@dynamic-labs/webview-messages 4.71.0 → 4.73.0

package/CHANGELOG.md

@@ -1,4 +1,33 @@
 
+## [4.73.0](https://github.com/dynamic-labs/dynamic-auth/compare/v4.72.0...v4.73.0) (2026-03-30)
+
+
+### Features
+
+* allow passing credentialId at call time for step-up auth methods ([#10795](https://github.com/dynamic-labs/dynamic-auth/issues/10795)) ([9746667](https://github.com/dynamic-labs/dynamic-auth/commit/974666758ad8b01584cf30efbf2cb64dbde63986))
+* **waas:** preserve WaaS key shares on session expiry using LogoutReason ([#10714](https://github.com/dynamic-labs/dynamic-auth/issues/10714)) ([26f40f7](https://github.com/dynamic-labs/dynamic-auth/commit/26f40f722302b8cf4cc035886d4408393a785283))
+
+
+### Bug Fixes
+
+* override handlebars to >=4.7.9 (CVE-2026-33937) ([#10805](https://github.com/dynamic-labs/dynamic-auth/issues/10805)) ([7aa40b8](https://github.com/dynamic-labs/dynamic-auth/commit/7aa40b8472487694b438ae3a64b14524c9c726e4))
+* use currentColor in settings icons for dark mode support ([#10811](https://github.com/dynamic-labs/dynamic-auth/issues/10811)) ([8653e97](https://github.com/dynamic-labs/dynamic-auth/commit/8653e97759f0ea5126258c1ced36ae26af3a405c)), closes [#383C48](https://github.com/dynamic-labs/dynamic-auth/issues/383C48) [#ABACB2](https://github.com/dynamic-labs/dynamic-auth/issues/ABACB2)
+
+## [4.72.0](https://github.com/dynamic-labs/dynamic-auth/compare/v4.71.0...v4.72.0) (2026-03-26)
+
+
+### Features
+
+* add action-based MFA check to wallet export ([#10774](https://github.com/dynamic-labs/dynamic-auth/issues/10774)) ([06aae8a](https://github.com/dynamic-labs/dynamic-auth/commit/06aae8a6365adde1658b8632c8caa11df409c646))
+* integrate checkStepUpAuth into React SDK ([#10751](https://github.com/dynamic-labs/dynamic-auth/issues/10751)) ([7907557](https://github.com/dynamic-labs/dynamic-auth/commit/79075575086b89b9bfb405d75e7c6b3d573cc25d))
+* **react-native:** expose setup auth state ([#10779](https://github.com/dynamic-labs/dynamic-auth/issues/10779)) ([9600e46](https://github.com/dynamic-labs/dynamic-auth/commit/9600e46028b446c88e682e7d842e65d691230b14))
+
+
+### Bug Fixes
+
+* allow for connectors to inject icons into bridge view ([#10752](https://github.com/dynamic-labs/dynamic-auth/issues/10752)) ([94b5c3e](https://github.com/dynamic-labs/dynamic-auth/commit/94b5c3e78a1d92558ef316d9ca6761fdc4b788d5))
+* react-native-extension build on iOS ([#10764](https://github.com/dynamic-labs/dynamic-auth/issues/10764)) ([b5eca2a](https://github.com/dynamic-labs/dynamic-auth/commit/b5eca2aa012e3da74361e28b4a41414710fdfa9c))
+
 ## [4.71.0](https://github.com/dynamic-labs/dynamic-auth/compare/v4.70.0...v4.71.0) (2026-03-24)
 
 

package/package.cjs

@@ -3,6 +3,6 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var version = "4.71.0";
+var version = "4.73.0";
 
 exports.version = version;

package/package.js

@@ -1,4 +1,4 @@
 'use client'
-var version = "4.71.0";
+var version = "4.73.0";
 
 export { version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dynamic-labs/webview-messages",
-  "version": "4.71.0",
+  "version": "4.73.0",
   "description": "A package to define messages for the webview-controller",
   "author": "Dynamic Labs, Inc.",
   "license": "MIT",
@@ -19,14 +19,14 @@
   },
   "dependencies": {
     "@dynamic-labs/sdk-api-core": "0.0.909",
-    "@dynamic-labs-sdk/client": "0.18.0",
-    "@dynamic-labs/assert-package-version": "4.71.0",
-    "@dynamic-labs/locale": "4.71.0",
-    "@dynamic-labs/logger": "4.71.0",
-    "@dynamic-labs/message-transport": "4.71.0",
-    "@dynamic-labs/types": "4.71.0",
-    "@dynamic-labs/wallet-connector-core": "4.71.0",
-    "@dynamic-labs/webauthn": "4.71.0"
+    "@dynamic-labs-sdk/client": "0.19.0",
+    "@dynamic-labs/assert-package-version": "4.73.0",
+    "@dynamic-labs/locale": "4.73.0",
+    "@dynamic-labs/logger": "4.73.0",
+    "@dynamic-labs/message-transport": "4.73.0",
+    "@dynamic-labs/types": "4.73.0",
+    "@dynamic-labs/wallet-connector-core": "4.73.0",
+    "@dynamic-labs/webauthn": "4.73.0"
   },
   "peerDependencies": {}
 }

package/src/index.cjs

@@ -7,6 +7,7 @@ var assertPackageVersion = require('@dynamic-labs/assert-package-version');
 var _package = require('../package.cjs');
 var AuthModuleMessages = require('./lib/AuthModuleMessages.cjs');
 var EmbeddedWalletsModuleMessages = require('./lib/EmbeddedWalletsModuleMessages.cjs');
+var GlobalWalletModuleMessages = require('./lib/GlobalWalletModuleMessages.cjs');
 var MfaMessages = require('./lib/MfaMessages.cjs');
 var OtpMessages = require('./lib/OtpMessages.cjs');
 var PhantomModuleMessages = require('./lib/PhantomModuleMessages.cjs');
@@ -19,6 +20,7 @@ assertPackageVersion.assertPackageVersion('@dynamic-labs/webview-messages', _pac
 
 exports.authEventNames = AuthModuleMessages.authEventNames;
 exports.embeddedWalletsEventNames = EmbeddedWalletsModuleMessages.embeddedWalletsEventNames;
+exports.globalWalletEventNames = GlobalWalletModuleMessages.globalWalletEventNames;
 exports.mfaEventNames = MfaMessages.mfaEventNames;
 exports.emailEventNames = OtpMessages.emailEventNames;
 exports.smsEventNames = OtpMessages.smsEventNames;

package/src/index.d.ts

@@ -5,6 +5,7 @@ export * from './lib/EmbeddedWalletsModuleMessages';
 export * from './lib/EthMessages';
 export * from './lib/ExternalAuthMessages';
 export * from './lib/FetchMessages';
+export * from './lib/GlobalWalletModuleMessages';
 export * from './lib/LocaleModuleMessages';
 export * from './lib/MfaMessages';
 export * from './lib/NetworksModuleMessages';
@@ -15,6 +16,7 @@ export * from './lib/PlatformServiceMessages';
 export * from './lib/SdkModuleMessages';
 export * from './lib/SocialAuthModuleMessages';
 export * from './lib/SolanaMessages';
+export * from './lib/StepUpAuthMessages';
 export * from './lib/StorageMessages';
 export * from './lib/SuiMessages';
 export * from './lib/TurnkeyIframeEventProxyMessages';

package/src/index.js

@@ -3,6 +3,7 @@ import { assertPackageVersion } from '@dynamic-labs/assert-package-version';
 import { version } from '../package.js';
 export { authEventNames } from './lib/AuthModuleMessages.js';
 export { embeddedWalletsEventNames } from './lib/EmbeddedWalletsModuleMessages.js';
+export { globalWalletEventNames } from './lib/GlobalWalletModuleMessages.js';
 export { mfaEventNames } from './lib/MfaMessages.js';
 export { emailEventNames, smsEventNames } from './lib/OtpMessages.js';
 export { phantomEventNames } from './lib/PhantomModuleMessages.js';

package/src/lib/GlobalWalletModuleMessages.cjs

@@ -0,0 +1,20 @@
+'use client'
+'use strict';
+
+Object.defineProperty(exports, '__esModule', { value: true });
+
+/**
+ * List of event message names in {@link GlobalWalletModuleMessages}.
+ *
+ * Used to distinguish events (webview -> native notifications) from
+ * request/response messages (native -> webview calls). This allows
+ * the message transport layer to route events to event listeners
+ * rather than treating them as request-response calls.
+ */
+const globalWalletEventNames = [
+    'onSessionProposal',
+    'onSessionRequest',
+    'onSessionDelete',
+];
+
+exports.globalWalletEventNames = globalWalletEventNames;

package/src/lib/GlobalWalletModuleMessages.d.ts

@@ -0,0 +1,223 @@
+/**
+ * Represents a WalletConnect session proposal from a dApp.
+ *
+ * When a dApp wants to connect via WalletConnect, it sends a session proposal
+ * containing its metadata and the blockchain namespaces it requires or optionally
+ * supports. The host (native app) uses this to display a pairing confirmation UI
+ * and decide which chains/methods/events to approve.
+ */
+export type WCSessionProposal = {
+    /** Unique identifier for this proposal, used when approving or rejecting */
+    id: number;
+    params: {
+        /** Information about the dApp requesting the connection */
+        proposer: {
+            metadata: {
+                /** Human-readable name of the dApp (e.g. "Uniswap") */
+                name: string;
+                /** Short description of the dApp */
+                description: string;
+                /** Homepage URL of the dApp */
+                url: string;
+                /** Icon URLs for the dApp, used in the pairing confirmation UI */
+                icons: string[];
+            };
+        };
+        /**
+         * Namespaces the dApp requires — the session will fail if these
+         * cannot be satisfied (e.g. `{ eip155: { chains: ["eip155:1"], ... } }`)
+         */
+        requiredNamespaces?: Record<string, WCNamespace>;
+        /**
+         * Namespaces the dApp optionally supports — the session can still be
+         * established even if these are not fully satisfied
+         */
+        optionalNamespaces?: Record<string, WCNamespace>;
+    };
+};
+/**
+ * Describes the capabilities of a single blockchain namespace in WalletConnect.
+ *
+ * A namespace groups chains of the same family (e.g. `eip155` for EVM chains,
+ * `solana` for Solana chains) together with the JSON-RPC methods and events
+ * that the dApp wants to use on those chains.
+ */
+export type WCNamespace = {
+    /** CAIP-2 chain identifiers (e.g. `["eip155:1", "eip155:137"]`) */
+    chains?: string[];
+    /** JSON-RPC methods the dApp wants to call (e.g. `["eth_sendTransaction", "personal_sign"]`) */
+    methods: string[];
+    /** Events the dApp wants to listen to (e.g. `["chainChanged", "accountsChanged"]`) */
+    events: string[];
+};
+/**
+ * Represents an incoming signing or transaction request from a connected dApp.
+ *
+ * After a WalletConnect session is established, the dApp can send requests
+ * (e.g. sign a message, send a transaction). This type carries the request
+ * payload from the webview to the native layer so it can be shown in a
+ * confirmation UI or processed directly.
+ */
+export type WCSessionRequest = {
+    /** Unique identifier for this request, used when responding */
+    id: number;
+    /** Session topic identifying which connected dApp sent this request */
+    topic: string;
+    params: {
+        /** The JSON-RPC request payload */
+        request: {
+            /** JSON-RPC method name (e.g. `"personal_sign"`, `"solana_signTransaction"`) */
+            method: string;
+            /** Method-specific parameters */
+            params: unknown[];
+        };
+        /** CAIP-2 chain the request targets (e.g. `"eip155:1"`, `"solana:5eykt4..."`) */
+        chainId: string;
+    };
+};
+/**
+ * Represents an active WalletConnect session with a connected dApp.
+ *
+ * Once a session proposal is approved, the session is established and persisted.
+ * Each session tracks the connected peer's metadata, the approved namespaces
+ * (including which accounts are exposed), and an expiry timestamp.
+ */
+export type WCSession = {
+    /** Unique topic identifier for this session, used for all subsequent communication */
+    topic: string;
+    /** Information about the connected dApp */
+    peer: {
+        metadata: {
+            /** Human-readable name of the connected dApp */
+            name: string;
+            /** Short description of the connected dApp */
+            description: string;
+            /** Homepage URL of the connected dApp */
+            url: string;
+            /** Icon URLs for the connected dApp */
+            icons: string[];
+        };
+    };
+    /**
+     * Approved namespaces with the accounts exposed to the dApp.
+     * Keys are namespace identifiers (e.g. `"eip155"`, `"solana"`).
+     * Each value extends {@link WCNamespace} with an `accounts` array
+     * of CAIP-10 account IDs (e.g. `["eip155:1:0xabc..."]`).
+     */
+    namespaces: Record<string, WCNamespace & {
+        accounts: string[];
+    }>;
+    /** Unix timestamp (seconds) when this session expires */
+    expiry: number;
+};
+/**
+ * State synchronized from the webview to the native layer for the global
+ * wallet connectivity module.
+ *
+ * The webview controller pushes this state whenever sessions change, allowing
+ * the native app to reactively update its UI (e.g. show connected dApps).
+ */
+export type GlobalWalletModuleState = {
+    /** Map of active WC sessions keyed by their topic identifier */
+    sessions: Record<string, WCSession>;
+    /** Whether the WalletKit singleton and WC event listeners have been initialized */
+    initialized: boolean;
+};
+/**
+ * Message contract between the native host and the webview for global wallet
+ * WalletConnect connectivity.
+ *
+ * The native app uses request messages (`initGlobalWallet`, `pairWithWC`, etc.)
+ * to drive the WalletConnect lifecycle that runs inside the webview. The webview
+ * uses event messages (`onSessionProposal`, `onSessionRequest`, `onSessionDelete`)
+ * to notify the native layer of WC events so it can display native confirmation
+ * UIs or update state.
+ */
+export type GlobalWalletModuleMessages = {
+    /**
+     * Initialize the WalletKit singleton and start listening for WC session
+     * events. Must be called before any other global wallet operation.
+     */
+    initGlobalWallet: () => Promise<void>;
+    /**
+     * Pair with a dApp using a WalletConnect URI obtained from a QR code scan
+     * or deep link. Triggers a session proposal from the dApp.
+     * @param params.uri - The WalletConnect pairing URI (e.g. `"wc:abc123..."`)
+     */
+    pairWithWC: (params: {
+        uri: string;
+    }) => Promise<void>;
+    /**
+     * Approve or reject a pending session proposal.
+     * Called after the native app shows the pairing confirmation UI to the user.
+     * @param params.confirm - `true` to approve, `false` to reject
+     */
+    confirmPairing: (params: {
+        confirm: boolean;
+    }) => Promise<void>;
+    /**
+     * Disconnect a specific WC session, removing it from active sessions
+     * and notifying the connected dApp.
+     * @param params.topic - The session topic to disconnect
+     */
+    disconnectWCSession: (params: {
+        topic: string;
+    }) => Promise<void>;
+    /**
+     * Retrieve all currently active WC sessions.
+     * Used by the native app to display a list of connected dApps.
+     */
+    getConnectedWCSessions: () => Promise<{
+        sessions: Record<string, WCSession>;
+    }>;
+    /**
+     * Retrieve the pending session proposal, if one exists.
+     * Used to restore UI state if the native confirmation screen needs
+     * to be re-rendered (e.g. after a navigation event).
+     */
+    getPendingPairing: () => Promise<{
+        proposal: WCSessionProposal | null;
+    }>;
+    /**
+     * Respond to a session request from a connected dApp.
+     * Used in the mobile flow where the native app shows its own confirmation UI
+     * for signing/transaction requests instead of the webview handling it directly.
+     * @param params.id - The request ID to respond to
+     * @param params.topic - The session topic the request belongs to
+     * @param params.approved - `true` to proceed with signing, `false` to reject
+     */
+    respondSessionRequest: (params: {
+        id: number;
+        topic: string;
+        approved: boolean;
+    }) => Promise<void>;
+    /**
+     * Event emitted by the webview when a dApp proposes a new session.
+     * The native app should display a pairing confirmation UI and
+     * call `confirmPairing` with the user's decision.
+     */
+    onSessionProposal: (proposal: WCSessionProposal) => void;
+    /**
+     * Event emitted by the webview when a connected dApp sends a
+     * signing or transaction request. The native app should display
+     * a confirmation UI and call `respondSessionRequest` with the result.
+     */
+    onSessionRequest: (request: WCSessionRequest) => void;
+    /**
+     * Event emitted by the webview when a session is deleted
+     * (either by the dApp or due to expiry). The native app should
+     * update its UI to reflect the disconnection.
+     */
+    onSessionDelete: (params: {
+        topic: string;
+    }) => void;
+};
+/**
+ * List of event message names in {@link GlobalWalletModuleMessages}.
+ *
+ * Used to distinguish events (webview -> native notifications) from
+ * request/response messages (native -> webview calls). This allows
+ * the message transport layer to route events to event listeners
+ * rather than treating them as request-response calls.
+ */
+export declare const globalWalletEventNames: ("onSessionProposal" | "onSessionRequest" | "onSessionDelete")[];

package/src/lib/GlobalWalletModuleMessages.js

@@ -0,0 +1,16 @@
+'use client'
+/**
+ * List of event message names in {@link GlobalWalletModuleMessages}.
+ *
+ * Used to distinguish events (webview -> native notifications) from
+ * request/response messages (native -> webview calls). This allows
+ * the message transport layer to route events to event listeners
+ * rather than treating them as request-response calls.
+ */
+const globalWalletEventNames = [
+    'onSessionProposal',
+    'onSessionRequest',
+    'onSessionDelete',
+];
+
+export { globalWalletEventNames };

package/src/lib/SdkModuleMessages.d.ts

@@ -34,6 +34,15 @@ export type ClientManifest = {
      * you want to allow wallet connections without full authentication.
      */
     connectOnly?: boolean;
+    /**
+     * Controls the device registration modal behavior.
+     * When set to { enabled: false }, the SDK will not automatically show the
+     * device registration modal.
+     * @default { enabled: true }
+     */
+    deviceRegistrationModal?: {
+        enabled: boolean;
+    };
     /**
      * If true, use MetaMask SDK for MetaMask connections.
      * If false or undefined, use WalletConnect for MetaMask connections.
@@ -41,6 +50,12 @@ export type ClientManifest = {
      * @default false
      */
     useMetamaskSdk?: boolean;
+    /**
+     * WalletConnect project ID for global wallet provider mode.
+     * When provided, enables the embedded wallet to act as a WalletConnect
+     * wallet provider, allowing external dApps to connect and send signing requests.
+     */
+    walletConnectDappProjectId?: string;
 };
 export type SdkModuleState = {
     /** Indicates the SDK is set up and ready for requests */

package/src/lib/StepUpAuthMessages.d.ts

@@ -0,0 +1,49 @@
+import type { OTPVerification } from '@dynamic-labs-sdk/client';
+import type { ProviderEnum, TokenScope, VerifyResponse } from '@dynamic-labs/sdk-api-core';
+export type StepUpAuthState = {
+    error: string | null;
+    isLoading: boolean;
+    otpVerification: OTPVerification | null;
+};
+export type StepUpAuthMessages = {
+    stepUpAuth_isStepUpRequired: (params: {
+        scope: TokenScope;
+    }) => Promise<boolean>;
+    stepUpAuth_promptStepUpAuth: (params?: {
+        createMfaToken?: boolean;
+        requestedScopes?: TokenScope[];
+    }) => Promise<string | null>;
+    stepUpAuth_promptMfa: (params?: {
+        createMfaToken?: boolean;
+        requestedScopes?: TokenScope[];
+    }) => Promise<string | null>;
+    stepUpAuth_promptReauthenticate: (params?: {
+        createMfaToken?: boolean;
+        requestedScopes?: TokenScope[];
+    }) => Promise<string | null>;
+    stepUpAuth_sendOtp: () => Promise<OTPVerification | null>;
+    stepUpAuth_verifyOtp: (params: {
+        requestedScopes?: TokenScope[];
+        verificationToken: string;
+    }) => Promise<VerifyResponse | null>;
+    stepUpAuth_verifyWallet: (params: {
+        requestedScopes?: TokenScope[];
+    }) => Promise<void>;
+    stepUpAuth_verifyPasskeyMfa: (params: {
+        requestedScopes?: TokenScope[];
+    }) => Promise<VerifyResponse | null>;
+    stepUpAuth_verifyTotpMfa: (params: {
+        code: string;
+        deviceId?: string;
+        requestedScopes?: TokenScope[];
+    }) => Promise<VerifyResponse | null>;
+    stepUpAuth_verifyRecoveryCode: (params: {
+        code: string;
+        requestedScopes?: TokenScope[];
+    }) => Promise<VerifyResponse | null>;
+    stepUpAuth_verifySocial: (params: {
+        provider: ProviderEnum;
+        requestedScopes?: TokenScope[];
+    }) => Promise<void>;
+    stepUpAuth_resetState: () => Promise<void>;
+};

package/src/lib/StoreKeys.d.ts

@@ -1 +1 @@
-export type StoreKeys = 'auth' | 'sdk' | 'wallets' | 'embeddedWallets' | 'platform' | 'userInterface' | 'otp' | 'networks' | 'delegatedAccess' | 'deviceRegistration';
+export type StoreKeys = 'auth' | 'sdk' | 'wallets' | 'embeddedWallets' | 'platform' | 'userInterface' | 'otp' | 'networks' | 'delegatedAccess' | 'deviceRegistration' | 'stepUpAuth' | 'globalWallet';