bulletin-deploy 0.18.1-rc.1 → 0.18.2

package/dist/auth-config.js

@@ -9,12 +9,12 @@ import {
   getPeopleChainEndpoints,
   hasPersistedSession,
   resolveBulletinEndpoints
-} from "./chunk-Q7CHACT6.js";
+} from "./chunk-CWLLC46X.js";
 import "./chunk-TSPERKUS.js";
 import "./chunk-HDGD5FYX.js";
 import "./chunk-ZOC4GITL.js";
-import "./chunk-HIODF4QF.js";
-import "./chunk-SSV2KD3B.js";
+import "./chunk-DOLHX2AM.js";
+import "./chunk-QCZKXFCY.js";
 export {
   DOT_DAPP_ID,
   DOT_DERIVATION_INDEX,

package/dist/bug-report.js

@@ -10,10 +10,10 @@ import {
   offerBugReport,
   scrubSecrets,
   setDeployContext
-} from "./chunk-3BDYD4BG.js";
-import "./chunk-UPQ2JGIO.js";
-import "./chunk-HIODF4QF.js";
-import "./chunk-SSV2KD3B.js";
+} from "./chunk-W76SHNTO.js";
+import "./chunk-H3ZDWTNY.js";
+import "./chunk-DOLHX2AM.js";
+import "./chunk-QCZKXFCY.js";
 export {
   buildCliFlagsSummary,
   buildLabels,

package/dist/chain-health.js

@@ -3,9 +3,9 @@ import {
   DEFAULT_WINDOW_BLOCKS,
   MAX_SPANS_PER_SAMPLER,
   endpointHost
-} from "./chunk-6HPDXI7E.js";
-import "./chunk-HIODF4QF.js";
-import "./chunk-SSV2KD3B.js";
+} from "./chunk-IAPBFRWN.js";
+import "./chunk-DOLHX2AM.js";
+import "./chunk-QCZKXFCY.js";
 export {
   ChainHealthSampler,
   DEFAULT_WINDOW_BLOCKS,

package/dist/{chunk-FJTZNSNU.js → chunk-2GKEZI5B.js}

@@ -13,7 +13,7 @@ import {
 } from "./chunk-ZOC4GITL.js";
 import {
   ChainHealthSampler
-} from "./chunk-6HPDXI7E.js";
+} from "./chunk-IAPBFRWN.js";
 import {
   captureWarning,
   markCodePath,
@@ -21,7 +21,7 @@ import {
   setDeploySentryTag,
   truncateAddress,
   withSpan
-} from "./chunk-HIODF4QF.js";
+} from "./chunk-DOLHX2AM.js";
 import {
   POP_CONTROLLER_PROBE_ABI,
   PROTOCOL_PROBE_LABEL,
@@ -411,7 +411,18 @@ var DOTNS_REGISTRY_ABI = [
   { inputs: [{ name: "record", type: "tuple", components: [{ name: "parentNode", type: "bytes32" }, { name: "subLabel", type: "string" }, { name: "parentLabel", type: "string" }, { name: "owner", type: "address" }] }], name: "setSubnodeOwner", outputs: [{ name: "subnode", type: "bytes32" }], stateMutability: "nonpayable", type: "function" },
   { inputs: [{ name: "node", type: "bytes32" }, { name: "newResolver", type: "address" }], name: "setResolver", outputs: [], stateMutability: "nonpayable", type: "function" },
   { inputs: [{ name: "node", type: "bytes32" }], name: "owner", outputs: [{ name: "", type: "address" }], stateMutability: "view", type: "function" },
-  { inputs: [{ name: "node", type: "bytes32" }], name: "resolver", outputs: [{ name: "", type: "address" }], stateMutability: "view", type: "function" }
+  { inputs: [{ name: "node", type: "bytes32" }], name: "resolver", outputs: [{ name: "", type: "address" }], stateMutability: "view", type: "function" },
+  // #1435-adjacent: DotnsRegistry.isAuthorised(node, account) — verified against
+  // upstream IDotnsRegistry.sol at v0.7.0. The contract's own doc comment calls
+  // this "the canonical authorisation check the registry enforces on
+  // owner-gated entry points" and "the single source of truth" _authorised/
+  // isAuthorised both delegate to: a non-zero stored subnode owner must equal
+  // account; otherwise, for a tokenised node, the registrar's ERC-721 owner,
+  // an operator-for-all delegate, or a single-token approval all qualify.
+  // Strictly wider than a raw owner()-equality test. See
+  // checkNodeAuthorization below, which prefers this and falls back to
+  // owner()-equality only when this accessor is absent (a bare revert).
+  { inputs: [{ name: "node", type: "bytes32" }, { name: "account", type: "address" }], name: "isAuthorised", outputs: [{ name: "authorisedFlag", type: "bool" }], stateMutability: "view", type: "function" }
 ];
 var DOTNS_REGISTRY_SET_SUBNODE_OWNER_ABI_V07 = [
   { inputs: [{ name: "record", type: "tuple", components: [{ name: "parentNode", type: "bytes32" }, { name: "subLabel", type: "string" }, { name: "parentLabel", type: "string" }, { name: "owner", type: "address" }, { name: "persist", type: "bool" }] }], name: "setSubnodeOwner", outputs: [{ name: "subnode", type: "bytes32" }], stateMutability: "nonpayable", type: "function" }
@@ -819,13 +830,11 @@ function parseDomainName(input, tld = DEFAULT_TLD) {
     const sanitized = validateDomainLabel(parts[0]);
     return { isSubdomain: false, label: sanitized, sublabel: null, parentLabel: null, fullName: `${sanitized}.${tld}` };
   }
-  if (parts.length === 2) {
-    const sanitizedSub = validateDomainLabel(parts[0]);
-    const sanitizedParent = validateDomainLabel(parts[1]);
-    const fullLabel = `${sanitizedSub}.${sanitizedParent}`;
-    return { isSubdomain: true, label: fullLabel, sublabel: sanitizedSub, parentLabel: sanitizedParent, fullName: `${fullLabel}.${tld}` };
-  }
-  throw new Error(`Invalid domain: only one level of subdomains supported (got ${parts.length} labels)`);
+  const restParts = parts.slice(1);
+  const sanitizedSub = validateDomainLabel(parts[0]);
+  const sanitizedParent = restParts.map((p) => validateDomainLabel(p)).join(".");
+  const fullLabel = `${sanitizedSub}.${sanitizedParent}`;
+  return { isSubdomain: true, label: fullLabel, sublabel: sanitizedSub, parentLabel: sanitizedParent, fullName: `${fullLabel}.${tld}` };
 }
 function parseProofOfPersonhoodStatus(status) {
   const s = (status ?? "none").toLowerCase();
@@ -2216,6 +2225,82 @@ var DotNS = class _DotNS {
       return { owned: false, owner: null };
     }
   }
+  /**
+   * Raw probe for DotnsRegistry.isAuthorised(node, account) — returns the
+   * decoded bool when the accessor exists, or `null` when it is absent from
+   * this registry deployment (a bare selector-not-found revert). Shares the
+   * bare-revert-vs-real-revert discrimination (isBareRevertResult) with
+   * resolveSubnodeOwnerShape's v0.7 shape probe above: a revert WITH data
+   * means the function exists and the on-chain call itself is a normal view
+   * read that should never revert for a real reason (see _isAuthorised in
+   * DotnsRegistry.sol — it only ever returns a bool), so that branch
+   * propagates as an unexpected failure rather than being folded into
+   * "absent".
+   */
+  async probeIsAuthorised(node, account) {
+    this.ensureConnected();
+    if (!this.clientWrapper) throw new Error("probeIsAuthorised: polkadot-api client not available");
+    const contractAddress = this._contracts.DOTNS_REGISTRY;
+    const isAuthorisedAbi = DOTNS_REGISTRY_ABI;
+    const isAuthorisedArgs = [node, account];
+    const encodedCallData = encodeFunctionData({ abi: isAuthorisedAbi, functionName: "isAuthorised", args: isAuthorisedArgs });
+    const callResult = await this.clientWrapper.performDryRunCall(this.substrateAddress, contractAddress, 0n, encodedCallData);
+    if (callResult.result.isOk) {
+      const rawData = callResult.result.value.data ?? "0x";
+      if (rawData.length > 2) {
+        return decodeFunctionResult({ abi: DOTNS_REGISTRY_ABI, functionName: "isAuthorised", data: rawData });
+      }
+      return null;
+    }
+    const errorData = callResult.result.value;
+    const revertData = errorData?.data;
+    const revertFlags = errorData?.flags;
+    if (isBareRevertResult(revertData, revertFlags)) return null;
+    throw new Error(formatContractDryRunFailure({
+      revertData,
+      revertFlags,
+      gasConsumed: callResult.gasConsumed,
+      gasRequired: callResult.gasRequired,
+      storageDeposit: callResult.storageDeposit?.value
+    }, {
+      contractAddress,
+      functionName: "isAuthorised",
+      signerSubstrateAddress: this.substrateAddress,
+      signerEvmAddress: this.evmAddress ?? void 0,
+      value: 0n,
+      encodedData: encodedCallData,
+      args: [node, account],
+      contracts: this._contracts
+    }));
+  }
+  /**
+   * Ask the registry who may write `node`, per DotnsRegistry.isAuthorised —
+   * the contract's own "single source of truth" for owner-gated entry
+   * points (setSubnodeOwner, setSubnodeResolver, setResolver): a non-zero
+   * stored subnode owner must equal `account`; otherwise, for a tokenised
+   * node, the registrar's ERC-721 owner, an operator-for-all delegate, or a
+   * single-token approval all qualify. Strictly wider than a raw
+   * owner()-equality test, which refuses an approved/operator delegate the
+   * chain would accept — the contract's own comment calls operator-for-all
+   * "the common marketplace / escrow delegation path".
+   *
+   * Falls back to owner()-equality when isAuthorised is absent from this
+   * registry deployment (a bare revert on the probe) so a missing accessor
+   * never turns into a refusal. `owner` is always the node's registry-read
+   * owner (for informative messaging), independent of which path decided
+   * `authorised`.
+   */
+  async checkNodeAuthorization(node, account) {
+    this.ensureConnected();
+    const owner = await withTimeout(
+      this.contractCallNullable(this._contracts.DOTNS_REGISTRY, DOTNS_REGISTRY_ABI, "owner", [node]),
+      3e4,
+      "owner"
+    );
+    const authorised = await this.probeIsAuthorised(node, account);
+    if (authorised !== null) return { authorised, owner };
+    return { authorised: owner !== null && owner.toLowerCase() === account.toLowerCase(), owner };
+  }
   /** Live transfer-fee quote. transferFloor is a pure PopRules view — it
    *  classifies the label and reads both tiers, so it works BEFORE the name is
    *  registered (unlike quoteTransferFee, which reverts on an unregistered token). */
@@ -2266,9 +2351,12 @@ var DotNS = class _DotNS {
    *  transferName/transferFrom — the registrar has no token for them. Instead
    *  the *parent-domain* owner reassigns a subname via the registry's
    *  setSubnodeOwner (the same call registerSubdomain uses to create it).
-   *  Authorisation is on parent ownership, not on the subname's current owner,
-   *  so the connected signer must own `${parentLabel}.${this._tld}`. Idempotent:
-   *  a no-op when the recipient already owns it.
+   *  Authorisation is on the parent node, not on the subname's current owner —
+   *  checked via the registry's own isAuthorised(parentNode, account)
+   *  (checkNodeAuthorization), so the connected signer may be the parent's
+   *  owner OR an operator-for-all/single-token approval on it, matching what
+   *  the chain itself allows on setSubnodeOwner. Idempotent: a no-op when the
+   *  recipient already owns it.
    *
    *  Every node here is derived via computeSubnodeIds, which routes through the
    *  single ensNode() primitive (#1304, see the comment above ensNode) — the
@@ -2284,17 +2372,13 @@ var DotNS = class _DotNS {
     const fullName = `${sublabel}.${parentLabel}.${this._tld}`;
     assertNotZeroRecipient(toH160, fullName);
     const { parentNode, subnode } = computeSubnodeIds(sublabel, parentLabel, this._tld);
-    const parentOwner = await withTimeout(
-      this.contractCallNullable(this._contracts.DOTNS_REGISTRY, DOTNS_REGISTRY_ABI, "owner", [parentNode]),
-      3e4,
-      "owner"
-    );
+    const { authorised: parentAuthorised, owner: parentOwner } = await this.checkNodeAuthorization(parentNode, this.evmAddress);
     if (!parentOwner || parentOwner === zeroAddress) {
       throw new Error(`Cannot transfer ${fullName}: parent ${parentLabel}.${this._tld} is not registered.`);
     }
-    if (parentOwner.toLowerCase() !== this.evmAddress.toLowerCase()) {
+    if (!parentAuthorised) {
       throw new Error(
-        `Cannot transfer ${fullName}: it is a subname, which only the owner of the parent ${parentLabel}.${this._tld} can reassign (subnames are not transferable tokens). Parent is owned by ${parentOwner}, but the signer is ${this.evmAddress}. Sign as the parent owner (e.g. pass its --mnemonic).`
+        `Cannot transfer ${fullName}: it is a subname, which only the owner of the parent ${parentLabel}.${this._tld} (or an account it has approved) can reassign (subnames are not transferable tokens). Parent is owned by ${parentOwner}, but the signer is ${this.evmAddress} and is not approved. Sign as the parent owner, or as an approved account (e.g. pass its --mnemonic).`
       );
     }
     const current = await withTimeout(

package/dist/{chunk-2WGCBESY.js → chunk-6BNYZN7R.js}

@@ -4,10 +4,10 @@ import {
 } from "./chunk-5FLTDWWP.js";
 import {
   DEFAULT_MNEMONIC
-} from "./chunk-FJTZNSNU.js";
+} from "./chunk-2GKEZI5B.js";
 import {
   DOT_PRODUCT_ID
-} from "./chunk-Q7CHACT6.js";
+} from "./chunk-CWLLC46X.js";
 
 // src/deploy-actors.ts
 var DEFAULT_WORKER_SURI = DEFAULT_MNEMONIC;

package/dist/{chunk-5JVTBR5H.js → chunk-BQKBZMLB.js}

@@ -13,13 +13,13 @@ import {
   setBulletinEndpoints,
   storeDirectory,
   storeFile
-} from "./chunk-Q6NVSUCX.js";
+} from "./chunk-FWMFCXIB.js";
 import {
   DEFAULT_TLD,
   DotNS,
   TX_KIND_SKIPPED,
   stripTldSuffix
-} from "./chunk-FJTZNSNU.js";
+} from "./chunk-2GKEZI5B.js";
 import {
   DEFAULT_ENV_ID,
   getPopSelfServeConfig,
@@ -33,7 +33,7 @@ import {
   setDeployAttribute,
   withManifestSpan,
   withSpan
-} from "./chunk-HIODF4QF.js";
+} from "./chunk-DOLHX2AM.js";
 
 // src/manifest/publish.ts
 import * as fs2 from "fs/promises";

package/dist/{chunk-Q7CHACT6.js → chunk-CWLLC46X.js}

@@ -6,7 +6,7 @@ import {
 } from "./chunk-HDGD5FYX.js";
 import {
   VERSION
-} from "./chunk-HIODF4QF.js";
+} from "./chunk-DOLHX2AM.js";
 
 // src/auth-config.ts
 import { existsSync, readdirSync } from "fs";

package/dist/{chunk-RULOELNF.js → chunk-D6ONN6VJ.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-GRPLHUYC.js";
 import {
   DOT_DAPP_ID
-} from "./chunk-Q7CHACT6.js";
+} from "./chunk-CWLLC46X.js";
 
 // src/sss-allowance-cache.ts
 import { mkdir, readFile, writeFile, unlink } from "fs/promises";

package/dist/{chunk-HIODF4QF.js → chunk-DOLHX2AM.js}

@@ -1,7 +1,7 @@
 import {
   package_default,
   writeRunState
-} from "./chunk-SSV2KD3B.js";
+} from "./chunk-QCZKXFCY.js";
 
 // src/memory-report.ts
 import * as fs2 from "fs";

package/dist/{chunk-Q6NVSUCX.js → chunk-FWMFCXIB.js}

@@ -1,9 +1,12 @@
+import {
+  subnameNestingLevels
+} from "./chunk-HNJWIY55.js";
 import {
   deriveProductSigner
 } from "./chunk-M5AKL3FL.js";
 import {
   preflightSssAllowance
-} from "./chunk-RULOELNF.js";
+} from "./chunk-D6ONN6VJ.js";
 import {
   statementSigningAccount
 } from "./chunk-GRPLHUYC.js";
@@ -29,18 +32,18 @@ import {
 } from "./chunk-WPC2PUCV.js";
 import {
   setDeployContext
-} from "./chunk-3BDYD4BG.js";
+} from "./chunk-W76SHNTO.js";
 import {
   getBestBlockNumber,
   probeChunks,
   probeFinalityGap
-} from "./chunk-64UKPUK4.js";
+} from "./chunk-ZHSULISU.js";
 import {
   packSection
 } from "./chunk-C2TS5MER.js";
 import {
   resolveStorageSigner
-} from "./chunk-2WGCBESY.js";
+} from "./chunk-6BNYZN7R.js";
 import {
   createSlotAccountSigner,
   requestResourceAllocation
@@ -50,12 +53,13 @@ import {
   DotNS,
   TX_TIMEOUT_MS,
   classifyRegistrability,
+  computeDomainNode,
   fetchNonce,
   formatUnregistrableReason,
   parseDomainName,
   popStatusName,
   verifyNonceAdvanced
-} from "./chunk-FJTZNSNU.js";
+} from "./chunk-2GKEZI5B.js";
 import {
   derivePoolAccounts,
   detectTestnet,
@@ -69,7 +73,7 @@ import {
   STALE_SESSION_MESSAGE,
   getPeopleChainEndpoints,
   hasPersistedSession
-} from "./chunk-Q7CHACT6.js";
+} from "./chunk-CWLLC46X.js";
 import {
   CLI_NAME
 } from "./chunk-TSPERKUS.js";
@@ -84,7 +88,7 @@ import {
 } from "./chunk-ZOC4GITL.js";
 import {
   ChainHealthSampler
-} from "./chunk-6HPDXI7E.js";
+} from "./chunk-IAPBFRWN.js";
 import {
   VERSION,
   captureWarning,
@@ -98,7 +102,7 @@ import {
   truncateAddress,
   withDeploySpan,
   withSpan
-} from "./chunk-HIODF4QF.js";
+} from "./chunk-DOLHX2AM.js";
 
 // src/merkle.ts
 import * as fs2 from "fs";
@@ -2025,11 +2029,18 @@ function assertSubdomainOwnerMatchesSigner(result, signerEvmAddress, sublabel, p
   }
 }
 function formatSubdomainParentError(fullName, parentLabel, parentOwner, selfAddress, tld = DEFAULT_TLD, profile = "poprules-startingPrice") {
-  if (parentOwner !== null) {
-    const transferBullet = selfAddress ? `  - ask the ${parentOwner} account to hand the parent to this signer, run BY that account: ${CLI_NAME} transfer ${parentLabel}.${tld} --to ${selfAddress} --mnemonic <the ${parentOwner} account's key>
+  const owner = parentOwner !== null && /^0x0{40}$/i.test(parentOwner) ? null : parentOwner;
+  const parentIsNested = parentLabel.includes(".");
+  if (owner === null && parentIsNested) {
+    return `Cannot deploy ${fullName}: parent ${parentLabel}.${tld} does not exist.
+
+It is itself a subname, so it cannot be registered directly \u2014 whoever owns ${parentLabel.slice(parentLabel.indexOf(".") + 1)}.${tld} has to create it first, then hand it to this signer (${selfAddress || "this account"}).`;
+  }
+  if (owner !== null) {
+    const transferBullet = selfAddress ? `  - ask the ${owner} account to hand the parent to this signer, run BY that account: ${CLI_NAME} transfer ${parentLabel}.${tld} --to ${selfAddress} --mnemonic <the ${owner} account's key>
 ` : "";
     const ownedParentBullet = `  - deploy the subdomain under a parent this signer already owns instead.`;
-    return `Cannot deploy ${fullName}: parent ${parentLabel}.${tld} is owned by ${parentOwner}, not by this signer.
+    return `Cannot deploy ${fullName}: parent ${parentLabel}.${tld} is owned by ${owner}, not by this signer.
 
 ` + (transferBullet ? `Either:
 ${transferBullet}${ownedParentBullet}` : ownedParentBullet);
@@ -2158,6 +2169,10 @@ async function deploy(content, domainName = null, options = {}) {
   _deployRpcFailedOver = false;
   POOL_SIZE = options.poolSize ?? parseInt(process.env.BULLETIN_POOL_SIZE ?? String(DEFAULT_POOL_SIZE), 10);
   let parsed = domainName ? parseDomainName(domainName, envTld) : null;
+  if (parsed?.isSubdomain && parsed.parentLabel.includes(".")) {
+    const levels = subnameNestingLevels(1 + parsed.parentLabel.split(".").length);
+    console.log(`   NOTE: "${domainName}" parses as sublabel "${parsed.sublabel}" under parent path "${parsed.parentLabel}.${envTld}" (${levels} levels of subname nesting).`);
+  }
   let sessionCleanup;
   const hasSession = hasPersistedSession();
   const signerChoice = chooseSignerInput({
@@ -2264,6 +2279,9 @@ async function deploy(content, domainName = null, options = {}) {
       setDeployAttribute("deploy.env", envId);
       setDeployAttribute("deploy.label", parsed?.label ?? name);
       setDeployAttribute("deploy.subdomain", String(parsed?.isSubdomain ?? false));
+      if (parsed?.isSubdomain) {
+        setDeployAttribute("deploy.dotns.subname_levels", subnameNestingLevels(1 + parsed.parentLabel.split(".").length));
+      }
       if (envNetwork) setDeployAttribute("deploy.network", envNetwork);
       if (envSource) setDeployAttribute("deploy.environments_source", envSource);
       setDeployAttribute("deploy.transfer.enabled", options.transferTo ? "true" : "false");
@@ -2296,8 +2314,9 @@ async function deploy(content, domainName = null, options = {}) {
             const subResult = await preflight.checkSubdomainOwnership(parsed.sublabel, parsed.parentLabel);
             assertSubdomainOwnerMatchesSigner(subResult, preflight.evmAddress, parsed.sublabel, parsed.parentLabel, envTld);
             if (!subResult.owned) {
-              const { owned: parentOwned, owner: parentOwner } = await preflight.checkOwnership(parsed.parentLabel);
-              if (!parentOwned) {
+              const parentNode = computeDomainNode(parsed.parentLabel, envTld);
+              const { authorised: parentAuthorised, owner: parentOwner } = await preflight.checkNodeAuthorization(parentNode, preflight.evmAddress);
+              if (!parentAuthorised) {
                 throw new NonRetryableError(
                   formatSubdomainParentError(parsed.fullName, parsed.parentLabel, parentOwner ?? null, preflight.evmAddress ?? "", envTld, preflight.protocolVersion)
                 );
@@ -2554,8 +2573,9 @@ async function deploy(content, domainName = null, options = {}) {
             } else if (owner) {
               throw new Error(`Subdomain ${parsed.fullName} is owned by ${owner}, not ${dotns.evmAddress}`);
             } else {
-              const parentOwnership = await dotns.checkOwnership(parsed.parentLabel);
-              if (!parentOwnership.owned) throw new Error(`You must own ${parsed.parentLabel}.${envTld} to register subdomains under it`);
+              const parentNode = computeDomainNode(parsed.parentLabel, envTld);
+              const { authorised: parentAuthorised } = await dotns.checkNodeAuthorization(parentNode, dotns.evmAddress);
+              if (!parentAuthorised) throw new Error(`You must own (or be approved for) ${parsed.parentLabel}.${envTld} to register subdomains under it`);
               console.log(`   Status: Registering subdomain...`);
               await dotns.registerSubdomain(parsed.sublabel, parsed.parentLabel);
               registeredFresh = true;

package/dist/{chunk-UPQ2JGIO.js → chunk-H3ZDWTNY.js}

@@ -1,6 +1,6 @@
 import {
   VERSION
-} from "./chunk-HIODF4QF.js";
+} from "./chunk-DOLHX2AM.js";
 
 // src/version-check.ts
 import { execSync, execFileSync } from "child_process";

package/dist/chunk-HNJWIY55.js

@@ -0,0 +1,8 @@
+// src/subname-depth.ts
+function subnameNestingLevels(labelsBeforeTld) {
+  return labelsBeforeTld - 1;
+}
+
+export {
+  subnameNestingLevels
+};

package/dist/{chunk-6HPDXI7E.js → chunk-IAPBFRWN.js}

@@ -1,7 +1,7 @@
 import {
   emitIntervalSpan,
   setDeployAttribute
-} from "./chunk-HIODF4QF.js";
+} from "./chunk-DOLHX2AM.js";
 
 // src/chain-health.ts
 var DEFAULT_WINDOW_BLOCKS = 10;

package/dist/{chunk-SSV2KD3B.js → chunk-QCZKXFCY.js}

@@ -6,7 +6,7 @@ import * as path from "path";
 // package.json
 var package_default = {
   name: "bulletin-deploy",
-  version: "0.18.1-rc.1",
+  version: "0.18.2",
   private: false,
   repository: {
     type: "git",
@@ -52,7 +52,7 @@ var package_default = {
     "tools/verify-baked-dsn.mjs"
   ],
   scripts: {
-    build: "tsup src/suppress-localstorage-warning.ts src/index.ts src/deploy.ts src/dotns.ts src/dotns-protocol.ts src/pool.ts src/telemetry.ts src/chain-health.ts src/memory-report.ts src/merkle.ts src/version-check.ts src/bug-report.ts src/run-state.ts src/environments.ts src/errors.ts src/manifest.ts src/chunk-probe.ts src/manifest-embed.ts src/manifest-fetch.ts src/manifest-roundtrip.ts src/incremental-stats.ts src/chunker.ts src/personhood/encoding.ts src/personhood/hashing.ts src/personhood/constants.ts src/personhood/member-key.ts src/personhood/people-client.ts src/personhood/proof-validity.ts src/personhood/ring-proof.ts src/personhood/reprove.ts src/personhood/bind-personal-id.ts src/personhood/claim-pgas.ts src/personhood/bind-paid-alias.ts src/personhood/bootstrap.ts src/personhood/chain-prereqs.ts src/manifest/types.ts src/manifest/schema.ts src/manifest/byte-budget.ts src/manifest/config-load.ts src/manifest/publish.ts src/auth/index.ts src/auth/vendor/index.ts src/auth/vendor/ui/index.ts src/auth-config.ts src/commands/login.ts src/commands/logout.ts src/commands/whoami.ts src/commands/transfer.ts src/storage-signer.ts src/spinner.ts src/sss-allowance.ts src/sss-allowance-cache.ts src/deploy-actors.ts src/product-account.ts --format esm --dts --clean --target node22",
+    build: "tsup src/suppress-localstorage-warning.ts src/index.ts src/deploy.ts src/dotns.ts src/dotns-protocol.ts src/pool.ts src/telemetry.ts src/chain-health.ts src/memory-report.ts src/merkle.ts src/version-check.ts src/bug-report.ts src/run-state.ts src/environments.ts src/errors.ts src/subname-depth.ts src/manifest.ts src/chunk-probe.ts src/manifest-embed.ts src/manifest-fetch.ts src/manifest-roundtrip.ts src/incremental-stats.ts src/chunker.ts src/personhood/encoding.ts src/personhood/hashing.ts src/personhood/constants.ts src/personhood/member-key.ts src/personhood/people-client.ts src/personhood/proof-validity.ts src/personhood/ring-proof.ts src/personhood/reprove.ts src/personhood/bind-personal-id.ts src/personhood/claim-pgas.ts src/personhood/bind-paid-alias.ts src/personhood/bootstrap.ts src/personhood/chain-prereqs.ts src/manifest/types.ts src/manifest/schema.ts src/manifest/byte-budget.ts src/manifest/config-load.ts src/manifest/publish.ts src/auth/index.ts src/auth/vendor/index.ts src/auth/vendor/ui/index.ts src/auth-config.ts src/commands/login.ts src/commands/logout.ts src/commands/whoami.ts src/commands/transfer.ts src/storage-signer.ts src/spinner.ts src/sss-allowance.ts src/sss-allowance-cache.ts src/deploy-actors.ts src/product-account.ts --format esm --dts --clean --target node22",
     "refresh-environments": "node scripts/refresh-environments.mjs",
     postinstall: "patch-package || true",
     prepare: "npm run build",

package/dist/{chunk-3BDYD4BG.js → chunk-W76SHNTO.js}

@@ -2,15 +2,15 @@ import {
   classifyErrorArea,
   isInteractive,
   promptYesNo
-} from "./chunk-UPQ2JGIO.js";
+} from "./chunk-H3ZDWTNY.js";
 import {
   VERSION,
   getCurrentSentryTraceId,
   resolveIssueRepoSlug
-} from "./chunk-HIODF4QF.js";
+} from "./chunk-DOLHX2AM.js";
 import {
   package_default
-} from "./chunk-SSV2KD3B.js";
+} from "./chunk-QCZKXFCY.js";
 
 // src/bug-report.ts
 import { execSync, execFileSync } from "child_process";

package/dist/{chunk-64UKPUK4.js → chunk-ZHSULISU.js}

@@ -1,6 +1,6 @@
 import {
   captureWarning
-} from "./chunk-HIODF4QF.js";
+} from "./chunk-DOLHX2AM.js";
 
 // src/chunk-probe.ts
 import { Twox128, Blake2128Concat, decAnyMetadata, unifyMetadata } from "@polkadot-api/substrate-bindings";

package/dist/chunk-probe.js

@@ -8,9 +8,9 @@ import {
   getBestBlockNumber,
   probeChunks,
   probeFinalityGap
-} from "./chunk-64UKPUK4.js";
-import "./chunk-HIODF4QF.js";
-import "./chunk-SSV2KD3B.js";
+} from "./chunk-ZHSULISU.js";
+import "./chunk-DOLHX2AM.js";
+import "./chunk-QCZKXFCY.js";
 export {
   ChainProbeCrossValidationError,
   ChainProbeMetadataError,

package/dist/commands/login.js

@@ -4,11 +4,12 @@ import {
 import {
   isBenignTeardownError,
   waitForBulletinAuthorization
-} from "../chunk-Q6NVSUCX.js";
+} from "../chunk-FWMFCXIB.js";
+import "../chunk-HNJWIY55.js";
 import "../chunk-M5AKL3FL.js";
 import {
   preflightSssAllowance
-} from "../chunk-RULOELNF.js";
+} from "../chunk-D6ONN6VJ.js";
 import {
   statementSigningAccount
 } from "../chunk-GRPLHUYC.js";
@@ -16,11 +17,11 @@ import "../chunk-IW3X2MJF.js";
 import "../chunk-LPTKBQII.js";
 import "../chunk-3MAIF2SF.js";
 import "../chunk-WPC2PUCV.js";
-import "../chunk-3BDYD4BG.js";
-import "../chunk-UPQ2JGIO.js";
-import "../chunk-64UKPUK4.js";
+import "../chunk-W76SHNTO.js";
+import "../chunk-H3ZDWTNY.js";
+import "../chunk-ZHSULISU.js";
 import "../chunk-C2TS5MER.js";
-import "../chunk-2WGCBESY.js";
+import "../chunk-6BNYZN7R.js";
 import "../chunk-JQKKMUCT.js";
 import {
   BULLETIN_RESOURCE,
@@ -32,7 +33,7 @@ import {
 import {
   renderLoginStatus
 } from "../chunk-RIRDBSBG.js";
-import "../chunk-FJTZNSNU.js";
+import "../chunk-2GKEZI5B.js";
 import "../chunk-SI2ZUOYD.js";
 import "../chunk-AYAVRPAP.js";
 import {
@@ -40,7 +41,7 @@ import {
   getAuthClient,
   getPeopleChainEndpoints,
   resolveBulletinEndpoints
-} from "../chunk-Q7CHACT6.js";
+} from "../chunk-CWLLC46X.js";
 import {
   CLI_NAME
 } from "../chunk-TSPERKUS.js";
@@ -48,9 +49,9 @@ import {
   loadEnvironments
 } from "../chunk-HDGD5FYX.js";
 import "../chunk-ZOC4GITL.js";
-import "../chunk-6HPDXI7E.js";
-import "../chunk-HIODF4QF.js";
-import "../chunk-SSV2KD3B.js";
+import "../chunk-IAPBFRWN.js";
+import "../chunk-DOLHX2AM.js";
+import "../chunk-QCZKXFCY.js";
 import "../chunk-7I3MTGOR.js";
 
 // src/commands/login.ts

package/dist/commands/logout.js

@@ -1,6 +1,6 @@
 import {
   clearSssAllowanceCache
-} from "../chunk-RULOELNF.js";
+} from "../chunk-D6ONN6VJ.js";
 import "../chunk-GRPLHUYC.js";
 import "../chunk-JQKKMUCT.js";
 import "../chunk-5FLTDWWP.js";
@@ -9,12 +9,12 @@ import {
 } from "../chunk-RIRDBSBG.js";
 import {
   getAuthClient
-} from "../chunk-Q7CHACT6.js";
+} from "../chunk-CWLLC46X.js";
 import "../chunk-TSPERKUS.js";
 import "../chunk-HDGD5FYX.js";
 import "../chunk-ZOC4GITL.js";
-import "../chunk-HIODF4QF.js";
-import "../chunk-SSV2KD3B.js";
+import "../chunk-DOLHX2AM.js";
+import "../chunk-QCZKXFCY.js";
 
 // src/commands/logout.ts
 function formatLogout(status) {

package/dist/commands/transfer.js

@@ -3,7 +3,7 @@ import {
   DEFAULT_TLD,
   DotNS,
   parseDomainName
-} from "../chunk-FJTZNSNU.js";
+} from "../chunk-2GKEZI5B.js";
 import "../chunk-SI2ZUOYD.js";
 import "../chunk-AYAVRPAP.js";
 import {
@@ -15,9 +15,9 @@ import {
   resolveEndpoints
 } from "../chunk-HDGD5FYX.js";
 import "../chunk-ZOC4GITL.js";
-import "../chunk-6HPDXI7E.js";
-import "../chunk-HIODF4QF.js";
-import "../chunk-SSV2KD3B.js";
+import "../chunk-IAPBFRWN.js";
+import "../chunk-DOLHX2AM.js";
+import "../chunk-QCZKXFCY.js";
 import "../chunk-7I3MTGOR.js";
 
 // src/commands/transfer.ts