feat: add profile and contacts fetching from pubky

[ben-kaufman]

Integrates Pubky decentralized identity into Bitkit, allowing users to create a Bitkit-managed profile or connect via Pubky Ring authentication. Once connected, the user's profile name and avatar appear on the home screen header, a full profile page shows their bio, links, tags, and shareable QR code, and a contacts section lists people they follow on the Pubky network.

Description

• Dual profile creation flow — create a new profile from BIP39 seed derivation, or import via Pubky Ring deep links (pubkyauth://)
• Profile restore — when creating a profile, if one already exists on the network for the derived keys, it is detected and pre-populated (name, bio, links, tags preserved)
• Ring auth import flow — after Ring authentication, discover existing profile and contacts from pubky.app, present import overview with "Import all" or "Select" options, then proceed to Pay Contacts
  onboarding
• Pay Contacts onboarding — new step after both create and Ring import flows, with toggle for sharing payment data
• Profile page displaying name, bio, links, tags, and a QR code with the profile picture overlaid
• Profile editing — edit name, bio, avatar, links, and tags with suggestion sheets
• Contacts list with search, add button, and flat "Contacts" section header
• Contact detail page showing name, truncated public key, bio, links, tags, and copy/share/edit/delete actions
• Contact import — overview screen showing found profile & contacts count with avatar stack, selection screen with select all/none, batch import
• Add contact — bottom sheet with pubky input or QR scan, loading animation with rotating ellipses, profile preview with privacy notice, save/discard
• Edit contact — edit name, bio, links, tags with delete option
• Home screen integration showing the authenticated user's name and avatar in the header
• Session restoration — automatic re-sign-in using stored secret key when session import fails (Bitkit-managed); session preserved on failure for retry on next launch (Ring-managed); toast notification when
  restoration fails
• PubkyAuth approval — handles pubkyauth:// URLs from QR scans and deep links, biometric auth before approval, three-state sheet (authorize → authorizing → success)
• PubkyService — service layer wrapping bitkit-core (auth relay, PKDNS file fetching, key derivation, homeserver operations) and paykit (session management)
• PubkyRepo — manages auth state, session lifecycle, key derivation, profile creation/editing, contact CRUD, homeserver file operations, and auth approval
• PubkyProfileData backward-compatible decoding — tags field defaults to empty array when missing from JSON (older profiles, other clients)
• Suggestion card auto-dismiss when user is already authenticated
• Bumped bitkit-core to v0.1.56 — adds key derivation, homeserver session operations, auth approval FFI functions

Key new files

File	Purpose
services/PubkyService.kt	FFI bridge to bitkit-core and paykit
repositories/PubkyRepo.kt	Auth state, session persistence, key derivation, profile/contact CRUD
models/PubkyProfile.kt	Profile/contact data models with backward-compatible JSON decoding
models/PubkyAuthRequest.kt	Auth request capability parsing
ui/components/CenteredProfileHeader.kt	Reusable centered profile header (avatar, name, key, bio)
ui/components/ProfileEditForm.kt	Reusable form for profile/contact editing
ui/components/AddLinkSheet.kt	Add link bottom sheet with suggestions
ui/components/AddTagSheet.kt	Add tag bottom sheet with suggestions
ui/screens/profile/PubkyChoiceScreen.kt	Create vs Ring import choice
ui/screens/profile/CreateProfileScreen.kt	Profile creation with restore detection
ui/screens/profile/EditProfileScreen.kt	Profile editing with avatar upload
ui/screens/profile/PayContactsScreen.kt	Pay Contacts onboarding step
ui/screens/profile/PubkyAuthApprovalSheet.kt	Auth approval as authenticator
ui/screens/contacts/AddContactScreen.kt	Add contact by public key or QR
ui/screens/contacts/EditContactScreen.kt	Edit contact details
ui/screens/contacts/ContactImportOverviewScreen.kt	Import overview (profile + contacts summary)
ui/screens/contacts/ContactImportSelectScreen.kt	Selectable contact list for import
tests/PubkyProfileDataTest.kt	JSON encode/decode and backward compatibility tests
tests/PubkyAuthRequestTest.kt	Capability parsing tests

QA Notes

• Fresh install: tap Profile in drawer → shows intro → continue → choice screen (Create / Import with Ring)
• Create flow: Create Profile → enter name, pick avatar → Continue → Pay Contacts → Profile page
• Create restore: If profile already exists for derived keys, name is pre-populated and title shows "Restore Profile"
• Ring flow: Import with Ring → opens Pubky Ring → approve → returns to Bitkit → Import Overview → Import All or Select → Pay Contacts → Profile page
• Ring flow (no contacts): If no remote contacts found, skip import and go to Pay Contacts
• Import select: Can select all, select none, or pick individual contacts
• Profile page shows name, bio, links, tags, QR code with profile picture overlay
• Edit profile: tap edit → modify name/bio/links/tags → save → updated
• Home header shows profile name and avatar after authentication
• Kill and relaunch app → session restored, profile/contacts shown without re-auth
• Kill and relaunch with no network → session preserved, toast shown, next launch with network restores
• Sign out from profile page → returns to unauthenticated state, contacts cleared
• Contacts list shows "My Profile" row, contacts section, search, and add button
• Add contact by public key → fetches profile → shows preview with privacy notice → save
• Add contact via QR scan → opens scanner → scans pubky → navigates to add contact
• Edit contact → modify details → save → changes reflected in detail view
• Delete contact from edit screen → confirmation → removed
• Inline tag add/remove on contact detail → persists immediately
• Scan pubkyauth:// QR code → shows approval sheet with permissions → biometric → authorize → success
• Receive pubkyauth:// deep link → same approval flow
• Suggestion sheets for links and tags show lightbulb icon and predefined suggestions

[piotr-iohk]

Create Profile flow testing

• Create Profile
• Edit / Delete Profile
• Add / Edit / Delete Contacts

---

1. Create profile - OK.

---

2. Edit / Delete profile

• "Disconnect" - should not be there (by Figma)

• "Delete profile" - says profile will be deleted permanently - but when you create profile again - it is the same pubky (not sure if that is expected).

Screen.Recording.2026-04-10.at.10.54.33.mov

• After adding link we get back to edit profile and the keyboard becomes active - seems unnecesary.

Screen.Recording.2026-04-10.at.11.05.22.mov

• Keyboard can cover the edit field.

Screen.Recording.2026-04-10.at.11.07.26.mov

---

3. Add contact

• Empty contact list should show profile and "Add contact" button (Figma)
• you can add yourself as contact - should not be possible. (both iOS and Android)

Screen.Recording.2026-04-10.at.11.34.19.mov

• Adding new contact:
  • note: Input length looks unbounded; worth defining and enforcing a sensible maximum.
  • whoops! contact added on fake pubky:

Screen.Recording.2026-04-10.at.12.00.12.mov

---

4. Edit / Delete contact

• edit contact shows "Your Pubky" - should show "Pubky" (both iOS and Android)

• "Please note..." sentence needs to be updated.
• Cannot edit / update avatar - probably should be possible.

[ben-kaufman]

Same pubky after delete is expected since we use deterministic derivation based on the seed. So that's the expected behavior there.

[piotr-iohk]

ame pubky after delete is expected since we use deterministic derivation based on the seed. So that's the expected behavior there.

I suppose this needs to be updated then:

[ben-kaufman]

No I think the warning makes sense, it deletes the profile, but not the key to it, maybe can remove the word "permenantly"

[piotr-iohk]

No I think the warning makes sense, it deletes the profile, but not the key to it, maybe can remove the word "permenantly"

Hm, it's also not like the profile is entirely deleted. From what I see only profile details (bio, links, tags) are deleted but the contacts are preserved.

[ben-kaufman]

@piotr-iohk ah yes I missed that, fixed

[piotr-iohk]

Additional observation (on 1e38929):

1.

• create wallet -> create profile -> make backup -> reset wallet -> restore wallet.

Expected:

• profile should be there after restoration

Actual:

• profile is "disconnected"

---

2. It would be great if we could have same behavior on pubky validation when adding contacts (currently differs on iOS - validation on pubky input vs Android - validation after taping add, on Android also subsequent Retry button does not work). It would make things consistent + easier for e2e tests. 🙏

[ben-kaufman]

About 1, agree it makes sense, but backup and restore should ideally be done in a separate PR since this is already too large and they are a separate area of work.

Not sure I understood what you refer to in 2, can you please explain?

[piotr-iohk]

Sorry - I've added video on iOS for 2nd point: synonymdev/bitkit-ios#476 (comment)

[piotr-iohk]

I think this is mostly good functionally. There are some UI / Figma mismatches that we can clean up in a follow-up. We still need more testing before we call the feature done, but LGTM to merge this branch.

[jvsena42]

Add contact — bottom sheet with pubky input or QR scan, loading animation with rotating ellipses, profile preview with privacy notice, save/discard

Failed testing this scenario

Edit: As far as I can see, it is not implemented, could be addressed to other PR

Screen_recording_20260420_135248.webm

[jvsena42]

✅ Sign-in with Pubky ring
✅ Copy contact key
✅ Pubky app data imported successfully
✅ Add contact from drawer option

⚠️ Nits for addressing in the next PRs:

• Couldn't test create account by Bitkit (home gate endpoint not available)
• Reset wallet -> restore -> Is not restoring the profile
• Expected copy the profile key on QR code click
• Expected decode the profile key when pasting in home

[ben-kaufman]

Restore will be handled in a following PR.

Expected copy the profile key on QR code key
Expected decode the profile key when pasting in home

Can you please explain what you meant in these?

[jvsena42]

Restore will be handled in a following PR.

Expected copy the profile key on QR code key
Expected decode the profile key when pasting in home

Can you please explain what you meant in these?

1. Expected copy the profile key on QR code click, like in payment sheet

Screen_recording_20260421_064459.webm

2. Expected decode the profile key when pasting in home, like when opening a channel

#824 (comment)