@breeztech/breez-sdk-spark 0.19.0 → 0.19.2

package/bundler/breez_sdk_spark_wasm.d.ts

@@ -307,6 +307,14 @@ export interface PrfProvider {
      * device. Hosts gate UX on the result.
      */
     isSupported(): Promise<boolean>;
+
+    /**
+     * Optional. Whether the silent single-CTA flow works here (a
+     * no-credential sign-in fast-fails with no UI). Omit to be treated as
+     * unsupported (`false`); the built-in browser provider returns the
+     * WebAuthn immediate-mediation capability.
+     */
+    supportsImmediateMediation?(): Promise<boolean>;
 }
 
 /**
@@ -322,7 +330,9 @@ export interface DeriveSeedOptions {
     allowCredentials?: Uint8Array[];
     /**
      * Fast-fail when no local credential is available. On the web this maps
-     * to WebAuthn `mediation: 'immediate'`: `true` opts in where the browser
+     * to WebAuthn `uiMode: 'immediate'`, used only on the unpinned probe (a
+     * non-empty allowCredentials keeps the standard picker, since a pin means
+     * a credential is already known): `true` opts in where the browser
      * advertises support, `false` uses the standard picker. Unset uses the
      * provider default.
      */
@@ -372,6 +382,15 @@ export interface PasskeyProviderOptions {
     userDisplayName?: string;
 }
 
+/**
+ * Request shape for `PasskeyClient.connectWithPasskey`.
+ */
+export interface ConnectWithPasskeyRequest {
+    label?: string;
+    allowCredentials?: Uint8Array[];
+    excludeCredentials?: Uint8Array[];
+}
+
 /**
  * Request shape for `PasskeyClient.register`.
  */
@@ -389,6 +408,15 @@ export interface SignInRequest {
     preferImmediatelyAvailableCredentials?: boolean;
 }
 
+/**
+ * Response shape for `PasskeyClient.connectWithPasskey`.
+ */
+export interface ConnectWithPasskeyResponse {
+    wallet: Wallet;
+    credential?: PasskeyCredential;
+    labels: string[];
+}
+
 /**
  * Response shape for `PasskeyClient.register`.
  */
@@ -2060,6 +2088,18 @@ export class PasskeyClient {
      * hosts can gate UX on.
      */
     checkAvailability(): Promise<PasskeyAvailability>;
+    /**
+     * Single-CTA onboarding: silent sign-in that falls through to
+     * registration when no credential exists on the device. Pins
+     * immediate mediation, so on web only use it where the browser
+     * advertises it (`supportsImmediateMediation`); otherwise the silent
+     * probe degrades to the standard picker and a dismiss does not fall
+     * through to register, so
+     * present an explicit create / sign-in choice instead. Called without
+     * a `label`, the response `labels` lists a returning user's wallets
+     * for a picker.
+     */
+    connectWithPasskey(request: ConnectWithPasskeyRequest): Promise<ConnectWithPasskeyResponse>;
     /**
      * Label sub-object. List / publish labels for this passkey's identity.
      */
@@ -2084,6 +2124,14 @@ export class PasskeyClient {
      * label set in the same ceremony.
      */
     signIn(request: SignInRequest): Promise<SignInResponse>;
+    /**
+     * Whether this browser advertises WebAuthn immediate mediation: the
+     * silent single-CTA probe (a no-credential sign-in fast-fails with no
+     * UI) works here, so a web host can pick single- vs two-button
+     * onboarding. Web-only and WASM-only: native does the silent probe
+     * inherently, so there is nothing to query off-web.
+     */
+    supportsImmediateMediation(): Promise<boolean>;
 }
 
 /**

package/bundler/breez_sdk_spark_wasm_bg.js

@@ -1051,6 +1051,23 @@ export class PasskeyClient {
         const ret = wasm.passkeyclient_checkAvailability(this.__wbg_ptr);
         return ret;
     }
+    /**
+     * Single-CTA onboarding: silent sign-in that falls through to
+     * registration when no credential exists on the device. Pins
+     * immediate mediation, so on web only use it where the browser
+     * advertises it (`supportsImmediateMediation`); otherwise the silent
+     * probe degrades to the standard picker and a dismiss does not fall
+     * through to register, so
+     * present an explicit create / sign-in choice instead. Called without
+     * a `label`, the response `labels` lists a returning user's wallets
+     * for a picker.
+     * @param {ConnectWithPasskeyRequest} request
+     * @returns {Promise<ConnectWithPasskeyResponse>}
+     */
+    connectWithPasskey(request) {
+        const ret = wasm.passkeyclient_connectWithPasskey(this.__wbg_ptr, request);
+        return ret;
+    }
     /**
      * Label sub-object. List / publish labels for this passkey's identity.
      * @returns {PasskeyLabels}
@@ -1099,6 +1116,18 @@ export class PasskeyClient {
         const ret = wasm.passkeyclient_signIn(this.__wbg_ptr, request);
         return ret;
     }
+    /**
+     * Whether this browser advertises WebAuthn immediate mediation: the
+     * silent single-CTA probe (a no-credential sign-in fast-fails with no
+     * UI) works here, so a web host can pick single- vs two-button
+     * onboarding. Web-only and WASM-only: native does the silent probe
+     * inherently, so there is nothing to query off-web.
+     * @returns {Promise<boolean>}
+     */
+    supportsImmediateMediation() {
+        const ret = wasm.passkeyclient_supportsImmediateMediation(this.__wbg_ptr);
+        return ret;
+    }
 }
 if (Symbol.dispose) PasskeyClient.prototype[Symbol.dispose] = PasskeyClient.prototype.free;
 
@@ -3250,6 +3279,10 @@ export function __wbg_subarray_fbe3cef290e1fa43(arg0, arg1, arg2) {
     const ret = arg0.subarray(arg1 >>> 0, arg2 >>> 0);
     return ret;
 }
+export function __wbg_supportsImmediateMediation_a50b46b1cdfacd3d() { return handleError(function (arg0) {
+    const ret = arg0.supportsImmediateMediation();
+    return ret;
+}, arguments); }
 export function __wbg_syncAddOutgoingChange_69db2a1430cbd55a() { return handleError(function (arg0, arg1) {
     const ret = arg0.syncAddOutgoingChange(arg1);
     return ret;
@@ -3407,27 +3440,27 @@ export function __wbindgen_cast_0000000000000001(arg0, arg1) {
     return ret;
 }
 export function __wbindgen_cast_0000000000000002(arg0, arg1) {
-    // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 230, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+    // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 366, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
     const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h3120db8c4a8a92b2);
     return ret;
 }
 export function __wbindgen_cast_0000000000000003(arg0, arg1) {
-    // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("CloseEvent")], shim_idx: 230, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+    // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("CloseEvent")], shim_idx: 366, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
     const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h3120db8c4a8a92b2_2);
     return ret;
 }
 export function __wbindgen_cast_0000000000000004(arg0, arg1) {
-    // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("ErrorEvent")], shim_idx: 230, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+    // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("ErrorEvent")], shim_idx: 366, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
     const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h3120db8c4a8a92b2_3);
     return ret;
 }
 export function __wbindgen_cast_0000000000000005(arg0, arg1) {
-    // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("Event")], shim_idx: 230, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+    // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("Event")], shim_idx: 366, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
     const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h3120db8c4a8a92b2_4);
     return ret;
 }
 export function __wbindgen_cast_0000000000000006(arg0, arg1) {
-    // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("MessageEvent")], shim_idx: 230, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+    // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("MessageEvent")], shim_idx: 366, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
     const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h3120db8c4a8a92b2_5);
     return ret;
 }
@@ -3452,12 +3485,12 @@ export function __wbindgen_cast_000000000000000a(arg0, arg1) {
     return ret;
 }
 export function __wbindgen_cast_000000000000000b(arg0, arg1) {
-    // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [], shim_idx: 392, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+    // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [], shim_idx: 371, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
     const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h1d6669a7b693932a);
     return ret;
 }
 export function __wbindgen_cast_000000000000000c(arg0, arg1) {
-    // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [], shim_idx: 421, ret: Unit, inner_ret: Some(Unit) }, mutable: false }) -> Externref`.
+    // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [], shim_idx: 403, ret: Unit, inner_ret: Some(Unit) }, mutable: false }) -> Externref`.
     const ret = makeClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h0fa3f876e31d2a3e);
     return ret;
 }

package/bundler/breez_sdk_spark_wasm_bg.wasm.d.ts

@@ -113,10 +113,12 @@ export const mysqlStorage: (a: any) => number;
 export const newRestChainService: (a: number, b: number, c: any, d: any, e: number) => any;
 export const newSharedSdkContext: (a: any) => any;
 export const passkeyclient_checkAvailability: (a: number) => any;
+export const passkeyclient_connectWithPasskey: (a: number, b: any) => any;
 export const passkeyclient_labels: (a: number) => number;
 export const passkeyclient_new: (a: any, b: number, c: number, d: number) => number;
 export const passkeyclient_register: (a: number, b: any) => any;
 export const passkeyclient_signIn: (a: number, b: any) => any;
+export const passkeyclient_supportsImmediateMediation: (a: number) => any;
 export const passkeylabels_list: (a: number) => any;
 export const passkeylabels_store: (a: number, b: number, c: number) => any;
 export const postgresStorage: (a: any) => number;

package/deno/breez_sdk_spark_wasm.d.ts

@@ -307,6 +307,14 @@ export interface PrfProvider {
      * device. Hosts gate UX on the result.
      */
     isSupported(): Promise<boolean>;
+
+    /**
+     * Optional. Whether the silent single-CTA flow works here (a
+     * no-credential sign-in fast-fails with no UI). Omit to be treated as
+     * unsupported (`false`); the built-in browser provider returns the
+     * WebAuthn immediate-mediation capability.
+     */
+    supportsImmediateMediation?(): Promise<boolean>;
 }
 
 /**
@@ -322,7 +330,9 @@ export interface DeriveSeedOptions {
     allowCredentials?: Uint8Array[];
     /**
      * Fast-fail when no local credential is available. On the web this maps
-     * to WebAuthn `mediation: 'immediate'`: `true` opts in where the browser
+     * to WebAuthn `uiMode: 'immediate'`, used only on the unpinned probe (a
+     * non-empty allowCredentials keeps the standard picker, since a pin means
+     * a credential is already known): `true` opts in where the browser
      * advertises support, `false` uses the standard picker. Unset uses the
      * provider default.
      */
@@ -372,6 +382,15 @@ export interface PasskeyProviderOptions {
     userDisplayName?: string;
 }
 
+/**
+ * Request shape for `PasskeyClient.connectWithPasskey`.
+ */
+export interface ConnectWithPasskeyRequest {
+    label?: string;
+    allowCredentials?: Uint8Array[];
+    excludeCredentials?: Uint8Array[];
+}
+
 /**
  * Request shape for `PasskeyClient.register`.
  */
@@ -389,6 +408,15 @@ export interface SignInRequest {
     preferImmediatelyAvailableCredentials?: boolean;
 }
 
+/**
+ * Response shape for `PasskeyClient.connectWithPasskey`.
+ */
+export interface ConnectWithPasskeyResponse {
+    wallet: Wallet;
+    credential?: PasskeyCredential;
+    labels: string[];
+}
+
 /**
  * Response shape for `PasskeyClient.register`.
  */
@@ -2060,6 +2088,18 @@ export class PasskeyClient {
      * hosts can gate UX on.
      */
     checkAvailability(): Promise<PasskeyAvailability>;
+    /**
+     * Single-CTA onboarding: silent sign-in that falls through to
+     * registration when no credential exists on the device. Pins
+     * immediate mediation, so on web only use it where the browser
+     * advertises it (`supportsImmediateMediation`); otherwise the silent
+     * probe degrades to the standard picker and a dismiss does not fall
+     * through to register, so
+     * present an explicit create / sign-in choice instead. Called without
+     * a `label`, the response `labels` lists a returning user's wallets
+     * for a picker.
+     */
+    connectWithPasskey(request: ConnectWithPasskeyRequest): Promise<ConnectWithPasskeyResponse>;
     /**
      * Label sub-object. List / publish labels for this passkey's identity.
      */
@@ -2084,6 +2124,14 @@ export class PasskeyClient {
      * label set in the same ceremony.
      */
     signIn(request: SignInRequest): Promise<SignInResponse>;
+    /**
+     * Whether this browser advertises WebAuthn immediate mediation: the
+     * silent single-CTA probe (a no-credential sign-in fast-fails with no
+     * UI) works here, so a web host can pick single- vs two-button
+     * onboarding. Web-only and WASM-only: native does the silent probe
+     * inherently, so there is nothing to query off-web.
+     */
+    supportsImmediateMediation(): Promise<boolean>;
 }
 
 /**

package/deno/breez_sdk_spark_wasm.js

@@ -1053,6 +1053,23 @@ export class PasskeyClient {
         const ret = wasm.passkeyclient_checkAvailability(this.__wbg_ptr);
         return ret;
     }
+    /**
+     * Single-CTA onboarding: silent sign-in that falls through to
+     * registration when no credential exists on the device. Pins
+     * immediate mediation, so on web only use it where the browser
+     * advertises it (`supportsImmediateMediation`); otherwise the silent
+     * probe degrades to the standard picker and a dismiss does not fall
+     * through to register, so
+     * present an explicit create / sign-in choice instead. Called without
+     * a `label`, the response `labels` lists a returning user's wallets
+     * for a picker.
+     * @param {ConnectWithPasskeyRequest} request
+     * @returns {Promise<ConnectWithPasskeyResponse>}
+     */
+    connectWithPasskey(request) {
+        const ret = wasm.passkeyclient_connectWithPasskey(this.__wbg_ptr, request);
+        return ret;
+    }
     /**
      * Label sub-object. List / publish labels for this passkey's identity.
      * @returns {PasskeyLabels}
@@ -1101,6 +1118,18 @@ export class PasskeyClient {
         const ret = wasm.passkeyclient_signIn(this.__wbg_ptr, request);
         return ret;
     }
+    /**
+     * Whether this browser advertises WebAuthn immediate mediation: the
+     * silent single-CTA probe (a no-credential sign-in fast-fails with no
+     * UI) works here, so a web host can pick single- vs two-button
+     * onboarding. Web-only and WASM-only: native does the silent probe
+     * inherently, so there is nothing to query off-web.
+     * @returns {Promise<boolean>}
+     */
+    supportsImmediateMediation() {
+        const ret = wasm.passkeyclient_supportsImmediateMediation(this.__wbg_ptr);
+        return ret;
+    }
 }
 if (Symbol.dispose) PasskeyClient.prototype[Symbol.dispose] = PasskeyClient.prototype.free;
 
@@ -3255,6 +3284,10 @@ function __wbg_get_imports() {
             const ret = arg0.subarray(arg1 >>> 0, arg2 >>> 0);
             return ret;
         },
+        __wbg_supportsImmediateMediation_a50b46b1cdfacd3d: function() { return handleError(function (arg0) {
+            const ret = arg0.supportsImmediateMediation();
+            return ret;
+        }, arguments); },
         __wbg_syncAddOutgoingChange_69db2a1430cbd55a: function() { return handleError(function (arg0, arg1) {
             const ret = arg0.syncAddOutgoingChange(arg1);
             return ret;
@@ -3412,27 +3445,27 @@ function __wbg_get_imports() {
             return ret;
         },
         __wbindgen_cast_0000000000000002: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 230, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 366, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
             const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h3120db8c4a8a92b2);
             return ret;
         },
         __wbindgen_cast_0000000000000003: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("CloseEvent")], shim_idx: 230, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("CloseEvent")], shim_idx: 366, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
             const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h3120db8c4a8a92b2_2);
             return ret;
         },
         __wbindgen_cast_0000000000000004: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("ErrorEvent")], shim_idx: 230, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("ErrorEvent")], shim_idx: 366, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
             const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h3120db8c4a8a92b2_3);
             return ret;
         },
         __wbindgen_cast_0000000000000005: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("Event")], shim_idx: 230, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("Event")], shim_idx: 366, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
             const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h3120db8c4a8a92b2_4);
             return ret;
         },
         __wbindgen_cast_0000000000000006: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("MessageEvent")], shim_idx: 230, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("MessageEvent")], shim_idx: 366, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
             const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h3120db8c4a8a92b2_5);
             return ret;
         },
@@ -3457,12 +3490,12 @@ function __wbg_get_imports() {
             return ret;
         },
         __wbindgen_cast_000000000000000b: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [], shim_idx: 392, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [], shim_idx: 371, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
             const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h1d6669a7b693932a);
             return ret;
         },
         __wbindgen_cast_000000000000000c: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [], shim_idx: 421, ret: Unit, inner_ret: Some(Unit) }, mutable: false }) -> Externref`.
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [], shim_idx: 403, ret: Unit, inner_ret: Some(Unit) }, mutable: false }) -> Externref`.
             const ret = makeClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h0fa3f876e31d2a3e);
             return ret;
         },

package/deno/breez_sdk_spark_wasm_bg.wasm.d.ts

@@ -113,10 +113,12 @@ export const mysqlStorage: (a: any) => number;
 export const newRestChainService: (a: number, b: number, c: any, d: any, e: number) => any;
 export const newSharedSdkContext: (a: any) => any;
 export const passkeyclient_checkAvailability: (a: number) => any;
+export const passkeyclient_connectWithPasskey: (a: number, b: any) => any;
 export const passkeyclient_labels: (a: number) => number;
 export const passkeyclient_new: (a: any, b: number, c: number, d: number) => number;
 export const passkeyclient_register: (a: number, b: any) => any;
 export const passkeyclient_signIn: (a: number, b: any) => any;
+export const passkeyclient_supportsImmediateMediation: (a: number) => any;
 export const passkeylabels_list: (a: number) => any;
 export const passkeylabels_store: (a: number, b: number, c: number) => any;
 export const postgresStorage: (a: any) => number;

package/nodejs/breez_sdk_spark_wasm.d.ts

@@ -307,6 +307,14 @@ export interface PrfProvider {
      * device. Hosts gate UX on the result.
      */
     isSupported(): Promise<boolean>;
+
+    /**
+     * Optional. Whether the silent single-CTA flow works here (a
+     * no-credential sign-in fast-fails with no UI). Omit to be treated as
+     * unsupported (`false`); the built-in browser provider returns the
+     * WebAuthn immediate-mediation capability.
+     */
+    supportsImmediateMediation?(): Promise<boolean>;
 }
 
 /**
@@ -322,7 +330,9 @@ export interface DeriveSeedOptions {
     allowCredentials?: Uint8Array[];
     /**
      * Fast-fail when no local credential is available. On the web this maps
-     * to WebAuthn `mediation: 'immediate'`: `true` opts in where the browser
+     * to WebAuthn `uiMode: 'immediate'`, used only on the unpinned probe (a
+     * non-empty allowCredentials keeps the standard picker, since a pin means
+     * a credential is already known): `true` opts in where the browser
      * advertises support, `false` uses the standard picker. Unset uses the
      * provider default.
      */
@@ -372,6 +382,15 @@ export interface PasskeyProviderOptions {
     userDisplayName?: string;
 }
 
+/**
+ * Request shape for `PasskeyClient.connectWithPasskey`.
+ */
+export interface ConnectWithPasskeyRequest {
+    label?: string;
+    allowCredentials?: Uint8Array[];
+    excludeCredentials?: Uint8Array[];
+}
+
 /**
  * Request shape for `PasskeyClient.register`.
  */
@@ -389,6 +408,15 @@ export interface SignInRequest {
     preferImmediatelyAvailableCredentials?: boolean;
 }
 
+/**
+ * Response shape for `PasskeyClient.connectWithPasskey`.
+ */
+export interface ConnectWithPasskeyResponse {
+    wallet: Wallet;
+    credential?: PasskeyCredential;
+    labels: string[];
+}
+
 /**
  * Response shape for `PasskeyClient.register`.
  */
@@ -2060,6 +2088,18 @@ export class PasskeyClient {
      * hosts can gate UX on.
      */
     checkAvailability(): Promise<PasskeyAvailability>;
+    /**
+     * Single-CTA onboarding: silent sign-in that falls through to
+     * registration when no credential exists on the device. Pins
+     * immediate mediation, so on web only use it where the browser
+     * advertises it (`supportsImmediateMediation`); otherwise the silent
+     * probe degrades to the standard picker and a dismiss does not fall
+     * through to register, so
+     * present an explicit create / sign-in choice instead. Called without
+     * a `label`, the response `labels` lists a returning user's wallets
+     * for a picker.
+     */
+    connectWithPasskey(request: ConnectWithPasskeyRequest): Promise<ConnectWithPasskeyResponse>;
     /**
      * Label sub-object. List / publish labels for this passkey's identity.
      */
@@ -2084,6 +2124,14 @@ export class PasskeyClient {
      * label set in the same ceremony.
      */
     signIn(request: SignInRequest): Promise<SignInResponse>;
+    /**
+     * Whether this browser advertises WebAuthn immediate mediation: the
+     * silent single-CTA probe (a no-credential sign-in fast-fails with no
+     * UI) works here, so a web host can pick single- vs two-button
+     * onboarding. Web-only and WASM-only: native does the silent probe
+     * inherently, so there is nothing to query off-web.
+     */
+    supportsImmediateMediation(): Promise<boolean>;
 }
 
 /**

package/nodejs/breez_sdk_spark_wasm.js

@@ -1063,6 +1063,23 @@ class PasskeyClient {
         const ret = wasm.passkeyclient_checkAvailability(this.__wbg_ptr);
         return ret;
     }
+    /**
+     * Single-CTA onboarding: silent sign-in that falls through to
+     * registration when no credential exists on the device. Pins
+     * immediate mediation, so on web only use it where the browser
+     * advertises it (`supportsImmediateMediation`); otherwise the silent
+     * probe degrades to the standard picker and a dismiss does not fall
+     * through to register, so
+     * present an explicit create / sign-in choice instead. Called without
+     * a `label`, the response `labels` lists a returning user's wallets
+     * for a picker.
+     * @param {ConnectWithPasskeyRequest} request
+     * @returns {Promise<ConnectWithPasskeyResponse>}
+     */
+    connectWithPasskey(request) {
+        const ret = wasm.passkeyclient_connectWithPasskey(this.__wbg_ptr, request);
+        return ret;
+    }
     /**
      * Label sub-object. List / publish labels for this passkey's identity.
      * @returns {PasskeyLabels}
@@ -1111,6 +1128,18 @@ class PasskeyClient {
         const ret = wasm.passkeyclient_signIn(this.__wbg_ptr, request);
         return ret;
     }
+    /**
+     * Whether this browser advertises WebAuthn immediate mediation: the
+     * silent single-CTA probe (a no-credential sign-in fast-fails with no
+     * UI) works here, so a web host can pick single- vs two-button
+     * onboarding. Web-only and WASM-only: native does the silent probe
+     * inherently, so there is nothing to query off-web.
+     * @returns {Promise<boolean>}
+     */
+    supportsImmediateMediation() {
+        const ret = wasm.passkeyclient_supportsImmediateMediation(this.__wbg_ptr);
+        return ret;
+    }
 }
 if (Symbol.dispose) PasskeyClient.prototype[Symbol.dispose] = PasskeyClient.prototype.free;
 exports.PasskeyClient = PasskeyClient;
@@ -3292,6 +3321,10 @@ function __wbg_get_imports() {
             const ret = arg0.subarray(arg1 >>> 0, arg2 >>> 0);
             return ret;
         },
+        __wbg_supportsImmediateMediation_a50b46b1cdfacd3d: function() { return handleError(function (arg0) {
+            const ret = arg0.supportsImmediateMediation();
+            return ret;
+        }, arguments); },
         __wbg_syncAddOutgoingChange_69db2a1430cbd55a: function() { return handleError(function (arg0, arg1) {
             const ret = arg0.syncAddOutgoingChange(arg1);
             return ret;
@@ -3449,27 +3482,27 @@ function __wbg_get_imports() {
             return ret;
         },
         __wbindgen_cast_0000000000000002: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 230, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 366, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
             const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h3120db8c4a8a92b2);
             return ret;
         },
         __wbindgen_cast_0000000000000003: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("CloseEvent")], shim_idx: 230, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("CloseEvent")], shim_idx: 366, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
             const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h3120db8c4a8a92b2_2);
             return ret;
         },
         __wbindgen_cast_0000000000000004: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("ErrorEvent")], shim_idx: 230, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("ErrorEvent")], shim_idx: 366, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
             const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h3120db8c4a8a92b2_3);
             return ret;
         },
         __wbindgen_cast_0000000000000005: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("Event")], shim_idx: 230, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("Event")], shim_idx: 366, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
             const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h3120db8c4a8a92b2_4);
             return ret;
         },
         __wbindgen_cast_0000000000000006: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("MessageEvent")], shim_idx: 230, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("MessageEvent")], shim_idx: 366, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
             const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h3120db8c4a8a92b2_5);
             return ret;
         },
@@ -3494,12 +3527,12 @@ function __wbg_get_imports() {
             return ret;
         },
         __wbindgen_cast_000000000000000b: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [], shim_idx: 392, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [], shim_idx: 371, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
             const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h1d6669a7b693932a);
             return ret;
         },
         __wbindgen_cast_000000000000000c: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [], shim_idx: 421, ret: Unit, inner_ret: Some(Unit) }, mutable: false }) -> Externref`.
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [], shim_idx: 403, ret: Unit, inner_ret: Some(Unit) }, mutable: false }) -> Externref`.
             const ret = makeClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h0fa3f876e31d2a3e);
             return ret;
         },

package/nodejs/breez_sdk_spark_wasm_bg.wasm.d.ts

@@ -113,10 +113,12 @@ export const mysqlStorage: (a: any) => number;
 export const newRestChainService: (a: number, b: number, c: any, d: any, e: number) => any;
 export const newSharedSdkContext: (a: any) => any;
 export const passkeyclient_checkAvailability: (a: number) => any;
+export const passkeyclient_connectWithPasskey: (a: number, b: any) => any;
 export const passkeyclient_labels: (a: number) => number;
 export const passkeyclient_new: (a: any, b: number, c: number, d: number) => number;
 export const passkeyclient_register: (a: number, b: any) => any;
 export const passkeyclient_signIn: (a: number, b: any) => any;
+export const passkeyclient_supportsImmediateMediation: (a: number) => any;
 export const passkeylabels_list: (a: number) => any;
 export const passkeylabels_store: (a: number, b: number, c: number) => any;
 export const postgresStorage: (a: any) => number;

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@breeztech/breez-sdk-spark",
-    "version": "0.19.0",
+    "version": "0.19.2",
     "description": "Breez Spark SDK",
     "repository": "https://github.com/breez/spark-sdk",
     "author": "Breez <contact@breez.technology> (https://github.com/breez)",

package/web/breez_sdk_spark_wasm.d.ts

@@ -307,6 +307,14 @@ export interface PrfProvider {
      * device. Hosts gate UX on the result.
      */
     isSupported(): Promise<boolean>;
+
+    /**
+     * Optional. Whether the silent single-CTA flow works here (a
+     * no-credential sign-in fast-fails with no UI). Omit to be treated as
+     * unsupported (`false`); the built-in browser provider returns the
+     * WebAuthn immediate-mediation capability.
+     */
+    supportsImmediateMediation?(): Promise<boolean>;
 }
 
 /**
@@ -322,7 +330,9 @@ export interface DeriveSeedOptions {
     allowCredentials?: Uint8Array[];
     /**
      * Fast-fail when no local credential is available. On the web this maps
-     * to WebAuthn `mediation: 'immediate'`: `true` opts in where the browser
+     * to WebAuthn `uiMode: 'immediate'`, used only on the unpinned probe (a
+     * non-empty allowCredentials keeps the standard picker, since a pin means
+     * a credential is already known): `true` opts in where the browser
      * advertises support, `false` uses the standard picker. Unset uses the
      * provider default.
      */
@@ -372,6 +382,15 @@ export interface PasskeyProviderOptions {
     userDisplayName?: string;
 }
 
+/**
+ * Request shape for `PasskeyClient.connectWithPasskey`.
+ */
+export interface ConnectWithPasskeyRequest {
+    label?: string;
+    allowCredentials?: Uint8Array[];
+    excludeCredentials?: Uint8Array[];
+}
+
 /**
  * Request shape for `PasskeyClient.register`.
  */
@@ -389,6 +408,15 @@ export interface SignInRequest {
     preferImmediatelyAvailableCredentials?: boolean;
 }
 
+/**
+ * Response shape for `PasskeyClient.connectWithPasskey`.
+ */
+export interface ConnectWithPasskeyResponse {
+    wallet: Wallet;
+    credential?: PasskeyCredential;
+    labels: string[];
+}
+
 /**
  * Response shape for `PasskeyClient.register`.
  */
@@ -2060,6 +2088,18 @@ export class PasskeyClient {
      * hosts can gate UX on.
      */
     checkAvailability(): Promise<PasskeyAvailability>;
+    /**
+     * Single-CTA onboarding: silent sign-in that falls through to
+     * registration when no credential exists on the device. Pins
+     * immediate mediation, so on web only use it where the browser
+     * advertises it (`supportsImmediateMediation`); otherwise the silent
+     * probe degrades to the standard picker and a dismiss does not fall
+     * through to register, so
+     * present an explicit create / sign-in choice instead. Called without
+     * a `label`, the response `labels` lists a returning user's wallets
+     * for a picker.
+     */
+    connectWithPasskey(request: ConnectWithPasskeyRequest): Promise<ConnectWithPasskeyResponse>;
     /**
      * Label sub-object. List / publish labels for this passkey's identity.
      */
@@ -2084,6 +2124,14 @@ export class PasskeyClient {
      * label set in the same ceremony.
      */
     signIn(request: SignInRequest): Promise<SignInResponse>;
+    /**
+     * Whether this browser advertises WebAuthn immediate mediation: the
+     * silent single-CTA probe (a no-credential sign-in fast-fails with no
+     * UI) works here, so a web host can pick single- vs two-button
+     * onboarding. Web-only and WASM-only: native does the silent probe
+     * inherently, so there is nothing to query off-web.
+     */
+    supportsImmediateMediation(): Promise<boolean>;
 }
 
 /**
@@ -2446,10 +2494,12 @@ export interface InitOutput {
     readonly newRestChainService: (a: number, b: number, c: any, d: any, e: number) => any;
     readonly newSharedSdkContext: (a: any) => any;
     readonly passkeyclient_checkAvailability: (a: number) => any;
+    readonly passkeyclient_connectWithPasskey: (a: number, b: any) => any;
     readonly passkeyclient_labels: (a: number) => number;
     readonly passkeyclient_new: (a: any, b: number, c: number, d: number) => number;
     readonly passkeyclient_register: (a: number, b: any) => any;
     readonly passkeyclient_signIn: (a: number, b: any) => any;
+    readonly passkeyclient_supportsImmediateMediation: (a: number) => any;
     readonly passkeylabels_list: (a: number) => any;
     readonly passkeylabels_store: (a: number, b: number, c: number) => any;
     readonly postgresStorage: (a: any) => number;

package/web/breez_sdk_spark_wasm.js

@@ -1053,6 +1053,23 @@ export class PasskeyClient {
         const ret = wasm.passkeyclient_checkAvailability(this.__wbg_ptr);
         return ret;
     }
+    /**
+     * Single-CTA onboarding: silent sign-in that falls through to
+     * registration when no credential exists on the device. Pins
+     * immediate mediation, so on web only use it where the browser
+     * advertises it (`supportsImmediateMediation`); otherwise the silent
+     * probe degrades to the standard picker and a dismiss does not fall
+     * through to register, so
+     * present an explicit create / sign-in choice instead. Called without
+     * a `label`, the response `labels` lists a returning user's wallets
+     * for a picker.
+     * @param {ConnectWithPasskeyRequest} request
+     * @returns {Promise<ConnectWithPasskeyResponse>}
+     */
+    connectWithPasskey(request) {
+        const ret = wasm.passkeyclient_connectWithPasskey(this.__wbg_ptr, request);
+        return ret;
+    }
     /**
      * Label sub-object. List / publish labels for this passkey's identity.
      * @returns {PasskeyLabels}
@@ -1101,6 +1118,18 @@ export class PasskeyClient {
         const ret = wasm.passkeyclient_signIn(this.__wbg_ptr, request);
         return ret;
     }
+    /**
+     * Whether this browser advertises WebAuthn immediate mediation: the
+     * silent single-CTA probe (a no-credential sign-in fast-fails with no
+     * UI) works here, so a web host can pick single- vs two-button
+     * onboarding. Web-only and WASM-only: native does the silent probe
+     * inherently, so there is nothing to query off-web.
+     * @returns {Promise<boolean>}
+     */
+    supportsImmediateMediation() {
+        const ret = wasm.passkeyclient_supportsImmediateMediation(this.__wbg_ptr);
+        return ret;
+    }
 }
 if (Symbol.dispose) PasskeyClient.prototype[Symbol.dispose] = PasskeyClient.prototype.free;
 
@@ -3255,6 +3284,10 @@ function __wbg_get_imports() {
             const ret = arg0.subarray(arg1 >>> 0, arg2 >>> 0);
             return ret;
         },
+        __wbg_supportsImmediateMediation_a50b46b1cdfacd3d: function() { return handleError(function (arg0) {
+            const ret = arg0.supportsImmediateMediation();
+            return ret;
+        }, arguments); },
         __wbg_syncAddOutgoingChange_69db2a1430cbd55a: function() { return handleError(function (arg0, arg1) {
             const ret = arg0.syncAddOutgoingChange(arg1);
             return ret;
@@ -3412,27 +3445,27 @@ function __wbg_get_imports() {
             return ret;
         },
         __wbindgen_cast_0000000000000002: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 230, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 366, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
             const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h3120db8c4a8a92b2);
             return ret;
         },
         __wbindgen_cast_0000000000000003: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("CloseEvent")], shim_idx: 230, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("CloseEvent")], shim_idx: 366, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
             const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h3120db8c4a8a92b2_2);
             return ret;
         },
         __wbindgen_cast_0000000000000004: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("ErrorEvent")], shim_idx: 230, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("ErrorEvent")], shim_idx: 366, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
             const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h3120db8c4a8a92b2_3);
             return ret;
         },
         __wbindgen_cast_0000000000000005: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("Event")], shim_idx: 230, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("Event")], shim_idx: 366, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
             const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h3120db8c4a8a92b2_4);
             return ret;
         },
         __wbindgen_cast_0000000000000006: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("MessageEvent")], shim_idx: 230, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [NamedExternref("MessageEvent")], shim_idx: 366, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
             const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h3120db8c4a8a92b2_5);
             return ret;
         },
@@ -3457,12 +3490,12 @@ function __wbg_get_imports() {
             return ret;
         },
         __wbindgen_cast_000000000000000b: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [], shim_idx: 392, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [], shim_idx: 371, ret: Unit, inner_ret: Some(Unit) }, mutable: true }) -> Externref`.
             const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h1d6669a7b693932a);
             return ret;
         },
         __wbindgen_cast_000000000000000c: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [], shim_idx: 421, ret: Unit, inner_ret: Some(Unit) }, mutable: false }) -> Externref`.
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [], shim_idx: 403, ret: Unit, inner_ret: Some(Unit) }, mutable: false }) -> Externref`.
             const ret = makeClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h0fa3f876e31d2a3e);
             return ret;
         },

package/web/breez_sdk_spark_wasm_bg.wasm.d.ts

@@ -113,10 +113,12 @@ export const mysqlStorage: (a: any) => number;
 export const newRestChainService: (a: number, b: number, c: any, d: any, e: number) => any;
 export const newSharedSdkContext: (a: any) => any;
 export const passkeyclient_checkAvailability: (a: number) => any;
+export const passkeyclient_connectWithPasskey: (a: number, b: any) => any;
 export const passkeyclient_labels: (a: number) => number;
 export const passkeyclient_new: (a: any, b: number, c: number, d: number) => number;
 export const passkeyclient_register: (a: number, b: any) => any;
 export const passkeyclient_signIn: (a: number, b: any) => any;
+export const passkeyclient_supportsImmediateMediation: (a: number) => any;
 export const passkeylabels_list: (a: number) => any;
 export const passkeylabels_store: (a: number, b: number, c: number) => any;
 export const postgresStorage: (a: any) => number;

package/web/passkey-prf-provider/index.d.ts

@@ -144,6 +144,14 @@ export declare class PasskeyProvider {
      */
     isSupported(): Promise<boolean>;
 
+    /**
+     * Whether the silent single-CTA flow works in this browser: WebAuthn
+     * immediate mediation (`getClientCapabilities().immediateGet`). The SDK
+     * surfaces this on the WASM client's `supportsImmediateMediation()`;
+     * hosts gate single- vs two-button onboarding on it.
+     */
+    supportsImmediateMediation(): Promise<boolean>;
+
     /**
      * Check whether the configured `rpId` is a valid WebAuthn scope for
      * the current origin (must be a registrable suffix of

package/web/passkey-prf-provider/index.js

@@ -22,10 +22,12 @@ const BREEZ_RP_ID = 'keys.breez.technology';
 /** Default `rpName` for the zero-config {@link PasskeyClient} path. */
 const DEFAULT_RP_NAME = 'Breez';
 
-// WebAuthn collapses "no matching credential" and "user dismissed" into
-// one NotAllowedError, but a no-credential fast-fail resolves before any
-// UI shows while a dismiss takes seconds. Elapsed time below this is
-// classified as no-credential, at or above as user-cancel.
+// A no-credential reject resolves before any UI shows; a dismiss takes
+// seconds. This fast-fail window only applies under immediate UI mode
+// (`uiMode: 'immediate'`): that is the only path where a no-credential
+// reject shows no UI. On the modal path the OS always shows a picker
+// first, so a NotAllowedError there is a dismiss/timeout, never a fast
+// no-credential.
 const NO_CRED_FAST_FAIL_MS = 250;
 
 // iOS and Android tear the biometric sheet down around 55s of inactivity
@@ -284,6 +286,28 @@ export class PasskeyProvider {
         }
     }
 
+    /**
+     * Whether the silent single-CTA flow works in this browser: WebAuthn
+     * immediate UI mode (`uiMode: 'immediate'`), probed via
+     * `getClientCapabilities().immediateGet`. The SDK surfaces this on the
+     * WASM client's `supportsImmediateMediation()`; hosts gate single- vs
+     * two-button onboarding on it.
+     *
+     * @returns {Promise<boolean>}
+     */
+    async supportsImmediateMediation() {
+        try {
+            if (typeof PublicKeyCredential === 'undefined'
+                || typeof PublicKeyCredential.getClientCapabilities !== 'function') {
+                return false;
+            }
+            const caps = await PublicKeyCredential.getClientCapabilities();
+            return caps?.immediateGet === true;
+        } catch {
+            return false;
+        }
+    }
+
     /**
      * Check whether the configured rpId is a valid WebAuthn scope for
      * the current origin (must be a registrable suffix of
@@ -434,6 +458,26 @@ export class PasskeyProvider {
         }
 
         const requestOptions = { publicKey };
+        // Immediate UI mode: fast-fail with no UI when no credential is
+        // present so a single-CTA host can fall through to register. Only on
+        // the first, unpinned probe (`allowList` empty): immediate mode is
+        // discoverable-only (rejects a non-empty allowCredentials) and spends
+        // the transient activation, which the pinned later ceremonies of a
+        // multi-salt derive no longer have. Once a credential is pinned we
+        // already know one exists, so the modal path (which keeps the pin) is
+        // correct and avoids a second, credential-substituting chooser. Only
+        // where the browser advertises it (`getClientCapabilities().immediateGet`);
+        // the fast NotAllowedError it raises on no-credential is classified as
+        // CredentialNotFound below.
+        if (options.preferImmediatelyAvailableCredentials && allowList.length === 0) {
+            if (await this.supportsImmediateMediation()) {
+                requestOptions.uiMode = 'immediate';
+            } else {
+                // Surface the fallback: silently using standard mediation
+                // hides why a single-CTA probe still shows a sheet.
+                console.debug('breez-sdk: preferImmediatelyAvailableCredentials set but immediate UI mode is unsupported by this browser; using standard mediation');
+            }
+        }
 
         let credential;
         const startedAt = (typeof performance !== 'undefined' && performance.now)
@@ -445,7 +489,7 @@ export class PasskeyProvider {
             const elapsed = ((typeof performance !== 'undefined' && performance.now)
                 ? performance.now()
                 : Date.now()) - startedAt;
-            throw this._mapAssertionError(error, elapsed);
+            throw this._mapAssertionError(error, elapsed, requestOptions.uiMode === 'immediate');
         }
         if (!credential) {
             throw new PasskeyCredentialNotFoundError();
@@ -583,18 +627,24 @@ export class PasskeyProvider {
 
     /**
      * Map a `navigator.credentials.get` failure into a typed error.
-     * `elapsedMs` resolves the `NotAllowedError` ambiguity (cancel vs
-     * no-credential vs timeout, which all share the error) by elapsed
-     * time, since only the cancel path shows dismissable UI.
+     * `elapsedMs` disambiguates the shared `NotAllowedError` (cancel vs
+     * no-credential vs timeout) by time, since only cancel shows UI. The
+     * fast no-credential branch is immediate-only: the modal path shows a
+     * picker first, so its NotAllowedError is a dismiss/timeout.
      * @param {Error} error
      * @param {number} elapsedMs
+     * @param {boolean} [immediate=false]
      * @returns {Error}
      * @private
      */
-    _mapAssertionError(error, elapsedMs) {
+    _mapAssertionError(error, elapsedMs, immediate = false) {
         if (!error) return new Error('Unknown WebAuthn error');
         if (error.name === 'NotAllowedError') {
-            if (elapsedMs < NO_CRED_FAST_FAIL_MS) {
+            // Fast no-credential only under immediate mediation: that's the
+            // only path where a no-credential reject shows no UI. On the
+            // modal path the OS always shows a picker first, so a
+            // NotAllowedError is a dismiss/timeout, not a no-credential.
+            if (immediate && elapsedMs < NO_CRED_FAST_FAIL_MS) {
                 return new PasskeyCredentialNotFoundError();
             }
             if (elapsedMs >= this._cancelVsTimeoutThresholdMs()) {