@seams/wallet 0.8.0 → 0.9.1

package/dist/esm/SeamsWeb/walletIframe/client/router.js

@@ -1,27 +1,28 @@
-import { parseMpcMaterialActivationRef } from "../../../shared-ts/src/utils/domainIds.js";
 import { joinNormalizedUrl, stripTrailingSlashes, toBasePath } from "../../../shared-ts/src/utils/normalize.js";
 import { extractBorshBytesFromPlainSignedTx, isBoolean, isObject, isPlainSignedTransactionLike, stripFunctionsShallow } from "../../../shared-ts/src/utils/validation.js";
-import { parseWalletSessionOperationCredentialV1 } from "../../../shared-ts/src/device-linking/activeWalletSession.js";
-import { AccountSyncEventPhase, KeyExportEventPhase, LinkDeviceEventPhase, RegistrationEventPhase, SigningEventPhase, UnlockEventPhase, classifyLinkDeviceFlowEvent, createAccountSyncFlowEvent, createKeyExportFlowEvent, createLinkDeviceFlowEvent, createRegistrationFlowEvent, createSigningFlowEvent, createUnlockFlowEvent, isWalletFlowEvent, parseNearProvisioningState, parseSdkLifecycleEvent } from "../../../core/types/sdkSentEvents.js";
-import { walletIdFromString } from "../../../shared-ts/src/utils/registrationIds.js";
-import { cloneResolvedChainConfig } from "../../../core/config/chains.js";
-import { thresholdEcdsaChainTargetsEqual, toWalletId } from "../../../core/signingEngine/interfaces/ecdsaChainTarget.js";
-import { parseExactEcdsaSigningLaneIdentity, parseExactEd25519ExportMaterialIdentity } from "../../../core/signingEngine/session/identity/exactSigningLaneIdentity.js";
-import { secureRandomBase36 } from "../../../shared-ts/src/utils/secureRandomId.js";
-import { parseLinkedDeviceListRequestV1, parseLinkedDeviceListResultV1, parseLinkedDeviceRevokeRequestV1, parseLinkedDeviceRevokeResultV1 } from "../../../shared-ts/src/device-linking/deviceManagement.js";
-import "../../../shared-ts/src/device-linking/index.js";
+import { parseMpcMaterialActivationRef } from "../../../shared-ts/src/utils/domainIds.js";
+import { createIframePlacementCommands } from "./placementCommands.js";
 import { toError } from "../../../shared-ts/src/utils/errors.js";
-import { TransactionReviewError, assertTransactionReviewValid, parseTransactionReviewState, reviewedConfirmationConfig, sameTransactionReviewIdentity, transactionReviewCancellationCode } from "../shared/transactionReview.js";
+import { secureRandomBase36 } from "../../../shared-ts/src/utils/secureRandomId.js";
 import { SignedTransaction } from "../../../core/rpcClients/near/NearClient.js";
-import { PASSKEY_MANAGER_DEFAULT_CONFIGS } from "../../../core/config/defaultConfigs.js";
-import { needsExplicitActivation } from "../../../utils/deviceDetection.js";
-import { walletIframeSurfaceIdFromBoundary } from "../../../core/types/walletIframeIdentity.js";
+import { thresholdEcdsaChainTargetsEqual, toWalletId } from "../../../core/signingEngine/interfaces/ecdsaChainTarget.js";
+import { parseWalletSessionHome, parseWalletSessionOperationCredentialV1 } from "../../../shared-ts/src/device-linking/activeWalletSession.js";
+import { parseLinkedDeviceListRequestV1, parseLinkedDeviceListResultV1, parseLinkedDeviceRevokeResultV1 } from "../../../shared-ts/src/device-linking/deviceManagement.js";
+import "../../../shared-ts/src/device-linking/index.js";
+import { AccountSyncEventPhase, KeyExportEventPhase, LinkDeviceEventPhase, RegistrationEventPhase, SigningEventPhase, UnlockEventPhase, classifyLinkDeviceFlowEvent, createAccountSyncFlowEvent, createKeyExportFlowEvent, createLinkDeviceFlowEvent, createRegistrationFlowEvent, createSigningFlowEvent, createUnlockFlowEvent, isWalletFlowEvent, parseNearProvisioningState } from "../../../core/types/sdkSentEvents.js";
+import { requireTempoFeeTokenPreferenceSigningRequest } from "../../../core/signingEngine/chains/tempo/feeToken.js";
+import { buildPMUnlockPayload } from "../shared/unlockOptions.js";
+import { replaceWalletHostAppearance } from "../shared/configuration.js";
 import { anchorWalletIframeModalGeometry, isWalletIframeModalGeometry, resolveWalletIframeSurfaceGeometry } from "./surface/geometry.js";
 import OverlayController from "./overlay/overlay-controller.js";
-import { WalletIframeSessionExpiredRequestError, parseWalletIframeExactSessionLockResult, parseWalletIframeExactSessionState, parseWalletSessionFromBoundary } from "../shared/exactSessionState.js";
-import { buildPMUnlockPayload } from "../shared/unlockOptions.js";
-import { requireTempoFeeTokenPreferenceSigningRequest } from "../../../core/signingEngine/chains/tempo/feeToken.js";
-import { HOSTED_AUTH_MENU_ERROR_EVENT, buildHostedAuthMenuCancelPayload, buildPMRedeemHostedWalletSeamsSessionPayload, hostedAuthMenuSessionIdFromBoundary, isDeviceLinkEmailOtpBaseFactorSelectionProgressV1, isDeviceLinkTargetFactorActivationProgressV1, isRegistrationTimingSpanV1, parseHostedAuthMenuDemoEmailOtpDelivery, parseHostedAuthMenuErrorEvent, parseHostedAuthMenuExternalAuthRequest, parseHostedAuthMenuExternalAuthResolution, parseHostedAuthMenuOpenRequest, parseHostedAuthMenuOutcome, parseWalletIframeSurfaceMeasurement } from "../shared/messages.js";
+import { walletIdFromString } from "../../../shared-ts/src/utils/registrationIds.js";
+import { WalletIframeSessionExpiredRequestError, exactSessionIdentitiesMatch, parseWalletIframeExactSessionLockResult, parseWalletIframeExactSessionSnapshot, parseWalletSessionFromBoundary } from "../shared/exactSessionState.js";
+import { parseExactEcdsaSigningLaneIdentity, parseExactEd25519ExportMaterialIdentity } from "../../../core/signingEngine/session/identity/exactSigningLaneIdentity.js";
+import { resolveRuntimeAppearance } from "../shared/facadeBoundary.js";
+import { walletIframeSurfaceIdFromBoundary } from "../../../core/types/walletIframeIdentity.js";
+import { HOSTED_AUTH_MENU_ERROR_EVENT, buildHostedAuthMenuCancelPayload, buildPMRedeemHostedWalletSeamsSessionPayload, hostedAuthMenuSessionIdFromBoundary, isDeviceLinkEmailOtpBaseFactorSelectionProgressV1, isDeviceLinkTargetFactorActivationProgressV1, isRegistrationTimingSpanV1, parseHostedAuthMenuErrorEvent, parseHostedAuthMenuExternalAuthRequest, parseHostedAuthMenuExternalAuthResolution, parseHostedAuthMenuOpenRequest, parseHostedAuthMenuOutcome, parseWalletIframeSurfaceMeasurement } from "../shared/messages.js";
+import { TransactionReviewError, assertTransactionReviewValid, parseTransactionReviewState, reviewedConfirmationConfig, sameTransactionReviewIdentity, transactionReviewCancellationCode } from "../shared/transactionReview.js";
+import { needsExplicitActivation } from "../../../utils/deviceDetection.js";
 import { TransactionReviewReservation } from "./transactionReviewReservation.js";
 import { OnEventsProgressBus } from "./progress/on-events-progress-bus.js";
 import { registrationSignerSetRequestSelection } from "../../../core/rpcClients/relayer/registrationSignerSetRequest.js";
@@ -29,10 +30,8 @@ import { IframeTransport } from "./transport/IframeTransport.js";
 import { authMenuWalletIframeSurfacePresentation, drawerWalletIframeSurfacePresentation, hiddenWalletIframeSurface, modalWalletIframeSurfacePresentation, passkeyRegistrationPreparationReceipt, reduceWalletIframeSurface, requestSurfaceIdentity, trustedWalletIframeSurfaceMeasurementFromWire, walletIframeConnectionIdFromBoundary } from "./surface/domain.js";
 import { WalletIframeSurfaceRenderer } from "./surface/renderer.js";
 import { WalletIframeTransactionSurfaceQueue } from "./surface/transactionSurfaceQueue.js";
+import { parseClientChildToParentEnvelope, parseClientPreferencesChangedPayload, parseSdkLifecycleEnvelope } from "./inboundMessages.js";
 //#region src/SeamsWeb/walletIframe/client/router.ts
-/**
-* Strips out functions as they cannot be sent over postMessage to iframe
-*/
 function requestSurfaceKindForMessage(type, payload) {
 	if (isTransactionSurfaceMessage(type) && confirmationUiModeForRequest(type, payload) === "none" && !needsExplicitActivation()) return null;
 	switch (type) {
@@ -45,7 +44,6 @@ function requestSurfaceKindForMessage(type, payload) {
 		case "PM_ACKNOWLEDGE_WALLET_RECOVERY_CODE_BACKUP": return "recovery_codes";
 		case "PM_SIGN_TX_WITH_ACTIONS":
 		case "PM_SIGN_AND_SEND_TX":
-		case "PM_EXECUTE_ACTION":
 		case "PM_SIGN_DELEGATE_ACTION":
 		case "PM_SIGN_NEP413":
 		case "PM_SIGN_TEMPO": return "transaction";
@@ -60,7 +58,6 @@ function isTransactionSurfaceMessage(type) {
 	switch (type) {
 		case "PM_SIGN_TX_WITH_ACTIONS":
 		case "PM_SIGN_AND_SEND_TX":
-		case "PM_EXECUTE_ACTION":
 		case "PM_SIGN_DELEGATE_ACTION":
 		case "PM_SIGN_NEP413":
 		case "PM_SIGN_TEMPO": return true;
@@ -213,7 +210,20 @@ function buildSignTempoIframePayload(payload) {
 		chainTarget: payload.chainTarget
 	};
 }
-const WALLET_IFRAME_EMAIL_OTP_ENROLLMENT_TIMEOUT_MS = 300 * 1e3;
+function walletIframeSessionStatesEqual(left, right) {
+	if (left === null || left.kind !== right.kind) return false;
+	switch (left.kind) {
+		case "wallet_locked": return right.kind === "wallet_locked";
+		case "active_session":
+		case "expired_session": return (right.kind === "active_session" || right.kind === "expired_session") && exactSessionIdentitiesMatch(left, right) && left.authMethod === right.authMethod && left.expiresAtMs === right.expiresAtMs;
+		case "wallet_authenticated_identity_unresolvable": return right.kind === left.kind && left.walletId === right.walletId && left.reason === right.reason;
+		case "wallet_unlocked_without_signing_session":
+			if (right.kind !== left.kind || left.walletId !== right.walletId || left.reason !== right.reason) return false;
+			if (left.reason === "not_found") return right.reason === "not_found" && left.authorizationId === right.authorizationId && left.walletSessionId === right.walletSessionId && left.authMethod === right.authMethod;
+			return true;
+		default: return false;
+	}
+}
 function walletIframeLoginStatusFromExactSession(state) {
 	switch (state.kind) {
 		case "active_session":
@@ -280,22 +290,6 @@ function walletIframeExportPayload(input, options) {
 		}
 	}
 }
-const EMAIL_OTP_APP_ORIGIN_FORBIDDEN_RESULT_KEYS = new Set([
-	"S",
-	"secretS",
-	"recoveredS",
-	"recoveredSB64u",
-	"recoveryKeys",
-	"clientSecret32",
-	"clientRootShare32",
-	"clientRootShare32B64u",
-	"clientAdditiveShare32",
-	"clientAdditiveShare32B64u",
-	"clientSigningShare32",
-	"clientSigningShare32B64u",
-	"kShareB64u",
-	"sigmaShareB64u"
-]);
 function requireNonEmptyBoundaryString(value, label) {
 	if (typeof value !== "string" || value.trim() !== value || value.length === 0) throw new Error(`${label} must be a non-empty canonical string`);
 	return value;
@@ -328,6 +322,7 @@ function parseHostedWalletExchangeDelivery(value, expected) {
 	const response = assertExactBoundaryFields(value, new Set(["ok", "delivery"]), "session exchange response");
 	if (response.ok !== true) throw new Error("session exchange response must contain one delivery");
 	const deliveryFields = new Set([
+		"home",
 		"exchangeCode",
 		"nonce",
 		"appOrigin",
@@ -341,6 +336,7 @@ function parseHostedWalletExchangeDelivery(value, expected) {
 	const expiresAtMs = Number(delivery.expiresAtMs);
 	if (!Number.isSafeInteger(expiresAtMs) || expiresAtMs <= Date.now()) throw new Error("session exchange delivery is expired");
 	return {
+		home: parseWalletSessionHome(delivery.home),
 		exchangeCode: requireCompactExchangeValue(delivery.exchangeCode, "delivery.exchangeCode"),
 		nonce: requireCompactExchangeValue(delivery.nonce, "delivery.nonce"),
 		appOrigin,
@@ -455,23 +451,12 @@ function createTerminalProgressForRequest(args) {
 			message
 		}
 	};
-	const registrationRequests = new Set([
-		"PM_REGISTER_WALLET",
-		"PM_ADD_PASSKEY",
-		"PM_REQUEST_EMAIL_OTP_ENROLLMENT_CHALLENGE",
-		"PM_ENROLL_EMAIL_OTP"
-	]);
-	const unlockRequests = new Set([
-		"PM_UNLOCK",
-		"PM_BOOTSTRAP_THRESHOLD_ECDSA_SESSION",
-		"PM_REQUEST_EMAIL_OTP_CHALLENGE",
-		"PM_LOGIN_EMAIL_OTP_ECDSA_CAPABILITY"
-	]);
+	const registrationRequests = new Set(["PM_REGISTER_WALLET", "PM_ADD_PASSKEY"]);
+	const unlockRequests = new Set(["PM_UNLOCK", "PM_REQUEST_EMAIL_OTP_CHALLENGE"]);
 	const signingRequests = new Set([
 		"PM_SIGN_TX_WITH_ACTIONS",
 		"PM_SIGN_AND_SEND_TX",
 		"PM_SEND_TRANSACTION",
-		"PM_EXECUTE_ACTION",
 		"PM_SIGN_DELEGATE_ACTION",
 		"PM_SIGN_NEP413",
 		"PM_SIGN_TEMPO",
@@ -512,16 +497,6 @@ function createTerminalProgressForRequest(args) {
 	});
 	return null;
 }
-function sanitizeEmailOtpIframeResult(value) {
-	if (Array.isArray(value)) return value.map((entry) => sanitizeEmailOtpIframeResult(entry));
-	if (!isObject(value)) return value;
-	const out = {};
-	for (const [key, entry] of Object.entries(value)) {
-		if (EMAIL_OTP_APP_ORIGIN_FORBIDDEN_RESULT_KEYS.has(key)) continue;
-		out[key] = sanitizeEmailOtpIframeResult(entry);
-	}
-	return out;
-}
 const CANONICAL_SIGNER_BOUNDARY_MESSAGES = {
 	commit_queue_overflow: "Threshold signing commit queue is full. Wait for pending requests and retry.",
 	commit_queue_timeout: "Threshold signing commit request timed out in queue. Retry the request.",
@@ -553,227 +528,13 @@ function walletIframeRequestCancelledError() {
 	error.code = "cancelled";
 	return error;
 }
-function emitDemoEmailOtpCodeFromWire(args) {
-	if (args.wire.mode !== "login") return;
-	switch (args.wire.delivery.kind) {
-		case "provider": return;
-		case "demo_code_response":
-		case "provider_and_demo_code":
-			args.onDemoOtp?.(args.wire.delivery);
-			return;
-	}
-}
-function rawClientMessageObject(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
-}
-function hasOnlyClientMessageFields(value, allowedFields) {
-	const allowed = new Set(allowedFields);
-	return Object.keys(value).every((field) => allowed.has(field));
-}
-function clientChildRequestId(value) {
-	if (!Object.hasOwn(value, "requestId")) return void 0;
-	const requestId = Reflect.get(value, "requestId");
-	if (requestId === void 0) return void 0;
-	return typeof requestId === "string" ? requestId : null;
-}
-function clientChildRequestIdFields(requestId) {
-	return requestId === void 0 ? {} : { requestId };
-}
-function parseClientPreferencesChangedPayload(value) {
-	const record = rawClientMessageObject(value);
-	if (!record || !hasOnlyClientMessageFields(record, [
-		"walletId",
-		"confirmationConfig",
-		"updatedAt"
-	])) return null;
-	const walletId = Reflect.get(record, "walletId");
-	if (walletId !== null && typeof walletId !== "string") return null;
-	const confirmationConfig = rawClientMessageObject(Reflect.get(record, "confirmationConfig"));
-	if (!confirmationConfig || !hasOnlyClientMessageFields(confirmationConfig, [
-		"uiMode",
-		"behavior",
-		"autoProceedDelay"
-	])) return null;
-	const uiMode = Reflect.get(confirmationConfig, "uiMode");
-	const behavior = Reflect.get(confirmationConfig, "behavior");
-	if (uiMode !== "none" && uiMode !== "modal" && uiMode !== "drawer") return null;
-	if (behavior !== "requireClick" && behavior !== "skipClick") return null;
-	const autoProceedDelay = Reflect.get(confirmationConfig, "autoProceedDelay");
-	if (autoProceedDelay !== void 0 && (typeof autoProceedDelay !== "number" || !Number.isFinite(autoProceedDelay))) return null;
-	const updatedAt = Reflect.get(record, "updatedAt");
-	if (typeof updatedAt !== "number" || !Number.isFinite(updatedAt)) return null;
-	return {
-		walletId,
-		confirmationConfig: autoProceedDelay === void 0 ? {
-			uiMode,
-			behavior
-		} : {
-			uiMode,
-			behavior,
-			autoProceedDelay
-		},
-		updatedAt
-	};
-}
-function isClientDeviceLinkProgressCandidate(value) {
-	const record = rawClientMessageObject(value);
-	if (!record) return false;
-	const event = Reflect.get(record, "event");
-	return event === "wallet_device_link_email_otp_base_factor_selection_required_v1" || event === "wallet_device_link_target_factor_activation_v1";
-}
-function parseClientProgressPayload(value) {
-	if (isWalletFlowEvent(value)) return value;
-	if (isRegistrationTimingSpanV1(value)) return value;
-	if (!isClientDeviceLinkProgressCandidate(value)) return null;
-	if (isDeviceLinkEmailOtpBaseFactorSelectionProgressV1(value)) return value;
-	return isDeviceLinkTargetFactorActivationProgressV1(value) ? value : null;
-}
-function parseClientPmResultPayload(value) {
-	const record = rawClientMessageObject(value);
-	if (!record || !hasOnlyClientMessageFields(record, [
-		"ok",
-		"result",
-		"error"
-	])) return null;
-	const ok = Reflect.get(record, "ok");
-	if (typeof ok !== "boolean") return null;
-	const error = Reflect.get(record, "error");
-	if (error !== void 0 && typeof error !== "string") return null;
-	return {
-		ok,
-		...Object.hasOwn(record, "result") ? { result: Reflect.get(record, "result") } : {},
-		...error !== void 0 ? { error } : {}
-	};
-}
-function parseClientErrorPayload(value) {
-	const record = rawClientMessageObject(value);
-	if (!record || !hasOnlyClientMessageFields(record, [
-		"code",
-		"message",
-		"details"
-	])) return null;
-	const code = Reflect.get(record, "code");
-	const message = Reflect.get(record, "message");
-	if (typeof code !== "string" || typeof message !== "string") return null;
-	return {
-		code,
-		message,
-		...Object.hasOwn(record, "details") ? { details: Reflect.get(record, "details") } : {}
-	};
-}
-function parseClientChildToParentEnvelope(value) {
-	const record = rawClientMessageObject(value);
-	if (!record || !hasOnlyClientMessageFields(record, [
-		"type",
-		"requestId",
-		"payload"
-	])) return null;
-	const requestId = clientChildRequestId(record);
-	if (requestId === null) return null;
-	const requestIdFields = clientChildRequestIdFields(requestId);
-	const type = Reflect.get(record, "type");
-	switch (type) {
-		case "PONG": return Object.hasOwn(record, "payload") ? null : {
-			...requestIdFields,
-			type
-		};
-		case "PREFERENCES_CHANGED": {
-			const payload = parseClientPreferencesChangedPayload(Reflect.get(record, "payload"));
-			return payload ? {
-				...requestIdFields,
-				type,
-				payload
-			} : null;
-		}
-		case "AUTH_MENU_EXTERNAL_AUTH_REQUEST": {
-			const payload = parseHostedAuthMenuExternalAuthRequest(Reflect.get(record, "payload"));
-			return payload ? {
-				...requestIdFields,
-				type,
-				payload
-			} : null;
-		}
-		case "AUTH_MENU_ERROR": {
-			const payload = parseHostedAuthMenuErrorEvent(Reflect.get(record, "payload"));
-			return payload ? {
-				...requestIdFields,
-				type,
-				payload
-			} : null;
-		}
-		case "AUTH_MENU_DEMO_EMAIL_OTP_DELIVERY": {
-			const payload = parseHostedAuthMenuDemoEmailOtpDelivery(Reflect.get(record, "payload"));
-			return payload ? {
-				...requestIdFields,
-				type,
-				payload
-			} : null;
-		}
-		case "TRANSACTION_REVIEW_STATE": {
-			const payload = parseTransactionReviewState(Reflect.get(record, "payload"));
-			return payload ? {
-				...requestIdFields,
-				type,
-				payload
-			} : null;
-		}
-		case "SURFACE_MEASUREMENT": {
-			const payload = parseWalletIframeSurfaceMeasurement(Reflect.get(record, "payload"));
-			return payload ? {
-				...requestIdFields,
-				type,
-				payload
-			} : null;
-		}
-		case "TRANSACTION_ACTIVITY": {
-			const payload = Reflect.get(record, "payload");
-			return typeof requestId === "string" && (payload === "expanded" || payload === "toast" || payload === "closed") ? {
-				type,
-				requestId,
-				payload
-			} : null;
-		}
-		case "PROGRESS": {
-			const payload = parseClientProgressPayload(Reflect.get(record, "payload"));
-			return payload ? {
-				...requestIdFields,
-				type,
-				payload
-			} : null;
-		}
-		case "PM_RESULT": {
-			const payload = parseClientPmResultPayload(Reflect.get(record, "payload"));
-			return payload ? {
-				...requestIdFields,
-				type,
-				payload
-			} : null;
-		}
-		case "ERROR": {
-			const payload = parseClientErrorPayload(Reflect.get(record, "payload"));
-			return payload ? {
-				...requestIdFields,
-				type,
-				payload
-			} : null;
-		}
-		default: return null;
-	}
-}
-function parseSdkLifecycleEnvelope(value) {
-	if (!isObject(value) || value.type !== "SDK_LIFECYCLE_EVENT") return { kind: "not_lifecycle_event" };
-	const event = parseSdkLifecycleEvent(value.payload);
-	if (!event) return { kind: "invalid_lifecycle_event" };
-	return {
-		kind: "lifecycle_event",
-		event
-	};
-}
 function assertNeverSdkLifecycleEventName(value) {
 	throw new Error(`Unsupported SDK lifecycle event: ${String(value)}`);
 }
 var WalletIframeRouter = class {
 	constructor(options) {
+		this.placement = createIframePlacementCommands(this.post.bind(this));
+		this.walletSessionReads = /* @__PURE__ */ new Map();
 		this.state = {
 			port: null,
 			connectionId: null,
@@ -788,15 +549,16 @@ var WalletIframeRouter = class {
 			reqCounter: 0
 		};
 		this.listeners = {
-			ready: /* @__PURE__ */ new Set(),
-			loginStatus: /* @__PURE__ */ new Set(),
+			connectionClosed: /* @__PURE__ */ new Set(),
+			sessionChanged: /* @__PURE__ */ new Set(),
 			preferencesChanged: /* @__PURE__ */ new Set(),
 			hostedAuthMenuExternalAuthRequest: /* @__PURE__ */ new Set(),
-			hostedAuthMenuDemoEmailOtpDelivery: /* @__PURE__ */ new Set(),
 			sdkLifecycleEvent: /* @__PURE__ */ new Set()
 		};
 		this.expiredSigningSessionsByWallet = /* @__PURE__ */ new Map();
 		this.exactSessionState = null;
+		this.sessionSelectionGeneration = 0;
+		this.sessionObservationRevision = -1;
 		this.lastPreferencesChangedPayload = null;
 		this.mirroredConfirmationUiMode = null;
 		this.debug = false;
@@ -909,8 +671,7 @@ var WalletIframeRouter = class {
 			...options,
 			servicePath: normalizedServicePath,
 			sdkBasePath: normalizedSdkBasePath,
-			testOptions,
-			chains: (options.chains ?? PASSKEY_MANAGER_DEFAULT_CONFIGS.network.chains).map(cloneResolvedChainConfig)
+			testOptions
 		};
 		this.walletOriginUrl = parsedOrigin;
 		this.walletOriginOrigin = parsedOrigin.origin;
@@ -1572,10 +1333,17 @@ var WalletIframeRouter = class {
 		this.overlayState.controller.dispose();
 		this.updateSurfaceViewportListeners();
 		if (this.state.connectionId === connectionId) {
+			this.exactSessionState = null;
+			this.sessionObservationRevision = -1;
+			this.lastPreferencesChangedPayload = null;
+			this.mirroredConfirmationUiMode = null;
 			this.state.connectionId = null;
 			this.state.port = null;
 			this.state.ready = false;
 			this.state.configured = false;
+			for (const listener of Array.from(this.listeners.connectionClosed)) try {
+				listener();
+			} catch {}
 		}
 	}
 	hideRequestSurface(requestId) {
@@ -1594,30 +1362,14 @@ var WalletIframeRouter = class {
 		if (surface.kind !== "modal_device_link_qr") return;
 		this.finishRequestSurface(surface.identity.requestId, true);
 	}
-	/**
-	* Subscribe to service-ready event. Returns an unsubscribe function.
-	* If already ready, the listener is invoked on next microtask.
-	*/
-	onReady(listener) {
-		if (this.state.ready) {
-			Promise.resolve().then(() => {
-				listener();
-			});
-			return () => {};
-		}
-		this.listeners.ready.add(listener);
-		return () => {
-			this.listeners.ready.delete(listener);
-		};
+	onConnectionClosed(listener) {
+		this.listeners.connectionClosed.add(listener);
+		return this.listeners.connectionClosed.delete.bind(this.listeners.connectionClosed, listener);
 	}
 	onHostedAuthMenuExternalAuthRequest(listener) {
 		this.listeners.hostedAuthMenuExternalAuthRequest.add(listener);
 		return () => this.listeners.hostedAuthMenuExternalAuthRequest.delete(listener);
 	}
-	onHostedAuthMenuDemoEmailOtpDelivery(listener) {
-		this.listeners.hostedAuthMenuDemoEmailOtpDelivery.add(listener);
-		return () => this.listeners.hostedAuthMenuDemoEmailOtpDelivery.delete(listener);
-	}
 	async resolveHostedAuthMenuExternalAuth(resolution) {
 		const sessionId = hostedAuthMenuSessionIdFromBoundary(resolution.authMenuSessionId);
 		if (!sessionId) throw new Error("authMenuSessionId must be a non-empty string");
@@ -1633,23 +1385,19 @@ var WalletIframeRouter = class {
 			payload: normalized
 		}).then(() => void 0);
 	}
-	emitReady() {
-		if (!this.listeners.ready.size) return;
-		for (const cb of Array.from(this.listeners.ready)) cb();
-	}
 	/**
 	* Initialize the transport and configure the wallet host.
 	* Safe to call multiple times; concurrent calls deduplicate via initInFlight.
 	*/
 	async init(hostedWalletSession) {
+		if (this.disposed) throw new Error("Wallet iframe router is disposed");
 		if (this.state.initInFlight) return this.state.initInFlight;
 		if (this.state.ready && this.exactSessionState !== null) return;
 		this.state.initInFlight = (async () => {
 			await this.ensureConfigured();
 			if (hostedWalletSession) await this.ensureHostedWalletSeamsSession(hostedWalletSession);
-			await this.refreshExactSessionAndEmitLoginStatus("restore", { kind: "current" });
-			await this.getConfirmationConfig().catch(() => void 0);
-			this.emitReady();
+			await this.refreshExactSessionAndEmitChange("restore", { kind: "current" });
+			await this.getConfirmationConfig();
 		})();
 		try {
 			await this.state.initInFlight;
@@ -1673,8 +1421,17 @@ var WalletIframeRouter = class {
 	async connectAndConfigure() {
 		if (this.opts.testOptions.autoMount !== false && (!this.state.ready || !this.state.port)) {
 			this.overlayState.controller.prepare();
-			this.state.port = await this.transport.connect();
+			const port = await this.transport.connect();
+			if (this.disposed) {
+				port.close();
+				throw new Error("Wallet iframe router is disposed");
+			}
+			this.state.port = port;
 			const connectionId = walletIframeConnectionIdFromBoundary(`wallet-iframe-connection-${secureRandomBase36(16, "wallet iframe connection IDs")}`);
+			this.lastPreferencesChangedPayload = null;
+			this.mirroredConfirmationUiMode = null;
+			this.exactSessionState = null;
+			this.sessionObservationRevision = -1;
 			this.state.connectionId = connectionId;
 			this.state.port.onmessage = (event) => this.onPortMessage(event, connectionId);
 			this.state.port.start?.();
@@ -1683,18 +1440,8 @@ var WalletIframeRouter = class {
 		await this.post({
 			type: "PM_SET_CONFIG",
 			payload: {
-				chains: this.opts.chains,
-				relayerAccount: this.opts.relayerAccount,
-				relayer: this.opts.relayer,
-				registration: this.opts.registration,
-				signingSessionDefaults: this.opts.signingSessionDefaults,
-				signingSessionPersistenceMode: this.opts.signingSessionPersistenceMode,
-				routerAb: this.opts.routerAb,
-				routerAbEcdsaDerivationPresignaturePool: this.opts.routerAbEcdsaDerivationPresignaturePool,
-				provisioningDefaults: this.opts.provisioningDefaults,
-				iframeWallet: this.opts.rpIdOverride ? { rpIdOverride: this.opts.rpIdOverride } : void 0,
-				authenticatorOptions: this.opts.authenticatorOptions,
-				appearance: this.getCurrentAppearance(),
+				kind: "configure",
+				config: replaceWalletHostAppearance(this.opts.hostConfig, resolveRuntimeAppearance(this.opts.hostConfig.ui.appearance, this.getCurrentAppearance() ?? {})),
 				assetsBaseUrl: this.walletAssetBaseUrl()
 			}
 		});
@@ -1710,7 +1457,7 @@ var WalletIframeRouter = class {
 		}
 	}
 	isReady() {
-		return this.state.ready;
+		return this.state.ready && this.state.configured && this.exactSessionState !== null && this.state.initInFlight === null;
 	}
 	async initializeHostedWalletSeamsSession(source) {
 		await this.init(source);
@@ -1744,7 +1491,8 @@ var WalletIframeRouter = class {
 			method: "POST",
 			headers: {
 				"Content-Type": "application/json",
-				Authorization: `Bearer ${operationCredential.token}`
+				Authorization: `Bearer ${operationCredential.token}`,
+				...operationCredential.home.kind === "regional" ? { "X-Seams-Wallet-Region": operationCredential.home.region } : {}
 			},
 			body: JSON.stringify({
 				appOrigin,
@@ -1761,6 +1509,7 @@ var WalletIframeRouter = class {
 			type: "PM_REDEEM_HOSTED_WALLET_SEAMS_SESSION",
 			payload: buildPMRedeemHostedWalletSeamsSessionPayload({
 				exchangeCode: delivery.exchangeCode,
+				home: delivery.home,
 				nonce: delivery.nonce,
 				appOrigin: delivery.appOrigin,
 				walletOrigin: delivery.walletOrigin,
@@ -1785,11 +1534,12 @@ var WalletIframeRouter = class {
 		this.updateSurfaceViewportListeners();
 		this.overlayState.controller.dispose();
 		this.transport.dispose();
+		for (const listeners of Object.values(this.listeners)) listeners.clear();
 	}
-	onLoginStatusChanged(listener) {
-		this.listeners.loginStatus.add(listener);
+	onSessionChange(listener) {
+		this.listeners.sessionChanged.add(listener);
 		return () => {
-			this.listeners.loginStatus.delete(listener);
+			this.listeners.sessionChanged.delete(listener);
 		};
 	}
 	onPreferencesChanged(listener) {
@@ -1812,32 +1562,55 @@ var WalletIframeRouter = class {
 	async getExactSessionState() {
 		return await this.refreshExactSessionState("current", { kind: "current" });
 	}
-	async refreshExactSessionState(authenticationRead, wallet) {
-		const state = parseWalletIframeExactSessionState((await this.post({
-			type: "PM_GET_EXACT_WALLET_SESSION_STATE",
-			payload: {
-				authenticationRead,
-				wallet
+	async refreshExactSessionState(authenticationRead, wallet, emitChange = false) {
+		if (!this.state.ready || !this.state.port) await this.init();
+		const connectionId = this.state.connectionId;
+		let requestedWallet = wallet;
+		let readMode = authenticationRead;
+		const selectedWalletId = this.lastPreferencesChangedPayload?.walletId;
+		if (wallet.kind === "exact" && selectedWalletId !== void 0 && wallet.walletId !== selectedWalletId) requestedWallet = { kind: "current" };
+		for (;;) {
+			const selectionGeneration = this.sessionSelectionGeneration;
+			const response = await this.post({
+				type: "PM_GET_EXACT_WALLET_SESSION_STATE",
+				payload: {
+					authenticationRead: readMode,
+					wallet: requestedWallet
+				}
+			});
+			if (this.state.connectionId !== connectionId) throw new Error("Wallet iframe connection changed during session request");
+			if (selectionGeneration !== this.sessionSelectionGeneration) {
+				requestedWallet = { kind: "current" };
+				readMode = "current";
+				continue;
 			}
-		})).result);
-		this.updateReviewSession(state);
-		this.exactSessionState = state;
-		return state;
-	}
-	emitLoginStatusChanged(status) {
-		for (const cb of Array.from(this.listeners.loginStatus)) try {
-			cb(status);
+			const snapshot = parseWalletIframeExactSessionSnapshot(response.result);
+			const changed = this.acceptSessionSnapshot(snapshot);
+			const state = this.getMirroredExactSessionState();
+			if (emitChange && changed) this.emitSessionChanged(state, {
+				kind: "observed",
+				session: snapshot.session
+			});
+			return state;
+		}
+	}
+	acceptSessionSnapshot(snapshot) {
+		if (snapshot.revision <= this.sessionObservationRevision) return false;
+		const walletId = this.lastPreferencesChangedPayload?.walletId;
+		if (walletId !== void 0 && walletId !== snapshot.walletId) return false;
+		const changed = !walletIframeSessionStatesEqual(this.exactSessionState, snapshot.state);
+		this.sessionObservationRevision = snapshot.revision;
+		this.updateReviewSession(snapshot.state);
+		this.exactSessionState = snapshot.state;
+		return changed;
+	}
+	emitSessionChanged(state, publication) {
+		for (const cb of Array.from(this.listeners.sessionChanged)) try {
+			cb(state, publication);
 		} catch {}
 	}
-	mirrorExactSessionAndEmitLoginStatus(state) {
-		this.updateReviewSession(state);
-		this.exactSessionState = state;
-		this.emitLoginStatusChanged(walletIframeLoginStatusFromExactSession(state));
-	}
-	async refreshExactSessionAndEmitLoginStatus(authenticationRead, wallet) {
-		const state = await this.refreshExactSessionState(authenticationRead, wallet);
-		this.mirrorExactSessionAndEmitLoginStatus(state);
-		return state;
+	async refreshExactSessionAndEmitChange(authenticationRead, wallet) {
+		return this.refreshExactSessionState(authenticationRead, wallet, true);
 	}
 	emitPreferencesChanged(payload) {
 		this.lastPreferencesChangedPayload = payload;
@@ -1850,25 +1623,36 @@ var WalletIframeRouter = class {
 		} catch {}
 	}
 	handlePreferencesChanged(payload) {
+		if (this.lastPreferencesChangedPayload && payload.revision <= this.lastPreferencesChangedPayload.revision) return;
 		const previousWalletId = this.lastPreferencesChangedPayload?.walletId;
+		const selectionChanged = payload.walletId !== previousWalletId;
+		if (selectionChanged) this.sessionSelectionGeneration += 1;
 		this.emitPreferencesChanged(payload);
+		if (this.disposed) return;
 		const walletId = String(payload.walletId || "").trim();
-		if (walletId === previousWalletId) return;
+		if (!selectionChanged) return;
 		if (previousWalletId !== void 0) this.invalidateReviews();
-		if (!walletId) return;
-		this.refreshExactSessionAndEmitLoginStatus("current", {
-			kind: "exact",
-			walletId: parseRequestedWalletId(walletId)
-		}).catch((error) => {
-			console.warn("[WalletIframeRouter] Exact session refresh after wallet change failed:", error);
-		});
+		if (!walletId) {
+			if (previousWalletId !== void 0) {
+				const state = { kind: "wallet_locked" };
+				this.updateReviewSession(state);
+				this.exactSessionState = state;
+				this.emitSessionChanged(state, { kind: "refresh" });
+			}
+			return;
+		}
 	}
-	emitSdkLifecycleEvent(event) {
+	emitSdkLifecycleEvent(event, revision) {
 		const eventName = event.event;
 		switch (eventName) {
 			case "signing_session.expired":
 				this.failPendingRequestsForExpiredSession(event);
-				this.mirrorExpiredSession(event);
+				if (revision > this.sessionObservationRevision) {
+					const previous = this.exactSessionState;
+					this.mirrorExpiredSession(event);
+					if (this.exactSessionState !== previous) this.sessionObservationRevision = revision;
+					if (previous === null && this.lastPreferencesChangedPayload?.walletId === event.walletId) this.sessionSelectionGeneration += 1;
+				}
 				if (!this.markSigningSessionExpiryAsNew(event)) return;
 				for (const listener of Array.from(this.listeners.sdkLifecycleEvent)) listener(event);
 				return;
@@ -1892,7 +1676,7 @@ var WalletIframeRouter = class {
 		};
 		this.updateReviewSession(expiredState);
 		this.exactSessionState = expiredState;
-		this.emitLoginStatusChanged(walletIframeLoginStatusFromExactSession(expiredState));
+		this.emitSessionChanged(expiredState, { kind: "refresh" });
 	}
 	failPendingRequestsForExpiredSession(event) {
 		for (const [requestId, pending] of this.state.pending) {
@@ -1927,7 +1711,7 @@ var WalletIframeRouter = class {
 		this.expiredSigningSessionsByWallet.set(event.walletId, new Set([event.walletSessionId]));
 		return true;
 	}
-	async signTransactionWithActions(payload) {
+	async signTransaction(payload) {
 		const safeOptions = {
 			...typeof payload.options.signerSlot === "number" ? { signerSlot: payload.options.signerSlot } : {},
 			...payload.options.confirmationConfig ? { confirmationConfig: payload.options.confirmationConfig } : {},
@@ -1973,7 +1757,7 @@ var WalletIframeRouter = class {
 			});
 		}
 		const safeOptions = removeFunctionsFromOptions(payload.options);
-		const res = await this.post({
+		return (await this.post({
 			type: "PM_REGISTER_WALLET",
 			payload: {
 				authMethod: transport.authMethod,
@@ -1983,15 +1767,9 @@ var WalletIframeRouter = class {
 				...confirmationConfig ? { confirmationConfig } : {}
 			},
 			options: { onProgress: bridgeRegistrationProgress(payload.options?.onEvent, payload.options?.onTimingSpan) }
-		}, { timeoutMs: WALLET_IFRAME_REGISTRATION_TIMEOUT_MS });
-		const walletId = res.result?.success ? String(res.result.walletId || "") : "";
-		if (walletId) await this.refreshExactSessionAndEmitLoginStatus("current", {
-			kind: "exact",
-			walletId
-		});
-		return res.result;
+		}, { timeoutMs: WALLET_IFRAME_REGISTRATION_TIMEOUT_MS })).result;
 	}
-	async getNearProvisioningState(args) {
+	async getNearAccountState(args) {
 		const walletId = toWalletId(args.walletId);
 		const response = await this.post({
 			type: "PM_GET_NEAR_PROVISIONING_STATE",
@@ -2002,13 +1780,7 @@ var WalletIframeRouter = class {
 		if (!state) throw new Error("[WalletIframeRouter] Invalid NEAR provisioning state response");
 		return state;
 	}
-	async resumePendingEcdsaRegistration(args) {
-		return (await this.post({
-			type: "PM_RESUME_PENDING_ECDSA_REGISTRATION",
-			payload: args
-		})).result;
-	}
-	async addWalletSigner(payload) {
+	async addSigner(payload) {
 		const confirmationConfig = payload.options?.confirmationConfig;
 		if (confirmationConfig) {
 			const base = await this.getConfirmationConfig();
@@ -2051,7 +1823,7 @@ var WalletIframeRouter = class {
 			options: { onProgress: this.wrapOnEvent(payload.options?.onEvent, isRegistrationFlowEvent) }
 		})).result;
 	}
-	async addEmailOtp(payload) {
+	async addEmail(payload) {
 		const safeOptions = removeFunctionsFromOptions(payload.options);
 		return (await this.post({
 			type: "PM_ADD_EMAIL_OTP",
@@ -2063,7 +1835,7 @@ var WalletIframeRouter = class {
 			options: { onProgress: this.wrapOnEvent(payload.options?.onEvent, isRegistrationFlowEvent) }
 		}, { timeout: "interactive" })).result;
 	}
-	async revokeAuthMethod(payload) {
+	async removeAuthMethod(payload) {
 		return (await this.post({
 			type: "PM_REVOKE_AUTH_METHOD",
 			payload: {
@@ -2072,64 +1844,64 @@ var WalletIframeRouter = class {
 			}
 		})).result;
 	}
-	async bootstrapEcdsaSession(payload) {
-		const safePayload = removeFunctionsFromOptions(payload);
-		return (await this.post({
-			type: "PM_BOOTSTRAP_THRESHOLD_ECDSA_SESSION",
-			payload: safePayload
-		}, {
-			timeoutMs: WALLET_IFRAME_THRESHOLD_SIGNING_TIMEOUT_MS,
-			progressTimeoutExtensionFactor: 1
-		})).result;
-	}
 	async unlock(payload) {
-		await this.ensureHostedWalletSeamsSession(hostedWalletSeamsSessionSourceFromUnlock(payload, this.opts.relayer?.url));
+		await this.ensureHostedWalletSeamsSession(hostedWalletSeamsSessionSourceFromUnlock(payload, this.opts.hostConfig.network.relayer.url));
 		const unlockPayload = buildPMUnlockPayload(payload);
 		const onEvent = unlockOnEventFromRequest(payload);
-		const result = (await this.post({
+		return (await this.post({
 			type: "PM_UNLOCK",
 			payload: unlockPayload,
 			options: { onProgress: this.wrapOnEvent(onEvent, isUnlockFlowEvent) }
 		})).result;
-		if (result.success) await this.refreshExactSessionAndEmitLoginStatus("current", { kind: "current" });
-		return result;
 	}
 	async getWalletSession(walletId) {
 		const expectedWalletId = walletId === void 0 ? void 0 : parseRequestedWalletId(walletId);
-		return parseWalletSessionFromBoundary((await this.post({
-			type: "PM_GET_WALLET_SESSION",
-			payload: expectedWalletId ? { walletId: expectedWalletId } : void 0
-		})).result, expectedWalletId);
+		if (!this.state.ready || !this.state.port) await this.init();
+		const key = JSON.stringify([
+			this.state.connectionId,
+			this.sessionSelectionGeneration,
+			this.sessionObservationRevision,
+			expectedWalletId ?? null
+		]);
+		const existing = this.walletSessionReads.get(key);
+		if (existing) return existing;
+		const pending = this.readWalletSession(expectedWalletId).finally(this.finishWalletSessionRead.bind(this, key));
+		this.walletSessionReads.set(key, pending);
+		return pending;
+	}
+	finishWalletSessionRead(key) {
+		this.walletSessionReads.delete(key);
+	}
+	async readWalletSession(expectedWalletId) {
+		const connectionId = this.state.connectionId;
+		for (;;) {
+			const selectionGeneration = this.sessionSelectionGeneration;
+			const observationRevision = this.sessionObservationRevision;
+			const res = await this.post({
+				type: "PM_GET_WALLET_SESSION",
+				payload: expectedWalletId ? { walletId: expectedWalletId } : void 0
+			});
+			if (this.disposed || this.state.connectionId !== connectionId) throw new Error("Wallet iframe connection changed during session request");
+			if (selectionGeneration !== this.sessionSelectionGeneration || observationRevision !== this.sessionObservationRevision) continue;
+			return parseWalletSessionFromBoundary(res.result, expectedWalletId);
+		}
 	}
-	async requestEmailOtpChallenge(payload) {
+	async requestEmailCode(payload) {
 		const { onEvent, ...wirePayload } = payload;
-		return (await this.post({
+		const res = await this.post({
 			type: "PM_REQUEST_EMAIL_OTP_CHALLENGE",
 			payload: wirePayload,
 			options: { onProgress: this.wrapOnEvent(onEvent, isUnlockFlowEvent) }
-		})).result;
-	}
-	async requestEmailOtpEnrollmentChallenge(payload) {
-		const { onEvent, ...wirePayload } = payload;
-		return (await this.post({
-			type: "PM_REQUEST_EMAIL_OTP_ENROLLMENT_CHALLENGE",
-			payload: wirePayload,
-			options: { onProgress: this.wrapOnEvent(onEvent, isRegistrationFlowEvent) }
-		})).result;
-	}
-	async requestEmailOtpSigningSessionChallenge(payload) {
-		const { onEvent, ...wirePayload } = payload;
-		return (await this.post({
-			type: "PM_REQUEST_EMAIL_OTP_SIGNING_SESSION_CHALLENGE",
-			payload: wirePayload,
-			options: { onProgress: this.wrapOnEvent(onEvent, isUnlockFlowEvent) }
-		})).result;
-	}
-	googleEmailOtpWalletAuthFlowFromWire(wire, onDemoOtp) {
-		emitDemoEmailOtpCodeFromWire({
-			wire,
-			onDemoOtp
 		});
+		if (!res.result.ok) return res.result;
+		const flow = this.googleEmailOtpWalletAuthFlowFromWire(res.result.value);
+		if (flow.mode !== "login") throw new Error("Email code request returned a registration flow");
+		return {
+			ok: true,
+			value: flow
+		};
+	}
+	googleEmailOtpWalletAuthFlowFromWire(wire) {
 		const cancel = async () => {
 			await this.post({
 				type: "PM_GOOGLE_EMAIL_OTP_WALLET_AUTH_CANCEL",
@@ -2164,7 +1936,7 @@ var WalletIframeRouter = class {
 					timeoutMs: WALLET_IFRAME_THRESHOLD_SIGNING_TIMEOUT_MS,
 					progressTimeoutExtensionFactor: 1
 				});
-				if (res.result.ok) await this.refreshExactSessionAndEmitLoginStatus("current", {
+				if (res.result.ok) await this.refreshExactSessionAndEmitChange("current", {
 					kind: "exact",
 					walletId: String(res.result.value.walletId)
 				});
@@ -2181,7 +1953,7 @@ var WalletIframeRouter = class {
 					}
 				});
 				if (!res.result.ok) return res.result;
-				const flow = this.googleEmailOtpWalletAuthFlowFromWire(res.result.value, onDemoOtp);
+				const flow = this.googleEmailOtpWalletAuthFlowFromWire(res.result.value);
 				if (flow.mode !== "register") throw new Error("Google Email OTP registration reroll returned a login flow");
 				return {
 					ok: true,
@@ -2213,7 +1985,7 @@ var WalletIframeRouter = class {
 				});
 				return res.result.ok ? {
 					ok: true,
-					value: this.googleEmailOtpWalletAuthFlowFromWire(res.result.value, onDemoOtp)
+					value: this.googleEmailOtpWalletAuthFlowFromWire(res.result.value)
 				} : res.result;
 			},
 			submit: async (input) => {
@@ -2230,14 +2002,14 @@ var WalletIframeRouter = class {
 					timeoutMs: WALLET_IFRAME_THRESHOLD_SIGNING_TIMEOUT_MS,
 					progressTimeoutExtensionFactor: 1
 				});
-				if (res.result.ok) await this.refreshExactSessionAndEmitLoginStatus("current", { kind: "current" });
+				if (res.result.ok) await this.refreshExactSessionAndEmitChange("current", { kind: "current" });
 				return res.result;
 			},
 			cancel
 		};
 	}
-	async beginGoogleEmailOtpWalletAuth(payload) {
-		const { onDemoOtp, onEvent, ...wirePayload } = payload;
+	async startGoogleSignIn(payload) {
+		const { onEvent, ...wirePayload } = payload;
 		const diagnosticsEnabled = Reflect.get(globalThis, "__SEAMS_EMAIL_OTP_UNLOCK_DIAGNOSTICS") === true;
 		const registrationBenchmarkTimings = Reflect.get(globalThis, "__SEAMS_REGISTRATION_BENCHMARK_DIAGNOSTICS") === true;
 		const requestPayload = {
@@ -2260,60 +2032,16 @@ var WalletIframeRouter = class {
 		});
 		return res.result.ok ? {
 			ok: true,
-			value: this.googleEmailOtpWalletAuthFlowFromWire(res.result.value, onDemoOtp)
+			value: this.googleEmailOtpWalletAuthFlowFromWire(res.result.value)
 		} : res.result;
 	}
-	async enrollEmailOtp(payload) {
-		const { onEvent, ...wirePayload } = payload;
-		return sanitizeEmailOtpIframeResult((await this.post({
-			type: "PM_ENROLL_EMAIL_OTP",
-			payload: wirePayload,
-			options: { onProgress: this.wrapOnEvent(onEvent, isRegistrationFlowEvent) }
-		}, {
-			timeoutMs: WALLET_IFRAME_EMAIL_OTP_ENROLLMENT_TIMEOUT_MS,
-			progressTimeoutExtensionFactor: 1
-		})).result);
-	}
-	async unlockAddedEmailOtpWallet(payload) {
-		await this.post({
-			type: "PM_UNLOCK_ADDED_EMAIL_OTP_WALLET",
-			payload
-		});
-		await this.refreshExactSessionAndEmitLoginStatus("current", { kind: "current" });
-	}
-	async loginWithEmailOtpEcdsaCapability(payload) {
-		const { onEvent, ...wirePayload } = payload;
-		const res = await this.post({
-			type: "PM_LOGIN_EMAIL_OTP_ECDSA_CAPABILITY",
-			payload: wirePayload,
-			options: { onProgress: this.wrapOnEvent(onEvent, isUnlockFlowEvent) }
-		}, {
-			timeoutMs: WALLET_IFRAME_THRESHOLD_SIGNING_TIMEOUT_MS,
-			progressTimeoutExtensionFactor: 1
-		});
-		await this.refreshExactSessionAndEmitLoginStatus("current", { kind: "current" });
-		return sanitizeEmailOtpIframeResult(res.result);
-	}
-	async refreshEmailOtpSigningSession(payload) {
-		const { onEvent, ...wirePayload } = payload;
-		const res = await this.post({
-			type: "PM_REFRESH_EMAIL_OTP_SIGNING_SESSION",
-			payload: wirePayload,
-			options: { onProgress: this.wrapOnEvent(onEvent, isUnlockFlowEvent) }
-		}, {
-			timeoutMs: WALLET_IFRAME_THRESHOLD_SIGNING_TIMEOUT_MS,
-			progressTimeoutExtensionFactor: 1
-		});
-		await this.refreshExactSessionAndEmitLoginStatus("current", { kind: "current" });
-		return sanitizeEmailOtpIframeResult(res.result);
-	}
-	async getWalletRecoveryCodeStatus(payload) {
+	async getCodeStatus(payload) {
 		return (await this.post({
 			type: "PM_GET_WALLET_RECOVERY_CODE_STATUS",
 			payload
 		})).result;
 	}
-	async acknowledgeWalletRecoveryCodeBackup(payload) {
+	async confirmBackup(payload) {
 		await this.ensureConfigured();
 		return (await this.post({
 			type: "PM_ACKNOWLEDGE_WALLET_RECOVERY_CODE_BACKUP",
@@ -2326,7 +2054,7 @@ var WalletIframeRouter = class {
 			payload
 		})).result;
 	}
-	async rotateWalletRecoveryCodes(payload) {
+	async rotateCodes(payload) {
 		return (await this.post({
 			type: "PM_ROTATE_WALLET_RECOVERY_CODES",
 			payload
@@ -2342,23 +2070,7 @@ var WalletIframeRouter = class {
 		this.invalidateReviews();
 		await this.post({ type: "PM_LOCK" });
 		this.exactSessionState = { kind: "wallet_locked" };
-		this.emitLoginStatusChanged({
-			isLoggedIn: false,
-			walletId: null
-		});
-		return {
-			ok: true,
-			result: void 0
-		};
-	}
-	async logout() {
-		this.invalidateReviews();
-		await this.post({ type: "PM_LOGOUT" });
-		this.exactSessionState = { kind: "wallet_locked" };
-		this.emitLoginStatusChanged({
-			isLoggedIn: false,
-			walletId: null
-		});
+		this.emitSessionChanged({ kind: "wallet_locked" }, { kind: "refresh" });
 		return {
 			ok: true,
 			result: void 0
@@ -2372,13 +2084,10 @@ var WalletIframeRouter = class {
 		})).result);
 		if (result.kind === "locked") {
 			this.exactSessionState = { kind: "wallet_locked" };
-			this.emitLoginStatusChanged({
-				isLoggedIn: false,
-				walletId: null
-			});
+			this.emitSessionChanged({ kind: "wallet_locked" }, { kind: "refresh" });
 		} else {
 			this.exactSessionState = result.current;
-			this.emitLoginStatusChanged(walletIframeLoginStatusFromExactSession(result.current));
+			this.emitSessionChanged(result.current, { kind: "refresh" });
 		}
 		return result;
 	}
@@ -2396,6 +2105,7 @@ var WalletIframeRouter = class {
 				params: {
 					message: payload.message,
 					recipient: payload.recipient,
+					callbackUrl: payload.callbackUrl,
 					state: payload.state
 				},
 				options: safeOptions
@@ -2487,35 +2197,8 @@ var WalletIframeRouter = class {
 			options: { onProgress: this.wrapOnEvent(payload.options?.onEvent, isSigningFlowEvent) }
 		})).result;
 	}
-	async executeAction(payload, transactionDispatch = { kind: "ordinary" }) {
-		if (transactionDispatch.kind === "reviewed") payload = {
-			...payload,
-			options: {
-				...payload.options,
-				confirmationConfig: transactionDispatch.reservation.confirmationConfig
-			}
-		};
-		const { options } = payload;
-		const safeOptions = {
-			waitUntil: options.waitUntil,
-			confirmationConfig: options.confirmationConfig,
-			...typeof options.signerSlot === "number" ? { signerSlot: options.signerSlot } : {},
-			...options.confirmerText ? { confirmerText: options.confirmerText } : {}
-		};
-		return (await this.post({
-			type: "PM_EXECUTE_ACTION",
-			payload: {
-				walletId: payload.walletId,
-				nearAccountId: payload.nearAccountId,
-				receiverId: payload.receiverId,
-				actionArgs: payload.actionArgs,
-				options: safeOptions
-			},
-			options: { onProgress: this.wrapOnEvent(options?.onEvent, isSigningFlowEvent) }
-		}, { transactionDispatch })).result;
-	}
-	async setConfirmBehavior(behavior, walletId) {
-		await this.post({
+	async setConfirmationBehavior(behavior, walletId) {
+		await this.requestPreferences({
 			type: "PM_SET_CONFIRM_BEHAVIOR",
 			payload: {
 				behavior,
@@ -2524,19 +2207,28 @@ var WalletIframeRouter = class {
 		});
 	}
 	async setConfirmationConfig(config, walletId) {
-		await this.post({
+		await this.requestPreferences({
 			type: "PM_SET_CONFIRMATION_CONFIG",
 			payload: {
 				config,
 				...walletId ? { walletId } : {}
 			}
 		});
-		if (config.uiMode === "none" || config.uiMode === "modal" || config.uiMode === "drawer") this.mirroredConfirmationUiMode = config.uiMode;
 	}
 	async getConfirmationConfig() {
-		const res = await this.post({ type: "PM_GET_CONFIRMATION_CONFIG" });
-		this.mirroredConfirmationUiMode = res.result.uiMode;
-		return res.result;
+		return this.requestPreferences({ type: "PM_GET_CONFIRMATION_CONFIG" });
+	}
+	async requestPreferences(request) {
+		if (!this.state.ready || !this.state.port) await this.init();
+		const connectionId = this.state.connectionId;
+		const res = await this.post(request);
+		if (this.state.connectionId !== connectionId) throw new Error("Wallet iframe connection changed during preference request");
+		const snapshot = parseClientPreferencesChangedPayload(res.result);
+		if (!snapshot) throw new Error("Invalid wallet preference snapshot");
+		this.handlePreferencesChanged(snapshot);
+		const current = this.lastPreferencesChangedPayload;
+		if (!current) throw new Error("Wallet preference snapshot is unavailable");
+		return current.confirmationConfig;
 	}
 	/**
 	* Push appearance (theme name and/or color token overrides) to the wallet
@@ -2546,25 +2238,15 @@ var WalletIframeRouter = class {
 	* fingerprint, so this never drops warm signing-session state.
 	*/
 	async setAppearance(appearance) {
+		const resolved = resolveRuntimeAppearance(this.opts.hostConfig.ui.appearance, appearance);
 		await this.post({
 			type: "PM_SET_CONFIG",
-			payload: { appearance }
-		});
-	}
-	async prefetchBlockheight() {
-		await this.post({ type: "PM_PREFETCH_BLOCKHEIGHT" });
-	}
-	async prefillRouterAbEcdsaDerivationPresignaturePool(payload) {
-		return (await this.post({
-			type: "PM_PREFILL_ROUTER_AB_ECDSA_DERIVATION_PRESIGNATURE_POOL",
 			payload: {
-				walletSession: payload.walletSession,
-				...payload.options ? { options: payload.options } : {}
+				kind: "appearance",
+				appearance: resolved
 			}
-		}, {
-			timeoutMs: WALLET_IFRAME_THRESHOLD_SIGNING_TIMEOUT_MS,
-			progressTimeoutExtensionFactor: 1
-		})).result;
+		});
+		this.opts.hostConfig = replaceWalletHostAppearance(this.opts.hostConfig, resolved);
 	}
 	async getRecentUnlocks() {
 		return (await this.post({ type: "PM_GET_RECENT_UNLOCKS" })).result;
@@ -2651,7 +2333,7 @@ var WalletIframeRouter = class {
 		options?.onEvent?.(progress);
 		const outcome = classifyLinkDeviceFlowEvent(progress);
 		if (outcome.kind !== "active") return;
-		this.refreshExactSessionAndEmitLoginStatus("current", {
+		this.refreshExactSessionAndEmitChange("current", {
 			kind: "exact",
 			walletId: outcome.walletId
 		}).catch((error) => {
@@ -2753,12 +2435,6 @@ var WalletIframeRouter = class {
 			options: { onProgress: this.wrapOnEvent(options?.onEvent, isSigningFlowEvent) }
 		}, { transactionDispatch })).result;
 	}
-	async fundImplicitNearAccountForTesting(payload) {
-		return (await this.post({
-			type: "PM_FUND_IMPLICIT_NEAR_ACCOUNT_FOR_TESTING",
-			payload
-		})).result;
-	}
 	async hasPasskeyCredential(walletId) {
 		return !!(await this.post({
 			type: "PM_HAS_PASSKEY",
@@ -2782,20 +2458,9 @@ var WalletIframeRouter = class {
 		})).result);
 	}
 	async revokeLinkedDevice(payload) {
-		const request = parseLinkedDeviceRevokeRequestV1({
-			kind: "linked_device_revoke_request_v1",
-			walletId: payload.walletId,
-			walletAuthMethodId: payload.walletAuthMethodId,
-			requestedAtMs: payload.requestedAtMs
-		});
 		return parseLinkedDeviceRevokeResultV1((await this.post({
 			type: "PM_REVOKE_LINKED_DEVICE",
-			payload: {
-				walletId: String(request.walletId),
-				walletAuthMethodId: String(request.walletAuthMethodId),
-				requestedAtMs: request.requestedAtMs,
-				sourceProof: payload.sourceProof
-			}
+			payload
 		})).result);
 	}
 	async sendTransaction(args) {
@@ -2913,7 +2578,7 @@ var WalletIframeRouter = class {
 		const lifecycleEnvelope = parseSdkLifecycleEnvelope(e.data);
 		switch (lifecycleEnvelope.kind) {
 			case "lifecycle_event":
-				this.emitSdkLifecycleEvent(lifecycleEnvelope.event);
+				this.emitSdkLifecycleEvent(lifecycleEnvelope.event, lifecycleEnvelope.revision);
 				return;
 			case "invalid_lifecycle_event":
 				if (this.debug) console.warn("[WalletIframeRouter] Ignored invalid SDK lifecycle event");
@@ -2922,6 +2587,13 @@ var WalletIframeRouter = class {
 		}
 		const msg = parseClientChildToParentEnvelope(e.data);
 		if (!msg) return;
+		if (msg.type === "SESSION_CHANGED") {
+			if (this.acceptSessionSnapshot(msg.payload)) this.emitSessionChanged(msg.payload.state, {
+				kind: "observed",
+				session: msg.payload.session
+			});
+			return;
+		}
 		if (msg.type === "PREFERENCES_CHANGED") {
 			const payload = msg.payload;
 			this.handlePreferencesChanged(payload);
@@ -2937,16 +2609,6 @@ var WalletIframeRouter = class {
 			} catch {}
 			return;
 		}
-		if (msg.type === "AUTH_MENU_DEMO_EMAIL_OTP_DELIVERY") {
-			const payload = parseHostedAuthMenuDemoEmailOtpDelivery(msg.payload);
-			if (!payload) return;
-			const activeRequestId = this.hostedAuthMenuRequestIds.get(payload.authMenuSessionId);
-			if (!activeRequestId || typeof msg.requestId !== "string" || msg.requestId !== activeRequestId) return;
-			for (const listener of Array.from(this.listeners.hostedAuthMenuDemoEmailOtpDelivery)) try {
-				listener(payload);
-			} catch {}
-			return;
-		}
 		if (msg.type === "AUTH_MENU_ERROR") {
 			const payload = parseHostedAuthMenuErrorEvent(msg.payload);
 			if (!payload) return;
@@ -3034,10 +2696,7 @@ var WalletIframeRouter = class {
 			err.details = msg.payload?.details;
 			if (isTerminalWalletStateErrorCode(msg.payload?.code)) {
 				this.exactSessionState = { kind: "wallet_locked" };
-				this.emitLoginStatusChanged({
-					isLoggedIn: false,
-					walletId: null
-				});
+				this.emitSessionChanged({ kind: "wallet_locked" }, { kind: "refresh" });
 			}
 			pending.reject(err);
 			const terminalStatus = isWalletOperationCancellationCode(msg.payload?.code) ? "cancelled" : "failed";
@@ -3280,7 +2939,6 @@ function exactSessionRequestWalletId(envelope) {
 	switch (envelope.type) {
 		case "PM_SIGN_TX_WITH_ACTIONS":
 		case "PM_SIGN_AND_SEND_TX":
-		case "PM_EXECUTE_ACTION":
 		case "PM_SIGN_DELEGATE_ACTION":
 		case "PM_SIGN_NEP413": return requestPayloadWalletId(payload);
 		case "PM_SIGN_TEMPO": return requestPayloadSessionWalletId(payload);