@dynamic-labs/waas 4.77.1 → 4.77.3

package/CHANGELOG.md

@@ -1,4 +1,26 @@
 
+### [4.77.3](https://github.com/dynamic-labs/dynamic-auth/compare/v4.77.2...v4.77.3) (2026-04-18)
+
+
+### Bug Fixes
+
+* **ton:** convert sendBalance amount to smallest units ([#10941](https://github.com/dynamic-labs/dynamic-auth/issues/10941)) ([5eac6be](https://github.com/dynamic-labs/dynamic-auth/commit/5eac6be1c3444525893e6e5e95ce65f6c9f9dea3))
+
+### [4.77.2](https://github.com/dynamic-labs/dynamic-auth/compare/v4.77.1...v4.77.2) (2026-04-16)
+
+
+### Bug Fixes
+
+*  add support for next 16 and dual-module-import breaking. ([#10926](https://github.com/dynamic-labs/dynamic-auth/issues/10926)) ([312c7b8](https://github.com/dynamic-labs/dynamic-auth/commit/312c7b83f7a39109c9a9950a6d45ea9a815dd800))
+* **DYNT-399:** phantom btc missing public address ([#10914](https://github.com/dynamic-labs/dynamic-auth/issues/10914)) ([632ead1](https://github.com/dynamic-labs/dynamic-auth/commit/632ead1e3b500ff2e78915459d6764e4c4a49168))
+* **playwright:** fix tests flakiness [DYNT-555] ([#10923](https://github.com/dynamic-labs/dynamic-auth/issues/10923)) ([6556884](https://github.com/dynamic-labs/dynamic-auth/commit/65568849580bb8549eb11a1c44fd22fbc56f624c))
+* **playwright:** stabilize flaky tests (domain-access-control + embedded-wallet) DYNT-495 ([#10881](https://github.com/dynamic-labs/dynamic-auth/issues/10881)) ([4925e19](https://github.com/dynamic-labs/dynamic-auth/commit/4925e1903b5f6a37a550cb34ab900abff1cc9f23))
+* remediate high-severity dependency vulnerabilities ([#10919](https://github.com/dynamic-labs/dynamic-auth/issues/10919)) ([7d7cfdd](https://github.com/dynamic-labs/dynamic-auth/commit/7d7cfdd162d9f7a3c8c2501d47b33ae8f4e4d26d))
+* remediate high-severity dependency vulnerabilities ([#10925](https://github.com/dynamic-labs/dynamic-auth/issues/10925)) ([4039d25](https://github.com/dynamic-labs/dynamic-auth/commit/4039d25afea78c49999443caba65d42d4fc96c95))
+* upgrade axios to 1.15.0 to fix CVE-2026-40175 ([#10918](https://github.com/dynamic-labs/dynamic-auth/issues/10918)) ([74751dc](https://github.com/dynamic-labs/dynamic-auth/commit/74751dcf4e7a918e39de2fb667ee6ead4a7a4602))
+* **waas:** skip password prompt when wallet is not password-encrypted ([#10916](https://github.com/dynamic-labs/dynamic-auth/issues/10916)) ([e3dd403](https://github.com/dynamic-labs/dynamic-auth/commit/e3dd4035c447106d40baa5e7e12fa35fafa0808f))
+* **walletconnect:** improve error logging and handle empty network configs ([#10897](https://github.com/dynamic-labs/dynamic-auth/issues/10897)) ([bea7a9f](https://github.com/dynamic-labs/dynamic-auth/commit/bea7a9fd4628e4fbca554f8eed4a0dc097fab83b))
+
 ### [4.77.1](https://github.com/dynamic-labs/dynamic-auth/compare/v4.77.0...v4.77.1) (2026-04-10)
 
 ### Bug Fixes

package/package.cjs

@@ -3,6 +3,6 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var version = "4.77.1";
+var version = "4.77.3";
 
 exports.version = version;

package/package.js

@@ -1,4 +1,4 @@
 'use client'
-var version = "4.77.1";
+var version = "4.77.3";
 
 export { version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dynamic-labs/waas",
-  "version": "4.77.1",
+  "version": "4.77.3",
   "type": "module",
   "author": "Dynamic Labs, Inc.",
   "license": "MIT",
@@ -17,16 +17,16 @@
   },
   "dependencies": {
     "@dynamic-labs-sdk/client": "0.24.0",
-    "@dynamic-labs/assert-package-version": "4.77.1",
+    "@dynamic-labs/assert-package-version": "4.77.3",
     "@dynamic-labs/sdk-api-core": "0.0.927",
     "@dynamic-labs-wallet/browser-wallet-client": "0.0.314",
-    "@dynamic-labs/ethereum-core": "4.77.1",
-    "@dynamic-labs/logger": "4.77.1",
-    "@dynamic-labs/solana-core": "4.77.1",
-    "@dynamic-labs/sui-core": "4.77.1",
-    "@dynamic-labs/utils": "4.77.1",
-    "@dynamic-labs/wallet-book": "4.77.1",
-    "@dynamic-labs/wallet-connector-core": "4.77.1"
+    "@dynamic-labs/ethereum-core": "4.77.3",
+    "@dynamic-labs/logger": "4.77.3",
+    "@dynamic-labs/solana-core": "4.77.3",
+    "@dynamic-labs/sui-core": "4.77.3",
+    "@dynamic-labs/utils": "4.77.3",
+    "@dynamic-labs/wallet-book": "4.77.3",
+    "@dynamic-labs/wallet-connector-core": "4.77.3"
   },
   "peerDependencies": {}
 }

package/src/DynamicWaasMixin.cjs

@@ -57,7 +57,11 @@ const withDynamicWaas = (BaseClass) => {
                 if (recoveryState.walletReadyState === 'ready') {
                     return undefined;
                 }
-                // Wallet is encrypted and needs to be unlocked
+                // If wallet is not password-encrypted, no password needed for recovery
+                if (!recoveryState.isPasswordEncrypted) {
+                    return undefined;
+                }
+                // Wallet is password-encrypted and needs to be unlocked
                 if (!this.getWalletPassword) {
                     throw new utils.DynamicError('Wallet is locked but no password provider is configured');
                 }
@@ -66,25 +70,35 @@ const withDynamicWaas = (BaseClass) => {
                     chainName: this.chainName,
                 });
                 if (!password) {
-                    throw new utils.DynamicError('Password is required to sign with this wallet');
+                    throw new utils.UserRejectedRequestError();
                 }
                 return password;
             });
         }
         /**
-         * Always prompts for the wallet password regardless of wallet state.
+         * Prompts for the wallet password if the wallet is password-encrypted.
          *
          * Unlike `getPasswordIfNeeded` (which skips the prompt when the wallet is
-         * already unlocked in memory), this method always asks for the password.
-         * Use it for operations that encrypt/decrypt data stored externally
-         * (e.g. cloud backup/restore), where the password is required to
-         * encrypt/decrypt the shares on disk — not just to unlock the wallet.
+         * already unlocked in memory), this method always asks for the password
+         * when the wallet is password-encrypted. Use it for operations that
+         * encrypt/decrypt data stored externally (e.g. cloud backup/restore),
+         * where the password is required to encrypt/decrypt the shares on disk.
+         *
+         * Returns undefined if the wallet is not password-encrypted or if no
+         * password provider is configured.
          */
         getPassword(_a) {
             return _tslib.__awaiter(this, arguments, void 0, function* ({ accountAddress, }) {
                 if (!this.getWalletPassword) {
                     return undefined;
                 }
+                // Check if wallet is password-encrypted before prompting
+                const recoveryState = yield this.getWalletRecoveryState({
+                    accountAddress,
+                });
+                if (!recoveryState.isPasswordEncrypted) {
+                    return undefined;
+                }
                 return this.getWalletPassword({
                     accountAddress,
                     chainName: this.chainName,
@@ -655,6 +669,7 @@ const withDynamicWaas = (BaseClass) => {
         }
         instrumentAsync(_a) {
             return _tslib.__awaiter(this, arguments, void 0, function* ({ operation, resource, fn, context, }) {
+                var _b, _c;
                 const timing = new instrumentation.InstrumentationTimer(context === null || context === void 0 ? void 0 : context.startTime);
                 if (context === null || context === void 0 ? void 0 : context.stepStartTime) {
                     timing.setStepStartTime(context.stepStartTime);
@@ -669,7 +684,20 @@ const withDynamicWaas = (BaseClass) => {
                     return result;
                 }
                 catch (error) {
-                    this.instrument(`[${operation}] ${resource} - failed`, Object.assign(Object.assign({ key: `${resource}-failed`, operation, stepTime: timing.getStepElapsed(), time: timing.getElapsed() }, context), { error }));
+                    const isUserRejection = error instanceof utils.UserRejectedRequestError ||
+                        (error === null || error === void 0 ? void 0 : error.code) === 'user_rejected_request';
+                    const errorContext = {
+                        errorCode: (_b = error === null || error === void 0 ? void 0 : error.code) !== null && _b !== void 0 ? _b : 'unknown',
+                        errorMessage: error instanceof Error ? error.message : String(error),
+                        errorType: (_c = error === null || error === void 0 ? void 0 : error.constructor) === null || _c === void 0 ? void 0 : _c.name,
+                    };
+                    if (isUserRejection) {
+                        // User-initiated cancellations are expected — debug only, no backend noise
+                        this.logger.debug(`[${operation}] ${resource} - cancelled`, Object.assign(Object.assign({ key: `${resource}-cancelled`, operation, stepTime: timing.getStepElapsed(), time: timing.getElapsed() }, context), errorContext));
+                    }
+                    else {
+                        this.instrument(`[${operation}] ${resource} - failed`, Object.assign(Object.assign({ key: `${resource}-failed`, operation, stepTime: timing.getStepElapsed(), time: timing.getElapsed() }, context), errorContext));
+                    }
                     throw error;
                 }
             });

package/src/DynamicWaasMixin.d.ts

@@ -50,13 +50,16 @@ export declare const withDynamicWaas: <T extends abstract new (...args: any[]) =
         accountAddress: string;
     }): Promise<string | undefined>;
     /**
-     * Always prompts for the wallet password regardless of wallet state.
+     * Prompts for the wallet password if the wallet is password-encrypted.
      *
      * Unlike `getPasswordIfNeeded` (which skips the prompt when the wallet is
-     * already unlocked in memory), this method always asks for the password.
-     * Use it for operations that encrypt/decrypt data stored externally
-     * (e.g. cloud backup/restore), where the password is required to
-     * encrypt/decrypt the shares on disk — not just to unlock the wallet.
+     * already unlocked in memory), this method always asks for the password
+     * when the wallet is password-encrypted. Use it for operations that
+     * encrypt/decrypt data stored externally (e.g. cloud backup/restore),
+     * where the password is required to encrypt/decrypt the shares on disk.
+     *
+     * Returns undefined if the wallet is not password-encrypted or if no
+     * password provider is configured.
      */
     getPassword({ accountAddress, }: {
         accountAddress: string;

package/src/DynamicWaasMixin.js

@@ -2,7 +2,7 @@
 import { __awaiter } from '../_virtual/_tslib.js';
 import { DynamicWalletClient } from '@dynamic-labs-wallet/browser-wallet-client';
 import { MFAAction, TokenScope } from '@dynamic-labs/sdk-api-core';
-import { DynamicError, PlatformService } from '@dynamic-labs/utils';
+import { DynamicError, UserRejectedRequestError, PlatformService } from '@dynamic-labs/utils';
 import { version } from '../package.js';
 import { DEFAULT_BASE_API_URL, DEFAULT_BASE_MPC_RELAY_API_URL } from '../utils/constants.js';
 import { createWaasClientSecureStorage } from '../utils/createWaasClientSecureStorage.js';
@@ -53,7 +53,11 @@ const withDynamicWaas = (BaseClass) => {
                 if (recoveryState.walletReadyState === 'ready') {
                     return undefined;
                 }
-                // Wallet is encrypted and needs to be unlocked
+                // If wallet is not password-encrypted, no password needed for recovery
+                if (!recoveryState.isPasswordEncrypted) {
+                    return undefined;
+                }
+                // Wallet is password-encrypted and needs to be unlocked
                 if (!this.getWalletPassword) {
                     throw new DynamicError('Wallet is locked but no password provider is configured');
                 }
@@ -62,25 +66,35 @@ const withDynamicWaas = (BaseClass) => {
                     chainName: this.chainName,
                 });
                 if (!password) {
-                    throw new DynamicError('Password is required to sign with this wallet');
+                    throw new UserRejectedRequestError();
                 }
                 return password;
             });
         }
         /**
-         * Always prompts for the wallet password regardless of wallet state.
+         * Prompts for the wallet password if the wallet is password-encrypted.
          *
          * Unlike `getPasswordIfNeeded` (which skips the prompt when the wallet is
-         * already unlocked in memory), this method always asks for the password.
-         * Use it for operations that encrypt/decrypt data stored externally
-         * (e.g. cloud backup/restore), where the password is required to
-         * encrypt/decrypt the shares on disk — not just to unlock the wallet.
+         * already unlocked in memory), this method always asks for the password
+         * when the wallet is password-encrypted. Use it for operations that
+         * encrypt/decrypt data stored externally (e.g. cloud backup/restore),
+         * where the password is required to encrypt/decrypt the shares on disk.
+         *
+         * Returns undefined if the wallet is not password-encrypted or if no
+         * password provider is configured.
          */
         getPassword(_a) {
             return __awaiter(this, arguments, void 0, function* ({ accountAddress, }) {
                 if (!this.getWalletPassword) {
                     return undefined;
                 }
+                // Check if wallet is password-encrypted before prompting
+                const recoveryState = yield this.getWalletRecoveryState({
+                    accountAddress,
+                });
+                if (!recoveryState.isPasswordEncrypted) {
+                    return undefined;
+                }
                 return this.getWalletPassword({
                     accountAddress,
                     chainName: this.chainName,
@@ -651,6 +665,7 @@ const withDynamicWaas = (BaseClass) => {
         }
         instrumentAsync(_a) {
             return __awaiter(this, arguments, void 0, function* ({ operation, resource, fn, context, }) {
+                var _b, _c;
                 const timing = new InstrumentationTimer(context === null || context === void 0 ? void 0 : context.startTime);
                 if (context === null || context === void 0 ? void 0 : context.stepStartTime) {
                     timing.setStepStartTime(context.stepStartTime);
@@ -665,7 +680,20 @@ const withDynamicWaas = (BaseClass) => {
                     return result;
                 }
                 catch (error) {
-                    this.instrument(`[${operation}] ${resource} - failed`, Object.assign(Object.assign({ key: `${resource}-failed`, operation, stepTime: timing.getStepElapsed(), time: timing.getElapsed() }, context), { error }));
+                    const isUserRejection = error instanceof UserRejectedRequestError ||
+                        (error === null || error === void 0 ? void 0 : error.code) === 'user_rejected_request';
+                    const errorContext = {
+                        errorCode: (_b = error === null || error === void 0 ? void 0 : error.code) !== null && _b !== void 0 ? _b : 'unknown',
+                        errorMessage: error instanceof Error ? error.message : String(error),
+                        errorType: (_c = error === null || error === void 0 ? void 0 : error.constructor) === null || _c === void 0 ? void 0 : _c.name,
+                    };
+                    if (isUserRejection) {
+                        // User-initiated cancellations are expected — debug only, no backend noise
+                        this.logger.debug(`[${operation}] ${resource} - cancelled`, Object.assign(Object.assign({ key: `${resource}-cancelled`, operation, stepTime: timing.getStepElapsed(), time: timing.getElapsed() }, context), errorContext));
+                    }
+                    else {
+                        this.instrument(`[${operation}] ${resource} - failed`, Object.assign(Object.assign({ key: `${resource}-failed`, operation, stepTime: timing.getStepElapsed(), time: timing.getElapsed() }, context), errorContext));
+                    }
                     throw error;
                 }
             });