@dynamic-labs/aleo 4.91.0 → 4.91.2

package/CHANGELOG.md

@@ -1,4 +1,47 @@
 
+### [4.91.2](https://github.com/dynamic-labs/dynamic-auth/compare/v4.91.1...v4.91.2) (2026-06-26)
+
+
+### ⚠ BREAKING CHANGES
+
+* **waas:** require expectedAddresses on migrateFromFireblocks (#11730)
+
+### Features
+
+* **midnight:** support shielded/unshielded transfers and dust states in the embedded Send flow ([#11731](https://github.com/dynamic-labs/dynamic-auth/issues/11731)) ([663d171](https://github.com/dynamic-labs/dynamic-auth/commit/663d171a9628c634586831ee35c234e9331e3f80))
+* **react-native-extension:** instrument all embedded webview failure paths ([#11737](https://github.com/dynamic-labs/dynamic-auth/issues/11737)) ([172998b](https://github.com/dynamic-labs/dynamic-auth/commit/172998b56e9bee04fbb8da71e83ce8885bc378ff))
+* **waas:** migrateFromFireblocks connector method + demo panel (browser-wallet-client 1.0.46) ([#11702](https://github.com/dynamic-labs/dynamic-auth/issues/11702)) ([6bfc844](https://github.com/dynamic-labs/dynamic-auth/commit/6bfc8443fbaedabe1e7bee0ed78742cbbe5d0084))
+
+
+### Bug Fixes
+
+* add coverage for scenario with passkey re-login and smart account ([#11726](https://github.com/dynamic-labs/dynamic-auth/issues/11726)) ([5364a72](https://github.com/dynamic-labs/dynamic-auth/commit/5364a72a750d835b9b2da602a91e8b5d7d305db7))
+* remediate high-severity dependency vulnerabilities ([#11721](https://github.com/dynamic-labs/dynamic-auth/issues/11721)) ([cdb9306](https://github.com/dynamic-labs/dynamic-auth/commit/cdb93061365a20b8f73a1f8bea8352332e282c1e))
+* replace node-fetch v2 with native fetch to fix Node 22 stream failure ([#11732](https://github.com/dynamic-labs/dynamic-auth/issues/11732)) ([b98f801](https://github.com/dynamic-labs/dynamic-auth/commit/b98f801e307b52dbd7e4b241a9a4a2d34d89118e))
+* **zerodev-extension:** derive kernel 7702 vs 4337 per-wallet, not from global dashboard flag ([#11735](https://github.com/dynamic-labs/dynamic-auth/issues/11735)) ([72cf6a7](https://github.com/dynamic-labs/dynamic-auth/commit/72cf6a70a4857a4ea469faa555c485dbad8d0217))
+
+
+* **waas:** require expectedAddresses on migrateFromFireblocks ([#11730](https://github.com/dynamic-labs/dynamic-auth/issues/11730)) ([c94824e](https://github.com/dynamic-labs/dynamic-auth/commit/c94824ebe11e0433a6ffbd2a5a9dd4283aeed31e))
+
+### [4.91.1](https://github.com/dynamic-labs/dynamic-auth/compare/v4.91.0...v4.91.1) (2026-06-24)
+
+
+### Features
+
+* **aleo:** update sendBalance with individual and marketplace logic ([#11709](https://github.com/dynamic-labs/dynamic-auth/issues/11709)) ([f8dfc48](https://github.com/dynamic-labs/dynamic-auth/commit/f8dfc488ae607fbbbcc3432a3ef69f746f0b7df0))
+* **sdk-react-core:** surface shielded address in Midnight deposit view ([#11698](https://github.com/dynamic-labs/dynamic-auth/issues/11698)) ([79c5402](https://github.com/dynamic-labs/dynamic-auth/commit/79c54029b1d8f722cf9f1d8b4c11977898442ac0))
+
+
+### Bug Fixes
+
+* display actual error message for WaaS export failures instead of generic fallback ([#11498](https://github.com/dynamic-labs/dynamic-auth/issues/11498)) ([373c931](https://github.com/dynamic-labs/dynamic-auth/commit/373c931eb96c88e484c557ee8f2934660d028f97))
+* **wallet-book:** guard replaceKey and remove stale override ([#11682](https://github.com/dynamic-labs/dynamic-auth/issues/11682)) ([13947d9](https://github.com/dynamic-labs/dynamic-auth/commit/13947d972ed1f8227712bfc01af9cc2be616a78a))
+
+
+### Performance Improvements
+
+* **e2e:** prebuild Expo web bundle for RN e2e tests ([#11674](https://github.com/dynamic-labs/dynamic-auth/issues/11674)) ([16e002d](https://github.com/dynamic-labs/dynamic-auth/commit/16e002d59b2035e3f2c116879a78418a959da8bc))
+
 ## [4.91.0](https://github.com/dynamic-labs/dynamic-auth/compare/v4.90.0...v4.91.0) (2026-06-23)
 
 

package/package.cjs

@@ -3,6 +3,6 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var version = "4.91.0";
+var version = "4.91.2";
 
 exports.version = version;

package/package.js

@@ -1,4 +1,4 @@
 'use client'
-var version = "4.91.0";
+var version = "4.91.2";
 
 export { version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dynamic-labs/aleo",
-  "version": "4.91.0",
+  "version": "4.91.2",
   "description": "A React SDK for implementing wallet web3 authentication and authorization to your website.",
   "author": "Dynamic Labs, Inc.",
   "license": "MIT",
@@ -18,19 +18,19 @@
   },
   "homepage": "https://www.dynamic.xyz/",
   "dependencies": {
-    "@dynamic-labs/assert-package-version": "4.91.0",
+    "@dynamic-labs/assert-package-version": "4.91.2",
     "@dynamic-labs-sdk/client": "1.12.1",
     "@dynamic-labs/sdk-api-core": "0.0.1046",
     "@provablehq/aleo-wallet-adaptor-core": "0.3.0-alpha.3",
     "@provablehq/aleo-wallet-adaptor-shield": "0.3.0-alpha.3",
     "@provablehq/aleo-wallet-standard": "0.3.0-alpha.3",
     "@provablehq/aleo-types": "0.3.0-alpha.3",
-    "@dynamic-labs/logger": "4.91.0",
-    "@dynamic-labs/types": "4.91.0",
-    "@dynamic-labs/utils": "4.91.0",
-    "@dynamic-labs/waas": "4.91.0",
-    "@dynamic-labs/wallet-book": "4.91.0",
-    "@dynamic-labs/wallet-connector-core": "4.91.0"
+    "@dynamic-labs/logger": "4.91.2",
+    "@dynamic-labs/types": "4.91.2",
+    "@dynamic-labs/utils": "4.91.2",
+    "@dynamic-labs/waas": "4.91.2",
+    "@dynamic-labs/wallet-book": "4.91.2",
+    "@dynamic-labs/wallet-connector-core": "4.91.2"
   },
   "peerDependencies": {}
 }

package/src/connectors/DynamicWaasAleoConnector/DynamicWaasAleoConnector.cjs

@@ -950,6 +950,79 @@ class DynamicWaasAleoConnector extends waas.withDynamicWaas(WaasAleoWalletConnec
             return result.txId;
         });
     }
+    /**
+     * Send from a private record. Automatically selects the smallest owned
+     * record of `tokenAddress` that covers `amount`, then routes by mode:
+     *   - `individual` → `transfer_private` (record → private record)
+     *   - `exchange`   → `transfer_private_to_public` → `transfer_public`
+     *
+     * Called by `AleoWallet.sendBalance`. Requires `activeAccountAddress` to
+     * be set before calling (guaranteed by `getWaasConnectorOrThrow`).
+     */
+    sendBalance(args) {
+        return _tslib.__awaiter(this, void 0, void 0, function* () {
+            var _a, _b;
+            const { mode, to, amount, tokenAddress } = args;
+            const networkId = Number((_b = (_a = this.getSelectedNetwork()) === null || _a === void 0 ? void 0 : _a.chainId) !== null && _b !== void 0 ? _b : 1);
+            const programId = tokenAddress !== null && tokenAddress !== void 0 ? tokenAddress : aleoSendableTokens.ALEO_CREDITS_PROGRAM;
+            const tokens = aleoSendableTokens.getAleoSendableTokensForNetwork(networkId);
+            const token = tokens.find((t) => t.programId === programId);
+            if (!token) {
+                throw new utils.DynamicError(`sendBalance: Aleo token '${programId}' is not supported on this network. Use proveTransaction for custom programs.`);
+            }
+            const value = BigInt(Math.round(parseFloat(amount) * Math.pow(10, token.decimals)));
+            const { records: rawRecords } = yield this.listOwnedRecords();
+            const fitting = rawRecords
+                .filter((r) => aleoSendableTokens.recordMatchesSendableToken(r, token) &&
+                typeof r.record_plaintext === 'string')
+                .map((r) => ({
+                atomic: aleoSendableTokens.extractRecordAtomicAmount(r, token),
+                plaintext: r.record_plaintext,
+            }))
+                .filter((r) => r.atomic >= value)
+                .sort((a, b) => {
+                if (a.atomic < b.atomic)
+                    return -1;
+                if (a.atomic > b.atomic)
+                    return 1;
+                return 0;
+            });
+            if (fitting.length === 0) {
+                throw new utils.DynamicError('No single private record covers this amount. Merge records first via wallet.joinRecords().');
+            }
+            const recordPlaintext = fitting[0].plaintext;
+            if (mode === 'exchange') {
+                if (!this.activeAccountAddress) {
+                    throw new utils.DynamicError('Active account address is required');
+                }
+                return this.submitExchangeTransfer({
+                    from: this.activeAccountAddress,
+                    recordPlaintext,
+                    to,
+                    token,
+                    value,
+                });
+            }
+            const { functionName, inputs, inputTypes } = buildTransferInputs({
+                mode: 'individual',
+                recordPlaintext,
+                to,
+                token,
+                value,
+            });
+            const result = yield this.proveTransaction({
+                broadcast: true,
+                functionName,
+                inputTypes,
+                inputs,
+                programId: token.programId,
+            });
+            if (!result.txId) {
+                throw new utils.DynamicError('Aleo transfer_private did not return a transaction id.');
+            }
+            return result.txId;
+        });
+    }
     /**
      * Two-step Exchange transfer.
      *

package/src/connectors/DynamicWaasAleoConnector/DynamicWaasAleoConnector.d.ts

@@ -5,6 +5,7 @@ import { IDynamicWaasConnector, InternalWalletConnector } from '@dynamic-labs/wa
 import { Logger } from '@dynamic-labs/logger';
 import { WaasAleoWalletConnector, type WaasAleoWalletConnectorProps } from '../WaasAleoWalletConnector';
 import { AleoWallet } from '../../wallet/AleoWallet';
+import { AleoTransferMode } from '../../utils/AleoUiTransaction';
 import { AleoOwnedRecord } from '../../utils/aleoSendableTokens';
 import type { AleoTransaction } from '../../types';
 export type DynamicWaasAleoConnectorProps = WaasAleoWalletConnectorProps & {
@@ -91,6 +92,15 @@ declare const DynamicWaasAleoConnector_base: (abstract new (...args: any[]) => {
         legacyWalletId?: string | undefined;
         password?: string | undefined;
     }): Promise<void>;
+    migrateFromFireblocks({ deviceId, jwt, walletPassword, ncwStorage, expectedAddresses, coinTypes, password, }: {
+        deviceId: string;
+        jwt: string;
+        walletPassword: string;
+        ncwStorage: Record<string, string>;
+        expectedAddresses: Record<string, string>;
+        coinTypes?: Record<string, number> | undefined;
+        password?: string | undefined;
+    }): Promise<import("@dynamic-labs-wallet/browser-wallet-client").MigrateFromFireblocksResponse>;
     exportPrivateKey({ accountAddress, displayContainer, password, }?: {
         accountAddress?: string | undefined;
         displayContainer?: HTMLIFrameElement | undefined;
@@ -455,6 +465,21 @@ export declare class DynamicWaasAleoConnector extends DynamicWaasAleoConnector_b
      * allowed).
      */
     private dispatchShieldBroadcast;
+    /**
+     * Send from a private record. Automatically selects the smallest owned
+     * record of `tokenAddress` that covers `amount`, then routes by mode:
+     *   - `individual` → `transfer_private` (record → private record)
+     *   - `exchange`   → `transfer_private_to_public` → `transfer_public`
+     *
+     * Called by `AleoWallet.sendBalance`. Requires `activeAccountAddress` to
+     * be set before calling (guaranteed by `getWaasConnectorOrThrow`).
+     */
+    sendBalance(args: {
+        mode: AleoTransferMode;
+        to: string;
+        amount: string;
+        tokenAddress?: string;
+    }): Promise<string>;
     /**
      * Two-step Exchange transfer.
      *

package/src/connectors/DynamicWaasAleoConnector/DynamicWaasAleoConnector.js

@@ -7,7 +7,7 @@ import { Logger } from '@dynamic-labs/logger';
 import { WaasAleoWalletConnector } from '../WaasAleoWalletConnector/WaasAleoWalletConnector.js';
 import { AleoWallet } from '../../wallet/AleoWallet/AleoWallet.js';
 import { AleoUiTransaction } from '../../utils/AleoUiTransaction/AleoUiTransaction.js';
-import { ALEO_TOKEN_REGISTRY_PROGRAM } from '../../utils/aleoSendableTokens/aleoSendableTokens.js';
+import { getAleoSendableTokensForNetwork, recordMatchesSendableToken, extractRecordAtomicAmount, ALEO_CREDITS_PROGRAM, ALEO_TOKEN_REGISTRY_PROGRAM } from '../../utils/aleoSendableTokens/aleoSendableTokens.js';
 import { findAleoShieldableToken } from '../../utils/aleoShieldableTokens/aleoShieldableTokens.js';
 
 /**
@@ -946,6 +946,79 @@ class DynamicWaasAleoConnector extends withDynamicWaas(WaasAleoWalletConnector)
             return result.txId;
         });
     }
+    /**
+     * Send from a private record. Automatically selects the smallest owned
+     * record of `tokenAddress` that covers `amount`, then routes by mode:
+     *   - `individual` → `transfer_private` (record → private record)
+     *   - `exchange`   → `transfer_private_to_public` → `transfer_public`
+     *
+     * Called by `AleoWallet.sendBalance`. Requires `activeAccountAddress` to
+     * be set before calling (guaranteed by `getWaasConnectorOrThrow`).
+     */
+    sendBalance(args) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b;
+            const { mode, to, amount, tokenAddress } = args;
+            const networkId = Number((_b = (_a = this.getSelectedNetwork()) === null || _a === void 0 ? void 0 : _a.chainId) !== null && _b !== void 0 ? _b : 1);
+            const programId = tokenAddress !== null && tokenAddress !== void 0 ? tokenAddress : ALEO_CREDITS_PROGRAM;
+            const tokens = getAleoSendableTokensForNetwork(networkId);
+            const token = tokens.find((t) => t.programId === programId);
+            if (!token) {
+                throw new DynamicError(`sendBalance: Aleo token '${programId}' is not supported on this network. Use proveTransaction for custom programs.`);
+            }
+            const value = BigInt(Math.round(parseFloat(amount) * Math.pow(10, token.decimals)));
+            const { records: rawRecords } = yield this.listOwnedRecords();
+            const fitting = rawRecords
+                .filter((r) => recordMatchesSendableToken(r, token) &&
+                typeof r.record_plaintext === 'string')
+                .map((r) => ({
+                atomic: extractRecordAtomicAmount(r, token),
+                plaintext: r.record_plaintext,
+            }))
+                .filter((r) => r.atomic >= value)
+                .sort((a, b) => {
+                if (a.atomic < b.atomic)
+                    return -1;
+                if (a.atomic > b.atomic)
+                    return 1;
+                return 0;
+            });
+            if (fitting.length === 0) {
+                throw new DynamicError('No single private record covers this amount. Merge records first via wallet.joinRecords().');
+            }
+            const recordPlaintext = fitting[0].plaintext;
+            if (mode === 'exchange') {
+                if (!this.activeAccountAddress) {
+                    throw new DynamicError('Active account address is required');
+                }
+                return this.submitExchangeTransfer({
+                    from: this.activeAccountAddress,
+                    recordPlaintext,
+                    to,
+                    token,
+                    value,
+                });
+            }
+            const { functionName, inputs, inputTypes } = buildTransferInputs({
+                mode: 'individual',
+                recordPlaintext,
+                to,
+                token,
+                value,
+            });
+            const result = yield this.proveTransaction({
+                broadcast: true,
+                functionName,
+                inputTypes,
+                inputs,
+                programId: token.programId,
+            });
+            if (!result.txId) {
+                throw new DynamicError('Aleo transfer_private did not return a transaction id.');
+            }
+            return result.txId;
+        });
+    }
     /**
      * Two-step Exchange transfer.
      *

package/src/wallet/AleoWallet/AleoWallet.cjs

@@ -10,31 +10,13 @@ var getAleoExplorerTxUrl = require('../../utils/getAleoExplorerTxUrl/getAleoExpl
 
 class AleoWallet extends walletConnectorCore.Wallet {
     sendBalance(_a) {
-        return _tslib.__awaiter(this, arguments, void 0, function* ({ amount, toAddress, token, }) {
-            var _b, _c, _d;
-            const chainId = (_b = (yield this._connector.getNetwork())) !== null && _b !== void 0 ? _b : '0';
-            const decimals = (_c = token === null || token === void 0 ? void 0 : token.decimals) !== null && _c !== void 0 ? _c : 6;
-            const microcredits = BigInt(Math.round(parseFloat(amount) * Math.pow(10, decimals)));
-            const program = (_d = token === null || token === void 0 ? void 0 : token.address) !== null && _d !== void 0 ? _d : 'credits.aleo';
-            // credits.aleo's transfer_public takes u64; token programs (e.g. stablecoins)
-            //  take u128. Key off the program, NOT merely whether a token was passed —
-            //  passing token { address: 'credits.aleo' } must still produce u64.
-            const isCredits = program === 'credits.aleo';
-            const amountSuffix = isCredits ? 'u64' : 'u128';
-            const transaction = {
-                address: this.address,
-                chainId,
-                fee: 50000,
-                feePrivate: false,
-                transitions: [
-                    {
-                        functionName: 'transfer_public',
-                        inputs: [toAddress, `${microcredits}${amountSuffix}`],
-                        program,
-                    },
-                ],
-            };
-            return this._connector.requestTransaction(transaction);
+        return _tslib.__awaiter(this, arguments, void 0, function* ({ amount, toAddress, token, mode = 'individual', }) {
+            return this.getWaasConnectorOrThrow('sendBalance').sendBalance({
+                amount,
+                mode,
+                to: toAddress,
+                tokenAddress: token === null || token === void 0 ? void 0 : token.address,
+            });
         });
     }
     getBalance() {

package/src/wallet/AleoWallet/AleoWallet.d.ts

@@ -2,14 +2,16 @@ import { Wallet } from '@dynamic-labs/wallet-connector-core';
 import type { AleoWalletConnector } from '../../connectors/AleoWalletConnector';
 import type { DynamicWaasAleoConnector } from '../../connectors/DynamicWaasAleoConnector';
 import type { AleoTransaction } from '../../types';
+import type { AleoTransferMode } from '../../utils/AleoUiTransaction';
 export declare class AleoWallet extends Wallet<AleoWalletConnector> {
-    sendBalance({ amount, toAddress, token, }: {
+    sendBalance({ amount, toAddress, token, mode, }: {
         amount: string;
         toAddress: string;
         token?: {
             address: string;
             decimals?: number;
         };
+        mode?: AleoTransferMode;
     }): Promise<string | undefined>;
     getBalance(): Promise<string>;
     /**

package/src/wallet/AleoWallet/AleoWallet.js

@@ -6,31 +6,13 @@ import { getAleoExplorerTxUrl } from '../../utils/getAleoExplorerTxUrl/getAleoEx
 
 class AleoWallet extends Wallet {
     sendBalance(_a) {
-        return __awaiter(this, arguments, void 0, function* ({ amount, toAddress, token, }) {
-            var _b, _c, _d;
-            const chainId = (_b = (yield this._connector.getNetwork())) !== null && _b !== void 0 ? _b : '0';
-            const decimals = (_c = token === null || token === void 0 ? void 0 : token.decimals) !== null && _c !== void 0 ? _c : 6;
-            const microcredits = BigInt(Math.round(parseFloat(amount) * Math.pow(10, decimals)));
-            const program = (_d = token === null || token === void 0 ? void 0 : token.address) !== null && _d !== void 0 ? _d : 'credits.aleo';
-            // credits.aleo's transfer_public takes u64; token programs (e.g. stablecoins)
-            //  take u128. Key off the program, NOT merely whether a token was passed —
-            //  passing token { address: 'credits.aleo' } must still produce u64.
-            const isCredits = program === 'credits.aleo';
-            const amountSuffix = isCredits ? 'u64' : 'u128';
-            const transaction = {
-                address: this.address,
-                chainId,
-                fee: 50000,
-                feePrivate: false,
-                transitions: [
-                    {
-                        functionName: 'transfer_public',
-                        inputs: [toAddress, `${microcredits}${amountSuffix}`],
-                        program,
-                    },
-                ],
-            };
-            return this._connector.requestTransaction(transaction);
+        return __awaiter(this, arguments, void 0, function* ({ amount, toAddress, token, mode = 'individual', }) {
+            return this.getWaasConnectorOrThrow('sendBalance').sendBalance({
+                amount,
+                mode,
+                to: toAddress,
+                tokenAddress: token === null || token === void 0 ? void 0 : token.address,
+            });
         });
     }
     getBalance() {