@dynamic-labs/bitcoin 5.4.0 → 5.5.0

package/CHANGELOG.md

@@ -1,4 +1,31 @@
 
+## [5.5.0](https://github.com/dynamic-labs/dynamic-auth/compare/v5.4.1...v5.5.0) (2026-08-31)
+
+
+### Features
+
+* **waas-evm:** route embedded EVM sends through gas sponsorship when enabled ([#12306](https://github.com/dynamic-labs/dynamic-auth/issues/12306)) ([6046ff3](https://github.com/dynamic-labs/dynamic-auth/commit/6046ff362d8de9402793bdaa7319fda645ff4c04))
+
+
+### Bug Fixes
+
+* **bitcoin:** resolve the active BTC wallet and network correctly across the widget ([#12308](https://github.com/dynamic-labs/dynamic-auth/issues/12308)) ([13e9eae](https://github.com/dynamic-labs/dynamic-auth/commit/13e9eaec19b3925db507c878988cfd82da5a6de6))
+* **btc:** unbreak BTC transaction confirmation, testnet balances and taproot testnet switching ([#12305](https://github.com/dynamic-labs/dynamic-auth/issues/12305)) ([5fd999c](https://github.com/dynamic-labs/dynamic-auth/commit/5fd999c4c819d3a74e967c0cfa77c5877a74906b))
+* **react-native-extension:** stop leaking expo-secure-store into consumer autolinking ([#12296](https://github.com/dynamic-labs/dynamic-auth/issues/12296)) ([1e0396a](https://github.com/dynamic-labs/dynamic-auth/commit/1e0396ab00c79aa0b2f45b6d7b1d339c1dac1203)), closes [#12254](https://github.com/dynamic-labs/dynamic-auth/issues/12254)
+* **screening:** wire connected-wallet screening into the Send Balance UI (DYNT-1663) ([#12303](https://github.com/dynamic-labs/dynamic-auth/issues/12303)) ([5d26ff3](https://github.com/dynamic-labs/dynamic-auth/commit/5d26ff375118302522c39bd2f1fa9e04f7378eaf))
+
+### [5.4.1](https://github.com/dynamic-labs/dynamic-auth/compare/v5.4.0...v5.4.1) (2026-08-26)
+
+
+### Bug Fixes
+
+* **webview-controller:** resolve which keychain key a session belongs to ([#12246](https://github.com/dynamic-labs/dynamic-auth/issues/12246)) ([3d110db](https://github.com/dynamic-labs/dynamic-auth/commit/3d110db831c6e9d82d07d86841f5c7733924b17e))
+* **bitcoin:** forward the password through the BTC importPrivateKey override ([#12278](https://github.com/dynamic-labs/dynamic-auth/issues/12278)) ([21e1df3](https://github.com/dynamic-labs/dynamic-auth/commit/21e1df3e33e96e2efdb15ffa0fd29a441056202e))
+* **react-native-extension:** recover 4.x expo-secure-store sessions on keychain miss ([#12254](https://github.com/dynamic-labs/dynamic-auth/issues/12254)) ([217e991](https://github.com/dynamic-labs/dynamic-auth/commit/217e991838f3073c12e2d2fab7a2e12830faad9e)), closes [#12092](https://github.com/dynamic-labs/dynamic-auth/issues/12092) [#12092](https://github.com/dynamic-labs/dynamic-auth/issues/12092) [#12092](https://github.com/dynamic-labs/dynamic-auth/issues/12092) [#12092](https://github.com/dynamic-labs/dynamic-auth/issues/12092) [#12242](https://github.com/dynamic-labs/dynamic-auth/issues/12242) [#12242](https://github.com/dynamic-labs/dynamic-auth/issues/12242)
+* **transaction-card:** use walletConnector prop for network/fee instead of primaryWallet ([#12063](https://github.com/dynamic-labs/dynamic-auth/issues/12063)) ([81314d2](https://github.com/dynamic-labs/dynamic-auth/commit/81314d25fba4b20ab89631bc2d9ceeb9e2b6b2ac))
+* **waas-svm:** instrument sponsorship retry attempts ([#12281](https://github.com/dynamic-labs/dynamic-auth/issues/12281)) ([7273a4b](https://github.com/dynamic-labs/dynamic-auth/commit/7273a4bc456cad512c0e9fbcd2abd66532a2f7df))
+* **webview-controller:** recover 4.x secure-storage sessions and surface init failures ([#12242](https://github.com/dynamic-labs/dynamic-auth/issues/12242)) ([b51605c](https://github.com/dynamic-labs/dynamic-auth/commit/b51605cc9bdbb5d695173192c502a58d899bbbdd)), closes [#12094](https://github.com/dynamic-labs/dynamic-auth/issues/12094) [#12095](https://github.com/dynamic-labs/dynamic-auth/issues/12095) [#12098](https://github.com/dynamic-labs/dynamic-auth/issues/12098) [dynamic-labs/flutter-sdk#256](https://github.com/dynamic-labs/flutter-sdk/issues/256)
+
 ## [5.4.0](https://github.com/dynamic-labs/dynamic-auth/compare/v5.3.2...v5.4.0) (2026-08-25)
 
 

package/package.cjs

@@ -3,6 +3,6 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var version = "5.4.0";
+var version = "5.5.0";
 
 exports.version = version;

package/package.js

@@ -1,4 +1,4 @@
 'use client'
-var version = "5.4.0";
+var version = "5.5.0";
 
 export { version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dynamic-labs/bitcoin",
-  "version": "5.4.0",
+  "version": "5.5.0",
   "description": "A React SDK for implementing wallet web3 authentication and authorization to your website.",
   "author": "Dynamic Labs, Inc.",
   "license": "MIT",
@@ -29,13 +29,13 @@
     "ecpair": "2.1.0",
     "sats-connect": "4.2.1",
     "jsontokens": "4.0.1",
-    "@dynamic-labs/assert-package-version": "5.4.0",
-    "@dynamic-labs/logger": "5.4.0",
-    "@dynamic-labs/types": "5.4.0",
-    "@dynamic-labs/utils": "5.4.0",
-    "@dynamic-labs/waas": "5.4.0",
-    "@dynamic-labs/wallet-book": "5.4.0",
-    "@dynamic-labs/wallet-connector-core": "5.4.0",
+    "@dynamic-labs/assert-package-version": "5.5.0",
+    "@dynamic-labs/logger": "5.5.0",
+    "@dynamic-labs/types": "5.5.0",
+    "@dynamic-labs/utils": "5.5.0",
+    "@dynamic-labs/waas": "5.5.0",
+    "@dynamic-labs/wallet-book": "5.5.0",
+    "@dynamic-labs/wallet-connector-core": "5.5.0",
     "eventemitter3": "5.0.1"
   },
   "peerDependencies": {}

package/src/connectors/DynamicWaasBitcoinConnector/DynamicWaasBitcoinConnector.cjs

@@ -286,13 +286,15 @@ class DynamicWaasBitcoinConnector extends waas.withDynamicWaas(BitcoinWalletConn
      * address (wallets created before per-network registration).
      */
     getPaymentAddressForNetwork(network) {
-        var _a, _b;
+        var _a, _b, _c;
         // Resolved against the wallet that is currently active. Reading
         // `verifiedCredential` alone would switch the network on the user's first
         // wallet, handing back an address that belongs to a different wallet.
         const credential = (_a = this.findCredentialForActiveAddress()) !== null && _a !== void 0 ? _a : this.verifiedCredential;
-        const tagged = (_b = credential === null || credential === void 0 ? void 0 : credential.walletAdditionalAddresses) === null || _b === void 0 ? void 0 : _b.find((addr) => addr.type === 'payment' &&
-            addr.network === network);
+        // Taproot wallets are minted with `ordinals` rows only, so a `payment`
+        // row is preferred but cannot be required or they lose testnet entirely.
+        const forNetwork = (_b = credential === null || credential === void 0 ? void 0 : credential.walletAdditionalAddresses) === null || _b === void 0 ? void 0 : _b.filter((addr) => addr.network === network);
+        const tagged = (_c = forNetwork === null || forNetwork === void 0 ? void 0 : forNetwork.find((addr) => addr.type === 'payment')) !== null && _c !== void 0 ? _c : forNetwork === null || forNetwork === void 0 ? void 0 : forNetwork.find((addr) => addr.type === 'ordinals');
         if (tagged === null || tagged === void 0 ? void 0 : tagged.address) {
             return tagged.address;
         }
@@ -500,33 +502,29 @@ class DynamicWaasBitcoinConnector extends waas.withDynamicWaas(BitcoinWalletConn
         const _super = Object.create(null, {
             createWalletAccount: { get: () => super.createWalletAccount }
         });
-        return _tslib.__awaiter(this, arguments, void 0, function* ({ thresholdSignatureScheme = 'TWO_OF_TWO', password, bitcoinConfig, } = {}) {
-            var _a;
+        return _tslib.__awaiter(this, arguments, void 0, function* (params = {}) {
+            var _a, _b;
             const finalBitcoinConfig = {
-                addressType: ((_a = bitcoinConfig === null || bitcoinConfig === void 0 ? void 0 : bitcoinConfig.addressType) !== null && _a !== void 0 ? _a : 'native_segwit'),
+                addressType: ((_b = (_a = params.bitcoinConfig) === null || _a === void 0 ? void 0 : _a.addressType) !== null && _b !== void 0 ? _b : 'native_segwit'),
                 network: yield this.getBitcoinNetworkEnum(),
             };
-            return _super.createWalletAccount.call(this, {
-                bitcoinConfig: finalBitcoinConfig,
-                password,
-                thresholdSignatureScheme,
-            });
+            // Spread, so a field added to CreateWalletAccountParams later still
+            // reaches the base instead of being silently dropped here.
+            return _super.createWalletAccount.call(this, Object.assign(Object.assign({}, params), { bitcoinConfig: finalBitcoinConfig }));
         });
     }
     /**
-     * Override importPrivateKey to require and validate addressType for Bitcoin
-     * @param privateKey - The private key to import (WIF format for Bitcoin)
-     * @param thresholdSignatureScheme - The threshold signature scheme (default: 'TWO_OF_TWO')
-     * @param publicAddressCheck - Optional public address to verify against
-     * @param addressType - Required address type for Bitcoin ('native_segwit' or 'taproot')
-     * @param legacyWalletId - Optional ID of the legacy wallet being upgraded
+     * Requires and validates `addressType` for Bitcoin, then delegates.
+     * @param params - See ImportPrivateKeyParams. `addressType` is mandatory
+     * here ('native_segwit' or 'taproot') and `privateKey` is WIF.
      * @throws {DynamicError} If addressType is missing or invalid for BTC
      */
-    importPrivateKey(_a) {
+    importPrivateKey(params) {
         const _super = Object.create(null, {
             importPrivateKey: { get: () => super.importPrivateKey }
         });
-        return _tslib.__awaiter(this, arguments, void 0, function* ({ privateKey, thresholdSignatureScheme = 'TWO_OF_TWO', publicAddressCheck, addressType, legacyWalletId, }) {
+        return _tslib.__awaiter(this, void 0, void 0, function* () {
+            const { addressType } = params;
             if (!addressType) {
                 throw new utils.DynamicError('addressType is required for BTC importPrivateKey', 'addresstype_is_required_for_btc_importprivatekey');
             }
@@ -534,13 +532,10 @@ class DynamicWaasBitcoinConnector extends waas.withDynamicWaas(BitcoinWalletConn
             if (!validAddressTypes.includes(addressType)) {
                 throw new utils.DynamicError(`Invalid addressType: ${addressType}. Must be one of: ${validAddressTypes.join(', ')}`, 'invalid_addresstype_must_be_one_of');
             }
-            return _super.importPrivateKey.call(this, {
-                addressType,
-                legacyWalletId,
-                privateKey,
-                publicAddressCheck,
-                thresholdSignatureScheme,
-            });
+            // Forwarded whole, never field-by-field: a re-declared parameter list is
+            // how `password` silently stopped reaching the base (see
+            // ImportPrivateKeyParams).
+            return _super.importPrivateKey.call(this, params);
         });
     }
     /**
@@ -558,6 +553,34 @@ class DynamicWaasBitcoinConnector extends waas.withDynamicWaas(BitcoinWalletConn
         }
         return this.getWaasWalletClient();
     }
+    /**
+     * Rebinds the connector when the user switches primary wallet. One connector
+     * instance is shared by every BTC wallet, so without this the connector stays
+     * on whichever address it was first seeded with and every address-derived
+     * read — displayed address, deposit address, balance — reports that wallet.
+     *
+     * Guarded by isSameWalletAddress so switching to a wallet that is already
+     * active on a non-mainnet encoding does not reset it to the primary address.
+     */
+    afterWalletSelectHook(walletAddress) {
+        if (!this.isSameWalletAddress(walletAddress)) {
+            this.setActiveAccountAddress(this.resolveAddressForActiveNetwork(walletAddress));
+        }
+    }
+    /**
+     * Selecting a wallet hands us its primary (mainnet) address, so binding it
+     * verbatim would silently drop a switchNetwork the user already made. Map it
+     * onto the network that is currently active instead. Falls back to the given
+     * address when the wallet has no row for that network.
+     */
+    resolveAddressForActiveNetwork(walletAddress) {
+        var _a, _b, _c, _d, _e, _f;
+        const network = this.activeNetworkId === BITCOIN_TESTNET_NETWORK_ID
+            ? 'testnet'
+            : 'mainnet';
+        const forNetwork = ((_b = (_a = this.findCredentialForAddress(walletAddress)) === null || _a === void 0 ? void 0 : _a.walletAdditionalAddresses) !== null && _b !== void 0 ? _b : []).filter((addr) => addr.network === network);
+        return ((_f = (_d = (_c = forNetwork.find((addr) => addr.type === 'payment')) === null || _c === void 0 ? void 0 : _c.address) !== null && _d !== void 0 ? _d : (_e = forNetwork.find((addr) => addr.type === 'ordinals')) === null || _e === void 0 ? void 0 : _e.address) !== null && _f !== void 0 ? _f : walletAddress);
+    }
     /**
      * Gets the currently active account address
      * @returns The active account address or undefined if not set

package/src/connectors/DynamicWaasBitcoinConnector/DynamicWaasBitcoinConnector.d.ts

@@ -1,8 +1,7 @@
-import { BitcoinConfig } from '@dynamic-labs-wallet/browser-wallet-client';
 import { Logger } from '@dynamic-labs/logger';
 import { JwtVerifiedCredential, MFAAction, SignMessageContext, TokenScope } from '@dynamic-labs/sdk-api-core';
 import { GenericNetwork, IUITransaction, WalletUiUtils } from '@dynamic-labs/types';
-import { BitcoinSignPsbtResponse, Chain, IDynamicWaasConnector, ISendBalanceWalletConnector, InternalWalletConnector } from '@dynamic-labs/wallet-connector-core';
+import { BitcoinSignPsbtResponse, Chain, CreateWalletAccountParams, IDynamicWaasConnector, ISendBalanceWalletConnector, ImportPrivateKeyParams, InternalWalletConnector } from '@dynamic-labs/wallet-connector-core';
 import type { DynamicWaasBitcoinConnectorProps, ParsedTransaction } from '../../types';
 import { BitcoinTransaction, EmbeddedWalletSignPsbtRequest } from '../../types';
 import { BitcoinWalletConnector } from '../BitcoinWalletConnector';
@@ -67,12 +66,7 @@ declare const DynamicWaasBitcoinConnector_base: (abstract new (...args: any[]) =
     getWaasWalletClient(traceContext?: import("dist/packages/waas/utils/instrumentation").TraceContext | undefined, { forceRebuild }?: {
         forceRebuild?: boolean | undefined;
     } | undefined): Promise<import("@dynamic-labs-wallet/browser-wallet-client").DynamicWalletClient>;
-    createWalletAccount({ thresholdSignatureScheme, password, bitcoinConfig, businessAccountId, }?: {
-        thresholdSignatureScheme?: string | undefined;
-        password?: string | undefined;
-        bitcoinConfig?: BitcoinConfig | undefined;
-        businessAccountId?: string | undefined;
-    } | undefined): Promise<{
+    createWalletAccount({ thresholdSignatureScheme, password, bitcoinConfig, businessAccountId, }?: CreateWalletAccountParams | undefined): Promise<{
         chainName: string;
         accountAddress: string;
         publicKeyHex: string;
@@ -92,15 +86,7 @@ declare const DynamicWaasBitcoinConnector_base: (abstract new (...args: any[]) =
     }): Promise<{
         shareSetId: string;
     }>;
-    importPrivateKey({ privateKey, thresholdSignatureScheme, publicAddressCheck, addressType, legacyWalletId, password, isRawScalarImport, }: {
-        privateKey: string;
-        thresholdSignatureScheme?: string | undefined;
-        publicAddressCheck?: string | undefined;
-        addressType?: string | undefined;
-        legacyWalletId?: string | undefined;
-        password?: string | undefined;
-        isRawScalarImport?: boolean | undefined;
-    }): Promise<void>;
+    importPrivateKey({ privateKey, thresholdSignatureScheme, publicAddressCheck, addressType, legacyWalletId, password, isRawScalarImport, }: ImportPrivateKeyParams): Promise<void>;
     migrateFromFireblocks({ deviceId, jwt, walletPassword, ncwStorage, expectedAddresses, coinTypes, password, }: {
         deviceId: string;
         jwt: string;
@@ -109,7 +95,9 @@ declare const DynamicWaasBitcoinConnector_base: (abstract new (...args: any[]) =
         expectedAddresses: Record<string, string>;
         coinTypes?: Record<string, number> | undefined;
         password?: string | undefined;
-    }): Promise<Record<string, unknown>>;
+    }): Promise<Record<string, unknown>>; /**
+     * Gets the current Bitcoin network id (1 mainnet, 2 testnet)
+     */
     exportPrivateKey({ accountAddress, displayContainer, password, }?: {
         accountAddress?: string | undefined;
         displayContainer?: HTMLIFrameElement | undefined;
@@ -118,10 +106,7 @@ declare const DynamicWaasBitcoinConnector_base: (abstract new (...args: any[]) =
     getExportHandler(): {
         clear: () => void;
     };
-    exportClientKeyshares({ accountAddress, password, }: {
-        accountAddress: string;
-        password?: string | undefined;
-    }): Promise<void>;
+    exportClientKeyshares({ accountAddress, password, }: import("@dynamic-labs/wallet-connector-core").ExportClientKeysharesParams): Promise<void>;
     runBackupLifecycle({ provider, accountAddress, password, performBackup, }: {
         provider: string;
         accountAddress: string;
@@ -137,11 +122,7 @@ declare const DynamicWaasBitcoinConnector_base: (abstract new (...args: any[]) =
             };
         }) => Promise<void>;
     }): Promise<void>;
-    backupKeySharesToGoogleDrive({ accountAddress, password, googleDriveAccessToken, }: {
-        accountAddress: string;
-        password?: string | undefined;
-        googleDriveAccessToken?: string | undefined;
-    }): Promise<void>;
+    backupKeySharesToGoogleDrive({ accountAddress, password, googleDriveAccessToken, }: import("@dynamic-labs/wallet-connector-core").BackupKeySharesToGoogleDriveParams): Promise<void>;
     exportClientKeysharesFromGoogleDrive({ accountAddress, password, }: {
         accountAddress: string;
         password?: string | undefined;
@@ -155,24 +136,13 @@ declare const DynamicWaasBitcoinConnector_base: (abstract new (...args: any[]) =
     }): Promise<void>;
     hideICloudSignIn(): Promise<void>;
     isICloudAuthenticated(): Promise<boolean>;
-    refreshWalletAccountShares({ accountAddress, password, }: {
-        accountAddress: string;
-        password?: string | undefined;
-    }): Promise<void>;
-    reshareWalletAccountShares({ accountAddress, thresholdSignatureScheme, password, }: {
-        accountAddress: string;
-        thresholdSignatureScheme: string;
-        password?: string | undefined;
-    }): Promise<void>;
+    refreshWalletAccountShares({ accountAddress, password, }: import("@dynamic-labs/wallet-connector-core").RefreshWalletAccountSharesParams): Promise<void>;
+    reshareWalletAccountShares({ accountAddress, thresholdSignatureScheme, password, }: import("@dynamic-labs/wallet-connector-core").ReshareWalletAccountSharesParams): Promise<void>;
     revokeDelegation({ accountAddress, password, }: {
         accountAddress: string;
         password?: string | undefined;
     }): Promise<void>;
-    updatePassword({ accountAddress, existingPassword, newPassword, }: {
-        accountAddress: string;
-        existingPassword?: string | undefined;
-        newPassword: string;
-    }): Promise<void>;
+    updatePassword({ accountAddress, existingPassword, newPassword, }: import("@dynamic-labs/wallet-connector-core").UpdatePasswordParams): Promise<void>;
     setPassword({ accountAddress, newPassword, }: {
         accountAddress: string;
         newPassword: string;
@@ -202,18 +172,7 @@ declare const DynamicWaasBitcoinConnector_base: (abstract new (...args: any[]) =
     generateTraceId(): string;
     buildErrorInstrumentContext(error: unknown): {
         errorCode: string | import("@dynamic-labs/utils").ErrorCode;
-        errorMessage: string; /**
-         * Wallet identity: keyshares/wallet records are keyed by the wallet's
-         * primary (mainnet) address. On testnet the active address is the same
-         * wallet's per-network encoding — WaaS lookups (password, signing) must use
-         * the primary address (the same key signs both encodings).
-         *
-         * Resolved from the credential that owns the active address, so a user with
-         * several Bitcoin wallets gets the identity of the wallet being spent from.
-         * Never falls back to another wallet's address: a substituted key produces a
-         * signature that looks valid locally and is rejected by the network, so the
-         * failure has to surface here instead.
-         */
+        errorMessage: string;
         errorType: string | undefined;
     } | {
         errorCode: string;
@@ -451,32 +410,19 @@ export declare class DynamicWaasBitcoinConnector extends DynamicWaasBitcoinConne
      * @param bitcoinConfig - Bitcoin configuration (addressType, network)
      * @returns The created wallet account information
      */
-    createWalletAccount({ thresholdSignatureScheme, password, bitcoinConfig, }?: {
-        thresholdSignatureScheme?: string;
-        password?: string;
-        bitcoinConfig?: BitcoinConfig;
-    }): Promise<{
+    createWalletAccount(params?: CreateWalletAccountParams): Promise<{
         chainName: string;
         accountAddress: string;
         publicKeyHex: string;
         rawPublicKey: string | Uint8Array | undefined;
     }>;
     /**
-     * Override importPrivateKey to require and validate addressType for Bitcoin
-     * @param privateKey - The private key to import (WIF format for Bitcoin)
-     * @param thresholdSignatureScheme - The threshold signature scheme (default: 'TWO_OF_TWO')
-     * @param publicAddressCheck - Optional public address to verify against
-     * @param addressType - Required address type for Bitcoin ('native_segwit' or 'taproot')
-     * @param legacyWalletId - Optional ID of the legacy wallet being upgraded
+     * Requires and validates `addressType` for Bitcoin, then delegates.
+     * @param params - See ImportPrivateKeyParams. `addressType` is mandatory
+     * here ('native_segwit' or 'taproot') and `privateKey` is WIF.
      * @throws {DynamicError} If addressType is missing or invalid for BTC
      */
-    importPrivateKey({ privateKey, thresholdSignatureScheme, publicAddressCheck, addressType, legacyWalletId, }: {
-        privateKey: string;
-        thresholdSignatureScheme?: string;
-        publicAddressCheck?: string;
-        addressType?: string;
-        legacyWalletId?: string;
-    }): Promise<void>;
+    importPrivateKey(params: ImportPrivateKeyParams): Promise<void>;
     /**
      * Gets the wallet client for a specific account address and sets it as
      * active — unless `accountAddress` is just a different network-tagged
@@ -489,6 +435,23 @@ export declare class DynamicWaasBitcoinConnector extends DynamicWaasBitcoinConne
     getWalletClientByAddress({ accountAddress }: {
         accountAddress: string;
     }): Promise<import("@dynamic-labs-wallet/browser-wallet-client").DynamicWalletClient>;
+    /**
+     * Rebinds the connector when the user switches primary wallet. One connector
+     * instance is shared by every BTC wallet, so without this the connector stays
+     * on whichever address it was first seeded with and every address-derived
+     * read — displayed address, deposit address, balance — reports that wallet.
+     *
+     * Guarded by isSameWalletAddress so switching to a wallet that is already
+     * active on a non-mainnet encoding does not reset it to the primary address.
+     */
+    afterWalletSelectHook(walletAddress: string): void;
+    /**
+     * Selecting a wallet hands us its primary (mainnet) address, so binding it
+     * verbatim would silently drop a switchNetwork the user already made. Map it
+     * onto the network that is currently active instead. Falls back to the given
+     * address when the wallet has no row for that network.
+     */
+    private resolveAddressForActiveNetwork;
     /**
      * Gets the currently active account address
      * @returns The active account address or undefined if not set

package/src/connectors/DynamicWaasBitcoinConnector/DynamicWaasBitcoinConnector.js

@@ -282,13 +282,15 @@ class DynamicWaasBitcoinConnector extends withDynamicWaas(BitcoinWalletConnector
      * address (wallets created before per-network registration).
      */
     getPaymentAddressForNetwork(network) {
-        var _a, _b;
+        var _a, _b, _c;
         // Resolved against the wallet that is currently active. Reading
         // `verifiedCredential` alone would switch the network on the user's first
         // wallet, handing back an address that belongs to a different wallet.
         const credential = (_a = this.findCredentialForActiveAddress()) !== null && _a !== void 0 ? _a : this.verifiedCredential;
-        const tagged = (_b = credential === null || credential === void 0 ? void 0 : credential.walletAdditionalAddresses) === null || _b === void 0 ? void 0 : _b.find((addr) => addr.type === 'payment' &&
-            addr.network === network);
+        // Taproot wallets are minted with `ordinals` rows only, so a `payment`
+        // row is preferred but cannot be required or they lose testnet entirely.
+        const forNetwork = (_b = credential === null || credential === void 0 ? void 0 : credential.walletAdditionalAddresses) === null || _b === void 0 ? void 0 : _b.filter((addr) => addr.network === network);
+        const tagged = (_c = forNetwork === null || forNetwork === void 0 ? void 0 : forNetwork.find((addr) => addr.type === 'payment')) !== null && _c !== void 0 ? _c : forNetwork === null || forNetwork === void 0 ? void 0 : forNetwork.find((addr) => addr.type === 'ordinals');
         if (tagged === null || tagged === void 0 ? void 0 : tagged.address) {
             return tagged.address;
         }
@@ -496,33 +498,29 @@ class DynamicWaasBitcoinConnector extends withDynamicWaas(BitcoinWalletConnector
         const _super = Object.create(null, {
             createWalletAccount: { get: () => super.createWalletAccount }
         });
-        return __awaiter(this, arguments, void 0, function* ({ thresholdSignatureScheme = 'TWO_OF_TWO', password, bitcoinConfig, } = {}) {
-            var _a;
+        return __awaiter(this, arguments, void 0, function* (params = {}) {
+            var _a, _b;
             const finalBitcoinConfig = {
-                addressType: ((_a = bitcoinConfig === null || bitcoinConfig === void 0 ? void 0 : bitcoinConfig.addressType) !== null && _a !== void 0 ? _a : 'native_segwit'),
+                addressType: ((_b = (_a = params.bitcoinConfig) === null || _a === void 0 ? void 0 : _a.addressType) !== null && _b !== void 0 ? _b : 'native_segwit'),
                 network: yield this.getBitcoinNetworkEnum(),
             };
-            return _super.createWalletAccount.call(this, {
-                bitcoinConfig: finalBitcoinConfig,
-                password,
-                thresholdSignatureScheme,
-            });
+            // Spread, so a field added to CreateWalletAccountParams later still
+            // reaches the base instead of being silently dropped here.
+            return _super.createWalletAccount.call(this, Object.assign(Object.assign({}, params), { bitcoinConfig: finalBitcoinConfig }));
         });
     }
     /**
-     * Override importPrivateKey to require and validate addressType for Bitcoin
-     * @param privateKey - The private key to import (WIF format for Bitcoin)
-     * @param thresholdSignatureScheme - The threshold signature scheme (default: 'TWO_OF_TWO')
-     * @param publicAddressCheck - Optional public address to verify against
-     * @param addressType - Required address type for Bitcoin ('native_segwit' or 'taproot')
-     * @param legacyWalletId - Optional ID of the legacy wallet being upgraded
+     * Requires and validates `addressType` for Bitcoin, then delegates.
+     * @param params - See ImportPrivateKeyParams. `addressType` is mandatory
+     * here ('native_segwit' or 'taproot') and `privateKey` is WIF.
      * @throws {DynamicError} If addressType is missing or invalid for BTC
      */
-    importPrivateKey(_a) {
+    importPrivateKey(params) {
         const _super = Object.create(null, {
             importPrivateKey: { get: () => super.importPrivateKey }
         });
-        return __awaiter(this, arguments, void 0, function* ({ privateKey, thresholdSignatureScheme = 'TWO_OF_TWO', publicAddressCheck, addressType, legacyWalletId, }) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { addressType } = params;
             if (!addressType) {
                 throw new DynamicError('addressType is required for BTC importPrivateKey', 'addresstype_is_required_for_btc_importprivatekey');
             }
@@ -530,13 +528,10 @@ class DynamicWaasBitcoinConnector extends withDynamicWaas(BitcoinWalletConnector
             if (!validAddressTypes.includes(addressType)) {
                 throw new DynamicError(`Invalid addressType: ${addressType}. Must be one of: ${validAddressTypes.join(', ')}`, 'invalid_addresstype_must_be_one_of');
             }
-            return _super.importPrivateKey.call(this, {
-                addressType,
-                legacyWalletId,
-                privateKey,
-                publicAddressCheck,
-                thresholdSignatureScheme,
-            });
+            // Forwarded whole, never field-by-field: a re-declared parameter list is
+            // how `password` silently stopped reaching the base (see
+            // ImportPrivateKeyParams).
+            return _super.importPrivateKey.call(this, params);
         });
     }
     /**
@@ -554,6 +549,34 @@ class DynamicWaasBitcoinConnector extends withDynamicWaas(BitcoinWalletConnector
         }
         return this.getWaasWalletClient();
     }
+    /**
+     * Rebinds the connector when the user switches primary wallet. One connector
+     * instance is shared by every BTC wallet, so without this the connector stays
+     * on whichever address it was first seeded with and every address-derived
+     * read — displayed address, deposit address, balance — reports that wallet.
+     *
+     * Guarded by isSameWalletAddress so switching to a wallet that is already
+     * active on a non-mainnet encoding does not reset it to the primary address.
+     */
+    afterWalletSelectHook(walletAddress) {
+        if (!this.isSameWalletAddress(walletAddress)) {
+            this.setActiveAccountAddress(this.resolveAddressForActiveNetwork(walletAddress));
+        }
+    }
+    /**
+     * Selecting a wallet hands us its primary (mainnet) address, so binding it
+     * verbatim would silently drop a switchNetwork the user already made. Map it
+     * onto the network that is currently active instead. Falls back to the given
+     * address when the wallet has no row for that network.
+     */
+    resolveAddressForActiveNetwork(walletAddress) {
+        var _a, _b, _c, _d, _e, _f;
+        const network = this.activeNetworkId === BITCOIN_TESTNET_NETWORK_ID
+            ? 'testnet'
+            : 'mainnet';
+        const forNetwork = ((_b = (_a = this.findCredentialForAddress(walletAddress)) === null || _a === void 0 ? void 0 : _a.walletAdditionalAddresses) !== null && _b !== void 0 ? _b : []).filter((addr) => addr.network === network);
+        return ((_f = (_d = (_c = forNetwork.find((addr) => addr.type === 'payment')) === null || _c === void 0 ? void 0 : _c.address) !== null && _d !== void 0 ? _d : (_e = forNetwork.find((addr) => addr.type === 'ordinals')) === null || _e === void 0 ? void 0 : _e.address) !== null && _f !== void 0 ? _f : walletAddress);
+    }
     /**
      * Gets the currently active account address
      * @returns The active account address or undefined if not set