@novasamatech/host-papp 0.9.2 → 0.9.4

package/README.md

@@ -218,34 +218,74 @@ vrf.match(
 This is the non-`AutoSigning` path only: when `AutoSigning` covers the account the host signs locally and never
 round-trips to the wallet.
 
-## Ring VRF proofs and aliases
+## Ring VRF keys, proofs and aliases
 
-A `UserSession` can ask the paired device for a privacy-preserving contextual alias, or a ring VRF proof, for a
-product-scoped `context` and a `ring` location. The device selects the member key for the ring; `callingProductId` names
-the product the host is acting for. Both take the same `(context, ring)` so the alias in the proof matches
-`getRingVrfAlias`.
+Ring VRF member keys are **explicit and product-owned** (RFC-0024): a product registers the keys it owns against the
+rings it intends them for, other products discover those registrations by an anonymized handle, and the handle is passed
+to every call that uses the key. The paired device is the authoritative registry — it needs the complete set to serve
+slot assignment and PGAS claims, and to show the user what their keys are used for.
 
 ```ts
-// [productId, suffix]. The suffix is the wire `Index(u32) | Raw([u8; 32])` selector
-// (RFC 0022): `Index` for a plain index, `Raw` for a raw 32-byte index. It
-// expands to the same 32-byte value as a product account's derivation index.
-const context = ['product.dot', { tag: 'Index', value: 0 }];
 const ring = {
   chainId: '0x…', // 32-byte chain genesis hash
   junctions: [{ tag: 'PalletInstance', value: 42 }],
 };
 
-const alias = await currentSession.getRingVrfAlias('caller.dot', context, ring);
+// Register a key owned by `peopl.dot` at index 0 for that ring. Consent-free and
+// idempotent — re-registering an index for another ring extends the entry.
+const publicKey = await currentSession.registerRingVrfKey('peopl.dot', { tag: 'Index', value: 0 }, ring);
+
+// Discover another product's keys. `'PublicKey'` disclosure additionally returns
+// the member public key, which is linkable across every ring it appears in and so
+// is permissioned cross-product.
+const entries = await currentSession.listRingVrfKeys('game.dot', 'peopl.dot', 'Anonymized');
+```
+
+A `UserSession` can then ask the paired device for a privacy-preserving contextual alias, or a ring VRF proof, for a
+given `keyHandle`, product-scoped `context` and `ring` location. `callingProductId` names the product the host is acting
+for — it is what the owner's allowlist is checked against when the handle is foreign. Both take the same
+`(keyHandle, context, ring)` so the alias in the proof matches `getRingVrfAlias`.
 
-const proof = await currentSession.createRingVrfProof('caller.dot', context, ring, new Uint8Array([0x48, 0x69]));
+```ts
+// The key handle names a slot in the owner's ring VRF domain. Select it from
+// `listRingVrfKeys` by declared ring and pass it through opaquely — never
+// hardcode another product's index.
+const keyHandle = ['peopl.dot', { tag: 'Index', value: 0 }];
+
+// [productId, suffix]. The suffix is the wire `Index(u32) | Raw([u8; 32])` selector
+// (RFC 0022): `Index` for a plain index, `Raw` for a raw 32-byte index. It
+// expands to the same 32-byte value as a product account's derivation index.
+const context = ['product.dot', { tag: 'Index', value: 0 }];
+
+const alias = await currentSession.getRingVrfAlias('caller.dot', keyHandle, context, ring);
+
+const proof = await currentSession.createRingVrfProof(
+  'caller.dot',
+  keyHandle,
+  context,
+  ring,
+  new Uint8Array([0x48, 0x69]),
+);
 proof.match(
   ({ proof, contextualAlias, ringIndex, ringRevision }) =>
     console.log('proof at ring', ringIndex, 'revision', ringRevision),
-  // failures decode to a structured `RingVrfError` (RingNotFound / NotMember / Rejected / Unknown)
+  // failures decode to a structured `CreateProofErr` — RingNotFound / NotMember /
+  // KeyNotRegistered / KeyNotInRing / NotAllowlisted / Rejected / Unknown
   error => console.error('proof failed:', error),
 );
+
+// `ringVrfSign` signs with the member key itself instead of proving membership
+// anonymously. No context and no ring — nothing for either to scope — and the
+// result is verified against the member public key, so it is linkable to every
+// other use of that key.
+const signature = await currentSession.ringVrfSign('caller.dot', keyHandle, new Uint8Array([0x48, 0x69]));
 ```
 
+Producing a proof or a signature with a **foreign** key handle is gated on the key's owning product having allowlisted
+the caller in its manifest, and there is deliberately no user-prompt fallback: `message` is opaque, so consenting to it
+is not meaningful consent, and only the owner is positioned to evaluate the risk. Reading an alias authorizes nothing
+and stays on the ordinary grant-or-prompt path.
+
 ## Product subtree public keys
 
 Product accounts live at `//product//{productId}/{index}` (RFC 0022). The product junction is **hard**, so the user's
@@ -261,9 +301,16 @@ subtreeKey.match(
 );
 ```
 
-The request is consent-free — the response carries no secret material. Only `AutoSigning` does: its payload is now the
-product-subtree secret key alone (`productRootPrivateKey`, 64-byte expanded sr25519 secret), which exposes exactly that
-product's subtree. The former `productDerivationSecret` is gone.
+The request is consent-free — the response carries no secret material. Only `AutoSigning` does: its payload is the
+product-subtree secret key (`productRootPrivateKey`, 64-byte expanded sr25519 secret), which exposes exactly that
+product's subtree, plus `ringVrfDomainEntropy` (RFC-0024) — the entropy of the `//{productId}` node of the disjoint ring
+VRF tree, which lets the host derive the member secret of a **registered** key locally. The former
+`productDerivationSecret` is gone.
+
+Bundling the entropy widens the grant: "sign transactions without prompting me" and "produce personhood proofs offline"
+become one decision. And because derivation from the entropy is unconditional arithmetic, the registry is what
+distinguishes a meaningful index from a meaningless one — a host MUST NOT derive a member secret for a
+`(product, index)` pair absent from its registry.
 
 ## Identity lookups
 

package/dist/index.d.ts

@@ -13,7 +13,8 @@ export type { Credibility, Identity, IdentityAdapter, IdentityRepository } from
 export { createIdentityRepository } from './identity/impl.js';
 export { createIdentityRpcAdapter } from './identity/rpcAdapter.js';
 export type { SignRawLegacyRequest, SignRawLegacyResponse, SigningPayloadRequest, SigningPayloadResponse, SigningRawRequest, SigningRequest, } from './sso/sessionManager/scale/signing.js';
-export type { RingVrfAliasRequest, RingVrfAliasResponse, RingVrfProofRequest, RingVrfProofResponse, } from './sso/sessionManager/scale/ringVrf.js';
+export type { RingVrfAliasRequest, RingVrfAliasResponse, RingVrfProofRequest, RingVrfProofResponse, RingVrfSignRequest, RingVrfSignResponse, } from './sso/sessionManager/scale/ringVrf.js';
+export type { ListRingVrfKeysRequest, ListRingVrfKeysResponse, RegisterRingVrfKeyRequest, RegisterRingVrfKeyResponse, } from './sso/sessionManager/scale/ringVrfKeys.js';
 export type { SignVrfErr, SignVrfRequest, SignVrfResponse } from './sso/sessionManager/scale/signVrf.js';
 export type { CreateTransactionLegacyRequest, CreateTransactionRequest, CreateTransactionResponse, } from './sso/sessionManager/scale/createTransaction.js';
 export type { ProductSubtreeRequest, ProductSubtreeResponse } from './sso/sessionManager/scale/productSubtree.js';

package/dist/sso/auth/impl.d.ts

@@ -76,5 +76,14 @@ export declare function createAuth({ hostMetadata, deviceIdentity, deviceIdentit
     };
     authenticate(): ResultAsync<StoredUserSession | null, Error>;
     abortAuthentication(): void;
+    /**
+     * Discard the persisted device keypair and the processed-handshake marker
+     * stored with it, so the next pairing runs on a new topic with a new key —
+     * which makes any cached on-chain HandshakeSuccess undecryptable.
+     *
+     * No-op for hosts supplying their own `deviceIdentity` factory, and a
+     * pairing already in flight keeps the old identity.
+     */
+    resetDeviceIdentity(): ResultAsync<void, Error>;
 };
 export {};

package/dist/sso/auth/impl.js

@@ -146,6 +146,17 @@ export function createAuth({ hostMetadata, deviceIdentity, deviceIdentityStore,
             authResult = null;
             pairingStatus.reset();
         },
+        /**
+         * Discard the persisted device keypair and the processed-handshake marker
+         * stored with it, so the next pairing runs on a new topic with a new key —
+         * which makes any cached on-chain HandshakeSuccess undecryptable.
+         *
+         * No-op for hosts supplying their own `deviceIdentity` factory, and a
+         * pairing already in flight keeps the old identity.
+         */
+        resetDeviceIdentity() {
+            return deviceIdentityStore.reset();
+        },
     };
     function persistAndNotify(identity, success, _flowId) {
         const localAccount = createLocalSessionAccount(createAccountId(identity.statementAccountPublicKey));

package/dist/sso/deviceIdentityStore.d.ts

@@ -9,6 +9,7 @@ export type DeviceIdentityStore = {
     loadOrCreate(): ResultAsync<DeviceIdentity, Error>;
     readLastProcessedHandshakeStatement(): ResultAsync<string | null, Error>;
     writeLastProcessedHandshakeStatement(hex: string): ResultAsync<void, Error>;
+    reset(): ResultAsync<void, Error>;
 };
 export declare function createDeviceIdentityStore(salt: string, storage: StorageAdapter): DeviceIdentityStore;
 export declare const awaitDeviceIdentity: (store: DeviceIdentityStore) => Promise<DeviceIdentity>;

package/dist/sso/deviceIdentityStore.js

@@ -66,6 +66,9 @@ export function createDeviceIdentityStore(salt, storage) {
                 return write({ ...existing, lastProcessedHandshakeStatement: hex });
             });
         },
+        reset() {
+            return storage.clear(KEY);
+        },
     };
 }
 // Re-export the awaitable form for convenience, since most call sites already

package/dist/sso/sessionManager/impl.d.ts

@@ -1,5 +1,6 @@
 import type { StatementStoreAdapter } from '@novasamatech/statement-store';
 import type { StorageAdapter } from '@novasamatech/storage-adapter';
+import { ResultAsync } from 'neverthrow';
 import type { IdentityRepository } from '../../identity/types.js';
 import type { Callback } from '../../types.js';
 import type { AllowanceRepository } from '../allowance/index.js';
@@ -20,7 +21,11 @@ export declare function createSsoSessionManager({ ssoSessionRepository, userSecr
         read: () => UserSession[];
         subscribe: (callback: Callback<UserSession[]>) => () => void;
     };
-    disconnect(userSession: StoredUserSession): import("neverthrow").ResultAsync<void, Error>;
+    disconnect(userSession: StoredUserSession): ResultAsync<undefined, Error>;
+    /**
+     * Teardown by id alone, without notifying the peer.
+     * */
+    forget(sessionId: string): ResultAsync<undefined, Error>;
     dispose(): void;
 };
 export {};

package/dist/sso/sessionManager/impl.js

@@ -1,9 +1,9 @@
 import { createEncryption } from '@novasamatech/statement-store';
-import { okAsync } from 'neverthrow';
+import { ResultAsync, okAsync } from 'neverthrow';
 import { emitHostPappDebugMessage } from '../../debugBus.js';
 import { createState } from '../../helpers/state.js';
 import { createSsoStatementProver } from '../ssoSessionProver.js';
-import { createUserSession } from './userSession.js';
+import { createUserSession, processedMessagesKey } from './userSession.js';
 export function createSsoSessionManager({ ssoSessionRepository, userSecretRepository, allowanceRepository, identityRepository, statementStore, storage, }) {
     const localSessions = createState({});
     const sessionUnsubscribes = new Map();
@@ -11,9 +11,16 @@ export function createSsoSessionManager({ ssoSessionRepository, userSecretReposi
         sessionUnsubscribes.get(id)?.();
         sessionUnsubscribes.delete(id);
     };
-    const disconnect = (session) => {
-        return ssoSessionRepository.filter(s => s.id !== session.id).map(() => undefined);
-    };
+    // The session-list write goes first: it is what notifies the subscription
+    // above to unsubscribe and dispose the live session.
+    const purgeSession = (sessionId) => ssoSessionRepository
+        .filter(s => s.id !== sessionId)
+        .andThen(() => ResultAsync.combine([
+        userSecretRepository.clear(sessionId),
+        allowanceRepository.clearSession(sessionId),
+        storage.clear(processedMessagesKey(sessionId)),
+    ]))
+        .map(() => undefined);
     ssoSessionRepository.subscribe(userSessions => {
         const activeSessions = localSessions.read();
         const toRemove = new Set(Object.keys(activeSessions));
@@ -36,7 +43,7 @@ export function createSsoSessionManager({ ssoSessionRepository, userSecretReposi
                     case 'v1': {
                         switch (message.data.value.tag) {
                             case 'Disconnected':
-                                return disconnect(userSession).map(() => true);
+                                return purgeSession(userSession.id).map(() => false);
                         }
                     }
                 }
@@ -76,9 +83,18 @@ export function createSsoSessionManager({ ssoSessionRepository, userSecretReposi
             const session = createSession(userSession, statementStore, storage, userSecretRepository, allowanceRepository, identityRepository);
             return session
                 .sendDisconnectMessage()
-                .andThen(() => disconnect(userSession))
-                .andThen(() => userSecretRepository.clear(userSession.id))
-                .andThen(() => allowanceRepository.clearSession(userSession.id));
+                .orElse(error => {
+                console.warn('[host-papp] disconnect: peer notification failed, tearing down locally anyway', error);
+                return okAsync(undefined);
+            })
+                .andTee(() => session.dispose())
+                .andThen(() => purgeSession(userSession.id));
+        },
+        /**
+         * Teardown by id alone, without notifying the peer.
+         * */
+        forget(sessionId) {
+            return purgeSession(sessionId);
         },
         dispose() {
             for (const session of Object.values(localSessions.read())) {

package/dist/sso/sessionManager/scale/remoteMessage.d.ts

@@ -67,6 +67,13 @@ export declare const RemoteMessageCodec: import("scale-ts").Codec<{
             tag: "RingVrfAliasRequest";
             value: {
                 callingProductId: string;
+                keyHandle: [string, {
+                    tag: "Index";
+                    value: number;
+                } | {
+                    tag: "Raw";
+                    value: Uint8Array<ArrayBufferLike>;
+                }];
                 context: [string, {
                     tag: "Index";
                     value: number;
@@ -94,7 +101,7 @@ export declare const RemoteMessageCodec: import("scale-ts").Codec<{
                     alias: Uint8Array<ArrayBufferLike>;
                 }, import("@novasamatech/scale").CodecError<undefined, "GetAliasErr::Rejected"> | import("@novasamatech/scale").CodecError<{
                     reason: string;
-                }, "GetAliasErr::Unknown"> | import("@novasamatech/scale").CodecError<undefined, "GetAliasErr::RingNotFound"> | import("@novasamatech/scale").CodecError<undefined, "GetAliasErr::NotMember">>;
+                }, "GetAliasErr::Unknown"> | import("@novasamatech/scale").CodecError<undefined, "GetAliasErr::RingNotFound"> | import("@novasamatech/scale").CodecError<undefined, "GetAliasErr::NotMember"> | import("@novasamatech/scale").CodecError<undefined, "GetAliasErr::KeyNotRegistered"> | import("@novasamatech/scale").CodecError<undefined, "GetAliasErr::KeyNotInRing">>;
             };
         } | {
             tag: "ResourceAllocationRequest";
@@ -142,6 +149,7 @@ export declare const RemoteMessageCodec: import("scale-ts").Codec<{
                         tag: "AutoSigning";
                         value: {
                             productRootPrivateKey: Uint8Array<ArrayBufferLike>;
+                            ringVrfDomainEntropy: Uint8Array<ArrayBufferLike>;
                         };
                     } | {
                         tag: "BulletInAllowance";
@@ -224,6 +232,13 @@ export declare const RemoteMessageCodec: import("scale-ts").Codec<{
             tag: "RingVrfProofRequest";
             value: {
                 callingProductId: string;
+                keyHandle: [string, {
+                    tag: "Index";
+                    value: number;
+                } | {
+                    tag: "Raw";
+                    value: Uint8Array<ArrayBufferLike>;
+                }];
                 context: [string, {
                     tag: "Index";
                     value: number;
@@ -257,7 +272,7 @@ export declare const RemoteMessageCodec: import("scale-ts").Codec<{
                     ringRevision: number;
                 }, import("@novasamatech/scale").CodecError<undefined, "CreateProofErr::Rejected"> | import("@novasamatech/scale").CodecError<{
                     reason: string;
-                }, "CreateProofErr::Unknown"> | import("@novasamatech/scale").CodecError<undefined, "CreateProofErr::RingNotFound"> | import("@novasamatech/scale").CodecError<undefined, "CreateProofErr::NotMember">>;
+                }, "CreateProofErr::Unknown"> | import("@novasamatech/scale").CodecError<undefined, "CreateProofErr::RingNotFound"> | import("@novasamatech/scale").CodecError<undefined, "CreateProofErr::NotMember"> | import("@novasamatech/scale").CodecError<undefined, "CreateProofErr::KeyNotRegistered"> | import("@novasamatech/scale").CodecError<undefined, "CreateProofErr::KeyNotInRing"> | import("@novasamatech/scale").CodecError<undefined, "CreateProofErr::NotAllowlisted">>;
             };
         } | {
             tag: "SignVrfRequest";
@@ -300,6 +315,91 @@ export declare const RemoteMessageCodec: import("scale-ts").Codec<{
                     productPublicKey: Uint8Array<ArrayBufferLike>;
                 }, string>;
             };
+        } | {
+            tag: "RegisterRingVrfKeyRequest";
+            value: {
+                callingProductId: string;
+                index: {
+                    tag: "Index";
+                    value: number;
+                } | {
+                    tag: "Raw";
+                    value: Uint8Array<ArrayBufferLike>;
+                };
+                ring: {
+                    chainId: `0x${string}`;
+                    junctions: ({
+                        tag: "PalletInstance";
+                        value: number;
+                    } | {
+                        tag: "CollectionId";
+                        value: Uint8Array<ArrayBufferLike>;
+                    })[];
+                };
+            };
+        } | {
+            tag: "RegisterRingVrfKeyResponse";
+            value: {
+                respondingTo: string;
+                payload: import("scale-ts").ResultPayload<Uint8Array<ArrayBufferLike>, import("@novasamatech/scale").CodecError<undefined, "RegisterRingVrfKeyErr::NotConnected"> | import("@novasamatech/scale").CodecError<undefined, "RegisterRingVrfKeyErr::Rejected"> | import("@novasamatech/scale").CodecError<{
+                    reason: string;
+                }, "RegisterRingVrfKeyErr::Unknown"> | import("@novasamatech/scale").CodecError<undefined, "RegisterRingVrfKeyErr::RingNotFound">>;
+            };
+        } | {
+            tag: "ListRingVrfKeysRequest";
+            value: {
+                callingProductId: string;
+                owner: string;
+                disclosure: "Anonymized" | "PublicKey";
+            };
+        } | {
+            tag: "ListRingVrfKeysResponse";
+            value: {
+                respondingTo: string;
+                payload: import("scale-ts").ResultPayload<{
+                    handle: [string, {
+                        tag: "Index";
+                        value: number;
+                    } | {
+                        tag: "Raw";
+                        value: Uint8Array<ArrayBufferLike>;
+                    }];
+                    rings: {
+                        chainId: `0x${string}`;
+                        junctions: ({
+                            tag: "PalletInstance";
+                            value: number;
+                        } | {
+                            tag: "CollectionId";
+                            value: Uint8Array<ArrayBufferLike>;
+                        })[];
+                    }[];
+                    publicKey: Uint8Array<ArrayBufferLike> | undefined;
+                }[], import("@novasamatech/scale").CodecError<undefined, "ListRingVrfKeysErr::NotConnected"> | import("@novasamatech/scale").CodecError<undefined, "ListRingVrfKeysErr::Rejected"> | import("@novasamatech/scale").CodecError<{
+                    reason: string;
+                }, "ListRingVrfKeysErr::Unknown">>;
+            };
+        } | {
+            tag: "RingVrfSignRequest";
+            value: {
+                callingProductId: string;
+                keyHandle: [string, {
+                    tag: "Index";
+                    value: number;
+                } | {
+                    tag: "Raw";
+                    value: Uint8Array<ArrayBufferLike>;
+                }];
+                message: Uint8Array<ArrayBufferLike>;
+            };
+        } | {
+            tag: "RingVrfSignResponse";
+            value: {
+                respondingTo: string;
+                payload: import("scale-ts").ResultPayload<Uint8Array<ArrayBufferLike>, import("@novasamatech/scale").CodecError<undefined, "RingVrfSignErr::NotConnected"> | import("@novasamatech/scale").CodecError<undefined, "RingVrfSignErr::Rejected"> | import("@novasamatech/scale").CodecError<{
+                    reason: string;
+                }, "RingVrfSignErr::Unknown"> | import("@novasamatech/scale").CodecError<undefined, "RingVrfSignErr::KeyNotRegistered"> | import("@novasamatech/scale").CodecError<undefined, "RingVrfSignErr::NotAllowlisted">>;
+            };
         };
     };
 }>;

package/dist/sso/sessionManager/scale/remoteMessage.js

@@ -3,7 +3,8 @@ import { Struct, _void, str } from 'scale-ts';
 import { CreateTransactionLegacyRequestCodec, CreateTransactionRequestCodec, CreateTransactionResponseCodec, } from './createTransaction.js';
 import { ProductSubtreeRequestCodec, ProductSubtreeResponseCodec } from './productSubtree.js';
 import { ResourceAllocationRequestCodec, ResourceAllocationResponseCodec } from './resourceAllocation.js';
-import { RingVrfAliasRequestCodec, RingVrfAliasResponseCodec, RingVrfProofRequestCodec, RingVrfProofResponseCodec, } from './ringVrf.js';
+import { RingVrfAliasRequestCodec, RingVrfAliasResponseCodec, RingVrfProofRequestCodec, RingVrfProofResponseCodec, RingVrfSignRequestCodec, RingVrfSignResponseCodec, } from './ringVrf.js';
+import { ListRingVrfKeysRequestCodec, ListRingVrfKeysResponseCodec, RegisterRingVrfKeyRequestCodec, RegisterRingVrfKeyResponseCodec, } from './ringVrfKeys.js';
 import { SignVrfRequestCodec, SignVrfResponseCodec } from './signVrf.js';
 import { SignRawLegacyRequestCodec, SignRawLegacyResponseCodec, SigningRequestCodec, SigningResponseCodec, } from './signing.js';
 export const RemoteMessageCodec = Struct({
@@ -31,6 +32,15 @@ export const RemoteMessageCodec = Struct({
             // RFC-0022 additions — appended so existing variant indexes stay stable.
             ProductSubtreeRequest: ProductSubtreeRequestCodec,
             ProductSubtreeResponse: ProductSubtreeResponseCodec,
+            // RFC-0024 additions — likewise appended. `RingVrfAliasRequest` and
+            // `RingVrfProofRequest` above gained a `keyHandle` field in place rather
+            // than being re-added here, since a handle is now mandatory on both.
+            RegisterRingVrfKeyRequest: RegisterRingVrfKeyRequestCodec,
+            RegisterRingVrfKeyResponse: RegisterRingVrfKeyResponseCodec,
+            ListRingVrfKeysRequest: ListRingVrfKeysRequestCodec,
+            ListRingVrfKeysResponse: ListRingVrfKeysResponseCodec,
+            RingVrfSignRequest: RingVrfSignRequestCodec,
+            RingVrfSignResponse: RingVrfSignResponseCodec,
         }),
     }),
 });

package/dist/sso/sessionManager/scale/resourceAllocation.d.ts

@@ -32,6 +32,7 @@ export declare const ApAllocatedResourceCodec: import("scale-ts").Codec<{
     tag: "AutoSigning";
     value: {
         productRootPrivateKey: Uint8Array<ArrayBufferLike>;
+        ringVrfDomainEntropy: Uint8Array<ArrayBufferLike>;
     };
 } | {
     tag: "BulletInAllowance";
@@ -57,6 +58,7 @@ export declare const ApAllocationOutcomeCodec: import("scale-ts").Codec<{
         tag: "AutoSigning";
         value: {
             productRootPrivateKey: Uint8Array<ArrayBufferLike>;
+            ringVrfDomainEntropy: Uint8Array<ArrayBufferLike>;
         };
     } | {
         tag: "BulletInAllowance";
@@ -113,6 +115,7 @@ export declare const ResourceAllocationResponseCodec: import("scale-ts").Codec<{
             tag: "AutoSigning";
             value: {
                 productRootPrivateKey: Uint8Array<ArrayBufferLike>;
+                ringVrfDomainEntropy: Uint8Array<ArrayBufferLike>;
             };
         } | {
             tag: "BulletInAllowance";

package/dist/sso/sessionManager/scale/resourceAllocation.js

@@ -23,6 +23,17 @@ export const ApAllocatedResourceCodec = Enum({
         // `Sr25519PrivateKey ++ Sr25519Nonce` (64 bytes): the full expanded secret
         // needed to sign and soft-derive `/{index}` below the product root.
         productRootPrivateKey: Bytes(),
+        // RFC-0024: entropy of the `//{productId}` node of the ring VRF tree, which
+        // is disjoint from the sr25519 product-account tree above. It lets the Host
+        // derive the member secret of a *registered* key locally — the second
+        // motivation being that a headless Account Holder execution context may not
+        // fit a ring VRF proof inside its ~30 s / ~24 MB budget.
+        //
+        // Derivation from this entropy is unconditional arithmetic: nothing about
+        // holding it distinguishes a meaningful index from a meaningless one, so the
+        // registry supplies that distinction. A Host MUST NOT derive a member secret
+        // for a `(product, index)` pair absent from its registry.
+        ringVrfDomainEntropy: Bytes(),
     }),
 });
 export const ApAllocationOutcomeCodec = Enum({

package/dist/sso/sessionManager/scale/ringVrf.d.ts

@@ -2,6 +2,13 @@ import type { CodecType } from 'scale-ts';
 export type RingVrfAliasRequest = CodecType<typeof RingVrfAliasRequestCodec>;
 export declare const RingVrfAliasRequestCodec: import("scale-ts").Codec<{
     callingProductId: string;
+    keyHandle: [string, {
+        tag: "Index";
+        value: number;
+    } | {
+        tag: "Raw";
+        value: Uint8Array<ArrayBufferLike>;
+    }];
     context: [string, {
         tag: "Index";
         value: number;
@@ -28,11 +35,18 @@ export declare const RingVrfAliasResponseCodec: import("scale-ts").Codec<{
         alias: Uint8Array<ArrayBufferLike>;
     }, import("@novasamatech/scale").CodecError<undefined, "GetAliasErr::Rejected"> | import("@novasamatech/scale").CodecError<{
         reason: string;
-    }, "GetAliasErr::Unknown"> | import("@novasamatech/scale").CodecError<undefined, "GetAliasErr::RingNotFound"> | import("@novasamatech/scale").CodecError<undefined, "GetAliasErr::NotMember">>;
+    }, "GetAliasErr::Unknown"> | import("@novasamatech/scale").CodecError<undefined, "GetAliasErr::RingNotFound"> | import("@novasamatech/scale").CodecError<undefined, "GetAliasErr::NotMember"> | import("@novasamatech/scale").CodecError<undefined, "GetAliasErr::KeyNotRegistered"> | import("@novasamatech/scale").CodecError<undefined, "GetAliasErr::KeyNotInRing">>;
 }>;
 export type RingVrfProofRequest = CodecType<typeof RingVrfProofRequestCodec>;
 export declare const RingVrfProofRequestCodec: import("scale-ts").Codec<{
     callingProductId: string;
+    keyHandle: [string, {
+        tag: "Index";
+        value: number;
+    } | {
+        tag: "Raw";
+        value: Uint8Array<ArrayBufferLike>;
+    }];
     context: [string, {
         tag: "Index";
         value: number;
@@ -65,5 +79,32 @@ export declare const RingVrfProofResponseCodec: import("scale-ts").Codec<{
         ringRevision: number;
     }, import("@novasamatech/scale").CodecError<undefined, "CreateProofErr::Rejected"> | import("@novasamatech/scale").CodecError<{
         reason: string;
-    }, "CreateProofErr::Unknown"> | import("@novasamatech/scale").CodecError<undefined, "CreateProofErr::RingNotFound"> | import("@novasamatech/scale").CodecError<undefined, "CreateProofErr::NotMember">>;
+    }, "CreateProofErr::Unknown"> | import("@novasamatech/scale").CodecError<undefined, "CreateProofErr::RingNotFound"> | import("@novasamatech/scale").CodecError<undefined, "CreateProofErr::NotMember"> | import("@novasamatech/scale").CodecError<undefined, "CreateProofErr::KeyNotRegistered"> | import("@novasamatech/scale").CodecError<undefined, "CreateProofErr::KeyNotInRing"> | import("@novasamatech/scale").CodecError<undefined, "CreateProofErr::NotAllowlisted">>;
+}>;
+/**
+ * Host → Account Holder request for a plain signature by the ring VRF member key
+ * itself (RFC-0024 `ring_vrf_sign`), rather than an anonymous ring proof.
+ *
+ * Carries no context and no ring: the signature derives no alias and proves no
+ * membership, so there is nothing for either to scope. It is verified against
+ * the member public key and is therefore linkable to every other use of the key.
+ */
+export type RingVrfSignRequest = CodecType<typeof RingVrfSignRequestCodec>;
+export declare const RingVrfSignRequestCodec: import("scale-ts").Codec<{
+    callingProductId: string;
+    keyHandle: [string, {
+        tag: "Index";
+        value: number;
+    } | {
+        tag: "Raw";
+        value: Uint8Array<ArrayBufferLike>;
+    }];
+    message: Uint8Array<ArrayBufferLike>;
+}>;
+export type RingVrfSignResponse = CodecType<typeof RingVrfSignResponseCodec>;
+export declare const RingVrfSignResponseCodec: import("scale-ts").Codec<{
+    respondingTo: string;
+    payload: import("scale-ts").ResultPayload<Uint8Array<ArrayBufferLike>, import("@novasamatech/scale").CodecError<undefined, "RingVrfSignErr::NotConnected"> | import("@novasamatech/scale").CodecError<undefined, "RingVrfSignErr::Rejected"> | import("@novasamatech/scale").CodecError<{
+        reason: string;
+    }, "RingVrfSignErr::Unknown"> | import("@novasamatech/scale").CodecError<undefined, "RingVrfSignErr::KeyNotRegistered"> | import("@novasamatech/scale").CodecError<undefined, "RingVrfSignErr::NotAllowlisted">>;
 }>;

package/dist/sso/sessionManager/scale/ringVrf.js

@@ -1,8 +1,9 @@
-import { ContextualAlias, CreateProofErr, DotNsIdentifier, GetAliasErr, ProductProofContext, RingLocation, RingVrfProof, } from '@novasamatech/host-api';
+import { ContextualAlias, CreateProofErr, DotNsIdentifier, GetAliasErr, ProductProofContext, RingLocation, RingVrfKeyHandle, RingVrfProof, RingVrfSignErr, } from '@novasamatech/host-api';
 import { Bytes } from '@novasamatech/scale';
 import { Result, Struct, str } from 'scale-ts';
 export const RingVrfAliasRequestCodec = Struct({
     callingProductId: DotNsIdentifier,
+    keyHandle: RingVrfKeyHandle,
     context: ProductProofContext,
     ring: RingLocation,
 });
@@ -12,6 +13,7 @@ export const RingVrfAliasResponseCodec = Struct({
 });
 export const RingVrfProofRequestCodec = Struct({
     callingProductId: DotNsIdentifier,
+    keyHandle: RingVrfKeyHandle,
     context: ProductProofContext,
     ring: RingLocation,
     message: Bytes(),
@@ -20,3 +22,12 @@ export const RingVrfProofResponseCodec = Struct({
     respondingTo: str,
     payload: Result(RingVrfProof, CreateProofErr),
 });
+export const RingVrfSignRequestCodec = Struct({
+    callingProductId: DotNsIdentifier,
+    keyHandle: RingVrfKeyHandle,
+    message: Bytes(),
+});
+export const RingVrfSignResponseCodec = Struct({
+    respondingTo: str,
+    payload: Result(Bytes(), RingVrfSignErr),
+});

package/dist/sso/sessionManager/scale/ringVrfKeys.d.ts

@@ -0,0 +1,85 @@
+import type { CodecType } from 'scale-ts';
+/**
+ * Host → Account Holder registration of a key the calling product owns.
+ *
+ * Ownership is `callingProductId` and is never chosen by the caller, so this is
+ * consent-free. Registration is idempotent: re-registering an `index` for an
+ * additional `ring` extends the existing entry rather than creating a second
+ * one, so re-notifying the phone about an entry it already has costs nothing.
+ *
+ * A Host holding the product's ring VRF domain entropy (see `AutoSigning` in
+ * `resourceAllocation.ts`) answers immediately and mirrors this fire-and-forget;
+ * without the entropy it issues the request and waits.
+ *
+ * > A Host MUST NOT derive a member secret for a `(product, index)` pair absent
+ * > from its registry. Domain entropy makes derivation unconditional — only
+ * > registration, which always reaches the phone, brings a key into existence.
+ */
+export type RegisterRingVrfKeyRequest = CodecType<typeof RegisterRingVrfKeyRequestCodec>;
+export declare const RegisterRingVrfKeyRequestCodec: import("scale-ts").Codec<{
+    callingProductId: string;
+    index: {
+        tag: "Index";
+        value: number;
+    } | {
+        tag: "Raw";
+        value: Uint8Array<ArrayBufferLike>;
+    };
+    ring: {
+        chainId: `0x${string}`;
+        junctions: ({
+            tag: "PalletInstance";
+            value: number;
+        } | {
+            tag: "CollectionId";
+            value: Uint8Array<ArrayBufferLike>;
+        })[];
+    };
+}>;
+export type RegisterRingVrfKeyResponse = CodecType<typeof RegisterRingVrfKeyResponseCodec>;
+export declare const RegisterRingVrfKeyResponseCodec: import("scale-ts").Codec<{
+    respondingTo: string;
+    payload: import("scale-ts").ResultPayload<Uint8Array<ArrayBufferLike>, import("@novasamatech/scale").CodecError<undefined, "RegisterRingVrfKeyErr::NotConnected"> | import("@novasamatech/scale").CodecError<undefined, "RegisterRingVrfKeyErr::Rejected"> | import("@novasamatech/scale").CodecError<{
+        reason: string;
+    }, "RegisterRingVrfKeyErr::Unknown"> | import("@novasamatech/scale").CodecError<undefined, "RegisterRingVrfKeyErr::RingNotFound">>;
+}>;
+/**
+ * Host → Account Holder listing of the registry entries owned by `owner`.
+ *
+ * `owner` may be `callingProductId` — permissionless — or another product, in
+ * which case the caller needs a grant. `PublicKey` disclosure additionally
+ * returns the member public key, which is linkable across every ring it appears
+ * in and so is permissioned cross-product even though the handle is not.
+ */
+export type ListRingVrfKeysRequest = CodecType<typeof ListRingVrfKeysRequestCodec>;
+export declare const ListRingVrfKeysRequestCodec: import("scale-ts").Codec<{
+    callingProductId: string;
+    owner: string;
+    disclosure: "Anonymized" | "PublicKey";
+}>;
+export type ListRingVrfKeysResponse = CodecType<typeof ListRingVrfKeysResponseCodec>;
+export declare const ListRingVrfKeysResponseCodec: import("scale-ts").Codec<{
+    respondingTo: string;
+    payload: import("scale-ts").ResultPayload<{
+        handle: [string, {
+            tag: "Index";
+            value: number;
+        } | {
+            tag: "Raw";
+            value: Uint8Array<ArrayBufferLike>;
+        }];
+        rings: {
+            chainId: `0x${string}`;
+            junctions: ({
+                tag: "PalletInstance";
+                value: number;
+            } | {
+                tag: "CollectionId";
+                value: Uint8Array<ArrayBufferLike>;
+            })[];
+        }[];
+        publicKey: Uint8Array<ArrayBufferLike> | undefined;
+    }[], import("@novasamatech/scale").CodecError<undefined, "ListRingVrfKeysErr::NotConnected"> | import("@novasamatech/scale").CodecError<undefined, "ListRingVrfKeysErr::Rejected"> | import("@novasamatech/scale").CodecError<{
+        reason: string;
+    }, "ListRingVrfKeysErr::Unknown">>;
+}>;

package/dist/sso/sessionManager/scale/ringVrfKeys.js

@@ -0,0 +1,22 @@
+import { DerivationIndex, DotNsIdentifier, ListRingVrfKeysErr, RegisterRingVrfKeyErr, RegisteredRingVrfKey, RingLocation, RingVrfKeyDisclosure, RingVrfPublicKey, } from '@novasamatech/host-api';
+import { Result, Struct, Vector, str } from 'scale-ts';
+export const RegisterRingVrfKeyRequestCodec = Struct({
+    callingProductId: DotNsIdentifier,
+    index: DerivationIndex,
+    ring: RingLocation,
+});
+export const RegisterRingVrfKeyResponseCodec = Struct({
+    // referencing to RemoteMessage.messageId
+    respondingTo: str,
+    payload: Result(RingVrfPublicKey, RegisterRingVrfKeyErr),
+});
+export const ListRingVrfKeysRequestCodec = Struct({
+    callingProductId: DotNsIdentifier,
+    owner: DotNsIdentifier,
+    disclosure: RingVrfKeyDisclosure,
+});
+export const ListRingVrfKeysResponseCodec = Struct({
+    // referencing to RemoteMessage.messageId
+    respondingTo: str,
+    payload: Result(Vector(RegisteredRingVrfKey), ListRingVrfKeysErr),
+});

package/dist/sso/sessionManager/userSession.d.ts

@@ -1,4 +1,4 @@
-import { ContextualAlias, ProductProofContext, RingLocation, RingVrfProof, VrfSignature } from '@novasamatech/host-api';
+import { ContextualAlias, DerivationIndex, ProductProofContext, RegisteredRingVrfKey, RingLocation, RingVrfKeyDisclosure, RingVrfKeyHandle, RingVrfProof, VrfSignature } from '@novasamatech/host-api';
 import type { Encryption, StatementProver, StatementStoreAdapter } from '@novasamatech/statement-store';
 import type { StorageAdapter } from '@novasamatech/storage-adapter';
 import { ResultAsync } from 'neverthrow';
@@ -12,6 +12,7 @@ import { RemoteMessageCodec } from './scale/remoteMessage.js';
 import type { ApAllocationOutcome, ResourceAllocationRequest } from './scale/resourceAllocation.js';
 import type { SignVrfRequest } from './scale/signVrf.js';
 import type { SignRawLegacyRequest, SigningPayloadRequest, SigningPayloadResponseData, SigningRawRequest } from './scale/signing.js';
+export declare const processedMessagesKey: (sessionId: string) => string;
 export type UserSession = StoredUserSession & {
     /** Read this session's persisted allowance slot-account key for a product/resource. */
     readAllowance(productId: string, resource: AllowanceResourceKind): ResultAsync<Uint8Array | null, Error>;
@@ -24,8 +25,27 @@ export type UserSession = StoredUserSession & {
     signRawLegacy(payload: SignRawLegacyRequest): ResultAsync<Uint8Array, Error>;
     createTransaction(payload: CreateTransactionRequest): ResultAsync<Uint8Array, Error>;
     createTransactionLegacy(payload: CreateTransactionLegacyRequest): ResultAsync<Uint8Array, Error>;
-    getRingVrfAlias(callingProductId: string, context: CodecType<typeof ProductProofContext>, ring: CodecType<typeof RingLocation>): ResultAsync<CodecType<typeof ContextualAlias>, Error>;
-    createRingVrfProof(callingProductId: string, context: CodecType<typeof ProductProofContext>, ring: CodecType<typeof RingLocation>, message: Uint8Array): ResultAsync<CodecType<typeof RingVrfProof>, Error>;
+    getRingVrfAlias(callingProductId: string, keyHandle: CodecType<typeof RingVrfKeyHandle>, context: CodecType<typeof ProductProofContext>, ring: CodecType<typeof RingLocation>): ResultAsync<CodecType<typeof ContextualAlias>, Error>;
+    createRingVrfProof(callingProductId: string, keyHandle: CodecType<typeof RingVrfKeyHandle>, context: CodecType<typeof ProductProofContext>, ring: CodecType<typeof RingLocation>, message: Uint8Array): ResultAsync<CodecType<typeof RingVrfProof>, Error>;
+    /**
+     * Signs `message` with the ring VRF member key itself (RFC-0024).
+     *
+     * Unlike {@link createRingVrfProof} this is not anonymous: the result is
+     * verified against the member public key and is linkable to every other use
+     * of that key.
+     */
+    ringVrfSign(callingProductId: string, keyHandle: CodecType<typeof RingVrfKeyHandle>, message: Uint8Array): ResultAsync<Uint8Array, Error>;
+    /**
+     * Registers a ring VRF key owned by `callingProductId` against `ring`,
+     * returning the member public key (RFC-0024).
+     *
+     * The Account Holder is the authoritative registry, so registration always
+     * reaches it. Idempotent — re-registering an index for an additional ring
+     * extends the existing entry.
+     */
+    registerRingVrfKey(callingProductId: string, index: CodecType<typeof DerivationIndex>, ring: CodecType<typeof RingLocation>): ResultAsync<Uint8Array, Error>;
+    /** Lists the ring VRF registry entries owned by `owner` (RFC-0024). */
+    listRingVrfKeys(callingProductId: string, owner: string, disclosure: CodecType<typeof RingVrfKeyDisclosure>): ResultAsync<CodecType<typeof RegisteredRingVrfKey>[], Error>;
     /**
      * Fetches the sr25519 public key of `//product//{productId}` (RFC-0022).
      *

package/dist/sso/sessionManager/userSession.js

@@ -1,4 +1,4 @@
-import { ContextualAlias, ProductProofContext, RingLocation, RingVrfProof, VrfSignature } from '@novasamatech/host-api';
+import { ContextualAlias, DerivationIndex, ProductProofContext, RegisteredRingVrfKey, RingLocation, RingVrfKeyDisclosure, RingVrfKeyHandle, RingVrfProof, VrfSignature, } from '@novasamatech/host-api';
 import { enumValue } from '@novasamatech/scale';
 import { createSession } from '@novasamatech/statement-store';
 import { fieldListView } from '@novasamatech/storage-adapter';
@@ -16,6 +16,8 @@ import { RemoteMessageCodec } from './scale/remoteMessage.js';
 const QUEUE_TASK_TIMEOUT_MS = 240_000;
 // Mobile SSO statements allow 500 KiB total; keep headroom for statement/session overhead.
 const MAX_SSO_REQUEST_SIZE = 498 * 1024;
+// Per-session dedup log of already-handled peer message ids.
+export const processedMessagesKey = (sessionId) => `sso_processed_${sessionId}`;
 function withQueueTimeout(resultAsync, label) {
     const timeoutPromise = new Promise(resolve => setTimeout(() => resolve(err(new Error(`${label} timed out — queue freed`))), QUEUE_TASK_TIMEOUT_MS));
     return ResultAsync.fromPromise(Promise.race([resultAsync, timeoutPromise]), toError).andThen(r => r);
@@ -106,7 +108,7 @@ export function createUserSession({ userSession, statementStore, encryption, sto
     });
     const processedMessages = fieldListView({
         storage,
-        key: `sso_processed_${userSession.id}`,
+        key: processedMessagesKey(userSession.id),
         from: JSON.parse,
         to: JSON.stringify,
     });
@@ -244,11 +246,12 @@ export function createUserSession({ userSession, statementStore, encryption, sto
                 return withHostActionTrace(withQueueTimeout(inner, 'createTransactionLegacy'), messageId, userSession.id);
             });
         },
-        getRingVrfAlias(callingProductId, context, ring) {
+        getRingVrfAlias(callingProductId, keyHandle, context, ring) {
             return enqueue(() => {
                 const messageId = nanoid();
                 const data = enumValue('v1', enumValue('RingVrfAliasRequest', {
                     callingProductId,
+                    keyHandle,
                     context,
                     ring,
                 }));
@@ -265,11 +268,12 @@ export function createUserSession({ userSession, statementStore, encryption, sto
                 return withHostActionTrace(awaitReplyOrAckFailure(request, reply).andThen(result => result.success ? ok(result.value) : err(result.value)), messageId, userSession.id);
             });
         },
-        createRingVrfProof(callingProductId, context, ring, message) {
+        createRingVrfProof(callingProductId, keyHandle, context, ring, message) {
             return enqueue(() => {
                 const messageId = nanoid();
                 const data = enumValue('v1', enumValue('RingVrfProofRequest', {
                     callingProductId,
+                    keyHandle,
                     context,
                     ring,
                     message,
@@ -287,6 +291,60 @@ export function createUserSession({ userSession, statementStore, encryption, sto
                 return withHostActionTrace(awaitReplyOrAckFailure(request, reply).andThen(result => result.success ? ok(result.value) : err(result.value)), messageId, userSession.id);
             });
         },
+        ringVrfSign(callingProductId, keyHandle, message) {
+            return enqueue(() => {
+                const messageId = nanoid();
+                const data = enumValue('v1', enumValue('RingVrfSignRequest', { callingProductId, keyHandle, message }));
+                emitHostAction(messageId, actionKindFromMessageData(data), userSession.id);
+                const responseFilter = (incoming) => {
+                    if (incoming.data.tag === 'v1' &&
+                        incoming.data.value.tag === 'RingVrfSignResponse' &&
+                        incoming.data.value.value.respondingTo === messageId) {
+                        return incoming.data.value.value.payload;
+                    }
+                };
+                const request = session.request(RemoteMessageCodec, { messageId, data });
+                const reply = session.waitForRequestMessage(RemoteMessageCodec, responseFilter);
+                const inner = awaitReplyOrAckFailure(request, reply).andThen(result => result.success ? ok(result.value) : err(result.value));
+                return withHostActionTrace(withQueueTimeout(inner, 'ringVrfSign'), messageId, userSession.id);
+            });
+        },
+        registerRingVrfKey(callingProductId, index, ring) {
+            return enqueue(() => {
+                const messageId = nanoid();
+                const data = enumValue('v1', enumValue('RegisterRingVrfKeyRequest', { callingProductId, index, ring }));
+                emitHostAction(messageId, actionKindFromMessageData(data), userSession.id);
+                const responseFilter = (incoming) => {
+                    if (incoming.data.tag === 'v1' &&
+                        incoming.data.value.tag === 'RegisterRingVrfKeyResponse' &&
+                        incoming.data.value.value.respondingTo === messageId) {
+                        return incoming.data.value.value.payload;
+                    }
+                };
+                const request = session.request(RemoteMessageCodec, { messageId, data });
+                const reply = session.waitForRequestMessage(RemoteMessageCodec, responseFilter);
+                const inner = awaitReplyOrAckFailure(request, reply).andThen(result => result.success ? ok(result.value) : err(result.value));
+                return withHostActionTrace(withQueueTimeout(inner, 'registerRingVrfKey'), messageId, userSession.id);
+            });
+        },
+        listRingVrfKeys(callingProductId, owner, disclosure) {
+            return enqueue(() => {
+                const messageId = nanoid();
+                const data = enumValue('v1', enumValue('ListRingVrfKeysRequest', { callingProductId, owner, disclosure }));
+                emitHostAction(messageId, actionKindFromMessageData(data), userSession.id);
+                const responseFilter = (incoming) => {
+                    if (incoming.data.tag === 'v1' &&
+                        incoming.data.value.tag === 'ListRingVrfKeysResponse' &&
+                        incoming.data.value.value.respondingTo === messageId) {
+                        return incoming.data.value.value.payload;
+                    }
+                };
+                const request = session.request(RemoteMessageCodec, { messageId, data });
+                const reply = session.waitForRequestMessage(RemoteMessageCodec, responseFilter);
+                const inner = awaitReplyOrAckFailure(request, reply).andThen(result => result.success ? ok(result.value) : err(result.value));
+                return withHostActionTrace(withQueueTimeout(inner, 'listRingVrfKeys'), messageId, userSession.id);
+            });
+        },
         getProductSubtree(productId) {
             return enqueue(() => {
                 const messageId = nanoid();

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@novasamatech/host-papp",
   "type": "module",
-  "version": "0.9.2",
+  "version": "0.9.4",
   "description": "Polkadot app integration",
   "license": "Apache-2.0",
   "repository": {
@@ -38,10 +38,10 @@
     "@noble/ciphers": "2.2.0",
     "@noble/curves": "2.2.0",
     "@noble/hashes": "2.2.0",
-    "@novasamatech/host-api": "0.9.2",
-    "@novasamatech/scale": "0.9.2",
-    "@novasamatech/statement-store": "0.9.2",
-    "@novasamatech/storage-adapter": "0.9.2",
+    "@novasamatech/host-api": "0.9.4",
+    "@novasamatech/scale": "0.9.4",
+    "@novasamatech/statement-store": "0.9.4",
+    "@novasamatech/storage-adapter": "0.9.4",
     "@polkadot-api/utils": "^0.4.0",
     "@polkadot-labs/hdkd-helpers": "^0.0.31",
     "nanoevents": "10.0.0",