decane-connect-kit 2.2.7 → 2.2.8

package/dist/index.cjs

@@ -2293,6 +2293,22 @@ var TeeClient = class {
   sessionExpiresIn() {
     return this.sessionExpiresInSec;
   }
+  /** The opaque session handle, so a live session can be persisted and resumed after a reload. */
+  getHandle() {
+    return this.handle;
+  }
+  /**
+   * Adopt a handle from a persisted session (page reload) instead of opening a
+   * new one. The session was already attested when first opened, and the handle
+   * is bound to that CVM session — a swapped CVM would simply not recognise it —
+   * so re-attestation is skipped. If the handle has expired server-side, the
+   * first sign() 401s and clears it, falling back to a normal reconnect.
+   */
+  adoptHandle(handle, assertionPerSignature) {
+    this.handle = handle;
+    this.assertionPerSignature = assertionPerSignature;
+    this.attested = true;
+  }
   async ensureAttested() {
     if (this.attested) return;
     const nonce = crypto.getRandomValues(new Uint8Array(16));
@@ -2473,9 +2489,33 @@ var SessionManager = class {
     this.solanaAddress = null;
     this.expiresAt = null;
     this.timeoutId = null;
-    if (typeof window !== "undefined") {
-      window.addEventListener("pagehide", () => this.end());
-    }
+  }
+  setExpiryTimer(effectiveMs) {
+    if (this.timeoutId) clearTimeout(this.timeoutId);
+    this.timeoutId = setTimeout(() => {
+      this.end();
+      this.events.emit("session-expired");
+    }, Math.max(0, effectiveMs));
+  }
+  /** The live session handle, for persisting a resumable session across reloads. */
+  getHandle() {
+    return this.tee?.getHandle() ?? null;
+  }
+  /**
+   * Resume a persisted session without re-authenticating: adopt the handle,
+   * addresses, and expiry from storage. No key material or prompt involved — the
+   * TEE still holds the shares behind this handle. If the handle turns out to be
+   * dead (server restarted, TTL passed), the next sign() fails and the caller
+   * reconnects; nothing here can sign on its own.
+   */
+  resume(handle, addresses, expiresAtMs) {
+    this.tee = new TeeClient(this.teeUrl);
+    this.tee.adoptHandle(handle, this.requireAssertionPerSignature);
+    this.evmAddress = addresses.evm;
+    this.solanaAddress = addresses.solana;
+    this.expiresAt = expiresAtMs;
+    this.setExpiryTimer(expiresAtMs - Date.now());
+    this.events.emit("session-started");
   }
   /**
    * Opens the TEE session and resolves which addresses this wallet really has.
@@ -3060,6 +3100,29 @@ function clearPersisted(key) {
   } catch {
   }
 }
+function sessionPersistKey(apiKey) {
+  return `decane:sess:${apiKey.slice(0, 20)}`;
+}
+function loadSession(key) {
+  try {
+    const raw = typeof sessionStorage !== "undefined" ? sessionStorage.getItem(key) : null;
+    return raw ? JSON.parse(raw) : null;
+  } catch {
+    return null;
+  }
+}
+function saveSession(key, s) {
+  try {
+    sessionStorage.setItem(key, JSON.stringify(s));
+  } catch {
+  }
+}
+function clearSessionPersist(key) {
+  try {
+    sessionStorage.removeItem(key);
+  } catch {
+  }
+}
 async function createDecaneConnect(config) {
   if (!config.appId) throw new Error("decane-connect-kit: appId is required");
   if (!config.apiKey) throw new Error("decane-connect-kit: apiKey is required");
@@ -3082,6 +3145,39 @@ async function createDecaneConnect(config) {
   );
   let auth = null;
   let persisted = loadPersisted(PERSIST_KEY);
+  const persistSession = config.persistSession !== false;
+  const SESSION_KEY = sessionPersistKey(config.apiKey);
+  function persistLiveSession() {
+    if (!persistSession) return;
+    const handle = session.getHandle();
+    const expiresAt = session.expiresAtTimestamp();
+    if (!handle || !auth || !expiresAt) return;
+    saveSession(SESSION_KEY, {
+      handle,
+      jwt: auth.jwt,
+      userId: auth.userId,
+      addresses: auth.addresses,
+      expiresAt
+    });
+  }
+  function dropLiveSession() {
+    clearSessionPersist(SESSION_KEY);
+  }
+  if (persistSession) {
+    const saved = loadSession(SESSION_KEY);
+    if (saved?.handle && saved.expiresAt > Date.now() + 5e3) {
+      try {
+        session.resume(saved.handle, saved.addresses, saved.expiresAt);
+        auth = { jwt: saved.jwt, userId: saved.userId, addresses: saved.addresses };
+        persisted = { userId: saved.userId, addresses: saved.addresses };
+      } catch {
+        dropLiveSession();
+      }
+    } else if (saved) {
+      dropLiveSession();
+    }
+  }
+  events.on("session-expired", () => dropLiveSession());
   async function pinSetup() {
     if (!config.promptPin) throw new PromptPinNotConfiguredError();
     const pin = await config.promptPin();
@@ -3365,6 +3461,7 @@ async function createDecaneConnect(config) {
     persisted = { userId, addresses };
     savePersisted(PERSIST_KEY, persisted);
     events.emit("connected");
+    persistLiveSession();
     return { addresses, isNewUser: false };
   }
   async function handleAuthResult(result) {
@@ -3380,6 +3477,7 @@ async function createDecaneConnect(config) {
     persisted = { userId: result.userId, addresses };
     savePersisted(PERSIST_KEY, persisted);
     events.emit("connected");
+    persistLiveSession();
     return { addresses, isNewUser: result.isNewUser };
   }
   const client = {
@@ -3574,6 +3672,7 @@ async function createDecaneConnect(config) {
       auth = null;
       persisted = null;
       clearPersisted(PERSIST_KEY);
+      dropLiveSession();
       events.emit("disconnected");
     },
     getAddresses() {
@@ -5610,7 +5709,15 @@ function DecaneKit({ config, children }) {
       sdk.on("wallet-unlocking", () => setSocialAuth((p) => ({ ...p, phase: "unlocking" })));
       sdk.on("connected", () => setSocialAuth((p) => ({ ...p, phase: null })));
       const saved = sdk.getAddresses();
-      if (saved) {
+      if (sdk.isUnlocked()) {
+        setSocialAuth((p) => ({
+          ...p,
+          addresses: saved,
+          isUnlocked: true,
+          needsReconnect: false,
+          sessionExpiresAt: sdk.sessionExpiresAt()
+        }));
+      } else if (saved) {
         setSocialAuth((p) => ({ ...p, addresses: saved, isUnlocked: false, needsReconnect: true }));
       }
       sdk.canSignInWithPasskey().then((can) => setSocialAuth((p) => ({ ...p, canUsePasskey: can }))).catch(() => {