@parity/product-sdk 0.5.0 → 0.6.0

package/dist/identity/index.d.ts

@@ -1,7 +1,7 @@
 /**
  * Identity module types
  *
- * Types for DotNS name resolution and product account derivation
+ * Types for DotNS name resolution and context-alias derivation
  */
 /** DotNS name resolution result */
 interface DotNsRecord {
@@ -14,16 +14,16 @@ interface DotNsRecord {
     /** Expiration timestamp (if applicable) */
     expiresAt?: number;
 }
-/** Product account info */
-interface ProductAccountInfo {
-    /** Product-scoped SS58 address */
+/** Context alias info: a deterministic, context-bound alias derived from a parent account */
+interface ContextAliasInfo {
+    /** Alias SS58 address */
     address: string;
     /** H160 EVM address */
     h160Address: `0x${string}`;
     /** Parent account address */
     parentAddress: string;
-    /** Product name used for derivation */
-    productName: string;
+    /** Context string used for derivation */
+    context: string;
 }
 /** Ring VRF alias info */
 interface AnonymousAliasInfo {
@@ -119,41 +119,45 @@ declare function reverseDotNs(address: string): Promise<string | null>;
 declare function isDotNsAvailable(name: string): Promise<boolean>;
 
 /**
- * Product account derivation
+ * Context alias derivation
+ *
+ * Derives a deterministic, context-bound alias from a parent account using blake2b-256.
  *
- * Derives product-scoped accounts from a parent account
+ * NOTE: this is NOT the canonical sr25519 product-account derivation used by
+ * mobile, desktop, and dotli hosts. For that, use
+ * `@parity/product-sdk-keys::deriveProductAccountPublicKey`.
  */
 
 /**
- * Derive a product-scoped account from a parent account
+ * Derive a context-bound alias from a parent account.
  *
- * The product account is deterministically derived using:
- * productPublicKey = hash(parentPublicKey || productName)
+ * The alias is deterministically derived using:
+ * aliasPublicKey = blake2b256(parentPublicKey || context)
  *
  * @param parentAddress - Parent account SS58 address
- * @param productName - Product name for derivation
+ * @param context - Context string for derivation (e.g. an app id or scope label)
  * @param ss58Prefix - SS58 prefix (default: 42)
- * @returns Product account info
+ * @returns Context alias info
  *
  * @example
  * ```ts
- * const productAccount = deriveProductAccount(
+ * const alias = deriveContextAlias(
  *   '5GrwvaEF5zXb26Fz9rcQpDWS57CtERHpNehXCPcNoHGKutQY',
- *   'my-app'
+ *   'voting-round-1'
  * );
- * console.log('Product address:', productAccount.address);
+ * console.log('Alias address:', alias.address);
  * ```
  */
-declare function deriveProductAccount(parentAddress: string, productName: string, ss58Prefix?: number): ProductAccountInfo;
+declare function deriveContextAlias(parentAddress: string, context: string, ss58Prefix?: number): ContextAliasInfo;
 /**
- * Verify that a product account was derived from a parent account
+ * Verify that a context alias was derived from a parent account.
  *
- * @param productAddress - Product account address
+ * @param aliasAddress - Context alias SS58 address
  * @param parentAddress - Claimed parent address
- * @param productName - Product name
+ * @param context - Context string used for derivation
  * @returns True if derivation is valid
  */
-declare function verifyProductAccount(productAddress: string, parentAddress: string, productName: string): boolean;
+declare function verifyContextAlias(aliasAddress: string, parentAddress: string, context: string): boolean;
 /**
  * Derive an anonymous alias using Ring VRF
  *
@@ -183,4 +187,4 @@ declare function createRingProof(message: Uint8Array, ringLocation: RingLocation
  */
 declare function verifyRingProof(message: Uint8Array, proof: Uint8Array, alias: string): Promise<boolean>;
 
-export { type AnonymousAliasInfo, type DotNsRecord, type OnChainIdentity, type ProductAccountInfo, type RingLocation, type VerificationResult, createRingProof, deriveAnonymousAlias, deriveProductAccount, isDotNsAvailable, isValidDotNsName, normalizeDotNsName, resolveDotNs, reverseDotNs, verifyProductAccount, verifyRingProof };
+export { type AnonymousAliasInfo, type ContextAliasInfo, type DotNsRecord, type OnChainIdentity, type RingLocation, type VerificationResult, createRingProof, deriveAnonymousAlias, deriveContextAlias, isDotNsAvailable, isValidDotNsName, normalizeDotNsName, resolveDotNs, reverseDotNs, verifyContextAlias, verifyRingProof };

package/dist/identity/index.js

@@ -39,35 +39,35 @@ async function isDotNsAvailable(name) {
   return record === null;
 }
 var log2 = createLogger("identity");
-function deriveProductAccount(parentAddress, productName, ss58Prefix = 42) {
+function deriveContextAlias(parentAddress, context, ss58Prefix = 42) {
   const { publicKey: parentPublicKey } = ss58Decode(parentAddress);
-  const productNameBytes = new TextEncoder().encode(productName);
-  const combined = new Uint8Array(parentPublicKey.length + productNameBytes.length);
+  const contextBytes = new TextEncoder().encode(context);
+  const combined = new Uint8Array(parentPublicKey.length + contextBytes.length);
   combined.set(parentPublicKey, 0);
-  combined.set(productNameBytes, parentPublicKey.length);
-  const productPublicKey = blake2b256(combined);
-  const address = ss58Encode(productPublicKey, ss58Prefix);
-  const h160Address = deriveH160(productPublicKey);
-  log2.debug("Derived product account", {
+  combined.set(contextBytes, parentPublicKey.length);
+  const aliasPublicKey = blake2b256(combined);
+  const address = ss58Encode(aliasPublicKey, ss58Prefix);
+  const h160Address = deriveH160(aliasPublicKey);
+  log2.debug("Derived context alias", {
     parentAddress,
-    productName,
+    context,
     address
   });
   return {
     address,
     h160Address,
     parentAddress,
-    productName
+    context
   };
 }
-function verifyProductAccount(productAddress, parentAddress, productName) {
+function verifyContextAlias(aliasAddress, parentAddress, context) {
   try {
-    const derived = deriveProductAccount(parentAddress, productName);
-    const { publicKey: productKey } = ss58Decode(productAddress);
+    const derived = deriveContextAlias(parentAddress, context);
+    const { publicKey: aliasKey } = ss58Decode(aliasAddress);
     const { publicKey: derivedKey } = ss58Decode(derived.address);
-    if (productKey.length !== derivedKey.length) return false;
-    for (let i = 0; i < productKey.length; i++) {
-      if (productKey[i] !== derivedKey[i]) return false;
+    if (aliasKey.length !== derivedKey.length) return false;
+    for (let i = 0; i < aliasKey.length; i++) {
+      if (aliasKey[i] !== derivedKey[i]) return false;
     }
     return true;
   } catch {
@@ -93,6 +93,6 @@ async function verifyRingProof(message, proof, alias) {
   );
 }
 
-export { createRingProof, deriveAnonymousAlias, deriveProductAccount, isDotNsAvailable, isValidDotNsName, normalizeDotNsName, resolveDotNs, reverseDotNs, verifyProductAccount, verifyRingProof };
+export { createRingProof, deriveAnonymousAlias, deriveContextAlias, isDotNsAvailable, isValidDotNsName, normalizeDotNsName, resolveDotNs, reverseDotNs, verifyContextAlias, verifyRingProof };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/identity/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/identity/dotns.ts","../../src/identity/product-account.ts"],"names":["log","createLogger"],"mappings":";;;;;AASA,IAAM,GAAA,GAAM,aAAa,UAAU,CAAA;AAQ5B,SAAS,iBAAiB,IAAA,EAAuB;AAEpD,EAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,MAAM,GAAG,OAAO,KAAA;AACnC,EAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AAC9B,EAAA,IAAI,MAAM,MAAA,GAAS,CAAA,IAAK,KAAA,CAAM,MAAA,GAAS,IAAI,OAAO,KAAA;AAClD,EAAA,OAAO,iCAAA,CAAkC,KAAK,KAAK,CAAA;AACvD;AAQO,SAAS,mBAAmB,IAAA,EAAsB;AACrD,EAAA,IAAI,UAAA,GAAa,IAAA,CAAK,WAAA,EAAY,CAAE,IAAA,EAAK;AACzC,EAAA,IAAI,CAAC,UAAA,CAAW,QAAA,CAAS,MAAM,CAAA,EAAG;AAC9B,IAAA,UAAA,IAAc,MAAA;AAAA,EAClB;AACA,EAAA,OAAO,UAAA;AACX;AAgBA,eAAsB,aAAa,IAAA,EAA2C;AAC1E,EAAA,MAAM,UAAA,GAAa,mBAAmB,IAAI,CAAA;AAE1C,EAAA,IAAI,CAAC,gBAAA,CAAiB,UAAU,CAAA,EAAG;AAC/B,IAAA,GAAA,CAAI,IAAA,CAAK,oBAAA,EAAsB,EAAE,IAAA,EAAM,CAAA;AACvC,IAAA,OAAO,IAAA;AAAA,EACX;AAEA,EAAA,GAAA,CAAI,KAAA,CAAM,sBAAA,EAAwB,EAAE,IAAA,EAAM,YAAY,CAAA;AAGtD,EAAA,MAAM,IAAI,KAAA;AAAA,IACN;AAAA,GAEJ;AACJ;AAQA,eAAsB,aAAa,OAAA,EAAyC;AACxE,EAAA,GAAA,CAAI,KAAA,CAAM,2BAAA,EAA6B,EAAE,OAAA,EAAS,CAAA;AAGlD,EAAA,MAAM,IAAI,KAAA;AAAA,IACN;AAAA,GAEJ;AACJ;AAQA,eAAsB,iBAAiB,IAAA,EAAgC;AACnE,EAAA,MAAM,SAAS,MAAM,YAAA,CAAa,IAAI,CAAA,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AACxD,EAAA,OAAO,MAAA,KAAW,IAAA;AACtB;ACpFA,IAAMA,IAAAA,GAAMC,aAAa,UAAU,CAAA;AAsB5B,SAAS,oBAAA,CACZ,aAAA,EACA,WAAA,EACA,UAAA,GAAa,EAAA,EACK;AAClB,EAAA,MAAM,EAAE,SAAA,EAAW,eAAA,EAAgB,GAAI,WAAW,aAAa,CAAA;AAG/D,EAAA,MAAM,gBAAA,GAAmB,IAAI,WAAA,EAAY,CAAE,OAAO,WAAW,CAAA;AAC7D,EAAA,MAAM,WAAW,IAAI,UAAA,CAAW,eAAA,CAAgB,MAAA,GAAS,iBAAiB,MAAM,CAAA;AAChF,EAAA,QAAA,CAAS,GAAA,CAAI,iBAAiB,CAAC,CAAA;AAC/B,EAAA,QAAA,CAAS,GAAA,CAAI,gBAAA,EAAkB,eAAA,CAAgB,MAAM,CAAA;AAErD,EAAA,MAAM,gBAAA,GAAmB,WAAW,QAAQ,CAAA;AAC5C,EAAA,MAAM,OAAA,GAAU,UAAA,CAAW,gBAAA,EAAkB,UAAU,CAAA;AACvD,EAAA,MAAM,WAAA,GAAc,WAAW,gBAAgB,CAAA;AAE/C,EAAAD,IAAAA,CAAI,MAAM,yBAAA,EAA2B;AAAA,IACjC,aAAA;AAAA,IACA,WAAA;AAAA,IACA;AAAA,GACH,CAAA;AAED,EAAA,OAAO;AAAA,IACH,OAAA;AAAA,IACA,WAAA;AAAA,IACA,aAAA;AAAA,IACA;AAAA,GACJ;AACJ;AAUO,SAAS,oBAAA,CACZ,cAAA,EACA,aAAA,EACA,WAAA,EACO;AACP,EAAA,IAAI;AACA,IAAA,MAAM,OAAA,GAAU,oBAAA,CAAqB,aAAA,EAAe,WAAW,CAAA;AAC/D,IAAA,MAAM,EAAE,SAAA,EAAW,UAAA,EAAW,GAAI,WAAW,cAAc,CAAA;AAC3D,IAAA,MAAM,EAAE,SAAA,EAAW,UAAA,EAAW,GAAI,UAAA,CAAW,QAAQ,OAAO,CAAA;AAG5D,IAAA,IAAI,UAAA,CAAW,MAAA,KAAW,UAAA,CAAW,MAAA,EAAQ,OAAO,KAAA;AACpD,IAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,UAAA,CAAW,QAAQ,CAAA,EAAA,EAAK;AACxC,MAAA,IAAI,WAAW,CAAC,CAAA,KAAM,UAAA,CAAW,CAAC,GAAG,OAAO,KAAA;AAAA,IAChD;AACA,IAAA,OAAO,IAAA;AAAA,EACX,CAAA,CAAA,MAAQ;AACJ,IAAA,OAAO,KAAA;AAAA,EACX;AACJ;AAYO,SAAS,oBAAA,CACZ,SACA,YAAA,EACkB;AAClB,EAAAA,KAAI,KAAA,CAAM,0BAAA,EAA4B,EAAE,OAAA,EAAS,cAAc,CAAA;AAI/D,EAAA,MAAM,IAAI,KAAA;AAAA,IACN;AAAA,GAEJ;AACJ;AASA,eAAsB,eAAA,CAClB,SACA,YAAA,EACmB;AACnB,EAAAA,IAAAA,CAAI,KAAA,CAAM,qBAAA,EAAuB,EAAE,cAAc,CAAA;AAGjD,EAAA,MAAM,IAAI,KAAA;AAAA,IACN;AAAA,GAEJ;AACJ;AAUA,eAAsB,eAAA,CAClB,OAAA,EACA,KAAA,EACA,KAAA,EACgB;AAChB,EAAAA,IAAAA,CAAI,MAAM,sBAAsB,CAAA;AAGhC,EAAA,MAAM,IAAI,KAAA;AAAA,IACN;AAAA,GAEJ;AACJ","file":"index.js","sourcesContent":["/**\n * DotNS (Polkadot Name Service) utilities\n *\n * Provides name resolution for .dot domains\n */\n\nimport { createLogger } from \"@parity/product-sdk-logger\";\nimport type { DotNsRecord } from \"./types.js\";\n\nconst log = createLogger(\"identity\");\n\n/**\n * Check if a string is a valid DotNS name\n *\n * @param name - Name to validate\n * @returns True if valid DotNS name\n */\nexport function isValidDotNsName(name: string): boolean {\n    // Basic validation: alphanumeric, hyphens, ends with .dot\n    if (!name.endsWith(\".dot\")) return false;\n    const label = name.slice(0, -4);\n    if (label.length < 3 || label.length > 63) return false;\n    return /^[a-z0-9]([a-z0-9-]*[a-z0-9])?$/.test(label);\n}\n\n/**\n * Normalize a DotNS name (lowercase, trim whitespace)\n *\n * @param name - Name to normalize\n * @returns Normalized name\n */\nexport function normalizeDotNsName(name: string): string {\n    let normalized = name.toLowerCase().trim();\n    if (!normalized.endsWith(\".dot\")) {\n        normalized += \".dot\";\n    }\n    return normalized;\n}\n\n/**\n * Resolve a DotNS name to an address\n *\n * @param name - DotNS name (e.g., \"alice.dot\")\n * @returns Resolved record or null if not found\n *\n * @example\n * ```ts\n * const record = await resolveDotNs('alice.dot');\n * if (record) {\n *   console.log('Address:', record.address);\n * }\n * ```\n */\nexport async function resolveDotNs(name: string): Promise<DotNsRecord | null> {\n    const normalized = normalizeDotNsName(name);\n\n    if (!isValidDotNsName(normalized)) {\n        log.warn(\"Invalid DotNS name\", { name });\n        return null;\n    }\n\n    log.debug(\"Resolving DotNS name\", { name: normalized });\n\n    // TODO: Implement via PAPI query to DotNS pallet\n    throw new Error(\n        \"resolveDotNs() is not yet implemented. \" +\n            \"This is a skeleton for the Product SDK structure.\",\n    );\n}\n\n/**\n * Reverse resolve an address to a DotNS name\n *\n * @param address - SS58 address\n * @returns Primary name or null if none set\n */\nexport async function reverseDotNs(address: string): Promise<string | null> {\n    log.debug(\"Reverse resolving address\", { address });\n\n    // TODO: Implement via PAPI query to DotNS pallet\n    throw new Error(\n        \"reverseDotNs() is not yet implemented. \" +\n            \"This is a skeleton for the Product SDK structure.\",\n    );\n}\n\n/**\n * Check if a DotNS name is available for registration\n *\n * @param name - Name to check\n * @returns True if available\n */\nexport async function isDotNsAvailable(name: string): Promise<boolean> {\n    const record = await resolveDotNs(name).catch(() => null);\n    return record === null;\n}\n","/**\n * Product account derivation\n *\n * Derives product-scoped accounts from a parent account\n */\n\nimport { createLogger } from \"@parity/product-sdk-logger\";\nimport { blake2b256 } from \"@parity/product-sdk-crypto\";\nimport { ss58Encode, ss58Decode, deriveH160 } from \"@parity/product-sdk-address\";\nimport type { ProductAccountInfo, AnonymousAliasInfo, RingLocation } from \"./types.js\";\n\nconst log = createLogger(\"identity\");\n\n/**\n * Derive a product-scoped account from a parent account\n *\n * The product account is deterministically derived using:\n * productPublicKey = hash(parentPublicKey || productName)\n *\n * @param parentAddress - Parent account SS58 address\n * @param productName - Product name for derivation\n * @param ss58Prefix - SS58 prefix (default: 42)\n * @returns Product account info\n *\n * @example\n * ```ts\n * const productAccount = deriveProductAccount(\n *   '5GrwvaEF5zXb26Fz9rcQpDWS57CtERHpNehXCPcNoHGKutQY',\n *   'my-app'\n * );\n * console.log('Product address:', productAccount.address);\n * ```\n */\nexport function deriveProductAccount(\n    parentAddress: string,\n    productName: string,\n    ss58Prefix = 42,\n): ProductAccountInfo {\n    const { publicKey: parentPublicKey } = ss58Decode(parentAddress);\n\n    // Derive product public key: blake2b-256(parentPublicKey || productName)\n    const productNameBytes = new TextEncoder().encode(productName);\n    const combined = new Uint8Array(parentPublicKey.length + productNameBytes.length);\n    combined.set(parentPublicKey, 0);\n    combined.set(productNameBytes, parentPublicKey.length);\n\n    const productPublicKey = blake2b256(combined);\n    const address = ss58Encode(productPublicKey, ss58Prefix);\n    const h160Address = deriveH160(productPublicKey);\n\n    log.debug(\"Derived product account\", {\n        parentAddress,\n        productName,\n        address,\n    });\n\n    return {\n        address,\n        h160Address,\n        parentAddress,\n        productName,\n    };\n}\n\n/**\n * Verify that a product account was derived from a parent account\n *\n * @param productAddress - Product account address\n * @param parentAddress - Claimed parent address\n * @param productName - Product name\n * @returns True if derivation is valid\n */\nexport function verifyProductAccount(\n    productAddress: string,\n    parentAddress: string,\n    productName: string,\n): boolean {\n    try {\n        const derived = deriveProductAccount(parentAddress, productName);\n        const { publicKey: productKey } = ss58Decode(productAddress);\n        const { publicKey: derivedKey } = ss58Decode(derived.address);\n\n        // Compare public keys\n        if (productKey.length !== derivedKey.length) return false;\n        for (let i = 0; i < productKey.length; i++) {\n            if (productKey[i] !== derivedKey[i]) return false;\n        }\n        return true;\n    } catch {\n        return false;\n    }\n}\n\n/**\n * Derive an anonymous alias using Ring VRF\n *\n * This creates a context-specific alias that cannot be linked\n * back to the original identity without the ring proof.\n *\n * @param context - Context for alias derivation (e.g., \"voting-round-1\")\n * @param ringLocation - Ring location for proof generation\n * @returns Anonymous alias info\n */\nexport function deriveAnonymousAlias(\n    context: string,\n    ringLocation: RingLocation,\n): AnonymousAliasInfo {\n    log.debug(\"Deriving anonymous alias\", { context, ringLocation });\n\n    // TODO: Implement Ring VRF alias derivation\n    // This requires the Ring VRF implementation from TruAPI\n    throw new Error(\n        \"deriveAnonymousAlias() is not yet implemented. \" +\n            \"This requires container mode with Ring VRF support.\",\n    );\n}\n\n/**\n * Create a Ring VRF proof for a message\n *\n * @param message - Message to prove\n * @param ringLocation - Ring location\n * @returns Proof bytes\n */\nexport async function createRingProof(\n    message: Uint8Array,\n    ringLocation: RingLocation,\n): Promise<Uint8Array> {\n    log.debug(\"Creating ring proof\", { ringLocation });\n\n    // TODO: Implement Ring VRF proof creation via TruAPI\n    throw new Error(\n        \"createRingProof() is not yet implemented. \" +\n            \"This requires container mode with Ring VRF support.\",\n    );\n}\n\n/**\n * Verify a Ring VRF proof\n *\n * @param message - Original message\n * @param proof - Proof bytes\n * @param alias - Expected alias\n * @returns True if proof is valid\n */\nexport async function verifyRingProof(\n    message: Uint8Array,\n    proof: Uint8Array,\n    alias: string,\n): Promise<boolean> {\n    log.debug(\"Verifying ring proof\");\n\n    // TODO: Implement Ring VRF proof verification\n    throw new Error(\n        \"verifyRingProof() is not yet implemented. \" +\n            \"This requires container mode with Ring VRF support.\",\n    );\n}\n"]}
+{"version":3,"sources":["../../src/identity/dotns.ts","../../src/identity/product-account.ts"],"names":["log","createLogger"],"mappings":";;;;;AASA,IAAM,GAAA,GAAM,aAAa,UAAU,CAAA;AAQ5B,SAAS,iBAAiB,IAAA,EAAuB;AAEpD,EAAA,IAAI,CAAC,IAAA,CAAK,QAAA,CAAS,MAAM,GAAG,OAAO,KAAA;AACnC,EAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA;AAC9B,EAAA,IAAI,MAAM,MAAA,GAAS,CAAA,IAAK,KAAA,CAAM,MAAA,GAAS,IAAI,OAAO,KAAA;AAClD,EAAA,OAAO,iCAAA,CAAkC,KAAK,KAAK,CAAA;AACvD;AAQO,SAAS,mBAAmB,IAAA,EAAsB;AACrD,EAAA,IAAI,UAAA,GAAa,IAAA,CAAK,WAAA,EAAY,CAAE,IAAA,EAAK;AACzC,EAAA,IAAI,CAAC,UAAA,CAAW,QAAA,CAAS,MAAM,CAAA,EAAG;AAC9B,IAAA,UAAA,IAAc,MAAA;AAAA,EAClB;AACA,EAAA,OAAO,UAAA;AACX;AAgBA,eAAsB,aAAa,IAAA,EAA2C;AAC1E,EAAA,MAAM,UAAA,GAAa,mBAAmB,IAAI,CAAA;AAE1C,EAAA,IAAI,CAAC,gBAAA,CAAiB,UAAU,CAAA,EAAG;AAC/B,IAAA,GAAA,CAAI,IAAA,CAAK,oBAAA,EAAsB,EAAE,IAAA,EAAM,CAAA;AACvC,IAAA,OAAO,IAAA;AAAA,EACX;AAEA,EAAA,GAAA,CAAI,KAAA,CAAM,sBAAA,EAAwB,EAAE,IAAA,EAAM,YAAY,CAAA;AAGtD,EAAA,MAAM,IAAI,KAAA;AAAA,IACN;AAAA,GAEJ;AACJ;AAQA,eAAsB,aAAa,OAAA,EAAyC;AACxE,EAAA,GAAA,CAAI,KAAA,CAAM,2BAAA,EAA6B,EAAE,OAAA,EAAS,CAAA;AAGlD,EAAA,MAAM,IAAI,KAAA;AAAA,IACN;AAAA,GAEJ;AACJ;AAQA,eAAsB,iBAAiB,IAAA,EAAgC;AACnE,EAAA,MAAM,SAAS,MAAM,YAAA,CAAa,IAAI,CAAA,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AACxD,EAAA,OAAO,MAAA,KAAW,IAAA;AACtB;AChFA,IAAMA,IAAAA,GAAMC,aAAa,UAAU,CAAA;AAsB5B,SAAS,kBAAA,CACZ,aAAA,EACA,OAAA,EACA,UAAA,GAAa,EAAA,EACG;AAChB,EAAA,MAAM,EAAE,SAAA,EAAW,eAAA,EAAgB,GAAI,WAAW,aAAa,CAAA;AAG/D,EAAA,MAAM,YAAA,GAAe,IAAI,WAAA,EAAY,CAAE,OAAO,OAAO,CAAA;AACrD,EAAA,MAAM,WAAW,IAAI,UAAA,CAAW,eAAA,CAAgB,MAAA,GAAS,aAAa,MAAM,CAAA;AAC5E,EAAA,QAAA,CAAS,GAAA,CAAI,iBAAiB,CAAC,CAAA;AAC/B,EAAA,QAAA,CAAS,GAAA,CAAI,YAAA,EAAc,eAAA,CAAgB,MAAM,CAAA;AAEjD,EAAA,MAAM,cAAA,GAAiB,WAAW,QAAQ,CAAA;AAC1C,EAAA,MAAM,OAAA,GAAU,UAAA,CAAW,cAAA,EAAgB,UAAU,CAAA;AACrD,EAAA,MAAM,WAAA,GAAc,WAAW,cAAc,CAAA;AAE7C,EAAAD,IAAAA,CAAI,MAAM,uBAAA,EAAyB;AAAA,IAC/B,aAAA;AAAA,IACA,OAAA;AAAA,IACA;AAAA,GACH,CAAA;AAED,EAAA,OAAO;AAAA,IACH,OAAA;AAAA,IACA,WAAA;AAAA,IACA,aAAA;AAAA,IACA;AAAA,GACJ;AACJ;AAUO,SAAS,kBAAA,CACZ,YAAA,EACA,aAAA,EACA,OAAA,EACO;AACP,EAAA,IAAI;AACA,IAAA,MAAM,OAAA,GAAU,kBAAA,CAAmB,aAAA,EAAe,OAAO,CAAA;AACzD,IAAA,MAAM,EAAE,SAAA,EAAW,QAAA,EAAS,GAAI,WAAW,YAAY,CAAA;AACvD,IAAA,MAAM,EAAE,SAAA,EAAW,UAAA,EAAW,GAAI,UAAA,CAAW,QAAQ,OAAO,CAAA;AAG5D,IAAA,IAAI,QAAA,CAAS,MAAA,KAAW,UAAA,CAAW,MAAA,EAAQ,OAAO,KAAA;AAClD,IAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,QAAA,CAAS,QAAQ,CAAA,EAAA,EAAK;AACtC,MAAA,IAAI,SAAS,CAAC,CAAA,KAAM,UAAA,CAAW,CAAC,GAAG,OAAO,KAAA;AAAA,IAC9C;AACA,IAAA,OAAO,IAAA;AAAA,EACX,CAAA,CAAA,MAAQ;AACJ,IAAA,OAAO,KAAA;AAAA,EACX;AACJ;AAYO,SAAS,oBAAA,CACZ,SACA,YAAA,EACkB;AAClB,EAAAA,KAAI,KAAA,CAAM,0BAAA,EAA4B,EAAE,OAAA,EAAS,cAAc,CAAA;AAI/D,EAAA,MAAM,IAAI,KAAA;AAAA,IACN;AAAA,GAEJ;AACJ;AASA,eAAsB,eAAA,CAClB,SACA,YAAA,EACmB;AACnB,EAAAA,IAAAA,CAAI,KAAA,CAAM,qBAAA,EAAuB,EAAE,cAAc,CAAA;AAGjD,EAAA,MAAM,IAAI,KAAA;AAAA,IACN;AAAA,GAEJ;AACJ;AAUA,eAAsB,eAAA,CAClB,OAAA,EACA,KAAA,EACA,KAAA,EACgB;AAChB,EAAAA,IAAAA,CAAI,MAAM,sBAAsB,CAAA;AAGhC,EAAA,MAAM,IAAI,KAAA;AAAA,IACN;AAAA,GAEJ;AACJ","file":"index.js","sourcesContent":["/**\n * DotNS (Polkadot Name Service) utilities\n *\n * Provides name resolution for .dot domains\n */\n\nimport { createLogger } from \"@parity/product-sdk-logger\";\nimport type { DotNsRecord } from \"./types.js\";\n\nconst log = createLogger(\"identity\");\n\n/**\n * Check if a string is a valid DotNS name\n *\n * @param name - Name to validate\n * @returns True if valid DotNS name\n */\nexport function isValidDotNsName(name: string): boolean {\n    // Basic validation: alphanumeric, hyphens, ends with .dot\n    if (!name.endsWith(\".dot\")) return false;\n    const label = name.slice(0, -4);\n    if (label.length < 3 || label.length > 63) return false;\n    return /^[a-z0-9]([a-z0-9-]*[a-z0-9])?$/.test(label);\n}\n\n/**\n * Normalize a DotNS name (lowercase, trim whitespace)\n *\n * @param name - Name to normalize\n * @returns Normalized name\n */\nexport function normalizeDotNsName(name: string): string {\n    let normalized = name.toLowerCase().trim();\n    if (!normalized.endsWith(\".dot\")) {\n        normalized += \".dot\";\n    }\n    return normalized;\n}\n\n/**\n * Resolve a DotNS name to an address\n *\n * @param name - DotNS name (e.g., \"alice.dot\")\n * @returns Resolved record or null if not found\n *\n * @example\n * ```ts\n * const record = await resolveDotNs('alice.dot');\n * if (record) {\n *   console.log('Address:', record.address);\n * }\n * ```\n */\nexport async function resolveDotNs(name: string): Promise<DotNsRecord | null> {\n    const normalized = normalizeDotNsName(name);\n\n    if (!isValidDotNsName(normalized)) {\n        log.warn(\"Invalid DotNS name\", { name });\n        return null;\n    }\n\n    log.debug(\"Resolving DotNS name\", { name: normalized });\n\n    // TODO: Implement via PAPI query to DotNS pallet\n    throw new Error(\n        \"resolveDotNs() is not yet implemented. \" +\n            \"This is a skeleton for the Product SDK structure.\",\n    );\n}\n\n/**\n * Reverse resolve an address to a DotNS name\n *\n * @param address - SS58 address\n * @returns Primary name or null if none set\n */\nexport async function reverseDotNs(address: string): Promise<string | null> {\n    log.debug(\"Reverse resolving address\", { address });\n\n    // TODO: Implement via PAPI query to DotNS pallet\n    throw new Error(\n        \"reverseDotNs() is not yet implemented. \" +\n            \"This is a skeleton for the Product SDK structure.\",\n    );\n}\n\n/**\n * Check if a DotNS name is available for registration\n *\n * @param name - Name to check\n * @returns True if available\n */\nexport async function isDotNsAvailable(name: string): Promise<boolean> {\n    const record = await resolveDotNs(name).catch(() => null);\n    return record === null;\n}\n","/**\n * Context alias derivation\n *\n * Derives a deterministic, context-bound alias from a parent account using blake2b-256.\n *\n * NOTE: this is NOT the canonical sr25519 product-account derivation used by\n * mobile, desktop, and dotli hosts. For that, use\n * `@parity/product-sdk-keys::deriveProductAccountPublicKey`.\n */\n\nimport { createLogger } from \"@parity/product-sdk-logger\";\nimport { blake2b256 } from \"@parity/product-sdk-crypto\";\nimport { ss58Encode, ss58Decode, deriveH160 } from \"@parity/product-sdk-address\";\nimport type { ContextAliasInfo, AnonymousAliasInfo, RingLocation } from \"./types.js\";\n\nconst log = createLogger(\"identity\");\n\n/**\n * Derive a context-bound alias from a parent account.\n *\n * The alias is deterministically derived using:\n * aliasPublicKey = blake2b256(parentPublicKey || context)\n *\n * @param parentAddress - Parent account SS58 address\n * @param context - Context string for derivation (e.g. an app id or scope label)\n * @param ss58Prefix - SS58 prefix (default: 42)\n * @returns Context alias info\n *\n * @example\n * ```ts\n * const alias = deriveContextAlias(\n *   '5GrwvaEF5zXb26Fz9rcQpDWS57CtERHpNehXCPcNoHGKutQY',\n *   'voting-round-1'\n * );\n * console.log('Alias address:', alias.address);\n * ```\n */\nexport function deriveContextAlias(\n    parentAddress: string,\n    context: string,\n    ss58Prefix = 42,\n): ContextAliasInfo {\n    const { publicKey: parentPublicKey } = ss58Decode(parentAddress);\n\n    // Derive alias public key: blake2b-256(parentPublicKey || context)\n    const contextBytes = new TextEncoder().encode(context);\n    const combined = new Uint8Array(parentPublicKey.length + contextBytes.length);\n    combined.set(parentPublicKey, 0);\n    combined.set(contextBytes, parentPublicKey.length);\n\n    const aliasPublicKey = blake2b256(combined);\n    const address = ss58Encode(aliasPublicKey, ss58Prefix);\n    const h160Address = deriveH160(aliasPublicKey);\n\n    log.debug(\"Derived context alias\", {\n        parentAddress,\n        context,\n        address,\n    });\n\n    return {\n        address,\n        h160Address,\n        parentAddress,\n        context,\n    };\n}\n\n/**\n * Verify that a context alias was derived from a parent account.\n *\n * @param aliasAddress - Context alias SS58 address\n * @param parentAddress - Claimed parent address\n * @param context - Context string used for derivation\n * @returns True if derivation is valid\n */\nexport function verifyContextAlias(\n    aliasAddress: string,\n    parentAddress: string,\n    context: string,\n): boolean {\n    try {\n        const derived = deriveContextAlias(parentAddress, context);\n        const { publicKey: aliasKey } = ss58Decode(aliasAddress);\n        const { publicKey: derivedKey } = ss58Decode(derived.address);\n\n        // Compare public keys\n        if (aliasKey.length !== derivedKey.length) return false;\n        for (let i = 0; i < aliasKey.length; i++) {\n            if (aliasKey[i] !== derivedKey[i]) return false;\n        }\n        return true;\n    } catch {\n        return false;\n    }\n}\n\n/**\n * Derive an anonymous alias using Ring VRF\n *\n * This creates a context-specific alias that cannot be linked\n * back to the original identity without the ring proof.\n *\n * @param context - Context for alias derivation (e.g., \"voting-round-1\")\n * @param ringLocation - Ring location for proof generation\n * @returns Anonymous alias info\n */\nexport function deriveAnonymousAlias(\n    context: string,\n    ringLocation: RingLocation,\n): AnonymousAliasInfo {\n    log.debug(\"Deriving anonymous alias\", { context, ringLocation });\n\n    // TODO: Implement Ring VRF alias derivation\n    // This requires the Ring VRF implementation from TruAPI\n    throw new Error(\n        \"deriveAnonymousAlias() is not yet implemented. \" +\n            \"This requires container mode with Ring VRF support.\",\n    );\n}\n\n/**\n * Create a Ring VRF proof for a message\n *\n * @param message - Message to prove\n * @param ringLocation - Ring location\n * @returns Proof bytes\n */\nexport async function createRingProof(\n    message: Uint8Array,\n    ringLocation: RingLocation,\n): Promise<Uint8Array> {\n    log.debug(\"Creating ring proof\", { ringLocation });\n\n    // TODO: Implement Ring VRF proof creation via TruAPI\n    throw new Error(\n        \"createRingProof() is not yet implemented. \" +\n            \"This requires container mode with Ring VRF support.\",\n    );\n}\n\n/**\n * Verify a Ring VRF proof\n *\n * @param message - Original message\n * @param proof - Proof bytes\n * @param alias - Expected alias\n * @returns True if proof is valid\n */\nexport async function verifyRingProof(\n    message: Uint8Array,\n    proof: Uint8Array,\n    alias: string,\n): Promise<boolean> {\n    log.debug(\"Verifying ring proof\");\n\n    // TODO: Implement Ring VRF proof verification\n    throw new Error(\n        \"verifyRingProof() is not yet implemented. \" +\n            \"This requires container mode with Ring VRF support.\",\n    );\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@parity/product-sdk",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "Unified SDK for building products in the Polkadot ecosystem - umbrella package",
   "type": "module",
   "sideEffects": false,
@@ -64,16 +64,16 @@
   "dependencies": {
     "polkadot-api": "^2.1.2",
     "@parity/product-sdk-address": "0.1.1",
-    "@parity/product-sdk-bulletin": "0.4.1",
-    "@parity/product-sdk-chain-client": "0.4.1",
-    "@parity/product-sdk-contracts": "0.5.0",
+    "@parity/product-sdk-chain-client": "0.4.2",
+    "@parity/product-sdk-bulletin": "0.4.2",
     "@parity/product-sdk-crypto": "0.1.1",
-    "@parity/product-sdk-host": "0.3.0",
+    "@parity/product-sdk-host": "0.4.0",
+    "@parity/product-sdk-contracts": "0.5.1",
+    "@parity/product-sdk-keys": "0.3.0",
     "@parity/product-sdk-logger": "0.1.1",
-    "@parity/product-sdk-signer": "0.2.4",
-    "@parity/product-sdk-keys": "0.2.3",
-    "@parity/product-sdk-storage": "0.1.4",
-    "@parity/product-sdk-tx": "0.2.3"
+    "@parity/product-sdk-signer": "0.3.0",
+    "@parity/product-sdk-storage": "0.1.5",
+    "@parity/product-sdk-tx": "0.2.4"
   },
   "peerDependencies": {
     "react": "^18.0.0 || ^19.0.0"

package/src/identity/index.ts

@@ -1,8 +1,8 @@
 /**
  * @parity/product-sdk/identity
  *
- * Identity utilities including DotNS name resolution,
- * product account derivation, and Ring VRF anonymous aliases.
+ * Identity utilities: DotNS name resolution, context-alias derivation,
+ * and Ring VRF anonymous aliases.
  */
 
 // DotNS utilities
@@ -14,10 +14,10 @@ export {
     isDotNsAvailable,
 } from "./dotns.js";
 
-// Product account utilities
+// Context alias utilities
 export {
-    deriveProductAccount,
-    verifyProductAccount,
+    deriveContextAlias,
+    verifyContextAlias,
     deriveAnonymousAlias,
     createRingProof,
     verifyRingProof,
@@ -26,7 +26,7 @@ export {
 // Types
 export type {
     DotNsRecord,
-    ProductAccountInfo,
+    ContextAliasInfo,
     AnonymousAliasInfo,
     RingLocation,
     VerificationResult,

package/src/identity/product-account.ts

@@ -1,56 +1,60 @@
 /**
- * Product account derivation
+ * Context alias derivation
  *
- * Derives product-scoped accounts from a parent account
+ * Derives a deterministic, context-bound alias from a parent account using blake2b-256.
+ *
+ * NOTE: this is NOT the canonical sr25519 product-account derivation used by
+ * mobile, desktop, and dotli hosts. For that, use
+ * `@parity/product-sdk-keys::deriveProductAccountPublicKey`.
  */
 
 import { createLogger } from "@parity/product-sdk-logger";
 import { blake2b256 } from "@parity/product-sdk-crypto";
 import { ss58Encode, ss58Decode, deriveH160 } from "@parity/product-sdk-address";
-import type { ProductAccountInfo, AnonymousAliasInfo, RingLocation } from "./types.js";
+import type { ContextAliasInfo, AnonymousAliasInfo, RingLocation } from "./types.js";
 
 const log = createLogger("identity");
 
 /**
- * Derive a product-scoped account from a parent account
+ * Derive a context-bound alias from a parent account.
  *
- * The product account is deterministically derived using:
- * productPublicKey = hash(parentPublicKey || productName)
+ * The alias is deterministically derived using:
+ * aliasPublicKey = blake2b256(parentPublicKey || context)
  *
  * @param parentAddress - Parent account SS58 address
- * @param productName - Product name for derivation
+ * @param context - Context string for derivation (e.g. an app id or scope label)
  * @param ss58Prefix - SS58 prefix (default: 42)
- * @returns Product account info
+ * @returns Context alias info
  *
  * @example
  * ```ts
- * const productAccount = deriveProductAccount(
+ * const alias = deriveContextAlias(
  *   '5GrwvaEF5zXb26Fz9rcQpDWS57CtERHpNehXCPcNoHGKutQY',
- *   'my-app'
+ *   'voting-round-1'
  * );
- * console.log('Product address:', productAccount.address);
+ * console.log('Alias address:', alias.address);
  * ```
  */
-export function deriveProductAccount(
+export function deriveContextAlias(
     parentAddress: string,
-    productName: string,
+    context: string,
     ss58Prefix = 42,
-): ProductAccountInfo {
+): ContextAliasInfo {
     const { publicKey: parentPublicKey } = ss58Decode(parentAddress);
 
-    // Derive product public key: blake2b-256(parentPublicKey || productName)
-    const productNameBytes = new TextEncoder().encode(productName);
-    const combined = new Uint8Array(parentPublicKey.length + productNameBytes.length);
+    // Derive alias public key: blake2b-256(parentPublicKey || context)
+    const contextBytes = new TextEncoder().encode(context);
+    const combined = new Uint8Array(parentPublicKey.length + contextBytes.length);
     combined.set(parentPublicKey, 0);
-    combined.set(productNameBytes, parentPublicKey.length);
+    combined.set(contextBytes, parentPublicKey.length);
 
-    const productPublicKey = blake2b256(combined);
-    const address = ss58Encode(productPublicKey, ss58Prefix);
-    const h160Address = deriveH160(productPublicKey);
+    const aliasPublicKey = blake2b256(combined);
+    const address = ss58Encode(aliasPublicKey, ss58Prefix);
+    const h160Address = deriveH160(aliasPublicKey);
 
-    log.debug("Derived product account", {
+    log.debug("Derived context alias", {
         parentAddress,
-        productName,
+        context,
         address,
     });
 
@@ -58,32 +62,32 @@ export function deriveProductAccount(
         address,
         h160Address,
         parentAddress,
-        productName,
+        context,
     };
 }
 
 /**
- * Verify that a product account was derived from a parent account
+ * Verify that a context alias was derived from a parent account.
  *
- * @param productAddress - Product account address
+ * @param aliasAddress - Context alias SS58 address
  * @param parentAddress - Claimed parent address
- * @param productName - Product name
+ * @param context - Context string used for derivation
  * @returns True if derivation is valid
  */
-export function verifyProductAccount(
-    productAddress: string,
+export function verifyContextAlias(
+    aliasAddress: string,
     parentAddress: string,
-    productName: string,
+    context: string,
 ): boolean {
     try {
-        const derived = deriveProductAccount(parentAddress, productName);
-        const { publicKey: productKey } = ss58Decode(productAddress);
+        const derived = deriveContextAlias(parentAddress, context);
+        const { publicKey: aliasKey } = ss58Decode(aliasAddress);
         const { publicKey: derivedKey } = ss58Decode(derived.address);
 
         // Compare public keys
-        if (productKey.length !== derivedKey.length) return false;
-        for (let i = 0; i < productKey.length; i++) {
-            if (productKey[i] !== derivedKey[i]) return false;
+        if (aliasKey.length !== derivedKey.length) return false;
+        for (let i = 0; i < aliasKey.length; i++) {
+            if (aliasKey[i] !== derivedKey[i]) return false;
         }
         return true;
     } catch {

package/src/identity/types.ts

@@ -1,7 +1,7 @@
 /**
  * Identity module types
  *
- * Types for DotNS name resolution and product account derivation
+ * Types for DotNS name resolution and context-alias derivation
  */
 
 /** DotNS name resolution result */
@@ -16,16 +16,16 @@ export interface DotNsRecord {
     expiresAt?: number;
 }
 
-/** Product account info */
-export interface ProductAccountInfo {
-    /** Product-scoped SS58 address */
+/** Context alias info: a deterministic, context-bound alias derived from a parent account */
+export interface ContextAliasInfo {
+    /** Alias SS58 address */
     address: string;
     /** H160 EVM address */
     h160Address: `0x${string}`;
     /** Parent account address */
     parentAddress: string;
-    /** Product name used for derivation */
-    productName: string;
+    /** Context string used for derivation */
+    context: string;
 }
 
 /** Ring VRF alias info */