@seams/wallet 0.17.0 → 0.19.0

package/README.md

@@ -1,20 +1,19 @@
 # Seams Wallet SDK
 
-`@seams/wallet` **0.15.4** provides browser wallet lifecycle, NEAR and EVM-family
+`@seams/wallet` **0.17.0** provides browser wallet lifecycle, NEAR and EVM-family
 threshold signing, React components, and hosted wallet runtime assets.
 
 ## Install
 
 ```sh
-pnpm add @seams/wallet@0.15.4
+pnpm add @seams/wallet@0.17.0
 ```
 
 React integrations support React 18 and 19. Import the provider and UI from
 `@seams/wallet/react` and its stylesheet from `@seams/wallet/react/styles`.
 Keep the application package, wallet-origin assets, and
-`@seams/wallet-server@0.15.4` on the matching release. The wallet iframe protocol
-is `16.0.0`. A 0.13 application and a 0.14-or-later wallet host reject each other
-with a protocol version mismatch.
+`@seams/wallet-server@0.17.0` on the matching release. The wallet iframe protocol
+is `16.0.0`. The application and wallet host must use the same protocol version.
 
 ## Current API
 

package/dist/.build-inputs.sha256

@@ -1 +1 @@
-4cdea319a3b81f51e0abec6abf496c487403c76dfe82717b04b6ea66997f021f
+3ab69e5e65a9a0b43534f8b63d088ec3e73f7bed3dc1442443dab684d53c1500

package/dist/esm/SeamsWeb/index.js

@@ -1,6 +1,6 @@
 import { BrowserCapabilityUnavailableError } from "./publicApi/capabilitySelection.js";
 import { LinkDeviceEventPhase } from "../core/types/sdkSentEvents.js";
-import { SeamsWeb } from "./SeamsWeb.js";
 import { buildHostedAuthMenuOpenRequest, hostedAuthMenuExternalAuthRequestIdFromBoundary, hostedAuthMenuSessionIdFromBoundary } from "./walletIframe/shared/messages.js";
+import { SeamsWeb } from "./SeamsWeb.js";
 import { DeviceLinkingError, DeviceLinkingErrorCode } from "../core/types/linkDevice.js";
 export { BrowserCapabilityUnavailableError, DeviceLinkingError, DeviceLinkingErrorCode, LinkDeviceEventPhase, SeamsWeb, buildHostedAuthMenuOpenRequest, hostedAuthMenuExternalAuthRequestIdFromBoundary, hostedAuthMenuSessionIdFromBoundary };

package/dist/esm/SeamsWeb/walletIframe/client/inboundMessages.js

@@ -1,7 +1,7 @@
 import { isObject } from "../../../shared-ts/src/utils/validation.js";
 import { isWalletFlowEvent, parseSdkLifecycleEvent } from "../../../core/types/sdkSentEvents.js";
-import { parseWalletIframeExactSessionSnapshot, parseWalletIframeSessionRevision } from "../shared/exactSessionState.js";
 import { isDeviceLinkEmailOtpBaseFactorSelectionProgressV1, isDeviceLinkTargetFactorActivationProgressV1, isRegistrationTimingSpanV1, parseHostedAuthMenuErrorEvent, parseHostedAuthMenuExternalAuthRequest, parseWalletIframeSurfaceMeasurement } from "../shared/messages.js";
+import { parseWalletIframeExactSessionSnapshot, parseWalletIframeSessionRevision } from "../shared/exactSessionState.js";
 import { parseTransactionReviewState } from "../shared/transactionReview.js";
 //#region src/SeamsWeb/walletIframe/client/inboundMessages.ts
 function rawClientMessageObject(value) {

package/dist/esm/SeamsWeb/walletIframe/client/router.js

@@ -12,6 +12,8 @@ import "../../../shared-ts/src/device-linking/index.js";
 import { AccountSyncEventPhase, KeyExportEventPhase, LinkDeviceEventPhase, RegistrationEventPhase, SigningEventPhase, UnlockEventPhase, classifyLinkDeviceFlowEvent, createAccountSyncFlowEvent, createKeyExportFlowEvent, createLinkDeviceFlowEvent, createRegistrationFlowEvent, createSigningFlowEvent, createUnlockFlowEvent, isWalletFlowEvent, parseNearProvisioningState } from "../../../core/types/sdkSentEvents.js";
 import { requireTempoFeeTokenPreferenceSigningRequest } from "../../../core/signingEngine/chains/tempo/feeToken.js";
 import { buildPMUnlockPayload } from "../shared/unlockOptions.js";
+import { walletIframeSurfaceIdFromBoundary } from "../../../core/types/walletIframeIdentity.js";
+import { HOSTED_AUTH_MENU_ERROR_EVENT, buildHostedAuthMenuCancelPayload, buildPMRedeemHostedWalletSeamsSessionPayload, hostedAuthMenuSessionIdFromBoundary, isDeviceLinkEmailOtpBaseFactorSelectionProgressV1, isDeviceLinkTargetFactorActivationProgressV1, isRegistrationTimingSpanV1, parseHostedAuthMenuErrorEvent, parseHostedAuthMenuExternalAuthRequest, parseHostedAuthMenuExternalAuthResolution, parseHostedAuthMenuOpenRequest, parseHostedAuthMenuOutcome, parseWalletIframeSurfaceMeasurement } from "../shared/messages.js";
 import { replaceWalletHostAppearance } from "../shared/configuration.js";
 import { anchorWalletIframeModalGeometry, isWalletIframeModalGeometry, resolveWalletIframeSurfaceGeometry } from "./surface/geometry.js";
 import OverlayController from "./overlay/overlay-controller.js";
@@ -19,8 +21,6 @@ import { walletIdFromString } from "../../../shared-ts/src/utils/registrationIds
 import { WalletIframeSessionExpiredRequestError, exactSessionIdentitiesMatch, parseWalletIframeExactSessionLockResult, parseWalletIframeExactSessionSnapshot, parseWalletSessionFromBoundary } from "../shared/exactSessionState.js";
 import { parseExactEcdsaSigningLaneIdentity, parseExactEd25519ExportMaterialIdentity } from "../../../core/signingEngine/session/identity/exactSigningLaneIdentity.js";
 import { resolveRuntimeAppearance } from "../shared/facadeBoundary.js";
-import { walletIframeSurfaceIdFromBoundary } from "../../../core/types/walletIframeIdentity.js";
-import { HOSTED_AUTH_MENU_ERROR_EVENT, buildHostedAuthMenuCancelPayload, buildPMRedeemHostedWalletSeamsSessionPayload, hostedAuthMenuSessionIdFromBoundary, isDeviceLinkEmailOtpBaseFactorSelectionProgressV1, isDeviceLinkTargetFactorActivationProgressV1, isRegistrationTimingSpanV1, parseHostedAuthMenuErrorEvent, parseHostedAuthMenuExternalAuthRequest, parseHostedAuthMenuExternalAuthResolution, parseHostedAuthMenuOpenRequest, parseHostedAuthMenuOutcome, parseWalletIframeSurfaceMeasurement } from "../shared/messages.js";
 import { TransactionReviewError, assertTransactionReviewValid, parseTransactionReviewState, reviewedConfirmationConfig, sameTransactionReviewIdentity, transactionReviewCancellationCode } from "../shared/transactionReview.js";
 import { needsExplicitActivation } from "../../../utils/deviceDetection.js";
 import { TransactionReviewReservation } from "./transactionReviewReservation.js";
@@ -990,6 +990,11 @@ var WalletIframeRouter = class {
 			this.surfaceRenderer.render(surface);
 			return;
 		}
+		const anchor = surface.kind === "modal_auth_menu" ? this.hostedAuthMenuAnchors.get(surface.authMenuSessionId) : void 0;
+		if (surface.kind === "modal_auth_menu" && anchor?.isConnected === false) {
+			queueMicrotask(this.cancelHostedAuthMenuWithReason.bind(this, surface.authMenuSessionId, "component_unmounted"));
+			return;
+		}
 		let measurement = this.activeSurfaceMeasurement ? {
 			kind: "measured",
 			widthCssPx: this.activeSurfaceMeasurement.widthCssPx,
@@ -1016,7 +1021,6 @@ var WalletIframeRouter = class {
 			measurement,
 			maxModalWidthCssPx: surface.kind === "modal_recovery_codes" ? 688 : void 0
 		});
-		const anchor = surface.kind === "modal_auth_menu" ? this.hostedAuthMenuAnchors.get(surface.authMenuSessionId) : void 0;
 		let anchorMetrics = hostedAuthMenuAnchorMetrics(anchor);
 		let geometry = resolvedGeometry;
 		let authMenuVisualScale = 1;
@@ -1059,6 +1063,8 @@ var WalletIframeRouter = class {
 		if (surface.kind === "modal_auth_menu" && geometry.kind !== "provisional_centered_modal") this.hostedAuthMenuAnchors.get(surface.authMenuSessionId)?.style.setProperty("--seams-auth-menu-placeholder-opacity", "0");
 	}
 	startHostedAuthMenuAnchorTracking(authMenuSessionId) {
+		const anchor = this.hostedAuthMenuAnchors.get(authMenuSessionId);
+		if (anchor) this.surfaceLayoutObserver?.observe(anchor);
 		if (this.hostedAuthMenuAnchorTrackingFrame !== null) cancelAnimationFrame(this.hostedAuthMenuAnchorTrackingFrame);
 		this.hostedAuthMenuAnchorTrackingSession = authMenuSessionId;
 		this.hostedAuthMenuAnchorTrackingDeadlineMs = performance.now() + 750;
@@ -2513,7 +2519,6 @@ var WalletIframeRouter = class {
 		await this.post({ type: "PM_PREPARE_WALLET_RUNTIME" });
 	}
 	async openHostedAuthMenu(request, anchorElement) {
-		await this.ensureConfigured();
 		const normalized = parseHostedAuthMenuOpenRequest(request);
 		if (!normalized) throw new Error("Hosted auth-menu open request is invalid");
 		if (this.hostedAuthMenuRequestIds.has(normalized.authMenuSessionId)) throw new Error("Hosted auth-menu session is already active");
@@ -2521,6 +2526,7 @@ var WalletIframeRouter = class {
 		this.hostedAuthMenuRequestIds.set(normalized.authMenuSessionId, requestId);
 		if (anchorElement) this.hostedAuthMenuAnchors.set(normalized.authMenuSessionId, anchorElement);
 		try {
+			await this.ensureConfigured();
 			const outcome = parseHostedAuthMenuOutcome((await this.post({
 				type: "PM_OPEN_AUTH_MENU",
 				payload: normalized

package/dist/esm/SeamsWeb/walletIframe/coordinator.js

@@ -1,5 +1,6 @@
 import { toWalletId } from "../../core/signingEngine/interfaces/ecdsaChainTarget.js";
 import { buildAnonymousWalletSession } from "../publicApi/session.js";
+import { hostedAuthMenuSessionIdFromBoundary, parseHostedAuthMenuOpenRequest } from "./shared/messages.js";
 import { createWalletIframeRouter } from "../assembly/createWalletIframeRouter.js";
 //#region src/SeamsWeb/walletIframe/coordinator.ts
 function assertNeverConnection(state) {
@@ -34,6 +35,7 @@ var WalletIframeCoordinator = class {
 	walletIframeAuthMenuUnsubscribe = null;
 	sdkLifecycleEventListeners = /* @__PURE__ */ new Set();
 	hostedAuthMenuExternalAuthRequestListeners = /* @__PURE__ */ new Set();
+	hostedAuthMenuOpensBeforeRouter = /* @__PURE__ */ new Map();
 	forwardSdkLifecycleEventListener;
 	forwardHostedAuthMenuExternalAuthRequestListener;
 	constructor(deps) {
@@ -228,9 +230,29 @@ var WalletIframeCoordinator = class {
 		this.requireRouter().then(prepareRouterWalletHostRuntime).catch(ignorePreparationFailure);
 	}
 	async openHostedAuthMenu(request, anchorElement) {
-		return await (await this.requireRouter()).openHostedAuthMenu(request, anchorElement);
+		const normalized = parseHostedAuthMenuOpenRequest(request);
+		if (!normalized) throw new Error("Hosted auth-menu open request is invalid");
+		const authMenuSessionId = normalized.authMenuSessionId;
+		if (this.hostedAuthMenuOpensBeforeRouter.has(authMenuSessionId)) throw new Error("Hosted auth-menu session is already active");
+		this.hostedAuthMenuOpensBeforeRouter.set(authMenuSessionId, "awaiting_router");
+		let router;
+		try {
+			router = await this.requireRouter();
+		} catch (error) {
+			this.hostedAuthMenuOpensBeforeRouter.delete(authMenuSessionId);
+			throw error;
+		}
+		const state = this.hostedAuthMenuOpensBeforeRouter.get(authMenuSessionId);
+		this.hostedAuthMenuOpensBeforeRouter.delete(authMenuSessionId);
+		if (state === "cancelled") throw new Error("Hosted auth-menu cancelled: component_unmounted");
+		return await router.openHostedAuthMenu(normalized, anchorElement);
 	}
 	async cancelHostedAuthMenu(args) {
+		const authMenuSessionId = hostedAuthMenuSessionIdFromBoundary(args.authMenuSessionId);
+		if (authMenuSessionId && this.hostedAuthMenuOpensBeforeRouter.has(authMenuSessionId)) {
+			this.hostedAuthMenuOpensBeforeRouter.set(authMenuSessionId, "cancelled");
+			return;
+		}
 		await (await this.requireRouter()).cancelHostedAuthMenu(args);
 	}
 	onHostedAuthMenuExternalAuthRequest(listener) {

package/dist/esm/SeamsWeb/walletIframe/host/ui/auth-menu/AuthMenuFooter.js

@@ -1,3 +1,4 @@
+import { WalletText } from "../../../../../core/signingEngine/uiConfirm/ui/preact/WalletLocale.js";
 import { SeamsWordmark } from "../../../../../core/signingEngine/uiConfirm/ui/preact/SeamsWordmark.js";
 import { alertIcon, shieldIcon } from "./icons.js";
 import { Component } from "preact";
@@ -23,7 +24,7 @@ var AuthMenuFooter = class extends Component {
 					children: [
 						shieldIcon(),
 						" ",
-						/* @__PURE__ */ jsx("span", { children: "Secured by" }),
+						/* @__PURE__ */ jsx("span", { children: /* @__PURE__ */ jsx(WalletText, { message: "Secured by" }) }),
 						" ",
 						/* @__PURE__ */ jsx(SeamsWordmark, {})
 					]
@@ -35,21 +36,21 @@ var AuthMenuFooter = class extends Component {
 						/* @__PURE__ */ jsx("span", {
 							class: "seams-auth-footer-text",
 							"aria-hidden": "true",
-							children: this.shownNotice
+							children: /* @__PURE__ */ jsx(WalletText, { copy: this.shownNotice })
 						}),
 						/* @__PURE__ */ jsx("button", {
 							class: "seams-auth-footer-action",
 							type: "button",
 							disabled: !notice,
 							onClick: onRetry,
-							children: "Try again"
+							children: /* @__PURE__ */ jsx(WalletText, { message: "Try again" })
 						})
 					]
 				}),
 				notice ? /* @__PURE__ */ jsx("p", {
 					class: "sr-only",
 					role: "alert",
-					children: notice
+					children: /* @__PURE__ */ jsx(WalletText, { copy: notice })
 				}) : null
 			]
 		});