@parity/product-deploy 0.10.0-rc.0 → 0.10.0-rc.2

package/dist/deploy.js

@@ -32,7 +32,9 @@ import {
   friendlyChainError,
   hasIPFS,
   interpretBitswapResult,
+  isBenignTeardownError,
   isConnectionError,
+  isPhoneSignerActive,
   makeBulletinStatusHandler,
   merkleize,
   probeP2pRetrieval,
@@ -45,24 +47,25 @@ import {
   storeDirectoryV2,
   storeFile,
   unpublish
-} from "./chunk-DY7RVMM5.js";
-import "./chunk-GJTVPP7E.js";
+} from "./chunk-C74YSAWC.js";
+import "./chunk-UJJQME5K.js";
 import "./chunk-GRPLHUYC.js";
 import "./chunk-HOTQDYHD.js";
 import "./chunk-IW3X2MJF.js";
 import "./chunk-KOSF5FDO.js";
 import "./chunk-J3NIXHZZ.js";
 import "./chunk-S7EM5VMW.js";
-import "./chunk-PKQOUCPD.js";
-import "./chunk-G676QAN4.js";
-import "./chunk-MI5B3UCM.js";
-import "./chunk-HUT626G6.js";
+import "./chunk-SXWFDMFT.js";
+import "./chunk-V5VD5CIC.js";
+import "./chunk-EHQPRWGC.js";
+import "./chunk-LYWIW6WU.js";
 import "./chunk-C2TS5MER.js";
-import "./chunk-VR3LF62E.js";
+import "./chunk-I7UEBFP5.js";
+import "./chunk-SI2ZUOYD.js";
 import "./chunk-4PVJ2JBZ.js";
-import "./chunk-2BTYPNYW.js";
-import "./chunk-ZJCTG7HF.js";
-import "./chunk-GL3U7K2B.js";
+import "./chunk-4D6STP5G.js";
+import "./chunk-WM5R4O33.js";
+import "./chunk-QRKI6MMK.js";
 import {
   EXIT_CODE_NO_RETRY,
   NonRetryableError
@@ -103,7 +106,9 @@ export {
   friendlyChainError,
   hasIPFS,
   interpretBitswapResult,
+  isBenignTeardownError,
   isConnectionError,
+  isPhoneSignerActive,
   makeBulletinStatusHandler,
   merkleize,
   probeP2pRetrieval,

package/dist/dotns.d.ts

@@ -84,7 +84,7 @@ interface DotnsPreflightResult {
     isTestnet: boolean;
     canProceed: boolean;
     reason?: string;
-    plannedAction: "register" | "already-owned-by-us" | "abort";
+    plannedAction: "register" | "already-owned-by-us" | "already-owned-by-recipient" | "abort";
     needsPopUpgrade: boolean;
     targetPopStatus?: number;
     /** Free PAS balance of the DotNS signer at preflight time, in plancks (10 decimals). */
@@ -304,6 +304,7 @@ declare class ReviveClientWrapper {
             expectedNonce: number;
         };
         verifyEffect?: () => Promise<boolean>;
+        feeAsset?: "pgas";
     }): Promise<TxResolution>;
     signAndSubmitWithRetry(buildExtrinsic: () => any, signer: PolkadotSigner, statusCallback: (status: string) => void, label: string, opts?: {
         nonceFallback?: {
@@ -312,15 +313,17 @@ declare class ReviveClientWrapper {
             expectedNonce: number;
         };
         verifyEffect?: () => Promise<boolean>;
+        feeAsset?: "pgas";
     }): Promise<TxResolution>;
     private dryRunReviveCall;
-    submitTransaction(contractAddress: string, value: bigint, encodedData: string, signerSubstrateAddress: string, signer: PolkadotSigner, statusCallback: (status: string) => void, { rpcs, useNoncePolling, functionName, args, contracts, verifyEffect }: {
+    submitTransaction(contractAddress: string, value: bigint, encodedData: string, signerSubstrateAddress: string, signer: PolkadotSigner, statusCallback: (status: string) => void, { rpcs, useNoncePolling, functionName, args, contracts, verifyEffect, feeAsset }: {
         rpcs: string[];
         useNoncePolling?: boolean;
         functionName?: string;
         args?: unknown[];
         contracts?: Record<string, string>;
         verifyEffect?: () => Promise<boolean>;
+        feeAsset?: "pgas";
     }): Promise<TxResolution>;
     submitBatchedTransactions(calls: {
         contractAddress: string;
@@ -465,9 +468,10 @@ declare class DotNS {
      * for read paths that must always return a value.
      */
     contractCallNullable(contractAddress: string, contractAbi: readonly any[], functionName: string, args?: any[]): Promise<any | null>;
-    contractTransaction(contractAddress: string, value: bigint, contractAbi: readonly any[], functionName: string, args?: any[], statusCallback?: (status: string) => void, { useNoncePolling, verifyEffect }?: {
+    contractTransaction(contractAddress: string, value: bigint, contractAbi: readonly any[], functionName: string, args?: any[], statusCallback?: (status: string) => void, { useNoncePolling, verifyEffect, feeAsset }?: {
         useNoncePolling?: boolean;
         verifyEffect?: () => Promise<boolean>;
+        feeAsset?: "pgas";
     }): Promise<TxResolution>;
     checkOwnership(label: string, ownerAddress?: string | null): Promise<OwnershipResult>;
     /** Live transfer-fee quote. transferFloor is a pure PopRules view — it
@@ -504,7 +508,9 @@ declare class DotNS {
      * registry/resolver writes are similarly sized.
      */
     private submitBatchedContractCalls;
-    setContenthash(domainName: string, contenthashHex: string): Promise<{
+    setContenthash(domainName: string, contenthashHex: string, opts?: {
+        feeAsset?: "pgas";
+    }): Promise<{
         node: string;
     }>;
     /**

package/dist/dotns.js

@@ -54,11 +54,12 @@ import {
   validateDomainLabel,
   verifyNonceAdvanced,
   weiToNative
-} from "./chunk-VR3LF62E.js";
+} from "./chunk-I7UEBFP5.js";
+import "./chunk-SI2ZUOYD.js";
 import "./chunk-4PVJ2JBZ.js";
-import "./chunk-2BTYPNYW.js";
-import "./chunk-ZJCTG7HF.js";
-import "./chunk-GL3U7K2B.js";
+import "./chunk-4D6STP5G.js";
+import "./chunk-WM5R4O33.js";
+import "./chunk-QRKI6MMK.js";
 import "./chunk-ZOC4GITL.js";
 export {
   ATTR_TX_RESOLUTION_KIND,

package/dist/environments.js

@@ -9,7 +9,7 @@ import {
   loadEnvironments,
   resolveEndpoints,
   validateContractAddresses
-} from "./chunk-GL3U7K2B.js";
+} from "./chunk-QRKI6MMK.js";
 import "./chunk-ZOC4GITL.js";
 export {
   DEFAULT_ENV_ID,

package/dist/index.js

@@ -4,7 +4,7 @@ import {
 } from "./chunk-MMAZFJDG.js";
 import {
   publishManifest
-} from "./chunk-Q3RIJ7PU.js";
+} from "./chunk-XX6LNB74.js";
 import {
   validateExecutableManifest,
   validateProductConfig,
@@ -24,8 +24,8 @@ import {
   deploy,
   merkleizeJS,
   merkleizeWithStableOrder
-} from "./chunk-DY7RVMM5.js";
-import "./chunk-GJTVPP7E.js";
+} from "./chunk-C74YSAWC.js";
+import "./chunk-UJJQME5K.js";
 import "./chunk-GRPLHUYC.js";
 import "./chunk-HOTQDYHD.js";
 import {
@@ -49,19 +49,20 @@ import {
   isVolatilePath,
   parseManifest
 } from "./chunk-S7EM5VMW.js";
-import "./chunk-PKQOUCPD.js";
-import "./chunk-G676QAN4.js";
-import "./chunk-MI5B3UCM.js";
+import "./chunk-SXWFDMFT.js";
+import "./chunk-V5VD5CIC.js";
+import "./chunk-EHQPRWGC.js";
 import {
   probeChunks
-} from "./chunk-HUT626G6.js";
+} from "./chunk-LYWIW6WU.js";
 import "./chunk-C2TS5MER.js";
 import {
   DEFAULT_MNEMONIC,
   DotNS,
   parseDomainName,
   sanitizeDomainLabel
-} from "./chunk-VR3LF62E.js";
+} from "./chunk-I7UEBFP5.js";
+import "./chunk-SI2ZUOYD.js";
 import {
   bootstrapPool,
   derivePoolAccounts,
@@ -69,7 +70,7 @@ import {
   fetchPoolAuthorizations,
   selectAccount
 } from "./chunk-4PVJ2JBZ.js";
-import "./chunk-2BTYPNYW.js";
+import "./chunk-4D6STP5G.js";
 import {
   VERSION,
   loadRunState,
@@ -79,7 +80,7 @@ import {
   shouldSkipStaleWarning,
   stateFilePath,
   writeRunState
-} from "./chunk-ZJCTG7HF.js";
+} from "./chunk-WM5R4O33.js";
 import {
   DEFAULT_ENV_ID,
   deepMergeEnvironments,
@@ -90,7 +91,7 @@ import {
   loadEnvironments,
   resolveEndpoints,
   validateContractAddresses
-} from "./chunk-GL3U7K2B.js";
+} from "./chunk-QRKI6MMK.js";
 import "./chunk-ZOC4GITL.js";
 export {
   DEFAULT_ENV_ID,

package/dist/manifest/publish.js

@@ -1,25 +1,26 @@
 import {
   publishManifest
-} from "../chunk-Q3RIJ7PU.js";
+} from "../chunk-XX6LNB74.js";
 import "../chunk-RI3ZLNPN.js";
-import "../chunk-DY7RVMM5.js";
-import "../chunk-GJTVPP7E.js";
+import "../chunk-C74YSAWC.js";
+import "../chunk-UJJQME5K.js";
 import "../chunk-GRPLHUYC.js";
 import "../chunk-HOTQDYHD.js";
 import "../chunk-IW3X2MJF.js";
 import "../chunk-KOSF5FDO.js";
 import "../chunk-J3NIXHZZ.js";
 import "../chunk-S7EM5VMW.js";
-import "../chunk-PKQOUCPD.js";
-import "../chunk-G676QAN4.js";
-import "../chunk-MI5B3UCM.js";
-import "../chunk-HUT626G6.js";
+import "../chunk-SXWFDMFT.js";
+import "../chunk-V5VD5CIC.js";
+import "../chunk-EHQPRWGC.js";
+import "../chunk-LYWIW6WU.js";
 import "../chunk-C2TS5MER.js";
-import "../chunk-VR3LF62E.js";
+import "../chunk-I7UEBFP5.js";
+import "../chunk-SI2ZUOYD.js";
 import "../chunk-4PVJ2JBZ.js";
-import "../chunk-2BTYPNYW.js";
-import "../chunk-ZJCTG7HF.js";
-import "../chunk-GL3U7K2B.js";
+import "../chunk-4D6STP5G.js";
+import "../chunk-WM5R4O33.js";
+import "../chunk-QRKI6MMK.js";
 import "../chunk-ZOC4GITL.js";
 export {
   publishManifest

package/dist/memory-report.js

@@ -5,8 +5,8 @@ import {
   maybeWriteMemoryReport,
   safeHeap,
   sampleFromBytes
-} from "./chunk-2BTYPNYW.js";
-import "./chunk-ZJCTG7HF.js";
+} from "./chunk-4D6STP5G.js";
+import "./chunk-WM5R4O33.js";
 export {
   DEFAULT_THRESHOLD_MB,
   buildMemoryReport,

package/dist/merkle.js

@@ -6,24 +6,25 @@ import {
   merkleizeKuboBackend,
   merkleizeWithStableOrder,
   rebuildOrderedCarFromBytes
-} from "./chunk-DY7RVMM5.js";
-import "./chunk-GJTVPP7E.js";
+} from "./chunk-C74YSAWC.js";
+import "./chunk-UJJQME5K.js";
 import "./chunk-GRPLHUYC.js";
 import "./chunk-HOTQDYHD.js";
 import "./chunk-IW3X2MJF.js";
 import "./chunk-KOSF5FDO.js";
 import "./chunk-J3NIXHZZ.js";
 import "./chunk-S7EM5VMW.js";
-import "./chunk-PKQOUCPD.js";
-import "./chunk-G676QAN4.js";
-import "./chunk-MI5B3UCM.js";
-import "./chunk-HUT626G6.js";
+import "./chunk-SXWFDMFT.js";
+import "./chunk-V5VD5CIC.js";
+import "./chunk-EHQPRWGC.js";
+import "./chunk-LYWIW6WU.js";
 import "./chunk-C2TS5MER.js";
-import "./chunk-VR3LF62E.js";
+import "./chunk-I7UEBFP5.js";
+import "./chunk-SI2ZUOYD.js";
 import "./chunk-4PVJ2JBZ.js";
-import "./chunk-2BTYPNYW.js";
-import "./chunk-ZJCTG7HF.js";
-import "./chunk-GL3U7K2B.js";
+import "./chunk-4D6STP5G.js";
+import "./chunk-WM5R4O33.js";
+import "./chunk-QRKI6MMK.js";
 import "./chunk-ZOC4GITL.js";
 export {
   buildOrderedCar,

package/dist/personhood/bootstrap.js

@@ -19,20 +19,20 @@ import {
 import {
   runChainPrereqProbes
 } from "../chunk-XAB7WM3S.js";
+import {
+  WS_HEARTBEAT_TIMEOUT_MS
+} from "../chunk-I7UEBFP5.js";
 import {
   DOTNS_CONTEXT_BYTES,
   PEOPLE_MEMBER_IDENTIFIER_HEX,
   PGAS_ASSET_ID
 } from "../chunk-SI2ZUOYD.js";
-import {
-  WS_HEARTBEAT_TIMEOUT_MS
-} from "../chunk-VR3LF62E.js";
 import "../chunk-4PVJ2JBZ.js";
-import "../chunk-2BTYPNYW.js";
-import "../chunk-ZJCTG7HF.js";
+import "../chunk-4D6STP5G.js";
+import "../chunk-WM5R4O33.js";
 import {
   loadEnvironments
-} from "../chunk-GL3U7K2B.js";
+} from "../chunk-QRKI6MMK.js";
 import "../chunk-ZOC4GITL.js";
 
 // src/personhood/bootstrap.ts

package/dist/personhood/people-client.js

@@ -1,12 +1,13 @@
 import {
   WS_HEARTBEAT_TIMEOUT_MS
-} from "../chunk-VR3LF62E.js";
+} from "../chunk-I7UEBFP5.js";
+import "../chunk-SI2ZUOYD.js";
 import "../chunk-4PVJ2JBZ.js";
-import "../chunk-2BTYPNYW.js";
-import "../chunk-ZJCTG7HF.js";
+import "../chunk-4D6STP5G.js";
+import "../chunk-WM5R4O33.js";
 import {
   loadEnvironments
-} from "../chunk-GL3U7K2B.js";
+} from "../chunk-QRKI6MMK.js";
 import "../chunk-ZOC4GITL.js";
 
 // src/personhood/people-client.ts

package/dist/run-state.js

@@ -7,7 +7,7 @@ import {
   shouldSkipStaleWarning,
   stateFilePath,
   writeRunState
-} from "./chunk-ZJCTG7HF.js";
+} from "./chunk-WM5R4O33.js";
 export {
   VERSION,
   loadRunState,

package/dist/{signer-vR6KKC7V.d.ts → signer-Duup0hgQ.d.ts}

@@ -1,6 +1,6 @@
 import { DevAccountName } from '@parity/product-sdk-tx';
 import { PolkadotSigner } from 'polkadot-api';
-import { h as SessionHandle, S as SessionAddresses, c as AuthClient } from './auth-C-Pel0AT.js';
+import { e as SessionHandle, S as SessionAddresses, A as AuthClient } from './auth-CA_YKtM2.js';
 
 type SignerSource = "dev" | "session";
 interface ResolvedSigner {

package/dist/sss-allowance-cache.js

@@ -4,12 +4,12 @@ import {
   preflightSssAllowance,
   sssPeriodEndSec,
   writeSssAllowanceCache
-} from "./chunk-GJTVPP7E.js";
+} from "./chunk-UJJQME5K.js";
 import "./chunk-GRPLHUYC.js";
-import "./chunk-PKQOUCPD.js";
-import "./chunk-2BTYPNYW.js";
-import "./chunk-ZJCTG7HF.js";
-import "./chunk-GL3U7K2B.js";
+import "./chunk-SXWFDMFT.js";
+import "./chunk-4D6STP5G.js";
+import "./chunk-WM5R4O33.js";
+import "./chunk-QRKI6MMK.js";
 import "./chunk-ZOC4GITL.js";
 export {
   clearSssAllowanceCache,

package/dist/storage-signer.js

@@ -7,24 +7,25 @@ import {
   readBulletinSlotSigner,
   waitForBulletinAuthorization,
   writeBulletinSlotKey
-} from "./chunk-DY7RVMM5.js";
-import "./chunk-GJTVPP7E.js";
+} from "./chunk-C74YSAWC.js";
+import "./chunk-UJJQME5K.js";
 import "./chunk-GRPLHUYC.js";
 import "./chunk-HOTQDYHD.js";
 import "./chunk-IW3X2MJF.js";
 import "./chunk-KOSF5FDO.js";
 import "./chunk-J3NIXHZZ.js";
 import "./chunk-S7EM5VMW.js";
-import "./chunk-PKQOUCPD.js";
-import "./chunk-G676QAN4.js";
-import "./chunk-MI5B3UCM.js";
-import "./chunk-HUT626G6.js";
+import "./chunk-SXWFDMFT.js";
+import "./chunk-V5VD5CIC.js";
+import "./chunk-EHQPRWGC.js";
+import "./chunk-LYWIW6WU.js";
 import "./chunk-C2TS5MER.js";
-import "./chunk-VR3LF62E.js";
+import "./chunk-I7UEBFP5.js";
+import "./chunk-SI2ZUOYD.js";
 import "./chunk-4PVJ2JBZ.js";
-import "./chunk-2BTYPNYW.js";
-import "./chunk-ZJCTG7HF.js";
-import "./chunk-GL3U7K2B.js";
+import "./chunk-4D6STP5G.js";
+import "./chunk-WM5R4O33.js";
+import "./chunk-QRKI6MMK.js";
 import "./chunk-ZOC4GITL.js";
 export {
   BulletinSlotAuthError,

package/dist/telemetry.d.ts

@@ -35,6 +35,22 @@ interface InternalContextSignals {
 }
 declare function isInternalContextFromSignals(signals: InternalContextSignals): boolean;
 declare function isInternalContext(): boolean;
+/**
+ * Pure decision function for whether telemetry is disabled.
+ *
+ * Precedence (highest to lowest):
+ * 1. optOut (BULLETIN_DEPLOY_TELEMETRY=0/off) → always disabled
+ * 2. optIn (BULLETIN_DEPLOY_TELEMETRY=1) → enabled, overrides DO_NOT_TRACK
+ * 3. doNotTrack (DO_NOT_TRACK=1) → disabled
+ * 4. internalContext (Parity CI / internal org) → enabled
+ * 5. default → disabled (telemetry is off for external users)
+ */
+declare function isTelemetryDisabled(s: {
+    optIn: boolean;
+    optOut: boolean;
+    doNotTrack: boolean;
+    internalContext: boolean;
+}): boolean;
 declare function scrubPaths(msg: string): string;
 declare function truncateAddress(ss58: string | undefined): string | undefined;
 declare function sanitizeBranch(name: string | undefined): string | undefined;
@@ -95,4 +111,4 @@ declare function markCodePath(id: CodePath): void;
 declare function captureWarning(message: string, context?: Record<string, unknown>): void;
 declare function flush(): Promise<void>;
 
-export { type DeployErrorCategory, type DeployErrorKind, type InternalContextSignals, VERSION, __setDeployRootSpanForTest, __setSentryForTest, analyseErrorPattern, captureWarning, classifyDeployError, classifyErrorKind, classifySadReason, closeTelemetry, computeDeployOutcome, flush, getCurrentSentryTraceId, getDeployAttributes, initTelemetry, isExpectedError, isInternalContext, isInternalContextFromSignals, markCodePath, markRelaunchOomHintShown, resolveRepo, resolveRunner, resolveRunnerType, sampleMemory, sanitizeBranch, sanitizeErrorMessage, sanitizeRepo, scrubPaths, setDeployAttribute, setDeployReportContext, setDeploySentryTag, setRunStateActive, truncateAddress, withDeploySpan, withSpan };
+export { type DeployErrorCategory, type DeployErrorKind, type InternalContextSignals, VERSION, __setDeployRootSpanForTest, __setSentryForTest, analyseErrorPattern, captureWarning, classifyDeployError, classifyErrorKind, classifySadReason, closeTelemetry, computeDeployOutcome, flush, getCurrentSentryTraceId, getDeployAttributes, initTelemetry, isExpectedError, isInternalContext, isInternalContextFromSignals, isTelemetryDisabled, markCodePath, markRelaunchOomHintShown, resolveRepo, resolveRunner, resolveRunnerType, sampleMemory, sanitizeBranch, sanitizeErrorMessage, sanitizeRepo, scrubPaths, setDeployAttribute, setDeployReportContext, setDeploySentryTag, setRunStateActive, truncateAddress, withDeploySpan, withSpan };

package/dist/telemetry.js

@@ -16,6 +16,7 @@ import {
   isExpectedError,
   isInternalContext,
   isInternalContextFromSignals,
+  isTelemetryDisabled,
   markCodePath,
   markRelaunchOomHintShown,
   resolveRepo,
@@ -33,8 +34,8 @@ import {
   truncateAddress,
   withDeploySpan,
   withSpan
-} from "./chunk-2BTYPNYW.js";
-import "./chunk-ZJCTG7HF.js";
+} from "./chunk-4D6STP5G.js";
+import "./chunk-WM5R4O33.js";
 export {
   VERSION,
   __setDeployRootSpanForTest,
@@ -53,6 +54,7 @@ export {
   isExpectedError,
   isInternalContext,
   isInternalContextFromSignals,
+  isTelemetryDisabled,
   markCodePath,
   markRelaunchOomHintShown,
   resolveRepo,

package/dist/version-check.js

@@ -11,9 +11,9 @@ import {
   isPreReleaseVersion,
   preReleaseWarning,
   promptYesNo
-} from "./chunk-MI5B3UCM.js";
-import "./chunk-2BTYPNYW.js";
-import "./chunk-ZJCTG7HF.js";
+} from "./chunk-EHQPRWGC.js";
+import "./chunk-4D6STP5G.js";
+import "./chunk-WM5R4O33.js";
 export {
   assessVersion,
   checkNodeVersion,

package/docs/bootstrap.md

@@ -45,5 +45,5 @@ bulletin-bootstrap --mnemonic "..."
 
 ## Related Docs
 
-- [Main README](../docs-internal/README.dev.md)
+- [Main README](../README.md)
 - [E2E test setup](./e2e-bootstrap.md)

package/docs/e2e-bootstrap.md

@@ -1,11 +1,33 @@
 # E2E test setup
 
+> This is a **contributor** guide for running the live-testnet E2E suite. If you only want to deploy your own app, see [DEPLOYMENT.md](../DEPLOYMENT.md) instead.
+
 The E2E suite (`test/e2e.test.js`, driven by `.github/workflows/e2e.yml`) deploys real content to Paseo Bulletin testnet via `bulletin-deploy` and verifies the on-chain round-trip. It consumes the **shared default pool** (derived from `DEV_PHRASE` — the same pool real users hit in production) for Bulletin chunk upload, so no pool bootstrapping is required.
 
 Three one-time setup items are needed before the workflow can pass. Do them once per testnet lifetime (redo if testnet is wiped).
 
 ---
 
+## Chain-admin prerequisites
+
+Some of this setup needs authority a normal contributor doesn't have — the Bulletin chain's storage **authorizer** key, the DotNS `POP_RULES` contract **owner**, and (on faucet-less testnets) a funding source. A network operator ensures the following before the suite can pass. The check commands are read-only and safe to run anytime; the grant tools are idempotent — they report current status and do only what is missing.
+
+1. **Personhood (PoP) status.** Registering a PoP-Full base label (e.g. `e2epool.dot`) requires Full Personhood on the DotNS Personhood precompile — Alice for the happy-path scenarios, and Bob once for the `e2eowned.dot` S3 fixture. NoStatus fallback labels (e.g. `e2epoolns01.dot`) need no grant; they auto-register on first deploy.
+   - Check: `node tools/check-pop-status.mjs --env <id>`
+   - Grant: by the `POP_RULES` contract owner — request via an issue on [paritytech/dotns](https://github.com/paritytech/dotns/issues). `bulletin-deploy` cannot self-upgrade a signer.
+
+2. **Asset Hub funding (DotNS fees).** The accounts that register or transfer names need a balance on the target Asset Hub.
+   - Check: `node tools/check-balances.mjs --env <id>` (shows balances and Bulletin authorization quota for every E2E signer in one pass)
+   - Grant: on Paseo, use the public faucet at [https://faucet.polkadot.io/](https://faucet.polkadot.io/). `paseo-next-v2` has no public faucet — the operator funds the accounts out of band.
+
+3. **Bulletin storage authorization (upload allowance).** Every account that uploads chunks must carry a `TransactionStorage` authorization; `bulletin-deploy` never self-authorizes. On testnet the authorizer is `//Alice`.
+   - Check: `node tools/check-bulletin-auth.mjs --env <id>`
+   - Grant: **pool accounts** via `bulletin-bootstrap --env <id>` (authorizes and funds them); **direct-mode signers** (the per-shard `//e2e-*` derivation paths) via `node tools/setup-e2e-derivation-signers.mjs --env <id>`. Alice is the authorizer itself, and Bob only owns the S3 fixture name (never uploads), so neither needs its own storage grant.
+
+The per-environment sections below are the step-by-step procedures that satisfy these.
+
+---
+
 ## Paseo (stable testnet)
 
 ### Prerequisites
@@ -22,7 +44,7 @@ Both happy-path scenarios (S1, S2) deploy as Alice via DotNS. Registering a new
 node tools/check-pop-status.mjs
 ```
 
-Re-run if the check cannot read Alice's status. Self-attestation is no longer available; ask the DotNS team to whitelist the signer if Alice needs a higher status for a label class.
+Re-run if the check cannot read Alice's status. Self-attestation is no longer available; a signer's Personhood status is granted by the `POP_RULES` contract owner. To request a status grant (whitelisting) for a signer, open an issue on [paritytech/dotns](https://github.com/paritytech/dotns/issues).
 
 ### 2. Fund and map Bob on Asset Hub Paseo
 
@@ -42,7 +64,7 @@ Expected output: Bob's SS58, his H160 (`0x41dccbd49b26c50d34355ed86ff0fa9e489d1e
 The S3 negative scenario asserts that `bulletin-deploy` refuses to deploy to a domain owned by a different account (exit 78 with transfer guidance). Have Bob register the label with a DotNS registration tool outside `bulletin-deploy` — no Alice intermediary, no Bulletin content needed (S3 never reads content).
 
 ```bash
-node tools/register-test-fixture-paseo-next-v2.mjs e2eowned
+node tools/register-test-fixture.mjs e2eowned
 ```
 
 Expected: `e2eowned.dot` is owned by Bob's H160 `0x41dccbd49b26c50d34355ed86ff0fa9e489d1e01`. The `e2eowned.dot` label requires PoP Full status and a mature commitment (the tool waits 30s after the minimum commitment age). The tool is idempotent: it exits 0 immediately if Bob already owns it, and transfers the label from Alice back to Bob if fixture drift is detected.
@@ -55,14 +77,14 @@ If S3 ever fails because `e2eowned.dot` was transferred back to Alice by mistake
 
 Paseo Next v2 uses a separate Asset Hub (`wss://paseo-asset-hub-next-rpc.polkadot.io`) and Bulletin chain (`wss://paseo-bulletin-next-rpc.polkadot.io`) with different contract addresses. The `map_account` extrinsic does not exist on this chain — account mapping is triggered automatically when an account submits its first on-chain transaction.
 
-> **Note on PoP grants:** The paseo-next-v2 `POP_RULES` contract (`0x2002C1c15b88632Ad01c7770f6EbE1Ca05c8472E`) is **not permissionless** — `setUserPopStatus` can only be called by the contract owner (`0x4a519c30da0ec16aa9a73c26ea6ca6f701cce099`). `bulletin-deploy` itself cannot upgrade a signer; the chain team flips the Personhood precompile out of band. CI scenarios pick labels via `pickStableLabel`/`pickDirectLabel`/`pickIncLabel`/`pickRotLabel`, which auto-select between a PoP-Full base name (e.g. `e2epool.dot`) and a NoStatus fallback (e.g. `e2epoolns01.dot`) based on what `Personhood.personhoodStatus(<signer>)` returns at test start. The setup below covers both modes.
+> **Note on PoP grants:** The paseo-next-v2 `POP_RULES` contract (`0x2002C1c15b88632Ad01c7770f6EbE1Ca05c8472E`) is **not permissionless** — `setUserPopStatus` can only be called by its owner. `bulletin-deploy` cannot upgrade a signer itself; a status grant (whitelisting) is performed out of band by the contract owner. To request one for a signer, open an issue on [paritytech/dotns](https://github.com/paritytech/dotns/issues). CI scenarios pick labels via `pickStableLabel`/`pickDirectLabel`/`pickIncLabel`/`pickRotLabel`, which auto-select between a PoP-Full base name (e.g. `e2epool.dot`) and a NoStatus fallback (e.g. `e2epoolns01.dot`) based on what `Personhood.personhoodStatus(<signer>)` returns at test start. The setup below covers both modes.
 
-> **⚠ Testnet wipes reset everything.** When paseo-next-v2 is reset (which happens periodically), Alice's Personhood precompile status drops to NoStatus *and* every `e2e*.dot` registration is gone. Re-run the relevant steps below after each wipe — there is no on-chain self-recovery. Issue #381 traces back to exactly this: Alice's status came back as Full but `e2epool.dot` was unregistered, so `setContenthash` reverted with `ERC721NonexistentToken`. As long as ownership stays in lockstep with Alice's PoP grade (Full ↔ PoP-Full labels registered; NoStatus ↔ NoStatus labels auto-register on first deploy), the nightly stays green.
+> **⚠ Testnet wipes reset everything.** When paseo-next-v2 is reset (which happens periodically), Alice's Personhood precompile status drops to NoStatus *and* every `e2e*.dot` registration is gone. Re-run the relevant steps below after each wipe — there is no on-chain self-recovery. A subtle failure mode to watch for: Alice's status can come back as Full while `e2epool.dot` is unregistered, so `setContenthash` reverts with `ERC721NonexistentToken`. As long as ownership stays in lockstep with Alice's PoP grade (Full ↔ PoP-Full labels registered; NoStatus ↔ NoStatus labels auto-register on first deploy), the nightly stays green.
 
 ### Prerequisites
 
 - `bulletin-deploy` built locally (`npm run build`).
-- Alice (`5DfhGyQdFobKM8NsWvEeAKk5EQQgYe9AydgJ7rMB6E1EqRzV`) funded on paseo-next-v2 Asset Hub. The chain team must send funds manually — there is no public faucet for this chain.
+- Alice (`5DfhGyQdFobKM8NsWvEeAKk5EQQgYe9AydgJ7rMB6E1EqRzV`) funded on paseo-next-v2 Asset Hub. This is a restricted testnet with no public faucet — the account must be funded out of band by the network operator.
 
 ### 1. Authorize pool accounts on Bulletin Next
 
@@ -81,7 +103,7 @@ node tools/check-pop-status.mjs --env paseo-next-v2
 What you see decides which labels need pre-registration:
 
 - **`NoStatus (0)`** → no extra work. The tests pick the NoStatus fallback labels (`e2epoolns01`, `e2edirect01`, `e2eincpool01`, `e2erotpool01`) which auto-register on first deploy because their shape (base length ≥ 9 with two trailing digits) bypasses the `Requires Full personhood verification` gate.
-- **`ProofOfPersonhoodFull (2)`** → the chain team has flipped Alice on the Personhood precompile. The tests will now pick the PoP-Full stable labels (`e2epool`, `e2edirect`, `e2einc`, `e2erot`), and those **must already be registered to Alice** before the matrix runs. Register them once:
+- **`ProofOfPersonhoodFull (2)`** → Alice has been flipped to Full on the Personhood precompile. The tests will now pick the PoP-Full stable labels (`e2epool`, `e2edirect`, `e2einc`, `e2erot`), and those **must already be registered to Alice** before the matrix runs. Register them once:
 
   ```bash
   # Pre-built fixture is fine — it's the contenthash, not the content, that the tests overwrite.
@@ -90,11 +112,11 @@ What you see decides which labels need pre-registration:
   done
   ```
 
-  Skipping this leaves `setContenthash` reverting with `ERC721NonexistentToken` on whichever PoP-Full label the scenario picks (issue #381).
+  Skipping this leaves `setContenthash` reverting with `ERC721NonexistentToken` on whichever PoP-Full label the scenario picks.
 
 ### 3. Fund Bob and trigger his account mapping
 
-Bob (`5FHneW46xGXgs5mUiveU4sbTyGBzmstUspZC92UhjJM694ty`) needs PAS on paseo-next-v2 Asset Hub so he can pay fees for the `e2eowned.dot` registration. Have the chain team send ~1 PAS to his SS58 address. His H160 mapping (`0x41dccbd49b26c50d34355ed86ff0fa9e489d1e01`) is triggered automatically when he submits his first on-chain tx.
+Bob (`5FHneW46xGXgs5mUiveU4sbTyGBzmstUspZC92UhjJM694ty`) needs PAS on paseo-next-v2 Asset Hub so he can pay fees for the `e2eowned.dot` registration. As above, this testnet has no public faucet — fund his SS58 address (~1 PAS) out of band. His H160 mapping (`0x41dccbd49b26c50d34355ed86ff0fa9e489d1e01`) is triggered automatically when he submits his first on-chain tx.
 
 Verify his mapping:
 
@@ -107,14 +129,14 @@ Expected output: Bob's SS58, his H160 (`0x41dccbd49b26c50d34355ed86ff0fa9e489d1e
 
 ### 4. Verify Bob PoP status
 
-Bob owns both `e2eownedns02.dot` (NoStatus, used by S3 when Alice is NoStatus) and `e2eowned.dot` (PoP-Full, used by S3 when the Personhood precompile has flipped Alice to Full). The NoStatus branch needs no admin help; the PoP-Full branch needed Bob to register it back when the chain team granted him Full status once. After that one-shot registration the label persists until expiry, so Bob can stay NoStatus going forward — ownership and PoP-grade are decoupled after registration.
+Bob owns both `e2eownedns02.dot` (NoStatus, used by S3 when Alice is NoStatus) and `e2eowned.dot` (PoP-Full, used by S3 when the Personhood precompile has flipped Alice to Full). The NoStatus branch needs no admin help; the PoP-Full branch needed Bob to register it back when he was granted Full status once. After that one-shot registration the label persists until expiry, so Bob can stay NoStatus going forward — ownership and PoP-grade are decoupled after registration.
 
 ### 5. Register `e2eownedns02.dot` directly as Bob
 
 Register the domain using the dedicated tool:
 
 ```bash
-node tools/register-test-fixture-paseo-next-v2.mjs e2eownedns02
+node tools/register-test-fixture.mjs e2eownedns02
 ```
 
 Expected: `e2eownedns02.dot` is owned by Bob (`0x41dccbd49b26c50d34355ed86ff0fa9e489d1e01`).
@@ -126,8 +148,8 @@ S3 picks `e2eowned.dot` when Alice is PoP-Full at test start. If the label is un
 
 If Bob already owns it (`ownerOf` on `DOTNS_REGISTRAR` returns `0x41dccbd…`), skip. Otherwise:
 
-- **If nobody owns it yet:** registration needs Bob to hold Full PoP. Coordinate with the chain team to flip Bob's Personhood precompile to Full, then run `node tools/register-e2eowned-paseo-next-v2.mjs` (the script targets Bob via `//Bob`). After registration Bob can drop back to NoStatus.
-- **If Alice (or anyone other than Bob) is squatting:** the owner can call `transferFrom(<current>, Bob, tokenId)` on `DOTNS_REGISTRAR`. ERC721 transfer is unconditional on the recipient (no PoP check) and doesn't need Bob's signer. `tools/transfer-e2eowned-to-bob.mjs` does this for Alice → Bob in one shot (was added to recover from a botched PR-CI run on 2026-05-17, see issue #381 thread).
+- **If nobody owns it yet:** registration needs Bob to hold Full PoP. Request Full PoP for Bob by opening an issue on [paritytech/dotns](https://github.com/paritytech/dotns/issues), then run `node tools/register-test-fixture.mjs e2eowned` (registers the label as Bob via `//Bob`). After registration Bob can drop back to NoStatus.
+- **If Alice (or anyone other than Bob) is squatting:** the owner can call `transferFrom(<current>, Bob, tokenId)` on `DOTNS_REGISTRAR`. ERC721 transfer is unconditional on the recipient (no PoP check) and doesn't need Bob's signer. Run `node tools/transfer-dotns-name.mjs --label e2eowned --to 0x41dccbd49b26c50d34355ed86ff0fa9e489d1e01 --env paseo-next-v2` to do this for Alice → Bob in one shot.
 
 ---