wallet-sdk PR3: auth + user

[orveth]

PR3 of the @agicash/wallet-sdk build, stacked on PR2 (#1120). Implements Slice 1 (auth + user) of the no-cache contract (§4) — replacing PR2's auth/user NotImplemented stubs with real implementations wired into Sdk.create.

Implemented

AuthDomain (re-housed framework-free from app/features/user/auth.ts + shared/auth.ts):

• signIn / signUp / signInGuest / signOut / refresh / resetPassword / changePassword / upgradeGuest / beginGoogleSignIn / completeOAuth.
• Strips all React/TanStack/react-router/window plumbing. The OpenSecret SDK calls + token/session handling become plain async methods.
• Sign-in paths resolve the agicash User (the wallet.users DB row keyed by the OpenSecret user id) and emit auth:signed-in; sign-out emits auth:signed-out.
• Guest sign-in re-signs into a stored guest account if present, else mints + persists one (via the injected StorageAdapter, not window.localStorage).
• OAuth is a browser redirect (beginGoogleSignIn → { authUrl }), web-only. No getCurrentSession (contract decision 4 — methods return User, not a session; the JWT stays SDK-internal).

UserDomain (re-housed from user-hooks.tsx + user-repository.ts):

• getCurrentUser() — enclave id → DB row → User, or null when signed out.
• updateUsername(username) — throws DomainError when the username is taken (Postgres 23505 unique-violation; master raised UniqueConstraintError).

Internals added:

• OpenSecretClient gains the OS-SDK auth wrappers + hasSession() (re-houses master's isLoggedIn onto the StorageAdapter).
• UserRepository — wallet.users get + username update over the SDK-owned Supabase client.
• SessionResolver — the shared id → User resolution + auth:* emission (both domains use it).
• db-user mapper, framework-free crypto (password + SHA-256) and guest-account-storage.
• The Supabase access-token provider now short-circuits to null when signed out (matches master supabase-session.ts).

Lifted vs re-housed

• Verbatim logic (re-housed, no framework): ReadUserRepository.toUser → dbUserToUser; WriteUserRepository.update username path; computeSHA256; generateRandomPassword (off window.crypto); isLoggedIn (off window.localStorage).
• Re-housed framework-free (hooks → async methods): the entire useAuthActions body, the guest new-vs-stored branch, useUser/useUpdateUsername.
• Net-new wiring: updateUsername as a first-class method (master had it UI-only); auth:signed-in/auth:signed-out emission; the session-token signed-out guard.

Still stubbed (later slices)

accounts + scan (S2), cashu + spark (S3), transactions + contacts + transfers (S4), background + realtime (S5), exchangeRate.

CI (full script, locally green)

• biome format --write packages/wallet-sdk → clean
• root bun --filter='*' run test → @agicash/wallet-sdk 64 pass / 0 fail, web-wallet 133 pass / 0 fail (both exit 0)
• package tsc --noEmit, biome format (check), biome lint → all clean

Tests added: dbUserToUser (full/guest/null defaults), UserRepository (get + NotFound + the taken-username → DomainError path + write-payload assertion), SessionResolver (null/resolved/emit), AuthDomainImpl (guest branching, reset-hashes-the-secret, OAuth forwarding, delegations), UserDomainImpl, crypto helpers (known SHA-256 vectors).

🤖 Generated with Claude Code

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
agicash	Error		Jun 3, 2026 9:46pm
agicash-root-dir-test	Ready	Preview, Comment	Jun 3, 2026 9:46pm

[supabase]

This pull request has been ignored for the connected project hrebgkfhjpkbxpztqqke because there are no changes detected in supabase directory. You can change this behaviour in Project Integrations Settings ↗︎.

---

Preview Branches by Supabase.
Learn more about Supabase Branching ↗︎.

[jbojcic1]

we don't need to redefine these types. we need to keep generating them from the db.

i forgot to mention that in discord chats but migrations should also live in the sdk lib. Everything related to wallet db schema is basically wallet sdk domain and should live there

[orveth]

Superseded by the reactive design-B stack (SDK #1129-#1138 + lib-extract #1140-#1143). This no-cache stack was the reference substrate the reactive PRs were built from (~90% reused, reads adapted to Query); it was never reviewed/merged, so nothing is lost. Closing as superseded — branch retained for reference.