feat: merge wallets-v1 into main

.changeset/add-sdk-logger-device-signer.md

@@ -0,0 +1,5 @@
+---
+'@crossmint/wallets-sdk': patch
+---
+
+Add SDK logger decorator to device signer key storage methods for improved observability

.changeset/chatty-frogs-change.md

@@ -0,0 +1,6 @@
+---
+"@crossmint/client-sdk-react-base": minor
+"@crossmint/wallets-sdk": minor
+---
+
+Device signer can be used in new devices. During the first transaction it will automatically create a device signer before running the transaction

.changeset/client-side-address-validation.md

@@ -0,0 +1,6 @@
+---
+"@crossmint/wallets-sdk": patch
+"@crossmint/common-sdk-base": patch
+---
+
+Add client-side validation for recipient addresses in wallet.send(). Invalid addresses now throw an `InvalidAddressError` immediately instead of making a round-trip to the server.

.changeset/device-signer-approval-check.md

@@ -0,0 +1,10 @@
+---
+"@crossmint/wallets-sdk": patch
+---
+
+fix: check device signer approval instead of needsRecovery flag in recover()
+
+Replaces the needsRecovery() flag check with an actual signerIsRegistered() call to verify
+whether the device signer is approved on the wallet. This fixes the case where the recovery
+signer does not require auth and there is no device signer, causing recover() to skip
+registration.

.changeset/device-signer-default.md

@@ -0,0 +1,15 @@
+---
+"@crossmint/wallets-sdk": major
+"@crossmint/client-sdk-react-base": major
+---
+
+Make device signer the default operational signer (WAL-9287).
+
+BREAKING CHANGES:
+- Removed `signer` property from `WalletArgsFor` and `WalletCreateArgs`
+- `recovery` is now required on `WalletCreateArgs`
+- Removed `assembleSigner` public method from `CrossmintWallets`
+- Removed `onChangeSigner` callback
+- Removed `getOrCreateWallet` from React provider public API; use `getWallet` and `createWallet` separately
+- `getWallet` now accepts `alias` instead of `signer`
+

.changeset/device-signer-idb-fatal.md

@@ -0,0 +1,5 @@
+---
+'@crossmint/wallets-sdk': patch
+---
+
+Handle device signer IDB fatal errors with iframe reload and retry

.changeset/device-signer-name.md

@@ -0,0 +1,12 @@
+---
+"@crossmint/wallets-sdk": minor
+"@crossmint/expo-device-signer": minor
+---
+
+Add human-readable device name to device signers.
+
+- Added `name` field to `DeviceSignerConfig` and `DeviceSignerDescriptor`
+- Added abstract `getDeviceName()` method to `DeviceSignerKeyStorage`
+- `IframeDeviceSignerKeyStorage` derives the name from `navigator.userAgent` (e.g. "Chrome on Mac")
+- `NativeDeviceSignerKeyStorage` uses `expo-device` APIs for real native device names (e.g. "iPhone 15 (iOS)")
+- Both `registerSigners` (wallet creation) and `addSigner` (recovery) now send the device name to the API

.changeset/disallow-passkeys-react-native.md

@@ -0,0 +1,5 @@
+---
+"@crossmint/client-sdk-react-native-ui": patch
+---
+
+Disallow passkey signers in React Native. Passkeys are not supported in React Native and will now throw a clear error when used as recovery signers, delegated signers, or via createPasskeySigner.

.changeset/fix-device-signer-hex-comparison.md

@@ -0,0 +1,6 @@
+---
+"@crossmint/wallets-sdk": patch
+---
+
+Fix createWallet failing when a device signer descriptor from createDeviceSigner() is passed in signers[]. The publicKey.x/y hex values are now normalized to decimal before comparison during idempotency validation.
+

.changeset/fix-external-wallet-recovery-config.md

@@ -0,0 +1,5 @@
+---
+"@crossmint/wallets-sdk": patch
+---
+
+fix: preserve external-wallet recovery signer config (onSign callback) during wallet instantiation

.changeset/fix-getwallet-description.md

@@ -0,0 +1,5 @@
+---
+"@crossmint/wallets-sdk": patch
+---
+
+Remove incorrect signer mention from getWallet JSDoc description.

.changeset/fix-passkey-signer-publickey.md

@@ -0,0 +1,5 @@
+---
+'@crossmint/wallets-sdk': patch
+---
+
+fix: pass full passkey signer config in addSigner to preserve publicKey

.changeset/fix-server-recovery-addsigner.md

@@ -0,0 +1,9 @@
+---
+"@crossmint/wallets-sdk": patch
+---
+
+Fix server recovery wallets auto-approve for addSigner
+
+- Preserve user-provided recovery config (with secret) during wallet creation so server recovery signers can properly auto-approve addSigner operations
+- Use buildInternalSignerConfig for recovery signer assembly in addSigner, which correctly derives server signer keys
+

.changeset/fix-tee-double-init.md

@@ -0,0 +1,9 @@
+---
+"@crossmint/wallets-sdk": patch
+---
+
+fix: prevent duplicate TEE initialization race condition in NonCustodialSigner
+
+Stores the constructor's initialize() promise in _initializationPromise so that
+getTEEConnection() can detect an in-flight initialization and await it instead
+of starting a parallel one, preventing duplicate iframe/TEE attestation.

.changeset/fix-transfers-optional-params.md

@@ -0,0 +1,6 @@
+---
+"@crossmint/wallets-sdk": patch
+---
+
+fix: make tokens and status optional in wallet.transfers()
+

.changeset/fix-zero-value-transfers.md

@@ -0,0 +1,5 @@
+---
+"@crossmint/wallets-sdk": patch
+---
+
+Validate transfer amount in wallet.send() to reject zero, negative, and non-numeric values before sending on-chain. Throws InvalidTransferAmountError for invalid amounts.

.changeset/homogenize-signer-management.md

@@ -0,0 +1,11 @@
+---
+"@crossmint/wallets-sdk": minor
+---
+
+Homogenize signer management to always use full objects with approval status
+
+- `addSigner()` now accepts full signer config objects (`SignerConfigForChain<C>`) instead of locator strings
+- `addSigner()` returns a `DelegatedSigner` with approval status
+- `signers()` returns full `DelegatedSigner` objects, filtered to only include signers that exist for the instantiated chain
+- New `SignerStatus` and `DelegatedSigner` types are exported
+

.changeset/improve-signer-missing-error.md

@@ -0,0 +1,5 @@
+---
+"@crossmint/wallets-sdk": patch
+---
+
+Improve error messages when server wallet signer is missing. Instead of a generic "read-only" error, the SDK now provides context-specific guidance for server signers, external-wallet signers, and wallets with multiple signers. Also adds a warning log when auto-assembly of the default signer fails.

.changeset/itchy-ducks-collect.md

@@ -0,0 +1,6 @@
+---
+"@crossmint/client-sdk-react-ui": minor
+"@crossmint/wallets-sdk": minor
+---
+
+Browser Device Key support with Iframe Key Storage

.changeset/loud-timers-melt.md

@@ -0,0 +1,5 @@
+---
+"@crossmint/client-sdk-react-native-ui": patch
+---
+
+Fixes modal icons for otp flow

.changeset/mighty-coins-fix.md

@@ -0,0 +1,7 @@
+---
+"@crossmint/client-sdk-react-ui": major
+"@crossmint/client-sdk-react-base": major
+"@crossmint/wallets-sdk": major
+---
+
+Add support for Delegated Signers.

.changeset/new-dots-bow.md

@@ -0,0 +1,5 @@
+---
+"@crossmint/wallets-sdk": patch
+---
+
+Default for recovery or one server signer

.changeset/reject-unknown-chains.md

@@ -0,0 +1,5 @@
+---
+"@crossmint/wallets-sdk": patch
+---
+
+Reject unknown chain names in createWallet and getWallet with an InvalidChainError before any wallet resource is created

.changeset/remove-biometric-policy.md

@@ -0,0 +1,6 @@
+---
+'@crossmint/wallets-sdk': minor
+'@crossmint/client-sdk-react-ui': minor
+---
+
+Remove biometric policy from device signers. Only "none" policies are now created, which is the default for the iframe.

.changeset/remove-customauth.md

@@ -0,0 +1,9 @@
+---
+"@crossmint/common-sdk-base": minor
+"@crossmint/client-sdk-react-base": minor
+"@crossmint/client-sdk-react-ui": minor
+"@crossmint/client-sdk-react-native-ui": minor
+"@crossmint/wallets-sdk": minor
+---
+
+Remove deprecated customAuth (experimental_customAuth, experimental_setCustomAuth, CustomAuth type) from the SDK. All authentication now uses the setJwt/crossmint.jwt pattern instead.

.changeset/remove-dynamic-wallet-auth.md

@@ -0,0 +1,12 @@
+---
+"@crossmint/client-sdk-react-ui": major
+"@crossmint/client-sdk-react-base": major
+---
+
+Remove Dynamic crypto wallet authentication from Crossmint Auth.
+
+This is a breaking change that removes the ability to authenticate with crypto wallets via Dynamic (dynamic-xyz) in the React UI SDK. The following are removed:
+
+- `web3`, `web3:evm-only`, and `web3:solana-only` login methods
+- `experimental_externalWalletSigner` from the auth context
+- All `@dynamic-labs/*` dependencies from the auth flow

.changeset/remove-experimental-prefixes.md

@@ -0,0 +1,19 @@
+---
+"@crossmint/wallets-sdk": major
+"@crossmint/client-sdk-react-base": major
+"@crossmint/client-sdk-react-ui": major
+---
+
+Remove experimental_ prefixes from wallets SDK public API
+
+BREAKING CHANGE: All experimental_ prefixed APIs have been graduated to stable with new names:
+
+- `experimental_prepareOnly` -> `prepareOnly`
+- `experimental_callbacks` -> `_callbacks`
+- `experimental_loginWithOAuth` -> `loginWithOAuth`
+- `experimental_getNfts` -> `getNfts` / `nfts`
+- `experimental_activity` -> `getTransfers` / `transfers`
+- `experimental_signer` -> `signer`
+- `experimental_approval` -> `approval`
+- `experimental_transaction` -> `transaction`
+- `experimental_transactions` -> `transactions`

.changeset/remove-farcaster-auth.md

@@ -0,0 +1,8 @@
+---
+"@crossmint/client-sdk-auth": minor
+"@crossmint/client-sdk-react-ui": minor
+"@crossmint/common-sdk-auth": minor
+"@crossmint/client-sdk-react-base": minor
+---
+
+Remove Farcaster authentication. All Farcaster-related types, components, methods, and dependencies have been removed. The `signInWithFarcaster` method, `FarcasterSignIn` component, `FarcasterProvider`, `FarcasterMetadata` type, and `"farcaster"` login method are no longer available.

.changeset/remove-owner-client-side.md

@@ -0,0 +1,12 @@
+---
+"@crossmint/wallets-sdk": major
+"@crossmint/client-sdk-react-base": major
+"@crossmint/client-sdk-react-ui": major
+"@crossmint/client-sdk-react-native-ui": major
+---
+
+BREAKING CHANGE: Remove owner parameter from client-side getOrCreateWallet calls
+
+The `owner` field can no longer be specified in client-side `getOrCreateWallet` calls. Owner is now determined from JWT authentication.
+
+Migration: Remove the `owner` parameter from any client-side wallet creation calls. The owner is automatically determined from the authenticated user's JWT token.

.changeset/remove-stellar-sdk-v1.md

@@ -0,0 +1,5 @@
+---
+"@crossmint/wallets-sdk": patch
+---
+
+Remove @stellar/stellar-sdk dependency by replacing it with tweetnacl (already a dependency) for ed25519 operations and a local Stellar StrKey encoder ported from open-signer.

.changeset/remove-useauth-alias.md

@@ -0,0 +1,11 @@
+---
+"@crossmint/client-sdk-react-base": major
+"@crossmint/client-sdk-react-ui": major
+"@crossmint/client-sdk-react-native-ui": major
+---
+
+Remove `useAuth` hook alias in favor of `useCrossmintAuth`
+
+BREAKING CHANGE: The `useAuth` export has been removed from all packages. Use `useCrossmintAuth` instead, which provides the same functionality.
+
+- `useAuth()` -> `useCrossmintAuth()`

.changeset/rename-delegated-signers.md

@@ -0,0 +1,10 @@
+---
+"@crossmint/wallets-sdk": minor
+"@crossmint/client-sdk-react-ui": minor
+"@crossmint/client-sdk-react-base": minor
+---
+
+Rename DelegatedSigner to Signer and AdminSignerConfig to RecoverySignerConfig.
+
+The exported type `DelegatedSigner` has been renamed to `Signer`. `DelegatedSignerInput` → `SignerInput`, `AdminSignerConfig` → `RecoverySignerConfig`. The internal `Signer` interface (signing mechanism adapter) has been renamed to `SignerAdapter` and is now publicly exported for consumers using `additionalSigners`.
+

.changeset/shaggy-onions-swim.md

@@ -0,0 +1,5 @@
+---
+"@crossmint/wallets-sdk": patch
+---
+
+If a signer is in a pending state, approve it and then use it'

.changeset/split-get-create-wallet.md

@@ -0,0 +1,8 @@
+---
+"@crossmint/wallets-sdk": major
+"@crossmint/client-sdk-react-base": patch
+"@crossmint/client-sdk-react-ui": patch
+"@crossmint/client-sdk-react-native-ui": patch
+---
+
+Split getOrCreateWallet into separate getWallet and createWallet methods, both working client and server side. Make signer optional for read-only wallets. Add device signer resolution logic in getWallet. Add createDeviceSigner helper function. Support device signers with pre-existing locators.

.changeset/tall-papayas-glow.md

@@ -0,0 +1,5 @@
+---
+"@crossmint/wallets-sdk": patch
+---
+
+Support Solana Device Signer

.changeset/ten-mails-scream.md

@@ -0,0 +1,6 @@
+---
+"@crossmint/client-sdk-react-base": minor
+"@crossmint/wallets-sdk": minor
+---
+
+Add device signer support

.changeset/tough-mice-poke.md

@@ -0,0 +1,5 @@
+---
+"@crossmint/client-sdk-react-native-ui": patch
+---
+
+Statically loading @crossmint/expo-device-signer

.changeset/tricky-planes-rest.md

@@ -0,0 +1,5 @@
+---
+"@crossmint/wallets-sdk": patch
+---
+
+Defaulting signer

.changeset/use-logger-wallet-base-provider.md

@@ -0,0 +1,5 @@
+---
+'@crossmint/client-sdk-react-base': patch
+---
+
+Replace console.error with structured logger.error in CrossmintWalletBaseProvider for improved observability

.changeset/use-signer-recovery-support.md

@@ -0,0 +1,11 @@
+---
+"@crossmint/wallets-sdk": minor
+---
+
+Breaking: `useSigner()` now only accepts signer config objects + recovery signer support
+
+- **Breaking:** `useSigner()` no longer accepts locator strings — only signer config objects (`SignerConfigForChain<C>`)
+- `useSigner()` now accepts the wallet's recovery (admin) signer in addition to delegated signers
+- Recovery signers skip the delegated signer registration check
+- External-wallet signers (both recovery and delegated) require the full config object with an `onSign` callback
+- All signer types must be passed as config objects (e.g. `{ type: "email", email: "..." }`)

.changeset/use-wallet-otp-signer.md

@@ -0,0 +1,14 @@
+---
+"@crossmint/wallets-sdk": minor
+"@crossmint/client-sdk-react-ui": minor
+"@crossmint/client-sdk-react-native-ui": minor
+"@crossmint/client-sdk-react-base": minor
+---
+
+feat: unify OTP signer API with useWalletOtpSigner hook and showOtpSignerPrompt prop
+
+- Replace `headlessSigningFlow` with `showOtpSignerPrompt` (defaults to `true`) for consistent opt-in/opt-out of built-in OTP UI across both react-ui and react-native
+- Rename `emailSignerState` to `otpSignerState` in the wallet context to reflect support for both email and phone OTP signers
+- Rename `sendEmailWithOtp` to `sendOtp` across the SDK to unify email and phone OTP signer APIs
+- Add new `useWalletOtpSigner` hook in react-base, exported from both react-ui and react-native-ui
+- Deprecate `useWalletEmailSigner` in react-native in favor of `useWalletOtpSigner`

.changeset/wal-9286-rename-signer-terminology.md

@@ -0,0 +1,7 @@
+---
+"@crossmint/wallets-sdk": major
+"@crossmint/client-sdk-react-base": major
+---
+
+BREAKING: Rename SDK-facing terminology: adminSigner to recovery, delegatedSigners to signers, addDelegatedSigner() to addSigner(), delegatedSigners() to signers(). API layer unchanged.
+

.changeset/wallet-fixes.md

@@ -0,0 +1,5 @@
+---
+"@crossmint/wallets-sdk": patch
+---
+
+Simplify null check in recover() and make apiClient publicly accessible

.changeset/wet-cheetahs-agree.md

@@ -0,0 +1,5 @@
+---
+"@crossmint/wallets-sdk": patch
+---
+
+Fix createDeviceSigner always generating a new key instead of reusing an existing one for the same address on the same device

.expo/README.md

@@ -0,0 +1,13 @@
+> Why do I have a folder named ".expo" in my project?
+
+The ".expo" folder is created when an Expo project is started using "expo start" command.
+
+> What do the files contain?
+
+- "devices.json": contains information about devices that have recently opened this project. This is used to populate the "Development sessions" list in your development builds.
+- "settings.json": contains the server configuration that is used to serve the application manifest.
+
+> Should I commit the ".expo" folder?
+
+No, you should not share the ".expo" folder. It does not contain any information that is relevant for other developers working on the project, it is specific to your machine.
+Upon project creation, the ".expo" folder is already added to your ".gitignore" file.

.expo/devices.json

@@ -0,0 +1,3 @@
+{
+  "devices": []
+}

.expo/prebuild/cached-packages.json

@@ -0,0 +1,4 @@
+{
+  "dependencies": "e79f4d365c0b15b4332b91e402595ea8d8d7ced4",
+  "devDependencies": "ac5a6021029887fec32e4f4d95a48ec3634e2628"
+}