decane-connect-kit 2.4.0 → 2.6.0

package/dist/index.d.cts

@@ -76,7 +76,12 @@ interface DecaneProvider {
 type ConnectMode = "all" | "social" | "wallets" | "evm" | "solana" | "tron" | "evm+social" | "solana+social" | "tron+social" | "evm+tron" | "evm+tron+social";
 interface SocialConfig {
     apiKey: string;
-    authMethods?: ("google" | "email")[];
+    authMethods?: ("google" | "email" | "kingschat")[];
+    /**
+     * Scopes requested from KingsChat. Defaults to `['send_chat_message']`, which
+     * is what KingsChat's own SDK asks for and is enough to establish identity.
+     */
+    kingsChatScopes?: string[];
     promptPin?: () => Promise<string>;
     apiBaseUrl?: string;
     chains?: string[];
@@ -170,6 +175,23 @@ declare class ApiClient {
     getGoogleInitUrl(): Promise<{
         url: string;
     }>;
+    /**
+     * Exchange a Google ID token the app already holds for a Decane session.
+     * Resolves to the SAME identity as the redirect flow, so one Google account
+     * means one wallet across web and mobile.
+     */
+    authGoogleToken(idToken: string): Promise<AuthResult>;
+    /** The project's KingsChat clientId, so the dApp never has to hardcode it. */
+    getKingsChatConfig(): Promise<{
+        clientId: string;
+        authorizationUrl: string;
+    }>;
+    /**
+     * Exchange a KingsChat access token for a Decane session. The backend spends
+     * the token against KingsChat's own API to establish the identity — it is
+     * never trusted on its face, and never stored.
+     */
+    authKingsChat(accessToken: string): Promise<AuthResult>;
     authEmailStart(email: string): Promise<void>;
     authEmailVerify(email: string, code: string): Promise<AuthResult>;
     getAddresses(jwt: string): Promise<{
@@ -185,6 +207,16 @@ declare class ApiClient {
         solanaAddress: string;
         tronAddress: string;
     }): Promise<void>;
+    recordTransaction(jwt: string, tx: {
+        chain: string;
+        txHash?: string;
+        to?: string;
+        value?: string;
+        kind?: string;
+        status?: string;
+        metadata?: Record<string, unknown>;
+    }): Promise<TransactionRecord>;
+    getTransactions(jwt: string, limit?: number): Promise<TransactionRecord[]>;
     getWebAuthnRegisterOptions(jwt: string, rpId: string, rpName: string): Promise<_simplewebauthn_browser.PublicKeyCredentialCreationOptionsJSON>;
     postWebAuthnRegister(jwt: string, response: _simplewebauthn_browser.RegistrationResponseJSON, origin: string): Promise<void>;
     /**
@@ -336,7 +368,15 @@ interface DecaneConnectConfig {
     appId: string;
     apiKey: string;
     chains: Chain[];
-    authMethods: Array<'google' | 'email'>;
+    authMethods: Array<'google' | 'email' | 'kingschat'>;
+    /**
+     * Scopes requested from KingsChat at sign-in. Defaults to
+     * `['send_chat_message']`, which is what KingsChat's own SDK asks for and is
+     * enough to establish identity. Widen only if the app actually calls
+     * KingsChat APIs on the user's behalf — the consent screen lists every scope,
+     * so asking for more than you use costs conversions.
+     */
+    kingsChatScopes?: string[];
     apiBaseUrl?: string;
     sessionDurationMinutes?: number;
     promptPin?: () => Promise<string>;
@@ -402,6 +442,48 @@ interface DecaneConnectConfig {
     }>;
     /** Recovery stage callbacks, for dApp UI. */
     onRecoveryProgress?: (event: RecoveryProgress) => void;
+    /**
+     * Let the enclave hand a device a working share on the strength of a valid
+     * login alone — no synced passkey, no recovery file, nothing for the user to
+     * keep. Default TRUE, because a wallet a person cannot re-enter after
+     * clearing their browser is worse than useless to them.
+     *
+     * The trade, stated plainly: enrolling stores a second Shamir share sealed to
+     * the enclave, so the enclave can reconstruct a wallet by itself. It is sealed
+     * with a key derived inside the TEE, so your backend and its database still
+     * cannot — but a malicious enclave image, or anyone able to mint JWTs, could.
+     *
+     * Set false to keep the stricter property that no single party can
+     * reconstruct. Users then need a synced passkey or their recovery file on
+     * every new device, and losing both means losing the wallet.
+     */
+    serverAssistedRecovery?: boolean;
+    /**
+     * Rotate the whole share set whenever a NEW device recovers via passkey sync
+     * (Flow A) — the "every device holds a distinct share" model.
+     *
+     * Default false, which preserves the historical behaviour: every device
+     * synced to the same passkey caches the byte-identical wrapped share, so a
+     * device that is later lost keeps a share that stays valid until someone
+     * explicitly calls rotateShares(). There is no way to revoke one device
+     * without revoking all of them.
+     *
+     * With this on, joining a new device re-splits the master and issues that
+     * device its own share, which invalidates every other device's cached copy
+     * at the same instant. That is what makes per-device revocation possible,
+     * and it has three consequences worth accepting deliberately:
+     *
+     *  - **Other devices are logged out, not just the lost one.** Each surviving
+     *    device hits StaleDeviceShareError on its next unlock, clears its share,
+     *    and silently re-recovers through Flow A (one passkey prompt). Expected,
+     *    but it means a shared-family-device setup re-prompts more often.
+     *  - **The user's recovery FILE dies too.** Rotation issues a new recovery
+     *    share, so `onRecoveryRotated` MUST be configured to capture it —
+     *    enabling this without that callback throws at connect time rather than
+     *    stranding the user with a dead file.
+     *  - **Adding a device costs a TEE round trip.** Recovery is slower.
+     */
+    rotateOnNewDeviceRecovery?: boolean;
 }
 interface ConnectResult {
     addresses: {
@@ -411,6 +493,29 @@ interface ConnectResult {
     };
     isNewUser: boolean;
 }
+/** A recorded on-chain transaction in the user's history. */
+interface TransactionRecord {
+    id: string;
+    chain: string;
+    kind: string;
+    txHash: string | null;
+    to: string | null;
+    value: string | null;
+    status: 'submitted' | 'confirmed' | 'failed' | string;
+    metadata: Record<string, unknown> | null;
+    createdAt: string;
+    updatedAt?: string;
+}
+/** What the dApp passes to record a transaction it broadcast. */
+interface RecordTransactionInput {
+    chain: string;
+    txHash?: string;
+    to?: string;
+    value?: string;
+    kind?: string;
+    status?: string;
+    metadata?: Record<string, unknown>;
+}
 interface SignMessageRequest {
     chain: Chain;
     message: string | Uint8Array;
@@ -434,6 +539,30 @@ type SdkEvent = 'connected' | 'disconnected' | 'session-expired' | 'session-star
 interface DecaneConnect {
     connect(): Promise<ConnectResult>;
     connectWithGoogle(): Promise<ConnectResult>;
+    /**
+     * Sign in with a Google ID token the app already obtained — native Google
+     * Sign-In on mobile, or Google Identity Services on the web.
+     *
+     * Resolves to the SAME wallet as connectWithGoogle(): both end at the
+     * backend's Google identity, so a user who signs in on your website and then
+     * on your app lands on one wallet, not two.
+     */
+    connectWithGoogleToken(idToken: string): Promise<ConnectResult>;
+    /**
+     * Sign in with KingsChat.
+     *
+     * Opens KingsChat's consent screen in a popup, so this MUST be called
+     * directly from a click handler — a popup opened after an await is blocked by
+     * every browser. The resulting access token is exchanged server-side for a
+     * Decane session; it is never treated as one on its own.
+     */
+    connectWithKingsChat(): Promise<ConnectResult>;
+    /**
+     * Sign in with a KingsChat access token the app already holds — from
+     * kingschat-web-sdk, a native SDK, or any other flow. Use when you want to
+     * own the consent step yourself; connectWithKingsChat() is the turnkey path.
+     */
+    connectWithKingsChatToken(accessToken: string): Promise<ConnectResult>;
     connectWithEmail(email: string): Promise<{
         codeRequired: true;
     }>;
@@ -521,6 +650,15 @@ interface DecaneConnect {
      * the transaction's `signature` array and broadcast via TronWeb / a full node.
      */
     signTronTransaction(rawDataHex: string): Promise<string>;
+    /**
+     * Record a transaction this wallet broadcast, so it appears in the user's
+     * history (and the developer dashboard). EVM `sendTransaction` records itself
+     * automatically; call this for Solana/Tron transactions your dApp broadcasts,
+     * or to attach a `confirmed`/`failed` status update to an existing hash.
+     */
+    recordTransaction(tx: RecordTransactionInput): Promise<TransactionRecord>;
+    /** The user's transaction history, most recent first. Requires a live session. */
+    getTransactionHistory(limit?: number): Promise<TransactionRecord[]>;
     disconnect(): Promise<void>;
     getAddresses(): {
         evm?: string;
@@ -598,6 +736,24 @@ declare function startEmailAuth(api: ApiClient, email: string): Promise<void>;
  */
 declare function verifyEmailCode(api: ApiClient, email: string, code: string): Promise<AuthResult>;
 
+interface KingsChatTokens {
+    accessToken: string;
+    refreshToken?: string;
+    expiresInMillis?: number;
+}
+/**
+ * Open the KingsChat consent popup and resolve with the tokens it returns.
+ *
+ * Must be called synchronously from a user gesture (a click handler) — popup
+ * blockers reject a window.open that happens after an await, which is why the
+ * clientId is fetched by the caller *before* this runs.
+ */
+declare function loginWithKingsChatPopup(opts: {
+    clientId: string;
+    scopes?: string[];
+    timeoutMs?: number;
+}): Promise<KingsChatTokens>;
+
 declare class DecaneConnectError extends Error {
     code: string;
     retryable: boolean;
@@ -652,6 +808,21 @@ declare class ShareCorruptedError extends DecaneConnectError {
 declare class NewDeviceError extends DecaneConnectError {
     constructor();
 }
+/**
+ * The device share this device just used no longer reconstructs the account's
+ * real key — almost always because another device recovered via passkey sync
+ * since and rotated the whole share set (see rotateOnNewDeviceRecovery in
+ * DecaneConnectConfig), silently invalidating every other device's cached
+ * copy. Thrown instead of signing: two mismatched shares from different
+ * share-set versions still combine to *something*, just not the user's real
+ * key, so continuing would risk operating on a wrong (though not
+ * attacker-chosen) address. The stale local share is cleared by the caller
+ * before this propagates, so the next connect() naturally falls through to
+ * recovery instead of repeating the same failure.
+ */
+declare class StaleDeviceShareError extends DecaneConnectError {
+    constructor();
+}
 declare class PromptPinNotConfiguredError extends DecaneConnectError {
     constructor();
 }
@@ -770,8 +941,9 @@ interface WalletSelectorProps {
     theme?: "light" | "dark" | "auto";
     networks?: "evm" | "solana" | "tron" | "bitcoin" | "all";
     mode?: ConnectMode;
-    socialAuthMethods?: ("google" | "email")[];
+    socialAuthMethods?: ("google" | "email" | "kingschat")[];
     onGoogleSignIn?: () => Promise<void>;
+    onKingsChatSignIn?: () => Promise<void>;
     onEmailStart?: (email: string) => Promise<{
         codeRequired: true;
     }>;
@@ -785,7 +957,7 @@ interface WalletSelectorProps {
     passkeyAddress?: string | null;
     onPasskeySignIn?: () => Promise<unknown>;
 }
-declare function WalletSelector({ provider, open, onClose, onConnect, theme, networks, mode, socialAuthMethods, onGoogleSignIn, onEmailStart, onEmailVerify, customAuthLabel, onCustomAuthSignIn, canUsePasskey, passkeyAddress, onPasskeySignIn, }: WalletSelectorProps): React.ReactPortal | null;
+declare function WalletSelector({ provider, open, onClose, onConnect, theme, networks, mode, socialAuthMethods, onGoogleSignIn, onKingsChatSignIn, onEmailStart, onEmailVerify, customAuthLabel, onCustomAuthSignIn, canUsePasskey, passkeyAddress, onPasskeySignIn, }: WalletSelectorProps): React.ReactPortal | null;
 
 type Theme = "light" | "dark" | "auto";
 interface SocialAuthState {
@@ -834,11 +1006,12 @@ interface SocialWalletModalProps {
     onUnlock: () => Promise<void>;
     onDisconnect: () => Promise<void>;
     onGoogleSignIn: () => Promise<void>;
+    onKingsChatSignIn?: () => Promise<void>;
     onEmailStart: (email: string) => Promise<{
         codeRequired: true;
     }>;
     onEmailVerify: (email: string, code: string) => Promise<void>;
-    authMethods?: Array<"google" | "email">;
+    authMethods?: Array<"google" | "email" | "kingschat">;
     customAuthLabel?: string;
     onCustomAuthSignIn?: () => Promise<void>;
     canUsePasskey?: boolean;
@@ -855,7 +1028,7 @@ interface SocialWalletModalProps {
     rpcUrls?: Record<string, string>;
     chains?: string[];
 }
-declare function SocialWalletModal({ open, onClose, theme, socialAuth, onUnlock, onDisconnect, onGoogleSignIn, onEmailStart, onEmailVerify, authMethods, customAuthLabel, onCustomAuthSignIn, canUsePasskey, passkeyAddress, onPasskeySignIn, onRotateShares, onExportPortableBackup, rpcUrls, chains, }: SocialWalletModalProps): React.ReactPortal | null;
+declare function SocialWalletModal({ open, onClose, theme, socialAuth, onUnlock, onDisconnect, onGoogleSignIn, onKingsChatSignIn, onEmailStart, onEmailVerify, authMethods, customAuthLabel, onCustomAuthSignIn, canUsePasskey, passkeyAddress, onPasskeySignIn, onRotateShares, onExportPortableBackup, rpcUrls, chains, }: SocialWalletModalProps): React.ReactPortal | null;
 
 declare function DecaneMark({ size, muted }: {
     size?: number;
@@ -933,6 +1106,8 @@ declare function useSocialWallet(): {
     }) => Promise<string>;
     signSolanaTransaction: (tx: Uint8Array) => Promise<Uint8Array<ArrayBufferLike>>;
     signTronTransaction: (rawDataHex: string) => Promise<string>;
+    recordTransaction: (tx: RecordTransactionInput) => Promise<TransactionRecord>;
+    getTransactionHistory: (limit?: number) => Promise<TransactionRecord[]>;
     signTypedData: (req: {
         chain: string;
         domain: Record<string, unknown>;
@@ -1051,4 +1226,4 @@ declare function useSignTypedData(): {
     reset: () => void;
 };
 
-export { type ActiveSession, AttestationError, type AuthResult, BUILT_IN_CHAINS, type BalanceResult, type CAIP25Method, type CAIP25SessionRequest, type CAIP25SessionResult, CHAINS, CallSequenceError, type Chain, type ChainDescriptor, type ChainId, type ChainScope, type ChainSupport, type ChainType, type ConnectMode, type ConnectResult, type DecaneConfig, type DecaneConnect, type DecaneConnectConfig, DecaneConnectError, DecaneError, DecaneErrorCode, DecaneKit, DecaneLogo, DecaneMark, type DecaneProvider, DecaneWordmark, type Eip1193Provider, type EthereumProviderOptions, ExportNotAuthorizedError, InvalidApiKeyError, InvalidPinError, InvalidRecoveryFileError, NetworkError, NewDeviceError, OriginNotAllowedError, type PortableBackup, PromptPinNotConfiguredError, ReconnectRequiredError, RecoveryFailedError, type RecoveryProgress, type RecoveryShareFile, RecoveryWalletMismatchError, type SdkEvent, type SendTransactionRequest, SessionExpiredError, ShareCorruptedError, type SignMessageRequest, type SignTypedDataRequest, type SignedAuthorization, type SocialAuthState, type SocialConfig, SocialWalletModal, type Theme, type TxParams, type UnifiedWalletAccount, UnlockRequiredError, UserCancelledError, WalletSelector, WebAuthnNotSupportedError, type WrappedShareMeta, WrongPasswordError, createDecane, createDecaneConnect, createEthereumProvider, startEmailAuth, useChainSwitch, useDecane, useEthereumProvider, useSendTransaction, useSignMessage, useSignTypedData, useSocialAuth, useSocialBalance, useSocialWallet, useWalletSelector, verifyEmailCode };
+export { type ActiveSession, AttestationError, type AuthResult, BUILT_IN_CHAINS, type BalanceResult, type CAIP25Method, type CAIP25SessionRequest, type CAIP25SessionResult, CHAINS, CallSequenceError, type Chain, type ChainDescriptor, type ChainId, type ChainScope, type ChainSupport, type ChainType, type ConnectMode, type ConnectResult, type DecaneConfig, type DecaneConnect, type DecaneConnectConfig, DecaneConnectError, DecaneError, DecaneErrorCode, DecaneKit, DecaneLogo, DecaneMark, type DecaneProvider, DecaneWordmark, type Eip1193Provider, type EthereumProviderOptions, ExportNotAuthorizedError, InvalidApiKeyError, InvalidPinError, InvalidRecoveryFileError, type KingsChatTokens, NetworkError, NewDeviceError, OriginNotAllowedError, type PortableBackup, PromptPinNotConfiguredError, ReconnectRequiredError, type RecordTransactionInput, RecoveryFailedError, type RecoveryProgress, type RecoveryShareFile, RecoveryWalletMismatchError, type SdkEvent, type SendTransactionRequest, SessionExpiredError, ShareCorruptedError, type SignMessageRequest, type SignTypedDataRequest, type SignedAuthorization, type SocialAuthState, type SocialConfig, SocialWalletModal, StaleDeviceShareError, type Theme, type TransactionRecord, type TxParams, type UnifiedWalletAccount, UnlockRequiredError, UserCancelledError, WalletSelector, WebAuthnNotSupportedError, type WrappedShareMeta, WrongPasswordError, createDecane, createDecaneConnect, createEthereumProvider, loginWithKingsChatPopup, startEmailAuth, useChainSwitch, useDecane, useEthereumProvider, useSendTransaction, useSignMessage, useSignTypedData, useSocialAuth, useSocialBalance, useSocialWallet, useWalletSelector, verifyEmailCode };

package/dist/index.d.ts

@@ -76,7 +76,12 @@ interface DecaneProvider {
 type ConnectMode = "all" | "social" | "wallets" | "evm" | "solana" | "tron" | "evm+social" | "solana+social" | "tron+social" | "evm+tron" | "evm+tron+social";
 interface SocialConfig {
     apiKey: string;
-    authMethods?: ("google" | "email")[];
+    authMethods?: ("google" | "email" | "kingschat")[];
+    /**
+     * Scopes requested from KingsChat. Defaults to `['send_chat_message']`, which
+     * is what KingsChat's own SDK asks for and is enough to establish identity.
+     */
+    kingsChatScopes?: string[];
     promptPin?: () => Promise<string>;
     apiBaseUrl?: string;
     chains?: string[];
@@ -170,6 +175,23 @@ declare class ApiClient {
     getGoogleInitUrl(): Promise<{
         url: string;
     }>;
+    /**
+     * Exchange a Google ID token the app already holds for a Decane session.
+     * Resolves to the SAME identity as the redirect flow, so one Google account
+     * means one wallet across web and mobile.
+     */
+    authGoogleToken(idToken: string): Promise<AuthResult>;
+    /** The project's KingsChat clientId, so the dApp never has to hardcode it. */
+    getKingsChatConfig(): Promise<{
+        clientId: string;
+        authorizationUrl: string;
+    }>;
+    /**
+     * Exchange a KingsChat access token for a Decane session. The backend spends
+     * the token against KingsChat's own API to establish the identity — it is
+     * never trusted on its face, and never stored.
+     */
+    authKingsChat(accessToken: string): Promise<AuthResult>;
     authEmailStart(email: string): Promise<void>;
     authEmailVerify(email: string, code: string): Promise<AuthResult>;
     getAddresses(jwt: string): Promise<{
@@ -185,6 +207,16 @@ declare class ApiClient {
         solanaAddress: string;
         tronAddress: string;
     }): Promise<void>;
+    recordTransaction(jwt: string, tx: {
+        chain: string;
+        txHash?: string;
+        to?: string;
+        value?: string;
+        kind?: string;
+        status?: string;
+        metadata?: Record<string, unknown>;
+    }): Promise<TransactionRecord>;
+    getTransactions(jwt: string, limit?: number): Promise<TransactionRecord[]>;
     getWebAuthnRegisterOptions(jwt: string, rpId: string, rpName: string): Promise<_simplewebauthn_browser.PublicKeyCredentialCreationOptionsJSON>;
     postWebAuthnRegister(jwt: string, response: _simplewebauthn_browser.RegistrationResponseJSON, origin: string): Promise<void>;
     /**
@@ -336,7 +368,15 @@ interface DecaneConnectConfig {
     appId: string;
     apiKey: string;
     chains: Chain[];
-    authMethods: Array<'google' | 'email'>;
+    authMethods: Array<'google' | 'email' | 'kingschat'>;
+    /**
+     * Scopes requested from KingsChat at sign-in. Defaults to
+     * `['send_chat_message']`, which is what KingsChat's own SDK asks for and is
+     * enough to establish identity. Widen only if the app actually calls
+     * KingsChat APIs on the user's behalf — the consent screen lists every scope,
+     * so asking for more than you use costs conversions.
+     */
+    kingsChatScopes?: string[];
     apiBaseUrl?: string;
     sessionDurationMinutes?: number;
     promptPin?: () => Promise<string>;
@@ -402,6 +442,48 @@ interface DecaneConnectConfig {
     }>;
     /** Recovery stage callbacks, for dApp UI. */
     onRecoveryProgress?: (event: RecoveryProgress) => void;
+    /**
+     * Let the enclave hand a device a working share on the strength of a valid
+     * login alone — no synced passkey, no recovery file, nothing for the user to
+     * keep. Default TRUE, because a wallet a person cannot re-enter after
+     * clearing their browser is worse than useless to them.
+     *
+     * The trade, stated plainly: enrolling stores a second Shamir share sealed to
+     * the enclave, so the enclave can reconstruct a wallet by itself. It is sealed
+     * with a key derived inside the TEE, so your backend and its database still
+     * cannot — but a malicious enclave image, or anyone able to mint JWTs, could.
+     *
+     * Set false to keep the stricter property that no single party can
+     * reconstruct. Users then need a synced passkey or their recovery file on
+     * every new device, and losing both means losing the wallet.
+     */
+    serverAssistedRecovery?: boolean;
+    /**
+     * Rotate the whole share set whenever a NEW device recovers via passkey sync
+     * (Flow A) — the "every device holds a distinct share" model.
+     *
+     * Default false, which preserves the historical behaviour: every device
+     * synced to the same passkey caches the byte-identical wrapped share, so a
+     * device that is later lost keeps a share that stays valid until someone
+     * explicitly calls rotateShares(). There is no way to revoke one device
+     * without revoking all of them.
+     *
+     * With this on, joining a new device re-splits the master and issues that
+     * device its own share, which invalidates every other device's cached copy
+     * at the same instant. That is what makes per-device revocation possible,
+     * and it has three consequences worth accepting deliberately:
+     *
+     *  - **Other devices are logged out, not just the lost one.** Each surviving
+     *    device hits StaleDeviceShareError on its next unlock, clears its share,
+     *    and silently re-recovers through Flow A (one passkey prompt). Expected,
+     *    but it means a shared-family-device setup re-prompts more often.
+     *  - **The user's recovery FILE dies too.** Rotation issues a new recovery
+     *    share, so `onRecoveryRotated` MUST be configured to capture it —
+     *    enabling this without that callback throws at connect time rather than
+     *    stranding the user with a dead file.
+     *  - **Adding a device costs a TEE round trip.** Recovery is slower.
+     */
+    rotateOnNewDeviceRecovery?: boolean;
 }
 interface ConnectResult {
     addresses: {
@@ -411,6 +493,29 @@ interface ConnectResult {
     };
     isNewUser: boolean;
 }
+/** A recorded on-chain transaction in the user's history. */
+interface TransactionRecord {
+    id: string;
+    chain: string;
+    kind: string;
+    txHash: string | null;
+    to: string | null;
+    value: string | null;
+    status: 'submitted' | 'confirmed' | 'failed' | string;
+    metadata: Record<string, unknown> | null;
+    createdAt: string;
+    updatedAt?: string;
+}
+/** What the dApp passes to record a transaction it broadcast. */
+interface RecordTransactionInput {
+    chain: string;
+    txHash?: string;
+    to?: string;
+    value?: string;
+    kind?: string;
+    status?: string;
+    metadata?: Record<string, unknown>;
+}
 interface SignMessageRequest {
     chain: Chain;
     message: string | Uint8Array;
@@ -434,6 +539,30 @@ type SdkEvent = 'connected' | 'disconnected' | 'session-expired' | 'session-star
 interface DecaneConnect {
     connect(): Promise<ConnectResult>;
     connectWithGoogle(): Promise<ConnectResult>;
+    /**
+     * Sign in with a Google ID token the app already obtained — native Google
+     * Sign-In on mobile, or Google Identity Services on the web.
+     *
+     * Resolves to the SAME wallet as connectWithGoogle(): both end at the
+     * backend's Google identity, so a user who signs in on your website and then
+     * on your app lands on one wallet, not two.
+     */
+    connectWithGoogleToken(idToken: string): Promise<ConnectResult>;
+    /**
+     * Sign in with KingsChat.
+     *
+     * Opens KingsChat's consent screen in a popup, so this MUST be called
+     * directly from a click handler — a popup opened after an await is blocked by
+     * every browser. The resulting access token is exchanged server-side for a
+     * Decane session; it is never treated as one on its own.
+     */
+    connectWithKingsChat(): Promise<ConnectResult>;
+    /**
+     * Sign in with a KingsChat access token the app already holds — from
+     * kingschat-web-sdk, a native SDK, or any other flow. Use when you want to
+     * own the consent step yourself; connectWithKingsChat() is the turnkey path.
+     */
+    connectWithKingsChatToken(accessToken: string): Promise<ConnectResult>;
     connectWithEmail(email: string): Promise<{
         codeRequired: true;
     }>;
@@ -521,6 +650,15 @@ interface DecaneConnect {
      * the transaction's `signature` array and broadcast via TronWeb / a full node.
      */
     signTronTransaction(rawDataHex: string): Promise<string>;
+    /**
+     * Record a transaction this wallet broadcast, so it appears in the user's
+     * history (and the developer dashboard). EVM `sendTransaction` records itself
+     * automatically; call this for Solana/Tron transactions your dApp broadcasts,
+     * or to attach a `confirmed`/`failed` status update to an existing hash.
+     */
+    recordTransaction(tx: RecordTransactionInput): Promise<TransactionRecord>;
+    /** The user's transaction history, most recent first. Requires a live session. */
+    getTransactionHistory(limit?: number): Promise<TransactionRecord[]>;
     disconnect(): Promise<void>;
     getAddresses(): {
         evm?: string;
@@ -598,6 +736,24 @@ declare function startEmailAuth(api: ApiClient, email: string): Promise<void>;
  */
 declare function verifyEmailCode(api: ApiClient, email: string, code: string): Promise<AuthResult>;
 
+interface KingsChatTokens {
+    accessToken: string;
+    refreshToken?: string;
+    expiresInMillis?: number;
+}
+/**
+ * Open the KingsChat consent popup and resolve with the tokens it returns.
+ *
+ * Must be called synchronously from a user gesture (a click handler) — popup
+ * blockers reject a window.open that happens after an await, which is why the
+ * clientId is fetched by the caller *before* this runs.
+ */
+declare function loginWithKingsChatPopup(opts: {
+    clientId: string;
+    scopes?: string[];
+    timeoutMs?: number;
+}): Promise<KingsChatTokens>;
+
 declare class DecaneConnectError extends Error {
     code: string;
     retryable: boolean;
@@ -652,6 +808,21 @@ declare class ShareCorruptedError extends DecaneConnectError {
 declare class NewDeviceError extends DecaneConnectError {
     constructor();
 }
+/**
+ * The device share this device just used no longer reconstructs the account's
+ * real key — almost always because another device recovered via passkey sync
+ * since and rotated the whole share set (see rotateOnNewDeviceRecovery in
+ * DecaneConnectConfig), silently invalidating every other device's cached
+ * copy. Thrown instead of signing: two mismatched shares from different
+ * share-set versions still combine to *something*, just not the user's real
+ * key, so continuing would risk operating on a wrong (though not
+ * attacker-chosen) address. The stale local share is cleared by the caller
+ * before this propagates, so the next connect() naturally falls through to
+ * recovery instead of repeating the same failure.
+ */
+declare class StaleDeviceShareError extends DecaneConnectError {
+    constructor();
+}
 declare class PromptPinNotConfiguredError extends DecaneConnectError {
     constructor();
 }
@@ -770,8 +941,9 @@ interface WalletSelectorProps {
     theme?: "light" | "dark" | "auto";
     networks?: "evm" | "solana" | "tron" | "bitcoin" | "all";
     mode?: ConnectMode;
-    socialAuthMethods?: ("google" | "email")[];
+    socialAuthMethods?: ("google" | "email" | "kingschat")[];
     onGoogleSignIn?: () => Promise<void>;
+    onKingsChatSignIn?: () => Promise<void>;
     onEmailStart?: (email: string) => Promise<{
         codeRequired: true;
     }>;
@@ -785,7 +957,7 @@ interface WalletSelectorProps {
     passkeyAddress?: string | null;
     onPasskeySignIn?: () => Promise<unknown>;
 }
-declare function WalletSelector({ provider, open, onClose, onConnect, theme, networks, mode, socialAuthMethods, onGoogleSignIn, onEmailStart, onEmailVerify, customAuthLabel, onCustomAuthSignIn, canUsePasskey, passkeyAddress, onPasskeySignIn, }: WalletSelectorProps): React.ReactPortal | null;
+declare function WalletSelector({ provider, open, onClose, onConnect, theme, networks, mode, socialAuthMethods, onGoogleSignIn, onKingsChatSignIn, onEmailStart, onEmailVerify, customAuthLabel, onCustomAuthSignIn, canUsePasskey, passkeyAddress, onPasskeySignIn, }: WalletSelectorProps): React.ReactPortal | null;
 
 type Theme = "light" | "dark" | "auto";
 interface SocialAuthState {
@@ -834,11 +1006,12 @@ interface SocialWalletModalProps {
     onUnlock: () => Promise<void>;
     onDisconnect: () => Promise<void>;
     onGoogleSignIn: () => Promise<void>;
+    onKingsChatSignIn?: () => Promise<void>;
     onEmailStart: (email: string) => Promise<{
         codeRequired: true;
     }>;
     onEmailVerify: (email: string, code: string) => Promise<void>;
-    authMethods?: Array<"google" | "email">;
+    authMethods?: Array<"google" | "email" | "kingschat">;
     customAuthLabel?: string;
     onCustomAuthSignIn?: () => Promise<void>;
     canUsePasskey?: boolean;
@@ -855,7 +1028,7 @@ interface SocialWalletModalProps {
     rpcUrls?: Record<string, string>;
     chains?: string[];
 }
-declare function SocialWalletModal({ open, onClose, theme, socialAuth, onUnlock, onDisconnect, onGoogleSignIn, onEmailStart, onEmailVerify, authMethods, customAuthLabel, onCustomAuthSignIn, canUsePasskey, passkeyAddress, onPasskeySignIn, onRotateShares, onExportPortableBackup, rpcUrls, chains, }: SocialWalletModalProps): React.ReactPortal | null;
+declare function SocialWalletModal({ open, onClose, theme, socialAuth, onUnlock, onDisconnect, onGoogleSignIn, onKingsChatSignIn, onEmailStart, onEmailVerify, authMethods, customAuthLabel, onCustomAuthSignIn, canUsePasskey, passkeyAddress, onPasskeySignIn, onRotateShares, onExportPortableBackup, rpcUrls, chains, }: SocialWalletModalProps): React.ReactPortal | null;
 
 declare function DecaneMark({ size, muted }: {
     size?: number;
@@ -933,6 +1106,8 @@ declare function useSocialWallet(): {
     }) => Promise<string>;
     signSolanaTransaction: (tx: Uint8Array) => Promise<Uint8Array<ArrayBufferLike>>;
     signTronTransaction: (rawDataHex: string) => Promise<string>;
+    recordTransaction: (tx: RecordTransactionInput) => Promise<TransactionRecord>;
+    getTransactionHistory: (limit?: number) => Promise<TransactionRecord[]>;
     signTypedData: (req: {
         chain: string;
         domain: Record<string, unknown>;
@@ -1051,4 +1226,4 @@ declare function useSignTypedData(): {
     reset: () => void;
 };
 
-export { type ActiveSession, AttestationError, type AuthResult, BUILT_IN_CHAINS, type BalanceResult, type CAIP25Method, type CAIP25SessionRequest, type CAIP25SessionResult, CHAINS, CallSequenceError, type Chain, type ChainDescriptor, type ChainId, type ChainScope, type ChainSupport, type ChainType, type ConnectMode, type ConnectResult, type DecaneConfig, type DecaneConnect, type DecaneConnectConfig, DecaneConnectError, DecaneError, DecaneErrorCode, DecaneKit, DecaneLogo, DecaneMark, type DecaneProvider, DecaneWordmark, type Eip1193Provider, type EthereumProviderOptions, ExportNotAuthorizedError, InvalidApiKeyError, InvalidPinError, InvalidRecoveryFileError, NetworkError, NewDeviceError, OriginNotAllowedError, type PortableBackup, PromptPinNotConfiguredError, ReconnectRequiredError, RecoveryFailedError, type RecoveryProgress, type RecoveryShareFile, RecoveryWalletMismatchError, type SdkEvent, type SendTransactionRequest, SessionExpiredError, ShareCorruptedError, type SignMessageRequest, type SignTypedDataRequest, type SignedAuthorization, type SocialAuthState, type SocialConfig, SocialWalletModal, type Theme, type TxParams, type UnifiedWalletAccount, UnlockRequiredError, UserCancelledError, WalletSelector, WebAuthnNotSupportedError, type WrappedShareMeta, WrongPasswordError, createDecane, createDecaneConnect, createEthereumProvider, startEmailAuth, useChainSwitch, useDecane, useEthereumProvider, useSendTransaction, useSignMessage, useSignTypedData, useSocialAuth, useSocialBalance, useSocialWallet, useWalletSelector, verifyEmailCode };
+export { type ActiveSession, AttestationError, type AuthResult, BUILT_IN_CHAINS, type BalanceResult, type CAIP25Method, type CAIP25SessionRequest, type CAIP25SessionResult, CHAINS, CallSequenceError, type Chain, type ChainDescriptor, type ChainId, type ChainScope, type ChainSupport, type ChainType, type ConnectMode, type ConnectResult, type DecaneConfig, type DecaneConnect, type DecaneConnectConfig, DecaneConnectError, DecaneError, DecaneErrorCode, DecaneKit, DecaneLogo, DecaneMark, type DecaneProvider, DecaneWordmark, type Eip1193Provider, type EthereumProviderOptions, ExportNotAuthorizedError, InvalidApiKeyError, InvalidPinError, InvalidRecoveryFileError, type KingsChatTokens, NetworkError, NewDeviceError, OriginNotAllowedError, type PortableBackup, PromptPinNotConfiguredError, ReconnectRequiredError, type RecordTransactionInput, RecoveryFailedError, type RecoveryProgress, type RecoveryShareFile, RecoveryWalletMismatchError, type SdkEvent, type SendTransactionRequest, SessionExpiredError, ShareCorruptedError, type SignMessageRequest, type SignTypedDataRequest, type SignedAuthorization, type SocialAuthState, type SocialConfig, SocialWalletModal, StaleDeviceShareError, type Theme, type TransactionRecord, type TxParams, type UnifiedWalletAccount, UnlockRequiredError, UserCancelledError, WalletSelector, WebAuthnNotSupportedError, type WrappedShareMeta, WrongPasswordError, createDecane, createDecaneConnect, createEthereumProvider, loginWithKingsChatPopup, startEmailAuth, useChainSwitch, useDecane, useEthereumProvider, useSendTransaction, useSignMessage, useSignTypedData, useSocialAuth, useSocialBalance, useSocialWallet, useWalletSelector, verifyEmailCode };