decane-connect-kit 2.0.0 → 2.0.1

package/dist/index.js

@@ -22,6 +22,7 @@ __export(errors_exports, {
   NewDeviceError: () => NewDeviceError,
   OriginNotAllowedError: () => OriginNotAllowedError,
   PromptPinNotConfiguredError: () => PromptPinNotConfiguredError,
+  ReconnectRequiredError: () => ReconnectRequiredError,
   RecoveryFailedError: () => RecoveryFailedError,
   RecoveryWalletMismatchError: () => RecoveryWalletMismatchError,
   SessionExpiredError: () => SessionExpiredError,
@@ -31,7 +32,7 @@ __export(errors_exports, {
   WebAuthnNotSupportedError: () => WebAuthnNotSupportedError,
   WrongPasswordError: () => WrongPasswordError
 });
-var DecaneConnectError, InvalidApiKeyError, OriginNotAllowedError, SessionExpiredError, UnlockRequiredError, UserCancelledError, WebAuthnNotSupportedError, InvalidPinError, CallSequenceError, NetworkError, ShareCorruptedError, NewDeviceError, PromptPinNotConfiguredError, AttestationError, RecoveryFailedError, InvalidRecoveryFileError, WrongPasswordError, RecoveryWalletMismatchError, ExportNotAuthorizedError;
+var DecaneConnectError, InvalidApiKeyError, OriginNotAllowedError, SessionExpiredError, UnlockRequiredError, ReconnectRequiredError, UserCancelledError, WebAuthnNotSupportedError, InvalidPinError, CallSequenceError, NetworkError, ShareCorruptedError, NewDeviceError, PromptPinNotConfiguredError, AttestationError, RecoveryFailedError, InvalidRecoveryFileError, WrongPasswordError, RecoveryWalletMismatchError, ExportNotAuthorizedError;
 var init_errors = __esm({
   "src/social/errors.ts"() {
     "use strict";
@@ -63,6 +64,15 @@ var init_errors = __esm({
         super("UNLOCK_REQUIRED", "Wallet must be unlocked before signing", true);
       }
     };
+    ReconnectRequiredError = class extends DecaneConnectError {
+      constructor() {
+        super(
+          "RECONNECT_REQUIRED",
+          "Your session ended \u2014 sign in again to unlock this wallet",
+          true
+        );
+      }
+    };
     UserCancelledError = class extends DecaneConnectError {
       constructor() {
         super("USER_CANCELLED", "User cancelled the operation", true);
@@ -2162,6 +2172,13 @@ var TeeClient = class {
     await verifyTeeAttestation(this.teeUrl, nonceHex);
     this.attested = true;
   }
+  /**
+   * Opens a signing session and returns the addresses the TEE derived from the
+   * key it actually reconstructed — authoritative, unlike the backend's
+   * recorded copy, which nothing else can verify. Returns null if the TEE
+   * couldn't derive them (older signer build, or a transient share-fetch
+   * failure); callers fall back to the backend's addresses in that case.
+   */
   async openSession(deviceShare, jwt) {
     await this.ensureAttested();
     const res = await fetch(`${this.teeUrl}/signer/session`, {
@@ -2170,7 +2187,9 @@ var TeeClient = class {
       body: JSON.stringify({ deviceShare: bytesToBase64(deviceShare) })
     });
     if (!res.ok) throw new Error("session open failed");
-    this.handle = (await res.json()).handle;
+    const body = await res.json();
+    this.handle = body.handle;
+    return body.addresses ?? null;
   }
   /**
    * Flow B: exchange a recovery share (from a recovery-share file) for a
@@ -2303,9 +2322,24 @@ var SessionManager = class {
       window.addEventListener("pagehide", () => this.end());
     }
   }
-  async start(deviceShare, jwt, addresses) {
+  /**
+   * Opens the TEE session and resolves which addresses this wallet really has.
+   *
+   * `fallback` is whatever the backend recorded; the TEE's answer is derived
+   * from the signing key itself and therefore outranks it. Returns the
+   * resolved addresses so callers can propagate the corrected values rather
+   * than continuing to use a stale record.
+   */
+  async start(deviceShare, jwt, fallback) {
     this.tee = new TeeClient(this.teeUrl);
-    await this.tee.openSession(deviceShare, jwt);
+    const verified = await this.tee.openSession(deviceShare, jwt);
+    const addresses = verified ?? fallback;
+    if (!addresses) {
+      this.tee = null;
+      throw new Error(
+        "No addresses available for this wallet \u2014 the signer could not derive them and none are recorded"
+      );
+    }
     this.evmAddress = addresses.evm;
     this.solanaAddress = addresses.solana;
     this.expiresAt = Date.now() + this.durationMs;
@@ -2315,6 +2349,7 @@ var SessionManager = class {
       this.events.emit("session-expired");
     }, this.durationMs);
     this.events.emit("session-started");
+    return addresses;
   }
   end() {
     void this.tee?.closeSession();
@@ -2365,6 +2400,11 @@ async function splitMaster(master, version = 1) {
   if (parts.length !== 3) throw new Error("unexpected share count");
   return { device: parts[0], server: parts[1], recovery: parts[2], version };
 }
+async function combineShares(a, b) {
+  const master = await combine([a, b]);
+  if (master.length !== 32) throw new Error("reconstruction produced wrong length");
+  return master;
+}
 
 // src/social/crypto/wrap.ts
 function buf(u) {
@@ -2809,6 +2849,18 @@ async function createDecaneConnect(config) {
       }
     };
   }
+  async function persistRotatedDeviceShare(userId, deviceShare) {
+    const stored = await storage.getShare(userId);
+    if (!stored) {
+      throw new CallSequenceError(
+        "Share set was rotated but this device has no stored share to update. Recover the wallet on this device before rotating."
+      );
+    }
+    const wrappingKey = await getWrappingKey(stored);
+    const iv = generateRandomBytes(12);
+    const wrappedDeviceShare = await aesGcmEncrypt(wrappingKey, deviceShare, iv);
+    await storage.putShare({ ...stored, wrappedDeviceShare, iv });
+  }
   async function getWrappingKey(stored) {
     if (stored.unlockMethod === "passkey") {
       const prfOutput = await getPrfOutput({
@@ -2944,8 +2996,15 @@ async function createDecaneConnect(config) {
         console.warn("decane-connect-kit: wrapped share backup failed; user can retry from settings.", e);
       }
     }
-    await session.start(shareSet.device, jwt, addresses);
+    const confirmed = await session.start(shareSet.device, jwt, addresses);
     zeroize(shareSet.device);
+    if (confirmed.evm.toLowerCase() !== addresses.evm.toLowerCase()) {
+      console.warn(
+        `decane-connect-kit: signer derived a different EVM address (${confirmed.evm}) than this device did (${addresses.evm}) during setup. Using the signer's.`
+      );
+    }
+    addresses.evm = evmAddress = confirmed.evm;
+    addresses.solana = solanaAddress = confirmed.solana;
     if (config.offerRecoveryAtSignup !== false && config.onRecoveryShareOffer) {
       try {
         const choice = await config.onRecoveryShareOffer({ evmAddress, solanaAddress });
@@ -2969,15 +3028,15 @@ async function createDecaneConnect(config) {
   }
   async function returningUserUnlock(userId, jwt) {
     const rawAddresses = await api.getAddresses(jwt);
-    if (!rawAddresses.evm || !rawAddresses.solana) {
-      throw new CallSequenceError(
-        "No addresses are recorded for this user \u2014 inconsistent server state"
-      );
-    }
-    const addresses = { evm: rawAddresses.evm, solana: rawAddresses.solana };
+    const recordedAddresses = rawAddresses.evm && rawAddresses.solana ? { evm: rawAddresses.evm, solana: rawAddresses.solana } : null;
     const stored = await storage.getShare(userId);
     let deviceShare;
     if (!stored) {
+      if (!config.onRecoveryRotated) {
+        throw new CallSequenceError(
+          "Recovery rotates the share set and issues a new recovery file, but no onRecoveryRotated callback is configured to save it. Configure onRecoveryRotated before allowing recovery."
+        );
+      }
       deviceShare = await recoverDeviceShare({
         userId,
         jwt,
@@ -2988,13 +3047,11 @@ async function createDecaneConnect(config) {
         onProgress: config.onRecoveryProgress,
         promptForRecoveryFile: config.promptForRecoveryFile,
         onNewRecoveryShare: async (recoveryShare, shareSetVersion) => {
-          if (!config.onRecoveryRotated) {
-            console.warn("decane-connect-kit: share set rotated after recovery, but no onRecoveryRotated callback is configured \u2014 the user has no way to save a new recovery-share file.");
-            return;
-          }
-          const { password, passwordHint } = await config.onRecoveryRotated({ evmAddress: addresses.evm, solanaAddress: addresses.solana });
-          const file = await buildRecoveryShareFile(recoveryShare, password, addresses, shareSetVersion, passwordHint);
-          await config.onRecoveryFileReady?.(file, recoveryShareFileName(addresses.evm));
+          if (!config.onRecoveryRotated) return;
+          if (!recordedAddresses) return;
+          const { password, passwordHint } = await config.onRecoveryRotated({ evmAddress: recordedAddresses.evm, solanaAddress: recordedAddresses.solana });
+          const file = await buildRecoveryShareFile(recoveryShare, password, recordedAddresses, shareSetVersion, passwordHint);
+          await config.onRecoveryFileReady?.(file, recoveryShareFileName(recordedAddresses.evm));
           await api.markRecoveryShareSaved(jwt);
         }
       });
@@ -3013,8 +3070,13 @@ async function createDecaneConnect(config) {
         throw stored.unlockMethod === "pin" ? new InvalidPinError() : new ShareCorruptedError();
       }
     }
-    await session.start(deviceShare, jwt, addresses);
+    const addresses = await session.start(deviceShare, jwt, recordedAddresses);
     zeroize(deviceShare);
+    if (recordedAddresses && recordedAddresses.evm.toLowerCase() !== addresses.evm.toLowerCase()) {
+      console.warn(
+        `decane-connect-kit: recorded EVM address (${recordedAddresses.evm}) does not match the signing key (${addresses.evm}). Using the signing key's address; the record has been corrected.`
+      );
+    }
     return addresses;
   }
   async function handleAuthResult(result) {
@@ -3076,14 +3138,24 @@ async function createDecaneConnect(config) {
       return handleAuthResult(result);
     },
     async unlock() {
-      if (!auth)
-        throw new CallSequenceError("Not connected \u2014 call connect() first");
+      if (!auth) {
+        throw persisted ? new ReconnectRequiredError() : new CallSequenceError("Not connected \u2014 call connect() first");
+      }
       if (session.isActive()) return;
       await returningUserUnlock(auth.userId, auth.jwt);
     },
     isUnlocked() {
       return session.isActive();
     },
+    /**
+     * True when we have a persisted identity but no live auth state, i.e.
+     * unlock() cannot succeed and the user must sign in again. Exposed on the
+     * client (not just the React context) so non-React consumers can branch on
+     * it without having to catch ReconnectRequiredError.
+     */
+    needsReconnect() {
+      return !auth && !!persisted;
+    },
     sessionExpiresAt() {
       return session.expiresAtTimestamp();
     },
@@ -3176,10 +3248,12 @@ async function createDecaneConnect(config) {
       const tee = session.requireActive();
       const result = await tee.rotateShares(auth.jwt);
       try {
+        await persistRotatedDeviceShare(auth.userId, result.deviceShare);
+        const addresses = await deriveAddressesFromShares(result.deviceShare, result.recoveryShare);
         const file = await buildRecoveryShareFile(
           result.recoveryShare,
           opts.password,
-          auth.addresses,
+          addresses,
           result.shareSetVersion,
           opts.passwordHint
         );
@@ -3195,11 +3269,13 @@ async function createDecaneConnect(config) {
       const tee = session.requireActive();
       const result = await tee.exportPortableBackup(auth.jwt);
       try {
+        await persistRotatedDeviceShare(auth.userId, result.deviceShare);
+        const addresses = await deriveAddressesFromShares(result.deviceShare, result.recoveryShare);
         return await buildPortableBackup(
           result.deviceShare,
           result.recoveryShare,
           opts.password,
-          auth.addresses,
+          addresses,
           result.shareSetVersion,
           opts.passwordHint
         );
@@ -3271,6 +3347,17 @@ function b64uToBuffer(b64u) {
 function toHex(bytes) {
   return "0x" + Array.from(bytes).map((b) => b.toString(16).padStart(2, "0")).join("");
 }
+async function deriveAddressesFromShares(a, b) {
+  const master = await combineShares(a, b);
+  try {
+    return {
+      evm: new Wallet(toHex(master)).address,
+      solana: Keypair.fromSeed(master).publicKey.toBase58()
+    };
+  } finally {
+    zeroize(master);
+  }
+}
 
 // src/social/index.ts
 init_errors();
@@ -4196,6 +4283,15 @@ function countdown(expiresAt) {
   const secs = Math.max(0, Math.round((expiresAt - Date.now()) / 1e3));
   return `${Math.floor(secs / 60)}m ${String(secs % 60).padStart(2, "0")}s`;
 }
+function downloadJson(data, filename) {
+  const blob = new Blob([JSON.stringify(data, null, 2)], { type: "application/json" });
+  const url = URL.createObjectURL(blob);
+  const a = document.createElement("a");
+  a.href = url;
+  a.download = filename;
+  a.click();
+  URL.revokeObjectURL(url);
+}
 function CopyButton({ value }) {
   const [copied, setCopied] = useState2(false);
   async function copy() {
@@ -4223,7 +4319,54 @@ function CopyButton({ value }) {
     copied ? "\u2713" : "copy"
   );
 }
-function AddressRow({ label, address }) {
+function useBalance(kind, address, chain, rpcUrls) {
+  const [state, setState] = useState2({ loading: false, value: null, symbol: kind === "evm" ? "ETH" : "SOL" });
+  useEffect2(() => {
+    if (!address || !chain) return;
+    let cancelled = false;
+    setState((s) => ({ ...s, loading: true }));
+    (async () => {
+      try {
+        if (kind === "evm") {
+          const rpcUrl = rpcUrls?.[chain] ?? DEFAULT_RPCS[chain];
+          if (!rpcUrl) {
+            if (!cancelled) setState({ loading: false, value: null, symbol: "ETH" });
+            return;
+          }
+          const { JsonRpcProvider, formatEther } = await import("ethers");
+          const wei = await new JsonRpcProvider(rpcUrl).getBalance(address);
+          if (!cancelled) setState({ loading: false, value: formatEther(wei), symbol: "ETH" });
+        } else {
+          const cluster = chain.slice("solana:".length);
+          const endpoint = rpcUrls?.[chain] ?? (cluster === "devnet" ? "https://api.devnet.solana.com" : "https://api.mainnet-beta.solana.com");
+          const { Connection, PublicKey, LAMPORTS_PER_SOL } = await import("@solana/web3.js");
+          const lamports = await new Connection(endpoint).getBalance(new PublicKey(address));
+          if (!cancelled) setState({ loading: false, value: String(lamports / LAMPORTS_PER_SOL), symbol: "SOL" });
+        }
+      } catch {
+        if (!cancelled) setState({ loading: false, value: null, symbol: kind === "evm" ? "ETH" : "SOL" });
+      }
+    })();
+    return () => {
+      cancelled = true;
+    };
+  }, [kind, address, chain, rpcUrls]);
+  return state;
+}
+function formatBalance(value) {
+  if (value == null) return "\u2014";
+  const n = Number(value);
+  if (!Number.isFinite(n)) return value;
+  return n === 0 ? "0" : n < 1e-4 ? "<0.0001" : n.toFixed(4).replace(/\.?0+$/, "");
+}
+function AddressRow({
+  label,
+  address,
+  kind,
+  chain,
+  rpcUrls
+}) {
+  const balance = useBalance(kind, address, chain, rpcUrls);
   const short = `${address.slice(0, 8)}\u2026${address.slice(-6)}`;
   return /* @__PURE__ */ React3.createElement("div", { style: {
     background: "var(--dc-surface)",
@@ -4231,7 +4374,233 @@ function AddressRow({ label, address }) {
     borderRadius: 10,
     padding: "10px 14px",
     marginBottom: 8
-  } }, /* @__PURE__ */ React3.createElement("div", { style: { fontSize: 10, fontWeight: 700, color: "var(--dc-text-muted)", letterSpacing: "0.06em", textTransform: "uppercase", marginBottom: 5 } }, label), /* @__PURE__ */ React3.createElement("div", { style: { display: "flex", alignItems: "center", justifyContent: "space-between", gap: 8 } }, /* @__PURE__ */ React3.createElement("span", { style: { fontSize: 13, fontFamily: "monospace", color: "var(--dc-text)", letterSpacing: "0.02em" } }, short), /* @__PURE__ */ React3.createElement(CopyButton, { value: address })));
+  } }, /* @__PURE__ */ React3.createElement("div", { style: { display: "flex", alignItems: "center", justifyContent: "space-between", marginBottom: 5 } }, /* @__PURE__ */ React3.createElement("span", { style: { fontSize: 10, fontWeight: 700, color: "var(--dc-text-muted)", letterSpacing: "0.06em", textTransform: "uppercase" } }, label), /* @__PURE__ */ React3.createElement("span", { style: { fontSize: 11, fontFamily: "monospace", color: "var(--dc-text)" } }, balance.loading ? "\u2026" : `${formatBalance(balance.value)} ${balance.symbol}`)), /* @__PURE__ */ React3.createElement("div", { style: { display: "flex", alignItems: "center", justifyContent: "space-between", gap: 8 } }, /* @__PURE__ */ React3.createElement("span", { style: { fontSize: 13, fontFamily: "monospace", color: "var(--dc-text)", letterSpacing: "0.02em" } }, short), /* @__PURE__ */ React3.createElement(CopyButton, { value: address })));
+}
+function SignInView({
+  onGoogleSignIn,
+  onEmailStart,
+  onEmailVerify,
+  authMethods,
+  resumeHint
+}) {
+  const [googleLoading, setGoogleLoading] = useState2(false);
+  const [email, setEmail] = useState2("");
+  const [code, setCode] = useState2("");
+  const [emailSent, setEmailSent] = useState2(false);
+  const [emailLoading, setEmailLoading] = useState2(false);
+  const [error, setError] = useState2("");
+  async function handleGoogle() {
+    setError("");
+    setGoogleLoading(true);
+    try {
+      await onGoogleSignIn();
+    } catch (e) {
+      setError(e.message);
+      setGoogleLoading(false);
+    }
+  }
+  async function handleEmailStart(e) {
+    e.preventDefault();
+    setError("");
+    setEmailLoading(true);
+    try {
+      await onEmailStart(email);
+      setEmailSent(true);
+    } catch (e2) {
+      setError(e2.message);
+    } finally {
+      setEmailLoading(false);
+    }
+  }
+  async function handleEmailVerify(e) {
+    e.preventDefault();
+    setError("");
+    setEmailLoading(true);
+    try {
+      await onEmailVerify(email, code);
+    } catch (e2) {
+      setError(e2.message);
+    } finally {
+      setEmailLoading(false);
+    }
+  }
+  const inputStyle = {
+    width: "100%",
+    background: "var(--dc-surface)",
+    border: "1px solid var(--dc-border)",
+    borderRadius: 8,
+    color: "var(--dc-text)",
+    padding: "9px 12px",
+    fontSize: 13,
+    outline: "none",
+    fontFamily: "inherit",
+    boxSizing: "border-box"
+  };
+  return /* @__PURE__ */ React3.createElement("div", { style: { padding: "0 16px 16px" } }, resumeHint && /* @__PURE__ */ React3.createElement("div", { style: { fontSize: 12, color: "var(--dc-text-muted)", marginBottom: 12, textAlign: "center" } }, "Welcome back \u2014 sign in again to resume ", resumeHint), authMethods.includes("google") && /* @__PURE__ */ React3.createElement(
+    "button",
+    {
+      onClick: handleGoogle,
+      disabled: googleLoading,
+      style: {
+        width: "100%",
+        padding: "10px 0",
+        marginBottom: 10,
+        background: "var(--dc-accent)",
+        color: "var(--dc-accent-text)",
+        border: "none",
+        borderRadius: 10,
+        fontSize: 13,
+        fontWeight: 700,
+        cursor: googleLoading ? "not-allowed" : "pointer",
+        opacity: googleLoading ? 0.7 : 1,
+        fontFamily: "inherit"
+      }
+    },
+    googleLoading ? "Redirecting\u2026" : "Continue with Google"
+  ), authMethods.includes("email") && /* @__PURE__ */ React3.createElement(React3.Fragment, null, authMethods.includes("google") && /* @__PURE__ */ React3.createElement("div", { style: { textAlign: "center", color: "var(--dc-text-muted)", fontSize: 12, margin: "10px 0" } }, "\u2014 or \u2014"), !emailSent ? /* @__PURE__ */ React3.createElement("form", { onSubmit: handleEmailStart, style: { display: "flex", gap: 8 } }, /* @__PURE__ */ React3.createElement(
+    "input",
+    {
+      type: "email",
+      required: true,
+      placeholder: "your@email.com",
+      value: email,
+      onChange: (e) => setEmail(e.target.value),
+      style: { ...inputStyle, flex: 1 }
+    }
+  ), /* @__PURE__ */ React3.createElement("button", { type: "submit", disabled: emailLoading, style: {
+    padding: "0 16px",
+    background: "var(--dc-surface)",
+    border: "1px solid var(--dc-border)",
+    borderRadius: 8,
+    color: "var(--dc-text)",
+    fontSize: 13,
+    cursor: "pointer",
+    fontFamily: "inherit"
+  } }, emailLoading ? "\u2026" : "Send code")) : /* @__PURE__ */ React3.createElement("form", { onSubmit: handleEmailVerify, style: { display: "flex", gap: 8 } }, /* @__PURE__ */ React3.createElement(
+    "input",
+    {
+      placeholder: "6-digit code",
+      value: code,
+      maxLength: 6,
+      autoFocus: true,
+      onChange: (e) => setCode(e.target.value.replace(/\D/g, "")),
+      style: { ...inputStyle, flex: 1, letterSpacing: 4, textAlign: "center" }
+    }
+  ), /* @__PURE__ */ React3.createElement("button", { type: "submit", disabled: emailLoading, style: {
+    padding: "0 16px",
+    background: "var(--dc-accent)",
+    color: "var(--dc-accent-text)",
+    border: "none",
+    borderRadius: 8,
+    fontSize: 13,
+    fontWeight: 700,
+    cursor: "pointer",
+    fontFamily: "inherit"
+  } }, emailLoading ? "\u2026" : "Verify"))), error && /* @__PURE__ */ React3.createElement("div", { style: { marginTop: 10, fontSize: 12, color: "var(--dc-danger, #ff5533)" } }, error));
+}
+function RecoverySection({
+  addresses,
+  onRotateShares,
+  onExportPortableBackup
+}) {
+  const [expanded, setExpanded] = useState2(false);
+  const [mode, setMode] = useState2(null);
+  const [password, setPassword] = useState2("");
+  const [passwordHint, setPasswordHint] = useState2("");
+  const [confirmed, setConfirmed] = useState2(false);
+  const [busy, setBusy] = useState2(false);
+  const [result, setResult] = useState2(null);
+  const [error, setError] = useState2("");
+  function reset() {
+    setMode(null);
+    setPassword("");
+    setPasswordHint("");
+    setConfirmed(false);
+    setError("");
+  }
+  async function handleGenerate() {
+    if (!addresses?.evm || !mode) return;
+    if (password.length < 8) {
+      setError("Password must be at least 8 characters.");
+      return;
+    }
+    if (mode === "portable" && !confirmed) {
+      setError("Confirm you understand the risk first.");
+      return;
+    }
+    setBusy(true);
+    setError("");
+    try {
+      if (mode === "share") {
+        const file = await onRotateShares({ password, passwordHint: passwordHint || void 0 });
+        downloadJson(file, `decane-recovery-${addresses.evm.slice(0, 8)}.json`);
+        setResult({ kind: "share", version: file.shareSetVersion });
+      } else {
+        const file = await onExportPortableBackup({ password, passwordHint: passwordHint || void 0 });
+        downloadJson(file, `decane-PORTABLE-BACKUP-${addresses.evm.slice(0, 8)}.json`);
+        setResult({ kind: "portable", version: file.shareSetVersion });
+      }
+      reset();
+    } catch (e) {
+      setError(e.message);
+    } finally {
+      setBusy(false);
+    }
+  }
+  const inputStyle = {
+    width: "100%",
+    background: "var(--dc-bg)",
+    border: "1px solid var(--dc-border)",
+    borderRadius: 8,
+    color: "var(--dc-text)",
+    padding: "8px 10px",
+    fontSize: 12,
+    outline: "none",
+    fontFamily: "inherit",
+    boxSizing: "border-box"
+  };
+  const btnStyle = {
+    padding: "8px 12px",
+    borderRadius: 8,
+    fontSize: 12,
+    fontWeight: 700,
+    cursor: "pointer",
+    fontFamily: "inherit",
+    border: "none"
+  };
+  return /* @__PURE__ */ React3.createElement("div", { style: { margin: "0 16px 14px", border: "1px solid var(--dc-border)", borderRadius: 10, overflow: "hidden" } }, /* @__PURE__ */ React3.createElement(
+    "button",
+    {
+      onClick: () => setExpanded((v) => !v),
+      style: {
+        width: "100%",
+        padding: "10px 14px",
+        background: "var(--dc-surface)",
+        border: "none",
+        display: "flex",
+        alignItems: "center",
+        justifyContent: "space-between",
+        cursor: "pointer",
+        fontFamily: "inherit"
+      }
+    },
+    /* @__PURE__ */ React3.createElement("span", { style: { fontSize: 12, fontWeight: 700, color: "var(--dc-text)" } }, "Recovery"),
+    /* @__PURE__ */ React3.createElement("span", { style: { fontSize: 11, color: "var(--dc-text-muted)" } }, expanded ? "\u25B2" : "\u25BC")
+  ), expanded && /* @__PURE__ */ React3.createElement("div", { style: { padding: "12px 14px", borderTop: "1px solid var(--dc-border)" } }, /* @__PURE__ */ React3.createElement("p", { style: { fontSize: 11, color: "var(--dc-text-muted)", lineHeight: 1.5, margin: "0 0 10px" } }, "Your wallet is split into three shares \u2014 device, server, and one that's yours to keep. Any two reconstruct it; one alone reveals nothing."), !mode && /* @__PURE__ */ React3.createElement("div", { style: { display: "flex", flexDirection: "column", gap: 8 } }, /* @__PURE__ */ React3.createElement("button", { onClick: () => {
+    reset();
+    setMode("share");
+  }, style: { ...btnStyle, background: "var(--dc-accent)", color: "var(--dc-accent-text)" } }, "Generate recovery-share file"), /* @__PURE__ */ React3.createElement("button", { onClick: () => {
+    reset();
+    setMode("portable");
+  }, style: { ...btnStyle, background: "transparent", border: "1px solid var(--dc-border)", color: "var(--dc-text)" } }, "Generate portable backup (Decane-is-down)")), mode === "share" && /* @__PURE__ */ React3.createElement("div", { style: { display: "flex", flexDirection: "column", gap: 8 } }, /* @__PURE__ */ React3.createElement("p", { style: { fontSize: 11, color: "var(--dc-text-muted)", margin: 0 } }, "One share \u2014 useless alone, safe to keep in a password manager or cloud drive. Generating a new one invalidates any previous recovery-share file."), /* @__PURE__ */ React3.createElement("input", { type: "password", placeholder: "Password (min 8 chars)", value: password, onChange: (e) => setPassword(e.target.value), style: inputStyle }), /* @__PURE__ */ React3.createElement("input", { placeholder: "Password hint (optional)", value: passwordHint, onChange: (e) => setPasswordHint(e.target.value), style: inputStyle }), error && /* @__PURE__ */ React3.createElement("div", { style: { fontSize: 11, color: "var(--dc-danger, #ff5533)" } }, error), /* @__PURE__ */ React3.createElement("div", { style: { display: "flex", gap: 8 } }, /* @__PURE__ */ React3.createElement("button", { onClick: handleGenerate, disabled: busy, style: { ...btnStyle, flex: 1, background: "var(--dc-accent)", color: "var(--dc-accent-text)" } }, busy ? "Generating\u2026" : "Generate & download"), /* @__PURE__ */ React3.createElement("button", { onClick: reset, style: { ...btnStyle, background: "transparent", border: "1px solid var(--dc-border)", color: "var(--dc-text-muted)" } }, "Cancel"))), mode === "portable" && /* @__PURE__ */ React3.createElement("div", { style: { display: "flex", flexDirection: "column", gap: 8 } }, /* @__PURE__ */ React3.createElement("div", { style: {
+    background: "rgba(255,85,51,0.08)",
+    border: "1px solid rgba(255,85,51,0.3)",
+    borderRadius: 8,
+    padding: "8px 10px",
+    fontSize: 11,
+    color: "#ff9977",
+    lineHeight: 1.5
+  } }, /* @__PURE__ */ React3.createElement("strong", { style: { display: "block", marginBottom: 3, color: "#ff5533" } }, "This file controls your wallet"), "Contains two shares \u2014 file plus password gives complete control. Keep it offline, not a cloud drive. This also invalidates your current recovery-share file."), /* @__PURE__ */ React3.createElement("label", { style: { display: "flex", alignItems: "center", gap: 6, fontSize: 11, color: "var(--dc-text)" } }, /* @__PURE__ */ React3.createElement("input", { type: "checkbox", checked: confirmed, onChange: (e) => setConfirmed(e.target.checked), style: { width: "auto" } }), "I understand this is a bearer secret"), /* @__PURE__ */ React3.createElement("input", { type: "password", placeholder: "Password (min 8 chars)", value: password, onChange: (e) => setPassword(e.target.value), style: inputStyle }), /* @__PURE__ */ React3.createElement("input", { placeholder: "Password hint (optional)", value: passwordHint, onChange: (e) => setPasswordHint(e.target.value), style: inputStyle }), error && /* @__PURE__ */ React3.createElement("div", { style: { fontSize: 11, color: "var(--dc-danger, #ff5533)" } }, error), /* @__PURE__ */ React3.createElement("div", { style: { display: "flex", gap: 8 } }, /* @__PURE__ */ React3.createElement("button", { onClick: handleGenerate, disabled: busy || !confirmed, style: { ...btnStyle, flex: 1, background: "var(--dc-accent)", color: "var(--dc-accent-text)" } }, busy ? "Generating\u2026" : "Generate & download"), /* @__PURE__ */ React3.createElement("button", { onClick: reset, style: { ...btnStyle, background: "transparent", border: "1px solid var(--dc-border)", color: "var(--dc-text-muted)" } }, "Cancel"))), result && /* @__PURE__ */ React3.createElement("div", { style: { marginTop: 10, fontSize: 11, color: "var(--dc-text-muted)", lineHeight: 1.5 } }, result.kind === "share" ? "Recovery-share file" : "Portable backup", " downloaded \u2014 share set is now version ", result.version, ". Any previous recovery file no longer works.")));
 }
 function SocialWalletModal({
   open,
@@ -4239,7 +4608,15 @@ function SocialWalletModal({
   theme = "auto",
   socialAuth,
   onUnlock,
-  onDisconnect
+  onDisconnect,
+  onGoogleSignIn,
+  onEmailStart,
+  onEmailVerify,
+  authMethods = ["google", "email"],
+  onRotateShares,
+  onExportPortableBackup,
+  rpcUrls,
+  chains
 }) {
   const [timer, setTimer] = useState2("");
   const [unlocking, setUnlocking] = useState2(false);
@@ -4288,6 +4665,9 @@ function SocialWalletModal({
       setDisconnecting(false);
     }
   }
+  const evmChain = chains?.find((c) => c.startsWith("evm:")) ?? "evm:11155111";
+  const solChain = chains?.find((c) => c.startsWith("solana:")) ?? "solana:mainnet";
+  const showSignIn = !socialAuth.addresses || socialAuth.needsReconnect;
   const modal = /* @__PURE__ */ React3.createElement(
     "div",
     {
@@ -4325,10 +4705,14 @@ function SocialWalletModal({
       borderRadius: 20,
       width: "100%",
       maxWidth: 380,
-      boxShadow: "0 24px 64px rgba(0,0,0,0.6), 0 0 0 1px rgba(255,255,255,0.04)",
-      overflow: "hidden"
+      maxHeight: "90vh",
+      overflowY: "auto",
+      boxShadow: "0 24px 64px rgba(0,0,0,0.6), 0 0 0 1px rgba(255,255,255,0.04)"
     } }, /* @__PURE__ */ React3.createElement("div", { style: {
       height: 2,
+      position: "sticky",
+      top: 0,
+      zIndex: 1,
       background: "linear-gradient(90deg, transparent, var(--dc-accent) 30%, var(--dc-accent) 70%, transparent)"
     } }), /* @__PURE__ */ React3.createElement("div", { style: { padding: "18px 20px 16px", display: "flex", alignItems: "center", gap: 10 } }, /* @__PURE__ */ React3.createElement("div", { style: {
       width: 34,
@@ -4357,7 +4741,7 @@ function SocialWalletModal({
         strokeLinecap: "round",
         strokeLinejoin: "round"
       }
-    ))), /* @__PURE__ */ React3.createElement("div", { style: { flex: 1 } }, /* @__PURE__ */ React3.createElement("div", { style: { fontSize: 15, fontWeight: 800, color: "var(--dc-text)", letterSpacing: "-0.02em" } }, "Social Wallet"), /* @__PURE__ */ React3.createElement("div", { style: { fontSize: 11, color: "var(--dc-text-muted)", marginTop: 1 } }, "Decane non-custodial \xB7 key split between device & server")), /* @__PURE__ */ React3.createElement(
+    ))), /* @__PURE__ */ React3.createElement("div", { style: { flex: 1 } }, /* @__PURE__ */ React3.createElement("div", { style: { fontSize: 15, fontWeight: 800, color: "var(--dc-text)", letterSpacing: "-0.02em" } }, "Social Wallet"), /* @__PURE__ */ React3.createElement("div", { style: { fontSize: 11, color: "var(--dc-text-muted)", marginTop: 1 } }, "Decane non-custodial \xB7 key split three ways")), /* @__PURE__ */ React3.createElement(
       "button",
       {
         onClick: onClose,
@@ -4377,7 +4761,16 @@ function SocialWalletModal({
         }
       },
       /* @__PURE__ */ React3.createElement("svg", { width: "12", height: "12", viewBox: "0 0 12 12", fill: "none" }, /* @__PURE__ */ React3.createElement("path", { d: "M1.5 1.5L10.5 10.5M10.5 1.5L1.5 10.5", stroke: "currentColor", strokeWidth: "1.5", strokeLinecap: "round" }))
-    )), /* @__PURE__ */ React3.createElement("div", { style: {
+    )), showSignIn ? /* @__PURE__ */ React3.createElement(
+      SignInView,
+      {
+        onGoogleSignIn,
+        onEmailStart,
+        onEmailVerify,
+        authMethods,
+        resumeHint: socialAuth.needsReconnect ? "your wallet" : void 0
+      }
+    ) : /* @__PURE__ */ React3.createElement(React3.Fragment, null, /* @__PURE__ */ React3.createElement("div", { style: {
       margin: "0 16px 14px",
       padding: "8px 14px",
       background: socialAuth.isUnlocked ? "rgba(18,183,106,0.08)" : "rgba(245,200,0,0.08)",
@@ -4397,7 +4790,14 @@ function SocialWalletModal({
       fontSize: 12,
       fontWeight: 700,
       color: socialAuth.isUnlocked ? "#12b76a" : "var(--dc-accent)"
-    } }, socialAuth.isUnlocked ? "Unlocked" : "Locked")), socialAuth.isUnlocked && timer && /* @__PURE__ */ React3.createElement("span", { style: { fontSize: 11, color: "var(--dc-text-muted)", fontFamily: "monospace" } }, "expires ", timer)), /* @__PURE__ */ React3.createElement("div", { style: { padding: "0 16px 16px" } }, socialAuth.addresses?.evm && /* @__PURE__ */ React3.createElement(AddressRow, { label: "EVM (Ethereum, Base, \u2026)", address: socialAuth.addresses.evm }), socialAuth.addresses?.solana && /* @__PURE__ */ React3.createElement(AddressRow, { label: "Solana", address: socialAuth.addresses.solana }), !socialAuth.addresses?.evm && !socialAuth.addresses?.solana && /* @__PURE__ */ React3.createElement("div", { style: { textAlign: "center", padding: "16px 0", color: "var(--dc-text-muted)", fontSize: 13 } }, "Unlock wallet to reveal addresses")), /* @__PURE__ */ React3.createElement("div", { style: {
+    } }, socialAuth.isUnlocked ? "Unlocked" : "Locked")), socialAuth.isUnlocked && timer && /* @__PURE__ */ React3.createElement("span", { style: { fontSize: 11, color: "var(--dc-text-muted)", fontFamily: "monospace" } }, "expires ", timer)), /* @__PURE__ */ React3.createElement("div", { style: { padding: "0 16px 14px" } }, socialAuth.addresses?.evm && /* @__PURE__ */ React3.createElement(AddressRow, { label: "EVM (Ethereum, Base, \u2026)", address: socialAuth.addresses.evm, kind: "evm", chain: evmChain, rpcUrls }), socialAuth.addresses?.solana && /* @__PURE__ */ React3.createElement(AddressRow, { label: "Solana", address: socialAuth.addresses.solana, kind: "solana", chain: solChain, rpcUrls })), socialAuth.isUnlocked && /* @__PURE__ */ React3.createElement(
+      RecoverySection,
+      {
+        addresses: socialAuth.addresses,
+        onRotateShares,
+        onExportPortableBackup
+      }
+    ), /* @__PURE__ */ React3.createElement("div", { style: {
       padding: "14px 16px",
       borderTop: "1px solid var(--dc-border)",
       display: "flex",
@@ -4442,7 +4842,7 @@ function SocialWalletModal({
         }
       },
       disconnecting ? "Signing out\u2026" : "Sign out"
-    )))
+    ))))
   );
   return createPortal2(modal, document.body);
 }
@@ -4460,7 +4860,8 @@ var DEFAULT_SOCIAL = {
   addresses: null,
   isNewUser: false,
   isUnlocked: false,
-  sessionExpiresAt: null
+  sessionExpiresAt: null,
+  needsReconnect: false
 };
 var DecaneContext = createContext(null);
 function hasSocial(mode) {
@@ -4520,7 +4921,7 @@ function DecaneKit({ config, children }) {
       sdk.on("disconnected", () => setSocialAuth(DEFAULT_SOCIAL));
       const saved = sdk.getAddresses();
       if (saved) {
-        setSocialAuth((p) => ({ ...p, addresses: saved, isUnlocked: false }));
+        setSocialAuth((p) => ({ ...p, addresses: saved, isUnlocked: false, needsReconnect: true }));
       }
       const params = new URLSearchParams(window.location.search);
       if (params.has("decane_jwt") || params.has("decane_error")) {
@@ -4534,7 +4935,8 @@ function DecaneKit({ config, children }) {
       addresses: result.addresses,
       isNewUser: result.isNewUser,
       isUnlocked: sdk?.isUnlocked() ?? false,
-      sessionExpiresAt: sdk?.sessionExpiresAt() ?? null
+      sessionExpiresAt: sdk?.sessionExpiresAt() ?? null,
+      needsReconnect: false
     });
   }
   const connectWithGoogle = useCallback3(async () => {
@@ -4561,7 +4963,8 @@ function DecaneKit({ config, children }) {
     setSocialAuth((p) => ({
       ...p,
       isUnlocked: sdk.isUnlocked(),
-      sessionExpiresAt: sdk.sessionExpiresAt()
+      sessionExpiresAt: sdk.sessionExpiresAt(),
+      needsReconnect: false
     }));
   }, []);
   const socialDisconnect = useCallback3(async () => {
@@ -4585,6 +4988,31 @@ function DecaneKit({ config, children }) {
     if (!sdk) throw new Error("Social wallet not connected");
     return sdk.signSolanaTransaction(tx);
   }, []);
+  const socialRotateShares = useCallback3(async (opts) => {
+    const sdk = socialRef.current;
+    if (!sdk) throw new Error("Social wallet not connected");
+    return sdk.rotateShares(opts);
+  }, []);
+  const socialExportPortableBackup = useCallback3(async (opts) => {
+    const sdk = socialRef.current;
+    if (!sdk) throw new Error("Social wallet not connected");
+    return sdk.exportPortableBackup(opts);
+  }, []);
+  const socialHasRecoveryShare = useCallback3(async () => {
+    const sdk = socialRef.current;
+    if (!sdk) throw new Error("Social wallet not connected");
+    return sdk.hasRecoveryShare();
+  }, []);
+  const socialShouldPromptRecovery = useCallback3(async () => {
+    const sdk = socialRef.current;
+    if (!sdk) throw new Error("Social wallet not connected");
+    return sdk.shouldPromptRecovery();
+  }, []);
+  const socialDismissRecoveryPrompt = useCallback3(async () => {
+    const sdk = socialRef.current;
+    if (!sdk) throw new Error("Social wallet not connected");
+    return sdk.dismissRecoveryPrompt();
+  }, []);
   const handleWalletConnect = useCallback3(
     (wallet, preference) => {
       walletRef.current.connect(wallet, preference).catch(console.error);
@@ -4612,6 +5040,11 @@ function DecaneKit({ config, children }) {
         socialSignMessage,
         socialSendTransaction,
         socialSignSolanaTransaction,
+        socialRotateShares,
+        socialExportPortableBackup,
+        socialHasRecoveryShare,
+        socialShouldPromptRecovery,
+        socialDismissRecoveryPrompt,
         socialModalOpen,
         openSocialModal,
         closeSocialModal
@@ -4642,7 +5075,15 @@ function DecaneKit({ config, children }) {
         theme,
         socialAuth,
         onUnlock: socialUnlock,
-        onDisconnect: socialDisconnect
+        onDisconnect: socialDisconnect,
+        onGoogleSignIn: connectWithGoogle,
+        onEmailStart: connectWithEmail,
+        onEmailVerify: verifyEmailCode2,
+        authMethods: config?.social?.authMethods ?? ["google", "email"],
+        onRotateShares: socialRotateShares,
+        onExportPortableBackup: socialExportPortableBackup,
+        rpcUrls: config?.social?.rpcUrls,
+        chains: config?.social?.chains
       }
     )
   );
@@ -4730,6 +5171,11 @@ function useSocialAuth() {
     isNewUser: socialAuth.isNewUser,
     addresses: socialAuth.addresses,
     sessionExpiresAt: socialAuth.sessionExpiresAt,
+    // True when addresses are known (from a previous visit) but there's no
+    // live session — unlock() will always throw in this state (every
+    // unlock requires a fresh JWT, and JWTs are never persisted). Route
+    // this into a real reconnect (signInWithGoogle / sendEmailCode), not unlock().
+    needsReconnect: socialAuth.needsReconnect,
     googleLoading,
     emailLoading,
     error,
@@ -4749,6 +5195,11 @@ function useSocialWallet() {
     socialSignMessage,
     socialSendTransaction,
     socialSignSolanaTransaction,
+    socialRotateShares,
+    socialExportPortableBackup,
+    socialHasRecoveryShare,
+    socialShouldPromptRecovery,
+    socialDismissRecoveryPrompt,
     openSocialModal,
     closeSocialModal,
     socialModalOpen
@@ -4798,6 +5249,26 @@ function useSocialWallet() {
       throw e;
     }
   }, [socialDisconnect]);
+  const rotateShares = useCallback4(
+    (opts) => run(() => socialRotateShares(opts)),
+    [socialRotateShares]
+  );
+  const exportPortableBackup = useCallback4(
+    (opts) => run(() => socialExportPortableBackup(opts)),
+    [socialExportPortableBackup]
+  );
+  const hasRecoveryShare = useCallback4(
+    () => run(() => socialHasRecoveryShare()),
+    [socialHasRecoveryShare]
+  );
+  const shouldPromptRecovery = useCallback4(
+    () => run(() => socialShouldPromptRecovery()),
+    [socialShouldPromptRecovery]
+  );
+  const dismissRecoveryPrompt = useCallback4(
+    () => run(() => socialDismissRecoveryPrompt()),
+    [socialDismissRecoveryPrompt]
+  );
   return {
     // State
     isConnected: !!socialAuth.addresses,
@@ -4805,6 +5276,11 @@ function useSocialWallet() {
     isNewUser: socialAuth.isNewUser,
     addresses: socialAuth.addresses,
     sessionExpiresAt: socialAuth.sessionExpiresAt,
+    // True when addresses are known (from a previous visit) but there's no
+    // live session — unlock() will always throw in this state (every
+    // unlock requires a fresh JWT, and JWTs are never persisted). Route
+    // this into a real reconnect (signInWithGoogle / sendEmailCode), not unlock().
+    needsReconnect: socialAuth.needsReconnect,
     // Modal
     modalOpen: socialModalOpen,
     openModal: openSocialModal,
@@ -4816,6 +5292,12 @@ function useSocialWallet() {
     signMessage,
     sendTransaction,
     signSolanaTransaction: signSolanaTransaction2,
+    // Recovery (2-of-3 Shamir share set)
+    rotateShares,
+    exportPortableBackup,
+    hasRecoveryShare,
+    shouldPromptRecovery,
+    dismissRecoveryPrompt,
     loading,
     error,
     clearError: () => setError(null)
@@ -5061,6 +5543,7 @@ export {
   NewDeviceError,
   OriginNotAllowedError,
   PromptPinNotConfiguredError,
+  ReconnectRequiredError,
   RecoveryFailedError,
   RecoveryWalletMismatchError,
   SessionExpiredError,