@dynamic-labs/solana-core 4.96.3 → 4.97.0

package/CHANGELOG.md

@@ -1,4 +1,26 @@
 
+## [4.97.0](https://github.com/dynamic-labs/dynamic-auth/compare/v4.96.4...v4.97.0) (2026-08-27)
+
+
+### Features
+
+* **screening:** connected-wallet transaction screening [v4 backport] (DYNT-1663) ([#12284](https://github.com/dynamic-labs/dynamic-auth/issues/12284)) ([294adba](https://github.com/dynamic-labs/dynamic-auth/commit/294adba7dba8f321f3b1e8413f73545701e51252)), closes [#12160](https://github.com/dynamic-labs/dynamic-auth/issues/12160) [#12167](https://github.com/dynamic-labs/dynamic-auth/issues/12167) [#12168](https://github.com/dynamic-labs/dynamic-auth/issues/12168) [#12169](https://github.com/dynamic-labs/dynamic-auth/issues/12169) [#12172](https://github.com/dynamic-labs/dynamic-auth/issues/12172)
+
+
+### Bug Fixes
+
+* **screening:** wire connected-wallet screening into the Send Balance UI (DYNT-1663) ([#12289](https://github.com/dynamic-labs/dynamic-auth/issues/12289)) ([1587cd8](https://github.com/dynamic-labs/dynamic-auth/commit/1587cd833370e18fa383f942521500e4c1576390))
+
+### [4.96.4](https://github.com/dynamic-labs/dynamic-auth/compare/v4.96.3...v4.96.4) (2026-08-26)
+
+
+### Bug Fixes
+
+* remediate high-severity tar, nanoid and js-yaml vulnerabilities (v4) ([#12269](https://github.com/dynamic-labs/dynamic-auth/issues/12269)) ([15a32fe](https://github.com/dynamic-labs/dynamic-auth/commit/15a32fe023038efaa3298d6792997a86b5f0cb0b))
+* **transaction-card:** use walletConnector prop for network/fee instead of primaryWallet [v4 backport] ([#12065](https://github.com/dynamic-labs/dynamic-auth/issues/12065)) ([699c42b](https://github.com/dynamic-labs/dynamic-auth/commit/699c42b876eba7e1b0129eda27fa096ba7e567fc)), closes [#12063](https://github.com/dynamic-labs/dynamic-auth/issues/12063)
+* **waas-svm:** instrument sponsorship retry attempts [v4 backport] ([#12282](https://github.com/dynamic-labs/dynamic-auth/issues/12282)) ([b2f2392](https://github.com/dynamic-labs/dynamic-auth/commit/b2f23929093ebb48214c1ddb65b3e56a58e9f8da))
+* **wallet-connect:** reopen WalletConnect IndexedDB when the browser closes the connection (v4 backport) ([#12263](https://github.com/dynamic-labs/dynamic-auth/issues/12263)) ([4d0105d](https://github.com/dynamic-labs/dynamic-auth/commit/4d0105d2343c5bf75f89382e4be01b75413569e7))
+
 ### [4.96.3](https://github.com/dynamic-labs/dynamic-auth/compare/v4.96.2...v4.96.3) (2026-08-19)
 
 

package/package.cjs

@@ -3,6 +3,6 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var version = "4.96.3";
+var version = "4.97.0";
 
 exports.version = version;

package/package.js

@@ -1,4 +1,4 @@
 'use client'
-var version = "4.96.3";
+var version = "4.97.0";
 
 export { version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dynamic-labs/solana-core",
-  "version": "4.96.3",
+  "version": "4.97.0",
   "description": "Core package for utilities and types for solana",
   "author": "Dynamic Labs, Inc.",
   "license": "MIT",
@@ -19,14 +19,14 @@
   "homepage": "https://www.dynamic.xyz/",
   "dependencies": {
     "@dynamic-labs/sdk-api-core": "0.12.0",
-    "@dynamic-labs/utils": "4.96.3",
+    "@dynamic-labs/utils": "4.97.0",
     "@solana/web3.js": "1.98.1",
     "@solana/spl-token": "0.4.14",
-    "@dynamic-labs/assert-package-version": "4.96.3",
-    "@dynamic-labs/rpc-providers": "4.96.3",
-    "@dynamic-labs/types": "4.96.3",
-    "@dynamic-labs/wallet-book": "4.96.3",
-    "@dynamic-labs/wallet-connector-core": "4.96.3",
+    "@dynamic-labs/assert-package-version": "4.97.0",
+    "@dynamic-labs/rpc-providers": "4.97.0",
+    "@dynamic-labs/types": "4.97.0",
+    "@dynamic-labs/wallet-book": "4.97.0",
+    "@dynamic-labs/wallet-connector-core": "4.97.0",
     "eventemitter3": "5.0.1"
   },
   "peerDependencies": {}

package/src/connector/SolanaWalletConnector.cjs

@@ -13,6 +13,7 @@ var getOverrideRpcUrlForNetwork = require('../utils/getOverrideRpcUrlForNetwork/
 require('@solana/spl-token');
 var constants = require('../constants.cjs');
 var getBackwardsCompatibleSolNetworks = require('../utils/getBackwardsCompatibleSolNetworks/getBackwardsCompatibleSolNetworks.cjs');
+require('@dynamic-labs/types');
 
 const MEMO_PROGRAM_ID = new web3_js.PublicKey('MemoSq4gqABAXKb96qnH8TysNcWxMyWCqXgDLGmfcHr');
 class SolanaWalletConnector extends walletConnectorCore.WalletConnectorBase {

package/src/connector/SolanaWalletConnector.js

@@ -9,6 +9,7 @@ import { getOverrideRpcUrlForNetwork } from '../utils/getOverrideRpcUrlForNetwor
 import '@solana/spl-token';
 import { DYNAMIC_SVM_NETWORK_ID_LS_KEY } from '../constants.js';
 import { getBackwardsCompatibleSolNetworks } from '../utils/getBackwardsCompatibleSolNetworks/getBackwardsCompatibleSolNetworks.js';
+import '@dynamic-labs/types';
 
 const MEMO_PROGRAM_ID = new PublicKey('MemoSq4gqABAXKb96qnH8TysNcWxMyWCqXgDLGmfcHr');
 class SolanaWalletConnector extends WalletConnectorBase {

package/src/index.cjs

@@ -19,6 +19,8 @@ var getOverrideRpcUrlForNetwork = require('./utils/getOverrideRpcUrlForNetwork/g
 var createNonNativeTokenTransfer = require('./utils/createNonNativeTokenTransfer/createNonNativeTokenTransfer.cjs');
 var createSolTransfer = require('./utils/createSolTransfer/createSolTransfer.cjs');
 var getBackwardsCompatibleSolNetworks = require('./utils/getBackwardsCompatibleSolNetworks/getBackwardsCompatibleSolNetworks.cjs');
+var serializeTransactionForScreening = require('./utils/serializeTransactionForScreening/serializeTransactionForScreening.cjs');
+var screenSolanaTransactions = require('./utils/screenSolanaTransactions/screenSolanaTransactions.cjs');
 var SolanaWallet = require('./wallet/SolanaWallet.cjs');
 var isSolanaWallet = require('./wallet/isSolanaWallet/isSolanaWallet.cjs');
 var isLedgerSolanaWallet = require('./wallet/isLedgerSolanaWallet/isLedgerSolanaWallet.cjs');
@@ -38,6 +40,8 @@ exports.getOverrideRpcUrlForNetwork = getOverrideRpcUrlForNetwork.getOverrideRpc
 exports.createNonNativeTokenTransfer = createNonNativeTokenTransfer.createNonNativeTokenTransfer;
 exports.createSolTransfer = createSolTransfer.createSolTransfer;
 exports.getBackwardsCompatibleSolNetworks = getBackwardsCompatibleSolNetworks.getBackwardsCompatibleSolNetworks;
+exports.serializeTransactionForScreening = serializeTransactionForScreening.serializeTransactionForScreening;
+exports.screenSolanaTransactions = screenSolanaTransactions.screenSolanaTransactions;
 exports.SolanaWallet = SolanaWallet.SolanaWallet;
 exports.isSolanaWallet = isSolanaWallet.isSolanaWallet;
 exports.isLedgerSolanaWallet = isLedgerSolanaWallet.isLedgerSolanaWallet;

package/src/index.js

@@ -15,6 +15,8 @@ export { getOverrideRpcUrlForNetwork } from './utils/getOverrideRpcUrlForNetwork
 export { createNonNativeTokenTransfer } from './utils/createNonNativeTokenTransfer/createNonNativeTokenTransfer.js';
 export { createSolTransfer } from './utils/createSolTransfer/createSolTransfer.js';
 export { getBackwardsCompatibleSolNetworks } from './utils/getBackwardsCompatibleSolNetworks/getBackwardsCompatibleSolNetworks.js';
+export { serializeTransactionForScreening } from './utils/serializeTransactionForScreening/serializeTransactionForScreening.js';
+export { screenSolanaTransactions } from './utils/screenSolanaTransactions/screenSolanaTransactions.js';
 export { SolanaWallet } from './wallet/SolanaWallet.js';
 export { isSolanaWallet } from './wallet/isSolanaWallet/isSolanaWallet.js';
 export { isLedgerSolanaWallet } from './wallet/isLedgerSolanaWallet/isLedgerSolanaWallet.js';

package/src/rpc/RpcProviderSolana/RpcProviderSolana.cjs

@@ -7,6 +7,8 @@ require('../../../_virtual/_tslib.cjs');
 require('@solana/spl-token');
 require('@dynamic-labs/utils');
 var getOverrideRpcUrlForNetwork = require('../../utils/getOverrideRpcUrlForNetwork/getOverrideRpcUrlForNetwork.cjs');
+require('@dynamic-labs/types');
+require('@dynamic-labs/wallet-connector-core');
 
 rpcProviders.ChainRpcProviders.getSolanaProviderByChainId = (rpcProviders, chainId) => {
     var _a;

package/src/rpc/RpcProviderSolana/RpcProviderSolana.js

@@ -5,6 +5,8 @@ import '../../../_virtual/_tslib.js';
 import '@solana/spl-token';
 import '@dynamic-labs/utils';
 import { getOverrideRpcUrlForNetwork } from '../../utils/getOverrideRpcUrlForNetwork/getOverrideRpcUrlForNetwork.js';
+import '@dynamic-labs/types';
+import '@dynamic-labs/wallet-connector-core';
 
 ChainRpcProviders.getSolanaProviderByChainId = (rpcProviders, chainId) => {
     var _a;

package/src/utils/index.d.ts

@@ -8,3 +8,5 @@ export { getOverrideRpcUrlForNetwork } from './getOverrideRpcUrlForNetwork';
 export { createNonNativeTokenTransfer } from './createNonNativeTokenTransfer';
 export { createSolTransfer } from './createSolTransfer';
 export { getBackwardsCompatibleSolNetworks } from './getBackwardsCompatibleSolNetworks';
+export { serializeTransactionForScreening } from './serializeTransactionForScreening';
+export { screenSolanaTransactions } from './screenSolanaTransactions';

package/src/utils/screenSolanaTransactions/index.d.ts

@@ -0,0 +1 @@
+export { screenSolanaTransactions } from './screenSolanaTransactions';

package/src/utils/screenSolanaTransactions/screenSolanaTransactions.cjs

@@ -0,0 +1,42 @@
+'use client'
+'use strict';
+
+Object.defineProperty(exports, '__esModule', { value: true });
+
+var _tslib = require('../../../_virtual/_tslib.cjs');
+var types = require('@dynamic-labs/types');
+var walletConnectorCore = require('@dynamic-labs/wallet-connector-core');
+var serializeTransactionForScreening = require('../serializeTransactionForScreening/serializeTransactionForScreening.cjs');
+
+/**
+ * Screens the transactions' destinations before the wallet is prompted to
+ * sign. Rejects only on an explicit block; a transaction that cannot be
+ * serialized is skipped (fail-open) so screening never breaks signing.
+ */
+const screenSolanaTransactions = (_a) => _tslib.__awaiter(void 0, [_a], void 0, function* ({ transactionScreening, transactions, senderAddress, }) {
+    if (!transactionScreening)
+        return;
+    // Serialized one at a time: legacy transactions still compile their
+    // message on serialize, so an unprepared one throws, and mapping the batch
+    // as a unit would drop screening for its siblings too.
+    const serializedTransactions = transactions.flatMap((transaction) => {
+        try {
+            return [serializeTransactionForScreening.serializeTransactionForScreening(transaction)];
+        }
+        catch (error) {
+            walletConnectorCore.logger.warn('Failed to serialize transaction for screening', {
+                message: error instanceof Error ? error.message : 'unknown error',
+            });
+            return [];
+        }
+    });
+    if (serializedTransactions.length === 0)
+        return;
+    yield transactionScreening.screenTransaction({
+        chain: types.TransactionScreeningChain.SOL,
+        context: { svmTransaction: { serializedTransactions } },
+        senderAddress,
+    });
+});
+
+exports.screenSolanaTransactions = screenSolanaTransactions;

package/src/utils/screenSolanaTransactions/screenSolanaTransactions.d.ts

@@ -0,0 +1,13 @@
+import { Transaction, VersionedTransaction } from '@solana/web3.js';
+import { TransactionScreeningService } from '@dynamic-labs/types';
+export type ScreenSolanaTransactionsParams = {
+    transactionScreening: TransactionScreeningService | undefined;
+    transactions: (Transaction | VersionedTransaction)[];
+    senderAddress: string;
+};
+/**
+ * Screens the transactions' destinations before the wallet is prompted to
+ * sign. Rejects only on an explicit block; a transaction that cannot be
+ * serialized is skipped (fail-open) so screening never breaks signing.
+ */
+export declare const screenSolanaTransactions: ({ transactionScreening, transactions, senderAddress, }: ScreenSolanaTransactionsParams) => Promise<void>;

package/src/utils/screenSolanaTransactions/screenSolanaTransactions.js

@@ -0,0 +1,38 @@
+'use client'
+import { __awaiter } from '../../../_virtual/_tslib.js';
+import { TransactionScreeningChain } from '@dynamic-labs/types';
+import { logger } from '@dynamic-labs/wallet-connector-core';
+import { serializeTransactionForScreening } from '../serializeTransactionForScreening/serializeTransactionForScreening.js';
+
+/**
+ * Screens the transactions' destinations before the wallet is prompted to
+ * sign. Rejects only on an explicit block; a transaction that cannot be
+ * serialized is skipped (fail-open) so screening never breaks signing.
+ */
+const screenSolanaTransactions = (_a) => __awaiter(void 0, [_a], void 0, function* ({ transactionScreening, transactions, senderAddress, }) {
+    if (!transactionScreening)
+        return;
+    // Serialized one at a time: legacy transactions still compile their
+    // message on serialize, so an unprepared one throws, and mapping the batch
+    // as a unit would drop screening for its siblings too.
+    const serializedTransactions = transactions.flatMap((transaction) => {
+        try {
+            return [serializeTransactionForScreening(transaction)];
+        }
+        catch (error) {
+            logger.warn('Failed to serialize transaction for screening', {
+                message: error instanceof Error ? error.message : 'unknown error',
+            });
+            return [];
+        }
+    });
+    if (serializedTransactions.length === 0)
+        return;
+    yield transactionScreening.screenTransaction({
+        chain: TransactionScreeningChain.SOL,
+        context: { svmTransaction: { serializedTransactions } },
+        senderAddress,
+    });
+});
+
+export { screenSolanaTransactions };

package/src/utils/serializeTransactionForScreening/index.d.ts

@@ -0,0 +1 @@
+export { serializeTransactionForScreening } from './serializeTransactionForScreening';

package/src/utils/serializeTransactionForScreening/serializeTransactionForScreening.cjs

@@ -0,0 +1,20 @@
+'use client'
+'use strict';
+
+Object.defineProperty(exports, '__esModule', { value: true });
+
+var isVersionedTransaction = require('../isVersionedTransaction/isVersionedTransaction.cjs');
+
+/**
+ * Serializes an unsigned transaction to base64 for the sanctions screening
+ * API. Unlike encodeTransactionToBase64, this must not require signatures —
+ * screening runs before the wallet is prompted to sign.
+ */
+const serializeTransactionForScreening = (transaction) => Buffer.from(isVersionedTransaction.isVersionedTransaction(transaction)
+    ? transaction.serialize()
+    : transaction.serialize({
+        requireAllSignatures: false,
+        verifySignatures: false,
+    })).toString('base64');
+
+exports.serializeTransactionForScreening = serializeTransactionForScreening;

package/src/utils/serializeTransactionForScreening/serializeTransactionForScreening.d.ts

@@ -0,0 +1,7 @@
+import { Transaction, VersionedTransaction } from '@solana/web3.js';
+/**
+ * Serializes an unsigned transaction to base64 for the sanctions screening
+ * API. Unlike encodeTransactionToBase64, this must not require signatures —
+ * screening runs before the wallet is prompted to sign.
+ */
+export declare const serializeTransactionForScreening: (transaction: Transaction | VersionedTransaction) => string;

package/src/utils/serializeTransactionForScreening/serializeTransactionForScreening.js

@@ -0,0 +1,16 @@
+'use client'
+import { isVersionedTransaction } from '../isVersionedTransaction/isVersionedTransaction.js';
+
+/**
+ * Serializes an unsigned transaction to base64 for the sanctions screening
+ * API. Unlike encodeTransactionToBase64, this must not require signatures —
+ * screening runs before the wallet is prompted to sign.
+ */
+const serializeTransactionForScreening = (transaction) => Buffer.from(isVersionedTransaction(transaction)
+    ? transaction.serialize()
+    : transaction.serialize({
+        requireAllSignatures: false,
+        verifySignatures: false,
+    })).toString('base64');
+
+export { serializeTransactionForScreening };

package/src/wallet/SolanaWallet.cjs

@@ -10,6 +10,7 @@ require('@solana/web3.js');
 require('@solana/spl-token');
 var createNonNativeTokenTransfer = require('../utils/createNonNativeTokenTransfer/createNonNativeTokenTransfer.cjs');
 var createSolTransfer = require('../utils/createSolTransfer/createSolTransfer.cjs');
+var screenSolanaTransactions = require('../utils/screenSolanaTransactions/screenSolanaTransactions.cjs');
 
 class SolanaWallet extends walletConnectorCore.Wallet {
     /**
@@ -72,10 +73,20 @@ class SolanaWallet extends walletConnectorCore.Wallet {
                 return utils.cloneObjectWithOverrides(signer, {
                     signAllTransactions: (transactions) => _tslib.__awaiter(this, void 0, void 0, function* () {
                         yield this.sync();
+                        yield screenSolanaTransactions.screenSolanaTransactions({
+                            senderAddress: this.address,
+                            transactionScreening: this._connector.transactionScreening,
+                            transactions,
+                        });
                         return signer.signAllTransactions(transactions);
                     }),
                     signAndSendTransaction: (transaction, ...args) => _tslib.__awaiter(this, void 0, void 0, function* () {
                         yield this.sync();
+                        yield screenSolanaTransactions.screenSolanaTransactions({
+                            senderAddress: this.address,
+                            transactionScreening: this._connector.transactionScreening,
+                            transactions: [transaction],
+                        });
                         return signer.signAndSendTransaction(transaction, ...args);
                     }),
                     signMessage: (message, ...args) => _tslib.__awaiter(this, void 0, void 0, function* () {
@@ -84,6 +95,11 @@ class SolanaWallet extends walletConnectorCore.Wallet {
                     }),
                     signTransaction: (transaction) => _tslib.__awaiter(this, void 0, void 0, function* () {
                         yield this.sync();
+                        yield screenSolanaTransactions.screenSolanaTransactions({
+                            senderAddress: this.address,
+                            transactionScreening: this._connector.transactionScreening,
+                            transactions: [transaction],
+                        });
                         return signer.signTransaction(transaction);
                     }),
                 });

package/src/wallet/SolanaWallet.js

@@ -6,6 +6,7 @@ import '@solana/web3.js';
 import '@solana/spl-token';
 import { createNonNativeTokenTransfer } from '../utils/createNonNativeTokenTransfer/createNonNativeTokenTransfer.js';
 import { createSolTransfer } from '../utils/createSolTransfer/createSolTransfer.js';
+import { screenSolanaTransactions } from '../utils/screenSolanaTransactions/screenSolanaTransactions.js';
 
 class SolanaWallet extends Wallet {
     /**
@@ -68,10 +69,20 @@ class SolanaWallet extends Wallet {
                 return cloneObjectWithOverrides(signer, {
                     signAllTransactions: (transactions) => __awaiter(this, void 0, void 0, function* () {
                         yield this.sync();
+                        yield screenSolanaTransactions({
+                            senderAddress: this.address,
+                            transactionScreening: this._connector.transactionScreening,
+                            transactions,
+                        });
                         return signer.signAllTransactions(transactions);
                     }),
                     signAndSendTransaction: (transaction, ...args) => __awaiter(this, void 0, void 0, function* () {
                         yield this.sync();
+                        yield screenSolanaTransactions({
+                            senderAddress: this.address,
+                            transactionScreening: this._connector.transactionScreening,
+                            transactions: [transaction],
+                        });
                         return signer.signAndSendTransaction(transaction, ...args);
                     }),
                     signMessage: (message, ...args) => __awaiter(this, void 0, void 0, function* () {
@@ -80,6 +91,11 @@ class SolanaWallet extends Wallet {
                     }),
                     signTransaction: (transaction) => __awaiter(this, void 0, void 0, function* () {
                         yield this.sync();
+                        yield screenSolanaTransactions({
+                            senderAddress: this.address,
+                            transactionScreening: this._connector.transactionScreening,
+                            transactions: [transaction],
+                        });
                         return signer.signTransaction(transaction);
                     }),
                 });