@authon/react-native-wallet 0.1.0 → 0.4.0

package/build/errors.js

@@ -1,9 +1,15 @@
 export class AuthonWalletError extends Error {
     code;
-    constructor(code, message) {
+    /** The server's request ID when the failure came from an API response; log this, never secrets. */
+    diagnosticId;
+    /** Whether trying the same call again can succeed (from the native wallet's code table). */
+    retryable;
+    constructor(code, message, options = {}) {
         super(message ?? code);
         this.name = 'AuthonWalletError';
         this.code = code;
+        this.diagnosticId = options.diagnosticId ?? null;
+        this.retryable = options.retryable ?? false;
     }
 }
 //# sourceMappingURL=errors.js.map

package/build/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AA4CA,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,IAAI,CAAkB;IAC/B,YAAY,IAAqB,EAAE,OAAgB;QACjD,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AA4CA,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACjC,IAAI,CAAkB;IAC/B,mGAAmG;IAC1F,YAAY,CAAgB;IACrC,4FAA4F;IACnF,SAAS,CAAU;IAC5B,YAAY,IAAqB,EAAE,OAAgB,EAAE,UAAiE,EAAE;QACtH,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC;QACvB,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC;QACjD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC9C,CAAC;CACF"}

package/build/index.d.ts

@@ -3,5 +3,5 @@ export { AuthonWalletError } from './errors';
 export type { WalletErrorCode } from './errors';
 export { useAuthonWallet } from './useAuthonWallet';
 export type { UseAuthonWalletOptions, UseAuthonWalletResult } from './useAuthonWallet';
-export type { AuthonWalletOptions, EIP1193Provider, EIP1193RequestArguments, EmbeddedWallet, EmbeddedWalletDevice, Hex, TokenGetter, TypedDataPayload, WalletAccount, WalletAppConfig, WalletChangeListener, WalletMessage, WalletSignOptions, WalletTransactionRequest, } from './types';
+export type { AuthonWalletOptions, CapabilityCheck, CapabilityStatus, WalletCapabilities, WalletChain, WalletChainSignRequest, EIP1193Provider, EIP1193RequestArguments, EmbeddedWallet, EmbeddedWalletDevice, Hex, TokenGetter, TypedDataPayload, WalletAccount, WalletAppConfig, WalletChangeListener, WalletMessage, WalletSignOptions, WalletTransactionRequest, } from './types';
 //# sourceMappingURL=index.d.ts.map

package/build/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC7C,YAAY,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,YAAY,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AACvF,YAAY,EACV,mBAAmB,EACnB,eAAe,EACf,uBAAuB,EACvB,cAAc,EACd,oBAAoB,EACpB,GAAG,EACH,WAAW,EACX,gBAAgB,EAChB,aAAa,EACb,eAAe,EACf,oBAAoB,EACpB,aAAa,EACb,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC7C,YAAY,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,YAAY,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AACvF,YAAY,EACV,mBAAmB,EACnB,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,WAAW,EACX,sBAAsB,EACtB,eAAe,EACf,uBAAuB,EACvB,cAAc,EACd,oBAAoB,EACpB,GAAG,EACH,WAAW,EACX,gBAAgB,EAChB,aAAa,EACb,eAAe,EACf,oBAAoB,EACpB,aAAa,EACb,iBAAiB,EACjB,wBAAwB,GACzB,MAAM,SAAS,CAAC"}

package/build/native.d.ts

@@ -6,6 +6,8 @@ export type NativeResult<T> = {
     ok: false;
     code: string;
     message?: string;
+    diagnosticId?: string | null;
+    retryable?: boolean;
 };
 export interface NativeConfig {
     publishableKey: string;
@@ -22,12 +24,14 @@ export interface AuthonWalletNativeModule {
     configure(id: string, config: NativeConfig): Promise<NativeResult<null>>;
     release(id: string): Promise<NativeResult<null>>;
     appConfig(id: string): Promise<NativeResult<unknown>>;
+    capabilities(id: string): Promise<NativeResult<unknown>>;
     status(id: string, token: string): Promise<NativeResult<unknown>>;
     create(id: string, token: string): Promise<NativeResult<unknown>>;
-    accounts(id: string, token: string, start: number, count: number): Promise<NativeResult<unknown>>;
+    accounts(id: string, token: string, start: number, count: number, chain: string): Promise<NativeResult<unknown>>;
     signMessage(id: string, token: string, kind: 'text' | 'raw', message: string, account: number, address: string | null): Promise<NativeResult<unknown>>;
     signTypedData(id: string, token: string, typedDataJson: string, account: number, address: string | null): Promise<NativeResult<unknown>>;
     signTransaction(id: string, token: string, transactionJson: string, account: number, address: string | null): Promise<NativeResult<unknown>>;
+    signChainTransaction(id: string, token: string, chain: string, account: number, address: string, payloadJson: string): Promise<NativeResult<unknown>>;
     protect(id: string, token: string): Promise<NativeResult<unknown>>;
     upgradeBackup(id: string, token: string): Promise<NativeResult<unknown>>;
     restore(id: string, token: string, reset: boolean): Promise<NativeResult<unknown>>;

package/build/native.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"native.d.ts","sourceRoot":"","sources":["../src/native.ts"],"names":[],"mappings":"AAEA,uEAAuE;AACvE,MAAM,MAAM,YAAY,CAAC,CAAC,IACtB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GACtB;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAElD,MAAM,WAAW,YAAY;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,2BAA2B,EAAE,OAAO,CAAC;IACrC,OAAO,EAAE;QAAE,iBAAiB,EAAE,OAAO,CAAC;QAAC,WAAW,EAAE,OAAO,CAAA;KAAE,CAAC;CAC/D;AAED,iGAAiG;AACjG,MAAM,WAAW,wBAAwB;IACvC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;IACzE,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;IACjD,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IACtD,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IAClG,WAAW,CACT,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,GAAG,KAAK,EACpB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GAAG,IAAI,GACrB,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IAClC,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IACzI,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7I,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IACzE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IACnF,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;CAC3F;AAID,wBAAgB,eAAe,IAAI,wBAAwB,GAAG,IAAI,CAGjE;AAED,0EAA0E;AAC1E,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,wBAAwB,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI,CAEnG"}
+{"version":3,"file":"native.d.ts","sourceRoot":"","sources":["../src/native.ts"],"names":[],"mappings":"AAEA,uEAAuE;AACvE,MAAM,MAAM,YAAY,CAAC,CAAC,IACtB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GACtB;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAErG,MAAM,WAAW,YAAY;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,2BAA2B,EAAE,OAAO,CAAC;IACrC,OAAO,EAAE;QAAE,iBAAiB,EAAE,OAAO,CAAC;QAAC,WAAW,EAAE,OAAO,CAAA;KAAE,CAAC;CAC/D;AAED,iGAAiG;AACjG,MAAM,WAAW,wBAAwB;IACvC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;IACzE,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;IACjD,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IACtD,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IACjH,WAAW,CACT,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,GAAG,KAAK,EACpB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GAAG,IAAI,GACrB,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IAClC,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IACzI,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7I,oBAAoB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IACtJ,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IACnE,aAAa,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IACzE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;IACnF,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;CAC3F;AAID,wBAAgB,eAAe,IAAI,wBAAwB,GAAG,IAAI,CAGjE;AAED,0EAA0E;AAC1E,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,wBAAwB,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI,CAEnG"}

package/build/native.js.map

@@ -1 +1 @@
-{"version":3,"file":"native.js","sourceRoot":"","sources":["../src/native.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAuChE,IAAI,QAAqD,CAAC;AAE1D,MAAM,UAAU,eAAe;IAC7B,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC5C,OAAO,2BAA2B,CAA2B,cAAc,CAAC,CAAC;AAC/E,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,yBAAyB,CAAC,MAAmD;IAC3F,QAAQ,GAAG,MAAM,CAAC;AACpB,CAAC"}
+{"version":3,"file":"native.js","sourceRoot":"","sources":["../src/native.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAyChE,IAAI,QAAqD,CAAC;AAE1D,MAAM,UAAU,eAAe;IAC7B,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IAC5C,OAAO,2BAA2B,CAA2B,cAAc,CAAC,CAAC;AAC/E,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,yBAAyB,CAAC,MAAmD;IAC3F,QAAQ,GAAG,MAAM,CAAC;AACpB,CAAC"}

package/build/types.d.ts

@@ -23,11 +23,34 @@ export interface EmbeddedWallet {
     backupUpgradeRecommended: boolean;
     devices: EmbeddedWalletDevice[];
 }
-/** One HD account, derived at `m/44'/60'/0'/0/{index}`. Account 0 is `EmbeddedWallet.address`. */
+/** Chains whose account addresses the wallet derives from the same seed (NATIVE.md section 11). */
+export type WalletChain = 'evm' | 'tron' | 'xrp' | 'bitcoin' | 'bitcoin-testnet' | 'solana';
+/**
+ * One HD account. EVM: `m/44'/60'/0'/0/{index}` (account 0 is `EmbeddedWallet.address`); other chains
+ * use their standard paths (TRON `m/44'/195'/n'/0/0`, XRP `m/44'/144'/n'/0/0`, Bitcoin
+ * `m/84'/0'/n'/0/0`, Bitcoin testnet `m/84'/1'/n'/0/0`, Solana `m/44'/501'/n'/0'`).
+ */
 export interface WalletAccount {
     index: number;
     path: string;
     address: string;
+    /** Set when `getAccounts` was asked for a chain. */
+    chain?: WalletChain;
+    /** Public key (hex) when the chain needs it to build a transaction (XRP SigningPubKey). */
+    publicKey?: string;
+}
+/** `signChainTransaction` input (NATIVE.md section 12). The app builds the unsigned transaction. */
+export interface WalletChainSignRequest {
+    chain: Exclude<WalletChain, 'evm'>;
+    /** Account index (default 0). */
+    account?: number;
+    /** The account's address on `chain`, from getAccounts. Signing fails (ADDRESS_MISMATCH) if it differs. */
+    address: string;
+    /**
+     * Chain-specific unsigned transaction: Solana `{ message }` (base64 Message, legacy or v0),
+     * TRON `{ rawDataHex }`, Bitcoin `{ psbt }` (base64), XRP `{ txBlobHex }` (encodeForSigning output).
+     */
+    payload: Record<string, unknown>;
 }
 /** Signs with another account of the same wallet. Omitted or 0 = the wallet address. */
 export interface WalletSignOptions {
@@ -80,6 +103,29 @@ export interface WalletAppConfig {
     rpId: string;
     minFrameProtocol: number | null;
 }
+export type CapabilityStatus = 'available' | 'unavailable' | 'unknown';
+export interface CapabilityCheck {
+    status: CapabilityStatus;
+    /** Reason code (see the README table); null when available. */
+    reason: string | null;
+}
+/** `capabilities()`: can this device and app use the wallet? Asked before sign-in, no session. */
+export interface WalletCapabilities {
+    /** unavailable if any check is unavailable, else unknown if any is unknown, else available. */
+    ready: CapabilityStatus;
+    /** App registration and approval (APP_NOT_REGISTERED, APP_SIGNATURE_MISMATCH, APP_NOT_APPROVED, NETWORK_ERROR, API_ERROR). */
+    app: CapabilityCheck;
+    /** Embedded wallet enabled for the project (WALLET_DISABLED, NETWORK_ERROR). */
+    wallet: CapabilityCheck;
+    /** Hardware-protected key storage (HARDWARE_KEYSTORE_UNAVAILABLE, SIMULATOR, CHECK_FAILED). */
+    secureStorage: CapabilityCheck;
+    /** A device passcode / biometrics is set (DEVICE_LOCK_NOT_SET, CHECK_FAILED). */
+    deviceLock: CapabilityCheck;
+    /** Passkey PRF backup, static OS/API support only (OS_UNSUPPORTED, PASSKEY_API_UNAVAILABLE, PRF_PROVIDER_UNVERIFIED). */
+    passkeyBackup: CapabilityCheck;
+    /** X-Request-Id of the app-config response. */
+    diagnosticId: string | null;
+}
 export interface EIP1193RequestArguments {
     method: string;
     params?: unknown[] | Record<string, unknown>;

package/build/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAE7F,MAAM,MAAM,GAAG,GAAG,KAAK,MAAM,EAAE,CAAC;AAEhC,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,wBAAwB;IACxB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,yFAAyF;IACzF,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,SAAS,EAAE,OAAO,CAAC;IACnB,mGAAmG;IACnG,YAAY,EAAE,OAAO,CAAC;IACtB,8GAA8G;IAC9G,wBAAwB,EAAE,OAAO,CAAC;IAClC,OAAO,EAAE,oBAAoB,EAAE,CAAC;CACjC;AAED,kGAAkG;AAClG,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,wFAAwF;AACxF,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,mEAAmE;AACnE,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAErD,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;IAC7D,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IACpC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IACpC,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IACxC,oBAAoB,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IAChD,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;CAChE;AAED,MAAM,MAAM,oBAAoB,GAAG,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,KAAK,IAAI,CAAC;AAE3E,4EAA4E;AAC5E,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,wEAAwE;IACxE,OAAO,EAAE,OAAO,CAAC;IACjB,6FAA6F;IAC7F,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,2EAA2E;IAC3E,cAAc,EAAE,OAAO,CAAC;IACxB,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9C;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1D;AAED,MAAM,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;AAE/F,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,0CAA0C;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,QAAQ,EAAE,WAAW,CAAC;IACtB;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACpD,oHAAoH;IACpH,2BAA2B,CAAC,EAAE,OAAO,CAAC;IACtC;;;;;OAKG;IACH,OAAO,CAAC,EAAE;QAAE,iBAAiB,CAAC,EAAE,OAAO,CAAC;QAAC,WAAW,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CAClE"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAE7F,MAAM,MAAM,GAAG,GAAG,KAAK,MAAM,EAAE,CAAC;AAEhC,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,wBAAwB;IACxB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,yFAAyF;IACzF,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,SAAS,EAAE,OAAO,CAAC;IACnB,mGAAmG;IACnG,YAAY,EAAE,OAAO,CAAC;IACtB,8GAA8G;IAC9G,wBAAwB,EAAE,OAAO,CAAC;IAClC,OAAO,EAAE,oBAAoB,EAAE,CAAC;CACjC;AAED,mGAAmG;AACnG,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,SAAS,GAAG,iBAAiB,GAAG,QAAQ,CAAC;AAE5F;;;;GAIG;AACH,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,oDAAoD;IACpD,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,2FAA2F;IAC3F,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,oGAAoG;AACpG,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,OAAO,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IACnC,iCAAiC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0GAA0G;IAC1G,OAAO,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,wFAAwF;AACxF,MAAM,WAAW,iBAAiB;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,mEAAmE;AACnE,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAErD,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;IAC7D,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IACpC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IACpC,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IACxC,oBAAoB,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;IAChD,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IACvB,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;CAChE;AAED,MAAM,MAAM,oBAAoB,GAAG,CAAC,MAAM,EAAE,cAAc,GAAG,IAAI,KAAK,IAAI,CAAC;AAE3E,4EAA4E;AAC5E,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,wEAAwE;IACxE,OAAO,EAAE,OAAO,CAAC;IACjB,6FAA6F;IAC7F,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,2EAA2E;IAC3E,cAAc,EAAE,OAAO,CAAC;IACxB,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,aAAa,GAAG,SAAS,CAAC;AAEvE,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,gBAAgB,CAAC;IACzB,+DAA+D;IAC/D,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,kGAAkG;AAClG,MAAM,WAAW,kBAAkB;IACjC,+FAA+F;IAC/F,KAAK,EAAE,gBAAgB,CAAC;IACxB,8HAA8H;IAC9H,GAAG,EAAE,eAAe,CAAC;IACrB,gFAAgF;IAChF,MAAM,EAAE,eAAe,CAAC;IACxB,+FAA+F;IAC/F,aAAa,EAAE,eAAe,CAAC;IAC/B,iFAAiF;IACjF,UAAU,EAAE,eAAe,CAAC;IAC5B,yHAAyH;IACzH,aAAa,EAAE,eAAe,CAAC;IAC/B,+CAA+C;IAC/C,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9C;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,CAAC,IAAI,EAAE,uBAAuB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1D;AAED,MAAM,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;AAE/F,MAAM,WAAW,mBAAmB;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,0CAA0C;IAC1C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,QAAQ,EAAE,WAAW,CAAC;IACtB;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG;QAAE,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACpD,oHAAoH;IACpH,2BAA2B,CAAC,EAAE,OAAO,CAAC;IACtC;;;;;OAKG;IACH,OAAO,CAAC,EAAE;QAAE,iBAAiB,CAAC,EAAE,OAAO,CAAC;QAAC,WAAW,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CAClE"}

package/ios/AuthonReactNativeWallet.podspec

@@ -18,17 +18,21 @@ Pod::Spec.new do |s|
   s.frameworks = 'Security', 'CryptoKit', 'LocalAuthentication', 'AuthenticationServices', 'SwiftUI'
 
   # vendor/ is generated from swift/Sources by scripts/sync-native-wallet.mjs.
-  # CSecp256k1: compile only build/*.c (they include src/*.c); CKeccak: sha3.c and memzero.c.
+  # CSecp256k1: compile only build/*.c (they include src/*.c); CKeccak: sha3.c, ripemd160.c and memzero.c;
+  # CMonocypher (Ed25519, deterministic like the web wallet): both .c files, no flags.
   s.source_files = [
     '*.swift',
     'vendor/AuthonWallet/**/*.swift',
     'vendor/CSecp256k1/build/*.c',
     'vendor/CSecp256k1/include/*.h',
     'vendor/CKeccak/sha3.c',
+    'vendor/CKeccak/ripemd160.c',
     'vendor/CKeccak/memzero.c',
     'vendor/CKeccak/include/ckeccak.h',
+    'vendor/CMonocypher/*.c',
+    'vendor/CMonocypher/include/*.h',
   ]
-  s.public_header_files = ['vendor/CSecp256k1/include/*.h', 'vendor/CKeccak/include/ckeccak.h']
+  s.public_header_files = ['vendor/CSecp256k1/include/*.h', 'vendor/CKeccak/include/ckeccak.h', 'vendor/CMonocypher/include/*.h']
   s.preserve_paths = ['vendor/CSecp256k1/src/**/*', 'vendor/CKeccak/*.h']
   s.pod_target_xcconfig = {
     'DEFINES_MODULE' => 'YES',

package/ios/AuthonWalletModule.swift

@@ -27,6 +27,10 @@ public final class AuthonWalletModule: Module {
       await self.call(id, token: nil) { try Self.appConfig(await $0.appConfig()) }
     }
 
+    AsyncFunction("capabilities") { (id: String) async -> [String: Any] in
+      await self.call(id, token: nil) { Self.capabilities(await $0.capabilities()) }
+    }
+
     AsyncFunction("status") { (id: String, token: String) async -> [String: Any] in
       await self.call(id, token: token) { try Self.wallet(await $0.status()) }
     }
@@ -35,9 +39,14 @@ public final class AuthonWalletModule: Module {
       await self.call(id, token: token) { try Self.wallet(await $0.create()) }
     }
 
-    AsyncFunction("accounts") { (id: String, token: String, start: Int, count: Int) async -> [String: Any] in
+    AsyncFunction("accounts") { (id: String, token: String, start: Int, count: Int, chain: String) async -> [String: Any] in
       await self.call(id, token: token) { w in
-        try await w.accounts(start: start, count: count).map { ["index": $0.index, "path": $0.path, "address": $0.address] }
+        guard let walletChain = WalletChain(rawValue: chain) else {
+          throw WalletError(.invalidRequest, "chain must be one of \(WalletChain.allCases.map(\.rawValue).joined(separator: ", "))")
+        }
+        return try await w.accounts(start: start, count: count, chain: walletChain).map {
+          ["index": $0.index, "path": $0.path, "address": $0.address, "chain": $0.chain.rawValue, "publicKey": Self.orNull($0.publicKey)] as [String: Any]
+        }
       }
     }
 
@@ -56,6 +65,19 @@ public final class AuthonWalletModule: Module {
       await self.call(id, token: token) { try await $0.signTransaction(transactionJson, account: account, address: address) }
     }
 
+    AsyncFunction("signChainTransaction") { (id: String, token: String, chain: String, account: Int, address: String, payloadJson: String) async -> [String: Any] in
+      await self.call(id, token: token) { w in
+        guard let walletChain = WalletChain(rawValue: chain) else {
+          throw WalletError(.invalidRequest, "unknown chain")
+        }
+        guard let data = payloadJson.data(using: .utf8),
+              let payload = try? JSONSerialization.jsonObject(with: data) as? [String: Any] else {
+          throw WalletError(.invalidRequest, "payload must be a JSON object")
+        }
+        return try await w.signChainTransaction(chain: walletChain, account: account, address: address, payload: payload)
+      }
+    }
+
     AsyncFunction("protect") { (id: String, token: String) async -> [String: Any] in
       await self.call(id, token: token) { ["shareVersion": try await $0.protect().shareVersion] }
     }
@@ -140,7 +162,13 @@ public final class AuthonWalletModule: Module {
     } else {
       e = WalletError(.internal, "unexpected error")
     }
-    return ["ok": false, "code": e.code.rawValue, "message": e.message]
+    return [
+      "ok": false,
+      "code": e.code.rawValue,
+      "message": e.message,
+      "diagnosticId": orNull(e.diagnosticId),
+      "retryable": e.retryable,
+    ]
   }
 
   // MARK: - Public data only
@@ -165,6 +193,21 @@ public final class AuthonWalletModule: Module {
     ]
   }
 
+  private static func capabilities(_ c: WalletCapabilities) -> [String: Any] {
+    func check(_ k: WalletCapabilities.Check) -> [String: Any] {
+      ["status": k.status.rawValue, "reason": orNull(k.reason)]
+    }
+    return [
+      "ready": c.ready.rawValue,
+      "app": check(c.app),
+      "wallet": check(c.wallet),
+      "secureStorage": check(c.secureStorage),
+      "deviceLock": check(c.deviceLock),
+      "passkeyBackup": check(c.passkeyBackup),
+      "diagnosticId": orNull(c.diagnosticId),
+    ]
+  }
+
   private static func appConfig(_ c: WalletAppConfig) -> [String: Any] {
     [
       "projectId": orNull(c.projectId),

package/ios/vendor/AuthonWallet/AuthonWallet.swift

@@ -61,11 +61,16 @@ public final class AuthonWallet: @unchecked Sendable {
     /// App registration and wallet settings from the API (cached).
     public func appConfig() async throws -> WalletAppConfig {
         if let c = lock.withLock({ cachedConfig }) { return c }
+        return try await refreshAppConfig()
+    }
+
+    /// Fetches app-config again (used by capabilities()); a successful answer replaces the cache.
+    func refreshAppConfig() async throws -> WalletAppConfig {
         guard let appId = appId ?? Self.detectAppIdentifier() else {
             throw WalletError(.originNotAllowed, "appId (TEAMID.bundleId) could not be determined")
         }
         let cfg = try await api.appConfig(platform: "ios", appId: appId)
-        lock.withLock { cachedConfig = cfg }
+        if cfg.projectFound { lock.withLock { cachedConfig = cfg } }
         return cfg
     }
 
@@ -135,9 +140,10 @@ public final class AuthonWallet: @unchecked Sendable {
         try await run { ops, s in try PublicWallet(try await ops.create(s)) }
     }
 
-    /// Addresses of accounts start..<start+count (m/44'/60'/0'/0/n).
-    public func accounts(start: Int = 0, count: Int = 1) async throws -> [WalletAccount] {
-        try await run { ops, s in try await ops.accounts(s, start: start, count: count) }
+    /// Addresses of accounts start..<start+count on `chain` (EVM: m/44'/60'/0'/0/n; other paths in
+    /// `WalletChain.path`). A wallet from before HD wallets has only EVM account 0 (ACCOUNT_UNAVAILABLE).
+    public func accounts(start: Int = 0, count: Int = 1, chain: WalletChain = .evm) async throws -> [WalletAccount] {
+        try await run { ops, s in try await ops.accounts(s, start: start, count: count, chain: chain) }
     }
 
     /// EIP-191 personal_sign. `account` > 0 must come with the address from `accounts()`.
@@ -166,6 +172,20 @@ public final class AuthonWallet: @unchecked Sendable {
         }
     }
 
+    /// Signs a transaction the app built for another chain (EVM uses `signTransaction`: UNSUPPORTED_TYPE).
+    /// - Solana: `["message": <serialized Message, base64>, "cluster": "devnet"]` (cluster optional,
+    ///   only labels the approval) → `["signature": <base58>]`.
+    /// - TRON: `["rawDataHex": <raw_data protobuf, hex>]` → `["txID": <hex>, "signature": <r||s||v hex>]`.
+    /// - Bitcoin / testnet: `["psbt": <base64>]` → `["psbt": <signed PSBT base64>, "txHex": <raw tx>]`
+    ///   (`txHex` only when every input was the account's).
+    /// - XRP: `["txBlobHex": <encodeForSigning output>]` → `["signature": <DER, uppercase hex>]`.
+    /// `address` is the expected address of `account` on that chain (from `accounts(chain:)`).
+    public func signChainTransaction(chain: WalletChain, account: Int = 0, address: String, payload: [String: Any]) async throws -> [String: String] {
+        try await run { ops, s in
+            try await ops.signChainTransaction(s, chain: chain, account: account, address: address, payload: try JSONValue.from(payload))
+        }
+    }
+
     /// Creates the passkey backup (iOS 18 / macOS 15 for PRF).
     public func protect() async throws -> ProtectResult {
         try await run(passkeys: true) { ops, s in try await ops.protect(s) }

package/ios/vendor/AuthonWallet/Capabilities.swift

@@ -0,0 +1,149 @@
+// GENERATED by scripts/sync-native-wallet.mjs from swift/Sources/AuthonWallet/Capabilities.swift. Do not edit: change the source and run the script.
+import CryptoKit
+import Foundation
+import LocalAuthentication
+import Security
+
+/// Pre-sign-in check (docs/wallet/NATIVE.md section 9): whether this app and device can use the
+/// wallet. Needs no session, opens no login or passkey UI and never creates a wallet.
+public struct WalletCapabilities: Equatable, Sendable {
+    public enum Status: String, Sendable {
+        case available, unavailable, unknown
+    }
+
+    public struct Check: Equatable, Sendable {
+        public var status: Status
+        /// Section 9 reason code; nil when available.
+        public var reason: String?
+
+        public static let available = Check(status: .available, reason: nil)
+        static func unavailable(_ reason: String) -> Check { Check(status: .unavailable, reason: reason) }
+        static func unknown(_ reason: String) -> Check { Check(status: .unknown, reason: reason) }
+    }
+
+    /// unavailable if any check is unavailable, else unknown if any is unknown, else available.
+    public var ready: Status
+    /// App registration and approval (GET /v1/wallet/app-config).
+    public var app: Check
+    /// The embedded wallet is enabled for the project.
+    public var wallet: Check
+    /// Hardware-protected key storage (Secure Enclave on a real device).
+    public var secureStorage: Check
+    /// A device passcode or biometrics is set.
+    public var deviceLock: Check
+    /// Passkey PRF backup and restore (static OS support only).
+    public var passkeyBackup: Check
+    /// `X-Request-Id` of the app-config response.
+    public var diagnosticId: String?
+
+    init(app: Check, wallet: Check, secureStorage: Check, deviceLock: Check, passkeyBackup: Check, diagnosticId: String?) {
+        self.app = app
+        self.wallet = wallet
+        self.secureStorage = secureStorage
+        self.deviceLock = deviceLock
+        self.passkeyBackup = passkeyBackup
+        self.diagnosticId = diagnosticId
+        let all = [app, wallet, secureStorage, deviceLock, passkeyBackup].map(\.status)
+        ready = all.contains(.unavailable) ? .unavailable : all.contains(.unknown) ? .unknown : .available
+    }
+}
+
+/// Device checks behind capabilities(); replaceable in tests.
+struct CapabilityProbes: Sendable {
+    var secureStorage: @Sendable () -> WalletCapabilities.Check
+    var deviceLock: @Sendable () -> WalletCapabilities.Check
+    var passkeyBackup: @Sendable () -> WalletCapabilities.Check
+
+    static let device = CapabilityProbes(
+        secureStorage: { probeSecureEnclave() },
+        deviceLock: { probeDeviceLock() },
+        passkeyBackup: { probePasskeyBackup() }
+    )
+
+    /// The simulator never counts as hardware protection, even where it emulates an enclave.
+    /// On a device a throwaway enclave key is created and released (never stored).
+    static func probeSecureEnclave() -> WalletCapabilities.Check {
+        #if targetEnvironment(simulator)
+        return .unknown("SIMULATOR")
+        #else
+        guard SecureEnclave.isAvailable else { return .unavailable("HARDWARE_KEYSTORE_UNAVAILABLE") }
+        var error: Unmanaged<CFError>?
+        guard let access = SecAccessControlCreateWithFlags(nil, kSecAttrAccessibleWhenUnlockedThisDeviceOnly, .privateKeyUsage, &error) else {
+            return .unknown("CHECK_FAILED")
+        }
+        let attrs: [String: Any] = [
+            kSecAttrKeyType as String: kSecAttrKeyTypeECSECPrimeRandom,
+            kSecAttrKeySizeInBits as String: 256,
+            kSecAttrTokenID as String: kSecAttrTokenIDSecureEnclave,
+            kSecPrivateKeyAttrs as String: [
+                kSecAttrIsPermanent as String: false,
+                kSecAttrAccessControl as String: access,
+            ] as [String: Any],
+        ]
+        guard SecKeyCreateRandomKey(attrs as CFDictionary, &error) != nil else { return .unknown("CHECK_FAILED") }
+        return .available
+        #endif
+    }
+
+    static func probeDeviceLock() -> WalletCapabilities.Check {
+        let context = LAContext()
+        var error: NSError?
+        if context.canEvaluatePolicy(.deviceOwnerAuthentication, error: &error) { return .available }
+        if let code = error.map({ LAError.Code(rawValue: $0.code) }), code == .passcodeNotSet {
+            return .unavailable("DEVICE_LOCK_NOT_SET")
+        }
+        return .unknown("CHECK_FAILED")
+    }
+
+    static func probePasskeyBackup() -> WalletCapabilities.Check {
+        if #available(iOS 18.0, macOS 15.0, *) {
+            // The API exists; whether the user's passkey provider evaluates PRF shows on the first protect().
+            return .unknown("PRF_PROVIDER_UNVERIFIED")
+        }
+        return .unavailable("OS_UNSUPPORTED")
+    }
+}
+
+extension AuthonWallet {
+    /// See `WalletCapabilities`. Never throws: failures become `unknown` checks.
+    /// `allowSoftwareKeys` does not affect the answer.
+    public func capabilities() async -> WalletCapabilities {
+        await capabilities(probes: .device)
+    }
+
+    func capabilities(probes: CapabilityProbes) async -> WalletCapabilities {
+        let app: WalletCapabilities.Check
+        let wallet: WalletCapabilities.Check
+        var diagnosticId: String?
+        do {
+            let cfg = try await refreshAppConfig()
+            diagnosticId = cfg.diagnosticId
+            if !cfg.projectFound {
+                app = .unavailable("APP_NOT_REGISTERED")
+                wallet = .unknown("API_ERROR")
+            } else {
+                app = !cfg.allowed ? .unavailable("APP_NOT_REGISTERED") : cfg.approved ? .available : .unknown("APP_NOT_APPROVED")
+                wallet = cfg.enabled ? .available : .unavailable("WALLET_DISABLED")
+            }
+        } catch let e as WalletError where e.isNetworkFailure {
+            app = .unknown("NETWORK_ERROR")
+            wallet = .unknown("NETWORK_ERROR")
+        } catch let e as WalletError where e.code == .originNotAllowed {
+            // The app ID could not be determined, so no registration can match it.
+            app = .unavailable("APP_NOT_REGISTERED")
+            wallet = .unknown("API_ERROR")
+        } catch {
+            diagnosticId = (error as? WalletError)?.diagnosticId
+            app = .unknown("API_ERROR")
+            wallet = .unknown("API_ERROR")
+        }
+        return WalletCapabilities(
+            app: app,
+            wallet: wallet,
+            secureStorage: probes.secureStorage(),
+            deviceLock: probes.deviceLock(),
+            passkeyBackup: probes.passkeyBackup(),
+            diagnosticId: diagnosticId
+        )
+    }
+}