decane-connect-kit 2.7.1 → 2.7.2

package/dist/index.js

@@ -2400,7 +2400,12 @@ var TeeClient = class {
       headers: { Authorization: `Bearer ${jwt}`, "Content-Type": "application/json" },
       body: JSON.stringify({ share: bytesToBase64(recoveryShare) })
     });
-    if (!res.ok) throw new Error("auth share enrolment failed");
+    if (!res.ok) {
+      const detail = await res.text().catch(() => "");
+      throw new Error(
+        `auth share enrolment failed (HTTP ${res.status})${detail ? `: ${detail.slice(0, 200)}` : ""}`
+      );
+    }
   }
   /**
    * Ask the enclave for a fresh device share for this authenticated user.
@@ -2418,7 +2423,12 @@ var TeeClient = class {
       headers: { Authorization: `Bearer ${jwt}`, "Content-Type": "application/json" }
     });
     if (res.status === 409) return null;
-    if (!res.ok) throw new Error("device share provisioning failed");
+    if (!res.ok) {
+      const detail = await res.text().catch(() => "");
+      throw new Error(
+        `device share provisioning failed (HTTP ${res.status})${detail ? `: ${detail.slice(0, 200)}` : ""}`
+      );
+    }
     const body = await res.json();
     return base64ToBytes(body.deviceShare);
   }
@@ -3621,6 +3631,22 @@ async function createDecaneConnect(config) {
     addresses.evm = evmAddress = confirmed.evm;
     addresses.solana = solanaAddress = confirmed.solana;
     addresses.tron = tronAddress = confirmed.tron ?? evmToTronAddress2(confirmed.evm);
+    if (serverAssistedRecovery) {
+      for (let attempt = 1; attempt <= 2; attempt++) {
+        try {
+          const tee = new TeeClient(teeUrl);
+          await tee.enrolAuthShare(jwt, shareSet.recovery);
+          break;
+        } catch (e) {
+          if (attempt === 2) {
+            console.warn(
+              "decane-connect-kit: could not enrol this wallet for server-assisted recovery; a recovery file will be required on a new device. This wallet will get a 409 not_enrolled from /signer/provision until it is re-enrolled.",
+              e
+            );
+          }
+        }
+      }
+    }
     if (config.offerRecoveryAtSignup !== false && config.onRecoveryShareOffer) {
       try {
         const choice = await config.onRecoveryShareOffer({ evmAddress, solanaAddress });
@@ -3639,17 +3665,6 @@ async function createDecaneConnect(config) {
         console.warn("decane-connect-kit: recovery share offer failed or was skipped.", e);
       }
     }
-    if (serverAssistedRecovery) {
-      try {
-        const tee = new TeeClient(teeUrl);
-        await tee.enrolAuthShare(jwt, shareSet.recovery);
-      } catch (e) {
-        console.warn(
-          "decane-connect-kit: could not enrol this wallet for server-assisted recovery; a recovery file will be required on a new device.",
-          e
-        );
-      }
-    }
     zeroize(shareSet.recovery);
     return addresses;
   }
@@ -3675,6 +3690,9 @@ async function createDecaneConnect(config) {
             }
             return addrs;
           }
+          console.warn(
+            "decane-connect-kit: this wallet is not enrolled for server-assisted provisioning (/signer/provision returned 409 not_enrolled), so a device share cannot be issued from the JWT alone. Falling back to passkey sync, then the recovery file."
+          );
         } catch (e) {
           console.warn(
             "decane-connect-kit: server-assisted provisioning unavailable; falling back to passkey/recovery-file recovery.",