@dynamic-labs/webview-messages 5.3.1 → 5.4.0

package/CHANGELOG.md

@@ -1,4 +1,43 @@
 
+## [5.4.0](https://github.com/dynamic-labs/dynamic-auth/compare/v5.3.2...v5.4.0) (2026-08-25)
+
+
+### Features
+
+* **aleo:** wire up signMessage on the WaaS Aleo connector ([#12235](https://github.com/dynamic-labs/dynamic-auth/issues/12235)) ([e56cbf5](https://github.com/dynamic-labs/dynamic-auth/commit/e56cbf5546bdcc21ce916dece43ae36dcea9b808))
+* **waas:** thread isRawScalarImport through importPrivateKey for ed25519 chains ([#12220](https://github.com/dynamic-labs/dynamic-auth/issues/12220)) ([ced9efa](https://github.com/dynamic-labs/dynamic-auth/commit/ced9efac5fa5a4a1280383419f56fe22733722cd))
+* **webview:** add policies message contract and controller ([#12248](https://github.com/dynamic-labs/dynamic-auth/issues/12248)) ([8557c1e](https://github.com/dynamic-labs/dynamic-auth/commit/8557c1ed3861e12f1f06b2bb610184813b577daa))
+
+
+### Bug Fixes
+
+* **bitcoin:** pass the wallet's address type when signing ([#12265](https://github.com/dynamic-labs/dynamic-auth/issues/12265)) ([b8a8eab](https://github.com/dynamic-labs/dynamic-auth/commit/b8a8eab7e4cc294cc307fb10ea6814e76111a274))
+* remediate high-severity tar vulnerability and prune a dead override ([#12268](https://github.com/dynamic-labs/dynamic-auth/issues/12268)) ([6b1b343](https://github.com/dynamic-labs/dynamic-auth/commit/6b1b343e7947e8da30012446677e342ae9bfe14a))
+* **waas-svm:** fix retry-classification and environmentId gaps in [#12240](https://github.com/dynamic-labs/dynamic-auth/issues/12240) ([#12247](https://github.com/dynamic-labs/dynamic-auth/issues/12247)) ([e79cecc](https://github.com/dynamic-labs/dynamic-auth/commit/e79ceccd424c48c3a7f45fdd6ea288c269ac0171))
+* **wallet-connect:** reopen WalletConnect IndexedDB when the browser closes the connection ([#12262](https://github.com/dynamic-labs/dynamic-auth/issues/12262)) ([1a20dde](https://github.com/dynamic-labs/dynamic-auth/commit/1a20ddeaeec590ae3390c9e47ef3c14738379b83))
+
+
+### Performance Improvements
+
+* **ethereum-gasless-core:** parallel 7702 auth signing and long-poll sponsored-tx status ([#12225](https://github.com/dynamic-labs/dynamic-auth/issues/12225)) ([53ca916](https://github.com/dynamic-labs/dynamic-auth/commit/53ca91668f8dd839c52d55a0e5d7bb5257f7f415))
+
+### [5.3.2](https://github.com/dynamic-labs/dynamic-auth/compare/v5.3.1...v5.3.2) (2026-08-19)
+
+
+### Features
+
+* **bitcoin:** add allowedSighash to embedded wallet signPsbt ([#12233](https://github.com/dynamic-labs/dynamic-auth/issues/12233)) ([d0ff829](https://github.com/dynamic-labs/dynamic-auth/commit/d0ff8291a3d1771d5ca356172acc10af94349b15))
+* **bitcoin:** forward signingIndexes to embedded PSBT signing ([#12211](https://github.com/dynamic-labs/dynamic-auth/issues/12211)) ([733da3d](https://github.com/dynamic-labs/dynamic-auth/commit/733da3d32f39a9ae6d813df84fcff6350ba12eb5))
+* expose createOfflineRecoveryShares SDK function in webview and legacy client ([#12239](https://github.com/dynamic-labs/dynamic-auth/issues/12239)) ([c8056e8](https://github.com/dynamic-labs/dynamic-auth/commit/c8056e8d5a1c66ac0146b046bc7cc198de118f0b))
+
+
+### Bug Fixes
+
+* **bitcoin:** parse PSBTs with the active network's address encoding ([#12219](https://github.com/dynamic-labs/dynamic-auth/issues/12219)) ([8b151e2](https://github.com/dynamic-labs/dynamic-auth/commit/8b151e23440094cfa0d48728e1d0f19de567ca05))
+* **bitcoin:** stop ensureActiveAccount from resetting a switched network ([#12215](https://github.com/dynamic-labs/dynamic-auth/issues/12215)) ([86668b7](https://github.com/dynamic-labs/dynamic-auth/commit/86668b79d23cd89b7e96518551cdaecab7dd5ce3))
+* remediate high-severity dependency vulnerabilities ([#12238](https://github.com/dynamic-labs/dynamic-auth/issues/12238)) ([a4fc78c](https://github.com/dynamic-labs/dynamic-auth/commit/a4fc78ca27ee44ce6a1038c4e0d07f55528b4994))
+* **waas-svm:** retry SVM gas sponsorship before falling back, then throw ([#12240](https://github.com/dynamic-labs/dynamic-auth/issues/12240)) ([f599a7a](https://github.com/dynamic-labs/dynamic-auth/commit/f599a7af55727e06373772acf574ee7c43e56bbb))
+
 ### [5.3.1](https://github.com/dynamic-labs/dynamic-auth/compare/v5.3.0...v5.3.1) (2026-08-14)
 
 ## [5.3.0](https://github.com/dynamic-labs/dynamic-auth/compare/v5.2.0...v5.3.0) (2026-08-12)

package/package.cjs

@@ -3,6 +3,6 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var version = "5.3.1";
+var version = "5.4.0";
 
 exports.version = version;

package/package.js

@@ -1,4 +1,4 @@
 'use client'
-var version = "5.3.1";
+var version = "5.4.0";
 
 export { version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dynamic-labs/webview-messages",
-  "version": "5.3.1",
+  "version": "5.4.0",
   "description": "A package to define messages for the webview-controller",
   "author": "Dynamic Labs, Inc.",
   "license": "MIT",
@@ -18,16 +18,16 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@dynamic-labs/ethereum-gasless-core": "5.3.1",
-    "@dynamic-labs/sdk-api-core": "0.0.1118",
-    "@dynamic-labs-sdk/client": "1.27.1",
-    "@dynamic-labs/assert-package-version": "5.3.1",
-    "@dynamic-labs/locale": "5.3.1",
-    "@dynamic-labs/logger": "5.3.1",
-    "@dynamic-labs/message-transport": "5.3.1",
-    "@dynamic-labs/types": "5.3.1",
-    "@dynamic-labs/wallet-connector-core": "5.3.1",
-    "@dynamic-labs/webauthn": "5.3.1"
+    "@dynamic-labs/ethereum-gasless-core": "5.4.0",
+    "@dynamic-labs/sdk-api-core": "0.12.0",
+    "@dynamic-labs-sdk/client": "1.29.0",
+    "@dynamic-labs/assert-package-version": "5.4.0",
+    "@dynamic-labs/locale": "5.4.0",
+    "@dynamic-labs/logger": "5.4.0",
+    "@dynamic-labs/message-transport": "5.4.0",
+    "@dynamic-labs/types": "5.4.0",
+    "@dynamic-labs/wallet-connector-core": "5.4.0",
+    "@dynamic-labs/webauthn": "5.4.0"
   },
   "peerDependencies": {}
 }

package/src/index.d.ts

@@ -2,6 +2,7 @@ export * from './lib/AccountAbstractionMessages';
 export * from './lib/AuthModuleMessages';
 export * from './lib/BitcoinMessages';
 export * from './lib/BusinessAccountsMessages';
+export * from './lib/PoliciesMessages';
 export * from './lib/ConsoleMessages';
 export * from './lib/EmbeddedWalletsModuleMessages';
 export * from './lib/EthereumGaslessMessages';

package/src/lib/BitcoinMessages.d.ts

@@ -27,6 +27,8 @@ export type BitcoinMessages = {
         walletId: string;
         request: BitcoinSignPsbtRequest | {
             unsignedPsbtBase64: string;
+            signingIndexes?: number[];
+            allowedSighash?: number[];
         };
     }) => Promise<{
         signedPsbt: string;

package/src/lib/PoliciesMessages.d.ts

@@ -0,0 +1,54 @@
+import type { buildAllowPolicyRule, buildDenyPolicyRule, createPolicy, desugarPolicyRules, expandPolicyRules, getAccountPolicyLayer, getPolicy, getSignerPolicyLayer, getWalletPolicyLayer, removeAccountPolicyRule, removePolicyRules, removeSignerPolicyRule, removeWalletPolicyRule, upsertAccountPolicyRule, upsertSignerPolicyRule, upsertWalletPolicyRule, PolicyRules, PolicyScope, WaasPolicyLayerResponse } from '@dynamic-labs-sdk/client/waas';
+type CreatePolicyParams = {
+    chain: Parameters<typeof createPolicy>[0]['chain'];
+    chainIds?: number[];
+    rules: PolicyRules;
+    scope: PolicyScope;
+};
+type GetPolicyParams = {
+    chain: Parameters<typeof getPolicy>[0]['chain'];
+    chainIds?: number[];
+    scope: PolicyScope;
+};
+type RemovePolicyRulesParams = {
+    chain: Parameters<typeof removePolicyRules>[0]['chain'];
+    chainIds?: number[];
+    rules: (keyof PolicyRules)[];
+    scope: PolicyScope;
+};
+type WalletId = {
+    walletId: string;
+};
+type GetWalletPolicyLayerParams = Omit<Parameters<typeof getWalletPolicyLayer>[0], 'walletAccount'> & WalletId;
+type GetSignerPolicyLayerParams = Omit<Parameters<typeof getSignerPolicyLayer>[0], 'walletAccount'> & WalletId;
+type GetAccountPolicyLayerParams = Parameters<typeof getAccountPolicyLayer>[0];
+type UpsertWalletPolicyRuleParams = Omit<Parameters<typeof upsertWalletPolicyRule>[0], 'walletAccount'> & WalletId;
+type UpsertSignerPolicyRuleParams = Omit<Parameters<typeof upsertSignerPolicyRule>[0], 'walletAccount'> & WalletId;
+type UpsertAccountPolicyRuleParams = Parameters<typeof upsertAccountPolicyRule>[0];
+type RemoveWalletPolicyRuleParams = Omit<Parameters<typeof removeWalletPolicyRule>[0], 'walletAccount'> & WalletId;
+type RemoveSignerPolicyRuleParams = Omit<Parameters<typeof removeSignerPolicyRule>[0], 'walletAccount'> & WalletId;
+type RemoveAccountPolicyRuleParams = Parameters<typeof removeAccountPolicyRule>[0];
+type GetPolicyResponse = Awaited<ReturnType<typeof getPolicy>>;
+type BuildAllowPolicyRuleParams = Parameters<typeof buildAllowPolicyRule>[0];
+type BuildDenyPolicyRuleParams = Parameters<typeof buildDenyPolicyRule>[0];
+type ExpandPolicyRulesParams = Parameters<typeof expandPolicyRules>[0];
+type DesugarPolicyRulesParams = Parameters<typeof desugarPolicyRules>[0];
+export type PoliciesMessages = {
+    policy_create: (params: CreatePolicyParams) => Promise<WaasPolicyLayerResponse>;
+    policy_get: (params: GetPolicyParams) => Promise<GetPolicyResponse>;
+    policy_removeRules: (params: RemovePolicyRulesParams) => Promise<WaasPolicyLayerResponse>;
+    policy_getWalletLayer: (params: GetWalletPolicyLayerParams) => Promise<WaasPolicyLayerResponse>;
+    policy_getSignerLayer: (params: GetSignerPolicyLayerParams) => Promise<WaasPolicyLayerResponse>;
+    policy_getAccountLayer: (params: GetAccountPolicyLayerParams) => Promise<WaasPolicyLayerResponse>;
+    policy_upsertWalletRule: (params: UpsertWalletPolicyRuleParams) => Promise<WaasPolicyLayerResponse>;
+    policy_upsertSignerRule: (params: UpsertSignerPolicyRuleParams) => Promise<WaasPolicyLayerResponse>;
+    policy_upsertAccountRule: (params: UpsertAccountPolicyRuleParams) => Promise<WaasPolicyLayerResponse>;
+    policy_removeWalletRule: (params: RemoveWalletPolicyRuleParams) => Promise<WaasPolicyLayerResponse>;
+    policy_removeSignerRule: (params: RemoveSignerPolicyRuleParams) => Promise<WaasPolicyLayerResponse>;
+    policy_removeAccountRule: (params: RemoveAccountPolicyRuleParams) => Promise<WaasPolicyLayerResponse>;
+    policy_buildAllowRule: (params: BuildAllowPolicyRuleParams) => Promise<ReturnType<typeof buildAllowPolicyRule>>;
+    policy_buildDenyRule: (params: BuildDenyPolicyRuleParams) => Promise<ReturnType<typeof buildDenyPolicyRule>>;
+    policy_expandRules: (params: ExpandPolicyRulesParams) => Promise<ReturnType<typeof expandPolicyRules>>;
+    policy_desugarRules: (params: DesugarPolicyRulesParams) => Promise<ReturnType<typeof desugarPolicyRules>>;
+};
+export {};

package/src/lib/WaasMessages.d.ts

@@ -7,6 +7,13 @@ export type ImportPrivateKeyArgs = {
     addressType?: string;
     password?: string;
     legacyWalletId?: string;
+    /**
+     * For ed25519 chains (SVM/TON/SUI) only: when true, `privateKey` is a raw
+     * 32-byte signing scalar (hex) exported from an external MPC system (e.g.
+     * Fireblocks Embedded Wallets), not a seed / standard secret key. Routes the
+     * import through the non-exportable Ed25519 protocol.
+     */
+    isRawScalarImport?: boolean;
 };
 export type ExportClientKeysharesArgs = {
     accountAddress: string;
@@ -61,6 +68,12 @@ export type UnlockWalletArgs = {
 export type GetWalletRecoveryStateArgs = {
     accountAddress: string;
 };
+export type CreateOfflineRecoverySharesArgs = {
+    accountAddress: string;
+    password?: string;
+    cloudProviderAccessToken?: string;
+    mfaToken?: string;
+};
 export type WalletRecoveryState = {
     walletReadyState: 'ready' | 'encrypted';
     isPasswordEncrypted: boolean;
@@ -84,4 +97,5 @@ export type WaasMessages = {
     waas_signRawMessage: (walletId: string, args: SignRawMessageArgs) => Promise<string>;
     waas_unlockWallet: (walletId: string, args: UnlockWalletArgs) => Promise<void>;
     waas_getWalletRecoveryState: (walletId: string, args: GetWalletRecoveryStateArgs) => Promise<WalletRecoveryState>;
+    waas_createOfflineRecoveryShares: (walletId: string, args: CreateOfflineRecoverySharesArgs) => Promise<void>;
 };