@parity/product-deploy 0.8.3-rc.8 → 0.9.0-rc.0

package/dist/{chunk-OFVBJOFB.js → chunk-6NW5M3F5.js}

@@ -1,12 +1,11 @@
 import {
   VERSION
-} from "./chunk-WHMNBSG7.js";
+} from "./chunk-LCKLYFAZ.js";
 
 // src/version-check.ts
 import { execSync, execFileSync } from "child_process";
 import { createInterface } from "readline";
 var REGISTRY_URL = "https://registry.npmjs.org/bulletin-deploy/latest";
-var KILL_SWITCH_URL = "https://raw.githubusercontent.com/paritytech/triangle-deploy/main/min-version.json";
 var FETCH_TIMEOUT = 3e3;
 function checkNodeVersion(enginesNode, currentVersion) {
   const match = enginesNode.match(/(\d+)/);
@@ -58,26 +57,18 @@ async function fetchJson(url) {
   }
 }
 async function fetchVersionInfo() {
-  const [registry, killSwitch] = await Promise.all([
-    fetchJson(REGISTRY_URL),
-    fetchJson(KILL_SWITCH_URL)
-  ]);
-  if (!registry && !killSwitch) return null;
+  const registry = await fetchJson(REGISTRY_URL);
+  if (!registry) return null;
   return {
-    latest: registry?.version ?? VERSION,
-    minimumFromRegistry: registry?.minimumVersion ?? null,
-    minimumFromKillSwitch: killSwitch?.minimumVersion ?? null,
-    killSwitchMessage: killSwitch?.message ?? null
+    latest: registry.version ?? VERSION,
+    minimumFromRegistry: registry.minimumVersion ?? null
   };
 }
 function handlePreflightVersionCheck(info) {
   if (!info) return "ok";
-  const effectiveMinimum = [info.minimumFromRegistry, info.minimumFromKillSwitch].filter(Boolean).sort((a, b) => compareSemver(b, a))[0] ?? null;
-  if (effectiveMinimum && compareSemver(VERSION, effectiveMinimum) < 0) {
+  if (info.minimumFromRegistry && compareSemver(VERSION, info.minimumFromRegistry) < 0) {
     console.error(`
-   bulletin-deploy ${VERSION} is no longer supported (minimum: ${effectiveMinimum}).`);
-    const ks = info.killSwitchMessage;
-    if (ks) console.error(`   Reason: ${ks}`);
+   bulletin-deploy ${VERSION} is no longer supported (minimum: ${info.minimumFromRegistry}).`);
     console.error(`   Please update: npm install -g bulletin-deploy@latest
 `);
     return "abort";
@@ -165,9 +156,8 @@ function classifyErrorArea(msg) {
   return null;
 }
 function assessVersion(currentVersion, info, internal) {
-  const effectiveMinimum = [info.minimumFromRegistry, info.minimumFromKillSwitch].filter(Boolean).sort((a, b) => compareSemver(b, a))[0] ?? null;
-  if (effectiveMinimum && compareSemver(currentVersion, effectiveMinimum) < 0) {
-    return { action: "forced_update", currentVersion, minimumVersion: effectiveMinimum, message: info.killSwitchMessage };
+  if (info.minimumFromRegistry && compareSemver(currentVersion, info.minimumFromRegistry) < 0) {
+    return { action: "forced_update", currentVersion, minimumVersion: info.minimumFromRegistry };
   }
   if (compareSemver(currentVersion, info.latest) < 0) {
     return { action: "suggest_update", currentVersion, latestVersion: info.latest, internal };
@@ -190,7 +180,6 @@ async function handleFailedDeploy(error) {
     case "forced_update":
       console.error(`
    bulletin-deploy ${verdict.currentVersion} is no longer supported (minimum: ${verdict.minimumVersion}).`);
-      if (verdict.message) console.error(`   Reason: ${verdict.message}`);
       console.error(`   Please update: npm install -g bulletin-deploy@latest
 `);
       break;

package/dist/{chunk-7DGFJC6E.js → chunk-DHY2ZXVZ.js}

@@ -1,6 +1,10 @@
+import {
+  NonRetryableError
+} from "./chunk-ZOC4GITL.js";
+
 // src/auth/vendor/auth.ts
 import { readdir, unlink } from "fs/promises";
-import { homedir } from "os";
+import { homedir, platform, release } from "os";
 import { join } from "path";
 import { deriveH160, ss58Encode } from "@parity/product-sdk-address";
 import {
@@ -33,22 +37,49 @@ function createSessionSigner(session, ref) {
       extra: value,
       additionalSigned
     }));
-    const result = await session.createTransaction({
-      payload: {
-        tag: "v1",
-        value: {
-          signer: productAccountId,
-          genesisHash,
-          callData,
-          extensions,
-          txExtVersion: 0
-        }
+    let noAllowanceMsg = null;
+    const origErr = console.error;
+    console.error = (...args) => {
+      const msg = args.map(String).join(" ");
+      if (msg.includes("NoAllowanceError") || msg.includes("no allowance set")) {
+        noAllowanceMsg = msg;
+        return;
       }
-    });
-    if (result.isErr()) {
-      throw new Error(`Mobile signing rejected: ${result.error.message}`);
+      origErr(...args);
+    };
+    let clearPoll = null;
+    try {
+      const result = await Promise.race([
+        session.createTransaction({
+          payload: {
+            tag: "v1",
+            value: {
+              signer: productAccountId,
+              genesisHash,
+              callData,
+              extensions,
+              txExtVersion: 0
+            }
+          }
+        }),
+        new Promise((_, reject) => {
+          clearPoll = setInterval(() => {
+            if (noAllowanceMsg) {
+              reject(new NonRetryableError(
+                "Session signing allowance has expired (~2-3 days after login). Run `bulletin-deploy login` to renew."
+              ));
+            }
+          }, 200);
+        })
+      ]);
+      if (result.isErr()) {
+        throw new Error(`Mobile signing rejected: ${result.error.message}`);
+      }
+      return result.value;
+    } finally {
+      if (clearPoll !== null) clearInterval(clearPoll);
+      console.error = origErr;
     }
-    return result.value;
   };
   const signBytes = async (data) => {
     const result = await session.signRaw({
@@ -64,22 +95,18 @@ function createSessionSigner(session, ref) {
 }
 
 // src/auth/vendor/allocations.ts
+import {
+  requestResourceAllocation as terminalRequestResourceAllocation
+} from "@parity/product-sdk-terminal/host";
 var DEFAULT_RESOURCES = [
   { tag: "BulletInAllowance", value: void 0 },
   { tag: "StatementStoreAllowance", value: void 0 },
   // derivation index 0 = the default product account.
   { tag: "SmartContractAllowance", value: 0 }
 ];
-async function requestResourceAllocation(session, productId, resources = DEFAULT_RESOURCES, onExisting = "Ignore") {
-  const result = await session.requestResourceAllocation({
-    callingProductId: productId,
-    resources,
-    onExisting
-  });
-  if (result.isErr()) {
-    throw new Error(`Resource allocation request failed: ${result.error.message}`);
-  }
-  return result.value;
+async function requestResourceAllocation(session, adapter, resources = DEFAULT_RESOURCES, onExisting = "Ignore") {
+  const outcomes = await terminalRequestResourceAllocation(session, adapter, resources, { onExisting });
+  return outcomes;
 }
 function summarizeOutcomes(outcomes, resources) {
   const granted = [];
@@ -102,8 +129,13 @@ function createAuthClient(config) {
   function createAdapter() {
     return createTerminalAdapter({
       appId: config.dappId,
-      metadataUrl: config.metadataUrl,
-      endpoints: config.peopleEndpoints
+      endpoints: config.peopleEndpoints,
+      hostMetadata: {
+        hostName: config.hostName,
+        hostVersion: config.hostVersion,
+        platformType: platform(),
+        platformVersion: release()
+      }
     });
   }
   function deriveSessionAddresses(session) {
@@ -135,6 +167,8 @@ function createAuthClient(config) {
     const sessions = await waitForSessions(adapter);
     if (sessions.length > 0) {
       const addresses = deriveSessionAddresses(sessions[0]);
+      adapter.destroy().catch(() => {
+      });
       return { kind: "existing", address: addresses.productAddress, addresses };
     }
     const authPromise = adapter.sso.authenticate();
@@ -183,7 +217,7 @@ function createAuthClient(config) {
       }
     });
     let authenticated = false;
-    let address = null;
+    let handle = null;
     try {
       const result = await authPromise;
       result.match(
@@ -199,8 +233,8 @@ function createAuthClient(config) {
       if (authenticated) {
         const sessions = await waitForSessions(adapter, 3e3);
         if (sessions.length > 0) {
-          const addresses = deriveSessionAddresses(sessions[0]);
-          address = addresses.productAddress;
+          handle = buildSessionHandle(adapter, sessions[0]);
+          const { address, addresses } = handle;
           onStatus({ step: "success", address, addresses });
         } else {
           onStatus({
@@ -212,17 +246,9 @@ function createAuthClient(config) {
     } finally {
       unsubPairing();
     }
-    return address;
+    return handle;
   }
-  async function getSessionSigner() {
-    const adapter = createAdapter();
-    const sessions = await waitForSessions(adapter, 3e3);
-    if (sessions.length === 0) {
-      adapter.destroy().catch(() => {
-      });
-      return null;
-    }
-    const session = sessions[0];
+  function buildSessionHandle(adapter, session) {
     const signer = createSigner(session);
     const addresses = deriveSessionAddresses(session);
     let destroyed = false;
@@ -237,11 +263,22 @@ function createAuthClient(config) {
       addresses,
       signer,
       userSession: session,
+      adapter,
       destroy
     };
   }
-  async function requestAllocation(session, resources = DEFAULT_RESOURCES, onExisting = "Ignore") {
-    return requestResourceAllocation(session, config.productId, resources, onExisting);
+  async function getSessionSigner() {
+    const adapter = createAdapter();
+    const sessions = await waitForSessions(adapter, 3e3);
+    if (sessions.length === 0) {
+      adapter.destroy().catch(() => {
+      });
+      return null;
+    }
+    return buildSessionHandle(adapter, sessions[0]);
+  }
+  async function requestAllocation(session, adapter, resources = DEFAULT_RESOURCES, onExisting = "Ignore") {
+    return requestResourceAllocation(session, adapter, resources, onExisting);
   }
   async function findSession() {
     const adapter = createAdapter();
@@ -261,6 +298,8 @@ function createAuthClient(config) {
     const { adapter, address, session } = handle;
     try {
       onStatus({ step: "disconnecting", address });
+      await Promise.resolve(session.abortPendingRequests()).catch(() => {
+      });
       const result = await adapter.sessions.disconnect(session);
       if (result.isOk()) {
         await clearLocalAppStorage();

package/dist/chunk-G56VYTUD.js

@@ -0,0 +1,75 @@
+// src/sss-allowance.ts
+import WebSocket from "ws";
+var SSS_PREFIX = new TextEncoder().encode(":statement_allowance:");
+function sssStorageKey(pubkey) {
+  if (pubkey.length !== 32) {
+    throw new Error(`SSS storage key requires a 32-byte public key, got ${pubkey.length} bytes`);
+  }
+  const full = new Uint8Array(SSS_PREFIX.length + pubkey.length);
+  full.set(SSS_PREFIX, 0);
+  full.set(pubkey, SSS_PREFIX.length);
+  return "0x" + Buffer.from(full).toString("hex");
+}
+function checkSSSAllowance(pubkey, peopleEndpoints, timeoutMs = 5e3) {
+  return new Promise((resolve) => {
+    const endpoint = peopleEndpoints[0];
+    if (!endpoint) {
+      resolve(null);
+      return;
+    }
+    let settled = false;
+    let timer = null;
+    function done(value) {
+      if (settled) return;
+      settled = true;
+      if (timer !== null) clearTimeout(timer);
+      try {
+        ws.terminate();
+      } catch {
+      }
+      resolve(value);
+    }
+    let ws;
+    try {
+      ws = new WebSocket(endpoint);
+    } catch {
+      resolve(null);
+      return;
+    }
+    timer = setTimeout(() => done(null), timeoutMs);
+    ws.on("error", () => done(null));
+    ws.on("open", () => {
+      let storageKey;
+      try {
+        storageKey = sssStorageKey(pubkey);
+      } catch {
+        done(null);
+        return;
+      }
+      const request = JSON.stringify({
+        jsonrpc: "2.0",
+        id: 1,
+        method: "state_getStorage",
+        params: [storageKey]
+      });
+      ws.send(request, (err) => {
+        if (err) done(null);
+      });
+    });
+    ws.on("message", (data) => {
+      try {
+        const msg = JSON.parse(data.toString());
+        const result = msg.result;
+        const present = result != null && result !== "0x";
+        done(present);
+      } catch {
+        done(null);
+      }
+    });
+  });
+}
+
+export {
+  sssStorageKey,
+  checkSSSAllowance
+};

package/dist/{chunk-5K3RI5C2.js → chunk-GL3U7K2B.js}

@@ -108,7 +108,6 @@ var environments_default = {
       e2eEligible: true,
       backend: "https://identity-backend-next.parity-testnet.parity.io",
       ipfs: "https://paseo-bulletin-next-ipfs.polkadot.io",
-      docsUrl: "https://sre.teleport.parity.io/environments/paseo-next/",
       autoAccountMapping: true,
       nativeToEthRatio: 1e8,
       registerStorageDeposit: 2e12,

package/dist/{chunk-327NAPBD.js → chunk-H4LWILH4.js}

@@ -1,17 +1,28 @@
+import {
+  VERSION
+} from "./chunk-LCKLYFAZ.js";
 import {
   loadEnvironments
-} from "./chunk-5K3RI5C2.js";
+} from "./chunk-GL3U7K2B.js";
 
 // src/auth-config.ts
-import { existsSync } from "fs";
+import { existsSync, readdirSync } from "fs";
 import { homedir } from "os";
 import { join } from "path";
 var DOT_DAPP_ID = "dot-cli";
 var DOT_PRODUCT_ID = "playground.dot";
 var DOT_DERIVATION_INDEX = 0;
-var DOT_TERMINAL_METADATA_URL = "https://gist.githubusercontent.com/ReinhardHatko/1967dd3f4afe78683cc0ba14d6ec8744/raw/c1625eb7ed7671b7e09a3fa2a25998dde33c70b8/metadata.json";
+var DOT_HOST_NAME = "bulletin-deploy";
+var STALE_SESSION_MESSAGE = 'Stored login session could not be read \u2014 it may have been written by an older version. Run "bulletin-deploy logout", then "bulletin-deploy login" to pair again.';
 function hasPersistedSession() {
-  return existsSync(join(homedir(), ".polkadot-apps", `${DOT_DAPP_ID}_SsoSessions.json`));
+  const dir = join(homedir(), ".polkadot-apps");
+  if (!existsSync(dir)) return false;
+  const prefix = `${DOT_DAPP_ID}_SsoSessions`;
+  try {
+    return readdirSync(dir).some((f) => f.startsWith(prefix) && f.endsWith(".json"));
+  } catch {
+    return false;
+  }
 }
 function buildAuthConfig(doc, envId) {
   const peopleChain = doc.chains.find((c) => c.id === "people");
@@ -31,10 +42,22 @@ function buildAuthConfig(doc, envId) {
     dappId: DOT_DAPP_ID,
     productId: DOT_PRODUCT_ID,
     derivationIndex: DOT_DERIVATION_INDEX,
-    metadataUrl: DOT_TERMINAL_METADATA_URL,
+    hostName: DOT_HOST_NAME,
+    hostVersion: VERSION,
     peopleEndpoints
   };
 }
+function resolveBulletinEndpoints(doc, envId) {
+  const bulletinChain = doc.chains.find((c) => c.id === "bulletin");
+  const endpoint = bulletinChain?.endpoints[envId];
+  if (!endpoint) return null;
+  return Array.isArray(endpoint.wss) ? endpoint.wss : [endpoint.wss];
+}
+async function getPeopleChainEndpoints(envId) {
+  const { doc } = await loadEnvironments();
+  const config = buildAuthConfig(doc, envId);
+  return config.peopleEndpoints;
+}
 async function getAuthClient(envId) {
   const { createAuthClient } = await import("./auth/index.js");
   const { doc } = await loadEnvironments();
@@ -45,8 +68,11 @@ export {
   DOT_DAPP_ID,
   DOT_PRODUCT_ID,
   DOT_DERIVATION_INDEX,
-  DOT_TERMINAL_METADATA_URL,
+  DOT_HOST_NAME,
+  STALE_SESSION_MESSAGE,
   hasPersistedSession,
   buildAuthConfig,
+  resolveBulletinEndpoints,
+  getPeopleChainEndpoints,
   getAuthClient
 };

package/dist/chunk-J7CYVTAW.js

@@ -0,0 +1,43 @@
+// src/spinner.ts
+var FRAMES = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
+var FRAME_MS = 120;
+function startSpinner(label, stream = process.stdout) {
+  const start = Date.now();
+  if (!stream.isTTY) {
+    stream.write(`   ${label}\u2026
+`);
+    let stopped2 = false;
+    return {
+      stop(finalLine) {
+        if (stopped2) return;
+        stopped2 = true;
+        if (finalLine) stream.write(`${finalLine}
+`);
+      }
+    };
+  }
+  let frame = 0;
+  const render = () => {
+    const elapsed = Math.round((Date.now() - start) / 1e3);
+    stream.write(`\r   ${FRAMES[frame % FRAMES.length]} ${label}\u2026 (${elapsed}s)\x1B[K`);
+    frame++;
+  };
+  render();
+  const interval = setInterval(render, FRAME_MS);
+  interval.unref();
+  let stopped = false;
+  return {
+    stop(finalLine) {
+      if (stopped) return;
+      stopped = true;
+      clearInterval(interval);
+      stream.write("\r\x1B[K");
+      if (finalLine) stream.write(`${finalLine}
+`);
+    }
+  };
+}
+
+export {
+  startSpinner
+};

package/dist/{chunk-WHMNBSG7.js → chunk-LCKLYFAZ.js}

@@ -1,7 +1,7 @@
 import {
   package_default,
   writeRunState
-} from "./chunk-YXGNQZZF.js";
+} from "./chunk-2SR5D4CP.js";
 
 // src/memory-report.ts
 import * as fs2 from "fs";
@@ -17,7 +17,6 @@ import * as path from "path";
 var VERSION = package_default.version;
 var DOTNS_BACKEND = "contract";
 var DOTNS_POP_SOURCE = "personhood-precompile";
-var DEFAULT_DSN = "https://e021c025d79c4c3ade2862a11f13c40b@o4511059872841728.ingest.de.sentry.io/4511093597405264";
 var INTERNAL_ORG_RE = /^(paritytech|w3f|polkadot-fellows)\//i;
 var PARITY_HOST_APPS = /* @__PURE__ */ new Set(["playground-cli"]);
 function extractRepoSlug(url) {
@@ -45,7 +44,7 @@ function isInternalContext() {
     hostApp: process.env.BULLETIN_DEPLOY_HOST_APP
   });
 }
-var OPT_OUT = process.env.BULLETIN_DEPLOY_TELEMETRY === "0";
+var OPT_OUT = process.env.BULLETIN_DEPLOY_TELEMETRY === "0" || process.env.BULLETIN_DEPLOY_TELEMETRY === "off";
 var OPT_IN = process.env.BULLETIN_DEPLOY_TELEMETRY === "1";
 var DISABLED = OPT_OUT || !OPT_IN && !isInternalContext();
 var CONVENTIONAL_BRANCH_PREFIXES = /* @__PURE__ */ new Set([
@@ -117,8 +116,10 @@ function initTelemetry() {
   if (process.env.BULLETIN_DEPLOY_USE_AMBIENT_SENTRY === "1") {
     return;
   }
+  const dsn = process.env.SENTRY_DSN || (true ? "" : "");
+  if (!dsn) return;
   Sentry.init({
-    dsn: process.env.SENTRY_DSN || DEFAULT_DSN,
+    dsn,
     release: `${package_default.name}@${VERSION}`,
     tracesSampleRate: 1,
     environment: process.env.CI ? "ci" : "local",

package/dist/{chunk-3OWKSL7K.js → chunk-NP4SLURL.js}

@@ -1,6 +1,6 @@
 import {
   captureWarning
-} from "./chunk-WHMNBSG7.js";
+} from "./chunk-LCKLYFAZ.js";
 
 // src/chunk-probe.ts
 import { Twox128, Blake2128Concat, decAnyMetadata, unifyMetadata } from "@polkadot-api/substrate-bindings";

package/dist/{chunk-T4PAK4YK.js → chunk-O2NWQLYB.js}

@@ -2,11 +2,11 @@ import {
   classifyErrorArea,
   isInteractive,
   promptYesNo
-} from "./chunk-OFVBJOFB.js";
+} from "./chunk-6NW5M3F5.js";
 import {
   VERSION,
   getCurrentSentryTraceId
-} from "./chunk-WHMNBSG7.js";
+} from "./chunk-LCKLYFAZ.js";
 
 // src/bug-report.ts
 import { execSync, execFileSync } from "child_process";