@dynamic-labs/bitcoin 4.92.3 → 4.92.4

package/CHANGELOG.md

@@ -1,4 +1,21 @@
 
+### [4.92.4](https://github.com/dynamic-labs/dynamic-auth/compare/v4.92.3...v4.92.4) (2026-07-16)
+
+
+### Features
+
+* **bitcoin:** per-network address switching and dust-limit send validation [v4] ([#11970](https://github.com/dynamic-labs/dynamic-auth/issues/11970)) ([76a4a9a](https://github.com/dynamic-labs/dynamic-auth/commit/76a4a9a5025d78798ebd1beffe6c0af59d2d029a)), closes [#11896](https://github.com/dynamic-labs/dynamic-auth/issues/11896) [#11800](https://github.com/dynamic-labs/dynamic-auth/issues/11800)
+* **midnight:** per-network addresses in deposit and wallet info views [v4] ([#11949](https://github.com/dynamic-labs/dynamic-auth/issues/11949)) ([978446a](https://github.com/dynamic-labs/dynamic-auth/commit/978446aca8546eb038ba9ed3be0503d10594ee15))
+* **midnight:** resolve wallet address per selected network [v4] ([#11948](https://github.com/dynamic-labs/dynamic-auth/issues/11948)) ([d6f858c](https://github.com/dynamic-labs/dynamic-auth/commit/d6f858c5e35defda7ed73cf97b3fdbe5ed9d131d))
+* set useMetamaskSdk to true by default ([#11926](https://github.com/dynamic-labs/dynamic-auth/issues/11926)) ([75b5a4a](https://github.com/dynamic-labs/dynamic-auth/commit/75b5a4a0fe8b1a375afce145c0b8bdc3ce761117))
+
+
+### Bug Fixes
+
+* **midnight:** align per-network code with the final main iteration [v4] ([#11971](https://github.com/dynamic-labs/dynamic-auth/issues/11971)) ([3ef3ba8](https://github.com/dynamic-labs/dynamic-auth/commit/3ef3ba8c090dfd9e4286b4e51bf350ea5e6feac7))
+* settle social sign-in when captcha is backed out or oauth popup never responds (v4) ([#11956](https://github.com/dynamic-labs/dynamic-auth/issues/11956)) ([ad49477](https://github.com/dynamic-labs/dynamic-auth/commit/ad49477f2acf61a154bb79cbe26b24f803cdb0e2))
+* validate that private key is not empty before upgrading to WaaS ([#11952](https://github.com/dynamic-labs/dynamic-auth/issues/11952)) ([21dfb83](https://github.com/dynamic-labs/dynamic-auth/commit/21dfb83cb29e42b335bc94a0cdd2062cf14a262a))
+
 ### [4.92.3](https://github.com/dynamic-labs/dynamic-auth/compare/v4.92.2...v4.92.3) (2026-07-10)
 
 

package/package.cjs

@@ -3,6 +3,6 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var version = "4.92.3";
+var version = "4.92.4";
 
 exports.version = version;

package/package.js

@@ -1,4 +1,4 @@
 'use client'
-var version = "4.92.3";
+var version = "4.92.4";
 
 export { version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dynamic-labs/bitcoin",
-  "version": "4.92.3",
+  "version": "4.92.4",
   "description": "A React SDK for implementing wallet web3 authentication and authorization to your website.",
   "author": "Dynamic Labs, Inc.",
   "license": "MIT",
@@ -18,24 +18,24 @@
   },
   "homepage": "https://www.dynamic.xyz/",
   "dependencies": {
-    "@dynamic-labs-wallet/browser-wallet-client": "1.0.48",
-    "@dynamic-labs-wallet/forward-mpc-client": "0.12.0",
+    "@dynamic-labs-wallet/browser-wallet-client": "1.0.70",
+    "@dynamic-labs-wallet/forward-mpc-client": "1.0.1",
     "@bitcoinerlab/secp256k1": "1.1.1",
     "@btckit/types": "0.0.19",
-    "@dynamic-labs/sdk-api-core": "0.0.1067",
+    "@dynamic-labs/sdk-api-core": "0.0.1073",
     "@wallet-standard/app": "1.0.1",
     "@wallet-standard/base": "1.0.1",
     "bitcoinjs-lib": "6.1.5",
     "ecpair": "2.1.0",
     "sats-connect": "4.2.1",
     "jsontokens": "4.0.1",
-    "@dynamic-labs/assert-package-version": "4.92.3",
-    "@dynamic-labs/logger": "4.92.3",
-    "@dynamic-labs/types": "4.92.3",
-    "@dynamic-labs/utils": "4.92.3",
-    "@dynamic-labs/waas": "4.92.3",
-    "@dynamic-labs/wallet-book": "4.92.3",
-    "@dynamic-labs/wallet-connector-core": "4.92.3",
+    "@dynamic-labs/assert-package-version": "4.92.4",
+    "@dynamic-labs/logger": "4.92.4",
+    "@dynamic-labs/types": "4.92.4",
+    "@dynamic-labs/utils": "4.92.4",
+    "@dynamic-labs/waas": "4.92.4",
+    "@dynamic-labs/wallet-book": "4.92.4",
+    "@dynamic-labs/wallet-connector-core": "4.92.4",
     "eventemitter3": "5.0.1"
   },
   "peerDependencies": {}

package/src/connectors/DynamicWaasBitcoinConnector/DynamicWaasBitcoinConnector.cjs

@@ -21,6 +21,9 @@ var PsbtParser = require('../../utils/psbtParser/PsbtParser.cjs');
 var BitcoinUiTransaction = require('../../utils/BitcoinUiTransaction/BitcoinUiTransaction.cjs');
 
 const logger = new logger$1.Logger('DynamicWaasConnector');
+/** Dynamic network ids for the Bitcoin networks (mirrors the networks catalog). */
+const BITCOIN_MAINNET_NETWORK_ID = 1;
+const BITCOIN_TESTNET_NETWORK_ID = 2;
 /**
  * Bitcoin connector for Dynamic WaaS (Wallet as a Service)
  * Extends BitcoinWalletConnector with WaaS functionality for Bitcoin transactions
@@ -40,6 +43,12 @@ class DynamicWaasBitcoinConnector extends waas.withDynamicWaas(BitcoinWalletConn
         this.overrideKey = 'dynamicwaas';
         this.isEmbeddedWallet = true;
         this.connectedChain = 'BTC';
+        /**
+         * The currently selected Bitcoin network id (1 = mainnet, 2 = testnet).
+         * One wallet (one key) exposes an address per network via network-tagged
+         * additional addresses; switching networks swaps the active address.
+         */
+        this.activeNetworkId = BITCOIN_MAINNET_NETWORK_ID;
         this.walletUiUtils = props.walletUiUtils;
         this.mempoolApiService = new MempoolApiService.MempoolApiService();
         this.psbtBuilderService = new PsbtBuilderService.PsbtBuilderService(this.mempoolApiService);
@@ -83,16 +92,15 @@ class DynamicWaasBitcoinConnector extends waas.withDynamicWaas(BitcoinWalletConn
     getAddress() {
         return _tslib.__awaiter(this, void 0, void 0, function* () {
             var _a;
-            const activeAccount = this.getActiveAccount();
-            if (!activeAccount || !activeAccount.address) {
-                if ((_a = this.verifiedCredential) === null || _a === void 0 ? void 0 : _a.address) {
-                    const { address } = this.verifiedCredential;
-                    this.setActiveAccount(address);
-                    return address;
-                }
-                throw new utils.DynamicError('No active wallet address found', 'no_active_wallet_address_found');
+            if (this.activeAccountAddress) {
+                return this.activeAccountAddress;
+            }
+            if ((_a = this.verifiedCredential) === null || _a === void 0 ? void 0 : _a.address) {
+                const { address } = this.verifiedCredential;
+                this.activeAccountAddress = address;
+                return address;
             }
-            return activeAccount.address;
+            throw new utils.DynamicError('No active wallet address found', 'no_active_wallet_address_found');
         });
     }
     /**
@@ -108,28 +116,113 @@ class DynamicWaasBitcoinConnector extends waas.withDynamicWaas(BitcoinWalletConn
         });
     }
     /**
-     * Gets the current Bitcoin network
-     * Always returns Dynamic's networkId (1 for mainnet)
-     * @returns The Dynamic networkId (1) for Bitcoin mainnet
+     * Gets the current Bitcoin network id (1 mainnet, 2 testnet)
      */
     getNetwork() {
         return _tslib.__awaiter(this, void 0, void 0, function* () {
-            return 1;
+            return this.activeNetworkId;
         });
     }
     /**
-     * Maps Dynamic's networkId to BitcoinNetwork enum for internal WaaS API calls
-     * Uses the current network from getNetwork() to determine the BitcoinNetwork value
-     * @returns The corresponding BitcoinNetwork enum value for the current network
+     * Maps the selected networkId to the BitcoinNetwork enum for internal WaaS
+     * API calls (signing) — balance/UTXO/broadcast are address-driven and follow
+     * the active address automatically.
      */
     getBitcoinNetworkEnum() {
+        return _tslib.__awaiter(this, void 0, void 0, function* () {
+            return (this.activeNetworkId === BITCOIN_TESTNET_NETWORK_ID
+                ? 'testnet'
+                : 'mainnet');
+        });
+    }
+    supportsNetworkSwitching() {
+        return true;
+    }
+    /**
+     * Testnet when the testnet network (id 2) is selected — drives the widget's
+     * native-denominated balance display (testnet coins have no fiat price).
+     */
+    isTestnet() {
+        return Promise.resolve(this.activeNetworkId === BITCOIN_TESTNET_NETWORK_ID);
+    }
+    /**
+     * Balance follows the active (per-network) address: callers pass the
+     * wallet's static primary address, which is the mainnet encoding — on
+     * testnet the switched address must be queried instead (the mempool API
+     * routing is address-driven).
+     */
+    getBalance(address) {
+        const _super = Object.create(null, {
+            getBalance: { get: () => super.getBalance }
+        });
         return _tslib.__awaiter(this, void 0, void 0, function* () {
             var _a;
-            const networkId = yield this.getNetwork();
-            const networkIdToBitcoinNetwork = {
-                1: 'mainnet',
-            };
-            return ((_a = networkIdToBitcoinNetwork[networkId]) !== null && _a !== void 0 ? _a : 'mainnet');
+            return _super.getBalance.call(this, (_a = this.activeAccountAddress) !== null && _a !== void 0 ? _a : address);
+        });
+    }
+    /**
+     * Wallet identity: keyshares/wallet records are keyed by the wallet's
+     * primary (mainnet) address. On testnet the active address is the same
+     * wallet's per-network encoding — WaaS lookups (password, signing) must use
+     * the primary address (the same key signs both encodings).
+     */
+    getWalletIdentityAddress() {
+        var _a, _b;
+        // The active address is a valid fallback only on mainnet, where it is
+        // the primary encoding; a switched-network encoding must never be used
+        // as the wallet identity.
+        const identity = (_b = (_a = this.verifiedCredential) === null || _a === void 0 ? void 0 : _a.address) !== null && _b !== void 0 ? _b : (this.activeNetworkId === BITCOIN_MAINNET_NETWORK_ID
+            ? this.activeAccountAddress
+            : undefined);
+        if (!identity) {
+            throw new utils.DynamicError('Active account address is required', 'active_account_address_is_required');
+        }
+        return identity;
+    }
+    /**
+     * Resolves the wallet's payment address for a network from the credential's
+     * network-tagged additional addresses. Mainnet falls back to the primary
+     * address (wallets created before per-network registration).
+     */
+    getPaymentAddressForNetwork(network) {
+        var _a, _b, _c;
+        const tagged = (_b = (_a = this.verifiedCredential) === null || _a === void 0 ? void 0 : _a.walletAdditionalAddresses) === null || _b === void 0 ? void 0 : _b.find((addr) => addr.type === 'payment' &&
+            addr.network === network);
+        if (tagged === null || tagged === void 0 ? void 0 : tagged.address) {
+            return tagged.address;
+        }
+        if (network === 'mainnet') {
+            return (_c = this.verifiedCredential) === null || _c === void 0 ? void 0 : _c.address;
+        }
+        return undefined;
+    }
+    /**
+     * Switches between Bitcoin mainnet (1) and testnet (2). Same key — the
+     * active address swaps to the network's encoding; mempool/PSBT/broadcast
+     * follow the address, signing follows getBitcoinNetworkEnum().
+     */
+    switchNetwork(_a) {
+        return _tslib.__awaiter(this, arguments, void 0, function* ({ networkChainId, networkName, }) {
+            let targetId = BITCOIN_MAINNET_NETWORK_ID;
+            if (networkChainId !== undefined && networkChainId !== null) {
+                targetId = Number(networkChainId);
+            }
+            else if (networkName === null || networkName === void 0 ? void 0 : networkName.toLowerCase().includes('test')) {
+                targetId = BITCOIN_TESTNET_NETWORK_ID;
+            }
+            if (targetId !== BITCOIN_MAINNET_NETWORK_ID &&
+                targetId !== BITCOIN_TESTNET_NETWORK_ID) {
+                throw new utils.DynamicError(`Unsupported Bitcoin network chain id: ${String(networkChainId)}`, 'unsupported_network');
+            }
+            const network = targetId === BITCOIN_TESTNET_NETWORK_ID ? 'testnet' : 'mainnet';
+            const address = this.getPaymentAddressForNetwork(network);
+            if (!address) {
+                logger.error('[DynamicWaasBitcoinConnector] switchNetwork: no address for network', { network, targetId });
+                throw new utils.DynamicError(`No ${network} address available for this wallet`, 'no_address_for_network');
+            }
+            this.activeNetworkId = targetId;
+            this.activeAccountAddress = address;
+            this.emit('chainChange', { chain: targetId.toString() });
         });
     }
     /**
@@ -147,7 +240,9 @@ class DynamicWaasBitcoinConnector extends waas.withDynamicWaas(BitcoinWalletConn
      */
     getBlockExplorerUrlsForCurrentNetwork() {
         return _tslib.__awaiter(this, void 0, void 0, function* () {
-            return ['https://mempool.space/'];
+            return this.activeNetworkId === BITCOIN_TESTNET_NETWORK_ID
+                ? ['https://mempool.space/testnet/']
+                : ['https://mempool.space/'];
         });
     }
     /**
@@ -192,15 +287,17 @@ class DynamicWaasBitcoinConnector extends waas.withDynamicWaas(BitcoinWalletConn
             const elevatedAccessToken = yield ((_c = this.getElevatedAccessToken) === null || _c === void 0 ? void 0 : _c.call(this, {
                 scope: sdkApiCore.TokenScope.Walletsign,
             }));
+            const walletIdentityAddress = this.getWalletIdentityAddress();
             const password = yield this.getPasswordIfNeeded({
-                accountAddress: this.activeAccountAddress,
+                accountAddress: walletIdentityAddress,
             });
             const signedTransaction = yield walletClient.signTransaction({
                 authToken: (_d = this.getAuthToken) === null || _d === void 0 ? void 0 : _d.call(this),
+                bitcoinConfig: { network: yield this.getBitcoinNetworkEnum() },
                 elevatedAccessToken,
                 mfaToken,
                 password,
-                senderAddress: this.activeAccountAddress,
+                senderAddress: walletIdentityAddress,
                 signedSessionId,
                 transaction: request.unsignedPsbtBase64,
             });
@@ -338,7 +435,7 @@ class DynamicWaasBitcoinConnector extends waas.withDynamicWaas(BitcoinWalletConn
      */
     validateActiveWallet(expectedAddress) {
         return _tslib.__awaiter(this, void 0, void 0, function* () {
-            var _a;
+            var _a, _b, _c, _d;
             const walletClient = yield this.getWaasWalletClient();
             const targetWallet = yield walletClient.getWallet({
                 accountAddress: expectedAddress,
@@ -350,7 +447,11 @@ class DynamicWaasBitcoinConnector extends waas.withDynamicWaas(BitcoinWalletConn
                 throw new utils.DynamicError('Account not found', 'account_not_found');
             }
             const isWalletActive = walletConnectorCore.isSameAddress(targetWallet.accountAddress, this.activeAccountAddress || '', this.connectedChain);
-            if (!isWalletActive) {
+            // The active address may be a per-network encoding of this same wallet
+            // (one key, network-tagged additional addresses). Resetting it here would
+            // silently un-switch the selected network.
+            const isPerNetworkVariantOfWallet = (_d = (_c = (_b = this.verifiedCredential) === null || _b === void 0 ? void 0 : _b.walletAdditionalAddresses) === null || _c === void 0 ? void 0 : _c.some((addr) => addr.address === this.activeAccountAddress)) !== null && _d !== void 0 ? _d : false;
+            if (!isWalletActive && !isPerNetworkVariantOfWallet) {
                 this.activeAccountAddress = targetWallet.accountAddress;
             }
         });
@@ -381,12 +482,13 @@ class DynamicWaasBitcoinConnector extends waas.withDynamicWaas(BitcoinWalletConn
                 scope: sdkApiCore.TokenScope.Walletsign,
             }));
             const password = yield this.getPasswordIfNeeded({
-                accountAddress: this.activeAccountAddress,
+                accountAddress: this.getWalletIdentityAddress(),
             });
             const messageString = typeof message === 'string' ? message : message.raw;
             return walletClient.signMessage({
-                accountAddress: this.activeAccountAddress,
+                accountAddress: this.getWalletIdentityAddress(),
                 authToken: (_e = this.getAuthToken) === null || _e === void 0 ? void 0 : _e.call(this),
+                bitcoinConfig: { network: yield this.getBitcoinNetworkEnum() },
                 context,
                 elevatedAccessToken,
                 message: messageString,
@@ -536,12 +638,17 @@ class DynamicWaasBitcoinConnector extends waas.withDynamicWaas(BitcoinWalletConn
             if (allCredentials.length === 0) {
                 throw new utils.DynamicError(`No verified credentials found. The address ${this.activeAccountAddress} may not be properly registered.`, 'no_verified_credentials_found_the_address');
             }
+            // The public key is stored on the wallet's primary (mainnet) address entry
+            // and is shared across every per-network encoding, since the same key
+            // signs both. Look it up by the wallet identity address rather than the
+            // active address, which after a network switch is the testnet encoding.
+            const walletIdentityAddress = this.getWalletIdentityAddress();
             for (const credential of allCredentials) {
                 const { walletAdditionalAddresses } = credential !== null && credential !== void 0 ? credential : {};
                 if (!walletAdditionalAddresses) {
                     continue;
                 }
-                const additionalAddress = walletAdditionalAddresses.find((address) => address.address === this.activeAccountAddress);
+                const additionalAddress = walletAdditionalAddresses.find((address) => address.address === walletIdentityAddress);
                 if (additionalAddress === null || additionalAddress === void 0 ? void 0 : additionalAddress.publicKey) {
                     return additionalAddress.publicKey;
                 }
@@ -550,7 +657,7 @@ class DynamicWaasBitcoinConnector extends waas.withDynamicWaas(BitcoinWalletConn
                 .flatMap((cred) => { var _a; return (_a = cred.walletAdditionalAddresses) !== null && _a !== void 0 ? _a : []; })
                 .map((addr) => addr.address)
                 .join(', ');
-            throw new utils.DynamicError(`No additional address found for ${this.activeAccountAddress}. Available addresses: ${allAvailableAddresses || 'none'}`, 'no_additional_address_found_for_available');
+            throw new utils.DynamicError(`No additional address found for ${walletIdentityAddress}. Available addresses: ${allAvailableAddresses || 'none'}`, 'no_additional_address_found_for_available');
         });
     }
     /**
@@ -594,10 +701,10 @@ class DynamicWaasBitcoinConnector extends waas.withDynamicWaas(BitcoinWalletConn
                 scope: sdkApiCore.TokenScope.Walletsign,
             }));
             const password = yield this.getPasswordIfNeeded({
-                accountAddress: this.activeAccountAddress,
+                accountAddress: this.getWalletIdentityAddress(),
             });
             return walletClient.signMessage({
-                accountAddress: this.activeAccountAddress,
+                accountAddress: this.getWalletIdentityAddress(),
                 authToken: (_d = this.getAuthToken) === null || _d === void 0 ? void 0 : _d.call(this),
                 bitcoinConfig: {
                     network: yield this.getBitcoinNetworkEnum(),

package/src/connectors/DynamicWaasBitcoinConnector/DynamicWaasBitcoinConnector.d.ts

@@ -22,10 +22,7 @@ declare const DynamicWaasBitcoinConnector_base: (abstract new (...args: any[]) =
         scope: TokenScope;
     }) => Promise<string | undefined>) | undefined;
     onUnauthorized?: (() => void | Promise<void>) | undefined;
-    /**
-     * Bitcoin connector for Dynamic WaaS (Wallet as a Service)
-     * Extends BitcoinWalletConnector with WaaS functionality for Bitcoin transactions
-     */
+    /** Dynamic network ids for the Bitcoin networks (mirrors the networks catalog). */
     environmentId?: string | undefined;
     baseApiUrl?: string | undefined;
     relayUrl?: string | undefined;
@@ -100,11 +97,6 @@ declare const DynamicWaasBitcoinConnector_base: (abstract new (...args: any[]) =
         thresholdSignatureScheme?: string | undefined;
         publicAddressCheck?: string | undefined;
         addressType?: string | undefined;
-        /**
-         * Gets the current Bitcoin network
-         * Always returns Dynamic's networkId (1 for mainnet)
-         * @returns The Dynamic networkId (1) for Bitcoin mainnet
-         */
         legacyWalletId?: string | undefined;
         password?: string | undefined;
     }): Promise<void>;
@@ -132,11 +124,7 @@ declare const DynamicWaasBitcoinConnector_base: (abstract new (...args: any[]) =
     backupKeySharesToGoogleDrive({ accountAddress, password, googleDriveAccessToken, }: {
         accountAddress: string;
         password?: string | undefined;
-        googleDriveAccessToken?: string | undefined; /**
-         * Gets block explorer URLs for the current network
-         * Returns mempool.space for Bitcoin transactions
-         * @returns Array containing mempool.space URL
-         */
+        googleDriveAccessToken?: string | undefined;
     }): Promise<void>;
     exportClientKeysharesFromGoogleDrive({ accountAddress, password, }: {
         accountAddress: string;
@@ -263,17 +251,56 @@ export declare class DynamicWaasBitcoinConnector extends DynamicWaasBitcoinConne
      */
     getConnectedAccounts(): Promise<string[]>;
     /**
-     * Gets the current Bitcoin network
-     * Always returns Dynamic's networkId (1 for mainnet)
-     * @returns The Dynamic networkId (1) for Bitcoin mainnet
+     * The currently selected Bitcoin network id (1 = mainnet, 2 = testnet).
+     * One wallet (one key) exposes an address per network via network-tagged
+     * additional addresses; switching networks swaps the active address.
+     */
+    private activeNetworkId;
+    /**
+     * Gets the current Bitcoin network id (1 mainnet, 2 testnet)
      */
     getNetwork(): Promise<number>;
     /**
-     * Maps Dynamic's networkId to BitcoinNetwork enum for internal WaaS API calls
-     * Uses the current network from getNetwork() to determine the BitcoinNetwork value
-     * @returns The corresponding BitcoinNetwork enum value for the current network
+     * Maps the selected networkId to the BitcoinNetwork enum for internal WaaS
+     * API calls (signing) — balance/UTXO/broadcast are address-driven and follow
+     * the active address automatically.
      */
     private getBitcoinNetworkEnum;
+    supportsNetworkSwitching(): boolean;
+    /**
+     * Testnet when the testnet network (id 2) is selected — drives the widget's
+     * native-denominated balance display (testnet coins have no fiat price).
+     */
+    isTestnet(): Promise<boolean>;
+    /**
+     * Balance follows the active (per-network) address: callers pass the
+     * wallet's static primary address, which is the mainnet encoding — on
+     * testnet the switched address must be queried instead (the mempool API
+     * routing is address-driven).
+     */
+    getBalance(address: string): Promise<string | undefined>;
+    /**
+     * Wallet identity: keyshares/wallet records are keyed by the wallet's
+     * primary (mainnet) address. On testnet the active address is the same
+     * wallet's per-network encoding — WaaS lookups (password, signing) must use
+     * the primary address (the same key signs both encodings).
+     */
+    private getWalletIdentityAddress;
+    /**
+     * Resolves the wallet's payment address for a network from the credential's
+     * network-tagged additional addresses. Mainnet falls back to the primary
+     * address (wallets created before per-network registration).
+     */
+    private getPaymentAddressForNetwork;
+    /**
+     * Switches between Bitcoin mainnet (1) and testnet (2). Same key — the
+     * active address swaps to the network's encoding; mempool/PSBT/broadcast
+     * follow the address, signing follows getBitcoinNetworkEnum().
+     */
+    switchNetwork({ networkChainId, networkName, }: {
+        networkChainId?: number | string;
+        networkName?: string;
+    }): Promise<void>;
     /**
      * Get the enabled networks for Bitcoin
      * Returns configured networks from props

package/src/connectors/DynamicWaasBitcoinConnector/DynamicWaasBitcoinConnector.js

@@ -17,6 +17,9 @@ import { PsbtParser } from '../../utils/psbtParser/PsbtParser.js';
 import { BitcoinUiTransaction } from '../../utils/BitcoinUiTransaction/BitcoinUiTransaction.js';
 
 const logger = new Logger('DynamicWaasConnector');
+/** Dynamic network ids for the Bitcoin networks (mirrors the networks catalog). */
+const BITCOIN_MAINNET_NETWORK_ID = 1;
+const BITCOIN_TESTNET_NETWORK_ID = 2;
 /**
  * Bitcoin connector for Dynamic WaaS (Wallet as a Service)
  * Extends BitcoinWalletConnector with WaaS functionality for Bitcoin transactions
@@ -36,6 +39,12 @@ class DynamicWaasBitcoinConnector extends withDynamicWaas(BitcoinWalletConnector
         this.overrideKey = 'dynamicwaas';
         this.isEmbeddedWallet = true;
         this.connectedChain = 'BTC';
+        /**
+         * The currently selected Bitcoin network id (1 = mainnet, 2 = testnet).
+         * One wallet (one key) exposes an address per network via network-tagged
+         * additional addresses; switching networks swaps the active address.
+         */
+        this.activeNetworkId = BITCOIN_MAINNET_NETWORK_ID;
         this.walletUiUtils = props.walletUiUtils;
         this.mempoolApiService = new MempoolApiService();
         this.psbtBuilderService = new PsbtBuilderService(this.mempoolApiService);
@@ -79,16 +88,15 @@ class DynamicWaasBitcoinConnector extends withDynamicWaas(BitcoinWalletConnector
     getAddress() {
         return __awaiter(this, void 0, void 0, function* () {
             var _a;
-            const activeAccount = this.getActiveAccount();
-            if (!activeAccount || !activeAccount.address) {
-                if ((_a = this.verifiedCredential) === null || _a === void 0 ? void 0 : _a.address) {
-                    const { address } = this.verifiedCredential;
-                    this.setActiveAccount(address);
-                    return address;
-                }
-                throw new DynamicError('No active wallet address found', 'no_active_wallet_address_found');
+            if (this.activeAccountAddress) {
+                return this.activeAccountAddress;
+            }
+            if ((_a = this.verifiedCredential) === null || _a === void 0 ? void 0 : _a.address) {
+                const { address } = this.verifiedCredential;
+                this.activeAccountAddress = address;
+                return address;
             }
-            return activeAccount.address;
+            throw new DynamicError('No active wallet address found', 'no_active_wallet_address_found');
         });
     }
     /**
@@ -104,28 +112,113 @@ class DynamicWaasBitcoinConnector extends withDynamicWaas(BitcoinWalletConnector
         });
     }
     /**
-     * Gets the current Bitcoin network
-     * Always returns Dynamic's networkId (1 for mainnet)
-     * @returns The Dynamic networkId (1) for Bitcoin mainnet
+     * Gets the current Bitcoin network id (1 mainnet, 2 testnet)
      */
     getNetwork() {
         return __awaiter(this, void 0, void 0, function* () {
-            return 1;
+            return this.activeNetworkId;
         });
     }
     /**
-     * Maps Dynamic's networkId to BitcoinNetwork enum for internal WaaS API calls
-     * Uses the current network from getNetwork() to determine the BitcoinNetwork value
-     * @returns The corresponding BitcoinNetwork enum value for the current network
+     * Maps the selected networkId to the BitcoinNetwork enum for internal WaaS
+     * API calls (signing) — balance/UTXO/broadcast are address-driven and follow
+     * the active address automatically.
      */
     getBitcoinNetworkEnum() {
+        return __awaiter(this, void 0, void 0, function* () {
+            return (this.activeNetworkId === BITCOIN_TESTNET_NETWORK_ID
+                ? 'testnet'
+                : 'mainnet');
+        });
+    }
+    supportsNetworkSwitching() {
+        return true;
+    }
+    /**
+     * Testnet when the testnet network (id 2) is selected — drives the widget's
+     * native-denominated balance display (testnet coins have no fiat price).
+     */
+    isTestnet() {
+        return Promise.resolve(this.activeNetworkId === BITCOIN_TESTNET_NETWORK_ID);
+    }
+    /**
+     * Balance follows the active (per-network) address: callers pass the
+     * wallet's static primary address, which is the mainnet encoding — on
+     * testnet the switched address must be queried instead (the mempool API
+     * routing is address-driven).
+     */
+    getBalance(address) {
+        const _super = Object.create(null, {
+            getBalance: { get: () => super.getBalance }
+        });
         return __awaiter(this, void 0, void 0, function* () {
             var _a;
-            const networkId = yield this.getNetwork();
-            const networkIdToBitcoinNetwork = {
-                1: 'mainnet',
-            };
-            return ((_a = networkIdToBitcoinNetwork[networkId]) !== null && _a !== void 0 ? _a : 'mainnet');
+            return _super.getBalance.call(this, (_a = this.activeAccountAddress) !== null && _a !== void 0 ? _a : address);
+        });
+    }
+    /**
+     * Wallet identity: keyshares/wallet records are keyed by the wallet's
+     * primary (mainnet) address. On testnet the active address is the same
+     * wallet's per-network encoding — WaaS lookups (password, signing) must use
+     * the primary address (the same key signs both encodings).
+     */
+    getWalletIdentityAddress() {
+        var _a, _b;
+        // The active address is a valid fallback only on mainnet, where it is
+        // the primary encoding; a switched-network encoding must never be used
+        // as the wallet identity.
+        const identity = (_b = (_a = this.verifiedCredential) === null || _a === void 0 ? void 0 : _a.address) !== null && _b !== void 0 ? _b : (this.activeNetworkId === BITCOIN_MAINNET_NETWORK_ID
+            ? this.activeAccountAddress
+            : undefined);
+        if (!identity) {
+            throw new DynamicError('Active account address is required', 'active_account_address_is_required');
+        }
+        return identity;
+    }
+    /**
+     * Resolves the wallet's payment address for a network from the credential's
+     * network-tagged additional addresses. Mainnet falls back to the primary
+     * address (wallets created before per-network registration).
+     */
+    getPaymentAddressForNetwork(network) {
+        var _a, _b, _c;
+        const tagged = (_b = (_a = this.verifiedCredential) === null || _a === void 0 ? void 0 : _a.walletAdditionalAddresses) === null || _b === void 0 ? void 0 : _b.find((addr) => addr.type === 'payment' &&
+            addr.network === network);
+        if (tagged === null || tagged === void 0 ? void 0 : tagged.address) {
+            return tagged.address;
+        }
+        if (network === 'mainnet') {
+            return (_c = this.verifiedCredential) === null || _c === void 0 ? void 0 : _c.address;
+        }
+        return undefined;
+    }
+    /**
+     * Switches between Bitcoin mainnet (1) and testnet (2). Same key — the
+     * active address swaps to the network's encoding; mempool/PSBT/broadcast
+     * follow the address, signing follows getBitcoinNetworkEnum().
+     */
+    switchNetwork(_a) {
+        return __awaiter(this, arguments, void 0, function* ({ networkChainId, networkName, }) {
+            let targetId = BITCOIN_MAINNET_NETWORK_ID;
+            if (networkChainId !== undefined && networkChainId !== null) {
+                targetId = Number(networkChainId);
+            }
+            else if (networkName === null || networkName === void 0 ? void 0 : networkName.toLowerCase().includes('test')) {
+                targetId = BITCOIN_TESTNET_NETWORK_ID;
+            }
+            if (targetId !== BITCOIN_MAINNET_NETWORK_ID &&
+                targetId !== BITCOIN_TESTNET_NETWORK_ID) {
+                throw new DynamicError(`Unsupported Bitcoin network chain id: ${String(networkChainId)}`, 'unsupported_network');
+            }
+            const network = targetId === BITCOIN_TESTNET_NETWORK_ID ? 'testnet' : 'mainnet';
+            const address = this.getPaymentAddressForNetwork(network);
+            if (!address) {
+                logger.error('[DynamicWaasBitcoinConnector] switchNetwork: no address for network', { network, targetId });
+                throw new DynamicError(`No ${network} address available for this wallet`, 'no_address_for_network');
+            }
+            this.activeNetworkId = targetId;
+            this.activeAccountAddress = address;
+            this.emit('chainChange', { chain: targetId.toString() });
         });
     }
     /**
@@ -143,7 +236,9 @@ class DynamicWaasBitcoinConnector extends withDynamicWaas(BitcoinWalletConnector
      */
     getBlockExplorerUrlsForCurrentNetwork() {
         return __awaiter(this, void 0, void 0, function* () {
-            return ['https://mempool.space/'];
+            return this.activeNetworkId === BITCOIN_TESTNET_NETWORK_ID
+                ? ['https://mempool.space/testnet/']
+                : ['https://mempool.space/'];
         });
     }
     /**
@@ -188,15 +283,17 @@ class DynamicWaasBitcoinConnector extends withDynamicWaas(BitcoinWalletConnector
             const elevatedAccessToken = yield ((_c = this.getElevatedAccessToken) === null || _c === void 0 ? void 0 : _c.call(this, {
                 scope: TokenScope.Walletsign,
             }));
+            const walletIdentityAddress = this.getWalletIdentityAddress();
             const password = yield this.getPasswordIfNeeded({
-                accountAddress: this.activeAccountAddress,
+                accountAddress: walletIdentityAddress,
             });
             const signedTransaction = yield walletClient.signTransaction({
                 authToken: (_d = this.getAuthToken) === null || _d === void 0 ? void 0 : _d.call(this),
+                bitcoinConfig: { network: yield this.getBitcoinNetworkEnum() },
                 elevatedAccessToken,
                 mfaToken,
                 password,
-                senderAddress: this.activeAccountAddress,
+                senderAddress: walletIdentityAddress,
                 signedSessionId,
                 transaction: request.unsignedPsbtBase64,
             });
@@ -334,7 +431,7 @@ class DynamicWaasBitcoinConnector extends withDynamicWaas(BitcoinWalletConnector
      */
     validateActiveWallet(expectedAddress) {
         return __awaiter(this, void 0, void 0, function* () {
-            var _a;
+            var _a, _b, _c, _d;
             const walletClient = yield this.getWaasWalletClient();
             const targetWallet = yield walletClient.getWallet({
                 accountAddress: expectedAddress,
@@ -346,7 +443,11 @@ class DynamicWaasBitcoinConnector extends withDynamicWaas(BitcoinWalletConnector
                 throw new DynamicError('Account not found', 'account_not_found');
             }
             const isWalletActive = isSameAddress(targetWallet.accountAddress, this.activeAccountAddress || '', this.connectedChain);
-            if (!isWalletActive) {
+            // The active address may be a per-network encoding of this same wallet
+            // (one key, network-tagged additional addresses). Resetting it here would
+            // silently un-switch the selected network.
+            const isPerNetworkVariantOfWallet = (_d = (_c = (_b = this.verifiedCredential) === null || _b === void 0 ? void 0 : _b.walletAdditionalAddresses) === null || _c === void 0 ? void 0 : _c.some((addr) => addr.address === this.activeAccountAddress)) !== null && _d !== void 0 ? _d : false;
+            if (!isWalletActive && !isPerNetworkVariantOfWallet) {
                 this.activeAccountAddress = targetWallet.accountAddress;
             }
         });
@@ -377,12 +478,13 @@ class DynamicWaasBitcoinConnector extends withDynamicWaas(BitcoinWalletConnector
                 scope: TokenScope.Walletsign,
             }));
             const password = yield this.getPasswordIfNeeded({
-                accountAddress: this.activeAccountAddress,
+                accountAddress: this.getWalletIdentityAddress(),
             });
             const messageString = typeof message === 'string' ? message : message.raw;
             return walletClient.signMessage({
-                accountAddress: this.activeAccountAddress,
+                accountAddress: this.getWalletIdentityAddress(),
                 authToken: (_e = this.getAuthToken) === null || _e === void 0 ? void 0 : _e.call(this),
+                bitcoinConfig: { network: yield this.getBitcoinNetworkEnum() },
                 context,
                 elevatedAccessToken,
                 message: messageString,
@@ -532,12 +634,17 @@ class DynamicWaasBitcoinConnector extends withDynamicWaas(BitcoinWalletConnector
             if (allCredentials.length === 0) {
                 throw new DynamicError(`No verified credentials found. The address ${this.activeAccountAddress} may not be properly registered.`, 'no_verified_credentials_found_the_address');
             }
+            // The public key is stored on the wallet's primary (mainnet) address entry
+            // and is shared across every per-network encoding, since the same key
+            // signs both. Look it up by the wallet identity address rather than the
+            // active address, which after a network switch is the testnet encoding.
+            const walletIdentityAddress = this.getWalletIdentityAddress();
             for (const credential of allCredentials) {
                 const { walletAdditionalAddresses } = credential !== null && credential !== void 0 ? credential : {};
                 if (!walletAdditionalAddresses) {
                     continue;
                 }
-                const additionalAddress = walletAdditionalAddresses.find((address) => address.address === this.activeAccountAddress);
+                const additionalAddress = walletAdditionalAddresses.find((address) => address.address === walletIdentityAddress);
                 if (additionalAddress === null || additionalAddress === void 0 ? void 0 : additionalAddress.publicKey) {
                     return additionalAddress.publicKey;
                 }
@@ -546,7 +653,7 @@ class DynamicWaasBitcoinConnector extends withDynamicWaas(BitcoinWalletConnector
                 .flatMap((cred) => { var _a; return (_a = cred.walletAdditionalAddresses) !== null && _a !== void 0 ? _a : []; })
                 .map((addr) => addr.address)
                 .join(', ');
-            throw new DynamicError(`No additional address found for ${this.activeAccountAddress}. Available addresses: ${allAvailableAddresses || 'none'}`, 'no_additional_address_found_for_available');
+            throw new DynamicError(`No additional address found for ${walletIdentityAddress}. Available addresses: ${allAvailableAddresses || 'none'}`, 'no_additional_address_found_for_available');
         });
     }
     /**
@@ -590,10 +697,10 @@ class DynamicWaasBitcoinConnector extends withDynamicWaas(BitcoinWalletConnector
                 scope: TokenScope.Walletsign,
             }));
             const password = yield this.getPasswordIfNeeded({
-                accountAddress: this.activeAccountAddress,
+                accountAddress: this.getWalletIdentityAddress(),
             });
             return walletClient.signMessage({
-                accountAddress: this.activeAccountAddress,
+                accountAddress: this.getWalletIdentityAddress(),
                 authToken: (_d = this.getAuthToken) === null || _d === void 0 ? void 0 : _d.call(this),
                 bitcoinConfig: {
                     network: yield this.getBitcoinNetworkEnum(),

package/src/utils/BitcoinUiTransaction/BitcoinUiTransaction.cjs

@@ -13,6 +13,9 @@ class BitcoinUiTransaction {
         this.data = undefined;
         this.fee = { gas: undefined };
         this.feePriority = 'medium';
+        // Outputs below the dust limit are unrelayable; PsbtBuilderService throws
+        // on them, so surface the floor to the send form instead.
+        this.minAmount = BigInt(_const.DUST_LIMIT);
         /**
          * Formats the value into a string for the UI for non-native tokens
          * @param value - The value to format

package/src/utils/BitcoinUiTransaction/BitcoinUiTransaction.d.ts

@@ -22,6 +22,7 @@ export declare class BitcoinUiTransaction implements IUITransaction {
     };
     nativePrice?: number;
     feePriority: FeePriority;
+    minAmount: bigint;
     private lastFeePriority?;
     private onSubmit;
     private mempoolApiService;

package/src/utils/BitcoinUiTransaction/BitcoinUiTransaction.js

@@ -1,7 +1,7 @@
 'use client'
 import { __awaiter } from '../../../_virtual/_tslib.js';
 import { formatNumberText } from '@dynamic-labs/utils';
-import { SATOSHIS_PER_BTC } from '../../const.js';
+import { DUST_LIMIT, SATOSHIS_PER_BTC } from '../../const.js';
 
 class BitcoinUiTransaction {
     constructor({ onSubmit, from, mempoolApiService, }) {
@@ -9,6 +9,9 @@ class BitcoinUiTransaction {
         this.data = undefined;
         this.fee = { gas: undefined };
         this.feePriority = 'medium';
+        // Outputs below the dust limit are unrelayable; PsbtBuilderService throws
+        // on them, so surface the floor to the send form instead.
+        this.minAmount = BigInt(DUST_LIMIT);
         /**
          * Formats the value into a string for the UI for non-native tokens
          * @param value - The value to format