@dynamic-labs/bitcoin 4.69.0 → 4.71.0

package/CHANGELOG.md

@@ -1,4 +1,38 @@
 
+## [4.71.0](https://github.com/dynamic-labs/dynamic-auth/compare/v4.70.0...v4.71.0) (2026-03-24)
+
+
+### Features
+
+* add Tempo chain connector and core type definitions ([#10672](https://github.com/dynamic-labs/dynamic-auth/issues/10672)) ([0439c15](https://github.com/dynamic-labs/dynamic-auth/commit/0439c153238359083b9f226dcd2ebf6d83e26519))
+* add verifySocial method to demo site step-up auth methods ([#10721](https://github.com/dynamic-labs/dynamic-auth/issues/10721)) ([b9ef517](https://github.com/dynamic-labs/dynamic-auth/commit/b9ef5173df3e3ed08f718de49b036ea899dc1832))
+* **demo:** add Tempo chain support to demo app ([#10674](https://github.com/dynamic-labs/dynamic-auth/issues/10674)) ([a5918fc](https://github.com/dynamic-labs/dynamic-auth/commit/a5918fc2ab0821e7f025aa470573129f71de33cc))
+* repurpose verifyWithExternalJwt for elevated access token requests ([#10743](https://github.com/dynamic-labs/dynamic-auth/issues/10743)) ([d1abda0](https://github.com/dynamic-labs/dynamic-auth/commit/d1abda0111d68c78226d30bd0630e6e341dedad9))
+* **sdk:** add Tempo chain support to UI components ([#10673](https://github.com/dynamic-labs/dynamic-auth/issues/10673)) ([aec9fbb](https://github.com/dynamic-labs/dynamic-auth/commit/aec9fbb20754a2935bffe106e7e8715f46be3de7))
+* support multi-chain wallet creation in createWallet ([#10694](https://github.com/dynamic-labs/dynamic-auth/issues/10694)) ([0b6b57f](https://github.com/dynamic-labs/dynamic-auth/commit/0b6b57f4179c35d1f86d1c8c9c40f52cb307c849))
+* wire up elevatedAccessToken for sign, reshare, and refresh operations ([#10737](https://github.com/dynamic-labs/dynamic-auth/issues/10737)) ([f9d5c76](https://github.com/dynamic-labs/dynamic-auth/commit/f9d5c768037aff4f5d7994b6bc6c338621a6ee6b))
+
+## [4.70.0](https://github.com/dynamic-labs/dynamic-auth/compare/v4.69.0...v4.70.0) (2026-03-23)
+
+
+### Features
+
+* add step-up auth for passkey and TOTP device deletion ([#10688](https://github.com/dynamic-labs/dynamic-auth/issues/10688)) ([aeae325](https://github.com/dynamic-labs/dynamic-auth/commit/aeae32551d3e29c59a1d183984f1d9f00f1df2cb))
+* add stepup authMode to useSocialAuth for OAuth step-up authentication ([#10701](https://github.com/dynamic-labs/dynamic-auth/issues/10701)) ([f8ac0e4](https://github.com/dynamic-labs/dynamic-auth/commit/f8ac0e4a6a039e61d1c83e434e2f678981ff3911))
+* add StepUpReauthSocialView and wire social option in step-up reauth UI ([#10703](https://github.com/dynamic-labs/dynamic-auth/issues/10703)) ([a49393f](https://github.com/dynamic-labs/dynamic-auth/commit/a49393f54a8f210f9cbca892339c3012d38cc5c2))
+* add useStepUpSocial and extend step-up auth for OAuth reauthentication ([#10702](https://github.com/dynamic-labs/dynamic-auth/issues/10702)) ([fb7e21d](https://github.com/dynamic-labs/dynamic-auth/commit/fb7e21d47b3e40659ae3b8ca9321efe1d4401e60))
+
+
+### Bug Fixes
+
+* aleo defaulting to testnet when connecting ([#10726](https://github.com/dynamic-labs/dynamic-auth/issues/10726)) ([24b0378](https://github.com/dynamic-labs/dynamic-auth/commit/24b0378a25902f5a134940aeeadc9846058d6fb1))
+* override basic-ftp to >=5.2.0 (CVE-2026-27699) ([#10715](https://github.com/dynamic-labs/dynamic-auth/issues/10715)) ([b68a405](https://github.com/dynamic-labs/dynamic-auth/commit/b68a405453f0ea7e04c14492c195b46fbf25b47e))
+* override minimatch to patched versions (CVE-2026-26996) ([#10718](https://github.com/dynamic-labs/dynamic-auth/issues/10718)) ([a69aaee](https://github.com/dynamic-labs/dynamic-auth/commit/a69aaee0859b7e1292a244abde7084f7c4cfdb72))
+* override simple-git to >=3.32.3 (CVE-2026-28292) ([#10717](https://github.com/dynamic-labs/dynamic-auth/issues/10717)) ([8b86545](https://github.com/dynamic-labs/dynamic-auth/commit/8b865453737e4ff0ef9e8d0fbb99ea5f0359af3b))
+* revert session chaining PR to fix IndexedDB webview crash ([#10710](https://github.com/dynamic-labs/dynamic-auth/issues/10710)) ([c4dfe66](https://github.com/dynamic-labs/dynamic-auth/commit/c4dfe66f73e6b9b7115260b06fd90fc0a167e139)), closes [#10706](https://github.com/dynamic-labs/dynamic-auth/issues/10706) [#10423](https://github.com/dynamic-labs/dynamic-auth/issues/10423) [#10423](https://github.com/dynamic-labs/dynamic-auth/issues/10423) [#10706](https://github.com/dynamic-labs/dynamic-auth/issues/10706) [#10423](https://github.com/dynamic-labs/dynamic-auth/issues/10423)
+* update tar, serialize-javascript, svgo overrides ([#10727](https://github.com/dynamic-labs/dynamic-auth/issues/10727)) ([3c764f7](https://github.com/dynamic-labs/dynamic-auth/commit/3c764f71ce2870075eaa800389719a46d8dac233))
+* upgrade rollup to patched versions (CVE-2026-27606) ([#10724](https://github.com/dynamic-labs/dynamic-auth/issues/10724)) ([735133e](https://github.com/dynamic-labs/dynamic-auth/commit/735133e6d4129cad20ae82b86f9507ab9227b36e))
+
 ## [4.69.0](https://github.com/dynamic-labs/dynamic-auth/compare/v4.68.0...v4.69.0) (2026-03-19)
 
 

package/package.cjs

@@ -3,6 +3,6 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var version = "4.69.0";
+var version = "4.71.0";
 
 exports.version = version;

package/package.js

@@ -1,4 +1,4 @@
 'use client'
-var version = "4.69.0";
+var version = "4.71.0";
 
 export { version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dynamic-labs/bitcoin",
-  "version": "4.69.0",
+  "version": "4.71.0",
   "description": "A React SDK for implementing wallet web3 authentication and authorization to your website.",
   "author": "Dynamic Labs, Inc.",
   "license": "MIT",
@@ -18,23 +18,23 @@
   },
   "homepage": "https://www.dynamic.xyz/",
   "dependencies": {
-    "@dynamic-labs-wallet/browser-wallet-client": "0.0.289",
+    "@dynamic-labs-wallet/browser-wallet-client": "0.0.314",
     "@bitcoinerlab/secp256k1": "1.1.1",
     "@btckit/types": "0.0.19",
-    "@dynamic-labs/sdk-api-core": "0.0.907",
+    "@dynamic-labs/sdk-api-core": "0.0.909",
     "@wallet-standard/app": "1.0.1",
     "@wallet-standard/base": "1.0.1",
     "bitcoinjs-lib": "6.1.5",
     "ecpair": "2.1.0",
     "sats-connect": "4.2.1",
     "jsontokens": "4.0.1",
-    "@dynamic-labs/assert-package-version": "4.69.0",
-    "@dynamic-labs/logger": "4.69.0",
-    "@dynamic-labs/types": "4.69.0",
-    "@dynamic-labs/utils": "4.69.0",
-    "@dynamic-labs/waas": "4.69.0",
-    "@dynamic-labs/wallet-book": "4.69.0",
-    "@dynamic-labs/wallet-connector-core": "4.69.0",
+    "@dynamic-labs/assert-package-version": "4.71.0",
+    "@dynamic-labs/logger": "4.71.0",
+    "@dynamic-labs/types": "4.71.0",
+    "@dynamic-labs/utils": "4.71.0",
+    "@dynamic-labs/waas": "4.71.0",
+    "@dynamic-labs/wallet-book": "4.71.0",
+    "@dynamic-labs/wallet-connector-core": "4.71.0",
     "eventemitter3": "5.0.1"
   },
   "peerDependencies": {}

package/src/connectors/DynamicWaasBitcoinConnector/DynamicWaasBitcoinConnector.cjs

@@ -176,7 +176,7 @@ class DynamicWaasBitcoinConnector extends waas.withDynamicWaas(BitcoinWalletConn
      */
     signPsbt(request) {
         return _tslib.__awaiter(this, void 0, void 0, function* () {
-            var _a, _b, _c;
+            var _a, _b, _c, _d;
             const walletClient = yield this.getWaasWalletClient();
             if (!this.activeAccountAddress) {
                 throw new utils.DynamicError('Active account address is required');
@@ -188,11 +188,15 @@ class DynamicWaasBitcoinConnector extends waas.withDynamicWaas(BitcoinWalletConn
             const mfaToken = yield ((_b = this.getMfaToken) === null || _b === void 0 ? void 0 : _b.call(this, {
                 mfaAction: sdkApiCore.MFAAction.WalletWaasSign,
             }));
+            const elevatedAccessToken = yield ((_c = this.getElevatedAccessToken) === null || _c === void 0 ? void 0 : _c.call(this, {
+                scope: sdkApiCore.TokenScope.Walletsign,
+            }));
             const password = yield this.getPasswordIfNeeded({
                 accountAddress: this.activeAccountAddress,
             });
             const signedTransaction = yield walletClient.signTransaction({
-                authToken: (_c = this.getAuthToken) === null || _c === void 0 ? void 0 : _c.call(this),
+                authToken: (_d = this.getAuthToken) === null || _d === void 0 ? void 0 : _d.call(this),
+                elevatedAccessToken,
                 mfaToken,
                 password,
                 senderAddress: this.activeAccountAddress,
@@ -360,7 +364,7 @@ class DynamicWaasBitcoinConnector extends waas.withDynamicWaas(BitcoinWalletConn
      */
     signMessageWithContext(_a) {
         return _tslib.__awaiter(this, arguments, void 0, function* ({ message, context, }) {
-            var _b, _c, _d;
+            var _b, _c, _d, _e;
             const walletClient = yield this.getWaasWalletClient();
             if (!this.activeAccountAddress) {
                 throw new utils.DynamicError('Active account address is required');
@@ -372,14 +376,18 @@ class DynamicWaasBitcoinConnector extends waas.withDynamicWaas(BitcoinWalletConn
             const mfaToken = yield ((_c = this.getMfaToken) === null || _c === void 0 ? void 0 : _c.call(this, {
                 mfaAction: sdkApiCore.MFAAction.WalletWaasSign,
             }));
+            const elevatedAccessToken = yield ((_d = this.getElevatedAccessToken) === null || _d === void 0 ? void 0 : _d.call(this, {
+                scope: sdkApiCore.TokenScope.Walletsign,
+            }));
             const password = yield this.getPasswordIfNeeded({
                 accountAddress: this.activeAccountAddress,
             });
             const messageString = typeof message === 'string' ? message : message.raw;
             return walletClient.signMessage({
                 accountAddress: this.activeAccountAddress,
-                authToken: (_d = this.getAuthToken) === null || _d === void 0 ? void 0 : _d.call(this),
+                authToken: (_e = this.getAuthToken) === null || _e === void 0 ? void 0 : _e.call(this),
                 context,
+                elevatedAccessToken,
                 message: messageString,
                 mfaToken,
                 password,
@@ -569,7 +577,7 @@ class DynamicWaasBitcoinConnector extends waas.withDynamicWaas(BitcoinWalletConn
      */
     internalSignMessage(message) {
         return _tslib.__awaiter(this, void 0, void 0, function* () {
-            var _a, _b, _c;
+            var _a, _b, _c, _d;
             const walletClient = yield this.getWaasWalletClient();
             if (!this.activeAccountAddress) {
                 throw new utils.DynamicError('Active account address is required');
@@ -581,15 +589,19 @@ class DynamicWaasBitcoinConnector extends waas.withDynamicWaas(BitcoinWalletConn
             const mfaToken = yield ((_b = this.getMfaToken) === null || _b === void 0 ? void 0 : _b.call(this, {
                 mfaAction: sdkApiCore.MFAAction.WalletWaasSign,
             }));
+            const elevatedAccessToken = yield ((_c = this.getElevatedAccessToken) === null || _c === void 0 ? void 0 : _c.call(this, {
+                scope: sdkApiCore.TokenScope.Walletsign,
+            }));
             const password = yield this.getPasswordIfNeeded({
                 accountAddress: this.activeAccountAddress,
             });
             return walletClient.signMessage({
                 accountAddress: this.activeAccountAddress,
-                authToken: (_c = this.getAuthToken) === null || _c === void 0 ? void 0 : _c.call(this),
+                authToken: (_d = this.getAuthToken) === null || _d === void 0 ? void 0 : _d.call(this),
                 bitcoinConfig: {
                     network: yield this.getBitcoinNetworkEnum(),
                 },
+                elevatedAccessToken,
                 message,
                 mfaToken,
                 password,

package/src/connectors/DynamicWaasBitcoinConnector/DynamicWaasBitcoinConnector.d.ts

@@ -1,6 +1,6 @@
 import { BitcoinConfig } from '@dynamic-labs-wallet/browser-wallet-client';
 import { Logger } from '@dynamic-labs/logger';
-import { JwtVerifiedCredential, MFAAction, SignMessageContext } from '@dynamic-labs/sdk-api-core';
+import { JwtVerifiedCredential, MFAAction, SignMessageContext, TokenScope } from '@dynamic-labs/sdk-api-core';
 import { GenericNetwork, IUITransaction, WalletUiUtils } from '@dynamic-labs/types';
 import { BitcoinSignPsbtResponse, Chain, IDynamicWaasConnector, ISendBalanceWalletConnector, InternalWalletConnector } from '@dynamic-labs/wallet-connector-core';
 import type { DynamicWaasBitcoinConnectorProps, ParsedTransaction } from '../../types';
@@ -18,7 +18,7 @@ declare const DynamicWaasBitcoinConnector_base: (abstract new (...args: any[]) =
     getWalletPassword?: import("@dynamic-labs/wallet-connector-core").GetWalletPasswordFn | undefined;
     getAuthToken?: (() => string) | undefined;
     getElevatedAccessToken?: ((props: {
-        scope: import("@dynamic-labs/sdk-api-core").TokenScope;
+        scope: TokenScope;
     }) => Promise<string | undefined>) | undefined;
     environmentId?: string | undefined;
     baseApiUrl?: string | undefined;
@@ -36,7 +36,7 @@ declare const DynamicWaasBitcoinConnector_base: (abstract new (...args: any[]) =
         mfaAction?: MFAAction | undefined;
     } | undefined) => Promise<string | undefined>): void;
     setGetElevatedAccessTokenFunction(getElevatedAccessToken: (params: {
-        scope: import("@dynamic-labs/sdk-api-core").TokenScope;
+        scope: TokenScope;
     }) => Promise<string | undefined>): void;
     setGetWalletPasswordFunction(getWalletPassword: import("@dynamic-labs/wallet-connector-core").GetWalletPasswordFn): void;
     getPasswordIfNeeded({ accountAddress, }: {
@@ -122,11 +122,6 @@ declare const DynamicWaasBitcoinConnector_base: (abstract new (...args: any[]) =
         accountAddress: string;
         newPassword: string;
     }): Promise<void>;
-    /**
-     * Maps Dynamic's networkId to BitcoinNetwork enum for internal WaaS API calls
-     * Uses the current network from getNetwork() to determine the BitcoinNetwork value
-     * @returns The corresponding BitcoinNetwork enum value for the current network
-     */
     signRawMessage({ accountAddress, message, password, }: {
         accountAddress: string;
         message: string;

package/src/connectors/DynamicWaasBitcoinConnector/DynamicWaasBitcoinConnector.js

@@ -2,7 +2,7 @@
 import { __awaiter } from '../../../_virtual/_tslib.js';
 import { networks, Psbt } from 'bitcoinjs-lib';
 import { Logger } from '@dynamic-labs/logger';
-import { MFAAction } from '@dynamic-labs/sdk-api-core';
+import { MFAAction, TokenScope } from '@dynamic-labs/sdk-api-core';
 import { DynamicError } from '@dynamic-labs/utils';
 import { withDynamicWaas } from '@dynamic-labs/waas';
 import { isSameAddress } from '@dynamic-labs/wallet-connector-core';
@@ -172,7 +172,7 @@ class DynamicWaasBitcoinConnector extends withDynamicWaas(BitcoinWalletConnector
      */
     signPsbt(request) {
         return __awaiter(this, void 0, void 0, function* () {
-            var _a, _b, _c;
+            var _a, _b, _c, _d;
             const walletClient = yield this.getWaasWalletClient();
             if (!this.activeAccountAddress) {
                 throw new DynamicError('Active account address is required');
@@ -184,11 +184,15 @@ class DynamicWaasBitcoinConnector extends withDynamicWaas(BitcoinWalletConnector
             const mfaToken = yield ((_b = this.getMfaToken) === null || _b === void 0 ? void 0 : _b.call(this, {
                 mfaAction: MFAAction.WalletWaasSign,
             }));
+            const elevatedAccessToken = yield ((_c = this.getElevatedAccessToken) === null || _c === void 0 ? void 0 : _c.call(this, {
+                scope: TokenScope.Walletsign,
+            }));
             const password = yield this.getPasswordIfNeeded({
                 accountAddress: this.activeAccountAddress,
             });
             const signedTransaction = yield walletClient.signTransaction({
-                authToken: (_c = this.getAuthToken) === null || _c === void 0 ? void 0 : _c.call(this),
+                authToken: (_d = this.getAuthToken) === null || _d === void 0 ? void 0 : _d.call(this),
+                elevatedAccessToken,
                 mfaToken,
                 password,
                 senderAddress: this.activeAccountAddress,
@@ -356,7 +360,7 @@ class DynamicWaasBitcoinConnector extends withDynamicWaas(BitcoinWalletConnector
      */
     signMessageWithContext(_a) {
         return __awaiter(this, arguments, void 0, function* ({ message, context, }) {
-            var _b, _c, _d;
+            var _b, _c, _d, _e;
             const walletClient = yield this.getWaasWalletClient();
             if (!this.activeAccountAddress) {
                 throw new DynamicError('Active account address is required');
@@ -368,14 +372,18 @@ class DynamicWaasBitcoinConnector extends withDynamicWaas(BitcoinWalletConnector
             const mfaToken = yield ((_c = this.getMfaToken) === null || _c === void 0 ? void 0 : _c.call(this, {
                 mfaAction: MFAAction.WalletWaasSign,
             }));
+            const elevatedAccessToken = yield ((_d = this.getElevatedAccessToken) === null || _d === void 0 ? void 0 : _d.call(this, {
+                scope: TokenScope.Walletsign,
+            }));
             const password = yield this.getPasswordIfNeeded({
                 accountAddress: this.activeAccountAddress,
             });
             const messageString = typeof message === 'string' ? message : message.raw;
             return walletClient.signMessage({
                 accountAddress: this.activeAccountAddress,
-                authToken: (_d = this.getAuthToken) === null || _d === void 0 ? void 0 : _d.call(this),
+                authToken: (_e = this.getAuthToken) === null || _e === void 0 ? void 0 : _e.call(this),
                 context,
+                elevatedAccessToken,
                 message: messageString,
                 mfaToken,
                 password,
@@ -565,7 +573,7 @@ class DynamicWaasBitcoinConnector extends withDynamicWaas(BitcoinWalletConnector
      */
     internalSignMessage(message) {
         return __awaiter(this, void 0, void 0, function* () {
-            var _a, _b, _c;
+            var _a, _b, _c, _d;
             const walletClient = yield this.getWaasWalletClient();
             if (!this.activeAccountAddress) {
                 throw new DynamicError('Active account address is required');
@@ -577,15 +585,19 @@ class DynamicWaasBitcoinConnector extends withDynamicWaas(BitcoinWalletConnector
             const mfaToken = yield ((_b = this.getMfaToken) === null || _b === void 0 ? void 0 : _b.call(this, {
                 mfaAction: MFAAction.WalletWaasSign,
             }));
+            const elevatedAccessToken = yield ((_c = this.getElevatedAccessToken) === null || _c === void 0 ? void 0 : _c.call(this, {
+                scope: TokenScope.Walletsign,
+            }));
             const password = yield this.getPasswordIfNeeded({
                 accountAddress: this.activeAccountAddress,
             });
             return walletClient.signMessage({
                 accountAddress: this.activeAccountAddress,
-                authToken: (_c = this.getAuthToken) === null || _c === void 0 ? void 0 : _c.call(this),
+                authToken: (_d = this.getAuthToken) === null || _d === void 0 ? void 0 : _d.call(this),
                 bitcoinConfig: {
                     network: yield this.getBitcoinNetworkEnum(),
                 },
+                elevatedAccessToken,
                 message,
                 mfaToken,
                 password,