decane-connect-kit 2.3.1 → 2.5.0

package/dist/index.cjs

@@ -1964,7 +1964,7 @@ function createDecane(config) {
 }
 
 // src/social/client.ts
-var import_ethers2 = require("ethers");
+var import_ethers3 = require("ethers");
 var import_web32 = require("@solana/web3.js");
 init_errors();
 
@@ -2059,10 +2059,26 @@ var ApiClient = class {
         iv: bytesToB64(share.iv),
         wrappedShareMeta: btoa(JSON.stringify(share.wrappedShareMeta)),
         evmAddress: share.evmAddress,
-        solanaAddress: share.solanaAddress
+        solanaAddress: share.solanaAddress,
+        tronAddress: share.tronAddress
       })
     });
   }
+  // ── Transaction history ───────────────────────────────────────────────────
+  async recordTransaction(jwt, tx) {
+    const body = await this._request("/transactions", {
+      method: "POST",
+      headers: { Authorization: `Bearer ${jwt}` },
+      body: JSON.stringify(tx)
+    });
+    return body.transaction;
+  }
+  async getTransactions(jwt, limit = 50) {
+    const body = await this._request(`/transactions?limit=${encodeURIComponent(String(limit))}`, {
+      headers: { Authorization: `Bearer ${jwt}` }
+    });
+    return body.transactions;
+  }
   // ── WebAuthn registration (additive to the PRF-only passkey flow) ─────────
   async getWebAuthnRegisterOptions(jwt, rpId, rpName) {
     return this._request(`/webauthn/register-options?rpId=${encodeURIComponent(rpId)}&rpName=${encodeURIComponent(rpName)}`, {
@@ -2200,6 +2216,9 @@ var Storage = class {
   }
 };
 
+// src/social/session.ts
+var import_ethers = require("ethers");
+
 // src/social/teeClient.ts
 var import_browser = require("@simplewebauthn/browser");
 
@@ -2480,6 +2499,11 @@ var TeeClient = class {
 
 // src/social/session.ts
 init_errors();
+function evmToTronAddress(evmAddress) {
+  const hex41 = "41" + evmAddress.toLowerCase().replace(/^0x/, "");
+  const checksum = (0, import_ethers.sha256)((0, import_ethers.sha256)("0x" + hex41)).slice(2, 10);
+  return (0, import_ethers.encodeBase58)("0x" + hex41 + checksum);
+}
 var SessionManager = class {
   constructor(events, durationMs, teeUrl, requireAssertionPerSignature = false) {
     this.events = events;
@@ -2489,6 +2513,7 @@ var SessionManager = class {
     this.tee = null;
     this.evmAddress = null;
     this.solanaAddress = null;
+    this.tronAddress = null;
     this.expiresAt = null;
     this.timeoutId = null;
   }
@@ -2515,6 +2540,7 @@ var SessionManager = class {
     this.tee.adoptHandle(handle, this.requireAssertionPerSignature);
     this.evmAddress = addresses.evm;
     this.solanaAddress = addresses.solana;
+    this.tronAddress = addresses.tron ?? evmToTronAddress(addresses.evm);
     this.expiresAt = expiresAtMs;
     this.setExpiryTimer(expiresAtMs - Date.now());
     this.events.emit("session-started");
@@ -2541,15 +2567,17 @@ var SessionManager = class {
         "requireAssertionPerSignature was requested but this signer does not support it \u2014 refusing to open a session with weaker authority than configured."
       );
     }
-    const addresses = verified ?? fallback;
-    if (!addresses) {
+    const resolved = verified ?? fallback;
+    if (!resolved) {
       this.tee = null;
       throw new Error(
         "No addresses available for this wallet \u2014 the signer could not derive them and none are recorded"
       );
     }
+    const addresses = { evm: resolved.evm, solana: resolved.solana, tron: resolved.tron ?? evmToTronAddress(resolved.evm) };
     this.evmAddress = addresses.evm;
     this.solanaAddress = addresses.solana;
+    this.tronAddress = addresses.tron;
     const serverTtlMs = this.tee.sessionExpiresIn();
     const effectiveMs = serverTtlMs != null ? Math.min(this.durationMs, serverTtlMs * 1e3) : this.durationMs;
     this.expiresAt = Date.now() + effectiveMs;
@@ -2566,6 +2594,7 @@ var SessionManager = class {
     this.tee = null;
     this.evmAddress = null;
     this.solanaAddress = null;
+    this.tronAddress = null;
     this.expiresAt = null;
     if (this.timeoutId) {
       clearTimeout(this.timeoutId);
@@ -2584,7 +2613,11 @@ var SessionManager = class {
   }
   addresses() {
     if (!this.evmAddress || !this.solanaAddress) return null;
-    return { evm: this.evmAddress, solana: this.solanaAddress };
+    return {
+      evm: this.evmAddress,
+      solana: this.solanaAddress,
+      tron: this.tronAddress ?? evmToTronAddress(this.evmAddress)
+    };
   }
 };
 
@@ -2767,12 +2800,12 @@ async function verifyEmailCode(api, email, code) {
 }
 
 // src/social/signers/evm.ts
-var import_ethers = require("ethers");
+var import_ethers2 = require("ethers");
 async function signEvmTransaction(tee, chain, tx, jwt) {
-  const resolved = await (0, import_ethers.resolveProperties)(tx);
-  const unsigned = import_ethers.Transaction.from(resolved).unsignedSerialized;
+  const resolved = await (0, import_ethers2.resolveProperties)(tx);
+  const unsigned = import_ethers2.Transaction.from(resolved).unsignedSerialized;
   const payload = unsigned.startsWith("0x") ? unsigned.slice(2) : unsigned;
-  const txHash = (0, import_ethers.keccak256)("0x" + payload);
+  const txHash = (0, import_ethers2.keccak256)("0x" + payload);
   return tee.sign({ chain, kind: "transaction", payload, txHash }, jwt);
 }
 async function signEvmMessage(tee, chain, message, jwt) {
@@ -3437,9 +3470,11 @@ async function createDecaneConnect(config) {
     let shareSet;
     let evmAddress;
     let solanaAddress;
+    let tronAddress;
     try {
-      evmAddress = new import_ethers2.Wallet(toHex2(master)).address;
+      evmAddress = new import_ethers3.Wallet(toHex2(master)).address;
       solanaAddress = import_web32.Keypair.fromSeed(master).publicKey.toBase58();
+      tronAddress = evmToTronAddress2(evmAddress);
       shareSet = await splitMaster(master, 1);
     } finally {
       zeroize(master);
@@ -3470,10 +3505,11 @@ async function createDecaneConnect(config) {
         // credential IDs, prfSalt, pinSalt stay on-device — never sent to server
       },
       evmAddress,
-      solanaAddress
+      solanaAddress,
+      tronAddress
     });
     zeroize(shareSet.server);
-    const addresses = { evm: evmAddress, solana: solanaAddress };
+    const addresses = { evm: evmAddress, solana: solanaAddress, tron: tronAddress };
     if (unlockMethod === "passkey" && meta.credentialId && meta.prfSalt) {
       try {
         await api.putRecoveryBackup(jwt, {
@@ -3496,6 +3532,7 @@ async function createDecaneConnect(config) {
     }
     addresses.evm = evmAddress = confirmed.evm;
     addresses.solana = solanaAddress = confirmed.solana;
+    addresses.tron = tronAddress = confirmed.tron ?? evmToTronAddress2(confirmed.evm);
     if (config.offerRecoveryAtSignup !== false && config.onRecoveryShareOffer) {
       try {
         const choice = await config.onRecoveryShareOffer({ evmAddress, solanaAddress });
@@ -3519,7 +3556,7 @@ async function createDecaneConnect(config) {
   }
   async function returningUserUnlock(userId, jwt) {
     const rawAddresses = await api.getAddresses(jwt);
-    const recordedAddresses = rawAddresses.evm && rawAddresses.solana ? { evm: rawAddresses.evm, solana: rawAddresses.solana } : null;
+    const recordedAddresses = rawAddresses.evm && rawAddresses.solana ? { evm: rawAddresses.evm, solana: rawAddresses.solana, tron: rawAddresses.tron ?? evmToTronAddress2(rawAddresses.evm) } : null;
     const stored = await storage.getShare(userId);
     let deviceShare;
     if (!stored) {
@@ -3601,7 +3638,7 @@ async function createDecaneConnect(config) {
       throw new ShareCorruptedError();
     }
     const rawAddresses = await api.getAddresses(result.jwt);
-    const recordedAddresses = rawAddresses.evm && rawAddresses.solana ? { evm: rawAddresses.evm, solana: rawAddresses.solana } : null;
+    const recordedAddresses = rawAddresses.evm && rawAddresses.solana ? { evm: rawAddresses.evm, solana: rawAddresses.solana, tron: rawAddresses.tron ?? evmToTronAddress2(rawAddresses.evm) } : null;
     const addresses = await session.start(deviceShare, result.jwt, recordedAddresses);
     zeroize(deviceShare);
     auth = { jwt: result.jwt, userId, addresses };
@@ -3733,6 +3770,10 @@ async function createDecaneConnect(config) {
         const sig = await signSolanaMessage(tee, req.chain, msg, auth?.jwt);
         return bufferToB64u(sig);
       }
+      if (req.chain.startsWith("tron:")) {
+        const msg = typeof req.message === "string" ? req.message : new TextDecoder().decode(req.message);
+        return tee.sign({ chain: req.chain, kind: "message", payload: msg }, auth?.jwt);
+      }
       throw new CallSequenceError(`Unsupported chain: ${req.chain}`);
     },
     async sendTransaction(req) {
@@ -3780,6 +3821,16 @@ async function createDecaneConnect(config) {
       };
       const signedTx = await signEvmTransaction(tee, req.chain, tx, auth?.jwt);
       const txResponse = await provider.broadcastTransaction(signedTx);
+      if (auth?.jwt) {
+        void api.recordTransaction(auth.jwt, {
+          chain: req.chain,
+          txHash: txResponse.hash,
+          to: req.to,
+          value: (req.value ?? 0n).toString(),
+          kind: "send"
+        }).catch(() => {
+        });
+      }
       return txResponse.hash;
     },
     async signTypedData(req) {
@@ -3812,6 +3863,14 @@ async function createDecaneConnect(config) {
     getAccessToken() {
       return auth?.jwt ?? null;
     },
+    async recordTransaction(tx) {
+      if (!auth?.jwt) throw new CallSequenceError("Not connected \u2014 call connect() first");
+      return api.recordTransaction(auth.jwt, tx);
+    },
+    async getTransactionHistory(limit = 50) {
+      if (!auth?.jwt) throw new CallSequenceError("Not connected \u2014 call connect() first");
+      return api.getTransactions(auth.jwt, limit);
+    },
     getEthereumProvider(opts) {
       if (!ethProvider) {
         const firstEvm = config.chains.find((c) => c.startsWith("evm:"));
@@ -3834,6 +3893,14 @@ async function createDecaneConnect(config) {
       const solChain = config.chains.find((c) => c.startsWith("solana:")) ?? "solana:mainnet";
       return signSolanaTransaction(tee, solChain, tx, auth?.jwt);
     },
+    async signTronTransaction(rawDataHex) {
+      const tee = session.requireActive();
+      const tronChain = config.chains.find((c) => c.startsWith("tron:")) ?? "tron:mainnet";
+      return tee.sign(
+        { chain: tronChain, kind: "transaction", payload: rawDataHex.replace(/^0x/, "") },
+        auth?.jwt
+      );
+    },
     async disconnect() {
       session.end();
       if (auth?.jwt) {
@@ -3989,12 +4056,19 @@ function b64uToBuffer(b64u) {
 function toHex2(bytes) {
   return "0x" + Array.from(bytes).map((b) => b.toString(16).padStart(2, "0")).join("");
 }
+function evmToTronAddress2(evmAddress) {
+  const hex41 = "41" + evmAddress.toLowerCase().replace(/^0x/, "");
+  const checksum = (0, import_ethers3.sha256)((0, import_ethers3.sha256)("0x" + hex41)).slice(2, 10);
+  return (0, import_ethers3.encodeBase58)("0x" + hex41 + checksum);
+}
 async function deriveAddressesFromShares(a, b) {
   const master = await combineShares(a, b);
   try {
+    const evm = new import_ethers3.Wallet(toHex2(master)).address;
     return {
-      evm: new import_ethers2.Wallet(toHex2(master)).address,
-      solana: import_web32.Keypair.fromSeed(master).publicKey.toBase58()
+      evm,
+      solana: import_web32.Keypair.fromSeed(master).publicKey.toBase58(),
+      tron: evmToTronAddress2(evm)
     };
   } finally {
     zeroize(master);
@@ -6009,6 +6083,21 @@ function DecaneKit({ config, children }) {
     if (!sdk) throw new Error("Social wallet not connected");
     return sdk.signSolanaTransaction(tx);
   }, []);
+  const socialSignTronTransaction = (0, import_react5.useCallback)(async (rawDataHex) => {
+    const sdk = socialRef.current;
+    if (!sdk) throw new Error("Social wallet not connected");
+    return sdk.signTronTransaction(rawDataHex);
+  }, []);
+  const socialRecordTransaction = (0, import_react5.useCallback)(async (tx) => {
+    const sdk = socialRef.current;
+    if (!sdk) throw new Error("Social wallet not connected");
+    return sdk.recordTransaction(tx);
+  }, []);
+  const socialGetTransactionHistory = (0, import_react5.useCallback)(async (limit) => {
+    const sdk = socialRef.current;
+    if (!sdk) throw new Error("Social wallet not connected");
+    return sdk.getTransactionHistory(limit);
+  }, []);
   const socialSignTypedData = (0, import_react5.useCallback)(async (req) => {
     const sdk = socialRef.current;
     if (!sdk) throw new Error("Social wallet not connected");
@@ -6099,6 +6188,9 @@ function DecaneKit({ config, children }) {
         socialGetBalances,
         socialGetEthereumProvider,
         socialSignAuthorization,
+        socialSignTronTransaction,
+        socialRecordTransaction,
+        socialGetTransactionHistory,
         socialGetAccessToken,
         socialSignSolanaTransaction,
         socialSignTypedData,
@@ -6319,6 +6411,9 @@ function useSocialWallet() {
     socialSignMessage,
     socialSendTransaction,
     socialSignSolanaTransaction,
+    socialSignTronTransaction,
+    socialRecordTransaction,
+    socialGetTransactionHistory,
     socialSignTypedData,
     socialGetBalance,
     socialGetBalances,
@@ -6361,6 +6456,18 @@ function useSocialWallet() {
     (tx) => run(() => socialSignSolanaTransaction(tx)),
     [socialSignSolanaTransaction]
   );
+  const signTronTransaction = (0, import_react6.useCallback)(
+    (rawDataHex) => run(() => socialSignTronTransaction(rawDataHex)),
+    [socialSignTronTransaction]
+  );
+  const recordTransaction = (0, import_react6.useCallback)(
+    (tx) => run(() => socialRecordTransaction(tx)),
+    [socialRecordTransaction]
+  );
+  const getTransactionHistory = (0, import_react6.useCallback)(
+    (limit) => socialGetTransactionHistory(limit),
+    [socialGetTransactionHistory]
+  );
   const signTypedData = (0, import_react6.useCallback)(
     (req) => run(() => socialSignTypedData(req)),
     [socialSignTypedData]
@@ -6442,6 +6549,9 @@ function useSocialWallet() {
     signMessage,
     sendTransaction,
     signSolanaTransaction: signSolanaTransaction2,
+    signTronTransaction,
+    recordTransaction,
+    getTransactionHistory,
     signTypedData,
     // Balances (native token; read-only, works while locked)
     getBalance,