@novasamatech/host-papp 0.8.4 → 0.8.5

package/dist/sso/auth/impl.d.ts

@@ -17,6 +17,13 @@ export type AuthComponent = ReturnType<typeof createAuth>;
 export type OnAuthSuccess = (event: {
     session: StoredUserSession;
     identityChatPrivateKey: Uint8Array;
+    /**
+     * `papp_encr_pub` from Mobile SSO spec v0.2.2. `null` when the peer
+     * shipped a pre-v0.2.2 `HandshakeSuccessV2` body (no `sso_encr_pub_key`
+     * field on the wire). The host's SSO session transport stays inactive
+     * while null; chat is unaffected since it uses `identityChatPrivateKey`.
+     */
+    ssoEncPubKey: Uint8Array | null;
 }) => Promise<void> | void;
 type Params = {
     hostMetadata?: HostMetadata;

package/dist/sso/auth/impl.js

@@ -152,6 +152,7 @@ export function createAuth({ hostMetadata, deviceIdentity, deviceIdentityStore,
         const session = createStoredUserSession(localAccount, remoteAccount, createAccountId(success.rootAccountId ?? new Uint8Array(32)), {
             identityAccountId: createAccountId(success.identityAccountId),
             identityChatPublicKey: success.identityChatPublicKey,
+            ssoEncPubKey: success.ssoEncPubKey ?? undefined,
         });
         return userSecretRepository
             .write(session.id, {
@@ -162,7 +163,11 @@ export function createAuth({ hostMetadata, deviceIdentity, deviceIdentityStore,
         })
             .andThen(() => ssoSessionRepository.add(session))
             .andThen(() => onAuthSuccess
-            ? ResultAsync.fromPromise(Promise.resolve(onAuthSuccess({ session, identityChatPrivateKey: success.identityChatPrivateKey })), toError).map(() => session)
+            ? ResultAsync.fromPromise(Promise.resolve(onAuthSuccess({
+                session,
+                identityChatPrivateKey: success.identityChatPrivateKey,
+                ssoEncPubKey: success.ssoEncPubKey,
+            })), toError).map(() => session)
             : okAsync(session));
     }
 }

package/dist/sso/auth/scale/handshakeV2.d.ts

@@ -131,11 +131,22 @@ export declare const VersionedHandshakeProposal: import("scale-ts").Codec<{
         }, string][];
     };
 }>;
-/** 32 + 32 + 32 + 65 = 161 bytes (spec v0.2.1) */
+/**
+ * 32 + 32 + 32 + 65 + 65 = 226 bytes (spec v0.2.2).
+ *
+ * `ssoEncPubKey` is `papp_encr_pub` per spec § Encrypted response — V2 — the
+ * P-256 public key PApp uses for SSO session ECDH. Required to compute
+ * `shared_secret_session = ECDH(host_encr_secret, ssoEncPubKey)`. PApp keypair
+ * derivation is implementation-defined: Android derives under `//wallet//sso`
+ * (`SsoDerivationDomains.SSO_DERIVATION_DOMAIN`); iOS currently reuses
+ * `//wallet//chat`. The host treats this field as opaque public material —
+ * which keypair PApp picked is invisible here.
+ */
 export declare const HandshakeSuccessV2: import("scale-ts").Codec<{
     identityAccountId: Uint8Array<ArrayBufferLike>;
     rootAccountId: Uint8Array<ArrayBufferLike>;
     identityChatPrivateKey: Uint8Array<ArrayBufferLike>;
+    ssoEncPubKey: Uint8Array<ArrayBufferLike>;
     deviceEncPubKey: Uint8Array<ArrayBufferLike>;
 }>;
 export type HandshakeSuccessV2Value = {
@@ -143,8 +154,22 @@ export type HandshakeSuccessV2Value = {
     /** Nullable for v0.2 peers (Android `feature/location-for-handshake`). */
     rootAccountId: Uint8Array | null;
     identityChatPrivateKey: Uint8Array;
+    /**
+     * Nullable for v0.2 / v0.2.1 peers (any PApp build that does not yet ship
+     * spec v0.2.2). The host's SSO session transport stays inactive while
+     * null — sign/vrf/etc operations fail at the boundary until PApp emits
+     * the new field.
+     */
+    ssoEncPubKey: Uint8Array | null;
     deviceEncPubKey: Uint8Array;
 };
+/** 32 + 32 + 32 + 65 = 161 bytes (spec v0.2.1) */
+export declare const HandshakeSuccessV2_v021: import("scale-ts").Codec<{
+    identityAccountId: Uint8Array<ArrayBufferLike>;
+    rootAccountId: Uint8Array<ArrayBufferLike>;
+    identityChatPrivateKey: Uint8Array<ArrayBufferLike>;
+    deviceEncPubKey: Uint8Array<ArrayBufferLike>;
+}>;
 /** 32 + 32 + 65 = 129 bytes (spec v0.2 — Android `feature/location-for-handshake`) */
 export declare const HandshakeSuccessV2Legacy: import("scale-ts").Codec<{
     identityAccountId: Uint8Array<ArrayBufferLike>;
@@ -166,9 +191,16 @@ export type DecodedHandshakeResponseV2 = {
 };
 /**
  * Length-dispatched decoder for the inner `EncryptedHandshakeResponseV2`
- * plaintext. v0.2 (Android) ships 129-byte Success bodies without
- * `rootAccountId`; v0.2.1 ships 161-byte bodies with it. Surfaces
- * `rootAccountId: null` for the legacy case — chat doesn't need it.
+ * plaintext. Three Success body shapes are accepted, one per spec rev:
+ *
+ *   226 bytes (spec v0.2.2) — includes `ssoEncPubKey` (`papp_encr_pub`).
+ *   161 bytes (spec v0.2.1) — `ssoEncPubKey` absent; surfaced as `null`.
+ *   129 bytes (spec v0.2)   — `rootAccountId` AND `ssoEncPubKey` absent.
+ *
+ * Older peers degrade gracefully: chat continues to work via
+ * `identityChatPrivateKey`, but the SSO session transport (which needs
+ * `ssoEncPubKey` to derive `shared_secret_session`) stays inactive on
+ * the host until the peer upgrades.
  */
 export declare const decodeEncryptedHandshakeResponseV2: (bytes: Uint8Array) => DecodedHandshakeResponseV2;
 /**
@@ -229,6 +261,7 @@ export declare const EncryptedHandshakeResponseV2: import("scale-ts").Codec<{
         identityAccountId: Uint8Array<ArrayBufferLike>;
         rootAccountId: Uint8Array<ArrayBufferLike>;
         identityChatPrivateKey: Uint8Array<ArrayBufferLike>;
+        ssoEncPubKey: Uint8Array<ArrayBufferLike>;
         deviceEncPubKey: Uint8Array<ArrayBufferLike>;
     };
 }>;

package/dist/sso/auth/scale/handshakeV2.js

@@ -61,8 +61,26 @@ export const VersionedHandshakeProposal = Enum({
     V2: HandshakeProposalV2,
 });
 // ── Response (V2) ───────────────────────────────────────────────────────
-/** 32 + 32 + 32 + 65 = 161 bytes (spec v0.2.1) */
+/**
+ * 32 + 32 + 32 + 65 + 65 = 226 bytes (spec v0.2.2).
+ *
+ * `ssoEncPubKey` is `papp_encr_pub` per spec § Encrypted response — V2 — the
+ * P-256 public key PApp uses for SSO session ECDH. Required to compute
+ * `shared_secret_session = ECDH(host_encr_secret, ssoEncPubKey)`. PApp keypair
+ * derivation is implementation-defined: Android derives under `//wallet//sso`
+ * (`SsoDerivationDomains.SSO_DERIVATION_DOMAIN`); iOS currently reuses
+ * `//wallet//chat`. The host treats this field as opaque public material —
+ * which keypair PApp picked is invisible here.
+ */
 export const HandshakeSuccessV2 = Struct({
+    identityAccountId: AccountIdCodec,
+    rootAccountId: AccountIdCodec,
+    identityChatPrivateKey: PrivateKeyCodec,
+    ssoEncPubKey: PublicKeyCodec,
+    deviceEncPubKey: PublicKeyCodec,
+});
+/** 32 + 32 + 32 + 65 = 161 bytes (spec v0.2.1) */
+export const HandshakeSuccessV2_v021 = Struct({
     identityAccountId: AccountIdCodec,
     rootAccountId: AccountIdCodec,
     identityChatPrivateKey: PrivateKeyCodec,
@@ -76,9 +94,16 @@ export const HandshakeSuccessV2Legacy = Struct({
 });
 /**
  * Length-dispatched decoder for the inner `EncryptedHandshakeResponseV2`
- * plaintext. v0.2 (Android) ships 129-byte Success bodies without
- * `rootAccountId`; v0.2.1 ships 161-byte bodies with it. Surfaces
- * `rootAccountId: null` for the legacy case — chat doesn't need it.
+ * plaintext. Three Success body shapes are accepted, one per spec rev:
+ *
+ *   226 bytes (spec v0.2.2) — includes `ssoEncPubKey` (`papp_encr_pub`).
+ *   161 bytes (spec v0.2.1) — `ssoEncPubKey` absent; surfaced as `null`.
+ *   129 bytes (spec v0.2)   — `rootAccountId` AND `ssoEncPubKey` absent.
+ *
+ * Older peers degrade gracefully: chat continues to work via
+ * `identityChatPrivateKey`, but the SSO session transport (which needs
+ * `ssoEncPubKey` to derive `shared_secret_session`) stays inactive on
+ * the host until the peer upgrades.
  */
 export const decodeEncryptedHandshakeResponseV2 = (bytes) => {
     if (bytes.length === 0)
@@ -92,7 +117,7 @@ export const decodeEncryptedHandshakeResponseV2 = (bytes) => {
         return { tag: 'Pending', value: { tag: 'AllowanceAllocation', value: undefined } };
     }
     if (tag === 1) {
-        if (body.length === 161) {
+        if (body.length === 226) {
             const decoded = HandshakeSuccessV2.dec(body);
             return {
                 tag: 'Success',
@@ -100,6 +125,20 @@ export const decodeEncryptedHandshakeResponseV2 = (bytes) => {
                     identityAccountId: decoded.identityAccountId,
                     rootAccountId: decoded.rootAccountId,
                     identityChatPrivateKey: decoded.identityChatPrivateKey,
+                    ssoEncPubKey: decoded.ssoEncPubKey,
+                    deviceEncPubKey: decoded.deviceEncPubKey,
+                },
+            };
+        }
+        if (body.length === 161) {
+            const decoded = HandshakeSuccessV2_v021.dec(body);
+            return {
+                tag: 'Success',
+                value: {
+                    identityAccountId: decoded.identityAccountId,
+                    rootAccountId: decoded.rootAccountId,
+                    identityChatPrivateKey: decoded.identityChatPrivateKey,
+                    ssoEncPubKey: null,
                     deviceEncPubKey: decoded.deviceEncPubKey,
                 },
             };
@@ -112,11 +151,12 @@ export const decodeEncryptedHandshakeResponseV2 = (bytes) => {
                     identityAccountId: decoded.identityAccountId,
                     rootAccountId: null,
                     identityChatPrivateKey: decoded.identityChatPrivateKey,
+                    ssoEncPubKey: null,
                     deviceEncPubKey: decoded.deviceEncPubKey,
                 },
             };
         }
-        throw new Error(`EncryptedHandshakeResponseV2: Success body length ${body.length} not in {129, 161}`);
+        throw new Error(`EncryptedHandshakeResponseV2: Success body length ${body.length} not in {129, 161, 226}`);
     }
     if (tag === 2) {
         return { tag: 'Failed', value: str.dec(body) };

package/dist/sso/auth/v2/state.d.ts

@@ -54,6 +54,16 @@ export type HandshakeSuccessState = {
      * back to the authorising device.
      */
     deviceEncPubKey: Uint8Array;
+    /**
+     * `papp_encr_pub` from the Mobile SSO spec (v0.2.2 — 65 bytes, P-256
+     * uncompressed). The host's SSO session transport derives
+     * `shared_secret_session = ECDH(host_encr_secret, ssoEncPubKey)` from
+     * this. Nullable because v0.2 and v0.2.1 peers don't ship it; while
+     * null the host's SSO transport stays inactive (sign/vrf/etc continue
+     * to fail at the boundary) and chat keeps working through
+     * `identityChatPrivateKey`.
+     */
+    ssoEncPubKey: Uint8Array | null;
     /**
      * The pairing-topic statement was signed by PApp's device statement
      * account. `HandshakeSuccessV2` doesn't carry it in the encrypted body, so

package/dist/sso/auth/v2/state.js

@@ -35,6 +35,7 @@ export const fromInnerResponse = (response, peerStatementAccountId = null) => {
                 identityChatPrivateKey: response.value.identityChatPrivateKey,
                 identityChatPublicKey: deriveIdentityChatPublicKey(response.value.identityChatPrivateKey),
                 deviceEncPubKey: response.value.deviceEncPubKey,
+                ssoEncPubKey: response.value.ssoEncPubKey,
                 peerStatementAccountId,
             };
         case 'Failed':

package/dist/sso/sessionManager/userSession.js

@@ -79,6 +79,12 @@ export function createUserSession({ userSession, statementStore, encryption, sto
         statementStore,
         encryption,
         prover,
+        // V1 sessions historically derived SessionId by feeding the peer's raw
+        // encryption pubkey into khash; preserve that behaviour here so existing
+        // V1 channels stay byte-identical post-refactor. V2 callers (e.g.
+        // polkadot-desktop's V2SsoSession) pass the ECDH-derived shared secret
+        // explicitly per Mobile SSO spec v0.2.2.
+        sessionKey: userSession.remoteAccount.publicKey,
         maxRequestSize: MAX_SSO_REQUEST_SIZE,
     });
     const processedMessages = fieldListView({

package/dist/sso/userSessionRepository.d.ts

@@ -17,10 +17,12 @@ declare const storedUserSessionCodec: import("scale-ts").Codec<{
     rootAccountId: AccountId;
     identityAccountId: AccountId | undefined;
     identityChatPublicKey: Uint8Array<ArrayBufferLike> | undefined;
+    ssoEncPubKey: Uint8Array<ArrayBufferLike> | undefined;
 }>;
 type StoredUserSessionV2Extras = {
     identityAccountId?: AccountId;
     identityChatPublicKey?: Uint8Array;
+    ssoEncPubKey?: Uint8Array;
 };
 export declare function createStoredUserSession(localAccount: LocalSessionAccount, remoteAccount: RemoteSessionAccount, rootAccountId: AccountId, extras?: StoredUserSessionV2Extras): StoredUserSession;
 export declare const createUserSessionRepository: (storage: StorageAdapter) => {
@@ -38,6 +40,7 @@ export declare const createUserSessionRepository: (storage: StorageAdapter) => {
         rootAccountId: AccountId;
         identityAccountId: AccountId | undefined;
         identityChatPublicKey: Uint8Array<ArrayBufferLike> | undefined;
+        ssoEncPubKey: Uint8Array<ArrayBufferLike> | undefined;
     }): import("neverthrow").ResultAsync<{
         id: string;
         localAccount: {
@@ -52,6 +55,7 @@ export declare const createUserSessionRepository: (storage: StorageAdapter) => {
         rootAccountId: AccountId;
         identityAccountId: AccountId | undefined;
         identityChatPublicKey: Uint8Array<ArrayBufferLike> | undefined;
+        ssoEncPubKey: Uint8Array<ArrayBufferLike> | undefined;
     }, Error>;
     filter(fn: (value: {
         id: string;
@@ -67,6 +71,7 @@ export declare const createUserSessionRepository: (storage: StorageAdapter) => {
         rootAccountId: AccountId;
         identityAccountId: AccountId | undefined;
         identityChatPublicKey: Uint8Array<ArrayBufferLike> | undefined;
+        ssoEncPubKey: Uint8Array<ArrayBufferLike> | undefined;
     }) => boolean): import("neverthrow").ResultAsync<{
         id: string;
         localAccount: {
@@ -81,6 +86,7 @@ export declare const createUserSessionRepository: (storage: StorageAdapter) => {
         rootAccountId: AccountId;
         identityAccountId: AccountId | undefined;
         identityChatPublicKey: Uint8Array<ArrayBufferLike> | undefined;
+        ssoEncPubKey: Uint8Array<ArrayBufferLike> | undefined;
     }[], Error>;
     mutate(fn: (value: {
         id: string;
@@ -96,6 +102,7 @@ export declare const createUserSessionRepository: (storage: StorageAdapter) => {
         rootAccountId: AccountId;
         identityAccountId: AccountId | undefined;
         identityChatPublicKey: Uint8Array<ArrayBufferLike> | undefined;
+        ssoEncPubKey: Uint8Array<ArrayBufferLike> | undefined;
     }[]) => {
         id: string;
         localAccount: {
@@ -110,6 +117,7 @@ export declare const createUserSessionRepository: (storage: StorageAdapter) => {
         rootAccountId: AccountId;
         identityAccountId: AccountId | undefined;
         identityChatPublicKey: Uint8Array<ArrayBufferLike> | undefined;
+        ssoEncPubKey: Uint8Array<ArrayBufferLike> | undefined;
     }[]): import("neverthrow").ResultAsync<{
         id: string;
         localAccount: {
@@ -124,6 +132,7 @@ export declare const createUserSessionRepository: (storage: StorageAdapter) => {
         rootAccountId: AccountId;
         identityAccountId: AccountId | undefined;
         identityChatPublicKey: Uint8Array<ArrayBufferLike> | undefined;
+        ssoEncPubKey: Uint8Array<ArrayBufferLike> | undefined;
     }[], Error>;
     read(): import("neverthrow").ResultAsync<{
         id: string;
@@ -139,6 +148,7 @@ export declare const createUserSessionRepository: (storage: StorageAdapter) => {
         rootAccountId: AccountId;
         identityAccountId: AccountId | undefined;
         identityChatPublicKey: Uint8Array<ArrayBufferLike> | undefined;
+        ssoEncPubKey: Uint8Array<ArrayBufferLike> | undefined;
     }[], Error>;
     write(value: {
         id: string;
@@ -154,6 +164,7 @@ export declare const createUserSessionRepository: (storage: StorageAdapter) => {
         rootAccountId: AccountId;
         identityAccountId: AccountId | undefined;
         identityChatPublicKey: Uint8Array<ArrayBufferLike> | undefined;
+        ssoEncPubKey: Uint8Array<ArrayBufferLike> | undefined;
     }[]): import("neverthrow").ResultAsync<null, Error> | import("neverthrow").ResultAsync<{
         id: string;
         localAccount: {
@@ -168,6 +179,7 @@ export declare const createUserSessionRepository: (storage: StorageAdapter) => {
         rootAccountId: AccountId;
         identityAccountId: AccountId | undefined;
         identityChatPublicKey: Uint8Array<ArrayBufferLike> | undefined;
+        ssoEncPubKey: Uint8Array<ArrayBufferLike> | undefined;
     }[], Error>;
     clear(): import("neverthrow").ResultAsync<void, Error>;
     subscribe(fn: (value: {
@@ -184,6 +196,7 @@ export declare const createUserSessionRepository: (storage: StorageAdapter) => {
         rootAccountId: AccountId;
         identityAccountId: AccountId | undefined;
         identityChatPublicKey: Uint8Array<ArrayBufferLike> | undefined;
+        ssoEncPubKey: Uint8Array<ArrayBufferLike> | undefined;
     }[]) => void): VoidFunction;
 };
 export {};

package/dist/sso/userSessionRepository.js

@@ -12,6 +12,11 @@ const storedUserSessionCodec = Struct({
     rootAccountId: AccountIdCodec,
     identityAccountId: Option(AccountIdCodec),
     identityChatPublicKey: Option(Bytes(65)),
+    // `papp_encr_pub` (Mobile SSO spec v0.2.2, 65-byte uncompressed P-256).
+    // Persisted so the host can rebuild its SSO session transport
+    // (`shared_secret_session = ECDH(host_encr_secret, ssoEncPubKey)`) on a
+    // cold start without re-running the handshake. `None` for pre-v0.2.2 peers.
+    ssoEncPubKey: Option(Bytes(65)),
 });
 export function createStoredUserSession(localAccount, remoteAccount, rootAccountId, extras = {}) {
     return {
@@ -21,6 +26,7 @@ export function createStoredUserSession(localAccount, remoteAccount, rootAccount
         rootAccountId,
         identityAccountId: extras.identityAccountId,
         identityChatPublicKey: extras.identityChatPublicKey,
+        ssoEncPubKey: extras.ssoEncPubKey,
     };
 }
 export const createUserSessionRepository = (storage) => {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@novasamatech/host-papp",
   "type": "module",
-  "version": "0.8.4",
+  "version": "0.8.5",
   "description": "Polkadot app integration",
   "license": "Apache-2.0",
   "repository": {
@@ -34,10 +34,10 @@
     "@noble/ciphers": "2.2.0",
     "@noble/curves": "2.2.0",
     "@noble/hashes": "2.2.0",
-    "@novasamatech/host-api": "0.8.4",
-    "@novasamatech/scale": "0.8.4",
-    "@novasamatech/statement-store": "0.8.4",
-    "@novasamatech/storage-adapter": "0.8.4",
+    "@novasamatech/host-api": "0.8.5",
+    "@novasamatech/scale": "0.8.5",
+    "@novasamatech/statement-store": "0.8.5",
+    "@novasamatech/storage-adapter": "0.8.5",
     "@polkadot-api/utils": "^0.4.0",
     "@polkadot-labs/hdkd-helpers": "^0.0.30",
     "nanoevents": "9.1.0",