bulletin-deploy 0.6.0-rc.9 → 0.6.0

package/README.md

@@ -6,18 +6,12 @@ Deploy static sites and apps to the Polkadot Triangle network with decentralized
 
 ```bash
 npm install -g bulletin-deploy
-bulletin-deploy my-app00.dot
-```
-
-bulletin-deploy auto-detects your framework, runs the build, and deploys. Your site is live at `https://my-app00.dot.li`
-
-You can also deploy a pre-built directory:
-
-```bash
-npm run build
+# Build your app (e.g. npm run build)
 bulletin-deploy ./dist my-app00.dot
 ```
 
+Your site is live at `https://my-app00.dot.li`
+
 ## Prerequisites
 
 - **Node.js 22+**
@@ -38,58 +32,53 @@ ipfs init
 ## CLI Usage
 
 ```bash
-bulletin-deploy <domain.dot>              # Auto-detect, build, deploy
-bulletin-deploy <build-dir> <domain.dot>  # Deploy pre-built directory
-bulletin-deploy --build-only              # Build only, print output dir
-bulletin-deploy --dry-run <domain.dot>    # Show upload plan without deploying
+bulletin-deploy <build-dir> <domain.dot>
 ```
 
-### Options
+Examples:
 
+```bash
+# Basic deploy
+bulletin-deploy ./dist my-app00.dot
+
+# Custom RPC endpoint
+bulletin-deploy --rpc wss://custom-bulletin.example.com ./dist my-app00.dot
+
+# Deploy and publish to the Playground remix registry
+bulletin-deploy --playground ./dist my-app00.dot
 ```
-Build:
-  --build-cmd "..."    Override detected build command
-  --build-dir ./out    Override detected output directory
-  --no-build           Skip build (require build dir as first arg)
-  --build-only         Build only, print output dir to stdout
-  --dry-run            Show what would be uploaded without deploying
-  --print-cache-paths  Print detected cache paths for CI caching
-
-Deploy:
-  --rpc wss://...      Bulletin RPC (or set BULLETIN_RPC env var)
-  --help               Show help
+
+### All options
+
+```
+Options:
+  --rpc wss://...     Bulletin RPC (or set BULLETIN_RPC env var)
+  --mnemonic "..."    DotNS owner mnemonic (or set MNEMONIC env var)
+  --playground        Publish to the Playground remix registry
+  --pool-size N       Number of pool accounts (default: 10)
+  --help              Show help
 ```
 
-### Build detection order
+### Playground registry
 
-bulletin-deploy auto-detects your project setup:
+By default, deploys only upload to Bulletin storage and register the DotNS domain. The **Playground remix registry** is an on-chain app directory that makes your deploy visible in [Polkadot Playground](https://playground.polkadot.cloud).
 
-1. **Package manager**: `pnpm-lock.yaml` → pnpm, `bun.lockb`/`bun.lock` → bun, `yarn.lock` → yarn, `package-lock.json` → npm
-2. **Build command**: `Makefile` with `build` target → `make build`, otherwise `package.json` `build` script → `<pm> run build`
-3. **Output directory**: framework config (`vite.config.*` → `dist/`, `next.config.*` → `out/`), or probes `dist/`, `out/`, `build/`
+To publish to it, pass `--playground`:
 
-### Exit codes
+```bash
+bulletin-deploy --playground ./dist my-app.dot
+```
 
-| Code | Meaning | Retryable |
-|------|---------|-----------|
-| 0 | Success | — |
-| 1 | Deploy failure (transient) | Yes |
-| 2 | Build failure | No |
-| 3 | Configuration error | No |
+This requires `cdm.json` in your project root (shipped with bulletin-deploy) and a git remote origin.
 
 ## GitHub Actions
 
 1. Copy `workflows/deploy-on-pr.yml` to your repo's `.github/workflows/` directory
-2. Add your `DOTNS_MNEMONIC` secret in repo settings
-3. Push and watch the deploy — no other configuration needed
+2. Customize the **Build** step for your framework (Vite, Next.js, etc.)
+3. Push and watch the deploy
 
 The template workflow:
-- Deploys on push to main and on PRs, with `workflow_dispatch` support
-- Auto-detects your framework, package manager, and build output directory
-- Uses three cache layers to speed up repeat deploys:
-  - **Node modules cache** via `actions/setup-node` with `cache: 'npm'`
-  - **Build artifacts cache** keyed on lockfile hash (paths detected by `--print-cache-paths`)
-  - **Deploy manifest cache** (`.bulletin-deploy-cache`) keyed on branch + SHA for incremental uploads
+- Deploys on push to main and on PRs
 - Uses `nick-fields/retry@v3` for automatic retries on transient failures
 - Posts a comment on PRs with the live URL
 - Generates domain names as `<repo>-<branch>00.dot`
@@ -103,20 +92,41 @@ const result = await deploy("./dist", "my-app00.dot");
 console.log(result.cid, result.domainName);
 ```
 
+## Domain Names and Proof of Personhood
+
+DotNS domain names are classified by the PopOracle contract on Asset Hub. The classification determines what level of **Proof of Personhood (PoP)** is required to register:
+
+| Domain pattern | Example | Required PoP | 
+|---|---|---|
+| Name with trailing digits | `my-app00.dot` | **None** — open to all |
+| Base name (no trailing digits) | `my-app.dot` | **Full** — requires `ProofOfPersonhoodFull` |
+
+On **testnets** (Paseo, Westend, local devnets), bulletin-deploy automatically self-grants `ProofOfPersonhoodFull` before registration — no configuration needed. Both base names and names with trailing digits just work:
+
+```bash
+bulletin-deploy ./dist my-app.dot       # base name — auto-grants Full PoP
+bulletin-deploy ./dist my-app00.dot     # trailing digits — no PoP needed
+```
+
+On **mainnet** (Polkadot Hub, Kusama Hub), PoP cannot be self-granted. You must have a verified account. Set `DOTNS_STATUS=none` explicitly or leave it unset (mainnet defaults to `none`).
+
+If you see **"Requires Full Personhood verification"**, the deploy will fail early with an actionable error message before any gas is spent on commitment transactions.
+
 ## Environment Variables
 
 | Variable | Default | Description |
 |---|---|---|
 | `BULLETIN_RPC` | `wss://paseo-bulletin-rpc.polkadot.io` | Bulletin chain WebSocket RPC |
 | `BULLETIN_DEPLOY_TELEMETRY` | `1` (enabled) | Set to `0` to disable Sentry telemetry |
+| `DOTNS_STATUS` | `full` (testnet) / `none` (mainnet) | PoP level to self-grant before registration: `none`, `lite`, or `full` |
 | `IPFS_CID` | _(none)_ | Skip storage, use pre-existing CID |
 
 ## How It Works
 
 ```
-Source ──> Build ──> Build output ──> IPFS merkleize ──> Classify ──> Upload delta ──> DotNS ──> Registry
-  code     auto       ./dist          ipfs add          manifest      Bulletin        Asset Hub   CDM
-           detect                                       compare       Storage         Registry
+Build output ──> IPFS merkleize ──> CAR file ──> Chunk upload ──> DotNS
+    ./dist          ipfs add        .car         Bulletin        Asset Hub
+                                                 Storage         Registry
 ```
 
 1. **Merkleize** your build directory with IPFS to produce a content-addressed CAR file
@@ -140,16 +150,6 @@ Instead of using a single account for all storage transactions, bulletin-deploy
 
 When a pool account's authorization drops below thresholds (50 transactions or 50MB), bulletin-deploy automatically tops it up by submitting an `authorize_account` transaction from Alice.
 
-## Incremental Upload
-
-On repeat deploys, bulletin-deploy only uploads content that changed. A deploy manifest (`.bulletin-deploy-cache`) tracks which files and chunks are already on-chain.
-
-- **First deploy**: uploads everything, writes the manifest
-- **Subsequent deploys**: compares file CIDs against the manifest, uploads only new/changed files
-- **Typical savings**: 80-95% reduction in upload size and transactions
-
-Use `--dry-run` to preview what would be uploaded before deploying.
-
 ## Telemetry
 
 Sentry telemetry is enabled by default for deploy observability. Set `BULLETIN_DEPLOY_TELEMETRY=0` to disable.
@@ -167,6 +167,7 @@ Dashboard: https://polkadot-community-foundation.sentry.io/dashboards/92523/
 
 | Error | Solution |
 |---|---|
+| `Requires Full Personhood verification` | Auto-handled on testnets (v0.5.4+). On mainnet, your account needs verified PoP status. |
 | `Payment` or authorization error | Pool account needs storage authorization — auto-authorization should handle this |
 | `Stale` or dropped from best chain | Bulletin chain reorg. Automatic retry handles this. |
 | `IPFS CLI not installed` | Install Kubo: `brew install ipfs && ipfs init` |

package/bin/bulletin-deploy

@@ -1,217 +1,69 @@
 #!/usr/bin/env node
 
-// build.js and manifest.js are lightweight (no @dotdm/cdm dependency),
-// so we can import them eagerly. deploy.js and pool.js are loaded lazily
-// so that --help and --print-cache-paths work without @dotdm/cdm installed.
-import { detectFramework, detectCachePaths } from "../dist/build.js";
+import { deploy, DEFAULT_BULLETIN_RPC, DEFAULT_POOL_SIZE } from "../dist/deploy.js";
+import { bootstrapPool } from "../dist/pool.js";
 import * as fs from "fs";
-import * as path from "path";
-import * as os from "os";
 
 const args = process.argv.slice(2);
 
 const flags = {};
 const positional = [];
 for (let i = 0; i < args.length; i++) {
-  const arg = args[i];
-  if (arg === "--bootstrap")            { flags.bootstrap = true; }
-  else if (arg === "--pool-size")       { flags.poolSize = parseInt(args[++i], 10); }
-  else if (arg === "--mnemonic")        { flags.mnemonic = args[++i]; }
-  else if (arg === "--rpc")             { flags.rpc = args[++i]; }
-  else if (arg === "--build-cmd")       { flags.buildCmd = args[++i]; }
-  else if (arg === "--build-dir")       { flags.buildDir = args[++i]; }
-  else if (arg === "--no-build")        { flags.noBuild = true; }
-  else if (arg === "--build-only")      { flags.buildOnly = true; }
-  else if (arg === "--print-cache-paths") { flags.printCachePaths = true; }
-  else if (arg === "--dry-run")         { flags.dryRun = true; }
-  else if (arg === "--registry")        { flags.registry = true; }
-  else if (arg === "--help" || arg === "-h") { flags.help = true; }
-  else { positional.push(arg); }
+  if (args[i] === "--bootstrap") { flags.bootstrap = true; }
+  else if (args[i] === "--pool-size") { flags.poolSize = parseInt(args[++i], 10); }
+  else if (args[i] === "--mnemonic") { flags.mnemonic = args[++i]; }
+  else if (args[i] === "--rpc") { flags.rpc = args[++i]; }
+  else if (args[i] === "--password") { flags.password = args[++i]; }
+  else if (args[i] === "--playground") { flags.playground = true; }
+  else if (args[i] === "--help" || args[i] === "-h") { flags.help = true; }
+  else { positional.push(args[i]); }
 }
 
-if (flags.help || (positional.length === 0 && !flags.bootstrap && !flags.printCachePaths && !flags.buildOnly)) {
+if (flags.help || (positional.length === 0 && !flags.bootstrap)) {
   console.log(`Usage:
-  bulletin-deploy <domain.dot>              Auto-build and deploy
-  bulletin-deploy <build-dir> <domain.dot>  Deploy a pre-built directory
+  bulletin-deploy <build-dir> <domain.dot>  Deploy an app
   bulletin-deploy --bootstrap               Initialize pool accounts
 
 Options:
-  --build-cmd "..."   Override build command
-  --build-dir ./out   Override output directory
-  --no-build          Skip the build step (use positional arg as build dir)
-  --build-only        Build only, print output dir to stdout, then exit
-  --print-cache-paths Print detected cache paths and exit
-  --dry-run           Show upload plan without deploying
-  --registry          Publish to playground registry (only needed on metadata change)
   --mnemonic "..."    DotNS owner mnemonic (or set MNEMONIC env var)
   --rpc wss://...     Bulletin RPC (or set BULLETIN_RPC env var)
   --pool-size N       Number of pool accounts (default: 10)
+  --password "..."    Encrypt SPA content (users will be prompted to decrypt)
+  --playground        Publish to the playground remix registry
   --help              Show this help`);
   process.exit(0);
 }
 
-if (flags.rpc)      process.env.BULLETIN_RPC = flags.rpc;
-if (flags.poolSize) process.env.BULLETIN_POOL_SIZE = String(flags.poolSize);
-if (flags.mnemonic) process.env.MNEMONIC = flags.mnemonic;
-
-const projectDir = process.cwd();
-
-// --print-cache-paths: detect and print, then exit (no heavy deps needed)
-if (flags.printCachePaths) {
-  const framework = detectFramework(projectDir);
-  const cachePaths = detectCachePaths(framework);
-  for (const p of cachePaths) {
-    console.log(p);
-  }
-  process.exit(0);
-}
-
-// Lazy-load heavy modules that require @dotdm/cdm; run in parallel
-const [
-  { deploy, merkleize, chunk, measureBuildOutput },
-  { runBuild },
-  { readManifest, classifyWithManifest, classifyFile, formatDryRunReport },
-  { bootstrapPool },
-] = await Promise.all([
-  import("../dist/deploy.js"),
-  import("../dist/build.js"),
-  import("../dist/manifest.js"),
-  import("../dist/pool.js"),
-]);
-
 try {
   if (flags.bootstrap) {
-    const rpc = process.env.BULLETIN_RPC || "wss://paseo-bulletin-rpc.polkadot.io";
-    const poolSize = parseInt(process.env.BULLETIN_POOL_SIZE || "10", 10);
-    await bootstrapPool(rpc, poolSize);
-    process.exit(0);
-  }
-
-  // --build-only: run build, print output dir, exit
-  if (flags.buildOnly) {
-    const result = await runBuild(projectDir, {
-      buildCmd: flags.buildCmd,
-      buildDir: flags.buildDir,
-    });
-    console.log(path.resolve(projectDir, result.outputDir));
-    process.exit(0);
-  }
-
-  // Determine build dir and domain from positional args
-  let buildDir;
-  let domain;
-
-  const [firstArg, secondArg] = positional;
-
-  if (firstArg && fs.existsSync(firstArg)) {
-    // Backward-compat: first arg is an existing path — treat as build dir
-    buildDir = firstArg;
-    domain = secondArg;
+    const rpc = flags.rpc ?? process.env.BULLETIN_RPC ?? DEFAULT_BULLETIN_RPC;
+    const poolSize = flags.poolSize ?? parseInt(process.env.BULLETIN_POOL_SIZE ?? String(DEFAULT_POOL_SIZE), 10);
+    await bootstrapPool(rpc, poolSize, flags.mnemonic);
   } else {
-    domain = firstArg;
-    buildDir = null;
-  }
-
-  if (!domain) {
-    console.error("Error: domain required (e.g. my-app.dot)");
-    process.exit(3);
-  }
-
-  // Build step (unless --no-build or buildDir already provided from positional)
-  let detectedFramework;
-  if (!buildDir && !flags.noBuild) {
-    console.log("\nBuilding...");
-    const buildResult = await runBuild(projectDir, {
-      buildCmd: flags.buildCmd,
-      buildDir: flags.buildDir,
+    const [buildDir, domain] = positional;
+    if (!buildDir) { console.error("Error: build directory required"); process.exit(1); }
+    if (!domain) { console.error("Error: domain required (e.g. my-app.dot)"); process.exit(1); }
+    if (!fs.existsSync(buildDir)) { console.error(`Error: ${buildDir} does not exist`); process.exit(1); }
+
+    const result = await deploy(buildDir, domain, {
+      playground: flags.playground,
+      mnemonic: flags.mnemonic,
+      rpc: flags.rpc,
+      poolSize: flags.poolSize,
+      password: flags.password,
     });
-    buildDir = path.resolve(projectDir, buildResult.outputDir);
-    detectedFramework = buildResult.framework?.name;
-    console.log(`  Output: ${buildDir} (${buildResult.durationMs}ms)`);
-  } else if (flags.noBuild && !buildDir) {
-    if (flags.buildDir) {
-      buildDir = flags.buildDir;
-    } else {
-      console.error("Error: --no-build requires a build directory (pass as first arg or --build-dir)");
-      process.exit(3);
-    }
-  }
-
-  if (!fs.existsSync(buildDir)) {
-    console.error(`Error: build directory not found: ${buildDir}`);
-    process.exit(3);
-  }
-
-  // --dry-run: show upload plan without deploying
-  if (flags.dryRun) {
-    const { execSync } = await import("child_process");
-    const { createCID } = await import("../dist/deploy.js");
-
-    // Merkleize + get per-file CIDs (matches storeDirectory's flow)
-    const ipfsCid = execSync(`ipfs add -Q -r --cid-version=1 --raw-leaves --pin=false "${buildDir}"`, { encoding: "utf-8" }).trim();
-    const addOutput = execSync(`ipfs add -rn --cid-version=1 --raw-leaves --pin=false "${buildDir}"`, { encoding: "utf-8" });
-    const baseName = path.basename(buildDir);
-    const fileCids = new Map();
-    for (const line of addOutput.trim().split("\n")) {
-      const m = line.match(/^added\s+(\S+)\s+(.+)$/);
-      if (!m) continue;
-      const rel = m[2].startsWith(baseName + "/") ? m[2].slice(baseName.length + 1) : m[2];
-      if (rel !== baseName) fileCids.set(rel, m[1]);
-    }
-
-    const manifestPath = path.join(path.dirname(buildDir), ".bulletin-deploy-cache");
-    const manifest = readManifest(manifestPath);
-    const buildOutput = measureBuildOutput(buildDir);
-
-    const currentFiles = buildOutput.files.map(f => ({ path: f.path, cid: fileCids.get(f.path) || ipfsCid, size: f.size }));
 
-    let classification;
-    if (manifest) {
-      classification = classifyWithManifest(currentFiles, manifest);
-    } else {
-      const stable = currentFiles.filter(f => classifyFile(f.path) === "stable");
-      const volatile = currentFiles
-        .filter(f => classifyFile(f.path) === "volatile")
-        .map(f => ({ ...f, previousCid: null }));
-      classification = { stable, volatile, hitRate: stable.length / (currentFiles.length || 1), source: "heuristic" };
+    const output = process.env.GITHUB_OUTPUT;
+    if (output) {
+      fs.appendFileSync(output, `cid=${result.cid}\n`);
+      fs.appendFileSync(output, `domain=${result.domainName}\n`);
     }
 
-    // Estimate chunks from total file sizes
-    const totalBytes = buildOutput.files.reduce((s, f) => s + f.size, 0);
-    const totalChunks = Math.ceil(totalBytes / (1024 * 1024));
-    const volatileBytes = classification.volatile.reduce((s, f) => s + f.size, 0);
-    const newChunks = manifest ? Math.max(1, Math.ceil(volatileBytes / (1024 * 1024))) : totalChunks;
-
-    const report = formatDryRunReport(classification, {
-      manifestPath: manifest ? manifestPath : null,
-      lastDeploy: manifest ? manifest.deployed_at : null,
-      totalChunks,
-      newChunks,
-    });
-    console.log(report);
-    process.exit(0);
-  }
-
-  const result = await deploy(buildDir, domain, { registry: flags.registry ?? false, framework: detectedFramework });
-
-  const output = process.env.GITHUB_OUTPUT;
-  if (output) {
-    fs.appendFileSync(output, `cid=${result.cid}\n`);
-    fs.appendFileSync(output, `domain=${result.domainName}\n`);
+    console.log(`CID: ${result.cid}`);
+    console.log(`Domain: ${result.domainName}`);
   }
-
-  console.log(`CID: ${result.cid}`);
-  console.log(`Domain: ${result.domainName}`);
   process.exit(0);
-
 } catch (error) {
-  const exitCode = error.exitCode ?? 1;
-  if (exitCode === 2) {
-    console.error("Build failed:", error.message);
-  } else if (exitCode === 3) {
-    console.error("Config error:", error.message);
-  } else {
-    console.error("Deployment failed:", error.message);
-  }
-  process.exit(exitCode);
+  console.error("Deployment failed:", error.message);
+  process.exit(1);
 }

package/cdm.json

@@ -13,8 +13,8 @@
   "contracts": {
     "acc2c3b5e912b762": {
       "@example/playground-registry": {
-        "version": 2,
-        "address": "0x7D97a3E87c0C2fe921E471D076b95975886CEAA8",
+        "version": 3,
+        "address": "0xF8304E5C17769A53E012f39c6990cC8a7AaBC6A5",
         "abi": [
           {
             "type": "constructor",
@@ -39,35 +39,58 @@
           },
           {
             "type": "function",
-            "name": "getMetadataUri",
+            "name": "getAppCount",
+            "inputs": [],
+            "outputs": [
+              {
+                "name": "",
+                "type": "uint32"
+              }
+            ],
+            "stateMutability": "view"
+          },
+          {
+            "type": "function",
+            "name": "getDomainAt",
             "inputs": [
               {
-                "name": "domain",
+                "name": "index",
+                "type": "uint32"
+              }
+            ],
+            "outputs": [
+              {
+                "name": "",
                 "type": "string"
               }
             ],
+            "stateMutability": "view"
+          },
+          {
+            "type": "function",
+            "name": "getOwnerAppCount",
+            "inputs": [
+              {
+                "name": "owner",
+                "type": "address"
+              }
+            ],
             "outputs": [
               {
                 "name": "",
-                "type": "tuple",
-                "components": [
-                  {
-                    "name": "isSome",
-                    "type": "bool"
-                  },
-                  {
-                    "name": "value",
-                    "type": "string"
-                  }
-                ]
+                "type": "uint32"
               }
             ],
             "stateMutability": "view"
           },
           {
             "type": "function",
-            "name": "getDomainAt",
+            "name": "getOwnerDomainAt",
             "inputs": [
+              {
+                "name": "owner",
+                "type": "address"
+              },
               {
                 "name": "index",
                 "type": "uint32"
@@ -83,7 +106,7 @@
           },
           {
             "type": "function",
-            "name": "getOwner",
+            "name": "getMetadataUri",
             "inputs": [
               {
                 "name": "domain",
@@ -93,25 +116,40 @@
             "outputs": [
               {
                 "name": "",
-                "type": "address"
+                "type": "tuple",
+                "components": [
+                  {
+                    "name": "isSome",
+                    "type": "bool"
+                  },
+                  {
+                    "name": "value",
+                    "type": "string"
+                  }
+                ]
               }
             ],
             "stateMutability": "view"
           },
           {
             "type": "function",
-            "name": "getAppCount",
-            "inputs": [],
+            "name": "getOwner",
+            "inputs": [
+              {
+                "name": "domain",
+                "type": "string"
+              }
+            ],
             "outputs": [
               {
                 "name": "",
-                "type": "uint32"
+                "type": "address"
               }
             ],
             "stateMutability": "view"
           }
         ],
-        "metadataCid": "bafk2bzacecrjrmrgumcww7oc23rllfscbxpd2lxc6p2svb26c6e5tjvmr565s"
+        "metadataCid": "bafk2bzacebkch7cuoi77j5vkrkoplax4urywwga7ijamtd3pntv7xjgabhtgs"
       }
     }
   }

package/dist/{chunk-RV7XBIIO.js → chunk-AIHW2WLO.js}

@@ -70,11 +70,6 @@ async function ensureAuthorized(api, poolAccount, bulletinRpc) {
   try {
     const keyring = new Keyring({ type: "sr25519" });
     const alice = keyring.addFromUri("//Alice");
-    const aliceAccount = await aliceApi.query.System.Account.getValue(alice.address);
-    const aliceBalance = BigInt(aliceAccount.data.free);
-    if (aliceBalance < 10000000000n) {
-      throw new Error(`Alice has insufficient balance on Bulletin for authorization tx fees. Current: ${(Number(aliceBalance) / 1e12).toFixed(4)} PAS`);
-    }
     const aliceSigner = getPolkadotSigner(alice.publicKey, "Sr25519", (data) => alice.sign(data));
     const tx = aliceApi.tx.TransactionStorage.authorize_account({
       who: poolAccount.address,