@novasamatech/host-papp 0.8.11 → 0.9.0

package/dist/sso/sessionManager/scale/signing.d.ts

@@ -1,7 +1,13 @@
 import type { CodecType } from 'scale-ts';
 export type SigningPayloadRequest = CodecType<typeof SigningPayloadRequestCodec>;
 export declare const SigningPayloadRequestCodec: import("scale-ts").Codec<{
-    productAccountId: [string, number];
+    productAccountId: [string, {
+        tag: "Index";
+        value: number;
+    } | {
+        tag: "Raw";
+        value: Uint8Array<ArrayBufferLike>;
+    }];
     blockHash: `0x${string}`;
     blockNumber: `0x${string}`;
     era: `0x${string}`;
@@ -20,7 +26,13 @@ export declare const SigningPayloadRequestCodec: import("scale-ts").Codec<{
 }>;
 export type SigningRawRequest = CodecType<typeof SigningRawRequestCodec>;
 export declare const SigningRawRequestCodec: import("scale-ts").Codec<{
-    productAccountId: [string, number];
+    productAccountId: [string, {
+        tag: "Index";
+        value: number;
+    } | {
+        tag: "Raw";
+        value: Uint8Array<ArrayBufferLike>;
+    }];
     data: {
         tag: "Bytes";
         value: Uint8Array<ArrayBufferLike>;
@@ -47,9 +59,33 @@ export declare const SignRawLegacyResponseCodec: import("scale-ts").Codec<{
 }>;
 export type SigningRequest = CodecType<typeof SigningRequestCodec>;
 export declare const SigningRequestCodec: import("scale-ts").Codec<{
+    tag: "Raw";
+    value: {
+        productAccountId: [string, {
+            tag: "Index";
+            value: number;
+        } | {
+            tag: "Raw";
+            value: Uint8Array<ArrayBufferLike>;
+        }];
+        data: {
+            tag: "Bytes";
+            value: Uint8Array<ArrayBufferLike>;
+        } | {
+            tag: "Payload";
+            value: string;
+        };
+    };
+} | {
     tag: "Payload";
     value: {
-        productAccountId: [string, number];
+        productAccountId: [string, {
+            tag: "Index";
+            value: number;
+        } | {
+            tag: "Raw";
+            value: Uint8Array<ArrayBufferLike>;
+        }];
         blockHash: `0x${string}`;
         blockNumber: `0x${string}`;
         era: `0x${string}`;
@@ -66,18 +102,6 @@ export declare const SigningRequestCodec: import("scale-ts").Codec<{
         mode: number | undefined;
         withSignedTransaction: boolean | void;
     };
-} | {
-    tag: "Raw";
-    value: {
-        productAccountId: [string, number];
-        data: {
-            tag: "Bytes";
-            value: Uint8Array<ArrayBufferLike>;
-        } | {
-            tag: "Payload";
-            value: string;
-        };
-    };
 }>;
 export type SigningPayloadResponseData = CodecType<typeof SigningPayloadResponseDataCodec>;
 export declare const SigningPayloadResponseDataCodec: import("scale-ts").Codec<{

package/dist/sso/sessionManager/scale/signing.js

@@ -1,6 +1,6 @@
 import { AccountId, ProductAccountId } from '@novasamatech/host-api';
-import { Enum, Hex, OptionBool } from '@novasamatech/scale';
-import { Bytes, Option, Result, Struct, Vector, str, u32 } from 'scale-ts';
+import { Bytes, Enum, Hex, OptionBool } from '@novasamatech/scale';
+import { Option, Result, Struct, Vector, str, u32 } from 'scale-ts';
 export const SigningPayloadRequestCodec = Struct({
     productAccountId: ProductAccountId,
     blockHash: Hex(),

package/dist/sso/sessionManager/userSession.d.ts

@@ -1,15 +1,22 @@
-import { ContextualAlias, ProductProofContext, RingLocation, RingVrfProof } from '@novasamatech/host-api';
+import { ContextualAlias, ProductProofContext, RingLocation, RingVrfProof, VrfSignature } from '@novasamatech/host-api';
 import type { Encryption, StatementProver, StatementStoreAdapter } from '@novasamatech/statement-store';
 import type { StorageAdapter } from '@novasamatech/storage-adapter';
 import { ResultAsync } from 'neverthrow';
 import type { CodecType } from 'scale-ts';
+import type { Identity, IdentityRepository } from '../../identity/types.js';
 import type { Callback } from '../../types.js';
+import type { AllowanceRepository, AllowanceResourceKind } from '../allowance/index.js';
 import type { StoredUserSession } from '../userSessionRepository.js';
 import type { CreateTransactionLegacyRequest, CreateTransactionRequest } from './scale/createTransaction.js';
 import { RemoteMessageCodec } from './scale/remoteMessage.js';
 import type { ApAllocationOutcome, ResourceAllocationRequest } from './scale/resourceAllocation.js';
+import type { SignVrfRequest } from './scale/signVrf.js';
 import type { SignRawLegacyRequest, SigningPayloadRequest, SigningPayloadResponseData, SigningRawRequest } from './scale/signing.js';
 export type UserSession = StoredUserSession & {
+    /** Read this session's persisted allowance slot-account key for a product/resource. */
+    readAllowance(productId: string, resource: AllowanceResourceKind): ResultAsync<Uint8Array | null, Error>;
+    /** Look up the on-chain identity of this session's user identity account. */
+    getIdentity(): ResultAsync<Identity | null, Error>;
     sendDisconnectMessage(): ResultAsync<void, Error>;
     abortPendingRequests(): ResultAsync<void, Error>;
     signPayload(payload: SigningPayloadRequest): ResultAsync<SigningPayloadResponseData, Error>;
@@ -19,14 +26,24 @@ export type UserSession = StoredUserSession & {
     createTransactionLegacy(payload: CreateTransactionLegacyRequest): ResultAsync<Uint8Array, Error>;
     getRingVrfAlias(callingProductId: string, context: CodecType<typeof ProductProofContext>, ring: CodecType<typeof RingLocation>): ResultAsync<CodecType<typeof ContextualAlias>, Error>;
     createRingVrfProof(callingProductId: string, context: CodecType<typeof ProductProofContext>, ring: CodecType<typeof RingLocation>, message: Uint8Array): ResultAsync<CodecType<typeof RingVrfProof>, Error>;
+    /**
+     * Fetches the sr25519 public key of `//product//{productId}` (RFC-0022).
+     *
+     * Consent-free and cacheable: one round trip per product, ever. Account
+     * public keys are then soft-derived locally from the returned subtree key.
+     */
+    getProductSubtree(productId: string): ResultAsync<Uint8Array, Error>;
+    signVrf(payload: SignVrfRequest): ResultAsync<CodecType<typeof VrfSignature>, Error>;
     requestResourceAllocation(request: ResourceAllocationRequest): ResultAsync<ApAllocationOutcome[], Error>;
     subscribe(callback: Callback<CodecType<typeof RemoteMessageCodec>, ResultAsync<boolean, Error>>): VoidFunction;
     dispose(): void;
 };
-export declare function createUserSession({ userSession, statementStore, encryption, storage, prover, }: {
+export declare function createUserSession({ userSession, statementStore, encryption, storage, prover, allowanceRepository, identityRepository, }: {
     userSession: StoredUserSession;
     statementStore: StatementStoreAdapter;
     encryption: Encryption;
     storage: StorageAdapter;
     prover: StatementProver;
+    allowanceRepository: AllowanceRepository;
+    identityRepository: IdentityRepository;
 }): UserSession;

package/dist/sso/sessionManager/userSession.js

@@ -1,9 +1,10 @@
-import { ContextualAlias, ProductProofContext, RingLocation, RingVrfProof } from '@novasamatech/host-api';
+import { ContextualAlias, ProductProofContext, RingLocation, RingVrfProof, VrfSignature } from '@novasamatech/host-api';
 import { enumValue } from '@novasamatech/scale';
 import { createSession } from '@novasamatech/statement-store';
 import { fieldListView } from '@novasamatech/storage-adapter';
 import { nanoid } from 'nanoid';
 import { ResultAsync, err, ok, okAsync } from 'neverthrow';
+import { toHex } from 'polkadot-api/utils';
 import { emitHostPappDebugMessage } from '../../debugBus.js';
 import { createAsyncTaskPool } from '../../helpers/createAsyncTaskPool.js';
 import { toError } from '../../helpers/utils.js';
@@ -80,7 +81,7 @@ function withHostActionTrace(result, messageId, sessionId) {
         });
     });
 }
-export function createUserSession({ userSession, statementStore, encryption, storage, prover, }) {
+export function createUserSession({ userSession, statementStore, encryption, storage, prover, allowanceRepository, identityRepository, }) {
     const requestQueue = createAsyncTaskPool({ poolSize: 1, retryCount: 0, retryDelay: 0 });
     // Shared abort handle for everything currently on the request queue.
     // abortPendingRequests() fires it to drop the in-flight task plus anything
@@ -111,6 +112,12 @@ export function createUserSession({ userSession, statementStore, encryption, sto
     });
     return {
         ...userSession,
+        readAllowance(productId, resource) {
+            return allowanceRepository.read(userSession.id, productId, resource);
+        },
+        getIdentity() {
+            return identityRepository.getIdentity(toHex(userSession.identityAccountId));
+        },
         signPayload(payload) {
             return enqueue(() => {
                 const messageId = nanoid();
@@ -280,6 +287,42 @@ export function createUserSession({ userSession, statementStore, encryption, sto
                 return withHostActionTrace(awaitReplyOrAckFailure(request, reply).andThen(result => result.success ? ok(result.value) : err(result.value)), messageId, userSession.id);
             });
         },
+        getProductSubtree(productId) {
+            return enqueue(() => {
+                const messageId = nanoid();
+                const data = enumValue('v1', enumValue('ProductSubtreeRequest', { productId }));
+                emitHostAction(messageId, actionKindFromMessageData(data), userSession.id);
+                const responseFilter = (message) => {
+                    if (message.data.tag === 'v1' &&
+                        message.data.value.tag === 'ProductSubtreeResponse' &&
+                        message.data.value.value.respondingTo === messageId) {
+                        return message.data.value.value.payload;
+                    }
+                };
+                const request = session.request(RemoteMessageCodec, { messageId, data });
+                const reply = session.waitForRequestMessage(RemoteMessageCodec, responseFilter);
+                const inner = awaitReplyOrAckFailure(request, reply).andThen(result => result.success ? ok(result.value.productPublicKey) : err(new Error(result.value)));
+                return withHostActionTrace(withQueueTimeout(inner, 'getProductSubtree'), messageId, userSession.id);
+            });
+        },
+        signVrf(payload) {
+            return enqueue(() => {
+                const messageId = nanoid();
+                const data = enumValue('v1', enumValue('SignVrfRequest', payload));
+                emitHostAction(messageId, actionKindFromMessageData(data), userSession.id);
+                const responseFilter = (message) => {
+                    if (message.data.tag === 'v1' &&
+                        message.data.value.tag === 'SignVrfResponse' &&
+                        message.data.value.value.respondingTo === messageId) {
+                        return message.data.value.value.payload;
+                    }
+                };
+                const request = session.request(RemoteMessageCodec, { messageId, data });
+                const reply = session.waitForRequestMessage(RemoteMessageCodec, responseFilter);
+                const inner = awaitReplyOrAckFailure(request, reply).andThen(result => result.success ? ok(result.value) : err(result.value));
+                return withHostActionTrace(withQueueTimeout(inner, 'signVrf'), messageId, userSession.id);
+            });
+        },
         requestResourceAllocation(payload) {
             return enqueue(() => {
                 const messageId = nanoid();

package/dist/sso/userSecretRepository.js

@@ -1,8 +1,9 @@
 import { gcm } from '@noble/ciphers/aes.js';
 import { blake2b } from '@noble/hashes/blake2.js';
+import { Bytes } from '@novasamatech/scale';
 import { fromThrowable } from 'neverthrow';
 import { fromHex, toHex } from 'polkadot-api/utils';
-import { Bytes, Struct } from 'scale-ts';
+import { Struct } from 'scale-ts';
 import { BrandedBytesCodec, stringToBytes } from '../crypto.js';
 import { toError } from '../helpers/utils.js';
 const StoredUserSecretsCodec = Struct({

package/dist/sso/userSessionRepository.js

@@ -1,30 +1,31 @@
+import { Bytes } from '@novasamatech/scale';
 import { AccountIdCodec, LocalSessionAccountCodec, RemoteSessionAccountCodec } from '@novasamatech/statement-store';
 import { fieldListView } from '@novasamatech/storage-adapter';
 import { nanoid } from 'nanoid';
 import { fromHex, toHex } from 'polkadot-api/utils';
-import { Bytes, Struct, Vector, str } from 'scale-ts';
+import { Struct, Vector, str } from 'scale-ts';
 const storedUserSessionCodec = Struct({
     id: str,
     localAccount: LocalSessionAccountCodec,
     remoteAccount: RemoteSessionAccountCodec,
     rootAccountId: AccountIdCodec,
     identityAccountId: AccountIdCodec,
-    identityChatPublicKey: Bytes(65),
-    // `papp_encr_pub` (65-byte uncompressed P-256). Persisted so the host can
+    identityChatPublicKey: Bytes(32),
+    // `papp_encr_pub` (32-byte X25519). Persisted so the host can
     // rebuild its SSO session transport (`shared_secret_session =
     // ECDH(host_encr_secret, ssoEncPubKey)`) on a cold start without re-running
     // the handshake.
-    ssoEncPubKey: Bytes(65),
+    ssoEncPubKey: Bytes(32),
     // RFC-0007 layer-1 `rootEntropySource` from the handshake; consumed by the
     // host's `host_derive_entropy` handler via `deriveProductEntropyFromSource`.
     rootEntropySource: Bytes(32),
-    // Encryption public key of the authorising PApp device (65-byte uncompressed
-    // P-256), lifted from `HandshakeResponseV2.deviceEncPubKey`. Distinct from
+    // Encryption public key of the authorising PApp device (32-byte X25519),
+    // lifted from `HandshakeResponseV2.deviceEncPubKey`. Distinct from
     // `ssoEncPubKey` (the SSO session keypair) and from `remoteAccount.publicKey`
     // (the derived SSO shared secret): this is the peer device's long-lived ECDH
     // key, used by the host's device-sync channel to address the paired device.
     // Always present — `HandshakeResponseV2` carries it for every V2 pairing.
-    deviceEncPubKey: Bytes(65),
+    deviceEncPubKey: Bytes(32),
 });
 export function createStoredUserSession(localAccount, remoteAccount, rootAccountId, extras) {
     return {
@@ -43,7 +44,11 @@ export const createUserSessionRepository = (storage) => {
     const codec = Vector(storedUserSessionCodec);
     return fieldListView({
         storage,
-        key: 'SsoSessionsV3',
+        // V4: the encryption keys shrank from 65-byte P-256 to 32-byte X25519
+        // (CHAT-RFC-0004). Fixed-size `Bytes` does not length-check on decode, so a
+        // V3 blob would decode misaligned into a session that looks valid but
+        // carries garbage keys — bump the key so old blobs are dropped instead.
+        key: 'SsoSessionsV4',
         from: x => codec.dec(fromHex(x)),
         to: x => toHex(codec.enc(x)),
     });

package/dist/sso/userSessionRepository.spec.js

@@ -5,14 +5,14 @@ import { describe, expect, it } from 'vitest';
 import { createStoredUserSession, createUserSessionRepository } from './userSessionRepository.js';
 const bytes = (len, fill) => new Uint8Array(len).fill(fill);
 // remoteAccount.publicKey is a fixed 32-byte field (the SSO shared secret),
-// which is exactly why the peer device's 65-byte encryption key needs its own
+// which is exactly why the peer device's 32-byte encryption key needs its own
 // `deviceEncPubKey` field rather than being squeezed in here.
 const SHARED_SECRET = bytes(32, 0x07);
-const DEVICE_ENC_PUB = bytes(65, 0x04);
+const DEVICE_ENC_PUB = bytes(32, 0x04);
 const baseExtras = {
     identityAccountId: createAccountId(bytes(32, 0x11)),
-    identityChatPublicKey: bytes(65, 0x22),
-    ssoEncPubKey: bytes(65, 0x33),
+    identityChatPublicKey: bytes(32, 0x22),
+    ssoEncPubKey: bytes(32, 0x33),
     rootEntropySource: bytes(32, 0x44),
 };
 const makeSession = (deviceEncPubKey = DEVICE_ENC_PUB) => createStoredUserSession(createLocalSessionAccount(createAccountId(bytes(32, 0x01))), createRemoteSessionAccount(createAccountId(bytes(32, 0x02)), SHARED_SECRET), createAccountId(bytes(32, 0x55)), { ...baseExtras, deviceEncPubKey });

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@novasamatech/host-papp",
   "type": "module",
-  "version": "0.8.11",
+  "version": "0.9.0",
   "description": "Polkadot app integration",
   "license": "Apache-2.0",
   "repository": {
@@ -34,14 +34,14 @@
     "@noble/ciphers": "2.2.0",
     "@noble/curves": "2.2.0",
     "@noble/hashes": "2.2.0",
-    "@novasamatech/host-api": "0.8.11",
-    "@novasamatech/scale": "0.8.11",
-    "@novasamatech/statement-store": "0.8.11",
-    "@novasamatech/storage-adapter": "0.8.11",
+    "@novasamatech/host-api": "0.9.0",
+    "@novasamatech/scale": "0.9.0",
+    "@novasamatech/statement-store": "0.9.0",
+    "@novasamatech/storage-adapter": "0.9.0",
     "@polkadot-api/utils": "^0.4.0",
-    "@polkadot-labs/hdkd-helpers": "^0.0.30",
-    "nanoevents": "9.1.0",
-    "nanoid": "5.1.11",
+    "@polkadot-labs/hdkd-helpers": "^0.0.31",
+    "nanoevents": "10.0.0",
+    "nanoid": "6.0.0",
     "neverthrow": "^8.2.0",
     "polkadot-api": ">=2",
     "rxjs": "^7.8.2",