@seams/voiceid 0.0.0-stage → 0.25.0

package/dist/types/capture/unlockFrame.d.ts

@@ -0,0 +1,13 @@
+import type { VoicePrompt } from './prompt';
+export declare class VoiceUnlockFrame {
+    private readonly prompt;
+    private readonly footer;
+    constructor(element: HTMLElement, prompt: VoicePrompt);
+    /** After an unlock the back control cannot act, so it fades and the success centers under the origin. */
+    succeed(): Readonly<{
+        top: number;
+        bottom: number;
+    }>;
+    dispose(): void;
+}
+//# sourceMappingURL=unlockFrame.d.ts.map

package/dist/types/capture/visual.d.ts

@@ -0,0 +1,24 @@
+import type { VoiceActivityEvent } from '../browser/microphone';
+import { type VoiceCheckingStyle } from '../browser/ribbon';
+/** Shared by enrollment, unlock and signing. The recorder remains the only audio owner. */
+export declare class VoiceVisual {
+    readonly element: SVGSVGElement;
+    readonly glow: HTMLDivElement;
+    private readonly ribbon;
+    private readonly prompt;
+    private readonly themeObserver;
+    private phase;
+    private disposed;
+    constructor(document: Document, prompt: HTMLElement, checking: VoiceCheckingStyle);
+    listen(): void;
+    add(event: VoiceActivityEvent): void;
+    checking(): void;
+    accept(): void;
+    ready(): void;
+    /** The glow settles while the ribbon closes into the success seal; resolves when the check is drawn. */
+    succeed(begin: () => void): Promise<void>;
+    stop(): void;
+    private setPhase;
+    private readonly render;
+}
+//# sourceMappingURL=visual.d.ts.map

package/dist/types/descriptor.d.ts

@@ -0,0 +1,4 @@
+import type { VoiceIdAuthMethodPlugin } from '@seams/wallet/voiceid-host';
+/** A small opt-in descriptor with no capture, model, or host implementation. */
+export declare function voiceIdAuthMethod(): VoiceIdAuthMethodPlugin;
+//# sourceMappingURL=descriptor.d.ts.map

package/dist/types/host.d.ts

@@ -0,0 +1,4 @@
+import type { WalletAuthMethodHostPlugin } from '@seams/wallet/voiceid-host';
+export declare const hostApiVersion = 1;
+export declare const voiceIdHostPlugin: WalletAuthMethodHostPlugin;
+//# sourceMappingURL=host.d.ts.map

package/dist/types/index.d.ts

@@ -0,0 +1,2 @@
+export { voiceIdAuthMethod } from './descriptor';
+//# sourceMappingURL=index.d.ts.map

package/dist/types/react/VoiceAssistantCard.d.ts

@@ -0,0 +1,37 @@
+import React from 'react';
+import { type VoiceBeamLevel } from 'voice-glow';
+export type VoiceAssistantInput = {
+    readonly kind: 'level';
+    /** 0–1, or a getter sampled by the glow without React renders. */
+    readonly level: VoiceBeamLevel;
+    readonly stream?: never;
+} | {
+    readonly kind: 'microphone';
+    readonly stream: MediaStream;
+    readonly level?: never;
+};
+export type VoiceAssistantState = {
+    readonly kind: 'idle';
+    readonly input?: never;
+} | {
+    readonly kind: 'listening';
+    readonly input: VoiceAssistantInput;
+} | {
+    readonly kind: 'processing';
+    readonly input?: never;
+};
+export type VoiceAssistantCardProps = {
+    readonly name: string;
+    readonly initials: string;
+    readonly description: string;
+    readonly message: string;
+    readonly transcript: React.ReactNode;
+    readonly state: VoiceAssistantState;
+    readonly theme: 'dark' | 'light';
+    readonly onToggle: () => void;
+    readonly className?: string;
+    readonly style?: React.CSSProperties;
+};
+/** Controlled presentation. The caller owns audio, transcripts, and work. */
+export declare function VoiceAssistantCard(props: VoiceAssistantCardProps): React.ReactNode;
+//# sourceMappingURL=VoiceAssistantCard.d.ts.map

package/dist/types/react.d.ts

@@ -0,0 +1,5 @@
+export { VoiceBeam } from 'voice-glow';
+export type { VoiceBeamLevel, VoiceBeamProps } from 'voice-glow';
+export { VoiceAssistantCard } from './react/VoiceAssistantCard';
+export type { VoiceAssistantCardProps, VoiceAssistantInput, VoiceAssistantState, } from './react/VoiceAssistantCard';
+//# sourceMappingURL=react.d.ts.map

package/dist/types/session/activation.d.ts

@@ -0,0 +1,61 @@
+import type { VoiceCaptureObserver } from '../browser/microphone';
+import type { SpokenPhrase } from '../browser/phrase';
+import { type VoiceIdSeedEnvelope } from '@seams/wallet/voiceid-host';
+import { type DigestB64u } from '@seams/wallet/voiceid-host';
+import type { WalletSessionOperationCredentialV1 } from '@seams/wallet/voiceid-host';
+import { type PasskeyEnvelopeId, type WalletAuthMethodId, type WalletId } from '@seams/wallet/voiceid-host';
+import { type VoiceIdDevicePublicKeyB64u } from '@seams/wallet/voiceid-host';
+import type { ActiveVoiceIdWalletAuthMethodRecordV2 } from '@seams/wallet/voiceid-host';
+import type { UnlockedWalletEd25519ExportRootCapabilityV1 } from '@seams/wallet/voiceid-host';
+import { captureVoiceIdActivation } from '../capture/deviceBridge';
+import type { VoiceIdHttpClient } from './httpClient';
+export type PendingVoiceIdActivation = Readonly<{
+    kind: 'pending_voiceid_activation_v1';
+    walletId: WalletId;
+    walletAuthMethodId: WalletAuthMethodId;
+    devicePublicKeyB64u: VoiceIdDevicePublicKeyB64u;
+    deviceKeyId: DigestB64u;
+    custodyEnvelope: VoiceIdSeedEnvelope;
+}>;
+export declare function parsePendingVoiceIdActivation(raw: unknown): Promise<PendingVoiceIdActivation>;
+type NewVoiceIdActivation = Readonly<{
+    kind: 'new';
+    walletId: WalletId;
+    walletAuthMethodId: WalletAuthMethodId;
+    envelopeId: PasskeyEnvelopeId;
+    capability: UnlockedWalletEd25519ExportRootCapabilityV1;
+    reseal: VoiceIdSeedResealPort;
+    pending?: never;
+}>;
+type ResumeVoiceIdActivation = Readonly<{
+    kind: 'resume';
+    pending: PendingVoiceIdActivation;
+    walletId?: never;
+    walletAuthMethodId?: never;
+    envelopeId?: never;
+    capability?: never;
+    reseal?: never;
+}>;
+export type VoiceIdSeedResealPort = (input: {
+    readonly capability: UnlockedWalletEd25519ExportRootCapabilityV1;
+    readonly bindingJson: string;
+    readonly factorSecret: ArrayBuffer;
+}) => Promise<unknown>;
+export type VoiceIdActivationPlan = NewVoiceIdActivation | ResumeVoiceIdActivation;
+export type VoiceIdActivationOutcome = Readonly<{
+    authMethod: ActiveVoiceIdWalletAuthMethodRecordV2;
+    pending: PendingVoiceIdActivation;
+}>;
+export declare function activateVoiceIdForUnlockedWallet(input: {
+    readonly plan: VoiceIdActivationPlan;
+    readonly ownerCredential: WalletSessionOperationCredentialV1;
+    readonly http: Pick<VoiceIdHttpClient, 'activate'>;
+    readonly signal: AbortSignal;
+    readonly onCapture: VoiceCaptureObserver;
+    readonly phrase: SpokenPhrase;
+    readonly capture: typeof captureVoiceIdActivation;
+    readonly persistPending: (pending: PendingVoiceIdActivation) => Promise<void>;
+    readonly persistActive: (authMethod: ActiveVoiceIdWalletAuthMethodRecordV2, pending: PendingVoiceIdActivation) => Promise<void>;
+}): Promise<VoiceIdActivationOutcome>;
+export {};
+//# sourceMappingURL=activation.d.ts.map

package/dist/types/session/activationStore.d.ts

@@ -0,0 +1,21 @@
+import { type ActiveVoiceIdWalletAuthMethodRecordV2 } from '@seams/wallet/voiceid-host';
+import type { WalletAuthMethodId, WalletId } from '@seams/wallet/voiceid-host';
+import { type PendingVoiceIdActivation } from './activation';
+export type VoiceIdActivationStoragePort = {
+    getAppState(key: string): Promise<unknown | undefined>;
+    setAppState(key: string, value: unknown): Promise<void>;
+    listAppStateEntriesByPrefix(prefix: string): Promise<ReadonlyArray<{
+        key: string;
+        value: unknown;
+    }>>;
+    upsertWalletAuthMethodV2(record: ActiveVoiceIdWalletAuthMethodRecordV2): Promise<void>;
+};
+export declare class VoiceIdActivationStore {
+    private readonly storage;
+    constructor(storage: VoiceIdActivationStoragePort);
+    persistPending(pending: PendingVoiceIdActivation): Promise<void>;
+    persistActive(authMethod: ActiveVoiceIdWalletAuthMethodRecordV2, pending: PendingVoiceIdActivation): Promise<void>;
+    readPending(walletId: WalletId, walletAuthMethodId: WalletAuthMethodId): Promise<PendingVoiceIdActivation | null>;
+    listPending(walletId: WalletId): Promise<readonly PendingVoiceIdActivation[]>;
+}
+//# sourceMappingURL=activationStore.d.ts.map

package/dist/types/session/httpClient.d.ts

@@ -0,0 +1,39 @@
+import { type VoiceIdDeviceAssertion, type VoiceIdDevicePublicKeyB64u, type VoiceIdWalletSessionChallenge } from '@seams/wallet/voiceid-host';
+import { type VoiceIdSeedEnvelope } from '@seams/wallet/voiceid-host';
+import type { ActiveWalletSessionV1, WalletSessionOperationCredentialV1 } from '@seams/wallet/voiceid-host';
+import type { DigestB64u } from '@seams/wallet/voiceid-host';
+import type { WalletAuthMethodId, WalletId } from '@seams/wallet/voiceid-host';
+import { type ActiveVoiceIdWalletAuthMethodRecordV2 } from '@seams/wallet/voiceid-host';
+import type { AuthMethodNearInstallation } from '@seams/wallet/voiceid-host';
+export type VoiceIdHttpSend = (request: Request) => Promise<Response>;
+export type VoiceIdVerifiedSession = Readonly<{
+    near: AuthMethodNearInstallation;
+    walletSession: ActiveWalletSessionV1;
+    operationCredential: WalletSessionOperationCredentialV1;
+    custodyEnvelope: VoiceIdSeedEnvelope;
+}>;
+export declare class VoiceIdHttpClient {
+    private readonly relayerUrl;
+    private readonly send;
+    private readonly walletOrigin;
+    constructor(relayerUrl: string, walletOrigin: string, send: VoiceIdHttpSend);
+    activate(input: {
+        readonly ownerCredential: WalletSessionOperationCredentialV1;
+        readonly walletId: WalletId;
+        readonly walletAuthMethodId: WalletAuthMethodId;
+        readonly devicePublicKeyB64u: VoiceIdDevicePublicKeyB64u;
+        readonly deviceKeyId: DigestB64u;
+        readonly custodyEnvelope: VoiceIdSeedEnvelope;
+        readonly signal: AbortSignal;
+    }): Promise<ActiveVoiceIdWalletAuthMethodRecordV2>;
+    challenge(input: {
+        readonly walletId: WalletId;
+        readonly walletAuthMethodId: WalletAuthMethodId;
+        readonly signal: AbortSignal;
+    }): Promise<VoiceIdWalletSessionChallenge>;
+    verify(input: {
+        readonly assertion: VoiceIdDeviceAssertion;
+        readonly signal: AbortSignal;
+    }): Promise<VoiceIdVerifiedSession>;
+}
+//# sourceMappingURL=httpClient.d.ts.map

package/dist/types/session/unlock.d.ts

@@ -0,0 +1,4 @@
+import type { AuthMethodUnlockSuccess, WalletAuthMethodHostPlugin } from '@seams/wallet/voiceid-host';
+import type { PreparedVoiceCapture } from '../capture/surface';
+export declare function prepareUnlockSurface(input: Parameters<WalletAuthMethodHostPlugin['unlock']>[0], signal: AbortSignal, parent: HTMLElement): Promise<PreparedVoiceCapture<AuthMethodUnlockSuccess>>;
+//# sourceMappingURL=unlock.d.ts.map

package/dist/types/session/unlockFromDevice.d.ts

@@ -0,0 +1,18 @@
+import type { VoiceCaptureObserver } from '../browser/microphone';
+import type { SpokenPhrase } from '../browser/phrase';
+import type { VoiceIdWalletSessionChallenge } from '@seams/wallet/voiceid-host';
+import type { ActiveVoiceIdWalletAuthMethodRecordV2 } from '@seams/wallet/voiceid-host';
+import { captureVoiceIdUnlock } from '../capture/deviceBridge';
+import type { VoiceIdHttpClient, VoiceIdVerifiedSession } from './httpClient';
+/** The installer must finish custody activation before the caller reports unlock. */
+export declare function verifyVoiceIdChallengeWithDevice<T>(input: {
+    readonly authMethod: ActiveVoiceIdWalletAuthMethodRecordV2;
+    readonly challenge: VoiceIdWalletSessionChallenge;
+    readonly http: Pick<VoiceIdHttpClient, 'verify'>;
+    readonly capture: typeof captureVoiceIdUnlock;
+    readonly install: (verified: VoiceIdVerifiedSession, factorSecret32: Uint8Array) => Promise<T>;
+    readonly signal: AbortSignal;
+    readonly onCapture: VoiceCaptureObserver;
+    readonly phrase: SpokenPhrase;
+}): Promise<T>;
+//# sourceMappingURL=unlockFromDevice.d.ts.map

package/package.json

@@ -1,6 +1,68 @@
 {
   "name": "@seams/voiceid",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.25.0",
+  "type": "module",
+  "description": "Optional browser VoiceID authentication for Seams Wallet",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/seams-tech/seams-wallet.git"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/types/index.d.ts",
+      "import": "./dist/esm/index.js"
+    },
+    "./react": {
+      "types": "./dist/types/react.d.ts",
+      "import": "./dist/esm/react.js"
+    },
+    "./hosting": {
+      "types": "./dist/hosting.d.mts",
+      "import": "./dist/hosting.mjs"
+    },
+    "./package.json": "./package.json",
+    "./styles": "./dist/esm/react/VoiceAssistantCard.css"
+  },
+  "files": [
+    "dist/",
+    "README.md",
+    "LICENSE.md",
+    "THIRD_PARTY_NOTICES.md",
+    "!dist/**/*.map",
+    "src/README.md"
+  ],
+  "sideEffects": [
+    "**/*.css"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "node scripts/build.mjs && tsrs -p tsconfig.build.json",
+    "type-check": "tsrs --noEmit",
+    "prepack": "node ../../scripts/package-license.mjs stage",
+    "postpack": "node ../../scripts/package-license.mjs clean"
+  },
+  "dependencies": {
+    "onnxruntime-web": "1.30.0",
+    "preact": "10.29.8",
+    "voice-glow": "0.2.1"
+  },
+  "peerDependencies": {
+    "@seams/wallet": "0.25.0",
+    "react": "^18.0.0 || ^19.0.0"
+  },
+  "peerDependenciesMeta": {
+    "react": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@seams/wallet": "workspace:*",
+    "rolldown": "^1.0.0-beta.27"
+  },
+  "bin": {
+    "seams-voiceid-host": "dist/compose-host.mjs"
+  }
+}

package/src/README.md

@@ -0,0 +1,280 @@
+# Browser VoiceID plugin
+
+Enable with `authMethods: [voiceIdAuthMethod()]`. The descriptor is small and
+loads no model code. Import it from `@seams/voiceid`. The operator deploys this
+package's assets alongside a matching Wallet host. The trusted Wallet registry
+loads `/sdk/voiceid/host.js` on first use and checks the host API version.
+The plugin owns browser microphone capture, three-sample enrollment, ReDimNet B1
+speaker matching, AuroraASR phrase recognition, WebCrypto device credentials, and the existing server proof
+exchange. SDK core owns custody installation, quotas, and NEAR/ECDSA MPC signing.
+
+Availability and selection are separate. Configuring the descriptor does not apply
+voice approval to passkey or Email OTP signing. The Wallet selects policy from the
+requested wallet's trusted authority selection. Enrolling VoiceID does not change
+the current owner method. Unlock with VoiceID to select voice approval; unlock with
+a passkey to return to passkey signing. Built-in methods do not load the VoiceID
+entry or inference assets, including after a reload with an enrolled voice method.
+A signing lane must match its review policy, so a method change cannot reuse an
+incompatible approval. Omitting the plugin while VoiceID is selected rejects the
+operation; it cannot silently bypass voice approval.
+
+
+After a passkey or Email OTP owner unlock, call
+`registration.activateAuthMethod({ walletId, method: 'voiceid' })`.
+It resolves with `{ kind: 'activated', walletId, walletAuthMethodId }`, or with
+`{ kind: 'cancelled' }` when the person closes the Wallet surface.
+The Wallet requests microphone permission and enrolls this wallet method through three
+Record clicks. For an existing method, the same command opens Manage voice. Later use `auth.unlockWithAuthMethod` with that wallet and method
+ID. A VoiceID-selected NEAR or Arc testnet transfer requires Confirm and a fresh voice match.
+The button confirms intent. Read the displayed phrase at a normal pace. Use Cancel to cancel.
+
+`browser/` contains capture, model inference, enrollment, and device storage.
+No native service, extension, Keychain, or OS settings are required. The model
+loads only when enabled VoiceID needs inference. Audio stays local and is
+discarded after processing. Browser storage retains the template, nonextractable
+Ed25519 and AES-GCM keys, and encrypted random factor. Clearing Wallet-origin
+storage requires owner unlock and enrollment again. Nonextractability does not
+prevent trusted Wallet-origin code from using a key; server verification proves
+device-key possession, and the Wallet code enforces speaker and phrase matching.
+
+## Hosted model asset
+
+Place the approved exports at `packages/wallet/assets/voiceid/redimnet-b1.onnx`
+and `packages/wallet/assets/voiceid/aurora-int8.onnx` before building the SDK. The existing
+static-asset build includes it and the matching ONNX Runtime Web WASM files.
+If the optional model is absent, ordinary Wallet builds still work, and enabling
+VoiceID reports that its model is unavailable. Release builds offering VoiceID
+must provision both assets. It is not fetched from a third party during capture.
+
+Current model: ReDimNet B1, VoxCeleb2 large-margin fine-tuned, MIT license.
+Source revision: `ce039a624cb99fe127702ceb94c6080090e5032f`.
+Weight revision: `5180983b6895dafa0cd88aa88e8a07296df27834`.
+The full-waveform export accepts 16 kHz mono PCM and returns a normalized
+192-dimensional embedding. Model bytes: 8,859,593.
+SHA-256: `e04dd7a6a1e23fc7b89e47682ea9d0a3946cf7bc59d07922c3db3efc52ae4269`.
+The deployment includes the model's MIT attribution and export details in NOTICE.txt.
+Use the pinned exporter in `tests/scripts/voiceid-model-evaluation/prepare.py`
+to reproduce the model. The browser evaluation evidence records parity checks.
+
+The prototype uses a B1 threshold of 0.5: the next tenth above the four-second
+calibration cohort's maximum impostor score (0.4417). The separate evaluation
+cohort had 0/728 false accepts and 2/56 false rejects at this threshold. This small
+clean-speech experiment does not qualify production authentication accuracy.
+
+AuroraASR-1M checks the spoken phrase. Its INT8 full-waveform ONNX export is
+1,342,384 bytes and shares the existing WASM runtime. It accepts 16 kHz mono PCM.
+Source revision: `cd307b54b4d666d6ad7dc982a7a58a96d6e7f942`.
+SHA-256: `83ed6f3856458cd96d49a70d8c5175aeec18ba8c184e5367e089cd424eebefd6`.
+The deployment includes its Apache-2.0 license and export details.
+See [export and screening instructions](../../../../../tests/scripts/voiceid-aurora/README.md).
+
+## Download progress and browser cache
+
+First activation shows an accessible progress bar with bytes and percentage while
+each model downloads. Enrollment recording becomes available after preparation.
+The trusted Wallet origin stores only hash-verified model bytes in Cache Storage,
+under a key containing the model digest. A reload reads and verifies that cached
+copy before loading inference. The normal HTTP cache also applies to runtime assets.
+
+Storage can be unavailable or full. In that case inference continues for the
+current session and the UI explains that the model could not be saved. Clearing
+site data or browser eviction can require another download. A corrupted cached
+model is discarded and downloaded again. Failed loads remain retryable.
+
+## Re-enrollment after a model change
+
+The persistence boundary treats an enrollment for a different model as unavailable.
+Voice-only unlock cannot use it. The user must first unlock with a passkey and
+select Manage voice, then Record voice again. Activation reuses an existing local device
+credential for that wallet and authority, then replaces the speaker template only
+after all three samples succeed. It does not create another server method or change
+the existing custody envelope. Cancellation preserves the prior stored record.
+
+## Manual adaptive enrollment
+
+Manage voice shows whether the enrollment is original or improved, and the
+remaining checks and time of an improvement. It provides Improve recognition,
+Reset improvements, and Record voice again, and shows only the actions that apply.
+Each action requires a fresh passkey confirmation. The trusted
+Wallet validates the assertion's signature, challenge, origin, RP ID, user presence,
+and user verification. ES256 passkey credentials use the existing public-key crypto
+worker for COSE and signature decoding, then WebCrypto for signature verification. No credential PRF
+output is requested. Confirmation authorizes one local enrollment change only.
+Both ES256 and RS256 passkey credentials are supported. RS256 uses WebCrypto and
+the existing small CBOR dependency for its RSA public key. These are passkey algorithms.
+Wallet transaction signers remain ECDSA/secp256k1 and Ed25519. VoiceID signing currently
+supports Ed25519-Yao NEAR transfers and native ECDSA Arc transfers on testnet. The server must still recognize the
+same owner session before confirmation and before saving; no signing quota is consumed.
+
+Enrollment storage binds wallet, authority, method, and device key. An atomic commit
+checks owner selection, lock generation, availability revision, and enrollment
+generation/revision. A competing update cannot be overwritten. Capture watches
+owner lifecycle changes and releases the microphone if the action becomes invalid.
+
+Three accepted supplements contribute 20% of the effective template; the immutable
+baseline contributes 80%. Each supplement must match the baseline at 0.5. The final
+template must stay within cosine 0.98 of the baseline. Supplements remain saved
+without a time or usage limit. Reset removes them and preserves the baseline. Re-recording creates a
+new baseline generation. These are bounded experimental settings, not calibrated
+accuracy or false-acceptance guarantees. Automatic learning is not implemented.
+
+Old browser-wide records cannot authenticate directly. Manage voice offers an
+explicit, passkey-confirmed import for the selected method. This migration boundary
+is the only reader of the old record. Other wallets require their own import or
+enrollment. Import deletes it once all known active VoiceID methods have scoped records.
+
+No additional model weights are needed. Fresh passkey confirmation can load the
+existing crypto worker and WASM if uncached: about 1.34 MB uncompressed or 0.31 MB
+with local gzip compression, plus management JavaScript. This is separate from the
+26.86 MB uncompressed voice models and inference runtime. Actual network transfer
+depends on compression and caching. The local enrollment record has a 32 KiB limit.
+
+To replace the implementation, preserve `WalletAuthMethodHostPlugin`, the device
+assertion contract, and method-bound custody envelopes. To remove VoiceID, remove
+its registry entry, descriptor exports, implementation directory, ONNX dependency,
+and optional assets. Omitting the descriptor prevents runtime use and downloads.
+
+## Smaller models and spoken phrases
+
+See the [model candidate evaluation plan](../../../../../docs/voiceid-model-candidates.md)
+for verified download sizes, speaker-verification and STT shortlists, licensing,
+and qualification criteria. The prototype uses pinned B1 and AuroraASR exports.
+
+## Prompt and preparation
+
+Enrollment, unlock, and ordinary transfer approval randomly select one of 32 short
+English trading-oriented sentences. The synthetic natural-paced fixtures
+last about 1.2–2.4 seconds.
+Each attempt holds its displayed sentence until recording ends. Retries
+select another phrase. Read naturally, then pause. Capture stops after 1.5 seconds
+of quiet once audible input has continued for 100 ms. Initial silence does not
+stop capture. An eight-second maximum bounds silence, continued noise, and
+recordings where live analysis is unavailable. Both speaker and phrase checks use the same recording.
+Existing B1 enrollment remains valid. Aurora adds a separate phrase check.
+
+Aurora decodes the audio independently of the displayed phrase. The matcher compares
+that text with all 40 phrases. Eight additional phrases form four action-only
+confirmation families. It ignores case, punctuation, and articles, and maps
+selected homophones to a common spelling. It permits at most 30% normalized character
+edit distance, requires a 10-point distance margin over the next candidate, and
+limits decoded word count to within two words of the candidate. Negation must
+match the candidate phrase; added, omitted, or changed negation rejects. These are development bounds for an approximate challenge. Some changed
+content words can pass; this check does not interpret transaction intent.
+A different recognized phrase, ambiguity, or an out-of-bounds result prevents
+enrollment, device-key use, or signing. The speaker threshold remains 0.5. A signing retry
+keeps the original transaction review and deadline and requires another Confirm.
+No audio or transcript leaves the browser or enters persistent storage.
+
+Per-call `options.voiceId.confirmationCommand` selects an action-only family from
+the first English verb: sell, buy, swap, send, or transfer. Other wording keeps
+the default challenges. The host validates this optional configuration once and
+rejects empty, oversized, non-string, or unknown configuration fields. Each retry
+rotates within the family. The raw command is included in the frozen operation
+hash. It never changes transaction decoding, operation permissions, or speaker
+and phrase thresholds. Numbers, asset names, and prices are not spoken. The
+application cannot supply a replacement challenge.
+
+The finite phrase bank does not establish replay resistance or liveness. The MVP
+still assumes physical possession of an open, active device. Spoof detection stays
+outside scope. See [screening results](../../../../../docs/evidence/voiceid-aurora-20261024/README.md).
+
+The prompt reports its dimensions through the Wallet request measurement binding.
+This reveals the parent modal immediately after layout, without its four-second
+fallback. The reporter watches the stable outer section during enrollment changes
+and disconnects when the prompt closes.
+
+The lazy host entry contains the prompt shell. It mounts the modal and yields a
+frame before importing the unlock or activation implementation. The card shows
+Loading VoiceID and allows cancellation while its recording button is disabled.
+Unlock then prepares its core session installer, including lock cleanup and a new
+lock generation. It checks local state, loads the cached model if needed, and
+requests its server challenge. One cumulative indicator covers the engine WASM
+and all three models inside the same card. Verified cached bytes count toward the
+same total. All four downloads finish before the card shows “Preparing VoiceID…”
+and creates inference sessions. The streamed engine bytes go directly to ONNX
+Runtime, so initialization does not fetch that binary again. The engine uses the
+same hash-verified browser cache as the models. If storage is unavailable, loading
+still works for the current session. Transaction approval uses the same preparation
+before starting its bounded recording attempt.
+The lightweight shell itself still needs its first module download.
+Unlock starts listening automatically after preparation. The initial Unlock with
+VoiceID action opens this flow. Back cancels capture and returns to the login menu.
+Retries require Try again. The card uses the wallet's Back icon and Seams wordmark,
+with one rounded surface and a transparent activation container.
+Cancellation aborts the challenge request and prevents late UI or recording.
+Shared model loading can finish and populate the cache after cancellation.
+
+## Minimal capture UI
+
+Enrollment, unlock, and signing share the plugin-owned `VoicePrompt`. The card shows
+Read aloud, a large phrase, a live waveform, a short status, and Cancel. Enrollment
+also shows the sample number and a Record control between samples. The record
+control disappears during capture. Download details disappear when preparation ends.
+
+After transaction Confirm, the Wallet replaces the review contents with the plugin's
+trusted DOM surface. The Wallet retains its modal, cancellation, expiry, and review
+binding. A mismatch returns to the original review and requires another Confirm.
+The core host loads no VoiceID UI code when the plugin is disabled.
+
+The prompt combines a thin, four-layer flowing ribbon with the SDK's existing
+VoiceBeam glow. Both use the recorder's activity levels; neither opens an audio
+graph or requests a microphone. Speech drives full movement and ambient sound
+is restrained. The ribbon settles when recording ends and the glow indicates
+processing. Reduced motion removes ribbon travel and the glow honors the system
+preference. Disposal cancels the ribbon clock and unmounts the glow.
+The visual is loaded through the optional VoiceID host module. It cannot grant
+approval or change capture, phrase, speaker, or signing policy.
+
+## Recording quality feedback
+
+Short or quiet recordings stay in the unlock prompt with Try again. The original
+server challenge and expiry timer remain unchanged. Only typed insufficient-audio
+results can take this path. A retry displays a new phrase before capture starts.
+The normal phrase and speaker checks still apply before device-key use.
+
+The prompt shows brief failure guidance and a retry control. It exposes no
+Recording details expander or technical recognition text. Internal measurements
+retain the input label, duration, stop reason, and frame levels for behavior checks. The
+level threshold is 0.006. The quality precheck requires 600 ms of qualifying audio.
+Aurora phrase and B1 speaker thresholds are unchanged. This energy proxy cannot generally separate
+short speech from quiet or suppressed speech. Each measurement has an attempt ID
+and timestamp. No audio or transcript is saved or sent by these diagnostics.
+
+
+## Settings and SeamsAuthMenu
+
+The VoiceID card in Authentication methods shows the enable/disable switch, the
+state in this browser, and **Manage voice**.
+Management requires an enabled VoiceID method and an active owner session.
+Each change requires a fresh passkey assertion from the same authority. VoiceID
+can remain selected while that passkey confirms the change. Use
+`registration.getAuthMethodAvailability({ walletId, method: 'voiceid' })` to read
+`not_enrolled`, `enabled`, or `disabled`. Use
+`registration.setAuthMethodEnabled({ walletId, method: 'voiceid', enabled })`
+to change the browser preference. It preserves enrollment. Enable requires an
+owner passkey or Email OTP session. Disable requires another active method and
+locks a current VoiceID session. Existing enrollments without a preference start
+enabled at the persistence boundary. Removal is a separate revocation action.
+
+The login menu lists a wallet once, with its available methods below. Discovery
+reads local metadata without loading the voice models. Voice login uses the menu's
+measurement and cancellation channel; the old menu is hidden and inert during
+capture. Back restores it. The minimal signing prompt is unchanged, with an
+explicit “Confirm with VoiceID” review button. Capture remains click initiated.
+
+## Background noise
+
+Silero VAD adds 2,327,524 bytes, loaded only with VoiceID and cached with integrity
+verification. Browser noise suppression, echo cancellation, and automatic gain
+control remain requested. High-noise recordings receive brief retry guidance.
+
+Speech detection replaces volume alone for pause detection and clip qualification.
+It retains the 1.5-second pause and eight-second recording cap. Speech probability
+must reach 0.5 and the original minimum volume must also pass. The speaker
+threshold remains 0.5. Phrase matching retains the bounded text-difference and
+candidate-margin checks described above.
+
+Noise estimates compare frames classified as speech with other frames. They are
+approximate guidance, not a calibrated acoustic SNR or an authorization decision.
+Nearby conversation can still register as speech. No extra denoiser is shipped.
+See `tests/scripts/voiceid-noise/README.md` for model provisioning and evaluation.