decane-connect-kit 2.18.0 → 2.20.0

package/dist/index.d.cts

@@ -92,7 +92,7 @@ interface DecaneConnectConfig {
     appId: string;
     apiKey: string;
     chains: Chain[];
-    authMethods: Array<'google' | 'email' | 'phone' | 'kingschat'>;
+    authMethods: Array<'google' | 'email' | 'phone' | 'kingschat' | 'x'>;
     /**
      * Scopes requested from KingsChat at sign-in. Defaults to
      * `['send_chat_message']`, which is what KingsChat's own SDK asks for and is
@@ -303,6 +303,23 @@ interface DecaneConnect {
      * Decane session; it is never treated as one on its own.
      */
     connectWithKingsChat(): Promise<ConnectResult>;
+    /**
+     * Sign in with X (Twitter).
+     *
+     * A redirect, like Google and unlike KingsChat's popup: calling it navigates
+     * away, and the promise never resolves. Call it again on the page X returns
+     * to and it finishes the sign-in from the URL instead of starting a new one.
+     *
+     * X releases no email address, so `result.profile` carries a name and a
+     * picture and nothing else. Anything that needs an address must ask the user
+     * for one.
+     */
+    connectWithX(): Promise<ConnectResult>;
+    /**
+     * Finish a redirect sign-in already present in the URL, whichever provider
+     * started it. Throws when there is nothing to finish — it never starts one.
+     */
+    completeRedirectSignIn(): Promise<ConnectResult>;
     /**
      * Sign in with a KingsChat access token the app already holds — from
      * kingschat-web-sdk, a native SDK, or any other flow. Use when you want to
@@ -548,6 +565,14 @@ declare class ApiClient {
     getGoogleInitUrl(): Promise<{
         url: string;
     }>;
+    /**
+     * The X consent URL. Same contract as Google's: the backend holds the client
+     * secret and the PKCE verifier, and answers 503 X_NOT_CONFIGURED when the
+     * deployment has no X credentials.
+     */
+    getXInitUrl(): Promise<{
+        url: string;
+    }>;
     /**
      * Exchange a Google ID token the app already holds for a Decane session.
      * Resolves to the SAME identity as the redirect flow, so one Google account
@@ -592,7 +617,12 @@ declare class ApiClient {
         metadata?: Record<string, unknown>;
     }): Promise<TransactionRecord>;
     getTransactions(jwt: string, limit?: number): Promise<TransactionRecord[]>;
-    getWebAuthnRegisterOptions(jwt: string, rpId: string, rpName: string): Promise<_simplewebauthn_browser.PublicKeyCredentialCreationOptionsJSON>;
+    /**
+     * `label` is what the user's password manager will show for this passkey.
+     * Without one they see the account's opaque id. Sent, used, and forgotten —
+     * the backend echoes it into the options and stores nothing.
+     */
+    getWebAuthnRegisterOptions(jwt: string, rpId: string, rpName: string, label?: string): Promise<_simplewebauthn_browser.PublicKeyCredentialCreationOptionsJSON>;
     postWebAuthnRegister(jwt: string, response: _simplewebauthn_browser.RegistrationResponseJSON, origin: string): Promise<void>;
     /**
      * Exchange a token from the developer's own auth system for a Decane
@@ -750,7 +780,7 @@ interface DecaneProvider {
 type ConnectMode = "all" | "social" | "wallets" | "evm" | "solana" | "tron" | "evm+social" | "solana+social" | "tron+social" | "evm+tron" | "evm+tron+social";
 interface SocialConfig {
     apiKey: string;
-    authMethods?: ("google" | "email" | "phone" | "kingschat")[];
+    authMethods?: ("google" | "email" | "phone" | "kingschat" | "x")[];
     /**
      * Scopes requested from KingsChat. Defaults to `['send_chat_message']`, which
      * is what KingsChat's own SDK asks for and is enough to establish identity.
@@ -1154,9 +1184,10 @@ interface WalletSelectorProps {
     theme?: "light" | "dark" | "auto";
     networks?: "evm" | "solana" | "tron" | "bitcoin" | "all";
     mode?: ConnectMode;
-    socialAuthMethods?: ("google" | "email" | "phone" | "kingschat")[];
+    socialAuthMethods?: ("google" | "email" | "phone" | "kingschat" | "x")[];
     onGoogleSignIn?: () => Promise<void>;
     onKingsChatSignIn?: () => Promise<void>;
+    onXSignIn?: () => Promise<void>;
     onEmailStart?: (email: string) => Promise<{
         codeRequired: true;
     }>;
@@ -1174,7 +1205,7 @@ interface WalletSelectorProps {
     passkeyAddress?: string | null;
     onPasskeySignIn?: () => Promise<unknown>;
 }
-declare function WalletSelector({ provider, open, onClose, onConnect, theme, networks, mode, socialAuthMethods, onGoogleSignIn, onKingsChatSignIn, onEmailStart, onEmailVerify, onPhoneStart, onPhoneVerify, customAuthLabel, onCustomAuthSignIn, canUsePasskey, passkeyAddress, onPasskeySignIn, }: WalletSelectorProps): React.ReactPortal | null;
+declare function WalletSelector({ provider, open, onClose, onConnect, theme, networks, mode, socialAuthMethods, onGoogleSignIn, onKingsChatSignIn, onXSignIn, onEmailStart, onEmailVerify, onPhoneStart, onPhoneVerify, customAuthLabel, onCustomAuthSignIn, canUsePasskey, passkeyAddress, onPasskeySignIn, }: WalletSelectorProps): React.ReactPortal | null;
 
 type Theme = "light" | "dark" | "auto";
 interface SocialAuthState {
@@ -1238,6 +1269,7 @@ interface SocialWalletModalProps {
     onDisconnect: () => Promise<void>;
     onGoogleSignIn: () => Promise<void>;
     onKingsChatSignIn?: () => Promise<void>;
+    onXSignIn?: () => Promise<void>;
     onEmailStart: (email: string) => Promise<{
         codeRequired: true;
     }>;
@@ -1246,7 +1278,7 @@ interface SocialWalletModalProps {
         codeRequired: true;
     }>;
     onPhoneVerify?: (phone: string, code: string) => Promise<void>;
-    authMethods?: Array<"google" | "email" | "phone" | "kingschat">;
+    authMethods?: Array<"google" | "email" | "phone" | "kingschat" | "x">;
     customAuthLabel?: string;
     onCustomAuthSignIn?: () => Promise<void>;
     canUsePasskey?: boolean;
@@ -1295,6 +1327,7 @@ declare function useSocialAuth(): {
     needsReconnect: boolean;
     googleLoading: boolean;
     kingschatLoading: boolean;
+    xLoading: boolean;
     emailLoading: boolean;
     phoneLoading: boolean;
     tokenLoading: boolean;
@@ -1304,6 +1337,7 @@ declare function useSocialAuth(): {
     clearError: () => void;
     signInWithGoogle: () => Promise<void>;
     signInWithKingsChat: () => Promise<void>;
+    signInWithX: () => Promise<void>;
     sendEmailCode: (email: string) => Promise<{
         codeRequired: true;
     }>;

package/dist/index.d.ts

@@ -92,7 +92,7 @@ interface DecaneConnectConfig {
     appId: string;
     apiKey: string;
     chains: Chain[];
-    authMethods: Array<'google' | 'email' | 'phone' | 'kingschat'>;
+    authMethods: Array<'google' | 'email' | 'phone' | 'kingschat' | 'x'>;
     /**
      * Scopes requested from KingsChat at sign-in. Defaults to
      * `['send_chat_message']`, which is what KingsChat's own SDK asks for and is
@@ -303,6 +303,23 @@ interface DecaneConnect {
      * Decane session; it is never treated as one on its own.
      */
     connectWithKingsChat(): Promise<ConnectResult>;
+    /**
+     * Sign in with X (Twitter).
+     *
+     * A redirect, like Google and unlike KingsChat's popup: calling it navigates
+     * away, and the promise never resolves. Call it again on the page X returns
+     * to and it finishes the sign-in from the URL instead of starting a new one.
+     *
+     * X releases no email address, so `result.profile` carries a name and a
+     * picture and nothing else. Anything that needs an address must ask the user
+     * for one.
+     */
+    connectWithX(): Promise<ConnectResult>;
+    /**
+     * Finish a redirect sign-in already present in the URL, whichever provider
+     * started it. Throws when there is nothing to finish — it never starts one.
+     */
+    completeRedirectSignIn(): Promise<ConnectResult>;
     /**
      * Sign in with a KingsChat access token the app already holds — from
      * kingschat-web-sdk, a native SDK, or any other flow. Use when you want to
@@ -548,6 +565,14 @@ declare class ApiClient {
     getGoogleInitUrl(): Promise<{
         url: string;
     }>;
+    /**
+     * The X consent URL. Same contract as Google's: the backend holds the client
+     * secret and the PKCE verifier, and answers 503 X_NOT_CONFIGURED when the
+     * deployment has no X credentials.
+     */
+    getXInitUrl(): Promise<{
+        url: string;
+    }>;
     /**
      * Exchange a Google ID token the app already holds for a Decane session.
      * Resolves to the SAME identity as the redirect flow, so one Google account
@@ -592,7 +617,12 @@ declare class ApiClient {
         metadata?: Record<string, unknown>;
     }): Promise<TransactionRecord>;
     getTransactions(jwt: string, limit?: number): Promise<TransactionRecord[]>;
-    getWebAuthnRegisterOptions(jwt: string, rpId: string, rpName: string): Promise<_simplewebauthn_browser.PublicKeyCredentialCreationOptionsJSON>;
+    /**
+     * `label` is what the user's password manager will show for this passkey.
+     * Without one they see the account's opaque id. Sent, used, and forgotten —
+     * the backend echoes it into the options and stores nothing.
+     */
+    getWebAuthnRegisterOptions(jwt: string, rpId: string, rpName: string, label?: string): Promise<_simplewebauthn_browser.PublicKeyCredentialCreationOptionsJSON>;
     postWebAuthnRegister(jwt: string, response: _simplewebauthn_browser.RegistrationResponseJSON, origin: string): Promise<void>;
     /**
      * Exchange a token from the developer's own auth system for a Decane
@@ -750,7 +780,7 @@ interface DecaneProvider {
 type ConnectMode = "all" | "social" | "wallets" | "evm" | "solana" | "tron" | "evm+social" | "solana+social" | "tron+social" | "evm+tron" | "evm+tron+social";
 interface SocialConfig {
     apiKey: string;
-    authMethods?: ("google" | "email" | "phone" | "kingschat")[];
+    authMethods?: ("google" | "email" | "phone" | "kingschat" | "x")[];
     /**
      * Scopes requested from KingsChat. Defaults to `['send_chat_message']`, which
      * is what KingsChat's own SDK asks for and is enough to establish identity.
@@ -1154,9 +1184,10 @@ interface WalletSelectorProps {
     theme?: "light" | "dark" | "auto";
     networks?: "evm" | "solana" | "tron" | "bitcoin" | "all";
     mode?: ConnectMode;
-    socialAuthMethods?: ("google" | "email" | "phone" | "kingschat")[];
+    socialAuthMethods?: ("google" | "email" | "phone" | "kingschat" | "x")[];
     onGoogleSignIn?: () => Promise<void>;
     onKingsChatSignIn?: () => Promise<void>;
+    onXSignIn?: () => Promise<void>;
     onEmailStart?: (email: string) => Promise<{
         codeRequired: true;
     }>;
@@ -1174,7 +1205,7 @@ interface WalletSelectorProps {
     passkeyAddress?: string | null;
     onPasskeySignIn?: () => Promise<unknown>;
 }
-declare function WalletSelector({ provider, open, onClose, onConnect, theme, networks, mode, socialAuthMethods, onGoogleSignIn, onKingsChatSignIn, onEmailStart, onEmailVerify, onPhoneStart, onPhoneVerify, customAuthLabel, onCustomAuthSignIn, canUsePasskey, passkeyAddress, onPasskeySignIn, }: WalletSelectorProps): React.ReactPortal | null;
+declare function WalletSelector({ provider, open, onClose, onConnect, theme, networks, mode, socialAuthMethods, onGoogleSignIn, onKingsChatSignIn, onXSignIn, onEmailStart, onEmailVerify, onPhoneStart, onPhoneVerify, customAuthLabel, onCustomAuthSignIn, canUsePasskey, passkeyAddress, onPasskeySignIn, }: WalletSelectorProps): React.ReactPortal | null;
 
 type Theme = "light" | "dark" | "auto";
 interface SocialAuthState {
@@ -1238,6 +1269,7 @@ interface SocialWalletModalProps {
     onDisconnect: () => Promise<void>;
     onGoogleSignIn: () => Promise<void>;
     onKingsChatSignIn?: () => Promise<void>;
+    onXSignIn?: () => Promise<void>;
     onEmailStart: (email: string) => Promise<{
         codeRequired: true;
     }>;
@@ -1246,7 +1278,7 @@ interface SocialWalletModalProps {
         codeRequired: true;
     }>;
     onPhoneVerify?: (phone: string, code: string) => Promise<void>;
-    authMethods?: Array<"google" | "email" | "phone" | "kingschat">;
+    authMethods?: Array<"google" | "email" | "phone" | "kingschat" | "x">;
     customAuthLabel?: string;
     onCustomAuthSignIn?: () => Promise<void>;
     canUsePasskey?: boolean;
@@ -1295,6 +1327,7 @@ declare function useSocialAuth(): {
     needsReconnect: boolean;
     googleLoading: boolean;
     kingschatLoading: boolean;
+    xLoading: boolean;
     emailLoading: boolean;
     phoneLoading: boolean;
     tokenLoading: boolean;
@@ -1304,6 +1337,7 @@ declare function useSocialAuth(): {
     clearError: () => void;
     signInWithGoogle: () => Promise<void>;
     signInWithKingsChat: () => Promise<void>;
+    signInWithX: () => Promise<void>;
     sendEmailCode: (email: string) => Promise<{
         codeRequired: true;
     }>;

package/dist/index.js

@@ -1946,6 +1946,37 @@ var EventEmitter = class {
   }
 };
 
+// src/social/auth/redirectResult.ts
+function readRedirectOutcome(search) {
+  const params = new URLSearchParams(search);
+  const error = params.get("decane_error");
+  if (error) return { kind: "error", error };
+  const jwt = params.get("decane_jwt");
+  if (!jwt) return { kind: "none" };
+  const name = params.get("decane_name");
+  const email = params.get("decane_email");
+  const picture = params.get("decane_picture");
+  const profile = {
+    ...name ? { name } : {},
+    ...email ? { email } : {},
+    ...picture ? { picture } : {}
+  };
+  return {
+    kind: "result",
+    result: {
+      jwt,
+      userId: params.get("decane_user_id") ?? "",
+      isNewUser: params.get("decane_is_new_user") === "true",
+      hasShare: params.get("decane_has_share") === "true",
+      // Omitted entirely when the provider released nothing, so callers can
+      // test `result.profile` rather than an object that is always present but
+      // sometimes empty. X never sends an email, so this is the normal case
+      // there rather than an edge one.
+      ...Object.keys(profile).length ? { profile } : {}
+    }
+  };
+}
+
 // src/social/api.ts
 init_errors();
 var ERROR_MAP = {
@@ -1997,6 +2028,14 @@ var ApiClient = class {
   async getGoogleInitUrl() {
     return this._request("/auth/google/init", { method: "GET" });
   }
+  /**
+   * The X consent URL. Same contract as Google's: the backend holds the client
+   * secret and the PKCE verifier, and answers 503 X_NOT_CONFIGURED when the
+   * deployment has no X credentials.
+   */
+  async getXInitUrl() {
+    return this._request("/auth/x/init", { method: "GET" });
+  }
   /**
    * Exchange a Google ID token the app already holds for a Decane session.
    * Resolves to the SAME identity as the redirect flow, so one Google account
@@ -2085,8 +2124,14 @@ var ApiClient = class {
     return body.transactions;
   }
   // ── WebAuthn registration (additive to the PRF-only passkey flow) ─────────
-  async getWebAuthnRegisterOptions(jwt, rpId, rpName) {
-    return this._request(`/webauthn/register-options?rpId=${encodeURIComponent(rpId)}&rpName=${encodeURIComponent(rpName)}`, {
+  /**
+   * `label` is what the user's password manager will show for this passkey.
+   * Without one they see the account's opaque id. Sent, used, and forgotten —
+   * the backend echoes it into the options and stores nothing.
+   */
+  async getWebAuthnRegisterOptions(jwt, rpId, rpName, label) {
+    const query = `rpId=${encodeURIComponent(rpId)}&rpName=${encodeURIComponent(rpName)}` + (label ? `&label=${encodeURIComponent(label)}` : "");
+    return this._request(`/webauthn/register-options?${query}`, {
       headers: { Authorization: `Bearer ${jwt}` }
     });
   }
@@ -2970,7 +3015,12 @@ function bufFromBytes(u) {
   return u.buffer.slice(u.byteOffset, u.byteOffset + u.byteLength);
 }
 async function registerWebAuthnCredential(opts) {
-  const baseOptions = await opts.api.getWebAuthnRegisterOptions(opts.jwt, opts.rpId, opts.rpName);
+  const baseOptions = await opts.api.getWebAuthnRegisterOptions(
+    opts.jwt,
+    opts.rpId,
+    opts.rpName,
+    opts.label
+  );
   if (opts.allowDuplicate) delete baseOptions.excludeCredentials;
   const optionsJSON = {
     ...baseOptions,
@@ -3776,12 +3826,14 @@ async function createDecaneConnect(config) {
     let credentialId;
     let prfOutput;
     try {
+      const label = (await storage.getShare(userId))?.profile?.email;
       ({ credentialId, prfOutput } = await registerWebAuthnCredential({
         api,
         jwt,
         rpId,
         rpName,
         prfSalt,
+        ...label ? { label } : {},
         ...opts.allowDuplicate ? { allowDuplicate: true } : {}
       }));
     } catch (e) {
@@ -4283,6 +4335,21 @@ async function createDecaneConnect(config) {
       ...stored.profile ? { profile: stored.profile } : {}
     };
   }
+  async function connectViaRedirect(label, getInitUrl) {
+    const outcome = readRedirectOutcome(window.location.search);
+    if (outcome.kind === "error") {
+      window.history.replaceState({}, "", window.location.pathname);
+      throw new CallSequenceError(`${label} sign-in failed: ${outcome.error}`);
+    }
+    if (outcome.kind === "result") {
+      window.history.replaceState({}, "", window.location.pathname);
+      return handleAuthResult(outcome.result);
+    }
+    const { url } = await getInitUrl();
+    window.location.href = url;
+    return new Promise(() => {
+    });
+  }
   async function handleAuthResult(result) {
     let addresses;
     if (!result.hasShare) {
@@ -4329,39 +4396,33 @@ async function createDecaneConnect(config) {
       throw new CallSequenceError(`Unknown auth method: ${method}`);
     },
     async connectWithGoogle() {
-      const params = new URLSearchParams(window.location.search);
-      const decaneJwt = params.get("decane_jwt");
-      const decaneError = params.get("decane_error");
-      if (decaneError) {
-        window.history.replaceState({}, "", window.location.pathname);
-        throw new CallSequenceError(`Google sign-in failed: ${decaneError}`);
-      }
-      if (decaneJwt) {
-        const name = params.get("decane_name");
-        const email = params.get("decane_email");
-        const picture = params.get("decane_picture");
-        const profile = {
-          ...name ? { name } : {},
-          ...email ? { email } : {},
-          ...picture ? { picture } : {}
-        };
-        const result = {
-          jwt: decaneJwt,
-          userId: params.get("decane_user_id") ?? "",
-          isNewUser: params.get("decane_is_new_user") === "true",
-          hasShare: params.get("decane_has_share") === "true",
-          // Omitted entirely when Google released nothing, so callers can test
-          // `result.profile` rather than an object that is always present but
-          // sometimes empty.
-          ...Object.keys(profile).length ? { profile } : {}
-        };
-        window.history.replaceState({}, "", window.location.pathname);
-        return handleAuthResult(result);
+      return connectViaRedirect("Google", () => api.getGoogleInitUrl());
+    },
+    /**
+     * Finish a redirect sign-in that is already sitting in the URL, whichever
+     * provider started it.
+     *
+     * Google and X bounce back with the same decane_* params, so the page that
+     * receives them cannot tell which one ran — and should not have to. Calling
+     * connectWithGoogle() here would work by accident and then report an X
+     * failure as "Google sign-in failed".
+     *
+     * Throws if there is nothing to finish: unlike the connectWith* methods,
+     * this never starts a flow.
+     */
+    async completeRedirectSignIn() {
+      const outcome = readRedirectOutcome(window.location.search);
+      if (outcome.kind === "none") {
+        throw new CallSequenceError("No sign-in result in the URL to complete");
       }
-      const { url } = await api.getGoogleInitUrl();
-      window.location.href = url;
-      return new Promise(() => {
-      });
+      window.history.replaceState({}, "", window.location.pathname);
+      if (outcome.kind === "error") {
+        throw new CallSequenceError(`Sign-in failed: ${outcome.error}`);
+      }
+      return handleAuthResult(outcome.result);
+    },
+    async connectWithX() {
+      return connectViaRedirect("X", () => api.getXInitUrl());
     },
     async connectWithGoogleToken(idToken) {
       if (!idToken) throw new CallSequenceError("connectWithGoogleToken requires an ID token");
@@ -5185,6 +5246,20 @@ function ChainIconStack({ support, size = 16 }) {
     /* @__PURE__ */ React.createElement(ChainCircleIcon, { chain, size })
   )));
 }
+function XLogo({ size = 14 }) {
+  return /* @__PURE__ */ React.createElement(
+    "svg",
+    {
+      width: size,
+      height: size,
+      viewBox: "0 0 24 24",
+      fill: "currentColor",
+      "aria-hidden": "true",
+      focusable: "false"
+    },
+    /* @__PURE__ */ React.createElement("path", { d: "M18.244 2.25h3.308l-7.227 8.26 8.502 11.24H16.17l-5.214-6.817L4.99 21.75H1.68l7.73-8.835L1.254 2.25H8.08l4.713 6.231zm-1.161 17.52h1.833L7.084 4.126H5.117z" })
+  );
+}
 
 // src/ui/WalletSelector.tsx
 var FONT_URL = "https://fonts.googleapis.com/css2?family=Plus+Jakarta+Sans:wght@400;500;600;700;800&display=swap";
@@ -5326,6 +5401,7 @@ function WalletSelector({
   socialAuthMethods = ["google", "email"],
   onGoogleSignIn,
   onKingsChatSignIn,
+  onXSignIn,
   onEmailStart,
   onEmailVerify,
   onPhoneStart,
@@ -5420,6 +5496,17 @@ function WalletSelector({
       setSocialLoad(false);
     }
   }
+  async function handleXClick() {
+    if (!onXSignIn) return;
+    setSocialLoad(true);
+    setSocialErr("");
+    try {
+      await onXSignIn();
+    } catch (e) {
+      setSocialErr(e.message);
+      setSocialLoad(false);
+    }
+  }
   async function handleCustomAuthClick() {
     if (!onCustomAuthSignIn) return;
     setSocialLoad(true);
@@ -5901,6 +5988,38 @@ function WalletSelector({
           },
           /* @__PURE__ */ React2.createElement("svg", { width: "18", height: "18", viewBox: "0 0 18 18", fill: "none", "aria-hidden": "true" }, /* @__PURE__ */ React2.createElement("circle", { cx: "9", cy: "9", r: "9", fill: "var(--dc-accent)" }), /* @__PURE__ */ React2.createElement("path", { d: "M5.5 4.5h1.9v3.6l3.1-3.6h2.3l-3.3 3.8 3.5 5.2h-2.3l-2.5-3.8-.8.9v2.9H5.5V4.5z", fill: "var(--dc-accent-text)" })),
           socialLoad ? "Waiting for KingsChat\u2026" : "Continue with KingsChat"
+        ), !passkeyFirst && socialAuthMethods.includes("x") && onXSignIn && /* @__PURE__ */ React2.createElement(
+          "button",
+          {
+            onClick: handleXClick,
+            disabled: socialLoad,
+            style: {
+              display: "flex",
+              alignItems: "center",
+              justifyContent: "center",
+              gap: 10,
+              width: "100%",
+              padding: "11px 16px",
+              background: "var(--dc-surface)",
+              border: "1px solid var(--dc-border)",
+              borderRadius: 10,
+              cursor: socialLoad ? "not-allowed" : "pointer",
+              fontSize: 14,
+              fontWeight: 600,
+              color: "var(--dc-text)",
+              fontFamily: "inherit",
+              transition: "border-color 0.12s, background 0.12s",
+              opacity: socialLoad ? 0.6 : 1
+            },
+            onMouseEnter: (e) => {
+              if (!socialLoad) e.currentTarget.style.borderColor = "var(--dc-border-accent)";
+            },
+            onMouseLeave: (e) => {
+              e.currentTarget.style.borderColor = "var(--dc-border)";
+            }
+          },
+          /* @__PURE__ */ React2.createElement(XLogo, { size: 16 }),
+          socialLoad ? "Redirecting\u2026" : "Continue with X"
         ), !passkeyFirst && socialAuthMethods.includes("google") && socialAuthMethods.includes("email") && /* @__PURE__ */ React2.createElement("div", { style: { display: "flex", alignItems: "center", gap: 10 } }, /* @__PURE__ */ React2.createElement("div", { style: { flex: 1, height: 1, background: "var(--dc-border)" } }), /* @__PURE__ */ React2.createElement("span", { style: { fontSize: 11, color: "var(--dc-text-muted)", whiteSpace: "nowrap" } }, "or continue with email"), /* @__PURE__ */ React2.createElement("div", { style: { flex: 1, height: 1, background: "var(--dc-border)" } })), !passkeyFirst && socialAuthMethods.includes("email") && (emailStep === "input" ? /* @__PURE__ */ React2.createElement("form", { onSubmit: handleEmailStart, style: { display: "flex", flexDirection: "column", gap: 8 } }, /* @__PURE__ */ React2.createElement(
           "input",
           {
@@ -6268,6 +6387,7 @@ function AddressRow({
 function SignInView({
   onGoogleSignIn,
   onKingsChatSignIn,
+  onXSignIn,
   onEmailStart,
   onEmailVerify,
   onPhoneStart,
@@ -6282,6 +6402,7 @@ function SignInView({
 }) {
   const [googleLoading, setGoogleLoading] = useState2(false);
   const [kingsChatLoading, setKingsChatLoading] = useState2(false);
+  const [xLoading, setXLoading] = useState2(false);
   const [email, setEmail] = useState2("");
   const [code, setCode] = useState2("");
   const [emailSent, setEmailSent] = useState2(false);
@@ -6332,6 +6453,17 @@ function SignInView({
       setKingsChatLoading(false);
     }
   }
+  async function handleX() {
+    if (!onXSignIn) return;
+    setError("");
+    setXLoading(true);
+    try {
+      await onXSignIn();
+    } catch (e) {
+      setError(e.message);
+      setXLoading(false);
+    }
+  }
   async function handleEmailStart(e) {
     e.preventDefault();
     setError("");
@@ -6490,6 +6622,32 @@ function SignInView({
       }
     },
     kingsChatLoading ? "Waiting for KingsChat\u2026" : "Continue with KingsChat"
+  ), !passkeyFirst && authMethods.includes("x") && onXSignIn && /* @__PURE__ */ React3.createElement(
+    "button",
+    {
+      onClick: handleX,
+      disabled: xLoading,
+      style: {
+        width: "100%",
+        padding: "10px 0",
+        marginBottom: 10,
+        background: "var(--dc-surface)",
+        color: "var(--dc-text)",
+        border: "1px solid var(--dc-border)",
+        borderRadius: 10,
+        fontSize: 13,
+        fontWeight: 700,
+        cursor: xLoading ? "not-allowed" : "pointer",
+        opacity: xLoading ? 0.7 : 1,
+        fontFamily: "inherit",
+        display: "flex",
+        alignItems: "center",
+        justifyContent: "center",
+        gap: 8
+      }
+    },
+    /* @__PURE__ */ React3.createElement(XLogo, null),
+    xLoading ? "Redirecting\u2026" : "Continue with X"
   ), !passkeyFirst && authMethods.includes("email") && /* @__PURE__ */ React3.createElement(React3.Fragment, null, authMethods.includes("google") && /* @__PURE__ */ React3.createElement("div", { style: { textAlign: "center", color: "var(--dc-text-muted)", fontSize: 12, margin: "10px 0" } }, "\u2014 or \u2014"), !emailSent ? /* @__PURE__ */ React3.createElement("form", { onSubmit: handleEmailStart, style: { display: "flex", gap: 8 } }, /* @__PURE__ */ React3.createElement(
     "input",
     {
@@ -7152,7 +7310,7 @@ function DecaneKit({ config, children }) {
       });
       const params = new URLSearchParams(window.location.search);
       if (params.has("decane_jwt") || params.has("decane_error")) {
-        sdk.connectWithGoogle().then(applyResult).catch((e) => {
+        sdk.completeRedirectSignIn().then(applyResult).catch((e) => {
           setSocialAuth((p) => p.phase ? { ...p, phase: null } : p);
           console.error(e);
         });
@@ -7193,6 +7351,11 @@ function DecaneKit({ config, children }) {
     if (!sdk) throw new Error("Social sign-in not configured");
     await sdk.connectWithGoogle();
   }, []);
+  const connectWithX = useCallback3(async () => {
+    const sdk = socialRef.current;
+    if (!sdk) throw new Error("Social sign-in not configured");
+    await sdk.connectWithX();
+  }, []);
   const connectWithKingsChat = useCallback3(async () => {
     const sdk = socialRef.current;
     if (!sdk) throw new Error("Social sign-in not configured");
@@ -7413,6 +7576,7 @@ function DecaneKit({ config, children }) {
         signInWithPasskey,
         connectWithGoogle,
         connectWithKingsChat,
+        connectWithX,
         connectWithEmail,
         verifyEmailCode: verifyEmailCode2,
         connectWithPhone,
@@ -7464,6 +7628,7 @@ function DecaneKit({ config, children }) {
         socialAuthMethods: config?.social?.authMethods ?? ["google", "email"],
         onGoogleSignIn: connectWithGoogle,
         onKingsChatSignIn: connectWithKingsChat,
+        onXSignIn: connectWithX,
         onEmailStart: connectWithEmail,
         onEmailVerify: verifyEmailCode2,
         onPhoneStart: connectWithPhone,
@@ -7488,6 +7653,7 @@ function DecaneKit({ config, children }) {
         onCustomAuthSignIn: customAuthConfig ? connectWithCustomAuth : void 0,
         onGoogleSignIn: connectWithGoogle,
         onKingsChatSignIn: connectWithKingsChat,
+        onXSignIn: connectWithX,
         onEmailStart: connectWithEmail,
         onEmailVerify: verifyEmailCode2,
         onPhoneStart: connectWithPhone,
@@ -7522,6 +7688,7 @@ function useSocialAuth() {
     socialAuth,
     connectWithGoogle,
     connectWithKingsChat,
+    connectWithX,
     connectWithEmail,
     verifyEmailCode: verifyEmailCode2,
     connectWithPhone,
@@ -7535,6 +7702,7 @@ function useSocialAuth() {
   } = useDecaneContext();
   const [googleLoading, setGoogleLoading] = useState4(false);
   const [kingschatLoading, setKingschatLoading] = useState4(false);
+  const [xLoading, setXLoading] = useState4(false);
   const [emailLoading, setEmailLoading] = useState4(false);
   const [phoneLoading, setPhoneLoading] = useState4(false);
   const [tokenLoading, setTokenLoading] = useState4(false);
@@ -7550,6 +7718,16 @@ function useSocialAuth() {
       setGoogleLoading(false);
     }
   }, [connectWithGoogle]);
+  const signInWithX = useCallback4(async () => {
+    setXLoading(true);
+    setError(null);
+    try {
+      await connectWithX();
+    } catch (e) {
+      setError(e.message);
+      setXLoading(false);
+    }
+  }, [connectWithX]);
   const signInWithKingsChat = useCallback4(async () => {
     setKingschatLoading(true);
     setError(null);
@@ -7687,6 +7865,7 @@ function useSocialAuth() {
     needsReconnect: socialAuth.needsReconnect,
     googleLoading,
     kingschatLoading,
+    xLoading,
     emailLoading,
     phoneLoading,
     tokenLoading,
@@ -7696,6 +7875,7 @@ function useSocialAuth() {
     clearError: () => setError(null),
     signInWithGoogle,
     signInWithKingsChat,
+    signInWithX,
     sendEmailCode,
     confirmEmailCode,
     sendPhoneCode,