6. Review & deploy

You’ve declared the state you want onchain. bun push turns that declaration into transactions, planned and signed through Zodiac.

Push the constellation


bun push

This:

Runs bun pull-org first (via the prepush hook) so you push against fresh org state.
Walks your exported nodes and sends the spec to Zodiac.
Computes the diff against what’s currently onchain and plans the most efficient set of transactions.
Opens a browser tab where you review the diff and sign.

Only the values you export from constellation/index.ts are included. If a node doesn’t show up in the plan, check that it’s exported.

Review the plan

The browser shows exactly what will change: Safes deployed, modules enabled, roles and permissions written. Everyone with workspace access sees the same plan and the same audit trail, so the diff doubles as a review artifact.

When the plan matches your intent, sign the transactions with your wallet. Once they confirm, your constellation is live: the Safe is deployed, the Roles module is attached, and the operator role is scoped to exactly the permissions you declared.

The day-to-day loop

After the initial setup, the loop is short:

Edit the constellation — accounts, roles, permissions, allowances.
bun push to review the diff and sign.

Whenever you reference a new contract in zodiac.config.ts, run bun pull first so the allow kit knows about it.

Because the whole graph is code, you can version it in git, review changes in a PR, and run dry pushes in CI before anything reaches a signer.

Command reference

Command	What it does
`bun pull`	Refresh codegen — org data and contract ABIs. First run also authorizes the directory and writes `.env`.
`bun pull-org`	Just org data (users, accounts).
`bun pull-contracts`	Just contract ABIs and the `allow` kit — run after adding a contract to `zodiac.config.ts`.
`bun push`	Send the constellation to Zodiac and open the review URL.
`bun format`	Prettier across the repo.

Where to go next

Browse the SDK Reference for the building blocks behind the allow kit, allowances, and the constellation API.
Explore Example Setups for ready-made policies you can adapt.