feat: add profile and contacts fetching from pubky

app/build.gradle.kts

@@ -236,6 +236,7 @@ dependencies {
     implementation(libs.bouncycastle.provider.jdk)
     implementation(libs.ldk.node.android) { exclude(group = "net.java.dev.jna", module = "jna") }
     implementation(libs.bitkit.core)
+    implementation(libs.paykit)
     implementation(libs.vss.client)
     // Firebase
     implementation(platform(libs.firebase.bom))

app/src/main/AndroidManifest.xml

@@ -6,6 +6,10 @@
         <intent>
             <action android:name="android.settings.APPLICATION_DETAILS_SETTINGS" />
         </intent>
+        <intent>
+            <action android:name="android.intent.action.VIEW" />
+            <data android:scheme="pubkyauth" />
+        </intent>
     </queries>
 
     <uses-feature

app/src/main/java/to/bitkit/data/PubkyImageCache.kt

@@ -0,0 +1,52 @@
+package to.bitkit.data
+
+import android.content.Context
+import android.graphics.Bitmap
+import android.graphics.BitmapFactory
+import dagger.hilt.android.qualifiers.ApplicationContext
+import java.io.File
+import java.security.MessageDigest
+import java.util.concurrent.ConcurrentHashMap
+import javax.inject.Inject
+import javax.inject.Singleton
+
+@Singleton
+class PubkyImageCache @Inject constructor(
+    @ApplicationContext context: Context,
+) {
+    private val memoryCache = ConcurrentHashMap<String, Bitmap>()
+    private val diskDir: File = File(context.cacheDir, "pubky-images").also { it.mkdirs() }
+
+    fun memoryImage(uri: String): Bitmap? = memoryCache[uri]
+
+    fun image(uri: String): Bitmap? {
+        memoryCache[uri]?.let { return it }
+
+        val file = diskPath(uri)
+        if (file.exists()) {
+            val bitmap = BitmapFactory.decodeFile(file.absolutePath) ?: return null
+            memoryCache[uri] = bitmap
+            return bitmap
+        }
+        return null
+    }
+
+    fun store(bitmap: Bitmap, data: ByteArray, uri: String) {
+        memoryCache[uri] = bitmap
+        runCatching { diskPath(uri).writeBytes(data) }
+    }
+
+    fun clear() {
+        memoryCache.clear()
+        runCatching {
+            diskDir.deleteRecursively()
+            diskDir.mkdirs()
+        }
+    }
+
+    private fun diskPath(uri: String): File {
+        val digest = MessageDigest.getInstance("SHA-256")
+        val hash = digest.digest(uri.toByteArray()).joinToString("") { "%02x".format(it) }
+        return File(diskDir, hash)
+    }
+}

app/src/main/java/to/bitkit/data/keychain/Keychain.kt

@@ -127,6 +127,7 @@ class Keychain @Inject constructor(
         BIP39_PASSPHRASE,
         PIN,
         PIN_ATTEMPTS_REMAINING,
+        PAYKIT_SESSION,
     }
 }
 

app/src/main/java/to/bitkit/models/PubkyProfile.kt

@@ -0,0 +1,34 @@
+package to.bitkit.models
+
+import com.synonym.paykit.FfiProfile
+
+data class PubkyProfileLink(val label: String, val url: String)
+
+data class PubkyProfile(
+    val publicKey: String,
+    val name: String,
+    val bio: String,
+    val imageUrl: String?,
+    val links: List<PubkyProfileLink>,
+    val status: String?,
+) {
+    companion object {
+        fun fromFfi(publicKey: String, ffiProfile: FfiProfile): PubkyProfile {
+            return PubkyProfile(
+                publicKey = publicKey,
+                name = ffiProfile.name,
+                bio = ffiProfile.bio ?: "",
+                imageUrl = ffiProfile.image,
+                links = ffiProfile.links?.map { PubkyProfileLink(label = it.title, url = it.url) } ?: emptyList(),
+                status = ffiProfile.status,
+            )
+        }
+    }
+
+    val truncatedPublicKey: String
+        get() = if (publicKey.length > 10) {
+            "${publicKey.take(4)}...${publicKey.takeLast(4)}"
+        } else {
+            publicKey
+        }
+}

app/src/main/java/to/bitkit/models/Suggestion.kt

@@ -52,8 +52,8 @@ enum class Suggestion(
     PROFILE(
         title = R.string.cards__slashtagsProfile__title,
         description = R.string.cards__slashtagsProfile__description,
-        color = Colors.Brand24,
-        icon = R.drawable.crown
+        color = Colors.PubkyGreen24,
+        icon = R.drawable.crown,
     ),
     SHOP(
         title = R.string.cards__shop__title,

app/src/main/java/to/bitkit/repositories/PubkyRepo.kt

@@ -0,0 +1,221 @@
+package to.bitkit.repositories
+
+import android.content.Context
+import android.content.SharedPreferences
+import dagger.hilt.android.qualifiers.ApplicationContext
+import kotlinx.coroutines.CoroutineDispatcher
+import kotlinx.coroutines.CoroutineScope
+import kotlinx.coroutines.SupervisorJob
+import kotlinx.coroutines.flow.MutableStateFlow
+import kotlinx.coroutines.flow.SharingStarted
+import kotlinx.coroutines.flow.StateFlow
+import kotlinx.coroutines.flow.asStateFlow
+import kotlinx.coroutines.flow.map
+import kotlinx.coroutines.flow.stateIn
+import kotlinx.coroutines.flow.update
+import kotlinx.coroutines.launch
+import kotlinx.coroutines.sync.Mutex
+import kotlinx.coroutines.withContext
+import to.bitkit.data.PubkyImageCache
+import to.bitkit.data.keychain.Keychain
+import to.bitkit.di.BgDispatcher
+import to.bitkit.models.PubkyProfile
+import to.bitkit.services.PubkyService
+import to.bitkit.utils.Logger
+import javax.inject.Inject
+import javax.inject.Singleton
+
+enum class PubkyAuthState { Idle, Authenticating, Authenticated }
+
+@Singleton
+class PubkyRepo @Inject constructor(
+    @ApplicationContext private val context: Context,
+    @BgDispatcher private val bgDispatcher: CoroutineDispatcher,
+    private val pubkyService: PubkyService,
+    private val keychain: Keychain,
+    private val imageCache: PubkyImageCache,
+) {
+    companion object {
+        private const val TAG = "PubkyRepo"
+        private const val PREFS_NAME = "pubky_profile_cache"
+        private const val KEY_CACHED_NAME = "cached_name"
+        private const val KEY_CACHED_IMAGE_URI = "cached_image_uri"
+    }
+
+    private val scope = CoroutineScope(bgDispatcher + SupervisorJob())
+    private val prefs: SharedPreferences = context.getSharedPreferences(PREFS_NAME, Context.MODE_PRIVATE)
+    private val loadProfileMutex = Mutex()
+
+    private val _authState = MutableStateFlow(PubkyAuthState.Idle)
+    val authState: StateFlow<PubkyAuthState> = _authState.asStateFlow()
+
+    private val _profile = MutableStateFlow<PubkyProfile?>(null)
+    val profile: StateFlow<PubkyProfile?> = _profile.asStateFlow()
+
+    private val _publicKey = MutableStateFlow<String?>(null)
+    val publicKey: StateFlow<String?> = _publicKey.asStateFlow()
+
+    private val _isLoadingProfile = MutableStateFlow(false)
+    val isLoadingProfile: StateFlow<Boolean> = _isLoadingProfile.asStateFlow()
+
+    private val _isInitialized = MutableStateFlow(false)
+    val isInitialized: StateFlow<Boolean> = _isInitialized.asStateFlow()
+
+    private val _cachedName = MutableStateFlow(prefs.getString(KEY_CACHED_NAME, null))
+    val cachedName: StateFlow<String?> = _cachedName.asStateFlow()
+
+    private val _cachedImageUri = MutableStateFlow(prefs.getString(KEY_CACHED_IMAGE_URI, null))
+    val cachedImageUri: StateFlow<String?> = _cachedImageUri.asStateFlow()
+
+    val isAuthenticated: StateFlow<Boolean> = _authState.map { it == PubkyAuthState.Authenticated }
+        .stateIn(scope, SharingStarted.Eagerly, false)
+
+    val displayName: StateFlow<String?> = _profile.map { it?.name }
+        .stateIn(scope, SharingStarted.Eagerly, prefs.getString(KEY_CACHED_NAME, null))
+
+    val displayImageUri: StateFlow<String?> = _profile.map { it?.imageUrl }
+        .stateIn(scope, SharingStarted.Eagerly, prefs.getString(KEY_CACHED_IMAGE_URI, null))
+
+    private sealed interface InitResult {
+        data object NoSession : InitResult
+        data class Restored(val publicKey: String) : InitResult
+        data object RestorationFailed : InitResult
+    }
+
+    suspend fun initialize() {
+        val result = runCatching {
+            withContext(bgDispatcher) {
+                pubkyService.initialize()
+
+                val savedSecret = runCatching {
+                    keychain.loadString(Keychain.Key.PAYKIT_SESSION.name)
+                }.getOrNull()
+
+                if (savedSecret.isNullOrEmpty()) {
+                    return@withContext InitResult.NoSession
+                }
+
+                runCatching {
+                    val pk = pubkyService.importSession(savedSecret)
+                    InitResult.Restored(pk)
+                }.getOrElse {
+                    Logger.warn("Failed to restore paykit session", it, context = TAG)
+                    InitResult.RestorationFailed
+                }
+            }
+        }.onFailure {
+            Logger.error("Failed to initialize paykit", it, context = TAG)
+        }.getOrNull() ?: return
+
+        _isInitialized.update { true }
+
+        when (result) {
+            is InitResult.NoSession -> Logger.debug("No saved paykit session found", context = TAG)
+            is InitResult.Restored -> {
+                _publicKey.update { result.publicKey }
+                _authState.update { PubkyAuthState.Authenticated }
+                Logger.info("Paykit session restored for ${result.publicKey}", context = TAG)
+                loadProfile()
+            }
+            is InitResult.RestorationFailed -> {
+                runCatching { keychain.delete(Keychain.Key.PAYKIT_SESSION.name) }
+            }
+        }
+    }
+
+    suspend fun startAuthentication(): Result<String> {
+        _authState.update { PubkyAuthState.Authenticating }
+        return runCatching {
+            withContext(bgDispatcher) { pubkyService.startAuth() }
+        }.onFailure {
+            _authState.update { PubkyAuthState.Idle }
+        }
+    }
+
+    suspend fun completeAuthentication(): Result<Unit> {
+        return runCatching {
+            withContext(bgDispatcher) {
+                val sessionSecret = pubkyService.completeAuth()
+                val pk = pubkyService.importSession(sessionSecret)
+
+                runCatching { keychain.delete(Keychain.Key.PAYKIT_SESSION.name) }
+                keychain.saveString(Keychain.Key.PAYKIT_SESSION.name, sessionSecret)
+
+                pk
+            }
+        }.onFailure {
+            _authState.update { PubkyAuthState.Idle }
+        }.onSuccess { pk ->
+            _publicKey.update { pk }
+            _authState.update { PubkyAuthState.Authenticated }
+            Logger.info("Pubky auth completed for $pk", context = TAG)
+            loadProfile()
+        }.map {}
+    }
+
+    suspend fun cancelAuthentication() {
+        runCatching {
+            withContext(bgDispatcher) { pubkyService.cancelAuth() }
+        }.onFailure { Logger.warn("Cancel auth failed", it, context = TAG) }
+        _authState.update { PubkyAuthState.Idle }
+    }
+
+    fun cancelAuthenticationSync() {
+        scope.launch { cancelAuthentication() }
+    }
+
+    suspend fun loadProfile() {
+        val pk = _publicKey.value ?: return
+        if (!loadProfileMutex.tryLock()) return
+
+        _isLoadingProfile.update { true }
+        try {
+            runCatching {
+                withContext(bgDispatcher) {
+                    val ffiProfile = pubkyService.getProfile(pk)
+                    Logger.debug("Profile loaded — name: ${ffiProfile.name}, image: ${ffiProfile.image}", context = TAG)
+                    PubkyProfile.fromFfi(pk, ffiProfile)
+                }
+            }.onSuccess { loadedProfile ->
+                _profile.update { loadedProfile }
+                cacheMetadata(loadedProfile)
+            }.onFailure {
+                Logger.error("Failed to load profile", it, context = TAG)
+            }
+        } finally {
+            _isLoadingProfile.update { false }
+            loadProfileMutex.unlock()
+        }
+    }
+
+    suspend fun signOut(): Result<Unit> = runCatching {
+        withContext(bgDispatcher) {
+            runCatching { pubkyService.signOut() }
+                .onFailure {
+                    Logger.warn("Server sign out failed, forcing local sign out", it, context = TAG)
+                    runCatching { pubkyService.forceSignOut() }
+                }
+            runCatching { keychain.delete(Keychain.Key.PAYKIT_SESSION.name) }
+            imageCache.clear()
+        }
+        clearCachedMetadata()
+        _publicKey.update { null }
+        _profile.update { null }
+        _authState.update { PubkyAuthState.Idle }
+    }
+
+    private fun cacheMetadata(profile: PubkyProfile) {
+        _cachedName.update { profile.name }
+        _cachedImageUri.update { profile.imageUrl }
+        prefs.edit()
+            .putString(KEY_CACHED_NAME, profile.name)
+            .putString(KEY_CACHED_IMAGE_URI, profile.imageUrl)
+            .apply()
+    }
+
+    private fun clearCachedMetadata() {
+        _cachedName.update { null }
+        _cachedImageUri.update { null }
+        prefs.edit().clear().apply()
+    }
+}

app/src/main/java/to/bitkit/services/PubkyService.kt

@@ -0,0 +1,51 @@
+package to.bitkit.services
+
+import com.synonym.bitkitcore.cancelPubkyAuth
+import com.synonym.bitkitcore.completePubkyAuth
+import com.synonym.bitkitcore.fetchPubkyFile
+import com.synonym.bitkitcore.startPubkyAuth
+import com.synonym.paykit.FfiProfile
+import com.synonym.paykit.paykitForceSignOut
+import com.synonym.paykit.paykitGetProfile
+import com.synonym.paykit.paykitImportSession
+import com.synonym.paykit.paykitInitialize
+import com.synonym.paykit.paykitSignOut
+import to.bitkit.async.ServiceQueue
+import javax.inject.Inject
+import javax.inject.Singleton
+
+@Singleton
+class PubkyService @Inject constructor() {
+
+    companion object {
+        const val REQUIRED_CAPABILITIES =
+            "/pub/paykit.app/v0/:rw,/pub/pubky.app/profile.json:rw,/pub/pubky.app/follows/:rw"
+    }
+
+    suspend fun initialize() =
+        ServiceQueue.CORE.background { paykitInitialize() }
+
+    suspend fun importSession(secret: String): String =
+        ServiceQueue.CORE.background { paykitImportSession(secret) }
+
+    suspend fun startAuth(): String =
+        ServiceQueue.CORE.background { startPubkyAuth(REQUIRED_CAPABILITIES) }
+
+    suspend fun completeAuth(): String =
+        ServiceQueue.CORE.background { completePubkyAuth() }
+
+    suspend fun cancelAuth() =
+        ServiceQueue.CORE.background { cancelPubkyAuth() }
+
+    suspend fun fetchFile(uri: String): ByteArray =
+        ServiceQueue.CORE.background { fetchPubkyFile(uri) }
+
+    suspend fun getProfile(publicKey: String): FfiProfile =
+        ServiceQueue.CORE.background { paykitGetProfile(publicKey) }
+
+    suspend fun signOut() =
+        ServiceQueue.CORE.background { paykitSignOut() }
+
+    suspend fun forceSignOut() =
+        ServiceQueue.CORE.background { paykitForceSignOut() }
+}