@sogni-ai/expo-client 1.0.0-alpha.10

package/dist/esm/lib/mediaInput.js

@@ -0,0 +1,28 @@
+export function isMediaInputUri(input) {
+    return typeof input === 'object' && 'uri' in input;
+}
+/**
+ * Convert a MediaInput into a fetch body for upload to a presigned PUT URL.
+ *
+ * For URI inputs: reads the file via fetch(uri).blob(), so it works with
+ * `file://`, `content://`, `ph://`, and `http(s)://` URIs.
+ *
+ * For Uint8Array inputs: passes the bytes through. Caller must provide
+ * the correct Content-Type via the `contentType` parameter; we cannot
+ * reliably detect MIME from raw bytes in all cases.
+ */
+export async function toFetchBody(input, contentTypeOverride) {
+    if (input instanceof Uint8Array) {
+        return { body: input, contentType: contentTypeOverride };
+    }
+    const res = await fetch(input.uri);
+    if (!res.ok) {
+        throw new Error(`Failed to read media at ${input.uri}: HTTP ${res.status}`);
+    }
+    const blob = await res.blob();
+    return {
+        body: blob,
+        contentType: contentTypeOverride ?? input.type ?? blob.type ?? undefined
+    };
+}
+//# sourceMappingURL=mediaInput.js.map

package/dist/esm/lib/mediaInput.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mediaInput.js","sourceRoot":"","sources":["../../../src/lib/mediaInput.ts"],"names":[],"mappings":"AAkBA,MAAM,UAAU,eAAe,CAAC,KAAiB;IAC/C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,IAAI,KAAK,CAAC;AACrD,CAAC;AAOD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,KAAiB,EACjB,mBAA4B;IAE5B,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,KAA4B,EAAE,WAAW,EAAE,mBAAmB,EAAE,CAAC;IAClF,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,CAAC,GAAG,UAAU,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,OAAO;QACL,IAAI,EAAE,IAAI;QACV,WAAW,EAAE,mBAAmB,IAAI,KAAK,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,SAAS;KACzE,CAAC;AACJ,CAAC"}

package/dist/esm/lib/utils.js

@@ -0,0 +1,19 @@
+import { jwtDecode } from 'jwt-decode';
+export function decodeToken(token) {
+    const data = jwtDecode(token);
+    return {
+        walletAddress: data.addr,
+        expiresAt: new Date(data.exp * 1000)
+    };
+}
+export function decodeRefreshToken(token) {
+    const data = jwtDecode(token);
+    return {
+        env: data.env,
+        expiresAt: new Date(data.exp * 1000)
+    };
+}
+export async function delay(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+//# sourceMappingURL=utils.js.map

package/dist/esm/lib/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../src/lib/utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,MAAM,IAAI,GAAG,SAAS,CAA0D,KAAK,CAAC,CAAC;IACvF,OAAO;QACL,aAAa,EAAE,IAAI,CAAC,IAAI;QACxB,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC;KACrC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,MAAM,IAAI,GAAG,SAAS,CAA0D,KAAK,CAAC,CAAC;IACvF,OAAO;QACL,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC;KACrC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,EAAU;IACpC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/dist/esm/types/ErrorData.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ErrorData.js.map

package/dist/esm/types/ErrorData.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ErrorData.js","sourceRoot":"","sources":["../../../src/types/ErrorData.ts"],"names":[],"mappings":""}

package/dist/esm/types/json.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=json.js.map

package/dist/esm/types/json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json.js","sourceRoot":"","sources":["../../../src/types/json.ts"],"names":[],"mappings":""}

package/dist/esm/types/token.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=token.js.map

package/dist/esm/types/token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token.js","sourceRoot":"","sources":["../../../src/types/token.ts"],"names":[],"mappings":""}

package/dist/esm/version.js

@@ -0,0 +1,2 @@
+export const LIB_VERSION = '0.1.0';
+//# sourceMappingURL=version.js.map

package/dist/esm/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../../src/version.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC"}

package/dist/esm/wallet.js

@@ -0,0 +1,117 @@
+/**
+ * Wallet creation and EIP-712 signing for Sogni authentication.
+ *
+ * Importable as a separate entry point so consumers using only API-key auth
+ * do not bundle viem:
+ *
+ *   import { deriveWallet, signAuthentication } from '@sogni-ai/expo-client/wallet';
+ *
+ * Requires `crypto.getRandomValues` (for fresh wallet generation), which the
+ * `polyfillWebCrypto()` call from `expo-standard-web-crypto` provides. PBKDF2
+ * for username+password derivation is done in pure JS via @noble/hashes, so
+ * no `crypto.subtle` is needed (Expo doesn't polyfill it).
+ */
+import { pbkdf2 } from '@noble/hashes/pbkdf2';
+import { sha256 } from '@noble/hashes/sha2';
+import { generatePrivateKey, privateKeyToAccount } from 'viem/accounts';
+export { LIB_VERSION } from './version';
+const PLACEHOLDER_VERIFYING_CONTRACT = '0xCcCCccccCCCCcCCCCCCcCcCccCcCCCcCcccccccC';
+function getDomain(network) {
+    return network === 'testnet'
+        ? {
+            name: 'Sogni-testnet',
+            version: '1',
+            chainId: 84532,
+            verifyingContract: PLACEHOLDER_VERIFYING_CONTRACT
+        }
+        : {
+            name: 'Sogni AI',
+            version: '1',
+            chainId: 8453,
+            verifyingContract: PLACEHOLDER_VERIFYING_CONTRACT
+        };
+}
+const AUTH_TYPES = {
+    Authentication: [
+        { name: 'walletAddress', type: 'address' },
+        { name: 'nonce', type: 'string' }
+    ]
+};
+const SIGNUP_TYPES = {
+    Signup: [
+        { name: 'appid', type: 'string' },
+        { name: 'username', type: 'string' },
+        { name: 'email', type: 'string' },
+        { name: 'subscribe', type: 'uint256' },
+        { name: 'walletAddress', type: 'address' },
+        { name: 'nonce', type: 'string' }
+    ]
+};
+/**
+ * Derive a deterministic wallet from a username + password using PBKDF2
+ * (10,000 iterations of SHA-256, salt = username, output = 32 bytes).
+ *
+ * Uses @noble/hashes pure-JS implementation rather than `crypto.subtle`
+ * because Hermes / expo-standard-web-crypto don't polyfill subtle. Still
+ * async-returning so callers don't depend on the implementation detail.
+ *
+ * The same credentials always produce the same wallet on every device,
+ * which is how Sogni's username+password login works without ever
+ * transmitting or storing the password server-side.
+ */
+export async function deriveWallet(input) {
+    const { username, password } = input;
+    if (!username || !password) {
+        throw new Error('deriveWallet requires both username and password');
+    }
+    const passwordBytes = new TextEncoder().encode(password);
+    const saltBytes = new TextEncoder().encode(username);
+    const bits = pbkdf2(sha256, passwordBytes, saltBytes, { c: 10000, dkLen: 32 });
+    const privateKey = bytesToHex(bits);
+    const account = privateKeyToAccount(privateKey);
+    return { privateKey, address: account.address };
+}
+/** Generate a fresh random wallet (uses crypto.getRandomValues internally). */
+export function createRandomWallet() {
+    const privateKey = generatePrivateKey();
+    const account = privateKeyToAccount(privateKey);
+    return { privateKey, address: account.address };
+}
+/**
+ * Sign the Authentication EIP-712 message used by `/v1/account/login` and
+ * other authenticated REST endpoints.
+ */
+export async function signAuthentication(wallet, params, network = 'mainnet') {
+    const account = privateKeyToAccount(wallet.privateKey);
+    return account.signTypedData({
+        domain: getDomain(network),
+        types: AUTH_TYPES,
+        primaryType: 'Authentication',
+        message: { walletAddress: wallet.address, nonce: params.nonce }
+    });
+}
+/**
+ * Sign the Signup EIP-712 message used by `/v1/account/create`. The
+ * `subscribe` boolean is encoded as a uint256 (0/1) on the wire.
+ */
+export async function signSignup(wallet, params, network = 'mainnet') {
+    const account = privateKeyToAccount(wallet.privateKey);
+    return account.signTypedData({
+        domain: getDomain(network),
+        types: SIGNUP_TYPES,
+        primaryType: 'Signup',
+        message: {
+            appid: params.appid,
+            username: params.username,
+            email: params.email,
+            subscribe: BigInt(params.subscribe ? 1 : 0),
+            walletAddress: wallet.address,
+            nonce: params.nonce
+        }
+    });
+}
+function bytesToHex(bytes) {
+    const hex = Array.from(bytes, (b) => b.toString(16).padStart(2, '0')).join('');
+    return `0x${hex}`;
+}
+//# sourceMappingURL=wallet.js.map

package/dist/esm/wallet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet.js","sourceRoot":"","sources":["../../src/wallet.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAGxE,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAkBxC,MAAM,8BAA8B,GAAQ,4CAA4C,CAAC;AAEzF,SAAS,SAAS,CAAC,OAAsB;IACvC,OAAO,OAAO,KAAK,SAAS;QAC1B,CAAC,CAAC;YACE,IAAI,EAAE,eAAe;YACrB,OAAO,EAAE,GAAG;YACZ,OAAO,EAAE,KAAK;YACd,iBAAiB,EAAE,8BAA8B;SAClD;QACH,CAAC,CAAC;YACE,IAAI,EAAE,UAAU;YAChB,OAAO,EAAE,GAAG;YACZ,OAAO,EAAE,IAAI;YACb,iBAAiB,EAAE,8BAA8B;SAClD,CAAC;AACR,CAAC;AAED,MAAM,UAAU,GAAG;IACjB,cAAc,EAAE;QACd,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE;QAC1C,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE;KAClC;CACO,CAAC;AAEX,MAAM,YAAY,GAAG;IACnB,MAAM,EAAE;QACN,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE;QACjC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE;QACpC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE;QACjC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE;QACtC,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE;QAC1C,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE;KAClC;CACO,CAAC;AAEX;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,KAA6C;IAC9E,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IACrC,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,aAAa,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/E,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,OAAO,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAChD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;AAClD,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,kBAAkB;IAChC,MAAM,UAAU,GAAG,kBAAkB,EAAE,CAAC;IACxC,MAAM,OAAO,GAAG,mBAAmB,CAAC,UAAU,CAAC,CAAC;IAChD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;AAClD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAc,EACd,MAAyB,EACzB,UAAyB,SAAS;IAElC,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACvD,OAAO,OAAO,CAAC,aAAa,CAAC;QAC3B,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC;QAC1B,KAAK,EAAE,UAAU;QACjB,WAAW,EAAE,gBAAgB;QAC7B,OAAO,EAAE,EAAE,aAAa,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE;KAChE,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,MAAc,EACd,MAMC,EACD,UAAyB,SAAS;IAElC,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACvD,OAAO,OAAO,CAAC,aAAa,CAAC;QAC3B,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC;QAC1B,KAAK,EAAE,YAAY;QACnB,WAAW,EAAE,QAAQ;QACrB,OAAO,EAAE;YACP,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3C,aAAa,EAAE,MAAM,CAAC,OAAO;YAC7B,KAAK,EAAE,MAAM,CAAC,KAAK;SACpB;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB;IACnC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC/E,OAAO,KAAK,GAAG,EAAS,CAAC;AAC3B,CAAC"}

package/package.json

@@ -0,0 +1,92 @@
+{
+  "name": "@sogni-ai/expo-client",
+  "version": "1.0.0-alpha.10",
+  "description": "Sogni SDK for Expo/React Native - AI image, video & audio generation plus LLM chat via the Sogni Supernet",
+  "keywords": [
+    "sogni",
+    "expo",
+    "react-native",
+    "ai",
+    "image-generation",
+    "video-generation",
+    "stable-diffusion",
+    "flux",
+    "wan",
+    "ltx",
+    "text-to-image",
+    "text-to-video",
+    "generative-ai",
+    "llm",
+    "supernet"
+  ],
+  "main": "./dist/cjs/index.js",
+  "module": "./dist/esm/index.js",
+  "types": "./dist/cjs/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/esm/index.js",
+      "require": "./dist/cjs/index.js",
+      "types": "./dist/cjs/index.d.ts"
+    },
+    "./wallet": {
+      "import": "./dist/esm/wallet.js",
+      "require": "./dist/cjs/wallet.js",
+      "types": "./dist/cjs/wallet.d.ts"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist/",
+    "src/",
+    "README.md",
+    "CHANGELOG.md"
+  ],
+  "scripts": {
+    "clean": "rimraf ./dist",
+    "build": "npm run clean && npm run build:cjs && npm run build:esm",
+    "build:cjs": "tsc --project tsconfig.json",
+    "build:esm": "tsc --project tsconfig.esm.json",
+    "watch": "tsc --watch --project tsconfig.json",
+    "prepublishOnly": "npm run build",
+    "prettier": "prettier --check ./src",
+    "prettier:fix": "prettier --write ./src",
+    "release": "semantic-release",
+    "prepare": "husky"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Sogni-AI/expo-client.git"
+  },
+  "homepage": "https://github.com/Sogni-AI/expo-client#readme",
+  "bugs": {
+    "url": "https://github.com/Sogni-AI/expo-client/issues"
+  },
+  "author": "Sogni AI",
+  "license": "ISC",
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@noble/hashes": "^2.2.0",
+    "jwt-decode": "^4.0.0",
+    "viem": "^2.21.0"
+  },
+  "peerDependencies": {
+    "expo": ">=50.0.0",
+    "expo-secure-store": ">=12.0.0",
+    "expo-standard-web-crypto": ">=2.0.0",
+    "react-native": ">=0.73.0"
+  },
+  "devDependencies": {
+    "@commitlint/cli": "^19.0.0",
+    "@commitlint/config-conventional": "^19.0.0",
+    "@semantic-release/changelog": "^6.0.3",
+    "@semantic-release/git": "^10.0.1",
+    "expo-secure-store": "^55.0.13",
+    "husky": "^9.1.7",
+    "prettier": "^3.3.3",
+    "rimraf": "^6.0.1",
+    "semantic-release": "^24.2.1",
+    "typescript": "^5.5.3"
+  }
+}

package/src/Account/index.ts

@@ -0,0 +1,214 @@
+import ApiClient, { ApiError, ApiResponse } from '../ApiClient';
+import TypedEventEmitter from '../lib/TypedEventEmitter';
+import { TokenAuthManager } from '../lib/AuthManager';
+import { deriveWallet, signAuthentication, signSignup, WalletNetwork } from '../wallet';
+import {
+  AccountSnapshot,
+  Balances,
+  LoginData,
+  MeData,
+  SignupParams,
+  emptyAccountSnapshot
+} from './types';
+
+interface AccountEvents {
+  change: AccountSnapshot;
+}
+
+/**
+ * Account API: authentication, current-user info, balance.
+ *
+ * login() and signup() derive a deterministic wallet from username + password
+ * via PBKDF2(password, username, 10000 iter, SHA-256, 32 bytes), then sign an
+ * EIP-712 authentication or signup message with that wallet. The wallet
+ * private key never leaves the device.
+ *
+ * login()/signup() require token-based auth (the default). For API-key auth,
+ * use the apiKey config option in SogniClient.create() instead.
+ */
+class AccountApi extends TypedEventEmitter<AccountEvents> {
+  private _client: ApiClient;
+  private _snapshot: AccountSnapshot;
+  private _walletNetwork: WalletNetwork;
+
+  constructor(client: ApiClient, options: { testnet?: boolean } = {}) {
+    super();
+    this._client = client;
+    this._snapshot = emptyAccountSnapshot();
+    this._walletNetwork = options.testnet ? 'testnet' : 'mainnet';
+
+    client.socket.on('connected', ({ network }) => {
+      this._update({ networkStatus: 'connected', network });
+    });
+    client.socket.on('disconnected', () => {
+      this._update({ networkStatus: 'disconnected', network: null });
+    });
+    client.socket.on('authenticated', (e) => {
+      this._update({
+        authenticated: true,
+        username: e.username,
+        walletAddress: e.walletAddress,
+        balance: e.balance
+      });
+    });
+    client.socket.on('balanceUpdate', (e) => {
+      this._update({ balance: e.balance });
+    });
+    client.socket.on('changeNetwork', (e) => {
+      this._update({ network: e.network });
+    });
+    client.on('authUpdated', (authenticated) => {
+      if (!authenticated) {
+        this._update(emptyAccountSnapshot());
+      }
+    });
+  }
+
+  /** Read-only snapshot of the current account state. */
+  get current(): Readonly<AccountSnapshot> {
+    return this._snapshot;
+  }
+
+  /** Subscribe to account state changes. Returns an unsubscribe function. */
+  onChange(listener: (snapshot: AccountSnapshot) => void): () => void {
+    return this.on('change', listener);
+  }
+
+  /**
+   * Log in with username + password. Derives the user's wallet on-device,
+   * signs an EIP-712 authentication message, and exchanges it for JWT tokens
+   * which are then persisted to SecureStore.
+   */
+  async login(
+    username: string,
+    password: string,
+    options: { appSource?: string } = {}
+  ): Promise<LoginData> {
+    const auth = this._client.auth;
+    if (!(auth instanceof TokenAuthManager)) {
+      throw new Error('login() requires token-based auth (the default)');
+    }
+    const wallet = await deriveWallet({ username, password });
+    const nonce = await this._getNonce(wallet.address);
+    const signature = await signAuthentication(wallet, { nonce }, this._walletNetwork);
+    const appSource = options.appSource?.trim() || this._client.appSource;
+    const res = await this._client.rest.post<ApiResponse<LoginData>>('/v1/account/login', {
+      walletAddress: wallet.address,
+      signature,
+      ...(appSource ? { appSource } : {}),
+      rememberMe: false
+    });
+    await auth.authenticate({
+      token: res.data.token,
+      refreshToken: res.data.refreshToken
+    });
+    return res.data;
+  }
+
+  /**
+   * Create a new account. Derives the user's wallet on-device, signs the
+   * EIP-712 signup payload, and exchanges it for JWT tokens (the user is
+   * automatically logged in on success).
+   */
+  async signup(params: SignupParams): Promise<LoginData> {
+    const auth = this._client.auth;
+    if (!(auth instanceof TokenAuthManager)) {
+      throw new Error('signup() requires token-based auth (the default)');
+    }
+    const wallet = await deriveWallet({
+      username: params.username,
+      password: params.password
+    });
+    const nonce = await this._getNonce(wallet.address);
+    const signature = await signSignup(
+      wallet,
+      {
+        appid: this._client.appId,
+        username: params.username,
+        email: params.email,
+        subscribe: !!params.subscribe,
+        nonce
+      },
+      this._walletNetwork
+    );
+    const appSource = params.appSource?.trim() || this._client.appSource;
+    const res = await this._client.rest.post<ApiResponse<LoginData>>('/v1/account/create', {
+      walletAddress: wallet.address,
+      username: params.username,
+      email: params.email,
+      subscribe: !!params.subscribe,
+      turnstileToken: params.turnstileToken,
+      ...(params.referralCode ? { referralCode: params.referralCode } : {}),
+      ...(appSource ? { appSource } : {}),
+      signature
+    });
+    await auth.authenticate({
+      token: res.data.token,
+      refreshToken: res.data.refreshToken
+    });
+    return res.data;
+  }
+
+  /** Fetch the current user's profile data from REST. Updates the snapshot. */
+  async me(): Promise<MeData> {
+    const res = await this._client.rest.get<ApiResponse<MeData>>('/v1/account/me');
+    this._update({
+      username: res.data.username,
+      email: res.data.currentEmail,
+      walletAddress: res.data.walletAddress
+    });
+    return res.data;
+  }
+
+  /**
+   * Force-refresh the current user's balance from REST. Balance also updates
+   * automatically via socket events — call this only when you need a synchronous
+   * fetch (e.g., on screen mount before the socket has reconnected).
+   */
+  async refreshBalance(): Promise<Balances> {
+    const res = await this._client.rest.get<ApiResponse<Balances>>('/v4/account/balance');
+    this._update({ balance: res.data });
+    return res.data;
+  }
+
+  /**
+   * Log out and clear all auth state. Closes the WebSocket and removes any
+   * persisted tokens. Safe to call even if not authenticated.
+   */
+  async logout(): Promise<void> {
+    try {
+      await this._client.rest.post('/v1/account/logout');
+    } catch (e) {
+      if (e instanceof ApiError && e.status === 401) {
+        this._client.logger.warn('Logout call rejected — probably already logged out');
+      } else {
+        throw e;
+      }
+    }
+    this._client.auth.clear();
+  }
+
+  private async _getNonce(walletAddress: string): Promise<string> {
+    const res = await this._client.rest.post<ApiResponse<{ nonce: string }>>('/v1/account/nonce', {
+      walletAddress
+    });
+    return res.data.nonce;
+  }
+
+  private _update(partial: Partial<AccountSnapshot>) {
+    const next: AccountSnapshot = { ...this._snapshot, ...partial };
+    if (shallowEqual(next, this._snapshot)) return;
+    this._snapshot = next;
+    this.emit('change', this._snapshot);
+  }
+}
+
+function shallowEqual<T extends object>(a: T, b: T): boolean {
+  const keys = Object.keys(a) as (keyof T)[];
+  for (const k of keys) {
+    if (a[k] !== b[k]) return false;
+  }
+  return true;
+}
+
+export default AccountApi;

package/src/Account/types.ts

@@ -0,0 +1,61 @@
+import { Balances } from '../ApiClient/WebSocketClient/events';
+import { SupernetType } from '../ApiClient/WebSocketClient/types';
+
+export type { Balances };
+
+export interface MeData {
+  currentEmail: string;
+  username: string;
+  walletAddress: string;
+  emailVerified?: boolean;
+  discord2FA?: boolean;
+  discordLinked?: boolean;
+  discordServerMember?: boolean;
+  discordUsername?: string;
+  requestedUpdatedEmail?: string;
+}
+
+export interface LoginData {
+  token: string;
+  refreshToken: string;
+  username: string;
+}
+
+export interface SignupParams {
+  username: string;
+  email: string;
+  password: string;
+  /** Subscribe to product updates / newsletter. */
+  subscribe?: boolean;
+  /** Optional referral code provided to the user. */
+  referralCode?: string;
+  /** Optional Cloudflare Turnstile captcha token, required by the server. */
+  turnstileToken: string;
+  /** Optional app source label for signup attribution. */
+  appSource?: string;
+}
+
+export interface AccountSnapshot {
+  authenticated: boolean;
+  networkStatus: 'connected' | 'disconnected' | 'connecting';
+  network: SupernetType | null;
+  balance: Balances;
+  walletAddress: string | null;
+  username: string | null;
+  email: string | null;
+}
+
+export function emptyAccountSnapshot(): AccountSnapshot {
+  return {
+    authenticated: false,
+    networkStatus: 'disconnected',
+    network: null,
+    balance: {
+      sogni: { settled: '0', credit: '0', debit: '0', net: '0' },
+      spark: { settled: '0', credit: '0', debit: '0', net: '0', premiumCredit: '0' }
+    },
+    walletAddress: null,
+    username: null,
+    email: null
+  };
+}