@dynamic-labs/stellar 4.64.0 → 4.66.0

package/CHANGELOG.md

@@ -1,4 +1,33 @@
 
+## [4.66.0](https://github.com/dynamic-labs/dynamic-auth/compare/v4.65.0...v4.66.0) (2026-03-02)
+
+
+### Features
+
+* **stellar:** send serialized XDR for transaction signing ([#10548](https://github.com/dynamic-labs/dynamic-auth/issues/10548)) ([3ff6438](https://github.com/dynamic-labs/dynamic-auth/commit/3ff64384e16d5fdb32cd6a3fd144757bf05f4456))
+
+
+### Bug Fixes
+
+* prevent MFA backup codes screen from being dismissed before acknowledgement ([#10530](https://github.com/dynamic-labs/dynamic-auth/issues/10530)) ([67086f0](https://github.com/dynamic-labs/dynamic-auth/commit/67086f0b4a1302d39853eb2eedcb6f5b8bfca889))
+* **react-native:** add retry when setting items to secure store ([#10576](https://github.com/dynamic-labs/dynamic-auth/issues/10576)) ([22ea162](https://github.com/dynamic-labs/dynamic-auth/commit/22ea162420806a4a67394c99f3691754982a7f1f))
+
+## [4.65.0](https://github.com/dynamic-labs/dynamic-auth/compare/v4.64.0...v4.65.0) (2026-02-27)
+
+
+### Features
+
+* add CSP nonce support for style and link tags ([#10514](https://github.com/dynamic-labs/dynamic-auth/issues/10514)) ([62128f5](https://github.com/dynamic-labs/dynamic-auth/commit/62128f5eddfd2a037c2ed6e9320b5009d350c0b5))
+* add setPassword method for initial wallet password setup ([#10534](https://github.com/dynamic-labs/dynamic-auth/issues/10534)) ([87d1e5f](https://github.com/dynamic-labs/dynamic-auth/commit/87d1e5f3c41fe4417320f6971566526e8bf07e99))
+* add step-up authentication and walletsVerify API ([#10482](https://github.com/dynamic-labs/dynamic-auth/issues/10482)) ([e762a63](https://github.com/dynamic-labs/dynamic-auth/commit/e762a634e9782c34926f5947db5446ad95617064))
+
+
+### Bug Fixes
+
+* **react-native:** ensure items are saved to storage successfully ([#10538](https://github.com/dynamic-labs/dynamic-auth/issues/10538)) ([60bfd5e](https://github.com/dynamic-labs/dynamic-auth/commit/60bfd5e4bf1e7265e754c222839662ff615495b2))
+* **sdk-react-core:** add stellar to compareChains to prevent duplicate wallet creation ([#10526](https://github.com/dynamic-labs/dynamic-auth/issues/10526)) ([89f4498](https://github.com/dynamic-labs/dynamic-auth/commit/89f449892a5153dc8032e0e8ea61cf453e0a2b23))
+* show password setup button for all WaaS wallets regardless of passcodeRequired ([#10532](https://github.com/dynamic-labs/dynamic-auth/issues/10532)) ([615cbf2](https://github.com/dynamic-labs/dynamic-auth/commit/615cbf25fcf95cb5b82a118a2d5d37285e8b5b83))
+
 ## [4.64.0](https://github.com/dynamic-labs/dynamic-auth/compare/v4.63.1...v4.64.0) (2026-02-25)
 
 

package/package.cjs

@@ -3,6 +3,6 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var version = "4.64.0";
+var version = "4.66.0";
 
 exports.version = version;

package/package.js

@@ -1,4 +1,4 @@
 'use client'
-var version = "4.64.0";
+var version = "4.66.0";
 
 export { version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dynamic-labs/stellar",
-  "version": "4.64.0",
+  "version": "4.66.0",
   "description": "A React SDK for implementing Stellar wallet web3 authentication and authorization to your website.",
   "author": "Dynamic Labs, Inc.",
   "license": "MIT",
@@ -20,15 +20,15 @@
   "dependencies": {
     "@dynamic-labs/sdk-api-core": "0.0.875",
     "@stellar/stellar-sdk": "14.4.3",
-    "@dynamic-labs/wallet-connector-core": "4.64.0",
-    "@dynamic-labs/assert-package-version": "4.64.0",
+    "@dynamic-labs/wallet-connector-core": "4.66.0",
+    "@dynamic-labs/assert-package-version": "4.66.0",
     "@lobstrco/signer-extension-api": "2.0.0",
     "@stellar/freighter-api": "6.0.1",
-    "@dynamic-labs/logger": "4.64.0",
-    "@dynamic-labs/types": "4.64.0",
-    "@dynamic-labs/utils": "4.64.0",
-    "@dynamic-labs/waas": "4.64.0",
-    "@dynamic-labs/wallet-book": "4.64.0",
+    "@dynamic-labs/logger": "4.66.0",
+    "@dynamic-labs/types": "4.66.0",
+    "@dynamic-labs/utils": "4.66.0",
+    "@dynamic-labs/waas": "4.66.0",
+    "@dynamic-labs/wallet-book": "4.66.0",
     "eventemitter3": "5.0.1"
   },
   "peerDependencies": {}

package/src/connectors/DynamicWaasStellarConnector/DynamicWaasStellarConnector.cjs

@@ -221,10 +221,24 @@ class DynamicWaasStellarConnector extends waas.withDynamicWaas(StellarWalletConn
             this.activeAccountAddress = undefined;
         });
     }
+    /**
+     * Converts network passphrase to numeric chainId for policy validation
+     * ChainIds: '1' = pubnet (mainnet), '2' = testnet, '3' = futurenet
+     */
+    getChainIdFromNetworkPassphrase(networkPassphrase) {
+        // Check futurenet first since its passphrase also contains 'Test'
+        if (networkPassphrase.includes('Future')) {
+            return '3';
+        }
+        if (networkPassphrase.includes('Test')) {
+            return '2';
+        }
+        return '1';
+    }
     /**
      * Signs a Stellar transaction XDR.
      * @param transactionXdr - The XDR-encoded transaction envelope to sign
-     * @returns The signature as a base64 string
+     * @returns The signed transaction XDR
      */
     signTransaction(transactionXdr) {
         return _tslib.__awaiter(this, void 0, void 0, function* () {
@@ -240,19 +254,22 @@ class DynamicWaasStellarConnector extends waas.withDynamicWaas(StellarWalletConn
             const password = yield this.getPasswordIfNeeded({
                 accountAddress: this.activeAccountAddress,
             });
-            // Get the transaction hash that needs to be signed
+            // Get chainId from network passphrase for policy validation
             const networkPassphrase = yield this.getNetworkPassphrase();
-            const transaction = stellarSdk.TransactionBuilder.fromXDR(transactionXdr, networkPassphrase);
-            const transactionHash = transaction.hash().toString('hex');
-            // Sign the transaction hash using MPC
+            const chainId = this.getChainIdFromNetworkPassphrase(networkPassphrase);
+            // Sign the transaction XDR using MPC
+            // The SDK will compute the hash internally and build the context for policy validation
             const signature = yield walletClient.signTransaction({
                 authToken: (_b = this.getAuthToken) === null || _b === void 0 ? void 0 : _b.call(this),
+                chainId,
                 mfaToken,
                 password,
                 senderAddress: this.activeAccountAddress,
                 signedSessionId,
-                transaction: transactionHash,
+                transaction: transactionXdr,
             });
+            // Parse the XDR to add the signature
+            const transaction = stellarSdk.TransactionBuilder.fromXDR(transactionXdr, networkPassphrase);
             // The signature from WaaS is base64 encoded
             // addSignature expects both public key and signature as strings
             transaction.addSignature(this.activeAccountAddress, signature);

package/src/connectors/DynamicWaasStellarConnector/DynamicWaasStellarConnector.d.ts

@@ -58,7 +58,7 @@ declare const DynamicWaasStellarConnector_base: (abstract new (...args: any[]) =
     createWalletAccount({ thresholdSignatureScheme, password, bitcoinConfig, }?: {
         thresholdSignatureScheme?: string | undefined;
         password?: string | undefined;
-        bitcoinConfig?: import("@dynamic-labs-wallet/core").BitcoinConfig | undefined;
+        bitcoinConfig?: import("@dynamic-labs-wallet/browser-wallet-client").BitcoinConfig | undefined;
     } | undefined): Promise<{
         chainName: string;
         accountAddress: string;
@@ -120,6 +120,10 @@ declare const DynamicWaasStellarConnector_base: (abstract new (...args: any[]) =
         existingPassword?: string | undefined;
         newPassword: string;
     }): Promise<void>;
+    setPassword({ accountAddress, newPassword, }: {
+        accountAddress: string;
+        newPassword: string;
+    }): Promise<void>;
     signRawMessage({ accountAddress, message, password, }: {
         accountAddress: string;
         message: string;
@@ -128,10 +132,10 @@ declare const DynamicWaasStellarConnector_base: (abstract new (...args: any[]) =
     unlockWallet({ accountAddress, password, }: {
         accountAddress: string;
         password?: string | undefined;
-    }): Promise<import("@dynamic-labs-wallet/core").GetWalletResponse>;
+    }): Promise<import("@dynamic-labs-wallet/browser-wallet-client").GetWalletResponse>;
     getWalletRecoveryState({ accountAddress, }: {
         accountAddress: string;
-    }): Promise<import("@dynamic-labs-wallet/core").WalletRecoveryState>;
+    }): Promise<import("@dynamic-labs-wallet/browser-wallet-client").WalletRecoveryState>;
     endSession(): Promise<void>;
     getActiveAccountAddress(): Promise<string | undefined>;
     getConnectedAccounts(): Promise<string[]>;
@@ -252,10 +256,15 @@ export declare class DynamicWaasStellarConnector extends DynamicWaasStellarConne
      * Ends the current session and clears the active account address
      */
     endSession(): Promise<void>;
+    /**
+     * Converts network passphrase to numeric chainId for policy validation
+     * ChainIds: '1' = pubnet (mainnet), '2' = testnet, '3' = futurenet
+     */
+    private getChainIdFromNetworkPassphrase;
     /**
      * Signs a Stellar transaction XDR.
      * @param transactionXdr - The XDR-encoded transaction envelope to sign
-     * @returns The signature as a base64 string
+     * @returns The signed transaction XDR
      */
     signTransaction(transactionXdr: string): Promise<string>;
     /**

package/src/connectors/DynamicWaasStellarConnector/DynamicWaasStellarConnector.js

@@ -217,10 +217,24 @@ class DynamicWaasStellarConnector extends withDynamicWaas(StellarWalletConnector
             this.activeAccountAddress = undefined;
         });
     }
+    /**
+     * Converts network passphrase to numeric chainId for policy validation
+     * ChainIds: '1' = pubnet (mainnet), '2' = testnet, '3' = futurenet
+     */
+    getChainIdFromNetworkPassphrase(networkPassphrase) {
+        // Check futurenet first since its passphrase also contains 'Test'
+        if (networkPassphrase.includes('Future')) {
+            return '3';
+        }
+        if (networkPassphrase.includes('Test')) {
+            return '2';
+        }
+        return '1';
+    }
     /**
      * Signs a Stellar transaction XDR.
      * @param transactionXdr - The XDR-encoded transaction envelope to sign
-     * @returns The signature as a base64 string
+     * @returns The signed transaction XDR
      */
     signTransaction(transactionXdr) {
         return __awaiter(this, void 0, void 0, function* () {
@@ -236,19 +250,22 @@ class DynamicWaasStellarConnector extends withDynamicWaas(StellarWalletConnector
             const password = yield this.getPasswordIfNeeded({
                 accountAddress: this.activeAccountAddress,
             });
-            // Get the transaction hash that needs to be signed
+            // Get chainId from network passphrase for policy validation
             const networkPassphrase = yield this.getNetworkPassphrase();
-            const transaction = TransactionBuilder.fromXDR(transactionXdr, networkPassphrase);
-            const transactionHash = transaction.hash().toString('hex');
-            // Sign the transaction hash using MPC
+            const chainId = this.getChainIdFromNetworkPassphrase(networkPassphrase);
+            // Sign the transaction XDR using MPC
+            // The SDK will compute the hash internally and build the context for policy validation
             const signature = yield walletClient.signTransaction({
                 authToken: (_b = this.getAuthToken) === null || _b === void 0 ? void 0 : _b.call(this),
+                chainId,
                 mfaToken,
                 password,
                 senderAddress: this.activeAccountAddress,
                 signedSessionId,
-                transaction: transactionHash,
+                transaction: transactionXdr,
             });
+            // Parse the XDR to add the signature
+            const transaction = TransactionBuilder.fromXDR(transactionXdr, networkPassphrase);
             // The signature from WaaS is base64 encoded
             // addSignature expects both public key and signature as strings
             transaction.addSignature(this.activeAccountAddress, signature);