bulletin-deploy 0.18.0 → 0.18.1-rc.1

package/bin/bulletin-deploy

@@ -585,8 +585,11 @@ try {
         console.error(`Manifest publish failed: ${err?.message ?? err}`);
         process.exit(err instanceof NonRetryableError ? EXIT_CODE_NO_RETRY : 1);
       }
+    } else if (!loaded && !flags.noManifest) {
+      // Only the walk-up can come back empty: an explicit --config that is
+      // missing throws out of tryLoadProductConfig rather than returning null.
+      console.log(`No product config found from ${buildDirAbs} upward; content deployed, no manifest published.`);
     }
-    // No config (or --no-manifest) → the contenthash-only deploy above is the whole job; nothing else to do.
   }
 
   if (!flags.help && !flags.version) {

package/dist/auth-config.js

@@ -9,12 +9,12 @@ import {
   getPeopleChainEndpoints,
   hasPersistedSession,
   resolveBulletinEndpoints
-} from "./chunk-6WLVGBLQ.js";
+} from "./chunk-Q7CHACT6.js";
 import "./chunk-TSPERKUS.js";
 import "./chunk-HDGD5FYX.js";
 import "./chunk-ZOC4GITL.js";
-import "./chunk-3CES4RZG.js";
-import "./chunk-3TDAKT7Y.js";
+import "./chunk-HIODF4QF.js";
+import "./chunk-SSV2KD3B.js";
 export {
   DOT_DAPP_ID,
   DOT_DERIVATION_INDEX,

package/dist/bug-report.js

@@ -10,10 +10,10 @@ import {
   offerBugReport,
   scrubSecrets,
   setDeployContext
-} from "./chunk-UY2DR5V4.js";
-import "./chunk-F4OW5UVA.js";
-import "./chunk-3CES4RZG.js";
-import "./chunk-3TDAKT7Y.js";
+} from "./chunk-3BDYD4BG.js";
+import "./chunk-UPQ2JGIO.js";
+import "./chunk-HIODF4QF.js";
+import "./chunk-SSV2KD3B.js";
 export {
   buildCliFlagsSummary,
   buildLabels,

package/dist/chain-health.js

@@ -3,9 +3,9 @@ import {
   DEFAULT_WINDOW_BLOCKS,
   MAX_SPANS_PER_SAMPLER,
   endpointHost
-} from "./chunk-LZ7HCV4C.js";
-import "./chunk-3CES4RZG.js";
-import "./chunk-3TDAKT7Y.js";
+} from "./chunk-6HPDXI7E.js";
+import "./chunk-HIODF4QF.js";
+import "./chunk-SSV2KD3B.js";
 export {
   ChainHealthSampler,
   DEFAULT_WINDOW_BLOCKS,

package/dist/{chunk-A7GZZQ3Q.js → chunk-2WGCBESY.js}

@@ -4,10 +4,10 @@ import {
 } from "./chunk-5FLTDWWP.js";
 import {
   DEFAULT_MNEMONIC
-} from "./chunk-RSAEMNX4.js";
+} from "./chunk-FJTZNSNU.js";
 import {
   DOT_PRODUCT_ID
-} from "./chunk-6WLVGBLQ.js";
+} from "./chunk-Q7CHACT6.js";
 
 // src/deploy-actors.ts
 var DEFAULT_WORKER_SURI = DEFAULT_MNEMONIC;

package/dist/{chunk-UY2DR5V4.js → chunk-3BDYD4BG.js}

@@ -2,15 +2,15 @@ import {
   classifyErrorArea,
   isInteractive,
   promptYesNo
-} from "./chunk-F4OW5UVA.js";
+} from "./chunk-UPQ2JGIO.js";
 import {
   VERSION,
   getCurrentSentryTraceId,
   resolveIssueRepoSlug
-} from "./chunk-3CES4RZG.js";
+} from "./chunk-HIODF4QF.js";
 import {
   package_default
-} from "./chunk-3TDAKT7Y.js";
+} from "./chunk-SSV2KD3B.js";
 
 // src/bug-report.ts
 import { execSync, execFileSync } from "child_process";

package/dist/{chunk-TIQ3TCK4.js → chunk-5JVTBR5H.js}

@@ -13,13 +13,13 @@ import {
   setBulletinEndpoints,
   storeDirectory,
   storeFile
-} from "./chunk-6LR7OM7F.js";
+} from "./chunk-Q6NVSUCX.js";
 import {
   DEFAULT_TLD,
   DotNS,
   TX_KIND_SKIPPED,
   stripTldSuffix
-} from "./chunk-RSAEMNX4.js";
+} from "./chunk-FJTZNSNU.js";
 import {
   DEFAULT_ENV_ID,
   getPopSelfServeConfig,
@@ -33,7 +33,7 @@ import {
   setDeployAttribute,
   withManifestSpan,
   withSpan
-} from "./chunk-3CES4RZG.js";
+} from "./chunk-HIODF4QF.js";
 
 // src/manifest/publish.ts
 import * as fs2 from "fs/promises";

package/dist/{chunk-WYJX7OFF.js → chunk-64UKPUK4.js}

@@ -1,6 +1,6 @@
 import {
   captureWarning
-} from "./chunk-3CES4RZG.js";
+} from "./chunk-HIODF4QF.js";
 
 // src/chunk-probe.ts
 import { Twox128, Blake2128Concat, decAnyMetadata, unifyMetadata } from "@polkadot-api/substrate-bindings";

package/dist/{chunk-LZ7HCV4C.js → chunk-6HPDXI7E.js}

@@ -1,7 +1,7 @@
 import {
   emitIntervalSpan,
   setDeployAttribute
-} from "./chunk-3CES4RZG.js";
+} from "./chunk-HIODF4QF.js";
 
 // src/chain-health.ts
 var DEFAULT_WINDOW_BLOCKS = 10;

package/dist/{chunk-RSAEMNX4.js → chunk-FJTZNSNU.js}

@@ -13,7 +13,7 @@ import {
 } from "./chunk-ZOC4GITL.js";
 import {
   ChainHealthSampler
-} from "./chunk-LZ7HCV4C.js";
+} from "./chunk-6HPDXI7E.js";
 import {
   captureWarning,
   markCodePath,
@@ -21,7 +21,7 @@ import {
   setDeploySentryTag,
   truncateAddress,
   withSpan
-} from "./chunk-3CES4RZG.js";
+} from "./chunk-HIODF4QF.js";
 import {
   POP_CONTROLLER_PROBE_ABI,
   PROTOCOL_PROBE_LABEL,
@@ -413,6 +413,9 @@ var DOTNS_REGISTRY_ABI = [
   { inputs: [{ name: "node", type: "bytes32" }], name: "owner", outputs: [{ name: "", type: "address" }], stateMutability: "view", type: "function" },
   { inputs: [{ name: "node", type: "bytes32" }], name: "resolver", outputs: [{ name: "", type: "address" }], stateMutability: "view", type: "function" }
 ];
+var DOTNS_REGISTRY_SET_SUBNODE_OWNER_ABI_V07 = [
+  { inputs: [{ name: "record", type: "tuple", components: [{ name: "parentNode", type: "bytes32" }, { name: "subLabel", type: "string" }, { name: "parentLabel", type: "string" }, { name: "owner", type: "address" }, { name: "persist", type: "bool" }] }], name: "setSubnodeOwner", outputs: [{ name: "subnode", type: "bytes32" }], stateMutability: "nonpayable", type: "function" }
+];
 var DOTNS_CONTENT_RESOLVER_ABI = [
   { inputs: [{ name: "node", type: "bytes32" }, { name: "hash", type: "bytes" }], name: "setContenthash", outputs: [], stateMutability: "nonpayable", type: "function" },
   { inputs: [{ name: "node", type: "bytes32" }], name: "contenthash", outputs: [{ name: "", type: "bytes" }], stateMutability: "view", type: "function" }
@@ -482,6 +485,9 @@ function dotnsContractName(address, contracts = CONTRACTS) {
 function stringifyDebugValue(value) {
   return JSON.stringify(value, (_key, nested) => typeof nested === "bigint" ? nested.toString() : nested);
 }
+function isBareRevertResult(revertData, revertFlags) {
+  return (revertData === void 0 || revertData.trim() === "0x") && revertFlags === 1n;
+}
 function dotnsTxDebugEnabled() {
   return process.env.BULLETIN_DEPLOY_DOTNS_DEBUG === "1" || process.env.DOTNS_DEBUG === "1";
 }
@@ -510,8 +516,7 @@ function formatContractDryRunFailure(gasEstimate, context) {
     lines.push(`  calldata: ${context.encodedData}`);
     if (context.args) lines.push(`  args: ${stringifyDebugValue(context.args)}`);
   }
-  const revertData = gasEstimate.revertData;
-  const isBareRevert = (revertData === void 0 || revertData.trim() === "0x") && gasEstimate.revertFlags === 1n;
+  const isBareRevert = isBareRevertResult(gasEstimate.revertData, gasEstimate.revertFlags);
   if (isBareRevert && BARE_REVERT_DIAGNOSTIC_FUNCTIONS.has(functionName)) {
     if (functionName === "register") {
       lines.push(
@@ -1322,6 +1327,22 @@ var DotNS = class _DotNS {
   // this into a throw-if-unset without re-checking both of those.
   _protocolVersion = DEFAULT_DOTNS_PROFILE;
   _adapter = getAdapter(DEFAULT_DOTNS_PROFILE);
+  // #1435: which setSubnodeOwner tuple shape this connection's chain accepts
+  // — "legacy" (4-field, pre-v0.7) or "v07" (5-field + persist). `null` means
+  // "not yet probed"; resolveSubnodeOwnerShape resolves it lazily on the
+  // FIRST subname write per connection (register or transfer, whichever runs
+  // first) and caches the verdict here for the rest of that connection's
+  // life. Defaults to "legacy" (NOT null) for the exact same reason
+  // _protocolVersion defaults to DEFAULT_DOTNS_PROFILE above: every existing
+  // test/library caller that constructs a DotNS instance and stubs
+  // contractTransaction/submitBatchedContractCalls directly WITHOUT ever
+  // calling connect() must keep today's exact pre-#1435 4-field behaviour,
+  // with no probe attempted at all (there is no clientWrapper to probe
+  // against in that case). connect() resets this to null so a real
+  // connection always re-probes on its first subname write rather than
+  // trusting this default or a previous connection's stale verdict — see
+  // the reset next to detectProtocolVersion() below.
+  _subnodeOwnerShape = "legacy";
   _onPhoneSigningRequired = void 0;
   _confirmPhoneReady = void 0;
   /** Total phone-signature count for this DotNS session (drives the `total` field passed to confirmPhoneReady). */
@@ -1359,6 +1380,10 @@ var DotNS = class _DotNS {
     this._protocolVersion = profile;
     this._adapter = getAdapter(profile);
   }
+  /** #1435 test-only: pin the setSubnodeOwner shape cache directly ("legacy", "v07", or null to force resolveSubnodeOwnerShape to re-probe), bypassing the live dry-run probe — for unit tests that stub the probe or exercise the fallback/caching logic itself. */
+  __setSubnodeOwnerShapeForTest(shape) {
+    this._subnodeOwnerShape = shape;
+  }
   constructor() {
     this.client = null;
     this.clientWrapper = null;
@@ -1540,6 +1565,7 @@ var DotNS = class _DotNS {
       this.connected = true;
       await this.resolveAndVerifyTld(options.tld);
       await this.detectProtocolVersion();
+      this._subnodeOwnerShape = null;
       if (options.dotnsProtocol && options.dotnsProtocol !== this._protocolVersion) {
         this.connected = false;
         throw new Error(
@@ -1932,8 +1958,13 @@ var DotNS = class _DotNS {
    * v0.5.8-rc1 (pricingVersion answers on both), and classifyProtocolVersion
    * already only consults it when pricingVersionOk is true, so gating it
    * behind that result resolving first would just add a serialized
-   * round-trip for no benefit — worse once v0.6.0 is live everywhere (#1410),
-   * since that "no benefit" case becomes the common one. Resolves to `null`
+   * round-trip for no benefit — worse as v0.6.0 spreads (#1410), since that
+   * "no benefit" case becomes the common one. The discarded-probe cost does
+   * NOT self-liquidate the moment v0.6.0 ships: it persists on every
+   * environment still running an older generation (dotns-protocol.ts's
+   * profile comment owns per-generation status — this one does not restate
+   * it). Parallel regardless: one discarded read beats a serialized
+   * round-trip on every connect. Resolves to `null`
    * immediately (no RPC at all) when DOTNS_POP_CONTROLLER has no configured
    * address.
    */
@@ -2086,6 +2117,92 @@ var DotNS = class _DotNS {
     }
     throw new Error("contractTransaction: unreachable \u2014 phone-silence re-arm loop exited without resolving");
   }
+  /**
+   * #1435: resolve — once per connection — which `setSubnodeOwner` tuple
+   * shape this chain's DOTNS_REGISTRY accepts, and cache the verdict on
+   * `_subnodeOwnerShape` for the rest of this connection's life. Called by
+   * buildSetSubnodeOwnerCall on the first subname write (register or
+   * transfer, whichever runs first); every subsequent subname write in the
+   * same connection reuses the cached shape with no further chain I/O.
+   *
+   * There is no read-only capability probe for this (see
+   * DOTNS_REGISTRY_SET_SUBNODE_OWNER_ABI_V07's comment — v0.7 adds no new
+   * function/contract to probe), so this probes the WRITE itself: dry-run
+   * the v0.7 (5-field, `persist: false`) encoding against `sampleRecord`
+   * first (a dry run commits no state, so this never spends a fee or
+   * mutates the registry). Three outcomes:
+   *
+   *   - The dry run succeeds → this chain is on v0.7+; cache "v07".
+   *   - The dry run bare-reverts (empty `0x` data, flags=1 — i.e. no
+   *     function matches this selector at all) → this chain predates v0.7;
+   *     cache "legacy" and fall back to the 4-field encoding.
+   *   - The dry run reverts WITH data → the 5-field function EXISTS and
+   *     rejected the call for a real reason (bad parent, not authorised,
+   *     etc.) — that is a genuine failure of the caller's actual write, not
+   *     a shape mismatch, so it propagates immediately rather than being
+   *     swallowed into a fallback attempt. Conflating the two here would
+   *     turn a real authorization failure into a confusing shape-probe
+   *     loop, retrying the legacy shape (which will ALSO fail, just with a
+   *     less informative bare-revert-style error) instead of surfacing the
+   *     real cause.
+   *
+   * `sampleRecord` is the actual record the caller is about to write (not a
+   * throwaway probe payload) — probing with real args means a v0.7 chain
+   * that genuinely rejects this specific write (e.g. the signer doesn't own
+   * the parent) reports that real reason here, on the first (probe) dry
+   * run, rather than surfacing a second time once the real submission's own
+   * internal dry run repeats the same call.
+   */
+  async resolveSubnodeOwnerShape(sampleRecord) {
+    if (this._subnodeOwnerShape !== null) return this._subnodeOwnerShape;
+    this.ensureConnected();
+    if (!this.clientWrapper) throw new Error("resolveSubnodeOwnerShape: polkadot-api client not available");
+    const contractAddress = this._contracts.DOTNS_REGISTRY;
+    const v07Abi = DOTNS_REGISTRY_SET_SUBNODE_OWNER_ABI_V07;
+    const v07Args = [{ ...sampleRecord, persist: false }];
+    const encodedCallData = encodeFunctionData({ abi: v07Abi, functionName: "setSubnodeOwner", args: v07Args });
+    const callResult = await this.clientWrapper.performDryRunCall(this.substrateAddress, contractAddress, 0n, encodedCallData);
+    if (callResult.result.isOk) {
+      this._subnodeOwnerShape = "v07";
+      return "v07";
+    }
+    const errorData = callResult.result.value;
+    const revertData = errorData?.data;
+    const revertFlags = errorData?.flags;
+    if (!isBareRevertResult(revertData, revertFlags)) {
+      throw new Error(formatContractDryRunFailure({
+        revertData,
+        revertFlags,
+        gasConsumed: callResult.gasConsumed,
+        gasRequired: callResult.gasRequired,
+        storageDeposit: callResult.storageDeposit?.value
+      }, {
+        contractAddress,
+        functionName: "setSubnodeOwner",
+        signerSubstrateAddress: this.substrateAddress,
+        signerEvmAddress: this.evmAddress ?? void 0,
+        value: 0n,
+        encodedData: encodedCallData,
+        args: v07Args,
+        contracts: this._contracts
+      }));
+    }
+    this._subnodeOwnerShape = "legacy";
+    return "legacy";
+  }
+  /**
+   * Build the `{ abi, args }` pair a setSubnodeOwner call site should submit,
+   * after resolving (and caching) this connection's accepted tuple shape —
+   * see resolveSubnodeOwnerShape. `record` carries the 4 fields common to
+   * both shapes; the v0.7 shape appends `persist: false` (per #1435, this
+   * only gates the LabelStore write, which is restricted to protocol store
+   * writers — the ownership/resolver record itself is written either way).
+   */
+  async buildSetSubnodeOwnerCall(record) {
+    const shape = await this.resolveSubnodeOwnerShape(record);
+    if (shape === "v07") return { abi: DOTNS_REGISTRY_SET_SUBNODE_OWNER_ABI_V07, args: [{ ...record, persist: false }] };
+    return { abi: DOTNS_REGISTRY_ABI, args: [record] };
+  }
   async checkOwnership(label, ownerAddress = null) {
     this.ensureConnected();
     const checkAddress = (ownerAddress || this.evmAddress).toLowerCase();
@@ -2190,12 +2307,13 @@ var DotNS = class _DotNS {
       return { status: "skipped-already-owned" };
     }
     const subnodeRecord = { parentNode, subLabel: sublabel, parentLabel, owner: toH160 };
+    const { abi: setSubnodeOwnerAbi, args: setSubnodeOwnerArgs } = await this.buildSetSubnodeOwnerCall(subnodeRecord);
     const txRes = await this.contractTransaction(
       this._contracts.DOTNS_REGISTRY,
       0n,
-      DOTNS_REGISTRY_ABI,
+      setSubnodeOwnerAbi,
       "setSubnodeOwner",
-      [subnodeRecord],
+      setSubnodeOwnerArgs,
       statusCallback
     );
     const after = await withTimeout(
@@ -2274,9 +2392,10 @@ var DotNS = class _DotNS {
           await new Promise((r) => setTimeout(r, POLL_INTERVAL_MS));
         }
       };
+      const { abi: setSubnodeOwnerAbi, args: setSubnodeOwnerArgs } = await this.buildSetSubnodeOwnerCall(subnodeRecord);
       const txResolution = await this.submitBatchedContractCalls(
         [
-          { contractAddress: this._contracts.DOTNS_REGISTRY, abi: DOTNS_REGISTRY_ABI, functionName: "setSubnodeOwner", args: [subnodeRecord] },
+          { contractAddress: this._contracts.DOTNS_REGISTRY, abi: setSubnodeOwnerAbi, functionName: "setSubnodeOwner", args: setSubnodeOwnerArgs },
           { contractAddress: this._contracts.DOTNS_REGISTRY, abi: DOTNS_REGISTRY_ABI, functionName: "setResolver", args: [subnodeNode, this._contracts.DOTNS_CONTENT_RESOLVER] }
         ],
         (s) => console.log(`      ${s}`),

package/dist/{chunk-3CES4RZG.js → chunk-HIODF4QF.js}

@@ -1,7 +1,7 @@
 import {
   package_default,
   writeRunState
-} from "./chunk-3TDAKT7Y.js";
+} from "./chunk-SSV2KD3B.js";
 
 // src/memory-report.ts
 import * as fs2 from "fs";

package/dist/{chunk-6LR7OM7F.js → chunk-Q6NVSUCX.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-M5AKL3FL.js";
 import {
   preflightSssAllowance
-} from "./chunk-6BIAW73W.js";
+} from "./chunk-RULOELNF.js";
 import {
   statementSigningAccount
 } from "./chunk-GRPLHUYC.js";
@@ -29,18 +29,18 @@ import {
 } from "./chunk-WPC2PUCV.js";
 import {
   setDeployContext
-} from "./chunk-UY2DR5V4.js";
+} from "./chunk-3BDYD4BG.js";
 import {
   getBestBlockNumber,
   probeChunks,
   probeFinalityGap
-} from "./chunk-WYJX7OFF.js";
+} from "./chunk-64UKPUK4.js";
 import {
   packSection
 } from "./chunk-C2TS5MER.js";
 import {
   resolveStorageSigner
-} from "./chunk-A7GZZQ3Q.js";
+} from "./chunk-2WGCBESY.js";
 import {
   createSlotAccountSigner,
   requestResourceAllocation
@@ -55,7 +55,7 @@ import {
   parseDomainName,
   popStatusName,
   verifyNonceAdvanced
-} from "./chunk-RSAEMNX4.js";
+} from "./chunk-FJTZNSNU.js";
 import {
   derivePoolAccounts,
   detectTestnet,
@@ -69,7 +69,7 @@ import {
   STALE_SESSION_MESSAGE,
   getPeopleChainEndpoints,
   hasPersistedSession
-} from "./chunk-6WLVGBLQ.js";
+} from "./chunk-Q7CHACT6.js";
 import {
   CLI_NAME
 } from "./chunk-TSPERKUS.js";
@@ -84,7 +84,7 @@ import {
 } from "./chunk-ZOC4GITL.js";
 import {
   ChainHealthSampler
-} from "./chunk-LZ7HCV4C.js";
+} from "./chunk-6HPDXI7E.js";
 import {
   VERSION,
   captureWarning,
@@ -98,7 +98,7 @@ import {
   truncateAddress,
   withDeploySpan,
   withSpan
-} from "./chunk-3CES4RZG.js";
+} from "./chunk-HIODF4QF.js";
 
 // src/merkle.ts
 import * as fs2 from "fs";

package/dist/{chunk-6WLVGBLQ.js → chunk-Q7CHACT6.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-HDGD5FYX.js";
 import {
   VERSION
-} from "./chunk-3CES4RZG.js";
+} from "./chunk-HIODF4QF.js";
 
 // src/auth-config.ts
 import { existsSync, readdirSync } from "fs";

package/dist/{chunk-6BIAW73W.js → chunk-RULOELNF.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-GRPLHUYC.js";
 import {
   DOT_DAPP_ID
-} from "./chunk-6WLVGBLQ.js";
+} from "./chunk-Q7CHACT6.js";
 
 // src/sss-allowance-cache.ts
 import { mkdir, readFile, writeFile, unlink } from "fs/promises";

package/dist/{chunk-3TDAKT7Y.js → chunk-SSV2KD3B.js}

@@ -6,7 +6,7 @@ import * as path from "path";
 // package.json
 var package_default = {
   name: "bulletin-deploy",
-  version: "0.18.0",
+  version: "0.18.1-rc.1",
   private: false,
   repository: {
     type: "git",
@@ -56,7 +56,7 @@ var package_default = {
     "refresh-environments": "node scripts/refresh-environments.mjs",
     postinstall: "patch-package || true",
     prepare: "npm run build",
-    test: "npm run build && node --test test/test.js test/cli-help.test.js test/helpers/e2e-helpers.test.js test/environments.test.js test/refresh-environments.test.js test/chunk-sharing-report.test.js test/dotns-deployments-parser.test.js test/dotns-token-id.test.js test/dotns-subnode-id.test.js test/dotns-protocol.test.js test/product-manifest.test.js test/cache-savings-totals.test.js test/error-pattern-signature.test.js test/exit-codes.test.js test/probe-env-health.test.js test/e2e-chain-calls.test.js test/auth-config.test.js test/whoami.test.js test/login.test.js test/logout.test.js test/auth-resolve.test.js test/storage-signer.test.js test/spinner.test.js test/sss-allowance.test.js test/sss-allowance-cache.test.js test/dotns-transfer.test.js test/deploy-actors.test.js test/transfer-command.test.js test/dotns-register-fee.test.js test/deploy-label-ordering.test.js test/benign-teardown.test.js test/verify-baked-dsn.test.js test/product-account.test.js test/post-release-monitor-skill.test.js test/test-release-retry-wrapper.js test/reprove-alias-tool.test.js test/bootstrap-env.test.js test/check-chain-identity.test.js && npm run test:vendor",
+    test: "npm run build && node --test test/test.js test/cli-help.test.js test/helpers/e2e-helpers.test.js test/helpers/e2e-exit-guard.test.js test/environments.test.js test/refresh-environments.test.js test/chunk-sharing-report.test.js test/dotns-deployments-parser.test.js test/dotns-token-id.test.js test/dotns-subnode-id.test.js test/dotns-protocol.test.js test/product-manifest.test.js test/cache-savings-totals.test.js test/error-pattern-signature.test.js test/exit-codes.test.js test/probe-env-health.test.js test/e2e-chain-calls.test.js test/auth-config.test.js test/whoami.test.js test/login.test.js test/logout.test.js test/auth-resolve.test.js test/storage-signer.test.js test/spinner.test.js test/sss-allowance.test.js test/sss-allowance-cache.test.js test/dotns-transfer.test.js test/deploy-actors.test.js test/transfer-command.test.js test/dotns-register-fee.test.js test/deploy-label-ordering.test.js test/benign-teardown.test.js test/verify-baked-dsn.test.js test/product-account.test.js test/post-release-monitor-skill.test.js test/test-release-retry-wrapper.js test/reprove-alias-tool.test.js test/bootstrap-env.test.js test/check-chain-identity.test.js && npm run test:vendor",
     "test:e2e": "npm run build && node --test test/e2e.test.js",
     "test:e2e:smoke": "bash scripts/e2e-pass.sh smoke",
     "test:e2e:pr": "bash scripts/e2e-pass.sh pr",

package/dist/{chunk-F4OW5UVA.js → chunk-UPQ2JGIO.js}

@@ -1,6 +1,6 @@
 import {
   VERSION
-} from "./chunk-3CES4RZG.js";
+} from "./chunk-HIODF4QF.js";
 
 // src/version-check.ts
 import { execSync, execFileSync } from "child_process";

package/dist/chunk-probe.js

@@ -8,9 +8,9 @@ import {
   getBestBlockNumber,
   probeChunks,
   probeFinalityGap
-} from "./chunk-WYJX7OFF.js";
-import "./chunk-3CES4RZG.js";
-import "./chunk-3TDAKT7Y.js";
+} from "./chunk-64UKPUK4.js";
+import "./chunk-HIODF4QF.js";
+import "./chunk-SSV2KD3B.js";
 export {
   ChainProbeCrossValidationError,
   ChainProbeMetadataError,

package/dist/commands/login.js

@@ -4,11 +4,11 @@ import {
 import {
   isBenignTeardownError,
   waitForBulletinAuthorization
-} from "../chunk-6LR7OM7F.js";
+} from "../chunk-Q6NVSUCX.js";
 import "../chunk-M5AKL3FL.js";
 import {
   preflightSssAllowance
-} from "../chunk-6BIAW73W.js";
+} from "../chunk-RULOELNF.js";
 import {
   statementSigningAccount
 } from "../chunk-GRPLHUYC.js";
@@ -16,11 +16,11 @@ import "../chunk-IW3X2MJF.js";
 import "../chunk-LPTKBQII.js";
 import "../chunk-3MAIF2SF.js";
 import "../chunk-WPC2PUCV.js";
-import "../chunk-UY2DR5V4.js";
-import "../chunk-F4OW5UVA.js";
-import "../chunk-WYJX7OFF.js";
+import "../chunk-3BDYD4BG.js";
+import "../chunk-UPQ2JGIO.js";
+import "../chunk-64UKPUK4.js";
 import "../chunk-C2TS5MER.js";
-import "../chunk-A7GZZQ3Q.js";
+import "../chunk-2WGCBESY.js";
 import "../chunk-JQKKMUCT.js";
 import {
   BULLETIN_RESOURCE,
@@ -32,7 +32,7 @@ import {
 import {
   renderLoginStatus
 } from "../chunk-RIRDBSBG.js";
-import "../chunk-RSAEMNX4.js";
+import "../chunk-FJTZNSNU.js";
 import "../chunk-SI2ZUOYD.js";
 import "../chunk-AYAVRPAP.js";
 import {
@@ -40,7 +40,7 @@ import {
   getAuthClient,
   getPeopleChainEndpoints,
   resolveBulletinEndpoints
-} from "../chunk-6WLVGBLQ.js";
+} from "../chunk-Q7CHACT6.js";
 import {
   CLI_NAME
 } from "../chunk-TSPERKUS.js";
@@ -48,9 +48,9 @@ import {
   loadEnvironments
 } from "../chunk-HDGD5FYX.js";
 import "../chunk-ZOC4GITL.js";
-import "../chunk-LZ7HCV4C.js";
-import "../chunk-3CES4RZG.js";
-import "../chunk-3TDAKT7Y.js";
+import "../chunk-6HPDXI7E.js";
+import "../chunk-HIODF4QF.js";
+import "../chunk-SSV2KD3B.js";
 import "../chunk-7I3MTGOR.js";
 
 // src/commands/login.ts

package/dist/commands/logout.js

@@ -1,6 +1,6 @@
 import {
   clearSssAllowanceCache
-} from "../chunk-6BIAW73W.js";
+} from "../chunk-RULOELNF.js";
 import "../chunk-GRPLHUYC.js";
 import "../chunk-JQKKMUCT.js";
 import "../chunk-5FLTDWWP.js";
@@ -9,12 +9,12 @@ import {
 } from "../chunk-RIRDBSBG.js";
 import {
   getAuthClient
-} from "../chunk-6WLVGBLQ.js";
+} from "../chunk-Q7CHACT6.js";
 import "../chunk-TSPERKUS.js";
 import "../chunk-HDGD5FYX.js";
 import "../chunk-ZOC4GITL.js";
-import "../chunk-3CES4RZG.js";
-import "../chunk-3TDAKT7Y.js";
+import "../chunk-HIODF4QF.js";
+import "../chunk-SSV2KD3B.js";
 
 // src/commands/logout.ts
 function formatLogout(status) {

package/dist/commands/transfer.js

@@ -3,7 +3,7 @@ import {
   DEFAULT_TLD,
   DotNS,
   parseDomainName
-} from "../chunk-RSAEMNX4.js";
+} from "../chunk-FJTZNSNU.js";
 import "../chunk-SI2ZUOYD.js";
 import "../chunk-AYAVRPAP.js";
 import {
@@ -15,9 +15,9 @@ import {
   resolveEndpoints
 } from "../chunk-HDGD5FYX.js";
 import "../chunk-ZOC4GITL.js";
-import "../chunk-LZ7HCV4C.js";
-import "../chunk-3CES4RZG.js";
-import "../chunk-3TDAKT7Y.js";
+import "../chunk-6HPDXI7E.js";
+import "../chunk-HIODF4QF.js";
+import "../chunk-SSV2KD3B.js";
 import "../chunk-7I3MTGOR.js";
 
 // src/commands/transfer.ts

package/dist/commands/whoami.js

@@ -2,14 +2,14 @@ import {
   STALE_SESSION_MESSAGE,
   getAuthClient,
   hasPersistedSession
-} from "../chunk-6WLVGBLQ.js";
+} from "../chunk-Q7CHACT6.js";
 import {
   CLI_NAME
 } from "../chunk-TSPERKUS.js";
 import "../chunk-HDGD5FYX.js";
 import "../chunk-ZOC4GITL.js";
-import "../chunk-3CES4RZG.js";
-import "../chunk-3TDAKT7Y.js";
+import "../chunk-HIODF4QF.js";
+import "../chunk-SSV2KD3B.js";
 
 // src/commands/whoami.ts
 function formatWhoami(addresses) {

package/dist/deploy-actors.js

@@ -2,20 +2,20 @@ import {
   MainnetDefaultWorkerError,
   resolveDeployActors,
   resolveStorageSigner
-} from "./chunk-A7GZZQ3Q.js";
+} from "./chunk-2WGCBESY.js";
 import "./chunk-JQKKMUCT.js";
 import "./chunk-5FLTDWWP.js";
 import "./chunk-RIRDBSBG.js";
-import "./chunk-RSAEMNX4.js";
+import "./chunk-FJTZNSNU.js";
 import "./chunk-SI2ZUOYD.js";
 import "./chunk-AYAVRPAP.js";
-import "./chunk-6WLVGBLQ.js";
+import "./chunk-Q7CHACT6.js";
 import "./chunk-TSPERKUS.js";
 import "./chunk-HDGD5FYX.js";
 import "./chunk-ZOC4GITL.js";
-import "./chunk-LZ7HCV4C.js";
-import "./chunk-3CES4RZG.js";
-import "./chunk-3TDAKT7Y.js";
+import "./chunk-6HPDXI7E.js";
+import "./chunk-HIODF4QF.js";
+import "./chunk-SSV2KD3B.js";
 import "./chunk-7I3MTGOR.js";
 export {
   MainnetDefaultWorkerError,

package/dist/deploy.js

@@ -64,35 +64,35 @@ import {
   storeDirectory,
   storeDirectoryV2,
   storeFile
-} from "./chunk-6LR7OM7F.js";
+} from "./chunk-Q6NVSUCX.js";
 import "./chunk-M5AKL3FL.js";
-import "./chunk-6BIAW73W.js";
+import "./chunk-RULOELNF.js";
 import "./chunk-GRPLHUYC.js";
 import "./chunk-IW3X2MJF.js";
 import "./chunk-LPTKBQII.js";
 import "./chunk-3MAIF2SF.js";
 import "./chunk-WPC2PUCV.js";
-import "./chunk-UY2DR5V4.js";
-import "./chunk-F4OW5UVA.js";
-import "./chunk-WYJX7OFF.js";
+import "./chunk-3BDYD4BG.js";
+import "./chunk-UPQ2JGIO.js";
+import "./chunk-64UKPUK4.js";
 import "./chunk-C2TS5MER.js";
-import "./chunk-A7GZZQ3Q.js";
+import "./chunk-2WGCBESY.js";
 import "./chunk-JQKKMUCT.js";
 import "./chunk-5FLTDWWP.js";
 import "./chunk-RIRDBSBG.js";
-import "./chunk-RSAEMNX4.js";
+import "./chunk-FJTZNSNU.js";
 import "./chunk-SI2ZUOYD.js";
 import "./chunk-AYAVRPAP.js";
-import "./chunk-6WLVGBLQ.js";
+import "./chunk-Q7CHACT6.js";
 import "./chunk-TSPERKUS.js";
 import "./chunk-HDGD5FYX.js";
 import {
   EXIT_CODE_NO_RETRY,
   NonRetryableError
 } from "./chunk-ZOC4GITL.js";
-import "./chunk-LZ7HCV4C.js";
-import "./chunk-3CES4RZG.js";
-import "./chunk-3TDAKT7Y.js";
+import "./chunk-6HPDXI7E.js";
+import "./chunk-HIODF4QF.js";
+import "./chunk-SSV2KD3B.js";
 import "./chunk-7I3MTGOR.js";
 export {
   BLAKE2B_256_MULTIHASH_CODE,

package/dist/dotns.d.ts

@@ -639,6 +639,7 @@ declare class DotNS {
     private _tld;
     private _protocolVersion;
     private _adapter;
+    private _subnodeOwnerShape;
     private _onPhoneSigningRequired;
     private _confirmPhoneReady;
     /** Total phone-signature count for this DotNS session (drives the `total` field passed to confirmPhoneReady). */
@@ -664,6 +665,8 @@ declare class DotNS {
     get protocolVersion(): DotnsAbiProfile;
     /** Test-only: bypass connect()'s live probe and pin the adapter directly, for unit tests that stub chain calls without going through connect(). */
     __setProtocolVersionForTest(profile: DotnsAbiProfile): void;
+    /** #1435 test-only: pin the setSubnodeOwner shape cache directly ("legacy", "v07", or null to force resolveSubnodeOwnerShape to re-probe), bypassing the live dry-run probe — for unit tests that stub the probe or exercise the fallback/caching logic itself. */
+    __setSubnodeOwnerShapeForTest(shape: "legacy" | "v07" | null): void;
     constructor();
     /**
      * The authoritative, post-connect resolved TLD: `options.tld` when the env
@@ -816,8 +819,13 @@ declare class DotNS {
      * v0.5.8-rc1 (pricingVersion answers on both), and classifyProtocolVersion
      * already only consults it when pricingVersionOk is true, so gating it
      * behind that result resolving first would just add a serialized
-     * round-trip for no benefit — worse once v0.6.0 is live everywhere (#1410),
-     * since that "no benefit" case becomes the common one. Resolves to `null`
+     * round-trip for no benefit — worse as v0.6.0 spreads (#1410), since that
+     * "no benefit" case becomes the common one. The discarded-probe cost does
+     * NOT self-liquidate the moment v0.6.0 ships: it persists on every
+     * environment still running an older generation (dotns-protocol.ts's
+     * profile comment owns per-generation status — this one does not restate
+     * it). Parallel regardless: one discarded read beats a serialized
+     * round-trip on every connect. Resolves to `null`
      * immediately (no RPC at all) when DOTNS_POP_CONTROLLER has no configured
      * address.
      */
@@ -837,6 +845,52 @@ declare class DotNS {
         feeAsset?: "pgas";
         phoneLabel?: string;
     }): Promise<TxResolution>;
+    /**
+     * #1435: resolve — once per connection — which `setSubnodeOwner` tuple
+     * shape this chain's DOTNS_REGISTRY accepts, and cache the verdict on
+     * `_subnodeOwnerShape` for the rest of this connection's life. Called by
+     * buildSetSubnodeOwnerCall on the first subname write (register or
+     * transfer, whichever runs first); every subsequent subname write in the
+     * same connection reuses the cached shape with no further chain I/O.
+     *
+     * There is no read-only capability probe for this (see
+     * DOTNS_REGISTRY_SET_SUBNODE_OWNER_ABI_V07's comment — v0.7 adds no new
+     * function/contract to probe), so this probes the WRITE itself: dry-run
+     * the v0.7 (5-field, `persist: false`) encoding against `sampleRecord`
+     * first (a dry run commits no state, so this never spends a fee or
+     * mutates the registry). Three outcomes:
+     *
+     *   - The dry run succeeds → this chain is on v0.7+; cache "v07".
+     *   - The dry run bare-reverts (empty `0x` data, flags=1 — i.e. no
+     *     function matches this selector at all) → this chain predates v0.7;
+     *     cache "legacy" and fall back to the 4-field encoding.
+     *   - The dry run reverts WITH data → the 5-field function EXISTS and
+     *     rejected the call for a real reason (bad parent, not authorised,
+     *     etc.) — that is a genuine failure of the caller's actual write, not
+     *     a shape mismatch, so it propagates immediately rather than being
+     *     swallowed into a fallback attempt. Conflating the two here would
+     *     turn a real authorization failure into a confusing shape-probe
+     *     loop, retrying the legacy shape (which will ALSO fail, just with a
+     *     less informative bare-revert-style error) instead of surfacing the
+     *     real cause.
+     *
+     * `sampleRecord` is the actual record the caller is about to write (not a
+     * throwaway probe payload) — probing with real args means a v0.7 chain
+     * that genuinely rejects this specific write (e.g. the signer doesn't own
+     * the parent) reports that real reason here, on the first (probe) dry
+     * run, rather than surfacing a second time once the real submission's own
+     * internal dry run repeats the same call.
+     */
+    private resolveSubnodeOwnerShape;
+    /**
+     * Build the `{ abi, args }` pair a setSubnodeOwner call site should submit,
+     * after resolving (and caching) this connection's accepted tuple shape —
+     * see resolveSubnodeOwnerShape. `record` carries the 4 fields common to
+     * both shapes; the v0.7 shape appends `persist: false` (per #1435, this
+     * only gates the LabelStore write, which is restricted to protocol store
+     * writers — the ownership/resolver record itself is written either way).
+     */
+    private buildSetSubnodeOwnerCall;
     checkOwnership(label: string, ownerAddress?: string | null): Promise<OwnershipResult>;
     /** Live transfer-fee quote. transferFloor is a pure PopRules view — it
      *  classifies the label and reads both tiers, so it works BEFORE the name is

package/dist/dotns.js

@@ -87,14 +87,14 @@ import {
   verifyNonceAdvanced,
   weiToNative,
   withRetry
-} from "./chunk-RSAEMNX4.js";
+} from "./chunk-FJTZNSNU.js";
 import "./chunk-SI2ZUOYD.js";
 import "./chunk-AYAVRPAP.js";
 import "./chunk-HDGD5FYX.js";
 import "./chunk-ZOC4GITL.js";
-import "./chunk-LZ7HCV4C.js";
-import "./chunk-3CES4RZG.js";
-import "./chunk-3TDAKT7Y.js";
+import "./chunk-6HPDXI7E.js";
+import "./chunk-HIODF4QF.js";
+import "./chunk-SSV2KD3B.js";
 import "./chunk-7I3MTGOR.js";
 export {
   ATTR_TX_RESOLUTION_KIND,

package/dist/index.js

@@ -4,7 +4,7 @@ import {
   publishManifest,
   verifyEmbeddedAppManifests,
   writeEmbeddedAppManifests
-} from "./chunk-TIQ3TCK4.js";
+} from "./chunk-5JVTBR5H.js";
 import {
   DEFAULT_TEXT_RECORD_BUDGET_BYTES,
   PLACEHOLDER_CID,
@@ -29,9 +29,9 @@ import {
   deploy,
   merkleizeJS,
   merkleizeWithStableOrder
-} from "./chunk-6LR7OM7F.js";
+} from "./chunk-Q6NVSUCX.js";
 import "./chunk-M5AKL3FL.js";
-import "./chunk-6BIAW73W.js";
+import "./chunk-RULOELNF.js";
 import "./chunk-GRPLHUYC.js";
 import {
   computeStats,
@@ -54,13 +54,13 @@ import {
   isVolatilePath,
   parseManifest
 } from "./chunk-WPC2PUCV.js";
-import "./chunk-UY2DR5V4.js";
-import "./chunk-F4OW5UVA.js";
+import "./chunk-3BDYD4BG.js";
+import "./chunk-UPQ2JGIO.js";
 import {
   probeChunks
-} from "./chunk-WYJX7OFF.js";
+} from "./chunk-64UKPUK4.js";
 import "./chunk-C2TS5MER.js";
-import "./chunk-A7GZZQ3Q.js";
+import "./chunk-2WGCBESY.js";
 import "./chunk-JQKKMUCT.js";
 import "./chunk-5FLTDWWP.js";
 import "./chunk-RIRDBSBG.js";
@@ -69,7 +69,7 @@ import {
   DotNS,
   parseDomainName,
   sanitizeDomainLabel
-} from "./chunk-RSAEMNX4.js";
+} from "./chunk-FJTZNSNU.js";
 import "./chunk-SI2ZUOYD.js";
 import {
   BULLETIN_BLOCKS_PER_DAY,
@@ -85,7 +85,7 @@ import {
   poolAccountDerivationPath,
   selectAccount
 } from "./chunk-AYAVRPAP.js";
-import "./chunk-6WLVGBLQ.js";
+import "./chunk-Q7CHACT6.js";
 import "./chunk-TSPERKUS.js";
 import {
   DEFAULT_ENV_ID,
@@ -99,8 +99,8 @@ import {
   validateContractAddresses
 } from "./chunk-HDGD5FYX.js";
 import "./chunk-ZOC4GITL.js";
-import "./chunk-LZ7HCV4C.js";
-import "./chunk-3CES4RZG.js";
+import "./chunk-6HPDXI7E.js";
+import "./chunk-HIODF4QF.js";
 import {
   VERSION,
   loadRunState,
@@ -110,7 +110,7 @@ import {
   shouldSkipStaleWarning,
   stateFilePath,
   writeRunState
-} from "./chunk-3TDAKT7Y.js";
+} from "./chunk-SSV2KD3B.js";
 import "./chunk-7I3MTGOR.js";
 export {
   BULLETIN_BLOCKS_PER_DAY,

package/dist/manifest/publish.js

@@ -2,36 +2,36 @@ import {
   domainMatchesEnvTld,
   publishManifest,
   registerOrEnsureResolver
-} from "../chunk-TIQ3TCK4.js";
+} from "../chunk-5JVTBR5H.js";
 import "../chunk-RXV677CJ.js";
 import "../chunk-WEVSXHII.js";
 import "../chunk-CVQ7DJHG.js";
-import "../chunk-6LR7OM7F.js";
+import "../chunk-Q6NVSUCX.js";
 import "../chunk-M5AKL3FL.js";
-import "../chunk-6BIAW73W.js";
+import "../chunk-RULOELNF.js";
 import "../chunk-GRPLHUYC.js";
 import "../chunk-IW3X2MJF.js";
 import "../chunk-LPTKBQII.js";
 import "../chunk-3MAIF2SF.js";
 import "../chunk-WPC2PUCV.js";
-import "../chunk-UY2DR5V4.js";
-import "../chunk-F4OW5UVA.js";
-import "../chunk-WYJX7OFF.js";
+import "../chunk-3BDYD4BG.js";
+import "../chunk-UPQ2JGIO.js";
+import "../chunk-64UKPUK4.js";
 import "../chunk-C2TS5MER.js";
-import "../chunk-A7GZZQ3Q.js";
+import "../chunk-2WGCBESY.js";
 import "../chunk-JQKKMUCT.js";
 import "../chunk-5FLTDWWP.js";
 import "../chunk-RIRDBSBG.js";
-import "../chunk-RSAEMNX4.js";
+import "../chunk-FJTZNSNU.js";
 import "../chunk-SI2ZUOYD.js";
 import "../chunk-AYAVRPAP.js";
-import "../chunk-6WLVGBLQ.js";
+import "../chunk-Q7CHACT6.js";
 import "../chunk-TSPERKUS.js";
 import "../chunk-HDGD5FYX.js";
 import "../chunk-ZOC4GITL.js";
-import "../chunk-LZ7HCV4C.js";
-import "../chunk-3CES4RZG.js";
-import "../chunk-3TDAKT7Y.js";
+import "../chunk-6HPDXI7E.js";
+import "../chunk-HIODF4QF.js";
+import "../chunk-SSV2KD3B.js";
 import "../chunk-7I3MTGOR.js";
 export {
   domainMatchesEnvTld,

package/dist/memory-report.js

@@ -5,8 +5,8 @@ import {
   maybeWriteMemoryReport,
   safeHeap,
   sampleFromBytes
-} from "./chunk-3CES4RZG.js";
-import "./chunk-3TDAKT7Y.js";
+} from "./chunk-HIODF4QF.js";
+import "./chunk-SSV2KD3B.js";
 export {
   DEFAULT_THRESHOLD_MB,
   buildMemoryReport,

package/dist/merkle.js

@@ -6,32 +6,32 @@ import {
   merkleizeKuboBackend,
   merkleizeWithStableOrder,
   rebuildOrderedCarFromBytes
-} from "./chunk-6LR7OM7F.js";
+} from "./chunk-Q6NVSUCX.js";
 import "./chunk-M5AKL3FL.js";
-import "./chunk-6BIAW73W.js";
+import "./chunk-RULOELNF.js";
 import "./chunk-GRPLHUYC.js";
 import "./chunk-IW3X2MJF.js";
 import "./chunk-LPTKBQII.js";
 import "./chunk-3MAIF2SF.js";
 import "./chunk-WPC2PUCV.js";
-import "./chunk-UY2DR5V4.js";
-import "./chunk-F4OW5UVA.js";
-import "./chunk-WYJX7OFF.js";
+import "./chunk-3BDYD4BG.js";
+import "./chunk-UPQ2JGIO.js";
+import "./chunk-64UKPUK4.js";
 import "./chunk-C2TS5MER.js";
-import "./chunk-A7GZZQ3Q.js";
+import "./chunk-2WGCBESY.js";
 import "./chunk-JQKKMUCT.js";
 import "./chunk-5FLTDWWP.js";
 import "./chunk-RIRDBSBG.js";
-import "./chunk-RSAEMNX4.js";
+import "./chunk-FJTZNSNU.js";
 import "./chunk-SI2ZUOYD.js";
 import "./chunk-AYAVRPAP.js";
-import "./chunk-6WLVGBLQ.js";
+import "./chunk-Q7CHACT6.js";
 import "./chunk-TSPERKUS.js";
 import "./chunk-HDGD5FYX.js";
 import "./chunk-ZOC4GITL.js";
-import "./chunk-LZ7HCV4C.js";
-import "./chunk-3CES4RZG.js";
-import "./chunk-3TDAKT7Y.js";
+import "./chunk-6HPDXI7E.js";
+import "./chunk-HIODF4QF.js";
+import "./chunk-SSV2KD3B.js";
 import "./chunk-7I3MTGOR.js";
 export {
   buildOrderedCar,

package/dist/personhood/bootstrap.js

@@ -24,7 +24,7 @@ import {
 } from "../chunk-ZYVGHDMU.js";
 import {
   WS_HEARTBEAT_TIMEOUT_MS
-} from "../chunk-RSAEMNX4.js";
+} from "../chunk-FJTZNSNU.js";
 import {
   DOTNS_CONTEXT_BYTES,
   PEOPLE_MEMBER_IDENTIFIER_HEX,
@@ -35,9 +35,9 @@ import {
   loadEnvironments
 } from "../chunk-HDGD5FYX.js";
 import "../chunk-ZOC4GITL.js";
-import "../chunk-LZ7HCV4C.js";
-import "../chunk-3CES4RZG.js";
-import "../chunk-3TDAKT7Y.js";
+import "../chunk-6HPDXI7E.js";
+import "../chunk-HIODF4QF.js";
+import "../chunk-SSV2KD3B.js";
 import "../chunk-7I3MTGOR.js";
 
 // src/personhood/bootstrap.ts

package/dist/personhood/people-client.js

@@ -1,15 +1,15 @@
 import {
   WS_HEARTBEAT_TIMEOUT_MS
-} from "../chunk-RSAEMNX4.js";
+} from "../chunk-FJTZNSNU.js";
 import "../chunk-SI2ZUOYD.js";
 import "../chunk-AYAVRPAP.js";
 import {
   loadEnvironments
 } from "../chunk-HDGD5FYX.js";
 import "../chunk-ZOC4GITL.js";
-import "../chunk-LZ7HCV4C.js";
-import "../chunk-3CES4RZG.js";
-import "../chunk-3TDAKT7Y.js";
+import "../chunk-6HPDXI7E.js";
+import "../chunk-HIODF4QF.js";
+import "../chunk-SSV2KD3B.js";
 import "../chunk-7I3MTGOR.js";
 
 // src/personhood/people-client.ts

package/dist/run-state.js

@@ -7,7 +7,7 @@ import {
   shouldSkipStaleWarning,
   stateFilePath,
   writeRunState
-} from "./chunk-3TDAKT7Y.js";
+} from "./chunk-SSV2KD3B.js";
 export {
   VERSION,
   loadRunState,

package/dist/sss-allowance-cache.js

@@ -4,14 +4,14 @@ import {
   preflightSssAllowance,
   sssPeriodEndSec,
   writeSssAllowanceCache
-} from "./chunk-6BIAW73W.js";
+} from "./chunk-RULOELNF.js";
 import "./chunk-GRPLHUYC.js";
-import "./chunk-6WLVGBLQ.js";
+import "./chunk-Q7CHACT6.js";
 import "./chunk-TSPERKUS.js";
 import "./chunk-HDGD5FYX.js";
 import "./chunk-ZOC4GITL.js";
-import "./chunk-3CES4RZG.js";
-import "./chunk-3TDAKT7Y.js";
+import "./chunk-HIODF4QF.js";
+import "./chunk-SSV2KD3B.js";
 export {
   clearSssAllowanceCache,
   isSssAllowanceCacheValid,

package/dist/storage-signer.js

@@ -8,32 +8,32 @@ import {
   waitForBulletinAuthorization,
   withTransientRetry,
   writeBulletinSlotKey
-} from "./chunk-6LR7OM7F.js";
+} from "./chunk-Q6NVSUCX.js";
 import "./chunk-M5AKL3FL.js";
-import "./chunk-6BIAW73W.js";
+import "./chunk-RULOELNF.js";
 import "./chunk-GRPLHUYC.js";
 import "./chunk-IW3X2MJF.js";
 import "./chunk-LPTKBQII.js";
 import "./chunk-3MAIF2SF.js";
 import "./chunk-WPC2PUCV.js";
-import "./chunk-UY2DR5V4.js";
-import "./chunk-F4OW5UVA.js";
-import "./chunk-WYJX7OFF.js";
+import "./chunk-3BDYD4BG.js";
+import "./chunk-UPQ2JGIO.js";
+import "./chunk-64UKPUK4.js";
 import "./chunk-C2TS5MER.js";
-import "./chunk-A7GZZQ3Q.js";
+import "./chunk-2WGCBESY.js";
 import "./chunk-JQKKMUCT.js";
 import "./chunk-5FLTDWWP.js";
 import "./chunk-RIRDBSBG.js";
-import "./chunk-RSAEMNX4.js";
+import "./chunk-FJTZNSNU.js";
 import "./chunk-SI2ZUOYD.js";
 import "./chunk-AYAVRPAP.js";
-import "./chunk-6WLVGBLQ.js";
+import "./chunk-Q7CHACT6.js";
 import "./chunk-TSPERKUS.js";
 import "./chunk-HDGD5FYX.js";
 import "./chunk-ZOC4GITL.js";
-import "./chunk-LZ7HCV4C.js";
-import "./chunk-3CES4RZG.js";
-import "./chunk-3TDAKT7Y.js";
+import "./chunk-6HPDXI7E.js";
+import "./chunk-HIODF4QF.js";
+import "./chunk-SSV2KD3B.js";
 import "./chunk-7I3MTGOR.js";
 export {
   BulletinSlotAuthError,

package/dist/telemetry.js

@@ -41,8 +41,8 @@ import {
   withDeploySpan,
   withManifestSpan,
   withSpan
-} from "./chunk-3CES4RZG.js";
-import "./chunk-3TDAKT7Y.js";
+} from "./chunk-HIODF4QF.js";
+import "./chunk-SSV2KD3B.js";
 export {
   VERSION,
   __setDeployRootSpanForTest,

package/dist/version-check.js

@@ -12,9 +12,9 @@ import {
   isPreReleaseVersion,
   preReleaseWarning,
   promptYesNo
-} from "./chunk-F4OW5UVA.js";
-import "./chunk-3CES4RZG.js";
-import "./chunk-3TDAKT7Y.js";
+} from "./chunk-UPQ2JGIO.js";
+import "./chunk-HIODF4QF.js";
+import "./chunk-SSV2KD3B.js";
 export {
   assessVersion,
   checkNodeVersion,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bulletin-deploy",
-  "version": "0.18.0",
+  "version": "0.18.1-rc.1",
   "private": false,
   "repository": {
     "type": "git",
@@ -50,7 +50,7 @@
     "refresh-environments": "node scripts/refresh-environments.mjs",
     "postinstall": "patch-package || true",
     "prepare": "npm run build",
-    "test": "npm run build && node --test test/test.js test/cli-help.test.js test/helpers/e2e-helpers.test.js test/environments.test.js test/refresh-environments.test.js test/chunk-sharing-report.test.js test/dotns-deployments-parser.test.js test/dotns-token-id.test.js test/dotns-subnode-id.test.js test/dotns-protocol.test.js test/product-manifest.test.js test/cache-savings-totals.test.js test/error-pattern-signature.test.js test/exit-codes.test.js test/probe-env-health.test.js test/e2e-chain-calls.test.js test/auth-config.test.js test/whoami.test.js test/login.test.js test/logout.test.js test/auth-resolve.test.js test/storage-signer.test.js test/spinner.test.js test/sss-allowance.test.js test/sss-allowance-cache.test.js test/dotns-transfer.test.js test/deploy-actors.test.js test/transfer-command.test.js test/dotns-register-fee.test.js test/deploy-label-ordering.test.js test/benign-teardown.test.js test/verify-baked-dsn.test.js test/product-account.test.js test/post-release-monitor-skill.test.js test/test-release-retry-wrapper.js test/reprove-alias-tool.test.js test/bootstrap-env.test.js test/check-chain-identity.test.js && npm run test:vendor",
+    "test": "npm run build && node --test test/test.js test/cli-help.test.js test/helpers/e2e-helpers.test.js test/helpers/e2e-exit-guard.test.js test/environments.test.js test/refresh-environments.test.js test/chunk-sharing-report.test.js test/dotns-deployments-parser.test.js test/dotns-token-id.test.js test/dotns-subnode-id.test.js test/dotns-protocol.test.js test/product-manifest.test.js test/cache-savings-totals.test.js test/error-pattern-signature.test.js test/exit-codes.test.js test/probe-env-health.test.js test/e2e-chain-calls.test.js test/auth-config.test.js test/whoami.test.js test/login.test.js test/logout.test.js test/auth-resolve.test.js test/storage-signer.test.js test/spinner.test.js test/sss-allowance.test.js test/sss-allowance-cache.test.js test/dotns-transfer.test.js test/deploy-actors.test.js test/transfer-command.test.js test/dotns-register-fee.test.js test/deploy-label-ordering.test.js test/benign-teardown.test.js test/verify-baked-dsn.test.js test/product-account.test.js test/post-release-monitor-skill.test.js test/test-release-retry-wrapper.js test/reprove-alias-tool.test.js test/bootstrap-env.test.js test/check-chain-identity.test.js && npm run test:vendor",
     "test:e2e": "npm run build && node --test test/e2e.test.js",
     "test:e2e:smoke": "bash scripts/e2e-pass.sh smoke",
     "test:e2e:pr": "bash scripts/e2e-pass.sh pr",

package/tools/release-retry-wrapper.mjs

@@ -52,8 +52,19 @@ const FLAKE_PATTERNS = [
 
 // output: combined stdout+stderr text from the child. Any flake pattern
 // appearing anywhere in the child's output makes the run retry-eligible.
+// Printed by the E2E harness when it outlives its suite. A leak is deterministic,
+// and the WS-fault scenarios log flake wording while passing, so it must not retry.
+export const HARNESS_GUARD_MARKER = ">> FAIL: e2e harness:";
+
+// EXIT_CODE_NO_RETRY from src/errors.ts, reachable only when the wrapper spawns
+// the CLI directly: node --test normalises its child's code to 1, which is why
+// the marker is checked too.
+export const NO_RETRY_EXIT_CODE = 78;
+
 export function classifyForRetry(output, childExitCode = 1) {
   if (childExitCode === 0) return 0;
+  if (childExitCode === NO_RETRY_EXIT_CODE) return NO_RETRY_EXIT_CODE;
+  if (output.includes(HARNESS_GUARD_MARKER)) return childExitCode || 1;
   for (const pat of FLAKE_PATTERNS) {
     if (output.includes(pat)) return 75;
   }