tokenary/Encrypted Ink/Agent.swift

// Copyright © 2021 Encrypted Ink. All rights reserved.

import Cocoa
import WalletConnect
import LocalAuthentication

class Agent: NSObject {
    
    enum ExternalRequest {
        case wcSession(WCSession)
        case safari(SafariRequest)
    }
    
    static let shared = Agent()
    private lazy var statusImage = NSImage(named: "Status")
    
    private let walletConnect = WalletConnect.shared
    private let walletsManager = WalletsManager.shared
    private let ethereum = Ethereum.shared
    
    private override init() { super.init() }
    private var statusBarItem: NSStatusItem!
    private var hasPassword = Keychain.shared.password != nil
    private var didEnterPasswordOnStart = false
    
    private var didStartInitialLAEvaluation = false
    private var didCompleteInitialLAEvaluation = false
    private var initialExternalRequest: ExternalRequest?
    
    var statusBarButtonIsBlocked = false
    
    func start() {
        checkPasteboardAndOpen()
        setupStatusBarItem()
    }
    
    func reopen() {
        checkPasteboardAndOpen()
    }
    
    func showInitialScreen(externalRequest: ExternalRequest?) {
        let isEvaluatingInitialLA = didStartInitialLAEvaluation && !didCompleteInitialLAEvaluation
        guard !isEvaluatingInitialLA else {
            if externalRequest != nil {
                initialExternalRequest = externalRequest
            }
            return
        }
        
        guard hasPassword else {
            let welcomeViewController = WelcomeViewController.new { [weak self] createdPassword in
                guard createdPassword else { return }
                self?.didEnterPasswordOnStart = true
                self?.didCompleteInitialLAEvaluation = true
                self?.hasPassword = true
                self?.showInitialScreen(externalRequest: externalRequest)
            }
            let windowController = Window.showNew()
            windowController.contentViewController = welcomeViewController
            return
        }
        
        guard didEnterPasswordOnStart else {
            askAuthentication(on: nil, onStart: true, reason: .start) { [weak self] success in
                if success {
                    self?.didEnterPasswordOnStart = true
                    self?.showInitialScreen(externalRequest: externalRequest)
                    self?.walletConnect.restartSessions()
                }
            }
            return
        }
        
        let request = externalRequest ?? initialExternalRequest
        initialExternalRequest = nil
        
        if case let .safari(request) = request {
            processSafariRequest(request)
        } else {
            let windowController = Window.showNew()
            let accountsList = instantiate(AccountsListViewController.self)
            
            if case let .wcSession(session) = request {
                accountsList.onSelectedWallet = onSelectedWallet(session: session)
            }
            
            windowController.contentViewController = accountsList
        }
    }
    
    func showApprove(transaction: Transaction, chain: EthereumChain, peerMeta: WCPeerMeta?, completion: @escaping (Transaction?) -> Void) {
        let windowController = Window.showNew()
        let approveViewController = ApproveTransactionViewController.with(transaction: transaction, chain: chain, peerMeta: peerMeta) { [weak self] transaction in
            if transaction != nil {
                self?.askAuthentication(on: windowController.window, onStart: false, reason: .sendTransaction) { success in
                    completion(success ? transaction : nil)
                    Window.closeAllAndActivateBrowser()
                }
            } else {
                Window.closeAllAndActivateBrowser()
                completion(nil)
            }
        }
        windowController.contentViewController = approveViewController
    }
    
    func showApprove(subject: ApprovalSubject, meta: String, peerMeta: WCPeerMeta?, completion: @escaping (Bool) -> Void) {
        let windowController = Window.showNew()
        let approveViewController = ApproveViewController.with(subject: subject, meta: meta, peerMeta: peerMeta) { [weak self] result in
            if result {
                self?.askAuthentication(on: windowController.window, onStart: false, reason: subject.asAuthenticationReason) { success in
                    completion(success)
                    Window.closeAllAndActivateBrowser()
                }
            } else {
                Window.closeAllAndActivateBrowser()
                completion(result)
            }
        }
        windowController.contentViewController = approveViewController
    }
    
    func showErrorMessage(_ message: String) {
        let windowController = Window.showNew()
        windowController.contentViewController = ErrorViewController.withMessage(message)
    }
    
    func getWalletSelectionCompletionIfShouldSelect() -> ((EthereumChain, InkWallet) -> Void)? {
        let session = getSessionFromPasteboard()
        return onSelectedWallet(session: session)
    }
    
    lazy private var statusBarMenu: NSMenu = {
        let menu = NSMenu(title: Strings.encryptedInk)
        
        let showItem = NSMenuItem(title: Strings.showEncryptedInk, action: #selector(didSelectShowMenuItem), keyEquivalent: "")
        let howToItem = NSMenuItem(title: Strings.howToWalletConnect, action: #selector(showInstructionsAlert), keyEquivalent: "")
        let mailItem = NSMenuItem(title: Strings.dropUsALine, action: #selector(didSelectMailMenuItem), keyEquivalent: "")
        let githubItem = NSMenuItem(title: Strings.viewOnGithub, action: #selector(didSelectGitHubMenuItem), keyEquivalent: "")
        let twitterItem = NSMenuItem(title: Strings.viewOnTwitter, action: #selector(didSelectTwitterMenuItem), keyEquivalent: "")
        let quitItem = NSMenuItem(title: Strings.quit, action: #selector(didSelectQuitMenuItem), keyEquivalent: "q")
        showItem.attributedTitle = NSAttributedString(string: "👀 " + Strings.showEncryptedInk, attributes: [.font: NSFont.systemFont(ofSize: 15, weight: .semibold)])
        
        showItem.target = self
        howToItem.target = self
        githubItem.target = self
        twitterItem.target = self
        mailItem.target = self
        quitItem.target = self
        
        menu.delegate = self
        menu.addItem(showItem)
        menu.addItem(NSMenuItem.separator())
        menu.addItem(howToItem)
        menu.addItem(NSMenuItem.separator())
        menu.addItem(twitterItem)
        menu.addItem(githubItem)
        menu.addItem(mailItem)
        menu.addItem(NSMenuItem.separator())
        menu.addItem(quitItem)
        return menu
    }()
    
    func warnBeforeQuitting(updateStatusBarAfterwards: Bool = false) {
        Window.activateWindow(nil)
        let alert = Alert()
        alert.messageText = Strings.quitEncryptedInk
        alert.informativeText = Strings.youWontBeAbleToSignRequests
        alert.alertStyle = .warning
        alert.addButton(withTitle: Strings.ok)
        alert.addButton(withTitle: Strings.cancel)
        if alert.runModal() == .alertFirstButtonReturn {
            NSApp.terminate(nil)
        }
        if updateStatusBarAfterwards {
            setupStatusBarItem()
        }
    }
    
    @objc private func didSelectTwitterMenuItem() {
        if let url = URL(string: "https://encrypted.ink/twitter") {
            NSWorkspace.shared.open(url)
        }
    }
    
    @objc private func didSelectGitHubMenuItem() {
        if let url = URL(string: "https://encrypted.ink/github") {
            NSWorkspace.shared.open(url)
        }
    }
    
    @objc private func showInstructionsAlert() {
        Window.activateWindow(nil)
        Alert.showWalletConnectInstructions()
    }
    
    @objc private func didSelectMailMenuItem() {
        if let url = URL(string: "mailto:support@encrypted.ink") {
            NSWorkspace.shared.open(url)
        }
    }
    
    @objc private func didSelectShowMenuItem() {
        checkPasteboardAndOpen()
    }
    
    @objc private func didSelectQuitMenuItem() {
        warnBeforeQuitting()
    }
    
    func setupStatusBarItem() {
        let statusBar = NSStatusBar.system
        statusBarItem = statusBar.statusItem(withLength: NSStatusItem.squareLength)
        statusBarItem.button?.image = statusImage
        statusBarItem.button?.target = self
        statusBarItem.button?.action = #selector(statusBarButtonClicked(sender:))
        statusBarItem.button?.sendAction(on: [.leftMouseUp, .rightMouseUp])
    }
    
    @objc private func statusBarButtonClicked(sender: NSStatusBarButton) {
        guard !statusBarButtonIsBlocked, let event = NSApp.currentEvent, event.type == .rightMouseUp || event.type == .leftMouseUp else { return }
        
        if let session = getSessionFromPasteboard() {
            showInitialScreen(externalRequest: .wcSession(session))
        } else {
            statusBarItem.menu = statusBarMenu
            statusBarItem.button?.performClick(nil)
        }
    }
    
    private func onSelectedWallet(session: WCSession?) -> ((EthereumChain, InkWallet) -> Void)? {
        guard let session = session else { return nil }
        return { [weak self] chain, wallet in
            self?.connectWallet(session: session, chainId: chain.id, wallet: wallet)
        }
    }
    
    private func getSessionFromPasteboard() -> WCSession? {
        let pasteboard = NSPasteboard.general
        let link = pasteboard.string(forType: .string) ?? ""
        let session = walletConnect.sessionWithLink(link)
        if session != nil {
            pasteboard.clearContents()
        }
        return session
    }
    
    private func checkPasteboardAndOpen() {
        let request: ExternalRequest?
        
        if let session = getSessionFromPasteboard() {
            request = .wcSession(session)
        } else {
            request = .none
        }
        
        showInitialScreen(externalRequest: request)
    }
    
    func askAuthentication(on: NSWindow?, getBackTo: NSViewController? = nil, onStart: Bool, reason: AuthenticationReason, completion: @escaping (Bool) -> Void) {
        let context = LAContext()
        var error: NSError?
        let policy = LAPolicy.deviceOwnerAuthenticationWithBiometrics
        let canDoLocalAuthentication = context.canEvaluatePolicy(policy, error: &error)
        
        func showPasswordScreen() {
            let window = on ?? Window.showNew().window
            let passwordViewController = PasswordViewController.with(mode: .enter, reason: reason) { [weak window] success in
                if let getBackTo = getBackTo {
                    window?.contentViewController = getBackTo
                } else {
                    Window.closeAll()
                }
                completion(success)
            }
            window?.contentViewController = passwordViewController
        }
        
        if canDoLocalAuthentication {
            context.localizedCancelTitle = Strings.cancel
            didStartInitialLAEvaluation = true
            context.evaluatePolicy(.deviceOwnerAuthentication, localizedReason: reason.title) { [weak self] success, _ in
                DispatchQueue.main.async {
                    self?.didCompleteInitialLAEvaluation = true
                    if !success, onStart, self?.didEnterPasswordOnStart == false {
                        showPasswordScreen()
                    }
                    completion(success)
                }
            }
        } else {
            showPasswordScreen()
        }
    }
    
    private func connectWallet(session: WCSession, chainId: Int, wallet: InkWallet) {
        let windowController = Window.showNew()
        let window = windowController.window
        windowController.contentViewController = WaitingViewController.withReason(Strings.connecting)
        
        walletConnect.connect(session: session, chainId: chainId, walletId: wallet.id) { [weak window] _ in
            if window?.isVisible == true {
                Window.closeAllAndActivateBrowser()
            }
        }
    }
    
    // TODO: should receive account address from content script here.
    // content script should know it since it injets it
    private func processSafariRequest(_ safariRequest: SafariRequest) {
        switch safariRequest.method {
        case .signPersonalMessage:
            guard let data = safariRequest.message else {
                return // TODO: respond with error
            }
            
            // TODO: display meta and peerMeta
            showApprove(subject: .signPersonalMessage, meta: "", peerMeta: nil) { [weak self] approved in
                if approved {
                    self?.signPersonalMessage(address: safariRequest.address, data: data, request: safariRequest)
                    // TODO: sign and respond
                } else {
                    ExtensionBridge.respond(id: safariRequest.id, response: ResponseToExtension(name: safariRequest.name, error: "Failed to sign"))
                }
            }
        case .requestAccounts, .switchAccount:
            let windowController = Window.showNew()
            let accountsList = instantiate(AccountsListViewController.self)
            
            accountsList.onSelectedWallet = { chain, wallet in
                let response = ResponseToExtension(name: safariRequest.name,
                                                   results: [wallet.ethereumAddress ?? "weird address"],
                                                   chainId: chain.hexStringId,
                                                   rpcURL: chain.nodeURLString)
                ExtensionBridge.respond(id: safariRequest.id, response: response)
                Window.closeAllAndActivateBrowser()
            }
            
            // TODO: pass cancel as well
            windowController.contentViewController = accountsList
        case .signMessage:
            guard let data = safariRequest.message else {
                return // TODO: respond with error
            }
            
            // TODO: display meta and peerMeta
            showApprove(subject: .signMessage, meta: "", peerMeta: nil) { [weak self] approved in
                if approved {
                    self?.signMessage(address: safariRequest.address, data: data, request: safariRequest)
                    // TODO: sign and respond
                } else {
                    ExtensionBridge.respond(id: safariRequest.id, response: ResponseToExtension(name: safariRequest.name, error: "Failed to sign"))
                }
            }
        case .signTypedMessage:
            guard let raw = safariRequest.raw else {
                print("yoyoyo no raw")
                return // TODO: respond with error
            }
            print("yoyoyo raw:", raw)
            
            // TODO: display meta and peerMeta
            showApprove(subject: .signTypedData, meta: "", peerMeta: nil) { [weak self] approved in
                if approved {
                    self?.signTypedData(address: safariRequest.address, raw: raw, request: safariRequest)
                    // TODO: sign and respond
                } else {
                    ExtensionBridge.respond(id: safariRequest.id, response: ResponseToExtension(name: safariRequest.name, error: "Failed to sign"))
                }
            }
        case .signTransaction:
            let chain = EthereumChain.ethereum // TODO: receive chain id here as well
            guard let transaction = safariRequest.transaction else {
                return // TODO: respond with error
            }
            let peer = WCPeerMeta(name: "Unknown", url: "") // TODO: pass valid peer meta
            showApprove(transaction: transaction, chain: chain, peerMeta: peer) { [weak self] transaction in
                if let transaction = transaction {
                    self?.sendTransaction(transaction, address: safariRequest.address, chain: chain, request: safariRequest)
                    // TODO: show some kind of spinner
                    // TODO: actually send a transaction. What should be in a response?
                } else {
                    ExtensionBridge.respond(id: safariRequest.id, response: ResponseToExtension(name: safariRequest.name, error: "Canceled"))
                    // TODO: looks like uniswap expects different response format
                }
            }
        case .ecRecover:
            if let (signature, message) = safariRequest.signatureAndMessage,
               let recovered = ethereum.recover(signature: signature, message: message) {
                ExtensionBridge.respond(id: safariRequest.id, response: ResponseToExtension(name: safariRequest.name, result: recovered))
            } else {
                ExtensionBridge.respond(id: safariRequest.id, response: ResponseToExtension(name: safariRequest.name, error: "Failed to verify"))
            }
        default:
            // TODO: implement
            // at least bring focus back to browser
            break
        }
    }
    
    // TODO: refactor in a way that there'd be only one sendTransaction for extension and for WalletConnect
    private func sendTransaction(_ transaction: Transaction, address: String, chain: EthereumChain, request: SafariRequest) {
        guard let wallet = walletsManager.getWallet(address: address) else {
            return // TODO: respond with error
        }
        
        guard let transactionHash = try? ethereum.send(transaction: transaction, wallet: wallet, chain: chain) else {
            ExtensionBridge.respond(id: request.id, response: ResponseToExtension(name: request.name, error: "Failed to send"))
            return // TODO: respond with error
        }
        ExtensionBridge.respond(id: request.id, response: ResponseToExtension(name: request.name, result: transactionHash))
    }
    
    private func signTypedData(address: String, raw: String, request: SafariRequest) {
        guard let wallet = walletsManager.getWallet(address: address) else {
            return // TODO: respond with error
        }
        let signed = try? ethereum.sign(typedData: raw, wallet: wallet)
        ExtensionBridge.respond(id: request.id, response: ResponseToExtension(name: request.name, result: signed ?? "weird address"))
    }
    
    private func signMessage(address: String, data: Data, request: SafariRequest) {
        guard let wallet = walletsManager.getWallet(address: address) else {
            return // TODO: respond with error
        }
        let signed = try? ethereum.sign(data: data, wallet: wallet)
        ExtensionBridge.respond(id: request.id, response: ResponseToExtension(name: request.name, result: signed ?? "weird address"))
    }
    
    private func signPersonalMessage(address: String, data: Data, request: SafariRequest) {
        guard let wallet = walletsManager.getWallet(address: address) else {
            return // TODO: respond with error
        }
        let signed = try? ethereum.signPersonalMessage(data: data, wallet: wallet)
        ExtensionBridge.respond(id: request.id, response: ResponseToExtension(name: request.name, result: signed ?? "weird address"))
    }
    
}

extension Agent: NSMenuDelegate {
    
    func menuDidClose(_ menu: NSMenu) {
        statusBarItem.menu = nil
    }
    
}