@novasamatech/host-papp 0.8.11 → 0.9.0

package/dist/sso/sessionManager/impl.js

@@ -4,7 +4,7 @@ import { emitHostPappDebugMessage } from '../../debugBus.js';
 import { createState } from '../../helpers/state.js';
 import { createSsoStatementProver } from '../ssoSessionProver.js';
 import { createUserSession } from './userSession.js';
-export function createSsoSessionManager({ ssoSessionRepository, userSecretRepository, allowanceRepository, statementStore, storage, }) {
+export function createSsoSessionManager({ ssoSessionRepository, userSecretRepository, allowanceRepository, identityRepository, statementStore, storage, }) {
     const localSessions = createState({});
     const sessionUnsubscribes = new Map();
     const releaseSession = (id) => {
@@ -22,7 +22,7 @@ export function createSsoSessionManager({ ssoSessionRepository, userSecretReposi
             toRemove.delete(userSession.id);
             if (userSession.id in activeSessions)
                 continue;
-            const session = createSession(userSession, statementStore, storage, userSecretRepository);
+            const session = createSession(userSession, statementStore, storage, userSecretRepository, allowanceRepository, identityRepository);
             toAdd.add(session);
             emitHostPappDebugMessage({
                 layer: 'session',
@@ -73,7 +73,7 @@ export function createSsoSessionManager({ ssoSessionRepository, userSecretReposi
             subscribe: (callback) => localSessions.subscribe(sessions => callback(Object.values(sessions))),
         },
         disconnect(userSession) {
-            const session = createSession(userSession, statementStore, storage, userSecretRepository);
+            const session = createSession(userSession, statementStore, storage, userSecretRepository, allowanceRepository, identityRepository);
             return session
                 .sendDisconnectMessage()
                 .andThen(() => disconnect(userSession))
@@ -88,7 +88,7 @@ export function createSsoSessionManager({ ssoSessionRepository, userSecretReposi
         },
     };
 }
-function createSession(userSession, statementStore, storage, userSecretRepository) {
+function createSession(userSession, statementStore, storage, userSecretRepository, allowanceRepository, identityRepository) {
     const encryption = createEncryption(userSession.remoteAccount.publicKey);
     const prover = createSsoStatementProver(userSession, userSecretRepository);
     return createUserSession({
@@ -97,5 +97,7 @@ function createSession(userSession, statementStore, storage, userSecretRepositor
         encryption,
         storage,
         prover,
+        allowanceRepository,
+        identityRepository,
     });
 }

package/dist/sso/sessionManager/scale/createTransaction.d.ts

@@ -4,8 +4,14 @@ export declare const CreateTransactionRequestCodec: import("scale-ts").Codec<{
     payload: {
         tag: "v1";
         value: {
-            signer: [string, number];
-            genesisHash: Uint8Array<ArrayBufferLike>;
+            signer: [string, {
+                tag: "Index";
+                value: number;
+            } | {
+                tag: "Raw";
+                value: Uint8Array<ArrayBufferLike>;
+            }];
+            genesisHash: `0x${string}`;
             callData: Uint8Array<ArrayBufferLike>;
             extensions: {
                 id: string;
@@ -22,7 +28,7 @@ export declare const CreateTransactionLegacyRequestCodec: import("scale-ts").Cod
         tag: "v1";
         value: {
             signer: Uint8Array<ArrayBufferLike>;
-            genesisHash: Uint8Array<ArrayBufferLike>;
+            genesisHash: `0x${string}`;
             callData: Uint8Array<ArrayBufferLike>;
             extensions: {
                 id: string;

package/dist/sso/sessionManager/scale/createTransaction.js

@@ -1,6 +1,6 @@
 import { LegacyTransaction, ProductAccountTransaction } from '@novasamatech/host-api';
-import { Enum } from '@novasamatech/scale';
-import { Bytes, Result, Struct, str } from 'scale-ts';
+import { Bytes, Enum } from '@novasamatech/scale';
+import { Result, Struct, str } from 'scale-ts';
 export const CreateTransactionRequestCodec = Struct({
     payload: Enum({
         v1: ProductAccountTransaction,

package/dist/sso/sessionManager/scale/productSubtree.d.ts

@@ -0,0 +1,12 @@
+import type { CodecType } from 'scale-ts';
+export type ProductSubtreeRequest = CodecType<typeof ProductSubtreeRequestCodec>;
+export declare const ProductSubtreeRequestCodec: import("scale-ts").Codec<{
+    productId: string;
+}>;
+export type ProductSubtreeResponse = CodecType<typeof ProductSubtreeResponseCodec>;
+export declare const ProductSubtreeResponseCodec: import("scale-ts").Codec<{
+    respondingTo: string;
+    payload: import("scale-ts").ResultPayload<{
+        productPublicKey: Uint8Array<ArrayBufferLike>;
+    }, string>;
+}>;

package/dist/sso/sessionManager/scale/productSubtree.js

@@ -0,0 +1,22 @@
+import { DotNsIdentifier } from '@novasamatech/host-api';
+import { Bytes } from '@novasamatech/scale';
+import { Result, Struct, str } from 'scale-ts';
+// RFC-0022 made `//product//{productId}` a hard junction, so the root public
+// key alone no longer determines product account public keys. This request
+// closes the gap: the Account Holder returns the product-subtree public key,
+// from which the Host soft-derives account public keys locally.
+//
+// Consent-free — the response carries no secret material. Fetch once per
+// product and cache; only `AutoSigning` (secret material) requires consent.
+/** 32-byte sr25519 public key of `//product//{productId}`. */
+const Sr25519PublicKey = Bytes(32);
+export const ProductSubtreeRequestCodec = Struct({
+    productId: DotNsIdentifier,
+});
+export const ProductSubtreeResponseCodec = Struct({
+    // referencing to RemoteMessage.messageId
+    respondingTo: str,
+    payload: Result(Struct({
+        productPublicKey: Sr25519PublicKey,
+    }), str),
+});

package/dist/sso/sessionManager/scale/remoteMessage.d.ts

@@ -10,9 +10,33 @@ export declare const RemoteMessageCodec: import("scale-ts").Codec<{
         } | {
             tag: "SignRequest";
             value: {
+                tag: "Raw";
+                value: {
+                    productAccountId: [string, {
+                        tag: "Index";
+                        value: number;
+                    } | {
+                        tag: "Raw";
+                        value: Uint8Array<ArrayBufferLike>;
+                    }];
+                    data: {
+                        tag: "Bytes";
+                        value: Uint8Array<ArrayBufferLike>;
+                    } | {
+                        tag: "Payload";
+                        value: string;
+                    };
+                };
+            } | {
                 tag: "Payload";
                 value: {
-                    productAccountId: [string, number];
+                    productAccountId: [string, {
+                        tag: "Index";
+                        value: number;
+                    } | {
+                        tag: "Raw";
+                        value: Uint8Array<ArrayBufferLike>;
+                    }];
                     blockHash: `0x${string}`;
                     blockNumber: `0x${string}`;
                     era: `0x${string}`;
@@ -29,18 +53,6 @@ export declare const RemoteMessageCodec: import("scale-ts").Codec<{
                     mode: number | undefined;
                     withSignedTransaction: boolean | void;
                 };
-            } | {
-                tag: "Raw";
-                value: {
-                    productAccountId: [string, number];
-                    data: {
-                        tag: "Bytes";
-                        value: Uint8Array<ArrayBufferLike>;
-                    } | {
-                        tag: "Payload";
-                        value: string;
-                    };
-                };
             };
         } | {
             tag: "SignResponse";
@@ -55,7 +67,13 @@ export declare const RemoteMessageCodec: import("scale-ts").Codec<{
             tag: "RingVrfAliasRequest";
             value: {
                 callingProductId: string;
-                context: [string, `0x${string}`];
+                context: [string, {
+                    tag: "Index";
+                    value: number;
+                } | {
+                    tag: "Raw";
+                    value: Uint8Array<ArrayBufferLike>;
+                }];
                 ring: {
                     chainId: `0x${string}`;
                     junctions: ({
@@ -74,9 +92,9 @@ export declare const RemoteMessageCodec: import("scale-ts").Codec<{
                 payload: import("scale-ts").ResultPayload<{
                     context: Uint8Array<ArrayBufferLike>;
                     alias: Uint8Array<ArrayBufferLike>;
-                }, import("@novasamatech/scale").CodecError<undefined, "RingVrfError::Rejected"> | import("@novasamatech/scale").CodecError<{
+                }, import("@novasamatech/scale").CodecError<undefined, "GetAliasErr::Rejected"> | import("@novasamatech/scale").CodecError<{
                     reason: string;
-                }, "RingVrfError::Unknown"> | import("@novasamatech/scale").CodecError<undefined, "RingVrfError::RingNotFound"> | import("@novasamatech/scale").CodecError<undefined, "RingVrfError::NotMember">>;
+                }, "GetAliasErr::Unknown"> | import("@novasamatech/scale").CodecError<undefined, "GetAliasErr::RingNotFound"> | import("@novasamatech/scale").CodecError<undefined, "GetAliasErr::NotMember">>;
             };
         } | {
             tag: "ResourceAllocationRequest";
@@ -87,7 +105,13 @@ export declare const RemoteMessageCodec: import("scale-ts").Codec<{
                     value: undefined;
                 } | {
                     tag: "SmartContractAllowance";
-                    value: number;
+                    value: {
+                        tag: "Index";
+                        value: number;
+                    } | {
+                        tag: "Raw";
+                        value: Uint8Array<ArrayBufferLike>;
+                    };
                 } | {
                     tag: "AutoSigning";
                     value: undefined;
@@ -117,7 +141,6 @@ export declare const RemoteMessageCodec: import("scale-ts").Codec<{
                     } | {
                         tag: "AutoSigning";
                         value: {
-                            productDerivationSecret: string;
                             productRootPrivateKey: Uint8Array<ArrayBufferLike>;
                         };
                     } | {
@@ -137,8 +160,14 @@ export declare const RemoteMessageCodec: import("scale-ts").Codec<{
                 payload: {
                     tag: "v1";
                     value: {
-                        signer: [string, number];
-                        genesisHash: Uint8Array<ArrayBufferLike>;
+                        signer: [string, {
+                            tag: "Index";
+                            value: number;
+                        } | {
+                            tag: "Raw";
+                            value: Uint8Array<ArrayBufferLike>;
+                        }];
+                        genesisHash: `0x${string}`;
                         callData: Uint8Array<ArrayBufferLike>;
                         extensions: {
                             id: string;
@@ -162,7 +191,7 @@ export declare const RemoteMessageCodec: import("scale-ts").Codec<{
                     tag: "v1";
                     value: {
                         signer: Uint8Array<ArrayBufferLike>;
-                        genesisHash: Uint8Array<ArrayBufferLike>;
+                        genesisHash: `0x${string}`;
                         callData: Uint8Array<ArrayBufferLike>;
                         extensions: {
                             id: string;
@@ -195,7 +224,13 @@ export declare const RemoteMessageCodec: import("scale-ts").Codec<{
             tag: "RingVrfProofRequest";
             value: {
                 callingProductId: string;
-                context: [string, `0x${string}`];
+                context: [string, {
+                    tag: "Index";
+                    value: number;
+                } | {
+                    tag: "Raw";
+                    value: Uint8Array<ArrayBufferLike>;
+                }];
                 ring: {
                     chainId: `0x${string}`;
                     junctions: ({
@@ -220,9 +255,50 @@ export declare const RemoteMessageCodec: import("scale-ts").Codec<{
                     };
                     ringIndex: number;
                     ringRevision: number;
-                }, import("@novasamatech/scale").CodecError<undefined, "RingVrfError::Rejected"> | import("@novasamatech/scale").CodecError<{
+                }, import("@novasamatech/scale").CodecError<undefined, "CreateProofErr::Rejected"> | import("@novasamatech/scale").CodecError<{
                     reason: string;
-                }, "RingVrfError::Unknown"> | import("@novasamatech/scale").CodecError<undefined, "RingVrfError::RingNotFound"> | import("@novasamatech/scale").CodecError<undefined, "RingVrfError::NotMember">>;
+                }, "CreateProofErr::Unknown"> | import("@novasamatech/scale").CodecError<undefined, "CreateProofErr::RingNotFound"> | import("@novasamatech/scale").CodecError<undefined, "CreateProofErr::NotMember">>;
+            };
+        } | {
+            tag: "SignVrfRequest";
+            value: {
+                productAccountId: [string, {
+                    tag: "Index";
+                    value: number;
+                } | {
+                    tag: "Raw";
+                    value: Uint8Array<ArrayBufferLike>;
+                }];
+                productId: string;
+                transcriptLabel: Uint8Array<ArrayBufferLike>;
+                items: {
+                    label: Uint8Array<ArrayBufferLike>;
+                    value: Uint8Array<ArrayBufferLike>;
+                }[];
+            };
+        } | {
+            tag: "SignVrfResponse";
+            value: {
+                respondingTo: string;
+                payload: import("scale-ts").ResultPayload<{
+                    preOutput: Uint8Array<ArrayBufferLike>;
+                    proof: Uint8Array<ArrayBufferLike>;
+                }, import("@novasamatech/scale").CodecError<undefined, "SignVrfErr::Rejected"> | import("@novasamatech/scale").CodecError<{
+                    reason: string;
+                }, "SignVrfErr::Unknown">>;
+            };
+        } | {
+            tag: "ProductSubtreeRequest";
+            value: {
+                productId: string;
+            };
+        } | {
+            tag: "ProductSubtreeResponse";
+            value: {
+                respondingTo: string;
+                payload: import("scale-ts").ResultPayload<{
+                    productPublicKey: Uint8Array<ArrayBufferLike>;
+                }, string>;
             };
         };
     };

package/dist/sso/sessionManager/scale/remoteMessage.js

@@ -1,11 +1,16 @@
-import { Enum, Struct, _void, str } from 'scale-ts';
+import { Enum } from '@novasamatech/scale';
+import { Struct, _void, str } from 'scale-ts';
 import { CreateTransactionLegacyRequestCodec, CreateTransactionRequestCodec, CreateTransactionResponseCodec, } from './createTransaction.js';
+import { ProductSubtreeRequestCodec, ProductSubtreeResponseCodec } from './productSubtree.js';
 import { ResourceAllocationRequestCodec, ResourceAllocationResponseCodec } from './resourceAllocation.js';
 import { RingVrfAliasRequestCodec, RingVrfAliasResponseCodec, RingVrfProofRequestCodec, RingVrfProofResponseCodec, } from './ringVrf.js';
+import { SignVrfRequestCodec, SignVrfResponseCodec } from './signVrf.js';
 import { SignRawLegacyRequestCodec, SignRawLegacyResponseCodec, SigningRequestCodec, SigningResponseCodec, } from './signing.js';
 export const RemoteMessageCodec = Struct({
     messageId: str,
     data: Enum({
+        // Declaration order is the SCALE wire order and must stay in lockstep with the
+        // truapi `host_logic::sso::messages::v1::RemoteMessage` enum. Append only.
         v1: Enum({
             Disconnected: _void,
             SignRequest: SigningRequestCodec,
@@ -21,6 +26,11 @@ export const RemoteMessageCodec = Struct({
             SignRawLegacyResponse: SignRawLegacyResponseCodec,
             RingVrfProofRequest: RingVrfProofRequestCodec,
             RingVrfProofResponse: RingVrfProofResponseCodec,
+            SignVrfRequest: SignVrfRequestCodec,
+            SignVrfResponse: SignVrfResponseCodec,
+            // RFC-0022 additions — appended so existing variant indexes stay stable.
+            ProductSubtreeRequest: ProductSubtreeRequestCodec,
+            ProductSubtreeResponse: ProductSubtreeResponseCodec,
         }),
     }),
 });

package/dist/sso/sessionManager/scale/resourceAllocation.d.ts

@@ -5,7 +5,13 @@ export declare const ApAllocatableResourceCodec: import("scale-ts").Codec<{
     value: undefined;
 } | {
     tag: "SmartContractAllowance";
-    value: number;
+    value: {
+        tag: "Index";
+        value: number;
+    } | {
+        tag: "Raw";
+        value: Uint8Array<ArrayBufferLike>;
+    };
 } | {
     tag: "AutoSigning";
     value: undefined;
@@ -25,7 +31,6 @@ export declare const ApAllocatedResourceCodec: import("scale-ts").Codec<{
 } | {
     tag: "AutoSigning";
     value: {
-        productDerivationSecret: string;
         productRootPrivateKey: Uint8Array<ArrayBufferLike>;
     };
 } | {
@@ -51,7 +56,6 @@ export declare const ApAllocationOutcomeCodec: import("scale-ts").Codec<{
     } | {
         tag: "AutoSigning";
         value: {
-            productDerivationSecret: string;
             productRootPrivateKey: Uint8Array<ArrayBufferLike>;
         };
     } | {
@@ -73,7 +77,13 @@ export declare const ResourceAllocationRequestCodec: import("scale-ts").Codec<{
         value: undefined;
     } | {
         tag: "SmartContractAllowance";
-        value: number;
+        value: {
+            tag: "Index";
+            value: number;
+        } | {
+            tag: "Raw";
+            value: Uint8Array<ArrayBufferLike>;
+        };
     } | {
         tag: "AutoSigning";
         value: undefined;
@@ -102,7 +112,6 @@ export declare const ResourceAllocationResponseCodec: import("scale-ts").Codec<{
         } | {
             tag: "AutoSigning";
             value: {
-                productDerivationSecret: string;
                 productRootPrivateKey: Uint8Array<ArrayBufferLike>;
             };
         } | {

package/dist/sso/sessionManager/scale/resourceAllocation.js

@@ -1,9 +1,10 @@
 import { DerivationIndex, DotNsIdentifier } from '@novasamatech/host-api';
-import { Status } from '@novasamatech/scale';
-import { Bytes, Enum, Result, Struct, Vector, _void, str } from 'scale-ts';
+import { Bytes, Status } from '@novasamatech/scale';
+import { Enum, Result, Struct, Vector, _void, str } from 'scale-ts';
 export const ApAllocatableResourceCodec = Enum({
     StatementStoreAllowance: _void,
     BulletInAllowance: _void,
+    // Account the allowance is granted for, addressed by the RFC-0022 selector.
     SmartContractAllowance: DerivationIndex,
     AutoSigning: _void,
 });
@@ -15,8 +16,12 @@ export const ApAllocatedResourceCodec = Enum({
         slotAccountKey: Bytes(),
     }),
     SmartContractAllowance: _void,
+    // RFC-0022: the payload collapsed to the product-subtree secret key alone.
+    // `//product//{productId}` is a hard junction, so this key exposes exactly
+    // that product's subtree — the secret path component is gone.
     AutoSigning: Struct({
-        productDerivationSecret: str,
+        // `Sr25519PrivateKey ++ Sr25519Nonce` (64 bytes): the full expanded secret
+        // needed to sign and soft-derive `/{index}` below the product root.
         productRootPrivateKey: Bytes(),
     }),
 });

package/dist/sso/sessionManager/scale/ringVrf.d.ts

@@ -1,31 +1,14 @@
 import type { CodecType } from 'scale-ts';
-export declare const RingVrfError: [import("scale-ts").Encoder<import("@novasamatech/scale").CodecError<undefined, "RingVrfError::Rejected"> | import("@novasamatech/scale").CodecError<{
-    reason: string;
-}, "RingVrfError::Unknown"> | import("@novasamatech/scale").CodecError<undefined, "RingVrfError::RingNotFound"> | import("@novasamatech/scale").CodecError<undefined, "RingVrfError::NotMember">>, import("scale-ts").Decoder<import("@novasamatech/scale").CodecError<undefined, "RingVrfError::Rejected"> | import("@novasamatech/scale").CodecError<{
-    reason: string;
-}, "RingVrfError::Unknown"> | import("@novasamatech/scale").CodecError<undefined, "RingVrfError::RingNotFound"> | import("@novasamatech/scale").CodecError<undefined, "RingVrfError::NotMember">>] & {
-    enc: import("scale-ts").Encoder<import("@novasamatech/scale").CodecError<undefined, "RingVrfError::Rejected"> | import("@novasamatech/scale").CodecError<{
-        reason: string;
-    }, "RingVrfError::Unknown"> | import("@novasamatech/scale").CodecError<undefined, "RingVrfError::RingNotFound"> | import("@novasamatech/scale").CodecError<undefined, "RingVrfError::NotMember">>;
-    dec: import("scale-ts").Decoder<import("@novasamatech/scale").CodecError<undefined, "RingVrfError::Rejected"> | import("@novasamatech/scale").CodecError<{
-        reason: string;
-    }, "RingVrfError::Unknown"> | import("@novasamatech/scale").CodecError<undefined, "RingVrfError::RingNotFound"> | import("@novasamatech/scale").CodecError<undefined, "RingVrfError::NotMember">>;
-} & {
-    readonly RingNotFound: import("@novasamatech/scale").ErrCodec<undefined, "RingVrfError::RingNotFound">;
-    readonly NotMember: import("@novasamatech/scale").ErrCodec<undefined, "RingVrfError::NotMember">;
-    readonly Rejected: import("@novasamatech/scale").ErrCodec<undefined, "RingVrfError::Rejected">;
-    readonly Unknown: import("@novasamatech/scale").ErrCodec<{
-        reason: string;
-    }, "RingVrfError::Unknown">;
-} & {
-    [Symbol.hasInstance](v: unknown): v is import("@novasamatech/scale").CodecError<undefined, "RingVrfError::Rejected"> | import("@novasamatech/scale").CodecError<{
-        reason: string;
-    }, "RingVrfError::Unknown"> | import("@novasamatech/scale").CodecError<undefined, "RingVrfError::RingNotFound"> | import("@novasamatech/scale").CodecError<undefined, "RingVrfError::NotMember">;
-};
 export type RingVrfAliasRequest = CodecType<typeof RingVrfAliasRequestCodec>;
 export declare const RingVrfAliasRequestCodec: import("scale-ts").Codec<{
     callingProductId: string;
-    context: [string, `0x${string}`];
+    context: [string, {
+        tag: "Index";
+        value: number;
+    } | {
+        tag: "Raw";
+        value: Uint8Array<ArrayBufferLike>;
+    }];
     ring: {
         chainId: `0x${string}`;
         junctions: ({
@@ -43,14 +26,20 @@ export declare const RingVrfAliasResponseCodec: import("scale-ts").Codec<{
     payload: import("scale-ts").ResultPayload<{
         context: Uint8Array<ArrayBufferLike>;
         alias: Uint8Array<ArrayBufferLike>;
-    }, import("@novasamatech/scale").CodecError<undefined, "RingVrfError::Rejected"> | import("@novasamatech/scale").CodecError<{
+    }, import("@novasamatech/scale").CodecError<undefined, "GetAliasErr::Rejected"> | import("@novasamatech/scale").CodecError<{
         reason: string;
-    }, "RingVrfError::Unknown"> | import("@novasamatech/scale").CodecError<undefined, "RingVrfError::RingNotFound"> | import("@novasamatech/scale").CodecError<undefined, "RingVrfError::NotMember">>;
+    }, "GetAliasErr::Unknown"> | import("@novasamatech/scale").CodecError<undefined, "GetAliasErr::RingNotFound"> | import("@novasamatech/scale").CodecError<undefined, "GetAliasErr::NotMember">>;
 }>;
 export type RingVrfProofRequest = CodecType<typeof RingVrfProofRequestCodec>;
 export declare const RingVrfProofRequestCodec: import("scale-ts").Codec<{
     callingProductId: string;
-    context: [string, `0x${string}`];
+    context: [string, {
+        tag: "Index";
+        value: number;
+    } | {
+        tag: "Raw";
+        value: Uint8Array<ArrayBufferLike>;
+    }];
     ring: {
         chainId: `0x${string}`;
         junctions: ({
@@ -74,7 +63,7 @@ export declare const RingVrfProofResponseCodec: import("scale-ts").Codec<{
         };
         ringIndex: number;
         ringRevision: number;
-    }, import("@novasamatech/scale").CodecError<undefined, "RingVrfError::Rejected"> | import("@novasamatech/scale").CodecError<{
+    }, import("@novasamatech/scale").CodecError<undefined, "CreateProofErr::Rejected"> | import("@novasamatech/scale").CodecError<{
         reason: string;
-    }, "RingVrfError::Unknown"> | import("@novasamatech/scale").CodecError<undefined, "RingVrfError::RingNotFound"> | import("@novasamatech/scale").CodecError<undefined, "RingVrfError::NotMember">>;
+    }, "CreateProofErr::Unknown"> | import("@novasamatech/scale").CodecError<undefined, "CreateProofErr::RingNotFound"> | import("@novasamatech/scale").CodecError<undefined, "CreateProofErr::NotMember">>;
 }>;

package/dist/sso/sessionManager/scale/ringVrf.js

@@ -1,14 +1,6 @@
-import { ContextualAlias, DotNsIdentifier, ProductProofContext, RingLocation, RingVrfProof, } from '@novasamatech/host-api';
-import { ErrEnum } from '@novasamatech/scale';
-import { Bytes, Result, Struct, _void, str } from 'scale-ts';
-// Shared failure set for both alias and proof requests over the SSO channel;
-// mirrors the Account Holder's `RingVrfError` (RFC 0004).
-export const RingVrfError = ErrEnum('RingVrfError', {
-    RingNotFound: [_void, 'RingVrf: ring not found'],
-    NotMember: [_void, 'RingVrf: selected member key is not a member of the ring'],
-    Rejected: [_void, 'RingVrf: rejected'],
-    Unknown: [Struct({ reason: str }), 'RingVrf: unknown error'],
-});
+import { ContextualAlias, CreateProofErr, DotNsIdentifier, GetAliasErr, ProductProofContext, RingLocation, RingVrfProof, } from '@novasamatech/host-api';
+import { Bytes } from '@novasamatech/scale';
+import { Result, Struct, str } from 'scale-ts';
 export const RingVrfAliasRequestCodec = Struct({
     callingProductId: DotNsIdentifier,
     context: ProductProofContext,
@@ -16,7 +8,7 @@ export const RingVrfAliasRequestCodec = Struct({
 });
 export const RingVrfAliasResponseCodec = Struct({
     respondingTo: str,
-    payload: Result(ContextualAlias, RingVrfError),
+    payload: Result(ContextualAlias, GetAliasErr),
 });
 export const RingVrfProofRequestCodec = Struct({
     callingProductId: DotNsIdentifier,
@@ -26,5 +18,5 @@ export const RingVrfProofRequestCodec = Struct({
 });
 export const RingVrfProofResponseCodec = Struct({
     respondingTo: str,
-    payload: Result(RingVrfProof, RingVrfError),
+    payload: Result(RingVrfProof, CreateProofErr),
 });

package/dist/sso/sessionManager/scale/signVrf.d.ts

@@ -0,0 +1,62 @@
+import type { CodecType } from 'scale-ts';
+/**
+ * Host → Account Holder request for an sr25519 (schnorrkel) VRF signature over a
+ * caller-supplied Merlin transcript (RFC-0023, "Accounts Protocol companion").
+ *
+ * The Account Holder derives `productAccountId`, presents the signing confirmation,
+ * replays the transcript verbatim — `Transcript::new(transcriptLabel)` then one
+ * `append_message(label, value)` per item, in order — and signs it. It performs no
+ * interpretation of labels or values.
+ *
+ * This is the non-`AutoSigning` path; when `AutoSigning` covers the account the host
+ * signs locally and never sends this message.
+ */
+export type SignVrfRequest = CodecType<typeof SignVrfRequestCodec>;
+export declare const SignVrfRequestCodec: import("scale-ts").Codec<{
+    productAccountId: [string, {
+        tag: "Index";
+        value: number;
+    } | {
+        tag: "Raw";
+        value: Uint8Array<ArrayBufferLike>;
+    }];
+    productId: string;
+    transcriptLabel: Uint8Array<ArrayBufferLike>;
+    items: {
+        label: Uint8Array<ArrayBufferLike>;
+        value: Uint8Array<ArrayBufferLike>;
+    }[];
+}>;
+/** Failure returned by the Account Holder for a VRF signing request. */
+export type SignVrfErr = CodecType<typeof SignVrfErrCodec>;
+export declare const SignVrfErrCodec: [import("scale-ts").Encoder<import("@novasamatech/scale").CodecError<undefined, "SignVrfErr::Rejected"> | import("@novasamatech/scale").CodecError<{
+    reason: string;
+}, "SignVrfErr::Unknown">>, import("scale-ts").Decoder<import("@novasamatech/scale").CodecError<undefined, "SignVrfErr::Rejected"> | import("@novasamatech/scale").CodecError<{
+    reason: string;
+}, "SignVrfErr::Unknown">>] & {
+    enc: import("scale-ts").Encoder<import("@novasamatech/scale").CodecError<undefined, "SignVrfErr::Rejected"> | import("@novasamatech/scale").CodecError<{
+        reason: string;
+    }, "SignVrfErr::Unknown">>;
+    dec: import("scale-ts").Decoder<import("@novasamatech/scale").CodecError<undefined, "SignVrfErr::Rejected"> | import("@novasamatech/scale").CodecError<{
+        reason: string;
+    }, "SignVrfErr::Unknown">>;
+} & {
+    readonly Rejected: import("@novasamatech/scale").ErrCodec<undefined, "SignVrfErr::Rejected">;
+    readonly Unknown: import("@novasamatech/scale").ErrCodec<{
+        reason: string;
+    }, "SignVrfErr::Unknown">;
+} & {
+    [Symbol.hasInstance](v: unknown): v is import("@novasamatech/scale").CodecError<undefined, "SignVrfErr::Rejected"> | import("@novasamatech/scale").CodecError<{
+        reason: string;
+    }, "SignVrfErr::Unknown">;
+};
+export type SignVrfResponse = CodecType<typeof SignVrfResponseCodec>;
+export declare const SignVrfResponseCodec: import("scale-ts").Codec<{
+    respondingTo: string;
+    payload: import("scale-ts").ResultPayload<{
+        preOutput: Uint8Array<ArrayBufferLike>;
+        proof: Uint8Array<ArrayBufferLike>;
+    }, import("@novasamatech/scale").CodecError<undefined, "SignVrfErr::Rejected"> | import("@novasamatech/scale").CodecError<{
+        reason: string;
+    }, "SignVrfErr::Unknown">>;
+}>;

package/dist/sso/sessionManager/scale/signVrf.js

@@ -0,0 +1,18 @@
+import { ProductAccountId, VrfSignature, VrfTranscriptItem } from '@novasamatech/host-api';
+import { Bytes, ErrEnum } from '@novasamatech/scale';
+import { Result, Struct, Vector, _void, str } from 'scale-ts';
+export const SignVrfRequestCodec = Struct({
+    productAccountId: ProductAccountId,
+    productId: str,
+    transcriptLabel: Bytes(),
+    items: Vector(VrfTranscriptItem),
+});
+export const SignVrfErrCodec = ErrEnum('SignVrfErr', {
+    Rejected: [_void, 'Rejected'],
+    Unknown: [Struct({ reason: str }), ({ reason }) => reason],
+});
+export const SignVrfResponseCodec = Struct({
+    // referencing to RemoteMessage.messageId
+    respondingTo: str,
+    payload: Result(VrfSignature, SignVrfErrCodec),
+});