@seams/wallet 0.28.0 → 0.30.0

package/dist/esm/SeamsWeb/walletIframe/shared/walletAlternatives.js

@@ -0,0 +1,109 @@
+import { isPlainObject } from "../../../shared-ts/src/utils/validation.js";
+import { parseWalletDataIcon } from "../../../core/ui/walletIcon.js";
+import { walletIframeRequestIdFromBoundary } from "../../../core/types/walletIframeIdentity.js";
+import { hostedAuthMenuSessionIdFromBoundary } from "./messages.js";
+//#region src/SeamsWeb/walletIframe/shared/walletAlternatives.ts
+function emptyWalletAlternatives() {
+	return {
+		primary: [],
+		secondary: []
+	};
+}
+function boundedText(value) {
+	return typeof value === "string" && value.trim().length > 0 && value.length <= 512;
+}
+function parseWalletIcon(value) {
+	if (value === null) return {
+		ok: true,
+		value: null
+	};
+	const dataIcon = parseWalletDataIcon(value);
+	if (dataIcon !== null) return {
+		ok: true,
+		value: dataIcon
+	};
+	if (typeof value !== "string" || value.length > 131072) return { ok: false };
+	try {
+		if (new URL(value).protocol === "https:") return {
+			ok: true,
+			value
+		};
+	} catch {
+		return { ok: false };
+	}
+	return { ok: false };
+}
+function parseWalletRows(value, ids) {
+	if (!Array.isArray(value) || value.length > 32) return null;
+	const rows = [];
+	for (const row of value) {
+		if (!isPlainObject(row) || !boundedText(row.id) || !boundedText(row.label) || typeof row.description !== "string" || row.description.length > 512 || ids.has(row.id)) return null;
+		const icon = parseWalletIcon(row.icon);
+		if (!icon.ok) return null;
+		ids.add(row.id);
+		rows.push({
+			id: row.id,
+			label: row.label,
+			description: row.description,
+			icon: icon.value
+		});
+	}
+	return rows;
+}
+function parseWalletAlternatives(value) {
+	if (!isPlainObject(value)) return null;
+	const ids = /* @__PURE__ */ new Set();
+	const primary = parseWalletRows(value.primary, ids);
+	const secondary = parseWalletRows(value.secondary, ids);
+	return primary && secondary ? {
+		primary,
+		secondary
+	} : null;
+}
+function parseWalletConnectionRequest(value) {
+	if (!isPlainObject(value)) return null;
+	const authMenuSessionId = hostedAuthMenuSessionIdFromBoundary(value.authMenuSessionId);
+	if (!authMenuSessionId || !boundedText(value.connectionRequestId) || !boundedText(value.alternativeId)) return null;
+	return {
+		authMenuSessionId,
+		connectionRequestId: value.connectionRequestId,
+		alternativeId: value.alternativeId
+	};
+}
+function parseWalletConnectionResolution(value) {
+	if (!isPlainObject(value) || !isPlainObject(value.result)) return null;
+	const authMenuSessionId = hostedAuthMenuSessionIdFromBoundary(value.authMenuSessionId);
+	let requestId;
+	try {
+		requestId = walletIframeRequestIdFromBoundary(value.requestId);
+	} catch {
+		return null;
+	}
+	if (!authMenuSessionId || !boundedText(value.connectionRequestId)) return null;
+	let result;
+	switch (value.result.kind) {
+		case "connected":
+		case "cancelled":
+			if (value.result.message !== void 0) return null;
+			result = { kind: value.result.kind };
+			break;
+		case "failed":
+			if (!boundedText(value.result.message)) return null;
+			result = {
+				kind: "failed",
+				message: value.result.message
+			};
+			break;
+		default: return null;
+	}
+	return {
+		authMenuSessionId,
+		requestId,
+		connectionRequestId: value.connectionRequestId,
+		result
+	};
+}
+//#endregion
+export { emptyWalletAlternatives, parseWalletAlternatives, parseWalletConnectionRequest, parseWalletConnectionResolution };
+
+//# sourceMappingURL=walletAlternatives.js.map

package/dist/esm/core/accountData/near/accountProjection.js

@@ -1,6 +1,6 @@
 import { normalizeTrimmedString } from "../../../shared-ts/src/utils/normalize.js";
-import { toAccountId } from "../../types/accountIds.js";
 import { SIGNER_AUTH_METHODS, SIGNER_KINDS } from "../../../shared-ts/src/utils/signerDomain.js";
+import { toAccountId } from "../../types/accountIds.js";
 import { normalizeIndexedDbAccountAddress } from "../../indexedDB/normalization.js";
 import { getLastSelectedProfileAccountByChain, resolveProfileAccountProjection } from "../../indexedDB/profileAccountProjection.js";
 import { getNearChainCandidates } from "./accountRefs.js";

package/dist/esm/core/config/configBuilder.js

@@ -1,9 +1,9 @@
 import { normalizeTrimmedString } from "../../shared-ts/src/utils/normalize.js";
+import { SIGNING_SESSION_SEAL_ALG, SIGNING_SESSION_SEAL_GROUP_ID } from "../../shared-ts/src/utils/signingSessionSeal.js";
 import { normalizeWalletLocale } from "../ui/locale.js";
 import { parseWalletAuthMethodPlugins } from "../authMethods/plugins.js";
 import { copyEcdsaSignerProvisioningDefaults, resolveAppearanceTheme, resolveBoolean, resolveChains, resolveIntegerInRange, resolveThemePalette } from "./configHelpers.js";
 import { normalizeWalletHostVariant } from "../browser/walletIframe/hostVariant.js";
-import { SIGNING_SESSION_SEAL_ALG, SIGNING_SESSION_SEAL_GROUP_ID } from "../../shared-ts/src/utils/signingSessionSeal.js";
 //#region src/core/config/configBuilder.ts
 const THRESHOLD_ECDSA_PRESIGN_POOL_LIMITS = {
 	targetDepth: {

package/dist/esm/core/config/defaultConfigs.js

@@ -1,6 +1,7 @@
 import { UserVerificationPolicy } from "../../shared-ts/src/utils/authenticatorOptions.js";
 import "../../shared-ts/src/threshold/participants.js";
 import { DEFAULT_THRESHOLD_SESSION_TTL_MS } from "../signingEngine/threshold/sessionPolicy.js";
+import { SIGNING_SESSION_SEAL_ALG, SIGNING_SESSION_SEAL_GROUP_ID } from "../../shared-ts/src/utils/signingSessionSeal.js";
 import { buildConfigsFromDefaults } from "./configBuilder.js";
 //#region src/core/config/defaultConfigs.ts
 const DEFAULT_ROUTER_AB_ECDSA_DERIVATION_PRESIGNATURE_POOL_POLICY = {
@@ -57,8 +58,14 @@ const PASSKEY_MANAGER_DEFAULT_CONFIGS = {
 			remainingUses: 3
 		},
 		emailOtp: { authPolicy: "session" },
-		sessionPersistenceMode: "none",
-		sessionSeal: { mode: "none" },
+		sessionPersistenceMode: "sealed_refresh_v1",
+		sessionSeal: {
+			mode: "sealed_refresh_v1",
+			protocol: {
+				algorithm: SIGNING_SESSION_SEAL_ALG,
+				groupId: SIGNING_SESSION_SEAL_GROUP_ID
+			}
+		},
 		routerAb: { normalSigning: { mode: "disabled" } },
 		routerAbEcdsaDerivation: { presignaturePool: DEFAULT_ROUTER_AB_ECDSA_DERIVATION_PRESIGNATURE_POOL_POLICY },
 		thresholdEcdsa: { provisioningDefaults: {

package/dist/esm/core/indexedDB/seamsWalletDB/repositories.js

@@ -11,8 +11,8 @@ import { parseWalletAuthMethodRecordV2 } from "../../../shared-ts/src/utils/wall
 import { encodeWalletSignerActivationSetV1, extendEcdsaWalletAuthorityWithEd25519, isActiveEcdsaWalletAuthorityV1, isActiveRecoveredWalletAuthorityV1, isEcdsaExtensionOfEd25519WalletAuthority, parseWalletAuthorityV1, walletAuthorityDigestsMatchV1 } from "../../../shared-ts/src/authorization/walletAuthority.js";
 import { parseLocalAuthorityInstallationReceiptV1 } from "../../../shared-ts/src/device-linking/authorityActivation.js";
 import "../../../shared-ts/src/device-linking/index.js";
-import { toAccountId } from "../../types/accountIds.js";
 import { SIGNER_KINDS } from "../../../shared-ts/src/utils/signerDomain.js";
+import { toAccountId } from "../../types/accountIds.js";
 import { parseNearProvisioningState } from "../../types/sdkSentEvents.js";
 import { parseEcdsaThresholdKeyId } from "../../signingEngine/session/keyMaterialBrands.js";
 import { walletIdFromString } from "../../../shared-ts/src/utils/registrationIds.js";
@@ -3719,7 +3719,7 @@ var SeamsWalletRepositories = class {
 			registration: input.registration
 		});
 		const walletSession = input.walletSessionPublication.walletSession;
-		if (walletSession.walletId !== pending.walletId || walletSession.authorityId !== foundingAuthority.authority.authorityId || walletSession.authMethodId !== pending.walletAuthMethodId || walletSession.authorityDigestB64u !== foundingAuthority.authority.authorityDigestB64u || walletSession.authorityRevocationEpoch !== foundingAuthority.authority.revocationEpoch) throw new Error("registration Wallet Session identity does not match the pending wallet");
+		if (walletSession !== void 0 && (walletSession.walletId !== pending.walletId || walletSession.authorityId !== foundingAuthority.authority.authorityId || walletSession.authMethodId !== pending.walletAuthMethodId || walletSession.authorityDigestB64u !== foundingAuthority.authority.authorityDigestB64u || walletSession.authorityRevocationEpoch !== foundingAuthority.authority.revocationEpoch)) throw new Error("registration Wallet Session identity does not match the pending wallet");
 		return this.manager.runTransaction(WALLET_REGISTRATION_PUBLICATION_STORES, "readwrite", this.publishPendingWalletRegistrationCommitInTransaction.bind(this, {
 			request: input.request,
 			pending,
@@ -3771,7 +3771,8 @@ var SeamsWalletRepositories = class {
 				active: input.walletSessionPublication.walletSession,
 				operationCredential: input.walletSessionPublication.operationCredential
 			});
-		} else {
+		} else if (input.walletSessionPublication.kind === "owner_operations") sessionPublication = "locked_identity";
+		else {
 			const existingSession = await readExactActiveWalletSessionForScopeInTransaction({
 				ctx,
 				walletId: input.pending.walletId,

package/dist/esm/core/rpcClients/relayer/walletRegistration.js

@@ -80,7 +80,7 @@ async function postJson(args) {
 	const response = await fetch(`${normalizeRelayerBaseUrl(args.relayerUrl, { trim: false })}${args.path}`, buildRelayerJsonPostRequestInit({
 		headers: {
 			...args.headers,
-			[WALLET_MANAGEMENT_PROTOCOL_HEADER]: "4"
+			[WALLET_MANAGEMENT_PROTOCOL_HEADER]: "5"
 		},
 		body: args.body,
 		bodyJson: requestBody

package/dist/esm/core/signingEngine/flows/registration/accountLifecycle.js

@@ -1,9 +1,9 @@
 import { base64UrlDecode, base64UrlEncode } from "../../../../shared-ts/src/utils/base64.js";
 import { sha256HexUtf8 } from "../../../../shared-ts/src/utils/digests.js";
 import { thresholdEcdsaChainTargetKey, toWalletId } from "../../interfaces/ecdsaChainTarget.js";
+import { SIGNER_AUTH_METHODS, SIGNER_KINDS, SIGNER_SOURCES } from "../../../../shared-ts/src/utils/signerDomain.js";
 import { compactImplicitNearAccountId } from "../../../../shared-ts/src/utils/near.js";
 import { toAccountId } from "../../../types/accountIds.js";
-import { SIGNER_AUTH_METHODS, SIGNER_KINDS, SIGNER_SOURCES } from "../../../../shared-ts/src/utils/signerDomain.js";
 import { NEAR_ED25519_YAO_KEY_VERSION_V1 } from "../../../../shared-ts/src/utils/registrationSignerPlan.js";
 import { nearEd25519SigningKeyIdFromString } from "../../../../shared-ts/src/utils/registrationIds.js";
 import { parseSignerSlot } from "../../../../shared-ts/src/utils/signerSlot.js";

package/dist/esm/core/signingEngine/flows/shared/signingConfirmation.js

@@ -1,8 +1,8 @@
 import { isUserCancellationError } from "../../../../shared-ts/src/utils/errors.js";
 import { secureRandomId } from "../../../../shared-ts/src/utils/secureRandomId.js";
-import { SigningEventPhase } from "../../../types/sdkSentEvents.js";
 import { signingLaneAuthMethod } from "../../session/identity/signingLaneAuthBinding.js";
 import { SigningKeyRefIntentKind, SigningSessionPlanKind } from "../../session/operationState/types.js";
+import { SigningEventPhase } from "../../../types/sdkSentEvents.js";
 import { SigningAuthPlanKind } from "../../stepUpConfirmation/types.js";
 import { SigningOperationCancellationPhase, SigningOperationCommandKind, applySigningOperationInteractionEvent, cancelSigningOperation, planSigningOperationAttempt, runSigningOperationCommand } from "./signingStateMachine.js";
 import { confirmSigningOperation } from "../../stepUpConfirmation/confirmOperation.js";

package/dist/esm/core/signingEngine/flows/signEvmFamily/signEvmFamily.js

@@ -1,8 +1,8 @@
 import { thresholdEcdsaChainTargetKey, toWalletId } from "../../interfaces/ecdsaChainTarget.js";
 import { SIGNER_AUTH_METHODS } from "../../../../shared-ts/src/utils/signerDomain.js";
-import { SigningEventPhase } from "../../../types/sdkSentEvents.js";
 import { signingLaneAuthBindingKey } from "../../session/identity/signingLaneAuthBinding.js";
 import { SigningOperationIntent } from "../../session/operationState/types.js";
+import { SigningEventPhase } from "../../../types/sdkSentEvents.js";
 import { exactEcdsaSigningLaneIdentityFromSelectedLane, requireEvmFamilyEcdsaSigner } from "../../session/identity/exactSigningLaneIdentity.js";
 import { reviewAdmissionForBinding } from "../../uiConfirm/transactionReviewAdmission.js";
 import { buildEvmDisplayModel } from "../../chains/evm/display/evmTx.js";

package/dist/esm/core/signingEngine/flows/signEvmFamily/signingFlow.js

@@ -1,8 +1,8 @@
 import { base64UrlEncode } from "../../../../shared-ts/src/utils/base64.js";
 import { alphabetizeStringify } from "../../../../shared-ts/src/utils/digests.js";
 import { parseDigestB64u, sha256Utf8DigestB64u } from "../../../../shared-ts/src/utils/canonicalPrimitives.js";
-import { SigningEventPhase, createSigningFlowEvent } from "../../../types/sdkSentEvents.js";
 import { SigningSessionIds } from "../../session/operationState/types.js";
+import { SigningEventPhase, createSigningFlowEvent } from "../../../types/sdkSentEvents.js";
 import { normalizeAuthenticationCredential } from "../../webauthnAuth/credentials/helpers.js";
 import { bytesToHex } from "../../chains/evm/bytes.js";
 import { isActiveWalletAuthoritySigningAuthPlan, isWarmSessionSigningAuthPlan } from "../../stepUpConfirmation/types.js";

package/dist/esm/core/signingEngine/flows/signNear/shared/ed25519YaoNormalSigning.js

@@ -5,15 +5,15 @@ import { WorkerResponseType } from "../../../../types/signer-worker.js";
 import { resolveNearNetwork } from "../../../../config/chains.js";
 import { PASSKEY_MANAGER_DEFAULT_CONFIGS } from "../../../../config/defaultConfigs.js";
 import { activeWalletSessionV1RecordsEqual } from "../../../../../shared-ts/src/device-linking/activeWalletSession.js";
+import { SigningSessionIds } from "../../../session/operationState/types.js";
 import { base58Decode } from "../../../../../shared-ts/src/utils/base58.js";
 import { ensureEd25519Prefix } from "../../../../../shared-ts/src/utils/near.js";
-import { SigningSessionIds } from "../../../session/operationState/types.js";
 import { ActionType, fromActionArgsWasm } from "../../../../../shared-ts/src/near/actions.js";
+import { parseThresholdEd25519NearTransaction, thresholdEd25519NearTransactionOperationFingerprint } from "../../../../../shared-ts/src/threshold/ed25519OperationFingerprint.js";
 import { WalletSessionStatusReadScope } from "../../../../rpcClients/relayer/walletSessionAuthorizationStatus.js";
 import { emitEd25519SigningTiming } from "../../../session/operationState/trace.js";
 import { buildCapabilityOperationEnvelope, parseSigningOperationFingerprintDigest } from "../../../../../shared-ts/src/authorization/operationFingerprint.js";
 import { buildRouterAbEd25519DelegateActionPrepareRequestV2, buildRouterAbEd25519NearTransactionPrepareRequestV2, buildRouterAbEd25519Nep413PrepareRequestV2, buildRouterAbEd25519NormalSigningFinalizeRequestV2, finalizeRouterAbNormalSigningV2, prepareRouterAbNormalSigningV2, routerAbCanonicalWireBytesToB64u, routerAbNormalSigningActionFingerprint } from "../../../../rpcClients/relayer/routerAbNormalSigning.js";
-import { parseThresholdEd25519NearTransaction, thresholdEd25519NearTransactionOperationFingerprint } from "../../../../../shared-ts/src/threshold/ed25519OperationFingerprint.js";
 import { buildThresholdEd25519DelegateSigningPayloadWasm, buildThresholdEd25519NearTxUnsignedBorshWasm, decodeThresholdEd25519SignedNearTxBorshWasm, finalizeThresholdEd25519DelegateFromSignatureWasm, finalizeThresholdEd25519NearTxFromSignatureWasm } from "../../../chains/near/nearSignerWasm.js";
 import { requireRouterAbNormalSigningPrepareMatchesRequest, requireRouterAbNormalSigningResponseMatchesRequest } from "../../../../rpcClients/relayer/routerAbNormalSigningValidation.js";
 import { requireRouterAbEd25519NormalSigningReadyState } from "../../../session/warmCapabilities/routerAbWalletSessionCredential.js";

package/dist/esm/core/signingEngine/flows/signNear/signDelegate.js

@@ -2,17 +2,17 @@ import { WorkerResponseType } from "../../../types/signer-worker.js";
 import { resolveNearNetwork, resolvePrimaryNearRpcUrl } from "../../../config/chains.js";
 import { normalizeThresholdEd25519ParticipantIds } from "../../../../shared-ts/src/threshold/participants.js";
 import { PASSKEY_MANAGER_DEFAULT_CONFIGS } from "../../../config/defaultConfigs.js";
+import { SigningOperationIntent, SigningSessionIds } from "../../session/operationState/types.js";
 import { ensureEd25519Prefix } from "../../../../shared-ts/src/utils/near.js";
 import { toAccountId } from "../../../types/accountIds.js";
+import { parseThresholdEd25519NearAction, thresholdEd25519DelegateActionOperationFingerprint } from "../../../../shared-ts/src/threshold/ed25519OperationFingerprint.js";
 import { SigningEventPhase, createSigningFlowEvent } from "../../../types/sdkSentEvents.js";
-import { SigningOperationIntent, SigningSessionIds } from "../../session/operationState/types.js";
 import { computeUiIntentDigestFromTxs, orderActionForDigest } from "../../../../utils/intentDigest.js";
 import { isWarmSessionSigningAuthPlan } from "../../stepUpConfirmation/types.js";
 import { emitEd25519SigningTiming } from "../../session/operationState/trace.js";
 import { SigningOperationCommandKind, runSigningOperationCommand } from "../shared/signingStateMachine.js";
 import { resolveNearSigningMaterials } from "./shared/signingMaterials.js";
 import { buildNearDelegateSigningPayloads } from "../../chains/near/payloads.js";
-import { parseThresholdEd25519NearAction, thresholdEd25519DelegateActionOperationFingerprint } from "../../../../shared-ts/src/threshold/ed25519OperationFingerprint.js";
 import { computeThresholdEd25519DelegateSigningDigestWasm } from "../../chains/near/nearSignerWasm.js";
 import { finalizeThresholdEd25519DelegateSignatureResult } from "./shared/ed25519YaoNormalSigning.js";
 import { toPublicKeyString } from "../../workerManager/validation.js";

package/dist/esm/core/signingEngine/flows/signNear/signNear.js

@@ -1,11 +1,10 @@
-import { secureRandomBase64Url } from "../../../../shared-ts/src/utils/secureRandomId.js";
 import { toWalletId } from "../../interfaces/ecdsaChainTarget.js";
 import { parsePasskeyWalletAuthAuthority, walletAuthAuthorityRef } from "../../../../shared-ts/src/utils/walletAuthAuthority.js";
-import { toAccountId } from "../../../types/accountIds.js";
 import { SENSITIVE_OPERATION_POLICIES, SIGNER_AUTH_METHODS } from "../../../../shared-ts/src/utils/signerDomain.js";
-import { SIGNING_SESSION_EXPIRY_DETECTION_SOURCES, SigningEventPhase, createSigningFlowEvent } from "../../../types/sdkSentEvents.js";
 import { signingLaneAuthBindingKey, signingLaneAuthMethod } from "../../session/identity/signingLaneAuthBinding.js";
 import { SigningOperationIntent, SigningSessionIds, SigningSessionPlanKind } from "../../session/operationState/types.js";
+import { toAccountId } from "../../../types/accountIds.js";
+import { SIGNING_SESSION_EXPIRY_DETECTION_SOURCES, SigningEventPhase, createSigningFlowEvent } from "../../../types/sdkSentEvents.js";
 import { parseSignerSlot } from "../../../../shared-ts/src/utils/signerSlot.js";
 import { exactEd25519SigningLaneIdentityFromSelectedLane, exactSigningLaneIdentityKey, nearEd25519SignerBindingFromBoundaryFields } from "../../session/identity/exactSigningLaneIdentity.js";
 import { demoEmailOtpCodeFromDelivery } from "../../session/emailOtp/challengeDelivery.js";
@@ -80,10 +79,6 @@ function prepareReviewBoundNearMaterial(prepare, admission, input) {
 	admission?.assertAuthMethodPolicy(method);
 	return prepare(input);
 }
-function createNearTransactionSigningOperationId() {
-	const randomId = secureRandomBase64Url(32, "NEAR transaction signing operation IDs");
-	return SigningSessionIds.signingOperation(`near-transaction-sign:${randomId}`);
-}
 function summarizeNearEd25519Lane(lane) {
 	if (lane.state === "missing") return {
 		state: lane.state,
@@ -759,7 +754,7 @@ async function signTransaction(deps, args) {
 		confirmationConfigOverride: args.confirmationConfigOverride
 	});
 	try {
-		const operationId = createNearTransactionSigningOperationId();
+		const operationId = SigningSessionIds.signingOperation(deps.createSigningSessionId("near-transaction-sign"));
 		emitEd25519SigningTiming(String(operationId), "preparation_modal", modalStartedAt);
 		return await signTransactionWithActionsAttempt(deps, args, { signingOperationState: createSigningOperationStateRef({ operationId }) });
 	} finally {

package/dist/esm/core/signingEngine/flows/signNear/signNep413.js

@@ -4,11 +4,11 @@ import { resolveNearNetwork } from "../../../config/chains.js";
 import { normalizeThresholdEd25519ParticipantIds } from "../../../../shared-ts/src/threshold/participants.js";
 import { PASSKEY_MANAGER_DEFAULT_CONFIGS } from "../../../config/defaultConfigs.js";
 import { SigningOperationIntent, SigningSessionIds } from "../../session/operationState/types.js";
+import { thresholdEd25519Nep413OperationFingerprint } from "../../../../shared-ts/src/threshold/ed25519OperationFingerprint.js";
 import { computeUiIntentDigestFromNep413 } from "../../../../utils/intentDigest.js";
 import { emitEd25519SigningTiming } from "../../session/operationState/trace.js";
 import { SigningOperationCommandKind, runSigningOperationCommand } from "../shared/signingStateMachine.js";
 import { resolveNearSigningMaterials } from "./shared/signingMaterials.js";
-import { thresholdEd25519Nep413OperationFingerprint } from "../../../../shared-ts/src/threshold/ed25519OperationFingerprint.js";
 import { computeThresholdEd25519Nep413SigningDigestWasm } from "../../chains/near/nearSignerWasm.js";
 import { authorizeNearSignatureOnlyOperation, confirmNearSignatureOnlyOperation, prepareNearSignatureOnlyStepUp, resolveNearSignatureOnlySigningMaterial, resolveNearSignatureOnlySigningPlans, runNearSignatureOnlySignCommand, signNearSignatureOnlyOperation, startNearSignatureOnlyPrepare } from "./shared/signatureOnlySigning.js";
 //#region src/core/signingEngine/flows/signNear/signNep413.ts

package/dist/esm/core/signingEngine/flows/signNear/signTransactions.js

@@ -2,9 +2,10 @@ import { resolveNearNetwork, resolvePrimaryNearRpcUrl } from "../../../config/ch
 import { normalizeThresholdEd25519ParticipantIds } from "../../../../shared-ts/src/threshold/participants.js";
 import { PASSKEY_MANAGER_DEFAULT_CONFIGS } from "../../../config/defaultConfigs.js";
 import { SignedTransaction } from "../../../rpcClients/near/NearClient.js";
+import { SigningOperationIntent, SigningSessionIds, SigningSessionPlanKind } from "../../session/operationState/types.js";
 import { toAccountId } from "../../../types/accountIds.js";
+import { parseThresholdEd25519NearTransaction, thresholdEd25519NearTransactionPlanningOperationFingerprint } from "../../../../shared-ts/src/threshold/ed25519OperationFingerprint.js";
 import { SigningEventPhase, createSigningFlowEvent } from "../../../types/sdkSentEvents.js";
-import { SigningOperationIntent, SigningSessionIds, SigningSessionPlanKind } from "../../session/operationState/types.js";
 import { nearEd25519SignerBindingFromBoundaryFields } from "../../session/identity/exactSigningLaneIdentity.js";
 import { computeUiIntentDigestFromTxs, orderActionForDigest } from "../../../../utils/intentDigest.js";
 import { isWarmSessionSigningAuthPlan } from "../../stepUpConfirmation/types.js";
@@ -15,7 +16,6 @@ import { buildSigningConfirmationAuthParams } from "../../stepUpConfirmation/con
 import { confirmationConfigForSigningAuthPlan, resolveSigningConfirmationAuthMethod, runTransactionSigningConfirmationCommand } from "../shared/signingConfirmation.js";
 import { resolveNearSigningMaterials } from "./shared/signingMaterials.js";
 import { buildNearTransactionSigningPayload } from "../../chains/near/payloads.js";
-import { parseThresholdEd25519NearTransaction, thresholdEd25519NearTransactionPlanningOperationFingerprint } from "../../../../shared-ts/src/threshold/ed25519OperationFingerprint.js";
 import { requireNearStepUpAuth, signingAuthPlanForNearMaterialRequirement } from "./requireNearStepUpAuth.js";
 import { emitNearSigningConfirmationProgress } from "./shared/confirmationProgress.js";
 import { buildNearEd25519StepUpAuthorization } from "./stepUpAuthorization.js";
@@ -415,12 +415,11 @@ async function runNearAuthorizationRequiredTransactionSigning(payload) {
 		});
 		await markNearNonceLeasesSigned(ctx, confirmation.readiness.nonceLeases);
 		return signed;
-	} catch (error) {
+	} finally {
 		disposeOwnedNearOperationStepUpMaterial({
 			resolved: resolvedOperationStepUpMaterial,
 			owned: operationStepUpMaterial.kind === "passkey_sealed" || operationStepUpMaterial.kind === "email_otp_sealed"
 		});
-		throw error;
 	}
 }
 async function runAuthorizedNearTransactionWithActionsSigning({ ctx, commandSubject, nearAccount, transaction, rpcCall, onEvent, confirmationConfigOverride, title, body, signerSlot, signingOperationState, signingSessionCoordinator: sessionCoordinator, transactionOperation, ed25519SigningBoundary, passkeyEd25519OperationStepUp, emailOtpEd25519StepUp, yaoSigningPreparation, yaoMaterialExecutor }) {

package/dist/esm/core/signingEngine/session/identity/exactSigningLaneIdentity.js

@@ -2,8 +2,8 @@ import { parseMpcMaterialActivationRef, parseWalletAuthMethodId } from "../../..
 import { alphabetizeStringify } from "../../../../shared-ts/src/utils/digests.js";
 import { parseDigestB64u } from "../../../../shared-ts/src/utils/canonicalPrimitives.js";
 import { thresholdEcdsaChainTargetFromRequest, thresholdEcdsaChainTargetKey, toWalletId } from "../../interfaces/ecdsaChainTarget.js";
-import { isImplicitNearAccountId, parseNearAccountId } from "../../../../shared-ts/src/utils/near.js";
 import { SigningSessionIds } from "../operationState/types.js";
+import { isImplicitNearAccountId, parseNearAccountId } from "../../../../shared-ts/src/utils/near.js";
 import { buildImplicitNearAccountBinding, buildNamedNearAccountBinding, buildNearEd25519SignerBinding, buildWalletIdentity, nearEd25519SignerBindingFromRaw } from "../../../../shared-ts/src/utils/walletCapabilityBindings.js";
 import { buildBaseEvmFamilyEcdsaKeyIdentity, toEvmFamilyEcdsaKeyHandle, toRpId } from "./evmFamilyEcdsaIdentity.js";
 //#region src/core/signingEngine/session/identity/exactSigningLaneIdentity.ts

package/dist/esm/core/ui/messages.js

@@ -246,7 +246,9 @@ const walletMessages = [
 	["Unlock with email code", "メールのコードでロック解除"],
 	["Saved wallets", "保存済みウォレット"],
 	["Generate another name", "別の名前を生成"],
-	["Other options", "その他の方法"],
+	["Recover or link wallet", "ウォレットを復元または連携"],
+	["Or connect another wallet", "別のウォレットを接続"],
+	["More wallets", "その他のウォレット"],
 	["Link this device", "このデバイスを連携"],
 	["Scan a code with your other device", "別のデバイスでコードをスキャン"],
 	["Use your recovery code", "リカバリーコードを使用"],

package/dist/esm/core/ui/walletIcon.js

@@ -0,0 +1,10 @@
+//#region src/core/ui/walletIcon.ts
+const MAX_WALLET_ICON_LENGTH = 131072;
+function parseWalletDataIcon(value) {
+	if (typeof value !== "string" || value.length > 131072 || !/^data:image\/(?:png|webp|jpeg|svg\+xml)[;,]/i.test(value)) return null;
+	return value;
+}
+//#endregion
+export { MAX_WALLET_ICON_LENGTH, parseWalletDataIcon };
+
+//# sourceMappingURL=walletIcon.js.map

package/dist/esm/externalEvm/boundary.js

@@ -1,3 +1,4 @@
+import { parseWalletDataIcon } from "../core/ui/walletIcon.js";
 import { isHex } from "../node_modules/viem/_esm/utils/data/isHex.js";
 import { numberToHex } from "../node_modules/viem/_esm/utils/encoding/toHex.js";
 import { getAddress } from "../node_modules/viem/_esm/utils/address/getAddress.js";
@@ -26,12 +27,13 @@ function parseAnnouncement(value) {
 	if (typeof uuid !== "string" || !/^[\da-f]{8}-[\da-f]{4}-4[\da-f]{3}-[89ab][\da-f]{3}-[\da-f]{12}$/i.test(uuid)) return null;
 	if (typeof name !== "string" || !name.trim() || name.length > 128) return null;
 	if (typeof rdns !== "string" || !rdns.trim() || rdns.length > 253) return null;
-	if (typeof icon !== "string" || icon.length > 131072 || !/^data:image\/(?:png|webp|jpeg|svg\+xml)[;,]/i.test(icon)) return null;
+	const walletIcon = parseWalletDataIcon(icon);
+	if (walletIcon === null) return null;
 	return Object.freeze({
 		wallet: Object.freeze({
 			id: uuid.toLowerCase(),
 			name: name.trim(),
-			icon,
+			icon: walletIcon,
 			rdns: rdns.trim()
 		}),
 		provider

package/dist/esm/index.js

@@ -4,6 +4,8 @@ import { PASSKEY_MANAGER_DEFAULT_CONFIGS, buildConfigsFromEnv } from "./core/con
 import { configuredThresholdEcdsaChainTargets, nearAccountRefFromAccountId, thresholdEcdsaChainTargetFromChainFamily, thresholdEcdsaChainTargetFromConfig, thresholdEcdsaChainTargetFromConfiguredRequest, thresholdEcdsaChainTargetFromRequest, thresholdEcdsaChainTargetKey, thresholdEcdsaChainTargetsEqual, toWalletId, walletIdFromWalletProfile, walletSessionRefFromSession } from "./core/signingEngine/interfaces/ecdsaChainTarget.js";
 import { BrowserCapabilityUnavailableError } from "./SeamsWeb/publicApi/capabilitySelection.js";
 import { toAccountId } from "./core/types/accountIds.js";
+import { ActionType } from "./shared-ts/src/near/actions.js";
+import { parseOwnerNearRecovery } from "./SeamsWeb/walletIframe/shared/ownerNearOperation.js";
 import { AccountSyncEventPhase, KeyExportEventPhase, LinkDeviceEventPhase, RegistrationEventPhase, SigningEventPhase, UnlockEventPhase, WALLET_FLOW_EVENT_MESSAGES, WALLET_FLOW_EVENT_STEPS, WALLET_FLOW_EVENT_VERSION, createAccountSyncFlowEvent, createKeyExportFlowEvent, createLinkDeviceFlowEvent, createRegistrationFlowEvent, createSigningFlowEvent, createUnlockFlowEvent, createWalletFlowEvent, isWalletFlowEvent } from "./core/types/sdkSentEvents.js";
 import { buildHostedAuthMenuOpenRequest, hostedAuthMenuExternalAuthRequestIdFromBoundary, hostedAuthMenuSessionIdFromBoundary } from "./SeamsWeb/walletIframe/shared/messages.js";
 import { SeamsWeb } from "./SeamsWeb/SeamsWeb.js";
@@ -11,8 +13,7 @@ import { ExternalEvmController } from "./externalEvm/controller.js";
 import { DEVICE_LINKING_CONFIG, SIGNER_WORKER_MANAGER_CONFIG } from "./config.js";
 import { defineSeamsConfig, seamsTestnetConfig } from "./core/config/defineConfig.js";
 import { DEFAULT_WAIT_STATUS } from "./core/types/rpc.js";
-import { ActionType } from "./shared-ts/src/near/actions.js";
 import { AmountError, parseEther, parseNear, parseUnits, yoctoNear } from "./core/types/amounts.js";
 import { addKey, createAccount, deleteAccount, deleteKey, deployContract, functionCall, stake, transfer } from "./core/types/actionBuilders.js";
 import { logWalletEvents } from "./core/types/eventLogging.js";
-export { AccountSyncEventPhase, ActionType, AmountError, BrowserCapabilityUnavailableError, DEFAULT_WAIT_STATUS, DEVICE_LINKING_CONFIG, ExternalEvmController, KeyExportEventPhase, LinkDeviceEventPhase, PASSKEY_MANAGER_DEFAULT_CONFIGS, RegistrationEventPhase, SIGNER_WORKER_MANAGER_CONFIG, SeamsWeb, SigningEventPhase, UnlockEventPhase, WALLET_FLOW_EVENT_MESSAGES, WALLET_FLOW_EVENT_STEPS, WALLET_FLOW_EVENT_VERSION, addKey, buildConfigsFromEnv, buildHostedAuthMenuOpenRequest, configuredThresholdEcdsaChainTargets, createAccount, createAccountSyncFlowEvent, createKeyExportFlowEvent, createLinkDeviceFlowEvent, createRegistrationFlowEvent, createSigningFlowEvent, createUnlockFlowEvent, createWalletFlowEvent, defineSeamsConfig, deleteAccount, deleteKey, deployContract, functionCall, hostedAuthMenuExternalAuthRequestIdFromBoundary, hostedAuthMenuSessionIdFromBoundary, isWalletFlowEvent, logWalletEvents, nearAccountRefFromAccountId, normalizeWalletLocale, parseEther, parseNear, parseUnits, parseWalletMoveId, seamsTestnetConfig, stake, thresholdEcdsaChainTargetFromChainFamily, thresholdEcdsaChainTargetFromConfig, thresholdEcdsaChainTargetFromConfiguredRequest, thresholdEcdsaChainTargetFromRequest, thresholdEcdsaChainTargetKey, thresholdEcdsaChainTargetsEqual, toAccountId, toWalletId, transfer, walletIdFromWalletProfile, walletSessionRefFromSession, yoctoNear };
+export { AccountSyncEventPhase, ActionType, AmountError, BrowserCapabilityUnavailableError, DEFAULT_WAIT_STATUS, DEVICE_LINKING_CONFIG, ExternalEvmController, KeyExportEventPhase, LinkDeviceEventPhase, PASSKEY_MANAGER_DEFAULT_CONFIGS, RegistrationEventPhase, SIGNER_WORKER_MANAGER_CONFIG, SeamsWeb, SigningEventPhase, UnlockEventPhase, WALLET_FLOW_EVENT_MESSAGES, WALLET_FLOW_EVENT_STEPS, WALLET_FLOW_EVENT_VERSION, addKey, buildConfigsFromEnv, buildHostedAuthMenuOpenRequest, configuredThresholdEcdsaChainTargets, createAccount, createAccountSyncFlowEvent, createKeyExportFlowEvent, createLinkDeviceFlowEvent, createRegistrationFlowEvent, createSigningFlowEvent, createUnlockFlowEvent, createWalletFlowEvent, defineSeamsConfig, deleteAccount, deleteKey, deployContract, functionCall, hostedAuthMenuExternalAuthRequestIdFromBoundary, hostedAuthMenuSessionIdFromBoundary, isWalletFlowEvent, logWalletEvents, nearAccountRefFromAccountId, normalizeWalletLocale, parseEther, parseNear, parseOwnerNearRecovery, parseUnits, parseWalletMoveId, seamsTestnetConfig, stake, thresholdEcdsaChainTargetFromChainFamily, thresholdEcdsaChainTargetFromConfig, thresholdEcdsaChainTargetFromConfiguredRequest, thresholdEcdsaChainTargetFromRequest, thresholdEcdsaChainTargetKey, thresholdEcdsaChainTargetsEqual, toAccountId, toWalletId, transfer, walletIdFromWalletProfile, walletSessionRefFromSession, yoctoNear };

package/dist/esm/react/boundWallet.js

@@ -2,6 +2,16 @@ import { nearAccountRefFromAccountId, walletSessionRefFromSession } from "../cor
 import { createReviewedBoundCalls } from "./transactionReview/boundCalls.js";
 //#region src/react/boundWallet.ts
 function createBoundWallet(seams, loginState, host, owner) {
+	if (loginState.access === "external") return {
+		access: "external",
+		walletId: loginState.walletId,
+		authentication: loginState.externalSettings.authentication,
+		near: loginState.nearAccountId ? {
+			accountId: loginState.nearAccountId,
+			prepareOwnerTransaction: prepareReadableOwnerTransaction.bind(null, seams, loginState.externalSettings.authentication, loginState.nearAccountId),
+			resumeOwnerTransaction: resumeReadableOwnerTransaction.bind(null, seams, loginState.externalSettings.authentication)
+		} : null
+	};
 	const { walletId, nearAccountId } = loginState;
 	const walletSession = walletSessionRefFromSession({ walletId });
 	const nearAccount = nearAccountId ? nearAccountRefFromAccountId(nearAccountId) : null;
@@ -14,6 +24,7 @@ function createBoundWallet(seams, loginState, host, owner) {
 		owner
 	});
 	return {
+		access: "wallet",
 		walletId,
 		walletSession,
 		near: nearAccount && nearAccountId ? {
@@ -50,6 +61,19 @@ function exportKey(seams, walletSession, nearAccount, input) {
 		walletSession
 	});
 }
+function prepareReadableOwnerTransaction(seams, authentication, nearAccountId, input) {
+	return seams.near.prepareOwnerTransaction({
+		authentication,
+		nearAccountId,
+		transaction: input.transaction
+	});
+}
+function resumeReadableOwnerTransaction(seams, authentication, input) {
+	return seams.near.resumeOwnerTransaction({
+		authentication,
+		recovery: input.recovery
+	});
+}
 //#endregion
 export { createBoundWallet };
 

package/dist/esm/react/components/HostedSeamsAuthMenu/shell.js

@@ -1,6 +1,7 @@
 import { buildHostedAuthMenuOpenRequest, hostedAuthMenuExternalAuthRequestIdFromBoundary, hostedAuthMenuSessionIdFromBoundary } from "../../../SeamsWeb/walletIframe/shared/messages.js";
 import { useSeams } from "../../context/index.js";
 import { SeamsAuthMenuMock } from "./SeamsAuthMenuMock.js";
+import { WalletAlternativesBroker, describeWalletAlternatives, walletAlternativesControllerKey } from "./walletAlternatives.js";
 import { endHostedAuthMenuAnchor, resetHostedAuthMenuAnchor } from "../../../SeamsWeb/walletIframe/client/authMenuAnchor.js";
 import React from "react";
 import { jsx } from "react/jsx-runtime";
@@ -83,7 +84,8 @@ function hostedAuthMenuEffectConfigKey(config) {
 			showRegistrationInput: config.showRegistrationInput,
 			showProgress: config.showProgress,
 			copy: config.copy,
-			enabledExternalProviders: config.enabledExternalProviders
+			enabledExternalProviders: config.enabledExternalProviders,
+			walletAlternatives: describeWalletAlternatives(config.walletAlternatives)
 		});
 		return JSON.stringify({
 			initialMode: normalized.initialMode,
@@ -92,7 +94,9 @@ function hostedAuthMenuEffectConfigKey(config) {
 			showRegistrationInput: normalized.showRegistrationInput,
 			showProgress: normalized.showProgress,
 			copy: normalized.copy,
-			enabledExternalProviders: normalized.enabledExternalProviders
+			enabledExternalProviders: normalized.enabledExternalProviders,
+			walletAlternatives: normalized.walletAlternatives,
+			walletControllers: walletAlternativesControllerKey(config.walletAlternatives)
 		});
 	} catch {
 		return "invalid";
@@ -109,6 +113,8 @@ var HostedAuthMenuSessionController = class {
 	showProgress;
 	copy;
 	externalAuthBroker;
+	walletAlternatives;
+	walletBroker;
 	onOutcome;
 	externalAuthRequestIds = /* @__PURE__ */ new Set();
 	handleExternalAuthRequestBound;
@@ -128,12 +134,15 @@ var HostedAuthMenuSessionController = class {
 		this.showProgress = args.showProgress;
 		this.copy = args.copy;
 		this.externalAuthBroker = args.externalAuthBroker;
+		this.walletAlternatives = args.walletAlternatives;
+		this.walletBroker = new WalletAlternativesBroker(args.seams.authMenu, args.authMenuSessionId, args.walletAlternatives);
 		this.onOutcome = args.onOutcome;
 		this.handleExternalAuthRequestBound = this.handleExternalAuthRequest.bind(this);
 	}
 	start() {
 		if (this.isActive) return;
 		this.isActive = true;
+		this.walletBroker.start();
 		resetHostedAuthMenuAnchor(this.anchorElement);
 		this.unsubscribeExternalAuthRequest = this.seams.authMenu.onExternalAuthRequest(this.handleExternalAuthRequestBound);
 		this.open();
@@ -142,6 +151,7 @@ var HostedAuthMenuSessionController = class {
 		if (this.hasFinalizedCleanup) return;
 		this.hasFinalizedCleanup = true;
 		this.isActive = false;
+		this.walletBroker.cleanup();
 		this.unsubscribeExternalAuthRequest?.();
 		this.unsubscribeExternalAuthRequest = null;
 		this.externalAuthRequestIds.clear();
@@ -161,7 +171,8 @@ var HostedAuthMenuSessionController = class {
 				showRegistrationInput: this.showRegistrationInput,
 				showProgress: this.showProgress,
 				copy: this.copy,
-				enabledExternalProviders: this.externalAuthBroker.current ? ["google"] : []
+				enabledExternalProviders: this.externalAuthBroker.current ? ["google"] : [],
+				walletAlternatives: describeWalletAlternatives(this.walletAlternatives.current)
 			});
 		} catch (error) {
 			this.emitFailure(failureCodeForError(error), errorMessage(error));
@@ -225,6 +236,10 @@ var HostedAuthMenuSessionController = class {
 		if (this.hasTerminalOutcome) return;
 		this.hasTerminalOutcome = true;
 		endHostedAuthMenuAnchor(this.anchorElement);
+		try {
+			if (outcome.kind === "wallet_connected") this.walletBroker.complete(outcome.alternativeId);
+		} catch {}
+		this.walletBroker.cleanup();
 		try {
 			this.onOutcome.current(outcome);
 		} catch {}
@@ -274,7 +289,7 @@ function forwardHostedAuthMenuOutcome(terminalGateRef, onOutcomeRef, outcome) {
 	if (isTerminalHostedAuthMenuSuccess(outcome) && terminalGateRef.current) terminalGateRef.current.completed = true;
 	onOutcomeRef.current(outcome);
 }
-const HostedSeamsAuthMenu = ({ initialMode = "login", initialHeightCssPx, placeholder, registrationAccountInput = "implicit_wallet", showRegistrationInput = false, showProgress = false, copy, externalAuthBroker = null, onOutcome }) => {
+const HostedSeamsAuthMenu = ({ initialMode = "login", initialHeightCssPx, placeholder, registrationAccountInput = "implicit_wallet", showRegistrationInput = false, showProgress = false, copy, externalAuthBroker = null, walletAlternatives, onOutcome }) => {
 	const { seams, isLoggedIn } = useOptionalSeams();
 	const terminalGate = terminalGateFor(seams);
 	syncTerminalGate(terminalGate, isLoggedIn);
@@ -285,9 +300,12 @@ const HostedSeamsAuthMenu = ({ initialMode = "login", initialHeightCssPx, placeh
 		showRegistrationInput,
 		showProgress,
 		copy,
-		enabledExternalProviders: externalProvidersForBroker(externalAuthBroker)
+		enabledExternalProviders: externalProvidersForBroker(externalAuthBroker),
+		walletAlternatives
 	});
 	const externalAuthBrokerRef = React.useRef(externalAuthBroker);
+	const walletAlternativesRef = React.useRef(walletAlternatives);
+	walletAlternativesRef.current = walletAlternatives;
 	const onOutcomeRef = React.useRef(onOutcome);
 	const terminalGateRef = React.useRef(terminalGate);
 	const forwardedOutcomeRef = React.useRef(() => {});
@@ -299,7 +317,8 @@ const HostedSeamsAuthMenu = ({ initialMode = "login", initialHeightCssPx, placeh
 		showRegistrationInput,
 		showProgress,
 		copy,
-		enabledExternalProviders: externalProvidersForBroker(externalAuthBroker)
+		enabledExternalProviders: externalProvidersForBroker(externalAuthBroker),
+		walletAlternatives
 	};
 	externalAuthBrokerRef.current = externalAuthBroker;
 	onOutcomeRef.current = onOutcome;
@@ -323,6 +342,7 @@ const HostedSeamsAuthMenu = ({ initialMode = "login", initialHeightCssPx, placeh
 			showProgress: config.showProgress,
 			copy: config.copy,
 			externalAuthBroker: externalAuthBrokerRef,
+			walletAlternatives: walletAlternativesRef,
 			onOutcome: forwardedOutcomeRef
 		});
 		session.start();