bulletin-deploy 0.6.16 → 0.7.1

package/README.md

@@ -47,9 +47,6 @@ bulletin-deploy ./dist my-app00.dot
 
 # Custom RPC endpoint
 bulletin-deploy --rpc wss://custom-bulletin.example.com ./dist my-app00.dot
-
-# Deploy and publish to the Playground remix registry
-bulletin-deploy --playground ./dist my-app00.dot
 ```
 
 ### All options
@@ -63,7 +60,6 @@ Options:
                            Bulletin direct signer and the DotNS registration signer then
                            run as that derived account. Useful when running parallel
                            deploys against the same root mnemonic without nonce contention.
-  --playground             Publish to the Playground remix registry
   --js-merkle              Use pure-JS merkleization (no IPFS Kubo binary required)
   --pool-size N            Number of pool accounts (default: 10)
   --tag "..."              Free-form label attached to the deploy span as deploy.tag
@@ -111,18 +107,6 @@ Limitations / follow-ups:
 - **Mirror failures are non-fatal.** The source of truth is Bulletin + DotNS; the mirror is a cache. Failures log and let the deploy succeed.
 - **GitHub Pages build latency.** The CAR lands on `gh-pages` immediately; Pages serves it after the build completes (~1–2 min in practice). Hosts should fall back to Bulletin while the 404 window lasts.
 
-### Playground registry
-
-By default, deploys only upload to Bulletin storage and register the DotNS domain. The **Playground remix registry** is an on-chain app directory that makes your deploy visible in [Polkadot Playground](https://playground.polkadot.cloud).
-
-To publish to it, pass `--playground`:
-
-```bash
-bulletin-deploy --playground ./dist my-app.dot
-```
-
-This requires `cdm.json` in your project root (shipped with bulletin-deploy) and a git remote origin.
-
 ## GitHub Actions
 
 1. Copy `workflows/deploy-on-pr.yml` to your repo's `.github/workflows/` directory
@@ -275,6 +259,7 @@ Sentry telemetry is **off by default for external users**. It's automatically on
 
 - `BULLETIN_DEPLOY_TELEMETRY=1` — explicit opt-in (useful if you want to help us debug an issue you're seeing).
 - `BULLETIN_DEPLOY_TELEMETRY=0` — force off regardless of context.
+- When running under **Bun**, the Parity-internal memory-report diagnostic bundle is skipped (basic deploy telemetry still works). The bundle relies on Node's `v8` module, which Bun implements only partially.
 
 Detection signals (OR'd together):
 1. `GITHUB_REPOSITORY` matches a known-internal org — Parity-owned CI workflow.
@@ -331,20 +316,21 @@ Runs `test/test.js` + `test/pool.test.js` + `test/helpers/e2e-helpers.test.js` v
 
 ### Live-testnet E2E
 
-Three scenarios land on Paseo Bulletin:
+Four scenarios land on Paseo Bulletin:
 
 - **S1** — happy path on a stable label (`e2epool.dot` / `e2edirect.dot`)
 - **S2** — fresh registration via commit-reveal (nightly only)
 - **S3** — deploy to `e2eowned.dot` (owned by a different account), expects `EXIT_CODE_NO_RETRY` (78) and the "owned by a different account" error message
+- **S4** — deploy with `--gh-pages-mirror`, waits for GitHub Pages to serve the just-pushed manifest (CID-freshness check), then byte-compares the CAR on Pages against a pre-upload dump to confirm the mirror is an exact copy of what went to Bulletin
 
-**Prerequisites** (one-time per testnet lifetime): see [`docs/e2e-bootstrap.md`](docs/e2e-bootstrap.md). Grants Alice PoP Full, funds+maps Bob, pre-registers `e2eowned.dot` to Bob via `dotns-cli`.
+**Prerequisites** (one-time per testnet lifetime): see [`docs/e2e-bootstrap.md`](docs/e2e-bootstrap.md). Grants Alice PoP Full, funds+maps Bob, pre-registers `e2eowned.dot` to Bob via `dotns-cli`. S4 additionally needs GitHub Pages enabled on the repo with `gh-pages` as the source branch and a token with `contents: write` (the workflow's `GITHUB_TOKEN` provides this; locally your git credentials must be able to push).
 
 **Local launchers:**
 
 ```bash
 npm run test:e2e:smoke      # 1 scenario  (S1 pool/js)           ~5 min
-npm run test:e2e:pr         # 3 scenarios (matches per-PR CI)    ~15 min
-npm run test:e2e:nightly    # 7 scenarios (matches nightly CI)   ~30–45 min
+npm run test:e2e:pr         # 4 scenarios (matches per-PR CI)    ~20 min
+npm run test:e2e:nightly    # 8 scenarios (matches nightly CI)   ~30–45 min
 ```
 
 All three run through to completion even if one fails; a colored summary prints at the end with per-scenario pass/fail, timing, JUnit report paths, and a pre-filtered Sentry trace link.

package/bin/bulletin-deploy

@@ -4,9 +4,13 @@ import { deploy, DEFAULT_BULLETIN_RPC, DEFAULT_POOL_SIZE, NonRetryableError, EXI
 import { bootstrapPool } from "../dist/pool.js";
 import { VERSION } from "../dist/telemetry.js";
 import { handleFailedDeploy, preReleaseWarning } from "../dist/version-check.js";
-import { setDeployContext } from "../dist/bug-report.js";
+import { setDeployContext, installLogCapture, buildCliFlagsSummary } from "../dist/bug-report.js";
 import * as fs from "fs";
 
+// Install early so anything printed during flag parsing / preflight is
+// available to the bug-report log tail.
+installLogCapture();
+
 const args = process.argv.slice(2);
 
 const flags = {};
@@ -18,7 +22,6 @@ for (let i = 0; i < args.length; i++) {
   else if (args[i] === "--derivation-path") { flags.derivationPath = args[++i]; }
   else if (args[i] === "--rpc") { flags.rpc = args[++i]; }
   else if (args[i] === "--password") { flags.password = args[++i]; }
-  else if (args[i] === "--playground") { flags.playground = true; }
   else if (args[i] === "--js-merkle") { flags.jsMerkle = true; }
   else if (args[i] === "--tag") { flags.tag = args[++i]; }
   else if (args[i] === "--gh-pages-mirror") { flags.ghPagesMirror = true; }
@@ -45,7 +48,6 @@ Options:
   --rpc wss://...          Bulletin RPC (or set BULLETIN_RPC env var)
   --pool-size N       Number of pool accounts (default: 10)
   --password "..."    Encrypt SPA content (users will be prompted to decrypt)
-  --playground        Publish to the playground remix registry
   --js-merkle         Use pure-JS merkleization (no IPFS Kubo binary required)
   --tag "..."         Label deploy in telemetry (or set DEPLOY_TAG env var); see Telemetry in README
   --gh-pages-mirror   After deploy, push the CAR to the current repo's gh-pages branch
@@ -69,16 +71,28 @@ try {
     if (!domain) { console.error("Error: domain required (e.g. my-app.dot)"); process.exit(1); }
     if (!fs.existsSync(buildDir)) { console.error(`Error: ${buildDir} does not exist`); process.exit(1); }
 
+    const effectiveRpc = flags.rpc ?? process.env.BULLETIN_RPC ?? DEFAULT_BULLETIN_RPC;
+    const deployTag = flags.tag ?? process.env.DEPLOY_TAG;
+    const ci = process.env.GITHUB_ACTIONS === "true" ? {
+      runUrl: process.env.GITHUB_SERVER_URL && process.env.GITHUB_REPOSITORY && process.env.GITHUB_RUN_ID
+        ? `${process.env.GITHUB_SERVER_URL}/${process.env.GITHUB_REPOSITORY}/actions/runs/${process.env.GITHUB_RUN_ID}${process.env.GITHUB_RUN_ATTEMPT ? `/attempts/${process.env.GITHUB_RUN_ATTEMPT}` : ""}`
+        : undefined,
+      workflow: process.env.GITHUB_WORKFLOW,
+      job: process.env.GITHUB_JOB,
+      sha: process.env.GITHUB_SHA,
+    } : undefined;
     setDeployContext({
       domain,
-      rpc: flags.rpc,
+      rpc: effectiveRpc,
       repo: process.env.GITHUB_REPOSITORY,
       branch: process.env.GITHUB_HEAD_REF || process.env.GITHUB_REF_NAME,
       signerMode: flags.mnemonic ? "direct" : "pool",
+      deployTag,
+      cliFlags: buildCliFlagsSummary(flags),
+      ci,
     });
 
     const result = await deploy(buildDir, domain, {
-      playground: flags.playground,
       mnemonic: flags.mnemonic,
       derivationPath: flags.derivationPath,
       rpc: flags.rpc,

package/dist/bug-report.d.ts

@@ -6,13 +6,24 @@ interface DeployContext {
     chunkCount?: number;
     totalSize?: string;
     rpc?: string;
-    sentryTraceId?: string;
+    deployTag?: string;
+    cliFlags?: string;
+    ci?: {
+        runUrl?: string;
+        workflow?: string;
+        job?: string;
+        sha?: string;
+    };
 }
 declare function setDeployContext(ctx: Partial<DeployContext>): void;
+declare function installLogCapture(): void;
+declare function getCapturedTail(): string;
+declare function scrubSecrets(text: string): string;
+declare function buildCliFlagsSummary(flags: Record<string, unknown>): string;
 declare function buildReportBody(error: Error): string;
 declare function buildTitle(error: Error): string;
 declare function buildLabels(error: Error): string[];
-declare function createGhIssue(title: string, body: string, labels: string[]): void;
+declare function createGhIssue(title: string, body: string, labels: string[]): string;
 declare function offerBugReport(error: Error): Promise<void>;
 
-export { buildLabels, buildReportBody, buildTitle, createGhIssue, offerBugReport, setDeployContext };
+export { buildCliFlagsSummary, buildLabels, buildReportBody, buildTitle, createGhIssue, getCapturedTail, installLogCapture, offerBugReport, scrubSecrets, setDeployContext };

package/dist/bug-report.js

@@ -1,121 +1,27 @@
 import {
-  classifyErrorArea,
-  isInteractive,
-  promptYesNo
-} from "./chunk-BGLOVKHX.js";
-import {
-  VERSION
-} from "./chunk-LF3XAUCI.js";
+  buildCliFlagsSummary,
+  buildLabels,
+  buildReportBody,
+  buildTitle,
+  createGhIssue,
+  getCapturedTail,
+  installLogCapture,
+  offerBugReport,
+  scrubSecrets,
+  setDeployContext
+} from "./chunk-5N4VL73E.js";
+import "./chunk-DYKCMHZ6.js";
+import "./chunk-PH43YXEE.js";
 import "./chunk-QGM4M3NI.js";
-
-// src/bug-report.ts
-import { execSync, execFileSync } from "child_process";
-import * as os from "os";
-var _deployContext = {};
-function setDeployContext(ctx) {
-  _deployContext = { ..._deployContext, ...ctx };
-}
-function hasGhCli() {
-  try {
-    execSync("gh --version", { stdio: "pipe" });
-    return true;
-  } catch {
-    return false;
-  }
-}
-function buildReportBody(error) {
-  const lines = [
-    "## Environment",
-    "",
-    `- **bulletin-deploy**: ${VERSION}`,
-    `- **Node.js**: ${process.version}`,
-    `- **OS**: ${os.platform()} ${os.arch()} ${os.release()}`,
-    "",
-    "## Error",
-    "",
-    "```",
-    error.stack || error.message,
-    "```",
-    ""
-  ];
-  const ctx = _deployContext;
-  if (ctx.domain || ctx.repo || ctx.rpc) {
-    lines.push("## Deploy Context", "");
-    if (ctx.domain) lines.push(`- **Domain**: ${ctx.domain}`);
-    if (ctx.repo) lines.push(`- **Repo**: ${ctx.repo}`);
-    if (ctx.branch) lines.push(`- **Branch**: ${ctx.branch}`);
-    if (ctx.signerMode) lines.push(`- **Signer mode**: ${ctx.signerMode}`);
-    if (ctx.chunkCount != null) lines.push(`- **Chunks**: ${ctx.chunkCount}`);
-    if (ctx.totalSize) lines.push(`- **Total size**: ${ctx.totalSize}`);
-    if (ctx.rpc) lines.push(`- **RPC**: ${ctx.rpc}`);
-    if (ctx.sentryTraceId) lines.push(`- **Sentry trace**: ${ctx.sentryTraceId}`);
-    lines.push("");
-  }
-  return lines.join("\n");
-}
-function buildTitle(error) {
-  const msg = error.message.slice(0, 60);
-  return `[deploy-bug] ${msg}`;
-}
-function buildLabels(error) {
-  const labels = ["bug", "auto-report"];
-  const area = classifyErrorArea(error.message);
-  if (area) labels.push(area);
-  return labels;
-}
-function createGhIssue(title, body, labels) {
-  const args = [
-    "issue",
-    "create",
-    "--repo",
-    "paritytech/bulletin-deploy",
-    "--title",
-    title,
-    ...labels.flatMap((l) => ["--label", l]),
-    "--body-file",
-    "-"
-  ];
-  execFileSync("gh", args, { input: body, stdio: ["pipe", "inherit", "inherit"] });
-}
-async function offerBugReport(error) {
-  if (!isInteractive()) return;
-  const yes = await promptYesNo("\n   This looks like a bug. Open an issue with debug info? [Y/n] ");
-  if (!yes) return;
-  const title = buildTitle(error);
-  const body = buildReportBody(error);
-  const labels = buildLabels(error);
-  if (hasGhCli()) {
-    try {
-      createGhIssue(title, body, labels);
-      console.error("   Issue created.");
-    } catch {
-      try {
-        console.error("   Retrying without labels...");
-        createGhIssue(title, body, []);
-        console.error("   Issue created (without labels).");
-      } catch {
-        console.error("   Failed to create issue. Debug info below:\n");
-        printFallback(title, body, labels);
-      }
-    }
-  } else {
-    console.error("\n   gh CLI not found. Debug info below \u2014 paste into a new issue:\n");
-    console.error(`   https://github.com/paritytech/bulletin-deploy/issues/new
-`);
-    printFallback(title, body, labels);
-  }
-}
-function printFallback(title, body, labels) {
-  console.error(`   Title: ${title}`);
-  console.error(`   Labels: ${labels.join(", ")}
-`);
-  console.error(body);
-}
 export {
+  buildCliFlagsSummary,
   buildLabels,
   buildReportBody,
   buildTitle,
   createGhIssue,
+  getCapturedTail,
+  installLogCapture,
   offerBugReport,
+  scrubSecrets,
   setDeployContext
 };

package/dist/{chunk-UZVOH3HB.js → chunk-2Q2WSKFD.js}

@@ -12,6 +12,35 @@ var MirrorSkipped = class extends Error {
     this.name = "MirrorSkipped";
   }
 };
+async function pollMirrorFreshness(mirrorUrl2, expectedCid, opts = {}) {
+  const timeoutMs = opts.timeoutMs ?? 5 * 60 * 1e3;
+  const intervalMs = opts.intervalMs ?? 1e4;
+  const fetchFn = opts.fetchFn ?? fetch;
+  const manifestUrl = mirrorUrl2.replace(/\.car$/, ".json");
+  const started = Date.now();
+  const deadline = started + timeoutMs;
+  let attempts = 0;
+  let lastCid = null;
+  let lastStatus = 0;
+  while (Date.now() < deadline) {
+    attempts++;
+    try {
+      const res = await fetchFn(manifestUrl, { redirect: "follow", cache: "no-store" });
+      lastStatus = res.status;
+      if (res.status === 200) {
+        const m = await res.json();
+        if (m.cid === expectedCid) {
+          return { verified: true, attempts, durationMs: Date.now() - started, lastCid: m.cid, lastStatus };
+        }
+        lastCid = m.cid ?? null;
+      }
+    } catch {
+    }
+    if (Date.now() + intervalMs >= deadline) break;
+    await new Promise((r) => setTimeout(r, intervalMs));
+  }
+  return { verified: false, attempts, durationMs: Date.now() - started, lastCid, lastStatus };
+}
 function parseGitRemoteUrl(url) {
   const trimmed = url.trim();
   const ssh = trimmed.match(/^git@[^:]+:([^/]+)\/(.+?)(?:\.git)?$/);
@@ -91,7 +120,7 @@ async function mirrorToGitHubPages(input) {
   }
   if (input.carBytes.length > GH_PAGES_MIRROR_MAX_BYTES) {
     const mb = (input.carBytes.length / 1024 / 1024).toFixed(1);
-    throw new MirrorSkipped(`CAR is ${mb} MB; GitHub limits single files to 100 MB. Mirror skipped.`);
+    throw new MirrorSkipped(`CAR is ${mb} MB, exceeds GitHub's 100 MB single-file soft limit. Pages can't host this CAR \u2014 the on-chain deploy still succeeds and hosts will fall back to Bulletin.`);
   }
   const domainFilename = normalizeDomainFilename(input.domain);
   const { owner, repo } = ownerRepo;
@@ -112,8 +141,8 @@ async function mirrorToGitHubPages(input) {
       branchExists = false;
     }
     if (branchExists) {
-      runGit(["fetch", "origin", `${GH_PAGES_MIRROR_BRANCH}:${GH_PAGES_MIRROR_BRANCH}`, "--depth=1"], repoPath);
-      runGit(["worktree", "add", workTree, GH_PAGES_MIRROR_BRANCH], repoPath);
+      runGit(["fetch", "origin", GH_PAGES_MIRROR_BRANCH, "--depth=1"], repoPath);
+      runGit(["worktree", "add", "--detach", workTree, `origin/${GH_PAGES_MIRROR_BRANCH}`], repoPath);
     } else {
       runGit(["worktree", "add", "--detach", workTree, "HEAD"], repoPath);
       runGit(["checkout", "--orphan", GH_PAGES_MIRROR_BRANCH], workTree);
@@ -173,6 +202,7 @@ export {
   GH_PAGES_MIRROR_DIR,
   GH_PAGES_MIRROR_BRANCH,
   MirrorSkipped,
+  pollMirrorFreshness,
   parseGitRemoteUrl,
   resolveOwnerRepo,
   resolveSourceCommit,

package/dist/chunk-5N4VL73E.js

@@ -0,0 +1,223 @@
+import {
+  classifyErrorArea,
+  isInteractive,
+  promptYesNo
+} from "./chunk-DYKCMHZ6.js";
+import {
+  VERSION,
+  getCurrentSentryTraceId
+} from "./chunk-PH43YXEE.js";
+
+// src/bug-report.ts
+import { execSync, execFileSync } from "child_process";
+import * as os from "os";
+var _deployContext = {};
+function setDeployContext(ctx) {
+  _deployContext = { ..._deployContext, ...ctx };
+}
+function hasGhCli() {
+  try {
+    execSync("gh --version", { stdio: "pipe" });
+    return true;
+  } catch {
+    return false;
+  }
+}
+var LOG_TAIL_BYTES = 32 * 1024;
+var _logBuffer = "";
+var _logCaptureInstalled = false;
+function installLogCapture() {
+  if (_logCaptureInstalled) return;
+  _logCaptureInstalled = true;
+  const append = (args) => {
+    const line = args.map((a) => typeof a === "string" ? a : safeStringify(a)).join(" ") + "\n";
+    _logBuffer += line;
+    if (_logBuffer.length > LOG_TAIL_BYTES * 2) {
+      _logBuffer = _logBuffer.slice(_logBuffer.length - LOG_TAIL_BYTES);
+    }
+  };
+  const wrap = (key) => {
+    const orig = console[key].bind(console);
+    console[key] = (...a) => {
+      append(a);
+      orig(...a);
+    };
+  };
+  wrap("log");
+  wrap("error");
+  wrap("warn");
+}
+function safeStringify(v) {
+  try {
+    if (v instanceof Error) return v.stack || v.message;
+    return JSON.stringify(v);
+  } catch {
+    return String(v);
+  }
+}
+function getCapturedTail() {
+  if (!_logBuffer) return "";
+  const tail = _logBuffer.length > LOG_TAIL_BYTES ? "\u2026 [truncated]\n" + _logBuffer.slice(_logBuffer.length - LOG_TAIL_BYTES) : _logBuffer;
+  return scrubSecrets(tail);
+}
+function scrubSecrets(text) {
+  if (!text) return text;
+  let out = text;
+  out = out.replace(/(--mnemonic(?:=|\s+))("[^"]*"|'[^']*'|\S+)/gi, "$1<REDACTED>");
+  out = out.replace(/(--password(?:=|\s+))("[^"]*"|'[^']*'|\S+)/gi, "$1<REDACTED>");
+  out = out.replace(/\b(MNEMONIC|PASSWORD|BULLETIN_MNEMONIC|GITHUB_TOKEN|GH_TOKEN|NPM_TOKEN|SENTRY_AUTH_TOKEN)=([^\s]+)/gi, "$1=<REDACTED>");
+  out = out.replace(/\b(ghp|ghs|gho|ghu|ghr)_[A-Za-z0-9]{20,}\b/g, "<REDACTED_TOKEN>");
+  out = out.replace(/\bgithub_pat_[A-Za-z0-9_]{20,}\b/g, "<REDACTED_TOKEN>");
+  out = out.replace(/\b(?:[a-z]{3,10}\s+){11}[a-z]{3,10}\b/g, "<REDACTED_MNEMONIC>");
+  out = out.replace(/([a-z][a-z0-9+.-]*:\/\/)[^:@\s]+:[^@\s]+@/gi, "$1<REDACTED>@");
+  return out;
+}
+function buildCliFlagsSummary(flags) {
+  const parts = [];
+  if (flags.bootstrap) parts.push("--bootstrap");
+  if (flags.jsMerkle) parts.push("--js-merkle");
+  if (flags.ghPagesMirror) parts.push("--gh-pages-mirror");
+  if (flags.poolSize != null) parts.push(`--pool-size ${String(flags.poolSize)}`);
+  if (typeof flags.tag === "string" && flags.tag) parts.push(`--tag ${flags.tag}`);
+  if (flags.mnemonic) parts.push("--mnemonic <set>");
+  if (flags.password) parts.push("--password <set>");
+  if (flags.derivationPath) parts.push("--derivation-path <set>");
+  if (typeof flags.rpc === "string" && flags.rpc) parts.push("--rpc <set>");
+  return parts.join(" ");
+}
+function buildReportBody(error) {
+  const lines = [
+    "## Environment",
+    "",
+    `- **bulletin-deploy**: ${VERSION}`,
+    `- **Node.js**: ${process.version}`,
+    `- **OS**: ${os.platform()} ${os.arch()} ${os.release()}`,
+    "",
+    "## Error",
+    "",
+    "```",
+    scrubSecrets(error.stack || error.message),
+    "```",
+    ""
+  ];
+  const ctx = _deployContext;
+  const traceId = getCurrentSentryTraceId();
+  const hasCtx = ctx.domain || ctx.repo || ctx.rpc || ctx.cliFlags || ctx.ci?.runUrl || traceId;
+  if (hasCtx) {
+    lines.push("## Deploy Context", "");
+    if (ctx.domain) lines.push(`- **Domain**: ${ctx.domain}`);
+    if (ctx.repo) lines.push(`- **Repo**: ${ctx.repo}`);
+    if (ctx.branch) lines.push(`- **Branch**: ${ctx.branch}`);
+    if (ctx.signerMode) lines.push(`- **Signer mode**: ${ctx.signerMode}`);
+    if (ctx.chunkCount != null) lines.push(`- **Chunks**: ${ctx.chunkCount}`);
+    if (ctx.totalSize) lines.push(`- **Total size**: ${ctx.totalSize}`);
+    if (ctx.rpc) lines.push(`- **RPC**: ${ctx.rpc}`);
+    if (ctx.deployTag) lines.push(`- **Deploy tag**: ${ctx.deployTag}`);
+    if (ctx.cliFlags) lines.push(`- **CLI flags**: \`${ctx.cliFlags}\``);
+    if (traceId) lines.push(`- **Sentry trace**: ${traceId}`);
+    lines.push("");
+  }
+  if (ctx.ci?.runUrl) {
+    lines.push("## CI", "");
+    lines.push(`- **Run**: ${ctx.ci.runUrl}`);
+    if (ctx.ci.workflow) lines.push(`- **Workflow**: ${ctx.ci.workflow}`);
+    if (ctx.ci.job) lines.push(`- **Job**: ${ctx.ci.job}`);
+    if (ctx.ci.sha) lines.push(`- **SHA**: ${ctx.ci.sha}`);
+    lines.push("");
+  }
+  const tail = getCapturedTail();
+  if (tail) {
+    lines.push("## Log tail", "", "<details><summary>Last ~32 KB of stdout/stderr (secrets scrubbed)</summary>", "", "```", tail.trimEnd(), "```", "", "</details>", "");
+  }
+  return lines.join("\n");
+}
+function buildTitle(error) {
+  const msg = error.message.slice(0, 60);
+  return `[deploy-bug] ${msg}`;
+}
+function buildLabels(error) {
+  const labels = ["bug", "auto-report"];
+  const area = classifyErrorArea(error.message);
+  if (area) labels.push(area);
+  return labels;
+}
+function createGhIssue(title, body, labels) {
+  const args = [
+    "issue",
+    "create",
+    "--repo",
+    "paritytech/bulletin-deploy",
+    "--title",
+    title,
+    ...labels.flatMap((l) => ["--label", l]),
+    "--body-file",
+    "-"
+  ];
+  const out = execFileSync("gh", args, { input: body, stdio: ["pipe", "pipe", "inherit"] });
+  return out.toString("utf8").trim();
+}
+function applyCoreLabels(issueUrl) {
+  try {
+    execFileSync(
+      "gh",
+      ["issue", "edit", issueUrl, "--add-label", "bug", "--add-label", "auto-report"],
+      { stdio: ["ignore", "pipe", "pipe"] }
+    );
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function offerBugReport(error) {
+  if (!isInteractive()) return;
+  const yes = await promptYesNo("\n   This looks like a bug. Open an issue with debug info? [Y/n] ");
+  if (!yes) return;
+  const title = buildTitle(error);
+  const body = buildReportBody(error);
+  const labels = buildLabels(error);
+  if (!hasGhCli()) {
+    console.error("\n   gh CLI not found. Debug info below \u2014 paste into a new issue:\n");
+    console.error(`   https://github.com/paritytech/bulletin-deploy/issues/new
+`);
+    printFallback(title, body, labels);
+    return;
+  }
+  try {
+    const url = createGhIssue(title, body, labels);
+    console.error(`   Issue created: ${url}`);
+    return;
+  } catch {
+  }
+  try {
+    console.error("   Retrying without labels...");
+    const url = createGhIssue(title, body, []);
+    const applied = applyCoreLabels(url);
+    if (applied) {
+      console.error(`   Issue created: ${url} (labels applied after retry)`);
+    } else {
+      console.error(`   Issue created: ${url} (labels could not be applied; please add 'bug' and 'auto-report' manually)`);
+    }
+  } catch {
+    console.error("   Failed to create issue. Debug info below:\n");
+    printFallback(title, body, labels);
+  }
+}
+function printFallback(title, body, labels) {
+  console.error(`   Title: ${title}`);
+  console.error(`   Labels: ${labels.join(", ")}
+`);
+  console.error(body);
+}
+
+export {
+  setDeployContext,
+  installLogCapture,
+  getCapturedTail,
+  scrubSecrets,
+  buildCliFlagsSummary,
+  buildReportBody,
+  buildTitle,
+  buildLabels,
+  createGhIssue,
+  offerBugReport
+};

package/dist/{chunk-QILGABSF.js → chunk-B7GUYYAN.js}

@@ -12,8 +12,11 @@ var CidPreservingBlockstore = class {
   *all() {
     yield* this.data.values();
   }
+  clear() {
+    this.data.clear();
+  }
 };
-function walkDirectory(dirPath, prefix = "") {
+function* walkDirectoryLazy(dirPath, prefix = "") {
   let dirents;
   try {
     dirents = fs.readdirSync(dirPath, { withFileTypes: true });
@@ -23,42 +26,46 @@ function walkDirectory(dirPath, prefix = "") {
     if (code === "ENOTDIR") throw new Error(`Not a directory: ${dirPath}`);
     throw err;
   }
-  const entries = [];
   for (const entry of dirents) {
     const fullPath = path.join(dirPath, entry.name);
     const relativePath = prefix ? `${prefix}/${entry.name}` : entry.name;
     if (entry.isDirectory()) {
-      entries.push(...walkDirectory(fullPath, relativePath));
+      yield* walkDirectoryLazy(fullPath, relativePath);
     } else if (entry.isFile()) {
-      entries.push({ path: relativePath, content: fs.readFileSync(fullPath) });
+      yield { path: relativePath, absolutePath: fullPath };
     }
   }
-  return entries;
 }
 async function collectBytes(iter) {
   const parts = [];
+  let totalLength = 0;
   for await (const chunk of iter) {
     parts.push(chunk);
+    totalLength += chunk.length;
   }
-  const totalLength = parts.reduce((sum, p) => sum + p.length, 0);
   const result = new Uint8Array(totalLength);
   let offset = 0;
-  for (const part of parts) {
+  for (let i = 0; i < parts.length; i++) {
+    const part = parts[i];
     result.set(part, offset);
     offset += part.length;
+    parts[i] = void 0;
   }
   return result;
 }
 async function merkleizeJS(directoryPath) {
   console.log(`   Merkleizing (JS): ${directoryPath}`);
-  const files = walkDirectory(directoryPath);
   const blockstore = new CidPreservingBlockstore();
-  const source = files.map((file) => ({
-    path: file.path,
-    content: (async function* () {
-      yield file.content;
-    })()
-  }));
+  const source = (function* () {
+    for (const file of walkDirectoryLazy(directoryPath)) {
+      yield {
+        path: file.path,
+        content: (async function* () {
+          yield fs.readFileSync(file.absolutePath);
+        })()
+      };
+    }
+  })();
   let rootCid;
   for await (const entry of importer(source, blockstore, {
     cidVersion: 1,
@@ -77,6 +84,7 @@ async function merkleizeJS(directoryPath) {
   }
   await writer.close();
   const carBytes = await collectPromise;
+  blockstore.clear();
   console.log(`   CAR (JS): ${(carBytes.length / 1024 / 1024).toFixed(2)} MB`);
   return { carBytes, cid: rootCid.toString() };
 }