bulletin-deploy 0.7.26 → 0.7.27-rc.2

package/bin/bulletin-deploy

@@ -207,9 +207,11 @@ if (!flags.help && !flags.version) {
   };
   process.on("uncaughtException", (e) => handleUnhandled(e, "uncaught"));
   process.on("unhandledRejection", (e) => handleUnhandled(e, "unhandled"));
-  // POSIX exit codes: 128 + signal number. Matches shell conventions so
-  // callers (e.g. consumer CI with EXIT_CODE_NO_RETRY=75) treat them as
-  // retryable.
+  // POSIX exit codes: 128 + signal number. Signal exits (130/SIGINT,
+  // 143/SIGTERM, 129/SIGHUP) indicate cancellation or environment teardown
+  // and are retryable from the consumer's perspective. Contrast with
+  // NonRetryableError exits (code 78, POSIX EX_CONFIG) which callers must
+  // NOT retry — see EXIT_CODE_NO_RETRY in src/errors.ts.
   process.on("SIGINT", () => finalize("SIGINT", 130));
   process.on("SIGTERM", () => finalize("SIGTERM", 143));
   process.on("SIGHUP", () => finalize("SIGHUP", 129));

package/dist/bug-report.js

@@ -9,10 +9,10 @@ import {
   offerBugReport,
   scrubSecrets,
   setDeployContext
-} from "./chunk-5EWKYMDC.js";
-import "./chunk-QUQYXRTC.js";
-import "./chunk-MR6AV2UF.js";
-import "./chunk-5WKHSZT7.js";
+} from "./chunk-EJUBFDXU.js";
+import "./chunk-3AJST77I.js";
+import "./chunk-P7XM4NJG.js";
+import "./chunk-Y5EWXXFE.js";
 export {
   buildCliFlagsSummary,
   buildLabels,

package/dist/{chunk-QUQYXRTC.js → chunk-3AJST77I.js}

@@ -1,6 +1,6 @@
 import {
   VERSION
-} from "./chunk-MR6AV2UF.js";
+} from "./chunk-P7XM4NJG.js";
 
 // src/version-check.ts
 import { execSync, execFileSync } from "child_process";

package/dist/{chunk-5EWKYMDC.js → chunk-EJUBFDXU.js}

@@ -2,11 +2,11 @@ import {
   classifyErrorArea,
   isInteractive,
   promptYesNo
-} from "./chunk-QUQYXRTC.js";
+} from "./chunk-3AJST77I.js";
 import {
   VERSION,
   getCurrentSentryTraceId
-} from "./chunk-MR6AV2UF.js";
+} from "./chunk-P7XM4NJG.js";
 
 // src/bug-report.ts
 import { execSync, execFileSync } from "child_process";

package/dist/{chunk-NEYQ2JMY.js → chunk-JHD3OP3E.js}

@@ -20,10 +20,10 @@ import {
 } from "./chunk-S7EM5VMW.js";
 import {
   setDeployContext
-} from "./chunk-5EWKYMDC.js";
+} from "./chunk-EJUBFDXU.js";
 import {
   probeChunks
-} from "./chunk-6MDQDYVL.js";
+} from "./chunk-KLXIR7NQ.js";
 import {
   packSection
 } from "./chunk-C2TS5MER.js";
@@ -34,7 +34,7 @@ import {
   parseDomainName,
   popStatusName,
   verifyNonceAdvanced
-} from "./chunk-X6YUEHEH.js";
+} from "./chunk-MRRSSWRM.js";
 import {
   derivePoolAccounts,
   detectTestnet,
@@ -56,7 +56,7 @@ import {
   truncateAddress,
   withDeploySpan,
   withSpan
-} from "./chunk-MR6AV2UF.js";
+} from "./chunk-P7XM4NJG.js";
 import {
   DEFAULT_ENV_ID,
   getPopSelfServeConfig,
@@ -137,7 +137,10 @@ var CHUNK_SIZE = 2 * 1024 * 1024;
 var MAX_FILE_SIZE = 8 * 1024 * 1024;
 var MAX_RECONNECTIONS = parseInt(process.env.BULLETIN_MAX_RECONNECTIONS ?? "3", 10);
 var CHUNK_TIMEOUT_MS = parseInt(process.env.BULLETIN_CHUNK_TIMEOUT_MS ?? "180000", 10);
-var CHUNK_MORTALITY_PERIOD = 16;
+var CHUNK_MORTALITY_PERIOD = (() => {
+  const v = parseInt(process.env.BULLETIN_CHUNK_MORTALITY_PERIOD ?? "", 10);
+  return Number.isFinite(v) && v > 0 ? v : 16;
+})();
 var RETRY_BASE_DELAY_MS = 2e3;
 var RETRY_MAX_DELAY_MS = 15e3;
 var WS_HEARTBEAT_TIMEOUT_MS = 3e5;
@@ -663,6 +666,10 @@ async function storeChunkedContent(chunks, { client: existingClient, unsafeApi:
           continue;
         }
         captureWarning("Chunk upload failed, retrying", { chunkIndex: fail.index + 1, maxRetries: MAX_CHUNK_RETRIES, error: fail.error?.message?.slice(0, 200) });
+        const isExpiryFailure = fail.error?.message?.includes("isValid:false");
+        if (isExpiryFailure) {
+          console.log(`   Chunk ${fail.index + 1}: tx rejected (isValid:false), likely mortal era expiry \u2014 reissuing with fresh nonce`);
+        }
         let retried = false;
         for (let attempt = 1; attempt <= MAX_CHUNK_RETRIES; attempt++) {
           recordRecoveryAndCheckBudget("chunk_retry");
@@ -1050,6 +1057,11 @@ function preWarmGateway(chunkCids, gateways) {
     }
   }
 }
+function applyManifestFetchAttributes(fetched) {
+  setDeployAttribute("deploy.manifest.fetch_source", fetched.source);
+  setDeployAttribute("deploy.manifest.fetch_attempts", String(fetched.attempts ?? 0));
+  setDeployAttribute("deploy.manifest.bytes_downloaded", String(fetched.bytesDownloaded ?? 0));
+}
 async function storeDirectoryV2(directoryPath, opts = {}) {
   if (opts.password) return storeDirectory(directoryPath, opts);
   const provider = opts.provider ?? {};
@@ -1063,6 +1075,7 @@ async function storeDirectoryV2(directoryPath, opts = {}) {
   });
   const prevManifest = fetched.source === "embedded" ? fetched.manifest : null;
   console.log(`   Manifest fetch: ${fetched.source}${fetched.source !== "none" ? ` (${fetched.attempts} attempt${fetched.attempts === 1 ? "" : "s"})` : ""}`);
+  applyManifestFetchAttributes(fetched);
   const deployedAt = opts.reproducibleSource ? resolveReproducibleTimestamp(opts.reproducibleSource) : (/* @__PURE__ */ new Date()).toISOString();
   writeEmbeddedManifestPlaceholder(directoryPath, {
     version: MANIFEST_VERSION,
@@ -1462,6 +1475,13 @@ async function estimateUploadBytes(content) {
     return null;
   }
 }
+function assertSubdomainOwnerMatchesSigner(result, signerEvmAddress, sublabel, parentLabel) {
+  if (result.owned && result.owner?.toLowerCase() !== signerEvmAddress?.toLowerCase()) {
+    throw new NonRetryableError(
+      `Subdomain ${sublabel}.${parentLabel}.dot is already owned by ${result.owner} (signer is ${signerEvmAddress}). Use a fresh subdomain label, or release the existing registration.`
+    );
+  }
+}
 async function deploy(content, domainName = null, options = {}) {
   const envId = options.env ?? DEFAULT_ENV_ID;
   let envBulletin = [DEFAULT_BULLETIN_RPC];
@@ -1545,8 +1565,9 @@ async function deploy(content, domainName = null, options = {}) {
       await preflight.connect(resolveDotnsConnectOptions(options, envAssetHub, envAutoAccountMapping, envContracts, envNativeToEthRatio, envId, envPopSelfServe, envRegisterStorageDeposit));
       if (parsed?.isSubdomain) {
         try {
-          const { owned: subOwned } = await preflight.checkSubdomainOwnership(parsed.sublabel, parsed.parentLabel);
-          if (!subOwned) {
+          const subResult = await preflight.checkSubdomainOwnership(parsed.sublabel, parsed.parentLabel);
+          assertSubdomainOwnerMatchesSigner(subResult, preflight.evmAddress, parsed.sublabel, parsed.parentLabel);
+          if (!subResult.owned) {
             const { owned: parentOwned, owner: parentOwner } = await preflight.checkOwnership(parsed.parentLabel);
             if (!parentOwned) {
               throw new NonRetryableError(
@@ -2280,8 +2301,10 @@ export {
   detectFramework,
   checkDeploySize,
   resolveReproducibleTimestamp,
+  applyManifestFetchAttributes,
   storeDirectoryV2,
   resolveDotnsConnectOptions,
   estimateUploadBytes,
+  assertSubdomainOwnerMatchesSigner,
   deploy
 };

package/dist/{chunk-6MDQDYVL.js → chunk-KLXIR7NQ.js}

@@ -1,6 +1,6 @@
 import {
   captureWarning
-} from "./chunk-MR6AV2UF.js";
+} from "./chunk-P7XM4NJG.js";
 
 // src/chunk-probe.ts
 import { Twox128, Blake2128Concat, decAnyMetadata, unifyMetadata } from "@polkadot-api/substrate-bindings";

package/dist/{chunk-X6YUEHEH.js → chunk-MRRSSWRM.js}

@@ -7,10 +7,13 @@ import {
   setDeploySentryTag,
   truncateAddress,
   withSpan
-} from "./chunk-MR6AV2UF.js";
+} from "./chunk-P7XM4NJG.js";
 import {
   validateContractAddresses
 } from "./chunk-MGU5I7H5.js";
+import {
+  NonRetryableError
+} from "./chunk-ZOC4GITL.js";
 
 // src/dotns.ts
 import crypto from "crypto";
@@ -357,7 +360,7 @@ function sanitizeDomainLabel(label) {
   }
   return label;
 }
-function validateDomainLabel(label) {
+function validateDomainLabel(label, opts = {}) {
   if (!/^[a-z0-9-]{3,}$/.test(label)) throw new Error("Invalid domain label: must contain only lowercase letters, digits, and hyphens, min 3 chars");
   if (label.startsWith("-") || label.endsWith("-")) throw new Error("Invalid domain label: cannot start or end with hyphen");
   const sanitized = sanitizeDomainLabel(label);
@@ -369,6 +372,15 @@ function validateDomainLabel(label) {
       `Invalid domain label: "${sanitized}" \u2014 dotns base-name extraction leaves a trailing hyphen ("${baseWithHyphen}"), which the registry rejects with PopError("Name must be lowercase ASCII DNS label"). Drop the hyphen before the digits (e.g. "${dropHyphen}") or add a non-digit segment between (e.g. "${insertSegment}").`
     );
   }
+  if (opts.checkReserved !== false) {
+    const classification = classifyDotnsLabel(sanitized);
+    if (classification.status === ProofOfPersonhoodStatus.Reserved) {
+      const sanitizeTrail = label !== sanitized ? `Input "${label}" was sanitized to "${sanitized}" (excess trailing digits trimmed). ` : "";
+      throw new NonRetryableError(
+        `${sanitizeTrail}Invalid domain label "${sanitized}": ${classification.message}`
+      );
+    }
+  }
   return sanitized;
 }
 function isCommitmentMature(chainNowSeconds, commitTimestampSeconds, minimumAgeSeconds) {
@@ -411,7 +423,7 @@ function canRegister(requiredStatus, userStatus, trailingDigits) {
   return trailingDigits !== 0 && userStatus !== ProofOfPersonhoodStatus.ProofOfPersonhoodLite;
 }
 function exampleNoStatusLabel(label) {
-  const base = stripTrailingDigits(validateDomainLabel(label)).replace(/[^a-z0-9-]/g, "x");
+  const base = stripTrailingDigits(validateDomainLabel(label, { checkReserved: false })).replace(/[^a-z0-9-]/g, "x");
   return `${base.padEnd(9, "x").slice(0, 9)}00.dot`;
 }
 function parseDomainName(input) {
@@ -422,7 +434,7 @@ function parseDomainName(input) {
     return { isSubdomain: false, label: sanitized, sublabel: null, parentLabel: null, fullName: `${sanitized}.dot` };
   }
   if (parts.length === 2) {
-    const sanitizedSub = validateDomainLabel(parts[0]);
+    const sanitizedSub = validateDomainLabel(parts[0], { checkReserved: false });
     const sanitizedParent = validateDomainLabel(parts[1]);
     const fullLabel = `${sanitizedSub}.${sanitizedParent}`;
     return { isSubdomain: true, label: fullLabel, sublabel: sanitizedSub, parentLabel: sanitizedParent, fullName: `${fullLabel}.dot` };
@@ -1137,6 +1149,41 @@ var DotNS = class {
     }
     return decodeFunctionResult({ abi: contractAbi, functionName, data: callResult.result.value.data });
   }
+  /**
+   * Like contractCall, but returns null when the chain replies with empty data
+   * ("0x"). Use this for view functions where an unset storage slot is a
+   * meaningful answer (e.g. resolver(node) for a name with no resolver,
+   * text records, optional ownership lookups). Use the strict contractCall
+   * for read paths that must always return a value.
+   */
+  async contractCallNullable(contractAddress, contractAbi, functionName, args = []) {
+    this.ensureConnected();
+    if (!this.clientWrapper) throw new Error("contractCallNullable: polkadot-api client not available");
+    const encodedCallData = encodeFunctionData({ abi: contractAbi, functionName, args });
+    const callResult = await this.clientWrapper.performDryRunCall(this.substrateAddress, contractAddress, 0n, encodedCallData);
+    if (!callResult.result.isOk) {
+      const errorData = callResult.result.value;
+      throw new Error(formatContractDryRunFailure({
+        revertData: errorData?.data ?? "0x",
+        revertFlags: errorData?.flags ?? 0n,
+        gasConsumed: callResult.gasConsumed,
+        gasRequired: callResult.gasRequired,
+        storageDeposit: callResult.storageDeposit?.value
+      }, {
+        contractAddress,
+        functionName,
+        signerSubstrateAddress: this.substrateAddress,
+        signerEvmAddress: this.evmAddress ?? void 0,
+        value: 0n,
+        encodedData: encodedCallData,
+        args,
+        contracts: this._contracts
+      }));
+    }
+    const rawData = callResult.result.value.data ?? "0x";
+    if (rawData === "0x" || rawData === "" || rawData.length <= 2) return null;
+    return decodeFunctionResult({ abi: contractAbi, functionName, data: rawData });
+  }
   async contractTransaction(contractAddress, value, contractAbi, functionName, args = [], statusCallback = () => {
   }, { useNoncePolling, verifyEffect } = {}) {
     this.ensureConnected();
@@ -1154,7 +1201,8 @@ var DotNS = class {
     const checkAddress = (ownerAddress || this.evmAddress).toLowerCase();
     const tokenId = computeDomainTokenId(label);
     try {
-      const owner = await withTimeout(this.contractCall(this._contracts.DOTNS_REGISTRAR, DOTNS_REGISTRAR_ABI, "ownerOf", [tokenId]), 3e4, "ownerOf");
+      const owner = await withTimeout(this.contractCallNullable(this._contracts.DOTNS_REGISTRAR, DOTNS_REGISTRAR_ABI, "ownerOf", [tokenId]), 3e4, "ownerOf");
+      if (owner === null) return { owned: false, owner: null };
       const owned = owner.toLowerCase() === checkAddress;
       return { owned, owner };
     } catch {
@@ -1187,7 +1235,7 @@ var DotNS = class {
     if (!this.clientWrapper) return { owned: false, owner: null };
     const node = namehash(`${sublabel}.${parentLabel}.dot`);
     try {
-      const owner = await withTimeout(this.contractCall(this._contracts.DOTNS_REGISTRY, DOTNS_REGISTRY_ABI, "owner", [node]), 3e4, "owner");
+      const owner = await withTimeout(this.contractCallNullable(this._contracts.DOTNS_REGISTRY, DOTNS_REGISTRY_ABI, "owner", [node]), 3e4, "owner");
       if (!owner || owner === zeroAddress) return { owned: false, owner: null };
       const owned = owner.toLowerCase() === this.evmAddress.toLowerCase();
       return { owned, owner };
@@ -1310,7 +1358,7 @@ var DotNS = class {
       let onChainValue = "";
       let lastPrintedElapsed = -1;
       while (true) {
-        const onChain = await withTimeout(this.contractCall(this._contracts.DOTNS_RESOLVER, DOTNS_TEXT_RESOLVER_ABI, "text", [node, key]), 3e4, "text");
+        const onChain = await withTimeout(this.contractCallNullable(this._contracts.DOTNS_RESOLVER, DOTNS_TEXT_RESOLVER_ABI, "text", [node, key]), 3e4, "text");
         onChainValue = onChain ?? "";
         if (onChainValue === value) break;
         const nowChainMs = Number(await this.clientWrapper.client.query.Timestamp.Now.getValue());

package/dist/{chunk-MR6AV2UF.js → chunk-P7XM4NJG.js}

@@ -1,7 +1,7 @@
 import {
   package_default,
   writeRunState
-} from "./chunk-5WKHSZT7.js";
+} from "./chunk-Y5EWXXFE.js";
 
 // src/memory-report.ts
 import * as fs2 from "fs";
@@ -238,6 +238,14 @@ function getDeployAttributes(domain) {
     "deploy.pool.nonce_collision_reupload_count": 0,
     // Manifest-aware Phase A trust: count of section-1 CIDs trusted from prev manifest.
     "deploy.phase_a.chunks_trusted": 0,
+    // Manifest fetch outcome. Seeded so every span carries the attributes even when
+    // fetchPreviousManifest is never reached (first deploy, early error, non-incremental
+    // path). "none" + "0" form the denominator for ratio queries:
+    // count_if(deploy.manifest.fetch_source, "heuristic_fallback") / count().
+    // Both string-valued per @sentry/node EAP numeric-attribute caveat.
+    "deploy.manifest.fetch_source": "none",
+    "deploy.manifest.fetch_attempts": "0",
+    "deploy.manifest.bytes_downloaded": "0",
     // Bulletin storage upload chain receipt (root-node tx, or last chunk when root skipped).
     // Empty-string default so every span carries the attribute for filter queries.
     "bulletin.upload.tx_hash": "",
@@ -288,16 +296,49 @@ function computeDeployOutcome(errorCategory, isSad, sadReason) {
   if (isSad) return `sad_${sadReason}`;
   return "clean";
 }
+var ERROR_KIND_RULES = [
+  [/Contract reverted|Contract execution would revert|revert(?:ed|ing)?\s*\(flags=[0-9]+\)/i, "contract-revert"],
+  [/timed out after \d+s waiting for block|Transaction not included after \d+s|Transaction did not settle within/i, "chain-timeout"],
+  [/\bstale\b.*nonce|nonce.*\bstale\b|"type"\s*:\s*"Future"|Invalid::Future|tx rejected by pool/i, "nonce-stale"],
+  [/heartbeat timeout|WS halt|Unable to connect|ChainHead disjointed|websocket.*closed|socket closed|disconnect/i, "connection"],
+  [/requires ProofOfPersonhoodFull,\s*but this signer is NoStatus/i, "naming.pop_required"],
+  [/Domain\s+\S+\.dot\s+is already owned by\s+0x[a-fA-F0-9]+/i, "naming.already_owned"],
+  [/Cannot deploy\s+[\w.-]+\.dot:\s*parent\s+[\w.-]+\.dot\s+is owned by/i, "naming.subdomain_orphan"],
+  [/Post-deploy verification failed for .+: on-chain contenthash is /i, "verify.contenthash_mismatch"],
+  [/Deploy verification failed:\s*DAG-PB root.+not finalised/i, "verify.dagpb_not_finalised"],
+  [/Retry budget exhausted:.*recovery attempts/i, "network.recovery_exhausted"],
+  [/ReviveApi\.\w+ timed out after \d+ms/i, "chain.api_timeout"],
+  [/^INVARIANT FAILED:/i, "tool.invariant"]
+];
 function classifyErrorKind(msg) {
-  if (/Contract reverted|Contract execution would revert|revert(?:ed|ing)?\s*\(flags=[0-9]+\)/i.test(msg)) return "contract-revert";
-  if (/timed out after \d+s waiting for block|Transaction not included after \d+s|Transaction did not settle within/i.test(msg)) return "chain-timeout";
-  if (/\bstale\b.*nonce|nonce.*\bstale\b|"type"\s*:\s*"Future"|Invalid::Future|tx rejected by pool/i.test(msg)) return "nonce-stale";
-  if (/heartbeat timeout|WS halt|Unable to connect|ChainHead disjointed|websocket.*closed|socket closed|disconnect/i.test(msg)) return "connection";
+  for (const [re, kind] of ERROR_KIND_RULES) {
+    if (re.test(msg)) return kind;
+  }
   return "unknown";
 }
 function sanitizeErrorMessage(msg) {
   return scrubPaths(msg.slice(0, 500));
 }
+function analyseErrorPattern(msg) {
+  const tags = [];
+  const len = msg.length;
+  if (len < 50) tags.push("len:lt50");
+  else if (len < 100) tags.push("len:50-99");
+  else if (len < 200) tags.push("len:100-199");
+  else if (len < 500) tags.push("len:200-499");
+  else tags.push("len:gte500");
+  if (/[a-z]+:\/\/[^\s:/?#]+:[^\s@/?#]+@/i.test(msg)) tags.push("url-userinfo");
+  const longHexRuns = (msg.match(/[0-9a-fA-F]{40,}/g) ?? []).filter((h) => !h.toLowerCase().startsWith("e30") && h.length !== 40);
+  if (longHexRuns.length > 0) tags.push(`long-hex:${Math.min(longHexRuns.length, 9)}`);
+  const b64ish = msg.match(/[A-Za-z0-9+/=]{30,}/g) ?? [];
+  if (b64ish.some((s) => /[A-Z]/.test(s) && /[a-z]/.test(s) && /[0-9]/.test(s))) tags.push("base64ish");
+  if (/\b[A-Za-z0-9_-]{6,}\.[A-Za-z0-9_-]{6,}\.[A-Za-z0-9_-]{6,}\b/.test(msg)) tags.push("jwt-shape");
+  const evmCount = (msg.match(/0x[a-fA-F0-9]{40}\b/g) ?? []).length;
+  if (evmCount > 0) tags.push(`evm:${Math.min(evmCount, 9)}`);
+  if (/\b[1-9A-HJ-NP-Za-km-z]{46,49}\b/.test(msg)) tags.push("ss58-shape");
+  if (/(?:\b[a-z]{3,8}\s){11,23}\b[a-z]{3,8}\b/.test(msg)) tags.push("mnemonic-shape");
+  return tags.join(",");
+}
 async function withSpan(op, description, attributes, fn) {
   if (!Sentry) return fn();
   return Sentry.startSpan({ op, name: description, attributes }, async (span) => {
@@ -308,6 +349,7 @@ async function withSpan(op, description, attributes, fn) {
       span.setAttribute("error.message", msg);
       span.setAttribute("deploy.error_kind", classifyErrorKind(msg));
       span.setAttribute("deploy.error_message", sanitizeErrorMessage(msg));
+      span.setAttribute("deploy.error_pattern_signature", analyseErrorPattern(msg));
       span.setStatus({ code: 2, message: "internal_error" });
       throw error;
     }
@@ -407,6 +449,7 @@ async function withDeploySpan(domain, fn) {
         span.setAttribute("deploy.error_category", errorCategory);
         span.setAttribute("deploy.error_kind", classifyErrorKind(msg));
         span.setAttribute("deploy.error_message", sanitizeErrorMessage(msg));
+        span.setAttribute("deploy.error_pattern_signature", analyseErrorPattern(msg));
         currentErrorCategory = errorCategory;
         const isExpected = isExpectedError(msg);
         span.setAttribute("deploy.expected", isExpected ? "true" : "false");
@@ -667,6 +710,7 @@ export {
   computeDeployOutcome,
   classifyErrorKind,
   sanitizeErrorMessage,
+  analyseErrorPattern,
   withSpan,
   sampleMemory,
   withDeploySpan,

package/dist/{chunk-5WKHSZT7.js → chunk-Y5EWXXFE.js}

@@ -6,7 +6,7 @@ import * as path from "path";
 // package.json
 var package_default = {
   name: "bulletin-deploy",
-  version: "0.7.26",
+  version: "0.7.27-rc.2",
   private: false,
   repository: {
     type: "git",

package/dist/chunk-probe.js

@@ -5,9 +5,9 @@ import {
   _decodeStorageValue,
   _resetProbeSession,
   probeChunks
-} from "./chunk-6MDQDYVL.js";
-import "./chunk-MR6AV2UF.js";
-import "./chunk-5WKHSZT7.js";
+} from "./chunk-KLXIR7NQ.js";
+import "./chunk-P7XM4NJG.js";
+import "./chunk-Y5EWXXFE.js";
 export {
   ChainProbeCrossValidationError,
   ChainProbeMetadataError,

package/dist/deploy.d.ts

@@ -60,7 +60,7 @@ interface StoredChunk {
 declare const DEFAULT_BULLETIN_RPC = "wss://paseo-bulletin-rpc.polkadot.io";
 declare const DEFAULT_POOL_SIZE = 10;
 declare function setWsHaltCallback(cb: (() => void) | null): void;
-declare const CHUNK_MORTALITY_PERIOD = 16;
+declare const CHUNK_MORTALITY_PERIOD: number;
 declare function retryBudgetExhausted(history: number[], maxEvents: number, windowMs: number, now?: number): boolean;
 declare function isConnectionError(error: any): boolean;
 declare function deriveRootSigner(mnemonic: string, path?: string): {
@@ -170,6 +170,11 @@ declare function checkDeploySize(carBytes: number, opts: {
     allowLargeDeploy?: boolean;
 }): SizeDecision;
 declare function resolveReproducibleTimestamp(source: string): string;
+declare function applyManifestFetchAttributes(fetched: {
+    source: string;
+    attempts?: number;
+    bytesDownloaded?: number;
+}): void;
 declare function storeDirectoryV2(directoryPath: string, opts?: StoreDirectoryOptions): Promise<{
     storageCid: string;
     ipfsCid: string;
@@ -262,6 +267,15 @@ declare function resolveDotnsConnectOptions(options: Pick<DeployOptions, "mnemon
     registerStorageDeposit?: bigint;
 };
 declare function estimateUploadBytes(content: DeployContent): Promise<number | null>;
+/**
+ * Throws NonRetryableError if a subdomain is owned by a different address
+ * than the current signer. Called in the preflight branch before chunk upload.
+ * Issue #562: preflight was only checking `owned`, not comparing `owner`.
+ */
+declare function assertSubdomainOwnerMatchesSigner(result: {
+    owned: boolean;
+    owner: string | null | undefined;
+}, signerEvmAddress: string | null | undefined, sublabel: string, parentLabel: string): void;
 declare function deploy(content: DeployContent, domainName?: string | null, options?: DeployOptions): Promise<DeployResult>;
 
-export { CHUNK_MORTALITY_PERIOD, DEFAULT_BULLETIN_RPC, DEFAULT_POOL_SIZE, type DeployContent, type DeployOptions, type DeployResult, ENCRYPT_KEY_LEN, ENCRYPT_MAGIC, ENCRYPT_NONCE_LEN, ENCRYPT_PBKDF2_ITERATIONS, ENCRYPT_SALT_LEN, ENCRYPT_TAG_LEN, type SizeDecision, type StoreDirectoryOptions, __assignDenseNoncesForTest, buildFilesMap, checkDeploySize, chunk, computeStorageCid, createCID, deploy, deriveRootSigner, detectFramework, encodeContenthash, encryptContent, estimateUploadBytes, friendlyChainError, hasIPFS, isConnectionError, merkleize, resolveDotnsConnectOptions, resolveReproducibleTimestamp, retryBudgetExhausted, setWsHaltCallback, storeChunkedContent, storeDirectory, storeDirectoryV2, storeFile };
+export { CHUNK_MORTALITY_PERIOD, DEFAULT_BULLETIN_RPC, DEFAULT_POOL_SIZE, type DeployContent, type DeployOptions, type DeployResult, ENCRYPT_KEY_LEN, ENCRYPT_MAGIC, ENCRYPT_NONCE_LEN, ENCRYPT_PBKDF2_ITERATIONS, ENCRYPT_SALT_LEN, ENCRYPT_TAG_LEN, type SizeDecision, type StoreDirectoryOptions, __assignDenseNoncesForTest, applyManifestFetchAttributes, assertSubdomainOwnerMatchesSigner, buildFilesMap, checkDeploySize, chunk, computeStorageCid, createCID, deploy, deriveRootSigner, detectFramework, encodeContenthash, encryptContent, estimateUploadBytes, friendlyChainError, hasIPFS, isConnectionError, merkleize, resolveDotnsConnectOptions, resolveReproducibleTimestamp, retryBudgetExhausted, setWsHaltCallback, storeChunkedContent, storeDirectory, storeDirectoryV2, storeFile };

package/dist/deploy.js

@@ -9,6 +9,8 @@ import {
   ENCRYPT_SALT_LEN,
   ENCRYPT_TAG_LEN,
   __assignDenseNoncesForTest,
+  applyManifestFetchAttributes,
+  assertSubdomainOwnerMatchesSigner,
   buildFilesMap,
   checkDeploySize,
   chunk,
@@ -32,19 +34,19 @@ import {
   storeDirectory,
   storeDirectoryV2,
   storeFile
-} from "./chunk-NEYQ2JMY.js";
+} from "./chunk-JHD3OP3E.js";
 import "./chunk-KHVTYIIX.js";
 import "./chunk-KOSF5FDO.js";
 import "./chunk-FZWJV5AD.js";
 import "./chunk-S7EM5VMW.js";
-import "./chunk-5EWKYMDC.js";
-import "./chunk-QUQYXRTC.js";
-import "./chunk-6MDQDYVL.js";
+import "./chunk-EJUBFDXU.js";
+import "./chunk-3AJST77I.js";
+import "./chunk-KLXIR7NQ.js";
 import "./chunk-C2TS5MER.js";
-import "./chunk-X6YUEHEH.js";
+import "./chunk-MRRSSWRM.js";
 import "./chunk-QMYW3D6E.js";
-import "./chunk-MR6AV2UF.js";
-import "./chunk-5WKHSZT7.js";
+import "./chunk-P7XM4NJG.js";
+import "./chunk-Y5EWXXFE.js";
 import "./chunk-MGU5I7H5.js";
 import {
   EXIT_CODE_NO_RETRY,
@@ -64,6 +66,8 @@ export {
   EXIT_CODE_NO_RETRY,
   NonRetryableError,
   __assignDenseNoncesForTest,
+  applyManifestFetchAttributes,
+  assertSubdomainOwnerMatchesSigner,
   buildFilesMap,
   checkDeploySize,
   chunk,

package/dist/dotns.d.ts

@@ -159,7 +159,9 @@ declare function computeDomainTokenId(label: string): bigint;
 declare function countTrailingDigits(label: string): number;
 declare function stripTrailingDigits(label: string): string;
 declare function sanitizeDomainLabel(label: string): string;
-declare function validateDomainLabel(label: string): string;
+declare function validateDomainLabel(label: string, opts?: {
+    checkReserved?: boolean;
+}): string;
 declare function isCommitmentMature(chainNowSeconds: number, commitTimestampSeconds: number, minimumAgeSeconds: number): boolean;
 declare function isCommitmentTimingBarerevert(msg: string): boolean;
 declare function classifyDotnsLabel(label: string): {
@@ -301,6 +303,14 @@ declare class DotNS {
     } | null>;
     private submitTransfer;
     contractCall(contractAddress: string, contractAbi: readonly any[], functionName: string, args?: any[]): Promise<any>;
+    /**
+     * Like contractCall, but returns null when the chain replies with empty data
+     * ("0x"). Use this for view functions where an unset storage slot is a
+     * meaningful answer (e.g. resolver(node) for a name with no resolver,
+     * text records, optional ownership lookups). Use the strict contractCall
+     * for read paths that must always return a value.
+     */
+    contractCallNullable(contractAddress: string, contractAbi: readonly any[], functionName: string, args?: any[]): Promise<any | null>;
     contractTransaction(contractAddress: string, value: bigint, contractAbi: readonly any[], functionName: string, args?: any[], statusCallback?: (status: string) => void, { useNoncePolling, verifyEffect }?: {
         useNoncePolling?: boolean;
         verifyEffect?: () => Promise<boolean>;

package/dist/dotns.js

@@ -41,10 +41,10 @@ import {
   stripTrailingDigits,
   validateDomainLabel,
   verifyNonceAdvanced
-} from "./chunk-X6YUEHEH.js";
+} from "./chunk-MRRSSWRM.js";
 import "./chunk-QMYW3D6E.js";
-import "./chunk-MR6AV2UF.js";
-import "./chunk-5WKHSZT7.js";
+import "./chunk-P7XM4NJG.js";
+import "./chunk-Y5EWXXFE.js";
 import "./chunk-MGU5I7H5.js";
 import "./chunk-ZOC4GITL.js";
 export {

package/dist/index.js

@@ -2,7 +2,7 @@ import {
   deploy,
   merkleizeJS,
   merkleizeWithStableOrder
-} from "./chunk-NEYQ2JMY.js";
+} from "./chunk-JHD3OP3E.js";
 import {
   computeStats,
   renderSummary,
@@ -24,18 +24,18 @@ import {
   isVolatilePath,
   parseManifest
 } from "./chunk-S7EM5VMW.js";
-import "./chunk-5EWKYMDC.js";
-import "./chunk-QUQYXRTC.js";
+import "./chunk-EJUBFDXU.js";
+import "./chunk-3AJST77I.js";
 import {
   probeChunks
-} from "./chunk-6MDQDYVL.js";
+} from "./chunk-KLXIR7NQ.js";
 import "./chunk-C2TS5MER.js";
 import {
   DEFAULT_MNEMONIC,
   DotNS,
   parseDomainName,
   sanitizeDomainLabel
-} from "./chunk-X6YUEHEH.js";
+} from "./chunk-MRRSSWRM.js";
 import {
   bootstrapPool,
   derivePoolAccounts,
@@ -43,7 +43,7 @@ import {
   fetchPoolAuthorizations,
   selectAccount
 } from "./chunk-QMYW3D6E.js";
-import "./chunk-MR6AV2UF.js";
+import "./chunk-P7XM4NJG.js";
 import {
   VERSION,
   loadRunState,
@@ -53,7 +53,7 @@ import {
   shouldSkipStaleWarning,
   stateFilePath,
   writeRunState
-} from "./chunk-5WKHSZT7.js";
+} from "./chunk-Y5EWXXFE.js";
 import {
   DEFAULT_ENV_ID,
   defaultBundledPath,

package/dist/memory-report.js

@@ -5,8 +5,8 @@ import {
   maybeWriteMemoryReport,
   safeHeap,
   sampleFromBytes
-} from "./chunk-MR6AV2UF.js";
-import "./chunk-5WKHSZT7.js";
+} from "./chunk-P7XM4NJG.js";
+import "./chunk-Y5EWXXFE.js";
 export {
   DEFAULT_THRESHOLD_MB,
   buildMemoryReport,

package/dist/merkle.js

@@ -6,19 +6,19 @@ import {
   merkleizeKuboBackend,
   merkleizeWithStableOrder,
   rebuildOrderedCarFromBytes
-} from "./chunk-NEYQ2JMY.js";
+} from "./chunk-JHD3OP3E.js";
 import "./chunk-KHVTYIIX.js";
 import "./chunk-KOSF5FDO.js";
 import "./chunk-FZWJV5AD.js";
 import "./chunk-S7EM5VMW.js";
-import "./chunk-5EWKYMDC.js";
-import "./chunk-QUQYXRTC.js";
-import "./chunk-6MDQDYVL.js";
+import "./chunk-EJUBFDXU.js";
+import "./chunk-3AJST77I.js";
+import "./chunk-KLXIR7NQ.js";
 import "./chunk-C2TS5MER.js";
-import "./chunk-X6YUEHEH.js";
+import "./chunk-MRRSSWRM.js";
 import "./chunk-QMYW3D6E.js";
-import "./chunk-MR6AV2UF.js";
-import "./chunk-5WKHSZT7.js";
+import "./chunk-P7XM4NJG.js";
+import "./chunk-Y5EWXXFE.js";
 import "./chunk-MGU5I7H5.js";
 import "./chunk-ZOC4GITL.js";
 import "./chunk-HOTQDYHD.js";

package/dist/personhood/bootstrap.js

@@ -21,10 +21,10 @@ import {
 } from "../chunk-T7EEVWNU.js";
 import {
   WS_HEARTBEAT_TIMEOUT_MS
-} from "../chunk-X6YUEHEH.js";
+} from "../chunk-MRRSSWRM.js";
 import "../chunk-QMYW3D6E.js";
-import "../chunk-MR6AV2UF.js";
-import "../chunk-5WKHSZT7.js";
+import "../chunk-P7XM4NJG.js";
+import "../chunk-Y5EWXXFE.js";
 import {
   loadEnvironments
 } from "../chunk-MGU5I7H5.js";

package/dist/personhood/people-client.js

@@ -1,9 +1,9 @@
 import {
   WS_HEARTBEAT_TIMEOUT_MS
-} from "../chunk-X6YUEHEH.js";
+} from "../chunk-MRRSSWRM.js";
 import "../chunk-QMYW3D6E.js";
-import "../chunk-MR6AV2UF.js";
-import "../chunk-5WKHSZT7.js";
+import "../chunk-P7XM4NJG.js";
+import "../chunk-Y5EWXXFE.js";
 import {
   loadEnvironments
 } from "../chunk-MGU5I7H5.js";

package/dist/run-state.js

@@ -7,7 +7,7 @@ import {
   shouldSkipStaleWarning,
   stateFilePath,
   writeRunState
-} from "./chunk-5WKHSZT7.js";
+} from "./chunk-Y5EWXXFE.js";
 export {
   VERSION,
   loadRunState,

package/dist/telemetry.d.ts

@@ -29,9 +29,16 @@ type DeployErrorCategory = 'user' | 'environment' | 'internal' | 'unknown';
 declare function classifyDeployError(msg: string): DeployErrorCategory;
 declare function classifySadReason(message: string): string;
 declare function computeDeployOutcome(errorCategory: DeployErrorCategory | null, isSad: boolean, sadReason: string): string;
-type DeployErrorKind = 'contract-revert' | 'chain-timeout' | 'nonce-stale' | 'connection' | 'unknown';
+type DeployErrorKind = 'contract-revert' | 'chain-timeout' | 'nonce-stale' | 'connection' | 'naming.pop_required' | 'naming.already_owned' | 'naming.subdomain_orphan' | 'verify.contenthash_mismatch' | 'verify.dagpb_not_finalised' | 'network.recovery_exhausted' | 'chain.api_timeout' | 'tool.invariant' | 'unknown';
 declare function classifyErrorKind(msg: string): DeployErrorKind;
 declare function sanitizeErrorMessage(msg: string): string;
+/**
+ * Classify an error message's *shape* (length, presence of certain patterns)
+ * without excerpting content. The result is a comma-joined list of tags;
+ * future analysis of scrubbed events will use this to identify which content
+ * shape triggered Sentry's PII scrubber, so we can build a real sanitiser.
+ */
+declare function analyseErrorPattern(msg: string): string;
 declare function withSpan<T>(op: string, description: string, attributes: Record<string, string | number | boolean | undefined>, fn: () => T | Promise<T>): Promise<T>;
 declare function sampleMemory(stage: string): void;
 declare function withDeploySpan<T>(domain: string, fn: () => T | Promise<T>): Promise<T>;
@@ -46,4 +53,4 @@ declare function setDeploySentryTag(key: string, value: string): void;
 declare function captureWarning(message: string, context?: Record<string, unknown>): void;
 declare function flush(): Promise<void>;
 
-export { type DeployErrorCategory, type DeployErrorKind, type InternalContextSignals, VERSION, __setDeployRootSpanForTest, __setSentryForTest, captureWarning, classifyDeployError, classifyErrorKind, classifySadReason, closeTelemetry, computeDeployOutcome, flush, getCurrentSentryTraceId, getDeployAttributes, initTelemetry, isExpectedError, isInternalContext, isInternalContextFromSignals, markRelaunchOomHintShown, resolveRepo, resolveRunner, resolveRunnerType, sampleMemory, sanitizeBranch, sanitizeErrorMessage, sanitizeRepo, scrubPaths, setDeployAttribute, setDeployReportContext, setDeploySentryTag, setRunStateActive, truncateAddress, withDeploySpan, withSpan };
+export { type DeployErrorCategory, type DeployErrorKind, type InternalContextSignals, VERSION, __setDeployRootSpanForTest, __setSentryForTest, analyseErrorPattern, captureWarning, classifyDeployError, classifyErrorKind, classifySadReason, closeTelemetry, computeDeployOutcome, flush, getCurrentSentryTraceId, getDeployAttributes, initTelemetry, isExpectedError, isInternalContext, isInternalContextFromSignals, markRelaunchOomHintShown, resolveRepo, resolveRunner, resolveRunnerType, sampleMemory, sanitizeBranch, sanitizeErrorMessage, sanitizeRepo, scrubPaths, setDeployAttribute, setDeployReportContext, setDeploySentryTag, setRunStateActive, truncateAddress, withDeploySpan, withSpan };

package/dist/telemetry.js

@@ -2,6 +2,7 @@ import {
   VERSION,
   __setDeployRootSpanForTest,
   __setSentryForTest,
+  analyseErrorPattern,
   captureWarning,
   classifyDeployError,
   classifyErrorKind,
@@ -31,12 +32,13 @@ import {
   truncateAddress,
   withDeploySpan,
   withSpan
-} from "./chunk-MR6AV2UF.js";
-import "./chunk-5WKHSZT7.js";
+} from "./chunk-P7XM4NJG.js";
+import "./chunk-Y5EWXXFE.js";
 export {
   VERSION,
   __setDeployRootSpanForTest,
   __setSentryForTest,
+  analyseErrorPattern,
   captureWarning,
   classifyDeployError,
   classifyErrorKind,

package/dist/version-check.js

@@ -11,9 +11,9 @@ import {
   isPreReleaseVersion,
   preReleaseWarning,
   promptYesNo
-} from "./chunk-QUQYXRTC.js";
-import "./chunk-MR6AV2UF.js";
-import "./chunk-5WKHSZT7.js";
+} from "./chunk-3AJST77I.js";
+import "./chunk-P7XM4NJG.js";
+import "./chunk-Y5EWXXFE.js";
 export {
   assessVersion,
   checkNodeVersion,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bulletin-deploy",
-  "version": "0.7.26",
+  "version": "0.7.27-rc.2",
   "private": false,
   "repository": {
     "type": "git",

package/tools/release-retry-wrapper.mjs

@@ -2,8 +2,15 @@
 // Selective retry wrapper for release E2E.
 //
 // Spawns a child process (the deploy CLI / test runner invocation), captures
-// stderr, classifies the failure mode, and exits with 75 on flake-class
-// matches (retry-eligible) or the child's own exit code otherwise.
+// stdout AND stderr, classifies the failure mode, and exits with 75 on
+// flake-class matches (retry-eligible) or the child's own exit code otherwise.
+//
+// Both streams are passed through to the parent's stdout/stderr so the GH
+// Actions job log still shows everything live.
+//
+// node --test captures each test-file subprocess's output and re-emits it as
+// TAP YAML on its own stdout — so deploy CLI errors (e.g. "ChainHead
+// disjointed") appear on stdout, not stderr. Capturing both is required.
 //
 // Configure nick-fields/retry@v3 with retry_on_exit_code: 75 so retries only
 // fire for the named transient classes. See
@@ -20,12 +27,16 @@ const FLAKE_PATTERNS = [
   "ChainHead disjointed",                    // RPC reorg / WS flake
   "Connection lost",                         // WS hard drop
   "Account mapping did not take effect",     // Revive mapping race
+  "requires Node.js >=22",                   // parity-default runner downgrade (Node v18) — infra flake
+  "received a shutdown signal",              // runner process killed mid-job — CI infra flake
 ];
 
-export function classifyForRetry(stderr, childExitCode = 1) {
+// output: combined stdout+stderr text from the child. Any flake pattern
+// appearing anywhere in the child's output makes the run retry-eligible.
+export function classifyForRetry(output, childExitCode = 1) {
   if (childExitCode === 0) return 0;
   for (const pat of FLAKE_PATTERNS) {
-    if (stderr.includes(pat)) return 75;
+    if (output.includes(pat)) return 75;
   }
   return childExitCode || 1;
 }
@@ -37,20 +48,24 @@ if (import.meta.url === `file://${process.argv[1]}`) {
     console.error("usage: release-retry-wrapper.mjs <command> [args...]");
     process.exit(2);
   }
-  const child = spawn(cmd, args, { stdio: ["inherit", "inherit", "pipe"] });
-  let stderrBuf = "";
+  const child = spawn(cmd, args, { stdio: ["inherit", "pipe", "pipe"] });
+  let outputBuf = "";
+  child.stdout.on("data", (chunk) => {
+    process.stdout.write(chunk); // pass through stdout to job log
+    outputBuf += chunk.toString();
+  });
   child.stderr.on("data", (chunk) => {
-    process.stderr.write(chunk); // pass through to job log
-    stderrBuf += chunk.toString();
+    process.stderr.write(chunk); // pass through stderr to job log
+    outputBuf += chunk.toString();
   });
   child.on("error", (err) => {
     process.stderr.write(`[release-retry-wrapper] failed to spawn: ${err.message}\n`);
     process.exit(1);
   });
-  // Use `close` (not `exit`) so the stderr pipe is fully drained before we
+  // Use `close` (not `exit`) so both pipes are fully drained before we
   // classify — `exit` can fire before the last `data` chunk lands.
   child.on("close", (code) => {
-    const cls = classifyForRetry(stderrBuf, code ?? 1);
+    const cls = classifyForRetry(outputBuf, code ?? 1);
     if (cls === 75) {
       console.error("[release-retry-wrapper] flake-class match — exiting 75 to signal retry");
     }