decane-connect-kit 2.2.6 → 2.2.8

package/dist/index.d.cts

@@ -328,6 +328,13 @@ interface DecaneConnectConfig {
     rpName?: string;
     rpcUrls?: Record<string, string>;
     teeUrl?: string;
+    /**
+     * Persist the live session (handle + JWT) in sessionStorage so a page RELOAD
+     * silently resumes it — no repeat passkey/sign-in. Survives reloads, cleared
+     * on tab close. Default true. Set false to require a fresh unlock on every
+     * page load (stricter, but the reload friction that motivated this returns).
+     */
+    persistSession?: boolean;
     /** Offer to save a recovery-share file at signup. Default true. Never blocks onboarding. */
     offerRecoveryAtSignup?: boolean;
     /** Ask the user whether they want a recovery share and, if so, a password for it. */

package/dist/index.d.ts

@@ -328,6 +328,13 @@ interface DecaneConnectConfig {
     rpName?: string;
     rpcUrls?: Record<string, string>;
     teeUrl?: string;
+    /**
+     * Persist the live session (handle + JWT) in sessionStorage so a page RELOAD
+     * silently resumes it — no repeat passkey/sign-in. Survives reloads, cleared
+     * on tab close. Default true. Set false to require a fresh unlock on every
+     * page load (stricter, but the reload friction that motivated this returns).
+     */
+    persistSession?: boolean;
     /** Offer to save a recovery-share file at signup. Default true. Never blocks onboarding. */
     offerRecoveryAtSignup?: boolean;
     /** Ask the user whether they want a recovery share and, if so, a password for it. */

package/dist/index.js

@@ -2222,6 +2222,22 @@ var TeeClient = class {
   sessionExpiresIn() {
     return this.sessionExpiresInSec;
   }
+  /** The opaque session handle, so a live session can be persisted and resumed after a reload. */
+  getHandle() {
+    return this.handle;
+  }
+  /**
+   * Adopt a handle from a persisted session (page reload) instead of opening a
+   * new one. The session was already attested when first opened, and the handle
+   * is bound to that CVM session — a swapped CVM would simply not recognise it —
+   * so re-attestation is skipped. If the handle has expired server-side, the
+   * first sign() 401s and clears it, falling back to a normal reconnect.
+   */
+  adoptHandle(handle, assertionPerSignature) {
+    this.handle = handle;
+    this.assertionPerSignature = assertionPerSignature;
+    this.attested = true;
+  }
   async ensureAttested() {
     if (this.attested) return;
     const nonce = crypto.getRandomValues(new Uint8Array(16));
@@ -2402,9 +2418,33 @@ var SessionManager = class {
     this.solanaAddress = null;
     this.expiresAt = null;
     this.timeoutId = null;
-    if (typeof window !== "undefined") {
-      window.addEventListener("pagehide", () => this.end());
-    }
+  }
+  setExpiryTimer(effectiveMs) {
+    if (this.timeoutId) clearTimeout(this.timeoutId);
+    this.timeoutId = setTimeout(() => {
+      this.end();
+      this.events.emit("session-expired");
+    }, Math.max(0, effectiveMs));
+  }
+  /** The live session handle, for persisting a resumable session across reloads. */
+  getHandle() {
+    return this.tee?.getHandle() ?? null;
+  }
+  /**
+   * Resume a persisted session without re-authenticating: adopt the handle,
+   * addresses, and expiry from storage. No key material or prompt involved — the
+   * TEE still holds the shares behind this handle. If the handle turns out to be
+   * dead (server restarted, TTL passed), the next sign() fails and the caller
+   * reconnects; nothing here can sign on its own.
+   */
+  resume(handle, addresses, expiresAtMs) {
+    this.tee = new TeeClient(this.teeUrl);
+    this.tee.adoptHandle(handle, this.requireAssertionPerSignature);
+    this.evmAddress = addresses.evm;
+    this.solanaAddress = addresses.solana;
+    this.expiresAt = expiresAtMs;
+    this.setExpiryTimer(expiresAtMs - Date.now());
+    this.events.emit("session-started");
   }
   /**
    * Opens the TEE session and resolves which addresses this wallet really has.
@@ -2965,7 +3005,7 @@ function formatBalanceDisplay(value) {
 // src/social/client.ts
 var DEFAULT_API_BASE = "https://backend.decane.app";
 var DEFAULT_TEE_URL = "https://4405742df08d19abc549a05ade2a7154d98bd87f-8443.dstack-pha-prod9.phala.network";
-var DEFAULT_SESSION_MINUTES = 30;
+var DEFAULT_SESSION_MINUTES = 120;
 function makePersistKey(apiKey) {
   return `decane:social:${apiKey.slice(0, 20)}`;
 }
@@ -2989,6 +3029,29 @@ function clearPersisted(key) {
   } catch {
   }
 }
+function sessionPersistKey(apiKey) {
+  return `decane:sess:${apiKey.slice(0, 20)}`;
+}
+function loadSession(key) {
+  try {
+    const raw = typeof sessionStorage !== "undefined" ? sessionStorage.getItem(key) : null;
+    return raw ? JSON.parse(raw) : null;
+  } catch {
+    return null;
+  }
+}
+function saveSession(key, s) {
+  try {
+    sessionStorage.setItem(key, JSON.stringify(s));
+  } catch {
+  }
+}
+function clearSessionPersist(key) {
+  try {
+    sessionStorage.removeItem(key);
+  } catch {
+  }
+}
 async function createDecaneConnect(config) {
   if (!config.appId) throw new Error("decane-connect-kit: appId is required");
   if (!config.apiKey) throw new Error("decane-connect-kit: apiKey is required");
@@ -3011,6 +3074,39 @@ async function createDecaneConnect(config) {
   );
   let auth = null;
   let persisted = loadPersisted(PERSIST_KEY);
+  const persistSession = config.persistSession !== false;
+  const SESSION_KEY = sessionPersistKey(config.apiKey);
+  function persistLiveSession() {
+    if (!persistSession) return;
+    const handle = session.getHandle();
+    const expiresAt = session.expiresAtTimestamp();
+    if (!handle || !auth || !expiresAt) return;
+    saveSession(SESSION_KEY, {
+      handle,
+      jwt: auth.jwt,
+      userId: auth.userId,
+      addresses: auth.addresses,
+      expiresAt
+    });
+  }
+  function dropLiveSession() {
+    clearSessionPersist(SESSION_KEY);
+  }
+  if (persistSession) {
+    const saved = loadSession(SESSION_KEY);
+    if (saved?.handle && saved.expiresAt > Date.now() + 5e3) {
+      try {
+        session.resume(saved.handle, saved.addresses, saved.expiresAt);
+        auth = { jwt: saved.jwt, userId: saved.userId, addresses: saved.addresses };
+        persisted = { userId: saved.userId, addresses: saved.addresses };
+      } catch {
+        dropLiveSession();
+      }
+    } else if (saved) {
+      dropLiveSession();
+    }
+  }
+  events.on("session-expired", () => dropLiveSession());
   async function pinSetup() {
     if (!config.promptPin) throw new PromptPinNotConfiguredError();
     const pin = await config.promptPin();
@@ -3294,6 +3390,7 @@ async function createDecaneConnect(config) {
     persisted = { userId, addresses };
     savePersisted(PERSIST_KEY, persisted);
     events.emit("connected");
+    persistLiveSession();
     return { addresses, isNewUser: false };
   }
   async function handleAuthResult(result) {
@@ -3309,6 +3406,7 @@ async function createDecaneConnect(config) {
     persisted = { userId: result.userId, addresses };
     savePersisted(PERSIST_KEY, persisted);
     events.emit("connected");
+    persistLiveSession();
     return { addresses, isNewUser: result.isNewUser };
   }
   const client = {
@@ -3503,6 +3601,7 @@ async function createDecaneConnect(config) {
       auth = null;
       persisted = null;
       clearPersisted(PERSIST_KEY);
+      dropLiveSession();
       events.emit("disconnected");
     },
     getAddresses() {
@@ -5546,7 +5645,15 @@ function DecaneKit({ config, children }) {
       sdk.on("wallet-unlocking", () => setSocialAuth((p) => ({ ...p, phase: "unlocking" })));
       sdk.on("connected", () => setSocialAuth((p) => ({ ...p, phase: null })));
       const saved = sdk.getAddresses();
-      if (saved) {
+      if (sdk.isUnlocked()) {
+        setSocialAuth((p) => ({
+          ...p,
+          addresses: saved,
+          isUnlocked: true,
+          needsReconnect: false,
+          sessionExpiresAt: sdk.sessionExpiresAt()
+        }));
+      } else if (saved) {
         setSocialAuth((p) => ({ ...p, addresses: saved, isUnlocked: false, needsReconnect: true }));
       }
       sdk.canSignInWithPasskey().then((can) => setSocialAuth((p) => ({ ...p, canUsePasskey: can }))).catch(() => {