feat(wallet-sdk): auth & user slice (step 5)

apps/web-wallet/app/entry.client.tsx

@@ -1,4 +1,3 @@
-import { configure } from '@agicash/opensecret';
 import {
   configureFeatureFlags,
   ensureBreezWasm,
@@ -15,6 +14,9 @@ import { HydratedRouter } from 'react-router/dom';
 import { getEnvironment, isServedLocally } from './environment';
 import { agicashDbClient } from './features/agicash-db/database.client';
 import { loadFeatureFlags } from './features/shared/feature-flags';
+// Importing the module constructs the SDK, which configures Open Secret as an
+// import-evaluation side effect — before any body code below runs.
+import './features/shared/sdk.client';
 import { registerMoneyDevToolsFormatter } from './lib/money-devtools-formatter';
 import { getTracesSampleRate, sanitizeUrl } from './tracing-utils';
 
@@ -23,21 +25,6 @@ if (process.env.NODE_ENV === 'development') {
   registerMoneyDevToolsFormatter();
 }
 
-const openSecretApiUrl = import.meta.env.VITE_OPEN_SECRET_API_URL ?? '';
-if (!openSecretApiUrl) {
-  throw new Error('VITE_OPEN_SECRET_API_URL is not set');
-}
-
-const openSecretClientId = import.meta.env.VITE_OPEN_SECRET_CLIENT_ID ?? '';
-if (!openSecretClientId) {
-  throw new Error('VITE_OPEN_SECRET_CLIENT_ID is not set');
-}
-
-configure({
-  apiUrl: openSecretApiUrl,
-  clientId: openSecretClientId,
-});
-
 // Start Breez WASM fetch/compile as early as possible so it overlaps with
 // hydration, Sentry init, and the auth query — by the time the _protected
 // middleware awaits it, init is often already done.

apps/web-wallet/app/features/agicash-db/database.client.ts

@@ -24,9 +24,9 @@ const getSupabaseUrl = () => {
   return supabaseUrl;
 };
 
-const supabaseUrl = getSupabaseUrl();
+export const supabaseUrl = getSupabaseUrl();
 
-const supabaseAnonKey = import.meta.env.VITE_SUPABASE_ANON_KEY ?? '';
+export const supabaseAnonKey = import.meta.env.VITE_SUPABASE_ANON_KEY ?? '';
 if (!supabaseAnonKey) {
   throw new Error('VITE_SUPABASE_ANON_KEY is not set');
 }

apps/web-wallet/app/features/receive/cashu-receive-quote-hooks.ts

@@ -5,6 +5,11 @@ import {
   sumProofs,
 } from '@agicash/cashu';
 import type { Money } from '@agicash/money';
+import {
+  type LongTimeout,
+  clearLongTimeout,
+  setLongTimeout,
+} from '@agicash/utils';
 import type {
   CashuAccount,
   CashuReceiveQuote,
@@ -34,11 +39,6 @@ import {
 import { useCallback, useEffect, useMemo, useState } from 'react';
 import { useOnMeltQuoteStateChange } from '~/lib/cashu/melt-quote-subscription';
 import { MintQuoteSubscriptionManager } from '~/lib/cashu/mint-quote-subscription-manager';
-import {
-  type LongTimeout,
-  clearLongTimeout,
-  setLongTimeout,
-} from '~/lib/timeout';
 import { useLatest } from '~/lib/use-latest';
 import { withRetry } from '~/lib/with-retry';
 import {

apps/web-wallet/app/features/shared/auth.ts

@@ -1,12 +1,19 @@
-import { jwtDecode } from 'jwt-decode';
+import { safeJwtDecode } from '@agicash/utils';
 
-/** Check if the user is logged in by verifying localStorage tokens. */
+/**
+ * Check if the user is logged in by verifying localStorage tokens. A corrupt
+ * stored token counts as logged out — this feeds the DB client's token
+ * getter, so it must never throw into every query.
+ *
+ * Temporary leak: reads Open Secret's storage keys directly until the late
+ * SDK-migration steps retire the web's own DB client.
+ */
 export const isLoggedIn = (): boolean => {
   const accessToken = window.localStorage.getItem('access_token');
   const refreshToken = window.localStorage.getItem('refresh_token');
   if (!accessToken || !refreshToken) {
     return false;
   }
-  const decoded = jwtDecode(refreshToken);
-  return !!decoded.exp && decoded.exp * 1000 > Date.now();
+  const decoded = safeJwtDecode(refreshToken);
+  return !!decoded?.exp && decoded.exp * 1000 > Date.now();
 };

apps/web-wallet/app/features/shared/sdk.client.ts

@@ -0,0 +1,57 @@
+import { browserStorage } from '@agicash/opensecret';
+import { AgicashSdk } from '@agicash/wallet-sdk';
+import {
+  supabaseAnonKey,
+  supabaseUrl,
+} from '~/features/agicash-db/database.client';
+import { breezApiKey } from '~/lib/breez';
+
+const openSecretApiUrl = import.meta.env.VITE_OPEN_SECRET_API_URL ?? '';
+if (!openSecretApiUrl) {
+  throw new Error('VITE_OPEN_SECRET_API_URL is not set');
+}
+
+const openSecretClientId = import.meta.env.VITE_OPEN_SECRET_CLIENT_ID ?? '';
+if (!openSecretClientId) {
+  throw new Error('VITE_OPEN_SECRET_CLIENT_ID is not set');
+}
+
+const consoleLogger = {
+  debug: (message: string, meta?: unknown) =>
+    meta === undefined ? console.debug(message) : console.debug(message, meta),
+  info: (message: string, meta?: unknown) =>
+    meta === undefined ? console.info(message) : console.info(message, meta),
+  warn: (message: string, meta?: unknown) =>
+    meta === undefined ? console.warn(message) : console.warn(message, meta),
+  error: (message: string, meta?: unknown) =>
+    meta === undefined ? console.error(message) : console.error(message, meta),
+};
+
+export const sdk = AgicashSdk.create({
+  db: {
+    url: supabaseUrl,
+    anonKey: supabaseAnonKey,
+  },
+  auth: {
+    apiUrl: openSecretApiUrl,
+    clientId: openSecretClientId,
+    storage: browserStorage,
+    // e2e bridge: the Playwright fixture arms window.getMockPassword; in
+    // production it's absent, so this resolves null and the SDK generates.
+    generateGuestPassword: async () =>
+      (await window.getMockPassword?.()) ?? null,
+  },
+  spark: {
+    breezApiKey,
+    network: 'MAINNET',
+  },
+  lightningAddressDomain: window.location.host,
+  logger: consoleLogger,
+});
+
+if (import.meta.hot) {
+  // A hot reload of this module constructs a second SDK; dispose the old one
+  // so its expiry timer doesn't leak. Returning the promise makes Vite await
+  // the teardown before evaluating the replacement module.
+  import.meta.hot.dispose(() => sdk.dispose());
+}

apps/web-wallet/app/features/signup/verify-email.ts

@@ -1,8 +1,8 @@
-import { verifyEmail as osVerifyEmail } from '@agicash/opensecret';
 import type { FullUser } from '@agicash/wallet-sdk';
 import { shouldVerifyEmail } from '@agicash/wallet-sdk';
 import { useState } from 'react';
 import { createContext, redirect } from 'react-router';
+import { sdk } from '~/features/shared/sdk.client';
 import { useToast } from '~/hooks/use-toast';
 import type { Route } from '../../routes/+types/_protected.verify-email.($code)';
 import { invalidateAuthQueries } from '../user/auth';
@@ -37,7 +37,7 @@ export const verifyEmail = async (
   code: string,
 ): Promise<{ verified: true } | { verified: false; error: Error }> => {
   try {
-    await osVerifyEmail(code);
+    await sdk.auth.verifyEmail(code);
     await invalidateAuthQueries();
     return { verified: true };
   } catch (e) {