@parity/product-deploy 0.11.0-rc.3 → 0.11.0-rc.4

package/assets/environments.json

@@ -5,6 +5,7 @@
       "name": "Preview",
       "network": "testnet",
       "description": "Product Preview net, used by Product Teams",
+      "bulletinAutoAuthorize": true,
       "e2eEligible": true,
       "backend": "https://polkadot-app-stg.parity.io/",
       "ipfs": "https://previewnet.substrate.dev",
@@ -96,6 +97,7 @@
       "name": "Paseo Next v2",
       "network": "testnet",
       "description": "Next iteration of the Paseo Next testnet",
+      "bulletinAutoAuthorize": true,
       "e2eEligible": true,
       "backend": "https://identity-backend-next.parity-testnet.parity.io",
       "ipfs": "https://paseo-bulletin-next-ipfs.polkadot.io",

package/dist/auth-config.js

@@ -9,11 +9,11 @@ import {
   getPeopleChainEndpoints,
   hasPersistedSession,
   resolveBulletinEndpoints
-} from "./chunk-RVGCHRLK.js";
+} from "./chunk-ORJM2DGE.js";
 import "./chunk-TSPERKUS.js";
-import "./chunk-5KRARO46.js";
-import "./chunk-PH32GINP.js";
-import "./chunk-QRKI6MMK.js";
+import "./chunk-4CQ75L4W.js";
+import "./chunk-GQNCLVZM.js";
+import "./chunk-JSYQ3JQS.js";
 import "./chunk-ZOC4GITL.js";
 export {
   DOT_DAPP_ID,

package/dist/bug-report.d.ts

@@ -24,6 +24,15 @@ declare function buildReportBody(error: Error): string;
 declare function buildTitle(error: Error): string;
 declare function buildLabels(error: Error): string[];
 declare function createGhIssue(title: string, body: string, labels: string[]): string;
+/**
+ * True for deploy failures caused by user input rather than a code defect, so
+ * the bug-report prompt is NOT offered for them (#869). Scoped to DotNS name
+ * validation: a malformed or reserved label ("Invalid domain label …",
+ * "… reserves base names of N chars …") is something the user fixes by choosing
+ * a different name — filing it as a bug just creates noise. The actionable error
+ * message has already been printed to the user. Exported for unit testing.
+ */
+declare function isUserInputError(error: Error): boolean;
 declare function offerBugReport(error: Error): Promise<void>;
 
-export { buildCliFlagsSummary, buildLabels, buildReportBody, buildTitle, createGhIssue, getCapturedTail, installLogCapture, offerBugReport, scrubSecrets, setDeployContext };
+export { buildCliFlagsSummary, buildLabels, buildReportBody, buildTitle, createGhIssue, getCapturedTail, installLogCapture, isUserInputError, offerBugReport, scrubSecrets, setDeployContext };

package/dist/bug-report.js

@@ -6,13 +6,14 @@ import {
   createGhIssue,
   getCapturedTail,
   installLogCapture,
+  isUserInputError,
   offerBugReport,
   scrubSecrets,
   setDeployContext
-} from "./chunk-CLM3ODFR.js";
-import "./chunk-2NLCZQY4.js";
-import "./chunk-5KRARO46.js";
-import "./chunk-PH32GINP.js";
+} from "./chunk-Q6UOOXXS.js";
+import "./chunk-OVF6SN7P.js";
+import "./chunk-4CQ75L4W.js";
+import "./chunk-GQNCLVZM.js";
 export {
   buildCliFlagsSummary,
   buildLabels,
@@ -21,6 +22,7 @@ export {
   createGhIssue,
   getCapturedTail,
   installLogCapture,
+  isUserInputError,
   offerBugReport,
   scrubSecrets,
   setDeployContext

package/dist/{chunk-REAHYALJ.js → chunk-23AKFLS3.js}

@@ -7,15 +7,15 @@ import {
   resolveDotnsConnectOptions,
   storeDirectory,
   storeFile
-} from "./chunk-VZTZEW7C.js";
+} from "./chunk-ORS77MUP.js";
 import {
   DotNS
-} from "./chunk-PYGCOK67.js";
+} from "./chunk-RC3CVUOG.js";
 import {
   getPopSelfServeConfig,
   loadEnvironments,
   resolveEndpoints
-} from "./chunk-QRKI6MMK.js";
+} from "./chunk-JSYQ3JQS.js";
 import {
   NonRetryableError
 } from "./chunk-ZOC4GITL.js";

package/dist/{chunk-5KRARO46.js → chunk-4CQ75L4W.js}

@@ -1,7 +1,7 @@
 import {
   package_default,
   writeRunState
-} from "./chunk-PH32GINP.js";
+} from "./chunk-GQNCLVZM.js";
 
 // src/memory-report.ts
 import * as fs2 from "fs";

package/dist/{chunk-RFT2I7TB.js → chunk-CYKONVA7.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-GRPLHUYC.js";
 import {
   DOT_DAPP_ID
-} from "./chunk-RVGCHRLK.js";
+} from "./chunk-ORJM2DGE.js";
 
 // src/sss-allowance-cache.ts
 import { mkdir, readFile, writeFile, unlink } from "fs/promises";

package/dist/{chunk-PH32GINP.js → chunk-GQNCLVZM.js}

@@ -6,7 +6,7 @@ import * as path from "path";
 // package.json
 var package_default = {
   name: "@parity/product-deploy",
-  version: "0.11.0-rc.3",
+  version: "0.11.0-rc.4",
   private: false,
   repository: {
     type: "git",

package/dist/{chunk-QRKI6MMK.js → chunk-JSYQ3JQS.js}

@@ -14,6 +14,7 @@ var environments_default = {
       name: "Preview",
       network: "testnet",
       description: "Product Preview net, used by Product Teams",
+      bulletinAutoAuthorize: true,
       e2eEligible: true,
       backend: "https://polkadot-app-stg.parity.io/",
       ipfs: "https://previewnet.substrate.dev",
@@ -105,6 +106,7 @@ var environments_default = {
       name: "Paseo Next v2",
       network: "testnet",
       description: "Next iteration of the Paseo Next testnet",
+      bulletinAutoAuthorize: true,
       e2eEligible: true,
       backend: "https://identity-backend-next.parity-testnet.parity.io",
       ipfs: "https://paseo-bulletin-next-ipfs.polkadot.io",
@@ -652,7 +654,8 @@ function resolveEndpoints(doc, envId) {
     autoAccountMapping: env.autoAccountMapping ?? false,
     contracts: env.contracts ?? {},
     nativeToEthRatio: BigInt(env.nativeToEthRatio ?? 1e6),
-    ...env.registerStorageDeposit !== void 0 ? { registerStorageDeposit: BigInt(env.registerStorageDeposit) } : {}
+    ...env.registerStorageDeposit !== void 0 ? { registerStorageDeposit: BigInt(env.registerStorageDeposit) } : {},
+    bulletinAutoAuthorize: env.bulletinAutoAuthorize ?? false
   };
 }
 function getPopSelfServeConfig(doc, envId) {

package/dist/{chunk-4IUTMHVB.js → chunk-MRQPJLPS.js}

@@ -100,17 +100,38 @@ function clampU32(n, name) {
   if (n > U32_MAX) throw new Error(`${name} (${n}) exceeds u32 max \u2014 split the deploy into smaller batches`);
   return Number(n);
 }
-async function ensureAuthorized(api, address, label) {
+async function ensureAuthorized(api, address, label, opts = {}) {
   const [auth, currentBlock] = await Promise.all([
     api.query.TransactionStorage.Authorizations.getValue(Enum("Account", address)),
     api.query.System.Number.getValue()
   ]);
   if (isAuthorizationSufficient(auth, currentBlock)) return;
-  const isTestnet = await detectTestnet(api);
   const who = `${label ?? "account"} (${address.slice(0, 8)}...)`;
+  if (opts.autoAuthorize) {
+    await cryptoWaitReady();
+    const keyring = new Keyring({ type: "sr25519" });
+    const alice = keyring.addFromUri("//Alice");
+    const signer = getPolkadotSigner(alice.publicKey, "Sr25519", (data) => alice.sign(data));
+    const grant = `${TOPUP_TRANSACTIONS} txs / ${Number(TOPUP_BYTES) / 1e6}MB`;
+    console.log(`   Auto-authorizing ${who} on Bulletin (${grant})...`);
+    const tx = api.tx.TransactionStorage.authorize_account({
+      who: address,
+      transactions: clampU32(BigInt(TOPUP_TRANSACTIONS), "transactions"),
+      bytes: TOPUP_BYTES
+    });
+    const result = await tx.signAndSubmit(signer);
+    if (!result?.ok) {
+      throw new Error(
+        `Auto-authorization of Bulletin storage account ${who} failed: authorize_account was rejected. This environment is flagged bulletinAutoAuthorize, but //Alice may not hold authorizer rights on this chain.`
+      );
+    }
+    console.log(`   Authorized: ${grant}`);
+    return;
+  }
+  const isTestnet = await detectTestnet(api);
   if (isTestnet) {
     throw new Error(
-      `Bulletin storage account ${who} is not authorized (or its authorization expired). bulletin-deploy no longer self-authorizes on the Bulletin chain \u2014 request authorization for this account from the chain's authorizer (testnet faucet / personhood / pool bootstrap), then retry.`
+      `Bulletin storage account ${who} is not authorized (or its authorization expired). bulletin-deploy self-authorizes only on allow-listed testnets (environments.json bulletinAutoAuthorize) \u2014 request authorization for this account from the chain's authorizer (testnet faucet / personhood / pool bootstrap), then retry.`
     );
   }
   throw new Error(

package/dist/{chunk-RVGCHRLK.js → chunk-ORJM2DGE.js}

@@ -3,10 +3,10 @@ import {
 } from "./chunk-TSPERKUS.js";
 import {
   VERSION
-} from "./chunk-5KRARO46.js";
+} from "./chunk-4CQ75L4W.js";
 import {
   loadEnvironments
-} from "./chunk-QRKI6MMK.js";
+} from "./chunk-JSYQ3JQS.js";
 
 // src/auth-config.ts
 import { existsSync, readdirSync } from "fs";

package/dist/{chunk-VZTZEW7C.js → chunk-ORS77MUP.js}

@@ -1,6 +1,6 @@
 import {
   preflightSssAllowance
-} from "./chunk-RFT2I7TB.js";
+} from "./chunk-CYKONVA7.js";
 import {
   statementSigningAccount
 } from "./chunk-GRPLHUYC.js";
@@ -31,16 +31,16 @@ import {
 } from "./chunk-S7EM5VMW.js";
 import {
   setDeployContext
-} from "./chunk-CLM3ODFR.js";
+} from "./chunk-Q6UOOXXS.js";
 import {
   probeChunks
-} from "./chunk-3US5OZWX.js";
+} from "./chunk-ZDJW2Q4R.js";
 import {
   packSection
 } from "./chunk-C2TS5MER.js";
 import {
   resolveStorageSigner
-} from "./chunk-24KTLZ67.js";
+} from "./chunk-PRBEYWUY.js";
 import {
   createSlotAccountSigner,
   requestResourceAllocation
@@ -49,7 +49,7 @@ import {
   STALE_SESSION_MESSAGE,
   getPeopleChainEndpoints,
   hasPersistedSession
-} from "./chunk-RVGCHRLK.js";
+} from "./chunk-ORJM2DGE.js";
 import {
   CLI_NAME
 } from "./chunk-TSPERKUS.js";
@@ -62,7 +62,7 @@ import {
   parseDomainName,
   popStatusName,
   verifyNonceAdvanced
-} from "./chunk-PYGCOK67.js";
+} from "./chunk-RC3CVUOG.js";
 import {
   derivePoolAccounts,
   detectTestnet,
@@ -70,7 +70,7 @@ import {
   fetchPoolAuthorizations,
   isAuthorizationSufficient,
   selectAccount
-} from "./chunk-4IUTMHVB.js";
+} from "./chunk-MRQPJLPS.js";
 import {
   VERSION,
   captureWarning,
@@ -84,13 +84,13 @@ import {
   truncateAddress,
   withDeploySpan,
   withSpan
-} from "./chunk-5KRARO46.js";
+} from "./chunk-4CQ75L4W.js";
 import {
   DEFAULT_ENV_ID,
   getPopSelfServeConfig,
   loadEnvironments,
   resolveEndpoints
-} from "./chunk-QRKI6MMK.js";
+} from "./chunk-JSYQ3JQS.js";
 import {
   NonRetryableError
 } from "./chunk-ZOC4GITL.js";
@@ -373,6 +373,7 @@ var DEFAULT_BULLETIN_RPC = "wss://paseo-bulletin-rpc.polkadot.io";
 var DEFAULT_POOL_SIZE = 10;
 var BULLETIN_ENDPOINTS = [DEFAULT_BULLETIN_RPC];
 var POOL_SIZE = DEFAULT_POOL_SIZE;
+var bulletinAutoAuthorize = false;
 var _deployRpcFailedOver = false;
 var _onWsHalt = null;
 function setWsHaltCallback(cb) {
@@ -511,7 +512,7 @@ async function getProvider() {
     const selectionResult = selectAccount(authorizations, Math.random, pinnedPoolIndex);
     const selectedAccount = selectionResult.account;
     const eligibleCount = selectionResult.eligibleCount;
-    await ensureAuthorized(unsafeApi, selectedAccount.address, `pool account ${selectedAccount.index}`);
+    await ensureAuthorized(unsafeApi, selectedAccount.address, `pool account ${selectedAccount.index}`, { autoAuthorize: bulletinAutoAuthorize });
     console.log(`   Using pool account ${selectedAccount.index}: ${selectedAccount.address}`);
     setDeployAttribute("deploy.signer.mode", "pool");
     setDeployAttribute("deploy.pool.account", truncateAddress(selectedAccount.address));
@@ -540,7 +541,7 @@ async function getDirectProvider(mnemonic, derivationPath = "") {
   let now = currentBlock.number;
   if (!auth || Number(auth.expiration ?? 0) <= now) {
     try {
-      await ensureAuthorized(unsafeApi, ss58, "direct signer");
+      await ensureAuthorized(unsafeApi, ss58, "direct signer", { autoAuthorize: bulletinAutoAuthorize });
       [auth, currentBlock] = await Promise.all([
         unsafeApi.query.TransactionStorage.Authorizations.getValue(Enum2("Account", ss58)),
         client.getFinalizedBlock()
@@ -572,7 +573,7 @@ async function getSignerProvider(signer, ss58) {
   let now = currentBlock.number;
   if (!auth || Number(auth.expiration ?? 0) <= now) {
     try {
-      await ensureAuthorized(unsafeApi, ss58, "external signer");
+      await ensureAuthorized(unsafeApi, ss58, "external signer", { autoAuthorize: bulletinAutoAuthorize });
       [auth, currentBlock] = await Promise.all([
         unsafeApi.query.TransactionStorage.Authorizations.getValue(Enum2("Account", ss58)),
         client.getFinalizedBlock()
@@ -614,6 +615,9 @@ function formatStorageSignerLine(slotAddress, failReason, owned) {
   }
   return `   Storage signer: pool fallback (${failReason ?? "no session"})`;
 }
+function formatTransferModeDotnsLine(alreadyOwned, dotName, recipient) {
+  return alreadyOwned ? `   DotNS: you already own ${dotName} \u2014 content update needs your phone signature (no transfer)` : `   DotNS: will register ${dotName} and transfer it to your account ${recipient}`;
+}
 function selectStorageReconnect(options) {
   if (options.storageSigner && options.storageSignerAddress) {
     let useSlot = true;
@@ -965,7 +969,7 @@ async function storeChunkedContent(chunks, { client: existingClient, unsafeApi:
     while (b < chunks.length) {
       if (wsHaltDetected && reconnect && reconnectionsUsed < MAX_RECONNECTIONS) {
         wsHaltDetected = false;
-        await doReconnect();
+        await doReconnectAndRebase();
       }
       const batchSize = reconnectionsUsed > 0 ? BATCH_SIZE_RECOVERY : BATCH_SIZE_INITIAL;
       const batchIndices = [];
@@ -1993,6 +1997,7 @@ async function deploy(content, domainName = null, options = {}) {
   let envNativeToEthRatio;
   let envRegisterStorageDeposit;
   let envPopSelfServe = null;
+  bulletinAutoAuthorize = false;
   if (options.bulletinEndpoints && options.bulletinEndpoints.length > 0) {
     envBulletin = options.bulletinEndpoints;
     envAssetHub = options.assetHubEndpoints;
@@ -2011,6 +2016,7 @@ async function deploy(content, domainName = null, options = {}) {
       envNativeToEthRatio = resolved.nativeToEthRatio;
       envRegisterStorageDeposit = resolved.registerStorageDeposit;
       envPopSelfServe = getPopSelfServeConfig(doc, envId);
+      bulletinAutoAuthorize = resolved.bulletinAutoAuthorize;
     } catch (e) {
       if (e instanceof NonRetryableError) throw e;
       if (options.env !== void 0) throw e;
@@ -2056,7 +2062,7 @@ async function deploy(content, domainName = null, options = {}) {
       sessionCleanup = actors.worker.destroy.bind(actors.worker);
       if (actors.worker.source === "session") resolvedUserSession = actors.worker;
       if (actors.recipientH160) {
-        console.log(`   Worker: ${actors.worker.source} signer ${actors.worker.address} \u2192 will transfer ${domainName ?? "the name"} to ${actors.recipientH160}`);
+        console.log(`   Worker: ${actors.worker.source} signer ${actors.worker.address} (signs Bulletin storage)`);
       } else {
         console.log(`   Using ${actors.worker.source} signer: ${actors.worker.address}`);
       }
@@ -2214,8 +2220,8 @@ async function deploy(content, domainName = null, options = {}) {
             const fromName = popStatusName(dotnsPreflight.userStatus);
             console.log(`   Your PoP: ${fromName}`);
             console.log(`   Domain: ${alreadyOwned ? "owned by you" : "available"}`);
-            if (dotnsPreflight.plannedAction === "already-owned-by-recipient") {
-              console.log(`   DotNS signer: owner identity (phone signature required for content update)`);
+            if (options.transferTo) {
+              console.log(formatTransferModeDotnsLine(alreadyOwned, `${name}.dot`, options.transferTo));
             }
           }
           if (!dotnsPreflight.canProceed) {
@@ -2570,7 +2576,7 @@ async function deploy(content, domainName = null, options = {}) {
         console.log("=".repeat(60));
         console.log("\nCheck it out here:");
         console.log(`   ${browserUrlFor(name, envId)}`);
-        console.log(`   ${name}.dot  (in a Polkadot-aware browser)`);
+        console.log(`   ${name}.dot  (in a Polkadot app: mobile or desktop)`);
         console.log("\n" + "=".repeat(60) + "\n");
         return { domainName: name, fullDomain: `${name}.dot`, cid, ipfsCid };
       } finally {
@@ -3026,6 +3032,7 @@ export {
   isPhoneSignerActive,
   shouldHandoverName,
   formatStorageSignerLine,
+  formatTransferModeDotnsLine,
   storeFile,
   __assignDenseNoncesForTest,
   storeChunkedContent,

package/dist/{chunk-2NLCZQY4.js → chunk-OVF6SN7P.js}

@@ -1,6 +1,6 @@
 import {
   VERSION
-} from "./chunk-5KRARO46.js";
+} from "./chunk-4CQ75L4W.js";
 
 // src/version-check.ts
 import { execSync, execFileSync } from "child_process";

package/dist/{chunk-24KTLZ67.js → chunk-PRBEYWUY.js}

@@ -4,10 +4,10 @@ import {
 } from "./chunk-5FLTDWWP.js";
 import {
   DOT_PRODUCT_ID
-} from "./chunk-RVGCHRLK.js";
+} from "./chunk-ORJM2DGE.js";
 import {
   DEFAULT_MNEMONIC
-} from "./chunk-PYGCOK67.js";
+} from "./chunk-RC3CVUOG.js";
 
 // src/deploy-actors.ts
 var DEFAULT_WORKER_SURI = DEFAULT_MNEMONIC;

package/dist/{chunk-CLM3ODFR.js → chunk-Q6UOOXXS.js}

@@ -2,15 +2,15 @@ import {
   classifyErrorArea,
   isInteractive,
   promptYesNo
-} from "./chunk-2NLCZQY4.js";
+} from "./chunk-OVF6SN7P.js";
 import {
   VERSION,
   getCurrentSentryTraceId,
   resolveIssueRepoSlug
-} from "./chunk-5KRARO46.js";
+} from "./chunk-4CQ75L4W.js";
 import {
   package_default
-} from "./chunk-PH32GINP.js";
+} from "./chunk-GQNCLVZM.js";
 
 // src/bug-report.ts
 import { execSync, execFileSync } from "child_process";
@@ -175,8 +175,13 @@ function applyCoreLabels(issueUrl) {
     return false;
   }
 }
+function isUserInputError(error) {
+  const msg = error?.message ?? "";
+  return /Invalid domain label|reserves base names of/i.test(msg);
+}
 async function offerBugReport(error) {
   if (!isInteractive()) return;
+  if (isUserInputError(error)) return;
   const yes = await promptYesNo("\n   This looks like a bug. Open an issue with debug info? [Y/n] ");
   if (!yes) return;
   const title = buildTitle(error);
@@ -226,5 +231,6 @@ export {
   buildTitle,
   buildLabels,
   createGhIssue,
+  isUserInputError,
   offerBugReport
 };

package/dist/{chunk-PYGCOK67.js → chunk-RC3CVUOG.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-SI2ZUOYD.js";
 import {
   isTestnetSpecName
-} from "./chunk-4IUTMHVB.js";
+} from "./chunk-MRQPJLPS.js";
 import {
   captureWarning,
   markCodePath,
@@ -11,10 +11,10 @@ import {
   setDeploySentryTag,
   truncateAddress,
   withSpan
-} from "./chunk-5KRARO46.js";
+} from "./chunk-4CQ75L4W.js";
 import {
   validateContractAddresses
-} from "./chunk-QRKI6MMK.js";
+} from "./chunk-JSYQ3JQS.js";
 import {
   NonRetryableError
 } from "./chunk-ZOC4GITL.js";
@@ -126,6 +126,7 @@ var TX_WALL_CLOCK_CEILING_MS = 24e4;
 var TX_NO_PROGRESS_MS = 9e4;
 var WS_HEARTBEAT_TIMEOUT_MS = 3e5;
 var DOTNS_TX_MAX_ATTEMPTS = 3;
+var VERIFY_EFFECT_CHAIN_SECONDS = 60;
 function classifyTxRetryDecision(err) {
   const msg = err instanceof Error ? err.message : String(err);
   const lower = msg.toLowerCase();
@@ -146,6 +147,9 @@ function dotnsRetryBackoffMs(attempt, rand = Math.random) {
 function shouldRetryTxAttempt(attempt, maxAttempts, decision) {
   return decision === "retry" && attempt < maxAttempts;
 }
+function shouldRegateBeforeResign(attempt, isPhoneSigner) {
+  return attempt >= 2 && isPhoneSigner === true;
+}
 function makeRetryStatusFilter(sink) {
   let buffered = false;
   let includedSeen = false;
@@ -783,6 +787,9 @@ var ReviveClientWrapper = class _ReviveClientWrapper {
     let lastError;
     for (let attempt = 1; attempt <= DOTNS_TX_MAX_ATTEMPTS; attempt++) {
       filter.reset();
+      if (shouldRegateBeforeResign(attempt, opts.isPhoneSigner)) {
+        await opts.onResign?.(attempt);
+      }
       try {
         return await this.signAndSubmitExtrinsic(buildExtrinsic(), signer, filter.callback, opts);
       } catch (e) {
@@ -830,7 +837,7 @@ var ReviveClientWrapper = class _ReviveClientWrapper {
       storage_deposit_limit: storageDepositLimit
     };
   }
-  async submitTransaction(contractAddress, value, encodedData, signerSubstrateAddress, signer, statusCallback, { rpcs, useNoncePolling, functionName, args, contracts, verifyEffect, feeAsset }) {
+  async submitTransaction(contractAddress, value, encodedData, signerSubstrateAddress, signer, statusCallback, { rpcs, useNoncePolling, functionName, args, contracts, verifyEffect, feeAsset, isPhoneSigner, onResign }) {
     await this.ensureAccountMapped(signerSubstrateAddress, signer);
     if (functionName === "register") {
       try {
@@ -862,7 +869,7 @@ var ReviveClientWrapper = class _ReviveClientWrapper {
       "chain.tx.submit",
       `sign+submit ${functionName ?? "Revive.call"}`,
       { "chain.function_name": functionName ?? "Revive.call", "chain.use_nonce_polling": Boolean(useNoncePolling) },
-      () => this.signAndSubmitWithRetry(buildExtrinsic, signer, statusCallback, "Revive.call", { nonceFallback, verifyEffect, feeAsset })
+      () => this.signAndSubmitWithRetry(buildExtrinsic, signer, statusCallback, "Revive.call", { nonceFallback, verifyEffect, feeAsset, isPhoneSigner, onResign })
     );
   }
   // Dry-runs each call individually, then wraps them in a single
@@ -1484,7 +1491,22 @@ var DotNS = class {
       await this._awaitPhoneReady(phoneLabel);
     }
     return await withTimeout(
-      this.clientWrapper.submitTransaction(contractAddress, value, encodedCallData, this.substrateAddress, this.signer, statusCallback, { rpcs, useNoncePolling, functionName, args, contracts: this._contracts, verifyEffect, feeAsset }),
+      this.clientWrapper.submitTransaction(contractAddress, value, encodedCallData, this.substrateAddress, this.signer, statusCallback, {
+        rpcs,
+        useNoncePolling,
+        functionName,
+        args,
+        contracts: this._contracts,
+        verifyEffect,
+        feeAsset,
+        // Re-gate phone-signer retries (#971): a verifyEffect false-negative
+        // makes signAndSubmitWithRetry re-sign; for a phone signer that needs
+        // another tap, so pause via _awaitPhoneReady ("Re-sign needed … Check
+        // your phone / Press Y") before re-signing. Both _awaitPhoneReady and the
+        // retry-loop guard no-op for non-phone signers (local/dev workers).
+        isPhoneSigner: this._isPhoneSigner,
+        onResign: phoneLabel !== void 0 ? () => this._awaitPhoneReady(phoneLabel) : void 0
+      }),
       OPERATION_TIMEOUT_MS,
       functionName
     );
@@ -1587,7 +1609,7 @@ var DotNS = class {
       const parentNode = namehash(`${parentLabel}.dot`);
       const subnodeNode = namehash(`${sublabel}.${parentLabel}.dot`);
       const subnodeRecord = { parentNode, subLabel: sublabel, parentLabel, owner: this.evmAddress };
-      const MAX_VERIFY_CHAIN_SECONDS = 30;
+      const MAX_VERIFY_CHAIN_SECONDS = VERIFY_EFFECT_CHAIN_SECONDS;
       const POLL_INTERVAL_MS = 2e3;
       const verifyEffect = async () => {
         const wrapper = this.clientWrapper;
@@ -1727,7 +1749,7 @@ var DotNS = class {
       } catch (_) {
       }
       setDeployAttribute("deploy.dotns.contenthash_unchanged", "false");
-      const MAX_VERIFY_CHAIN_SECONDS = 30;
+      const MAX_VERIFY_CHAIN_SECONDS = VERIFY_EFFECT_CHAIN_SECONDS;
       const POLL_INTERVAL_MS = 2e3;
       const verifyEffect = async () => {
         const wrapper = this.clientWrapper;
@@ -1824,7 +1846,7 @@ var DotNS = class {
       this.ensureConnected();
       console.log(`   Setting text[${key}]: ${value}`);
       const node = namehash(`${domainName}.dot`);
-      const MAX_VERIFY_CHAIN_SECONDS = 30;
+      const MAX_VERIFY_CHAIN_SECONDS = VERIFY_EFFECT_CHAIN_SECONDS;
       const TEXT_POLL_INTERVAL_MS = 2e3;
       const verifyEffect = async () => {
         const wrapper = this.clientWrapper;
@@ -1956,7 +1978,7 @@ var DotNS = class {
         console.log(`   Already published \u2014 skipping`);
         return { status: "already-published" };
       }
-      const MAX_VERIFY_CHAIN_SECONDS = 30;
+      const MAX_VERIFY_CHAIN_SECONDS = VERIFY_EFFECT_CHAIN_SECONDS;
       const PUBLISH_POLL_INTERVAL_MS = 2e3;
       const verifyEffect = async () => {
         const wrapper = this.clientWrapper;
@@ -2029,7 +2051,7 @@ var DotNS = class {
         console.log(`   Not currently published \u2014 skipping`);
         return { status: "already-unpublished" };
       }
-      const MAX_VERIFY_CHAIN_SECONDS = 30;
+      const MAX_VERIFY_CHAIN_SECONDS = VERIFY_EFFECT_CHAIN_SECONDS;
       const UNPUBLISH_POLL_INTERVAL_MS = 2e3;
       const verifyEffect = async () => {
         const wrapper = this.clientWrapper;
@@ -2737,9 +2759,11 @@ export {
   TX_NO_PROGRESS_MS,
   WS_HEARTBEAT_TIMEOUT_MS,
   DOTNS_TX_MAX_ATTEMPTS,
+  VERIFY_EFFECT_CHAIN_SECONDS,
   classifyTxRetryDecision,
   dotnsRetryBackoffMs,
   shouldRetryTxAttempt,
+  shouldRegateBeforeResign,
   makeRetryStatusFilter,
   DEFAULT_MNEMONIC,
   fetchNonce,

package/dist/{chunk-3US5OZWX.js → chunk-ZDJW2Q4R.js}

@@ -1,6 +1,6 @@
 import {
   captureWarning
-} from "./chunk-5KRARO46.js";
+} from "./chunk-4CQ75L4W.js";
 
 // src/chunk-probe.ts
 import { Twox128, Blake2128Concat, decAnyMetadata, unifyMetadata } from "@polkadot-api/substrate-bindings";

package/dist/chunk-probe.js

@@ -5,9 +5,9 @@ import {
   _decodeStorageValue,
   _resetProbeSession,
   probeChunks
-} from "./chunk-3US5OZWX.js";
-import "./chunk-5KRARO46.js";
-import "./chunk-PH32GINP.js";
+} from "./chunk-ZDJW2Q4R.js";
+import "./chunk-4CQ75L4W.js";
+import "./chunk-GQNCLVZM.js";
 export {
   ChainProbeCrossValidationError,
   ChainProbeMetadataError,