@lumiapassport/ui-kit 1.6.3 → 1.8.0

package/dist/index.d.cts

@@ -229,6 +229,66 @@ declare function prepareUserOperation(session: AccountSession$1, callTarget: `0x
     userOp: UserOperationV07 | UserOperationV06;
     userOpHash: `0x${string}`;
 }>;
+/**
+ * EIP712 Domain descriptor
+ */
+interface TypedDataDomain {
+    name?: string;
+    version?: string;
+    chainId?: number;
+    verifyingContract?: `0x${string}`;
+    salt?: `0x${string}`;
+}
+/**
+ * EIP712 Type definition
+ */
+interface TypedDataField {
+    name: string;
+    type: string;
+}
+/**
+ * Parameters for signing typed data (EIP712)
+ */
+interface SignTypedDataParams {
+    domain: TypedDataDomain;
+    types: Record<string, TypedDataField[]>;
+    primaryType: string;
+    message: Record<string, any>;
+}
+/**
+ * Sign typed data according to EIP712 standard.
+ * This method computes the EIP712 hash and signs it using MPC.
+ *
+ * @param session - Account session with signing credentials
+ * @param params - EIP712 typed data parameters (domain, types, primaryType, message)
+ * @returns Hex-encoded signature
+ *
+ * @example
+ * ```typescript
+ * const signature = await signTypedData(session, {
+ *   domain: {
+ *     name: 'MyApp',
+ *     version: '1',
+ *     chainId: 994,
+ *     verifyingContract: '0x...'
+ *   },
+ *   types: {
+ *     Order: [
+ *       { name: 'tokenIds', type: 'uint256[]' },
+ *       { name: 'price', type: 'uint256' },
+ *       { name: 'deadline', type: 'uint256' }
+ *     ]
+ *   },
+ *   primaryType: 'Order',
+ *   message: {
+ *     tokenIds: [1n, 2n, 3n],
+ *     price: 1000000000000000000n,
+ *     deadline: 1735689600n
+ *   }
+ * });
+ * ```
+ */
+declare function signTypedData(session: AccountSession$1, params: SignTypedDataParams): Promise<`0x${string}`>;
 
 type AccountSession = AccountSession$1;
 interface SessionState {
@@ -901,4 +961,4 @@ interface WalletReadyStatus {
     timestamp: number;
 }
 
-export { type AccountSession$1 as AccountSession, Address, type AddressProps, type Asset, ConnectWalletButton, type ConnectWalletButtonProps, Hash, type HashProps, KeyshareBackup, LUMIA_EXPLORER_URL, LumiaLogo, type LumiaPassportCallbacks, type LumiaPassportConfig, LumiaPassportProvider, type LumiaPassportProviderProps, LumiaPassportSessionProvider, type LumiaPassportSessionProviderProps, LumiaRainbowKitProvider, type LumiaRainbowKitProviderProps, LumiaSessionProvider, type LumiaSessionProviderProps, LumiaWagmiProvider, type ProviderDetail, type SendTransactionParams, type SendTransactionResult, type Theme, ThemeToggle, type TokenBalance, type Transaction, TransactionsList, type UpdateProfileRequest, type UseSendTransactionReturn, type UseUserOpStatusOptions, type UseUserOpStatusReturn, type UserOpMempool, type UserOpReceipt, type SendTransactionParams$1 as UserOpSendTransactionParams, type UserOpState, UserOpStatus, type UserOpStatusProps, type UserOperation, type UserProfile, type WalletReadyStatus, getUserProfile, lumiaBeam, prepareUserOperation, queryClient, sendUserOperation, updateUserProfile, useAssets, useLumiaPassportConfig, useLumiaPassportLinkedProfiles, useLumiaPassportSession, useLumiaSession, useSendTransaction, useSmartAccountTransactions, useTheme, useTokenBalance, useTokenInfo, useTransactions, useUserOpStatus, wagmiConfig };
+export { type AccountSession$1 as AccountSession, Address, type AddressProps, type Asset, ConnectWalletButton, type ConnectWalletButtonProps, Hash, type HashProps, KeyshareBackup, LUMIA_EXPLORER_URL, LumiaLogo, type LumiaPassportCallbacks, type LumiaPassportConfig, LumiaPassportProvider, type LumiaPassportProviderProps, LumiaPassportSessionProvider, type LumiaPassportSessionProviderProps, LumiaRainbowKitProvider, type LumiaRainbowKitProviderProps, LumiaSessionProvider, type LumiaSessionProviderProps, LumiaWagmiProvider, type ProviderDetail, type SendTransactionParams, type SendTransactionResult, type SignTypedDataParams, type Theme, ThemeToggle, type TokenBalance, type Transaction, TransactionsList, type TypedDataDomain, type TypedDataField, type UpdateProfileRequest, type UseSendTransactionReturn, type UseUserOpStatusOptions, type UseUserOpStatusReturn, type UserOpMempool, type UserOpReceipt, type SendTransactionParams$1 as UserOpSendTransactionParams, type UserOpState, UserOpStatus, type UserOpStatusProps, type UserOperation, type UserProfile, type WalletReadyStatus, getUserProfile, lumiaBeam, prepareUserOperation, queryClient, sendUserOperation, signTypedData, updateUserProfile, useAssets, useLumiaPassportConfig, useLumiaPassportLinkedProfiles, useLumiaPassportSession, useLumiaSession, useSendTransaction, useSmartAccountTransactions, useTheme, useTokenBalance, useTokenInfo, useTransactions, useUserOpStatus, wagmiConfig };

package/dist/index.d.ts

@@ -229,6 +229,66 @@ declare function prepareUserOperation(session: AccountSession$1, callTarget: `0x
     userOp: UserOperationV07 | UserOperationV06;
     userOpHash: `0x${string}`;
 }>;
+/**
+ * EIP712 Domain descriptor
+ */
+interface TypedDataDomain {
+    name?: string;
+    version?: string;
+    chainId?: number;
+    verifyingContract?: `0x${string}`;
+    salt?: `0x${string}`;
+}
+/**
+ * EIP712 Type definition
+ */
+interface TypedDataField {
+    name: string;
+    type: string;
+}
+/**
+ * Parameters for signing typed data (EIP712)
+ */
+interface SignTypedDataParams {
+    domain: TypedDataDomain;
+    types: Record<string, TypedDataField[]>;
+    primaryType: string;
+    message: Record<string, any>;
+}
+/**
+ * Sign typed data according to EIP712 standard.
+ * This method computes the EIP712 hash and signs it using MPC.
+ *
+ * @param session - Account session with signing credentials
+ * @param params - EIP712 typed data parameters (domain, types, primaryType, message)
+ * @returns Hex-encoded signature
+ *
+ * @example
+ * ```typescript
+ * const signature = await signTypedData(session, {
+ *   domain: {
+ *     name: 'MyApp',
+ *     version: '1',
+ *     chainId: 994,
+ *     verifyingContract: '0x...'
+ *   },
+ *   types: {
+ *     Order: [
+ *       { name: 'tokenIds', type: 'uint256[]' },
+ *       { name: 'price', type: 'uint256' },
+ *       { name: 'deadline', type: 'uint256' }
+ *     ]
+ *   },
+ *   primaryType: 'Order',
+ *   message: {
+ *     tokenIds: [1n, 2n, 3n],
+ *     price: 1000000000000000000n,
+ *     deadline: 1735689600n
+ *   }
+ * });
+ * ```
+ */
+declare function signTypedData(session: AccountSession$1, params: SignTypedDataParams): Promise<`0x${string}`>;
 
 type AccountSession = AccountSession$1;
 interface SessionState {
@@ -901,4 +961,4 @@ interface WalletReadyStatus {
     timestamp: number;
 }
 
-export { type AccountSession$1 as AccountSession, Address, type AddressProps, type Asset, ConnectWalletButton, type ConnectWalletButtonProps, Hash, type HashProps, KeyshareBackup, LUMIA_EXPLORER_URL, LumiaLogo, type LumiaPassportCallbacks, type LumiaPassportConfig, LumiaPassportProvider, type LumiaPassportProviderProps, LumiaPassportSessionProvider, type LumiaPassportSessionProviderProps, LumiaRainbowKitProvider, type LumiaRainbowKitProviderProps, LumiaSessionProvider, type LumiaSessionProviderProps, LumiaWagmiProvider, type ProviderDetail, type SendTransactionParams, type SendTransactionResult, type Theme, ThemeToggle, type TokenBalance, type Transaction, TransactionsList, type UpdateProfileRequest, type UseSendTransactionReturn, type UseUserOpStatusOptions, type UseUserOpStatusReturn, type UserOpMempool, type UserOpReceipt, type SendTransactionParams$1 as UserOpSendTransactionParams, type UserOpState, UserOpStatus, type UserOpStatusProps, type UserOperation, type UserProfile, type WalletReadyStatus, getUserProfile, lumiaBeam, prepareUserOperation, queryClient, sendUserOperation, updateUserProfile, useAssets, useLumiaPassportConfig, useLumiaPassportLinkedProfiles, useLumiaPassportSession, useLumiaSession, useSendTransaction, useSmartAccountTransactions, useTheme, useTokenBalance, useTokenInfo, useTransactions, useUserOpStatus, wagmiConfig };
+export { type AccountSession$1 as AccountSession, Address, type AddressProps, type Asset, ConnectWalletButton, type ConnectWalletButtonProps, Hash, type HashProps, KeyshareBackup, LUMIA_EXPLORER_URL, LumiaLogo, type LumiaPassportCallbacks, type LumiaPassportConfig, LumiaPassportProvider, type LumiaPassportProviderProps, LumiaPassportSessionProvider, type LumiaPassportSessionProviderProps, LumiaRainbowKitProvider, type LumiaRainbowKitProviderProps, LumiaSessionProvider, type LumiaSessionProviderProps, LumiaWagmiProvider, type ProviderDetail, type SendTransactionParams, type SendTransactionResult, type SignTypedDataParams, type Theme, ThemeToggle, type TokenBalance, type Transaction, TransactionsList, type TypedDataDomain, type TypedDataField, type UpdateProfileRequest, type UseSendTransactionReturn, type UseUserOpStatusOptions, type UseUserOpStatusReturn, type UserOpMempool, type UserOpReceipt, type SendTransactionParams$1 as UserOpSendTransactionParams, type UserOpState, UserOpStatus, type UserOpStatusProps, type UserOperation, type UserProfile, type WalletReadyStatus, getUserProfile, lumiaBeam, prepareUserOperation, queryClient, sendUserOperation, signTypedData, updateUserProfile, useAssets, useLumiaPassportConfig, useLumiaPassportLinkedProfiles, useLumiaPassportSession, useLumiaSession, useSendTransaction, useSmartAccountTransactions, useTheme, useTokenBalance, useTokenInfo, useTransactions, useUserOpStatus, wagmiConfig };

package/dist/index.js

@@ -429,6 +429,7 @@ async function beginPasskeyAuthentication(username) {
     {
       method: "POST",
       headers: { "Content-Type": "application/json" },
+      credentials: "include",
       body: JSON.stringify({ username })
     }
   );
@@ -472,6 +473,7 @@ async function completePasskeyAuthentication(challengeId, credential, options) {
     {
       method: "POST",
       headers: { "Content-Type": "application/json" },
+      credentials: "include",
       body: JSON.stringify({ challengeId, credential: credentialData })
     }
   );
@@ -501,6 +503,7 @@ async function beginPasskeyRegistration(username) {
     {
       method: "POST",
       headers: { "Content-Type": "application/json" },
+      credentials: "include",
       body: JSON.stringify({ username })
     }
   );
@@ -544,6 +547,7 @@ async function completePasskeyRegistration(challengeId, credential, options) {
     {
       method: "POST",
       headers: { "Content-Type": "application/json" },
+      credentials: "include",
       body: JSON.stringify({ challengeId, credential: credentialData })
     }
   );
@@ -794,7 +798,7 @@ async function signDigestWithMpc(userId, digest32, userOpDetails) {
     }
     const transaction = {
       to: userOpDetails?.callTarget || "0x0000000000000000000000000000000000000000",
-      value: "0",
+      value: userOpDetails?.value || "0",
       data: userOpDetails?.callData || "0x",
       digest32,
       // Pre-computed digest - DO NOT recompute!
@@ -820,6 +824,47 @@ async function signDigestWithMpc(userId, digest32, userOpDetails) {
     return null;
   }
 }
+async function signTypedDataWithMpc(userId, digest32, typedData) {
+  const startTime = performance.now();
+  currentSigningStats = {
+    startTime,
+    rounds: []
+  };
+  try {
+    console.log("[signTypedDataWithMpc] Starting EIP712 signature request:", {
+      userId,
+      primaryType: typedData?.primaryType,
+      digest32
+    });
+    const iframeManager = getIframeManager();
+    const { jwtTokenManager: jwtTokenManager3 } = await Promise.resolve().then(() => (init_auth(), auth_exports));
+    const accessToken = jwtTokenManager3.getAccessToken();
+    if (!accessToken) {
+      console.error("[signTypedDataWithMpc] No access token available");
+      throw new Error("No access token available for signing");
+    }
+    console.log("[signTypedDataWithMpc] Calling iframeManager.signTypedData...");
+    const signature = await iframeManager.signTypedData(userId, typedData, digest32, accessToken);
+    console.log("[signTypedDataWithMpc] Signature received:", signature);
+    const endTime = performance.now();
+    currentSigningStats.endTime = endTime;
+    currentSigningStats.totalDurationMs = endTime - startTime;
+    return signature;
+  } catch (error) {
+    console.error("[signTypedDataWithMpc] Error occurred:", error);
+    logSdkError(
+      error instanceof Error ? error : new Error("EIP712 MPC signing failed"),
+      { userId, primaryType: typedData?.primaryType },
+      "iframe-mpc"
+    );
+    const endTime = performance.now();
+    if (currentSigningStats) {
+      currentSigningStats.endTime = endTime;
+      currentSigningStats.totalDurationMs = endTime - startTime;
+    }
+    return null;
+  }
+}
 async function checkKeyshare(userId) {
   try {
     const iframeManager = getIframeManager();
@@ -872,7 +917,9 @@ var init_httpClient = __esm({
         }
         const requestConfig = {
           method,
-          headers: requestHeaders
+          headers: requestHeaders,
+          credentials: "include"
+          // Enable cookies for cross-origin requests
         };
         if (body && method !== "GET") {
           requestConfig.body = typeof body === "string" ? body : JSON.stringify(body);
@@ -1133,7 +1180,8 @@ var init_cloudStorage = __esm({
         const searchResponse = await fetch(
           `https://www.googleapis.com/drive/v3/files?q=name='${folderName}' and mimeType='application/vnd.google-apps.folder' and trashed=false`,
           {
-            headers: { Authorization: `Bearer ${this.accessToken}` }
+            headers: { Authorization: `Bearer ${this.accessToken}` },
+            credentials: "include"
           }
         );
         if (!searchResponse.ok) {
@@ -1149,6 +1197,7 @@ var init_cloudStorage = __esm({
             Authorization: `Bearer ${this.accessToken}`,
             "Content-Type": "application/json"
           },
+          credentials: "include",
           body: JSON.stringify({
             name: folderName,
             mimeType: "application/vnd.google-apps.folder"
@@ -1171,6 +1220,7 @@ var init_cloudStorage = __esm({
             headers: {
               Authorization: `Bearer ${this.accessToken}`
             },
+            credentials: "include",
             body: form
           }
         );
@@ -1255,7 +1305,7 @@ async function getShareVaultToken(scopes) {
 async function getShareRecoveryStats() {
   try {
     const token = await getShareVaultToken(["share:get"]);
-    const response = await fetch(`${getShareVaultUrl()}/v1/shares/me/recovery/stats`, { method: "GET", headers: { Authorization: `Bearer ${token.token}`, "Content-Type": "application/json" } });
+    const response = await fetch(`${getShareVaultUrl()}/v1/shares/me/recovery/stats`, { method: "GET", headers: { Authorization: `Bearer ${token.token}`, "Content-Type": "application/json" }, credentials: "include" });
     if (response.status === 404) return null;
     if (!response.ok) return null;
     return await response.json();
@@ -1265,26 +1315,26 @@ async function getShareRecoveryStats() {
 }
 async function getShare() {
   const token = await getShareVaultToken(["share:get"]);
-  const response = await fetch(`${getShareVaultUrl()}/v1/shares/me`, { method: "GET", headers: { Authorization: `Bearer ${token.token}`, "Content-Type": "application/json" } });
+  const response = await fetch(`${getShareVaultUrl()}/v1/shares/me`, { method: "GET", headers: { Authorization: `Bearer ${token.token}`, "Content-Type": "application/json" }, credentials: "include" });
   if (response.status === 404) return null;
   if (!response.ok) throw new Error(`Failed to fetch share: ${response.status} ${response.statusText}`);
   return await response.json();
 }
 async function uploadShare(share, idempotencyKey) {
   const token = await getShareVaultToken(["share:put"]);
-  const response = await fetch(`${getShareVaultUrl()}/v1/shares/me`, { method: "PUT", headers: { Authorization: `Bearer ${token.token}`, "Content-Type": "application/json", "Idempotency-Key": idempotencyKey }, body: JSON.stringify(share) });
+  const response = await fetch(`${getShareVaultUrl()}/v1/shares/me`, { method: "PUT", headers: { Authorization: `Bearer ${token.token}`, "Content-Type": "application/json", "Idempotency-Key": idempotencyKey }, credentials: "include", body: JSON.stringify(share) });
   if (!response.ok) throw new Error(`Failed to upload share: ${response.status} ${response.statusText}`);
   return await response.json();
 }
 async function rewrapShare(payload, idempotencyKey) {
   const token = await getShareVaultToken(["share:rewrap"]);
-  const response = await fetch(`${getShareVaultUrl()}/v1/shares/me/rewrap`, { method: "POST", headers: { Authorization: `Bearer ${token.token}`, "Content-Type": "application/json", "Idempotency-Key": idempotencyKey }, body: JSON.stringify(payload) });
+  const response = await fetch(`${getShareVaultUrl()}/v1/shares/me/rewrap`, { method: "POST", headers: { Authorization: `Bearer ${token.token}`, "Content-Type": "application/json", "Idempotency-Key": idempotencyKey }, credentials: "include", body: JSON.stringify(payload) });
   if (!response.ok) throw new Error(`Failed to rewrap share: ${response.status} ${response.statusText}`);
   return await response.json();
 }
 async function deleteShare() {
   const token = await getShareVaultToken(["share:delete"]);
-  const response = await fetch(`${getShareVaultUrl()}/v1/shares/me`, { method: "DELETE", headers: { Authorization: `Bearer ${token.token}` } });
+  const response = await fetch(`${getShareVaultUrl()}/v1/shares/me`, { method: "DELETE", headers: { Authorization: `Bearer ${token.token}` }, credentials: "include" });
   if (!response.ok && response.status !== 404) throw new Error(`Failed to delete share: ${response.status} ${response.statusText}`);
 }
 async function deriveKEKFromPasskey(userId, requiredCredentialId) {
@@ -1461,7 +1511,7 @@ function clearBackupStatus(userId) {
 async function checkServerBackupAvailability() {
   try {
     const token = await getShareVaultToken(["share:get"]);
-    const response = await fetch(`${getShareVaultUrl()}/v1/shares/me/recovery/stats`, { method: "GET", headers: { Authorization: `Bearer ${token.token}`, "Content-Type": "application/json" } });
+    const response = await fetch(`${getShareVaultUrl()}/v1/shares/me/recovery/stats`, { method: "GET", headers: { Authorization: `Bearer ${token.token}`, "Content-Type": "application/json" }, credentials: "include" });
     if (response.status === 404) return { hasBackup: false, serviceAvailable: true };
     if (!response.ok) return { hasBackup: false, serviceAvailable: false };
     return { hasBackup: true, serviceAvailable: true };
@@ -1471,14 +1521,14 @@ async function checkServerBackupAvailability() {
 }
 async function uploadShareToVault(envelope, token) {
   const idempotencyKey = crypto.randomUUID ? crypto.randomUUID() : `backup-${Date.now()}`;
-  const response = await fetch(`${getShareVaultUrl()}/v1/shares/me`, { method: "PUT", headers: { "Content-Type": "application/json", Authorization: `Bearer ${token}`, "Idempotency-Key": idempotencyKey }, body: JSON.stringify(envelope) });
+  const response = await fetch(`${getShareVaultUrl()}/v1/shares/me`, { method: "PUT", headers: { "Content-Type": "application/json", Authorization: `Bearer ${token}`, "Idempotency-Key": idempotencyKey }, credentials: "include", body: JSON.stringify(envelope) });
   if (!response.ok) {
     const errorText = await response.text();
     throw new Error(`Failed to upload share: ${response.status} ${response.statusText} - ${errorText}`);
   }
 }
 async function downloadShareFromVault(token) {
-  const response = await fetch(`${getShareVaultUrl()}/v1/shares/me`, { method: "GET", headers: { Authorization: `Bearer ${token}`, "X-Client-Device-Id": "lumia-ui-kit", "X-Client-Device-Name": "Lumia UI Kit" } });
+  const response = await fetch(`${getShareVaultUrl()}/v1/shares/me`, { method: "GET", headers: { Authorization: `Bearer ${token}`, "X-Client-Device-Id": "lumia-ui-kit", "X-Client-Device-Name": "Lumia UI Kit" }, credentials: "include" });
   if (!response.ok) {
     if (response.status === 404) throw new Error("No backup found on server for this user");
     const errorText = await response.text();
@@ -2727,6 +2777,32 @@ var init_iframe_manager = __esm({
         }
         throw new Error("Transaction signing failed");
       }
+      /**
+       * Sign EIP712 typed data
+       */
+      async signTypedData(userId, typedData, digest32, accessToken) {
+        console.log("[IframeManager] signTypedData: Sending SIGN_TYPED_DATA message", {
+          userId,
+          primaryType: typedData.primaryType,
+          digest32
+        });
+        const response = await this.sendMessage("SIGN_TYPED_DATA", {
+          userId,
+          projectId: this.projectId,
+          typedData,
+          digest32,
+          accessToken
+          // Pass access token for TSS API authentication
+        });
+        console.log("[IframeManager] signTypedData: Response received", {
+          type: response.type,
+          hasSignature: !!response.signature
+        });
+        if (response.type === "LUMIA_PASSPORT_EIP712_SIGNATURE") {
+          return response.signature;
+        }
+        throw new Error("EIP712 signing failed");
+      }
       /**
        * Get user's wallet address
        */
@@ -4298,6 +4374,7 @@ var init_AuthModal = __esm({
             headers: {
               "Content-Type": "application/json"
             },
+            credentials: "include",
             body: JSON.stringify({
               email,
               purpose: "login"
@@ -4415,6 +4492,7 @@ var init_AuthModal = __esm({
             headers: {
               "Content-Type": "application/json"
             },
+            credentials: "include",
             body: JSON.stringify({
               email,
               purpose: "login"
@@ -5001,7 +5079,7 @@ var init_akHelpers = __esm({
 });
 
 // src/internal/clients/account.ts
-import { parseEther, encodeFunctionData, createWalletClient, http as http3 } from "viem";
+import { parseEther, encodeFunctionData, createWalletClient, http as http3, hashTypedData } from "viem";
 import { entryPoint07Abi } from "viem/account-abstraction";
 import { privateKeyToAccount } from "viem/accounts";
 import {
@@ -5248,8 +5326,10 @@ async function sendUserOperation(session, callTarget, amountWei, innerData = "0x
         paymaster: userOp.paymaster,
         factory: userOp.factory,
         factoryData: userOp.factoryData,
-        callTarget
+        callTarget,
         // Add callTarget so iframe can display "To" address
+        value: amountWei
+        // Add value so iframe can display transaction amount
       });
       if (!mpcSig) throw new Error("MPC signing failed");
       signature = mpcSig;
@@ -5498,6 +5578,61 @@ async function getEntryPointDeposit(address, entryPointVersion = "v0.7") {
   const depositAbi = [{ type: "function", name: "balanceOf", stateMutability: "view", inputs: [{ name: "account", type: "address" }], outputs: [{ name: "", type: "uint256" }] }];
   return await publicClient.readContract({ address: entryPointAddress, abi: depositAbi, functionName: "balanceOf", args: [address] });
 }
+async function signTypedData(session, params) {
+  const { domain, types, primaryType, message } = params;
+  const digest = hashTypedData({
+    domain,
+    types,
+    primaryType,
+    message
+  });
+  const serializeForIframe = (obj) => {
+    if (typeof obj === "bigint") {
+      return obj.toString();
+    }
+    if (Array.isArray(obj)) {
+      return obj.map(serializeForIframe);
+    }
+    if (obj !== null && typeof obj === "object") {
+      const result = {};
+      for (const key in obj) {
+        result[key] = serializeForIframe(obj[key]);
+      }
+      return result;
+    }
+    return obj;
+  };
+  let signature;
+  if (session.mpcUserId) {
+    const mpcSig = await signTypedDataWithMpc(
+      session.mpcUserId,
+      digest,
+      {
+        domain: {
+          name: domain.name,
+          version: domain.version,
+          chainId: domain.chainId,
+          verifyingContract: domain.verifyingContract,
+          salt: domain.salt
+        },
+        types,
+        primaryType,
+        message: serializeForIframe(message)
+      }
+    );
+    if (!mpcSig) {
+      throw new Error("MPC signing failed");
+    }
+    signature = mpcSig;
+  } else if (session.ownerPrivateKey) {
+    const account = privateKeyToAccount(session.ownerPrivateKey);
+    const rawSig = await account.sign({ hash: digest });
+    signature = normalizeSignature(rawSig);
+  } else {
+    throw new Error("No signing method available");
+  }
+  return signature;
+}
 var PAYMASTER_VERIFICATION_GAS_LIMIT, PAYMASTER_POSTOP_GAS_LIMIT, MAX_BUNDLER_VERIFICATION_GAS, PAYMASTER_VERIFICATION_GAS, executeAbi;
 var init_account = __esm({
   "src/internal/clients/account.ts"() {
@@ -5590,6 +5725,7 @@ __export(clients_exports, {
   sendDemoUserOp: () => sendDemoUserOp,
   sendLumiaUserOp: () => sendLumiaUserOp,
   sendUserOperation: () => sendUserOperation,
+  signTypedData: () => signTypedData,
   viemBundlerClient: () => viemBundlerClient
 });
 var init_clients = __esm({
@@ -7096,7 +7232,7 @@ var TransactionsModal = ({ open, onOpenChange, onBack }) => {
       const explorerUrl = getExplorerUrl();
       const baseUrl = explorerUrl.replace(/\/$/, "");
       const apiUrl = `${baseUrl}/api/v2/addresses/${address}/transactions?items_count=20`;
-      const response = await fetch(apiUrl);
+      const response = await fetch(apiUrl, { credentials: "include" });
       if (!response.ok) {
         throw new Error(`Failed to fetch transactions: ${response.status}`);
       }
@@ -7743,6 +7879,7 @@ var UserOpStatus = ({
     const res = await fetch(getBundlerUrl(), {
       method: "POST",
       headers: { "content-type": "application/json" },
+      credentials: "include",
       body: JSON.stringify(body)
     });
     const json = await res.json();
@@ -8508,7 +8645,7 @@ function useLumiaPassportLinkedProfiles() {
 // package.json
 var package_default = {
   name: "@lumiapassport/ui-kit",
-  version: "1.6.3",
+  version: "1.8.0",
   description: "React UI components and hooks for Lumia Passport authentication and Account Abstraction",
   type: "module",
   main: "./dist/index.cjs",
@@ -9626,7 +9763,7 @@ var TransactionsList = ({
         const baseUrl = explorerUrl.replace(/\/$/, "");
         const apiUrl = `${baseUrl}/api/v2/addresses/${address}/transactions?items_count=${itemsCount}`;
         console.log("[TransactionsList] Fetching from:", apiUrl);
-        const response = await fetch(apiUrl);
+        const response = await fetch(apiUrl, { credentials: "include" });
         if (!response.ok) {
           throw new Error(`Failed to fetch transactions: ${response.status}`);
         }
@@ -9770,6 +9907,7 @@ function useUserOpStatus(options = {}) {
     const res = await fetch(getBundlerUrl(), {
       method: "POST",
       headers: { "content-type": "application/json" },
+      credentials: "include",
       body: JSON.stringify(body)
     });
     const json = await res.json();
@@ -10076,6 +10214,7 @@ export {
   prepareUserOperation,
   queryClient,
   sendUserOperation,
+  signTypedData,
   updateUserProfile,
   useAssets,
   useLumiaPassportConfig,