decane-connect-kit 2.3.1 → 2.4.0

package/dist/index.d.cts

@@ -175,6 +175,7 @@ declare class ApiClient {
     getAddresses(jwt: string): Promise<{
         evm: string | null;
         solana: string | null;
+        tron: string | null;
     }>;
     putShare(jwt: string, share: {
         ciphertext: Uint8Array;
@@ -182,6 +183,7 @@ declare class ApiClient {
         wrappedShareMeta: WrappedShareMeta;
         evmAddress: string;
         solanaAddress: string;
+        tronAddress: string;
     }): Promise<void>;
     getWebAuthnRegisterOptions(jwt: string, rpId: string, rpName: string): Promise<_simplewebauthn_browser.PublicKeyCredentialCreationOptionsJSON>;
     postWebAuthnRegister(jwt: string, response: _simplewebauthn_browser.RegistrationResponseJSON, origin: string): Promise<void>;
@@ -327,7 +329,7 @@ interface SignedAuthorization {
     s: string;
 }
 
-type Chain = `evm:${number}` | `solana:${'mainnet' | 'devnet'}`;
+type Chain = `evm:${number}` | `solana:${'mainnet' | 'devnet'}` | `tron:${'mainnet' | 'shasta' | 'nile'}`;
 interface DecaneConnectConfig {
     /** Dashboard project ID (public). Sent with every request so the backend can
      *  confirm the API key below actually belongs to this project. */
@@ -405,6 +407,7 @@ interface ConnectResult {
     addresses: {
         evm?: string;
         solana?: string;
+        tron?: string;
     };
     isNewUser: boolean;
 }
@@ -510,10 +513,19 @@ interface DecaneConnect {
      */
     getAccessToken(): string | null;
     signSolanaTransaction(tx: Uint8Array): Promise<Uint8Array>;
+    /**
+     * Sign a Tron transaction. Pass the transaction's `raw_data_hex` (the value
+     * TronWeb puts on a built transaction). The enclave computes the txID
+     * (sha256(raw_data)) and signs it with the same secp256k1 key as the EVM
+     * wallet; returns the 65-byte recoverable signature as 0x-hex. Attach it to
+     * the transaction's `signature` array and broadcast via TronWeb / a full node.
+     */
+    signTronTransaction(rawDataHex: string): Promise<string>;
     disconnect(): Promise<void>;
     getAddresses(): {
         evm?: string;
         solana?: string;
+        tron?: string;
     } | null;
     /**
      * Native-token balance for a chain (defaults to the first configured EVM
@@ -780,6 +792,7 @@ interface SocialAuthState {
     addresses: {
         evm?: string;
         solana?: string;
+        tron?: string;
     } | null;
     isNewUser: boolean;
     isUnlocked: boolean;
@@ -864,6 +877,7 @@ declare function useSocialAuth(): {
     addresses: {
         evm?: string;
         solana?: string;
+        tron?: string;
     } | null;
     sessionExpiresAt: number | null;
     canUsePasskey: boolean;
@@ -897,6 +911,7 @@ declare function useSocialWallet(): {
     addresses: {
         evm?: string;
         solana?: string;
+        tron?: string;
     } | null;
     sessionExpiresAt: number | null;
     needsReconnect: boolean;
@@ -917,6 +932,7 @@ declare function useSocialWallet(): {
         gasPrice?: bigint;
     }) => Promise<string>;
     signSolanaTransaction: (tx: Uint8Array) => Promise<Uint8Array<ArrayBufferLike>>;
+    signTronTransaction: (rawDataHex: string) => Promise<string>;
     signTypedData: (req: {
         chain: string;
         domain: Record<string, unknown>;

package/dist/index.d.ts

@@ -175,6 +175,7 @@ declare class ApiClient {
     getAddresses(jwt: string): Promise<{
         evm: string | null;
         solana: string | null;
+        tron: string | null;
     }>;
     putShare(jwt: string, share: {
         ciphertext: Uint8Array;
@@ -182,6 +183,7 @@ declare class ApiClient {
         wrappedShareMeta: WrappedShareMeta;
         evmAddress: string;
         solanaAddress: string;
+        tronAddress: string;
     }): Promise<void>;
     getWebAuthnRegisterOptions(jwt: string, rpId: string, rpName: string): Promise<_simplewebauthn_browser.PublicKeyCredentialCreationOptionsJSON>;
     postWebAuthnRegister(jwt: string, response: _simplewebauthn_browser.RegistrationResponseJSON, origin: string): Promise<void>;
@@ -327,7 +329,7 @@ interface SignedAuthorization {
     s: string;
 }
 
-type Chain = `evm:${number}` | `solana:${'mainnet' | 'devnet'}`;
+type Chain = `evm:${number}` | `solana:${'mainnet' | 'devnet'}` | `tron:${'mainnet' | 'shasta' | 'nile'}`;
 interface DecaneConnectConfig {
     /** Dashboard project ID (public). Sent with every request so the backend can
      *  confirm the API key below actually belongs to this project. */
@@ -405,6 +407,7 @@ interface ConnectResult {
     addresses: {
         evm?: string;
         solana?: string;
+        tron?: string;
     };
     isNewUser: boolean;
 }
@@ -510,10 +513,19 @@ interface DecaneConnect {
      */
     getAccessToken(): string | null;
     signSolanaTransaction(tx: Uint8Array): Promise<Uint8Array>;
+    /**
+     * Sign a Tron transaction. Pass the transaction's `raw_data_hex` (the value
+     * TronWeb puts on a built transaction). The enclave computes the txID
+     * (sha256(raw_data)) and signs it with the same secp256k1 key as the EVM
+     * wallet; returns the 65-byte recoverable signature as 0x-hex. Attach it to
+     * the transaction's `signature` array and broadcast via TronWeb / a full node.
+     */
+    signTronTransaction(rawDataHex: string): Promise<string>;
     disconnect(): Promise<void>;
     getAddresses(): {
         evm?: string;
         solana?: string;
+        tron?: string;
     } | null;
     /**
      * Native-token balance for a chain (defaults to the first configured EVM
@@ -780,6 +792,7 @@ interface SocialAuthState {
     addresses: {
         evm?: string;
         solana?: string;
+        tron?: string;
     } | null;
     isNewUser: boolean;
     isUnlocked: boolean;
@@ -864,6 +877,7 @@ declare function useSocialAuth(): {
     addresses: {
         evm?: string;
         solana?: string;
+        tron?: string;
     } | null;
     sessionExpiresAt: number | null;
     canUsePasskey: boolean;
@@ -897,6 +911,7 @@ declare function useSocialWallet(): {
     addresses: {
         evm?: string;
         solana?: string;
+        tron?: string;
     } | null;
     sessionExpiresAt: number | null;
     needsReconnect: boolean;
@@ -917,6 +932,7 @@ declare function useSocialWallet(): {
         gasPrice?: bigint;
     }) => Promise<string>;
     signSolanaTransaction: (tx: Uint8Array) => Promise<Uint8Array<ArrayBufferLike>>;
+    signTronTransaction: (rawDataHex: string) => Promise<string>;
     signTypedData: (req: {
         chain: string;
         domain: Record<string, unknown>;

package/dist/index.js

@@ -1892,7 +1892,7 @@ function createDecane(config) {
 
 // src/social/client.ts
 init_errors();
-import { Wallet } from "ethers";
+import { Wallet, sha256 as sha2562, encodeBase58 as encodeBase582 } from "ethers";
 import { Transaction as Transaction2, VersionedTransaction, Keypair } from "@solana/web3.js";
 
 // src/social/events.ts
@@ -1986,7 +1986,8 @@ var ApiClient = class {
         iv: bytesToB64(share.iv),
         wrappedShareMeta: btoa(JSON.stringify(share.wrappedShareMeta)),
         evmAddress: share.evmAddress,
-        solanaAddress: share.solanaAddress
+        solanaAddress: share.solanaAddress,
+        tronAddress: share.tronAddress
       })
     });
   }
@@ -2127,6 +2128,9 @@ var Storage = class {
   }
 };
 
+// src/social/session.ts
+import { sha256, encodeBase58 } from "ethers";
+
 // src/social/teeClient.ts
 import { startAuthentication } from "@simplewebauthn/browser";
 
@@ -2407,6 +2411,11 @@ var TeeClient = class {
 
 // src/social/session.ts
 init_errors();
+function evmToTronAddress(evmAddress) {
+  const hex41 = "41" + evmAddress.toLowerCase().replace(/^0x/, "");
+  const checksum = sha256(sha256("0x" + hex41)).slice(2, 10);
+  return encodeBase58("0x" + hex41 + checksum);
+}
 var SessionManager = class {
   constructor(events, durationMs, teeUrl, requireAssertionPerSignature = false) {
     this.events = events;
@@ -2416,6 +2425,7 @@ var SessionManager = class {
     this.tee = null;
     this.evmAddress = null;
     this.solanaAddress = null;
+    this.tronAddress = null;
     this.expiresAt = null;
     this.timeoutId = null;
   }
@@ -2442,6 +2452,7 @@ var SessionManager = class {
     this.tee.adoptHandle(handle, this.requireAssertionPerSignature);
     this.evmAddress = addresses.evm;
     this.solanaAddress = addresses.solana;
+    this.tronAddress = addresses.tron ?? evmToTronAddress(addresses.evm);
     this.expiresAt = expiresAtMs;
     this.setExpiryTimer(expiresAtMs - Date.now());
     this.events.emit("session-started");
@@ -2468,15 +2479,17 @@ var SessionManager = class {
         "requireAssertionPerSignature was requested but this signer does not support it \u2014 refusing to open a session with weaker authority than configured."
       );
     }
-    const addresses = verified ?? fallback;
-    if (!addresses) {
+    const resolved = verified ?? fallback;
+    if (!resolved) {
       this.tee = null;
       throw new Error(
         "No addresses available for this wallet \u2014 the signer could not derive them and none are recorded"
       );
     }
+    const addresses = { evm: resolved.evm, solana: resolved.solana, tron: resolved.tron ?? evmToTronAddress(resolved.evm) };
     this.evmAddress = addresses.evm;
     this.solanaAddress = addresses.solana;
+    this.tronAddress = addresses.tron;
     const serverTtlMs = this.tee.sessionExpiresIn();
     const effectiveMs = serverTtlMs != null ? Math.min(this.durationMs, serverTtlMs * 1e3) : this.durationMs;
     this.expiresAt = Date.now() + effectiveMs;
@@ -2493,6 +2506,7 @@ var SessionManager = class {
     this.tee = null;
     this.evmAddress = null;
     this.solanaAddress = null;
+    this.tronAddress = null;
     this.expiresAt = null;
     if (this.timeoutId) {
       clearTimeout(this.timeoutId);
@@ -2511,7 +2525,11 @@ var SessionManager = class {
   }
   addresses() {
     if (!this.evmAddress || !this.solanaAddress) return null;
-    return { evm: this.evmAddress, solana: this.solanaAddress };
+    return {
+      evm: this.evmAddress,
+      solana: this.solanaAddress,
+      tron: this.tronAddress ?? evmToTronAddress(this.evmAddress)
+    };
   }
 };
 
@@ -3364,9 +3382,11 @@ async function createDecaneConnect(config) {
     let shareSet;
     let evmAddress;
     let solanaAddress;
+    let tronAddress;
     try {
       evmAddress = new Wallet(toHex2(master)).address;
       solanaAddress = Keypair.fromSeed(master).publicKey.toBase58();
+      tronAddress = evmToTronAddress2(evmAddress);
       shareSet = await splitMaster(master, 1);
     } finally {
       zeroize(master);
@@ -3397,10 +3417,11 @@ async function createDecaneConnect(config) {
         // credential IDs, prfSalt, pinSalt stay on-device — never sent to server
       },
       evmAddress,
-      solanaAddress
+      solanaAddress,
+      tronAddress
     });
     zeroize(shareSet.server);
-    const addresses = { evm: evmAddress, solana: solanaAddress };
+    const addresses = { evm: evmAddress, solana: solanaAddress, tron: tronAddress };
     if (unlockMethod === "passkey" && meta.credentialId && meta.prfSalt) {
       try {
         await api.putRecoveryBackup(jwt, {
@@ -3423,6 +3444,7 @@ async function createDecaneConnect(config) {
     }
     addresses.evm = evmAddress = confirmed.evm;
     addresses.solana = solanaAddress = confirmed.solana;
+    addresses.tron = tronAddress = confirmed.tron ?? evmToTronAddress2(confirmed.evm);
     if (config.offerRecoveryAtSignup !== false && config.onRecoveryShareOffer) {
       try {
         const choice = await config.onRecoveryShareOffer({ evmAddress, solanaAddress });
@@ -3446,7 +3468,7 @@ async function createDecaneConnect(config) {
   }
   async function returningUserUnlock(userId, jwt) {
     const rawAddresses = await api.getAddresses(jwt);
-    const recordedAddresses = rawAddresses.evm && rawAddresses.solana ? { evm: rawAddresses.evm, solana: rawAddresses.solana } : null;
+    const recordedAddresses = rawAddresses.evm && rawAddresses.solana ? { evm: rawAddresses.evm, solana: rawAddresses.solana, tron: rawAddresses.tron ?? evmToTronAddress2(rawAddresses.evm) } : null;
     const stored = await storage.getShare(userId);
     let deviceShare;
     if (!stored) {
@@ -3528,7 +3550,7 @@ async function createDecaneConnect(config) {
       throw new ShareCorruptedError();
     }
     const rawAddresses = await api.getAddresses(result.jwt);
-    const recordedAddresses = rawAddresses.evm && rawAddresses.solana ? { evm: rawAddresses.evm, solana: rawAddresses.solana } : null;
+    const recordedAddresses = rawAddresses.evm && rawAddresses.solana ? { evm: rawAddresses.evm, solana: rawAddresses.solana, tron: rawAddresses.tron ?? evmToTronAddress2(rawAddresses.evm) } : null;
     const addresses = await session.start(deviceShare, result.jwt, recordedAddresses);
     zeroize(deviceShare);
     auth = { jwt: result.jwt, userId, addresses };
@@ -3660,6 +3682,10 @@ async function createDecaneConnect(config) {
         const sig = await signSolanaMessage(tee, req.chain, msg, auth?.jwt);
         return bufferToB64u(sig);
       }
+      if (req.chain.startsWith("tron:")) {
+        const msg = typeof req.message === "string" ? req.message : new TextDecoder().decode(req.message);
+        return tee.sign({ chain: req.chain, kind: "message", payload: msg }, auth?.jwt);
+      }
       throw new CallSequenceError(`Unsupported chain: ${req.chain}`);
     },
     async sendTransaction(req) {
@@ -3761,6 +3787,14 @@ async function createDecaneConnect(config) {
       const solChain = config.chains.find((c) => c.startsWith("solana:")) ?? "solana:mainnet";
       return signSolanaTransaction(tee, solChain, tx, auth?.jwt);
     },
+    async signTronTransaction(rawDataHex) {
+      const tee = session.requireActive();
+      const tronChain = config.chains.find((c) => c.startsWith("tron:")) ?? "tron:mainnet";
+      return tee.sign(
+        { chain: tronChain, kind: "transaction", payload: rawDataHex.replace(/^0x/, "") },
+        auth?.jwt
+      );
+    },
     async disconnect() {
       session.end();
       if (auth?.jwt) {
@@ -3916,12 +3950,19 @@ function b64uToBuffer(b64u) {
 function toHex2(bytes) {
   return "0x" + Array.from(bytes).map((b) => b.toString(16).padStart(2, "0")).join("");
 }
+function evmToTronAddress2(evmAddress) {
+  const hex41 = "41" + evmAddress.toLowerCase().replace(/^0x/, "");
+  const checksum = sha2562(sha2562("0x" + hex41)).slice(2, 10);
+  return encodeBase582("0x" + hex41 + checksum);
+}
 async function deriveAddressesFromShares(a, b) {
   const master = await combineShares(a, b);
   try {
+    const evm = new Wallet(toHex2(master)).address;
     return {
-      evm: new Wallet(toHex2(master)).address,
-      solana: Keypair.fromSeed(master).publicKey.toBase58()
+      evm,
+      solana: Keypair.fromSeed(master).publicKey.toBase58(),
+      tron: evmToTronAddress2(evm)
     };
   } finally {
     zeroize(master);
@@ -5943,6 +5984,11 @@ function DecaneKit({ config, children }) {
     if (!sdk) throw new Error("Social wallet not connected");
     return sdk.signSolanaTransaction(tx);
   }, []);
+  const socialSignTronTransaction = useCallback3(async (rawDataHex) => {
+    const sdk = socialRef.current;
+    if (!sdk) throw new Error("Social wallet not connected");
+    return sdk.signTronTransaction(rawDataHex);
+  }, []);
   const socialSignTypedData = useCallback3(async (req) => {
     const sdk = socialRef.current;
     if (!sdk) throw new Error("Social wallet not connected");
@@ -6033,6 +6079,7 @@ function DecaneKit({ config, children }) {
         socialGetBalances,
         socialGetEthereumProvider,
         socialSignAuthorization,
+        socialSignTronTransaction,
         socialGetAccessToken,
         socialSignSolanaTransaction,
         socialSignTypedData,
@@ -6253,6 +6300,7 @@ function useSocialWallet() {
     socialSignMessage,
     socialSendTransaction,
     socialSignSolanaTransaction,
+    socialSignTronTransaction,
     socialSignTypedData,
     socialGetBalance,
     socialGetBalances,
@@ -6295,6 +6343,10 @@ function useSocialWallet() {
     (tx) => run(() => socialSignSolanaTransaction(tx)),
     [socialSignSolanaTransaction]
   );
+  const signTronTransaction = useCallback4(
+    (rawDataHex) => run(() => socialSignTronTransaction(rawDataHex)),
+    [socialSignTronTransaction]
+  );
   const signTypedData = useCallback4(
     (req) => run(() => socialSignTypedData(req)),
     [socialSignTypedData]
@@ -6376,6 +6428,7 @@ function useSocialWallet() {
     signMessage,
     sendTransaction,
     signSolanaTransaction: signSolanaTransaction2,
+    signTronTransaction,
     signTypedData,
     // Balances (native token; read-only, works while locked)
     getBalance,