@seams/wallet 0.24.0 → 0.27.0

package/dist/public/wallet-service/index.html

@@ -5,14 +5,14 @@
     <meta name="viewport" content="width=device-width, initial-scale=1" />
     <title>Web3Authn Wallet Service</title>
     <!-- Surface styles are external so strict CSP can keep style-src 'self' -->
-    <link rel="stylesheet" href="/sdk/wallet-ui.css?v=0.24.0" />
+    <link rel="stylesheet" href="/sdk/wallet-ui.css?v=0.27.0" />
     <!-- Minimal shims some ESM bundles expect (externalized to enable strict CSP) -->
-    <script src="/sdk/wallet-shims.js?v=0.24.0"></script>
+    <script src="/sdk/wallet-shims.js?v=0.27.0"></script>
     <!-- Hint the browser to fetch the host script earlier -->
-    <link rel="modulepreload" href="/sdk/wallet-iframe-host-runtime.js?v=0.24.0" crossorigin>
+    <link rel="modulepreload" href="/sdk/wallet-iframe-host-runtime.js?v=0.27.0" crossorigin>
   </head>
   <body>
     <!-- sdkBasePath points to the SDK root (e.g. '/sdk'). Load the host directly. -->
-    <script type="module" src="/sdk/wallet-iframe-host-runtime.js?v=0.24.0"></script>
+    <script type="module" src="/sdk/wallet-iframe-host-runtime.js?v=0.27.0"></script>
   </body>
 </html>

package/dist/types/shared-ts/src/utils/errors.d.ts

@@ -21,6 +21,7 @@ export declare function toError(e: unknown): Error;
  */
 export declare function isTouchIdCancellationError(error: unknown): boolean;
 export declare function isWebAuthnRpIdOriginConfigurationError(error: unknown): boolean;
+export declare function isWebAuthnBrowserSecurityError(error: unknown): boolean;
 export declare function isUserCancellationError(error: unknown): boolean;
 /**
  * Transform an error message to be more user-friendly

package/dist/types/wallet/src/SeamsWeb/operations/authMethods/passkey/exactPasskeyAuthority.d.ts

@@ -1,6 +1,10 @@
+import { type ExactWalletSessionAuthorization, type ExactWalletSessionAuthorityIdentity } from '../../../../core/signingEngine/session/persistence/walletSessionAuthorizationProjection';
 import type { WalletId } from '../../../../core/signingEngine/interfaces/ecdsaChainTarget';
 import { type WalletAuthAuthorityRef } from '../../../../../../shared-ts/src/utils/walletAuthAuthority';
 import type { ActivePasskeyWalletAuthMethodRecordV2 } from '../../../../../../shared-ts/src/utils/walletAuthMethodRecord';
+import { type MpcMaterialActivationRef, type WalletAuthMethodId } from '../../../../../../shared-ts/src/utils/domainIds';
+import type { WalletSessionStatusReadScope } from '../../../../core/rpcClients/relayer/walletSessionAuthorizationStatus';
+import type { ActiveWalletAuthorityV1 } from '../../../../../../shared-ts/src/authorization/walletAuthority';
 /**
  * The wallet's one active passkey method for this credential. The local
  * auth-method store is the one source that names a wallet's methods: a method
@@ -17,4 +21,24 @@ export declare function exactPasskeyWalletAuthAuthorityRefForCredential(args: {
     readonly rpId: string;
     readonly credentialIdB64u: string;
 }): Promise<WalletAuthAuthorityRef>;
+export declare function reconcilePasskeyWalletSessionAfterRecovery(input: {
+    readonly authorization: ExactWalletSessionAuthorization;
+    readonly materialActivation: MpcMaterialActivationRef;
+    readonly relayerUrl: string;
+    readonly statusReads: WalletSessionStatusReadScope;
+    readonly previousAuthority: ActiveWalletAuthorityV1;
+}): Promise<void>;
+export type ValidatedPasskeyWalletSessionAuthority = {
+    readonly reference: WalletAuthAuthorityRef;
+    readonly identity: ExactWalletSessionAuthorityIdentity;
+};
+export declare function resolveActivePasskeyWalletSessionAuthority(args: {
+    readonly walletId: WalletId;
+    readonly authorization: ExactWalletSessionAuthorization;
+}): Promise<ValidatedPasskeyWalletSessionAuthority>;
+/** Capture before the server operation so a delayed response cannot replace a newer authority. */
+export declare function readActivePasskeyAuthorityForRecovery(input: {
+    readonly walletId: WalletId;
+    readonly authMethodId: WalletAuthMethodId;
+}): Promise<ActiveWalletAuthorityV1>;
 //# sourceMappingURL=exactPasskeyAuthority.d.ts.map

package/dist/types/wallet/src/SeamsWeb/operations/devices/walletHostOwnerAuthority.d.ts

@@ -1,3 +1,4 @@
+import type { DeviceLinkOwnerConfirmation } from '../../walletIframe/host/deviceLinkApproval';
 import type { HttpTransport } from '../../../core/platform/http';
 import type { UnlockedEd25519ExportRootLinkingCapabilityV1 } from '../../../core/signingEngine/workerManager/workerTypes';
 import { type WalletSessionAuthorizationRepository } from '../../../core/indexedDB/seamsWalletDB/walletSessionAuthorizationStore';
@@ -28,6 +29,7 @@ export type WalletHostOwnerAuthoritiesV1 = {
     readonly managementRequest: WalletHostManagementRequestV1;
 };
 export declare function createWalletHostOwnerAuthoritiesV1(input: {
+    readonly confirmDeviceLinking: DeviceLinkOwnerConfirmation;
     readonly http: HttpTransport;
     readonly relayerUrl: string;
     readonly walletSessions: Pick<WalletSessionAuthorizationRepository, 'readExactWithOperationCredential'>;

package/dist/types/wallet/src/SeamsWeb/publicApi/types.d.ts

@@ -1,4 +1,5 @@
 import type { AuthMethodAvailability } from '../../core/authMethods/availabilityTypes';
+import type { VoiceIdConfirmationOptions } from '../../core/authMethods/plugins';
 import type { SdkLifecycleEventListener } from '../../core/types/sdkSentEvents';
 import type { HostedAuthMenuOpenRequest, HostedAuthMenuOutcome, HostedAuthMenuSessionId, HostedAuthMenuExternalAuthRequest, HostedAuthMenuExternalAuthResolutionInput } from '../walletIframe/shared/messages';
 import type { NearAccountRef, TempoChainTarget, ThresholdEcdsaChainTarget, WalletSessionRef } from '../../core/signingEngine/interfaces/ecdsaChainTarget';
@@ -124,6 +125,7 @@ export type SignEvmTransactionArgs = {
     /** A configured EVM network slug, or an exact target. */
     chainTarget: EvmChainSelector;
     options?: {
+        voiceId?: VoiceIdConfirmationOptions;
         confirmationConfig?: Partial<ConfirmationConfig>;
         /** Internal host-only cancellation probe; ignored in wallet-router calls. */
         shouldAbort?: () => boolean;
@@ -242,6 +244,7 @@ type ExecuteEvmFamilyTransactionBaseArgs = {
         confirmations?: number;
     };
     options?: {
+        voiceId?: VoiceIdConfirmationOptions;
         confirmationConfig?: Partial<ConfirmationConfig>;
         /** Internal host-only cancellation probe; ignored in wallet-router calls. */
         shouldAbort?: () => boolean;

package/dist/types/wallet/src/SeamsWeb/walletIframe/client/router.d.ts

@@ -1,3 +1,4 @@
+import type { VoiceIdConfirmationOptions } from '../../../core/authMethods/plugins';
 import type { WalletRegistrationCommand } from '../../publicApi/createPublicApi';
 import type { AuthCapability } from '../../publicApi/types';
 import type { SigningEngineResolveExactKeyExportLaneInput as ResolveExactKeyExportLaneInput, SigningEngineResolveExactKeyExportLaneResult as ResolveExactKeyExportLaneResult } from '../../../core/signingEngine/flows/recovery/public';
@@ -284,6 +285,7 @@ export declare class WalletIframeRouter {
         request: MultichainSigningRequest;
         chainTarget: ThresholdEcdsaChainTarget;
         options?: {
+            voiceId?: VoiceIdConfirmationOptions;
             confirmationConfig?: Partial<ConfirmationConfig>;
             onEvent?: (ev: SigningFlowEvent) => void;
         };

package/dist/types/wallet/src/SeamsWeb/walletIframe/host/WalletHostRuntime.d.ts

@@ -49,6 +49,7 @@ export declare class WalletHostRuntime {
     private resumePendingAcknowledgementsAfterExactUnlockV1;
     private resumePendingRegistrationOnStartup;
     dispose(): void;
+    private readAppearance;
     setTheme(next: ThemeMode): void;
     /**
      * Resolve one configured ECDSA chain target by network slug, chain id, or

package/dist/types/wallet/src/SeamsWeb/walletIframe/host/createDeviceDomain.d.ts

@@ -1,5 +1,5 @@
 import type { BrowserSigningSurface } from '../../signingSurface/BrowserSigningSurface';
-import type { SeamsConfigsReadonly } from '../../../core/types/seams';
+import type { AppearanceConfig, SeamsConfigsReadonly } from '../../../core/types/seams';
 import type { DeviceCommands } from '../../publicApi/devices';
 import type { DeviceLinkingWebContext } from '../../signingSurface/types';
 import type { createBrowserHostPlatformRuntime } from '../../assembly/createBrowserSigningRuntime';
@@ -11,6 +11,7 @@ type WalletHostDeviceDomain = {
 };
 export declare function createWalletHostDeviceDomain(args: {
     readonly configs: SeamsConfigsReadonly;
+    readonly readAppearance: () => AppearanceConfig;
     readonly signingEngine: BrowserSigningSurface;
     readonly getContext: () => DeviceLinkingWebContext;
     readonly platform: ReturnType<typeof createBrowserHostPlatformRuntime>;

package/dist/types/wallet/src/SeamsWeb/walletIframe/host/deviceLinkApproval.d.ts

@@ -0,0 +1,27 @@
+import { type QrLinkedDeviceSessionPayloadV5 } from '../../../../../shared-ts/src/device-linking';
+import type { WalletId } from '../../../../../shared-ts/src/utils/domainIds';
+import type { AppearanceConfig } from '../../../core/types/seams';
+import type { DeviceCommands } from '../../publicApi/devices';
+import type { UiConfirmSurfaceMeasurementBinding } from '../../../core/signingEngine/uiConfirm/uiConfirm.types';
+type ApprovalContext = {
+    readonly execute: DeviceCommands['approveLinking'];
+    readonly readAppearance: () => AppearanceConfig;
+    readonly readMeasurementBinding: () => UiConfirmSurfaceMeasurementBinding;
+};
+export type DeviceLinkOwnerConfirmation = (input: {
+    readonly walletId: WalletId;
+    readonly payload: QrLinkedDeviceSessionPayloadV5;
+}) => Promise<{
+    readonly assertCurrent: () => void;
+}>;
+/** The owner preflight supplies the authenticated wallet, never a parent preference. */
+export declare const confirmDeviceLinkApproval: DeviceLinkOwnerConfirmation;
+export declare function approveDeviceLinkWithConsent(context: ApprovalContext, qrData: Parameters<DeviceCommands['approveLinking']>[0], options: Parameters<DeviceCommands['approveLinking']>[1]): ReturnType<DeviceCommands['approveLinking']>;
+export declare function cancelDeviceLinkApproval(scope: {
+    readonly kind: 'all';
+} | {
+    readonly kind: 'request';
+    readonly requestId: string;
+}): void;
+export {};
+//# sourceMappingURL=deviceLinkApproval.d.ts.map

package/dist/types/wallet/src/SeamsWeb/walletIframe/host/ui/auth-menu/mountAuthMenuSurface.d.ts

@@ -7,6 +7,7 @@ export type AuthMenuSurfaceHandle = {
 type MountAuthMenuSurfaceInput = {
     readonly parent: HTMLElement;
     readonly viewModel: AuthMenuViewModel;
+    readonly initialHeightCssPx?: number;
     readonly onIntent: (intent: AuthMenuIntent) => void;
 };
 export declare function mountAuthMenuSurface(input: MountAuthMenuSurfaceInput): AuthMenuSurfaceHandle;

package/dist/types/wallet/src/SeamsWeb/walletIframe/shared/messages.d.ts

@@ -1,7 +1,7 @@
 import type { WalletSessionHome } from '../../../../../shared-ts/src/device-linking/contracts';
 import type { SigningEngineResolveExactKeyExportLaneInput as ResolveExactKeyExportLaneInput } from '../../../core/signingEngine/flows/recovery/public';
 import type { TransactionReviewWire, TransactionReviewStateMessage } from './transactionReview';
-import type { WalletAuthMethodPlugin } from '../../../core/authMethods/plugins';
+import type { WalletAuthMethodPlugin, VoiceIdConfirmationOptions } from '../../../core/authMethods/plugins';
 import { SignedTransaction } from '../../../core/rpcClients/near/NearClient';
 import { TransactionInput } from '../../../core/types';
 import type { LinkedDeviceEmailOtpBaseFactorChoiceV1, QrLinkedDeviceSessionPayloadV5 } from '../../../../../shared-ts/src/device-linking';
@@ -88,6 +88,7 @@ export type HostedAuthMenuOpenRequest = {
     kind: 'hosted_auth_menu_open_v1';
     authMenuSessionId: HostedAuthMenuSessionId;
     initialMode: HostedAuthMenuMode;
+    initialHeightCssPx?: number;
     loginTarget: HostedAuthMenuLoginTarget;
     registrationAccountInput: HostedAuthMenuRegistrationAccountInput;
     showRegistrationInput: boolean;
@@ -173,6 +174,7 @@ export declare function parseHostedAuthMenuOpenRequest(value: unknown): HostedAu
 export declare function buildHostedAuthMenuOpenRequest(args: {
     authMenuSessionId: HostedAuthMenuSessionId;
     initialMode?: HostedAuthMenuMode;
+    initialHeightCssPx?: number;
     loginTarget?: HostedAuthMenuLoginTarget;
     registrationAccountInput?: HostedAuthMenuRegistrationAccountInput;
     showRegistrationInput?: boolean;
@@ -429,6 +431,7 @@ interface PMSignNep413Payload {
 type PMSignTempoPayloadBase = {
     walletSession: WalletSessionRef;
     options?: {
+        voiceId?: VoiceIdConfirmationOptions;
         confirmationConfig?: Partial<ConfirmationConfig>;
     };
 };

package/dist/types/wallet/src/core/authMethods/hostPlugin.d.ts

@@ -52,6 +52,7 @@ export interface AuthMethodReviewApproval {
         confirm?: string;
     }>;
     readonly surface: HTMLElement;
+    prepare(signal: AbortSignal): Promise<void>;
     approve(signal: AbortSignal): Promise<AuthMethodApprovalResult>;
     consume(): void;
 }

package/dist/types/wallet/src/core/authMethods/plugins.d.ts

@@ -1,6 +1,10 @@
 export type VoiceIdAuthMethodPlugin = Readonly<{
     kind: 'voiceid';
 }>;
+export type VoiceIdConfirmationOptions = Readonly<{
+    /** App wording used only to select an action-only challenge. Maximum 256 characters. */
+    confirmationCommand: string;
+}>;
 export type WalletAuthMethodPlugin = VoiceIdAuthMethodPlugin;
 export declare function parseWalletAuthMethodPlugins(value: unknown): readonly WalletAuthMethodPlugin[];
 export declare function walletAuthMethodPluginEnabled(plugins: readonly WalletAuthMethodPlugin[], kind: WalletAuthMethodPlugin['kind']): boolean;

package/dist/types/wallet/src/core/indexedDB/seamsWalletDB/recoveredEd25519Authority.d.ts

@@ -0,0 +1,8 @@
+import type { ActiveWalletSessionV1 } from '../../../../../shared-ts/src/device-linking/contracts';
+import { type ActiveWalletAuthorityV1 } from '../../../../../shared-ts/src/authorization/walletAuthority';
+/** Adopt only an Ed25519 activation change proved by the authenticated session's digest. */
+export declare function reconcileRecoveredEd25519Authority(input: {
+    readonly session: ActiveWalletSessionV1;
+    readonly previous: ActiveWalletAuthorityV1;
+}): Promise<void>;
+//# sourceMappingURL=recoveredEd25519Authority.d.ts.map

package/dist/types/wallet/src/core/indexedDB/seamsWalletDB/repositories.d.ts

@@ -256,6 +256,7 @@ export type StoreWalletRegistrationFinalizeBatchResult = {
     signerActivations: ActivateAccountSignerResult[];
 };
 export declare function parseWalletAuthorityStorageRow(value: unknown): WalletAuthorityRow | null;
+export declare function walletAuthorityStorageRow(record: WalletAuthorityV1): WalletAuthorityRow;
 export declare function parseWalletAuthMethodV2StorageRow(value: unknown): WalletAuthMethodV2Row | null;
 export declare function parseWalletSelectionStorageRow(value: unknown): WalletSelectionRow | null;
 export declare class SeamsWalletRepositories {

package/dist/types/wallet/src/core/rpcClients/near/NearClient.d.ts

@@ -6,10 +6,23 @@ import type { NonceLeaseRef } from '../../signingEngine/nonce/NonceCoordinator';
 export { encodeSignedTransactionBase64 } from '../../../../../shared-ts/src/near/nearClient';
 export type { AccessKeyList } from '@near-js/types';
 export declare class SignedTransaction extends SharedSignedTransaction<WasmTransaction, WasmSignature, NonceLeaseRef> {
+    readonly transactionHash: string;
+    constructor(input: {
+        transaction: WasmTransaction;
+        signature: WasmSignature;
+        borsh_bytes: number[];
+        transactionHash: string;
+        nonceLease?: NonceLeaseRef;
+        serverDispatch?: {
+            transactionHash: string;
+            rpcResult: unknown;
+        };
+    });
     static fromPlain(input: {
         transaction: unknown;
         signature: unknown;
         borsh_bytes: number[];
+        transactionHash: string;
         nonceLease?: NonceLeaseRef;
         serverDispatch?: {
             transactionHash: string;

package/dist/types/wallet/src/core/rpcClients/relayer/walletSessionAuthorizationStatus.d.ts

@@ -89,6 +89,8 @@ export declare class WalletSessionStatusReadScope {
      * default fetch, and so do the observations they contradict.
      */
     static forgetCredential(token: string): void;
+    /** Recovery changes the authority projected by an existing session. */
+    invalidateCredential(token: string): void;
     static observationForConfirmation(options: RelayerExactWalletSessionStatusPortOptions, identity: ExactWalletSessionStatusIdentity): LocalWalletSessionObservation | null;
     read(options: RelayerExactWalletSessionStatusPortOptions, identity: ExactWalletSessionStatusIdentity): Promise<ExactWalletSessionStatus>;
 }

package/dist/types/wallet/src/core/signingEngine/nearTransactionSubmission.d.ts

@@ -0,0 +1,24 @@
+import type { ActionResult } from '../types/seams';
+import type { ActionHooksOptions } from '../types/sdkSentEvents';
+type NearTransactionFailure = Extract<ActionResult, {
+    success: false;
+}>;
+export declare class NearTransactionRequest {
+    private readonly transaction;
+    private state;
+    constructor(transaction: {
+        readonly kind: 'sign_and_send';
+    } | {
+        readonly kind: 'send';
+        readonly transactionId: string;
+    });
+    readonly dispatched: () => void;
+    failed(error: unknown): NearTransactionFailure;
+}
+export declare function parseNearTransactionResult(raw: unknown): ActionResult;
+export declare function nearTransactionFailure(error: unknown, fallback: 'not_submitted' | 'submission_unknown'): NearTransactionFailure;
+export declare function unresolvedNearTransaction(transactionId: string, error: unknown): NearTransactionFailure;
+/** Application hooks cannot replace a settled transaction outcome with their own error. */
+export declare function notifyNearTransactionResult(options: Pick<ActionHooksOptions, 'onError' | 'afterCall'> | undefined, result: ActionResult): Promise<void>;
+export {};
+//# sourceMappingURL=nearTransactionSubmission.d.ts.map

package/dist/types/wallet/src/core/signingEngine/session/persistence/walletSessionAuthorizationProjection.d.ts

@@ -43,5 +43,6 @@ export declare function persistExactWalletSessionAuthorizationFromEcdsaBootstrap
     readonly authority: WalletAuthAuthorityRef;
     readonly bootstrap: ThresholdEcdsaSessionBootstrapResult;
 }): Promise<ExactWalletSessionAuthorization>;
+export declare function walletSessionImmutableIdentityMatches(left: ActiveWalletSessionV1, right: ActiveWalletSessionV1): boolean;
 export {};
 //# sourceMappingURL=walletSessionAuthorizationProjection.d.ts.map

package/dist/types/wallet/src/core/signingEngine/uiConfirm/transactionReviewAdmission.d.ts

@@ -27,6 +27,8 @@ export declare class TransactionReviewAdmission {
     beforeCredential: () => void;
     afterCredential(): void;
     beforeSigning: () => void;
+    prepareAuthMethod(): Promise<void>;
+    get requiresAuthMethodApproval(): boolean;
     approveAuthMethod(): Promise<AuthMethodApprovalResult>;
     get authMethodApprovalSurface(): HTMLElement | null;
     get authMethodApprovalMessages(): Readonly<{

package/dist/types/wallet/src/core/types/linkDevice.d.ts

@@ -1,4 +1,3 @@
-import type { ActionResult } from './seams';
 import type { AfterCall, EventCallback, LinkDeviceFlowEvent } from './sdkSentEvents';
 import type { ConfirmationConfig } from './signer-worker';
 import type { LinkedDeviceTargetFactorV1, LinkedDeviceEmailOtpBaseFactorChoiceV1, LinkSessionStateV1, QrLinkedDeviceSessionPayloadV5 } from '../../../../shared-ts/src/device-linking';
@@ -21,14 +20,14 @@ export type LinkDeviceResult = {
     readonly enrollmentId: LinkedDeviceEnrollmentId;
     readonly deviceId: LinkedDeviceId;
     readonly error?: never;
-} | (Extract<ActionResult, {
-    success: false;
-}> & {
+} | {
+    readonly success: false;
+    readonly error: string;
     readonly kind?: never;
     readonly walletId?: never;
     readonly enrollmentId?: never;
     readonly deviceId?: never;
-});
+};
 export declare class DeviceLinkingError extends Error {
     readonly code: DeviceLinkingErrorCode;
     readonly phase: 'generation' | 'authorization' | 'registration';

package/dist/types/wallet/src/core/types/sdkSentEvents.d.ts

@@ -1,4 +1,5 @@
 import type { WalletSessionHome } from '../../../../shared-ts/src/device-linking/contracts';
+import type { VoiceIdConfirmationOptions } from '../authMethods/plugins';
 import type { TxExecutionStatus } from '@near-js/types';
 import type { ConfirmationConfig } from './signer-worker';
 import type { EcdsaSignerProvisioningDefaults } from './ecdsaSignerProvisioningDefaults';
@@ -371,6 +372,7 @@ export interface KeyExportHooksOptions {
     afterCall?: AfterCall<void>;
 }
 export interface ActionHooksOptions {
+    voiceId?: VoiceIdConfirmationOptions;
     onEvent?: EventCallback<SigningFlowEvent>;
     onError?: (error: Error) => void;
     waitUntil?: TxExecutionStatus;

package/dist/types/wallet/src/core/types/seams.d.ts

@@ -552,12 +552,24 @@ export type ThresholdWarmLoginAndCreateSessionResult = Extract<LoginAndCreateSes
 };
 export type ActionResult = ExclusiveUnion<{
     success: true;
-    transactionId?: string;
-    result?: FinalExecutionOutcome;
+    transactionId: string;
+    result: FinalExecutionOutcome;
 } | {
     success: false;
+    /** This attempt did not submit a transaction. A new review is safe. */
+    kind: 'not_submitted';
+    error: string;
+} | {
+    success: false;
+    /** Signing or submission may have completed. Never automatically resend. */
+    kind: 'submission_unknown';
+    error: string;
+} | {
+    success: false;
+    /** Reconcile this hash before starting another transaction. */
+    kind: 'unresolved';
+    transactionId: string;
     error: string;
-    errorDetails?: unknown;
 }>;
 export interface SignTransactionResult {
     signedTransaction: SignedTransaction;