@dynamic-labs/aleo 4.84.0 → 4.85.0

package/CHANGELOG.md

@@ -1,4 +1,38 @@
 
+## [4.85.0](https://github.com/dynamic-labs/dynamic-auth/compare/v4.84.1...v4.85.0) (2026-05-29)
+
+
+### Features
+
+* **moonpay:** add getMoonPayCurrencies API, MOONPAY_PROVIDER_ID, and chain enum fix ([#11362](https://github.com/dynamic-labs/dynamic-auth/issues/11362)) ([8f1c841](https://github.com/dynamic-labs/dynamic-auth/commit/8f1c841dcab3249e82a7152be373c0e0204a2f47))
+* **sdk-react-core:** extend usePrivateTokenBalances with `accountAddress`, `tokenAddresses`, `includeNativeBalance`, `includeFiat` ([#11380](https://github.com/dynamic-labs/dynamic-auth/issues/11380)) ([ccb6d47](https://github.com/dynamic-labs/dynamic-auth/commit/ccb6d47b4683a12a13aaf8311ecffae3d46464a3))
+* **sdk-react-core:** forward `chainName` + `networkId` through `usePrivateTokenBalances` ([#11383](https://github.com/dynamic-labs/dynamic-auth/issues/11383)) ([c2ad110](https://github.com/dynamic-labs/dynamic-auth/commit/c2ad1103d4d4fdba67fc9b50b60945a843adae99))
+
+
+### Bug Fixes
+
+* **aleo:** drop optimistically deducted unshielded rows when balance hits zero ([#11371](https://github.com/dynamic-labs/dynamic-auth/issues/11371)) ([a3bb8e8](https://github.com/dynamic-labs/dynamic-auth/commit/a3bb8e8fa7e877340c829c991ba31eeb8fa4fcf1)), closes [#11337](https://github.com/dynamic-labs/dynamic-auth/issues/11337)
+* **aleo:** re-read gas sponsored flag after async fetchFee resolves ([#11375](https://github.com/dynamic-labs/dynamic-auth/issues/11375)) ([d27e74a](https://github.com/dynamic-labs/dynamic-auth/commit/d27e74a309aff18eb6b18046fe34e9e64363d331))
+* remediate high-severity dependency vulnerabilities ([#11339](https://github.com/dynamic-labs/dynamic-auth/issues/11339)) ([f025b30](https://github.com/dynamic-labs/dynamic-auth/commit/f025b308e29153de49c88d91233139bb00caaf4e))
+* **waas:** guard upgradeToDynamicWaas on the wallet arg, not primaryWallet ([#11324](https://github.com/dynamic-labs/dynamic-auth/issues/11324)) ([3e95eaf](https://github.com/dynamic-labs/dynamic-auth/commit/3e95eaf50afd2f49ff1cc416e5bf211ee04fbb23))
+
+### [4.84.1](https://github.com/dynamic-labs/dynamic-auth/compare/v4.84.0...v4.84.1) (2026-05-28)
+
+
+### Features
+
+* **sdk-react-core:** add usePrivateTokenBalances public hook ([#11338](https://github.com/dynamic-labs/dynamic-auth/issues/11338)) ([91125e8](https://github.com/dynamic-labs/dynamic-auth/commit/91125e8e3ac010f760e1481fd4685dfde331b94a))
+* **waas:** detect delegated wallets via otherShareSets ([#11312](https://github.com/dynamic-labs/dynamic-auth/issues/11312)) ([0c8277f](https://github.com/dynamic-labs/dynamic-auth/commit/0c8277f9e2f4e622fc7a75fdfcf4180d9b7db8ff))
+
+
+### Bug Fixes
+
+* **aleo:** misc Send-screen UI fixes — sponsorship, 0-amount, 0-balance, glyphs ([#11337](https://github.com/dynamic-labs/dynamic-auth/issues/11337)) ([f95bc34](https://github.com/dynamic-labs/dynamic-auth/commit/f95bc34c7f8e0a01df61a72f0cbcfa3508471cd7))
+* **aleo:** optimistic shield balance updates + convergence polling ([#11336](https://github.com/dynamic-labs/dynamic-auth/issues/11336)) ([c86eeec](https://github.com/dynamic-labs/dynamic-auth/commit/c86eeecd1475838a61d58b7924ac7bec0db5b9f3))
+* **locale:** capitalize "Key" in Export Private Key button ([#11319](https://github.com/dynamic-labs/dynamic-auth/issues/11319)) ([58eceff](https://github.com/dynamic-labs/dynamic-auth/commit/58eceff3fdaee5d70dac0a8fef89a86f31f814aa))
+
+
+
 ## [4.84.0](https://github.com/dynamic-labs/dynamic-auth/compare/v4.83.2-alpha.0...v4.84.0) (2026-05-22)
 
 
@@ -6522,4 +6556,4 @@ Enjoy!
 * setPrimaryWallet and useSyncPrimaryWallet updates ([#2128](https://github.com/dynamic-labs/DynamicAuth/issues/2128)) ([fb47b17](https://github.com/dynamic-labs/DynamicAuth/commit/fb47b17ddc7f41c29f140a1a85a1e47dbf017fff))
 * update text color and add close button on extension not installed prompt ([#2122](https://github.com/dynamic-labs/DynamicAuth/issues/2122)) ([b4848a0](https://github.com/dynamic-labs/DynamicAuth/commit/b4848a0a8094b4ceac67e2667d277a9aa5e2e137))
 
-## [0.17.0-RC.16](https://github.com/dynamic-labs/Dyna
+## [0.17.0-RC.16](https://github.com/dynamic-labs/Dyna

package/package.cjs

@@ -3,6 +3,6 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var version = "4.84.0";
+var version = "4.85.0";
 
 exports.version = version;

package/package.js

@@ -1,4 +1,4 @@
 'use client'
-var version = "4.84.0";
+var version = "4.85.0";
 
 export { version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dynamic-labs/aleo",
-  "version": "4.84.0",
+  "version": "4.85.0",
   "description": "A React SDK for implementing wallet web3 authentication and authorization to your website.",
   "author": "Dynamic Labs, Inc.",
   "license": "MIT",
@@ -19,18 +19,18 @@
   "homepage": "https://www.dynamic.xyz/",
   "dependencies": {
     "@dynamic-labs-sdk/client": "1.1.0",
-    "@dynamic-labs/assert-package-version": "4.84.0",
+    "@dynamic-labs/assert-package-version": "4.85.0",
     "@dynamic-labs/sdk-api-core": "0.0.985",
     "@provablehq/aleo-wallet-adaptor-core": "0.3.0-alpha.3",
     "@provablehq/aleo-wallet-adaptor-shield": "0.3.0-alpha.3",
     "@provablehq/aleo-wallet-standard": "0.3.0-alpha.3",
     "@provablehq/aleo-types": "0.3.0-alpha.3",
-    "@dynamic-labs/logger": "4.84.0",
-    "@dynamic-labs/types": "4.84.0",
-    "@dynamic-labs/utils": "4.84.0",
-    "@dynamic-labs/waas": "4.84.0",
-    "@dynamic-labs/wallet-book": "4.84.0",
-    "@dynamic-labs/wallet-connector-core": "4.84.0"
+    "@dynamic-labs/logger": "4.85.0",
+    "@dynamic-labs/types": "4.85.0",
+    "@dynamic-labs/utils": "4.85.0",
+    "@dynamic-labs/waas": "4.85.0",
+    "@dynamic-labs/wallet-book": "4.85.0",
+    "@dynamic-labs/wallet-connector-core": "4.85.0"
   },
   "peerDependencies": {}
 }

package/src/connectors/DynamicWaasAleoConnector/DynamicWaasAleoConnector.cjs

@@ -669,6 +669,11 @@ class DynamicWaasAleoConnector extends waas.withDynamicWaas(WaasAleoWalletConnec
                 : Number(networkChainId !== null && networkChainId !== void 0 ? networkChainId : 1);
             return new AleoUiTransaction.AleoUiTransaction({
                 from,
+                // Feemaster policy lookup, used by `fetchFee` to set
+                //  `isGasSponsored` truthfully for the currently-selected token
+                //  + transaction mode. Bound to the live connector so it picks up
+                //  the active chainId (the policy keys off mainnet vs. testnet).
+                isFeemasterSponsored: (args) => _tslib.__awaiter(this, void 0, void 0, function* () { return this.isFeemasterSponsored(args); }),
                 // Merge CTA: scope the join to the selected token. For credits +
                 // stablecoins the program id alone is enough. For ARC-21 the
                 // program (`token_registry.aleo`) hosts many tokens, so we

package/src/connectors/DynamicWaasAleoConnector/DynamicWaasAleoConnector.js

@@ -665,6 +665,11 @@ class DynamicWaasAleoConnector extends withDynamicWaas(WaasAleoWalletConnector)
                 : Number(networkChainId !== null && networkChainId !== void 0 ? networkChainId : 1);
             return new AleoUiTransaction({
                 from,
+                // Feemaster policy lookup, used by `fetchFee` to set
+                //  `isGasSponsored` truthfully for the currently-selected token
+                //  + transaction mode. Bound to the live connector so it picks up
+                //  the active chainId (the policy keys off mainnet vs. testnet).
+                isFeemasterSponsored: (args) => __awaiter(this, void 0, void 0, function* () { return this.isFeemasterSponsored(args); }),
                 // Merge CTA: scope the join to the selected token. For credits +
                 // stablecoins the program id alone is enough. For ARC-21 the
                 // program (`token_registry.aleo`) hosts many tokens, so we

package/src/utils/AleoUiTransaction/AleoUiTransaction.cjs

@@ -57,7 +57,7 @@ const ALEO_ADDRESS_REGEX = /^aleo1[a-z0-9]{58}$/;
  * fits, the form surfaces a merge CTA backed by `joinAllRecordsForToken`.
  */
 class AleoUiTransaction {
-    constructor({ from, networkId, listOwnedRecords, joinAllRecordsForToken, onSubmit, }) {
+    constructor({ from, networkId, listOwnedRecords, joinAllRecordsForToken, onSubmit, isFeemasterSponsored, }) {
         var _a;
         this.chain = 'ALEO';
         this.data = undefined;
@@ -81,11 +81,19 @@ class AleoUiTransaction {
         // presumptuous given Individual vs. Exchange has real semantic
         // differences (recipient gets a private record vs. public balance).
         this.selectedTransactionMode = undefined;
+        // Resolved at `fetchFee` time. The widget calls `isGasSponsored()`
+        //  synchronously to decide whether to render the gas-estimate row, so
+        //  we cache the async Feemaster lookup result on the instance. When
+        //  the closure isn't supplied (legacy call sites + unit tests) we
+        //  fall back to the pre-existing "credits is sponsored, everything
+        //  else is user-paid" heuristic.
+        this.cachedIsGasSponsored = false;
         this.from = from;
         this.networkId = networkId;
         this.listOwnedRecords = listOwnedRecords;
         this.joinAllRecordsForToken = joinAllRecordsForToken;
         this.onSubmitFn = onSubmit;
+        this.isFeemasterSponsoredFn = isFeemasterSponsored;
         this.selectedToken = (_a = this.tokensForNetwork()[0]) !== null && _a !== void 0 ? _a : this.creditsFallback();
     }
     setTransactionMode(modeId) {
@@ -222,20 +230,62 @@ class AleoUiTransaction {
         });
     }
     /**
-     * Feemaster sponsors `credits.aleo/transfer_public` and `transfer_private`
-     * per ANF's policy, so the user pays zero on credits sends. Stablecoin
-     * + ARC-21 sends today fall through to user-paid (Feemaster policy
-     * doesn't yet cover them on testnet); the iframe still completes the
-     * transfer, just deducts the credits-fee directly. The optimistic `0n`
-     * here matches what we tell the user via `isGasSponsored()` below.
+     * Asks Feemaster (via the connector closure) whether the currently
+     * selected `(token, transactionMode)` is on its sponsorship policy and
+     * caches the answer on the instance so the synchronous
+     * `isGasSponsored()` getter can return the right boolean. We hold
+     * `fee.gas` at `0n` regardless: when Feemaster covers the call the
+     * user really does pay zero; when it doesn't, the iframe deducts a
+     * small credits-fee on the user's behalf and the prover-reported
+     * exact amount isn't known until after broadcast — the confirmation
+     * card then hides the row entirely (sponsored) or shows `--` until
+     * the receipt lands (user-paid). The async `fetchFee` is awaited by
+     * `TransactionConfirmationView` before the gas row renders so the
+     * cached flag is always populated by the time the row decides to
+     * mount.
      */
     fetchFee() {
         return _tslib.__awaiter(this, void 0, void 0, function* () {
             this.fee.gas = BigInt(0);
+            if (!this.isFeemasterSponsoredFn) {
+                // Pre-existing heuristic for tests / legacy call sites that
+                //  construct `AleoUiTransaction` without the connector closure:
+                //  treat credits as sponsored, every other token as user-paid.
+                this.cachedIsGasSponsored = this.selectedToken.programKind === 'credits';
+                return;
+            }
+            // Match the function name we'd actually submit:
+            //   - Individual mode → `<program>/transfer_private`
+            //   - Exchange mode   → `<program>/transfer_private_to_public`
+            //                      (the heavier step-1 leg; step-2's
+            //                      `transfer_public` is cheap by comparison and
+            //                      currently shares the same policy bucket).
+            //   - No mode picked yet → fall back to `transfer_private` so the
+            //                          confirmation card optimistically hides
+            //                          the row before the user picks; if the
+            //                          eventual selection isn't sponsored we'll
+            //                          re-render once the user advances.
+            const functionName = this.selectedTransactionMode === 'exchange'
+                ? 'transfer_private_to_public'
+                : 'transfer_private';
+            try {
+                this.cachedIsGasSponsored = yield this.isFeemasterSponsoredFn({
+                    functionName,
+                    programId: this.selectedToken.programId,
+                });
+            }
+            catch (_a) {
+                // Never throw from `fetchFee` — the widget would surface a
+                //  confirmation-card error and the user couldn't proceed. A
+                //  Feemaster outage just means we render the (zero) fee row
+                //  conservatively, which the user will read as "no estimate
+                //  yet". The submit path will still attempt the broadcast.
+                this.cachedIsGasSponsored = false;
+            }
         });
     }
     isGasSponsored() {
-        return this.selectedToken.programKind === 'credits';
+        return this.cachedIsGasSponsored;
     }
     /**
      * Tells the SendBalanceView to populate the picker / "Available"
@@ -348,7 +398,7 @@ class AleoUiTransaction {
         return {
             contractAddress: aleoSendableTokens.ALEO_CREDITS_PROGRAM,
             decimals: aleoSendableTokens.ALEO_CREDITS_DECIMALS,
-            logoURI: '',
+            logoURI: aleoSendableTokens.ALEO_NATIVE_LOGO_URI,
             name: 'Aleo Credits',
             programId: aleoSendableTokens.ALEO_CREDITS_PROGRAM,
             programKind: 'credits',

package/src/utils/AleoUiTransaction/AleoUiTransaction.d.ts

@@ -16,6 +16,10 @@ type AleoUiTransactionProps = {
     listOwnedRecords: () => Promise<AleoOwnedRecord[]>;
     joinAllRecordsForToken: (token: AleoSendableToken) => Promise<void>;
     onSubmit: (params: AleoSubmitParams) => Promise<string>;
+    isFeemasterSponsored?: (args: {
+        programId: string;
+        functionName: string;
+    }) => Promise<boolean>;
 };
 /**
  * Aleo `IUITransaction` for the widget's Send flow.
@@ -71,10 +75,12 @@ export declare class AleoUiTransaction implements IUITransaction {
     private readonly listOwnedRecords;
     private readonly joinAllRecordsForToken;
     private readonly onSubmitFn;
+    private readonly isFeemasterSponsoredFn;
+    private cachedIsGasSponsored;
     private pendingValue;
     private cachedRecords;
     private selectedToken;
-    constructor({ from, networkId, listOwnedRecords, joinAllRecordsForToken, onSubmit, }: AleoUiTransactionProps);
+    constructor({ from, networkId, listOwnedRecords, joinAllRecordsForToken, onSubmit, isFeemasterSponsored, }: AleoUiTransactionProps);
     setTransactionMode(modeId: string): void;
     setSelectedToken(contractAddress: string): void;
     setPendingAmount(amountInput: string): void;
@@ -104,12 +110,19 @@ export declare class AleoUiTransaction implements IUITransaction {
      */
     getBalance(): Promise<bigint>;
     /**
-     * Feemaster sponsors `credits.aleo/transfer_public` and `transfer_private`
-     * per ANF's policy, so the user pays zero on credits sends. Stablecoin
-     * + ARC-21 sends today fall through to user-paid (Feemaster policy
-     * doesn't yet cover them on testnet); the iframe still completes the
-     * transfer, just deducts the credits-fee directly. The optimistic `0n`
-     * here matches what we tell the user via `isGasSponsored()` below.
+     * Asks Feemaster (via the connector closure) whether the currently
+     * selected `(token, transactionMode)` is on its sponsorship policy and
+     * caches the answer on the instance so the synchronous
+     * `isGasSponsored()` getter can return the right boolean. We hold
+     * `fee.gas` at `0n` regardless: when Feemaster covers the call the
+     * user really does pay zero; when it doesn't, the iframe deducts a
+     * small credits-fee on the user's behalf and the prover-reported
+     * exact amount isn't known until after broadcast — the confirmation
+     * card then hides the row entirely (sponsored) or shows `--` until
+     * the receipt lands (user-paid). The async `fetchFee` is awaited by
+     * `TransactionConfirmationView` before the gas row renders so the
+     * cached flag is always populated by the time the row decides to
+     * mount.
      */
     fetchFee(): Promise<void>;
     isGasSponsored(): boolean;

package/src/utils/AleoUiTransaction/AleoUiTransaction.js

@@ -1,7 +1,7 @@
 'use client'
 import { __awaiter } from '../../../_virtual/_tslib.js';
 import { formatNumberText } from '@dynamic-labs/utils';
-import { recordMatchesSendableToken, extractRecordAtomicAmount, getAleoSendableTokensForNetwork, ALEO_CREDITS_PROGRAM, ALEO_CREDITS_DECIMALS } from '../aleoSendableTokens/aleoSendableTokens.js';
+import { recordMatchesSendableToken, extractRecordAtomicAmount, getAleoSendableTokensForNetwork, ALEO_CREDITS_PROGRAM, ALEO_CREDITS_DECIMALS, ALEO_NATIVE_LOGO_URI } from '../aleoSendableTokens/aleoSendableTokens.js';
 
 // `10n ** decimals` via string construction. Equivalent to `BigInt(10) **
 // BigInt(decimals)` but avoids the TS2791 error in environments whose
@@ -53,7 +53,7 @@ const ALEO_ADDRESS_REGEX = /^aleo1[a-z0-9]{58}$/;
  * fits, the form surfaces a merge CTA backed by `joinAllRecordsForToken`.
  */
 class AleoUiTransaction {
-    constructor({ from, networkId, listOwnedRecords, joinAllRecordsForToken, onSubmit, }) {
+    constructor({ from, networkId, listOwnedRecords, joinAllRecordsForToken, onSubmit, isFeemasterSponsored, }) {
         var _a;
         this.chain = 'ALEO';
         this.data = undefined;
@@ -77,11 +77,19 @@ class AleoUiTransaction {
         // presumptuous given Individual vs. Exchange has real semantic
         // differences (recipient gets a private record vs. public balance).
         this.selectedTransactionMode = undefined;
+        // Resolved at `fetchFee` time. The widget calls `isGasSponsored()`
+        //  synchronously to decide whether to render the gas-estimate row, so
+        //  we cache the async Feemaster lookup result on the instance. When
+        //  the closure isn't supplied (legacy call sites + unit tests) we
+        //  fall back to the pre-existing "credits is sponsored, everything
+        //  else is user-paid" heuristic.
+        this.cachedIsGasSponsored = false;
         this.from = from;
         this.networkId = networkId;
         this.listOwnedRecords = listOwnedRecords;
         this.joinAllRecordsForToken = joinAllRecordsForToken;
         this.onSubmitFn = onSubmit;
+        this.isFeemasterSponsoredFn = isFeemasterSponsored;
         this.selectedToken = (_a = this.tokensForNetwork()[0]) !== null && _a !== void 0 ? _a : this.creditsFallback();
     }
     setTransactionMode(modeId) {
@@ -218,20 +226,62 @@ class AleoUiTransaction {
         });
     }
     /**
-     * Feemaster sponsors `credits.aleo/transfer_public` and `transfer_private`
-     * per ANF's policy, so the user pays zero on credits sends. Stablecoin
-     * + ARC-21 sends today fall through to user-paid (Feemaster policy
-     * doesn't yet cover them on testnet); the iframe still completes the
-     * transfer, just deducts the credits-fee directly. The optimistic `0n`
-     * here matches what we tell the user via `isGasSponsored()` below.
+     * Asks Feemaster (via the connector closure) whether the currently
+     * selected `(token, transactionMode)` is on its sponsorship policy and
+     * caches the answer on the instance so the synchronous
+     * `isGasSponsored()` getter can return the right boolean. We hold
+     * `fee.gas` at `0n` regardless: when Feemaster covers the call the
+     * user really does pay zero; when it doesn't, the iframe deducts a
+     * small credits-fee on the user's behalf and the prover-reported
+     * exact amount isn't known until after broadcast — the confirmation
+     * card then hides the row entirely (sponsored) or shows `--` until
+     * the receipt lands (user-paid). The async `fetchFee` is awaited by
+     * `TransactionConfirmationView` before the gas row renders so the
+     * cached flag is always populated by the time the row decides to
+     * mount.
      */
     fetchFee() {
         return __awaiter(this, void 0, void 0, function* () {
             this.fee.gas = BigInt(0);
+            if (!this.isFeemasterSponsoredFn) {
+                // Pre-existing heuristic for tests / legacy call sites that
+                //  construct `AleoUiTransaction` without the connector closure:
+                //  treat credits as sponsored, every other token as user-paid.
+                this.cachedIsGasSponsored = this.selectedToken.programKind === 'credits';
+                return;
+            }
+            // Match the function name we'd actually submit:
+            //   - Individual mode → `<program>/transfer_private`
+            //   - Exchange mode   → `<program>/transfer_private_to_public`
+            //                      (the heavier step-1 leg; step-2's
+            //                      `transfer_public` is cheap by comparison and
+            //                      currently shares the same policy bucket).
+            //   - No mode picked yet → fall back to `transfer_private` so the
+            //                          confirmation card optimistically hides
+            //                          the row before the user picks; if the
+            //                          eventual selection isn't sponsored we'll
+            //                          re-render once the user advances.
+            const functionName = this.selectedTransactionMode === 'exchange'
+                ? 'transfer_private_to_public'
+                : 'transfer_private';
+            try {
+                this.cachedIsGasSponsored = yield this.isFeemasterSponsoredFn({
+                    functionName,
+                    programId: this.selectedToken.programId,
+                });
+            }
+            catch (_a) {
+                // Never throw from `fetchFee` — the widget would surface a
+                //  confirmation-card error and the user couldn't proceed. A
+                //  Feemaster outage just means we render the (zero) fee row
+                //  conservatively, which the user will read as "no estimate
+                //  yet". The submit path will still attempt the broadcast.
+                this.cachedIsGasSponsored = false;
+            }
         });
     }
     isGasSponsored() {
-        return this.selectedToken.programKind === 'credits';
+        return this.cachedIsGasSponsored;
     }
     /**
      * Tells the SendBalanceView to populate the picker / "Available"
@@ -344,7 +394,7 @@ class AleoUiTransaction {
         return {
             contractAddress: ALEO_CREDITS_PROGRAM,
             decimals: ALEO_CREDITS_DECIMALS,
-            logoURI: '',
+            logoURI: ALEO_NATIVE_LOGO_URI,
             name: 'Aleo Credits',
             programId: ALEO_CREDITS_PROGRAM,
             programKind: 'credits',

package/src/utils/aleoSendableTokens/aleoSendableTokens.cjs

@@ -38,10 +38,33 @@ const ALEO_TESTNET_NETWORK_ID = 1;
 const ALEO_CREDITS_DECIMALS = 6;
 const ALEO_CREDITS_PROGRAM = 'credits.aleo';
 const ALEO_TOKEN_REGISTRY_PROGRAM = 'token_registry.aleo';
+// Brand-asset CDN URLs. Mirrors the URLs the multichain (unshielded) and
+//  curated-prices (shielded) feeds emit from redcoast — see
+//  `apps/dashboard-api/src/services/aleoPrices/aleoCuratedTokens.ts`.
+//  Hard-coded here (rather than threaded through a network call) so the
+//  Send picker has the right glyphs the moment the form renders;
+//  otherwise the row icons flash empty while redcoast's price lookup
+//  resolves.
+const ALEO_NATIVE_LOGO_URI = 'https://app.dynamic.xyz/assets/networks/aleo.svg';
+const USAD_LOGO_URI = 'https://app.dynamic.xyz/assets/tokens/usad.svg';
+const USDCX_LOGO_URI = 'https://app.dynamic.xyz/assets/tokens/usdcx.svg';
+const WSOL_LOGO_URI = 'https://app.dynamic.xyz/assets/networks/solana.svg';
+const WETH_LOGO_URI = 'https://app.dynamic.xyz/assets/networks/eth.svg';
+const WBTC_LOGO_URI = 'https://app.dynamic.xyz/assets/networks/bitcoin.svg';
+// Tether's canonical brand glyph isn't currently mirrored under
+//  `app.dynamic.xyz/assets/...`; reuse the CoinGecko CDN URL that
+//  redcoast's `aleoCuratedTokens` registry uses for wUSDT, so the Send
+//  picker shows the same teal ₮ as the Shielded tab.
+const USDT_LOGO_URI = 'https://coin-images.coingecko.com/coins/images/325/large/Tether.png';
+// Matches the redcoast curated registry's mapping for `hyp_warp_token_usdc.aleo`,
+//  which currently re-uses the USDCx glyph (intentional grouping in that
+//  registry). Kept aligned so the Send picker and the Shielded tab show
+//  the same icon for the wrapped-USDC route.
+const USDC_LOGO_URI = USDCX_LOGO_URI;
 const ALEO_CREDITS_TOKEN = {
     contractAddress: ALEO_CREDITS_PROGRAM,
     decimals: ALEO_CREDITS_DECIMALS,
-    logoURI: '',
+    logoURI: ALEO_NATIVE_LOGO_URI,
     name: 'Aleo Credits',
     programId: ALEO_CREDITS_PROGRAM,
     programKind: 'credits',
@@ -50,9 +73,10 @@ const ALEO_CREDITS_TOKEN = {
     symbol: 'ALEO',
 };
 const ALEO_STABLECOIN_DECIMALS = 6;
-const buildStablecoin = (programId, symbol, name) => ({
+const buildStablecoin = (programId, symbol, name, logoURI) => ({
     contractAddress: programId,
     decimals: ALEO_STABLECOIN_DECIMALS,
+    logoURI,
     name,
     programId,
     programKind: 'stablecoin',
@@ -64,6 +88,7 @@ const buildArc21 = (args) => ({
     contractAddress: args.warpProgram,
     decimals: args.decimals,
     externalAuthRequired: false,
+    logoURI: args.logoURI,
     name: args.name,
     programId: ALEO_TOKEN_REGISTRY_PROGRAM,
     programKind: 'arc21',
@@ -75,10 +100,11 @@ const buildArc21 = (args) => ({
 const ALEO_SENDABLE_TOKENS_BY_NETWORK = {
     [ALEO_MAINNET_NETWORK_ID]: [
         ALEO_CREDITS_TOKEN,
-        buildStablecoin('usad_stablecoin.aleo', 'USAD', 'USAD'),
-        buildStablecoin('usdcx_stablecoin.aleo', 'USDCx', 'USDCx'),
+        buildStablecoin('usad_stablecoin.aleo', 'USAD', 'USAD', USAD_LOGO_URI),
+        buildStablecoin('usdcx_stablecoin.aleo', 'USDCx', 'USDCx', USDCX_LOGO_URI),
         buildArc21({
             decimals: 9,
+            logoURI: WSOL_LOGO_URI,
             name: 'Wrapped SOL',
             symbol: 'wSOL',
             tokenId: '2045969100091121326225168054634646230244820821909676777152465722877810201564field',
@@ -86,6 +112,7 @@ const ALEO_SENDABLE_TOKENS_BY_NETWORK = {
         }),
         buildArc21({
             decimals: 18,
+            logoURI: WETH_LOGO_URI,
             name: 'Wrapped ETH',
             symbol: 'wETH',
             tokenId: '8189585964265444162798552221009403350643900573290534096996249214099143169251field',
@@ -93,6 +120,7 @@ const ALEO_SENDABLE_TOKENS_BY_NETWORK = {
         }),
         buildArc21({
             decimals: 8,
+            logoURI: WBTC_LOGO_URI,
             name: 'Wrapped BTC',
             symbol: 'wBTC',
             tokenId: '3491859903473482085250871387962132231204352466326026409883548131580582527809field',
@@ -100,6 +128,7 @@ const ALEO_SENDABLE_TOKENS_BY_NETWORK = {
         }),
         buildArc21({
             decimals: 6,
+            logoURI: USDT_LOGO_URI,
             name: 'Tether USD',
             symbol: 'USDT',
             tokenId: '7881654794448182580124231856035865816599796419758925654292946277940935117913field',
@@ -107,6 +136,7 @@ const ALEO_SENDABLE_TOKENS_BY_NETWORK = {
         }),
         buildArc21({
             decimals: 6,
+            logoURI: USDC_LOGO_URI,
             name: 'USD Coin',
             symbol: 'USDC',
             tokenId: '4697275201844475848710842677807162058146139844643350200269139278887318953049field',
@@ -115,8 +145,8 @@ const ALEO_SENDABLE_TOKENS_BY_NETWORK = {
     ],
     [ALEO_TESTNET_NETWORK_ID]: [
         ALEO_CREDITS_TOKEN,
-        buildStablecoin('test_usad_stablecoin.aleo', 'USAD', 'USAD'),
-        buildStablecoin('test_usdcx_stablecoin.aleo', 'USDCx', 'USDCx'),
+        buildStablecoin('test_usad_stablecoin.aleo', 'USAD', 'USAD', USAD_LOGO_URI),
+        buildStablecoin('test_usdcx_stablecoin.aleo', 'USDCx', 'USDCx', USDCX_LOGO_URI),
     ],
 };
 const getAleoSendableTokensForNetwork = (networkId) => { var _a; return (_a = ALEO_SENDABLE_TOKENS_BY_NETWORK[networkId]) !== null && _a !== void 0 ? _a : []; };
@@ -178,6 +208,7 @@ const extractRecordAtomicAmount = (record, token) => {
 
 exports.ALEO_CREDITS_DECIMALS = ALEO_CREDITS_DECIMALS;
 exports.ALEO_CREDITS_PROGRAM = ALEO_CREDITS_PROGRAM;
+exports.ALEO_NATIVE_LOGO_URI = ALEO_NATIVE_LOGO_URI;
 exports.ALEO_SENDABLE_TOKENS_BY_NETWORK = ALEO_SENDABLE_TOKENS_BY_NETWORK;
 exports.ALEO_TOKEN_REGISTRY_PROGRAM = ALEO_TOKEN_REGISTRY_PROGRAM;
 exports.extractRecordAtomicAmount = extractRecordAtomicAmount;

package/src/utils/aleoSendableTokens/aleoSendableTokens.d.ts

@@ -31,6 +31,7 @@
 export declare const ALEO_CREDITS_DECIMALS = 6;
 export declare const ALEO_CREDITS_PROGRAM = "credits.aleo";
 export declare const ALEO_TOKEN_REGISTRY_PROGRAM = "token_registry.aleo";
+export declare const ALEO_NATIVE_LOGO_URI = "https://app.dynamic.xyz/assets/networks/aleo.svg";
 export type AleoProgramKind = 'arc21' | 'credits' | 'stablecoin';
 export type AleoSendableToken = {
     contractAddress: string;

package/src/utils/aleoSendableTokens/aleoSendableTokens.js

@@ -34,10 +34,33 @@ const ALEO_TESTNET_NETWORK_ID = 1;
 const ALEO_CREDITS_DECIMALS = 6;
 const ALEO_CREDITS_PROGRAM = 'credits.aleo';
 const ALEO_TOKEN_REGISTRY_PROGRAM = 'token_registry.aleo';
+// Brand-asset CDN URLs. Mirrors the URLs the multichain (unshielded) and
+//  curated-prices (shielded) feeds emit from redcoast — see
+//  `apps/dashboard-api/src/services/aleoPrices/aleoCuratedTokens.ts`.
+//  Hard-coded here (rather than threaded through a network call) so the
+//  Send picker has the right glyphs the moment the form renders;
+//  otherwise the row icons flash empty while redcoast's price lookup
+//  resolves.
+const ALEO_NATIVE_LOGO_URI = 'https://app.dynamic.xyz/assets/networks/aleo.svg';
+const USAD_LOGO_URI = 'https://app.dynamic.xyz/assets/tokens/usad.svg';
+const USDCX_LOGO_URI = 'https://app.dynamic.xyz/assets/tokens/usdcx.svg';
+const WSOL_LOGO_URI = 'https://app.dynamic.xyz/assets/networks/solana.svg';
+const WETH_LOGO_URI = 'https://app.dynamic.xyz/assets/networks/eth.svg';
+const WBTC_LOGO_URI = 'https://app.dynamic.xyz/assets/networks/bitcoin.svg';
+// Tether's canonical brand glyph isn't currently mirrored under
+//  `app.dynamic.xyz/assets/...`; reuse the CoinGecko CDN URL that
+//  redcoast's `aleoCuratedTokens` registry uses for wUSDT, so the Send
+//  picker shows the same teal ₮ as the Shielded tab.
+const USDT_LOGO_URI = 'https://coin-images.coingecko.com/coins/images/325/large/Tether.png';
+// Matches the redcoast curated registry's mapping for `hyp_warp_token_usdc.aleo`,
+//  which currently re-uses the USDCx glyph (intentional grouping in that
+//  registry). Kept aligned so the Send picker and the Shielded tab show
+//  the same icon for the wrapped-USDC route.
+const USDC_LOGO_URI = USDCX_LOGO_URI;
 const ALEO_CREDITS_TOKEN = {
     contractAddress: ALEO_CREDITS_PROGRAM,
     decimals: ALEO_CREDITS_DECIMALS,
-    logoURI: '',
+    logoURI: ALEO_NATIVE_LOGO_URI,
     name: 'Aleo Credits',
     programId: ALEO_CREDITS_PROGRAM,
     programKind: 'credits',
@@ -46,9 +69,10 @@ const ALEO_CREDITS_TOKEN = {
     symbol: 'ALEO',
 };
 const ALEO_STABLECOIN_DECIMALS = 6;
-const buildStablecoin = (programId, symbol, name) => ({
+const buildStablecoin = (programId, symbol, name, logoURI) => ({
     contractAddress: programId,
     decimals: ALEO_STABLECOIN_DECIMALS,
+    logoURI,
     name,
     programId,
     programKind: 'stablecoin',
@@ -60,6 +84,7 @@ const buildArc21 = (args) => ({
     contractAddress: args.warpProgram,
     decimals: args.decimals,
     externalAuthRequired: false,
+    logoURI: args.logoURI,
     name: args.name,
     programId: ALEO_TOKEN_REGISTRY_PROGRAM,
     programKind: 'arc21',
@@ -71,10 +96,11 @@ const buildArc21 = (args) => ({
 const ALEO_SENDABLE_TOKENS_BY_NETWORK = {
     [ALEO_MAINNET_NETWORK_ID]: [
         ALEO_CREDITS_TOKEN,
-        buildStablecoin('usad_stablecoin.aleo', 'USAD', 'USAD'),
-        buildStablecoin('usdcx_stablecoin.aleo', 'USDCx', 'USDCx'),
+        buildStablecoin('usad_stablecoin.aleo', 'USAD', 'USAD', USAD_LOGO_URI),
+        buildStablecoin('usdcx_stablecoin.aleo', 'USDCx', 'USDCx', USDCX_LOGO_URI),
         buildArc21({
             decimals: 9,
+            logoURI: WSOL_LOGO_URI,
             name: 'Wrapped SOL',
             symbol: 'wSOL',
             tokenId: '2045969100091121326225168054634646230244820821909676777152465722877810201564field',
@@ -82,6 +108,7 @@ const ALEO_SENDABLE_TOKENS_BY_NETWORK = {
         }),
         buildArc21({
             decimals: 18,
+            logoURI: WETH_LOGO_URI,
             name: 'Wrapped ETH',
             symbol: 'wETH',
             tokenId: '8189585964265444162798552221009403350643900573290534096996249214099143169251field',
@@ -89,6 +116,7 @@ const ALEO_SENDABLE_TOKENS_BY_NETWORK = {
         }),
         buildArc21({
             decimals: 8,
+            logoURI: WBTC_LOGO_URI,
             name: 'Wrapped BTC',
             symbol: 'wBTC',
             tokenId: '3491859903473482085250871387962132231204352466326026409883548131580582527809field',
@@ -96,6 +124,7 @@ const ALEO_SENDABLE_TOKENS_BY_NETWORK = {
         }),
         buildArc21({
             decimals: 6,
+            logoURI: USDT_LOGO_URI,
             name: 'Tether USD',
             symbol: 'USDT',
             tokenId: '7881654794448182580124231856035865816599796419758925654292946277940935117913field',
@@ -103,6 +132,7 @@ const ALEO_SENDABLE_TOKENS_BY_NETWORK = {
         }),
         buildArc21({
             decimals: 6,
+            logoURI: USDC_LOGO_URI,
             name: 'USD Coin',
             symbol: 'USDC',
             tokenId: '4697275201844475848710842677807162058146139844643350200269139278887318953049field',
@@ -111,8 +141,8 @@ const ALEO_SENDABLE_TOKENS_BY_NETWORK = {
     ],
     [ALEO_TESTNET_NETWORK_ID]: [
         ALEO_CREDITS_TOKEN,
-        buildStablecoin('test_usad_stablecoin.aleo', 'USAD', 'USAD'),
-        buildStablecoin('test_usdcx_stablecoin.aleo', 'USDCx', 'USDCx'),
+        buildStablecoin('test_usad_stablecoin.aleo', 'USAD', 'USAD', USAD_LOGO_URI),
+        buildStablecoin('test_usdcx_stablecoin.aleo', 'USDCx', 'USDCx', USDCX_LOGO_URI),
     ],
 };
 const getAleoSendableTokensForNetwork = (networkId) => { var _a; return (_a = ALEO_SENDABLE_TOKENS_BY_NETWORK[networkId]) !== null && _a !== void 0 ? _a : []; };
@@ -172,4 +202,4 @@ const extractRecordAtomicAmount = (record, token) => {
     }
 };
 
-export { ALEO_CREDITS_DECIMALS, ALEO_CREDITS_PROGRAM, ALEO_SENDABLE_TOKENS_BY_NETWORK, ALEO_TOKEN_REGISTRY_PROGRAM, extractRecordAtomicAmount, getAleoSendableTokensForNetwork, recordMatchesSendableToken };
+export { ALEO_CREDITS_DECIMALS, ALEO_CREDITS_PROGRAM, ALEO_NATIVE_LOGO_URI, ALEO_SENDABLE_TOKENS_BY_NETWORK, ALEO_TOKEN_REGISTRY_PROGRAM, extractRecordAtomicAmount, getAleoSendableTokensForNetwork, recordMatchesSendableToken };

package/src/utils/aleoSendableTokens/index.d.ts

@@ -1,2 +1,2 @@
-export { ALEO_CREDITS_DECIMALS, ALEO_CREDITS_PROGRAM, ALEO_SENDABLE_TOKENS_BY_NETWORK, ALEO_TOKEN_REGISTRY_PROGRAM, extractRecordAtomicAmount, getAleoSendableTokensForNetwork, recordMatchesSendableToken, } from './aleoSendableTokens';
+export { ALEO_CREDITS_DECIMALS, ALEO_CREDITS_PROGRAM, ALEO_NATIVE_LOGO_URI, ALEO_SENDABLE_TOKENS_BY_NETWORK, ALEO_TOKEN_REGISTRY_PROGRAM, extractRecordAtomicAmount, getAleoSendableTokensForNetwork, recordMatchesSendableToken, } from './aleoSendableTokens';
 export type { AleoOwnedRecord, AleoProgramKind, AleoSendableToken, } from './aleoSendableTokens';