@lit-protocol/vincent-app-sdk 2.6.1 → 2.7.0

package/CHANGELOG.md

@@ -1,3 +1,9 @@
+## 2.7.0 (2026-01-30)
+
+### 🧱 Updated Dependencies
+
+- Updated ability-sdk to 3.0.2
+
 ## 2.6.1 (2026-01-17)
 
 ### 🧱 Updated Dependencies

package/dist/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lit-protocol/vincent-app-sdk",
-  "version": "2.6.1",
+  "version": "2.7.0-alpha",
   "description": "Vincent SDK for browser and backend",
   "author": "Lit Protocol",
   "license": "ISC",
@@ -65,6 +65,7 @@
     "@noble/secp256k1": "^2.2.3",
     "ethers": "5.8.0",
     "tslib": "^2.8.1",
+    "viem": "2.38.3",
     "zod": "3.25.64"
   },
   "peerDependencies": {

package/dist/src/utils/index.d.ts

@@ -1,3 +1,5 @@
 export { getDelegatorsAgentPkpAddresses } from './delegation';
+export { createVincentViemPkpSigner } from './vincentViemPkpSigner';
+export { wrapKernelAccountWithUserOpCapture } from './wrapKernelAccountWithUserOpCapture';
 export type { GetDelegatorsAgentPkpsParams } from './types';
 //# sourceMappingURL=index.d.ts.map

package/dist/src/utils/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,8BAA8B,EAAE,MAAM,cAAc,CAAC;AAE9D,YAAY,EAAE,4BAA4B,EAAE,MAAM,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,8BAA8B,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AAE1F,YAAY,EAAE,4BAA4B,EAAE,MAAM,SAAS,CAAC"}

package/dist/src/utils/index.js

@@ -1,6 +1,10 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.getDelegatorsAgentPkpAddresses = void 0;
+exports.wrapKernelAccountWithUserOpCapture = exports.createVincentViemPkpSigner = exports.getDelegatorsAgentPkpAddresses = void 0;
 var delegation_1 = require("./delegation");
 Object.defineProperty(exports, "getDelegatorsAgentPkpAddresses", { enumerable: true, get: function () { return delegation_1.getDelegatorsAgentPkpAddresses; } });
+var vincentViemPkpSigner_1 = require("./vincentViemPkpSigner");
+Object.defineProperty(exports, "createVincentViemPkpSigner", { enumerable: true, get: function () { return vincentViemPkpSigner_1.createVincentViemPkpSigner; } });
+var wrapKernelAccountWithUserOpCapture_1 = require("./wrapKernelAccountWithUserOpCapture");
+Object.defineProperty(exports, "wrapKernelAccountWithUserOpCapture", { enumerable: true, get: function () { return wrapKernelAccountWithUserOpCapture_1.wrapKernelAccountWithUserOpCapture; } });
 //# sourceMappingURL=index.js.map

package/dist/src/utils/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/utils/index.ts"],"names":[],"mappings":";;;AAAA,2CAA8D;AAArD,4HAAA,8BAA8B,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/utils/index.ts"],"names":[],"mappings":";;;AAAA,2CAA8D;AAArD,4HAAA,8BAA8B,OAAA;AACvC,+DAAoE;AAA3D,kIAAA,0BAA0B,OAAA;AACnC,2FAA0F;AAAjF,wJAAA,kCAAkC,OAAA"}

package/dist/src/utils/vincentViemPkpSigner.d.ts

@@ -0,0 +1,12 @@
+import type { Address, Hex, LocalAccount } from 'viem';
+export interface VincentViemPkpSignerParams {
+    pkpAddress: Address;
+    onSignUserOpHash: (params: {
+        userOpHash: Hex;
+        userOp: any;
+    }) => Promise<Hex>;
+}
+export declare function createVincentViemPkpSigner(params: VincentViemPkpSignerParams): LocalAccount & {
+    setCurrentUserOp: (userOp: any) => void;
+};
+//# sourceMappingURL=vincentViemPkpSigner.d.ts.map

package/dist/src/utils/vincentViemPkpSigner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vincentViemPkpSigner.d.ts","sourceRoot":"","sources":["../../../src/utils/vincentViemPkpSigner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,YAAY,EAAmB,MAAM,MAAM,CAAC;AAIxE,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,OAAO,CAAC;IACpB,gBAAgB,EAAE,CAAC,MAAM,EAAE;QAAE,UAAU,EAAE,GAAG,CAAC;QAAC,MAAM,EAAE,GAAG,CAAA;KAAE,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC;CAC9E;AAED,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,0BAA0B,GACjC,YAAY,GAAG;IAAE,gBAAgB,EAAE,CAAC,MAAM,EAAE,GAAG,KAAK,IAAI,CAAA;CAAE,CA0E5D"}

package/dist/src/utils/vincentViemPkpSigner.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createVincentViemPkpSigner = createVincentViemPkpSigner;
+const accounts_1 = require("viem/accounts");
+function createVincentViemPkpSigner(params) {
+    const { pkpAddress, onSignUserOpHash } = params;
+    let currentUserOp = null;
+    const account = (0, accounts_1.toAccount)({
+        address: pkpAddress,
+        async signMessage({ message }) {
+            console.log('[createVincentViemPkpSigner] signMessage called by ZeroDev');
+            console.log('message:', message);
+            console.log('message type:', typeof message);
+            console.log('currentUserOp status:', currentUserOp ? 'SET' : 'NOT SET');
+            let userOpHash;
+            if (typeof message === 'object' && 'raw' in message) {
+                userOpHash = message.raw;
+                console.log('message.raw (UserOp hash):', userOpHash);
+                if (!currentUserOp) {
+                    throw new Error('[createVincentViemPkpSigner] currentUserOp is null, wrapKernelAccountWithUserOpCapture did not intercept correctly');
+                }
+                console.log('Full UserOp available for Lit Action:', JSON.stringify(currentUserOp, (key, value) => (typeof value === 'bigint' ? value.toString() : value), 2));
+                // Delegate signing to Lit Actions via callback
+                const signature = await onSignUserOpHash({
+                    userOpHash,
+                    userOp: currentUserOp,
+                });
+                // Clear the current UserOp after signing
+                currentUserOp = null;
+                return signature;
+            }
+            throw new Error('[createVincentViemPkpSigner] signMessage called without UserOp hash');
+        },
+        async signTransaction(transaction, options) {
+            console.log('[createVincentViemPkpSigner] signTransaction called by ZeroDev');
+            console.log('transaction:', JSON.stringify(transaction, null, 2));
+            console.log('options:', options);
+            throw new Error('[createVincentViemPkpSigner] signTransaction not supported - use signMessage for UserOps');
+        },
+        async signTypedData(parameters) {
+            console.log('[createVincentViemPkpSigner] signTypedData called by ZeroDev');
+            console.log('parameters:', JSON.stringify(parameters, null, 2));
+            throw new Error('[createVincentViemPkpSigner] signTypedData not supported - use signMessage for UserOps');
+        },
+    });
+    // Add method to set the current UserOp before signing
+    account.setCurrentUserOp = (userOp) => {
+        currentUserOp = userOp;
+    };
+    return account;
+}
+//# sourceMappingURL=vincentViemPkpSigner.js.map

package/dist/src/utils/vincentViemPkpSigner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vincentViemPkpSigner.js","sourceRoot":"","sources":["../../../src/utils/vincentViemPkpSigner.ts"],"names":[],"mappings":";;AASA,gEA4EC;AAnFD,4CAA0C;AAO1C,SAAgB,0BAA0B,CACxC,MAAkC;IAElC,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,GAAG,MAAM,CAAC;IAEhD,IAAI,aAAa,GAAQ,IAAI,CAAC;IAE9B,MAAM,OAAO,GAAG,IAAA,oBAAS,EAAC;QACxB,OAAO,EAAE,UAAU;QAEnB,KAAK,CAAC,WAAW,CAAC,EAAE,OAAO,EAAgC;YACzD,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;YAC1E,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,OAAO,CAAC,CAAC;YAC7C,OAAO,CAAC,GAAG,CAAC,uBAAuB,EAAE,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAExE,IAAI,UAA2B,CAAC;YAChC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,IAAI,OAAO,EAAE,CAAC;gBACpD,UAAU,GAAG,OAAO,CAAC,GAAU,CAAC;gBAChC,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,UAAU,CAAC,CAAC;gBAEtD,IAAI,CAAC,aAAa,EAAE,CAAC;oBACnB,MAAM,IAAI,KAAK,CACb,oHAAoH,CACrH,CAAC;gBACJ,CAAC;gBAED,OAAO,CAAC,GAAG,CACT,uCAAuC,EACvC,IAAI,CAAC,SAAS,CACZ,aAAa,EACb,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,EACtE,CAAC,CACF,CACF,CAAC;gBAEF,+CAA+C;gBAC/C,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC;oBACvC,UAAU;oBACV,MAAM,EAAE,aAAa;iBACtB,CAAC,CAAC;gBAEH,yCAAyC;gBACzC,aAAa,GAAG,IAAI,CAAC;gBACrB,OAAO,SAAS,CAAC;YACnB,CAAC;YAED,MAAM,IAAI,KAAK,CAAC,qEAAqE,CAAC,CAAC;QACzF,CAAC;QAED,KAAK,CAAC,eAAe,CAAC,WAAgB,EAAE,OAA8B;YACpE,OAAO,CAAC,GAAG,CAAC,gEAAgE,CAAC,CAAC;YAC9E,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAClE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAEjC,MAAM,IAAI,KAAK,CACb,0FAA0F,CAC3F,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,UAAe;YACjC,OAAO,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC;YAC5E,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAEhE,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAC;QACJ,CAAC;KACF,CAA+D,CAAC;IAEjE,sDAAsD;IACtD,OAAO,CAAC,gBAAgB,GAAG,CAAC,MAAW,EAAE,EAAE;QACzC,aAAa,GAAG,MAAM,CAAC;IACzB,CAAC,CAAC;IAEF,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/src/utils/wrapKernelAccountWithUserOpCapture.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Wraps a kernel account to intercept UserOp preparation and provide it to the signer.
+ *
+ * This allows the signer to receive both the UserOp hash AND the full UserOp structure,
+ * which is needed for passing to Lit Actions for policy validation.
+ */
+export declare function wrapKernelAccountWithUserOpCapture(kernelAccount: any, customSigner: any & {
+    setCurrentUserOp: (userOp: any) => void;
+}): any;
+//# sourceMappingURL=wrapKernelAccountWithUserOpCapture.d.ts.map

package/dist/src/utils/wrapKernelAccountWithUserOpCapture.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrapKernelAccountWithUserOpCapture.d.ts","sourceRoot":"","sources":["../../../src/utils/wrapKernelAccountWithUserOpCapture.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,wBAAgB,kCAAkC,CAChD,aAAa,EAAE,GAAG,EAClB,YAAY,EAAE,GAAG,GAAG;IAAE,gBAAgB,EAAE,CAAC,MAAM,EAAE,GAAG,KAAK,IAAI,CAAA;CAAE,OA4BhE"}

package/dist/src/utils/wrapKernelAccountWithUserOpCapture.js

@@ -0,0 +1,34 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.wrapKernelAccountWithUserOpCapture = wrapKernelAccountWithUserOpCapture;
+/**
+ * Wraps a kernel account to intercept UserOp preparation and provide it to the signer.
+ *
+ * This allows the signer to receive both the UserOp hash AND the full UserOp structure,
+ * which is needed for passing to Lit Actions for policy validation.
+ */
+function wrapKernelAccountWithUserOpCapture(kernelAccount, customSigner) {
+    return new Proxy(kernelAccount, {
+        get(target, prop) {
+            const original = target[prop];
+            // Intercept signUserOperation - this is where the UserOp is passed!
+            if (prop === 'signUserOperation') {
+                return async function (userOp) {
+                    console.log('[wrapKernelAccount] Intercepted signUserOperation');
+                    console.log('[wrapKernelAccount] UserOp keys:', Object.keys(userOp || {}));
+                    // Provide the UserOp to the signer BEFORE signing
+                    customSigner.setCurrentUserOp(userOp);
+                    // Call the original signUserOperation method
+                    const result = await original.call(target, userOp);
+                    return result;
+                };
+            }
+            // Return original property/method
+            if (typeof original === 'function') {
+                return original.bind(target);
+            }
+            return original;
+        },
+    });
+}
+//# sourceMappingURL=wrapKernelAccountWithUserOpCapture.js.map

package/dist/src/utils/wrapKernelAccountWithUserOpCapture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wrapKernelAccountWithUserOpCapture.js","sourceRoot":"","sources":["../../../src/utils/wrapKernelAccountWithUserOpCapture.ts"],"names":[],"mappings":";;AAMA,gFA8BC;AApCD;;;;;GAKG;AACH,SAAgB,kCAAkC,CAChD,aAAkB,EAClB,YAA+D;IAE/D,OAAO,IAAI,KAAK,CAAC,aAAa,EAAE;QAC9B,GAAG,CAAC,MAAM,EAAE,IAAI;YACd,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YAE9B,oEAAoE;YACpE,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBACjC,OAAO,KAAK,WAAW,MAAW;oBAChC,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;oBACjE,OAAO,CAAC,GAAG,CAAC,kCAAkC,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;oBAE3E,kDAAkD;oBAClD,YAAY,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;oBAEtC,6CAA6C;oBAC7C,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;oBACnD,OAAO,MAAM,CAAC;gBAChB,CAAC,CAAC;YACJ,CAAC;YAED,kCAAkC;YAClC,IAAI,OAAO,QAAQ,KAAK,UAAU,EAAE,CAAC;gBACnC,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC/B,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lit-protocol/vincent-app-sdk",
-  "version": "2.6.1",
+  "version": "2.7.0",
   "description": "Vincent SDK for browser and backend",
   "author": "Lit Protocol",
   "license": "ISC",
@@ -57,8 +57,9 @@
     "@noble/secp256k1": "^2.2.3",
     "ethers": "5.8.0",
     "tslib": "^2.8.1",
+    "viem": "2.38.3",
     "zod": "3.25.64",
-    "@lit-protocol/vincent-ability-sdk": "3.0.1",
+    "@lit-protocol/vincent-ability-sdk": "3.0.2",
     "@lit-protocol/vincent-contracts-sdk": "8.1.0"
   },
   "peerDependencies": {