Auth Adapter +

app/src/providers/selfClientProvider.tsx

@@ -15,6 +15,8 @@ import { TrackEventParams } from '@selfxyz/mobile-sdk-alpha';
 import { selfClientDocumentsAdapter } from '@/providers/passportDataProvider';
 import analytics from '@/utils/analytics';
 
+import { unsafe_getPrivateKey } from './authProvider';
+
 /**
  * Provides a configured Self SDK client instance to all descendants.
  *
@@ -82,6 +84,9 @@ export const SelfClientProvider = ({ children }: PropsWithChildren) => {
           analytics().trackEvent(event, data);
         },
       },
+      auth: {
+        getPrivateKey: () => unsafe_getPrivateKey(),
+      },
     }),
     [],
   );

app/src/screens/dev/DevPrivateKeyScreen.tsx

@@ -6,7 +6,8 @@ import { useCallback, useEffect, useState } from 'react';
 import { Button, Text, XStack, YStack } from 'tamagui';
 import Clipboard from '@react-native-clipboard/clipboard';
 
-import { unsafe_getPrivateKey } from '@/providers/authProvider';
+import { useSelfClient } from '@selfxyz/mobile-sdk-alpha';
+
 import { black, slate50, slate200, teal500, white } from '@/utils/colors';
 import { confirmTap } from '@/utils/haptic';
 
@@ -16,12 +17,24 @@ const DevPrivateKeyScreen: React.FC = () => {
   );
   const [isPrivateKeyRevealed, setIsPrivateKeyRevealed] = useState(false);
   const [copied, setCopied] = useState(false);
+  const selfClient = useSelfClient();
 
   useEffect(() => {
-    unsafe_getPrivateKey().then(key =>
-      setPrivateKey(key || 'No private key found'),
-    );
-  }, []);
+    let mounted = true;
+    selfClient
+      .getPrivateKey()
+      .then(key => {
+        if (!mounted) return;
+        setPrivateKey(key || 'No private key found');
+      })
+      .catch(() => {
+        if (!mounted) return;
+        setPrivateKey('No private key found');
+      });
+    return () => {
+      mounted = false;
+    };
+  }, [selfClient]);
 
   const handleRevealPrivateKey = useCallback(() => {
     confirmTap();

app/src/utils/proving/provingMachine.ts

@@ -35,8 +35,6 @@ import {
 } from '@selfxyz/mobile-sdk-alpha/constants/analytics';
 
 import { navigationRef } from '@/navigation';
-// this will be pass as property of from selfClient
-import { unsafe_getPrivateKey } from '@/providers/authProvider';
 // will need to be passed in from selfClient
 import {
   clearPassportData,
@@ -651,8 +649,7 @@ export const useProvingStore = create<ProvingState>((set, get) => {
 
       const { data: passportData } = selectedDocument;
 
-      // TODO call on self client
-      const secret = await unsafe_getPrivateKey();
+      const secret = await selfClient.getPrivateKey();
       if (!secret) {
         console.error('Could not load secret');
         trackEvent(ProofEvents.LOAD_SECRET_FAILED);

packages/mobile-sdk-alpha/src/browser.ts

@@ -44,8 +44,6 @@ export type { SdkErrorCategory } from './errors';
 
 export { SCANNER_ERROR_CODES, notImplemented, sdkError } from './errors';
 export { SelfClientContext, SelfClientProvider, useSelfClient } from './context';
-// Browser-only high-level component (DOM-based)
-export { SelfMobileSdk as SelfMobileSdkHighLevel } from './components/SelfMobileSdk';
 
 export { createSelfClient } from './client';
 

packages/mobile-sdk-alpha/src/client.ts

@@ -47,7 +47,7 @@ const optionalDefaults: Partial<Adapters> = {
   },
 };
 
-const REQUIRED_ADAPTERS = ['scanner', 'network', 'crypto', 'documents'] as const;
+const REQUIRED_ADAPTERS = ['auth', 'scanner', 'network', 'crypto', 'documents'] as const;
 
 /**
  * Creates a fully configured {@link SelfClient} instance.
@@ -128,10 +128,31 @@ export function createSelfClient({ config, adapters }: { config: Config; adapter
     return adapters.analytics.trackEvent(event, payload);
   }
 
+  /**
+   * Retrieves the private key via the auth adapter.
+   * With great power comes great responsibility
+   */
+  async function getPrivateKey(): Promise<string> {
+    if (!adapters.auth) throw notImplemented('auth');
+    return adapters.auth.getPrivateKey();
+  }
+
+  async function hasPrivateKey(): Promise<boolean> {
+    if (!adapters.auth) throw notImplemented('auth');
+    try {
+      const key = await adapters.auth.getPrivateKey();
+      return !!key;
+    } catch {
+      return false;
+    }
+  }
+
   return {
     scanDocument,
     validateDocument,
     trackEvent,
+    getPrivateKey,
+    hasPrivateKey,
     checkRegistration,
     registerDocument,
     generateProof,

packages/mobile-sdk-alpha/src/index.ts

@@ -40,7 +40,7 @@ export type {
 // MRZ module
 export type { DG1, DG2, NFCScanOptions, ParsedNFCResponse } from './nfc';
 
-export type { DocumentData, DocumentMetadata, ExternalAdapter, PassportCameraProps, ScreenProps } from './types/ui';
+export type { DocumentData, DocumentMetadata, PassportCameraProps, ScreenProps } from './types/ui';
 
 export type { MRZScanOptions } from './mrz';
 
@@ -65,9 +65,6 @@ export {
 
 export { NFCScannerScreen } from './components/screens/NFCScannerScreen';
 
-// Flow Components
-export { OnboardingFlow } from './components/flows/OnboardingFlow';
-
 // Screen Components
 export { PassportCameraScreen } from './components/screens/PassportCameraScreen';
 
@@ -100,8 +97,5 @@ export { parseNFCResponse, scanNFC } from './nfc';
 
 export { scanQRProof } from './qr';
 
-// Hooks
-export { useDocumentManager } from './hooks/useDocumentManager';
-
 // Error handling
 export { webScannerShim } from './adapters/web/shims';

packages/mobile-sdk-alpha/src/types/public.ts

@@ -64,6 +64,14 @@ export interface AnalyticsAdapter {
   trackEvent(event: string, payload?: TrackEventParams): void;
 }
 
+export interface AuthAdapter {
+  /**
+   * Returns the hex-encoded private key.
+   * This key should only be used for self and not other crypto operations or signing.
+   */
+  getPrivateKey(): Promise<string | null>;
+}
+
 export interface ClockAdapter {
   now(): number;
   sleep(ms: number, signal?: AbortSignal): Promise<void>;
@@ -91,7 +99,8 @@ export interface Adapters {
   network: NetworkAdapter;
   clock: ClockAdapter;
   logger: LoggerAdapter;
-  analytics: AnalyticsAdapter;
+  analytics?: AnalyticsAdapter;
+  auth: AuthAdapter;
   documents: DocumentsAdapter;
 }
 
@@ -171,6 +180,8 @@ export interface SelfClient {
   ): Promise<ProofHandle>;
   extractMRZInfo(mrz: string): MRZInfo;
   trackEvent(event: string, payload?: TrackEventParams): void;
+  getPrivateKey(): Promise<string>;
+  hasPrivateKey(): Promise<boolean>;
   on<E extends SDKEvent>(event: E, cb: (payload: SDKEventMap[E]) => void): Unsubscribe;
   emit<E extends SDKEvent>(event: E, payload: SDKEventMap[E]): void;
 

packages/mobile-sdk-alpha/src/types/ui.ts

@@ -26,19 +26,6 @@ export interface DocumentData {
   metadata: DocumentMetadata;
 }
 
-// External adapter interface
-export interface ExternalAdapter {
-  getSecret: () => Promise<string>;
-  getAllDocuments: () => Promise<{
-    [documentId: string]: DocumentData;
-  }>;
-  setDocument: (doc: DocumentData, documentId: string) => Promise<boolean>;
-  onOnboardingSuccess: () => void;
-  onOnboardingFailure: (error: Error) => void;
-  onDisclosureSuccess: () => void;
-  onDisclosureFailure: (error: Error) => void;
-}
-
 // Screen component props
 export interface ScreenProps {
   onSuccess: () => void;