@coinbase/cdp-core 0.0.107 → 0.0.108

package/dist/types/mfa/state.web.d.ts

@@ -0,0 +1,62 @@
+import { MfaListener } from './state.js';
+/**
+ * Options for registering an MFA listener on web.
+ *
+ * Web-specific shape: when a `scope` element is provided, the listener only
+ * fires for MFA triggers that originate from inside that element (based on
+ * `document.activeElement` at trigger time, supplied by the web entry point's
+ * default trigger provider).
+ *
+ * Listeners without a scope act as global listeners.
+ */
+export type MfaListenerOptions = {
+    /**
+     * Optional DOM element that defines the scope for this handler.
+     * When provided, this handler only responds to MFA triggers that originate
+     * from within this element. Handlers without a scope act as global handlers.
+     */
+    scope?: HTMLElement;
+};
+/**
+ * Registers an MFA verification listener (web).
+ *
+ * The web adapter translates the DOM-shaped `scope` option into an opaque
+ * predicate against the trigger element supplied by the web entry point's
+ * default trigger provider (`document.activeElement` or `document.body`).
+ *
+ * Notes:
+ * - Matched suppresses globals. When any scoped listener's `scope` contains
+ *   the trigger, all global (unscoped) listeners are skipped, including the
+ *   app's own default modal. Mirrors the previous DOM implementation's
+ *   stopPropagation semantics.
+ * - Innermost wins. When multiple scoped listeners contain the trigger
+ *   (e.g. a page container scope and a nested per-flow scope), only the
+ *   deepest scope's listener fires. Mirrors DOM bubble order.
+ * - Shadow DOM. `Element.contains` does not cross shadow DOM boundaries.
+ *   A trigger inside an open shadow tree whose host is inside `scope` will
+ *   not match. Workaround: register a global listener.
+ * - Coordination, not authz. Same caveat as the core registry — the server
+ *   still enforces MFA via `mfa_required`.
+ *
+ * @param {MfaListener} listener - The listener function to call when MFA is required.
+ * @param {MfaListenerOptions} [options] - Optional configuration including a DOM scope element.
+ * @returns {() => void} A function to unregister the listener.
+ *
+ * @example
+ * ```typescript
+ * // Global listener (responds to any MFA trigger not handled by a scoped listener)
+ * const unregisterGlobal = registerMfaListener(({ methods }) => {
+ *   openMfaModal(methods);
+ * });
+ *
+ * // Scoped listener (only responds to triggers inside the container)
+ * const container = document.getElementById('my-flow');
+ * if (container) {
+ *   const unregisterScoped = registerMfaListener(
+ *     ({ methods }) => showInlineMfa(methods),
+ *     { scope: container }
+ *   );
+ * }
+ * ```
+ */
+export declare const registerMfaListener: (listener: MfaListener, options?: MfaListenerOptions) => (() => void);

package/dist/types/version.d.ts

@@ -2,4 +2,4 @@
  * Current version of @coinbase/cdp-core package.
  * This file is auto-generated by scripts/sync-versions.js
  */
-export declare const VERSION = "0.0.106";
+export declare const VERSION = "0.0.108";

package/dist/web/index.web.js

@@ -1,219 +1,225 @@
-import { Analytics as r } from "./index.web2.js";
+import { Analytics as e } from "./index.web2.js";
 import "./index.web3.js";
-import { setPlatformServices as o } from "./index.web4.js";
-import { webCrypto as e } from "./index.web5.js";
-import { webOAuth as t } from "./index.web6.js";
-import { webStorage as m } from "./index.web7.js";
-import { VERSION as i } from "./index.web8.js";
-import { initialize as u } from "./index.web9.js";
-import { signInWithEmail as A } from "./index.web10.js";
-import { signInWithSms as v } from "./index.web11.js";
-import { signInWithOAuth as h } from "./index.web12.js";
-import { signInWithSiwe as P } from "./index.web13.js";
-import { verifyEmailOTP as C } from "./index.web14.js";
-import { verifySmsOTP as R } from "./index.web15.js";
-import { verifyOAuth as D } from "./index.web16.js";
-import { verifySiweSignature as k } from "./index.web17.js";
-import { verifyTelegramOAuth as F } from "./index.web18.js";
-import { authenticateWithJWT as V } from "./index.web19.js";
-import { getCurrentUser as b } from "./index.web20.js";
-import { isSignedIn as B } from "./index.web21.js";
-import { signOut as Y } from "./index.web22.js";
-import { getAccessToken as X } from "./index.web23.js";
-import { getAccessTokenExpiration as q } from "./index.web24.js";
-import { onAuthStateChange as G } from "./index.web25.js";
-import { onOAuthStateChange as Q } from "./index.web26.js";
-import { signEvmHash as $ } from "./index.web27.js";
-import { signEvmTransaction as or } from "./index.web28.js";
-import { signEvmMessage as tr } from "./index.web29.js";
-import { signEvmTypedData as ir } from "./index.web30.js";
-import { signSolanaTransaction as ar } from "./index.web31.js";
-import { signSolanaMessage as pr } from "./index.web32.js";
-import { sendEvmTransaction as Er } from "./index.web33.js";
-import { sendSolanaTransaction as sr } from "./index.web34.js";
-import { sendUserOperation as lr } from "./index.web35.js";
-import { getUserOperation as ur } from "./index.web36.js";
-import { exportEvmAccount as Ar } from "./index.web37.js";
-import { exportSolanaAccount as vr } from "./index.web38.js";
-import { createSpendPermission as hr } from "./index.web39.js";
-import { listSpendPermissions as Pr } from "./index.web40.js";
-import { APIError as Cr, ErrorType as Or, EvmEip7702DelegationNetwork as Rr, EvmSwapsNetwork as yr, HttpErrorType as Dr, OAuth2ProviderType as Ur, SendEvmTransactionWithEndUserAccountBodyNetwork as kr, SendSolanaTransactionWithEndUserAccountBodyNetwork as wr } from "@coinbase/cdp-api-client";
-import { revokeSpendPermission as Nr } from "./index.web41.js";
-import { getCurrentUserSync as Wr } from "./index.web42.js";
-import { fetchWithX402 as Hr } from "./index.web43.js";
-import { linkGoogle as Kr } from "./index.web44.js";
-import { linkSms as Lr } from "./index.web45.js";
-import { linkEmail as jr } from "./index.web46.js";
-import { linkOAuth as zr } from "./index.web47.js";
-import { linkApple as Jr } from "./index.web48.js";
-import { linkSiwe as Zr } from "./index.web49.js";
-import { createEvmEoaAccount as ro } from "./index.web50.js";
-import { createEvmSmartAccount as eo } from "./index.web51.js";
-import { createEvmEip7702Delegation as mo } from "./index.web52.js";
-import { getEvmEip7702DelegationOperation as no } from "./index.web53.js";
-import { waitForEvmEip7702Delegation as fo } from "./index.web54.js";
-import { createDelegation as xo } from "./index.web55.js";
-import { getDelegation as co } from "./index.web56.js";
-import { revokeDelegation as go } from "./index.web57.js";
-import { createDelegationForAccount as So } from "./index.web58.js";
-import { getDelegationForAccount as Ao } from "./index.web59.js";
-import { revokeDelegationForAccount as vo } from "./index.web60.js";
-import { createSolanaAccount as ho } from "./index.web61.js";
-import { createBitcoinAccount as Po } from "./index.web62.js";
-import { signBitcoinHash as Co } from "./index.web63.js";
-import { sendEvmEoaUsdc as Ro } from "./index.web64.js";
-import { sendEvmSmartAccountUsdc as Do } from "./index.web65.js";
-import { sendSolanaUsdc as ko } from "./index.web66.js";
-import { sendUsdc as Fo } from "./index.web67.js";
-import { getSwapPrice as Vo } from "./index.web68.js";
-import { executeSwap as bo } from "./index.web69.js";
-import { getMfaConfig as Bo } from "./index.web70.js";
-import { getProjectConfig as Yo } from "./index.web71.js";
-import { getConfig as Xo, getMfaConfigState as jo, getProjectConfigState as qo } from "./index.web72.js";
-import { recordMfaEnrollmentPrompted as Go } from "./index.web73.js";
-import { initiateMfaEnrollment as Qo } from "./index.web74.js";
-import { submitMfaEnrollment as $o } from "./index.web75.js";
-import { initiateMfaVerification as oe } from "./index.web76.js";
-import { submitMfaVerification as te } from "./index.web77.js";
-import { cancelMfaVerification as ie } from "./index.web78.js";
-import { registerMfaListener as ae } from "./index.web79.js";
-import { getEnabledMfaMethods as pe, getEnrolledMfaMethods as xe, isEnrolledInMfa as Ee } from "./index.web80.js";
-import { isMfaRequired as se } from "./index.web81.js";
-import { MFA_PROTECTED_ACTIONS as le, MFA_PROTECTED_FUNCTIONS as Se, isMfaProtectedAction as ue } from "./index.web82.js";
-import { AuthManager as Ae } from "./index.web83.js";
-import { CustomAuthError as ve } from "./index.web84.js";
-import { toViemAccount as he } from "./index.web85.js";
-import { InputValidationError as Pe, InternalError as _e, MfaError as Ce, ModuleResolutionError as Oe, SwapError as Re, ValidationError as ye } from "./index.web86.js";
-import { validatePhoneNumber as Ue } from "./index.web87.js";
-import { createCDPEmbeddedWallet as we } from "./index.web88.js";
-import { EIP1193ProviderError as Ne, STANDARD_ERROR_CODES as Ve } from "./index.web89.js";
+import { setDefaultTriggerProvider as o } from "./index.web4.js";
+import { setPlatformServices as t } from "./index.web5.js";
+import { webCrypto as m } from "./index.web6.js";
+import { webOAuth as n } from "./index.web7.js";
+import { webStorage as i } from "./index.web8.js";
+import { VERSION as a } from "./index.web9.js";
+import { initialize as T } from "./index.web10.js";
+import { signInWithEmail as M } from "./index.web11.js";
+import { signInWithSms as I } from "./index.web12.js";
+import { signInWithOAuth as _ } from "./index.web13.js";
+import { signInWithSiwe as C } from "./index.web14.js";
+import { verifyEmailOTP as R } from "./index.web15.js";
+import { verifySmsOTP as U } from "./index.web16.js";
+import { verifyOAuth as w } from "./index.web17.js";
+import { verifySiweSignature as N } from "./index.web18.js";
+import { verifyTelegramOAuth as V } from "./index.web19.js";
+import { authenticateWithJWT as H } from "./index.web20.js";
+import { getCurrentUser as K } from "./index.web21.js";
+import { isSignedIn as L } from "./index.web22.js";
+import { signOut as j } from "./index.web23.js";
+import { getAccessToken as z } from "./index.web24.js";
+import { getAccessTokenExpiration as J } from "./index.web25.js";
+import { onAuthStateChange as Z } from "./index.web26.js";
+import { onOAuthStateChange as rr } from "./index.web27.js";
+import { signEvmHash as or } from "./index.web28.js";
+import { signEvmTransaction as mr } from "./index.web29.js";
+import { signEvmMessage as ir } from "./index.web30.js";
+import { signEvmTypedData as fr } from "./index.web31.js";
+import { signSolanaTransaction as xr } from "./index.web32.js";
+import { signSolanaMessage as cr } from "./index.web33.js";
+import { sendEvmTransaction as gr } from "./index.web34.js";
+import { sendSolanaTransaction as dr } from "./index.web35.js";
+import { sendUserOperation as Sr } from "./index.web36.js";
+import { getUserOperation as Tr } from "./index.web37.js";
+import { exportEvmAccount as Mr } from "./index.web38.js";
+import { exportSolanaAccount as Ir } from "./index.web39.js";
+import { createSpendPermission as _r } from "./index.web40.js";
+import { listSpendPermissions as Cr } from "./index.web41.js";
+import { APIError as Rr, ErrorType as Dr, EvmEip7702DelegationNetwork as Ur, EvmSwapsNetwork as kr, HttpErrorType as wr, OAuth2ProviderType as Fr, SendEvmTransactionWithEndUserAccountBodyNetwork as Nr, SendSolanaTransactionWithEndUserAccountBodyNetwork as br } from "@coinbase/cdp-api-client";
+import { revokeSpendPermission as Wr } from "./index.web42.js";
+import { getCurrentUserSync as Br } from "./index.web43.js";
+import { fetchWithX402 as Yr } from "./index.web44.js";
+import { linkGoogle as Xr } from "./index.web45.js";
+import { linkSms as qr } from "./index.web46.js";
+import { linkEmail as Gr } from "./index.web47.js";
+import { linkOAuth as Qr } from "./index.web48.js";
+import { linkApple as $r } from "./index.web49.js";
+import { linkSiwe as ee } from "./index.web50.js";
+import { createEvmEoaAccount as te } from "./index.web51.js";
+import { createEvmSmartAccount as ne } from "./index.web52.js";
+import { createEvmEip7702Delegation as ae } from "./index.web53.js";
+import { getEvmEip7702DelegationOperation as pe } from "./index.web54.js";
+import { waitForEvmEip7702Delegation as Ee } from "./index.web55.js";
+import { createDelegation as se } from "./index.web56.js";
+import { getDelegation as le } from "./index.web57.js";
+import { revokeDelegation as ue } from "./index.web58.js";
+import { createDelegationForAccount as Ae } from "./index.web59.js";
+import { getDelegationForAccount as ve } from "./index.web60.js";
+import { revokeDelegationForAccount as he } from "./index.web61.js";
+import { createSolanaAccount as Pe } from "./index.web62.js";
+import { createBitcoinAccount as ye } from "./index.web63.js";
+import { signBitcoinHash as Oe } from "./index.web64.js";
+import { sendEvmEoaUsdc as De } from "./index.web65.js";
+import { sendEvmSmartAccountUsdc as ke } from "./index.web66.js";
+import { sendSolanaUsdc as Fe } from "./index.web67.js";
+import { sendUsdc as be } from "./index.web68.js";
+import { getSwapPrice as We } from "./index.web69.js";
+import { executeSwap as Be } from "./index.web70.js";
+import { getMfaConfig as Ye } from "./index.web71.js";
+import { getProjectConfig as Xe } from "./index.web72.js";
+import { getConfig as qe, getMfaConfigState as ze, getProjectConfigState as Ge } from "./index.web73.js";
+import { recordMfaEnrollmentPrompted as Qe } from "./index.web74.js";
+import { initiateMfaEnrollment as $e } from "./index.web75.js";
+import { submitMfaEnrollment as eo } from "./index.web76.js";
+import { initiateMfaVerification as to } from "./index.web77.js";
+import { submitMfaVerification as no } from "./index.web78.js";
+import { cancelMfaVerification as ao } from "./index.web79.js";
+import { getEnabledMfaMethods as po, getEnrolledMfaMethods as xo, isEnrolledInMfa as Eo } from "./index.web80.js";
+import { isMfaRequired as so } from "./index.web81.js";
+import { MFA_PROTECTED_ACTIONS as lo, MFA_PROTECTED_FUNCTIONS as uo, isMfaProtectedAction as So } from "./index.web82.js";
+import { registerMfaListener as To } from "./index.web83.js";
+import { AuthManager as Mo } from "./index.web84.js";
+import { CustomAuthError as Io } from "./index.web85.js";
+import { toViemAccount as _o } from "./index.web86.js";
+import { InputValidationError as Co, InternalError as Oo, MfaError as Ro, ModuleResolutionError as Do, SwapError as Uo, ValidationError as ko } from "./index.web87.js";
+import { validatePhoneNumber as Fo } from "./index.web88.js";
+import { createCDPEmbeddedWallet as bo } from "./index.web89.js";
+import { EIP1193ProviderError as Wo, STANDARD_ERROR_CODES as Ho } from "./index.web90.js";
 import "viem";
 import "zustand";
-import { buildKeyExportIframeUrl as be, calculateSecureIframeHeight as He, createIframe as Be, getSecureIframeOrigin as Ke, isSecureIframeKeyExportMessage as Ye, sendSecureIframeMessage as Le, validateSecureIframeEnvironment as Xe } from "./index.web90.js";
-import { DEFAULT_SECURE_IFRAME_BASE_PATH as qe, DEFAULT_SECURE_IFRAME_THEME as ze, SECURE_IFRAME_EVENT_TYPE as Ge, SECURE_IFRAME_EVENT_TYPE_PREFIX as Je, SECURE_IFRAME_KEY_EXPORT_EVENT_TYPE as Qe } from "./index.web91.js";
-import { createEvmKeyExportIframe as $e, createSolanaKeyExportIframe as rt } from "./index.web92.js";
-import { toTransactionSigner as et } from "./index.web93.js";
-r.registerPackageVersion("core", i);
-o({
-  crypto: e,
-  storage: m,
-  oauth: t
+import { buildKeyExportIframeUrl as Ko, calculateSecureIframeHeight as Yo, createIframe as Lo, getSecureIframeOrigin as Xo, isSecureIframeKeyExportMessage as jo, sendSecureIframeMessage as qo, validateSecureIframeEnvironment as zo } from "./index.web91.js";
+import { DEFAULT_SECURE_IFRAME_BASE_PATH as Jo, DEFAULT_SECURE_IFRAME_THEME as Qo, SECURE_IFRAME_EVENT_TYPE as Zo, SECURE_IFRAME_EVENT_TYPE_PREFIX as $o, SECURE_IFRAME_KEY_EXPORT_EVENT_TYPE as rt } from "./index.web92.js";
+import { createEvmKeyExportIframe as ot, createSolanaKeyExportIframe as tt } from "./index.web93.js";
+import { toTransactionSigner as nt } from "./index.web94.js";
+e.registerPackageVersion("core", a);
+t({
+  crypto: m,
+  storage: i,
+  oauth: n
+});
+o(() => {
+  if (typeof document > "u") return;
+  const r = document.activeElement;
+  return r && r !== document.body ? r : document.body;
 });
 export {
-  Cr as APIError,
-  Ae as AuthManager,
-  ve as CustomAuthError,
-  qe as DEFAULT_SECURE_IFRAME_BASE_PATH,
-  ze as DEFAULT_SECURE_IFRAME_THEME,
-  Ne as EIP1193ProviderError,
-  Or as ErrorType,
-  Rr as EvmEip7702DelegationNetwork,
-  yr as EvmSwapsNetwork,
-  Dr as HttpErrorType,
-  Pe as InputValidationError,
-  _e as InternalError,
-  le as MFA_PROTECTED_ACTIONS,
-  Se as MFA_PROTECTED_FUNCTIONS,
-  Ce as MfaError,
-  Oe as ModuleResolutionError,
-  Ur as OAuth2ProviderType,
-  Ge as SECURE_IFRAME_EVENT_TYPE,
-  Je as SECURE_IFRAME_EVENT_TYPE_PREFIX,
-  Qe as SECURE_IFRAME_KEY_EXPORT_EVENT_TYPE,
-  Ve as STANDARD_ERROR_CODES,
-  kr as SendEvmTransactionWithEndUserAccountBodyNetwork,
-  wr as SendSolanaTransactionWithEndUserAccountBodyNetwork,
-  Re as SwapError,
-  ye as ValidationError,
-  V as authenticateWithJWT,
-  be as buildKeyExportIframeUrl,
-  He as calculateSecureIframeHeight,
-  ie as cancelMfaVerification,
-  Po as createBitcoinAccount,
-  we as createCDPEmbeddedWallet,
-  xo as createDelegation,
-  So as createDelegationForAccount,
-  mo as createEvmEip7702Delegation,
-  ro as createEvmEoaAccount,
-  $e as createEvmKeyExportIframe,
-  eo as createEvmSmartAccount,
-  Be as createIframe,
-  ho as createSolanaAccount,
-  rt as createSolanaKeyExportIframe,
-  hr as createSpendPermission,
-  bo as executeSwap,
-  Ar as exportEvmAccount,
-  vr as exportSolanaAccount,
-  Hr as fetchWithX402,
-  X as getAccessToken,
-  q as getAccessTokenExpiration,
-  Xo as getConfig,
-  b as getCurrentUser,
-  Wr as getCurrentUserSync,
-  co as getDelegation,
-  Ao as getDelegationForAccount,
-  pe as getEnabledMfaMethods,
-  xe as getEnrolledMfaMethods,
-  no as getEvmEip7702DelegationOperation,
-  Bo as getMfaConfig,
-  jo as getMfaConfigState,
-  Yo as getProjectConfig,
-  qo as getProjectConfigState,
-  Ke as getSecureIframeOrigin,
-  Vo as getSwapPrice,
-  ur as getUserOperation,
-  u as initialize,
-  Qo as initiateMfaEnrollment,
-  oe as initiateMfaVerification,
-  Ee as isEnrolledInMfa,
-  ue as isMfaProtectedAction,
-  se as isMfaRequired,
-  Ye as isSecureIframeKeyExportMessage,
-  B as isSignedIn,
-  Jr as linkApple,
-  jr as linkEmail,
-  Kr as linkGoogle,
-  zr as linkOAuth,
-  Zr as linkSiwe,
-  Lr as linkSms,
-  Pr as listSpendPermissions,
-  G as onAuthStateChange,
-  Q as onOAuthStateChange,
-  Go as recordMfaEnrollmentPrompted,
-  ae as registerMfaListener,
-  go as revokeDelegation,
-  vo as revokeDelegationForAccount,
-  Nr as revokeSpendPermission,
-  Ro as sendEvmEoaUsdc,
-  Do as sendEvmSmartAccountUsdc,
-  Er as sendEvmTransaction,
-  Le as sendSecureIframeMessage,
-  sr as sendSolanaTransaction,
-  ko as sendSolanaUsdc,
-  Fo as sendUsdc,
-  lr as sendUserOperation,
-  Co as signBitcoinHash,
-  $ as signEvmHash,
-  tr as signEvmMessage,
-  or as signEvmTransaction,
-  ir as signEvmTypedData,
-  A as signInWithEmail,
-  h as signInWithOAuth,
-  P as signInWithSiwe,
-  v as signInWithSms,
-  Y as signOut,
-  pr as signSolanaMessage,
-  ar as signSolanaTransaction,
-  $o as submitMfaEnrollment,
-  te as submitMfaVerification,
-  et as toTransactionSigner,
-  he as toViemAccount,
-  Ue as validatePhoneNumber,
-  Xe as validateSecureIframeEnvironment,
-  C as verifyEmailOTP,
-  D as verifyOAuth,
-  k as verifySiweSignature,
-  R as verifySmsOTP,
-  F as verifyTelegramOAuth,
-  fo as waitForEvmEip7702Delegation
+  Rr as APIError,
+  Mo as AuthManager,
+  Io as CustomAuthError,
+  Jo as DEFAULT_SECURE_IFRAME_BASE_PATH,
+  Qo as DEFAULT_SECURE_IFRAME_THEME,
+  Wo as EIP1193ProviderError,
+  Dr as ErrorType,
+  Ur as EvmEip7702DelegationNetwork,
+  kr as EvmSwapsNetwork,
+  wr as HttpErrorType,
+  Co as InputValidationError,
+  Oo as InternalError,
+  lo as MFA_PROTECTED_ACTIONS,
+  uo as MFA_PROTECTED_FUNCTIONS,
+  Ro as MfaError,
+  Do as ModuleResolutionError,
+  Fr as OAuth2ProviderType,
+  Zo as SECURE_IFRAME_EVENT_TYPE,
+  $o as SECURE_IFRAME_EVENT_TYPE_PREFIX,
+  rt as SECURE_IFRAME_KEY_EXPORT_EVENT_TYPE,
+  Ho as STANDARD_ERROR_CODES,
+  Nr as SendEvmTransactionWithEndUserAccountBodyNetwork,
+  br as SendSolanaTransactionWithEndUserAccountBodyNetwork,
+  Uo as SwapError,
+  ko as ValidationError,
+  H as authenticateWithJWT,
+  Ko as buildKeyExportIframeUrl,
+  Yo as calculateSecureIframeHeight,
+  ao as cancelMfaVerification,
+  ye as createBitcoinAccount,
+  bo as createCDPEmbeddedWallet,
+  se as createDelegation,
+  Ae as createDelegationForAccount,
+  ae as createEvmEip7702Delegation,
+  te as createEvmEoaAccount,
+  ot as createEvmKeyExportIframe,
+  ne as createEvmSmartAccount,
+  Lo as createIframe,
+  Pe as createSolanaAccount,
+  tt as createSolanaKeyExportIframe,
+  _r as createSpendPermission,
+  Be as executeSwap,
+  Mr as exportEvmAccount,
+  Ir as exportSolanaAccount,
+  Yr as fetchWithX402,
+  z as getAccessToken,
+  J as getAccessTokenExpiration,
+  qe as getConfig,
+  K as getCurrentUser,
+  Br as getCurrentUserSync,
+  le as getDelegation,
+  ve as getDelegationForAccount,
+  po as getEnabledMfaMethods,
+  xo as getEnrolledMfaMethods,
+  pe as getEvmEip7702DelegationOperation,
+  Ye as getMfaConfig,
+  ze as getMfaConfigState,
+  Xe as getProjectConfig,
+  Ge as getProjectConfigState,
+  Xo as getSecureIframeOrigin,
+  We as getSwapPrice,
+  Tr as getUserOperation,
+  T as initialize,
+  $e as initiateMfaEnrollment,
+  to as initiateMfaVerification,
+  Eo as isEnrolledInMfa,
+  So as isMfaProtectedAction,
+  so as isMfaRequired,
+  jo as isSecureIframeKeyExportMessage,
+  L as isSignedIn,
+  $r as linkApple,
+  Gr as linkEmail,
+  Xr as linkGoogle,
+  Qr as linkOAuth,
+  ee as linkSiwe,
+  qr as linkSms,
+  Cr as listSpendPermissions,
+  Z as onAuthStateChange,
+  rr as onOAuthStateChange,
+  Qe as recordMfaEnrollmentPrompted,
+  To as registerMfaListener,
+  ue as revokeDelegation,
+  he as revokeDelegationForAccount,
+  Wr as revokeSpendPermission,
+  De as sendEvmEoaUsdc,
+  ke as sendEvmSmartAccountUsdc,
+  gr as sendEvmTransaction,
+  qo as sendSecureIframeMessage,
+  dr as sendSolanaTransaction,
+  Fe as sendSolanaUsdc,
+  be as sendUsdc,
+  Sr as sendUserOperation,
+  Oe as signBitcoinHash,
+  or as signEvmHash,
+  ir as signEvmMessage,
+  mr as signEvmTransaction,
+  fr as signEvmTypedData,
+  M as signInWithEmail,
+  _ as signInWithOAuth,
+  C as signInWithSiwe,
+  I as signInWithSms,
+  j as signOut,
+  cr as signSolanaMessage,
+  xr as signSolanaTransaction,
+  eo as submitMfaEnrollment,
+  no as submitMfaVerification,
+  nt as toTransactionSigner,
+  _o as toViemAccount,
+  Fo as validatePhoneNumber,
+  zo as validateSecureIframeEnvironment,
+  R as verifyEmailOTP,
+  w as verifyOAuth,
+  N as verifySiweSignature,
+  U as verifySmsOTP,
+  V as verifyTelegramOAuth,
+  Ee as waitForEvmEip7702Delegation
 };

package/dist/web/index.web10.js

@@ -1,15 +1,120 @@
-import { Analytics as t } from "./index.web2.js";
+import { configureCdpApiClient as b, setAuthManager as j, getMfaConfig as k, APIError as u, getProjectConfig as C } from "@coinbase/cdp-api-client";
+import { Analytics as c } from "./index.web2.js";
 import "./index.web3.js";
-import { initiateSignIn as n } from "./index.web117.js";
-import "@coinbase/cdp-api-client";
+import { createAuthManager as v } from "./index.web114.js";
+import { OAuthManager as S } from "./index.web115.js";
+import { MockAuthManager as M } from "./index.web116.js";
+import { MockOAuthManager as P } from "./index.web117.js";
+import { getPlatformServices as g } from "./index.web5.js";
+import { getConfig as a, setCoreAuthManager as m, setCoreOAuthManager as h, setMfaConfig as I, setProjectConfig as A, getCoreAuthManager as w, setConfig as y } from "./index.web73.js";
 import "viem";
-const l = async (i) => (t.sendActionCallEvent({ name: "sign_in_with_email" }), n(
-  {
-    email: i.email,
-    type: "email"
-  },
-  i.idempotencyKey
-));
+const L = async (t) => {
+  if (!t.projectId)
+    throw new Error("Project ID is required");
+  t.disableAnalytics === void 0 || t.disableAnalytics === !1 ? (c.developerIdentifier = t.projectId, c.isUsingMocks = t.useMock === !0, c.isProduction = !t.basePath || t.basePath === "https://api.cdp.coinbase.com/platform") : c.enabled = !1;
+  let i;
+  try {
+    i = a().projectId !== t.projectId;
+  } catch {
+    i = !0;
+  }
+  if (y(t), a().useMock) {
+    m(new M(a().projectId)), h(new P()), I({
+      projectId: a().projectId,
+      enabled: !1,
+      totpConfig: { enabled: !1 },
+      smsConfig: { enabled: !1 },
+      verificationWindowSeconds: 300,
+      promptEnrollmentOnLogin: !1,
+      requireVerificationOnLogin: !1,
+      createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+      updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+    }), A({
+      projectId: a().projectId,
+      name: "Mock Project",
+      createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+      updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+    });
+    return;
+  }
+  let s;
+  try {
+    const e = g();
+    s = e.secureStorage ? {
+      getRefreshToken: () => e.secureStorage.getItem("cdp_refresh_token"),
+      setRefreshToken: (o) => e.secureStorage.setItem("cdp_refresh_token", o),
+      removeRefreshToken: () => e.secureStorage.removeItem("cdp_refresh_token")
+    } : (
+      // This is used only in WebKit browsers by virtue of the API
+      {
+        getRefreshToken: () => e.storage.getItem("cdp_refresh_token"),
+        setRefreshToken: (o) => e.storage.setItem("cdp_refresh_token", o),
+        removeRefreshToken: () => e.storage.removeItem("cdp_refresh_token")
+      }
+    );
+  } catch {
+    c.sendSessionRefreshEvent({
+      name: "refresh_token_storage_not_initialized"
+    }), s = void 0;
+  }
+  let r, n, p;
+  try {
+    const e = g();
+    p = e.deviceInfo?.getPlatform?.(), e.attestation && (r = e.attestation, n = e.deviceInfo?.getAppBundleId?.());
+  } catch {
+    r = void 0;
+  }
+  if (b({
+    debugging: a().debugging,
+    basePath: a().basePath,
+    refreshTokenStorage: s,
+    platform: p,
+    appAttestation: r && {
+      isEnabled: () => r.isEnabled,
+      appIdentifier: n,
+      generateAssertion: r.generateAssertion.bind(r)
+    }
+  }), i) {
+    const e = new S();
+    h(e);
+    const o = v(a().projectId);
+    m(o), j(o);
+  }
+  const [, d, f] = await Promise.allSettled([
+    w().ensureInitialized(),
+    (async () => {
+      try {
+        return await k(t.projectId);
+      } catch (e) {
+        return (!(e instanceof u) || e.statusCode !== 404) && console.warn("Failed to get MFA config", e), null;
+      }
+    })(),
+    (async () => {
+      try {
+        return await C(t.projectId);
+      } catch (e) {
+        return (!(e instanceof u) || e.statusCode !== 404) && console.warn("Failed to get project config", e), null;
+      }
+    })()
+  ]);
+  if (d.status === "fulfilled" && d.value && I(d.value), f.status === "fulfilled" && f.value) {
+    const e = f.value;
+    if (A(e), e.appAttestation && r && n) {
+      const o = _(e.appAttestation, n);
+      o !== null && (console.warn(
+        "[Attestation] Project config has attestation enabled for this app, but no attestation provider is registered. Install @coinbase/cdp-app-attest and add `import '@coinbase/cdp-app-attest'` to your app's entry point."
+      ), r.isEnabled = !0, r.cloudProjectNumber = o.cloudProjectNumber, r.initialize().catch((l) => {
+        console.error(
+          "[Attestation] Background initialization failed:",
+          l instanceof Error ? l.message : String(l)
+        );
+      }));
+    }
+  }
+}, _ = (t, i) => {
+  const s = t.android?.find((n) => n.identifier === i);
+  return s ? { cloudProjectNumber: s.googleProjectNumber } : t.ios?.find((n) => n.identifier === i) ? {} : null;
+};
 export {
-  l as signInWithEmail
+  L as initialize
 };