bulletin-deploy 0.15.2 → 0.16.0-rc.2

package/assets/environments.json

@@ -11,7 +11,7 @@
       "backend": "https://polkadot-app-stg.parity.io/",
       "ipfs": "https://previewnet.substrate.dev",
       "webGateway": "testnet.li",
-      "tld": "test",
+      "tld": "testnet",
       "autoAccountMapping": true,
       "nativeToEthRatio": 100000000,
       "registerStorageDeposit": 2000000000000,

package/bin/bulletin-deploy

@@ -259,7 +259,8 @@ Usage:
   bulletin-deploy login                     Sign in with your Polkadot mobile app
   bulletin-deploy logout                    Sign out and clear the session
   bulletin-deploy whoami                    Show the currently signed-in identity
-  bulletin-deploy transfer <domain.dot>     Hand a name you registered to the signed-in account (or --to)
+  bulletin-deploy transfer <domain.dot>     Hand a name you registered to the signed-in account (or --to).
+                                            Also reassigns a subname (e.g. app.foo.dot) if you own its parent.
 
 Options:
   --env <id>               Target environment from environments.json (default: paseo-next-v2).
@@ -312,7 +313,7 @@ Options:
                       config at all. Mutually exclusive with --publish.
   --publish           After deploy, list <domain> in the on-chain Publisher
                       registry (Publisher.publish). Only takes effect on envs
-                      with a deployed Publisher (currently: paseo-next-v2).
+                      with a deployed Publisher (currently: PCF-devnet).
                       Requires --mnemonic (the signer must own the label).
   --unpublish         Standalone mode: removes <domain> from the Publisher
                       registry (Publisher.unpublish). Skips the deploy.
@@ -542,12 +543,21 @@ try {
         console.log(`   ${display.map(s => s.toLowerCase()).join(" · ")}`);
       }
     },
-    confirmPhoneReady: ({ label, attempt }) => new Promise((resolve, reject) => {
-      if (attempt >= 2) {
+    // #194: `approvalBudgetMs` is threaded through from PHONE_APPROVAL_MS
+    // (src/dotns.ts) rather than hardcoded here, so the disclosed number can
+    // never drift from the constant that actually governs the deadline.
+    // `reason: "silence"` marks a watcher-silence re-arm (no response within
+    // the budget) as distinct from the pre-existing verifyEffect-false-negative
+    // re-sign case (undefined/"resign", still rendered off `attempt`).
+    confirmPhoneReady: ({ label, attempt, approvalBudgetMs, reason }) => new Promise((resolve, reject) => {
+      const budgetSeconds = Math.round(approvalBudgetMs / 1000);
+      if (reason === "silence") {
+        console.log(`\n   still nothing from your phone — press Y to re-send, Ctrl-C to abort`);
+      } else if (attempt >= 2) {
         console.log(`\n   Re-sign needed (attempt ${attempt}) — approve on your phone, then press Y to continue (Ctrl-C to abort).`);
       } else {
         console.log(`\n   Check your phone → ${label}`);
-        console.log(`   Press Y when ready (Ctrl-C to abort):`);
+        console.log(`   Press Y when ready — you'll have ~${budgetSeconds}s to approve on your phone (Ctrl-C to abort):`);
       }
       const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
       let settled = false;
@@ -556,7 +566,11 @@ try {
       const ask = () => {
         rl.question("   > ", (line) => {
           const answer = line.trim().toLowerCase();
-          if (answer === "y" || answer === "") {
+          // #194: require an EXPLICIT y/yes — bare Enter is the input most
+          // likely to come from something other than a deliberate keypress
+          // (buffered newline, stray Enter, piped stdin), and accepting it
+          // starts a fatal clock with nobody watching.
+          if (answer === "y" || answer === "yes") {
             settle(resolve);
           } else {
             ask();

package/dist/auth-config.js

@@ -9,12 +9,12 @@ import {
   getPeopleChainEndpoints,
   hasPersistedSession,
   resolveBulletinEndpoints
-} from "./chunk-KYBCFN3P.js";
+} from "./chunk-6C3JLASN.js";
 import "./chunk-TSPERKUS.js";
-import "./chunk-CL7GQYYK.js";
+import "./chunk-7CHUI4JX.js";
 import "./chunk-ZOC4GITL.js";
-import "./chunk-X7QKYH3U.js";
-import "./chunk-5HYWJO57.js";
+import "./chunk-BBPA3Q5K.js";
+import "./chunk-XFXTMHZX.js";
 export {
   DOT_DAPP_ID,
   DOT_DERIVATION_INDEX,

package/dist/bug-report.js

@@ -10,10 +10,10 @@ import {
   offerBugReport,
   scrubSecrets,
   setDeployContext
-} from "./chunk-CRNBI46S.js";
-import "./chunk-2M65ETRD.js";
-import "./chunk-X7QKYH3U.js";
-import "./chunk-5HYWJO57.js";
+} from "./chunk-PK3T6C6T.js";
+import "./chunk-VSLW6WXT.js";
+import "./chunk-BBPA3Q5K.js";
+import "./chunk-XFXTMHZX.js";
 export {
   buildCliFlagsSummary,
   buildLabels,

package/dist/chain-health.js

@@ -3,9 +3,9 @@ import {
   DEFAULT_WINDOW_BLOCKS,
   MAX_SPANS_PER_SAMPLER,
   endpointHost
-} from "./chunk-SJPSTDCN.js";
-import "./chunk-X7QKYH3U.js";
-import "./chunk-5HYWJO57.js";
+} from "./chunk-466FDICA.js";
+import "./chunk-BBPA3Q5K.js";
+import "./chunk-XFXTMHZX.js";
 export {
   ChainHealthSampler,
   DEFAULT_WINDOW_BLOCKS,

package/dist/{chunk-DN4FDSVM.js → chunk-2BKPLQY2.js}

@@ -1,6 +1,6 @@
 import {
   validateProductConfig
-} from "./chunk-YXMWCUXP.js";
+} from "./chunk-D6AYE6KA.js";
 import {
   NonRetryableError
 } from "./chunk-ZOC4GITL.js";

package/dist/{chunk-CD2NN5LL.js → chunk-33SYDRVZ.js}

@@ -1,6 +1,6 @@
 import {
   captureWarning
-} from "./chunk-X7QKYH3U.js";
+} from "./chunk-BBPA3Q5K.js";
 
 // src/chunk-probe.ts
 import { Twox128, Blake2128Concat, decAnyMetadata, unifyMetadata } from "@polkadot-api/substrate-bindings";

package/dist/{chunk-SJPSTDCN.js → chunk-466FDICA.js}

@@ -1,7 +1,7 @@
 import {
   emitIntervalSpan,
   setDeployAttribute
-} from "./chunk-X7QKYH3U.js";
+} from "./chunk-BBPA3Q5K.js";
 
 // src/chain-health.ts
 var DEFAULT_WINDOW_BLOCKS = 10;

package/dist/{chunk-KYBCFN3P.js → chunk-6C3JLASN.js}

@@ -3,10 +3,10 @@ import {
 } from "./chunk-TSPERKUS.js";
 import {
   loadEnvironments
-} from "./chunk-CL7GQYYK.js";
+} from "./chunk-7CHUI4JX.js";
 import {
   VERSION
-} from "./chunk-X7QKYH3U.js";
+} from "./chunk-BBPA3Q5K.js";
 
 // src/auth-config.ts
 import { existsSync, readdirSync } from "fs";

package/dist/{chunk-CL7GQYYK.js → chunk-7CHUI4JX.js}

@@ -20,7 +20,7 @@ var environments_default = {
       backend: "https://polkadot-app-stg.parity.io/",
       ipfs: "https://previewnet.substrate.dev",
       webGateway: "testnet.li",
-      tld: "test",
+      tld: "testnet",
       autoAccountMapping: true,
       nativeToEthRatio: 1e8,
       registerStorageDeposit: 2e12,

package/dist/{chunk-X7QKYH3U.js → chunk-BBPA3Q5K.js}

@@ -1,7 +1,7 @@
 import {
   package_default,
   writeRunState
-} from "./chunk-5HYWJO57.js";
+} from "./chunk-XFXTMHZX.js";
 
 // src/memory-report.ts
 import * as fs2 from "fs";

package/dist/{chunk-YXMWCUXP.js → chunk-D6AYE6KA.js}

@@ -7,7 +7,7 @@ var KIND_WORKER = "worker";
 var EXECUTABLE_KINDS = [KIND_APP, KIND_WIDGET, KIND_FUNDING, KIND_WORKER];
 var FUNDING_MODES = ["CARD", "BANK", "CRYPTO"];
 var LABEL = String.raw`(?!-)[a-z0-9-]{1,63}(?<!-)`;
-var KNOWN_TLDS = ["dot", "paseo", "test"];
+var KNOWN_TLDS = ["dot", "paseo", "test", "testnet"];
 var DOMAIN_RE = new RegExp(`^${LABEL}(\\.${LABEL})*\\.(?:${KNOWN_TLDS.join("|")})$`, "i");
 function isPlainObject(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);

package/dist/{chunk-JZNSDAZM.js → chunk-OORLC7SM.js}

@@ -1,6 +1,6 @@
 import {
   preflightSssAllowance
-} from "./chunk-4T6LXSOJ.js";
+} from "./chunk-SWD774NU.js";
 import {
   statementSigningAccount
 } from "./chunk-GRPLHUYC.js";
@@ -26,18 +26,18 @@ import {
 } from "./chunk-S7EM5VMW.js";
 import {
   setDeployContext
-} from "./chunk-CRNBI46S.js";
+} from "./chunk-PK3T6C6T.js";
 import {
   getBestBlockNumber,
   probeChunks,
   probeFinalityGap
-} from "./chunk-CD2NN5LL.js";
+} from "./chunk-33SYDRVZ.js";
 import {
   packSection
 } from "./chunk-C2TS5MER.js";
 import {
   resolveStorageSigner
-} from "./chunk-EKBGOA24.js";
+} from "./chunk-OWCCOKOP.js";
 import {
   createSlotAccountSigner,
   requestResourceAllocation
@@ -46,7 +46,7 @@ import {
   STALE_SESSION_MESSAGE,
   getPeopleChainEndpoints,
   hasPersistedSession
-} from "./chunk-KYBCFN3P.js";
+} from "./chunk-6C3JLASN.js";
 import {
   CLI_NAME
 } from "./chunk-TSPERKUS.js";
@@ -62,7 +62,7 @@ import {
   parseDomainName,
   popStatusName,
   verifyNonceAdvanced
-} from "./chunk-ZPQO4PY2.js";
+} from "./chunk-SY2KD7SN.js";
 import {
   derivePoolAccounts,
   detectTestnet,
@@ -77,13 +77,13 @@ import {
   getPopSelfServeConfig,
   loadEnvironments,
   resolveEndpoints
-} from "./chunk-CL7GQYYK.js";
+} from "./chunk-7CHUI4JX.js";
 import {
   NonRetryableError
 } from "./chunk-ZOC4GITL.js";
 import {
   ChainHealthSampler
-} from "./chunk-SJPSTDCN.js";
+} from "./chunk-466FDICA.js";
 import {
   VERSION,
   captureWarning,
@@ -97,7 +97,7 @@ import {
   truncateAddress,
   withDeploySpan,
   withSpan
-} from "./chunk-X7QKYH3U.js";
+} from "./chunk-BBPA3Q5K.js";
 
 // src/merkle.ts
 import * as fs2 from "fs";

package/dist/{chunk-EKBGOA24.js → chunk-OWCCOKOP.js}

@@ -4,10 +4,10 @@ import {
 } from "./chunk-5FLTDWWP.js";
 import {
   DOT_PRODUCT_ID
-} from "./chunk-KYBCFN3P.js";
+} from "./chunk-6C3JLASN.js";
 import {
   DEFAULT_MNEMONIC
-} from "./chunk-ZPQO4PY2.js";
+} from "./chunk-SY2KD7SN.js";
 
 // src/deploy-actors.ts
 var DEFAULT_WORKER_SURI = DEFAULT_MNEMONIC;

package/dist/{chunk-CRNBI46S.js → chunk-PK3T6C6T.js}

@@ -2,15 +2,15 @@ import {
   classifyErrorArea,
   isInteractive,
   promptYesNo
-} from "./chunk-2M65ETRD.js";
+} from "./chunk-VSLW6WXT.js";
 import {
   VERSION,
   getCurrentSentryTraceId,
   resolveIssueRepoSlug
-} from "./chunk-X7QKYH3U.js";
+} from "./chunk-BBPA3Q5K.js";
 import {
   package_default
-} from "./chunk-5HYWJO57.js";
+} from "./chunk-XFXTMHZX.js";
 
 // src/bug-report.ts
 import { execSync, execFileSync } from "child_process";

package/dist/{chunk-4T6LXSOJ.js → chunk-SWD774NU.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-GRPLHUYC.js";
 import {
   DOT_DAPP_ID
-} from "./chunk-KYBCFN3P.js";
+} from "./chunk-6C3JLASN.js";
 
 // src/sss-allowance-cache.ts
 import { mkdir, readFile, writeFile, unlink } from "fs/promises";

package/dist/{chunk-ZPQO4PY2.js → chunk-SY2KD7SN.js}

@@ -6,13 +6,13 @@ import {
 } from "./chunk-KJVRJOKC.js";
 import {
   validateContractAddresses
-} from "./chunk-CL7GQYYK.js";
+} from "./chunk-7CHUI4JX.js";
 import {
   NonRetryableError
 } from "./chunk-ZOC4GITL.js";
 import {
   ChainHealthSampler
-} from "./chunk-SJPSTDCN.js";
+} from "./chunk-466FDICA.js";
 import {
   captureWarning,
   markCodePath,
@@ -20,7 +20,7 @@ import {
   setDeploySentryTag,
   truncateAddress,
   withSpan
-} from "./chunk-X7QKYH3U.js";
+} from "./chunk-BBPA3Q5K.js";
 
 // src/dotns.ts
 import crypto from "crypto";
@@ -143,6 +143,7 @@ var TX_TIMEOUT_MS = 9e4;
 var TX_CHAIN_TIME_BUDGET_MS = 18e4;
 var TX_WALL_CLOCK_CEILING_MS = 24e4;
 var TX_NO_PROGRESS_MS = 9e4;
+var PHONE_APPROVAL_MS = 9e4;
 var DOTNS_BEST_BLOCK_GRACE_MS = parseInt(process.env.BULLETIN_DOTNS_BESTBLOCK_GRACE_MS ?? "60000", 10);
 var WS_HEARTBEAT_TIMEOUT_MS = 3e5;
 var DOTNS_TX_MAX_ATTEMPTS = 3;
@@ -174,12 +175,15 @@ function classifyTxRetryDecision(err) {
   if (lower.includes("transaction watcher silent")) return "retry";
   return "abort";
 }
+var PhoneSilenceNonRetryableError = class extends NonRetryableError {
+};
 function classifyWatcherSilentFastFail(err, isPhoneSigner) {
   if (err instanceof WatcherSilentNoEventError && isPhoneSigner === true) {
-    return new NonRetryableError("No signature received from the phone \u2014 re-run when you can approve on your phone.");
+    return new PhoneSilenceNonRetryableError("No signature received from the phone \u2014 re-run when you can approve on your phone.");
   }
   return null;
 }
+var PHONE_SILENCE_MAX_REARMS = 3;
 var DOTNS_RETRY_BASE_MS = 400;
 var DOTNS_RETRY_MAX_MS = 6e3;
 function dotnsRetryBackoffMs(attempt, rand = Math.random) {
@@ -236,7 +240,7 @@ function makeRetryStatusFilter(sink) {
 }
 var DEFAULT_MNEMONIC = "bottom drive obey lake curtain smoke basket hold race lonely fit walk";
 var DEFAULT_TLD = "dot";
-var KNOWN_TLDS = ["dot", "paseo", "test"];
+var KNOWN_TLDS = ["dot", "paseo", "test", "testnet"];
 function normalizeOnChainTld(raw) {
   return raw.startsWith(".") ? raw.slice(1) : raw;
 }
@@ -418,7 +422,7 @@ var PUBLISHER_ABI = [
 ];
 var PublisherNotSupportedError = class extends Error {
   constructor(envName) {
-    super(`Publisher contract is not configured for environment '${envName}'. Use an env that has a deployed Publisher (currently: paseo-next-v2).`);
+    super(`Publisher contract is not configured for environment '${envName}'. Use an env that has a deployed Publisher (currently: PCF-devnet).`);
     this.name = "PublisherNotSupportedError";
   }
 };
@@ -572,6 +576,19 @@ function convertWeiToNative(weiValue) {
 function computeDomainTokenId(label, tld = DEFAULT_TLD) {
   return BigInt(namehash(`${label}.${tld}`));
 }
+function computeSubnodeIds(sublabel, parentLabel, tld = DEFAULT_TLD) {
+  return {
+    parentNode: namehash(`${parentLabel}.${tld}`),
+    subnode: namehash(`${sublabel}.${parentLabel}.${tld}`)
+  };
+}
+function assertNotZeroRecipient(toH160, fullName) {
+  if (toH160.toLowerCase() === zeroAddress) {
+    throw new Error(
+      `Refusing to transfer ${fullName} to the zero address (${zeroAddress}): this would permanently burn it \u2014 there is no owner to recover it from afterward. Pass a real recipient with --to <0xH160>.`
+    );
+  }
+}
 function countTrailingDigits(label) {
   let count = 0;
   for (let i = label.length - 1; i >= 0; i--) {
@@ -914,10 +931,11 @@ var ReviveClientWrapper = class _ReviveClientWrapper {
       let lastEventType = "(none)";
       let startChainTimeMs = null;
       let bestBlockIncluded = false;
+      const silenceDeadlineMs = opts.isPhoneSigner === true ? PHONE_APPROVAL_MS : TX_NO_PROGRESS_MS;
       const graceRawEnv = process.env.BULLETIN_DOTNS_BESTBLOCK_GRACE_MS;
       const bestBlockGraceMs = Math.min(
         graceRawEnv != null && graceRawEnv !== "" ? parseInt(graceRawEnv, 10) : DOTNS_BEST_BLOCK_GRACE_MS,
-        TX_NO_PROGRESS_MS - 5e3
+        silenceDeadlineMs - 5e3
       );
       const poll = async () => {
         if (settled) return;
@@ -962,7 +980,7 @@ var ReviveClientWrapper = class _ReviveClientWrapper {
             return;
           }
           const silentMs = Date.now() - lastEventAt;
-          if (silentMs > TX_NO_PROGRESS_MS) {
+          if (silentMs > silenceDeadlineMs) {
             statusCallback("failed");
             if (lastEventType === "(none)") {
               finish(reject)(new WatcherSilentNoEventError(silentMs));
@@ -1887,7 +1905,7 @@ var DotNS = class _DotNS {
     if (phoneLabel !== void 0) {
       await this._awaitPhoneReady(phoneLabel);
     }
-    return await withTimeout(
+    const submitOnce = () => withTimeout(
       this.clientWrapper.submitTransaction(contractAddress, value, encodedCallData, this.substrateAddress, this.signer, statusCallback, {
         rpcs,
         useNoncePolling,
@@ -1902,11 +1920,26 @@ var DotNS = class _DotNS {
         // your phone / Press Y") before re-signing. Both _awaitPhoneReady and the
         // retry-loop guard no-op for non-phone signers (local/dev workers).
         isPhoneSigner: this._isPhoneSigner,
-        onResign: phoneLabel !== void 0 ? () => this._awaitPhoneReady(phoneLabel) : void 0
+        // #194: thread the re-arm `reason` (undefined/"resign" for the #971
+        // verifyEffect-false-negative case, "silence" for the watcher-silence
+        // re-arm below) through to _awaitPhoneReady so confirmPhoneReady's
+        // consumer can render the right prompt for each case.
+        onResign: phoneLabel !== void 0 ? (_attempt, reason) => this._awaitPhoneReady(phoneLabel, reason) : void 0
       }),
       OPERATION_TIMEOUT_MS,
       functionName
     );
+    if (phoneLabel === void 0 || !this._isPhoneSigner) return await submitOnce();
+    const maxAttempts = 1 + PHONE_SILENCE_MAX_REARMS;
+    for (let attempt = 1; attempt <= maxAttempts; attempt++) {
+      try {
+        return await submitOnce();
+      } catch (e) {
+        if (!(e instanceof PhoneSilenceNonRetryableError) || attempt === maxAttempts) throw e;
+        await this._awaitPhoneReady(phoneLabel, "silence");
+      }
+    }
+    throw new Error("contractTransaction: unreachable \u2014 phone-silence re-arm loop exited without resolving");
   }
   async checkOwnership(label, ownerAddress = null) {
     this.ensureConnected();
@@ -1940,6 +1973,7 @@ var DotNS = class _DotNS {
   }) {
     this.ensureConnected();
     const validated = validateDomainLabel(label);
+    assertNotZeroRecipient(toH160, `${validated}.${this._tld}`);
     const tokenId = computeDomainTokenId(validated, this._tld);
     const owner = await withTimeout(this.contractCall(this._contracts.DOTNS_REGISTRAR, DOTNS_REGISTRAR_TRANSFER_ABI, "ownerOf", [tokenId]), 3e4, "ownerOf");
     if (owner.toLowerCase() === toH160.toLowerCase()) {
@@ -1964,6 +1998,71 @@ var DotNS = class _DotNS {
     }
     return { status: "ok", txHash: txRes.kind === TX_KIND_HASH ? txRes.hash : void 0, feeWei };
   }
+  /** Reassign an existing subname (e.g. `app.foo.<tld>`) to `toH160`.
+   *
+   *  Subnames are NOT ERC-721 tokens, so they cannot go through
+   *  transferName/transferFrom — the registrar has no token for them. Instead
+   *  the *parent-domain* owner reassigns a subname via the registry's
+   *  setSubnodeOwner (the same call registerSubdomain uses to create it).
+   *  Authorisation is on parent ownership, not on the subname's current owner,
+   *  so the connected signer must own `${parentLabel}.${this._tld}`. Idempotent:
+   *  a no-op when the recipient already owns it.
+   *
+   *  Every node here is derived via `namehash(\`...${this._tld}\`)` — the same
+   *  this._tld-templated convention as every other call site (see the comment
+   *  above computeDomainTokenId, ~line 1098) — deliberately NOT a hardcoded
+   *  ".dot" suffix. A second, manually-hardcoded node-derivation path is
+   *  exactly the bug class that burned production once already (registering
+   *  "ssoqedtuwf.paseo" minted namehash("ssoqedtuwf.paseo") but a hardcoded
+   *  ".dot" lookup queried namehash("ssoqedtuwf.dot") and reverted with
+   *  ERC721NonexistentToken after an 11 PAS mint had already succeeded). */
+  async transferSubname(sublabel, parentLabel, toH160, statusCallback = () => {
+  }) {
+    this.ensureConnected();
+    const fullName = `${sublabel}.${parentLabel}.${this._tld}`;
+    assertNotZeroRecipient(toH160, fullName);
+    const { parentNode, subnode } = computeSubnodeIds(sublabel, parentLabel, this._tld);
+    const parentOwner = await withTimeout(
+      this.contractCallNullable(this._contracts.DOTNS_REGISTRY, DOTNS_REGISTRY_ABI, "owner", [parentNode]),
+      3e4,
+      "owner"
+    );
+    if (!parentOwner || parentOwner === zeroAddress) {
+      throw new Error(`Cannot transfer ${fullName}: parent ${parentLabel}.${this._tld} is not registered.`);
+    }
+    if (parentOwner.toLowerCase() !== this.evmAddress.toLowerCase()) {
+      throw new Error(
+        `Cannot transfer ${fullName}: it is a subname, which only the owner of the parent ${parentLabel}.${this._tld} can reassign (subnames are not transferable tokens). Parent is owned by ${parentOwner}, but the signer is ${this.evmAddress}. Sign as the parent owner (e.g. pass its --mnemonic).`
+      );
+    }
+    const current = await withTimeout(
+      this.contractCallNullable(this._contracts.DOTNS_REGISTRY, DOTNS_REGISTRY_ABI, "owner", [subnode]),
+      3e4,
+      "owner"
+    );
+    if (current && current.toLowerCase() === toH160.toLowerCase()) {
+      statusCallback("already owned by recipient");
+      return { status: "skipped-already-owned" };
+    }
+    const subnodeRecord = { parentNode, subLabel: sublabel, parentLabel, owner: toH160 };
+    const txRes = await this.contractTransaction(
+      this._contracts.DOTNS_REGISTRY,
+      0n,
+      DOTNS_REGISTRY_ABI,
+      "setSubnodeOwner",
+      [subnodeRecord],
+      statusCallback
+    );
+    const after = await withTimeout(
+      this.contractCallNullable(this._contracts.DOTNS_REGISTRY, DOTNS_REGISTRY_ABI, "owner", [subnode]),
+      3e4,
+      "owner"
+    );
+    if (!after || after.toLowerCase() !== toH160.toLowerCase()) {
+      throw new Error(`Transfer of ${fullName} did not land: owner is ${after ?? "unset"}, expected ${toH160}.`);
+    }
+    return { status: "ok", txHash: txRes.kind === TX_KIND_HASH ? txRes.hash : void 0 };
+  }
   async getUserPopStatus(ownerAddress = null) {
     if (this._userPopStatusOverrideForTest !== null) {
       const result = this._userPopStatusOverrideForTest;
@@ -1988,7 +2087,7 @@ var DotNS = class _DotNS {
   async checkSubdomainOwnership(sublabel, parentLabel) {
     this.ensureConnected();
     if (!this.clientWrapper) return { owned: false, owner: null };
-    const node = namehash(`${sublabel}.${parentLabel}.${this._tld}`);
+    const { subnode: node } = computeSubnodeIds(sublabel, parentLabel, this._tld);
     try {
       const owner = await withTimeout(this.contractCallNullable(this._contracts.DOTNS_REGISTRY, DOTNS_REGISTRY_ABI, "owner", [node]), 3e4, "owner");
       if (!owner || owner === zeroAddress) return { owned: false, owner: null };
@@ -2003,8 +2102,7 @@ var DotNS = class _DotNS {
       this.ensureConnected();
       console.log(`
    Registering subdomain ${sublabel}.${parentLabel}.${this._tld}...`);
-      const parentNode = namehash(`${parentLabel}.${this._tld}`);
-      const subnodeNode = namehash(`${sublabel}.${parentLabel}.${this._tld}`);
+      const { parentNode, subnode: subnodeNode } = computeSubnodeIds(sublabel, parentLabel, this._tld);
       const subnodeRecord = { parentNode, subLabel: sublabel, parentLabel, owner: this.evmAddress };
       const MAX_VERIFY_CHAIN_SECONDS = VERIFY_EFFECT_CHAIN_SECONDS;
       const POLL_INTERVAL_MS = 2e3;
@@ -3198,13 +3296,18 @@ var DotNS = class _DotNS {
    *   in-process).
    * After the gate resolves, fires onPhoneSigningRequired (the "check your
    * phone" notification) so the user knows the request is now being sent.
+   *
+   * `reason` (#194): passed straight through to confirmPhoneReady's context so
+   * the consumer can distinguish a watcher-silence re-arm ("silence") from the
+   * pre-existing verifyEffect-false-negative re-sign case (undefined/"resign",
+   * which keeps rendering off `attempt` as before).
    */
-  async _awaitPhoneReady(label) {
+  async _awaitPhoneReady(label, reason) {
     if (!this._isPhoneSigner) return;
     const attempt = (this._phoneSignatureAttempts.get(label) ?? 0) + 1;
     this._phoneSignatureAttempts.set(label, attempt);
     if (this._confirmPhoneReady) {
-      await this._confirmPhoneReady({ label, attempt, total: this._phoneSignatureTotal });
+      await this._confirmPhoneReady({ label, attempt, total: this._phoneSignatureTotal, approvalBudgetMs: PHONE_APPROVAL_MS, reason });
     }
     this._onPhoneSigningRequired?.(label);
   }
@@ -3252,6 +3355,7 @@ export {
   TX_CHAIN_TIME_BUDGET_MS,
   TX_WALL_CLOCK_CEILING_MS,
   TX_NO_PROGRESS_MS,
+  PHONE_APPROVAL_MS,
   DOTNS_BEST_BLOCK_GRACE_MS,
   WS_HEARTBEAT_TIMEOUT_MS,
   DOTNS_TX_MAX_ATTEMPTS,
@@ -3261,7 +3365,9 @@ export {
   NONCE_ADVANCE_VERIFY_RETRY_INTERVAL_MS,
   verifyEffectWithGrace,
   classifyTxRetryDecision,
+  PhoneSilenceNonRetryableError,
   classifyWatcherSilentFastFail,
+  PHONE_SILENCE_MAX_REARMS,
   dotnsRetryBackoffMs,
   withRetry,
   shouldRetryTxAttempt,
@@ -3289,6 +3395,8 @@ export {
   __formatContractDryRunFailureForTest,
   convertWeiToNative,
   computeDomainTokenId,
+  computeSubnodeIds,
+  assertNotZeroRecipient,
   countTrailingDigits,
   stripTrailingDigits,
   sanitizeDomainLabel,

package/dist/{chunk-2M65ETRD.js → chunk-VSLW6WXT.js}

@@ -1,6 +1,6 @@
 import {
   VERSION
-} from "./chunk-X7QKYH3U.js";
+} from "./chunk-BBPA3Q5K.js";
 
 // src/version-check.ts
 import { execSync, execFileSync } from "child_process";

package/dist/{chunk-SNIF5BSD.js → chunk-VTOT4GBT.js}

@@ -9,19 +9,19 @@ import {
   setBulletinEndpoints,
   storeDirectory,
   storeFile
-} from "./chunk-JZNSDAZM.js";
+} from "./chunk-OORLC7SM.js";
 import {
   DEFAULT_TLD,
   DotNS,
   TX_KIND_SKIPPED,
   stripTldSuffix
-} from "./chunk-ZPQO4PY2.js";
+} from "./chunk-SY2KD7SN.js";
 import {
   DEFAULT_ENV_ID,
   getPopSelfServeConfig,
   loadEnvironments,
   resolveEndpoints
-} from "./chunk-CL7GQYYK.js";
+} from "./chunk-7CHUI4JX.js";
 import {
   NonRetryableError
 } from "./chunk-ZOC4GITL.js";
@@ -29,7 +29,7 @@ import {
   setDeployAttribute,
   withManifestSpan,
   withSpan
-} from "./chunk-X7QKYH3U.js";
+} from "./chunk-BBPA3Q5K.js";
 
 // src/manifest/publish.ts
 import * as fs from "fs/promises";

package/dist/{chunk-5HYWJO57.js → chunk-XFXTMHZX.js}

@@ -6,7 +6,7 @@ import * as path from "path";
 // package.json
 var package_default = {
   name: "bulletin-deploy",
-  version: "0.15.2",
+  version: "0.16.0-rc.2",
   private: false,
   repository: {
     type: "git",
@@ -56,7 +56,7 @@ var package_default = {
     "refresh-environments": "node scripts/refresh-environments.mjs",
     postinstall: "patch-package || true",
     prepare: "npm run build",
-    test: "npm run build && node --test test/test.js test/cli-help.test.js test/helpers/e2e-helpers.test.js test/environments.test.js test/refresh-environments.test.js test/chunk-sharing-report.test.js test/dotns-deployments-parser.test.js test/dotns-token-id.test.js test/product-manifest.test.js test/cache-savings-totals.test.js test/error-pattern-signature.test.js test/exit-codes.test.js test/probe-env-health.test.js test/e2e-chain-calls.test.js test/auth-config.test.js test/whoami.test.js test/login.test.js test/logout.test.js test/auth-resolve.test.js test/storage-signer.test.js test/spinner.test.js test/sss-allowance.test.js test/sss-allowance-cache.test.js test/dotns-transfer.test.js test/deploy-actors.test.js test/transfer-command.test.js test/dotns-register-fee.test.js test/deploy-label-ordering.test.js test/benign-teardown.test.js test/verify-baked-dsn.test.js test/test-release-retry-wrapper.js && npm run test:vendor",
+    test: "npm run build && node --test test/test.js test/cli-help.test.js test/helpers/e2e-helpers.test.js test/environments.test.js test/refresh-environments.test.js test/chunk-sharing-report.test.js test/dotns-deployments-parser.test.js test/dotns-token-id.test.js test/dotns-subnode-id.test.js test/product-manifest.test.js test/cache-savings-totals.test.js test/error-pattern-signature.test.js test/exit-codes.test.js test/probe-env-health.test.js test/e2e-chain-calls.test.js test/auth-config.test.js test/whoami.test.js test/login.test.js test/logout.test.js test/auth-resolve.test.js test/storage-signer.test.js test/spinner.test.js test/sss-allowance.test.js test/sss-allowance-cache.test.js test/dotns-transfer.test.js test/deploy-actors.test.js test/transfer-command.test.js test/dotns-register-fee.test.js test/deploy-label-ordering.test.js test/benign-teardown.test.js test/verify-baked-dsn.test.js test/test-release-retry-wrapper.js && npm run test:vendor",
     "test:e2e": "npm run build && node --test test/e2e.test.js",
     "test:e2e:smoke": "bash scripts/e2e-pass.sh smoke",
     "test:e2e:pr": "bash scripts/e2e-pass.sh pr",