@dynamic-labs/solana 5.0.0-rc.0 → 5.0.0-rc.1

package/CHANGELOG.md

@@ -1,5 +1,76 @@
 
-## [5.0.0-rc.0](https://github.com/dynamic-labs/dynamic-auth/compare/v4.91.6...v5.0.0-rc.0) (2026-07-05)
+## [5.0.0-rc.1](https://github.com/dynamic-labs/dynamic-auth/compare/v5.0.0-rc.0...v5.0.0-rc.1) (2026-07-17)
+
+
+### ⚠ BREAKING CHANGES
+
+* move legacy embedded wallet to waas upgrade flow to new legacy-embedded-wallet-migration package (#11841)
+* drop default injection of legacy embedded wallet connectors (#11833)
+* remove legacy embedded wallet support (#11979)
+* throw when legacy embedded wallet is detected without migration provider (#11855)
+* remove deprecated eclipse package (#11831)
+* remove deprecated functions and props (#11832)
+
+
+### [4.92.4](https://github.com/dynamic-labs/dynamic-auth/compare/v4.92.3...v4.92.4) (2026-07-16)
+
+
+### Features
+
+* **bitcoin:** per-network address switching and dust-limit send validation [v4] ([#11970](https://github.com/dynamic-labs/dynamic-auth/issues/11970)) ([76a4a9a](https://github.com/dynamic-labs/dynamic-auth/commit/76a4a9a5025d78798ebd1beffe6c0af59d2d029a)), closes [#11896](https://github.com/dynamic-labs/dynamic-auth/issues/11896) [#11800](https://github.com/dynamic-labs/dynamic-auth/issues/11800)
+* **midnight:** per-network addresses in deposit and wallet info views [v4] ([#11949](https://github.com/dynamic-labs/dynamic-auth/issues/11949)) ([978446a](https://github.com/dynamic-labs/dynamic-auth/commit/978446aca8546eb038ba9ed3be0503d10594ee15))
+* **midnight:** resolve wallet address per selected network [v4] ([#11948](https://github.com/dynamic-labs/dynamic-auth/issues/11948)) ([d6f858c](https://github.com/dynamic-labs/dynamic-auth/commit/d6f858c5e35defda7ed73cf97b3fdbe5ed9d131d))
+* set useMetamaskSdk to true by default ([#11926](https://github.com/dynamic-labs/dynamic-auth/issues/11926)) ([75b5a4a](https://github.com/dynamic-labs/dynamic-auth/commit/75b5a4a0fe8b1a375afce145c0b8bdc3ce761117))
+
+
+### Bug Fixes
+
+* **midnight:** align per-network code with the final main iteration [v4] ([#11971](https://github.com/dynamic-labs/dynamic-auth/issues/11971)) ([3ef3ba8](https://github.com/dynamic-labs/dynamic-auth/commit/3ef3ba8c090dfd9e4286b4e51bf350ea5e6feac7))
+* settle social sign-in when captcha is backed out or oauth popup never responds (v4) ([#11956](https://github.com/dynamic-labs/dynamic-auth/issues/11956)) ([ad49477](https://github.com/dynamic-labs/dynamic-auth/commit/ad49477f2acf61a154bb79cbe26b24f803cdb0e2))
+* validate that private key is not empty before upgrading to WaaS ([#11952](https://github.com/dynamic-labs/dynamic-auth/issues/11952)) ([21dfb83](https://github.com/dynamic-labs/dynamic-auth/commit/21dfb83cb29e42b335bc94a0cdd2062cf14a262a))
+
+### [4.92.3](https://github.com/dynamic-labs/dynamic-auth/compare/v4.92.2...v4.92.3) (2026-07-10)
+
+
+### Bug Fixes
+
+* **sdk-react-core:** fix deterministic 'Wallet not found' crash in embedded wallet export (v4) ([#11906](https://github.com/dynamic-labs/dynamic-auth/issues/11906)) ([913ef23](https://github.com/dynamic-labs/dynamic-auth/commit/913ef236b26245488e1cd5db7e874601b65ff0a2)), closes [#11905](https://github.com/dynamic-labs/dynamic-auth/issues/11905) [#11729](https://github.com/dynamic-labs/dynamic-auth/issues/11729)
+
+### [4.92.2](https://github.com/dynamic-labs/dynamic-auth/compare/v4.92.1...v4.92.2) (2026-07-09)
+
+
+### Bug Fixes
+
+* engage captcha during step-up OTP re-auth ([#11879](https://github.com/dynamic-labs/dynamic-auth/issues/11879)) ([585460a](https://github.com/dynamic-labs/dynamic-auth/commit/585460a8976803a8ed0aad16a4a00047bd6c115a))
+* **waas:** gate v1 wallet upgrade on recovery for email-only wallets ([#11897](https://github.com/dynamic-labs/dynamic-auth/issues/11897)) ([5a6f0c6](https://github.com/dynamic-labs/dynamic-auth/commit/5a6f0c6bf3120e59cf502004d09fae56f193e977))
+
+### [4.92.1](https://github.com/dynamic-labs/dynamic-auth/compare/v4.92.0...v4.92.1) (2026-07-09)
+
+
+### Bug Fixes
+
+* **ethereum:** fire in-app-browser redirect on sign for injected EVM wallets that use in-app-browser experience ([#11888](https://github.com/dynamic-labs/dynamic-auth/issues/11888)) ([5116d91](https://github.com/dynamic-labs/dynamic-auth/commit/5116d91ab2c71000a490d72c5d278549d4d8ae9a))
+* **sdk-react-core:** show clear message for Phantom redirect signing failures (v4 backport) ([#11886](https://github.com/dynamic-labs/dynamic-auth/issues/11886)) ([60ac897](https://github.com/dynamic-labs/dynamic-auth/commit/60ac897ba81f7758ccd7a05f97b619785e1f50a7))
+* **social:** use redirect strategy for step-up OAuth on mobile [V4 backport] ([#11881](https://github.com/dynamic-labs/dynamic-auth/issues/11881)) ([42a202e](https://github.com/dynamic-labs/dynamic-auth/commit/42a202e6255de8db73df02eff37c0b10b24fef1a))
+* **solana:** fire in-app-browser redirect on sign and wallet switch ([#11871](https://github.com/dynamic-labs/dynamic-auth/issues/11871)) ([4e2d6b7](https://github.com/dynamic-labs/dynamic-auth/commit/4e2d6b7ac8fdef5bf7c62b8a726ecaef1c6210ec))
+* **solana:** resolve Phantom/Backpack provider collision and Backpack >=0.10.x connect hangs ([#11856](https://github.com/dynamic-labs/dynamic-auth/issues/11856)) ([#11882](https://github.com/dynamic-labs/dynamic-auth/issues/11882)) ([5784aff](https://github.com/dynamic-labs/dynamic-auth/commit/5784aff9641bbc85445fb466f3ab1d6a14331e73))
+
+## [4.92.0](https://github.com/dynamic-labs/dynamic-auth/compare/v4.91.6...v4.92.0) (2026-07-08)
+
+
+### Features
+
+* **captcha:** add Cloudflare Turnstile provider support alongside hCaptcha (v4) ([#11798](https://github.com/dynamic-labs/dynamic-auth/issues/11798)) ([114c770](https://github.com/dynamic-labs/dynamic-auth/commit/114c7702e900d8dedeebe7be867de35d11a93f31))
+
+
+### Bug Fixes
+
+* **ethereum-aa:** resolve kernel client config per wallet (v4) ([#11870](https://github.com/dynamic-labs/dynamic-auth/issues/11870)) ([1b66d79](https://github.com/dynamic-labs/dynamic-auth/commit/1b66d79b4a32b4b6de433b7536bc46e6719224c6))
+* **iframe-setup:** block dangerous URL schemes and verify sender in OPEN_URL ([#11819](https://github.com/dynamic-labs/dynamic-auth/issues/11819)) ([329b27e](https://github.com/dynamic-labs/dynamic-auth/commit/329b27e9fac825916ab227ec8cf93dc343898923))
+* improve social OAuth error messages ([#11837](https://github.com/dynamic-labs/dynamic-auth/issues/11837)) ([8e57c06](https://github.com/dynamic-labs/dynamic-auth/commit/8e57c067c5a89111a32a12fb82e190cf6c46ad67))
+* **react-native-extension:** reject path traversal in downloadFile fileName ([#11816](https://github.com/dynamic-labs/dynamic-auth/issues/11816)) ([9367a56](https://github.com/dynamic-labs/dynamic-auth/commit/9367a56b6daa853d7f7e7f5534261bc68825b239))
+* **sdk-react-core:** display exactly the bytes signed in personal_sign preview ([#11818](https://github.com/dynamic-labs/dynamic-auth/issues/11818)) ([30b9382](https://github.com/dynamic-labs/dynamic-auth/commit/30b93829122f00060cb484aef09a03294c03f651))
+  
 
 ### [4.91.6](https://github.com/dynamic-labs/dynamic-auth/compare/v4.91.5...v4.91.6) (2026-07-03)
 

package/package.cjs

@@ -3,6 +3,6 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var version = "5.0.0-rc.0";
+var version = "5.0.0-rc.1";
 
 exports.version = version;

package/package.js

@@ -1,4 +1,4 @@
 'use client'
-var version = "5.0.0-rc.0";
+var version = "5.0.0-rc.1";
 
 export { version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dynamic-labs/solana",
-  "version": "5.0.0-rc.0",
+  "version": "5.0.0-rc.1",
   "description": "A React SDK for implementing wallet web3 authentication and authorization to your website.",
   "author": "Dynamic Labs, Inc.",
   "license": "MIT",
@@ -18,8 +18,8 @@
   },
   "homepage": "https://www.dynamic.xyz/",
   "dependencies": {
-    "@dynamic-labs/wallet-connect": "5.0.0-rc.0",
-    "@dynamic-labs-connectors/metamask-solana": "4.6.10",
+    "@dynamic-labs/wallet-connect": "5.0.0-rc.1",
+    "@dynamic-labs-connectors/metamask-solana": "4.6.15",
     "@solana/web3.js": "1.98.1",
     "@wallet-standard/app": "1.0.1",
     "@wallet-standard/base": "1.0.1",
@@ -30,17 +30,17 @@
     "@walletconnect/sign-client": "2.21.5",
     "@walletconnect/utils": "2.21.5",
     "@walletconnect/types": "2.21.5",
-    "@dynamic-labs/assert-package-version": "5.0.0-rc.0",
-    "@dynamic-labs/embedded-wallet-solana": "5.0.0-rc.0",
-    "@dynamic-labs/logger": "5.0.0-rc.0",
-    "@dynamic-labs/rpc-providers": "5.0.0-rc.0",
-    "@dynamic-labs/sdk-api-core": "0.0.1046",
-    "@dynamic-labs/solana-core": "5.0.0-rc.0",
-    "@dynamic-labs/types": "5.0.0-rc.0",
-    "@dynamic-labs/utils": "5.0.0-rc.0",
-    "@dynamic-labs/waas-svm": "5.0.0-rc.0",
-    "@dynamic-labs/wallet-book": "5.0.0-rc.0",
-    "@dynamic-labs/wallet-connector-core": "5.0.0-rc.0",
+    "@dynamic-labs/assert-package-version": "5.0.0-rc.1",
+    "@dynamic-labs/embedded-wallet-solana": "5.0.0-rc.1",
+    "@dynamic-labs/logger": "5.0.0-rc.1",
+    "@dynamic-labs/rpc-providers": "5.0.0-rc.1",
+    "@dynamic-labs/sdk-api-core": "0.0.1082",
+    "@dynamic-labs/solana-core": "5.0.0-rc.1",
+    "@dynamic-labs/types": "5.0.0-rc.1",
+    "@dynamic-labs/utils": "5.0.0-rc.1",
+    "@dynamic-labs/waas-svm": "5.0.0-rc.1",
+    "@dynamic-labs/wallet-book": "5.0.0-rc.1",
+    "@dynamic-labs/wallet-connector-core": "5.0.0-rc.1",
     "eventemitter3": "5.0.1"
   },
   "peerDependencies": {}

package/src/CoinbaseSolana/CoinbaseSolana.cjs

@@ -15,9 +15,11 @@ class CoinbaseSolana extends InjectedWalletBase.InjectedWalletBase {
         this.overrideKey = 'coinbasesolana';
     }
     getSigner() {
+        const _super = Object.create(null, {
+            getSigner: { get: () => super.getSigner }
+        });
         return _tslib.__awaiter(this, void 0, void 0, function* () {
-            var _a;
-            return (_a = this.solProviderHelper) === null || _a === void 0 ? void 0 : _a.connect();
+            return _super.getSigner.call(this);
         });
     }
     signMessage(messageToSign) {

package/src/CoinbaseSolana/CoinbaseSolana.d.ts

@@ -1,7 +1,8 @@
+import { ISolanaSigner } from '@dynamic-labs/solana-core';
 import { InjectedWalletBase } from '../injected/InjectedWalletBase';
 export declare class CoinbaseSolana extends InjectedWalletBase {
     name: string;
     overrideKey: string;
-    getSigner<ICoinbaseSolanaSigner>(): Promise<ICoinbaseSolanaSigner | undefined>;
+    getSigner<T = ISolanaSigner>(): Promise<T | undefined>;
     signMessage(messageToSign: string): Promise<string | undefined>;
 }

package/src/CoinbaseSolana/CoinbaseSolana.js

@@ -11,9 +11,11 @@ class CoinbaseSolana extends InjectedWalletBase {
         this.overrideKey = 'coinbasesolana';
     }
     getSigner() {
+        const _super = Object.create(null, {
+            getSigner: { get: () => super.getSigner }
+        });
         return __awaiter(this, void 0, void 0, function* () {
-            var _a;
-            return (_a = this.solProviderHelper) === null || _a === void 0 ? void 0 : _a.connect();
+            return _super.getSigner.call(this);
         });
     }
     signMessage(messageToSign) {

package/src/SolProviderHelper/SolProviderHelper.cjs

@@ -10,6 +10,11 @@ var walletConnectorCore = require('@dynamic-labs/wallet-connector-core');
 var findWalletProviderFromWalletStandard = require('../injected/walletStandard/findWalletProviderFromWalletStandard/findWalletProviderFromWalletStandard.cjs');
 var isSignedMessage = require('../utils/isSignedMessage.cjs');
 
+// Some providers (e.g. Backpack) never settle a connect({ onlyIfTrusted:
+// true }) probe for an origin the user hasn't approved yet. Since
+// getConnectedAccounts gates the connect-and-sign flow, an unresolved probe
+// would freeze the whole flow, so it is capped with a timeout.
+const TRUSTED_CONNECT_TIMEOUT_MS = 3000;
 class SolProviderHelper {
     constructor(connector) {
         this.walletBookWallet = walletBook.findWalletBookWallet(connector.walletBook, connector.key);
@@ -33,6 +38,18 @@ class SolProviderHelper {
         if (!config)
             return [];
         const providers = [];
+        // Wallet Standard providers are checked first because they are
+        // identified by a unique wallet name in the registry, making them
+        // the most reliable source. Legacy window-object lookups
+        // (window.phantom.solana, window.solana) are susceptible to being
+        // hijacked or proxied by other extensions (e.g. Backpack overriding
+        // window.solana with isPhantom=true), so they come after.
+        if (((_b = (_a = config.walletStandardLocators) === null || _a === void 0 ? void 0 : _a.length) !== null && _b !== void 0 ? _b : 0) > 0) {
+            const walletStandardProvider = findWalletProviderFromWalletStandard.findWalletProviderFromWalletStandard(config);
+            if (walletStandardProvider) {
+                providers.push(walletStandardProvider);
+            }
+        }
         if (config.windowLocations) {
             for (const windowLocation of config.windowLocations) {
                 const foundProviders = utils.getProvidersFromWindow(windowLocation);
@@ -51,12 +68,6 @@ class SolProviderHelper {
                 window.solana.providers.forEach((provider) => providers.push(provider));
             }
         }
-        if (((_b = (_a = config.walletStandardLocators) === null || _a === void 0 ? void 0 : _a.length) !== null && _b !== void 0 ? _b : 0) > 0) {
-            const walletStandardProvider = findWalletProviderFromWalletStandard.findWalletProviderFromWalletStandard(config);
-            if (walletStandardProvider) {
-                providers.push(walletStandardProvider);
-            }
-        }
         return providers;
     }
     installedProviderLookup(extensionLocators) {
@@ -174,7 +185,7 @@ class SolProviderHelper {
             let connectionResult;
             try {
                 if (!provider.isConnected) {
-                    connectionResult = yield provider.connect({ onlyIfTrusted: true });
+                    connectionResult = yield utils.promiseWithTimeout(Promise.resolve(provider.connect({ onlyIfTrusted: true })), TRUSTED_CONNECT_TIMEOUT_MS);
                 }
             }
             catch (e) {

package/src/SolProviderHelper/SolProviderHelper.d.ts

@@ -24,7 +24,7 @@ export declare class SolProviderHelper {
         windowLocations?: string[] | undefined;
     } | undefined;
     getInstalledProvider(): ISolana | undefined;
-    installedProviders(): import("@dynamic-labs/solana-core").ISolanaSigner[];
+    installedProviders(): ISolana[];
     installedProviderLookup(extensionLocators: Array<ProviderCondition<ExtensionLocator>>): ISolana | undefined;
     findProvider(): ISolana | undefined;
     isInstalledHelper(): boolean;

package/src/SolProviderHelper/SolProviderHelper.js

@@ -1,11 +1,16 @@
 'use client'
 import { __awaiter } from '../../_virtual/_tslib.js';
-import { getProvidersFromWindow, bufferToBase64 } from '@dynamic-labs/utils';
+import { getProvidersFromWindow, bufferToBase64, promiseWithTimeout } from '@dynamic-labs/utils';
 import { findWalletBookWallet } from '@dynamic-labs/wallet-book';
 import { ProviderLookup, logger } from '@dynamic-labs/wallet-connector-core';
 import { findWalletProviderFromWalletStandard } from '../injected/walletStandard/findWalletProviderFromWalletStandard/findWalletProviderFromWalletStandard.js';
 import { isSignedMessage } from '../utils/isSignedMessage.js';
 
+// Some providers (e.g. Backpack) never settle a connect({ onlyIfTrusted:
+// true }) probe for an origin the user hasn't approved yet. Since
+// getConnectedAccounts gates the connect-and-sign flow, an unresolved probe
+// would freeze the whole flow, so it is capped with a timeout.
+const TRUSTED_CONNECT_TIMEOUT_MS = 3000;
 class SolProviderHelper {
     constructor(connector) {
         this.walletBookWallet = findWalletBookWallet(connector.walletBook, connector.key);
@@ -29,6 +34,18 @@ class SolProviderHelper {
         if (!config)
             return [];
         const providers = [];
+        // Wallet Standard providers are checked first because they are
+        // identified by a unique wallet name in the registry, making them
+        // the most reliable source. Legacy window-object lookups
+        // (window.phantom.solana, window.solana) are susceptible to being
+        // hijacked or proxied by other extensions (e.g. Backpack overriding
+        // window.solana with isPhantom=true), so they come after.
+        if (((_b = (_a = config.walletStandardLocators) === null || _a === void 0 ? void 0 : _a.length) !== null && _b !== void 0 ? _b : 0) > 0) {
+            const walletStandardProvider = findWalletProviderFromWalletStandard(config);
+            if (walletStandardProvider) {
+                providers.push(walletStandardProvider);
+            }
+        }
         if (config.windowLocations) {
             for (const windowLocation of config.windowLocations) {
                 const foundProviders = getProvidersFromWindow(windowLocation);
@@ -47,12 +64,6 @@ class SolProviderHelper {
                 window.solana.providers.forEach((provider) => providers.push(provider));
             }
         }
-        if (((_b = (_a = config.walletStandardLocators) === null || _a === void 0 ? void 0 : _a.length) !== null && _b !== void 0 ? _b : 0) > 0) {
-            const walletStandardProvider = findWalletProviderFromWalletStandard(config);
-            if (walletStandardProvider) {
-                providers.push(walletStandardProvider);
-            }
-        }
         return providers;
     }
     installedProviderLookup(extensionLocators) {
@@ -170,7 +181,7 @@ class SolProviderHelper {
             let connectionResult;
             try {
                 if (!provider.isConnected) {
-                    connectionResult = yield provider.connect({ onlyIfTrusted: true });
+                    connectionResult = yield promiseWithTimeout(Promise.resolve(provider.connect({ onlyIfTrusted: true })), TRUSTED_CONNECT_TIMEOUT_MS);
                 }
             }
             catch (e) {

package/src/SolanaWalletConnectors.cjs

@@ -4,7 +4,6 @@
 Object.defineProperty(exports, '__esModule', { value: true });
 
 var metamaskSolana = require('@dynamic-labs-connectors/metamask-solana');
-var embeddedWalletSolana = require('@dynamic-labs/embedded-wallet-solana');
 var waasSvm = require('@dynamic-labs/waas-svm');
 var Phantom = require('./Phantom/Phantom.cjs');
 var fetchInjectedWalletConnectors = require('./injected/fetchInjectedWalletConnectors.cjs');
@@ -25,7 +24,6 @@ props) => {
     const initialConnectors = [
         ...fetchInjectedWalletConnectors.injectedWalletOverrides,
         ...fetchInjectedWalletConnectors.fetchInjectedWalletConnectors(props),
-        ...embeddedWalletSolana.TurnkeySolanaWalletConnectors(props),
         ...waasSvm.DynamicWaasSVMConnectors(),
         ...metamaskSolana.MetaMaskSolanaWalletConnectors(props),
         Phantom.Phantom,

package/src/SolanaWalletConnectors.js

@@ -1,6 +1,5 @@
 'use client'
 import { MetaMaskSolanaWalletConnectors } from '@dynamic-labs-connectors/metamask-solana';
-import { TurnkeySolanaWalletConnectors } from '@dynamic-labs/embedded-wallet-solana';
 import { DynamicWaasSVMConnectors } from '@dynamic-labs/waas-svm';
 import { Phantom } from './Phantom/Phantom.js';
 import { injectedWalletOverrides, fetchInjectedWalletConnectors } from './injected/fetchInjectedWalletConnectors.js';
@@ -21,7 +20,6 @@ props) => {
     const initialConnectors = [
         ...injectedWalletOverrides,
         ...fetchInjectedWalletConnectors(props),
-        ...TurnkeySolanaWalletConnectors(props),
         ...DynamicWaasSVMConnectors(),
         ...MetaMaskSolanaWalletConnectors(props),
         Phantom,

package/src/Solflare/Solflare.cjs

@@ -20,23 +20,21 @@ class Solflare extends InjectedWalletBase.InjectedWalletBase {
         // so always return the injected connector
         return this;
     }
-    getAddress() {
-        return _tslib.__awaiter(this, void 0, void 0, function* () {
-            var _a, _b;
-            /**
-             * It should redirect to in-app browser if on mobile and if not in the in-app browser,
-             * this checks if it is not in the in-app browser by checking if the provider is not available.
-             */
-            if (utils.isMobile() && !this.isInstalledOnBrowser()) {
-                const mobileDeepLinks = (_a = this.metadata.deepLinks) === null || _a === void 0 ? void 0 : _a.mobile;
-                utils.handleMobileWalletRedirect({
-                    nativeLink: (mobileDeepLinks === null || mobileDeepLinks === void 0 ? void 0 : mobileDeepLinks.native) || 'solflare://ul/v1/browse',
-                    universalLink: (mobileDeepLinks === null || mobileDeepLinks === void 0 ? void 0 : mobileDeepLinks.universal) || 'https://solflare.com/ul/v1/browse',
-                });
-                return;
-            }
-            return (_b = this.solProviderHelper) === null || _b === void 0 ? void 0 : _b.getAddress();
-        });
+    /**
+     * It should redirect to in-app browser if on mobile and if not in the in-app browser,
+     * this checks if it is not in the in-app browser by checking if the provider is not available.
+     */
+    openInAppBrowserIfRequired() {
+        var _a;
+        if (utils.isMobile() && !this.isInstalledOnBrowser()) {
+            const mobileDeepLinks = (_a = this.metadata.deepLinks) === null || _a === void 0 ? void 0 : _a.mobile;
+            utils.handleMobileWalletRedirect({
+                nativeLink: (mobileDeepLinks === null || mobileDeepLinks === void 0 ? void 0 : mobileDeepLinks.native) || 'solflare://ul/v1/browse',
+                universalLink: (mobileDeepLinks === null || mobileDeepLinks === void 0 ? void 0 : mobileDeepLinks.universal) || 'https://solflare.com/ul/v1/browse',
+            });
+            return true;
+        }
+        return false;
     }
     signMessage(messageToSign) {
         return _tslib.__awaiter(this, void 0, void 0, function* () {

package/src/Solflare/Solflare.d.ts

@@ -5,6 +5,10 @@ export declare class Solflare extends InjectedWalletBase {
     overrideKey: string;
     constructor(props: SolanaWalletConnectorOpts);
     getMobileOrInstalledWallet(): InjectedWalletBase;
-    getAddress(): Promise<string | undefined>;
+    /**
+     * It should redirect to in-app browser if on mobile and if not in the in-app browser,
+     * this checks if it is not in the in-app browser by checking if the provider is not available.
+     */
+    openInAppBrowserIfRequired(): boolean;
     signMessage(messageToSign: string): Promise<string | undefined>;
 }

package/src/Solflare/Solflare.js

@@ -16,23 +16,21 @@ class Solflare extends InjectedWalletBase {
         // so always return the injected connector
         return this;
     }
-    getAddress() {
-        return __awaiter(this, void 0, void 0, function* () {
-            var _a, _b;
-            /**
-             * It should redirect to in-app browser if on mobile and if not in the in-app browser,
-             * this checks if it is not in the in-app browser by checking if the provider is not available.
-             */
-            if (isMobile() && !this.isInstalledOnBrowser()) {
-                const mobileDeepLinks = (_a = this.metadata.deepLinks) === null || _a === void 0 ? void 0 : _a.mobile;
-                handleMobileWalletRedirect({
-                    nativeLink: (mobileDeepLinks === null || mobileDeepLinks === void 0 ? void 0 : mobileDeepLinks.native) || 'solflare://ul/v1/browse',
-                    universalLink: (mobileDeepLinks === null || mobileDeepLinks === void 0 ? void 0 : mobileDeepLinks.universal) || 'https://solflare.com/ul/v1/browse',
-                });
-                return;
-            }
-            return (_b = this.solProviderHelper) === null || _b === void 0 ? void 0 : _b.getAddress();
-        });
+    /**
+     * It should redirect to in-app browser if on mobile and if not in the in-app browser,
+     * this checks if it is not in the in-app browser by checking if the provider is not available.
+     */
+    openInAppBrowserIfRequired() {
+        var _a;
+        if (isMobile() && !this.isInstalledOnBrowser()) {
+            const mobileDeepLinks = (_a = this.metadata.deepLinks) === null || _a === void 0 ? void 0 : _a.mobile;
+            handleMobileWalletRedirect({
+                nativeLink: (mobileDeepLinks === null || mobileDeepLinks === void 0 ? void 0 : mobileDeepLinks.native) || 'solflare://ul/v1/browse',
+                universalLink: (mobileDeepLinks === null || mobileDeepLinks === void 0 ? void 0 : mobileDeepLinks.universal) || 'https://solflare.com/ul/v1/browse',
+            });
+            return true;
+        }
+        return false;
     }
     signMessage(messageToSign) {
         return __awaiter(this, void 0, void 0, function* () {

package/src/injected/BackpackSol/BackpackSol.cjs

@@ -16,9 +16,40 @@ class BackpackSol extends InjectedWalletBase.InjectedWalletBase {
         this.walletConnectWalletBookEntry = walletBook.findWalletBookWallet(props.walletBook, this.key);
     }
     getSigner() {
+        const _super = Object.create(null, {
+            getSigner: { get: () => super.getSigner }
+        });
+        return _tslib.__awaiter(this, void 0, void 0, function* () {
+            return _super.getSigner.call(this);
+        });
+    }
+    // Backpack >= 0.10.x turned window.backpack into a multichain namespace
+    // whose top-level connect() never resolves; the live Solana provider is
+    // nested at window.backpack.solana. The wallet book served from the CDN may
+    // still locate the namespace via windowLocations ["backpack"], so prefer
+    // the nested provider whenever it is present.
+    findProvider() {
+        const [nestedProvider] = utils.getProvidersFromWindow('backpack.solana');
+        if (nestedProvider === null || nestedProvider === void 0 ? void 0 : nestedProvider.isBackpack) {
+            return nestedProvider;
+        }
+        return super.findProvider();
+    }
+    // Backpack treats connect({ onlyIfTrusted: true }) as a full connect: it
+    // queues the request and opens its approval popup, and it drops any
+    // subsequent connect() issued while that request is pending. Probing it
+    // like the base implementation does would therefore deadlock the real
+    // connect that follows, so only report accounts for an already-connected
+    // provider.
+    getConnectedAccounts() {
         return _tslib.__awaiter(this, void 0, void 0, function* () {
             var _a;
-            return (_a = this.solProviderHelper) === null || _a === void 0 ? void 0 : _a.connect();
+            const provider = this.findProvider();
+            if (!(provider === null || provider === void 0 ? void 0 : provider.isConnected)) {
+                return [];
+            }
+            const publicKey = (_a = provider.publicKey) === null || _a === void 0 ? void 0 : _a.toString();
+            return publicKey ? [publicKey] : [];
         });
     }
     signMessage(messageToSign) {

package/src/injected/BackpackSol/BackpackSol.d.ts

@@ -1,9 +1,11 @@
-import { SolanaWalletConnectorOpts } from '@dynamic-labs/solana-core';
+import { SolanaWalletConnectorOpts, type IBackpackSolanaSigner, type ISolana } from '@dynamic-labs/solana-core';
 import { InjectedWalletBase } from '../InjectedWalletBase';
 export declare class BackpackSol extends InjectedWalletBase {
     name: string;
     overrideKey: string;
     constructor(props: SolanaWalletConnectorOpts);
-    getSigner<IBackpackSolanaSigner>(): Promise<IBackpackSolanaSigner | undefined>;
+    getSigner<T = IBackpackSolanaSigner>(): Promise<T | undefined>;
+    findProvider(): ISolana | undefined;
+    getConnectedAccounts(): Promise<string[]>;
     signMessage(messageToSign: string): Promise<string | undefined>;
 }

package/src/injected/BackpackSol/BackpackSol.js

@@ -1,6 +1,6 @@
 'use client'
 import { __awaiter } from '../../../_virtual/_tslib.js';
-import { bufferToBase64 } from '@dynamic-labs/utils';
+import { getProvidersFromWindow, bufferToBase64 } from '@dynamic-labs/utils';
 import { findWalletBookWallet } from '@dynamic-labs/wallet-book';
 import { InjectedWalletBase } from '../InjectedWalletBase/InjectedWalletBase.js';
 
@@ -12,9 +12,40 @@ class BackpackSol extends InjectedWalletBase {
         this.walletConnectWalletBookEntry = findWalletBookWallet(props.walletBook, this.key);
     }
     getSigner() {
+        const _super = Object.create(null, {
+            getSigner: { get: () => super.getSigner }
+        });
+        return __awaiter(this, void 0, void 0, function* () {
+            return _super.getSigner.call(this);
+        });
+    }
+    // Backpack >= 0.10.x turned window.backpack into a multichain namespace
+    // whose top-level connect() never resolves; the live Solana provider is
+    // nested at window.backpack.solana. The wallet book served from the CDN may
+    // still locate the namespace via windowLocations ["backpack"], so prefer
+    // the nested provider whenever it is present.
+    findProvider() {
+        const [nestedProvider] = getProvidersFromWindow('backpack.solana');
+        if (nestedProvider === null || nestedProvider === void 0 ? void 0 : nestedProvider.isBackpack) {
+            return nestedProvider;
+        }
+        return super.findProvider();
+    }
+    // Backpack treats connect({ onlyIfTrusted: true }) as a full connect: it
+    // queues the request and opens its approval popup, and it drops any
+    // subsequent connect() issued while that request is pending. Probing it
+    // like the base implementation does would therefore deadlock the real
+    // connect that follows, so only report accounts for an already-connected
+    // provider.
+    getConnectedAccounts() {
         return __awaiter(this, void 0, void 0, function* () {
             var _a;
-            return (_a = this.solProviderHelper) === null || _a === void 0 ? void 0 : _a.connect();
+            const provider = this.findProvider();
+            if (!(provider === null || provider === void 0 ? void 0 : provider.isConnected)) {
+                return [];
+            }
+            const publicKey = (_a = provider.publicKey) === null || _a === void 0 ? void 0 : _a.toString();
+            return publicKey ? [publicKey] : [];
         });
     }
     signMessage(messageToSign) {

package/src/injected/InjectedWalletBase/InjectedWalletBase.cjs

@@ -6,6 +6,7 @@ Object.defineProperty(exports, '__esModule', { value: true });
 var _tslib = require('../../../_virtual/_tslib.cjs');
 var web3_js = require('@solana/web3.js');
 var solanaCore = require('@dynamic-labs/solana-core');
+var utils = require('@dynamic-labs/utils');
 var walletConnectorCore = require('@dynamic-labs/wallet-connector-core');
 var SolProviderHelper = require('../../SolProviderHelper/SolProviderHelper.cjs');
 var SignMessageNotSupportedError = require('../../errors/SignMessageNotSupportedError.cjs');
@@ -67,7 +68,21 @@ class InjectedWalletBase extends solanaCore.SolanaWalletConnector {
     getSigner() {
         return _tslib.__awaiter(this, void 0, void 0, function* () {
             var _a;
-            return (_a = this.solProviderHelper) === null || _a === void 0 ? void 0 : _a.connect();
+            const provider = yield ((_a = this.solProviderHelper) === null || _a === void 0 ? void 0 : _a.connect());
+            if (provider) {
+                return provider;
+            }
+            // On mobile web (outside the wallet's in-app browser) there is no injected
+            // provider for these wallets, so signing silently returns nothing. Redirect
+            // into the wallet's in-app browser so signing can continue there, or throw a
+            // clear error when neither a provider nor a redirect is possible.
+            if (utils.isMobile() && !this.isInstalledOnBrowser()) {
+                const didOpenInAppBrowser = this.openInAppBrowserIfRequired();
+                if (!didOpenInAppBrowser) {
+                    throw new utils.WalletRequiresInAppBrowserError(this.name);
+                }
+            }
+            return undefined;
         });
     }
     createUiTransaction(from) {
@@ -118,12 +133,21 @@ class InjectedWalletBase extends solanaCore.SolanaWalletConnector {
     }
     signMessage(messageToSign) {
         return _tslib.__awaiter(this, void 0, void 0, function* () {
-            var _a, _b;
-            const walletAddress = yield ((_a = this.solProviderHelper) === null || _a === void 0 ? void 0 : _a.getAddress());
-            if (walletAddress && this.isLedgerAddress(walletAddress)) {
+            var _a;
+            // Go through getAddress (not the helper directly) so that on mobile web an
+            // in-app-browser wallet redirects into its in-app browser instead of
+            // silently signing nothing.
+            const walletAddress = yield this.getAddress();
+            // No address means there is no provider to sign with (e.g. getAddress
+            // redirected into the wallet's in-app browser on mobile), so stop here
+            // instead of attempting a providerless sign.
+            if (!walletAddress) {
+                return undefined;
+            }
+            if (this.isLedgerAddress(walletAddress)) {
                 throw new SignMessageNotSupportedError.SignMessageNotSupportedError(this.name);
             }
-            return (_b = this.solProviderHelper) === null || _b === void 0 ? void 0 : _b.signMessage(messageToSign);
+            return (_a = this.solProviderHelper) === null || _a === void 0 ? void 0 : _a.signMessage(messageToSign);
         });
     }
     getConnectedAccounts() {

package/src/injected/InjectedWalletBase/InjectedWalletBase.js

@@ -2,6 +2,7 @@
 import { __awaiter } from '../../../_virtual/_tslib.js';
 import { PublicKey } from '@solana/web3.js';
 import { SolanaWalletConnector, SolanaUiTransaction } from '@dynamic-labs/solana-core';
+import { isMobile, WalletRequiresInAppBrowserError } from '@dynamic-labs/utils';
 import { getWalletMetadataFromWalletBook } from '@dynamic-labs/wallet-connector-core';
 import { SolProviderHelper } from '../../SolProviderHelper/SolProviderHelper.js';
 import { SignMessageNotSupportedError } from '../../errors/SignMessageNotSupportedError.js';
@@ -63,7 +64,21 @@ class InjectedWalletBase extends SolanaWalletConnector {
     getSigner() {
         return __awaiter(this, void 0, void 0, function* () {
             var _a;
-            return (_a = this.solProviderHelper) === null || _a === void 0 ? void 0 : _a.connect();
+            const provider = yield ((_a = this.solProviderHelper) === null || _a === void 0 ? void 0 : _a.connect());
+            if (provider) {
+                return provider;
+            }
+            // On mobile web (outside the wallet's in-app browser) there is no injected
+            // provider for these wallets, so signing silently returns nothing. Redirect
+            // into the wallet's in-app browser so signing can continue there, or throw a
+            // clear error when neither a provider nor a redirect is possible.
+            if (isMobile() && !this.isInstalledOnBrowser()) {
+                const didOpenInAppBrowser = this.openInAppBrowserIfRequired();
+                if (!didOpenInAppBrowser) {
+                    throw new WalletRequiresInAppBrowserError(this.name);
+                }
+            }
+            return undefined;
         });
     }
     createUiTransaction(from) {
@@ -114,12 +129,21 @@ class InjectedWalletBase extends SolanaWalletConnector {
     }
     signMessage(messageToSign) {
         return __awaiter(this, void 0, void 0, function* () {
-            var _a, _b;
-            const walletAddress = yield ((_a = this.solProviderHelper) === null || _a === void 0 ? void 0 : _a.getAddress());
-            if (walletAddress && this.isLedgerAddress(walletAddress)) {
+            var _a;
+            // Go through getAddress (not the helper directly) so that on mobile web an
+            // in-app-browser wallet redirects into its in-app browser instead of
+            // silently signing nothing.
+            const walletAddress = yield this.getAddress();
+            // No address means there is no provider to sign with (e.g. getAddress
+            // redirected into the wallet's in-app browser on mobile), so stop here
+            // instead of attempting a providerless sign.
+            if (!walletAddress) {
+                return undefined;
+            }
+            if (this.isLedgerAddress(walletAddress)) {
                 throw new SignMessageNotSupportedError(this.name);
             }
-            return (_b = this.solProviderHelper) === null || _b === void 0 ? void 0 : _b.signMessage(messageToSign);
+            return (_a = this.solProviderHelper) === null || _a === void 0 ? void 0 : _a.signMessage(messageToSign);
         });
     }
     getConnectedAccounts() {

package/src/injected/PhantomInjected/PhantomInjected.cjs

@@ -3,7 +3,6 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var _tslib = require('../../../_virtual/_tslib.cjs');
 var utils = require('@dynamic-labs/utils');
 var InjectedWalletBase = require('../InjectedWalletBase/InjectedWalletBase.cjs');
 
@@ -13,22 +12,15 @@ class PhantomInjected extends InjectedWalletBase.InjectedWalletBase {
         this.name = 'Phantom';
         this.overrideKey = 'phantom';
     }
-    getAddress() {
-        const _super = Object.create(null, {
-            getAddress: { get: () => super.getAddress }
-        });
-        return _tslib.__awaiter(this, void 0, void 0, function* () {
-            if (this.isInstalledOnBrowser()) {
-                return _super.getAddress.call(this);
-            }
-            if (utils.isMobile()) {
-                utils.handleMobileWalletRedirect({
-                    nativeLink: 'phantom://browse',
-                    universalLink: 'https://phantom.app/ul/browse',
-                });
-            }
-            return undefined;
-        });
+    openInAppBrowserIfRequired() {
+        if (utils.isMobile() && !this.isInstalledOnBrowser()) {
+            utils.handleMobileWalletRedirect({
+                nativeLink: 'phantom://browse',
+                universalLink: 'https://phantom.app/ul/browse',
+            });
+            return true;
+        }
+        return false;
     }
     canGetChainAddress() {
         var _a, _b;

package/src/injected/PhantomInjected/PhantomInjected.d.ts

@@ -2,6 +2,6 @@ import { InjectedWalletBase } from '../InjectedWalletBase';
 export declare class PhantomInjected extends InjectedWalletBase {
     name: string;
     overrideKey: string;
-    getAddress(): Promise<string | undefined>;
+    openInAppBrowserIfRequired(): boolean;
     canGetChainAddress(): boolean;
 }

package/src/injected/PhantomInjected/PhantomInjected.js

@@ -1,5 +1,4 @@
 'use client'
-import { __awaiter } from '../../../_virtual/_tslib.js';
 import { isMobile, handleMobileWalletRedirect } from '@dynamic-labs/utils';
 import { InjectedWalletBase } from '../InjectedWalletBase/InjectedWalletBase.js';
 
@@ -9,22 +8,15 @@ class PhantomInjected extends InjectedWalletBase {
         this.name = 'Phantom';
         this.overrideKey = 'phantom';
     }
-    getAddress() {
-        const _super = Object.create(null, {
-            getAddress: { get: () => super.getAddress }
-        });
-        return __awaiter(this, void 0, void 0, function* () {
-            if (this.isInstalledOnBrowser()) {
-                return _super.getAddress.call(this);
-            }
-            if (isMobile()) {
-                handleMobileWalletRedirect({
-                    nativeLink: 'phantom://browse',
-                    universalLink: 'https://phantom.app/ul/browse',
-                });
-            }
-            return undefined;
-        });
+    openInAppBrowserIfRequired() {
+        if (isMobile() && !this.isInstalledOnBrowser()) {
+            handleMobileWalletRedirect({
+                nativeLink: 'phantom://browse',
+                universalLink: 'https://phantom.app/ul/browse',
+            });
+            return true;
+        }
+        return false;
     }
     canGetChainAddress() {
         var _a, _b;