@seams/wallet 0.8.0 → 0.9.0

package/dist/esm/core/signingEngine/flows/signNear/shared/ed25519YaoNormalSigning.js

@@ -1,21 +1,23 @@
 import { parseCapabilityId, parseCapabilityOperationId, parsePrincipalId, parseTenantId } from "../../../../../shared-ts/src/authorization/capabilityKinds.js";
 import { base64UrlDecode, base64UrlEncode } from "../../../../../shared-ts/src/utils/base64.js";
 import { parseDigestB64u } from "../../../../../shared-ts/src/utils/canonicalPrimitives.js";
+import { WorkerResponseType } from "../../../../types/signer-worker.js";
+import { resolveNearNetwork } from "../../../../config/chains.js";
+import { PASSKEY_MANAGER_DEFAULT_CONFIGS } from "../../../../config/defaultConfigs.js";
+import { activeWalletSessionV1RecordsEqual } from "../../../../../shared-ts/src/device-linking/activeWalletSession.js";
 import { base58Decode } from "../../../../../shared-ts/src/utils/base58.js";
 import { ensureEd25519Prefix } from "../../../../../shared-ts/src/utils/near.js";
-import { resolveNearNetwork } from "../../../../config/chains.js";
 import { SigningSessionIds } from "../../../session/operationState/types.js";
 import { ActionType, fromActionArgsWasm } from "../../../../../shared-ts/src/near/actions.js";
-import { PASSKEY_MANAGER_DEFAULT_CONFIGS } from "../../../../config/defaultConfigs.js";
 import { emitEd25519SigningTiming } from "../../../session/operationState/trace.js";
+import { buildCapabilityOperationEnvelope, parseSigningOperationFingerprintDigest } from "../../../../../shared-ts/src/authorization/operationFingerprint.js";
+import { WalletSessionStatusReadScope } from "../../../../rpcClients/relayer/walletSessionAuthorizationStatus.js";
+import { buildRouterAbEd25519DelegateActionPrepareRequestV2, buildRouterAbEd25519NearTransactionPrepareRequestV2, buildRouterAbEd25519Nep413PrepareRequestV2, buildRouterAbEd25519NormalSigningFinalizeRequestV2, finalizeRouterAbNormalSigningV2, prepareRouterAbNormalSigningV2, routerAbCanonicalWireBytesToB64u, routerAbNormalSigningActionFingerprint } from "../../../../rpcClients/relayer/routerAbNormalSigning.js";
 import { parseThresholdEd25519NearTransaction, thresholdEd25519NearTransactionOperationFingerprint } from "../../../../../shared-ts/src/threshold/ed25519OperationFingerprint.js";
-import { WorkerResponseType } from "../../../../types/signer-worker.js";
 import { buildThresholdEd25519DelegateSigningPayloadWasm, buildThresholdEd25519NearTxUnsignedBorshWasm, decodeThresholdEd25519SignedNearTxBorshWasm, finalizeThresholdEd25519DelegateFromSignatureWasm, finalizeThresholdEd25519NearTxFromSignatureWasm } from "../../../chains/near/nearSignerWasm.js";
-import { buildRouterAbEd25519DelegateActionPrepareRequestV2, buildRouterAbEd25519NearTransactionPrepareRequestV2, buildRouterAbEd25519Nep413PrepareRequestV2, buildRouterAbEd25519NormalSigningFinalizeRequestV2, finalizeRouterAbNormalSigningV2, prepareRouterAbNormalSigningV2, routerAbCanonicalWireBytesToB64u, routerAbNormalSigningActionFingerprint } from "../../../../rpcClients/relayer/routerAbNormalSigning.js";
 import { requireRouterAbNormalSigningPrepareMatchesRequest, requireRouterAbNormalSigningResponseMatchesRequest } from "../../../../rpcClients/relayer/routerAbNormalSigningValidation.js";
 import { requireRouterAbEd25519NormalSigningReadyState } from "../../../session/warmCapabilities/routerAbWalletSessionCredential.js";
 import { nearEd25519YaoMaterialActivationFromMetadata } from "../../../session/material/nearEd25519YaoMaterialActivation.js";
-import { buildCapabilityOperationEnvelope, parseSigningOperationFingerprintDigest } from "../../../../../shared-ts/src/authorization/operationFingerprint.js";
 import { requireNearOperationStepUpMaterialActivation } from "./operationStepUpPreparation.js";
 import { issueEd25519OperationStepUpAuthorization } from "../../../threshold/ed25519/walletSession.js";
 //#region src/core/signingEngine/flows/signNear/shared/ed25519YaoNormalSigning.ts
@@ -292,12 +294,30 @@ async function finalizeRouterAbEd25519NormalSigningSignature(args, operationId)
 		relayerUrl: args.walletSessionState.relayerUrl
 	} : args.materialFacts;
 	const prepareStartedAt = performance.now();
-	const prepareResponse = await prepareRouterAbNormalSigningV2({
+	const prepared = args.startedResponse ? await args.startedResponse : await prepareRouterAbNormalSigningV2({
 		relayServerUrl: materialFacts.relayerUrl,
 		credential: args.credential,
 		request: args.prepare.request
 	});
 	emitEd25519SigningTiming(operationId, "prepare", prepareStartedAt);
+	if (args.authorization === "reusable_wallet_session") {
+		if (prepared.kind !== "reusable_wallet_session") throw new Error("Ed25519 prepare returned the wrong authorization kind");
+		const current = await args.sessionCoordinator.resolveActiveAuthorizedRouterAbEd25519WalletSessionState({
+			state: args.walletSessionState,
+			nowMs: Date.now()
+		});
+		const status = prepared.sessionStatus;
+		if (!current || status.walletSessionId !== current.walletSessionOperationCredential.walletSessionId || status.quotaId !== current.walletSessionAuthorization.quotaId || status.quotaLifecycle !== "active" || status.remainingUses <= 0 || status.expiresAtMs <= Date.now() || !activeWalletSessionV1RecordsEqual(status.authorization, current.walletSessionAuthorization)) throw new Error("Wallet Session authority changed before Ed25519 client signing");
+		const statusOptions = {
+			relayerUrl: materialFacts.relayerUrl,
+			operationCredential: current.walletSessionOperationCredential
+		};
+		await WalletSessionStatusReadScope.fromPrepare(statusOptions, status).read(statusOptions, {
+			walletSessionId: status.walletSessionId,
+			quotaId: status.quotaId
+		});
+	} else if (prepared.kind !== "operation_step_up") throw new Error("Ed25519 step-up prepare returned a reusable Wallet Session");
+	const prepareResponse = prepared.signing;
 	requireRouterAbNormalSigningPrepareMatchesRequest({
 		request: args.prepare.request,
 		signingPayloadDigest: args.prepare.admissionMaterial.signingPayloadDigest,
@@ -351,7 +371,7 @@ async function finalizeRouterAbEd25519NormalSigningSignature(args, operationId)
 		signerPublicKey: args.thresholdKeyMaterial.publicKey
 	};
 }
-async function buildRouterAbEd25519SignatureOnlyPrepareRequest(args) {
+async function buildRouterAbEd25519SignatureOnlyPrepareRequestForScope(args) {
 	const nearNetworkId = normalizeNearNetworkId(args.ctx);
 	return args.intent.kind === "nep413_message_v1" ? await buildRouterAbEd25519Nep413PrepareRequestV2({
 		scope: args.scope,
@@ -364,7 +384,7 @@ async function buildRouterAbEd25519SignatureOnlyPrepareRequest(args) {
 		message: args.intent.message,
 		recipient: args.intent.recipient,
 		nonce: args.intent.nonce,
-		...args.intent.state ? { callbackUrl: args.intent.state } : {},
+		callbackUrl: args.intent.callbackUrl,
 		expectedSigningDigestB64u: args.signingDigestB64u
 	}) : await buildRouterAbEd25519DelegateActionPrepareRequestV2({
 		scope: args.scope,
@@ -403,7 +423,7 @@ async function prepareRouterAbEd25519SignatureOnlyOperationStepUp(args) {
 		walletId: args.walletId,
 		operationId: args.operationId
 	});
-	const prepare = await buildRouterAbEd25519SignatureOnlyPrepareRequest({
+	const prepare = await buildRouterAbEd25519SignatureOnlyPrepareRequestForScope({
 		ctx: args.ctx,
 		thresholdSessionId: args.thresholdSessionId,
 		scope,
@@ -549,6 +569,36 @@ async function tryFinalizeRouterAbEd25519SignatureOnlyNormalSigning(args) {
 			})
 		};
 	}
+	const started = args.startedPrepare && args.startedPrepare.displayDigest === args.displayDigest && args.startedPrepare.signingDigestB64u === args.signingDigestB64u ? args.startedPrepare : null;
+	if (args.startedPrepare && !started) abandonRouterAbEd25519StartedPrepare(args.startedPrepare);
+	const prepare = started?.prepare ?? await buildRouterAbEd25519SignatureOnlyPrepareRequest(args);
+	if (!prepare) return null;
+	return {
+		kind: "router_ab_ed25519_signature_only_normal_signing_result_v1",
+		authorization: "reusable_wallet_session",
+		...await tryFinalizeRouterAbEd25519NormalSigningSignature({
+			thresholdSessionId: args.thresholdSessionId,
+			walletSessionState: args.walletSessionState,
+			sessionCoordinator: args.sessionCoordinator,
+			thresholdKeyMaterial: args.thresholdKeyMaterial,
+			walletId: args.walletId,
+			nearAccountId: args.nearAccountId,
+			activeClient: args.activeClient,
+			signingDigestB64u: args.signingDigestB64u,
+			signingPayloadLabel: "signature-only payload digest",
+			prepare,
+			startedResponse: started?.response,
+			credential: requireRouterAbEd25519NormalSigningReadyState({
+				state: args.walletSessionState,
+				thresholdSessionId: args.thresholdSessionId,
+				nearAccountId: args.nearAccountId,
+				thresholdKeyMaterial: args.thresholdKeyMaterial
+			}).credential,
+			authorization: args.authorization.kind
+		})
+	};
+}
+async function buildRouterAbEd25519SignatureOnlyPrepareRequest(args) {
 	const scope = buildRouterAbNormalSigningScope({
 		activeClient: args.activeClient,
 		walletSessionState: args.walletSessionState,
@@ -556,7 +606,7 @@ async function tryFinalizeRouterAbEd25519SignatureOnlyNormalSigning(args) {
 		operationId: args.operationId
 	});
 	if (!scope) return null;
-	const prepare = await buildRouterAbEd25519SignatureOnlyPrepareRequest({
+	return await buildRouterAbEd25519SignatureOnlyPrepareRequestForScope({
 		ctx: args.ctx,
 		thresholdSessionId: args.thresholdSessionId,
 		scope,
@@ -571,29 +621,41 @@ async function tryFinalizeRouterAbEd25519SignatureOnlyNormalSigning(args) {
 		signingDigestB64u: args.signingDigestB64u,
 		intent: args.intent
 	});
+}
+/**
+* Sends the prepare of a warm-session signature before the user confirms.
+* The caller shows the dialog meanwhile and passes the result to the
+* signature; a result that is never passed on expires with its lease and
+* keeps the quota use it claimed.
+*/
+async function startRouterAbEd25519SignatureOnlyPrepare(args) {
+	const prepare = await buildRouterAbEd25519SignatureOnlyPrepareRequest(args);
+	if (!prepare) return null;
+	const ready = requireRouterAbEd25519NormalSigningReadyState({
+		state: args.walletSessionState,
+		thresholdSessionId: args.thresholdSessionId,
+		nearAccountId: args.nearAccountId,
+		thresholdKeyMaterial: args.thresholdKeyMaterial
+	});
+	const sentAt = performance.now();
+	const response = prepareRouterAbNormalSigningV2({
+		relayServerUrl: args.walletSessionState.relayerUrl,
+		credential: ready.credential,
+		request: prepare.request
+	});
+	response.catch(() => {});
+	emitEd25519SigningTiming(String(args.operationId), "prepare_sent", sentAt);
 	return {
-		kind: "router_ab_ed25519_signature_only_normal_signing_result_v1",
-		authorization: "reusable_wallet_session",
-		...await tryFinalizeRouterAbEd25519NormalSigningSignature({
-			thresholdSessionId: args.thresholdSessionId,
-			walletSessionState: args.walletSessionState,
-			thresholdKeyMaterial: args.thresholdKeyMaterial,
-			walletId: args.walletId,
-			nearAccountId: args.nearAccountId,
-			activeClient: args.activeClient,
-			signingDigestB64u: args.signingDigestB64u,
-			signingPayloadLabel: "signature-only payload digest",
-			prepare,
-			credential: requireRouterAbEd25519NormalSigningReadyState({
-				state: args.walletSessionState,
-				thresholdSessionId: args.thresholdSessionId,
-				nearAccountId: args.nearAccountId,
-				thresholdKeyMaterial: args.thresholdKeyMaterial
-			}).credential,
-			authorization: args.authorization.kind
-		})
+		prepare,
+		displayDigest: args.displayDigest,
+		signingDigestB64u: args.signingDigestB64u,
+		response
 	};
 }
+/** Leaves a started prepare to expire with its lease. */
+function abandonRouterAbEd25519StartedPrepare(started) {
+	started.response.catch(() => {});
+}
 async function prepareRouterAbEd25519NearTransactionOperationStepUp(args) {
 	const unsigned = await buildThresholdEd25519NearTxUnsignedBorshWasm({
 		txSigningRequest: args.txSigningRequest,
@@ -758,6 +820,7 @@ async function tryFinalizeRouterAbEd25519NearTransactionNormalSigning(args) {
 	}) : await tryFinalizeRouterAbEd25519NormalSigningSignature({
 		thresholdSessionId: args.thresholdSessionId,
 		walletSessionState: args.walletSessionState,
+		sessionCoordinator: args.sessionCoordinator,
 		thresholdKeyMaterial: args.thresholdKeyMaterial,
 		walletId: args.walletId,
 		nearAccountId: args.nearAccountId,
@@ -808,6 +871,6 @@ async function tryFinalizeRouterAbEd25519NearTransactionNormalSigning(args) {
 	};
 }
 //#endregion
-export { buildNearEd25519OperationStepUpProof, buildNearEmailOtpEd25519OperationStepUpProof, finalizeThresholdEd25519DelegateSignatureResult, prepareRouterAbEd25519NearTransactionOperationStepUp, prepareRouterAbEd25519SignatureOnlyOperationStepUp, requireIssuedNearEd25519OperationStepUpAuthorization, requireNearEd25519OperationStepUpProof, tryFinalizeRouterAbEd25519NearTransactionNormalSigning, tryFinalizeRouterAbEd25519SignatureOnlyNormalSigning };
+export { abandonRouterAbEd25519StartedPrepare, buildNearEd25519OperationStepUpProof, buildNearEmailOtpEd25519OperationStepUpProof, finalizeThresholdEd25519DelegateSignatureResult, prepareRouterAbEd25519NearTransactionOperationStepUp, prepareRouterAbEd25519SignatureOnlyOperationStepUp, requireIssuedNearEd25519OperationStepUpAuthorization, requireNearEd25519OperationStepUpProof, startRouterAbEd25519SignatureOnlyPrepare, tryFinalizeRouterAbEd25519NearTransactionNormalSigning, tryFinalizeRouterAbEd25519SignatureOnlyNormalSigning };
 
 //# sourceMappingURL=ed25519YaoNormalSigning.js.map

package/dist/esm/core/signingEngine/flows/signNear/shared/implicitAccountFundingPort.js

@@ -11,14 +11,7 @@ function registerNearImplicitAccountFunder(input) {
 function clearNearImplicitAccountFunder(requestId) {
 	pendingFunders.delete(String(requestId || "").trim());
 }
-const nearImplicitAccountFundingPort = { async fund(input) {
-	const requestId = requireFunderRequestId(input.requestId);
-	const funder = pendingFunders.get(requestId);
-	if (!funder) throw new Error("[SigningEngine][near] implicit-account funding is unavailable");
-	pendingFunders.delete(requestId);
-	return await funder(input.request);
-} };
 //#endregion
-export { clearNearImplicitAccountFunder, nearImplicitAccountFundingPort, registerNearImplicitAccountFunder };
+export { clearNearImplicitAccountFunder, registerNearImplicitAccountFunder };
 
 //# sourceMappingURL=implicitAccountFundingPort.js.map

package/dist/esm/core/signingEngine/flows/signNear/shared/operationStepUpPreparation.js

@@ -1,6 +1,4 @@
 import { mpcMaterialActivationRefsEqual } from "../../../../../shared-ts/src/utils/domainIds.js";
-import { secureRandomBase64Url } from "../../../../../shared-ts/src/utils/secureRandomId.js";
-import { computeCapabilityOperationFingerprintDigest } from "../../../../../shared-ts/src/authorization/operationFingerprint.js";
 import { parseNearOperationStepUpPreparationRef } from "../../../interfaces/operationStepUpPreparation.js";
 //#region src/core/signingEngine/flows/signNear/shared/operationStepUpPreparation.ts
 const pendingBuilders = /* @__PURE__ */ new Map();
@@ -16,41 +14,6 @@ function registerNearOperationStepUpBuilder(input) {
 function clearNearOperationStepUpBuilder(requestId) {
 	pendingBuilders.delete(String(requestId || "").trim());
 }
-const nearOperationStepUpPreparationPort = {
-	async prepare(input) {
-		const requestId = requirePreparationIdentity(input.requestId, "requestId");
-		const builder = pendingBuilders.get(requestId);
-		if (!builder) throw new Error("[SigningEngine][near] operation step-up preparation is unavailable");
-		pendingBuilders.delete(requestId);
-		const prepared = input.kind === "near_transaction" ? await builder({
-			kind: "near_transaction",
-			transactionContext: input.transactionContext,
-			operationId: requirePreparationIdentity(input.operationId, "operationId"),
-			operationFingerprint: requirePreparationIdentity(input.operationFingerprint, "operationFingerprint"),
-			displayDigest: requirePreparationIdentity(input.displayDigest, "displayDigest")
-		}) : await builder({
-			kind: "near_signature_only",
-			displayDigest: requirePreparationIdentity(input.displayDigest, "displayDigest")
-		});
-		const challengeB64u = await computeCapabilityOperationFingerprintDigest(prepared.envelope);
-		const ref = parseNearOperationStepUpPreparationRef({
-			kind: "near_operation_step_up_prepared_v1",
-			handle: `near-operation-step-up:${secureRandomBase64Url(24, "operation step-up handle")}`,
-			challengeB64u
-		});
-		preparedOperations.set(ref.handle, {
-			requestId,
-			operation: prepared.operation
-		});
-		return ref;
-	},
-	cancel(input) {
-		const requestId = String(input.requestId || "").trim();
-		if (requestId) pendingBuilders.delete(requestId);
-		if (input.handle) preparedOperations.delete(input.handle);
-		for (const [handle, prepared] of preparedOperations) if (prepared.requestId === requestId) preparedOperations.delete(handle);
-	}
-};
 function consumePreparedNearOperationStepUp(input) {
 	const requestId = requirePreparationIdentity(input.requestId, "requestId");
 	const handle = requirePreparationIdentity(parseNearOperationStepUpPreparationRef(input.ref).handle, "operation step-up handle");
@@ -63,6 +26,6 @@ function requireNearOperationStepUpMaterialActivation(args) {
 	if (!mpcMaterialActivationRefsEqual(args.expected, args.actual)) throw new Error("[SigningEngine][near] operation assertion changed material activation");
 }
 //#endregion
-export { clearNearOperationStepUpBuilder, consumePreparedNearOperationStepUp, nearOperationStepUpPreparationPort, registerNearOperationStepUpBuilder, requireNearOperationStepUpMaterialActivation };
+export { clearNearOperationStepUpBuilder, consumePreparedNearOperationStepUp, registerNearOperationStepUpBuilder, requireNearOperationStepUpMaterialActivation };
 
 //# sourceMappingURL=operationStepUpPreparation.js.map

package/dist/esm/core/signingEngine/flows/signNear/shared/signatureOnlySigning.js

@@ -1,14 +1,15 @@
 import { SigningSessionIds, SigningSessionPlanKind } from "../../../session/operationState/types.js";
 import { nearEd25519SignerBindingFromBoundaryFields } from "../../../session/identity/exactSigningLaneIdentity.js";
+import { computeUiIntentDigestFromNep413 } from "../../../../../utils/intentDigest.js";
+import { parseSigningOperationFingerprintDigest } from "../../../../../shared-ts/src/authorization/operationFingerprint.js";
 import { SigningOperationCommandKind, runSigningOperationCommand } from "../../shared/signingStateMachine.js";
-import { requireNearStepUpAuth, signingAuthPlanForNearMaterialRequirement } from "../requireNearStepUpAuth.js";
 import { buildSigningConfirmationAuthParams } from "../../../stepUpConfirmation/confirmOperation.js";
 import { confirmationConfigForSigningAuthPlan, runSigningConfirmationCommand } from "../../shared/signingConfirmation.js";
+import { requireNearStepUpAuth, signingAuthPlanForNearMaterialRequirement } from "../requireNearStepUpAuth.js";
 import { emitNearSigningConfirmationProgress } from "./confirmationProgress.js";
 import { buildNearEd25519StepUpAuthorization } from "../stepUpAuthorization.js";
-import { parseSigningOperationFingerprintDigest } from "../../../../../shared-ts/src/authorization/operationFingerprint.js";
 import { clearNearOperationStepUpBuilder, consumePreparedNearOperationStepUp, registerNearOperationStepUpBuilder } from "./operationStepUpPreparation.js";
-import { buildNearEd25519OperationStepUpProof, prepareRouterAbEd25519SignatureOnlyOperationStepUp, requireIssuedNearEd25519OperationStepUpAuthorization, tryFinalizeRouterAbEd25519SignatureOnlyNormalSigning } from "./ed25519YaoNormalSigning.js";
+import { abandonRouterAbEd25519StartedPrepare, buildNearEd25519OperationStepUpProof, prepareRouterAbEd25519SignatureOnlyOperationStepUp, requireIssuedNearEd25519OperationStepUpAuthorization, startRouterAbEd25519SignatureOnlyPrepare, tryFinalizeRouterAbEd25519SignatureOnlyNormalSigning } from "./ed25519YaoNormalSigning.js";
 import { nearOperationStepUpMaterialFacts, prepareNearOperationStepUpMaterial, resolveConfirmedNearEd25519YaoCapability, resolveNearOperationStepUpMaterial } from "./ed25519YaoCapabilityResolution.js";
 import { planSigningSession } from "../../../session/planning/planner.js";
 import { buildNearSigningSessionAuthPlan, resolveNearSigningSessionAuthContext } from "./signingSessionAuthMode.js";
@@ -239,9 +240,49 @@ function authorizeNearSignatureOnlyOperation(operation, stepUp, confirmation) {
 		...requireOperationStepUpMaterial(operation.label, stepUp.operationStepUp)
 	};
 }
-async function resolveNearSignatureOnlySigningMaterial(operation, authorization) {
+/**
+* Sends the server prepare of a warm-session NEP-413 signature while the
+* confirmation dialog is open. The request is bound to the digest the dialog
+* shows and to the signing digest. A confirmation that returns another digest,
+* a declined confirmation or a step-up leaves the prepare to expire with its
+* lease; the quota use it claimed stays spent.
+*/
+async function startNearSignatureOnlyPrepare(operation, stepUp, signingSessionCoordinator) {
+	if (stepUp.preparedStepUp.kind !== "warm_session" || operation.intent.kind !== "nep413_message_v1") return null;
+	const resolved = await resolveConfirmedNearEd25519YaoCapability({
+		preparation: operation.preparation,
+		executor: operation.executor
+	});
+	const walletSessionState = requireAuthorizedWalletSessionState(await signingSessionCoordinator.resolveActiveAuthorizedRouterAbEd25519WalletSessionState({
+		state: resolved.walletSessionState,
+		nowMs: Date.now()
+	}));
+	const started = await startRouterAbEd25519SignatureOnlyPrepare({
+		ctx: operation.ctx,
+		thresholdSessionId: resolved.thresholdSessionId,
+		activeClient: resolved.material.activeClient,
+		walletSessionState,
+		walletId: operation.walletId,
+		thresholdKeyMaterial: operation.thresholdKeyMaterial,
+		nearAccountId: operation.nearAccountId,
+		operationId: operation.signingOperation.operationId,
+		operationFingerprint: operation.signingOperation.operationFingerprint,
+		displayDigest: await computeUiIntentDigestFromNep413({
+			nearAccountId: operation.nearAccountId,
+			recipient: operation.intent.recipient,
+			message: operation.intent.message
+		}),
+		signingDigestB64u: await operation.computeSigningDigestB64u(),
+		intent: operation.intent
+	});
+	return started ? {
+		resolved,
+		started
+	} : null;
+}
+async function resolveNearSignatureOnlySigningMaterial(operation, authorization, startedPrepare = null) {
 	if (authorization.kind === "warm_session") {
-		const resolved = await resolveConfirmedNearEd25519YaoCapability({
+		const resolved = startedPrepare?.resolved ?? await resolveConfirmedNearEd25519YaoCapability({
 			preparation: operation.preparation,
 			executor: operation.executor
 		});
@@ -249,9 +290,11 @@ async function resolveNearSignatureOnlySigningMaterial(operation, authorization)
 			kind: "warm_session",
 			thresholdSessionId: resolved.thresholdSessionId,
 			displayDigest: authorization.displayDigest,
-			resolved
+			resolved,
+			startedPrepare: startedPrepare?.started
 		};
 	}
+	if (startedPrepare) abandonRouterAbEd25519StartedPrepare(startedPrepare.started);
 	return {
 		kind: "operation_step_up",
 		thresholdSessionId: nearOperationStepUpMaterialFacts(authorization.material).thresholdSessionId,
@@ -276,6 +319,7 @@ async function signNearSignatureOnlyOperation(operation, material, signingSessio
 		ctx: operation.ctx,
 		thresholdSessionId: material.thresholdSessionId,
 		activeClient: material.resolved.material.activeClient,
+		sessionCoordinator: signingSessionCoordinator,
 		walletSessionState: requireAuthorizedWalletSessionState(await signingSessionCoordinator.resolveActiveAuthorizedRouterAbEd25519WalletSessionState({
 			state: material.resolved.walletSessionState,
 			nowMs: Date.now()
@@ -288,7 +332,8 @@ async function signNearSignatureOnlyOperation(operation, material, signingSessio
 		displayDigest: material.displayDigest,
 		signingDigestB64u,
 		intent: operation.intent,
-		authorization: { kind: "reusable_wallet_session" }
+		authorization: { kind: "reusable_wallet_session" },
+		startedPrepare: material.startedPrepare
 	}) : await tryFinalizeRouterAbEd25519SignatureOnlyNormalSigning({
 		ctx: operation.ctx,
 		thresholdSessionId: material.thresholdSessionId,
@@ -336,6 +381,6 @@ async function runNearSignatureOnlySignCommand(operation, execute) {
 	});
 }
 //#endregion
-export { authorizeNearSignatureOnlyOperation, confirmNearSignatureOnlyOperation, prepareNearSignatureOnlyStepUp, resolveNearSignatureOnlySigningMaterial, resolveNearSignatureOnlySigningPlans, runNearSignatureOnlySignCommand, signNearSignatureOnlyOperation };
+export { authorizeNearSignatureOnlyOperation, confirmNearSignatureOnlyOperation, prepareNearSignatureOnlyStepUp, resolveNearSignatureOnlySigningMaterial, resolveNearSignatureOnlySigningPlans, runNearSignatureOnlySignCommand, signNearSignatureOnlyOperation, startNearSignatureOnlyPrepare };
 
 //# sourceMappingURL=signatureOnlySigning.js.map

package/dist/esm/core/signingEngine/flows/signNear/signDelegate.js

@@ -1,16 +1,16 @@
+import { WorkerResponseType } from "../../../types/signer-worker.js";
+import { resolveNearNetwork, resolvePrimaryNearRpcUrl } from "../../../config/chains.js";
+import { normalizeThresholdEd25519ParticipantIds } from "../../../../shared-ts/src/threshold/participants.js";
+import { PASSKEY_MANAGER_DEFAULT_CONFIGS } from "../../../config/defaultConfigs.js";
 import { ensureEd25519Prefix } from "../../../../shared-ts/src/utils/near.js";
 import { toAccountId } from "../../../types/accountIds.js";
 import { SigningEventPhase, createSigningFlowEvent } from "../../../types/sdkSentEvents.js";
-import { resolveNearNetwork, resolvePrimaryNearRpcUrl } from "../../../config/chains.js";
-import { normalizeThresholdEd25519ParticipantIds } from "../../../../shared-ts/src/threshold/participants.js";
 import { SigningOperationIntent, SigningSessionIds } from "../../session/operationState/types.js";
 import { isWarmSessionSigningAuthPlan } from "../../stepUpConfirmation/types.js";
-import { PASSKEY_MANAGER_DEFAULT_CONFIGS } from "../../../config/defaultConfigs.js";
+import { SigningOperationCommandKind, runSigningOperationCommand } from "../shared/signingStateMachine.js";
 import { resolveNearSigningMaterials } from "./shared/signingMaterials.js";
 import { buildNearDelegateSigningPayloads } from "../../chains/near/payloads.js";
 import { parseThresholdEd25519NearAction, thresholdEd25519DelegateActionOperationFingerprint } from "../../../../shared-ts/src/threshold/ed25519OperationFingerprint.js";
-import { SigningOperationCommandKind, runSigningOperationCommand } from "../shared/signingStateMachine.js";
-import { WorkerResponseType } from "../../../types/signer-worker.js";
 import { computeThresholdEd25519DelegateSigningDigestWasm } from "../../chains/near/nearSignerWasm.js";
 import { finalizeThresholdEd25519DelegateSignatureResult } from "./shared/ed25519YaoNormalSigning.js";
 import { toPublicKeyString } from "../../workerManager/validation.js";

package/dist/esm/core/signingEngine/flows/signNear/signNear.js

@@ -1,29 +1,29 @@
+import { secureRandomBase64Url } from "../../../../shared-ts/src/utils/secureRandomId.js";
+import { toWalletId } from "../../interfaces/ecdsaChainTarget.js";
+import { parsePasskeyWalletAuthAuthority, walletAuthAuthorityRef } from "../../../../shared-ts/src/utils/walletAuthAuthority.js";
 import { toAccountId } from "../../../types/accountIds.js";
 import { SENSITIVE_OPERATION_POLICIES, SIGNER_AUTH_METHODS } from "../../../../shared-ts/src/utils/signerDomain.js";
 import { SIGNING_SESSION_EXPIRY_DETECTION_SOURCES, SigningEventPhase, createSigningFlowEvent } from "../../../types/sdkSentEvents.js";
-import { toWalletId } from "../../interfaces/ecdsaChainTarget.js";
 import { signingLaneAuthBindingKey, signingLaneAuthMethod } from "../../session/identity/signingLaneAuthBinding.js";
 import { SigningOperationIntent, SigningSessionIds, SigningSessionPlanKind } from "../../session/operationState/types.js";
-import { exactEd25519SigningLaneIdentityFromSelectedLane, exactSigningLaneIdentityKey, nearEd25519SignerBindingFromBoundaryFields } from "../../session/identity/exactSigningLaneIdentity.js";
-import { secureRandomBase64Url } from "../../../../shared-ts/src/utils/secureRandomId.js";
 import { parseSignerSlot } from "../../../../shared-ts/src/utils/signerSlot.js";
-import { parsePasskeyWalletAuthAuthority, walletAuthAuthorityRef } from "../../../../shared-ts/src/utils/walletAuthAuthority.js";
+import { exactEd25519SigningLaneIdentityFromSelectedLane, exactSigningLaneIdentityKey, nearEd25519SignerBindingFromBoundaryFields } from "../../session/identity/exactSigningLaneIdentity.js";
+import { demoEmailOtpCodeFromDelivery } from "../../session/emailOtp/challengeDelivery.js";
 import { reviewAdmissionForBinding } from "../../uiConfirm/transactionReviewAdmission.js";
 import { SigningAuthPlanKind } from "../../stepUpConfirmation/types.js";
-import { buildNearPreparationDisplayModel } from "../../chains/near/display.js";
 import { createSigningBoundaryTraceEvent, emitEd25519SigningTiming, emitSigningBoundaryTrace, emitSigningLaneResolutionTrace, emitSigningPlannerDecisionTrace } from "../../session/operationState/trace.js";
 import { createSigningOperationStateRef } from "../shared/signingStateMachine.js";
 import { signingAuthPlanFromSigningSessionPlan } from "../shared/signingConfirmation.js";
-import { requiredNearTransactionSignatureUses } from "./signatureUses.js";
 import { WalletSessionQuotaAdmissionError, buildWalletSessionQuotaAdmissionQueueKey, classifyWalletSessionQuotaAdmissionFailure, decideWalletSessionQuotaAdmissionFailure, waitForWalletSessionQuotaAdmissionRetry } from "../../session/operationState/authorizationAdmission.js";
+import { receiveTransactionIntent, recordAvailableSigningLanesRead, selectNearEd25519MaterialCandidate, selectTransactionLaneFromAvailableLanes } from "../../session/identity/selectLane.js";
+import { classifyTransactionReadiness, prepareTransactionOperationFromReadiness, prepareTransactionSigningOperation } from "../../session/operationState/transactionState.js";
 import { walletSessionFailureFromError } from "../../session/lifecycle/walletSessionFailure.js";
-import { resolveNearSigningSessionAuthContext } from "./shared/signingSessionAuthMode.js";
-import { signNearWithUiConfirm } from "./nearSigningFlow.js";
 import { resolveThresholdCommitQueueKey } from "../../threshold/commitQueueShared.js";
-import { demoEmailOtpCodeFromDelivery } from "../../session/emailOtp/challengeDelivery.js";
 import { requireAuthoritativeExpiredWalletSessionAuthorizationBoundary } from "../../session/identity/clientSessionPersistenceState.js";
-import { receiveTransactionIntent, recordAvailableSigningLanesRead, selectNearEd25519MaterialCandidate, selectTransactionLaneFromAvailableLanes } from "../../session/identity/selectLane.js";
-import { classifyTransactionReadiness, prepareTransactionOperationFromReadiness, prepareTransactionSigningOperation } from "../../session/operationState/transactionState.js";
+import { buildNearPreparationDisplayModel } from "../../chains/near/display.js";
+import { requiredNearTransactionSignatureUses } from "./signatureUses.js";
+import { resolveNearSigningSessionAuthContext } from "./shared/signingSessionAuthMode.js";
+import { signNearWithUiConfirm } from "./nearSigningFlow.js";
 //#region src/core/signingEngine/flows/signNear/signNear.ts
 function nearOwnerOperationAuthorizationDecisionFromError(error) {
 	if (!(error instanceof WalletSessionQuotaAdmissionError)) return void 0;
@@ -71,10 +71,10 @@ async function signNear(deps, request) {
 				getSignerWorkerContext: reviewedNearContext.bind(null, context, admission.beforeSigning)
 			};
 		}
-		return await signTransactionWithActions(deps, request.args);
+		return await signTransaction(deps, request.args);
 	}
 	if (request.kind === "delegateAction") return await signDelegateAction(deps, request.args);
-	if (request.kind === "nep413") return await signNEP413Message(deps, request.args);
+	if (request.kind === "nep413") return await signMessage(deps, request.args);
 	throw new Error(`[SigningEngine] unsupported near signing intent: ${String(request.kind || "")}`);
 }
 function createNearTransactionSigningOperationId() {
@@ -166,14 +166,6 @@ function requireResolvedNearEd25519SigningLane(lane) {
 		thresholdSessionId: SigningSessionIds.thresholdEd25519Session(thresholdSessionId)
 	};
 }
-function walletSessionStatusIdentityFromNearPreparation(preparation) {
-	if (preparation.authorization.kind !== "authorized") return null;
-	const authorization = preparation.authorization.authorization;
-	return {
-		walletSessionId: authorization.operationCredential.walletSessionId,
-		quotaId: authorization.session.quotaId
-	};
-}
 async function resolveNearTransactionWalletAuth(args) {
 	const preparedOperation = args.preparedOperation;
 	const lane = preparedOperation.lane;
@@ -455,12 +447,9 @@ async function withThresholdEd25519CommitQueue(args) {
 	});
 }
 async function prepareNearAuthorizationRequiredTransaction(args) {
+	const availableLanes = args.availableLanes;
 	const materialSelection = selectNearEd25519MaterialCandidate({
-		availableLanes: await readNearEd25519AvailableSigningLanes({
-			deps: args.deps,
-			commandSubject: args.commandSubject,
-			authMethod: null
-		}),
+		availableLanes,
 		intent: nearEd25519TransactionSigningIntent({
 			commandSubject: args.commandSubject,
 			signerSlot: args.input.signerSlot,
@@ -627,18 +616,14 @@ async function prepareNearEd25519TransactionOperation(args) {
 	const transactionReadinessState = classifyTransactionReadiness(args.selectedLane, transactionReadinessFromPlannerInput({
 		readiness: readiness.readiness,
 		expiresAtMs: readiness.expiresAtMs,
-		remainingUses: readiness.remainingUses,
-		usesNeeded: operationUsesNeeded
+		remainingUses: readiness.remainingUses
 	}));
 	const transactionOperation = prepareTransactionOperationFromReadiness(transactionReadinessState);
 	const identity = requireResolvedNearEd25519SigningLane(lane);
-	const trustedStatusAuth = walletSessionStatusIdentityFromNearPreparation(args.preparation);
 	const readinessInput = {
 		readiness: readiness.readiness,
 		expiresAtMs: readiness.expiresAtMs,
-		remainingUses: readiness.remainingUses,
-		usesNeeded: operationUsesNeeded,
-		...trustedStatusAuth ? { trustedStatusAuth } : {}
+		remainingUses: readiness.remainingUses
 	};
 	return {
 		lane,
@@ -659,11 +644,7 @@ async function prepareNearEd25519TransactionOperation(args) {
 async function prepareNearEd25519TransactionSigningSession(args) {
 	const nearAccountId = args.commandSubject.nearAccount.accountId;
 	const operationUsesNeeded = requiredNearTransactionSignatureUses(args.input.transaction);
-	let availableLanes = await readNearEd25519AvailableSigningLanes({
-		deps: args.deps,
-		commandSubject: args.commandSubject,
-		authMethod: null
-	});
+	let availableLanes = args.availableLanes;
 	let selectedLane = selectSelectedEd25519LaneFromAvailableLanes({
 		commandSubject: args.commandSubject,
 		availableLanes,
@@ -746,6 +727,7 @@ async function prepareNearEd25519TransactionSigningSession(args) {
 	});
 	return {
 		preparation: initialMaterialBoundary.preparation,
+		executor: initialMaterialBoundary.executor,
 		signingAuthPlan,
 		signingLane,
 		transactionLane,
@@ -759,7 +741,7 @@ async function prepareNearEd25519TransactionSigningSession(args) {
 		transactionOperation
 	};
 }
-async function signTransactionWithActions(deps, args) {
+async function signTransaction(deps, args) {
 	const modalStartedAt = performance.now();
 	await deps.touchConfirm.openTransactionPreparationModal({
 		chain: "near",
@@ -794,8 +776,14 @@ async function signTransactionWithActionsAttempt(deps, args, attempt) {
 	const confirmationOperationId = attempt.signingOperationState.operationId;
 	const signingSessionCoordinator = attempt.signingSessionCoordinator || deps.signingSessionCoordinator;
 	const authorizationProbeStartedAt = performance.now();
+	const availableLanes = await readNearEd25519AvailableSigningLanes({
+		deps,
+		commandSubject: args.commandSubject,
+		authMethod: null
+	});
 	const authorizationRequired = await prepareNearAuthorizationRequiredTransaction({
 		deps,
+		availableLanes,
 		input: args,
 		commandSubject: args.commandSubject,
 		operationId: confirmationOperationId
@@ -839,6 +827,7 @@ async function signTransactionWithActionsAttempt(deps, args, attempt) {
 	const lanePreparationStartedAt = performance.now();
 	const preparedSigningSession = await prepareNearEd25519TransactionSigningSession({
 		deps,
+		availableLanes,
 		input: args,
 		commandSubject: args.commandSubject,
 		signingSessionCoordinator,
@@ -863,11 +852,7 @@ async function signTransactionWithActionsAttempt(deps, args, attempt) {
 			materialActivation: requireNearEd25519CommitMaterialActivation(preparedSigningSession.preparation),
 			task: async () => {
 				const ctx = deps.getSignerWorkerContext();
-				const materialBoundary = await prepareNearEd25519YaoMaterialBoundary({
-					deps,
-					commandSubject: args.commandSubject,
-					selectedLane: transactionLane
-				});
+				const materialBoundary = preparedSigningSession;
 				const passkeyEd25519OperationStepUp = buildNearPasskeyEd25519OperationStepUp({
 					auth: transactionLane.auth,
 					signer: transactionLane.identity.signer,
@@ -1151,6 +1136,7 @@ async function runPreparedNearNep413Signing(args) {
 				message: args.input.message,
 				recipient: args.input.recipient,
 				nonce: args.input.nonce,
+				callbackUrl: args.input.callbackUrl,
 				state: args.input.state,
 				accountId: nearAccount.accountId,
 				signerSlot: args.input.signerSlot,
@@ -1207,7 +1193,7 @@ async function executeNearNep413SigningAttempt(args) {
 		throw error;
 	}
 }
-async function signNEP413Message(deps, payload) {
+async function signMessage(deps, payload) {
 	try {
 		return await executeNearNep413SigningAttempt({
 			deps,