@parity/product-deploy 0.10.0-rc.2 → 0.10.0-rc.4

package/dist/index.js

@@ -4,7 +4,7 @@ import {
 } from "./chunk-MMAZFJDG.js";
 import {
   publishManifest
-} from "./chunk-XX6LNB74.js";
+} from "./chunk-BZRRNX7T.js";
 import {
   validateExecutableManifest,
   validateProductConfig,
@@ -19,13 +19,13 @@ import {
   assertWithinBudget,
   getTextRecordBudgetBytes,
   pessimisticSizePreflight
-} from "./chunk-RI3ZLNPN.js";
+} from "./chunk-WIMRJK32.js";
 import {
   deploy,
   merkleizeJS,
   merkleizeWithStableOrder
-} from "./chunk-C74YSAWC.js";
-import "./chunk-UJJQME5K.js";
+} from "./chunk-CJHVSSSR.js";
+import "./chunk-5V2RCZXO.js";
 import "./chunk-GRPLHUYC.js";
 import "./chunk-HOTQDYHD.js";
 import {
@@ -49,19 +49,20 @@ import {
   isVolatilePath,
   parseManifest
 } from "./chunk-S7EM5VMW.js";
-import "./chunk-SXWFDMFT.js";
-import "./chunk-V5VD5CIC.js";
-import "./chunk-EHQPRWGC.js";
+import "./chunk-3CUIQTSD.js";
+import "./chunk-XOR2CEKA.js";
+import "./chunk-ZHRQDZIK.js";
 import {
   probeChunks
-} from "./chunk-LYWIW6WU.js";
+} from "./chunk-W2VFJGBC.js";
 import "./chunk-C2TS5MER.js";
+import "./chunk-TSPERKUS.js";
 import {
   DEFAULT_MNEMONIC,
   DotNS,
   parseDomainName,
   sanitizeDomainLabel
-} from "./chunk-I7UEBFP5.js";
+} from "./chunk-GRWWVYSV.js";
 import "./chunk-SI2ZUOYD.js";
 import {
   bootstrapPool,
@@ -69,8 +70,8 @@ import {
   ensureAuthorized,
   fetchPoolAuthorizations,
   selectAccount
-} from "./chunk-4PVJ2JBZ.js";
-import "./chunk-4D6STP5G.js";
+} from "./chunk-4IUTMHVB.js";
+import "./chunk-76CVW4DE.js";
 import {
   VERSION,
   loadRunState,
@@ -80,7 +81,7 @@ import {
   shouldSkipStaleWarning,
   stateFilePath,
   writeRunState
-} from "./chunk-WM5R4O33.js";
+} from "./chunk-CCTQO2Q4.js";
 import {
   DEFAULT_ENV_ID,
   deepMergeEnvironments,

package/dist/manifest/byte-budget.d.ts

@@ -11,12 +11,11 @@ declare const DEFAULT_TEXT_RECORD_BUDGET_BYTES = 1024;
 /**
  * Fixed-length stand-in for a Bulletin CID in the pre-upload size preflight.
  *
- * CIDv1(raw, sha256, 32B) base32-encodes to exactly 59 characters per the
- * RFC §Constants table, so substituting any 59-char CID-like string lets us
- * size manifests deterministically before the icon and executables have
- * actually been uploaded.
+ * The encoded length depends on the multihash code's varint width:
+ *   sha-256     (0x12,   1-byte varint) → CIDv1(raw, …) base32 = 59 chars
+ *   blake2b-256 (0xb220, 3-byte varint) → CIDv1(raw, …) base32 = 62 chars
  */
-declare const PLACEHOLDER_CID = "bafkreigh2akiscaildc7zh3vznzaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa";
+declare const PLACEHOLDER_CID = "bafk2bzacecjiwibwnfb6fl6rd26a5lrokoutx4lxut6pgw6mmtkqg4comxrae";
 /** Resolved text-record byte budget, from `BULLETIN_TEXT_BUDGET` or the default. */
 declare function getTextRecordBudgetBytes(): number;
 interface BudgetCheck {

package/dist/manifest/byte-budget.js

@@ -4,7 +4,7 @@ import {
   assertWithinBudget,
   getTextRecordBudgetBytes,
   pessimisticSizePreflight
-} from "../chunk-RI3ZLNPN.js";
+} from "../chunk-WIMRJK32.js";
 export {
   DEFAULT_TEXT_RECORD_BUDGET_BYTES,
   PLACEHOLDER_CID,

package/dist/manifest/publish.js

@@ -1,25 +1,26 @@
 import {
   publishManifest
-} from "../chunk-XX6LNB74.js";
-import "../chunk-RI3ZLNPN.js";
-import "../chunk-C74YSAWC.js";
-import "../chunk-UJJQME5K.js";
+} from "../chunk-BZRRNX7T.js";
+import "../chunk-WIMRJK32.js";
+import "../chunk-CJHVSSSR.js";
+import "../chunk-5V2RCZXO.js";
 import "../chunk-GRPLHUYC.js";
 import "../chunk-HOTQDYHD.js";
 import "../chunk-IW3X2MJF.js";
 import "../chunk-KOSF5FDO.js";
 import "../chunk-J3NIXHZZ.js";
 import "../chunk-S7EM5VMW.js";
-import "../chunk-SXWFDMFT.js";
-import "../chunk-V5VD5CIC.js";
-import "../chunk-EHQPRWGC.js";
-import "../chunk-LYWIW6WU.js";
+import "../chunk-3CUIQTSD.js";
+import "../chunk-XOR2CEKA.js";
+import "../chunk-ZHRQDZIK.js";
+import "../chunk-W2VFJGBC.js";
 import "../chunk-C2TS5MER.js";
-import "../chunk-I7UEBFP5.js";
+import "../chunk-TSPERKUS.js";
+import "../chunk-GRWWVYSV.js";
 import "../chunk-SI2ZUOYD.js";
-import "../chunk-4PVJ2JBZ.js";
-import "../chunk-4D6STP5G.js";
-import "../chunk-WM5R4O33.js";
+import "../chunk-4IUTMHVB.js";
+import "../chunk-76CVW4DE.js";
+import "../chunk-CCTQO2Q4.js";
 import "../chunk-QRKI6MMK.js";
 import "../chunk-ZOC4GITL.js";
 export {

package/dist/memory-report.js

@@ -5,8 +5,8 @@ import {
   maybeWriteMemoryReport,
   safeHeap,
   sampleFromBytes
-} from "./chunk-4D6STP5G.js";
-import "./chunk-WM5R4O33.js";
+} from "./chunk-76CVW4DE.js";
+import "./chunk-CCTQO2Q4.js";
 export {
   DEFAULT_THRESHOLD_MB,
   buildMemoryReport,

package/dist/merkle.js

@@ -6,24 +6,25 @@ import {
   merkleizeKuboBackend,
   merkleizeWithStableOrder,
   rebuildOrderedCarFromBytes
-} from "./chunk-C74YSAWC.js";
-import "./chunk-UJJQME5K.js";
+} from "./chunk-CJHVSSSR.js";
+import "./chunk-5V2RCZXO.js";
 import "./chunk-GRPLHUYC.js";
 import "./chunk-HOTQDYHD.js";
 import "./chunk-IW3X2MJF.js";
 import "./chunk-KOSF5FDO.js";
 import "./chunk-J3NIXHZZ.js";
 import "./chunk-S7EM5VMW.js";
-import "./chunk-SXWFDMFT.js";
-import "./chunk-V5VD5CIC.js";
-import "./chunk-EHQPRWGC.js";
-import "./chunk-LYWIW6WU.js";
+import "./chunk-3CUIQTSD.js";
+import "./chunk-XOR2CEKA.js";
+import "./chunk-ZHRQDZIK.js";
+import "./chunk-W2VFJGBC.js";
 import "./chunk-C2TS5MER.js";
-import "./chunk-I7UEBFP5.js";
+import "./chunk-TSPERKUS.js";
+import "./chunk-GRWWVYSV.js";
 import "./chunk-SI2ZUOYD.js";
-import "./chunk-4PVJ2JBZ.js";
-import "./chunk-4D6STP5G.js";
-import "./chunk-WM5R4O33.js";
+import "./chunk-4IUTMHVB.js";
+import "./chunk-76CVW4DE.js";
+import "./chunk-CCTQO2Q4.js";
 import "./chunk-QRKI6MMK.js";
 import "./chunk-ZOC4GITL.js";
 export {

package/dist/personhood/bootstrap.js

@@ -21,15 +21,15 @@ import {
 } from "../chunk-XAB7WM3S.js";
 import {
   WS_HEARTBEAT_TIMEOUT_MS
-} from "../chunk-I7UEBFP5.js";
+} from "../chunk-GRWWVYSV.js";
 import {
   DOTNS_CONTEXT_BYTES,
   PEOPLE_MEMBER_IDENTIFIER_HEX,
   PGAS_ASSET_ID
 } from "../chunk-SI2ZUOYD.js";
-import "../chunk-4PVJ2JBZ.js";
-import "../chunk-4D6STP5G.js";
-import "../chunk-WM5R4O33.js";
+import "../chunk-4IUTMHVB.js";
+import "../chunk-76CVW4DE.js";
+import "../chunk-CCTQO2Q4.js";
 import {
   loadEnvironments
 } from "../chunk-QRKI6MMK.js";

package/dist/personhood/people-client.js

@@ -1,10 +1,10 @@
 import {
   WS_HEARTBEAT_TIMEOUT_MS
-} from "../chunk-I7UEBFP5.js";
+} from "../chunk-GRWWVYSV.js";
 import "../chunk-SI2ZUOYD.js";
-import "../chunk-4PVJ2JBZ.js";
-import "../chunk-4D6STP5G.js";
-import "../chunk-WM5R4O33.js";
+import "../chunk-4IUTMHVB.js";
+import "../chunk-76CVW4DE.js";
+import "../chunk-CCTQO2Q4.js";
 import {
   loadEnvironments
 } from "../chunk-QRKI6MMK.js";

package/dist/pool.d.ts

@@ -15,6 +15,7 @@ interface PoolAuthorization extends PoolAccount {
 }
 declare function derivePoolAccounts(poolSize?: number, mnemonic?: string): PoolAccount[];
 declare function isAuthorizationSufficient(auth: any, currentBlock: number): boolean;
+declare function accountsNeedingAuthorization(auths: PoolAuthorization[], currentBlock: number): PoolAuthorization[];
 interface SelectionResult {
     account: PoolAuthorization;
     eligibleCount: number;
@@ -25,6 +26,10 @@ declare function isTestnetSpecName(specName: string | undefined | null): boolean
 declare function detectTestnet(api: any): Promise<boolean>;
 declare function _resetTestnetCacheForTests(): void;
 declare function ensureAuthorized(api: any, address: string, label?: string): Promise<void>;
-declare function bootstrapPool(bulletinRpc: string, poolSize?: number, mnemonic?: string): Promise<void>;
+interface BootstrapPoolOptions {
+    authorizerMnemonic?: string;
+    bulletinAuthorizeV2?: boolean;
+}
+declare function bootstrapPool(bulletinRpc: string, poolSize?: number, mnemonic?: string, opts?: BootstrapPoolOptions): Promise<void>;
 
-export { type PoolAccount, type PoolAuthorization, type SelectionResult, _resetTestnetCacheForTests, bootstrapPool, derivePoolAccounts, detectTestnet, ensureAuthorized, fetchPoolAuthorizations, formatPasBalance, isAuthorizationSufficient, isTestnetSpecName, selectAccount };
+export { type BootstrapPoolOptions, type PoolAccount, type PoolAuthorization, type SelectionResult, _resetTestnetCacheForTests, accountsNeedingAuthorization, bootstrapPool, derivePoolAccounts, detectTestnet, ensureAuthorized, fetchPoolAuthorizations, formatPasBalance, isAuthorizationSufficient, isTestnetSpecName, selectAccount };

package/dist/pool.js

@@ -1,5 +1,6 @@
 import {
   _resetTestnetCacheForTests,
+  accountsNeedingAuthorization,
   bootstrapPool,
   derivePoolAccounts,
   detectTestnet,
@@ -9,9 +10,10 @@ import {
   isAuthorizationSufficient,
   isTestnetSpecName,
   selectAccount
-} from "./chunk-4PVJ2JBZ.js";
+} from "./chunk-4IUTMHVB.js";
 export {
   _resetTestnetCacheForTests,
+  accountsNeedingAuthorization,
   bootstrapPool,
   derivePoolAccounts,
   detectTestnet,

package/dist/run-state.js

@@ -7,7 +7,7 @@ import {
   shouldSkipStaleWarning,
   stateFilePath,
   writeRunState
-} from "./chunk-WM5R4O33.js";
+} from "./chunk-CCTQO2Q4.js";
 export {
   VERSION,
   loadRunState,

package/dist/sss-allowance-cache.js

@@ -4,11 +4,12 @@ import {
   preflightSssAllowance,
   sssPeriodEndSec,
   writeSssAllowanceCache
-} from "./chunk-UJJQME5K.js";
+} from "./chunk-5V2RCZXO.js";
 import "./chunk-GRPLHUYC.js";
-import "./chunk-SXWFDMFT.js";
-import "./chunk-4D6STP5G.js";
-import "./chunk-WM5R4O33.js";
+import "./chunk-3CUIQTSD.js";
+import "./chunk-TSPERKUS.js";
+import "./chunk-76CVW4DE.js";
+import "./chunk-CCTQO2Q4.js";
 import "./chunk-QRKI6MMK.js";
 import "./chunk-ZOC4GITL.js";
 export {

package/dist/storage-signer.js

@@ -7,24 +7,25 @@ import {
   readBulletinSlotSigner,
   waitForBulletinAuthorization,
   writeBulletinSlotKey
-} from "./chunk-C74YSAWC.js";
-import "./chunk-UJJQME5K.js";
+} from "./chunk-CJHVSSSR.js";
+import "./chunk-5V2RCZXO.js";
 import "./chunk-GRPLHUYC.js";
 import "./chunk-HOTQDYHD.js";
 import "./chunk-IW3X2MJF.js";
 import "./chunk-KOSF5FDO.js";
 import "./chunk-J3NIXHZZ.js";
 import "./chunk-S7EM5VMW.js";
-import "./chunk-SXWFDMFT.js";
-import "./chunk-V5VD5CIC.js";
-import "./chunk-EHQPRWGC.js";
-import "./chunk-LYWIW6WU.js";
+import "./chunk-3CUIQTSD.js";
+import "./chunk-XOR2CEKA.js";
+import "./chunk-ZHRQDZIK.js";
+import "./chunk-W2VFJGBC.js";
 import "./chunk-C2TS5MER.js";
-import "./chunk-I7UEBFP5.js";
+import "./chunk-TSPERKUS.js";
+import "./chunk-GRWWVYSV.js";
 import "./chunk-SI2ZUOYD.js";
-import "./chunk-4PVJ2JBZ.js";
-import "./chunk-4D6STP5G.js";
-import "./chunk-WM5R4O33.js";
+import "./chunk-4IUTMHVB.js";
+import "./chunk-76CVW4DE.js";
+import "./chunk-CCTQO2Q4.js";
 import "./chunk-QRKI6MMK.js";
 import "./chunk-ZOC4GITL.js";
 export {

package/dist/telemetry.js

@@ -34,8 +34,8 @@ import {
   truncateAddress,
   withDeploySpan,
   withSpan
-} from "./chunk-4D6STP5G.js";
-import "./chunk-WM5R4O33.js";
+} from "./chunk-76CVW4DE.js";
+import "./chunk-CCTQO2Q4.js";
 export {
   VERSION,
   __setDeployRootSpanForTest,

package/dist/version-check.js

@@ -11,9 +11,9 @@ import {
   isPreReleaseVersion,
   preReleaseWarning,
   promptYesNo
-} from "./chunk-EHQPRWGC.js";
-import "./chunk-4D6STP5G.js";
-import "./chunk-WM5R4O33.js";
+} from "./chunk-ZHRQDZIK.js";
+import "./chunk-76CVW4DE.js";
+import "./chunk-CCTQO2Q4.js";
 export {
   assessVersion,
   checkNodeVersion,

package/docs/bootstrap.md

@@ -1,49 +1,83 @@
 # bulletin-bootstrap
 
-`bulletin-bootstrap` is the operator CLI for initializing Bulletin pool accounts. It is separate from `bulletin-deploy` on purpose: deploys are the normal user path, bootstrap is an admin/setup operation.
+`bulletin-bootstrap` is the operator CLI for reporting and granting pool account authorization on the Bulletin chain. It is separate from `bulletin-deploy` on purpose: deploys are the normal user path, bootstrap is an admin/setup operation.
+
+**Documentation map — read in order:**
+1. **[DEPLOYMENT.md](../DEPLOYMENT.md)** — set up bulletin-deploy for your environment.
+2. **[docs/bootstrap.md](bootstrap.md)** (this doc) — the bulletin-bootstrap reference (Bulletin storage authorization).
+3. **[docs/e2e-bootstrap.md](e2e-bootstrap.md)** — a fully worked setup, end to end, for the E2E test environment.
+
+## The authorization model
+
+The Bulletin chain has **no fee model**. Storage access is gated by the `TransactionStorage` pallet's authorization quota, not account balance. Each pool account must be authorized with a transaction count and byte budget. `bulletin-bootstrap` inspects and grants that quota.
 
 ## Usage
 
 ```bash
-bulletin-bootstrap
+bulletin-bootstrap [options]
 ```
 
 Options:
 
 | Flag | What it does |
 |---|---|
+| `--mnemonic "..."` | Pool root mnemonic used to derive the pool accounts. Also readable from `BULLETIN_POOL_MNEMONIC`, then `MNEMONIC`. Defaults to the well-known dev phrase — the same key the deploy path uses. |
+| `--authorizer "..."` | Seed/mnemonic of the key that holds authorization authority on this chain (e.g. `//Alice`, a full mnemonic, or a hex seed). On testnets, defaults to `//Alice` if omitted. On non-testnets, required to grant — omit to get status only. |
 | `--rpc wss://...` | Override the Bulletin RPC endpoint. Also readable from `BULLETIN_RPC`. |
-| `--pool-size N` | Number of derived pool accounts to initialize. Default: `10`. |
-| `--mnemonic "..."` | Root mnemonic used to derive the pool accounts. Also readable from `BULLETIN_POOL_MNEMONIC`, then `MNEMONIC`. |
+| `--env <id>` | Load environment by id from `environments.json` (sets the default RPC). |
+| `--pool-size N` | Number of pool accounts to check/initialize. Default: `10`. |
 | `--version` | Print the CLI version. |
 | `--help` | Show help. |
 
 ## What it does
 
-The command derives the pool account set and initializes the on-chain authorization state needed for Bulletin uploads.
+1. Connects to the Bulletin chain and derives the pool account set from `--mnemonic` (default: dev phrase, same as `BULLETIN_POOL_MNEMONIC` in the deploy path).
+2. Fetches the current `TransactionStorage` authorization for each account and prints its status: index, address, and either `AUTHORIZED — <txs> txs / <MB> MB remaining, expires @<block>` or `NOT AUTHORIZED`.
+3. Determines which accounts need authorization (missing or expired).
+4. Resolves the authorizer:
+   - `--authorizer` provided → use that key.
+   - No `--authorizer` and chain is a testnet → default to `//Alice`.
+   - No `--authorizer` and chain is not a testnet → print that authorization is needed and exit (status-only, nothing written).
+5. For each account that needs authorization, submits `TransactionStorage.authorize_account` signed by the authorizer (1000 txs / 100 MB per account).
+6. Prints a final summary of all account statuses.
 
 Use it when:
 
-- you are bringing up a fresh pool on a testnet
-- the shared uploader pool has not been authorized yet
-- you want to pre-initialize a non-default pool mnemonic
+- you are bringing up a fresh pool on a testnet or production chain
+- the shared uploader pool's authorizations have expired
+- you want to check authorization status without making any changes (omit `--authorizer` on non-testnet)
+- you are initializing a non-default pool mnemonic
 
 Do not use it as part of routine deploys. Normal deploys go through `bulletin-deploy`.
 
+## Pool account derivation
+
+Pool accounts are derived from the pool root mnemonic using the path `//deploy/N` for `N` in `[0, pool-size)`. The deploy path uses the same derivation from `BULLETIN_POOL_MNEMONIC` (defaulting to the well-known dev phrase). Bootstrap and deploy must use the same mnemonic to address the same accounts.
+
 ## Examples
 
 ```bash
-# Default testnet pool against the default RPC
+# Check status on the default testnet (//Alice as authorizer)
 bulletin-bootstrap
 
-# Different RPC and larger pool
+# Check status without granting (non-testnet, no authorizer provided)
+bulletin-bootstrap --rpc wss://bulletin.mainnet.example.com
+
+# Grant on a non-testnet with an explicit authorizer
+bulletin-bootstrap --rpc wss://bulletin.mainnet.example.com --authorizer "word word word ..."
+
+# Larger pool, explicit RPC
 bulletin-bootstrap --rpc wss://custom-bulletin.example.com --pool-size 20
 
-# Explicit pool mnemonic
-bulletin-bootstrap --mnemonic "..."
+# Explicit pool mnemonic and authorizer
+bulletin-bootstrap --mnemonic "word word word ..." --authorizer "//Alice"
+
+# Load environment from environments.json
+bulletin-bootstrap --env paseo-next-v2
 ```
 
 ## Related Docs
 
-- [Main README](../README.md)
+- [DEPLOYMENT.md](../DEPLOYMENT.md)
 - [E2E test setup](./e2e-bootstrap.md)
+- [Main README](../README.md)

package/docs/e2e-bootstrap.md

@@ -2,6 +2,11 @@
 
 > This is a **contributor** guide for running the live-testnet E2E suite. If you only want to deploy your own app, see [DEPLOYMENT.md](../DEPLOYMENT.md) instead.
 
+**Documentation map — read in order:**
+1. **[DEPLOYMENT.md](../DEPLOYMENT.md)** — set up `bulletin-deploy` for your environment.
+2. **[docs/bootstrap.md](bootstrap.md)** — the `bulletin-bootstrap` reference (Bulletin storage authorization).
+3. **[docs/e2e-bootstrap.md](e2e-bootstrap.md)** (this doc) — a fully worked setup, end to end, for the E2E test environment.
+
 The E2E suite (`test/e2e.test.js`, driven by `.github/workflows/e2e.yml`) deploys real content to Paseo Bulletin testnet via `bulletin-deploy` and verifies the on-chain round-trip. It consumes the **shared default pool** (derived from `DEV_PHRASE` — the same pool real users hit in production) for Bulletin chunk upload, so no pool bootstrapping is required.
 
 Three one-time setup items are needed before the workflow can pass. Do them once per testnet lifetime (redo if testnet is wiped).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parity/product-deploy",
-  "version": "0.10.0-rc.2",
+  "version": "0.10.0-rc.4",
   "private": false,
   "repository": {
     "type": "git",