Merge branch 'naga' into feat/naga-prod

Author: Ansonhkg

.changeset/gold-ducks-repeat.md

@@ -0,0 +1,6 @@
+---
+'@lit-protocol/networks': patch
+'@lit-protocol/e2e': patch
+---
+
+PKP signing now auto-hashes Cosmos payloads, exposes a documented bypassAutoHashing option, and ships with a new e2e suite plus docs so builders can rely on every listed curve working out of the box.

.changeset/warm-lizards-fry.md

@@ -0,0 +1,7 @@
+---
+'@lit-protocol/lit-client': patch
+'@lit-protocol/networks': patch
+'@lit-protocol/e2e': patch
+---
+
+SDK exposes typed Shiva env helpers (`createShivaEnvVars`, `waitForTestnetInfo`, `SUPPORTED_NETWORKS`) so QA suites can spin up testnets without bespoke env plumbing, and the new `executeWithHandshake` runner automatically retry failures for more stable Lit action execution.

docs/sdk/auth-context-consumption/pkp-sign.mdx

@@ -31,6 +31,23 @@ const signatures = await litClient.chain.raw.pkpSign({
 });
 ```
 
+### Hashing defaults and bypass
+
+By default the SDK hashes ECDSA payloads for you using the canonical function for each chain (Ethereum → keccak256, Bitcoin/Cosmos → SHA-256/SHA-384) before sending to the nodes for signing. Schnorr/EdDSA schemes receive the raw bytes exactly as you provided them. If you already computed a digest (for example when signing EIP-712 typed data) you can pass it directly and opt out of the SDK hashing step by setting `bypassAutoHashing: true`:
+
+```ts
+const digestBytes = hexToBytes(hashTypedData(typedData));
+
+const signature = await litClient.chain.raw.pkpSign({
+  chain: 'ethereum',
+  signingScheme: 'EcdsaK256Sha256',
+  pubKey: pkpInfo.pubkey,
+  authContext,
+  toSign: digestBytes,
+  bypassAutoHashing: true,
+});
+```
+
 ---
 
 # Available signing schemes
@@ -66,4 +83,4 @@ const signatures = await litClient.chain.raw.pkpSign({
 | `SchnorrRistretto25519Sha512` | Ristretto25519 |
 | `SchnorrRedJubjubBlake2b512` | Jubjub |
 | `SchnorrRedDecaf377Blake2b512` | Decaf377 |
-| `SchnorrkelSubstrate` | sr25519 |
+| `SchnorrkelSubstrate` | sr25519 |

packages/auth/src/lib/authenticators/helper/fetchBlockchainData.ts

@@ -1,26 +1,39 @@
 import { EthBlockhashInfo } from '@lit-protocol/types';
 
+const RETRY_ATTEMPTS = 2; // total attempts = RETRY_ATTEMPTS + 1
+const RETRY_DELAY_MS = 250;
+
+const delay = (ms: number) => new Promise((resolve) => setTimeout(resolve, ms));
+
 export const fetchBlockchainData = async () => {
-  try {
-    const resp = await fetch(
-      'https://block-indexer.litgateway.com/get_most_recent_valid_block'
-    );
-    if (!resp.ok) {
-      throw new Error(`Primary fetch failed with status: ${resp.status}`); // Or a custom error
-    }
+  let lastError: Error | undefined;
 
-    const blockHashBody: EthBlockhashInfo = await resp.json();
-    const { blockhash, timestamp } = blockHashBody;
+  for (let attempt = 0; attempt <= RETRY_ATTEMPTS; attempt++) {
+    try {
+      const resp = await fetch(
+        'https://block-indexer.litgateway.com/get_most_recent_valid_block'
+      );
+      if (!resp.ok) {
+        throw new Error(`Primary fetch failed with status: ${resp.status}`);
+      }
 
-    if (!blockhash || !timestamp) {
-      throw new Error('Invalid data from primary blockhash source');
-    }
+      const blockHashBody: EthBlockhashInfo = await resp.json();
+      const { blockhash, timestamp } = blockHashBody;
 
-    return blockhash;
-  } catch (error) {
-    if (error instanceof Error) {
-      throw new Error(error.message);
+      if (!blockhash || !timestamp) {
+        throw new Error('Invalid data from primary blockhash source');
+      }
+
+      return blockhash;
+    } catch (error) {
+      lastError = error instanceof Error ? error : new Error(String(error));
+      if (attempt === RETRY_ATTEMPTS) {
+        throw new Error(lastError.message);
+      }
+
+      await delay(RETRY_DELAY_MS * (attempt + 1));
     }
-    throw new Error(String(error));
   }
+
+  throw new Error(lastError?.message ?? 'Unknown fetchBlockchainData error');
 };

packages/e2e/src/e2e.spec.ts

@@ -14,9 +14,9 @@ import {
   createViewPKPsByAddressTest,
   createViewPKPsByAuthDataTest,
   init,
+  registerPaymentDelegationTicketSuite,
 } from '@lit-protocol/e2e';
 import type { AuthContext } from '@lit-protocol/e2e';
-import { registerPaymentDelegationTicketSuite } from './tickets/delegation.suite';
 
 const SELECTED_NETWORK = process.env['NETWORK'];
 const RPC_OVERRIDE_ENV_VAR =