@dynamic-labs/bitcoin 5.0.0-rc.4 → 5.1.0

package/CHANGELOG.md

@@ -1,4 +1,98 @@
 
+## [5.1.0](https://github.com/dynamic-labs/dynamic-auth/compare/v5.0.0...v5.1.0) (2026-08-04)
+
+
+### Features
+
+* **midnight:** expose contract wallet provider ([#12120](https://github.com/dynamic-labs/dynamic-auth/issues/12120)) ([2cecf23](https://github.com/dynamic-labs/dynamic-auth/commit/2cecf23f1f51819b99dfde4afd20264ea1abebf8))
+* **webview-messages,webview-controller:** add waas_backupKeySharesToICloud webview message ([#12147](https://github.com/dynamic-labs/dynamic-auth/issues/12147)) ([ca4edda](https://github.com/dynamic-labs/dynamic-auth/commit/ca4edda54adf0673a9fe41c17d861a739f1b8f2e))
+* **webview:** add business accounts message contract and controller ([#12144](https://github.com/dynamic-labs/dynamic-auth/issues/12144)) ([d9f80c1](https://github.com/dynamic-labs/dynamic-auth/commit/d9f80c10bb3c332c2f3e3dc401b95025b930fa4e))
+
+
+### Bug Fixes
+
+* bump brace-expansion to latest patched maintenance releases ([#12130](https://github.com/dynamic-labs/dynamic-auth/issues/12130)) ([1b26671](https://github.com/dynamic-labs/dynamic-auth/commit/1b26671ad8e62025904e04f9dfed8b3faafb9c19))
+* **ethereum-aa:** resolve chainId from network for ZeroDev v2 multichain projects ([#12105](https://github.com/dynamic-labs/dynamic-auth/issues/12105)) ([fe2c5d2](https://github.com/dynamic-labs/dynamic-auth/commit/fe2c5d239758ea79e8647006d9d77cc27c2ab647))
+* **midnight:** name the missing RPCs when the wallet client is too old ([#12121](https://github.com/dynamic-labs/dynamic-auth/issues/12121)) ([3a8a77f](https://github.com/dynamic-labs/dynamic-auth/commit/3a8a77f89d368d8634497a5b49ff345b004cdffa))
+* **midnight:** return the submission identifier from the contract provider ([#12122](https://github.com/dynamic-labs/dynamic-auth/issues/12122)) ([8aa5289](https://github.com/dynamic-labs/dynamic-auth/commit/8aa52895fbdf09a3cf481049009a95f03cddda54))
+* remediate high-severity dependency vulnerabilities ([#12149](https://github.com/dynamic-labs/dynamic-auth/issues/12149)) ([14058ee](https://github.com/dynamic-labs/dynamic-auth/commit/14058eeed34351791ad7ab7ac1fa720eb2cf9948))
+* **starknet:** restore Braavos L2 session after lock and unlock ([#12124](https://github.com/dynamic-labs/dynamic-auth/issues/12124)) ([ab3b11b](https://github.com/dynamic-labs/dynamic-auth/commit/ab3b11bd71fbca8d32d4f2badfa49e3b9641eecf))
+* **wallet-book:** add App Store id for Robinhood Wallet iOS install link ([#11877](https://github.com/dynamic-labs/dynamic-auth/issues/11877)) ([ef28619](https://github.com/dynamic-labs/dynamic-auth/commit/ef28619ba4396e01046717ea7ad560870a56c78f))
+* **wallet-book:** add universal deep link for Exodus Solana WalletConnect ([#12123](https://github.com/dynamic-labs/dynamic-auth/issues/12123)) ([cd7223e](https://github.com/dynamic-labs/dynamic-auth/commit/cd7223eb2dc21314f351b96d9a06d795d282c35d))
+
+## [5.0.0](https://github.com/dynamic-labs/dynamic-auth/compare/v5.0.0-rc.4...v5.0.0) (2026-07-29)
+
+## 🚀 Dynamic SDK v5 is live
+
+This release has been a long time coming. We've cleaned up the architecture, cut support for v1 and v2 embedded wallets from core, shipped a migration path for legacy wallets, and made the SDK story a lot cleaner for both web and mobile devs.
+
+### 🔥 Embedded Wallet clean up
+
+V1/V2 embedded wallets support has been removed from `@dynamic-labs/sdk-react-core`. Dynamic WaaS (V3) is now the one and only embedded wallet type, all new embedded wallets are V3.
+
+### 📦 New: `@dynamic-labs/legacy-embedded-wallet-migration`
+
+For users still on V1/V2 embedded wallets, we've got you covered with a dedicated migration package. It owns all the logic for upgrading to V3. This includes recovery flow, session keys, private key export, and the migration UI.
+
+Two paths available:
+
+- **UI-based** (recommended): Mount `LegacyWalletMigrationProvider` and the upgrade modal opens automatically when a legacy wallet is detected at login. It handles the full flow end-to-end.
+- **Headless**: Call `upgradeToDynamicWaas()` directly if you want a custom migration UX.
+
+### 📱 JS SDK for web and React Native are the new default
+
+Going forward, we're encouraging all developers building for web and React Native to use the JS SDK. It's the direction we're investing in. Ideally v5 is our final version of the old React SDK. To be clear: **no new features will be added to the old SDKs, including v5. All new feature development is happening in the JS SDK.**
+
+### ✏️ Legacy package renames
+
+The old packages have been renamed to make their status explicit. Update your `package.json` accordingly:
+
+```
+@dynamic-labs/client                 → @dynamic-labs/legacy-client
+@dynamic-labs/react-hooks            → @dynamic-labs/legacy-react-hooks
+@dynamic-labs/react-native-extension → @dynamic-labs/legacy-react-native-extension
+@dynamic-labs/web-extension          → @dynamic-labs/legacy-web-extension
+@dynamic-labs/solana-extension       → @dynamic-labs/legacy-solana-extension
+@dynamic-labs/sui-extension          → @dynamic-labs/legacy-sui-extension
+@dynamic-labs/viem-extension         → @dynamic-labs/legacy-viem-extension
+@dynamic-labs/zerodev-extension      → @dynamic-labs/legacy-zerodev-extension
+```
+
+### :book: Full migration guide
+
+Everything you need to upgrade from v4 → v5: [Upgrade SDK from V4 to V5 - Dynamic](https://www.dynamic.xyz/docs/react/reference/upgrade/v5)
+
+Huge props to everyone who contributed to this.  :tada:
+
+------------------------------------------
+
+### ⚠ BREAKING CHANGES
+
+* **waas:** move the client key-share store onto the core storage API (#12096)
+* **react-native-extension:** store sensitive information with react-native-keychain (#12092)
+
+### Features
+
+* **bitcoin:** add sendBitcoinWithConfirmation to show confirm modal on BTC sends ([#12025](https://github.com/dynamic-labs/dynamic-auth/issues/12025)) ([5f992f5](https://github.com/dynamic-labs/dynamic-auth/commit/5f992f5fdaf805f07870ab9248ea2fe06a2fd3bf))
+* **waas:** delegate key shares with initial signer rules [DYNT-1675] ([#12028](https://github.com/dynamic-labs/dynamic-auth/issues/12028)) ([6b1ffc5](https://github.com/dynamic-labs/dynamic-auth/commit/6b1ffc5ee7070d639916a65b6a0aa6ada0167cb8)), closes [dynamic-labs/dynamic-waas-sdk#1500](https://github.com/dynamic-labs/dynamic-waas-sdk/issues/1500) [#10754](https://github.com/dynamic-labs/dynamic-auth/issues/10754) [#10772](https://github.com/dynamic-labs/dynamic-auth/issues/10772) [#646](https://github.com/dynamic-labs/dynamic-auth/issues/646) [#649](https://github.com/dynamic-labs/dynamic-auth/issues/649) [#1500](https://github.com/dynamic-labs/dynamic-auth/issues/1500) [dynamic-labs/dynamic-waas-sdk#1500](https://github.com/dynamic-labs/dynamic-waas-sdk/issues/1500)
+* **waas:** expose rawSign sha256/blake2b in SignMessageContext ([#12075](https://github.com/dynamic-labs/dynamic-auth/issues/12075)) ([20e3d2f](https://github.com/dynamic-labs/dynamic-auth/commit/20e3d2f40d18aa0bdb77e9b00fa4a5dc5dd6e9de))
+
+
+### Bug Fixes
+
+* **bitcoin:** resolve the public key of the active wallet, not the first ([#12091](https://github.com/dynamic-labs/dynamic-auth/issues/12091)) ([ebad70c](https://github.com/dynamic-labs/dynamic-auth/commit/ebad70c37ab9a771ad7051ca8f3c68d52c1d32fa)), closes [#11970](https://github.com/dynamic-labs/dynamic-auth/issues/11970) [#11970](https://github.com/dynamic-labs/dynamic-auth/issues/11970) [#11970](https://github.com/dynamic-labs/dynamic-auth/issues/11970)
+* fallback to local wallet balance when token balances API returns no tokens ([#12059](https://github.com/dynamic-labs/dynamic-auth/issues/12059)) ([26c9022](https://github.com/dynamic-labs/dynamic-auth/commit/26c9022da3371b0da0498ec641157aa9fed356aa))
+* security updates ([#12114](https://github.com/dynamic-labs/dynamic-auth/issues/12114)) ([a4f9bc1](https://github.com/dynamic-labs/dynamic-auth/commit/a4f9bc19870156903b76996c55ecd46a3417f004)) ([#12050](https://github.com/dynamic-labs/dynamic-auth/issues/12050)) ([8eeec92](https://github.com/dynamic-labs/dynamic-auth/commit/8eeec923d0f2f688ade60440e1f92bb1fd646201)) ([#12088](https://github.com/dynamic-labs/dynamic-auth/issues/12088)) ([f11f1f3](https://github.com/dynamic-labs/dynamic-auth/commit/f11f1f384201fa31f58753c0854eaf17f420fb09))
+* replace deprecated polygon-rpc.com RPC with polygon.drpc.org ([#12032](https://github.com/dynamic-labs/dynamic-auth/issues/12032)) ([e1ece53](https://github.com/dynamic-labs/dynamic-auth/commit/e1ece538aedf6127048ca64daf9f9f3cf3a7026e))
+* **sui:** stop using Sui Foundation fullnode URLs in WaaS and extension connectors ([#12108](https://github.com/dynamic-labs/dynamic-auth/issues/12108)) ([b23c85b](https://github.com/dynamic-labs/dynamic-auth/commit/b23c85b7c06f3147705a026ba23f5e8ae1f03b68))
+* **wallet-book:** use Backpack universal link for iOS in-app browser ([#12053](https://github.com/dynamic-labs/dynamic-auth/issues/12053)) ([afba6b1](https://github.com/dynamic-labs/dynamic-auth/commit/afba6b192e4be50aaeca9f5fad88b44808a034a0))
+* **wallet-connect:** recover WalletConnect IndexedDB store when object store is missing ([#12048](https://github.com/dynamic-labs/dynamic-auth/issues/12048)) ([96ff80e](https://github.com/dynamic-labs/dynamic-auth/commit/96ff80e40b28740de15b1702b85f954100fd5f25))
+
+
+* **react-native-extension:** store sensitive information with react-native-keychain ([#12092](https://github.com/dynamic-labs/dynamic-auth/issues/12092)) ([10c0f2f](https://github.com/dynamic-labs/dynamic-auth/commit/10c0f2f6c281e300e4a0455aaaa0d452808dcb87))
+* **waas:** move the client key-share store onto the core storage API ([#12096](https://github.com/dynamic-labs/dynamic-auth/issues/12096)) ([778f993](https://github.com/dynamic-labs/dynamic-auth/commit/778f993c5528ec03a7f1446dcb81a041a22db89b)), closes [#12094](https://github.com/dynamic-labs/dynamic-auth/issues/12094) [#12094](https://github.com/dynamic-labs/dynamic-auth/issues/12094) [#12092](https://github.com/dynamic-labs/dynamic-auth/issues/12092) [#12094](https://github.com/dynamic-labs/dynamic-auth/issues/12094)
+
+
 ## [5.0.0-rc.4](https://github.com/dynamic-labs/dynamic-auth/compare/v5.0.0-rc.3...v5.0.0-rc.4) (2026-07-20)
 
 

package/package.cjs

@@ -3,6 +3,6 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var version = "5.0.0-rc.4";
+var version = "5.1.0";
 
 exports.version = version;

package/package.js

@@ -1,4 +1,4 @@
 'use client'
-var version = "5.0.0-rc.4";
+var version = "5.1.0";
 
 export { version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dynamic-labs/bitcoin",
-  "version": "5.0.0-rc.4",
+  "version": "5.1.0",
   "description": "A React SDK for implementing wallet web3 authentication and authorization to your website.",
   "author": "Dynamic Labs, Inc.",
   "license": "MIT",
@@ -18,24 +18,24 @@
   },
   "homepage": "https://www.dynamic.xyz/",
   "dependencies": {
-    "@dynamic-labs-wallet/browser-wallet-client": "1.0.74",
+    "@dynamic-labs-wallet/browser-wallet-client": "1.0.92",
     "@dynamic-labs-wallet/forward-mpc-client": "1.0.1",
     "@bitcoinerlab/secp256k1": "1.1.1",
     "@btckit/types": "0.0.19",
-    "@dynamic-labs/sdk-api-core": "0.0.1082",
+    "@dynamic-labs/sdk-api-core": "0.0.1093",
     "@wallet-standard/app": "1.0.1",
     "@wallet-standard/base": "1.0.1",
     "bitcoinjs-lib": "6.1.5",
     "ecpair": "2.1.0",
     "sats-connect": "4.2.1",
     "jsontokens": "4.0.1",
-    "@dynamic-labs/assert-package-version": "5.0.0-rc.4",
-    "@dynamic-labs/logger": "5.0.0-rc.4",
-    "@dynamic-labs/types": "5.0.0-rc.4",
-    "@dynamic-labs/utils": "5.0.0-rc.4",
-    "@dynamic-labs/waas": "5.0.0-rc.4",
-    "@dynamic-labs/wallet-book": "5.0.0-rc.4",
-    "@dynamic-labs/wallet-connector-core": "5.0.0-rc.4",
+    "@dynamic-labs/assert-package-version": "5.1.0",
+    "@dynamic-labs/logger": "5.1.0",
+    "@dynamic-labs/types": "5.1.0",
+    "@dynamic-labs/utils": "5.1.0",
+    "@dynamic-labs/waas": "5.1.0",
+    "@dynamic-labs/wallet-book": "5.1.0",
+    "@dynamic-labs/wallet-connector-core": "5.1.0",
     "eventemitter3": "5.0.1"
   },
   "peerDependencies": {}

package/src/connectors/BitcoinWalletConnector.d.ts

@@ -41,6 +41,7 @@ export declare abstract class BitcoinWalletConnector extends WalletConnectorBase
     setAdditionalAddresses(mainAddress: string, additionalAddresses: WalletAdditionalAddress[]): Promise<void>;
     sendRawTransaction(rawTransaction: string): Promise<string>;
     sendBitcoin(transaction: BitcoinTransaction): Promise<string | undefined>;
+    sendBitcoinWithConfirmation?(transaction: BitcoinTransaction): Promise<string | undefined>;
     buildPsbt(transaction: BitcoinTransaction): Promise<string | undefined>;
     getProvider<T>(): T & EventEmitter<string | symbol, any>;
     abstract signPsbt(request: BitcoinSignPsbtRequest | EmbeddedWalletSignPsbtRequest): Promise<BitcoinSignPsbtResponse | undefined>;

package/src/connectors/DynamicWaasBitcoinConnector/DynamicWaasBitcoinConnector.cjs

@@ -160,22 +160,57 @@ class DynamicWaasBitcoinConnector extends waas.withDynamicWaas(BitcoinWalletConn
             return _super.getBalance.call(this, (_a = this.activeAccountAddress) !== null && _a !== void 0 ? _a : address);
         });
     }
+    /**
+     * Finds the credential that owns the active address, either as its primary
+     * (mainnet) address or as one of its network-tagged additional addresses.
+     *
+     * This connector is shared across every Bitcoin wallet of the user —
+     * `verifiedCredentials` holds them all — so the owning credential must be
+     * looked up by the active address. Reading `verifiedCredential` instead
+     * would always answer with the user's *first* wallet.
+     */
+    findCredentialForActiveAddress() {
+        var _a;
+        const { activeAccountAddress } = this;
+        if (!activeAccountAddress) {
+            return undefined;
+        }
+        return ((_a = this.verifiedCredentials) !== null && _a !== void 0 ? _a : []).find((credential) => {
+            var _a;
+            return (credential === null || credential === void 0 ? void 0 : credential.address) === activeAccountAddress ||
+                ((_a = credential === null || credential === void 0 ? void 0 : credential.walletAdditionalAddresses) !== null && _a !== void 0 ? _a : []).some((additionalAddress) => additionalAddress.address === activeAccountAddress);
+        });
+    }
     /**
      * Wallet identity: keyshares/wallet records are keyed by the wallet's
      * primary (mainnet) address. On testnet the active address is the same
      * wallet's per-network encoding — WaaS lookups (password, signing) must use
      * the primary address (the same key signs both encodings).
+     *
+     * Resolved from the credential that owns the active address, so a user with
+     * several Bitcoin wallets gets the identity of the wallet being spent from.
+     * Never falls back to another wallet's address: a substituted key produces a
+     * signature that looks valid locally and is rejected by the network, so the
+     * failure has to surface here instead.
      */
     getWalletIdentityAddress() {
-        var _a, _b;
-        // The active address is a valid fallback only on mainnet, where it is
-        // the primary encoding; a switched-network encoding must never be used
-        // as the wallet identity.
-        const identity = (_b = (_a = this.verifiedCredential) === null || _a === void 0 ? void 0 : _a.address) !== null && _b !== void 0 ? _b : (this.activeNetworkId === BITCOIN_MAINNET_NETWORK_ID
+        var _a, _b, _c, _d;
+        const owningCredential = this.findCredentialForActiveAddress();
+        // The primary address is normally on the credential itself; fall back to
+        // its mainnet-tagged payment address for credentials that only carry
+        // network-tagged entries.
+        const owningCredentialAddress = (_a = owningCredential === null || owningCredential === void 0 ? void 0 : owningCredential.address) !== null && _a !== void 0 ? _a : (_c = ((_b = owningCredential === null || owningCredential === void 0 ? void 0 : owningCredential.walletAdditionalAddresses) !== null && _b !== void 0 ? _b : []).find((addr) => addr.type === 'payment' &&
+            addr.network === 'mainnet')) === null || _c === void 0 ? void 0 : _c.address;
+        // With no credential owning the active address there is nothing to
+        // identify the wallet by except the active address itself, which on
+        // mainnet is the primary encoding. That is still the *requested* wallet,
+        // so it is a safe answer — unlike `verifiedCredential`, which is always
+        // the user's first wallet and would substitute a different key.
+        const identity = owningCredentialAddress !== null && owningCredentialAddress !== void 0 ? owningCredentialAddress : (this.activeNetworkId === BITCOIN_MAINNET_NETWORK_ID
             ? this.activeAccountAddress
             : undefined);
         if (!identity) {
-            throw new utils.DynamicError('Active account address is required', 'active_account_address_is_required');
+            throw new utils.DynamicError(`Could not resolve the wallet identity for active address ${(_d = this.activeAccountAddress) !== null && _d !== void 0 ? _d : '(unset)'}`, 'active_account_address_is_required');
         }
         return identity;
     }
@@ -185,14 +220,18 @@ class DynamicWaasBitcoinConnector extends waas.withDynamicWaas(BitcoinWalletConn
      * address (wallets created before per-network registration).
      */
     getPaymentAddressForNetwork(network) {
-        var _a, _b, _c;
-        const tagged = (_b = (_a = this.verifiedCredential) === null || _a === void 0 ? void 0 : _a.walletAdditionalAddresses) === null || _b === void 0 ? void 0 : _b.find((addr) => addr.type === 'payment' &&
+        var _a, _b;
+        // Resolved against the wallet that is currently active. Reading
+        // `verifiedCredential` alone would switch the network on the user's first
+        // wallet, handing back an address that belongs to a different wallet.
+        const credential = (_a = this.findCredentialForActiveAddress()) !== null && _a !== void 0 ? _a : this.verifiedCredential;
+        const tagged = (_b = credential === null || credential === void 0 ? void 0 : credential.walletAdditionalAddresses) === null || _b === void 0 ? void 0 : _b.find((addr) => addr.type === 'payment' &&
             addr.network === network);
         if (tagged === null || tagged === void 0 ? void 0 : tagged.address) {
             return tagged.address;
         }
         if (network === 'mainnet') {
-            return (_c = this.verifiedCredential) === null || _c === void 0 ? void 0 : _c.address;
+            return credential === null || credential === void 0 ? void 0 : credential.address;
         }
         return undefined;
     }
@@ -352,6 +391,30 @@ class DynamicWaasBitcoinConnector extends waas.withDynamicWaas(BitcoinWalletConn
             return this.sendRawTransaction(signedTransactionHex);
         });
     }
+    sendBitcoinWithConfirmation(transaction) {
+        return _tslib.__awaiter(this, void 0, void 0, function* () {
+            if (!this.activeAccountAddress) {
+                throw new utils.DynamicError('Active account address is required', 'active_account_address_is_required');
+            }
+            const uiTransaction = new BitcoinUiTransaction.BitcoinUiTransaction({
+                from: this.activeAccountAddress,
+                mempoolApiService: this.mempoolApiService,
+                onSubmit: (tx) => _tslib.__awaiter(this, void 0, void 0, function* () {
+                    const txHash = yield this.sendBitcoin(tx);
+                    if (!txHash) {
+                        throw new utils.DynamicError('Failed to send Bitcoin transaction', 'send_bitcoin_transaction');
+                    }
+                    return txHash;
+                }),
+            });
+            uiTransaction.to = transaction.recipientAddress;
+            uiTransaction.value = transaction.amount;
+            if (transaction.feePriority) {
+                uiTransaction.feePriority = transaction.feePriority;
+            }
+            return this.walletUiUtils.sendTransaction(this, uiTransaction);
+        });
+    }
     /**
      * Creates a new Bitcoin wallet account with Bitcoin-specific defaults.
      * If `bitcoinConfig.addressType` is not provided, the underlying BTC client
@@ -637,7 +700,15 @@ class DynamicWaasBitcoinConnector extends waas.withDynamicWaas(BitcoinWalletConn
             if (allCredentials.length === 0) {
                 throw new utils.DynamicError(`No verified credentials found. The address ${this.activeAccountAddress} may not be properly registered.`, 'no_verified_credentials_found_the_address');
             }
-            for (const credential of allCredentials) {
+            // Scoped to the credential that owns the active address when there is one.
+            // Searching every credential would let another wallet of the same user
+            // answer for this one, and that is the failure this must not produce: a
+            // key that is not the wallet's own produces a witness the network rejects.
+            const owningCredential = this.findCredentialForActiveAddress();
+            const credentialsToSearch = owningCredential
+                ? [owningCredential]
+                : allCredentials;
+            for (const credential of credentialsToSearch) {
                 const { walletAdditionalAddresses } = credential !== null && credential !== void 0 ? credential : {};
                 if (!walletAdditionalAddresses) {
                     continue;
@@ -647,8 +718,8 @@ class DynamicWaasBitcoinConnector extends waas.withDynamicWaas(BitcoinWalletConn
                     return additionalAddress.publicKey;
                 }
             }
-            const allAvailableAddresses = allCredentials
-                .flatMap((cred) => { var _a; return (_a = cred.walletAdditionalAddresses) !== null && _a !== void 0 ? _a : []; })
+            const allAvailableAddresses = credentialsToSearch
+                .flatMap((cred) => { var _a; return (_a = cred === null || cred === void 0 ? void 0 : cred.walletAdditionalAddresses) !== null && _a !== void 0 ? _a : []; })
                 .map((addr) => addr.address)
                 .join(', ');
             throw new utils.DynamicError(`No additional address found for ${this.activeAccountAddress}. Available addresses: ${allAvailableAddresses || 'none'}`, 'no_additional_address_found_for_available');

package/src/connectors/DynamicWaasBitcoinConnector/DynamicWaasBitcoinConnector.d.ts

@@ -22,7 +22,6 @@ declare const DynamicWaasBitcoinConnector_base: (abstract new (...args: any[]) =
         scope: TokenScope;
     }) => Promise<string | undefined>) | undefined;
     onUnauthorized?: (() => void | Promise<void>) | undefined;
-    /** Dynamic network ids for the Bitcoin networks (mirrors the networks catalog). */
     environmentId?: string | undefined;
     baseApiUrl?: string | undefined;
     relayUrl?: string | undefined;
@@ -56,9 +55,10 @@ declare const DynamicWaasBitcoinConnector_base: (abstract new (...args: any[]) =
     setRelayUrl(relayUrl: string): void;
     setGetSignedSessionIdFunction(getSignedSessionId: () => Promise<string>): void;
     setGetSessionPublicKeyFunction(getSessionPublicKey: () => Promise<string | undefined>): void;
-    delegateKeyShares({ accountAddress, password, }: {
+    delegateKeyShares({ accountAddress, password, initialSignerRules, }: {
         accountAddress: string;
         password?: string | undefined;
+        initialSignerRules?: import("@dynamic-labs-wallet/browser-wallet-client").WaasPolicyRule[] | undefined;
     }): Promise<void>;
     createRevocableSignedSessionCallback(): {
         getSignedSessionId: () => Promise<string>;
@@ -144,11 +144,7 @@ declare const DynamicWaasBitcoinConnector_base: (abstract new (...args: any[]) =
     exportClientKeysharesFromGoogleDrive({ accountAddress, password, }: {
         accountAddress: string;
         password?: string | undefined;
-    }): Promise<void>; /**
-     * Resolves the wallet's payment address for a network from the credential's
-     * network-tagged additional addresses. Mainnet falls back to the primary
-     * address (wallets created before per-network registration).
-     */
+    }): Promise<void>;
     backupKeySharesToICloud({ accountAddress, password, }: {
         accountAddress: string;
         password?: string | undefined;
@@ -298,11 +294,27 @@ export declare class DynamicWaasBitcoinConnector extends DynamicWaasBitcoinConne
      * routing is address-driven).
      */
     getBalance(address: string): Promise<string | undefined>;
+    /**
+     * Finds the credential that owns the active address, either as its primary
+     * (mainnet) address or as one of its network-tagged additional addresses.
+     *
+     * This connector is shared across every Bitcoin wallet of the user —
+     * `verifiedCredentials` holds them all — so the owning credential must be
+     * looked up by the active address. Reading `verifiedCredential` instead
+     * would always answer with the user's *first* wallet.
+     */
+    private findCredentialForActiveAddress;
     /**
      * Wallet identity: keyshares/wallet records are keyed by the wallet's
      * primary (mainnet) address. On testnet the active address is the same
      * wallet's per-network encoding — WaaS lookups (password, signing) must use
      * the primary address (the same key signs both encodings).
+     *
+     * Resolved from the credential that owns the active address, so a user with
+     * several Bitcoin wallets gets the identity of the wallet being spent from.
+     * Never falls back to another wallet's address: a substituted key produces a
+     * signature that looks valid locally and is rejected by the network, so the
+     * failure has to surface here instead.
      */
     private getWalletIdentityAddress;
     /**
@@ -365,6 +377,7 @@ export declare class DynamicWaasBitcoinConnector extends DynamicWaasBitcoinConne
      * @throws {DynamicError} If any step in the process fails
      */
     sendBitcoin(transaction: BitcoinTransaction): Promise<string | undefined>;
+    sendBitcoinWithConfirmation(transaction: BitcoinTransaction): Promise<string | undefined>;
     /**
      * Creates a new Bitcoin wallet account with Bitcoin-specific defaults.
      * If `bitcoinConfig.addressType` is not provided, the underlying BTC client

package/src/connectors/DynamicWaasBitcoinConnector/DynamicWaasBitcoinConnector.js

@@ -156,22 +156,57 @@ class DynamicWaasBitcoinConnector extends withDynamicWaas(BitcoinWalletConnector
             return _super.getBalance.call(this, (_a = this.activeAccountAddress) !== null && _a !== void 0 ? _a : address);
         });
     }
+    /**
+     * Finds the credential that owns the active address, either as its primary
+     * (mainnet) address or as one of its network-tagged additional addresses.
+     *
+     * This connector is shared across every Bitcoin wallet of the user —
+     * `verifiedCredentials` holds them all — so the owning credential must be
+     * looked up by the active address. Reading `verifiedCredential` instead
+     * would always answer with the user's *first* wallet.
+     */
+    findCredentialForActiveAddress() {
+        var _a;
+        const { activeAccountAddress } = this;
+        if (!activeAccountAddress) {
+            return undefined;
+        }
+        return ((_a = this.verifiedCredentials) !== null && _a !== void 0 ? _a : []).find((credential) => {
+            var _a;
+            return (credential === null || credential === void 0 ? void 0 : credential.address) === activeAccountAddress ||
+                ((_a = credential === null || credential === void 0 ? void 0 : credential.walletAdditionalAddresses) !== null && _a !== void 0 ? _a : []).some((additionalAddress) => additionalAddress.address === activeAccountAddress);
+        });
+    }
     /**
      * Wallet identity: keyshares/wallet records are keyed by the wallet's
      * primary (mainnet) address. On testnet the active address is the same
      * wallet's per-network encoding — WaaS lookups (password, signing) must use
      * the primary address (the same key signs both encodings).
+     *
+     * Resolved from the credential that owns the active address, so a user with
+     * several Bitcoin wallets gets the identity of the wallet being spent from.
+     * Never falls back to another wallet's address: a substituted key produces a
+     * signature that looks valid locally and is rejected by the network, so the
+     * failure has to surface here instead.
      */
     getWalletIdentityAddress() {
-        var _a, _b;
-        // The active address is a valid fallback only on mainnet, where it is
-        // the primary encoding; a switched-network encoding must never be used
-        // as the wallet identity.
-        const identity = (_b = (_a = this.verifiedCredential) === null || _a === void 0 ? void 0 : _a.address) !== null && _b !== void 0 ? _b : (this.activeNetworkId === BITCOIN_MAINNET_NETWORK_ID
+        var _a, _b, _c, _d;
+        const owningCredential = this.findCredentialForActiveAddress();
+        // The primary address is normally on the credential itself; fall back to
+        // its mainnet-tagged payment address for credentials that only carry
+        // network-tagged entries.
+        const owningCredentialAddress = (_a = owningCredential === null || owningCredential === void 0 ? void 0 : owningCredential.address) !== null && _a !== void 0 ? _a : (_c = ((_b = owningCredential === null || owningCredential === void 0 ? void 0 : owningCredential.walletAdditionalAddresses) !== null && _b !== void 0 ? _b : []).find((addr) => addr.type === 'payment' &&
+            addr.network === 'mainnet')) === null || _c === void 0 ? void 0 : _c.address;
+        // With no credential owning the active address there is nothing to
+        // identify the wallet by except the active address itself, which on
+        // mainnet is the primary encoding. That is still the *requested* wallet,
+        // so it is a safe answer — unlike `verifiedCredential`, which is always
+        // the user's first wallet and would substitute a different key.
+        const identity = owningCredentialAddress !== null && owningCredentialAddress !== void 0 ? owningCredentialAddress : (this.activeNetworkId === BITCOIN_MAINNET_NETWORK_ID
             ? this.activeAccountAddress
             : undefined);
         if (!identity) {
-            throw new DynamicError('Active account address is required', 'active_account_address_is_required');
+            throw new DynamicError(`Could not resolve the wallet identity for active address ${(_d = this.activeAccountAddress) !== null && _d !== void 0 ? _d : '(unset)'}`, 'active_account_address_is_required');
         }
         return identity;
     }
@@ -181,14 +216,18 @@ class DynamicWaasBitcoinConnector extends withDynamicWaas(BitcoinWalletConnector
      * address (wallets created before per-network registration).
      */
     getPaymentAddressForNetwork(network) {
-        var _a, _b, _c;
-        const tagged = (_b = (_a = this.verifiedCredential) === null || _a === void 0 ? void 0 : _a.walletAdditionalAddresses) === null || _b === void 0 ? void 0 : _b.find((addr) => addr.type === 'payment' &&
+        var _a, _b;
+        // Resolved against the wallet that is currently active. Reading
+        // `verifiedCredential` alone would switch the network on the user's first
+        // wallet, handing back an address that belongs to a different wallet.
+        const credential = (_a = this.findCredentialForActiveAddress()) !== null && _a !== void 0 ? _a : this.verifiedCredential;
+        const tagged = (_b = credential === null || credential === void 0 ? void 0 : credential.walletAdditionalAddresses) === null || _b === void 0 ? void 0 : _b.find((addr) => addr.type === 'payment' &&
             addr.network === network);
         if (tagged === null || tagged === void 0 ? void 0 : tagged.address) {
             return tagged.address;
         }
         if (network === 'mainnet') {
-            return (_c = this.verifiedCredential) === null || _c === void 0 ? void 0 : _c.address;
+            return credential === null || credential === void 0 ? void 0 : credential.address;
         }
         return undefined;
     }
@@ -348,6 +387,30 @@ class DynamicWaasBitcoinConnector extends withDynamicWaas(BitcoinWalletConnector
             return this.sendRawTransaction(signedTransactionHex);
         });
     }
+    sendBitcoinWithConfirmation(transaction) {
+        return __awaiter(this, void 0, void 0, function* () {
+            if (!this.activeAccountAddress) {
+                throw new DynamicError('Active account address is required', 'active_account_address_is_required');
+            }
+            const uiTransaction = new BitcoinUiTransaction({
+                from: this.activeAccountAddress,
+                mempoolApiService: this.mempoolApiService,
+                onSubmit: (tx) => __awaiter(this, void 0, void 0, function* () {
+                    const txHash = yield this.sendBitcoin(tx);
+                    if (!txHash) {
+                        throw new DynamicError('Failed to send Bitcoin transaction', 'send_bitcoin_transaction');
+                    }
+                    return txHash;
+                }),
+            });
+            uiTransaction.to = transaction.recipientAddress;
+            uiTransaction.value = transaction.amount;
+            if (transaction.feePriority) {
+                uiTransaction.feePriority = transaction.feePriority;
+            }
+            return this.walletUiUtils.sendTransaction(this, uiTransaction);
+        });
+    }
     /**
      * Creates a new Bitcoin wallet account with Bitcoin-specific defaults.
      * If `bitcoinConfig.addressType` is not provided, the underlying BTC client
@@ -633,7 +696,15 @@ class DynamicWaasBitcoinConnector extends withDynamicWaas(BitcoinWalletConnector
             if (allCredentials.length === 0) {
                 throw new DynamicError(`No verified credentials found. The address ${this.activeAccountAddress} may not be properly registered.`, 'no_verified_credentials_found_the_address');
             }
-            for (const credential of allCredentials) {
+            // Scoped to the credential that owns the active address when there is one.
+            // Searching every credential would let another wallet of the same user
+            // answer for this one, and that is the failure this must not produce: a
+            // key that is not the wallet's own produces a witness the network rejects.
+            const owningCredential = this.findCredentialForActiveAddress();
+            const credentialsToSearch = owningCredential
+                ? [owningCredential]
+                : allCredentials;
+            for (const credential of credentialsToSearch) {
                 const { walletAdditionalAddresses } = credential !== null && credential !== void 0 ? credential : {};
                 if (!walletAdditionalAddresses) {
                     continue;
@@ -643,8 +714,8 @@ class DynamicWaasBitcoinConnector extends withDynamicWaas(BitcoinWalletConnector
                     return additionalAddress.publicKey;
                 }
             }
-            const allAvailableAddresses = allCredentials
-                .flatMap((cred) => { var _a; return (_a = cred.walletAdditionalAddresses) !== null && _a !== void 0 ? _a : []; })
+            const allAvailableAddresses = credentialsToSearch
+                .flatMap((cred) => { var _a; return (_a = cred === null || cred === void 0 ? void 0 : cred.walletAdditionalAddresses) !== null && _a !== void 0 ? _a : []; })
                 .map((addr) => addr.address)
                 .join(', ');
             throw new DynamicError(`No additional address found for ${this.activeAccountAddress}. Available addresses: ${allAvailableAddresses || 'none'}`, 'no_additional_address_found_for_available');

package/src/index.cjs

@@ -69,6 +69,7 @@ exports.PsbtParser = PsbtParser.PsbtParser;
 exports.BitcoinWallet = BitcoinWallet.BitcoinWallet;
 exports.isBitcoinWallet = isBitcoinWallet.isBitcoinWallet;
 exports.BitcoinProviderHelper = bitcoinProviderHelper.BitcoinProviderHelper;
+exports.DUST_LIMIT = _const.DUST_LIMIT;
 exports.HTTP_STATUS_NOT_FOUND = _const.HTTP_STATUS_NOT_FOUND;
 exports.HTTP_STATUS_TOO_MANY_REQUESTS = _const.HTTP_STATUS_TOO_MANY_REQUESTS;
 exports.BitcoinWalletConnectors = BitcoinWalletConnectors;

package/src/index.d.ts

@@ -6,4 +6,4 @@ export * from './wallet';
 export { UnisatConnector, BitcoinSatsConnectConnector, DynamicWaasBitcoinConnector, } from './connectors';
 export declare const BitcoinWalletConnectors: (props: any) => (import("dist/packages/wallet-connector-core/src").WalletConnectorConstructor | typeof OkxConnector)[];
 export { BitcoinProviderHelper } from './bitcoinProviderHelper';
-export { HTTP_STATUS_NOT_FOUND, HTTP_STATUS_TOO_MANY_REQUESTS } from './const';
+export { DUST_LIMIT, HTTP_STATUS_NOT_FOUND, HTTP_STATUS_TOO_MANY_REQUESTS, } from './const';

package/src/index.js

@@ -34,7 +34,7 @@ export { PsbtParser } from './utils/psbtParser/PsbtParser.js';
 export { BitcoinWallet } from './wallet/BitcoinWallet.js';
 export { isBitcoinWallet } from './wallet/isBitcoinWallet/isBitcoinWallet.js';
 export { BitcoinProviderHelper } from './bitcoinProviderHelper.js';
-export { HTTP_STATUS_NOT_FOUND, HTTP_STATUS_TOO_MANY_REQUESTS } from './const.js';
+export { DUST_LIMIT, HTTP_STATUS_NOT_FOUND, HTTP_STATUS_TOO_MANY_REQUESTS } from './const.js';
 
 assertPackageVersion('@dynamic-labs/bitcoin', version);
 const BitcoinWalletConnectors = (props) => [

package/src/services/MempoolApiService.cjs

@@ -140,7 +140,10 @@ class MempoolApiService {
             if (!response.ok) {
                 const error = yield response.text();
                 logger.debug(`sendRawTransaction - response not ok: ${JSON.stringify(error)}`);
-                throw new utils.DynamicError('sendRawTransaction - failed to send transaction', 'sendrawtransaction_failed_to_send_transaction');
+                // The node's reject reason is the only thing that distinguishes a bad
+                // witness from a fee or mempool problem, so it goes in the thrown
+                // message rather than only into a debug log the integrator cannot read.
+                throw new utils.DynamicError(`sendRawTransaction - failed to send transaction${error ? `: ${error}` : ''}`, 'sendrawtransaction_failed_to_send_transaction');
             }
             return response.text();
         });

package/src/services/MempoolApiService.js

@@ -136,7 +136,10 @@ class MempoolApiService {
             if (!response.ok) {
                 const error = yield response.text();
                 logger.debug(`sendRawTransaction - response not ok: ${JSON.stringify(error)}`);
-                throw new DynamicError('sendRawTransaction - failed to send transaction', 'sendrawtransaction_failed_to_send_transaction');
+                // The node's reject reason is the only thing that distinguishes a bad
+                // witness from a fee or mempool problem, so it goes in the thrown
+                // message rather than only into a debug log the integrator cannot read.
+                throw new DynamicError(`sendRawTransaction - failed to send transaction${error ? `: ${error}` : ''}`, 'sendrawtransaction_failed_to_send_transaction');
             }
             return response.text();
         });

package/src/wallet/BitcoinWallet.cjs

@@ -42,6 +42,21 @@ class BitcoinWallet extends walletConnectorCore.Wallet {
             return this._connector.sendBitcoin(transaction);
         });
     }
+    /**
+     * Sends satoshis to a bitcoin address, showing a confirmation modal when
+     * the connector supports it (e.g. DynamicWaasBitcoinConnector). Falls back
+     * to sendBitcoin for connectors that have no confirmation UI.
+     * @returns A promise that resolves to the transaction id
+     */
+    sendBitcoinWithConfirmation(transaction) {
+        return _tslib.__awaiter(this, void 0, void 0, function* () {
+            yield this.sync();
+            if (this._connector.sendBitcoinWithConfirmation) {
+                return this._connector.sendBitcoinWithConfirmation(transaction);
+            }
+            return this._connector.sendBitcoin(transaction);
+        });
+    }
     /**
      * Signs a message using a specific address type (payment or ordinals).
      * @param messageToSign - The message to sign.

package/src/wallet/BitcoinWallet.d.ts

@@ -23,6 +23,13 @@ export declare class BitcoinWallet extends Wallet<BitcoinWalletConnector> {
      * @returns A promise that resolves to the transaction id
      */
     sendBitcoin(transaction: BitcoinTransaction): Promise<string | undefined>;
+    /**
+     * Sends satoshis to a bitcoin address, showing a confirmation modal when
+     * the connector supports it (e.g. DynamicWaasBitcoinConnector). Falls back
+     * to sendBitcoin for connectors that have no confirmation UI.
+     * @returns A promise that resolves to the transaction id
+     */
+    sendBitcoinWithConfirmation(transaction: BitcoinTransaction): Promise<string | undefined>;
     /**
      * Signs a message using a specific address type (payment or ordinals).
      * @param messageToSign - The message to sign.

package/src/wallet/BitcoinWallet.js

@@ -38,6 +38,21 @@ class BitcoinWallet extends Wallet {
             return this._connector.sendBitcoin(transaction);
         });
     }
+    /**
+     * Sends satoshis to a bitcoin address, showing a confirmation modal when
+     * the connector supports it (e.g. DynamicWaasBitcoinConnector). Falls back
+     * to sendBitcoin for connectors that have no confirmation UI.
+     * @returns A promise that resolves to the transaction id
+     */
+    sendBitcoinWithConfirmation(transaction) {
+        return __awaiter(this, void 0, void 0, function* () {
+            yield this.sync();
+            if (this._connector.sendBitcoinWithConfirmation) {
+                return this._connector.sendBitcoinWithConfirmation(transaction);
+            }
+            return this._connector.sendBitcoin(transaction);
+        });
+    }
     /**
      * Signs a message using a specific address type (payment or ordinals).
      * @param messageToSign - The message to sign.