decane-connect-kit 2.7.0 → 2.7.2

package/dist/index.d.cts

@@ -970,6 +970,15 @@ interface SocialAuthState {
         tron?: string;
     } | null;
     isNewUser: boolean;
+    /**
+     * Who the provider said the user is — `{ name?, email?, picture? }`.
+     *
+     * `null` until a sign-in returns one, and stays null for email sign-in and
+     * for providers the user withheld a profile from. It is not persisted across
+     * reloads: the backend stores no profile, so a restored session has an
+     * address but no name. Copy it somewhere durable if you need it to survive.
+     */
+    profile: AuthProfile | null;
     isUnlocked: boolean;
     sessionExpiresAt: number | null;
     /**

package/dist/index.d.ts

@@ -970,6 +970,15 @@ interface SocialAuthState {
         tron?: string;
     } | null;
     isNewUser: boolean;
+    /**
+     * Who the provider said the user is — `{ name?, email?, picture? }`.
+     *
+     * `null` until a sign-in returns one, and stays null for email sign-in and
+     * for providers the user withheld a profile from. It is not persisted across
+     * reloads: the backend stores no profile, so a restored session has an
+     * address but no name. Copy it somewhere durable if you need it to survive.
+     */
+    profile: AuthProfile | null;
     isUnlocked: boolean;
     sessionExpiresAt: number | null;
     /**

package/dist/index.js

@@ -2400,7 +2400,12 @@ var TeeClient = class {
       headers: { Authorization: `Bearer ${jwt}`, "Content-Type": "application/json" },
       body: JSON.stringify({ share: bytesToBase64(recoveryShare) })
     });
-    if (!res.ok) throw new Error("auth share enrolment failed");
+    if (!res.ok) {
+      const detail = await res.text().catch(() => "");
+      throw new Error(
+        `auth share enrolment failed (HTTP ${res.status})${detail ? `: ${detail.slice(0, 200)}` : ""}`
+      );
+    }
   }
   /**
    * Ask the enclave for a fresh device share for this authenticated user.
@@ -2418,7 +2423,12 @@ var TeeClient = class {
       headers: { Authorization: `Bearer ${jwt}`, "Content-Type": "application/json" }
     });
     if (res.status === 409) return null;
-    if (!res.ok) throw new Error("device share provisioning failed");
+    if (!res.ok) {
+      const detail = await res.text().catch(() => "");
+      throw new Error(
+        `device share provisioning failed (HTTP ${res.status})${detail ? `: ${detail.slice(0, 200)}` : ""}`
+      );
+    }
     const body = await res.json();
     return base64ToBytes(body.deviceShare);
   }
@@ -3621,6 +3631,22 @@ async function createDecaneConnect(config) {
     addresses.evm = evmAddress = confirmed.evm;
     addresses.solana = solanaAddress = confirmed.solana;
     addresses.tron = tronAddress = confirmed.tron ?? evmToTronAddress2(confirmed.evm);
+    if (serverAssistedRecovery) {
+      for (let attempt = 1; attempt <= 2; attempt++) {
+        try {
+          const tee = new TeeClient(teeUrl);
+          await tee.enrolAuthShare(jwt, shareSet.recovery);
+          break;
+        } catch (e) {
+          if (attempt === 2) {
+            console.warn(
+              "decane-connect-kit: could not enrol this wallet for server-assisted recovery; a recovery file will be required on a new device. This wallet will get a 409 not_enrolled from /signer/provision until it is re-enrolled.",
+              e
+            );
+          }
+        }
+      }
+    }
     if (config.offerRecoveryAtSignup !== false && config.onRecoveryShareOffer) {
       try {
         const choice = await config.onRecoveryShareOffer({ evmAddress, solanaAddress });
@@ -3639,17 +3665,6 @@ async function createDecaneConnect(config) {
         console.warn("decane-connect-kit: recovery share offer failed or was skipped.", e);
       }
     }
-    if (serverAssistedRecovery) {
-      try {
-        const tee = new TeeClient(teeUrl);
-        await tee.enrolAuthShare(jwt, shareSet.recovery);
-      } catch (e) {
-        console.warn(
-          "decane-connect-kit: could not enrol this wallet for server-assisted recovery; a recovery file will be required on a new device.",
-          e
-        );
-      }
-    }
     zeroize(shareSet.recovery);
     return addresses;
   }
@@ -3675,6 +3690,9 @@ async function createDecaneConnect(config) {
             }
             return addrs;
           }
+          console.warn(
+            "decane-connect-kit: this wallet is not enrolled for server-assisted provisioning (/signer/provision returned 409 not_enrolled), so a device share cannot be issued from the JWT alone. Falling back to passkey sync, then the recovery file."
+          );
         } catch (e) {
           console.warn(
             "decane-connect-kit: server-assisted provisioning unavailable; falling back to passkey/recovery-file recovery.",
@@ -6168,6 +6186,7 @@ function WalletStatusOverlay({
 var DEFAULT_SOCIAL = {
   addresses: null,
   isNewUser: false,
+  profile: null,
   isUnlocked: false,
   sessionExpiresAt: null,
   needsReconnect: false,
@@ -6281,6 +6300,7 @@ function DecaneKit({ config, children }) {
     setSocialAuth({
       addresses: result.addresses,
       isNewUser: result.isNewUser,
+      profile: result.profile ?? null,
       isUnlocked: sdk?.isUnlocked() ?? false,
       sessionExpiresAt: sdk?.sessionExpiresAt() ?? null,
       needsReconnect: false,