@coinbase/cdp-core 0.0.106 → 0.0.108

package/dist/web/index.web95.js

@@ -1,5 +1,34 @@
-import { __require as r } from "./index.web131.js";
-var f = r();
+function a(e) {
+  if (typeof btoa < "u")
+    return btoa(
+      Array.from(e).map((t) => String.fromCharCode(t)).join("")
+    );
+  const c = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
+  let r = "";
+  for (let t = 0; t < e.length; t += 3) {
+    const h = e[t], n = t + 1 < e.length ? e[t + 1] : 0, s = t + 2 < e.length ? e[t + 2] : 0, o = h << 16 | n << 8 | s;
+    r += c.charAt(o >> 18 & 63), r += c.charAt(o >> 12 & 63), r += t + 1 < e.length ? c.charAt(o >> 6 & 63) : "=", r += t + 2 < e.length ? c.charAt(o & 63) : "=";
+  }
+  return r;
+}
+function g(e) {
+  if (typeof atob < "u") {
+    const n = atob(e), s = new Uint8Array(n.length);
+    for (let o = 0; o < n.length; o++)
+      s[o] = n.charCodeAt(o);
+    return s;
+  }
+  const c = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/", r = {};
+  for (let n = 0; n < c.length; n++)
+    r[c[n]] = n;
+  const t = e.replace(/[^A-Za-z0-9+/]/g, ""), h = [];
+  for (let n = 0; n < t.length; n += 4) {
+    const s = r[t[n]] || 0, o = r[t[n + 1]] || 0, l = r[t[n + 2]] || 0, f = r[t[n + 3]] || 0, i = s << 18 | o << 12 | l << 6 | f;
+    h.push(i >> 16 & 255), n + 2 < t.length && h.push(i >> 8 & 255), n + 3 < t.length && h.push(i & 255);
+  }
+  return new Uint8Array(h);
+}
 export {
-  f as b
+  g as decodeBase64,
+  a as encodeBase64
 };

package/dist/web/index.web96.js

@@ -1,46 +1,20 @@
-import { InputValidationError as a } from "./index.web84.js";
-import { getPlatformCrypto as l } from "./index.web4.js";
-function y(e, o) {
-  if (e.period !== void 0 && e.periodInDays !== void 0)
-    throw new a(
-      "Cannot specify both 'period' and 'periodInDays'. Please provide only one."
-    );
-  if (e.period === void 0 && e.periodInDays === void 0)
-    throw new a("Must specify either 'period' (in seconds) or 'periodInDays'.");
-  const t = e.period ?? e.periodInDays * 24 * 60 * 60, d = /* @__PURE__ */ new Date(), c = e.start ?? d, r = e.end, f = Math.floor(c.getTime() / 1e3), E = r ? Math.floor(r.getTime() / 1e3) : 281474976710655;
-  return {
-    account: e.account,
-    spender: e.spender,
-    allowance: e.allowance,
-    token: D(e.token, o),
-    period: t,
-    start: f,
-    end: E,
-    salt: e.salt ?? l().generateRandomSalt(),
-    extraData: e.extraData ?? "0x"
-  };
+import "@coinbase/cdp-api-client";
+import "viem";
+const u = async (c) => await c.isSignedIn();
+async function A(c, a, r) {
+  if (!await u(a))
+    throw new Error("User not signed in");
+  const t = a.getUser();
+  if ("evmAccount" in c && !(t.evmAccounts?.find((n) => n === c.evmAccount) || t.evmAccountObjects?.find((n) => n.address === c.evmAccount)))
+    throw new Error("EVM account not found");
+  if ("evmSmartAccount" in c && !(t.evmSmartAccounts?.find((n) => n === c.evmSmartAccount) || t.evmSmartAccountObjects?.find((n) => n.address === c.evmSmartAccount)))
+    throw new Error("EVM Smart Account not found");
+  if ("solanaAccount" in c && !(t.solanaAccounts?.find((n) => n === c.solanaAccount) || t.solanaAccountObjects?.find((n) => n.address === c.solanaAccount)))
+    throw new Error("Solana account not found");
+  const e = await a.getWalletSecretId();
+  return r({ ...c, user: t, walletSecretId: e });
 }
-function D(e, o) {
-  if (e === "eth")
-    return "0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE";
-  if (e === "usdc") {
-    const t = n[o]?.usdc;
-    if (!t)
-      throw new a(
-        `Automatic token address lookup for ${e} is not supported on ${o}. Please provide the token address manually.`
-      );
-    return t;
-  }
-  return e;
-}
-const n = {
-  base: {
-    usdc: "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"
-  },
-  "base-sepolia": {
-    usdc: "0x036CbD53842c5426634e7929541eC2318f3dCF7e"
-  }
-};
 export {
-  y as toSpendPermission
+  u as isSignedIn,
+  A as withAuth
 };

package/dist/web/index.web97.js

@@ -1,26 +1,47 @@
-import "@coinbase/cdp-api-client";
-const e = (t) => ({
-  userId: t.userId,
-  // Deprecated fields - keep for backward compatibility
-  evmAccounts: t.evmAccounts?.map((c) => c) ?? [],
-  evmSmartAccounts: t.evmSmartAccounts?.map((c) => c) ?? [],
-  solanaAccounts: t.solanaAccounts?.map((c) => c) ?? [],
-  // New account object fields
-  evmAccountObjects: t.evmAccountObjects,
-  evmSmartAccountObjects: t.evmSmartAccountObjects,
-  solanaAccountObjects: t.solanaAccountObjects,
-  authenticationMethods: t.authenticationMethods.reduce((c, a) => (c[a.type] = a, c), {}),
-  mfaMethods: t.mfaMethods,
-  lastAuthenticatedAt: t.lastAuthenticatedAt
-}), s = (t, c, a) => {
-  const o = new Date(c).getTime();
-  return {
-    accessToken: t,
-    expiresAt: o,
-    user: e(a)
-  };
-};
+import { SendEvmTransactionWithEndUserAccountBodyNetwork as i } from "@coinbase/cdp-api-client";
+const t = (e) => !e || typeof e != "object" ? e : Array.isArray(e) ? e.map(t) : Object.keys(e).sort().reduce(
+  (r, n) => (r[n] = t(e[n]), r),
+  {}
+), p = (e) => Object.values(i).includes(
+  e
+), a = {
+  "base-sepolia": 84532,
+  base: 8453,
+  ethereum: 1,
+  "ethereum-sepolia": 11155111,
+  avalanche: 43114,
+  polygon: 137,
+  optimism: 10,
+  arbitrum: 42161,
+  "arbitrum-sepolia": 421614,
+  world: 480,
+  "world-sepolia": 4801
+}, u = Object.fromEntries(
+  Object.entries(a).map(([e, r]) => [r, e])
+), c = (e) => Object.values(a).includes(
+  e
+), s = {
+  "base-sepolia": 84532,
+  base: 8453,
+  ethereum: 1,
+  "ethereum-sepolia": 11155111,
+  avalanche: 43114,
+  polygon: 137,
+  optimism: 10,
+  arbitrum: 42161,
+  zora: 7777777,
+  bnb: 56
+}, m = Object.fromEntries(
+  Object.entries(s).map(([e, r]) => [r, e])
+), d = (e) => Object.values(s).includes(
+  e
+);
 export {
-  s as toAuthState,
-  e as toAuthStateUser
+  c as isChainIdSupportedForCDPSends,
+  d as isChainIdSupportedForCDPUserOps,
+  p as isChainSupportedForCDPSends,
+  u as sendTransactionChainIdToNameMapping,
+  t as sortKeys,
+  m as userOperationChainIdToNameMapping,
+  s as userOperationNameToChainIdMapping
 };

package/dist/web/index.web98.js

@@ -1,17 +1,5 @@
-import { ValidationError as n, InternalError as s } from "./index.web84.js";
-function d(e, o) {
-  if (!e)
-    throw new n("User must be signed in");
-  if (!o)
-    throw new s("No auth state found");
-  return { user: e, authState: o };
-}
-function w(e, o) {
-  const r = o.toLowerCase();
-  if (!(e.evmAccountObjects?.some((t) => t.address.toLowerCase() === r) || e.evmSmartAccountObjects?.some((t) => t.address.toLowerCase() === r) || e.solanaAccountObjects?.some((t) => t.address === o)))
-    throw new Error(`Address ${o} does not belong to the current user.`);
-}
+import { __require as r } from "./index.web134.js";
+var f = r();
 export {
-  w as assertUserOwnsAddress,
-  d as validateUserAuthState
+  f as b
 };

package/dist/web/index.web99.js

@@ -1,27 +1,46 @@
-import { InputValidationError as n } from "./index.web84.js";
-function u(t, e) {
-  if (e) {
-    const o = e.toLowerCase();
-    if (!(t.evmAccountObjects?.some((c) => c.address.toLowerCase() === o) || t.evmSmartAccountObjects?.some((c) => c.address.toLowerCase() === o)))
-      throw new n(`Account ${e} is not owned by the current user`);
-    return e;
-  }
-  return r(t);
-}
-function r(t) {
-  const e = t.evmSmartAccountObjects?.length || 0, o = t.evmAccountObjects?.length || 0;
-  if (e === 0 && o === 0)
-    throw new Error(
-      "No EVM accounts available. User must have at least one EVM Smart Account or EVM Account."
+import { InputValidationError as a } from "./index.web87.js";
+import { getPlatformCrypto as l } from "./index.web5.js";
+function y(e, o) {
+  if (e.period !== void 0 && e.periodInDays !== void 0)
+    throw new a(
+      "Cannot specify both 'period' and 'periodInDays'. Please provide only one."
     );
-  if (e === 1 && o <= 1)
-    return t.evmSmartAccountObjects[0].address;
-  if (o === 1 && e === 0)
-    return t.evmAccountObjects[0].address;
-  throw new Error(
-    "Multiple EVM accounts available. Please specify 'account' to select which account to swap with."
-  );
+  if (e.period === void 0 && e.periodInDays === void 0)
+    throw new a("Must specify either 'period' (in seconds) or 'periodInDays'.");
+  const t = e.period ?? e.periodInDays * 24 * 60 * 60, d = /* @__PURE__ */ new Date(), c = e.start ?? d, r = e.end, f = Math.floor(c.getTime() / 1e3), E = r ? Math.floor(r.getTime() / 1e3) : 281474976710655;
+  return {
+    account: e.account,
+    spender: e.spender,
+    allowance: e.allowance,
+    token: D(e.token, o),
+    period: t,
+    start: f,
+    end: E,
+    salt: e.salt ?? l().generateRandomSalt(),
+    extraData: e.extraData ?? "0x"
+  };
+}
+function D(e, o) {
+  if (e === "eth")
+    return "0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE";
+  if (e === "usdc") {
+    const t = n[o]?.usdc;
+    if (!t)
+      throw new a(
+        `Automatic token address lookup for ${e} is not supported on ${o}. Please provide the token address manually.`
+      );
+    return t;
+  }
+  return e;
 }
+const n = {
+  base: {
+    usdc: "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913"
+  },
+  "base-sepolia": {
+    usdc: "0x036CbD53842c5426634e7929541eC2318f3dCF7e"
+  }
+};
 export {
-  u as resolveAccount
+  y as toSpendPermission
 };

package/dist/web-types/actions/createBitcoinAccount.d.ts

@@ -0,0 +1,26 @@
+import { EndUserBtcAccount, CreateEndUserBtcAccountBodyAddressType, CreateEndUserBtcAccountBodyNetwork } from '@coinbase/cdp-api-client';
+/**
+ * Options for creating a Bitcoin HD (Hierarchical Deterministic) account.
+ */
+export type CreateBitcoinAccountOptions = {
+    /** The Bitcoin network. Defaults to "bitcoin-testnet". */
+    network?: CreateEndUserBtcAccountBodyNetwork;
+    /** The Bitcoin address type. Defaults to "segwit" (BIP-84). */
+    addressType?: CreateEndUserBtcAccountBodyAddressType;
+    /** Optional idempotency key for safe retries. */
+    idempotencyKey?: string;
+};
+/**
+ * The result of creating a Bitcoin HD account.
+ */
+export type CreateBitcoinAccountResult = EndUserBtcAccount;
+/**
+ * Creates a Bitcoin HD (Hierarchical Deterministic) account for the current user.
+ * The account uses BIP-84 derivation (segwit) and returns an extended public key (xpub)
+ * that can be used to derive unlimited child addresses for UTXO discovery.
+ *
+ * @param options - Options for creating the account.
+ * @returns The newly created Bitcoin account (xpub, network, addressType).
+ * @throws Error if the user is not signed in or account creation fails.
+ */
+export declare function createBitcoinAccount(options?: CreateBitcoinAccountOptions): Promise<CreateBitcoinAccountResult>;

package/dist/web-types/actions/signBitcoinHash.d.ts

@@ -0,0 +1,41 @@
+import { SignBtcHashWithEndUserAccountBodyAddressType, SignBtcHashWithEndUserAccountBodyNetwork, SignBtcHashWithEndUserAccountBodyChange } from '@coinbase/cdp-api-client';
+/**
+ * Options for signing a Bitcoin sighash.
+ */
+export type SignBitcoinHashOptions = {
+    /** The Bitcoin network. Defaults to "bitcoin-testnet". */
+    network?: SignBtcHashWithEndUserAccountBodyNetwork;
+    /** The Bitcoin address type. Defaults to "segwit". */
+    addressType?: SignBtcHashWithEndUserAccountBodyAddressType;
+    /** BIP-32 change level: 0 for external (receive) addresses, 1 for internal (change) addresses. */
+    change: SignBtcHashWithEndUserAccountBodyChange;
+    /** BIP-32 address index — must match the index used to derive the address controlling the UTXO. */
+    addressIndex: number;
+    /**
+     * The 32-byte sighash to sign, as a 64-character hex string (no 0x prefix).
+     * Compute this using hashForWitnessV0 for native SegWit P2WPKH inputs.
+     */
+    hash: string;
+    /** Optional idempotency key for safe retries. */
+    idempotencyKey?: string;
+};
+/**
+ * The result of signing a Bitcoin sighash.
+ */
+export type SignBitcoinHashResult = {
+    /**
+     * The DER-encoded ECDSA signature as a bare hex string (no 0x prefix), 70–72 bytes.
+     * To construct the SegWit witness: append 0x01 (SIGHASH_ALL) to get the full sig,
+     * then push [fullSig, compressedPubKey] onto the witness stack.
+     */
+    signature: string;
+};
+/**
+ * Signs a 32-byte Bitcoin sighash using the end user's HD wallet child key.
+ * One call is required per UTXO input in the transaction.
+ *
+ * @param options - The signing options including derivation path and sighash.
+ * @returns The DER-encoded ECDSA signature (hex, no 0x prefix).
+ * @throws Error if the user is not signed in or signing fails.
+ */
+export declare const signBitcoinHash: (options: SignBitcoinHashOptions) => Promise<SignBitcoinHashResult>;

package/dist/web-types/auth/toAuthState.d.ts

@@ -1,4 +1,4 @@
-import { EndUser, EndUserEvmAccount, EndUserEvmSmartAccount, EndUserSolanaAccount, MFAMethods } from '@coinbase/cdp-api-client';
+import { EndUser, EndUserEvmAccount, EndUserEvmSmartAccount, EndUserSolanaAccount, EndUserBtcAccount, MFAMethods } from '@coinbase/cdp-api-client';
 import { AuthState } from './types.js';
 import { AuthenticationMethods } from '../types.js';
 /**
@@ -16,6 +16,7 @@ export declare const toAuthStateUser: (endUser: EndUser) => {
     evmAccountObjects: EndUserEvmAccount[];
     evmSmartAccountObjects: EndUserEvmSmartAccount[];
     solanaAccountObjects: EndUserSolanaAccount[];
+    btcAccountObjects: EndUserBtcAccount[] | undefined;
     authenticationMethods: AuthenticationMethods;
     mfaMethods: MFAMethods | undefined;
     lastAuthenticatedAt: string | undefined;

package/dist/web-types/errors.d.ts

@@ -61,7 +61,9 @@ export type MfaErrorCode =
 /** MFA verification was cancelled. */
  | "CANCELLED"
 /** No MFA listener is registered to handle verification. */
- | "LISTENER_REQUIRED";
+ | "LISTENER_REQUIRED"
+/** MFA listeners are registered but none matched the trigger value. */
+ | "NO_LISTENER_MATCHED";
 /**
  * Error thrown when an MFA operation fails.
  */

package/dist/web-types/index.d.ts

@@ -26,6 +26,8 @@ export { createDelegationForAccount, type CreateDelegationForAccountOptions, typ
 export { getDelegationForAccount, type GetDelegationForAccountOptions, type GetDelegationForAccountResult, } from './actions/getDelegationForAccount.js';
 export { revokeDelegationForAccount, type RevokeDelegationForAccountOptions, } from './actions/revokeDelegationForAccount.js';
 export { createSolanaAccount, type CreateSolanaAccountOptions, } from './actions/createSolanaAccount.js';
+export { createBitcoinAccount, type CreateBitcoinAccountOptions, type CreateBitcoinAccountResult, } from './actions/createBitcoinAccount.js';
+export { signBitcoinHash, type SignBitcoinHashOptions, type SignBitcoinHashResult, } from './actions/signBitcoinHash.js';
 export { sendEvmEoaUsdc, type SendEvmEoaUsdcOptions, type SendEvmEoaUsdcResult, } from './actions/sendEvmEoaUsdc.js';
 export { sendEvmSmartAccountUsdc, type SendEvmSmartAccountUsdcOptions, type SendEvmSmartAccountUsdcResult, } from './actions/sendEvmSmartAccountUsdc.js';
 export { sendSolanaUsdc, type SendSolanaUsdcOptions, type SendSolanaUsdcResult, type SendSolanaUsdcNetwork, } from './actions/sendSolanaUsdc.js';
@@ -42,7 +44,8 @@ export { submitMfaEnrollment, type SubmitMfaEnrollmentOptions, type SubmitMfaEnr
 export { initiateMfaVerification, type InitiateMfaVerificationOptions, } from './actions/initiateMfaVerification.js';
 export { submitMfaVerification, type SubmitMfaVerificationOptions, } from './actions/submitMfaVerification.js';
 export { cancelMfaVerification } from './actions/cancelMfaVerification.js';
-export { getEnabledMfaMethods, getEnrolledMfaMethods, isEnrolledInMfa, isMfaProtectedAction, isMfaRequired, registerMfaListener, MFA_PROTECTED_ACTIONS, MFA_PROTECTED_FUNCTIONS, type MfaProtectedAction, type MfaListener, type MfaListenerOptions, type MfaVerificationContext, } from './mfa/index.js';
+export { getEnabledMfaMethods, getEnrolledMfaMethods, isEnrolledInMfa, isMfaProtectedAction, isMfaRequired, MFA_PROTECTED_ACTIONS, MFA_PROTECTED_FUNCTIONS, type MfaProtectedAction, type MfaListener, type MfaVerificationContext, } from './mfa/index.js';
+export { registerMfaListener, type MfaListenerOptions } from './mfa/state.web.js';
 export * from './auth/authManager.js';
 export * from './auth/types.js';
 export * from './shared/types.js';

package/dist/web-types/index.native.d.ts

@@ -30,6 +30,8 @@ export { createDelegationForAccount, type CreateDelegationForAccountOptions, typ
 export { getDelegationForAccount, type GetDelegationForAccountOptions, type GetDelegationForAccountResult, } from './actions/getDelegationForAccount.js';
 export { revokeDelegationForAccount, type RevokeDelegationForAccountOptions, } from './actions/revokeDelegationForAccount.js';
 export { createSolanaAccount } from './actions/createSolanaAccount.js';
+export { createBitcoinAccount, type CreateBitcoinAccountOptions, type CreateBitcoinAccountResult, } from './actions/createBitcoinAccount.js';
+export { signBitcoinHash, type SignBitcoinHashOptions, type SignBitcoinHashResult, } from './actions/signBitcoinHash.js';
 export { sendEvmEoaUsdc, type SendEvmEoaUsdcOptions, type SendEvmEoaUsdcResult, } from './actions/sendEvmEoaUsdc.js';
 export { sendEvmSmartAccountUsdc, type SendEvmSmartAccountUsdcOptions, type SendEvmSmartAccountUsdcResult, } from './actions/sendEvmSmartAccountUsdc.js';
 export { sendSolanaUsdc, type SendSolanaUsdcOptions, type SendSolanaUsdcResult, type SendSolanaUsdcNetwork, } from './actions/sendSolanaUsdc.js';
@@ -46,7 +48,8 @@ export { submitMfaEnrollment, type SubmitMfaEnrollmentOptions, type SubmitMfaEnr
 export { initiateMfaVerification } from './actions/initiateMfaVerification.js';
 export { submitMfaVerification, type SubmitMfaVerificationOptions, } from './actions/submitMfaVerification.js';
 export { cancelMfaVerification } from './actions/cancelMfaVerification.js';
-export { getEnabledMfaMethods, getEnrolledMfaMethods, isEnrolledInMfa, isMfaProtectedAction, isMfaRequired, registerMfaListener, MFA_PROTECTED_ACTIONS, MFA_PROTECTED_FUNCTIONS, type MfaProtectedAction, type MfaListener, type MfaListenerOptions, type MfaVerificationContext, } from './mfa/index.js';
+export { getEnabledMfaMethods, getEnrolledMfaMethods, isEnrolledInMfa, isMfaProtectedAction, isMfaRequired, MFA_PROTECTED_ACTIONS, MFA_PROTECTED_FUNCTIONS, type MfaProtectedAction, type MfaListener, type MfaVerificationContext, } from './mfa/index.js';
+export { registerMfaListener, type MfaListenerOptions } from './mfa/state.js';
 export * from './auth/authManager.js';
 export * from './auth/types.js';
 export * from './types.js';

package/dist/web-types/index.web.d.ts

@@ -30,6 +30,8 @@ export { createDelegationForAccount, type CreateDelegationForAccountOptions, typ
 export { getDelegationForAccount, type GetDelegationForAccountOptions, type GetDelegationForAccountResult, } from './actions/getDelegationForAccount.js';
 export { revokeDelegationForAccount, type RevokeDelegationForAccountOptions, } from './actions/revokeDelegationForAccount.js';
 export { createSolanaAccount } from './actions/createSolanaAccount.js';
+export { createBitcoinAccount, type CreateBitcoinAccountOptions, type CreateBitcoinAccountResult, } from './actions/createBitcoinAccount.js';
+export { signBitcoinHash, type SignBitcoinHashOptions, type SignBitcoinHashResult, } from './actions/signBitcoinHash.js';
 export { sendEvmEoaUsdc, type SendEvmEoaUsdcOptions, type SendEvmEoaUsdcResult, } from './actions/sendEvmEoaUsdc.js';
 export { sendEvmSmartAccountUsdc, type SendEvmSmartAccountUsdcOptions, type SendEvmSmartAccountUsdcResult, } from './actions/sendEvmSmartAccountUsdc.js';
 export { sendSolanaUsdc, type SendSolanaUsdcOptions, type SendSolanaUsdcResult, type SendSolanaUsdcNetwork, } from './actions/sendSolanaUsdc.js';
@@ -46,7 +48,8 @@ export { submitMfaEnrollment, type SubmitMfaEnrollmentOptions, type SubmitMfaEnr
 export { initiateMfaVerification } from './actions/initiateMfaVerification.js';
 export { submitMfaVerification, type SubmitMfaVerificationOptions, } from './actions/submitMfaVerification.js';
 export { cancelMfaVerification } from './actions/cancelMfaVerification.js';
-export { getEnabledMfaMethods, getEnrolledMfaMethods, isEnrolledInMfa, isMfaProtectedAction, isMfaRequired, registerMfaListener, MFA_PROTECTED_ACTIONS, MFA_PROTECTED_FUNCTIONS, type MfaProtectedAction, type MfaListener, type MfaListenerOptions, type MfaVerificationContext, } from './mfa/index.js';
+export { getEnabledMfaMethods, getEnrolledMfaMethods, isEnrolledInMfa, isMfaProtectedAction, isMfaRequired, MFA_PROTECTED_ACTIONS, MFA_PROTECTED_FUNCTIONS, type MfaProtectedAction, type MfaListener, type MfaVerificationContext, } from './mfa/index.js';
+export { registerMfaListener, type MfaListenerOptions } from './mfa/state.web.js';
 export * from './auth/authManager.js';
 export * from './auth/types.js';
 export * from './shared/types.js';

package/dist/web-types/mfa/index.d.ts

@@ -1,4 +1,4 @@
-export { hasPendingMfaVerification, registerMfaListener, resolvePendingMfaVerification, rejectPendingMfaVerification, triggerMfaVerification, type MfaListener, type MfaVerificationContext, type MfaListenerOptions, } from './state.js';
+export { hasPendingMfaVerification, resolvePendingMfaVerification, rejectPendingMfaVerification, triggerMfaVerification, type MfaListener, type MfaVerificationContext, } from './state.js';
 export { getEnabledMfaMethods, getEnrolledMfaMethods, isEnrolledInMfa } from './utils.js';
 export { withMfa, ensureMfaVerified, isMfaRequired } from './withMfa.js';
 export { MFA_PROTECTED_ACTIONS, MFA_PROTECTED_FUNCTIONS, isMfaProtectedAction, type MfaProtectedAction, } from './protectedActions.js';

package/dist/web-types/mfa/protectedActions.d.ts

@@ -1,5 +1,6 @@
 import { createEvmKeyExportIframe, createSolanaKeyExportIframe } from '../actions/createKeyExportIframe.js';
 import { SignEvmHashOptions, SignEvmHashResult, SignEvmTransactionOptions, SignEvmTransactionResult, SignSolanaTransactionOptions, SignSolanaTransactionResult, SendEvmTransactionOptions, SendEvmTransactionResult, SendSolanaTransactionOptions, SendSolanaTransactionResult, SignEvmMessageOptions, SignSolanaMessageOptions, SignSolanaMessageResult, SignEvmTypedDataOptions, SignEvmTypedDataResult, SendUserOperationOptions, SendUserOperationResult, ExportEvmAccountOptions, ExportEvmAccountResult, ExportSolanaAccountOptions, ExportSolanaAccountResult } from '../types.js';
+import { SignBitcoinHashOptions, SignBitcoinHashResult } from '../actions/signBitcoinHash.js';
 /**
  * Map of MFA-protected functions to ensure type safety.
  * If a function is renamed, the import will fail and this file won't compile.
@@ -18,6 +19,7 @@ export declare const MFA_PROTECTED_FUNCTIONS: {
     readonly sendUserOperation: (options: SendUserOperationOptions) => Promise< SendUserOperationResult>;
     readonly exportEvmAccount: (options: ExportEvmAccountOptions) => Promise< ExportEvmAccountResult>;
     readonly exportSolanaAccount: (options: ExportSolanaAccountOptions) => Promise< ExportSolanaAccountResult>;
+    readonly signBitcoinHash: (options: SignBitcoinHashOptions) => Promise< SignBitcoinHashResult>;
     readonly createEvmKeyExportIframe: typeof createEvmKeyExportIframe;
     readonly createSolanaKeyExportIframe: typeof createSolanaKeyExportIframe;
 };

package/dist/web-types/mfa/state.d.ts

@@ -12,50 +12,66 @@ export type MfaVerificationContext = {
  */
 export type MfaListener = (context: MfaVerificationContext) => void;
 /**
- * Options for registering an MFA listener.
+ * Options for registering an MFA listener at the core layer.
+ *
+ * The core registry is platform-agnostic. The optional `matches` predicate
+ * lets a listener express "only fire when the trigger value satisfies this
+ * predicate." Platform adapters (e.g. the web adapter) layer their own
+ * scoping semantics on top of this opaque predicate.
  */
 export type MfaListenerOptions = {
     /**
-     * Optional DOM element that defines the scope for this handler.
-     * When provided, this handler will only respond to MFA triggers
-     * that originate from within this element (e.g., button clicks inside a container).
-     * Handlers without a scope act as global handlers.
+     * Optional predicate that gates this listener.
+     *
+     * When provided, the listener only fires when `triggerMfaVerification` is
+     * called with a `trigger` value (or a default trigger supplied by the
+     * platform) that satisfies the predicate. When omitted, the listener is
+     * a "global" listener that fires only when no predicate-based listener
+     * matched the trigger.
      */
-    scope?: HTMLElement;
+    matches?: (trigger: unknown) => boolean;
 };
 /**
- * Registers an MFA verification listener.
+ * Installs (or clears) the default trigger provider.
  *
- * Listeners can be global (no scope) or scoped to a specific DOM element.
- * The event bubbles up from the trigger element through the DOM:
- * - Scoped listeners listen on their container and catch events from within
- * - Global listeners listen on document and catch anything that bubbles up
+ * The web entry point uses this to expose `document.activeElement` as the
+ * default trigger so scoped listeners can match against it. Native entry
+ * points have no DOM and therefore install nothing.
  *
- * @param {MfaListener} listener - The listener function to call when MFA is required.
- * @param {MfaListenerOptions} [options] - Optional configuration including scope element.
- * @returns {() => void} A function to unregister the listener.
+ * @param provider - Function that returns the trigger value, or `null` to clear.
+ * @internal
+ */
+export declare const setDefaultTriggerProvider: (provider: (() => unknown) | null) => void;
+/**
+ * Registers an MFA verification listener.
+ *
+ * Listeners can be global (no `matches` predicate) or scoped via an opaque
+ * predicate. When `triggerMfaVerification` fires:
+ * - If any predicate-based listener matches the trigger, only those listeners
+ *   are invoked.
+ * - Otherwise, all global listeners are invoked.
  *
- * @example
- * ```typescript
- * // Global listener (responds to any MFA trigger not handled by a scoped listener)
- * const unregisterGlobal = registerMfaListener(({ methods }) => {
- *   openMfaModal(methods);
- * });
+ * Platform adapters wrap this function to provide their own scoping shape
+ * (e.g. a DOM `scope: HTMLElement` on web).
  *
- * // Scoped listener (only responds to triggers inside the container)
- * const container = document.getElementById('my-flow');
- * if (container) {
- *   const unregisterScoped = registerMfaListener(
- *     ({ methods }) => showInlineMfa(methods),
- *     { scope: container }
- *   );
- *   // Later, when done:
- *   unregisterScoped();
- * }
+ * Notes:
+ * - Matched suppresses globals. When any predicate-based listener matches,
+ *   all global (unscoped) listeners are skipped, including the app's own
+ *   default modal. This mirrors the previous DOM implementation's
+ *   stopPropagation semantics. Prefer narrow predicates; a permissive
+ *   `matches: () => true` silently suppresses every global listener.
+ * - Coordination, not authz. This registry is a UX coordination layer for
+ *   which listener shows the verification UI. The server still enforces MFA
+ *   via `mfa_required` regardless of which listener fires (or whether one
+ *   fires at all).
+ * - React Native: RN does not install a default trigger provider, so
+ *   `matches` is invoked with `undefined`. Predicates that don't accept
+ *   `undefined` will never match — most RN consumers should omit `matches`
+ *   entirely and register a global listener.
  *
- * // Clean up global listener when done:
- * unregisterGlobal();
- * ```
+ * @param {MfaListener} listener - The listener function to call when MFA is required.
+ * @param {MfaListenerOptions} [options] - Optional configuration with an opaque predicate.
+ * @returns {() => void} A function to unregister the listener.
  */
 export declare const registerMfaListener: (listener: MfaListener, options?: MfaListenerOptions) => (() => void);
 /**
@@ -68,18 +84,22 @@ export declare const hasRegisteredMfaListeners: () => boolean;
  * Triggers the MFA verification flow and returns a Promise that resolves
  * when MFA is successfully completed.
  *
- * Dispatches a custom DOM event from the trigger element that bubbles up.
- * Scoped handlers catch events from within their container.
- * Global handlers catch anything that bubbles to document.
+ * Selection rule:
+ * - All registered listeners with a `matches` predicate are evaluated against
+ *   the trigger (the explicit `trigger` argument, or the value returned by
+ *   the default trigger provider if one is installed).
+ * - If any predicate matches, only the matching listeners are invoked.
+ * - Otherwise, all listeners without a predicate (global listeners) are invoked.
  *
- * If no handlers are registered, this is a no-op and resolves immediately.
+ * If no listeners are registered, this is a no-op and resolves immediately.
  * Use `hasRegisteredMfaListeners()` to check before calling if needed.
  *
  * @param {MfaMethod[]} methods - The MFA methods available for verification.
+ * @param {unknown} [trigger] - Optional opaque trigger value used by listener predicates.
  * @returns {Promise<void>} A Promise that resolves when MFA is complete.
  * @internal
  */
-export declare const triggerMfaVerification: (methods: MfaMethod[]) => Promise<void>;
+export declare const triggerMfaVerification: (methods: MfaMethod[], trigger?: unknown) => Promise<void>;
 /**
  * Resolves the pending MFA verification Promise.
  * Called internally after successful MFA submission.