bulletin-deploy 0.21.0 → 0.22.0-rc.2

package/bin/bulletin-deploy

@@ -7,7 +7,7 @@
 import "../dist/suppress-localstorage-warning.js";
 
 import { deploy, DEFAULT_BULLETIN_RPC, DEFAULT_POOL_SIZE, NonRetryableError, EXIT_CODE_NO_RETRY, isConnectionError, isBenignTeardownError, resolveEffectiveMnemonic, mnemonicConflictNotice, resolveEnvId, shouldPublishManifest, nonInteractivePhoneConfirmationError, printDeploymentCompleteBanner } from "../dist/deploy.js";
-import { VERSION, setDeployAttribute, captureWarning, closeTelemetry, setRunStateActive, markRelaunchOomHintShown, setVersionFreshness } from "../dist/telemetry.js";
+import { VERSION, setDeployAttribute, captureWarning, closeTelemetry, markDeployFatal, setRunStateActive, markRelaunchOomHintShown, setVersionFreshness } from "../dist/telemetry.js";
 import { handleFailedDeploy, handlePreflightVersionCheck, fetchVersionInfo, preReleaseWarning, checkNodeVersion, classifyVersionFreshness, isInteractive } from "../dist/version-check.js";
 import { setDeployContext, installLogCapture, buildCliFlagsSummary } from "../dist/bug-report.js";
 import { loadRunState, writeRunState, shouldSkipStaleWarning, shouldShowOomHint, probablyOomRssMb } from "../dist/run-state.js";
@@ -355,9 +355,6 @@ if (!flags.help && !flags.version) {
     if (finalizing) return;
     finalizing = true;
     try {
-      setDeployAttribute("deploy.status", "killed");
-      setDeployAttribute("deploy.killed", reason);
-      setDeployAttribute("deploy.sad", "true");
       captureWarning(`deploy process terminated: ${reason}`);
     } catch { /* telemetry best-effort */ }
     try { await closeTelemetry(1000); } catch { /* ignore */ }
@@ -390,7 +387,7 @@ if (!flags.help && !flags.version) {
       } catch { /* telemetry best-effort */ }
       return;
     }
-    try { setDeployAttribute("deploy.error", msgStr.slice(0, 200)); } catch {}
+    try { markDeployFatal(e); } catch {}
     finalize(kind, 2);
   };
   process.on("uncaughtException", (e) => handleUnhandled(e, "uncaught"));
@@ -400,9 +397,16 @@ if (!flags.help && !flags.version) {
   // and are retryable from the consumer's perspective. Contrast with
   // NonRetryableError exits (code 78, POSIX EX_CONFIG) which callers must
   // NOT retry — see EXIT_CODE_NO_RETRY in src/errors.ts.
-  process.on("SIGINT", () => finalize("SIGINT", 130));
-  process.on("SIGTERM", () => finalize("SIGTERM", 143));
-  process.on("SIGHUP", () => finalize("SIGHUP", 129));
+  const onSignal = (sig, exitCode) => {
+    try {
+      setDeployAttribute("deploy.status", "killed");
+      setDeployAttribute("deploy.killed", sig);
+    } catch { /* telemetry best-effort */ }
+    finalize(sig, exitCode);
+  };
+  process.on("SIGINT", () => onSignal("SIGINT", 130));
+  process.on("SIGTERM", () => onSignal("SIGTERM", 143));
+  process.on("SIGHUP", () => onSignal("SIGHUP", 129));
 }
 
 try {

package/dist/auth/index.js

@@ -8,6 +8,10 @@ import {
   renderLogoutStatus
 } from "../chunk-YP3LINCF.js";
 import "../chunk-NJKXXDDK.js";
+import {
+  SignerNotAvailableError,
+  resolveSigner
+} from "../chunk-2C6SLLBI.js";
 import {
   createAuthClient
 } from "../chunk-PN5JKONF.js";
@@ -21,10 +25,6 @@ import {
 import {
   SESSION_EXPIRED_MESSAGE
 } from "../chunk-IMCDXJ4G.js";
-import {
-  SignerNotAvailableError,
-  resolveSigner
-} from "../chunk-2C6SLLBI.js";
 import "../chunk-SH2LG52Z.js";
 import "../chunk-DNXE3Q5D.js";
 export {

package/dist/auth/vendor/index.js

@@ -1,4 +1,9 @@
 import "../../chunk-NJKXXDDK.js";
+import {
+  SignerNotAvailableError,
+  parseDevAccountName,
+  resolveSigner
+} from "../../chunk-2C6SLLBI.js";
 import {
   createAuthClient
 } from "../../chunk-PN5JKONF.js";
@@ -16,11 +21,6 @@ import {
   deriveProductPublicKey,
   sessionRootPublicKey
 } from "../../chunk-IMCDXJ4G.js";
-import {
-  SignerNotAvailableError,
-  parseDevAccountName,
-  resolveSigner
-} from "../../chunk-2C6SLLBI.js";
 import "../../chunk-SH2LG52Z.js";
 import "../../chunk-DNXE3Q5D.js";
 export {

package/dist/auth-config.js

@@ -10,10 +10,10 @@ import {
   hasPersistedSession,
   readNetworkSuffix,
   resolveBulletinEndpoints
-} from "./chunk-GL7JKE7O.js";
+} from "./chunk-ZTXHG3LV.js";
 import "./chunk-3NR3T7US.js";
-import "./chunk-4FIMYLWV.js";
-import "./chunk-7QQZ57E6.js";
+import "./chunk-7JM6FJM3.js";
+import "./chunk-WM4BQ7YJ.js";
 import "./chunk-SH2LG52Z.js";
 import "./chunk-DNXE3Q5D.js";
 export {

package/dist/bug-report.js

@@ -10,10 +10,10 @@ import {
   offerBugReport,
   scrubSecrets,
   setDeployContext
-} from "./chunk-GLLLSFMA.js";
-import "./chunk-KOLWOUWP.js";
-import "./chunk-4FIMYLWV.js";
-import "./chunk-7QQZ57E6.js";
+} from "./chunk-PY4R353E.js";
+import "./chunk-PZA33HNQ.js";
+import "./chunk-7JM6FJM3.js";
+import "./chunk-WM4BQ7YJ.js";
 import "./chunk-SH2LG52Z.js";
 export {
   buildCliFlagsSummary,

package/dist/chain-health.js

@@ -3,9 +3,9 @@ import {
   DEFAULT_WINDOW_BLOCKS,
   MAX_SPANS_PER_SAMPLER,
   endpointHost
-} from "./chunk-UPENVZ7J.js";
-import "./chunk-4FIMYLWV.js";
-import "./chunk-7QQZ57E6.js";
+} from "./chunk-UWTR5Z27.js";
+import "./chunk-7JM6FJM3.js";
+import "./chunk-WM4BQ7YJ.js";
 import "./chunk-SH2LG52Z.js";
 export {
   ChainHealthSampler,

package/dist/chunk-6DDB5QOM.js

@@ -0,0 +1,40 @@
+// src/e2e-nonce-barrier.ts
+import * as fs from "fs";
+import * as path from "path";
+var NONCE_SEED_BARRIER_ENV = "BULLETIN_DEPLOY_E2E_NONCE_SEED_BARRIER";
+async function awaitNonceSeedBarrier(opts) {
+  const parties = opts.parties ?? 2;
+  const deadline = Date.now() + (opts.timeoutMs ?? 12e4);
+  const pollMs = opts.pollMs ?? 200;
+  fs.mkdirSync(opts.dir, { recursive: true });
+  fs.writeFileSync(path.join(opts.dir, `${opts.id ?? process.pid}.seed`), String(opts.seed));
+  const seedFiles = () => fs.readdirSync(opts.dir).filter((f) => f.endsWith(".seed"));
+  const readSeeds = (files) => files.map((f) => Number(fs.readFileSync(path.join(opts.dir, f), "utf8"))).sort((a, b) => a - b);
+  for (; ; ) {
+    const files = seedFiles();
+    if (files.length >= parties) return { met: true, seeds: readSeeds(files) };
+    if (Date.now() >= deadline) return { met: false, seeds: readSeeds(files) };
+    await new Promise((r) => setTimeout(r, pollMs));
+  }
+}
+var used = false;
+async function e2eNonceSeedBarrier(seed, env = process.env) {
+  const dir = env[NONCE_SEED_BARRIER_ENV];
+  if (!dir || used) return;
+  used = true;
+  const parties = Number(env[`${NONCE_SEED_BARRIER_ENV}_PARTIES`] || 2);
+  const timeoutMs = Number(env[`${NONCE_SEED_BARRIER_ENV}_TIMEOUT_MS`] || 12e4);
+  console.log(`   E2E nonce-seed barrier: seed ${seed}, waiting for ${parties} parties`);
+  const r = await awaitNonceSeedBarrier({ dir, seed, parties, timeoutMs });
+  console.log(r.met ? `   E2E nonce-seed barrier met: seeds [${r.seeds.join(", ")}]` : `   E2E nonce-seed barrier timed out after ${timeoutMs}ms: seeds [${r.seeds.join(", ")}]`);
+}
+function __resetNonceSeedBarrierForTest() {
+  used = false;
+}
+
+export {
+  NONCE_SEED_BARRIER_ENV,
+  awaitNonceSeedBarrier,
+  e2eNonceSeedBarrier,
+  __resetNonceSeedBarrierForTest
+};

package/dist/{chunk-4FIMYLWV.js → chunk-7JM6FJM3.js}

@@ -1,7 +1,7 @@
 import {
   package_default,
   writeRunState
-} from "./chunk-7QQZ57E6.js";
+} from "./chunk-WM4BQ7YJ.js";
 import {
   FALLBACK_CONFIG_ORIGIN,
   SHIPPED_CONFIG_ORIGIN
@@ -131,6 +131,11 @@ function setVersionFreshness(status) {
   versionFreshness = status;
 }
 async function closeTelemetry(timeoutMs) {
+  if (deployRootSpan) {
+    if (deployRootSpan === deploySpan) deployRootSpan.setAttribute("deploy.outcome", computeDeployOutcome(currentErrorCategory, currentDeploySad, currentSadReason));
+    deployRootSpan.end();
+    deployRootSpan = null;
+  }
   if (!Sentry) return;
   try {
     await Sentry.close(timeoutMs);
@@ -152,6 +157,9 @@ function initTelemetry() {
     // Sentry Node SDK captures os.hostname() by default, which leaks personal
     // machine names (e.g. "Mac.fritz.box"). Override to something anonymous.
     serverName: process.env.CI ? process.env.RUNNER_NAME ?? "ci" : "local",
+    // Library mode registers no uncaughtException listener, so Sentry's fatal
+    // handler is what exits the process; report the deploy as failed first.
+    integrations: [Sentry.onUncaughtExceptionIntegration({ onFatalError: exitOnFatalError })],
     beforeSend(event) {
       if (event.server_name) event.server_name = process.env.CI ? process.env.RUNNER_NAME ?? "ci" : "local";
       if (event.message) event.message = scrubPaths(event.message);
@@ -284,6 +292,9 @@ var DEPLOY_SEED_POOL = {
   "deploy.pool.nonce_collision_missing": 0,
   "deploy.pool.nonce_collision_reupload_count": 0
 };
+var DEPLOY_SEED_POOL_HEALTH = {
+  "deploy.pool.stuck_skipped": "none"
+};
 var DEPLOY_SEED_MANIFEST = {
   "deploy.manifest.fetch_source": "none",
   "deploy.manifest.fetch_attempts": "0",
@@ -327,6 +338,7 @@ function getDeployAttributes(domain) {
     ...DEPLOY_SEED_STORAGE,
     ...DEPLOY_SEED_PROBE,
     ...DEPLOY_SEED_POOL,
+    ...DEPLOY_SEED_POOL_HEALTH,
     ...DEPLOY_SEED_MANIFEST,
     ...DEPLOY_SEED_BULLETIN_UPLOAD,
     ...DEPLOY_SEED_BULLETIN_AUTH,
@@ -340,13 +352,22 @@ function getDeployAttributes(domain) {
     "deploy.tool_version": VERSION,
     "deploy.runner": resolveRunner(),
     "deploy.runner_type": resolveRunnerType(),
+    // #1646: the telemetry verifier scopes its Sentry query to the current CI run
+    // with these (strings, present on every span: both-values rule).
+    "deploy.ci_run_id": process.env.GITHUB_RUN_ID || "none",
+    "deploy.ci_run_attempt": process.env.GITHUB_RUN_ATTEMPT || "none",
     // Present on every span so a dashboard can compute count_if(deploy.version_status,
     // "outdated") / count() — see classifyVersionFreshness in version-check.ts.
     "deploy.version_status": versionFreshness,
     // #1539: unconditional (both-values rule) so count_if(deploy.is_e2e_fixture,
     // "true") / "false" both work — see isE2eFixtureTag above for the full
     // rationale, and setDeployAttribute below for the options.tag/--tag path.
-    "deploy.is_e2e_fixture": String(isE2eFixtureTag(process.env.DEPLOY_TAG))
+    "deploy.is_e2e_fixture": String(isE2eFixtureTag(process.env.DEPLOY_TAG)),
+    // #1626: the E2E harness sets BULLETIN_E2E_EXPECT_FAIL=1 on a deploy it
+    // asserts will fail (S3 owned-elsewhere, governance-reserved, subdomain
+    // orphan…), so the E2E dashboard can exclude those deliberate error spans.
+    // A tag only: nothing else reads the var. Unconditional (both-values rule).
+    "deploy.expected_error": String(process.env.BULLETIN_E2E_EXPECT_FAIL === "1")
   };
   if (hostApp) attrs["deploy.host_app"] = hostApp;
   const hostAppVersion = process.env.BULLETIN_DEPLOY_HOST_APP_VERSION;
@@ -369,23 +390,19 @@ function cameFromOurConfig(msg) {
   const lower = msg.toLowerCase();
   return lower.includes(`came from ${SHIPPED_CONFIG_ORIGIN.toLowerCase()}`) || lower.includes(`came from ${FALLBACK_CONFIG_ORIGIN.toLowerCase()}`);
 }
-var GENERIC_USER_ERROR = new RegExp(`personhood|owned by|owner mismatch|reserved for original|invalid domain label|not authorized for bulletin|insufficient balance|insufficient funds|quota exhausted|insufficient .* authorization|bip39 mnemonic|ipfs cli not installed|base name is \\d+ chars|cannot register it|NameNotAvailable|name must be lowercase|${PHONE_NONINTERACTIVE_FRAGMENT}`, "i");
+function contractAddressCategory(msg) {
+  if (CONTRACT_ADDRESS_FAILURE.test(msg) && /this address came from/i.test(msg) && !cameFromOurConfig(msg)) return "user";
+  return /could not determine the DotNS ABI profile/i.test(msg) ? "environment" : "unknown";
+}
+function categoryOf(kind, msg) {
+  if (kind === "naming.contract_unavailable" || kind === "naming.contract_function_removed") return contractAddressCategory(msg);
+  return ERROR_KIND_CATEGORY[kind];
+}
 function isExpectedError(msg, variant) {
-  const structuralCategory = structuralCategoryOf(variant);
-  if (structuralCategory) return structuralCategory === "user";
-  if (GENERIC_USER_ERROR.test(msg)) return true;
-  if (CONTRACT_ADDRESS_FAILURE.test(msg)) {
-    return /this address came from/i.test(msg) && !cameFromOurConfig(msg);
-  }
-  return false;
+  return classifyDeployError(msg, variant) === "user";
 }
 function classifyDeployError(msg, variant) {
-  const structuralCategory = structuralCategoryOf(variant);
-  if (structuralCategory) return structuralCategory;
-  if (isExpectedError(msg)) return "user";
-  if (/chunk.*failed after.*retr|tx dropped from best chain|timed out after \d+s waiting for block|Contract reverted|Contract execution would revert|dotns register failed|All promises were rejected|"type"\s*:\s*"Invalid"|Commitment still too new|not finalised after \d+s|chain may have (dropped|evicted)|ReviveApi.*timed out|ReviveApi.*returned empty result|\b(?:commit|register|setSubnodeOwner|setResolver|setContenthash|setText|Revive\.call|Utility\.batch_all) timed out after \d+ms|transaction watcher silent for|could not determine the DotNS ABI profile/i.test(msg)) return "environment";
-  if (/javascript heap out of memory|allocation failed.*heap|External signer mode is not supported with dotns-cli/i.test(msg)) return "internal";
-  return "unknown";
+  return structuralCategoryOf(variant) ?? categoryOf(classifyErrorKind(msg, variant), msg);
 }
 function classifySadReason(message) {
   if (/process terminated: SIG/i.test(message)) return "killed";
@@ -415,6 +432,16 @@ var ERROR_KIND_RULES = [
   // (2026-08-06 telemetry sweep: this was the largest live `unknown` bucket —
   // 31 spans, 30 of them env=preview, from the per-env authorizer gap #1209.)
   [/is not authorized for Bulletin storage/i, "storage.rejected"],
+  // The three chunk-inclusion / stuck-queue messages (src/deploy.ts
+  // ChunkInclusionUnverifiedError, src/pool.ts stuckQueueMessage). Ahead of the
+  // generic infra rules: the unverified message interpolates the probe's failure
+  // reason, which routinely reads "timed out" / "websocket closed" and would be
+  // claimed by chain-timeout or connection; the stuck-queue message says "every
+  // chunk would time out", and both inclusion messages end up before the broader
+  // /chunk.*failed after.*retr/ and /not finalised after/ fallbacks.
+  [/Could not verify that chunk .+ is stored on-chain/i, "chain.chunk_unverified"],
+  [/still absent at the best block after \d+ re-upload rounds/i, "chain.chunk_not_included"],
+  [/has a stuck pending-tx queue/i, "chain.queue_stuck"],
   // Revive surfaces the personhood gate as a bare revert reason rather than the
   // "requires ProofOfPersonhoodX, but this signer is NoStatus" prose matched
   // further down — same user-actionable cause, so it shares that kind. Ordered
@@ -450,8 +477,17 @@ var ERROR_KIND_RULES = [
   // Ahead of the generic contract-revert rule: a soulbound refusal is a
   // permanent naming fact, not a transient chain error.
   [/is soulbound and cannot be transferred/i, "naming.soulbound"],
+  // Operator-fixable phrasings, above contract-revert so the actionable kind wins over the wrapper.
+  // formatUnregistrableReason's phrase (#1185); above the label rules since it can quote the PopError it explains.
+  [/cannot register it|base name is \d+ chars|reserved for original/i, "naming.governance_reserved"],
+  [/NameNotAvailable/i, "naming.name_unavailable"],
+  [/invalid domain label|name must be lowercase/i, "naming.invalid_label"],
+  [/insufficient balance|insufficient funds|signer balance .* < estimated fee/i, "funding.insufficient_balance"],
+  [/insufficient .* authorization/i, "storage.allowance_insufficient"],
+  [/bip39 mnemonic/i, "signer.invalid_mnemonic"],
+  [/ipfs cli not installed/i, "tool.ipfs_missing"],
   [/Contract reverted|Contract execution would revert|revert(?:ed|ing)?\s*\(flags=[0-9]+\)|"type"\s*:\s*"ContractReverted"/i, "contract-revert"],
-  [/timed out after \d+s waiting for block|Transaction not included after \d+s|Transaction did not settle within|Commitment still too new after \d+s/i, "chain-timeout"],
+  [/timed out after \d+s waiting for block|Transaction not included after \d+s|Transaction did not settle within|Commitment still too new/i, "chain-timeout"],
   [/\bstale\b.*nonce|nonce.*\bstale\b|"type"\s*:\s*"(?:Future|Stale)"|Invalid::Future|tx rejected by pool/i, "nonce-stale"],
   // Invalid::BadProof: the extrinsic's signature didn't verify (wrong genesis
   // hash / mortality window / spec version, or a re-signed payload mismatch).
@@ -465,6 +501,8 @@ var ERROR_KIND_RULES = [
   [/short names are not on sale on|Short names are not for sale/i, "naming.short_names_closed"],
   [/requires ProofOfPersonhood(?:Full|Lite|Light),\s*but this signer is NoStatus/i, "naming.pop_required"],
   [/requires NoStatus,\s*but this signer is ProofOfPersonhood/i, "naming.nostatus_required"],
+  // Other personhood phrasings ("Requires Full Personhood verification", "personhood check failed"): after both specific rules above so their kinds win.
+  [/personhood/i, "naming.pop_required"],
   // #1345 (2026-09-01 previewnet TLD change, fixed in #1324): checkTldNodeConsistency's
   // safety-net throw (src/dotns.ts). Was 100% of the 48-span 'unknown' majority in the
   // 7d sweep — anchored on the stable prefix, never on the interpolated namehash values.
@@ -473,6 +511,11 @@ var ERROR_KIND_RULES = [
   // Anchored on the stable "DotNS signer ... PAS free; needs ≥" shape, never on the
   // interpolated address/amounts — those vary per signer and per fee floor.
   [/DotNS signer .+ PAS free; needs ≥/i, "funding.insufficient_balance"],
+  // Revive's TransferFailed module error, raised by register / finalize-registration
+  // (formatDispatchError JSON) when concurrent deploys on one shared signer spent its
+  // balance after the preflight check passed. Matches the variant name alone: the
+  // enclosing JSON can be cut by truncation, the innermost variant is the tail.
+  [/"type"\s*:\s*"TransferFailed"/i, "funding.transfer_failed"],
   [/Cannot decode zero data.*with ABI parameters/i, "dotns.abi_decode_empty"],
   // Issue #1060: contractCall's own empty-`0x`-data guard (src/dotns.ts, #729) throws
   // an actionable wrapper instead of letting the raw viem message above reach a
@@ -512,33 +555,34 @@ var ERROR_KIND_RULES = [
   // coming back with empty data. Genuinely a missing-contract config problem,
   // not a removed-function one — stays naming.contract_unavailable.
   [/Invalid contract address for \w+ in environment/i, "naming.contract_unavailable"],
-  [new RegExp(`Domain\\s+\\S+\\.${TLD_FRAGMENT}\\s+is already owned by\\s+0x[a-fA-F0-9]+`, "i"), "naming.already_owned"],
-  // #1185: formatUnregistrableReason's distinctive phrase — present in both
-  // the unregistered ("...is not registered, and bulletin-deploy cannot
-  // register it: ...") and owned-by-another-account ("...is owned by
-  // 0x..., and bulletin-deploy cannot register it for a different account:
-  // ...") variants, so one rule classifies both. Ordered before
-  // naming.subdomain_orphan (a different message shape entirely) and after
-  // naming.already_owned (whose "already owned by 0x..." phrasing this rule
-  // never produces, so there's no overlap either way).
-  [/cannot register it/i, "naming.governance_reserved"],
   [new RegExp(`Cannot deploy\\s+[\\w.-]+\\.${TLD_FRAGMENT}:\\s*parent\\s+[\\w.-]+\\.${TLD_FRAGMENT}\\s+is owned by`, "i"), "naming.subdomain_orphan"],
+  // After subdomain_orphan, whose "is owned by" it would otherwise claim.
+  [/owner mismatch|\bowned by\b/i, "naming.already_owned"],
   [/Post-deploy verification failed for .+: on-chain contenthash is /i, "verify.contenthash_mismatch"],
   [/Deploy verification failed:\s*DAG-PB root.+not finalised/i, "verify.dagpb_not_finalised"],
   [/Retry budget exhausted:.*recovery attempts/i, "network.recovery_exhausted"],
   [/Account auto-mapping did not take effect on-chain/i, "account.mapping_pending"],
-  [/ReviveApi\.\w+ timed out after \d+ms/i, "chain.api_timeout"],
-  [/ReviveApi\.\w+ returned empty result/i, "chain.api_timeout"],
-  [/transaction watcher silent for \d+s/i, "chain.tx_silent"],
+  [/ReviveApi.*timed out/i, "chain.api_timeout"],
+  [/ReviveApi.*returned empty result/i, "chain.api_timeout"],
+  [/transaction watcher silent for/i, "chain.tx_silent"],
   [/(?:commit|register|setSubnodeOwner|setResolver|setContenthash|setText|Revive\.call|Utility\.batch_all) timed out after \d+ms/i, "chain.tx_timeout"],
   // Prefix, not the full `AncientBirthBlock` variant name: at 17 chars it is
   // long enough to be cut in half by the 100-char truncation both src/deploy.ts
   // producer sites apply to the inner chain error, which sent a live span to
   // `unknown` with the message ending `"type": "AncientBirth`.
   [/AncientBirth/i, "chain.extrinsic_expired"],
-  [/Bulletin quota exhausted/i, "chain.quota_exhausted"],
+  [/quota exhausted/i, "chain.quota_exhausted"],
   [/Mobile (?:transaction )?signing (?:failed|rejected).*message too big/i, "signer.message_too_large"],
-  [/^INVARIANT FAILED:/i, "tool.invariant"]
+  [/^INVARIANT FAILED:/i, "tool.invariant"],
+  // Broad fallbacks, last.
+  [/javascript heap out of memory|allocation failed.*heap/i, "tool.out_of_memory"],
+  [/External signer mode is not supported with dotns-cli/i, "tool.external_signer_unsupported"],
+  [/All promises were rejected/i, "network.endpoints_failed"],
+  [/tx dropped from best chain|chain may have (?:dropped|evicted)/i, "chain.tx_dropped"],
+  [/not finalised after \d+s/i, "chain.not_finalised"],
+  [/chunk.*failed after.*retr/i, "chain.chunk_failed"],
+  [/"type"\s*:\s*"Invalid"/i, "chain.tx_invalid"],
+  [/dotns register failed/i, "dotns.register_failed"]
 ];
 var INVALID_TRANSACTION_VARIANT_KIND = {
   Future: "nonce-stale",
@@ -555,6 +599,63 @@ function classifyErrorKind(msg, variant) {
   }
   return "unknown";
 }
+var ERROR_KIND_CATEGORY = {
+  "contract-revert": "environment",
+  "chain-timeout": "environment",
+  "nonce-stale": "environment",
+  "connection": "environment",
+  "naming.pop_required": "user",
+  "naming.nostatus_required": "user",
+  "naming.contract_unavailable": "unknown",
+  // see contractAddressCategory
+  "naming.contract_function_removed": "unknown",
+  // see contractAddressCategory
+  "dotns.abi_decode_empty": "unknown",
+  // never attributed; kept visible
+  "naming.already_owned": "user",
+  "naming.governance_reserved": "user",
+  "naming.short_names_closed": "user",
+  "naming.soulbound": "user",
+  "naming.subdomain_orphan": "user",
+  "naming.invalid_label": "user",
+  "naming.name_unavailable": "user",
+  "naming.tld_mismatch": "environment",
+  "funding.insufficient_balance": "user",
+  "funding.transfer_failed": "user",
+  "verify.contenthash_mismatch": "environment",
+  "verify.dagpb_not_finalised": "environment",
+  "network.recovery_exhausted": "environment",
+  "network.endpoints_failed": "environment",
+  "account.mapping_pending": "environment",
+  "chain.api_timeout": "environment",
+  "chain.tx_timeout": "environment",
+  "chain.tx_silent": "environment",
+  "chain.extrinsic_expired": "environment",
+  "chain.quota_exhausted": "user",
+  "chain.bad_proof": "environment",
+  "chain.chunk_failed": "environment",
+  "chain.chunk_unverified": "environment",
+  "chain.chunk_not_included": "environment",
+  // Always the node's pool state, not the operator's: a pinned index is only the
+  // remedy (unset/pick another), the stuck queue is the cause, and the same
+  // message is also thrown for a direct signer that pinned nothing.
+  "chain.queue_stuck": "environment",
+  "chain.tx_dropped": "environment",
+  "chain.tx_invalid": "environment",
+  "chain.not_finalised": "environment",
+  "dotns.register_failed": "environment",
+  "signer.message_too_large": "environment",
+  "signer.invalid_mnemonic": "user",
+  "storage.rejected": "user",
+  "storage.allowance_insufficient": "user",
+  "user.aborted": "user",
+  "signer.phone_confirmation_unavailable": "user",
+  "tool.invariant": "internal",
+  "tool.ipfs_missing": "user",
+  "tool.out_of_memory": "internal",
+  "tool.external_signer_unsupported": "internal",
+  "unknown": "unknown"
+};
 function chainErrorVariantOf(error) {
   return error?.chainErrorVariant;
 }
@@ -609,6 +710,7 @@ async function withSpan(op, description, attributes, fn) {
 }
 var memoryPeak = null;
 var deployRootSpan = null;
+var deploySpan = null;
 var stageSamples = {};
 var reportContext = {};
 var currentErrorCategory = null;
@@ -674,6 +776,7 @@ async function withDeploySpan(domain, fn) {
   try {
     return await Sentry.startSpan({ op: "deploy", name: `deploy ${domain}`, attributes: attrs }, async (span) => {
       deployRootSpan = span;
+      deploySpan = span;
       span.setAttribute("deploy.tool_version", VERSION);
       if (relaunchOomHintShown) {
         span.setAttribute("deploy.relaunch.oom_hint_shown", "true");
@@ -694,19 +797,7 @@ async function withDeploySpan(domain, fn) {
         span.setAttribute("deploy.status", "ok");
         return result;
       } catch (error) {
-        const msg = error.message ?? String(error);
-        const variant = chainErrorVariantOf(error);
-        span.setAttribute("deploy.status", "error");
-        setDeployErrorOnSpan(span, msg, variant);
-        const errorCategory = classifyDeployError(msg, variant);
-        span.setAttribute("deploy.error_category", errorCategory);
-        currentErrorCategory = errorCategory;
-        const isExpected = isExpectedError(msg, variant);
-        span.setAttribute("deploy.expected", isExpected ? "true" : "false");
-        span.setAttribute("deploy.sad", isExpected ? "false" : "true");
-        if (!isExpected) {
-          span.setStatus({ code: 2, message: "internal_error" });
-        }
+        recordDeployFailure(span, error);
         throw error;
       } finally {
         sampleMemory("end");
@@ -757,6 +848,7 @@ async function withDeploySpan(domain, fn) {
   } finally {
     memoryPeak = null;
     deployRootSpan = null;
+    deploySpan = null;
     stageSamples = {};
     reportContext = {};
     currentErrorCategory = null;
@@ -828,6 +920,29 @@ function setDeployError(msg, variant) {
   if (!deployRootSpan) return;
   setDeployErrorOnSpan(deployRootSpan, msg, variant);
 }
+function recordDeployFailure(span, error) {
+  const msg = error?.message ?? String(error);
+  const variant = chainErrorVariantOf(error);
+  span.setAttribute("deploy.status", "error");
+  setDeployErrorOnSpan(span, msg, variant);
+  const errorCategory = classifyDeployError(msg, variant);
+  span.setAttribute("deploy.error_category", errorCategory);
+  currentErrorCategory = errorCategory;
+  const isExpected = isExpectedError(msg, variant);
+  span.setAttribute("deploy.expected", isExpected ? "true" : "false");
+  span.setAttribute("deploy.sad", isExpected ? "false" : "true");
+  if (!isExpected) {
+    span.setStatus({ code: 2, message: "internal_error" });
+  }
+}
+function markDeployFatal(error) {
+  if (deployRootSpan && deployRootSpan === deploySpan) recordDeployFailure(deployRootSpan, error);
+}
+function exitOnFatalError(error) {
+  console.error(error);
+  markDeployFatal(error);
+  void closeTelemetry(2e3).finally(() => process.exit(1));
+}
 function __setDeployRootSpanForTest(span) {
   deployRootSpan = span;
 }
@@ -1035,6 +1150,7 @@ export {
   computeDeployOutcome,
   classifiableErrorKinds,
   classifyErrorKind,
+  ERROR_KIND_CATEGORY,
   sanitizeErrorMessage,
   analyseErrorPattern,
   withSpan,
@@ -1044,6 +1160,7 @@ export {
   setDeployReportContext,
   setDeployAttribute,
   setDeployError,
+  markDeployFatal,
   __setDeployRootSpanForTest,
   __setSentryForTest,
   getCurrentSentryTraceId,

package/dist/{chunk-K57H4IRT.js → chunk-C75KFENW.js}

@@ -1,6 +1,6 @@
 import {
   captureWarning
-} from "./chunk-4FIMYLWV.js";
+} from "./chunk-7JM6FJM3.js";
 
 // src/chunk-probe.ts
 import { Twox128, Blake2128Concat, decAnyMetadata, unifyMetadata } from "@polkadot-api/substrate-bindings";

package/dist/{chunk-CQA3JPYX.js → chunk-CFSMENKV.js}

@@ -19,13 +19,13 @@ import {
   setBulletinEndpoints,
   storeDirectory,
   storeFile
-} from "./chunk-EWQ2QZ44.js";
+} from "./chunk-YQF5Y2HS.js";
 import {
   DEFAULT_TLD,
   DotNS,
   parseDomainName,
   stripTldSuffix
-} from "./chunk-IOLWREZB.js";
+} from "./chunk-PR52KVWQ.js";
 import {
   DEFAULT_ENV_ID,
   getPopSelfServeConfig,
@@ -36,7 +36,7 @@ import {
   setDeployAttribute,
   withManifestSpan,
   withSpan
-} from "./chunk-4FIMYLWV.js";
+} from "./chunk-7JM6FJM3.js";
 import {
   NonRetryableError
 } from "./chunk-SH2LG52Z.js";

package/dist/{chunk-WYZUDE6I.js → chunk-HE6CD5SW.js}

@@ -1,9 +1,9 @@
 import {
   endpointHost
-} from "./chunk-UPENVZ7J.js";
+} from "./chunk-UWTR5Z27.js";
 import {
   captureWarning
-} from "./chunk-4FIMYLWV.js";
+} from "./chunk-7JM6FJM3.js";
 
 // src/ws.ts
 import { getWsProvider as papiGetWsProvider } from "polkadot-api/ws";