feat(truapi-server): add platform runtime and host bridge

Cargo.toml

@@ -1,7 +1,6 @@
 [workspace]
 resolver = "2"
 members = ["rust/crates/*"]
-exclude = ["rust/crates/truapi-server"]
 
 [workspace.package]
 edition = "2024"

rust/crates/truapi-codegen/src/rustdoc.rs

@@ -414,6 +414,8 @@ fn should_skip_type_name(name: &str) -> bool {
         "Subscription"
             | "CallContext"
             | "CallError"
+            | "CancellationFuture"
+            | "CancellationReason"
             | "CancellationToken"
             | "FrameworkOnlyError"
             | "Infallible"

rust/crates/truapi-codegen/tests/golden/host-callbacks-adapter.ts

@@ -20,6 +20,7 @@ import type {
   NotificationId,
 } from "@parity/truapi";
 import {
+  BulletinAllowanceSigner,
   CoreStorageKey,
   UserConfirmationReview,
 } from "./host-callbacks.js";
@@ -41,7 +42,7 @@ export interface RawCallbacks {
   cancelNotification(id: NotificationId): Promise<void>;
   devicePermission(request: Uint8Array): Promise<Uint8Array>;
   remotePermission(request: Uint8Array): Promise<Uint8Array>;
-  submitPreimage(value: Uint8Array): Promise<Uint8Array>;
+  submitPreimage(value: Uint8Array, bulletinAllowanceSigner: Uint8Array): Promise<Uint8Array>;
   lookupPreimage(key: Uint8Array, sendItem: (item?: Uint8Array) => void): (() => void) | void;
   read(key: string): Promise<Uint8Array | null | undefined>;
   write(key: string, value: Uint8Array): Promise<void>;
@@ -67,7 +68,7 @@ export function createWasmRawCallbacks(
     cancelNotification: async (id) => await host.cancelNotification(id),
     devicePermission: async (request) => HostDevicePermissionResponse.enc(await host.devicePermission(HostDevicePermissionRequest.dec(request))),
     remotePermission: async (request) => RemotePermissionResponse.enc(await host.remotePermission(RemotePermissionRequest.dec(request))),
-    submitPreimage: async (value) => await host.submitPreimage(value),
+    submitPreimage: async (value, bulletinAllowanceSigner) => await host.submitPreimage(value, BulletinAllowanceSigner.dec(bulletinAllowanceSigner)),
     lookupPreimage: (key, sendItem) => driveResultStream(host.lookupPreimage(key), sendItem),
     read: async (key) => await host.read(key),
     write: async (key, value) => await host.write(key, value),

rust/crates/truapi-codegen/tests/golden/host-callbacks.ts

@@ -31,6 +31,21 @@ import type {
   ThemeVariant,
 } from "@parity/truapi";
 
+/**
+ * Review shown before a product asks to access another product account.
+ */
+export interface AccountAccessReview {
+  /**
+   * Product currently handling the request.
+   */
+  requestingProductId: string;
+
+  /**
+   * Product whose account is being requested.
+   */
+  targetProductId: string;
+}
+
 /**
  * Review shown before a product asks to alias another product account.
  */
@@ -71,9 +86,19 @@ export type AuthState =
    */
   | { tag: "LoginFailed"; value: { reason: string } };
 
+/**
+ * Host-facing signer for Bulletin preimage submission.
+ */
+export interface BulletinAllowanceSigner {
+
+}
+
 /**
  * Core-owned host-private storage slots. Products never address these slots;
  * the host chooses the backing store for each slot.
+ *
+ * Storage is host-local; `storage.md` records the current status quo:
+ * <https://github.com/paritytech/host-spec/blob/adb3989208ae1c2107dbf0159611353e6989422c/storage.md?plain=1#L1-L7>
  */
 export type CoreStorageKey =
   /**
@@ -87,7 +112,15 @@ export type CoreStorageKey =
   /**
    * Persisted authorization for one product-scoped permission request.
    */
-  | { tag: "PermissionAuthorization"; value: { productId: string; request: PermissionAuthorizationRequest } };
+  | { tag: "PermissionAuthorization"; value: { productId: string; request: PermissionAuthorizationRequest } }
+  /**
+   * Persisted allowance-slot keys for one paired SSO session.
+   */
+  | { tag: "AllowanceKeys"; value: { sessionId: string } }
+  /**
+   * Last processed SSO pairing response statement for the pairing device.
+   */
+  | { tag: "LastProcessedPairingStatement"; value?: undefined };
 
 /**
  * Review shown before a transaction-creation request is sent to the paired wallet.
@@ -102,6 +135,16 @@ export type CreateTransactionReview =
    */
   | { tag: "LegacyAccount"; value: LegacyAccountTxPayload };
 
+/**
+ * Review shown before a product learns the user's primary identity.
+ */
+export interface IdentityDisclosureReview {
+  /**
+   * Product currently handling the request.
+   */
+  productId: string;
+}
+
 /**
  * Permission request whose authorization status can be inspected or updated
  * by host administration UI.
@@ -114,7 +157,11 @@ export type PermissionAuthorizationRequest =
   /**
    * Remote/product-scoped permission such as chain submit or HTTP access.
    */
-  | { tag: "Remote"; value: RemotePermissionRequest };
+  | { tag: "Remote"; value: RemotePermissionRequest }
+  /**
+   * Product-scoped permission to disclose the user's primary identity.
+   */
+  | { tag: "IdentityDisclosure"; value?: undefined };
 
 /**
  * Authorization status for a permission request.
@@ -206,36 +253,62 @@ export type UserConfirmationReview =
    * Allow a product to request another product account alias.
    */
   | { tag: "AccountAlias"; value: AccountAliasReview }
+  /**
+   * Allow a product to learn the user's primary identity.
+   */
+  | { tag: "IdentityDisclosure"; value: IdentityDisclosureReview }
   /**
    * Allocate resources for the requesting product.
    */
   | { tag: "ResourceAllocation"; value: HostRequestResourceAllocationRequest }
   /**
    * Submit a preimage to the host-selected backend.
    */
-  | { tag: "PreimageSubmit"; value: PreimageSubmitReview };
+  | { tag: "PreimageSubmit"; value: PreimageSubmitReview }
+  /**
+   * Allow a product to access another product account.
+   */
+  | { tag: "AccountAccess"; value: AccountAccessReview };
+
+/**
+ * Review shown before a product asks to access another product account.
+ */
+export const AccountAccessReview: S.Codec<AccountAccessReview> = S.lazy((): S.Codec<AccountAccessReview> => S.Struct({requestingProductId: S.str, targetProductId: S.str}) as S.Codec<AccountAccessReview>);
 
 /**
  * Review shown before a product asks to alias another product account.
  */
 export const AccountAliasReview: S.Codec<AccountAliasReview> = S.lazy((): S.Codec<AccountAliasReview> => S.Struct({requestingProductId: S.str, targetProductId: S.str}) as S.Codec<AccountAliasReview>);
 
+/**
+ * Host-facing signer for Bulletin preimage submission.
+ */
+export const BulletinAllowanceSigner: S.Codec<BulletinAllowanceSigner> = S.lazy((): S.Codec<BulletinAllowanceSigner> => S.Struct({}) as S.Codec<BulletinAllowanceSigner>);
+
 /**
  * Core-owned host-private storage slots. Products never address these slots;
  * the host chooses the backing store for each slot.
+ *
+ * Storage is host-local; `storage.md` records the current status quo:
+ * <https://github.com/paritytech/host-spec/blob/adb3989208ae1c2107dbf0159611353e6989422c/storage.md?plain=1#L1-L7>
  */
-export const CoreStorageKey: S.Codec<CoreStorageKey> = S.lazy((): S.Codec<CoreStorageKey> => S.TaggedUnion({AuthSession: S._void, PairingDeviceIdentity: S._void, PermissionAuthorization: S.Struct({productId: S.str, request: PermissionAuthorizationRequest}) as S.Codec<{ productId: string; request: PermissionAuthorizationRequest }>}));
+export const CoreStorageKey: S.Codec<CoreStorageKey> = S.lazy((): S.Codec<CoreStorageKey> => S.TaggedUnion({AuthSession: S._void, PairingDeviceIdentity: S._void, PermissionAuthorization: S.Struct({productId: S.str, request: PermissionAuthorizationRequest}) as S.Codec<{ productId: string; request: PermissionAuthorizationRequest }>, AllowanceKeys: S.Struct({sessionId: S.str}) as S.Codec<{ sessionId: string }>, LastProcessedPairingStatement: S._void}));
 
 /**
  * Review shown before a transaction-creation request is sent to the paired wallet.
  */
 export const CreateTransactionReview: S.Codec<CreateTransactionReview> = S.lazy((): S.Codec<CreateTransactionReview> => S.TaggedUnion({Product: ProductAccountTxPayload, LegacyAccount: LegacyAccountTxPayload}));
 
+/**
+ * Review shown before a product learns the user's primary identity.
+ */
+export const IdentityDisclosureReview: S.Codec<IdentityDisclosureReview> = S.lazy((): S.Codec<IdentityDisclosureReview> => S.Struct({productId: S.str}) as S.Codec<IdentityDisclosureReview>);
+
 /**
  * Permission request whose authorization status can be inspected or updated
  * by host administration UI.
  */
-export const PermissionAuthorizationRequest: S.Codec<PermissionAuthorizationRequest> = S.lazy((): S.Codec<PermissionAuthorizationRequest> => S.TaggedUnion({Device: HostDevicePermissionRequest, Remote: RemotePermissionRequest}));
+export const PermissionAuthorizationRequest: S.Codec<PermissionAuthorizationRequest> = S.lazy((): S.Codec<PermissionAuthorizationRequest> => S.TaggedUnion({Device: HostDevicePermissionRequest, Remote: RemotePermissionRequest, IdentityDisclosure: S._void}));
 
 /**
  * Authorization status for a permission request.
@@ -263,7 +336,7 @@ export const SignRawReview: S.Codec<SignRawReview> = S.lazy((): S.Codec<SignRawR
 /**
  * Review shown before a user-confirmed core action continues.
  */
-export const UserConfirmationReview: S.Codec<UserConfirmationReview> = S.lazy((): S.Codec<UserConfirmationReview> => S.TaggedUnion({SignPayload: SignPayloadReview, SignRaw: SignRawReview, CreateTransaction: CreateTransactionReview, AccountAlias: AccountAliasReview, ResourceAllocation: HostRequestResourceAllocationRequest, PreimageSubmit: PreimageSubmitReview}));
+export const UserConfirmationReview: S.Codec<UserConfirmationReview> = S.lazy((): S.Codec<UserConfirmationReview> => S.TaggedUnion({SignPayload: SignPayloadReview, SignRaw: SignRawReview, CreateTransaction: CreateTransactionReview, AccountAlias: AccountAliasReview, IdentityDisclosure: IdentityDisclosureReview, ResourceAllocation: HostRequestResourceAllocationRequest, PreimageSubmit: PreimageSubmitReview, AccountAccess: AccountAccessReview}));
 
 /**
  * Host auth UI driven by core-owned `AuthState` transitions.
@@ -282,6 +355,9 @@ export interface AuthPresenter {
  *
  * The platform provides a way to get a JSON-RPC connection for a given chain.
  * The server runtime manages the chainHead v1 state machine on top of this.
+ * Host-spec N.6 requires products to access chains through host-mediated
+ * providers:
+ * <https://github.com/paritytech/host-spec/blob/adb3989208ae1c2107dbf0159611353e6989422c/spec/N-shared-infrastructure.md?plain=1#L91-L102>
  */
 export interface ChainProvider {
   /**
@@ -449,7 +525,7 @@ export interface PreimageHost {
   /**
    * Submit the preimage and return its key.
    */
-  submitPreimage?(value: Uint8Array): Promise<Uint8Array>;
+  submitPreimage?(value: Uint8Array, bulletinAllowanceSigner: BulletinAllowanceSigner): Promise<Uint8Array>;
 
   /**
    * Emits current value/miss immediately, then future updates.
@@ -491,11 +567,11 @@ export interface ThemeHost {
 }
 
 /**
- * Local user confirmation UI for session-channel operations.
+ * Local user confirmation UI for sensitive core-owned operations.
  */
 export interface UserConfirmation {
   /**
-   * Confirm a reviewed action before the core asks the SSO peer.
+   * Confirm a reviewed action before the core continues.
    */
   confirmUserAction(review: UserConfirmationReview): Promise<boolean>;
 }

rust/crates/truapi-codegen/tests/golden/worker-callbacks.ts

@@ -65,8 +65,8 @@ function rawCallbacks(bridge: WorkerCallbackBridge): Required<Pick<RawCallbacks,
       bridge.callbackRequest("devicePermission", [request]) as ReturnType<RawCallbacks["devicePermission"]>,
     remotePermission: (request) =>
       bridge.callbackRequest("remotePermission", [request]) as ReturnType<RawCallbacks["remotePermission"]>,
-    submitPreimage: (value) =>
-      bridge.callbackRequest("submitPreimage", [value]) as ReturnType<RawCallbacks["submitPreimage"]>,
+    submitPreimage: (value, bulletinAllowanceSigner) =>
+      bridge.callbackRequest("submitPreimage", [value, bulletinAllowanceSigner]) as ReturnType<RawCallbacks["submitPreimage"]>,
     read: (key) =>
       bridge.callbackRequest("read", [key]) as ReturnType<RawCallbacks["read"]>,
     write: (key, value) =>

rust/crates/truapi-codegen/tests/golden_rust_emit.rs

@@ -10,51 +10,6 @@ use std::fs;
 use std::path::{Path, PathBuf};
 use std::process::Command;
 
-fn quoted_strings_in_const_array(src: &str, const_name: &str) -> Vec<String> {
-    let marker = format!("export const {const_name} = [");
-    let start = src
-        .find(&marker)
-        .unwrap_or_else(|| panic!("missing {const_name}"));
-    let rest = &src[start + marker.len()..];
-    let end = rest
-        .find("] as const")
-        .unwrap_or_else(|| panic!("unterminated {const_name}"));
-    rest[..end]
-        .lines()
-        .filter_map(|line| {
-            let trimmed = line.trim().trim_end_matches(',');
-            trimmed
-                .strip_prefix('"')
-                .and_then(|s| s.strip_suffix('"'))
-                .map(str::to_string)
-        })
-        .collect()
-}
-
-fn wasm_optional_callback_names(workspace: &Path) -> Vec<String> {
-    let wasm_rs = workspace.join("rust/crates/truapi-server/src/wasm.rs");
-    if !wasm_rs.exists() {
-        return Vec::new();
-    }
-    let src = fs::read_to_string(wasm_rs).expect("read wasm.rs");
-    let mut names = src
-        .lines()
-        .filter_map(|line| {
-            let line = line.trim();
-            let start = line.find("get_optional_function(callbacks, \"")?;
-            let quoted = &line[start + "get_optional_function(callbacks, \"".len()..];
-            let end = quoted.find('"')?;
-            let name = &quoted[..end];
-            match name {
-                "chainConnect" | "dispose" => None,
-                _ => Some(name.to_string()),
-            }
-        })
-        .collect::<Vec<_>>();
-    names.sort();
-    names
-}
-
 /// Run `cargo +nightly rustdoc -p truapi --output-format json` into the
 /// given `target_dir` and return the path to the produced JSON file.
 /// Panics with a clear message if nightly is unavailable so CI cannot
@@ -271,16 +226,4 @@ fn golden_host_callbacks_ts() {
         !worker_actual.contains("OPTIONAL_CALLBACK_NAMES"),
         "worker callback generation should not expose an optional callback manifest"
     );
-    let mut generated_names = quoted_strings_in_const_array(&worker_actual, "CALLBACK_NAMES");
-    generated_names.extend(quoted_strings_in_const_array(
-        &worker_actual,
-        "SUBSCRIPTION_NAMES",
-    ));
-    let wasm_optional = wasm_optional_callback_names(&workspace);
-    for name in wasm_optional {
-        assert!(
-            generated_names.contains(&name),
-            "generated worker names must include JsBridge optional callback `{name}`"
-        );
-    }
 }

rust/crates/truapi-platform/Cargo.toml

@@ -8,7 +8,7 @@ license = "MIT"
 [dependencies]
 truapi = { path = "../truapi" }
 async-trait = "0.1"
-derive_more = { version = "2", features = ["display"] }
+derive_more = { version = "2", features = ["debug", "display", "error"] }
 futures = "0.3"
 parity-scale-codec = { version = "3", features = ["derive"] }
 unicode-normalization = "0.1"