bulletin-deploy 0.18.4 → 0.19.0

package/dist/dotns-protocol.d.ts

@@ -22,6 +22,37 @@ interface DotnsAbiProfileInfo {
     discriminator: string;
 }
 declare const DOTNS_ABI_PROFILES: Record<DotnsAbiProfile, DotnsAbiProfileInfo>;
+/**
+ * Newest DotNS release whose ABI has been diffed against what this client
+ * calls. Every release from v0.6.0 through this one is the `v0.6.0` profile:
+ * PopRules is byte-identical across them and the registration tuple is
+ * unchanged, and the two differences that do exist (the `persist` field on
+ * setSubnodeOwner, then its controller-only gate) have their own probes.
+ *
+ * Raise it only after re-running that diff. A new generation needing its own
+ * profile also needs a release range here — this mapping is keyed by release,
+ * so adding to DotnsAbiProfile alone will not fail the build the way
+ * DOTNS_ABI_PROFILES and classifyLabelStatus do.
+ */
+declare const HIGHEST_VERIFIED_DOTNS_RELEASE = "0.8.0";
+/** A usable `protocolVersion()` answer. */
+interface DeclaredProtocolVersion {
+    raw: string;
+    profile: DotnsAbiProfile;
+    aboveVerifiedCeiling: boolean;
+}
+/**
+ * Classify DotnsProtocolRegistry.protocolVersion(), added in DotNS v0.8.0
+ * (#1462). `null` means the probes have to decide instead: no such function
+ * below v0.8.0, an empty string until an owner declares one, or junk.
+ *
+ * Junk is reachable — setProtocolVersion only requires a leading digit and
+ * `[a-zA-Z0-9.-]`, leaving full semver validation to the tooling, so "0.8",
+ * "9abc" and "0.8.0.1" all store. The pre-release suffix is dropped because a
+ * deploy declares the rc tag before the owner re-declares the final one
+ * (dotns RELEASE_ARTIFACTS.md) and both are the same ABI.
+ */
+declare function classifyDeclaredProtocolVersion(raw: string | null | undefined): DeclaredProtocolVersion | null;
 /** Inputs to classifyProtocolVersion — the live dry-run results from connect(). */
 interface DotnsProtocolProbe {
     /**
@@ -445,4 +476,4 @@ declare const PROTOCOL_PROBE_LABEL = "probelabel";
 declare function withTenPercentBuffer(priceWei: bigint): bigint;
 declare function getAdapter(profile: DotnsAbiProfile): DotnsProtocolAdapter;
 
-export { DOTNS_ABI_PROFILES, type DotnsAbiProfile, type DotnsAbiProfileInfo, type DotnsDepositCall, type DotnsPricingInput, type DotnsProtocolAdapter, type DotnsProtocolClassification, type DotnsProtocolProbe, type DotnsRegistrationBase, OLD_CONTROLLER_ABI, OLD_POP_RULES_ABI, POP_CONTROLLER_PROBE_ABI, PROTOCOL_PROBE_LABEL, V0_5_8_RC1_CONTROLLER_ABI, V0_5_8_RC1_POP_RULES_ABI, classifyProtocolVersion, getAdapter, withTenPercentBuffer };
+export { DOTNS_ABI_PROFILES, type DeclaredProtocolVersion, type DotnsAbiProfile, type DotnsAbiProfileInfo, type DotnsDepositCall, type DotnsPricingInput, type DotnsProtocolAdapter, type DotnsProtocolClassification, type DotnsProtocolProbe, type DotnsRegistrationBase, HIGHEST_VERIFIED_DOTNS_RELEASE, OLD_CONTROLLER_ABI, OLD_POP_RULES_ABI, POP_CONTROLLER_PROBE_ABI, PROTOCOL_PROBE_LABEL, V0_5_8_RC1_CONTROLLER_ABI, V0_5_8_RC1_POP_RULES_ABI, classifyDeclaredProtocolVersion, classifyProtocolVersion, getAdapter, withTenPercentBuffer };

package/dist/dotns-protocol.js

@@ -1,23 +1,27 @@
 import {
   DOTNS_ABI_PROFILES,
+  HIGHEST_VERIFIED_DOTNS_RELEASE,
   OLD_CONTROLLER_ABI,
   OLD_POP_RULES_ABI,
   POP_CONTROLLER_PROBE_ABI,
   PROTOCOL_PROBE_LABEL,
   V0_5_8_RC1_CONTROLLER_ABI,
   V0_5_8_RC1_POP_RULES_ABI,
+  classifyDeclaredProtocolVersion,
   classifyProtocolVersion,
   getAdapter,
   withTenPercentBuffer
-} from "./chunk-7I3MTGOR.js";
+} from "./chunk-K5SP4OUC.js";
 export {
   DOTNS_ABI_PROFILES,
+  HIGHEST_VERIFIED_DOTNS_RELEASE,
   OLD_CONTROLLER_ABI,
   OLD_POP_RULES_ABI,
   POP_CONTROLLER_PROBE_ABI,
   PROTOCOL_PROBE_LABEL,
   V0_5_8_RC1_CONTROLLER_ABI,
   V0_5_8_RC1_POP_RULES_ABI,
+  classifyDeclaredProtocolVersion,
   classifyProtocolVersion,
   getAdapter,
   withTenPercentBuffer

package/dist/dotns.d.ts

@@ -29,7 +29,8 @@ interface DotNSConnectOptions {
     nativeToEthRatio?: bigint;
     contracts?: Record<string, string>;
     /** Optional environment ID (e.g. "paseo-next-v2"). Used in shell command examples in error messages. */
-    environmentId?: string;
+    environmentId?: string; /** Per-contract origin phrases from describeContractSources, named in address errors. */
+    contractSources?: Record<string, string>;
     /**
      * #1095: the resolved env's environments.json `network` field
      * ("testnet" | "mainnet"). When set, this is AUTHORITATIVE for isTestnet()
@@ -493,6 +494,7 @@ declare function classifyDotnsLabel(label: string, tld?: string, profile?: Dotns
 };
 declare function canRegister(requiredStatus: number, userStatus: number): boolean;
 declare function shortNamesClosedReason(label: string, baseLength: number, tld: string, environmentId: string | null | undefined): string;
+declare function soulboundTransferReason(label: string, tld: string): string;
 declare function parseDomainName(input: string, tld?: string): ParsedDomainName;
 declare function parseProofOfPersonhoodStatus(status: string): number;
 declare function popStatusName(status: number): string;
@@ -636,6 +638,7 @@ declare class DotNS {
     private _isPhoneSigner;
     private _localMnemonic;
     private _contracts;
+    private _contractSources;
     private _nativeToEthRatio;
     private _environmentId;
     private _network;
@@ -763,7 +766,8 @@ declare class DotNS {
     } | null>;
     private submitTransfer;
     /**
-     * Low-level dry-run read against DotnsProtocolRegistry (tld() / tldNode()).
+     * Low-level dry-run read against DotnsProtocolRegistry (tld() / tldNode() /
+     * protocolVersion()).
      * Deliberately does NOT reuse contractCall/contractCallNullable: both of
      * those throw on a revert or on empty data, which would make "contract
      * doesn't support this function yet" indistinguishable from "the RPC call
@@ -838,6 +842,7 @@ declare class DotNS {
      * address.
      */
     private detectProtocolVersion;
+    private contractSourceHint;
     contractCall(contractAddress: string, contractAbi: readonly any[], functionName: string, args?: any[]): Promise<any>;
     /**
      * Like contractCall, but returns null when the chain replies with empty data
@@ -946,6 +951,10 @@ declare class DotNS {
      * `authorised`.
      */
     checkNodeAuthorization(node: string, account: string): Promise<AuthorizationResult>;
+    /** False when the registrar gave no usable answer, including one too old to
+     *  have the function at all: let the chain refuse rather than guess. A read
+     *  that never completed propagates, so a network blip is not "not soulbound". */
+    private readIsSoulbound;
     /** Live transfer-fee quote. transferFloor is a pure PopRules view — it
      *  classifies the label and reads both tiers, so it works BEFORE the name is
      *  registered (unlike quoteTransferFee, which reverts on an unregistered token). */
@@ -1131,4 +1140,4 @@ declare class DotNS {
 }
 declare const dotns: DotNS;
 
-export { ATTR_TX_RESOLUTION_KIND, type AliasAccountClassification, type AliasAccountState, type AuthorizationResult, CONNECTION_TIMEOUT_MS, CONTENTHASH_VERIFY_ATTEMPTS, CONTRACTS, ContractDryRunRevertError, DECIMALS, DEFAULT_DOTNS_PROFILE, DEFAULT_MNEMONIC, DEFAULT_TLD, DOTNS_BEST_BLOCK_GRACE_MS, DOTNS_NONCE_CONTENTION_MAX_ATTEMPTS, DOTNS_TX_MAX_ATTEMPTS, type DomainLabelAlternative, DotNS, type DotNSConnectOptions, type DotnsPreflightResult, type DotnsSuccessAction, KNOWN_TLDS, MINIMUM_REGISTER_STORAGE_DEPOSIT, NATIVE_TO_ETH_RATIO, NONCE_ADVANCE_VERIFY_RETRIES, NONCE_ADVANCE_VERIFY_RETRY_INTERVAL_MS, OPERATION_TIMEOUT_MS, type OwnershipResult, PHONE_APPROVAL_MS, PHONE_SILENCE_MAX_REARMS, type ParsedDomainName, type PhoneSignatureStep, PhoneSilenceNonRetryableError, type PriceValidationResult, ProofOfPersonhoodStatus, REVIVE_ADDRESS_ATTEMPTS, RPC_ENDPOINTS, type Registrability, type RegistryDryRunResult, ReviveClientWrapper, TX_CHAIN_TIME_BUDGET_MS, TX_KIND_BEST_BLOCK, TX_KIND_HASH, TX_KIND_NONCE_ADVANCED, TX_KIND_SKIPPED, TX_NO_PROGRESS_MS, TX_TIMEOUT_MS, TX_WALL_CLOCK_CEILING_MS, type TxResolution, VERIFY_EFFECT_CHAIN_SECONDS, WS_HEARTBEAT_TIMEOUT_MS, WatcherSilentNoEventError, __formatContractDryRunFailureForTest, assertNotZeroRecipient, bufferedWeiToNative, buildLabelAlternatives, canRegister, checkTldNodeConsistency, classifyAliasAccountRow, classifyDotnsLabel, classifyRegistrability, classifyTxRetryDecision, classifyWatcherSilentFastFail, computeDomainNode, computeDomainTokenId, computeSubnodeIds, convertToHexString, convertWeiToNative, countTrailingDigits, decideRegistrabilityOutcome, dotns, dotnsRetryBackoffMs, feeFloorFor, fetchNonce, fmtPas, formatDispatchError, formatPersonhoodRemediation, formatPopShortfallReason, formatUnregistrableReason, isCommitmentMature, isCommitmentTimingBarerevert, isNonceContentionAmbiguous, makeRetryStatusFilter, nonceContentionBackoffMs, normalizeOnChainTld, parseDomainName, parseProofOfPersonhoodStatus, pickVerifyEndpoint, popStatusName, reacquireNonceOnContention, registerDepositWei, resolveTldFromRegistryResult, sanitizeDomainLabel, shortNamesClosedReason, shouldRegateBeforeResign, shouldRetryTxAttempt, shouldSkipTextWrite, stripTldSuffix, stripTrailingDigits, validateDomainLabel, verifyEffectWithGrace, verifyNonceAdvanced, weiToNative, withRetry };
+export { ATTR_TX_RESOLUTION_KIND, type AliasAccountClassification, type AliasAccountState, type AuthorizationResult, CONNECTION_TIMEOUT_MS, CONTENTHASH_VERIFY_ATTEMPTS, CONTRACTS, ContractDryRunRevertError, DECIMALS, DEFAULT_DOTNS_PROFILE, DEFAULT_MNEMONIC, DEFAULT_TLD, DOTNS_BEST_BLOCK_GRACE_MS, DOTNS_NONCE_CONTENTION_MAX_ATTEMPTS, DOTNS_TX_MAX_ATTEMPTS, type DomainLabelAlternative, DotNS, type DotNSConnectOptions, type DotnsPreflightResult, type DotnsSuccessAction, KNOWN_TLDS, MINIMUM_REGISTER_STORAGE_DEPOSIT, NATIVE_TO_ETH_RATIO, NONCE_ADVANCE_VERIFY_RETRIES, NONCE_ADVANCE_VERIFY_RETRY_INTERVAL_MS, OPERATION_TIMEOUT_MS, type OwnershipResult, PHONE_APPROVAL_MS, PHONE_SILENCE_MAX_REARMS, type ParsedDomainName, type PhoneSignatureStep, PhoneSilenceNonRetryableError, type PriceValidationResult, ProofOfPersonhoodStatus, REVIVE_ADDRESS_ATTEMPTS, RPC_ENDPOINTS, type Registrability, type RegistryDryRunResult, ReviveClientWrapper, TX_CHAIN_TIME_BUDGET_MS, TX_KIND_BEST_BLOCK, TX_KIND_HASH, TX_KIND_NONCE_ADVANCED, TX_KIND_SKIPPED, TX_NO_PROGRESS_MS, TX_TIMEOUT_MS, TX_WALL_CLOCK_CEILING_MS, type TxResolution, VERIFY_EFFECT_CHAIN_SECONDS, WS_HEARTBEAT_TIMEOUT_MS, WatcherSilentNoEventError, __formatContractDryRunFailureForTest, assertNotZeroRecipient, bufferedWeiToNative, buildLabelAlternatives, canRegister, checkTldNodeConsistency, classifyAliasAccountRow, classifyDotnsLabel, classifyRegistrability, classifyTxRetryDecision, classifyWatcherSilentFastFail, computeDomainNode, computeDomainTokenId, computeSubnodeIds, convertToHexString, convertWeiToNative, countTrailingDigits, decideRegistrabilityOutcome, dotns, dotnsRetryBackoffMs, feeFloorFor, fetchNonce, fmtPas, formatDispatchError, formatPersonhoodRemediation, formatPopShortfallReason, formatUnregistrableReason, isCommitmentMature, isCommitmentTimingBarerevert, isNonceContentionAmbiguous, makeRetryStatusFilter, nonceContentionBackoffMs, normalizeOnChainTld, parseDomainName, parseProofOfPersonhoodStatus, pickVerifyEndpoint, popStatusName, reacquireNonceOnContention, registerDepositWei, resolveTldFromRegistryResult, sanitizeDomainLabel, shortNamesClosedReason, shouldRegateBeforeResign, shouldRetryTxAttempt, shouldSkipTextWrite, soulboundTransferReason, stripTldSuffix, stripTrailingDigits, validateDomainLabel, verifyEffectWithGrace, verifyNonceAdvanced, weiToNative, withRetry };

package/dist/dotns.js

@@ -81,6 +81,7 @@ import {
   shouldRegateBeforeResign,
   shouldRetryTxAttempt,
   shouldSkipTextWrite,
+  soulboundTransferReason,
   stripTldSuffix,
   stripTrailingDigits,
   validateDomainLabel,
@@ -88,15 +89,15 @@ import {
   verifyNonceAdvanced,
   weiToNative,
   withRetry
-} from "./chunk-MJCXPKBL.js";
+} from "./chunk-K6OAMQQU.js";
 import "./chunk-SI2ZUOYD.js";
 import "./chunk-AYAVRPAP.js";
-import "./chunk-HDGD5FYX.js";
+import "./chunk-NYNAUG4V.js";
 import "./chunk-ZOC4GITL.js";
-import "./chunk-5HFXRNCQ.js";
-import "./chunk-STXAFUTQ.js";
-import "./chunk-E7PNP2NP.js";
-import "./chunk-7I3MTGOR.js";
+import "./chunk-IQUS43B7.js";
+import "./chunk-JZTZWMP7.js";
+import "./chunk-RBI2B5SW.js";
+import "./chunk-K5SP4OUC.js";
 export {
   ATTR_TX_RESOLUTION_KIND,
   CONNECTION_TIMEOUT_MS,
@@ -180,6 +181,7 @@ export {
   shouldRegateBeforeResign,
   shouldRetryTxAttempt,
   shouldSkipTextWrite,
+  soulboundTransferReason,
   stripTldSuffix,
   stripTrailingDigits,
   validateDomainLabel,

package/dist/environments.d.ts

@@ -64,6 +64,8 @@ type EnvironmentsSource = "bundled" | "hardcoded-fallback" | "file";
 interface LoadResult {
     doc: EnvironmentsDoc;
     source: EnvironmentsSource;
+    /** Set when source is "file": the path that was read. */
+    userFilePath?: string;
 }
 interface LoadOptions {
     bundledPath?: string;
@@ -108,7 +110,8 @@ declare function isValidContractAddress(addr: unknown): boolean;
  * @param contracts  The `contracts` record from an environment entry.
  * @param envId      The environment ID, used in the error message.
  */
-declare function validateContractAddresses(contracts: Record<string, string>, envId: string): void;
+declare function validateContractAddresses(contracts: Record<string, string>, envId: string, sources?: Record<string, string>): void;
+declare function describeContractSources(envContracts: Record<string, string>, cliContracts: Record<string, string> | undefined, source: string | undefined, userFilePath: string | undefined, envId: string | undefined): Record<string, string>;
 /**
  * Deep-merges a user-supplied partial EnvironmentsDoc over a base doc.
  *
@@ -133,4 +136,4 @@ interface EnvironmentListing {
 declare function listEnvironments(doc: EnvironmentsDoc): EnvironmentListing[];
 declare function formatEnvironmentTable(rows: EnvironmentListing[]): string;
 
-export { type Chain, type ChainEndpoint, DEFAULT_ENV_ID, type Environment, type EnvironmentListing, type EnvironmentsDoc, type EnvironmentsSource, type LoadOptions, type LoadResult, type PopSelfServeConfig, type ResolvedEndpoints, deepMergeEnvironments, defaultBundledPath, formatEnvironmentTable, getPopSelfServeConfig, isValidContractAddress, listEnvironments, loadEnvironments, resolveEndpoints, validateContractAddresses };
+export { type Chain, type ChainEndpoint, DEFAULT_ENV_ID, type Environment, type EnvironmentListing, type EnvironmentsDoc, type EnvironmentsSource, type LoadOptions, type LoadResult, type PopSelfServeConfig, type ResolvedEndpoints, deepMergeEnvironments, defaultBundledPath, describeContractSources, formatEnvironmentTable, getPopSelfServeConfig, isValidContractAddress, listEnvironments, loadEnvironments, resolveEndpoints, validateContractAddresses };

package/dist/environments.js

@@ -2,6 +2,7 @@ import {
   DEFAULT_ENV_ID,
   deepMergeEnvironments,
   defaultBundledPath,
+  describeContractSources,
   formatEnvironmentTable,
   getPopSelfServeConfig,
   isValidContractAddress,
@@ -9,12 +10,13 @@ import {
   loadEnvironments,
   resolveEndpoints,
   validateContractAddresses
-} from "./chunk-HDGD5FYX.js";
+} from "./chunk-NYNAUG4V.js";
 import "./chunk-ZOC4GITL.js";
 export {
   DEFAULT_ENV_ID,
   deepMergeEnvironments,
   defaultBundledPath,
+  describeContractSources,
   formatEnvironmentTable,
   getPopSelfServeConfig,
   isValidContractAddress,

package/dist/index.d.ts

@@ -10,7 +10,7 @@ export { ComputeStatsInput, IncrementalStats, computeStats, renderSummary, telem
 export { Chain, ChainEndpoint, DEFAULT_ENV_ID, Environment, EnvironmentListing, EnvironmentsDoc, EnvironmentsSource, LoadOptions, LoadResult, ResolvedEndpoints, deepMergeEnvironments, defaultBundledPath, formatEnvironmentTable, isValidContractAddress, listEnvironments, loadEnvironments, resolveEndpoints, validateContractAddresses } from './environments.js';
 export { RunState, RunStatus, VERSION, loadRunState, probablyOomRssMb, resolveStateDir, shouldShowOomHint, shouldSkipStaleWarning, stateFilePath, writeRunState } from './run-state.js';
 import { ProductConfig } from './manifest/types.js';
-export { AppExecutableConfig, AppExecutableConfigV1, AppExecutableConfigV2, AppManifest, AppManifestV1, AppManifestV2, AppVersion, AudioRequirement, DeviceInputRequirement, ExecutableConfig, ExecutableKind, ExecutableManifest, FundingExecutableConfig, FundingManifest, FundingMode, GraphicsRequirement, Icon, IconConfig, IconFormat, PolkaVmAppManifestV2, PolkaVmRuntime, RootManifest, WebAppManifestV2, WebRuntime, WidgetDimensions, WidgetExecutableConfig, WidgetManifest, WorkerExecutableConfig, WorkerIncludes, WorkerManifest, defineConfig } from './manifest/types.js';
+export { AppExecutableConfig, AppExecutableConfigV1, AppExecutableConfigV2, AppManifest, AppManifestV1, AppManifestV2, AppVersion, AudioRequirement, DeviceInputRequirement, ExecutableConfig, ExecutableKind, ExecutableManifest, FundingExecutableConfig, FundingManifest, FundingMode, Granted, GraphicsRequirement, Icon, IconConfig, IconFormat, PolkaVmAppManifestV2, PolkaVmRuntime, RootManifest, WebAppManifestV2, WebRuntime, WidgetDimensions, WidgetExecutableConfig, WidgetManifest, WorkerExecutableConfig, WorkerIncludes, WorkerManifest, defineConfig } from './manifest/types.js';
 export { ValidationErr, ValidationOk, ValidationResult, validateExecutableManifest, validateProductConfig, validateRootManifest } from './manifest/schema.js';
 export { BudgetCheck, DEFAULT_TEXT_RECORD_BUDGET_BYTES, PLACEHOLDER_CID, PessimisticSizeReport, assertWithinBudget, getTextRecordBudgetBytes, pessimisticSizePreflight } from './manifest/byte-budget.js';
 import { LoadProductConfigOptions, LoadedProductConfig } from './manifest/config-load.js';

package/dist/index.js

@@ -1,38 +1,39 @@
+import {
+  defineConfig
+} from "./chunk-GZD2UFLR.js";
 import {
   checkProductConfigFilesExist,
   preflightProductConfig,
   publishManifest,
   verifyEmbeddedAppManifests,
   writeEmbeddedAppManifests
-} from "./chunk-WCGCM45C.js";
+} from "./chunk-G2Z4U4OQ.js";
 import {
   DEFAULT_TEXT_RECORD_BUDGET_BYTES,
   PLACEHOLDER_CID,
   assertWithinBudget,
   getTextRecordBudgetBytes,
   pessimisticSizePreflight
-} from "./chunk-RXV677CJ.js";
+} from "./chunk-YTRNJMI4.js";
+import "./chunk-DMNLTQGA.js";
 import {
   formatConfigLoadError,
   loadProductConfig,
   tryLoadProductConfig
-} from "./chunk-WEVSXHII.js";
+} from "./chunk-NKDGBZBP.js";
 import {
   validateExecutableManifest,
   validateProductConfig,
   validateRootManifest
-} from "./chunk-CVQ7DJHG.js";
-import {
-  defineConfig
-} from "./chunk-GZD2UFLR.js";
+} from "./chunk-I5PNPQZO.js";
 import {
   deploy,
   merkleizeJS,
   merkleizeWithStableOrder
-} from "./chunk-K23BCUAG.js";
+} from "./chunk-6H3GBTBA.js";
 import "./chunk-HNJWIY55.js";
 import "./chunk-M5AKL3FL.js";
-import "./chunk-GZ4O5DIU.js";
+import "./chunk-A7MFUE2N.js";
 import "./chunk-GRPLHUYC.js";
 import {
   computeStats,
@@ -55,13 +56,13 @@ import {
   isVolatilePath,
   parseManifest
 } from "./chunk-WPC2PUCV.js";
-import "./chunk-A55GRHCX.js";
-import "./chunk-TTUXQMD3.js";
+import "./chunk-R7HIFZDM.js";
+import "./chunk-G664B5Y4.js";
 import {
   probeChunks
-} from "./chunk-4NIOCONP.js";
+} from "./chunk-J6N3W3KJ.js";
 import "./chunk-C2TS5MER.js";
-import "./chunk-JGIPHFBT.js";
+import "./chunk-KXQVZWDW.js";
 import "./chunk-JQKKMUCT.js";
 import "./chunk-5FLTDWWP.js";
 import "./chunk-RIRDBSBG.js";
@@ -70,7 +71,7 @@ import {
   DotNS,
   parseDomainName,
   sanitizeDomainLabel
-} from "./chunk-MJCXPKBL.js";
+} from "./chunk-K6OAMQQU.js";
 import "./chunk-SI2ZUOYD.js";
 import {
   BULLETIN_BLOCKS_PER_DAY,
@@ -86,7 +87,7 @@ import {
   poolAccountDerivationPath,
   selectAccount
 } from "./chunk-AYAVRPAP.js";
-import "./chunk-5MS64TTR.js";
+import "./chunk-SVVPNIGN.js";
 import "./chunk-TSPERKUS.js";
 import {
   DEFAULT_ENV_ID,
@@ -98,10 +99,10 @@ import {
   loadEnvironments,
   resolveEndpoints,
   validateContractAddresses
-} from "./chunk-HDGD5FYX.js";
+} from "./chunk-NYNAUG4V.js";
 import "./chunk-ZOC4GITL.js";
-import "./chunk-5HFXRNCQ.js";
-import "./chunk-STXAFUTQ.js";
+import "./chunk-IQUS43B7.js";
+import "./chunk-JZTZWMP7.js";
 import {
   VERSION,
   loadRunState,
@@ -111,8 +112,8 @@ import {
   shouldSkipStaleWarning,
   stateFilePath,
   writeRunState
-} from "./chunk-E7PNP2NP.js";
-import "./chunk-7I3MTGOR.js";
+} from "./chunk-RBI2B5SW.js";
+import "./chunk-K5SP4OUC.js";
 export {
   BULLETIN_BLOCKS_PER_DAY,
   DEFAULT_ENV_ID,

package/dist/manifest/byte-budget.js

@@ -4,7 +4,8 @@ import {
   assertWithinBudget,
   getTextRecordBudgetBytes,
   pessimisticSizePreflight
-} from "../chunk-RXV677CJ.js";
+} from "../chunk-YTRNJMI4.js";
+import "../chunk-DMNLTQGA.js";
 export {
   DEFAULT_TEXT_RECORD_BUDGET_BYTES,
   PLACEHOLDER_CID,

package/dist/manifest/compose.d.ts

@@ -0,0 +1,20 @@
+import { ExecutableConfig, ExecutableManifest, ProductConfig, RootManifest } from './types.js';
+
+/**
+ * Shared product-manifest composers.
+ *
+ * `composeRoot` and `composeExecutable` build the exact wire shape written as
+ * dotNS text records (RFC paritytech/triangle-js-sdks #0001). They are used
+ * from two call sites that must stay byte-identical: the real publish path
+ * ([`publishManifest`](./publish.ts), which passes the real icon/executable
+ * CIDs) and the pre-upload size preflight ([`pessimisticSizePreflight`](./byte-budget.ts),
+ * which substitutes `PLACEHOLDER_CID` for the root icon before the real CID
+ * is known). Kept here, in a module neither of those two imports from each
+ * other, so publish.ts (which already imports byte-budget.ts) can't form an
+ * import cycle with it.
+ */
+
+declare function composeRoot(config: ProductConfig, iconCid: string): RootManifest;
+declare function composeExecutable(exec: ExecutableConfig): ExecutableManifest;
+
+export { composeExecutable, composeRoot };

package/dist/manifest/compose.js

@@ -0,0 +1,8 @@
+import {
+  composeExecutable,
+  composeRoot
+} from "../chunk-DMNLTQGA.js";
+export {
+  composeExecutable,
+  composeRoot
+};

package/dist/manifest/config-load.js

@@ -2,8 +2,8 @@ import {
   formatConfigLoadError,
   loadProductConfig,
   tryLoadProductConfig
-} from "../chunk-WEVSXHII.js";
-import "../chunk-CVQ7DJHG.js";
+} from "../chunk-NKDGBZBP.js";
+import "../chunk-I5PNPQZO.js";
 import "../chunk-ZOC4GITL.js";
 export {
   formatConfigLoadError,

package/dist/manifest/publish.js

@@ -3,38 +3,39 @@ import {
   manifestSignerOptions,
   publishManifest,
   registerOrEnsureResolver
-} from "../chunk-WCGCM45C.js";
-import "../chunk-RXV677CJ.js";
-import "../chunk-WEVSXHII.js";
-import "../chunk-CVQ7DJHG.js";
-import "../chunk-K23BCUAG.js";
+} from "../chunk-G2Z4U4OQ.js";
+import "../chunk-YTRNJMI4.js";
+import "../chunk-DMNLTQGA.js";
+import "../chunk-NKDGBZBP.js";
+import "../chunk-I5PNPQZO.js";
+import "../chunk-6H3GBTBA.js";
 import "../chunk-HNJWIY55.js";
 import "../chunk-M5AKL3FL.js";
-import "../chunk-GZ4O5DIU.js";
+import "../chunk-A7MFUE2N.js";
 import "../chunk-GRPLHUYC.js";
 import "../chunk-IW3X2MJF.js";
 import "../chunk-LPTKBQII.js";
 import "../chunk-3MAIF2SF.js";
 import "../chunk-WPC2PUCV.js";
-import "../chunk-A55GRHCX.js";
-import "../chunk-TTUXQMD3.js";
-import "../chunk-4NIOCONP.js";
+import "../chunk-R7HIFZDM.js";
+import "../chunk-G664B5Y4.js";
+import "../chunk-J6N3W3KJ.js";
 import "../chunk-C2TS5MER.js";
-import "../chunk-JGIPHFBT.js";
+import "../chunk-KXQVZWDW.js";
 import "../chunk-JQKKMUCT.js";
 import "../chunk-5FLTDWWP.js";
 import "../chunk-RIRDBSBG.js";
-import "../chunk-MJCXPKBL.js";
+import "../chunk-K6OAMQQU.js";
 import "../chunk-SI2ZUOYD.js";
 import "../chunk-AYAVRPAP.js";
-import "../chunk-5MS64TTR.js";
+import "../chunk-SVVPNIGN.js";
 import "../chunk-TSPERKUS.js";
-import "../chunk-HDGD5FYX.js";
+import "../chunk-NYNAUG4V.js";
 import "../chunk-ZOC4GITL.js";
-import "../chunk-5HFXRNCQ.js";
-import "../chunk-STXAFUTQ.js";
-import "../chunk-E7PNP2NP.js";
-import "../chunk-7I3MTGOR.js";
+import "../chunk-IQUS43B7.js";
+import "../chunk-JZTZWMP7.js";
+import "../chunk-RBI2B5SW.js";
+import "../chunk-K5SP4OUC.js";
 export {
   domainMatchesEnvTld,
   manifestSignerOptions,

package/dist/manifest/schema.js

@@ -2,7 +2,7 @@ import {
   validateExecutableManifest,
   validateProductConfig,
   validateRootManifest
-} from "../chunk-CVQ7DJHG.js";
+} from "../chunk-I5PNPQZO.js";
 export {
   validateExecutableManifest,
   validateProductConfig,

package/dist/manifest/types.d.ts

@@ -14,11 +14,33 @@ interface Icon {
     cid: string;
     format: IconFormat;
 }
+/**
+ * A grant one product's manifest issues to another product, naming what the
+ * grantee may do *to* the grantor when the Host mediates a cross-product
+ * interaction. See `RootManifest.trustedProducts` and the RFC's "Trusted
+ * products" section (paritytech/host-rust-core `docs/rfcs/product-manifest.md`):
+ * `"all"` is a superset wildcard covering every mediated interaction, present
+ * and future; `"storage"` covers read-only access to the grantor's
+ * host-local storage; `"context"` covers acting as the grantor's account —
+ * reading its identity and signing under its keys. A Host ignores any value
+ * it does not recognise rather than failing validation over it.
+ */
+type Granted = "all" | "storage" | "context";
 interface RootManifest {
     $v: 1;
     displayName: string;
     description: string;
     icon: Icon;
+    /**
+     * Pre-approved cross-product grants, keyed by the OTHER product's bare
+     * label (lowercase, no TLD suffix — e.g. `"wallet"`, never `"wallet.dot"`;
+     * the Host appends the TLD of the network it resolves against). Each entry
+     * says what that product may do *to this one*; it says nothing about the
+     * reverse direction. Absent, `{}`, and an empty grant array all mean "no
+     * grants" — the Host prompts for consent as usual. See the RFC's "Trusted
+     * products" section for full semantics.
+     */
+    trustedProducts?: Record<string, Granted[]>;
 }
 interface CommonExecutableFieldsV1 {
     $v: 1;
@@ -136,6 +158,12 @@ interface ProductConfig {
     description: string;
     icon: IconConfig;
     executables: ExecutableConfig[];
+    /**
+     * What this product's `RootManifest.trustedProducts` should carry once
+     * published — same shape, same rules. See `Granted` and
+     * `RootManifest.trustedProducts` above.
+     */
+    trustedProducts?: Record<string, Granted[]>;
 }
 /**
  * Identity helper that lets `bulletin-deploy.config.ts` authors get IntelliSense on the discriminated `ExecutableConfig` union.
@@ -146,4 +174,4 @@ interface ProductConfig {
  */
 declare function defineConfig<T extends ProductConfig>(config: T): T;
 
-export { type AppExecutableConfig, type AppExecutableConfigV1, type AppExecutableConfigV2, type AppManifest, type AppManifestV1, type AppManifestV2, type AppVersion, type AudioRequirement, type DeviceInputRequirement, type ExecutableConfig, type ExecutableKind, type ExecutableManifest, type FundingExecutableConfig, type FundingManifest, type FundingMode, type GraphicsRequirement, type Icon, type IconConfig, type IconFormat, type PolkaVmAppManifestV2, type PolkaVmRuntime, type ProductConfig, type RootManifest, type WebAppManifestV2, type WebRuntime, type WidgetDimensions, type WidgetExecutableConfig, type WidgetManifest, type WorkerExecutableConfig, type WorkerIncludes, type WorkerManifest, defineConfig };
+export { type AppExecutableConfig, type AppExecutableConfigV1, type AppExecutableConfigV2, type AppManifest, type AppManifestV1, type AppManifestV2, type AppVersion, type AudioRequirement, type DeviceInputRequirement, type ExecutableConfig, type ExecutableKind, type ExecutableManifest, type FundingExecutableConfig, type FundingManifest, type FundingMode, type Granted, type GraphicsRequirement, type Icon, type IconConfig, type IconFormat, type PolkaVmAppManifestV2, type PolkaVmRuntime, type ProductConfig, type RootManifest, type WebAppManifestV2, type WebRuntime, type WidgetDimensions, type WidgetExecutableConfig, type WidgetManifest, type WorkerExecutableConfig, type WorkerIncludes, type WorkerManifest, defineConfig };

package/dist/memory-report.js

@@ -5,8 +5,8 @@ import {
   maybeWriteMemoryReport,
   safeHeap,
   sampleFromBytes
-} from "./chunk-STXAFUTQ.js";
-import "./chunk-E7PNP2NP.js";
+} from "./chunk-JZTZWMP7.js";
+import "./chunk-RBI2B5SW.js";
 export {
   DEFAULT_THRESHOLD_MB,
   buildMemoryReport,

package/dist/merkle.js

@@ -6,34 +6,34 @@ import {
   merkleizeKuboBackend,
   merkleizeWithStableOrder,
   rebuildOrderedCarFromBytes
-} from "./chunk-K23BCUAG.js";
+} from "./chunk-6H3GBTBA.js";
 import "./chunk-HNJWIY55.js";
 import "./chunk-M5AKL3FL.js";
-import "./chunk-GZ4O5DIU.js";
+import "./chunk-A7MFUE2N.js";
 import "./chunk-GRPLHUYC.js";
 import "./chunk-IW3X2MJF.js";
 import "./chunk-LPTKBQII.js";
 import "./chunk-3MAIF2SF.js";
 import "./chunk-WPC2PUCV.js";
-import "./chunk-A55GRHCX.js";
-import "./chunk-TTUXQMD3.js";
-import "./chunk-4NIOCONP.js";
+import "./chunk-R7HIFZDM.js";
+import "./chunk-G664B5Y4.js";
+import "./chunk-J6N3W3KJ.js";
 import "./chunk-C2TS5MER.js";
-import "./chunk-JGIPHFBT.js";
+import "./chunk-KXQVZWDW.js";
 import "./chunk-JQKKMUCT.js";
 import "./chunk-5FLTDWWP.js";
 import "./chunk-RIRDBSBG.js";
-import "./chunk-MJCXPKBL.js";
+import "./chunk-K6OAMQQU.js";
 import "./chunk-SI2ZUOYD.js";
 import "./chunk-AYAVRPAP.js";
-import "./chunk-5MS64TTR.js";
+import "./chunk-SVVPNIGN.js";
 import "./chunk-TSPERKUS.js";
-import "./chunk-HDGD5FYX.js";
+import "./chunk-NYNAUG4V.js";
 import "./chunk-ZOC4GITL.js";
-import "./chunk-5HFXRNCQ.js";
-import "./chunk-STXAFUTQ.js";
-import "./chunk-E7PNP2NP.js";
-import "./chunk-7I3MTGOR.js";
+import "./chunk-IQUS43B7.js";
+import "./chunk-JZTZWMP7.js";
+import "./chunk-RBI2B5SW.js";
+import "./chunk-K5SP4OUC.js";
 export {
   buildOrderedCar,
   merkleizeBackend,

package/dist/personhood/bootstrap.js

@@ -2,6 +2,7 @@ import {
   deriveMemberEntropy,
   deriveMemberKey
 } from "../chunk-AFBOKCCQ.js";
+import "../chunk-UPWEOGLQ.js";
 import {
   makeOneShotBuildRingProof
 } from "../chunk-DSCPTDCZ.js";
@@ -21,10 +22,9 @@ import {
 import {
   bytesToHex
 } from "../chunk-ZYVGHDMU.js";
-import "../chunk-UPWEOGLQ.js";
 import {
   WS_HEARTBEAT_TIMEOUT_MS
-} from "../chunk-MJCXPKBL.js";
+} from "../chunk-K6OAMQQU.js";
 import {
   DOTNS_CONTEXT_BYTES,
   PEOPLE_MEMBER_IDENTIFIER_HEX,
@@ -33,12 +33,12 @@ import {
 import "../chunk-AYAVRPAP.js";
 import {
   loadEnvironments
-} from "../chunk-HDGD5FYX.js";
+} from "../chunk-NYNAUG4V.js";
 import "../chunk-ZOC4GITL.js";
-import "../chunk-5HFXRNCQ.js";
-import "../chunk-STXAFUTQ.js";
-import "../chunk-E7PNP2NP.js";
-import "../chunk-7I3MTGOR.js";
+import "../chunk-IQUS43B7.js";
+import "../chunk-JZTZWMP7.js";
+import "../chunk-RBI2B5SW.js";
+import "../chunk-K5SP4OUC.js";
 
 // src/personhood/bootstrap.ts
 import { createClient } from "polkadot-api";

package/dist/personhood/people-client.js

@@ -1,16 +1,16 @@
 import {
   WS_HEARTBEAT_TIMEOUT_MS
-} from "../chunk-MJCXPKBL.js";
+} from "../chunk-K6OAMQQU.js";
 import "../chunk-SI2ZUOYD.js";
 import "../chunk-AYAVRPAP.js";
 import {
   loadEnvironments
-} from "../chunk-HDGD5FYX.js";
+} from "../chunk-NYNAUG4V.js";
 import "../chunk-ZOC4GITL.js";
-import "../chunk-5HFXRNCQ.js";
-import "../chunk-STXAFUTQ.js";
-import "../chunk-E7PNP2NP.js";
-import "../chunk-7I3MTGOR.js";
+import "../chunk-IQUS43B7.js";
+import "../chunk-JZTZWMP7.js";
+import "../chunk-RBI2B5SW.js";
+import "../chunk-K5SP4OUC.js";
 
 // src/personhood/people-client.ts
 import { createClient } from "polkadot-api";