@parity/product-deploy 0.7.28 → 0.7.30-rc.0

package/dist/personhood/reprove.js

@@ -1,12 +1,13 @@
 import {
-  PAID_PROOF_TAG,
+  buildAliasProofMessage,
+  getProofValidAtSec
+} from "../chunk-SLE4P6MO.js";
+import {
   PEOPLE_MEMBER_IDENTIFIER_HEX,
   PROOF_BYTES
-} from "../chunk-T7EEVWNU.js";
+} from "../chunk-SI2ZUOYD.js";
 import {
-  blake2_256,
   bytesToHex,
-  concatBytes,
   encodeMembers,
   hexToBytes
 } from "../chunk-ZYVGHDMU.js";
@@ -49,12 +50,6 @@ var reproveAliasToAccount = async ({
       { kind: "NoStoredAlias" }
     );
   }
-  if (!stored.paid) {
-    throw new ReproveAliasError(
-      "AccountToAlias row is not paid \u2014 reprove_alias_account is only for paid aliases",
-      { kind: "NotPaid" }
-    );
-  }
   const contextBytes = hexToBytes(stored.ca.context);
   const storedRevision = stored.revision;
   const storedRing = stored.ring;
@@ -110,18 +105,19 @@ var reproveAliasToAccount = async ({
       { kind: "RevisionNotAdvanced" }
     );
   }
+  const proofValidAt = await getProofValidAtSec(ah);
   const ss58Info = getSs58AddressInfo(account);
   if (!ss58Info.isValid) {
     throw new ReproveAliasError(`invalid SS58: ${account}`, {
       kind: "ClientError"
     });
   }
-  const paidMsg = blake2_256(concatBytes(PAID_PROOF_TAG, ss58Info.publicKey));
+  const aliasMsg = buildAliasProofMessage(ss58Info.publicKey, proofValidAt);
   const { proof, alias } = await buildRingProof({
     ringExponent,
     members: membersBytes,
     context: contextBytes,
-    msg: paidMsg
+    msg: aliasMsg
   });
   if (proof.length !== PROOF_BYTES) {
     throw new ReproveAliasError(
@@ -138,7 +134,8 @@ var reproveAliasToAccount = async ({
   const tx = ah.tx.AliasAccounts.reprove_alias_account({
     proof: bytesToHex(proof),
     ring_index: ringIndex,
-    ring_revision: newRevision
+    ring_revision: newRevision,
+    proof_valid_at: proofValidAt
   });
   const blockHash = await new Promise((resolve, reject) => {
     let settled = false;

package/dist/pool.js

@@ -12,9 +12,9 @@ import {
   isTestnetSpecName,
   selectAccount,
   topUpBy
-} from "./chunk-Y7XKC43A.js";
-import "./chunk-LFKP64TQ.js";
-import "./chunk-37M4NISG.js";
+} from "./chunk-FIKBEVYL.js";
+import "./chunk-YP6AS724.js";
+import "./chunk-2WWR3DVD.js";
 export {
   _resetTestnetCacheForTests,
   bootstrapPool,

package/dist/run-state.js

@@ -7,7 +7,7 @@ import {
   shouldSkipStaleWarning,
   stateFilePath,
   writeRunState
-} from "./chunk-37M4NISG.js";
+} from "./chunk-2WWR3DVD.js";
 export {
   VERSION,
   loadRunState,

package/dist/telemetry.d.ts

@@ -2,6 +2,29 @@ import * as _sentry_node from '@sentry/node';
 import { DeployContextForReport } from './memory-report.js';
 import 'node:v8';
 
+/**
+ * Registry of instrumented code paths for dead-branch coverage monitoring.
+ *
+ * Each ID is emitted as a "code.path.<id>" span attribute the first time a deploy
+ * exercises that branch. The nightly check-code-path-coverage.py queries
+ * Sentry for zero-hit paths over a rolling 30-day window and files a GitHub
+ * issue if any are found.
+ *
+ * Rule: never remove an ID without also removing the corresponding branch.
+ * Add a new ID whenever you add a conditional branch worth monitoring.
+ *
+ * When adding a new ID here, ALSO add it to CODE_PATHS in
+ * tools/check-code-path-coverage.py with an `introduced` date of today
+ * (YYYY-MM-DD UTC). The grace window prevents the brand-new path from
+ * triggering a false "0 hits over 30d" alarm before any consumer has
+ * had time to upgrade and exercise the branch.
+ */
+declare const CODE_PATHS: {
+    readonly DOTNS_AUTO_MAPPING: "dotns.auto-mapping";
+    readonly DOTNS_MANUAL_MAPPING: "dotns.manual-mapping";
+};
+type CodePath = typeof CODE_PATHS[keyof typeof CODE_PATHS];
+
 declare const VERSION: string;
 type SentryModule = typeof _sentry_node | null;
 interface InternalContextSignals {
@@ -50,7 +73,26 @@ declare function __setDeployRootSpanForTest(span: any | null): void;
 declare function __setSentryForTest(stub: any): SentryModule;
 declare function getCurrentSentryTraceId(): string | undefined;
 declare function setDeploySentryTag(key: string, value: string): void;
+/**
+ * Mark a code path as exercised in the current deploy span.
+ * Used for dead-branch coverage monitoring — see src/code-paths.ts.
+ *
+ * Design: each path gets its own boolean attribute `code.path.<id>` = "true"
+ * rather than a single `code.path` attribute. This avoids the overwrite problem
+ * — a single deploy span that exercises multiple branches would otherwise only
+ * record the last one. Boolean-per-path lets Sentry query `has:code.path.pool.auth.v2`
+ * independently for each path.
+ *
+ * Note: @sentry/node user-defined attributes come back as string-typed in EAP
+ * regardless of value type. Store as the string "true" so queries using
+ * `count_if(code.path.pool.auth.v2, "true")` or `has:code.path.pool.auth.v2`
+ * both work correctly.
+ *
+ * No-ops gracefully if called outside a deploy span (setDeployAttribute guards
+ * on deployRootSpan — see setDeployAttribute implementation above).
+ */
+declare function markCodePath(id: CodePath): void;
 declare function captureWarning(message: string, context?: Record<string, unknown>): void;
 declare function flush(): Promise<void>;
 
-export { type DeployErrorCategory, type DeployErrorKind, type InternalContextSignals, VERSION, __setDeployRootSpanForTest, __setSentryForTest, analyseErrorPattern, captureWarning, classifyDeployError, classifyErrorKind, classifySadReason, closeTelemetry, computeDeployOutcome, flush, getCurrentSentryTraceId, getDeployAttributes, initTelemetry, isExpectedError, isInternalContext, isInternalContextFromSignals, markRelaunchOomHintShown, resolveRepo, resolveRunner, resolveRunnerType, sampleMemory, sanitizeBranch, sanitizeErrorMessage, sanitizeRepo, scrubPaths, setDeployAttribute, setDeployReportContext, setDeploySentryTag, setRunStateActive, truncateAddress, withDeploySpan, withSpan };
+export { type DeployErrorCategory, type DeployErrorKind, type InternalContextSignals, VERSION, __setDeployRootSpanForTest, __setSentryForTest, analyseErrorPattern, captureWarning, classifyDeployError, classifyErrorKind, classifySadReason, closeTelemetry, computeDeployOutcome, flush, getCurrentSentryTraceId, getDeployAttributes, initTelemetry, isExpectedError, isInternalContext, isInternalContextFromSignals, markCodePath, markRelaunchOomHintShown, resolveRepo, resolveRunner, resolveRunnerType, sampleMemory, sanitizeBranch, sanitizeErrorMessage, sanitizeRepo, scrubPaths, setDeployAttribute, setDeployReportContext, setDeploySentryTag, setRunStateActive, truncateAddress, withDeploySpan, withSpan };

package/dist/telemetry.js

@@ -16,6 +16,7 @@ import {
   isExpectedError,
   isInternalContext,
   isInternalContextFromSignals,
+  markCodePath,
   markRelaunchOomHintShown,
   resolveRepo,
   resolveRunner,
@@ -32,8 +33,8 @@ import {
   truncateAddress,
   withDeploySpan,
   withSpan
-} from "./chunk-LFKP64TQ.js";
-import "./chunk-37M4NISG.js";
+} from "./chunk-YP6AS724.js";
+import "./chunk-2WWR3DVD.js";
 export {
   VERSION,
   __setDeployRootSpanForTest,
@@ -52,6 +53,7 @@ export {
   isExpectedError,
   isInternalContext,
   isInternalContextFromSignals,
+  markCodePath,
   markRelaunchOomHintShown,
   resolveRepo,
   resolveRunner,

package/dist/version-check.js

@@ -11,9 +11,9 @@ import {
   isPreReleaseVersion,
   preReleaseWarning,
   promptYesNo
-} from "./chunk-64KTKZ7H.js";
-import "./chunk-LFKP64TQ.js";
-import "./chunk-37M4NISG.js";
+} from "./chunk-YCVK36KC.js";
+import "./chunk-YP6AS724.js";
+import "./chunk-2WWR3DVD.js";
 export {
   assessVersion,
   checkNodeVersion,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parity/product-deploy",
-  "version": "0.7.28",
+  "version": "0.7.30-rc.0",
   "private": false,
   "repository": {
     "type": "git",
@@ -39,7 +39,7 @@
     "tools/release-retry-wrapper.mjs"
   ],
   "scripts": {
-    "build": "tsup src/index.ts src/deploy.ts src/dotns.ts src/pool.ts src/telemetry.ts src/memory-report.ts src/merkle.ts src/gh-pages-mirror.ts src/version-check.ts src/bug-report.ts src/run-state.ts src/environments.ts src/errors.ts src/manifest.ts src/chunk-probe.ts src/manifest-embed.ts src/manifest-fetch.ts src/manifest-roundtrip.ts src/incremental-stats.ts src/chunker.ts src/personhood/encoding.ts src/personhood/hashing.ts src/personhood/constants.ts src/personhood/member-key.ts src/personhood/people-client.ts src/personhood/reprove.ts src/personhood/bind-personal-id.ts src/personhood/claim-pgas.ts src/personhood/bind-paid-alias.ts src/personhood/bootstrap.ts src/manifest/types.ts src/manifest/schema.ts src/manifest/byte-budget.ts src/manifest/config-load.ts src/manifest/publish.ts --format esm --dts --clean --target node22",
+    "build": "tsup src/index.ts src/deploy.ts src/dotns.ts src/pool.ts src/telemetry.ts src/memory-report.ts src/merkle.ts src/gh-pages-mirror.ts src/version-check.ts src/bug-report.ts src/run-state.ts src/environments.ts src/errors.ts src/manifest.ts src/chunk-probe.ts src/manifest-embed.ts src/manifest-fetch.ts src/manifest-roundtrip.ts src/incremental-stats.ts src/chunker.ts src/personhood/encoding.ts src/personhood/hashing.ts src/personhood/constants.ts src/personhood/member-key.ts src/personhood/people-client.ts src/personhood/proof-validity.ts src/personhood/reprove.ts src/personhood/bind-personal-id.ts src/personhood/claim-pgas.ts src/personhood/bind-paid-alias.ts src/personhood/bootstrap.ts src/personhood/chain-prereqs.ts src/manifest/types.ts src/manifest/schema.ts src/manifest/byte-budget.ts src/manifest/config-load.ts src/manifest/publish.ts --format esm --dts --clean --target node22",
     "refresh-environments": "node scripts/refresh-environments.mjs",
     "check:watched-dependencies": "node tools/check-watched-dependencies.mjs",
     "prepare": "npm run build",
@@ -66,7 +66,7 @@
     "jiti": "^2.4.2",
     "multiformats": "^13.4.1",
     "polkadot-api": "^2.1.3",
-    "verifiablejs": "^1.2.0",
+    "verifiablejs": "1.3.0-beta.4",
     "viem": "^2.30.5"
   },
   "devDependencies": {