@dynamic-labs/wallet-connect 5.0.0-rc.3 → 5.0.0

package/CHANGELOG.md

@@ -1,4 +1,84 @@
 
+## [5.0.0](https://github.com/dynamic-labs/dynamic-auth/compare/v5.0.0-rc.4...v5.0.0) (2026-07-29)
+
+## 🚀 Dynamic SDK v5 is live
+
+This release has been a long time coming. We've cleaned up the architecture, cut support for v1 and v2 embedded wallets from core, shipped a migration path for legacy wallets, and made the SDK story a lot cleaner for both web and mobile devs.
+
+### 🔥 Embedded Wallet clean up
+
+V1/V2 embedded wallets support has been removed from `@dynamic-labs/sdk-react-core`. Dynamic WaaS (V3) is now the one and only embedded wallet type, all new embedded wallets are V3.
+
+### 📦 New: `@dynamic-labs/legacy-embedded-wallet-migration`
+
+For users still on V1/V2 embedded wallets, we've got you covered with a dedicated migration package. It owns all the logic for upgrading to V3. This includes recovery flow, session keys, private key export, and the migration UI.
+
+Two paths available:
+
+- **UI-based** (recommended): Mount `LegacyWalletMigrationProvider` and the upgrade modal opens automatically when a legacy wallet is detected at login. It handles the full flow end-to-end.
+- **Headless**: Call `upgradeToDynamicWaas()` directly if you want a custom migration UX.
+
+### 📱 JS SDK for web and React Native are the new default
+
+Going forward, we're encouraging all developers building for web and React Native to use the JS SDK. It's the direction we're investing in. Ideally v5 is our final version of the old React SDK. To be clear: **no new features will be added to the old SDKs, including v5. All new feature development is happening in the JS SDK.**
+
+### ✏️ Legacy package renames
+
+The old packages have been renamed to make their status explicit. Update your `package.json` accordingly:
+
+```
+@dynamic-labs/client                 → @dynamic-labs/legacy-client
+@dynamic-labs/react-hooks            → @dynamic-labs/legacy-react-hooks
+@dynamic-labs/react-native-extension → @dynamic-labs/legacy-react-native-extension
+@dynamic-labs/web-extension          → @dynamic-labs/legacy-web-extension
+@dynamic-labs/solana-extension       → @dynamic-labs/legacy-solana-extension
+@dynamic-labs/sui-extension          → @dynamic-labs/legacy-sui-extension
+@dynamic-labs/viem-extension         → @dynamic-labs/legacy-viem-extension
+@dynamic-labs/zerodev-extension      → @dynamic-labs/legacy-zerodev-extension
+```
+
+### :book: Full migration guide
+
+Everything you need to upgrade from v4 → v5: [Upgrade SDK from V4 to V5 - Dynamic](https://www.dynamic.xyz/docs/react/reference/upgrade/v5)
+
+Huge props to everyone who contributed to this.  :tada:
+
+------------------------------------------
+
+### ⚠ BREAKING CHANGES
+
+* **waas:** move the client key-share store onto the core storage API (#12096)
+* **react-native-extension:** store sensitive information with react-native-keychain (#12092)
+
+### Features
+
+* **bitcoin:** add sendBitcoinWithConfirmation to show confirm modal on BTC sends ([#12025](https://github.com/dynamic-labs/dynamic-auth/issues/12025)) ([5f992f5](https://github.com/dynamic-labs/dynamic-auth/commit/5f992f5fdaf805f07870ab9248ea2fe06a2fd3bf))
+* **waas:** delegate key shares with initial signer rules [DYNT-1675] ([#12028](https://github.com/dynamic-labs/dynamic-auth/issues/12028)) ([6b1ffc5](https://github.com/dynamic-labs/dynamic-auth/commit/6b1ffc5ee7070d639916a65b6a0aa6ada0167cb8)), closes [dynamic-labs/dynamic-waas-sdk#1500](https://github.com/dynamic-labs/dynamic-waas-sdk/issues/1500) [#10754](https://github.com/dynamic-labs/dynamic-auth/issues/10754) [#10772](https://github.com/dynamic-labs/dynamic-auth/issues/10772) [#646](https://github.com/dynamic-labs/dynamic-auth/issues/646) [#649](https://github.com/dynamic-labs/dynamic-auth/issues/649) [#1500](https://github.com/dynamic-labs/dynamic-auth/issues/1500) [dynamic-labs/dynamic-waas-sdk#1500](https://github.com/dynamic-labs/dynamic-waas-sdk/issues/1500)
+* **waas:** expose rawSign sha256/blake2b in SignMessageContext ([#12075](https://github.com/dynamic-labs/dynamic-auth/issues/12075)) ([20e3d2f](https://github.com/dynamic-labs/dynamic-auth/commit/20e3d2f40d18aa0bdb77e9b00fa4a5dc5dd6e9de))
+
+
+### Bug Fixes
+
+* **bitcoin:** resolve the public key of the active wallet, not the first ([#12091](https://github.com/dynamic-labs/dynamic-auth/issues/12091)) ([ebad70c](https://github.com/dynamic-labs/dynamic-auth/commit/ebad70c37ab9a771ad7051ca8f3c68d52c1d32fa)), closes [#11970](https://github.com/dynamic-labs/dynamic-auth/issues/11970) [#11970](https://github.com/dynamic-labs/dynamic-auth/issues/11970) [#11970](https://github.com/dynamic-labs/dynamic-auth/issues/11970)
+* fallback to local wallet balance when token balances API returns no tokens ([#12059](https://github.com/dynamic-labs/dynamic-auth/issues/12059)) ([26c9022](https://github.com/dynamic-labs/dynamic-auth/commit/26c9022da3371b0da0498ec641157aa9fed356aa))
+* security updates ([#12114](https://github.com/dynamic-labs/dynamic-auth/issues/12114)) ([a4f9bc1](https://github.com/dynamic-labs/dynamic-auth/commit/a4f9bc19870156903b76996c55ecd46a3417f004)) ([#12050](https://github.com/dynamic-labs/dynamic-auth/issues/12050)) ([8eeec92](https://github.com/dynamic-labs/dynamic-auth/commit/8eeec923d0f2f688ade60440e1f92bb1fd646201)) ([#12088](https://github.com/dynamic-labs/dynamic-auth/issues/12088)) ([f11f1f3](https://github.com/dynamic-labs/dynamic-auth/commit/f11f1f384201fa31f58753c0854eaf17f420fb09))
+* replace deprecated polygon-rpc.com RPC with polygon.drpc.org ([#12032](https://github.com/dynamic-labs/dynamic-auth/issues/12032)) ([e1ece53](https://github.com/dynamic-labs/dynamic-auth/commit/e1ece538aedf6127048ca64daf9f9f3cf3a7026e))
+* **sui:** stop using Sui Foundation fullnode URLs in WaaS and extension connectors ([#12108](https://github.com/dynamic-labs/dynamic-auth/issues/12108)) ([b23c85b](https://github.com/dynamic-labs/dynamic-auth/commit/b23c85b7c06f3147705a026ba23f5e8ae1f03b68))
+* **wallet-book:** use Backpack universal link for iOS in-app browser ([#12053](https://github.com/dynamic-labs/dynamic-auth/issues/12053)) ([afba6b1](https://github.com/dynamic-labs/dynamic-auth/commit/afba6b192e4be50aaeca9f5fad88b44808a034a0))
+* **wallet-connect:** recover WalletConnect IndexedDB store when object store is missing ([#12048](https://github.com/dynamic-labs/dynamic-auth/issues/12048)) ([96ff80e](https://github.com/dynamic-labs/dynamic-auth/commit/96ff80e40b28740de15b1702b85f954100fd5f25))
+
+
+* **react-native-extension:** store sensitive information with react-native-keychain ([#12092](https://github.com/dynamic-labs/dynamic-auth/issues/12092)) ([10c0f2f](https://github.com/dynamic-labs/dynamic-auth/commit/10c0f2f6c281e300e4a0455aaaa0d452808dcb87))
+* **waas:** move the client key-share store onto the core storage API ([#12096](https://github.com/dynamic-labs/dynamic-auth/issues/12096)) ([778f993](https://github.com/dynamic-labs/dynamic-auth/commit/778f993c5528ec03a7f1446dcb81a041a22db89b)), closes [#12094](https://github.com/dynamic-labs/dynamic-auth/issues/12094) [#12094](https://github.com/dynamic-labs/dynamic-auth/issues/12094) [#12092](https://github.com/dynamic-labs/dynamic-auth/issues/12092) [#12094](https://github.com/dynamic-labs/dynamic-auth/issues/12094)
+
+
+## [5.0.0-rc.4](https://github.com/dynamic-labs/dynamic-auth/compare/v5.0.0-rc.3...v5.0.0-rc.4) (2026-07-20)
+
+
+### Features
+
+* **business-accounts:** redesign demo + fix getBusinessAccount arg shape ([#11975](https://github.com/dynamic-labs/dynamic-auth/issues/11975)) ([7c2feaf](https://github.com/dynamic-labs/dynamic-auth/commit/7c2feaf6d0e00b210d67302353b40e90fdc7c8d1))
+
 ## [5.0.0-rc.3](https://github.com/dynamic-labs/dynamic-auth/compare/v5.0.0-rc.2...v5.0.0-rc.3) (2026-07-17)
 
 ## [5.0.0-rc.2](https://github.com/dynamic-labs/dynamic-auth/compare/v5.0.0-rc.1...v5.0.0-rc.2) (2026-07-17)

package/package.cjs

@@ -3,6 +3,6 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var version = "5.0.0-rc.3";
+var version = "5.0.0";
 
 exports.version = version;

package/package.js

@@ -1,4 +1,4 @@
 'use client'
-var version = "5.0.0-rc.3";
+var version = "5.0.0";
 
 export { version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dynamic-labs/wallet-connect",
-  "version": "5.0.0-rc.3",
+  "version": "5.0.0",
   "description": "A React SDK for implementing wallet web3 authentication and authorization to your website.",
   "author": "Dynamic Labs, Inc.",
   "license": "MIT",
@@ -18,9 +18,9 @@
   },
   "homepage": "https://www.dynamic.xyz/",
   "dependencies": {
-    "@dynamic-labs/logger": "5.0.0-rc.3",
+    "@dynamic-labs/logger": "5.0.0",
     "@walletconnect/sign-client": "2.21.5",
-    "@dynamic-labs/assert-package-version": "5.0.0-rc.3"
+    "@dynamic-labs/assert-package-version": "5.0.0"
   },
   "peerDependencies": {}
 }

package/src/getSignClientSingleton/ensureWalletConnectStore.cjs

@@ -0,0 +1,101 @@
+'use client'
+'use strict';
+
+Object.defineProperty(exports, '__esModule', { value: true });
+
+var _tslib = require('../../_virtual/_tslib.cjs');
+
+// WalletConnect persists its pairing and session data in this IndexedDB
+// database and object store (see the browser build of
+// @walletconnect/keyvaluestorage). We reference them here so we can repair a
+// missing object store before SignClient opens the connection.
+const WALLET_CONNECT_DB_NAME = 'WALLET_CONNECT_V2_INDEXED_DB';
+const WALLET_CONNECT_STORE_NAME = 'keyvaluestorage';
+// WalletConnect's storage uses an out-of-line object store (idb-keyval's
+// createObjectStore with no keyPath). We must recreate it with the same shape
+// so WalletConnect keeps reading and writing it exactly as before.
+const createStoreIfMissing = (db) => {
+    if (!db.objectStoreNames.contains(WALLET_CONNECT_STORE_NAME)) {
+        db.createObjectStore(WALLET_CONNECT_STORE_NAME);
+    }
+};
+const openConnection = (version) => new Promise((resolve, reject) => {
+    const shouldUseCurrentVersion = version === undefined;
+    let request;
+    if (shouldUseCurrentVersion) {
+        request = indexedDB.open(WALLET_CONNECT_DB_NAME);
+    }
+    else {
+        request = indexedDB.open(WALLET_CONNECT_DB_NAME, version);
+    }
+    // A blocked upgrade rejects the promise, but the open request stays live: if
+    // the blocking connection later closes, onsuccess still fires with a real
+    // database. We track settlement so that a late success closes that database
+    // instead of leaking the connection for the life of the page. A late error
+    // or blocked event just rejects an already-settled promise, which is a no-op.
+    let hasSettled = false;
+    request.onupgradeneeded = () => createStoreIfMissing(request.result);
+    request.onsuccess = () => {
+        if (hasSettled) {
+            request.result.close();
+            return;
+        }
+        hasSettled = true;
+        resolve(request.result);
+    };
+    request.onerror = () => {
+        hasSettled = true;
+        reject(new Error('Failed to open WalletConnect IndexedDB'));
+    };
+    // A version-bump upgrade is blocked when another connection (another tab, or
+    // WalletConnect's own cached idb-keyval connection) still holds the database
+    // open. IndexedDB then fires neither success nor error, so we reject to keep
+    // the promise from hanging; the caller swallows it and lets SignClient.init
+    // proceed exactly as it would without this repair step.
+    request.onblocked = () => {
+        hasSettled = true;
+        reject(new Error('WalletConnect IndexedDB store upgrade was blocked by another open connection'));
+    };
+});
+const repairMissingStore = () => _tslib.__awaiter(void 0, void 0, void 0, function* () {
+    const db = yield openConnection();
+    const hasStore = db.objectStoreNames.contains(WALLET_CONNECT_STORE_NAME);
+    const currentVersion = db.version;
+    db.close();
+    if (hasStore) {
+        return;
+    }
+    // Reopening at the same version won't re-run onupgradeneeded, so the store
+    // would stay missing. Bumping the version triggers an upgrade that recreates
+    // only the missing store, leaving any other stored data intact.
+    const upgradedDb = yield openConnection(currentVersion + 1);
+    upgradedDb.close();
+});
+/**
+ * Ensures WalletConnect's IndexedDB object store exists before SignClient opens
+ * the connection. On iOS WebKit an upgrade interrupted by a webview reload can
+ * leave the `WALLET_CONNECT_V2_INDEXED_DB` database committed at its version
+ * with the object store never created; every subsequent WalletConnect read or
+ * write then throws NotFoundError ("one of the specified object stores was not
+ * found") until the store is recreated.
+ *
+ * The store is recreated with a version bump — the database is never deleted,
+ * so no session data is lost. This is a best-effort no-op for healthy databases
+ * and for environments without IndexedDB (SSR, React Native), so it cannot
+ * regress the default WalletConnect behaviour: on any failure SignClient.init
+ * proceeds exactly as it would without this step.
+ */
+const ensureWalletConnectStore = () => _tslib.__awaiter(void 0, void 0, void 0, function* () {
+    if (typeof indexedDB === 'undefined') {
+        return;
+    }
+    try {
+        yield repairMissingStore();
+    }
+    catch (_a) {
+        // Best-effort pre-flight repair. Swallowing lets SignClient.init proceed as
+        // it would without this step, so WalletConnect is never left worse off.
+    }
+});
+
+exports.ensureWalletConnectStore = ensureWalletConnectStore;

package/src/getSignClientSingleton/ensureWalletConnectStore.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Ensures WalletConnect's IndexedDB object store exists before SignClient opens
+ * the connection. On iOS WebKit an upgrade interrupted by a webview reload can
+ * leave the `WALLET_CONNECT_V2_INDEXED_DB` database committed at its version
+ * with the object store never created; every subsequent WalletConnect read or
+ * write then throws NotFoundError ("one of the specified object stores was not
+ * found") until the store is recreated.
+ *
+ * The store is recreated with a version bump — the database is never deleted,
+ * so no session data is lost. This is a best-effort no-op for healthy databases
+ * and for environments without IndexedDB (SSR, React Native), so it cannot
+ * regress the default WalletConnect behaviour: on any failure SignClient.init
+ * proceeds exactly as it would without this step.
+ */
+export declare const ensureWalletConnectStore: () => Promise<void>;

package/src/getSignClientSingleton/ensureWalletConnectStore.js

@@ -0,0 +1,97 @@
+'use client'
+import { __awaiter } from '../../_virtual/_tslib.js';
+
+// WalletConnect persists its pairing and session data in this IndexedDB
+// database and object store (see the browser build of
+// @walletconnect/keyvaluestorage). We reference them here so we can repair a
+// missing object store before SignClient opens the connection.
+const WALLET_CONNECT_DB_NAME = 'WALLET_CONNECT_V2_INDEXED_DB';
+const WALLET_CONNECT_STORE_NAME = 'keyvaluestorage';
+// WalletConnect's storage uses an out-of-line object store (idb-keyval's
+// createObjectStore with no keyPath). We must recreate it with the same shape
+// so WalletConnect keeps reading and writing it exactly as before.
+const createStoreIfMissing = (db) => {
+    if (!db.objectStoreNames.contains(WALLET_CONNECT_STORE_NAME)) {
+        db.createObjectStore(WALLET_CONNECT_STORE_NAME);
+    }
+};
+const openConnection = (version) => new Promise((resolve, reject) => {
+    const shouldUseCurrentVersion = version === undefined;
+    let request;
+    if (shouldUseCurrentVersion) {
+        request = indexedDB.open(WALLET_CONNECT_DB_NAME);
+    }
+    else {
+        request = indexedDB.open(WALLET_CONNECT_DB_NAME, version);
+    }
+    // A blocked upgrade rejects the promise, but the open request stays live: if
+    // the blocking connection later closes, onsuccess still fires with a real
+    // database. We track settlement so that a late success closes that database
+    // instead of leaking the connection for the life of the page. A late error
+    // or blocked event just rejects an already-settled promise, which is a no-op.
+    let hasSettled = false;
+    request.onupgradeneeded = () => createStoreIfMissing(request.result);
+    request.onsuccess = () => {
+        if (hasSettled) {
+            request.result.close();
+            return;
+        }
+        hasSettled = true;
+        resolve(request.result);
+    };
+    request.onerror = () => {
+        hasSettled = true;
+        reject(new Error('Failed to open WalletConnect IndexedDB'));
+    };
+    // A version-bump upgrade is blocked when another connection (another tab, or
+    // WalletConnect's own cached idb-keyval connection) still holds the database
+    // open. IndexedDB then fires neither success nor error, so we reject to keep
+    // the promise from hanging; the caller swallows it and lets SignClient.init
+    // proceed exactly as it would without this repair step.
+    request.onblocked = () => {
+        hasSettled = true;
+        reject(new Error('WalletConnect IndexedDB store upgrade was blocked by another open connection'));
+    };
+});
+const repairMissingStore = () => __awaiter(void 0, void 0, void 0, function* () {
+    const db = yield openConnection();
+    const hasStore = db.objectStoreNames.contains(WALLET_CONNECT_STORE_NAME);
+    const currentVersion = db.version;
+    db.close();
+    if (hasStore) {
+        return;
+    }
+    // Reopening at the same version won't re-run onupgradeneeded, so the store
+    // would stay missing. Bumping the version triggers an upgrade that recreates
+    // only the missing store, leaving any other stored data intact.
+    const upgradedDb = yield openConnection(currentVersion + 1);
+    upgradedDb.close();
+});
+/**
+ * Ensures WalletConnect's IndexedDB object store exists before SignClient opens
+ * the connection. On iOS WebKit an upgrade interrupted by a webview reload can
+ * leave the `WALLET_CONNECT_V2_INDEXED_DB` database committed at its version
+ * with the object store never created; every subsequent WalletConnect read or
+ * write then throws NotFoundError ("one of the specified object stores was not
+ * found") until the store is recreated.
+ *
+ * The store is recreated with a version bump — the database is never deleted,
+ * so no session data is lost. This is a best-effort no-op for healthy databases
+ * and for environments without IndexedDB (SSR, React Native), so it cannot
+ * regress the default WalletConnect behaviour: on any failure SignClient.init
+ * proceeds exactly as it would without this step.
+ */
+const ensureWalletConnectStore = () => __awaiter(void 0, void 0, void 0, function* () {
+    if (typeof indexedDB === 'undefined') {
+        return;
+    }
+    try {
+        yield repairMissingStore();
+    }
+    catch (_a) {
+        // Best-effort pre-flight repair. Swallowing lets SignClient.init proceed as
+        // it would without this step, so WalletConnect is never left worse off.
+    }
+});
+
+export { ensureWalletConnectStore };

package/src/getSignClientSingleton/getSignClientSingleton.cjs

@@ -5,6 +5,7 @@ Object.defineProperty(exports, '__esModule', { value: true });
 
 var _tslib = require('../../_virtual/_tslib.cjs');
 var SignClient = require('@walletconnect/sign-client');
+var ensureWalletConnectStore = require('./ensureWalletConnectStore.cjs');
 var reconcileOrphanedPairings = require('./reconcileOrphanedPairings.cjs');
 
 function _interopDefaultLegacy (e) { return e && typeof e === 'object' && 'default' in e ? e : { 'default': e }; }
@@ -21,6 +22,10 @@ let signClientSingleton = undefined;
 const getSignClientSingleton = (_a) => _tslib.__awaiter(void 0, [_a], void 0, function* ({ projectId, appIcon, appName, redirectUrl, }) {
     if (!signClientSingleton) {
         const redirect = redirectUrl ? { native: redirectUrl } : undefined;
+        // Repair WalletConnect's IndexedDB object store before SignClient opens it,
+        // so an interrupted upgrade (iOS WebKit reload) that left the store missing
+        // can't make every subsequent read/write throw NotFoundError.
+        yield ensureWalletConnectStore.ensureWalletConnectStore();
         signClientSingleton = yield SignClient__default["default"].init({
             customStoragePrefix: `dynamicauth_${projectId}_walletconnect`,
             metadata: {

package/src/getSignClientSingleton/getSignClientSingleton.js

@@ -1,6 +1,7 @@
 'use client'
 import { __awaiter } from '../../_virtual/_tslib.js';
 import SignClient from '@walletconnect/sign-client';
+import { ensureWalletConnectStore } from './ensureWalletConnectStore.js';
 import { reconcileOrphanedPairings } from './reconcileOrphanedPairings.js';
 
 /**
@@ -13,6 +14,10 @@ let signClientSingleton = undefined;
 const getSignClientSingleton = (_a) => __awaiter(void 0, [_a], void 0, function* ({ projectId, appIcon, appName, redirectUrl, }) {
     if (!signClientSingleton) {
         const redirect = redirectUrl ? { native: redirectUrl } : undefined;
+        // Repair WalletConnect's IndexedDB object store before SignClient opens it,
+        // so an interrupted upgrade (iOS WebKit reload) that left the store missing
+        // can't make every subsequent read/write throw NotFoundError.
+        yield ensureWalletConnectStore();
         signClientSingleton = yield SignClient.init({
             customStoragePrefix: `dynamicauth_${projectId}_walletconnect`,
             metadata: {