@dynamic-labs-sdk/client 1.20.0 → 1.21.0

package/dist/waasCore.native.esm.js

@@ -1,264 +1,58 @@
-import { Ct as version, N as getChainFromVerifiedCredentialChain, P as CHAINS_INFO_MAP, St as name, bt as BaseError, ct as isCookieEnabled, d as DYNAMIC_WAAS_METADATA, dt as getElevatedAccessToken, i as InvalidParamError, l as DEFAULT_WAAS_BASE_API_URL, mt as CLIENT_SDK_NAME, u as DEFAULT_WAAS_BASE_MPC_RELAY_API_URL, xt as getCore } from "./updateAuthFromVerifyResponse-DGrmo9MJ.native.esm.js";
-import "./isDynamicWaasEnabled-C4oPJ0fw.native.esm.js";
-import { i as NativeModuleNotLinkedError } from "./isMfaRequiredForAction-D6rt_Tzn.native.esm.js";
-import { a as WaasOnboardingIncompleteError, i as preconnectWaasIframe, t as isUserOnboardingComplete } from "./isUserOnboardingComplete-DnExOJu7.native.esm.js";
-import { n as consumeMfaTokenIfRequiredForAction, t as getSignedSessionId } from "./getSignedSessionId-DlmNVy-g.native.esm.js";
-import { n as getWaasWalletProviderFromWalletAccount, t as migrateFromFireblocks } from "./migrateFromFireblocks-CqL5l58Q.native.esm.js";
+import { Ct as name, P as getChainFromVerifiedCredentialChain, St as getCore, a as InvalidParamError, f as DYNAMIC_WAAS_METADATA, ft as getElevatedAccessToken, wt as version } from "./NativeModuleNotLinkedError-Ds_t3AZQ.native.esm.js";
+import "./isDynamicWaasEnabled-C8Fb1xHn.native.esm.js";
+import { a as WaasOnboardingIncompleteError, i as preconnectWaasIframe, o as WaasLoadFailedError, t as isUserOnboardingComplete } from "./isUserOnboardingComplete-CvQShE05.native.esm.js";
+import "./isMfaRequiredForAction-D4TSMQ4m.native.esm.js";
+import { n as consumeMfaTokenIfRequiredForAction, t as getSignedSessionId } from "./getSignedSessionId-xZGFa4nS.native.esm.js";
+import { i as createWaasClient, n as getWaasWalletProviderFromWalletAccount, r as getWaasChainNameFromChain, t as migrateFromFireblocks } from "./migrateFromFireblocks-BMtelH1a.native.esm.js";
 import { assertPackageVersion } from "@dynamic-labs-sdk/assert-package-version";
 import { MFAAction, TokenScope, WalletProviderEnum } from "@dynamic-labs/sdk-api-core";
-import { ACCESSIBLE, getGenericPassword, resetGenericPassword, setGenericPassword } from "react-native-keychain";
-import { NativeEventEmitter, TurboModuleRegistry } from "react-native";
-import { DynamicWalletClient, ThresholdSignatureScheme, WalletOperation } from "@dynamic-labs-wallet/browser-wallet-client";
+import { ThresholdSignatureScheme, WalletOperation } from "@dynamic-labs-wallet/browser-wallet-client";
 
-//#region src/errors/CorruptedKeyShareError.ts
+//#region src/utils/createTranslateRejection/createTranslateRejection.ts
 /**
-* Thrown when a persisted client key share cannot be parsed back into its
-* structured form (e.g. a partially-written or corrupted keychain entry).
+* Builds a reusable decorator, bound once to a `match`/`mapTo` pair, that wraps
+* any async function so a matching rejection is rethrown as `mapTo(error)`
+* while every other rejection — and every resolved value — passes through
+* untouched. Unmatched errors are rethrown by reference, so the decorator can
+* never swallow or reshape an error it was not asked to translate.
 *
-* Surfaced as a typed error rather than swallowed so callers can distinguish
-* "no key share stored" (empty result) from "key share exists but is
-* unreadable" — the latter must never be silently treated as the former,
-* which could trigger an unintended re-keygen that overwrites recoverable
-* material.
-*/
-var CorruptedKeyShareError = class extends BaseError {
-	constructor({ cause = null } = {}) {
-		super({
-			cause,
-			code: "corrupted_key_share_error",
-			details: "The stored client key share could not be parsed. The secure storage entry may be partially written or corrupted.",
-			docsUrl: null,
-			name: "CorruptedKeyShareError",
-			shortMessage: "Stored client key share is corrupted and cannot be read."
-		});
-	}
-};
-
-//#endregion
-//#region src/turboModules/NativeDynamicWebView.ts
-var NativeDynamicWebView_default = TurboModuleRegistry.get("DynamicClientWebView");
-
-//#endregion
-//#region src/errors/WebViewLoadFailedError.ts
-/**
-* Thrown when `DynamicWebView.open()` (via the WaaS transport provider)
-* fails to establish a usable load. Inspect `reason` to distinguish the
-* failure mode; `statusCode` and `underlyingError` provide structured
-* metadata for the cases that have it.
-*/
-var WebViewLoadFailedError = class extends BaseError {
-	reason;
-	statusCode;
-	underlyingError;
-	constructor({ reason, shortMessage, cause = null, statusCode, underlyingError }) {
-		super({
-			cause,
-			code: "webview_load_failed_error",
-			details: underlyingError,
-			docsUrl: null,
-			name: "WebViewLoadFailedError",
-			shortMessage
-		});
-		this.reason = reason;
-		this.statusCode = statusCode;
-		this.underlyingError = underlyingError;
-	}
-};
-
-//#endregion
-//#region src/modules/waas/createWaasClient/translateNativeOpenError.ts
-const REASON_BY_NATIVE_CODE = {
-	webview_cancelled: "cancelled",
-	webview_content_process_terminated: "content_process_terminated",
-	webview_http_error: "http_error",
-	webview_instance_busy: "instance_busy",
-	webview_invalid_url: "invalid_url",
-	webview_navigation_failed: "navigation_failed",
-	webview_no_host_view: "no_host_view",
-	webview_unsupported: "unsupported"
-};
-/**
-* Translates a native `DynamicWebView.open()` rejection into a typed
-* `WebViewLoadFailedError`. Maps the native RCT reject code to the JS-level
-* `WebViewLoadFailureReason` discriminator (falling back to
-* `navigation_failed` for unrecognized codes) and carries through the
-* structured `statusCode` / `underlyingError` metadata.
-*
-* The `reason` it produces is the contract `createWaasSDKContainer` branches
-* on — notably `emitError` swallows `cancelled` because that code is only ever
-* produced by our own `close()` teardown (verified on both the iOS and Android
-* native sides). Keep `REASON_BY_NATIVE_CODE` in sync with the native reject
-* codes so that branching stays correct.
+* Binding `match`/`mapTo` up front keeps the generic wrapping machinery here
+* instead of at the call site: consumers get a plain `(fn) => wrappedFn`
+* decorator they can apply to many functions of differing signatures, each of
+* which keeps its own argument and return types.
 *
 * @notInstrumented
 */
-const translateNativeOpenError = (err) => {
-	const rejection = err ?? {};
-	const isNativeRejectionCode = (code) => code != void 0 && code in REASON_BY_NATIVE_CODE;
-	const reason = isNativeRejectionCode(rejection.code) ? REASON_BY_NATIVE_CODE[rejection.code] : "navigation_failed";
-	return new WebViewLoadFailedError({
-		cause: err instanceof Error ? err : null,
-		reason,
-		shortMessage: rejection.message ?? `DynamicWebView open failed (${reason}).`,
-		statusCode: rejection.userInfo?.DynamicWebViewStatusCode,
-		underlyingError: rejection.userInfo?.DynamicWebViewUnderlying
-	});
+const createTranslateRejection = ({ match, mapTo }) => (fn) => async (...args) => {
+	try {
+		return await fn(...args);
+	} catch (error) {
+		if (match(error)) throw mapTo(error);
+		throw error;
+	}
 };
 
 //#endregion
-//#region src/modules/waas/createWaasClient/createNativeWaasSDKContainer.native.ts
-const NATIVE_MODULE_NAME = "DynamicClientWebView";
-const MESSAGE_EVENT_NAME = "dynamicBridgeMessage";
-const generateInstanceId = () => `${Date.now().toString(36)}-${crypto.randomUUID()}`;
+//#region src/modules/waas/createWaasProvider/isWaasLoadExhaustionError.ts
 /**
-* Creates a React Native `WaasSDKContainer` backed by a hidden, headless native
-* WebView (WKWebView on iOS, `android.webkit.WebView` on Android) hosted by the
-* `DynamicClientWebView` TurboModule. Each invocation returns an isolated
-* container with its own instance ID, native WebView, and message routing.
-*
-* Used for MPC operations (signing, key-share management) where there is
-* nothing for the user to see. The VISIBLE private-key export display is no
-* longer a native overlay — it is rendered by the `ExportPrivateKey` component
-* (`@dynamic-labs-sdk/react-native-embedded-wallet-export`) on top of
-* `react-native-webview`, so it scrolls and positions like any RN view.
-*
-* @notInstrumented
+* Exact message prefix of the rejection thrown by
+* `@dynamic-labs-wallet/browser-wallet-client` when the secure container load
+* exhausts all retry attempts. The upstream library throws a plain `Error`
+* with no code, so message matching is the only detection mechanism available;
+* the dependency is pinned to an exact version and the spec pins this string
+* so drift is caught at upgrade time.
 */
-const createNativeWaasSDKContainer = () => {
-	if (!NativeDynamicWebView_default) throw new NativeModuleNotLinkedError({ moduleName: NATIVE_MODULE_NAME });
-	const nativeModule = NativeDynamicWebView_default;
-	const instanceId = generateInstanceId();
-	const emitter = new NativeEventEmitter(nativeModule);
-	const messageHandlers = [];
-	const errorHandlers = [];
-	let subscription = null;
-	let destroyed = false;
-	const emitError = (err) => {
-		if (destroyed) return;
-		const translated = translateNativeOpenError(err);
-		if (translated.reason === "cancelled") return;
-		for (const handler of errorHandlers) handler(translated);
-	};
-	return {
-		destroy() {
-			if (destroyed) return;
-			destroyed = true;
-			subscription?.remove();
-			subscription = null;
-			messageHandlers.length = 0;
-			errorHandlers.length = 0;
-			nativeModule.close(instanceId);
-		},
-		isAlive: () => !destroyed,
-		onError(handler) {
-			errorHandlers.push(handler);
-			return () => {
-				const index = errorHandlers.indexOf(handler);
-				if (index !== -1) errorHandlers.splice(index, 1);
-			};
-		},
-		onMessage(handler) {
-			messageHandlers.push(handler);
-			subscription ??= emitter.addListener(MESSAGE_EVENT_NAME, (payload) => {
-				if (payload.instanceId !== instanceId) return;
-				for (const fn of messageHandlers) fn(payload.data);
-			});
-			return () => {
-				const index = messageHandlers.indexOf(handler);
-				if (index !== -1) messageHandlers.splice(index, 1);
-				if (messageHandlers.length === 0) {
-					subscription?.remove();
-					subscription = null;
-				}
-			};
-		},
-		sendMessage(data) {
-			nativeModule.sendMessage(instanceId, data);
-		},
-		async setUrl(url) {
-			nativeModule.open(instanceId, url).catch(emitError);
-		}
-	};
-};
-
-//#endregion
-//#region src/modules/waas/createWaasClient/createWaasSDKContainer.native.ts
+const UPSTREAM_LOAD_EXHAUSTION_MESSAGE_PREFIX = "Failed to load iframe after all retry attempts";
 /**
-* Creates a React Native `WaasSDKContainer` backed by a hidden, headless native
-* WebView (WKWebView on iOS, `android.webkit.WebView` on Android) hosted by the
-* `DynamicClientWebView` TurboModule. Used for MPC operations (signing, key-share
-* management) where there is nothing for the user to see.
-*
-* For the private-key export display — where the hosted page must render the
-* key for the user — use the `ExportPrivateKey` component from
-* `@dynamic-labs-sdk/react-native-embedded-wallet-export`, which renders the
-* key inside a `react-native-webview` instead of a native overlay.
+* True when `error` is the upstream "load retry attempts exhausted" rejection
+* from the embedded (WaaS) wallet's secure container load. Narrows to `Error`
+* so the matched value can be forwarded as a typed error cause without a cast,
+* and guards `instanceof Error` before reading `.message` so a non-`Error`
+* rejection never throws during detection.
 *
 * @notInstrumented
 */
-const createWaasSDKContainer = () => createNativeWaasSDKContainer();
-
-//#endregion
-//#region src/modules/waas/createWaasClient/createWaasClient.native.ts
-/**
-* Keychain security options for the client key share. The share is wallet
-* key material that cannot be re-derived locally, so the options are pinned
-* explicitly rather than inherited from `react-native-keychain` defaults
-* (which vary across versions and platforms).
-*
-* `WHEN_UNLOCKED_THIS_DEVICE_ONLY` keeps the share readable only while the
-* device is unlocked, excludes it from iCloud Keychain sync, and prevents it
-* migrating to a new device on encrypted-backup restore. It deliberately does
-* NOT set `accessControl` (e.g. biometry) — reads must not surface a Face ID /
-* passcode prompt, since the share is read on routine wallet operations.
-*/
-const KEY_SHARE_KEYCHAIN_OPTIONS = { accessible: ACCESSIBLE.WHEN_UNLOCKED_THIS_DEVICE_ONLY };
-/** @notInstrumented */
-const createWaasClient = ({ chainName }, client) => {
-	const core = getCore(client);
-	const additionalTrustedOrigins = core.waas?.additionalTrustedOrigins;
-	const getKeyShareService = (accountAddress) => `${core.environmentId}:${accountAddress}`;
-	return new DynamicWalletClient({
-		authMode: isCookieEnabled(client) ? "cookie" : "header",
-		authToken: client.token || "",
-		baseApiUrl: (core.apiBaseUrl || DEFAULT_WAAS_BASE_API_URL).replace("/api/v0", ""),
-		baseMPCRelayApiUrl: client.projectSettings?.sdk.waas?.relayUrl || DEFAULT_WAAS_BASE_MPC_RELAY_API_URL,
-		chainName,
-		environmentId: core.environmentId,
-		hostOrigin: core.metadata?.universalLink,
-		sdkVersion: `${CLIENT_SDK_NAME}/${core.version}`,
-		...additionalTrustedOrigins == void 0 ? {} : { additionalTrustedOrigins }
-	}, {
-		createWaasSDKContainer,
-		secureStorage: {
-			getClientKeyShare: async (accountAddress) => {
-				const result = await getGenericPassword({ service: getKeyShareService(accountAddress) });
-				if (!result) return [];
-				try {
-					return JSON.parse(result.password);
-				} catch (cause) {
-					throw new CorruptedKeyShareError({ cause: cause instanceof Error ? cause : null });
-				}
-			},
-			removeClientKeyShare: async (accountAddress) => {
-				await resetGenericPassword({ service: getKeyShareService(accountAddress) });
-			},
-			setClientKeyShare: async (accountAddress, shares) => {
-				await setGenericPassword(accountAddress, JSON.stringify(shares), {
-					...KEY_SHARE_KEYCHAIN_OPTIONS,
-					service: getKeyShareService(accountAddress)
-				});
-			}
-		}
-	});
-};
-
-//#endregion
-//#region src/modules/waas/getWaasChainNameFromChain/getWaasChainNameFromChain.ts
-/** @notInstrumented */
-const getWaasChainNameFromChain = (chain) => {
-	return CHAINS_INFO_MAP[chain].waasChainNameOverride || chain;
-};
+const isWaasLoadExhaustionError = (error) => error instanceof Error && error.message.startsWith(UPSTREAM_LOAD_EXHAUSTION_MESSAGE_PREFIX);
 
 //#endregion
 //#region src/modules/waas/createWaasProvider/createWaasProvider.ts
@@ -268,25 +62,49 @@ const createWaasProvider = ({ sdkClient, chain }) => {
 	const logger = getCore(sdkClient).logger;
 	let _waasClient;
 	let _waasClientSessionId;
+	const resetClientIfCurrent = (client) => {
+		if (_waasClient === client) {
+			_waasClient = void 0;
+			_waasClientSessionId = void 0;
+		}
+	};
 	const getWaasClient = async () => {
 		const currentSessionId = getCore(sdkClient).state.get().user?.sessionId;
 		if (_waasClient && currentSessionId !== _waasClientSessionId) _waasClient = void 0;
 		if (!_waasClient) {
 			if (!isUserOnboardingComplete(sdkClient)) throw new WaasOnboardingIncompleteError();
-			_waasClient = createWaasClient({ chainName: getWaasChainNameFromChain(chain) }, sdkClient);
+			const builtClient = createWaasClient({ chainName: getWaasChainNameFromChain(chain) }, sdkClient);
+			_waasClient = builtClient;
 			_waasClientSessionId = currentSessionId;
-			await _waasClient.initialize();
+			try {
+				await builtClient.initialize();
+			} catch (error) {
+				resetClientIfCurrent(builtClient);
+				throw error;
+			}
 		}
 		return _waasClient;
 	};
+	const discardClientOnLoadFailure = async ({ waasClient, operation }) => {
+		try {
+			return await operation();
+		} catch (error) {
+			if (isWaasLoadExhaustionError(error)) resetClientIfCurrent(waasClient);
+			throw error;
+		}
+	};
 	const backupKeySharesToGoogleDrive = async ({ googleDriveAccessToken, password, walletAccount }) => {
 		const { signature: signedSessionId } = await getSignedSessionId(sdkClient);
-		return (await getWaasClient()).backupKeySharesToGoogleDrive({
-			accountAddress: walletAccount.address,
-			authToken: sdkClient.token ?? void 0,
-			googleDriveAccessToken,
-			password,
-			signedSessionId
+		const waasClient = await getWaasClient();
+		return discardClientOnLoadFailure({
+			operation: () => waasClient.backupKeySharesToGoogleDrive({
+				accountAddress: walletAccount.address,
+				authToken: sdkClient.token ?? void 0,
+				googleDriveAccessToken,
+				password,
+				signedSessionId
+			}),
+			waasClient
 		});
 	};
 	const createWalletAccount = async (args = {}) => {
@@ -295,30 +113,43 @@ const createWaasProvider = ({ sdkClient, chain }) => {
 			thresholdSignatureScheme: args.thresholdSignatureScheme
 		});
 		const { signature: signedSessionId } = await getSignedSessionId(sdkClient);
-		return await (await getWaasClient()).createWalletAccount({
-			authToken: sdkClient.token ?? void 0,
-			bitcoinConfig: args.bitcoinConfig,
-			password: args.password,
-			signedSessionId,
-			thresholdSignatureScheme: args.thresholdSignatureScheme ?? ThresholdSignatureScheme.TWO_OF_TWO
+		const waasClient = await getWaasClient();
+		return await discardClientOnLoadFailure({
+			operation: () => waasClient.createWalletAccount({
+				authToken: sdkClient.token ?? void 0,
+				bitcoinConfig: args.bitcoinConfig,
+				businessAccountId: args.businessAccountId,
+				password: args.password,
+				signedSessionId,
+				thresholdSignatureScheme: args.thresholdSignatureScheme ?? ThresholdSignatureScheme.TWO_OF_TWO
+			}),
+			waasClient
 		});
 	};
 	const delegateKeyShares = async ({ password, walletAccount }) => {
 		const { signature: signedSessionId } = await getSignedSessionId(sdkClient);
-		return (await getWaasClient()).delegateKeyShares({
-			accountAddress: walletAccount.address,
-			authToken: sdkClient.token ?? void 0,
-			password,
-			signedSessionId
+		const waasClient = await getWaasClient();
+		return discardClientOnLoadFailure({
+			operation: () => waasClient.delegateKeyShares({
+				accountAddress: walletAccount.address,
+				authToken: sdkClient.token ?? void 0,
+				password,
+				signedSessionId
+			}),
+			waasClient
 		});
 	};
 	const exportClientKeyshares = async ({ password, walletAccount }) => {
 		const { signature: signedSessionId } = await getSignedSessionId(sdkClient);
-		await (await getWaasClient()).exportClientKeyshares({
-			accountAddress: walletAccount.address,
-			authToken: sdkClient.token ?? void 0,
-			password,
-			signedSessionId
+		const waasClient = await getWaasClient();
+		await discardClientOnLoadFailure({
+			operation: () => waasClient.exportClientKeyshares({
+				accountAddress: walletAccount.address,
+				authToken: sdkClient.token ?? void 0,
+				password,
+				signedSessionId
+			}),
+			waasClient
 		});
 	};
 	const exportPrivateKey = async ({ container, displayContainer, walletAccount, password }) => {
@@ -326,78 +157,120 @@ const createWaasProvider = ({ sdkClient, chain }) => {
 		const waasClient = await getWaasClient();
 		const mfaToken = await consumeMfaTokenIfRequiredForAction({ mfaAction: MFAAction.WalletWaasExport }, sdkClient);
 		const elevatedAccessToken = getElevatedAccessToken({ scope: TokenScope.Walletexport }, sdkClient);
-		await waasClient.exportPrivateKey({
-			accountAddress: walletAccount.address,
-			authToken: sdkClient.token ?? void 0,
-			container,
-			displayContainer,
-			elevatedAccessToken,
-			mfaToken,
-			password,
-			signedSessionId
+		await discardClientOnLoadFailure({
+			operation: () => waasClient.exportPrivateKey({
+				accountAddress: walletAccount.address,
+				authToken: sdkClient.token ?? void 0,
+				container,
+				displayContainer,
+				elevatedAccessToken,
+				mfaToken,
+				password,
+				signedSessionId
+			}),
+			waasClient
 		});
 	};
 	const restoreUserShareForWalletAccount = async ({ walletAccount }) => {
 		const { signature: signedSessionId } = await getSignedSessionId(sdkClient);
-		await (await getWaasClient()).getWallet({
-			accountAddress: walletAccount.address,
-			authToken: sdkClient.token ?? void 0,
-			signedSessionId,
-			walletOperation: WalletOperation.SIGN_MESSAGE
+		const waasClient = await getWaasClient();
+		await discardClientOnLoadFailure({
+			operation: () => waasClient.getWallet({
+				accountAddress: walletAccount.address,
+				authToken: sdkClient.token ?? void 0,
+				signedSessionId,
+				walletOperation: WalletOperation.SIGN_MESSAGE
+			}),
+			waasClient
 		});
 	};
 	const importPrivateKey = async ({ privateKey, thresholdSignatureScheme = ThresholdSignatureScheme.TWO_OF_TWO }) => {
 		const { signature: signedSessionId } = await getSignedSessionId(sdkClient);
-		await (await getWaasClient()).importPrivateKey({
-			authToken: sdkClient.token ?? void 0,
-			privateKey,
-			signedSessionId,
-			thresholdSignatureScheme
+		const walletClient = await getWaasClient();
+		await discardClientOnLoadFailure({
+			operation: () => walletClient.importPrivateKey({
+				authToken: sdkClient.token ?? void 0,
+				privateKey,
+				signedSessionId,
+				thresholdSignatureScheme
+			}),
+			waasClient: walletClient
 		});
 	};
 	const migrateFromFireblocks$1 = async ({ coinTypes, deviceId, expectedAddresses, jwt, password, storage }) => {
 		const { signature: signedSessionId } = await getSignedSessionId(sdkClient);
-		return (await getWaasClient()).migrateFromFireblocks({
-			authToken: sdkClient.token ?? void 0,
-			fireblocks: {
-				deviceId,
-				expectedAddresses,
-				jwt,
-				ncwStorage: storage,
-				walletPassword: password,
-				...coinTypes ? { coinTypes } : {}
-			},
-			signedSessionId
+		const walletClient = await getWaasClient();
+		return discardClientOnLoadFailure({
+			operation: () => walletClient.migrateFromFireblocks({
+				authToken: sdkClient.token ?? void 0,
+				fireblocks: {
+					deviceId,
+					expectedAddresses,
+					jwt,
+					ncwStorage: storage,
+					walletPassword: password,
+					...coinTypes ? { coinTypes } : {}
+				},
+				signedSessionId
+			}),
+			waasClient: walletClient
 		});
 	};
 	const refreshWalletAccountShares = async ({ password, walletAccount }) => {
 		const { signature: signedSessionId } = await getSignedSessionId(sdkClient);
 		const walletClient = await getWaasClient();
 		const mfaToken = await consumeMfaTokenIfRequiredForAction({ mfaAction: MFAAction.WalletWaasRefresh }, sdkClient);
-		return walletClient.refreshWalletAccountShares({
-			accountAddress: walletAccount.address,
-			authToken: sdkClient.token ?? void 0,
-			mfaToken,
-			password,
-			signedSessionId
+		return discardClientOnLoadFailure({
+			operation: () => walletClient.refreshWalletAccountShares({
+				accountAddress: walletAccount.address,
+				authToken: sdkClient.token ?? void 0,
+				mfaToken,
+				password,
+				signedSessionId
+			}),
+			waasClient: walletClient
+		});
+	};
+	const reshareToNewSignerShareSet = async ({ businessAccountId, password, signerType, targetSignerIdentity, walletAccount }) => {
+		const { signature: signedSessionId } = await getSignedSessionId(sdkClient);
+		const waasClient = await getWaasClient();
+		return discardClientOnLoadFailure({
+			operation: () => waasClient.reshareToNewSignerShareSet({
+				accountAddress: walletAccount.address,
+				authToken: sdkClient.token ?? void 0,
+				businessAccountId,
+				password,
+				signedSessionId,
+				signerType,
+				targetSignerIdentity
+			}),
+			waasClient
 		});
 	};
 	const revokeDelegation = async ({ password, walletAccount }) => {
 		const { signature: signedSessionId } = await getSignedSessionId(sdkClient);
-		return (await getWaasClient()).revokeDelegation({
-			accountAddress: walletAccount.address,
-			authToken: sdkClient.token ?? void 0,
-			password,
-			signedSessionId
+		const waasClient = await getWaasClient();
+		return discardClientOnLoadFailure({
+			operation: () => waasClient.revokeDelegation({
+				accountAddress: walletAccount.address,
+				authToken: sdkClient.token ?? void 0,
+				password,
+				signedSessionId
+			}),
+			waasClient
 		});
 	};
 	const setWaasWalletAccountPassword = async ({ password, walletAccount }) => {
 		const { signature: signedSessionId } = await getSignedSessionId(sdkClient);
-		return (await getWaasClient()).setPassword({
-			accountAddress: walletAccount.address,
-			authToken: sdkClient.token ?? void 0,
-			newPassword: password,
-			signedSessionId
+		const waasClient = await getWaasClient();
+		return discardClientOnLoadFailure({
+			operation: () => waasClient.setPassword({
+				accountAddress: walletAccount.address,
+				authToken: sdkClient.token ?? void 0,
+				newPassword: password,
+				signedSessionId
+			}),
+			waasClient
 		});
 	};
 	const signRawMessage = async ({ message, password, walletAccount }) => {
@@ -405,14 +278,18 @@ const createWaasProvider = ({ sdkClient, chain }) => {
 		const { signature: signedSessionId } = await getSignedSessionId(sdkClient);
 		const mfaToken = await consumeMfaTokenIfRequiredForAction({ mfaAction: MFAAction.WalletWaasSign }, sdkClient);
 		const elevatedAccessToken = getElevatedAccessToken({ scope: TokenScope.Walletsign }, sdkClient);
-		return { signature: await (await getWaasClient()).signRawMessage({
-			accountAddress: walletAccount.address,
-			authToken: sdkClient.token ?? void 0,
-			elevatedAccessToken,
-			message,
-			mfaToken,
-			password,
-			signedSessionId
+		const walletClient = await getWaasClient();
+		return { signature: await discardClientOnLoadFailure({
+			operation: () => walletClient.signRawMessage({
+				accountAddress: walletAccount.address,
+				authToken: sdkClient.token ?? void 0,
+				elevatedAccessToken,
+				message,
+				mfaToken,
+				password,
+				signedSessionId
+			}),
+			waasClient: walletClient
 		}) };
 	};
 	const destroy = async (args) => {
@@ -423,78 +300,103 @@ const createWaasProvider = ({ sdkClient, chain }) => {
 	};
 	const updatePassword = async ({ walletAccount, currentPassword, newPassword }) => {
 		const { signature: signedSessionId } = await getSignedSessionId(sdkClient);
-		return (await getWaasClient()).updatePassword({
-			accountAddress: walletAccount.address,
-			authToken: sdkClient.token ?? void 0,
-			existingPassword: currentPassword,
-			newPassword,
-			signedSessionId
+		const waasClient = await getWaasClient();
+		return discardClientOnLoadFailure({
+			operation: () => waasClient.updatePassword({
+				accountAddress: walletAccount.address,
+				authToken: sdkClient.token ?? void 0,
+				existingPassword: currentPassword,
+				newPassword,
+				signedSessionId
+			}),
+			waasClient
 		});
 	};
 	const signMessage = async ({ message, walletAccount }) => {
 		const { signature: signedSessionId } = await getSignedSessionId(sdkClient);
 		const mfaToken = await consumeMfaTokenIfRequiredForAction({ mfaAction: MFAAction.WalletWaasSign }, sdkClient);
 		const elevatedAccessToken = getElevatedAccessToken({ scope: TokenScope.Walletsign }, sdkClient);
-		return { signature: await (await getWaasClient()).signMessage({
-			accountAddress: walletAccount.address,
-			authToken: sdkClient.token ?? void 0,
-			elevatedAccessToken,
-			message,
-			mfaToken,
-			signedSessionId
+		const waasClient = await getWaasClient();
+		return { signature: await discardClientOnLoadFailure({
+			operation: () => waasClient.signMessage({
+				accountAddress: walletAccount.address,
+				authToken: sdkClient.token ?? void 0,
+				elevatedAccessToken,
+				message,
+				mfaToken,
+				signedSessionId
+			}),
+			waasClient
 		}) };
 	};
 	const signSerializedTransaction = async ({ chainId, serializedTransaction, walletAccount }) => {
 		const { signature: signedSessionId } = await getSignedSessionId(sdkClient);
 		const mfaToken = await consumeMfaTokenIfRequiredForAction({ mfaAction: MFAAction.WalletWaasSign }, sdkClient);
 		const elevatedAccessToken = getElevatedAccessToken({ scope: TokenScope.Walletsign }, sdkClient);
-		return { signature: await (await getWaasClient()).signTransaction({
-			authToken: sdkClient.token ?? void 0,
-			chainId,
-			elevatedAccessToken,
-			mfaToken,
-			senderAddress: walletAccount.address,
-			signedSessionId,
-			transaction: serializedTransaction
+		const waasClient = await getWaasClient();
+		return { signature: await discardClientOnLoadFailure({
+			operation: () => waasClient.signTransaction({
+				authToken: sdkClient.token ?? void 0,
+				chainId,
+				elevatedAccessToken,
+				mfaToken,
+				senderAddress: walletAccount.address,
+				signedSessionId,
+				transaction: serializedTransaction
+			}),
+			waasClient
 		}) };
 	};
 	const getWalletRecoveryState = async ({ walletAccount }) => {
 		const { signature: signedSessionId } = await getSignedSessionId(sdkClient);
-		return (await getWaasClient()).getWalletRecoveryState({
-			accountAddress: walletAccount.address,
-			authToken: sdkClient.token ?? void 0,
-			signedSessionId
+		const waasClient = await getWaasClient();
+		return discardClientOnLoadFailure({
+			operation: () => waasClient.getWalletRecoveryState({
+				accountAddress: walletAccount.address,
+				authToken: sdkClient.token ?? void 0,
+				signedSessionId
+			}),
+			waasClient
 		});
 	};
 	const unlockWallet = async ({ password, walletAccount }) => {
 		const { signature: signedSessionId } = await getSignedSessionId(sdkClient);
-		return (await getWaasClient()).unlockWallet({
-			accountAddress: walletAccount.address,
-			authToken: sdkClient.token ?? void 0,
-			password,
-			signedSessionId
+		const waasClient = await getWaasClient();
+		return discardClientOnLoadFailure({
+			operation: () => waasClient.unlockWallet({
+				accountAddress: walletAccount.address,
+				authToken: sdkClient.token ?? void 0,
+				password,
+				signedSessionId
+			}),
+			waasClient
 		});
 	};
+	const translateLoadFailure = createTranslateRejection({
+		mapTo: (error) => new WaasLoadFailedError({ cause: error }),
+		match: isWaasLoadExhaustionError
+	});
 	return {
-		backupKeySharesToGoogleDrive,
-		createWalletAccount,
-		delegateKeyShares,
-		destroy,
-		exportClientKeyshares,
-		exportPrivateKey,
-		getWaasClient,
-		getWalletRecoveryState,
-		importPrivateKey,
-		migrateFromFireblocks: migrateFromFireblocks$1,
-		refreshWalletAccountShares,
-		restoreUserShareForWalletAccount,
-		revokeDelegation,
-		setWaasWalletAccountPassword,
-		signMessage,
-		signRawMessage,
-		signSerializedTransaction,
-		unlockWallet,
-		updatePassword
+		backupKeySharesToGoogleDrive: translateLoadFailure(backupKeySharesToGoogleDrive),
+		createWalletAccount: translateLoadFailure(createWalletAccount),
+		delegateKeyShares: translateLoadFailure(delegateKeyShares),
+		destroy: translateLoadFailure(destroy),
+		exportClientKeyshares: translateLoadFailure(exportClientKeyshares),
+		exportPrivateKey: translateLoadFailure(exportPrivateKey),
+		getWaasClient: translateLoadFailure(getWaasClient),
+		getWalletRecoveryState: translateLoadFailure(getWalletRecoveryState),
+		importPrivateKey: translateLoadFailure(importPrivateKey),
+		migrateFromFireblocks: translateLoadFailure(migrateFromFireblocks$1),
+		refreshWalletAccountShares: translateLoadFailure(refreshWalletAccountShares),
+		reshareToNewSignerShareSet: translateLoadFailure(reshareToNewSignerShareSet),
+		restoreUserShareForWalletAccount: translateLoadFailure(restoreUserShareForWalletAccount),
+		revokeDelegation: translateLoadFailure(revokeDelegation),
+		setWaasWalletAccountPassword: translateLoadFailure(setWaasWalletAccountPassword),
+		signMessage: translateLoadFailure(signMessage),
+		signRawMessage: translateLoadFailure(signRawMessage),
+		signSerializedTransaction: translateLoadFailure(signSerializedTransaction),
+		unlockWallet: translateLoadFailure(unlockWallet),
+		updatePassword: translateLoadFailure(updatePassword)
 	};
 };