@coinbase/cdp-core 0.0.105 → 0.0.107

package/dist/native/index.native97.js

@@ -1,5 +1,34 @@
-import { __require as r } from "./index.native134.js";
-var f = r();
+function a(e) {
+  if (typeof btoa < "u")
+    return btoa(
+      Array.from(e).map((t) => String.fromCharCode(t)).join("")
+    );
+  const c = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
+  let r = "";
+  for (let t = 0; t < e.length; t += 3) {
+    const h = e[t], n = t + 1 < e.length ? e[t + 1] : 0, s = t + 2 < e.length ? e[t + 2] : 0, o = h << 16 | n << 8 | s;
+    r += c.charAt(o >> 18 & 63), r += c.charAt(o >> 12 & 63), r += t + 1 < e.length ? c.charAt(o >> 6 & 63) : "=", r += t + 2 < e.length ? c.charAt(o & 63) : "=";
+  }
+  return r;
+}
+function g(e) {
+  if (typeof atob < "u") {
+    const n = atob(e), s = new Uint8Array(n.length);
+    for (let o = 0; o < n.length; o++)
+      s[o] = n.charCodeAt(o);
+    return s;
+  }
+  const c = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/", r = {};
+  for (let n = 0; n < c.length; n++)
+    r[c[n]] = n;
+  const t = e.replace(/[^A-Za-z0-9+/]/g, ""), h = [];
+  for (let n = 0; n < t.length; n += 4) {
+    const s = r[t[n]] || 0, o = r[t[n + 1]] || 0, l = r[t[n + 2]] || 0, f = r[t[n + 3]] || 0, i = s << 18 | o << 12 | l << 6 | f;
+    h.push(i >> 16 & 255), n + 2 < t.length && h.push(i >> 8 & 255), n + 3 < t.length && h.push(i & 255);
+  }
+  return new Uint8Array(h);
+}
 export {
-  f as b
+  g as decodeBase64,
+  a as encodeBase64
 };

package/dist/native/index.native98.js

@@ -1,46 +1,20 @@
-import { InputValidationError as a } from "./index.native86.js";
-import { getPlatformCrypto as l } from "./index.native10.js";
-function y(e, o) {
-  if (e.period !== void 0 && e.periodInDays !== void 0)
-    throw new a(
-      "Cannot specify both 'period' and 'periodInDays'. Please provide only one."
-    );
-  if (e.period === void 0 && e.periodInDays === void 0)
-    throw new a("Must specify either 'period' (in seconds) or 'periodInDays'.");
-  const t = e.period ?? e.periodInDays * 24 * 60 * 60, d = /* @__PURE__ */ new Date(), c = e.start ?? d, r = e.end, f = Math.floor(c.getTime() / 1e3), E = r ? Math.floor(r.getTime() / 1e3) : 281474976710655;
-  return {
-    account: e.account,
-    spender: e.spender,
-    allowance: e.allowance,
-    token: D(e.token, o),
-    period: t,
-    start: f,
-    end: E,
-    salt: e.salt ?? l().generateRandomSalt(),
-    extraData: e.extraData ?? "0x"
-  };
+import "@coinbase/cdp-api-client";
+import "viem";
+const u = async (c) => await c.isSignedIn();
+async function A(c, a, r) {
+  if (!await u(a))
+    throw new Error("User not signed in");
+  const t = a.getUser();
+  if ("evmAccount" in c && !(t.evmAccounts?.find((n) => n === c.evmAccount) || t.evmAccountObjects?.find((n) => n.address === c.evmAccount)))
+    throw new Error("EVM account not found");
+  if ("evmSmartAccount" in c && !(t.evmSmartAccounts?.find((n) => n === c.evmSmartAccount) || t.evmSmartAccountObjects?.find((n) => n.address === c.evmSmartAccount)))
+    throw new Error("EVM Smart Account not found");
+  if ("solanaAccount" in c && !(t.solanaAccounts?.find((n) => n === c.solanaAccount) || t.solanaAccountObjects?.find((n) => n.address === c.solanaAccount)))
+    throw new Error("Solana account not found");
+  const e = await a.getWalletSecretId();
+  return r({ ...c, user: t, walletSecretId: e });
 }
-function D(e, o) {
-  if (e === "eth")
-    return "0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE";
-  if (e === "usdc") {
-    const t = n[o]?.usdc;
-    if (!t)
-      throw new a(
-        `Automatic token address lookup for ${e} is not supported on ${o}. Please provide the token address manually.`
-      );
-    return t;
-  }
-  return e;
-}
-const n = {
-  base: {
-    usdc: "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"
-  },
-  "base-sepolia": {
-    usdc: "0x036CbD53842c5426634e7929541eC2318f3dCF7e"
-  }
-};
 export {
-  y as toSpendPermission
+  u as isSignedIn,
+  A as withAuth
 };

package/dist/native/index.native99.js

@@ -1,26 +1,47 @@
-import "@coinbase/cdp-api-client";
-const e = (t) => ({
-  userId: t.userId,
-  // Deprecated fields - keep for backward compatibility
-  evmAccounts: t.evmAccounts?.map((c) => c) ?? [],
-  evmSmartAccounts: t.evmSmartAccounts?.map((c) => c) ?? [],
-  solanaAccounts: t.solanaAccounts?.map((c) => c) ?? [],
-  // New account object fields
-  evmAccountObjects: t.evmAccountObjects,
-  evmSmartAccountObjects: t.evmSmartAccountObjects,
-  solanaAccountObjects: t.solanaAccountObjects,
-  authenticationMethods: t.authenticationMethods.reduce((c, a) => (c[a.type] = a, c), {}),
-  mfaMethods: t.mfaMethods,
-  lastAuthenticatedAt: t.lastAuthenticatedAt
-}), s = (t, c, a) => {
-  const o = new Date(c).getTime();
-  return {
-    accessToken: t,
-    expiresAt: o,
-    user: e(a)
-  };
-};
+import { SendEvmTransactionWithEndUserAccountBodyNetwork as i } from "@coinbase/cdp-api-client";
+const t = (e) => !e || typeof e != "object" ? e : Array.isArray(e) ? e.map(t) : Object.keys(e).sort().reduce(
+  (r, n) => (r[n] = t(e[n]), r),
+  {}
+), p = (e) => Object.values(i).includes(
+  e
+), a = {
+  "base-sepolia": 84532,
+  base: 8453,
+  ethereum: 1,
+  "ethereum-sepolia": 11155111,
+  avalanche: 43114,
+  polygon: 137,
+  optimism: 10,
+  arbitrum: 42161,
+  "arbitrum-sepolia": 421614,
+  world: 480,
+  "world-sepolia": 4801
+}, u = Object.fromEntries(
+  Object.entries(a).map(([e, r]) => [r, e])
+), c = (e) => Object.values(a).includes(
+  e
+), s = {
+  "base-sepolia": 84532,
+  base: 8453,
+  ethereum: 1,
+  "ethereum-sepolia": 11155111,
+  avalanche: 43114,
+  polygon: 137,
+  optimism: 10,
+  arbitrum: 42161,
+  zora: 7777777,
+  bnb: 56
+}, m = Object.fromEntries(
+  Object.entries(s).map(([e, r]) => [r, e])
+), d = (e) => Object.values(s).includes(
+  e
+);
 export {
-  s as toAuthState,
-  e as toAuthStateUser
+  c as isChainIdSupportedForCDPSends,
+  d as isChainIdSupportedForCDPUserOps,
+  p as isChainSupportedForCDPSends,
+  u as sendTransactionChainIdToNameMapping,
+  t as sortKeys,
+  m as userOperationChainIdToNameMapping,
+  s as userOperationNameToChainIdMapping
 };

package/dist/native-types/actions/createBitcoinAccount.d.ts

@@ -0,0 +1,26 @@
+import { EndUserBtcAccount, CreateEndUserBtcAccountBodyAddressType, CreateEndUserBtcAccountBodyNetwork } from '@coinbase/cdp-api-client';
+/**
+ * Options for creating a Bitcoin HD (Hierarchical Deterministic) account.
+ */
+export type CreateBitcoinAccountOptions = {
+    /** The Bitcoin network. Defaults to "bitcoin-testnet". */
+    network?: CreateEndUserBtcAccountBodyNetwork;
+    /** The Bitcoin address type. Defaults to "segwit" (BIP-84). */
+    addressType?: CreateEndUserBtcAccountBodyAddressType;
+    /** Optional idempotency key for safe retries. */
+    idempotencyKey?: string;
+};
+/**
+ * The result of creating a Bitcoin HD account.
+ */
+export type CreateBitcoinAccountResult = EndUserBtcAccount;
+/**
+ * Creates a Bitcoin HD (Hierarchical Deterministic) account for the current user.
+ * The account uses BIP-84 derivation (segwit) and returns an extended public key (xpub)
+ * that can be used to derive unlimited child addresses for UTXO discovery.
+ *
+ * @param options - Options for creating the account.
+ * @returns The newly created Bitcoin account (xpub, network, addressType).
+ * @throws Error if the user is not signed in or account creation fails.
+ */
+export declare function createBitcoinAccount(options?: CreateBitcoinAccountOptions): Promise<CreateBitcoinAccountResult>;

package/dist/native-types/actions/linkSiwe.d.ts

@@ -0,0 +1,49 @@
+import { EvmAddress } from '../types.js';
+/** Request parameters for linkSiwe. */
+export type LinkSiweOptions = {
+    /** The ERC-55 checksummed Ethereum address to link to the current user. */
+    address: EvmAddress;
+    /** The EIP-155 chain ID of the network the user is authenticating on. */
+    chainId: number;
+    /** The RFC 3986 authority of the application requesting the signature (e.g., the hostname). */
+    domain: string;
+    /** The RFC 3986 URI of the resource that is the subject of the signing. */
+    uri: string;
+    /** An optional human-readable ASCII assertion that the user will see when signing. */
+    statement?: string;
+    /** An optional list of URIs for information or references the user wishes to have resolved as part of authentication. */
+    resources?: string[];
+    /** Optional idempotency key for safe retries. */
+    idempotencyKey?: string;
+};
+/** Result of linkSiwe. */
+export type LinkSiweResult = {
+    /** The flow ID to use in verifySiweSignature. */
+    flowId: string;
+    /** The EIP-4361-formatted SIWE message for the end user to sign with their Ethereum wallet. */
+    message: string;
+    /** The cryptographic nonce embedded in the message. */
+    nonce: string;
+    /** The date and time at which the SIWE challenge expires, in ISO 8601 format. */
+    expirationTime: string;
+};
+/**
+ * Links an Ethereum address to the current user via Sign In With Ethereum (SIWE/EIP-4361).
+ * The user must already be signed in. The server returns a pre-formatted SIWE message for the
+ * user to sign with their Ethereum wallet. Pass the resulting `flowId` and the wallet signature
+ * to `verifySiweSignature` to complete linking.
+ *
+ * @param options - The options for the link operation.
+ * @returns The result of the link initiation, including the SIWE message to sign.
+ * @example
+ * ```typescript lines
+ * const result = await linkSiwe({
+ *   address: "0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045",
+ *   chainId: 1,
+ *   domain: "example.com",
+ *   uri: "https://example.com",
+ * });
+ * // Sign result.message with the user's wallet, then call verifySiweSignature
+ * ```
+ */
+export declare const linkSiwe: (options: LinkSiweOptions) => Promise<LinkSiweResult>;

package/dist/native-types/actions/signBitcoinHash.d.ts

@@ -0,0 +1,41 @@
+import { SignBtcHashWithEndUserAccountBodyAddressType, SignBtcHashWithEndUserAccountBodyNetwork, SignBtcHashWithEndUserAccountBodyChange } from '@coinbase/cdp-api-client';
+/**
+ * Options for signing a Bitcoin sighash.
+ */
+export type SignBitcoinHashOptions = {
+    /** The Bitcoin network. Defaults to "bitcoin-testnet". */
+    network?: SignBtcHashWithEndUserAccountBodyNetwork;
+    /** The Bitcoin address type. Defaults to "segwit". */
+    addressType?: SignBtcHashWithEndUserAccountBodyAddressType;
+    /** BIP-32 change level: 0 for external (receive) addresses, 1 for internal (change) addresses. */
+    change: SignBtcHashWithEndUserAccountBodyChange;
+    /** BIP-32 address index — must match the index used to derive the address controlling the UTXO. */
+    addressIndex: number;
+    /**
+     * The 32-byte sighash to sign, as a 64-character hex string (no 0x prefix).
+     * Compute this using hashForWitnessV0 for native SegWit P2WPKH inputs.
+     */
+    hash: string;
+    /** Optional idempotency key for safe retries. */
+    idempotencyKey?: string;
+};
+/**
+ * The result of signing a Bitcoin sighash.
+ */
+export type SignBitcoinHashResult = {
+    /**
+     * The DER-encoded ECDSA signature as a bare hex string (no 0x prefix), 70–72 bytes.
+     * To construct the SegWit witness: append 0x01 (SIGHASH_ALL) to get the full sig,
+     * then push [fullSig, compressedPubKey] onto the witness stack.
+     */
+    signature: string;
+};
+/**
+ * Signs a 32-byte Bitcoin sighash using the end user's HD wallet child key.
+ * One call is required per UTXO input in the transaction.
+ *
+ * @param options - The signing options including derivation path and sighash.
+ * @returns The DER-encoded ECDSA signature (hex, no 0x prefix).
+ * @throws Error if the user is not signed in or signing fails.
+ */
+export declare const signBitcoinHash: (options: SignBitcoinHashOptions) => Promise<SignBitcoinHashResult>;

package/dist/native-types/auth/toAuthState.d.ts

@@ -1,4 +1,4 @@
-import { EndUser, EndUserEvmAccount, EndUserEvmSmartAccount, EndUserSolanaAccount, MFAMethods } from '@coinbase/cdp-api-client';
+import { EndUser, EndUserEvmAccount, EndUserEvmSmartAccount, EndUserSolanaAccount, EndUserBtcAccount, MFAMethods } from '@coinbase/cdp-api-client';
 import { AuthState } from './types.js';
 import { AuthenticationMethods } from '../types.js';
 /**
@@ -16,6 +16,7 @@ export declare const toAuthStateUser: (endUser: EndUser) => {
     evmAccountObjects: EndUserEvmAccount[];
     evmSmartAccountObjects: EndUserEvmSmartAccount[];
     solanaAccountObjects: EndUserSolanaAccount[];
+    btcAccountObjects: EndUserBtcAccount[] | undefined;
     authenticationMethods: AuthenticationMethods;
     mfaMethods: MFAMethods | undefined;
     lastAuthenticatedAt: string | undefined;

package/dist/native-types/index.d.ts

@@ -11,6 +11,7 @@ export { linkEmail } from './actions/linkEmail.js';
 export { linkOAuth } from './actions/linkOAuth.js';
 export { linkApple } from './actions/linkApple.js';
 export { linkTelegram } from './actions/linkTelegram.js';
+export { linkSiwe, type LinkSiweOptions, type LinkSiweResult } from './actions/linkSiwe.js';
 export { createEvmEoaAccount, type CreateEvmEoaAccountOptions, } from './actions/createEvmEoaAccount.js';
 export { createEvmSmartAccount, type CreateEvmSmartAccountOptions, } from './actions/createEvmSmartAccount.js';
 export { createEvmEip7702Delegation, type CreateEvmEip7702DelegationOptions, type CreateEvmEip7702DelegationResult, } from './actions/createEvmEip7702Delegation.js';
@@ -25,6 +26,8 @@ export { createDelegationForAccount, type CreateDelegationForAccountOptions, typ
 export { getDelegationForAccount, type GetDelegationForAccountOptions, type GetDelegationForAccountResult, } from './actions/getDelegationForAccount.js';
 export { revokeDelegationForAccount, type RevokeDelegationForAccountOptions, } from './actions/revokeDelegationForAccount.js';
 export { createSolanaAccount, type CreateSolanaAccountOptions, } from './actions/createSolanaAccount.js';
+export { createBitcoinAccount, type CreateBitcoinAccountOptions, type CreateBitcoinAccountResult, } from './actions/createBitcoinAccount.js';
+export { signBitcoinHash, type SignBitcoinHashOptions, type SignBitcoinHashResult, } from './actions/signBitcoinHash.js';
 export { sendEvmEoaUsdc, type SendEvmEoaUsdcOptions, type SendEvmEoaUsdcResult, } from './actions/sendEvmEoaUsdc.js';
 export { sendEvmSmartAccountUsdc, type SendEvmSmartAccountUsdcOptions, type SendEvmSmartAccountUsdcResult, } from './actions/sendEvmSmartAccountUsdc.js';
 export { sendSolanaUsdc, type SendSolanaUsdcOptions, type SendSolanaUsdcResult, type SendSolanaUsdcNetwork, } from './actions/sendSolanaUsdc.js';

package/dist/native-types/index.native.d.ts

@@ -15,6 +15,7 @@ export { linkSms } from './actions/linkSms.js';
 export { linkEmail } from './actions/linkEmail.js';
 export { linkOAuth } from './actions/linkOAuth.js';
 export { linkApple } from './actions/linkApple.js';
+export { linkSiwe, type LinkSiweOptions, type LinkSiweResult } from './actions/linkSiwe.js';
 export { createEvmEoaAccount } from './actions/createEvmEoaAccount.js';
 export { createEvmSmartAccount, type CreateEvmSmartAccountOptions, } from './actions/createEvmSmartAccount.js';
 export { createEvmEip7702Delegation, type CreateEvmEip7702DelegationOptions, type CreateEvmEip7702DelegationResult, } from './actions/createEvmEip7702Delegation.js';
@@ -29,6 +30,8 @@ export { createDelegationForAccount, type CreateDelegationForAccountOptions, typ
 export { getDelegationForAccount, type GetDelegationForAccountOptions, type GetDelegationForAccountResult, } from './actions/getDelegationForAccount.js';
 export { revokeDelegationForAccount, type RevokeDelegationForAccountOptions, } from './actions/revokeDelegationForAccount.js';
 export { createSolanaAccount } from './actions/createSolanaAccount.js';
+export { createBitcoinAccount, type CreateBitcoinAccountOptions, type CreateBitcoinAccountResult, } from './actions/createBitcoinAccount.js';
+export { signBitcoinHash, type SignBitcoinHashOptions, type SignBitcoinHashResult, } from './actions/signBitcoinHash.js';
 export { sendEvmEoaUsdc, type SendEvmEoaUsdcOptions, type SendEvmEoaUsdcResult, } from './actions/sendEvmEoaUsdc.js';
 export { sendEvmSmartAccountUsdc, type SendEvmSmartAccountUsdcOptions, type SendEvmSmartAccountUsdcResult, } from './actions/sendEvmSmartAccountUsdc.js';
 export { sendSolanaUsdc, type SendSolanaUsdcOptions, type SendSolanaUsdcResult, type SendSolanaUsdcNetwork, } from './actions/sendSolanaUsdc.js';

package/dist/native-types/index.web.d.ts

@@ -15,6 +15,7 @@ export { linkSms } from './actions/linkSms.js';
 export { linkEmail } from './actions/linkEmail.js';
 export { linkOAuth } from './actions/linkOAuth.js';
 export { linkApple } from './actions/linkApple.js';
+export { linkSiwe, type LinkSiweOptions, type LinkSiweResult } from './actions/linkSiwe.js';
 export { createEvmEoaAccount } from './actions/createEvmEoaAccount.js';
 export { createEvmSmartAccount, type CreateEvmSmartAccountOptions, } from './actions/createEvmSmartAccount.js';
 export { createEvmEip7702Delegation, type CreateEvmEip7702DelegationOptions, type CreateEvmEip7702DelegationResult, } from './actions/createEvmEip7702Delegation.js';
@@ -29,6 +30,8 @@ export { createDelegationForAccount, type CreateDelegationForAccountOptions, typ
 export { getDelegationForAccount, type GetDelegationForAccountOptions, type GetDelegationForAccountResult, } from './actions/getDelegationForAccount.js';
 export { revokeDelegationForAccount, type RevokeDelegationForAccountOptions, } from './actions/revokeDelegationForAccount.js';
 export { createSolanaAccount } from './actions/createSolanaAccount.js';
+export { createBitcoinAccount, type CreateBitcoinAccountOptions, type CreateBitcoinAccountResult, } from './actions/createBitcoinAccount.js';
+export { signBitcoinHash, type SignBitcoinHashOptions, type SignBitcoinHashResult, } from './actions/signBitcoinHash.js';
 export { sendEvmEoaUsdc, type SendEvmEoaUsdcOptions, type SendEvmEoaUsdcResult, } from './actions/sendEvmEoaUsdc.js';
 export { sendEvmSmartAccountUsdc, type SendEvmSmartAccountUsdcOptions, type SendEvmSmartAccountUsdcResult, } from './actions/sendEvmSmartAccountUsdc.js';
 export { sendSolanaUsdc, type SendSolanaUsdcOptions, type SendSolanaUsdcResult, type SendSolanaUsdcNetwork, } from './actions/sendSolanaUsdc.js';

package/dist/native-types/mfa/protectedActions.d.ts

@@ -1,5 +1,6 @@
 import { createEvmKeyExportIframe, createSolanaKeyExportIframe } from '../actions/createKeyExportIframe.js';
 import { SignEvmHashOptions, SignEvmHashResult, SignEvmTransactionOptions, SignEvmTransactionResult, SignSolanaTransactionOptions, SignSolanaTransactionResult, SendEvmTransactionOptions, SendEvmTransactionResult, SendSolanaTransactionOptions, SendSolanaTransactionResult, SignEvmMessageOptions, SignSolanaMessageOptions, SignSolanaMessageResult, SignEvmTypedDataOptions, SignEvmTypedDataResult, SendUserOperationOptions, SendUserOperationResult, ExportEvmAccountOptions, ExportEvmAccountResult, ExportSolanaAccountOptions, ExportSolanaAccountResult } from '../types.js';
+import { SignBitcoinHashOptions, SignBitcoinHashResult } from '../actions/signBitcoinHash.js';
 /**
  * Map of MFA-protected functions to ensure type safety.
  * If a function is renamed, the import will fail and this file won't compile.
@@ -18,6 +19,7 @@ export declare const MFA_PROTECTED_FUNCTIONS: {
     readonly sendUserOperation: (options: SendUserOperationOptions) => Promise< SendUserOperationResult>;
     readonly exportEvmAccount: (options: ExportEvmAccountOptions) => Promise< ExportEvmAccountResult>;
     readonly exportSolanaAccount: (options: ExportSolanaAccountOptions) => Promise< ExportSolanaAccountResult>;
+    readonly signBitcoinHash: (options: SignBitcoinHashOptions) => Promise< SignBitcoinHashResult>;
     readonly createEvmKeyExportIframe: typeof createEvmKeyExportIframe;
     readonly createSolanaKeyExportIframe: typeof createSolanaKeyExportIframe;
 };

package/dist/native-types/types.d.ts

@@ -1,4 +1,4 @@
-import { SendEvmTransactionWithEndUserAccountBodyNetwork, SendSolanaTransactionWithEndUserAccountBodyNetwork, APIError, APIErrorType, ErrorType, HttpErrorType, EvmUserOperation, EvmCall as EvmUserOperationCall, EvmUserOperationNetwork, EvmUserOperationStatus, OAuth2ProviderType, OAuth2Authentication, TelegramAuthentication, MFAMethods, MfaMethod, EndUserEvmAccount, EndUserSolanaAccount, EndUserEvmSmartAccount, UserOperationReceipt, TokenFee, GetEndUserEvmSwapPrice200IssuesAllowance, GetEndUserEvmSwapPrice200IssuesBalance } from '@coinbase/cdp-api-client';
+import { SendEvmTransactionWithEndUserAccountBodyNetwork, SendSolanaTransactionWithEndUserAccountBodyNetwork, APIError, APIErrorType, ErrorType, HttpErrorType, EvmUserOperation, EvmCall as EvmUserOperationCall, EvmUserOperationNetwork, EvmUserOperationStatus, OAuth2ProviderType, OAuth2Authentication, TelegramAuthentication, MFAMethods, MfaMethod, EndUserEvmAccount, EndUserSolanaAccount, EndUserEvmSmartAccount, EndUserBtcAccount, UserOperationReceipt, TokenFee, GetEndUserEvmSwapPrice200IssuesAllowance, GetEndUserEvmSwapPrice200IssuesBalance } from '@coinbase/cdp-api-client';
 import { TransactionSerializableEIP1559 } from 'viem';
 export { 
 /** The API error class */
@@ -23,6 +23,8 @@ type MFAMethods,
 type EndUserEvmAccount, 
 /** Solana account object with address and createdAt */
 type EndUserSolanaAccount, 
+/** Bitcoin HD account object with extendedPublicKey (xpub), network, and addressType */
+type EndUserBtcAccount, 
 /** EVM smart account object with address, ownerAddresses, and createdAt */
 type EndUserEvmSmartAccount, 
 /** User operation receipt from ERC-4337 */
@@ -189,6 +191,8 @@ export type User = {
     evmSmartAccountObjects?: EndUserEvmSmartAccount[];
     /** The Solana account objects associated with the user. Users can have up to 10 Solana accounts. */
     solanaAccountObjects?: EndUserSolanaAccount[];
+    /** The Bitcoin HD account objects associated with the user. One per addressType+network combination. */
+    btcAccountObjects?: EndUserBtcAccount[];
     /** The MFA methods enrolled for the user. */
     mfaMethods?: MFAMethods;
     /** The date and time when the user was last authenticated, in ISO 8601 format. */

package/dist/native-types/version.d.ts

@@ -2,4 +2,4 @@
  * Current version of @coinbase/cdp-core package.
  * This file is auto-generated by scripts/sync-versions.js
  */
-export declare const VERSION = "0.0.105";
+export declare const VERSION = "0.0.106";

package/dist/types/actions/createBitcoinAccount.d.ts

@@ -0,0 +1,26 @@
+import { EndUserBtcAccount, CreateEndUserBtcAccountBodyAddressType, CreateEndUserBtcAccountBodyNetwork } from '@coinbase/cdp-api-client';
+/**
+ * Options for creating a Bitcoin HD (Hierarchical Deterministic) account.
+ */
+export type CreateBitcoinAccountOptions = {
+    /** The Bitcoin network. Defaults to "bitcoin-testnet". */
+    network?: CreateEndUserBtcAccountBodyNetwork;
+    /** The Bitcoin address type. Defaults to "segwit" (BIP-84). */
+    addressType?: CreateEndUserBtcAccountBodyAddressType;
+    /** Optional idempotency key for safe retries. */
+    idempotencyKey?: string;
+};
+/**
+ * The result of creating a Bitcoin HD account.
+ */
+export type CreateBitcoinAccountResult = EndUserBtcAccount;
+/**
+ * Creates a Bitcoin HD (Hierarchical Deterministic) account for the current user.
+ * The account uses BIP-84 derivation (segwit) and returns an extended public key (xpub)
+ * that can be used to derive unlimited child addresses for UTXO discovery.
+ *
+ * @param options - Options for creating the account.
+ * @returns The newly created Bitcoin account (xpub, network, addressType).
+ * @throws Error if the user is not signed in or account creation fails.
+ */
+export declare function createBitcoinAccount(options?: CreateBitcoinAccountOptions): Promise<CreateBitcoinAccountResult>;

package/dist/types/actions/linkSiwe.d.ts

@@ -0,0 +1,49 @@
+import { EvmAddress } from '../types.js';
+/** Request parameters for linkSiwe. */
+export type LinkSiweOptions = {
+    /** The ERC-55 checksummed Ethereum address to link to the current user. */
+    address: EvmAddress;
+    /** The EIP-155 chain ID of the network the user is authenticating on. */
+    chainId: number;
+    /** The RFC 3986 authority of the application requesting the signature (e.g., the hostname). */
+    domain: string;
+    /** The RFC 3986 URI of the resource that is the subject of the signing. */
+    uri: string;
+    /** An optional human-readable ASCII assertion that the user will see when signing. */
+    statement?: string;
+    /** An optional list of URIs for information or references the user wishes to have resolved as part of authentication. */
+    resources?: string[];
+    /** Optional idempotency key for safe retries. */
+    idempotencyKey?: string;
+};
+/** Result of linkSiwe. */
+export type LinkSiweResult = {
+    /** The flow ID to use in verifySiweSignature. */
+    flowId: string;
+    /** The EIP-4361-formatted SIWE message for the end user to sign with their Ethereum wallet. */
+    message: string;
+    /** The cryptographic nonce embedded in the message. */
+    nonce: string;
+    /** The date and time at which the SIWE challenge expires, in ISO 8601 format. */
+    expirationTime: string;
+};
+/**
+ * Links an Ethereum address to the current user via Sign In With Ethereum (SIWE/EIP-4361).
+ * The user must already be signed in. The server returns a pre-formatted SIWE message for the
+ * user to sign with their Ethereum wallet. Pass the resulting `flowId` and the wallet signature
+ * to `verifySiweSignature` to complete linking.
+ *
+ * @param options - The options for the link operation.
+ * @returns The result of the link initiation, including the SIWE message to sign.
+ * @example
+ * ```typescript lines
+ * const result = await linkSiwe({
+ *   address: "0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045",
+ *   chainId: 1,
+ *   domain: "example.com",
+ *   uri: "https://example.com",
+ * });
+ * // Sign result.message with the user's wallet, then call verifySiweSignature
+ * ```
+ */
+export declare const linkSiwe: (options: LinkSiweOptions) => Promise<LinkSiweResult>;

package/dist/types/actions/signBitcoinHash.d.ts

@@ -0,0 +1,41 @@
+import { SignBtcHashWithEndUserAccountBodyAddressType, SignBtcHashWithEndUserAccountBodyNetwork, SignBtcHashWithEndUserAccountBodyChange } from '@coinbase/cdp-api-client';
+/**
+ * Options for signing a Bitcoin sighash.
+ */
+export type SignBitcoinHashOptions = {
+    /** The Bitcoin network. Defaults to "bitcoin-testnet". */
+    network?: SignBtcHashWithEndUserAccountBodyNetwork;
+    /** The Bitcoin address type. Defaults to "segwit". */
+    addressType?: SignBtcHashWithEndUserAccountBodyAddressType;
+    /** BIP-32 change level: 0 for external (receive) addresses, 1 for internal (change) addresses. */
+    change: SignBtcHashWithEndUserAccountBodyChange;
+    /** BIP-32 address index — must match the index used to derive the address controlling the UTXO. */
+    addressIndex: number;
+    /**
+     * The 32-byte sighash to sign, as a 64-character hex string (no 0x prefix).
+     * Compute this using hashForWitnessV0 for native SegWit P2WPKH inputs.
+     */
+    hash: string;
+    /** Optional idempotency key for safe retries. */
+    idempotencyKey?: string;
+};
+/**
+ * The result of signing a Bitcoin sighash.
+ */
+export type SignBitcoinHashResult = {
+    /**
+     * The DER-encoded ECDSA signature as a bare hex string (no 0x prefix), 70–72 bytes.
+     * To construct the SegWit witness: append 0x01 (SIGHASH_ALL) to get the full sig,
+     * then push [fullSig, compressedPubKey] onto the witness stack.
+     */
+    signature: string;
+};
+/**
+ * Signs a 32-byte Bitcoin sighash using the end user's HD wallet child key.
+ * One call is required per UTXO input in the transaction.
+ *
+ * @param options - The signing options including derivation path and sighash.
+ * @returns The DER-encoded ECDSA signature (hex, no 0x prefix).
+ * @throws Error if the user is not signed in or signing fails.
+ */
+export declare const signBitcoinHash: (options: SignBitcoinHashOptions) => Promise<SignBitcoinHashResult>;

package/dist/types/auth/toAuthState.d.ts

@@ -1,4 +1,4 @@
-import { EndUser, EndUserEvmAccount, EndUserEvmSmartAccount, EndUserSolanaAccount, MFAMethods } from '@coinbase/cdp-api-client';
+import { EndUser, EndUserEvmAccount, EndUserEvmSmartAccount, EndUserSolanaAccount, EndUserBtcAccount, MFAMethods } from '@coinbase/cdp-api-client';
 import { AuthState } from './types.js';
 import { AuthenticationMethods } from '../types.js';
 /**
@@ -16,6 +16,7 @@ export declare const toAuthStateUser: (endUser: EndUser) => {
     evmAccountObjects: EndUserEvmAccount[];
     evmSmartAccountObjects: EndUserEvmSmartAccount[];
     solanaAccountObjects: EndUserSolanaAccount[];
+    btcAccountObjects: EndUserBtcAccount[] | undefined;
     authenticationMethods: AuthenticationMethods;
     mfaMethods: MFAMethods | undefined;
     lastAuthenticatedAt: string | undefined;

package/dist/types/index.d.ts

@@ -11,6 +11,7 @@ export { linkEmail } from './actions/linkEmail.js';
 export { linkOAuth } from './actions/linkOAuth.js';
 export { linkApple } from './actions/linkApple.js';
 export { linkTelegram } from './actions/linkTelegram.js';
+export { linkSiwe, type LinkSiweOptions, type LinkSiweResult } from './actions/linkSiwe.js';
 export { createEvmEoaAccount, type CreateEvmEoaAccountOptions, } from './actions/createEvmEoaAccount.js';
 export { createEvmSmartAccount, type CreateEvmSmartAccountOptions, } from './actions/createEvmSmartAccount.js';
 export { createEvmEip7702Delegation, type CreateEvmEip7702DelegationOptions, type CreateEvmEip7702DelegationResult, } from './actions/createEvmEip7702Delegation.js';
@@ -25,6 +26,8 @@ export { createDelegationForAccount, type CreateDelegationForAccountOptions, typ
 export { getDelegationForAccount, type GetDelegationForAccountOptions, type GetDelegationForAccountResult, } from './actions/getDelegationForAccount.js';
 export { revokeDelegationForAccount, type RevokeDelegationForAccountOptions, } from './actions/revokeDelegationForAccount.js';
 export { createSolanaAccount, type CreateSolanaAccountOptions, } from './actions/createSolanaAccount.js';
+export { createBitcoinAccount, type CreateBitcoinAccountOptions, type CreateBitcoinAccountResult, } from './actions/createBitcoinAccount.js';
+export { signBitcoinHash, type SignBitcoinHashOptions, type SignBitcoinHashResult, } from './actions/signBitcoinHash.js';
 export { sendEvmEoaUsdc, type SendEvmEoaUsdcOptions, type SendEvmEoaUsdcResult, } from './actions/sendEvmEoaUsdc.js';
 export { sendEvmSmartAccountUsdc, type SendEvmSmartAccountUsdcOptions, type SendEvmSmartAccountUsdcResult, } from './actions/sendEvmSmartAccountUsdc.js';
 export { sendSolanaUsdc, type SendSolanaUsdcOptions, type SendSolanaUsdcResult, type SendSolanaUsdcNetwork, } from './actions/sendSolanaUsdc.js';

package/dist/types/index.native.d.ts

@@ -15,6 +15,7 @@ export { linkSms } from './actions/linkSms.js';
 export { linkEmail } from './actions/linkEmail.js';
 export { linkOAuth } from './actions/linkOAuth.js';
 export { linkApple } from './actions/linkApple.js';
+export { linkSiwe, type LinkSiweOptions, type LinkSiweResult } from './actions/linkSiwe.js';
 export { createEvmEoaAccount } from './actions/createEvmEoaAccount.js';
 export { createEvmSmartAccount, type CreateEvmSmartAccountOptions, } from './actions/createEvmSmartAccount.js';
 export { createEvmEip7702Delegation, type CreateEvmEip7702DelegationOptions, type CreateEvmEip7702DelegationResult, } from './actions/createEvmEip7702Delegation.js';
@@ -29,6 +30,8 @@ export { createDelegationForAccount, type CreateDelegationForAccountOptions, typ
 export { getDelegationForAccount, type GetDelegationForAccountOptions, type GetDelegationForAccountResult, } from './actions/getDelegationForAccount.js';
 export { revokeDelegationForAccount, type RevokeDelegationForAccountOptions, } from './actions/revokeDelegationForAccount.js';
 export { createSolanaAccount } from './actions/createSolanaAccount.js';
+export { createBitcoinAccount, type CreateBitcoinAccountOptions, type CreateBitcoinAccountResult, } from './actions/createBitcoinAccount.js';
+export { signBitcoinHash, type SignBitcoinHashOptions, type SignBitcoinHashResult, } from './actions/signBitcoinHash.js';
 export { sendEvmEoaUsdc, type SendEvmEoaUsdcOptions, type SendEvmEoaUsdcResult, } from './actions/sendEvmEoaUsdc.js';
 export { sendEvmSmartAccountUsdc, type SendEvmSmartAccountUsdcOptions, type SendEvmSmartAccountUsdcResult, } from './actions/sendEvmSmartAccountUsdc.js';
 export { sendSolanaUsdc, type SendSolanaUsdcOptions, type SendSolanaUsdcResult, type SendSolanaUsdcNetwork, } from './actions/sendSolanaUsdc.js';

package/dist/types/index.web.d.ts

@@ -15,6 +15,7 @@ export { linkSms } from './actions/linkSms.js';
 export { linkEmail } from './actions/linkEmail.js';
 export { linkOAuth } from './actions/linkOAuth.js';
 export { linkApple } from './actions/linkApple.js';
+export { linkSiwe, type LinkSiweOptions, type LinkSiweResult } from './actions/linkSiwe.js';
 export { createEvmEoaAccount } from './actions/createEvmEoaAccount.js';
 export { createEvmSmartAccount, type CreateEvmSmartAccountOptions, } from './actions/createEvmSmartAccount.js';
 export { createEvmEip7702Delegation, type CreateEvmEip7702DelegationOptions, type CreateEvmEip7702DelegationResult, } from './actions/createEvmEip7702Delegation.js';
@@ -29,6 +30,8 @@ export { createDelegationForAccount, type CreateDelegationForAccountOptions, typ
 export { getDelegationForAccount, type GetDelegationForAccountOptions, type GetDelegationForAccountResult, } from './actions/getDelegationForAccount.js';
 export { revokeDelegationForAccount, type RevokeDelegationForAccountOptions, } from './actions/revokeDelegationForAccount.js';
 export { createSolanaAccount } from './actions/createSolanaAccount.js';
+export { createBitcoinAccount, type CreateBitcoinAccountOptions, type CreateBitcoinAccountResult, } from './actions/createBitcoinAccount.js';
+export { signBitcoinHash, type SignBitcoinHashOptions, type SignBitcoinHashResult, } from './actions/signBitcoinHash.js';
 export { sendEvmEoaUsdc, type SendEvmEoaUsdcOptions, type SendEvmEoaUsdcResult, } from './actions/sendEvmEoaUsdc.js';
 export { sendEvmSmartAccountUsdc, type SendEvmSmartAccountUsdcOptions, type SendEvmSmartAccountUsdcResult, } from './actions/sendEvmSmartAccountUsdc.js';
 export { sendSolanaUsdc, type SendSolanaUsdcOptions, type SendSolanaUsdcResult, type SendSolanaUsdcNetwork, } from './actions/sendSolanaUsdc.js';

package/dist/types/mfa/protectedActions.d.ts

@@ -1,5 +1,6 @@
 import { createEvmKeyExportIframe, createSolanaKeyExportIframe } from '../actions/createKeyExportIframe.js';
 import { SignEvmHashOptions, SignEvmHashResult, SignEvmTransactionOptions, SignEvmTransactionResult, SignSolanaTransactionOptions, SignSolanaTransactionResult, SendEvmTransactionOptions, SendEvmTransactionResult, SendSolanaTransactionOptions, SendSolanaTransactionResult, SignEvmMessageOptions, SignSolanaMessageOptions, SignSolanaMessageResult, SignEvmTypedDataOptions, SignEvmTypedDataResult, SendUserOperationOptions, SendUserOperationResult, ExportEvmAccountOptions, ExportEvmAccountResult, ExportSolanaAccountOptions, ExportSolanaAccountResult } from '../types.js';
+import { SignBitcoinHashOptions, SignBitcoinHashResult } from '../actions/signBitcoinHash.js';
 /**
  * Map of MFA-protected functions to ensure type safety.
  * If a function is renamed, the import will fail and this file won't compile.
@@ -18,6 +19,7 @@ export declare const MFA_PROTECTED_FUNCTIONS: {
     readonly sendUserOperation: (options: SendUserOperationOptions) => Promise< SendUserOperationResult>;
     readonly exportEvmAccount: (options: ExportEvmAccountOptions) => Promise< ExportEvmAccountResult>;
     readonly exportSolanaAccount: (options: ExportSolanaAccountOptions) => Promise< ExportSolanaAccountResult>;
+    readonly signBitcoinHash: (options: SignBitcoinHashOptions) => Promise< SignBitcoinHashResult>;
     readonly createEvmKeyExportIframe: typeof createEvmKeyExportIframe;
     readonly createSolanaKeyExportIframe: typeof createSolanaKeyExportIframe;
 };