bulletin-deploy 0.18.4 → 0.19.0

package/dist/run-state.js

@@ -7,7 +7,7 @@ import {
   shouldSkipStaleWarning,
   stateFilePath,
   writeRunState
-} from "./chunk-E7PNP2NP.js";
+} from "./chunk-RBI2B5SW.js";
 export {
   VERSION,
   loadRunState,

package/dist/sss-allowance-cache.js

@@ -4,14 +4,14 @@ import {
   preflightSssAllowance,
   sssPeriodEndSec,
   writeSssAllowanceCache
-} from "./chunk-GZ4O5DIU.js";
+} from "./chunk-A7MFUE2N.js";
 import "./chunk-GRPLHUYC.js";
-import "./chunk-5MS64TTR.js";
+import "./chunk-SVVPNIGN.js";
 import "./chunk-TSPERKUS.js";
-import "./chunk-HDGD5FYX.js";
+import "./chunk-NYNAUG4V.js";
 import "./chunk-ZOC4GITL.js";
-import "./chunk-STXAFUTQ.js";
-import "./chunk-E7PNP2NP.js";
+import "./chunk-JZTZWMP7.js";
+import "./chunk-RBI2B5SW.js";
 export {
   clearSssAllowanceCache,
   isSssAllowanceCacheValid,

package/dist/storage-signer.js

@@ -8,34 +8,34 @@ import {
   waitForBulletinAuthorization,
   withTransientRetry,
   writeBulletinSlotKey
-} from "./chunk-K23BCUAG.js";
+} from "./chunk-6H3GBTBA.js";
 import "./chunk-HNJWIY55.js";
 import "./chunk-M5AKL3FL.js";
-import "./chunk-GZ4O5DIU.js";
+import "./chunk-A7MFUE2N.js";
 import "./chunk-GRPLHUYC.js";
 import "./chunk-IW3X2MJF.js";
 import "./chunk-LPTKBQII.js";
 import "./chunk-3MAIF2SF.js";
 import "./chunk-WPC2PUCV.js";
-import "./chunk-A55GRHCX.js";
-import "./chunk-TTUXQMD3.js";
-import "./chunk-4NIOCONP.js";
+import "./chunk-R7HIFZDM.js";
+import "./chunk-G664B5Y4.js";
+import "./chunk-J6N3W3KJ.js";
 import "./chunk-C2TS5MER.js";
-import "./chunk-JGIPHFBT.js";
+import "./chunk-KXQVZWDW.js";
 import "./chunk-JQKKMUCT.js";
 import "./chunk-5FLTDWWP.js";
 import "./chunk-RIRDBSBG.js";
-import "./chunk-MJCXPKBL.js";
+import "./chunk-K6OAMQQU.js";
 import "./chunk-SI2ZUOYD.js";
 import "./chunk-AYAVRPAP.js";
-import "./chunk-5MS64TTR.js";
+import "./chunk-SVVPNIGN.js";
 import "./chunk-TSPERKUS.js";
-import "./chunk-HDGD5FYX.js";
+import "./chunk-NYNAUG4V.js";
 import "./chunk-ZOC4GITL.js";
-import "./chunk-5HFXRNCQ.js";
-import "./chunk-STXAFUTQ.js";
-import "./chunk-E7PNP2NP.js";
-import "./chunk-7I3MTGOR.js";
+import "./chunk-IQUS43B7.js";
+import "./chunk-JZTZWMP7.js";
+import "./chunk-RBI2B5SW.js";
+import "./chunk-K5SP4OUC.js";
 export {
   BulletinSlotAuthError,
   extractBulletinSlotKey,

package/dist/telemetry.d.ts

@@ -79,7 +79,7 @@ declare function isExpectedError(msg: string, variant?: string): boolean;
 declare function classifyDeployError(msg: string, variant?: string): DeployErrorCategory;
 declare function classifySadReason(message: string): string;
 declare function computeDeployOutcome(errorCategory: DeployErrorCategory | null, isSad: boolean, sadReason: string): string;
-type DeployErrorKind = 'contract-revert' | 'chain-timeout' | 'nonce-stale' | 'connection' | 'naming.pop_required' | 'naming.nostatus_required' | 'naming.contract_unavailable' | 'naming.contract_function_removed' | 'dotns.abi_decode_empty' | 'naming.already_owned' | 'naming.governance_reserved' | 'naming.short_names_closed' | 'naming.subdomain_orphan' | 'naming.tld_mismatch' | 'funding.insufficient_balance' | 'verify.contenthash_mismatch' | 'verify.dagpb_not_finalised' | 'network.recovery_exhausted' | 'account.mapping_pending' | 'chain.api_timeout' | 'chain.tx_timeout' | 'chain.tx_silent' | 'chain.extrinsic_expired' | 'chain.quota_exhausted' | 'chain.bad_proof' | 'signer.message_too_large' | 'storage.rejected' | 'user.aborted' | 'signer.phone_confirmation_unavailable' | 'tool.invariant' | 'unknown';
+type DeployErrorKind = 'contract-revert' | 'chain-timeout' | 'nonce-stale' | 'connection' | 'naming.pop_required' | 'naming.nostatus_required' | 'naming.contract_unavailable' | 'naming.contract_function_removed' | 'dotns.abi_decode_empty' | 'naming.already_owned' | 'naming.governance_reserved' | 'naming.short_names_closed' | 'naming.soulbound' | 'naming.subdomain_orphan' | 'naming.tld_mismatch' | 'funding.insufficient_balance' | 'verify.contenthash_mismatch' | 'verify.dagpb_not_finalised' | 'network.recovery_exhausted' | 'account.mapping_pending' | 'chain.api_timeout' | 'chain.tx_timeout' | 'chain.tx_silent' | 'chain.extrinsic_expired' | 'chain.quota_exhausted' | 'chain.bad_proof' | 'signer.message_too_large' | 'storage.rejected' | 'user.aborted' | 'signer.phone_confirmation_unavailable' | 'tool.invariant' | 'unknown';
 /**
  * Every kind that some rule below can produce. Exported so the test suite can
  * assert the fall-through guard actually covers all of them — without that,

package/dist/telemetry.js

@@ -41,8 +41,8 @@ import {
   withDeploySpan,
   withManifestSpan,
   withSpan
-} from "./chunk-STXAFUTQ.js";
-import "./chunk-E7PNP2NP.js";
+} from "./chunk-JZTZWMP7.js";
+import "./chunk-RBI2B5SW.js";
 export {
   VERSION,
   __setDeployRootSpanForTest,

package/dist/version-check.js

@@ -12,9 +12,9 @@ import {
   isPreReleaseVersion,
   preReleaseWarning,
   promptYesNo
-} from "./chunk-TTUXQMD3.js";
-import "./chunk-STXAFUTQ.js";
-import "./chunk-E7PNP2NP.js";
+} from "./chunk-G664B5Y4.js";
+import "./chunk-JZTZWMP7.js";
+import "./chunk-RBI2B5SW.js";
 export {
   assessVersion,
   checkNodeVersion,

package/docs/product-manifest.md

@@ -0,0 +1,76 @@
+# Product manifest
+
+A deploy writes two kinds of manifest to dotNS text records, from one `bulletin-deploy.config.ts`:
+
+- a **root manifest** on the product's base name, as the `manifest` text record — who the product is
+- one **executable manifest** per modality, on `app|widget|funding|worker.<product>.<tld>`, as the `executable` text record — how to run it
+
+Both are JSON, both carry a `$v` schema version, and both are composed from the same config file by `publishManifest`. The shapes follow the RFC at `paritytech/host-rust-core` `docs/rfcs/product-manifest.md`, which is authoritative where this document is thinner.
+
+## Config
+
+`bulletin-deploy.config.ts` default-exports a `ProductConfig`. `defineConfig` is an identity helper that exists to give editors the discriminated union for `executables`:
+
+```ts
+import { defineConfig } from "bulletin-deploy";
+
+export default defineConfig({
+  domain: "humanity.dot",          // the product's dotNS name, including the TLD
+  displayName: "Humanity",         // shown to a person choosing the product
+  description: "One identity …",   // one line, also shown to a person
+  icon: { path: "./icon.png", format: "png" },  // png or jpeg, uploaded and referenced by CID
+  executables: [                   // one entry per modality; kinds must be unique
+    { kind: "app", path: "../dist", appVersion: [1, 4, 0] },
+  ],
+  trustedProducts: { dim2: ["context"] },       // optional; see below
+});
+```
+
+| Field | Required | Notes |
+|---|---|---|
+| `domain` | yes | Must end in the TLD the target environment's registry reports, checked before any chain write |
+| `displayName` | yes | Non-empty |
+| `description` | yes | May be empty |
+| `icon` | yes | `path` is relative to the config file; `format` is `png` or `jpeg` |
+| `executables` | yes | Non-empty; one entry per `kind` |
+| `trustedProducts` | no | Cross-product grants, keyed by the other product's bare label |
+
+## Trusted products
+
+`trustedProducts` pre-approves cross-product interactions that the Host would otherwise prompt for. Each entry names what another product may do **to this one**, and says nothing about the reverse direction:
+
+```ts
+trustedProducts: {
+  dim2: ["context"],          // dim2 may act as this product's account
+  gallery: ["storage"],       // gallery may read this product's host-local storage
+  suite: ["all"],             // suite gets every mediated interaction, present and future
+}
+```
+
+- **Keys are bare product labels with no TLD suffix** — `dim2`, never `dim2.paseo`. The Host appends the TLD of the network it resolves against. A key written with a suffix resolves to a name that does not exist, so the entry grants nothing.
+- **Values are a set.** Order is not significant and duplicates collapse. `all` is a superset: `["all", "storage"]` means `["all"]`.
+- **`context` is materially wider than `storage`.** It covers acting as the product's account — reading its identity, and producing signatures and ring-VRF proofs under its keys. A product granted `context` can sign as the grantor.
+- **Absence, `{}` and an empty array all mean no grants**, and the Host prompts as usual.
+- **A key naming a product that does not resolve is inert**, not an error. So is a product listing itself.
+
+The composer normalises before writing: it sorts keys and grants, collapses `all`, drops empty entries and drops a self-listing. A config that differs only in ordering therefore serialises to identical bytes, which keeps the skip-if-unchanged pre-check from billing an on-chain write for a change that is not one.
+
+### Validation is asymmetric
+
+Publishing is strict; reading is lenient. The two run in opposite directions on purpose, and the RFC requires both:
+
+- `validateProductConfig` **rejects** a TLD-suffixed key and an unrecognised grant value. A publisher must not emit either, and both would otherwise deploy green and grant nothing — the failure is silent at exactly the point where it is still cheap to catch.
+- `validateRootManifest` **accepts** both. It models whether a Host would accept a manifest already on chain, and a Host ignores an unrecognised grant while keeping the recognised ones in the same entry. A manifest carrying a grant from a newer RFC version still has to validate.
+
+Structural errors — `trustedProducts` not an object, a value not an array — fail on both sides.
+
+## Byte budget
+
+Each text record must fit the dotNS wire limit, **1024 bytes** by default, overridable with `BULLETIN_TEXT_BUDGET` for probing a raised cap. A typical root manifest uses about 180 bytes, leaving roughly 844. One grant costs about 39 bytes, so the limit sits around 39 entries.
+
+`trustedProducts` is the only unbounded field in root manifest v1. The preflight composes every record with a placeholder CID and measures it before any upload, so an oversized config aborts with no chain writes. The check runs twice — once at config load, once inside `publishManifest` for callers using it as a library.
+
+## Open questions
+
+- The 1024-byte budget is this tool's conservative figure, not a value read from the chain. The dotNS team's proof-of-concept will confirm the real cap.
+- `Granted` covers the three values v1 defines. Further values fit the same shape without a `$v` bump, since the ignore-unrecognised rule already covers them — but a config using one fails this tool's publish-side validation until it is added here.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bulletin-deploy",
-  "version": "0.18.4",
+  "version": "0.19.0",
   "private": false,
   "repository": {
     "type": "git",
@@ -46,11 +46,11 @@
     "tools/verify-baked-dsn.mjs"
   ],
   "scripts": {
-    "build": "tsup src/suppress-localstorage-warning.ts src/index.ts src/deploy.ts src/dotns.ts src/dotns-protocol.ts src/pool.ts src/telemetry.ts src/chain-health.ts src/memory-report.ts src/merkle.ts src/version-check.ts src/bug-report.ts src/run-state.ts src/environments.ts src/errors.ts src/subname-depth.ts src/manifest.ts src/chunk-probe.ts src/manifest-embed.ts src/manifest-fetch.ts src/manifest-roundtrip.ts src/incremental-stats.ts src/chunker.ts src/personhood/encoding.ts src/personhood/hashing.ts src/personhood/constants.ts src/personhood/member-key.ts src/personhood/people-client.ts src/personhood/proof-validity.ts src/personhood/ring-proof.ts src/personhood/reprove.ts src/personhood/bind-personal-id.ts src/personhood/claim-pgas.ts src/personhood/bind-paid-alias.ts src/personhood/bootstrap.ts src/personhood/chain-prereqs.ts src/manifest/types.ts src/manifest/schema.ts src/manifest/byte-budget.ts src/manifest/config-load.ts src/manifest/publish.ts src/auth/index.ts src/auth/vendor/index.ts src/auth/vendor/ui/index.ts src/auth-config.ts src/commands/login.ts src/commands/logout.ts src/commands/whoami.ts src/commands/transfer.ts src/storage-signer.ts src/spinner.ts src/sss-allowance.ts src/sss-allowance-cache.ts src/deploy-actors.ts src/product-account.ts --format esm --dts --clean --target node22",
+    "build": "tsup src/suppress-localstorage-warning.ts src/index.ts src/deploy.ts src/dotns.ts src/dotns-protocol.ts src/pool.ts src/telemetry.ts src/chain-health.ts src/memory-report.ts src/merkle.ts src/version-check.ts src/bug-report.ts src/run-state.ts src/environments.ts src/errors.ts src/subname-depth.ts src/manifest.ts src/chunk-probe.ts src/manifest-embed.ts src/manifest-fetch.ts src/manifest-roundtrip.ts src/incremental-stats.ts src/chunker.ts src/personhood/encoding.ts src/personhood/hashing.ts src/personhood/constants.ts src/personhood/member-key.ts src/personhood/people-client.ts src/personhood/proof-validity.ts src/personhood/ring-proof.ts src/personhood/reprove.ts src/personhood/bind-personal-id.ts src/personhood/claim-pgas.ts src/personhood/bind-paid-alias.ts src/personhood/bootstrap.ts src/personhood/chain-prereqs.ts src/manifest/types.ts src/manifest/schema.ts src/manifest/byte-budget.ts src/manifest/compose.ts src/manifest/config-load.ts src/manifest/publish.ts src/auth/index.ts src/auth/vendor/index.ts src/auth/vendor/ui/index.ts src/auth-config.ts src/commands/login.ts src/commands/logout.ts src/commands/whoami.ts src/commands/transfer.ts src/storage-signer.ts src/spinner.ts src/sss-allowance.ts src/sss-allowance-cache.ts src/deploy-actors.ts src/product-account.ts --format esm --dts --clean --target node22",
     "refresh-environments": "node scripts/refresh-environments.mjs",
     "postinstall": "patch-package || true",
     "prepare": "npm run build",
-    "test": "npm run build && node --test test/test.js test/cli-help.test.js test/helpers/e2e-helpers.test.js test/helpers/e2e-exit-guard.test.js test/environments.test.js test/refresh-environments.test.js test/chunk-sharing-report.test.js test/dotns-deployments-parser.test.js test/dotns-token-id.test.js test/dotns-subnode-id.test.js test/dotns-protocol.test.js test/product-manifest.test.js test/cache-savings-totals.test.js test/error-pattern-signature.test.js test/exit-codes.test.js test/probe-env-health.test.js test/e2e-chain-calls.test.js test/auth-config.test.js test/whoami.test.js test/login.test.js test/logout.test.js test/auth-resolve.test.js test/storage-signer.test.js test/spinner.test.js test/sss-allowance.test.js test/sss-allowance-cache.test.js test/dotns-transfer.test.js test/deploy-actors.test.js test/transfer-command.test.js test/dotns-register-fee.test.js test/deploy-label-ordering.test.js test/benign-teardown.test.js test/verify-baked-dsn.test.js test/product-account.test.js test/post-release-monitor-skill.test.js test/test-release-retry-wrapper.js test/reprove-alias-tool.test.js test/bootstrap-env.test.js test/check-chain-identity.test.js && npm run test:vendor",
+    "test": "npm run build && node --test test/test.js test/cli-help.test.js test/helpers/e2e-helpers.test.js test/helpers/e2e-exit-guard.test.js test/environments.test.js test/refresh-environments.test.js test/chunk-sharing-report.test.js test/dotns-deployments-parser.test.js test/dotns-token-id.test.js test/dotns-subnode-id.test.js test/dotns-protocol.test.js test/product-manifest.test.js test/manifest-trusted-products.test.js test/cache-savings-totals.test.js test/error-pattern-signature.test.js test/exit-codes.test.js test/probe-env-health.test.js test/e2e-chain-calls.test.js test/auth-config.test.js test/whoami.test.js test/login.test.js test/logout.test.js test/auth-resolve.test.js test/storage-signer.test.js test/spinner.test.js test/sss-allowance.test.js test/sss-allowance-cache.test.js test/dotns-transfer.test.js test/deploy-actors.test.js test/transfer-command.test.js test/dotns-register-fee.test.js test/deploy-label-ordering.test.js test/benign-teardown.test.js test/verify-baked-dsn.test.js test/product-account.test.js test/post-release-monitor-skill.test.js test/test-release-retry-wrapper.js test/reprove-alias-tool.test.js test/bootstrap-env.test.js test/check-chain-identity.test.js && npm run test:vendor",
     "test:e2e": "npm run build && node --test test/e2e.test.js",
     "test:e2e:smoke": "bash scripts/e2e-pass.sh smoke",
     "test:e2e:pr": "bash scripts/e2e-pass.sh pr",