@dynamic-labs/aleo 5.0.0-rc.0 → 5.0.0-rc.2

package/CHANGELOG.md

@@ -1,5 +1,78 @@
 
-## [5.0.0-rc.0](https://github.com/dynamic-labs/dynamic-auth/compare/v4.91.6...v5.0.0-rc.0) (2026-07-05)
+## [5.0.0-rc.2](https://github.com/dynamic-labs/dynamic-auth/compare/v5.0.0-rc.1...v5.0.0-rc.2) (2026-07-17)
+
+## [5.0.0-rc.1](https://github.com/dynamic-labs/dynamic-auth/compare/v5.0.0-rc.0...v5.0.0-rc.1) (2026-07-17)
+
+
+### ⚠ BREAKING CHANGES
+
+* move legacy embedded wallet to waas upgrade flow to new legacy-embedded-wallet-migration package (#11841)
+* drop default injection of legacy embedded wallet connectors (#11833)
+* remove legacy embedded wallet support (#11979)
+* throw when legacy embedded wallet is detected without migration provider (#11855)
+* remove deprecated eclipse package (#11831)
+* remove deprecated functions and props (#11832)
+
+
+### [4.92.4](https://github.com/dynamic-labs/dynamic-auth/compare/v4.92.3...v4.92.4) (2026-07-16)
+
+
+### Features
+
+* **bitcoin:** per-network address switching and dust-limit send validation [v4] ([#11970](https://github.com/dynamic-labs/dynamic-auth/issues/11970)) ([76a4a9a](https://github.com/dynamic-labs/dynamic-auth/commit/76a4a9a5025d78798ebd1beffe6c0af59d2d029a)), closes [#11896](https://github.com/dynamic-labs/dynamic-auth/issues/11896) [#11800](https://github.com/dynamic-labs/dynamic-auth/issues/11800)
+* **midnight:** per-network addresses in deposit and wallet info views [v4] ([#11949](https://github.com/dynamic-labs/dynamic-auth/issues/11949)) ([978446a](https://github.com/dynamic-labs/dynamic-auth/commit/978446aca8546eb038ba9ed3be0503d10594ee15))
+* **midnight:** resolve wallet address per selected network [v4] ([#11948](https://github.com/dynamic-labs/dynamic-auth/issues/11948)) ([d6f858c](https://github.com/dynamic-labs/dynamic-auth/commit/d6f858c5e35defda7ed73cf97b3fdbe5ed9d131d))
+* set useMetamaskSdk to true by default ([#11926](https://github.com/dynamic-labs/dynamic-auth/issues/11926)) ([75b5a4a](https://github.com/dynamic-labs/dynamic-auth/commit/75b5a4a0fe8b1a375afce145c0b8bdc3ce761117))
+
+
+### Bug Fixes
+
+* **midnight:** align per-network code with the final main iteration [v4] ([#11971](https://github.com/dynamic-labs/dynamic-auth/issues/11971)) ([3ef3ba8](https://github.com/dynamic-labs/dynamic-auth/commit/3ef3ba8c090dfd9e4286b4e51bf350ea5e6feac7))
+* settle social sign-in when captcha is backed out or oauth popup never responds (v4) ([#11956](https://github.com/dynamic-labs/dynamic-auth/issues/11956)) ([ad49477](https://github.com/dynamic-labs/dynamic-auth/commit/ad49477f2acf61a154bb79cbe26b24f803cdb0e2))
+* validate that private key is not empty before upgrading to WaaS ([#11952](https://github.com/dynamic-labs/dynamic-auth/issues/11952)) ([21dfb83](https://github.com/dynamic-labs/dynamic-auth/commit/21dfb83cb29e42b335bc94a0cdd2062cf14a262a))
+
+### [4.92.3](https://github.com/dynamic-labs/dynamic-auth/compare/v4.92.2...v4.92.3) (2026-07-10)
+
+
+### Bug Fixes
+
+* **sdk-react-core:** fix deterministic 'Wallet not found' crash in embedded wallet export (v4) ([#11906](https://github.com/dynamic-labs/dynamic-auth/issues/11906)) ([913ef23](https://github.com/dynamic-labs/dynamic-auth/commit/913ef236b26245488e1cd5db7e874601b65ff0a2)), closes [#11905](https://github.com/dynamic-labs/dynamic-auth/issues/11905) [#11729](https://github.com/dynamic-labs/dynamic-auth/issues/11729)
+
+### [4.92.2](https://github.com/dynamic-labs/dynamic-auth/compare/v4.92.1...v4.92.2) (2026-07-09)
+
+
+### Bug Fixes
+
+* engage captcha during step-up OTP re-auth ([#11879](https://github.com/dynamic-labs/dynamic-auth/issues/11879)) ([585460a](https://github.com/dynamic-labs/dynamic-auth/commit/585460a8976803a8ed0aad16a4a00047bd6c115a))
+* **waas:** gate v1 wallet upgrade on recovery for email-only wallets ([#11897](https://github.com/dynamic-labs/dynamic-auth/issues/11897)) ([5a6f0c6](https://github.com/dynamic-labs/dynamic-auth/commit/5a6f0c6bf3120e59cf502004d09fae56f193e977))
+
+### [4.92.1](https://github.com/dynamic-labs/dynamic-auth/compare/v4.92.0...v4.92.1) (2026-07-09)
+
+
+### Bug Fixes
+
+* **ethereum:** fire in-app-browser redirect on sign for injected EVM wallets that use in-app-browser experience ([#11888](https://github.com/dynamic-labs/dynamic-auth/issues/11888)) ([5116d91](https://github.com/dynamic-labs/dynamic-auth/commit/5116d91ab2c71000a490d72c5d278549d4d8ae9a))
+* **sdk-react-core:** show clear message for Phantom redirect signing failures (v4 backport) ([#11886](https://github.com/dynamic-labs/dynamic-auth/issues/11886)) ([60ac897](https://github.com/dynamic-labs/dynamic-auth/commit/60ac897ba81f7758ccd7a05f97b619785e1f50a7))
+* **social:** use redirect strategy for step-up OAuth on mobile [V4 backport] ([#11881](https://github.com/dynamic-labs/dynamic-auth/issues/11881)) ([42a202e](https://github.com/dynamic-labs/dynamic-auth/commit/42a202e6255de8db73df02eff37c0b10b24fef1a))
+* **solana:** fire in-app-browser redirect on sign and wallet switch ([#11871](https://github.com/dynamic-labs/dynamic-auth/issues/11871)) ([4e2d6b7](https://github.com/dynamic-labs/dynamic-auth/commit/4e2d6b7ac8fdef5bf7c62b8a726ecaef1c6210ec))
+* **solana:** resolve Phantom/Backpack provider collision and Backpack >=0.10.x connect hangs ([#11856](https://github.com/dynamic-labs/dynamic-auth/issues/11856)) ([#11882](https://github.com/dynamic-labs/dynamic-auth/issues/11882)) ([5784aff](https://github.com/dynamic-labs/dynamic-auth/commit/5784aff9641bbc85445fb466f3ab1d6a14331e73))
+
+## [4.92.0](https://github.com/dynamic-labs/dynamic-auth/compare/v4.91.6...v4.92.0) (2026-07-08)
+
+
+### Features
+
+* **captcha:** add Cloudflare Turnstile provider support alongside hCaptcha (v4) ([#11798](https://github.com/dynamic-labs/dynamic-auth/issues/11798)) ([114c770](https://github.com/dynamic-labs/dynamic-auth/commit/114c7702e900d8dedeebe7be867de35d11a93f31))
+
+
+### Bug Fixes
+
+* **ethereum-aa:** resolve kernel client config per wallet (v4) ([#11870](https://github.com/dynamic-labs/dynamic-auth/issues/11870)) ([1b66d79](https://github.com/dynamic-labs/dynamic-auth/commit/1b66d79b4a32b4b6de433b7536bc46e6719224c6))
+* **iframe-setup:** block dangerous URL schemes and verify sender in OPEN_URL ([#11819](https://github.com/dynamic-labs/dynamic-auth/issues/11819)) ([329b27e](https://github.com/dynamic-labs/dynamic-auth/commit/329b27e9fac825916ab227ec8cf93dc343898923))
+* improve social OAuth error messages ([#11837](https://github.com/dynamic-labs/dynamic-auth/issues/11837)) ([8e57c06](https://github.com/dynamic-labs/dynamic-auth/commit/8e57c067c5a89111a32a12fb82e190cf6c46ad67))
+* **react-native-extension:** reject path traversal in downloadFile fileName ([#11816](https://github.com/dynamic-labs/dynamic-auth/issues/11816)) ([9367a56](https://github.com/dynamic-labs/dynamic-auth/commit/9367a56b6daa853d7f7e7f5534261bc68825b239))
+* **sdk-react-core:** display exactly the bytes signed in personal_sign preview ([#11818](https://github.com/dynamic-labs/dynamic-auth/issues/11818)) ([30b9382](https://github.com/dynamic-labs/dynamic-auth/commit/30b93829122f00060cb484aef09a03294c03f651))
+  
 
 ### [4.91.6](https://github.com/dynamic-labs/dynamic-auth/compare/v4.91.5...v4.91.6) (2026-07-03)
 

package/package.cjs

@@ -3,6 +3,6 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var version = "5.0.0-rc.0";
+var version = "5.0.0-rc.2";
 
 exports.version = version;

package/package.js

@@ -1,4 +1,4 @@
 'use client'
-var version = "5.0.0-rc.0";
+var version = "5.0.0-rc.2";
 
 export { version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dynamic-labs/aleo",
-  "version": "5.0.0-rc.0",
+  "version": "5.0.0-rc.2",
   "description": "A React SDK for implementing wallet web3 authentication and authorization to your website.",
   "author": "Dynamic Labs, Inc.",
   "license": "MIT",
@@ -18,19 +18,19 @@
   },
   "homepage": "https://www.dynamic.xyz/",
   "dependencies": {
-    "@dynamic-labs/assert-package-version": "5.0.0-rc.0",
-    "@dynamic-labs-sdk/client": "1.12.1",
-    "@dynamic-labs/sdk-api-core": "0.0.1046",
+    "@dynamic-labs/assert-package-version": "5.0.0-rc.2",
+    "@dynamic-labs-sdk/client": "1.18.0",
+    "@dynamic-labs/sdk-api-core": "0.0.1082",
     "@provablehq/aleo-wallet-adaptor-core": "0.3.0-alpha.3",
     "@provablehq/aleo-wallet-adaptor-shield": "0.3.0-alpha.3",
     "@provablehq/aleo-wallet-standard": "0.3.0-alpha.3",
     "@provablehq/aleo-types": "0.3.0-alpha.3",
-    "@dynamic-labs/logger": "5.0.0-rc.0",
-    "@dynamic-labs/types": "5.0.0-rc.0",
-    "@dynamic-labs/utils": "5.0.0-rc.0",
-    "@dynamic-labs/waas": "5.0.0-rc.0",
-    "@dynamic-labs/wallet-book": "5.0.0-rc.0",
-    "@dynamic-labs/wallet-connector-core": "5.0.0-rc.0"
+    "@dynamic-labs/logger": "5.0.0-rc.2",
+    "@dynamic-labs/types": "5.0.0-rc.2",
+    "@dynamic-labs/utils": "5.0.0-rc.2",
+    "@dynamic-labs/waas": "5.0.0-rc.2",
+    "@dynamic-labs/wallet-book": "5.0.0-rc.2",
+    "@dynamic-labs/wallet-connector-core": "5.0.0-rc.2"
   },
   "peerDependencies": {}
 }

package/src/connectors/DynamicWaasAleoConnector/DynamicWaasAleoConnector.d.ts

@@ -39,7 +39,7 @@ declare const DynamicWaasAleoConnector_base: (abstract new (...args: any[]) => {
     relayUrl?: string | undefined;
     baseClientKeysharesRelayApiUrl?: string | undefined;
     dynamicWaasClient: import("@dynamic-labs-wallet/browser-wallet-client").DynamicWalletClient | undefined;
-    revokeSignedSession: (() => void) | undefined;
+    revokeSignedSession: ((reason?: string | undefined) => void) | undefined;
     chainName: string;
     authMode: "cookie" | "header";
     logger: Logger;
@@ -78,16 +78,31 @@ declare const DynamicWaasAleoConnector_base: (abstract new (...args: any[]) => {
     getWaasWalletClient(traceContext?: import("dist/packages/waas/utils/instrumentation").TraceContext | undefined, { forceRebuild }?: {
         forceRebuild?: boolean | undefined;
     } | undefined): Promise<import("@dynamic-labs-wallet/browser-wallet-client").DynamicWalletClient>;
-    createWalletAccount({ thresholdSignatureScheme, password, bitcoinConfig, }?: {
+    createWalletAccount({ thresholdSignatureScheme, password, bitcoinConfig, businessAccountId, }?: {
         thresholdSignatureScheme?: string | undefined;
         password?: string | undefined;
         bitcoinConfig?: import("@dynamic-labs-wallet/browser-wallet-client").BitcoinConfig | undefined;
+        businessAccountId?: string | undefined;
     } | undefined): Promise<{
         chainName: string;
         accountAddress: string;
         publicKeyHex: string;
         rawPublicKey: string | Uint8Array | undefined;
     }>;
+    addSignerViaReshare({ accountAddress, walletId, businessAccountId, targetSignerIdentity, signerType, password, }: {
+        accountAddress: string;
+        walletId?: string | undefined;
+        businessAccountId: string;
+        targetSignerIdentity: {
+            userId?: string | undefined;
+            identifier?: string | undefined;
+            identifierType?: string | undefined;
+        };
+        signerType?: "endUser" | "server" | undefined;
+        password?: string | undefined;
+    }): Promise<{
+        shareSetId: string;
+    }>;
     importPrivateKey({ privateKey, thresholdSignatureScheme, publicAddressCheck, addressType, legacyWalletId, password, }: {
         privateKey: string;
         thresholdSignatureScheme?: string | undefined;
@@ -104,7 +119,7 @@ declare const DynamicWaasAleoConnector_base: (abstract new (...args: any[]) => {
         expectedAddresses: Record<string, string>;
         coinTypes?: Record<string, number> | undefined;
         password?: string | undefined;
-    }): Promise<import("@dynamic-labs-wallet/browser-wallet-client").MigrateFromFireblocksResponse>;
+    }): Promise<Record<string, unknown>>;
     exportPrivateKey({ accountAddress, displayContainer, password, }?: {
         accountAddress?: string | undefined;
         displayContainer?: HTMLIFrameElement | undefined;
@@ -117,6 +132,21 @@ declare const DynamicWaasAleoConnector_base: (abstract new (...args: any[]) => {
         accountAddress: string;
         password?: string | undefined;
     }): Promise<void>;
+    runBackupLifecycle({ provider, accountAddress, password, performBackup, }: {
+        provider: string;
+        accountAddress: string;
+        password?: string | undefined;
+        performBackup: (prerequisites: {
+            walletClient: import("@dynamic-labs-wallet/browser-wallet-client").DynamicWalletClient;
+            resolvedPassword: string | undefined;
+            signedSessionId: string;
+            sessionPublicKey: string | undefined;
+            traceContext: {
+                traceId: string;
+                startTime: number;
+            };
+        }) => Promise<void>;
+    }): Promise<void>;
     backupKeySharesToGoogleDrive({ accountAddress, password, googleDriveAccessToken, }: {
         accountAddress: string;
         password?: string | undefined;
@@ -157,8 +187,9 @@ declare const DynamicWaasAleoConnector_base: (abstract new (...args: any[]) => {
         accountAddress: string;
         newPassword: string;
     }): Promise<void>;
-    signRawMessage({ accountAddress, message, password, }: {
+    signRawMessage({ accountAddress, context, message, password, }: {
         accountAddress: string;
+        context?: SignMessageContext | undefined;
         message: string;
         password?: string | undefined;
     }): Promise<string>;

package/src/connectors/WaasAleoWalletConnector/WaasAleoWalletConnector.cjs

@@ -84,7 +84,7 @@ class WaasAleoWalletConnector extends walletConnectorCore.WalletConnectorBase {
      * Resolution order:
      *   1. localStorage value (set by `setNetworkId` / `switchNetwork`)
      *   2. First entry in `aleoNetworks` — this is the env's default ordering
-     *      (matches how `TurnkeyEVMWalletConnector.getLastUsedChainId` falls
+     *      (matches how `LegacyEVMEmbeddedWalletConnector.getLastUsedChainId` falls
      *      back to `evmNetworks[0].chainId`). Crucially, if we returned a
      *      different network than the env's default, the widget's network-
      *      mismatch detector would flag the wallet as being on the wrong

package/src/connectors/WaasAleoWalletConnector/WaasAleoWalletConnector.d.ts

@@ -46,7 +46,7 @@ export declare abstract class WaasAleoWalletConnector extends WalletConnectorBas
      * Resolution order:
      *   1. localStorage value (set by `setNetworkId` / `switchNetwork`)
      *   2. First entry in `aleoNetworks` — this is the env's default ordering
-     *      (matches how `TurnkeyEVMWalletConnector.getLastUsedChainId` falls
+     *      (matches how `LegacyEVMEmbeddedWalletConnector.getLastUsedChainId` falls
      *      back to `evmNetworks[0].chainId`). Crucially, if we returned a
      *      different network than the env's default, the widget's network-
      *      mismatch detector would flag the wallet as being on the wrong

package/src/connectors/WaasAleoWalletConnector/WaasAleoWalletConnector.js

@@ -80,7 +80,7 @@ class WaasAleoWalletConnector extends WalletConnectorBase {
      * Resolution order:
      *   1. localStorage value (set by `setNetworkId` / `switchNetwork`)
      *   2. First entry in `aleoNetworks` — this is the env's default ordering
-     *      (matches how `TurnkeyEVMWalletConnector.getLastUsedChainId` falls
+     *      (matches how `LegacyEVMEmbeddedWalletConnector.getLastUsedChainId` falls
      *      back to `evmNetworks[0].chainId`). Crucially, if we returned a
      *      different network than the env's default, the widget's network-
      *      mismatch detector would flag the wallet as being on the wrong