@dynamic-labs/aleo 5.3.2 → 5.4.1

package/CHANGELOG.md

@@ -1,4 +1,38 @@
 
+### [5.4.1](https://github.com/dynamic-labs/dynamic-auth/compare/v5.4.0...v5.4.1) (2026-08-26)
+
+
+### Bug Fixes
+
+* **webview-controller:** resolve which keychain key a session belongs to ([#12246](https://github.com/dynamic-labs/dynamic-auth/issues/12246)) ([3d110db](https://github.com/dynamic-labs/dynamic-auth/commit/3d110db831c6e9d82d07d86841f5c7733924b17e))
+* **bitcoin:** forward the password through the BTC importPrivateKey override ([#12278](https://github.com/dynamic-labs/dynamic-auth/issues/12278)) ([21e1df3](https://github.com/dynamic-labs/dynamic-auth/commit/21e1df3e33e96e2efdb15ffa0fd29a441056202e))
+* **react-native-extension:** recover 4.x expo-secure-store sessions on keychain miss ([#12254](https://github.com/dynamic-labs/dynamic-auth/issues/12254)) ([217e991](https://github.com/dynamic-labs/dynamic-auth/commit/217e991838f3073c12e2d2fab7a2e12830faad9e)), closes [#12092](https://github.com/dynamic-labs/dynamic-auth/issues/12092) [#12092](https://github.com/dynamic-labs/dynamic-auth/issues/12092) [#12092](https://github.com/dynamic-labs/dynamic-auth/issues/12092) [#12092](https://github.com/dynamic-labs/dynamic-auth/issues/12092) [#12242](https://github.com/dynamic-labs/dynamic-auth/issues/12242) [#12242](https://github.com/dynamic-labs/dynamic-auth/issues/12242)
+* **transaction-card:** use walletConnector prop for network/fee instead of primaryWallet ([#12063](https://github.com/dynamic-labs/dynamic-auth/issues/12063)) ([81314d2](https://github.com/dynamic-labs/dynamic-auth/commit/81314d25fba4b20ab89631bc2d9ceeb9e2b6b2ac))
+* **waas-svm:** instrument sponsorship retry attempts ([#12281](https://github.com/dynamic-labs/dynamic-auth/issues/12281)) ([7273a4b](https://github.com/dynamic-labs/dynamic-auth/commit/7273a4bc456cad512c0e9fbcd2abd66532a2f7df))
+* **webview-controller:** recover 4.x secure-storage sessions and surface init failures ([#12242](https://github.com/dynamic-labs/dynamic-auth/issues/12242)) ([b51605c](https://github.com/dynamic-labs/dynamic-auth/commit/b51605cc9bdbb5d695173192c502a58d899bbbdd)), closes [#12094](https://github.com/dynamic-labs/dynamic-auth/issues/12094) [#12095](https://github.com/dynamic-labs/dynamic-auth/issues/12095) [#12098](https://github.com/dynamic-labs/dynamic-auth/issues/12098) [dynamic-labs/flutter-sdk#256](https://github.com/dynamic-labs/flutter-sdk/issues/256)
+
+## [5.4.0](https://github.com/dynamic-labs/dynamic-auth/compare/v5.3.2...v5.4.0) (2026-08-25)
+
+
+### Features
+
+* **aleo:** wire up signMessage on the WaaS Aleo connector ([#12235](https://github.com/dynamic-labs/dynamic-auth/issues/12235)) ([e56cbf5](https://github.com/dynamic-labs/dynamic-auth/commit/e56cbf5546bdcc21ce916dece43ae36dcea9b808))
+* **waas:** thread isRawScalarImport through importPrivateKey for ed25519 chains ([#12220](https://github.com/dynamic-labs/dynamic-auth/issues/12220)) ([ced9efa](https://github.com/dynamic-labs/dynamic-auth/commit/ced9efac5fa5a4a1280383419f56fe22733722cd))
+* **webview:** add policies message contract and controller ([#12248](https://github.com/dynamic-labs/dynamic-auth/issues/12248)) ([8557c1e](https://github.com/dynamic-labs/dynamic-auth/commit/8557c1ed3861e12f1f06b2bb610184813b577daa))
+
+
+### Bug Fixes
+
+* **bitcoin:** pass the wallet's address type when signing ([#12265](https://github.com/dynamic-labs/dynamic-auth/issues/12265)) ([b8a8eab](https://github.com/dynamic-labs/dynamic-auth/commit/b8a8eab7e4cc294cc307fb10ea6814e76111a274))
+* remediate high-severity tar vulnerability and prune a dead override ([#12268](https://github.com/dynamic-labs/dynamic-auth/issues/12268)) ([6b1b343](https://github.com/dynamic-labs/dynamic-auth/commit/6b1b343e7947e8da30012446677e342ae9bfe14a))
+* **waas-svm:** fix retry-classification and environmentId gaps in [#12240](https://github.com/dynamic-labs/dynamic-auth/issues/12240) ([#12247](https://github.com/dynamic-labs/dynamic-auth/issues/12247)) ([e79cecc](https://github.com/dynamic-labs/dynamic-auth/commit/e79ceccd424c48c3a7f45fdd6ea288c269ac0171))
+* **wallet-connect:** reopen WalletConnect IndexedDB when the browser closes the connection ([#12262](https://github.com/dynamic-labs/dynamic-auth/issues/12262)) ([1a20dde](https://github.com/dynamic-labs/dynamic-auth/commit/1a20ddeaeec590ae3390c9e47ef3c14738379b83))
+
+
+### Performance Improvements
+
+* **ethereum-gasless-core:** parallel 7702 auth signing and long-poll sponsored-tx status ([#12225](https://github.com/dynamic-labs/dynamic-auth/issues/12225)) ([53ca916](https://github.com/dynamic-labs/dynamic-auth/commit/53ca91668f8dd839c52d55a0e5d7bb5257f7f415))
+
 ### [5.3.2](https://github.com/dynamic-labs/dynamic-auth/compare/v5.3.1...v5.3.2) (2026-08-19)
 
 

package/package.cjs

@@ -3,6 +3,6 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var version = "5.3.2";
+var version = "5.4.1";
 
 exports.version = version;

package/package.js

@@ -1,4 +1,4 @@
 'use client'
-var version = "5.3.2";
+var version = "5.4.1";
 
 export { version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dynamic-labs/aleo",
-  "version": "5.3.2",
+  "version": "5.4.1",
   "description": "A React SDK for implementing wallet web3 authentication and authorization to your website.",
   "author": "Dynamic Labs, Inc.",
   "license": "MIT",
@@ -18,19 +18,19 @@
   },
   "homepage": "https://www.dynamic.xyz/",
   "dependencies": {
-    "@dynamic-labs/assert-package-version": "5.3.2",
-    "@dynamic-labs-sdk/client": "1.27.1",
+    "@dynamic-labs/assert-package-version": "5.4.1",
+    "@dynamic-labs-sdk/client": "1.29.0",
     "@dynamic-labs/sdk-api-core": "0.12.0",
     "@provablehq/aleo-wallet-adaptor-core": "0.3.0-alpha.3",
     "@provablehq/aleo-wallet-adaptor-shield": "0.3.0-alpha.3",
     "@provablehq/aleo-wallet-standard": "0.3.0-alpha.3",
     "@provablehq/aleo-types": "0.3.0-alpha.3",
-    "@dynamic-labs/logger": "5.3.2",
-    "@dynamic-labs/types": "5.3.2",
-    "@dynamic-labs/utils": "5.3.2",
-    "@dynamic-labs/waas": "5.3.2",
-    "@dynamic-labs/wallet-book": "5.3.2",
-    "@dynamic-labs/wallet-connector-core": "5.3.2"
+    "@dynamic-labs/logger": "5.4.1",
+    "@dynamic-labs/types": "5.4.1",
+    "@dynamic-labs/utils": "5.4.1",
+    "@dynamic-labs/waas": "5.4.1",
+    "@dynamic-labs/wallet-book": "5.4.1",
+    "@dynamic-labs/wallet-connector-core": "5.4.1"
   },
   "peerDependencies": {}
 }

package/src/connectors/DynamicWaasAleoConnector/DynamicWaasAleoConnector.cjs

@@ -4,6 +4,7 @@
 Object.defineProperty(exports, '__esModule', { value: true });
 
 var _tslib = require('../../../_virtual/_tslib.cjs');
+var sdkApiCore = require('@dynamic-labs/sdk-api-core');
 var utils = require('@dynamic-labs/utils');
 var waas = require('@dynamic-labs/waas');
 var walletConnectorCore = require('@dynamic-labs/wallet-connector-core');
@@ -227,10 +228,10 @@ const hasUsableRecordShape = (r) => {
 };
 /**
  * Dynamic WaaS connector for Aleo.
- * Phase 1: supports wallet creation (MPC keygen → aleo1... address) and
- * retrieval of the active WaaS wallet. signMessage and signTransaction
- * throw NotSupported until Sodot adds `EdBls12377.sign(bytes)` and we wire up
- * the Aleo `signRequest` ceremony.
+ * Supports wallet creation (MPC keygen → aleo1... address), message signing
+ * (Aleo Schnorr signatures via Sodot's EdBls12377.signBytes), and retrieval
+ * of the active WaaS wallet. signTransaction throws NotSupported until we
+ * wire up the Aleo `signRequest` ceremony.
  */
 class DynamicWaasAleoConnector extends waas.withDynamicWaas(WaasAleoWalletConnector.WaasAleoWalletConnector) {
     constructor(props) {
@@ -335,11 +336,42 @@ class DynamicWaasAleoConnector extends waas.withDynamicWaas(WaasAleoWalletConnec
             return this.activeAccountAddress ? [this.activeAccountAddress] : [];
         });
     }
-    // Phase 1: signMessage not supported (Sodot EdBls12377 lacks sign(bytes))
-    // eslint-disable-next-line @typescript-eslint/no-unused-vars
     signMessage(message) {
         return _tslib.__awaiter(this, void 0, void 0, function* () {
-            throw new utils.DynamicError('Aleo signMessage is not supported yet — pending EdBls12377.sign(bytes) from Sodot', 'aleo_signmessage_is_not_supported_yet');
+            return this.walletUiUtils.signMessage({
+                handler: () => _tslib.__awaiter(this, void 0, void 0, function* () { return this.internalSignMessage(message); }),
+                message,
+                walletConnector: this,
+            });
+        });
+    }
+    internalSignMessage(message) {
+        return _tslib.__awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c;
+            const walletClient = yield this.getWaasWalletClient();
+            this.ensureActiveAccountFromVerifiedCredentials();
+            if (!this.activeAccountAddress) {
+                throw new utils.DynamicError('Active account address is required', 'active_account_address_is_required');
+            }
+            const signedSessionId = yield this.requireSignedSessionId();
+            const mfaToken = yield ((_a = this.getMfaToken) === null || _a === void 0 ? void 0 : _a.call(this, {
+                mfaAction: sdkApiCore.MFAAction.WalletWaasSign,
+            }));
+            const elevatedAccessToken = yield ((_b = this.getElevatedAccessToken) === null || _b === void 0 ? void 0 : _b.call(this, {
+                scope: sdkApiCore.TokenScope.Walletsign,
+            }));
+            const password = yield this.getPasswordIfNeeded({
+                accountAddress: this.activeAccountAddress,
+            });
+            return walletClient.signMessage({
+                accountAddress: this.activeAccountAddress,
+                authToken: (_c = this.getAuthToken) === null || _c === void 0 ? void 0 : _c.call(this),
+                elevatedAccessToken,
+                message,
+                mfaToken,
+                password,
+                signedSessionId,
+            });
         });
     }
     /* eslint-disable @typescript-eslint/no-unused-vars */

package/src/connectors/DynamicWaasAleoConnector/DynamicWaasAleoConnector.d.ts

@@ -1,5 +1,5 @@
 import type { LogoutReason } from '@dynamic-labs-sdk/client';
-import { JwtVerifiedCredential, SignMessageContext } from '@dynamic-labs/sdk-api-core';
+import { JwtVerifiedCredential, MFAAction, SignMessageContext, TokenScope } from '@dynamic-labs/sdk-api-core';
 import { IUITransaction, WalletUiUtils } from '@dynamic-labs/types';
 import { IDynamicWaasConnector, InternalWalletConnector } from '@dynamic-labs/wallet-connector-core';
 import { Logger } from '@dynamic-labs/logger';
@@ -26,12 +26,12 @@ declare const DynamicWaasAleoConnector_base: (abstract new (...args: any[]) => {
     getSignedSessionId?: (() => Promise<string>) | undefined;
     getSessionPublicKey?: (() => Promise<string | undefined>) | undefined;
     getMfaToken?: ((props?: {
-        mfaAction?: import("@dynamic-labs-sdk/client").MFAAction | undefined;
+        mfaAction?: MFAAction | undefined;
     } | undefined) => Promise<string | undefined>) | undefined;
     getWalletPassword?: import("@dynamic-labs/wallet-connector-core").GetWalletPasswordFn | undefined;
     getAuthToken?: (() => string) | undefined;
     getElevatedAccessToken?: ((props: {
-        scope: import("@dynamic-labs-sdk/client").TokenScope;
+        scope: TokenScope;
     }) => Promise<string | undefined>) | undefined;
     onUnauthorized?: (() => void | Promise<void>) | undefined;
     environmentId?: string | undefined;
@@ -49,10 +49,10 @@ declare const DynamicWaasAleoConnector_base: (abstract new (...args: any[]) => {
     setOnUnauthorizedFunction(onUnauthorized: () => void | Promise<void>): void;
     setWaasAuthMode(authMode: "cookie" | "header"): void;
     setGetMfaTokenFunction(getMfaToken: (props?: {
-        mfaAction?: import("@dynamic-labs-sdk/client").MFAAction | undefined;
+        mfaAction?: MFAAction | undefined;
     } | undefined) => Promise<string | undefined>): void;
     setGetElevatedAccessTokenFunction(getElevatedAccessToken: (params: {
-        scope: import("@dynamic-labs-sdk/client").TokenScope;
+        scope: TokenScope;
     }) => Promise<string | undefined>): void;
     setGetWalletPasswordFunction(getWalletPassword: import("@dynamic-labs/wallet-connector-core").GetWalletPasswordFn): void;
     getPasswordIfNeeded({ accountAddress, }: {
@@ -79,12 +79,7 @@ declare const DynamicWaasAleoConnector_base: (abstract new (...args: any[]) => {
     getWaasWalletClient(traceContext?: import("dist/packages/waas/utils/instrumentation").TraceContext | undefined, { forceRebuild }?: {
         forceRebuild?: boolean | undefined;
     } | undefined): Promise<import("@dynamic-labs-wallet/browser-wallet-client").DynamicWalletClient>;
-    createWalletAccount({ thresholdSignatureScheme, password, bitcoinConfig, businessAccountId, }?: {
-        thresholdSignatureScheme?: string | undefined;
-        password?: string | undefined;
-        bitcoinConfig?: import("@dynamic-labs-wallet/browser-wallet-client").BitcoinConfig | undefined;
-        businessAccountId?: string | undefined;
-    } | undefined): Promise<{
+    createWalletAccount({ thresholdSignatureScheme, password, bitcoinConfig, businessAccountId, }?: import("@dynamic-labs/wallet-connector-core").CreateWalletAccountParams | undefined): Promise<{
         chainName: string;
         accountAddress: string;
         publicKeyHex: string;
@@ -104,14 +99,7 @@ declare const DynamicWaasAleoConnector_base: (abstract new (...args: any[]) => {
     }): Promise<{
         shareSetId: string;
     }>;
-    importPrivateKey({ privateKey, thresholdSignatureScheme, publicAddressCheck, addressType, legacyWalletId, password, }: {
-        privateKey: string;
-        thresholdSignatureScheme?: string | undefined;
-        publicAddressCheck?: string | undefined;
-        addressType?: string | undefined;
-        legacyWalletId?: string | undefined;
-        password?: string | undefined;
-    }): Promise<void>;
+    importPrivateKey({ privateKey, thresholdSignatureScheme, publicAddressCheck, addressType, legacyWalletId, password, isRawScalarImport, }: import("@dynamic-labs/wallet-connector-core").ImportPrivateKeyParams): Promise<void>;
     migrateFromFireblocks({ deviceId, jwt, walletPassword, ncwStorage, expectedAddresses, coinTypes, password, }: {
         deviceId: string;
         jwt: string;
@@ -129,10 +117,7 @@ declare const DynamicWaasAleoConnector_base: (abstract new (...args: any[]) => {
     getExportHandler(): {
         clear: () => void;
     };
-    exportClientKeyshares({ accountAddress, password, }: {
-        accountAddress: string;
-        password?: string | undefined;
-    }): Promise<void>;
+    exportClientKeyshares({ accountAddress, password, }: import("@dynamic-labs/wallet-connector-core").ExportClientKeysharesParams): Promise<void>;
     runBackupLifecycle({ provider, accountAddress, password, performBackup, }: {
         provider: string;
         accountAddress: string;
@@ -148,11 +133,7 @@ declare const DynamicWaasAleoConnector_base: (abstract new (...args: any[]) => {
             };
         }) => Promise<void>;
     }): Promise<void>;
-    backupKeySharesToGoogleDrive({ accountAddress, password, googleDriveAccessToken, }: {
-        accountAddress: string;
-        password?: string | undefined;
-        googleDriveAccessToken?: string | undefined;
-    }): Promise<void>;
+    backupKeySharesToGoogleDrive({ accountAddress, password, googleDriveAccessToken, }: import("@dynamic-labs/wallet-connector-core").BackupKeySharesToGoogleDriveParams): Promise<void>;
     exportClientKeysharesFromGoogleDrive({ accountAddress, password, }: {
         accountAddress: string;
         password?: string | undefined;
@@ -166,24 +147,13 @@ declare const DynamicWaasAleoConnector_base: (abstract new (...args: any[]) => {
     }): Promise<void>;
     hideICloudSignIn(): Promise<void>;
     isICloudAuthenticated(): Promise<boolean>;
-    refreshWalletAccountShares({ accountAddress, password, }: {
-        accountAddress: string;
-        password?: string | undefined;
-    }): Promise<void>;
-    reshareWalletAccountShares({ accountAddress, thresholdSignatureScheme, password, }: {
-        accountAddress: string;
-        thresholdSignatureScheme: string;
-        password?: string | undefined;
-    }): Promise<void>;
+    refreshWalletAccountShares({ accountAddress, password, }: import("@dynamic-labs/wallet-connector-core").RefreshWalletAccountSharesParams): Promise<void>;
+    reshareWalletAccountShares({ accountAddress, thresholdSignatureScheme, password, }: import("@dynamic-labs/wallet-connector-core").ReshareWalletAccountSharesParams): Promise<void>;
     revokeDelegation({ accountAddress, password, }: {
         accountAddress: string;
         password?: string | undefined;
     }): Promise<void>;
-    updatePassword({ accountAddress, existingPassword, newPassword, }: {
-        accountAddress: string;
-        existingPassword?: string | undefined;
-        newPassword: string;
-    }): Promise<void>;
+    updatePassword({ accountAddress, existingPassword, newPassword, }: import("@dynamic-labs/wallet-connector-core").UpdatePasswordParams): Promise<void>;
     setPassword({ accountAddress, newPassword, }: {
         accountAddress: string;
         newPassword: string;
@@ -240,10 +210,10 @@ declare const DynamicWaasAleoConnector_base: (abstract new (...args: any[]) => {
 }) & typeof WaasAleoWalletConnector;
 /**
  * Dynamic WaaS connector for Aleo.
- * Phase 1: supports wallet creation (MPC keygen → aleo1... address) and
- * retrieval of the active WaaS wallet. signMessage and signTransaction
- * throw NotSupported until Sodot adds `EdBls12377.sign(bytes)` and we wire up
- * the Aleo `signRequest` ceremony.
+ * Supports wallet creation (MPC keygen → aleo1... address), message signing
+ * (Aleo Schnorr signatures via Sodot's EdBls12377.signBytes), and retrieval
+ * of the active WaaS wallet. signTransaction throws NotSupported until we
+ * wire up the Aleo `signRequest` ceremony.
  */
 export declare class DynamicWaasAleoConnector extends DynamicWaasAleoConnector_base implements IDynamicWaasConnector {
     ChainWallet: typeof AleoWallet;
@@ -271,6 +241,7 @@ export declare class DynamicWaasAleoConnector extends DynamicWaasAleoConnector_b
     connect(): Promise<void>;
     getConnectedAccounts(): Promise<string[]>;
     signMessage(message: string): Promise<string>;
+    internalSignMessage(message: string): Promise<string>;
     signMessageWithContext({ message, context, }: {
         message: string | {
             raw: string;

package/src/connectors/DynamicWaasAleoConnector/DynamicWaasAleoConnector.js

@@ -1,5 +1,6 @@
 'use client'
 import { __awaiter } from '../../../_virtual/_tslib.js';
+import { MFAAction, TokenScope } from '@dynamic-labs/sdk-api-core';
 import { DynamicError } from '@dynamic-labs/utils';
 import { withDynamicWaas } from '@dynamic-labs/waas';
 import { isSameAddress } from '@dynamic-labs/wallet-connector-core';
@@ -223,10 +224,10 @@ const hasUsableRecordShape = (r) => {
 };
 /**
  * Dynamic WaaS connector for Aleo.
- * Phase 1: supports wallet creation (MPC keygen → aleo1... address) and
- * retrieval of the active WaaS wallet. signMessage and signTransaction
- * throw NotSupported until Sodot adds `EdBls12377.sign(bytes)` and we wire up
- * the Aleo `signRequest` ceremony.
+ * Supports wallet creation (MPC keygen → aleo1... address), message signing
+ * (Aleo Schnorr signatures via Sodot's EdBls12377.signBytes), and retrieval
+ * of the active WaaS wallet. signTransaction throws NotSupported until we
+ * wire up the Aleo `signRequest` ceremony.
  */
 class DynamicWaasAleoConnector extends withDynamicWaas(WaasAleoWalletConnector) {
     constructor(props) {
@@ -331,11 +332,42 @@ class DynamicWaasAleoConnector extends withDynamicWaas(WaasAleoWalletConnector)
             return this.activeAccountAddress ? [this.activeAccountAddress] : [];
         });
     }
-    // Phase 1: signMessage not supported (Sodot EdBls12377 lacks sign(bytes))
-    // eslint-disable-next-line @typescript-eslint/no-unused-vars
     signMessage(message) {
         return __awaiter(this, void 0, void 0, function* () {
-            throw new DynamicError('Aleo signMessage is not supported yet — pending EdBls12377.sign(bytes) from Sodot', 'aleo_signmessage_is_not_supported_yet');
+            return this.walletUiUtils.signMessage({
+                handler: () => __awaiter(this, void 0, void 0, function* () { return this.internalSignMessage(message); }),
+                message,
+                walletConnector: this,
+            });
+        });
+    }
+    internalSignMessage(message) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b, _c;
+            const walletClient = yield this.getWaasWalletClient();
+            this.ensureActiveAccountFromVerifiedCredentials();
+            if (!this.activeAccountAddress) {
+                throw new DynamicError('Active account address is required', 'active_account_address_is_required');
+            }
+            const signedSessionId = yield this.requireSignedSessionId();
+            const mfaToken = yield ((_a = this.getMfaToken) === null || _a === void 0 ? void 0 : _a.call(this, {
+                mfaAction: MFAAction.WalletWaasSign,
+            }));
+            const elevatedAccessToken = yield ((_b = this.getElevatedAccessToken) === null || _b === void 0 ? void 0 : _b.call(this, {
+                scope: TokenScope.Walletsign,
+            }));
+            const password = yield this.getPasswordIfNeeded({
+                accountAddress: this.activeAccountAddress,
+            });
+            return walletClient.signMessage({
+                accountAddress: this.activeAccountAddress,
+                authToken: (_c = this.getAuthToken) === null || _c === void 0 ? void 0 : _c.call(this),
+                elevatedAccessToken,
+                message,
+                mfaToken,
+                password,
+                signedSessionId,
+            });
         });
     }
     /* eslint-disable @typescript-eslint/no-unused-vars */