bulletin-deploy 0.20.0-rc.1 → 0.20.0

package/bin/bulletin-deploy

@@ -13,9 +13,13 @@ import { setDeployContext, installLogCapture, buildCliFlagsSummary } from "../di
 import { loadRunState, writeRunState, shouldSkipStaleWarning, shouldShowOomHint, probablyOomRssMb } from "../dist/run-state.js";
 import { loadEnvironments, listEnvironments, formatEnvironmentTable, resolveEndpoints, DEFAULT_ENV_ID } from "../dist/environments.js";
 import { DEFAULT_TLD } from "../dist/dotns.js";
+import { GuardedWebSocket } from "../dist/ws.js";
 import * as fs from "fs";
 import * as readline from "readline";
 
+// The SSO SDKs build their own papi providers from the global WebSocket.
+globalThis.WebSocket = GuardedWebSocket;
+
 // Install early so anything printed during flag parsing / preflight is
 // available to the bug-report log tail.
 installLogCapture();

package/dist/auth/index.d.ts

@@ -1,7 +1,8 @@
-export { A as AuthClient, a as AuthConfig, C as ConnectResult, L as LoginHandle, b as LoginStatus, c as LogoutHandle, d as LogoutStatus, S as SessionAddresses, e as SessionHandle, f as createAuthClient } from '../auth-CA_YKtM2.js';
+export { AuthClient, ConnectResult, LoginHandle, LoginStatus, LogoutHandle, LogoutStatus, SessionAddresses, SessionHandle, createAuthClient } from './vendor/auth.js';
 export { renderQrCode } from '@parity/product-sdk-terminal';
-export { R as ResolvedSigner, S as SignerNotAvailableError, r as resolveSigner } from '../signer-Duup0hgQ.js';
-export { A as AllocatableResource, a as AllocationOutcome, b as AllocationSummary, B as BULLETIN_RESOURCE, D as DEFAULT_RESOURCES, c as createSlotAccountSigner, r as requestResourceAllocation, s as summarizeOutcomes } from '../allocations-CEPeZr6T.js';
-export { renderLoginStatus, renderLogoutStatus } from './vendor/ui/index.js';
+export { ResolvedSigner, SignerNotAvailableError, resolveSigner } from './vendor/signer.js';
+export { AllocatableResource, AllocationOutcome, AllocationSummary, BULLETIN_RESOURCE, DEFAULT_RESOURCES, createSlotAccountSigner, requestResourceAllocation, summarizeOutcomes } from './vendor/allocations.js';
+export { AuthConfig } from './vendor/types.js';
+export { renderLoginStatus, renderLogoutStatus } from './vendor/ui/status.js';
 import 'polkadot-api';
 import '@parity/product-sdk-tx';

package/dist/auth/index.js

@@ -1,21 +1,30 @@
 import "../chunk-JQKKMUCT.js";
+import "../chunk-DFKEG3WY.js";
 import {
-  renderLoginStatus,
-  renderLogoutStatus,
   renderQrCode
-} from "../chunk-RIRDBSBG.js";
+} from "../chunk-RPBMNTGZ.js";
+import {
+  renderLoginStatus,
+  renderLogoutStatus
+} from "../chunk-YP3LINCF.js";
+import "../chunk-NJKXXDDK.js";
+import {
+  createAuthClient
+} from "../chunk-G7EH3XIW.js";
 import {
   BULLETIN_RESOURCE,
   DEFAULT_RESOURCES,
-  SignerNotAvailableError,
-  createAuthClient,
   createSlotAccountSigner,
   requestResourceAllocation,
-  resolveSigner,
   summarizeOutcomes
-} from "../chunk-H44NO63C.js";
-import "../chunk-TSPERKUS.js";
+} from "../chunk-7SXO544V.js";
+import "../chunk-S6CPT2TU.js";
+import {
+  SignerNotAvailableError,
+  resolveSigner
+} from "../chunk-2C6SLLBI.js";
 import "../chunk-SH2LG52Z.js";
+import "../chunk-DNXE3Q5D.js";
 export {
   BULLETIN_RESOURCE,
   DEFAULT_RESOURCES,

package/dist/{allocations-CEPeZr6T.d.ts → auth/vendor/allocations.d.ts}

@@ -108,4 +108,4 @@ declare function summarizeOutcomes(outcomes: AllocationOutcome[], resources: All
  */
 declare function createSlotAccountSigner(adapter: TerminalAdapter, resource: AllocatableResource): Promise<polkadot_api.PolkadotSigner | null>;
 
-export { type AllocatableResource as A, BULLETIN_RESOURCE as B, DEFAULT_RESOURCES as D, type OnExistingAllowancePolicy as O, type ResourceTag as R, type AllocationOutcome as a, type AllocationSummary as b, createSlotAccountSigner as c, requestResourceAllocation as r, summarizeOutcomes as s };
+export { type AllocatableResource, type AllocationOutcome, type AllocationSummary, BULLETIN_RESOURCE, DEFAULT_RESOURCES, type OnExistingAllowancePolicy, type ResourceTag, createSlotAccountSigner, requestResourceAllocation, summarizeOutcomes };

package/dist/auth/vendor/allocations.js

@@ -0,0 +1,14 @@
+import {
+  BULLETIN_RESOURCE,
+  DEFAULT_RESOURCES,
+  createSlotAccountSigner,
+  requestResourceAllocation,
+  summarizeOutcomes
+} from "../../chunk-7SXO544V.js";
+export {
+  BULLETIN_RESOURCE,
+  DEFAULT_RESOURCES,
+  createSlotAccountSigner,
+  requestResourceAllocation,
+  summarizeOutcomes
+};

package/dist/{auth-CA_YKtM2.d.ts → auth/vendor/auth.d.ts}

@@ -1,30 +1,7 @@
 import { TerminalAdapter, UserSession } from '@parity/product-sdk-terminal';
 import { PolkadotSigner } from 'polkadot-api';
-import { A as AllocatableResource, O as OnExistingAllowancePolicy, a as AllocationOutcome } from './allocations-CEPeZr6T.js';
-
-/**
- * Per-product configuration injected into `createAuthClient`. Lifting the
- * sign-in glue out of playground-cli (issue #411) means the env-specific
- * constants playground hard-coded in its `config.ts` (DAPP_ID, product id,
- * metadata URL, People-chain endpoints) become consumer-supplied so the same
- * package serves `playground` and `dot` (and future products) unchanged.
- */
-interface AuthConfig {
-    /** The dApp identity string. Scopes the on-disk session namespace
-     *  (`~/.polkadot-apps/${dappId}_*`) and the SSO pairing — each product
-     *  gets its own, independently-revocable session. */
-    dappId: string;
-    /** Product id used to derive the product account (`/product/{productId}/{index}`). */
-    productId: string;
-    /** Derivation index of the product account (0 = default). */
-    derivationIndex: number;
-    /** Wallet-facing app name shown on the Sign-In screen (sent inline at pairing). */
-    hostName: string;
-    /** Host app version sent inline at pairing. */
-    hostVersion: string;
-    /** People-parachain RPC endpoints the terminal adapter connects to. */
-    peopleEndpoints: string[];
-}
+import { AllocatableResource, OnExistingAllowancePolicy, AllocationOutcome } from './allocations.js';
+import { AuthConfig } from './types.js';
 
 /**
  * The three addresses we surface from a paired session.
@@ -125,4 +102,4 @@ interface AuthClient {
  */
 declare function createAuthClient(config: AuthConfig): AuthClient;
 
-export { type AuthClient as A, type ConnectResult as C, type LoginHandle as L, type SessionAddresses as S, type AuthConfig as a, type LoginStatus as b, type LogoutHandle as c, type LogoutStatus as d, type SessionHandle as e, createAuthClient as f };
+export { type AuthClient, type ConnectResult, type LoginHandle, type LoginStatus, type LogoutHandle, type LogoutStatus, type SessionAddresses, type SessionHandle, createAuthClient };

package/dist/auth/vendor/auth.js

@@ -0,0 +1,10 @@
+import {
+  createAuthClient
+} from "../../chunk-G7EH3XIW.js";
+import "../../chunk-7SXO544V.js";
+import "../../chunk-S6CPT2TU.js";
+import "../../chunk-SH2LG52Z.js";
+import "../../chunk-DNXE3Q5D.js";
+export {
+  createAuthClient
+};

package/dist/auth/vendor/index.d.ts

@@ -1,32 +1,8 @@
-export { A as AuthClient, a as AuthConfig, C as ConnectResult, L as LoginHandle, b as LoginStatus, c as LogoutHandle, d as LogoutStatus, S as SessionAddresses, e as SessionHandle, f as createAuthClient } from '../../auth-CA_YKtM2.js';
-import { UserSession } from '@parity/product-sdk-terminal';
-import { PolkadotSigner } from 'polkadot-api';
-export { R as ResolvedSigner, S as SignerNotAvailableError, a as SignerOptions, b as SignerSource, p as parseDevAccountName, r as resolveSigner } from '../../signer-Duup0hgQ.js';
-export { A as AllocatableResource, a as AllocationOutcome, b as AllocationSummary, B as BULLETIN_RESOURCE, D as DEFAULT_RESOURCES, O as OnExistingAllowancePolicy, R as ResourceTag, c as createSlotAccountSigner, r as requestResourceAllocation, s as summarizeOutcomes } from '../../allocations-CEPeZr6T.js';
+export { AuthClient, ConnectResult, LoginHandle, LoginStatus, LogoutHandle, LogoutStatus, SessionAddresses, SessionHandle, createAuthClient } from './auth.js';
+export { INCOMPLETE_SESSION_MESSAGE, ProductAccountRef, createSessionSigner, deriveProductPublicKey, sessionRootPublicKey } from './sessionSigner.js';
+export { ResolvedSigner, SignerNotAvailableError, SignerOptions, SignerSource, parseDevAccountName, resolveSigner } from './signer.js';
+export { AllocatableResource, AllocationOutcome, AllocationSummary, BULLETIN_RESOURCE, DEFAULT_RESOURCES, OnExistingAllowancePolicy, ResourceTag, createSlotAccountSigner, requestResourceAllocation, summarizeOutcomes } from './allocations.js';
+export { AuthConfig } from './types.js';
+import '@parity/product-sdk-terminal';
+import 'polkadot-api';
 import '@parity/product-sdk-tx';
-
-interface ProductAccountRef {
-    productId: string;
-    derivationIndex: number;
-}
-declare const INCOMPLETE_SESSION_MESSAGE = "Stored login session is missing the root account public key. Run \"logout\" and then \"login\" to pair again.";
-declare function sessionRootPublicKey(session: UserSession): Uint8Array;
-/**
- * Soft-derive the product account public key off a wallet root.
- *
- * This is the single source of truth for product-account math. Both
- * `createSessionSigner` (which builds the signer used to actually sign
- * on-chain) and `deriveSessionAddresses` (which builds the display triple)
- * go through here so a future change to derivation params can't silently
- * desync the signer from what we print.
- *
- * sr25519 soft derivation is composable on public keys alone, so deriving
- * from `rootAccountId` locally produces the SAME public key the mobile
- * derives privately via `mnemonic + "/product/...{idx}"`. Algorithm parity
- * with mobile/desktop is locked by the frozen vectors in
- * `@parity/product-sdk-keys`'s `product-account.test.ts`.
- */
-declare function deriveProductPublicKey(rootAccountId: Uint8Array, ref: ProductAccountRef): Uint8Array;
-declare function createSessionSigner(session: UserSession, ref: ProductAccountRef): PolkadotSigner;
-
-export { INCOMPLETE_SESSION_MESSAGE, type ProductAccountRef, createSessionSigner, deriveProductPublicKey, sessionRootPublicKey };

package/dist/auth/vendor/index.js

@@ -1,20 +1,27 @@
+import "../../chunk-NJKXXDDK.js";
+import {
+  createAuthClient
+} from "../../chunk-G7EH3XIW.js";
 import {
   BULLETIN_RESOURCE,
   DEFAULT_RESOURCES,
+  createSlotAccountSigner,
+  requestResourceAllocation,
+  summarizeOutcomes
+} from "../../chunk-7SXO544V.js";
+import {
   INCOMPLETE_SESSION_MESSAGE,
-  SignerNotAvailableError,
-  createAuthClient,
   createSessionSigner,
-  createSlotAccountSigner,
   deriveProductPublicKey,
+  sessionRootPublicKey
+} from "../../chunk-S6CPT2TU.js";
+import {
+  SignerNotAvailableError,
   parseDevAccountName,
-  requestResourceAllocation,
-  resolveSigner,
-  sessionRootPublicKey,
-  summarizeOutcomes
-} from "../../chunk-H44NO63C.js";
-import "../../chunk-TSPERKUS.js";
+  resolveSigner
+} from "../../chunk-2C6SLLBI.js";
 import "../../chunk-SH2LG52Z.js";
+import "../../chunk-DNXE3Q5D.js";
 export {
   BULLETIN_RESOURCE,
   DEFAULT_RESOURCES,

package/dist/auth/vendor/sessionSigner.d.ts

@@ -0,0 +1,28 @@
+import { UserSession } from '@parity/product-sdk-terminal';
+import { PolkadotSigner } from 'polkadot-api';
+
+interface ProductAccountRef {
+    productId: string;
+    derivationIndex: number;
+}
+declare const INCOMPLETE_SESSION_MESSAGE = "Stored login session is missing the root account public key. Run \"logout\" and then \"login\" to pair again.";
+declare function sessionRootPublicKey(session: UserSession): Uint8Array;
+/**
+ * Soft-derive the product account public key off a wallet root.
+ *
+ * This is the single source of truth for product-account math. Both
+ * `createSessionSigner` (which builds the signer used to actually sign
+ * on-chain) and `deriveSessionAddresses` (which builds the display triple)
+ * go through here so a future change to derivation params can't silently
+ * desync the signer from what we print.
+ *
+ * sr25519 soft derivation is composable on public keys alone, so deriving
+ * from `rootAccountId` locally produces the SAME public key the mobile
+ * derives privately via `mnemonic + "/product/...{idx}"`. Algorithm parity
+ * with mobile/desktop is locked by the frozen vectors in
+ * `@parity/product-sdk-keys`'s `product-account.test.ts`.
+ */
+declare function deriveProductPublicKey(rootAccountId: Uint8Array, ref: ProductAccountRef): Uint8Array;
+declare function createSessionSigner(session: UserSession, ref: ProductAccountRef): PolkadotSigner;
+
+export { INCOMPLETE_SESSION_MESSAGE, type ProductAccountRef, createSessionSigner, deriveProductPublicKey, sessionRootPublicKey };

package/dist/auth/vendor/sessionSigner.js

@@ -0,0 +1,14 @@
+import {
+  INCOMPLETE_SESSION_MESSAGE,
+  createSessionSigner,
+  deriveProductPublicKey,
+  sessionRootPublicKey
+} from "../../chunk-S6CPT2TU.js";
+import "../../chunk-SH2LG52Z.js";
+import "../../chunk-DNXE3Q5D.js";
+export {
+  INCOMPLETE_SESSION_MESSAGE,
+  createSessionSigner,
+  deriveProductPublicKey,
+  sessionRootPublicKey
+};

package/dist/{signer-Duup0hgQ.d.ts → auth/vendor/signer.d.ts}

@@ -1,6 +1,9 @@
 import { DevAccountName } from '@parity/product-sdk-tx';
 import { PolkadotSigner } from 'polkadot-api';
-import { e as SessionHandle, S as SessionAddresses, A as AuthClient } from './auth-CA_YKtM2.js';
+import { SessionHandle, SessionAddresses, AuthClient } from './auth.js';
+import '@parity/product-sdk-terminal';
+import './allocations.js';
+import './types.js';
 
 type SignerSource = "dev" | "session";
 interface ResolvedSigner {
@@ -32,4 +35,4 @@ declare function parseDevAccountName(suri: string): DevAccountName | null;
  */
 declare function resolveSigner(authClient: AuthClient, options?: SignerOptions): Promise<ResolvedSigner>;
 
-export { type ResolvedSigner as R, SignerNotAvailableError as S, type SignerOptions as a, type SignerSource as b, parseDevAccountName as p, resolveSigner as r };
+export { type ResolvedSigner, SignerNotAvailableError, type SignerOptions, type SignerSource, parseDevAccountName, resolveSigner };

package/dist/auth/vendor/signer.js

@@ -0,0 +1,10 @@
+import {
+  SignerNotAvailableError,
+  parseDevAccountName,
+  resolveSigner
+} from "../../chunk-2C6SLLBI.js";
+export {
+  SignerNotAvailableError,
+  parseDevAccountName,
+  resolveSigner
+};

package/dist/auth/vendor/types.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Per-product configuration injected into `createAuthClient`. Lifting the
+ * sign-in glue out of playground-cli (issue #411) means the env-specific
+ * constants playground hard-coded in its `config.ts` (DAPP_ID, product id,
+ * metadata URL, People-chain endpoints) become consumer-supplied so the same
+ * package serves `playground` and `dot` (and future products) unchanged.
+ */
+interface AuthConfig {
+    /** The dApp identity string. Scopes the on-disk session namespace
+     *  (`~/.polkadot-apps/${dappId}_*`) and the SSO pairing — each product
+     *  gets its own, independently-revocable session. */
+    dappId: string;
+    /** Product id used to derive the product account (`/product/{productId}/{index}`). */
+    productId: string;
+    /** Derivation index of the product account (0 = default). */
+    derivationIndex: number;
+    /** Wallet-facing app name shown on the Sign-In screen (sent inline at pairing). */
+    hostName: string;
+    /** Host app version sent inline at pairing. */
+    hostVersion: string;
+    /** People-parachain RPC endpoints the terminal adapter connects to. */
+    peopleEndpoints: string[];
+}
+
+export type { AuthConfig };

package/dist/auth/vendor/ui/index.d.ts

@@ -1,15 +1,6 @@
 export { renderQrCode } from '@parity/product-sdk-terminal';
-import { b as LoginStatus, d as LogoutStatus } from '../../../auth-CA_YKtM2.js';
+export { renderLoginStatus, renderLogoutStatus } from './status.js';
+import '../auth.js';
 import 'polkadot-api';
-import '../../../allocations-CEPeZr6T.js';
-
-/**
- * Pure formatters that map the `LoginStatus` / `LogoutStatus` streams to
- * one-line terminal messages. No I/O, no terminal deps — `import type` only,
- * so this module stays unit-testable without the SSO stack.
- */
-
-declare function renderLoginStatus(status: LoginStatus): string;
-declare function renderLogoutStatus(status: LogoutStatus): string;
-
-export { renderLoginStatus, renderLogoutStatus };
+import '../allocations.js';
+import '../types.js';

package/dist/auth/vendor/ui/index.js

@@ -1,8 +1,11 @@
+import "../../../chunk-DFKEG3WY.js";
 import {
-  renderLoginStatus,
-  renderLogoutStatus,
   renderQrCode
-} from "../../../chunk-RIRDBSBG.js";
+} from "../../../chunk-RPBMNTGZ.js";
+import {
+  renderLoginStatus,
+  renderLogoutStatus
+} from "../../../chunk-YP3LINCF.js";
 export {
   renderLoginStatus,
   renderLogoutStatus,

package/dist/auth/vendor/ui/qr.d.ts

@@ -0,0 +1 @@
+export { renderQrCode } from '@parity/product-sdk-terminal';

package/dist/auth/vendor/ui/qr.js

@@ -0,0 +1,6 @@
+import {
+  renderQrCode
+} from "../../../chunk-RPBMNTGZ.js";
+export {
+  renderQrCode
+};

package/dist/auth/vendor/ui/status.d.ts

@@ -0,0 +1,16 @@
+import '@parity/product-sdk-terminal';
+import { LoginStatus, LogoutStatus } from '../auth.js';
+import 'polkadot-api';
+import '../allocations.js';
+import '../types.js';
+
+/**
+ * Pure formatters that map the `LoginStatus` / `LogoutStatus` streams to
+ * one-line terminal messages. No I/O, no terminal deps — `import type` only,
+ * so this module stays unit-testable without the SSO stack.
+ */
+
+declare function renderLoginStatus(status: LoginStatus): string;
+declare function renderLogoutStatus(status: LogoutStatus): string;
+
+export { renderLoginStatus, renderLogoutStatus };

package/dist/auth/vendor/ui/status.js

@@ -0,0 +1,8 @@
+import {
+  renderLoginStatus,
+  renderLogoutStatus
+} from "../../../chunk-YP3LINCF.js";
+export {
+  renderLoginStatus,
+  renderLogoutStatus
+};

package/dist/auth-config.d.ts

@@ -1,8 +1,9 @@
-import { a as AuthConfig, A as AuthClient } from './auth-CA_YKtM2.js';
+import { AuthClient } from './auth/vendor/auth.js';
+import { AuthConfig } from './auth/vendor/types.js';
 import { EnvironmentsDoc } from './environments.js';
 import '@parity/product-sdk-terminal';
 import 'polkadot-api';
-import './allocations-CEPeZr6T.js';
+import './auth/vendor/allocations.js';
 
 /** dApp identity: scopes the SSO session namespace + terminal allowance cache on disk
  *  and the wallet pairing product. Aligned to the app's dedicated id "polkadot-app-deploy". */
@@ -24,6 +25,14 @@ declare const DOT_HOST_NAME = "polkadot-app-deploy";
  * The adapter silently returns [] in this case; we surface the cause and recovery steps.
  */
 declare const STALE_SESSION_MESSAGE: string;
+/**
+ * Deploy-specific variant of STALE_SESSION_MESSAGE. See src/deploy-actors.ts's
+ * resolveDeployActors for the full rationale (issue #234) — in short, `deploy`
+ * has a remedy `whoami` doesn't: an explicit `--mnemonic` / `MNEMONIC` signer,
+ * which wins even when the persisted session can't be read. Naming it here
+ * means the fail-fast error doesn't just point at re-pairing.
+ */
+declare const STALE_SESSION_DEPLOY_MESSAGE = "Stored login session could not be read \u2014 it may have been written by an older version. Run \"bulletin-deploy logout\", then \"bulletin-deploy login\" to pair again. Or pass --mnemonic explicitly to sign with a different key.";
 /**
  * Returns true if there is a persisted SSO session file on disk.
  * Does NOT load the SSO stack — uses only node fs/os/path.
@@ -63,4 +72,4 @@ declare function getPeopleChainEndpoints(envId: string): Promise<string[]>;
  */
 declare function getAuthClient(envId: string): Promise<AuthClient>;
 
-export { DOT_DAPP_ID, DOT_DERIVATION_INDEX, DOT_HOST_NAME, DOT_PRODUCT_ID, STALE_SESSION_MESSAGE, buildAuthConfig, getAuthClient, getPeopleChainEndpoints, hasPersistedSession, resolveBulletinEndpoints };
+export { DOT_DAPP_ID, DOT_DERIVATION_INDEX, DOT_HOST_NAME, DOT_PRODUCT_ID, STALE_SESSION_DEPLOY_MESSAGE, STALE_SESSION_MESSAGE, buildAuthConfig, getAuthClient, getPeopleChainEndpoints, hasPersistedSession, resolveBulletinEndpoints };

package/dist/auth-config.js

@@ -3,23 +3,25 @@ import {
   DOT_DERIVATION_INDEX,
   DOT_HOST_NAME,
   DOT_PRODUCT_ID,
+  STALE_SESSION_DEPLOY_MESSAGE,
   STALE_SESSION_MESSAGE,
   buildAuthConfig,
   getAuthClient,
   getPeopleChainEndpoints,
   hasPersistedSession,
   resolveBulletinEndpoints
-} from "./chunk-KACRAHSV.js";
-import "./chunk-TSPERKUS.js";
+} from "./chunk-IF3SANQR.js";
 import "./chunk-3NR3T7US.js";
-import "./chunk-A3VWIJKO.js";
-import "./chunk-QKEZK2M6.js";
+import "./chunk-YLLTQM5Z.js";
+import "./chunk-3BSPX4JN.js";
 import "./chunk-SH2LG52Z.js";
+import "./chunk-DNXE3Q5D.js";
 export {
   DOT_DAPP_ID,
   DOT_DERIVATION_INDEX,
   DOT_HOST_NAME,
   DOT_PRODUCT_ID,
+  STALE_SESSION_DEPLOY_MESSAGE,
   STALE_SESSION_MESSAGE,
   buildAuthConfig,
   getAuthClient,

package/dist/bug-report.js

@@ -10,10 +10,10 @@ import {
   offerBugReport,
   scrubSecrets,
   setDeployContext
-} from "./chunk-NGVCDMLS.js";
-import "./chunk-567ZRMI6.js";
-import "./chunk-A3VWIJKO.js";
-import "./chunk-QKEZK2M6.js";
+} from "./chunk-LRRFXOLE.js";
+import "./chunk-BXDMEOLH.js";
+import "./chunk-YLLTQM5Z.js";
+import "./chunk-3BSPX4JN.js";
 import "./chunk-SH2LG52Z.js";
 export {
   buildCliFlagsSummary,

package/dist/chain-health.js

@@ -3,9 +3,9 @@ import {
   DEFAULT_WINDOW_BLOCKS,
   MAX_SPANS_PER_SAMPLER,
   endpointHost
-} from "./chunk-IUPVNIVY.js";
-import "./chunk-A3VWIJKO.js";
-import "./chunk-QKEZK2M6.js";
+} from "./chunk-MTXFJTX6.js";
+import "./chunk-YLLTQM5Z.js";
+import "./chunk-3BSPX4JN.js";
 import "./chunk-SH2LG52Z.js";
 export {
   ChainHealthSampler,

package/dist/{chunk-IJ3ONWE7.js → chunk-26ZYMWSC.js}

@@ -1,9 +1,12 @@
+import {
+  getWsProvider
+} from "./chunk-6GHDPDZN.js";
+
 // src/pool.ts
 import { sr25519CreateDerive } from "@polkadot-labs/hdkd";
 import { DEV_PHRASE, entropyToMiniSecret, mnemonicToEntropy } from "@polkadot-labs/hdkd-helpers";
 import { createClient, Enum } from "polkadot-api";
 import { getPolkadotSigner } from "polkadot-api/signer";
-import { getWsProvider } from "polkadot-api/ws";
 import { Keyring } from "@polkadot/keyring";
 import { cryptoWaitReady } from "@polkadot/util-crypto";
 var PAS_DECIMALS_DIVISOR = 1e10;

package/dist/chunk-2C6SLLBI.js

@@ -0,0 +1,57 @@
+// src/auth/vendor/signer.ts
+import { ss58Encode } from "@parity/product-sdk-address";
+import { createDevSigner, getDevPublicKey } from "@parity/product-sdk-tx";
+import { seedToAccount } from "@parity/product-sdk-keys";
+var SignerNotAvailableError = class extends Error {
+  constructor() {
+    super('No signer available. Run "login" to sign in, or pass --suri //Alice for dev.');
+    this.name = "SignerNotAvailableError";
+  }
+};
+var DEV_NAMES = ["Alice", "Bob", "Charlie", "Dave", "Eve", "Ferdie"];
+function parseDevAccountName(suri) {
+  const name = suri.replace(/^\/\//, "");
+  return DEV_NAMES.find((n) => n.toLowerCase() === name.toLowerCase()) ?? null;
+}
+async function resolveSigner(authClient, options) {
+  if (options?.suri) {
+    const devName = parseDevAccountName(options.suri);
+    if (devName) {
+      return {
+        signer: createDevSigner(devName),
+        address: ss58Encode(getDevPublicKey(devName)),
+        source: "dev",
+        destroy() {
+        }
+      };
+    }
+    const sepIdx = options.suri.indexOf("//");
+    const mnemonic = (sepIdx === -1 ? options.suri : options.suri.slice(0, sepIdx)).trim();
+    const path = sepIdx === -1 ? "" : options.suri.slice(sepIdx);
+    try {
+      const account = seedToAccount(mnemonic, path);
+      return {
+        signer: account.signer,
+        address: ss58Encode(account.publicKey),
+        source: "dev",
+        destroy() {
+        }
+      };
+    } catch {
+      throw new Error(
+        `Unrecognized SURI "${options.suri}". Expected a dev name (${DEV_NAMES.join(", ")}) or a BIP-39 mnemonic.`
+      );
+    }
+  }
+  const session = await authClient.getSessionSigner();
+  if (session) {
+    return { ...session, source: "session" };
+  }
+  throw new SignerNotAvailableError();
+}
+
+export {
+  SignerNotAvailableError,
+  parseDevAccountName,
+  resolveSigner
+};

package/dist/{chunk-QKEZK2M6.js → chunk-3BSPX4JN.js}

@@ -6,7 +6,7 @@ import * as path from "path";
 // package.json
 var package_default = {
   name: "bulletin-deploy",
-  version: "0.20.0-rc.1",
+  version: "0.20.0",
   private: false,
   repository: {
     type: "git",
@@ -52,11 +52,11 @@ var package_default = {
     "tools/verify-baked-dsn.mjs"
   ],
   scripts: {
-    build: "tsup src/suppress-localstorage-warning.ts src/index.ts src/deploy.ts src/dotns.ts src/mnemonic.ts src/dotns-protocol.ts src/pool.ts src/telemetry.ts src/chain-health.ts src/memory-report.ts src/merkle.ts src/version-check.ts src/bug-report.ts src/run-state.ts src/environments.ts src/errors.ts src/subname-depth.ts src/manifest.ts src/chunk-probe.ts src/manifest-embed.ts src/manifest-fetch.ts src/manifest-roundtrip.ts src/incremental-stats.ts src/chunker.ts src/personhood/encoding.ts src/personhood/hashing.ts src/personhood/constants.ts src/personhood/member-key.ts src/personhood/people-client.ts src/personhood/proof-validity.ts src/personhood/ring-proof.ts src/personhood/reprove.ts src/personhood/bind-personal-id.ts src/personhood/claim-pgas.ts src/personhood/bind-paid-alias.ts src/personhood/bootstrap.ts src/personhood/chain-prereqs.ts src/manifest/types.ts src/manifest/schema.ts src/manifest/byte-budget.ts src/manifest/compose.ts src/manifest/config-load.ts src/manifest/publish.ts src/auth/index.ts src/auth/vendor/index.ts src/auth/vendor/ui/index.ts src/auth-config.ts src/commands/login.ts src/commands/logout.ts src/commands/whoami.ts src/commands/transfer.ts src/storage-signer.ts src/spinner.ts src/sss-allowance.ts src/sss-allowance-cache.ts src/deploy-actors.ts src/product-account.ts --format esm --dts --clean --target node22",
+    build: "tsup",
     "refresh-environments": "node scripts/refresh-environments.mjs",
     postinstall: "patch-package || true",
     prepare: "npm run build",
-    test: "npm run build && node --test test/test.js test/cli-help.test.js test/helpers/e2e-helpers.test.js test/helpers/e2e-exit-guard.test.js test/environments.test.js test/refresh-environments.test.js test/chunk-sharing-report.test.js test/car-section1-dedup.test.js test/dotns-deployments-parser.test.js test/dotns-token-id.test.js test/dotns-subnode-id.test.js test/dotns-protocol.test.js test/product-manifest.test.js test/bin-manifest-preflight.test.js test/manifest-trusted-products.test.js test/cache-savings-totals.test.js test/error-pattern-signature.test.js test/exit-codes.test.js test/probe-env-health.test.js test/chunk-probe-timeout.test.js test/e2e-chain-calls.test.js test/auth-config.test.js test/whoami.test.js test/login.test.js test/logout.test.js test/auth-resolve.test.js test/storage-signer.test.js test/spinner.test.js test/sss-allowance.test.js test/sss-allowance-cache.test.js test/dotns-transfer.test.js test/deploy-actors.test.js test/transfer-command.test.js test/dotns-register-fee.test.js test/dotns-commitment-resume.test.js test/deploy-label-ordering.test.js test/benign-teardown.test.js test/verify-baked-dsn.test.js test/product-account.test.js test/post-release-monitor-skill.test.js test/test-release-retry-wrapper.js test/reprove-alias-tool.test.js test/bootstrap-env.test.js test/check-chain-identity.test.js && npm run test:vendor",
+    test: "npm run build && node scripts/run-unit-tests.mjs && npm run test:vendor",
     "test:e2e": "npm run build && node --test test/e2e.test.js",
     "test:e2e:smoke": "bash scripts/e2e-pass.sh smoke",
     "test:e2e:pr": "bash scripts/e2e-pass.sh pr",