@dynamic-labs/webview-messages 5.3.2 → 5.4.1

package/CHANGELOG.md

@@ -1,4 +1,38 @@
 
+### [5.4.1](https://github.com/dynamic-labs/dynamic-auth/compare/v5.4.0...v5.4.1) (2026-08-26)
+
+
+### Bug Fixes
+
+* **webview-controller:** resolve which keychain key a session belongs to ([#12246](https://github.com/dynamic-labs/dynamic-auth/issues/12246)) ([3d110db](https://github.com/dynamic-labs/dynamic-auth/commit/3d110db831c6e9d82d07d86841f5c7733924b17e))
+* **bitcoin:** forward the password through the BTC importPrivateKey override ([#12278](https://github.com/dynamic-labs/dynamic-auth/issues/12278)) ([21e1df3](https://github.com/dynamic-labs/dynamic-auth/commit/21e1df3e33e96e2efdb15ffa0fd29a441056202e))
+* **react-native-extension:** recover 4.x expo-secure-store sessions on keychain miss ([#12254](https://github.com/dynamic-labs/dynamic-auth/issues/12254)) ([217e991](https://github.com/dynamic-labs/dynamic-auth/commit/217e991838f3073c12e2d2fab7a2e12830faad9e)), closes [#12092](https://github.com/dynamic-labs/dynamic-auth/issues/12092) [#12092](https://github.com/dynamic-labs/dynamic-auth/issues/12092) [#12092](https://github.com/dynamic-labs/dynamic-auth/issues/12092) [#12092](https://github.com/dynamic-labs/dynamic-auth/issues/12092) [#12242](https://github.com/dynamic-labs/dynamic-auth/issues/12242) [#12242](https://github.com/dynamic-labs/dynamic-auth/issues/12242)
+* **transaction-card:** use walletConnector prop for network/fee instead of primaryWallet ([#12063](https://github.com/dynamic-labs/dynamic-auth/issues/12063)) ([81314d2](https://github.com/dynamic-labs/dynamic-auth/commit/81314d25fba4b20ab89631bc2d9ceeb9e2b6b2ac))
+* **waas-svm:** instrument sponsorship retry attempts ([#12281](https://github.com/dynamic-labs/dynamic-auth/issues/12281)) ([7273a4b](https://github.com/dynamic-labs/dynamic-auth/commit/7273a4bc456cad512c0e9fbcd2abd66532a2f7df))
+* **webview-controller:** recover 4.x secure-storage sessions and surface init failures ([#12242](https://github.com/dynamic-labs/dynamic-auth/issues/12242)) ([b51605c](https://github.com/dynamic-labs/dynamic-auth/commit/b51605cc9bdbb5d695173192c502a58d899bbbdd)), closes [#12094](https://github.com/dynamic-labs/dynamic-auth/issues/12094) [#12095](https://github.com/dynamic-labs/dynamic-auth/issues/12095) [#12098](https://github.com/dynamic-labs/dynamic-auth/issues/12098) [dynamic-labs/flutter-sdk#256](https://github.com/dynamic-labs/flutter-sdk/issues/256)
+
+## [5.4.0](https://github.com/dynamic-labs/dynamic-auth/compare/v5.3.2...v5.4.0) (2026-08-25)
+
+
+### Features
+
+* **aleo:** wire up signMessage on the WaaS Aleo connector ([#12235](https://github.com/dynamic-labs/dynamic-auth/issues/12235)) ([e56cbf5](https://github.com/dynamic-labs/dynamic-auth/commit/e56cbf5546bdcc21ce916dece43ae36dcea9b808))
+* **waas:** thread isRawScalarImport through importPrivateKey for ed25519 chains ([#12220](https://github.com/dynamic-labs/dynamic-auth/issues/12220)) ([ced9efa](https://github.com/dynamic-labs/dynamic-auth/commit/ced9efac5fa5a4a1280383419f56fe22733722cd))
+* **webview:** add policies message contract and controller ([#12248](https://github.com/dynamic-labs/dynamic-auth/issues/12248)) ([8557c1e](https://github.com/dynamic-labs/dynamic-auth/commit/8557c1ed3861e12f1f06b2bb610184813b577daa))
+
+
+### Bug Fixes
+
+* **bitcoin:** pass the wallet's address type when signing ([#12265](https://github.com/dynamic-labs/dynamic-auth/issues/12265)) ([b8a8eab](https://github.com/dynamic-labs/dynamic-auth/commit/b8a8eab7e4cc294cc307fb10ea6814e76111a274))
+* remediate high-severity tar vulnerability and prune a dead override ([#12268](https://github.com/dynamic-labs/dynamic-auth/issues/12268)) ([6b1b343](https://github.com/dynamic-labs/dynamic-auth/commit/6b1b343e7947e8da30012446677e342ae9bfe14a))
+* **waas-svm:** fix retry-classification and environmentId gaps in [#12240](https://github.com/dynamic-labs/dynamic-auth/issues/12240) ([#12247](https://github.com/dynamic-labs/dynamic-auth/issues/12247)) ([e79cecc](https://github.com/dynamic-labs/dynamic-auth/commit/e79ceccd424c48c3a7f45fdd6ea288c269ac0171))
+* **wallet-connect:** reopen WalletConnect IndexedDB when the browser closes the connection ([#12262](https://github.com/dynamic-labs/dynamic-auth/issues/12262)) ([1a20dde](https://github.com/dynamic-labs/dynamic-auth/commit/1a20ddeaeec590ae3390c9e47ef3c14738379b83))
+
+
+### Performance Improvements
+
+* **ethereum-gasless-core:** parallel 7702 auth signing and long-poll sponsored-tx status ([#12225](https://github.com/dynamic-labs/dynamic-auth/issues/12225)) ([53ca916](https://github.com/dynamic-labs/dynamic-auth/commit/53ca91668f8dd839c52d55a0e5d7bb5257f7f415))
+
 ### [5.3.2](https://github.com/dynamic-labs/dynamic-auth/compare/v5.3.1...v5.3.2) (2026-08-19)
 
 

package/package.cjs

@@ -3,6 +3,6 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var version = "5.3.2";
+var version = "5.4.1";
 
 exports.version = version;

package/package.js

@@ -1,4 +1,4 @@
 'use client'
-var version = "5.3.2";
+var version = "5.4.1";
 
 export { version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dynamic-labs/webview-messages",
-  "version": "5.3.2",
+  "version": "5.4.1",
   "description": "A package to define messages for the webview-controller",
   "author": "Dynamic Labs, Inc.",
   "license": "MIT",
@@ -18,16 +18,16 @@
     "./package.json": "./package.json"
   },
   "dependencies": {
-    "@dynamic-labs/ethereum-gasless-core": "5.3.2",
+    "@dynamic-labs/ethereum-gasless-core": "5.4.1",
     "@dynamic-labs/sdk-api-core": "0.12.0",
-    "@dynamic-labs-sdk/client": "1.27.1",
-    "@dynamic-labs/assert-package-version": "5.3.2",
-    "@dynamic-labs/locale": "5.3.2",
-    "@dynamic-labs/logger": "5.3.2",
-    "@dynamic-labs/message-transport": "5.3.2",
-    "@dynamic-labs/types": "5.3.2",
-    "@dynamic-labs/wallet-connector-core": "5.3.2",
-    "@dynamic-labs/webauthn": "5.3.2"
+    "@dynamic-labs-sdk/client": "1.29.0",
+    "@dynamic-labs/assert-package-version": "5.4.1",
+    "@dynamic-labs/locale": "5.4.1",
+    "@dynamic-labs/logger": "5.4.1",
+    "@dynamic-labs/message-transport": "5.4.1",
+    "@dynamic-labs/types": "5.4.1",
+    "@dynamic-labs/wallet-connector-core": "5.4.1",
+    "@dynamic-labs/webauthn": "5.4.1"
   },
   "peerDependencies": {}
 }

package/src/index.d.ts

@@ -2,6 +2,7 @@ export * from './lib/AccountAbstractionMessages';
 export * from './lib/AuthModuleMessages';
 export * from './lib/BitcoinMessages';
 export * from './lib/BusinessAccountsMessages';
+export * from './lib/PoliciesMessages';
 export * from './lib/ConsoleMessages';
 export * from './lib/EmbeddedWalletsModuleMessages';
 export * from './lib/EthereumGaslessMessages';

package/src/lib/KeychainMessages.d.ts

@@ -22,4 +22,14 @@ export type KeychainMessages = {
     keychain_removeKey: (args: {
         key: string;
     }) => Promise<void>;
+    /**
+     * Keeps only the key stored under `key` whose public key is `publicKey`,
+     * deleting the others, and resolves to whether a matching key remains.
+     * Deletes nothing when none matches. Hosts that predate the operation reject
+     * the request, so callers must treat it as opportunistic.
+     */
+    keychain_pruneToPublicKey: (args: {
+        key: string;
+        publicKey: string;
+    }) => Promise<boolean>;
 };

package/src/lib/PoliciesMessages.d.ts

@@ -0,0 +1,54 @@
+import type { buildAllowPolicyRule, buildDenyPolicyRule, createPolicy, desugarPolicyRules, expandPolicyRules, getAccountPolicyLayer, getPolicy, getSignerPolicyLayer, getWalletPolicyLayer, removeAccountPolicyRule, removePolicyRules, removeSignerPolicyRule, removeWalletPolicyRule, upsertAccountPolicyRule, upsertSignerPolicyRule, upsertWalletPolicyRule, PolicyRules, PolicyScope, WaasPolicyLayerResponse } from '@dynamic-labs-sdk/client/waas';
+type CreatePolicyParams = {
+    chain: Parameters<typeof createPolicy>[0]['chain'];
+    chainIds?: number[];
+    rules: PolicyRules;
+    scope: PolicyScope;
+};
+type GetPolicyParams = {
+    chain: Parameters<typeof getPolicy>[0]['chain'];
+    chainIds?: number[];
+    scope: PolicyScope;
+};
+type RemovePolicyRulesParams = {
+    chain: Parameters<typeof removePolicyRules>[0]['chain'];
+    chainIds?: number[];
+    rules: (keyof PolicyRules)[];
+    scope: PolicyScope;
+};
+type WalletId = {
+    walletId: string;
+};
+type GetWalletPolicyLayerParams = Omit<Parameters<typeof getWalletPolicyLayer>[0], 'walletAccount'> & WalletId;
+type GetSignerPolicyLayerParams = Omit<Parameters<typeof getSignerPolicyLayer>[0], 'walletAccount'> & WalletId;
+type GetAccountPolicyLayerParams = Parameters<typeof getAccountPolicyLayer>[0];
+type UpsertWalletPolicyRuleParams = Omit<Parameters<typeof upsertWalletPolicyRule>[0], 'walletAccount'> & WalletId;
+type UpsertSignerPolicyRuleParams = Omit<Parameters<typeof upsertSignerPolicyRule>[0], 'walletAccount'> & WalletId;
+type UpsertAccountPolicyRuleParams = Parameters<typeof upsertAccountPolicyRule>[0];
+type RemoveWalletPolicyRuleParams = Omit<Parameters<typeof removeWalletPolicyRule>[0], 'walletAccount'> & WalletId;
+type RemoveSignerPolicyRuleParams = Omit<Parameters<typeof removeSignerPolicyRule>[0], 'walletAccount'> & WalletId;
+type RemoveAccountPolicyRuleParams = Parameters<typeof removeAccountPolicyRule>[0];
+type GetPolicyResponse = Awaited<ReturnType<typeof getPolicy>>;
+type BuildAllowPolicyRuleParams = Parameters<typeof buildAllowPolicyRule>[0];
+type BuildDenyPolicyRuleParams = Parameters<typeof buildDenyPolicyRule>[0];
+type ExpandPolicyRulesParams = Parameters<typeof expandPolicyRules>[0];
+type DesugarPolicyRulesParams = Parameters<typeof desugarPolicyRules>[0];
+export type PoliciesMessages = {
+    policy_create: (params: CreatePolicyParams) => Promise<WaasPolicyLayerResponse>;
+    policy_get: (params: GetPolicyParams) => Promise<GetPolicyResponse>;
+    policy_removeRules: (params: RemovePolicyRulesParams) => Promise<WaasPolicyLayerResponse>;
+    policy_getWalletLayer: (params: GetWalletPolicyLayerParams) => Promise<WaasPolicyLayerResponse>;
+    policy_getSignerLayer: (params: GetSignerPolicyLayerParams) => Promise<WaasPolicyLayerResponse>;
+    policy_getAccountLayer: (params: GetAccountPolicyLayerParams) => Promise<WaasPolicyLayerResponse>;
+    policy_upsertWalletRule: (params: UpsertWalletPolicyRuleParams) => Promise<WaasPolicyLayerResponse>;
+    policy_upsertSignerRule: (params: UpsertSignerPolicyRuleParams) => Promise<WaasPolicyLayerResponse>;
+    policy_upsertAccountRule: (params: UpsertAccountPolicyRuleParams) => Promise<WaasPolicyLayerResponse>;
+    policy_removeWalletRule: (params: RemoveWalletPolicyRuleParams) => Promise<WaasPolicyLayerResponse>;
+    policy_removeSignerRule: (params: RemoveSignerPolicyRuleParams) => Promise<WaasPolicyLayerResponse>;
+    policy_removeAccountRule: (params: RemoveAccountPolicyRuleParams) => Promise<WaasPolicyLayerResponse>;
+    policy_buildAllowRule: (params: BuildAllowPolicyRuleParams) => Promise<ReturnType<typeof buildAllowPolicyRule>>;
+    policy_buildDenyRule: (params: BuildDenyPolicyRuleParams) => Promise<ReturnType<typeof buildDenyPolicyRule>>;
+    policy_expandRules: (params: ExpandPolicyRulesParams) => Promise<ReturnType<typeof expandPolicyRules>>;
+    policy_desugarRules: (params: DesugarPolicyRulesParams) => Promise<ReturnType<typeof desugarPolicyRules>>;
+};
+export {};

package/src/lib/WaasMessages.d.ts

@@ -7,6 +7,13 @@ export type ImportPrivateKeyArgs = {
     addressType?: string;
     password?: string;
     legacyWalletId?: string;
+    /**
+     * For ed25519 chains (SVM/TON/SUI) only: when true, `privateKey` is a raw
+     * 32-byte signing scalar (hex) exported from an external MPC system (e.g.
+     * Fireblocks Embedded Wallets), not a seed / standard secret key. Routes the
+     * import through the non-exportable Ed25519 protocol.
+     */
+    isRawScalarImport?: boolean;
 };
 export type ExportClientKeysharesArgs = {
     accountAddress: string;