bulletin-deploy 0.20.0 → 0.21.0

package/dist/auth/index.d.ts

@@ -1,8 +1,10 @@
 export { AuthClient, ConnectResult, LoginHandle, LoginStatus, LogoutHandle, LogoutStatus, SessionAddresses, SessionHandle, createAuthClient } from './vendor/auth.js';
-export { renderQrCode } from '@parity/product-sdk-terminal';
+export { SESSION_EXPIRED_MESSAGE } from './vendor/sessionSigner.js';
 export { ResolvedSigner, SignerNotAvailableError, resolveSigner } from './vendor/signer.js';
-export { AllocatableResource, AllocationOutcome, AllocationSummary, BULLETIN_RESOURCE, DEFAULT_RESOURCES, createSlotAccountSigner, requestResourceAllocation, summarizeOutcomes } from './vendor/allocations.js';
+export { AllocationOutcome, AllocationSummary, BULLETIN_RESOURCE, DEFAULT_RESOURCES, createSlotAccountSigner, requestResourceAllocation, summarizeOutcomes } from './vendor/allocations.js';
 export { AuthConfig } from './vendor/types.js';
+export { renderQrCode } from '@parity/product-sdk-terminal';
 export { renderLoginStatus, renderLogoutStatus } from './vendor/ui/status.js';
+export { AllocatableResource } from '@parity/product-sdk-terminal/host';
 import 'polkadot-api';
 import '@parity/product-sdk-tx';

package/dist/auth/index.js

@@ -10,15 +10,17 @@ import {
 import "../chunk-NJKXXDDK.js";
 import {
   createAuthClient
-} from "../chunk-G7EH3XIW.js";
+} from "../chunk-PN5JKONF.js";
 import {
   BULLETIN_RESOURCE,
   DEFAULT_RESOURCES,
   createSlotAccountSigner,
   requestResourceAllocation,
   summarizeOutcomes
-} from "../chunk-7SXO544V.js";
-import "../chunk-S6CPT2TU.js";
+} from "../chunk-355BT3NW.js";
+import {
+  SESSION_EXPIRED_MESSAGE
+} from "../chunk-IMCDXJ4G.js";
 import {
   SignerNotAvailableError,
   resolveSigner
@@ -28,6 +30,7 @@ import "../chunk-DNXE3Q5D.js";
 export {
   BULLETIN_RESOURCE,
   DEFAULT_RESOURCES,
+  SESSION_EXPIRED_MESSAGE,
   SignerNotAvailableError,
   createAuthClient,
   createSlotAccountSigner,

package/dist/auth/vendor/allocations.d.ts

@@ -1,40 +1,8 @@
 import * as polkadot_api from 'polkadot-api';
 import { TerminalAdapter, UserSession } from '@parity/product-sdk-terminal';
+import { AllocatableResource, OnExistingAllowancePolicy } from '@parity/product-sdk-terminal/host';
+export { AllocatableResource, OnExistingAllowancePolicy } from '@parity/product-sdk-terminal/host';
 
-/**
- * Structural mirror of host-papp's `ApAllocatableResource` codec type. We
- * declare it locally because host-papp's package root doesn't re-export the
- * codec types yet — when it does (and product-sdk-terminal threads them
- * through) this can be replaced with a direct import.
- *
- *   StatementStoreAllowance — write to the SSS (host_chat, allowance ring).
- *   BulletInAllowance       — write to Bulletin (TransactionStorage.store).
- *   SmartContractAllowance  — PGAS sponsoring for Revive contract calls.
- *                             The `value` is the derivation index of the
- *                             product account (0 for the default account).
- *   AutoSigning             — surrender the product-account signing key to
- *                             the host so it can sign on the user's behalf
- *                             without per-call prompts. Not used today.
- *
- * NOTE: host-api v0.8 renamed this variant to 'BulletinAllowance', but the
- * SSO resource-allocation codec (host-papp, which this path reaches via
- * product-sdk-terminal) retains the old 'BulletInAllowance' spelling as of
- * host-papp 0.8.5 / terminal 0.3.1. Ours must match the SSO codec — the
- * _SDK_COMPAT_PIN below fails the build if the SDK's spelling ever changes.
- */
-type AllocatableResource = {
-    tag: "StatementStoreAllowance";
-    value: undefined;
-} | {
-    tag: "BulletInAllowance";
-    value: undefined;
-} | {
-    tag: "SmartContractAllowance";
-    value: number;
-} | {
-    tag: "AutoSigning";
-    value: undefined;
-};
 /**
  * Outcome of one allocation. We don't read the inner `Allocated` payload
  * (allowance slot keys, derivation secrets) — the host stores them and uses
@@ -53,7 +21,6 @@ type AllocationOutcome = {
 };
 /** Tag-only view, handy for downstream code that doesn't care about payloads. */
 type ResourceTag = AllocatableResource["tag"];
-type OnExistingAllowancePolicy = "Ignore" | "Increase";
 /**
  * Default mobile-granted resource set for a CLI product account: write access
  * to the statement store + Bulletin, plus PGAS sponsoring for the default
@@ -70,7 +37,7 @@ declare const BULLETIN_RESOURCE: AllocatableResource;
  * Send a `host_request_resource_allocation` request over the user's active
  * session. The host (mobile wallet) prompts the user to approve and returns
  * one outcome per requested resource in order. Granted key material is cached
- * to disk by the terminal facet (`{appId}_AllowanceKeys.json`) so subsequent
+ * to disk by the terminal facet (`{productId}_AllowanceKeys.json`) so subsequent
  * calls (and the storage-signer reader) find it without a second wallet prompt.
  *
  * Throws on transport-level failures (Statement Store unreachable, encryption
@@ -81,7 +48,7 @@ declare const BULLETIN_RESOURCE: AllocatableResource;
  * allocate a new slot. Auto-pick would give "Increase" when all slot-table
  * resources are already cached, which re-prompts the user unnecessarily.
  */
-declare function requestResourceAllocation(session: UserSession, adapter: TerminalAdapter, resources?: AllocatableResource[], onExisting?: OnExistingAllowancePolicy): Promise<AllocationOutcome[]>;
+declare function requestResourceAllocation(session: UserSession, adapter: TerminalAdapter, productId: string, resources?: AllocatableResource[], onExisting?: OnExistingAllowancePolicy): Promise<AllocationOutcome[]>;
 interface AllocationSummary {
     granted: AllocatableResource[];
     rejected: AllocatableResource[];
@@ -94,7 +61,7 @@ interface AllocationSummary {
 declare function summarizeOutcomes(outcomes: AllocationOutcome[], resources: AllocatableResource[]): AllocationSummary;
 /**
  * Read a previously allocated slot signer from the terminal cache
- * (`{appId}_AllowanceKeys.json`) written by `requestResourceAllocation`.
+ * (`{productId}_AllowanceKeys.json`) written by `requestResourceAllocation`.
  *
  * Returns `null` on a cache miss — never triggers a phone prompt. Use this
  * instead of `adapter.allowance.getBulletinSigner()` when the allocation has
@@ -106,6 +73,6 @@ declare function summarizeOutcomes(outcomes: AllocationOutcome[], resources: All
  * to BulletInAllowance). Returns `null` for BulletInAllowance when no cached
  * entry exists.
  */
-declare function createSlotAccountSigner(adapter: TerminalAdapter, resource: AllocatableResource): Promise<polkadot_api.PolkadotSigner | null>;
+declare function createSlotAccountSigner(adapter: TerminalAdapter, resource: AllocatableResource, productId: string): Promise<polkadot_api.PolkadotSigner | null>;
 
-export { type AllocatableResource, type AllocationOutcome, type AllocationSummary, BULLETIN_RESOURCE, DEFAULT_RESOURCES, type OnExistingAllowancePolicy, type ResourceTag, createSlotAccountSigner, requestResourceAllocation, summarizeOutcomes };
+export { type AllocationOutcome, type AllocationSummary, BULLETIN_RESOURCE, DEFAULT_RESOURCES, type ResourceTag, createSlotAccountSigner, requestResourceAllocation, summarizeOutcomes };

package/dist/auth/vendor/allocations.js

@@ -4,7 +4,7 @@ import {
   createSlotAccountSigner,
   requestResourceAllocation,
   summarizeOutcomes
-} from "../../chunk-7SXO544V.js";
+} from "../../chunk-355BT3NW.js";
 export {
   BULLETIN_RESOURCE,
   DEFAULT_RESOURCES,

package/dist/auth/vendor/auth.d.ts

@@ -1,7 +1,8 @@
 import { TerminalAdapter, UserSession } from '@parity/product-sdk-terminal';
 import { PolkadotSigner } from 'polkadot-api';
-import { AllocatableResource, OnExistingAllowancePolicy, AllocationOutcome } from './allocations.js';
+import { AllocationOutcome } from './allocations.js';
 import { AuthConfig } from './types.js';
+import { AllocatableResource, OnExistingAllowancePolicy } from '@parity/product-sdk-terminal/host';
 
 /**
  * The three addresses we surface from a paired session.
@@ -10,9 +11,9 @@ import { AuthConfig } from './types.js';
  *   the mobile app sent over the SSO handshake (bare-mnemonic sr25519 root on
  *   current mobile builds). Keyed by `Resources.Consumers` on the People
  *   parachain, so it's the right input for `lookupUsername`.
- * - `productAddress` — SS58 of the product account derived via
- *   `product/{productId}/{index}` from `rootAccountId`. This is what actually
- *   signs on-chain transactions from the CLI.
+ * - `productAddress`: SS58 of the RFC-0022 product account
+ *   `//product//{productId}/{index}`. This is what actually signs on-chain
+ *   transactions from the CLI.
  * - `productH160` — the same product pubkey as a 20-byte EVM address (Revive /
  *   contracts view). Derived from the SAME pubkey as `productAddress`.
  */
@@ -61,6 +62,8 @@ interface LoginHandle {
 interface SessionHandle {
     address: string;
     addresses: SessionAddresses;
+    /** Product id the account, signer and allowances are scoped to. */
+    productId: string;
     signer: PolkadotSigner;
     userSession: UserSession;
     adapter: TerminalAdapter;

package/dist/auth/vendor/auth.js

@@ -1,8 +1,8 @@
 import {
   createAuthClient
-} from "../../chunk-G7EH3XIW.js";
-import "../../chunk-7SXO544V.js";
-import "../../chunk-S6CPT2TU.js";
+} from "../../chunk-PN5JKONF.js";
+import "../../chunk-355BT3NW.js";
+import "../../chunk-IMCDXJ4G.js";
 import "../../chunk-SH2LG52Z.js";
 import "../../chunk-DNXE3Q5D.js";
 export {

package/dist/auth/vendor/index.d.ts

@@ -1,8 +1,9 @@
 export { AuthClient, ConnectResult, LoginHandle, LoginStatus, LogoutHandle, LogoutStatus, SessionAddresses, SessionHandle, createAuthClient } from './auth.js';
-export { INCOMPLETE_SESSION_MESSAGE, ProductAccountRef, createSessionSigner, deriveProductPublicKey, sessionRootPublicKey } from './sessionSigner.js';
+export { SESSION_EXPIRED_MESSAGE, createSessionSigner, deriveProductPublicKey } from './sessionSigner.js';
 export { ResolvedSigner, SignerNotAvailableError, SignerOptions, SignerSource, parseDevAccountName, resolveSigner } from './signer.js';
-export { AllocatableResource, AllocationOutcome, AllocationSummary, BULLETIN_RESOURCE, DEFAULT_RESOURCES, OnExistingAllowancePolicy, ResourceTag, createSlotAccountSigner, requestResourceAllocation, summarizeOutcomes } from './allocations.js';
+export { AllocationOutcome, AllocationSummary, BULLETIN_RESOURCE, DEFAULT_RESOURCES, ResourceTag, createSlotAccountSigner, requestResourceAllocation, summarizeOutcomes } from './allocations.js';
 export { AuthConfig } from './types.js';
-import '@parity/product-sdk-terminal';
+export { AllocatableResource, OnExistingAllowancePolicy } from '@parity/product-sdk-terminal/host';
+export { INCOMPLETE_SESSION_MESSAGE, ProductAccountRef, sessionRootPublicKey } from '@parity/product-sdk-terminal';
 import 'polkadot-api';
 import '@parity/product-sdk-tx';

package/dist/auth/vendor/index.js

@@ -1,20 +1,21 @@
 import "../../chunk-NJKXXDDK.js";
 import {
   createAuthClient
-} from "../../chunk-G7EH3XIW.js";
+} from "../../chunk-PN5JKONF.js";
 import {
   BULLETIN_RESOURCE,
   DEFAULT_RESOURCES,
   createSlotAccountSigner,
   requestResourceAllocation,
   summarizeOutcomes
-} from "../../chunk-7SXO544V.js";
+} from "../../chunk-355BT3NW.js";
 import {
   INCOMPLETE_SESSION_MESSAGE,
+  SESSION_EXPIRED_MESSAGE,
   createSessionSigner,
   deriveProductPublicKey,
   sessionRootPublicKey
-} from "../../chunk-S6CPT2TU.js";
+} from "../../chunk-IMCDXJ4G.js";
 import {
   SignerNotAvailableError,
   parseDevAccountName,
@@ -26,6 +27,7 @@ export {
   BULLETIN_RESOURCE,
   DEFAULT_RESOURCES,
   INCOMPLETE_SESSION_MESSAGE,
+  SESSION_EXPIRED_MESSAGE,
   SignerNotAvailableError,
   createAuthClient,
   createSessionSigner,

package/dist/auth/vendor/sessionSigner.d.ts

@@ -1,28 +1,25 @@
-import { UserSession } from '@parity/product-sdk-terminal';
+import { UserSession, ProductAccountRef, ProductSubtreeOptions } from '@parity/product-sdk-terminal';
+export { INCOMPLETE_SESSION_MESSAGE, ProductAccountRef, sessionRootPublicKey } from '@parity/product-sdk-terminal';
 import { PolkadotSigner } from 'polkadot-api';
 
-interface ProductAccountRef {
-    productId: string;
-    derivationIndex: number;
-}
-declare const INCOMPLETE_SESSION_MESSAGE = "Stored login session is missing the root account public key. Run \"logout\" and then \"login\" to pair again.";
-declare function sessionRootPublicKey(session: UserSession): Uint8Array;
 /**
- * Soft-derive the product account public key off a wallet root.
+ * Session-backed `PolkadotSigner` for a product account, built on
+ * product-sdk-terminal's `createSessionSignerForAccount`.
  *
- * This is the single source of truth for product-account math. Both
- * `createSessionSigner` (which builds the signer used to actually sign
- * on-chain) and `deriveSessionAddresses` (which builds the display triple)
- * go through here so a future change to derivation params can't silently
- * desync the signer from what we print.
- *
- * sr25519 soft derivation is composable on public keys alone, so deriving
- * from `rootAccountId` locally produces the SAME public key the mobile
- * derives privately via `mnemonic + "/product/...{idx}"`. Algorithm parity
- * with mobile/desktop is locked by the frozen vectors in
- * `@parity/product-sdk-keys`'s `product-account.test.ts`.
+ * RFC-0022 puts the product account at `//product//{productId}/{index}`. The
+ * first two junctions are hard, so the key cannot be derived from the session's
+ * root public key: the SDK asks the phone for the `//product//{productId}`
+ * subtree key once and caches it in `{appId}_ProductSubtrees.json`.
+ */
+
+declare const SESSION_EXPIRED_MESSAGE: string;
+/** A healthy phone answers in 3-30s; host-papp's own deadline is 240s. */
+declare const SUBTREE_TIMEOUT_MS = 60000;
+/**
+ * The product account public key for `ref`. Reaches the phone only when the
+ * subtree key is not cached yet, which is normally once, right after pairing.
  */
-declare function deriveProductPublicKey(rootAccountId: Uint8Array, ref: ProductAccountRef): Uint8Array;
-declare function createSessionSigner(session: UserSession, ref: ProductAccountRef): PolkadotSigner;
+declare function deriveProductPublicKey(session: UserSession, ref: ProductAccountRef, options?: ProductSubtreeOptions): Promise<Uint8Array>;
+declare function createSessionSigner(session: UserSession, ref: ProductAccountRef, options?: ProductSubtreeOptions): Promise<PolkadotSigner>;
 
-export { INCOMPLETE_SESSION_MESSAGE, type ProductAccountRef, createSessionSigner, deriveProductPublicKey, sessionRootPublicKey };
+export { SESSION_EXPIRED_MESSAGE, SUBTREE_TIMEOUT_MS, createSessionSigner, deriveProductPublicKey };

package/dist/auth/vendor/sessionSigner.js

@@ -1,13 +1,17 @@
 import {
   INCOMPLETE_SESSION_MESSAGE,
+  SESSION_EXPIRED_MESSAGE,
+  SUBTREE_TIMEOUT_MS,
   createSessionSigner,
   deriveProductPublicKey,
   sessionRootPublicKey
-} from "../../chunk-S6CPT2TU.js";
+} from "../../chunk-IMCDXJ4G.js";
 import "../../chunk-SH2LG52Z.js";
 import "../../chunk-DNXE3Q5D.js";
 export {
   INCOMPLETE_SESSION_MESSAGE,
+  SESSION_EXPIRED_MESSAGE,
+  SUBTREE_TIMEOUT_MS,
   createSessionSigner,
   deriveProductPublicKey,
   sessionRootPublicKey

package/dist/auth/vendor/signer.d.ts

@@ -3,6 +3,7 @@ import { PolkadotSigner } from 'polkadot-api';
 import { SessionHandle, SessionAddresses, AuthClient } from './auth.js';
 import '@parity/product-sdk-terminal';
 import './allocations.js';
+import '@parity/product-sdk-terminal/host';
 import './types.js';
 
 type SignerSource = "dev" | "session";

package/dist/auth/vendor/types.d.ts

@@ -10,7 +10,8 @@ interface AuthConfig {
      *  (`~/.polkadot-apps/${dappId}_*`) and the SSO pairing — each product
      *  gets its own, independently-revocable session. */
     dappId: string;
-    /** Product id used to derive the product account (`/product/{productId}/{index}`). */
+    /** RFC-0022 product id `${dappId}.<network suffix>`; the account is `//product//{productId}/{index}`.
+     *  Logout relies on this shape to clear `${dappId}.*` files. */
     productId: string;
     /** Derivation index of the product account (0 = default). */
     derivationIndex: number;

package/dist/auth/vendor/ui/index.d.ts

@@ -3,4 +3,5 @@ export { renderLoginStatus, renderLogoutStatus } from './status.js';
 import '../auth.js';
 import 'polkadot-api';
 import '../allocations.js';
+import '@parity/product-sdk-terminal/host';
 import '../types.js';

package/dist/auth/vendor/ui/status.d.ts

@@ -2,6 +2,7 @@ import '@parity/product-sdk-terminal';
 import { LoginStatus, LogoutStatus } from '../auth.js';
 import 'polkadot-api';
 import '../allocations.js';
+import '@parity/product-sdk-terminal/host';
 import '../types.js';
 
 /**

package/dist/auth-config.d.ts

@@ -4,20 +4,13 @@ import { EnvironmentsDoc } from './environments.js';
 import '@parity/product-sdk-terminal';
 import 'polkadot-api';
 import './auth/vendor/allocations.js';
+import '@parity/product-sdk-terminal/host';
 
-/** dApp identity: scopes the SSO session namespace + terminal allowance cache on disk
- *  and the wallet pairing product. Aligned to the app's dedicated id "polkadot-app-deploy". */
+/** Scopes the SSO session files on disk and prefixes the per-env product ids. */
 declare const DOT_DAPP_ID = "polkadot-app-deploy";
-/** Product id used for product-account derivation (`/product/{productId}/{index}`).
- *  UNIFIED with DOT_DAPP_ID (#885): the wallet funds PGAS to product/{appId}/{index},
- *  so deriving the signer/owner under the same id lands the account where PGAS sits —
- *  one account is owner + AH signer + PGAS-funded. Requires a fresh re-pairing so the
- *  Bulletin/statement allowance is also claimed under this id (verify the wallet serves
- *  "polkadot-app-deploy"; that's the open mobile-side question). */
-declare const DOT_PRODUCT_ID = "polkadot-app-deploy";
 /** Derivation index (0 = default product account). */
 declare const DOT_DERIVATION_INDEX = 0;
-/** Wallet-facing app name shown on the Sign-In screen. Aligned to the unified identity. */
+/** Wallet-facing app name shown on the Sign-In screen. */
 declare const DOT_HOST_NAME = "polkadot-app-deploy";
 /**
  * Shown when a persisted session file exists but the V2 codec cannot decode it —
@@ -46,7 +39,7 @@ declare function hasPersistedSession(): boolean;
  * `createAuthClient` needs. Throws with a clear message if the people chain or
  * its endpoint for `envId` is absent.
  */
-declare function buildAuthConfig(doc: EnvironmentsDoc, envId: string): AuthConfig;
+declare function buildAuthConfig(doc: EnvironmentsDoc, envId: string, networkSuffix?: string | null): AuthConfig;
 /**
  * Resolve the Bulletin chain WS endpoint(s) for an environment from the
  * environments doc. Mirrors buildAuthConfig's people-chain resolution.
@@ -66,10 +59,15 @@ declare function resolveBulletinEndpoints(doc: EnvironmentsDoc, envId: string):
  * Used by the SSS allowance preflight check — no SSO deps loaded.
  */
 declare function getPeopleChainEndpoints(envId: string): Promise<string[]>;
+/**
+ * The People chain's `NetworkSuffix`, which the phone checks the product id
+ * against. Null when the chain has none or the read fails.
+ */
+declare function readNetworkSuffix(peopleEndpoints: string[]): Promise<string | null>;
 /**
  * Lazily create an auth client for the given environment. Imports the facade
  * only when called so the SSO deps don't load in headless/mnemonic paths.
  */
 declare function getAuthClient(envId: string): Promise<AuthClient>;
 
-export { DOT_DAPP_ID, DOT_DERIVATION_INDEX, DOT_HOST_NAME, DOT_PRODUCT_ID, STALE_SESSION_DEPLOY_MESSAGE, STALE_SESSION_MESSAGE, buildAuthConfig, getAuthClient, getPeopleChainEndpoints, hasPersistedSession, resolveBulletinEndpoints };
+export { DOT_DAPP_ID, DOT_DERIVATION_INDEX, DOT_HOST_NAME, STALE_SESSION_DEPLOY_MESSAGE, STALE_SESSION_MESSAGE, buildAuthConfig, getAuthClient, getPeopleChainEndpoints, hasPersistedSession, readNetworkSuffix, resolveBulletinEndpoints };

package/dist/auth-config.js

@@ -2,30 +2,30 @@ import {
   DOT_DAPP_ID,
   DOT_DERIVATION_INDEX,
   DOT_HOST_NAME,
-  DOT_PRODUCT_ID,
   STALE_SESSION_DEPLOY_MESSAGE,
   STALE_SESSION_MESSAGE,
   buildAuthConfig,
   getAuthClient,
   getPeopleChainEndpoints,
   hasPersistedSession,
+  readNetworkSuffix,
   resolveBulletinEndpoints
-} from "./chunk-IF3SANQR.js";
+} from "./chunk-GL7JKE7O.js";
 import "./chunk-3NR3T7US.js";
-import "./chunk-YLLTQM5Z.js";
-import "./chunk-3BSPX4JN.js";
+import "./chunk-4FIMYLWV.js";
+import "./chunk-7QQZ57E6.js";
 import "./chunk-SH2LG52Z.js";
 import "./chunk-DNXE3Q5D.js";
 export {
   DOT_DAPP_ID,
   DOT_DERIVATION_INDEX,
   DOT_HOST_NAME,
-  DOT_PRODUCT_ID,
   STALE_SESSION_DEPLOY_MESSAGE,
   STALE_SESSION_MESSAGE,
   buildAuthConfig,
   getAuthClient,
   getPeopleChainEndpoints,
   hasPersistedSession,
+  readNetworkSuffix,
   resolveBulletinEndpoints
 };

package/dist/bug-report.js

@@ -10,10 +10,10 @@ import {
   offerBugReport,
   scrubSecrets,
   setDeployContext
-} from "./chunk-LRRFXOLE.js";
-import "./chunk-BXDMEOLH.js";
-import "./chunk-YLLTQM5Z.js";
-import "./chunk-3BSPX4JN.js";
+} from "./chunk-GLLLSFMA.js";
+import "./chunk-KOLWOUWP.js";
+import "./chunk-4FIMYLWV.js";
+import "./chunk-7QQZ57E6.js";
 import "./chunk-SH2LG52Z.js";
 export {
   buildCliFlagsSummary,

package/dist/chain-health.js

@@ -3,9 +3,9 @@ import {
   DEFAULT_WINDOW_BLOCKS,
   MAX_SPANS_PER_SAMPLER,
   endpointHost
-} from "./chunk-MTXFJTX6.js";
-import "./chunk-YLLTQM5Z.js";
-import "./chunk-3BSPX4JN.js";
+} from "./chunk-UPENVZ7J.js";
+import "./chunk-4FIMYLWV.js";
+import "./chunk-7QQZ57E6.js";
 import "./chunk-SH2LG52Z.js";
 export {
   ChainHealthSampler,

package/dist/{chunk-7SXO544V.js → chunk-355BT3NW.js}

@@ -6,12 +6,11 @@ import {
 var DEFAULT_RESOURCES = [
   { tag: "BulletInAllowance", value: void 0 },
   { tag: "StatementStoreAllowance", value: void 0 },
-  // derivation index 0 = the default product account.
-  { tag: "SmartContractAllowance", value: 0 }
+  { tag: "SmartContractAllowance", value: { tag: "Index", value: 0 } }
 ];
 var BULLETIN_RESOURCE = { tag: "BulletInAllowance", value: void 0 };
-async function requestResourceAllocation(session, adapter, resources = DEFAULT_RESOURCES, onExisting = "Ignore") {
-  const outcomes = await terminalRequestResourceAllocation(session, adapter, resources, { onExisting });
+async function requestResourceAllocation(session, adapter, productId, resources = DEFAULT_RESOURCES, onExisting = "Ignore") {
+  const outcomes = await terminalRequestResourceAllocation(session, adapter, resources, { onExisting, productId });
   return outcomes;
 }
 function summarizeOutcomes(outcomes, resources) {
@@ -27,8 +26,8 @@ function summarizeOutcomes(outcomes, resources) {
   });
   return { granted, rejected, unavailable };
 }
-async function createSlotAccountSigner(adapter, resource) {
-  return terminalCreateSlotAccountSigner(adapter, resource);
+async function createSlotAccountSigner(adapter, resource, productId) {
+  return terminalCreateSlotAccountSigner(adapter, resource, productId);
 }
 
 export {

package/dist/{chunk-YLLTQM5Z.js → chunk-4FIMYLWV.js}

@@ -1,7 +1,7 @@
 import {
   package_default,
   writeRunState
-} from "./chunk-3BSPX4JN.js";
+} from "./chunk-7QQZ57E6.js";
 import {
   FALLBACK_CONFIG_ORIGIN,
   SHIPPED_CONFIG_ORIGIN
@@ -537,7 +537,7 @@ var ERROR_KIND_RULES = [
   // `unknown` with the message ending `"type": "AncientBirth`.
   [/AncientBirth/i, "chain.extrinsic_expired"],
   [/Bulletin quota exhausted/i, "chain.quota_exhausted"],
-  [/Mobile signing (?:failed|rejected).*message too big/i, "signer.message_too_large"],
+  [/Mobile (?:transaction )?signing (?:failed|rejected).*message too big/i, "signer.message_too_large"],
   [/^INVARIANT FAILED:/i, "tool.invariant"]
 ];
 var INVALID_TRANSACTION_VARIANT_KIND = {

package/dist/{chunk-3BSPX4JN.js → chunk-7QQZ57E6.js}

@@ -6,7 +6,7 @@ import * as path from "path";
 // package.json
 var package_default = {
   name: "bulletin-deploy",
-  version: "0.20.0",
+  version: "0.21.0",
   private: false,
   repository: {
     type: "git",
@@ -53,6 +53,7 @@ var package_default = {
   ],
   scripts: {
     build: "tsup",
+    typecheck: "tsc --noEmit -p .",
     "refresh-environments": "node scripts/refresh-environments.mjs",
     postinstall: "patch-package || true",
     prepare: "npm run build",
@@ -69,8 +70,8 @@ var package_default = {
     "@ipld/dag-pb": "^4.1.3",
     "@noble/hashes": "^1.7.2",
     "@parity/product-sdk-address": "^0.1.1",
-    "@parity/product-sdk-keys": "^0.3.8",
-    "@parity/product-sdk-terminal": "^0.5.1",
+    "@parity/product-sdk-keys": "^0.4.1",
+    "@parity/product-sdk-terminal": "^0.10.1",
     "@parity/product-sdk-tx": "^0.2.12",
     "@polkadot-api/metadata-builders": "^0.14.2",
     "@polkadot-api/substrate-bindings": "^0.20.2",
@@ -84,7 +85,7 @@ var package_default = {
     jiti: "^2.4.2",
     multiformats: "^13.4.1",
     "patch-package": "^8.0.1",
-    "polkadot-api": "^2.1.3",
+    "polkadot-api": "^2.1.8",
     verifiablejs: "1.3.0-beta.4",
     viem: "^2.55.10",
     ws: "^8.21.0"

package/dist/{chunk-26ZYMWSC.js → chunk-BDUL42WH.js}

@@ -1,6 +1,6 @@
 import {
   getWsProvider
-} from "./chunk-6GHDPDZN.js";
+} from "./chunk-WYZUDE6I.js";
 
 // src/pool.ts
 import { sr25519CreateDerive } from "@polkadot-labs/hdkd";

package/dist/{chunk-IHC2QG2L.js → chunk-CQA3JPYX.js}

@@ -19,13 +19,13 @@ import {
   setBulletinEndpoints,
   storeDirectory,
   storeFile
-} from "./chunk-EBYWI7FI.js";
+} from "./chunk-EWQ2QZ44.js";
 import {
   DEFAULT_TLD,
   DotNS,
   parseDomainName,
   stripTldSuffix
-} from "./chunk-YIVCOJAB.js";
+} from "./chunk-IOLWREZB.js";
 import {
   DEFAULT_ENV_ID,
   getPopSelfServeConfig,
@@ -36,7 +36,7 @@ import {
   setDeployAttribute,
   withManifestSpan,
   withSpan
-} from "./chunk-YLLTQM5Z.js";
+} from "./chunk-4FIMYLWV.js";
 import {
   NonRetryableError
 } from "./chunk-SH2LG52Z.js";

package/dist/{chunk-QBHUCTVT.js → chunk-E77HESGN.js}

@@ -1,9 +1,9 @@
 import {
   checkSSSAllowance
-} from "./chunk-GRPLHUYC.js";
+} from "./chunk-MRZL4IXT.js";
 import {
   DOT_DAPP_ID
-} from "./chunk-IF3SANQR.js";
+} from "./chunk-GL7JKE7O.js";
 
 // src/sss-allowance-cache.ts
 import { mkdir, readFile, writeFile, unlink } from "fs/promises";