bulletin-deploy 0.22.0-rc.1 → 0.22.0

package/dist/auth/index.js

@@ -8,6 +8,10 @@ import {
   renderLogoutStatus
 } from "../chunk-YP3LINCF.js";
 import "../chunk-NJKXXDDK.js";
+import {
+  SignerNotAvailableError,
+  resolveSigner
+} from "../chunk-2C6SLLBI.js";
 import {
   createAuthClient
 } from "../chunk-PN5JKONF.js";
@@ -21,10 +25,6 @@ import {
 import {
   SESSION_EXPIRED_MESSAGE
 } from "../chunk-IMCDXJ4G.js";
-import {
-  SignerNotAvailableError,
-  resolveSigner
-} from "../chunk-2C6SLLBI.js";
 import "../chunk-SH2LG52Z.js";
 import "../chunk-DNXE3Q5D.js";
 export {

package/dist/auth/vendor/index.js

@@ -1,4 +1,9 @@
 import "../../chunk-NJKXXDDK.js";
+import {
+  SignerNotAvailableError,
+  parseDevAccountName,
+  resolveSigner
+} from "../../chunk-2C6SLLBI.js";
 import {
   createAuthClient
 } from "../../chunk-PN5JKONF.js";
@@ -16,11 +21,6 @@ import {
   deriveProductPublicKey,
   sessionRootPublicKey
 } from "../../chunk-IMCDXJ4G.js";
-import {
-  SignerNotAvailableError,
-  parseDevAccountName,
-  resolveSigner
-} from "../../chunk-2C6SLLBI.js";
 import "../../chunk-SH2LG52Z.js";
 import "../../chunk-DNXE3Q5D.js";
 export {

package/dist/auth-config.js

@@ -10,10 +10,10 @@ import {
   hasPersistedSession,
   readNetworkSuffix,
   resolveBulletinEndpoints
-} from "./chunk-KDVHMIKK.js";
+} from "./chunk-5SHGORQT.js";
 import "./chunk-3NR3T7US.js";
-import "./chunk-KXYSKT5U.js";
-import "./chunk-BMUDRQYV.js";
+import "./chunk-BU2OJPLK.js";
+import "./chunk-DGLZHLY5.js";
 import "./chunk-SH2LG52Z.js";
 import "./chunk-DNXE3Q5D.js";
 export {

package/dist/bug-report.js

@@ -10,10 +10,10 @@ import {
   offerBugReport,
   scrubSecrets,
   setDeployContext
-} from "./chunk-RMO7G7X2.js";
-import "./chunk-S2N25SYI.js";
-import "./chunk-KXYSKT5U.js";
-import "./chunk-BMUDRQYV.js";
+} from "./chunk-5UZK76A7.js";
+import "./chunk-XBASBXMQ.js";
+import "./chunk-BU2OJPLK.js";
+import "./chunk-DGLZHLY5.js";
 import "./chunk-SH2LG52Z.js";
 export {
   buildCliFlagsSummary,

package/dist/chain-health.js

@@ -3,9 +3,9 @@ import {
   DEFAULT_WINDOW_BLOCKS,
   MAX_SPANS_PER_SAMPLER,
   endpointHost
-} from "./chunk-NTJRL6TA.js";
-import "./chunk-KXYSKT5U.js";
-import "./chunk-BMUDRQYV.js";
+} from "./chunk-2SOCCHTI.js";
+import "./chunk-BU2OJPLK.js";
+import "./chunk-DGLZHLY5.js";
 import "./chunk-SH2LG52Z.js";
 export {
   ChainHealthSampler,

package/dist/{chunk-NTJRL6TA.js → chunk-2SOCCHTI.js}

@@ -1,7 +1,7 @@
 import {
   emitIntervalSpan,
   setDeployAttribute
-} from "./chunk-KXYSKT5U.js";
+} from "./chunk-BU2OJPLK.js";
 
 // src/chain-health.ts
 var DEFAULT_WINDOW_BLOCKS = 10;

package/dist/{chunk-KDVHMIKK.js → chunk-5SHGORQT.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-3NR3T7US.js";
 import {
   VERSION
-} from "./chunk-KXYSKT5U.js";
+} from "./chunk-BU2OJPLK.js";
 import {
   CLI_NAME
 } from "./chunk-DNXE3Q5D.js";

package/dist/{chunk-RMO7G7X2.js → chunk-5UZK76A7.js}

@@ -2,15 +2,15 @@ import {
   classifyErrorArea,
   isInteractive,
   promptYesNo
-} from "./chunk-S2N25SYI.js";
+} from "./chunk-XBASBXMQ.js";
 import {
   VERSION,
   getCurrentSentryTraceId,
   resolveIssueRepoSlug
-} from "./chunk-KXYSKT5U.js";
+} from "./chunk-BU2OJPLK.js";
 import {
   package_default
-} from "./chunk-BMUDRQYV.js";
+} from "./chunk-DGLZHLY5.js";
 
 // src/bug-report.ts
 import { execSync, execFileSync } from "child_process";

package/dist/chunk-6DDB5QOM.js

@@ -0,0 +1,40 @@
+// src/e2e-nonce-barrier.ts
+import * as fs from "fs";
+import * as path from "path";
+var NONCE_SEED_BARRIER_ENV = "BULLETIN_DEPLOY_E2E_NONCE_SEED_BARRIER";
+async function awaitNonceSeedBarrier(opts) {
+  const parties = opts.parties ?? 2;
+  const deadline = Date.now() + (opts.timeoutMs ?? 12e4);
+  const pollMs = opts.pollMs ?? 200;
+  fs.mkdirSync(opts.dir, { recursive: true });
+  fs.writeFileSync(path.join(opts.dir, `${opts.id ?? process.pid}.seed`), String(opts.seed));
+  const seedFiles = () => fs.readdirSync(opts.dir).filter((f) => f.endsWith(".seed"));
+  const readSeeds = (files) => files.map((f) => Number(fs.readFileSync(path.join(opts.dir, f), "utf8"))).sort((a, b) => a - b);
+  for (; ; ) {
+    const files = seedFiles();
+    if (files.length >= parties) return { met: true, seeds: readSeeds(files) };
+    if (Date.now() >= deadline) return { met: false, seeds: readSeeds(files) };
+    await new Promise((r) => setTimeout(r, pollMs));
+  }
+}
+var used = false;
+async function e2eNonceSeedBarrier(seed, env = process.env) {
+  const dir = env[NONCE_SEED_BARRIER_ENV];
+  if (!dir || used) return;
+  used = true;
+  const parties = Number(env[`${NONCE_SEED_BARRIER_ENV}_PARTIES`] || 2);
+  const timeoutMs = Number(env[`${NONCE_SEED_BARRIER_ENV}_TIMEOUT_MS`] || 12e4);
+  console.log(`   E2E nonce-seed barrier: seed ${seed}, waiting for ${parties} parties`);
+  const r = await awaitNonceSeedBarrier({ dir, seed, parties, timeoutMs });
+  console.log(r.met ? `   E2E nonce-seed barrier met: seeds [${r.seeds.join(", ")}]` : `   E2E nonce-seed barrier timed out after ${timeoutMs}ms: seeds [${r.seeds.join(", ")}]`);
+}
+function __resetNonceSeedBarrierForTest() {
+  used = false;
+}
+
+export {
+  NONCE_SEED_BARRIER_ENV,
+  awaitNonceSeedBarrier,
+  e2eNonceSeedBarrier,
+  __resetNonceSeedBarrierForTest
+};

package/dist/{chunk-KXYSKT5U.js → chunk-BU2OJPLK.js}

@@ -1,7 +1,7 @@
 import {
   package_default,
   writeRunState
-} from "./chunk-BMUDRQYV.js";
+} from "./chunk-DGLZHLY5.js";
 import {
   FALLBACK_CONFIG_ORIGIN,
   SHIPPED_CONFIG_ORIGIN
@@ -352,6 +352,10 @@ function getDeployAttributes(domain) {
     "deploy.tool_version": VERSION,
     "deploy.runner": resolveRunner(),
     "deploy.runner_type": resolveRunnerType(),
+    // #1646: the telemetry verifier scopes its Sentry query to the current CI run
+    // with these (strings, present on every span: both-values rule).
+    "deploy.ci_run_id": process.env.GITHUB_RUN_ID || "none",
+    "deploy.ci_run_attempt": process.env.GITHUB_RUN_ATTEMPT || "none",
     // Present on every span so a dashboard can compute count_if(deploy.version_status,
     // "outdated") / count() — see classifyVersionFreshness in version-check.ts.
     "deploy.version_status": versionFreshness,
@@ -428,6 +432,16 @@ var ERROR_KIND_RULES = [
   // (2026-08-06 telemetry sweep: this was the largest live `unknown` bucket —
   // 31 spans, 30 of them env=preview, from the per-env authorizer gap #1209.)
   [/is not authorized for Bulletin storage/i, "storage.rejected"],
+  // The three chunk-inclusion / stuck-queue messages (src/deploy.ts
+  // ChunkInclusionUnverifiedError, src/pool.ts stuckQueueMessage). Ahead of the
+  // generic infra rules: the unverified message interpolates the probe's failure
+  // reason, which routinely reads "timed out" / "websocket closed" and would be
+  // claimed by chain-timeout or connection; the stuck-queue message says "every
+  // chunk would time out", and both inclusion messages end up before the broader
+  // /chunk.*failed after.*retr/ and /not finalised after/ fallbacks.
+  [/Could not verify that chunk .+ is stored on-chain/i, "chain.chunk_unverified"],
+  [/still absent at the best block after \d+ re-upload rounds/i, "chain.chunk_not_included"],
+  [/has a stuck pending-tx queue/i, "chain.queue_stuck"],
   // Revive surfaces the personhood gate as a bare revert reason rather than the
   // "requires ProofOfPersonhoodX, but this signer is NoStatus" prose matched
   // further down — same user-actionable cause, so it shares that kind. Ordered
@@ -620,6 +634,12 @@ var ERROR_KIND_CATEGORY = {
   "chain.quota_exhausted": "user",
   "chain.bad_proof": "environment",
   "chain.chunk_failed": "environment",
+  "chain.chunk_unverified": "environment",
+  "chain.chunk_not_included": "environment",
+  // Always the node's pool state, not the operator's: a pinned index is only the
+  // remedy (unset/pick another), the stuck queue is the cause, and the same
+  // message is also thrown for a direct signer that pinned nothing.
+  "chain.queue_stuck": "environment",
   "chain.tx_dropped": "environment",
   "chain.tx_invalid": "environment",
   "chain.not_finalised": "environment",

package/dist/{chunk-DKTKQS2N.js → chunk-CL2X6RL2.js}

@@ -1,6 +1,6 @@
 import {
   captureWarning
-} from "./chunk-KXYSKT5U.js";
+} from "./chunk-BU2OJPLK.js";
 
 // src/chunk-probe.ts
 import { Twox128, Blake2128Concat, decAnyMetadata, unifyMetadata } from "@polkadot-api/substrate-bindings";

package/dist/{chunk-7G475SPF.js → chunk-CW2MW6SR.js}

@@ -3,7 +3,7 @@ import {
 } from "./chunk-MRZL4IXT.js";
 import {
   DOT_DAPP_ID
-} from "./chunk-KDVHMIKK.js";
+} from "./chunk-5SHGORQT.js";
 
 // src/sss-allowance-cache.ts
 import { mkdir, readFile, writeFile, unlink } from "fs/promises";

package/dist/{chunk-BMUDRQYV.js → chunk-DGLZHLY5.js}

@@ -2,11 +2,12 @@
 import * as fs from "fs";
 import * as os from "os";
 import * as path from "path";
+import * as crypto from "crypto";
 
 // package.json
 var package_default = {
   name: "bulletin-deploy",
-  version: "0.22.0-rc.1",
+  version: "0.22.0",
   private: false,
   repository: {
     type: "git",
@@ -212,6 +213,13 @@ function commitmentKey(environmentId, tld, owner, label) {
 function commitmentStateFilePath(environmentId, tld, owner, label) {
   return path.join(resolveStateDir(), `commitment-${commitmentKey(environmentId, tld, owner, label)}.json`);
 }
+function commitmentLockFilePath(environmentId, tld, owner, label) {
+  return path.join(resolveStateDir(), `commitment-${commitmentKey(environmentId, tld, owner, label)}.lock`);
+}
+function commitmentRecordKey(record) {
+  if (!record) return null;
+  return typeof record.recordId === "string" ? record.recordId : `legacy:${record.commitment}`;
+}
 var FALLBACK_MAX_COMMITMENT_AGE_SECONDS = 86400;
 var COMMITMENT_RECORD_MAX_AGE_MS = 2 * FALLBACK_MAX_COMMITMENT_AGE_SECONDS * 1e3;
 function pruneStaleCommitmentRecords(nowMs = Date.now()) {
@@ -236,7 +244,7 @@ function pruneStaleCommitmentRecords(nowMs = Date.now()) {
       const record = parseJsonRecord(raw);
       const isStale = record === null || typeof record.savedAt !== "number" || nowMs - record.savedAt > COMMITMENT_RECORD_MAX_AGE_MS;
       if (isStale) tryUnlink(file);
-    } else if (entry.endsWith(".tmp")) {
+    } else if (entry.endsWith(".tmp") || entry.endsWith(".lock") || entry.endsWith(".stale")) {
       let mtimeMs;
       try {
         mtimeMs = fs.statSync(file).mtimeMs;
@@ -254,12 +262,90 @@ function loadCommitmentRecord(environmentId, tld, owner, label) {
 function writeCommitmentRecord(record) {
   return writeJsonAtomic(() => commitmentStateFilePath(record.environmentId, record.tld, record.owner, record.label), record, { mode: COMMITMENT_FILE_MODE });
 }
-function clearCommitmentRecord(environmentId, tld, owner, label) {
+function replaceCommitmentRecord(record, expectedKey) {
+  const current = readJsonSafe(() => commitmentStateFilePath(record.environmentId, record.tld, record.owner, record.label));
+  if (commitmentRecordKey(current) !== expectedKey) return false;
+  return writeCommitmentRecord(record);
+}
+function clearCommitmentRecord(environmentId, tld, owner, label, expectedKey) {
   try {
+    const current = readJsonSafe(() => commitmentStateFilePath(environmentId, tld, owner, label));
+    if (commitmentRecordKey(current) !== expectedKey) return;
     tryUnlink(commitmentStateFilePath(environmentId, tld, owner, label));
   } catch {
   }
 }
+var LOCK_GARBAGE_GRACE_MS = 6e4;
+function isStaleLock(holder, mtimeMs, nowMs) {
+  if (!holder || typeof holder.pid !== "number" || typeof holder.createdAt !== "number") {
+    return nowMs - mtimeMs > LOCK_GARBAGE_GRACE_MS;
+  }
+  if (nowMs - holder.createdAt > COMMITMENT_RECORD_MAX_AGE_MS) return true;
+  return holder.host === os.hostname() && !isPidAlive(holder.pid);
+}
+var NO_LOCK = { token: null, release: () => {
+} };
+function tryAcquireCommitmentLock(environmentId, tld, owner, label, nowMs = Date.now()) {
+  let file;
+  try {
+    file = commitmentLockFilePath(environmentId, tld, owner, label);
+    fs.mkdirSync(path.dirname(file), { recursive: true, mode: 448 });
+  } catch {
+    return NO_LOCK;
+  }
+  const token = crypto.randomBytes(16).toString("hex");
+  const mine = { pid: process.pid, host: os.hostname(), token, createdAt: nowMs };
+  for (let attempt = 0; attempt < 3; attempt++) {
+    try {
+      fs.writeFileSync(file, JSON.stringify(mine), { encoding: "utf-8", flag: "wx", mode: COMMITMENT_FILE_MODE });
+      return { token, release: () => releaseCommitmentLock(file, token) };
+    } catch (err) {
+      if (err.code !== "EEXIST") return NO_LOCK;
+    }
+    let raw;
+    let mtimeMs;
+    try {
+      raw = fs.readFileSync(file, "utf-8");
+      mtimeMs = fs.statSync(file).mtimeMs;
+    } catch {
+      continue;
+    }
+    const holder = parseJsonRecord(raw);
+    if (!isStaleLock(holder, mtimeMs, nowMs)) {
+      return { heldBy: holder ?? { pid: 0, host: "unknown", token: "", createdAt: mtimeMs } };
+    }
+    const grabbed = `${file}.${process.pid}.${token}.stale`;
+    try {
+      fs.renameSync(file, grabbed);
+    } catch {
+      continue;
+    }
+    let grabbedRaw = "";
+    try {
+      grabbedRaw = fs.readFileSync(grabbed, "utf-8");
+    } catch {
+    }
+    if (grabbedRaw !== raw) {
+      try {
+        fs.linkSync(grabbed, file);
+      } catch {
+      }
+      tryUnlink(grabbed);
+      const fresh = parseJsonRecord(grabbedRaw);
+      if (fresh) return { heldBy: fresh };
+      continue;
+    }
+    tryUnlink(grabbed);
+  }
+  return NO_LOCK;
+}
+function releaseCommitmentLock(file, token) {
+  try {
+    const holder = parseJsonRecord(fs.readFileSync(file, "utf-8"));
+    if (holder?.token === token) tryUnlink(file);
+  } catch {
+  }
+}
 
 export {
   package_default,
@@ -272,8 +358,12 @@ export {
   probablyOomRssMb,
   shouldShowOomHint,
   commitmentStateFilePath,
+  commitmentLockFilePath,
+  commitmentRecordKey,
   FALLBACK_MAX_COMMITMENT_AGE_SECONDS,
   loadCommitmentRecord,
   writeCommitmentRecord,
-  clearCommitmentRecord
+  replaceCommitmentRecord,
+  clearCommitmentRecord,
+  tryAcquireCommitmentLock
 };