@seams/wallet 0.23.0 → 0.24.0

package/README.md

@@ -192,8 +192,25 @@ wallet can be absent from the Console list and unavailable for region moves.
 - `@seams/wallet/threshold` — session-policy helpers, PRF salts, and intent digests.
 - `@seams/wallet/runtime` — explicit platform ports and custom signing runtime.
 
-Use the documented package exports. Agent-lane issuance and VoiceID
-authentication are planned and have no public API in this release.
+Use the documented package exports. Agent-lane issuance remains planned.
+The VoiceID approval prototype is opt-in:
+
+```ts
+import { defineSeamsConfig } from '@seams/wallet';
+import { voiceIdAuthMethod } from '@seams/voiceid';
+
+const config = defineSeamsConfig({
+  walletOrigin,
+  relayerUrl,
+  publishableKey,
+  authMethods: [voiceIdAuthMethod()],
+});
+```
+
+VoiceID is a separate optional package. The Wallet host operator must deploy its
+assets alongside the Wallet host. The descriptor alone downloads no implementation
+or models. VoiceID supports enrollment, Wallet Session unlock, and reviewed NEAR
+and Arc testnet signing. See [`@seams/voiceid`](../voiceid/README.md) for installation.
 
 ## Develop from source
 

package/THIRD_PARTY_NOTICES.md

@@ -5,7 +5,7 @@ distributed Seams Wallet SDK, server runtime, Wasm, strict Workers, and CLI.
 Dependency license expressions come from their package metadata. Packaged
 license and notice wording is reproduced below with normalized whitespace.
 
-Inventory: 451 dependency records (42 npm, 409 Cargo).
+Inventory: 469 dependency records (60 npm, 409 Cargo).
 
 ## Dependency inventory
 
@@ -439,26 +439,44 @@ Inventory: 451 dependency records (42 npm, 409 Cargo).
 | npm | @peculiar/asn1-x509-attr | 2.6.0 | MIT | PeculiarVentures, LLC |
 | npm | @peculiar/asn1-x509 | 2.6.0 | MIT | PeculiarVentures, LLC |
 | npm | @peculiar/x509 | 1.14.3 | MIT | Miroshin Stepan<microshine@mail.ru>; Peculiar Ventures LLC |
+| npm | @protobufjs/aspromise | 1.1.2 | BSD-3-Clause | Daniel Wirtz <dcode+protobufjs@dcode.io> |
+| npm | @protobufjs/base64 | 1.1.2 | BSD-3-Clause | Daniel Wirtz <dcode+protobufjs@dcode.io> |
+| npm | @protobufjs/codegen | 2.0.5 | BSD-3-Clause | Daniel Wirtz <dcode+protobufjs@dcode.io> |
+| npm | @protobufjs/eventemitter | 1.1.1 | BSD-3-Clause | Daniel Wirtz <dcode+protobufjs@dcode.io> |
+| npm | @protobufjs/fetch | 1.1.1 | BSD-3-Clause | Daniel Wirtz <dcode+protobufjs@dcode.io> |
+| npm | @protobufjs/float | 1.0.2 | BSD-3-Clause | Daniel Wirtz <dcode+protobufjs@dcode.io> |
+| npm | @protobufjs/path | 1.1.2 | BSD-3-Clause | Daniel Wirtz <dcode+protobufjs@dcode.io> |
+| npm | @protobufjs/pool | 1.1.0 | BSD-3-Clause | Daniel Wirtz <dcode+protobufjs@dcode.io> |
+| npm | @protobufjs/utf8 | 1.1.2 | BSD-3-Clause | Daniel Wirtz <dcode+protobufjs@dcode.io> |
 | npm | @scure/base | 1.2.6 | MIT | Paul Miller (https://paulmillr.com) |
 | npm | @scure/bip32 | 1.7.0 | MIT | Paul Miller (https://paulmillr.com) |
 | npm | @scure/bip39 | 1.6.0 | MIT | Paul Miller (https://paulmillr.com) |
 | npm | @simplewebauthn/server | 13.2.2 | MIT | Matthew Miller <matthew@millerti.me> |
+| npm | @types/node | 24.2.0 | MIT | Alberto Schiabel; Andrew Makarov; Anna Henningsen; Benjamin Toueg; David Junger; Dmitry Semigradsky; ExE Boss; Ilia Baryshnikov; Junxiao Shi; Linus Unnebäck; Marcin Kopacz; Matteo Collina; Microsoft TypeScript; Mohsen Azimi; Nikita Galkin; NodeJS Contributors; Piotr Błażejewicz; René; Sebastian Silbermann; Trivikram Kamat; Victor Perin; Wilco Bakker; Yagiz Nizipli; wafuwafu13 |
 | npm | abitype | 1.2.3 | MIT | awkweb.eth <t@wevm.dev>; jxom.eth <j@wevm.dev> |
 | npm | asn1js | 3.0.7 | BSD-3-Clause | Ryan Hurst rmh@unmitigatedrisk.com; Yury Strozhevsky yury@strozhevsky.com |
 | npm | base-x | 5.0.1 | MIT | Daniel Cousens |
 | npm | borsh | 1.0.0 | Apache-2.0 | Near Inc |
 | npm | bs58 | 6.0.0 | MIT |  |
 | npm | eventemitter3 | 5.0.1 | MIT | Arnout Kazemier |
+| npm | flatbuffers | 25.9.23 | Apache-2.0 | The FlatBuffers project |
+| npm | guid-typescript | 1.0.9 | ISC | nicolas |
 | npm | idb | 8.0.3 | ISC | Jake Archibald |
 | npm | isows | 1.0.7 | MIT |  |
+| npm | long | 5.3.2 | Apache-2.0 | Daniel Wirtz <dcode@dcode.io> |
+| npm | onnxruntime-common | 1.30.0 | MIT | fs-eire |
+| npm | onnxruntime-web | 1.30.0 | MIT | fs-eire |
 | npm | ox | 0.12.1 | MIT |  |
+| npm | platform | 1.3.6 | MIT | Benjamin Tan <demoneaux@gmail.com>; John-David Dalton <john.david.dalton@gmail.com>; Mathias Bynens <mathias@qiwi.be> |
 | npm | preact | 10.29.8 | MIT |  |
+| npm | protobufjs | 7.6.6 | BSD-3-Clause | Daniel Wirtz <dcode+protobufjs@dcode.io> |
 | npm | pvtsutils | 1.3.6 | MIT | Miroshin Stepan<microshine@mail.ru>; PeculiarVentures |
 | npm | pvutils | 1.1.5 | MIT | Miroshin Stepan microshine@mail.ru; Ryan Hurst rmh@unmitigatedrisk.com; Yury Strozhevsky yury@strozhevsky.com |
 | npm | reflect-metadata | 0.2.2 | Apache-2.0 | Ron Buckton ron.buckton@microsoft.com |
 | npm | tslib | 1.14.1 | 0BSD | Microsoft Corp. |
 | npm | tslib | 2.8.1 | 0BSD | Microsoft Corp. |
 | npm | tsyringe | 4.10.0 | MIT | Steven Hobson-Campbell |
+| npm | undici-types | 7.10.0 | MIT | Daniele Belardi; Ethan Arrowood; Matteo Collina; Matthew Aitken; Robert Nagy; Szymon Marczak; Tomas Della Vedova |
 | npm | viem | 2.46.0 | MIT |  |
 | npm | voice-glow | 0.2.1 | MIT | Jakub Antalik |
 | npm | ws | 8.18.3 | MIT | Einar Otto Stangvik <einaros@gmail.com> (http://2x.io) |
@@ -480,6 +498,9 @@ but do not include a top-level license or notice file in the distributed package
 - cargo:rustls-platform-verifier-android@0.1.1 — MIT OR Apache-2.0
 - cargo:ts-rs-macros@12.0.1 — MIT
 - cargo:ts-rs@12.0.1 — MIT
+- npm:guid-typescript@1.0.9 — ISC
+- npm:onnxruntime-common@1.30.0 — MIT
+- npm:onnxruntime-web@1.30.0 — MIT
 
 ## Packaged license and notice texts
 
@@ -1864,6 +1885,50 @@ Applies to:
     THE SOFTWARE.
 
 
+### 1033ec013241782e
+
+Packaged as: LICENSE
+
+Applies to:
+
+- npm:@protobufjs/aspromise@1.1.2
+- npm:@protobufjs/base64@1.1.2
+- npm:@protobufjs/codegen@2.0.5
+- npm:@protobufjs/eventemitter@1.1.1
+- npm:@protobufjs/fetch@1.1.1
+- npm:@protobufjs/float@1.0.2
+- npm:@protobufjs/path@1.1.2
+- npm:@protobufjs/pool@1.1.0
+- npm:@protobufjs/utf8@1.1.2
+
+    Copyright (c) 2016, Daniel Wirtz  All rights reserved.
+
+    Redistribution and use in source and binary forms, with or without
+    modification, are permitted provided that the following conditions are
+    met:
+
+    * Redistributions of source code must retain the above copyright
+      notice, this list of conditions and the following disclaimer.
+    * Redistributions in binary form must reproduce the above copyright
+      notice, this list of conditions and the following disclaimer in the
+      documentation and/or other materials provided with the distribution.
+    * Neither the name of its author, nor the names of its contributors
+      may be used to endorse or promote products derived from this software
+      without specific prior written permission.
+
+    THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+    "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+    LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+    A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+    OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+    SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+    LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+    DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+    THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+    (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+    OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+
 ### 123a331b5dbf04c3
 
 Packaged as: LICENSE-MIT
@@ -5056,6 +5121,86 @@ Applies to:
     DEALINGS IN THE SOFTWARE.
 
 
+### 49d6a1c9a623784c
+
+Packaged as: LICENSE
+
+Applies to:
+
+- npm:protobufjs@7.6.6
+
+    This license applies to all parts of protobuf.js except those files
+    either explicitly including or referencing a different license or
+    located in a directory containing a different LICENSE file.
+
+    ---
+
+    Copyright (c) 2016, Daniel Wirtz  All rights reserved.
+
+    Redistribution and use in source and binary forms, with or without
+    modification, are permitted provided that the following conditions are
+    met:
+
+    * Redistributions of source code must retain the above copyright
+      notice, this list of conditions and the following disclaimer.
+    * Redistributions in binary form must reproduce the above copyright
+      notice, this list of conditions and the following disclaimer in the
+      documentation and/or other materials provided with the distribution.
+    * Neither the name of its author, nor the names of its contributors
+      may be used to endorse or promote products derived from this software
+      without specific prior written permission.
+
+    THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+    "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+    LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+    A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+    OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+    SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+    LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+    DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+    THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+    (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+    OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+    ---
+
+    Code generated by the command line utilities is owned by the owner
+    of the input file used when generating it. This code is not
+    standalone and requires a support library to be linked with it. This
+    support library is itself covered by the above license.
+
+
+### 4a161ebed4f1ef93
+
+Packaged as: LICENSE
+
+Applies to:
+
+- npm:platform@1.3.6
+
+    Copyright 2014-2020 Benjamin Tan
+    Copyright 2011-2013 John-David Dalton
+
+    Permission is hereby granted, free of charge, to any person obtaining
+    a copy of this software and associated documentation files (the
+    "Software"), to deal in the Software without restriction, including
+    without limitation the rights to use, copy, modify, merge, publish,
+    distribute, sublicense, and/or sell copies of the Software, and to
+    permit persons to whom the Software is furnished to do so, subject to
+    the following conditions:
+
+    The above copyright notice and this permission notice shall be
+    included in all copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+    EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
+    MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+    NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
+    LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+    OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
+    WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
 ### 4a883ecc3bb1010f
 
 Packaged as: LICENSE-MIT
@@ -10100,6 +10245,37 @@ Applies to:
        END OF TERMS AND CONDITIONS
 
 
+### a6db8096b2707bc0
+
+Packaged as: LICENSE
+
+Applies to:
+
+- npm:undici-types@7.10.0
+
+    MIT License
+
+    Copyright (c) Matteo Collina and Undici contributors
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy
+    of this software and associated documentation files (the "Software"), to deal
+    in the Software without restriction, including without limitation the rights
+    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+    copies of the Software, and to permit persons to whom the Software is
+    furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice shall be included in all
+    copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+    SOFTWARE.
+
+
 ### a825bd853ab71619
 
 Packaged as: LICENSE-MIT
@@ -11918,7 +12094,7 @@ Applies to:
 
 ### c2cfccb812fe4821
 
-Packaged as: license-mit
+Packaged as: LICENSE, license-mit
 
 Applies to:
 
@@ -11934,6 +12110,7 @@ Applies to:
 - cargo:windows_x86_64_gnu@0.52.6
 - cargo:windows_x86_64_gnullvm@0.52.6
 - cargo:windows_x86_64_msvc@0.52.6
+- npm:@types/node@24.2.0
 
         MIT License
 
@@ -12447,7 +12624,7 @@ Applies to:
 
 ### cfc7749b96f63bd3
 
-Packaged as: LICENSE-APACHE, LICENSE-APACHE.md, LICENSE-APACHE.txt
+Packaged as: LICENSE, LICENSE-APACHE, LICENSE-APACHE.md, LICENSE-APACHE.txt
 
 Applies to:
 
@@ -12464,6 +12641,8 @@ Applies to:
 - cargo:zeroize@1.9.0
 - cargo:zeroize_derive@1.4.3
 - cargo:zeroize_derive@1.5.0
+- npm:flatbuffers@25.9.23
+- npm:long@5.3.2
 
 
                                      Apache License
@@ -13589,5 +13768,3 @@ Applies to:
     OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR
     IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
     DEALINGS IN THE SOFTWARE.
-
-

package/dist/.build-inputs.sha256

@@ -1 +1 @@
-1338f3f6f35ca0a9209fea6d25a3fa10bac28bba32ba928546abfac7a06b84a3
+38c19246cd5acc02e57e45911a5253334b78a73aaa366ecd41df1567e6164171

package/dist/esm/SeamsWeb/operations/recovery/walletRecoveryCommit.js

@@ -3,6 +3,7 @@ import { base64UrlDecode } from "../../../shared-ts/src/utils/base64.js";
 import { routerAbMpcMaterialActivationRefFromWire } from "../../../shared-ts/src/utils/routerAbNormalSigningIdentity.js";
 import { computeEcdsaDerivationRoleLocalRelayerKeyId } from "../../../shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.js";
 import { buildEmailOtpWalletAuthAuthority, walletAuthAuthorityRef } from "../../../shared-ts/src/utils/walletAuthAuthority.js";
+import "../../../shared-ts/src/utils/walletAuthMethodRecord.js";
 import "../../../shared-ts/src/authorization/walletAuthority.js";
 import { base58Encode } from "../../../shared-ts/src/utils/base58.js";
 import { toAccountId } from "../../../core/types/accountIds.js";

package/dist/esm/SeamsWeb/publicApi/createPublicApi.js

@@ -37,6 +37,9 @@ function createPublicApi(deps) {
 			waitForNearAccount: waitForNearAccount.bind(null, deps.registration),
 			addSigner: deps.registration.addSigner,
 			addPasskey: deps.registration.addPasskey,
+			activateAuthMethod: deps.registration.activateAuthMethod,
+			getAuthMethodAvailability: deps.registration.getAuthMethodAvailability,
+			setAuthMethodEnabled: deps.registration.setAuthMethodEnabled,
 			addEmail: deps.registration.addEmail,
 			removeAuthMethod: deps.registration.removeAuthMethod,
 			registerWallet: registerWallet.bind(null, deps.registration, deps.configs)

package/dist/esm/SeamsWeb/walletIframe/client/authMenuAnchor.js

@@ -0,0 +1,44 @@
+//#region src/SeamsWeb/walletIframe/client/authMenuAnchor.ts
+const ANCHOR_HEIGHT_CSS_VAR = "--seams-auth-menu-height";
+const PLACEHOLDER_OPACITY_CSS_VAR = "--seams-auth-menu-placeholder-opacity";
+const READY_ATTRIBUTE = "data-seams-auth-menu-ready";
+function hostedAuthMenuAnchorMetrics(anchor) {
+	if (!anchor?.isConnected) return null;
+	const rect = anchor.getBoundingClientRect();
+	const layoutWidthCssPx = anchor.offsetWidth;
+	if (!Number.isFinite(rect.top) || !Number.isFinite(rect.left) || !Number.isFinite(rect.width) || !Number.isFinite(rect.height) || rect.width <= 0 || rect.height <= 0 || !Number.isFinite(layoutWidthCssPx) || layoutWidthCssPx <= 0) return null;
+	return {
+		topCssPx: rect.top,
+		leftCssPx: rect.left,
+		layoutWidthCssPx,
+		heightCssPx: rect.height,
+		visualScale: rect.width / layoutWidthCssPx
+	};
+}
+/** Reserves the measured menu height in the app's layout. */
+function publishHostedAuthMenuAnchorHeight(anchor, heightCssPx) {
+	if (!anchor?.isConnected || !Number.isFinite(heightCssPx) || heightCssPx <= 0) return;
+	const next = `${Math.round(heightCssPx)}px`;
+	if (anchor.style.getPropertyValue(ANCHOR_HEIGHT_CSS_VAR) === next) return;
+	anchor.style.setProperty(ANCHOR_HEIGHT_CSS_VAR, next);
+}
+/** The menu is measured and painted at its final size: hide the placeholder. */
+function markHostedAuthMenuAnchorReady(anchor) {
+	if (!anchor) return;
+	anchor.style.setProperty(PLACEHOLDER_OPACITY_CSS_VAR, "0");
+	anchor.setAttribute(READY_ATTRIBUTE, "true");
+}
+/** A new session waits for its menu behind the placeholder. */
+function resetHostedAuthMenuAnchor(anchor) {
+	anchor.style.setProperty(PLACEHOLDER_OPACITY_CSS_VAR, "1");
+	anchor.removeAttribute(READY_ATTRIBUTE);
+}
+/** The session ended: the menu is gone and the placeholder stays hidden. */
+function endHostedAuthMenuAnchor(anchor) {
+	anchor.style.setProperty(PLACEHOLDER_OPACITY_CSS_VAR, "0");
+	anchor.removeAttribute(READY_ATTRIBUTE);
+}
+//#endregion
+export { endHostedAuthMenuAnchor, hostedAuthMenuAnchorMetrics, markHostedAuthMenuAnchorReady, publishHostedAuthMenuAnchorHeight, resetHostedAuthMenuAnchor };
+
+//# sourceMappingURL=authMenuAnchor.js.map

package/dist/esm/SeamsWeb/walletIframe/client/overlay/overlay-styles.js

@@ -183,11 +183,9 @@ const BASE_CSS = `
   dialog.${CLASS_DIALOG}.${CLASS_INLINE_DIALOG}.${CLASS_RESIZE_ANIMATED} {
     transition: none;
   }
-  /* A provisional drawer already owns the full visual viewport. The hosted
-     auth menu also renders provisionally: hiding its dialog prevents the
-     child ResizeObserver from producing the measurement that replaces those
-     provisional bounds, leaving the menu invisible until the 4s fallback.
-     Request modals stay invisible until their measured bounds are ready.
+  /* A provisional drawer already owns the full visual viewport. Modals,
+     the hosted auth menu included, stay invisible until their measured
+     bounds are ready, so the card first paints at its final size and place.
 
      Invisible means opacity, never visibility. Chrome stops rendering a
      cross-origin iframe whose ancestor is visibility:hidden (no animation
@@ -197,7 +195,7 @@ const BASE_CSS = `
      visible. Playwright's bundled Chromium keeps rendering such frames, which
      is why no browser test noticed. An opacity:0 dialog is painted normally
      (the frame is not throttled), just fully transparent. */
-  dialog.${CLASS_DIALOG}.${CLASS_PROVISIONAL}.${CLASS_MODAL}:not(.${CLASS_AUTH_MENU}) {
+  dialog.${CLASS_DIALOG}.${CLASS_PROVISIONAL}.${CLASS_MODAL} {
     opacity: 0;
     pointer-events: none;
   }

package/dist/esm/SeamsWeb/walletIframe/client/registrationCommands.js

@@ -8,6 +8,9 @@ function createApplicationRegistrationCommands(walletIframe) {
 		getNearAccountState: getNearAccountState.bind(null, walletIframe),
 		addSigner: addSigner.bind(null, walletIframe),
 		addPasskey: addPasskey.bind(null, walletIframe),
+		activateAuthMethod: activateAuthMethod.bind(null, walletIframe),
+		getAuthMethodAvailability: getAuthMethodAvailability.bind(null, walletIframe),
+		setAuthMethodEnabled: setAuthMethodEnabled.bind(null, walletIframe),
 		removeAuthMethod: removeAuthMethod.bind(null, walletIframe),
 		addEmail: addEmail.bind(null, walletIframe)
 	};
@@ -58,6 +61,9 @@ async function addPasskey(walletIframe, args) {
 		throw normalized;
 	}
 }
+async function activateAuthMethod(walletIframe, args) {
+	return await (await walletIframe.requireRouter()).activateAuthMethod(args);
+}
 async function removeAuthMethod(walletIframe, args) {
 	return await (await walletIframe.requireRouter()).removeAuthMethod(args);
 }
@@ -86,6 +92,12 @@ function emitTransportTiming(walletIframe, input) {
 		...timings
 	});
 }
+async function getAuthMethodAvailability(walletIframe, args) {
+	return (await walletIframe.requireRouter()).getAuthMethodAvailability(args);
+}
+async function setAuthMethodEnabled(walletIframe, args) {
+	return (await walletIframe.requireRouter()).setAuthMethodEnabled(args);
+}
 //#endregion
 export { createApplicationRegistrationCommands };
 

package/dist/esm/SeamsWeb/walletIframe/client/router.js

@@ -23,6 +23,8 @@ import { parseExactEcdsaSigningLaneIdentity, parseExactEd25519ExportMaterialIden
 import { resolveRuntimeAppearance } from "../shared/facadeBoundary.js";
 import { TransactionReviewError, assertTransactionReviewValid, parseTransactionReviewState, reviewedConfirmationConfig, sameTransactionReviewIdentity, transactionReviewCancellationCode } from "../shared/transactionReview.js";
 import { needsExplicitActivation } from "../../../utils/deviceDetection.js";
+import { hostedAuthMenuAnchorMetrics, markHostedAuthMenuAnchorReady, publishHostedAuthMenuAnchorHeight } from "./authMenuAnchor.js";
+import { parseAuthMethodAvailability } from "../../../core/authMethods/availabilityTypes.js";
 import { TransactionReviewReservation } from "./transactionReviewReservation.js";
 import { OnEventsProgressBus } from "./progress/on-events-progress-bus.js";
 import { registrationSignerSetRequestSelection } from "../../../core/rpcClients/relayer/registrationSignerSetRequest.js";
@@ -40,6 +42,7 @@ function requestSurfaceKindForMessage(type, payload) {
 		case "PM_ADD_WALLET_SIGNER":
 		case "PM_ADD_PASSKEY":
 		case "PM_ROTATE_WALLET_RECOVERY_CODES": return "registration";
+		case "PM_ACTIVATE_AUTH_METHOD": return "auth_method_activation";
 		case "PM_ADD_EMAIL_OTP": return "email_otp_enrollment";
 		case "PM_GET_WALLET_RECOVERY_CODE_STATUS":
 		case "PM_ACKNOWLEDGE_WALLET_RECOVERY_CODE_BACKUP": return "recovery_codes";
@@ -49,7 +52,8 @@ function requestSurfaceKindForMessage(type, payload) {
 		case "PM_SIGN_NEP413":
 		case "PM_SIGN_TEMPO": return "transaction";
 		case "PM_EXPORT_KEYPAIR_UI": return isObject(payload) && payload.kind === "ecdsa" ? "key_export_threshold" : "key_export_near";
-		case "PM_UNLOCK": return "unlock";
+		case "PM_UNLOCK":
+		case "PM_UNLOCK_AUTH_METHOD": return "unlock";
 		case "PM_SCAN_AND_LINK_DEVICE": return "device_link";
 		case "PM_START_DEVICE2_LINKING_FLOW": return "device_link_qr";
 		default: return null;
@@ -88,6 +92,7 @@ function requestSurfacePresentationFor(kind, payload, fallbackUiMode) {
 		case "auth_menu": return authMenuWalletIframeSurfacePresentation("Sign in or create an account");
 		case "registration": return modalWalletIframeSurfacePresentation("Confirm passkey registration");
 		case "email_otp_enrollment": return confirmationUiModeForRequest("PM_ADD_EMAIL_OTP", payload, fallbackUiMode) === "drawer" ? drawerWalletIframeSurfacePresentation("Enter email code") : modalWalletIframeSurfacePresentation("Enter email code");
+		case "auth_method_activation": return modalWalletIframeSurfacePresentation("Activate authentication method");
 		case "transaction": return effectiveTransactionSurfaceUiMode(payload, fallbackUiMode) === "drawer" ? drawerWalletIframeSurfacePresentation("Confirm transaction") : modalWalletIframeSurfacePresentation("Confirm transaction");
 		case "key_export_near":
 		case "key_export_threshold": return confirmationUiModeForRequest("PM_EXPORT_KEYPAIR_UI", payload, fallbackUiMode) === "drawer" ? drawerWalletIframeSurfacePresentation("Confirm key export") : modalWalletIframeSurfacePresentation("Confirm key export");
@@ -153,20 +158,6 @@ const WALLET_IFRAME_PROGRESS_TIMEOUT_EXTENSION_FACTOR = 4;
 const WALLET_IFRAME_SURFACE_MEASUREMENT_FALLBACK_TIMEOUT_MS = 4e3;
 const WALLET_IFRAME_REGISTRATION_TIMEOUT_MS = 18e4;
 const WALLET_IFRAME_THRESHOLD_SIGNING_TIMEOUT_MS = 3e4;
-function hostedAuthMenuAnchorMetrics(anchor) {
-	if (!anchor?.isConnected) return null;
-	const rect = anchor.getBoundingClientRect();
-	const layoutWidthCssPx = anchor.offsetWidth;
-	if (!Number.isFinite(rect.top) || !Number.isFinite(rect.left) || !Number.isFinite(rect.width) || !Number.isFinite(rect.height) || rect.width <= 0 || rect.height <= 0 || !Number.isFinite(layoutWidthCssPx) || layoutWidthCssPx <= 0) return null;
-	return {
-		topCssPx: rect.top,
-		leftCssPx: rect.left,
-		layoutWidthCssPx,
-		heightCssPx: rect.height,
-		visualScale: rect.width / layoutWidthCssPx
-	};
-}
-const HOSTED_AUTH_MENU_ANCHOR_HEIGHT_CSS_VAR = "--seams-auth-menu-height";
 function pageScrollOffsetCssPx(axis) {
 	if (typeof window === "undefined") return 0;
 	const value = axis === "x" ? window.scrollX : window.scrollY;
@@ -179,12 +170,6 @@ function documentCoordinateAuthMenuGeometry(geometry) {
 		leftCssPx: Math.round(geometry.leftCssPx + pageScrollOffsetCssPx("x"))
 	};
 }
-function publishHostedAuthMenuAnchorHeight(anchor, heightCssPx) {
-	if (!anchor?.isConnected || !Number.isFinite(heightCssPx) || heightCssPx <= 0) return;
-	const next = `${Math.round(heightCssPx)}px`;
-	if (anchor.style.getPropertyValue(HOSTED_AUTH_MENU_ANCHOR_HEIGHT_CSS_VAR) === next) return;
-	anchor.style.setProperty(HOSTED_AUTH_MENU_ANCHOR_HEIGHT_CSS_VAR, next);
-}
 function buildSignTempoIframePayload(payload) {
 	if (payload.request.chain === "tempo") {
 		if (payload.chainTarget.kind !== "tempo") throw new Error("[wallet-iframe] Tempo request requires a Tempo target");
@@ -448,8 +433,16 @@ function createTerminalProgressForRequest(args) {
 			message
 		}
 	};
-	const registrationRequests = new Set(["PM_REGISTER_WALLET", "PM_ADD_PASSKEY"]);
-	const unlockRequests = new Set(["PM_UNLOCK", "PM_REQUEST_EMAIL_OTP_CHALLENGE"]);
+	const registrationRequests = new Set([
+		"PM_REGISTER_WALLET",
+		"PM_ADD_PASSKEY",
+		"PM_ACTIVATE_AUTH_METHOD"
+	]);
+	const unlockRequests = new Set([
+		"PM_UNLOCK",
+		"PM_UNLOCK_AUTH_METHOD",
+		"PM_REQUEST_EMAIL_OTP_CHALLENGE"
+	]);
 	const signingRequests = new Set([
 		"PM_SIGN_TX_WITH_ACTIONS",
 		"PM_SIGN_AND_SEND_TX",
@@ -1027,17 +1020,18 @@ var WalletIframeRouter = class {
 		let authMenuVisualScale = 1;
 		if (surface.kind === "modal_auth_menu" && anchorMetrics && isWalletIframeModalGeometry(resolvedGeometry) && !(resolvedGeometry.kind === "viewport_fallback" && resolvedGeometry.reason === "measurement_unavailable")) {
 			const measuredHeightCssPx = this.activeSurfaceMeasurement?.heightCssPx;
+			const heightCssPx = measuredHeightCssPx ?? anchorMetrics.heightCssPx;
 			const anchoredBase = resolvedGeometry.kind === "viewport_fallback" ? {
 				kind: measuredHeightCssPx != null ? "centered_modal" : "provisional_centered_modal",
 				widthCssPx: resolvedGeometry.widthCssPx,
-				heightCssPx: measuredHeightCssPx ?? 320,
+				heightCssPx,
 				topCssPx: resolvedGeometry.topCssPx,
 				leftCssPx: resolvedGeometry.leftCssPx
-			} : measuredHeightCssPx != null ? {
+			} : {
 				...resolvedGeometry,
-				heightCssPx: measuredHeightCssPx
-			} : resolvedGeometry;
-			publishHostedAuthMenuAnchorHeight(anchor, anchoredBase.heightCssPx);
+				heightCssPx
+			};
+			if (measuredHeightCssPx != null) publishHostedAuthMenuAnchorHeight(anchor, measuredHeightCssPx);
 			anchorMetrics = hostedAuthMenuAnchorMetrics(anchor) ?? anchorMetrics;
 			authMenuVisualScale = anchorMetrics.visualScale;
 			geometry = anchorWalletIframeModalGeometry(anchoredBase, {
@@ -1061,7 +1055,7 @@ var WalletIframeRouter = class {
 			};
 		}
 		this.surfaceRenderer.render(surface, geometry, receiptView);
-		if (surface.kind === "modal_auth_menu" && geometry.kind !== "provisional_centered_modal") this.hostedAuthMenuAnchors.get(surface.authMenuSessionId)?.style.setProperty("--seams-auth-menu-placeholder-opacity", "0");
+		if (surface.kind === "modal_auth_menu" && geometry.kind !== "provisional_centered_modal") markHostedAuthMenuAnchorReady(anchor);
 	}
 	startHostedAuthMenuAnchorTracking(authMenuSessionId) {
 		const anchor = this.hostedAuthMenuAnchors.get(authMenuSessionId);
@@ -1159,11 +1153,12 @@ var WalletIframeRouter = class {
 				});
 				break;
 			case "email_otp_enrollment":
+			case "auth_method_activation":
 				result = this.transitionWalletIframeSurface({
 					kind: "transaction_modal_request_started",
 					connectionId,
 					identity,
-					presentation: requestSurfacePresentationFor("email_otp_enrollment", args.payload, this.mirroredConfirmationUiMode ?? void 0)
+					presentation: requestSurfacePresentationFor(args.kind, args.payload, this.mirroredConfirmationUiMode ?? void 0)
 				});
 				break;
 			case "transaction":
@@ -1835,6 +1830,37 @@ var WalletIframeRouter = class {
 			options: { onProgress: this.wrapOnEvent(payload.options?.onEvent, isRegistrationFlowEvent) }
 		})).result;
 	}
+	async getAuthMethodAvailability(payload) {
+		const walletId = parseRequestedWalletId(String(payload.walletId));
+		return parseAuthMethodAvailability((await this.post({
+			type: "PM_GET_AUTH_METHOD_AVAILABILITY",
+			payload: {
+				walletId,
+				method: payload.method
+			}
+		})).result);
+	}
+	async setAuthMethodEnabled(payload) {
+		const walletId = parseRequestedWalletId(String(payload.walletId));
+		return parseAuthMethodAvailability((await this.post({
+			type: "PM_SET_AUTH_METHOD_ENABLED",
+			payload: {
+				walletId,
+				method: payload.method,
+				enabled: payload.enabled
+			}
+		})).result);
+	}
+	async activateAuthMethod(payload) {
+		const walletId = parseRequestedWalletId(String(payload.walletId));
+		return (await this.post({
+			type: "PM_ACTIVATE_AUTH_METHOD",
+			payload: {
+				walletId,
+				method: payload.method
+			}
+		}, { timeout: "interactive" })).result;
+	}
 	async addEmail(payload) {
 		const safeOptions = removeFunctionsFromOptions(payload.options);
 		return (await this.post({
@@ -1866,6 +1892,16 @@ var WalletIframeRouter = class {
 			options: { onProgress: this.wrapOnEvent(onEvent, isUnlockFlowEvent) }
 		})).result;
 	}
+	async unlockWithAuthMethod(payload) {
+		return (await this.post({
+			type: "PM_UNLOCK_AUTH_METHOD",
+			payload: {
+				walletId: String(payload.walletId),
+				walletAuthMethodId: payload.walletAuthMethodId,
+				method: payload.method
+			}
+		}, { timeout: "interactive" })).result;
+	}
 	async getWalletSession(walletId) {
 		const expectedWalletId = walletId === void 0 ? void 0 : parseRequestedWalletId(walletId);
 		if (!this.state.ready || !this.state.port) await this.init();
@@ -2790,7 +2826,7 @@ var WalletIframeRouter = class {
 		const deadlineAtMs = timeoutPolicy.kind === "deadline" ? timeoutPolicy.deadlineAtMs : null;
 		const surfaceKind = requestSurfaceKindForMessage(envelope.type, full.payload);
 		let transactionSurfaceLease = null;
-		if (!reservation && (surfaceKind === "transaction" || surfaceKind === "email_otp_enrollment")) {
+		if (!reservation && (surfaceKind === "transaction" || surfaceKind === "email_otp_enrollment" || surfaceKind === "auth_method_activation")) {
 			const queueDeadline = timeoutPolicy.kind === "deadline" ? {
 				kind: "deadline",
 				atMs: timeoutPolicy.deadlineAtMs

package/dist/esm/SeamsWeb/walletIframe/client/sessionCommands.js

@@ -4,6 +4,7 @@ import { walletIframeUnlockRequestFromLoginHooks } from "../shared/unlockOptions
 function createApplicationSessionCommands(walletIframe) {
 	return {
 		unlock: unlock.bind(null, walletIframe),
+		unlockWithAuthMethod: unlockWithAuthMethod.bind(null, walletIframe),
 		lock: lock.bind(null, walletIframe),
 		getSession: getSession.bind(null, walletIframe),
 		getRecentUnlocks: getRecentUnlocks.bind(null, walletIframe),
@@ -36,6 +37,9 @@ async function unlock(walletIframe, walletId, options) {
 async function lock(walletIframe) {
 	await (await walletIframe.requireRouter()).lock();
 }
+async function unlockWithAuthMethod(walletIframe, input) {
+	return await (await walletIframe.requireRouter()).unlockWithAuthMethod(input);
+}
 async function getSession(walletIframe, walletId) {
 	return await (await walletIframe.requireRouter()).getWalletSession(walletId);
 }

package/dist/esm/SeamsWeb/walletIframe/client/surface/geometry.js

@@ -85,7 +85,7 @@ function provisionalWalletIframeSurfaceGeometry(presentation, viewportInput, max
 	if (viewportCannotFitCompactSurface(viewport)) return fallbackGeometry(viewport, "small_visual_viewport");
 	const availableWidth = viewport.widthCssPx - 32;
 	const availableHeight = viewport.heightCssPx - 32;
-	return centeredGeometry(viewport, clamp(maxModalWidthCssPx, WALLET_IFRAME_SURFACE_MIN_COMPACT_WIDTH_CSS_PX, Math.min(maxModalWidthCssPx, availableWidth)), Math.min(320, availableHeight), "provisional_centered_modal");
+	return centeredGeometry(viewport, clamp(maxModalWidthCssPx, WALLET_IFRAME_SURFACE_MIN_COMPACT_WIDTH_CSS_PX, Math.min(maxModalWidthCssPx, availableWidth)), Math.min(WALLET_IFRAME_SURFACE_PROVISIONAL_HEIGHT_CSS_PX, availableHeight), "provisional_centered_modal");
 }
 function measuredWalletIframeSurfaceGeometry(presentation, viewportInput, measurement, maxModalWidthCssPx = WALLET_IFRAME_SURFACE_MAX_MODAL_WIDTH_CSS_PX) {
 	const viewport = normalizedViewport(viewportInput);
@@ -126,6 +126,6 @@ function walletIframeSurfaceGeometryEqual(left, right, epsilonCssPx = 1) {
 	return Math.abs(left.widthCssPx - right.widthCssPx) < epsilonCssPx && Math.abs(left.heightCssPx - right.heightCssPx) < epsilonCssPx && Math.abs(left.topCssPx - right.topCssPx) < epsilonCssPx && Math.abs(left.leftCssPx - right.leftCssPx) < epsilonCssPx;
 }
 //#endregion
-export { WALLET_IFRAME_SURFACE_INSET_CSS_PX, WALLET_IFRAME_SURFACE_PROVISIONAL_HEIGHT_CSS_PX, anchorWalletIframeModalGeometry, isWalletIframeModalGeometry, measuredWalletIframeSurfaceGeometry, provisionalWalletIframeSurfaceGeometry, resolveWalletIframeSurfaceGeometry, walletIframeSurfaceGeometryEqual };
+export { WALLET_IFRAME_SURFACE_INSET_CSS_PX, anchorWalletIframeModalGeometry, isWalletIframeModalGeometry, measuredWalletIframeSurfaceGeometry, provisionalWalletIframeSurfaceGeometry, resolveWalletIframeSurfaceGeometry, walletIframeSurfaceGeometryEqual };
 
 //# sourceMappingURL=geometry.js.map