feat(docs): add wrapped-keys support and new APIs for key management and signing

Author: Ansonhkg

.changeset/cold-dancers-push.md

@@ -13,4 +13,4 @@
 '@lit-protocol/e2e': minor
 ---
 
-Introduce wrapped-keys feature to v8 which allows you to manage encrypted key generation/import/export across EVM and Solana, and sign message or transactions without exposing private key material.
+Introduce wrapped-keys support to v8 so applications can generate, import, export, and sign with encrypted keys across EVM and Solana without exposing private key material. New `auth` package APIs include `validateDelegationAuthSig`, `generatePkpDelegationAuthSig`, `generateEoaDelegationAuthSig`, `createPkpAuthContextFromPreGenerated`, and `createPkpSessionSigs`. New `wrapped-keys` APIs include `generatePrivateKey`, `importPrivateKey`, `exportPrivateKey`, `listEncryptedKeyMetadata`, `getEncryptedKey`, `storeEncryptedKey`, `storeEncryptedKeyBatch`, `batchGeneratePrivateKeys`, `signMessageWithEncryptedKey`, and `signTransactionWithEncryptedKey`. See the updated docs (guides/server-sessions, sdk-reference/wrapped-keys, and the new auth references) for end-to-end examples. [PR](https://github.com/LIT-Protocol/js-sdk/pull/972)

docs/docs.json

@@ -113,7 +113,8 @@
                   "sdk/sdk-reference/auth/functions/generatePkpDelegationAuthSig",
                   "sdk/sdk-reference/auth/functions/generateEoaDelegationAuthSig",
                   "sdk/sdk-reference/auth/functions/validateDelegationAuthSig",
-                  "sdk/sdk-reference/auth/functions/getPkpAuthContextFromPreGeneratedAdapter"
+                  "sdk/sdk-reference/auth/functions/createPkpAuthContextFromPreGenerated",
+                  "sdk/sdk-reference/auth/functions/createPkpSessionSigs"
                 ]
               },
               {
@@ -240,4 +241,4 @@
       "discord": "https://litgateway.com/discord"
     }
   }
-}
+}

docs/sdk/sdk-reference/auth/functions/createPkpAuthContextFromPreGenerated.mdx

@@ -0,0 +1,36 @@
+---
+title: createPkpAuthContextFromPreGenerated
+---
+
+# Function
+
+> **createPkpAuthContextFromPreGenerated**(`params`)
+
+Rehydrates a PKP auth context from pre-generated session materials. Ideal for server or lambda environments that receive `{ sessionKeyPair, delegationAuthSig }` and want to issue fresh session signatures on demand.
+
+## Parameters
+
+<ParamField path="params.pkpPublicKey" type="string" required />
+<ParamField path="params.sessionKeyPair" type="SessionKeyPair" required />
+<ParamField path="params.delegationAuthSig" type="AuthSig" required />
+<ParamField path="params.authData" type="AuthData">
+  Optional override when you need to supply explicit auth data instead of relying on the delegation contents.
+</ParamField>
+
+## Returns
+
+<ResponseField name="authContext" type="AuthContext">
+  Auth context compatible with `litClient.executeJs`, `pkpSign`, or further session signature issuance.
+</ResponseField>
+
+## Example
+
+```ts
+import { createPkpAuthContextFromPreGenerated } from '@lit-protocol/auth';
+
+const authContext = await createPkpAuthContextFromPreGenerated({
+  pkpPublicKey,
+  sessionKeyPair,
+  delegationAuthSig,
+});
+```

docs/sdk/sdk-reference/auth/functions/createPkpSessionSigs.mdx

@@ -0,0 +1,49 @@
+---
+title: createPkpSessionSigs
+---
+
+# Function
+
+> **createPkpSessionSigs**(`params`)
+
+Issues fresh session signatures for a PKP based on pre-generated delegation materials. Pair this with `createPkpAuthContextFromPreGenerated` when a backend needs to sign or execute Lit Actions on demand.
+
+## Parameters
+
+<ParamField path="params.authContext" type="AuthContext" required>
+  Auth context obtained from `createPkpAuthContextFromPreGenerated` or `createPkpAuthContext`.
+</ParamField>
+
+<ParamField path="params.litClient" type="LitClient" required>
+  Lit client that will request session signatures from the network.
+</ParamField>
+
+<ParamField path="params.product" type="'DECRYPTION' | 'SIGN' | 'LIT_ACTION' | 'SIGN_SESSION_KEY'">
+  Optional override for the product type when you need signatures for a specific capability. Defaults to `LIT_ACTION`.
+</ParamField>
+
+## Returns
+
+<ResponseField name="sessionSigs" type="SessionSigsMap">
+  Session signatures scoped to the delegated resources.
+</ResponseField>
+
+## Example
+
+```ts
+import {
+  createPkpAuthContextFromPreGenerated,
+  createPkpSessionSigs,
+} from '@lit-protocol/auth';
+
+const authContext = await createPkpAuthContextFromPreGenerated({
+  pkpPublicKey,
+  sessionKeyPair,
+  delegationAuthSig,
+});
+
+const pkpSessionSigs = await createPkpSessionSigs({
+  authContext,
+  litClient,
+});
+```