revert: remove raw proof context escape hatch

js/packages/truapi/README.md

@@ -72,13 +72,6 @@ sub.unsubscribe();
 - **Sandbox bootstrap** (`@parity/truapi/sandbox`) that detects the host environment, builds the
   matching provider, and exposes a cached client — see below.
 
-## Development escape hatches
-
-- **`development_createAccountProof(client, request)`** — `account.createAccountProof`
-  with `context` given as the exact 32-byte hex the proof is bound to, instead of a
-  product-namespaced `ProductProofContext`. Yet to be removed before a production
-  release; it lives entirely in `src/development.ts`.
-
 ## Sandbox bootstrap
 
 `@parity/truapi/sandbox` wires up a client for browser-embedded hosts: it detects whether the app

js/packages/truapi/src/index.ts

@@ -30,4 +30,3 @@ export * as scale from "./scale.js";
 export type { Codec, HexString } from "./scale.js";
 export * from "./generated/index.js";
 export * from "./well-known-chains.js";
-export * from "./development.js";

rust/crates/truapi-host-cli/README.md

@@ -105,13 +105,6 @@ make headless install  # build dependencies and install truapi-host once
 truapi-host signing-host
 ```
 
-### Raw proof contexts (development only)
-
-A product can bind a ring-VRF proof to 32 bytes of its choosing instead of a
-product-namespaced context by calling `development_createAccountProof` from
-`@parity/truapi`; the signing host honours it as is. Yet to be removed before a
-production release.
-
 ### Browser products
 
 `truapi-host dev` is one command for "run this product as if it were inside a

rust/crates/truapi-server/src/runtime/pairing_host.rs

@@ -56,8 +56,8 @@ use zeroize::Zeroizing;
 
 use super::ring_vrf_registry::{RingVrfRegistryStore, validate_owner_listing};
 use super::signing_host::ring_vrf::{
-    ChainRingResolver, MemberCandidate, RingResolver, alias_from_entropy, create_proof,
-    development_context_bytes, member_from_entropy, sign_from_entropy,
+    ChainRingResolver, MemberCandidate, RingResolver, alias_from_entropy, context_bytes,
+    create_proof, member_from_entropy, sign_from_entropy,
 };
 
 /// Distinguishes all remote authority request entrypoints by wire label.
@@ -2127,7 +2127,7 @@ impl PairingHost {
         {
             self.ring_resolver.validate(&request.ring_location).await?;
             self.current_private_session(session)?;
-            let context = development_context_bytes(&request.context);
+            let context = context_bytes(&request.context);
             let alias = alias_from_entropy(&entropy, &context)?;
             return Ok(v01::ContextualAlias {
                 context,
@@ -2160,7 +2160,7 @@ impl PairingHost {
                 .resolve(&request.ring_location, &[MemberCandidate { member }])
                 .await?;
             self.current_private_session(session)?;
-            let context = development_context_bytes(&request.context);
+            let context = context_bytes(&request.context);
             let (proof, alias) = create_proof(&entropy, &resolved, &context, &request.message)?;
             return Ok(v01::HostAccountCreateProofResponse {
                 proof,

rust/crates/truapi-server/src/runtime/signing_host.rs

@@ -65,8 +65,8 @@ use crate::runtime::statement_allowance::CollectionCandidate;
 #[cfg(not(target_arch = "wasm32"))]
 use crate::runtime::statement_allowance::collection::PersonhoodCollection;
 use ring_vrf::{
-    ChainRingResolver, MemberCandidate, RingResolver, alias_from_entropy, create_proof,
-    development_context_bytes, member_from_entropy, sign_from_entropy,
+    ChainRingResolver, MemberCandidate, RingResolver, alias_from_entropy, context_bytes,
+    create_proof, member_from_entropy, sign_from_entropy,
 };
 use sso_replay::SsoReplayLocks;
 
@@ -839,7 +839,7 @@ impl ProductAuthority for SigningHost {
             .resolve_ring_vrf_key_for_ring(session, &request.key_handle, &request.ring_location)
             .await?;
         self.ring_resolver.validate(&request.ring_location).await?;
-        let context = development_context_bytes(&request.context);
+        let context = context_bytes(&request.context);
         let alias = alias_from_entropy(&entropy, &context)?;
         Ok(v01::ContextualAlias {
             context,
@@ -866,7 +866,7 @@ impl ProductAuthority for SigningHost {
         // Reject a stale request if the local session disconnected or changed
         // while its chain snapshot was being resolved.
         self.require_current_session(session)?;
-        let context = development_context_bytes(&request.context);
+        let context = context_bytes(&request.context);
         let (proof, alias) = create_proof(&entropy, &resolved, &context, &request.message)?;
         Ok(v01::HostAccountCreateProofResponse {
             proof,

rust/crates/truapi-server/src/runtime/signing_host/ring_vrf.rs

@@ -212,27 +212,6 @@ impl RingResolver for ChainRingResolver {
     }
 }
 
-// TODO(development_createAccountProof): dev-only escape hatch, yet to be
-// removed before a production release. Delete this module and point its
-// callers in `signing_host.rs` and `pairing_host.rs` back at `context_bytes`.
-mod development {
-    use truapi::v01::{DerivationIndex, ProductProofContext};
-
-    const RAW_CONTEXT_PRODUCT_ID: &str = "raw:";
-
-    /// [`super::context_bytes`], except that the `raw:` product id (which
-    /// dotNS cannot issue) makes the `Raw` suffix the context, verbatim.
-    pub(in crate::runtime) fn development_context_bytes(context: &ProductProofContext) -> [u8; 32] {
-        if context.product_id == RAW_CONTEXT_PRODUCT_ID
-            && let DerivationIndex::Raw(bytes) = context.suffix
-        {
-            return bytes;
-        }
-        super::context_bytes(context)
-    }
-}
-pub(in crate::runtime) use development::development_context_bytes;
-
 pub(in crate::runtime) fn context_bytes(context: &ProductProofContext) -> [u8; 32] {
     let suffix = derivation_index_bytes(&context.suffix);
     let mut input = Vec::with_capacity(9 + context.product_id.len() + suffix.len());