decane-connect-kit 2.3.1 → 2.5.0

package/dist/index.d.cts

@@ -175,6 +175,7 @@ declare class ApiClient {
     getAddresses(jwt: string): Promise<{
         evm: string | null;
         solana: string | null;
+        tron: string | null;
     }>;
     putShare(jwt: string, share: {
         ciphertext: Uint8Array;
@@ -182,7 +183,18 @@ declare class ApiClient {
         wrappedShareMeta: WrappedShareMeta;
         evmAddress: string;
         solanaAddress: string;
+        tronAddress: string;
     }): Promise<void>;
+    recordTransaction(jwt: string, tx: {
+        chain: string;
+        txHash?: string;
+        to?: string;
+        value?: string;
+        kind?: string;
+        status?: string;
+        metadata?: Record<string, unknown>;
+    }): Promise<TransactionRecord>;
+    getTransactions(jwt: string, limit?: number): Promise<TransactionRecord[]>;
     getWebAuthnRegisterOptions(jwt: string, rpId: string, rpName: string): Promise<_simplewebauthn_browser.PublicKeyCredentialCreationOptionsJSON>;
     postWebAuthnRegister(jwt: string, response: _simplewebauthn_browser.RegistrationResponseJSON, origin: string): Promise<void>;
     /**
@@ -327,7 +339,7 @@ interface SignedAuthorization {
     s: string;
 }
 
-type Chain = `evm:${number}` | `solana:${'mainnet' | 'devnet'}`;
+type Chain = `evm:${number}` | `solana:${'mainnet' | 'devnet'}` | `tron:${'mainnet' | 'shasta' | 'nile'}`;
 interface DecaneConnectConfig {
     /** Dashboard project ID (public). Sent with every request so the backend can
      *  confirm the API key below actually belongs to this project. */
@@ -405,9 +417,33 @@ interface ConnectResult {
     addresses: {
         evm?: string;
         solana?: string;
+        tron?: string;
     };
     isNewUser: boolean;
 }
+/** A recorded on-chain transaction in the user's history. */
+interface TransactionRecord {
+    id: string;
+    chain: string;
+    kind: string;
+    txHash: string | null;
+    to: string | null;
+    value: string | null;
+    status: 'submitted' | 'confirmed' | 'failed' | string;
+    metadata: Record<string, unknown> | null;
+    createdAt: string;
+    updatedAt?: string;
+}
+/** What the dApp passes to record a transaction it broadcast. */
+interface RecordTransactionInput {
+    chain: string;
+    txHash?: string;
+    to?: string;
+    value?: string;
+    kind?: string;
+    status?: string;
+    metadata?: Record<string, unknown>;
+}
 interface SignMessageRequest {
     chain: Chain;
     message: string | Uint8Array;
@@ -510,10 +546,28 @@ interface DecaneConnect {
      */
     getAccessToken(): string | null;
     signSolanaTransaction(tx: Uint8Array): Promise<Uint8Array>;
+    /**
+     * Sign a Tron transaction. Pass the transaction's `raw_data_hex` (the value
+     * TronWeb puts on a built transaction). The enclave computes the txID
+     * (sha256(raw_data)) and signs it with the same secp256k1 key as the EVM
+     * wallet; returns the 65-byte recoverable signature as 0x-hex. Attach it to
+     * the transaction's `signature` array and broadcast via TronWeb / a full node.
+     */
+    signTronTransaction(rawDataHex: string): Promise<string>;
+    /**
+     * Record a transaction this wallet broadcast, so it appears in the user's
+     * history (and the developer dashboard). EVM `sendTransaction` records itself
+     * automatically; call this for Solana/Tron transactions your dApp broadcasts,
+     * or to attach a `confirmed`/`failed` status update to an existing hash.
+     */
+    recordTransaction(tx: RecordTransactionInput): Promise<TransactionRecord>;
+    /** The user's transaction history, most recent first. Requires a live session. */
+    getTransactionHistory(limit?: number): Promise<TransactionRecord[]>;
     disconnect(): Promise<void>;
     getAddresses(): {
         evm?: string;
         solana?: string;
+        tron?: string;
     } | null;
     /**
      * Native-token balance for a chain (defaults to the first configured EVM
@@ -780,6 +834,7 @@ interface SocialAuthState {
     addresses: {
         evm?: string;
         solana?: string;
+        tron?: string;
     } | null;
     isNewUser: boolean;
     isUnlocked: boolean;
@@ -864,6 +919,7 @@ declare function useSocialAuth(): {
     addresses: {
         evm?: string;
         solana?: string;
+        tron?: string;
     } | null;
     sessionExpiresAt: number | null;
     canUsePasskey: boolean;
@@ -897,6 +953,7 @@ declare function useSocialWallet(): {
     addresses: {
         evm?: string;
         solana?: string;
+        tron?: string;
     } | null;
     sessionExpiresAt: number | null;
     needsReconnect: boolean;
@@ -917,6 +974,9 @@ declare function useSocialWallet(): {
         gasPrice?: bigint;
     }) => Promise<string>;
     signSolanaTransaction: (tx: Uint8Array) => Promise<Uint8Array<ArrayBufferLike>>;
+    signTronTransaction: (rawDataHex: string) => Promise<string>;
+    recordTransaction: (tx: RecordTransactionInput) => Promise<TransactionRecord>;
+    getTransactionHistory: (limit?: number) => Promise<TransactionRecord[]>;
     signTypedData: (req: {
         chain: string;
         domain: Record<string, unknown>;
@@ -1035,4 +1095,4 @@ declare function useSignTypedData(): {
     reset: () => void;
 };
 
-export { type ActiveSession, AttestationError, type AuthResult, BUILT_IN_CHAINS, type BalanceResult, type CAIP25Method, type CAIP25SessionRequest, type CAIP25SessionResult, CHAINS, CallSequenceError, type Chain, type ChainDescriptor, type ChainId, type ChainScope, type ChainSupport, type ChainType, type ConnectMode, type ConnectResult, type DecaneConfig, type DecaneConnect, type DecaneConnectConfig, DecaneConnectError, DecaneError, DecaneErrorCode, DecaneKit, DecaneLogo, DecaneMark, type DecaneProvider, DecaneWordmark, type Eip1193Provider, type EthereumProviderOptions, ExportNotAuthorizedError, InvalidApiKeyError, InvalidPinError, InvalidRecoveryFileError, NetworkError, NewDeviceError, OriginNotAllowedError, type PortableBackup, PromptPinNotConfiguredError, ReconnectRequiredError, RecoveryFailedError, type RecoveryProgress, type RecoveryShareFile, RecoveryWalletMismatchError, type SdkEvent, type SendTransactionRequest, SessionExpiredError, ShareCorruptedError, type SignMessageRequest, type SignTypedDataRequest, type SignedAuthorization, type SocialAuthState, type SocialConfig, SocialWalletModal, type Theme, type TxParams, type UnifiedWalletAccount, UnlockRequiredError, UserCancelledError, WalletSelector, WebAuthnNotSupportedError, type WrappedShareMeta, WrongPasswordError, createDecane, createDecaneConnect, createEthereumProvider, startEmailAuth, useChainSwitch, useDecane, useEthereumProvider, useSendTransaction, useSignMessage, useSignTypedData, useSocialAuth, useSocialBalance, useSocialWallet, useWalletSelector, verifyEmailCode };
+export { type ActiveSession, AttestationError, type AuthResult, BUILT_IN_CHAINS, type BalanceResult, type CAIP25Method, type CAIP25SessionRequest, type CAIP25SessionResult, CHAINS, CallSequenceError, type Chain, type ChainDescriptor, type ChainId, type ChainScope, type ChainSupport, type ChainType, type ConnectMode, type ConnectResult, type DecaneConfig, type DecaneConnect, type DecaneConnectConfig, DecaneConnectError, DecaneError, DecaneErrorCode, DecaneKit, DecaneLogo, DecaneMark, type DecaneProvider, DecaneWordmark, type Eip1193Provider, type EthereumProviderOptions, ExportNotAuthorizedError, InvalidApiKeyError, InvalidPinError, InvalidRecoveryFileError, NetworkError, NewDeviceError, OriginNotAllowedError, type PortableBackup, PromptPinNotConfiguredError, ReconnectRequiredError, type RecordTransactionInput, RecoveryFailedError, type RecoveryProgress, type RecoveryShareFile, RecoveryWalletMismatchError, type SdkEvent, type SendTransactionRequest, SessionExpiredError, ShareCorruptedError, type SignMessageRequest, type SignTypedDataRequest, type SignedAuthorization, type SocialAuthState, type SocialConfig, SocialWalletModal, type Theme, type TransactionRecord, type TxParams, type UnifiedWalletAccount, UnlockRequiredError, UserCancelledError, WalletSelector, WebAuthnNotSupportedError, type WrappedShareMeta, WrongPasswordError, createDecane, createDecaneConnect, createEthereumProvider, startEmailAuth, useChainSwitch, useDecane, useEthereumProvider, useSendTransaction, useSignMessage, useSignTypedData, useSocialAuth, useSocialBalance, useSocialWallet, useWalletSelector, verifyEmailCode };

package/dist/index.d.ts

@@ -175,6 +175,7 @@ declare class ApiClient {
     getAddresses(jwt: string): Promise<{
         evm: string | null;
         solana: string | null;
+        tron: string | null;
     }>;
     putShare(jwt: string, share: {
         ciphertext: Uint8Array;
@@ -182,7 +183,18 @@ declare class ApiClient {
         wrappedShareMeta: WrappedShareMeta;
         evmAddress: string;
         solanaAddress: string;
+        tronAddress: string;
     }): Promise<void>;
+    recordTransaction(jwt: string, tx: {
+        chain: string;
+        txHash?: string;
+        to?: string;
+        value?: string;
+        kind?: string;
+        status?: string;
+        metadata?: Record<string, unknown>;
+    }): Promise<TransactionRecord>;
+    getTransactions(jwt: string, limit?: number): Promise<TransactionRecord[]>;
     getWebAuthnRegisterOptions(jwt: string, rpId: string, rpName: string): Promise<_simplewebauthn_browser.PublicKeyCredentialCreationOptionsJSON>;
     postWebAuthnRegister(jwt: string, response: _simplewebauthn_browser.RegistrationResponseJSON, origin: string): Promise<void>;
     /**
@@ -327,7 +339,7 @@ interface SignedAuthorization {
     s: string;
 }
 
-type Chain = `evm:${number}` | `solana:${'mainnet' | 'devnet'}`;
+type Chain = `evm:${number}` | `solana:${'mainnet' | 'devnet'}` | `tron:${'mainnet' | 'shasta' | 'nile'}`;
 interface DecaneConnectConfig {
     /** Dashboard project ID (public). Sent with every request so the backend can
      *  confirm the API key below actually belongs to this project. */
@@ -405,9 +417,33 @@ interface ConnectResult {
     addresses: {
         evm?: string;
         solana?: string;
+        tron?: string;
     };
     isNewUser: boolean;
 }
+/** A recorded on-chain transaction in the user's history. */
+interface TransactionRecord {
+    id: string;
+    chain: string;
+    kind: string;
+    txHash: string | null;
+    to: string | null;
+    value: string | null;
+    status: 'submitted' | 'confirmed' | 'failed' | string;
+    metadata: Record<string, unknown> | null;
+    createdAt: string;
+    updatedAt?: string;
+}
+/** What the dApp passes to record a transaction it broadcast. */
+interface RecordTransactionInput {
+    chain: string;
+    txHash?: string;
+    to?: string;
+    value?: string;
+    kind?: string;
+    status?: string;
+    metadata?: Record<string, unknown>;
+}
 interface SignMessageRequest {
     chain: Chain;
     message: string | Uint8Array;
@@ -510,10 +546,28 @@ interface DecaneConnect {
      */
     getAccessToken(): string | null;
     signSolanaTransaction(tx: Uint8Array): Promise<Uint8Array>;
+    /**
+     * Sign a Tron transaction. Pass the transaction's `raw_data_hex` (the value
+     * TronWeb puts on a built transaction). The enclave computes the txID
+     * (sha256(raw_data)) and signs it with the same secp256k1 key as the EVM
+     * wallet; returns the 65-byte recoverable signature as 0x-hex. Attach it to
+     * the transaction's `signature` array and broadcast via TronWeb / a full node.
+     */
+    signTronTransaction(rawDataHex: string): Promise<string>;
+    /**
+     * Record a transaction this wallet broadcast, so it appears in the user's
+     * history (and the developer dashboard). EVM `sendTransaction` records itself
+     * automatically; call this for Solana/Tron transactions your dApp broadcasts,
+     * or to attach a `confirmed`/`failed` status update to an existing hash.
+     */
+    recordTransaction(tx: RecordTransactionInput): Promise<TransactionRecord>;
+    /** The user's transaction history, most recent first. Requires a live session. */
+    getTransactionHistory(limit?: number): Promise<TransactionRecord[]>;
     disconnect(): Promise<void>;
     getAddresses(): {
         evm?: string;
         solana?: string;
+        tron?: string;
     } | null;
     /**
      * Native-token balance for a chain (defaults to the first configured EVM
@@ -780,6 +834,7 @@ interface SocialAuthState {
     addresses: {
         evm?: string;
         solana?: string;
+        tron?: string;
     } | null;
     isNewUser: boolean;
     isUnlocked: boolean;
@@ -864,6 +919,7 @@ declare function useSocialAuth(): {
     addresses: {
         evm?: string;
         solana?: string;
+        tron?: string;
     } | null;
     sessionExpiresAt: number | null;
     canUsePasskey: boolean;
@@ -897,6 +953,7 @@ declare function useSocialWallet(): {
     addresses: {
         evm?: string;
         solana?: string;
+        tron?: string;
     } | null;
     sessionExpiresAt: number | null;
     needsReconnect: boolean;
@@ -917,6 +974,9 @@ declare function useSocialWallet(): {
         gasPrice?: bigint;
     }) => Promise<string>;
     signSolanaTransaction: (tx: Uint8Array) => Promise<Uint8Array<ArrayBufferLike>>;
+    signTronTransaction: (rawDataHex: string) => Promise<string>;
+    recordTransaction: (tx: RecordTransactionInput) => Promise<TransactionRecord>;
+    getTransactionHistory: (limit?: number) => Promise<TransactionRecord[]>;
     signTypedData: (req: {
         chain: string;
         domain: Record<string, unknown>;
@@ -1035,4 +1095,4 @@ declare function useSignTypedData(): {
     reset: () => void;
 };
 
-export { type ActiveSession, AttestationError, type AuthResult, BUILT_IN_CHAINS, type BalanceResult, type CAIP25Method, type CAIP25SessionRequest, type CAIP25SessionResult, CHAINS, CallSequenceError, type Chain, type ChainDescriptor, type ChainId, type ChainScope, type ChainSupport, type ChainType, type ConnectMode, type ConnectResult, type DecaneConfig, type DecaneConnect, type DecaneConnectConfig, DecaneConnectError, DecaneError, DecaneErrorCode, DecaneKit, DecaneLogo, DecaneMark, type DecaneProvider, DecaneWordmark, type Eip1193Provider, type EthereumProviderOptions, ExportNotAuthorizedError, InvalidApiKeyError, InvalidPinError, InvalidRecoveryFileError, NetworkError, NewDeviceError, OriginNotAllowedError, type PortableBackup, PromptPinNotConfiguredError, ReconnectRequiredError, RecoveryFailedError, type RecoveryProgress, type RecoveryShareFile, RecoveryWalletMismatchError, type SdkEvent, type SendTransactionRequest, SessionExpiredError, ShareCorruptedError, type SignMessageRequest, type SignTypedDataRequest, type SignedAuthorization, type SocialAuthState, type SocialConfig, SocialWalletModal, type Theme, type TxParams, type UnifiedWalletAccount, UnlockRequiredError, UserCancelledError, WalletSelector, WebAuthnNotSupportedError, type WrappedShareMeta, WrongPasswordError, createDecane, createDecaneConnect, createEthereumProvider, startEmailAuth, useChainSwitch, useDecane, useEthereumProvider, useSendTransaction, useSignMessage, useSignTypedData, useSocialAuth, useSocialBalance, useSocialWallet, useWalletSelector, verifyEmailCode };
+export { type ActiveSession, AttestationError, type AuthResult, BUILT_IN_CHAINS, type BalanceResult, type CAIP25Method, type CAIP25SessionRequest, type CAIP25SessionResult, CHAINS, CallSequenceError, type Chain, type ChainDescriptor, type ChainId, type ChainScope, type ChainSupport, type ChainType, type ConnectMode, type ConnectResult, type DecaneConfig, type DecaneConnect, type DecaneConnectConfig, DecaneConnectError, DecaneError, DecaneErrorCode, DecaneKit, DecaneLogo, DecaneMark, type DecaneProvider, DecaneWordmark, type Eip1193Provider, type EthereumProviderOptions, ExportNotAuthorizedError, InvalidApiKeyError, InvalidPinError, InvalidRecoveryFileError, NetworkError, NewDeviceError, OriginNotAllowedError, type PortableBackup, PromptPinNotConfiguredError, ReconnectRequiredError, type RecordTransactionInput, RecoveryFailedError, type RecoveryProgress, type RecoveryShareFile, RecoveryWalletMismatchError, type SdkEvent, type SendTransactionRequest, SessionExpiredError, ShareCorruptedError, type SignMessageRequest, type SignTypedDataRequest, type SignedAuthorization, type SocialAuthState, type SocialConfig, SocialWalletModal, type Theme, type TransactionRecord, type TxParams, type UnifiedWalletAccount, UnlockRequiredError, UserCancelledError, WalletSelector, WebAuthnNotSupportedError, type WrappedShareMeta, WrongPasswordError, createDecane, createDecaneConnect, createEthereumProvider, startEmailAuth, useChainSwitch, useDecane, useEthereumProvider, useSendTransaction, useSignMessage, useSignTypedData, useSocialAuth, useSocialBalance, useSocialWallet, useWalletSelector, verifyEmailCode };

package/dist/index.js

@@ -1892,7 +1892,7 @@ function createDecane(config) {
 
 // src/social/client.ts
 init_errors();
-import { Wallet } from "ethers";
+import { Wallet, sha256 as sha2562, encodeBase58 as encodeBase582 } from "ethers";
 import { Transaction as Transaction2, VersionedTransaction, Keypair } from "@solana/web3.js";
 
 // src/social/events.ts
@@ -1986,10 +1986,26 @@ var ApiClient = class {
         iv: bytesToB64(share.iv),
         wrappedShareMeta: btoa(JSON.stringify(share.wrappedShareMeta)),
         evmAddress: share.evmAddress,
-        solanaAddress: share.solanaAddress
+        solanaAddress: share.solanaAddress,
+        tronAddress: share.tronAddress
       })
     });
   }
+  // ── Transaction history ───────────────────────────────────────────────────
+  async recordTransaction(jwt, tx) {
+    const body = await this._request("/transactions", {
+      method: "POST",
+      headers: { Authorization: `Bearer ${jwt}` },
+      body: JSON.stringify(tx)
+    });
+    return body.transaction;
+  }
+  async getTransactions(jwt, limit = 50) {
+    const body = await this._request(`/transactions?limit=${encodeURIComponent(String(limit))}`, {
+      headers: { Authorization: `Bearer ${jwt}` }
+    });
+    return body.transactions;
+  }
   // ── WebAuthn registration (additive to the PRF-only passkey flow) ─────────
   async getWebAuthnRegisterOptions(jwt, rpId, rpName) {
     return this._request(`/webauthn/register-options?rpId=${encodeURIComponent(rpId)}&rpName=${encodeURIComponent(rpName)}`, {
@@ -2127,6 +2143,9 @@ var Storage = class {
   }
 };
 
+// src/social/session.ts
+import { sha256, encodeBase58 } from "ethers";
+
 // src/social/teeClient.ts
 import { startAuthentication } from "@simplewebauthn/browser";
 
@@ -2407,6 +2426,11 @@ var TeeClient = class {
 
 // src/social/session.ts
 init_errors();
+function evmToTronAddress(evmAddress) {
+  const hex41 = "41" + evmAddress.toLowerCase().replace(/^0x/, "");
+  const checksum = sha256(sha256("0x" + hex41)).slice(2, 10);
+  return encodeBase58("0x" + hex41 + checksum);
+}
 var SessionManager = class {
   constructor(events, durationMs, teeUrl, requireAssertionPerSignature = false) {
     this.events = events;
@@ -2416,6 +2440,7 @@ var SessionManager = class {
     this.tee = null;
     this.evmAddress = null;
     this.solanaAddress = null;
+    this.tronAddress = null;
     this.expiresAt = null;
     this.timeoutId = null;
   }
@@ -2442,6 +2467,7 @@ var SessionManager = class {
     this.tee.adoptHandle(handle, this.requireAssertionPerSignature);
     this.evmAddress = addresses.evm;
     this.solanaAddress = addresses.solana;
+    this.tronAddress = addresses.tron ?? evmToTronAddress(addresses.evm);
     this.expiresAt = expiresAtMs;
     this.setExpiryTimer(expiresAtMs - Date.now());
     this.events.emit("session-started");
@@ -2468,15 +2494,17 @@ var SessionManager = class {
         "requireAssertionPerSignature was requested but this signer does not support it \u2014 refusing to open a session with weaker authority than configured."
       );
     }
-    const addresses = verified ?? fallback;
-    if (!addresses) {
+    const resolved = verified ?? fallback;
+    if (!resolved) {
       this.tee = null;
       throw new Error(
         "No addresses available for this wallet \u2014 the signer could not derive them and none are recorded"
       );
     }
+    const addresses = { evm: resolved.evm, solana: resolved.solana, tron: resolved.tron ?? evmToTronAddress(resolved.evm) };
     this.evmAddress = addresses.evm;
     this.solanaAddress = addresses.solana;
+    this.tronAddress = addresses.tron;
     const serverTtlMs = this.tee.sessionExpiresIn();
     const effectiveMs = serverTtlMs != null ? Math.min(this.durationMs, serverTtlMs * 1e3) : this.durationMs;
     this.expiresAt = Date.now() + effectiveMs;
@@ -2493,6 +2521,7 @@ var SessionManager = class {
     this.tee = null;
     this.evmAddress = null;
     this.solanaAddress = null;
+    this.tronAddress = null;
     this.expiresAt = null;
     if (this.timeoutId) {
       clearTimeout(this.timeoutId);
@@ -2511,7 +2540,11 @@ var SessionManager = class {
   }
   addresses() {
     if (!this.evmAddress || !this.solanaAddress) return null;
-    return { evm: this.evmAddress, solana: this.solanaAddress };
+    return {
+      evm: this.evmAddress,
+      solana: this.solanaAddress,
+      tron: this.tronAddress ?? evmToTronAddress(this.evmAddress)
+    };
   }
 };
 
@@ -3364,9 +3397,11 @@ async function createDecaneConnect(config) {
     let shareSet;
     let evmAddress;
     let solanaAddress;
+    let tronAddress;
     try {
       evmAddress = new Wallet(toHex2(master)).address;
       solanaAddress = Keypair.fromSeed(master).publicKey.toBase58();
+      tronAddress = evmToTronAddress2(evmAddress);
       shareSet = await splitMaster(master, 1);
     } finally {
       zeroize(master);
@@ -3397,10 +3432,11 @@ async function createDecaneConnect(config) {
         // credential IDs, prfSalt, pinSalt stay on-device — never sent to server
       },
       evmAddress,
-      solanaAddress
+      solanaAddress,
+      tronAddress
     });
     zeroize(shareSet.server);
-    const addresses = { evm: evmAddress, solana: solanaAddress };
+    const addresses = { evm: evmAddress, solana: solanaAddress, tron: tronAddress };
     if (unlockMethod === "passkey" && meta.credentialId && meta.prfSalt) {
       try {
         await api.putRecoveryBackup(jwt, {
@@ -3423,6 +3459,7 @@ async function createDecaneConnect(config) {
     }
     addresses.evm = evmAddress = confirmed.evm;
     addresses.solana = solanaAddress = confirmed.solana;
+    addresses.tron = tronAddress = confirmed.tron ?? evmToTronAddress2(confirmed.evm);
     if (config.offerRecoveryAtSignup !== false && config.onRecoveryShareOffer) {
       try {
         const choice = await config.onRecoveryShareOffer({ evmAddress, solanaAddress });
@@ -3446,7 +3483,7 @@ async function createDecaneConnect(config) {
   }
   async function returningUserUnlock(userId, jwt) {
     const rawAddresses = await api.getAddresses(jwt);
-    const recordedAddresses = rawAddresses.evm && rawAddresses.solana ? { evm: rawAddresses.evm, solana: rawAddresses.solana } : null;
+    const recordedAddresses = rawAddresses.evm && rawAddresses.solana ? { evm: rawAddresses.evm, solana: rawAddresses.solana, tron: rawAddresses.tron ?? evmToTronAddress2(rawAddresses.evm) } : null;
     const stored = await storage.getShare(userId);
     let deviceShare;
     if (!stored) {
@@ -3528,7 +3565,7 @@ async function createDecaneConnect(config) {
       throw new ShareCorruptedError();
     }
     const rawAddresses = await api.getAddresses(result.jwt);
-    const recordedAddresses = rawAddresses.evm && rawAddresses.solana ? { evm: rawAddresses.evm, solana: rawAddresses.solana } : null;
+    const recordedAddresses = rawAddresses.evm && rawAddresses.solana ? { evm: rawAddresses.evm, solana: rawAddresses.solana, tron: rawAddresses.tron ?? evmToTronAddress2(rawAddresses.evm) } : null;
     const addresses = await session.start(deviceShare, result.jwt, recordedAddresses);
     zeroize(deviceShare);
     auth = { jwt: result.jwt, userId, addresses };
@@ -3660,6 +3697,10 @@ async function createDecaneConnect(config) {
         const sig = await signSolanaMessage(tee, req.chain, msg, auth?.jwt);
         return bufferToB64u(sig);
       }
+      if (req.chain.startsWith("tron:")) {
+        const msg = typeof req.message === "string" ? req.message : new TextDecoder().decode(req.message);
+        return tee.sign({ chain: req.chain, kind: "message", payload: msg }, auth?.jwt);
+      }
       throw new CallSequenceError(`Unsupported chain: ${req.chain}`);
     },
     async sendTransaction(req) {
@@ -3707,6 +3748,16 @@ async function createDecaneConnect(config) {
       };
       const signedTx = await signEvmTransaction(tee, req.chain, tx, auth?.jwt);
       const txResponse = await provider.broadcastTransaction(signedTx);
+      if (auth?.jwt) {
+        void api.recordTransaction(auth.jwt, {
+          chain: req.chain,
+          txHash: txResponse.hash,
+          to: req.to,
+          value: (req.value ?? 0n).toString(),
+          kind: "send"
+        }).catch(() => {
+        });
+      }
       return txResponse.hash;
     },
     async signTypedData(req) {
@@ -3739,6 +3790,14 @@ async function createDecaneConnect(config) {
     getAccessToken() {
       return auth?.jwt ?? null;
     },
+    async recordTransaction(tx) {
+      if (!auth?.jwt) throw new CallSequenceError("Not connected \u2014 call connect() first");
+      return api.recordTransaction(auth.jwt, tx);
+    },
+    async getTransactionHistory(limit = 50) {
+      if (!auth?.jwt) throw new CallSequenceError("Not connected \u2014 call connect() first");
+      return api.getTransactions(auth.jwt, limit);
+    },
     getEthereumProvider(opts) {
       if (!ethProvider) {
         const firstEvm = config.chains.find((c) => c.startsWith("evm:"));
@@ -3761,6 +3820,14 @@ async function createDecaneConnect(config) {
       const solChain = config.chains.find((c) => c.startsWith("solana:")) ?? "solana:mainnet";
       return signSolanaTransaction(tee, solChain, tx, auth?.jwt);
     },
+    async signTronTransaction(rawDataHex) {
+      const tee = session.requireActive();
+      const tronChain = config.chains.find((c) => c.startsWith("tron:")) ?? "tron:mainnet";
+      return tee.sign(
+        { chain: tronChain, kind: "transaction", payload: rawDataHex.replace(/^0x/, "") },
+        auth?.jwt
+      );
+    },
     async disconnect() {
       session.end();
       if (auth?.jwt) {
@@ -3916,12 +3983,19 @@ function b64uToBuffer(b64u) {
 function toHex2(bytes) {
   return "0x" + Array.from(bytes).map((b) => b.toString(16).padStart(2, "0")).join("");
 }
+function evmToTronAddress2(evmAddress) {
+  const hex41 = "41" + evmAddress.toLowerCase().replace(/^0x/, "");
+  const checksum = sha2562(sha2562("0x" + hex41)).slice(2, 10);
+  return encodeBase582("0x" + hex41 + checksum);
+}
 async function deriveAddressesFromShares(a, b) {
   const master = await combineShares(a, b);
   try {
+    const evm = new Wallet(toHex2(master)).address;
     return {
-      evm: new Wallet(toHex2(master)).address,
-      solana: Keypair.fromSeed(master).publicKey.toBase58()
+      evm,
+      solana: Keypair.fromSeed(master).publicKey.toBase58(),
+      tron: evmToTronAddress2(evm)
     };
   } finally {
     zeroize(master);
@@ -5943,6 +6017,21 @@ function DecaneKit({ config, children }) {
     if (!sdk) throw new Error("Social wallet not connected");
     return sdk.signSolanaTransaction(tx);
   }, []);
+  const socialSignTronTransaction = useCallback3(async (rawDataHex) => {
+    const sdk = socialRef.current;
+    if (!sdk) throw new Error("Social wallet not connected");
+    return sdk.signTronTransaction(rawDataHex);
+  }, []);
+  const socialRecordTransaction = useCallback3(async (tx) => {
+    const sdk = socialRef.current;
+    if (!sdk) throw new Error("Social wallet not connected");
+    return sdk.recordTransaction(tx);
+  }, []);
+  const socialGetTransactionHistory = useCallback3(async (limit) => {
+    const sdk = socialRef.current;
+    if (!sdk) throw new Error("Social wallet not connected");
+    return sdk.getTransactionHistory(limit);
+  }, []);
   const socialSignTypedData = useCallback3(async (req) => {
     const sdk = socialRef.current;
     if (!sdk) throw new Error("Social wallet not connected");
@@ -6033,6 +6122,9 @@ function DecaneKit({ config, children }) {
         socialGetBalances,
         socialGetEthereumProvider,
         socialSignAuthorization,
+        socialSignTronTransaction,
+        socialRecordTransaction,
+        socialGetTransactionHistory,
         socialGetAccessToken,
         socialSignSolanaTransaction,
         socialSignTypedData,
@@ -6253,6 +6345,9 @@ function useSocialWallet() {
     socialSignMessage,
     socialSendTransaction,
     socialSignSolanaTransaction,
+    socialSignTronTransaction,
+    socialRecordTransaction,
+    socialGetTransactionHistory,
     socialSignTypedData,
     socialGetBalance,
     socialGetBalances,
@@ -6295,6 +6390,18 @@ function useSocialWallet() {
     (tx) => run(() => socialSignSolanaTransaction(tx)),
     [socialSignSolanaTransaction]
   );
+  const signTronTransaction = useCallback4(
+    (rawDataHex) => run(() => socialSignTronTransaction(rawDataHex)),
+    [socialSignTronTransaction]
+  );
+  const recordTransaction = useCallback4(
+    (tx) => run(() => socialRecordTransaction(tx)),
+    [socialRecordTransaction]
+  );
+  const getTransactionHistory = useCallback4(
+    (limit) => socialGetTransactionHistory(limit),
+    [socialGetTransactionHistory]
+  );
   const signTypedData = useCallback4(
     (req) => run(() => socialSignTypedData(req)),
     [socialSignTypedData]
@@ -6376,6 +6483,9 @@ function useSocialWallet() {
     signMessage,
     sendTransaction,
     signSolanaTransaction: signSolanaTransaction2,
+    signTronTransaction,
+    recordTransaction,
+    getTransactionHistory,
     signTypedData,
     // Balances (native token; read-only, works while locked)
     getBalance,