bulletin-deploy 0.14.1 → 0.14.2

package/assets/environments.json

@@ -6,6 +6,7 @@
       "network": "testnet",
       "description": "Product Preview net, used by Product Teams",
       "bulletinAutoAuthorize": true,
+      "bulletinAuthorizer": "//Eve",
       "e2eEligible": true,
       "backend": "https://polkadot-app-stg.parity.io/",
       "ipfs": "https://previewnet.substrate.dev",
@@ -43,6 +44,7 @@
       "description": "Previewnet bare-Rust PolkaVM DotNS deployment",
       "ipfs": "https://previewnet.substrate.dev",
       "webGateway": "testnet.li",
+      "bulletinAuthorizer": "//Eve",
       "autoAccountMapping": true,
       "nativeToEthRatio": 100000000,
       "registerStorageDeposit": 2000000000000,
@@ -99,6 +101,7 @@
       "network": "testnet",
       "description": "Next iteration of the Paseo Next testnet",
       "bulletinAutoAuthorize": true,
+      "bulletinAuthorizer": "//Alice",
       "e2eEligible": true,
       "backend": "https://identity-backend-next.parity-testnet.parity.io",
       "ipfs": "https://paseo-bulletin-next-ipfs.polkadot.io",

package/bin/bulletin-bootstrap

@@ -117,6 +117,13 @@ if (flags.env) {
 
   bootstrapOpts.bulletinAuthorizeV2 = envEntry.bulletinAuthorizeV2 ?? false;
 
+  // #1209: which key holds TransactionStorage authorizer rights on this env's
+  // Bulletin chain. Not always //Alice — previewnet's sole AllowedAuthorizers
+  // entry is //Eve. An explicit --authorizer still wins (set above).
+  if (envEntry.bulletinAuthorizer) {
+    bootstrapOpts.envAuthorizer = envEntry.bulletinAuthorizer;
+  }
+
   if (flags.preCheck) {
     // #1059: widen the "needs authorization" threshold to 24h-before-expiry,
     // and hard-gate the actual write to environments cleared for it. This is

package/dist/auth-config.js

@@ -9,12 +9,12 @@ import {
   getPeopleChainEndpoints,
   hasPersistedSession,
   resolveBulletinEndpoints
-} from "./chunk-5ZR5L37D.js";
+} from "./chunk-REB37WWY.js";
 import "./chunk-TSPERKUS.js";
-import "./chunk-NLRGFZMQ.js";
-import "./chunk-O5TJWVGZ.js";
-import "./chunk-E6J46GNK.js";
+import "./chunk-XQHRKK7M.js";
 import "./chunk-ZOC4GITL.js";
+import "./chunk-VH2HNQG2.js";
+import "./chunk-ZPWTXUA6.js";
 export {
   DOT_DAPP_ID,
   DOT_DERIVATION_INDEX,

package/dist/bug-report.js

@@ -10,10 +10,10 @@ import {
   offerBugReport,
   scrubSecrets,
   setDeployContext
-} from "./chunk-YDV7M3V2.js";
-import "./chunk-L7DCLCCK.js";
-import "./chunk-NLRGFZMQ.js";
-import "./chunk-O5TJWVGZ.js";
+} from "./chunk-7V4B775S.js";
+import "./chunk-GEHOB4PE.js";
+import "./chunk-VH2HNQG2.js";
+import "./chunk-ZPWTXUA6.js";
 export {
   buildCliFlagsSummary,
   buildLabels,

package/dist/chain-health.d.ts

@@ -0,0 +1,139 @@
+/**
+ * Chain-health sampling — measures what the chain was doing underneath a deploy.
+ *
+ * Motivation: deploy latency drifted ~17% on paseo-next-v2 over the second half
+ * of July 2026 while the Bulletin storage phase stayed flat, pointing at Asset
+ * Hub extrinsic inclusion. That diagnosis had to be reconstructed by subtracting
+ * child-span durations after the fact, because we emit nothing about the chain
+ * itself. This module closes that gap.
+ *
+ * Design note — why interval spans rather than numeric attributes:
+ * `@sentry/node` user-defined attributes come back string-typed in EAP no matter
+ * how they're set, so `avg()`/`p95()` refuse to run on them (see the numeric
+ * attribute caveat in CLAUDE.md). `span.duration` is a built-in numeric column
+ * and does aggregate. All three signals here are genuinely elapsed wall-clock
+ * intervals, so encoding each as a span whose duration IS the measurement is
+ * honest — nothing synthetic — and it is the only shape that gives us
+ * `p50(span.duration)` charts.
+ */
+/** Which chain a sampler is watching. Kept to the two that bound deploy time. */
+type ChainHealthChainId = "bulletin" | "asset-hub";
+/**
+ * Minimal slice of papi's PolkadotClient that the sampler needs. Declared
+ * structurally rather than importing PolkadotClient so tests can drive the
+ * sampler with a scripted block stream and no chain.
+ */
+interface ChainHealthClient {
+    blocks$: {
+        subscribe(observer: {
+            next: (block: {
+                hash: string;
+                number: number;
+            }) => void;
+            error?: (e: unknown) => void;
+        }): {
+            unsubscribe(): void;
+        };
+    };
+    finalizedBlock$: {
+        subscribe(observer: {
+            next: (block: {
+                hash: string;
+                number: number;
+            }) => void;
+            error?: (e: unknown) => void;
+        }): {
+            unsubscribe(): void;
+        };
+    };
+    getBlockHeader(hash: string): Promise<unknown>;
+}
+/**
+ * Blocks per measurement window. 10 smooths per-block jitter without delaying
+ * the first sample past a median-length deploy.
+ */
+declare const DEFAULT_WINDOW_BLOCKS = 10;
+/**
+ * Hard cap on spans emitted per sampler, per deploy. A pathological multi-hour
+ * deploy must not emit thousands. Hitting it is reported, never silent.
+ */
+declare const MAX_SPANS_PER_SAMPLER = 60;
+/**
+ * Strip a wss:// endpoint down to its host. The endpoints in environments.json
+ * carry no credentials today; host-only keeps it that way by construction and
+ * keeps attribute cardinality at a handful of values.
+ */
+declare function endpointHost(endpoint: string): string;
+/**
+ * Watches one chain and emits `chain.health.*` interval spans.
+ *
+ * Lifecycle is attach/detach rather than a one-shot start/stop because the
+ * Bulletin client is destroyed and recreated mid-deploy during WS-halt
+ * recovery (deploy.ts) and the Asset Hub client is recreated by
+ * `recreateReviveClient` (dotns.ts, the #1131 retry path). Each recreation
+ * re-attaches; the in-flight window is discarded rather than emitted, because
+ * a window spanning a reconnect measures our outage, not the chain's block
+ * rate, and would silently poison the metric this exists to provide.
+ */
+declare class ChainHealthSampler {
+    private readonly chainId;
+    private readonly windowBlocks;
+    private host;
+    private blocksSub;
+    private finalizedSub;
+    /** Wall-clock of the block that opened the current window. */
+    private windowStartMs;
+    private windowStartBlock;
+    /** blockNumber -> first-seen wall clock, FIFO-evicted at MAX_TRACKED_BLOCKS. */
+    private firstSeen;
+    private spansEmitted;
+    private capReported;
+    /** Set once a window closes, so exactly one ping is issued per window. */
+    private pingInFlight;
+    /**
+     * True while `blocks$.subscribe()` is replaying history.
+     *
+     * papi documents that on subscribe it synchronously emits the latest
+     * finalized block and every known descendant. Those arrive microseconds
+     * apart, so letting them close a window would report a near-zero elapsed
+     * time and mark the chain as impossibly fast — corrupting the exact metric
+     * this module exists to produce. Replayed blocks still record first-seen
+     * times (finality lag needs them) and still move the window anchor forward,
+     * so timing starts from the moment we caught up rather than in stale history.
+     */
+    private inReplay;
+    constructor(chainId: ChainHealthChainId, windowBlocks?: number);
+    /**
+     * Subscribe to a (re)created client. Safe to call repeatedly — an existing
+     * subscription is torn down first. Never throws: a sampler failure must not
+     * be able to fail a deploy.
+     */
+    attach(client: ChainHealthClient, endpoint: string): void;
+    /** Unsubscribe and drop the partial window. Idempotent. */
+    detach(): void;
+    /**
+     * Detach and reset per-deploy state. Call from the deploy's teardown.
+     *
+     * Resetting the span budget here (rather than in attach()) is deliberate.
+     * attach() also runs on mid-deploy reconnects, where clearing the counter
+     * would defeat the cap; stop() runs exactly once per deploy. deploy.ts holds
+     * its Bulletin sampler at module scope, so without this a second deploy() in
+     * the same process — playground-cli consumes deploy() as a library — would
+     * inherit the first deploy's exhausted budget and emit nothing.
+     */
+    stop(): void;
+    /** True while subscribed — used by tests and by re-attach guards. */
+    get attached(): boolean;
+    private resetWindow;
+    private atCap;
+    private onBlock;
+    private onFinalized;
+    /**
+     * Time one `getBlockHeader` round-trip. Separates "the chain is producing
+     * blocks slowly" from "our link to this endpoint is slow" — the endpoints are
+     * load-balanced, so those are genuinely different failures.
+     */
+    private ping;
+}
+
+export { type ChainHealthChainId, type ChainHealthClient, ChainHealthSampler, DEFAULT_WINDOW_BLOCKS, MAX_SPANS_PER_SAMPLER, endpointHost };

package/dist/chain-health.js

@@ -0,0 +1,14 @@
+import {
+  ChainHealthSampler,
+  DEFAULT_WINDOW_BLOCKS,
+  MAX_SPANS_PER_SAMPLER,
+  endpointHost
+} from "./chunk-UDJAYGYU.js";
+import "./chunk-VH2HNQG2.js";
+import "./chunk-ZPWTXUA6.js";
+export {
+  ChainHealthSampler,
+  DEFAULT_WINDOW_BLOCKS,
+  MAX_SPANS_PER_SAMPLER,
+  endpointHost
+};

package/dist/{chunk-DAFCH55Q.js → chunk-37AN2MHU.js}

@@ -4,10 +4,10 @@ import {
 } from "./chunk-5FLTDWWP.js";
 import {
   DOT_PRODUCT_ID
-} from "./chunk-5ZR5L37D.js";
+} from "./chunk-REB37WWY.js";
 import {
   DEFAULT_MNEMONIC
-} from "./chunk-AB62NERW.js";
+} from "./chunk-FMQLBYOR.js";
 
 // src/deploy-actors.ts
 var DEFAULT_WORKER_SURI = DEFAULT_MNEMONIC;

package/dist/{chunk-42BNXFWF.js → chunk-6LD3Z2HM.js}

@@ -1,6 +1,6 @@
 import {
   preflightSssAllowance
-} from "./chunk-5NQHQFMH.js";
+} from "./chunk-T2S5M6OH.js";
 import {
   statementSigningAccount
 } from "./chunk-GRPLHUYC.js";
@@ -31,18 +31,18 @@ import {
 } from "./chunk-S7EM5VMW.js";
 import {
   setDeployContext
-} from "./chunk-YDV7M3V2.js";
+} from "./chunk-7V4B775S.js";
 import {
   getBestBlockNumber,
   probeChunks,
   probeFinalityGap
-} from "./chunk-ALTGYSBJ.js";
+} from "./chunk-CRZSDUWV.js";
 import {
   packSection
 } from "./chunk-C2TS5MER.js";
 import {
   resolveStorageSigner
-} from "./chunk-DAFCH55Q.js";
+} from "./chunk-37AN2MHU.js";
 import {
   createSlotAccountSigner,
   requestResourceAllocation
@@ -51,7 +51,7 @@ import {
   STALE_SESSION_MESSAGE,
   getPeopleChainEndpoints,
   hasPersistedSession
-} from "./chunk-5ZR5L37D.js";
+} from "./chunk-REB37WWY.js";
 import {
   CLI_NAME
 } from "./chunk-TSPERKUS.js";
@@ -66,7 +66,7 @@ import {
   parseDomainName,
   popStatusName,
   verifyNonceAdvanced
-} from "./chunk-AB62NERW.js";
+} from "./chunk-FMQLBYOR.js";
 import {
   derivePoolAccounts,
   detectTestnet,
@@ -74,7 +74,19 @@ import {
   fetchPoolAuthorizations,
   isAuthorizationSufficient,
   selectAccount
-} from "./chunk-4AEFFDHP.js";
+} from "./chunk-IJUKTHEP.js";
+import {
+  DEFAULT_ENV_ID,
+  getPopSelfServeConfig,
+  loadEnvironments,
+  resolveEndpoints
+} from "./chunk-XQHRKK7M.js";
+import {
+  NonRetryableError
+} from "./chunk-ZOC4GITL.js";
+import {
+  ChainHealthSampler
+} from "./chunk-UDJAYGYU.js";
 import {
   VERSION,
   captureWarning,
@@ -88,16 +100,7 @@ import {
   truncateAddress,
   withDeploySpan,
   withSpan
-} from "./chunk-NLRGFZMQ.js";
-import {
-  DEFAULT_ENV_ID,
-  getPopSelfServeConfig,
-  loadEnvironments,
-  resolveEndpoints
-} from "./chunk-E6J46GNK.js";
-import {
-  NonRetryableError
-} from "./chunk-ZOC4GITL.js";
+} from "./chunk-VH2HNQG2.js";
 
 // src/merkle.ts
 import * as fs2 from "fs";
@@ -416,6 +419,7 @@ function setBulletinEndpoints(endpoints) {
   BULLETIN_ENDPOINTS = endpoints;
 }
 var bulletinAutoAuthorize = false;
+var bulletinAuthorizer;
 var _deployRpcFailedOver = false;
 var _onWsHalt = null;
 function setWsHaltCallback(cb) {
@@ -542,14 +546,22 @@ function toHashingEnum(mhCode) {
       throw new Error(`Unhandled multihash code: ${mhCode}`);
   }
 }
-async function getProvider() {
+var bulletinChainHealth = new ChainHealthSampler("bulletin");
+function stopBulletinChainHealth() {
+  bulletinChainHealth.stop();
+}
+function createBulletinClient() {
   const primary = BULLETIN_ENDPOINTS[0];
   console.log(`   Connecting to Bulletin: ${primary}`);
   const client = createPolkadotClient2(getWsProvider2(
     BULLETIN_ENDPOINTS,
     { heartbeatTimeout: WS_HEARTBEAT_TIMEOUT_MS, onStatusChanged: makeBulletinStatusHandler(primary) }
   ));
-  const unsafeApi = client.getUnsafeApi();
+  bulletinChainHealth.attach(client, primary);
+  return { client, unsafeApi: client.getUnsafeApi() };
+}
+async function getProvider() {
+  const { client, unsafeApi } = createBulletinClient();
   try {
     await cryptoWaitReady();
     const poolMnemonic = process.env.BULLETIN_POOL_MNEMONIC || void 0;
@@ -567,7 +579,7 @@ async function getProvider() {
     const selectionResult = selectAccount(authorizations, Math.random, pinnedPoolIndex);
     const selectedAccount = selectionResult.account;
     const eligibleCount = selectionResult.eligibleCount;
-    await ensureAuthorized(unsafeApi, selectedAccount.address, `pool account ${selectedAccount.index}`, { autoAuthorize: bulletinAutoAuthorize });
+    await ensureAuthorized(unsafeApi, selectedAccount.address, `pool account ${selectedAccount.index}`, { autoAuthorize: bulletinAutoAuthorize, authorizer: bulletinAuthorizer });
     console.log(`   Using pool account ${selectedAccount.index}: ${selectedAccount.address}`);
     setDeployAttribute("deploy.signer.mode", "pool");
     setDeployAttribute("deploy.pool.account", truncateAddress(selectedAccount.address));
@@ -580,13 +592,7 @@ async function getProvider() {
   }
 }
 async function getDirectProvider(mnemonic, derivationPath = "") {
-  const primary = BULLETIN_ENDPOINTS[0];
-  console.log(`   Connecting to Bulletin: ${primary}`);
-  const client = createPolkadotClient2(getWsProvider2(
-    BULLETIN_ENDPOINTS,
-    { heartbeatTimeout: WS_HEARTBEAT_TIMEOUT_MS, onStatusChanged: makeBulletinStatusHandler(primary) }
-  ));
-  const unsafeApi = client.getUnsafeApi();
+  const { client, unsafeApi } = createBulletinClient();
   const { signer, ss58 } = deriveRootSigner(mnemonic, derivationPath);
   console.log(`   Using direct signer: ${ss58}${derivationPath ? ` (path: ${derivationPath})` : ""}`);
   let [auth, currentBlock] = await Promise.all([
@@ -596,7 +602,7 @@ async function getDirectProvider(mnemonic, derivationPath = "") {
   let now = currentBlock.number;
   if (!auth || Number(auth.expiration ?? 0) <= now) {
     try {
-      await ensureAuthorized(unsafeApi, ss58, "direct signer", { autoAuthorize: bulletinAutoAuthorize });
+      await ensureAuthorized(unsafeApi, ss58, "direct signer", { autoAuthorize: bulletinAutoAuthorize, authorizer: bulletinAuthorizer });
       [auth, currentBlock] = await Promise.all([
         unsafeApi.query.TransactionStorage.Authorizations.getValue(Enum2("Account", ss58)),
         client.getFinalizedBlock()
@@ -613,13 +619,7 @@ async function getDirectProvider(mnemonic, derivationPath = "") {
   return { client, unsafeApi, signer, ss58 };
 }
 async function getSignerProvider(signer, ss58) {
-  const primary = BULLETIN_ENDPOINTS[0];
-  console.log(`   Connecting to Bulletin: ${primary}`);
-  const client = createPolkadotClient2(getWsProvider2(
-    BULLETIN_ENDPOINTS,
-    { heartbeatTimeout: WS_HEARTBEAT_TIMEOUT_MS, onStatusChanged: makeBulletinStatusHandler(primary) }
-  ));
-  const unsafeApi = client.getUnsafeApi();
+  const { client, unsafeApi } = createBulletinClient();
   console.log(`   Using external signer: ${ss58}`);
   let [auth, currentBlock] = await Promise.all([
     unsafeApi.query.TransactionStorage.Authorizations.getValue(Enum2("Account", ss58)),
@@ -628,7 +628,7 @@ async function getSignerProvider(signer, ss58) {
   let now = currentBlock.number;
   if (!auth || Number(auth.expiration ?? 0) <= now) {
     try {
-      await ensureAuthorized(unsafeApi, ss58, "external signer", { autoAuthorize: bulletinAutoAuthorize });
+      await ensureAuthorized(unsafeApi, ss58, "external signer", { autoAuthorize: bulletinAutoAuthorize, authorizer: bulletinAuthorizer });
       [auth, currentBlock] = await Promise.all([
         unsafeApi.query.TransactionStorage.Authorizations.getValue(Enum2("Account", ss58)),
         client.getFinalizedBlock()
@@ -2130,6 +2130,7 @@ async function deploy(content, domainName = null, options = {}) {
   let envRegisterStorageDeposit;
   let envPopSelfServe = null;
   bulletinAutoAuthorize = false;
+  bulletinAuthorizer = void 0;
   if (options.bulletinEndpoints && options.bulletinEndpoints.length > 0) {
     envBulletin = options.bulletinEndpoints;
     envAssetHub = options.assetHubEndpoints;
@@ -2150,6 +2151,7 @@ async function deploy(content, domainName = null, options = {}) {
       envRegisterStorageDeposit = resolved.registerStorageDeposit;
       envPopSelfServe = getPopSelfServeConfig(doc, envId);
       bulletinAutoAuthorize = resolved.bulletinAutoAuthorize;
+      bulletinAuthorizer = resolved.bulletinAuthorizer;
     } catch (e) {
       if (e instanceof NonRetryableError) throw e;
       if (options.env !== void 0) throw e;
@@ -2718,6 +2720,7 @@ async function deploy(content, domainName = null, options = {}) {
         return { domainName: name, fullDomain: `${name}.dot`, cid, ipfsCid };
       } finally {
         if (_deployRpcFailedOver) setDeployAttribute("deploy.rpc.failed_over", "true");
+        stopBulletinChainHealth();
         provider?.client.destroy();
       }
     });

package/dist/{chunk-YDV7M3V2.js → chunk-7V4B775S.js}

@@ -2,15 +2,15 @@ import {
   classifyErrorArea,
   isInteractive,
   promptYesNo
-} from "./chunk-L7DCLCCK.js";
+} from "./chunk-GEHOB4PE.js";
 import {
   VERSION,
   getCurrentSentryTraceId,
   resolveIssueRepoSlug
-} from "./chunk-NLRGFZMQ.js";
+} from "./chunk-VH2HNQG2.js";
 import {
   package_default
-} from "./chunk-O5TJWVGZ.js";
+} from "./chunk-ZPWTXUA6.js";
 
 // src/bug-report.ts
 import { execSync, execFileSync } from "child_process";

package/dist/{chunk-ALTGYSBJ.js → chunk-CRZSDUWV.js}

@@ -1,6 +1,6 @@
 import {
   captureWarning
-} from "./chunk-NLRGFZMQ.js";
+} from "./chunk-VH2HNQG2.js";
 
 // src/chunk-probe.ts
 import { Twox128, Blake2128Concat, decAnyMetadata, unifyMetadata } from "@polkadot-api/substrate-bindings";

package/dist/{chunk-AB62NERW.js → chunk-FMQLBYOR.js}

@@ -3,7 +3,16 @@ import {
 } from "./chunk-SI2ZUOYD.js";
 import {
   isTestnetSpecName
-} from "./chunk-4AEFFDHP.js";
+} from "./chunk-IJUKTHEP.js";
+import {
+  validateContractAddresses
+} from "./chunk-XQHRKK7M.js";
+import {
+  NonRetryableError
+} from "./chunk-ZOC4GITL.js";
+import {
+  ChainHealthSampler
+} from "./chunk-UDJAYGYU.js";
 import {
   captureWarning,
   markCodePath,
@@ -11,13 +20,7 @@ import {
   setDeploySentryTag,
   truncateAddress,
   withSpan
-} from "./chunk-NLRGFZMQ.js";
-import {
-  validateContractAddresses
-} from "./chunk-E6J46GNK.js";
-import {
-  NonRetryableError
-} from "./chunk-ZOC4GITL.js";
+} from "./chunk-VH2HNQG2.js";
 
 // src/dotns.ts
 import crypto from "crypto";
@@ -1238,6 +1241,8 @@ var DotNS = class {
   _phoneSignatureTotal = 0;
   /** Running attempt counter per label for re-sign detection. Reset at connect/disconnect. */
   _phoneSignatureAttempts = /* @__PURE__ */ new Map();
+  /** Samples Asset Hub block rate / finality lag / RPC latency for the life of this connection. */
+  chainHealth = new ChainHealthSampler("asset-hub");
   // Test-only seam: consumed once by classifyAliasAccountState() then cleared.
   // Mirrors the __setDeployRootSpanForTest / __setSentryForTest pattern.
   _classifyOverrideForTest = null;
@@ -1285,6 +1290,7 @@ var DotNS = class {
     }
     this.client = createClient(getWsProvider(endpoint, { heartbeatTimeout: WS_HEARTBEAT_TIMEOUT_MS }));
     this.clientWrapper = new ReviveClientWrapper(this.client.getUnsafeApi());
+    this.chainHealth.attach(this.client, endpoint);
   }
   async connect(options = {}) {
     if (options.assetHubEndpoints && options.assetHubEndpoints.length > 0) {
@@ -3067,6 +3073,7 @@ var DotNS = class {
     this._onPhoneSigningRequired?.(label);
   }
   disconnect() {
+    this.chainHealth.stop();
     if (this.client) {
       this.client.destroy();
       this.client = null;

package/dist/{chunk-L7DCLCCK.js → chunk-GEHOB4PE.js}

@@ -1,6 +1,6 @@
 import {
   VERSION
-} from "./chunk-NLRGFZMQ.js";
+} from "./chunk-VH2HNQG2.js";
 
 // src/version-check.ts
 import { execSync, execFileSync } from "child_process";

package/dist/{chunk-4AEFFDHP.js → chunk-IJUKTHEP.js}

@@ -127,7 +127,8 @@ async function ensureAuthorized(api, address, label, opts = {}) {
   if (opts.autoAuthorize) {
     await cryptoWaitReady();
     const keyring = new Keyring({ type: "sr25519" });
-    const alice = keyring.addFromUri("//Alice");
+    const authorizerUri = opts.authorizer ?? "//Alice";
+    const alice = keyring.addFromUri(authorizerUri);
     const signer = getPolkadotSigner(alice.publicKey, "Sr25519", (data) => alice.sign(data));
     const grant = `${TOPUP_TRANSACTIONS} txs / ${Number(TOPUP_BYTES) / 1e6}MB`;
     console.log(`   Auto-authorizing ${who} on Bulletin (${grant})...`);
@@ -139,7 +140,7 @@ async function ensureAuthorized(api, address, label, opts = {}) {
     const result = await tx.signAndSubmit(signer);
     if (!result?.ok) {
       throw new Error(
-        `Auto-authorization of Bulletin storage account ${who} failed: authorize_account was rejected. This environment is flagged bulletinAutoAuthorize, but //Alice may not hold authorizer rights on this chain.`
+        `Auto-authorization of Bulletin storage account ${who} failed: authorize_account was rejected. This environment is flagged bulletinAutoAuthorize and signed as ${authorizerUri}, but that key may not hold authorizer rights on this chain \u2014 check TransactionStorage.AllowedAuthorizers and set the env's bulletinAuthorizer accordingly.`
       );
     }
     console.log(`   Authorized: ${grant}`);
@@ -254,6 +255,11 @@ ${details}`
       const authKey = keyring.addFromUri(opts.authorizerMnemonic);
       authorizerSigner = getPolkadotSigner(authKey.publicKey, "Sr25519", (data) => authKey.sign(data));
       console.log(`Using provided authorizer: ${authKey.address}
+`);
+    } else if (opts.envAuthorizer) {
+      const authKey = keyring.addFromUri(opts.envAuthorizer);
+      authorizerSigner = getPolkadotSigner(authKey.publicKey, "Sr25519", (data) => authKey.sign(data));
+      console.log(`Using environment authorizer ${opts.envAuthorizer} (${authKey.address})
 `);
     } else {
       const isTestnet = await detectTestnet(api);

package/dist/{chunk-5ZR5L37D.js → chunk-REB37WWY.js}

@@ -1,12 +1,12 @@
 import {
   CLI_NAME
 } from "./chunk-TSPERKUS.js";
-import {
-  VERSION
-} from "./chunk-NLRGFZMQ.js";
 import {
   loadEnvironments
-} from "./chunk-E6J46GNK.js";
+} from "./chunk-XQHRKK7M.js";
+import {
+  VERSION
+} from "./chunk-VH2HNQG2.js";
 
 // src/auth-config.ts
 import { existsSync, readdirSync } from "fs";

package/dist/{chunk-PQK6XT6Z.js → chunk-RIQWW2BT.js}

@@ -9,25 +9,25 @@ import {
   setBulletinEndpoints,
   storeDirectory,
   storeFile
-} from "./chunk-42BNXFWF.js";
+} from "./chunk-6LD3Z2HM.js";
 import {
   DotNS,
   TX_KIND_SKIPPED
-} from "./chunk-AB62NERW.js";
-import {
-  setDeployAttribute,
-  withManifestSpan,
-  withSpan
-} from "./chunk-NLRGFZMQ.js";
+} from "./chunk-FMQLBYOR.js";
 import {
   DEFAULT_ENV_ID,
   getPopSelfServeConfig,
   loadEnvironments,
   resolveEndpoints
-} from "./chunk-E6J46GNK.js";
+} from "./chunk-XQHRKK7M.js";
 import {
   NonRetryableError
 } from "./chunk-ZOC4GITL.js";
+import {
+  setDeployAttribute,
+  withManifestSpan,
+  withSpan
+} from "./chunk-VH2HNQG2.js";
 
 // src/manifest/publish.ts
 import * as fs from "fs/promises";

package/dist/{chunk-5NQHQFMH.js → chunk-T2S5M6OH.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-GRPLHUYC.js";
 import {
   DOT_DAPP_ID
-} from "./chunk-5ZR5L37D.js";
+} from "./chunk-REB37WWY.js";
 
 // src/sss-allowance-cache.ts
 import { mkdir, readFile, writeFile, unlink } from "fs/promises";