feat: EWM-617 check root

assets/translations/en.json

@@ -791,5 +791,15 @@
   "passwordLockedUntil": "Password locked until {}",
   "invalidPayloadError": "Payload is invalid",
   "invalidStateInitError": "StateInit is invalid",
-  "unsupportedWalletTypeError": "Unsupported wallet type"
+  "unsupportedWalletTypeError": "Unsupported wallet type",
+  "rootDetectedTitle": "Root / Jailbreak detected",
+  "rootDetectedDescription": "This device has a modified security environment. Wallet security cannot be guaranteed.",
+  "rootDetectedRisk": "By continuing, you acknowledge\nand accept the associated risks",
+  "rootDetectedAccept": "I understand and accept the risks",
+  "rootInfoTitle": "Why this matters",
+  "rootInfoDescription": "Root/Jailbreak weakens system security restrictions, allowing other apps or system modifications to interfere with the wallet’s operation",
+  "whatYouCanDoTitle": "What you can do:",
+  "whatYouCanDoDescription0": "Use a device without root/jailbreak",
+  "whatYouCanDoDescription1": "Disable root/jailbreak and reboot the device",
+  "whatYouCanDoDescription2": "Use a separate “clean” device for the wallet"
 }

assets/translations/ko.json

@@ -791,5 +791,16 @@
   "passwordLockedUntil": "Password locked until {}",
   "invalidPayloadError": "Payload is invalid",
   "invalidStateInitError": "StateInit is invalid",
-  "unsupportedWalletTypeError": "Unsupported wallet type"
+  "unsupportedWalletTypeError": "Unsupported wallet type",
+  "rootDetectedTitle": "Root / Jailbreak detected",
+  "rootDetectedDescription": "This device has a modified security environment. Wallet security cannot be guaranteed.",
+  "rootDetectedRisk": "By continuing, you acknowledge\nand accept the associated risks",
+  "rootDetectedAccept": "I understand and accept the risks",
+  "rootInfoTitle": "Why this matters",
+  "rootInfoDescription": "Root/Jailbreak weakens system security restrictions, allowing other apps or system modifications to interfere with the wallet’s operation",
+  "whatYouCanDo": "What you can do:",
+  "whatYouCanDoTitle": "What you can do:",
+  "whatYouCanDoDescription0": "Use a device without root/jailbreak",
+  "whatYouCanDoDescription1": "Disable root/jailbreak and reboot the device",
+  "whatYouCanDoDescription2": "Use a separate “clean” device for the wallet"
 }

lib/app/router/compass/route.dart

@@ -47,3 +47,5 @@ abstract class CompassBaseRoute {
   /// Top-level routes are registered directly with the root GoRouter instance.
   final bool isTopLevel;
 }
+
+abstract interface class IndependentSeedRoute {}

lib/app/service/bootstrap/bootstrap_navigation_delegate.dart

@@ -0,0 +1,46 @@
+import 'package:app/app/router/compass/guard.dart';
+import 'package:app/app/router/router.dart';
+import 'package:app/app/service/navigation_service.dart';
+import 'package:app/feature/onboarding/route.dart';
+import 'package:app/feature/wallet/route.dart';
+import 'package:injectable/injectable.dart';
+import 'package:logging/logging.dart';
+import 'package:nekoton_repository/nekoton_repository.dart';
+
+@injectable
+class BootstrapNavigationDelegate {
+  BootstrapNavigationDelegate(
+    this._nekotonRepository,
+    this._navigationService,
+    this._router,
+  );
+
+  final NekotonRepository _nekotonRepository;
+  final NavigationService _navigationService;
+  final CompassRouter _router;
+
+  bool? get hasSeeds => _nekotonRepository.hasSeeds.valueOrNull;
+
+  final _logger = Logger('BootstrapNavigationDelegate');
+
+  Future<void> goToResultBootstrap() async {
+    if (hasSeeds == false) {
+      _logger.info('Initial navigation. Navigate to onboarding');
+      _router.compassPoint(const OnBoardingRouteData());
+      return;
+    }
+
+    final savedNavigation = await _navigationService.getSavedState();
+
+    if (savedNavigation != null) {
+      _logger.info('Initial navigation. Navigate to $savedNavigation');
+      // Use CompassRouter methods for all navigation to maintain consistency
+      _router.compassPoint(
+        UnsafeRedirectCompassRouteData(route: savedNavigation),
+      );
+    } else {
+      _logger.info('Initial navigation. Navigate to wallet');
+      _router.compassPoint(const WalletRouteData());
+    }
+  }
+}

lib/app/view/app_model.dart

@@ -4,10 +4,10 @@ import 'package:app/app/router/router.dart';
 import 'package:app/app/service/app_lifecycle_service.dart';
 import 'package:app/app/service/app_links/app_links.dart';
 import 'package:app/app/service/biometry_service.dart';
+import 'package:app/app/service/bootstrap/bootstrap_navigation_delegate.dart';
 import 'package:app/app/service/bootstrap/bootstrap_service.dart';
 import 'package:app/app/service/bootstrap/bootstrap_steps.dart';
 import 'package:app/app/service/bootstrap/configurators/logger.dart';
-import 'package:app/app/service/navigation_service.dart';
 import 'package:app/app/service/pending_deep_link_service.dart';
 import 'package:app/app/view/app.dart';
 import 'package:app/feature/browser/domain/browser_launcher.dart';
@@ -17,6 +17,7 @@ import 'package:app/feature/localization/localization.dart';
 import 'package:app/feature/messenger/messenger.dart';
 import 'package:app/feature/nft/route.dart';
 import 'package:app/feature/profile/route.dart';
+import 'package:app/feature/root_device_alert/domain/root_device_delegate.dart';
 import 'package:app/feature/wallet/route.dart';
 import 'package:app/generated/generated.dart';
 import 'package:elementary/elementary.dart';
@@ -41,7 +42,8 @@ class AppModel extends ElementaryModel with WidgetsBindingObserver {
     this._nekotonRepository,
     this._bootstrapService,
     this._pendingDeepLinkService,
-    this._navigationService,
+    this._rootDeviceDelegate,
+    this._bootstrapNavigationDelegate,
   ) : super(errorHandler: errorHandler);
 
   final CompassRouter router;
@@ -56,7 +58,8 @@ class AppModel extends ElementaryModel with WidgetsBindingObserver {
   final NekotonRepository _nekotonRepository;
   final BootstrapService _bootstrapService;
   final PendingDeepLinkService _pendingDeepLinkService;
-  final NavigationService _navigationService;
+  final RootDeviceDelegate _rootDeviceDelegate;
+  final BootstrapNavigationDelegate _bootstrapNavigationDelegate;
 
   AppLifecycleListener? _listener;
   StreamSubscription<BrowserAppLinksData>? _appLinksSubs;
@@ -69,7 +72,7 @@ class AppModel extends ElementaryModel with WidgetsBindingObserver {
   Stream<BootstrapSteps> get bootstrapStepStream =>
       _bootstrapService.bootstrapStepStream;
 
-  bool? get hasSeeds => _nekotonRepository.hasSeeds.valueOrNull;
+  Future<bool> get isShowRootScreen => _rootDeviceDelegate.isShowRootScreen;
 
   @override
   void init() {
@@ -101,9 +104,7 @@ class AppModel extends ElementaryModel with WidgetsBindingObserver {
   Future<bool> checkCrashDetected() =>
       _crashDetectorService.checkCrashDetected();
 
-  Future<String?> getSavedNavigation() {
-    return _navigationService.getSavedState();
-  }
+  void next() => _bootstrapNavigationDelegate.goToResultBootstrap();
 
   void _onStateChanged(AppLifecycleState state) {
     switch (state) {

lib/app/view/app_wm.dart

@@ -1,26 +1,21 @@
 import 'dart:async';
 
-import 'package:app/app/router/compass/compass.dart';
 import 'package:app/app/service/bootstrap/bootstrap_steps.dart';
 import 'package:app/app/view/app.dart';
 import 'package:app/app/view/app_model.dart';
 import 'package:app/app/view/message_viewer.dart';
 import 'package:app/core/wm/custom_wm.dart';
-import 'package:app/feature/onboarding/route.dart';
-import 'package:app/feature/wallet/route.dart';
+import 'package:app/feature/root_device_alert/route.dart';
 import 'package:easy_localization/easy_localization.dart';
 import 'package:elementary/elementary.dart';
 import 'package:flutter/widgets.dart';
 import 'package:injectable/injectable.dart';
-import 'package:logging/logging.dart';
 
 /// [WidgetModel] для [App]
 @injectable
 class AppWidgetModel extends CustomWidgetModel<App, AppModel> {
   AppWidgetModel(super.model);
 
-  final _logger = Logger('AppWidgetModel');
-
   late final _messageViewer = MessageViewer(
     messagesExistStream: model.messagesExistStream,
     getRootContext: () => model.navContext,
@@ -62,23 +57,10 @@ class AppWidgetModel extends CustomWidgetModel<App, AppModel> {
     await _bootstrapStepsSubs?.cancel();
     _bootstrapStepsSubs = null;
 
-    if (model.hasSeeds == false) {
-      _logger.info('Initial navigation. Navigate to onboarding');
-      router.compassPoint(const OnBoardingRouteData());
-      return;
-    }
-
-    final savedNavigation = await model.getSavedNavigation();
-
-    if (savedNavigation != null) {
-      _logger.info('Initial navigation. Navigate to $savedNavigation');
-      // Use CompassRouter methods for all navigation to maintain consistency
-      router.compassPoint(
-        UnsafeRedirectCompassRouteData(route: savedNavigation),
-      );
+    if (await model.isShowRootScreen) {
+      router.compassPoint(const RootDeviceAlertRouteData());
     } else {
-      _logger.info('Initial navigation. Navigate to wallet');
-      router.compassPoint(const WalletRouteData());
+      model.next();
     }
   }
 }

lib/feature/onboarding/guard.dart

@@ -48,7 +48,7 @@ class OnboardingGuard extends CompassGuard {
       return null;
     }
 
-    if (!hasSeeds && rootRoute is! OnBoardingRoute) {
+    if (!hasSeeds && rootRoute is! IndependentSeedRoute) {
       // Not onboarded, redirect to onboarding
       _log.info('No seeds, redirecting to onboarding');
       return const OnBoardingRouteData();
@@ -65,7 +65,7 @@ class OnboardingGuard extends CompassGuard {
 
     if (!_bootstrapService.isConfigured) return;
 
-    if (!hasSeeds && rootRoutePath is! OnBoardingRoute) {
+    if (!hasSeeds && rootRoutePath is! IndependentSeedRoute) {
       _log.info('No seeds, redirecting to onboarding');
       _router?.compassPoint(const OnBoardingRouteData());
     }

lib/feature/onboarding/route.dart

@@ -7,7 +7,8 @@ import 'package:injectable/injectable.dart';
 
 @named
 @Singleton(as: CompassBaseRoute)
-class OnBoardingRoute extends CompassRouteParameterless<OnBoardingRouteData> {
+class OnBoardingRoute extends CompassRouteParameterless<OnBoardingRouteData>
+    implements IndependentSeedRoute {
   OnBoardingRoute(
     @Named.from(ChooseNetworkRoute) CompassBaseRoute chooseNetworkRoute,
   ) : super(

lib/feature/root_device_alert/domain/root_device_delegate.dart

@@ -0,0 +1,36 @@
+import 'dart:io';
+
+import 'package:injectable/injectable.dart';
+import 'package:root_checker_plus/root_checker_plus.dart';
+import 'package:shared_preferences/shared_preferences.dart';
+
+@injectable
+class RootDeviceDelegate {
+  static const userKnowsRootKey = 'user_know_root';
+
+  Future<bool> get isShowRootScreen async {
+    return await _isRootDevice && !(await _isUserKnowRoot);
+  }
+
+  Future<bool> get _isRootDevice async {
+    if (Platform.isAndroid) {
+      return (await RootCheckerPlus.isRootChecker()) ?? false;
+    } else if (Platform.isIOS) {
+      return (await RootCheckerPlus.isJailbreak()) ?? false;
+    }
+
+    return true;
+  }
+
+  Future<bool> get _isUserKnowRoot async {
+    final prefs = await SharedPreferences.getInstance();
+
+    return prefs.getBool(userKnowsRootKey) ?? false;
+  }
+
+  Future<bool> setUserKnowRoot() async {
+    final prefs = await SharedPreferences.getInstance();
+
+    return prefs.setBool(userKnowsRootKey, true);
+  }
+}