@seams/wallet 0.20.0 → 0.22.0

package/dist/.build-inputs.sha256

@@ -1 +1 @@
-ef30321cd5b565616660d36d432cfc1cbad35e5433fc5a146f3d33cf9d2d6dda
+457a3a44df7bb82ea046daa003a51f06837f317a1ab7bbe92293931ea7e74773

package/dist/esm/SeamsWeb/SeamsWeb.js

@@ -176,10 +176,10 @@ var SeamsWeb = class {
 		return this.events.subscribe(deliverNearProvisioningStateChanged.bind(null, listener));
 	}
 	async getCodeStatusDomain(args) {
-		return await (await this.walletIframe.requireRouter()).getCodeStatus({ walletId: args.walletId });
+		return await (await this.walletIframe.requireRouter()).getCodeStatus(args);
 	}
 	async confirmBackupDomain(args) {
-		return await (await this.walletIframe.requireRouter()).confirmBackup({ walletId: args.walletId });
+		return await (await this.walletIframe.requireRouter()).confirmBackup(args);
 	}
 	async requestWalletCustodyEmailOtpChallengeDomain(args) {
 		return await requestWalletCustodyEmailOtpChallenge({

package/dist/esm/SeamsWeb/operations/recovery/walletRecoveryCodeBackup.js

@@ -38,11 +38,22 @@ async function showRecoveryCodeExperience(experience, measurementBinding = { kin
 					return;
 				case "recovery_codes":
 					if (detail.acknowledged) {
-						settle({ kind: "wallet_recovery_codes_backed_up_v1" });
+						if (experience.kind === "account_menu") {
+							if (detail.request.continuation !== "pending_backup_must_finish") {
+								settle(/* @__PURE__ */ new Error("Displayed recovery codes have no committed issuance"));
+								return;
+							}
+							settle({
+								kind: "account_menu_backed_up",
+								issuedAtMs: detail.request.issuedAtMs
+							});
+							return;
+						}
+						settle({ kind: "registration_backed_up" });
 						return;
 					}
 					if (experience.kind === "direct_backup" && experience.request.continuation === "registration_may_defer") {
-						settle({ kind: "wallet_recovery_code_backup_deferred_v1" });
+						settle({ kind: "deferred" });
 						return;
 					}
 					settle(new Error(CANCELLED_MESSAGE));
@@ -73,16 +84,25 @@ async function showRecoveryCodeExperience(experience, measurementBinding = { kin
 	});
 }
 async function showWalletRecoveryCodeBackupUi(request, measurementBinding = { kind: "disabled" }) {
-	return await showRecoveryCodeExperience({
+	switch ((await showRecoveryCodeExperience({
 		kind: "direct_backup",
 		request
-	}, measurementBinding);
+	}, measurementBinding)).kind) {
+		case "registration_backed_up": return { kind: "wallet_recovery_codes_backed_up_v1" };
+		case "deferred": return { kind: "wallet_recovery_code_backup_deferred_v1" };
+		case "account_menu_backed_up": throw new Error("Registration backup returned an account-menu issuance");
+	}
 }
 async function showWalletRecoveryCodesUi(request, measurementBinding = { kind: "disabled" }, options = {}) {
-	return await showRecoveryCodeExperience({
+	const result = await showRecoveryCodeExperience({
 		kind: "account_menu",
 		...request
 	}, measurementBinding, options);
+	if (result.kind !== "account_menu_backed_up") throw new Error("Account-menu backup did not acknowledge committed recovery codes");
+	return {
+		kind: "wallet_recovery_codes_backed_up_v1",
+		issuedAtMs: result.issuedAtMs
+	};
 }
 function postRecoveryMeasurement(dialog, postMeasurement, measurement) {
 	if (measurement.kind !== "measured_v1") throw new Error("Recovery codes require a request surface measurement");

package/dist/esm/SeamsWeb/operations/tempo/executeEvmFamilyTransaction.js

@@ -1,6 +1,7 @@
 import { chainFamilyFromNetwork } from "../../../core/config/chains.js";
 import { thresholdEcdsaChainTargetFromConfig, thresholdEcdsaChainTargetKey, toWalletId } from "../../../core/signingEngine/interfaces/ecdsaChainTarget.js";
 import { SigningEventPhase, createSigningFlowEvent } from "../../../core/types/sdkSentEvents.js";
+import { parseRpcHexQuantity } from "../../../shared-ts/src/utils/evmRpcResults.js";
 import { createEvmClient } from "../../../core/rpcClients/evm/EvmClient.js";
 //#region src/SeamsWeb/operations/tempo/executeEvmFamilyTransaction.ts
 /**
@@ -427,8 +428,8 @@ async function executeEvmFamilyTransactionLifecycle(args) {
 				abortController.abort(createLifecycleTimeoutError("Transaction finalization watchdog timed out"));
 			}
 		});
-		const status = normalizeToken(receipt.status);
-		if (status && status !== "0x1" && status !== "0x01") {
+		const status = parseRpcHexQuantity(receipt.status, "receipt.status");
+		if (status === 0n) {
 			await args.lifecycle.reportFinalized({
 				walletSession: args.input.walletSession,
 				signedResult,
@@ -442,6 +443,7 @@ async function executeEvmFamilyTransactionLifecycle(args) {
 			reverted.txHash = txHash;
 			throw reverted;
 		}
+		if (status !== 1n) throw new Error(`Unexpected transaction receipt status ${receipt.status}`);
 		const payloadExpectation = ensurePayloadExpectation(args.input);
 		const payloadVerification = await verifyFinalizedPayload({
 			rpcUrl,

package/dist/esm/SeamsWeb/walletIframe/client/router.js

@@ -41,6 +41,7 @@ function requestSurfaceKindForMessage(type, payload) {
 		case "PM_ADD_PASSKEY":
 		case "PM_ROTATE_WALLET_RECOVERY_CODES": return "registration";
 		case "PM_ADD_EMAIL_OTP": return "email_otp_enrollment";
+		case "PM_GET_WALLET_RECOVERY_CODE_STATUS":
 		case "PM_ACKNOWLEDGE_WALLET_RECOVERY_CODE_BACKUP": return "recovery_codes";
 		case "PM_SIGN_TX_WITH_ACTIONS":
 		case "PM_SIGN_AND_SEND_TX":
@@ -2047,10 +2048,11 @@ var WalletIframeRouter = class {
 		} : res.result;
 	}
 	async getCodeStatus(payload) {
+		await this.ensureConfigured();
 		return (await this.post({
 			type: "PM_GET_WALLET_RECOVERY_CODE_STATUS",
 			payload
-		})).result;
+		}, { timeout: "interactive" })).result;
 	}
 	async confirmBackup(payload) {
 		await this.ensureConfigured();
@@ -2066,10 +2068,11 @@ var WalletIframeRouter = class {
 		})).result;
 	}
 	async rotateCodes(payload) {
+		await this.ensureConfigured();
 		return (await this.post({
 			type: "PM_ROTATE_WALLET_RECOVERY_CODES",
 			payload
-		})).result;
+		}, { timeoutMs: WALLET_IFRAME_REGISTRATION_TIMEOUT_MS })).result;
 	}
 	async checkLoginStatus() {
 		return {

package/dist/esm/core/rpcClients/evm/EvmClient.js

@@ -175,11 +175,15 @@ function createEvmClient(args) {
 		}
 		return payload.result;
 	};
-	const getTransactionReceipt = async (receiptArgs) => decodeEvmTransactionReceipt(await request({
-		method: "eth_getTransactionReceipt",
-		params: [receiptArgs.txHash],
-		...receiptArgs.timeoutMs != null ? { timeoutMs: receiptArgs.timeoutMs } : {}
-	}));
+	const getTransactionReceipt = async (receiptArgs) => {
+		const receipt = decodeEvmTransactionReceipt(await request({
+			method: "eth_getTransactionReceipt",
+			params: [receiptArgs.txHash],
+			...receiptArgs.timeoutMs != null ? { timeoutMs: receiptArgs.timeoutMs } : {}
+		}));
+		if (receipt && receipt.transactionHash.toLowerCase() !== receiptArgs.txHash.toLowerCase()) throw new Error("Receipt transactionHash does not match the requested transaction");
+		return receipt;
+	};
 	const getBlockByNumber = async (blockArgs) => decodeEvmBlockHeader(await request({
 		method: "eth_getBlockByNumber",
 		params: [blockArgs.blockTag, false],
@@ -230,10 +234,8 @@ function createEvmClient(args) {
 			} catch (error) {
 				lastRpcError = error instanceof Error ? error.message : String(error);
 			}
-			if (receipt && typeof receipt === "object" && typeof receipt.blockNumber === "string") {
-				const receiptBlockHex = toHexQuantityOrNull(receipt.blockNumber);
-				if (!receiptBlockHex) throw new Error("Receipt missing valid blockNumber");
-				const receiptBlockNumber = parseRpcHexQuantity(receiptBlockHex, "receipt.blockNumber");
+			if (receipt) {
+				const receiptBlockNumber = parseRpcHexQuantity(receipt.blockNumber, "receipt.blockNumber");
 				if (confirmations <= 1) return receipt;
 				const remainingMs = Math.max(1, deadline - Date.now());
 				const latestBlockHex = toHexQuantityOrNull((await getBlockByNumber({

package/dist/esm/core/signingEngine/flows/signEvmFamily/thresholdAdmission.js

@@ -73,7 +73,7 @@ function operationStepUpProof(args) {
 						signature: credential.response.signature,
 						userHandle: credential.response.userHandle ?? null
 					},
-					clientExtensionResults: credential.clientExtensionResults ?? null
+					clientExtensionResults: null
 				}
 			};
 		}

package/dist/esm/core/signingEngine/uiConfirm/ui/preact/RecoveryCodeBackupSurface.js

@@ -52,14 +52,7 @@ function statusLabel(status) {
 	}
 }
 function canViewPendingRecoveryCodes(loadState) {
-	if (loadState.kind !== "loaded") return true;
-	switch (loadState.status.kind) {
-		case "ready": return loadState.status.pendingLocalBackup;
-		case "unauthorized":
-		case "transport_failed": return true;
-		case "no_recovery_set": return false;
-		default: return assertNever(loadState.status);
-	}
+	return loadState.kind === "loaded" && loadState.status.kind === "ready" && loadState.status.pendingLocalBackup;
 }
 function recoveryStatusFailureMessage(loadState) {
 	if (loadState.kind === "error") return loadState.message;
@@ -211,6 +204,14 @@ var RecoveryCodeBackupSurface = class extends Component {
 		const experience = this.props.experience;
 		const current = this.state.viewState;
 		if (experience.kind !== "account_menu" || current.kind !== "summary") return;
+		if (current.loadState.kind !== "loaded" || current.loadState.status.kind !== "ready") {
+			this.setState({ viewState: {
+				...current,
+				actionError: "Verify recovery-code status before opening saved codes."
+			} });
+			return;
+		}
+		const issuedAtMs = current.loadState.status.issuedAtMs;
 		const generation = this.loadGeneration;
 		this.setState({ viewState: {
 			...current,
@@ -227,6 +228,13 @@ var RecoveryCodeBackupSurface = class extends Component {
 				} });
 				return;
 			}
+			if (request.continuation !== "pending_backup_must_finish" || request.issuedAtMs !== issuedAtMs) {
+				this.setState({ viewState: {
+					...current,
+					actionError: "These saved codes belong to a different recovery set. Check status again."
+				} });
+				return;
+			}
 			this.setState({ viewState: {
 				kind: "recovery_codes",
 				request
@@ -243,9 +251,12 @@ var RecoveryCodeBackupSurface = class extends Component {
 		this.props.onClose({ kind: "dismissed" });
 	};
 	closeRecoveryCodes = () => {
+		const viewState = this.state.viewState;
+		if (viewState.kind !== "recovery_codes") return;
 		this.props.onClose({
 			kind: "recovery_codes",
-			acknowledged: this.state.acknowledged
+			acknowledged: this.state.acknowledged,
+			request: viewState.request
 		});
 	};
 	onAcknowledgementChange = (event) => {

package/dist/esm/core/signingEngine/uiConfirm/ui/preact/TransactionReceipt.js

@@ -1,10 +1,10 @@
 import { walletDisplayText, walletText } from "../../../../ui/messages.js";
-import { WalletLocaleContext, WalletText } from "./WalletLocale.js";
+import { WalletLocaleContext, WalletText, useWalletLocale } from "./WalletLocale.js";
 import { announceClampedSurfaceResize } from "../confirm-surface-resize.js";
 import { confirmationDocumentStyles } from "./confirmation-styles.js";
 import { ReviewDisclosure } from "./ReviewDisclosure.js";
 import { CopyReviewValue, ReviewAmount, ReviewIcon, ReviewMiddleTruncated, WalletReceiptFooter, reviewNetwork, reviewRecipient } from "./TransactionReview.js";
-import { receiptCompletedStages, receiptDescription, receiptHeading, receiptIsPending } from "../transaction-receipt.js";
+import { receiptCompletedStages, receiptDescription, receiptHeading, receiptIsComplete, receiptIsPending, receiptTitle } from "../transaction-receipt.js";
 import { Component, createRef } from "preact";
 import { Fragment as Fragment$1, jsx, jsxs } from "preact/jsx-runtime";
 //#region src/core/signingEngine/uiConfirm/ui/preact/TransactionReceipt.tsx
@@ -23,12 +23,12 @@ var TransactionReceipt = class extends Component {
 		this.props.receipt.onView("expanded");
 	};
 	close = () => {
-		if (receiptIsPending(this.props.receipt.state)) this.minimize();
+		if (receiptIsPending(this.props.receipt)) this.minimize();
 		else this.props.receipt.onDismiss();
 	};
 	componentDidUpdate(previous) {
 		const { receipt } = this.props;
-		if (receipt.view === "expanded" && previous.receipt.view === "expanded" && receipt.state.kind === "confirmed" && previous.receipt.state.kind !== "confirmed") this.revealExplorerLink();
+		if (receipt.view === "expanded" && previous.receipt.view === "expanded" && receipt.subject === "transaction" && receipt.state.kind === "confirmed" && previous.receipt.state.kind !== "confirmed") this.revealExplorerLink();
 	}
 	componentWillUnmount() {
 		this.releaseExplorerRow();
@@ -85,12 +85,13 @@ var TransactionReceipt = class extends Component {
 	}
 	render() {
 		const { receipt, data } = this.props;
-		const heading = receiptHeading(receipt.state);
-		const complete = receipt.state.kind === "confirmed" || receipt.state.kind === "signed";
-		const pending = receiptIsPending(receipt.state);
-		const completedStages = receiptCompletedStages(receipt.state);
+		const heading = receiptHeading(receipt);
+		const complete = receiptIsComplete(receipt);
+		const pending = receiptIsPending(receipt);
+		const completedStages = receiptCompletedStages(receipt);
 		const recipient = reviewRecipient(data.model);
-		const explorerHref = receipt.state.kind === "confirmed" && receipt.state.hash ? transactionExplorerHref(data.model, this.props.explorers, receipt.state.hash) : null;
+		const transaction = receipt.subject === "transaction" ? receipt.state : null;
+		const explorerHref = transaction?.kind === "confirmed" && transaction.hash ? transactionExplorerHref(data.model, this.props.explorers, transaction.hash) : null;
 		if (receipt.view === "toast") return /* @__PURE__ */ jsxs("div", {
 			class: "seams-transaction-toast",
 			"data-completed-stages": completedStages,
@@ -141,7 +142,7 @@ var TransactionReceipt = class extends Component {
 			children: [
 				/* @__PURE__ */ jsxs("div", {
 					class: "seams-review-toolbar",
-					children: [/* @__PURE__ */ jsx("span", { children: /* @__PURE__ */ jsx(WalletText, { message: "Transaction receipt" }) }), /* @__PURE__ */ jsx("button", {
+					children: [/* @__PURE__ */ jsx("span", { children: /* @__PURE__ */ jsx(WalletText, { copy: receiptTitle(receipt) }) }), /* @__PURE__ */ jsx("button", {
 						type: "button",
 						"aria-label": walletText(this.context, "Minimize transaction"),
 						onClick: this.minimize,
@@ -157,7 +158,7 @@ var TransactionReceipt = class extends Component {
 					}), /* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("h2", {
 						role: "status",
 						children: /* @__PURE__ */ jsx(WalletText, { copy: heading })
-					}), /* @__PURE__ */ jsx("p", { children: /* @__PURE__ */ jsx(WalletText, { copy: receiptDescription(receipt.state) }) })] })]
+					}), /* @__PURE__ */ jsx("p", { children: /* @__PURE__ */ jsx(WalletText, { copy: receiptDescription(receipt) }) })] })]
 				}),
 				/* @__PURE__ */ jsx(ReviewAmount, {
 					model: data.model,
@@ -183,39 +184,13 @@ var TransactionReceipt = class extends Component {
 						data.model.totals.feeSymbol
 					] })] })
 				}),
-				/* @__PURE__ */ jsxs("div", {
-					class: "seams-receipt-steps",
-					"aria-label": walletText(this.context, "Transaction progress"),
-					children: [
-						/* @__PURE__ */ jsx(ReceiptStep, {
-							stage: "signing",
-							label: walletText(this.context, "Signed"),
-							activeLabel: "Signing",
-							complete: completedStages >= 1,
-							active: receipt.state.kind === "signing"
-						}),
-						/* @__PURE__ */ jsx(ReceiptStep, {
-							stage: "broadcast",
-							label: walletText(this.context, "Broadcast"),
-							activeLabel: "Broadcasting",
-							complete: completedStages >= 2,
-							active: receipt.state.kind === "broadcasting"
-						}),
-						/* @__PURE__ */ jsx(ReceiptStep, {
-							stage: "confirming",
-							label: walletDisplayText(this.context, receipt.state.kind === "reverted" ? "Reverted" : "Confirmed"),
-							activeLabel: "Confirming",
-							complete: completedStages === 3,
-							active: receipt.state.kind === "submitted"
-						})
-					]
-				}),
+				transaction ? /* @__PURE__ */ jsx(ReceiptSteps, { state: transaction }) : receipt.subject === "message" && /* @__PURE__ */ jsx(MessageReceiptSteps, { state: receipt.state }),
 				/* @__PURE__ */ jsx(ReviewDisclosure, {
 					label: walletText(this.context, "Receipt details"),
 					children: /* @__PURE__ */ jsxs("dl", {
 						class: "seams-review-fields",
 						children: [
-							data.model?.signerAccount && /* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("dt", { children: /* @__PURE__ */ jsx(WalletText, { message: "From" }) }), /* @__PURE__ */ jsx("dd", {
+							transaction && data.model?.signerAccount && /* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("dt", { children: /* @__PURE__ */ jsx(WalletText, { message: "From" }) }), /* @__PURE__ */ jsx("dd", {
 								class: "seams-review-recipient",
 								children: /* @__PURE__ */ jsx(CopyReviewValue, {
 									value: data.model.signerAccount,
@@ -231,10 +206,11 @@ var TransactionReceipt = class extends Component {
 									label: walletDisplayText(this.context, `Copy recipient address ${recipient}`)
 								})
 							})] }),
-							receipt.state.hash && /* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("dt", { children: /* @__PURE__ */ jsx(WalletText, { message: "Transaction" }) }), /* @__PURE__ */ jsxs("dd", { children: [/* @__PURE__ */ jsx(ReviewMiddleTruncated, {
-								value: receipt.state.hash,
+							transaction?.hash && /* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("dt", { children: /* @__PURE__ */ jsx(WalletText, { message: "Transaction" }) }), /* @__PURE__ */ jsxs("dd", { children: [/* @__PURE__ */ jsx(ReviewMiddleTruncated, {
+								value: transaction.hash,
 								class: "seams-review-hash"
-							}), /* @__PURE__ */ jsx(CopyReviewValue, { value: receipt.state.hash })] })] }),
+							}), /* @__PURE__ */ jsx(CopyReviewValue, { value: transaction.hash })] })] }),
+							receipt.subject === "message" && /* @__PURE__ */ jsx(MessageReceiptFields, { model: data.model }),
 							/* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("dt", { children: /* @__PURE__ */ jsx(WalletText, { message: "Status" }) }), /* @__PURE__ */ jsx("dd", { children: /* @__PURE__ */ jsx(WalletText, { copy: heading }) })] })
 						]
 					})
@@ -243,7 +219,7 @@ var TransactionReceipt = class extends Component {
 					type: "button",
 					class: "seams-receipt-primary",
 					onClick: this.close,
-					children: receiptIsPending(receipt.state) ? /* @__PURE__ */ jsx(WalletText, { message: "Continue in background" }) : /* @__PURE__ */ jsx(WalletText, { message: "Done" })
+					children: pending ? /* @__PURE__ */ jsx(WalletText, { message: "Continue in background" }) : /* @__PURE__ */ jsx(WalletText, { message: "Done" })
 				}),
 				explorerHref && /* @__PURE__ */ jsx("div", {
 					id: this.explorerRowId,
@@ -289,6 +265,94 @@ function transactionExplorerHref(model, explorers, hash) {
 function assertNeverDisplayChain(chain) {
 	throw new Error(`Unexpected display chain: ${String(chain)}`);
 }
+function ReceiptSteps({ state }) {
+	const locale = useWalletLocale();
+	const completedStages = receiptCompletedStages({
+		subject: "transaction",
+		state
+	});
+	return /* @__PURE__ */ jsxs("div", {
+		class: "seams-receipt-steps",
+		"aria-label": walletText(locale, "Transaction progress"),
+		children: [
+			/* @__PURE__ */ jsx(ReceiptStep, {
+				stage: "signing",
+				label: walletText(locale, "Signed"),
+				activeLabel: "Signing",
+				complete: completedStages >= 1,
+				active: state.kind === "signing"
+			}),
+			/* @__PURE__ */ jsx(ReceiptStep, {
+				stage: "broadcast",
+				label: walletText(locale, "Broadcast"),
+				activeLabel: "Broadcasting",
+				complete: completedStages >= 2,
+				active: state.kind === "broadcasting"
+			}),
+			/* @__PURE__ */ jsx(ReceiptStep, {
+				stage: "confirming",
+				label: walletDisplayText(locale, state.kind === "reverted" ? "Reverted" : "Confirmed"),
+				activeLabel: "Confirming",
+				complete: completedStages === 3,
+				active: state.kind === "submitted"
+			})
+		]
+	});
+}
+/**
+* A message signature has one stage. It keeps the transaction's three tracks, so
+* the receipt has the same height, and fills them all once signed. Only the first
+* track has a label: there is no broadcast or confirmation.
+*/
+function MessageReceiptSteps({ state }) {
+	const locale = useWalletLocale();
+	const complete = state.kind === "signed";
+	const active = state.kind === "signing";
+	return /* @__PURE__ */ jsxs("div", {
+		class: "seams-receipt-steps",
+		"aria-label": walletText(locale, "Transaction progress"),
+		children: [
+			/* @__PURE__ */ jsx(ReceiptStep, {
+				stage: "signing",
+				label: walletText(locale, "Signed"),
+				activeLabel: "Signing",
+				complete,
+				active
+			}),
+			/* @__PURE__ */ jsx(ReceiptStep, {
+				stage: "signed",
+				label: "",
+				activeLabel: "",
+				complete,
+				active: false
+			}),
+			/* @__PURE__ */ jsx(ReceiptStep, {
+				stage: "signed",
+				label: "",
+				activeLabel: "",
+				complete,
+				active: false
+			})
+		]
+	});
+}
+/** The signed message's own fields: signer, recipient and message text. */
+function MessageReceiptFields({ model }) {
+	const locale = useWalletLocale();
+	const operation = model?.operations.length === 1 ? model.operations[0] : null;
+	if (operation?.kind !== "near.message") return null;
+	return /* @__PURE__ */ jsx(Fragment$1, { children: operation.fields?.map((field) => /* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("dt", { children: /* @__PURE__ */ jsx(WalletText, { copy: field.label }) }), field.renderAs === "file-content" ? /* @__PURE__ */ jsxs("dd", { children: [/* @__PURE__ */ jsx("span", {
+		class: "seams-receipt-message",
+		children: field.value
+	}), /* @__PURE__ */ jsx(CopyReviewValue, { value: field.copyValue ?? field.value })] }) : /* @__PURE__ */ jsx("dd", {
+		class: "seams-review-recipient",
+		children: /* @__PURE__ */ jsx(CopyReviewValue, {
+			value: field.copyValue ?? field.value,
+			address: true,
+			label: walletDisplayText(locale, `Copy ${field.label.toLowerCase()} address ${field.value}`)
+		})
+	})] }, field.label)) });
+}
 function ReceiptStep(props) {
 	const state = props.complete ? "complete" : props.active ? "active" : "waiting";
 	return /* @__PURE__ */ jsxs("span", {

package/dist/esm/core/signingEngine/uiConfirm/ui/preact/mountConfirmationSurface.js

@@ -191,7 +191,7 @@ var MountedConfirmationSurface = class {
 	cancel = () => {
 		if (this.state.kind !== "mounted") return;
 		if (this.receipt) {
-			if (receiptIsPending(this.receipt.state)) this.receipt.onView("toast");
+			if (receiptIsPending(this.receipt)) this.receipt.onView("toast");
 			else this.receipt.onDismiss();
 			return;
 		}

package/dist/esm/core/signingEngine/uiConfirm/ui/transaction-receipt.js

@@ -1,8 +1,15 @@
 //#region src/core/signingEngine/uiConfirm/ui/transaction-receipt.ts
-function receiptIsPending(state) {
-	return state.kind === "signing" || state.kind === "broadcasting" || state.kind === "submitted";
+function receiptIsPending(receipt) {
+	const { kind } = receipt.state;
+	return kind === "signing" || kind === "broadcasting" || kind === "submitted";
 }
-function receiptCompletedStages(state) {
+function receiptIsComplete(receipt) {
+	return receipt.state.kind === "confirmed" || receipt.state.kind === "signed";
+}
+/** A message signature has one stage, so its toast fills at once when signed. */
+function receiptCompletedStages(receipt) {
+	if (receipt.subject === "message") return receipt.state.kind === "signed" ? 3 : 0;
+	const { state } = receipt;
 	switch (state.kind) {
 		case "signing": return 0;
 		case "signed":
@@ -15,7 +22,12 @@ function receiptCompletedStages(state) {
 		default: return assertNever(state);
 	}
 }
-function receiptHeading(state) {
+function receiptTitle(receipt) {
+	return receipt.subject === "message" ? "Message signature" : "Transaction receipt";
+}
+function receiptHeading(receipt) {
+	if (receipt.subject === "message") return messageHeading(receipt.state);
+	const { state } = receipt;
 	switch (state.kind) {
 		case "signing": return "Signing transaction";
 		case "signed": return "Signature ready";
@@ -28,7 +40,9 @@ function receiptHeading(state) {
 		default: return assertNever(state);
 	}
 }
-function receiptDescription(state) {
+function receiptDescription(receipt) {
+	if (receipt.subject === "message") return messageDescription(receipt.state);
+	const { state } = receipt;
 	switch (state.kind) {
 		case "signing": return "Preparing your signed transaction.";
 		case "signed": return "Signature created, ready to broadcast.";
@@ -41,10 +55,26 @@ function receiptDescription(state) {
 		default: return assertNever(state);
 	}
 }
+function messageHeading(state) {
+	switch (state.kind) {
+		case "signing": return "Signing message";
+		case "signed": return "Message signed";
+		case "failed": return "Signature failed";
+		default: return assertNever(state);
+	}
+}
+function messageDescription(state) {
+	switch (state.kind) {
+		case "signing": return "Preparing your message signature.";
+		case "signed": return "Signed off-chain. Nothing was sent to the network.";
+		case "failed": return state.message;
+		default: return assertNever(state);
+	}
+}
 function assertNever(value) {
 	throw new Error(`Unexpected transaction receipt state: ${String(value)}`);
 }
 //#endregion
-export { receiptCompletedStages, receiptDescription, receiptHeading, receiptIsPending };
+export { receiptCompletedStages, receiptDescription, receiptHeading, receiptIsComplete, receiptIsPending, receiptTitle };
 
 //# sourceMappingURL=transaction-receipt.js.map

package/dist/esm/core/ui/messages.js

@@ -113,27 +113,18 @@ const walletMessages = [
 	["Yes, remove", "削除する"],
 	["Removing…", "削除中…"],
 	["Review appearance", "確認画面の表示"],
+	["Review before signing", "署名前に確認"],
+	["Show the transaction details, then click Continue to sign.", "トランザクションの詳細を表示し、「続ける」をクリックして署名します。"],
+	["Passkey authentication starts as soon as the details appear.", "詳細が表示されると同時にパスキー認証を開始します。"],
+	["On phones, in Safari and for Email OTP sign-in, the wallet always waits for Continue.", "スマートフォン、Safari、メールOTPでのサインインでは、常に「続ける」のクリックを待ちます。"],
 	["Choose where transaction details appear before signing.", "署名前にトランザクションの詳細を表示する場所を選択してください。"],
-	["Confirmation step", "確認操作"],
-	["Choose Modal or Drawer to configure the confirmation step.", "確認操作を設定するには、モーダルまたはドロワーを選択してください。"],
-	["Choose whether to click Continue before authentication starts.", "認証開始前に「続ける」をクリックするか選択してください。"],
-	["Confirmer UI", "確認画面"],
-	["Confirmation Options", "確認オプション"],
-	["skip click", "クリックを省略"],
-	["require click", "クリックが必要"],
 	["none", "表示なし"],
 	["modal", "モーダル"],
 	["drawer", "ドロワー"],
-	["No review", "確認画面なし"],
-	["Start authentication without showing a review panel.", "確認画面を表示せずに認証を開始します。"],
 	["Modal", "モーダル"],
 	["Review the transaction in a centered dialog.", "画面中央のダイアログでトランザクションを確認します。"],
 	["Drawer", "ドロワー"],
 	["Review the transaction in a slide-out panel.", "スライド式パネルでトランザクションを確認します。"],
-	["Start automatically", "自動で開始"],
-	["Begin authentication as soon as the review opens.", "確認画面を開くと同時に認証を開始します。"],
-	["Click to continue", "クリックして続ける"],
-	["Review the details, then click Continue to start authentication.", "詳細を確認し、「続ける」をクリックして認証を開始します。"],
 	["Unable to refresh your wallet. Try again.", "ウォレットを更新できません。もう一度お試しください。"],
 	["Key export is unavailable for this wallet.", "このウォレットでは鍵をエクスポートできません。"],
 	["NEAR signer provisioning is still in progress. Try again shortly.", "NEAR 署名機能を準備中です。しばらくしてからもう一度お試しください。"],
@@ -176,7 +167,6 @@ const walletMessages = [
 	["Reveal with passkey", "パスキーで表示"],
 	["View on explorer", "エクスプローラーで表示"],
 	["This wallet", "このウォレット"],
-	["Addresses", "アドレス"],
 	["Security & devices", "セキュリティとデバイス"],
 	["Close wallet settings", "ウォレット設定を閉じる"],
 	["Wallet account", "ウォレットアカウント"],
@@ -213,6 +203,11 @@ const walletMessages = [
 	["Confirmation unavailable", "承認状態を取得できません"],
 	["Preparing your signed transaction.", "署名済みトランザクションを準備中です。"],
 	["Signature created, ready to broadcast.", "署名を作成しました。送信する準備ができました。"],
+	["Signing message", "メッセージに署名中"],
+	["Message signed", "メッセージに署名しました"],
+	["Signature failed", "署名に失敗しました"],
+	["Preparing your message signature.", "メッセージへの署名を準備中です。"],
+	["Signed off-chain. Nothing was sent to the network.", "オフチェーンで署名しました。ネットワークには何も送信していません。"],
 	["Submitting your signed transaction to the network.", "署名済みトランザクションをネットワークに送信中です。"],
 	["Submitted to the network. Waiting for the receipt.", "ネットワークに送信しました。レシートを待機中です。"],
 	["The network confirmed your transaction.", "ネットワークがトランザクションを承認しました。"],

package/dist/esm/plugins/SeamsWeb/walletIframe/sanitization.js

@@ -0,0 +1,18 @@
+//#region src/SeamsWeb/walletIframe/sanitization.ts
+/**
+* Escapes HTML attribute values to prevent injection
+*
+* Converts special characters to HTML entities:
+* - & -> &
+* - " -> "
+* - ' -> '
+* - < -> &lt;
+* - > -> &gt;
+*/
+function escapeHtmlAttribute(value) {
+	return value.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/'/g, "&#x27;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+}
+//#endregion
+export { escapeHtmlAttribute };
+
+//# sourceMappingURL=sanitization.js.map

package/dist/esm/plugins/plugin-utils.js

@@ -1,3 +1,4 @@
+import { escapeHtmlAttribute } from "./SeamsWeb/walletIframe/sanitization.js";
 import { normalizeWalletHostVariant, walletHostScriptFileForVariant } from "./core/browser/walletIframe/hostVariant.js";
 //#region src/plugins/plugin-utils.ts
 function withAssetVersion(url, assetVersion) {
@@ -5,17 +6,19 @@ function withAssetVersion(url, assetVersion) {
 	if (!version) return url;
 	return `${url}${url.includes("?") ? "&" : "?"}v=${encodeURIComponent(version)}`;
 }
-function buildWalletServiceHtml(sdkBasePath = "/sdk", assetVersion, walletHostVariant = "runtime") {
+function buildWalletServiceHtml(sdkBasePath = "/sdk", assetVersion, walletHostVariant = "runtime", approvedRelayerOrigins = []) {
 	const walletUiCss = withAssetVersion(`${sdkBasePath}/wallet-ui.css`, assetVersion);
 	const walletShimsJs = withAssetVersion(`${sdkBasePath}/wallet-shims.js`, assetVersion);
 	const walletHostScript = withAssetVersion(`${sdkBasePath}/${walletHostScriptFileForVariant(normalizeWalletHostVariant(walletHostVariant))}`, assetVersion);
+	let relayerPolicy = "";
+	for (const origin of approvedRelayerOrigins) relayerPolicy += `    <meta name="seams-wallet-relayer-origin" content="${escapeHtmlAttribute(origin)}" />\n`;
 	return `<!doctype html>
 <html lang="en">
   <head>
     <meta charset="utf-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1" />
     <title>Web3Authn Wallet Service</title>
-    <!-- Surface styles are external so strict CSP can keep style-src 'self' -->
+${relayerPolicy}    <!-- Surface styles are external so strict CSP can keep style-src 'self' -->
     <link rel="stylesheet" href="${walletUiCss}" />
     <!-- Minimal shims some ESM bundles expect (externalized to enable strict CSP) -->
     <script src="${walletShimsJs}"><\/script>