@coinbase/cdp-api-client 0.0.122 → 0.0.123

package/dist/esm/index22.js

@@ -1,4 +1,4 @@
-var r = {};
+var r = { exports: {} };
 export {
-  r as __exports
+  r as __module
 };

package/dist/esm/index23.js

@@ -1,4 +1,4 @@
-var e = { exports: {} };
+var r = {};
 export {
-  e as __module
+  r as __exports
 };

package/dist/esm/index24.js

@@ -1,4 +1,4 @@
-var r = { exports: {} };
+var e = { exports: {} };
 export {
-  r as __module
+  e as __module
 };

package/dist/esm/index3.js

@@ -1,2 +1,2 @@
-import { __require as r } from "./index13.js";
+import { __require as r } from "./index18.js";
 r();

package/dist/esm/index4.js

@@ -1,4 +1,4 @@
-const o = "0.0.122";
+const o = "0.0.123";
 export {
   o as VERSION
 };

package/dist/esm/index6.js

@@ -1,244 +1,286 @@
 import { Analytics as d } from "./index2.js";
 import "./index3.js";
-import w from "axios";
-import { ERROR_DOCS_PAGE_URL as m } from "./index10.js";
-import { isRefreshTokenUnavailableError as y, UnknownApiError as T, HttpErrorType as p, isOpenAPIError as P, APIError as f, UnknownError as S, RefreshTokenUnavailableError as v } from "./index7.js";
+import p from "axios";
+import { ERROR_DOCS_PAGE_URL as R } from "./index10.js";
+import { isRefreshTokenUnavailableError as P, UnknownApiError as U, HttpErrorType as m, isOpenAPIError as $, APIError as f, UnknownError as S, RefreshTokenUnavailableError as A } from "./index7.js";
 const k = () => typeof window < "u" && typeof document < "u";
-let n = w.create({
+let n = p.create({
   baseURL: "https://api.cdp.coinbase.com/platform"
-}), h = null;
-const B = (e) => {
-  if (n = w.create({
-    baseURL: e.basePath || "https://api.cdp.coinbase.com/platform",
+}), g = p.create({
+  baseURL: "https://api.cdp.coinbase.com/platform"
+}), h = null, w = null;
+const ee = (t) => {
+  const a = t.basePath || "https://api.cdp.coinbase.com/platform";
+  if (n = p.create({
+    baseURL: a,
     // Only enable cookies in browser environments where they're supported
     withCredentials: k()
-  }), n.interceptors.request.use(async (r) => {
-    const t = L(r), s = R(r);
-    if (!h || _(s.pathname) || A(s.pathname) && !await h.isSignedIn() || !X(s.pathname))
-      return r;
-    const a = await h.getXWalletAuth({
-      requestMethod: t,
-      requestHost: s.host,
-      requestPath: s.pathname,
-      requestData: r.data
+  }), g = p.create({ baseURL: a }), n.interceptors.request.use(async (e) => {
+    const s = Z(e), r = v(e);
+    if (!h || y(r.pathname) || _(r.pathname) && !await h.isSignedIn() || !B(r.pathname))
+      return e;
+    const o = await h.getXWalletAuth({
+      requestMethod: s,
+      requestHost: r.host,
+      requestPath: r.pathname,
+      requestData: e.data
     });
-    return a && (r.headers["X-Wallet-Auth"] = a), r;
-  }), n.interceptors.request.use(async (r) => {
-    const t = R(r);
-    if (!h || _(t.pathname) || A(t.pathname) && !await h.isSignedIn())
-      return r;
-    const s = await h.getToken();
-    return s && s !== "" && (r.headers.Authorization = `Bearer ${s}`), r;
+    return o && (e.headers["X-Wallet-Auth"] = o), e;
+  }), n.interceptors.request.use(async (e) => {
+    const s = v(e);
+    if (!h || y(s.pathname) || _(s.pathname) && !await h.isSignedIn())
+      return e;
+    const r = await h.getToken();
+    return r && r !== "" && (e.headers.Authorization = `Bearer ${r}`), e;
   }), !k()) {
-    const r = e.platform ? `CDP/reactnative/${e.platform}` : "CDP/reactnative";
-    n.interceptors.request.use(async (t) => {
-      let s = t.headers["User-Agent"];
-      return s = s ? `${s} ${r}` : r, t.headers["User-Agent"] = s, t;
+    const e = t.platform ? `CDP/reactnative/${t.platform}` : "CDP/reactnative";
+    n.interceptors.request.use(async (s) => {
+      let r = s.headers["User-Agent"];
+      return r = r ? `${r} ${e}` : e, s.headers["User-Agent"] = r, s;
     });
   }
-  e.refreshTokenStorage && I(
-    e.refreshTokenStorage,
-    e.retryTokenReads ?? !1,
-    e.failClosedOnMissingToken ?? !1
-  ), e.appAttestation && b(e.appAttestation, e.platform), e.debugging && (n.interceptors.request.use((r) => (console.log("Request:", r), r)), n.interceptors.response.use((r) => (console.log("Response:", r), r)));
-}, K = (e) => {
-  h = e;
-}, b = (e, r) => {
-  n.interceptors.request.use(async (t) => {
-    const s = R(t);
-    if (!D(s.pathname) || !e.isEnabled())
-      return t;
+  t.refreshTokenStorage && x(
+    t.refreshTokenStorage,
+    t.retryTokenReads ?? !1,
+    t.failClosedOnMissingToken ?? !1
+  ), t.appAttestation && q(t.appAttestation, t.platform), t.debugging && (n.interceptors.request.use((e) => (console.log("Request:", e), e)), n.interceptors.response.use((e) => (console.log("Response:", e), e))), n.interceptors.request.use((e) => e._fallbackRetry ? (delete e._fallbackRetry, e) : (k() && w && (e.baseURL = `https://${w}/platform`), e)), n.interceptors.response.use(
+    (e) => e,
+    async (e) => {
+      if (!p.isAxiosError(e) || !j(e))
+        return Promise.reject(e);
+      const s = e.config;
+      return C(s) ? e.response?.status === 401 ? b(s) : I(e, s) : Promise.reject(e);
+    }
+  );
+}, j = (t) => {
+  const a = !t.response, e = t.response?.status === 401;
+  return a || e;
+}, C = (t) => {
+  const a = w ? `https://${w}/platform` : null;
+  return !!(a && t?.baseURL === a && t.url && H(t.url));
+}, b = (t) => n({
+  ...t,
+  baseURL: void 0,
+  _fallbackRetry: !0
+}), I = async (t, a) => {
+  const e = a.url?.match(/\/v2\/embedded-wallet-api\/projects\/([^/]+)\//)?.[1];
+  if (!e)
+    return Promise.reject(t);
+  try {
+    const r = (await g.get(
+      `/v2/embedded-wallet-api/projects/${e}/config`
+    )).data?.activeCookieDomain ?? null;
+    return M(r), r !== null ? Promise.reject(t) : b(a);
+  } catch {
+    return Promise.reject(t);
+  }
+}, te = (t) => {
+  h = t;
+}, M = (t) => {
+  const a = t?.trim() || null;
+  if (a && !/^[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?(\.[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?)*$/.test(
+    a
+  )) {
+    console.warn(`[CDP] Invalid cookie domain ignored: "${a}"`), w = null;
+    return;
+  }
+  w = a;
+}, q = (t, a) => {
+  n.interceptors.request.use(async (e) => {
+    const s = v(e);
+    if (!K(s.pathname) || !t.isEnabled())
+      return e;
     try {
-      if (r === "ios") {
-        const a = s.pathname.match(/\/projects\/([^/]+)\//);
-        if (!a || !a[1])
-          return t;
-        const l = `/v2/embedded-wallet-api/projects/${a[1]}/attestation/challenge`, u = (await n.post(l)).data.challenge;
+      if (a === "ios") {
+        const r = s.pathname.match(/\/projects\/([^/]+)\//);
+        if (!r || !r[1])
+          return e;
+        const c = `/v2/embedded-wallet-api/projects/${r[1]}/attestation/challenge`, u = (await n.post(c)).data.challenge;
         if (!u)
-          return console.warn("Failed to fetch assertion challenge"), t;
-        const i = await e.generateAssertion(u);
+          return console.warn("Failed to fetch assertion challenge"), e;
+        const i = await t.generateAssertion(u);
         if (!i)
-          return t;
-        t.headers["X-App-Attestation-Assertion"] = i.assertion, t.headers["X-App-Attestation-Key-ID"] = i.keyId, t.headers["X-App-Attestation-Challenge"] = u;
+          return e;
+        e.headers["X-App-Attestation-Assertion"] = i.assertion, e.headers["X-App-Attestation-Key-ID"] = i.keyId, e.headers["X-App-Attestation-Challenge"] = u;
       } else {
-        const a = await e.generateAssertion(JSON.stringify(t.data));
-        if (!a)
-          return t;
-        t.headers["X-Integrity-Token"] = a.assertion, t.headers["X-Package-Name"] = e.appIdentifier;
+        const r = await t.generateAssertion(JSON.stringify(e.data));
+        if (!r)
+          return e;
+        e.headers["X-Integrity-Token"] = r.assertion, e.headers["X-Package-Name"] = t.appIdentifier;
       }
-      return t;
-    } catch (a) {
+      return e;
+    } catch (r) {
       throw new Error(
-        `App attestation required but assertion generation failed: ${a instanceof Error ? a.message : String(a)}`
+        `App attestation required but assertion generation failed: ${r instanceof Error ? r.message : String(r)}`
       );
     }
   });
-}, $ = (e, r) => ({
-  ...e,
+}, D = (t, a) => ({
+  ...t,
   headers: {
-    ...e.headers || {},
-    "X-Idempotency-Key": r
+    ...t.headers || {},
+    "X-Idempotency-Key": a
   }
-}), G = async (e, r) => {
-  x(e), r && r !== "" && (e = $(e, r));
+}), re = async (t, a) => {
+  W(t), a && a !== "" && (t = D(t, a));
   try {
-    return (await n(e)).data;
-  } catch (t) {
-    if (y(t))
-      throw t;
-    if (w.isAxiosError(t) && !t.response)
-      throw new T(
-        p.unknown,
-        t.cause instanceof Error ? t.cause.message : t.message,
-        t.cause
+    return (await n(t)).data;
+  } catch (e) {
+    if (P(e))
+      throw e;
+    if (p.isAxiosError(e) && !e.response)
+      throw new U(
+        m.unknown,
+        e.cause instanceof Error ? e.cause.message : e.message,
+        e.cause
       );
-    if (w.isAxiosError(t) && t.response) {
-      if (P(t.response.data))
+    if (p.isAxiosError(e) && e.response) {
+      if ($(e.response.data))
         throw new f(
-          t.response.status,
-          t.response.data.errorType,
-          t.response.data.errorMessage,
-          t.response.data.correlationId,
-          t.response.data.errorLink,
-          t.cause
+          e.response.status,
+          e.response.data.errorType,
+          e.response.data.errorMessage,
+          e.response.data.correlationId,
+          e.response.data.errorLink,
+          e.cause
         );
       {
-        const s = t.response.status;
+        const s = e.response.status;
         switch (s) {
           case 401:
             throw new f(
               s,
-              p.unauthorized,
+              m.unauthorized,
               "Unauthorized.",
               void 0,
-              `${m}#unauthorized`,
-              t.cause
+              `${R}#unauthorized`,
+              e.cause
             );
           case 404:
             throw new f(
               s,
-              p.not_found,
+              m.not_found,
               "API not found.",
               void 0,
-              `${m}#not_found`,
-              t.cause
+              `${R}#not_found`,
+              e.cause
             );
           case 502:
             throw new f(
               s,
-              p.bad_gateway,
+              m.bad_gateway,
               "Bad gateway.",
               void 0,
-              `${m}`,
-              t.cause
+              `${R}`,
+              e.cause
             );
           case 503:
             throw new f(
               s,
-              p.service_unavailable,
+              m.service_unavailable,
               "Service unavailable. Please try again later.",
               void 0,
-              `${m}`,
-              t.cause
+              `${R}`,
+              e.cause
             );
           default: {
-            let a = "";
-            if (t.response.data)
+            let r = "";
+            if (e.response.data)
               try {
-                a = JSON.stringify(t.response.data);
+                r = JSON.stringify(e.response.data);
               } catch {
-                a = String(t.response.data);
+                r = String(e.response.data);
               }
-            const o = a ? `An unexpected error occurred: ${a}` : "An unexpected error occurred.";
+            const o = r ? `An unexpected error occurred: ${r}` : "An unexpected error occurred.";
             throw new f(
               s,
-              p.unexpected_error,
+              m.unexpected_error,
               o,
               void 0,
-              `${m}`,
-              t.cause
+              `${R}`,
+              e.cause
             );
           }
         }
       }
     }
-    throw new S("Something went wrong.", t instanceof Error ? t : void 0);
+    throw new S("Something went wrong.", e instanceof Error ? e : void 0);
   }
-}, E = 4, U = [25, 50, 100], g = async (e) => {
-  if (e.getRefreshTokenWithOutcome) {
-    const { token: r, outcome: t, errorMessage: s } = await e.getRefreshTokenWithOutcome();
-    return { token: r, outcome: t, errorMessage: s };
+}, E = 4, L = [25, 50, 100], T = async (t) => {
+  if (t.getRefreshTokenWithOutcome) {
+    const { token: a, outcome: e, errorMessage: s } = await t.getRefreshTokenWithOutcome();
+    return { token: a, outcome: e, errorMessage: s };
   }
-  return { token: await e.getRefreshToken() };
-}, q = async (e) => {
-  let r = null, t, s;
-  for (let a = 0; a < E; a++) {
-    const o = await g(e);
-    if (r = o.token, t = o.outcome, s = o.errorMessage, r)
+  return { token: await t.getRefreshToken() };
+}, O = async (t) => {
+  let a = null, e, s;
+  for (let r = 0; r < E; r++) {
+    const o = await T(t);
+    if (a = o.token, e = o.outcome, s = o.errorMessage, a)
       return {
-        token: r,
-        attempt: a,
-        outcome: t,
+        token: a,
+        attempt: r,
+        outcome: e,
         errorMessage: s
       };
-    const l = U[a];
-    l !== void 0 && await new Promise((c) => setTimeout(c, l));
+    const c = L[r];
+    c !== void 0 && await new Promise((l) => setTimeout(l, c));
   }
   return {
-    token: r,
+    token: a,
     attempt: E - 1,
-    outcome: t,
+    outcome: e,
     errorMessage: s
   };
-}, I = (e, r, t) => {
+}, x = (t, a, e) => {
   n.interceptors.response.use(
     async (s) => {
       try {
-        if (O(s)) {
+        if (N(s)) {
           d.sendSessionRefreshEvent({
             name: "refresh_token_response"
           });
-          const a = s.data?.refreshToken;
-          a && (d.sendSessionRefreshEvent({
+          const r = s.data?.refreshToken;
+          r && (d.sendSessionRefreshEvent({
             name: "refresh_token_received"
           }), await Promise.race([
-            e.setRefreshToken(a),
+            t.setRefreshToken(r),
             new Promise(
-              (o, l) => setTimeout(() => l(new Error("setRefreshToken timed out after 5000ms")), 5e3)
+              (o, c) => setTimeout(() => c(new Error("setRefreshToken timed out after 5000ms")), 5e3)
             )
           ]), d.sendSessionRefreshEvent({
             name: "refresh_token_stored"
           }));
         }
-      } catch (a) {
-        const o = a instanceof Error ? a.message : String(a);
+      } catch (r) {
+        const o = r instanceof Error ? r.message : String(r);
         d.sendSessionRefreshEvent({
           name: "refresh_token_store_failed",
           error_message: o
-        }), console.warn("Failed to store refresh token:", a);
+        }), console.warn("Failed to store refresh token:", r);
       }
       return s;
     },
     (s) => Promise.reject(s)
   ), n.interceptors.request.use(async (s) => {
-    if (j(s.url)) {
-      const a = C(s.url);
-      let o = null, l = 0, c, u;
+    if (X(s.url)) {
+      const r = F(s.url);
+      let o = null, c = 0, l, u;
       try {
-        const i = r ? await q(e) : { ...await g(e), attempt: 0 };
-        o = i.token, l = i.attempt, c = i.outcome, u = i.errorMessage;
+        const i = a ? await O(t) : { ...await T(t), attempt: 0 };
+        o = i.token, c = i.attempt, l = i.outcome, u = i.errorMessage;
       } catch (i) {
-        if (u = i instanceof Error ? i.message : String(i), c = "error", d.sendSessionRefreshEvent({
+        if (u = i instanceof Error ? i.message : String(i), l = "error", d.sendSessionRefreshEvent({
           name: "refresh_token_retrieve_failed",
           error_message: u
-        }), console.warn("Failed to retrieve refresh token:", i), a && t)
-          throw new v("error", u);
+        }), console.warn("Failed to retrieve refresh token:", i), r && e)
+          throw new A("error", u);
       }
       if (o)
         d.sendSessionRefreshEvent({
           name: "refresh_token_retrieved",
-          attempt: l,
-          read_outcome: c,
+          attempt: c,
+          read_outcome: l,
           error_message: u
         }), s.data = {
           ...s.data,
@@ -246,57 +288,60 @@ const B = (e) => {
         };
       else if (d.sendSessionRefreshEvent({
         name: "refresh_token_missing",
-        attempt: l,
-        read_outcome: c,
+        attempt: c,
+        read_outcome: l,
         error_message: u
-      }), a && t)
-        throw new v(
-          c === "error" ? "error" : "not_found",
+      }), r && e)
+        throw new A(
+          l === "error" ? "error" : "not_found",
           u
         );
     }
-    if (M(s.url))
+    if (z(s.url))
       try {
         d.sendSessionRefreshEvent({
           name: "refresh_token_removing_token"
-        }), await e.removeRefreshToken();
-      } catch (a) {
-        console.warn("Failed to remove refresh token:", a);
+        }), await t.removeRefreshToken();
+      } catch (r) {
+        console.warn("Failed to remove refresh token:", r);
       }
     return s;
   });
-}, M = (e) => e ? /^\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/logout$/.test(e) : !1, j = (e) => e ? /^\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(refresh|logout)$/.test(e) : !1, C = (e) => e ? /^\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/refresh$/.test(e) : !1, O = (e) => {
-  const r = e.config.url;
-  return r ? /^\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(verify\/(email|sms|siwe|oauth\/.*)|refresh)$/.test(
-    r
+}, z = (t) => t ? /^\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/logout$/.test(t) : !1, X = (t) => t ? /^\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(refresh|logout)$/.test(t) : !1, F = (t) => t ? /^\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/refresh$/.test(t) : !1, N = (t) => {
+  const a = t.config.url;
+  return a ? /^\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(verify\/(email|sms|siwe|oauth\/.*)|refresh)$/.test(
+    a
   ) : !1;
-}, x = (e) => {
+}, W = (t) => {
   if (!n.getUri() || n.getUri() === "")
     throw new Error("CDP client URI not configured. Call configure() first.");
-  if (!e.url || e.url === "")
+  if (!t.url || t.url === "")
     throw new Error("AxiosRequestConfig URL is empty. This should never happen.");
-  if (!e.method || e.method === "")
+  if (!t.method || t.method === "")
     throw new Error("AxiosRequestConfig method is empty. This should never happen.");
-}, L = (e) => e.method?.toString().toUpperCase() || "GET", R = (e) => {
-  if (!e.url)
+}, Z = (t) => t.method?.toString().toUpperCase() || "GET", v = (t) => {
+  if (!t.url)
     throw new Error("URL is required for authentication");
-  const r = n.getUri() + e.url;
-  return new URL(r);
-}, _ = (e) => {
-  const r = /^\/platform\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(refresh|logout)$/, t = /^\/platform\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(mfa)$/, s = /^\/platform\/v2\/embedded-wallet-api\/projects\/[^/]+\/config$/, a = /^\/platform\/v2\/embedded-wallet-api\/projects\/[^/]+\/attestation\/(challenge|register)$/;
-  return r.test(e) || t.test(e) || s.test(e) || a.test(e);
-}, X = (e) => !/^\/platform\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/custom\/authenticate$/.test(e), A = (e) => {
-  const r = /^\/platform\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(init)$/, t = /^\/platform\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/verify\//;
-  return r.test(e) || t.test(e);
-}, D = (e) => [
+  const e = (t.baseURL ?? n.getUri()) + t.url;
+  return new URL(e);
+}, y = (t) => {
+  const a = /^(\/platform)?\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(refresh|logout)$/, e = /^(\/platform)?\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(mfa)$/, s = /^(\/platform)?\/v2\/embedded-wallet-api\/projects\/[^/]+\/config$/, r = /^(\/platform)?\/v2\/embedded-wallet-api\/projects\/[^/]+\/attestation\/(challenge|register)$/;
+  return a.test(t) || e.test(t) || s.test(t) || r.test(t);
+}, B = (t) => !/^(\/platform)?\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/custom\/authenticate$/.test(t), _ = (t) => {
+  const a = /^(\/platform)?\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(init)$/, e = /^(\/platform)?\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/verify\//;
+  return a.test(t) || e.test(t);
+}, H = (t) => /^\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(init$|verify\/|refresh$|logout$)/.test(
+  t
+), K = (t) => [
   // Auth flows: prevent account takeover on mobile clients
   /\/auth\/verify\//,
   // VerifyEmailAuthentication, VerifySmsAuthentication, VerifyOAuthCode, VerifyOAuthEndUserIdentity
   /\/auth\/refresh$/
   // RefreshAccessToken
-].some((t) => t.test(e));
+].some((e) => e.test(t));
 export {
-  G as cdpApiClient,
-  B as configureCdpApiClient,
-  K as setAuthManager
+  re as cdpApiClient,
+  ee as configureCdpApiClient,
+  te as setAuthManager,
+  M as setCookieDomain
 };

package/dist/types/index.d.ts

@@ -3551,6 +3551,14 @@ export declare type ServiceUnavailableErrorResponse = Error_2;
  */
 export declare const setAuthManager: (manager: AuthManager) => void;
 
+/**
+ * Updates the active cookie domain used for first-party auth routing.
+ * Call after fetching project config to enable (non-null) or disable (null) cookie domain routing.
+ *
+ * @param domain - The active cookie domain, or null to route through the default CDP URL.
+ */
+export declare const setCookieDomain: (domain: string | null) => void;
+
 /**
  * Signs a 32-byte sighash using the child key derived from the end user's Bitcoin HD (Hierarchical Deterministic) account at the given child path. The child path [change, address_index] must correspond to the same path used to derive the address that controls the UTXO being spent. One call is required per UTXO input in the transaction.
  * @summary Sign a Bitcoin hash with an end user account

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coinbase/cdp-api-client",
-  "version": "0.0.122",
+  "version": "0.0.123",
   "type": "module",
   "files": [
     "dist/**",