@seams/wallet 0.8.0 → 0.9.0

package/dist/types/wallet/src/core/signingEngine/session/warmCapabilities/capabilityReaderCore.d.ts

@@ -1,3 +1,4 @@
+import { WalletSessionStatusReadScope } from '../../../rpcClients/relayer/walletSessionAuthorizationStatus';
 import type { ActiveEcdsaCapabilityRuntimeForChainResolver, ActiveEcdsaCapabilityRuntimeResolver } from '../material/activeEcdsaCapabilityRuntime';
 import type { ExactEcdsaWalletSessionAuthorizationResolver } from '../material/ecdsaSigningCapability';
 import { type WalletId } from '../../interfaces/ecdsaChainTarget';
@@ -19,7 +20,7 @@ type WarmSessionCapabilityReaderCoreDeps = {
     statusReader: Pick<WarmSigningStatusReader, 'readEd25519WarmSessionClaim'>;
     signingSessionSeal: WarmSessionCapabilityReaderSeal;
     resolveActiveEcdsaWalletSessionAuthorization?: ExactEcdsaWalletSessionAuthorizationResolver;
-    resolveActiveEd25519WalletSessionAuthorization?: (walletId: WalletId) => Promise<ExactNearEd25519WalletSessionAuthorization | null>;
+    resolveActiveEd25519WalletSessionAuthorization?: (walletId: WalletId, statusReads: WalletSessionStatusReadScope) => Promise<ExactNearEd25519WalletSessionAuthorization | null>;
 };
 export declare function createWarmSessionCapabilityReaderCore(deps: WarmSessionCapabilityReaderCoreDeps): WarmSessionCapabilityReader;
 export {};

package/dist/types/wallet/src/core/signingEngine/stepUpConfirmation/otpPrompt/authLane.d.ts

@@ -14,19 +14,12 @@ export type EmailOtpSigningSessionAuthLane = {
     curve: 'ecdsa';
     chainTarget: ThresholdEcdsaChainTarget;
 };
-export type EmailOtpRouteFamily = 'login' | 'registration' | 'signing_session';
+export type EmailOtpRouteFamily = 'login' | 'registration' | 'signing_session' | 'operation_step_up';
 export type EmailOtpRoutePlan = ExclusiveUnion<{
-    routeFamily: 'login';
-    operation: WalletEmailOtpLoginOperation;
-} | {
-    routeFamily: 'registration';
-    operation: typeof WALLET_EMAIL_OTP_REGISTRATION_OPERATION;
+    routeFamily: 'operation_step_up';
+    operation: typeof WALLET_EMAIL_OTP_TRANSACTION_SIGN_OPERATION;
+    operationCredential: WalletSessionOperationCredentialV1;
 } | {
-    routeFamily: 'signing_session';
-    authLane: EmailOtpSigningSessionAuthLane;
-    operation: typeof WALLET_EMAIL_OTP_TRANSACTION_SIGN_OPERATION | typeof WALLET_EMAIL_OTP_EXPORT_OPERATION;
-}>;
-export declare function buildEmailOtpRoutePlan(args: ExclusiveUnion<{
     routeFamily: 'login';
     operation: WalletEmailOtpLoginOperation;
 } | {
@@ -36,7 +29,8 @@ export declare function buildEmailOtpRoutePlan(args: ExclusiveUnion<{
     routeFamily: 'signing_session';
     authLane: EmailOtpSigningSessionAuthLane;
     operation: typeof WALLET_EMAIL_OTP_TRANSACTION_SIGN_OPERATION | typeof WALLET_EMAIL_OTP_EXPORT_OPERATION;
-}>): EmailOtpRoutePlan;
+}>;
+export declare function buildEmailOtpRoutePlan(args: EmailOtpRoutePlan): EmailOtpRoutePlan;
 export declare function emailOtpRoutePath(plan: EmailOtpRoutePlan, action: 'challenge' | 'seal' | 'finalize'): string;
 export declare function normalizeEmailOtpRoutePlan(value: unknown): EmailOtpRoutePlan | undefined;
 //# sourceMappingURL=authLane.d.ts.map

package/dist/types/wallet/src/core/signingEngine/threshold/ecdsa/operationStepUp.d.ts

@@ -1,3 +1,4 @@
+import type { WalletSessionOperationCredentialV1 } from '../../../../../../shared-ts/src/device-linking/contracts';
 import { type RouterAbEcdsaDerivationNormalSigningScopeV1, type RouterAbEcdsaOperationStepUpPreparationV1Wire, type RouterAbEcdsaOperationStepUpAuthorizationRequestV1Wire, type RouterAbEcdsaOperationStepUpAuthorizationResponseV1Wire } from '../../../../../../shared-ts/src/utils/routerAbEcdsaDerivation';
 import type { OperationDigestSet } from '../../../../../../shared-ts/src/authorization/operationFingerprint';
 import type { EvmEcdsaMpcOperationKind } from '../../../../../../shared-ts/src/authorization/capabilityKinds';
@@ -7,10 +8,11 @@ export type PreparedEcdsaOperationStepUp = {
     readonly challengeB64u: string;
 };
 export type EcdsaOperationStepUpTransport = {
-    readonly kind: 'legacy_cookie';
+    readonly kind: 'factor_proof';
+    readonly credential?: never;
 } | {
-    readonly kind: 'wallet_session_bearer';
-    readonly token: string;
+    readonly kind: 'wallet_session';
+    readonly credential: WalletSessionOperationCredentialV1;
 };
 declare function buildEcdsaOperationStepUpPreparation(args: {
     readonly walletId: string;
@@ -28,8 +30,7 @@ export declare function prepareEcdsaOperationStepUp(args: Parameters<typeof buil
 export declare function issueEcdsaOperationStepUpAuthorization(args: {
     readonly relayerUrl: string;
     readonly request: RouterAbEcdsaOperationStepUpAuthorizationRequestV1Wire;
-    readonly fetchImpl?: typeof fetch;
-    readonly transport?: EcdsaOperationStepUpTransport;
+    readonly transport: EcdsaOperationStepUpTransport;
 }): Promise<RouterAbEcdsaOperationStepUpAuthorizationResponseV1Wire>;
 export {};
 //# sourceMappingURL=operationStepUp.d.ts.map

package/dist/types/wallet/src/core/signingEngine/threshold/ed25519/yaoClient.d.ts

@@ -1,4 +1,4 @@
-import { WasmActivatedClientV1 } from '../../../../../../../esm/wasm/router_ab_ed25519_yao_client/pkg/router_ab_ed25519_yao_client.js';
+import type { WalletSessionHome } from '../../../../../../shared-ts/src/device-linking/contracts';
 import { ROUTER_AB_ED25519_YAO_RECOVERY_ACTIVATE_PATH_V1, ROUTER_AB_ED25519_YAO_RECOVERY_ADMISSION_PATH_V1, ROUTER_AB_ED25519_YAO_RECOVERY_EXECUTE_PATH_V1, ROUTER_AB_ED25519_YAO_RECOVERY_STATUS_PATH_V1, ROUTER_AB_ED25519_YAO_EXPORT_ADMISSION_PATH_V1, ROUTER_AB_ED25519_YAO_EXPORT_EXECUTE_PATH_V1, ROUTER_AB_ED25519_YAO_REGISTRATION_ADMISSION_PATH_V1, ROUTER_AB_ED25519_YAO_REGISTRATION_EXECUTE_PATH_V1, type RouterAbEd25519YaoApplicationBindingFactsV1, type RouterAbEd25519YaoActivationPublicReceiptV1, type RouterAbEd25519YaoBytes32V1, type RouterAbEd25519YaoActivationExecuteRequestV1, type RouterAbEd25519YaoRecoveryActivationRequestV1, type RouterAbEd25519YaoRecoveryAdmissionRequestV1, type RouterAbEd25519YaoRecoveryStatusRequestV1, type RouterAbEd25519YaoRegistrationAdmissionRequestV1, type RouterAbEd25519YaoExportAdmissionRequestV1, type RouterAbEd25519YaoExportExecuteRequestV1 } from '../../../../../../shared-ts/src/utils/routerAbEd25519Yao';
 import type { WebAuthnAuthenticationCredential } from '../../../types/webauthn';
 import { type MpcMaterialActivationRef } from '../../../../../../shared-ts/src/utils/domainIds';
@@ -8,6 +8,8 @@ export declare const ROUTER_AB_ED25519_YAO_ACTIVE_CLIENT_KIND_V1: "router_ab_ed2
 type RouterAbEd25519YaoRegistrationTransportFailureV1 = {
     ok: false;
     message: string;
+    /** The failure code of the answer, when the answering service gave one. */
+    code?: string;
 };
 type RouterAbEd25519YaoRegistrationTransportResultV1 = {
     ok: true;
@@ -199,6 +201,9 @@ type RouterAbEd25519YaoHttpAuthorizationV1 = {
 };
 export type RouterAbEd25519YaoHttpTransportConfigV1 = {
     readonly routerOrigin: string;
+    readonly routing: WalletSessionHome | {
+        readonly kind: 'discovery';
+    };
     readonly authorization: RouterAbEd25519YaoHttpAuthorizationV1;
     readonly fetch: typeof fetch;
     readonly traceContext?: RouterAbTraceContextV1;
@@ -217,12 +222,6 @@ export interface RouterAbEd25519YaoActiveClientV1 {
 export interface RouterAbEd25519YaoSealableActiveClientV1 extends RouterAbEd25519YaoActiveClientV1 {
     sealLocalMaterial(input: RouterAbEd25519YaoSealLocalMaterialInputV1): RouterAbEd25519YaoSealedLocalMaterialV1;
 }
-declare const ACTIVE_CLIENT_CONSTRUCTION: unique symbol;
-type RouterAbEd25519YaoActiveClientConstructionV1 = {
-    [ACTIVE_CLIENT_CONSTRUCTION]: true;
-    metadata: RouterAbEd25519YaoActiveClientMetadataV1;
-    activated: WasmActivatedClientV1;
-};
 type RouterAbEd25519YaoPasskeyExportSeedInputV1 = {
     request: RouterAbEd25519YaoExportAdmissionRequestV1;
     transport: RouterAbEd25519YaoExportTransportV1;
@@ -247,16 +246,6 @@ export declare class RouterAbEd25519YaoHttpActivationTransportV1 implements Rout
     constructor(config: RouterAbEd25519YaoHttpTransportConfigV1);
     send(request: RouterAbEd25519YaoRegistrationAdmissionTransportRequestV1 | RouterAbEd25519YaoRecoveryTransportRequestV1 | RouterAbEd25519YaoExportTransportRequestV1): Promise<RouterAbEd25519YaoRegistrationTransportResultV1>;
 }
-export declare class WasmRouterAbEd25519YaoActiveClientV1 implements RouterAbEd25519YaoSealableActiveClientV1 {
-    private readonly activeMetadata;
-    private lifecycle;
-    constructor(args: RouterAbEd25519YaoActiveClientConstructionV1);
-    sealLocalMaterial(input: RouterAbEd25519YaoSealLocalMaterialInputV1): RouterAbEd25519YaoSealedLocalMaterialV1;
-    createSigningShare(input: RouterAbEd25519YaoClientSigningInputV1): Promise<RouterAbEd25519YaoClientSigningShareV1>;
-    metadata(): RouterAbEd25519YaoActiveClientMetadataV1;
-    status(): RouterAbEd25519YaoActiveClientStatusV1;
-    dispose(): void;
-}
 export declare class RouterAbEd25519YaoClientV1 {
     private constructor();
     static initializeBundled(): Promise<RouterAbEd25519YaoClientV1>;

package/dist/types/wallet/src/core/signingEngine/uiConfirm/ui/preact/ReviewDisclosure.d.ts

@@ -4,6 +4,7 @@ export declare class ReviewDisclosure extends Component<{
     label: string;
     children: ComponentChildren;
     initiallyOpen?: boolean;
+    kind?: 'technical' | 'raw';
 }> {
     private readonly root;
     private readonly id;

package/dist/types/wallet/src/core/signingEngine/walletCustody/ceremonyDriver.d.ts

@@ -120,7 +120,6 @@ export type WalletCustodyKeySetCeremonyInput = WalletCustodyKeySetCeremonyShared
     /** Recovery always reproduces an existing server-recorded key set. */
     readonly recordedKeyManifestDigestB64u: string;
 });
-export declare function isRegistrationBenchmarkDiagnosticsEnabled(): boolean;
 export declare function recordWalletCustodyTiming(ceremonyId: string, stage: 'admission' | 'journal_prepared' | 'journal_joined' | 'begin' | 'checkpoint' | 'router_round' | 'complete' | 'finish', startedAt: number): void;
 export declare function runWalletCustodyKeySetCeremony(input: WalletCustodyKeySetCeremonyInput): Promise<WalletCustodyCeremonyCommitPayload>;
 export {};

package/dist/types/wallet/src/core/signingEngine/walletCustody/walletRegistrationEd25519.d.ts

@@ -0,0 +1,17 @@
+import type { RouterAbEd25519YaoHttpActivationTransportV1 } from '../threshold/ed25519/yaoClient';
+/**
+ * Runs one registration execute round at the Router and returns its result.
+ *
+ * The Router claims a registration before it runs it. While an earlier send
+ * of the same request holds that claim, the answer is `execution_in_progress`.
+ * A resume after a reload meets this: the page lost the reply of its first
+ * send, and the Router still runs it. The exact request is sent again with
+ * bounded backoff until the Router answers it with the recorded result or
+ * lets it take the lapsed claim over.
+ */
+export declare function executeWalletRegistrationEd25519RoundV1(input: {
+    readonly executeRequestJson: string;
+    readonly transport: Pick<RouterAbEd25519YaoHttpActivationTransportV1, 'send'>;
+    readonly wait?: (ms: number) => Promise<void>;
+}): Promise<string>;
+//# sourceMappingURL=walletRegistrationEd25519.d.ts.map

package/dist/types/wallet/src/core/signingEngine/workerManager/SignerWorkerManager.d.ts

@@ -57,7 +57,6 @@ export declare class SignerWorkerManager {
     constructor(deps: SignerWorkerManagerDeps);
     setWorkerBaseOrigin(origin: string | undefined): void;
     getContext(): SignerWorkerManagerContext;
-    prewarmWorkers(): Promise<void>;
     clearEcdsaClientWorkerState(target: EcdsaClientPresignCleanupTarget): Promise<void>;
     prewarmEcdsaRegistrationCrypto(): Promise<{
         kind: 'succeeded' | 'failed';

package/dist/types/wallet/src/core/signingEngine/workerManager/ecdsaPresignLifecycle.d.ts

@@ -1,6 +1,4 @@
 import type { ReadonlyExclusiveUnion } from '../../../../../shared-ts/src/utils/variant';
-export declare const ECDSA_CLIENT_PRESIGNATURE_CAPACITY: 5;
-export declare const MAX_DURABLE_CLIENT_PRESIGNATURE_LIFETIME_MS: number;
 export type EcdsaClientPresignAdmissionStorage = {
     readonly kind: 'sealed_indexed_db';
     readonly durableRecordId: string;

package/dist/types/wallet/src/core/signingEngine/workerManager/ecdsaPresignPoolIdentity.d.ts

@@ -1,6 +1,9 @@
+import { type RouterAbEcdsaDerivationNormalSigningScopeV1 } from '../../../../../shared-ts/src/utils/routerAbEcdsaDerivation';
+import { type RouterAbMpcMaterialActivationRefWire } from '../../../../../shared-ts/src/utils/routerAbNormalSigningIdentity';
 import { type RootShareEpoch } from '../../../../../shared-ts/src/utils/domainIds';
 export declare const FIXED_ECDSA_PRESIGN_PROTOCOL_ID: "seams/router-ab-ecdsa-presign/fixed-2of2/v1";
 export type EcdsaClientPresignPoolIdentity = {
+    readonly ownershipGeneration: number;
     readonly relayerUrl: string;
     readonly materialActivationB64u: string;
     readonly materialActivationId: string;
@@ -16,4 +19,10 @@ export type EcdsaClientPresignPoolIdentity = {
 export declare function parseEcdsaClientPresignPoolIdentity(value: unknown): EcdsaClientPresignPoolIdentity;
 export declare function equalEcdsaClientPresignPoolIdentity(left: EcdsaClientPresignPoolIdentity, right: EcdsaClientPresignPoolIdentity): boolean;
 export declare function ecdsaClientPresignPoolKey(identity: EcdsaClientPresignPoolIdentity): string;
+export declare function makeClientPresignPoolIdentity(args: {
+    ownershipGeneration: number;
+    relayerUrl: string;
+    scope: RouterAbEcdsaDerivationNormalSigningScopeV1;
+    materialActivation: RouterAbMpcMaterialActivationRefWire;
+}): EcdsaClientPresignPoolIdentity;
 //# sourceMappingURL=ecdsaPresignPoolIdentity.d.ts.map

package/dist/types/wallet/src/core/signingEngine/workerManager/workerTransport.d.ts

@@ -4,7 +4,6 @@ import type { EcdsaDerivationWorkerOperationRequest, EcdsaDerivationWorkerOperat
 export declare class WorkerTransport implements SignerWorkerTransportProtocol {
     private workerBaseOrigin;
     private readonly workers;
-    private readonly workerReadiness;
     private readonly pendingByKind;
     private readonly messageHandlers;
     private readonly errorHandlers;
@@ -13,9 +12,7 @@ export declare class WorkerTransport implements SignerWorkerTransportProtocol {
     private ecdsaRegistrationCryptoPrewarmPromise;
     private emailOtpYaoPrewarmPromise;
     setWorkerBaseOrigin(origin: string | undefined): void;
-    prewarmWorkers(): Promise<void>;
     clearEcdsaClientWorkerState(target: EcdsaClientPresignCleanupTarget): Promise<void>;
-    private requireWorkerReadiness;
     /**
      * Initializes the ECDSA derivation and registration WASM inside the
      * derivation worker during the authentication prompt, so the first ceremony
@@ -68,8 +65,6 @@ export declare class WorkerTransport implements SignerWorkerTransportProtocol {
     private clearRequest;
     private resetWorker;
     private terminateWorkerOnly;
-    private readinessForWorker;
-    private deleteWorkerReadiness;
 }
 export declare function getWorkerTransport(): WorkerTransport;
 export declare function requestWorkerOperation<K extends SignerWorkerKind, T extends SignerWorkerOperationType<K>>(args: {

package/dist/types/wallet/src/core/signingEngine/workerManager/workerTypes.d.ts

@@ -500,29 +500,6 @@ export interface EmailOtpWorkerOperationMap {
             expiresAtMs?: number;
         };
     };
-    enrollEmailOtpWallet: {
-        payload: {
-            relayUrl: string;
-            walletId: string;
-            userId: string;
-            challengeId?: string;
-            otpCode: string;
-            groupId: string;
-            routePlan: EmailOtpRoutePlan;
-            googleEmailOtpRegistrationAttemptId?: string;
-            otpChannel?: WalletEmailOtpChannel;
-            clientSecret32?: ArrayBuffer;
-        };
-        result: {
-            challengeId: string;
-            otpChannel: WalletEmailOtpChannel;
-            enrollmentId: string;
-            enrollmentSealKeyVersion: string;
-            serverSealedFactorCiphertextB64u: string;
-            clientUnlockPublicKeyB64u: string;
-            unlockKeyVersion: string;
-        };
-    };
     prepareEmailOtpRegistrationEnrollmentMaterial: {
         payload: {
             relayUrl: string;
@@ -832,18 +809,30 @@ export interface EmailOtpWorkerOperationMap {
             readonly expectedThresholdSessionId: ThresholdEd25519SessionId;
             readonly operationCredential: WalletSessionOperationCredentialV1;
             readonly ecdsa: {
+                readonly kind: 'required';
                 readonly sessionHandleBinding: Extract<EmailOtpEcdsaSessionBootstrapHandleBinding, {
                     readonly operation: 'wallet_unlock';
                 }>;
                 readonly runtimePolicyScope: ThresholdRuntimePolicyScope;
                 readonly sessionPolicy: RouterAbEcdsaPostRegistrationSessionActivationPolicyV1;
+            } | {
+                readonly kind: 'absent';
+                readonly sessionHandleBinding?: never;
+                readonly runtimePolicyScope?: never;
+                readonly sessionPolicy?: never;
             };
             readonly walletCustodyEd25519Material: Extract<EmailOtpWalletCustodyEd25519MaterialRequest, {
                 readonly kind: 'found';
             }>;
         };
         result: EmailOtpEd25519YaoWorkerActivationResult & {
-            readonly ecdsaSession: RouterAbEcdsaCredentialFreeSessionActivationResponseV1;
+            readonly ecdsa: {
+                readonly kind: 'absent';
+                readonly session?: never;
+            } | {
+                readonly kind: 'activated';
+                readonly session: RouterAbEcdsaCredentialFreeSessionActivationResponseV1;
+            };
             readonly walletSessionAuthorization: ExactWalletSessionAuthorization;
         };
     };
@@ -1519,7 +1508,7 @@ type UnlockedLinkedDeviceEd25519ClientRootCapabilityV1 = {
 /** The unlocked capability a device approving a link seals the export root from. */
 export type UnlockedEd25519ExportRootLinkingCapabilityV1 = UnlockedWalletEd25519ExportRootCapabilityV1 | UnlockedLinkedDeviceEd25519ClientRootCapabilityV1;
 /**
- * What a destroy call invalidates. Lock and logout destroy by wallet, session
+ * What a destroy call invalidates. Lock destroys by wallet, session
  * retirement or replacement by Wallet Session, failed activation by capability
  * handle, and worker reset or page teardown destroys all.
  */
@@ -1773,7 +1762,7 @@ export interface WalletCustodyCeremonyWorkerOperationMap {
         result: UnlockedEd25519ExportRootLinkingCapabilityV1;
     };
     /**
-     * Destroys unlocked Ed25519 export-root capabilities. Wired into lock, logout,
+     * Destroys unlocked Ed25519 export-root capabilities. Wired into lock,
      * wallet switch, Wallet Session retirement or replacement, expiry, failed
      * activation, and page teardown; `all` is the worker-reset scope.
      */
@@ -1932,7 +1921,6 @@ export type EmailOtpYaoPrewarmOutcome = (EmailOtpYaoPrewarmDiagnostics & {
 });
 export interface SignerWorkerTransportProtocol {
     setWorkerBaseOrigin(origin: string | undefined): void;
-    prewarmWorkers(): Promise<void>;
     prewarmEmailOtpYao(request?: EmailOtpYaoPrewarmRequest): Promise<EmailOtpYaoPrewarmOutcome>;
     requestOperation<K extends SignerWorkerKind, T extends SignerWorkerOperationType<K>>(args: {
         kind: K;

package/dist/types/wallet/src/core/signingEngine/workerManager/workers/email-otp/enrollment.d.ts

@@ -2,21 +2,15 @@ import { type WalletEmailOtpChannel } from '../../../../../../../shared-ts/src/u
 import type { EmailOtpWalletRegistrationEcdsaPrepareHandleRequest, EmailOtpWalletRegistrationEcdsaPrepareHandleResult, EmailOtpWorkerProgressCode } from '../../workerTypes';
 import { type EmailOtpRoutePlan } from '../../../stepUpConfirmation/otpPrompt/authLane';
 export declare function emailOtpWalletRegistrationEcdsaHandleResult(request: EmailOtpWalletRegistrationEcdsaPrepareHandleRequest): EmailOtpWalletRegistrationEcdsaPrepareHandleResult;
-export declare function completeEmailOtpEnrollmentFromSecret32(args: {
+export declare function prepareEmailOtpEnrollmentFromSecret32(args: {
     relayUrl: string;
     walletId: string;
     userId: string;
-    challengeId?: string;
-    otpCode?: string;
     groupId: string;
     routePlan: EmailOtpRoutePlan;
     clientSecret32?: Uint8Array;
-    returnClientSecret32?: boolean;
-    skipServerFinalize?: boolean;
-    googleEmailOtpRegistrationAttemptId?: string;
     onProgress?: (code: EmailOtpWorkerProgressCode) => void;
 }): Promise<{
-    challengeId: string;
     otpChannel: WalletEmailOtpChannel;
     enrollmentId: string;
     enrollmentSealKeyVersion: string;
@@ -29,19 +23,9 @@ export declare function completeEmailOtpEnrollmentFromSecret32(args: {
         clientUnlockPublicKeyB64u: string;
         unlockKeyVersion: string;
     };
-    clientSecret32?: Uint8Array;
 }>;
 /** A caller-chosen enrollment factor secret, when the request carries one. */
 export declare function enrollmentClientSecret32(value: ArrayBuffer | undefined): {
     clientSecret32?: Uint8Array;
 };
-/** The enrollment facts both enrollment requests return to the main thread. */
-export declare function emailOtpEnrollmentFacts(result: Awaited<ReturnType<typeof completeEmailOtpEnrollmentFromSecret32>>): {
-    otpChannel: "email_otp";
-    enrollmentId: string;
-    enrollmentSealKeyVersion: string;
-    serverSealedFactorCiphertextB64u: string;
-    clientUnlockPublicKeyB64u: string;
-    unlockKeyVersion: string;
-};
 //# sourceMappingURL=enrollment.d.ts.map

package/dist/types/wallet/src/core/types/rpc.d.ts

@@ -1,6 +1,5 @@
 import type { AccessKeyView, TxExecutionStatus } from '@near-js/types';
 export declare const DEFAULT_WAIT_STATUS: {
-    executeAction: TxExecutionStatus;
     thresholdAddKey: TxExecutionStatus;
 };
 export interface TransactionContext {

package/dist/types/wallet/src/core/types/sdkPublicResults.d.ts

@@ -2,6 +2,7 @@ import type { ExclusiveUnion } from '../../../../shared-ts/src/utils/variant';
 export type SignNEP413MessageParams = {
     message: string;
     recipient: string;
+    callbackUrl?: string;
     state?: string;
 };
 export type SignNEP413MessageResult = ExclusiveUnion<{

package/dist/types/wallet/src/core/types/sdkSentEvents.d.ts

@@ -1,3 +1,4 @@
+import type { WalletSessionHome } from '../../../../shared-ts/src/device-linking/contracts';
 import type { TxExecutionStatus } from '@near-js/types';
 import type { ConfirmationConfig } from './signer-worker';
 import type { EcdsaSignerProvisioningDefaults } from './ecdsaSignerProvisioningDefaults';
@@ -12,6 +13,7 @@ import type { ExclusiveUnion } from '../../../../shared-ts/src/utils/variant';
 export type { WalletSessionId };
 export type EcdsaKeyFactsInventoryWalletSessionCredential = WalletSessionOperationCredentialV1 | {
     readonly kind: 'opaque_hosted_wallet_session_operation_credential_v1';
+    readonly home: WalletSessionHome;
     readonly token: string;
     readonly walletSessionId: WalletSessionId;
 };

package/dist/types/wallet/src/core/types/seams.d.ts

@@ -10,13 +10,14 @@ import type { EcdsaSignerProvisioningDefaults } from './ecdsaSignerProvisioningD
 import type { SigningSessionSealProtocol } from '../../../../shared-ts/src/utils/signingSessionSeal';
 import type { SignerAuthMethod, SigningSessionPolicy, SigningSessionRetention, WalletAuthMethod } from '../../../../shared-ts/src/utils';
 import type { WalletId } from '../../../../shared-ts/src/utils/registrationIntent';
+import type { WebAuthnRpId } from '../../../../shared-ts/src/utils/domainIds';
 import type { RouterApiKeyAuthFailureCode } from '../../../../shared-ts/src/utils/routerApiKeyAuth';
 import type { NearEd25519SigningKeyId } from '../../../../shared-ts/src/utils/registrationIds';
 import type { RegistrationNearAccountProvisioning, ResolvedRegistrationNearAccount } from '../../../../shared-ts/src/utils/registrationSignerPlan';
 import type { WalletAuthMethodBinding } from '../../../../shared-ts/src/utils/walletCapabilityBindings';
 import type { ThresholdEcdsaChainTarget } from '../signingEngine/interfaces/ecdsaChainTarget';
 import type { EvmFamilyEcdsaWalletUnlockSubject, NearEd25519WalletUnlockSubject, WalletUnlockSubjectSet } from '../signingEngine/session/identity/walletUnlockSubject';
-import type { ExclusiveUnion, ReadonlyExclusiveUnion } from '../../../../shared-ts/src/utils/variant';
+import type { ExclusiveUnion, ReadonlyExclusiveUnion, Variant } from '../../../../shared-ts/src/utils/variant';
 export type { SensitiveOperationPolicy, SignerAuthMethod, SigningSessionPolicy, SigningSessionRetention, WalletAuthMethod, } from '../../../../shared-ts/src/utils';
 export type SigningSessionPersistenceMode = 'none' | 'sealed_refresh_v1';
 export type EmailOtpAuthPolicy = SigningSessionPolicy;
@@ -171,7 +172,7 @@ export interface SeamsConfigsInput {
     /**
      * Email OTP signing-session policy.
      *
-     * - `session`: recover once after OTP and keep warm signing material in memory until expiry/logout.
+     * - `session`: recover once after OTP and keep warm signing material in memory until expiry or lock.
      * - `per_operation`: recover on demand, use once, and discard immediately after the operation.
      */
     emailOtpAuthPolicy?: EmailOtpAuthPolicy;
@@ -255,7 +256,7 @@ export interface SeamsConfigsInput {
  *     authenticatorOptions: AuthenticatorOptions;
  *   };
  *   wallet:
- *     | { mode: 'direct'; iframe: { origin?: string; servicePath: string; sdkBasePath: string; rpIdOverride?: string } }
+ *     | { mode: 'direct'; rpId: WebAuthnRpId; iframe?: never }
  *     | { mode: 'iframe'; iframe: { origin: string; servicePath: string; sdkBasePath: string; rpIdOverride?: string } };
  *   ui: {
  *     appearance: AppearanceConfig;
@@ -264,6 +265,9 @@ export interface SeamsConfigsInput {
  * ```
  */
 export type SeamsConfigsReadonly = ReadonlyDeep<SeamsConfigsResolved>;
+export type SeamsClientConfig = Omit<SeamsConfigsReadonly, 'wallet'> & {
+    readonly wallet: Variant<SeamsConfigsReadonly['wallet'], 'mode', 'iframe'>;
+};
 export type WalletSessionIdentityResolveFailure = 'missing_wallet_profile' | 'ambiguous_wallet_profile' | 'missing_requested_capability_subject' | 'capability_subject_lookup_failed' | 'invalid_capability_subject' | 'activation_reconciliation_pending' | 'activation_reconciliation_failed' | 'invalid_wallet_profile';
 export type WalletSessionAppIdentity = ReadonlyExclusiveUnion<{
     readonly kind: 'anonymous';
@@ -645,7 +649,6 @@ type ReadonlyDeepPrimitive = string | number | boolean | bigint | symbol | null
 export type ReadonlyDeep<T> = T extends ReadonlyDeepPrimitive ? T : T extends (...args: never[]) => unknown ? T : T extends readonly (infer U)[] ? readonly ReadonlyDeep<U>[] : T extends object ? {
     readonly [K in keyof T]: ReadonlyDeep<T[K]>;
 } : T;
-export type SeamsWalletMode = 'direct' | 'iframe';
 type SeamsRegistrationPaymentMode = 'disabled' | 'quota_then_x402' | 'always_x402';
 export type SeamsRegistrationNearAccountProvisioning = {
     kind: 'implicit_account';
@@ -741,7 +744,7 @@ interface SeamsWebauthnConfig {
     authenticatorOptions: AuthenticatorOptions;
 }
 interface SeamsIframeWalletConfig {
-    origin?: string;
+    origin: string;
     servicePath: string;
     sdkBasePath: string;
     walletHostVariant: WalletHostVariant;
@@ -749,12 +752,12 @@ interface SeamsIframeWalletConfig {
 }
 type SeamsWalletConfig = {
     mode: 'direct';
-    iframe: SeamsIframeWalletConfig;
+    rpId: WebAuthnRpId;
+    iframe?: never;
 } | {
     mode: 'iframe';
-    iframe: SeamsIframeWalletConfig & {
-        origin: string;
-    };
+    iframe: SeamsIframeWalletConfig;
+    rpId?: never;
 };
 interface SeamsUiConfig {
     appearance: AppearanceConfig;

package/dist/types/wallet/src/core/types/signer-worker.d.ts

@@ -67,7 +67,8 @@ export type ThresholdEd25519ComputeNep413SigningDigestRequest = {
     message: string;
     recipient: string;
     nonce: string;
-    state?: string;
+    callbackUrl: string | null;
+    state?: never;
 };
 export type ThresholdEd25519ComputeSigningDigestResult = {
     signingDigestB64u: string;

package/dist/types/wallet/src/externalEvm/controller.d.ts

@@ -49,7 +49,11 @@ export declare class ExternalEvmController {
     signTypedData(connection: ExternalEvmConnection, data: unknown): Promise<ExternalEvmResult<Hex>>;
     private sign;
     sendTransaction(connection: ExternalEvmConnection, input: ExternalEvmTransactionInput): Promise<ExternalEvmResult<ExternalEvmSubmission>>;
-    observeReceipt(submission: ExternalEvmSubmission): Promise<ExternalEvmReceipt>;
+    /** Wait for inclusion in one block, then verify the receipt against the submission. */
+    waitForReceipt(submission: ExternalEvmSubmission, options?: {
+        timeoutMs?: number;
+        signal?: AbortSignal;
+    }): Promise<ExternalEvmReceipt>;
 }
 export {};
 //# sourceMappingURL=controller.d.ts.map

package/dist/types/wallet/src/index.d.ts

@@ -1,4 +1,7 @@
+export { parseWalletMoveId } from './SeamsWeb/publicApi/placement';
+export type { WalletMoveId, WalletMoveRequest, WalletMoveStatus, WalletMoveStatusResult, WalletPlacement, WalletPlacementCapability, WalletPlacementResult, WalletRegion, } from './SeamsWeb/publicApi/placement';
 export { SeamsWeb } from './SeamsWeb';
+export type { AuthMenuCapability, ClientConnectionState, ConfigCapability, ConnectionCapability, EventsCapability } from './SeamsWeb';
 export * from './externalEvm';
 export { buildHostedAuthMenuOpenRequest, hostedAuthMenuExternalAuthRequestIdFromBoundary, hostedAuthMenuSessionIdFromBoundary, } from './SeamsWeb/walletIframe/shared/messages';
 export type { HostedAuthMenuCopy, HostedAuthMenuCopyInput, HostedAuthMenuExternalAuthEvidence, HostedAuthMenuExternalAuthRequest, HostedAuthMenuExternalAuthRequestId, HostedAuthMenuExternalAuthResolutionInput, HostedAuthMenuExternalProvider, HostedAuthMenuMode, HostedAuthMenuOpenRequest, HostedAuthMenuOutcome, HostedAuthMenuRegistrationAccountInput, HostedAuthMenuSessionId, } from './SeamsWeb/walletIframe/shared/messages';
@@ -14,9 +17,9 @@ export { buildConfigsFromEnv } from './core/config/defaultConfigs';
 export type { AddSignerIntentV1, RegistrationIntentGrant, RegistrationIntentV1, WalletId as RegistrationWalletId, } from '../../shared-ts/src/utils/registrationIntent';
 export type { AddSignerSelection, RegistrationEvmFamilyEcdsaSignerRequest, RegistrationNearEd25519SignerRequest, RegistrationSignerRequest, RegistrationSignerSetSelection, ThresholdEcdsaAddSignerSpec, ThresholdEd25519AddSignerSpec, } from '../../shared-ts/src/utils/registrationSignerPlan';
 export type { RegisterWalletInput } from '../../shared-ts/src/utils/registrationAuthMethodInput';
-export type { SeamsConfigsReadonly, SeamsConfigsInput, AddedEvmFamilyEcdsaSignerCapability, AddedNearEd25519SignerCapability, RegisteredEvmFamilyEcdsaCapability, RegisteredNearEd25519Capability, RegistrationResult, NearProvisioningState, LoginResult, LoginAndCreateSessionResult, WalletSession, SigningSessionStatus, ActionResult, } from './core/types/seams';
+export type { SeamsConfigsReadonly, SeamsClientConfig, SeamsConfigsInput, AddedEvmFamilyEcdsaSignerCapability, AddedNearEd25519SignerCapability, RegisteredEvmFamilyEcdsaCapability, RegisteredNearEd25519Capability, RegistrationResult, NearProvisioningState, LoginResult, LoginAndCreateSessionResult, WalletSession, SigningSessionStatus, ActionResult, } from './core/types/seams';
 export type { LoginHooksOptions, KeyExportHooksOptions, RegistrationHooksOptions, ActionHooksOptions, SignNEP413HooksOptions, AfterCall, EventCallback, RegistrationTimingSpanV1, NearProvisioningStateChangedEvent, } from './core/types/sdkSentEvents';
-export type { GoogleEmailOtpWalletAuthDelivery, GoogleEmailOtpWalletAuthEcdsaTargets, GoogleEmailOtpWalletAuthFailure, GoogleEmailOtpWalletAuthFailureCode, GoogleEmailOtpWalletAuthFlow, GoogleEmailOtpWalletAuthLoginTarget, GoogleEmailOtpWalletAuthLoginFlow, GoogleEmailOtpWalletAuthPromptCopy, GoogleEmailOtpWalletAuthRegistrationCompleted, GoogleEmailOtpWalletAuthRegistrationFlow, GoogleEmailOtpWalletAuthRequestedMode, GoogleEmailOtpWalletAuthResolvedMode, GoogleEmailOtpWalletAuthResult, GoogleEmailOtpWalletAuthStartInput, GoogleEmailOtpWalletAuthSubmitSuccess, } from './SeamsWeb';
+export type { GoogleEmailOtpWalletAuthDelivery, GoogleEmailOtpWalletAuthEcdsaTargets, GoogleEmailOtpWalletAuthFailure, GoogleEmailOtpWalletAuthFailureCode, GoogleEmailOtpWalletAuthFlow, GoogleEmailOtpWalletAuthLoginTarget, GoogleEmailOtpWalletAuthLoginFlow, RequestEmailCodeInput, GoogleEmailOtpWalletAuthPromptCopy, GoogleEmailOtpWalletAuthRegistrationCompleted, GoogleEmailOtpWalletAuthRegistrationFlow, GoogleEmailOtpWalletAuthRequestedMode, GoogleEmailOtpWalletAuthResolvedMode, GoogleEmailOtpWalletAuthResult, GoogleEmailOtpWalletAuthStartInput, GoogleEmailOtpWalletAuthSubmitSuccess, } from './SeamsWeb';
 export type { DemoEmailOtpCodeResponse } from './SeamsWeb';
 export type { EmailOtpAuthPolicy } from './core/types/seams';
 export type { NearClient, AccessKeyList } from './core/rpcClients/near/NearClient';

package/dist/types/wallet/src/react/components/AccountMenuButton/WalletRegionSection.d.ts

@@ -0,0 +1,54 @@
+import React, { Component } from 'react';
+import type { WalletId } from '../../../../../shared-ts/src/utils/domainIds';
+import type { ExclusiveUnion, Variant } from '../../../../../shared-ts/src/utils/variant';
+import { type WalletMoveRequest, type WalletMoveStatus, type WalletPlacement, type WalletPlacementCapability, type WalletRegion } from '../../../SeamsWeb/publicApi/placement';
+type Props = {
+    readonly walletId: WalletId;
+    readonly placement: WalletPlacementCapability;
+    readonly onAvailability: (available: boolean) => void;
+};
+type State = ExclusiveUnion<{
+    readonly kind: 'loading';
+} | {
+    readonly kind: 'ready';
+    readonly placement: Variant<WalletPlacement, 'state', 'settled'>;
+    readonly selected: WalletRegion;
+} | {
+    readonly kind: 'submitting';
+    readonly request: WalletMoveRequest;
+} | {
+    readonly kind: 'uncertain';
+    readonly request: WalletMoveRequest;
+    readonly message: string;
+} | {
+    readonly kind: 'progress';
+    readonly status: WalletMoveStatus;
+} | {
+    readonly kind: 'unavailable';
+    readonly message: string;
+}>;
+export declare class WalletRegionSection extends Component<Props, {
+    readonly view: State;
+}> {
+    state: {
+        readonly view: State;
+    };
+    private mounted;
+    private requestRevision;
+    private timer;
+    componentDidMount(): void;
+    componentWillUnmount(): void;
+    private commit;
+    private load;
+    private select;
+    private submit;
+    private retry;
+    private send;
+    private showProgress;
+    private poll;
+    private readMove;
+    render(): React.ReactNode;
+    private renderContent;
+}
+export {};
+//# sourceMappingURL=WalletRegionSection.d.ts.map

package/dist/types/wallet/src/react/components/AccountMenuButton/WalletSettingsLayout.d.ts

@@ -1,15 +1,19 @@
+import type { WalletPlacementCapability } from '../../../SeamsWeb/publicApi/placement';
+import type { WalletId } from '../../../../../shared-ts/src/utils/domainIds';
 import { Component, type ReactNode } from 'react';
 import type { MenuItem, ProfileSettingsMenuItemId } from './types';
 import './WalletSettingsLayout.css';
 export declare function WalletSettingsHeader(): import("react/jsx-runtime").JSX.Element;
 interface WalletSettingsLayoutProps {
-    readonly walletId: string;
+    readonly walletId: WalletId;
+    readonly placement: WalletPlacementCapability;
     readonly menuItems: readonly MenuItem[];
-    readonly sections: Readonly<Record<ProfileSettingsMenuItemId, ReactNode>>;
+    readonly sections: Readonly<Record<Exclude<ProfileSettingsMenuItemId, 'wallet-region'>, ReactNode>>;
     readonly onLock: () => Promise<void>;
     readonly error: string | null;
 }
 type LayoutState = {
+    readonly regionReady: boolean;
     readonly selected: ProfileSettingsMenuItemId;
     readonly mobileMenuOpen: boolean;
     readonly lock: {
@@ -23,6 +27,7 @@ type LayoutState = {
 };
 export declare class WalletSettingsLayout extends Component<WalletSettingsLayoutProps, LayoutState> {
     state: LayoutState;
+    private regionAvailability;
     private heading;
     private select;
     private matchesSelection;

package/dist/types/wallet/src/react/components/AccountMenuButton/index.d.ts

@@ -5,5 +5,5 @@ import type { HostedSeamsAuthMenuProps } from '../HostedSeamsAuthMenu/types';
 export declare const AccountMenuButton: React.FC<AccountMenuButtonProps>;
 export declare const ProfileSettingsButton: React.FC<AccountMenuButtonProps>;
 /** Full-page wallet settings, mounted inside SeamsWebProvider. */
-export declare function WalletSettingsPage(props: Pick<HostedSeamsAuthMenuProps, 'externalAuthBroker' | 'onDemoEmailOtp'>): import("react/jsx-runtime").JSX.Element;
+export declare function WalletSettingsPage(props: Pick<HostedSeamsAuthMenuProps, 'externalAuthBroker'>): import("react/jsx-runtime").JSX.Element;
 //# sourceMappingURL=index.d.ts.map

package/dist/types/wallet/src/react/components/AccountMenuButton/types.d.ts

@@ -19,6 +19,7 @@ export declare const PROFILE_MENU_ITEM_IDS: {
     readonly SCAN_LINK_DEVICE: "scan-link-device";
     readonly LINKED_DEVICES: "linked-devices";
     readonly TRANSACTION_SETTINGS: "transaction-settings";
+    readonly WALLET_REGION: "wallet-region";
 };
 /** Which threshold key set an Export Keys row exports. */
 export type ExportChain = 'near' | 'evm';