@parity/product-deploy 0.11.0-rc.0 → 0.11.0-rc.2

package/bin/bulletin-deploy

@@ -1,5 +1,11 @@
 #!/usr/bin/env node
 
+// Must be the FIRST import: installs process.emitWarning suppressor before any
+// SDK module-init code runs. In ESM, static imports are evaluated before inline
+// code, so the suppressor must live in a separate module imported ahead of the
+// SDK modules that trigger the "@parity/product-sdk-logger" localStorage warning.
+import "../dist/suppress-localstorage-warning.js";
+
 import { deploy, DEFAULT_BULLETIN_RPC, DEFAULT_POOL_SIZE, NonRetryableError, EXIT_CODE_NO_RETRY, isConnectionError, isBenignTeardownError, unpublish } from "../dist/deploy.js";
 import { VERSION, setDeployAttribute, captureWarning, closeTelemetry, setRunStateActive, markRelaunchOomHintShown } from "../dist/telemetry.js";
 import { handleFailedDeploy, handlePreflightVersionCheck, fetchVersionInfo, preReleaseWarning, checkNodeVersion } from "../dist/version-check.js";
@@ -7,16 +13,7 @@ import { setDeployContext, installLogCapture, buildCliFlagsSummary } from "../di
 import { loadRunState, writeRunState, shouldSkipStaleWarning, shouldShowOomHint, probablyOomRssMb } from "../dist/run-state.js";
 import { loadEnvironments, listEnvironments, formatEnvironmentTable, DEFAULT_ENV_ID } from "../dist/environments.js";
 import * as fs from "fs";
-
-// Suppress "@parity/product-sdk-logger" localStorage warning in Node.js v22+.
-// The logger tries to read log-level config from localStorage which doesn't exist
-// in Node.js — it emits a NoSuchNativeMethod warning we cannot fix upstream.
-const _origEmitWarning = process.emitWarning.bind(process);
-process.emitWarning = (warning, ...rest) => {
-  const msg = (typeof warning === "string" ? warning : warning?.message ?? String(warning)).toLowerCase();
-  if (msg.includes("localstorage") || msg.includes("local storage")) return;
-  _origEmitWarning(warning, ...rest);
-};
+import * as readline from "readline";
 
 // Install early so anything printed during flag parsing / preflight is
 // available to the bug-report log tail.
@@ -477,6 +474,41 @@ try {
     publish: flags.publish,
     failOnPublishError: flags.failOnPublishError,
     transferToSignedInUser: !flags.noTransferToSignedinUser,
+    // Human-first phone signing hooks (spec: 2026-06-13-human-first-phone-signing-design).
+    onPhoneSignaturePlan: (steps) => {
+      if (steps.length === 1) {
+        console.log(`\nHave your phone ready — 1 signature needed (${steps[0].toLowerCase()})`);
+      } else if (steps.length > 1) {
+        const display = steps.flatMap((s, i) =>
+          s === "Register" && steps[i - 1] === "Commitment" ? ["(wait)", s] : [s]
+        );
+        console.log(`\nHave your phone ready — ${steps.length} signatures needed`);
+        console.log(`   ${display.map(s => s.toLowerCase()).join(" · ")}`);
+      }
+    },
+    confirmPhoneReady: ({ label, attempt }) => new Promise((resolve, reject) => {
+      if (attempt >= 2) {
+        console.log(`\n   Re-sign needed (attempt ${attempt}) — approve on your phone, then press Y to continue (Ctrl-C to abort).`);
+      } else {
+        console.log(`\n   Check your phone → ${label}`);
+        console.log(`   Press Y when ready (Ctrl-C to abort):`);
+      }
+      const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+      let settled = false;
+      const settle = (fn) => { if (!settled) { settled = true; rl.close(); fn(); } };
+      rl.on("close", () => settle(reject.bind(null, new Error("aborted by user"))));
+      const ask = () => {
+        rl.question("   > ", (line) => {
+          const answer = line.trim().toLowerCase();
+          if (answer === "y" || answer === "") {
+            settle(resolve);
+          } else {
+            ask();
+          }
+        });
+      };
+      ask();
+    }),
   });
 
   const output = process.env.GITHUB_OUTPUT;

package/dist/auth-config.js

@@ -9,10 +9,10 @@ import {
   getPeopleChainEndpoints,
   hasPersistedSession,
   resolveBulletinEndpoints
-} from "./chunk-X2BEJT4V.js";
+} from "./chunk-MU75RB7Z.js";
 import "./chunk-TSPERKUS.js";
-import "./chunk-D3NJNDEW.js";
-import "./chunk-XQTDSVJG.js";
+import "./chunk-HXN2HJMZ.js";
+import "./chunk-AR5IUHCM.js";
 import "./chunk-QRKI6MMK.js";
 import "./chunk-ZOC4GITL.js";
 export {

package/dist/bug-report.js

@@ -9,10 +9,10 @@ import {
   offerBugReport,
   scrubSecrets,
   setDeployContext
-} from "./chunk-RBTRQH32.js";
-import "./chunk-5LAKX4AB.js";
-import "./chunk-D3NJNDEW.js";
-import "./chunk-XQTDSVJG.js";
+} from "./chunk-WCEPEDZA.js";
+import "./chunk-2MRHO7I5.js";
+import "./chunk-HXN2HJMZ.js";
+import "./chunk-AR5IUHCM.js";
 export {
   buildCliFlagsSummary,
   buildLabels,

package/dist/{chunk-5LAKX4AB.js → chunk-2MRHO7I5.js}

@@ -1,6 +1,6 @@
 import {
   VERSION
-} from "./chunk-D3NJNDEW.js";
+} from "./chunk-HXN2HJMZ.js";
 
 // src/version-check.ts
 import { execSync, execFileSync } from "child_process";

package/dist/{chunk-BKEXG2QF.js → chunk-33T5FHX2.js}

@@ -1,6 +1,6 @@
 import {
   captureWarning
-} from "./chunk-D3NJNDEW.js";
+} from "./chunk-HXN2HJMZ.js";
 
 // src/chunk-probe.ts
 import { Twox128, Blake2128Concat, decAnyMetadata, unifyMetadata } from "@polkadot-api/substrate-bindings";

package/dist/{chunk-QNXFKFJD.js → chunk-422RAWSV.js}

@@ -7,10 +7,10 @@ import {
   resolveDotnsConnectOptions,
   storeDirectory,
   storeFile
-} from "./chunk-VJITD6HN.js";
+} from "./chunk-YVLDMADS.js";
 import {
   DotNS
-} from "./chunk-MDS7T32B.js";
+} from "./chunk-OXENTCOF.js";
 import {
   getPopSelfServeConfig,
   loadEnvironments,

package/dist/{chunk-HN3YZDX4.js → chunk-6YUT276Z.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-GRPLHUYC.js";
 import {
   DOT_DAPP_ID
-} from "./chunk-X2BEJT4V.js";
+} from "./chunk-MU75RB7Z.js";
 
 // src/sss-allowance-cache.ts
 import { mkdir, readFile, writeFile, unlink } from "fs/promises";

package/dist/{chunk-A2JFMAG3.js → chunk-6ZF7V4PG.js}

@@ -4,10 +4,10 @@ import {
 } from "./chunk-5FLTDWWP.js";
 import {
   DOT_PRODUCT_ID
-} from "./chunk-X2BEJT4V.js";
+} from "./chunk-MU75RB7Z.js";
 import {
   DEFAULT_MNEMONIC
-} from "./chunk-MDS7T32B.js";
+} from "./chunk-OXENTCOF.js";
 
 // src/deploy-actors.ts
 var DEFAULT_WORKER_SURI = DEFAULT_MNEMONIC;

package/dist/{chunk-XQTDSVJG.js → chunk-AR5IUHCM.js}

@@ -6,7 +6,7 @@ import * as path from "path";
 // package.json
 var package_default = {
   name: "@parity/product-deploy",
-  version: "0.11.0-rc.0",
+  version: "0.11.0-rc.2",
   private: false,
   repository: {
     type: "git",
@@ -51,7 +51,7 @@ var package_default = {
     "tools/release-retry-wrapper.mjs"
   ],
   scripts: {
-    build: "tsup src/index.ts src/deploy.ts src/dotns.ts src/pool.ts src/telemetry.ts src/memory-report.ts src/merkle.ts src/gh-pages-mirror.ts src/version-check.ts src/bug-report.ts src/run-state.ts src/environments.ts src/errors.ts src/manifest.ts src/chunk-probe.ts src/manifest-embed.ts src/manifest-fetch.ts src/manifest-roundtrip.ts src/incremental-stats.ts src/chunker.ts src/personhood/encoding.ts src/personhood/hashing.ts src/personhood/constants.ts src/personhood/member-key.ts src/personhood/people-client.ts src/personhood/proof-validity.ts src/personhood/reprove.ts src/personhood/bind-personal-id.ts src/personhood/claim-pgas.ts src/personhood/bind-paid-alias.ts src/personhood/bootstrap.ts src/personhood/chain-prereqs.ts src/manifest/types.ts src/manifest/schema.ts src/manifest/byte-budget.ts src/manifest/config-load.ts src/manifest/publish.ts src/auth/index.ts src/auth/vendor/index.ts src/auth/vendor/ui/index.ts src/auth-config.ts src/commands/login.ts src/commands/logout.ts src/commands/whoami.ts src/commands/transfer.ts src/storage-signer.ts src/spinner.ts src/sss-allowance.ts src/sss-allowance-cache.ts src/deploy-actors.ts --format esm --dts --clean --target node22",
+    build: "tsup src/suppress-localstorage-warning.ts src/index.ts src/deploy.ts src/dotns.ts src/pool.ts src/telemetry.ts src/memory-report.ts src/merkle.ts src/gh-pages-mirror.ts src/version-check.ts src/bug-report.ts src/run-state.ts src/environments.ts src/errors.ts src/manifest.ts src/chunk-probe.ts src/manifest-embed.ts src/manifest-fetch.ts src/manifest-roundtrip.ts src/incremental-stats.ts src/chunker.ts src/personhood/encoding.ts src/personhood/hashing.ts src/personhood/constants.ts src/personhood/member-key.ts src/personhood/people-client.ts src/personhood/proof-validity.ts src/personhood/reprove.ts src/personhood/bind-personal-id.ts src/personhood/claim-pgas.ts src/personhood/bind-paid-alias.ts src/personhood/bootstrap.ts src/personhood/chain-prereqs.ts src/manifest/types.ts src/manifest/schema.ts src/manifest/byte-budget.ts src/manifest/config-load.ts src/manifest/publish.ts src/auth/index.ts src/auth/vendor/index.ts src/auth/vendor/ui/index.ts src/auth-config.ts src/commands/login.ts src/commands/logout.ts src/commands/whoami.ts src/commands/transfer.ts src/storage-signer.ts src/spinner.ts src/sss-allowance.ts src/sss-allowance-cache.ts src/deploy-actors.ts --format esm --dts --clean --target node22",
     "refresh-environments": "node scripts/refresh-environments.mjs",
     postinstall: "patch-package || true",
     prepare: "npm run build",

package/dist/{chunk-D3NJNDEW.js → chunk-HXN2HJMZ.js}

@@ -1,7 +1,7 @@
 import {
   package_default,
   writeRunState
-} from "./chunk-XQTDSVJG.js";
+} from "./chunk-AR5IUHCM.js";
 
 // src/memory-report.ts
 import * as fs2 from "fs";

package/dist/{chunk-X2BEJT4V.js → chunk-MU75RB7Z.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-TSPERKUS.js";
 import {
   VERSION
-} from "./chunk-D3NJNDEW.js";
+} from "./chunk-HXN2HJMZ.js";
 import {
   loadEnvironments
 } from "./chunk-QRKI6MMK.js";

package/dist/{chunk-MDS7T32B.js → chunk-OXENTCOF.js}

@@ -11,7 +11,7 @@ import {
   setDeploySentryTag,
   truncateAddress,
   withSpan
-} from "./chunk-D3NJNDEW.js";
+} from "./chunk-HXN2HJMZ.js";
 import {
   validateContractAddresses
 } from "./chunk-QRKI6MMK.js";
@@ -988,6 +988,11 @@ var DotNS = class {
   _popSelfServe = null;
   _registerStorageDeposit = MINIMUM_REGISTER_STORAGE_DEPOSIT;
   _onPhoneSigningRequired = void 0;
+  _confirmPhoneReady = void 0;
+  /** Total phone-signature count for this DotNS session (drives the `total` field passed to confirmPhoneReady). */
+  _phoneSignatureTotal = 0;
+  /** Running attempt counter per label for re-sign detection. Reset at connect/disconnect. */
+  _phoneSignatureAttempts = /* @__PURE__ */ new Map();
   // Test-only seam: consumed once by classifyAliasAccountState() then cleared.
   // Mirrors the __setDeployRootSpanForTest / __setSentryForTest pattern.
   _classifyOverrideForTest = null;
@@ -1038,6 +1043,9 @@ var DotNS = class {
     if (options.onPhoneSigningRequired !== void 0) {
       this._onPhoneSigningRequired = options.onPhoneSigningRequired;
     }
+    if (options.confirmPhoneReady !== void 0) {
+      this._confirmPhoneReady = options.confirmPhoneReady;
+    }
     const rpc = options.rpc || process.env.DOTNS_RPC || this.assetHubEndpoints[0];
     this.rpc = rpc;
     this._usesExternalSigner = Boolean(options.signer && options.signerAddress);
@@ -1458,11 +1466,14 @@ var DotNS = class {
     return decodeFunctionResult({ abi: contractAbi, functionName, data: rawData });
   }
   async contractTransaction(contractAddress, value, contractAbi, functionName, args = [], statusCallback = () => {
-  }, { useNoncePolling, verifyEffect, feeAsset } = {}) {
+  }, { useNoncePolling, verifyEffect, feeAsset, phoneLabel } = {}) {
     this.ensureConnected();
     if (!this.clientWrapper) throw new Error("contractTransaction: polkadot-api client not available");
     const encodedCallData = encodeFunctionData({ abi: contractAbi, functionName, args });
     const rpcs = this.rpc ? [this.rpc, ...this.assetHubEndpoints.filter((ep) => ep !== this.rpc)] : this.assetHubEndpoints;
+    if (phoneLabel !== void 0) {
+      await this._awaitPhoneReady(phoneLabel);
+    }
     return await withTimeout(
       this.clientWrapper.submitTransaction(contractAddress, value, encodedCallData, this.substrateAddress, this.signer, statusCallback, { rpcs, useNoncePolling, functionName, args, contracts: this._contracts, verifyEffect, feeAsset }),
       OPERATION_TIMEOUT_MS,
@@ -1735,8 +1746,7 @@ var DotNS = class {
       };
       console.log(`
    Linking content...`);
-      this._onPhoneSigningRequired?.("Link content");
-      const txRes = await this.contractTransaction(this._contracts.DOTNS_CONTENT_RESOLVER, 0n, DOTNS_CONTENT_RESOLVER_ABI, "setContenthash", [node, contenthashHex], (s) => console.log(`      ${s}`), { useNoncePolling: true, verifyEffect, feeAsset: opts.feeAsset });
+      const txRes = await this.contractTransaction(this._contracts.DOTNS_CONTENT_RESOLVER, 0n, DOTNS_CONTENT_RESOLVER_ABI, "setContenthash", [node, contenthashHex], (s) => console.log(`      ${s}`), { useNoncePolling: true, verifyEffect, feeAsset: opts.feeAsset, phoneLabel: "Link content" });
       const finalOnChain = (await this.getContenthash(domainName) || "0x").toLowerCase();
       if (finalOnChain !== expected) {
         throw new Error(
@@ -1963,8 +1973,7 @@ var DotNS = class {
         }
       };
       try {
-        this._onPhoneSigningRequired?.("Publish to registry");
-        const txRes = await this.contractTransaction(publisher, 0n, PUBLISHER_ABI, "publish", [label], (s) => console.log(`      ${s}`), { useNoncePolling: true, verifyEffect });
+        const txRes = await this.contractTransaction(publisher, 0n, PUBLISHER_ABI, "publish", [label], (s) => console.log(`      ${s}`), { useNoncePolling: true, verifyEffect, phoneLabel: "Publish to registry" });
         const finalPublished = await withTimeout(
           this.contractCall(publisher, PUBLISHER_ABI, "isPublished", [labelhash]),
           3e4,
@@ -2108,8 +2117,7 @@ var DotNS = class {
     this.ensureConnected();
     console.log(`
    Submitting commitment...`);
-    this._onPhoneSigningRequired?.("Commitment");
-    const commitTxRes = await this.contractTransaction(this._contracts.DOTNS_REGISTRAR_CONTROLLER, 0n, DOTNS_REGISTRAR_CONTROLLER_ABI, "commit", [commitment], (s) => console.log(`      ${s}`));
+    const commitTxRes = await this.contractTransaction(this._contracts.DOTNS_REGISTRAR_CONTROLLER, 0n, DOTNS_REGISTRAR_CONTROLLER_ABI, "commit", [commitment], (s) => console.log(`      ${s}`), { phoneLabel: "Commitment" });
     logTxResolution(commitTxRes);
     console.log(`   Committed at: ${(/* @__PURE__ */ new Date()).toISOString()}`);
   }
@@ -2202,8 +2210,7 @@ var DotNS = class {
     setDeployAttribute("deploy.payment_wei", priceWei.toString());
     console.log(`   Oracle price: ${formatEther(priceWei)} PAS`);
     console.log(`   Paying: ${formatEther(bufferedPaymentWei)} PAS`);
-    this._onPhoneSigningRequired?.("Register");
-    const registerTxRes = await this.contractTransaction(this._contracts.DOTNS_REGISTRAR_CONTROLLER, bufferedPaymentNative, DOTNS_REGISTRAR_CONTROLLER_ABI, "register", [registration], (s) => console.log(`      ${s}`));
+    const registerTxRes = await this.contractTransaction(this._contracts.DOTNS_REGISTRAR_CONTROLLER, bufferedPaymentNative, DOTNS_REGISTRAR_CONTROLLER_ABI, "register", [registration], (s) => console.log(`      ${s}`), { phoneLabel: "Register" });
     logTxResolution(registerTxRes);
     if (registerTxRes.kind === TX_KIND_HASH) {
       setDeployAttribute("deploy.register.tx", registerTxRes.hash);
@@ -2651,6 +2658,37 @@ var DotNS = class {
     const envId = this._environmentId ?? "paseo-next-v2";
     return runBootstrap({ mnemonic, environmentId: envId });
   }
+  /**
+   * Set the expected total number of phone signatures for this DotNS session.
+   * Called from deploy() at preflight after computePhoneSigningSteps so that
+   * confirmPhoneReady receives the correct `total`.
+   */
+  setPhoneSignatureTotal(total) {
+    this._phoneSignatureTotal = total;
+  }
+  /**
+   * Internal: await the human-ready gate then fire the "check your phone"
+   * notification. Must be called OUTSIDE any withTimeout — the human wait is
+   * unbounded and must never be inside the machine timeout.
+   *
+   * Behaviour:
+   * - confirmPhoneReady provided → await it (counts re-signs via attempt map).
+   * - not provided → proceed without a gate (opt-in only; an in-process
+   *   external signer, e.g. injected PolkadotSigner or mnemonic, needs no
+   *   phone gate — _usesExternalSigner alone cannot distinguish phone from
+   *   in-process).
+   * After the gate resolves, fires onPhoneSigningRequired (the "check your
+   * phone" notification) so the user knows the request is now being sent.
+   */
+  async _awaitPhoneReady(label) {
+    if (!this._usesExternalSigner) return;
+    const attempt = (this._phoneSignatureAttempts.get(label) ?? 0) + 1;
+    this._phoneSignatureAttempts.set(label, attempt);
+    if (this._confirmPhoneReady) {
+      await this._confirmPhoneReady({ label, attempt, total: this._phoneSignatureTotal });
+    }
+    this._onPhoneSigningRequired?.(label);
+  }
   disconnect() {
     if (this.client) {
       this.client.destroy();
@@ -2660,6 +2698,9 @@ var DotNS = class {
     }
     this._usesExternalSigner = false;
     this._onPhoneSigningRequired = void 0;
+    this._confirmPhoneReady = void 0;
+    this._phoneSignatureTotal = 0;
+    this._phoneSignatureAttempts.clear();
   }
 };
 var dotns = new DotNS();

package/dist/{chunk-RBTRQH32.js → chunk-WCEPEDZA.js}

@@ -2,15 +2,15 @@ import {
   classifyErrorArea,
   isInteractive,
   promptYesNo
-} from "./chunk-5LAKX4AB.js";
+} from "./chunk-2MRHO7I5.js";
 import {
   VERSION,
   getCurrentSentryTraceId,
   resolveIssueRepoSlug
-} from "./chunk-D3NJNDEW.js";
+} from "./chunk-HXN2HJMZ.js";
 import {
   package_default
-} from "./chunk-XQTDSVJG.js";
+} from "./chunk-AR5IUHCM.js";
 
 // src/bug-report.ts
 import { execSync, execFileSync } from "child_process";

package/dist/{chunk-VJITD6HN.js → chunk-YVLDMADS.js}

@@ -1,6 +1,6 @@
 import {
   preflightSssAllowance
-} from "./chunk-HN3YZDX4.js";
+} from "./chunk-6YUT276Z.js";
 import {
   statementSigningAccount
 } from "./chunk-GRPLHUYC.js";
@@ -31,16 +31,16 @@ import {
 } from "./chunk-S7EM5VMW.js";
 import {
   setDeployContext
-} from "./chunk-RBTRQH32.js";
+} from "./chunk-WCEPEDZA.js";
 import {
   probeChunks
-} from "./chunk-BKEXG2QF.js";
+} from "./chunk-33T5FHX2.js";
 import {
   packSection
 } from "./chunk-C2TS5MER.js";
 import {
   resolveStorageSigner
-} from "./chunk-A2JFMAG3.js";
+} from "./chunk-6ZF7V4PG.js";
 import {
   createSlotAccountSigner,
   requestResourceAllocation
@@ -49,7 +49,7 @@ import {
   STALE_SESSION_MESSAGE,
   getPeopleChainEndpoints,
   hasPersistedSession
-} from "./chunk-X2BEJT4V.js";
+} from "./chunk-MU75RB7Z.js";
 import {
   CLI_NAME
 } from "./chunk-TSPERKUS.js";
@@ -62,7 +62,7 @@ import {
   parseDomainName,
   popStatusName,
   verifyNonceAdvanced
-} from "./chunk-MDS7T32B.js";
+} from "./chunk-OXENTCOF.js";
 import {
   derivePoolAccounts,
   detectTestnet,
@@ -84,7 +84,7 @@ import {
   truncateAddress,
   withDeploySpan,
   withSpan
-} from "./chunk-D3NJNDEW.js";
+} from "./chunk-HXN2HJMZ.js";
 import {
   DEFAULT_ENV_ID,
   getPopSelfServeConfig,
@@ -2217,17 +2217,7 @@ async function deploy(content, domainName = null, options = {}) {
         }
         if (phoneSignerActive) {
           const steps = computePhoneSigningSteps(dotnsPreflight, preflightPublishNeeded);
-          if (steps.length === 1) {
-            console.log(`
-Have your phone ready \u2014 1 signature needed (${steps[0].toLowerCase()})`);
-          } else if (steps.length > 1) {
-            const display = steps.flatMap(
-              (s, i) => s === "Register" && steps[i - 1] === "Commitment" ? ["(wait)", s] : [s]
-            );
-            console.log(`
-Have your phone ready \u2014 ${steps.length} signatures needed`);
-            console.log(`   ${display.map((s) => s.toLowerCase()).join(" \xB7 ")}`);
-          }
+          options.onPhoneSignaturePlan?.(steps);
         }
         provider = await reconnect();
         const providerWithReconnect = { ...provider, reconnect };
@@ -2436,13 +2426,10 @@ Have your phone ready \u2014 ${steps.length} signatures needed`);
             };
             await ownerDotns.connect({
               ...resolveDotnsConnectOptions({ ...options, signer: owner.signer, signerAddress: owner.address }, envAssetHub, envAutoAccountMapping, envContracts, envNativeToEthRatio, envId, envPopSelfServe, envRegisterStorageDeposit),
-              onPhoneSigningRequired: (label) => console.log(`
-   Check your phone \u2192 ${label}`)
+              confirmPhoneReady: options.confirmPhoneReady
             });
             const willPublish = !!(options.publish && parsed && preflightPublishNeeded !== false);
-            console.log(willPublish ? `
-Have your phone ready \u2014 2 signatures needed (link content \xB7 publish)` : `
-Have your phone ready \u2014 1 signature needed (link content)`);
+            ownerDotns.setPhoneSignatureTotal(willPublish ? 2 : 1);
             const contenthashHex2 = `0x${encodeContenthash(cid)}`;
             await ownerDotns.setContenthash(name, contenthashHex2, { feeAsset: "pgas" });
             if (willPublish) await publish(ownerDotns, parsed, options.failOnPublishError);
@@ -2451,11 +2438,11 @@ Have your phone ready \u2014 1 signature needed (link content)`);
           const dotns = new DotNS();
           await dotns.connect({
             ...resolveDotnsConnectOptions(options, envAssetHub, envAutoAccountMapping, envContracts, envNativeToEthRatio, envId, envPopSelfServe, envRegisterStorageDeposit),
-            // Per-step "check your phone" reminder — only for a phone-backed signer
-            // (see phoneSignerActive); a transfer-mode local worker signs locally.
-            ...phoneSignerActive ? { onPhoneSigningRequired: (label) => console.log(`
-   Check your phone \u2192 ${label}`) } : {}
+            confirmPhoneReady: options.confirmPhoneReady
           });
+          if (phoneSignerActive) {
+            dotns.setPhoneSignatureTotal(computePhoneSigningSteps(dotnsPreflight, preflightPublishNeeded).length);
+          }
           let registeredFresh = false;
           if (parsed?.isSubdomain) {
             const { owned, owner } = await dotns.checkSubdomainOwnership(parsed.sublabel, parsed.parentLabel);

package/dist/chunk-probe.js

@@ -5,9 +5,9 @@ import {
   _decodeStorageValue,
   _resetProbeSession,
   probeChunks
-} from "./chunk-BKEXG2QF.js";
-import "./chunk-D3NJNDEW.js";
-import "./chunk-XQTDSVJG.js";
+} from "./chunk-33T5FHX2.js";
+import "./chunk-HXN2HJMZ.js";
+import "./chunk-AR5IUHCM.js";
 export {
   ChainProbeCrossValidationError,
   ChainProbeMetadataError,

package/dist/commands/login.js

@@ -3,10 +3,10 @@ import {
 } from "../chunk-J7CYVTAW.js";
 import {
   waitForBulletinAuthorization
-} from "../chunk-VJITD6HN.js";
+} from "../chunk-YVLDMADS.js";
 import {
   preflightSssAllowance
-} from "../chunk-HN3YZDX4.js";
+} from "../chunk-6YUT276Z.js";
 import {
   statementSigningAccount
 } from "../chunk-GRPLHUYC.js";
@@ -15,11 +15,11 @@ import "../chunk-IW3X2MJF.js";
 import "../chunk-KOSF5FDO.js";
 import "../chunk-J3NIXHZZ.js";
 import "../chunk-S7EM5VMW.js";
-import "../chunk-RBTRQH32.js";
-import "../chunk-5LAKX4AB.js";
-import "../chunk-BKEXG2QF.js";
+import "../chunk-WCEPEDZA.js";
+import "../chunk-2MRHO7I5.js";
+import "../chunk-33T5FHX2.js";
 import "../chunk-C2TS5MER.js";
-import "../chunk-A2JFMAG3.js";
+import "../chunk-6ZF7V4PG.js";
 import "../chunk-JQKKMUCT.js";
 import {
   BULLETIN_RESOURCE,
@@ -36,15 +36,15 @@ import {
   getAuthClient,
   getPeopleChainEndpoints,
   resolveBulletinEndpoints
-} from "../chunk-X2BEJT4V.js";
+} from "../chunk-MU75RB7Z.js";
 import {
   CLI_NAME
 } from "../chunk-TSPERKUS.js";
-import "../chunk-MDS7T32B.js";
+import "../chunk-OXENTCOF.js";
 import "../chunk-SI2ZUOYD.js";
 import "../chunk-4IUTMHVB.js";
-import "../chunk-D3NJNDEW.js";
-import "../chunk-XQTDSVJG.js";
+import "../chunk-HXN2HJMZ.js";
+import "../chunk-AR5IUHCM.js";
 import {
   loadEnvironments
 } from "../chunk-QRKI6MMK.js";

package/dist/commands/logout.js

@@ -1,6 +1,6 @@
 import {
   clearSssAllowanceCache
-} from "../chunk-HN3YZDX4.js";
+} from "../chunk-6YUT276Z.js";
 import "../chunk-GRPLHUYC.js";
 import "../chunk-JQKKMUCT.js";
 import "../chunk-5FLTDWWP.js";
@@ -9,10 +9,10 @@ import {
 } from "../chunk-RIRDBSBG.js";
 import {
   getAuthClient
-} from "../chunk-X2BEJT4V.js";
+} from "../chunk-MU75RB7Z.js";
 import "../chunk-TSPERKUS.js";
-import "../chunk-D3NJNDEW.js";
-import "../chunk-XQTDSVJG.js";
+import "../chunk-HXN2HJMZ.js";
+import "../chunk-AR5IUHCM.js";
 import "../chunk-QRKI6MMK.js";
 import "../chunk-ZOC4GITL.js";
 

package/dist/commands/transfer.js

@@ -4,11 +4,11 @@ import {
 import {
   DEFAULT_MNEMONIC,
   DotNS
-} from "../chunk-MDS7T32B.js";
+} from "../chunk-OXENTCOF.js";
 import "../chunk-SI2ZUOYD.js";
 import "../chunk-4IUTMHVB.js";
-import "../chunk-D3NJNDEW.js";
-import "../chunk-XQTDSVJG.js";
+import "../chunk-HXN2HJMZ.js";
+import "../chunk-AR5IUHCM.js";
 import {
   getPopSelfServeConfig,
   loadEnvironments,

package/dist/commands/whoami.js

@@ -2,12 +2,12 @@ import {
   STALE_SESSION_MESSAGE,
   getAuthClient,
   hasPersistedSession
-} from "../chunk-X2BEJT4V.js";
+} from "../chunk-MU75RB7Z.js";
 import {
   CLI_NAME
 } from "../chunk-TSPERKUS.js";
-import "../chunk-D3NJNDEW.js";
-import "../chunk-XQTDSVJG.js";
+import "../chunk-HXN2HJMZ.js";
+import "../chunk-AR5IUHCM.js";
 import "../chunk-QRKI6MMK.js";
 import "../chunk-ZOC4GITL.js";
 

package/dist/deploy-actors.js

@@ -2,17 +2,17 @@ import {
   MainnetDefaultWorkerError,
   resolveDeployActors,
   resolveStorageSigner
-} from "./chunk-A2JFMAG3.js";
+} from "./chunk-6ZF7V4PG.js";
 import "./chunk-JQKKMUCT.js";
 import "./chunk-5FLTDWWP.js";
 import "./chunk-RIRDBSBG.js";
-import "./chunk-X2BEJT4V.js";
+import "./chunk-MU75RB7Z.js";
 import "./chunk-TSPERKUS.js";
-import "./chunk-MDS7T32B.js";
+import "./chunk-OXENTCOF.js";
 import "./chunk-SI2ZUOYD.js";
 import "./chunk-4IUTMHVB.js";
-import "./chunk-D3NJNDEW.js";
-import "./chunk-XQTDSVJG.js";
+import "./chunk-HXN2HJMZ.js";
+import "./chunk-AR5IUHCM.js";
 import "./chunk-QRKI6MMK.js";
 import "./chunk-ZOC4GITL.js";
 export {

package/dist/deploy.d.ts

@@ -1,9 +1,15 @@
 import { WsEvent } from 'polkadot-api/ws';
 import { CID } from 'multiformats/cid';
 import { ManifestFileEntry } from './manifest.js';
+import { PhoneSignatureStep } from './dotns.js';
 import { PopSelfServeConfig } from './environments.js';
 import { PolkadotSigner } from 'polkadot-api';
 export { EXIT_CODE_NO_RETRY, NonRetryableError } from './errors.js';
+import './personhood/bootstrap.js';
+import './personhood/bind-personal-id.js';
+import './personhood/claim-pgas.js';
+import './personhood/bind-paid-alias.js';
+import './personhood/chain-prereqs.js';
 
 interface DeployResult {
     domainName: string;
@@ -348,6 +354,25 @@ interface DeployOptions {
      * CLI: --contract <KEY>=<0xADDRESS> (repeatable).
      */
     contracts?: Record<string, string>;
+    /**
+     * Plan of phone signatures this deploy will need. Fired once, at preflight,
+     * BEFORE storage. Notification only; used by the CLI bin to print the
+     * "Have your phone ready" banner up front.
+     */
+    onPhoneSignaturePlan?: (steps: PhoneSignatureStep[]) => void;
+    /**
+     * Human-ready gate. Awaited immediately BEFORE each phone signature request
+     * is sent. Resolve when the human is at their phone and ready; reject/throw
+     * to abort. The per-signature operation timeout starts only AFTER this
+     * resolves. `attempt` >= 2 means a re-sign.
+     * Absent + non-TTY → fail fast (NonRetryableError).
+     * Absent + TTY → CLI bin must supply the hook; core does not readline.
+     */
+    confirmPhoneReady?: (ctx: {
+        label: string;
+        attempt: number;
+        total: number;
+    }) => Promise<void>;
 }
 declare function resolveDotnsConnectOptions(options: Pick<DeployOptions, "mnemonic" | "derivationPath" | "signer" | "signerAddress">, assetHubEndpoints?: string[], autoAccountMapping?: boolean, contracts?: Record<string, string>, nativeToEthRatio?: bigint, environmentId?: string, popSelfServe?: PopSelfServeConfig | null, registerStorageDeposit?: bigint): {
     signer?: PolkadotSigner;
@@ -431,4 +456,4 @@ declare function computePhoneSigningSteps(dotnsPreflight: {
     needsPopUpgrade: boolean;
 } | null, publishNeeded: boolean): string[];
 
-export { BLAKE2B_256_MULTIHASH_CODE, BULLETIN_ENDPOINTS, type BitswapErrorVariant, type BitswapProbeResult, CHUNK_MORTALITY_PERIOD, DEFAULT_BULLETIN_RPC, DEFAULT_POOL_SIZE, type DeployContent, type DeployOptions, type DeployResult, ENCRYPT_KEY_LEN, ENCRYPT_MAGIC, ENCRYPT_NONCE_LEN, ENCRYPT_PBKDF2_ITERATIONS, ENCRYPT_SALT_LEN, ENCRYPT_TAG_LEN, SHA256_MULTIHASH_CODE, type SizeDecision, type StoreDirectoryOptions, WS_HEARTBEAT_TIMEOUT_MS, __assignDenseNoncesForTest, __selectStorageProviderModeForTest, applyManifestFetchAttributes, assertSubdomainOwnerMatchesSigner, browserUrlFor, buildFilesMap, checkDeploySize, chooseSignerInput, chunk, computePhoneSigningSteps, computeStorageCid, createCID, deploy, deriveRootSigner, detectFramework, encodeContenthash, encryptContent, estimateUploadBytes, formatStorageSignerLine, friendlyChainError, hasIPFS, interpretBitswapResult, isBenignTeardownError, isConnectionError, isPhoneSignerActive, makeBulletinStatusHandler, merkleize, probeP2pRetrieval, resolveDotnsConnectOptions, resolveReproducibleTimestamp, retryBudgetExhausted, setWsHaltCallback, shouldHandoverName, storeChunkedContent, storeDirectory, storeDirectoryV2, storeFile, unpublish };
+export { BLAKE2B_256_MULTIHASH_CODE, BULLETIN_ENDPOINTS, type BitswapErrorVariant, type BitswapProbeResult, CHUNK_MORTALITY_PERIOD, DEFAULT_BULLETIN_RPC, DEFAULT_POOL_SIZE, type DeployContent, type DeployOptions, type DeployResult, ENCRYPT_KEY_LEN, ENCRYPT_MAGIC, ENCRYPT_NONCE_LEN, ENCRYPT_PBKDF2_ITERATIONS, ENCRYPT_SALT_LEN, ENCRYPT_TAG_LEN, PhoneSignatureStep, SHA256_MULTIHASH_CODE, type SizeDecision, type StoreDirectoryOptions, WS_HEARTBEAT_TIMEOUT_MS, __assignDenseNoncesForTest, __selectStorageProviderModeForTest, applyManifestFetchAttributes, assertSubdomainOwnerMatchesSigner, browserUrlFor, buildFilesMap, checkDeploySize, chooseSignerInput, chunk, computePhoneSigningSteps, computeStorageCid, createCID, deploy, deriveRootSigner, detectFramework, encodeContenthash, encryptContent, estimateUploadBytes, formatStorageSignerLine, friendlyChainError, hasIPFS, interpretBitswapResult, isBenignTeardownError, isConnectionError, isPhoneSignerActive, makeBulletinStatusHandler, merkleize, probeP2pRetrieval, resolveDotnsConnectOptions, resolveReproducibleTimestamp, retryBudgetExhausted, setWsHaltCallback, shouldHandoverName, storeChunkedContent, storeDirectory, storeDirectoryV2, storeFile, unpublish };

package/dist/deploy.js

@@ -50,29 +50,29 @@ import {
   storeDirectoryV2,
   storeFile,
   unpublish
-} from "./chunk-VJITD6HN.js";
-import "./chunk-HN3YZDX4.js";
+} from "./chunk-YVLDMADS.js";
+import "./chunk-6YUT276Z.js";
 import "./chunk-GRPLHUYC.js";
 import "./chunk-HOTQDYHD.js";
 import "./chunk-IW3X2MJF.js";
 import "./chunk-KOSF5FDO.js";
 import "./chunk-J3NIXHZZ.js";
 import "./chunk-S7EM5VMW.js";
-import "./chunk-RBTRQH32.js";
-import "./chunk-5LAKX4AB.js";
-import "./chunk-BKEXG2QF.js";
+import "./chunk-WCEPEDZA.js";
+import "./chunk-2MRHO7I5.js";
+import "./chunk-33T5FHX2.js";
 import "./chunk-C2TS5MER.js";
-import "./chunk-A2JFMAG3.js";
+import "./chunk-6ZF7V4PG.js";
 import "./chunk-JQKKMUCT.js";
 import "./chunk-5FLTDWWP.js";
 import "./chunk-RIRDBSBG.js";
-import "./chunk-X2BEJT4V.js";
+import "./chunk-MU75RB7Z.js";
 import "./chunk-TSPERKUS.js";
-import "./chunk-MDS7T32B.js";
+import "./chunk-OXENTCOF.js";
 import "./chunk-SI2ZUOYD.js";
 import "./chunk-4IUTMHVB.js";
-import "./chunk-D3NJNDEW.js";
-import "./chunk-XQTDSVJG.js";
+import "./chunk-HXN2HJMZ.js";
+import "./chunk-AR5IUHCM.js";
 import "./chunk-QRKI6MMK.js";
 import {
   EXIT_CODE_NO_RETRY,

package/dist/dotns.d.ts

@@ -6,6 +6,8 @@ import './personhood/claim-pgas.js';
 import './personhood/bind-paid-alias.js';
 import './personhood/chain-prereqs.js';
 
+/** One step in the phone-signature plan fired at preflight. */
+type PhoneSignatureStep = "Commitment" | "Register" | "Link content" | "Publish to registry";
 interface DotNSConnectOptions {
     rpc?: string;
     keyUri?: string;
@@ -36,6 +38,17 @@ interface DotNSConnectOptions {
      * is active; pool/mnemonic paths leave this unset.
      */
     onPhoneSigningRequired?: (label: string) => void;
+    /**
+     * Human-ready gate. Awaited immediately BEFORE each phone signature request
+     * is sent. Resolve when the human is at their phone and ready; reject/throw
+     * to abort. The per-signature operation timeout starts only AFTER this
+     * resolves. `attempt` >= 2 means a re-sign (principle 4).
+     */
+    confirmPhoneReady?: (ctx: {
+        label: string;
+        attempt: number;
+        total: number;
+    }) => Promise<void>;
 }
 interface OwnershipResult {
     owned: boolean;
@@ -416,6 +429,11 @@ declare class DotNS {
     private _popSelfServe;
     private _registerStorageDeposit;
     private _onPhoneSigningRequired;
+    private _confirmPhoneReady;
+    /** Total phone-signature count for this DotNS session (drives the `total` field passed to confirmPhoneReady). */
+    private _phoneSignatureTotal;
+    /** Running attempt counter per label for re-sign detection. Reset at connect/disconnect. */
+    private _phoneSignatureAttempts;
     private _classifyOverrideForTest;
     /** Test-only: inject a fixed classifyAliasAccountState return value for the next call. Consumed once. */
     __setClassifyOverrideForTest(state: AliasAccountState): void;
@@ -468,10 +486,11 @@ declare class DotNS {
      * for read paths that must always return a value.
      */
     contractCallNullable(contractAddress: string, contractAbi: readonly any[], functionName: string, args?: any[]): Promise<any | null>;
-    contractTransaction(contractAddress: string, value: bigint, contractAbi: readonly any[], functionName: string, args?: any[], statusCallback?: (status: string) => void, { useNoncePolling, verifyEffect, feeAsset }?: {
+    contractTransaction(contractAddress: string, value: bigint, contractAbi: readonly any[], functionName: string, args?: any[], statusCallback?: (status: string) => void, { useNoncePolling, verifyEffect, feeAsset, phoneLabel }?: {
         useNoncePolling?: boolean;
         verifyEffect?: () => Promise<boolean>;
         feeAsset?: "pgas";
+        phoneLabel?: string;
     }): Promise<TxResolution>;
     checkOwnership(label: string, ownerAddress?: string | null): Promise<OwnershipResult>;
     /** Live transfer-fee quote. transferFloor is a pure PopRules view — it
@@ -598,8 +617,29 @@ declare class DotNS {
      * personhood faucet (https://sudo.personhood.dev/personhood-faucet).
      */
     bootstrap(mnemonic: string): Promise<BootstrapResult>;
+    /**
+     * Set the expected total number of phone signatures for this DotNS session.
+     * Called from deploy() at preflight after computePhoneSigningSteps so that
+     * confirmPhoneReady receives the correct `total`.
+     */
+    setPhoneSignatureTotal(total: number): void;
+    /**
+     * Internal: await the human-ready gate then fire the "check your phone"
+     * notification. Must be called OUTSIDE any withTimeout — the human wait is
+     * unbounded and must never be inside the machine timeout.
+     *
+     * Behaviour:
+     * - confirmPhoneReady provided → await it (counts re-signs via attempt map).
+     * - not provided → proceed without a gate (opt-in only; an in-process
+     *   external signer, e.g. injected PolkadotSigner or mnemonic, needs no
+     *   phone gate — _usesExternalSigner alone cannot distinguish phone from
+     *   in-process).
+     * After the gate resolves, fires onPhoneSigningRequired (the "check your
+     * phone" notification) so the user knows the request is now being sent.
+     */
+    private _awaitPhoneReady;
     disconnect(): void;
 }
 declare const dotns: DotNS;
 
-export { ATTR_TX_RESOLUTION_KIND, type AliasAccountClassification, type AliasAccountState, CONNECTION_TIMEOUT_MS, CONTRACTS, ContractDryRunRevertError, DECIMALS, DEFAULT_MNEMONIC, DOTNS_TX_MAX_ATTEMPTS, DOT_NODE, DotNS, type DotNSConnectOptions, type DotnsPreflightResult, type DotnsSuccessAction, MINIMUM_REGISTER_STORAGE_DEPOSIT, NATIVE_TO_ETH_RATIO, OPERATION_TIMEOUT_MS, type OwnershipResult, PUBLISHER_ABI, type ParsedDomainName, type PriceValidationResult, ProofOfPersonhoodStatus, PublisherNotSupportedError, RPC_ENDPOINTS, TX_CHAIN_TIME_BUDGET_MS, TX_KIND_HASH, TX_KIND_NONCE_ADVANCED, TX_NO_PROGRESS_MS, TX_TIMEOUT_MS, TX_WALL_CLOCK_CEILING_MS, type TxResolution, WS_HEARTBEAT_TIMEOUT_MS, __formatContractDryRunFailureForTest, bufferedWeiToNative, canRegister, classifyAliasAccountRow, classifyDotnsLabel, classifyTxRetryDecision, computeDomainTokenId, convertToHexString, convertWeiToNative, countTrailingDigits, decodePublisherRevert, dotns, dotnsRetryBackoffMs, feeFloorFor, fetchNonce, fmtPas, formatDispatchError, formatPersonhoodRemediation, formatPopShortfallReason, isCommitmentMature, isCommitmentTimingBarerevert, makeRetryStatusFilter, parseDomainName, parseProofOfPersonhoodStatus, popStatusName, registerDepositWei, sanitizeDomainLabel, shouldRetryTxAttempt, stripTrailingDigits, validateDomainLabel, verifyNonceAdvanced, weiToNative };
+export { ATTR_TX_RESOLUTION_KIND, type AliasAccountClassification, type AliasAccountState, CONNECTION_TIMEOUT_MS, CONTRACTS, ContractDryRunRevertError, DECIMALS, DEFAULT_MNEMONIC, DOTNS_TX_MAX_ATTEMPTS, DOT_NODE, DotNS, type DotNSConnectOptions, type DotnsPreflightResult, type DotnsSuccessAction, MINIMUM_REGISTER_STORAGE_DEPOSIT, NATIVE_TO_ETH_RATIO, OPERATION_TIMEOUT_MS, type OwnershipResult, PUBLISHER_ABI, type ParsedDomainName, type PhoneSignatureStep, type PriceValidationResult, ProofOfPersonhoodStatus, PublisherNotSupportedError, RPC_ENDPOINTS, TX_CHAIN_TIME_BUDGET_MS, TX_KIND_HASH, TX_KIND_NONCE_ADVANCED, TX_NO_PROGRESS_MS, TX_TIMEOUT_MS, TX_WALL_CLOCK_CEILING_MS, type TxResolution, WS_HEARTBEAT_TIMEOUT_MS, __formatContractDryRunFailureForTest, bufferedWeiToNative, canRegister, classifyAliasAccountRow, classifyDotnsLabel, classifyTxRetryDecision, computeDomainTokenId, convertToHexString, convertWeiToNative, countTrailingDigits, decodePublisherRevert, dotns, dotnsRetryBackoffMs, feeFloorFor, fetchNonce, fmtPas, formatDispatchError, formatPersonhoodRemediation, formatPopShortfallReason, isCommitmentMature, isCommitmentTimingBarerevert, makeRetryStatusFilter, parseDomainName, parseProofOfPersonhoodStatus, popStatusName, registerDepositWei, sanitizeDomainLabel, shouldRetryTxAttempt, stripTrailingDigits, validateDomainLabel, verifyNonceAdvanced, weiToNative };

package/dist/dotns.js

@@ -54,11 +54,11 @@ import {
   validateDomainLabel,
   verifyNonceAdvanced,
   weiToNative
-} from "./chunk-MDS7T32B.js";
+} from "./chunk-OXENTCOF.js";
 import "./chunk-SI2ZUOYD.js";
 import "./chunk-4IUTMHVB.js";
-import "./chunk-D3NJNDEW.js";
-import "./chunk-XQTDSVJG.js";
+import "./chunk-HXN2HJMZ.js";
+import "./chunk-AR5IUHCM.js";
 import "./chunk-QRKI6MMK.js";
 import "./chunk-ZOC4GITL.js";
 export {

package/dist/index.js

@@ -4,7 +4,14 @@ import {
 } from "./chunk-362JEZKM.js";
 import {
   publishManifest
-} from "./chunk-QNXFKFJD.js";
+} from "./chunk-422RAWSV.js";
+import {
+  DEFAULT_TEXT_RECORD_BUDGET_BYTES,
+  PLACEHOLDER_CID,
+  assertWithinBudget,
+  getTextRecordBudgetBytes,
+  pessimisticSizePreflight
+} from "./chunk-WIMRJK32.js";
 import {
   validateExecutableManifest,
   validateProductConfig,
@@ -13,19 +20,12 @@ import {
 import {
   defineConfig
 } from "./chunk-GZD2UFLR.js";
-import {
-  DEFAULT_TEXT_RECORD_BUDGET_BYTES,
-  PLACEHOLDER_CID,
-  assertWithinBudget,
-  getTextRecordBudgetBytes,
-  pessimisticSizePreflight
-} from "./chunk-WIMRJK32.js";
 import {
   deploy,
   merkleizeJS,
   merkleizeWithStableOrder
-} from "./chunk-VJITD6HN.js";
-import "./chunk-HN3YZDX4.js";
+} from "./chunk-YVLDMADS.js";
+import "./chunk-6YUT276Z.js";
 import "./chunk-GRPLHUYC.js";
 import "./chunk-HOTQDYHD.js";
 import {
@@ -49,24 +49,24 @@ import {
   isVolatilePath,
   parseManifest
 } from "./chunk-S7EM5VMW.js";
-import "./chunk-RBTRQH32.js";
-import "./chunk-5LAKX4AB.js";
+import "./chunk-WCEPEDZA.js";
+import "./chunk-2MRHO7I5.js";
 import {
   probeChunks
-} from "./chunk-BKEXG2QF.js";
+} from "./chunk-33T5FHX2.js";
 import "./chunk-C2TS5MER.js";
-import "./chunk-A2JFMAG3.js";
+import "./chunk-6ZF7V4PG.js";
 import "./chunk-JQKKMUCT.js";
 import "./chunk-5FLTDWWP.js";
 import "./chunk-RIRDBSBG.js";
-import "./chunk-X2BEJT4V.js";
+import "./chunk-MU75RB7Z.js";
 import "./chunk-TSPERKUS.js";
 import {
   DEFAULT_MNEMONIC,
   DotNS,
   parseDomainName,
   sanitizeDomainLabel
-} from "./chunk-MDS7T32B.js";
+} from "./chunk-OXENTCOF.js";
 import "./chunk-SI2ZUOYD.js";
 import {
   bootstrapPool,
@@ -75,7 +75,7 @@ import {
   fetchPoolAuthorizations,
   selectAccount
 } from "./chunk-4IUTMHVB.js";
-import "./chunk-D3NJNDEW.js";
+import "./chunk-HXN2HJMZ.js";
 import {
   VERSION,
   loadRunState,
@@ -85,7 +85,7 @@ import {
   shouldSkipStaleWarning,
   stateFilePath,
   writeRunState
-} from "./chunk-XQTDSVJG.js";
+} from "./chunk-AR5IUHCM.js";
 import {
   DEFAULT_ENV_ID,
   deepMergeEnvironments,

package/dist/manifest/publish.js

@@ -1,30 +1,30 @@
 import {
   publishManifest
-} from "../chunk-QNXFKFJD.js";
+} from "../chunk-422RAWSV.js";
 import "../chunk-WIMRJK32.js";
-import "../chunk-VJITD6HN.js";
-import "../chunk-HN3YZDX4.js";
+import "../chunk-YVLDMADS.js";
+import "../chunk-6YUT276Z.js";
 import "../chunk-GRPLHUYC.js";
 import "../chunk-HOTQDYHD.js";
 import "../chunk-IW3X2MJF.js";
 import "../chunk-KOSF5FDO.js";
 import "../chunk-J3NIXHZZ.js";
 import "../chunk-S7EM5VMW.js";
-import "../chunk-RBTRQH32.js";
-import "../chunk-5LAKX4AB.js";
-import "../chunk-BKEXG2QF.js";
+import "../chunk-WCEPEDZA.js";
+import "../chunk-2MRHO7I5.js";
+import "../chunk-33T5FHX2.js";
 import "../chunk-C2TS5MER.js";
-import "../chunk-A2JFMAG3.js";
+import "../chunk-6ZF7V4PG.js";
 import "../chunk-JQKKMUCT.js";
 import "../chunk-5FLTDWWP.js";
 import "../chunk-RIRDBSBG.js";
-import "../chunk-X2BEJT4V.js";
+import "../chunk-MU75RB7Z.js";
 import "../chunk-TSPERKUS.js";
-import "../chunk-MDS7T32B.js";
+import "../chunk-OXENTCOF.js";
 import "../chunk-SI2ZUOYD.js";
 import "../chunk-4IUTMHVB.js";
-import "../chunk-D3NJNDEW.js";
-import "../chunk-XQTDSVJG.js";
+import "../chunk-HXN2HJMZ.js";
+import "../chunk-AR5IUHCM.js";
 import "../chunk-QRKI6MMK.js";
 import "../chunk-ZOC4GITL.js";
 export {

package/dist/memory-report.js

@@ -5,8 +5,8 @@ import {
   maybeWriteMemoryReport,
   safeHeap,
   sampleFromBytes
-} from "./chunk-D3NJNDEW.js";
-import "./chunk-XQTDSVJG.js";
+} from "./chunk-HXN2HJMZ.js";
+import "./chunk-AR5IUHCM.js";
 export {
   DEFAULT_THRESHOLD_MB,
   buildMemoryReport,

package/dist/merkle.js

@@ -6,29 +6,29 @@ import {
   merkleizeKuboBackend,
   merkleizeWithStableOrder,
   rebuildOrderedCarFromBytes
-} from "./chunk-VJITD6HN.js";
-import "./chunk-HN3YZDX4.js";
+} from "./chunk-YVLDMADS.js";
+import "./chunk-6YUT276Z.js";
 import "./chunk-GRPLHUYC.js";
 import "./chunk-HOTQDYHD.js";
 import "./chunk-IW3X2MJF.js";
 import "./chunk-KOSF5FDO.js";
 import "./chunk-J3NIXHZZ.js";
 import "./chunk-S7EM5VMW.js";
-import "./chunk-RBTRQH32.js";
-import "./chunk-5LAKX4AB.js";
-import "./chunk-BKEXG2QF.js";
+import "./chunk-WCEPEDZA.js";
+import "./chunk-2MRHO7I5.js";
+import "./chunk-33T5FHX2.js";
 import "./chunk-C2TS5MER.js";
-import "./chunk-A2JFMAG3.js";
+import "./chunk-6ZF7V4PG.js";
 import "./chunk-JQKKMUCT.js";
 import "./chunk-5FLTDWWP.js";
 import "./chunk-RIRDBSBG.js";
-import "./chunk-X2BEJT4V.js";
+import "./chunk-MU75RB7Z.js";
 import "./chunk-TSPERKUS.js";
-import "./chunk-MDS7T32B.js";
+import "./chunk-OXENTCOF.js";
 import "./chunk-SI2ZUOYD.js";
 import "./chunk-4IUTMHVB.js";
-import "./chunk-D3NJNDEW.js";
-import "./chunk-XQTDSVJG.js";
+import "./chunk-HXN2HJMZ.js";
+import "./chunk-AR5IUHCM.js";
 import "./chunk-QRKI6MMK.js";
 import "./chunk-ZOC4GITL.js";
 export {

package/dist/personhood/bootstrap.js

@@ -1,3 +1,6 @@
+import {
+  runChainPrereqProbes
+} from "../chunk-XAB7WM3S.js";
 import {
   claimPgas
 } from "../chunk-EATOPQFR.js";
@@ -16,20 +19,17 @@ import {
 import {
   bytesToHex
 } from "../chunk-ZYVGHDMU.js";
-import {
-  runChainPrereqProbes
-} from "../chunk-XAB7WM3S.js";
 import {
   WS_HEARTBEAT_TIMEOUT_MS
-} from "../chunk-MDS7T32B.js";
+} from "../chunk-OXENTCOF.js";
 import {
   DOTNS_CONTEXT_BYTES,
   PEOPLE_MEMBER_IDENTIFIER_HEX,
   PGAS_ASSET_ID
 } from "../chunk-SI2ZUOYD.js";
 import "../chunk-4IUTMHVB.js";
-import "../chunk-D3NJNDEW.js";
-import "../chunk-XQTDSVJG.js";
+import "../chunk-HXN2HJMZ.js";
+import "../chunk-AR5IUHCM.js";
 import {
   loadEnvironments
 } from "../chunk-QRKI6MMK.js";

package/dist/personhood/people-client.js

@@ -1,10 +1,10 @@
 import {
   WS_HEARTBEAT_TIMEOUT_MS
-} from "../chunk-MDS7T32B.js";
+} from "../chunk-OXENTCOF.js";
 import "../chunk-SI2ZUOYD.js";
 import "../chunk-4IUTMHVB.js";
-import "../chunk-D3NJNDEW.js";
-import "../chunk-XQTDSVJG.js";
+import "../chunk-HXN2HJMZ.js";
+import "../chunk-AR5IUHCM.js";
 import {
   loadEnvironments
 } from "../chunk-QRKI6MMK.js";

package/dist/run-state.js

@@ -7,7 +7,7 @@ import {
   shouldSkipStaleWarning,
   stateFilePath,
   writeRunState
-} from "./chunk-XQTDSVJG.js";
+} from "./chunk-AR5IUHCM.js";
 export {
   VERSION,
   loadRunState,

package/dist/sss-allowance-cache.js

@@ -4,12 +4,12 @@ import {
   preflightSssAllowance,
   sssPeriodEndSec,
   writeSssAllowanceCache
-} from "./chunk-HN3YZDX4.js";
+} from "./chunk-6YUT276Z.js";
 import "./chunk-GRPLHUYC.js";
-import "./chunk-X2BEJT4V.js";
+import "./chunk-MU75RB7Z.js";
 import "./chunk-TSPERKUS.js";
-import "./chunk-D3NJNDEW.js";
-import "./chunk-XQTDSVJG.js";
+import "./chunk-HXN2HJMZ.js";
+import "./chunk-AR5IUHCM.js";
 import "./chunk-QRKI6MMK.js";
 import "./chunk-ZOC4GITL.js";
 export {

package/dist/storage-signer.js

@@ -7,29 +7,29 @@ import {
   readBulletinSlotSigner,
   waitForBulletinAuthorization,
   writeBulletinSlotKey
-} from "./chunk-VJITD6HN.js";
-import "./chunk-HN3YZDX4.js";
+} from "./chunk-YVLDMADS.js";
+import "./chunk-6YUT276Z.js";
 import "./chunk-GRPLHUYC.js";
 import "./chunk-HOTQDYHD.js";
 import "./chunk-IW3X2MJF.js";
 import "./chunk-KOSF5FDO.js";
 import "./chunk-J3NIXHZZ.js";
 import "./chunk-S7EM5VMW.js";
-import "./chunk-RBTRQH32.js";
-import "./chunk-5LAKX4AB.js";
-import "./chunk-BKEXG2QF.js";
+import "./chunk-WCEPEDZA.js";
+import "./chunk-2MRHO7I5.js";
+import "./chunk-33T5FHX2.js";
 import "./chunk-C2TS5MER.js";
-import "./chunk-A2JFMAG3.js";
+import "./chunk-6ZF7V4PG.js";
 import "./chunk-JQKKMUCT.js";
 import "./chunk-5FLTDWWP.js";
 import "./chunk-RIRDBSBG.js";
-import "./chunk-X2BEJT4V.js";
+import "./chunk-MU75RB7Z.js";
 import "./chunk-TSPERKUS.js";
-import "./chunk-MDS7T32B.js";
+import "./chunk-OXENTCOF.js";
 import "./chunk-SI2ZUOYD.js";
 import "./chunk-4IUTMHVB.js";
-import "./chunk-D3NJNDEW.js";
-import "./chunk-XQTDSVJG.js";
+import "./chunk-HXN2HJMZ.js";
+import "./chunk-AR5IUHCM.js";
 import "./chunk-QRKI6MMK.js";
 import "./chunk-ZOC4GITL.js";
 export {

package/dist/suppress-localstorage-warning.d.ts

@@ -0,0 +1,2 @@
+
+export {  }

package/dist/suppress-localstorage-warning.js

@@ -0,0 +1,7 @@
+// src/suppress-localstorage-warning.ts
+var _origEmitWarning = process.emitWarning.bind(process);
+process.emitWarning = (warning, ...rest) => {
+  const msg = (typeof warning === "string" ? warning : warning?.message ?? String(warning)).toLowerCase();
+  if (msg.includes("localstorage") || msg.includes("local storage")) return;
+  _origEmitWarning(warning, ...rest);
+};

package/dist/telemetry.js

@@ -36,8 +36,8 @@ import {
   truncateAddress,
   withDeploySpan,
   withSpan
-} from "./chunk-D3NJNDEW.js";
-import "./chunk-XQTDSVJG.js";
+} from "./chunk-HXN2HJMZ.js";
+import "./chunk-AR5IUHCM.js";
 export {
   VERSION,
   __setDeployRootSpanForTest,

package/dist/version-check.js

@@ -11,9 +11,9 @@ import {
   isPreReleaseVersion,
   preReleaseWarning,
   promptYesNo
-} from "./chunk-5LAKX4AB.js";
-import "./chunk-D3NJNDEW.js";
-import "./chunk-XQTDSVJG.js";
+} from "./chunk-2MRHO7I5.js";
+import "./chunk-HXN2HJMZ.js";
+import "./chunk-AR5IUHCM.js";
 export {
   assessVersion,
   checkNodeVersion,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parity/product-deploy",
-  "version": "0.11.0-rc.0",
+  "version": "0.11.0-rc.2",
   "private": false,
   "repository": {
     "type": "git",
@@ -45,7 +45,7 @@
     "tools/release-retry-wrapper.mjs"
   ],
   "scripts": {
-    "build": "tsup src/index.ts src/deploy.ts src/dotns.ts src/pool.ts src/telemetry.ts src/memory-report.ts src/merkle.ts src/gh-pages-mirror.ts src/version-check.ts src/bug-report.ts src/run-state.ts src/environments.ts src/errors.ts src/manifest.ts src/chunk-probe.ts src/manifest-embed.ts src/manifest-fetch.ts src/manifest-roundtrip.ts src/incremental-stats.ts src/chunker.ts src/personhood/encoding.ts src/personhood/hashing.ts src/personhood/constants.ts src/personhood/member-key.ts src/personhood/people-client.ts src/personhood/proof-validity.ts src/personhood/reprove.ts src/personhood/bind-personal-id.ts src/personhood/claim-pgas.ts src/personhood/bind-paid-alias.ts src/personhood/bootstrap.ts src/personhood/chain-prereqs.ts src/manifest/types.ts src/manifest/schema.ts src/manifest/byte-budget.ts src/manifest/config-load.ts src/manifest/publish.ts src/auth/index.ts src/auth/vendor/index.ts src/auth/vendor/ui/index.ts src/auth-config.ts src/commands/login.ts src/commands/logout.ts src/commands/whoami.ts src/commands/transfer.ts src/storage-signer.ts src/spinner.ts src/sss-allowance.ts src/sss-allowance-cache.ts src/deploy-actors.ts --format esm --dts --clean --target node22",
+    "build": "tsup src/suppress-localstorage-warning.ts src/index.ts src/deploy.ts src/dotns.ts src/pool.ts src/telemetry.ts src/memory-report.ts src/merkle.ts src/gh-pages-mirror.ts src/version-check.ts src/bug-report.ts src/run-state.ts src/environments.ts src/errors.ts src/manifest.ts src/chunk-probe.ts src/manifest-embed.ts src/manifest-fetch.ts src/manifest-roundtrip.ts src/incremental-stats.ts src/chunker.ts src/personhood/encoding.ts src/personhood/hashing.ts src/personhood/constants.ts src/personhood/member-key.ts src/personhood/people-client.ts src/personhood/proof-validity.ts src/personhood/reprove.ts src/personhood/bind-personal-id.ts src/personhood/claim-pgas.ts src/personhood/bind-paid-alias.ts src/personhood/bootstrap.ts src/personhood/chain-prereqs.ts src/manifest/types.ts src/manifest/schema.ts src/manifest/byte-budget.ts src/manifest/config-load.ts src/manifest/publish.ts src/auth/index.ts src/auth/vendor/index.ts src/auth/vendor/ui/index.ts src/auth-config.ts src/commands/login.ts src/commands/logout.ts src/commands/whoami.ts src/commands/transfer.ts src/storage-signer.ts src/spinner.ts src/sss-allowance.ts src/sss-allowance-cache.ts src/deploy-actors.ts --format esm --dts --clean --target node22",
     "refresh-environments": "node scripts/refresh-environments.mjs",
     "postinstall": "patch-package || true",
     "prepare": "npm run build",