@seams/wallet 0.20.0 → 0.21.0

package/dist/public/wallet-service/index.html

@@ -5,14 +5,14 @@
     <meta name="viewport" content="width=device-width, initial-scale=1" />
     <title>Web3Authn Wallet Service</title>
     <!-- Surface styles are external so strict CSP can keep style-src 'self' -->
-    <link rel="stylesheet" href="/sdk/wallet-ui.css?v=0.20.0" />
+    <link rel="stylesheet" href="/sdk/wallet-ui.css?v=0.21.0" />
     <!-- Minimal shims some ESM bundles expect (externalized to enable strict CSP) -->
-    <script src="/sdk/wallet-shims.js?v=0.20.0"></script>
+    <script src="/sdk/wallet-shims.js?v=0.21.0"></script>
     <!-- Hint the browser to fetch the host script earlier -->
-    <link rel="modulepreload" href="/sdk/wallet-iframe-host-runtime.js?v=0.20.0" crossorigin>
+    <link rel="modulepreload" href="/sdk/wallet-iframe-host-runtime.js?v=0.21.0" crossorigin>
   </head>
   <body>
     <!-- sdkBasePath points to the SDK root (e.g. '/sdk'). Load the host directly. -->
-    <script type="module" src="/sdk/wallet-iframe-host-runtime.js?v=0.20.0"></script>
+    <script type="module" src="/sdk/wallet-iframe-host-runtime.js?v=0.21.0"></script>
   </body>
 </html>

package/dist/types/shared-ts/src/authorization/walletCustodyOperation.d.ts

@@ -1,5 +1,5 @@
 import { type DigestB64u } from '../utils/canonicalPrimitives';
-export type WalletCustodyAdminOperation = 'credentials_list' | 'credential_label' | 'recovery_rotate' | 'recovery_read';
+export type WalletCustodyAdminOperation = 'credentials_list' | 'credential_label' | 'recovery_rotate' | 'recovery_read' | 'recovery_status' | 'recovery_backup_acknowledge';
 /** Public challenge digest for a single wallet-administration factor proof. */
 export declare function computeWalletCustodyAdminChallengeDigest(input: {
     readonly walletId: string;

package/dist/types/shared-ts/src/device-linking/contracts.d.ts

@@ -429,13 +429,7 @@ export type LinkedOwnerCredentialMetadataV1 = {
 } | {
     readonly kind: 'email_otp';
     readonly walletAuthMethodId: WalletAuthMethodId;
-    /**
-     * The verified address behind this factor. The management projection is
-     * served only to an authenticated owner session, and the owner already
-     * knows the address they enrolled — this exists so the settings surface
-     * can name the factor. Local persistence keeps only the email hash.
-     */
-    readonly email: VerifiedEmailAddress;
+    readonly email?: never;
     readonly device?: never;
     readonly credentialIdB64u?: never;
 };

package/dist/types/shared-ts/src/passkey-custody/ceremonyCommitPayload.d.ts

@@ -135,8 +135,10 @@ export type WalletCustodyRegistrationOutcome =
 /** No custody payload rode this leg. Registration is unaffected. */
 {
     readonly status: 'not_requested';
+    readonly issuedAtMs?: never;
 } | {
     readonly status: 'committed';
+    readonly issuedAtMs: number;
 }
 /**
  * A joining run: this key set's manifest digest, with no custody records
@@ -145,6 +147,7 @@ export type WalletCustodyRegistrationOutcome =
  | {
     readonly status: 'joined';
     readonly keyManifestDigestB64u: string;
+    readonly issuedAtMs?: never;
 }
 /**
  * Another ceremony established this wallet's custody first. The client must
@@ -152,11 +155,13 @@ export type WalletCustodyRegistrationOutcome =
  */
  | {
     readonly status: 'custody_already_established';
+    readonly issuedAtMs?: never;
 }
 /** The payload was refused. Nothing was written. */
  | {
     readonly status: 'rejected';
     readonly reason: string;
+    readonly issuedAtMs?: never;
 };
 /**
  * Reads a commit payload off the wire without judging it.

package/dist/types/shared-ts/src/utils/evmRpcResults.d.ts

@@ -1,8 +1,8 @@
 export type EvmTransactionReceipt = {
-    transactionHash?: string | null;
+    transactionHash: string;
     from?: string | null;
-    blockNumber?: string | null;
-    status?: string | null;
+    blockNumber: string;
+    status: string;
     gasUsed?: string | null;
     effectiveGasPrice?: string | null;
     gasPrice?: string | null;

package/dist/types/shared-ts/src/utils/routerAbEcdsaDerivation.d.ts

@@ -441,7 +441,7 @@ type RouterAbEcdsaOperationStepUpWebAuthnCredentialV1Wire = {
         readonly signature: string;
         readonly userHandle: string | null;
     };
-    readonly clientExtensionResults: unknown | null;
+    readonly clientExtensionResults: null;
 };
 export type RouterAbEcdsaOperationStepUpPreparationV1Wire = {
     readonly wallet_id: string;

package/dist/types/wallet/src/SeamsWeb/operations/recovery/walletRecoveryAdminProof.d.ts

@@ -0,0 +1,46 @@
+import { type WalletCustodyFactorProof, type WalletRecoveryBackupAcknowledgementResult, type WalletRecoveryCodeStatusResult } from '../../../core/rpcClients/relayer/walletRecoveryRotate';
+import type { RegistrationWebContext } from '../../signingSurface/types';
+import type { WalletRecoveryFactorProofRequest } from '../../../core/signingEngine/walletCustody/walletRecoveryRotation';
+type RecoveryAdminRequest = WalletRecoveryFactorProofRequest | {
+    readonly operation: 'recovery_backup_acknowledge';
+    readonly payload: {
+        readonly walletId: string;
+        readonly requestId: string;
+        readonly expectedIssuedAtMs: number;
+    };
+};
+export declare function readWalletRecoveryCodeStatusWithPasskey(args: {
+    readonly relayUrl: string;
+    readonly walletId: string;
+    readonly rpId: string;
+}): Promise<WalletRecoveryCodeStatusResult>;
+export declare function acknowledgeWalletRecoveryBackupWithPasskey(args: {
+    readonly relayUrl: string;
+    readonly walletId: string;
+    readonly rpId: string;
+    readonly expectedIssuedAtMs: number;
+}): Promise<WalletRecoveryBackupAcknowledgementResult>;
+export declare function selectedEmailOtpOwnerMethod(walletId: string): Promise<{
+    readonly walletAuthMethodId: string;
+    readonly providerSubjectId: string;
+}>;
+export declare function createWalletRecoveryAdminEmailOtpProof(args: {
+    readonly context: Pick<RegistrationWebContext, 'signingEngine'>;
+    readonly relayUrl: string;
+    readonly request: RecoveryAdminRequest;
+}): Promise<Extract<WalletCustodyFactorProof, {
+    readonly kind: 'email_otp';
+}>>;
+export declare function readWalletRecoveryCodeStatusWithEmailOtp(args: {
+    readonly context: Pick<RegistrationWebContext, 'signingEngine'>;
+    readonly relayUrl: string;
+    readonly walletId: string;
+}): Promise<WalletRecoveryCodeStatusResult>;
+export declare function acknowledgeWalletRecoveryBackupWithEmailOtp(args: {
+    readonly context: Pick<RegistrationWebContext, 'signingEngine'>;
+    readonly relayUrl: string;
+    readonly walletId: string;
+    readonly expectedIssuedAtMs: number;
+}): Promise<WalletRecoveryBackupAcknowledgementResult>;
+export {};
+//# sourceMappingURL=walletRecoveryAdminProof.d.ts.map

package/dist/types/wallet/src/SeamsWeb/operations/recovery/walletRecoveryCodeBackup.d.ts

@@ -11,6 +11,9 @@ type RecoveryCodeBackupUiOptions = {
     readonly shouldCancel?: () => boolean;
 };
 export declare function showWalletRecoveryCodeBackupUi(request: WalletRecoveryCodeBackupRequestV1, measurementBinding?: UiConfirmSurfaceMeasurementBinding): Promise<WalletRecoveryCodeBackupAcknowledgementV1>;
-export declare function showWalletRecoveryCodesUi(request: WalletRecoveryCodesUiRequest, measurementBinding?: UiConfirmSurfaceMeasurementBinding, options?: RecoveryCodeBackupUiOptions): Promise<WalletRecoveryCodeBackupAcknowledgementV1>;
+export declare function showWalletRecoveryCodesUi(request: WalletRecoveryCodesUiRequest, measurementBinding?: UiConfirmSurfaceMeasurementBinding, options?: RecoveryCodeBackupUiOptions): Promise<{
+    readonly kind: 'wallet_recovery_codes_backed_up_v1';
+    readonly issuedAtMs: number;
+}>;
 export {};
 //# sourceMappingURL=walletRecoveryCodeBackup.d.ts.map

package/dist/types/wallet/src/SeamsWeb/operations/recovery/walletRecoveryRotation.d.ts

@@ -1,18 +1,22 @@
 import type { RegistrationWebContext } from '../../signingSurface/types';
 import { type WalletRecoveryRotationOutcome } from '../../../core/signingEngine/walletCustody/walletRecoveryRotation';
-export type WalletRecoveryRotationAuthorization = {
+type NoParentRecoveryProof = {
+    readonly providerSubjectId?: never;
+    readonly statusProof?: never;
+    readonly rotationProof?: never;
+    readonly otpCode?: never;
+    readonly otp_code?: never;
+};
+export type WalletRecoveryRotationAuthorization = ({
     readonly kind: 'existing_passkey';
-} | {
+} & NoParentRecoveryProof) | ({
     readonly kind: 'email_otp';
-    readonly providerSubjectId: string;
-    readonly challengeId: string;
-    readonly challenge_digest: string;
-    readonly otpCode: string;
-};
+} & NoParentRecoveryProof);
 export declare function rotateWalletRecoveryCodes(args: {
     readonly context: RegistrationWebContext;
     readonly relayUrl: string;
     readonly walletId: string;
     readonly authorization: WalletRecoveryRotationAuthorization;
 }): Promise<WalletRecoveryRotationOutcome>;
+export {};
 //# sourceMappingURL=walletRecoveryRotation.d.ts.map

package/dist/types/wallet/src/SeamsWeb/publicApi/types.d.ts

@@ -22,6 +22,7 @@ import type { AddEmailOtpHooksOptions, AddEmailOtpResult } from '../operations/a
 import type { RevokeAuthMethodResult } from '../operations/authMethods/revokeAuthMethod';
 import type { WalletRecoveryBackupAcknowledgementResult, WalletRecoveryCodeStatusResult, WalletCustodyEmailOtpChallengeResult } from '../../core/rpcClients/relayer/walletRecoveryRotate';
 import type { WalletRecoveryRotationAuthorization } from '../operations/recovery/walletRecoveryRotation';
+import type { WalletCustodyAdminOperation } from '../../../../shared-ts/src/authorization/walletCustodyOperation';
 import type { WalletRecoveryRotationOutcome } from '../../core/signingEngine/walletCustody/walletRecoveryRotation';
 import type { EvmAddress, EvmBytes, EvmSigningRequest } from '../../core/signingEngine/chains/evm/evmSigning.types';
 import type { TempoSigningRequest } from '../../core/signingEngine/chains/tempo/tempoSigning.types';
@@ -657,6 +658,11 @@ export interface EvmSignerCapability {
     /** Post-broadcast lifecycle reporting; `signAndSendTransaction` already drives it. */
     readonly advanced: EvmFamilyAdvancedCapability;
 }
+export type WalletRecoveryOwnerFactor = {
+    readonly kind: 'passkey';
+} | {
+    readonly kind: 'email_otp';
+};
 export interface RecoveryCapability {
     syncAccount(args: {
         walletId?: string;
@@ -664,14 +670,16 @@ export interface RecoveryCapability {
     }): Promise<SyncAccountResult>;
     getCodeStatus(args: {
         walletId: string;
+        authorization: WalletRecoveryOwnerFactor;
     }): Promise<WalletRecoveryCodeStatusResult>;
     confirmBackup(args: {
         walletId: string;
+        authorization: WalletRecoveryOwnerFactor;
     }): Promise<WalletRecoveryBackupAcknowledgementResult>;
     requestWalletCustodyEmailOtpChallenge(args: {
         walletId: string;
         providerSubjectId: string;
-        operation: 'credentials_list' | 'credential_label' | 'recovery_rotate' | 'recovery_read';
+        operation: WalletCustodyAdminOperation;
         payload: Record<string, unknown>;
         requestOrigin?: string;
     }): Promise<WalletCustodyEmailOtpChallengeResult>;

package/dist/types/wallet/src/SeamsWeb/signingSurface/BrowserSigningSurface.d.ts

@@ -14,7 +14,7 @@ import { establishEvmFamilyCustodyV1, joinEvmFamilyCustodyV1 } from '../../core/
 import { type WalletSessionEd25519RecoveryBasisV1 } from '../../core/signingEngine/walletCustody/walletRecoveryEd25519';
 import { recoverWalletCustodyManifestV1 } from '../../core/signingEngine/walletCustody/walletRecoveryManifest';
 import { type LoadedWalletCustodyEd25519MaterialV1, type WalletCustodyEd25519MaterialBindingV1, type WalletCustodySealedEd25519MaterialV1 } from '../../core/signingEngine/walletCustody/ed25519SeedMaterial';
-import type { EstablishWalletCustodyNearEd25519KeySetArgs, EstablishedWalletCustodyEvmFamilyKeySetV1, EstablishedWalletCustodyNearEd25519KeySetV1, JoinedWalletCustodyNearEd25519KeySetV1, JoinedWalletCustodyEvmFamilyKeySetV1, RejoinedWalletCustodyEvmFamilyKeySetV1 } from './ports';
+import type { EstablishWalletCustodyNearEd25519KeySetArgs, EstablishedWalletCustodyEvmFamilyKeySetV1, EstablishedWalletCustodyNearEd25519KeySetV1, JoinedWalletCustodyNearEd25519KeySetV1, JoinedWalletCustodyEvmFamilyKeySetV1, RejoinedWalletCustodyEvmFamilyKeySetV1, EmailOtpOwnerConfirmationPurpose } from './ports';
 import { type RouterAbEd25519YaoRegistrationAdmissionRequestV1 } from '../../../../shared-ts/src/utils/routerAbEd25519Yao';
 import type { RouterAbTraceContextV1 } from '../../../../shared-ts/src/utils/routerAbTraceContext';
 import type { SignerWorkerKind, SignerWorkerOperationRequest, SignerWorkerOperationResult, SignerWorkerOperationType, EmailOtpYaoPrewarmRequest, EmailOtpYaoPrewarmOutcome } from '../../core/signingEngine/workerManager/workerTypes';
@@ -401,7 +401,8 @@ export declare class BrowserSigningSurface {
      * typed into the wallet's own surface and never passes through the host
      * application — the reason `addEmail` takes an address and not a code.
      */
-    requestEmailOtpEnrollmentConfirmation(params: {
+    requestEmailOtpOwnerConfirmation(params: {
+        purpose: EmailOtpOwnerConfirmationPurpose;
         walletId: string;
         emailAddress: string;
         challengeId: string;
@@ -411,7 +412,7 @@ export declare class BrowserSigningSurface {
             body?: string;
         };
         confirmationConfigOverride?: Partial<ConfirmationConfig>;
-        onResend: () => Promise<{
+        onResend?: () => Promise<{
             challengeId: string;
             emailHint?: string;
         }>;

package/dist/types/wallet/src/SeamsWeb/signingSurface/ports.d.ts

@@ -459,8 +459,10 @@ export type AccountSyncSigningSurface = LocalLoginStateSurface & Ed25519YaoCapab
  * any other: the wallet asks, the user types six digits into the wallet's own
  * surface, and the code never passes through the host application.
  */
-export interface EmailOtpEnrollmentConfirmationSurface {
-    requestEmailOtpEnrollmentConfirmation(params: {
+export type EmailOtpOwnerConfirmationPurpose = 'add_email_code' | 'add_passkey' | 'remove_auth_method' | 'move_wallet' | 'recovery_status' | 'recovery_unlock' | 'recovery_rotate' | 'recovery_backup_acknowledge';
+export interface EmailOtpOwnerConfirmationSurface {
+    requestEmailOtpOwnerConfirmation(params: {
+        purpose: EmailOtpOwnerConfirmationPurpose;
         walletId: string;
         emailAddress: string;
         challengeId: string;
@@ -470,7 +472,7 @@ export interface EmailOtpEnrollmentConfirmationSurface {
             body?: string;
         };
         confirmationConfigOverride?: Partial<ConfirmationConfig>;
-        onResend: () => Promise<{
+        onResend?: () => Promise<{
             challengeId: string;
             emailHint?: string;
         }>;
@@ -579,7 +581,7 @@ export interface KeyExportSigningSurface {
 export interface EmailOtpRegistrationEnrollmentSurface {
     prepareEmailOtpRegistrationEnrollmentMaterialInternal(args: PrepareEmailOtpRegistrationEnrollmentMaterialInternalArgs): Promise<PrepareEmailOtpRegistrationEnrollmentMaterialInternalResult>;
 }
-export type RegistrationSigningSurface = RpIdSurface & EcdsaLoginSessionSurface & WalletIframeSurfaceMeasurementSurface & Ed25519YaoCapabilityActivationSurface & UnlockedEd25519ExportRootCapabilitySurface & WalletCustodyCeremonySurface & Pick<WalletIframeWarmupSurface, 'warmCriticalResources'> & RegistrationResourceWarmupSurface & Pick<SigningSessionSurface, 'hydrateSigningSession' | 'prepareSigningSessionHydration' | 'readPreparedSigningSessionHydration' | 'discardSigningSessionHydration' | 'persistSigningSessionSealForThresholdSession'> & Pick<EmailOtpRegistrationEnrollmentSurface, 'prepareEmailOtpRegistrationEnrollmentMaterialInternal'> & SignerWorkerContextSurface & PasskeyLoginAssertionSurface & Pick<WalletAuthenticationSurface, 'setWalletAuthenticated'> & Pick<UserProfileStoreSurface, 'getUserBySignerSlot'> & Pick<RegistrationAccountSurface, 'storeWalletEd25519RegistrationData' | 'storeWalletEmailOtpEd25519RegistrationData'> & Pick<EcdsaRegistrationSurface, 'storeWalletEcdsaSignerRecords' | 'storeWalletEmailOtpEcdsaSignerRecords' | 'storeWalletEmailOtpEcdsaRegistrationData'> & WebAuthnRegistrationConfirmationSurface & EmailOtpEnrollmentConfirmationSurface & RegistrationAccountSurface & EcdsaRegistrationSurface;
+export type RegistrationSigningSurface = RpIdSurface & EcdsaLoginSessionSurface & WalletIframeSurfaceMeasurementSurface & Ed25519YaoCapabilityActivationSurface & UnlockedEd25519ExportRootCapabilitySurface & WalletCustodyCeremonySurface & Pick<WalletIframeWarmupSurface, 'warmCriticalResources'> & RegistrationResourceWarmupSurface & Pick<SigningSessionSurface, 'hydrateSigningSession' | 'prepareSigningSessionHydration' | 'readPreparedSigningSessionHydration' | 'discardSigningSessionHydration' | 'persistSigningSessionSealForThresholdSession'> & Pick<EmailOtpRegistrationEnrollmentSurface, 'prepareEmailOtpRegistrationEnrollmentMaterialInternal'> & SignerWorkerContextSurface & PasskeyLoginAssertionSurface & Pick<WalletAuthenticationSurface, 'setWalletAuthenticated'> & Pick<UserProfileStoreSurface, 'getUserBySignerSlot'> & Pick<RegistrationAccountSurface, 'storeWalletEd25519RegistrationData' | 'storeWalletEmailOtpEd25519RegistrationData'> & Pick<EcdsaRegistrationSurface, 'storeWalletEcdsaSignerRecords' | 'storeWalletEmailOtpEcdsaSignerRecords' | 'storeWalletEmailOtpEcdsaRegistrationData'> & WebAuthnRegistrationConfirmationSurface & EmailOtpOwnerConfirmationSurface & RegistrationAccountSurface & EcdsaRegistrationSurface;
 export type SeamsWebBaseContext<TSigningEngine> = {
     signingEngine: TSigningEngine;
     nearClient: NearClient;

package/dist/types/wallet/src/SeamsWeb/signingSurface/types.d.ts

@@ -1,11 +1,11 @@
-import type { AccountSyncSigningSurface, EcdsaLoginSessionSurface, EcdsaRegistrationSurface, WalletCustodyCeremonySurface, Ed25519YaoCapabilityActivationSurface, EcdsaSessionBootstrapSurface, EcdsaSessionControlSurface, Ed25519SessionConnectionSurface, Ed25519MaterialOwnerQueueSurface, EmailOtpRegistrationEnrollmentSurface, EmailOtpSigningSessionSurface, EvmFamilySigningSurface, KeyExportSigningSurface, NearSigningSurface, NonceCoordinatorSurface, PasskeyLoginAssertionSurface, RegistrationAccountSurface, RegistrationResourceWarmupSurface, RpIdSurface, RuntimeStartupSurface, SeamsWebBaseContext, SigningEngineLifecycleEventSurface, SignerWorkerContextSurface, SigningSessionSurface, TempoNonceLifecycleSurface, UserProfileStoreSurface, WarmSessionStatusSurface, WalletIframeWarmupSurface, WalletIframeSurfaceMeasurementSurface, WalletAuthenticationSurface, WalletLockGenerationSurface, UnlockedEd25519ExportRootCapabilitySurface, WebAuthnRegistrationConfirmationSurface, EmailOtpEnrollmentConfirmationSurface } from './ports';
+import type { AccountSyncSigningSurface, EcdsaLoginSessionSurface, EcdsaRegistrationSurface, WalletCustodyCeremonySurface, Ed25519YaoCapabilityActivationSurface, EcdsaSessionBootstrapSurface, EcdsaSessionControlSurface, Ed25519SessionConnectionSurface, Ed25519MaterialOwnerQueueSurface, EmailOtpRegistrationEnrollmentSurface, EmailOtpSigningSessionSurface, EvmFamilySigningSurface, KeyExportSigningSurface, NearSigningSurface, NonceCoordinatorSurface, PasskeyLoginAssertionSurface, RegistrationAccountSurface, RegistrationResourceWarmupSurface, RpIdSurface, RuntimeStartupSurface, SeamsWebBaseContext, SigningEngineLifecycleEventSurface, SignerWorkerContextSurface, SigningSessionSurface, TempoNonceLifecycleSurface, UserProfileStoreSurface, WarmSessionStatusSurface, WalletIframeWarmupSurface, WalletIframeSurfaceMeasurementSurface, WalletAuthenticationSurface, WalletLockGenerationSurface, UnlockedEd25519ExportRootCapabilitySurface, WebAuthnRegistrationConfirmationSurface, EmailOtpOwnerConfirmationSurface } from './ports';
 import type { UserPreferencesManager } from '../../core/signingEngine/session/userPreferences';
 import type { UiConfirmSurfaceMeasurementBinding } from '../../core/signingEngine/uiConfirm/uiConfirm.types';
 import type { AppearanceConfig, SeamsConfigsReadonly } from '../../core/types/seams';
 import type { WorkerOperationContext } from '../../core/signingEngine/workerManager/executeWorkerOperation';
 export type { AccountSyncSigningSurface, AccountSyncWebContext, WalletAuthWebContext, DeviceLinkingSigningSurface, DeviceLinkingWebContext, EcdsaLoginSessionSurface, EcdsaRegistrationSurface, Ed25519YaoCapabilityActivationSurface, EcdsaSessionBootstrapSurface, EcdsaSessionControlSurface, Ed25519SessionConnectionSurface, EmailOtpRegistrationEnrollmentSurface, EmailOtpSigningSessionSurface, WalletRecoverySigningSurface, WalletRecoveryWebContext, EvmFamilySigningSurface, LocalLoginStateSurface, LockSigningSurface, LoginUnlockSigningSurface, LoginWarmSigningSurface, LoginWebContext, NearSigningSurface, NearSigningWebContext, NonceCoordinatorSurface, PasskeyLoginAssertionSurface, RecentUnlocksSigningSurface, RecentUnlocksWebContext, RegistrationAccountSurface, RegistrationResourceWarmupSurface, RegistrationSigningSurface, RegistrationWebContext, RpIdSurface, RuntimeStartupSurface, SeamsWebBaseContext, SigningEngineLifecycleEventSurface, SignerWorkerContextSurface, SigningSessionSurface, TempoNonceLifecycleSurface, TempoSigningSurface, UnlockedEd25519ExportRootCapabilitySurface, UserAccountLookupSurface, UserProfileStoreSurface, WalletIframeWarmupSurface, WalletAuthenticationSurface, WalletSessionReadSurface, WalletSessionWebContext, WarmSessionStatusSurface, WebAuthnRegistrationConfirmationSurface, } from './ports';
 export type * from '../publicApi/types';
-export interface SeamsWebSigningSurface extends RpIdSurface, NonceCoordinatorSurface, WalletIframeWarmupSurface, WalletIframeSurfaceMeasurementSurface, WalletAuthenticationSurface, WalletLockGenerationSurface, RuntimeStartupSurface, SigningEngineLifecycleEventSurface, WorkerOperationContext, SigningSessionSurface, Ed25519SessionConnectionSurface, EcdsaSessionBootstrapSurface, EmailOtpSigningSessionSurface, EmailOtpRegistrationEnrollmentSurface, EcdsaLoginSessionSurface, EcdsaSessionControlSurface, SignerWorkerContextSurface, WarmSessionStatusSurface, NearSigningSurface, EvmFamilySigningSurface, TempoNonceLifecycleSurface, UserProfileStoreSurface, RegistrationResourceWarmupSurface, RegistrationAccountSurface, EcdsaRegistrationSurface, Ed25519YaoCapabilityActivationSurface, UnlockedEd25519ExportRootCapabilitySurface, WalletCustodyCeremonySurface, Ed25519MaterialOwnerQueueSurface, Pick<AccountSyncSigningSurface, 'storeNearThresholdKeyMaterial'>, WebAuthnRegistrationConfirmationSurface, EmailOtpEnrollmentConfirmationSurface, PasskeyLoginAssertionSurface, KeyExportSigningSurface {
+export interface SeamsWebSigningSurface extends RpIdSurface, NonceCoordinatorSurface, WalletIframeWarmupSurface, WalletIframeSurfaceMeasurementSurface, WalletAuthenticationSurface, WalletLockGenerationSurface, RuntimeStartupSurface, SigningEngineLifecycleEventSurface, WorkerOperationContext, SigningSessionSurface, Ed25519SessionConnectionSurface, EcdsaSessionBootstrapSurface, EmailOtpSigningSessionSurface, EmailOtpRegistrationEnrollmentSurface, EcdsaLoginSessionSurface, EcdsaSessionControlSurface, SignerWorkerContextSurface, WarmSessionStatusSurface, NearSigningSurface, EvmFamilySigningSurface, TempoNonceLifecycleSurface, UserProfileStoreSurface, RegistrationResourceWarmupSurface, RegistrationAccountSurface, EcdsaRegistrationSurface, Ed25519YaoCapabilityActivationSurface, UnlockedEd25519ExportRootCapabilitySurface, WalletCustodyCeremonySurface, Ed25519MaterialOwnerQueueSurface, Pick<AccountSyncSigningSurface, 'storeNearThresholdKeyMaterial'>, WebAuthnRegistrationConfirmationSurface, EmailOtpOwnerConfirmationSurface, PasskeyLoginAssertionSurface, KeyExportSigningSurface {
     readonly seamsWebConfigs: SeamsConfigsReadonly;
     dispose(): void;
     setAppearance(appearance: AppearanceConfig): void;

package/dist/types/wallet/src/SeamsWeb/walletIframe/client/router.d.ts

@@ -245,12 +245,8 @@ export declare class WalletIframeRouter {
     requestEmailCode(payload: Parameters<AuthCapability['requestEmailCode']>[0]): ReturnType<AuthCapability['requestEmailCode']>;
     private googleEmailOtpWalletAuthFlowFromWire;
     startGoogleSignIn(payload: GoogleEmailOtpWalletAuthStartInput): Promise<GoogleEmailOtpWalletAuthResult<GoogleEmailOtpWalletAuthFlow>>;
-    getCodeStatus(payload: {
-        walletId: string;
-    }): Promise<WalletRecoveryCodeStatusResult>;
-    confirmBackup(payload: {
-        walletId: string;
-    }): Promise<WalletRecoveryBackupAcknowledgementResult>;
+    getCodeStatus(payload: Parameters<RecoveryCapability['getCodeStatus']>[0]): Promise<WalletRecoveryCodeStatusResult>;
+    confirmBackup(payload: Parameters<RecoveryCapability['confirmBackup']>[0]): Promise<WalletRecoveryBackupAcknowledgementResult>;
     requestWalletCustodyEmailOtpChallenge(payload: {
         walletId: string;
         providerSubjectId: string;

package/dist/types/wallet/src/SeamsWeb/walletIframe/host/WalletHostRuntime.d.ts

@@ -74,6 +74,7 @@ export declare class WalletHostRuntime {
     private syncAccountDomain;
     private onNearAccountChange;
     private getCodeStatusDomain;
+    private preloadedCodeStatusDomain;
     private confirmBackupDomain;
     private loadPendingWalletRecoveryCodeBackupRequest;
     private requestWalletCustodyEmailOtpChallengeDomain;

package/dist/types/wallet/src/SeamsWeb/walletIframe/host/requestWalletMove.d.ts

@@ -4,7 +4,7 @@ import type { BrowserSigningSurface } from '../../signingSurface/BrowserSigningS
 import { type WalletHostManagementRequestV1 } from '../../operations/devices/walletHostOwnerAuthority';
 type Context = WalletPlacementSession & {
     readonly managementRequest: WalletHostManagementRequestV1;
-    readonly signingEngine: Pick<BrowserSigningSurface, 'getAuthenticationCredentialsSerialized' | 'requestEmailOtpEnrollmentConfirmation'>;
+    readonly signingEngine: Pick<BrowserSigningSurface, 'getAuthenticationCredentialsSerialized' | 'requestEmailOtpOwnerConfirmation'>;
 };
 export declare function requestWalletMove(host: Context, raw: WalletMoveRequest): Promise<WalletMoveStatusResult>;
 export {};

package/dist/types/wallet/src/SeamsWeb/walletIframe/shared/messages.d.ts

@@ -510,6 +510,10 @@ type PMEmailOtpChallengePayload = Omit<Extract<RequestEmailCodeInput, {
 }>, 'onEvent'> | Omit<Extract<RequestEmailCodeInput, {
     method: 'email';
 }>, 'onEvent'>;
+interface PMWalletRecoveryOwnerPayload {
+    walletId: string;
+    authorization: import('../../publicApi/types').WalletRecoveryOwnerFactor;
+}
 interface PMWalletRecoverySessionPayload {
     walletId: string;
 }
@@ -620,7 +624,7 @@ export type ParentToChildEnvelope = RpcEnvelope<'PM_ACTIVATE_TRANSACTION_REVIEW'
     readonly moveId: string;
 }> | RpcEnvelope<'PM_GET_WALLET_PLACEMENT', {
     readonly walletId: string;
-}> | RpcEnvelope<'PM_GET_WALLET_SESSION', PMGetWalletSessionPayload> | RpcEnvelope<'PM_GET_EXACT_WALLET_SESSION_STATE', PMGetExactWalletSessionStatePayload> | RpcEnvelope<'PM_GET_NEAR_PROVISIONING_STATE', PMGetNearProvisioningStatePayload> | RpcEnvelope<'PM_REQUEST_EMAIL_OTP_CHALLENGE', PMEmailOtpChallengePayload> | RpcEnvelope<'PM_BEGIN_GOOGLE_EMAIL_OTP_WALLET_AUTH', PMGoogleEmailOtpWalletAuthStartPayload> | RpcEnvelope<'PM_GOOGLE_EMAIL_OTP_WALLET_AUTH_RESEND', PMGoogleEmailOtpWalletAuthHandlePayload> | RpcEnvelope<'PM_GOOGLE_EMAIL_OTP_WALLET_AUTH_REROLL_WALLET_ID', PMGoogleEmailOtpWalletAuthHandlePayload> | RpcEnvelope<'PM_GOOGLE_EMAIL_OTP_WALLET_AUTH_SUBMIT', PMGoogleEmailOtpWalletAuthSubmitPayload> | RpcEnvelope<'PM_GOOGLE_EMAIL_OTP_WALLET_AUTH_COMPLETE_REGISTRATION', PMGoogleEmailOtpWalletAuthHandlePayload> | RpcEnvelope<'PM_GOOGLE_EMAIL_OTP_WALLET_AUTH_CANCEL', PMGoogleEmailOtpWalletAuthHandlePayload> | RpcEnvelope<'PM_GET_WALLET_RECOVERY_CODE_STATUS', PMWalletRecoverySessionPayload> | RpcEnvelope<'PM_ACKNOWLEDGE_WALLET_RECOVERY_CODE_BACKUP', PMWalletRecoverySessionPayload> | RpcEnvelope<'PM_ROTATE_WALLET_RECOVERY_CODES', PMRotateWalletRecoveryCodesPayload> | RpcEnvelope<'PM_REQUEST_WALLET_CUSTODY_EMAIL_OTP_CHALLENGE', PMRequestWalletCustodyEmailOtpChallengePayload> | RpcEnvelope<'PM_SIGN_TX_WITH_ACTIONS', PMSignTxPayload> | ReviewedTransactionEnvelope<RpcEnvelope<'PM_SIGN_AND_SEND_TX', PMSignAndSendTxPayload>> | RpcEnvelope<'PM_SEND_TRANSACTION', PMSendTxPayload> | RpcEnvelope<'PM_SIGN_DELEGATE_ACTION', PMSignDelegateActionPayload> | RpcEnvelope<'PM_SIGN_NEP413', PMSignNep413Payload> | ReviewedTransactionEnvelope<RpcEnvelope<'PM_SIGN_TEMPO', PMSignTempoPayload>> | RpcEnvelope<'PM_REPORT_TEMPO_BROADCAST_ACCEPTED', PMReportTempoBroadcastAcceptedPayload> | RpcEnvelope<'PM_REPORT_TEMPO_BROADCAST_REJECTED', PMReportTempoBroadcastRejectedPayload> | RpcEnvelope<'PM_REPORT_TEMPO_FINALIZED', PMReportTempoFinalizedPayload> | RpcEnvelope<'PM_REPORT_TEMPO_DROPPED_OR_REPLACED', PMReportTempoDroppedOrReplacedPayload> | RpcEnvelope<'PM_RECONCILE_TEMPO_NONCE_LANE', PMReconcileTempoNonceLanePayload> | RpcEnvelope<'PM_RESOLVE_EXACT_KEY_EXPORT_LANE', PMResolveExactKeyExportLanePayload> | RpcEnvelope<'PM_EXPORT_KEYPAIR_UI', PMExportKeypairUiPayload> | RpcEnvelope<'PM_GET_RECENT_UNLOCKS'> | RpcEnvelope<'PM_SET_CONFIRM_BEHAVIOR', PMSetConfirmBehaviorPayload> | RpcEnvelope<'PM_SET_CONFIRMATION_CONFIG', PMSetConfirmationConfigPayload> | RpcEnvelope<'PM_GET_CONFIRMATION_CONFIG'> | RpcEnvelope<'PM_HAS_PASSKEY', PMHasPasskeyPayload> | RpcEnvelope<'PM_LIST_LINKED_DEVICES', PMListLinkedDevicesPayload> | RpcEnvelope<'PM_REVOKE_LINKED_DEVICE', PMRevokeLinkedDevicePayload> | RpcEnvelope<'PM_SCAN_AND_LINK_DEVICE', {
+}> | RpcEnvelope<'PM_GET_WALLET_SESSION', PMGetWalletSessionPayload> | RpcEnvelope<'PM_GET_EXACT_WALLET_SESSION_STATE', PMGetExactWalletSessionStatePayload> | RpcEnvelope<'PM_GET_NEAR_PROVISIONING_STATE', PMGetNearProvisioningStatePayload> | RpcEnvelope<'PM_REQUEST_EMAIL_OTP_CHALLENGE', PMEmailOtpChallengePayload> | RpcEnvelope<'PM_BEGIN_GOOGLE_EMAIL_OTP_WALLET_AUTH', PMGoogleEmailOtpWalletAuthStartPayload> | RpcEnvelope<'PM_GOOGLE_EMAIL_OTP_WALLET_AUTH_RESEND', PMGoogleEmailOtpWalletAuthHandlePayload> | RpcEnvelope<'PM_GOOGLE_EMAIL_OTP_WALLET_AUTH_REROLL_WALLET_ID', PMGoogleEmailOtpWalletAuthHandlePayload> | RpcEnvelope<'PM_GOOGLE_EMAIL_OTP_WALLET_AUTH_SUBMIT', PMGoogleEmailOtpWalletAuthSubmitPayload> | RpcEnvelope<'PM_GOOGLE_EMAIL_OTP_WALLET_AUTH_COMPLETE_REGISTRATION', PMGoogleEmailOtpWalletAuthHandlePayload> | RpcEnvelope<'PM_GOOGLE_EMAIL_OTP_WALLET_AUTH_CANCEL', PMGoogleEmailOtpWalletAuthHandlePayload> | RpcEnvelope<'PM_GET_WALLET_RECOVERY_CODE_STATUS', PMWalletRecoveryOwnerPayload> | RpcEnvelope<'PM_ACKNOWLEDGE_WALLET_RECOVERY_CODE_BACKUP', PMWalletRecoveryOwnerPayload> | RpcEnvelope<'PM_ROTATE_WALLET_RECOVERY_CODES', PMRotateWalletRecoveryCodesPayload> | RpcEnvelope<'PM_REQUEST_WALLET_CUSTODY_EMAIL_OTP_CHALLENGE', PMRequestWalletCustodyEmailOtpChallengePayload> | RpcEnvelope<'PM_SIGN_TX_WITH_ACTIONS', PMSignTxPayload> | ReviewedTransactionEnvelope<RpcEnvelope<'PM_SIGN_AND_SEND_TX', PMSignAndSendTxPayload>> | RpcEnvelope<'PM_SEND_TRANSACTION', PMSendTxPayload> | RpcEnvelope<'PM_SIGN_DELEGATE_ACTION', PMSignDelegateActionPayload> | RpcEnvelope<'PM_SIGN_NEP413', PMSignNep413Payload> | ReviewedTransactionEnvelope<RpcEnvelope<'PM_SIGN_TEMPO', PMSignTempoPayload>> | RpcEnvelope<'PM_REPORT_TEMPO_BROADCAST_ACCEPTED', PMReportTempoBroadcastAcceptedPayload> | RpcEnvelope<'PM_REPORT_TEMPO_BROADCAST_REJECTED', PMReportTempoBroadcastRejectedPayload> | RpcEnvelope<'PM_REPORT_TEMPO_FINALIZED', PMReportTempoFinalizedPayload> | RpcEnvelope<'PM_REPORT_TEMPO_DROPPED_OR_REPLACED', PMReportTempoDroppedOrReplacedPayload> | RpcEnvelope<'PM_RECONCILE_TEMPO_NONCE_LANE', PMReconcileTempoNonceLanePayload> | RpcEnvelope<'PM_RESOLVE_EXACT_KEY_EXPORT_LANE', PMResolveExactKeyExportLanePayload> | RpcEnvelope<'PM_EXPORT_KEYPAIR_UI', PMExportKeypairUiPayload> | RpcEnvelope<'PM_GET_RECENT_UNLOCKS'> | RpcEnvelope<'PM_SET_CONFIRM_BEHAVIOR', PMSetConfirmBehaviorPayload> | RpcEnvelope<'PM_SET_CONFIRMATION_CONFIG', PMSetConfirmationConfigPayload> | RpcEnvelope<'PM_GET_CONFIRMATION_CONFIG'> | RpcEnvelope<'PM_HAS_PASSKEY', PMHasPasskeyPayload> | RpcEnvelope<'PM_LIST_LINKED_DEVICES', PMListLinkedDevicesPayload> | RpcEnvelope<'PM_REVOKE_LINKED_DEVICE', PMRevokeLinkedDevicePayload> | RpcEnvelope<'PM_SCAN_AND_LINK_DEVICE', {
     qrData: QrLinkedDeviceSessionPayloadV5;
     options?: {
         confirmationConfig?: Partial<ConfirmationConfig>;

package/dist/types/wallet/src/SeamsWeb/walletIframe/shared/recoveryAuthorization.d.ts

@@ -0,0 +1,6 @@
+import type { WalletRecoveryOwnerFactor } from '../../publicApi/types';
+export declare function parseWalletRecoveryRequest(value: unknown): {
+    readonly walletId: string;
+    readonly authorization: WalletRecoveryOwnerFactor;
+};
+//# sourceMappingURL=recoveryAuthorization.d.ts.map

package/dist/types/wallet/src/core/indexedDB/seamsWalletDB/pendingWalletRecoveryCodeBackup.d.ts

@@ -1,17 +1,28 @@
 import { type WalletRecoveryCodeSet } from '../../../../../shared-ts/src/wallet-recovery';
 type PendingWalletRecoveryCodeBackup = {
+    readonly kind: 'awaiting_commit';
     readonly walletId: string;
     readonly recoveryCodes: WalletRecoveryCodeSet;
+    readonly issuedAtMs?: never;
+} | {
+    readonly kind: 'ready';
+    readonly walletId: string;
+    readonly recoveryCodes: WalletRecoveryCodeSet;
+    readonly issuedAtMs: number;
+};
+export type PendingWalletRecoveryBackupRef = {
+    readonly walletId: string;
+    readonly pendingBackupId: string;
 };
 declare class PendingWalletRecoveryCodeBackupRepository {
     write(input: {
         readonly walletId: string;
         readonly recoveryCodes: readonly string[];
-        readonly issuedAtMs?: number;
-    }): Promise<void>;
+    }): Promise<PendingWalletRecoveryBackupRef>;
     read(walletIdInput: string): Promise<PendingWalletRecoveryCodeBackup | null>;
     has(walletId: string): Promise<boolean>;
-    delete(walletIdInput: string): Promise<void>;
+    bindIssuedAtMs(ref: PendingWalletRecoveryBackupRef, serverIssuedAtMs: number): Promise<void>;
+    deleteIssuedAtMs(walletIdInput: string, issuedAtMs: number): Promise<void>;
 }
 export declare const pendingWalletRecoveryCodeBackupRepository: PendingWalletRecoveryCodeBackupRepository;
 export {};

package/dist/types/wallet/src/core/rpcClients/relayer/walletRecoveryRotate.d.ts

@@ -59,12 +59,17 @@ export type WalletRecoveryCodeStatusResult = {
 export declare function readWalletRecoveryCodeStatus(args: {
     readonly relayUrl: string;
     readonly walletId: string;
+    readonly requestId: string;
+    readonly factorProof: WalletCustodyFactorProof;
     readonly fetchImpl?: typeof fetch;
 }): Promise<WalletRecoveryCodeStatusResult>;
 export type WalletRecoveryBackupAcknowledgementResult = {
     readonly kind: 'acknowledged';
     readonly walletId: string;
     readonly issuedAtMs: number;
+} | {
+    readonly kind: 'conflict';
+    readonly message: string;
 } | {
     readonly kind: 'no_recovery_set';
     readonly message: string;
@@ -78,6 +83,9 @@ export type WalletRecoveryBackupAcknowledgementResult = {
 export declare function acknowledgeWalletRecoveryBackup(args: {
     readonly relayUrl: string;
     readonly walletId: string;
+    readonly requestId: string;
+    readonly expectedIssuedAtMs: number;
+    readonly factorProof: WalletCustodyFactorProof;
     readonly fetchImpl?: typeof fetch;
 }): Promise<WalletRecoveryBackupAcknowledgementResult>;
 export type WalletRecoverySetRotateResult = {

package/dist/types/wallet/src/core/signingEngine/uiConfirm/ui/preact/RecoveryCodeBackupSurface.d.ts

@@ -16,6 +16,7 @@ export type RecoveryBackupCloseDetail = {
 } | {
     readonly kind: 'recovery_codes';
     readonly acknowledged: boolean;
+    readonly request: WalletRecoveryCodeBackupRequestV1;
 };
 export type RecoveryBackupStage = 'summary' | 'opening' | 'recovery_codes';
 type SummaryLoadState = {

package/dist/types/wallet/src/core/signingEngine/walletCustody/walletRecoveryRotation.d.ts

@@ -1,5 +1,6 @@
 import { type WalletRecoverySetRotationWorkerResultV1 } from '../../../../../shared-ts/src/wallet-recovery/walletRecoveryRotation';
 import type { PasskeyCustodyEnvelopeRecord } from '../../../../../shared-ts/src/passkey-custody';
+import type { WalletRecoverySetRotationWireV1 } from '../../../../../shared-ts/src/wallet-recovery/walletRecoveryEnvelopeSet';
 import { type WalletCustodyFactorProof, type WalletRecoverySetRotateResult } from '../../rpcClients/relayer/walletRecoveryRotate';
 type WalletRecoveryRotationWorker = {
     rotateRecoverySet(args: {
@@ -8,10 +9,26 @@ type WalletRecoveryRotationWorker = {
         readonly recoveryCodesJson: string;
     }): Promise<WalletRecoverySetRotationWorkerResultV1>;
 };
-export type WalletRecoveryFactorProofFactory = (input: {
+export type WalletRecoveryFactorProofRequest = {
+    readonly operation: 'recovery_status';
+    readonly payload: {
+        readonly walletId: string;
+        readonly requestId: string;
+    };
+} | {
     readonly operation: 'recovery_rotate';
-    readonly payload: Record<string, unknown>;
-}) => Promise<WalletCustodyFactorProof>;
+    readonly payload: {
+        readonly walletId: string;
+        readonly expectedStoreVersion: string;
+        readonly manifestKekWraps: WalletRecoverySetRotationWireV1['manifestKekWraps'];
+        readonly entries: readonly WalletRecoverySetRotationWireV1['entry'][];
+        readonly recoveryCodeLocators: readonly {
+            readonly locatorB64u: string;
+            readonly recoveryKeyId: string;
+        }[];
+    };
+};
+export type WalletRecoveryFactorProofFactory = (request: WalletRecoveryFactorProofRequest) => Promise<WalletCustodyFactorProof>;
 type EmailOtpWalletRecoveryRotationWorker = {
     rotateRecoverySet(args: {
         readonly recoveryCodesJson: string;
@@ -36,6 +53,7 @@ export declare function rotateWalletRecoverySetWithActiveFactorV1(input: {
     readonly relayUrl: string;
     readonly walletId: string;
     readonly factorProof: WalletRecoveryFactorProofFactory;
+    readonly statusRequestId: string;
     readonly custodyEnvelope: PasskeyCustodyEnvelopeRecord;
     readonly factorSecret: ArrayBuffer;
     readonly worker: WalletRecoveryRotationWorker;
@@ -45,6 +63,7 @@ export declare function rotateWalletRecoverySetWithEmailOtpV1(input: {
     readonly relayUrl: string;
     readonly walletId: string;
     readonly factorProof: WalletRecoveryFactorProofFactory;
+    readonly statusRequestId: string;
     readonly worker: EmailOtpWalletRecoveryRotationWorker;
     readonly fetchImpl?: typeof fetch;
 }): Promise<WalletRecoveryRotationOutcome>;

package/dist/types/wallet/src/core/signingEngine/workerManager/workerTypes.d.ts

@@ -570,6 +570,7 @@ export interface EmailOtpWorkerOperationMap {
         payload: {
             relayUrl: string;
             walletId: string;
+            walletAuthMethodId: string;
             userId: string;
             groupId: string;
             routePlan: EmailOtpRoutePlan;

package/dist/types/wallet/src/core/signingEngine/workerManager/workers/email-otp/unlock.d.ts

@@ -107,6 +107,7 @@ export declare function loginWithEmailOtpAndUnlockWallet(args: {
 export type EmailOtpWalletCustodySeedUnlock = {
     readonly relayUrl: string;
     readonly walletId: string;
+    readonly walletAuthMethodId: string;
     readonly userId: string;
     readonly groupId: string;
     readonly routePlan: EmailOtpRoutePlan;

package/dist/types/wallet/src/core/types/sdkSentEvents.d.ts

@@ -280,12 +280,18 @@ export interface AfterCall<T> {
     (success: true, result: T): void | Promise<void>;
     (success: false, result?: undefined, error?: Error): void | Promise<void>;
 }
-export type WalletRecoveryCodeBackupRequestV1 = {
+type WalletRecoveryCodeBackupRequestBaseV1 = {
     readonly kind: 'wallet_recovery_code_backup_request_v1';
     readonly walletId: string;
     readonly recoveryCodes: readonly string[];
-    readonly continuation: 'registration_may_defer' | 'pending_backup_must_finish';
 };
+export type WalletRecoveryCodeBackupRequestV1 = WalletRecoveryCodeBackupRequestBaseV1 & ({
+    readonly continuation: 'registration_may_defer';
+    readonly issuedAtMs?: never;
+} | {
+    readonly continuation: 'pending_backup_must_finish';
+    readonly issuedAtMs: number;
+});
 export type WalletRecoveryCodeBackupAcknowledgementV1 = {
     readonly kind: 'wallet_recovery_codes_backed_up_v1';
 } | {

package/dist/types/wallet/src/plugins/plugin-utils.d.ts

@@ -1,3 +1,3 @@
 import { type WalletHostVariant } from '../core/browser/walletIframe/hostVariant';
-export declare function buildWalletServiceHtml(sdkBasePath?: string, assetVersion?: string, walletHostVariant?: WalletHostVariant): string;
+export declare function buildWalletServiceHtml(sdkBasePath?: string, assetVersion?: string, walletHostVariant?: WalletHostVariant, approvedRelayerOrigins?: readonly string[]): string;
 //# sourceMappingURL=plugin-utils.d.ts.map

package/dist/workers/email-otp.worker.js

@@ -11206,7 +11206,10 @@ async function unlockEmailOtpWalletCustodySeed(args, missingMaterialMessage) {
   const recovered = await loginWithEmailOtpAndUnlockWallet({
     relayUrl: args.relayUrl,
     walletId: args.walletId,
-    authoritySelector: { kind: "wallet" },
+    authoritySelector: {
+      kind: "wallet_auth_method",
+      walletAuthMethodId: args.walletAuthMethodId
+    },
     userId: args.userId,
     groupId: args.groupId,
     routePlan: args.routePlan,
@@ -12430,6 +12433,7 @@ function parseEmailOtpWalletUnlockVerification(value) {
 var EMAIL_OTP_CUSTODY_SEED_UNLOCK_FIELDS = [
   "relayUrl",
   "walletId",
+  "walletAuthMethodId",
   "userId",
   "groupId",
   "routePlan",
@@ -12452,6 +12456,7 @@ function parseEmailOtpWalletCustodySeedUnlock(payload, type, missingOtpMessage)
   return {
     relayUrl: readString(payload.relayUrl, "relayUrl"),
     walletId: readString(payload.walletId, "walletId"),
+    walletAuthMethodId: readString(payload.walletAuthMethodId, "walletAuthMethodId"),
     userId: readString(payload.userId, "userId"),
     groupId: readString(payload.groupId, "groupId"),
     routePlan: readRoutePlan(payload.routePlan, type),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@seams/wallet",
-  "version": "0.20.0",
+  "version": "0.21.0",
   "type": "module",
   "description": "Seams web and runtime TypeScript SDK for NEAR and EVM-family wallets",
   "main": "./dist/esm/index.js",