@coinbase/cdp-api-client 0.0.116 → 0.0.117

package/dist/esm/index21.js

@@ -1,4 +1,4 @@
-var r = { exports: {} };
+var r = {};
 export {
-  r as __module
+  r as __exports
 };

package/dist/esm/index22.js

@@ -1,4 +1,4 @@
-var r = {};
+var e = { exports: {} };
 export {
-  r as __exports
+  e as __module
 };

package/dist/esm/index23.js

@@ -1,4 +1,4 @@
-var e = { exports: {} };
+var r = { exports: {} };
 export {
-  e as __module
+  r as __module
 };

package/dist/esm/index3.js

@@ -1,2 +1,2 @@
-import { __require as r } from "./index17.js";
+import { __require as r } from "./index12.js";
 r();

package/dist/esm/index4.js

@@ -1,4 +1,4 @@
-const o = "0.0.116";
+const o = "0.0.117";
 export {
   o as VERSION
 };

package/dist/esm/index6.js

@@ -1,93 +1,93 @@
 import { Analytics as o } from "./index2.js";
 import "./index3.js";
-import c from "axios";
-import { ERROR_DOCS_PAGE_URL as h } from "./index9.js";
-import { UnknownApiError as R, HttpErrorType as u, isOpenAPIError as A, APIError as d, UnknownError as k } from "./index7.js";
+import h from "axios";
+import { ERROR_DOCS_PAGE_URL as l } from "./index9.js";
+import { UnknownApiError as k, HttpErrorType as u, isOpenAPIError as _, APIError as d, UnknownError as y } from "./index7.js";
 const w = () => typeof window < "u" && typeof document < "u";
-let a = c.create({
+let n = h.create({
   baseURL: "https://api.cdp.coinbase.com/platform"
 }), i = null;
-const O = (t) => {
-  if (a = c.create({
+const N = (t) => {
+  if (n = h.create({
     baseURL: t.basePath || "https://api.cdp.coinbase.com/platform",
     // Only enable cookies in browser environments where they're supported
     withCredentials: w()
-  }), a.interceptors.request.use(async (r) => {
-    const e = U(r), s = f(r);
-    if (!i || v(s.pathname) || _(s.pathname) && !await i.isSignedIn() || !I(s.pathname))
+  }), n.interceptors.request.use(async (r) => {
+    const e = j(r), s = m(r);
+    if (!i || v(s.pathname) || A(s.pathname) && !await i.isSignedIn() || !C(s.pathname))
       return r;
-    const n = await i.getXWalletAuth({
+    const a = await i.getXWalletAuth({
       requestMethod: e,
       requestHost: s.host,
       requestPath: s.pathname,
       requestData: r.data
     });
-    return n && (r.headers["X-Wallet-Auth"] = n), r;
-  }), a.interceptors.request.use(async (r) => {
-    const e = f(r);
-    if (!i || v(e.pathname) || _(e.pathname) && !await i.isSignedIn())
+    return a && (r.headers["X-Wallet-Auth"] = a), r;
+  }), n.interceptors.request.use(async (r) => {
+    const e = m(r);
+    if (!i || v(e.pathname) || A(e.pathname) && !await i.isSignedIn())
       return r;
     const s = await i.getToken();
     return s && s !== "" && (r.headers.Authorization = `Bearer ${s}`), r;
   }), !w()) {
     const r = t.platform ? `CDP/reactnative/${t.platform}` : "CDP/reactnative";
-    a.interceptors.request.use(async (e) => {
+    n.interceptors.request.use(async (e) => {
       let s = e.headers["User-Agent"];
       return s = s ? `${s} ${r}` : r, e.headers["User-Agent"] = s, e;
     });
   }
-  t.refreshTokenStorage && P(t.refreshTokenStorage), t.appAttestation && y(t.appAttestation, t.platform), t.debugging && (a.interceptors.request.use((r) => (console.log("Request:", r), r)), a.interceptors.response.use((r) => (console.log("Response:", r), r)));
-}, D = (t) => {
+  t.refreshTokenStorage && b(t.refreshTokenStorage, t.retryTokenReads ?? !1), t.appAttestation && g(t.appAttestation, t.platform), t.debugging && (n.interceptors.request.use((r) => (console.log("Request:", r), r)), n.interceptors.response.use((r) => (console.log("Response:", r), r)));
+}, W = (t) => {
   i = t;
-}, y = (t, r) => {
-  a.interceptors.request.use(async (e) => {
-    const s = f(e);
-    if (!q(s.pathname) || !t.isEnabled())
+}, g = (t, r) => {
+  n.interceptors.request.use(async (e) => {
+    const s = m(e);
+    if (!M(s.pathname) || !t.isEnabled())
       return e;
     try {
       if (r === "ios") {
-        const n = s.pathname.match(/\/projects\/([^/]+)\//);
-        if (!n || !n[1])
+        const a = s.pathname.match(/\/projects\/([^/]+)\//);
+        if (!a || !a[1])
           return e;
-        const g = `/v2/embedded-wallet-api/projects/${n[1]}/attestation/challenge`, l = (await a.post(g)).data.challenge;
-        if (!l)
-          return console.warn("Failed to fetch assertion challenge"), e;
-        const p = await t.generateAssertion(l);
+        const E = `/v2/embedded-wallet-api/projects/${a[1]}/attestation/challenge`, p = (await n.post(E)).data.challenge;
         if (!p)
+          return console.warn("Failed to fetch assertion challenge"), e;
+        const f = await t.generateAssertion(p);
+        if (!f)
           return e;
-        e.headers["X-App-Attestation-Assertion"] = p.assertion, e.headers["X-App-Attestation-Key-ID"] = p.keyId, e.headers["X-App-Attestation-Challenge"] = l;
+        e.headers["X-App-Attestation-Assertion"] = f.assertion, e.headers["X-App-Attestation-Key-ID"] = f.keyId, e.headers["X-App-Attestation-Challenge"] = p;
       } else {
-        const n = await t.generateAssertion(JSON.stringify(e.data));
-        if (!n)
+        const a = await t.generateAssertion(JSON.stringify(e.data));
+        if (!a)
           return e;
-        e.headers["X-Integrity-Token"] = n.assertion, e.headers["X-Package-Name"] = t.appIdentifier;
+        e.headers["X-Integrity-Token"] = a.assertion, e.headers["X-Package-Name"] = t.appIdentifier;
       }
       return e;
-    } catch (n) {
+    } catch (a) {
       throw new Error(
-        `App attestation required but assertion generation failed: ${n instanceof Error ? n.message : String(n)}`
+        `App attestation required but assertion generation failed: ${a instanceof Error ? a.message : String(a)}`
       );
     }
   });
-}, E = (t, r) => ({
+}, T = (t, r) => ({
   ...t,
   headers: {
     ...t.headers || {},
     "X-Idempotency-Key": r
   }
 }), z = async (t, r) => {
-  $(t), r && r !== "" && (t = E(t, r));
+  q(t), r && r !== "" && (t = T(t, r));
   try {
-    return (await a(t)).data;
+    return (await n(t)).data;
   } catch (e) {
-    if (c.isAxiosError(e) && !e.response)
-      throw new R(
+    if (h.isAxiosError(e) && !e.response)
+      throw new k(
         u.unknown,
         e.cause instanceof Error ? e.cause.message : e.message,
         e.cause
       );
-    if (c.isAxiosError(e) && e.response) {
-      if (A(e.response.data))
+    if (h.isAxiosError(e) && e.response) {
+      if (_(e.response.data))
         throw new d(
           e.response.status,
           e.response.data.errorType,
@@ -105,7 +105,7 @@ const O = (t) => {
               u.unauthorized,
               "Unauthorized.",
               void 0,
-              `${h}#unauthorized`,
+              `${l}#unauthorized`,
               e.cause
             );
           case 404:
@@ -114,7 +114,7 @@ const O = (t) => {
               u.not_found,
               "API not found.",
               void 0,
-              `${h}#not_found`,
+              `${l}#not_found`,
               e.cause
             );
           case 502:
@@ -123,7 +123,7 @@ const O = (t) => {
               u.bad_gateway,
               "Bad gateway.",
               void 0,
-              `${h}`,
+              `${l}`,
               e.cause
             );
           case 503:
@@ -132,123 +132,122 @@ const O = (t) => {
               u.service_unavailable,
               "Service unavailable. Please try again later.",
               void 0,
-              `${h}`,
+              `${l}`,
               e.cause
             );
           default: {
-            let n = "";
+            let a = "";
             if (e.response.data)
               try {
-                n = JSON.stringify(e.response.data);
+                a = JSON.stringify(e.response.data);
               } catch {
-                n = String(e.response.data);
+                a = String(e.response.data);
               }
-            const m = n ? `An unexpected error occurred: ${n}` : "An unexpected error occurred.";
+            const c = a ? `An unexpected error occurred: ${a}` : "An unexpected error occurred.";
             throw new d(
               s,
               u.unexpected_error,
-              m,
+              c,
               void 0,
-              `${h}`,
+              `${l}`,
               e.cause
             );
           }
         }
       }
     }
-    throw new k("Something went wrong.", e instanceof Error ? e : void 0);
+    throw new y("Something went wrong.", e instanceof Error ? e : void 0);
+  }
+}, R = 4, P = [25, 50, 100], S = async (t) => {
+  let r = null;
+  for (let e = 0; e < R; e++) {
+    if (r = await t.getRefreshToken(), r)
+      return { token: r, attempt: e };
+    const s = P[e];
+    s !== void 0 && await new Promise((a) => setTimeout(a, s));
   }
-}, P = (t) => {
-  a.interceptors.response.use(
-    async (r) => {
+  return { token: r, attempt: R - 1 };
+}, b = (t, r) => {
+  n.interceptors.response.use(
+    async (e) => {
       try {
-        if (b(r)) {
+        if (I(e)) {
           o.sendSessionRefreshEvent({
             name: "refresh_token_response"
           });
-          const e = r.data?.refreshToken;
-          e && (o.sendSessionRefreshEvent({
+          const s = e.data?.refreshToken;
+          s && (o.sendSessionRefreshEvent({
             name: "refresh_token_received"
           }), await Promise.race([
-            t.setRefreshToken(e),
+            t.setRefreshToken(s),
             new Promise(
-              (s, n) => setTimeout(() => n(new Error("setRefreshToken timed out after 5000ms")), 5e3)
+              (a, c) => setTimeout(() => c(new Error("setRefreshToken timed out after 5000ms")), 5e3)
             )
           ]), o.sendSessionRefreshEvent({
             name: "refresh_token_stored"
           }));
         }
-      } catch (e) {
-        const s = e instanceof Error ? e.message : String(e);
+      } catch (s) {
+        const a = s instanceof Error ? s.message : String(s);
         o.sendSessionRefreshEvent({
           name: "refresh_token_store_failed",
-          error_message: s
-        }), console.warn("Failed to store refresh token:", e);
+          error_message: a
+        }), console.warn("Failed to store refresh token:", s);
       }
-      return r;
+      return e;
     },
-    (r) => Promise.reject(r)
-  ), a.interceptors.request.use(async (r) => {
+    (e) => Promise.reject(e)
+  ), n.interceptors.request.use(async (e) => {
     try {
-      if (T(r.url)) {
-        const e = await t.getRefreshToken();
-        e || setTimeout(() => {
-          t.getRefreshToken().then((s) => {
-            s && o.sendSessionRefreshEvent({
-              name: "refresh_token_received_after_missing"
-            });
-          }).catch((s) => {
-            const n = s instanceof Error ? s.message : String(s);
-            o.sendSessionRefreshEvent({
-              name: "refresh_token_retrieve_failed_after_missing",
-              error_message: n
-            });
-          });
-        }, 10), e ? (o.sendSessionRefreshEvent({
-          name: "refresh_token_retrieved"
-        }), r.data = {
-          ...r.data,
-          refreshToken: e
+      if (U(e.url)) {
+        const { token: s, attempt: a } = r ? await S(t) : { token: await t.getRefreshToken(), attempt: 0 };
+        s ? (o.sendSessionRefreshEvent({
+          name: "refresh_token_retrieved",
+          attempt: a
+        }), e.data = {
+          ...e.data,
+          refreshToken: s
         }) : o.sendSessionRefreshEvent({
-          name: "refresh_token_missing"
+          name: "refresh_token_missing",
+          attempt: a
         });
       }
-      S(r.url) && (o.sendSessionRefreshEvent({
+      $(e.url) && (o.sendSessionRefreshEvent({
         name: "refresh_token_removing_token"
       }), await t.removeRefreshToken());
-    } catch (e) {
-      const s = e instanceof Error ? e.message : String(e);
+    } catch (s) {
+      const a = s instanceof Error ? s.message : String(s);
       o.sendSessionRefreshEvent({
         name: "refresh_token_retrieve_failed",
-        error_message: s
-      }), console.warn("Failed to retrieve refresh token:", e);
+        error_message: a
+      }), console.warn("Failed to retrieve refresh token:", s);
     }
-    return r;
+    return e;
   });
-}, S = (t) => t ? /^\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/logout$/.test(t) : !1, T = (t) => t ? /^\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(refresh|logout)$/.test(t) : !1, b = (t) => {
+}, $ = (t) => t ? /^\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/logout$/.test(t) : !1, U = (t) => t ? /^\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(refresh|logout)$/.test(t) : !1, I = (t) => {
   const r = t.config.url;
   return r ? /^\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(verify\/(email|sms|siwe|oauth\/.*)|refresh)$/.test(
     r
   ) : !1;
-}, $ = (t) => {
-  if (!a.getUri() || a.getUri() === "")
+}, q = (t) => {
+  if (!n.getUri() || n.getUri() === "")
     throw new Error("CDP client URI not configured. Call configure() first.");
   if (!t.url || t.url === "")
     throw new Error("AxiosRequestConfig URL is empty. This should never happen.");
   if (!t.method || t.method === "")
     throw new Error("AxiosRequestConfig method is empty. This should never happen.");
-}, U = (t) => t.method?.toString().toUpperCase() || "GET", f = (t) => {
+}, j = (t) => t.method?.toString().toUpperCase() || "GET", m = (t) => {
   if (!t.url)
     throw new Error("URL is required for authentication");
-  const r = a.getUri() + t.url;
+  const r = n.getUri() + t.url;
   return new URL(r);
 }, v = (t) => {
-  const r = /^\/platform\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(refresh|logout)$/, e = /^\/platform\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(mfa)$/, s = /^\/platform\/v2\/embedded-wallet-api\/projects\/[^/]+\/config$/, n = /^\/platform\/v2\/embedded-wallet-api\/projects\/[^/]+\/attestation\/(challenge|register)$/;
-  return r.test(t) || e.test(t) || s.test(t) || n.test(t);
-}, I = (t) => !/^\/platform\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/custom\/authenticate$/.test(t), _ = (t) => {
+  const r = /^\/platform\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(refresh|logout)$/, e = /^\/platform\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(mfa)$/, s = /^\/platform\/v2\/embedded-wallet-api\/projects\/[^/]+\/config$/, a = /^\/platform\/v2\/embedded-wallet-api\/projects\/[^/]+\/attestation\/(challenge|register)$/;
+  return r.test(t) || e.test(t) || s.test(t) || a.test(t);
+}, C = (t) => !/^\/platform\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/custom\/authenticate$/.test(t), A = (t) => {
   const r = /^\/platform\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(init)$/, e = /^\/platform\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/verify\//;
   return r.test(t) || e.test(t);
-}, q = (t) => [
+}, M = (t) => [
   // Auth flows: prevent account takeover on mobile clients
   /\/auth\/verify\//,
   // VerifyEmailAuthentication, VerifySmsAuthentication, VerifyOAuthCode, VerifyOAuthEndUserIdentity
@@ -257,6 +256,6 @@ const O = (t) => {
 ].some((e) => e.test(t));
 export {
   z as cdpApiClient,
-  O as configureCdpApiClient,
-  D as setAuthManager
+  N as configureCdpApiClient,
+  W as setAuthManager
 };

package/dist/types/index.d.ts

@@ -203,6 +203,13 @@ export declare type CdpOptions = {
      * relying on HTTP cookies.
      */
     refreshTokenStorage?: RefreshTokenStorage;
+    /**
+     * Whether to retry reading the refresh token when the initial read is empty.
+     * Enable on native platforms whose secure storage can transiently return empty
+     * on the first read after a cold start or app resume; leave off for web, where
+     * reads are synchronous and have no such race. Defaults to false.
+     */
+    retryTokenReads?: boolean;
     /**
      * Optional app attestation for native mobile platforms.
      * When provided, adds assertion headers to sensitive API calls to prove app integrity.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coinbase/cdp-api-client",
-  "version": "0.0.116",
+  "version": "0.0.117",
   "type": "module",
   "files": [
     "dist/**",