@parity/product-sdk 0.0.0-dev.312.0 → 0.0.0-dev.329.1

package/dist/address/index.d.ts

@@ -1,9 +1,11 @@
 export * from '@parity/product-sdk-address';
-import '@parity/product-sdk-cloud-storage';
 import '@parity/product-sdk-chain-client';
+import '@parity/product-sdk-cloud-storage';
 import '@parity/product-sdk-contracts';
 import '@parity/product-sdk-crypto';
 import '@parity/product-sdk-host';
 import '@parity/product-sdk-individuality';
 import '@parity/product-sdk-local-storage';
+import '@parity/product-sdk-nfts';
+import '@parity/product-sdk-renderer';
 import '@parity/product-sdk-signer';

package/dist/{chunk-BRZNHTLQ.js → chunk-7GM3HUZF.js}

@@ -85,5 +85,5 @@ function accountIdToHex(address) {
 }
 
 export { DOT_NODE, DOT_TLD, accountIdBytesToHex, accountIdHexToBytes, accountIdToHex, dotNsTld, isConsistentDotNsTld, isResolvableDotNsName, isValidDotNsName, namehash, normalizeDotNsName, resolvePeopleUsernameOwner, stripSuffix };
-//# sourceMappingURL=chunk-BRZNHTLQ.js.map
-//# sourceMappingURL=chunk-BRZNHTLQ.js.map
+//# sourceMappingURL=chunk-7GM3HUZF.js.map
+//# sourceMappingURL=chunk-7GM3HUZF.js.map

package/dist/chunk-7GM3HUZF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/identity/dotns-namehash.ts","../src/identity/dotns.ts"],"names":["hexToBytes","bytesToHex"],"mappings":";;;;AAyCO,IAAM,QAAA,GAAW;AAExB,IAAM,SAAA,GAAY,CAAA,EAAA,EAAK,IAAA,CAAK,MAAA,CAAO,EAAE,CAAC,CAAA,CAAA;AAEtC,IAAM,OAAO,CAAC,CAAA,KAA0B,IAAI,WAAA,EAAY,CAAE,OAAO,CAAC,CAAA;AAGlE,SAAS,SAAA,CAAU,QAAoB,KAAA,EAA2B;AAC9D,EAAA,MAAM,QAAA,GAAW,IAAI,UAAA,CAAW,EAAE,CAAA;AAClC,EAAA,QAAA,CAAS,GAAA,CAAI,QAAQ,CAAC,CAAA;AACtB,EAAA,QAAA,CAAS,IAAI,SAAA,CAAU,IAAA,CAAK,KAAK,CAAC,GAAG,EAAE,CAAA;AACvC,EAAA,OAAO,UAAU,QAAQ,CAAA;AAC7B;AAcO,SAAS,SAAS,MAAA,EAA0B;AAC/C,EAAA,MAAM,KAAA,GAAQ,OAAO,UAAA,CAAW,GAAG,IAAI,MAAA,CAAO,KAAA,CAAM,CAAC,CAAA,GAAI,MAAA;AACzD,EAAA,OAAO;AAAA,IACH,MAAA,EAAQ,IAAI,KAAK,CAAA,CAAA;AAAA,IACjB,IAAA,EAAM,CAAA,EAAA,EAAK,UAAA,CAAW,SAAA,CAAU,UAAA,CAAW,SAAA,CAAU,KAAA,CAAM,CAAC,CAAC,CAAA,EAAG,KAAK,CAAC,CAAC,CAAA;AAAA,GAC3E;AACJ;AAmBO,SAAS,qBAAqB,GAAA,EAAwB;AACzD,EAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,MAAA,CAAO,UAAA,CAAW,GAAG,CAAA,GAAI,GAAA,CAAI,MAAA,CAAO,KAAA,CAAM,CAAC,CAAA,GAAI,GAAA,CAAI,MAAA;AACrE,EAAA,IAAI,MAAM,MAAA,KAAW,CAAA,IAAK,MAAM,QAAA,CAAS,GAAG,GAAG,OAAO,KAAA;AACtD,EAAA,IAAI,GAAA,CAAI,IAAA,CAAK,WAAA,EAAY,KAAM,WAAW,OAAO,KAAA;AACjD,EAAA,OAAO,QAAA,CAAS,KAAK,CAAA,CAAE,IAAA,CAAK,aAAY,KAAM,GAAA,CAAI,KAAK,WAAA,EAAY;AACvE;AAGO,IAAM,OAAA,GAAoB,EAAE,MAAA,EAAQ,MAAA,EAAQ,MAAM,QAAA;AAclD,SAAS,WAAA,CAAY,MAAc,MAAA,EAAwB;AAC9D,EAAA,OAAO,IAAA,CAAK,QAAA,CAAS,MAAM,CAAA,GAAI,IAAA,CAAK,MAAM,CAAA,EAAG,CAAC,MAAA,CAAO,MAAM,CAAA,GAAI,IAAA;AACnE;AAoBO,SAAS,QAAA,CAAS,MAAc,GAAA,EAA8B;AACjE,EAAA,MAAM,OAAA,GAAU,WAAA,CAAY,IAAA,EAAM,GAAA,CAAI,MAAM,CAAA;AAE5C,EAAA,MAAM,SAAS,OAAA,KAAY,EAAA,GAAK,EAAC,GAAI,OAAA,CAAQ,MAAM,GAAG,CAAA;AAItD,EAAA,IAAI,OAAmB,UAAA,CAAW,GAAA,CAAI,IAAA,CAAK,KAAA,CAAM,CAAC,CAAC,CAAA;AACnD,EAAA,KAAA,IAAS,IAAI,MAAA,CAAO,MAAA,GAAS,CAAA,EAAG,CAAA,IAAK,GAAG,CAAA,EAAA,EAAK;AACzC,IAAA,IAAA,GAAO,SAAA,CAAU,IAAA,EAAM,MAAA,CAAO,CAAC,CAAC,CAAA;AAAA,EACpC;AACA,EAAA,OAAO,CAAA,EAAA,EAAK,UAAA,CAAW,IAAI,CAAC,CAAA,CAAA;AAChC;AC/DO,SAAS,gBAAA,CAAiB,MAAc,MAAA,EAAyB;AACpE,EAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,MAAM,GAAG,OAAO,KAAA;AACnC,EAAA,OAAO,YAAA,CAAa,WAAA,CAAY,IAAA,EAAM,MAAM,CAAC,CAAA;AACjD;AAQA,SAAS,aAAa,KAAA,EAAwB;AAC1C,EAAA,IAAI,MAAM,MAAA,GAAS,CAAA,IAAK,KAAA,CAAM,MAAA,GAAS,IAAI,OAAO,KAAA;AAClD,EAAA,OAAO,iCAAA,CAAkC,KAAK,KAAK,CAAA;AACvD;AAaO,SAAS,qBAAA,CAAsB,MAAc,MAAA,EAAyB;AACzE,EAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,MAAM,GAAG,OAAO,KAAA;AACnC,EAAA,MAAM,SAAS,WAAA,CAAY,IAAA,EAAM,MAAM,CAAA,CAAE,MAAM,GAAG,CAAA;AAClD,EAAA,OAAO,MAAA,CAAO,MAAA,GAAS,CAAA,IAAK,MAAA,CAAO,MAAM,YAAY,CAAA;AACzD;AAiCO,SAAS,kBAAA,CAAmB,MAAc,MAAA,EAAwB;AACrE,EAAA,MAAM,SAAS,IAAA,CAAK,IAAA,GAAO,SAAA,CAAU,KAAK,EAAE,WAAA,EAAY;AACxD,EAAA,MAAM,UAAA,GAAa,OAAO,QAAA,CAAS,GAAG,IAAI,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA,GAAI,MAAA;AAChE,EAAA,OAAO,UAAA,CAAW,QAAA,CAAS,GAAG,CAAA,GAAI,aAAa,UAAA,GAAa,MAAA;AAChE;AA0BA,eAAsB,0BAAA,CAClB,UACA,SAAA,EAC0B;AAC1B,EAAA,MAAM,KAAA,GAAQ,MAAM,SAAA,CAAU,KAAA,CAAM,UAAU,eAAA,CAAgB,QAAA;AAAA,IAC1D,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,QAAQ;AAAA,GACrC;AACA,EAAA,OAAO,KAAA,IAAS,IAAA;AACpB;AAEA,SAAS,UAAU,KAAA,EAA8B;AAC7C,EAAA,IAAI,CAAC,kBAAA,CAAmB,IAAA,CAAK,KAAK,CAAA,EAAG;AACjC,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,qCAAA,EAAwC,KAAK,CAAA,CAAE,CAAA;AAAA,EACnE;AACA,EAAA,OAAO,KAAA;AACX;AAEO,SAAS,oBAAoB,SAAA,EAAsC;AACtE,EAAA,MAAM,QAAQA,UAAAA,CAAW,SAAA,CAAU,SAAS,CAAA,CAAE,KAAA,CAAM,CAAC,CAAC,CAAA;AACtD,EAAA,IAAI,KAAA,CAAM,WAAW,EAAA,EAAI;AACrB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,gCAAA,EAAmC,KAAA,CAAM,MAAM,CAAA,MAAA,CAAQ,CAAA;AAAA,EAC3E;AACA,EAAA,OAAO,KAAA;AACX;AAGO,SAAS,oBAAoB,KAAA,EAAkC;AAClE,EAAA,IAAI,KAAA,CAAM,WAAW,EAAA,EAAI;AACrB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,gCAAA,EAAmC,KAAA,CAAM,MAAM,CAAA,MAAA,CAAQ,CAAA;AAAA,EAC3E;AACA,EAAA,OAAO,CAAA,EAAA,EAAKC,UAAAA,CAAW,KAAK,CAAC,CAAA,CAAA;AACjC;AAQO,SAAS,eAAe,OAAA,EAAgC;AAC3D,EAAA,OAAO,mBAAA,CAAoB,cAAA,CAAe,OAAO,CAAC,CAAA;AACtD","file":"chunk-7GM3HUZF.js","sourcesContent":["// Copyright 2026 Parity Technologies (UK) Ltd.\n// SPDX-License-Identifier: Apache-2.0\n/**\n * DotNS namehash.\n *\n * ENS-style recursive hashing, but rooted at the network's TLD node rather than\n * the empty root — matching `DotnsRegistry` (`contracts/registry/DotnsRegistry.sol`\n * `_namehash`) and `LabelUtils.namehashUnder`.\n *\n *   labelhash(l) = keccak256(utf8(l))\n *   node(parent, l) = keccak256(parent ‖ labelhash(l))\n *   node(\"alice.paseo\") = node(tldNode, \"alice\")\n *   node(\"bob.alice.paseo\") = node(node(tldNode, \"alice\"), \"bob\")\n *\n * The root is **per network**, not a constant. `DotnsProtocolRegistry.initialize`\n * fixes it once from a deploy-time label — `.paseo` on Paseo Asset Hub Next V2,\n * `.test` on Previewnet — and publishes it as `tld()` / `tldNode()`. Hashing under\n * the wrong root yields a node the chain has never written to, so every lookup\n * reports \"unregistered\" with no error anywhere. That is why {@link namehash}\n * takes the root rather than assuming one; `resolveTld` in `./dotns-registry.js`\n * is what asks the chain for it.\n */\nimport { bytesToHex, hexToBytes, keccak256 } from \"@parity/product-sdk-crypto\";\n\n/**\n * A network's DotNS top-level domain: the suffix names are spelled with, and\n * the node every one of its names hashes onto.\n *\n * The two must agree — `node` is `namehash(0, labelhash(label))` of `suffix`'s\n * label — so build one with {@link dotNsTld} rather than by hand, and check an\n * externally supplied pair with {@link isConsistentDotNsTld}. A `.paseo` suffix\n * carrying the `.dot` node is exactly the defect this type exists to prevent.\n */\nexport interface DotNsTld {\n    /** Suffix including the leading dot, as `protocolRegistry.tld()` returns it. */\n    suffix: string;\n    /** Namehash of the TLD label, as `protocolRegistry.tldNode()` returns it. */\n    node: `0x${string}`;\n}\n\n/** The `.dot` TLD node. Mirrors the `DotnsConstants.DOT_NODE` the contracts removed in `b4096968`. */\nexport const DOT_NODE = \"0x3fce7d1364a893e213bc4212792b517ffc88f5b13b86c8ef9c8d390c3a1370ce\";\n\nconst ZERO_NODE = `0x${\"00\".repeat(32)}`;\n\nconst utf8 = (s: string): Uint8Array => new TextEncoder().encode(s);\n\n/** `keccak256(parent ‖ labelhash(label))`, the one hash step every node is built from. */\nfunction nodeUnder(parent: Uint8Array, label: string): Uint8Array {\n    const combined = new Uint8Array(64);\n    combined.set(parent, 0);\n    combined.set(keccak256(utf8(label)), 32);\n    return keccak256(combined);\n}\n\n/**\n * Build a {@link DotNsTld} from a TLD suffix, deriving the node the same way the\n * contract does.\n *\n * Mirrors `DotnsProtocolRegistry.initialize`, which sets\n * `_tldNode = namehashUnder(bytes32(0), labelhash(tldLabel))`. Because the node\n * is a pure function of the label, a client only ever needs the suffix — reading\n * `tldNode()` is a cross-check, never the source.\n *\n * Accepts `\".paseo\"` or `\"paseo\"`: `tld()` returns the dotted form while\n * `initialize` and the deploy pipeline speak the bare label.\n */\nexport function dotNsTld(suffix: string): DotNsTld {\n    const label = suffix.startsWith(\".\") ? suffix.slice(1) : suffix;\n    return {\n        suffix: `.${label}`,\n        node: `0x${bytesToHex(nodeUnder(hexToBytes(ZERO_NODE.slice(2)), label))}`,\n    };\n}\n\n/**\n * Whether a {@link DotNsTld} could have come from a real deployment.\n *\n * Three ways a pair fails, all of which produce silently wrong nodes rather\n * than errors if they reach {@link namehash}:\n *\n *   - the node is not the derivation of the suffix (a caller mixing `.paseo`\n *     with `DOT_NODE`);\n *   - the suffix is empty, or the node is zero — what a pre-`b4096968` registry\n *     proxy reports after an upgrade with no reinitializer, since `_tld` and\n *     `_tldNode` are then still at their defaults and *both getters succeed*;\n *   - the suffix is not a single label, which `initialize` rejects outright.\n *\n * Returns a boolean rather than a `Result` to keep this module free of the\n * error type; callers with an error channel (`resolveTld`) map `false` to an\n * `err` carrying the offending value.\n */\nexport function isConsistentDotNsTld(tld: DotNsTld): boolean {\n    const label = tld.suffix.startsWith(\".\") ? tld.suffix.slice(1) : tld.suffix;\n    if (label.length === 0 || label.includes(\".\")) return false;\n    if (tld.node.toLowerCase() === ZERO_NODE) return false;\n    return dotNsTld(label).node.toLowerCase() === tld.node.toLowerCase();\n}\n\n/** The `.dot` TLD, for a deployment that uses it. Not a default: pass it explicitly. */\nexport const DOT_TLD: DotNsTld = { suffix: \".dot\", node: DOT_NODE };\n\n/**\n * Drop `suffix` from the end of `name`, leaving the labels beneath it.\n *\n * Strips by the suffix's own length, which is the whole point: the same logic\n * written as `slice(0, -4)` turns `alice.paseo` into `alice.pa`, and every\n * lookup for that name then asks about a subname nobody registered. A name that\n * does not carry the suffix is returned unchanged, so a foreign suffix stays\n * visible to whatever validates next.\n *\n * Lives here rather than in `./dotns.js` so the one copy is reachable from this\n * module without pulling its heavier imports in.\n */\nexport function stripSuffix(name: string, suffix: string): string {\n    return name.endsWith(suffix) ? name.slice(0, -suffix.length) : name;\n}\n\n/**\n * Compute the DotNS node hash for a name like `\"alice.paseo\"` or\n * `\"bob.alice.paseo\"`, rooted at `tld`.\n *\n * The trailing suffix is the TLD (folded into `tld.node`); remaining labels are\n * hashed most-significant-last, so `bob.alice.paseo` layers `bob` on top of\n * `alice` on top of the TLD. Input is used as-is — normalize with\n * `normalizeDotNsName` first if needed.\n *\n * `tld` is required rather than defaulted, because a default that is correct on\n * one deployment is the defect this module was fixed for. It is also not\n * validated here: a name whose suffix belongs to another deployment hashes to a\n * node under `tld` instead of being refused, since this function returns a hash\n * and has nowhere to report a complaint. The entry points in\n * `./dotns-registry.js` do that check, where there is an error channel.\n *\n * @returns the 32-byte node as a `0x`-prefixed hex string.\n */\nexport function namehash(name: string, tld: DotNsTld): `0x${string}` {\n    const trimmed = stripSuffix(name, tld.suffix);\n    // \"\" → the bare TLD node; otherwise split into labels.\n    const labels = trimmed === \"\" ? [] : trimmed.split(\".\");\n    // Layer from the TLD outward: labels are given left-most-first\n    // (bob.alice), but must be applied right-to-left onto the parent.\n    // Annotated: hexToBytes yields ArrayBufferLike, keccak256 yields ArrayBuffer.\n    let node: Uint8Array = hexToBytes(tld.node.slice(2));\n    for (let i = labels.length - 1; i >= 0; i--) {\n        node = nodeUnder(node, labels[i]);\n    }\n    return `0x${bytesToHex(node)}`;\n}\n","// Copyright 2026 Parity Technologies (UK) Ltd.\n// SPDX-License-Identifier: Apache-2.0\n/**\n * DotNS (Polkadot Name Service) utilities\n *\n * Name validation and normalization. Every helper here takes the deployment's\n * TLD suffix rather than assuming `.dot`: the TLD is fixed per network when the\n * contracts initialise, so the same string is a valid name on one deployment\n * and meaningless on another. `resolveTld` in `./dotns-registry.js` is what\n * asks the chain which suffix is in play.\n */\n\nimport { accountIdBytes } from \"@parity/product-sdk-address\";\nimport { bytesToHex, hexToBytes } from \"@parity/product-sdk-crypto\";\nimport { stripSuffix } from \"./dotns-namehash.js\";\nimport type {\n    ChainDefinition,\n    PalletsTypedef,\n    PlainDescriptor,\n    RuntimeDescriptor,\n    SS58String,\n    StorageDescriptor,\n    TxDescriptor,\n} from \"polkadot-api\";\n\ntype AnyDescriptorEntry<T> = Record<string, Record<string, T>>;\n\ntype PeopleUsernameStorage = {\n    Resources: {\n        UsernameOwnerOf: StorageDescriptor<[Uint8Array], SS58String, true, never>;\n    };\n};\n\ntype PeopleUsernamePallets = PalletsTypedef<\n    PeopleUsernameStorage,\n    AnyDescriptorEntry<TxDescriptor<any>>,\n    AnyDescriptorEntry<PlainDescriptor<any>>,\n    AnyDescriptorEntry<PlainDescriptor<any>>,\n    AnyDescriptorEntry<PlainDescriptor<any>>,\n    AnyDescriptorEntry<RuntimeDescriptor<any, any>>\n>;\n\n/**\n * Descriptor narrowed to \"any chain that exposes `Resources.UsernameOwnerOf`\".\n *\n * Used as the input to `signMessageWithDotNsIdentity` so the SDK doesn't pin\n * a specific People-chain genesis — anything with the right storage shape\n * (paseo-individuality today, future People Lite, etc.) is accepted.\n */\nexport type PeopleUsernameChain = ChainDefinition & {\n    descriptors: Promise<unknown> & {\n        pallets: PeopleUsernamePallets;\n    };\n};\n\n/**\n * Minimal typed-api shape required to resolve a username on a People chain.\n *\n * This is a narrow structural type — anything with the right\n * `query.Resources.UsernameOwnerOf.getValue` shape works, including a real\n * `TypedApi<PeopleUsernameChain>` slice of a `ChainClient` or a hand-rolled\n * test double.\n */\nexport type PeopleUsernameQueryApi = {\n    query: {\n        Resources: {\n            UsernameOwnerOf: {\n                getValue: (key: Uint8Array) => Promise<SS58String | undefined>;\n            };\n        };\n    };\n};\n\n/**\n * Whether `name` is a single registrable label under `suffix`.\n *\n * `suffix` is the deployment's own TLD, including its leading dot, as\n * `resolveTld` reports it — `\".paseo\"` on Paseo Asset Hub Next V2, `\".test\"`\n * on Previewnet. It is required rather than defaulted, because a name is only\n * valid *relative to a deployment*: `alice.dot` is registrable on one network\n * and meaningless on the other, and a default would silently pick one.\n *\n * @param name - Name to validate, already normalized by {@link normalizeDotNsName}\n * @param suffix - The deployment's TLD suffix, e.g. `\".paseo\"`\n */\nexport function isValidDotNsName(name: string, suffix: string): boolean {\n    if (!name.endsWith(suffix)) return false;\n    return isValidLabel(stripSuffix(name, suffix));\n}\n\n/**\n * One canonical DNS label, matching the on-chain rule.\n *\n * `StringUtils.isSingleLabel` allows lowercase ASCII, digits and non-edge\n * hyphens up to 63 characters, and the registrar additionally requires 3.\n */\nfunction isValidLabel(label: string): boolean {\n    if (label.length < 3 || label.length > 63) return false;\n    return /^[a-z0-9]([a-z0-9-]*[a-z0-9])?$/.test(label);\n}\n\n/**\n * Whether a name can be resolved: one or more valid labels under `suffix`.\n *\n * Broader than {@link isValidDotNsName} on purpose. The registrar only mints\n * single labels, so registration keeps the stricter rule, but the registry\n * supports subnodes and `namehash` hashes them, so `bob.alice.paseo` is\n * resolvable even though it is not registrable.\n *\n * @param name - Name to check, already normalized by {@link normalizeDotNsName}\n * @param suffix - The deployment's TLD suffix, e.g. `\".paseo\"`\n */\nexport function isResolvableDotNsName(name: string, suffix: string): boolean {\n    if (!name.endsWith(suffix)) return false;\n    const labels = stripSuffix(name, suffix).split(\".\");\n    return labels.length > 0 && labels.every(isValidLabel);\n}\n\n/**\n * Normalize a DotNS name for the deployment identified by `suffix`.\n *\n * Case-folds, applies NFC, trims surrounding whitespace, and drops a single\n * trailing root dot, so `Alice.PASEO.` keys the same as `alice.paseo`. This\n * mirrors `normalize_host` in truapi-server, which is what turns a URL into a\n * dotNS identifier — a name arriving from navigation has to key identically\n * here or the two layers disagree about the same input.\n *\n * The NFC step is defensive only: {@link isValidLabel} and the on-chain\n * `StringUtils.isSingleLabel` both allow lowercase ASCII alone, so no name that\n * survives validation can differ between its composed and decomposed spellings.\n * It costs nothing and it keeps this function honest if the label rule ever\n * widens.\n *\n * **The suffix is appended only when `name` contains no dot at all.** A bare\n * label is the friendly path and gets the deployment's suffix; anything already\n * carrying a dot is left exactly as written, so a name from another deployment\n * survives to be refused by validation rather than being buried under our own\n * suffix. Appending on `!endsWith(suffix)` instead would turn `alice.dot` into\n * `alice.dot.paseo`, which is a well-formed subname and would resolve silently\n * to a node nobody owns.\n *\n * The cost of that rule: a bare multi-label name such as `bob.alice` is no\n * longer completed to `bob.alice.paseo`. Distinguishing it from `alice.dot`\n * would require a hardcoded list of every network's TLD, and there are already\n * more TLDs deployed than any such list contains.\n *\n * @param name - Name to normalize\n * @param suffix - The deployment's TLD suffix, e.g. `\".paseo\"`\n */\nexport function normalizeDotNsName(name: string, suffix: string): string {\n    const folded = name.trim().normalize(\"NFC\").toLowerCase();\n    const normalized = folded.endsWith(\".\") ? folded.slice(0, -1) : folded;\n    return normalized.includes(\".\") ? normalized : normalized + suffix;\n}\n\n// `resolveDotNs` / `reverseDotNs` / `isDotNsAvailable` now live in\n// `./dotns-registry.ts` (real `Result`-returning registry calls), replacing the\n// throwing skeletons that used to sit here. See that module + the design doc.\n\n/**\n * Resolve a People / People Lite username to its owning account.\n *\n * Queries `Resources.UsernameOwnerOf` on the caller-supplied typed-api fragment.\n * The returned value is the SS58 address the storage yields, or `null` when no\n * owner is registered for that username.\n *\n * Returns SS58 rather than hex because that is both the form the storage yields\n * and the form `Resources.Consumers` is keyed by, so reading an account's\n * usernames from this result needs no conversion. Callers that want the raw\n * 32-byte key use `accountIdBytes` from `@parity/product-sdk-address`, and\n * {@link accountIdToHex} for the hex form.\n *\n * The `username` is UTF-8 encoded as-is — no normalization is applied. Pass\n * the exact byte string the chain stores (typically with the `.dot` suffix).\n *\n * @internal Exposed for unit testing. Consumers should use\n *   `wallet.signMessageWithDotNsIdentity` instead, which orchestrates the\n *   chain-connection lifecycle.\n */\nexport async function resolvePeopleUsernameOwner(\n    username: string,\n    peopleApi: PeopleUsernameQueryApi,\n): Promise<SS58String | null> {\n    const owner = await peopleApi.query.Resources.UsernameOwnerOf.getValue(\n        new TextEncoder().encode(username),\n    );\n    return owner ?? null;\n}\n\nfunction assertHex(value: string): `0x${string}` {\n    if (!/^0x[0-9a-fA-F]*$/.test(value)) {\n        throw new Error(`Expected 0x-prefixed hex string, got ${value}`);\n    }\n    return value as `0x${string}`;\n}\n\nexport function accountIdHexToBytes(accountId: `0x${string}`): Uint8Array {\n    const bytes = hexToBytes(assertHex(accountId).slice(2));\n    if (bytes.length !== 32) {\n        throw new Error(`Expected 32-byte AccountId, got ${bytes.length} bytes`);\n    }\n    return bytes;\n}\n\n/** Throws on any input that is not exactly 32 bytes, rather than padding it. */\nexport function accountIdBytesToHex(bytes: Uint8Array): `0x${string}` {\n    if (bytes.length !== 32) {\n        throw new Error(`Expected 32-byte AccountId, got ${bytes.length} bytes`);\n    }\n    return `0x${bytesToHex(bytes)}`;\n}\n\n/**\n * The inverse of {@link accountIdHexToBytes}.\n *\n * No in-repo caller: this is the migration path for consumers, after\n * `resolvePeopleUsernameOwner` changed from hex to SS58. Not dead code.\n */\nexport function accountIdToHex(address: string): `0x${string}` {\n    return accountIdBytesToHex(accountIdBytes(address));\n}\n"]}

package/dist/chunk-TUXU2VPS.js

@@ -0,0 +1,14 @@
+// src/core/local-storage-api.ts
+function createLocalStorageApi(kv) {
+  return {
+    get: (key) => kv.get(key),
+    set: (key, value) => kv.set(key, value),
+    getJSON: (key) => kv.getJSON(key),
+    setJSON: (key, value) => kv.setJSON(key, value),
+    remove: (key) => kv.remove(key)
+  };
+}
+
+export { createLocalStorageApi };
+//# sourceMappingURL=chunk-TUXU2VPS.js.map
+//# sourceMappingURL=chunk-TUXU2VPS.js.map

package/dist/chunk-TUXU2VPS.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/local-storage-api.ts"],"names":[],"mappings":";AAgBO,SAAS,sBAAsB,EAAA,EAAmC;AACrE,EAAA,OAAO;AAAA,IACH,GAAA,EAAK,CAAC,GAAA,KAAQ,EAAA,CAAG,IAAI,GAAG,CAAA;AAAA,IACxB,KAAK,CAAC,GAAA,EAAK,UAAU,EAAA,CAAG,GAAA,CAAI,KAAK,KAAK,CAAA;AAAA,IACtC,OAAA,EAAS,CAAI,GAAA,KAAgB,EAAA,CAAG,QAAW,GAAG,CAAA;AAAA,IAC9C,SAAS,CAAI,GAAA,EAAa,UAAa,EAAA,CAAG,OAAA,CAAQ,KAAK,KAAK,CAAA;AAAA,IAC5D,MAAA,EAAQ,CAAC,GAAA,KAAQ,EAAA,CAAG,OAAO,GAAG;AAAA,GAClC;AACJ","file":"chunk-TUXU2VPS.js","sourcesContent":["// Copyright 2026 Parity Technologies (UK) Ltd.\n// SPDX-License-Identifier: Apache-2.0\n/**\n * The one adapter from a {@link LocalKvStore} to the SDK's {@link LocalStorageApi}.\n *\n * Both `createApp` (host-backed store) and `createFakeApp` (in-memory store)\n * build their `localStorage` through here, so the shipped adapter and the test\n * fake cannot drift — which is exactly how `clear()` came to be a no-op in\n * production while the fake emptied (#344). The in-source test below drives one\n * assertion set through this factory over an in-memory store; anything the fake\n * exposes, the real path exposes the same way.\n */\nimport type { LocalKvStore } from \"@parity/product-sdk-local-storage\";\nimport type { LocalStorageApi } from \"./types.js\";\n\n/** Wrap a {@link LocalKvStore} as the SDK's {@link LocalStorageApi}. */\nexport function createLocalStorageApi(kv: LocalKvStore): LocalStorageApi {\n    return {\n        get: (key) => kv.get(key),\n        set: (key, value) => kv.set(key, value),\n        getJSON: <T>(key: string) => kv.getJSON<T>(key),\n        setJSON: <T>(key: string, value: T) => kv.setJSON(key, value),\n        remove: (key) => kv.remove(key),\n    };\n}\n\nif (import.meta.vitest) {\n    const { describe, test, expect } = import.meta.vitest;\n\n    /** A minimal in-memory {@link LocalKvStore}, string- and JSON-aware. */\n    function memoryKvStore(): LocalKvStore {\n        const store = new Map<string, string>();\n        return {\n            async get(key) {\n                return store.get(key) ?? null;\n            },\n            async set(key, value) {\n                store.set(key, value);\n            },\n            async remove(key) {\n                store.delete(key);\n            },\n            async getJSON<T>(key: string) {\n                const raw = store.get(key);\n                return raw === undefined ? null : (JSON.parse(raw) as T);\n            },\n            async setJSON(key, value) {\n                store.set(key, JSON.stringify(value));\n            },\n        };\n    }\n\n    describe(\"createLocalStorageApi\", () => {\n        test(\"round-trips strings and JSON, and remove deletes one key\", async () => {\n            const api = createLocalStorageApi(memoryKvStore());\n\n            await api.set(\"k\", \"v\");\n            await api.setJSON(\"o\", { n: 1 });\n            expect(await api.get(\"k\")).toBe(\"v\");\n            expect(await api.getJSON(\"o\")).toEqual({ n: 1 });\n            expect(await api.get(\"missing\")).toBeNull();\n\n            await api.remove(\"k\");\n            expect(await api.get(\"k\")).toBeNull();\n            // No clear-all: an untouched key stays.\n            expect(await api.getJSON(\"o\")).toEqual({ n: 1 });\n        });\n\n        test(\"exposes exactly the LocalStorageApi surface — no clear()\", () => {\n            const api = createLocalStorageApi(memoryKvStore());\n            expect(Object.keys(api).sort()).toEqual([\"get\", \"getJSON\", \"remove\", \"set\", \"setJSON\"]);\n        });\n    });\n}\n"]}

package/dist/{chunk-DHRCWMY5.js → chunk-VWD6HK2C.js}

@@ -1,4 +1,5 @@
-import { resolvePeopleUsernameOwner, accountIdBytesToHex } from './chunk-BRZNHTLQ.js';
+import { resolvePeopleUsernameOwner, accountIdBytesToHex } from './chunk-7GM3HUZF.js';
+import { createLocalStorageApi } from './chunk-TUXU2VPS.js';
 import { createLogger, configure } from '@parity/product-sdk-logger';
 import { createLocalKvStore } from '@parity/product-sdk-local-storage';
 import { SignerManager } from '@parity/product-sdk-signer';
@@ -6,17 +7,34 @@ import { CloudStorageClient, createLazySigner, calculateCid, ProductCloudStorage
 import { err, ok } from '@parity/result';
 import { isConnected, getClient, createChainClient, destroyAll } from '@parity/product-sdk-chain-client';
 import { accountIdBytes } from '@parity/product-sdk-address';
-import { getAccountsProvider } from '@parity/product-sdk-host';
+import { getTruApi, HostUnavailableError, HostCallFailedError, getAccountsProvider } from '@parity/product-sdk-host';
 
 var log = createLogger("app");
-async function createApp(config) {
+async function createApp(config = {}) {
   if (config.logLevel) {
     configure({ level: config.logLevel });
   }
-  log.info("Creating Product SDK app", { name: config.name });
-  const localKvStore = await createLocalKvStore({ prefix: config.name });
+  if (config.name !== void 0) {
+    log.warn(
+      "createApp: name is deprecated and ignored. Remove the name option. The SDK resolves the app name from system.getProductContext(), dropping the product ID's final domain suffix (my-app.dot -> my-app). Local development IDs stay unchanged."
+    );
+  }
+  const truApi = await getTruApi();
+  if (!truApi) {
+    throw new HostUnavailableError("createApp requires a host product context");
+  }
+  const { productId } = await truApi.system.getProductContext().match(
+    (context) => context,
+    (error) => {
+      throw new HostCallFailedError("system.getProductContext", error);
+    }
+  );
+  const isLocalHost = /^(?:localhost|127\.0\.0\.1|[^:]+\.localhost)(?::\d+)?$/i.test(productId);
+  const name = isLocalHost ? productId : productId.replace(/\.[^.]+$/, "");
+  log.info("Creating Product SDK app", { name });
+  const localKvStore = await createLocalKvStore({ prefix: name });
   const signerManager = new SignerManager({
-    dappName: config.name
+    dappName: productId
   });
   const cloudStorageEnabled = config.cloudStorage !== false;
   const cloudStorageEnvironment = typeof config.cloudStorage === "object" ? config.cloudStorage.environment : "paseo";
@@ -31,16 +49,7 @@ async function createApp(config) {
   } else {
     log.debug("Cloud Storage client disabled");
   }
-  const localStorageApi = {
-    get: (key) => localKvStore.get(key),
-    set: (key, value) => localKvStore.set(key, value),
-    getJSON: (key) => localKvStore.getJSON(key),
-    setJSON: (key, value) => localKvStore.setJSON(key, value),
-    remove: (key) => localKvStore.remove(key),
-    clear: async () => {
-      log.debug("clear() is not supported in container storage mode");
-    }
-  };
+  const localStorageApi = createLocalStorageApi(localKvStore);
   const walletApi = createWalletApi(signerManager);
   const chainApi = {
     getClient(descriptor) {
@@ -90,7 +99,7 @@ async function createApp(config) {
     }
   } : null;
   log.info("Product SDK app created", {
-    name: config.name,
+    name,
     cloudStorage: cloudStorageEnabled ? cloudStorageEnvironment : "disabled"
   });
   return {
@@ -98,7 +107,7 @@ async function createApp(config) {
     localStorage: localStorageApi,
     chain: chainApi,
     cloudStorage: cloudStorageApi,
-    getAppInfo: () => ({ ...config })
+    getAppInfo: () => ({ ...config, name })
   };
 }
 function createWalletApi(signerManager) {
@@ -236,5 +245,5 @@ async function getPrimaryUsername(accountsProvider) {
 }
 
 export { createApp };
-//# sourceMappingURL=chunk-DHRCWMY5.js.map
-//# sourceMappingURL=chunk-DHRCWMY5.js.map
+//# sourceMappingURL=chunk-VWD6HK2C.js.map
+//# sourceMappingURL=chunk-VWD6HK2C.js.map

package/dist/chunk-VWD6HK2C.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/createApp.ts"],"names":["err"],"mappings":";;;;;;;;;;;AAgDA,IAAM,GAAA,GAAM,aAAa,KAAK,CAAA;AAuC9B,eAAsB,SAAA,CAAU,MAAA,GAAoB,EAAC,EAAiB;AAElE,EAAA,IAAI,OAAO,QAAA,EAAU;AACjB,IAAA,SAAA,CAAU,EAAE,KAAA,EAAO,MAAA,CAAO,QAAA,EAAU,CAAA;AAAA,EACxC;AAEA,EAAA,IAAI,MAAA,CAAO,SAAS,MAAA,EAAW;AAC3B,IAAA,GAAA,CAAI,IAAA;AAAA,MACA;AAAA,KACJ;AAAA,EACJ;AAEA,EAAA,MAAM,MAAA,GAAS,MAAM,SAAA,EAAU;AAC/B,EAAA,IAAI,CAAC,MAAA,EAAQ;AACT,IAAA,MAAM,IAAI,qBAAqB,2CAA2C,CAAA;AAAA,EAC9E;AACA,EAAA,MAAM,EAAE,SAAA,EAAU,GAAI,MAAM,MAAA,CAAO,MAAA,CAAO,mBAAkB,CAAE,KAAA;AAAA,IAC1D,CAAC,OAAA,KAAY,OAAA;AAAA,IACb,CAAC,KAAA,KAAU;AACP,MAAA,MAAM,IAAI,mBAAA,CAAoB,0BAAA,EAA4B,KAAK,CAAA;AAAA,IACnE;AAAA,GACJ;AAEA,EAAA,MAAM,WAAA,GAAc,yDAAA,CAA0D,IAAA,CAAK,SAAS,CAAA;AAC5F,EAAA,MAAM,OAAO,WAAA,GAAc,SAAA,GAAY,SAAA,CAAU,OAAA,CAAQ,YAAY,EAAE,CAAA;AAEvE,EAAA,GAAA,CAAI,IAAA,CAAK,0BAAA,EAA4B,EAAE,IAAA,EAAM,CAAA;AAG7C,EAAA,MAAM,eAAe,MAAM,kBAAA,CAAmB,EAAE,MAAA,EAAQ,MAAM,CAAA;AAG9D,EAAA,MAAM,aAAA,GAAgB,IAAI,aAAA,CAAc;AAAA,IACpC,QAAA,EAAU;AAAA,GACb,CAAA;AAUD,EAAA,MAAM,mBAAA,GAAsB,OAAO,YAAA,KAAiB,KAAA;AACpD,EAAA,MAAM,0BACF,OAAO,MAAA,CAAO,iBAAiB,QAAA,GAAW,MAAA,CAAO,aAAa,WAAA,GAAc,OAAA;AAChF,EAAA,MAAM,kBAAA,GAAqB,mBAAA,GACrB,MAAM,kBAAA,CAAmB,MAAA,CAAO;AAAA,IAC5B,WAAA,EAAa,uBAAA;AAAA,IACb,MAAA,EAAQ,gBAAA,CAAiB,MAAM,aAAA,CAAc,WAAW;AAAA,GAC3D,CAAA,GACD,IAAA;AAEN,EAAA,IAAI,mBAAA,EAAqB;AACrB,IAAA,GAAA,CAAI,MAAM,6CAAA,EAA+C;AAAA,MACrD,WAAA,EAAa;AAAA,KAChB,CAAA;AAAA,EACL,CAAA,MAAO;AACH,IAAA,GAAA,CAAI,MAAM,+BAA+B,CAAA;AAAA,EAC7C;AAGA,EAAA,MAAM,eAAA,GAAmC,sBAAsB,YAAY,CAAA;AAG3E,EAAA,MAAM,SAAA,GAAY,gBAAgB,aAAa,CAAA;AAG/C,EAAA,MAAM,QAAA,GAAqB;AAAA,IACvB,UAAU,UAAA,EAAY;AAClB,MAAA,GAAA,CAAI,MAAM,kBAAA,EAAoB,EAAE,OAAA,EAAS,UAAA,CAAW,SAAS,CAAA;AAC7D,MAAA,MAAM,MAAA,GAAS,UAAU,UAAU,CAAA;AACnC,MAAA,OAAO,MAAA,CAAO,YAAY,UAAU,CAAA;AAAA,IACxC,CAAA;AAAA,IAEA,aAAa,UAAA,EAAY;AACrB,MAAA,GAAA,CAAI,MAAM,qBAAA,EAAuB,EAAE,OAAA,EAAS,UAAA,CAAW,SAAS,CAAA;AAChE,MAAA,OAAO,UAAU,UAAU,CAAA;AAAA,IAC/B,CAAA;AAAA,IAEA,MAAM,QAAmD,MAAA,EAAW;AAChE,MAAA,GAAA,CAAI,KAAA,CAAM,kBAAkB,EAAE,MAAA,EAAQ,OAAO,IAAA,CAAK,MAAM,GAAG,CAAA;AAC3D,MAAA,OAAO,iBAAA,CAAkB,EAAE,MAAA,EAAQ,CAAA;AAAA,IACvC,CAAA;AAAA,IAEA,YAAY,UAAA,EAAY;AACpB,MAAA,OAAO,YAAY,UAAU,CAAA;AAAA,IACjC,CAAA;AAAA,IAEA,UAAA,GAAa;AACT,MAAA,GAAA,CAAI,MAAM,mBAAmB,CAAA;AAC7B,MAAA,UAAA,EAAW;AAAA,IACf;AAAA,GACJ;AAGA,EAAA,MAAM,kBAA0C,kBAAA,GAC1C;AAAA,IACI,MAAA,EAAQ,OAAO,IAAA,KAAS;AACpB,MAAA,MAAM,KAAA,GAAQ,OAAO,IAAA,KAAS,QAAA,GAAW,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,IAAI,CAAA,GAAI,IAAA;AAC1E,MAAA,IAAI;AAMA,QAAA,MAAM,QAAA,GAAW,MAAM,kBAAA,CAClB,KAAA,CAAM,KAAK,CAAA,CACX,YAAA,CAAa,IAAI,CAAA,CACjB,IAAA,EAAK;AACV,QAAA,IAAI,CAAC,SAAS,GAAA,EAAK;AACf,UAAA,OAAO,GAAA;AAAA,YACH,IAAI,wBAAA;AAAA,cACA;AAAA;AACJ,WACJ;AAAA,QACJ;AACA,QAAA,OAAO,EAAA,CAAG,QAAA,CAAS,GAAA,CAAI,QAAA,EAAU,CAAA;AAAA,MACrC,SAAS,KAAA,EAAO;AACZ,QAAA,MAAM,UAAU,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,OAAA,GAAU,OAAO,KAAK,CAAA;AACrE,QAAA,OAAO,IAAI,IAAI,wBAAA,CAAyB,SAAS,EAAE,KAAA,EAAO,CAAC,CAAA;AAAA,MAC/D;AAAA,IACJ,CAAA;AAAA,IACA,KAAA,EAAO,CAAC,GAAA,KAAQ,kBAAA,CAAmB,WAAW,GAAG,CAAA;AAAA,IACjD,UAAA,EAAY,OAAO,IAAA,KAAS;AACxB,MAAA,MAAM,KAAA,GAAQ,OAAO,IAAA,KAAS,QAAA,GAAW,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,IAAI,CAAA,GAAI,IAAA;AAC1E,MAAA,MAAM,GAAA,GAAM,MAAM,YAAA,CAAa,KAAK,CAAA;AACpC,MAAA,OAAO,IAAI,QAAA,EAAS;AAAA,IACxB;AAAA,GACJ,GACA,IAAA;AAEN,EAAA,GAAA,CAAI,KAAK,yBAAA,EAA2B;AAAA,IAChC,IAAA;AAAA,IACA,YAAA,EAAc,sBAAsB,uBAAA,GAA0B;AAAA,GACjE,CAAA;AAED,EAAA,OAAO;AAAA,IACH,MAAA,EAAQ,SAAA;AAAA,IACR,YAAA,EAAc,eAAA;AAAA,IACd,KAAA,EAAO,QAAA;AAAA,IACP,YAAA,EAAc,eAAA;AAAA,IACd,UAAA,EAAY,OAAO,EAAE,GAAG,QAAQ,IAAA,EAAK;AAAA,GACzC;AACJ;AAKA,SAAS,gBAAgB,aAAA,EAAyC;AAE9D,EAAA,MAAM,wBAAA,uBAA+B,GAAA,EAAuC;AAG5E,EAAA,aAAA,CAAc,SAAA,CAAU,CAAC,KAAA,KAAU;AAC/B,IAAA,MAAM,OAAA,GAAU,MAAM,eAAA,GAChB;AAAA,MACI,OAAA,EAAS,MAAM,eAAA,CAAgB,OAAA;AAAA,MAC/B,IAAA,EAAM,KAAA,CAAM,eAAA,CAAgB,IAAA,IAAQ,MAAA;AAAA,MACpC,MAAA,EAAQ,MAAM,eAAA,CAAgB;AAAA,KAClC,GACA,IAAA;AACN,IAAA,KAAA,MAAW,YAAY,wBAAA,EAA0B;AAC7C,MAAA,IAAI;AACA,QAAA,QAAA,CAAS,OAAO,CAAA;AAAA,MACpB,SAAS,CAAA,EAAG;AACR,QAAA,GAAA,CAAI,IAAA,CAAK,+BAAA,EAAiC,EAAE,KAAA,EAAO,GAAG,CAAA;AAAA,MAC1D;AAAA,IACJ;AAAA,EACJ,CAAC,CAAA;AAED,EAAA,OAAO;AAAA,IACH,MAAM,OAAA,GAA4C;AAC9C,MAAA,MAAM,MAAA,GAAS,MAAM,aAAA,CAAc,OAAA,EAAQ;AAC3C,MAAA,IAAI,CAAC,OAAO,EAAA,EAAI;AACZ,QAAA,MAAM,IAAI,KAAA,CAAM,MAAA,CAAO,KAAA,CAAM,OAAO,CAAA;AAAA,MACxC;AACA,MAAA,OAAO;AAAA,QACH,QAAA,EAAU,MAAA,CAAO,KAAA,CAAM,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,UAC/B,SAAS,CAAA,CAAE,OAAA;AAAA,UACX,IAAA,EAAM,EAAE,IAAA,IAAQ,MAAA;AAAA,UAChB,QAAQ,CAAA,CAAE;AAAA,SACd,CAAE;AAAA,OACN;AAAA,IACJ,CAAA;AAAA,IAEA,MAAM,UAAA,GAA4B;AAC9B,MAAA,aAAA,CAAc,UAAA,EAAW;AAAA,IAC7B,CAAA;AAAA,IAEA,WAAA,GAAyB;AACrB,MAAA,OAAO,cAAc,QAAA,EAAS,CAAE,QAAA,CAAS,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,QACjD,SAAS,CAAA,CAAE,OAAA;AAAA,QACX,IAAA,EAAM,EAAE,IAAA,IAAQ,MAAA;AAAA,QAChB,QAAQ,CAAA,CAAE;AAAA,OACd,CAAE,CAAA;AAAA,IACN,CAAA;AAAA,IAEA,kBAAA,GAAqC;AACjC,MAAA,MAAM,QAAA,GAAW,aAAA,CAAc,QAAA,EAAS,CAAE,eAAA;AAC1C,MAAA,IAAI,CAAC,UAAU,OAAO,IAAA;AACtB,MAAA,OAAO;AAAA,QACH,SAAS,QAAA,CAAS,OAAA;AAAA,QAClB,IAAA,EAAM,SAAS,IAAA,IAAQ,MAAA;AAAA,QACvB,QAAQ,QAAA,CAAS;AAAA,OACrB;AAAA,IACJ,CAAA;AAAA,IAEA,cAAc,OAAA,EAAuB;AACjC,MAAA,aAAA,CAAc,cAAc,OAAO,CAAA;AAAA,IACvC,CAAA;AAAA,IAEA,MAAM,YAAY,OAAA,EAAmD;AACjE,MAAA,MAAM,KAAA,GAAQ,OAAO,OAAA,KAAY,QAAA,GAAW,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,OAAO,CAAA,GAAI,OAAA;AAChF,MAAA,MAAM,MAAA,GAAS,MAAM,aAAA,CAAc,OAAA,CAAQ,KAAK,CAAA;AAChD,MAAA,IAAI,CAAC,OAAO,EAAA,EAAI;AACZ,QAAA,MAAM,IAAI,KAAA,CAAM,MAAA,CAAO,KAAA,CAAM,OAAO,CAAA;AAAA,MACxC;AACA,MAAA,OAAO,MAAA,CAAO,KAAA;AAAA,IAClB,CAAA;AAAA,IAEA,MAAM,6BAA6B,IAAA,EAAM;AACrC,MAAA,MAAM,OAAA,GACF,OAAO,IAAA,CAAK,OAAA,KAAY,QAAA,GAClB,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,GACrC,IAAA,CAAK,OAAA;AACf,MAAA,MAAM,gBAAA,GAAmB,MAAM,uBAAA,EAAwB;AACvD,MAAA,MAAM,QAAA,GAAW,IAAA,CAAK,QAAA,IAAa,MAAM,mBAAmB,gBAAgB,CAAA;AAS5E,MAAA,MAAM,eAAe,WAAA,CAAY,IAAA,CAAK,WAAW,CAAA,GAC3C,SAAA,CAAU,KAAK,WAAW,CAAA,GAC1B,MAAM,iBAAA,CAAkB,EAAE,QAAQ,EAAE,MAAA,EAAQ,KAAK,WAAA,EAAY,EAAG,CAAA,CAAE,IAAA;AAAA,QAC9D,CAAC,CAAA,KAAM,CAAA,CAAE,GAAA,CAAI;AAAA,OACjB;AAMN,MAAA,MAAM,YAAY,YAAA,CAAa,WAAA;AAAA,QAC3B,IAAA,CAAK;AAAA,OACT;AACA,MAAA,MAAM,KAAA,GAAQ,MAAM,0BAAA,CAA2B,QAAA,EAAU,SAAS,CAAA;AAClE,MAAA,IAAI,CAAC,KAAA,EAAO;AACR,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,gCAAA,EAAmC,QAAQ,CAAA,CAAA,CAAG,CAAA;AAAA,MAClE;AAEA,MAAA,MAAM,SAAA,GAAY,eAAe,KAAK,CAAA;AAItC,MAAA,MAAM,SAAA,GAAY,oBAAoB,SAAS,CAAA;AAC/C,MAAA,MAAM,SAAS,gBAAA,CAAiB,sBAAA,CAAuB,EAAE,SAAA,EAAW,IAAA,EAAM,UAAU,CAAA;AAEpF,MAAA,IAAI;AACA,QAAA,OAAO;AAAA,UACH,QAAA;AAAA,UACA,SAAA;AAAA,UACA,SAAA,EAAW,MAAM,MAAA,CAAO,SAAA,CAAU,OAAO;AAAA,SAC7C;AAAA,MACJ,SAAS,KAAA,EAAO;AACZ,QAAA,MAAM,IAAI,KAAA;AAAA,UACN,CAAA,oCAAA,EAAuC,QAAQ,CAAA,GAAA,EAC3C,KAAA,YAAiB,QAAQ,KAAA,CAAM,OAAA,GAAU,MAAA,CAAO,KAAK,CACzD,CAAA,CAAA;AAAA,UACA,EAAE,KAAA;AAAM,SACZ;AAAA,MACJ;AAAA,IACJ,CAAA;AAAA,IAEA,gBAAgB,QAAA,EAAyD;AACrE,MAAA,wBAAA,CAAyB,IAAI,QAAQ,CAAA;AACrC,MAAA,OAAO,MAAM,wBAAA,CAAyB,MAAA,CAAO,QAAQ,CAAA;AAAA,IACzD,CAAA;AAAA,IAEA,iBAAA,GAAoC;AAGhC,MAAA,GAAA,CAAI,IAAA;AAAA,QACA;AAAA,OACJ;AACA,MAAA,OAAO,IAAA;AAAA,IACX,CAAA;AAAA,IAEA,iBAAA,GAAmC;AAG/B,MAAA,GAAA,CAAI,IAAA;AAAA,QACA;AAAA,OACJ;AACA,MAAA,OAAO,IAAA;AAAA,IACX,CAAA;AAAA,IAEA,MAAM,YAAY,QAAA,EAA2C;AAEzD,MAAA,MAAM,IAAI,KAAA;AAAA,QACN;AAAA,OAEJ;AAAA,IACJ;AAAA,GACJ;AACJ;AAIA,eAAe,uBAAA,GAAyD;AACpE,EAAA,MAAM,QAAA,GAAW,MAAM,mBAAA,EAAoB;AAC3C,EAAA,IAAI,CAAC,QAAA,EAAU;AACX,IAAA,MAAM,IAAI,MAAM,yCAAyC,CAAA;AAAA,EAC7D;AACA,EAAA,OAAO,QAAA;AACX;AAEA,eAAe,mBAAmB,gBAAA,EAAyD;AACvF,EAAA,MAAM,MAAA,GAAS,MAAM,gBAAA,CAAiB,SAAA,EAAU,CAAE,KAAA;AAAA,IAC9C,CAAC,KAAA,KAAU,KAAA;AAAA,IACX,CAACA,IAAAA,KAAQ;AACL,MAAA,MAAMA,IAAAA;AAAA,IACV;AAAA,GACJ;AACA,EAAA,MAAM,QAAA,GAAW,MAAA,CAAO,eAAA,CAAgB,IAAA,EAAK;AAC7C,EAAA,IAAI,CAAC,QAAA,EAAU;AACX,IAAA,MAAM,IAAI,MAAM,wDAAwD,CAAA;AAAA,EAC5E;AACA,EAAA,OAAO,QAAA;AACX","file":"chunk-VWD6HK2C.js","sourcesContent":["// Copyright 2026 Parity Technologies (UK) Ltd.\n// SPDX-License-Identifier: Apache-2.0\n/**\n * createApp - Main entry point for the Product SDK\n *\n * Creates an App instance with wallet, storage, chain, and cloud storage APIs.\n */\n\nimport type { ChainDefinition } from \"polkadot-api\";\nimport type {\n    App,\n    AppConfig,\n    WalletApi,\n    ChainApi,\n    Account,\n    CloudStorageApi,\n    LocalStorageApi,\n} from \"./types.js\";\nimport { createLocalStorageApi } from \"./local-storage-api.js\";\nimport { configure, createLogger } from \"@parity/product-sdk-logger\";\nimport { createLocalKvStore } from \"@parity/product-sdk-local-storage\";\nimport { SignerManager } from \"@parity/product-sdk-signer\";\nimport {\n    CloudStorageClient,\n    ProductCloudStorageError,\n    calculateCid,\n    createLazySigner,\n} from \"@parity/product-sdk-cloud-storage\";\nimport { err, ok } from \"@parity/result\";\nimport {\n    createChainClient,\n    getClient,\n    isConnected,\n    destroyAll,\n} from \"@parity/product-sdk-chain-client\";\nimport { accountIdBytes } from \"@parity/product-sdk-address\";\nimport {\n    getAccountsProvider,\n    getTruApi,\n    HostCallFailedError,\n    HostUnavailableError,\n} from \"@parity/product-sdk-host\";\nimport {\n    accountIdBytesToHex,\n    type PeopleUsernameQueryApi,\n    resolvePeopleUsernameOwner,\n} from \"../identity/dotns.js\";\n\nconst log = createLogger(\"app\");\n\n/**\n * Create a new Product SDK app instance\n *\n * @param config - Application configuration\n * @returns App instance with all APIs\n *\n * @example\n * ```ts\n * import { createApp } from '@parity/product-sdk';\n *\n * // Default: cloud storage enabled with paseo environment\n * const app = await createApp({\n *   logLevel: 'info',\n * });\n *\n * // Custom cloud storage environment\n * const prodApp = await createApp({\n *   cloudStorage: { environment: 'polkadot' },\n * });\n *\n * // Disable cloud storage entirely\n * const noCloudStorageApp = await createApp({\n *   cloudStorage: false,\n * });\n *\n * // Connect wallet\n * const { accounts } = await app.wallet.connect();\n *\n * // Use storage\n * await app.localStorage.set('key', 'value');\n *\n * // Use cloud storage (check for null if it might be disabled)\n * if (app.cloudStorage) {\n *   const cid = await app.cloudStorage.upload('hello world');\n * }\n * ```\n */\nexport async function createApp(config: AppConfig = {}): Promise<App> {\n    // Set log level if specified\n    if (config.logLevel) {\n        configure({ level: config.logLevel });\n    }\n\n    if (config.name !== undefined) {\n        log.warn(\n            \"createApp: name is deprecated and ignored. Remove the name option. The SDK resolves the app name from system.getProductContext(), dropping the product ID's final domain suffix (my-app.dot -> my-app). Local development IDs stay unchanged.\",\n        );\n    }\n\n    const truApi = await getTruApi();\n    if (!truApi) {\n        throw new HostUnavailableError(\"createApp requires a host product context\");\n    }\n    const { productId } = await truApi.system.getProductContext().match(\n        (context) => context,\n        (error) => {\n            throw new HostCallFailedError(\"system.getProductContext\", error);\n        },\n    );\n\n    const isLocalHost = /^(?:localhost|127\\.0\\.0\\.1|[^:]+\\.localhost)(?::\\d+)?$/i.test(productId);\n    const name = isLocalHost ? productId : productId.replace(/\\.[^.]+$/, \"\");\n\n    log.info(\"Creating Product SDK app\", { name });\n\n    // Initialize storage (container-only - will throw if not in container)\n    const localKvStore = await createLocalKvStore({ prefix: name });\n\n    // Initialize signer manager\n    const signerManager = new SignerManager({\n        dappName: productId,\n    });\n\n    // Initialize cloud storage client (configurable, defaults to paseo).\n    //\n    // The signer is wrapped lazily so the cloud storage client can be built before\n    // an account is selected. Uploads will throw a clear error if no signer\n    // is available at submission time. Reads (fetch / fetchJson) don't need\n    // a signer, so they work regardless of whether an account is selected --\n    // but they are container-only and throw CloudStorageHostUnavailableError\n    // outside a host container (no IPFS-gateway fallback).\n    const cloudStorageEnabled = config.cloudStorage !== false;\n    const cloudStorageEnvironment =\n        typeof config.cloudStorage === \"object\" ? config.cloudStorage.environment : \"paseo\";\n    const cloudStorageClient = cloudStorageEnabled\n        ? await CloudStorageClient.create({\n              environment: cloudStorageEnvironment,\n              signer: createLazySigner(() => signerManager.getSigner()),\n          })\n        : null;\n\n    if (cloudStorageEnabled) {\n        log.debug(\"Cloud Storage client (Bulletin) initialized\", {\n            environment: cloudStorageEnvironment,\n        });\n    } else {\n        log.debug(\"Cloud Storage client disabled\");\n    }\n\n    // Storage API adapter — shared with `createFakeApp` so the two cannot drift.\n    const localStorageApi: LocalStorageApi = createLocalStorageApi(localKvStore);\n\n    // Create wallet API adapter\n    const walletApi = createWalletApi(signerManager);\n\n    // Create chain API\n    const chainApi: ChainApi = {\n        getClient(descriptor) {\n            log.debug(\"getClient called\", { genesis: descriptor.genesis });\n            const client = getClient(descriptor);\n            return client.getTypedApi(descriptor);\n        },\n\n        getRawClient(descriptor) {\n            log.debug(\"getRawClient called\", { genesis: descriptor.genesis });\n            return getClient(descriptor);\n        },\n\n        async connect<T extends Record<string, ChainDefinition>>(chains: T) {\n            log.debug(\"connect called\", { chains: Object.keys(chains) });\n            return createChainClient({ chains });\n        },\n\n        isConnected(descriptor) {\n            return isConnected(descriptor);\n        },\n\n        destroyAll() {\n            log.debug(\"destroyAll called\");\n            destroyAll();\n        },\n    };\n\n    // Create Cloud Storage API adapter (null if disabled)\n    const cloudStorageApi: CloudStorageApi | null = cloudStorageClient\n        ? {\n              upload: async (data) => {\n                  const bytes = typeof data === \"string\" ? new TextEncoder().encode(data) : data;\n                  try {\n                      // Explicitly request a DAG-PB manifest so chunked uploads always\n                      // resolve to a single root CID. Without this, AsyncBulletinClient\n                      // can return `result.cid: undefined` for chunked-without-manifest\n                      // uploads — but app consumers expect a CID they can hand to\n                      // `fetch(cid)`, so treat a missing CID as an error.\n                      const uploaded = await cloudStorageClient\n                          .store(bytes)\n                          .withManifest(true)\n                          .send();\n                      if (!uploaded.cid) {\n                          return err(\n                              new ProductCloudStorageError(\n                                  \"Cloud storage upload returned no CID despite .withManifest(true). Upstream contract may have shifted — file an issue.\",\n                              ),\n                          );\n                      }\n                      return ok(uploaded.cid.toString());\n                  } catch (cause) {\n                      const message = cause instanceof Error ? cause.message : String(cause);\n                      return err(new ProductCloudStorageError(message, { cause }));\n                  }\n              },\n              fetch: (cid) => cloudStorageClient.fetchBytes(cid),\n              computeCid: async (data) => {\n                  const bytes = typeof data === \"string\" ? new TextEncoder().encode(data) : data;\n                  const cid = await calculateCid(bytes);\n                  return cid.toString();\n              },\n          }\n        : null;\n\n    log.info(\"Product SDK app created\", {\n        name,\n        cloudStorage: cloudStorageEnabled ? cloudStorageEnvironment : \"disabled\",\n    });\n\n    return {\n        wallet: walletApi,\n        localStorage: localStorageApi,\n        chain: chainApi,\n        cloudStorage: cloudStorageApi,\n        getAppInfo: () => ({ ...config, name }),\n    };\n}\n\n/**\n * Create wallet API adapter using SignerManager from leaf package\n */\nfunction createWalletApi(signerManager: SignerManager): WalletApi {\n    // Track account change subscribers\n    const accountChangeSubscribers = new Set<(account: Account | null) => void>();\n\n    // Subscribe to signer manager state changes\n    signerManager.subscribe((state) => {\n        const account = state.selectedAccount\n            ? {\n                  address: state.selectedAccount.address,\n                  name: state.selectedAccount.name ?? undefined,\n                  source: state.selectedAccount.source,\n              }\n            : null;\n        for (const callback of accountChangeSubscribers) {\n            try {\n                callback(account);\n            } catch (e) {\n                log.warn(\"Account change callback threw\", { error: e });\n            }\n        }\n    });\n\n    return {\n        async connect(): Promise<{ accounts: Account[] }> {\n            const result = await signerManager.connect();\n            if (!result.ok) {\n                throw new Error(result.error.message);\n            }\n            return {\n                accounts: result.value.map((a) => ({\n                    address: a.address,\n                    name: a.name ?? undefined,\n                    source: a.source,\n                })),\n            };\n        },\n\n        async disconnect(): Promise<void> {\n            signerManager.disconnect();\n        },\n\n        getAccounts(): Account[] {\n            return signerManager.getState().accounts.map((a) => ({\n                address: a.address,\n                name: a.name ?? undefined,\n                source: a.source,\n            }));\n        },\n\n        getSelectedAccount(): Account | null {\n            const selected = signerManager.getState().selectedAccount;\n            if (!selected) return null;\n            return {\n                address: selected.address,\n                name: selected.name ?? undefined,\n                source: selected.source,\n            };\n        },\n\n        selectAccount(address: string): void {\n            signerManager.selectAccount(address);\n        },\n\n        async signMessage(message: string | Uint8Array): Promise<Uint8Array> {\n            const bytes = typeof message === \"string\" ? new TextEncoder().encode(message) : message;\n            const result = await signerManager.signRaw(bytes);\n            if (!result.ok) {\n                throw new Error(result.error.message);\n            }\n            return result.value;\n        },\n\n        async signMessageWithDotNsIdentity(args) {\n            const message =\n                typeof args.message === \"string\"\n                    ? new TextEncoder().encode(args.message)\n                    : args.message;\n            const accountsProvider = await getHostAccountsProvider();\n            const username = args.username ?? (await getPrimaryUsername(accountsProvider));\n\n            // Reuse an already-connected People chain when the caller has\n            // wired one up via `app.chain.connect({ ..., <name>: peopleChain })`.\n            // Fall back to opening a transient connection so first-time users\n            // don't have to think about chain lifecycles. The chain-client\n            // module caches by genesis fingerprint, so subsequent\n            // signMessageWithDotNsIdentity calls share whichever connection\n            // got established first.\n            const peopleClient = isConnected(args.peopleChain)\n                ? getClient(args.peopleChain)\n                : await createChainClient({ chains: { people: args.peopleChain } }).then(\n                      (c) => c.raw.people,\n                  );\n            // PAPI's `TypedApi.query.X.Y.getValue` is variadic\n            // (`...args: [...WithCallOptions<Args>]`) so it's not assignable\n            // to our deliberately-narrow `(key) => Promise<...>` shape. The\n            // resolver only ever passes the storage key; the cast adapts the\n            // wider PAPI surface to the minimum we depend on.\n            const peopleApi = peopleClient.getTypedApi(\n                args.peopleChain,\n            ) as unknown as PeopleUsernameQueryApi;\n            const owner = await resolvePeopleUsernameOwner(username, peopleApi);\n            if (!owner) {\n                throw new Error(`No account owns DotNS username \"${username}\"`);\n            }\n\n            const publicKey = accountIdBytes(owner);\n            // This field is hex, not the SS58 the resolver now returns. Converted\n            // here and not in the try, so an address failure is not reported as a\n            // signing failure.\n            const accountId = accountIdBytesToHex(publicKey);\n            const signer = accountsProvider.getLegacyAccountSigner({ publicKey, name: username });\n\n            try {\n                return {\n                    username,\n                    accountId,\n                    signature: await signer.signBytes(message),\n                };\n            } catch (cause) {\n                throw new Error(\n                    `Failed to sign with DotNS username \"${username}\": ${\n                        cause instanceof Error ? cause.message : String(cause)\n                    }`,\n                    { cause },\n                );\n            }\n        },\n\n        onAccountChange(callback: (account: Account | null) => void): () => void {\n            accountChangeSubscribers.add(callback);\n            return () => accountChangeSubscribers.delete(callback);\n        },\n\n        getProductAccount(): Account | null {\n            // Product accounts require async call - this sync API can't support it properly\n            // Users should use SignerManager.getProductAccount() directly\n            log.warn(\n                \"getProductAccount() is deprecated - use SignerManager.getProductAccount() directly\",\n            );\n            return null;\n        },\n\n        getAnonymousAlias(): string | null {\n            // Anonymous aliases require async call - this sync API can't support it properly\n            // Users should use SignerManager.getProductAccountAlias() directly\n            log.warn(\n                \"getAnonymousAlias() is deprecated - use SignerManager.getProductAccountAlias() directly\",\n            );\n            return null;\n        },\n\n        async createProof(_message: Uint8Array): Promise<Uint8Array> {\n            // Ring VRF proofs require SignerManager.createRingVRFProof() directly\n            throw new Error(\n                \"createProof() is not implemented in the App API. \" +\n                    \"Use SignerManager.createRingVRFProof() directly.\",\n            );\n        },\n    };\n}\n\ntype HostAccountsProvider = NonNullable<Awaited<ReturnType<typeof getAccountsProvider>>>;\n\nasync function getHostAccountsProvider(): Promise<HostAccountsProvider> {\n    const provider = await getAccountsProvider();\n    if (!provider) {\n        throw new Error(\"Host accounts provider is not available\");\n    }\n    return provider;\n}\n\nasync function getPrimaryUsername(accountsProvider: HostAccountsProvider): Promise<string> {\n    const result = await accountsProvider.getUserId().match(\n        (value) => value,\n        (err) => {\n            throw err;\n        },\n    );\n    const username = result.primaryUsername.trim();\n    if (!username) {\n        throw new Error(\"Host identity did not provide a primary DotNS username\");\n    }\n    return username;\n}\n"]}

package/dist/core/index.d.ts

@@ -1,6 +1,6 @@
-export { createApp } from '../index.js';
 export { LogEntry, LogHandler, LogLevel, Logger, LoggerConfig, configure, createLogger } from '@parity/product-sdk-logger';
-export { A as Account, b as App, c as AppConfig, C as ChainApi, a as CloudStorageApi, d as CloudStorageConfig, D as DotNsIdentitySignature, L as LocalStorageApi, S as SignMessageWithDotNsIdentityArgs, W as WalletApi } from '../types-B5Zx4RNq.js';
+import { c as AppConfig, b as App } from '../types-BpWw-OJl.js';
+export { A as Account, d as AppInfo, C as ChainApi, a as CloudStorageApi, e as CloudStorageConfig, D as DotNsIdentitySignature, L as LocalStorageApi, S as SignMessageWithDotNsIdentityArgs, W as WalletApi } from '../types-BpWw-OJl.js';
 export { ChainClient } from '@parity/product-sdk-chain-client';
 export { ChainDefinition, PolkadotClient, TypedApi } from 'polkadot-api';
 import '@parity/result';
@@ -9,4 +9,51 @@ import '@parity/product-sdk-host';
 import '@parity/product-sdk-signer';
 import '@parity/product-sdk-local-storage';
 import '@parity/product-sdk-cloud-storage';
-import '../dotns-bswWAmR2.js';
+import '../dotns-CtmOwVQW.js';
+
+/**
+ * createApp - Main entry point for the Product SDK
+ *
+ * Creates an App instance with wallet, storage, chain, and cloud storage APIs.
+ */
+
+/**
+ * Create a new Product SDK app instance
+ *
+ * @param config - Application configuration
+ * @returns App instance with all APIs
+ *
+ * @example
+ * ```ts
+ * import { createApp } from '@parity/product-sdk';
+ *
+ * // Default: cloud storage enabled with paseo environment
+ * const app = await createApp({
+ *   logLevel: 'info',
+ * });
+ *
+ * // Custom cloud storage environment
+ * const prodApp = await createApp({
+ *   cloudStorage: { environment: 'polkadot' },
+ * });
+ *
+ * // Disable cloud storage entirely
+ * const noCloudStorageApp = await createApp({
+ *   cloudStorage: false,
+ * });
+ *
+ * // Connect wallet
+ * const { accounts } = await app.wallet.connect();
+ *
+ * // Use storage
+ * await app.localStorage.set('key', 'value');
+ *
+ * // Use cloud storage (check for null if it might be disabled)
+ * if (app.cloudStorage) {
+ *   const cid = await app.cloudStorage.upload('hello world');
+ * }
+ * ```
+ */
+declare function createApp(config?: AppConfig): Promise<App>;
+
+export { App, AppConfig, createApp };

package/dist/core/index.js

@@ -1,5 +1,6 @@
 export { configure, createLogger } from '../chunk-JVJ552RU.js';
-export { createApp } from '../chunk-DHRCWMY5.js';
-import '../chunk-BRZNHTLQ.js';
+export { createApp } from '../chunk-VWD6HK2C.js';
+import '../chunk-7GM3HUZF.js';
+import '../chunk-TUXU2VPS.js';
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/{dotns-bswWAmR2.d.ts → dotns-CtmOwVQW.d.ts}

@@ -50,8 +50,8 @@ type PeopleUsernameQueryApi = {
  * Whether `name` is a single registrable label under `suffix`.
  *
  * `suffix` is the deployment's own TLD, including its leading dot, as
- * `resolveTld` reports it — `".dot"` on Paseo Asset Hub Previewnet, `".paseo"`
- * on Next V2. It is required rather than defaulted, because a name is only
+ * `resolveTld` reports it — `".paseo"` on Paseo Asset Hub Next V2, `".test"`
+ * on Previewnet. It is required rather than defaulted, because a name is only
  * valid *relative to a deployment*: `alice.dot` is registrable on one network
  * and meaningless on the other, and a default would silently pick one.
  *

package/dist/identity/index.d.ts

@@ -1,4 +1,4 @@
-export { P as PeopleUsernameChain, a as PeopleUsernameQueryApi, b as accountIdHexToBytes, c as accountIdToHex, i as isResolvableDotNsName, d as isValidDotNsName, n as normalizeDotNsName, r as resolvePeopleUsernameOwner } from '../dotns-bswWAmR2.js';
+export { P as PeopleUsernameChain, a as PeopleUsernameQueryApi, b as accountIdHexToBytes, c as accountIdToHex, i as isResolvableDotNsName, d as isValidDotNsName, n as normalizeDotNsName, r as resolvePeopleUsernameOwner } from '../dotns-CtmOwVQW.js';
 import { Result } from '@parity/result';
 import { ContractRuntime, BatchableCall } from '@parity/product-sdk-contracts';
 import { SS58String } from 'polkadot-api';
@@ -11,7 +11,7 @@ import { SdkError } from '@parity/product-sdk-errors';
  * `reason` distinguishes the failure kind so callers can branch without string
  * matching.
  */
-type DotNsErrorReason = "InvalidName" | "InvalidTld" | "TldMismatch" | "MissingOrigin" | "InvalidOrigin" | "NameUnavailable" | "NameReserved" | "OwnerStatusInsufficient" | "RegistryCall" | "Decode";
+type DotNsErrorReason = "InvalidName" | "InvalidTld" | "TldMismatch" | "MissingOrigin" | "InvalidOrigin" | "NameUnavailable" | "NameReserved" | "OwnerStatusInsufficient" | "AddressDiscovery" | "AddressMismatch" | "RegistryCall" | "Decode";
 declare class DotNsError extends Error implements SdkError {
     readonly isSdkError: true;
     readonly source = "dotns";
@@ -19,6 +19,79 @@ declare class DotNsError extends Error implements SdkError {
     constructor(reason: DotNsErrorReason, message: string, options?: ErrorOptions);
 }
 
+/**
+ * Where the DotNS contract addresses come from.
+ *
+ * Every entry point in `./dotns-registry.js` asks {@link resolveDotNsAddresses}
+ * rather than reaching for a constant, so "which address do I call?" has one
+ * answer and the gateway walk can plug in behind it without touching them.
+ */
+
+type HexString$1 = `0x${string}`;
+interface DotNsAddresses {
+    registry: HexString$1;
+    reverseResolver: HexString$1;
+    resolver: HexString$1;
+    registrarController: HexString$1;
+    popRules: HexString$1;
+    protocolRegistry: HexString$1;
+}
+/**
+ * The `DotnsProtocolRegistry.get(bytes32)` key each role answers under, from
+ * `DotnsConstants`. Solidity's `bytes32("name")` is the UTF-8 bytes
+ * right-padded with zeros, which is what these literals are.
+ *
+ * Two are not the name you would guess, and guessing wrong is silent: `get`
+ * answers with a live address for the contract you did not want, and it
+ * surfaces much later as a revert. `registrarController` is the commit-reveal
+ * controller, key `controller` — `registrar` is the ERC-721 holding name
+ * ownership. `resolver` is the forward address resolver — `contentResolver`
+ * holds contenthash and text records, which nothing here calls.
+ *
+ * `protocolRegistry` has no key at all, so it cannot be looked up in the
+ * registry it is. The walk reaches it via `popController.protocolRegistry()`.
+ */
+declare const DOTNS_REGISTRY_KEYS: {
+    readonly registry: "0x7265676973747279000000000000000000000000000000000000000000000000";
+    readonly registrarController: "0x636f6e74726f6c6c657200000000000000000000000000000000000000000000";
+    readonly reverseResolver: "0x726576657273655265736f6c7665720000000000000000000000000000000000";
+    readonly resolver: "0x7265736f6c766572000000000000000000000000000000000000000000000000";
+    readonly popRules: "0x706f7052756c6573000000000000000000000000000000000000000000000000";
+};
+declare function resolveDotNsAddresses(opts: DotNsClientOptions): Promise<Result<DotNsAddresses, DotNsError>>;
+/**
+ * Reads `DotnsGateway.DispatcherAddress`, the pallet storage the walk starts
+ * from. Structural because `ContractRuntime` does not declare it.
+ */
+type DotNsGatewayQueryApi = {
+    query: {
+        DotnsGateway: {
+            DispatcherAddress: {
+                getValue: () => Promise<{
+                    asHex(): string;
+                } | string | undefined>;
+            };
+        };
+    };
+};
+/**
+ * Locate the live deployment from chain state, trusting nothing pinned here.
+ *
+ * Pallet -> `dispatcher.TARGET()` -> `popController.protocolRegistry()` ->
+ * `get(key)` per role. The first three are sequential because each answer is
+ * the next call's address; the role reads are not, so they go together.
+ *
+ * A failed or zero read is always an error: falling back to the pinned table
+ * would recreate the situation this exists to detect, and hide it better.
+ */
+declare function discoverDotNsAddresses(opts: DotNsClientOptions): Promise<Result<DotNsAddresses, DotNsError>>;
+/**
+ * Walk the gateway and report every role whose live address differs from the
+ * one this client would call. Meant for startup: it fails loudly once, rather
+ * than making every later read pay for the check.
+ */
+declare function verifyDotNsAddresses(opts: DotNsClientOptions): Promise<Result<DotNsAddresses, DotNsError>>;
+
 /**
  * A network's DotNS top-level domain: the suffix names are spelled with, and
  * the node every one of its names hashes onto.
@@ -104,8 +177,6 @@ declare function namehash(name: string, tld: DotNsTld): `0x${string}`;
 
 /**
  * Identity module types
- *
- * Types for DotNS name resolution and context-alias derivation
  */
 /** DotNS name resolution result */
 interface DotNsRecord {
@@ -141,22 +212,6 @@ interface DotNsRecord {
      */
     expiresAt?: number;
 }
-/**
- * Context alias info: a deterministic, context-bound alias derived from a parent account
- *
- * @deprecated Returned by `deriveContextAlias`, whose addresses no key can spend.
- *   Removal: `@parity/product-sdk` 0.23.0.
- */
-interface ContextAliasInfo {
-    /** Alias SS58 address */
-    address: string;
-    /** H160 EVM address */
-    h160Address: `0x${string}`;
-    /** Parent account address */
-    parentAddress: string;
-    /** Context string used for derivation */
-    context: string;
-}
 /** Identity verification result */
 interface VerificationResult {
     /** Whether identity is verified */
@@ -196,7 +251,7 @@ interface OnChainIdentity {
  *
  * **Names are rooted at the network's TLD, which is per deployment.** It is
  * fixed when `DotnsProtocolRegistry.initialize` runs, has no setter, and is
- * published as `tld()`. `.paseo` on Paseo Asset Hub Next V2, `.dot` on
+ * published as `tld()`. `.paseo` on Paseo Asset Hub Next V2, `.test` on
  * Previewnet, and operators can choose others. Every entry point that hashes a
  * name therefore asks the chain first, through {@link resolveTld}, and callers
  * can supply `opts.tld` to skip the read. Hashing under the wrong root returns a
@@ -257,6 +312,36 @@ interface DotNsClientOptions {
      * the whole set is CREATE3-deterministic.
      */
     protocolRegistryAddress?: HexString;
+    /**
+     * Where the addresses come from. `"pinned"` (the default) uses the
+     * {@link DOTNS_ADDRESSES} table; `"discovered"` walks the gateway on the
+     * chain `runtime` points at, so nothing is trusted from this bundle.
+     *
+     * Pinned is the default because the table is currently correct and a walk
+     * costs four round trips on the first call. Discovery is the honest choice
+     * once a deployment has moved, and its trust root is
+     * `DotnsGateway.DispatcherAddress` — a governance-set value on the chain the
+     * caller already trusts for every name read. Per-field address overrides win
+     * over either source.
+     *
+     * Discovery also selects the address `setDotNsRecord` and
+     * `prepareDotNsRegistration` build calls against, so it decides where a
+     * signed transaction goes, not only where a read comes from. A pinned
+     * address constrains that destination even against a hostile RPC; a
+     * discovered one does not. Use {@link verifyDotNsAddresses} at startup if
+     * that matters.
+     */
+    addressSource?: "pinned" | "discovered";
+    /**
+     * Typed API for the chain hosting the `DotnsGateway` pallet, needed only by
+     * `"discovered"`.
+     *
+     * Optional because `runtime.api` is usually the same chain and is used when
+     * it carries the pallet. `ContractRuntime` does not declare that storage, so
+     * it is probed rather than assumed; on a chain without the pallet, discovery
+     * fails with `AddressDiscovery` instead of throwing.
+     */
+    gatewayApi?: DotNsGatewayQueryApi;
     /**
      * The deployment's TLD, when you already know it.
      *
@@ -405,21 +490,23 @@ declare const POP_STATUS: {
  *
  * Not a per-network table, despite what the old name (`PASEO_ASSETHUB_DOTNS`)
  * implied: every DotNS network is deployed through the same CREATE3 factory, so
- * the addresses are identical everywhere and **only the TLD differs**. Verified
- * on both Paseo Asset Hub Next V2 and Previewnet — `protocolRegistry.get(...)`
- * returns the same registry on each, and all six addresses hold contracts on
- * both. `paritytech/dotns` `DEPLOYMENTS.md` states the mechanism, and
+ * the addresses are identical everywhere and **only the TLD differs**, `.paseo`
+ * on Paseo Asset Hub Next V2 and `.test` on Previewnet. Verified on both:
+ * `protocolRegistry.get(...)` returns the same registry on each, and all six
+ * addresses hold contracts on both. `paritytech/dotns` `DEPLOYMENTS.md` states the mechanism, and
  * `preview-net-v1` confirms it from the deploy side: the TLD is passed only as
  * registry init calldata, so it moves no address.
  *
  * So extending this module to another network means resolving its TLD, which
  * `resolveTld` already does — not adding a second address table.
  *
- * Each address answers `DotnsProtocolRegistry.get(bytes32)` under its
- * `DotnsConstants` key (the name below, right-padded to 32 bytes) and has a
- * `Revive.AccountInfoOf` entry. They are pinned rather than resolved at runtime,
- * so re-verify after a redeploy; `protocolRegistry` is the address to walk from
- * if we ever resolve the rest dynamically.
+ * Five answer `DotnsProtocolRegistry.get(bytes32)` under the keys in
+ * `DOTNS_REGISTRY_KEYS`, two of which differ from the field name used here.
+ * `protocolRegistry` has no key and comes from the gateway walk. All six have a
+ * `Revive.AccountInfoOf` entry.
+ *
+ * Pinned, not resolved at runtime: re-verify after a redeploy, or have the
+ * client do it with `verifyDotNsAddresses`.
  */
 declare const DOTNS_ADDRESSES: {
     readonly registry: "0xf34054fd76BbF85f216cf9908226D5f0A72E50CA";
@@ -430,62 +517,4 @@ declare const DOTNS_ADDRESSES: {
     readonly protocolRegistry: "0xD19e3D0C97CF501125a04A97405e3e6592fa846E";
 };
 
-/**
- * Context alias derivation (deprecated, removal in 0.23.0)
- *
- * Derives a deterministic, context-bound alias from a parent account using blake2b-256.
- *
- * The output is a hash, not a key, so no signing key exists for the addresses
- * returned here. See the notes on each function for what to use instead.
- *
- * NOTE: this is NOT the canonical sr25519 product-account derivation used by
- * mobile, desktop, and dotli hosts. For that, use
- * `@parity/product-sdk-keys::deriveProductAccountPublicKey`.
- */
-
-/**
- * Derive a context-bound alias from a parent account.
- *
- * The alias is deterministically derived using:
- * aliasPublicKey = blake2b256(parentPublicKey || context)
- *
- * @deprecated Returns addresses that no key can spend. The alias public key is a
- *   blake2b-256 hash rather than a derived key, so no secret corresponds to the
- *   SS58 address or to the H160: both can receive value and neither can ever
- *   send it. Removal: `@parity/product-sdk` 0.23.0. Replace by intent:
- *
- *   - An account that holds or spends value:
- *     `SignerManager.getProductAccount(dotNsIdentifier, index)` from
- *     `@parity/product-sdk-signer`. Host-backed and actually signable.
- *   - The address offline, with no host: `deriveProductAccountPublicKey` from
- *     `@parity/product-sdk-keys`, the canonical sr25519 soft derivation.
- *   - An unlinkable per-context alias: select a registered ring-VRF key, then call
- *     `SignerManager.getProductAccountAlias(keyHandle, context, location)` or
- *     `createRingVRFProof(keyHandle, context, location, message)`.
- *   - A context-scoped identifier, never used as an account: `blake2b256` from
- *     `@parity/product-sdk/crypto`. Same bytes, without address packaging that
- *     invites the mistake.
- *
- * @param parentAddress - Parent account SS58 address
- * @param context - Context string for derivation (e.g. an app id or scope label)
- * @param ss58Prefix - SS58 prefix (default: 42)
- * @returns Context alias info
- */
-declare function deriveContextAlias(parentAddress: string, context: string, ss58Prefix?: number): ContextAliasInfo;
-/**
- * Verify that a context alias was derived from a parent account.
- *
- * @deprecated Recomputes {@link deriveContextAlias} from two public values and
- *   compares the result, so it confirms a derivation relationship and nothing
- *   more. No secret enters the operation at any point, which means there is
- *   nothing here to authenticate: a passing result does not show that anyone
- *   controls either account. Removal: `@parity/product-sdk` 0.23.0.
- *
- * @param aliasAddress - Context alias SS58 address
- * @param parentAddress - Claimed parent address
- * @param context - Context string used for derivation
- * @returns True if derivation is valid
- */
-declare function verifyContextAlias(aliasAddress: string, parentAddress: string, context: string): boolean;
-
-export { type ContextAliasInfo, DOTNS_ADDRESSES, DOT_NODE, DOT_TLD, type DotNsClientOptions, DotNsError, type DotNsErrorReason, type DotNsRecord, type DotNsRegistration, type DotNsTld, type OnChainIdentity, POP_STATUS, type RegisterDotNsArgs, type SetRecordArgs, type VerificationResult, deriveContextAlias, dotNsTld, isConsistentDotNsTld, isDotNsAvailable, namehash, prepareDotNsRegistration, resolveDotNs, reverseDotNs, setDotNsRecord, stripSuffix, verifyContextAlias };
+export { DOTNS_ADDRESSES, DOTNS_REGISTRY_KEYS, DOT_NODE, DOT_TLD, type DotNsAddresses, type DotNsClientOptions, DotNsError, type DotNsErrorReason, type DotNsGatewayQueryApi, type DotNsRecord, type DotNsRegistration, type DotNsTld, type OnChainIdentity, POP_STATUS, type RegisterDotNsArgs, type SetRecordArgs, type VerificationResult, discoverDotNsAddresses, dotNsTld, isConsistentDotNsTld, isDotNsAvailable, namehash, prepareDotNsRegistration, resolveDotNs, resolveDotNsAddresses, reverseDotNs, setDotNsRecord, stripSuffix, verifyDotNsAddresses };