@multiplatform.one/web3 5.0.27

package/src/connectkit/adapters/SuiAdapter.ts

@@ -0,0 +1,130 @@
+// SIWU — Sign-In With Sui — adapter.
+//
+// Sui wallets (Slush, Suiet, Ethos, …) expose themselves through the Wallet
+// Standard, which is an event-based registry rather than a single injected
+// global like Ethereum's `window.ethereum` / Solana's `window.solana`. We do
+// the minimal Wallet-Standard handshake inline (dispatch `app-ready`, collect
+// `register-wallet` responses) so the theme bundle needs ZERO @mysten/* deps.
+//
+// It produces exactly what the Java server (SuiVerifier/SuiMessage/SuiCredentials)
+// verifies: username = Sui's serialized signature `flag||sig||pubkey` (base64,
+// from `sui:signPersonalMessage`), password = base64(message); the message's
+// address line is the 0x Sui address (blake2b256(flag||pubkey)).
+
+import type { SignInMessageOptions, WalletAdapter, WalletAddress } from "./types";
+
+interface StandardWallet {
+  name: string;
+  accounts: ReadonlyArray<{ address: string }>;
+  features: Record<string, unknown>;
+}
+
+interface ConnectFeature {
+  connect: () => Promise<{ accounts?: ReadonlyArray<{ address: string }> }>;
+}
+interface DisconnectFeature {
+  disconnect: () => Promise<void>;
+}
+interface SignPersonalMessageFeature {
+  signPersonalMessage: (input: {
+    message: Uint8Array;
+    account: { address: string };
+  }) => Promise<{ signature: string; bytes: string }>;
+}
+
+/** Minimal Wallet-Standard discovery: returns wallets exposing the Sui sign feature. */
+export function discoverSuiWallets(): StandardWallet[] {
+  const wallets: StandardWallet[] = [];
+  const api = {
+    register: (...ws: StandardWallet[]) => {
+      wallets.push(...ws);
+      return () => {};
+    },
+  };
+  const onRegister = (e: Event) => {
+    const detail = (e as CustomEvent).detail as (a: typeof api) => void;
+    try {
+      detail(api);
+    } catch {
+      // ignore a misbehaving wallet
+    }
+  };
+  window.addEventListener("wallet-standard:register-wallet", onRegister);
+  window.dispatchEvent(new CustomEvent("wallet-standard:app-ready", { detail: api }));
+  window.removeEventListener("wallet-standard:register-wallet", onRegister);
+  return wallets.filter(
+    (w) => w?.features?.["sui:signPersonalMessage"] && w?.features?.["standard:connect"],
+  );
+}
+
+export class SuiAdapter implements WalletAdapter {
+  readonly chain = "sui";
+  address: WalletAddress | null = null;
+  networkId: string | null = "sui:mainnet";
+  isConnected = false;
+  private wallet: StandardWallet | null = null;
+  private account: { address: string } | null = null;
+
+  async connect(): Promise<void> {
+    const wallets = discoverSuiWallets();
+    if (!wallets.length) {
+      throw new Error("No Sui wallet found. Install a Sui wallet (Slush, Suiet, Ethos, …).");
+    }
+    const wallet = wallets[0];
+    const connectFeature = wallet.features["standard:connect"] as ConnectFeature;
+    const res = await connectFeature.connect();
+    const accounts = res?.accounts ?? wallet.accounts;
+    if (!accounts?.length) {
+      throw new Error("Sui wallet returned no accounts");
+    }
+    this.wallet = wallet;
+    this.account = accounts[0];
+    this.address = accounts[0].address;
+    this.isConnected = true;
+  }
+
+  async disconnect(): Promise<void> {
+    try {
+      const f = this.wallet?.features?.["standard:disconnect"] as DisconnectFeature | undefined;
+      await f?.disconnect?.();
+    } catch {
+      // ignore — clearing local state below is what matters
+    }
+    this.wallet = null;
+    this.account = null;
+    this.address = null;
+    this.isConnected = false;
+  }
+
+  /** Build the canonical SIWU message the Java SuiMessage parser accepts. */
+  async buildMessage(opts: SignInMessageOptions): Promise<string> {
+    if (!this.address) throw new Error("connect a Sui wallet first");
+    const domain = opts.domain ?? window.location.host;
+    const uri = opts.uri ?? window.location.origin;
+    const issuedAt = opts.issuedAt ?? new Date().toISOString();
+    const statement = opts.statement ?? "Sign in With Sui.";
+    return (
+      `${domain} wants you to sign in with your Sui account:\n` +
+      `${this.address}\n` +
+      `\n` +
+      `${statement}\n` +
+      `\n` +
+      `URI: ${uri}\n` +
+      `Version: 1\n` +
+      `Chain ID: sui:mainnet\n` +
+      `Nonce: ${opts.nonce}\n` +
+      `Issued At: ${issuedAt}`
+    );
+  }
+
+  /** Sui's serialized signature (flag||sig||pubkey, base64) — submitted as keycloak's username. */
+  async signMessage(message: string): Promise<string> {
+    if (!this.wallet || !this.account) throw new Error("connect a Sui wallet first");
+    const feature = this.wallet.features["sui:signPersonalMessage"] as SignPersonalMessageFeature;
+    const res = await feature.signPersonalMessage({
+      message: new TextEncoder().encode(message),
+      account: this.account,
+    });
+    return res.signature;
+  }
+}

package/src/connectkit/adapters/discover.ts

@@ -0,0 +1,70 @@
+import type { WalletAdapter } from './types';
+import { SolanaAdapter } from './SolanaAdapter';
+import { SuiAdapter, discoverSuiWallets } from './SuiAdapter';
+import { BitcoinAdapter } from './BitcoinAdapter';
+
+export type SiwwEcosystem = 'solana' | 'sui' | 'bitcoin';
+
+export interface WalletEntry {
+  /** Stable id, e.g. "siww:solana:phantom" — matches a walletConfigs key. */
+  id: string;
+  /** Display name. */
+  name: string;
+  /** Non-EVM ecosystem. */
+  ecosystem: SiwwEcosystem;
+  /** Ready-to-drive siww adapter. */
+  adapter: WalletAdapter;
+}
+
+/**
+ * Detect the non-EVM wallets present in the page (Solana / Sui / Bitcoin). EVM
+ * wallets are intentionally NOT returned here — they are handled natively by
+ * wagmi's EIP-6963 / Coinbase / WalletConnect connectors. One entry per
+ * (ecosystem, primary wallet); each carries a ready siww adapter.
+ */
+export function discoverWallets(): WalletEntry[] {
+  if (typeof window === 'undefined') return [];
+  const w = window as unknown as {
+    solana?: { isPhantom?: boolean };
+    phantom?: { solana?: { isPhantom?: boolean }; bitcoin?: unknown };
+    okxwallet?: { bitcoin?: unknown };
+    unisat?: unknown;
+  };
+  const out: WalletEntry[] = [];
+
+  const sol = w.phantom?.solana ?? w.solana;
+  if (sol) {
+    out.push({
+      id: sol.isPhantom ? 'siww:solana:phantom' : 'siww:solana:solana',
+      name: sol.isPhantom ? 'Phantom' : 'Solana Wallet',
+      ecosystem: 'solana',
+      adapter: new SolanaAdapter(),
+    });
+  }
+
+  const suiWallets = discoverSuiWallets();
+  if (suiWallets.length) {
+    out.push({
+      id: 'siww:sui',
+      name: suiWallets[0].name || 'Sui Wallet',
+      ecosystem: 'sui',
+      adapter: new SuiAdapter(),
+    });
+  }
+
+  if (w.unisat || w.okxwallet?.bitcoin || w.phantom?.bitcoin) {
+    const id = w.unisat
+      ? 'siww:bitcoin:unisat'
+      : w.okxwallet?.bitcoin
+        ? 'siww:bitcoin:okx'
+        : 'siww:bitcoin:phantom';
+    const name = w.unisat
+      ? 'UniSat'
+      : w.okxwallet?.bitcoin
+        ? 'OKX Wallet'
+        : 'Phantom';
+    out.push({ id, name, ecosystem: 'bitcoin', adapter: new BitcoinAdapter() });
+  }
+
+  return out;
+}

package/src/connectkit/adapters/index.ts

@@ -0,0 +1,17 @@
+// Vendored siww WalletAdapters (from selfhosted-cloud/keycloak/siww) + the page
+// probe that lists the non-EVM wallets present. Dependency-light: the adapters use
+// injected providers directly (only the EVM one pulls viem's getAddress).
+export type {
+  WalletAdapter,
+  WalletAddress,
+  SignInMessageOptions,
+} from './types';
+export { EthereumAdapter } from './EthereumAdapter';
+export { SolanaAdapter } from './SolanaAdapter';
+export { SuiAdapter, discoverSuiWallets } from './SuiAdapter';
+export { BitcoinAdapter } from './BitcoinAdapter';
+export {
+  discoverWallets,
+  type WalletEntry,
+  type SiwwEcosystem,
+} from './discover';

package/src/connectkit/adapters/messages.ts

@@ -0,0 +1,88 @@
+import { getAddress } from 'viem';
+import type { Ecosystem } from '../utils';
+
+// Single source of truth for the canonical "sign-in" message per signer family.
+// Every chain's message is the same SIWx envelope — only the family label, the
+// default statement, the `Chain ID:` line, and address normalization differ. This
+// is deliberately NOT wallet/chain-specific: a non-chain signer (e.g. a GPG key)
+// is just another `SignerFamily` entry whose message the server's verifier checks.
+// Adding a family = one SPEC row + a verifier on the Keycloak side.
+
+/** A signer family. Today: the four wallet ecosystems; extensible to 'gpg', etc. */
+export type SignerFamily = Ecosystem;
+
+interface FamilySpec {
+  /** Human label in the "...sign in with your <label> account:" line. */
+  label: string;
+  /** Default statement line. */
+  statement: string;
+  /** Fixed value for the `Chain ID:` line (EVM overrides with a numeric id). */
+  chainIdLine: string;
+  /** Optional address normalization (EVM needs the EIP-55 checksum). */
+  normalize?: (address: string) => string;
+}
+
+const SPECS: Record<SignerFamily, FamilySpec> = {
+  evm: {
+    label: 'Ethereum',
+    statement: 'Sign in With Ethereum.',
+    chainIdLine: '1',
+    // moonstoneid's SiweMessage rejects a non-checksummed address.
+    normalize: (a) => getAddress(a),
+  },
+  solana: {
+    label: 'Solana',
+    statement: 'Sign in With Solana.',
+    chainIdLine: 'solana:mainnet',
+  },
+  sui: {
+    label: 'Sui',
+    statement: 'Sign in With Sui.',
+    chainIdLine: 'sui:mainnet',
+  },
+  bitcoin: {
+    label: 'Bitcoin',
+    statement: 'Sign in With Bitcoin.',
+    chainIdLine: 'bitcoin',
+  },
+};
+
+export interface SiwwMessageOptions {
+  address: string;
+  nonce: string;
+  domain?: string;
+  uri?: string;
+  statement?: string;
+  issuedAt?: string;
+  /** EVM only: numeric chain id for the `Chain ID:` line. */
+  chainId?: number;
+}
+
+/** Build the canonical SIWx message for a signer family — the one the Java server verifies. */
+export function buildSiwwMessage(
+  family: SignerFamily,
+  opts: SiwwMessageOptions
+): string {
+  const spec = SPECS[family];
+  const host = typeof window !== 'undefined' ? window.location.host : '';
+  const origin = typeof window !== 'undefined' ? window.location.origin : '';
+  const domain = opts.domain ?? host;
+  const uri = opts.uri ?? origin;
+  const issuedAt = opts.issuedAt ?? new Date().toISOString();
+  const statement = opts.statement ?? spec.statement;
+  const address = spec.normalize ? spec.normalize(opts.address) : opts.address;
+  const chainIdLine =
+    family === 'evm' ? String(opts.chainId ?? 1) : spec.chainIdLine;
+  return (
+    `${domain} wants you to sign in with your ${spec.label} account:\n` +
+    `${address}\n` +
+    `\n` +
+    `${statement}\n` +
+    `\n` +
+    `URI: ${uri}\n` +
+    `Version: 1\n` +
+    `Chain ID: ${chainIdLine}\n` +
+    `Nonce: ${opts.nonce}\n` +
+    `Issued At: ${issuedAt}`
+  );
+}

package/src/connectkit/adapters/types.ts

@@ -0,0 +1,95 @@
+// Chain-agnostic wallet auth types. Each supported chain provides a
+// concrete implementation of `WalletAdapter`; the rest of the SDK only
+// touches this interface.
+
+export type WalletAddress = string;
+
+/** Supported wallet chains. The `siww` facade routes by this. */
+export type Chain = "ethereum" | "solana";
+
+/** Signed sign-in credentials, ready to submit to keycloak. */
+export interface SiwwSignedCredentials {
+  /** hex (ethereum, 0x…) or base58 (solana) signature — keycloak's `username`. */
+  signature: string;
+  /** the exact message that was signed — keycloak's `password` is base64(message). */
+  message: string;
+}
+
+/**
+ * The unified, chain-agnostic value returned by `useSiww()`. Consumers (a
+ * keycloakify login page, an Expo app) use this and never import a chain's
+ * SDK (`siwe`/`solana`) directly — the `siww` facade picks the chain.
+ */
+export interface SiwwValue {
+  chain: Chain;
+  /** Connected wallet address (chain-native encoding), or null. */
+  address: string | null;
+  isConnected: boolean;
+  /** Open the wallet connect flow (ConnectKit modal / injected request). */
+  connect: () => void | Promise<void>;
+  /**
+   * Full sign-in: ensure connected → fetch nonce → build the chain's canonical
+   * message → sign it. Returns the credentials to submit (or null if a connect
+   * step was triggered and the caller should retry).
+   */
+  signIn: () => Promise<SiwwSignedCredentials | null>;
+}
+
+export interface KeycloakConfig {
+  baseUrl: string;
+  clientId: string;
+  realm: string;
+  scope: string | string[];
+}
+
+/** Args needed to build a chain's canonical sign-in message. */
+export interface SignInMessageOptions {
+  /** Server-issued nonce. */
+  nonce: string;
+  /** Domain (host) the user is signing in to. Defaults to window.location.host. */
+  domain?: string;
+  /** URI of the resource. Defaults to window.location.origin. */
+  uri?: string;
+  /** Optional issued-at ISO8601 timestamp; defaults to now. */
+  issuedAt?: string;
+  /** Optional human statement to include in the message. */
+  statement?: string;
+}
+
+/**
+ * A chain-specific wallet adapter. Each chain (Ethereum/SIWE,
+ * Solana/SIWS, etc.) implements this once and the rest of the SDK
+ * is chain-agnostic.
+ */
+export interface WalletAdapter {
+  /** Stable identifier for the chain — "ethereum", "solana", etc. */
+  readonly chain: string;
+
+  /** Currently connected address, or null if disconnected. */
+  readonly address: WalletAddress | null;
+
+  /** Network ID within the chain (eth chainId, solana cluster, etc.). */
+  readonly networkId: string | number | null;
+
+  /** Whether a wallet is connected. */
+  readonly isConnected: boolean;
+
+  /** Trigger the wallet's connect flow (modal, browser extension, etc.). */
+  connect(): Promise<void>;
+
+  /** Disconnect the wallet / clear local state. */
+  disconnect(): Promise<void>;
+
+  /** Build the canonical sign-in message for this chain. */
+  buildMessage(opts: SignInMessageOptions): Promise<string>;
+
+  /** Sign a message with the connected wallet. */
+  signMessage(message: string): Promise<string>;
+}
+
+/** Keycloak token bundle returned by the SIWW exchange endpoint. */
+export interface Tokens {
+  accessToken: string;
+  idToken: string;
+  refreshToken: string;
+}

package/src/connectkit/assets/ScanIconWithLogos.tsx

@@ -0,0 +1,215 @@
+import React from 'react';
+import { motion } from 'framer-motion';
+import styled from './../styles/styled';
+import Logos from './logos';
+
+const IconContainer = styled(motion.div)`
+  position: relative;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  width: 47px;
+  height: 52px;
+  min-width: 47px;
+  min-height: 52px;
+  svg {
+    display: block;
+    max-width: 100%;
+    height: auto;
+  }
+`;
+
+const ScanIconWithLogos: React.FC<{ logo?: React.ReactNode }> = ({ logo }) => {
+  const logoList = [
+    <Logos.MetaMask background={true} />,
+    <Logos.Coinbase background={true} />,
+    <Logos.Crypto />,
+    <Logos.ImToken />,
+    <Logos.Argent />,
+    <Logos.Trust />,
+  ];
+  return (
+    <IconContainer>
+      <svg
+        aria-hidden="true"
+        width="47"
+        height="52"
+        viewBox="0 0 47 52"
+        fill="none"
+        xmlns="http://www.w3.org/2000/svg"
+      >
+        <g mask="url(#gradient-mask)">
+          <path
+            d="M7 14.5C7 11.4624 9.46243 9 12.5 9H31.5C34.5376 9 37 11.4624 37 14.5V47H7V14.5Z"
+            fill="var(--ck-graphic-scaniconwithlogos-04)"
+          />
+          {logo ? (
+            <foreignObject x="13" y="21" width="18" height="18" rx="5">
+              <div style={{ overflow: 'hidden', borderRadius: 5 }}>{logo}</div>
+            </foreignObject>
+          ) : (
+            <>
+              <foreignObject x="12" y="15" width="9" height="9" rx="2.5">
+                <div style={{ overflow: 'hidden', borderRadius: 2.5 }}>
+                  {logoList[0]}
+                </div>
+              </foreignObject>
+              <foreignObject x="23" y="15" width="9" height="9" rx="2.5">
+                <div style={{ overflow: 'hidden', borderRadius: 2.5 }}>
+                  {logoList[1]}
+                </div>
+              </foreignObject>
+              <foreignObject x="12" y="26" width="9" height="9" rx="2.5">
+                <div style={{ overflow: 'hidden', borderRadius: 2.5 }}>
+                  <div style={{ overflow: 'hidden', borderRadius: 2.5 }}>
+                    {logoList[2]}
+                  </div>
+                </div>
+              </foreignObject>
+              <foreignObject x="23" y="26" width="9" height="9" rx="2.5">
+                <div style={{ overflow: 'hidden', borderRadius: 2.5 }}>
+                  {logoList[3]}
+                </div>
+              </foreignObject>
+              <foreignObject x="12" y="37" width="9" height="9" rx="2.5">
+                <div style={{ overflow: 'hidden', borderRadius: 2.5 }}>
+                  {logoList[4]}
+                </div>
+              </foreignObject>
+              <foreignObject x="23" y="37" width="9" height="9" rx="2.5">
+                <div style={{ overflow: 'hidden', borderRadius: 2.5 }}>
+                  {logoList[5]}
+                </div>
+              </foreignObject>
+            </>
+          )}
+          <path
+            d="M36 47V13.7143C36 11.1107 33.8893 9 31.2857 9H12.7143C10.1107 9 8 11.1107 8 13.7143V47"
+            stroke="url(#paint0_linear_924_12568)"
+            strokeWidth="2"
+          />
+          <path
+            d="M15 10H29C29 11.1046 28.1046 12 27 12H17C15.8954 12 15 11.1046 15 10Z"
+            fill="var(--ck-graphic-scaniconwithlogos-01)"
+          />
+          <rect
+            x="1"
+            y="47"
+            width="43"
+            height="5"
+            fill="var(--ck-tooltip-background)"
+          />
+          <rect
+            x="22"
+            y="1"
+            width="24"
+            height="24"
+            rx="12"
+            fill="var(--ck-graphic-scaniconwithlogos-03)"
+            stroke="var(--ck-tooltip-background)"
+            strokeWidth="2"
+          />
+          <rect
+            x="34.5"
+            y="10"
+            width="2.5"
+            height="2.5"
+            rx="0.75"
+            fill="#373737"
+          />
+          <rect
+            x="31"
+            y="10"
+            width="2.5"
+            height="2.5"
+            rx="0.75"
+            fill="#373737"
+          />
+          <rect
+            x="31"
+            y="13.5"
+            width="2.5"
+            height="2.5"
+            rx="0.75"
+            fill="#373737"
+          />
+          <rect
+            x="34.5"
+            y="13.5"
+            width="2.5"
+            height="2.5"
+            rx="0.75"
+            fill="#373737"
+          />
+          <path
+            d="M28.5 10.5V9C28.5 8.17157 29.1716 7.5 30 7.5H31.5"
+            stroke="#373737"
+            strokeWidth="1.5"
+            strokeLinecap="round"
+            strokeLinejoin="round"
+          />
+          <path
+            d="M36.5 7.5L38 7.5C38.8284 7.5 39.5 8.17157 39.5 9L39.5 10.5"
+            stroke="#373737"
+            strokeWidth="1.5"
+            strokeLinecap="round"
+            strokeLinejoin="round"
+          />
+          <path
+            d="M39.5 15.5L39.5 17C39.5 17.8284 38.8284 18.5 38 18.5L36.5 18.5"
+            stroke="#373737"
+            strokeWidth="1.5"
+            strokeLinecap="round"
+            strokeLinejoin="round"
+          />
+          <path
+            d="M31.5 18.5L30 18.5C29.1716 18.5 28.5 17.8284 28.5 17L28.5 15.5"
+            stroke="#373737"
+            strokeWidth="1.5"
+            strokeLinecap="round"
+            strokeLinejoin="round"
+          />
+        </g>
+        <defs>
+          <linearGradient
+            id="paint0_linear_924_12568"
+            x1="22"
+            y1="8.2549"
+            x2="22"
+            y2="47"
+            gradientUnits="userSpaceOnUse"
+          >
+            <stop stopColor="var(--ck-graphic-scaniconwithlogos-01)" />
+            <stop
+              offset="1"
+              stopColor="var(--ck-graphic-scaniconwithlogos-02)"
+            />
+          </linearGradient>
+
+          <linearGradient
+            id="linear-gradient-mask"
+            x1="47"
+            y1="42"
+            x2="47"
+            y2="47"
+            gradientUnits="userSpaceOnUse"
+          >
+            <stop stopColor="white" />
+            <stop offset="1" stopColor="black" stopOpacity="0" />
+          </linearGradient>
+
+          <mask id="gradient-mask">
+            <rect
+              x="0"
+              y="0"
+              width="47"
+              height="52"
+              fill="url(#linear-gradient-mask)"
+            />
+          </mask>
+        </defs>
+      </svg>
+    </IconContainer>
+  );
+};
+export default ScanIconWithLogos;