decane-connect-kit 2.3.0 → 2.4.0

package/dist/index.cjs

@@ -1964,7 +1964,7 @@ function createDecane(config) {
 }
 
 // src/social/client.ts
-var import_ethers2 = require("ethers");
+var import_ethers3 = require("ethers");
 var import_web32 = require("@solana/web3.js");
 init_errors();
 
@@ -2059,7 +2059,8 @@ var ApiClient = class {
         iv: bytesToB64(share.iv),
         wrappedShareMeta: btoa(JSON.stringify(share.wrappedShareMeta)),
         evmAddress: share.evmAddress,
-        solanaAddress: share.solanaAddress
+        solanaAddress: share.solanaAddress,
+        tronAddress: share.tronAddress
       })
     });
   }
@@ -2200,6 +2201,9 @@ var Storage = class {
   }
 };
 
+// src/social/session.ts
+var import_ethers = require("ethers");
+
 // src/social/teeClient.ts
 var import_browser = require("@simplewebauthn/browser");
 
@@ -2480,6 +2484,11 @@ var TeeClient = class {
 
 // src/social/session.ts
 init_errors();
+function evmToTronAddress(evmAddress) {
+  const hex41 = "41" + evmAddress.toLowerCase().replace(/^0x/, "");
+  const checksum = (0, import_ethers.sha256)((0, import_ethers.sha256)("0x" + hex41)).slice(2, 10);
+  return (0, import_ethers.encodeBase58)("0x" + hex41 + checksum);
+}
 var SessionManager = class {
   constructor(events, durationMs, teeUrl, requireAssertionPerSignature = false) {
     this.events = events;
@@ -2489,6 +2498,7 @@ var SessionManager = class {
     this.tee = null;
     this.evmAddress = null;
     this.solanaAddress = null;
+    this.tronAddress = null;
     this.expiresAt = null;
     this.timeoutId = null;
   }
@@ -2515,6 +2525,7 @@ var SessionManager = class {
     this.tee.adoptHandle(handle, this.requireAssertionPerSignature);
     this.evmAddress = addresses.evm;
     this.solanaAddress = addresses.solana;
+    this.tronAddress = addresses.tron ?? evmToTronAddress(addresses.evm);
     this.expiresAt = expiresAtMs;
     this.setExpiryTimer(expiresAtMs - Date.now());
     this.events.emit("session-started");
@@ -2541,15 +2552,17 @@ var SessionManager = class {
         "requireAssertionPerSignature was requested but this signer does not support it \u2014 refusing to open a session with weaker authority than configured."
       );
     }
-    const addresses = verified ?? fallback;
-    if (!addresses) {
+    const resolved = verified ?? fallback;
+    if (!resolved) {
       this.tee = null;
       throw new Error(
         "No addresses available for this wallet \u2014 the signer could not derive them and none are recorded"
       );
     }
+    const addresses = { evm: resolved.evm, solana: resolved.solana, tron: resolved.tron ?? evmToTronAddress(resolved.evm) };
     this.evmAddress = addresses.evm;
     this.solanaAddress = addresses.solana;
+    this.tronAddress = addresses.tron;
     const serverTtlMs = this.tee.sessionExpiresIn();
     const effectiveMs = serverTtlMs != null ? Math.min(this.durationMs, serverTtlMs * 1e3) : this.durationMs;
     this.expiresAt = Date.now() + effectiveMs;
@@ -2566,6 +2579,7 @@ var SessionManager = class {
     this.tee = null;
     this.evmAddress = null;
     this.solanaAddress = null;
+    this.tronAddress = null;
     this.expiresAt = null;
     if (this.timeoutId) {
       clearTimeout(this.timeoutId);
@@ -2584,7 +2598,11 @@ var SessionManager = class {
   }
   addresses() {
     if (!this.evmAddress || !this.solanaAddress) return null;
-    return { evm: this.evmAddress, solana: this.solanaAddress };
+    return {
+      evm: this.evmAddress,
+      solana: this.solanaAddress,
+      tron: this.tronAddress ?? evmToTronAddress(this.evmAddress)
+    };
   }
 };
 
@@ -2767,12 +2785,12 @@ async function verifyEmailCode(api, email, code) {
 }
 
 // src/social/signers/evm.ts
-var import_ethers = require("ethers");
+var import_ethers2 = require("ethers");
 async function signEvmTransaction(tee, chain, tx, jwt) {
-  const resolved = await (0, import_ethers.resolveProperties)(tx);
-  const unsigned = import_ethers.Transaction.from(resolved).unsignedSerialized;
+  const resolved = await (0, import_ethers2.resolveProperties)(tx);
+  const unsigned = import_ethers2.Transaction.from(resolved).unsignedSerialized;
   const payload = unsigned.startsWith("0x") ? unsigned.slice(2) : unsigned;
-  const txHash = (0, import_ethers.keccak256)("0x" + payload);
+  const txHash = (0, import_ethers2.keccak256)("0x" + payload);
   return tee.sign({ chain, kind: "transaction", payload, txHash }, jwt);
 }
 async function signEvmMessage(tee, chain, message, jwt) {
@@ -2787,7 +2805,7 @@ async function signEvmAuthorization(tee, chainId, address, nonce, jwt) {
   const r = "0x" + hex.slice(0, 64);
   const s = "0x" + hex.slice(64, 128);
   const v = parseInt(hex.slice(128, 130), 16);
-  return { yParity: v >= 27 ? v - 27 : v, r, s };
+  return { chainId, address, nonce, yParity: v >= 27 ? v - 27 : v, r, s };
 }
 async function signEvmTypedData(tee, chain, typedData, jwt) {
   const payload = JSON.stringify(
@@ -2948,9 +2966,6 @@ function createEthereumProvider(client, opts = {}) {
       }
       case "eth_signAuthorization":
       case "wallet_sign7702Authorization": {
-        if (!client.signAuthorization) {
-          throw Object.assign(new Error("EIP-7702 is not supported by the connected signer."), { code: 4200 });
-        }
         const p = params[0];
         const cid = p.chainId != null ? Number(asBigInt(p.chainId)) : chainId;
         const address = p.address ?? p.contractAddress;
@@ -3440,9 +3455,11 @@ async function createDecaneConnect(config) {
     let shareSet;
     let evmAddress;
     let solanaAddress;
+    let tronAddress;
     try {
-      evmAddress = new import_ethers2.Wallet(toHex2(master)).address;
+      evmAddress = new import_ethers3.Wallet(toHex2(master)).address;
       solanaAddress = import_web32.Keypair.fromSeed(master).publicKey.toBase58();
+      tronAddress = evmToTronAddress2(evmAddress);
       shareSet = await splitMaster(master, 1);
     } finally {
       zeroize(master);
@@ -3473,10 +3490,11 @@ async function createDecaneConnect(config) {
         // credential IDs, prfSalt, pinSalt stay on-device — never sent to server
       },
       evmAddress,
-      solanaAddress
+      solanaAddress,
+      tronAddress
     });
     zeroize(shareSet.server);
-    const addresses = { evm: evmAddress, solana: solanaAddress };
+    const addresses = { evm: evmAddress, solana: solanaAddress, tron: tronAddress };
     if (unlockMethod === "passkey" && meta.credentialId && meta.prfSalt) {
       try {
         await api.putRecoveryBackup(jwt, {
@@ -3499,6 +3517,7 @@ async function createDecaneConnect(config) {
     }
     addresses.evm = evmAddress = confirmed.evm;
     addresses.solana = solanaAddress = confirmed.solana;
+    addresses.tron = tronAddress = confirmed.tron ?? evmToTronAddress2(confirmed.evm);
     if (config.offerRecoveryAtSignup !== false && config.onRecoveryShareOffer) {
       try {
         const choice = await config.onRecoveryShareOffer({ evmAddress, solanaAddress });
@@ -3522,7 +3541,7 @@ async function createDecaneConnect(config) {
   }
   async function returningUserUnlock(userId, jwt) {
     const rawAddresses = await api.getAddresses(jwt);
-    const recordedAddresses = rawAddresses.evm && rawAddresses.solana ? { evm: rawAddresses.evm, solana: rawAddresses.solana } : null;
+    const recordedAddresses = rawAddresses.evm && rawAddresses.solana ? { evm: rawAddresses.evm, solana: rawAddresses.solana, tron: rawAddresses.tron ?? evmToTronAddress2(rawAddresses.evm) } : null;
     const stored = await storage.getShare(userId);
     let deviceShare;
     if (!stored) {
@@ -3604,7 +3623,7 @@ async function createDecaneConnect(config) {
       throw new ShareCorruptedError();
     }
     const rawAddresses = await api.getAddresses(result.jwt);
-    const recordedAddresses = rawAddresses.evm && rawAddresses.solana ? { evm: rawAddresses.evm, solana: rawAddresses.solana } : null;
+    const recordedAddresses = rawAddresses.evm && rawAddresses.solana ? { evm: rawAddresses.evm, solana: rawAddresses.solana, tron: rawAddresses.tron ?? evmToTronAddress2(rawAddresses.evm) } : null;
     const addresses = await session.start(deviceShare, result.jwt, recordedAddresses);
     zeroize(deviceShare);
     auth = { jwt: result.jwt, userId, addresses };
@@ -3736,6 +3755,10 @@ async function createDecaneConnect(config) {
         const sig = await signSolanaMessage(tee, req.chain, msg, auth?.jwt);
         return bufferToB64u(sig);
       }
+      if (req.chain.startsWith("tron:")) {
+        const msg = typeof req.message === "string" ? req.message : new TextDecoder().decode(req.message);
+        return tee.sign({ chain: req.chain, kind: "message", payload: msg }, auth?.jwt);
+      }
       throw new CallSequenceError(`Unsupported chain: ${req.chain}`);
     },
     async sendTransaction(req) {
@@ -3804,7 +3827,16 @@ async function createDecaneConnect(config) {
     },
     async signAuthorization(req) {
       const tee = session.requireActive();
-      return signEvmAuthorization(tee, req.chainId, req.address, req.nonce, auth?.jwt);
+      const delegate = req.address ?? req.contractAddress;
+      if (!delegate) throw new CallSequenceError("signAuthorization requires `address` (the delegate contract).");
+      return signEvmAuthorization(tee, req.chainId, delegate, req.nonce, auth?.jwt);
+    },
+    // The current session's access token (the Decane JWT), for authenticating
+    // the user to your own backend — e.g. a sponsored-bundler proxy. Verify it
+    // server-side against https://backend.decane.app/.well-known/jwks.json.
+    // Null when there is no live session.
+    getAccessToken() {
+      return auth?.jwt ?? null;
     },
     getEthereumProvider(opts) {
       if (!ethProvider) {
@@ -3828,6 +3860,14 @@ async function createDecaneConnect(config) {
       const solChain = config.chains.find((c) => c.startsWith("solana:")) ?? "solana:mainnet";
       return signSolanaTransaction(tee, solChain, tx, auth?.jwt);
     },
+    async signTronTransaction(rawDataHex) {
+      const tee = session.requireActive();
+      const tronChain = config.chains.find((c) => c.startsWith("tron:")) ?? "tron:mainnet";
+      return tee.sign(
+        { chain: tronChain, kind: "transaction", payload: rawDataHex.replace(/^0x/, "") },
+        auth?.jwt
+      );
+    },
     async disconnect() {
       session.end();
       if (auth?.jwt) {
@@ -3983,12 +4023,19 @@ function b64uToBuffer(b64u) {
 function toHex2(bytes) {
   return "0x" + Array.from(bytes).map((b) => b.toString(16).padStart(2, "0")).join("");
 }
+function evmToTronAddress2(evmAddress) {
+  const hex41 = "41" + evmAddress.toLowerCase().replace(/^0x/, "");
+  const checksum = (0, import_ethers3.sha256)((0, import_ethers3.sha256)("0x" + hex41)).slice(2, 10);
+  return (0, import_ethers3.encodeBase58)("0x" + hex41 + checksum);
+}
 async function deriveAddressesFromShares(a, b) {
   const master = await combineShares(a, b);
   try {
+    const evm = new import_ethers3.Wallet(toHex2(master)).address;
     return {
-      evm: new import_ethers2.Wallet(toHex2(master)).address,
-      solana: import_web32.Keypair.fromSeed(master).publicKey.toBase58()
+      evm,
+      solana: import_web32.Keypair.fromSeed(master).publicKey.toBase58(),
+      tron: evmToTronAddress2(evm)
     };
   } finally {
     zeroize(master);
@@ -6003,6 +6050,11 @@ function DecaneKit({ config, children }) {
     if (!sdk) throw new Error("Social wallet not connected");
     return sdk.signSolanaTransaction(tx);
   }, []);
+  const socialSignTronTransaction = (0, import_react5.useCallback)(async (rawDataHex) => {
+    const sdk = socialRef.current;
+    if (!sdk) throw new Error("Social wallet not connected");
+    return sdk.signTronTransaction(rawDataHex);
+  }, []);
   const socialSignTypedData = (0, import_react5.useCallback)(async (req) => {
     const sdk = socialRef.current;
     if (!sdk) throw new Error("Social wallet not connected");
@@ -6026,6 +6078,9 @@ function DecaneKit({ config, children }) {
     },
     []
   );
+  const socialGetAccessToken = (0, import_react5.useCallback)(() => {
+    return socialRef.current?.getAccessToken() ?? null;
+  }, []);
   const socialGetBalances = (0, import_react5.useCallback)(async () => {
     const sdk = socialRef.current;
     if (!sdk) throw new Error("Social wallet not connected");
@@ -6090,6 +6145,8 @@ function DecaneKit({ config, children }) {
         socialGetBalances,
         socialGetEthereumProvider,
         socialSignAuthorization,
+        socialSignTronTransaction,
+        socialGetAccessToken,
         socialSignSolanaTransaction,
         socialSignTypedData,
         socialRotateShares,
@@ -6309,11 +6366,13 @@ function useSocialWallet() {
     socialSignMessage,
     socialSendTransaction,
     socialSignSolanaTransaction,
+    socialSignTronTransaction,
     socialSignTypedData,
     socialGetBalance,
     socialGetBalances,
     socialGetEthereumProvider,
     socialSignAuthorization,
+    socialGetAccessToken,
     socialRotateShares,
     socialExportPortableBackup,
     socialHasRecoveryShare,
@@ -6350,6 +6409,10 @@ function useSocialWallet() {
     (tx) => run(() => socialSignSolanaTransaction(tx)),
     [socialSignSolanaTransaction]
   );
+  const signTronTransaction = (0, import_react6.useCallback)(
+    (rawDataHex) => run(() => socialSignTronTransaction(rawDataHex)),
+    [socialSignTronTransaction]
+  );
   const signTypedData = (0, import_react6.useCallback)(
     (req) => run(() => socialSignTypedData(req)),
     [socialSignTypedData]
@@ -6431,6 +6494,7 @@ function useSocialWallet() {
     signMessage,
     sendTransaction,
     signSolanaTransaction: signSolanaTransaction2,
+    signTronTransaction,
     signTypedData,
     // Balances (native token; read-only, works while locked)
     getBalance,
@@ -6439,6 +6503,9 @@ function useSocialWallet() {
     signAuthorization,
     // An EIP-1193 provider for viem/wagmi/ethers (memoized).
     getEthereumProvider: socialGetEthereumProvider,
+    // The Decane JWT — authenticate the user to your own backend (bundler proxy,
+    // etc.); verify server-side against backend.decane.app/.well-known/jwks.json.
+    getAccessToken: socialGetAccessToken,
     // Recovery (2-of-3 Shamir share set)
     rotateShares,
     exportPortableBackup,