feat: keyless wallet & apple google oauth login

.gitignore

@@ -13,6 +13,7 @@ __generated__
 .clauderc
 .tmp/
 *.private_ai_docs.md
+.cursor/plans/
 dist
 build-electron
 .next

apps/desktop/app/app.ts

@@ -55,7 +55,7 @@ import {
 } from './resoucePath';
 import { initSentry } from './sentry';
 import { startServices } from './service';
-import { setMainWindow } from './service/oauthLocalServer/oauthLocalServer';
+import { setMainWindowForOAuthServer } from './service/oauthLocalServer/oauthLocalServer';
 
 logger.initialize();
 logger.transports.file.maxSize = 1024 * 1024 * 10;
@@ -564,7 +564,7 @@ async function createMainWindow() {
   void browserWindow.loadURL(src);
 
   // Set main window reference for OAuth server
-  setMainWindow(browserWindow);
+  setMainWindowForOAuthServer(browserWindow);
 
   // Protocol handler for win32
   if (isWin || isMac) {

apps/desktop/app/service/appleAuth/appleAuth.ts

@@ -0,0 +1,80 @@
+/**
+ * Native Apple Sign-In service for macOS Desktop
+ *
+ * Uses the native apple-auth-macos module to perform Apple Sign-In
+ * with system UI (no browser required).
+ */
+
+import { OneKeyLocalError } from '@onekeyhq/shared/src/errors';
+
+// eslint-disable-next-line import/no-relative-packages
+import type { IAppleSignInResult } from '../../../native-modules/apple-auth-macos';
+
+// Only load on macOS
+const isMacOS = process.platform === 'darwin';
+
+let appleAuthModule:
+  | typeof import('../../../native-modules/apple-auth-macos')
+  | null = null;
+
+// Lazy load the native module
+function getAppleAuthModule() {
+  if (!isMacOS) {
+    return null;
+  }
+
+  if (!appleAuthModule) {
+    try {
+      // eslint-disable-next-line @typescript-eslint/no-require-imports
+      appleAuthModule = require('../../native-modules/apple-auth-macos');
+    } catch (error) {
+      console.warn(
+        'Failed to load apple-auth-macos:',
+        error instanceof Error ? error.message : error,
+      );
+      return null;
+    }
+  }
+
+  return appleAuthModule;
+}
+
+/**
+ * Check if native Apple Sign-In is available.
+ * Requires macOS 10.15+ and the native module to be built.
+ */
+export function isAppleAuthAvailable(): boolean {
+  const module = getAppleAuthModule();
+  if (!module) {
+    return false;
+  }
+
+  try {
+    return module.isAvailable();
+  } catch {
+    return false;
+  }
+}
+
+/**
+ * Perform native Apple Sign-In.
+ *
+ * @returns Promise with identity token and nonce for Supabase
+ * @throws Error if sign-in fails or user cancels
+ */
+export async function signInWithApple(): Promise<IAppleSignInResult> {
+  const module = getAppleAuthModule();
+
+  if (!module) {
+    throw new OneKeyLocalError(
+      'Apple Sign-In native module is not available. ' +
+        'Make sure you are on macOS and the module is built.',
+    );
+  }
+
+  if (!module.isAvailable()) {
+    throw new OneKeyLocalError('Apple Sign-In requires macOS 10.15 or later');
+  }
+
+  return module.signIn();
+}