decane-connect-kit 2.21.0 → 2.22.0

package/dist/index.d.cts

@@ -398,6 +398,14 @@ interface DecaneConnect {
     setUnlockPassword(password: string): Promise<void>;
     /** True when this device can open a session from a password alone. */
     canUnlockWithPassword(): Promise<boolean>;
+    /**
+     * "Use a different account." disconnect() keeps one fact about the account
+     * that signed out — its userId — so canSignInWithPasskey() and
+     * canUnlockWithPassword() can offer that account's own way back in even
+     * when several accounts are enrolled on this browser. This drops it. The
+     * device shares themselves are untouched.
+     */
+    forgetLastUser(): void;
     /** Open a session from the password alone — no provider, no passkey. */
     unlockWithPassword(password: string): Promise<ConnectResult>;
     /** Turn the password path off, revoking the token account-wide. */
@@ -1444,6 +1452,7 @@ declare function useSocialWallet(): {
     canUnlockWithPassword: () => Promise<boolean>;
     unlockWithPassword: (password: string) => Promise<void>;
     removeUnlockPassword: () => Promise<void>;
+    forgetLastUser: () => void;
     rotateShares: (opts: {
         password: string;
         passwordHint?: string;

package/dist/index.d.ts

@@ -398,6 +398,14 @@ interface DecaneConnect {
     setUnlockPassword(password: string): Promise<void>;
     /** True when this device can open a session from a password alone. */
     canUnlockWithPassword(): Promise<boolean>;
+    /**
+     * "Use a different account." disconnect() keeps one fact about the account
+     * that signed out — its userId — so canSignInWithPasskey() and
+     * canUnlockWithPassword() can offer that account's own way back in even
+     * when several accounts are enrolled on this browser. This drops it. The
+     * device shares themselves are untouched.
+     */
+    forgetLastUser(): void;
     /** Open a session from the password alone — no provider, no passkey. */
     unlockWithPassword(password: string): Promise<ConnectResult>;
     /** Turn the password path off, revoking the token account-wide. */
@@ -1444,6 +1452,7 @@ declare function useSocialWallet(): {
     canUnlockWithPassword: () => Promise<boolean>;
     unlockWithPassword: (password: string) => Promise<void>;
     removeUnlockPassword: () => Promise<void>;
+    forgetLastUser: () => void;
     rotateShares: (opts: {
         password: string;
         passwordHint?: string;

package/dist/index.js

@@ -3607,6 +3607,29 @@ function clearPersisted(key) {
   } catch {
   }
 }
+function makeLastUserKey(apiKey) {
+  return `${makePersistKey(apiKey)}:last-user`;
+}
+function loadLastUser(key) {
+  try {
+    const raw = typeof localStorage !== "undefined" ? localStorage.getItem(key) : null;
+    return raw ? JSON.parse(raw).userId ?? null : null;
+  } catch {
+    return null;
+  }
+}
+function saveLastUser(key, userId) {
+  try {
+    localStorage.setItem(key, JSON.stringify({ userId }));
+  } catch {
+  }
+}
+function clearLastUser(key) {
+  try {
+    localStorage.removeItem(key);
+  } catch {
+  }
+}
 function sessionPersistKey(apiKey) {
   return `decane:sess:${apiKey.slice(0, 20)}`;
 }
@@ -3645,6 +3668,7 @@ async function createDecaneConnect(config) {
   const rpId = config.rpId ?? (typeof window !== "undefined" ? window.location.hostname : "localhost");
   const rpName = config.rpName ?? "Decane Connect";
   const PERSIST_KEY = makePersistKey(config.apiKey);
+  const LAST_USER_KEY = makeLastUserKey(config.apiKey);
   const teeUrl = config.teeUrl ?? DEFAULT_TEE_URL;
   const events = new EventEmitter();
   const api = new ApiClient(baseUrl, config.apiKey, config.appId);
@@ -3657,6 +3681,7 @@ async function createDecaneConnect(config) {
   );
   let auth = null;
   let persisted = loadPersisted(PERSIST_KEY);
+  let lastUserId = loadLastUser(LAST_USER_KEY);
   let ethProvider = null;
   const persistSession = config.persistSession !== false;
   const serverAssistedRecovery = true;
@@ -3802,6 +3827,10 @@ async function createDecaneConnect(config) {
       const stored = await storage.getShare(persisted.userId);
       return hasPasswordUnlock(stored) ? stored : null;
     }
+    if (lastUserId) {
+      const stored = await storage.getShare(lastUserId);
+      return hasPasswordUnlock(stored) ? stored : null;
+    }
     const candidates = (await storage.listShares()).filter(hasPasswordUnlock);
     return candidates.length === 1 ? candidates[0] : null;
   }
@@ -4255,14 +4284,16 @@ async function createDecaneConnect(config) {
   async function passkeyDeviceCandidate() {
     if (!isPasskeySupported()) return null;
     if (persisted?.userId) return passkeyLoginCandidate();
+    if (lastUserId) return usablePasskeyShare(await storage.getShare(lastUserId));
     const candidates = (await storage.listShares()).map(usablePasskeyShare).filter(Boolean);
     return candidates.length === 1 ? candidates[0] : null;
   }
   async function canOfferPasskey() {
     if (!isPasskeySupported()) return false;
     if (await passkeyDeviceCandidate()) return true;
-    if (!persisted?.userId) return false;
-    return await storage.getShare(persisted.userId) == null;
+    const known = persisted?.userId ?? lastUserId;
+    if (!known) return false;
+    return await storage.getShare(known) == null;
   }
   async function rememberProfile(userId, profile) {
     const incoming = Object.fromEntries(Object.entries(profile).filter(([, v]) => v));
@@ -4475,8 +4506,9 @@ async function createDecaneConnect(config) {
     async signInWithPasskey() {
       const candidate = await passkeyDeviceCandidate();
       if (candidate) return passkeyLogin(candidate);
-      if (isPasskeySupported() && persisted?.userId && await storage.getShare(persisted.userId) == null) {
-        return passkeyLoginWithoutShare(persisted.userId);
+      const known = persisted?.userId ?? lastUserId;
+      if (isPasskeySupported() && known && await storage.getShare(known) == null) {
+        return passkeyLoginWithoutShare(known);
       }
       throw new NewDeviceError();
     },
@@ -4816,12 +4848,21 @@ async function createDecaneConnect(config) {
         await api.revoke(auth.jwt).catch(() => {
         });
       }
+      const leaving = auth?.userId ?? persisted?.userId ?? null;
+      if (leaving) {
+        lastUserId = leaving;
+        saveLastUser(LAST_USER_KEY, leaving);
+      }
       auth = null;
       persisted = null;
       clearPersisted(PERSIST_KEY);
       dropLiveSession();
       events.emit("disconnected");
     },
+    forgetLastUser() {
+      lastUserId = null;
+      clearLastUser(LAST_USER_KEY);
+    },
     getAddresses() {
       return auth?.addresses ?? persisted?.addresses ?? null;
     },
@@ -7536,6 +7577,14 @@ function DecaneKit({ config, children }) {
     if (!sdk) return false;
     return sdk.canUnlockWithPassword();
   }, []);
+  const socialForgetLastUser = useCallback3(() => {
+    socialRef.current?.forgetLastUser();
+    const sdk = socialRef.current;
+    if (sdk) {
+      sdk.canSignInWithPasskey().then((can) => setSocialAuth((p) => ({ ...p, canUsePasskey: can }))).catch(() => {
+      });
+    }
+  }, []);
   const socialUnlockWithPassword = useCallback3(async (password) => {
     const sdk = socialRef.current;
     if (!sdk) throw new Error("Social wallet not connected");
@@ -7612,6 +7661,7 @@ function DecaneKit({ config, children }) {
         socialAddPasskey,
         socialSetUnlockPassword,
         socialCanUnlockWithPassword,
+        socialForgetLastUser,
         socialUnlockWithPassword,
         socialRemoveUnlockPassword,
         socialShouldPromptRecovery,
@@ -7921,6 +7971,7 @@ function useSocialWallet() {
     socialAddPasskey,
     socialSetUnlockPassword,
     socialCanUnlockWithPassword,
+    socialForgetLastUser,
     socialUnlockWithPassword,
     socialRemoveUnlockPassword,
     socialShouldPromptRecovery,
@@ -8029,6 +8080,7 @@ function useSocialWallet() {
       throw e;
     }
   }, [socialSetUnlockPassword]);
+  const forgetLastUser = useCallback4(() => socialForgetLastUser(), [socialForgetLastUser]);
   const canUnlockWithPassword = useCallback4(
     () => socialCanUnlockWithPassword(),
     [socialCanUnlockWithPassword]
@@ -8114,6 +8166,8 @@ function useSocialWallet() {
     canUnlockWithPassword,
     unlockWithPassword,
     removeUnlockPassword,
+    // "Use a different account": stop offering the account that signed out.
+    forgetLastUser,
     // Recovery (2-of-3 Shamir share set)
     rotateShares,
     exportPortableBackup,