@coinbase/cdp-core 0.0.106 → 0.0.108

package/dist/native-types/index.web.d.ts

@@ -30,6 +30,8 @@ export { createDelegationForAccount, type CreateDelegationForAccountOptions, typ
 export { getDelegationForAccount, type GetDelegationForAccountOptions, type GetDelegationForAccountResult, } from './actions/getDelegationForAccount.js';
 export { revokeDelegationForAccount, type RevokeDelegationForAccountOptions, } from './actions/revokeDelegationForAccount.js';
 export { createSolanaAccount } from './actions/createSolanaAccount.js';
+export { createBitcoinAccount, type CreateBitcoinAccountOptions, type CreateBitcoinAccountResult, } from './actions/createBitcoinAccount.js';
+export { signBitcoinHash, type SignBitcoinHashOptions, type SignBitcoinHashResult, } from './actions/signBitcoinHash.js';
 export { sendEvmEoaUsdc, type SendEvmEoaUsdcOptions, type SendEvmEoaUsdcResult, } from './actions/sendEvmEoaUsdc.js';
 export { sendEvmSmartAccountUsdc, type SendEvmSmartAccountUsdcOptions, type SendEvmSmartAccountUsdcResult, } from './actions/sendEvmSmartAccountUsdc.js';
 export { sendSolanaUsdc, type SendSolanaUsdcOptions, type SendSolanaUsdcResult, type SendSolanaUsdcNetwork, } from './actions/sendSolanaUsdc.js';
@@ -46,7 +48,8 @@ export { submitMfaEnrollment, type SubmitMfaEnrollmentOptions, type SubmitMfaEnr
 export { initiateMfaVerification } from './actions/initiateMfaVerification.js';
 export { submitMfaVerification, type SubmitMfaVerificationOptions, } from './actions/submitMfaVerification.js';
 export { cancelMfaVerification } from './actions/cancelMfaVerification.js';
-export { getEnabledMfaMethods, getEnrolledMfaMethods, isEnrolledInMfa, isMfaProtectedAction, isMfaRequired, registerMfaListener, MFA_PROTECTED_ACTIONS, MFA_PROTECTED_FUNCTIONS, type MfaProtectedAction, type MfaListener, type MfaListenerOptions, type MfaVerificationContext, } from './mfa/index.js';
+export { getEnabledMfaMethods, getEnrolledMfaMethods, isEnrolledInMfa, isMfaProtectedAction, isMfaRequired, MFA_PROTECTED_ACTIONS, MFA_PROTECTED_FUNCTIONS, type MfaProtectedAction, type MfaListener, type MfaVerificationContext, } from './mfa/index.js';
+export { registerMfaListener, type MfaListenerOptions } from './mfa/state.web.js';
 export * from './auth/authManager.js';
 export * from './auth/types.js';
 export * from './shared/types.js';

package/dist/native-types/mfa/index.d.ts

@@ -1,4 +1,4 @@
-export { hasPendingMfaVerification, registerMfaListener, resolvePendingMfaVerification, rejectPendingMfaVerification, triggerMfaVerification, type MfaListener, type MfaVerificationContext, type MfaListenerOptions, } from './state.js';
+export { hasPendingMfaVerification, resolvePendingMfaVerification, rejectPendingMfaVerification, triggerMfaVerification, type MfaListener, type MfaVerificationContext, } from './state.js';
 export { getEnabledMfaMethods, getEnrolledMfaMethods, isEnrolledInMfa } from './utils.js';
 export { withMfa, ensureMfaVerified, isMfaRequired } from './withMfa.js';
 export { MFA_PROTECTED_ACTIONS, MFA_PROTECTED_FUNCTIONS, isMfaProtectedAction, type MfaProtectedAction, } from './protectedActions.js';

package/dist/native-types/mfa/protectedActions.d.ts

@@ -1,5 +1,6 @@
 import { createEvmKeyExportIframe, createSolanaKeyExportIframe } from '../actions/createKeyExportIframe.js';
 import { SignEvmHashOptions, SignEvmHashResult, SignEvmTransactionOptions, SignEvmTransactionResult, SignSolanaTransactionOptions, SignSolanaTransactionResult, SendEvmTransactionOptions, SendEvmTransactionResult, SendSolanaTransactionOptions, SendSolanaTransactionResult, SignEvmMessageOptions, SignSolanaMessageOptions, SignSolanaMessageResult, SignEvmTypedDataOptions, SignEvmTypedDataResult, SendUserOperationOptions, SendUserOperationResult, ExportEvmAccountOptions, ExportEvmAccountResult, ExportSolanaAccountOptions, ExportSolanaAccountResult } from '../types.js';
+import { SignBitcoinHashOptions, SignBitcoinHashResult } from '../actions/signBitcoinHash.js';
 /**
  * Map of MFA-protected functions to ensure type safety.
  * If a function is renamed, the import will fail and this file won't compile.
@@ -18,6 +19,7 @@ export declare const MFA_PROTECTED_FUNCTIONS: {
     readonly sendUserOperation: (options: SendUserOperationOptions) => Promise< SendUserOperationResult>;
     readonly exportEvmAccount: (options: ExportEvmAccountOptions) => Promise< ExportEvmAccountResult>;
     readonly exportSolanaAccount: (options: ExportSolanaAccountOptions) => Promise< ExportSolanaAccountResult>;
+    readonly signBitcoinHash: (options: SignBitcoinHashOptions) => Promise< SignBitcoinHashResult>;
     readonly createEvmKeyExportIframe: typeof createEvmKeyExportIframe;
     readonly createSolanaKeyExportIframe: typeof createSolanaKeyExportIframe;
 };

package/dist/native-types/mfa/state.d.ts

@@ -12,50 +12,66 @@ export type MfaVerificationContext = {
  */
 export type MfaListener = (context: MfaVerificationContext) => void;
 /**
- * Options for registering an MFA listener.
+ * Options for registering an MFA listener at the core layer.
+ *
+ * The core registry is platform-agnostic. The optional `matches` predicate
+ * lets a listener express "only fire when the trigger value satisfies this
+ * predicate." Platform adapters (e.g. the web adapter) layer their own
+ * scoping semantics on top of this opaque predicate.
  */
 export type MfaListenerOptions = {
     /**
-     * Optional DOM element that defines the scope for this handler.
-     * When provided, this handler will only respond to MFA triggers
-     * that originate from within this element (e.g., button clicks inside a container).
-     * Handlers without a scope act as global handlers.
+     * Optional predicate that gates this listener.
+     *
+     * When provided, the listener only fires when `triggerMfaVerification` is
+     * called with a `trigger` value (or a default trigger supplied by the
+     * platform) that satisfies the predicate. When omitted, the listener is
+     * a "global" listener that fires only when no predicate-based listener
+     * matched the trigger.
      */
-    scope?: HTMLElement;
+    matches?: (trigger: unknown) => boolean;
 };
 /**
- * Registers an MFA verification listener.
+ * Installs (or clears) the default trigger provider.
  *
- * Listeners can be global (no scope) or scoped to a specific DOM element.
- * The event bubbles up from the trigger element through the DOM:
- * - Scoped listeners listen on their container and catch events from within
- * - Global listeners listen on document and catch anything that bubbles up
+ * The web entry point uses this to expose `document.activeElement` as the
+ * default trigger so scoped listeners can match against it. Native entry
+ * points have no DOM and therefore install nothing.
  *
- * @param {MfaListener} listener - The listener function to call when MFA is required.
- * @param {MfaListenerOptions} [options] - Optional configuration including scope element.
- * @returns {() => void} A function to unregister the listener.
+ * @param provider - Function that returns the trigger value, or `null` to clear.
+ * @internal
+ */
+export declare const setDefaultTriggerProvider: (provider: (() => unknown) | null) => void;
+/**
+ * Registers an MFA verification listener.
+ *
+ * Listeners can be global (no `matches` predicate) or scoped via an opaque
+ * predicate. When `triggerMfaVerification` fires:
+ * - If any predicate-based listener matches the trigger, only those listeners
+ *   are invoked.
+ * - Otherwise, all global listeners are invoked.
  *
- * @example
- * ```typescript
- * // Global listener (responds to any MFA trigger not handled by a scoped listener)
- * const unregisterGlobal = registerMfaListener(({ methods }) => {
- *   openMfaModal(methods);
- * });
+ * Platform adapters wrap this function to provide their own scoping shape
+ * (e.g. a DOM `scope: HTMLElement` on web).
  *
- * // Scoped listener (only responds to triggers inside the container)
- * const container = document.getElementById('my-flow');
- * if (container) {
- *   const unregisterScoped = registerMfaListener(
- *     ({ methods }) => showInlineMfa(methods),
- *     { scope: container }
- *   );
- *   // Later, when done:
- *   unregisterScoped();
- * }
+ * Notes:
+ * - Matched suppresses globals. When any predicate-based listener matches,
+ *   all global (unscoped) listeners are skipped, including the app's own
+ *   default modal. This mirrors the previous DOM implementation's
+ *   stopPropagation semantics. Prefer narrow predicates; a permissive
+ *   `matches: () => true` silently suppresses every global listener.
+ * - Coordination, not authz. This registry is a UX coordination layer for
+ *   which listener shows the verification UI. The server still enforces MFA
+ *   via `mfa_required` regardless of which listener fires (or whether one
+ *   fires at all).
+ * - React Native: RN does not install a default trigger provider, so
+ *   `matches` is invoked with `undefined`. Predicates that don't accept
+ *   `undefined` will never match — most RN consumers should omit `matches`
+ *   entirely and register a global listener.
  *
- * // Clean up global listener when done:
- * unregisterGlobal();
- * ```
+ * @param {MfaListener} listener - The listener function to call when MFA is required.
+ * @param {MfaListenerOptions} [options] - Optional configuration with an opaque predicate.
+ * @returns {() => void} A function to unregister the listener.
  */
 export declare const registerMfaListener: (listener: MfaListener, options?: MfaListenerOptions) => (() => void);
 /**
@@ -68,18 +84,22 @@ export declare const hasRegisteredMfaListeners: () => boolean;
  * Triggers the MFA verification flow and returns a Promise that resolves
  * when MFA is successfully completed.
  *
- * Dispatches a custom DOM event from the trigger element that bubbles up.
- * Scoped handlers catch events from within their container.
- * Global handlers catch anything that bubbles to document.
+ * Selection rule:
+ * - All registered listeners with a `matches` predicate are evaluated against
+ *   the trigger (the explicit `trigger` argument, or the value returned by
+ *   the default trigger provider if one is installed).
+ * - If any predicate matches, only the matching listeners are invoked.
+ * - Otherwise, all listeners without a predicate (global listeners) are invoked.
  *
- * If no handlers are registered, this is a no-op and resolves immediately.
+ * If no listeners are registered, this is a no-op and resolves immediately.
  * Use `hasRegisteredMfaListeners()` to check before calling if needed.
  *
  * @param {MfaMethod[]} methods - The MFA methods available for verification.
+ * @param {unknown} [trigger] - Optional opaque trigger value used by listener predicates.
  * @returns {Promise<void>} A Promise that resolves when MFA is complete.
  * @internal
  */
-export declare const triggerMfaVerification: (methods: MfaMethod[]) => Promise<void>;
+export declare const triggerMfaVerification: (methods: MfaMethod[], trigger?: unknown) => Promise<void>;
 /**
  * Resolves the pending MFA verification Promise.
  * Called internally after successful MFA submission.

package/dist/native-types/mfa/state.web.d.ts

@@ -0,0 +1,62 @@
+import { MfaListener } from './state.js';
+/**
+ * Options for registering an MFA listener on web.
+ *
+ * Web-specific shape: when a `scope` element is provided, the listener only
+ * fires for MFA triggers that originate from inside that element (based on
+ * `document.activeElement` at trigger time, supplied by the web entry point's
+ * default trigger provider).
+ *
+ * Listeners without a scope act as global listeners.
+ */
+export type MfaListenerOptions = {
+    /**
+     * Optional DOM element that defines the scope for this handler.
+     * When provided, this handler only responds to MFA triggers that originate
+     * from within this element. Handlers without a scope act as global handlers.
+     */
+    scope?: HTMLElement;
+};
+/**
+ * Registers an MFA verification listener (web).
+ *
+ * The web adapter translates the DOM-shaped `scope` option into an opaque
+ * predicate against the trigger element supplied by the web entry point's
+ * default trigger provider (`document.activeElement` or `document.body`).
+ *
+ * Notes:
+ * - Matched suppresses globals. When any scoped listener's `scope` contains
+ *   the trigger, all global (unscoped) listeners are skipped, including the
+ *   app's own default modal. Mirrors the previous DOM implementation's
+ *   stopPropagation semantics.
+ * - Innermost wins. When multiple scoped listeners contain the trigger
+ *   (e.g. a page container scope and a nested per-flow scope), only the
+ *   deepest scope's listener fires. Mirrors DOM bubble order.
+ * - Shadow DOM. `Element.contains` does not cross shadow DOM boundaries.
+ *   A trigger inside an open shadow tree whose host is inside `scope` will
+ *   not match. Workaround: register a global listener.
+ * - Coordination, not authz. Same caveat as the core registry — the server
+ *   still enforces MFA via `mfa_required`.
+ *
+ * @param {MfaListener} listener - The listener function to call when MFA is required.
+ * @param {MfaListenerOptions} [options] - Optional configuration including a DOM scope element.
+ * @returns {() => void} A function to unregister the listener.
+ *
+ * @example
+ * ```typescript
+ * // Global listener (responds to any MFA trigger not handled by a scoped listener)
+ * const unregisterGlobal = registerMfaListener(({ methods }) => {
+ *   openMfaModal(methods);
+ * });
+ *
+ * // Scoped listener (only responds to triggers inside the container)
+ * const container = document.getElementById('my-flow');
+ * if (container) {
+ *   const unregisterScoped = registerMfaListener(
+ *     ({ methods }) => showInlineMfa(methods),
+ *     { scope: container }
+ *   );
+ * }
+ * ```
+ */
+export declare const registerMfaListener: (listener: MfaListener, options?: MfaListenerOptions) => (() => void);

package/dist/native-types/types.d.ts

@@ -1,4 +1,4 @@
-import { SendEvmTransactionWithEndUserAccountBodyNetwork, SendSolanaTransactionWithEndUserAccountBodyNetwork, APIError, APIErrorType, ErrorType, HttpErrorType, EvmUserOperation, EvmCall as EvmUserOperationCall, EvmUserOperationNetwork, EvmUserOperationStatus, OAuth2ProviderType, OAuth2Authentication, TelegramAuthentication, MFAMethods, MfaMethod, EndUserEvmAccount, EndUserSolanaAccount, EndUserEvmSmartAccount, UserOperationReceipt, TokenFee, GetEndUserEvmSwapPrice200IssuesAllowance, GetEndUserEvmSwapPrice200IssuesBalance } from '@coinbase/cdp-api-client';
+import { SendEvmTransactionWithEndUserAccountBodyNetwork, SendSolanaTransactionWithEndUserAccountBodyNetwork, APIError, APIErrorType, ErrorType, HttpErrorType, EvmUserOperation, EvmCall as EvmUserOperationCall, EvmUserOperationNetwork, EvmUserOperationStatus, OAuth2ProviderType, OAuth2Authentication, TelegramAuthentication, MFAMethods, MfaMethod, EndUserEvmAccount, EndUserSolanaAccount, EndUserEvmSmartAccount, EndUserBtcAccount, UserOperationReceipt, TokenFee, GetEndUserEvmSwapPrice200IssuesAllowance, GetEndUserEvmSwapPrice200IssuesBalance } from '@coinbase/cdp-api-client';
 import { TransactionSerializableEIP1559 } from 'viem';
 export { 
 /** The API error class */
@@ -23,6 +23,8 @@ type MFAMethods,
 type EndUserEvmAccount, 
 /** Solana account object with address and createdAt */
 type EndUserSolanaAccount, 
+/** Bitcoin HD account object with extendedPublicKey (xpub), network, and addressType */
+type EndUserBtcAccount, 
 /** EVM smart account object with address, ownerAddresses, and createdAt */
 type EndUserEvmSmartAccount, 
 /** User operation receipt from ERC-4337 */
@@ -189,6 +191,8 @@ export type User = {
     evmSmartAccountObjects?: EndUserEvmSmartAccount[];
     /** The Solana account objects associated with the user. Users can have up to 10 Solana accounts. */
     solanaAccountObjects?: EndUserSolanaAccount[];
+    /** The Bitcoin HD account objects associated with the user. One per addressType+network combination. */
+    btcAccountObjects?: EndUserBtcAccount[];
     /** The MFA methods enrolled for the user. */
     mfaMethods?: MFAMethods;
     /** The date and time when the user was last authenticated, in ISO 8601 format. */

package/dist/native-types/version.d.ts

@@ -2,4 +2,4 @@
  * Current version of @coinbase/cdp-core package.
  * This file is auto-generated by scripts/sync-versions.js
  */
-export declare const VERSION = "0.0.106";
+export declare const VERSION = "0.0.108";

package/dist/types/actions/createBitcoinAccount.d.ts

@@ -0,0 +1,26 @@
+import { EndUserBtcAccount, CreateEndUserBtcAccountBodyAddressType, CreateEndUserBtcAccountBodyNetwork } from '@coinbase/cdp-api-client';
+/**
+ * Options for creating a Bitcoin HD (Hierarchical Deterministic) account.
+ */
+export type CreateBitcoinAccountOptions = {
+    /** The Bitcoin network. Defaults to "bitcoin-testnet". */
+    network?: CreateEndUserBtcAccountBodyNetwork;
+    /** The Bitcoin address type. Defaults to "segwit" (BIP-84). */
+    addressType?: CreateEndUserBtcAccountBodyAddressType;
+    /** Optional idempotency key for safe retries. */
+    idempotencyKey?: string;
+};
+/**
+ * The result of creating a Bitcoin HD account.
+ */
+export type CreateBitcoinAccountResult = EndUserBtcAccount;
+/**
+ * Creates a Bitcoin HD (Hierarchical Deterministic) account for the current user.
+ * The account uses BIP-84 derivation (segwit) and returns an extended public key (xpub)
+ * that can be used to derive unlimited child addresses for UTXO discovery.
+ *
+ * @param options - Options for creating the account.
+ * @returns The newly created Bitcoin account (xpub, network, addressType).
+ * @throws Error if the user is not signed in or account creation fails.
+ */
+export declare function createBitcoinAccount(options?: CreateBitcoinAccountOptions): Promise<CreateBitcoinAccountResult>;

package/dist/types/actions/signBitcoinHash.d.ts

@@ -0,0 +1,41 @@
+import { SignBtcHashWithEndUserAccountBodyAddressType, SignBtcHashWithEndUserAccountBodyNetwork, SignBtcHashWithEndUserAccountBodyChange } from '@coinbase/cdp-api-client';
+/**
+ * Options for signing a Bitcoin sighash.
+ */
+export type SignBitcoinHashOptions = {
+    /** The Bitcoin network. Defaults to "bitcoin-testnet". */
+    network?: SignBtcHashWithEndUserAccountBodyNetwork;
+    /** The Bitcoin address type. Defaults to "segwit". */
+    addressType?: SignBtcHashWithEndUserAccountBodyAddressType;
+    /** BIP-32 change level: 0 for external (receive) addresses, 1 for internal (change) addresses. */
+    change: SignBtcHashWithEndUserAccountBodyChange;
+    /** BIP-32 address index — must match the index used to derive the address controlling the UTXO. */
+    addressIndex: number;
+    /**
+     * The 32-byte sighash to sign, as a 64-character hex string (no 0x prefix).
+     * Compute this using hashForWitnessV0 for native SegWit P2WPKH inputs.
+     */
+    hash: string;
+    /** Optional idempotency key for safe retries. */
+    idempotencyKey?: string;
+};
+/**
+ * The result of signing a Bitcoin sighash.
+ */
+export type SignBitcoinHashResult = {
+    /**
+     * The DER-encoded ECDSA signature as a bare hex string (no 0x prefix), 70–72 bytes.
+     * To construct the SegWit witness: append 0x01 (SIGHASH_ALL) to get the full sig,
+     * then push [fullSig, compressedPubKey] onto the witness stack.
+     */
+    signature: string;
+};
+/**
+ * Signs a 32-byte Bitcoin sighash using the end user's HD wallet child key.
+ * One call is required per UTXO input in the transaction.
+ *
+ * @param options - The signing options including derivation path and sighash.
+ * @returns The DER-encoded ECDSA signature (hex, no 0x prefix).
+ * @throws Error if the user is not signed in or signing fails.
+ */
+export declare const signBitcoinHash: (options: SignBitcoinHashOptions) => Promise<SignBitcoinHashResult>;

package/dist/types/auth/toAuthState.d.ts

@@ -1,4 +1,4 @@
-import { EndUser, EndUserEvmAccount, EndUserEvmSmartAccount, EndUserSolanaAccount, MFAMethods } from '@coinbase/cdp-api-client';
+import { EndUser, EndUserEvmAccount, EndUserEvmSmartAccount, EndUserSolanaAccount, EndUserBtcAccount, MFAMethods } from '@coinbase/cdp-api-client';
 import { AuthState } from './types.js';
 import { AuthenticationMethods } from '../types.js';
 /**
@@ -16,6 +16,7 @@ export declare const toAuthStateUser: (endUser: EndUser) => {
     evmAccountObjects: EndUserEvmAccount[];
     evmSmartAccountObjects: EndUserEvmSmartAccount[];
     solanaAccountObjects: EndUserSolanaAccount[];
+    btcAccountObjects: EndUserBtcAccount[] | undefined;
     authenticationMethods: AuthenticationMethods;
     mfaMethods: MFAMethods | undefined;
     lastAuthenticatedAt: string | undefined;

package/dist/types/errors.d.ts

@@ -61,7 +61,9 @@ export type MfaErrorCode =
 /** MFA verification was cancelled. */
  | "CANCELLED"
 /** No MFA listener is registered to handle verification. */
- | "LISTENER_REQUIRED";
+ | "LISTENER_REQUIRED"
+/** MFA listeners are registered but none matched the trigger value. */
+ | "NO_LISTENER_MATCHED";
 /**
  * Error thrown when an MFA operation fails.
  */

package/dist/types/index.d.ts

@@ -26,6 +26,8 @@ export { createDelegationForAccount, type CreateDelegationForAccountOptions, typ
 export { getDelegationForAccount, type GetDelegationForAccountOptions, type GetDelegationForAccountResult, } from './actions/getDelegationForAccount.js';
 export { revokeDelegationForAccount, type RevokeDelegationForAccountOptions, } from './actions/revokeDelegationForAccount.js';
 export { createSolanaAccount, type CreateSolanaAccountOptions, } from './actions/createSolanaAccount.js';
+export { createBitcoinAccount, type CreateBitcoinAccountOptions, type CreateBitcoinAccountResult, } from './actions/createBitcoinAccount.js';
+export { signBitcoinHash, type SignBitcoinHashOptions, type SignBitcoinHashResult, } from './actions/signBitcoinHash.js';
 export { sendEvmEoaUsdc, type SendEvmEoaUsdcOptions, type SendEvmEoaUsdcResult, } from './actions/sendEvmEoaUsdc.js';
 export { sendEvmSmartAccountUsdc, type SendEvmSmartAccountUsdcOptions, type SendEvmSmartAccountUsdcResult, } from './actions/sendEvmSmartAccountUsdc.js';
 export { sendSolanaUsdc, type SendSolanaUsdcOptions, type SendSolanaUsdcResult, type SendSolanaUsdcNetwork, } from './actions/sendSolanaUsdc.js';
@@ -42,7 +44,8 @@ export { submitMfaEnrollment, type SubmitMfaEnrollmentOptions, type SubmitMfaEnr
 export { initiateMfaVerification, type InitiateMfaVerificationOptions, } from './actions/initiateMfaVerification.js';
 export { submitMfaVerification, type SubmitMfaVerificationOptions, } from './actions/submitMfaVerification.js';
 export { cancelMfaVerification } from './actions/cancelMfaVerification.js';
-export { getEnabledMfaMethods, getEnrolledMfaMethods, isEnrolledInMfa, isMfaProtectedAction, isMfaRequired, registerMfaListener, MFA_PROTECTED_ACTIONS, MFA_PROTECTED_FUNCTIONS, type MfaProtectedAction, type MfaListener, type MfaListenerOptions, type MfaVerificationContext, } from './mfa/index.js';
+export { getEnabledMfaMethods, getEnrolledMfaMethods, isEnrolledInMfa, isMfaProtectedAction, isMfaRequired, MFA_PROTECTED_ACTIONS, MFA_PROTECTED_FUNCTIONS, type MfaProtectedAction, type MfaListener, type MfaVerificationContext, } from './mfa/index.js';
+export { registerMfaListener, type MfaListenerOptions } from './mfa/state.web.js';
 export * from './auth/authManager.js';
 export * from './auth/types.js';
 export * from './shared/types.js';

package/dist/types/index.native.d.ts

@@ -30,6 +30,8 @@ export { createDelegationForAccount, type CreateDelegationForAccountOptions, typ
 export { getDelegationForAccount, type GetDelegationForAccountOptions, type GetDelegationForAccountResult, } from './actions/getDelegationForAccount.js';
 export { revokeDelegationForAccount, type RevokeDelegationForAccountOptions, } from './actions/revokeDelegationForAccount.js';
 export { createSolanaAccount } from './actions/createSolanaAccount.js';
+export { createBitcoinAccount, type CreateBitcoinAccountOptions, type CreateBitcoinAccountResult, } from './actions/createBitcoinAccount.js';
+export { signBitcoinHash, type SignBitcoinHashOptions, type SignBitcoinHashResult, } from './actions/signBitcoinHash.js';
 export { sendEvmEoaUsdc, type SendEvmEoaUsdcOptions, type SendEvmEoaUsdcResult, } from './actions/sendEvmEoaUsdc.js';
 export { sendEvmSmartAccountUsdc, type SendEvmSmartAccountUsdcOptions, type SendEvmSmartAccountUsdcResult, } from './actions/sendEvmSmartAccountUsdc.js';
 export { sendSolanaUsdc, type SendSolanaUsdcOptions, type SendSolanaUsdcResult, type SendSolanaUsdcNetwork, } from './actions/sendSolanaUsdc.js';
@@ -46,7 +48,8 @@ export { submitMfaEnrollment, type SubmitMfaEnrollmentOptions, type SubmitMfaEnr
 export { initiateMfaVerification } from './actions/initiateMfaVerification.js';
 export { submitMfaVerification, type SubmitMfaVerificationOptions, } from './actions/submitMfaVerification.js';
 export { cancelMfaVerification } from './actions/cancelMfaVerification.js';
-export { getEnabledMfaMethods, getEnrolledMfaMethods, isEnrolledInMfa, isMfaProtectedAction, isMfaRequired, registerMfaListener, MFA_PROTECTED_ACTIONS, MFA_PROTECTED_FUNCTIONS, type MfaProtectedAction, type MfaListener, type MfaListenerOptions, type MfaVerificationContext, } from './mfa/index.js';
+export { getEnabledMfaMethods, getEnrolledMfaMethods, isEnrolledInMfa, isMfaProtectedAction, isMfaRequired, MFA_PROTECTED_ACTIONS, MFA_PROTECTED_FUNCTIONS, type MfaProtectedAction, type MfaListener, type MfaVerificationContext, } from './mfa/index.js';
+export { registerMfaListener, type MfaListenerOptions } from './mfa/state.js';
 export * from './auth/authManager.js';
 export * from './auth/types.js';
 export * from './types.js';

package/dist/types/index.web.d.ts

@@ -30,6 +30,8 @@ export { createDelegationForAccount, type CreateDelegationForAccountOptions, typ
 export { getDelegationForAccount, type GetDelegationForAccountOptions, type GetDelegationForAccountResult, } from './actions/getDelegationForAccount.js';
 export { revokeDelegationForAccount, type RevokeDelegationForAccountOptions, } from './actions/revokeDelegationForAccount.js';
 export { createSolanaAccount } from './actions/createSolanaAccount.js';
+export { createBitcoinAccount, type CreateBitcoinAccountOptions, type CreateBitcoinAccountResult, } from './actions/createBitcoinAccount.js';
+export { signBitcoinHash, type SignBitcoinHashOptions, type SignBitcoinHashResult, } from './actions/signBitcoinHash.js';
 export { sendEvmEoaUsdc, type SendEvmEoaUsdcOptions, type SendEvmEoaUsdcResult, } from './actions/sendEvmEoaUsdc.js';
 export { sendEvmSmartAccountUsdc, type SendEvmSmartAccountUsdcOptions, type SendEvmSmartAccountUsdcResult, } from './actions/sendEvmSmartAccountUsdc.js';
 export { sendSolanaUsdc, type SendSolanaUsdcOptions, type SendSolanaUsdcResult, type SendSolanaUsdcNetwork, } from './actions/sendSolanaUsdc.js';
@@ -46,7 +48,8 @@ export { submitMfaEnrollment, type SubmitMfaEnrollmentOptions, type SubmitMfaEnr
 export { initiateMfaVerification } from './actions/initiateMfaVerification.js';
 export { submitMfaVerification, type SubmitMfaVerificationOptions, } from './actions/submitMfaVerification.js';
 export { cancelMfaVerification } from './actions/cancelMfaVerification.js';
-export { getEnabledMfaMethods, getEnrolledMfaMethods, isEnrolledInMfa, isMfaProtectedAction, isMfaRequired, registerMfaListener, MFA_PROTECTED_ACTIONS, MFA_PROTECTED_FUNCTIONS, type MfaProtectedAction, type MfaListener, type MfaListenerOptions, type MfaVerificationContext, } from './mfa/index.js';
+export { getEnabledMfaMethods, getEnrolledMfaMethods, isEnrolledInMfa, isMfaProtectedAction, isMfaRequired, MFA_PROTECTED_ACTIONS, MFA_PROTECTED_FUNCTIONS, type MfaProtectedAction, type MfaListener, type MfaVerificationContext, } from './mfa/index.js';
+export { registerMfaListener, type MfaListenerOptions } from './mfa/state.web.js';
 export * from './auth/authManager.js';
 export * from './auth/types.js';
 export * from './shared/types.js';

package/dist/types/mfa/index.d.ts

@@ -1,4 +1,4 @@
-export { hasPendingMfaVerification, registerMfaListener, resolvePendingMfaVerification, rejectPendingMfaVerification, triggerMfaVerification, type MfaListener, type MfaVerificationContext, type MfaListenerOptions, } from './state.js';
+export { hasPendingMfaVerification, resolvePendingMfaVerification, rejectPendingMfaVerification, triggerMfaVerification, type MfaListener, type MfaVerificationContext, } from './state.js';
 export { getEnabledMfaMethods, getEnrolledMfaMethods, isEnrolledInMfa } from './utils.js';
 export { withMfa, ensureMfaVerified, isMfaRequired } from './withMfa.js';
 export { MFA_PROTECTED_ACTIONS, MFA_PROTECTED_FUNCTIONS, isMfaProtectedAction, type MfaProtectedAction, } from './protectedActions.js';

package/dist/types/mfa/protectedActions.d.ts

@@ -1,5 +1,6 @@
 import { createEvmKeyExportIframe, createSolanaKeyExportIframe } from '../actions/createKeyExportIframe.js';
 import { SignEvmHashOptions, SignEvmHashResult, SignEvmTransactionOptions, SignEvmTransactionResult, SignSolanaTransactionOptions, SignSolanaTransactionResult, SendEvmTransactionOptions, SendEvmTransactionResult, SendSolanaTransactionOptions, SendSolanaTransactionResult, SignEvmMessageOptions, SignSolanaMessageOptions, SignSolanaMessageResult, SignEvmTypedDataOptions, SignEvmTypedDataResult, SendUserOperationOptions, SendUserOperationResult, ExportEvmAccountOptions, ExportEvmAccountResult, ExportSolanaAccountOptions, ExportSolanaAccountResult } from '../types.js';
+import { SignBitcoinHashOptions, SignBitcoinHashResult } from '../actions/signBitcoinHash.js';
 /**
  * Map of MFA-protected functions to ensure type safety.
  * If a function is renamed, the import will fail and this file won't compile.
@@ -18,6 +19,7 @@ export declare const MFA_PROTECTED_FUNCTIONS: {
     readonly sendUserOperation: (options: SendUserOperationOptions) => Promise< SendUserOperationResult>;
     readonly exportEvmAccount: (options: ExportEvmAccountOptions) => Promise< ExportEvmAccountResult>;
     readonly exportSolanaAccount: (options: ExportSolanaAccountOptions) => Promise< ExportSolanaAccountResult>;
+    readonly signBitcoinHash: (options: SignBitcoinHashOptions) => Promise< SignBitcoinHashResult>;
     readonly createEvmKeyExportIframe: typeof createEvmKeyExportIframe;
     readonly createSolanaKeyExportIframe: typeof createSolanaKeyExportIframe;
 };

package/dist/types/mfa/state.d.ts

@@ -12,50 +12,66 @@ export type MfaVerificationContext = {
  */
 export type MfaListener = (context: MfaVerificationContext) => void;
 /**
- * Options for registering an MFA listener.
+ * Options for registering an MFA listener at the core layer.
+ *
+ * The core registry is platform-agnostic. The optional `matches` predicate
+ * lets a listener express "only fire when the trigger value satisfies this
+ * predicate." Platform adapters (e.g. the web adapter) layer their own
+ * scoping semantics on top of this opaque predicate.
  */
 export type MfaListenerOptions = {
     /**
-     * Optional DOM element that defines the scope for this handler.
-     * When provided, this handler will only respond to MFA triggers
-     * that originate from within this element (e.g., button clicks inside a container).
-     * Handlers without a scope act as global handlers.
+     * Optional predicate that gates this listener.
+     *
+     * When provided, the listener only fires when `triggerMfaVerification` is
+     * called with a `trigger` value (or a default trigger supplied by the
+     * platform) that satisfies the predicate. When omitted, the listener is
+     * a "global" listener that fires only when no predicate-based listener
+     * matched the trigger.
      */
-    scope?: HTMLElement;
+    matches?: (trigger: unknown) => boolean;
 };
 /**
- * Registers an MFA verification listener.
+ * Installs (or clears) the default trigger provider.
  *
- * Listeners can be global (no scope) or scoped to a specific DOM element.
- * The event bubbles up from the trigger element through the DOM:
- * - Scoped listeners listen on their container and catch events from within
- * - Global listeners listen on document and catch anything that bubbles up
+ * The web entry point uses this to expose `document.activeElement` as the
+ * default trigger so scoped listeners can match against it. Native entry
+ * points have no DOM and therefore install nothing.
  *
- * @param {MfaListener} listener - The listener function to call when MFA is required.
- * @param {MfaListenerOptions} [options] - Optional configuration including scope element.
- * @returns {() => void} A function to unregister the listener.
+ * @param provider - Function that returns the trigger value, or `null` to clear.
+ * @internal
+ */
+export declare const setDefaultTriggerProvider: (provider: (() => unknown) | null) => void;
+/**
+ * Registers an MFA verification listener.
+ *
+ * Listeners can be global (no `matches` predicate) or scoped via an opaque
+ * predicate. When `triggerMfaVerification` fires:
+ * - If any predicate-based listener matches the trigger, only those listeners
+ *   are invoked.
+ * - Otherwise, all global listeners are invoked.
  *
- * @example
- * ```typescript
- * // Global listener (responds to any MFA trigger not handled by a scoped listener)
- * const unregisterGlobal = registerMfaListener(({ methods }) => {
- *   openMfaModal(methods);
- * });
+ * Platform adapters wrap this function to provide their own scoping shape
+ * (e.g. a DOM `scope: HTMLElement` on web).
  *
- * // Scoped listener (only responds to triggers inside the container)
- * const container = document.getElementById('my-flow');
- * if (container) {
- *   const unregisterScoped = registerMfaListener(
- *     ({ methods }) => showInlineMfa(methods),
- *     { scope: container }
- *   );
- *   // Later, when done:
- *   unregisterScoped();
- * }
+ * Notes:
+ * - Matched suppresses globals. When any predicate-based listener matches,
+ *   all global (unscoped) listeners are skipped, including the app's own
+ *   default modal. This mirrors the previous DOM implementation's
+ *   stopPropagation semantics. Prefer narrow predicates; a permissive
+ *   `matches: () => true` silently suppresses every global listener.
+ * - Coordination, not authz. This registry is a UX coordination layer for
+ *   which listener shows the verification UI. The server still enforces MFA
+ *   via `mfa_required` regardless of which listener fires (or whether one
+ *   fires at all).
+ * - React Native: RN does not install a default trigger provider, so
+ *   `matches` is invoked with `undefined`. Predicates that don't accept
+ *   `undefined` will never match — most RN consumers should omit `matches`
+ *   entirely and register a global listener.
  *
- * // Clean up global listener when done:
- * unregisterGlobal();
- * ```
+ * @param {MfaListener} listener - The listener function to call when MFA is required.
+ * @param {MfaListenerOptions} [options] - Optional configuration with an opaque predicate.
+ * @returns {() => void} A function to unregister the listener.
  */
 export declare const registerMfaListener: (listener: MfaListener, options?: MfaListenerOptions) => (() => void);
 /**
@@ -68,18 +84,22 @@ export declare const hasRegisteredMfaListeners: () => boolean;
  * Triggers the MFA verification flow and returns a Promise that resolves
  * when MFA is successfully completed.
  *
- * Dispatches a custom DOM event from the trigger element that bubbles up.
- * Scoped handlers catch events from within their container.
- * Global handlers catch anything that bubbles to document.
+ * Selection rule:
+ * - All registered listeners with a `matches` predicate are evaluated against
+ *   the trigger (the explicit `trigger` argument, or the value returned by
+ *   the default trigger provider if one is installed).
+ * - If any predicate matches, only the matching listeners are invoked.
+ * - Otherwise, all listeners without a predicate (global listeners) are invoked.
  *
- * If no handlers are registered, this is a no-op and resolves immediately.
+ * If no listeners are registered, this is a no-op and resolves immediately.
  * Use `hasRegisteredMfaListeners()` to check before calling if needed.
  *
  * @param {MfaMethod[]} methods - The MFA methods available for verification.
+ * @param {unknown} [trigger] - Optional opaque trigger value used by listener predicates.
  * @returns {Promise<void>} A Promise that resolves when MFA is complete.
  * @internal
  */
-export declare const triggerMfaVerification: (methods: MfaMethod[]) => Promise<void>;
+export declare const triggerMfaVerification: (methods: MfaMethod[], trigger?: unknown) => Promise<void>;
 /**
  * Resolves the pending MFA verification Promise.
  * Called internally after successful MFA submission.