bulletin-deploy 0.7.28 → 0.7.30-rc.0

package/assets/environments.json

@@ -5,25 +5,28 @@
       "name": "Preview",
       "network": "testnet",
       "description": "Product Preview net, used by Product Teams",
+      "e2eEligible": true,
       "backend": "https://polkadot-app-stg.parity.io/",
       "ipfs": "https://previewnet.substrate.dev",
       "autoAccountMapping": true,
+      "nativeToEthRatio": 100000000,
       "registerStorageDeposit": 2000000000000,
       "contracts": {
-        "DOTNS_PROTOCOL_REGISTRY": "0xc07A2F24387DA27283CD87b9F24573b74C9e0c9b",
-        "DOTNS_REGISTRAR": "0x6c40817cdb96Ab57A4d9E9fa21D0eEa8307BDDE8",
-        "DOTNS_REGISTRAR_CONTROLLER": "0x732C38082CFAebed505A46e4e2D6414154694580",
-        "DOTNS_REGISTRY": "0xE6c0fB6D5492666144A8a4a015E25a98ACa604cA",
-        "DOTNS_POP_CONTROLLER": "0xfE1e25E8d521CaaA8055301CA61Ec3557263Ca76",
-        "DOTNS_RESOLVER": "0x5E174c960F5276Bd0387F200cE42f98fe927E220",
-        "DOTNS_CONTENT_RESOLVER": "0x108376A5B6DDc6BE3201C94Fd169BE444f220076",
-        "DOTNS_REVERSE_RESOLVER": "0xd5C3dcC7CE44593fEB1D72017A3539c4dB14e54a",
-        "DOTNS_POP_RESOLVER": "0x29Ace5d2C57109c82A30Db175e645880572c6369",
-        "DOTNS_NAME_ESCROW": "0x034b072eB8AF5cEfd820390bfe239bD911174ad2",
-        "POP_RULES": "0x5f2Dd23Ee3ceD39B293701ccE8355DdDd83Cd324",
-        "STORE_FACTORY": "0x9C38DFec452391696a8f0D3daFE71F7Eb29e08f8",
-        "LABEL_STORE_BEACON": "0x6B609A89Fec9898B441E17f1618670bdD08c437e",
-        "USER_STORE_BEACON": "0xbeb79e8BB2bC610822e8748e5439B9D890d88FF5"
+        "DOTNS_PROTOCOL_REGISTRY": "0x984F17a9077808F4B7e127F76806A1D59546B5B6",
+        "DOTNS_REGISTRAR": "0x061273AeF34e8ab9Ca08E199d7440E2639Fc2088",
+        "DOTNS_REGISTRAR_CONTROLLER": "0xC0c21ca6302884572E61d69D5bf3E271Acf39B23",
+        "DOTNS_REGISTRY": "0x5622CA75C75726Da13ae46C69127C07c87538633",
+        "DOTNS_POP_CONTROLLER": "0xae2c63b921Bc9DC30C149A8FA462fd3efA53D1F4",
+        "DOTNS_RESOLVER": "0x823f39E7a4126669be53211FFbCF27e55b3274C6",
+        "DOTNS_CONTENT_RESOLVER": "0xBD003d5Dd04E68aC60d529a46AEfBdEf8941868C",
+        "DOTNS_REVERSE_RESOLVER": "0xA347059298aA171b3E744538F7043e9AAaAa95E0",
+        "DOTNS_POP_RESOLVER": "0xeD11Bb5064fAAcb0A91e52dac2272E89856F2F6a",
+        "DOTNS_NAME_ESCROW": "0xb7E39199f13aCf7e90cCf67b980aC3ef0E2C4Fbe",
+        "POP_RULES": "0xF209a15e8a10D208bb4d3e3c56D9EB73a5934C26",
+        "STORE_FACTORY": "0x4BEFaB5de968183524b1eBd2FAec9C68Cdc696Fd",
+        "LABEL_STORE_BEACON": "0x11f324597d850d626d6406713808Ed854dA00a6b",
+        "USER_STORE_BEACON": "0xaC2209aFc366505d10Fd27d27030EB8C5E54874e",
+        "PUBLISHER": "0xa616254fd98724c7a3d295c98ca393a486096b68"
       }
     },
     {
@@ -50,6 +53,7 @@
       "name": "Paseo Next v2",
       "network": "testnet",
       "description": "Next iteration of the Paseo Next testnet",
+      "e2eEligible": true,
       "backend": "https://identity-backend-next.parity-testnet.parity.io",
       "ipfs": "https://paseo-bulletin-next-ipfs.polkadot.io",
       "docsUrl": "https://sre.teleport.parity.io/environments/paseo-next/",
@@ -64,22 +68,22 @@
         "stateAwareGuidance": true
       },
       "contracts": {
-        "DOTNS_PROTOCOL_REGISTRY": "0x5Caef84563fc980178e28417414aa65bA32f6B4e",
-        "DOTNS_REGISTRAR": "0x885b8085bA92A31c4ef52076f77379E647ECC399",
-        "DOTNS_REGISTRAR_CONTROLLER": "0x320b72c6e70D5a631d835FfD95915B288b26E6Be",
-        "DOTNS_REGISTRY": "0x8877344A885682523B4613779C95688ed7037BfD",
-        "DOTNS_POP_CONTROLLER": "0xaC8A28b60832E6E22bC19bD9Ee273C008576Bde4",
-        "ROOT_GATEWAY_DISPATCHER": "0xF470Dd693ED557b33f8775476776532D99Fb60d9",
-        "DOTNS_RESOLVER": "0x0cCdfea1a5E62DE116BF6cA79D397798d49e351E",
-        "DOTNS_CONTENT_RESOLVER": "0x2c9FF5D9136DBE5814C7B4FDbeDC15273a776663",
-        "DOTNS_REVERSE_RESOLVER": "0x025D5c4b10bD9723DeA2F4518aeD5B761DE08CDc",
-        "DOTNS_POP_RESOLVER": "0xB992e74cBeaf1Fd71310f85D1944d3A0c15C4c73",
-        "DOTNS_NAME_ESCROW": "0x6F7068c04487a90BFB42b128B84231c252b3017a",
-        "POP_RULES": "0x2002C1c15b88632Ad01c7770f6EbE1Ca05c8472E",
-        "STORE_FACTORY": "0x0DE5De70d61cc6b44B45d6595afDe8dB9b55bc31",
-        "LABEL_STORE_BEACON": "0xD033F7Ada687E8BC776928AB239505F9f0479Ce7",
-        "USER_STORE_BEACON": "0x7eD9b7D137Fa535965048F93b3B0248fEd2fcd32",
-        "PUBLISHER": "0x1307fc02d308f879a16b1ae3a49b4927aed53649"
+        "DOTNS_PROTOCOL_REGISTRY": "0x8F28419f4E32Bb0aA02e156A0543Ff253f126D7D",
+        "DOTNS_REGISTRAR": "0xf7Ad3F44F316C73E4a2b46b1ed48d376bCc9E639",
+        "DOTNS_REGISTRAR_CONTROLLER": "0x674b705268DAE369F0a7BE9cbaCDb928b8BA38C2",
+        "DOTNS_REGISTRY": "0xa1b2b939E82b2ecE55Bd8a0E283818BfC1CA6CDc",
+        "DOTNS_POP_CONTROLLER": "0x1c858C31497a7715C0D56A11208feB6b74FaB2aB",
+        "ROOT_GATEWAY_DISPATCHER": "0xd3F059FA65dA566B294b5d755a06054d4bE7ce7C",
+        "DOTNS_RESOLVER": "0xA8988eA083174ea94Ed1D686f0F073a10f65598D",
+        "DOTNS_CONTENT_RESOLVER": "0x8A26480b0B5Df3d4D9b95adc24a5Ecb33A5b8F64",
+        "DOTNS_REVERSE_RESOLVER": "0x259B9D8199c29d2EF132264ad05f8F74F3115A2E",
+        "DOTNS_POP_RESOLVER": "0xC9D511Eb80fD8B745DC5Be59aCF5d700271bC01e",
+        "DOTNS_NAME_ESCROW": "0x2Cb9899d91Ee575E8917958723F5E941b1BcC6A1",
+        "POP_RULES": "0x4909bFb3f4Fd86244abD6430fDfA0Ce5C91aD0c4",
+        "STORE_FACTORY": "0x692047C1477a017F287488E1c85F96Ca28C23fD8",
+        "LABEL_STORE_BEACON": "0x86ff9CE56C86bC3DfcaA7E316FB0Dd816e9fA2df",
+        "USER_STORE_BEACON": "0x6a7a938f72D39f949ee484a78c4C500514E2cb69",
+        "PUBLISHER": "0xa616254fd98724c7a3d295c98ca393a486096b68"
       }
     },
     {

package/dist/bug-report.js

@@ -9,10 +9,10 @@ import {
   offerBugReport,
   scrubSecrets,
   setDeployContext
-} from "./chunk-B6MBXUCT.js";
-import "./chunk-23U57PZI.js";
-import "./chunk-VS36INHV.js";
-import "./chunk-RDTUUXZM.js";
+} from "./chunk-UZHRNGAC.js";
+import "./chunk-ELR4BB37.js";
+import "./chunk-LM64HBVK.js";
+import "./chunk-M45PUARJ.js";
 export {
   buildCliFlagsSummary,
   buildLabels,

package/dist/{chunk-2VAUMZB2.js → chunk-7Y7RDOGT.js}

@@ -2,7 +2,7 @@ import {
   PEOPLE_MEMBER_IDENTIFIER_HEX,
   PGAS_ASSET_ID,
   PROOF_BYTES
-} from "./chunk-T7EEVWNU.js";
+} from "./chunk-SI2ZUOYD.js";
 import {
   buildImplicationMessage,
   buildV5GeneralExtrinsic,
@@ -14,6 +14,7 @@ import {
 } from "./chunk-ZYVGHDMU.js";
 
 // src/personhood/claim-pgas.ts
+import * as verifiable from "verifiablejs/nodejs";
 import { Enum } from "polkadot-api";
 var PgasClaimError = class extends Error {
   kind;
@@ -26,11 +27,6 @@ var PgasClaimError = class extends Error {
   }
 };
 var SECS_PER_DAY = 86400n;
-var IMPLICATION_EXCLUDE = /* @__PURE__ */ new Set([
-  "AuthorizeCall",
-  "AsPgas",
-  "StorageWeightReclaim"
-]);
 var PGAS_CONTEXT_PREFIX = new TextEncoder().encode("pop:gas:");
 function buildGasContext(day, slotIndex) {
   const out = new Uint8Array(32);
@@ -40,6 +36,20 @@ function buildGasContext(day, slotIndex) {
   dv.setUint32(12, slotIndex, true);
   return out;
 }
+function buildImplicationExclude(pipelineOrder) {
+  const asPgasIdx = pipelineOrder.indexOf("AsPgas");
+  if (asPgasIdx < 0) {
+    throw new Error("AsPgas not in AH pipeline \u2014 wrong chain?");
+  }
+  return /* @__PURE__ */ new Set([
+    ...pipelineOrder.slice(0, asPgasIdx + 1),
+    // everything ≤ AsPgas
+    "AuthorizeCall",
+    // empty value+implicit, no-op
+    "StorageWeightReclaim"
+    // outer wrapper, no contribution
+  ]);
+}
 function buildAsPgasClaimExtensionValue(proof, ringIndex, revision, day) {
   return Enum("Claim", {
     proof: bytesToHex(proof),
@@ -57,7 +67,8 @@ var claimPgas = async ({
   memberKey,
   buildRingProof,
   slotIndex = 0,
-  progress
+  progress,
+  validateWithCommitment = defaultValidateWithCommitment
 }) => {
   const people = peopleUnsafeApi;
   const ah = ahUnsafeApi;
@@ -128,10 +139,11 @@ var claimPgas = async ({
   const innerTx = ah.tx.Pgas.claim_pgas({ slot_index: slotIndex, target });
   const callBytes = await innerTx.getEncodedData();
   const passEmpty = await capturePass(innerTx, void 0);
+  const implicationExclude = buildImplicationExclude(passEmpty.extensions.order);
   const msg = buildImplicationMessage(
     callBytes,
     passEmpty.extensions,
-    IMPLICATION_EXCLUDE
+    implicationExclude
   );
   const { proof, alias } = await buildRingProof({
     ringExponent,
@@ -145,6 +157,15 @@ var claimPgas = async ({
       { kind: "ClientError" }
     );
   }
+  const rootBytes = latest.root instanceof Uint8Array ? latest.root : latest.root.asBytes();
+  try {
+    validateWithCommitment(ringExponent, proof, rootBytes, contextBytes, msg);
+  } catch (err) {
+    throw new PgasClaimError(
+      `validate_with_commitment failed locally \u2014 proof will be rejected by chain. proof=${proof.length}B context=${contextBytes.length}B commitment=${rootBytes.length}B. Cause: ${err instanceof Error ? err.message : String(err)}`,
+      { kind: "BadProof", cause: err }
+    );
+  }
   const asPgasValue = Enum("Claim", {
     proof: bytesToHex(proof),
     ring_index: ringIndex,
@@ -159,6 +180,15 @@ var claimPgas = async ({
   const amount = await ah.constants.Pgas.PgasClaimAmount();
   return { blockHash, amount, alias };
 };
+var defaultValidateWithCommitment = (ringExponent, proof, commitment, context, message) => {
+  const fn = verifiable["validate_with_commitment"];
+  if (typeof fn !== "function") {
+    throw new Error(
+      "validate_with_commitment is not exported by the installed verifiablejs. Upgrade to verifiablejs@1.3.0-beta.4 or newer to enable local proof pre-flight. See docs-internal/dotns-bootstrap-handover.md \xA75."
+    );
+  }
+  return fn(ringExponent, proof, commitment, context, message);
+};
 var capturePass = async (innerTx, asPgasValue) => {
   let captured = null;
   const sentinel = new Error("__pgas_capture_sentinel__");
@@ -279,6 +309,7 @@ var submitExtrinsic = (client, extrinsicHex, progress) => {
 
 export {
   PgasClaimError,
+  buildImplicationExclude,
   buildAsPgasClaimExtensionValue,
   claimPgas
 };

package/dist/{chunk-BMAEWZYV.js → chunk-AFBOKCCQ.js}

@@ -1,9 +1,9 @@
-import {
-  MEMBER_ENTROPY_KEY
-} from "./chunk-T7EEVWNU.js";
 import {
   blake2b256Keyed
 } from "./chunk-UPWEOGLQ.js";
+import {
+  MEMBER_ENTROPY_KEY
+} from "./chunk-SI2ZUOYD.js";
 
 // src/personhood/member-key.ts
 import { mnemonicToEntropy } from "@polkadot-labs/hdkd-helpers";

package/dist/{chunk-UY6S4E3A.js → chunk-C2OHYVVV.js}

@@ -6,15 +6,15 @@ import {
   resolveDotnsConnectOptions,
   storeDirectory,
   storeFile
-} from "./chunk-EIP3OX6G.js";
+} from "./chunk-IAZPLMVV.js";
 import {
   DotNS
-} from "./chunk-5OEGCTMJ.js";
+} from "./chunk-O232DOVQ.js";
 import {
   getPopSelfServeConfig,
   loadEnvironments,
   resolveEndpoints
-} from "./chunk-HZKRLQLG.js";
+} from "./chunk-GL2HHK4G.js";
 import {
   NonRetryableError
 } from "./chunk-ZOC4GITL.js";

package/dist/{chunk-23U57PZI.js → chunk-ELR4BB37.js}

@@ -1,6 +1,6 @@
 import {
   VERSION
-} from "./chunk-VS36INHV.js";
+} from "./chunk-LM64HBVK.js";
 
 // src/version-check.ts
 import { execSync, execFileSync } from "child_process";

package/dist/{chunk-HZKRLQLG.js → chunk-GL2HHK4G.js}

@@ -14,25 +14,28 @@ var environments_default = {
       name: "Preview",
       network: "testnet",
       description: "Product Preview net, used by Product Teams",
+      e2eEligible: true,
       backend: "https://polkadot-app-stg.parity.io/",
       ipfs: "https://previewnet.substrate.dev",
       autoAccountMapping: true,
+      nativeToEthRatio: 1e8,
       registerStorageDeposit: 2e12,
       contracts: {
-        DOTNS_PROTOCOL_REGISTRY: "0xc07A2F24387DA27283CD87b9F24573b74C9e0c9b",
-        DOTNS_REGISTRAR: "0x6c40817cdb96Ab57A4d9E9fa21D0eEa8307BDDE8",
-        DOTNS_REGISTRAR_CONTROLLER: "0x732C38082CFAebed505A46e4e2D6414154694580",
-        DOTNS_REGISTRY: "0xE6c0fB6D5492666144A8a4a015E25a98ACa604cA",
-        DOTNS_POP_CONTROLLER: "0xfE1e25E8d521CaaA8055301CA61Ec3557263Ca76",
-        DOTNS_RESOLVER: "0x5E174c960F5276Bd0387F200cE42f98fe927E220",
-        DOTNS_CONTENT_RESOLVER: "0x108376A5B6DDc6BE3201C94Fd169BE444f220076",
-        DOTNS_REVERSE_RESOLVER: "0xd5C3dcC7CE44593fEB1D72017A3539c4dB14e54a",
-        DOTNS_POP_RESOLVER: "0x29Ace5d2C57109c82A30Db175e645880572c6369",
-        DOTNS_NAME_ESCROW: "0x034b072eB8AF5cEfd820390bfe239bD911174ad2",
-        POP_RULES: "0x5f2Dd23Ee3ceD39B293701ccE8355DdDd83Cd324",
-        STORE_FACTORY: "0x9C38DFec452391696a8f0D3daFE71F7Eb29e08f8",
-        LABEL_STORE_BEACON: "0x6B609A89Fec9898B441E17f1618670bdD08c437e",
-        USER_STORE_BEACON: "0xbeb79e8BB2bC610822e8748e5439B9D890d88FF5"
+        DOTNS_PROTOCOL_REGISTRY: "0x984F17a9077808F4B7e127F76806A1D59546B5B6",
+        DOTNS_REGISTRAR: "0x061273AeF34e8ab9Ca08E199d7440E2639Fc2088",
+        DOTNS_REGISTRAR_CONTROLLER: "0xC0c21ca6302884572E61d69D5bf3E271Acf39B23",
+        DOTNS_REGISTRY: "0x5622CA75C75726Da13ae46C69127C07c87538633",
+        DOTNS_POP_CONTROLLER: "0xae2c63b921Bc9DC30C149A8FA462fd3efA53D1F4",
+        DOTNS_RESOLVER: "0x823f39E7a4126669be53211FFbCF27e55b3274C6",
+        DOTNS_CONTENT_RESOLVER: "0xBD003d5Dd04E68aC60d529a46AEfBdEf8941868C",
+        DOTNS_REVERSE_RESOLVER: "0xA347059298aA171b3E744538F7043e9AAaAa95E0",
+        DOTNS_POP_RESOLVER: "0xeD11Bb5064fAAcb0A91e52dac2272E89856F2F6a",
+        DOTNS_NAME_ESCROW: "0xb7E39199f13aCf7e90cCf67b980aC3ef0E2C4Fbe",
+        POP_RULES: "0xF209a15e8a10D208bb4d3e3c56D9EB73a5934C26",
+        STORE_FACTORY: "0x4BEFaB5de968183524b1eBd2FAec9C68Cdc696Fd",
+        LABEL_STORE_BEACON: "0x11f324597d850d626d6406713808Ed854dA00a6b",
+        USER_STORE_BEACON: "0xaC2209aFc366505d10Fd27d27030EB8C5E54874e",
+        PUBLISHER: "0xa616254fd98724c7a3d295c98ca393a486096b68"
       }
     },
     {
@@ -59,6 +62,7 @@ var environments_default = {
       name: "Paseo Next v2",
       network: "testnet",
       description: "Next iteration of the Paseo Next testnet",
+      e2eEligible: true,
       backend: "https://identity-backend-next.parity-testnet.parity.io",
       ipfs: "https://paseo-bulletin-next-ipfs.polkadot.io",
       docsUrl: "https://sre.teleport.parity.io/environments/paseo-next/",
@@ -73,22 +77,22 @@ var environments_default = {
         stateAwareGuidance: true
       },
       contracts: {
-        DOTNS_PROTOCOL_REGISTRY: "0x5Caef84563fc980178e28417414aa65bA32f6B4e",
-        DOTNS_REGISTRAR: "0x885b8085bA92A31c4ef52076f77379E647ECC399",
-        DOTNS_REGISTRAR_CONTROLLER: "0x320b72c6e70D5a631d835FfD95915B288b26E6Be",
-        DOTNS_REGISTRY: "0x8877344A885682523B4613779C95688ed7037BfD",
-        DOTNS_POP_CONTROLLER: "0xaC8A28b60832E6E22bC19bD9Ee273C008576Bde4",
-        ROOT_GATEWAY_DISPATCHER: "0xF470Dd693ED557b33f8775476776532D99Fb60d9",
-        DOTNS_RESOLVER: "0x0cCdfea1a5E62DE116BF6cA79D397798d49e351E",
-        DOTNS_CONTENT_RESOLVER: "0x2c9FF5D9136DBE5814C7B4FDbeDC15273a776663",
-        DOTNS_REVERSE_RESOLVER: "0x025D5c4b10bD9723DeA2F4518aeD5B761DE08CDc",
-        DOTNS_POP_RESOLVER: "0xB992e74cBeaf1Fd71310f85D1944d3A0c15C4c73",
-        DOTNS_NAME_ESCROW: "0x6F7068c04487a90BFB42b128B84231c252b3017a",
-        POP_RULES: "0x2002C1c15b88632Ad01c7770f6EbE1Ca05c8472E",
-        STORE_FACTORY: "0x0DE5De70d61cc6b44B45d6595afDe8dB9b55bc31",
-        LABEL_STORE_BEACON: "0xD033F7Ada687E8BC776928AB239505F9f0479Ce7",
-        USER_STORE_BEACON: "0x7eD9b7D137Fa535965048F93b3B0248fEd2fcd32",
-        PUBLISHER: "0x1307fc02d308f879a16b1ae3a49b4927aed53649"
+        DOTNS_PROTOCOL_REGISTRY: "0x8F28419f4E32Bb0aA02e156A0543Ff253f126D7D",
+        DOTNS_REGISTRAR: "0xf7Ad3F44F316C73E4a2b46b1ed48d376bCc9E639",
+        DOTNS_REGISTRAR_CONTROLLER: "0x674b705268DAE369F0a7BE9cbaCDb928b8BA38C2",
+        DOTNS_REGISTRY: "0xa1b2b939E82b2ecE55Bd8a0E283818BfC1CA6CDc",
+        DOTNS_POP_CONTROLLER: "0x1c858C31497a7715C0D56A11208feB6b74FaB2aB",
+        ROOT_GATEWAY_DISPATCHER: "0xd3F059FA65dA566B294b5d755a06054d4bE7ce7C",
+        DOTNS_RESOLVER: "0xA8988eA083174ea94Ed1D686f0F073a10f65598D",
+        DOTNS_CONTENT_RESOLVER: "0x8A26480b0B5Df3d4D9b95adc24a5Ecb33A5b8F64",
+        DOTNS_REVERSE_RESOLVER: "0x259B9D8199c29d2EF132264ad05f8F74F3115A2E",
+        DOTNS_POP_RESOLVER: "0xC9D511Eb80fD8B745DC5Be59aCF5d700271bC01e",
+        DOTNS_NAME_ESCROW: "0x2Cb9899d91Ee575E8917958723F5E941b1BcC6A1",
+        POP_RULES: "0x4909bFb3f4Fd86244abD6430fDfA0Ce5C91aD0c4",
+        STORE_FACTORY: "0x692047C1477a017F287488E1c85F96Ca28C23fD8",
+        LABEL_STORE_BEACON: "0x86ff9CE56C86bC3DfcaA7E316FB0Dd816e9fA2df",
+        USER_STORE_BEACON: "0x6a7a938f72D39f949ee484a78c4C500514E2cb69",
+        PUBLISHER: "0xa616254fd98724c7a3d295c98ca393a486096b68"
       }
     },
     {

package/dist/{chunk-EIP3OX6G.js → chunk-IAZPLMVV.js}

@@ -20,10 +20,10 @@ import {
 } from "./chunk-S7EM5VMW.js";
 import {
   setDeployContext
-} from "./chunk-B6MBXUCT.js";
+} from "./chunk-UZHRNGAC.js";
 import {
   probeChunks
-} from "./chunk-DCZYQCEG.js";
+} from "./chunk-MKB5W6TK.js";
 import {
   packSection
 } from "./chunk-C2TS5MER.js";
@@ -35,7 +35,7 @@ import {
   parseDomainName,
   popStatusName,
   verifyNonceAdvanced
-} from "./chunk-5OEGCTMJ.js";
+} from "./chunk-O232DOVQ.js";
 import {
   derivePoolAccounts,
   detectTestnet,
@@ -43,7 +43,7 @@ import {
   fetchPoolAuthorizations,
   selectAccount,
   topUpBy
-} from "./chunk-GSATPVTP.js";
+} from "./chunk-ZUOLBIZS.js";
 import {
   VERSION,
   captureWarning,
@@ -57,13 +57,13 @@ import {
   truncateAddress,
   withDeploySpan,
   withSpan
-} from "./chunk-VS36INHV.js";
+} from "./chunk-LM64HBVK.js";
 import {
   DEFAULT_ENV_ID,
   getPopSelfServeConfig,
   loadEnvironments,
   resolveEndpoints
-} from "./chunk-HZKRLQLG.js";
+} from "./chunk-GL2HHK4G.js";
 import {
   NonRetryableError
 } from "./chunk-ZOC4GITL.js";
@@ -281,6 +281,53 @@ async function getDirectProvider(mnemonic, derivationPath = "") {
   setDeployAttribute("deploy.signer.address", truncateAddress(ss58));
   return { client, unsafeApi, signer, ss58 };
 }
+async function getSignerProvider(signer, ss58) {
+  const primary = BULLETIN_ENDPOINTS[0];
+  console.log(`   Connecting to Bulletin: ${primary}`);
+  const client = createPolkadotClient(getWsProvider(
+    BULLETIN_ENDPOINTS,
+    { heartbeatTimeout: WS_HEARTBEAT_TIMEOUT_MS, onStatusChanged: makeBulletinStatusHandler(primary) }
+  ));
+  const unsafeApi = client.getUnsafeApi();
+  console.log(`   Using external signer: ${ss58}`);
+  let [auth, currentBlock] = await Promise.all([
+    unsafeApi.query.TransactionStorage.Authorizations.getValue(Enum("Account", ss58)),
+    client.getFinalizedBlock()
+  ]);
+  let now = currentBlock.number;
+  if (!auth || Number(auth.expiration ?? 0) <= now) {
+    try {
+      await ensureAuthorized(unsafeApi, ss58, "external signer");
+      [auth, currentBlock] = await Promise.all([
+        unsafeApi.query.TransactionStorage.Authorizations.getValue(Enum("Account", ss58)),
+        client.getFinalizedBlock()
+      ]);
+      now = currentBlock.number;
+    } catch (e) {
+      client.destroy();
+      throw new NonRetryableError(`Account ${ss58} is not authorized for Bulletin storage and auto-authorization failed: ${e.message}`);
+    }
+  }
+  console.log(`   Authorization: expires at block ${Number(auth?.expiration ?? 0)} (current: ${now})`);
+  setDeployAttribute("deploy.signer.mode", "external");
+  setDeployAttribute("deploy.signer.address", truncateAddress(ss58));
+  return { client, unsafeApi, signer, ss58 };
+}
+function __selectStorageProviderModeForTest(options) {
+  if (options.signer && options.signerAddress) return "signer";
+  if (options.mnemonic) return "direct";
+  return "pool";
+}
+function selectStorageReconnect(options) {
+  switch (__selectStorageProviderModeForTest(options)) {
+    case "signer":
+      return () => getSignerProvider(options.signer, options.signerAddress);
+    case "direct":
+      return () => getDirectProvider(options.mnemonic, options.derivationPath);
+    case "pool":
+      return () => getProvider();
+  }
+}
 function watchTransaction(tx, signer, txOpts, onSuccess, { label = "transaction", rpc, senderSS58, expectedNonce, timeoutMs, fetchNonce: fetchNonceOverride } = {}) {
   const timeout = timeoutMs ?? TX_TIMEOUT_MS;
   const _fetchNonce = fetchNonceOverride ?? fetchNonce;
@@ -1531,6 +1578,9 @@ async function unpublish(domainName, options = {}) {
   }
 }
 async function deploy(content, domainName = null, options = {}) {
+  if (options.signer && options.signerAddress && options.mnemonic) {
+    throw new NonRetryableError("Pass either a mnemonic or an external signer, not both \u2014 they identify the signing account and only one can win.");
+  }
   const envId = options.env ?? DEFAULT_ENV_ID;
   let envBulletin = [DEFAULT_BULLETIN_RPC];
   let envAssetHub;
@@ -1600,7 +1650,7 @@ async function deploy(content, domainName = null, options = {}) {
     if (process.env.CI) console.log(`   Runner: ${resolveRunner()} (${resolveRunnerType()})`);
     if (options.password) console.log(`   Encrypted: yes`);
     let provider;
-    const reconnect = options.mnemonic ? () => getDirectProvider(options.mnemonic, options.derivationPath) : () => getProvider();
+    const reconnect = selectStorageReconnect(options);
     let dotnsPreflight = null;
     let previousContenthashCid = null;
     try {
@@ -2335,6 +2385,7 @@ export {
   ENCRYPT_KEY_LEN,
   ENCRYPT_PBKDF2_ITERATIONS,
   encryptContent,
+  __selectStorageProviderModeForTest,
   storeFile,
   __assignDenseNoncesForTest,
   storeChunkedContent,

package/dist/{chunk-5VZQ2KSU.js → chunk-JCOZV25R.js}

@@ -1,14 +1,15 @@
 import {
-  PAID_PROOF_TAG,
+  buildAliasProofMessage,
+  getProofValidAtSec
+} from "./chunk-SLE4P6MO.js";
+import {
   PEOPLE_MEMBER_IDENTIFIER_HEX,
   PGAS_ASSET_ID,
   PGAS_ASSET_LOCATION,
   PROOF_BYTES
-} from "./chunk-T7EEVWNU.js";
+} from "./chunk-SI2ZUOYD.js";
 import {
-  blake2_256,
   bytesToHex,
-  concatBytes,
   encodeMembers,
   hexToBytes
 } from "./chunk-ZYVGHDMU.js";
@@ -47,11 +48,11 @@ var bindPaidAliasToAccount = async ({
       kind: "ClientError"
     });
   }
-  const fee = await ah.query.AliasAccounts.PaidAliasFee.getValue({ at: "best" });
+  const fee = await ah.query.AliasAccounts.AliasFee.getValue({ at: "best" });
   if (fee === void 0) {
     throw new PaidAliasBindingError(
-      "AliasAccounts.PaidAliasFee is unset \u2014 needs sudo `set_paid_alias_fee`",
-      { kind: "PaidAliasFeeUnset" }
+      "AliasAccounts.AliasFee is unset \u2014 needs sudo `set_alias_fee`",
+      { kind: "AliasFeeUnset" }
     );
   }
   const pgas = await ah.query.Assets.Account.getValue(
@@ -112,18 +113,19 @@ var bindPaidAliasToAccount = async ({
   }
   const latest = ringRoots[ringRoots.length - 1];
   const revision = latest.revision;
+  const proofValidAt = await getProofValidAtSec(ah);
   const ss58Info = getSs58AddressInfo(account);
   if (!ss58Info.isValid) {
     throw new PaidAliasBindingError(`invalid SS58: ${account}`, {
       kind: "ClientError"
     });
   }
-  const paidMsg = blake2_256(concatBytes(PAID_PROOF_TAG, ss58Info.publicKey));
+  const aliasMsg = buildAliasProofMessage(ss58Info.publicKey, proofValidAt);
   const { proof, alias } = await buildRingProof({
     ringExponent,
     members: membersBytes,
     context: contextBytes,
-    msg: paidMsg
+    msg: aliasMsg
   });
   if (proof.length !== PROOF_BYTES) {
     throw new PaidAliasBindingError(
@@ -131,12 +133,13 @@ var bindPaidAliasToAccount = async ({
       { kind: "ClientError" }
     );
   }
-  const tx = ah.tx.AliasAccounts.set_paid_alias_account({
+  const tx = ah.tx.AliasAccounts.set_alias_account({
     proof: bytesToHex(proof),
     collection: collectionId,
     ring_index: ringIndex,
     ring_revision: revision,
-    context: bytesToHex(contextBytes)
+    context: bytesToHex(contextBytes),
+    proof_valid_at: proofValidAt
   });
   const submitOptions = {
     customSignedExtensions: {
@@ -169,7 +172,7 @@ var bindPaidAliasToAccount = async ({
           if (ev.ok === false) {
             fail(
               new PaidAliasBindingError(
-                "set_paid_alias_account dispatched but failed in-block",
+                "set_alias_account dispatched but failed in-block",
                 {
                   kind: narrowDispatchError(ev.dispatchError),
                   dispatchError: ev.dispatchError
@@ -185,7 +188,7 @@ var bindPaidAliasToAccount = async ({
           if (ev.ok === false) {
             fail(
               new PaidAliasBindingError(
-                "set_paid_alias_account failed at finalization",
+                "set_alias_account failed at finalization",
                 {
                   kind: narrowDispatchError(ev.dispatchError),
                   dispatchError: ev.dispatchError
@@ -217,8 +220,8 @@ var narrowDispatchError = (dispatchError) => {
       if (v.type === "AliasAccounts" && v.value?.type === "BadProof") {
         return "BadProof";
       }
-      if (v.type === "AliasAccounts" && v.value?.type === "PaidAliasFeeUnset") {
-        return "PaidAliasFeeUnset";
+      if (v.type === "AliasAccounts" && v.value?.type === "AliasFeeUnset") {
+        return "AliasFeeUnset";
       }
     }
   }

package/dist/{chunk-IDYGYIMH.js → chunk-LHLCPDGL.js}

@@ -1,6 +1,6 @@
 import {
   BANDERSNATCH_SIGNATURE_BYTES
-} from "./chunk-T7EEVWNU.js";
+} from "./chunk-SI2ZUOYD.js";
 import {
   buildImplicationMessage,
   buildV5GeneralExtrinsic,

package/dist/{chunk-VS36INHV.js → chunk-LM64HBVK.js}

@@ -1,7 +1,7 @@
 import {
   package_default,
   writeRunState
-} from "./chunk-RDTUUXZM.js";
+} from "./chunk-M45PUARJ.js";
 
 // src/memory-report.ts
 import * as fs2 from "fs";
@@ -550,6 +550,9 @@ function setDeploySentryTag(key, value) {
   if (!Sentry) return;
   Sentry.setTag(key, value);
 }
+function markCodePath(id) {
+  setDeployAttribute(`code.path.${id}`, "true");
+}
 function captureWarning(message, context) {
   if (!Sentry) return;
   try {
@@ -726,6 +729,7 @@ export {
   __setSentryForTest,
   getCurrentSentryTraceId,
   setDeploySentryTag,
+  markCodePath,
   captureWarning,
   flush
 };

package/dist/{chunk-RDTUUXZM.js → chunk-M45PUARJ.js}

@@ -6,7 +6,7 @@ import * as path from "path";
 // package.json
 var package_default = {
   name: "bulletin-deploy",
-  version: "0.7.28",
+  version: "0.7.30-rc.0",
   private: false,
   repository: {
     type: "git",
@@ -45,7 +45,7 @@ var package_default = {
     "tools/release-retry-wrapper.mjs"
   ],
   scripts: {
-    build: "tsup src/index.ts src/deploy.ts src/dotns.ts src/pool.ts src/telemetry.ts src/memory-report.ts src/merkle.ts src/gh-pages-mirror.ts src/version-check.ts src/bug-report.ts src/run-state.ts src/environments.ts src/errors.ts src/manifest.ts src/chunk-probe.ts src/manifest-embed.ts src/manifest-fetch.ts src/manifest-roundtrip.ts src/incremental-stats.ts src/chunker.ts src/personhood/encoding.ts src/personhood/hashing.ts src/personhood/constants.ts src/personhood/member-key.ts src/personhood/people-client.ts src/personhood/reprove.ts src/personhood/bind-personal-id.ts src/personhood/claim-pgas.ts src/personhood/bind-paid-alias.ts src/personhood/bootstrap.ts src/manifest/types.ts src/manifest/schema.ts src/manifest/byte-budget.ts src/manifest/config-load.ts src/manifest/publish.ts --format esm --dts --clean --target node22",
+    build: "tsup src/index.ts src/deploy.ts src/dotns.ts src/pool.ts src/telemetry.ts src/memory-report.ts src/merkle.ts src/gh-pages-mirror.ts src/version-check.ts src/bug-report.ts src/run-state.ts src/environments.ts src/errors.ts src/manifest.ts src/chunk-probe.ts src/manifest-embed.ts src/manifest-fetch.ts src/manifest-roundtrip.ts src/incremental-stats.ts src/chunker.ts src/personhood/encoding.ts src/personhood/hashing.ts src/personhood/constants.ts src/personhood/member-key.ts src/personhood/people-client.ts src/personhood/proof-validity.ts src/personhood/reprove.ts src/personhood/bind-personal-id.ts src/personhood/claim-pgas.ts src/personhood/bind-paid-alias.ts src/personhood/bootstrap.ts src/personhood/chain-prereqs.ts src/manifest/types.ts src/manifest/schema.ts src/manifest/byte-budget.ts src/manifest/config-load.ts src/manifest/publish.ts --format esm --dts --clean --target node22",
     "refresh-environments": "node scripts/refresh-environments.mjs",
     "check:watched-dependencies": "node tools/check-watched-dependencies.mjs",
     prepare: "npm run build",
@@ -72,7 +72,7 @@ var package_default = {
     jiti: "^2.4.2",
     multiformats: "^13.4.1",
     "polkadot-api": "^2.1.3",
-    verifiablejs: "^1.2.0",
+    verifiablejs: "1.3.0-beta.4",
     viem: "^2.30.5"
   },
   devDependencies: {

package/dist/{chunk-DCZYQCEG.js → chunk-MKB5W6TK.js}

@@ -1,6 +1,6 @@
 import {
   captureWarning
-} from "./chunk-VS36INHV.js";
+} from "./chunk-LM64HBVK.js";
 
 // src/chunk-probe.ts
 import { Twox128, Blake2128Concat, decAnyMetadata, unifyMetadata } from "@polkadot-api/substrate-bindings";