@dynamic-labs-wallet/browser 1.0.89 → 1.0.91

package/index.esm.js

@@ -1,4 +1,4 @@
-import { BitcoinAddressType, MPC_RELAY_PROD_API_URL, getMPCChainConfig, parseNamespacedVersion, WalletApiError, BackupLocation, ENCRYPTED_SHARES_STORAGE_SUFFIX, Logger, handleAxiosError, WalletOperation, WalletReadyState, classifyForwardMpcError, isRecoveredForwardMpcConnectionChurn, FEATURE_FLAGS, ThresholdSignatureScheme, getClientThreshold, MPC_CONFIG, getTSSConfig, serializeMessageForForwardMPC, isEvmCompatibleChain, serializeError, getReshareConfig, getRequiredExternalKeyShareId, verifiedCredentialNameToChainEnum, AuthMode, NoopLogger, DynamicApiClient, BusinessAccountClient, getEnvironmentFromUrl, IFRAME_DOMAIN_MAP } from '@dynamic-labs-wallet/core';
+import { BitcoinAddressType, MPC_RELAY_PROD_API_URL, getMPCChainConfig, parseNamespacedVersion, WalletApiError, BackupLocation, ENCRYPTED_SHARES_STORAGE_SUFFIX, Logger, NETWORK_ERROR_STATUS, handleAxiosError, WalletOperation, WalletReadyState, classifyForwardMpcError, isRecoveredForwardMpcConnectionChurn, FEATURE_FLAGS, ThresholdSignatureScheme, getClientThreshold, MPC_CONFIG, getTSSConfig, serializeMessageForForwardMPC, isEvmCompatibleChain, serializeError, getReshareConfig, getRequiredExternalKeyShareId, verifiedCredentialNameToChainEnum, AuthMode, NoopLogger, DynamicApiClient, BusinessAccountClient, getEnvironmentFromUrl, IFRAME_DOMAIN_MAP } from '@dynamic-labs-wallet/core';
 export * from '@dynamic-labs-wallet/core';
 export { Logger } from '@dynamic-labs-wallet/core';
 import { EdBls12377, BIP340, ExportableEd25519, Ecdsa, MessageHash, EcdsaSignature, EcdsaKeygenResult, ExportableEd25519KeygenResult, BIP340KeygenResult } from '#internal/web';
@@ -653,13 +653,17 @@ function meetsMinVersion(sdkVersion, { minVersionByNamespace, fallbackMinVersion
                 // canRefresh only proves a local callback exists, not that the host answers it.
                 if (!this.supportsReverseChannel()) {
                     this.logger.warn(`[${operationName}] host SDK version predates the signed-session reverse channel, declining nonce refresh`, _extends({
-                        status
+                        http: {
+                            status_code: status
+                        }
                     }, logContext));
                     return alsoRetry ? alsoRetry(status) : false;
                 }
                 onRefreshed(await this.resolve());
                 this.logger.info(`[${operationName}] refreshed signed session, retrying`, _extends({
-                    status
+                    http: {
+                        status_code: status
+                    }
                 }, logContext));
                 return true;
             }
@@ -675,7 +679,9 @@ function meetsMinVersion(sdkVersion, { minVersionByNamespace, fallbackMinVersion
         this.logger.info(NONCE_FAILURE_EVENT, _extends({}, logContext, {
             operationName,
             attempt,
-            status,
+            http: {
+                status_code: status
+            },
             reason: classifyNonceFailure(body),
             errorCode: body.code,
             errorMessage: body.message,
@@ -2115,17 +2121,21 @@ const initializeCloudKit = async (config, signInButtonId, onSignInRequired, onSi
         // Downgrade them to warn so monitors can filter on status:error and
         // still catch real system-side failures (5xx/network/unknown) without
         // the user-side noise drowning out the signal.
-        const logFn = isUserActionable ? logger.warn : logger.error;
         // When every location failed for the same reason (the dominant case)
         // surface a single string; otherwise emit the array so consumers can
         // see the mix.
         const logErrorReason = uniqueReasons.length === 1 ? uniqueReasons[0] : uniqueReasons;
-        logFn.call(logger, '[DynamicWaasWalletClient] Google Drive backup failed', _extends({}, logContext, {
+        const logPayload = _extends({}, logContext, {
             errorCount: failures.length,
             errorReason: logErrorReason,
             isUserActionable,
             errors: failures.map((f)=>`Failed to backup keyshares to ${f.locationName}: ${f.message}`)
-        }));
+        });
+        if (isUserActionable) {
+            logger.warn('[DynamicWaasWalletClient] Google Drive backup failed', logPayload);
+        } else {
+            logger.error('[DynamicWaasWalletClient] Google Drive backup failed', logPayload);
+        }
         // Both upload destinations (appDataFolder + personal) commonly fail with
         // the same underlying error (e.g., missing OAuth scope). When all failures
         // share one message, surface it once without per-location wrapping;
@@ -2172,7 +2182,12 @@ const classifyWaasErrorKind = (error)=>{
 // only if the deadline passes; per-attempt we just tag the kind.
 const classifyTransientPollError = (error)=>{
     const status = readHttpStatus(error);
-    if (status === 429 || status !== undefined && status >= 500) return 'transient_exhausted';
+    // `NETWORK_ERROR_STATUS` (0) is "no response received" — as transient as a 5xx.
+    // It previously arrived here as 500 because handleAxiosError coerced every
+    // unmapped failure to that, so it must stay classified as transient.
+    if (status === 429 || status === NETWORK_ERROR_STATUS || status !== undefined && status >= 500) {
+        return 'transient_exhausted';
+    }
     return classifyWaasErrorKind(error);
 };
 // Builds a structured log payload tagged with the HTTPS transport, dropping
@@ -2188,18 +2203,35 @@ const buildHttpCeremonyMeta = (fields)=>_extends({
  * so they don't pollute error dashboards with user mistakes.
  */ const isExpectedUserError = (error)=>error instanceof InvalidPasswordError;
 /**
- * Returns true for transient API errors that are already logged at the
- * appropriate level by `handleAxiosError` but may be re-thrown as
- * `WalletApiError` and caught again (e.g. by queue error handlers).
- * Logging these at `warn` prevents double-counting them as real errors.
- */ const isTransientApiError = (error)=>error instanceof WalletApiError && error.status === 429;
+ * Reads the HTTP status off a `WalletApiError`.
+ *
+ * Matches on `name` as well as `instanceof` because core is inlined into more
+ * than one bundle, and a second copy of the class makes `instanceof` fail
+ * against the first — which would silently defeat every downgrade below. An
+ * error without a numeric status is treated as unrecognised (fail safe: stays
+ * at the caller's fallback level).
+ */ const getWalletApiErrorStatus = (error)=>{
+    const isWalletApiError = error instanceof WalletApiError || error instanceof Error && error.name === 'WalletApiError';
+    if (!isWalletApiError) return undefined;
+    const { status } = error;
+    return typeof status === 'number' ? status : undefined;
+};
 /**
- * Returns true for missing/expired end-user auth (401). This is a normal
- * session-lifecycle event (cookie/JWT expired, user must re-authenticate),
- * not an actionable server error — retrying cannot add credentials. Logged
- * at `warn` so it stays queryable without firing error-level monitors. It was
- * the dominant `Error in getWallet` catch-all contributor.
- */ const isExpiredAuthError = (error)=>error instanceof WalletApiError && error.status === 401;
+ * Returns true for client-class API errors (4xx, including 429 and 401)
+ * surfaced as `WalletApiError`. A bad request, missing/invalid auth, forbidden,
+ * or rate-limit is caused by the caller or is transient, so none of them are
+ * actionable as backend errors — the catch-site `logError` logs them at `warn`
+ * to keep them out of error-level dashboards. 401 in particular was the
+ * dominant `Error in getWallet` catch-all contributor.
+ *
+ * 5xx is deliberately NOT downgraded: those are genuine backend failures and
+ * the 500 monitors depend on them staying at `error`. The `handleAxiosError`
+ * HTTP-layer log also records them with fuller context, now that it no longer
+ * collides with Datadog's reserved `status` field.
+ */ const isDowngradableApiError = (error)=>{
+    const status = getWalletApiErrorStatus(error);
+    return status !== undefined && status < 500;
+};
 /**
  * Returns true for p-queue TimeoutError. These are transient and
  * retryable client-side, so logging at `warn` prevents them from
@@ -2219,15 +2251,93 @@ const CLIENT_NETWORK_ERROR_MESSAGES = new Set([
     const msg = error.message.toLowerCase();
     return CLIENT_NETWORK_ERROR_MESSAGES.has(msg) || msg.startsWith('webassembly compilation aborted: network error');
 };
-const resolveLogLevel = (error, fallback)=>{
-    if (isExpectedUserError(error)) {
-        return 'info';
-    }
-    if (isTransientApiError(error) || isExpiredAuthError(error) || isQueueTimeoutError(error) || isClientNetworkError(error)) {
-        return 'warn';
+const classifyOne = (error)=>{
+    if (isExpectedUserError(error)) return 'info';
+    if (isDowngradableApiError(error) || isQueueTimeoutError(error) || isClientNetworkError(error)) return 'warn';
+    return undefined;
+};
+/** Bounded so a self-referencing or cyclic `cause` chain cannot spin. */ const MAX_CAUSE_DEPTH = 5;
+/**
+ * Single source of truth for "how bad is this error". Exported so callers
+ * classify identically instead of hard-coding `logger.error` for every failure.
+ *
+ * Walks the `cause` chain, because the outermost error is frequently a wrapper
+ * that carries no information about severity — a chain client throws
+ * `new Error(ERROR_SIGN_MESSAGE, { cause })`, so classifying only the top link
+ * sees a bare `Error` and falls through to `error`. That is how a Cloudflare WAF
+ * 429 kept being reported as a hard SDK failure even after the direct call sites
+ * were fixed: the wrapper, not the cause, was being classified.
+ *
+ * The first classifiable link wins, so the most specific known failure in the
+ * chain decides.
+ */ const resolveLogLevel = (error, fallback)=>{
+    let current = error;
+    for(let depth = 0; current !== undefined && current !== null && depth < MAX_CAUSE_DEPTH; depth += 1){
+        const level = classifyOne(current);
+        if (level) return level;
+        const next = current instanceof Error ? current.cause : undefined;
+        if (next === current) break;
+        current = next;
     }
     return fallback;
 };
+const MAX_DESCRIBED_LENGTH = 200;
+/**
+ * Builds a human-readable message for a thrown value that is not an `Error` —
+ * most often an API response body, e.g.
+ * `{ existingWalletId, error: 'Multiple wallets per chain not allowed' }`.
+ *
+ * `String(value)` would collapse that to `[object Object]`, losing the only
+ * diagnostic content it had, so prefer a recognisable message field and fall
+ * back to bounded JSON.
+ */ const describeNonError = (value)=>{
+    if (typeof value === 'string') return value.slice(0, MAX_DESCRIBED_LENGTH);
+    if (value !== null && typeof value === 'object') {
+        const record = value;
+        const named = [
+            record['error'],
+            record['message'],
+            record['detail']
+        ].find((candidate)=>typeof candidate === 'string' && candidate.length > 0);
+        if (named) return named.slice(0, MAX_DESCRIBED_LENGTH);
+        try {
+            return JSON.stringify(value).slice(0, MAX_DESCRIBED_LENGTH);
+        } catch (e) {
+        // Circular or non-serialisable — fall through to String().
+        }
+    }
+    return String(value).slice(0, MAX_DESCRIBED_LENGTH);
+};
+/**
+ * Decides how an operation failure reaches the Datadog logger, whose signature
+ * is `(message, context, error)`.
+ *
+ * The rule that matters: a non-`Error` value must never be passed as `context`.
+ * Datadog spreads a context object into top-level log attributes, so a thrown
+ * API response body carrying `status: 500` lands on Datadog's reserved `status`
+ * field and silently rewrites the log's own severity to `info` — the failure
+ * then appears in neither the error nor the warn stream. Non-Errors are nested
+ * under `operationError` instead, and a real `Error` is synthesised so the log
+ * still gets a stack and an `error.kind`.
+ *
+ * Returned as a plain object so this is unit-testable without constructing a
+ * wallet client (which pulls the MPC WASM bundle).
+ */ const buildOperationFailureLog = (error)=>{
+    // Classify the original value: an Error's `cause` chain carries the severity,
+    // and normalising first would discard it.
+    const level = resolveLogLevel(error, 'error');
+    return error instanceof Error ? {
+        level,
+        context: undefined,
+        error
+    } : {
+        level,
+        context: {
+            operationError: error
+        },
+        error: new Error(describeNonError(error))
+    };
+};
 const logError = ({ message, error, context, level = 'error' })=>{
     if (error instanceof AxiosError) {
         handleAxiosError(error, message, context);
@@ -2991,6 +3101,17 @@ class DynamicWalletClient {
         return this.walletMap[normalizeAddress(accountAddress)];
     }
     /**
+   * Sync variant of {@link requireWalletFromMap} (no refetch). Replaces the
+   * `getWalletFromMap(...)!` non-null assertions that surfaced a missing
+   * wallet as an opaque property-access TypeError at some later line.
+   */ getRequiredWalletFromMap(accountAddress) {
+        const walletData = this.getWalletFromMap(accountAddress);
+        if (!walletData) {
+            throw new Error(`Wallet not found for address: ${accountAddress}`);
+        }
+        return walletData;
+    }
+    /**
    * Get wallet properties from the map, refetching once if not found.
    * Uses getWallet (with NO_OPERATION) when signedSessionId is available for a
    * more robust fetch, otherwise falls back to getWallets().
@@ -4883,7 +5004,7 @@ class DynamicWalletClient {
             signedSessionId
         });
         const walletId = wallet.walletId;
-        const currentScheme = this.getWalletFromMap(accountAddress).thresholdSignatureScheme;
+        const currentScheme = this.getRequiredWalletFromMap(accountAddress).thresholdSignatureScheme;
         const bitcoinConfig = this.getBitcoinConfigForChain(chainName, accountAddress);
         // Same-parties reshare — only the caller's share participates.
         const [existingClientShare] = await this.ensureClientShare(accountAddress);
@@ -5798,7 +5919,7 @@ class DynamicWalletClient {
             useShareSetReshare,
             initialSignerRules
         });
-        const backupInfo = this.getWalletFromMap(accountAddress).clientKeySharesBackupInfo;
+        const backupInfo = this.getRequiredWalletFromMap(accountAddress).clientKeySharesBackupInfo;
         const delegatedKeyShares = backupInfo.backups[BackupLocation.DELEGATED] || [];
         return delegatedKeyShares;
     }
@@ -6261,7 +6382,7 @@ class DynamicWalletClient {
         if (shares.length > 1) {
             this.logger.warn('[DynamicWaasWalletClient] Multiple client key shares found in storage', {
                 accountAddress,
-                source,
+                shareSource: source,
                 count: shares.length
             });
         }
@@ -6312,7 +6433,7 @@ class DynamicWalletClient {
    */ logSharePersistence({ accountAddress, clientKeyShares, source }) {
         this.logger.info('[DynamicWaasWalletClient] Persisting client key shares', {
             accountAddress,
-            source,
+            shareSource: source,
             inputCount: clientKeyShares.length
         });
     }
@@ -6819,8 +6940,8 @@ class DynamicWalletClient {
         } catch (error) {
             var _error_cause_context;
             const errorReason = classifyPasswordBackupError(error);
-            const logFn = isUserActionablePasswordBackupErrorReason(errorReason) ? this.logger.warn : this.logger.error;
-            logFn.call(this.logger, '[backupSharesWithDistribution] failed', _extends({}, logContext, {
+            const isUserActionable = isUserActionablePasswordBackupErrorReason(errorReason);
+            const logPayload = _extends({}, logContext, {
                 chainName: walletData == null ? void 0 : walletData.chainName,
                 errorReason,
                 errorName: error instanceof Error ? error.name : undefined,
@@ -6830,7 +6951,12 @@ class DynamicWalletClient {
                 // failures show the underlying KeyShareDecryptionError / kdfVersion.
                 errorCauseName: error instanceof Error && error.cause instanceof Error ? error.cause.name : undefined,
                 kdfVersion: error instanceof Error && error.cause instanceof KeyShareDecryptionError ? (_error_cause_context = error.cause.context) == null ? void 0 : _error_cause_context.kdfVersion : undefined
-            }));
+            });
+            if (isUserActionable) {
+                this.logger.warn('[backupSharesWithDistribution] failed', logPayload);
+            } else {
+                this.logger.error('[backupSharesWithDistribution] failed', logPayload);
+            }
             logError({
                 message: 'Error in backupSharesWithDistribution',
                 error: error,
@@ -7081,9 +7207,9 @@ class DynamicWalletClient {
     // they don't count against the dashboard's System-side Success Rate metric.
     logPasswordOperationFailure(passwordOperation, error, context) {
         const errorReason = classifyPasswordBackupError(error);
-        const logFn = isUserActionablePasswordBackupErrorReason(errorReason) ? this.logger.warn : this.logger.error;
+        const isUserActionable = isUserActionablePasswordBackupErrorReason(errorReason);
         const errorContext = error instanceof KeyShareDecryptionError ? error.context : undefined;
-        logFn.call(this.logger, `[${passwordOperation}] failed`, _extends({}, context, {
+        const logPayload = _extends({}, context, {
             passwordOperation,
             errorReason,
             environmentId: this.environmentId,
@@ -7093,7 +7219,12 @@ class DynamicWalletClient {
             errorStack: error instanceof Error ? error.stack : undefined
         }, errorContext ? {
             errorContext
-        } : {}));
+        } : {});
+        if (isUserActionable) {
+            this.logger.warn(`[${passwordOperation}] failed`, logPayload);
+        } else {
+            this.logger.error(`[${passwordOperation}] failed`, logPayload);
+        }
     }
     async updatePassword({ accountAddress, existingPassword, newPassword, signedSessionId, sessionPublicKey, passwordUpdateBatchId }) {
         const dynamicRequestId = v4();
@@ -7408,7 +7539,14 @@ class DynamicWalletClient {
    */ recoverStrategy({ clientKeyShareBackupInfo, thresholdSignatureScheme, walletOperation, shareCount = undefined }) {
         var _clientKeyShareBackupInfo_backups_BackupLocation_DYNAMIC;
         const { backups } = clientKeyShareBackupInfo;
-        const { clientThreshold } = MPC_CONFIG[thresholdSignatureScheme];
+        // Wallet metadata can carry a missing/unknown scheme (e.g. legacy or
+        // partially-created wallets); indexing MPC_CONFIG with it used to throw a
+        // bare destructuring TypeError that hid the actual problem.
+        const mpcConfig = MPC_CONFIG[thresholdSignatureScheme];
+        if (!mpcConfig) {
+            throw new Error(`Unsupported or missing thresholdSignatureScheme: ${String(thresholdSignatureScheme)}`);
+        }
+        const { clientThreshold } = mpcConfig;
         let requiredShareCount = walletOperation === WalletOperation.REFRESH || walletOperation === WalletOperation.REACH_ALL_PARTIES || walletOperation === WalletOperation.RESHARE ? clientThreshold : 1;
         // Override requiredShareCount if shareCount is provided
         if (shareCount !== undefined) {
@@ -7477,7 +7615,7 @@ class DynamicWalletClient {
     }
     async internalRecoverEncryptedBackupByWallet({ accountAddress, password, walletOperation, signedSessionId, shareCount = undefined, storeRecoveredShares = true, mfaToken }) {
         try {
-            const wallet = this.getWalletFromMap(accountAddress);
+            const wallet = this.getRequiredWalletFromMap(accountAddress);
             this.logger.debug(`recoverEncryptedBackupByWallet wallet: ${walletOperation}`, wallet);
             const { shares } = this.recoverStrategy({
                 clientKeyShareBackupInfo: wallet.clientKeySharesBackupInfo,
@@ -7586,7 +7724,7 @@ class DynamicWalletClient {
                 password,
                 signedSessionId
             });
-            const walletData = this.getWalletFromMap(accountAddress);
+            const walletData = this.getRequiredWalletFromMap(accountAddress);
             const currentThresholdSignatureScheme = walletData.thresholdSignatureScheme;
             if (currentThresholdSignatureScheme === ThresholdSignatureScheme.TWO_OF_TWO) {
                 // Reshare to 2-of-3, which will automatically handle the backup distribution
@@ -7645,7 +7783,7 @@ class DynamicWalletClient {
    * every provider already holding a backup plus the requested one,
    * restricted to providers the reshare can deliver to.
    */ async reshareNonDelegatedTwoOfThree({ accountAddress, backupLocation, password, signedSessionId, sessionPublicKey, googleDriveAccessToken, googleDriveTokenSource }) {
-        const walletData = this.getWalletFromMap(accountAddress);
+        const walletData = this.getRequiredWalletFromMap(accountAddress);
         const cloudProviders = new Set([
             ...getActiveCloudProviders(walletData.clientKeySharesBackupInfo).filter((provider)=>provider === BackupLocation.GOOGLE_DRIVE || provider === BackupLocation.ICLOUD),
             backupLocation
@@ -7784,14 +7922,18 @@ class DynamicWalletClient {
             // misuse of an externally-supplied token (e.g. repeated failures) is
             // traceable, not just completed backups. Enum only; the original error
             // still propagates after this. Failures log at warn to surface them.
-            const logFn = success ? this.logger.info : this.logger.warn;
-            logFn.call(this.logger, '[DynamicWaasWalletClient] Google Drive backup token source', {
+            const logPayload = {
                 accountAddress,
                 environmentId: this.environmentId,
                 userId: this.userId,
                 tokenSource,
                 success
-            });
+            };
+            if (success) {
+                this.logger.info('[DynamicWaasWalletClient] Google Drive backup token source', logPayload);
+            } else {
+                this.logger.warn('[DynamicWaasWalletClient] Google Drive backup token source', logPayload);
+            }
         }
     }
     /**
@@ -7810,8 +7952,7 @@ class DynamicWalletClient {
         ]);
         const { blocking } = preflightResult;
         if (blocking) {
-            const logFn = blocking.isUserActionable ? this.logger.warn : this.logger.error;
-            logFn.call(this.logger, '[DynamicWaasWalletClient] Google Drive backup failed (preflight)', {
+            const logPayload = {
                 accountAddress,
                 environmentId: this.environmentId,
                 userId: this.userId,
@@ -7822,8 +7963,13 @@ class DynamicWalletClient {
                     `Preflight (${blocking.source}): ${blocking.message}`
                 ],
                 preflight: true,
-                source: blocking.source
-            });
+                preflightSource: blocking.source
+            };
+            if (blocking.isUserActionable) {
+                this.logger.warn('[DynamicWaasWalletClient] Google Drive backup failed (preflight)', logPayload);
+            } else {
+                this.logger.error('[DynamicWaasWalletClient] Google Drive backup failed (preflight)', logPayload);
+            }
             throw createGoogleDriveError({
                 message: blocking.message,
                 isRetryable: false,
@@ -7939,7 +8085,7 @@ class DynamicWalletClient {
             if (encryptedKeyShares.length === 0) {
                 throw new Error('No key shares found');
             }
-            const thresholdSignatureScheme = this.getWalletFromMap(accountAddress).thresholdSignatureScheme;
+            const thresholdSignatureScheme = this.getRequiredWalletFromMap(accountAddress).thresholdSignatureScheme;
             const backupData = createBackupData({
                 encryptedKeyShares,
                 accountAddress,
@@ -7966,7 +8112,7 @@ class DynamicWalletClient {
                 signedSessionId
             });
             const accessToken = googleDriveAccessToken != null ? googleDriveAccessToken : await this.fetchGoogleDriveAccessToken(accountAddress);
-            const thresholdSignatureScheme = this.getWalletFromMap(accountAddress).thresholdSignatureScheme;
+            const thresholdSignatureScheme = this.getRequiredWalletFromMap(accountAddress).thresholdSignatureScheme;
             const backupFileName = getClientKeyShareExportFileName({
                 thresholdSignatureScheme,
                 accountAddress,
@@ -8186,7 +8332,7 @@ class DynamicWalletClient {
         });
         const { requiredShareCount } = this.recoverStrategy({
             clientKeyShareBackupInfo: clientKeySharesBackupInfo,
-            thresholdSignatureScheme: this.getWalletFromMap(accountAddress).thresholdSignatureScheme,
+            thresholdSignatureScheme: this.getRequiredWalletFromMap(accountAddress).thresholdSignatureScheme,
             walletOperation
         });
         if (clientKeyShares.length >= requiredShareCount) {
@@ -8291,7 +8437,7 @@ class DynamicWalletClient {
                 accountAddress,
                 walletOperation
             })) {
-                const walletData = this.getWalletFromMap(accountAddress);
+                const walletData = this.getRequiredWalletFromMap(accountAddress);
                 const isPasswordEncrypted = isWalletPasswordEncrypted(walletData);
                 // Locked wallet (password-encrypted, no password supplied): its shares need the
                 // user's password, not the environmentId. Return it ENCRYPTED for any operation
@@ -8596,7 +8742,7 @@ class DynamicWalletClient {
                 additionalWalletsUnlocked,
                 additionalWalletsFailed
             });
-            return this.getWalletFromMap(accountAddress);
+            return this.getRequiredWalletFromMap(accountAddress);
         } catch (error) {
             this.logPasswordOperationFailure('unlockWallet', error, {
                 accountAddress
@@ -9043,6 +9189,16 @@ class DynamicWalletClient {
             time: (traceContext == null ? void 0 : traceContext.startTime) ? now - traceContext.startTime : 0
         }, traceContext);
     }
+    /**
+   * Log a chain-client operation failure at a severity that matches the
+   * underlying cause. Logs through `this.logger` (not `logError`) so the
+   * structured `error.causes` chain survives — that chain is what makes these
+   * failures diagnosable — while still honouring the shared level policy, so a
+   * transient 429/401/network blip does not read as a hard SDK error.
+   */ logOperationFailure(message, error) {
+        const { level, context, error: normalizedError } = buildOperationFailureLog(error);
+        this.logger[level](message, context, normalizedError);
+    }
     constructor({ environmentId, baseApiUrl, baseMPCRelayApiUrl, storageKey, debug, featureFlags, argon2idRebackupTargets, authMode = AuthMode.HEADER, authToken = undefined, backupServiceAuthToken, // Represents the version of the client SDK used by developer
     sdkVersion, forwardMPCClient, baseClientKeysharesRelayApiUrl, iCloudConfig, logger }, internalOptions){
         this.userId = undefined;
@@ -9146,4 +9302,4 @@ DynamicWalletClient.roomsPersistDirty = false;
 // rooms back into the new user's storage (TOCTOU on the create→merge gap).
 DynamicWalletClient.roomsGeneration = 0;
 
-export { BACKUP_FILENAME, CLIENT_KEYSHARE_EXPORT_FILENAME_PREFIX, DynamicWalletClient, ENVIRONMENT_SETTINGS_STORAGE_KEY, ERROR_ACCOUNT_ADDRESS_REQUIRED, ERROR_CREATE_WALLET_ACCOUNT, ERROR_EXPORT_PRIVATE_KEY, ERROR_IMPORT_PRIVATE_KEY, ERROR_INCORRECT_PASSWORD, ERROR_KEYGEN_FAILED, ERROR_MULTIPLE_WALLETS_PER_CHAIN, ERROR_NO_KEY_SHARES_BACKED_UP, ERROR_PASSWORD_MISMATCH, ERROR_PASSWORD_REQUIRED, ERROR_PASSWORD_REQUIRED_FOR_ENCRYPTED_WALLET, ERROR_PUBLIC_KEY_MISMATCH, ERROR_REFRESH_NOT_SUPPORTED_FOR_TWO_OF_THREE, ERROR_SIGN_MESSAGE, ERROR_SIGN_TYPED_DATA, ERROR_VERIFY_MESSAGE_SIGNATURE, ERROR_VERIFY_TRANSACTION_SIGNATURE, HEAVY_QUEUE_OPERATIONS, OperationSource, RECOVER_QUEUE_OPERATIONS, ROOM_CACHE_COUNT, ROOM_EXPIRATION_TIME, SIGNED_SESSION_ID_MIN_VERSION, SIGNED_SESSION_ID_MIN_VERSION_BY_NAMESPACE, SIGNED_SESSION_REVERSE_CHANNEL_MIN_VERSION, SIGNED_SESSION_REVERSE_CHANNEL_MIN_VERSION_BY_NAMESPACE, SIGN_QUEUE_OPERATIONS, STORAGE_KEY, StaleLocalSharesError, WalletBusyError, WalletNotReadyError, cancelICloudAuth, createAddCloudProviderToExistingDelegationDistribution, createBackupData, createCloudProviderDistribution, createDelegationOnlyDistribution, createDelegationWithCloudProviderDistribution, createDynamicOnlyDistribution, deleteICloudBackup, downloadStringAsFile, extractPubkey, formatEvmMessage, formatMessage, formatTronMessage, getActiveCloudProviders, getBitcoinAddressTypeFromAddress, getBitcoinAddressTypeFromDerivationPath, getClientKeyShareBackupInfo, getClientKeyShareExportFileName, getDelegatedShareSet, getGoogleOAuthAccountId, getHttpStatus, getICloudBackup, getMPCSignatureScheme, getMPCSigner, hasCloudProviderBackup, hasDelegatedBackup, hasEncryptedSharesCached, initializeCloudKit, isBrowser, isHeavyQueueOperation, isHexString, isICloudAuthenticated, isNonRetryableCeremonyError, isPublicKeyMismatchError, isRecoverQueueOperation, isRoomIdAlreadyUsedError, isSignQueueOperation, isStaleClientSharesError, listICloudBackups, markCeremonyErrorNonRetryable, readEnvironmentSettings, retryPromise, shouldReshareToSameBackups, timeoutPromise };
+export { BACKUP_FILENAME, CLIENT_KEYSHARE_EXPORT_FILENAME_PREFIX, DynamicWalletClient, ENVIRONMENT_SETTINGS_STORAGE_KEY, ERROR_ACCOUNT_ADDRESS_REQUIRED, ERROR_CREATE_WALLET_ACCOUNT, ERROR_EXPORT_PRIVATE_KEY, ERROR_IMPORT_PRIVATE_KEY, ERROR_INCORRECT_PASSWORD, ERROR_KEYGEN_FAILED, ERROR_MULTIPLE_WALLETS_PER_CHAIN, ERROR_NO_KEY_SHARES_BACKED_UP, ERROR_PASSWORD_MISMATCH, ERROR_PASSWORD_REQUIRED, ERROR_PASSWORD_REQUIRED_FOR_ENCRYPTED_WALLET, ERROR_PUBLIC_KEY_MISMATCH, ERROR_REFRESH_NOT_SUPPORTED_FOR_TWO_OF_THREE, ERROR_SIGN_MESSAGE, ERROR_SIGN_TYPED_DATA, ERROR_VERIFY_MESSAGE_SIGNATURE, ERROR_VERIFY_TRANSACTION_SIGNATURE, HEAVY_QUEUE_OPERATIONS, OperationSource, RECOVER_QUEUE_OPERATIONS, ROOM_CACHE_COUNT, ROOM_EXPIRATION_TIME, SIGNED_SESSION_ID_MIN_VERSION, SIGNED_SESSION_ID_MIN_VERSION_BY_NAMESPACE, SIGNED_SESSION_REVERSE_CHANNEL_MIN_VERSION, SIGNED_SESSION_REVERSE_CHANNEL_MIN_VERSION_BY_NAMESPACE, SIGN_QUEUE_OPERATIONS, STORAGE_KEY, StaleLocalSharesError, WalletBusyError, WalletNotReadyError, cancelICloudAuth, createAddCloudProviderToExistingDelegationDistribution, createBackupData, createCloudProviderDistribution, createDelegationOnlyDistribution, createDelegationWithCloudProviderDistribution, createDynamicOnlyDistribution, deleteICloudBackup, downloadStringAsFile, extractPubkey, formatEvmMessage, formatMessage, formatTronMessage, getActiveCloudProviders, getBitcoinAddressTypeFromAddress, getBitcoinAddressTypeFromDerivationPath, getClientKeyShareBackupInfo, getClientKeyShareExportFileName, getDelegatedShareSet, getGoogleOAuthAccountId, getHttpStatus, getICloudBackup, getMPCSignatureScheme, getMPCSigner, hasCloudProviderBackup, hasDelegatedBackup, hasEncryptedSharesCached, initializeCloudKit, isBrowser, isHeavyQueueOperation, isHexString, isICloudAuthenticated, isNonRetryableCeremonyError, isPublicKeyMismatchError, isRecoverQueueOperation, isRoomIdAlreadyUsedError, isSignQueueOperation, isStaleClientSharesError, listICloudBackups, markCeremonyErrorNonRetryable, readEnvironmentSettings, resolveLogLevel, retryPromise, shouldReshareToSameBackups, timeoutPromise };