — they were referenced but silently falling back to system-ui), a semantic token system (brand / surface / line / ink / up / down / warn / bad / ok), hairline borders over heavy shadows, generous whitespace, and one confident blue accent. Dark mode removed (light only for now). New shared component library (web/explorer/src/components/ui) + style guide (docs/architecture/design-system.md + /dev/styleguide). The status page is unified with the site UX, and the customer dashboard was fleshed out into a real product surface (sidebar shell + Overview/Keys/Usage/Settings on live API data). Fixed latent bugs found en route: -DEFAULT-suffixed colour classes (generated no CSS) and off-palette chart colours.

SEP-41 supply: mint + clawback silently dropped post-P23 (data loss). sep41_supply.decodeCounterparty read the counterparty from a FIXED topic index (mint/clawback → topic[2]) matching the legacy admin-prefixed SAC shape. CAP-67 / Whisk (mainnet 2025-09-03) replaced that with ["mint", to, sep0011_asset] — counterparty at topic[1], a String at topic[2] — so AsAddressStrkey errored on the String and the whole row was dropped. r1-lake-verified: 99.96% of recent mints + 100% of clawbacks are the CAP-67 shape, all lost; total_supply under-counted for every watched SEP-41 token. Now shape-aware (topic[2] is an Address ⇒ legacy/topic[2], else CAP-67/bare-spec/topic[1]); burn was already correct. The old back-compat test passed on a fabricated shape mainnet never emits; replaced with a lake-faithful shape matrix. Historical recovery (re-derive from the lake) is a deferred operator job. (audit-2026-06-14)