@dynamic-labs-wallet/sui 0.0.0-beta.3 → 0.0.0-beta.304.1

package/index.cjs.js

@@ -3,6 +3,7 @@
 var browser = require('@dynamic-labs-wallet/browser');
 var ed25519 = require('@mysten/sui/keypairs/ed25519');
 var cryptography = require('@mysten/sui/cryptography');
+var converter = require('bech32-converting');
 var verify = require('@mysten/sui/verify');
 var bcs = require('@mysten/sui/bcs');
 var blake2b = require('@noble/hashes/blake2b');
@@ -18,11 +19,6 @@ function _extends() {
     return _extends.apply(this, arguments);
 }
 
-const ERROR_KEYGEN_FAILED = 'Error with keygen';
-const ERROR_CREATE_WALLET_ACCOUNT = 'Error creating sui wallet account';
-const ERROR_VERIFY_MESSAGE_SIGNATURE = 'Error verifying message signature';
-const ERROR_VERIFY_TRANSACTION_SIGNATURE = 'Error verifying transaction signature';
-
 const formatMessage = (message, intentScope)=>{
     if (intentScope === 'TransactionData') {
         const txBytes = Uint8Array.from(Buffer.from(message, 'hex'));
@@ -41,8 +37,12 @@ const formatMessage = (message, intentScope)=>{
 };
 
 class DynamicSuiWalletClient extends browser.DynamicWalletClient {
-    async createWalletAccount({ thresholdSignatureScheme, password = undefined, onError }) {
+    async createWalletAccount({ thresholdSignatureScheme, password = undefined, onError, signedSessionId }) {
         try {
+            let ceremonyCeremonyCompleteResolver;
+            const ceremonyCompletePromise = new Promise((resolve)=>{
+                ceremonyCeremonyCompleteResolver = resolve;
+            });
             // Generate key shares for given threshold signature scheme (TSS)
             const { rawPublicKey, clientKeyShares } = await this.keyGen({
                 chainName: this.chainName,
@@ -57,36 +57,45 @@ class DynamicSuiWalletClient extends browser.DynamicWalletClient {
                         thresholdSignatureScheme,
                         clientKeySharesBackupInfo: browser.getClientKeyShareBackupInfo()
                     });
+                    this.logger.debug('walletMap updated for wallet', {
+                        context: {
+                            accountAddress,
+                            walletId,
+                            walletMap: this.walletMap
+                        }
+                    });
+                    ceremonyCeremonyCompleteResolver(undefined);
                 }
             });
+            // Wait for the ceremony to complete before proceeding
+            await ceremonyCompletePromise;
             if (!rawPublicKey || !clientKeyShares) {
-                throw new Error(ERROR_KEYGEN_FAILED);
+                throw new Error(browser.ERROR_KEYGEN_FAILED);
             }
             const { accountAddress, publicKeyHex } = this.deriveAccountAddress({
                 rawPublicKey: rawPublicKey
             });
             // Update client key shares in wallet map
             // warning: this might result in race condition if `onCeremonyComplete` executes at the same time
-            // TODO: remove this once iframe handling for secret shares is implemented
             await this.setClientKeySharesToLocalStorage({
                 accountAddress,
                 clientKeyShares,
                 overwriteOrMerge: 'overwrite'
             });
-            // Backup the new wallet without waiting for the promise to resolve
-            void this.storeEncryptedBackupByWalletWithRetry({
+            await this.storeEncryptedBackupByWalletWithRetry({
                 accountAddress,
                 clientKeyShares,
-                password
+                password,
+                signedSessionId
             });
             return {
                 accountAddress,
-                rawPublicKey,
+                rawPublicKey: rawPublicKey,
                 publicKeyHex
             };
         } catch (error) {
-            this.logger.error(ERROR_CREATE_WALLET_ACCOUNT, error);
-            throw new Error(ERROR_CREATE_WALLET_ACCOUNT);
+            this.logger.error(browser.ERROR_CREATE_WALLET_ACCOUNT, error);
+            throw new Error(browser.ERROR_CREATE_WALLET_ACCOUNT);
         }
     }
     async getRawPublicKeyFromClientKeyShares({ chainName, clientKeyShare }) {
@@ -102,22 +111,28 @@ class DynamicSuiWalletClient extends browser.DynamicWalletClient {
     /**
    * Format Ed25519 signature to string that satisfies Sui signature standard
    */ async formatSignature(signatureEd25519, accountAddress) {
-        // get public key from keyshare
-        // TODO: handle this more gracefully from the client key shares if possible
-        const clientKeyShares = await this.getClientKeySharesFromLocalStorage({
-            accountAddress
-        });
-        const rawPublicKey = await this.getRawPublicKeyFromClientKeyShares({
-            chainName: this.chainName,
-            clientKeyShare: clientKeyShares[0]
-        });
-        const suiPublicKey = new ed25519.Ed25519PublicKey(rawPublicKey);
-        const serializedSignature = cryptography.toSerializedSignature({
-            signature: signatureEd25519,
-            signatureScheme: 'ED25519',
-            publicKey: suiPublicKey
-        });
-        return serializedSignature;
+        try {
+            // get public key from keyshare
+            // TODO: handle this more gracefully from the client key shares if possible
+            const clientKeyShares = await this.getClientKeySharesFromLocalStorage({
+                accountAddress
+            });
+            const rawPublicKey = await this.getRawPublicKeyFromClientKeyShares({
+                chainName: this.chainName,
+                clientKeyShare: clientKeyShares[0]
+            });
+            const rawPublicKeyBytes = Uint8Array.from(Buffer.from(rawPublicKey, 'hex'));
+            const suiPublicKey = new ed25519.Ed25519PublicKey(rawPublicKeyBytes);
+            const serializedSignature = cryptography.toSerializedSignature({
+                signature: signatureEd25519,
+                signatureScheme: 'ED25519',
+                publicKey: suiPublicKey
+            });
+            return serializedSignature;
+        } catch (error) {
+            this.logger.error('Error formatting signature:', error);
+            throw error;
+        }
     }
     async verifyMessageSignature({ message, signature, accountAddress }) {
         try {
@@ -125,7 +140,7 @@ class DynamicSuiWalletClient extends browser.DynamicWalletClient {
             const verifiedPublicKey = await verify.verifyPersonalMessageSignature(messageBytes, signature);
             const isVerified = verifiedPublicKey.toSuiAddress().toLowerCase() === accountAddress.toLowerCase();
             if (!isVerified) {
-                throw new Error(ERROR_VERIFY_MESSAGE_SIGNATURE);
+                throw new Error(browser.ERROR_VERIFY_MESSAGE_SIGNATURE);
             }
         } catch (error) {
             this.logger.error('Error verifying signature:', error);
@@ -138,16 +153,16 @@ class DynamicSuiWalletClient extends browser.DynamicWalletClient {
             const verifiedPublicKey = await verify.verifyTransactionSignature(txBytes, signature);
             const isVerified = verifiedPublicKey.toSuiAddress().toLowerCase() === senderAddress.toLowerCase();
             if (!isVerified) {
-                throw new Error(ERROR_VERIFY_TRANSACTION_SIGNATURE);
+                throw new Error(browser.ERROR_VERIFY_TRANSACTION_SIGNATURE);
             }
         } catch (error) {
             this.logger.error('Error verifying signature:', error);
             throw error;
         }
     }
-    async signMessage({ message, accountAddress, password = undefined }) {
+    async signMessage({ message, accountAddress, password = undefined, signedSessionId, mfaToken }) {
         if (!accountAddress) {
-            throw new Error('Account address is required');
+            throw new Error(browser.ERROR_ACCOUNT_ADDRESS_REQUIRED);
         }
         try {
             const formattedMessage = formatMessage(message, 'PersonalMessage');
@@ -155,7 +170,9 @@ class DynamicSuiWalletClient extends browser.DynamicWalletClient {
                 message: formattedMessage,
                 accountAddress: accountAddress,
                 chainName: this.chainName,
-                password
+                password,
+                signedSessionId,
+                mfaToken
             });
             const formattedSignature = await this.formatSignature(signatureEd25519, accountAddress);
             await this.verifyMessageSignature({
@@ -165,13 +182,13 @@ class DynamicSuiWalletClient extends browser.DynamicWalletClient {
             });
             return formattedSignature;
         } catch (error) {
-            this.logger.error('Error signing message:', error);
-            throw error;
+            this.logger.error(browser.ERROR_SIGN_MESSAGE, error);
+            throw new Error(browser.ERROR_SIGN_MESSAGE);
         }
     }
-    async signTransaction({ transaction, senderAddress, password = undefined }) {
+    async signTransaction({ transaction, senderAddress, password = undefined, signedSessionId, mfaToken }) {
         if (!senderAddress) {
-            throw new Error('Account address is required');
+            throw new Error(browser.ERROR_ACCOUNT_ADDRESS_REQUIRED);
         }
         try {
             const formattedMessage = formatMessage(transaction, 'TransactionData');
@@ -179,7 +196,9 @@ class DynamicSuiWalletClient extends browser.DynamicWalletClient {
                 message: formattedMessage,
                 accountAddress: senderAddress,
                 chainName: this.chainName,
-                password
+                password,
+                signedSessionId,
+                mfaToken
             });
             const formattedSignature = await this.formatSignature(signatureEd25519, senderAddress);
             await this.verifyTransactionSignature({
@@ -194,26 +213,183 @@ class DynamicSuiWalletClient extends browser.DynamicWalletClient {
         }
     }
     deriveAccountAddress({ rawPublicKey }) {
-        const publicKey = new ed25519.Ed25519PublicKey(rawPublicKey);
+        const pubKeyBytes = Buffer.from(rawPublicKey, 'hex');
+        const publicKey = new ed25519.Ed25519PublicKey(pubKeyBytes);
         const accountAddress = publicKey.toSuiAddress();
         return {
             accountAddress,
-            publicKeyHex: Buffer.from(rawPublicKey).toString('hex')
+            publicKeyHex: rawPublicKey
         };
     }
+    /**
+   * Converts a Sui private key from Bech32 format to a 64-character hex string.
+   * The output is compatible with RFC8032 Ed25519 private key format.
+   *
+   * @param suiPrivateKey - The Sui private key in Bech32 format starting with "suiprivkey1"
+   * @returns An object containing the private key and the private key bytes
+   * @throws Error if the input is not a valid Sui private key format
+   */ convertSuiPrivateKey(suiPrivateKey) {
+        if (!suiPrivateKey.startsWith('suiprivkey1')) {
+            this.logger.debug('Sui private key not in Bech32 format');
+            return {
+                privateKey: suiPrivateKey,
+                privateKeyBytes: Buffer.from(suiPrivateKey, 'hex')
+            };
+        }
+        try {
+            const suiConverter = converter('suiprivkey');
+            const hexKey = suiConverter.toHex(suiPrivateKey);
+            let cleanHex = hexKey.startsWith('0x00') ? hexKey.slice(4) : hexKey.startsWith('0x') ? hexKey.slice(2) : hexKey;
+            if (cleanHex.length > 64) {
+                cleanHex = cleanHex.slice(cleanHex.length - 64);
+            }
+            if (cleanHex.length !== 64) {
+                throw new Error(`Invalid output: Expected 64 characters, got ${cleanHex.length}`);
+            }
+            return {
+                privateKey: cleanHex.toLowerCase(),
+                privateKeyBytes: Buffer.from(cleanHex, 'hex')
+            };
+        } catch (error) {
+            if (error instanceof Error) {
+                throw new Error(`Failed to convert Sui private key: ${error.message}`);
+            }
+            throw new Error('Failed to convert Sui private key: Unknown error');
+        }
+    }
+    /**
+   * Gets the public key for a given private key
+   * @param privateKeyBytes A Buffer containing the Ed25519 private key bytes
+   * @returns The public key (Sui address) derived from the private key
+   */ getPublicKeyFromPrivateKey(privateKeyBytes) {
+        try {
+            const keypair = ed25519.Ed25519Keypair.fromSecretKey(privateKeyBytes);
+            const publicKey = keypair.getPublicKey();
+            const publicKeyBase58 = publicKey.toSuiAddress();
+            return publicKeyBase58;
+        } catch (error) {
+            this.logger.error('Unable to derive public key from private key. Check private key format', error instanceof Error ? error.message : 'Unknown error');
+            throw error;
+        }
+    }
+    /**
+   * Imports the private key for a given account address
+   *
+   * @param privateKey The private key to import, accepts both Bech32 and hex formats
+   * @param chainName The chain name to import the private key for
+   * @param thresholdSignatureScheme The threshold signature scheme to use
+   * @param password The password for encrypted backup shares
+   * @returns The account address, raw public key, and client key shares
+   */ async importPrivateKey({ privateKey, chainName, thresholdSignatureScheme, password = undefined, onError, signedSessionId }) {
+        try {
+            let ceremonyCeremonyCompleteResolver;
+            const ceremonyCompletePromise = new Promise((resolve)=>{
+                ceremonyCeremonyCompleteResolver = resolve;
+            });
+            const { privateKey: formattedPrivateKey, privateKeyBytes } = await this.convertSuiPrivateKey(privateKey);
+            const publicKey = this.getPublicKeyFromPrivateKey(privateKeyBytes);
+            const { rawPublicKey, clientKeyShares } = await this.importRawPrivateKey({
+                chainName,
+                privateKey: formattedPrivateKey,
+                thresholdSignatureScheme,
+                onError: (error)=>{
+                    this.logger.error(browser.ERROR_IMPORT_PRIVATE_KEY, error);
+                    onError == null ? void 0 : onError(error);
+                },
+                onCeremonyComplete: (accountAddress, walletId)=>{
+                    // update wallet map
+                    this.walletMap[accountAddress] = _extends({}, this.walletMap[accountAddress] || {}, {
+                        accountAddress,
+                        walletId,
+                        chainName: this.chainName,
+                        thresholdSignatureScheme,
+                        clientKeySharesBackupInfo: browser.getClientKeyShareBackupInfo()
+                    });
+                    this.logger.debug('walletMap updated for wallet', {
+                        context: {
+                            accountAddress,
+                            walletId,
+                            walletMap: this.walletMap
+                        }
+                    });
+                    ceremonyCeremonyCompleteResolver(undefined);
+                }
+            });
+            // Wait for the ceremony to complete before proceeding
+            await ceremonyCompletePromise;
+            if (!rawPublicKey || !clientKeyShares) {
+                throw new Error(browser.ERROR_IMPORT_PRIVATE_KEY);
+            }
+            const { accountAddress } = await this.deriveAccountAddress({
+                rawPublicKey: rawPublicKey
+            });
+            if (accountAddress !== publicKey) {
+                throw new Error(`Public key mismatch: derived address ${accountAddress} !== public key ${publicKey}`);
+            }
+            // Update client key shares in wallet map
+            // warning: this might result in race condition if `onCeremonyComplete` executes at the same time
+            await this.setClientKeySharesToLocalStorage({
+                accountAddress,
+                clientKeyShares,
+                overwriteOrMerge: 'overwrite'
+            });
+            await this.storeEncryptedBackupByWalletWithRetry({
+                accountAddress,
+                clientKeyShares,
+                password,
+                signedSessionId
+            });
+            return {
+                accountAddress,
+                rawPublicKey: rawPublicKey,
+                clientKeyShares
+            };
+        } catch (error) {
+            this.logger.error(browser.ERROR_IMPORT_PRIVATE_KEY, error);
+            throw new Error(browser.ERROR_IMPORT_PRIVATE_KEY);
+        }
+    }
+    /**
+   * Exports the private key for a given account address
+   *
+   * @param accountAddress The account address to export the private key for
+   * @param password The password for encrypted backup shares
+   * @returns The private key in hex format
+   */ async exportPrivateKey({ accountAddress, password = undefined, signedSessionId, mfaToken }) {
+        try {
+            const { derivedPrivateKey } = await this.exportKey({
+                accountAddress,
+                chainName: this.chainName,
+                password,
+                signedSessionId,
+                mfaToken
+            });
+            if (!derivedPrivateKey) {
+                throw new Error('Derived private key is undefined');
+            }
+            const privateScalarHex = derivedPrivateKey.slice(0, 64);
+            return privateScalarHex;
+        } catch (error) {
+            this.logger.error(browser.ERROR_EXPORT_PRIVATE_KEY, error);
+            throw new Error(browser.ERROR_EXPORT_PRIVATE_KEY);
+        }
+    }
     async getSuiWallets() {
         const wallets = await this.getWallets();
         const suiWallets = wallets.filter((wallet)=>wallet.chainName === 'sui');
         return suiWallets;
     }
-    constructor({ environmentId, authToken, baseApiUrl, baseMPCRelayApiUrl, storageKey, debug }){
+    constructor({ environmentId, authToken, baseApiUrl, baseMPCRelayApiUrl, storageKey, debug, featureFlags, authMode = browser.AuthMode.HEADER, sdkVersion }){
         super({
             environmentId,
             authToken,
             baseApiUrl,
             baseMPCRelayApiUrl,
             storageKey,
-            debug
+            debug,
+            featureFlags,
+            authMode,
+            sdkVersion
         }), this.chainName = 'SUI';
     }
 }

package/index.esm.js

@@ -1,6 +1,7 @@
-import { DynamicWalletClient, getClientKeyShareBackupInfo, getMPCChainConfig } from '@dynamic-labs-wallet/browser';
-import { Ed25519PublicKey } from '@mysten/sui/keypairs/ed25519';
+import { DynamicWalletClient, getClientKeyShareBackupInfo, ERROR_KEYGEN_FAILED, ERROR_CREATE_WALLET_ACCOUNT, getMPCChainConfig, ERROR_VERIFY_MESSAGE_SIGNATURE, ERROR_VERIFY_TRANSACTION_SIGNATURE, ERROR_ACCOUNT_ADDRESS_REQUIRED, ERROR_SIGN_MESSAGE, ERROR_IMPORT_PRIVATE_KEY, ERROR_EXPORT_PRIVATE_KEY, AuthMode } from '@dynamic-labs-wallet/browser';
+import { Ed25519PublicKey, Ed25519Keypair } from '@mysten/sui/keypairs/ed25519';
 import { messageWithIntent, toSerializedSignature } from '@mysten/sui/cryptography';
+import converter from 'bech32-converting';
 import { verifyPersonalMessageSignature, verifyTransactionSignature } from '@mysten/sui/verify';
 import { bcs } from '@mysten/sui/bcs';
 import { blake2b } from '@noble/hashes/blake2b';
@@ -16,11 +17,6 @@ function _extends() {
     return _extends.apply(this, arguments);
 }
 
-const ERROR_KEYGEN_FAILED = 'Error with keygen';
-const ERROR_CREATE_WALLET_ACCOUNT = 'Error creating sui wallet account';
-const ERROR_VERIFY_MESSAGE_SIGNATURE = 'Error verifying message signature';
-const ERROR_VERIFY_TRANSACTION_SIGNATURE = 'Error verifying transaction signature';
-
 const formatMessage = (message, intentScope)=>{
     if (intentScope === 'TransactionData') {
         const txBytes = Uint8Array.from(Buffer.from(message, 'hex'));
@@ -39,8 +35,12 @@ const formatMessage = (message, intentScope)=>{
 };
 
 class DynamicSuiWalletClient extends DynamicWalletClient {
-    async createWalletAccount({ thresholdSignatureScheme, password = undefined, onError }) {
+    async createWalletAccount({ thresholdSignatureScheme, password = undefined, onError, signedSessionId }) {
         try {
+            let ceremonyCeremonyCompleteResolver;
+            const ceremonyCompletePromise = new Promise((resolve)=>{
+                ceremonyCeremonyCompleteResolver = resolve;
+            });
             // Generate key shares for given threshold signature scheme (TSS)
             const { rawPublicKey, clientKeyShares } = await this.keyGen({
                 chainName: this.chainName,
@@ -55,8 +55,18 @@ class DynamicSuiWalletClient extends DynamicWalletClient {
                         thresholdSignatureScheme,
                         clientKeySharesBackupInfo: getClientKeyShareBackupInfo()
                     });
+                    this.logger.debug('walletMap updated for wallet', {
+                        context: {
+                            accountAddress,
+                            walletId,
+                            walletMap: this.walletMap
+                        }
+                    });
+                    ceremonyCeremonyCompleteResolver(undefined);
                 }
             });
+            // Wait for the ceremony to complete before proceeding
+            await ceremonyCompletePromise;
             if (!rawPublicKey || !clientKeyShares) {
                 throw new Error(ERROR_KEYGEN_FAILED);
             }
@@ -65,21 +75,20 @@ class DynamicSuiWalletClient extends DynamicWalletClient {
             });
             // Update client key shares in wallet map
             // warning: this might result in race condition if `onCeremonyComplete` executes at the same time
-            // TODO: remove this once iframe handling for secret shares is implemented
             await this.setClientKeySharesToLocalStorage({
                 accountAddress,
                 clientKeyShares,
                 overwriteOrMerge: 'overwrite'
             });
-            // Backup the new wallet without waiting for the promise to resolve
-            void this.storeEncryptedBackupByWalletWithRetry({
+            await this.storeEncryptedBackupByWalletWithRetry({
                 accountAddress,
                 clientKeyShares,
-                password
+                password,
+                signedSessionId
             });
             return {
                 accountAddress,
-                rawPublicKey,
+                rawPublicKey: rawPublicKey,
                 publicKeyHex
             };
         } catch (error) {
@@ -100,22 +109,28 @@ class DynamicSuiWalletClient extends DynamicWalletClient {
     /**
    * Format Ed25519 signature to string that satisfies Sui signature standard
    */ async formatSignature(signatureEd25519, accountAddress) {
-        // get public key from keyshare
-        // TODO: handle this more gracefully from the client key shares if possible
-        const clientKeyShares = await this.getClientKeySharesFromLocalStorage({
-            accountAddress
-        });
-        const rawPublicKey = await this.getRawPublicKeyFromClientKeyShares({
-            chainName: this.chainName,
-            clientKeyShare: clientKeyShares[0]
-        });
-        const suiPublicKey = new Ed25519PublicKey(rawPublicKey);
-        const serializedSignature = toSerializedSignature({
-            signature: signatureEd25519,
-            signatureScheme: 'ED25519',
-            publicKey: suiPublicKey
-        });
-        return serializedSignature;
+        try {
+            // get public key from keyshare
+            // TODO: handle this more gracefully from the client key shares if possible
+            const clientKeyShares = await this.getClientKeySharesFromLocalStorage({
+                accountAddress
+            });
+            const rawPublicKey = await this.getRawPublicKeyFromClientKeyShares({
+                chainName: this.chainName,
+                clientKeyShare: clientKeyShares[0]
+            });
+            const rawPublicKeyBytes = Uint8Array.from(Buffer.from(rawPublicKey, 'hex'));
+            const suiPublicKey = new Ed25519PublicKey(rawPublicKeyBytes);
+            const serializedSignature = toSerializedSignature({
+                signature: signatureEd25519,
+                signatureScheme: 'ED25519',
+                publicKey: suiPublicKey
+            });
+            return serializedSignature;
+        } catch (error) {
+            this.logger.error('Error formatting signature:', error);
+            throw error;
+        }
     }
     async verifyMessageSignature({ message, signature, accountAddress }) {
         try {
@@ -143,9 +158,9 @@ class DynamicSuiWalletClient extends DynamicWalletClient {
             throw error;
         }
     }
-    async signMessage({ message, accountAddress, password = undefined }) {
+    async signMessage({ message, accountAddress, password = undefined, signedSessionId, mfaToken }) {
         if (!accountAddress) {
-            throw new Error('Account address is required');
+            throw new Error(ERROR_ACCOUNT_ADDRESS_REQUIRED);
         }
         try {
             const formattedMessage = formatMessage(message, 'PersonalMessage');
@@ -153,7 +168,9 @@ class DynamicSuiWalletClient extends DynamicWalletClient {
                 message: formattedMessage,
                 accountAddress: accountAddress,
                 chainName: this.chainName,
-                password
+                password,
+                signedSessionId,
+                mfaToken
             });
             const formattedSignature = await this.formatSignature(signatureEd25519, accountAddress);
             await this.verifyMessageSignature({
@@ -163,13 +180,13 @@ class DynamicSuiWalletClient extends DynamicWalletClient {
             });
             return formattedSignature;
         } catch (error) {
-            this.logger.error('Error signing message:', error);
-            throw error;
+            this.logger.error(ERROR_SIGN_MESSAGE, error);
+            throw new Error(ERROR_SIGN_MESSAGE);
         }
     }
-    async signTransaction({ transaction, senderAddress, password = undefined }) {
+    async signTransaction({ transaction, senderAddress, password = undefined, signedSessionId, mfaToken }) {
         if (!senderAddress) {
-            throw new Error('Account address is required');
+            throw new Error(ERROR_ACCOUNT_ADDRESS_REQUIRED);
         }
         try {
             const formattedMessage = formatMessage(transaction, 'TransactionData');
@@ -177,7 +194,9 @@ class DynamicSuiWalletClient extends DynamicWalletClient {
                 message: formattedMessage,
                 accountAddress: senderAddress,
                 chainName: this.chainName,
-                password
+                password,
+                signedSessionId,
+                mfaToken
             });
             const formattedSignature = await this.formatSignature(signatureEd25519, senderAddress);
             await this.verifyTransactionSignature({
@@ -192,26 +211,183 @@ class DynamicSuiWalletClient extends DynamicWalletClient {
         }
     }
     deriveAccountAddress({ rawPublicKey }) {
-        const publicKey = new Ed25519PublicKey(rawPublicKey);
+        const pubKeyBytes = Buffer.from(rawPublicKey, 'hex');
+        const publicKey = new Ed25519PublicKey(pubKeyBytes);
         const accountAddress = publicKey.toSuiAddress();
         return {
             accountAddress,
-            publicKeyHex: Buffer.from(rawPublicKey).toString('hex')
+            publicKeyHex: rawPublicKey
         };
     }
+    /**
+   * Converts a Sui private key from Bech32 format to a 64-character hex string.
+   * The output is compatible with RFC8032 Ed25519 private key format.
+   *
+   * @param suiPrivateKey - The Sui private key in Bech32 format starting with "suiprivkey1"
+   * @returns An object containing the private key and the private key bytes
+   * @throws Error if the input is not a valid Sui private key format
+   */ convertSuiPrivateKey(suiPrivateKey) {
+        if (!suiPrivateKey.startsWith('suiprivkey1')) {
+            this.logger.debug('Sui private key not in Bech32 format');
+            return {
+                privateKey: suiPrivateKey,
+                privateKeyBytes: Buffer.from(suiPrivateKey, 'hex')
+            };
+        }
+        try {
+            const suiConverter = converter('suiprivkey');
+            const hexKey = suiConverter.toHex(suiPrivateKey);
+            let cleanHex = hexKey.startsWith('0x00') ? hexKey.slice(4) : hexKey.startsWith('0x') ? hexKey.slice(2) : hexKey;
+            if (cleanHex.length > 64) {
+                cleanHex = cleanHex.slice(cleanHex.length - 64);
+            }
+            if (cleanHex.length !== 64) {
+                throw new Error(`Invalid output: Expected 64 characters, got ${cleanHex.length}`);
+            }
+            return {
+                privateKey: cleanHex.toLowerCase(),
+                privateKeyBytes: Buffer.from(cleanHex, 'hex')
+            };
+        } catch (error) {
+            if (error instanceof Error) {
+                throw new Error(`Failed to convert Sui private key: ${error.message}`);
+            }
+            throw new Error('Failed to convert Sui private key: Unknown error');
+        }
+    }
+    /**
+   * Gets the public key for a given private key
+   * @param privateKeyBytes A Buffer containing the Ed25519 private key bytes
+   * @returns The public key (Sui address) derived from the private key
+   */ getPublicKeyFromPrivateKey(privateKeyBytes) {
+        try {
+            const keypair = Ed25519Keypair.fromSecretKey(privateKeyBytes);
+            const publicKey = keypair.getPublicKey();
+            const publicKeyBase58 = publicKey.toSuiAddress();
+            return publicKeyBase58;
+        } catch (error) {
+            this.logger.error('Unable to derive public key from private key. Check private key format', error instanceof Error ? error.message : 'Unknown error');
+            throw error;
+        }
+    }
+    /**
+   * Imports the private key for a given account address
+   *
+   * @param privateKey The private key to import, accepts both Bech32 and hex formats
+   * @param chainName The chain name to import the private key for
+   * @param thresholdSignatureScheme The threshold signature scheme to use
+   * @param password The password for encrypted backup shares
+   * @returns The account address, raw public key, and client key shares
+   */ async importPrivateKey({ privateKey, chainName, thresholdSignatureScheme, password = undefined, onError, signedSessionId }) {
+        try {
+            let ceremonyCeremonyCompleteResolver;
+            const ceremonyCompletePromise = new Promise((resolve)=>{
+                ceremonyCeremonyCompleteResolver = resolve;
+            });
+            const { privateKey: formattedPrivateKey, privateKeyBytes } = await this.convertSuiPrivateKey(privateKey);
+            const publicKey = this.getPublicKeyFromPrivateKey(privateKeyBytes);
+            const { rawPublicKey, clientKeyShares } = await this.importRawPrivateKey({
+                chainName,
+                privateKey: formattedPrivateKey,
+                thresholdSignatureScheme,
+                onError: (error)=>{
+                    this.logger.error(ERROR_IMPORT_PRIVATE_KEY, error);
+                    onError == null ? void 0 : onError(error);
+                },
+                onCeremonyComplete: (accountAddress, walletId)=>{
+                    // update wallet map
+                    this.walletMap[accountAddress] = _extends({}, this.walletMap[accountAddress] || {}, {
+                        accountAddress,
+                        walletId,
+                        chainName: this.chainName,
+                        thresholdSignatureScheme,
+                        clientKeySharesBackupInfo: getClientKeyShareBackupInfo()
+                    });
+                    this.logger.debug('walletMap updated for wallet', {
+                        context: {
+                            accountAddress,
+                            walletId,
+                            walletMap: this.walletMap
+                        }
+                    });
+                    ceremonyCeremonyCompleteResolver(undefined);
+                }
+            });
+            // Wait for the ceremony to complete before proceeding
+            await ceremonyCompletePromise;
+            if (!rawPublicKey || !clientKeyShares) {
+                throw new Error(ERROR_IMPORT_PRIVATE_KEY);
+            }
+            const { accountAddress } = await this.deriveAccountAddress({
+                rawPublicKey: rawPublicKey
+            });
+            if (accountAddress !== publicKey) {
+                throw new Error(`Public key mismatch: derived address ${accountAddress} !== public key ${publicKey}`);
+            }
+            // Update client key shares in wallet map
+            // warning: this might result in race condition if `onCeremonyComplete` executes at the same time
+            await this.setClientKeySharesToLocalStorage({
+                accountAddress,
+                clientKeyShares,
+                overwriteOrMerge: 'overwrite'
+            });
+            await this.storeEncryptedBackupByWalletWithRetry({
+                accountAddress,
+                clientKeyShares,
+                password,
+                signedSessionId
+            });
+            return {
+                accountAddress,
+                rawPublicKey: rawPublicKey,
+                clientKeyShares
+            };
+        } catch (error) {
+            this.logger.error(ERROR_IMPORT_PRIVATE_KEY, error);
+            throw new Error(ERROR_IMPORT_PRIVATE_KEY);
+        }
+    }
+    /**
+   * Exports the private key for a given account address
+   *
+   * @param accountAddress The account address to export the private key for
+   * @param password The password for encrypted backup shares
+   * @returns The private key in hex format
+   */ async exportPrivateKey({ accountAddress, password = undefined, signedSessionId, mfaToken }) {
+        try {
+            const { derivedPrivateKey } = await this.exportKey({
+                accountAddress,
+                chainName: this.chainName,
+                password,
+                signedSessionId,
+                mfaToken
+            });
+            if (!derivedPrivateKey) {
+                throw new Error('Derived private key is undefined');
+            }
+            const privateScalarHex = derivedPrivateKey.slice(0, 64);
+            return privateScalarHex;
+        } catch (error) {
+            this.logger.error(ERROR_EXPORT_PRIVATE_KEY, error);
+            throw new Error(ERROR_EXPORT_PRIVATE_KEY);
+        }
+    }
     async getSuiWallets() {
         const wallets = await this.getWallets();
         const suiWallets = wallets.filter((wallet)=>wallet.chainName === 'sui');
         return suiWallets;
     }
-    constructor({ environmentId, authToken, baseApiUrl, baseMPCRelayApiUrl, storageKey, debug }){
+    constructor({ environmentId, authToken, baseApiUrl, baseMPCRelayApiUrl, storageKey, debug, featureFlags, authMode = AuthMode.HEADER, sdkVersion }){
         super({
             environmentId,
             authToken,
             baseApiUrl,
             baseMPCRelayApiUrl,
             storageKey,
-            debug
+            debug,
+            featureFlags,
+            authMode,
+            sdkVersion
         }), this.chainName = 'SUI';
     }
 }

package/package.json

@@ -1,11 +1,13 @@
 {
   "name": "@dynamic-labs-wallet/sui",
-  "version": "0.0.0-beta.3",
+  "version": "0.0.0-beta.304.1",
   "license": "MIT",
+  "type": "commonjs",
   "dependencies": {
-    "@dynamic-labs-wallet/browser": "0.0.0-beta.3",
+    "@dynamic-labs-wallet/browser": "0.0.0-beta.304.1",
     "@mysten/sui": "1.26.0",
-    "@noble/hashes": "1.7.1"
+    "@noble/hashes": "1.7.1",
+    "bech32-converting": "^1.0.9"
   },
   "publishConfig": {
     "access": "public"
@@ -27,7 +29,7 @@
       "types": "./index.esm.d.ts",
       "import": "./index.esm.js",
       "require": "./index.cjs.js",
-      "default": "./index.cjs.js"
+      "default": "./index.esm.js"
     }
   }
 }

package/src/client/client.d.ts

@@ -1,15 +1,16 @@
-import { ClientKeyShare, DynamicWalletClient, EcdsaPublicKey, ThresholdSignatureScheme, DynamicWalletClientProps } from '@dynamic-labs-wallet/browser';
+import { ClientKeyShare, DynamicWalletClient, ThresholdSignatureScheme, DynamicWalletClientProps } from '@dynamic-labs-wallet/browser';
 export declare class DynamicSuiWalletClient extends DynamicWalletClient {
     readonly chainName = "SUI";
-    constructor({ environmentId, authToken, baseApiUrl, baseMPCRelayApiUrl, storageKey, debug, }: DynamicWalletClientProps);
-    createWalletAccount({ thresholdSignatureScheme, password, onError, }: {
+    constructor({ environmentId, authToken, baseApiUrl, baseMPCRelayApiUrl, storageKey, debug, featureFlags, authMode, sdkVersion, }: DynamicWalletClientProps);
+    createWalletAccount({ thresholdSignatureScheme, password, onError, signedSessionId, }: {
         thresholdSignatureScheme: ThresholdSignatureScheme;
         password?: string;
         onError?: (error: Error) => void;
+        signedSessionId: string;
     }): Promise<{
         accountAddress: string;
         publicKeyHex: string;
-        rawPublicKey: EcdsaPublicKey | Uint8Array | undefined;
+        rawPublicKey: string | undefined;
     }>;
     getRawPublicKeyFromClientKeyShares({ chainName, clientKeyShare, }: {
         chainName: string;
@@ -21,22 +22,78 @@ export declare class DynamicSuiWalletClient extends DynamicWalletClient {
     private formatSignature;
     private verifyMessageSignature;
     private verifyTransactionSignature;
-    signMessage({ message, accountAddress, password, }: {
+    signMessage({ message, accountAddress, password, signedSessionId, mfaToken, }: {
         message: string;
         accountAddress: string;
         password?: string;
+        signedSessionId: string;
+        mfaToken?: string;
     }): Promise<string>;
-    signTransaction({ transaction, senderAddress, password, }: {
+    signTransaction({ transaction, senderAddress, password, signedSessionId, mfaToken, }: {
         transaction: string;
         senderAddress: string;
         password?: string;
+        signedSessionId: string;
+        mfaToken?: string;
     }): Promise<string>;
     deriveAccountAddress({ rawPublicKey }: {
-        rawPublicKey: Uint8Array;
+        rawPublicKey: string;
     }): {
         accountAddress: string;
         publicKeyHex: string;
     };
+    /**
+     * Converts a Sui private key from Bech32 format to a 64-character hex string.
+     * The output is compatible with RFC8032 Ed25519 private key format.
+     *
+     * @param suiPrivateKey - The Sui private key in Bech32 format starting with "suiprivkey1"
+     * @returns An object containing the private key and the private key bytes
+     * @throws Error if the input is not a valid Sui private key format
+     */
+    convertSuiPrivateKey(suiPrivateKey: string): {
+        privateKey: string;
+        privateKeyBytes: Buffer;
+    };
+    /**
+     * Gets the public key for a given private key
+     * @param privateKeyBytes A Buffer containing the Ed25519 private key bytes
+     * @returns The public key (Sui address) derived from the private key
+     */
+    getPublicKeyFromPrivateKey(privateKeyBytes: Buffer): string;
+    /**
+     * Imports the private key for a given account address
+     *
+     * @param privateKey The private key to import, accepts both Bech32 and hex formats
+     * @param chainName The chain name to import the private key for
+     * @param thresholdSignatureScheme The threshold signature scheme to use
+     * @param password The password for encrypted backup shares
+     * @returns The account address, raw public key, and client key shares
+     */
+    importPrivateKey({ privateKey, chainName, thresholdSignatureScheme, password, onError, signedSessionId, }: {
+        privateKey: string;
+        chainName: string;
+        thresholdSignatureScheme: ThresholdSignatureScheme;
+        password?: string;
+        onError?: (error: Error) => void;
+        signedSessionId: string;
+    }): Promise<{
+        accountAddress: string;
+        rawPublicKey: string | undefined;
+        clientKeyShares: ClientKeyShare[];
+    }>;
+    /**
+     * Exports the private key for a given account address
+     *
+     * @param accountAddress The account address to export the private key for
+     * @param password The password for encrypted backup shares
+     * @returns The private key in hex format
+     */
+    exportPrivateKey({ accountAddress, password, signedSessionId, mfaToken, }: {
+        accountAddress: string;
+        password?: string;
+        signedSessionId: string;
+        mfaToken?: string;
+    }): Promise<string>;
     getSuiWallets(): Promise<any>;
 }
 //# sourceMappingURL=client.d.ts.map

package/src/client/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/client/client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,cAAc,EACd,wBAAwB,EACxB,wBAAwB,EAGzB,MAAM,8BAA8B,CAAC;AAetC,qBAAa,sBAAuB,SAAQ,mBAAmB;IAC7D,QAAQ,CAAC,SAAS,SAAS;gBAEf,EACV,aAAa,EACb,SAAS,EACT,UAAU,EACV,kBAAkB,EAClB,UAAU,EACV,KAAK,GACN,EAAE,wBAAwB;IAWrB,mBAAmB,CAAC,EACxB,wBAAwB,EACxB,QAAoB,EACpB,OAAO,GACR,EAAE;QACD,wBAAwB,EAAE,wBAAwB,CAAC;QACnD,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;KAClC,GAAG,OAAO,CAAC;QACV,cAAc,EAAE,MAAM,CAAC;QACvB,YAAY,EAAE,MAAM,CAAC;QACrB,YAAY,EAAE,cAAc,GAAG,UAAU,GAAG,SAAS,CAAC;KACvD,CAAC;IAuDI,kCAAkC,CAAC,EACvC,SAAS,EACT,cAAc,GACf,EAAE;QACD,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,EAAE,cAAc,CAAC;KAChC;IAYD;;OAEG;YACW,eAAe;YAyBf,sBAAsB;YA6BtB,0BAA0B;IA6BlC,WAAW,CAAC,EAChB,OAAO,EACP,cAAc,EACd,QAAoB,GACrB,EAAE;QACD,OAAO,EAAE,MAAM,CAAC;QAChB,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,MAAM,CAAC;IAiCb,eAAe,CAAC,EACpB,WAAW,EACX,aAAa,EACb,QAAoB,GACrB,EAAE;QACD,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,MAAM,CAAC;IAgCnB,oBAAoB,CAAC,EAAE,YAAY,EAAE,EAAE;QAAE,YAAY,EAAE,UAAU,CAAA;KAAE;;;;IAU7D,aAAa;CAOpB"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/client/client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,wBAAwB,EACxB,wBAAwB,EAYzB,MAAM,8BAA8B,CAAC;AAWtC,qBAAa,sBAAuB,SAAQ,mBAAmB;IAC7D,QAAQ,CAAC,SAAS,SAAS;gBAEf,EACV,aAAa,EACb,SAAS,EACT,UAAU,EACV,kBAAkB,EAClB,UAAU,EACV,KAAK,EACL,YAAY,EACZ,QAA0B,EAC1B,UAAU,GACX,EAAE,wBAAwB;IAcrB,mBAAmB,CAAC,EACxB,wBAAwB,EACxB,QAAoB,EACpB,OAAO,EACP,eAAe,GAChB,EAAE;QACD,wBAAwB,EAAE,wBAAwB,CAAC;QACnD,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;QACjC,eAAe,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC;QACV,cAAc,EAAE,MAAM,CAAC;QACvB,YAAY,EAAE,MAAM,CAAC;QACrB,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;KAClC,CAAC;IAsEI,kCAAkC,CAAC,EACvC,SAAS,EACT,cAAc,GACf,EAAE;QACD,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,EAAE,cAAc,CAAC;KAChC;IAYD;;OAEG;YACW,eAAe;YAoCf,sBAAsB;YA6BtB,0BAA0B;IA6BlC,WAAW,CAAC,EAChB,OAAO,EACP,cAAc,EACd,QAAoB,EACpB,eAAe,EACf,QAAQ,GACT,EAAE;QACD,OAAO,EAAE,MAAM,CAAC;QAChB,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,MAAM,CAAC;IAmCb,eAAe,CAAC,EACpB,WAAW,EACX,aAAa,EACb,QAAoB,EACpB,eAAe,EACf,QAAQ,GACT,EAAE;QACD,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,GAAG,OAAO,CAAC,MAAM,CAAC;IAkCnB,oBAAoB,CAAC,EAAE,YAAY,EAAE,EAAE;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE;;;;IAW/D;;;;;;;OAOG;IACH,oBAAoB,CAAC,aAAa,EAAE,MAAM,GAAG;QAC3C,UAAU,EAAE,MAAM,CAAC;QACnB,eAAe,EAAE,MAAM,CAAC;KACzB;IAqCD;;;;OAIG;IACH,0BAA0B,CAAC,eAAe,EAAE,MAAM;IAelD;;;;;;;;OAQG;IACG,gBAAgB,CAAC,EACrB,UAAU,EACV,SAAS,EACT,wBAAwB,EACxB,QAAoB,EACpB,OAAO,EACP,eAAe,GAChB,EAAE;QACD,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,wBAAwB,EAAE,wBAAwB,CAAC;QACnD,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;QACjC,eAAe,EAAE,MAAM,CAAC;KACzB,GAAG,OAAO,CAAC;QACV,cAAc,EAAE,MAAM,CAAC;QACvB,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;QACjC,eAAe,EAAE,cAAc,EAAE,CAAC;KACnC,CAAC;IAmFF;;;;;;OAMG;IACG,gBAAgB,CAAC,EACrB,cAAc,EACd,QAAoB,EACpB,eAAe,EACf,QAAQ,GACT,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB;IAoBK,aAAa;CAOpB"}

package/src/client/constants.d.ts

@@ -1,5 +1,7 @@
 export declare const ERROR_KEYGEN_FAILED = "Error with keygen";
 export declare const ERROR_CREATE_WALLET_ACCOUNT = "Error creating sui wallet account";
+export declare const ERROR_IMPORT_PRIVATE_KEY = "Error importing private key";
+export declare const ERROR_EXPORT_PRIVATE_KEY = "Error exporting private key";
 export declare const ERROR_SIGN_MESSAGE = "Error signing message";
 export declare const ERROR_ACCOUNT_ADDRESS_REQUIRED = "Account address is required";
 export declare const ERROR_VERIFY_MESSAGE_SIGNATURE = "Error verifying message signature";

package/src/client/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/client/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,mBAAmB,sBAAsB,CAAC;AAEvD,eAAO,MAAM,2BAA2B,sCAAsC,CAAC;AAE/E,eAAO,MAAM,kBAAkB,0BAA0B,CAAC;AAE1D,eAAO,MAAM,8BAA8B,gCAAgC,CAAC;AAE5E,eAAO,MAAM,8BAA8B,sCACN,CAAC;AAEtC,eAAO,MAAM,kCAAkC,0CACN,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/client/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,mBAAmB,sBAAsB,CAAC;AAEvD,eAAO,MAAM,2BAA2B,sCAAsC,CAAC;AAE/E,eAAO,MAAM,wBAAwB,gCAAgC,CAAC;AAEtE,eAAO,MAAM,wBAAwB,gCAAgC,CAAC;AAEtE,eAAO,MAAM,kBAAkB,0BAA0B,CAAC;AAE1D,eAAO,MAAM,8BAA8B,gCAAgC,CAAC;AAE5E,eAAO,MAAM,8BAA8B,sCACN,CAAC;AAEtC,eAAO,MAAM,kCAAkC,0CACN,CAAC"}