bulletin-deploy 0.15.2-rc.2 → 0.15.2-rc.3

package/bin/bulletin-deploy

@@ -57,7 +57,6 @@ for (let i = 0; i < args.length; i++) {
   else if (args[i] === "--tag") { flags.tag = args[++i]; }
   else if (args[i] === "--config") { flags.config = args[++i]; }
   else if (args[i] === "--no-manifest" || args[i] === "--content-only") { flags.noManifest = true; }
-  else if (args[i] === "--gh-pages-mirror") { flags.ghPagesMirror = true; }
   else if (args[i] === "--allow-large-deploy") { flags.allowLargeDeploy = true; }
   else if (args[i] === "--reproducible") { flags.reproducibleSource = "commit"; }
   else if (args[i].startsWith("--reproducible=")) { flags.reproducibleSource = args[i].slice("--reproducible=".length); }
@@ -305,14 +304,12 @@ Options:
   --config <path>     Explicit path to a bulletin-deploy.config.ts (default: walk up from
                       <build-dir> looking for bulletin-deploy.config.{ts,js,mjs}). When a
                       config is found, deploy ALSO writes the manifest + executable text
-                      records on <domain> and its app/widget/worker subnames.
+                      records on <domain> and its app/widget/funding/worker subnames.
   --no-manifest, --content-only
                       Skip manifest publishing entirely, even when a
                       bulletin-deploy.config.* is discoverable — plain content
                       deploy (storage + root contenthash), same as having no
                       config at all. Mutually exclusive with --publish.
-  --gh-pages-mirror   After deploy, push the CAR to the current repo's gh-pages branch
-                      at bulletin/<domain>.dot.car (opt-in; also set GH_PAGES_MIRROR=1)
   --publish           After deploy, list <domain> in the on-chain Publisher
                       registry (Publisher.publish). Only takes effect on envs
                       with a deployed Publisher (currently: paseo-next-v2).
@@ -527,7 +524,6 @@ try {
     jsMerkle: flags.jsMerkle,
     inputCar: flags.inputCar,
     tag: flags.tag,
-    ghPagesMirror: flags.ghPagesMirror,
     allowLargeDeploy: flags.allowLargeDeploy,
     reproducibleSource: flags.reproducibleSource,
     dumpCar: flags.dumpCar,

package/dist/auth-config.js

@@ -9,12 +9,12 @@ import {
   getPeopleChainEndpoints,
   hasPersistedSession,
   resolveBulletinEndpoints
-} from "./chunk-VH4MENPE.js";
+} from "./chunk-JTCPDG3Q.js";
 import "./chunk-TSPERKUS.js";
 import "./chunk-CL7GQYYK.js";
 import "./chunk-ZOC4GITL.js";
-import "./chunk-6AEIZMWM.js";
-import "./chunk-QDK4KW7S.js";
+import "./chunk-AEDFJNS4.js";
+import "./chunk-MPTNVUWH.js";
 export {
   DOT_DAPP_ID,
   DOT_DERIVATION_INDEX,

package/dist/bug-report.js

@@ -10,10 +10,10 @@ import {
   offerBugReport,
   scrubSecrets,
   setDeployContext
-} from "./chunk-7DQUTF5K.js";
-import "./chunk-WDPZHQ47.js";
-import "./chunk-6AEIZMWM.js";
-import "./chunk-QDK4KW7S.js";
+} from "./chunk-AQKF7XQI.js";
+import "./chunk-R5NAMIRF.js";
+import "./chunk-AEDFJNS4.js";
+import "./chunk-MPTNVUWH.js";
 export {
   buildCliFlagsSummary,
   buildLabels,

package/dist/chain-health.js

@@ -3,9 +3,9 @@ import {
   DEFAULT_WINDOW_BLOCKS,
   MAX_SPANS_PER_SAMPLER,
   endpointHost
-} from "./chunk-WB6P374L.js";
-import "./chunk-6AEIZMWM.js";
-import "./chunk-QDK4KW7S.js";
+} from "./chunk-YEWTKVXV.js";
+import "./chunk-AEDFJNS4.js";
+import "./chunk-MPTNVUWH.js";
 export {
   ChainHealthSampler,
   DEFAULT_WINDOW_BLOCKS,

package/dist/{chunk-TULAHSR4.js → chunk-3PW5FJCP.js}

@@ -1,14 +1,9 @@
 import {
   preflightSssAllowance
-} from "./chunk-ETL5WOOU.js";
+} from "./chunk-PJKUBDE7.js";
 import {
   statementSigningAccount
 } from "./chunk-GRPLHUYC.js";
-import {
-  MirrorSkipped,
-  mirrorToGitHubPages,
-  pollMirrorFreshness
-} from "./chunk-CGDOG7ZW.js";
 import {
   computeStats,
   renderSummary,
@@ -31,18 +26,18 @@ import {
 } from "./chunk-S7EM5VMW.js";
 import {
   setDeployContext
-} from "./chunk-7DQUTF5K.js";
+} from "./chunk-AQKF7XQI.js";
 import {
   getBestBlockNumber,
   probeChunks,
   probeFinalityGap
-} from "./chunk-3HKQCN5Y.js";
+} from "./chunk-ZFTY2OMP.js";
 import {
   packSection
 } from "./chunk-C2TS5MER.js";
 import {
   resolveStorageSigner
-} from "./chunk-KIYZBXVI.js";
+} from "./chunk-6CIU6CDU.js";
 import {
   createSlotAccountSigner,
   requestResourceAllocation
@@ -51,7 +46,7 @@ import {
   STALE_SESSION_MESSAGE,
   getPeopleChainEndpoints,
   hasPersistedSession
-} from "./chunk-VH4MENPE.js";
+} from "./chunk-JTCPDG3Q.js";
 import {
   CLI_NAME
 } from "./chunk-TSPERKUS.js";
@@ -67,15 +62,16 @@ import {
   parseDomainName,
   popStatusName,
   verifyNonceAdvanced
-} from "./chunk-2CMBVGCM.js";
+} from "./chunk-6FYNBBXT.js";
 import {
   derivePoolAccounts,
   detectTestnet,
   ensureAuthorized,
   fetchPoolAuthorizations,
   isAuthorizationSufficient,
+  readAccountAuthorization,
   selectAccount
-} from "./chunk-IJUKTHEP.js";
+} from "./chunk-KJVRJOKC.js";
 import {
   DEFAULT_ENV_ID,
   getPopSelfServeConfig,
@@ -87,7 +83,7 @@ import {
 } from "./chunk-ZOC4GITL.js";
 import {
   ChainHealthSampler
-} from "./chunk-WB6P374L.js";
+} from "./chunk-YEWTKVXV.js";
 import {
   VERSION,
   captureWarning,
@@ -101,7 +97,7 @@ import {
   truncateAddress,
   withDeploySpan,
   withSpan
-} from "./chunk-6AEIZMWM.js";
+} from "./chunk-AEDFJNS4.js";
 
 // src/merkle.ts
 import * as fs2 from "fs";
@@ -121,7 +117,7 @@ import * as path from "path";
 import { execSync } from "child_process";
 import { sha256 } from "@noble/hashes/sha256";
 import { blake2b } from "@noble/hashes/blake2b";
-import { createClient as createPolkadotClient2, Enum as Enum2 } from "polkadot-api";
+import { createClient as createPolkadotClient2 } from "polkadot-api";
 import { getWsProvider as getWsProvider2, WsEvent } from "polkadot-api/ws";
 import { CID } from "multiformats/cid";
 import { create as createMultihash } from "multiformats/hashes/digest";
@@ -194,7 +190,7 @@ function fromHex(hexString) {
 // src/storage-signer.ts
 import { sr25519CreateDerive } from "@polkadot-labs/hdkd";
 import { sr25519, ss58Address } from "@polkadot-labs/hdkd-helpers";
-import { createClient as createPolkadotClient, Enum } from "polkadot-api";
+import { createClient as createPolkadotClient } from "polkadot-api";
 import { getPolkadotSigner } from "polkadot-api/signer";
 import { getWsProvider } from "polkadot-api/ws";
 function sanitize(appId) {
@@ -336,7 +332,7 @@ async function waitForBulletinAuthorization(ss58, opts = {}) {
     return await pollUntilBulletinAuthorized(
       async () => {
         const [auth, block] = await Promise.all([
-          unsafeApi.query.TransactionStorage.Authorizations.getValue(Enum("Account", ss58)),
+          readAccountAuthorization(unsafeApi, ss58),
           client.getFinalizedBlock()
         ]);
         return { auth, blockNumber: block.number };
@@ -378,18 +374,20 @@ async function getSlotSignerProvider(signer, ss58) {
       { heartbeatTimeout: WS_HEARTBEAT_TIMEOUT_MS, onStatusChanged: makeBulletinStatusHandler(primary) }
     ));
     const unsafeApi = client.getUnsafeApi();
-    let auth;
-    let currentBlock;
+    let auth = null;
+    let blockNumber = 0;
     try {
-      [auth, currentBlock] = await Promise.all([
-        unsafeApi.query.TransactionStorage.Authorizations.getValue(Enum("Account", ss58)),
+      const [readAuth, finalized] = await Promise.all([
+        readAccountAuthorization(unsafeApi, ss58),
         client.getFinalizedBlock()
       ]);
+      auth = readAuth;
+      blockNumber = finalized.number;
     } catch (e) {
       client.destroy();
       throw e;
     }
-    const result = isBulletinAuthActive(auth, currentBlock.number);
+    const result = isBulletinAuthActive(auth, blockNumber);
     if (!result.active) {
       client.destroy();
       throw new BulletinSlotAuthError(result.reason, ss58, result.expiration);
@@ -599,15 +597,15 @@ async function getDirectProvider(mnemonic, derivationPath = "") {
   const { signer, ss58 } = deriveRootSigner(mnemonic, derivationPath);
   console.log(`   Using direct signer: ${ss58}${derivationPath ? ` (path: ${derivationPath})` : ""}`);
   let [auth, currentBlock] = await Promise.all([
-    unsafeApi.query.TransactionStorage.Authorizations.getValue(Enum2("Account", ss58)),
+    readAccountAuthorization(unsafeApi, ss58),
     client.getFinalizedBlock()
   ]);
   let now = currentBlock.number;
-  if (!auth || Number(auth.expiration ?? 0) <= now) {
+  if (!isAuthorizationSufficient(auth, now)) {
     try {
       await ensureAuthorized(unsafeApi, ss58, "direct signer", { autoAuthorize: bulletinAutoAuthorize, authorizer: bulletinAuthorizer });
       [auth, currentBlock] = await Promise.all([
-        unsafeApi.query.TransactionStorage.Authorizations.getValue(Enum2("Account", ss58)),
+        readAccountAuthorization(unsafeApi, ss58),
         client.getFinalizedBlock()
       ]);
       now = currentBlock.number;
@@ -616,7 +614,7 @@ async function getDirectProvider(mnemonic, derivationPath = "") {
       throw new NonRetryableError(`Account ${ss58} is not authorized for Bulletin storage and auto-authorization failed: ${e.message}`);
     }
   }
-  console.log(`   Authorization: expires at block ${Number(auth?.expiration ?? 0)} (current: ${now})`);
+  console.log(`   Authorization: expires at block ${auth?.expiration ?? 0} (current: ${now})`);
   setDeployAttribute("deploy.signer.mode", "direct");
   setDeployAttribute("deploy.signer.address", truncateAddress(ss58));
   return { client, unsafeApi, signer, ss58 };
@@ -625,15 +623,15 @@ async function getSignerProvider(signer, ss58) {
   const { client, unsafeApi } = createBulletinClient();
   console.log(`   Using external signer: ${ss58}`);
   let [auth, currentBlock] = await Promise.all([
-    unsafeApi.query.TransactionStorage.Authorizations.getValue(Enum2("Account", ss58)),
+    readAccountAuthorization(unsafeApi, ss58),
     client.getFinalizedBlock()
   ]);
   let now = currentBlock.number;
-  if (!auth || Number(auth.expiration ?? 0) <= now) {
+  if (!isAuthorizationSufficient(auth, now)) {
     try {
       await ensureAuthorized(unsafeApi, ss58, "external signer", { autoAuthorize: bulletinAutoAuthorize, authorizer: bulletinAuthorizer });
       [auth, currentBlock] = await Promise.all([
-        unsafeApi.query.TransactionStorage.Authorizations.getValue(Enum2("Account", ss58)),
+        readAccountAuthorization(unsafeApi, ss58),
         client.getFinalizedBlock()
       ]);
       now = currentBlock.number;
@@ -642,7 +640,7 @@ async function getSignerProvider(signer, ss58) {
       throw new NonRetryableError(`Account ${ss58} is not authorized for Bulletin storage and auto-authorization failed: ${e.message}`);
     }
   }
-  console.log(`   Authorization: expires at block ${Number(auth?.expiration ?? 0)} (current: ${now})`);
+  console.log(`   Authorization: expires at block ${auth?.expiration ?? 0} (current: ${now})`);
   setDeployAttribute("deploy.signer.mode", "external");
   setDeployAttribute("deploy.signer.address", truncateAddress(ss58));
   return { client, unsafeApi, signer, ss58 };
@@ -920,17 +918,17 @@ async function storeChunkedContent(chunks, { client: existingClient, unsafeApi:
     }
   }
   const readUploadAuthorization = () => Promise.all([
-    unsafeApi.query.TransactionStorage.Authorizations.getValue(Enum2("Account", ss58)),
-    unsafeApi.query.System.Number.getValue()
+    unsafeApi.query.System.Number.getValue(),
+    readAccountAuthorization(unsafeApi, ss58)
   ]);
-  let uploadAuth;
-  let currentBlockNum;
+  let uploadAuth = null;
+  let currentBlockNum = 0;
   try {
-    [uploadAuth, currentBlockNum] = await readUploadAuthorization();
+    [currentBlockNum, uploadAuth] = await readUploadAuthorization();
   } catch (e) {
     if (existingClient && reconnect && isConnectionError(e)) {
       await refreshExistingClient("authorization preflight hit a stale chainHead");
-      [uploadAuth, currentBlockNum] = await readUploadAuthorization();
+      [currentBlockNum, uploadAuth] = await readUploadAuthorization();
     } else {
       throw e;
     }
@@ -2286,7 +2284,6 @@ async function deploy(content, domainName = null, options = {}) {
       setDeployAttribute("deploy.transfer.enabled", options.transferTo ? "true" : "false");
       let cid;
       let ipfsCid;
-      let mirrorPromise = Promise.resolve(null);
       console.log("\n" + "=".repeat(60));
       console.log(`DEPLOYING TO TESTNET                    v${VERSION}`);
       console.log("=".repeat(60));
@@ -2443,18 +2440,6 @@ async function deploy(content, domainName = null, options = {}) {
                 carChunks = chunk(carContent, CHUNK_SIZE);
               }
             }
-            const predictedStorageCid = computeStorageCid(carChunks);
-            if (options.ghPagesMirror) {
-              mirrorPromise = mirrorToGitHubPages({
-                domain: name,
-                carBytes: carContent,
-                cid: predictedStorageCid,
-                toolVersion: VERSION,
-                bulletinRpc: BULLETIN_ENDPOINTS[0],
-                encrypted: Boolean(options.password),
-                tld: envTld
-              }).catch((err) => err instanceof Error ? err : new Error(String(err)));
-            }
             cid = (await storeChunkedContent(carChunks, providerWithReconnect)).storageCid;
           } else if (process.env.IPFS_CID) {
             setDeployAttribute("deploy.content_type", "ipfsCid");
@@ -2503,20 +2488,7 @@ async function deploy(content, domainName = null, options = {}) {
                 reproducibleSource: options.reproducibleSource,
                 domain: name,
                 gateway: envIpfs,
-                dumpCar: options.dumpCar,
-                onCarReady: (carBytes, predictedCid) => {
-                  if (options.ghPagesMirror) {
-                    mirrorPromise = mirrorToGitHubPages({
-                      domain: name,
-                      carBytes,
-                      cid: predictedCid,
-                      toolVersion: VERSION,
-                      bulletinRpc: BULLETIN_ENDPOINTS[0],
-                      encrypted: Boolean(options.password),
-                      tld: envTld
-                    }).catch((err) => err instanceof Error ? err : new Error(String(err)));
-                  }
-                }
+                dumpCar: options.dumpCar
               });
               cid = sCid;
               ipfsCid = iCid;
@@ -2690,40 +2662,6 @@ async function deploy(content, domainName = null, options = {}) {
             console.log(`   P2P retrieval: \u26A0 not yet retrievable (${probe.errorVariant}, ${probe.durationMs}ms)`);
           }
         });
-        if (options.ghPagesMirror) {
-          console.log("\n" + "=".repeat(60));
-          console.log("Final checks");
-          console.log("=".repeat(60));
-          await withSpan("deploy.gh-pages-mirror", "4. gh-pages-mirror", { "deploy.domain": name }, async () => {
-            const mirror = await mirrorPromise;
-            if (mirror === null) {
-              console.log("   GitHub Pages mirror: skipped (only directory deploys produce a CAR suitable for mirroring).");
-              return;
-            }
-            if (mirror instanceof MirrorSkipped) {
-              console.log(`   GitHub Pages mirror: skipped \u2014 ${mirror.message}`);
-              return;
-            }
-            if (mirror instanceof Error) {
-              console.log(`   GitHub Pages mirror: failed (non-fatal) \u2014 ${mirror.message}`);
-              captureWarning("gh-pages mirror failed", { error: mirror.message.slice(0, 200) });
-              return;
-            }
-            console.log(`   Mirror: ${mirror.url}`);
-            console.log(`   Manifest: https://${mirror.owner}.github.io/${mirror.repo}/${mirror.manifestPath}`);
-            setDeployAttribute("deploy.gh_pages_url", mirror.url);
-            process.stdout.write("   Verifying Pages serves this deploy's CAR... ");
-            const freshness = await pollMirrorFreshness(mirror.url, cid, { timeoutMs: 3 * 60 * 1e3, intervalMs: 1e4 });
-            if (freshness.verified) {
-              console.log(`ok (${freshness.attempts} attempt${freshness.attempts === 1 ? "" : "s"}, ${(freshness.durationMs / 1e3).toFixed(0)}s).`);
-              setDeployAttribute("deploy.gh_pages_freshness_verified", "true");
-            } else {
-              console.log(`timed out.`);
-              console.log(`   GitHub Pages last served cid=${freshness.lastCid ?? "n/a"} (expected ${cid}); it should catch up shortly. Non-fatal.`);
-              setDeployAttribute("deploy.gh_pages_freshness_verified", "false");
-            }
-          });
-        }
         console.log("\n" + "=".repeat(60));
         console.log("DEPLOYMENT COMPLETE!");
         console.log("=".repeat(60));

package/dist/{chunk-WIMRJK32.js → chunk-3THUTBHU.js}

@@ -53,6 +53,14 @@ function composePlaceholderExecutable(exec) {
       ...exec.description !== void 0 ? { description: exec.description } : {}
     };
   }
+  if (exec.kind === "funding") {
+    return {
+      $v: 1,
+      kind: "funding",
+      appVersion: exec.appVersion,
+      modes: exec.modes
+    };
+  }
   return {
     $v: 1,
     kind: "worker",

package/dist/{chunk-KIYZBXVI.js → chunk-6CIU6CDU.js}

@@ -4,10 +4,10 @@ import {
 } from "./chunk-5FLTDWWP.js";
 import {
   DOT_PRODUCT_ID
-} from "./chunk-VH4MENPE.js";
+} from "./chunk-JTCPDG3Q.js";
 import {
   DEFAULT_MNEMONIC
-} from "./chunk-2CMBVGCM.js";
+} from "./chunk-6FYNBBXT.js";
 
 // src/deploy-actors.ts
 var DEFAULT_WORKER_SURI = DEFAULT_MNEMONIC;

package/dist/{chunk-2CMBVGCM.js → chunk-6FYNBBXT.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-SI2ZUOYD.js";
 import {
   isTestnetSpecName
-} from "./chunk-IJUKTHEP.js";
+} from "./chunk-KJVRJOKC.js";
 import {
   validateContractAddresses
 } from "./chunk-CL7GQYYK.js";
@@ -12,7 +12,7 @@ import {
 } from "./chunk-ZOC4GITL.js";
 import {
   ChainHealthSampler
-} from "./chunk-WB6P374L.js";
+} from "./chunk-YEWTKVXV.js";
 import {
   captureWarning,
   markCodePath,
@@ -20,7 +20,7 @@ import {
   setDeploySentryTag,
   truncateAddress,
   withSpan
-} from "./chunk-6AEIZMWM.js";
+} from "./chunk-AEDFJNS4.js";
 
 // src/dotns.ts
 import crypto from "crypto";

package/dist/{chunk-6AEIZMWM.js → chunk-AEDFJNS4.js}

@@ -1,7 +1,7 @@
 import {
   package_default,
   writeRunState
-} from "./chunk-QDK4KW7S.js";
+} from "./chunk-MPTNVUWH.js";
 
 // src/memory-report.ts
 import * as fs2 from "fs";
@@ -335,9 +335,40 @@ function computeDeployOutcome(errorCategory, isSad, sadReason) {
 }
 var TLD_FRAGMENT = "[a-z]{2,}";
 var ERROR_KIND_RULES = [
-  [/Contract reverted|Contract execution would revert|revert(?:ed|ing)?\s*\(flags=[0-9]+\)|"type"\s*:\s*"ContractReverted"/i, "contract-revert"],
-  [/timed out after \d+s waiting for block|Transaction not included after \d+s|Transaction did not settle within/i, "chain-timeout"],
+  // Wrapper messages that interpolate a nested cause must precede the generic
+  // infra patterns below: the interpolated inner error frequently contains
+  // "Contract reverted" or a timeout phrase and would otherwise steal the
+  // classification from the more specific, more actionable outer message.
+  // (2026-08-06 telemetry sweep: this was the largest live `unknown` bucket —
+  // 31 spans, 30 of them env=preview, from the per-env authorizer gap #1209.)
+  [/is not authorized for Bulletin storage/i, "storage.rejected"],
+  // Revive surfaces the personhood gate as a bare revert reason rather than the
+  // "requires ProofOfPersonhoodX, but this signer is NoStatus" prose matched
+  // further down — same user-actionable cause, so it shares that kind. Ordered
+  // ahead of contract-revert, which would otherwise claim it: both the
+  // "(flags=N)" shape and (since #1255) the decoded `Publisher.publish reverted:`
+  // shape are contract-revert alternatives, and NoPersonhood arrives as the
+  // latter. The specific kind names the remedy, so it wins.
+  [/reverted:\s*NoPersonhood\b/i, "naming.pop_required"],
+  // Operator interrupt (Ctrl-C). Its own kind so dashboards can exclude it from
+  // the deploy failure rate rather than counting it as an unexplained failure.
+  // Deliberately anchored: because this kind *removes* a span from the failure
+  // rate, a false positive silently deletes a real failure. The phrase does not
+  // originate anywhere in src/ — it arrives verbatim as the whole message — so
+  // matching it as a sub-clause would only ever be a guess. If a wrapped variant
+  // shows up in the data later, widening this is a one-line change with evidence
+  // behind it; over-matching now would be invisible.
+  [/^aborted by user\b/i, "user.aborted"],
+  // `Publisher\.(?:un)?publish reverted:` — decoded ABI custom-error reverts
+  // from src/dotns.ts's publishLabel/unpublishLabel Publisher call paths.
+  [/Contract reverted|Contract execution would revert|revert(?:ed|ing)?\s*\(flags=[0-9]+\)|"type"\s*:\s*"ContractReverted"|Publisher\.(?:un)?publish reverted:/i, "contract-revert"],
+  [/timed out after \d+s waiting for block|Transaction not included after \d+s|Transaction did not settle within|Commitment still too new after \d+s/i, "chain-timeout"],
   [/\bstale\b.*nonce|nonce.*\bstale\b|"type"\s*:\s*"(?:Future|Stale)"|Invalid::Future|tx rejected by pool/i, "nonce-stale"],
+  // Invalid::BadProof: the extrinsic's signature didn't verify (wrong genesis
+  // hash / mortality window / spec version, or a re-signed payload mismatch).
+  // Bare variant name, not the JSON envelope — both producer sites in
+  // src/deploy.ts truncate the inner chain error at 100 chars.
+  [/BadProof/i, "chain.bad_proof"],
   [/heartbeat timeout|WS halt|Unable to connect|ChainHead disjointed|websocket.*closed|socket closed|disconnect/i, "connection"],
   [/requires ProofOfPersonhood(?:Full|Lite|Light),\s*but this signer is NoStatus/i, "naming.pop_required"],
   [/requires NoStatus,\s*but this signer is ProofOfPersonhood/i, "naming.nostatus_required"],
@@ -348,6 +379,10 @@ var ERROR_KIND_RULES = [
   // it the same way instead of letting it fall into 'unknown'.
   [/No contract deployed at .+ returned empty success data/i, "naming.contract_unavailable"],
   [/Contract call returned empty data — contract=/i, "naming.contract_unavailable"],
+  // Same failure family caught one step earlier: the environment config carries
+  // a zero/absent address, so the call is refused before it is made rather than
+  // coming back with empty data.
+  [/Invalid contract address for \w+ in environment/i, "naming.contract_unavailable"],
   [new RegExp(`Domain\\s+\\S+\\.${TLD_FRAGMENT}\\s+is already owned by\\s+0x[a-fA-F0-9]+`, "i"), "naming.already_owned"],
   // #1185: formatUnregistrableReason's distinctive phrase — present in both
   // the unregistered ("...is not registered, and bulletin-deploy cannot
@@ -367,7 +402,11 @@ var ERROR_KIND_RULES = [
   [/ReviveApi\.\w+ returned empty result/i, "chain.api_timeout"],
   [/transaction watcher silent for \d+s/i, "chain.tx_silent"],
   [/(?:commit|register|setSubnodeOwner|setResolver|setContenthash|setText|publish|unpublish|Revive\.call|Utility\.batch_all) timed out after \d+ms/i, "chain.tx_timeout"],
-  [/AncientBirthBlock/i, "chain.extrinsic_expired"],
+  // Prefix, not the full `AncientBirthBlock` variant name: at 17 chars it is
+  // long enough to be cut in half by the 100-char truncation both src/deploy.ts
+  // producer sites apply to the inner chain error, which sent a live span to
+  // `unknown` with the message ending `"type": "AncientBirth`.
+  [/AncientBirth/i, "chain.extrinsic_expired"],
   [/Bulletin quota exhausted/i, "chain.quota_exhausted"],
   [/Mobile signing (?:failed|rejected).*message too big/i, "signer.message_too_large"],
   [/^INVARIANT FAILED:/i, "tool.invariant"]

package/dist/{chunk-TUWXEZ2F.js → chunk-AMN43EQT.js}

@@ -1,6 +1,6 @@
 import {
   pessimisticSizePreflight
-} from "./chunk-WIMRJK32.js";
+} from "./chunk-3THUTBHU.js";
 import {
   BLAKE2B_256_MULTIHASH_CODE,
   encodeContenthash,
@@ -9,13 +9,13 @@ import {
   setBulletinEndpoints,
   storeDirectory,
   storeFile
-} from "./chunk-TULAHSR4.js";
+} from "./chunk-3PW5FJCP.js";
 import {
   DEFAULT_TLD,
   DotNS,
   TX_KIND_SKIPPED,
   stripTldSuffix
-} from "./chunk-2CMBVGCM.js";
+} from "./chunk-6FYNBBXT.js";
 import {
   DEFAULT_ENV_ID,
   getPopSelfServeConfig,
@@ -29,7 +29,7 @@ import {
   setDeployAttribute,
   withManifestSpan,
   withSpan
-} from "./chunk-6AEIZMWM.js";
+} from "./chunk-AEDFJNS4.js";
 
 // src/manifest/publish.ts
 import * as fs from "fs/promises";
@@ -195,6 +195,9 @@ function composeExecutable(exec) {
       ...exec.description !== void 0 ? { description: exec.description } : {}
     };
   }
+  if (exec.kind === "funding") {
+    return { $v: 1, kind: "funding", appVersion: exec.appVersion, modes: exec.modes };
+  }
   return {
     $v: 1,
     kind: "worker",

package/dist/{chunk-7DQUTF5K.js → chunk-AQKF7XQI.js}

@@ -2,15 +2,15 @@ import {
   classifyErrorArea,
   isInteractive,
   promptYesNo
-} from "./chunk-WDPZHQ47.js";
+} from "./chunk-R5NAMIRF.js";
 import {
   VERSION,
   getCurrentSentryTraceId,
   resolveIssueRepoSlug
-} from "./chunk-6AEIZMWM.js";
+} from "./chunk-AEDFJNS4.js";
 import {
   package_default
-} from "./chunk-QDK4KW7S.js";
+} from "./chunk-MPTNVUWH.js";
 
 // src/bug-report.ts
 import { execSync, execFileSync } from "child_process";
@@ -80,7 +80,6 @@ function scrubSecrets(text) {
 function buildCliFlagsSummary(flags) {
   const parts = [];
   if (flags.jsMerkle) parts.push("--js-merkle");
-  if (flags.ghPagesMirror) parts.push("--gh-pages-mirror");
   if (flags.publish) parts.push("--publish");
   if (flags.unpublish) parts.push("--unpublish");
   if (flags.failOnPublishError) parts.push("--fail-on-publish-error");

package/dist/{chunk-NHYYNQSN.js → chunk-DN4FDSVM.js}

@@ -1,6 +1,6 @@
 import {
   validateProductConfig
-} from "./chunk-5V6DL5OB.js";
+} from "./chunk-YXMWCUXP.js";
 import {
   NonRetryableError
 } from "./chunk-ZOC4GITL.js";

package/dist/{chunk-VH4MENPE.js → chunk-JTCPDG3Q.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-CL7GQYYK.js";
 import {
   VERSION
-} from "./chunk-6AEIZMWM.js";
+} from "./chunk-AEDFJNS4.js";
 
 // src/auth-config.ts
 import { existsSync, readdirSync } from "fs";