@parity/product-sdk 0.22.0 → 0.23.0

package/src/identity/product-account.test.ts

@@ -1,129 +0,0 @@
-// Copyright 2026 Parity Technologies (UK) Ltd.
-// SPDX-License-Identifier: Apache-2.0
-/**
- * Frozen vectors for the deprecated context-alias helpers.
- *
- * These pin current behaviour so the deprecation cannot silently alter the
- * derivation. Never re-derive: a caller may use the value as a plain
- * identifier, where different output bytes would be a silent break.
- */
-import { ss58Decode, ss58Encode } from "@parity/product-sdk-address";
-import { blake2b256 } from "@parity/product-sdk-crypto";
-import { describe, expect, it } from "vitest";
-import * as identity from "./index.js";
-import { deriveContextAlias, verifyContextAlias } from "./product-account.js";
-
-const ALICE = "5GrwvaEF5zXb26Fz9rcQpDWS57CtERHpNehXCPcNoHGKutQY";
-const CONTEXT = "voting-round-1";
-
-/** Recomputes the documented formula from primitives, independent of the implementation. */
-function expectedAliasPublicKey(parentAddress: string, context: string): Uint8Array {
-    const { publicKey } = ss58Decode(parentAddress);
-    const contextBytes = new TextEncoder().encode(context);
-    const combined = new Uint8Array(publicKey.length + contextBytes.length);
-    combined.set(publicKey, 0);
-    combined.set(contextBytes, publicKey.length);
-    return blake2b256(combined);
-}
-
-describe("deriveContextAlias", () => {
-    it("returns blake2b256(parentPublicKey || context), encoded at the given prefix", () => {
-        const alias = deriveContextAlias(ALICE, CONTEXT);
-        const expected = expectedAliasPublicKey(ALICE, CONTEXT);
-
-        expect(alias.address).toBe(ss58Encode(expected, 42));
-    });
-
-    it("matches a frozen vector for a known parent and context", () => {
-        const alias = deriveContextAlias(ALICE, CONTEXT);
-
-        expect(alias.address).toBe("5GPTdhxkG9wNKhCSN1vZrCwrf3fwvAf4j487vqrkVzvRMH6F");
-        expect(alias.h160Address).toBe("0x93d10a91de267ba79b27fbec373e5a3b2e86a283");
-        expect(alias.parentAddress).toBe(ALICE);
-        expect(alias.context).toBe(CONTEXT);
-    });
-
-    it("defaults to ss58 prefix 42", () => {
-        expect(deriveContextAlias(ALICE, CONTEXT).address).toBe(
-            deriveContextAlias(ALICE, CONTEXT, 42).address,
-        );
-    });
-
-    it("changes only the encoding when the ss58 prefix changes, not the key", () => {
-        const at42 = deriveContextAlias(ALICE, CONTEXT, 42);
-        const at0 = deriveContextAlias(ALICE, CONTEXT, 0);
-
-        expect(at0.address).not.toBe(at42.address);
-        expect(Array.from(ss58Decode(at0.address).publicKey)).toEqual(
-            Array.from(ss58Decode(at42.address).publicKey),
-        );
-    });
-
-    it("derives a different alias for a different context", () => {
-        expect(deriveContextAlias(ALICE, "round-1").address).not.toBe(
-            deriveContextAlias(ALICE, "round-2").address,
-        );
-    });
-});
-
-describe("verifyContextAlias", () => {
-    it("accepts an alias derived from the same parent and context", () => {
-        const alias = deriveContextAlias(ALICE, CONTEXT);
-
-        expect(verifyContextAlias(alias.address, ALICE, CONTEXT)).toBe(true);
-    });
-
-    it("rejects a different context", () => {
-        const alias = deriveContextAlias(ALICE, CONTEXT);
-
-        expect(verifyContextAlias(alias.address, ALICE, "voting-round-2")).toBe(false);
-    });
-
-    it("rejects a different parent", () => {
-        const alias = deriveContextAlias(ALICE, CONTEXT);
-        const bob = "5FHneW46xGXgs5mUiveU4sbTyGBzmstUspZC92UhjJM694ty";
-
-        expect(verifyContextAlias(alias.address, bob, CONTEXT)).toBe(false);
-    });
-
-    it("returns false rather than throwing on an undecodable address", () => {
-        expect(verifyContextAlias("not-an-address", ALICE, CONTEXT)).toBe(false);
-    });
-
-    // Guards the byte-level comparison: `addressesEqual` from
-    // @parity/product-sdk-address compares SS58 strings exactly and would
-    // return false here, silently narrowing behaviour.
-    it("compares public keys, so it accepts an alias encoded at another prefix", () => {
-        const alias = deriveContextAlias(ALICE, CONTEXT, 42);
-        const reencoded = ss58Encode(ss58Decode(alias.address).publicKey, 0);
-
-        expect(reencoded).not.toBe(alias.address);
-        expect(verifyContextAlias(reencoded, ALICE, CONTEXT)).toBe(true);
-    });
-});
-
-describe("the identity export surface", () => {
-    // These threw on every call, so no working consumer could exist. Deleting
-    // turns a guaranteed runtime throw into a compile error.
-    it("no longer exports the unimplemented ring helpers", () => {
-        for (const name of ["deriveAnonymousAlias", "createRingProof", "verifyRingProof"]) {
-            expect(name in identity).toBe(false);
-        }
-    });
-
-    it("still exports the DotNS helpers and the deprecated context-alias pair", () => {
-        for (const name of [
-            "resolveDotNs",
-            "reverseDotNs",
-            "isDotNsAvailable",
-            "resolvePeopleUsernameOwner",
-            "isValidDotNsName",
-            "normalizeDotNsName",
-            "accountIdHexToBytes",
-            "deriveContextAlias",
-            "verifyContextAlias",
-        ]) {
-            expect(name in identity).toBe(true);
-        }
-    });
-});

package/src/identity/product-account.ts

@@ -1,115 +0,0 @@
-// Copyright 2026 Parity Technologies (UK) Ltd.
-// SPDX-License-Identifier: Apache-2.0
-/**
- * Context alias derivation (deprecated, removal in 0.23.0)
- *
- * Derives a deterministic, context-bound alias from a parent account using blake2b-256.
- *
- * The output is a hash, not a key, so no signing key exists for the addresses
- * returned here. See the notes on each function for what to use instead.
- *
- * NOTE: this is NOT the canonical sr25519 product-account derivation used by
- * mobile, desktop, and dotli hosts. For that, use
- * `@parity/product-sdk-keys::deriveProductAccountPublicKey`.
- */
-
-import { createLogger } from "@parity/product-sdk-logger";
-import { blake2b256 } from "@parity/product-sdk-crypto";
-import { ss58Encode, ss58Decode, deriveH160 } from "@parity/product-sdk-address";
-import type { ContextAliasInfo } from "./types.js";
-
-const log = createLogger("identity");
-
-/**
- * Derive a context-bound alias from a parent account.
- *
- * The alias is deterministically derived using:
- * aliasPublicKey = blake2b256(parentPublicKey || context)
- *
- * @deprecated Returns addresses that no key can spend. The alias public key is a
- *   blake2b-256 hash rather than a derived key, so no secret corresponds to the
- *   SS58 address or to the H160: both can receive value and neither can ever
- *   send it. Removal: `@parity/product-sdk` 0.23.0. Replace by intent:
- *
- *   - An account that holds or spends value:
- *     `SignerManager.getProductAccount(dotNsIdentifier, index)` from
- *     `@parity/product-sdk-signer`. Host-backed and actually signable.
- *   - The address offline, with no host: `deriveProductAccountPublicKey` from
- *     `@parity/product-sdk-keys`, the canonical sr25519 soft derivation.
- *   - An unlinkable per-context alias: select a registered ring-VRF key, then call
- *     `SignerManager.getProductAccountAlias(keyHandle, context, location)` or
- *     `createRingVRFProof(keyHandle, context, location, message)`.
- *   - A context-scoped identifier, never used as an account: `blake2b256` from
- *     `@parity/product-sdk/crypto`. Same bytes, without address packaging that
- *     invites the mistake.
- *
- * @param parentAddress - Parent account SS58 address
- * @param context - Context string for derivation (e.g. an app id or scope label)
- * @param ss58Prefix - SS58 prefix (default: 42)
- * @returns Context alias info
- */
-export function deriveContextAlias(
-    parentAddress: string,
-    context: string,
-    ss58Prefix = 42,
-): ContextAliasInfo {
-    const { publicKey: parentPublicKey } = ss58Decode(parentAddress);
-
-    // Derive alias public key: blake2b-256(parentPublicKey || context)
-    const contextBytes = new TextEncoder().encode(context);
-    const combined = new Uint8Array(parentPublicKey.length + contextBytes.length);
-    combined.set(parentPublicKey, 0);
-    combined.set(contextBytes, parentPublicKey.length);
-
-    const aliasPublicKey = blake2b256(combined);
-    const address = ss58Encode(aliasPublicKey, ss58Prefix);
-    const h160Address = deriveH160(aliasPublicKey);
-
-    log.debug("Derived context alias", {
-        parentAddress,
-        context,
-        address,
-    });
-
-    return {
-        address,
-        h160Address,
-        parentAddress,
-        context,
-    };
-}
-
-/**
- * Verify that a context alias was derived from a parent account.
- *
- * @deprecated Recomputes {@link deriveContextAlias} from two public values and
- *   compares the result, so it confirms a derivation relationship and nothing
- *   more. No secret enters the operation at any point, which means there is
- *   nothing here to authenticate: a passing result does not show that anyone
- *   controls either account. Removal: `@parity/product-sdk` 0.23.0.
- *
- * @param aliasAddress - Context alias SS58 address
- * @param parentAddress - Claimed parent address
- * @param context - Context string used for derivation
- * @returns True if derivation is valid
- */
-export function verifyContextAlias(
-    aliasAddress: string,
-    parentAddress: string,
-    context: string,
-): boolean {
-    try {
-        const derived = deriveContextAlias(parentAddress, context);
-        const { publicKey: aliasKey } = ss58Decode(aliasAddress);
-        const { publicKey: derivedKey } = ss58Decode(derived.address);
-
-        // Compare public keys
-        if (aliasKey.length !== derivedKey.length) return false;
-        for (let i = 0; i < aliasKey.length; i++) {
-            if (aliasKey[i] !== derivedKey[i]) return false;
-        }
-        return true;
-    } catch {
-        return false;
-    }
-}