@seams/wallet 0.23.0 → 0.24.0

package/dist/esm/SeamsWeb/walletIframe/client/transport/iframe-transport-dom.js

@@ -13,7 +13,7 @@ function trackIframeLoad(iframe) {
 	iframe.addEventListener("load", () => markIframeLoaded(iframe), { once: true });
 }
 function buildAllowAttr(walletOrigin) {
-	return `publickey-credentials-get 'self' ${walletOrigin}; publickey-credentials-create 'self' ${walletOrigin}; clipboard-read; clipboard-write`;
+	return `publickey-credentials-get 'self' ${walletOrigin}; publickey-credentials-create 'self' ${walletOrigin}; clipboard-read; clipboard-write; microphone ${walletOrigin}`;
 }
 function isOverlayForOrigin(el, walletOrigin) {
 	const dsOrigin = el.dataset?.seamsOrigin;
@@ -57,7 +57,7 @@ function createWalletIframe(opts) {
 	try {
 		iframe.setAttribute("allow", buildAllowAttr(opts.walletOrigin));
 	} catch {
-		iframe.setAttribute("allow", "publickey-credentials-get 'self'; publickey-credentials-create 'self'; clipboard-read; clipboard-write");
+		iframe.setAttribute("allow", "publickey-credentials-get 'self'; publickey-credentials-create 'self'; clipboard-read; clipboard-write; microphone 'self'");
 	}
 	trackIframeLoad(iframe);
 	if (opts.onLoad) iframe.addEventListener("load", opts.onLoad);

package/dist/esm/SeamsWeb/walletIframe/host/auth-menu/domain.js

@@ -11,6 +11,16 @@ const AUTH_MENU_WAITING_PROMPTS = {
 		instruction: "Choose your Google account."
 	}
 };
+/** What the success view says for each successful outcome. */
+function authMenuSuccessCopy(outcome) {
+	return outcome === "registered" ? {
+		headline: "Wallet created",
+		message: "Your wallet is ready on this device."
+	} : {
+		headline: "You’re in",
+		message: "Your wallet is unlocked."
+	};
+}
 function resolveAuthMenuLoginAccount(accountOptions, selectedAccount) {
 	const exactSelection = selectedAccount ? accountOptions.find((account) => account.walletId === selectedAccount.walletId && account.authMethod === selectedAccount.authMethod) : null;
 	const sameWalletSelection = selectedAccount ? accountOptions.find((account) => account.walletId === selectedAccount.walletId) : null;
@@ -43,6 +53,10 @@ function resolveAuthMenuLoginAccount(accountOptions, selectedAccount) {
 		kind: "email_otp",
 		...resolved
 	};
+	if (walletMethods.some(isVoiceIdAccount)) return {
+		kind: "voiceid",
+		...resolved
+	};
 	throw new Error("Selected auth-menu account has no supported authentication method");
 }
 function authMenuLoginAllowsPasskey(resolution) {
@@ -50,7 +64,8 @@ function authMenuLoginAllowsPasskey(resolution) {
 		case "discoverable":
 		case "passkey":
 		case "passkey_and_email_otp": return true;
-		case "email_otp": return false;
+		case "email_otp":
+		case "voiceid": return false;
 	}
 }
 function authMenuLoginAllowsEmailOtp(resolution) {
@@ -58,7 +73,8 @@ function authMenuLoginAllowsEmailOtp(resolution) {
 		case "discoverable":
 		case "email_otp":
 		case "passkey_and_email_otp": return true;
-		case "passkey": return false;
+		case "passkey":
+		case "voiceid": return false;
 	}
 }
 function isAuthMenuLoadingStatus(status) {
@@ -93,7 +109,10 @@ function isAuthMenuGoogleActionReady(viewModel) {
 	if (viewModel.kind !== "passkey" || viewModel.mode !== "login") return true;
 	return authMenuLoginAllowsEmailOtp(resolveAuthMenuLoginAccount(viewModel.accountOptions, viewModel.selectedAccount));
 }
+function isVoiceIdAccount(account) {
+	return account.authMethod === "voiceid";
+}
 //#endregion
-export { AUTH_MENU_WAITING_PROMPTS, isAuthMenuActionReady, isAuthMenuGoogleActionReady, isAuthMenuLoadingStatus, isAuthMenuReady, resolveAuthMenuLoginAccount };
+export { AUTH_MENU_WAITING_PROMPTS, authMenuSuccessCopy, isAuthMenuActionReady, isAuthMenuGoogleActionReady, isAuthMenuLoadingStatus, isAuthMenuReady, resolveAuthMenuLoginAccount };
 
 //# sourceMappingURL=domain.js.map

package/dist/esm/SeamsWeb/walletIframe/host/surface-measurement-reporter.js

@@ -14,7 +14,11 @@ function sizeFromRect(rect) {
 	};
 }
 function sizeFromEntryOrElement(element, entry) {
-	return sizeFromRect(entry?.contentRect ?? element.getBoundingClientRect());
+	const box = entry?.borderBoxSize[0];
+	return sizeFromRect(box ? {
+		width: box.inlineSize,
+		height: box.blockSize
+	} : element.getBoundingClientRect());
 }
 function sizeForReporter(options, entry) {
 	if (options.kind === "request_scroll_surface") {
@@ -87,7 +91,7 @@ var SurfaceMeasurementReporter = class {
 		this.options = options;
 		if (typeof ResizeObserver === "function") {
 			this.observer = new ResizeObserver(this.onResize);
-			this.observer.observe(options.element);
+			this.observer.observe(options.element, { box: "border-box" });
 			if (options.kind === "request_scroll_surface" && options.element.firstElementChild) this.observer.observe(options.element.firstElementChild);
 			this.reportLatestSize();
 			return;

package/dist/esm/SeamsWeb/walletIframe/host/ui/auth-menu/AuthMenuFooter.js

@@ -1,6 +1,6 @@
 import { WalletText } from "../../../../../core/signingEngine/uiConfirm/ui/preact/WalletLocale.js";
 import { SeamsWordmark } from "../../../../../core/signingEngine/uiConfirm/ui/preact/SeamsWordmark.js";
-import { alertIcon, shieldIcon } from "./icons.js";
+import { alertIcon } from "./icons.js";
 import { Component } from "preact";
 import { jsx, jsxs } from "preact/jsx-runtime";
 //#region src/SeamsWeb/walletIframe/host/ui/auth-menu/AuthMenuFooter.tsx
@@ -22,8 +22,6 @@ var AuthMenuFooter = class extends Component {
 					class: "seams-auth-footer-brand",
 					"aria-hidden": notice ? "true" : void 0,
 					children: [
-						shieldIcon(),
-						" ",
 						/* @__PURE__ */ jsx("span", { children: /* @__PURE__ */ jsx(WalletText, { message: "Secured by" }) }),
 						" ",
 						/* @__PURE__ */ jsx(SeamsWordmark, {})

package/dist/esm/SeamsWeb/walletIframe/host/ui/auth-menu/AuthMenuSurface.js

@@ -35,6 +35,7 @@ var AuthMenuSurface = class extends Component {
 	previousLinkDeviceStateKind = null;
 	previousRecoveryStage = null;
 	lastMethod = "passkey";
+	walletRowEntry = null;
 	get viewModel() {
 		return this.props.viewModel;
 	}
@@ -138,6 +139,7 @@ var AuthMenuSurface = class extends Component {
 		const switcher = this.props.element.querySelector(".seams-content-switcher");
 		const sizer = this.props.element.querySelector(".seams-content-sizer");
 		if (!switcher || !sizer) return;
+		if (this.props.element.hidden) return;
 		this.props.styles.setDynamicDeclarations(this.props.element.id + "-height", "#" + this.props.element.id + " .seams-content-switcher", { height: sizer.scrollHeight + "px" });
 	};
 	focusInitialControl() {
@@ -296,6 +298,10 @@ var AuthMenuSurface = class extends Component {
 	onGoogleRegistrationReroll = () => {
 		this.emitIntent({ kind: "google_registration_reroll" });
 	};
+	onVoiceClick = () => {
+		this.lastMethod = "voiceid";
+		this.emitIntent({ kind: "voiceid_selected" });
+	};
 	onGoogleClick = () => {
 		this.lastMethod = "google";
 		this.emitIntent({
@@ -304,6 +310,10 @@ var AuthMenuSurface = class extends Component {
 		});
 	};
 	onNoticeRetry = () => {
+		if (this.lastMethod === "voiceid") {
+			this.onVoiceClick();
+			return;
+		}
 		if (this.lastMethod === "google" && isAuthMenuGoogleActionReady(this.viewModel)) this.onGoogleClick();
 		else this.onPrimaryClick();
 	};
@@ -581,16 +591,42 @@ var AuthMenuSurface = class extends Component {
 			})] })
 		}) });
 	}
+	walletRowEntering(viewModel, shown) {
+		const viewKey = authViewKey(viewModel);
+		const entry = this.walletRowEntry;
+		if (entry?.viewKey !== viewKey) this.walletRowEntry = {
+			viewKey,
+			shown,
+			entering: false
+		};
+		else if (shown && !entry.shown) this.walletRowEntry = {
+			viewKey,
+			shown,
+			entering: true
+		};
+		return this.walletRowEntry?.entering ?? false;
+	}
+	onWalletRowEntered = (event) => {
+		const entry = this.walletRowEntry;
+		if (event.target !== event.currentTarget || !entry?.entering) return;
+		this.walletRowEntry = {
+			...entry,
+			entering: false
+		};
+		this.forceUpdate();
+	};
 	renderPasskeyInput(viewModel) {
 		if (viewModel.mode === "login") {
 			const selected = selectedLoginAccount(viewModel);
+			const entering = this.walletRowEntering(viewModel, selected !== null);
 			if (!selected) return /* @__PURE__ */ jsx(Fragment$1, {});
 			const groups = accountGroups(viewModel.accountOptions);
 			const accountMenu = this.state.accountMenu;
 			const choice = this.accountMenuChoice;
 			const listSelected = choice?.previous ?? selected;
 			return /* @__PURE__ */ jsx(Fragment$1, { children: /* @__PURE__ */ jsx("div", {
-				class: "seams-passkey-row",
+				class: `seams-passkey-row ${entering ? "is-entering" : ""}`,
+				onAnimationEnd: this.onWalletRowEntered,
 				children: /* @__PURE__ */ jsxs("div", {
 					class: "seams-input-pill",
 					children: [/* @__PURE__ */ jsx("div", {
@@ -623,7 +659,7 @@ var AuthMenuSurface = class extends Component {
 							class: `seams-account-menu-popover ${accountMenu === "closing" ? "is-closing" : ""}`,
 							role: "listbox",
 							children: groups.map((group) => {
-								const groupLabelId = `${AUTH_MENU_ACCOUNT_LIST_ID}-${group.authMethod}`;
+								const groupLabelId = `${AUTH_MENU_ACCOUNT_LIST_ID}-${group.id}`;
 								return /* @__PURE__ */ jsx(Fragment$1, { children: /* @__PURE__ */ jsxs("div", {
 									class: "seams-account-menu-group",
 									role: "group",
@@ -633,8 +669,8 @@ var AuthMenuSurface = class extends Component {
 										class: "seams-account-menu-group-label",
 										children: /* @__PURE__ */ jsx(WalletText, { copy: group.label })
 									}), group.accounts.map((account) => {
-										const isSelected = account.walletId === listSelected.walletId && account.authMethod === listSelected.authMethod;
-										const isChosen = !isSelected && account.walletId === choice?.chosen.walletId && account.authMethod === choice.chosen.authMethod;
+										const isSelected = account.walletId === listSelected.walletId;
+										const isChosen = !isSelected && account.walletId === choice?.chosen.walletId;
 										const secondaryText = accountSecondaryText(account);
 										return /* @__PURE__ */ jsx(Fragment$1, { children: /* @__PURE__ */ jsxs("button", {
 											class: `seams-account-menu-option ${isSelected ? "is-selected" : ""} ${isChosen ? "is-chosen" : ""}`,
@@ -702,21 +738,31 @@ var AuthMenuSurface = class extends Component {
 		const googleEnabled = viewModel.enabledExternalProviders?.includes("google") ?? false;
 		return /* @__PURE__ */ jsx(Fragment$1, { children: /* @__PURE__ */ jsxs("div", {
 			class: "seams-auth-methods",
-			children: [/* @__PURE__ */ jsxs("button", {
-				class: "seams-auth-method-btn seams-auth-method-btn-primary",
-				type: "button",
-				"data-auth-menu-primary": true,
-				disabled: !isAuthMenuActionReady(viewModel),
-				onClick: this.onPrimaryClick,
-				children: [fingerprintIcon(), /* @__PURE__ */ jsx("span", { children: /* @__PURE__ */ jsx(WalletText, { copy: passkeyButtonLabel(viewModel.mode) }) })]
-			}), googleEnabled ? /* @__PURE__ */ jsxs("button", {
-				class: "seams-auth-method-btn",
-				type: "button",
-				"data-auth-menu-provider": "google",
-				disabled: !isAuthMenuGoogleActionReady(viewModel),
-				onClick: this.onGoogleClick,
-				children: [googleIcon(), /* @__PURE__ */ jsx("span", { children: /* @__PURE__ */ jsx(WalletText, { message: "Continue with Google" }) })]
-			}) : null]
+			children: [
+				/* @__PURE__ */ jsxs("button", {
+					class: "seams-auth-method-btn seams-auth-method-btn-primary",
+					type: "button",
+					"data-auth-menu-primary": true,
+					disabled: !isAuthMenuActionReady(viewModel),
+					onClick: this.onPrimaryClick,
+					children: [fingerprintIcon(), /* @__PURE__ */ jsx("span", { children: /* @__PURE__ */ jsx(WalletText, { copy: passkeyButtonLabel(viewModel.mode) }) })]
+				}),
+				googleEnabled ? /* @__PURE__ */ jsxs("button", {
+					class: "seams-auth-method-btn",
+					type: "button",
+					"data-auth-menu-provider": "google",
+					disabled: !isAuthMenuGoogleActionReady(viewModel),
+					onClick: this.onGoogleClick,
+					children: [googleIcon(), /* @__PURE__ */ jsx("span", { children: /* @__PURE__ */ jsx(WalletText, { copy: viewModel.mode === "login" ? "Email code (Google)" : "Continue with Google" }) })]
+				}) : null,
+				viewModel.mode === "login" && viewModel.accountOptions.some(voiceAvailableForWallet.bind(null, selectedLoginAccount(viewModel)?.walletId)) ? /* @__PURE__ */ jsxs("button", {
+					type: "button",
+					class: "seams-auth-method-btn",
+					"data-auth-menu-voiceid": true,
+					onClick: this.onVoiceClick,
+					children: [voiceMethodIcon(), /* @__PURE__ */ jsx("span", { children: "Unlock with VoiceID" })]
+				}) : null
+			]
 		}) });
 	}
 	renderOtherOptions() {
@@ -1515,6 +1561,22 @@ var AuthMenuSurface = class extends Component {
 		}) });
 	}
 };
+function voiceAvailableForWallet(walletId, account) {
+	return account.walletId === walletId && account.authMethod === "voiceid";
+}
+function voiceMethodIcon() {
+	return /* @__PURE__ */ jsx("svg", {
+		width: "20",
+		height: "20",
+		viewBox: "0 0 24 24",
+		fill: "none",
+		stroke: "currentColor",
+		strokeWidth: "1.75",
+		strokeLinecap: "round",
+		"aria-hidden": "true",
+		children: /* @__PURE__ */ jsx("path", { d: "M4 10v4m4-7v10m4-14v18m4-14v10m4-7v4" })
+	});
+}
 //#endregion
 export { AuthMenuSurface };
 

package/dist/esm/SeamsWeb/walletIframe/host/ui/auth-menu/icons.js

@@ -178,9 +178,6 @@ function googleIcon() {
 function chevronIcon() {
 	return strokeIcon("13", "1.75", /* @__PURE__ */ jsx("path", { d: "m9 6 6 6-6 6" }));
 }
-function shieldIcon() {
-	return strokeIcon("14", "1.6", /* @__PURE__ */ jsx("path", { d: "M12 3 4.5 6v5.5c0 4.2 2.7 7.4 7.5 9.5 4.8-2.1 7.5-5.3 7.5-9.5V6L12 3Z" }), /* @__PURE__ */ jsx("path", { d: "m8.5 11.5 2.5 2.5 4.5-5" }));
-}
 function alertIcon() {
 	return strokeIcon("15", "1.6", /* @__PURE__ */ jsx("path", { d: "M12 8v5" }), /* @__PURE__ */ jsx("path", { d: "M12 16v.1" }), /* @__PURE__ */ jsx("circle", {
 		cx: "12",
@@ -189,6 +186,6 @@ function alertIcon() {
 	}));
 }
 //#endregion
-export { accountDropdownIcon, alertIcon, backIcon, chevronIcon, fingerprintIcon, googleIcon, linkDeviceIcon, linkFailedIcon, mailIcon, passkeyRingIcon, passkeySuccessIcon, recoveryIcon, rerollIcon, shieldIcon };
+export { accountDropdownIcon, alertIcon, backIcon, chevronIcon, fingerprintIcon, googleIcon, linkDeviceIcon, linkFailedIcon, mailIcon, passkeyRingIcon, passkeySuccessIcon, recoveryIcon, rerollIcon };
 
 //# sourceMappingURL=icons.js.map

package/dist/esm/SeamsWeb/walletIframe/host/ui/auth-menu/presentation.js

@@ -99,17 +99,13 @@ function savedAccountsTriggerLabel(account) {
 	return emailAddress ? `Saved wallets. Selected wallet ID ${account.walletId}, email ${emailAddress}` : `Saved wallets. Selected ${account.walletId}`;
 }
 function accountGroups(options) {
-	const passkeyAccounts = options.filter((option) => option.authMethod === "passkey");
-	const emailOtpAccounts = options.filter((option) => option.authMethod === "email_otp");
-	return [{
-		authMethod: "passkey",
-		label: "Passkey",
-		accounts: passkeyAccounts
-	}, {
-		authMethod: "email_otp",
-		label: "Email OTP",
-		accounts: emailOtpAccounts
-	}].filter((group) => group.accounts.length > 0);
+	const wallets = /* @__PURE__ */ new Map();
+	for (const option of options) if (!wallets.has(option.walletId)) wallets.set(option.walletId, option);
+	return wallets.size ? [{
+		id: "wallets",
+		label: "Saved wallets",
+		accounts: [...wallets.values()]
+	}] : [];
 }
 //#endregion
 export { AUTH_MENU_ACCOUNT_LIST_ID, AUTH_MENU_TITLE_ID, accountGroups, accountSecondaryText, authViewKey, menuNotice, modeLabel, modeSwitchCopy, otpCodeDigits, passkeyButtonLabel, recoveryAnnouncement, recoveryBackLabel, recoveryCaretAtPoint, recoveryNavigationLocked, renderDemoEmailCode, renderOtpCodeDigit, savedAccountsTriggerLabel, selectedAccountPrimaryText, selectedLoginAccount };

package/dist/esm/SeamsWeb/walletIframe/host/walletMutationGuard.js

@@ -0,0 +1,86 @@
+import { parseWalletId } from "../../../shared-ts/src/utils/domainIds.js";
+//#region src/SeamsWeb/walletIframe/host/walletMutationGuard.ts
+function requiredWallet(raw) {
+	const parsed = parseWalletId(raw);
+	if (!parsed.ok) throw new Error("Wallet mutation identity is invalid");
+	return parsed.value;
+}
+function walletForHostRequest(request, currentWalletId) {
+	switch (request.type) {
+		case "PM_ADD_WALLET_SIGNER":
+		case "PM_ADD_PASSKEY":
+		case "PM_ACTIVATE_AUTH_METHOD":
+		case "PM_SET_AUTH_METHOD_ENABLED":
+		case "PM_ADD_EMAIL_OTP":
+		case "PM_REVOKE_AUTH_METHOD":
+		case "PM_ACKNOWLEDGE_WALLET_RECOVERY_CODE_BACKUP":
+		case "PM_ROTATE_WALLET_RECOVERY_CODES":
+		case "PM_REQUEST_WALLET_CUSTODY_EMAIL_OTP_CHALLENGE":
+		case "PM_SIGN_TX_WITH_ACTIONS":
+		case "PM_SIGN_AND_SEND_TX":
+		case "PM_SIGN_DELEGATE_ACTION":
+		case "PM_SIGN_NEP413":
+		case "PM_REVOKE_LINKED_DEVICE": return requiredWallet(request.payload?.walletId);
+		case "PM_SIGN_TEMPO":
+		case "PM_RESOLVE_EXACT_KEY_EXPORT_LANE":
+		case "PM_EXPORT_KEYPAIR_UI": return requiredWallet(request.payload?.walletSession.walletId);
+		case "PM_SYNC_ACCOUNT_FLOW": {
+			const walletId = request.payload?.walletId ?? currentWalletId;
+			return walletId === null ? null : requiredWallet(walletId);
+		}
+		case "PM_SCAN_AND_LINK_DEVICE": return currentWalletId === null ? null : requiredWallet(currentWalletId);
+		case "PM_SET_TRANSACTION_VIEW":
+		case "PM_TRANSACTION_BROADCAST_STARTED":
+		case "PING":
+		case "PM_GET_AUTH_METHOD_AVAILABILITY":
+		case "PM_PREPARE_WALLET_RUNTIME":
+		case "PM_SET_CONFIG":
+		case "PM_ACTIVATE_TRANSACTION_REVIEW":
+		case "PM_CANCEL":
+		case "PM_OPEN_AUTH_MENU":
+		case "PM_CANCEL_AUTH_MENU":
+		case "PM_RESOLVE_AUTH_MENU_EXTERNAL_AUTH":
+		case "PM_REDEEM_HOSTED_WALLET_SEAMS_SESSION":
+		case "PM_REGISTER_WALLET":
+		case "PM_UNLOCK":
+		case "PM_UNLOCK_AUTH_METHOD":
+		case "PM_LOCK":
+		case "PM_LOCK_EXACT_WALLET_SESSION":
+		case "PM_GET_LAST_WALLET_MOVE_REQUEST":
+		case "PM_MOVE_WALLET":
+		case "PM_GET_WALLET_MOVE":
+		case "PM_GET_WALLET_PLACEMENT":
+		case "PM_GET_WALLET_SESSION":
+		case "PM_GET_EXACT_WALLET_SESSION_STATE":
+		case "PM_GET_NEAR_PROVISIONING_STATE":
+		case "PM_REQUEST_EMAIL_OTP_CHALLENGE":
+		case "PM_BEGIN_GOOGLE_EMAIL_OTP_WALLET_AUTH":
+		case "PM_GOOGLE_EMAIL_OTP_WALLET_AUTH_RESEND":
+		case "PM_GOOGLE_EMAIL_OTP_WALLET_AUTH_REROLL_WALLET_ID":
+		case "PM_GOOGLE_EMAIL_OTP_WALLET_AUTH_SUBMIT":
+		case "PM_GOOGLE_EMAIL_OTP_WALLET_AUTH_COMPLETE_REGISTRATION":
+		case "PM_GOOGLE_EMAIL_OTP_WALLET_AUTH_CANCEL":
+		case "PM_GET_WALLET_RECOVERY_CODE_STATUS":
+		case "PM_SEND_TRANSACTION":
+		case "PM_REPORT_TEMPO_BROADCAST_ACCEPTED":
+		case "PM_REPORT_TEMPO_BROADCAST_REJECTED":
+		case "PM_REPORT_TEMPO_FINALIZED":
+		case "PM_REPORT_TEMPO_DROPPED_OR_REPLACED":
+		case "PM_RECONCILE_TEMPO_NONCE_LANE":
+		case "PM_GET_RECENT_UNLOCKS":
+		case "PM_SET_CONFIRM_BEHAVIOR":
+		case "PM_SET_CONFIRMATION_CONFIG":
+		case "PM_GET_CONFIRMATION_CONFIG":
+		case "PM_HAS_PASSKEY":
+		case "PM_LIST_LINKED_DEVICES":
+		case "PM_START_DEVICE2_LINKING_FLOW":
+		case "PM_DEVICE_LINK_TARGET_FACTOR_ACTION":
+		case "PM_DEVICE_LINK_EMAIL_OTP_BASE_FACTOR_ACTION":
+		case "PM_CANCEL_DEVICE_LINKING": return null;
+		default: throw new Error("Unsupported wallet mutation request");
+	}
+}
+//#endregion
+export { walletForHostRequest };
+
+//# sourceMappingURL=walletMutationGuard.js.map

package/dist/esm/SeamsWeb/walletIframe/shared/configuration.js

@@ -10,6 +10,7 @@ function resolveWalletRpId(config) {
 }
 function createWalletHostConfig(config) {
 	return {
+		authMethods: config.authMethods,
 		network: config.network,
 		registration: config.registration,
 		signing: config.signing,
@@ -23,6 +24,7 @@ function createWalletHostConfig(config) {
 }
 function replaceWalletHostAppearance(config, appearance) {
 	return {
+		authMethods: config.authMethods,
 		network: config.network,
 		registration: config.registration,
 		signing: config.signing,
@@ -31,7 +33,27 @@ function replaceWalletHostAppearance(config, appearance) {
 		ui: { appearance }
 	};
 }
+function normalizeForStableSerialize(value) {
+	if (Array.isArray(value)) return value.map(normalizeForStableSerialize);
+	if (value && typeof value === "object") {
+		const record = value;
+		const normalized = {};
+		for (const key of Object.keys(record).sort()) normalized[key] = normalizeForStableSerialize(record[key]);
+		return normalized;
+	}
+	return value;
+}
+function walletHostExecutionFingerprint(config) {
+	return JSON.stringify(normalizeForStableSerialize({
+		authMethods: config?.authMethods,
+		network: config?.network,
+		registration: config?.registration,
+		signing: config?.signing,
+		webauthn: config?.webauthn,
+		rpId: config?.wallet.rpId
+	}));
+}
 //#endregion
-export { createWalletHostConfig, replaceWalletHostAppearance };
+export { createWalletHostConfig, replaceWalletHostAppearance, walletHostExecutionFingerprint };
 
 //# sourceMappingURL=configuration.js.map

package/dist/esm/SeamsWeb/walletIframe/shared/exactSessionState.js

@@ -324,6 +324,7 @@ function parseWalletAuthMethodBinding(value) {
 function walletIdFromAuthBinding(binding) {
 	switch (binding.kind) {
 		case "passkey": return binding.scope.wallet.walletId;
+		case "voiceid":
 		case "email_otp": return binding.wallet.walletId;
 	}
 	throw new Error("Wallet auth-method binding kind is invalid");

package/dist/esm/SeamsWeb/walletIframe/shared/messages.js

@@ -405,6 +405,12 @@ function parseHostedAuthMenuOutcome(value) {
 				"method"
 			])) return null;
 			const walletId = parseWalletId(record.walletId);
+			if (record.kind === "authenticated" && record.method === "voiceid") return walletId.ok ? {
+				kind: "authenticated",
+				authMenuSessionId,
+				walletId: walletId.value,
+				method: "voiceid"
+			} : null;
 			const method = record.method === "passkey" || record.method === "google_email_otp" ? record.method : null;
 			return walletId.ok && method ? {
 				kind: record.kind,
@@ -458,7 +464,7 @@ function parseHostedAuthMenuOutcome(value) {
 		default: return null;
 	}
 }
-const WALLET_PROTOCOL_VERSION = "16.0.0";
+const WALLET_PROTOCOL_VERSION = "17.0.0";
 const WALLET_IFRAME_PROTOCOL_VERSION_MISMATCH = "WALLET_IFRAME_PROTOCOL_VERSION_MISMATCH";
 const HOSTED_WALLET_REDEMPTION_PAYLOAD_FIELDS = [
 	"home",

package/dist/esm/SeamsWeb/walletIframe/shared/transactionReview.js

@@ -33,6 +33,25 @@ function parseIdentity(value) {
 		generation: value.generation
 	});
 }
+function parseTransactionReviewWire(value) {
+	if (!isPlainObject(value) || value.kind !== "transaction_review_v1" || !onlyKeys(value, [
+		"kind",
+		"connectionId",
+		"requestId",
+		"surfaceId",
+		"generation",
+		"validity"
+	])) throw new TransactionReviewError("review_invalid_input", "Invalid transaction review metadata");
+	const identity = parseIdentity(value);
+	return Object.freeze({
+		kind: "transaction_review_v1",
+		connectionId: identity.connectionId,
+		requestId: identity.requestId,
+		surfaceId: identity.surfaceId,
+		generation: identity.generation,
+		validity: parseTransactionReviewValidity(value.validity)
+	});
+}
 function parseTransactionReviewState(value) {
 	if (!isPlainObject(value) || !onlyKeys(value, [
 		"connectionId",
@@ -78,6 +97,6 @@ function transactionReviewCancellationCode(value) {
 	}
 }
 //#endregion
-export { TransactionReviewError, assertTransactionReviewValid, parseTransactionReviewState, parseTransactionReviewValidity, reviewedConfirmationConfig, sameTransactionReviewIdentity, transactionReviewCancellationCode };
+export { TransactionReviewError, assertTransactionReviewValid, parseTransactionReviewState, parseTransactionReviewValidity, parseTransactionReviewWire, reviewedConfirmationConfig, sameTransactionReviewIdentity, transactionReviewCancellationCode };
 
 //# sourceMappingURL=transactionReview.js.map

package/dist/esm/core/authMethods/availability.js

@@ -0,0 +1,28 @@
+import { requireRecord } from "../../shared-ts/src/utils/validation.js";
+import { rejectUnknownFields } from "../../shared-ts/src/utils/exactRecord.js";
+import { IndexedDBManager } from "../indexedDB/index.js";
+//#region src/core/authMethods/availability.ts
+function availabilityKey(walletId, methodId) {
+	return `wallet-auth-method-availability:${encodeURIComponent(walletId)}:${encodeURIComponent(methodId)}`;
+}
+async function readAuthMethodEnabled(walletId, methodId) {
+	return parseStoredAuthMethodAvailability(await IndexedDBManager.getAppState(availabilityKey(walletId, methodId))).enabled;
+}
+function parseStoredAuthMethodAvailability(raw) {
+	if (raw === void 0 || raw === null) return {
+		enabled: true,
+		revision: "initial"
+	};
+	const record = requireRecord(raw, "authentication method availability");
+	rejectUnknownFields(record, ["kind", "revision"], "authentication method availability");
+	if (record.kind !== "enabled" && record.kind !== "disabled") throw new Error("Authentication method availability is invalid.");
+	if (record.revision !== void 0 && (typeof record.revision !== "string" || !record.revision)) throw new Error("Authentication method availability revision is invalid.");
+	return {
+		enabled: record.kind === "enabled",
+		revision: record.revision ?? "initial"
+	};
+}
+//#endregion
+export { availabilityKey, parseStoredAuthMethodAvailability, readAuthMethodEnabled };
+
+//# sourceMappingURL=availability.js.map

package/dist/esm/core/authMethods/availabilityTypes.js

@@ -0,0 +1,29 @@
+import { requireRecord } from "../../shared-ts/src/utils/validation.js";
+import { parseWalletAuthMethodId } from "../../shared-ts/src/utils/domainIds.js";
+import { rejectUnknownFields } from "../../shared-ts/src/utils/exactRecord.js";
+//#region src/core/authMethods/availabilityTypes.ts
+function parseAuthMethodAvailability(value) {
+	const record = requireRecord(value, "authentication method availability");
+	if (record.kind === "not_enrolled") {
+		rejectUnknownFields(record, ["kind"], "authentication method availability");
+		return { kind: "not_enrolled" };
+	}
+	rejectUnknownFields(record, ["kind", "walletAuthMethodId"], "authentication method availability");
+	const method = parseWalletAuthMethodId(record.walletAuthMethodId);
+	if (!method.ok) throw new Error("Authentication method identity is invalid.");
+	switch (record.kind) {
+		case "enabled": return {
+			kind: "enabled",
+			walletAuthMethodId: method.value
+		};
+		case "disabled": return {
+			kind: "disabled",
+			walletAuthMethodId: method.value
+		};
+		default: throw new Error("Authentication method availability is invalid.");
+	}
+}
+//#endregion
+export { parseAuthMethodAvailability };
+
+//# sourceMappingURL=availabilityTypes.js.map

package/dist/esm/core/authMethods/plugins.js

@@ -0,0 +1,17 @@
+import { isPlainObject } from "../../shared-ts/src/utils/validation.js";
+//#region src/core/authMethods/plugins.ts
+function parseWalletAuthMethodPlugins(value) {
+	if (!Array.isArray(value)) throw new Error("authMethods must be an array of wallet auth method plugins.");
+	const plugins = [];
+	const seen = /* @__PURE__ */ new Set();
+	for (const candidate of value) {
+		if (!isPlainObject(candidate) || Object.keys(candidate).length !== 1 || candidate.kind !== "voiceid" || seen.has(candidate.kind)) throw new Error("Unsupported or duplicate wallet auth method plugin.");
+		seen.add(candidate.kind);
+		plugins.push({ kind: "voiceid" });
+	}
+	return plugins;
+}
+//#endregion
+export { parseWalletAuthMethodPlugins };
+
+//# sourceMappingURL=plugins.js.map

package/dist/esm/core/config/configBuilder.js

@@ -1,5 +1,6 @@
 import { normalizeTrimmedString } from "../../shared-ts/src/utils/normalize.js";
 import { normalizeWalletLocale } from "../ui/locale.js";
+import { parseWalletAuthMethodPlugins } from "../authMethods/plugins.js";
 import { copyEcdsaSignerProvisioningDefaults, resolveAppearanceTheme, resolveBoolean, resolveChains, resolveIntegerInRange, resolveThemePalette } from "./configHelpers.js";
 import { normalizeWalletHostVariant } from "../browser/walletIframe/hostVariant.js";
 import { SIGNING_SESSION_SEAL_ALG, SIGNING_SESSION_SEAL_GROUP_ID } from "../../shared-ts/src/utils/signingSessionSeal.js";
@@ -156,6 +157,7 @@ function buildConfigsFromDefaults(args) {
 		defaults
 	});
 	return {
+		authMethods: parseWalletAuthMethodPlugins(overrides.authMethods ?? defaults.authMethods),
 		network: {
 			chains,
 			relayer: {

package/dist/esm/core/config/defaultConfigs.js

@@ -11,6 +11,7 @@ const DEFAULT_ROUTER_AB_ECDSA_DERIVATION_PRESIGNATURE_POOL_POLICY = {
 	refillAttemptTimeoutMs: 3e4
 };
 const PASSKEY_MANAGER_DEFAULT_CONFIGS = {
+	authMethods: [],
 	network: {
 		chains: [
 			{