@pollar/react 0.11.5 → 0.12.0-rc.5

package/dist/index.d.mts

@@ -1,5 +1,5 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
-import { pollarPaths, PollarClient, PollarClientConfig, PollarAdapters, OnStorageDegrade, WalletInfo, PollarLoginOptions, SessionsState, CosignState, PendingConfirmation, TransactionState, TxBuildBody, BuildOutcome, SubmitOutcome, SignOutcome, SendPaymentParams, StellarNetwork, WalletBalanceState, EnabledAssetsState, TrustlineOutcome, TxHistoryState, SwapVenue, SwapToken, SwapQuoteParams, SwapQuote, EarnProviderId, EarnOpportunity, EarnPositionParams, EarnPosition, EarnTxParams, PollarAdapter, PasskeyCeremony, PasskeySigner, WalletChain, CosignRequest, CosignVerification, CosignQuorumReport, CosignDevicesContent, KycStatus as KycStatus$1, RampQuote, WalletId, AuthState, KycProvider, KycStartResponse, RampDirection, RampCountry, RampQuoteRequirement, RampTxStatus, RampDepositInstructions, EnabledAssetRecord, WalletBalanceRecord, SwapProvider, DistributionRulesState, DistributionRule } from '@pollar/core';
+import { pollarPaths, PollarClient, PollarClientConfig, PollarAdapters, OnStorageDegrade, WalletInfo, CosignCustody, PollarLoginOptions, SessionsState, CosignState, RecoveryState, CustodyMigrationState, PendingConfirmation, TransactionState, TxBuildBody, BuildOutcome, SubmitOutcome, SignOutcome, SendPaymentParams, StellarNetwork, WalletBalanceState, EnabledAssetsState, TrustlineOutcome, TxHistoryState, SwapVenue, SwapToken, SwapQuoteParams, SwapQuote, EarnProviderId, EarnOpportunity, EarnPositionParams, EarnPosition, EarnTxParams, PollarAdapter, PasskeyCeremony, PasskeySigner, RecoveryPasskeyCeremony, WalletChain, CosignRequest, CosignVerification, CosignQuorumReport, CosignDevicesContent, KycStatus as KycStatus$1, RampQuoteRejection, RampQuoteRequirement, RampWalletStep, RampQuote, WalletId, AuthState, KycProvider, KycStartResponse, RampDirection, RampFiat, RampAsset, RampField, RampOrder, EnabledAssetRecord, WalletBalanceRecord, SwapProvider, DistributionRulesState, DistributionRule } from '@pollar/core';
 export { AuthProviderContext, PollarAuthProvider, SessionsState } from '@pollar/core';
 import { ReactNode, CSSProperties } from 'react';
 
@@ -43,8 +43,13 @@ interface PollarContextValue {
      * creates none.
      */
     hasWallet: boolean;
-    /** Create the signed-in user's wallet; see `PollarClient.createWallet`. */
-    createWallet: () => Promise<WalletInfo>;
+    /**
+     * Create the signed-in user's wallet; see `PollarClient.createWallet`. An app
+     * whose custody mode is USER_CHOICE needs `custody`: the user's pick.
+     */
+    createWallet: (options?: {
+        custody?: CosignCustody;
+    }) => Promise<WalletInfo>;
     /**
      * `true` once the server has confirmed the session (login / refresh /
      * `/auth/session/resume`). `false` while a cold-start session is still
@@ -60,6 +65,30 @@ interface PollarContextValue {
     cosign: CosignState;
     /** Open the approval prompt of a co-signed wallet. Opens by itself when a request arrives. */
     openCosignModal: () => void;
+    /**
+     * The approval a flow will ask for next (a ramp's swap after its approve),
+     * or null. While one is coming, the approval prompt stays open after a sent
+     * transaction and shows the next request when it arrives, instead of closing.
+     */
+    setCosignNextStep: (next: string | null) => void;
+    /**
+     * The recovery state of the user's Turnkey wallet: null until read, or for a
+     * session without one. `recoveryLocked` is true while the wallet has no way
+     * to be recovered without this device: it signs nothing but its own setup.
+     */
+    recovery: RecoveryState | null;
+    recoveryLocked: boolean;
+    /** Read the recovery state again (after a method changed elsewhere). */
+    refreshRecovery: () => void;
+    /** Open the recovery methods modal: passkeys, email, devices, export. */
+    openRecoveryModal: () => void;
+    /**
+     * Whether the user's wallet, one Pollar custodies, has to move to this
+     * device because the app keeps its wallets in Turnkey. While `required`, the
+     * provider shows the move and nothing else; null until read.
+     */
+    custodyMigration: CustodyMigrationState | null;
+    refreshCustodyMigration: () => void;
     /** Signing calls waiting for the user under `confirmation: 'prompt'`; the provider shows the first one. */
     confirmations: PendingConfirmation[];
     appConfig: PollarConfig;
@@ -277,6 +306,15 @@ declare const browserPasskeyCeremony: PasskeyCeremony;
  * entry. The secp256r1 key never leaves the device.
  */
 declare const browserPasskeySigner: PasskeySigner;
+/**
+ * Browser passkey ceremonies for a Turnkey wallet's recovery: register a
+ * passkey as a way back in, and sign a Turnkey request with one to add a new
+ * device. rpId is the page's hostname, like the smart-wallet ceremony, so a
+ * passkey made on the app's domain recovers the wallet on that domain.
+ * `challenge` arrives base64url already: for `get()` it is what Turnkey checks
+ * (the hex SHA-256 of the request body).
+ */
+declare const browserRecoveryPasskey: RecoveryPasskeyCeremony;
 
 /**
  * The one place the widget decides whether a wallet can act on-chain, and what
@@ -299,14 +337,71 @@ declare function walletNotReadyReason(wallet: WalletInfo | null | undefined, cha
 
 declare function WalletButton(): react_jsx_runtime.JSX.Element;
 
+/** Per-app overrides for the modal chrome, configured in the dashboard's
+ *  Branding screen. Every field is optional: absent means "use the value the
+ *  theme derives", which is what every modal rendered before these existed. */
+interface ModalStyleOverrides {
+    /** Card background. Overrides the theme's white / #1a1a1a. */
+    backgroundColor?: string | null | undefined;
+    /** Body text. Overrides the theme's #111827 / white. With a background or a
+     *  text color set, borders, secondary ("muted") text and input fills are
+     *  blended from the pair instead of taken from the theme. */
+    textColor?: string | null | undefined;
+    /** Fill of the SECONDARY buttons (the wallet / social / provider entries, the
+     *  retry button). The primary button is the accent's job. Unset => the theme's
+     *  own surface color, which is what these buttons always used. */
+    buttonColor?: string | null | undefined;
+    /** Radius of the modal card itself, in px. */
+    modalBorderRadius?: number | null | undefined;
+    /** Radius of the buttons inside the modal, in px. Independent of the card's. */
+    buttonBorderRadius?: number | null | undefined;
+}
+/** Text color that stays legible on `background`. The primary button's label was
+ *  hardcoded white, which a light fill (the Amber accent preset, say) turns
+ *  invisible - so it follows the fill's luminance instead. Unparseable colors
+ *  keep white, the pre-existing behavior. */
+declare function readableTextOn(background: string): string;
+/** How much room a modal gives its header. 'hero' is the identity-forward set
+ *  (login, KYC, ramp, the Privy sub-modal): roomier padding and a larger
+ *  centered heading. 'compact' is every utility modal (send, balance, history,
+ *  ...), which keeps the card's own 1.75rem padding. */
+type ModalVariant = 'hero' | 'compact';
+/** The app's Branding as inline CSS custom properties for a Pollar root (a modal
+ *  card, the wallet button).
+ *
+ *  Everything is written under the private `--pollar-brand-*` names, never the
+ *  public `--pollar-*` ones: `shared.css` maps brand onto public inside a
+ *  zero-specificity `:where()`, so a host stylesheet that sets a public variable
+ *  on a Pollar root beats the Branding, and the Branding beats the theme
+ *  defaults. An inline `--pollar-*` would beat every stylesheet instead.
+ *
+ *  The palette (background, text, borders, status colors) is only written when
+ *  the app pinned it: a dark theme, or a background or text color of its own.
+ *  Left out, the light defaults in `shared.css` apply, and a host `html.dark`
+ *  swaps them for the dark ones. */
+declare function buildModalCssVars(theme: string, accentColor: string, overrides?: ModalStyleOverrides, variant?: ModalVariant): CSSProperties;
+/** Everything a modal wrapper needs to dress itself from the app's branding:
+ *  the theme pair its template already took, the overrides to forward to that
+ *  template, and the inline style for the fixed overlay behind it. */
+interface ModalChrome {
+    theme: string;
+    accentColor: string;
+    styleOverrides: ModalStyleOverrides;
+    overlayStyle: CSSProperties;
+}
+/** Resolve the branding config into the props/styles a modal wrapper applies.
+ *  Called by every `.pollar-overlay` renderer so the z-index and the card
+ *  overrides can't drift apart between modals. */
+declare function modalChrome(styles: PollarStyles): ModalChrome;
+
 interface WalletButtonTemplateProps {
     walletAddress: string | null;
+    theme: string;
     accentColor: string;
+    /** The app's Branding, as every modal template takes it. */
+    styleOverrides?: ModalStyleOverrides;
     open: boolean;
     copied: boolean;
-    dropdownBg: string;
-    dropdownBorder: string;
-    itemColor: string;
     wrapperRef: React.RefObject<HTMLDivElement>;
     isInProgress: boolean;
     /** Show the "Create account" action (external wallet not yet on-chain, IMMEDIATE funding). */
@@ -318,6 +413,13 @@ interface WalletButtonTemplateProps {
      * custom template written before this existed keeps compiling.
      */
     notReadyReason?: string | null;
+    /**
+     * The wallet has no recovery method yet and signs nothing but its own setup.
+     * Shown at the top of the menu with a way to fix it. Optional for custom templates.
+     */
+    recoveryLocked?: boolean;
+    /** Open the recovery methods; the item shows only when set. */
+    onRecovery?: () => void;
     creatingAccount: boolean;
     /**
      * Signed in with no wallet yet (an app that creates wallets on demand, or
@@ -328,7 +430,13 @@ interface WalletButtonTemplateProps {
     signedIn?: boolean;
     creatingWallet?: boolean;
     createWalletError?: string | null;
-    onCreateWallet?: () => void;
+    /**
+     * The app leaves the custody to the user (USER_CHOICE): Create wallet offers
+     * co-signed and self-custody, and calls `onCreateWallet` with the pick. A
+     * self-custody wallet is created only after the user accepts its risks.
+     */
+    custodyChoice?: boolean;
+    onCreateWallet?: (custody?: CosignCustody) => void;
     onToggleOpen: () => void;
     onCreateAccount: () => void;
     onCopy: () => void;
@@ -343,7 +451,7 @@ interface WalletButtonTemplateProps {
     onLogout: () => void;
     onLogin: () => void;
 }
-declare function WalletButtonTemplate({ walletAddress, accentColor, open, copied, dropdownBg, dropdownBorder, itemColor, wrapperRef, isInProgress, showCreateAccount, notReadyReason, creatingAccount, onToggleOpen, onCreateAccount, onCopy, onWalletBalance, onTxHistory, onSend, onReceive, onSessions, onKyc, onRamp, onDistributionRules, onLogout, onLogin, signedIn, creatingWallet, createWalletError, onCreateWallet, }: WalletButtonTemplateProps): react_jsx_runtime.JSX.Element;
+declare function WalletButtonTemplate({ walletAddress, theme, accentColor, styleOverrides, open, copied, wrapperRef, isInProgress, showCreateAccount, notReadyReason, recoveryLocked, onRecovery, creatingAccount, onToggleOpen, onCreateAccount, onCopy, onWalletBalance, onTxHistory, onSend, onReceive, onSessions, onKyc, onRamp, onDistributionRules, onLogout, onLogin, signedIn, creatingWallet, createWalletError, custodyChoice, onCreateWallet, }: WalletButtonTemplateProps): react_jsx_runtime.JSX.Element;
 
 /**
  * The chain a record lives on, with the legacy shape folded in: sessions and
@@ -418,7 +526,7 @@ interface UseCosignResult {
     reject: (request: CosignRequest) => Promise<CosignRequest>;
     /** The verification a UI can show before the user decides. */
     verify: (request: CosignRequest) => Promise<CosignVerification>;
-    /** Read the sub-organization from Turnkey with the device key and record whether it is the promised 2-of-2. */
+    /** Read the sub-organization from Turnkey with the device key and record whether it is the quorum its custody promises. */
     inspectQuorum: () => Promise<CosignQuorumReport>;
     /** The user's enrolled devices and the quorum state as sdk-api records it. */
     devices: () => Promise<CosignDevicesContent>;
@@ -426,6 +534,8 @@ interface UseCosignResult {
     revokeDevice: (deviceId: string, options?: {
         force?: boolean;
     }) => Promise<CosignDevicesContent>;
+    /** Move the wallet between co-signed and self-custody; only an app in USER_CHOICE custody allows it. */
+    switchCustody: (to: CosignCustody) => Promise<CosignQuorumReport>;
 }
 /**
  * The user's side of a Turnkey co-signed wallet, for an app that renders its
@@ -516,13 +626,43 @@ declare function RampWidget({ onClose }: RampWidgetProps): react_jsx_runtime.JSX
 
 interface RouteDisplayProps {
     quote: RampQuote;
+    /** The first quote: the most received (or least sent) for the amount. */
+    best?: boolean;
     /** This route is the one being started - it owns the in-flight request. */
     busy?: boolean;
     /** Another route is starting, so this one is not selectable meanwhile. */
     disabled?: boolean;
     onSelect: (quote: RampQuote) => void;
 }
-declare function RouteDisplay({ quote, busy, disabled, onSelect }: RouteDisplayProps): react_jsx_runtime.JSX.Element;
+declare function RouteDisplay({ quote, best, busy, disabled, onSelect }: RouteDisplayProps): react_jsx_runtime.JSX.Element;
+/**
+ * A route that was planned and dropped, and what the user can do about it: a
+ * verification step opens from its button, a missing trustline is added from its own.
+ */
+declare function RejectedRouteDisplay({ rejection, disabled, trusting, walletBusy, custodyChoice, onVerify, onTrust, onWalletStep, }: {
+    rejection: RampQuoteRejection;
+    /** A route is starting, a trustline or a wallet is being added, so nothing else opens meanwhile. */
+    disabled?: boolean;
+    /** This row's trustline is being added. */
+    trusting?: boolean;
+    /** The wallet step this route asks for is running. */
+    walletBusy?: boolean;
+    /** The app leaves the custody to the user: a wallet set up or moved here asks which. */
+    custodyChoice?: boolean;
+    /** Without it, a verification step is described but offers no button. */
+    onVerify?: ((requirement: RampQuoteRequirement) => void) | undefined;
+    /** Without it, a missing trustline is described but offers no button. */
+    onTrust?: ((asset: {
+        code: string;
+        issuer: string;
+    }) => void) | undefined;
+    /**
+     * Runs the wallet step the route asks for (`rampWalletStep`: create, set up or move
+     * the wallet), with the user's custody pick when `custodyChoice`. An app that leaves
+     * the custody to the user creates the wallet from the wallet menu instead.
+     */
+    onWalletStep?: ((step: RampWalletStep, custody?: CosignCustody) => void) | undefined;
+}): react_jsx_runtime.JSX.Element;
 
 interface WalletBalanceModalProps {
     onClose: () => void;
@@ -565,6 +705,8 @@ interface SessionsModalProps {
 declare function SessionsModal({ onClose }: SessionsModalProps): react_jsx_runtime.JSX.Element;
 
 interface CosignModalProps {
+    /** The approval a flow asks for next (`setCosignNextStep`); the prompt waits for it instead of closing. */
+    nextStep?: string | null;
     onClose: () => void;
 }
 /**
@@ -572,58 +714,24 @@ interface CosignModalProps {
  * against Turnkey before enabling Approve, so the user only ever confirms a
  * transaction the device checked itself.
  */
-declare function CosignModal({ onClose }: CosignModalProps): react_jsx_runtime.JSX.Element;
+declare function CosignModal({ nextStep, onClose }: CosignModalProps): react_jsx_runtime.JSX.Element;
 
-interface DistributionRulesModalProps {
+interface RecoveryModalProps {
     onClose: () => void;
 }
-declare function DistributionRulesModal({ onClose }: DistributionRulesModalProps): react_jsx_runtime.JSX.Element;
+/**
+ * The recovery methods of a Turnkey wallet: add and remove passkeys, confirm
+ * an email, approve another device, export the recovery phrase, and, on a
+ * device that is not part of the wallet, get back in. Until one method exists
+ * the wallet signs nothing but its own setup, so this is also where a locked
+ * wallet sends the user.
+ */
+declare function RecoveryModal({ onClose }: RecoveryModalProps): react_jsx_runtime.JSX.Element;
 
-/** Per-app overrides for the modal chrome, configured in the dashboard's
- *  Branding screen. Every field is optional: absent means "use the value the
- *  theme derives", which is what every modal rendered before these existed. */
-interface ModalStyleOverrides {
-    /** Card background. Overrides the theme's white / #1a1a1a. */
-    backgroundColor?: string | null | undefined;
-    /** Body text. Overrides the theme's #111827 / white. Secondary ("muted") text
-     *  keeps its theme color, so the two stay distinguishable. */
-    textColor?: string | null | undefined;
-    /** Fill of the SECONDARY buttons (the wallet / social / provider entries, the
-     *  retry button). The primary button is the accent's job. Unset => the theme's
-     *  own surface color, which is what these buttons always used. */
-    buttonColor?: string | null | undefined;
-    /** Radius of the modal card itself, in px. */
-    modalBorderRadius?: number | null | undefined;
-    /** Radius of the buttons inside the modal, in px. Independent of the card's. */
-    buttonBorderRadius?: number | null | undefined;
-}
-/** Text color that stays legible on `background`. The primary button's label was
- *  hardcoded white, which a light fill (the Amber accent preset, say) turns
- *  invisible - so it follows the fill's luminance instead. Unparseable colors
- *  keep white, the pre-existing behavior. */
-declare function readableTextOn(background: string): string;
-/** How much room a modal gives its header. 'hero' is the identity-forward set
- *  (login, KYC, ramp, the Privy sub-modal): roomier padding and a larger
- *  centered heading. 'compact' is every utility modal (send, balance, history,
- *  ...), which keeps the card's own 1.75rem padding. */
-type ModalVariant = 'hero' | 'compact';
-/** Theme-derived CSS custom properties shared by every Pollar modal, plus the
- *  per-app overrides on top. One definition so the whole modal family stays
- *  visually in lockstep - a var added here reaches all of them at once. */
-declare function buildModalCssVars(theme: string, accentColor: string, overrides?: ModalStyleOverrides, variant?: ModalVariant): CSSProperties;
-/** Everything a modal wrapper needs to dress itself from the app's branding:
- *  the theme pair its template already took, the overrides to forward to that
- *  template, and the inline style for the fixed overlay behind it. */
-interface ModalChrome {
-    theme: string;
-    accentColor: string;
-    styleOverrides: ModalStyleOverrides;
-    overlayStyle: CSSProperties;
+interface DistributionRulesModalProps {
+    onClose: () => void;
 }
-/** Resolve the branding config into the props/styles a modal wrapper applies.
- *  Called by every `.pollar-overlay` renderer so the z-index and the card
- *  overrides can't drift apart between modals. */
-declare function modalChrome(styles: PollarStyles): ModalChrome;
+declare function DistributionRulesModal({ onClose }: DistributionRulesModalProps): react_jsx_runtime.JSX.Element;
 
 type WalletAdapterEntry = {
     id: WalletId;
@@ -687,7 +795,12 @@ interface KycModalTemplateProps {
     reviewReason?: string | null;
     /** The vendor approved and Pollar is still recording it (`kycStatus` stays `pending`). */
     processing?: boolean;
+    /** The provider list is loading. */
     isLoading: boolean;
+    /** The option whose session is opening: it shows a spinner and every option waits on it. */
+    startingProviderId?: string | null;
+    /** The option was named for the user (a ramp's step), so it opens without showing the list. */
+    directOpen?: boolean;
     error?: string | null;
     onSelectProvider: (provider: KycProvider) => void;
     onDoneVerifying: () => void;
@@ -696,118 +809,105 @@ interface KycModalTemplateProps {
     onRefresh: () => void;
     onClose: () => void;
 }
-declare function KycModalTemplate({ theme, accentColor, styleOverrides, step, providers, selectedProvider, session, kycStatus, reviewReason, processing, isLoading, error, onSelectProvider, onDoneVerifying, onStartAgain, onRefresh, onClose, }: KycModalTemplateProps): react_jsx_runtime.JSX.Element;
+declare function KycModalTemplate({ theme, accentColor, styleOverrides, step, providers, selectedProvider, session, kycStatus, reviewReason, processing, isLoading, startingProviderId, directOpen, error, onSelectProvider, onDoneVerifying, onStartAgain, onRefresh, onClose, }: KycModalTemplateProps): react_jsx_runtime.JSX.Element;
 
 type RampStep = 'input' | 'loading_quote' | 'select_route' | 'contact' | 'status' | 'error';
-/** A field a provider declares (via the quote) that the client must collect. */
-interface RampFieldSpec {
-    key: string;
-    label: string;
-    type: 'text' | 'email' | 'tel' | 'select';
-    bankType?: 'CLABE' | 'PIX' | 'PSE' | 'ACH' | 'BREB';
-    /** For `type: 'select'` - dropdown choices (e.g. Stereum's Bolivian banks). */
-    options?: {
-        value: string;
-        label: string;
-        placeholder?: string;
-    }[];
-    /** Declared but not mandatory (Abroad's tax id). Blank must not block Continue. */
-    optional?: boolean;
-    /** Example of the expected shape, for formats a user cannot guess. */
-    placeholder?: string;
-    /**
-     * Key of a sibling `select` whose chosen option supplies the placeholder. One
-     * Pix field can then show a CPF mask, an email or a +55 number as the user
-     * switches kind, without this component knowing what a Pix key is.
-     */
-    placeholderFrom?: string;
-    /** Secondary line under the field, for a rule the label has no room for. */
-    hint?: string;
-}
 interface RampWidgetTemplateProps {
     theme: string;
     accentColor: string;
     /** Per-app modal chrome overrides (background, card + button radius). */
     styleOverrides?: ModalStyleOverrides;
+    network: StellarNetwork;
     step: RampStep;
-    /** Labels of the steps this run goes through. Length varies by route: only
-     *  providers that collect fields add a 'Details' step. */
+    /** Labels of the steps this run goes through: 'Details' only when the route asks for fields. */
     flowSteps: string[];
-    /** Index into `flowSteps`, or -1 when the current step is outside the flow
-     *  (the error step) and the progress bar should be hidden. */
+    /** Index into `flowSteps`, or -1 outside the flow (the error step). */
     flowStepIndex: number;
-    /** Quote whose start request is in flight, so its row can show it. */
-    startingQuoteId: string | null;
     direction: RampDirection;
-    amount: string;
-    currency: string;
+    routesLoading: boolean;
+    countries: Array<{
+        country: string;
+        fiats: RampFiat[];
+    }>;
     country: string;
-    requiredFields: RampFieldSpec[];
-    fieldValues: Record<string, string>;
-    countries: RampCountry[];
-    countriesLoading: boolean;
-    refreshing: boolean;
+    fiats: RampFiat[];
+    fiat: RampFiat | null;
+    assets: RampAsset[];
+    asset: RampAsset | null;
+    amount: string;
+    /** What the wallet can spend of the asset being sold, as `useWalletAvailable` reads it; undefined hides it. */
+    sellAvailable?: string | null | undefined;
     quotes: RampQuote[];
-    /** Routes not quoted until the user completes the requirement step their corridor names (KYC, form, registry check or provider registration). */
-    kycRequired: RampQuoteRequirement[];
+    rejected: RampQuoteRejection[];
+    /** Quote whose order request is in flight, so its row can show it. */
+    startingQuoteId: string | null;
+    fields: RampField[];
+    fieldValues: Record<string, string>;
+    order: RampOrder | null;
+    /** Orders waiting on the user, to resume. */
+    pendingOrders: RampOrder[];
     isLoading: boolean;
-    provider: string;
-    txStatus: RampTxStatus | null;
-    kycUrl: string | null;
-    tosUrl: string | null;
-    /** Provider gated the flow on KYC and published no link; nothing was signed. */
-    kycBlocking: boolean;
-    /**
-     * Which part of provider onboarding is outstanding, when any is. Optional
-     * because this template is exported for integrators who render their own
-     * chrome: a required prop would break every one of them on upgrade. Omitted,
-     * the gate falls back to the identity-verification wording.
-     */
-    onboardingStatus?: 'kyc' | 'endorsement' | 'awaiting_provider' | null;
-    /** The gate has since cleared - the user needs a fresh quote to continue. */
-    kycJustApproved: boolean;
-    /** Superseded by `txHash`, which carries the settlement on any chain; read when `txHash` is absent. */
-    stellarTxHash: string | null;
-    /** The on-chain transaction that settled the ramp, on `txChain`. */
-    txHash?: string | null;
-    /** Chain of `txHash`; Stellar when omitted. */
-    txChain?: 'STELLAR' | 'POLYGON' | 'SOLANA' | null;
-    /** Explorer URL for the transaction (chain- and network-aware); null when unknown. */
-    explorerUrl: string | null;
+    refreshing: boolean;
+    signing: boolean;
+    errorMsg: string | null;
+    /** Progress the route waits on that is not a failure, shown with a spinner (an account the user approves on the device). */
+    notice?: string | null;
+    onDirectionChange: (direction: RampDirection) => void;
+    onCountryChange: (country: string) => void;
+    onFiatChange: (key: string) => void;
+    onAssetChange: (key: string) => void;
+    onAmountChange: (value: string) => void;
+    onFindRoute: () => void;
+    onSelectQuote: (quote: RampQuote) => void;
+    /** Opens the verification step a dropped route waits on. */
+    onVerifyRoute?: (requirement: RampQuoteRequirement) => void;
+    /** The Stellar asset whose trustline is being added, as `code:issuer`; null when none is. */
+    trustingAsset?: string | null;
+    /** Adds the trustline a dropped route needs, then quotes again. */
+    onTrustAsset?: (asset: {
+        code: string;
+        issuer: string;
+    }) => void;
+    /** The dropped route (its index in `rejected`) whose wallet step is running; null when none is. */
+    walletBusy?: number | null;
+    /** The app leaves the custody to the user: a wallet set up or moved from a row asks which. */
+    custodyChoice?: boolean;
     /**
-     * The user's money is in one of their wallets between two steps of the route.
-     * Optional for integrators rendering their own chrome; omitted, the state is
-     * not shown.
+     * Runs the wallet step a dropped route asks for (create, set up or move the wallet),
+     * then quotes again; absent, the row only says what the user needs.
      */
-    fundsInTransit?: boolean;
-    /** A retry of the pending step is in flight. */
+    onWalletStep?: ((step: RampWalletStep, index: number, custody?: CosignCustody) => void) | undefined;
+    /** The app serves no chain, so it has nothing to buy or sell. */
+    noChains?: boolean;
+    /** A held order the user resolves is being run again. */
     retrying?: boolean;
-    onRetryTransit?: () => void;
-    depositInstructions: RampDepositInstructions | null;
-    canComplete: boolean;
-    completing: boolean;
-    errorMsg: string | null;
-    /** Neutral guidance on the route list, e.g. after identity verification sent the user back to it. */
-    noticeMsg?: string | null;
-    onDirectionChange: (d: RampDirection) => void;
-    onAmountChange: (v: string) => void;
+    /** Runs the user's held order again; absent, a held order only says what happened. */
+    onRetryOrder?: (() => void) | undefined;
+    /** Opens the wallet's recovery setup, for an order held until the wallet has a way to be recovered. */
+    onSetUpRecovery?: (() => void) | undefined;
+    /** Whether the wallet still has no way to be recovered; null while its state is unread. */
+    recoveryMissing?: boolean | null;
+    /** Reading the order keeps failing and polling is retrying. */
+    pollTrouble?: boolean;
+    /** The fiat payment the user says they made is being checked. */
+    checkingPayment?: boolean;
+    /** Checks the fiat payment now; absent, the order only updates at its usual pace. */
+    onCheckPayment?: (() => void) | undefined;
     onFieldChange: (key: string, value: string) => void;
-    onCountryChange: (v: string) => void;
-    onFindRoute: () => void;
-    onSelectQuote: (q: RampQuote) => void;
-    onVerifyRoute: (requirement: RampQuoteRequirement) => void;
     onContactContinue: () => void;
-    onOpenKyc: () => void;
-    onOpenTos: () => void;
-    onCompleteWithdraw: () => void;
-    /** Step back to the amount, keeping what was entered. Distinct from `onRetry`
-     *  (which restarts a failed flow) so a "Back" button reads as navigation. */
+    onSign: () => void;
+    onApprove: () => void;
+    onResumeOrder: (id: string) => void;
+    onNewOrder: () => void;
+    /** Step back, keeping what was entered. */
     onBack: () => void;
+    /** Returns to an earlier step of `flowSteps`, keeping what was entered; absent, the step bar only shows progress. */
+    onStepSelect?: ((label: string) => void) | undefined;
     onRetry: () => void;
     onRefresh: () => void;
     onClose: () => void;
 }
-declare function RampWidgetTemplate({ theme, accentColor, styleOverrides, step, flowSteps, flowStepIndex, startingQuoteId, direction, amount, currency, country, requiredFields, fieldValues, countries, countriesLoading, refreshing, quotes, kycRequired, isLoading, provider, txStatus, kycUrl, tosUrl, kycBlocking, onboardingStatus, kycJustApproved, stellarTxHash, txHash, txChain, explorerUrl, fundsInTransit, retrying, onRetryTransit, depositInstructions, canComplete, completing, errorMsg, noticeMsg, onDirectionChange, onAmountChange, onFieldChange, onCountryChange, onFindRoute, onSelectQuote, onVerifyRoute, onContactContinue, onOpenKyc, onOpenTos, onCompleteWithdraw, onBack, onRetry, onRefresh, onClose, }: RampWidgetTemplateProps): react_jsx_runtime.JSX.Element;
+declare function RampWidgetTemplate({ theme, accentColor, styleOverrides, network, step, flowSteps, flowStepIndex, direction, routesLoading, countries, country, fiats, fiat, assets, asset, amount, sellAvailable, quotes, rejected, startingQuoteId, fields, fieldValues, order, pendingOrders, isLoading, refreshing, signing, errorMsg, notice, onDirectionChange, onCountryChange, onFiatChange, onAssetChange, onAmountChange, onFindRoute, onSelectQuote, onVerifyRoute, trustingAsset, onTrustAsset, walletBusy, custodyChoice, onWalletStep, noChains, retrying, onRetryOrder, onSetUpRecovery, recoveryMissing, checkingPayment, onCheckPayment, pollTrouble, onFieldChange, onContactContinue, onSign, onApprove, onResumeOrder, onNewOrder, onBack, onStepSelect, onRetry, onRefresh, onClose, }: RampWidgetTemplateProps): react_jsx_runtime.JSX.Element;
 
 interface TransactionModalTemplateProps {
     theme: string;
@@ -929,7 +1029,12 @@ interface SendModalTemplateProps {
     accentColor: string;
     /** Per-app modal chrome overrides (background, card + button radius). */
     styleOverrides?: ModalStyleOverrides;
-    step: 'form' | 'tx';
+    /**
+     * `create-account`: the Stellar destination has no account yet, so the user
+     * chooses between creating it with the XLM being sent and waiting for someone
+     * else to fund it.
+     */
+    step: 'form' | 'create-account' | 'tx';
     txTitle: string;
     assets: WalletBalanceRecord[];
     selectedAsset: WalletBalanceRecord | null;
@@ -959,6 +1064,12 @@ interface SendModalTemplateProps {
     destination: string;
     formError: string;
     isLoadingBalance: boolean;
+    /** The destination's account is being looked up; the form waits for it. */
+    isCheckingDestination?: boolean;
+    /** The least XLM a new Stellar account can start with. */
+    minStartingBalance?: number;
+    /** Builds a `create_account` for the destination, funded with the amount. Required for the `create-account` step. */
+    onCreateAccount?: () => void;
     transaction: TransactionState;
     showXdr: boolean;
     copied: boolean;
@@ -990,7 +1101,7 @@ interface SendModalTemplateProps {
     onRetry: () => void;
     onDone: () => void;
 }
-declare function SendModalTemplate({ theme, accentColor, styleOverrides, step, txTitle, assets, selectedAsset, selectedChain, canSendOnChain, notReadyReason, chains, onSelectChain, amount, destination, formError, isLoadingBalance, transaction, showXdr, copied, explorerUrl, walletType, showBack, isInProgress, onClose, onBack, onRefresh, onSelectAsset, onAmountChange, onMax, onPaste, onDestinationChange, memo, memoType, onMemoChange, onMemoTypeChange, onSubmit, onSignAndSend, onToggleXdr, onCopyHash, onRetry, onDone, }: SendModalTemplateProps): react_jsx_runtime.JSX.Element;
+declare function SendModalTemplate({ theme, accentColor, styleOverrides, step, txTitle, assets, selectedAsset, selectedChain, canSendOnChain, notReadyReason, chains, onSelectChain, amount, destination, formError, isLoadingBalance, isCheckingDestination, minStartingBalance, onCreateAccount, transaction, showXdr, copied, explorerUrl, walletType, showBack, isInProgress, onClose, onBack, onRefresh, onSelectAsset, onAmountChange, onMax, onPaste, onDestinationChange, memo, memoType, onMemoChange, onMemoTypeChange, onSubmit, onSignAndSend, onToggleXdr, onCopyHash, onRetry, onDone, }: SendModalTemplateProps): react_jsx_runtime.JSX.Element;
 
 interface SwapAssetOption {
     ref: SwapQuoteParams['sellAsset'];
@@ -1070,10 +1181,17 @@ interface ReceiveModalTemplateProps {
      * custom template written before this existed keeps compiling.
      */
     notReadyReason?: string | null;
+    /**
+     * The wallet has no way to be recovered without this device yet. The address
+     * stays hidden until the user adds one, so nobody is handed an address whose
+     * funds a lost phone would take with it. Optional for custom templates.
+     */
+    recoveryLocked?: boolean;
+    onSetupRecovery?: () => void;
     onCopy: () => void;
     onClose: () => void;
 }
-declare function ReceiveModalTemplate({ theme, accentColor, styleOverrides, walletAddress, chains, selectedChain, onSelectChain, copied, notReadyReason, onCopy, onClose, }: ReceiveModalTemplateProps): react_jsx_runtime.JSX.Element;
+declare function ReceiveModalTemplate({ theme, accentColor, styleOverrides, walletAddress, chains, selectedChain, onSelectChain, copied, notReadyReason, recoveryLocked, onSetupRecovery, onCopy, onClose, }: ReceiveModalTemplateProps): react_jsx_runtime.JSX.Element;
 
 interface SessionsModalTemplateProps {
     theme: string;
@@ -1110,12 +1228,88 @@ interface CosignModalTemplateProps {
     lastResolved?: CosignRequest;
     /** Explorer page of {@link lastResolved}'s transaction, when it was sent. */
     explorerUrl?: string | null;
+    /** Seconds until the modal closes on its own, while what it shows needs nothing from the user. */
+    closesIn?: number | null;
+    /** The approval coming next in the same flow, shown while the modal waits for it. */
+    nextStep?: string | null;
     onSelect: (request: CosignRequest) => void;
     onApprove: (request: CosignRequest) => void;
     onReject: (request: CosignRequest) => void;
     onClose: () => void;
 }
-declare function CosignModalTemplate({ theme, accentColor, styleOverrides, pending, current, verification, busy, error, approveBlocked, lastResolved, explorerUrl, onSelect, onApprove, onReject, onClose, }: CosignModalTemplateProps): react_jsx_runtime.JSX.Element;
+declare function CosignModalTemplate({ theme, accentColor, styleOverrides, pending, current, verification, busy, error, approveBlocked, lastResolved, explorerUrl, closesIn, nextStep, onSelect, onApprove, onReject, onClose, }: CosignModalTemplateProps): react_jsx_runtime.JSX.Element;
+
+interface CustodyMigrationModalProps {
+    state: CustodyMigrationState;
+    /** The wallets moved: the provider reads their state again and asks for a recovery method. */
+    onMoved: () => void;
+    /** A blocked wallet waits for what is pending; the provider stops asking until the next session. */
+    onLater: () => void;
+}
+declare function CustodyMigrationModal({ state, onMoved, onLater }: CustodyMigrationModalProps): react_jsx_runtime.JSX.Element;
+
+interface CustodyMigrationModalTemplateProps {
+    theme: string;
+    accentColor: string;
+    styleOverrides?: ModalStyleOverrides;
+    state: CustodyMigrationState;
+    busy: boolean;
+    error: string | null;
+    /** What still points at a wallet that cannot move yet (an open ramp order, a transaction in flight). */
+    blockedReasons: string[] | null;
+    onMove: (custody?: CosignCustody) => void;
+    /** Only offered while a wallet is blocked: the move waits for what is pending. */
+    onLater: () => void;
+    onLogout: () => void;
+}
+/**
+ * The move of the wallets Pollar custodies to ones the user's device signs for.
+ * It cannot be put off: the app's wallets live in Turnkey now, so the only ways
+ * out are moving or logging out, unless something still pending holds a
+ * wallet back.
+ */
+declare function CustodyMigrationModalTemplate(p: CustodyMigrationModalTemplateProps): react_jsx_runtime.JSX.Element;
+
+type RecoveryView = 'overview' | 'email' | 'export' | 'recover-email';
+interface RecoveryModalTemplateProps {
+    theme: string;
+    accentColor: string;
+    styleOverrides?: ModalStyleOverrides;
+    /** Null while the first read is in flight. */
+    state: RecoveryState | null;
+    devices: CosignDevicesContent | null;
+    thisDeviceKey: string | null;
+    /** Whether this device's key is one of the wallet's credentials. */
+    thisDeviceEnrolled: boolean;
+    /** Whether the runtime can run passkey ceremonies here. */
+    passkeyAvailable: boolean;
+    /** A self-custody wallet of an app that never asked the user to accept its risks. */
+    selfCustodyRisks: boolean;
+    view: RecoveryView;
+    /** The action in flight, by key, for its button's spinner. */
+    busy: string | null;
+    error: string | null;
+    notice: string | null;
+    emailDraft: string;
+    codeSent: boolean;
+    /** The recovery phrase, once exported. */
+    phrase: string | null;
+    onView: (view: RecoveryView) => void;
+    onEmailDraft: (email: string) => void;
+    onAddPasskey: () => void;
+    onRemovePasskey: (authenticatorId: string) => void;
+    onSendEmailCode: () => void;
+    onConfirmEmail: (code: string) => void;
+    onApproveDevice: (enrollmentId: string) => void;
+    onRejectDevice: (enrollmentId: string) => void;
+    onRequestEnrollment: () => void;
+    onRecoverWithPasskey: () => void;
+    onSendRecoveryCode: () => void;
+    onRecoverWithCode: (code: string) => void;
+    onExport: () => void;
+    onClose: () => void;
+}
+declare function RecoveryModalTemplate(p: RecoveryModalTemplateProps): react_jsx_runtime.JSX.Element;
 
 interface DistributionRulesModalTemplateProps {
     theme: string;
@@ -1132,4 +1326,4 @@ interface DistributionRulesModalTemplateProps {
 }
 declare function DistributionRulesModalTemplate({ theme, accentColor, styleOverrides, state, claimingId, claimErrors, claimedIds, onRefresh, onClaim, onClose, }: DistributionRulesModalTemplateProps): react_jsx_runtime.JSX.Element;
 
-export { type AuthModalProps, CardModal, ChainSelect, type ChainSelectProps, CosignModal, CosignModalTemplate, type CosignModalTemplateProps, type CustomTrustlineModalTemplateProps, DistributionRulesModal, DistributionRulesModalTemplate, EarnModal, EnabledAssetsModal, EnabledAssetsModalTemplate, type EnabledAssetsModalTemplateProps, KycModal, KycModalTemplate, KycStatus, type KycStep, type LoginButtonProps, LoginModalTemplate, type ModalChrome, type ModalStyleOverrides, type ModalVariant, type PollarConfig, PollarProvider, type PollarStyles, ProviderRegistrationModal, type RampStep, RampWidget, RampWidgetTemplate, ReceiveModal, ReceiveModalTemplate, type ReceiveModalTemplateProps, RegistryCheckModal, RequirementFormModal, RouteDisplay, type SendMemoType, SendModal, SendModalTemplate, type SendModalTemplateProps, SessionsModal, SessionsModalTemplate, type SessionsModalTemplateProps, type SwapAssetOption, SwapModal, SwapModalTemplate, type SwapModalTemplateProps, TransactionModalTemplate, type TransactionModalTemplateProps, TxHistoryModalTemplate, TxStatusView, type TxStatusViewProps, type UseChainsResult, type UseCosignResult, WalletBalanceModal, WalletBalanceModalTemplate, type WalletBalanceModalTemplateProps, WalletButton, WalletButtonTemplate, type WalletButtonTemplateProps, addressForChain, browserPasskeyCeremony, browserPasskeySigner, buildModalCssVars, chainsOf, createPollarAdapterHook, modalChrome, readableTextOn, resolveChain, useChains, useCosign, usePollar, walletNotReadyReason };
+export { type AuthModalProps, CardModal, ChainSelect, type ChainSelectProps, CosignModal, CosignModalTemplate, type CosignModalTemplateProps, CustodyMigrationModal, CustodyMigrationModalTemplate, type CustodyMigrationModalTemplateProps, type CustomTrustlineModalTemplateProps, DistributionRulesModal, DistributionRulesModalTemplate, EarnModal, EnabledAssetsModal, EnabledAssetsModalTemplate, type EnabledAssetsModalTemplateProps, KycModal, KycModalTemplate, KycStatus, type KycStep, type LoginButtonProps, LoginModalTemplate, type ModalChrome, type ModalStyleOverrides, type ModalVariant, type PollarConfig, PollarProvider, type PollarStyles, ProviderRegistrationModal, type RampStep, RampWidget, RampWidgetTemplate, ReceiveModal, ReceiveModalTemplate, type ReceiveModalTemplateProps, RecoveryModal, RecoveryModalTemplate, type RecoveryModalTemplateProps, type RecoveryView, RegistryCheckModal, RejectedRouteDisplay, RequirementFormModal, RouteDisplay, type SendMemoType, SendModal, SendModalTemplate, type SendModalTemplateProps, SessionsModal, SessionsModalTemplate, type SessionsModalTemplateProps, type SwapAssetOption, SwapModal, SwapModalTemplate, type SwapModalTemplateProps, TransactionModalTemplate, type TransactionModalTemplateProps, TxHistoryModalTemplate, TxStatusView, type TxStatusViewProps, type UseChainsResult, type UseCosignResult, WalletBalanceModal, WalletBalanceModalTemplate, type WalletBalanceModalTemplateProps, WalletButton, WalletButtonTemplate, type WalletButtonTemplateProps, addressForChain, browserPasskeyCeremony, browserPasskeySigner, browserRecoveryPasskey, buildModalCssVars, chainsOf, createPollarAdapterHook, modalChrome, readableTextOn, resolveChain, useChains, useCosign, usePollar, walletNotReadyReason };