decane-connect-kit 2.0.0 → 2.0.2

package/dist/index.d.cts

@@ -316,6 +316,12 @@ interface DecaneConnect {
     verifyEmailCode(email: string, code: string): Promise<ConnectResult>;
     unlock(): Promise<void>;
     isUnlocked(): boolean;
+    /**
+     * True when the user's identity is known from a previous visit but there is
+     * no live session, so unlock() cannot succeed and they must sign in again.
+     * Check this before offering an "Unlock" action.
+     */
+    needsReconnect(): boolean;
     sessionExpiresAt(): number | null;
     signMessage(req: SignMessageRequest): Promise<string>;
     sendTransaction(req: SendTransactionRequest): Promise<string>;
@@ -401,6 +407,22 @@ declare class SessionExpiredError extends DecaneConnectError {
 declare class UnlockRequiredError extends DecaneConnectError {
     constructor();
 }
+/**
+ * unlock() was called after a page reload (or any other loss of the in-memory
+ * auth state). We still know *who* the user is — their identity and addresses
+ * are persisted — but unlock() needs a live JWT to open a TEE session, and
+ * JWTs are deliberately never persisted. So there is no unlock() that can
+ * succeed here; the user has to re-authenticate.
+ *
+ * This is its own error type rather than a generic CallSequenceError because
+ * it is a *routing* signal, not a programming mistake: the correct response is
+ * to show the sign-in UI, which callers can only do reliably if they can tell
+ * this case apart from "you never called connect()". Prefer checking
+ * needsReconnect() up front so this never has to be caught at all.
+ */
+declare class ReconnectRequiredError extends DecaneConnectError {
+    constructor();
+}
 declare class UserCancelledError extends DecaneConnectError {
     constructor();
 }
@@ -558,6 +580,16 @@ interface SocialAuthState {
     isNewUser: boolean;
     isUnlocked: boolean;
     sessionExpiresAt: number | null;
+    /**
+     * True when `addresses` came from persisted (localStorage) identity only,
+     * with no live session. This is NOT the same as "locked" — every unlock()
+     * requires a fresh, valid JWT to open a TEE session, and JWTs are
+     * deliberately never persisted (short-lived, security-sensitive), so
+     * there is no legitimate "just unlock" path in this state. A consumer
+     * should route this into a full reconnect (connectWithGoogle() /
+     * connectWithEmail()), not unlock() — which will always throw here.
+     */
+    needsReconnect: boolean;
 }
 interface DecaneKitProps {
     config?: DecaneConfig;
@@ -572,8 +604,24 @@ interface SocialWalletModalProps {
     socialAuth: SocialAuthState;
     onUnlock: () => Promise<void>;
     onDisconnect: () => Promise<void>;
+    onGoogleSignIn: () => Promise<void>;
+    onEmailStart: (email: string) => Promise<{
+        codeRequired: true;
+    }>;
+    onEmailVerify: (email: string, code: string) => Promise<void>;
+    authMethods?: Array<"google" | "email">;
+    onRotateShares: (opts: {
+        password: string;
+        passwordHint?: string;
+    }) => Promise<RecoveryShareFile>;
+    onExportPortableBackup: (opts: {
+        password: string;
+        passwordHint?: string;
+    }) => Promise<PortableBackup>;
+    rpcUrls?: Record<string, string>;
+    chains?: string[];
 }
-declare function SocialWalletModal({ open, onClose, theme, socialAuth, onUnlock, onDisconnect, }: SocialWalletModalProps): React.ReactPortal | null;
+declare function SocialWalletModal({ open, onClose, theme, socialAuth, onUnlock, onDisconnect, onGoogleSignIn, onEmailStart, onEmailVerify, authMethods, onRotateShares, onExportPortableBackup, rpcUrls, chains, }: SocialWalletModalProps): React.ReactPortal | null;
 
 declare function useSocialAuth(): {
     isConnected: boolean;
@@ -584,6 +632,7 @@ declare function useSocialAuth(): {
         solana?: string;
     } | null;
     sessionExpiresAt: number | null;
+    needsReconnect: boolean;
     googleLoading: boolean;
     emailLoading: boolean;
     error: string | null;
@@ -605,6 +654,7 @@ declare function useSocialWallet(): {
         solana?: string;
     } | null;
     sessionExpiresAt: number | null;
+    needsReconnect: boolean;
     modalOpen: boolean;
     openModal: () => void;
     closeModal: () => void;
@@ -620,6 +670,17 @@ declare function useSocialWallet(): {
         gasPrice?: bigint;
     }) => Promise<string>;
     signSolanaTransaction: (tx: Uint8Array) => Promise<Uint8Array<ArrayBufferLike>>;
+    rotateShares: (opts: {
+        password: string;
+        passwordHint?: string;
+    }) => Promise<RecoveryShareFile>;
+    exportPortableBackup: (opts: {
+        password: string;
+        passwordHint?: string;
+    }) => Promise<PortableBackup>;
+    hasRecoveryShare: () => Promise<boolean>;
+    shouldPromptRecovery: () => Promise<boolean>;
+    dismissRecoveryPrompt: () => Promise<void>;
     loading: boolean;
     error: string | null;
     clearError: () => void;
@@ -696,4 +757,4 @@ declare function useSignTypedData(): {
     reset: () => void;
 };
 
-export { type ActiveSession, AttestationError, type AuthResult, BUILT_IN_CHAINS, type CAIP25Method, type CAIP25SessionRequest, type CAIP25SessionResult, CHAINS, CallSequenceError, type Chain, type ChainDescriptor, type ChainId, type ChainScope, type ChainSupport, type ChainType, type ConnectMode, type ConnectResult, type DecaneConfig, type DecaneConnect, type DecaneConnectConfig, DecaneConnectError, DecaneError, DecaneErrorCode, DecaneKit, type DecaneProvider, ExportNotAuthorizedError, InvalidApiKeyError, InvalidPinError, InvalidRecoveryFileError, NetworkError, NewDeviceError, OriginNotAllowedError, type PortableBackup, PromptPinNotConfiguredError, RecoveryFailedError, type RecoveryProgress, type RecoveryShareFile, RecoveryWalletMismatchError, type SdkEvent, type SendTransactionRequest, SessionExpiredError, ShareCorruptedError, type SignMessageRequest, type SocialAuthState, type SocialConfig, SocialWalletModal, type Theme, type TxParams, type UnifiedWalletAccount, UnlockRequiredError, UserCancelledError, WalletSelector, WebAuthnNotSupportedError, type WrappedShareMeta, WrongPasswordError, createDecane, createDecaneConnect, startEmailAuth, useChainSwitch, useDecane, useSendTransaction, useSignMessage, useSignTypedData, useSocialAuth, useSocialWallet, useWalletSelector, verifyEmailCode };
+export { type ActiveSession, AttestationError, type AuthResult, BUILT_IN_CHAINS, type CAIP25Method, type CAIP25SessionRequest, type CAIP25SessionResult, CHAINS, CallSequenceError, type Chain, type ChainDescriptor, type ChainId, type ChainScope, type ChainSupport, type ChainType, type ConnectMode, type ConnectResult, type DecaneConfig, type DecaneConnect, type DecaneConnectConfig, DecaneConnectError, DecaneError, DecaneErrorCode, DecaneKit, type DecaneProvider, ExportNotAuthorizedError, InvalidApiKeyError, InvalidPinError, InvalidRecoveryFileError, NetworkError, NewDeviceError, OriginNotAllowedError, type PortableBackup, PromptPinNotConfiguredError, ReconnectRequiredError, RecoveryFailedError, type RecoveryProgress, type RecoveryShareFile, RecoveryWalletMismatchError, type SdkEvent, type SendTransactionRequest, SessionExpiredError, ShareCorruptedError, type SignMessageRequest, type SocialAuthState, type SocialConfig, SocialWalletModal, type Theme, type TxParams, type UnifiedWalletAccount, UnlockRequiredError, UserCancelledError, WalletSelector, WebAuthnNotSupportedError, type WrappedShareMeta, WrongPasswordError, createDecane, createDecaneConnect, startEmailAuth, useChainSwitch, useDecane, useSendTransaction, useSignMessage, useSignTypedData, useSocialAuth, useSocialWallet, useWalletSelector, verifyEmailCode };

package/dist/index.d.ts

@@ -316,6 +316,12 @@ interface DecaneConnect {
     verifyEmailCode(email: string, code: string): Promise<ConnectResult>;
     unlock(): Promise<void>;
     isUnlocked(): boolean;
+    /**
+     * True when the user's identity is known from a previous visit but there is
+     * no live session, so unlock() cannot succeed and they must sign in again.
+     * Check this before offering an "Unlock" action.
+     */
+    needsReconnect(): boolean;
     sessionExpiresAt(): number | null;
     signMessage(req: SignMessageRequest): Promise<string>;
     sendTransaction(req: SendTransactionRequest): Promise<string>;
@@ -401,6 +407,22 @@ declare class SessionExpiredError extends DecaneConnectError {
 declare class UnlockRequiredError extends DecaneConnectError {
     constructor();
 }
+/**
+ * unlock() was called after a page reload (or any other loss of the in-memory
+ * auth state). We still know *who* the user is — their identity and addresses
+ * are persisted — but unlock() needs a live JWT to open a TEE session, and
+ * JWTs are deliberately never persisted. So there is no unlock() that can
+ * succeed here; the user has to re-authenticate.
+ *
+ * This is its own error type rather than a generic CallSequenceError because
+ * it is a *routing* signal, not a programming mistake: the correct response is
+ * to show the sign-in UI, which callers can only do reliably if they can tell
+ * this case apart from "you never called connect()". Prefer checking
+ * needsReconnect() up front so this never has to be caught at all.
+ */
+declare class ReconnectRequiredError extends DecaneConnectError {
+    constructor();
+}
 declare class UserCancelledError extends DecaneConnectError {
     constructor();
 }
@@ -558,6 +580,16 @@ interface SocialAuthState {
     isNewUser: boolean;
     isUnlocked: boolean;
     sessionExpiresAt: number | null;
+    /**
+     * True when `addresses` came from persisted (localStorage) identity only,
+     * with no live session. This is NOT the same as "locked" — every unlock()
+     * requires a fresh, valid JWT to open a TEE session, and JWTs are
+     * deliberately never persisted (short-lived, security-sensitive), so
+     * there is no legitimate "just unlock" path in this state. A consumer
+     * should route this into a full reconnect (connectWithGoogle() /
+     * connectWithEmail()), not unlock() — which will always throw here.
+     */
+    needsReconnect: boolean;
 }
 interface DecaneKitProps {
     config?: DecaneConfig;
@@ -572,8 +604,24 @@ interface SocialWalletModalProps {
     socialAuth: SocialAuthState;
     onUnlock: () => Promise<void>;
     onDisconnect: () => Promise<void>;
+    onGoogleSignIn: () => Promise<void>;
+    onEmailStart: (email: string) => Promise<{
+        codeRequired: true;
+    }>;
+    onEmailVerify: (email: string, code: string) => Promise<void>;
+    authMethods?: Array<"google" | "email">;
+    onRotateShares: (opts: {
+        password: string;
+        passwordHint?: string;
+    }) => Promise<RecoveryShareFile>;
+    onExportPortableBackup: (opts: {
+        password: string;
+        passwordHint?: string;
+    }) => Promise<PortableBackup>;
+    rpcUrls?: Record<string, string>;
+    chains?: string[];
 }
-declare function SocialWalletModal({ open, onClose, theme, socialAuth, onUnlock, onDisconnect, }: SocialWalletModalProps): React.ReactPortal | null;
+declare function SocialWalletModal({ open, onClose, theme, socialAuth, onUnlock, onDisconnect, onGoogleSignIn, onEmailStart, onEmailVerify, authMethods, onRotateShares, onExportPortableBackup, rpcUrls, chains, }: SocialWalletModalProps): React.ReactPortal | null;
 
 declare function useSocialAuth(): {
     isConnected: boolean;
@@ -584,6 +632,7 @@ declare function useSocialAuth(): {
         solana?: string;
     } | null;
     sessionExpiresAt: number | null;
+    needsReconnect: boolean;
     googleLoading: boolean;
     emailLoading: boolean;
     error: string | null;
@@ -605,6 +654,7 @@ declare function useSocialWallet(): {
         solana?: string;
     } | null;
     sessionExpiresAt: number | null;
+    needsReconnect: boolean;
     modalOpen: boolean;
     openModal: () => void;
     closeModal: () => void;
@@ -620,6 +670,17 @@ declare function useSocialWallet(): {
         gasPrice?: bigint;
     }) => Promise<string>;
     signSolanaTransaction: (tx: Uint8Array) => Promise<Uint8Array<ArrayBufferLike>>;
+    rotateShares: (opts: {
+        password: string;
+        passwordHint?: string;
+    }) => Promise<RecoveryShareFile>;
+    exportPortableBackup: (opts: {
+        password: string;
+        passwordHint?: string;
+    }) => Promise<PortableBackup>;
+    hasRecoveryShare: () => Promise<boolean>;
+    shouldPromptRecovery: () => Promise<boolean>;
+    dismissRecoveryPrompt: () => Promise<void>;
     loading: boolean;
     error: string | null;
     clearError: () => void;
@@ -696,4 +757,4 @@ declare function useSignTypedData(): {
     reset: () => void;
 };
 
-export { type ActiveSession, AttestationError, type AuthResult, BUILT_IN_CHAINS, type CAIP25Method, type CAIP25SessionRequest, type CAIP25SessionResult, CHAINS, CallSequenceError, type Chain, type ChainDescriptor, type ChainId, type ChainScope, type ChainSupport, type ChainType, type ConnectMode, type ConnectResult, type DecaneConfig, type DecaneConnect, type DecaneConnectConfig, DecaneConnectError, DecaneError, DecaneErrorCode, DecaneKit, type DecaneProvider, ExportNotAuthorizedError, InvalidApiKeyError, InvalidPinError, InvalidRecoveryFileError, NetworkError, NewDeviceError, OriginNotAllowedError, type PortableBackup, PromptPinNotConfiguredError, RecoveryFailedError, type RecoveryProgress, type RecoveryShareFile, RecoveryWalletMismatchError, type SdkEvent, type SendTransactionRequest, SessionExpiredError, ShareCorruptedError, type SignMessageRequest, type SocialAuthState, type SocialConfig, SocialWalletModal, type Theme, type TxParams, type UnifiedWalletAccount, UnlockRequiredError, UserCancelledError, WalletSelector, WebAuthnNotSupportedError, type WrappedShareMeta, WrongPasswordError, createDecane, createDecaneConnect, startEmailAuth, useChainSwitch, useDecane, useSendTransaction, useSignMessage, useSignTypedData, useSocialAuth, useSocialWallet, useWalletSelector, verifyEmailCode };
+export { type ActiveSession, AttestationError, type AuthResult, BUILT_IN_CHAINS, type CAIP25Method, type CAIP25SessionRequest, type CAIP25SessionResult, CHAINS, CallSequenceError, type Chain, type ChainDescriptor, type ChainId, type ChainScope, type ChainSupport, type ChainType, type ConnectMode, type ConnectResult, type DecaneConfig, type DecaneConnect, type DecaneConnectConfig, DecaneConnectError, DecaneError, DecaneErrorCode, DecaneKit, type DecaneProvider, ExportNotAuthorizedError, InvalidApiKeyError, InvalidPinError, InvalidRecoveryFileError, NetworkError, NewDeviceError, OriginNotAllowedError, type PortableBackup, PromptPinNotConfiguredError, ReconnectRequiredError, RecoveryFailedError, type RecoveryProgress, type RecoveryShareFile, RecoveryWalletMismatchError, type SdkEvent, type SendTransactionRequest, SessionExpiredError, ShareCorruptedError, type SignMessageRequest, type SocialAuthState, type SocialConfig, SocialWalletModal, type Theme, type TxParams, type UnifiedWalletAccount, UnlockRequiredError, UserCancelledError, WalletSelector, WebAuthnNotSupportedError, type WrappedShareMeta, WrongPasswordError, createDecane, createDecaneConnect, startEmailAuth, useChainSwitch, useDecane, useSendTransaction, useSignMessage, useSignTypedData, useSocialAuth, useSocialWallet, useWalletSelector, verifyEmailCode };