@naculus/connect-appkit-vue 0.2.4 → 0.2.6

package/README.md

@@ -4,10 +4,11 @@
 
 > **Components have parity with React. Composables do not.** All 28 components
 > are generated from the same Stencil source, so anything visual works the same
-> in both. The logic layer does not: this package exports six composables —
-> `useAccounts`, `useCapabilities`, `useChain`, `usePassphraseGate`,
-> `useSolanaBalance`, `useSolanaRoles` — against React's 55, so session keys,
-> simulation and the transaction lifecycle are React-only today.
+> in both. The Vue logic layer currently covers 43 of 51 parity targets. Message
+> signing and EVM/Solana transaction actions are available through caller-owned
+> functions, and SIWX auth/session state is available through caller-owned
+> actions. Session keys and parts of the transaction lifecycle remain
+> React-only today.
 >
 > `useCapabilities` (the EIP-5792 query) and `useSolanaRoles` (which of
 > `identity` / `signer` / `payer` the connected Solana wallet can fill) are not
@@ -50,6 +51,39 @@ import "@naculus/connect-appkit-vue";
 </script>
 ```
 
+### Restoring SIWX sessions
+
+`useSIWxSession` and `useSiwxAuthSession` are reactive shells: they do not read
+storage or validate session dates. Before exposing a persisted session or SIWX
+result to either composable, the caller must apply the shared appkit-core
+policy. This rejects expired sessions, not-yet-valid sessions, and malformed
+date strings instead of restoring them.
+
+```ts
+import {
+  isSiwxExpired,
+  isSiwxNotBeforeValid,
+  type SiwxResultLike,
+} from "@naculus/connect-appkit-core";
+import { shallowRef } from "vue";
+
+const restoredResult = shallowRef<SiwxResultLike | null>(null);
+const candidate = await loadPersistedSiwxResult();
+const now = new Date();
+
+if (
+  candidate &&
+  !isSiwxExpired(candidate, now) &&
+  isSiwxNotBeforeValid(candidate, now)
+) {
+  restoredResult.value = candidate;
+}
+
+// Pass restoredResult to useSiwxAuthSession. For useSIWxSession, expose the
+// corresponding session only after the same check and provide isExpired from
+// your caller-owned session policy.
+```
+
 ## License
 
 MIT