bulletin-deploy 0.18.4 → 0.19.0-rc.1

package/README.md

@@ -71,7 +71,7 @@ Key options:
 | `--no-transfer-to-signedin-user` | When signed in, sign every DotNS tx with your mobile session instead of the default register-as-worker-then-hand-over flow. |
 | `--to <0xH160>` | Recipient address for the `transfer` subcommand. Defaults to the signed-in account. |
 | `--js-merkle` | Use pure-JS merkleization (no IPFS Kubo binary required). |
-| `--config <path>` | Explicit path to `bulletin-deploy.config.ts` for product deploys. |
+| `--config <path>` | Explicit path to `bulletin-deploy.config.ts` for product deploys. See [`docs/product-manifest.md`](docs/product-manifest.md). |
 | `--tag "..."` | Label the deploy in telemetry. |
 | `--version` | Print the installed version and exit. |
 

package/dist/auth-config.js

@@ -9,12 +9,12 @@ import {
   getPeopleChainEndpoints,
   hasPersistedSession,
   resolveBulletinEndpoints
-} from "./chunk-5MS64TTR.js";
+} from "./chunk-LE73Q6DA.js";
 import "./chunk-TSPERKUS.js";
-import "./chunk-HDGD5FYX.js";
+import "./chunk-NYNAUG4V.js";
 import "./chunk-ZOC4GITL.js";
-import "./chunk-STXAFUTQ.js";
-import "./chunk-E7PNP2NP.js";
+import "./chunk-QJJJA4PQ.js";
+import "./chunk-WN4Y7P24.js";
 export {
   DOT_DAPP_ID,
   DOT_DERIVATION_INDEX,

package/dist/bug-report.js

@@ -10,10 +10,10 @@ import {
   offerBugReport,
   scrubSecrets,
   setDeployContext
-} from "./chunk-A55GRHCX.js";
-import "./chunk-TTUXQMD3.js";
-import "./chunk-STXAFUTQ.js";
-import "./chunk-E7PNP2NP.js";
+} from "./chunk-NVWPB3S3.js";
+import "./chunk-Q3DZJVLB.js";
+import "./chunk-QJJJA4PQ.js";
+import "./chunk-WN4Y7P24.js";
 export {
   buildCliFlagsSummary,
   buildLabels,

package/dist/chain-health.js

@@ -3,9 +3,9 @@ import {
   DEFAULT_WINDOW_BLOCKS,
   MAX_SPANS_PER_SAMPLER,
   endpointHost
-} from "./chunk-5HFXRNCQ.js";
-import "./chunk-STXAFUTQ.js";
-import "./chunk-E7PNP2NP.js";
+} from "./chunk-KFUL2F3N.js";
+import "./chunk-QJJJA4PQ.js";
+import "./chunk-WN4Y7P24.js";
 export {
   ChainHealthSampler,
   DEFAULT_WINDOW_BLOCKS,

package/dist/{chunk-JGIPHFBT.js → chunk-7G554R3V.js}

@@ -4,10 +4,10 @@ import {
 } from "./chunk-5FLTDWWP.js";
 import {
   DEFAULT_MNEMONIC
-} from "./chunk-MJCXPKBL.js";
+} from "./chunk-NHH24DSU.js";
 import {
   DOT_PRODUCT_ID
-} from "./chunk-5MS64TTR.js";
+} from "./chunk-LE73Q6DA.js";
 
 // src/deploy-actors.ts
 var DEFAULT_WORKER_SURI = DEFAULT_MNEMONIC;

package/dist/{chunk-GZ4O5DIU.js → chunk-CQSTGES3.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-GRPLHUYC.js";
 import {
   DOT_DAPP_ID
-} from "./chunk-5MS64TTR.js";
+} from "./chunk-LE73Q6DA.js";
 
 // src/sss-allowance-cache.ts
 import { mkdir, readFile, writeFile, unlink } from "fs/promises";

package/dist/chunk-DMNLTQGA.js

@@ -0,0 +1,64 @@
+// src/manifest/compose.ts
+function composeRoot(config, iconCid) {
+  const labels = config.domain.split(".");
+  const selfLabel = (labels[labels.length - 2] ?? labels[0]).toLowerCase();
+  const trustedProducts = normalizeTrustedProducts(
+    config.trustedProducts,
+    selfLabel
+  );
+  return {
+    $v: 1,
+    displayName: config.displayName,
+    description: config.description,
+    icon: { cid: iconCid, format: config.icon.format },
+    ...trustedProducts !== void 0 ? { trustedProducts } : {}
+  };
+}
+function normalizeTrustedProducts(input, selfLabel) {
+  if (input === void 0) return void 0;
+  const ids = Object.keys(input).filter(
+    (id) => id.toLowerCase() !== selfLabel && input[id].length > 0
+  ).sort();
+  if (ids.length === 0) return void 0;
+  return Object.fromEntries(
+    ids.map((id) => [id, normalizeGrants(input[id])])
+  );
+}
+function normalizeGrants(grants) {
+  const unique = [...new Set(grants)];
+  return unique.includes("all") ? ["all"] : unique.sort();
+}
+function composeExecutable(exec) {
+  if (exec.kind === "app") {
+    return "manifest" in exec ? exec.manifest : { $v: 1, kind: "app", appVersion: exec.appVersion };
+  }
+  if (exec.kind === "widget") {
+    return {
+      $v: 1,
+      kind: "widget",
+      appVersion: exec.appVersion,
+      dimensions: exec.dimensions,
+      ...exec.description !== void 0 ? { description: exec.description } : {}
+    };
+  }
+  if (exec.kind === "funding") {
+    return {
+      $v: 1,
+      kind: "funding",
+      appVersion: exec.appVersion,
+      modes: exec.modes
+    };
+  }
+  return {
+    $v: 1,
+    kind: "worker",
+    appVersion: exec.appVersion,
+    entrypoint: exec.entrypoint,
+    includes: exec.includes
+  };
+}
+
+export {
+  composeRoot,
+  composeExecutable
+};

package/dist/{chunk-CVQ7DJHG.js → chunk-I5PNPQZO.js}

@@ -11,15 +11,53 @@ var EXECUTABLE_KINDS = [
   KIND_WORKER
 ];
 var FUNDING_MODES = ["CARD", "BANK", "CRYPTO"];
+var GRANTED_VALUES = ["all", "storage", "context"];
 var LABEL = String.raw`(?!-)[a-z0-9-]{1,63}(?<!-)`;
 var TLD_FRAGMENT = "[a-z]{2,63}";
 var DOMAIN_RE = new RegExp(`^${LABEL}(\\.${LABEL})*\\.${TLD_FRAGMENT}$`, "i");
+var PRODUCT_LABEL_RE = new RegExp(`^${LABEL}$`);
 function isPlainObject(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function isNonEmptyString(value) {
   return typeof value === "string" && value.length > 0;
 }
+function validateTrustedProducts(value, label, strict) {
+  if (!isPlainObject(value))
+    return [`${label} trustedProducts must be an object`];
+  const errors = [];
+  for (const [key, grants] of Object.entries(value)) {
+    if (key.length === 0) {
+      errors.push(`${label} trustedProducts key must not be empty`);
+    } else if (key.includes(".")) {
+      if (strict) {
+        errors.push(
+          `${label} trustedProducts key '${key}' must not include a TLD suffix (the host appends its own TLD) \u2014 use '${key.split(".")[0]}' instead of '${key}'`
+        );
+      }
+    } else if (key !== key.toLowerCase()) {
+      errors.push(`${label} trustedProducts key '${key}' must be lowercase`);
+    } else if (!PRODUCT_LABEL_RE.test(key)) {
+      errors.push(
+        `${label} trustedProducts key '${key}' must be a valid dotNS label`
+      );
+    }
+    if (!Array.isArray(grants)) {
+      errors.push(`${label} trustedProducts['${key}'] must be an array`);
+      continue;
+    }
+    if (strict) {
+      errors.push(
+        ...rejectUnknownEntries(
+          grants,
+          GRANTED_VALUES,
+          `${label} trustedProducts['${key}']`
+        )
+      );
+    }
+  }
+  return errors;
+}
 function isAppVersion(value) {
   if (!Array.isArray(value)) return false;
   if (value.length !== 3 && value.length !== 4) return false;
@@ -32,6 +70,11 @@ function isAppVersion(value) {
 function rejectUnknownFields(input, allowed, prefix) {
   return Object.keys(input).filter((key) => !allowed.includes(key)).map((key) => `${prefix}contains unknown field '${key}'`);
 }
+function rejectUnknownEntries(values, allowed, describe) {
+  return values.filter((value) => !allowed.includes(value)).map(
+    (value) => `${describe} entries must be one of ${allowed.join(", ")} (got ${JSON.stringify(value)})`
+  );
+}
 function validateRelativeEntrypoint(value, suffix, prefix) {
   if (!isNonEmptyString(value))
     return [`${prefix}entrypoint must be a non-empty string`];
@@ -246,9 +289,7 @@ function validateFundingFields(input, p) {
   if (!Array.isArray(input.modes) || input.modes.length === 0) {
     return [`${p}modes must be a non-empty array`];
   }
-  return input.modes.filter((mode) => !FUNDING_MODES.includes(mode)).map(
-    (mode) => `${p}modes entries must be one of ${FUNDING_MODES.join(", ")} (got ${JSON.stringify(mode)})`
-  );
+  return rejectUnknownEntries(input.modes, FUNDING_MODES, `${p}modes`);
 }
 function validateWorkerFields(input, p) {
   const errors = [];
@@ -294,6 +335,16 @@ function validateRootManifest(input) {
       );
     }
   }
+  if (input.trustedProducts !== void 0) {
+    errors.push(
+      ...validateTrustedProducts(
+        input.trustedProducts,
+        "root manifest",
+        /* strict */
+        false
+      )
+    );
+  }
   return errors.length === 0 ? { ok: true, value: input } : { ok: false, errors };
 }
 function validateExecutableManifest(input) {
@@ -363,6 +414,16 @@ function validateProductConfig(input) {
       );
     }
   }
+  if (input.trustedProducts !== void 0) {
+    errors.push(
+      ...validateTrustedProducts(
+        input.trustedProducts,
+        "product config",
+        /* strict */
+        true
+      )
+    );
+  }
   if (!Array.isArray(input.executables) || input.executables.length === 0) {
     errors.push("product config executables must be a non-empty array");
   } else {

package/dist/{chunk-7I3MTGOR.js → chunk-K5SP4OUC.js}

@@ -16,12 +16,28 @@ var DOTNS_ABI_PROFILES = {
     discriminator: "isPopIssued"
   }
 };
+var HIGHEST_VERIFIED_DOTNS_RELEASE = "0.8.0";
+function classifyDeclaredProtocolVersion(raw) {
+  if (!raw) return null;
+  const parts = raw.split("-")[0].split(".").slice(0, 3);
+  if (parts.length < 2 || !parts.every((part) => /^\d+$/.test(part))) return null;
+  return {
+    raw,
+    profile: "v0.6.0",
+    // Numeric collation, so 0.10.0 sorts above 0.8.0 rather than below it.
+    aboveVerifiedCeiling: parts.join(".").localeCompare(HIGHEST_VERIFIED_DOTNS_RELEASE, void 0, { numeric: true }) > 0
+  };
+}
 function classifyProtocolVersion(probe) {
   const { hasCode, pricingVersionOk, startingPriceOk, isPopIssuedOk } = probe;
   if (hasCode === false) {
     return {
       profile: null,
-      reason: "No contract deployed at this address \u2014 could not detect the DotNS ABI profile because no contract code was found here. Check environments.json / --contract config for this network."
+      reason: (
+        // No config pointer here: this function has no environment context, so it
+        // cannot know which file holds the address. The caller appends that.
+        "No contract deployed at this address: could not detect the DotNS ABI profile because no contract code was found here."
+      )
     };
   }
   if (pricingVersionOk) return { profile: isPopIssuedOk === true ? "v0.6.0" : "v0.5.8-rc1" };
@@ -143,6 +159,8 @@ function getAdapter(profile) {
 
 export {
   DOTNS_ABI_PROFILES,
+  HIGHEST_VERIFIED_DOTNS_RELEASE,
+  classifyDeclaredProtocolVersion,
   classifyProtocolVersion,
   OLD_CONTROLLER_ABI,
   V0_5_8_RC1_CONTROLLER_ABI,

package/dist/{chunk-5HFXRNCQ.js → chunk-KFUL2F3N.js}

@@ -1,7 +1,7 @@
 import {
   emitIntervalSpan,
   setDeployAttribute
-} from "./chunk-STXAFUTQ.js";
+} from "./chunk-QJJJA4PQ.js";
 
 // src/chain-health.ts
 var DEFAULT_WINDOW_BLOCKS = 10;

package/dist/{chunk-5MS64TTR.js → chunk-LE73Q6DA.js}

@@ -3,10 +3,10 @@ import {
 } from "./chunk-TSPERKUS.js";
 import {
   loadEnvironments
-} from "./chunk-HDGD5FYX.js";
+} from "./chunk-NYNAUG4V.js";
 import {
   VERSION
-} from "./chunk-STXAFUTQ.js";
+} from "./chunk-QJJJA4PQ.js";
 
 // src/auth-config.ts
 import { existsSync, readdirSync } from "fs";

package/dist/{chunk-MJCXPKBL.js → chunk-NHH24DSU.js}

@@ -7,13 +7,13 @@ import {
 } from "./chunk-AYAVRPAP.js";
 import {
   validateContractAddresses
-} from "./chunk-HDGD5FYX.js";
+} from "./chunk-NYNAUG4V.js";
 import {
   NonRetryableError
 } from "./chunk-ZOC4GITL.js";
 import {
   ChainHealthSampler
-} from "./chunk-5HFXRNCQ.js";
+} from "./chunk-KFUL2F3N.js";
 import {
   captureWarning,
   markCodePath,
@@ -21,14 +21,16 @@ import {
   setDeploySentryTag,
   truncateAddress,
   withSpan
-} from "./chunk-STXAFUTQ.js";
+} from "./chunk-QJJJA4PQ.js";
 import {
+  HIGHEST_VERIFIED_DOTNS_RELEASE,
   POP_CONTROLLER_PROBE_ABI,
   PROTOCOL_PROBE_LABEL,
+  classifyDeclaredProtocolVersion,
   classifyProtocolVersion,
   getAdapter,
   withTenPercentBuffer
-} from "./chunk-7I3MTGOR.js";
+} from "./chunk-K5SP4OUC.js";
 
 // src/dotns.ts
 import crypto from "crypto";
@@ -370,7 +372,8 @@ var DOTNS_REGISTRAR_ABI = [
 ];
 var DOTNS_REGISTRAR_TRANSFER_ABI = [
   ...DOTNS_REGISTRAR_ABI,
-  { inputs: [{ name: "from", type: "address" }, { name: "to", type: "address" }, { name: "tokenId", type: "uint256" }], name: "transferFrom", outputs: [], stateMutability: "payable", type: "function" }
+  { inputs: [{ name: "from", type: "address" }, { name: "to", type: "address" }, { name: "tokenId", type: "uint256" }], name: "transferFrom", outputs: [], stateMutability: "payable", type: "function" },
+  { inputs: [{ name: "tokenId", type: "uint256" }], name: "isSoulbound", outputs: [{ name: "", type: "bool" }], stateMutability: "view", type: "function" }
 ];
 var POP_RULES_ABI = [
   { inputs: [{ name: "name", type: "string" }], name: "classifyName", outputs: [{ name: "requirement", type: "uint8" }, { name: "message", type: "string" }], stateMutability: "pure", type: "function" },
@@ -437,7 +440,9 @@ var DOTNS_CONTENT_RESOLVER_ABI = [
 ];
 var DOTNS_PROTOCOL_REGISTRY_ABI = [
   { inputs: [], name: "tld", outputs: [{ name: "", type: "string" }], stateMutability: "view", type: "function" },
-  { inputs: [], name: "tldNode", outputs: [{ name: "", type: "bytes32" }], stateMutability: "view", type: "function" }
+  { inputs: [], name: "tldNode", outputs: [{ name: "", type: "bytes32" }], stateMutability: "view", type: "function" },
+  // v0.8.0 and up; reverts below it, empty until a release is declared.
+  { inputs: [], name: "protocolVersion", outputs: [{ name: "", type: "string" }], stateMutability: "view", type: "function" }
 ];
 var DOTNS_TEXT_RESOLVER_ABI = [
   { inputs: [{ name: "node", type: "bytes32" }, { name: "key", type: "string" }, { name: "value", type: "string" }], name: "setText", outputs: [], stateMutability: "nonpayable", type: "function" },
@@ -822,6 +827,9 @@ function isShortNameBand(baseLength) {
 function shortNamesClosedReason(label, baseLength, tld, environmentId) {
   return `${label}.${tld} has a ${baseLength}-character base and short names are not on sale on ${environmentId ?? "this environment"}. PopRules.shortNamesEnabled is off, which closes the 6 to 8 character band to every signer, whatever their personhood status. Use a base of 9 characters or more, for example ${exampleNoStatusLabel(label, tld)}.`;
 }
+function soulboundTransferReason(label, tld) {
+  return `${label}.${tld} is soulbound and cannot be transferred. It was issued through the PoP gateway, which binds a name to the account that received it. Nothing clears the flag, so no account can move this name at any point in the future.`;
+}
 function parseDomainName(input, tld = DEFAULT_TLD) {
   const configuredSuffix = `.${tld}`;
   let name;
@@ -1324,6 +1332,7 @@ var DotNS = class _DotNS {
   _isPhoneSigner = false;
   _localMnemonic = null;
   _contracts = CONTRACTS;
+  _contractSources = {};
   _nativeToEthRatio = NATIVE_TO_ETH_RATIO;
   _environmentId = null;
   // #1095: the resolved env's declared `network`, when connect() was given
@@ -1509,9 +1518,10 @@ var DotNS = class _DotNS {
       this.assetHubEndpoints = options.assetHubEndpoints;
     }
     if (options.contracts && Object.keys(options.contracts).length > 0) {
-      validateContractAddresses(options.contracts, options.environmentId ?? "unknown");
+      validateContractAddresses(options.contracts, options.environmentId ?? "unknown", options.contractSources);
       this._contracts = { ...CONTRACTS, ...options.contracts };
     }
+    this._contractSources = options.contractSources ?? {};
     if (options.environmentId) {
       this._environmentId = options.environmentId;
     }
@@ -1901,7 +1911,8 @@ var DotNS = class _DotNS {
     });
   }
   /**
-   * Low-level dry-run read against DotnsProtocolRegistry (tld() / tldNode()).
+   * Low-level dry-run read against DotnsProtocolRegistry (tld() / tldNode() /
+   * protocolVersion()).
    * Deliberately does NOT reuse contractCall/contractCallNullable: both of
    * those throw on a revert or on empty data, which would make "contract
    * doesn't support this function yet" indistinguishable from "the RPC call
@@ -2000,25 +2011,43 @@ var DotNS = class _DotNS {
     const popRulesAddress = this._contracts.POP_RULES;
     const popControllerAddress = this._contracts.DOTNS_POP_CONTROLLER;
     const env = this._environmentId ?? "unknown";
-    const [hasCodeResult, pricingVersionOk, startingPriceOk, isPopIssuedOk] = await Promise.all([
+    const [hasCodeResult, pricingVersionOk, startingPriceOk, isPopIssuedOk, declaredResult] = await Promise.all([
       this.clientWrapper.hasContractCode(popRulesAddress),
       this.probeViewFunctionOk(popRulesAddress, getAdapter("v0.5.8-rc1").popRulesAbi, "pricingVersion", []),
       this.probeViewFunctionOk(popRulesAddress, getAdapter("poprules-startingPrice").popRulesAbi, "startingPrice", []),
-      popControllerAddress ? this.probeViewFunctionOk(popControllerAddress, POP_CONTROLLER_PROBE_ABI, "isPopIssued", [PROTOCOL_PROBE_LABEL]) : Promise.resolve(null)
+      popControllerAddress ? this.probeViewFunctionOk(popControllerAddress, POP_CONTROLLER_PROBE_ABI, "isPopIssued", [PROTOCOL_PROBE_LABEL]) : Promise.resolve(null),
+      // Informational, so an RPC failure must not fail a connect the probes
+      // can classify. Caught here, not in dryRunRegistryString, which
+      // propagates on purpose for tld() — swallowing there picks a wrong TLD.
+      this.dryRunRegistryString("protocolVersion").catch(() => ({ ok: false }))
     ]);
     const classification = classifyProtocolVersion({ hasCode: hasCodeResult, pricingVersionOk, startingPriceOk, isPopIssuedOk });
     if (classification.profile === null) {
-      throw new Error(`${env} (${dotnsContractName(popRulesAddress, this._contracts)} ${popRulesAddress}): ${classification.reason}`);
+      throw new Error(`${env} (${dotnsContractName(popRulesAddress, this._contracts)} ${popRulesAddress}): ${classification.reason}${hasCodeResult === true ? "" : this.contractSourceHint("POP_RULES")}`);
     }
     const profile = classification.profile;
+    const declared = classifyDeclaredProtocolVersion(declaredResult.ok ? declaredResult.value : null);
     this._protocolVersion = profile;
     this._adapter = getAdapter(profile);
     setDeployAttribute("deploy.dotns.protocol_version", profile);
-    console.log(`   DotNS ABI profile ${profile} detected on ${env}`);
+    setDeployAttribute("deploy.dotns.declared_release", declaredResult.ok ? declaredResult.value || "undeclared" : "unavailable");
+    console.log(`   DotNS ABI profile ${profile} detected on ${env}${declared ? ` (declares DotNS ${declared.raw})` : ""}`);
+    if (declared && declared.profile !== profile) {
+      console.log(`   NOTE: ${env} declares DotNS ${declared.raw}, which is the ${declared.profile} profile, but the probes detect ${profile}. Using ${profile}: the probes read the ABI that is actually deployed.`);
+    }
+    if (declared?.aboveVerifiedCeiling) {
+      console.log(`   WARNING: ${env} declares DotNS ${declared.raw}, newer than ${HIGHEST_VERIFIED_DOTNS_RELEASE} \u2014 the newest release whose ABI has been checked against this client. Continuing on the ${profile} profile, which is correct only if that release changed nothing bulletin-deploy calls. Re-run the upstream ABI diff.`);
+    }
     if (profile === "v0.5.8-rc1" && pricingVersionOk && isPopIssuedOk === null) {
       console.log(`   NOTE: could not confirm whether ${env} is v0.5.8-rc1 or v0.6.0 \u2014 DOTNS_POP_CONTROLLER has no configured address here, so the isPopIssued discriminator probe was never attempted. Defaulting to v0.5.8-rc1 label semantics (registration itself is unaffected: both profiles share an identical ABI/adapter).`);
     }
   }
+  // Ends an address error with where that address came from. A key with no
+  // recorded source fell through to the defaults compiled into this module.
+  contractSourceHint(name) {
+    const src = this._contractSources[name];
+    return src ? ` This address came from ${src}.` : ` No environment or --contract supplied ${name}, so this is the built-in default address.`;
+  }
   async contractCall(contractAddress, contractAbi, functionName, args = []) {
     this.ensureConnected();
     if (!this.clientWrapper) throw new Error("contractCall: polkadot-api client not available");
@@ -2050,12 +2079,12 @@ var DotNS = class _DotNS {
       const env = this._environmentId ?? "(unset)";
       if (hasCode === false) {
         throw new Error(
-          `No contract deployed at ${contractAddress} (${name}) env=${env} \u2014 the dry-run call to ${functionName} returned empty success data, which on pallet-revive means the target address has no contract code. Check environments.json / --contract config for this network.`
+          `No contract deployed at ${contractAddress} (${name}) env=${env} \u2014 the dry-run call to ${functionName} returned empty success data, which on pallet-revive means the target address has no contract code.${this.contractSourceHint(name)}`
         );
       }
       if (hasCode === null) {
         throw new Error(
-          `Contract call returned empty data \u2014 contract=${name} (${contractAddress}) env=${env} functionName=${functionName}. Could not verify whether contract code exists at this address (runtime code-presence query failed); investigate the contract/ABI or the configured address.`
+          `Contract call returned empty data \u2014 contract=${name} (${contractAddress}) env=${env} functionName=${functionName}. Could not verify whether contract code exists at this address (runtime code-presence query failed); investigate the contract/ABI or the configured address.${this.contractSourceHint(name)}`
         );
       }
       throw new Error(
@@ -2350,6 +2379,21 @@ var DotNS = class _DotNS {
     if (authorised !== null) return { authorised, owner };
     return { authorised: owner !== null && owner.toLowerCase() === account.toLowerCase(), owner };
   }
+  /** False when the registrar gave no usable answer, including one too old to
+   *  have the function at all: let the chain refuse rather than guess. A read
+   *  that never completed propagates, so a network blip is not "not soulbound". */
+  async readIsSoulbound(tokenId) {
+    try {
+      return await withTimeout(
+        this.contractCall(this._contracts.DOTNS_REGISTRAR, DOTNS_REGISTRAR_TRANSFER_ABI, "isSoulbound", [tokenId]),
+        3e4,
+        "isSoulbound"
+      ) === true;
+    } catch (e) {
+      if (READ_NEVER_COMPLETED_RE.test(e?.message ?? String(e))) throw e;
+      return false;
+    }
+  }
   /** Live transfer-fee quote. transferFloor is a pure PopRules view — it
    *  classifies the label and reads both tiers, so it works BEFORE the name is
    *  registered (unlike quoteTransferFee, which reverts on an unregistered token). */
@@ -2379,6 +2423,9 @@ var DotNS = class _DotNS {
     if (owner.toLowerCase() !== this.evmAddress.toLowerCase()) {
       throw new Error(`Cannot transfer ${validated}.${this._tld}: it is owned by ${owner}, not the worker ${this.evmAddress}.`);
     }
+    if (await this.readIsSoulbound(tokenId)) {
+      throw new NonRetryableError(soulboundTransferReason(validated, this._tld));
+    }
     const { feeWei, feeNative } = await this.quoteTransferFloorNative(validated, this.evmAddress, toH160);
     const txRes = await this.contractTransaction(
       this._contracts.DOTNS_REGISTRAR,
@@ -3808,6 +3855,7 @@ export {
   classifyDotnsLabel,
   canRegister,
   shortNamesClosedReason,
+  soulboundTransferReason,
   parseDomainName,
   parseProofOfPersonhoodStatus,
   popStatusName,

package/dist/{chunk-WEVSXHII.js → chunk-NKDGBZBP.js}

@@ -1,6 +1,6 @@
 import {
   validateProductConfig
-} from "./chunk-CVQ7DJHG.js";
+} from "./chunk-I5PNPQZO.js";
 import {
   NonRetryableError
 } from "./chunk-ZOC4GITL.js";

package/dist/{chunk-A55GRHCX.js → chunk-NVWPB3S3.js}

@@ -2,15 +2,15 @@ import {
   classifyErrorArea,
   isInteractive,
   promptYesNo
-} from "./chunk-TTUXQMD3.js";
+} from "./chunk-Q3DZJVLB.js";
 import {
   VERSION,
   getCurrentSentryTraceId,
   resolveIssueRepoSlug
-} from "./chunk-STXAFUTQ.js";
+} from "./chunk-QJJJA4PQ.js";
 import {
   package_default
-} from "./chunk-E7PNP2NP.js";
+} from "./chunk-WN4Y7P24.js";
 
 // src/bug-report.ts
 import { execSync, execFileSync } from "child_process";

package/dist/{chunk-HDGD5FYX.js → chunk-NYNAUG4V.js}

@@ -509,15 +509,23 @@ var ZERO_ADDRESS = "0x" + "0".repeat(40);
 function isValidContractAddress(addr) {
   return typeof addr === "string" && EVM_ADDRESS_RE.test(addr) && addr.toLowerCase() !== ZERO_ADDRESS;
 }
-function validateContractAddresses(contracts, envId) {
+function validateContractAddresses(contracts, envId, sources) {
   for (const [name, addr] of Object.entries(contracts)) {
     if (!isValidContractAddress(addr)) {
       throw new Error(
-        `Invalid contract address for ${name} in environment ${envId}: ${addr}. Check assets/environments.json against https://github.com/paritytech/dotns#deployments`
+        `Invalid contract address for ${name} in environment ${envId}: ${addr}. ` + (sources?.[name] ? `This address came from ${sources[name]}.` : `Check assets/environments.json against https://github.com/paritytech/dotns#deployments`)
       );
     }
   }
 }
+function describeContractSources(envContracts, cliContracts, source, userFilePath, envId) {
+  const env = envId ?? "unknown";
+  const docOrigin = source === "file" && userFilePath ? `${userFilePath} (environment ${env})` : source === "hardcoded-fallback" ? `the built-in fallback for ${env}` : `assets/environments.json shipped with bulletin-deploy (environment ${env})`;
+  const out = {};
+  for (const key of Object.keys(envContracts)) out[key] = docOrigin;
+  for (const [key, addr] of Object.entries(cliContracts ?? {})) out[key] = `the --contract flag or contracts option (${key}=${addr})`;
+  return out;
+}
 function isValidDoc(value) {
   if (!value || typeof value !== "object") return false;
   const v = value;
@@ -594,13 +602,13 @@ async function loadEnvironments(opts = {}) {
     for (const env of merged.environments) {
       if (env.contracts && Object.keys(env.contracts).length > 0) {
         try {
-          validateContractAddresses(env.contracts, env.id);
+          validateContractAddresses(env.contracts, env.id, describeContractSources(env.contracts, void 0, "file", userFilePath, env.id));
         } catch (err) {
           warn(`bulletin-deploy: Warning: ${err?.message ?? err}`);
         }
       }
     }
-    return { doc: merged, source: "file" };
+    return { doc: merged, source: "file", userFilePath };
   }
   const bundled = await readBundled(bundledPath, capture);
   if (bundled) return { doc: bundled, source: "bundled" };
@@ -722,6 +730,7 @@ export {
   defaultBundledPath,
   isValidContractAddress,
   validateContractAddresses,
+  describeContractSources,
   deepMergeEnvironments,
   loadEnvironments,
   resolveEndpoints,