@dynamic-labs/sdk-react-core 4.87.1 → 4.88.0

package/CHANGELOG.md

@@ -1,4 +1,24 @@
 
+## [4.88.0](https://github.com/dynamic-labs/dynamic-auth/compare/v4.87.2...v4.88.0) (2026-06-04)
+
+
+### Features
+
+* **waas:** log out on iframe 401 ([#11456](https://github.com/dynamic-labs/dynamic-auth/issues/11456)) ([81b0161](https://github.com/dynamic-labs/dynamic-auth/commit/81b01617810af8f7f996fdbf406e020b9f98272b))
+
+
+### Bug Fixes
+
+* **starknet:** zero-pad addresses returned by wallet connectors ([#11303](https://github.com/dynamic-labs/dynamic-auth/issues/11303)) ([ef5cda5](https://github.com/dynamic-labs/dynamic-auth/commit/ef5cda5a9933443195b3bd336db8947c2ec050b7))
+
+### [4.87.2](https://github.com/dynamic-labs/dynamic-auth/compare/v4.87.1...v4.87.2) (2026-06-03)
+
+
+### Bug Fixes
+
+* allow for using v2 zerodev projects ([#11449](https://github.com/dynamic-labs/dynamic-auth/issues/11449)) ([9242698](https://github.com/dynamic-labs/dynamic-auth/commit/9242698670db92b03ad1afc776e674ec9a7e7e54))
+* e2e: ensure MFA item is detached before logout ([#11452](https://github.com/dynamic-labs/dynamic-auth/issues/11452)) ([5a4c67e](https://github.com/dynamic-labs/dynamic-auth/commit/5a4c67e93b66a548346c1065fb373c675f0054a0))
+
 ### [4.87.1](https://github.com/dynamic-labs/dynamic-auth/compare/v4.87.0...v4.87.1) (2026-06-03)
 
 

package/package.cjs

@@ -3,11 +3,11 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var version = "4.87.1";
+var version = "4.88.0";
 var dependencies = {
 	"@dynamic-labs/sdk-api-core": "0.0.1015",
-	"@dynamic-labs-sdk/client": "1.5.0",
-	"@dynamic-labs-wallet/browser-wallet-client": "1.0.13",
+	"@dynamic-labs-sdk/client": "1.7.0",
+	"@dynamic-labs-wallet/browser-wallet-client": "1.0.16",
 	"@dynamic-labs-wallet/forward-mpc-client": "0.10.1",
 	"@hcaptcha/react-hcaptcha": "1.4.4",
 	"@thumbmarkjs/thumbmarkjs": "0.16.0",

package/package.js

@@ -1,9 +1,9 @@
 'use client'
-var version = "4.87.1";
+var version = "4.88.0";
 var dependencies = {
 	"@dynamic-labs/sdk-api-core": "0.0.1015",
-	"@dynamic-labs-sdk/client": "1.5.0",
-	"@dynamic-labs-wallet/browser-wallet-client": "1.0.13",
+	"@dynamic-labs-sdk/client": "1.7.0",
+	"@dynamic-labs-wallet/browser-wallet-client": "1.0.16",
 	"@dynamic-labs-wallet/forward-mpc-client": "0.10.1",
 	"@hcaptcha/react-hcaptcha": "1.4.4",
 	"@thumbmarkjs/thumbmarkjs": "0.16.0",

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "@dynamic-labs/sdk-react-core",
-  "version": "4.87.1",
+  "version": "4.88.0",
   "dependencies": {
     "@dynamic-labs/sdk-api-core": "0.0.1015",
-    "@dynamic-labs-sdk/client": "1.5.0",
-    "@dynamic-labs-wallet/browser-wallet-client": "1.0.13",
+    "@dynamic-labs-sdk/client": "1.7.0",
+    "@dynamic-labs-wallet/browser-wallet-client": "1.0.16",
     "@dynamic-labs-wallet/forward-mpc-client": "0.10.1",
     "@hcaptcha/react-hcaptcha": "1.4.4",
     "@thumbmarkjs/thumbmarkjs": "0.16.0",
@@ -17,17 +17,17 @@
     "yup": "0.32.11",
     "react-international-phone": "4.5.0",
     "bs58": "5.0.0",
-    "@dynamic-labs/assert-package-version": "4.87.1",
-    "@dynamic-labs/iconic": "4.87.1",
-    "@dynamic-labs/locale": "4.87.1",
-    "@dynamic-labs/logger": "4.87.1",
-    "@dynamic-labs/multi-wallet": "4.87.1",
-    "@dynamic-labs/rpc-providers": "4.87.1",
-    "@dynamic-labs/store": "4.87.1",
-    "@dynamic-labs/types": "4.87.1",
-    "@dynamic-labs/utils": "4.87.1",
-    "@dynamic-labs/wallet-book": "4.87.1",
-    "@dynamic-labs/wallet-connector-core": "4.87.1",
+    "@dynamic-labs/assert-package-version": "4.88.0",
+    "@dynamic-labs/iconic": "4.88.0",
+    "@dynamic-labs/locale": "4.88.0",
+    "@dynamic-labs/logger": "4.88.0",
+    "@dynamic-labs/multi-wallet": "4.88.0",
+    "@dynamic-labs/rpc-providers": "4.88.0",
+    "@dynamic-labs/store": "4.88.0",
+    "@dynamic-labs/types": "4.88.0",
+    "@dynamic-labs/utils": "4.88.0",
+    "@dynamic-labs/wallet-book": "4.88.0",
+    "@dynamic-labs/wallet-connector-core": "4.88.0",
     "eventemitter3": "5.0.1"
   },
   "devDependencies": {

package/src/lib/context/DynamicContext/DynamicContext.cjs

@@ -346,7 +346,12 @@ const InnerDynamicContextProvider = (props) => {
     //selected wallet to perform an action (become primary, unlink, etc)
     const [selectedWalletWithAction, setSelectedWalletWithAction] = React.useState(null);
     useSetWalletConnectorVerifiedCredentials.useSetWalletConnectorVerifiedCredentials(user !== null && user !== void 0 ? user : userWithMissingInfo, walletConnectorOptions);
-    useSetWalletConnectorFetchers.useSetWalletConnectorFetchers(walletConnectorOptions, environmentId, projectSettings);
+    // handleLogOutWithReason is created later in this component (via useHandleLogout),
+    // but useSetWalletConnectorFetchers needs a logout callback now. Bridge the two
+    // with a ref: the WaaS connector only invokes onUnauthorized at runtime (when
+    // the iframe reports a 401), by which point the ref is populated.
+    const handleLogOutWithReasonRef = React.useRef();
+    useSetWalletConnectorFetchers.useSetWalletConnectorFetchers(walletConnectorOptions, environmentId, projectSettings, () => { var _a; return (_a = handleLogOutWithReasonRef.current) === null || _a === void 0 ? void 0 : _a.call(handleLogOutWithReasonRef, 'session-refresh-unauthorized'); });
     const { primaryWallet, showQrcodeModal, secondaryWallets, setPrimaryWallet, setShowQrcodeModal, wallets: linkedOrConnectedWallets, } = useWalletConnectors.useWalletConnectors({
         canHaveMultipleWalletsConnected: multiWallet || isBridgeFlow,
         connectedWallets,
@@ -402,6 +407,9 @@ const InnerDynamicContextProvider = (props) => {
         environmentId,
         handleLogOutWithReason,
     });
+    // Keep the ref current so the WaaS connector's onUnauthorized callback always
+    // calls the latest logout handler.
+    handleLogOutWithReasonRef.current = handleLogOutWithReason;
     // For some reason, calling useNonce in useGlobalLoading causes errors
     const nonce$1 = nonce.useNonce();
     const sdkHasLoaded = useGlobalLoading.useGlobalLoading({

package/src/lib/context/DynamicContext/DynamicContext.js

@@ -1,7 +1,7 @@
 'use client'
 import { __awaiter } from '../../../../_virtual/_tslib.js';
 import { jsx, jsxs } from 'react/jsx-runtime';
-import { createContext, useEffect, useState, useMemo, useCallback } from 'react';
+import { createContext, useEffect, useState, useMemo, useRef, useCallback } from 'react';
 import { I18nextProvider } from 'react-i18next';
 import { getIconicSpriteUrl } from '@dynamic-labs/iconic';
 import { Logger } from '@dynamic-labs/logger';
@@ -342,7 +342,12 @@ const InnerDynamicContextProvider = (props) => {
     //selected wallet to perform an action (become primary, unlink, etc)
     const [selectedWalletWithAction, setSelectedWalletWithAction] = useState(null);
     useSetWalletConnectorVerifiedCredentials(user !== null && user !== void 0 ? user : userWithMissingInfo, walletConnectorOptions);
-    useSetWalletConnectorFetchers(walletConnectorOptions, environmentId, projectSettings);
+    // handleLogOutWithReason is created later in this component (via useHandleLogout),
+    // but useSetWalletConnectorFetchers needs a logout callback now. Bridge the two
+    // with a ref: the WaaS connector only invokes onUnauthorized at runtime (when
+    // the iframe reports a 401), by which point the ref is populated.
+    const handleLogOutWithReasonRef = useRef();
+    useSetWalletConnectorFetchers(walletConnectorOptions, environmentId, projectSettings, () => { var _a; return (_a = handleLogOutWithReasonRef.current) === null || _a === void 0 ? void 0 : _a.call(handleLogOutWithReasonRef, 'session-refresh-unauthorized'); });
     const { primaryWallet, showQrcodeModal, secondaryWallets, setPrimaryWallet, setShowQrcodeModal, wallets: linkedOrConnectedWallets, } = useWalletConnectors({
         canHaveMultipleWalletsConnected: multiWallet || isBridgeFlow,
         connectedWallets,
@@ -398,6 +403,9 @@ const InnerDynamicContextProvider = (props) => {
         environmentId,
         handleLogOutWithReason,
     });
+    // Keep the ref current so the WaaS connector's onUnauthorized callback always
+    // calls the latest logout handler.
+    handleLogOutWithReasonRef.current = handleLogOutWithReason;
     // For some reason, calling useNonce in useGlobalLoading causes errors
     const nonce = useNonce();
     const sdkHasLoaded = useGlobalLoading({

package/src/lib/utils/hooks/useDynamicWaas/useDynamicWaas.cjs

@@ -54,7 +54,7 @@ var normalizeWaasChainName = require('./normalizeWaasChainName.cjs');
 var normalizeWalletRequirements = require('./normalizeWalletRequirements.cjs');
 
 const dynamicWaasKey = 'dynamicwaas';
-const configWaasWalletConnector = ({ walletConnector, environmentId, apiBaseUrl, relayUrl, baseClientKeysharesRelayApiUrl, authMode = 'header', getSignedSessionId, getMfaToken, getWalletPassword, getSvmGasSponsorshipEnabled = () => false, getElevatedAccessToken, }) => {
+const configWaasWalletConnector = ({ walletConnector, environmentId, apiBaseUrl, relayUrl, baseClientKeysharesRelayApiUrl, authMode = 'header', getSignedSessionId, getMfaToken, getWalletPassword, getSvmGasSponsorshipEnabled = () => false, getElevatedAccessToken, onUnauthorized, }) => {
     var _a;
     walletConnector.setEnvironmentId(environmentId);
     walletConnector.setBaseApiUrl((_a = (apiBaseUrl || apiUrl.DEFAULT_WAAS_API_URL)) === null || _a === void 0 ? void 0 : _a.replace('/api/v0', ''));
@@ -78,6 +78,10 @@ const configWaasWalletConnector = ({ walletConnector, environmentId, apiBaseUrl,
     if (getWalletPassword) {
         walletConnector.setGetWalletPasswordFunction(getWalletPassword);
     }
+    // Log the user out when the iframe reports a 401 (e.g. token forcibly revoked)
+    if (onUnauthorized) {
+        walletConnector.setOnUnauthorizedFunction(onUnauthorized);
+    }
     // Sync SVM gas sponsorship setting for SOL connectors
     const isSolConnector = walletConnector.connectedChain === 'SOL';
     const supportsSponsorshipSetting = 'setSvmGasSponsorshipEnabled' in walletConnector;
@@ -88,7 +92,7 @@ const configWaasWalletConnector = ({ walletConnector, environmentId, apiBaseUrl,
 };
 const useDynamicWaas = () => {
     var _a, _b, _c, _d, _e, _f, _g;
-    const { setShowAuthFlow } = useInternalDynamicContext.useInternalDynamicContext();
+    const { setShowAuthFlow, handleLogOutWithReason } = useInternalDynamicContext.useInternalDynamicContext();
     const { addedWalletsIds, userWallets } = UserWalletsContext.useInternalUserWallets();
     const user = useUser.useUser();
     const apiBaseUrl = dynamicContextProps.useApiBaseUrl();
@@ -139,6 +143,7 @@ const useDynamicWaas = () => {
             getSignedSessionId: generateChainingSignature.generateChainingSignature,
             getSvmGasSponsorshipEnabled: () => svmGasSponsorshipEnabledRef.current,
             getWalletPassword,
+            onUnauthorized: () => handleLogOutWithReason('session-refresh-unauthorized'),
             relayUrl: relayUrl !== null && relayUrl !== void 0 ? relayUrl : '',
             walletConnector,
         });
@@ -152,6 +157,7 @@ const useDynamicWaas = () => {
         getElevatedAccessToken,
         getMfaToken,
         getWalletPassword,
+        handleLogOutWithReason,
         relayUrl,
         baseClientKeysharesRelayApiUrl,
     ]);

package/src/lib/utils/hooks/useDynamicWaas/useDynamicWaas.d.ts

@@ -12,7 +12,7 @@ export type WalletCreationRequirement = {
         network?: string;
     };
 };
-export declare const configWaasWalletConnector: ({ walletConnector, environmentId, apiBaseUrl, relayUrl, baseClientKeysharesRelayApiUrl, authMode, getSignedSessionId, getMfaToken, getWalletPassword, getSvmGasSponsorshipEnabled, getElevatedAccessToken, }: {
+export declare const configWaasWalletConnector: ({ walletConnector, environmentId, apiBaseUrl, relayUrl, baseClientKeysharesRelayApiUrl, authMode, getSignedSessionId, getMfaToken, getWalletPassword, getSvmGasSponsorshipEnabled, getElevatedAccessToken, onUnauthorized, }: {
     walletConnector: IDynamicWaasConnector;
     environmentId: string;
     apiBaseUrl: string;
@@ -28,6 +28,7 @@ export declare const configWaasWalletConnector: ({ walletConnector, environmentI
     getElevatedAccessToken?: (params: {
         scope: TokenScope;
     }) => Promise<string | undefined>;
+    onUnauthorized?: () => void | Promise<void>;
 }) => IDynamicWaasConnector;
 export declare const useDynamicWaas: () => {
     areWalletsReadyForSettings: () => boolean;

package/src/lib/utils/hooks/useDynamicWaas/useDynamicWaas.js

@@ -50,7 +50,7 @@ import { normalizeWaasChainName } from './normalizeWaasChainName.js';
 import { normalizeWalletRequirements } from './normalizeWalletRequirements.js';
 
 const dynamicWaasKey = 'dynamicwaas';
-const configWaasWalletConnector = ({ walletConnector, environmentId, apiBaseUrl, relayUrl, baseClientKeysharesRelayApiUrl, authMode = 'header', getSignedSessionId, getMfaToken, getWalletPassword, getSvmGasSponsorshipEnabled = () => false, getElevatedAccessToken, }) => {
+const configWaasWalletConnector = ({ walletConnector, environmentId, apiBaseUrl, relayUrl, baseClientKeysharesRelayApiUrl, authMode = 'header', getSignedSessionId, getMfaToken, getWalletPassword, getSvmGasSponsorshipEnabled = () => false, getElevatedAccessToken, onUnauthorized, }) => {
     var _a;
     walletConnector.setEnvironmentId(environmentId);
     walletConnector.setBaseApiUrl((_a = (apiBaseUrl || DEFAULT_WAAS_API_URL)) === null || _a === void 0 ? void 0 : _a.replace('/api/v0', ''));
@@ -74,6 +74,10 @@ const configWaasWalletConnector = ({ walletConnector, environmentId, apiBaseUrl,
     if (getWalletPassword) {
         walletConnector.setGetWalletPasswordFunction(getWalletPassword);
     }
+    // Log the user out when the iframe reports a 401 (e.g. token forcibly revoked)
+    if (onUnauthorized) {
+        walletConnector.setOnUnauthorizedFunction(onUnauthorized);
+    }
     // Sync SVM gas sponsorship setting for SOL connectors
     const isSolConnector = walletConnector.connectedChain === 'SOL';
     const supportsSponsorshipSetting = 'setSvmGasSponsorshipEnabled' in walletConnector;
@@ -84,7 +88,7 @@ const configWaasWalletConnector = ({ walletConnector, environmentId, apiBaseUrl,
 };
 const useDynamicWaas = () => {
     var _a, _b, _c, _d, _e, _f, _g;
-    const { setShowAuthFlow } = useInternalDynamicContext();
+    const { setShowAuthFlow, handleLogOutWithReason } = useInternalDynamicContext();
     const { addedWalletsIds, userWallets } = useInternalUserWallets();
     const user = useUser();
     const apiBaseUrl = useApiBaseUrl();
@@ -135,6 +139,7 @@ const useDynamicWaas = () => {
             getSignedSessionId: generateChainingSignature,
             getSvmGasSponsorshipEnabled: () => svmGasSponsorshipEnabledRef.current,
             getWalletPassword,
+            onUnauthorized: () => handleLogOutWithReason('session-refresh-unauthorized'),
             relayUrl: relayUrl !== null && relayUrl !== void 0 ? relayUrl : '',
             walletConnector,
         });
@@ -148,6 +153,7 @@ const useDynamicWaas = () => {
         getElevatedAccessToken,
         getMfaToken,
         getWalletPassword,
+        handleLogOutWithReason,
         relayUrl,
         baseClientKeysharesRelayApiUrl,
     ]);

package/src/lib/utils/hooks/useSetWalletConnectorFetchers/useSetWalletConnectorFetchers.cjs

@@ -117,7 +117,11 @@ require('../../../store/state/multichainBalances.cjs');
 require('@dynamic-labs/store');
 require('../../../shared/utils/functions/getInitialUrl/getInitialUrl.cjs');
 
-const useSetWalletConnectorFetchers = (walletOptions, environmentId, projectSettings) => {
+const useSetWalletConnectorFetchers = (walletOptions, environmentId, projectSettings, 
+// Logs the user out when the iframe reports a 401. Passed in (rather than read
+// from context) because this hook runs inside DynamicContextProvider itself,
+// where the context value isn't available to consume.
+onUnauthorized) => {
     var _a, _b, _c;
     const apiBaseUrl = dynamicContextProps.useApiBaseUrl();
     const { registerEmbeddedWalletSessionKey, removeSessionKey } = useEmbeddedWalletSessionKeys.useEmbeddedWalletSessionKeys({ environmentId, projectSettings });
@@ -142,6 +146,7 @@ const useSetWalletConnectorFetchers = (walletOptions, environmentId, projectSett
                 getMfaToken,
                 getSignedSessionId: generateChainingSignature.generateChainingSignature,
                 getSvmGasSponsorshipEnabled: () => svmGasSponsorshipEnabledRef.current,
+                onUnauthorized,
                 relayUrl: (_e = (_d = (_c = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk) === null || _c === void 0 ? void 0 : _c.waas) === null || _d === void 0 ? void 0 : _d.relayUrl) !== null && _e !== void 0 ? _e : '',
                 walletConnector: walletOption.walletConnector,
             });

package/src/lib/utils/hooks/useSetWalletConnectorFetchers/useSetWalletConnectorFetchers.d.ts

@@ -1,3 +1,3 @@
 import { ProjectSettings } from '@dynamic-labs/sdk-api-core';
 import { WalletOption } from '../../../shared';
-export declare const useSetWalletConnectorFetchers: (walletOptions: WalletOption[] | undefined, environmentId: string, projectSettings: ProjectSettings | undefined) => void;
+export declare const useSetWalletConnectorFetchers: (walletOptions: WalletOption[] | undefined, environmentId: string, projectSettings: ProjectSettings | undefined, onUnauthorized?: () => void | Promise<void>) => void;

package/src/lib/utils/hooks/useSetWalletConnectorFetchers/useSetWalletConnectorFetchers.js

@@ -113,7 +113,11 @@ import '../../../store/state/multichainBalances.js';
 import '@dynamic-labs/store';
 import '../../../shared/utils/functions/getInitialUrl/getInitialUrl.js';
 
-const useSetWalletConnectorFetchers = (walletOptions, environmentId, projectSettings) => {
+const useSetWalletConnectorFetchers = (walletOptions, environmentId, projectSettings, 
+// Logs the user out when the iframe reports a 401. Passed in (rather than read
+// from context) because this hook runs inside DynamicContextProvider itself,
+// where the context value isn't available to consume.
+onUnauthorized) => {
     var _a, _b, _c;
     const apiBaseUrl = useApiBaseUrl();
     const { registerEmbeddedWalletSessionKey, removeSessionKey } = useEmbeddedWalletSessionKeys({ environmentId, projectSettings });
@@ -138,6 +142,7 @@ const useSetWalletConnectorFetchers = (walletOptions, environmentId, projectSett
                 getMfaToken,
                 getSignedSessionId: generateChainingSignature,
                 getSvmGasSponsorshipEnabled: () => svmGasSponsorshipEnabledRef.current,
+                onUnauthorized,
                 relayUrl: (_e = (_d = (_c = projectSettings === null || projectSettings === void 0 ? void 0 : projectSettings.sdk) === null || _c === void 0 ? void 0 : _c.waas) === null || _d === void 0 ? void 0 : _d.relayUrl) !== null && _e !== void 0 ? _e : '',
                 walletConnector: walletOption.walletConnector,
             });

package/src/lib/utils/hooks/useSyncDynamicWaas/useSyncDynamicWaas.cjs

@@ -153,6 +153,7 @@ const useSyncDynamicWaas = () => {
     const { mutate: processSettings, isLoading: isProcessingSettings } = useWalletSettingsProcessor();
     const { initDelegationProcess, shouldPromptWalletDelegation } = useWalletDelegation.useWalletDelegation();
     const user = useOnboardingCompleteUser.useOnboardingCompleteUser();
+    const environmentId = dynamicContextProps.useEnvironmentId();
     const triggeredCreate = React.useRef(false);
     const triggeredSettingsProcessing = React.useRef(false);
     const hasWaasInitializedRef = React.useRef(false);
@@ -233,11 +234,22 @@ const useSyncDynamicWaas = () => {
                     ? '[useSyncDynamicWaas] session id changed, initializing waas'
                     : '[useSyncDynamicWaas] waas not initialized, initializing waas');
                 initializingWaasRef.current = true;
+                const initStartedAt = Date.now();
                 initializeWaas()
                     .then(() => {
                     logger.logger.debug('[useSyncDynamicWaas] waas initialized');
                     hasWaasInitializedRef.current = true;
                     sessionIdRef.current = sessionId;
+                    // Host-observed time to get the WaaS iframe/client ready. Ships to
+                    // Datadog (sliced by @version + environmentId) as the host-side
+                    // companion to the iframe app's `waas_iframe_*` timing — used to
+                    // quantify the per-page cost the bwc 0.x -> 1.x rewrite introduced.
+                    logger.logger.instrument('WaaS host init', {
+                        environmentId,
+                        key: 'waas_host_init',
+                        time: Date.now() - initStartedAt,
+                        userId,
+                    });
                 })
                     .catch((error) => {
                     logger.logger.warn('[useSyncDynamicWaas] Error initializing waas', {
@@ -245,6 +257,13 @@ const useSyncDynamicWaas = () => {
                         sessionId,
                         userId,
                     });
+                    logger.logger.instrument('WaaS host init failed', {
+                        environmentId,
+                        key: 'waas_host_init_failed',
+                        reason: error instanceof Error ? error.message : String(error),
+                        time: Date.now() - initStartedAt,
+                        userId,
+                    });
                 })
                     .finally(() => {
                     initializingWaasRef.current = false;

package/src/lib/utils/hooks/useSyncDynamicWaas/useSyncDynamicWaas.js

@@ -149,6 +149,7 @@ const useSyncDynamicWaas = () => {
     const { mutate: processSettings, isLoading: isProcessingSettings } = useWalletSettingsProcessor();
     const { initDelegationProcess, shouldPromptWalletDelegation } = useWalletDelegation();
     const user = useOnboardingCompleteUser();
+    const environmentId = useEnvironmentId();
     const triggeredCreate = useRef(false);
     const triggeredSettingsProcessing = useRef(false);
     const hasWaasInitializedRef = useRef(false);
@@ -229,11 +230,22 @@ const useSyncDynamicWaas = () => {
                     ? '[useSyncDynamicWaas] session id changed, initializing waas'
                     : '[useSyncDynamicWaas] waas not initialized, initializing waas');
                 initializingWaasRef.current = true;
+                const initStartedAt = Date.now();
                 initializeWaas()
                     .then(() => {
                     logger.debug('[useSyncDynamicWaas] waas initialized');
                     hasWaasInitializedRef.current = true;
                     sessionIdRef.current = sessionId;
+                    // Host-observed time to get the WaaS iframe/client ready. Ships to
+                    // Datadog (sliced by @version + environmentId) as the host-side
+                    // companion to the iframe app's `waas_iframe_*` timing — used to
+                    // quantify the per-page cost the bwc 0.x -> 1.x rewrite introduced.
+                    logger.instrument('WaaS host init', {
+                        environmentId,
+                        key: 'waas_host_init',
+                        time: Date.now() - initStartedAt,
+                        userId,
+                    });
                 })
                     .catch((error) => {
                     logger.warn('[useSyncDynamicWaas] Error initializing waas', {
@@ -241,6 +253,13 @@ const useSyncDynamicWaas = () => {
                         sessionId,
                         userId,
                     });
+                    logger.instrument('WaaS host init failed', {
+                        environmentId,
+                        key: 'waas_host_init_failed',
+                        reason: error instanceof Error ? error.message : String(error),
+                        time: Date.now() - initStartedAt,
+                        userId,
+                    });
                 })
                     .finally(() => {
                     initializingWaasRef.current = false;

package/src/lib/utils/hooks/useWalletBackup/types.d.ts

@@ -15,4 +15,16 @@ export type CloudProviderBackupOptions = {
     provider: CloudBackupProvider;
     accountAddress: string;
     password?: string;
+    /**
+     * Optional consumer-supplied Google Drive access token. When provided (and
+     * already granted Drive scopes), the SDK uses it directly instead of falling
+     * back to the stored OAuth token — avoiding a second Google consent prompt.
+     *
+     * Especially useful for consumers using external auth: the user's Google
+     * account isn't linked in Dynamic, so there's no stored OAuth token to fall
+     * back on — they obtain a Drive-scoped token themselves and pass it here.
+     *
+     * Only applies to the GoogleDrive provider.
+     */
+    googleDriveAccessToken?: string;
 };

package/src/lib/utils/hooks/useWalletBackup/useWalletBackup.cjs

@@ -292,7 +292,7 @@ const useWalletBackup = (options) => {
         return true;
     }, [isGoogleLinked]);
     const backupToCloudProviderCore = React.useCallback((options, walletToBackup) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
-        const { provider, password } = options;
+        const { provider, password, googleDriveAccessToken } = options;
         try {
             const waasConnector = getWaasWalletConnector(walletToBackup.chain);
             if (!waasConnector) {
@@ -304,6 +304,7 @@ const useWalletBackup = (options) => {
             if (provider === types.CloudBackupProvider.GoogleDrive) {
                 yield waasConnector.backupKeySharesToGoogleDrive({
                     accountAddress: walletToBackup.address,
+                    googleDriveAccessToken,
                     password,
                 });
             }

package/src/lib/utils/hooks/useWalletBackup/useWalletBackup.js

@@ -288,7 +288,7 @@ const useWalletBackup = (options) => {
         return true;
     }, [isGoogleLinked]);
     const backupToCloudProviderCore = useCallback((options, walletToBackup) => __awaiter(void 0, void 0, void 0, function* () {
-        const { provider, password } = options;
+        const { provider, password, googleDriveAccessToken } = options;
         try {
             const waasConnector = getWaasWalletConnector(walletToBackup.chain);
             if (!waasConnector) {
@@ -300,6 +300,7 @@ const useWalletBackup = (options) => {
             if (provider === CloudBackupProvider.GoogleDrive) {
                 yield waasConnector.backupKeySharesToGoogleDrive({
                     accountAddress: walletToBackup.address,
+                    googleDriveAccessToken,
                     password,
                 });
             }