feat(passport): v3

[shineli1984]

Summary

next version of Immutable Passport SDK.
Tasks (all tasks below must keep Passport SDK and Passport sample app working)
Stage 1

• split Passport SDK to wallet and auth packages and make Passport SDK refer to them internally.
• release an alpha version of the above
• make Play use the above version
  Stage 2
• remove the concept of environment from wallet and auth packages.
• create new usage pattern for wallet and auth packages (see below)
• Add default Auth implementation
  • Make UI nice for default auth login workflow
• release 2.x wallet and auth packages
  Stage 3 - not this PR
• make Play use the wallet and auth packages
  Stage 4 - not this PR
• wallet linking
• documentation for wallet and auth interface
• Refactor the internal of wallet and auth packages to make the code more robust

new wallet and auth interface

For apps that only need wallet functionality:

// Old: Required OAuth client setup
import { Auth } from '@imtbl/auth';
import { connectWallet } from '@imtbl/wallet';

const auth = new Auth({ clientId: '...', redirectUri: '...' });
const provider = await connectWallet({ auth });

// New: Wallet-only mode (no OAuth client needed)
import { connectWallet } from '@imtbl/wallet';

const provider = await connectWallet();
// SDK automatically handles authentication with a shared client owned by Immutable

For apps that need user profile access:

// Still works: Provide your own auth client
import { Auth } from '@imtbl/auth';
import { connectWallet } from '@imtbl/wallet';

const auth = new Auth({ 
  clientId: 'your-client-id', 
  redirectUri: 'https://your-app.com/callback',
  scope: 'openid profile email transact', // Full access
});
const provider = await connectWallet({ auth });

---

Note

Introduce @imtbl/auth and @imtbl/wallet, refactor Passport to use them, add connectWallet with default auth and env‑less configs, and update sample app and tooling accordingly.

• Core changes:
  • Split Passport into new packages: @imtbl/auth (OIDC auth, metrics, events, errors) and @imtbl/wallet (EIP-1193 provider, relayer/guardian, overlays, linking).
  • Refactor @imtbl/passport to consume and re‑export from Auth/Wallet; remove environment abstraction in favor of concrete URLs; introduce IMX-specific guardian client.
  • Add connectWallet API with default Immutable-hosted auth (no app client required), multi-chain presets, and EIP‑6963 announcement.
• Wallet:
  • New WalletConfiguration, session activity via explicit API URL, fee token preference, SCW deploy-before-sign option.
  • Provider updates: request/typed data/sign flows, confirmation overlays, relayer client improvements, link external wallet + get linked addresses.
• Auth:
  • Public Auth class (login, PKCE, tokens, events), typed errors/utilities, jest/tsup setup.
• Sample App:
  • Updated to activeZkEvmProvider/account, default connect button, environment gating, event logging.
• Ecosystem:
  • SDK aggregates new packages; dependency/version bumps, Jest type updates, ESLint configs; husky memory limit increased.

^{Written by Cursor Bugbot for commit 1798bc8. This will update automatically on new commits. Configure here.}

[cursor]

This PR is being reviewed by Cursor Bugbot

Details

Your team is on the Bugbot Free tier. On this plan, Bugbot will review limited PRs each billing cycle for each member of your team.

To receive Bugbot reviews on all of your PRs, visit the Cursor dashboard to activate Pro and start your 14-day free trial.

[nx-cloud]

View your CI Pipeline Execution ↗ for commit 1798bc8

Command	Status	Duration	Result
nx affected -t build,lint,test	✅ Succeeded	3m 7s	View ↗
nx run-many -p @imtbl/sdk,@imtbl/checkout-widge...	✅ Succeeded	1m 27s	View ↗

---

☁️ Nx Cloud last updated this comment at 2025-12-05 00:43:20 UTC

[haydenfowler]

We need this to track users across the embedded login prompt & the Auth0 login flow, don't we?

[nattb8]

All tests removed. Are they going to be rewritten?

[shineli1984]

added tests