@dynamic-labs/wallet-connect 5.3.2 → 5.4.1

package/CHANGELOG.md

@@ -1,4 +1,38 @@
 
+### [5.4.1](https://github.com/dynamic-labs/dynamic-auth/compare/v5.4.0...v5.4.1) (2026-08-26)
+
+
+### Bug Fixes
+
+* **webview-controller:** resolve which keychain key a session belongs to ([#12246](https://github.com/dynamic-labs/dynamic-auth/issues/12246)) ([3d110db](https://github.com/dynamic-labs/dynamic-auth/commit/3d110db831c6e9d82d07d86841f5c7733924b17e))
+* **bitcoin:** forward the password through the BTC importPrivateKey override ([#12278](https://github.com/dynamic-labs/dynamic-auth/issues/12278)) ([21e1df3](https://github.com/dynamic-labs/dynamic-auth/commit/21e1df3e33e96e2efdb15ffa0fd29a441056202e))
+* **react-native-extension:** recover 4.x expo-secure-store sessions on keychain miss ([#12254](https://github.com/dynamic-labs/dynamic-auth/issues/12254)) ([217e991](https://github.com/dynamic-labs/dynamic-auth/commit/217e991838f3073c12e2d2fab7a2e12830faad9e)), closes [#12092](https://github.com/dynamic-labs/dynamic-auth/issues/12092) [#12092](https://github.com/dynamic-labs/dynamic-auth/issues/12092) [#12092](https://github.com/dynamic-labs/dynamic-auth/issues/12092) [#12092](https://github.com/dynamic-labs/dynamic-auth/issues/12092) [#12242](https://github.com/dynamic-labs/dynamic-auth/issues/12242) [#12242](https://github.com/dynamic-labs/dynamic-auth/issues/12242)
+* **transaction-card:** use walletConnector prop for network/fee instead of primaryWallet ([#12063](https://github.com/dynamic-labs/dynamic-auth/issues/12063)) ([81314d2](https://github.com/dynamic-labs/dynamic-auth/commit/81314d25fba4b20ab89631bc2d9ceeb9e2b6b2ac))
+* **waas-svm:** instrument sponsorship retry attempts ([#12281](https://github.com/dynamic-labs/dynamic-auth/issues/12281)) ([7273a4b](https://github.com/dynamic-labs/dynamic-auth/commit/7273a4bc456cad512c0e9fbcd2abd66532a2f7df))
+* **webview-controller:** recover 4.x secure-storage sessions and surface init failures ([#12242](https://github.com/dynamic-labs/dynamic-auth/issues/12242)) ([b51605c](https://github.com/dynamic-labs/dynamic-auth/commit/b51605cc9bdbb5d695173192c502a58d899bbbdd)), closes [#12094](https://github.com/dynamic-labs/dynamic-auth/issues/12094) [#12095](https://github.com/dynamic-labs/dynamic-auth/issues/12095) [#12098](https://github.com/dynamic-labs/dynamic-auth/issues/12098) [dynamic-labs/flutter-sdk#256](https://github.com/dynamic-labs/flutter-sdk/issues/256)
+
+## [5.4.0](https://github.com/dynamic-labs/dynamic-auth/compare/v5.3.2...v5.4.0) (2026-08-25)
+
+
+### Features
+
+* **aleo:** wire up signMessage on the WaaS Aleo connector ([#12235](https://github.com/dynamic-labs/dynamic-auth/issues/12235)) ([e56cbf5](https://github.com/dynamic-labs/dynamic-auth/commit/e56cbf5546bdcc21ce916dece43ae36dcea9b808))
+* **waas:** thread isRawScalarImport through importPrivateKey for ed25519 chains ([#12220](https://github.com/dynamic-labs/dynamic-auth/issues/12220)) ([ced9efa](https://github.com/dynamic-labs/dynamic-auth/commit/ced9efac5fa5a4a1280383419f56fe22733722cd))
+* **webview:** add policies message contract and controller ([#12248](https://github.com/dynamic-labs/dynamic-auth/issues/12248)) ([8557c1e](https://github.com/dynamic-labs/dynamic-auth/commit/8557c1ed3861e12f1f06b2bb610184813b577daa))
+
+
+### Bug Fixes
+
+* **bitcoin:** pass the wallet's address type when signing ([#12265](https://github.com/dynamic-labs/dynamic-auth/issues/12265)) ([b8a8eab](https://github.com/dynamic-labs/dynamic-auth/commit/b8a8eab7e4cc294cc307fb10ea6814e76111a274))
+* remediate high-severity tar vulnerability and prune a dead override ([#12268](https://github.com/dynamic-labs/dynamic-auth/issues/12268)) ([6b1b343](https://github.com/dynamic-labs/dynamic-auth/commit/6b1b343e7947e8da30012446677e342ae9bfe14a))
+* **waas-svm:** fix retry-classification and environmentId gaps in [#12240](https://github.com/dynamic-labs/dynamic-auth/issues/12240) ([#12247](https://github.com/dynamic-labs/dynamic-auth/issues/12247)) ([e79cecc](https://github.com/dynamic-labs/dynamic-auth/commit/e79ceccd424c48c3a7f45fdd6ea288c269ac0171))
+* **wallet-connect:** reopen WalletConnect IndexedDB when the browser closes the connection ([#12262](https://github.com/dynamic-labs/dynamic-auth/issues/12262)) ([1a20dde](https://github.com/dynamic-labs/dynamic-auth/commit/1a20ddeaeec590ae3390c9e47ef3c14738379b83))
+
+
+### Performance Improvements
+
+* **ethereum-gasless-core:** parallel 7702 auth signing and long-poll sponsored-tx status ([#12225](https://github.com/dynamic-labs/dynamic-auth/issues/12225)) ([53ca916](https://github.com/dynamic-labs/dynamic-auth/commit/53ca91668f8dd839c52d55a0e5d7bb5257f7f415))
+
 ### [5.3.2](https://github.com/dynamic-labs/dynamic-auth/compare/v5.3.1...v5.3.2) (2026-08-19)
 
 

package/package.cjs

@@ -3,6 +3,6 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var version = "5.3.2";
+var version = "5.4.1";
 
 exports.version = version;

package/package.js

@@ -1,4 +1,4 @@
 'use client'
-var version = "5.3.2";
+var version = "5.4.1";
 
 export { version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dynamic-labs/wallet-connect",
-  "version": "5.3.2",
+  "version": "5.4.1",
   "description": "A React SDK for implementing wallet web3 authentication and authorization to your website.",
   "author": "Dynamic Labs, Inc.",
   "license": "MIT",
@@ -18,9 +18,10 @@
   },
   "homepage": "https://www.dynamic.xyz/",
   "dependencies": {
-    "@dynamic-labs/logger": "5.3.2",
+    "@dynamic-labs/logger": "5.4.1",
+    "@walletconnect/keyvaluestorage": "1.1.1",
     "@walletconnect/sign-client": "2.21.5",
-    "@dynamic-labs/assert-package-version": "5.3.2"
+    "@dynamic-labs/assert-package-version": "5.4.1"
   },
   "peerDependencies": {}
 }

package/src/getSignClientSingleton/createResilientStorage.cjs

@@ -0,0 +1,64 @@
+'use client'
+'use strict';
+
+Object.defineProperty(exports, '__esModule', { value: true });
+
+var _tslib = require('../../_virtual/_tslib.cjs');
+var keyvaluestorage = require('@walletconnect/keyvaluestorage');
+var logger = require('../utils/logger.cjs');
+
+// WalletConnect's browser storage keeps a single IndexedDB connection cached for
+// the life of the page (idb-keyval's `createStore`). WebKit unilaterally closes
+// IndexedDB connections under memory pressure and on some page lifecycle
+// transitions, and the cached connection is never reopened, so every read and
+// write from that point on rejects with one of these errors — WalletConnect
+// pairing, session persistence and signing stay broken until a full reload.
+const CLOSING_CONNECTION_MESSAGE = 'The database connection is closing';
+const RECOVERABLE_ERROR_NAMES = new Set([
+    'InvalidStateError',
+    'UnknownError',
+    'AbortError',
+    'TransactionInactiveError',
+]);
+const isRecoverableError = (error) => {
+    if (!(error instanceof Error)) {
+        return false;
+    }
+    const hasRecoverableName = RECOVERABLE_ERROR_NAMES.has(error.name);
+    return (hasRecoverableName || error.message.includes(CLOSING_CONNECTION_MESSAGE));
+};
+/**
+ * Wraps WalletConnect's own key/value storage so a dead IndexedDB connection is
+ * recovered instead of failing every subsequent operation.
+ *
+ * A fresh `KeyValueStorage` opens a fresh IndexedDB connection, so retrying the
+ * operation against a new instance succeeds once the browser has closed the
+ * previous one. Instantiating it also re-runs WalletConnect's own
+ * localStorage-to-IndexedDB migration check, which is a no-op for already
+ * migrated data, and falls back to localStorage when IndexedDB is unusable.
+ */
+const createResilientStorage = () => {
+    let storage = new keyvaluestorage.KeyValueStorage();
+    const withRecovery = (operation) => _tslib.__awaiter(void 0, void 0, void 0, function* () {
+        try {
+            return yield operation(storage);
+        }
+        catch (error) {
+            if (!isRecoverableError(error)) {
+                throw error;
+            }
+            logger.logger.warn('WalletConnect storage operation failed, reopening the connection', error);
+            storage = new keyvaluestorage.KeyValueStorage();
+            return operation(storage);
+        }
+    });
+    return {
+        getEntries: () => withRecovery((current) => current.getEntries()),
+        getItem: (key) => withRecovery((current) => current.getItem(key)),
+        getKeys: () => withRecovery((current) => current.getKeys()),
+        removeItem: (key) => withRecovery((current) => current.removeItem(key)),
+        setItem: (key, value) => withRecovery((current) => current.setItem(key, value)),
+    };
+};
+
+exports.createResilientStorage = createResilientStorage;

package/src/getSignClientSingleton/createResilientStorage.d.ts

@@ -0,0 +1,12 @@
+import type { IKeyValueStorage } from '@walletconnect/keyvaluestorage';
+/**
+ * Wraps WalletConnect's own key/value storage so a dead IndexedDB connection is
+ * recovered instead of failing every subsequent operation.
+ *
+ * A fresh `KeyValueStorage` opens a fresh IndexedDB connection, so retrying the
+ * operation against a new instance succeeds once the browser has closed the
+ * previous one. Instantiating it also re-runs WalletConnect's own
+ * localStorage-to-IndexedDB migration check, which is a no-op for already
+ * migrated data, and falls back to localStorage when IndexedDB is unusable.
+ */
+export declare const createResilientStorage: () => IKeyValueStorage;

package/src/getSignClientSingleton/createResilientStorage.js

@@ -0,0 +1,60 @@
+'use client'
+import { __awaiter } from '../../_virtual/_tslib.js';
+import { KeyValueStorage } from '@walletconnect/keyvaluestorage';
+import { logger } from '../utils/logger.js';
+
+// WalletConnect's browser storage keeps a single IndexedDB connection cached for
+// the life of the page (idb-keyval's `createStore`). WebKit unilaterally closes
+// IndexedDB connections under memory pressure and on some page lifecycle
+// transitions, and the cached connection is never reopened, so every read and
+// write from that point on rejects with one of these errors — WalletConnect
+// pairing, session persistence and signing stay broken until a full reload.
+const CLOSING_CONNECTION_MESSAGE = 'The database connection is closing';
+const RECOVERABLE_ERROR_NAMES = new Set([
+    'InvalidStateError',
+    'UnknownError',
+    'AbortError',
+    'TransactionInactiveError',
+]);
+const isRecoverableError = (error) => {
+    if (!(error instanceof Error)) {
+        return false;
+    }
+    const hasRecoverableName = RECOVERABLE_ERROR_NAMES.has(error.name);
+    return (hasRecoverableName || error.message.includes(CLOSING_CONNECTION_MESSAGE));
+};
+/**
+ * Wraps WalletConnect's own key/value storage so a dead IndexedDB connection is
+ * recovered instead of failing every subsequent operation.
+ *
+ * A fresh `KeyValueStorage` opens a fresh IndexedDB connection, so retrying the
+ * operation against a new instance succeeds once the browser has closed the
+ * previous one. Instantiating it also re-runs WalletConnect's own
+ * localStorage-to-IndexedDB migration check, which is a no-op for already
+ * migrated data, and falls back to localStorage when IndexedDB is unusable.
+ */
+const createResilientStorage = () => {
+    let storage = new KeyValueStorage();
+    const withRecovery = (operation) => __awaiter(void 0, void 0, void 0, function* () {
+        try {
+            return yield operation(storage);
+        }
+        catch (error) {
+            if (!isRecoverableError(error)) {
+                throw error;
+            }
+            logger.warn('WalletConnect storage operation failed, reopening the connection', error);
+            storage = new KeyValueStorage();
+            return operation(storage);
+        }
+    });
+    return {
+        getEntries: () => withRecovery((current) => current.getEntries()),
+        getItem: (key) => withRecovery((current) => current.getItem(key)),
+        getKeys: () => withRecovery((current) => current.getKeys()),
+        removeItem: (key) => withRecovery((current) => current.removeItem(key)),
+        setItem: (key, value) => withRecovery((current) => current.setItem(key, value)),
+    };
+};
+
+export { createResilientStorage };

package/src/getSignClientSingleton/getSignClientSingleton.cjs

@@ -5,6 +5,7 @@ Object.defineProperty(exports, '__esModule', { value: true });
 
 var _tslib = require('../../_virtual/_tslib.cjs');
 var SignClient = require('@walletconnect/sign-client');
+var createResilientStorage = require('./createResilientStorage.cjs');
 var ensureWalletConnectStore = require('./ensureWalletConnectStore.cjs');
 var reconcileOrphanedPairings = require('./reconcileOrphanedPairings.cjs');
 
@@ -36,6 +37,9 @@ const getSignClientSingleton = (_a) => _tslib.__awaiter(void 0, [_a], void 0, fu
                 url: '',
             },
             projectId,
+            // WalletConnect's default storage caches one IndexedDB connection for the
+            // life of the page; this wrapper reopens it when the browser closes it.
+            storage: createResilientStorage.createResilientStorage(),
         });
         // Drain any pairings left over from a prior page load that never got
         // cleaned up (closed tabs, crashes, abandoned QR scans). Without this,

package/src/getSignClientSingleton/getSignClientSingleton.js

@@ -1,6 +1,7 @@
 'use client'
 import { __awaiter } from '../../_virtual/_tslib.js';
 import SignClient from '@walletconnect/sign-client';
+import { createResilientStorage } from './createResilientStorage.js';
 import { ensureWalletConnectStore } from './ensureWalletConnectStore.js';
 import { reconcileOrphanedPairings } from './reconcileOrphanedPairings.js';
 
@@ -28,6 +29,9 @@ const getSignClientSingleton = (_a) => __awaiter(void 0, [_a], void 0, function*
                 url: '',
             },
             projectId,
+            // WalletConnect's default storage caches one IndexedDB connection for the
+            // life of the page; this wrapper reopens it when the browser closes it.
+            storage: createResilientStorage(),
         });
         // Drain any pairings left over from a prior page load that never got
         // cleaned up (closed tabs, crashes, abandoned QR scans). Without this,