@dynamic-labs/waas 4.92.4 → 5.0.0-rc.1

package/CHANGELOG.md

@@ -1,4 +1,17 @@
 
+## [5.0.0-rc.1](https://github.com/dynamic-labs/dynamic-auth/compare/v5.0.0-rc.0...v5.0.0-rc.1) (2026-07-17)
+
+
+### ⚠ BREAKING CHANGES
+
+* move legacy embedded wallet to waas upgrade flow to new legacy-embedded-wallet-migration package (#11841)
+* drop default injection of legacy embedded wallet connectors (#11833)
+* remove legacy embedded wallet support (#11979)
+* throw when legacy embedded wallet is detected without migration provider (#11855)
+* remove deprecated eclipse package (#11831)
+* remove deprecated functions and props (#11832)
+
+
 ### [4.92.4](https://github.com/dynamic-labs/dynamic-auth/compare/v4.92.3...v4.92.4) (2026-07-16)
 
 
@@ -57,6 +70,7 @@
 * improve social OAuth error messages ([#11837](https://github.com/dynamic-labs/dynamic-auth/issues/11837)) ([8e57c06](https://github.com/dynamic-labs/dynamic-auth/commit/8e57c067c5a89111a32a12fb82e190cf6c46ad67))
 * **react-native-extension:** reject path traversal in downloadFile fileName ([#11816](https://github.com/dynamic-labs/dynamic-auth/issues/11816)) ([9367a56](https://github.com/dynamic-labs/dynamic-auth/commit/9367a56b6daa853d7f7e7f5534261bc68825b239))
 * **sdk-react-core:** display exactly the bytes signed in personal_sign preview ([#11818](https://github.com/dynamic-labs/dynamic-auth/issues/11818)) ([30b9382](https://github.com/dynamic-labs/dynamic-auth/commit/30b93829122f00060cb484aef09a03294c03f651))
+  
 
 ### [4.91.6](https://github.com/dynamic-labs/dynamic-auth/compare/v4.91.5...v4.91.6) (2026-07-03)
 

package/package.cjs

@@ -3,6 +3,6 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var version = "4.92.4";
+var version = "5.0.0-rc.1";
 
 exports.version = version;

package/package.js

@@ -1,4 +1,4 @@
 'use client'
-var version = "4.92.4";
+var version = "5.0.0-rc.1";
 
 export { version };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dynamic-labs/waas",
-  "version": "4.92.4",
+  "version": "5.0.0-rc.1",
   "type": "module",
   "author": "Dynamic Labs, Inc.",
   "license": "MIT",
@@ -17,17 +17,17 @@
   },
   "dependencies": {
     "@dynamic-labs-sdk/client": "1.18.0",
-    "@dynamic-labs/assert-package-version": "4.92.4",
-    "@dynamic-labs/sdk-api-core": "0.0.1073",
+    "@dynamic-labs/assert-package-version": "5.0.0-rc.1",
+    "@dynamic-labs/sdk-api-core": "0.0.1082",
     "@dynamic-labs-wallet/browser-wallet-client": "1.0.70",
     "@dynamic-labs-wallet/forward-mpc-client": "1.0.1",
-    "@dynamic-labs/ethereum-core": "4.92.4",
-    "@dynamic-labs/logger": "4.92.4",
-    "@dynamic-labs/solana-core": "4.92.4",
-    "@dynamic-labs/sui-core": "4.92.4",
-    "@dynamic-labs/utils": "4.92.4",
-    "@dynamic-labs/wallet-book": "4.92.4",
-    "@dynamic-labs/wallet-connector-core": "4.92.4"
+    "@dynamic-labs/ethereum-core": "5.0.0-rc.1",
+    "@dynamic-labs/logger": "5.0.0-rc.1",
+    "@dynamic-labs/solana-core": "5.0.0-rc.1",
+    "@dynamic-labs/sui-core": "5.0.0-rc.1",
+    "@dynamic-labs/utils": "5.0.0-rc.1",
+    "@dynamic-labs/wallet-book": "5.0.0-rc.1",
+    "@dynamic-labs/wallet-connector-core": "5.0.0-rc.1"
   },
   "peerDependencies": {}
 }

package/src/DynamicWaasMixin.cjs

@@ -189,12 +189,38 @@ const withDynamicWaas = (BaseClass) => {
             }
             const original = this.getSignedSessionId;
             let revoked = false;
-            this.revokeSignedSession = () => {
+            let revokedReason;
+            let revokedInvocationCount = 0;
+            this.revokeSignedSession = (reason = 'unspecified') => {
                 revoked = true;
+                revokedReason = reason;
+                this.instrument('[DynamicWaasMixin] signed-session callback revoked', {
+                    key: 'signed-session-callback-revoked',
+                    operation: 'revokeSignedSession',
+                    reason,
+                    time: 0,
+                });
             };
             return {
                 getSignedSessionId: () => _tslib.__awaiter(this, void 0, void 0, function* () {
                     if (revoked) {
+                        revokedInvocationCount += 1;
+                        // The stale client fetched a nonce after being replaced — this is
+                        // the race the revoke guards against. We log it (rather than only
+                        // throwing) so Datadog can distinguish this benign guard from a
+                        // real backend nonce_already_used failure: a revoked hit means the
+                        // new client, not this one, owns the fresh nonce. `firstInvocation`
+                        // flags the leading edge so false-positive logouts (a revoked
+                        // callback firing once right after a successful backup) are easy to
+                        // separate from a stale client that keeps retrying.
+                        this.instrument('[DynamicWaasMixin] revoked signed-session callback invoked by stale client', {
+                            firstInvocation: revokedInvocationCount === 1,
+                            key: 'signed-session-callback-revoked-invoked',
+                            operation: 'getSignedSessionId',
+                            reason: revokedReason,
+                            revokedInvocationCount,
+                            time: 0,
+                        });
                         throw new Error('[DynamicWaasMixin] WaaS client replaced — signed session callback revoked');
                     }
                     return original();
@@ -254,7 +280,7 @@ const withDynamicWaas = (BaseClass) => {
                     // The old DynamicWalletClient is not destroyed — it has no cancellation
                     // API — but revoking its reverse-channel callback prevents it from
                     // fetching fresh nonces and competing with the new client's recovery.
-                    (_a = this.revokeSignedSession) === null || _a === void 0 ? void 0 : _a.call(this);
+                    (_a = this.revokeSignedSession) === null || _a === void 0 ? void 0 : _a.call(this, 'force-rebuild');
                     this.revokeSignedSession = undefined;
                     this.dynamicWaasClient = undefined;
                 }
@@ -420,25 +446,80 @@ const withDynamicWaas = (BaseClass) => {
                 });
             });
         }
-        backupKeySharesToGoogleDrive(_a) {
-            return _tslib.__awaiter(this, arguments, void 0, function* ({ accountAddress, password, googleDriveAccessToken, }) {
-                var _b, _c, _d;
+        /**
+         * Runs the shared cloud-backup lifecycle: resolve the password, build the
+         * iframe client, fetch the signed session id and session public key, then
+         * hand off to the provider-specific `walletClient.backupKeySharesTo*` call.
+         *
+         * Every step emits an instrumentation event tagged with a single
+         * `backupLifecycleId` so a backup can be followed end-to-end in Datadog.
+         * The same id is passed to the wallet client as `traceContext.traceId`, so
+         * the client's own sub-steps (client key-share request, backup-locations
+         * endpoint, etc.) log under the same trace — making it clear whether a
+         * backup finished before an unexpected signed-session fetch/logout.
+         *
+         * `public` for the same TS4094 mixin constraint as the other helpers here;
+         * it is internal-only.
+         */
+        runBackupLifecycle(_a) {
+            return _tslib.__awaiter(this, arguments, void 0, function* ({ provider, accountAddress, password, performBackup, }) {
+                var _b, _c;
                 if (!accountAddress) {
                     throw new utils.DynamicError('Account address is required', 'account_address_is_required');
                 }
+                const backupLifecycleId = this.generateTraceId();
+                const startTime = Date.now();
+                const traceContext = { startTime, traceId: backupLifecycleId };
+                const lifecycleContext = { accountAddress, backupLifecycleId, provider };
+                this.instrument('[backupKeyShares] lifecycle - start', Object.assign({ key: 'backup-lifecycle-start', operation: 'backupKeyShares', time: 0 }, lifecycleContext));
                 const resolvedPassword = password !== null && password !== void 0 ? password : (yield this.getPassword({ accountAddress }));
+                this.instrument('[backupKeyShares] password resolved', Object.assign({ hasPassword: resolvedPassword !== undefined, key: 'backup-password-resolved', operation: 'backupKeyShares', time: 0 }, lifecycleContext));
                 const walletClient = yield this.getWaasWalletClient();
+                this.instrument('[backupKeyShares] wallet client ready', Object.assign({ key: 'backup-wallet-client-ready', operation: 'backupKeyShares', time: 0 }, lifecycleContext));
                 const signedSessionId = yield ((_b = this.getSignedSessionId) === null || _b === void 0 ? void 0 : _b.call(this));
+                this.instrument('[backupKeyShares] signed session id resolved', Object.assign({ hasSignedSessionId: Boolean(signedSessionId), key: 'backup-signed-session-resolved', operation: 'backupKeyShares', time: 0 }, lifecycleContext));
                 if (!signedSessionId) {
                     throw new utils.DynamicError('Signed session ID is required', 'signed_session_id_is_required');
                 }
-                return walletClient.backupKeySharesToGoogleDrive({
+                const sessionPublicKey = yield ((_c = this.getSessionPublicKey) === null || _c === void 0 ? void 0 : _c.call(this));
+                this.instrument('[backupKeyShares] session public key resolved', Object.assign({ hasSessionPublicKey: Boolean(sessionPublicKey), key: 'backup-session-public-key-resolved', operation: 'backupKeyShares', time: 0 }, lifecycleContext));
+                // instrumentAsync emits `backup-request-start/completed/failed` so the
+                // provider call itself (and the client sub-steps under the shared
+                // traceId) is timed and its failure surfaced.
+                yield this.instrumentAsync({
+                    context: lifecycleContext,
+                    fn: () => _tslib.__awaiter(this, void 0, void 0, function* () {
+                        return performBackup({
+                            resolvedPassword,
+                            sessionPublicKey,
+                            signedSessionId,
+                            traceContext,
+                            walletClient,
+                        });
+                    }),
+                    operation: 'backupKeyShares',
+                    resource: 'backup-request',
+                });
+            });
+        }
+        backupKeySharesToGoogleDrive(_a) {
+            return _tslib.__awaiter(this, arguments, void 0, function* ({ accountAddress, password, googleDriveAccessToken, }) {
+                return this.runBackupLifecycle({
                     accountAddress,
-                    authToken: (_c = this.getAuthToken) === null || _c === void 0 ? void 0 : _c.call(this),
-                    googleDriveAccessToken,
-                    password: resolvedPassword,
-                    sessionPublicKey: yield ((_d = this.getSessionPublicKey) === null || _d === void 0 ? void 0 : _d.call(this)),
-                    signedSessionId,
+                    password,
+                    performBackup: (_b) => _tslib.__awaiter(this, [_b], void 0, function* ({ walletClient, resolvedPassword, signedSessionId, sessionPublicKey, traceContext, }) {
+                        var _c;
+                        return walletClient.backupKeySharesToGoogleDrive({
+                            accountAddress,
+                            authToken: (_c = this.getAuthToken) === null || _c === void 0 ? void 0 : _c.call(this),
+                            googleDriveAccessToken,
+                            password: resolvedPassword,
+                            sessionPublicKey,
+                            signedSessionId,
+                            traceContext,
+                        });
+                    }),
+                    provider: 'google-drive',
                 });
             });
         }
@@ -464,22 +545,21 @@ const withDynamicWaas = (BaseClass) => {
         }
         backupKeySharesToICloud(_a) {
             return _tslib.__awaiter(this, arguments, void 0, function* ({ accountAddress, password, }) {
-                var _b, _c, _d;
-                if (!accountAddress) {
-                    throw new utils.DynamicError('Account address is required', 'account_address_is_required');
-                }
-                const resolvedPassword = password !== null && password !== void 0 ? password : (yield this.getPassword({ accountAddress }));
-                const walletClient = yield this.getWaasWalletClient();
-                const signedSessionId = yield ((_b = this.getSignedSessionId) === null || _b === void 0 ? void 0 : _b.call(this));
-                if (!signedSessionId) {
-                    throw new utils.DynamicError('Signed session ID is required', 'signed_session_id_is_required');
-                }
-                return walletClient.backupKeySharesToICloud({
+                return this.runBackupLifecycle({
                     accountAddress,
-                    authToken: (_c = this.getAuthToken) === null || _c === void 0 ? void 0 : _c.call(this),
-                    password: resolvedPassword,
-                    sessionPublicKey: yield ((_d = this.getSessionPublicKey) === null || _d === void 0 ? void 0 : _d.call(this)),
-                    signedSessionId,
+                    password,
+                    performBackup: (_b) => _tslib.__awaiter(this, [_b], void 0, function* ({ walletClient, resolvedPassword, signedSessionId, sessionPublicKey, traceContext, }) {
+                        var _c;
+                        return walletClient.backupKeySharesToICloud({
+                            accountAddress,
+                            authToken: (_c = this.getAuthToken) === null || _c === void 0 ? void 0 : _c.call(this),
+                            password: resolvedPassword,
+                            sessionPublicKey,
+                            signedSessionId,
+                            traceContext,
+                        });
+                    }),
+                    provider: 'icloud',
                 });
             });
         }
@@ -774,7 +854,7 @@ const withDynamicWaas = (BaseClass) => {
                         });
                     }
                 }
-                (_a = this.revokeSignedSession) === null || _a === void 0 ? void 0 : _a.call(this);
+                (_a = this.revokeSignedSession) === null || _a === void 0 ? void 0 : _a.call(this, 'end-session');
                 this.revokeSignedSession = undefined;
                 this.dynamicWaasClient = undefined;
             });

package/src/DynamicWaasMixin.d.ts

@@ -30,7 +30,7 @@ export declare const withDynamicWaas: <T extends abstract new (...args: any[]) =
     relayUrl?: string | undefined;
     baseClientKeysharesRelayApiUrl?: string | undefined;
     dynamicWaasClient: DynamicWalletClient | undefined;
-    revokeSignedSession: (() => void) | undefined;
+    revokeSignedSession: ((reason?: string) => void) | undefined;
     chainName: string;
     authMode: 'cookie' | 'header';
     logger: Logger;
@@ -139,6 +139,36 @@ export declare const withDynamicWaas: <T extends abstract new (...args: any[]) =
         accountAddress: string;
         password?: string;
     }): Promise<void>;
+    /**
+     * Runs the shared cloud-backup lifecycle: resolve the password, build the
+     * iframe client, fetch the signed session id and session public key, then
+     * hand off to the provider-specific `walletClient.backupKeySharesTo*` call.
+     *
+     * Every step emits an instrumentation event tagged with a single
+     * `backupLifecycleId` so a backup can be followed end-to-end in Datadog.
+     * The same id is passed to the wallet client as `traceContext.traceId`, so
+     * the client's own sub-steps (client key-share request, backup-locations
+     * endpoint, etc.) log under the same trace — making it clear whether a
+     * backup finished before an unexpected signed-session fetch/logout.
+     *
+     * `public` for the same TS4094 mixin constraint as the other helpers here;
+     * it is internal-only.
+     */
+    runBackupLifecycle({ provider, accountAddress, password, performBackup, }: {
+        provider: string;
+        accountAddress: string;
+        password?: string;
+        performBackup: (prerequisites: {
+            walletClient: DynamicWalletClient;
+            resolvedPassword: string | undefined;
+            signedSessionId: string;
+            sessionPublicKey: string | undefined;
+            traceContext: {
+                traceId: string;
+                startTime: number;
+            };
+        }) => Promise<void>;
+    }): Promise<void>;
     backupKeySharesToGoogleDrive({ accountAddress, password, googleDriveAccessToken, }: {
         accountAddress: string;
         password?: string;

package/src/DynamicWaasMixin.js

@@ -185,12 +185,38 @@ const withDynamicWaas = (BaseClass) => {
             }
             const original = this.getSignedSessionId;
             let revoked = false;
-            this.revokeSignedSession = () => {
+            let revokedReason;
+            let revokedInvocationCount = 0;
+            this.revokeSignedSession = (reason = 'unspecified') => {
                 revoked = true;
+                revokedReason = reason;
+                this.instrument('[DynamicWaasMixin] signed-session callback revoked', {
+                    key: 'signed-session-callback-revoked',
+                    operation: 'revokeSignedSession',
+                    reason,
+                    time: 0,
+                });
             };
             return {
                 getSignedSessionId: () => __awaiter(this, void 0, void 0, function* () {
                     if (revoked) {
+                        revokedInvocationCount += 1;
+                        // The stale client fetched a nonce after being replaced — this is
+                        // the race the revoke guards against. We log it (rather than only
+                        // throwing) so Datadog can distinguish this benign guard from a
+                        // real backend nonce_already_used failure: a revoked hit means the
+                        // new client, not this one, owns the fresh nonce. `firstInvocation`
+                        // flags the leading edge so false-positive logouts (a revoked
+                        // callback firing once right after a successful backup) are easy to
+                        // separate from a stale client that keeps retrying.
+                        this.instrument('[DynamicWaasMixin] revoked signed-session callback invoked by stale client', {
+                            firstInvocation: revokedInvocationCount === 1,
+                            key: 'signed-session-callback-revoked-invoked',
+                            operation: 'getSignedSessionId',
+                            reason: revokedReason,
+                            revokedInvocationCount,
+                            time: 0,
+                        });
                         throw new Error('[DynamicWaasMixin] WaaS client replaced — signed session callback revoked');
                     }
                     return original();
@@ -250,7 +276,7 @@ const withDynamicWaas = (BaseClass) => {
                     // The old DynamicWalletClient is not destroyed — it has no cancellation
                     // API — but revoking its reverse-channel callback prevents it from
                     // fetching fresh nonces and competing with the new client's recovery.
-                    (_a = this.revokeSignedSession) === null || _a === void 0 ? void 0 : _a.call(this);
+                    (_a = this.revokeSignedSession) === null || _a === void 0 ? void 0 : _a.call(this, 'force-rebuild');
                     this.revokeSignedSession = undefined;
                     this.dynamicWaasClient = undefined;
                 }
@@ -416,25 +442,80 @@ const withDynamicWaas = (BaseClass) => {
                 });
             });
         }
-        backupKeySharesToGoogleDrive(_a) {
-            return __awaiter(this, arguments, void 0, function* ({ accountAddress, password, googleDriveAccessToken, }) {
-                var _b, _c, _d;
+        /**
+         * Runs the shared cloud-backup lifecycle: resolve the password, build the
+         * iframe client, fetch the signed session id and session public key, then
+         * hand off to the provider-specific `walletClient.backupKeySharesTo*` call.
+         *
+         * Every step emits an instrumentation event tagged with a single
+         * `backupLifecycleId` so a backup can be followed end-to-end in Datadog.
+         * The same id is passed to the wallet client as `traceContext.traceId`, so
+         * the client's own sub-steps (client key-share request, backup-locations
+         * endpoint, etc.) log under the same trace — making it clear whether a
+         * backup finished before an unexpected signed-session fetch/logout.
+         *
+         * `public` for the same TS4094 mixin constraint as the other helpers here;
+         * it is internal-only.
+         */
+        runBackupLifecycle(_a) {
+            return __awaiter(this, arguments, void 0, function* ({ provider, accountAddress, password, performBackup, }) {
+                var _b, _c;
                 if (!accountAddress) {
                     throw new DynamicError('Account address is required', 'account_address_is_required');
                 }
+                const backupLifecycleId = this.generateTraceId();
+                const startTime = Date.now();
+                const traceContext = { startTime, traceId: backupLifecycleId };
+                const lifecycleContext = { accountAddress, backupLifecycleId, provider };
+                this.instrument('[backupKeyShares] lifecycle - start', Object.assign({ key: 'backup-lifecycle-start', operation: 'backupKeyShares', time: 0 }, lifecycleContext));
                 const resolvedPassword = password !== null && password !== void 0 ? password : (yield this.getPassword({ accountAddress }));
+                this.instrument('[backupKeyShares] password resolved', Object.assign({ hasPassword: resolvedPassword !== undefined, key: 'backup-password-resolved', operation: 'backupKeyShares', time: 0 }, lifecycleContext));
                 const walletClient = yield this.getWaasWalletClient();
+                this.instrument('[backupKeyShares] wallet client ready', Object.assign({ key: 'backup-wallet-client-ready', operation: 'backupKeyShares', time: 0 }, lifecycleContext));
                 const signedSessionId = yield ((_b = this.getSignedSessionId) === null || _b === void 0 ? void 0 : _b.call(this));
+                this.instrument('[backupKeyShares] signed session id resolved', Object.assign({ hasSignedSessionId: Boolean(signedSessionId), key: 'backup-signed-session-resolved', operation: 'backupKeyShares', time: 0 }, lifecycleContext));
                 if (!signedSessionId) {
                     throw new DynamicError('Signed session ID is required', 'signed_session_id_is_required');
                 }
-                return walletClient.backupKeySharesToGoogleDrive({
+                const sessionPublicKey = yield ((_c = this.getSessionPublicKey) === null || _c === void 0 ? void 0 : _c.call(this));
+                this.instrument('[backupKeyShares] session public key resolved', Object.assign({ hasSessionPublicKey: Boolean(sessionPublicKey), key: 'backup-session-public-key-resolved', operation: 'backupKeyShares', time: 0 }, lifecycleContext));
+                // instrumentAsync emits `backup-request-start/completed/failed` so the
+                // provider call itself (and the client sub-steps under the shared
+                // traceId) is timed and its failure surfaced.
+                yield this.instrumentAsync({
+                    context: lifecycleContext,
+                    fn: () => __awaiter(this, void 0, void 0, function* () {
+                        return performBackup({
+                            resolvedPassword,
+                            sessionPublicKey,
+                            signedSessionId,
+                            traceContext,
+                            walletClient,
+                        });
+                    }),
+                    operation: 'backupKeyShares',
+                    resource: 'backup-request',
+                });
+            });
+        }
+        backupKeySharesToGoogleDrive(_a) {
+            return __awaiter(this, arguments, void 0, function* ({ accountAddress, password, googleDriveAccessToken, }) {
+                return this.runBackupLifecycle({
                     accountAddress,
-                    authToken: (_c = this.getAuthToken) === null || _c === void 0 ? void 0 : _c.call(this),
-                    googleDriveAccessToken,
-                    password: resolvedPassword,
-                    sessionPublicKey: yield ((_d = this.getSessionPublicKey) === null || _d === void 0 ? void 0 : _d.call(this)),
-                    signedSessionId,
+                    password,
+                    performBackup: (_b) => __awaiter(this, [_b], void 0, function* ({ walletClient, resolvedPassword, signedSessionId, sessionPublicKey, traceContext, }) {
+                        var _c;
+                        return walletClient.backupKeySharesToGoogleDrive({
+                            accountAddress,
+                            authToken: (_c = this.getAuthToken) === null || _c === void 0 ? void 0 : _c.call(this),
+                            googleDriveAccessToken,
+                            password: resolvedPassword,
+                            sessionPublicKey,
+                            signedSessionId,
+                            traceContext,
+                        });
+                    }),
+                    provider: 'google-drive',
                 });
             });
         }
@@ -460,22 +541,21 @@ const withDynamicWaas = (BaseClass) => {
         }
         backupKeySharesToICloud(_a) {
             return __awaiter(this, arguments, void 0, function* ({ accountAddress, password, }) {
-                var _b, _c, _d;
-                if (!accountAddress) {
-                    throw new DynamicError('Account address is required', 'account_address_is_required');
-                }
-                const resolvedPassword = password !== null && password !== void 0 ? password : (yield this.getPassword({ accountAddress }));
-                const walletClient = yield this.getWaasWalletClient();
-                const signedSessionId = yield ((_b = this.getSignedSessionId) === null || _b === void 0 ? void 0 : _b.call(this));
-                if (!signedSessionId) {
-                    throw new DynamicError('Signed session ID is required', 'signed_session_id_is_required');
-                }
-                return walletClient.backupKeySharesToICloud({
+                return this.runBackupLifecycle({
                     accountAddress,
-                    authToken: (_c = this.getAuthToken) === null || _c === void 0 ? void 0 : _c.call(this),
-                    password: resolvedPassword,
-                    sessionPublicKey: yield ((_d = this.getSessionPublicKey) === null || _d === void 0 ? void 0 : _d.call(this)),
-                    signedSessionId,
+                    password,
+                    performBackup: (_b) => __awaiter(this, [_b], void 0, function* ({ walletClient, resolvedPassword, signedSessionId, sessionPublicKey, traceContext, }) {
+                        var _c;
+                        return walletClient.backupKeySharesToICloud({
+                            accountAddress,
+                            authToken: (_c = this.getAuthToken) === null || _c === void 0 ? void 0 : _c.call(this),
+                            password: resolvedPassword,
+                            sessionPublicKey,
+                            signedSessionId,
+                            traceContext,
+                        });
+                    }),
+                    provider: 'icloud',
                 });
             });
         }
@@ -770,7 +850,7 @@ const withDynamicWaas = (BaseClass) => {
                         });
                     }
                 }
-                (_a = this.revokeSignedSession) === null || _a === void 0 ? void 0 : _a.call(this);
+                (_a = this.revokeSignedSession) === null || _a === void 0 ? void 0 : _a.call(this, 'end-session');
                 this.revokeSignedSession = undefined;
                 this.dynamicWaasClient = undefined;
             });