Feat/dev sandbox and eid sdk (#797)

* feat(wallet-sdk): add package and CryptoAdapter interface (BYOC)

* feat(wallet-sdk): implement provisioning flow with CryptoAdapter

* feat(wallet-sdk): implement auth flow (parse w3ds auth, sign session, POST to platform)

* feat(wallet-sdk): add syncPublicKeyToEvault and signPayload

* test(wallet-sdk): add test double and tests for provision, auth, sync, sign

* feat(dev-sandbox): add app scaffold and Web Crypto adapter

* feat(dev-sandbox): wire provision and auth UI to SDK

* feat(dev-sandbox): add sync key and sign payload UI, README

* feat: base working dev sandbox

* feat: restyle sandbox

* feat: docker setup

* chore: delete junk files

Author: coodos

.github/workflows/tests-wallet-sdk.yml

@@ -0,0 +1,33 @@
+name: Tests [wallet-sdk]
+
+on:
+  push:
+    branches: [main]
+    paths:
+      - 'packages/wallet-sdk/**'
+  pull_request:
+    branches: [main]
+    paths:
+      - 'packages/wallet-sdk/**'
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v3
+
+      - name: Set up Node.js 22
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+
+      - name: Install pnpm
+        run: npm install -g pnpm
+
+      - name: Install dependencies
+        run: pnpm install
+
+      - name: Run tests
+        run: pnpm -F=wallet-sdk test

Dockerfile.dev

@@ -0,0 +1,89 @@
+# Quick start: registry + evault-core + dev-sandbox
+
+Run Postgres and Neo4j in Docker, then start the core services and dev-sandbox with one script.
+
+## Prerequisites
+
+- **Docker** (for Postgres and Neo4j)
+- **Node.js 18+** and **pnpm**
+- **.env** in the repo root (copy from `.env.example` if present, or set the variables below)
+
+## Environment
+
+Create or edit `.env` in the repo root. Minimum for this stack:
+
+```bash
+# Postgres (used by registry)
+POSTGRES_USER=postgres
+POSTGRES_PASSWORD=postgres
+REGISTRY_DATABASE_URL=postgresql://postgres:postgres@localhost:5432/registry
+
+# Neo4j (used by evault-core)
+NEO4J_USER=neo4j
+NEO4J_PASSWORD=your-password
+
+# So the sandbox and evault-core can talk to registry/provisioner
+PUBLIC_REGISTRY_URL=http://localhost:4321
+PUBLIC_PROVISIONER_URL=http://localhost:3001
+REGISTRY_SHARED_SECRET=dev-secret-change-me
+PUBLIC_EVAULT_SERVER_URI=http://localhost:4000
+```
+
+## One-command start
+
+From the repo root:
+
+```bash
+pnpm install
+pnpm dev:core
+```
+
+Or run the script directly: `chmod +x scripts/start-dev.sh && ./scripts/start-dev.sh`
+
+This will:
+
+1. Start **Postgres** (port 5432) and **Neo4j** (7474, 7687) via `docker-compose.databases.yml`
+2. Wait for Postgres to be ready
+3. Start **registry** (4321), **evault-core** (3001 provisioning, 4000 GraphQL), and **dev-sandbox** (8080) in parallel
+
+Stop with `Ctrl+C`. To stop only the databases: `pnpm docker:core:down`.
+
+## Ports
+
+| Service        | Port(s) | Notes                    |
+|----------------|---------|--------------------------|
+| Postgres       | 5432    |                          |
+| Neo4j HTTP     | 7474    |                          |
+| Neo4j Bolt     | 7687    |                          |
+| Registry       | 4321    |                          |
+| evault-core    | 3001, 4000 | Provisioning + GraphQL |
+| **Dev sandbox**| **8080**| W3DS dev sandbox UI      |
+
+Open **http://localhost:8080** for the dev sandbox (provision, w3ds flows, sign).
+
+## Optional: databases only
+
+To run only Postgres and Neo4j (e.g. you run the app services yourself):
+
+```bash
+pnpm docker:core
+```
+
+Or: `docker compose -f docker-compose.databases.yml up -d`. Stop with `pnpm docker:core:down`.
+
+## Troubleshooting
+
+**Neo4j "encryption setting" or connection refused:** The stack uses **Neo4j 4.4** (unencrypted Bolt by default). If you previously used Neo4j 5.x, remove the old data and recreate:
+
+```bash
+docker compose -f docker-compose.databases.yml down
+docker volume rm metastate_neo4j_data 2>/dev/null || true
+docker compose -f docker-compose.databases.yml up -d
+pnpm dev:core
+```
+
+Otherwise ensure `.env` has `NEO4J_URI=bolt://127.0.0.1:7687` and matching `NEO4J_USER` / `NEO4J_PASSWORD`.
+
+---
+
+For full Docker setups and all platform services, see the main [README](README.md).

QUICKSTART.md

@@ -2,6 +2,8 @@
 
 **[Documentation](https://docs.w3ds.metastate.foundation)** — Getting started with W3DS and the MetaState prototype.
 
+**Quick start (registry + evault-core + dev-sandbox):** see **[QUICKSTART.md](QUICKSTART.md)** — one script to run Postgres + Neo4j in Docker and the core services locally. Dev sandbox runs at **http://localhost:8080**.
+
 ## Docker Development Environment
 
 ### Port Assignments
@@ -26,7 +28,7 @@
 - **1111** - Pictique API
 
 #### Frontend Services
-- **8080** - Blabsy Frontend
+- **8080** - Dev sandbox (W3DS) / Blabsy Frontend
 - **5173** - Pictique Frontend
 - **3004** - Group Charter Manager Frontend
 - **3005** - eVoting Frontend
@@ -52,22 +54,9 @@ Runs all services (core + all APIs + all frontends)
 
 ### Usage
 
-Start all services:
-```bash
-pnpm dev:docker:all
-```
+**Local dev (recommended):** `pnpm dev:core` — see [QUICKSTART.md](QUICKSTART.md). Runs Postgres + Neo4j in Docker, then registry, evault-core, and dev-sandbox locally.
 
-Start specific profile:
-```bash
-pnpm dev:docker:socials
-pnpm dev:docker:charter-blabsy
-```
-
-Or use docker compose directly:
-```bash
-docker compose -f dev-docker-compose.yaml --profile socials up --watch
-docker compose -f dev-docker-compose.yaml --profile charter-blabsy up --watch
-```
+**Databases only:** `pnpm docker:core` (Postgres + Neo4j). Stop with `pnpm docker:core:down`.
 
 ## Project Structure
 
@@ -93,5 +82,5 @@ prototype/
 │  └─ marketplace/
 ├─ docker/
 │  └─ Dockerfile.* (Dedicated Dockerfiles for each service)
-└─ dev-docker-compose.yaml (Docker Compose configuration)
+└─ docker-compose.databases.yml (Postgres + Neo4j)
 ```