@parity/product-deploy 0.7.28 → 0.7.30-rc.0

package/dist/dotns.js

@@ -24,6 +24,7 @@ import {
   WS_HEARTBEAT_TIMEOUT_MS,
   __formatContractDryRunFailureForTest,
   canRegister,
+  classifyAliasAccountRow,
   classifyDotnsLabel,
   classifyTxRetryDecision,
   computeDomainTokenId,
@@ -47,11 +48,11 @@ import {
   stripTrailingDigits,
   validateDomainLabel,
   verifyNonceAdvanced
-} from "./chunk-6Y3XJGV7.js";
-import "./chunk-Y7XKC43A.js";
-import "./chunk-LFKP64TQ.js";
-import "./chunk-37M4NISG.js";
-import "./chunk-HZKRLQLG.js";
+} from "./chunk-MZ4Z5AXI.js";
+import "./chunk-FIKBEVYL.js";
+import "./chunk-YP6AS724.js";
+import "./chunk-2WWR3DVD.js";
+import "./chunk-GL2HHK4G.js";
 import "./chunk-ZOC4GITL.js";
 export {
   ATTR_TX_RESOLUTION_KIND,
@@ -79,6 +80,7 @@ export {
   WS_HEARTBEAT_TIMEOUT_MS,
   __formatContractDryRunFailureForTest,
   canRegister,
+  classifyAliasAccountRow,
   classifyDotnsLabel,
   classifyTxRetryDecision,
   computeDomainTokenId,

package/dist/environments.js

@@ -8,7 +8,7 @@ import {
   loadEnvironments,
   resolveEndpoints,
   validateContractAddresses
-} from "./chunk-HZKRLQLG.js";
+} from "./chunk-GL2HHK4G.js";
 import "./chunk-ZOC4GITL.js";
 export {
   DEFAULT_ENV_ID,

package/dist/index.d.ts

@@ -21,3 +21,4 @@ import './personhood/bootstrap.js';
 import './personhood/bind-personal-id.js';
 import './personhood/claim-pgas.js';
 import './personhood/bind-paid-alias.js';
+import './personhood/chain-prereqs.js';

package/dist/index.js

@@ -7,7 +7,7 @@ import {
 } from "./chunk-MMAZFJDG.js";
 import {
   publishManifest
-} from "./chunk-ZJDGVUN3.js";
+} from "./chunk-EYWOZU4M.js";
 import {
   DEFAULT_TEXT_RECORD_BUDGET_BYTES,
   PLACEHOLDER_CID,
@@ -24,7 +24,7 @@ import {
   deploy,
   merkleizeJS,
   merkleizeWithStableOrder
-} from "./chunk-TPDF24MG.js";
+} from "./chunk-2ULXHYB4.js";
 import {
   computeStats,
   renderSummary,
@@ -46,26 +46,26 @@ import {
   isVolatilePath,
   parseManifest
 } from "./chunk-S7EM5VMW.js";
-import "./chunk-THZU3FZU.js";
-import "./chunk-64KTKZ7H.js";
+import "./chunk-E62JHC4N.js";
+import "./chunk-YCVK36KC.js";
 import {
   probeChunks
-} from "./chunk-7NKOV5SU.js";
+} from "./chunk-ZGH7YHV5.js";
 import "./chunk-C2TS5MER.js";
 import {
   DEFAULT_MNEMONIC,
   DotNS,
   parseDomainName,
   sanitizeDomainLabel
-} from "./chunk-6Y3XJGV7.js";
+} from "./chunk-MZ4Z5AXI.js";
 import {
   bootstrapPool,
   derivePoolAccounts,
   ensureAuthorized,
   fetchPoolAuthorizations,
   selectAccount
-} from "./chunk-Y7XKC43A.js";
-import "./chunk-LFKP64TQ.js";
+} from "./chunk-FIKBEVYL.js";
+import "./chunk-YP6AS724.js";
 import {
   VERSION,
   loadRunState,
@@ -75,7 +75,7 @@ import {
   shouldSkipStaleWarning,
   stateFilePath,
   writeRunState
-} from "./chunk-37M4NISG.js";
+} from "./chunk-2WWR3DVD.js";
 import {
   DEFAULT_ENV_ID,
   defaultBundledPath,
@@ -85,7 +85,7 @@ import {
   loadEnvironments,
   resolveEndpoints,
   validateContractAddresses
-} from "./chunk-HZKRLQLG.js";
+} from "./chunk-GL2HHK4G.js";
 import "./chunk-ZOC4GITL.js";
 import "./chunk-HOTQDYHD.js";
 export {

package/dist/manifest/publish.js

@@ -1,21 +1,21 @@
 import {
   publishManifest
-} from "../chunk-ZJDGVUN3.js";
+} from "../chunk-EYWOZU4M.js";
 import "../chunk-RI3ZLNPN.js";
-import "../chunk-TPDF24MG.js";
+import "../chunk-2ULXHYB4.js";
 import "../chunk-IW3X2MJF.js";
 import "../chunk-KOSF5FDO.js";
 import "../chunk-L2SKSKB6.js";
 import "../chunk-S7EM5VMW.js";
-import "../chunk-THZU3FZU.js";
-import "../chunk-64KTKZ7H.js";
-import "../chunk-7NKOV5SU.js";
+import "../chunk-E62JHC4N.js";
+import "../chunk-YCVK36KC.js";
+import "../chunk-ZGH7YHV5.js";
 import "../chunk-C2TS5MER.js";
-import "../chunk-6Y3XJGV7.js";
-import "../chunk-Y7XKC43A.js";
-import "../chunk-LFKP64TQ.js";
-import "../chunk-37M4NISG.js";
-import "../chunk-HZKRLQLG.js";
+import "../chunk-MZ4Z5AXI.js";
+import "../chunk-FIKBEVYL.js";
+import "../chunk-YP6AS724.js";
+import "../chunk-2WWR3DVD.js";
+import "../chunk-GL2HHK4G.js";
 import "../chunk-ZOC4GITL.js";
 import "../chunk-HOTQDYHD.js";
 export {

package/dist/memory-report.js

@@ -5,8 +5,8 @@ import {
   maybeWriteMemoryReport,
   safeHeap,
   sampleFromBytes
-} from "./chunk-LFKP64TQ.js";
-import "./chunk-37M4NISG.js";
+} from "./chunk-YP6AS724.js";
+import "./chunk-2WWR3DVD.js";
 export {
   DEFAULT_THRESHOLD_MB,
   buildMemoryReport,

package/dist/merkle.js

@@ -6,20 +6,20 @@ import {
   merkleizeKuboBackend,
   merkleizeWithStableOrder,
   rebuildOrderedCarFromBytes
-} from "./chunk-TPDF24MG.js";
+} from "./chunk-2ULXHYB4.js";
 import "./chunk-IW3X2MJF.js";
 import "./chunk-KOSF5FDO.js";
 import "./chunk-L2SKSKB6.js";
 import "./chunk-S7EM5VMW.js";
-import "./chunk-THZU3FZU.js";
-import "./chunk-64KTKZ7H.js";
-import "./chunk-7NKOV5SU.js";
+import "./chunk-E62JHC4N.js";
+import "./chunk-YCVK36KC.js";
+import "./chunk-ZGH7YHV5.js";
 import "./chunk-C2TS5MER.js";
-import "./chunk-6Y3XJGV7.js";
-import "./chunk-Y7XKC43A.js";
-import "./chunk-LFKP64TQ.js";
-import "./chunk-37M4NISG.js";
-import "./chunk-HZKRLQLG.js";
+import "./chunk-MZ4Z5AXI.js";
+import "./chunk-FIKBEVYL.js";
+import "./chunk-YP6AS724.js";
+import "./chunk-2WWR3DVD.js";
+import "./chunk-GL2HHK4G.js";
 import "./chunk-ZOC4GITL.js";
 import "./chunk-HOTQDYHD.js";
 export {

package/dist/personhood/bind-paid-alias.d.ts

@@ -1,6 +1,6 @@
 import { SS58String, PolkadotSigner } from 'polkadot-api';
 
-type PaidAliasBindingErrorKind = "NotARecognizedPerson" | "RingRootNotFound" | "PaidAliasFeeUnset" | "InsufficientPgas" | "BadProof" | "DispatchError" | "RpcError" | "ClientError" | "Unknown";
+type PaidAliasBindingErrorKind = "NotARecognizedPerson" | "RingRootNotFound" | "AliasFeeUnset" | "InsufficientPgas" | "BadProof" | "DispatchError" | "RpcError" | "ClientError" | "Unknown";
 declare class PaidAliasBindingError extends Error {
     readonly kind: PaidAliasBindingErrorKind;
     readonly dispatchError?: unknown;

package/dist/personhood/bind-paid-alias.js

@@ -1,8 +1,9 @@
 import {
   PaidAliasBindingError,
   bindPaidAliasToAccount
-} from "../chunk-5VZQ2KSU.js";
-import "../chunk-T7EEVWNU.js";
+} from "../chunk-JCOZV25R.js";
+import "../chunk-SLE4P6MO.js";
+import "../chunk-SI2ZUOYD.js";
 import "../chunk-ZYVGHDMU.js";
 export {
   PaidAliasBindingError,

package/dist/personhood/bind-personal-id.js

@@ -2,8 +2,8 @@ import {
   PersonalIdBindingError,
   bindPersonalIdToAccount,
   buildAsPersonExtensionValue
-} from "../chunk-IDYGYIMH.js";
-import "../chunk-T7EEVWNU.js";
+} from "../chunk-LHLCPDGL.js";
+import "../chunk-SI2ZUOYD.js";
 import "../chunk-ZYVGHDMU.js";
 export {
   PersonalIdBindingError,

package/dist/personhood/bootstrap.d.ts

@@ -2,6 +2,7 @@ import { SS58String } from 'polkadot-api';
 import { bindPersonalIdToAccount } from './bind-personal-id.js';
 import { claimPgas } from './claim-pgas.js';
 import { bindPaidAliasToAccount } from './bind-paid-alias.js';
+import { runChainPrereqProbes } from './chain-prereqs.js';
 
 interface BootstrapState {
     recognized: boolean;
@@ -70,6 +71,12 @@ interface RunBootstrapTestApis {
     claimPgas?: typeof claimPgas;
     /** Override `bindPaidAliasToAccount` (defaults to the real import). */
     bindPaidAliasToAccount?: typeof bindPaidAliasToAccount;
+    /**
+     * Override `runChainPrereqProbes` (defaults to the real import).
+     * Tests can inject a no-op or a function that throws to verify probe
+     * failure is handled correctly.
+     */
+    runChainPrereqProbes?: typeof runChainPrereqProbes;
 }
 declare function runBootstrap({ mnemonic, environmentId, requireRecognized, _testApis, }: {
     mnemonic: string;

package/dist/personhood/bootstrap.js

@@ -1,33 +1,38 @@
 import {
   deriveMemberEntropy,
   deriveMemberKey
-} from "../chunk-BMAEWZYV.js";
+} from "../chunk-AFBOKCCQ.js";
+import "../chunk-UPWEOGLQ.js";
 import {
   bindPaidAliasToAccount
-} from "../chunk-5VZQ2KSU.js";
+} from "../chunk-JCOZV25R.js";
+import "../chunk-SLE4P6MO.js";
 import {
   bindPersonalIdToAccount
-} from "../chunk-IDYGYIMH.js";
+} from "../chunk-LHLCPDGL.js";
+import {
+  runChainPrereqProbes
+} from "../chunk-XAB7WM3S.js";
 import {
   claimPgas
-} from "../chunk-2VAUMZB2.js";
+} from "../chunk-7Y7RDOGT.js";
 import {
   DOTNS_CONTEXT_BYTES,
+  PEOPLE_MEMBER_IDENTIFIER_HEX,
   PGAS_ASSET_ID
-} from "../chunk-T7EEVWNU.js";
+} from "../chunk-SI2ZUOYD.js";
 import {
   bytesToHex
 } from "../chunk-ZYVGHDMU.js";
-import "../chunk-UPWEOGLQ.js";
 import {
   WS_HEARTBEAT_TIMEOUT_MS
-} from "../chunk-6Y3XJGV7.js";
-import "../chunk-Y7XKC43A.js";
-import "../chunk-LFKP64TQ.js";
-import "../chunk-37M4NISG.js";
+} from "../chunk-MZ4Z5AXI.js";
+import "../chunk-FIKBEVYL.js";
+import "../chunk-YP6AS724.js";
+import "../chunk-2WWR3DVD.js";
 import {
   loadEnvironments
-} from "../chunk-HZKRLQLG.js";
+} from "../chunk-GL2HHK4G.js";
 import "../chunk-ZOC4GITL.js";
 
 // src/personhood/bootstrap.ts
@@ -51,13 +56,14 @@ async function probeBootstrapState({
   memberKey,
   account
 }) {
-  const { PEOPLE_MEMBER_IDENTIFIER_HEX } = await import("./constants.js");
+  const { PEOPLE_MEMBER_IDENTIFIER_HEX: PEOPLE_MEMBER_IDENTIFIER_HEX2 } = await import("./constants.js");
   const people = peopleUnsafeApi;
   const ah = ahUnsafeApi;
   const [memberPosition, pgasAcct, feeRaw, aliasRow] = await Promise.all([
-    people.query.Members.Members.getValue(PEOPLE_MEMBER_IDENTIFIER_HEX, bytesToHex(memberKey), { at: "best" }),
+    people.query.Members.Members.getValue(PEOPLE_MEMBER_IDENTIFIER_HEX2, bytesToHex(memberKey), { at: "best" }),
     ah.query.Assets.Account.getValue(PGAS_ASSET_ID, account, { at: "best" }),
-    ah.query.AliasAccounts.PaidAliasFee.getValue({ at: "best" }),
+    // §3.1: Storage renamed from PaidAliasFee → AliasFee (individuality#955).
+    ah.query.AliasAccounts.AliasFee.getValue({ at: "best" }),
     ah.query.AliasAccounts.AccountToAlias.getValue(account, { at: "best" })
   ]);
   const recognized = memberPosition?.type === "Included";
@@ -70,7 +76,9 @@ async function probeBootstrapState({
   const pgasBalance = pgasAcct?.balance ?? 0n;
   const paidAliasFee = feeRaw ?? 0n;
   const aliasBound = aliasRow ? {
-    paid: aliasRow.paid,
+    // NOTE: `paid` field removed from AccountToAlias in individuality#955.
+    // Treat all bound aliases as paid (AliasFee applies to everyone).
+    paid: true,
     contextHex: aliasRow.ca.context,
     revision: aliasRow.revision
   } : null;
@@ -157,6 +165,10 @@ async function runBootstrap({
     }
     const actionsExecuted = [];
     let currentState = { ...initialState };
+    if (nextBootstrapAction(currentState) !== null) {
+      const _runChainPrereqProbes = _testApis?.runChainPrereqProbes ?? runChainPrereqProbes;
+      await _runChainPrereqProbes(ahUnsafeApi, PEOPLE_MEMBER_IDENTIFIER_HEX);
+    }
     if (!currentState.personalIdBound) {
       const memberKeyHex = "0x" + Array.from(memberKey, (b) => b.toString(16).padStart(2, "0")).join("");
       const peoplePeopleStore = peopleUnsafeApi.query.People;
@@ -183,8 +195,8 @@ async function runBootstrap({
         account: ss58
       });
     }
-    const buildRingProof = async ({ members, context, msg }) => {
-      const result = verifiable.one_shot(memberEntropy, members, context, msg);
+    const buildRingProof = async ({ ringExponent, members, context, msg }) => {
+      const result = verifiable.one_shot(ringExponent, memberEntropy, members, context, msg);
       return { proof: result.proof, alias: result.alias };
     };
     if (currentState.pgasBalance < currentState.paidAliasFee) {

package/dist/personhood/chain-prereqs.d.ts

@@ -0,0 +1,76 @@
+/**
+ * XCM location for the relay native asset (DOT/PAS) — "here from relay".
+ * See docs-internal/dotns-bootstrap-handover.md §6.2.
+ */
+declare const NATIVE_LOC: {
+    parents: 1;
+    interior: {
+        type: "Here";
+        value: undefined;
+    };
+};
+/**
+ * XCM location for the PGAS fungible asset on Asset Hub.
+ * PalletInstance(50) = the Assets pallet; GeneralIndex = PGAS asset id.
+ * See docs-internal/dotns-bootstrap-handover.md §6.2.
+ */
+declare const PGAS_LOC: {
+    parents: 0;
+    interior: {
+        type: "X2";
+        value: readonly [{
+            readonly type: "PalletInstance";
+            readonly value: 50;
+        }, {
+            readonly type: "GeneralIndex";
+            readonly value: bigint;
+        }];
+    };
+};
+/**
+ * Probe §6.1 — `MembersSubscriber.RingCollectionExponents[peopleIdent]`.
+ *
+ * The chain's `verify_membership_at_rev` reads this map to look up the ring
+ * exponent for the collection. If it is None (populated only when
+ * `initialize_ring_roots` was never run before `process_ring_updates`), every
+ * ring-VRF flow returns `Error::CollectionNotFound` which maps to
+ * `InvalidTransaction::BadProof`.
+ *
+ * Fix: chain operator must run `sudo-fix-preview-people-exponent.ts` (or
+ * equivalent) to populate the storage entry. This is an operator-only fix.
+ * See docs-internal/dotns-bootstrap-handover.md §6.1.
+ */
+declare function probeRingCollectionExponents(ahUnsafeApi: unknown, peopleIdent: string): Promise<void>;
+/**
+ * Probe §6.3 — `Assets.Asset[PGAS_ASSET_ID]`.
+ *
+ * The PGAS fungible asset (id 2_000_000_000) must exist on Asset Hub before
+ * `Pgas.claim_pgas` can succeed. If missing, the call rejects with
+ * `InvalidTransaction::Custom(233) = PgasAssetNotCreated`.
+ *
+ * Fix: chain operator must run `Pgas.create_pgas_asset` (authorized origin
+ * only) or apply a migration. This is an operator-only fix.
+ * See docs-internal/dotns-bootstrap-handover.md §6.3.
+ */
+declare function probePgasAsset(ahUnsafeApi: unknown): Promise<void>;
+/**
+ * Probe §6.2 — `AssetConversion.Pools[[NATIVE_LOC, PGAS_LOC]]`.
+ *
+ * Required when routing transaction weight fees through PGAS via
+ * ChargeAssetTxPayment (so PAS-zero accounts can pay entirely in PGAS).
+ * Without the swap pool, the chain returns `InvalidTransaction::Payment`.
+ *
+ * Fix: chain operator must create the pool via `sudo-create-pgas-pool.ts` or
+ * the equivalent `dot` CLI sequence. This is an operator-only fix.
+ * See docs-internal/dotns-bootstrap-handover.md §6.2.
+ */
+declare function probePgasNativePool(ahUnsafeApi: unknown, nativeLoc?: typeof NATIVE_LOC, pgasLoc?: typeof PGAS_LOC): Promise<void>;
+/**
+ * Run all three chain prerequisite probes in order. Fails fast on the first
+ * missing prerequisite so the user gets the most actionable error.
+ *
+ * Wire this into the bootstrap entry point BEFORE any chain submission.
+ */
+declare function runChainPrereqProbes(ahUnsafeApi: unknown, peopleIdent: string): Promise<void>;
+
+export { NATIVE_LOC, PGAS_LOC, probePgasAsset, probePgasNativePool, probeRingCollectionExponents, runChainPrereqProbes };

package/dist/personhood/chain-prereqs.js

@@ -0,0 +1,17 @@
+import {
+  NATIVE_LOC,
+  PGAS_LOC,
+  probePgasAsset,
+  probePgasNativePool,
+  probeRingCollectionExponents,
+  runChainPrereqProbes
+} from "../chunk-XAB7WM3S.js";
+import "../chunk-SI2ZUOYD.js";
+export {
+  NATIVE_LOC,
+  PGAS_LOC,
+  probePgasAsset,
+  probePgasNativePool,
+  probeRingCollectionExponents,
+  runChainPrereqProbes
+};

package/dist/personhood/claim-pgas.d.ts

@@ -24,6 +24,16 @@ interface PgasClaimProgress {
     onBroadcasted?: () => void;
     onBestBlock?: (blockHash: string) => void;
 }
+/**
+ * Injection seam for `validate_with_commitment` (verifiablejs/nodejs ≥ beta.4).
+ * Signature: (ringExponent, proof, commitment, context, message) → alias bytes.
+ * Throws if the proof does not verify against the given commitment.
+ *
+ * Tests supply a mock; production callers get the real function from verifiablejs.
+ * When the installed verifiablejs < 1.3.0-beta.4 lacks the export, the default
+ * implementation throws a clear error rather than silently skipping the check.
+ */
+type ValidateWithCommitment = (ringExponent: number, proof: Uint8Array, commitment: Uint8Array, context: Uint8Array, message: Uint8Array) => Uint8Array;
 interface ClaimPgasParams {
     peopleUnsafeApi: unknown;
     ahUnsafeApi: unknown;
@@ -33,12 +43,33 @@ interface ClaimPgasParams {
     buildRingProof: BuildRingProof;
     slotIndex?: number;
     progress?: PgasClaimProgress;
+    /**
+     * Injectable `validate_with_commitment` for testing. Defaults to the real
+     * verifiablejs export when available. See docs-internal/dotns-bootstrap-handover.md §5.
+     */
+    validateWithCommitment?: ValidateWithCommitment;
 }
 interface ClaimPgasResult {
     blockHash: string;
     amount: bigint;
     alias: Uint8Array;
 }
+/**
+ * Compute the AsPgas inherited-implication exclude set DYNAMICALLY from the
+ * live AH chain's signed-extension pipeline order.
+ *
+ * See docs-internal/dotns-bootstrap-handover.md §4.3 for the full rationale.
+ * Hardcoding this set is exactly how BadProof'd in past runtime upgrades:
+ * whenever the runtime adds a new origin-modifier extension before AsPgas,
+ * a static exclude silently includes its bytes in the implication hash.
+ *
+ * Recipe: everything ≤ AsPgas in the pipeline is excluded (those extensions
+ * run before AsPgas and their bytes are NOT part of the inherited implication).
+ * Additionally, "AuthorizeCall" (empty value+implicit, no-op) and
+ * "StorageWeightReclaim" (outer wrapper, no contribution) are always excluded
+ * even if they appear after AsPgas in a future runtime layout.
+ */
+declare function buildImplicationExclude(pipelineOrder: string[]): Set<string>;
 /**
  * Build the AsPgas::Claim extension value for a `claim_pgas` General extrinsic.
  * Exported so unit tests can assert that the ring-VRF proof is encoded as a hex
@@ -56,6 +87,6 @@ declare function buildAsPgasClaimExtensionValue(proof: Uint8Array, ringIndex: nu
         day: number;
     };
 };
-declare const claimPgas: ({ peopleUnsafeApi, ahUnsafeApi, ahClient, target, memberKey, buildRingProof, slotIndex, progress, }: ClaimPgasParams) => Promise<ClaimPgasResult>;
+declare const claimPgas: ({ peopleUnsafeApi, ahUnsafeApi, ahClient, target, memberKey, buildRingProof, slotIndex, progress, validateWithCommitment, }: ClaimPgasParams) => Promise<ClaimPgasResult>;
 
-export { type BuildRingProof, type BuildRingProofInput, type ClaimPgasParams, type ClaimPgasResult, PgasClaimError, type PgasClaimErrorKind, type PgasClaimProgress, type RingExponent, buildAsPgasClaimExtensionValue, claimPgas };
+export { type BuildRingProof, type BuildRingProofInput, type ClaimPgasParams, type ClaimPgasResult, PgasClaimError, type PgasClaimErrorKind, type PgasClaimProgress, type RingExponent, type ValidateWithCommitment, buildAsPgasClaimExtensionValue, buildImplicationExclude, claimPgas };

package/dist/personhood/claim-pgas.js

@@ -1,12 +1,14 @@
 import {
   PgasClaimError,
   buildAsPgasClaimExtensionValue,
+  buildImplicationExclude,
   claimPgas
-} from "../chunk-2VAUMZB2.js";
-import "../chunk-T7EEVWNU.js";
+} from "../chunk-7Y7RDOGT.js";
+import "../chunk-SI2ZUOYD.js";
 import "../chunk-ZYVGHDMU.js";
 export {
   PgasClaimError,
   buildAsPgasClaimExtensionValue,
+  buildImplicationExclude,
   claimPgas
 };

package/dist/personhood/constants.d.ts

@@ -14,10 +14,10 @@ declare const PGAS_ASSET_LOCATION: {
         }];
     };
 };
-declare const PROOF_BYTES = 788;
-declare const BANDERSNATCH_SIGNATURE_BYTES = 96;
-declare const PEOPLE_MEMBER_IDENTIFIER_HEX = "0x70656f706c652020202020202020202020202020202020202020202020202020";
+declare const PROOF_BYTES = 785;
+declare const BANDERSNATCH_SIGNATURE_BYTES = 64;
+declare const PEOPLE_MEMBER_IDENTIFIER_HEX = "0x706f703a706f6c6b61646f742e6e6574776f726b2f70656f706c652020202020";
 declare const MEMBER_ENTROPY_KEY: Uint8Array<ArrayBuffer>;
-declare const PAID_PROOF_TAG: Uint8Array<ArrayBuffer>;
+declare const ALIAS_PROOF_TAG: Uint8Array<ArrayBuffer>;
 
-export { BANDERSNATCH_SIGNATURE_BYTES, DOTNS_CONTEXT_BYTES, DOTNS_CONTEXT_HEX, MEMBER_ENTROPY_KEY, PAID_PROOF_TAG, PEOPLE_MEMBER_IDENTIFIER_HEX, PGAS_ASSET_ID, PGAS_ASSET_LOCATION, PROOF_BYTES };
+export { ALIAS_PROOF_TAG, BANDERSNATCH_SIGNATURE_BYTES, DOTNS_CONTEXT_BYTES, DOTNS_CONTEXT_HEX, MEMBER_ENTROPY_KEY, PEOPLE_MEMBER_IDENTIFIER_HEX, PGAS_ASSET_ID, PGAS_ASSET_LOCATION, PROOF_BYTES };

package/dist/personhood/constants.js

@@ -1,20 +1,20 @@
 import {
+  ALIAS_PROOF_TAG,
   BANDERSNATCH_SIGNATURE_BYTES,
   DOTNS_CONTEXT_BYTES,
   DOTNS_CONTEXT_HEX,
   MEMBER_ENTROPY_KEY,
-  PAID_PROOF_TAG,
   PEOPLE_MEMBER_IDENTIFIER_HEX,
   PGAS_ASSET_ID,
   PGAS_ASSET_LOCATION,
   PROOF_BYTES
-} from "../chunk-T7EEVWNU.js";
+} from "../chunk-SI2ZUOYD.js";
 export {
+  ALIAS_PROOF_TAG,
   BANDERSNATCH_SIGNATURE_BYTES,
   DOTNS_CONTEXT_BYTES,
   DOTNS_CONTEXT_HEX,
   MEMBER_ENTROPY_KEY,
-  PAID_PROOF_TAG,
   PEOPLE_MEMBER_IDENTIFIER_HEX,
   PGAS_ASSET_ID,
   PGAS_ASSET_LOCATION,

package/dist/personhood/member-key.js

@@ -1,9 +1,9 @@
 import {
   deriveMemberEntropy,
   deriveMemberKey
-} from "../chunk-BMAEWZYV.js";
-import "../chunk-T7EEVWNU.js";
+} from "../chunk-AFBOKCCQ.js";
 import "../chunk-UPWEOGLQ.js";
+import "../chunk-SI2ZUOYD.js";
 export {
   deriveMemberEntropy,
   deriveMemberKey

package/dist/personhood/people-client.js

@@ -1,12 +1,12 @@
 import {
   WS_HEARTBEAT_TIMEOUT_MS
-} from "../chunk-6Y3XJGV7.js";
-import "../chunk-Y7XKC43A.js";
-import "../chunk-LFKP64TQ.js";
-import "../chunk-37M4NISG.js";
+} from "../chunk-MZ4Z5AXI.js";
+import "../chunk-FIKBEVYL.js";
+import "../chunk-YP6AS724.js";
+import "../chunk-2WWR3DVD.js";
 import {
   loadEnvironments
-} from "../chunk-HZKRLQLG.js";
+} from "../chunk-GL2HHK4G.js";
 import "../chunk-ZOC4GITL.js";
 
 // src/personhood/people-client.ts

package/dist/personhood/proof-validity.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Encode a bigint as 8 bytes, little-endian (u64).
+ * This is the wire format used in the AliasAccounts proof message.
+ */
+declare const u64LeBytes: (v: bigint) => Uint8Array;
+/**
+ * Build the 32-byte blake2_256 message that the ring-VRF proof must be built
+ * against, as required by AliasAccounts after individuality#955.
+ *
+ * Wire layout of the pre-image (54 bytes):
+ *   ALIAS_PROOF_TAG    — 14 raw bytes ("alias-accounts", no length prefix)
+ *   accountPub         — 32 raw bytes (AccountId32 / SS58 public key)
+ *   u64LE(proofValidAt) — 8 little-endian bytes
+ *
+ * Throws if accountPub is not exactly 32 bytes (wrong key or truncation would
+ * silently misalign the u64 at the end, producing an undetectable BadProof).
+ */
+declare const buildAliasProofMessage: (accountPub: Uint8Array, proofValidAt: bigint) => Uint8Array;
+type TimestampNowQuery = {
+    query: {
+        Timestamp: {
+            Now: {
+                getValue: (opts?: {
+                    at: string;
+                }) => Promise<bigint>;
+            };
+        };
+    };
+};
+/**
+ * Read the current chain timestamp from Asset Hub and return it in seconds
+ * (as a bigint) suitable for passing as `proof_valid_at`.
+ *
+ * `Timestamp.Now` returns milliseconds; dividing by 1000n converts to seconds.
+ *
+ * Do NOT cache this value across retries — the ProofValidityWindow is 300s.
+ * Re-call on every tx attempt so the timestamp stays within the window.
+ */
+declare const getProofValidAtSec: (ahApi: TimestampNowQuery) => Promise<bigint>;
+
+export { buildAliasProofMessage, getProofValidAtSec, u64LeBytes };

package/dist/personhood/proof-validity.js

@@ -0,0 +1,12 @@
+import {
+  buildAliasProofMessage,
+  getProofValidAtSec,
+  u64LeBytes
+} from "../chunk-SLE4P6MO.js";
+import "../chunk-SI2ZUOYD.js";
+import "../chunk-ZYVGHDMU.js";
+export {
+  buildAliasProofMessage,
+  getProofValidAtSec,
+  u64LeBytes
+};

package/dist/personhood/reprove.d.ts

@@ -1,6 +1,6 @@
 import { SS58String, PolkadotSigner } from 'polkadot-api';
 
-type ReproveAliasErrorKind = "NoStoredAlias" | "NotPaid" | "RingRootNotFound" | "RevisionNotAdvanced" | "AliasMismatch" | "NotARecognizedPerson" | "BadProof" | "DispatchError" | "RpcError" | "ClientError" | "Unknown";
+type ReproveAliasErrorKind = "NoStoredAlias" | "RingRootNotFound" | "RevisionNotAdvanced" | "AliasMismatch" | "NotARecognizedPerson" | "BadProof" | "DispatchError" | "RpcError" | "ClientError" | "Unknown";
 declare class ReproveAliasError extends Error {
     readonly kind: ReproveAliasErrorKind;
     readonly dispatchError?: unknown;