dapp-ui/com.midnight.kuira.dapp.sigil/SigilPanelViewModel

SigilPanelViewModel

class SigilPanelViewModel @Inject constructor(context: Context, passkeyManager: PasskeyManager, sigilIdentityProvider: SigilIdentityProvider, sigilSession: SigilSession, sigilStateStore: SigilStateStore, appStateBackup: AppStateBackup, blockStoreStorage: BlockStoreBackupStorage, appDataProvider: Optional<AppDataBackupProvider>) : ViewModel

Self-contained sigil-identity bookkeeper for SigilStatusPanel.

Owns three flows:

Forge (forgeSigil): create a passkey via Credential Manager, then derive the sigil DID via SigilIdentityProvider (PRF(passkey, SIGIL_SALT) → Ed25519 → did:key:z6Mk… in the default impl). Two biometric prompts on first run.
Sign in (restoreSeed): one biometric covers BOTH the sigil DID derivation AND the wallet seed pre-warm via the multi-salt PRF ceremony in SigilSession.signIn. The wallet panel's first refresh after sign-in hits SeedVault cache instead of running its own PRF ceremony — no second prompt. Falls back to two biometrics on authenticators that don't support multi-salt PRF. Optionally restores host-app state via AppStateBackup after the sigil is forged.
Backup (backupSeed): write host-app state (not the seed) to Block Store via AppStateBackup.

Held in BBoard's VM (not migrated):

authorizeAccessKey — needs a MidnightSdk instance to derive the access key being authorized. The host bridges sigil + wallet for that flow.

Constructors

SigilPanelViewModel

@Inject

constructor(context: Context, passkeyManager: PasskeyManager, sigilIdentityProvider: SigilIdentityProvider, sigilSession: SigilSession, sigilStateStore: SigilStateStore, appStateBackup: AppStateBackup, blockStoreStorage: BlockStoreBackupStorage, appDataProvider: Optional<AppDataBackupProvider>)

Types

Companion

object Companion

Properties

status

val status: StateFlow<SigilStatus>

Functions

addCloseable

open fun addCloseable(closeable: AutoCloseable)

fun addCloseable(key: String, closeable: AutoCloseable)

backupSeed

fun backupSeed(activity: FragmentActivity)

Back up the current sigil identity + the locally-stored seed to Google Block Store. Pipeline: load seed via seedVault (biometric) → derive a PRF-encrypted AES key from the passkey → sigilBackup.backup uploads the encrypted blob.

dismissBackup

fun dismissBackup()

User chose "Start fresh" from the SigilStatus.BackupAvailable prompt: they acknowledge the cloud backup but want to proceed without restoring. Persist a flag so future launches don't keep nagging, and move to SigilStatus.None so the wallet panel unblocks and auto-bootstraps a fresh wallet.

forgeSigil

fun forgeSigil(activity: FragmentActivity)

Create a passkey + derive its did:key. Triggers the platform's Credential Manager UI on activity; the user picks an authenticator (device biometric / hardware key / etc.) and authorizes the create.

getCloseable

fun <T : AutoCloseable> getCloseable(key: String): T?

probePrfDeterminism

fun probePrfDeterminism(activity: Activity)

Diagnostic — derive the SeedDeriver PRF output for the user's passkey and emit the 32-byte hex to logcat (tag PrfProbe). Used to verify that PRF is deterministic across Kuira ecosystem apps that share an RP via assetlinks.json, before relying on it as the wallet seed.

restoreSeed

fun restoreSeed(activity: FragmentActivity)

testPrf

fun testPrf(activity: Activity)

Probe the passkey's PRF extension. Builds a deterministic salt from a versioned purpose string, runs an assertion twice with the same salt, and reports whether the outputs match — used during canary to confirm an authenticator supports CTAP2's hmac-secret extension before relying on it for backup.