[simplex,sdk]: support signing with MPC Vault (#707)

Author: royvardhan

.gitmodules

@@ -10,3 +10,6 @@
 [submodule "sdk/packages/core/lib/forge-std"]
 	path = sdk/packages/core/lib/forge-std
 	url = https://github.com/foundry-rs/forge-std
+[submodule "sdk/packages/simplex/proto/mpcvaultapis"]
+	path = sdk/packages/simplex/proto/mpcvaultapis
+	url = https://github.com/mpcvault/mpcvaultapis.git

sdk/.dockerignore

@@ -2,6 +2,9 @@
 packages/core/
 packages/indexer/
 
+# Generated by pnpm build in @hyperbridge/simplex (protoc); never bake host output into the image
+packages/simplex/src/proto/
+
 # Version Control
 .git/
 .github/

sdk/.gitignore

@@ -25,6 +25,8 @@ packages/indexer/docker/mainnet/
 packages/simplex/src/filler-config.toml
 packages/simplex/src/simplex-config.toml
 packages/simplex/.simplex-data
+packages/simplex/src/proto
+packages/simplex/.protoc-ci
 
 
 # Compiled Java class files

sdk/package.json

@@ -15,7 +15,7 @@
 		"release": "pnpm build && pnpm --filter=\"*\" publish --no-git-checks"
 	},
 	"devDependencies": {
-"@typescript-eslint/eslint-plugin": "^8.25.0",
+		"@typescript-eslint/eslint-plugin": "^8.25.0",
 		"@typescript-eslint/parser": "^8.25.0",
 		"eslint": "^9.21.0",
 		"eslint-config-prettier": "^10.0.2",
@@ -54,7 +54,15 @@
 		]
 	},
 	"pnpm": {
-		"onlyBuiltDependencies": ["better-sqlite3", "bufferutil", "utf-8-validate", "esbuild"]
+		"onlyBuiltDependencies": [
+			"better-sqlite3",
+			"bufferutil",
+			"utf-8-validate",
+			"esbuild"
+		],
+		"overrides": {
+			"viem": "2.47.6"
+		}
 	},
 	"engines": {
 		"node": ">=22",

sdk/packages/sdk/package.json

@@ -77,7 +77,7 @@
 		"tronweb": "^6.2.0",
 		"ts-pattern": "^5.6.2",
 		"unstorage": "^1.17.2",
-		"viem": "^2.34.0"
+		"viem": "2.47.6"
 	},
 	"devDependencies": {
 		"@biomejs/biome": "^1.9.4",
@@ -122,8 +122,7 @@
 		"@polkadot/x-randomvalues": "^13.5.6",
 		"@polkadot/x-textdecoder": "^13.5.6",
 		"@polkadot/x-textencoder": "^13.5.6",
-		"@polkadot/x-ws": "^13.5.6",
-		"typescript": "^5.9.3"
+		"@polkadot/x-ws": "^13.5.6"
 	},
 	"peerDependencies": {
 		"vite": "^5.0.0 || ^6.0.0"

sdk/packages/sdk/src/protocols/intents/BidManager.ts

@@ -1,5 +1,4 @@
 import { encodeFunctionData, decodeFunctionData, concat, keccak256, parseEventLogs } from "viem"
-import { privateKeyToAccount } from "viem/accounts"
 import { ABI as IntentGatewayV2ABI } from "@/abis/IntentGatewayV2"
 import { ADDRESS_ZERO, bytes32ToBytes20, hexToString, retryPromise } from "@/utils"
 import type {
@@ -59,7 +58,7 @@ export class BidManager {
 		const {
 			order,
 			solverAccount,
-			solverPrivateKey,
+			solverSigner,
 			nonce,
 			entryPointAddress,
 			callGasLimit,
@@ -92,12 +91,10 @@ export class BidManager {
 		const userOpHash = this.crypto.computeUserOpHash(userOp, entryPointAddress, chainId)
 		const sessionKey = order.session
 
-		const messageHash = keccak256(concat([userOpHash, order.id as HexString, sessionKey as import("viem").Hex]))
+		const messageHash = keccak256(concat([userOpHash, order.id as HexString, sessionKey as HexString]))
+		const solverSignature = await solverSigner.signMessage(messageHash, Number(chainId))
 
-		const solverAccount_ = privateKeyToAccount(solverPrivateKey as import("viem").Hex)
-		const solverSignature = await solverAccount_.signMessage({ message: { raw: messageHash } })
-
-		const signature = concat([order.id as HexString, solverSignature as import("viem").Hex]) as HexString
+		const signature = concat([order.id as HexString, solverSignature as HexString]) as HexString
 
 		return { ...userOp, signature }
 	}

sdk/packages/sdk/src/types/index.ts

@@ -1,6 +1,10 @@
 import type { ConsolaInstance } from "consola"
 import type { GraphQLClient } from "graphql-request"
 import type { ContractFunctionArgs, Hex, Log, PublicClient, TransactionReceipt } from "viem"
+import type { Account } from "viem/accounts"
+
+/** Re-export: use this type when wiring a viem `Account` next to `SigningAccount` so you stay aligned with the SDK’s viem resolution. */
+export type { Account as ViemAccount } from "viem/accounts"
 import type HandlerV1 from "@/abis/handler"
 import type { IChain } from "@/chain"
 import { Struct, Vector, Bytes, u8 } from "scale-ts"
@@ -1177,11 +1181,19 @@ export interface PackedUserOperation {
 	signature: HexString
 }
 
+export interface SigningAccount {
+	/** Signs a bid message hash for a given chain. Returns a 65-byte ECDSA signature. */
+	signMessage: (messageHash: HexString, chainId: number) => Promise<HexString>
+	/** Signs a raw 32-byte hash, returning split signature components for EIP-7702 etc. */
+	signRawHash: (hash: HexString) => Promise<{ r: HexString; s: HexString; yParity: number }>
+}
+
 export interface SubmitBidOptions {
 	order: Order
 	fillOptions: FillOptions
 	solverAccount: HexString
-	solverPrivateKey: HexString
+	/** Canonical signer used for bid message signing and raw-hash operations. */
+	solverSigner: SigningAccount
 	nonce: bigint
 	entryPointAddress: HexString
 	// Estimated gas for executing fillOrder calldata
@@ -1356,7 +1368,13 @@ export type IntentOrderStatusUpdate =
 			remainingAssets?: TokenInfo[]
 			error: string
 	  }
-	| { status: "FAILED"; commitment?: HexString; totalFilledAssets?: TokenInfo[]; remainingAssets?: TokenInfo[]; error: string }
+	| {
+			status: "FAILED"
+			commitment?: HexString
+			totalFilledAssets?: TokenInfo[]
+			remainingAssets?: TokenInfo[]
+			error: string
+	  }
 
 /** Result of selecting a bid and submitting to the bundler */
 export interface SelectBidResult {

sdk/packages/simplex/README.md

@@ -1,6 +1,6 @@
-# Hyperbridge Intent FillerV2
+# Hyperbridge Simplex
 
-A high-performance intent filler for the Hyperbridge IntentGatewayV2 protocol. This package provides both a library interface and a CLI binary for running an intent filler that monitors and fills cross-chain orders.
+Canonical documentation for Simplex lives in the Hyperbridge docs:
 
 ## Installation
 

sdk/packages/simplex/filler-config-example.toml

@@ -4,7 +4,22 @@
 
 # Filler configuration
 [simplex]
-privateKey = ""  # Replace with your actual EVM private key (not required if all chains are watchOnly)
+# Choose ONE signer mode via [simplex.signer]:
+# 1) Private key signer:
+# [simplex.signer]
+# type = "privateKey"
+# privateKey = "0x..."  # Not required if all chains are watchOnly
+#
+# 2) MPCVault signer:
+# [simplex.signer]
+# type = "mpcVault"
+# [simplex.signer.mpcVault]
+# apiToken = ""
+# vaultUuid = ""
+# accountAddress = "0x0000000000000000000000000000000000000000"
+# callbackClientSignerPublicKey = "ssh-ed25519 AAAA..."
+# grpcTarget = "api.mpcvault.com:443" # optional; default when omitted
+
 maxConcurrentOrders = 5
 
 # ===== Solver Selection Mode Configuration =====
@@ -75,7 +90,7 @@ triggerPercentage = 0.5
 
 # Strategy configuration
 # You can configure multiple strategies
-# All strategies use the simplex.privateKey from above
+# All strategies use the configured simplex signer (privateKey or mpcVault)
 [[strategies]]
 type = "basic"
 # Filler BPS (basis points) curve based on order value

sdk/packages/simplex/package.json

@@ -19,19 +19,21 @@
 		"dist"
 	],
 	"scripts": {
-		"build": "tsup",
+		"codegen": "bash ./scripts/build.sh --codegen-only",
+		"build": "bash ./scripts/build.sh",
 		"prepublishOnly": "npm run build",
-		"test": "vitest --watch=false --maxConcurrency=1",
-		"test:services": "vitest --watch=false --maxConcurrency=1 --testTimeout=1000000 src/tests/services.test.ts",
-		"test:filler": "vitest --watch=false --maxConcurrency=1 --testTimeout=1000000 src/tests/strategies/basic.testnet.test.ts",
-		"test:basic": "vitest --watch=false --maxConcurrency=1 --testTimeout=1000000 src/tests/strategies/basic.testnet.test.ts",
-		"test:fx": "vitest --watch=false --maxConcurrency=1 --testTimeout=1000000 src/tests/strategies/fx.mainnet.test.ts",
-		"test:watch": "vitest",
-		"lint": "biome lint .",
-		"lint:fix": "biome lint --write .",
-		"format": "prettier --write \"src/**/*.ts\"",
-		"cli": "NODE_NO_WARNINGS=1 tsx src/bin/simplex.ts",
-		"cli:dev": "nodemon --watch src --ext ts --exec tsx src/bin/simplex.ts"
+		"test": "pnpm run codegen && vitest --watch=false --maxConcurrency=1",
+		"test:filler": "pnpm run codegen && vitest --watch=false --maxConcurrency=1 --testTimeout=1000000 src/tests/strategies/basic.testnet.test.ts",
+		"test:basic": "pnpm run codegen && vitest --watch=false --maxConcurrency=1 --testTimeout=1000000 src/tests/strategies/basic.testnet.test.ts",
+		"test:fx": "pnpm run codegen && vitest --watch=false --maxConcurrency=1 --testTimeout=1000000 src/tests/strategies/fx.mainnet.test.ts",
+		"test:mpcvault": "pnpm run codegen && vitest --watch=false --maxConcurrency=1 --testTimeout=120000 src/tests/wallet/mpcvault.integration.test.ts",
+		"test:watch": "pnpm run codegen && vitest",
+		"lint": "pnpm run codegen && biome lint src/bin src/config src/core src/services src/strategies src/tests src/index.ts",
+		"lint:fix": "pnpm run codegen && biome lint --write src/bin src/config src/core src/services src/strategies src/tests src/index.ts",
+		"format": "pnpm run codegen && prettier --write \"src/**/*.ts\"",
+		"cli": "pnpm run codegen && NODE_NO_WARNINGS=1 tsx src/bin/simplex.ts",
+		"cli:dev": "pnpm run codegen && nodemon --watch src --ext ts --exec tsx src/bin/simplex.ts",
+		"proto:generate": "./scripts/generate-proto.sh"
 	},
 	"devDependencies": {
 		"@biomejs/biome": "^1.9.4",
@@ -40,6 +42,7 @@
 		"@vitest/coverage-v8": "^3.0.7",
 		"nodemon": "^3.1.0",
 		"tronweb": "^6.2.0",
+		"ts-proto": "^2.6.1",
 		"tsup": "^8.4.0",
 		"tsx": "^4.16.2",
 		"typescript": "^5.7.3",
@@ -57,6 +60,8 @@
 		"@binance/wallet": "^16.0.0",
 		"@circle-fin/adapter-viem-v2": "1.4.0",
 		"@circle-fin/bridge-kit": "1.5.0",
+		"@bufbuild/protobuf": "^2.2.3",
+		"@grpc/grpc-js": "^1.12.5",
 		"@hyperbridge/sdk": "workspace:*",
 		"@polkadot/api": "latest",
 		"@polkadot/util": "latest",
@@ -77,7 +82,7 @@
 		"pino-pretty": "^11.3.0",
 		"scale-ts": "^1.6.1",
 		"toml": "^3.0.0",
-		"viem": "^2.34.0"
+		"viem": "2.47.6"
 	},
 	"resolutions": {
 		"@polkadot/api": "^16.4.6",