@seams/wallet 0.6.1 → 0.6.2

package/dist/.build-inputs.sha256

@@ -1 +1 @@
-26f9cbe14c02c52bc728d47a019f30b773531195d58cb96ade8476629c0fe91c
+0d1577c2c1b97c7654920198df26f4d567031af57e0d5e0fb0262a294a65493a

package/dist/esm/SeamsWeb/operations/registration/registration.js

@@ -38,7 +38,7 @@ import { planPendingNearRegistration, preparePendingNearRegistration } from "../
 import { walletSessionAuthorizations } from "../../../core/indexedDB/seamsWalletDB/walletSessionAuthorizationStore.js";
 import { IndexedDBManager } from "../../../core/indexedDB/index.js";
 import { nearEd25519YaoMaterialActivationFromMetadata } from "../../../core/signingEngine/session/material/nearEd25519YaoMaterialActivation.js";
-import { activateWalletRegistration, authorizeWalletRegistrationNearAdmission, completeWalletRegistrationNearProvisioning, createWalletAddSignerIntent, finalizeWalletAddSigner, isEmailOtpWalletRegistrationFinalizeResponse, parseWalletRegistrationEcdsaDerivationRespond, respondWalletRegistration, setupWalletRegistration, startWalletAddSigner } from "../../../core/rpcClients/relayer/walletRegistration.js";
+import { activateWalletRegistration, completeWalletRegistrationNearProvisioning, createWalletAddSignerIntent, finalizeWalletAddSigner, isEmailOtpWalletRegistrationFinalizeResponse, parseWalletRegistrationEcdsaDerivationRespond, respondWalletRegistration, setupWalletRegistration, startWalletAddSigner } from "../../../core/rpcClients/relayer/walletRegistration.js";
 import { buildEmailOtpAuthContext, emailOtpAuthContextEmailHashHex, emailOtpAuthContextProvider, emailOtpAuthContextProviderUserId } from "../../../core/signingEngine/session/identity/laneIdentity.js";
 import { persistPasskeyEd25519YaoSignerMaterialV1 } from "../../../core/signingEngine/session/passkey/ed25519YaoLocalMaterial.js";
 import { buildPasskeyEd25519RestoreMetadata } from "../../../core/signingEngine/session/passkey/ed25519YaoSealedSession.js";
@@ -472,17 +472,10 @@ function registrationThreeRouteAuthorityPayload(authority) {
 		default: return assertNever(authority);
 	}
 }
-async function startEarlyNearRegistrationAdmission(args) {
+async function startNearRegistrationAdmission(args) {
 	const startedAt = performance.now();
 	try {
-		const deferredNear = (await authorizeWalletRegistrationNearAdmission({
-			relayerUrl: args.relayerUrl,
-			headers: registrationRouteHeaders(args.traceContext),
-			registrationCeremonyId: args.registrationCeremonyId,
-			signedSetup: args.signedSetup,
-			...registrationThreeRouteAuthorityPayload(args.authority)
-		})).ed25519;
-		const admissionReceipt = await admitDeferredNearRegistration(deferredNear, {
+		const admissionReceipt = await admitDeferredNearRegistration(args.deferredNear, {
 			routerOrigin: new URL(args.relayerUrl).origin,
 			authorization: {
 				kind: "bearer",
@@ -498,7 +491,7 @@ async function startEarlyNearRegistrationAdmission(args) {
 			outcome: "success"
 		});
 		return {
-			deferredNear,
+			deferredNear: args.deferredNear,
 			admissionReceipt
 		};
 	} catch (error) {
@@ -511,7 +504,7 @@ async function startEarlyNearRegistrationAdmission(args) {
 		throw error;
 	}
 }
-function requireEarlyNearRegistrationAdmission(admission) {
+function requireNearRegistrationAdmission(admission) {
 	if (!admission) throw new Error("Mixed registration did not start NEAR admission");
 	return admission;
 }
@@ -688,14 +681,6 @@ async function runEcdsaEnabledThreeRouteRegistrationCeremony(args) {
 				clientCeremony: args.clientCeremony
 			})
 		});
-		const earlyNearAdmission = args.signerPlanKind === "near_ed25519_and_evm_family_ecdsa" ? startEarlyNearRegistrationAdmission({
-			relayerUrl: args.relayerUrl,
-			registrationCeremonyId: ceremonyId,
-			signedSetup: args.signedSetup,
-			authority: args.authority,
-			traceContext: args.traceContext
-		}) : null;
-		earlyNearAdmission?.catch(ignoreNearCustodyFailure);
 		const responded = await measureStrictEcdsaCeremonyStep({
 			registrationTiming: args.registrationTiming,
 			bucket: "ecdsaRegistrationGatewayRespondMs",
@@ -716,6 +701,14 @@ async function runEcdsaEnabledThreeRouteRegistrationCeremony(args) {
 		});
 		if (responded.kind === "near_ed25519") throw new Error("ECDSA registration ceremony received an Ed25519-only respond result");
 		const deferredNear = responded.kind === "near_ed25519_and_evm_family_ecdsa" ? responded.ed25519 : null;
+		const nearAdmission = deferredNear ? startNearRegistrationAdmission({
+			relayerUrl: args.relayerUrl,
+			registrationCeremonyId: ceremonyId,
+			signedSetup: args.signedSetup,
+			deferredNear,
+			traceContext: args.traceContext
+		}) : null;
+		nearAdmission?.catch(ignoreNearCustodyFailure);
 		const verified = await measureStrictEcdsaCeremonyStep({
 			registrationTiming: args.registrationTiming,
 			bucket: "ecdsaRegistrationClientProofVerifyMs",
@@ -776,8 +769,7 @@ async function runEcdsaEnabledThreeRouteRegistrationCeremony(args) {
 						deferredNear
 					});
 					deferredNearCustodyWork = args.startDeferredNearCustody({
-						deferredNear,
-						earlyAdmission: requireEarlyNearRegistrationAdmission(earlyNearAdmission),
+						admission: requireNearRegistrationAdmission(nearAdmission),
 						establishedEvmCustodyCommit: bootstrap.preActivationCommitPayload
 					});
 					deferredNearCustodyWork.catch(ignoreNearCustodyFailure);
@@ -1075,14 +1067,14 @@ async function startDeferredNearWalletCustody(base, input) {
 			operation: "near_provisioning"
 		});
 		if (!pending || pending.operation !== "near_provisioning" || pending.phase !== "planned") throw new Error("NEAR registration has no planned continuation");
-		let earlyAdmissionReceipt;
+		let preAdmittedReceipt;
 		try {
-			const early = await input.earlyAdmission;
-			if (!sameRouterAbEd25519YaoRegistrationAdmissionRequestV1(early.deferredNear.admissionRequest, pending.admissionRequest)) throw new Error("Early NEAR admission changed the authorized request");
-			earlyAdmissionReceipt = early.admissionReceipt;
+			const admitted = await input.admission;
+			if (!sameRouterAbEd25519YaoRegistrationAdmissionRequestV1(admitted.deferredNear.admissionRequest, pending.admissionRequest)) throw new Error("NEAR admission changed the authorized request");
+			preAdmittedReceipt = admitted.admissionReceipt;
 		} catch (error) {
-			if (error instanceof Error && error.message === "Early NEAR admission changed the authorized request") throw error;
-			earlyAdmissionReceipt = void 0;
+			if (error instanceof Error && error.message === "NEAR admission changed the authorized request") throw error;
+			preAdmittedReceipt = void 0;
 		}
 		const { joined, admissionReceipt } = await continueNearRegistrationCustody({
 			pending,
@@ -1091,7 +1083,7 @@ async function startDeferredNearWalletCustody(base, input) {
 			credential: base.signedSetup,
 			traceContext: base.traceContext,
 			factorSecret,
-			...earlyAdmissionReceipt ? { admitted: earlyAdmissionReceipt } : {}
+			...preAdmittedReceipt ? { admitted: preAdmittedReceipt } : {}
 		});
 		outcome = "success";
 		return {

package/dist/esm/core/rpcClients/relayer/walletRegistration.js

@@ -29,7 +29,6 @@ const ROUTE_PAYLOAD_BREAKDOWN_MAX_DEPTH = 2;
 const ROUTE_PAYLOAD_BREAKDOWN_MAX_FIELDS = 64;
 const WALLET_REGISTRATION_SETUP_PATH = "/wallets/register/setup";
 const WALLET_REGISTRATION_RESPOND_PATH = "/wallets/register/respond";
-const WALLET_REGISTRATION_NEAR_ADMISSION_PATH = "/wallets/register/near-admission";
 const WALLET_REGISTRATION_ACTIVATE_PATH = "/wallets/register/activate";
 const WALLET_REGISTRATION_NEAR_PROVISIONING_PATH = "/wallets/register/near-provisioning";
 /** Managed environment id header for Router API `api_credentials` auth. */
@@ -1732,47 +1731,6 @@ async function respondWalletRegistration(args) {
 		onServerTiming: args.onServerTiming
 	}));
 }
-async function authorizeWalletRegistrationNearAdmission(args) {
-	const body = {
-		registrationCeremonyId: args.registrationCeremonyId,
-		signedSetup: args.signedSetup
-	};
-	switch (args.kind) {
-		case "passkey":
-			body.webauthn_registration = args.webauthnRegistration;
-			break;
-		case "email_otp":
-			body.emailOtpRegistrationProof = args.emailOtpRegistrationProof;
-			break;
-	}
-	const response = await postJson({
-		relayerUrl: args.relayerUrl,
-		path: WALLET_REGISTRATION_NEAR_ADMISSION_PATH,
-		headers: args.headers,
-		body
-	});
-	const responseName = "Wallet registration NEAR admission";
-	const record = requireWalletRegistrationResponseObject({
-		responseName,
-		field: "body",
-		value: response
-	});
-	assertWalletRegistrationResponseKeys(record, [
-		"ok",
-		"registrationCeremonyId",
-		"ed25519"
-	], responseName);
-	if (readWalletRegistrationResponseField(record, "ok", responseName) !== true) throw new Error(`${responseName} response is not successful`);
-	return {
-		ok: true,
-		registrationCeremonyId: requireResponseString({
-			responseName,
-			field: "registrationCeremonyId",
-			value: readWalletRegistrationResponseField(record, "registrationCeremonyId", responseName)
-		}),
-		ed25519: parseWalletRegistrationRespondEd25519DeferredWork(readWalletRegistrationResponseField(record, "ed25519", responseName))
-	};
-}
 function parseRegistrationEstablishedSessionResult(value, expectedWalletId) {
 	const responseName = "Wallet registration established session";
 	const parsed = parseRegistrationEstablishedSessionResultV2(value);
@@ -2362,6 +2320,6 @@ async function fetchWalletEcdsaKeyFactsInventoryWithWebAuthn(args) {
 	});
 }
 //#endregion
-export { activateWalletAddSignerEcdsa, activateWalletRegistration, authorizeWalletRegistrationNearAdmission, completeWalletRegistrationNearProvisioning, createWalletAddAuthMethodIntent, createWalletAddSignerIntent, fetchWalletEcdsaKeyFactsInventoryWithOperationCredential, fetchWalletEcdsaKeyFactsInventoryWithWebAuthn, finalizeWalletAddAuthMethod, finalizeWalletAddSigner, fundImplicitNearAccountForTesting, isEmailOtpWalletRegistrationFinalizeResponse, parseWalletRegistrationEcdsaDerivationRespond, requestAddAuthMethodEmailOtpChallenge, respondWalletAddSignerEcdsa, respondWalletRegistration, revokeWalletAuthMethod, setupWalletRegistration, startWalletAddAuthMethod, startWalletAddSigner };
+export { activateWalletAddSignerEcdsa, activateWalletRegistration, completeWalletRegistrationNearProvisioning, createWalletAddAuthMethodIntent, createWalletAddSignerIntent, fetchWalletEcdsaKeyFactsInventoryWithOperationCredential, fetchWalletEcdsaKeyFactsInventoryWithWebAuthn, finalizeWalletAddAuthMethod, finalizeWalletAddSigner, fundImplicitNearAccountForTesting, isEmailOtpWalletRegistrationFinalizeResponse, parseWalletRegistrationEcdsaDerivationRespond, requestAddAuthMethodEmailOtpChallenge, respondWalletAddSignerEcdsa, respondWalletRegistration, revokeWalletAuthMethod, setupWalletRegistration, startWalletAddAuthMethod, startWalletAddSigner };
 
 //# sourceMappingURL=walletRegistration.js.map

package/dist/esm/core/signingEngine/flows/signNear/shared/ed25519YaoNormalSigning.js

@@ -8,6 +8,7 @@ import { resolveNearNetwork } from "../../../../config/chains.js";
 import { SigningSessionIds } from "../../../session/operationState/types.js";
 import { ActionType, fromActionArgsWasm } from "../../../../../shared-ts/src/near/actions.js";
 import { PASSKEY_MANAGER_DEFAULT_CONFIGS } from "../../../../config/defaultConfigs.js";
+import { emitEd25519SigningTiming } from "../../../session/operationState/trace.js";
 import { parseThresholdEd25519NearTransaction, thresholdEd25519NearTransactionOperationFingerprint } from "../../../../../shared-ts/src/threshold/ed25519OperationFingerprint.js";
 import { WorkerResponseType } from "../../../../types/signer-worker.js";
 import { buildThresholdEd25519DelegateSigningPayloadWasm, buildThresholdEd25519NearTxUnsignedBorshWasm, decodeThresholdEd25519SignedNearTxBorshWasm, finalizeThresholdEd25519DelegateFromSignatureWasm, finalizeThresholdEd25519NearTxFromSignatureWasm } from "../../../chains/near/nearSignerWasm.js";
@@ -260,6 +261,18 @@ function requireActiveClientMatchesNormalSigningOperation(args) {
 	if (!sameBytes(metadata.signingWorkerVerifyingShare, args.signingWorkerVerifyingShare)) throw new Error("Router A/B Ed25519 active Client SigningWorker verifying share mismatch");
 }
 async function tryFinalizeRouterAbEd25519NormalSigningSignature(args) {
+	const operationId = args.prepare.request.intent.operation_id;
+	const signatureStartedAt = performance.now();
+	let outcome = "failed";
+	try {
+		const finalized = await finalizeRouterAbEd25519NormalSigningSignature(args, operationId);
+		outcome = "succeeded";
+		return finalized;
+	} finally {
+		emitEd25519SigningTiming(operationId, "signature_total", signatureStartedAt, outcome);
+	}
+}
+async function finalizeRouterAbEd25519NormalSigningSignature(args, operationId) {
 	const signingPayload = base64UrlDecode(args.signingDigestB64u);
 	if (signingPayload.length !== 32) throw new Error(`Router A/B normal-signing ${args.signingPayloadLabel} must be 32 bytes`);
 	const admittedDigest = requireWireBytes32(args.prepare.admissionMaterial.admittedSigningDigest.bytes, "admitted digest");
@@ -279,11 +292,13 @@ async function tryFinalizeRouterAbEd25519NormalSigningSignature(args) {
 		runtimePolicyScope: args.walletSessionState.runtimePolicyScope,
 		relayerUrl: args.walletSessionState.relayerUrl
 	} : args.materialFacts;
+	const prepareStartedAt = performance.now();
 	const prepareResponse = await prepareRouterAbNormalSigningV2({
 		relayServerUrl: materialFacts.relayerUrl,
 		credential: args.credential,
 		request: args.prepare.request
 	});
+	emitEd25519SigningTiming(operationId, "prepare", prepareStartedAt);
 	requireRouterAbNormalSigningPrepareMatchesRequest({
 		request: args.prepare.request,
 		signingPayloadDigest: args.prepare.admissionMaterial.signingPayloadDigest,
@@ -304,12 +319,15 @@ async function tryFinalizeRouterAbEd25519NormalSigningSignature(args) {
 		signingWorkerId: prepareResponse.signing_worker.server_id,
 		signingWorkerVerifyingShare
 	});
+	const clientShareStartedAt = performance.now();
 	const clientShare = await args.activeClient.createSigningShare({
 		admittedDigest,
 		signingWorkerCommitments: prepareResponse.server_commitments,
 		signingWorkerVerifyingShare
 	});
+	emitEd25519SigningTiming(operationId, "client_share", clientShareStartedAt);
 	if (clientShare.clientVerifyingShare.length !== 32) throw new Error("Router A/B normal-signing Client verifying share must be 32 bytes");
+	const finalizeStartedAt = performance.now();
 	const signingResponse = await finalizeRouterAbNormalSigningV2({
 		relayServerUrl: materialFacts.relayerUrl,
 		credential: args.credential,
@@ -323,6 +341,7 @@ async function tryFinalizeRouterAbEd25519NormalSigningSignature(args) {
 			clientSignatureShareB64u: clientShare.clientSignatureShareB64u
 		})
 	});
+	emitEd25519SigningTiming(operationId, "finalize", finalizeStartedAt);
 	requireRouterAbNormalSigningResponseMatchesRequest({
 		request: args.prepare.request,
 		signingPayloadDigest: args.prepare.admissionMaterial.signingPayloadDigest,

package/dist/esm/core/signingEngine/flows/signNear/signTransactions.js

@@ -9,7 +9,7 @@ import { SignedTransaction } from "../../../rpcClients/near/NearClient.js";
 import { PASSKEY_MANAGER_DEFAULT_CONFIGS } from "../../../config/defaultConfigs.js";
 import { resolveNearSigningMaterials } from "./shared/signingMaterials.js";
 import { buildNearTransactionSigningPayload } from "../../chains/near/payloads.js";
-import { createSigningBoundaryTraceEvent, emitSigningBoundaryTrace } from "../../session/operationState/trace.js";
+import { createSigningBoundaryTraceEvent, emitEd25519SigningTiming, emitSigningBoundaryTrace } from "../../session/operationState/trace.js";
 import { parseThresholdEd25519NearTransaction, thresholdEd25519NearTransactionPlanningOperationFingerprint } from "../../../../shared-ts/src/threshold/ed25519OperationFingerprint.js";
 import { SigningOperationCommandKind, isSigningOperationReviewApprovedState, runSigningOperationCommand } from "../shared/signingStateMachine.js";
 import { requireNearStepUpAuth, signingAuthPlanForNearMaterialRequirement } from "./requireNearStepUpAuth.js";
@@ -45,6 +45,16 @@ function disposeOwnedNearOperationStepUpMaterialAndRethrow(args, error) {
 	disposeOwnedNearOperationStepUpMaterial(args);
 	throw error;
 }
+async function resolveWarmNearSigningMaterial(args) {
+	return {
+		material: await resolvePreparedNearEd25519YaoMaterial(args.preparation, args.executor),
+		walletSessionState: await args.executor.resolveWalletSessionState()
+	};
+}
+function requireWarmNearSigningMaterialTask(task) {
+	if (!task) throw new Error("[SigningEngine][near] warm signing material was not prepared");
+	return task;
+}
 async function resolveNearTransactionOperationStepUpMaterial(args) {
 	if (args.authorization.kind === "passkey") {
 		if (args.material.kind !== "passkey_live" && args.material.kind !== "passkey_sealed") throw new Error("[SigningEngine][near] passkey transaction material changed factor");
@@ -385,6 +395,8 @@ async function runAuthorizedNearTransactionWithActionsSigning({ ctx, commandSubj
 	const nearAccountId = toAccountId(nearAccount.accountId);
 	const relayerUrl = ctx.relayerUrl;
 	const warnings = [];
+	const durableLeaseRecovery = ctx.nonceCoordinator.recoverDurableLeases({ walletId: String(commandSubject.walletSession.walletId) });
+	durableLeaseRecovery.catch(() => {});
 	emitNearSigningEvent(onEvent, nearAccountId, {
 		phase: SigningEventPhase.STEP_02_REQUEST_PREPARED,
 		status: "running",
@@ -484,6 +496,11 @@ async function runAuthorizedNearTransactionWithActionsSigning({ ctx, commandSubj
 		...passkeyEd25519OperationStepUp ? { passkeyEd25519OperationStepUp } : {},
 		...emailOtpEd25519StepUp ? { emailOtpEd25519StepUp } : {}
 	});
+	const warmSigningMaterialTask = preparedStepUp.kind === "warm_session" ? resolveWarmNearSigningMaterial({
+		preparation: yaoSigningPreparation,
+		executor: yaoMaterialExecutor
+	}) : null;
+	warmSigningMaterialTask?.catch(() => {});
 	const confirmationAuthPayload = preparedStepUp.confirmationAuthPayload;
 	if (isWarmSessionSigningAuthPlan(confirmationAuthPayload.signingAuthPlan)) emitNearSigningEvent(onEvent, nearAccountId, {
 		phase: SigningEventPhase.STEP_06_AUTH_WARM_SESSION_CLAIMED,
@@ -578,6 +595,7 @@ async function runAuthorizedNearTransactionWithActionsSigning({ ctx, commandSubj
 			readiness: operationStepUpReadiness
 		});
 	}
+	const confirmationCompletedAt = performance.now();
 	const operationStepUpMaterial = operationStepUpReadiness ? await operationStepUpReadiness : null;
 	if (transactionReviewRequired) emitNearSigningEvent(onEvent, nearAccountId, {
 		phase: SigningEventPhase.STEP_05_CONFIRMATION_APPROVED,
@@ -610,7 +628,7 @@ async function runAuthorizedNearTransactionWithActionsSigning({ ctx, commandSubj
 	});
 	const ownsResolvedOperationStepUpMaterial = operationStepUpMaterial?.kind === "passkey_sealed" || operationStepUpMaterial?.kind === "email_otp_sealed";
 	try {
-		await ctx.nonceCoordinator.recoverDurableLeases({ walletId: String(signingLane.identity.signer.account.wallet.walletId) });
+		await durableLeaseRecovery;
 	} catch (error) {
 		disposeOwnedNearOperationStepUpMaterial({
 			resolved: resolvedOperationStepUpMaterial,
@@ -633,14 +651,14 @@ async function runAuthorizedNearTransactionWithActionsSigning({ ctx, commandSubj
 			});
 			const resolvedMaterial = stepUpAuthorization.kind === "warm_session" ? {
 				kind: "warm_session",
-				material: await resolvePreparedNearEd25519YaoMaterial(yaoSigningPreparation, yaoMaterialExecutor)
+				resolved: await requireWarmNearSigningMaterialTask(warmSigningMaterialTask)
 			} : {
 				kind: "operation_step_up",
 				resolved: resolvedOperationStepUpMaterial
 			};
-			const canonicalThresholdSessionId = resolvedMaterial.kind === "warm_session" ? resolvedMaterial.material.facts.thresholdSessionId : resolvedMaterial.resolved.material.facts.thresholdSessionId;
-			const activeYaoClient = resolvedMaterial.kind === "warm_session" ? resolvedMaterial.material.activeClient : resolvedMaterial.resolved.material.activeClient;
-			const activeWalletSessionState = resolvedMaterial.kind === "warm_session" ? await yaoMaterialExecutor.resolveWalletSessionState() : null;
+			const canonicalThresholdSessionId = resolvedMaterial.kind === "warm_session" ? resolvedMaterial.resolved.material.facts.thresholdSessionId : resolvedMaterial.resolved.material.facts.thresholdSessionId;
+			const activeYaoClient = resolvedMaterial.kind === "warm_session" ? resolvedMaterial.resolved.material.activeClient : resolvedMaterial.resolved.material.activeClient;
+			const activeWalletSessionState = resolvedMaterial.kind === "warm_session" ? resolvedMaterial.resolved.walletSessionState : null;
 			const confirmedNearContext = resolvedMaterial.kind === "warm_session" ? await resolveConfirmedNearTransactionContext({
 				confirmation,
 				ctx,
@@ -771,6 +789,7 @@ async function runAuthorizedNearTransactionWithActionsSigning({ ctx, commandSubj
 					warnings,
 					nonceLeases: nonceLeaseRefs
 				});
+				emitEd25519SigningTiming(String(signingOperation.operationId), "confirmed_to_signed", confirmationCompletedAt);
 				emitNearSigningEvent(onEvent, nearAccountId, {
 					phase: SigningEventPhase.STEP_11_TRANSACTION_SIGNED,
 					status: "succeeded",

package/dist/esm/core/signingEngine/nonce/nearNonceLane.js

@@ -393,22 +393,6 @@ var NearImplicitAccountFundingRequiredError = class extends Error {
 		});
 	}
 };
-async function readImplicitNearAccountFundingState(input) {
-	try {
-		await input.nearClient.viewAccount(input.subject.nearAccountId);
-		return { kind: "funded" };
-	} catch (error) {
-		if (!isMissingNearAccessKeyError(errorMessage(error))) throw error;
-	}
-	return {
-		kind: "needs_funding",
-		error: new NearImplicitAccountFundingRequiredError({
-			walletId: input.subject.walletId,
-			nearAccountId: input.subject.nearAccountId,
-			nearPublicKeyStr: input.subject.publicKey
-		})
-	};
-}
 var NearAccountLookupFailedError = class extends Error {
 	constructor(args) {
 		super(args.message || `NEAR account ${args.nearAccountId} access key lookup failed.`);
@@ -442,16 +426,11 @@ async function fetchNearFreshDataForState(input) {
 			let txBlockHash = previousTransactionContext?.txBlockHash;
 			const fetchAccessKey = isNonceStale || !accessKeyInfo;
 			const fetchBlock = isBlockStale || !txBlockHeight || !txBlockHash;
-			const fetchImplicitAccountFunding = isImplicitNearAccountId(capturedSubject.nearAccountId) && (input.force || fetchAccessKey || !readyContext);
 			let maybeAccessKey = accessKeyInfo ?? null;
 			let maybeBlock = null;
 			let accessKeyError = null;
 			let blockError = null;
 			const tasks = [];
-			const implicitFundingPromise = fetchImplicitAccountFunding ? readImplicitNearAccountFundingState({
-				nearClient: input.nearClient,
-				subject: capturedSubject
-			}) : null;
 			if (fetchAccessKey) tasks.push((async () => {
 				try {
 					maybeAccessKey = await input.nearClient.viewAccessKey(capturedSubject.nearAccountId, capturedSubject.publicKey);
@@ -485,14 +464,6 @@ async function fetchNearFreshDataForState(input) {
 				}
 			})());
 			if (tasks.length > 0) await Promise.all(tasks);
-			const implicitFunding = implicitFundingPromise ? await implicitFundingPromise : null;
-			if (implicitFunding?.kind === "needs_funding") {
-				setNearImplicitUnfunded({
-					state,
-					subject: capturedSubject
-				});
-				throw implicitFunding.error;
-			}
 			if (accessKeyError) {
 				if (accessKeyError instanceof NearImplicitAccountFundingRequiredError) setNearImplicitUnfunded({
 					state,

package/dist/esm/core/signingEngine/session/operationState/trace.js

@@ -30,6 +30,15 @@ function emitEcdsaSigningTiming(operationId, stage, startedAt, outcome = "succee
 		outcome
 	});
 }
+function emitEd25519SigningTiming(operationId, stage, startedAt, outcome = "succeeded") {
+	emitSigningSessionFlowTrace("near", {
+		event: "ed25519_signing_timing",
+		operationId,
+		stage,
+		durationMs: Math.max(0, performance.now() - startedAt),
+		outcome
+	});
+}
 function emitSigningLaneResolutionTrace(scope, lane, args = {}) {
 	if (!lane || !isSigningSessionTraceEnabled()) return;
 	try {
@@ -80,6 +89,6 @@ function isSigningSessionTraceEnabled() {
 	}
 }
 //#endregion
-export { createSigningBoundaryTraceEvent, emitEcdsaPresignServerTiming, emitEcdsaServerTiming, emitEcdsaSigningTiming, emitSigningBoundaryTrace, emitSigningLaneResolutionTrace, emitSigningPlannerDecisionTrace, emitSigningSessionFlowFailure, emitSigningSessionFlowTrace };
+export { createSigningBoundaryTraceEvent, emitEcdsaPresignServerTiming, emitEcdsaServerTiming, emitEcdsaSigningTiming, emitEd25519SigningTiming, emitSigningBoundaryTrace, emitSigningLaneResolutionTrace, emitSigningPlannerDecisionTrace, emitSigningSessionFlowFailure, emitSigningSessionFlowTrace };
 
 //# sourceMappingURL=trace.js.map

package/dist/esm/react/SeamsWeb/operations/registration/registration.js

@@ -39,7 +39,7 @@ import { planPendingNearRegistration, preparePendingNearRegistration } from "../
 import { walletSessionAuthorizations } from "../../../core/indexedDB/seamsWalletDB/walletSessionAuthorizationStore.js";
 import { IndexedDBManager } from "../../../core/indexedDB/index.js";
 import { nearEd25519YaoMaterialActivationFromMetadata } from "../../../core/signingEngine/session/material/nearEd25519YaoMaterialActivation.js";
-import { activateWalletRegistration, authorizeWalletRegistrationNearAdmission, completeWalletRegistrationNearProvisioning, createWalletAddSignerIntent, finalizeWalletAddSigner, isEmailOtpWalletRegistrationFinalizeResponse, parseWalletRegistrationEcdsaDerivationRespond, respondWalletRegistration, setupWalletRegistration, startWalletAddSigner } from "../../../core/rpcClients/relayer/walletRegistration.js";
+import { activateWalletRegistration, completeWalletRegistrationNearProvisioning, createWalletAddSignerIntent, finalizeWalletAddSigner, isEmailOtpWalletRegistrationFinalizeResponse, parseWalletRegistrationEcdsaDerivationRespond, respondWalletRegistration, setupWalletRegistration, startWalletAddSigner } from "../../../core/rpcClients/relayer/walletRegistration.js";
 import { persistPasskeyEd25519YaoSignerMaterialV1 } from "../../../core/signingEngine/session/passkey/ed25519YaoLocalMaterial.js";
 import { buildPasskeyEd25519RestoreMetadata } from "../../../core/signingEngine/session/passkey/ed25519YaoSealedSession.js";
 import { prepareWalletEcdsaRegistrationPublication, prepareWalletEd25519RegistrationPublication, prepareWalletEmailOtpEd25519RegistrationPublication } from "../../../core/signingEngine/flows/registration/accountLifecycle.js";
@@ -472,17 +472,10 @@ function registrationThreeRouteAuthorityPayload(authority) {
 		default: return assertNever(authority);
 	}
 }
-async function startEarlyNearRegistrationAdmission(args) {
+async function startNearRegistrationAdmission(args) {
 	const startedAt = performance.now();
 	try {
-		const deferredNear = (await authorizeWalletRegistrationNearAdmission({
-			relayerUrl: args.relayerUrl,
-			headers: registrationRouteHeaders(args.traceContext),
-			registrationCeremonyId: args.registrationCeremonyId,
-			signedSetup: args.signedSetup,
-			...registrationThreeRouteAuthorityPayload(args.authority)
-		})).ed25519;
-		const admissionReceipt = await admitDeferredNearRegistration(deferredNear, {
+		const admissionReceipt = await admitDeferredNearRegistration(args.deferredNear, {
 			routerOrigin: new URL(args.relayerUrl).origin,
 			authorization: {
 				kind: "bearer",
@@ -498,7 +491,7 @@ async function startEarlyNearRegistrationAdmission(args) {
 			outcome: "success"
 		});
 		return {
-			deferredNear,
+			deferredNear: args.deferredNear,
 			admissionReceipt
 		};
 	} catch (error) {
@@ -511,7 +504,7 @@ async function startEarlyNearRegistrationAdmission(args) {
 		throw error;
 	}
 }
-function requireEarlyNearRegistrationAdmission(admission) {
+function requireNearRegistrationAdmission(admission) {
 	if (!admission) throw new Error("Mixed registration did not start NEAR admission");
 	return admission;
 }
@@ -688,14 +681,6 @@ async function runEcdsaEnabledThreeRouteRegistrationCeremony(args) {
 				clientCeremony: args.clientCeremony
 			})
 		});
-		const earlyNearAdmission = args.signerPlanKind === "near_ed25519_and_evm_family_ecdsa" ? startEarlyNearRegistrationAdmission({
-			relayerUrl: args.relayerUrl,
-			registrationCeremonyId: ceremonyId,
-			signedSetup: args.signedSetup,
-			authority: args.authority,
-			traceContext: args.traceContext
-		}) : null;
-		earlyNearAdmission?.catch(ignoreNearCustodyFailure);
 		const responded = await measureStrictEcdsaCeremonyStep({
 			registrationTiming: args.registrationTiming,
 			bucket: "ecdsaRegistrationGatewayRespondMs",
@@ -716,6 +701,14 @@ async function runEcdsaEnabledThreeRouteRegistrationCeremony(args) {
 		});
 		if (responded.kind === "near_ed25519") throw new Error("ECDSA registration ceremony received an Ed25519-only respond result");
 		const deferredNear = responded.kind === "near_ed25519_and_evm_family_ecdsa" ? responded.ed25519 : null;
+		const nearAdmission = deferredNear ? startNearRegistrationAdmission({
+			relayerUrl: args.relayerUrl,
+			registrationCeremonyId: ceremonyId,
+			signedSetup: args.signedSetup,
+			deferredNear,
+			traceContext: args.traceContext
+		}) : null;
+		nearAdmission?.catch(ignoreNearCustodyFailure);
 		const verified = await measureStrictEcdsaCeremonyStep({
 			registrationTiming: args.registrationTiming,
 			bucket: "ecdsaRegistrationClientProofVerifyMs",
@@ -776,8 +769,7 @@ async function runEcdsaEnabledThreeRouteRegistrationCeremony(args) {
 						deferredNear
 					});
 					deferredNearCustodyWork = args.startDeferredNearCustody({
-						deferredNear,
-						earlyAdmission: requireEarlyNearRegistrationAdmission(earlyNearAdmission),
+						admission: requireNearRegistrationAdmission(nearAdmission),
 						establishedEvmCustodyCommit: bootstrap.preActivationCommitPayload
 					});
 					deferredNearCustodyWork.catch(ignoreNearCustodyFailure);
@@ -1075,14 +1067,14 @@ async function startDeferredNearWalletCustody(base, input) {
 			operation: "near_provisioning"
 		});
 		if (!pending || pending.operation !== "near_provisioning" || pending.phase !== "planned") throw new Error("NEAR registration has no planned continuation");
-		let earlyAdmissionReceipt;
+		let preAdmittedReceipt;
 		try {
-			const early = await input.earlyAdmission;
-			if (!sameRouterAbEd25519YaoRegistrationAdmissionRequestV1(early.deferredNear.admissionRequest, pending.admissionRequest)) throw new Error("Early NEAR admission changed the authorized request");
-			earlyAdmissionReceipt = early.admissionReceipt;
+			const admitted = await input.admission;
+			if (!sameRouterAbEd25519YaoRegistrationAdmissionRequestV1(admitted.deferredNear.admissionRequest, pending.admissionRequest)) throw new Error("NEAR admission changed the authorized request");
+			preAdmittedReceipt = admitted.admissionReceipt;
 		} catch (error) {
-			if (error instanceof Error && error.message === "Early NEAR admission changed the authorized request") throw error;
-			earlyAdmissionReceipt = void 0;
+			if (error instanceof Error && error.message === "NEAR admission changed the authorized request") throw error;
+			preAdmittedReceipt = void 0;
 		}
 		const { joined, admissionReceipt } = await continueNearRegistrationCustody({
 			pending,
@@ -1091,7 +1083,7 @@ async function startDeferredNearWalletCustody(base, input) {
 			credential: base.signedSetup,
 			traceContext: base.traceContext,
 			factorSecret,
-			...earlyAdmissionReceipt ? { admitted: earlyAdmissionReceipt } : {}
+			...preAdmittedReceipt ? { admitted: preAdmittedReceipt } : {}
 		});
 		outcome = "success";
 		return {

package/dist/esm/react/core/rpcClients/relayer/walletRegistration.js

@@ -29,7 +29,6 @@ const ROUTE_PAYLOAD_BREAKDOWN_MAX_DEPTH = 2;
 const ROUTE_PAYLOAD_BREAKDOWN_MAX_FIELDS = 64;
 const WALLET_REGISTRATION_SETUP_PATH = "/wallets/register/setup";
 const WALLET_REGISTRATION_RESPOND_PATH = "/wallets/register/respond";
-const WALLET_REGISTRATION_NEAR_ADMISSION_PATH = "/wallets/register/near-admission";
 const WALLET_REGISTRATION_ACTIVATE_PATH = "/wallets/register/activate";
 const WALLET_REGISTRATION_NEAR_PROVISIONING_PATH = "/wallets/register/near-provisioning";
 /** Managed environment id header for Router API `api_credentials` auth. */
@@ -1732,47 +1731,6 @@ async function respondWalletRegistration(args) {
 		onServerTiming: args.onServerTiming
 	}));
 }
-async function authorizeWalletRegistrationNearAdmission(args) {
-	const body = {
-		registrationCeremonyId: args.registrationCeremonyId,
-		signedSetup: args.signedSetup
-	};
-	switch (args.kind) {
-		case "passkey":
-			body.webauthn_registration = args.webauthnRegistration;
-			break;
-		case "email_otp":
-			body.emailOtpRegistrationProof = args.emailOtpRegistrationProof;
-			break;
-	}
-	const response = await postJson({
-		relayerUrl: args.relayerUrl,
-		path: WALLET_REGISTRATION_NEAR_ADMISSION_PATH,
-		headers: args.headers,
-		body
-	});
-	const responseName = "Wallet registration NEAR admission";
-	const record = requireWalletRegistrationResponseObject({
-		responseName,
-		field: "body",
-		value: response
-	});
-	assertWalletRegistrationResponseKeys(record, [
-		"ok",
-		"registrationCeremonyId",
-		"ed25519"
-	], responseName);
-	if (readWalletRegistrationResponseField(record, "ok", responseName) !== true) throw new Error(`${responseName} response is not successful`);
-	return {
-		ok: true,
-		registrationCeremonyId: requireResponseString({
-			responseName,
-			field: "registrationCeremonyId",
-			value: readWalletRegistrationResponseField(record, "registrationCeremonyId", responseName)
-		}),
-		ed25519: parseWalletRegistrationRespondEd25519DeferredWork(readWalletRegistrationResponseField(record, "ed25519", responseName))
-	};
-}
 function parseRegistrationEstablishedSessionResult(value, expectedWalletId) {
 	const responseName = "Wallet registration established session";
 	const parsed = parseRegistrationEstablishedSessionResultV2(value);
@@ -2362,6 +2320,6 @@ async function fetchWalletEcdsaKeyFactsInventoryWithWebAuthn(args) {
 	});
 }
 //#endregion
-export { activateWalletAddSignerEcdsa, activateWalletRegistration, authorizeWalletRegistrationNearAdmission, completeWalletRegistrationNearProvisioning, createWalletAddAuthMethodIntent, createWalletAddSignerIntent, fetchWalletEcdsaKeyFactsInventoryWithOperationCredential, fetchWalletEcdsaKeyFactsInventoryWithWebAuthn, finalizeWalletAddAuthMethod, finalizeWalletAddSigner, fundImplicitNearAccountForTesting, isEmailOtpWalletRegistrationFinalizeResponse, parseWalletRegistrationEcdsaDerivationRespond, requestAddAuthMethodEmailOtpChallenge, respondWalletAddSignerEcdsa, respondWalletRegistration, revokeWalletAuthMethod, setupWalletRegistration, startWalletAddAuthMethod, startWalletAddSigner };
+export { activateWalletAddSignerEcdsa, activateWalletRegistration, completeWalletRegistrationNearProvisioning, createWalletAddAuthMethodIntent, createWalletAddSignerIntent, fetchWalletEcdsaKeyFactsInventoryWithOperationCredential, fetchWalletEcdsaKeyFactsInventoryWithWebAuthn, finalizeWalletAddAuthMethod, finalizeWalletAddSigner, fundImplicitNearAccountForTesting, isEmailOtpWalletRegistrationFinalizeResponse, parseWalletRegistrationEcdsaDerivationRespond, requestAddAuthMethodEmailOtpChallenge, respondWalletAddSignerEcdsa, respondWalletRegistration, revokeWalletAuthMethod, setupWalletRegistration, startWalletAddAuthMethod, startWalletAddSigner };
 
 //# sourceMappingURL=walletRegistration.js.map