@seams/wallet 0.8.0 → 0.9.1

package/dist/esm/core/signingEngine/flows/signNear/signNear.js

@@ -1,29 +1,29 @@
+import { secureRandomBase64Url } from "../../../../shared-ts/src/utils/secureRandomId.js";
+import { toWalletId } from "../../interfaces/ecdsaChainTarget.js";
+import { parsePasskeyWalletAuthAuthority, walletAuthAuthorityRef } from "../../../../shared-ts/src/utils/walletAuthAuthority.js";
 import { toAccountId } from "../../../types/accountIds.js";
 import { SENSITIVE_OPERATION_POLICIES, SIGNER_AUTH_METHODS } from "../../../../shared-ts/src/utils/signerDomain.js";
 import { SIGNING_SESSION_EXPIRY_DETECTION_SOURCES, SigningEventPhase, createSigningFlowEvent } from "../../../types/sdkSentEvents.js";
-import { toWalletId } from "../../interfaces/ecdsaChainTarget.js";
 import { signingLaneAuthBindingKey, signingLaneAuthMethod } from "../../session/identity/signingLaneAuthBinding.js";
 import { SigningOperationIntent, SigningSessionIds, SigningSessionPlanKind } from "../../session/operationState/types.js";
-import { exactEd25519SigningLaneIdentityFromSelectedLane, exactSigningLaneIdentityKey, nearEd25519SignerBindingFromBoundaryFields } from "../../session/identity/exactSigningLaneIdentity.js";
-import { secureRandomBase64Url } from "../../../../shared-ts/src/utils/secureRandomId.js";
 import { parseSignerSlot } from "../../../../shared-ts/src/utils/signerSlot.js";
-import { parsePasskeyWalletAuthAuthority, walletAuthAuthorityRef } from "../../../../shared-ts/src/utils/walletAuthAuthority.js";
+import { exactEd25519SigningLaneIdentityFromSelectedLane, exactSigningLaneIdentityKey, nearEd25519SignerBindingFromBoundaryFields } from "../../session/identity/exactSigningLaneIdentity.js";
+import { demoEmailOtpCodeFromDelivery } from "../../session/emailOtp/challengeDelivery.js";
 import { reviewAdmissionForBinding } from "../../uiConfirm/transactionReviewAdmission.js";
 import { SigningAuthPlanKind } from "../../stepUpConfirmation/types.js";
-import { buildNearPreparationDisplayModel } from "../../chains/near/display.js";
 import { createSigningBoundaryTraceEvent, emitEd25519SigningTiming, emitSigningBoundaryTrace, emitSigningLaneResolutionTrace, emitSigningPlannerDecisionTrace } from "../../session/operationState/trace.js";
 import { createSigningOperationStateRef } from "../shared/signingStateMachine.js";
 import { signingAuthPlanFromSigningSessionPlan } from "../shared/signingConfirmation.js";
-import { requiredNearTransactionSignatureUses } from "./signatureUses.js";
 import { WalletSessionQuotaAdmissionError, buildWalletSessionQuotaAdmissionQueueKey, classifyWalletSessionQuotaAdmissionFailure, decideWalletSessionQuotaAdmissionFailure, waitForWalletSessionQuotaAdmissionRetry } from "../../session/operationState/authorizationAdmission.js";
+import { receiveTransactionIntent, recordAvailableSigningLanesRead, selectNearEd25519MaterialCandidate, selectTransactionLaneFromAvailableLanes } from "../../session/identity/selectLane.js";
+import { classifyTransactionReadiness, prepareTransactionOperationFromReadiness, prepareTransactionSigningOperation } from "../../session/operationState/transactionState.js";
 import { walletSessionFailureFromError } from "../../session/lifecycle/walletSessionFailure.js";
-import { resolveNearSigningSessionAuthContext } from "./shared/signingSessionAuthMode.js";
-import { signNearWithUiConfirm } from "./nearSigningFlow.js";
 import { resolveThresholdCommitQueueKey } from "../../threshold/commitQueueShared.js";
-import { demoEmailOtpCodeFromDelivery } from "../../session/emailOtp/challengeDelivery.js";
 import { requireAuthoritativeExpiredWalletSessionAuthorizationBoundary } from "../../session/identity/clientSessionPersistenceState.js";
-import { receiveTransactionIntent, recordAvailableSigningLanesRead, selectNearEd25519MaterialCandidate, selectTransactionLaneFromAvailableLanes } from "../../session/identity/selectLane.js";
-import { classifyTransactionReadiness, prepareTransactionOperationFromReadiness, prepareTransactionSigningOperation } from "../../session/operationState/transactionState.js";
+import { buildNearPreparationDisplayModel } from "../../chains/near/display.js";
+import { requiredNearTransactionSignatureUses } from "./signatureUses.js";
+import { resolveNearSigningSessionAuthContext } from "./shared/signingSessionAuthMode.js";
+import { signNearWithUiConfirm } from "./nearSigningFlow.js";
 //#region src/core/signingEngine/flows/signNear/signNear.ts
 function nearOwnerOperationAuthorizationDecisionFromError(error) {
 	if (!(error instanceof WalletSessionQuotaAdmissionError)) return void 0;
@@ -71,10 +71,10 @@ async function signNear(deps, request) {
 				getSignerWorkerContext: reviewedNearContext.bind(null, context, admission.beforeSigning)
 			};
 		}
-		return await signTransactionWithActions(deps, request.args);
+		return await signTransaction(deps, request.args);
 	}
 	if (request.kind === "delegateAction") return await signDelegateAction(deps, request.args);
-	if (request.kind === "nep413") return await signNEP413Message(deps, request.args);
+	if (request.kind === "nep413") return await signMessage(deps, request.args);
 	throw new Error(`[SigningEngine] unsupported near signing intent: ${String(request.kind || "")}`);
 }
 function createNearTransactionSigningOperationId() {
@@ -166,14 +166,6 @@ function requireResolvedNearEd25519SigningLane(lane) {
 		thresholdSessionId: SigningSessionIds.thresholdEd25519Session(thresholdSessionId)
 	};
 }
-function walletSessionStatusIdentityFromNearPreparation(preparation) {
-	if (preparation.authorization.kind !== "authorized") return null;
-	const authorization = preparation.authorization.authorization;
-	return {
-		walletSessionId: authorization.operationCredential.walletSessionId,
-		quotaId: authorization.session.quotaId
-	};
-}
 async function resolveNearTransactionWalletAuth(args) {
 	const preparedOperation = args.preparedOperation;
 	const lane = preparedOperation.lane;
@@ -455,12 +447,9 @@ async function withThresholdEd25519CommitQueue(args) {
 	});
 }
 async function prepareNearAuthorizationRequiredTransaction(args) {
+	const availableLanes = args.availableLanes;
 	const materialSelection = selectNearEd25519MaterialCandidate({
-		availableLanes: await readNearEd25519AvailableSigningLanes({
-			deps: args.deps,
-			commandSubject: args.commandSubject,
-			authMethod: null
-		}),
+		availableLanes,
 		intent: nearEd25519TransactionSigningIntent({
 			commandSubject: args.commandSubject,
 			signerSlot: args.input.signerSlot,
@@ -627,18 +616,14 @@ async function prepareNearEd25519TransactionOperation(args) {
 	const transactionReadinessState = classifyTransactionReadiness(args.selectedLane, transactionReadinessFromPlannerInput({
 		readiness: readiness.readiness,
 		expiresAtMs: readiness.expiresAtMs,
-		remainingUses: readiness.remainingUses,
-		usesNeeded: operationUsesNeeded
+		remainingUses: readiness.remainingUses
 	}));
 	const transactionOperation = prepareTransactionOperationFromReadiness(transactionReadinessState);
 	const identity = requireResolvedNearEd25519SigningLane(lane);
-	const trustedStatusAuth = walletSessionStatusIdentityFromNearPreparation(args.preparation);
 	const readinessInput = {
 		readiness: readiness.readiness,
 		expiresAtMs: readiness.expiresAtMs,
-		remainingUses: readiness.remainingUses,
-		usesNeeded: operationUsesNeeded,
-		...trustedStatusAuth ? { trustedStatusAuth } : {}
+		remainingUses: readiness.remainingUses
 	};
 	return {
 		lane,
@@ -659,11 +644,7 @@ async function prepareNearEd25519TransactionOperation(args) {
 async function prepareNearEd25519TransactionSigningSession(args) {
 	const nearAccountId = args.commandSubject.nearAccount.accountId;
 	const operationUsesNeeded = requiredNearTransactionSignatureUses(args.input.transaction);
-	let availableLanes = await readNearEd25519AvailableSigningLanes({
-		deps: args.deps,
-		commandSubject: args.commandSubject,
-		authMethod: null
-	});
+	let availableLanes = args.availableLanes;
 	let selectedLane = selectSelectedEd25519LaneFromAvailableLanes({
 		commandSubject: args.commandSubject,
 		availableLanes,
@@ -746,6 +727,7 @@ async function prepareNearEd25519TransactionSigningSession(args) {
 	});
 	return {
 		preparation: initialMaterialBoundary.preparation,
+		executor: initialMaterialBoundary.executor,
 		signingAuthPlan,
 		signingLane,
 		transactionLane,
@@ -759,7 +741,7 @@ async function prepareNearEd25519TransactionSigningSession(args) {
 		transactionOperation
 	};
 }
-async function signTransactionWithActions(deps, args) {
+async function signTransaction(deps, args) {
 	const modalStartedAt = performance.now();
 	await deps.touchConfirm.openTransactionPreparationModal({
 		chain: "near",
@@ -794,8 +776,14 @@ async function signTransactionWithActionsAttempt(deps, args, attempt) {
 	const confirmationOperationId = attempt.signingOperationState.operationId;
 	const signingSessionCoordinator = attempt.signingSessionCoordinator || deps.signingSessionCoordinator;
 	const authorizationProbeStartedAt = performance.now();
+	const availableLanes = await readNearEd25519AvailableSigningLanes({
+		deps,
+		commandSubject: args.commandSubject,
+		authMethod: null
+	});
 	const authorizationRequired = await prepareNearAuthorizationRequiredTransaction({
 		deps,
+		availableLanes,
 		input: args,
 		commandSubject: args.commandSubject,
 		operationId: confirmationOperationId
@@ -839,6 +827,7 @@ async function signTransactionWithActionsAttempt(deps, args, attempt) {
 	const lanePreparationStartedAt = performance.now();
 	const preparedSigningSession = await prepareNearEd25519TransactionSigningSession({
 		deps,
+		availableLanes,
 		input: args,
 		commandSubject: args.commandSubject,
 		signingSessionCoordinator,
@@ -863,11 +852,7 @@ async function signTransactionWithActionsAttempt(deps, args, attempt) {
 			materialActivation: requireNearEd25519CommitMaterialActivation(preparedSigningSession.preparation),
 			task: async () => {
 				const ctx = deps.getSignerWorkerContext();
-				const materialBoundary = await prepareNearEd25519YaoMaterialBoundary({
-					deps,
-					commandSubject: args.commandSubject,
-					selectedLane: transactionLane
-				});
+				const materialBoundary = preparedSigningSession;
 				const passkeyEd25519OperationStepUp = buildNearPasskeyEd25519OperationStepUp({
 					auth: transactionLane.auth,
 					signer: transactionLane.identity.signer,
@@ -1151,6 +1136,7 @@ async function runPreparedNearNep413Signing(args) {
 				message: args.input.message,
 				recipient: args.input.recipient,
 				nonce: args.input.nonce,
+				callbackUrl: args.input.callbackUrl,
 				state: args.input.state,
 				accountId: nearAccount.accountId,
 				signerSlot: args.input.signerSlot,
@@ -1207,7 +1193,7 @@ async function executeNearNep413SigningAttempt(args) {
 		throw error;
 	}
 }
-async function signNEP413Message(deps, payload) {
+async function signMessage(deps, payload) {
 	try {
 		return await executeNearNep413SigningAttempt({
 			deps,

package/dist/esm/core/signingEngine/flows/signNear/signNep413.js

@@ -1,19 +1,21 @@
 import { base64Encode, base64UrlDecode } from "../../../../shared-ts/src/utils/base64.js";
+import { WorkerResponseType } from "../../../types/signer-worker.js";
 import { resolveNearNetwork } from "../../../config/chains.js";
 import { normalizeThresholdEd25519ParticipantIds } from "../../../../shared-ts/src/threshold/participants.js";
-import { SigningOperationIntent, SigningSessionIds } from "../../session/operationState/types.js";
 import { PASSKEY_MANAGER_DEFAULT_CONFIGS } from "../../../config/defaultConfigs.js";
+import { SigningOperationIntent, SigningSessionIds } from "../../session/operationState/types.js";
+import { emitEd25519SigningTiming } from "../../session/operationState/trace.js";
+import { SigningOperationCommandKind, runSigningOperationCommand } from "../shared/signingStateMachine.js";
 import { resolveNearSigningMaterials } from "./shared/signingMaterials.js";
 import { thresholdEd25519Nep413OperationFingerprint } from "../../../../shared-ts/src/threshold/ed25519OperationFingerprint.js";
-import { SigningOperationCommandKind, runSigningOperationCommand } from "../shared/signingStateMachine.js";
-import { WorkerResponseType } from "../../../types/signer-worker.js";
 import { computeThresholdEd25519Nep413SigningDigestWasm } from "../../chains/near/nearSignerWasm.js";
-import { authorizeNearSignatureOnlyOperation, confirmNearSignatureOnlyOperation, prepareNearSignatureOnlyStepUp, resolveNearSignatureOnlySigningMaterial, resolveNearSignatureOnlySigningPlans, runNearSignatureOnlySignCommand, signNearSignatureOnlyOperation } from "./shared/signatureOnlySigning.js";
+import { authorizeNearSignatureOnlyOperation, confirmNearSignatureOnlyOperation, prepareNearSignatureOnlyStepUp, resolveNearSignatureOnlySigningMaterial, resolveNearSignatureOnlySigningPlans, runNearSignatureOnlySignCommand, signNearSignatureOnlyOperation, startNearSignatureOnlyPrepare } from "./shared/signatureOnlySigning.js";
 //#region src/core/signingEngine/flows/signNear/signNep413.ts
 async function signNep413Message({ ctx, commandSubject, nearAccount, signingSessionCoordinator, payload, forceFreshAuth, passkeyEd25519OperationStepUp, emailOtpEd25519StepUp, yaoSigningPreparation, yaoMaterialExecutor, selection, onEvent }) {
 	const selectionAuth = selection.kind === "authorized" ? selection.selectedLane.auth : selection.candidate.auth;
 	const selectedSignerSlot = selection.kind === "authorized" ? selection.selectedLane.identity.signer.signerSlot : selection.candidate.signerSlot;
 	const operationId = payload.operationId;
+	const preConfirmationStartedAt = performance.now();
 	const relayerUrl = ctx.relayerUrl;
 	const nearAccountId = nearAccount.accountId;
 	const touchConfirm = ctx.touchConfirm;
@@ -46,7 +48,7 @@ async function signNep413Message({ ctx, commandSubject, nearAccount, signingSess
 			message: payload.message,
 			recipient: payload.recipient,
 			nonce: payload.nonce,
-			state: payload.state || null
+			callbackUrl: payload.callbackUrl
 		})),
 		intent: SigningOperationIntent.TransactionSign
 	};
@@ -66,13 +68,13 @@ async function signNep413Message({ ctx, commandSubject, nearAccount, signingSess
 			message: payload.message,
 			recipient: payload.recipient,
 			nonce: payload.nonce,
-			...payload.state ? { state: payload.state } : {}
+			callbackUrl: payload.callbackUrl
 		},
 		computeSigningDigestB64u: async () => (await computeThresholdEd25519Nep413SigningDigestWasm({
 			message: payload.message,
 			recipient: payload.recipient,
 			nonce: payload.nonce,
-			...payload.state ? { state: payload.state } : {},
+			callbackUrl: payload.callbackUrl,
 			workerCtx: ctx
 		})).signingDigestB64u
 	};
@@ -81,7 +83,10 @@ async function signNep413Message({ ctx, commandSubject, nearAccount, signingSess
 		passkeyEd25519OperationStepUp,
 		emailOtpEd25519StepUp
 	});
-	const authorization = authorizeNearSignatureOnlyOperation(operation, stepUp, await confirmNearSignatureOnlyOperation(operation, {
+	const startedPrepare = await startNearSignatureOnlyPrepare(operation, stepUp, signingSessionCoordinator);
+	emitEd25519SigningTiming(String(operationId), "pre_confirmation", preConfirmationStartedAt);
+	const confirmationStartedAt = performance.now();
+	const confirmation = await confirmNearSignatureOnlyOperation(operation, {
 		touchConfirm,
 		signingAuthPlan: stepUp.preparedStepUp.confirmationAuthPayload.signingAuthPlan,
 		nearPublicKeyStr: signingContext.nearPublicKey,
@@ -94,12 +99,15 @@ async function signNep413Message({ ctx, commandSubject, nearAccount, signingSess
 			message: payload.message,
 			recipient: payload.recipient
 		}
-	}));
+	});
+	emitEd25519SigningTiming(String(operationId), "confirmation", confirmationStartedAt);
+	const confirmedAt = performance.now();
+	const authorization = authorizeNearSignatureOnlyOperation(operation, stepUp, confirmation);
 	const signingMaterial = await runSigningOperationCommand({
 		signingSessionPlan,
 		signingOperation,
 		commandKind: SigningOperationCommandKind.PreparePayload,
-		execute: async () => await resolveNearSignatureOnlySigningMaterial(operation, authorization)
+		execute: async () => await resolveNearSignatureOnlySigningMaterial(operation, authorization, startedPrepare)
 	});
 	const okResponse = await runNearSignatureOnlySignCommand(operation, async () => {
 		const signed = await signNearSignatureOnlyOperation(operation, signingMaterial, signingSessionCoordinator);
@@ -109,16 +117,17 @@ async function signNep413Message({ ctx, commandSubject, nearAccount, signingSess
 				accountId: nearAccountId,
 				publicKey: signed.signerPublicKey,
 				signature: base64Encode(base64UrlDecode(signed.signatureB64u)),
-				state: payload.state || void 0
+				state: payload.state ?? void 0
 			}
 		};
 	});
+	emitEd25519SigningTiming(String(operationId), "confirmed_to_signed", confirmedAt);
 	return {
 		success: true,
 		accountId: okResponse.payload.accountId,
 		publicKey: okResponse.payload.publicKey,
 		signature: okResponse.payload.signature,
-		state: okResponse.payload.state || void 0
+		state: okResponse.payload.state
 	};
 }
 function validateAndPrepareNep413SigningContext(args) {

package/dist/esm/core/signingEngine/flows/signNear/signTransactions.js

@@ -1,26 +1,27 @@
-import { toAccountId } from "../../../types/accountIds.js";
-import { SigningEventPhase, createSigningFlowEvent } from "../../../types/sdkSentEvents.js";
 import { resolveNearNetwork, resolvePrimaryNearRpcUrl } from "../../../config/chains.js";
 import { normalizeThresholdEd25519ParticipantIds } from "../../../../shared-ts/src/threshold/participants.js";
+import { PASSKEY_MANAGER_DEFAULT_CONFIGS } from "../../../config/defaultConfigs.js";
+import { SignedTransaction } from "../../../rpcClients/near/NearClient.js";
+import { toAccountId } from "../../../types/accountIds.js";
+import { SigningEventPhase, createSigningFlowEvent } from "../../../types/sdkSentEvents.js";
 import { SigningOperationIntent, SigningSessionIds, SigningSessionPlanKind } from "../../session/operationState/types.js";
 import { nearEd25519SignerBindingFromBoundaryFields } from "../../session/identity/exactSigningLaneIdentity.js";
+import { computeUiIntentDigestFromTxs, orderActionForDigest } from "../../../../utils/intentDigest.js";
 import { isWarmSessionSigningAuthPlan } from "../../stepUpConfirmation/types.js";
-import { SignedTransaction } from "../../../rpcClients/near/NearClient.js";
-import { PASSKEY_MANAGER_DEFAULT_CONFIGS } from "../../../config/defaultConfigs.js";
-import { resolveNearSigningMaterials } from "./shared/signingMaterials.js";
-import { buildNearTransactionSigningPayload } from "../../chains/near/payloads.js";
 import { createSigningBoundaryTraceEvent, emitEd25519SigningTiming, emitSigningBoundaryTrace } from "../../session/operationState/trace.js";
-import { parseThresholdEd25519NearTransaction, thresholdEd25519NearTransactionPlanningOperationFingerprint } from "../../../../shared-ts/src/threshold/ed25519OperationFingerprint.js";
+import { parseSigningOperationFingerprintDigest } from "../../../../shared-ts/src/authorization/operationFingerprint.js";
 import { SigningOperationCommandKind, isSigningOperationReviewApprovedState, runSigningOperationCommand } from "../shared/signingStateMachine.js";
-import { requireNearStepUpAuth, signingAuthPlanForNearMaterialRequirement } from "./requireNearStepUpAuth.js";
 import { buildSigningConfirmationAuthParams } from "../../stepUpConfirmation/confirmOperation.js";
 import { confirmationConfigForSigningAuthPlan, resolveSigningConfirmationAuthMethod, runTransactionSigningConfirmationCommand } from "../shared/signingConfirmation.js";
+import { resolveNearSigningMaterials } from "./shared/signingMaterials.js";
+import { buildNearTransactionSigningPayload } from "../../chains/near/payloads.js";
+import { parseThresholdEd25519NearTransaction, thresholdEd25519NearTransactionPlanningOperationFingerprint } from "../../../../shared-ts/src/threshold/ed25519OperationFingerprint.js";
+import { requireNearStepUpAuth, signingAuthPlanForNearMaterialRequirement } from "./requireNearStepUpAuth.js";
 import { emitNearSigningConfirmationProgress } from "./shared/confirmationProgress.js";
 import { buildNearEd25519StepUpAuthorization } from "./stepUpAuthorization.js";
 import { requiredNearTransactionSignatureUses } from "./signatureUses.js";
-import { parseSigningOperationFingerprintDigest } from "../../../../shared-ts/src/authorization/operationFingerprint.js";
 import { clearNearOperationStepUpBuilder, consumePreparedNearOperationStepUp, registerNearOperationStepUpBuilder } from "./shared/operationStepUpPreparation.js";
-import { buildNearEd25519OperationStepUpProof, buildNearEmailOtpEd25519OperationStepUpProof, prepareRouterAbEd25519NearTransactionOperationStepUp, requireIssuedNearEd25519OperationStepUpAuthorization, requireNearEd25519OperationStepUpProof, tryFinalizeRouterAbEd25519NearTransactionNormalSigning } from "./shared/ed25519YaoNormalSigning.js";
+import { buildNearEd25519OperationStepUpProof, buildNearEmailOtpEd25519OperationStepUpProof, prepareRouterAbEd25519NearTransactionOperationStepUp, requireIssuedNearEd25519OperationStepUpAuthorization, requireNearEd25519OperationStepUpProof, startRouterAbEd25519NearTransactionPrepare, tryFinalizeRouterAbEd25519NearTransactionNormalSigning } from "./shared/ed25519YaoNormalSigning.js";
 import { fundNearImplicitAccountForOperationStepUp, resolveConfirmedNearTransactionContext } from "./implicitAccountFunding.js";
 import { clearNearImplicitAccountFunder, registerNearImplicitAccountFunder } from "./shared/implicitAccountFundingPort.js";
 import { nearOperationStepUpMaterialFacts, prepareNearOperationStepUpMaterial, resolveNearOperationStepUpMaterial, resolvePreparedNearEd25519YaoMaterial } from "./shared/ed25519YaoCapabilityResolution.js";
@@ -55,6 +56,34 @@ function requireWarmNearSigningMaterialTask(task) {
 	if (!task) throw new Error("[SigningEngine][near] warm signing material was not prepared");
 	return task;
 }
+async function startWarmNearTransactionPrepare(args) {
+	const resolved = await args.warmMaterial;
+	const walletSessionState = await args.sessionCoordinator.resolveActiveAuthorizedRouterAbEd25519WalletSessionState({
+		state: resolved.walletSessionState,
+		nowMs: Date.now()
+	});
+	if (!walletSessionState) return null;
+	const displayDigest = await computeUiIntentDigestFromTxs([{
+		receiverId: args.confirmationTransaction.receiverId,
+		actions: args.confirmationTransaction.actions.map(orderActionForDigest)
+	}]);
+	return await startRouterAbEd25519NearTransactionPrepare({
+		ctx: args.ctx,
+		thresholdSessionId: resolved.material.facts.thresholdSessionId,
+		thresholdKeyMaterial: args.thresholdKeyMaterial,
+		walletId: args.walletId,
+		nearAccountId: args.nearAccountId,
+		activeClient: resolved.material.activeClient,
+		walletSessionState,
+		operationId: args.operationId,
+		displayDigest,
+		txSigningRequest: args.txSigningRequest,
+		transactionContext: args.readiness.transactionContext
+	});
+}
+function ignoreStartedPrepareFailure() {
+	return null;
+}
 async function resolveNearTransactionOperationStepUpMaterial(args) {
 	if (args.authorization.kind === "passkey") {
 		if (args.material.kind !== "passkey_live" && args.material.kind !== "passkey_sealed") throw new Error("[SigningEngine][near] passkey transaction material changed factor");
@@ -553,6 +582,22 @@ async function runAuthorizedNearTransactionWithActionsSigning({ ctx, commandSubj
 		}
 	});
 	emitEd25519SigningTiming(String(signingOperationId), "pre_confirmation", preConfirmationStartedAt);
+	let startedPrepareTask = null;
+	const startTransactionPrepare = (readiness) => {
+		if (startedPrepareTask || !warmSigningMaterialTask) return;
+		startedPrepareTask = startWarmNearTransactionPrepare({
+			ctx,
+			warmMaterial: warmSigningMaterialTask,
+			sessionCoordinator,
+			thresholdKeyMaterial: signingContext.threshold.thresholdKeyMaterial,
+			walletId: commandSubject.walletSession.walletId,
+			nearAccountId,
+			operationId: signingOperation.operationId,
+			txSigningRequest,
+			confirmationTransaction,
+			readiness
+		}).catch(ignoreStartedPrepareFailure);
+	};
 	const confirmationStartedAt = performance.now();
 	let confirmation;
 	try {
@@ -567,6 +612,7 @@ async function runAuthorizedNearTransactionWithActionsSigning({ ctx, commandSubj
 				chain: "near",
 				kind: "transaction",
 				...buildSigningConfirmationAuthParams({ signingAuthPlan: confirmationAuthPayload.signingAuthPlan }),
+				...warmSigningMaterialTask ? { onNearTransactionContextReady: startTransactionPrepare } : {},
 				walletId: String(signingLane.identity.signer.account.wallet.walletId),
 				txSigningRequests: [confirmationTransaction],
 				rpcCall: resolvedRpcCall,
@@ -771,6 +817,7 @@ async function runAuthorizedNearTransactionWithActionsSigning({ ctx, commandSubj
 			ctx,
 			thresholdSessionId: canonicalThresholdSessionId,
 			activeClient: yaoClient,
+			sessionCoordinator,
 			walletSessionState: await requireActiveAuthorizedWalletSessionState({
 				state: walletSessionState,
 				coordinator: sessionCoordinator,
@@ -784,7 +831,8 @@ async function runAuthorizedNearTransactionWithActionsSigning({ ctx, commandSubj
 			displayDigest: confirmation.intentDigest,
 			txSigningRequest,
 			transactionContext,
-			authorization: { kind: "reusable_wallet_session" }
+			authorization: { kind: "reusable_wallet_session" },
+			startedPrepare: startedPrepareTask ? await startedPrepareTask : null
 		});
 		if (routerAbNormalSigningResult) return routerAbNormalSigningResult.okResponse;
 		throw new Error("[SigningEngine][near] Router A/B Ed25519 signing is unavailable");

package/dist/esm/core/signingEngine/interfaces/ecdsaChainTarget.js

@@ -80,7 +80,7 @@ function thresholdEcdsaChainTargetFromChainFamily(args) {
 * `rpcUrl` and `explorerUrl` are accepted so a full `SeamsChainConfig` stays
 * assignable, but they are ignored: the RPC endpoint is resolved at execution
 * time from `configs.network.chains` by target key (`resolveEvmFamilyRpcUrl`).
-* Prefer `seams.chainTarget(selector)`, which can only name a configured chain.
+* Prefer `seams.config.chainTarget(selector)`, which can only name a configured chain.
 */
 function thresholdEcdsaChainTargetFromConfig(chain) {
 	const family = chainFamilyFromNetwork(chain.network);

package/dist/esm/core/signingEngine/nonce/nonceLaneKeys.js

@@ -1,5 +1,4 @@
 import { thresholdEcdsaChainTargetKey } from "../interfaces/ecdsaChainTarget.js";
-import { secureRandomId } from "../../../shared-ts/src/utils/secureRandomId.js";
 //#region src/core/signingEngine/nonce/nonceLaneKeys.ts
 function evmReserveNonceInputToLane(input) {
 	return {
@@ -43,13 +42,6 @@ function evmLaneToReserveNonceInput(lane) {
 		...lane.nonceKey != null ? { nonceKey: lane.nonceKey } : {}
 	};
 }
-function nonceLaneNetworkKey(lane) {
-	if (lane.family === "near") return lane.networkKey;
-	return thresholdEcdsaChainTargetKey(lane.chainTarget);
-}
-function nonceLaneSubjectId(lane) {
-	return lane.family === "near" ? lane.walletId : lane.subjectId;
-}
 function nonceLaneKey(lane) {
 	if (lane.family === "near") return nearNonceLaneKey(lane);
 	return encodeNonceKeyParts([
@@ -72,39 +64,13 @@ function nearNonceLaneKey(lane) {
 function assertEvmLease(lease) {
 	if (lease.lane.family !== "evm") throw new Error("[NonceCoordinator] expected an EVM-family nonce lease");
 }
-function assertOperationMatches(lease, operationId, operationFingerprint) {
-	if (lease.operationId !== operationId) throw new Error("[NonceCoordinator] nonce lease operation mismatch");
-	if (lease.operationFingerprint !== operationFingerprint) throw new Error("[NonceCoordinator] nonce lease operation fingerprint mismatch");
-}
-function createNonceLeaseId(args) {
-	const randomId = secureRandomId("nonce-lease", 32, "nonce lease IDs");
-	return `nonce-lease-v1:${encodeNonceKeyParts([
-		args.chain,
-		args.operationId,
-		args.nonce,
-		randomId
-	])}`;
-}
-function createNonceBatchId(args) {
-	const randomId = secureRandomId("nonce-batch", 32, "nonce batch IDs");
-	return `nonce-batch-v1:${encodeNonceKeyParts([
-		args.chain,
-		args.operationId,
-		args.firstNonce,
-		args.count,
-		randomId
-	])}`;
-}
 function encodeNonceKeyParts(parts) {
 	return parts.map((part) => {
 		const value = String(part);
 		return `${value.length}:${value}`;
 	}).join("|");
 }
-function createRuntimeId() {
-	return secureRandomId("nonce-runtime", 32, "nonce runtime IDs");
-}
 //#endregion
-export { assertEvmLease, assertOperationMatches, createNonceBatchId, createNonceLeaseId, createRuntimeId, evmLaneToReserveNonceInput, evmManagedReservationToLane, evmNonceLeaseToManagedReservation, evmReserveNonceInputToLane, nonceLaneKey, nonceLaneNetworkKey, nonceLaneSubjectId, nonceLeaseToRef };
+export { evmManagedReservationToLane, evmNonceLeaseToManagedReservation, evmReserveNonceInputToLane, nonceLaneKey, nonceLeaseToRef };
 
 //# sourceMappingURL=nonceLaneKeys.js.map

package/dist/esm/core/signingEngine/nonce/nonceTypes.js

@@ -17,26 +17,6 @@ const NonceDurableLeaseState = {
 	Signed: NonceLeaseState.Signed,
 	BroadcastAccepted: NonceLeaseState.BroadcastAccepted
 };
-const NonceCoordinatorTraceEventName = {
-	LeaseReserved: "nonce_lease_reserved",
-	LeaseReleased: "nonce_lease_released",
-	LeaseExpired: "nonce_lease_expired",
-	LeaseSigned: "nonce_lease_signed",
-	LeaseBroadcastAccepted: "nonce_lease_broadcast_accepted",
-	LeaseBroadcastRejected: "nonce_lease_broadcast_rejected",
-	LeaseFinalized: "nonce_lease_finalized",
-	LeaseDropped: "nonce_lease_dropped",
-	LeaseReplaced: "nonce_lease_replaced",
-	Metrics: "nonce_coordinator_metrics",
-	LaneAlert: "nonce_lane_alert",
-	CoordinationDegraded: "nonce_coordination_degraded",
-	LanesCleared: "nonce_lanes_cleared",
-	LaneReconciled: "nonce_lane_reconciled"
-};
-const EvmNonceOutcomeReason = {
-	Dropped: "dropped",
-	Replaced: "replaced"
-};
 const NonceCoordinatorDegradationReason = {
 	WebLocksUnavailable: "web_locks_unavailable",
 	IndexedDBUnavailable: "indexeddb_unavailable",
@@ -48,12 +28,8 @@ const NonceCoordinatorFallback = {
 	InRuntimeLock: "in_runtime_lock",
 	None: "none"
 };
-const NearNonceReconcileReason = {
-	NonceAdvancedHashMissing: "near_nonce_advanced_hash_missing",
-	HashMissingNonceNotAdvanced: "near_hash_missing_nonce_not_advanced"
-};
-const NONCE_LEASE_STATES = Object.values(NonceLeaseState);
+Object.values(NonceLeaseState);
 //#endregion
-export { EvmNonceOutcomeReason, NONCE_LEASE_STATES, NearNonceReconcileReason, NonceCoordinatorDegradationReason, NonceCoordinatorFallback, NonceCoordinatorTraceEventName, NonceDurableLeaseState, NonceLeaseState };
+export { NonceCoordinatorDegradationReason, NonceCoordinatorFallback, NonceDurableLeaseState, NonceLeaseState };
 
 //# sourceMappingURL=nonceTypes.js.map

package/dist/esm/core/signingEngine/routerAb/ecdsaDerivation/httpRequest.js

@@ -1,3 +1,4 @@
+import { fetchWithWalletHomeDiscovery } from "../../../rpcClients/relayer/relayerHttp.js";
 //#region src/core/signingEngine/routerAb/ecdsaDerivation/httpRequest.ts
 const DEFAULT_ROUTER_AB_ECDSA_DERIVATION_REQUEST_TIMEOUT_MS = 2e4;
 function resolveRequestTimeoutMs(timeoutMs) {
@@ -34,11 +35,11 @@ async function fetchRouterAbEcdsaDerivationJson(args) {
 				didTimeout = true;
 				abortController.abort();
 			}, timeoutMs);
-			response = await fetch(args.url, {
+			response = await fetchWithWalletHomeDiscovery(new Request(args.url, {
 				...baseInit,
 				signal: abortController.signal
-			});
-		} else response = await Promise.race([fetch(args.url, baseInit), new Promise((_, reject) => {
+			}));
+		} else response = await Promise.race([fetchWithWalletHomeDiscovery(new Request(args.url, baseInit)), new Promise((_, reject) => {
 			timeoutId = setTimeout(() => {
 				didTimeout = true;
 				reject(createRouterAbEcdsaDerivationTimeoutError({

package/dist/esm/core/signingEngine/routerAb/ecdsaDerivation/poolFillRoutes.js

@@ -1,4 +1,5 @@
 import { normalizeTrimmedString, stripTrailingSlashes } from "../../../../shared-ts/src/utils/normalize.js";
+import { buildWalletSessionAuthorizationHeaders } from "../../../rpcClients/relayer/relayerHttp.js";
 import { ROUTER_AB_ECDSA_DERIVATION_PRESIGNATURE_POOL_FILL_INIT_PATH, ROUTER_AB_ECDSA_DERIVATION_PRESIGNATURE_POOL_FILL_STEP_PATH } from "../../../../shared-ts/src/utils/routerAbEcdsaDerivation.js";
 import { emitEcdsaPresignServerTiming } from "../../session/operationState/trace.js";
 import { fetchRouterAbEcdsaDerivationJson } from "./httpRequest.js";
@@ -26,7 +27,10 @@ function resolvePresignAuthHeaders(args) {
 				code: "invalid_args",
 				message: "Missing opaque Wallet Session token for Router A/B ECDSA derivation presign pool fill"
 			};
-			headers.Authorization = `Bearer ${walletSessionToken}`;
+			Object.assign(headers, buildWalletSessionAuthorizationHeaders({
+				token: walletSessionToken,
+				home: args.credential.home
+			}));
 			return {
 				ok: true,
 				headers,