@seams/wallet 0.23.0 → 0.24.0

package/dist/types/wallet/src/core/indexedDB/seamsWalletDB/repositories.d.ts

@@ -1,9 +1,9 @@
 import { type WalletRecoveryOperationId, type MpcMaterialActivationRef, type WalletAuthMethodId, type WalletAuthorityId, type WalletId } from '../../../../../shared-ts/src/utils/domainIds';
-import { type ActiveWalletAuthMethodRecordV2, type PendingWalletAuthMethodRecordV2, type WalletAuthMethodRecordV2 } from '../../../../../shared-ts/src/utils/walletAuthMethodRecord';
+import { type ActiveWalletAuthMethodRecordV2, type EmailOtpWalletAuthMethodRecordV2, type PasskeyWalletAuthMethodRecordV2, type PendingWalletAuthMethodRecordV2, type VoiceIdWalletAuthMethodRecordV2, type WalletAuthMethodRecordV2 } from '../../../../../shared-ts/src/utils/walletAuthMethodRecord';
 import { type ActiveRecoveredWalletAuthorityV1, type ActiveWalletAuthorityV1, type PendingWalletAuthorityV1, type WalletAuthorityV1 } from '../../../../../shared-ts/src/authorization/walletAuthority';
 import { type WalletAuthAuthority } from '../../../../../shared-ts/src/utils/walletAuthAuthority';
 import type { KeyMaterialKind, KeyMaterialRecord } from '../keyMaterial.types';
-import type { AccountRef, AccountSignerRecord, AccountSignerStatus, ChainAccountRecord, EnqueueSignerOperationInput, LastProfileState, LocalAuthorityInstallationReceiptV1, LocalWalletAuthMethodRecord, LocalWalletAuthMethodProjectionV2, NonceLaneLeaseStoreRecord, ProfileAuthenticatorRecord, ProfileContinuitySnapshot, ProfileRecord, RetainVerifiedEmailOtpLocalPresentationInputV1, RetainVerifiedEmailOtpLocalPresentationResultV1, SignerMutationOptions, SignerOperationStatus, SignerOpOutboxRecord, UpsertChainAccountInput, UpsertProfileInput, UserPreferences, WalletAuthorityExportRootRecordV1, WalletAuthoritySignerMaterialRecordV1, WalletSelectionRecordV1, WalletSignerLookup } from '../passkeyClientDB.types';
+import type { AccountRef, AccountSignerRecord, AccountSignerStatus, ChainAccountRecord, EnqueueSignerOperationInput, LastProfileState, LocalAuthorityInstallationReceiptV1, LocalWalletAuthMethodRecord, LocalWalletAuthMethodProjectionV2, NonceLaneLeaseStoreRecord, ProfileAuthenticatorRecord, ProfileContinuitySnapshot, ProfileRecord, RetainVerifiedEmailOtpLocalPresentationInputV1, RetainVerifiedEmailOtpLocalPresentationResultV1, SignerMutationOptions, SignerOperationStatus, SignerOpOutboxRecord, UpsertChainAccountInput, UpsertProfileInput, UserPreferences, WalletAuthorityExportRootRecordV1, WalletAuthoritySignerMaterialRecordV1, WalletSelectionRecordV1, WalletAuthMethodLocalPresentationV1, WalletSignerLookup } from '../passkeyClientDB.types';
 import type { ThresholdEcdsaChainTarget } from '../../signingEngine/interfaces/ecdsaChainTarget';
 import { type ActivateAccountSignerInput, type ActivateAccountSignerResult, type StageAccountSignerInput, type StageAccountSignerResult } from '../accountSignerLifecycle';
 import { type PendingWalletRegistrationCommitV1 } from '../pendingWalletRegistrationCommit';
@@ -17,6 +17,48 @@ type AppStateRow<T = unknown> = {
     key: string;
     value: T;
 };
+type WalletAuthorityRow = {
+    authority_id: string;
+    wallet_id: string;
+    state: WalletAuthorityV1['state'];
+    device_id: string;
+    updated_at: number;
+    record: WalletAuthorityV1;
+};
+type WalletAuthMethodV2RowBase = {
+    wallet_auth_method_id: string;
+    wallet_id: string;
+    wallet_authority_id: string;
+    status: WalletAuthMethodRecordV2['status'];
+    updated_at: number;
+};
+type WalletAuthMethodV2Row = (WalletAuthMethodV2RowBase & {
+    kind: 'passkey';
+    presentation: Extract<WalletAuthMethodLocalPresentationV1, {
+        readonly kind: 'passkey';
+    }>;
+    record: PasskeyWalletAuthMethodRecordV2;
+}) | (WalletAuthMethodV2RowBase & {
+    kind: 'email_otp';
+    presentation: Extract<WalletAuthMethodLocalPresentationV1, {
+        readonly kind: 'email_otp';
+    }>;
+    record: EmailOtpWalletAuthMethodRecordV2;
+}) | (WalletAuthMethodV2RowBase & {
+    kind: 'voiceid';
+    presentation: Extract<WalletAuthMethodLocalPresentationV1, {
+        readonly kind: 'voiceid';
+    }>;
+    record: VoiceIdWalletAuthMethodRecordV2;
+});
+type WalletSelectionRow = {
+    wallet_id: string;
+    wallet_auth_method_id: string;
+    lock_generation: number;
+    lock_state: WalletSelectionRecordV1['lockState'];
+    updated_at_ms: number;
+    record: WalletSelectionRecordV1;
+};
 export type LocalAuthorityInstallationInputV1 = {
     readonly authority: PendingWalletAuthorityV1;
     readonly authMethod: PendingWalletAuthMethodRecordV2;
@@ -213,6 +255,9 @@ export type StoreWalletSignerFinalizeBatchResult = StoreWalletRegistrationFinali
 export type StoreWalletRegistrationFinalizeBatchResult = {
     signerActivations: ActivateAccountSignerResult[];
 };
+export declare function parseWalletAuthorityStorageRow(value: unknown): WalletAuthorityRow | null;
+export declare function parseWalletAuthMethodV2StorageRow(value: unknown): WalletAuthMethodV2Row | null;
+export declare function parseWalletSelectionStorageRow(value: unknown): WalletSelectionRow | null;
 export declare class SeamsWalletRepositories {
     private readonly manager;
     constructor(manager: SeamsWalletDBManager);
@@ -225,6 +270,12 @@ export declare class SeamsWalletRepositories {
         readonly walletAuthMethodId: WalletAuthMethodId;
         readonly unlockedAtMs: number;
     }): Promise<void>;
+    markWalletSelectionUnlockedAtGeneration(input: {
+        readonly walletId: WalletId;
+        readonly walletAuthMethodId: WalletAuthMethodId;
+        readonly unlockedAtMs: number;
+        readonly expectedLockGeneration: number;
+    }): Promise<void>;
     persistRecoveredWalletAuthority(input: RecoveredWalletAuthorityProjectionInputV1): Promise<void>;
     getLocalAuthorityInstallationReceipt(authorityId: string): Promise<LocalAuthorityInstallationReceiptV1 | null>;
     private finalizeLocalAuthorityActivationInTransaction;

package/dist/types/wallet/src/core/indexedDB/unifiedIndexedDBManager.d.ts

@@ -189,6 +189,7 @@ export declare class UnifiedIndexedDBManager {
         readonly walletAuthMethodId: WalletAuthMethodId;
         readonly unlockedAtMs: number;
     }): Promise<void>;
+    markWalletSelectionUnlockedAtGeneration(input: Parameters<SeamsWalletRepositories['markWalletSelectionUnlockedAtGeneration']>[0]): Promise<void>;
     persistRecoveredWalletAuthority(input: RecoveredWalletAuthorityProjectionInputV1): Promise<void>;
     getLocalAuthorityInstallationReceipt(authorityId: string): Promise<LocalAuthorityInstallationReceiptV1 | null>;
     getWalletAuthority(walletAuthorityId: string): Promise<import("../../../../shared-ts/src/authorization").WalletAuthorityV1 | null>;

package/dist/types/wallet/src/core/rpcClients/relayer/walletRegistration.d.ts

@@ -534,7 +534,7 @@ type RevokeWalletAuthMethodResponse = {
     readonly ok: true;
     readonly walletId: WalletId;
     readonly authMethod: {
-        readonly kind: 'email_otp';
+        readonly kind: 'email_otp' | 'voiceid';
         readonly status: 'revoked';
     };
     readonly rpId?: never;

package/dist/types/wallet/src/core/signingEngine/flows/recovery/ecdsaExportMaterial.d.ts

@@ -122,9 +122,12 @@ export type ActiveWalletAuthorityEcdsaExportMaterial = {
 export type EcdsaExportMaterial = FreshEmailOtpEcdsaExportMaterial | FreshPasskeyEcdsaExportMaterial | ActiveWalletAuthorityEcdsaExportMaterial;
 export declare function ecdsaExportBoundaryChain(lane: ExactEcdsaExportLane): 'evm' | 'tempo';
 export declare function ecdsaSigningTargetFromChainTarget(chainTarget: ThresholdEcdsaChainTarget): EvmFamilySigningTarget;
-export declare function isConcreteEcdsaExportLane(lane: AvailableEcdsaSigningLane | null | undefined): lane is Extract<ConcreteAvailableEcdsaSigningLane, {
-    source: 'canonical_capability' | 'active_wallet_authority';
-}>;
+export type ConcreteEcdsaExportAvailableLane = ConcreteAvailableEcdsaSigningLane & {
+    auth: Exclude<ConcreteAvailableEcdsaSigningLane['auth'], {
+        kind: 'voiceid';
+    }>;
+};
+export declare function isConcreteEcdsaExportLane(lane: AvailableEcdsaSigningLane | null | undefined): lane is ConcreteEcdsaExportAvailableLane;
 export declare function resolveFreshEmailOtpEcdsaExportMaterialForLane(deps: EcdsaExportSessionStoreDeps, exportLane: ExactEcdsaExportLane): Promise<FreshEmailOtpEcdsaExportMaterial>;
 export declare function resolveEcdsaExportMaterialForLane(deps: EcdsaExportSessionStoreDeps, exportLane: ExactEcdsaExportLane): Promise<EcdsaExportMaterial>;
 export {};

package/dist/types/wallet/src/core/signingEngine/flows/signEvmFamily/ecdsaSelection.d.ts

@@ -1,5 +1,5 @@
 import type { AccountAuthMetadata } from '../../interfaces/accountAuthMetadata';
-import { type EmailOtpWalletAuthAuthority, type PasskeyWalletAuthAuthority, type WalletAuthAuthority } from '../../../../../../shared-ts/src/utils/walletAuthAuthority';
+import { type VoiceIdWalletAuthAuthority, type EmailOtpWalletAuthAuthority, type PasskeyWalletAuthAuthority, type WalletAuthAuthority } from '../../../../../../shared-ts/src/utils/walletAuthAuthority';
 import type { AuthorizedEcdsaLaneCandidate, EcdsaLaneCandidate } from '../../session/identity/laneIdentity';
 import { type EvmFamilyAccountMetadataDeps } from './accountAuth';
 import { type ResolvedEvmFamilyEcdsaSigningLane } from './ecdsaLanes';
@@ -79,7 +79,13 @@ type PasskeyEcdsaCommittedLane = {
     authorization: ExactEvmFamilyWalletSessionAuthorization;
     authLane?: never;
 };
-export type EcdsaCommittedLane<A extends WalletAuthAuthority = WalletAuthAuthority> = A extends EmailOtpWalletAuthAuthority ? EmailOtpEcdsaCommittedLane : A extends PasskeyWalletAuthAuthority ? PasskeyEcdsaCommittedLane : never;
+type VoiceIdEcdsaCommittedLane = {
+    lane: ResolvedEvmFamilyEcdsaSigningLane;
+    authority: VoiceIdWalletAuthAuthority;
+    authorization: ExactEvmFamilyWalletSessionAuthorization;
+    authLane?: never;
+};
+export type EcdsaCommittedLane<A extends WalletAuthAuthority = WalletAuthAuthority> = A extends EmailOtpWalletAuthAuthority ? EmailOtpEcdsaCommittedLane : A extends PasskeyWalletAuthAuthority ? PasskeyEcdsaCommittedLane : A extends VoiceIdWalletAuthAuthority ? VoiceIdEcdsaCommittedLane : never;
 export declare function resolveEvmFamilyEcdsaSigningSelection(args: {
     deps: EvmFamilyEcdsaSigningSelectionDeps;
     walletId: WalletId;

package/dist/types/wallet/src/core/signingEngine/session/availability/availableSigningLanes.d.ts

@@ -3,7 +3,7 @@ import { type NearEd25519SigningKeyId } from '../../../../../../shared-ts/src/ut
 import type { SigningSessionSealedStoreRecord } from '../persistence/sealedSessionRecords';
 import type { EcdsaLaneCandidate, Ed25519LaneCandidate } from '../identity/laneIdentity';
 import { type EvmFamilyEcdsaKeyIdentity, type PasskeyEcdsaAuthBinding, type ResolvedEvmFamilyEcdsaKey, type VerifiedEcdsaPublicFacts } from '../identity/evmFamilyEcdsaIdentity';
-import { type WalletAuthAuthority } from '../../../../../../shared-ts/src/utils/walletAuthAuthority';
+import type { SignerAuthMethod } from '../../../../../../shared-ts/src/utils/signerDomain';
 import { type ThresholdEcdsaChainTarget, type WalletId } from '../../interfaces/ecdsaChainTarget';
 import { type OwnerLaneScope, type SigningLaneAuthBinding } from '../identity/signingLaneAuthBinding';
 import { type MpcMaterialActivationRef } from '../../../../../../shared-ts/src/utils/domainIds';
@@ -43,7 +43,7 @@ type ConcreteAvailableEcdsaSigningLaneAuth = {
     linkedOwner?: never;
 } | {
     auth: Extract<SigningLaneAuthBinding, {
-        kind: 'email_otp';
+        kind: 'email_otp' | 'voiceid';
     }>;
     resolvedKey?: never;
     linkedOwner?: never;
@@ -114,7 +114,7 @@ type EcdsaLaneConflict = {
     field: 'ecdsaThresholdKeyId' | 'thresholdOwnerAddress' | 'keyHandle' | 'publicKeyB64u' | 'participantIds';
     values: readonly string[];
 };
-export declare function availableEcdsaSigningLaneAuthMethod(lane: Pick<ConcreteAvailableEcdsaSigningLane, 'auth'>): WalletAuthAuthority['factor']['kind'];
+export declare function availableEcdsaSigningLaneAuthMethod<T extends Pick<ConcreteAvailableEcdsaSigningLane, 'auth'>>(lane: T): T['auth']['kind'];
 type MissingAvailableEd25519SigningLane = {
     curve: 'ed25519';
     chain: 'near';
@@ -159,19 +159,19 @@ export type ConcreteAvailableEd25519SigningLane = ConcreteAvailableEd25519Signin
     state: 'deferred';
 });
 export type AvailableEd25519SigningLane = MissingAvailableEd25519SigningLane | ConcreteAvailableEd25519SigningLane;
-export declare function availableEd25519SigningLaneAuthMethod(lane: Pick<ConcreteAvailableEd25519SigningLane, 'auth'>): 'email_otp' | 'passkey';
+export declare function availableEd25519SigningLaneAuthMethod(lane: Pick<ConcreteAvailableEd25519SigningLane, 'auth'>): SignerAuthMethod;
 type InvalidAvailableSigningLaneDiagnostic = {
     curve: 'ed25519';
     source: 'canonical_lane_inventory';
     reason: 'missing_router_ab_state' | 'missing_threshold_session_id' | 'ambiguous_material' | 'conflicting_key_material';
-    authMethod?: 'email_otp' | 'passkey';
+    authMethod?: SignerAuthMethod;
     thresholdSessionId?: string;
     message?: string;
 } | {
     curve: 'ecdsa';
     source: 'runtime_session_record' | 'canonical_lane_inventory';
     reason: 'missing_router_ab_state' | 'missing_threshold_session_id' | 'unsupported_ecdsa_chain_target' | 'invalid_runtime_public_facts' | 'conflicting_key_material' | 'ambiguous_material';
-    authMethod?: 'email_otp' | 'passkey';
+    authMethod?: SignerAuthMethod;
     thresholdSessionId?: string;
     targetKey?: string;
     message?: string;
@@ -206,7 +206,7 @@ export type ReadAvailableSigningLanesInput = {
     walletId: WalletId | string;
     subjectId?: never;
     ecdsaChainTargets: readonly ThresholdEcdsaChainTarget[];
-    authMethod?: 'email_otp' | 'passkey';
+    authMethod?: SignerAuthMethod;
     /**
      * When present, candidates are filtered to this exact owner before
      * canonicalization. Sibling owner lanes and lanes on other signer slots
@@ -220,21 +220,21 @@ export type ReadAvailableSigningLanesForSigningInput = {
     walletId: WalletId | string;
     subjectId?: never;
     curve: 'ed25519';
-    authMethod?: 'email_otp' | 'passkey';
+    authMethod?: SignerAuthMethod;
     ownerScope: OwnerLaneScope;
 } | {
     walletId: WalletId;
     subjectId?: never;
     curve: 'ecdsa';
     ecdsaChainTargets: readonly ThresholdEcdsaChainTarget[];
-    authMethod?: 'email_otp' | 'passkey';
+    authMethod?: SignerAuthMethod;
     ownerScope: OwnerLaneScope;
 };
 export type ReadAvailableSigningLanesPorts = {
     listSealedRecordsForWallet: (args: {
         walletId: string;
         filter: {
-            authMethod?: 'email_otp' | 'passkey';
+            authMethod?: SignerAuthMethod;
             curve: 'ed25519';
         };
     }) => Promise<SigningSessionSealedStoreRecord[]>;

package/dist/types/wallet/src/core/signingEngine/session/identity/exactSigningLaneIdentity.d.ts

@@ -67,7 +67,7 @@ type ExactEd25519ExportMaterialIdentityInput<A extends SigningLaneAuthBinding =
 };
 type ExactEcdsaSigningLaneIdentityInput = {
     signer: EvmFamilyEcdsaSignerBinding;
-    auth: SigningLaneAuthBinding;
+    auth: ExactEcdsaSigningLaneIdentity['auth'];
 };
 type NearEd25519SignerBoundaryFields = {
     walletId: WalletId;

package/dist/types/wallet/src/core/signingEngine/session/identity/laneIdentity.d.ts

@@ -177,6 +177,7 @@ export type SelectedEd25519Lane = BaseSelectedLane & {
     accountId?: never;
 };
 export type SelectedEcdsaLane = CommonSelectedLane & {
+    auth: ExactEcdsaSigningLaneIdentity['auth'];
     identity: ExactEcdsaSigningLaneIdentity;
     curve: 'ecdsa';
     chain: 'evm' | 'tempo';
@@ -199,7 +200,7 @@ export type SelectedEcdsaLaneInput = {
     materialActivation: MpcMaterialActivationRef;
     keyHandle: unknown;
     walletId: WalletId;
-    auth: SigningLaneAuthBinding;
+    auth: ExactEcdsaSigningLaneIdentity['auth'];
     authorization: ExactEvmFamilyWalletSessionAuthorization;
     chainTarget: ThresholdEcdsaChainTarget;
 };
@@ -247,6 +248,7 @@ export type Ed25519LaneCandidate = BaseEd25519LaneCandidate & ({
     state: 'deferred';
 });
 type BaseEcdsaLaneCandidate = CommonLaneCandidate & {
+    auth: ExactEcdsaSigningLaneIdentity['auth'];
     curve: 'ecdsa';
     chain: 'evm' | 'tempo';
     walletId: WalletId;

package/dist/types/wallet/src/core/signingEngine/session/identity/signingLaneAuthBinding.d.ts

@@ -11,6 +11,10 @@ export type SigningLaneAuthBinding = ExclusiveUnion<{
 } | {
     kind: typeof SIGNER_AUTH_METHODS.emailOtp;
     providerSubjectId: string;
+} | {
+    kind: 'voiceid';
+    walletAuthMethodId: WalletAuthMethodId;
+    deviceKeyId: DigestB64u;
 }>;
 /**
  * Identity that distinguishes one linked Email OTP owner from the wallet-wide
@@ -24,8 +28,8 @@ type LinkedOwnerLaneIdentityV1 = {
     readonly walletAuthMethodId: WalletAuthMethodId;
     readonly authorityDigest: DigestB64u;
 };
-/** Exact Wallet Authority address carried by every resolved Email OTP owner scope. */
-type EmailOtpOwnerAuthorityBindingV1 = {
+/** Exact Wallet Authority address for a method-bound owner scope. */
+type WalletOwnerAuthorityBindingV1 = {
     readonly walletAuthMethodId: WalletAuthMethodId;
     readonly authorityDigest: WalletAuthorityBindingDigest;
 };
@@ -37,6 +41,14 @@ type EmailOtpOwnerAuthorityBindingV1 = {
  * authenticator; Email OTP has no local authenticator and no slot.
  */
 export type OwnerLaneScope = {
+    auth: Extract<SigningLaneAuthBinding, {
+        kind: 'voiceid';
+    }>;
+    keyFamily?: never;
+    signerSlot?: never;
+    linkedOwner?: never;
+    ownerAuthority: WalletOwnerAuthorityBindingV1;
+} | {
     auth: Extract<SigningLaneAuthBinding, {
         kind: typeof SIGNER_AUTH_METHODS.passkey;
     }>;
@@ -58,14 +70,14 @@ export type OwnerLaneScope = {
     }>;
     signerSlot?: never;
     linkedOwner?: never;
-    ownerAuthority: EmailOtpOwnerAuthorityBindingV1;
+    ownerAuthority: WalletOwnerAuthorityBindingV1;
 } | {
     auth: Extract<SigningLaneAuthBinding, {
         kind: typeof SIGNER_AUTH_METHODS.emailOtp;
     }>;
     signerSlot?: never;
     linkedOwner: LinkedOwnerLaneIdentityV1;
-    ownerAuthority: EmailOtpOwnerAuthorityBindingV1;
+    ownerAuthority: WalletOwnerAuthorityBindingV1;
 };
 export declare function signingLaneAuthMethod(auth: SigningLaneAuthBinding): SignerAuthMethod;
 export declare function signingLaneAuthBindingKey(auth: SigningLaneAuthBinding): string;

package/dist/types/wallet/src/core/signingEngine/session/material/ecdsaSealedRuntime.d.ts

@@ -6,10 +6,16 @@ import type { CurrentEcdsaSealedSessionRecord } from '../persistence/sealedSessi
 import { type EcdsaClientVerifyingPublicKey33B64u, type EcdsaRoleLocalPersistedMaterialRef } from '../keyMaterialBrands';
 import type { MpcCapabilityHydrationBlockedReason } from './mpcCapabilityHydration';
 import { type ActiveEcdsaCapabilityManifest } from './ecdsaCapabilityManifest';
-import type { EmailOtpWalletAuthAuthority } from '../../../../../../shared-ts/src/utils/walletAuthAuthority';
+import type { EmailOtpWalletAuthAuthority, VoiceIdWalletAuthAuthority } from '../../../../../../shared-ts/src/utils/walletAuthAuthority';
 import type { SigningSessionSealAuthMethod } from '../../../../../../shared-ts/src/utils/signingSessionSeal';
 import type { ReadonlyExclusiveUnion } from '../../../../../../shared-ts/src/utils/variant';
-export type ExactEcdsaSealedRuntimeAuthBinding = {
+export type ExactEcdsaRuntimeAuthBinding = ReadonlyExclusiveUnion<{
+    readonly kind: 'voiceid';
+    readonly voiceIdAuthority: VoiceIdWalletAuthAuthority;
+    readonly rpId?: never;
+    readonly credentialIdB64u?: never;
+    readonly providerSubjectId?: never;
+} | {
     readonly kind: 'passkey';
     readonly rpId: string;
     readonly credentialIdB64u: string;
@@ -21,7 +27,7 @@ export type ExactEcdsaSealedRuntimeAuthBinding = {
     readonly emailOtpAuthority: EmailOtpWalletAuthAuthority;
     readonly rpId?: never;
     readonly credentialIdB64u?: never;
-};
+}>;
 /** The exact sealed record this runtime was read from. Carried so callers can
  * write allowance changes back to the same record they resolved. */
 type ExactEcdsaSealedRecordIdentity = {
@@ -47,7 +53,7 @@ export type ExactEcdsaMaterialRuntime = {
     /** The durable material this runtime unlocks, in the canonical persisted form
      * the role-local material resolver consumes. */
     readonly roleLocalMaterialRef: EcdsaRoleLocalPersistedMaterialRef;
-    readonly authBinding: ExactEcdsaSealedRuntimeAuthBinding;
+    readonly authBinding: ExactEcdsaRuntimeAuthBinding;
 };
 export type ExactEcdsaCapabilityRuntime = Omit<ExactEcdsaMaterialRuntime, 'authBinding'> & {
     readonly kind: 'exact_ecdsa_capability_runtime_v1';
@@ -55,6 +61,9 @@ export type ExactEcdsaCapabilityRuntime = Omit<ExactEcdsaMaterialRuntime, 'authB
 };
 export type ExactEcdsaSealedRuntime = ExactEcdsaMaterialRuntime & {
     readonly kind: 'exact_ecdsa_sealed_runtime_v1';
+    readonly authBinding: Exclude<ExactEcdsaRuntimeAuthBinding, {
+        kind: 'voiceid';
+    }>;
     readonly expiresAtMs: number;
     readonly remainingUses: number;
     readonly sealedRecord: ExactEcdsaSealedRecordIdentity;

package/dist/types/wallet/src/core/signingEngine/session/material/ecdsaSigningCapability.d.ts

@@ -3,12 +3,12 @@ import type { PersistedEcdsaRoleLocalMaterial } from './ecdsaRoleLocalMaterialRe
 import { type MpcMaterialActivationRef } from '../../../../../../shared-ts/src/utils/domainIds';
 import type { ActiveWalletSessionV1, WalletSessionOperationCredentialV1 } from '../../../../../../shared-ts/src/device-linking/contracts';
 import type { ResolveSelectedWalletAuthorityResultV1 } from '../../../indexedDB/seamsWalletDB/repositories';
-import type { ExactEcdsaCapabilityRuntime, ExactEcdsaDirectCapabilityRuntime, ExactEcdsaSealedRuntimeAuthBinding, ExactEcdsaWalletSessionRuntime } from './ecdsaSealedRuntime';
+import type { ExactEcdsaCapabilityRuntime, ExactEcdsaDirectCapabilityRuntime, ExactEcdsaRuntimeAuthBinding, ExactEcdsaWalletSessionRuntime } from './ecdsaSealedRuntime';
 import type { ActiveWalletSessionQuotaStatusV1, WalletSessionStatusReadScope } from '../../../rpcClients/relayer/walletSessionAuthorizationStatus';
 import type { ActiveWalletAuthorityV1 } from '../../../../../../shared-ts/src/authorization/walletAuthority';
 import { type WalletAuthAuthority } from '../../../../../../shared-ts/src/utils/walletAuthAuthority';
 import { type ThresholdEcdsaChainTarget, type WalletId } from '../../interfaces/ecdsaChainTarget';
-import type { ActiveEmailOtpWalletAuthMethodRecordV2, ActivePasskeyWalletAuthMethodRecordV2, ActiveWalletAuthMethodRecordV2 } from '../../../../../../shared-ts/src/utils/walletAuthMethodRecord';
+import type { ActiveVoiceIdWalletAuthMethodRecordV2, ActiveEmailOtpWalletAuthMethodRecordV2, ActivePasskeyWalletAuthMethodRecordV2, ActiveWalletAuthMethodRecordV2 } from '../../../../../../shared-ts/src/utils/walletAuthMethodRecord';
 type ExactEvmFamilyWalletSessionAuthorizationBase = {
     readonly kind: 'exact_evm_family_wallet_session_authorization_v1';
     readonly selectedAuthority: ActiveWalletAuthorityV1;
@@ -16,15 +16,24 @@ type ExactEvmFamilyWalletSessionAuthorizationBase = {
     readonly operationCredential: WalletSessionOperationCredentialV1;
 };
 type ExactPasskeyWalletSessionRuntime = ExactEcdsaWalletSessionRuntime & {
-    readonly authBinding: Extract<ExactEcdsaSealedRuntimeAuthBinding, {
+    readonly authBinding: Extract<ExactEcdsaRuntimeAuthBinding, {
         readonly kind: 'passkey';
     }>;
 };
 type ExactEmailOtpWalletSessionRuntime = ExactEcdsaWalletSessionRuntime & {
-    readonly authBinding: Extract<ExactEcdsaSealedRuntimeAuthBinding, {
+    readonly authBinding: Extract<ExactEcdsaRuntimeAuthBinding, {
         readonly kind: 'email_otp';
     }>;
 };
+type ExactVoiceIdWalletSessionRuntime = ExactEcdsaDirectCapabilityRuntime & {
+    readonly authBinding: Extract<ExactEcdsaRuntimeAuthBinding, {
+        kind: 'voiceid';
+    }>;
+};
+type ExactVoiceIdEvmFamilyWalletSessionAuthorization = ExactEvmFamilyWalletSessionAuthorizationBase & {
+    readonly selectedAuthMethod: ActiveVoiceIdWalletAuthMethodRecordV2;
+    readonly runtime: ExactVoiceIdWalletSessionRuntime;
+};
 type ExactPasskeyEvmFamilyWalletSessionAuthorization = ExactEvmFamilyWalletSessionAuthorizationBase & {
     readonly selectedAuthMethod: ActivePasskeyWalletAuthMethodRecordV2;
     readonly runtime: ExactPasskeyWalletSessionRuntime;
@@ -33,7 +42,7 @@ type ExactEmailOtpEvmFamilyWalletSessionAuthorization = ExactEvmFamilyWalletSess
     readonly selectedAuthMethod: ActiveEmailOtpWalletAuthMethodRecordV2;
     readonly runtime: ExactEmailOtpWalletSessionRuntime;
 };
-export type ExactEvmFamilyWalletSessionAuthorization = ExactPasskeyEvmFamilyWalletSessionAuthorization | ExactEmailOtpEvmFamilyWalletSessionAuthorization;
+export type ExactEvmFamilyWalletSessionAuthorization = ExactVoiceIdEvmFamilyWalletSessionAuthorization | ExactPasskeyEvmFamilyWalletSessionAuthorization | ExactEmailOtpEvmFamilyWalletSessionAuthorization;
 type ExactEcdsaWalletSessionAuthorizationLookup = {
     readonly walletId: WalletId;
     readonly chainTarget: ThresholdEcdsaChainTarget;
@@ -56,7 +65,7 @@ export type AuthorizedEcdsaPreprocessingCapability = {
     readonly capability: CanonicalEvmFamilyEcdsaSigningCapability;
     readonly authorization: {
         readonly kind: 'ecdsa_preprocessing_session';
-    } & (Omit<ExactPasskeyEvmFamilyWalletSessionAuthorization, 'kind'> | Omit<ExactEmailOtpEvmFamilyWalletSessionAuthorization, 'kind'>);
+    } & (Omit<ExactVoiceIdEvmFamilyWalletSessionAuthorization, 'kind'> | Omit<ExactPasskeyEvmFamilyWalletSessionAuthorization, 'kind'> | Omit<ExactEmailOtpEvmFamilyWalletSessionAuthorization, 'kind'>);
 };
 export type EvmFamilyEcdsaSigningCapabilityAvailability = AuthorizedEvmFamilyEcdsaSigningCapability | {
     readonly kind: 'authorization_required';

package/dist/types/wallet/src/core/signingEngine/session/operationState/lanes.d.ts

@@ -59,12 +59,19 @@ type EmailOtpSigningLaneAuthInput = {
         kind: 'email_otp';
     }>;
 };
-type Ed25519PasskeyTransactionSigningLaneInput = PasskeySigningLaneAuthInput & Ed25519PasskeySigningLaneInput;
 type Ed25519EmailOtpTransactionSigningLaneInput = EmailOtpSigningLaneAuthInput & Ed25519EmailOtpSigningLaneInput;
-type NearTransactionSigningLaneInput = Ed25519PasskeyTransactionSigningLaneInput | Ed25519EmailOtpTransactionSigningLaneInput;
-type EcdsaPasskeyTransactionSigningLaneInput = PasskeySigningLaneAuthInput & EcdsaPasskeySigningLaneInput;
+type NearTransactionSigningLaneInput = ({
+    auth: Extract<SigningLaneAuthBinding, {
+        kind: 'passkey' | 'voiceid';
+    }>;
+} & Ed25519PasskeySigningLaneInput) | Ed25519EmailOtpTransactionSigningLaneInput;
+type EcdsaStoredTransactionSigningLaneInput = {
+    auth: Extract<SigningLaneAuthBinding, {
+        kind: 'passkey' | 'voiceid';
+    }>;
+} & EcdsaPasskeySigningLaneInput;
 type EcdsaEmailOtpTransactionSigningLaneInput = EmailOtpSigningLaneAuthInput & EcdsaEmailOtpSigningLaneInput;
-type EcdsaTransactionSigningLaneInput = EcdsaPasskeyTransactionSigningLaneInput | EcdsaEmailOtpTransactionSigningLaneInput;
+type EcdsaTransactionSigningLaneInput = EcdsaStoredTransactionSigningLaneInput | EcdsaEmailOtpTransactionSigningLaneInput;
 export declare function buildEd25519PasskeySigningLane(input: PasskeySigningLaneAuthInput & Ed25519PasskeySigningLaneInput): NearTransactionSigningLane;
 export declare function buildNearTransactionSigningLane(input: NearTransactionSigningLaneInput): NearTransactionSigningLane;
 export declare function buildTempoTransactionSigningLane(input: EcdsaTransactionSigningLaneInput): EcdsaTransactionSigningLane;

package/dist/types/wallet/src/core/signingEngine/session/postconditions/runtimePostconditions.d.ts

@@ -2,7 +2,7 @@ import type { WalletId } from '../../interfaces/ecdsaChainTarget';
 import { type ThresholdEcdsaChainTarget } from '../../interfaces/ecdsaChainTarget';
 import type { AvailableSigningLanes } from '../availability/availableSigningLanes';
 import { type OwnerLaneScope } from '../identity/signingLaneAuthBinding';
-import type { SigningSessionSealAuthMethod } from '../../../../../../shared-ts/src/utils/signingSessionSeal';
+import type { SignerAuthMethod } from '../../../../../../shared-ts/src/utils/signerDomain';
 import type { MpcWalletSigningQuotaId, WalletSessionAuthorizationId, WalletSessionId } from '../../../../../../shared-ts/src/authorization/capabilityKinds';
 type RuntimePostconditionSource = 'registration_finalize' | 'wallet_unlock';
 type RuntimePostconditionTarget = {
@@ -29,7 +29,7 @@ type RestorableRuntimeLaneMaterial = Extract<RuntimeLaneMaterial, {
     kind: 'durable_sealed_record' | 'public_capability_reference';
 }>;
 type UsableRuntimeLaneIdentity = {
-    authMethod: SigningSessionSealAuthMethod;
+    authMethod: SignerAuthMethod;
     target: {
         curve: 'ed25519';
         chainTarget?: never;
@@ -38,7 +38,7 @@ type UsableRuntimeLaneIdentity = {
     quotaId: MpcWalletSigningQuotaId;
     thresholdSessionId: string;
 } | {
-    authMethod: SigningSessionSealAuthMethod;
+    authMethod: SignerAuthMethod;
     target: {
         curve: 'ecdsa';
         chainTarget: ThresholdEcdsaChainTarget;

package/dist/types/wallet/src/core/signingEngine/session/warmCapabilities/routerAbEd25519WalletSessionState.d.ts

@@ -1,4 +1,5 @@
 import type { NearAuthorizedEd25519SigningSessionState, NearEd25519YaoOperationMaterialFacts, NearResolvedEd25519SigningSessionState } from '../../interfaces/near';
+import { type SigningLaneAuthBinding } from '../identity/signingLaneAuthBinding';
 import { type ExactWalletSessionReadPorts } from '../identity/exactWalletSessionCredential';
 import { type RouterAbEd25519SigningWalletSession } from '../routerAbSigningWalletSession';
 import type { WalletId } from '../../interfaces/ecdsaChainTarget';
@@ -36,6 +37,11 @@ type BuildPasskeyRouterAbEd25519WalletSessionStateInput = {
 };
 export declare function buildEmailOtpRouterAbEd25519WalletSessionState(input: BuildEmailOtpRouterAbEd25519WalletSessionStateInput): ResolvedRouterAbEd25519WalletSessionState;
 export declare function buildPasskeyRouterAbEd25519WalletSessionState(input: BuildPasskeyRouterAbEd25519WalletSessionStateInput): ResolvedRouterAbEd25519WalletSessionState;
+export declare function buildOwnerRouterAbEd25519WalletSessionState(input: Omit<BuildPasskeyRouterAbEd25519WalletSessionStateInput, 'rpId' | 'credentialIdB64u'> & {
+    auth: Extract<SigningLaneAuthBinding, {
+        kind: 'passkey' | 'voiceid';
+    }>;
+}): ResolvedRouterAbEd25519WalletSessionState;
 export declare function rebindRouterAbEd25519WalletSessionStateFromExactRuntime(args: {
     runtime: ExactEd25519SealedSessionRuntime;
     authorization: ExactNearEd25519WalletSessionAuthorization;

package/dist/types/wallet/src/core/signingEngine/stepUpConfirmation/methodSelection.d.ts

@@ -1,7 +1,7 @@
 import type { StepUpMethodRunners } from './methodRunners';
 import type { StepUpPolicy, StepUpWarmSessionAuthorization } from './types';
 type SelectableLane = {
-    authMethod: 'passkey' | 'email_otp';
+    authMethod: 'passkey' | 'email_otp' | 'voiceid';
 };
 type WarmSessionStepUpRoute = {
     method: 'warm_session';

package/dist/types/wallet/src/core/signingEngine/stepUpConfirmation/requireStepUpAuth.d.ts

@@ -1,7 +1,7 @@
 import type { StepUpMethodRunners } from './methodRunners';
 import type { EmailOtpConfirmPrompt, EmailOtpStepUpConfirmation, PasskeyPromptPlan, PasskeyStepUpConfirmation, StepUpPolicy, StepUpWarmSessionAuthorization } from './types';
 type SelectableLane = {
-    authMethod: 'passkey' | 'email_otp';
+    authMethod: 'passkey' | 'email_otp' | 'voiceid';
 };
 type PreparedStepUpAuth<TPasskeyAuthorization, TEmailOtpAuthorization> = {
     method: 'warm_session';

package/dist/types/wallet/src/core/signingEngine/threshold/ed25519/yaoPublicCapabilityReferences.d.ts

@@ -22,6 +22,12 @@ export type Ed25519YaoPublicCapabilityLaneReferenceV1 = Ed25519YaoPublicCapabili
     auth: Extract<SigningLaneAuthBinding, {
         kind: 'passkey';
     }>;
+} | {
+    auth: Extract<SigningLaneAuthBinding, {
+        kind: 'voiceid';
+    }>;
+    remainingUses: number;
+    expiresAtMs: number;
 }>;
 type Ed25519YaoPublicCapabilityReferenceTransactionStore = {
     get(key: string): Promise<{

package/dist/types/wallet/src/core/signingEngine/uiConfirm/transactionReviewAdmission.d.ts

@@ -1,16 +1,19 @@
+import type { WalletAuthMethod } from '../../types/seams';
 import { type TransactionReviewWire, type TransactionReviewStateMessage } from '../../../SeamsWeb/walletIframe/shared/transactionReview';
 import type { UiConfirmSurfaceMeasurementBinding } from './uiConfirm.types';
+import type { AuthMethodApprovalResult, AuthMethodReviewPolicy } from '../../authMethods/hostPlugin';
 export declare class TransactionReviewAdmission {
     readonly metadata: TransactionReviewWire;
     private readonly signatureBoundary;
     private readonly post;
     private readonly reject;
+    private readonly authMethodPolicy;
     readonly abortController: AbortController;
     private state;
     private element;
     private observer;
     private timer;
-    constructor(metadata: TransactionReviewWire, signatureBoundary: 'mpc' | 'credential', post: (state: TransactionReviewStateMessage) => void, reject: (error: Error) => void);
+    constructor(metadata: TransactionReviewWire, signatureBoundary: 'mpc' | 'credential', post: (state: TransactionReviewStateMessage) => void, reject: (error: Error) => void, authMethodPolicy: AuthMethodReviewPolicy);
     private notify;
     private scheduleExpiry;
     attach(element: HTMLElement): void;
@@ -20,9 +23,16 @@ export declare class TransactionReviewAdmission {
     readonly returnToReview: () => void;
     assertActive(): void;
     allowInteraction(): boolean;
+    assertAuthMethodPolicy(method: WalletAuthMethod): void;
     beforeCredential: () => void;
     afterCredential(): void;
     beforeSigning: () => void;
+    approveAuthMethod(): Promise<AuthMethodApprovalResult>;
+    get authMethodApprovalSurface(): HTMLElement | null;
+    get authMethodApprovalMessages(): Readonly<{
+        approved: string;
+        confirm?: string;
+    }> | null;
     cancel(error: Error): boolean;
     private closeSurface;
     get cancelled(): boolean;

package/dist/types/wallet/src/core/signingEngine/uiConfirm/ui/confirm-ui-types.d.ts

@@ -20,6 +20,8 @@ export type ConfirmUIUpdate = {
     onBack?: () => void;
     title?: string;
     body?: string;
+    authMethodApprovalMessage?: string;
+    authMethodCapture?: HTMLElement | null;
     signingAuthMode?: SigningAuthMode;
     emailOtpPrompt?: EmailOtpConfirmPrompt;
 };

package/dist/types/wallet/src/core/signingEngine/uiConfirm/ui/confirmation-model.d.ts

@@ -2,7 +2,7 @@ import type { AppearanceConfig } from '../../../types/seams';
 import type { ConfirmUIUpdate } from './confirm-ui-types';
 import type { TreeNode } from './transaction-display/tree';
 import type { ConfirmSurfaceModel } from './preact/mountConfirmationSurface';
-export type ConfirmationPresentationInput = Pick<ConfirmUIUpdate, 'model' | 'securityContext' | 'loading' | 'preparing' | 'title' | 'body' | 'errorMessage' | 'confirmText' | 'cancelText' | 'onBack' | 'signingAuthMode' | 'emailOtpPrompt' | 'nearExplorerUrl' | 'tempoExplorerUrl' | 'evmExplorerUrl'>;
+export type ConfirmationPresentationInput = Pick<ConfirmUIUpdate, 'model' | 'securityContext' | 'loading' | 'preparing' | 'title' | 'body' | 'authMethodApprovalMessage' | 'authMethodCapture' | 'errorMessage' | 'confirmText' | 'cancelText' | 'onBack' | 'signingAuthMode' | 'emailOtpPrompt' | 'nearExplorerUrl' | 'tempoExplorerUrl' | 'evmExplorerUrl'>;
 export type ConfirmationCallbacks = {
     confirm: () => void;
     cancel: () => void;

package/dist/types/wallet/src/core/signingEngine/uiConfirm/ui/preact/ConfirmContent.d.ts

@@ -27,6 +27,7 @@ export type ConfirmContentProps = {
     cancelInHeader?: boolean;
     confirmIcon?: ComponentChildren;
     errorMessage?: string;
+    authMethodApprovalMessage?: string;
     onCancel: () => void;
     onBack?: () => void;
     onTreeToggle?: (nodeId: string, open: boolean) => void;

package/dist/types/wallet/src/core/signingEngine/uiConfirm/ui/preact/ConfirmationContent.d.ts

@@ -21,6 +21,7 @@ type TransactionContentProps = Omit<ConfirmContentProps, 'styles' | 'decision'>
 };
 export type ConfirmationContentModel = {
     kind: 'registration';
+    capture?: never;
     registration: Omit<PasskeyRegistrationContentProps, 'styles'>;
     header?: never;
     body?: never;
@@ -28,6 +29,7 @@ export type ConfirmationContentModel = {
     transaction?: never;
 } | {
     kind: 'transaction';
+    capture: HTMLElement | null;
     registration?: never;
     header: Omit<ConfirmHeaderProps, 'styles' | 'icon'>;
     body: ConfirmationBodyModel;
@@ -56,6 +58,8 @@ export declare class ConfirmationContent extends Component<{
     componentWillUnmount(): void;
     render(): ComponentChildren;
     private renderTransaction;
+    /** The origin the request came from, with the review's back and close controls. */
+    private renderToolbar;
 }
 export {};
 //# sourceMappingURL=ConfirmationContent.d.ts.map