refactor(onboarding): simplify onboarding side-effects and support permissioned key log in

[jaredvu]

Comparison

Aspect	Old Architecture	New Architecture
Encryption	crypto-js with static key	Web Crypto API with per-browser salt
Storage Format	Encrypted signature (Redux)	Encrypted private key (SecureStorage)
Restoration	Decrypt signature → re-derive wallet	Decrypt private key → recreate wallet directly
Import Methods	Source wallet only	Source wallet + Private key + Mnemonic
Cosmos Wallets	Stored in state	Derived on-demand
Security	Static encryption key	Per-browser dynamic salt
Auto-login	Yes (via encrypted signature)	Yes (via SecureStorage)
Logout	Clear Redux state	Clear SecureStorage + Redux state

Overview of Changes

Added 3 classes that help facilitate onboarding

OnboardingSupervisor

• Central orchestrator for all wallet connection flows
• Handles determinism checks for new users
• Manages wallet restoration from SecureStorage
• Coordinates between different wallet types (EVM, Cosmos, Solana, Turnkey)

DydxPersistedWalletService

• Handles private key import, mnemonic import, and signature derivation
• Manages SecureStorage persistence

SecureStorageService

• Browser-native encryption using Web Crypto API
• AES-GCM 256-bit encryption with PBKDF2 key derivation
• Per-browser unique salt for enhanced security
• Stores private keys encrypted in localStorage

Additional Items

• Helpers to derive Cosmos Wallets
• Derive using bech32 conversion where we need a cosmos wallet address instead of using in state local wallets

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
v4-staging	Ready	Preview	Comment	Nov 26, 2025 10:29pm
v4-testnet	Ready	Preview	Comment	Nov 26, 2025 10:29pm

[jaredvu]

redundant check since isCorrectWallet already checks

[jaredvu]

deprecated