Granted permissions via connect() capabilities not being applied to sendCalls - still shows transaction confirmation popup

[grmkris]

Environment

• Porto SDK: v0.2.37
• Wagmi: v2.19.3
• Viem: v2.38.6
• Next.js: 16.0.1
• Network: Base mainnet

Problem Description

Permissions are successfully granted during wallet connection (user sees and approves the permission popup showing ETH spending limit and contract interactions), but subsequent sendCalls operations still trigger transaction confirmation popups instead of using the pre-authorized permissions.

Expected Behavior

According to Porto documentation, once permissions are granted via wallet_grantPermissions, they should automatically apply to subsequent wallet_sendCalls without requiring additional user confirmation:

"Once permissions have been granted, they will be automatically applied to any calls made by the Application via wallet_sendCalls"

Actual Behavior

After approving permissions during connection, attempting to execute a pre-authorized contract call still shows a Porto transaction confirmation popup requesting user approval.

Implementation Details

1. Permissions granted during connection:

// porto-connect-button.tsx
connect({
  connector: portoConnector,
  capabilities: { 
    grantPermissions: getOnboardingPermissions(), 
  }, 
});

2. Permission structure:

// onboarding-permissions.ts
export function getOnboardingPermissions() {
  return {
    expiry: Math.floor(Date.now() / 1000) + 60 * 60, // 1 hour
    feeToken: {
      limit: "1",
    },
    permissions: {
      calls: [
        {
          signature: "registerWithInvite(string,address,uint256,address,bytes)",
          to: "0x63e7b8F8A8d42b043fe58Be1243d7cBcb1Ca5514", // L2Registrar
        },
        {
          signature: "multicall(bytes[])",
          to: "0xa609955257eacbbd566a1fa654e6c5f4b1fdc9e2", // L2Registry
        },
      ],
    },
  } as const;
}

3. Call execution (after permissions granted):

// use-register-subdomain.ts
const result = await sendCallsAsync({
  calls: [
    {
      abi: L2RegistrarABI,
      functionName: "registerWithInvite",
      to: "0x63e7b8F8A8d42b043fe58Be1243d7cBcb1Ca5514",
      args: [label, recipient, expiration, inviter, signature],
    },
  ],
  capabilities: {
    atomicBatch: {
      supported: true,
    },
  },
});

Steps to Reproduce

1. Connect Porto wallet using connect() with capabilities.grantPermissions parameter
2. User approves the permission popup (sees "up to 11 ETH" spending limit and contract interaction permissions)
3. Execute sendCalls with a pre-authorized contract function (registerWithInvite)
4. Observe: Transaction confirmation popup still appears, asking user to approve the transaction

Questions

1. Is there additional configuration needed to associate granted permissions with subsequent calls?
2. Should the permission context/ID returned from the grant be explicitly passed to sendCalls?
3. Is this a known issue in v0.2.37?
4. Are we missing something in our implementation?

Additional Context

• User confirmed seeing the permission details in the approval popup ("up to 11 ETH" spending limit and contract interactions), suggesting permissions were properly formatted and displayed by Porto
• The permission popup appears and is approved successfully during connection
• Only the atomicBatch capability is currently passed to sendCalls - not sure if granted permissions need to be explicitly referenced

Any guidance on the correct implementation would be greatly appreciated!

[grmkris]

Repository Reference

This issue is from our real-world implementation in the Opensource Orchestra project:
Repository: https://github.com/opensource-orchestra/osopit

Relevant Implementation Files

Permission Definition:

• apps/web/src/lib/onboarding-permissions.ts - Defines the permission structure passed to capabilities.grantPermissions

Connection with Permissions:

• apps/web/src/components/porto-connect-button.tsx - Porto connection component that passes permissions via capabilities

Call Execution:

• apps/web/src/hooks/use-register-subdomain.ts - Hook that uses sendCalls to execute the pre-authorized call

UI Implementation:

• apps/web/src/app/onboarding/page.tsx - Onboarding page that uses the registration hook

Porto Configuration:

• apps/web/src/lib/appkit.ts - Wagmi configuration with Porto connector

Use Case Context

This is for a gas-free onboarding flow where users:

1. Connect their Porto wallet and grant permissions once
2. Claim an ENS subdomain (name.catmisha.eth) via invited registration
3. Setup their artist profile with text records

Both registerWithInvite and multicall operations should execute without popups after the initial permission grant, but currently both still show transaction confirmation popups.

Feel free to explore the codebase for additional context!