@coinbase/cdp-api-client 0.0.124 → 0.0.126

package/dist/esm/index6.js

@@ -2,346 +2,367 @@ import { Analytics as d } from "./index2.js";
 import "./index3.js";
 import p from "axios";
 import { ERROR_DOCS_PAGE_URL as R } from "./index10.js";
-import { isRefreshTokenUnavailableError as P, UnknownApiError as U, HttpErrorType as m, isOpenAPIError as $, APIError as f, UnknownError as S, RefreshTokenUnavailableError as A } from "./index7.js";
+import { isRefreshTokenUnavailableError as P, UnknownApiError as U, HttpErrorType as m, isOpenAPIError as $, APIError as f, UnknownError as S, RefreshTokenUnavailableError as y } from "./index7.js";
 const k = () => typeof window < "u" && typeof document < "u";
-let n = p.create({
+let i = p.create({
   baseURL: "https://api.cdp.coinbase.com/platform"
 }), g = p.create({
   baseURL: "https://api.cdp.coinbase.com/platform"
 }), h = null, w = null;
-const ee = (t) => {
-  const a = t.basePath || "https://api.cdp.coinbase.com/platform";
-  if (n = p.create({
-    baseURL: a,
+const re = (e) => {
+  const s = e.basePath || "https://api.cdp.coinbase.com/platform";
+  if (i = p.create({
+    baseURL: s,
     // Only enable cookies in browser environments where they're supported
     withCredentials: k()
-  }), g = p.create({ baseURL: a }), n.interceptors.request.use(async (e) => {
-    const s = Z(e), r = v(e);
-    if (!h || y(r.pathname) || _(r.pathname) && !await h.isSignedIn() || !B(r.pathname))
-      return e;
-    const o = await h.getXWalletAuth({
-      requestMethod: s,
+  }), g = p.create({ baseURL: s }), i.interceptors.request.use(async (t) => {
+    const a = Z(t), r = v(t);
+    if (!h || E(r.pathname) || _(r.pathname) && !await h.isSignedIn() || !B(r.pathname))
+      return t;
+    const n = await h.getXWalletAuth({
+      requestMethod: a,
       requestHost: r.host,
       requestPath: r.pathname,
-      requestData: e.data
+      requestData: t.data
     });
-    return o && (e.headers["X-Wallet-Auth"] = o), e;
-  }), n.interceptors.request.use(async (e) => {
-    const s = v(e);
-    if (!h || y(s.pathname) || _(s.pathname) && !await h.isSignedIn())
-      return e;
+    return n && (t.headers["X-Wallet-Auth"] = n), t;
+  }), i.interceptors.request.use(async (t) => {
+    const a = v(t);
+    if (!h || E(a.pathname) || _(a.pathname) && !await h.isSignedIn())
+      return t;
     const r = await h.getToken();
-    return r && r !== "" && (e.headers.Authorization = `Bearer ${r}`), e;
+    return r && r !== "" && (t.headers.Authorization = `Bearer ${r}`), t;
   }), !k()) {
-    const e = t.platform ? `CDP/reactnative/${t.platform}` : "CDP/reactnative";
-    n.interceptors.request.use(async (s) => {
-      let r = s.headers["User-Agent"];
-      return r = r ? `${r} ${e}` : e, s.headers["User-Agent"] = r, s;
+    const t = e.platform ? `CDP/reactnative/${e.platform}` : "CDP/reactnative";
+    i.interceptors.request.use(async (a) => {
+      let r = a.headers["User-Agent"];
+      return r = r ? `${r} ${t}` : t, a.headers["User-Agent"] = r, a;
     });
   }
-  t.refreshTokenStorage && x(
-    t.refreshTokenStorage,
-    t.retryTokenReads ?? !1,
-    t.failClosedOnMissingToken ?? !1
-  ), t.appAttestation && q(t.appAttestation, t.platform), t.debugging && (n.interceptors.request.use((e) => (console.log("Request:", e), e)), n.interceptors.response.use((e) => (console.log("Response:", e), e))), n.interceptors.request.use((e) => e._fallbackRetry ? (delete e._fallbackRetry, e) : (k() && w && (e.baseURL = `https://${w}/platform`), e)), n.interceptors.response.use(
-    (e) => e,
-    async (e) => {
-      if (!p.isAxiosError(e) || !j(e))
-        return Promise.reject(e);
-      const s = e.config;
-      return C(s) ? e.response?.status === 401 ? b(s) : I(e, s) : Promise.reject(e);
+  e.refreshTokenStorage && X(
+    e.refreshTokenStorage,
+    e.retryTokenReads ?? !1,
+    e.failClosedOnMissingToken ?? !1
+  ), e.appAttestation && q(e.appAttestation, e.platform), e.debugging && (i.interceptors.request.use((t) => (console.log("Request:", t), t)), i.interceptors.response.use((t) => (console.log("Response:", t), t))), i.interceptors.request.use((t) => t._fallbackRetry ? (delete t._fallbackRetry, t) : (k() && w && (t.baseURL = `https://${w}/platform`), t)), i.interceptors.response.use(
+    (t) => t,
+    async (t) => {
+      if (!p.isAxiosError(t) || !j(t))
+        return Promise.reject(t);
+      const a = t.config;
+      return C(a) ? t.response?.status === 401 ? b(a) : I(t, a) : Promise.reject(t);
     }
   );
-}, j = (t) => {
-  const a = !t.response, e = t.response?.status === 401;
-  return a || e;
-}, C = (t) => {
-  const a = w ? `https://${w}/platform` : null;
-  return !!(a && t?.baseURL === a && t.url && H(t.url));
-}, b = (t) => n({
-  ...t,
+}, j = (e) => {
+  const s = !e.response, t = e.response?.status === 401;
+  return s || t;
+}, C = (e) => {
+  const s = w ? `https://${w}/platform` : null;
+  return !!(s && e?.baseURL === s && e.url && J(e.url));
+}, b = (e) => i({
+  ...e,
   baseURL: void 0,
   _fallbackRetry: !0
-}), I = async (t, a) => {
-  const e = a.url?.match(/\/v2\/embedded-wallet-api\/projects\/([^/]+)\//)?.[1];
-  if (!e)
-    return Promise.reject(t);
+}), I = async (e, s) => {
+  const t = s.url?.match(/\/v2\/embedded-wallet-api\/projects\/([^/]+)\//)?.[1];
+  if (!t)
+    return Promise.reject(e);
   try {
     const r = (await g.get(
-      `/v2/embedded-wallet-api/projects/${e}/config`
+      `/v2/embedded-wallet-api/projects/${t}/config`
     )).data?.activeCookieDomain ?? null;
-    return M(r), r !== null ? Promise.reject(t) : b(a);
+    return M(r), r !== null ? Promise.reject(e) : b(s);
   } catch {
-    return Promise.reject(t);
+    return Promise.reject(e);
   }
-}, te = (t) => {
-  h = t;
-}, M = (t) => {
-  const a = t?.trim() || null;
-  if (a && !/^[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?(\.[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?)*$/.test(
-    a
+}, se = (e) => {
+  h = e;
+}, M = (e) => {
+  const s = e?.trim() || null;
+  if (s && !/^[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?(\.[a-zA-Z0-9]([a-zA-Z0-9-]*[a-zA-Z0-9])?)*$/.test(
+    s
   )) {
-    console.warn(`[CDP] Invalid cookie domain ignored: "${a}"`), w = null;
+    console.warn(`[CDP] Invalid cookie domain ignored: "${s}"`), w = null;
     return;
   }
-  w = a;
-}, q = (t, a) => {
-  n.interceptors.request.use(async (e) => {
-    const s = v(e);
-    if (!K(s.pathname) || !t.isEnabled())
-      return e;
+  w = s;
+}, q = (e, s) => {
+  i.interceptors.request.use(async (t) => {
+    const a = v(t);
+    if (!G(a.pathname) || !e.isEnabled())
+      return t;
     try {
-      if (a === "ios") {
-        const r = s.pathname.match(/\/projects\/([^/]+)\//);
+      if (s === "ios") {
+        const r = a.pathname.match(/\/projects\/([^/]+)\//);
         if (!r || !r[1])
-          return e;
-        const c = `/v2/embedded-wallet-api/projects/${r[1]}/attestation/challenge`, u = (await n.post(c)).data.challenge;
-        if (!u)
-          return console.warn("Failed to fetch assertion challenge"), e;
-        const i = await t.generateAssertion(u);
-        if (!i)
-          return e;
-        e.headers["X-App-Attestation-Assertion"] = i.assertion, e.headers["X-App-Attestation-Key-ID"] = i.keyId, e.headers["X-App-Attestation-Challenge"] = u;
+          return t;
+        const o = `/v2/embedded-wallet-api/projects/${r[1]}/attestation/challenge`, c = (await i.post(o)).data.challenge;
+        if (!c)
+          return console.warn("Failed to fetch assertion challenge"), t;
+        const l = await e.generateAssertion(c);
+        if (!l)
+          return t;
+        t.headers["X-App-Attestation-Assertion"] = l.assertion, t.headers["X-App-Attestation-Key-ID"] = l.keyId, t.headers["X-App-Attestation-Challenge"] = c;
       } else {
-        const r = await t.generateAssertion(JSON.stringify(e.data));
+        const r = await e.generateAssertion(JSON.stringify(t.data));
         if (!r)
-          return e;
-        e.headers["X-Integrity-Token"] = r.assertion, e.headers["X-Package-Name"] = t.appIdentifier;
+          return t;
+        t.headers["X-Integrity-Token"] = r.assertion, t.headers["X-Package-Name"] = e.appIdentifier;
       }
-      return e;
+      return t;
     } catch (r) {
       throw new Error(
         `App attestation required but assertion generation failed: ${r instanceof Error ? r.message : String(r)}`
       );
     }
   });
-}, D = (t, a) => ({
-  ...t,
+}, D = (e, s) => ({
+  ...e,
   headers: {
-    ...t.headers || {},
-    "X-Idempotency-Key": a
+    ...e.headers || {},
+    "X-Idempotency-Key": s
   }
-}), re = async (t, a) => {
-  W(t), a && a !== "" && (t = D(t, a));
+}), O = (e, s) => ({
+  ...e,
+  headers: {
+    ...e.headers || {},
+    "X-Mfa-Challenge-Id": s
+  }
+}), L = (e) => {
+  const s = e?.toJSON;
+  if (typeof s == "function")
+    return s.call(e);
+  if (e && typeof e == "object")
+    return e;
+}, ae = async (e, s) => {
+  H(e);
+  const { idempotencyKey: t, mfaChallengeId: a } = typeof s == "string" ? { idempotencyKey: s, mfaChallengeId: void 0 } : s ?? {};
+  t && t !== "" && (e = D(e, t)), a && a !== "" && (e = O(e, a));
   try {
-    return (await n(t)).data;
-  } catch (e) {
-    if (P(e))
-      throw e;
-    if (p.isAxiosError(e) && !e.response)
+    return (await i(e)).data;
+  } catch (r) {
+    if (P(r))
+      throw r;
+    if (p.isAxiosError(r) && !r.response)
       throw new U(
         m.unknown,
-        e.cause instanceof Error ? e.cause.message : e.message,
-        e.cause
+        r.cause instanceof Error ? r.cause.message : r.message,
+        r.cause
       );
-    if (p.isAxiosError(e) && e.response) {
-      if ($(e.response.data))
+    if (p.isAxiosError(r) && r.response) {
+      const n = L(r.response.headers);
+      if ($(r.response.data))
         throw new f(
-          e.response.status,
-          e.response.data.errorType,
-          e.response.data.errorMessage,
-          e.response.data.correlationId,
-          e.response.data.errorLink,
-          e.cause
+          r.response.status,
+          r.response.data.errorType,
+          r.response.data.errorMessage,
+          r.response.data.correlationId,
+          r.response.data.errorLink,
+          r.cause,
+          n
         );
       {
-        const s = e.response.status;
-        switch (s) {
+        const o = r.response.status;
+        switch (o) {
           case 401:
             throw new f(
-              s,
+              o,
               m.unauthorized,
               "Unauthorized.",
               void 0,
               `${R}#unauthorized`,
-              e.cause
+              r.cause,
+              n
             );
           case 404:
             throw new f(
-              s,
+              o,
               m.not_found,
               "API not found.",
               void 0,
               `${R}#not_found`,
-              e.cause
+              r.cause,
+              n
             );
           case 502:
             throw new f(
-              s,
+              o,
               m.bad_gateway,
               "Bad gateway.",
               void 0,
               `${R}`,
-              e.cause
+              r.cause,
+              n
             );
           case 503:
             throw new f(
-              s,
+              o,
               m.service_unavailable,
               "Service unavailable. Please try again later.",
               void 0,
               `${R}`,
-              e.cause
+              r.cause,
+              n
             );
           default: {
-            let r = "";
-            if (e.response.data)
+            let u = "";
+            if (r.response.data)
               try {
-                r = JSON.stringify(e.response.data);
+                u = JSON.stringify(r.response.data);
               } catch {
-                r = String(e.response.data);
+                u = String(r.response.data);
               }
-            const o = r ? `An unexpected error occurred: ${r}` : "An unexpected error occurred.";
+            const c = u ? `An unexpected error occurred: ${u}` : "An unexpected error occurred.";
             throw new f(
-              s,
-              m.unexpected_error,
               o,
+              m.unexpected_error,
+              c,
               void 0,
               `${R}`,
-              e.cause
+              r.cause,
+              n
             );
           }
         }
       }
     }
-    throw new S("Something went wrong.", e instanceof Error ? e : void 0);
+    throw new S("Something went wrong.", r instanceof Error ? r : void 0);
   }
-}, E = 4, L = [25, 50, 100], T = async (t) => {
-  if (t.getRefreshTokenWithOutcome) {
-    const { token: a, outcome: e, errorMessage: s } = await t.getRefreshTokenWithOutcome();
-    return { token: a, outcome: e, errorMessage: s };
+}, A = 4, x = [25, 50, 100], T = async (e) => {
+  if (e.getRefreshTokenWithOutcome) {
+    const { token: s, outcome: t, errorMessage: a } = await e.getRefreshTokenWithOutcome();
+    return { token: s, outcome: t, errorMessage: a };
   }
-  return { token: await t.getRefreshToken() };
-}, O = async (t) => {
-  let a = null, e, s;
-  for (let r = 0; r < E; r++) {
-    const o = await T(t);
-    if (a = o.token, e = o.outcome, s = o.errorMessage, a)
+  return { token: await e.getRefreshToken() };
+}, z = async (e) => {
+  let s = null, t, a;
+  for (let r = 0; r < A; r++) {
+    const n = await T(e);
+    if (s = n.token, t = n.outcome, a = n.errorMessage, s)
       return {
-        token: a,
+        token: s,
         attempt: r,
-        outcome: e,
-        errorMessage: s
+        outcome: t,
+        errorMessage: a
       };
-    const c = L[r];
-    c !== void 0 && await new Promise((l) => setTimeout(l, c));
+    const o = x[r];
+    o !== void 0 && await new Promise((u) => setTimeout(u, o));
   }
   return {
-    token: a,
-    attempt: E - 1,
-    outcome: e,
-    errorMessage: s
+    token: s,
+    attempt: A - 1,
+    outcome: t,
+    errorMessage: a
   };
-}, x = (t, a, e) => {
-  n.interceptors.response.use(
-    async (s) => {
+}, X = (e, s, t) => {
+  i.interceptors.response.use(
+    async (a) => {
       try {
-        if (N(s)) {
+        if (W(a)) {
           d.sendSessionRefreshEvent({
             name: "refresh_token_response"
           });
-          const r = s.data?.refreshToken;
+          const r = a.data?.refreshToken;
           r && (d.sendSessionRefreshEvent({
             name: "refresh_token_received"
           }), await Promise.race([
-            t.setRefreshToken(r),
+            e.setRefreshToken(r),
             new Promise(
-              (o, c) => setTimeout(() => c(new Error("setRefreshToken timed out after 5000ms")), 5e3)
+              (n, o) => setTimeout(() => o(new Error("setRefreshToken timed out after 5000ms")), 5e3)
             )
           ]), d.sendSessionRefreshEvent({
             name: "refresh_token_stored"
           }));
         }
       } catch (r) {
-        const o = r instanceof Error ? r.message : String(r);
+        const n = r instanceof Error ? r.message : String(r);
         d.sendSessionRefreshEvent({
           name: "refresh_token_store_failed",
-          error_message: o
+          error_message: n
         }), console.warn("Failed to store refresh token:", r);
       }
-      return s;
+      return a;
     },
-    (s) => Promise.reject(s)
-  ), n.interceptors.request.use(async (s) => {
-    if (X(s.url)) {
-      const r = F(s.url);
-      let o = null, c = 0, l, u;
+    (a) => Promise.reject(a)
+  ), i.interceptors.request.use(async (a) => {
+    if (F(a.url)) {
+      const r = K(a.url);
+      let n = null, o = 0, u, c;
       try {
-        const i = a ? await O(t) : { ...await T(t), attempt: 0 };
-        o = i.token, c = i.attempt, l = i.outcome, u = i.errorMessage;
-      } catch (i) {
-        if (u = i instanceof Error ? i.message : String(i), l = "error", d.sendSessionRefreshEvent({
+        const l = s ? await z(e) : { ...await T(e), attempt: 0 };
+        n = l.token, o = l.attempt, u = l.outcome, c = l.errorMessage;
+      } catch (l) {
+        if (c = l instanceof Error ? l.message : String(l), u = "error", d.sendSessionRefreshEvent({
           name: "refresh_token_retrieve_failed",
-          error_message: u
-        }), console.warn("Failed to retrieve refresh token:", i), r && e)
-          throw new A("error", u);
+          error_message: c
+        }), console.warn("Failed to retrieve refresh token:", l), r && t)
+          throw new y("error", c);
       }
-      if (o)
+      if (n)
         d.sendSessionRefreshEvent({
           name: "refresh_token_retrieved",
-          attempt: c,
-          read_outcome: l,
-          error_message: u
-        }), s.data = {
-          ...s.data,
-          refreshToken: o
+          attempt: o,
+          read_outcome: u,
+          error_message: c
+        }), a.data = {
+          ...a.data,
+          refreshToken: n
         };
       else if (d.sendSessionRefreshEvent({
         name: "refresh_token_missing",
-        attempt: c,
-        read_outcome: l,
-        error_message: u
-      }), r && e)
-        throw new A(
-          l === "error" ? "error" : "not_found",
-          u
+        attempt: o,
+        read_outcome: u,
+        error_message: c
+      }), r && t)
+        throw new y(
+          u === "error" ? "error" : "not_found",
+          c
         );
     }
-    if (z(s.url))
+    if (N(a.url))
       try {
         d.sendSessionRefreshEvent({
           name: "refresh_token_removing_token"
-        }), await t.removeRefreshToken();
+        }), await e.removeRefreshToken();
       } catch (r) {
         console.warn("Failed to remove refresh token:", r);
       }
-    return s;
+    return a;
   });
-}, z = (t) => t ? /^\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/logout$/.test(t) : !1, X = (t) => t ? /^\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(refresh|logout)$/.test(t) : !1, F = (t) => t ? /^\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/refresh$/.test(t) : !1, N = (t) => {
-  const a = t.config.url;
-  return a ? /^\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(verify\/(email|sms|siwe|oauth\/.*)|refresh)$/.test(
-    a
+}, N = (e) => e ? /^\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/logout$/.test(e) : !1, F = (e) => e ? /^\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(refresh|logout)$/.test(e) : !1, K = (e) => e ? /^\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/refresh$/.test(e) : !1, W = (e) => {
+  const s = e.config.url;
+  return s ? /^\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(verify\/(email|sms|siwe|oauth\/.*)|refresh)$/.test(
+    s
   ) : !1;
-}, W = (t) => {
-  if (!n.getUri() || n.getUri() === "")
+}, H = (e) => {
+  if (!i.getUri() || i.getUri() === "")
     throw new Error("CDP client URI not configured. Call configure() first.");
-  if (!t.url || t.url === "")
+  if (!e.url || e.url === "")
     throw new Error("AxiosRequestConfig URL is empty. This should never happen.");
-  if (!t.method || t.method === "")
+  if (!e.method || e.method === "")
     throw new Error("AxiosRequestConfig method is empty. This should never happen.");
-}, Z = (t) => t.method?.toString().toUpperCase() || "GET", v = (t) => {
-  if (!t.url)
+}, Z = (e) => e.method?.toString().toUpperCase() || "GET", v = (e) => {
+  if (!e.url)
     throw new Error("URL is required for authentication");
-  const e = (t.baseURL ?? n.getUri()) + t.url;
-  return new URL(e);
-}, y = (t) => {
-  const a = /^(\/platform)?\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(refresh|logout)$/, e = /^(\/platform)?\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(mfa)$/, s = /^(\/platform)?\/v2\/embedded-wallet-api\/projects\/[^/]+\/config$/, r = /^(\/platform)?\/v2\/embedded-wallet-api\/projects\/[^/]+\/attestation\/(challenge|register)$/;
-  return a.test(t) || e.test(t) || s.test(t) || r.test(t);
-}, B = (t) => !/^(\/platform)?\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/custom\/authenticate$/.test(t), _ = (t) => {
-  const a = /^(\/platform)?\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(init)$/, e = /^(\/platform)?\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/verify\//;
-  return a.test(t) || e.test(t);
-}, H = (t) => /^\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(init$|verify\/|refresh$|logout$)/.test(
-  t
-), K = (t) => [
+  const t = (e.baseURL ?? i.getUri()) + e.url;
+  return new URL(t);
+}, E = (e) => {
+  const s = /^(\/platform)?\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(refresh|logout)$/, t = /^(\/platform)?\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(mfa)$/, a = /^(\/platform)?\/v2\/embedded-wallet-api\/projects\/[^/]+\/config$/, r = /^(\/platform)?\/v2\/embedded-wallet-api\/projects\/[^/]+\/attestation\/(challenge|register)$/;
+  return s.test(e) || t.test(e) || a.test(e) || r.test(e);
+}, B = (e) => !/^(\/platform)?\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/custom\/authenticate$/.test(e), _ = (e) => {
+  const s = /^(\/platform)?\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(init)$/, t = /^(\/platform)?\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/verify\//;
+  return s.test(e) || t.test(e);
+}, J = (e) => /^\/v2\/embedded-wallet-api\/projects\/[^/]+\/auth\/(init$|verify\/|refresh$|logout$)/.test(
+  e
+), G = (e) => [
   // Auth flows: prevent account takeover on mobile clients
   /\/auth\/verify\//,
   // VerifyEmailAuthentication, VerifySmsAuthentication, VerifyOAuthCode, VerifyOAuthEndUserIdentity
   /\/auth\/refresh$/
   // RefreshAccessToken
-].some((e) => e.test(t));
+].some((t) => t.test(e));
 export {
-  re as cdpApiClient,
-  ee as configureCdpApiClient,
-  te as setAuthManager,
+  ae as cdpApiClient,
+  re as configureCdpApiClient,
+  se as setAuthManager,
   M as setCookieDomain
 };