bulletin-deploy 0.15.2-rc.2 → 0.15.2

package/bin/bulletin-deploy

@@ -57,7 +57,6 @@ for (let i = 0; i < args.length; i++) {
   else if (args[i] === "--tag") { flags.tag = args[++i]; }
   else if (args[i] === "--config") { flags.config = args[++i]; }
   else if (args[i] === "--no-manifest" || args[i] === "--content-only") { flags.noManifest = true; }
-  else if (args[i] === "--gh-pages-mirror") { flags.ghPagesMirror = true; }
   else if (args[i] === "--allow-large-deploy") { flags.allowLargeDeploy = true; }
   else if (args[i] === "--reproducible") { flags.reproducibleSource = "commit"; }
   else if (args[i].startsWith("--reproducible=")) { flags.reproducibleSource = args[i].slice("--reproducible=".length); }
@@ -305,14 +304,12 @@ Options:
   --config <path>     Explicit path to a bulletin-deploy.config.ts (default: walk up from
                       <build-dir> looking for bulletin-deploy.config.{ts,js,mjs}). When a
                       config is found, deploy ALSO writes the manifest + executable text
-                      records on <domain> and its app/widget/worker subnames.
+                      records on <domain> and its app/widget/funding/worker subnames.
   --no-manifest, --content-only
                       Skip manifest publishing entirely, even when a
                       bulletin-deploy.config.* is discoverable — plain content
                       deploy (storage + root contenthash), same as having no
                       config at all. Mutually exclusive with --publish.
-  --gh-pages-mirror   After deploy, push the CAR to the current repo's gh-pages branch
-                      at bulletin/<domain>.dot.car (opt-in; also set GH_PAGES_MIRROR=1)
   --publish           After deploy, list <domain> in the on-chain Publisher
                       registry (Publisher.publish). Only takes effect on envs
                       with a deployed Publisher (currently: paseo-next-v2).
@@ -527,7 +524,6 @@ try {
     jsMerkle: flags.jsMerkle,
     inputCar: flags.inputCar,
     tag: flags.tag,
-    ghPagesMirror: flags.ghPagesMirror,
     allowLargeDeploy: flags.allowLargeDeploy,
     reproducibleSource: flags.reproducibleSource,
     dumpCar: flags.dumpCar,

package/dist/auth-config.js

@@ -9,12 +9,12 @@ import {
   getPeopleChainEndpoints,
   hasPersistedSession,
   resolveBulletinEndpoints
-} from "./chunk-VH4MENPE.js";
+} from "./chunk-KYBCFN3P.js";
 import "./chunk-TSPERKUS.js";
 import "./chunk-CL7GQYYK.js";
 import "./chunk-ZOC4GITL.js";
-import "./chunk-6AEIZMWM.js";
-import "./chunk-QDK4KW7S.js";
+import "./chunk-X7QKYH3U.js";
+import "./chunk-5HYWJO57.js";
 export {
   DOT_DAPP_ID,
   DOT_DERIVATION_INDEX,

package/dist/bug-report.js

@@ -10,10 +10,10 @@ import {
   offerBugReport,
   scrubSecrets,
   setDeployContext
-} from "./chunk-7DQUTF5K.js";
-import "./chunk-WDPZHQ47.js";
-import "./chunk-6AEIZMWM.js";
-import "./chunk-QDK4KW7S.js";
+} from "./chunk-CRNBI46S.js";
+import "./chunk-2M65ETRD.js";
+import "./chunk-X7QKYH3U.js";
+import "./chunk-5HYWJO57.js";
 export {
   buildCliFlagsSummary,
   buildLabels,

package/dist/chain-health.js

@@ -3,9 +3,9 @@ import {
   DEFAULT_WINDOW_BLOCKS,
   MAX_SPANS_PER_SAMPLER,
   endpointHost
-} from "./chunk-WB6P374L.js";
-import "./chunk-6AEIZMWM.js";
-import "./chunk-QDK4KW7S.js";
+} from "./chunk-SJPSTDCN.js";
+import "./chunk-X7QKYH3U.js";
+import "./chunk-5HYWJO57.js";
 export {
   ChainHealthSampler,
   DEFAULT_WINDOW_BLOCKS,

package/dist/{chunk-WDPZHQ47.js → chunk-2M65ETRD.js}

@@ -1,6 +1,6 @@
 import {
   VERSION
-} from "./chunk-6AEIZMWM.js";
+} from "./chunk-X7QKYH3U.js";
 
 // src/version-check.ts
 import { execSync, execFileSync } from "child_process";

package/dist/{chunk-WIMRJK32.js → chunk-3THUTBHU.js}

@@ -53,6 +53,14 @@ function composePlaceholderExecutable(exec) {
       ...exec.description !== void 0 ? { description: exec.description } : {}
     };
   }
+  if (exec.kind === "funding") {
+    return {
+      $v: 1,
+      kind: "funding",
+      appVersion: exec.appVersion,
+      modes: exec.modes
+    };
+  }
   return {
     $v: 1,
     kind: "worker",

package/dist/{chunk-ETL5WOOU.js → chunk-4T6LXSOJ.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-GRPLHUYC.js";
 import {
   DOT_DAPP_ID
-} from "./chunk-VH4MENPE.js";
+} from "./chunk-KYBCFN3P.js";
 
 // src/sss-allowance-cache.ts
 import { mkdir, readFile, writeFile, unlink } from "fs/promises";

package/dist/{chunk-QDK4KW7S.js → chunk-5HYWJO57.js}

@@ -6,7 +6,7 @@ import * as path from "path";
 // package.json
 var package_default = {
   name: "bulletin-deploy",
-  version: "0.15.2-rc.2",
+  version: "0.15.2",
   private: false,
   repository: {
     type: "git",
@@ -52,7 +52,7 @@ var package_default = {
     "tools/verify-baked-dsn.mjs"
   ],
   scripts: {
-    build: "tsup src/suppress-localstorage-warning.ts src/index.ts src/deploy.ts src/dotns.ts src/pool.ts src/telemetry.ts src/chain-health.ts src/memory-report.ts src/merkle.ts src/gh-pages-mirror.ts src/version-check.ts src/bug-report.ts src/run-state.ts src/environments.ts src/errors.ts src/manifest.ts src/chunk-probe.ts src/manifest-embed.ts src/manifest-fetch.ts src/manifest-roundtrip.ts src/incremental-stats.ts src/chunker.ts src/personhood/encoding.ts src/personhood/hashing.ts src/personhood/constants.ts src/personhood/member-key.ts src/personhood/people-client.ts src/personhood/proof-validity.ts src/personhood/reprove.ts src/personhood/bind-personal-id.ts src/personhood/claim-pgas.ts src/personhood/bind-paid-alias.ts src/personhood/bootstrap.ts src/personhood/chain-prereqs.ts src/manifest/types.ts src/manifest/schema.ts src/manifest/byte-budget.ts src/manifest/config-load.ts src/manifest/publish.ts src/auth/index.ts src/auth/vendor/index.ts src/auth/vendor/ui/index.ts src/auth-config.ts src/commands/login.ts src/commands/logout.ts src/commands/whoami.ts src/commands/transfer.ts src/storage-signer.ts src/spinner.ts src/sss-allowance.ts src/sss-allowance-cache.ts src/deploy-actors.ts --format esm --dts --clean --target node22",
+    build: "tsup src/suppress-localstorage-warning.ts src/index.ts src/deploy.ts src/dotns.ts src/pool.ts src/telemetry.ts src/chain-health.ts src/memory-report.ts src/merkle.ts src/version-check.ts src/bug-report.ts src/run-state.ts src/environments.ts src/errors.ts src/manifest.ts src/chunk-probe.ts src/manifest-embed.ts src/manifest-fetch.ts src/manifest-roundtrip.ts src/incremental-stats.ts src/chunker.ts src/personhood/encoding.ts src/personhood/hashing.ts src/personhood/constants.ts src/personhood/member-key.ts src/personhood/people-client.ts src/personhood/proof-validity.ts src/personhood/reprove.ts src/personhood/bind-personal-id.ts src/personhood/claim-pgas.ts src/personhood/bind-paid-alias.ts src/personhood/bootstrap.ts src/personhood/chain-prereqs.ts src/manifest/types.ts src/manifest/schema.ts src/manifest/byte-budget.ts src/manifest/config-load.ts src/manifest/publish.ts src/auth/index.ts src/auth/vendor/index.ts src/auth/vendor/ui/index.ts src/auth-config.ts src/commands/login.ts src/commands/logout.ts src/commands/whoami.ts src/commands/transfer.ts src/storage-signer.ts src/spinner.ts src/sss-allowance.ts src/sss-allowance-cache.ts src/deploy-actors.ts --format esm --dts --clean --target node22",
     "refresh-environments": "node scripts/refresh-environments.mjs",
     postinstall: "patch-package || true",
     prepare: "npm run build",

package/dist/{chunk-3HKQCN5Y.js → chunk-CD2NN5LL.js}

@@ -1,6 +1,6 @@
 import {
   captureWarning
-} from "./chunk-6AEIZMWM.js";
+} from "./chunk-X7QKYH3U.js";
 
 // src/chunk-probe.ts
 import { Twox128, Blake2128Concat, decAnyMetadata, unifyMetadata } from "@polkadot-api/substrate-bindings";

package/dist/{chunk-7DQUTF5K.js → chunk-CRNBI46S.js}

@@ -2,15 +2,15 @@ import {
   classifyErrorArea,
   isInteractive,
   promptYesNo
-} from "./chunk-WDPZHQ47.js";
+} from "./chunk-2M65ETRD.js";
 import {
   VERSION,
   getCurrentSentryTraceId,
   resolveIssueRepoSlug
-} from "./chunk-6AEIZMWM.js";
+} from "./chunk-X7QKYH3U.js";
 import {
   package_default
-} from "./chunk-QDK4KW7S.js";
+} from "./chunk-5HYWJO57.js";
 
 // src/bug-report.ts
 import { execSync, execFileSync } from "child_process";
@@ -80,7 +80,6 @@ function scrubSecrets(text) {
 function buildCliFlagsSummary(flags) {
   const parts = [];
   if (flags.jsMerkle) parts.push("--js-merkle");
-  if (flags.ghPagesMirror) parts.push("--gh-pages-mirror");
   if (flags.publish) parts.push("--publish");
   if (flags.unpublish) parts.push("--unpublish");
   if (flags.failOnPublishError) parts.push("--fail-on-publish-error");

package/dist/{chunk-NHYYNQSN.js → chunk-DN4FDSVM.js}

@@ -1,6 +1,6 @@
 import {
   validateProductConfig
-} from "./chunk-5V6DL5OB.js";
+} from "./chunk-YXMWCUXP.js";
 import {
   NonRetryableError
 } from "./chunk-ZOC4GITL.js";

package/dist/{chunk-KIYZBXVI.js → chunk-EKBGOA24.js}

@@ -4,10 +4,10 @@ import {
 } from "./chunk-5FLTDWWP.js";
 import {
   DOT_PRODUCT_ID
-} from "./chunk-VH4MENPE.js";
+} from "./chunk-KYBCFN3P.js";
 import {
   DEFAULT_MNEMONIC
-} from "./chunk-2CMBVGCM.js";
+} from "./chunk-ZPQO4PY2.js";
 
 // src/deploy-actors.ts
 var DEFAULT_WORKER_SURI = DEFAULT_MNEMONIC;

package/dist/{chunk-TULAHSR4.js → chunk-JZNSDAZM.js}

@@ -1,14 +1,9 @@
 import {
   preflightSssAllowance
-} from "./chunk-ETL5WOOU.js";
+} from "./chunk-4T6LXSOJ.js";
 import {
   statementSigningAccount
 } from "./chunk-GRPLHUYC.js";
-import {
-  MirrorSkipped,
-  mirrorToGitHubPages,
-  pollMirrorFreshness
-} from "./chunk-CGDOG7ZW.js";
 import {
   computeStats,
   renderSummary,
@@ -31,18 +26,18 @@ import {
 } from "./chunk-S7EM5VMW.js";
 import {
   setDeployContext
-} from "./chunk-7DQUTF5K.js";
+} from "./chunk-CRNBI46S.js";
 import {
   getBestBlockNumber,
   probeChunks,
   probeFinalityGap
-} from "./chunk-3HKQCN5Y.js";
+} from "./chunk-CD2NN5LL.js";
 import {
   packSection
 } from "./chunk-C2TS5MER.js";
 import {
   resolveStorageSigner
-} from "./chunk-KIYZBXVI.js";
+} from "./chunk-EKBGOA24.js";
 import {
   createSlotAccountSigner,
   requestResourceAllocation
@@ -51,7 +46,7 @@ import {
   STALE_SESSION_MESSAGE,
   getPeopleChainEndpoints,
   hasPersistedSession
-} from "./chunk-VH4MENPE.js";
+} from "./chunk-KYBCFN3P.js";
 import {
   CLI_NAME
 } from "./chunk-TSPERKUS.js";
@@ -67,15 +62,16 @@ import {
   parseDomainName,
   popStatusName,
   verifyNonceAdvanced
-} from "./chunk-2CMBVGCM.js";
+} from "./chunk-ZPQO4PY2.js";
 import {
   derivePoolAccounts,
   detectTestnet,
   ensureAuthorized,
   fetchPoolAuthorizations,
   isAuthorizationSufficient,
+  readAccountAuthorization,
   selectAccount
-} from "./chunk-IJUKTHEP.js";
+} from "./chunk-KJVRJOKC.js";
 import {
   DEFAULT_ENV_ID,
   getPopSelfServeConfig,
@@ -87,7 +83,7 @@ import {
 } from "./chunk-ZOC4GITL.js";
 import {
   ChainHealthSampler
-} from "./chunk-WB6P374L.js";
+} from "./chunk-SJPSTDCN.js";
 import {
   VERSION,
   captureWarning,
@@ -101,7 +97,7 @@ import {
   truncateAddress,
   withDeploySpan,
   withSpan
-} from "./chunk-6AEIZMWM.js";
+} from "./chunk-X7QKYH3U.js";
 
 // src/merkle.ts
 import * as fs2 from "fs";
@@ -121,7 +117,7 @@ import * as path from "path";
 import { execSync } from "child_process";
 import { sha256 } from "@noble/hashes/sha256";
 import { blake2b } from "@noble/hashes/blake2b";
-import { createClient as createPolkadotClient2, Enum as Enum2 } from "polkadot-api";
+import { createClient as createPolkadotClient2 } from "polkadot-api";
 import { getWsProvider as getWsProvider2, WsEvent } from "polkadot-api/ws";
 import { CID } from "multiformats/cid";
 import { create as createMultihash } from "multiformats/hashes/digest";
@@ -194,7 +190,7 @@ function fromHex(hexString) {
 // src/storage-signer.ts
 import { sr25519CreateDerive } from "@polkadot-labs/hdkd";
 import { sr25519, ss58Address } from "@polkadot-labs/hdkd-helpers";
-import { createClient as createPolkadotClient, Enum } from "polkadot-api";
+import { createClient as createPolkadotClient } from "polkadot-api";
 import { getPolkadotSigner } from "polkadot-api/signer";
 import { getWsProvider } from "polkadot-api/ws";
 function sanitize(appId) {
@@ -336,7 +332,7 @@ async function waitForBulletinAuthorization(ss58, opts = {}) {
     return await pollUntilBulletinAuthorized(
       async () => {
         const [auth, block] = await Promise.all([
-          unsafeApi.query.TransactionStorage.Authorizations.getValue(Enum("Account", ss58)),
+          readAccountAuthorization(unsafeApi, ss58),
           client.getFinalizedBlock()
         ]);
         return { auth, blockNumber: block.number };
@@ -378,18 +374,20 @@ async function getSlotSignerProvider(signer, ss58) {
       { heartbeatTimeout: WS_HEARTBEAT_TIMEOUT_MS, onStatusChanged: makeBulletinStatusHandler(primary) }
     ));
     const unsafeApi = client.getUnsafeApi();
-    let auth;
-    let currentBlock;
+    let auth = null;
+    let blockNumber = 0;
     try {
-      [auth, currentBlock] = await Promise.all([
-        unsafeApi.query.TransactionStorage.Authorizations.getValue(Enum("Account", ss58)),
+      const [readAuth, finalized] = await Promise.all([
+        readAccountAuthorization(unsafeApi, ss58),
         client.getFinalizedBlock()
       ]);
+      auth = readAuth;
+      blockNumber = finalized.number;
     } catch (e) {
       client.destroy();
       throw e;
     }
-    const result = isBulletinAuthActive(auth, currentBlock.number);
+    const result = isBulletinAuthActive(auth, blockNumber);
     if (!result.active) {
       client.destroy();
       throw new BulletinSlotAuthError(result.reason, ss58, result.expiration);
@@ -599,15 +597,15 @@ async function getDirectProvider(mnemonic, derivationPath = "") {
   const { signer, ss58 } = deriveRootSigner(mnemonic, derivationPath);
   console.log(`   Using direct signer: ${ss58}${derivationPath ? ` (path: ${derivationPath})` : ""}`);
   let [auth, currentBlock] = await Promise.all([
-    unsafeApi.query.TransactionStorage.Authorizations.getValue(Enum2("Account", ss58)),
+    readAccountAuthorization(unsafeApi, ss58),
     client.getFinalizedBlock()
   ]);
   let now = currentBlock.number;
-  if (!auth || Number(auth.expiration ?? 0) <= now) {
+  if (!isAuthorizationSufficient(auth, now)) {
     try {
       await ensureAuthorized(unsafeApi, ss58, "direct signer", { autoAuthorize: bulletinAutoAuthorize, authorizer: bulletinAuthorizer });
       [auth, currentBlock] = await Promise.all([
-        unsafeApi.query.TransactionStorage.Authorizations.getValue(Enum2("Account", ss58)),
+        readAccountAuthorization(unsafeApi, ss58),
         client.getFinalizedBlock()
       ]);
       now = currentBlock.number;
@@ -616,7 +614,7 @@ async function getDirectProvider(mnemonic, derivationPath = "") {
       throw new NonRetryableError(`Account ${ss58} is not authorized for Bulletin storage and auto-authorization failed: ${e.message}`);
     }
   }
-  console.log(`   Authorization: expires at block ${Number(auth?.expiration ?? 0)} (current: ${now})`);
+  console.log(`   Authorization: expires at block ${auth?.expiration ?? 0} (current: ${now})`);
   setDeployAttribute("deploy.signer.mode", "direct");
   setDeployAttribute("deploy.signer.address", truncateAddress(ss58));
   return { client, unsafeApi, signer, ss58 };
@@ -625,15 +623,15 @@ async function getSignerProvider(signer, ss58) {
   const { client, unsafeApi } = createBulletinClient();
   console.log(`   Using external signer: ${ss58}`);
   let [auth, currentBlock] = await Promise.all([
-    unsafeApi.query.TransactionStorage.Authorizations.getValue(Enum2("Account", ss58)),
+    readAccountAuthorization(unsafeApi, ss58),
     client.getFinalizedBlock()
   ]);
   let now = currentBlock.number;
-  if (!auth || Number(auth.expiration ?? 0) <= now) {
+  if (!isAuthorizationSufficient(auth, now)) {
     try {
       await ensureAuthorized(unsafeApi, ss58, "external signer", { autoAuthorize: bulletinAutoAuthorize, authorizer: bulletinAuthorizer });
       [auth, currentBlock] = await Promise.all([
-        unsafeApi.query.TransactionStorage.Authorizations.getValue(Enum2("Account", ss58)),
+        readAccountAuthorization(unsafeApi, ss58),
         client.getFinalizedBlock()
       ]);
       now = currentBlock.number;
@@ -642,7 +640,7 @@ async function getSignerProvider(signer, ss58) {
       throw new NonRetryableError(`Account ${ss58} is not authorized for Bulletin storage and auto-authorization failed: ${e.message}`);
     }
   }
-  console.log(`   Authorization: expires at block ${Number(auth?.expiration ?? 0)} (current: ${now})`);
+  console.log(`   Authorization: expires at block ${auth?.expiration ?? 0} (current: ${now})`);
   setDeployAttribute("deploy.signer.mode", "external");
   setDeployAttribute("deploy.signer.address", truncateAddress(ss58));
   return { client, unsafeApi, signer, ss58 };
@@ -920,17 +918,17 @@ async function storeChunkedContent(chunks, { client: existingClient, unsafeApi:
     }
   }
   const readUploadAuthorization = () => Promise.all([
-    unsafeApi.query.TransactionStorage.Authorizations.getValue(Enum2("Account", ss58)),
-    unsafeApi.query.System.Number.getValue()
+    unsafeApi.query.System.Number.getValue(),
+    readAccountAuthorization(unsafeApi, ss58)
   ]);
-  let uploadAuth;
-  let currentBlockNum;
+  let uploadAuth = null;
+  let currentBlockNum = 0;
   try {
-    [uploadAuth, currentBlockNum] = await readUploadAuthorization();
+    [currentBlockNum, uploadAuth] = await readUploadAuthorization();
   } catch (e) {
     if (existingClient && reconnect && isConnectionError(e)) {
       await refreshExistingClient("authorization preflight hit a stale chainHead");
-      [uploadAuth, currentBlockNum] = await readUploadAuthorization();
+      [currentBlockNum, uploadAuth] = await readUploadAuthorization();
     } else {
       throw e;
     }
@@ -2286,7 +2284,6 @@ async function deploy(content, domainName = null, options = {}) {
       setDeployAttribute("deploy.transfer.enabled", options.transferTo ? "true" : "false");
       let cid;
       let ipfsCid;
-      let mirrorPromise = Promise.resolve(null);
       console.log("\n" + "=".repeat(60));
       console.log(`DEPLOYING TO TESTNET                    v${VERSION}`);
       console.log("=".repeat(60));
@@ -2443,18 +2440,6 @@ async function deploy(content, domainName = null, options = {}) {
                 carChunks = chunk(carContent, CHUNK_SIZE);
               }
             }
-            const predictedStorageCid = computeStorageCid(carChunks);
-            if (options.ghPagesMirror) {
-              mirrorPromise = mirrorToGitHubPages({
-                domain: name,
-                carBytes: carContent,
-                cid: predictedStorageCid,
-                toolVersion: VERSION,
-                bulletinRpc: BULLETIN_ENDPOINTS[0],
-                encrypted: Boolean(options.password),
-                tld: envTld
-              }).catch((err) => err instanceof Error ? err : new Error(String(err)));
-            }
             cid = (await storeChunkedContent(carChunks, providerWithReconnect)).storageCid;
           } else if (process.env.IPFS_CID) {
             setDeployAttribute("deploy.content_type", "ipfsCid");
@@ -2503,20 +2488,7 @@ async function deploy(content, domainName = null, options = {}) {
                 reproducibleSource: options.reproducibleSource,
                 domain: name,
                 gateway: envIpfs,
-                dumpCar: options.dumpCar,
-                onCarReady: (carBytes, predictedCid) => {
-                  if (options.ghPagesMirror) {
-                    mirrorPromise = mirrorToGitHubPages({
-                      domain: name,
-                      carBytes,
-                      cid: predictedCid,
-                      toolVersion: VERSION,
-                      bulletinRpc: BULLETIN_ENDPOINTS[0],
-                      encrypted: Boolean(options.password),
-                      tld: envTld
-                    }).catch((err) => err instanceof Error ? err : new Error(String(err)));
-                  }
-                }
+                dumpCar: options.dumpCar
               });
               cid = sCid;
               ipfsCid = iCid;
@@ -2690,40 +2662,6 @@ async function deploy(content, domainName = null, options = {}) {
             console.log(`   P2P retrieval: \u26A0 not yet retrievable (${probe.errorVariant}, ${probe.durationMs}ms)`);
           }
         });
-        if (options.ghPagesMirror) {
-          console.log("\n" + "=".repeat(60));
-          console.log("Final checks");
-          console.log("=".repeat(60));
-          await withSpan("deploy.gh-pages-mirror", "4. gh-pages-mirror", { "deploy.domain": name }, async () => {
-            const mirror = await mirrorPromise;
-            if (mirror === null) {
-              console.log("   GitHub Pages mirror: skipped (only directory deploys produce a CAR suitable for mirroring).");
-              return;
-            }
-            if (mirror instanceof MirrorSkipped) {
-              console.log(`   GitHub Pages mirror: skipped \u2014 ${mirror.message}`);
-              return;
-            }
-            if (mirror instanceof Error) {
-              console.log(`   GitHub Pages mirror: failed (non-fatal) \u2014 ${mirror.message}`);
-              captureWarning("gh-pages mirror failed", { error: mirror.message.slice(0, 200) });
-              return;
-            }
-            console.log(`   Mirror: ${mirror.url}`);
-            console.log(`   Manifest: https://${mirror.owner}.github.io/${mirror.repo}/${mirror.manifestPath}`);
-            setDeployAttribute("deploy.gh_pages_url", mirror.url);
-            process.stdout.write("   Verifying Pages serves this deploy's CAR... ");
-            const freshness = await pollMirrorFreshness(mirror.url, cid, { timeoutMs: 3 * 60 * 1e3, intervalMs: 1e4 });
-            if (freshness.verified) {
-              console.log(`ok (${freshness.attempts} attempt${freshness.attempts === 1 ? "" : "s"}, ${(freshness.durationMs / 1e3).toFixed(0)}s).`);
-              setDeployAttribute("deploy.gh_pages_freshness_verified", "true");
-            } else {
-              console.log(`timed out.`);
-              console.log(`   GitHub Pages last served cid=${freshness.lastCid ?? "n/a"} (expected ${cid}); it should catch up shortly. Non-fatal.`);
-              setDeployAttribute("deploy.gh_pages_freshness_verified", "false");
-            }
-          });
-        }
         console.log("\n" + "=".repeat(60));
         console.log("DEPLOYMENT COMPLETE!");
         console.log("=".repeat(60));

package/dist/{chunk-IJUKTHEP.js → chunk-KJVRJOKC.js}

@@ -37,10 +37,43 @@ function derivePoolAccounts(poolSize = 10, mnemonic = DEV_PHRASE) {
   }
   return accounts;
 }
+var ACCOUNT_AUTHORIZATION_FIELDS = [
+  "expires_at",
+  "bytes_allowance",
+  "bytes_used",
+  "bytes_permanent_used",
+  "transactions_allowance",
+  "transactions_used"
+];
+async function readAccountAuthorization(api, address) {
+  const auth = await api.apis.BulletinTransactionStorageApi.account_authorization(address);
+  if (auth == null) return null;
+  const missing = ACCOUNT_AUTHORIZATION_FIELDS.filter((f) => auth[f] == null);
+  if (missing.length > 0) {
+    throw new Error(
+      `Bulletin returned an AccountAuthorization for ${address} without ${missing.join(", ")} \u2014 this chain's BulletinTransactionStorageApi does not match what bulletin-deploy reads. Upgrade bulletin-deploy.`
+    );
+  }
+  return {
+    expiration: Number(auth.expires_at),
+    transactionsAllowance: Number(auth.transactions_allowance),
+    transactionsUsed: Number(auth.transactions_used),
+    // u64: a decoder may hand back number or bigint; the quota arithmetic can't mix.
+    bytesAllowance: BigInt(auth.bytes_allowance),
+    bytesUsed: BigInt(auth.bytes_used),
+    bytesPermanentUsed: BigInt(auth.bytes_permanent_used)
+  };
+}
+function remainingRenewBytes(auth) {
+  const left = auth.bytesAllowance - auth.bytesPermanentUsed;
+  return left > 0n ? left : 0n;
+}
+function remainingTransactions(auth) {
+  const left = auth.transactionsAllowance - auth.transactionsUsed;
+  return left > 0 ? BigInt(left) : 0n;
+}
 function isAuthorizationSufficient(auth, currentBlock) {
-  if (auth === void 0) return false;
-  if (Number(auth.expiration ?? 0) <= currentBlock) return false;
-  return true;
+  return auth != null && auth.expiration > currentBlock;
 }
 function accountsNeedingAuthorization(auths, currentBlock) {
   return auths.filter((a) => !isAuthorizationSufficient(a, currentBlock));
@@ -70,17 +103,15 @@ async function fetchPoolAuthorizations(api, accounts) {
   const results = await Promise.all(
     accounts.map(async (account) => {
       try {
-        const auth = await api.query.TransactionStorage.Authorizations.getValue(
-          Enum("Account", account.address)
-        );
+        const auth = await readAccountAuthorization(api, account.address);
         return {
           ...account,
-          transactions: auth ? BigInt(auth.extent.transactions_allowance) - BigInt(auth.extent.transactions) : 0n,
-          bytes: auth ? BigInt(auth.extent.bytes_allowance) - BigInt(auth.extent.bytes) : 0n,
-          expiration: auth ? Number(auth.expiration) : 0
+          transactions: auth ? remainingTransactions(auth) : 0n,
+          renewBytes: auth ? remainingRenewBytes(auth) : 0n,
+          expiration: auth ? auth.expiration : 0
         };
       } catch {
-        return { ...account, transactions: 0n, bytes: 0n, expiration: 0 };
+        return { ...account, transactions: 0n, renewBytes: 0n, expiration: 0 };
       }
     })
   );
@@ -119,7 +150,7 @@ function clampU32(n, name) {
 }
 async function ensureAuthorized(api, address, label, opts = {}) {
   const [auth, currentBlock] = await Promise.all([
-    api.query.TransactionStorage.Authorizations.getValue(Enum("Account", address)),
+    readAccountAuthorization(api, address),
     api.query.System.Number.getValue()
   ]);
   if (isAuthorizationSufficient(auth, currentBlock)) return;
@@ -210,8 +241,8 @@ Asset Hub pre-fund complete: ${fundedCount}/${accounts.length} account(s) topped
 }
 function printAuthStatus(a, currentBlock) {
   if (isAuthorizationSufficient(a, currentBlock)) {
-    const mb = (Number(a.bytes) / 1e6).toFixed(1);
-    console.log(`  [${a.index}] ${a.address}  AUTHORIZED \u2014 ${a.transactions} txs / ${mb}MB remaining, expires @${a.expiration}`);
+    const mb = (Number(a.renewBytes) / 1e6).toFixed(1);
+    console.log(`  [${a.index}] ${a.address}  AUTHORIZED \u2014 ${a.transactions} txs left / ${mb}MB renew headroom, expires @${a.expiration}`);
   } else {
     console.log(`  [${a.index}] ${a.address}  NOT AUTHORIZED`);
   }
@@ -312,6 +343,10 @@ export {
   poolAccountDerivationPath,
   assetHubTopUpAmount,
   derivePoolAccounts,
+  ACCOUNT_AUTHORIZATION_FIELDS,
+  readAccountAuthorization,
+  remainingRenewBytes,
+  remainingTransactions,
   isAuthorizationSufficient,
   accountsNeedingAuthorization,
   BULLETIN_BLOCK_TIME_SECS,

package/dist/{chunk-VH4MENPE.js → chunk-KYBCFN3P.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-CL7GQYYK.js";
 import {
   VERSION
-} from "./chunk-6AEIZMWM.js";
+} from "./chunk-X7QKYH3U.js";
 
 // src/auth-config.ts
 import { existsSync, readdirSync } from "fs";

package/dist/{chunk-WB6P374L.js → chunk-SJPSTDCN.js}

@@ -1,7 +1,7 @@
 import {
   emitIntervalSpan,
   setDeployAttribute
-} from "./chunk-6AEIZMWM.js";
+} from "./chunk-X7QKYH3U.js";
 
 // src/chain-health.ts
 var DEFAULT_WINDOW_BLOCKS = 10;

package/dist/{chunk-TUWXEZ2F.js → chunk-SNIF5BSD.js}

@@ -1,6 +1,6 @@
 import {
   pessimisticSizePreflight
-} from "./chunk-WIMRJK32.js";
+} from "./chunk-3THUTBHU.js";
 import {
   BLAKE2B_256_MULTIHASH_CODE,
   encodeContenthash,
@@ -9,13 +9,13 @@ import {
   setBulletinEndpoints,
   storeDirectory,
   storeFile
-} from "./chunk-TULAHSR4.js";
+} from "./chunk-JZNSDAZM.js";
 import {
   DEFAULT_TLD,
   DotNS,
   TX_KIND_SKIPPED,
   stripTldSuffix
-} from "./chunk-2CMBVGCM.js";
+} from "./chunk-ZPQO4PY2.js";
 import {
   DEFAULT_ENV_ID,
   getPopSelfServeConfig,
@@ -29,7 +29,7 @@ import {
   setDeployAttribute,
   withManifestSpan,
   withSpan
-} from "./chunk-6AEIZMWM.js";
+} from "./chunk-X7QKYH3U.js";
 
 // src/manifest/publish.ts
 import * as fs from "fs/promises";
@@ -195,6 +195,9 @@ function composeExecutable(exec) {
       ...exec.description !== void 0 ? { description: exec.description } : {}
     };
   }
+  if (exec.kind === "funding") {
+    return { $v: 1, kind: "funding", appVersion: exec.appVersion, modes: exec.modes };
+  }
   return {
     $v: 1,
     kind: "worker",