@seams/wallet 0.28.0 → 0.30.0

package/dist/esm/SeamsWeb/walletIframe/coordinator.js

@@ -32,6 +32,8 @@ var WalletIframeCoordinator = class {
 	walletIframeSessionUnsubscribe = null;
 	sessionListeners = /* @__PURE__ */ new Set();
 	walletIframeLifecycleUnsubscribe = null;
+	walletConnectionUnsubscribe = null;
+	walletConnectionListeners = /* @__PURE__ */ new Set();
 	walletIframeAuthMenuUnsubscribe = null;
 	sdkLifecycleEventListeners = /* @__PURE__ */ new Set();
 	hostedAuthMenuExternalAuthRequestListeners = /* @__PURE__ */ new Set();
@@ -83,6 +85,7 @@ var WalletIframeCoordinator = class {
 		this.sdkLifecycleEventListeners.clear();
 		this.sessionListeners.clear();
 		this.hostedAuthMenuExternalAuthRequestListeners.clear();
+		this.walletConnectionListeners.clear();
 	}
 	releaseRouter() {
 		this.sessionDeliveryRevision += 1;
@@ -91,6 +94,8 @@ var WalletIframeCoordinator = class {
 		this.walletIframeLifecycleUnsubscribe?.();
 		this.walletIframeSessionUnsubscribe?.();
 		this.walletIframeAuthMenuUnsubscribe?.();
+		this.walletConnectionUnsubscribe?.();
+		this.walletConnectionUnsubscribe = null;
 		this.walletIframeCloseUnsubscribe = null;
 		this.walletIframePrefsUnsubscribe = null;
 		this.walletIframeLifecycleUnsubscribe = null;
@@ -255,6 +260,18 @@ var WalletIframeCoordinator = class {
 		}
 		await (await this.requireRouter()).cancelHostedAuthMenu(args);
 	}
+	onWalletConnectionRequest(listener) {
+		if (this.connection.kind === "disposed") return noSubscription;
+		this.walletConnectionListeners.add(listener);
+		if (this.iframeRouter) this.ensureWalletIframeAuthMenuMirror(this.iframeRouter);
+		return this.walletConnectionListeners.delete.bind(this.walletConnectionListeners, listener);
+	}
+	async resolveWalletConnection(resolution) {
+		await (await this.requireRouter()).resolveWalletConnection(resolution);
+	}
+	forwardWalletConnection = (request) => {
+		for (const listener of this.walletConnectionListeners) listener(request);
+	};
 	onHostedAuthMenuExternalAuthRequest(listener) {
 		if (this.connection.kind === "disposed") return noSubscription;
 		this.hostedAuthMenuExternalAuthRequestListeners.add(listener);
@@ -288,6 +305,7 @@ var WalletIframeCoordinator = class {
 		this.walletIframeLifecycleUnsubscribe = router.onSdkLifecycleEvent(this.forwardSdkLifecycleEventListener);
 	}
 	ensureWalletIframeAuthMenuMirror(router) {
+		if (!this.walletConnectionUnsubscribe) this.walletConnectionUnsubscribe = router.onWalletConnectionRequest(this.forwardWalletConnection);
 		if (!this.walletIframeAuthMenuUnsubscribe) this.walletIframeAuthMenuUnsubscribe = router.onHostedAuthMenuExternalAuthRequest(this.forwardHostedAuthMenuExternalAuthRequestListener);
 	}
 	forwardSdkLifecycleEvent(event) {

package/dist/esm/SeamsWeb/walletIframe/host/ui/auth-menu/AuthMenuSurface.js

@@ -2,6 +2,7 @@ import { isLinkedDeviceTargetEmailAddressV1 } from "../../../../../core/types/li
 import "../../../../../shared-ts/src/wallet-recovery/recoveryCodes.js";
 import { walletDisplayText, walletText } from "../../../../../core/ui/messages.js";
 import { WalletLocaleContext, WalletText } from "../../../../../core/signingEngine/uiConfirm/ui/preact/WalletLocale.js";
+import { WalletAlternativesSection } from "./WalletAlternativesSection.js";
 import { recoveryInputCharacters, rejectedRecoveryCharacters, renderRecoveryCodeGroups } from "./recovery-code-input.js";
 import { AUTH_MENU_WAITING_PROMPTS, isAuthMenuActionReady, isAuthMenuGoogleActionReady, isAuthMenuLoadingStatus, isAuthMenuReady } from "../../auth-menu/domain.js";
 import { AUTH_MENU_ACCOUNT_LIST_ID, AUTH_MENU_TITLE_ID, accountGroups, accountSecondaryText, authViewKey, menuNotice, modeLabel, modeSwitchCopy, otpCodeDigits, passkeyButtonLabel, recoveryAnnouncement, recoveryBackLabel, recoveryCaretAtPoint, recoveryNavigationLocked, renderDemoEmailCode, renderOtpCodeDigit, savedAccountsTriggerLabel, selectedAccountPrimaryText, selectedLoginAccount } from "./presentation.js";
@@ -13,7 +14,6 @@ import { linkDeviceDotRing, linkDeviceEmailOtpPresentation } from "./linkDeviceB
 import { Component, Fragment } from "preact";
 import { Fragment as Fragment$1, jsx, jsxs } from "preact/jsx-runtime";
 //#region src/SeamsWeb/walletIframe/host/ui/auth-menu/AuthMenuSurface.tsx
-/** @jsxImportSource preact */
 const ACCOUNT_MENU_EXIT_MS = 160;
 var AuthMenuSurface = class extends Component {
 	static contextType = WalletLocaleContext;
@@ -94,7 +94,10 @@ var AuthMenuSurface = class extends Component {
 		const current = this.viewModel;
 		if (previous?.kind === "recovery" && current.kind !== "recovery") {
 			this.previousRecoveryStage = null;
-			this.props.element.querySelector("[data-recovery-action]")?.focus();
+			const action = this.props.element.querySelector("[data-recovery-action]");
+			const expander = action?.closest("details");
+			if (expander) expander.open = true;
+			action?.focus();
 			return;
 		}
 		if (current.kind !== "recovery") return;
@@ -183,8 +186,15 @@ var AuthMenuSurface = class extends Component {
 		}
 	};
 	focusableElements() {
-		return Array.from(this.props.element.querySelectorAll("button:not([disabled]), input:not([disabled]), select:not([disabled]), textarea:not([disabled]), a[href], [tabindex]:not([tabindex=\"-1\"])"));
+		return Array.from(this.props.element.querySelectorAll("button, input, select, textarea, summary, a[href], [tabindex]:not([tabindex=\"-1\"])")).filter(isAvailableMenuControl);
 	}
+	onDismiss = () => {
+		if (recoveryNavigationLocked(this.viewModel)) return;
+		this.emitIntent({
+			kind: "close",
+			reason: "close_button"
+		});
+	};
 	onBackClick = () => {
 		this.emitIntent({ kind: "back" });
 	};
@@ -501,7 +511,19 @@ var AuthMenuSurface = class extends Component {
 					children: [
 						/* @__PURE__ */ jsx(PadlockIcon, {}),
 						" ",
-						/* @__PURE__ */ jsx("span", { children: viewModel.hostname })
+						/* @__PURE__ */ jsx("span", { children: viewModel.hostname }),
+						/* @__PURE__ */ jsx("button", {
+							type: "button",
+							class: "seams-menu-dismiss",
+							"aria-label": viewModel.closeLabel,
+							disabled: recoveryNavigationLocked(viewModel),
+							onClick: this.onDismiss,
+							"data-auth-menu-dismiss": true,
+							children: /* @__PURE__ */ jsx("span", {
+								"aria-hidden": "true",
+								children: "×"
+							})
+						})
 					]
 				}),
 				/* @__PURE__ */ jsxs("div", {
@@ -549,12 +571,28 @@ var AuthMenuSurface = class extends Component {
 		if (viewModel.kind === "google_registration") return this.renderGoogleRegistration(viewModel);
 		return /* @__PURE__ */ jsxs(Fragment$1, { children: [
 			this.renderMenuHeader(viewModel),
-			" ",
-			this.renderPasskeyInput(viewModel),
-			this.renderAuthMethods(viewModel),
-			" ",
-			this.renderOtherOptions(),
-			this.renderIntentSwitch(viewModel)
+			/* @__PURE__ */ jsxs("fieldset", {
+				class: "seams-connection-controls",
+				disabled: this.props.walletConnection.kind === "pending",
+				children: [
+					this.renderPasskeyInput(viewModel),
+					this.renderAuthMethods(viewModel),
+					/* @__PURE__ */ jsx(WalletAlternativesSection, {
+						alternatives: this.props.walletAlternatives,
+						onIntent: this.props.onIntent
+					}),
+					this.renderOtherOptions(),
+					this.renderIntentSwitch(viewModel)
+				]
+			}),
+			this.props.walletConnection.kind === "pending" && /* @__PURE__ */ jsx("p", {
+				role: "status",
+				children: /* @__PURE__ */ jsx(WalletText, { copy: "Complete the request in your wallet." })
+			}),
+			this.props.walletConnection.kind === "failed" && /* @__PURE__ */ jsx("p", {
+				role: "alert",
+				children: this.props.walletConnection.message
+			})
 		] });
 	}
 	renderMenuHeader(viewModel) {
@@ -766,44 +804,44 @@ var AuthMenuSurface = class extends Component {
 		}) });
 	}
 	renderOtherOptions() {
-		return /* @__PURE__ */ jsxs(Fragment$1, { children: [/* @__PURE__ */ jsx("div", {
-			class: "seams-menu-options-label",
-			children: /* @__PURE__ */ jsx(WalletText, { message: "Other options" })
-		}), /* @__PURE__ */ jsxs("div", {
-			class: "seams-menu-options",
-			children: [/* @__PURE__ */ jsxs("button", {
-				class: "seams-menu-option",
-				type: "button",
-				onClick: this.onLinkDeviceOpen,
-				children: [
-					/* @__PURE__ */ jsx("span", {
-						class: "seams-menu-option-icon",
-						children: linkDeviceIcon()
-					}),
-					/* @__PURE__ */ jsxs("span", {
-						class: "seams-menu-option-text",
-						children: [/* @__PURE__ */ jsx(WalletText, { message: "Link this device" }), /* @__PURE__ */ jsx("small", { children: /* @__PURE__ */ jsx(WalletText, { message: "Scan a code with your other device" }) })]
-					}),
-					chevronIcon()
-				]
-			}), /* @__PURE__ */ jsxs("button", {
-				class: "seams-menu-option",
-				type: "button",
-				"data-recovery-action": true,
-				onClick: this.onRecoveryOpen,
-				children: [
-					/* @__PURE__ */ jsx("span", {
-						class: "seams-menu-option-icon",
-						children: recoveryIcon()
-					}),
-					/* @__PURE__ */ jsxs("span", {
-						class: "seams-menu-option-text",
-						children: [/* @__PURE__ */ jsx(WalletText, { message: "Recover wallet" }), /* @__PURE__ */ jsx("small", { children: /* @__PURE__ */ jsx(WalletText, { message: "Use your recovery code" }) })]
-					}),
-					chevronIcon()
-				]
+		return /* @__PURE__ */ jsxs("details", {
+			class: "seams-menu-expander",
+			children: [/* @__PURE__ */ jsxs("summary", { children: [/* @__PURE__ */ jsx(WalletText, { copy: "Recover or link wallet" }), chevronIcon()] }), /* @__PURE__ */ jsxs("div", {
+				class: "seams-menu-options",
+				children: [/* @__PURE__ */ jsxs("button", {
+					class: "seams-menu-option",
+					type: "button",
+					onClick: this.onLinkDeviceOpen,
+					children: [
+						/* @__PURE__ */ jsx("span", {
+							class: "seams-menu-option-icon",
+							children: linkDeviceIcon()
+						}),
+						/* @__PURE__ */ jsxs("span", {
+							class: "seams-menu-option-text",
+							children: [/* @__PURE__ */ jsx(WalletText, { message: "Link this device" }), /* @__PURE__ */ jsx("small", { children: /* @__PURE__ */ jsx(WalletText, { message: "Scan a code with your other device" }) })]
+						}),
+						chevronIcon()
+					]
+				}), /* @__PURE__ */ jsxs("button", {
+					class: "seams-menu-option",
+					type: "button",
+					"data-recovery-action": true,
+					onClick: this.onRecoveryOpen,
+					children: [
+						/* @__PURE__ */ jsx("span", {
+							class: "seams-menu-option-icon",
+							children: recoveryIcon()
+						}),
+						/* @__PURE__ */ jsxs("span", {
+							class: "seams-menu-option-text",
+							children: [/* @__PURE__ */ jsx(WalletText, { message: "Recover wallet" }), /* @__PURE__ */ jsx("small", { children: /* @__PURE__ */ jsx(WalletText, { message: "Use your recovery code" }) })]
+						}),
+						chevronIcon()
+					]
+				})]
 			})]
-		})] });
+		});
 	}
 	renderRecovery(viewModel) {
 		if (viewModel.stage === "enter_code") {
@@ -1577,6 +1615,9 @@ function voiceMethodIcon() {
 		children: /* @__PURE__ */ jsx("path", { d: "M4 10v4m4-7v10m4-14v18m4-14v10m4-7v4" })
 	});
 }
+function isAvailableMenuControl(element) {
+	return !element.matches(":disabled") && element.getClientRects().length > 0;
+}
 //#endregion
 export { AuthMenuSurface };
 

package/dist/esm/SeamsWeb/walletIframe/host/ui/auth-menu/WalletAlternativesSection.js

@@ -0,0 +1,67 @@
+import { WalletText } from "../../../../../core/signingEngine/uiConfirm/ui/preact/WalletLocale.js";
+import { Component } from "preact";
+import { Fragment as Fragment$1, jsx, jsxs } from "preact/jsx-runtime";
+//#region src/SeamsWeb/walletIframe/host/ui/auth-menu/WalletAlternativesSection.tsx
+/** @jsxImportSource preact */
+var WalletAlternativesSection = class extends Component {
+	connect = (alternativeId) => {
+		this.props.onIntent({
+			kind: "wallet_connection",
+			alternativeId
+		});
+	};
+	renderWalletRows(wallets) {
+		const rows = [];
+		for (const wallet of wallets) rows.push(/* @__PURE__ */ jsxs("button", {
+			type: "button",
+			class: "seams-menu-option seams-wallet-alternative",
+			onClick: this.connect.bind(this, wallet.id),
+			children: [
+				/* @__PURE__ */ jsx("span", {
+					class: "seams-alternative-icon",
+					"aria-hidden": "true",
+					children: wallet.icon ? /* @__PURE__ */ jsx("img", {
+						src: wallet.icon,
+						alt: "",
+						width: "32",
+						height: "32"
+					}) : "↗"
+				}),
+				/* @__PURE__ */ jsxs("span", {
+					class: "seams-menu-option-text",
+					children: [wallet.label, wallet.description && /* @__PURE__ */ jsx("small", { children: wallet.description })]
+				}),
+				/* @__PURE__ */ jsx("span", {
+					class: "seams-alternative-arrow",
+					"aria-hidden": "true",
+					children: "↗"
+				})
+			]
+		}, wallet.id));
+		return /* @__PURE__ */ jsx("div", {
+			class: "seams-menu-options",
+			children: rows
+		});
+	}
+	render() {
+		const { primary, secondary } = this.props.alternatives;
+		return /* @__PURE__ */ jsxs(Fragment$1, { children: [primary.length > 0 && /* @__PURE__ */ jsxs("section", {
+			"aria-label": "Or connect another wallet",
+			children: [/* @__PURE__ */ jsx("div", {
+				class: "seams-menu-options-label seams-alternatives-heading",
+				children: /* @__PURE__ */ jsx(WalletText, { copy: "Or connect another wallet" })
+			}), this.renderWalletRows(primary)]
+		}), secondary.length > 0 && /* @__PURE__ */ jsxs("details", {
+			class: "seams-menu-expander",
+			"data-wallet-alternatives-secondary": true,
+			children: [/* @__PURE__ */ jsxs("summary", { children: [/* @__PURE__ */ jsx(WalletText, { copy: "More wallets" }), /* @__PURE__ */ jsx("span", {
+				"aria-hidden": "true",
+				children: "⌄"
+			})] }), this.renderWalletRows(secondary)]
+		})] });
+	}
+};
+//#endregion
+export { WalletAlternativesSection };
+
+//# sourceMappingURL=WalletAlternativesSection.js.map

package/dist/esm/SeamsWeb/walletIframe/host/ui/auth-menu/mountAuthMenuSurface.js

@@ -1,3 +1,4 @@
+import { emptyWalletAlternatives } from "../../../shared/walletAlternatives.js";
 import { appearanceTokenCssRule } from "../../../../../core/signingEngine/uiConfirm/ui/appearance-token-vars.js";
 import { createCspStylesheetManager, getDefaultCspNonce } from "../../../../../core/browser/walletIframe/csp-stylesheet.js";
 import { withWalletLocale } from "../../../../../core/signingEngine/uiConfirm/ui/preact/WalletLocale.js";
@@ -23,10 +24,15 @@ function authMenuStyles(document) {
 }
 var MountedAuthMenuSurface = class {
 	element;
+	walletAlternatives;
+	walletConnection = { kind: "idle" };
+	viewModel;
 	styles;
 	entrance = [];
 	state;
 	constructor(input) {
+		this.walletAlternatives = input.walletAlternatives ?? emptyWalletAlternatives();
+		this.viewModel = input.viewModel;
 		const document = input.parent.ownerDocument;
 		this.styles = authMenuStyles(document);
 		this.element = document.createElement("div");
@@ -70,7 +76,12 @@ var MountedAuthMenuSurface = class {
 			easing: "cubic-bezier(0.25, 1, 0.5, 1)"
 		}));
 	}
+	updateWalletConnection(state) {
+		this.walletConnection = state;
+		this.update(this.viewModel);
+	}
 	update(viewModel) {
+		this.viewModel = viewModel;
 		if (this.state.kind === "disposed") return;
 		this.element.lang = viewModel.appearance.locale ?? "en";
 		this.element.dataset.theme = viewModel.appearance.theme.mode;
@@ -78,6 +89,8 @@ var MountedAuthMenuSurface = class {
 		render(withWalletLocale(viewModel.appearance.locale ?? "en", /* @__PURE__ */ jsx(AuthMenuSurface, {
 			element: this.element,
 			viewModel,
+			walletAlternatives: this.walletAlternatives,
+			walletConnection: this.walletConnection,
 			onIntent: this.state.onIntent,
 			styles: this.styles
 		})), this.element);

package/dist/esm/SeamsWeb/walletIframe/host/walletMutationGuard.js

@@ -29,6 +29,11 @@ function walletForHostRequest(request, currentWalletId) {
 			return walletId === null ? null : requiredWallet(walletId);
 		}
 		case "PM_SCAN_AND_LINK_DEVICE": return currentWalletId === null ? null : requiredWallet(currentWalletId);
+		case "PM_OWNER_NEAR_TRANSACTION": return request.payload.action === "approve" ? requiredWallet(request.payload.authentication.walletId) : null;
+		case "PM_EXTERNAL_OWNER_AUTH": {
+			const command = request.payload;
+			return requiredWallet(command.action === "associate" ? command.input.walletId : command.walletId);
+		}
 		case "PM_SET_TRANSACTION_VIEW":
 		case "PM_TRANSACTION_BROADCAST_STARTED":
 		case "PING":
@@ -40,6 +45,7 @@ function walletForHostRequest(request, currentWalletId) {
 		case "PM_OPEN_AUTH_MENU":
 		case "PM_CANCEL_AUTH_MENU":
 		case "PM_RESOLVE_AUTH_MENU_EXTERNAL_AUTH":
+		case "PM_RESOLVE_WALLET_CONNECTION":
 		case "PM_REDEEM_HOSTED_WALLET_SEAMS_SESSION":
 		case "PM_REGISTER_WALLET":
 		case "PM_UNLOCK":

package/dist/esm/SeamsWeb/walletIframe/shared/exactSessionState.js

@@ -4,8 +4,8 @@ import { parseWalletSessionAuthorizationId, parseWalletSessionId } from "../../.
 import { thresholdEcdsaChainTargetFromRequest } from "../../../core/signingEngine/interfaces/ecdsaChainTarget.js";
 import "../../../shared-ts/src/device-linking/activeWalletSession.js";
 import { parseWalletAuthAuthorityRef } from "../../../shared-ts/src/utils/walletAuthAuthority.js";
-import { toAccountId } from "../../../core/types/accountIds.js";
 import { isWalletAuthMethod } from "../../../shared-ts/src/utils/signerDomain.js";
+import { toAccountId } from "../../../core/types/accountIds.js";
 import { parseExternalWalletAuthentication, parseExternalWalletSettings } from "../../../shared-ts/src/auth/externalAuth.js";
 import { NonceCoordinatorDegradationReason, NonceCoordinatorFallback, NonceLeaseState } from "../../../core/signingEngine/nonce/nonceTypes.js";
 import { parseEcdsaThresholdKeyId } from "../../../core/signingEngine/session/keyMaterialBrands.js";
@@ -30,6 +30,9 @@ function parseWalletIframeExactSessionSnapshot(value) {
 	const state = parseWalletIframeExactSessionState(record.state);
 	if (state.kind !== "wallet_locked" && state.walletId !== walletId) throw new Error("Wallet session snapshot identity differs from its projection");
 	const session = parseWalletSessionFromBoundary(record.session, state.kind === "wallet_locked" ? void 0 : state.walletId);
+	if (state.kind === "external_read") {
+		if (session.authentication.kind !== "external_authenticated" || session.authentication.walletId !== state.walletId || session.authentication.sessionId !== state.externalSessionId || session.authentication.expiresAtMs !== state.expiresAtMs) throw new Error("External read snapshot differs from its authenticated session");
+	} else if (session.authentication.kind === "external_authenticated") throw new Error("External authentication requires an external read state");
 	if (state.kind === "wallet_locked" && (session.authentication.kind !== "signed_out" || session.appIdentity.kind !== "anonymous")) throw new Error("Locked wallet snapshot must publish an anonymous session");
 	return {
 		revision: parseWalletIframeSessionRevision(record.revision),
@@ -42,6 +45,17 @@ function parseWalletIframeExactSessionState(value) {
 	if (value === null || typeof value !== "object" || Array.isArray(value)) throw new Error("Wallet iframe exact session state must be an object");
 	switch (Reflect.get(value, "kind")) {
 		case "wallet_locked": return { kind: "wallet_locked" };
+		case "external_read": {
+			const expiresAtMs = Reflect.get(value, "expiresAtMs");
+			if (!isPositiveSafeInteger(expiresAtMs)) throw new Error("External read expiry is invalid");
+			if ("walletSessionId" in value || "authorizationId" in value || "authMethod" in value) throw new Error("External read state cannot contain signing authority");
+			return {
+				kind: "external_read",
+				walletId: requireWalletId(Reflect.get(value, "walletId")),
+				externalSessionId: requireNonEmptyString(Reflect.get(value, "externalSessionId"), "externalSessionId"),
+				expiresAtMs
+			};
+		}
 		case "wallet_authenticated_identity_unresolvable": return {
 			kind: "wallet_authenticated_identity_unresolvable",
 			walletId: requireWalletId(Reflect.get(value, "walletId")),

package/dist/esm/SeamsWeb/walletIframe/shared/messages.js

@@ -2,6 +2,7 @@ import { isPlainObject } from "../../../shared-ts/src/utils/validation.js";
 import { parseWalletAuthMethodId, parseWalletId } from "../../../shared-ts/src/utils/domainIds.js";
 import { parseWalletSessionHome } from "../../../shared-ts/src/device-linking/activeWalletSession.js";
 import { walletIframeRequestIdFromBoundary } from "../../../core/types/walletIframeIdentity.js";
+import { emptyWalletAlternatives, parseWalletAlternatives } from "./walletAlternatives.js";
 //#region src/SeamsWeb/walletIframe/shared/messages.ts
 const WALLET_IFRAME_SURFACE_MEASUREMENT_MAX_CSS_PX = 4096;
 const HOSTED_AUTH_MENU_ERROR_EVENT = "seams:hosted-auth-menu-error";
@@ -209,7 +210,8 @@ function parseHostedAuthMenuOpenRequest(value) {
 		"showRegistrationInput",
 		"showProgress",
 		"copy",
-		"enabledExternalProviders"
+		"enabledExternalProviders",
+		"walletAlternatives"
 	]) || !hasOnlyHostedAuthMenuCopyKeys(record.copy)) return null;
 	const authMenuSessionId = hostedAuthMenuSessionIdFromBoundary(record.authMenuSessionId);
 	const initialMode = parseAuthMenuMode(record.initialMode);
@@ -226,7 +228,8 @@ function parseHostedAuthMenuOpenRequest(value) {
 	} : null;
 	const registrationAccountInput = parseRegistrationAccountInput(record.registrationAccountInput);
 	const providers = parseExternalProviders(record.enabledExternalProviders);
-	if (!authMenuSessionId || !initialMode || !loginTarget || !registrationAccountInput || typeof record.showRegistrationInput !== "boolean" || typeof record.showProgress !== "boolean" || !providers || !isWireSerializable(record.copy, /* @__PURE__ */ new Set(), true)) return null;
+	const walletAlternatives = record.walletAlternatives === void 0 ? emptyWalletAlternatives() : parseWalletAlternatives(record.walletAlternatives);
+	if (!authMenuSessionId || !initialMode || !loginTarget || !registrationAccountInput || typeof record.showRegistrationInput !== "boolean" || typeof record.showProgress !== "boolean" || !providers || !walletAlternatives || !isWireSerializable(record.copy, /* @__PURE__ */ new Set(), true)) return null;
 	return {
 		kind: "hosted_auth_menu_open_v1",
 		authMenuSessionId,
@@ -237,7 +240,8 @@ function parseHostedAuthMenuOpenRequest(value) {
 		showRegistrationInput: record.showRegistrationInput,
 		showProgress: record.showProgress,
 		copy: normalizeHostedAuthMenuCopy(record.copy),
-		enabledExternalProviders: providers
+		enabledExternalProviders: providers,
+		walletAlternatives
 	};
 }
 function buildHostedAuthMenuOpenRequest(args) {
@@ -252,7 +256,8 @@ function buildHostedAuthMenuOpenRequest(args) {
 		"showRegistrationInput",
 		"showProgress",
 		"copy",
-		"enabledExternalProviders"
+		"enabledExternalProviders",
+		"walletAlternatives"
 	]) || args.copy !== void 0 && !hasOnlyHostedAuthMenuCopyKeys(args.copy)) throw new Error("Hosted auth-menu open configuration contains unsupported fields");
 	const parsedSessionId = hostedAuthMenuSessionIdFromBoundary(args.authMenuSessionId);
 	if (!parsedSessionId) throw new Error("authMenuSessionId must be a non-empty string");
@@ -266,7 +271,8 @@ function buildHostedAuthMenuOpenRequest(args) {
 		showRegistrationInput: args.showRegistrationInput ?? false,
 		showProgress: args.showProgress ?? false,
 		copy: normalizeHostedAuthMenuCopy(args.copy),
-		enabledExternalProviders: [...args.enabledExternalProviders ?? []]
+		enabledExternalProviders: [...args.enabledExternalProviders ?? []],
+		walletAlternatives: args.walletAlternatives ?? emptyWalletAlternatives()
 	};
 	if (!parseHostedAuthMenuOpenRequest(request)) throw new Error("Hosted auth-menu open request is invalid");
 	return Object.freeze(request);
@@ -425,6 +431,14 @@ function parseHostedAuthMenuOutcome(value) {
 				method
 			} : null;
 		}
+		case "wallet_connected": {
+			const alternativeId = boundaryString(record.alternativeId, "alternativeId");
+			return alternativeId ? {
+				kind: "wallet_connected",
+				authMenuSessionId,
+				alternativeId
+			} : null;
+		}
 		case "account_synced": {
 			if (!hasOnlyKeys(record, [
 				"kind",
@@ -470,7 +484,7 @@ function parseHostedAuthMenuOutcome(value) {
 		default: return null;
 	}
 }
-const WALLET_PROTOCOL_VERSION = "18.0.0";
+const WALLET_PROTOCOL_VERSION = "20.0.0";
 const WALLET_IFRAME_PROTOCOL_VERSION_MISMATCH = "WALLET_IFRAME_PROTOCOL_VERSION_MISMATCH";
 const HOSTED_WALLET_REDEMPTION_PAYLOAD_FIELDS = [
 	"home",

package/dist/esm/SeamsWeb/walletIframe/shared/ownerNearOperation.js

@@ -0,0 +1,152 @@
+import { requireCanonicalString, requireRecord } from "../../../shared-ts/src/utils/validation.js";
+import { parseWalletId } from "../../../shared-ts/src/utils/domainIds.js";
+import { parseNearTransactionResult } from "../../../core/signingEngine/nearTransactionSubmission.js";
+import { SigningSessionIds } from "../../../core/signingEngine/session/operationState/types.js";
+import { toAccountId } from "../../../core/types/accountIds.js";
+import { ActionType } from "../../../shared-ts/src/near/actions.js";
+import { parseExternalWalletAuthentication } from "../../../shared-ts/src/auth/externalAuth.js";
+import { parseThresholdEd25519NearTransaction } from "../../../shared-ts/src/threshold/ed25519OperationFingerprint.js";
+//#region src/SeamsWeb/walletIframe/shared/ownerNearOperation.ts
+function parseOwnerNearRecovery(raw) {
+	const value = requireRecord(raw, "owner operation recovery");
+	const operationId = requireCanonicalString(value.operationId, "operationId");
+	if (!/^owner-near:[A-Za-z0-9_-]{32,64}$/.test(operationId)) throw new Error("Invalid owner operation ID.");
+	const walletId = parseWalletId(value.walletId);
+	if (!walletId.ok) throw new Error("Invalid owner operation wallet.");
+	return {
+		operationId: SigningSessionIds.signingOperation(operationId),
+		walletId: walletId.value,
+		nearAccountId: toAccountId(requireCanonicalString(value.nearAccountId, "nearAccountId"))
+	};
+}
+function parseOwnerNearCommand(raw) {
+	const value = requireRecord(raw, "owner operation command");
+	const authentication = parseExternalWalletAuthentication(value.authentication);
+	const recovery = parseOwnerNearRecovery(value.recovery);
+	if (recovery.walletId !== String(authentication.walletId)) throw new Error("Owner operation wallet mismatch.");
+	switch (value.action) {
+		case "recover": return {
+			action: "recover",
+			authentication,
+			recovery
+		};
+		case "approve": {
+			const rawTransaction = requireRecord(value.transaction, "transaction");
+			const transaction = parseThresholdEd25519NearTransaction({
+				nearAccountId: recovery.nearAccountId,
+				receiverId: rawTransaction.receiverId,
+				actions: rawTransaction.actions
+			}, "transaction");
+			if (transaction.nearAccountId !== String(recovery.nearAccountId)) throw new Error("Owner operation account mismatch.");
+			const expiresAtMs = value.expiresAtMs;
+			if (typeof expiresAtMs !== "number" || !Number.isSafeInteger(expiresAtMs) || expiresAtMs <= 0) throw new Error("Invalid owner operation expiry.");
+			return {
+				action: "approve",
+				authentication,
+				recovery,
+				expiresAtMs,
+				transaction: {
+					receiverId: transaction.receiverId,
+					actions: transaction.actions.map(ownerNearAction)
+				}
+			};
+		}
+		default: throw new Error("Invalid owner operation action.");
+	}
+}
+function parseOwnerNearOutcome(raw) {
+	const value = requireRecord(raw, "owner operation outcome");
+	switch (value.kind) {
+		case "completed": {
+			const result = parseNearTransactionResult(value.result);
+			if (!result.success) throw new Error("A completed owner operation requires a successful transaction.");
+			return {
+				kind: "completed",
+				result
+			};
+		}
+		case "reverted": return {
+			kind: "reverted",
+			transactionId: requireCanonicalString(value.transactionId, "transactionId"),
+			error: requireCanonicalString(value.error, "error")
+		};
+		case "cancelled": return { kind: "cancelled" };
+		case "expired": return { kind: "expired" };
+		case "failed": return {
+			kind: "failed",
+			error: requireCanonicalString(value.error, "error")
+		};
+		case "unknown": return {
+			kind: "unknown",
+			recovery: parseOwnerNearRecovery(value.recovery)
+		};
+		default: throw new Error("Invalid owner operation outcome.");
+	}
+}
+function ownerNearAction(action) {
+	switch (action.action_type) {
+		case "CreateAccount": return { action_type: ActionType.CreateAccount };
+		case "DeployContract": return {
+			action_type: ActionType.DeployContract,
+			code: [...action.code]
+		};
+		case "FunctionCall": return {
+			action_type: ActionType.FunctionCall,
+			method_name: action.method_name,
+			args: action.args,
+			gas: action.gas,
+			deposit: action.deposit
+		};
+		case "Transfer": return {
+			action_type: ActionType.Transfer,
+			deposit: action.deposit
+		};
+		case "Stake": return {
+			action_type: ActionType.Stake,
+			stake: action.stake,
+			public_key: action.public_key
+		};
+		case "AddKey": return {
+			action_type: ActionType.AddKey,
+			public_key: action.public_key,
+			access_key: action.access_key
+		};
+		case "DeleteKey": return {
+			action_type: ActionType.DeleteKey,
+			public_key: action.public_key
+		};
+		case "DeleteAccount": return {
+			action_type: ActionType.DeleteAccount,
+			beneficiary_id: action.beneficiary_id
+		};
+		case "DeployGlobalContract": return {
+			action_type: ActionType.DeployGlobalContract,
+			code: [...action.code],
+			deploy_mode: action.deploy_mode
+		};
+		case "UseGlobalContract":
+			if (action.account_id !== void 0) return {
+				action_type: ActionType.UseGlobalContract,
+				account_id: action.account_id
+			};
+			return {
+				action_type: ActionType.UseGlobalContract,
+				code_hash: action.code_hash
+			};
+		case "SignedDelegate": throw new Error("Use the delegate API for delegated actions.");
+		default: throw new Error("Unsupported owner transaction action.");
+	}
+}
+function parseOwnerNearSubmissionProgress(raw) {
+	if (!raw || typeof raw !== "object" || Array.isArray(raw) || Reflect.get(raw, "event") !== "owner_near_submitting") return null;
+	const operationId = Reflect.get(raw, "operationId");
+	if (typeof operationId !== "string" || !/^owner-near:[A-Za-z0-9_-]{32,64}$/.test(operationId)) return null;
+	return {
+		event: "owner_near_submitting",
+		operationId: SigningSessionIds.signingOperation(operationId)
+	};
+}
+//#endregion
+export { parseOwnerNearCommand, parseOwnerNearOutcome, parseOwnerNearRecovery, parseOwnerNearSubmissionProgress };
+
+//# sourceMappingURL=ownerNearOperation.js.map