bulletin-deploy 0.10.1-dev.0 → 0.11.0-rc.1

package/bin/bulletin-deploy

@@ -1,5 +1,11 @@
 #!/usr/bin/env node
 
+// Must be the FIRST import: installs process.emitWarning suppressor before any
+// SDK module-init code runs. In ESM, static imports are evaluated before inline
+// code, so the suppressor must live in a separate module imported ahead of the
+// SDK modules that trigger the "@parity/product-sdk-logger" localStorage warning.
+import "../dist/suppress-localstorage-warning.js";
+
 import { deploy, DEFAULT_BULLETIN_RPC, DEFAULT_POOL_SIZE, NonRetryableError, EXIT_CODE_NO_RETRY, isConnectionError, isBenignTeardownError, unpublish } from "../dist/deploy.js";
 import { VERSION, setDeployAttribute, captureWarning, closeTelemetry, setRunStateActive, markRelaunchOomHintShown } from "../dist/telemetry.js";
 import { handleFailedDeploy, handlePreflightVersionCheck, fetchVersionInfo, preReleaseWarning, checkNodeVersion } from "../dist/version-check.js";
@@ -7,16 +13,7 @@ import { setDeployContext, installLogCapture, buildCliFlagsSummary } from "../di
 import { loadRunState, writeRunState, shouldSkipStaleWarning, shouldShowOomHint, probablyOomRssMb } from "../dist/run-state.js";
 import { loadEnvironments, listEnvironments, formatEnvironmentTable, DEFAULT_ENV_ID } from "../dist/environments.js";
 import * as fs from "fs";
-
-// Suppress "@parity/product-sdk-logger" localStorage warning in Node.js v22+.
-// The logger tries to read log-level config from localStorage which doesn't exist
-// in Node.js — it emits a NoSuchNativeMethod warning we cannot fix upstream.
-const _origEmitWarning = process.emitWarning.bind(process);
-process.emitWarning = (warning, ...rest) => {
-  const msg = (typeof warning === "string" ? warning : warning?.message ?? String(warning)).toLowerCase();
-  if (msg.includes("localstorage") || msg.includes("local storage")) return;
-  _origEmitWarning(warning, ...rest);
-};
+import * as readline from "readline";
 
 // Install early so anything printed during flag parsing / preflight is
 // available to the bug-report log tail.
@@ -477,6 +474,41 @@ try {
     publish: flags.publish,
     failOnPublishError: flags.failOnPublishError,
     transferToSignedInUser: !flags.noTransferToSignedinUser,
+    // Human-first phone signing hooks (spec: 2026-06-13-human-first-phone-signing-design).
+    onPhoneSignaturePlan: (steps) => {
+      if (steps.length === 1) {
+        console.log(`\nHave your phone ready — 1 signature needed (${steps[0].toLowerCase()})`);
+      } else if (steps.length > 1) {
+        const display = steps.flatMap((s, i) =>
+          s === "Register" && steps[i - 1] === "Commitment" ? ["(wait)", s] : [s]
+        );
+        console.log(`\nHave your phone ready — ${steps.length} signatures needed`);
+        console.log(`   ${display.map(s => s.toLowerCase()).join(" · ")}`);
+      }
+    },
+    confirmPhoneReady: ({ label, attempt }) => new Promise((resolve, reject) => {
+      if (attempt >= 2) {
+        console.log(`\n   Re-sign needed (attempt ${attempt}) — approve on your phone, then press Y to continue (Ctrl-C to abort).`);
+      } else {
+        console.log(`\n   Check your phone → ${label}`);
+        console.log(`   Press Y when ready (Ctrl-C to abort):`);
+      }
+      const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+      let settled = false;
+      const settle = (fn) => { if (!settled) { settled = true; rl.close(); fn(); } };
+      rl.on("close", () => settle(reject.bind(null, new Error("aborted by user"))));
+      const ask = () => {
+        rl.question("   > ", (line) => {
+          const answer = line.trim().toLowerCase();
+          if (answer === "y" || answer === "") {
+            settle(resolve);
+          } else {
+            ask();
+          }
+        });
+      };
+      ask();
+    }),
   });
 
   const output = process.env.GITHUB_OUTPUT;

package/dist/auth-config.js

@@ -9,10 +9,10 @@ import {
   getPeopleChainEndpoints,
   hasPersistedSession,
   resolveBulletinEndpoints
-} from "./chunk-TE5ILRKP.js";
+} from "./chunk-4PLUBND7.js";
 import "./chunk-TSPERKUS.js";
-import "./chunk-LDMBTCMO.js";
-import "./chunk-VHW7K7JW.js";
+import "./chunk-7H6UYIDE.js";
+import "./chunk-U2JW2FSV.js";
 import "./chunk-QRKI6MMK.js";
 import "./chunk-ZOC4GITL.js";
 export {

package/dist/bug-report.js

@@ -9,10 +9,10 @@ import {
   offerBugReport,
   scrubSecrets,
   setDeployContext
-} from "./chunk-H73WL3JM.js";
-import "./chunk-UCRSE6CA.js";
-import "./chunk-LDMBTCMO.js";
-import "./chunk-VHW7K7JW.js";
+} from "./chunk-5SWXGBOO.js";
+import "./chunk-BJXJ7ZLD.js";
+import "./chunk-7H6UYIDE.js";
+import "./chunk-U2JW2FSV.js";
 export {
   buildCliFlagsSummary,
   buildLabels,

package/dist/{chunk-TE5ILRKP.js → chunk-4PLUBND7.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-TSPERKUS.js";
 import {
   VERSION
-} from "./chunk-LDMBTCMO.js";
+} from "./chunk-7H6UYIDE.js";
 import {
   loadEnvironments
 } from "./chunk-QRKI6MMK.js";

package/dist/{chunk-H73WL3JM.js → chunk-5SWXGBOO.js}

@@ -2,15 +2,20 @@ import {
   classifyErrorArea,
   isInteractive,
   promptYesNo
-} from "./chunk-UCRSE6CA.js";
+} from "./chunk-BJXJ7ZLD.js";
 import {
   VERSION,
-  getCurrentSentryTraceId
-} from "./chunk-LDMBTCMO.js";
+  getCurrentSentryTraceId,
+  resolveIssueRepoSlug
+} from "./chunk-7H6UYIDE.js";
+import {
+  package_default
+} from "./chunk-U2JW2FSV.js";
 
 // src/bug-report.ts
 import { execSync, execFileSync } from "child_process";
 import * as os from "os";
+var ISSUE_REPO = resolveIssueRepoSlug(package_default.repository);
 var _deployContext = {};
 function setDeployContext(ctx) {
   _deployContext = { ..._deployContext, ...ctx };
@@ -148,7 +153,7 @@ function createGhIssue(title, body, labels) {
     "issue",
     "create",
     "--repo",
-    "paritytech/bulletin-deploy",
+    ISSUE_REPO,
     "--title",
     title,
     ...labels.flatMap((l) => ["--label", l]),
@@ -179,7 +184,7 @@ async function offerBugReport(error) {
   const labels = buildLabels(error);
   if (!hasGhCli()) {
     console.error("\n   gh CLI not found. Debug info below \u2014 paste into a new issue:\n");
-    console.error(`   https://github.com/paritytech/bulletin-deploy/issues/new
+    console.error(`   https://github.com/${ISSUE_REPO}/issues/new
 `);
     printFallback(title, body, labels);
     return;

package/dist/{chunk-LDMBTCMO.js → chunk-7H6UYIDE.js}

@@ -1,7 +1,7 @@
 import {
   package_default,
   writeRunState
-} from "./chunk-VHW7K7JW.js";
+} from "./chunk-U2JW2FSV.js";
 
 // src/memory-report.ts
 import * as fs2 from "fs";
@@ -22,6 +22,17 @@ var PARITY_HOST_APPS = /* @__PURE__ */ new Set(["playground-cli"]);
 function extractRepoSlug(url) {
   return url.replace(/.*github\.com[:/]/, "").replace(/\.git$/, "");
 }
+var FALLBACK_ISSUE_REPO = "paritytech/bulletin-deploy";
+function resolveIssueRepoSlug(repository) {
+  try {
+    const raw = typeof repository === "string" ? repository : repository?.url;
+    if (!raw || typeof raw !== "string") return FALLBACK_ISSUE_REPO;
+    const slug = extractRepoSlug(raw.trim());
+    if (/^[^/\s]+\/[^/\s]+$/.test(slug)) return slug;
+  } catch {
+  }
+  return FALLBACK_ISSUE_REPO;
+}
 function tryGitRemote() {
   try {
     return extractRepoSlug(execSync("git remote get-url origin", { encoding: "utf-8", stdio: ["pipe", "pipe", "pipe"] }).trim());
@@ -724,6 +735,8 @@ export {
   maybeWriteMemoryReport,
   sampleFromBytes,
   VERSION,
+  extractRepoSlug,
+  resolveIssueRepoSlug,
   isInternalContextFromSignals,
   isInternalContext,
   isTelemetryDisabled,

package/dist/{chunk-UCRSE6CA.js → chunk-BJXJ7ZLD.js}

@@ -1,6 +1,6 @@
 import {
   VERSION
-} from "./chunk-LDMBTCMO.js";
+} from "./chunk-7H6UYIDE.js";
 
 // src/version-check.ts
 import { execSync, execFileSync } from "child_process";

package/dist/{chunk-WWHAWJ6W.js → chunk-CW6GFAEF.js}

@@ -7,10 +7,10 @@ import {
   resolveDotnsConnectOptions,
   storeDirectory,
   storeFile
-} from "./chunk-XZXMZ2EN.js";
+} from "./chunk-VJNXVT3F.js";
 import {
   DotNS
-} from "./chunk-Q5JW6NOW.js";
+} from "./chunk-TXJ6KQWM.js";
 import {
   getPopSelfServeConfig,
   loadEnvironments,

package/dist/{chunk-R74IZLP4.js → chunk-IMHVYM7Q.js}

@@ -1,6 +1,6 @@
 import {
   captureWarning
-} from "./chunk-LDMBTCMO.js";
+} from "./chunk-7H6UYIDE.js";
 
 // src/chunk-probe.ts
 import { Twox128, Blake2128Concat, decAnyMetadata, unifyMetadata } from "@polkadot-api/substrate-bindings";

package/dist/{chunk-Q5JW6NOW.js → chunk-TXJ6KQWM.js}

@@ -11,7 +11,7 @@ import {
   setDeploySentryTag,
   truncateAddress,
   withSpan
-} from "./chunk-LDMBTCMO.js";
+} from "./chunk-7H6UYIDE.js";
 import {
   validateContractAddresses
 } from "./chunk-QRKI6MMK.js";
@@ -988,6 +988,11 @@ var DotNS = class {
   _popSelfServe = null;
   _registerStorageDeposit = MINIMUM_REGISTER_STORAGE_DEPOSIT;
   _onPhoneSigningRequired = void 0;
+  _confirmPhoneReady = void 0;
+  /** Total phone-signature count for this DotNS session (drives the `total` field passed to confirmPhoneReady). */
+  _phoneSignatureTotal = 0;
+  /** Running attempt counter per label for re-sign detection. Reset at connect/disconnect. */
+  _phoneSignatureAttempts = /* @__PURE__ */ new Map();
   // Test-only seam: consumed once by classifyAliasAccountState() then cleared.
   // Mirrors the __setDeployRootSpanForTest / __setSentryForTest pattern.
   _classifyOverrideForTest = null;
@@ -1038,6 +1043,9 @@ var DotNS = class {
     if (options.onPhoneSigningRequired !== void 0) {
       this._onPhoneSigningRequired = options.onPhoneSigningRequired;
     }
+    if (options.confirmPhoneReady !== void 0) {
+      this._confirmPhoneReady = options.confirmPhoneReady;
+    }
     const rpc = options.rpc || process.env.DOTNS_RPC || this.assetHubEndpoints[0];
     this.rpc = rpc;
     this._usesExternalSigner = Boolean(options.signer && options.signerAddress);
@@ -1458,11 +1466,14 @@ var DotNS = class {
     return decodeFunctionResult({ abi: contractAbi, functionName, data: rawData });
   }
   async contractTransaction(contractAddress, value, contractAbi, functionName, args = [], statusCallback = () => {
-  }, { useNoncePolling, verifyEffect, feeAsset } = {}) {
+  }, { useNoncePolling, verifyEffect, feeAsset, phoneLabel } = {}) {
     this.ensureConnected();
     if (!this.clientWrapper) throw new Error("contractTransaction: polkadot-api client not available");
     const encodedCallData = encodeFunctionData({ abi: contractAbi, functionName, args });
     const rpcs = this.rpc ? [this.rpc, ...this.assetHubEndpoints.filter((ep) => ep !== this.rpc)] : this.assetHubEndpoints;
+    if (phoneLabel !== void 0) {
+      await this._awaitPhoneReady(phoneLabel);
+    }
     return await withTimeout(
       this.clientWrapper.submitTransaction(contractAddress, value, encodedCallData, this.substrateAddress, this.signer, statusCallback, { rpcs, useNoncePolling, functionName, args, contracts: this._contracts, verifyEffect, feeAsset }),
       OPERATION_TIMEOUT_MS,
@@ -1735,8 +1746,7 @@ var DotNS = class {
       };
       console.log(`
    Linking content...`);
-      this._onPhoneSigningRequired?.("Link content");
-      const txRes = await this.contractTransaction(this._contracts.DOTNS_CONTENT_RESOLVER, 0n, DOTNS_CONTENT_RESOLVER_ABI, "setContenthash", [node, contenthashHex], (s) => console.log(`      ${s}`), { useNoncePolling: true, verifyEffect, feeAsset: opts.feeAsset });
+      const txRes = await this.contractTransaction(this._contracts.DOTNS_CONTENT_RESOLVER, 0n, DOTNS_CONTENT_RESOLVER_ABI, "setContenthash", [node, contenthashHex], (s) => console.log(`      ${s}`), { useNoncePolling: true, verifyEffect, feeAsset: opts.feeAsset, phoneLabel: "Link content" });
       const finalOnChain = (await this.getContenthash(domainName) || "0x").toLowerCase();
       if (finalOnChain !== expected) {
         throw new Error(
@@ -1963,8 +1973,7 @@ var DotNS = class {
         }
       };
       try {
-        this._onPhoneSigningRequired?.("Publish to registry");
-        const txRes = await this.contractTransaction(publisher, 0n, PUBLISHER_ABI, "publish", [label], (s) => console.log(`      ${s}`), { useNoncePolling: true, verifyEffect });
+        const txRes = await this.contractTransaction(publisher, 0n, PUBLISHER_ABI, "publish", [label], (s) => console.log(`      ${s}`), { useNoncePolling: true, verifyEffect, phoneLabel: "Publish to registry" });
         const finalPublished = await withTimeout(
           this.contractCall(publisher, PUBLISHER_ABI, "isPublished", [labelhash]),
           3e4,
@@ -2108,8 +2117,7 @@ var DotNS = class {
     this.ensureConnected();
     console.log(`
    Submitting commitment...`);
-    this._onPhoneSigningRequired?.("Commitment");
-    const commitTxRes = await this.contractTransaction(this._contracts.DOTNS_REGISTRAR_CONTROLLER, 0n, DOTNS_REGISTRAR_CONTROLLER_ABI, "commit", [commitment], (s) => console.log(`      ${s}`));
+    const commitTxRes = await this.contractTransaction(this._contracts.DOTNS_REGISTRAR_CONTROLLER, 0n, DOTNS_REGISTRAR_CONTROLLER_ABI, "commit", [commitment], (s) => console.log(`      ${s}`), { phoneLabel: "Commitment" });
     logTxResolution(commitTxRes);
     console.log(`   Committed at: ${(/* @__PURE__ */ new Date()).toISOString()}`);
   }
@@ -2202,8 +2210,7 @@ var DotNS = class {
     setDeployAttribute("deploy.payment_wei", priceWei.toString());
     console.log(`   Oracle price: ${formatEther(priceWei)} PAS`);
     console.log(`   Paying: ${formatEther(bufferedPaymentWei)} PAS`);
-    this._onPhoneSigningRequired?.("Register");
-    const registerTxRes = await this.contractTransaction(this._contracts.DOTNS_REGISTRAR_CONTROLLER, bufferedPaymentNative, DOTNS_REGISTRAR_CONTROLLER_ABI, "register", [registration], (s) => console.log(`      ${s}`));
+    const registerTxRes = await this.contractTransaction(this._contracts.DOTNS_REGISTRAR_CONTROLLER, bufferedPaymentNative, DOTNS_REGISTRAR_CONTROLLER_ABI, "register", [registration], (s) => console.log(`      ${s}`), { phoneLabel: "Register" });
     logTxResolution(registerTxRes);
     if (registerTxRes.kind === TX_KIND_HASH) {
       setDeployAttribute("deploy.register.tx", registerTxRes.hash);
@@ -2651,6 +2658,41 @@ var DotNS = class {
     const envId = this._environmentId ?? "paseo-next-v2";
     return runBootstrap({ mnemonic, environmentId: envId });
   }
+  /**
+   * Set the expected total number of phone signatures for this DotNS session.
+   * Called from deploy() at preflight after computePhoneSigningSteps so that
+   * confirmPhoneReady receives the correct `total`.
+   */
+  setPhoneSignatureTotal(total) {
+    this._phoneSignatureTotal = total;
+  }
+  /**
+   * Internal: await the human-ready gate then fire the "check your phone"
+   * notification. Must be called OUTSIDE any withTimeout — the human wait is
+   * unbounded and must never be inside the machine timeout.
+   *
+   * Behaviour:
+   * - confirmPhoneReady provided → await it (counts re-signs via attempt map).
+   * - not provided + non-TTY → fail fast (NonRetryableError).
+   * - not provided + TTY → no-op (bin must have supplied the hook; if it did
+   *   not, the caller proceeds without a gate — backward-compat for library
+   *   consumers that supply neither hook nor TTY check).
+   * After the gate resolves, fires onPhoneSigningRequired (the "check your
+   * phone" notification) so the user knows the request is now being sent.
+   */
+  async _awaitPhoneReady(label) {
+    if (!this._usesExternalSigner) return;
+    const attempt = (this._phoneSignatureAttempts.get(label) ?? 0) + 1;
+    this._phoneSignatureAttempts.set(label, attempt);
+    if (this._confirmPhoneReady) {
+      await this._confirmPhoneReady({ label, attempt, total: this._phoneSignatureTotal });
+    } else if (!(process.stdout.isTTY && process.stdin.isTTY)) {
+      throw new NonRetryableError(
+        "phone signer active but no confirmPhoneReady hook provided and not running in a TTY \u2014 re-run interactively or provide the confirmPhoneReady option"
+      );
+    }
+    this._onPhoneSigningRequired?.(label);
+  }
   disconnect() {
     if (this.client) {
       this.client.destroy();
@@ -2660,6 +2702,9 @@ var DotNS = class {
     }
     this._usesExternalSigner = false;
     this._onPhoneSigningRequired = void 0;
+    this._confirmPhoneReady = void 0;
+    this._phoneSignatureTotal = 0;
+    this._phoneSignatureAttempts.clear();
   }
 };
 var dotns = new DotNS();

package/dist/{chunk-VHW7K7JW.js → chunk-U2JW2FSV.js}

@@ -6,7 +6,7 @@ import * as path from "path";
 // package.json
 var package_default = {
   name: "bulletin-deploy",
-  version: "0.10.1-dev.0",
+  version: "0.11.0-rc.1",
   private: false,
   repository: {
     type: "git",
@@ -51,7 +51,7 @@ var package_default = {
     "tools/release-retry-wrapper.mjs"
   ],
   scripts: {
-    build: "tsup src/index.ts src/deploy.ts src/dotns.ts src/pool.ts src/telemetry.ts src/memory-report.ts src/merkle.ts src/gh-pages-mirror.ts src/version-check.ts src/bug-report.ts src/run-state.ts src/environments.ts src/errors.ts src/manifest.ts src/chunk-probe.ts src/manifest-embed.ts src/manifest-fetch.ts src/manifest-roundtrip.ts src/incremental-stats.ts src/chunker.ts src/personhood/encoding.ts src/personhood/hashing.ts src/personhood/constants.ts src/personhood/member-key.ts src/personhood/people-client.ts src/personhood/proof-validity.ts src/personhood/reprove.ts src/personhood/bind-personal-id.ts src/personhood/claim-pgas.ts src/personhood/bind-paid-alias.ts src/personhood/bootstrap.ts src/personhood/chain-prereqs.ts src/manifest/types.ts src/manifest/schema.ts src/manifest/byte-budget.ts src/manifest/config-load.ts src/manifest/publish.ts src/auth/index.ts src/auth/vendor/index.ts src/auth/vendor/ui/index.ts src/auth-config.ts src/commands/login.ts src/commands/logout.ts src/commands/whoami.ts src/commands/transfer.ts src/storage-signer.ts src/spinner.ts src/sss-allowance.ts src/sss-allowance-cache.ts src/deploy-actors.ts --format esm --dts --clean --target node22",
+    build: "tsup src/suppress-localstorage-warning.ts src/index.ts src/deploy.ts src/dotns.ts src/pool.ts src/telemetry.ts src/memory-report.ts src/merkle.ts src/gh-pages-mirror.ts src/version-check.ts src/bug-report.ts src/run-state.ts src/environments.ts src/errors.ts src/manifest.ts src/chunk-probe.ts src/manifest-embed.ts src/manifest-fetch.ts src/manifest-roundtrip.ts src/incremental-stats.ts src/chunker.ts src/personhood/encoding.ts src/personhood/hashing.ts src/personhood/constants.ts src/personhood/member-key.ts src/personhood/people-client.ts src/personhood/proof-validity.ts src/personhood/reprove.ts src/personhood/bind-personal-id.ts src/personhood/claim-pgas.ts src/personhood/bind-paid-alias.ts src/personhood/bootstrap.ts src/personhood/chain-prereqs.ts src/manifest/types.ts src/manifest/schema.ts src/manifest/byte-budget.ts src/manifest/config-load.ts src/manifest/publish.ts src/auth/index.ts src/auth/vendor/index.ts src/auth/vendor/ui/index.ts src/auth-config.ts src/commands/login.ts src/commands/logout.ts src/commands/whoami.ts src/commands/transfer.ts src/storage-signer.ts src/spinner.ts src/sss-allowance.ts src/sss-allowance-cache.ts src/deploy-actors.ts --format esm --dts --clean --target node22",
     "refresh-environments": "node scripts/refresh-environments.mjs",
     postinstall: "patch-package || true",
     prepare: "npm run build",
@@ -68,9 +68,9 @@ var package_default = {
     "@ipld/dag-pb": "^4.1.3",
     "@noble/hashes": "^1.7.2",
     "@parity/product-sdk-address": "^0.1.1",
-    "@parity/product-sdk-keys": "^0.3.0",
-    "@parity/product-sdk-terminal": "^0.4.0",
-    "@parity/product-sdk-tx": "^0.2.4",
+    "@parity/product-sdk-keys": "^0.3.8",
+    "@parity/product-sdk-terminal": "^0.5.1",
+    "@parity/product-sdk-tx": "^0.2.12",
     "@polkadot-api/metadata-builders": "^0.14.2",
     "@polkadot-api/substrate-bindings": "^0.20.2",
     "@polkadot-labs/hdkd": "^0.0.28",
@@ -96,12 +96,7 @@ var package_default = {
     vitest: "^4.1.0"
   },
   overrides: {
-    "@polkadot-api/json-rpc-provider": "^0.2.0",
-    "@novasamatech/host-api": "0.8.6",
-    "@novasamatech/host-papp": "0.8.6",
-    "@novasamatech/scale": "0.8.6",
-    "@novasamatech/statement-store": "0.8.6",
-    "@novasamatech/storage-adapter": "0.8.6"
+    "@polkadot-api/json-rpc-provider": "^0.2.0"
   },
   minimumVersion: "0.5.6",
   engines: {

package/dist/chunk-UWAZDGBT.js

@@ -0,0 +1,78 @@
+import {
+  BULLETIN_RESOURCE,
+  resolveSigner
+} from "./chunk-5FLTDWWP.js";
+import {
+  DOT_PRODUCT_ID
+} from "./chunk-4PLUBND7.js";
+import {
+  DEFAULT_MNEMONIC
+} from "./chunk-TXJ6KQWM.js";
+
+// src/deploy-actors.ts
+var DEFAULT_WORKER_SURI = DEFAULT_MNEMONIC;
+var MainnetDefaultWorkerError = class extends Error {
+  constructor() {
+    super(
+      "Refusing to default the deploy worker to Alice on a non-testnet environment. Pass --mnemonic <a funded, sufficiently-verified key> to do the transfer flow, or --no-transfer-to-signedin-user to sign directly with your mobile session."
+    );
+    this.name = "MainnetDefaultWorkerError";
+  }
+};
+async function resolveDeployActors(authClient, { suri, transferEnabled, isTestnet, sessionPresent }) {
+  if (sessionPresent && transferEnabled) {
+    if (!suri && !isTestnet) throw new MainnetDefaultWorkerError();
+    const worker2 = await resolveSigner(authClient, { suri: suri ?? DEFAULT_WORKER_SURI });
+    const handle = await authClient.getSessionSigner();
+    if (!handle) throw new Error("transfer mode active but no session resolved; pass --no-transfer-to-signedin-user.");
+    try {
+      return { worker: worker2, recipientH160: handle.addresses.productH160 };
+    } finally {
+      handle.destroy();
+    }
+  }
+  const worker = await resolveSigner(authClient, { suri });
+  return { worker };
+}
+async function resolveStorageSigner(session, deps) {
+  if (!session?.userSession || !session?.adapter) return null;
+  const { userSession, adapter } = session;
+  try {
+    const signerResult = await deps.getBulletinSigner(userSession.id, DOT_PRODUCT_ID, adapter);
+    if (signerResult.isOk() && signerResult.value) {
+      const signer = signerResult.value;
+      const slotAddress = deps.ss58Encode(signer.publicKey);
+      return { signer, slotAddress, owned: true };
+    }
+    const reason = signerResult.error?.reason;
+    if (reason === "NoSession") {
+      return null;
+    }
+    deps.promptBeforeAllocation();
+    const outcomes = await deps.requestResourceAllocation(
+      userSession,
+      adapter,
+      [BULLETIN_RESOURCE]
+    );
+    const outcome = outcomes[0];
+    if (!outcome || outcome.tag !== "Allocated") {
+      return null;
+    }
+    if (deps.createSlotAccountSigner) {
+      const slotSigner = await deps.createSlotAccountSigner(adapter, BULLETIN_RESOURCE);
+      if (slotSigner) {
+        const slotAddress = deps.ss58Encode(slotSigner.publicKey);
+        return { signer: slotSigner, slotAddress, owned: true };
+      }
+    }
+    return null;
+  } catch {
+    return null;
+  }
+}
+
+export {
+  MainnetDefaultWorkerError,
+  resolveDeployActors,
+  resolveStorageSigner
+};