@parity/product-deploy 0.9.0 → 0.10.0-rc.1

package/dist/dotns.js

@@ -23,6 +23,7 @@ import {
   TX_WALL_CLOCK_CEILING_MS,
   WS_HEARTBEAT_TIMEOUT_MS,
   __formatContractDryRunFailureForTest,
+  bufferedWeiToNative,
   canRegister,
   classifyAliasAccountRow,
   classifyDotnsLabel,
@@ -46,15 +47,19 @@ import {
   parseDomainName,
   parseProofOfPersonhoodStatus,
   popStatusName,
+  registerDepositWei,
   sanitizeDomainLabel,
+  shouldRetryTxAttempt,
   stripTrailingDigits,
   validateDomainLabel,
-  verifyNonceAdvanced
-} from "./chunk-GCKWJS2T.js";
+  verifyNonceAdvanced,
+  weiToNative
+} from "./chunk-4ADUQDYJ.js";
+import "./chunk-SI2ZUOYD.js";
 import "./chunk-4PVJ2JBZ.js";
-import "./chunk-C7UJ6WZR.js";
-import "./chunk-A3O7TLCS.js";
-import "./chunk-GL3U7K2B.js";
+import "./chunk-64RSUZN4.js";
+import "./chunk-RX3ZUVVS.js";
+import "./chunk-QRKI6MMK.js";
 import "./chunk-ZOC4GITL.js";
 export {
   ATTR_TX_RESOLUTION_KIND,
@@ -81,6 +86,7 @@ export {
   TX_WALL_CLOCK_CEILING_MS,
   WS_HEARTBEAT_TIMEOUT_MS,
   __formatContractDryRunFailureForTest,
+  bufferedWeiToNative,
   canRegister,
   classifyAliasAccountRow,
   classifyDotnsLabel,
@@ -104,8 +110,11 @@ export {
   parseDomainName,
   parseProofOfPersonhoodStatus,
   popStatusName,
+  registerDepositWei,
   sanitizeDomainLabel,
+  shouldRetryTxAttempt,
   stripTrailingDigits,
   validateDomainLabel,
-  verifyNonceAdvanced
+  verifyNonceAdvanced,
+  weiToNative
 };

package/dist/environments.js

@@ -9,7 +9,7 @@ import {
   loadEnvironments,
   resolveEndpoints,
   validateContractAddresses
-} from "./chunk-GL3U7K2B.js";
+} from "./chunk-QRKI6MMK.js";
 import "./chunk-ZOC4GITL.js";
 export {
   DEFAULT_ENV_ID,

package/dist/index.js

@@ -1,18 +1,18 @@
-import {
-  defineConfig
-} from "./chunk-GZD2UFLR.js";
 import {
   loadProductConfig,
   tryLoadProductConfig
 } from "./chunk-MMAZFJDG.js";
+import {
+  publishManifest
+} from "./chunk-VHAKRWRH.js";
 import {
   validateExecutableManifest,
   validateProductConfig,
   validateRootManifest
 } from "./chunk-LZJMVPYW.js";
 import {
-  publishManifest
-} from "./chunk-AQHBKIFF.js";
+  defineConfig
+} from "./chunk-GZD2UFLR.js";
 import {
   DEFAULT_TEXT_RECORD_BUDGET_BYTES,
   PLACEHOLDER_CID,
@@ -24,8 +24,8 @@ import {
   deploy,
   merkleizeJS,
   merkleizeWithStableOrder
-} from "./chunk-WAKSNE7F.js";
-import "./chunk-5UE2IWNB.js";
+} from "./chunk-ZF2SEY7S.js";
+import "./chunk-HEUKYXEZ.js";
 import "./chunk-GRPLHUYC.js";
 import "./chunk-HOTQDYHD.js";
 import {
@@ -49,19 +49,20 @@ import {
   isVolatilePath,
   parseManifest
 } from "./chunk-S7EM5VMW.js";
-import "./chunk-56QBW25C.js";
-import "./chunk-FNCBSJ6R.js";
-import "./chunk-UC2AYO2P.js";
+import "./chunk-2GDPXSW3.js";
+import "./chunk-S42FFXAR.js";
+import "./chunk-HOO5NKN3.js";
 import {
   probeChunks
-} from "./chunk-D7KZZDU7.js";
+} from "./chunk-HA7BNUK3.js";
 import "./chunk-C2TS5MER.js";
 import {
   DEFAULT_MNEMONIC,
   DotNS,
   parseDomainName,
   sanitizeDomainLabel
-} from "./chunk-GCKWJS2T.js";
+} from "./chunk-4ADUQDYJ.js";
+import "./chunk-SI2ZUOYD.js";
 import {
   bootstrapPool,
   derivePoolAccounts,
@@ -69,7 +70,7 @@ import {
   fetchPoolAuthorizations,
   selectAccount
 } from "./chunk-4PVJ2JBZ.js";
-import "./chunk-C7UJ6WZR.js";
+import "./chunk-64RSUZN4.js";
 import {
   VERSION,
   loadRunState,
@@ -79,7 +80,7 @@ import {
   shouldSkipStaleWarning,
   stateFilePath,
   writeRunState
-} from "./chunk-A3O7TLCS.js";
+} from "./chunk-RX3ZUVVS.js";
 import {
   DEFAULT_ENV_ID,
   deepMergeEnvironments,
@@ -90,7 +91,7 @@ import {
   loadEnvironments,
   resolveEndpoints,
   validateContractAddresses
-} from "./chunk-GL3U7K2B.js";
+} from "./chunk-QRKI6MMK.js";
 import "./chunk-ZOC4GITL.js";
 export {
   DEFAULT_ENV_ID,

package/dist/manifest/publish.js

@@ -1,25 +1,26 @@
 import {
   publishManifest
-} from "../chunk-AQHBKIFF.js";
+} from "../chunk-VHAKRWRH.js";
 import "../chunk-RI3ZLNPN.js";
-import "../chunk-WAKSNE7F.js";
-import "../chunk-5UE2IWNB.js";
+import "../chunk-ZF2SEY7S.js";
+import "../chunk-HEUKYXEZ.js";
 import "../chunk-GRPLHUYC.js";
 import "../chunk-HOTQDYHD.js";
 import "../chunk-IW3X2MJF.js";
 import "../chunk-KOSF5FDO.js";
 import "../chunk-J3NIXHZZ.js";
 import "../chunk-S7EM5VMW.js";
-import "../chunk-56QBW25C.js";
-import "../chunk-FNCBSJ6R.js";
-import "../chunk-UC2AYO2P.js";
-import "../chunk-D7KZZDU7.js";
+import "../chunk-2GDPXSW3.js";
+import "../chunk-S42FFXAR.js";
+import "../chunk-HOO5NKN3.js";
+import "../chunk-HA7BNUK3.js";
 import "../chunk-C2TS5MER.js";
-import "../chunk-GCKWJS2T.js";
+import "../chunk-4ADUQDYJ.js";
+import "../chunk-SI2ZUOYD.js";
 import "../chunk-4PVJ2JBZ.js";
-import "../chunk-C7UJ6WZR.js";
-import "../chunk-A3O7TLCS.js";
-import "../chunk-GL3U7K2B.js";
+import "../chunk-64RSUZN4.js";
+import "../chunk-RX3ZUVVS.js";
+import "../chunk-QRKI6MMK.js";
 import "../chunk-ZOC4GITL.js";
 export {
   publishManifest

package/dist/memory-report.js

@@ -5,8 +5,8 @@ import {
   maybeWriteMemoryReport,
   safeHeap,
   sampleFromBytes
-} from "./chunk-C7UJ6WZR.js";
-import "./chunk-A3O7TLCS.js";
+} from "./chunk-64RSUZN4.js";
+import "./chunk-RX3ZUVVS.js";
 export {
   DEFAULT_THRESHOLD_MB,
   buildMemoryReport,

package/dist/merkle.js

@@ -6,24 +6,25 @@ import {
   merkleizeKuboBackend,
   merkleizeWithStableOrder,
   rebuildOrderedCarFromBytes
-} from "./chunk-WAKSNE7F.js";
-import "./chunk-5UE2IWNB.js";
+} from "./chunk-ZF2SEY7S.js";
+import "./chunk-HEUKYXEZ.js";
 import "./chunk-GRPLHUYC.js";
 import "./chunk-HOTQDYHD.js";
 import "./chunk-IW3X2MJF.js";
 import "./chunk-KOSF5FDO.js";
 import "./chunk-J3NIXHZZ.js";
 import "./chunk-S7EM5VMW.js";
-import "./chunk-56QBW25C.js";
-import "./chunk-FNCBSJ6R.js";
-import "./chunk-UC2AYO2P.js";
-import "./chunk-D7KZZDU7.js";
+import "./chunk-2GDPXSW3.js";
+import "./chunk-S42FFXAR.js";
+import "./chunk-HOO5NKN3.js";
+import "./chunk-HA7BNUK3.js";
 import "./chunk-C2TS5MER.js";
-import "./chunk-GCKWJS2T.js";
+import "./chunk-4ADUQDYJ.js";
+import "./chunk-SI2ZUOYD.js";
 import "./chunk-4PVJ2JBZ.js";
-import "./chunk-C7UJ6WZR.js";
-import "./chunk-A3O7TLCS.js";
-import "./chunk-GL3U7K2B.js";
+import "./chunk-64RSUZN4.js";
+import "./chunk-RX3ZUVVS.js";
+import "./chunk-QRKI6MMK.js";
 import "./chunk-ZOC4GITL.js";
 export {
   buildOrderedCar,

package/dist/personhood/bootstrap.js

@@ -1,3 +1,6 @@
+import {
+  claimPgas
+} from "../chunk-EATOPQFR.js";
 import {
   deriveMemberEntropy,
   deriveMemberKey
@@ -10,29 +13,26 @@ import "../chunk-EJI3MX4G.js";
 import {
   bindPersonalIdToAccount
 } from "../chunk-7URNKK6J.js";
+import {
+  bytesToHex
+} from "../chunk-ZYVGHDMU.js";
 import {
   runChainPrereqProbes
 } from "../chunk-XAB7WM3S.js";
 import {
-  claimPgas
-} from "../chunk-EATOPQFR.js";
-import {
-  bytesToHex
-} from "../chunk-ZYVGHDMU.js";
+  WS_HEARTBEAT_TIMEOUT_MS
+} from "../chunk-4ADUQDYJ.js";
 import {
   DOTNS_CONTEXT_BYTES,
   PEOPLE_MEMBER_IDENTIFIER_HEX,
   PGAS_ASSET_ID
 } from "../chunk-SI2ZUOYD.js";
-import {
-  WS_HEARTBEAT_TIMEOUT_MS
-} from "../chunk-GCKWJS2T.js";
 import "../chunk-4PVJ2JBZ.js";
-import "../chunk-C7UJ6WZR.js";
-import "../chunk-A3O7TLCS.js";
+import "../chunk-64RSUZN4.js";
+import "../chunk-RX3ZUVVS.js";
 import {
   loadEnvironments
-} from "../chunk-GL3U7K2B.js";
+} from "../chunk-QRKI6MMK.js";
 import "../chunk-ZOC4GITL.js";
 
 // src/personhood/bootstrap.ts

package/dist/personhood/people-client.js

@@ -1,12 +1,13 @@
 import {
   WS_HEARTBEAT_TIMEOUT_MS
-} from "../chunk-GCKWJS2T.js";
+} from "../chunk-4ADUQDYJ.js";
+import "../chunk-SI2ZUOYD.js";
 import "../chunk-4PVJ2JBZ.js";
-import "../chunk-C7UJ6WZR.js";
-import "../chunk-A3O7TLCS.js";
+import "../chunk-64RSUZN4.js";
+import "../chunk-RX3ZUVVS.js";
 import {
   loadEnvironments
-} from "../chunk-GL3U7K2B.js";
+} from "../chunk-QRKI6MMK.js";
 import "../chunk-ZOC4GITL.js";
 
 // src/personhood/people-client.ts

package/dist/run-state.js

@@ -7,7 +7,7 @@ import {
   shouldSkipStaleWarning,
   stateFilePath,
   writeRunState
-} from "./chunk-A3O7TLCS.js";
+} from "./chunk-RX3ZUVVS.js";
 export {
   VERSION,
   loadRunState,

package/dist/{signer-vR6KKC7V.d.ts → signer-Duup0hgQ.d.ts}

@@ -1,6 +1,6 @@
 import { DevAccountName } from '@parity/product-sdk-tx';
 import { PolkadotSigner } from 'polkadot-api';
-import { h as SessionHandle, S as SessionAddresses, c as AuthClient } from './auth-C-Pel0AT.js';
+import { e as SessionHandle, S as SessionAddresses, A as AuthClient } from './auth-CA_YKtM2.js';
 
 type SignerSource = "dev" | "session";
 interface ResolvedSigner {

package/dist/sss-allowance-cache.js

@@ -4,12 +4,12 @@ import {
   preflightSssAllowance,
   sssPeriodEndSec,
   writeSssAllowanceCache
-} from "./chunk-5UE2IWNB.js";
+} from "./chunk-HEUKYXEZ.js";
 import "./chunk-GRPLHUYC.js";
-import "./chunk-56QBW25C.js";
-import "./chunk-C7UJ6WZR.js";
-import "./chunk-A3O7TLCS.js";
-import "./chunk-GL3U7K2B.js";
+import "./chunk-2GDPXSW3.js";
+import "./chunk-64RSUZN4.js";
+import "./chunk-RX3ZUVVS.js";
+import "./chunk-QRKI6MMK.js";
 import "./chunk-ZOC4GITL.js";
 export {
   clearSssAllowanceCache,

package/dist/storage-signer.js

@@ -7,24 +7,25 @@ import {
   readBulletinSlotSigner,
   waitForBulletinAuthorization,
   writeBulletinSlotKey
-} from "./chunk-WAKSNE7F.js";
-import "./chunk-5UE2IWNB.js";
+} from "./chunk-ZF2SEY7S.js";
+import "./chunk-HEUKYXEZ.js";
 import "./chunk-GRPLHUYC.js";
 import "./chunk-HOTQDYHD.js";
 import "./chunk-IW3X2MJF.js";
 import "./chunk-KOSF5FDO.js";
 import "./chunk-J3NIXHZZ.js";
 import "./chunk-S7EM5VMW.js";
-import "./chunk-56QBW25C.js";
-import "./chunk-FNCBSJ6R.js";
-import "./chunk-UC2AYO2P.js";
-import "./chunk-D7KZZDU7.js";
+import "./chunk-2GDPXSW3.js";
+import "./chunk-S42FFXAR.js";
+import "./chunk-HOO5NKN3.js";
+import "./chunk-HA7BNUK3.js";
 import "./chunk-C2TS5MER.js";
-import "./chunk-GCKWJS2T.js";
+import "./chunk-4ADUQDYJ.js";
+import "./chunk-SI2ZUOYD.js";
 import "./chunk-4PVJ2JBZ.js";
-import "./chunk-C7UJ6WZR.js";
-import "./chunk-A3O7TLCS.js";
-import "./chunk-GL3U7K2B.js";
+import "./chunk-64RSUZN4.js";
+import "./chunk-RX3ZUVVS.js";
+import "./chunk-QRKI6MMK.js";
 import "./chunk-ZOC4GITL.js";
 export {
   BulletinSlotAuthError,

package/dist/telemetry.d.ts

@@ -35,6 +35,22 @@ interface InternalContextSignals {
 }
 declare function isInternalContextFromSignals(signals: InternalContextSignals): boolean;
 declare function isInternalContext(): boolean;
+/**
+ * Pure decision function for whether telemetry is disabled.
+ *
+ * Precedence (highest to lowest):
+ * 1. optOut (BULLETIN_DEPLOY_TELEMETRY=0/off) → always disabled
+ * 2. optIn (BULLETIN_DEPLOY_TELEMETRY=1) → enabled, overrides DO_NOT_TRACK
+ * 3. doNotTrack (DO_NOT_TRACK=1) → disabled
+ * 4. internalContext (Parity CI / internal org) → enabled
+ * 5. default → disabled (telemetry is off for external users)
+ */
+declare function isTelemetryDisabled(s: {
+    optIn: boolean;
+    optOut: boolean;
+    doNotTrack: boolean;
+    internalContext: boolean;
+}): boolean;
 declare function scrubPaths(msg: string): string;
 declare function truncateAddress(ss58: string | undefined): string | undefined;
 declare function sanitizeBranch(name: string | undefined): string | undefined;
@@ -95,4 +111,4 @@ declare function markCodePath(id: CodePath): void;
 declare function captureWarning(message: string, context?: Record<string, unknown>): void;
 declare function flush(): Promise<void>;
 
-export { type DeployErrorCategory, type DeployErrorKind, type InternalContextSignals, VERSION, __setDeployRootSpanForTest, __setSentryForTest, analyseErrorPattern, captureWarning, classifyDeployError, classifyErrorKind, classifySadReason, closeTelemetry, computeDeployOutcome, flush, getCurrentSentryTraceId, getDeployAttributes, initTelemetry, isExpectedError, isInternalContext, isInternalContextFromSignals, markCodePath, markRelaunchOomHintShown, resolveRepo, resolveRunner, resolveRunnerType, sampleMemory, sanitizeBranch, sanitizeErrorMessage, sanitizeRepo, scrubPaths, setDeployAttribute, setDeployReportContext, setDeploySentryTag, setRunStateActive, truncateAddress, withDeploySpan, withSpan };
+export { type DeployErrorCategory, type DeployErrorKind, type InternalContextSignals, VERSION, __setDeployRootSpanForTest, __setSentryForTest, analyseErrorPattern, captureWarning, classifyDeployError, classifyErrorKind, classifySadReason, closeTelemetry, computeDeployOutcome, flush, getCurrentSentryTraceId, getDeployAttributes, initTelemetry, isExpectedError, isInternalContext, isInternalContextFromSignals, isTelemetryDisabled, markCodePath, markRelaunchOomHintShown, resolveRepo, resolveRunner, resolveRunnerType, sampleMemory, sanitizeBranch, sanitizeErrorMessage, sanitizeRepo, scrubPaths, setDeployAttribute, setDeployReportContext, setDeploySentryTag, setRunStateActive, truncateAddress, withDeploySpan, withSpan };

package/dist/telemetry.js

@@ -16,6 +16,7 @@ import {
   isExpectedError,
   isInternalContext,
   isInternalContextFromSignals,
+  isTelemetryDisabled,
   markCodePath,
   markRelaunchOomHintShown,
   resolveRepo,
@@ -33,8 +34,8 @@ import {
   truncateAddress,
   withDeploySpan,
   withSpan
-} from "./chunk-C7UJ6WZR.js";
-import "./chunk-A3O7TLCS.js";
+} from "./chunk-64RSUZN4.js";
+import "./chunk-RX3ZUVVS.js";
 export {
   VERSION,
   __setDeployRootSpanForTest,
@@ -53,6 +54,7 @@ export {
   isExpectedError,
   isInternalContext,
   isInternalContextFromSignals,
+  isTelemetryDisabled,
   markCodePath,
   markRelaunchOomHintShown,
   resolveRepo,

package/dist/version-check.js

@@ -11,9 +11,9 @@ import {
   isPreReleaseVersion,
   preReleaseWarning,
   promptYesNo
-} from "./chunk-UC2AYO2P.js";
-import "./chunk-C7UJ6WZR.js";
-import "./chunk-A3O7TLCS.js";
+} from "./chunk-HOO5NKN3.js";
+import "./chunk-64RSUZN4.js";
+import "./chunk-RX3ZUVVS.js";
 export {
   assessVersion,
   checkNodeVersion,

package/docs/bootstrap.md

@@ -45,5 +45,5 @@ bulletin-bootstrap --mnemonic "..."
 
 ## Related Docs
 
-- [Main README](../docs-internal/README.dev.md)
+- [Main README](../README.md)
 - [E2E test setup](./e2e-bootstrap.md)

package/docs/e2e-bootstrap.md

@@ -1,11 +1,33 @@
 # E2E test setup
 
+> This is a **contributor** guide for running the live-testnet E2E suite. If you only want to deploy your own app, see [DEPLOYMENT.md](../DEPLOYMENT.md) instead.
+
 The E2E suite (`test/e2e.test.js`, driven by `.github/workflows/e2e.yml`) deploys real content to Paseo Bulletin testnet via `bulletin-deploy` and verifies the on-chain round-trip. It consumes the **shared default pool** (derived from `DEV_PHRASE` — the same pool real users hit in production) for Bulletin chunk upload, so no pool bootstrapping is required.
 
 Three one-time setup items are needed before the workflow can pass. Do them once per testnet lifetime (redo if testnet is wiped).
 
 ---
 
+## Chain-admin prerequisites
+
+Some of this setup needs authority a normal contributor doesn't have — the Bulletin chain's storage **authorizer** key, the DotNS `POP_RULES` contract **owner**, and (on faucet-less testnets) a funding source. A network operator ensures the following before the suite can pass. The check commands are read-only and safe to run anytime; the grant tools are idempotent — they report current status and do only what is missing.
+
+1. **Personhood (PoP) status.** Registering a PoP-Full base label (e.g. `e2epool.dot`) requires Full Personhood on the DotNS Personhood precompile — Alice for the happy-path scenarios, and Bob once for the `e2eowned.dot` S3 fixture. NoStatus fallback labels (e.g. `e2epoolns01.dot`) need no grant; they auto-register on first deploy.
+   - Check: `node tools/check-pop-status.mjs --env <id>`
+   - Grant: by the `POP_RULES` contract owner — request via an issue on [paritytech/dotns](https://github.com/paritytech/dotns/issues). `bulletin-deploy` cannot self-upgrade a signer.
+
+2. **Asset Hub funding (DotNS fees).** The accounts that register or transfer names need a balance on the target Asset Hub.
+   - Check: `node tools/check-balances.mjs --env <id>` (shows balances and Bulletin authorization quota for every E2E signer in one pass)
+   - Grant: on Paseo, use the public faucet at [https://faucet.polkadot.io/](https://faucet.polkadot.io/). `paseo-next-v2` has no public faucet — the operator funds the accounts out of band.
+
+3. **Bulletin storage authorization (upload allowance).** Every account that uploads chunks must carry a `TransactionStorage` authorization; `bulletin-deploy` never self-authorizes. On testnet the authorizer is `//Alice`.
+   - Check: `node tools/check-bulletin-auth.mjs --env <id>`
+   - Grant: **pool accounts** via `bulletin-bootstrap --env <id>` (authorizes and funds them); **direct-mode signers** (the per-shard `//e2e-*` derivation paths) via `node tools/setup-e2e-derivation-signers.mjs --env <id>`. Alice is the authorizer itself, and Bob only owns the S3 fixture name (never uploads), so neither needs its own storage grant.
+
+The per-environment sections below are the step-by-step procedures that satisfy these.
+
+---
+
 ## Paseo (stable testnet)
 
 ### Prerequisites
@@ -22,7 +44,7 @@ Both happy-path scenarios (S1, S2) deploy as Alice via DotNS. Registering a new
 node tools/check-pop-status.mjs
 ```
 
-Re-run if the check cannot read Alice's status. Self-attestation is no longer available; ask the DotNS team to whitelist the signer if Alice needs a higher status for a label class.
+Re-run if the check cannot read Alice's status. Self-attestation is no longer available; a signer's Personhood status is granted by the `POP_RULES` contract owner. To request a status grant (whitelisting) for a signer, open an issue on [paritytech/dotns](https://github.com/paritytech/dotns/issues).
 
 ### 2. Fund and map Bob on Asset Hub Paseo
 
@@ -42,7 +64,7 @@ Expected output: Bob's SS58, his H160 (`0x41dccbd49b26c50d34355ed86ff0fa9e489d1e
 The S3 negative scenario asserts that `bulletin-deploy` refuses to deploy to a domain owned by a different account (exit 78 with transfer guidance). Have Bob register the label with a DotNS registration tool outside `bulletin-deploy` — no Alice intermediary, no Bulletin content needed (S3 never reads content).
 
 ```bash
-node tools/register-test-fixture-paseo-next-v2.mjs e2eowned
+node tools/register-test-fixture.mjs e2eowned
 ```
 
 Expected: `e2eowned.dot` is owned by Bob's H160 `0x41dccbd49b26c50d34355ed86ff0fa9e489d1e01`. The `e2eowned.dot` label requires PoP Full status and a mature commitment (the tool waits 30s after the minimum commitment age). The tool is idempotent: it exits 0 immediately if Bob already owns it, and transfers the label from Alice back to Bob if fixture drift is detected.
@@ -55,14 +77,14 @@ If S3 ever fails because `e2eowned.dot` was transferred back to Alice by mistake
 
 Paseo Next v2 uses a separate Asset Hub (`wss://paseo-asset-hub-next-rpc.polkadot.io`) and Bulletin chain (`wss://paseo-bulletin-next-rpc.polkadot.io`) with different contract addresses. The `map_account` extrinsic does not exist on this chain — account mapping is triggered automatically when an account submits its first on-chain transaction.
 
-> **Note on PoP grants:** The paseo-next-v2 `POP_RULES` contract (`0x2002C1c15b88632Ad01c7770f6EbE1Ca05c8472E`) is **not permissionless** — `setUserPopStatus` can only be called by the contract owner (`0x4a519c30da0ec16aa9a73c26ea6ca6f701cce099`). `bulletin-deploy` itself cannot upgrade a signer; the chain team flips the Personhood precompile out of band. CI scenarios pick labels via `pickStableLabel`/`pickDirectLabel`/`pickIncLabel`/`pickRotLabel`, which auto-select between a PoP-Full base name (e.g. `e2epool.dot`) and a NoStatus fallback (e.g. `e2epoolns01.dot`) based on what `Personhood.personhoodStatus(<signer>)` returns at test start. The setup below covers both modes.
+> **Note on PoP grants:** The paseo-next-v2 `POP_RULES` contract (`0x2002C1c15b88632Ad01c7770f6EbE1Ca05c8472E`) is **not permissionless** — `setUserPopStatus` can only be called by its owner. `bulletin-deploy` cannot upgrade a signer itself; a status grant (whitelisting) is performed out of band by the contract owner. To request one for a signer, open an issue on [paritytech/dotns](https://github.com/paritytech/dotns/issues). CI scenarios pick labels via `pickStableLabel`/`pickDirectLabel`/`pickIncLabel`/`pickRotLabel`, which auto-select between a PoP-Full base name (e.g. `e2epool.dot`) and a NoStatus fallback (e.g. `e2epoolns01.dot`) based on what `Personhood.personhoodStatus(<signer>)` returns at test start. The setup below covers both modes.
 
-> **⚠ Testnet wipes reset everything.** When paseo-next-v2 is reset (which happens periodically), Alice's Personhood precompile status drops to NoStatus *and* every `e2e*.dot` registration is gone. Re-run the relevant steps below after each wipe — there is no on-chain self-recovery. Issue #381 traces back to exactly this: Alice's status came back as Full but `e2epool.dot` was unregistered, so `setContenthash` reverted with `ERC721NonexistentToken`. As long as ownership stays in lockstep with Alice's PoP grade (Full ↔ PoP-Full labels registered; NoStatus ↔ NoStatus labels auto-register on first deploy), the nightly stays green.
+> **⚠ Testnet wipes reset everything.** When paseo-next-v2 is reset (which happens periodically), Alice's Personhood precompile status drops to NoStatus *and* every `e2e*.dot` registration is gone. Re-run the relevant steps below after each wipe — there is no on-chain self-recovery. A subtle failure mode to watch for: Alice's status can come back as Full while `e2epool.dot` is unregistered, so `setContenthash` reverts with `ERC721NonexistentToken`. As long as ownership stays in lockstep with Alice's PoP grade (Full ↔ PoP-Full labels registered; NoStatus ↔ NoStatus labels auto-register on first deploy), the nightly stays green.
 
 ### Prerequisites
 
 - `bulletin-deploy` built locally (`npm run build`).
-- Alice (`5DfhGyQdFobKM8NsWvEeAKk5EQQgYe9AydgJ7rMB6E1EqRzV`) funded on paseo-next-v2 Asset Hub. The chain team must send funds manually — there is no public faucet for this chain.
+- Alice (`5DfhGyQdFobKM8NsWvEeAKk5EQQgYe9AydgJ7rMB6E1EqRzV`) funded on paseo-next-v2 Asset Hub. This is a restricted testnet with no public faucet — the account must be funded out of band by the network operator.
 
 ### 1. Authorize pool accounts on Bulletin Next
 
@@ -81,7 +103,7 @@ node tools/check-pop-status.mjs --env paseo-next-v2
 What you see decides which labels need pre-registration:
 
 - **`NoStatus (0)`** → no extra work. The tests pick the NoStatus fallback labels (`e2epoolns01`, `e2edirect01`, `e2eincpool01`, `e2erotpool01`) which auto-register on first deploy because their shape (base length ≥ 9 with two trailing digits) bypasses the `Requires Full personhood verification` gate.
-- **`ProofOfPersonhoodFull (2)`** → the chain team has flipped Alice on the Personhood precompile. The tests will now pick the PoP-Full stable labels (`e2epool`, `e2edirect`, `e2einc`, `e2erot`), and those **must already be registered to Alice** before the matrix runs. Register them once:
+- **`ProofOfPersonhoodFull (2)`** → Alice has been flipped to Full on the Personhood precompile. The tests will now pick the PoP-Full stable labels (`e2epool`, `e2edirect`, `e2einc`, `e2erot`), and those **must already be registered to Alice** before the matrix runs. Register them once:
 
   ```bash
   # Pre-built fixture is fine — it's the contenthash, not the content, that the tests overwrite.
@@ -90,11 +112,11 @@ What you see decides which labels need pre-registration:
   done
   ```
 
-  Skipping this leaves `setContenthash` reverting with `ERC721NonexistentToken` on whichever PoP-Full label the scenario picks (issue #381).
+  Skipping this leaves `setContenthash` reverting with `ERC721NonexistentToken` on whichever PoP-Full label the scenario picks.
 
 ### 3. Fund Bob and trigger his account mapping
 
-Bob (`5FHneW46xGXgs5mUiveU4sbTyGBzmstUspZC92UhjJM694ty`) needs PAS on paseo-next-v2 Asset Hub so he can pay fees for the `e2eowned.dot` registration. Have the chain team send ~1 PAS to his SS58 address. His H160 mapping (`0x41dccbd49b26c50d34355ed86ff0fa9e489d1e01`) is triggered automatically when he submits his first on-chain tx.
+Bob (`5FHneW46xGXgs5mUiveU4sbTyGBzmstUspZC92UhjJM694ty`) needs PAS on paseo-next-v2 Asset Hub so he can pay fees for the `e2eowned.dot` registration. As above, this testnet has no public faucet — fund his SS58 address (~1 PAS) out of band. His H160 mapping (`0x41dccbd49b26c50d34355ed86ff0fa9e489d1e01`) is triggered automatically when he submits his first on-chain tx.
 
 Verify his mapping:
 
@@ -107,14 +129,14 @@ Expected output: Bob's SS58, his H160 (`0x41dccbd49b26c50d34355ed86ff0fa9e489d1e
 
 ### 4. Verify Bob PoP status
 
-Bob owns both `e2eownedns02.dot` (NoStatus, used by S3 when Alice is NoStatus) and `e2eowned.dot` (PoP-Full, used by S3 when the Personhood precompile has flipped Alice to Full). The NoStatus branch needs no admin help; the PoP-Full branch needed Bob to register it back when the chain team granted him Full status once. After that one-shot registration the label persists until expiry, so Bob can stay NoStatus going forward — ownership and PoP-grade are decoupled after registration.
+Bob owns both `e2eownedns02.dot` (NoStatus, used by S3 when Alice is NoStatus) and `e2eowned.dot` (PoP-Full, used by S3 when the Personhood precompile has flipped Alice to Full). The NoStatus branch needs no admin help; the PoP-Full branch needed Bob to register it back when he was granted Full status once. After that one-shot registration the label persists until expiry, so Bob can stay NoStatus going forward — ownership and PoP-grade are decoupled after registration.
 
 ### 5. Register `e2eownedns02.dot` directly as Bob
 
 Register the domain using the dedicated tool:
 
 ```bash
-node tools/register-test-fixture-paseo-next-v2.mjs e2eownedns02
+node tools/register-test-fixture.mjs e2eownedns02
 ```
 
 Expected: `e2eownedns02.dot` is owned by Bob (`0x41dccbd49b26c50d34355ed86ff0fa9e489d1e01`).
@@ -126,8 +148,8 @@ S3 picks `e2eowned.dot` when Alice is PoP-Full at test start. If the label is un
 
 If Bob already owns it (`ownerOf` on `DOTNS_REGISTRAR` returns `0x41dccbd…`), skip. Otherwise:
 
-- **If nobody owns it yet:** registration needs Bob to hold Full PoP. Coordinate with the chain team to flip Bob's Personhood precompile to Full, then run `node tools/register-e2eowned-paseo-next-v2.mjs` (the script targets Bob via `//Bob`). After registration Bob can drop back to NoStatus.
-- **If Alice (or anyone other than Bob) is squatting:** the owner can call `transferFrom(<current>, Bob, tokenId)` on `DOTNS_REGISTRAR`. ERC721 transfer is unconditional on the recipient (no PoP check) and doesn't need Bob's signer. `tools/transfer-e2eowned-to-bob.mjs` does this for Alice → Bob in one shot (was added to recover from a botched PR-CI run on 2026-05-17, see issue #381 thread).
+- **If nobody owns it yet:** registration needs Bob to hold Full PoP. Request Full PoP for Bob by opening an issue on [paritytech/dotns](https://github.com/paritytech/dotns/issues), then run `node tools/register-test-fixture.mjs e2eowned` (registers the label as Bob via `//Bob`). After registration Bob can drop back to NoStatus.
+- **If Alice (or anyone other than Bob) is squatting:** the owner can call `transferFrom(<current>, Bob, tokenId)` on `DOTNS_REGISTRAR`. ERC721 transfer is unconditional on the recipient (no PoP check) and doesn't need Bob's signer. Run `node tools/transfer-dotns-name.mjs --label e2eowned --to 0x41dccbd49b26c50d34355ed86ff0fa9e489d1e01 --env paseo-next-v2` to do this for Alice → Bob in one shot.
 
 ---
 

package/docs/telemetry.md

@@ -4,8 +4,13 @@ Telemetry is **off by default for external users**. It is enabled automatically
 
 ## Opt in / opt out
 
-- `BULLETIN_DEPLOY_TELEMETRY=1`: explicit opt-in
-- `BULLETIN_DEPLOY_TELEMETRY=0`: force off
+Telemetry is **off by default** for external users. It is only enabled automatically when running in a known Parity/internal context (see detection signals below), or via explicit opt-in.
+
+- `BULLETIN_DEPLOY_TELEMETRY=1`: explicit opt-in — also overrides `DO_NOT_TRACK`
+- `BULLETIN_DEPLOY_TELEMETRY=0` or `BULLETIN_DEPLOY_TELEMETRY=off`: force off
+- `DO_NOT_TRACK=1`: telemetry is disabled (standard EFF Do Not Track convention); overridden only by an explicit `BULLETIN_DEPLOY_TELEMETRY=1`
+
+Precedence (highest to lowest): explicit opt-out → explicit opt-in → DO_NOT_TRACK → internal context detection → default off.
 
 Internal detection signals are OR'd together:
 
@@ -32,7 +37,7 @@ BULLETIN_DEPLOY_HOST_APP=<your-app-name>
 BULLETIN_DEPLOY_HOST_APP_VERSION=<your-app-version>
 ```
 
-`BULLETIN_DEPLOY_HOST_APP_VERSION` is optional but recommended — it populates `deploy.host_app_version` on every span, enabling version-correlated triage in the dashboard.
+`BULLETIN_DEPLOY_HOST_APP_VERSION` is optional but recommended — it populates `deploy.host_app_version` on every span, enabling version-correlated triage in your Sentry dashboard.
 
 That makes `bulletin-deploy` reuse the existing Sentry client instead of calling its own `Sentry.init()`.
 
@@ -49,14 +54,8 @@ Use `--tag` or `DEPLOY_TAG` to separate test and benchmark traffic from real dep
 Examples:
 
 ```bash
-bulletin-deploy --tag e2e-ci-pr ./build my-app.dot
+bulletin-deploy --tag ci-smoke ./build my-app.dot
 DEPLOY_TAG=load-test bulletin-deploy ./build my-app.dot
 ```
 
-Common tags in this repo:
-
-- `e2e-ci-pr`
-- `e2e-ci-nightly`
-- `e2e-local-smoke`
-- `e2e-local-pr`
-- `e2e-local-nightly`
+Use any label that distinguishes a class of deploy — for example, separating CI smoke runs, nightly runs, and load tests from real user traffic so they can be filtered apart in telemetry.

package/docs/testing.md

@@ -1,5 +1,7 @@
 # Testing
 
+> Contributor reference. The offline suite runs anywhere; everything past it needs testnet access — see [E2E test setup](./e2e-bootstrap.md) for the one-time chain setup.
+
 The repo has three practical test layers: offline unit tests, live-testnet E2E coverage, and GitHub Actions matrices that exercise the shipped reusable workflow.
 
 ## Offline tests