@coinbase/cdp-core 0.0.107 → 0.0.109

package/dist/native/index.native83.js

@@ -1,22 +1,65 @@
-import { getMfaConfigState as f } from "./index.native75.js";
 import "@coinbase/cdp-api-client";
-import "viem";
-const r = ["totp", "sms"], o = (t, e) => {
-  const n = t.mfaMethods[e]?.enrolledAt;
-  return !!n && Date.now() > new Date(n).getTime();
+import { MfaError as d } from "./index.native90.js";
+const g = () => {
+  let t, s;
+  return { promise: new Promise((o, n) => {
+    t = o, s = n;
+  }), resolve: t, reject: s };
+}, c = /* @__PURE__ */ new Set();
+let e = null, u = null;
+const p = (t, s) => {
+  const r = { listener: t, matches: s?.matches };
+  return c.add(r), () => {
+    c.delete(r);
+  };
+}, M = () => c.size > 0, v = (t, s) => {
+  if (c.size === 0)
+    return Promise.resolve();
+  e && (e.reject(
+    new d("SUPERSEDED", "MFA verification superseded by a newer request")
+  ), e = null);
+  const r = g();
+  e = r;
+  let o;
+  try {
+    o = s !== void 0 ? s : u?.();
+  } catch (i) {
+    console.error("MFA default trigger provider threw an error:", i), o = void 0;
+  }
+  const n = [], l = [];
+  for (const i of c)
+    if (i.matches)
+      try {
+        i.matches(o) && n.push(i);
+      } catch (a) {
+        console.error("MFA listener predicate threw an error:", a);
+      }
+    else
+      l.push(i);
+  const f = n.length > 0 ? n : l;
+  if (f.length === 0)
+    return r.reject(
+      new d(
+        "NO_LISTENER_MATCHED",
+        "MFA verification was triggered but no registered listener matched. Ensure a global MFA listener is registered, or that a scoped listener's predicate matches the trigger."
+      )
+    ), e === r && (e = null), r.promise;
+  for (const i of f)
+    try {
+      i.listener({ methods: t });
+    } catch (a) {
+      console.error("MFA listener threw an error:", a);
+    }
+  return r.promise;
+}, w = () => {
+  e && (e.resolve(), e = null);
+}, E = (t) => {
+  e && (e.reject(t), e = null);
 };
-function d(t) {
-  return t.mfaMethods ? r.filter((e) => o(t, e)) : [];
-}
-function s(t, e) {
-  return e ? o(t, e) : t.mfaMethods ? r.some((n) => o(t, n)) : !1;
-}
-function M() {
-  const t = f(), e = r.filter((n) => t?.[`${n}Config`]?.enabled);
-  return e.length ? e : ["totp"];
-}
 export {
-  M as getEnabledMfaMethods,
-  d as getEnrolledMfaMethods,
-  s as isEnrolledInMfa
+  M as hasRegisteredMfaListeners,
+  p as registerMfaListener,
+  E as rejectPendingMfaVerification,
+  w as resolvePendingMfaVerification,
+  v as triggerMfaVerification
 };

package/dist/native/index.native84.js

@@ -1,51 +1,22 @@
-import { APIError as u, ErrorType as l } from "@coinbase/cdp-api-client";
-import { MfaError as M } from "./index.native89.js";
-import { getCoreAuthManager as a, getMfaConfigState as m } from "./index.native75.js";
-import { hasRegisteredMfaListeners as i, triggerMfaVerification as o } from "./index.native82.js";
-import { isEnrolledInMfa as w, getEnrolledMfaMethods as E } from "./index.native83.js";
-const g = 300, n = () => {
-  const e = a().getUser();
-  return e ? E(e) : [];
-}, s = () => {
-  throw new M(
-    "LISTENER_REQUIRED",
-    "MFA verification is required but no listener is registered."
-  );
+import { getMfaConfigState as f } from "./index.native76.js";
+import "@coinbase/cdp-api-client";
+import "viem";
+const r = ["totp", "sms"], o = (t, e) => {
+  const n = t.mfaMethods[e]?.enrolledAt;
+  return !!n && Date.now() > new Date(n).getTime();
 };
-async function T(e) {
-  if (f()) {
-    i() || s();
-    const r = n();
-    await o(r);
-  }
-  try {
-    return await e();
-  } catch (r) {
-    if (r instanceof u && r.errorType === l.mfa_required) {
-      i() || s();
-      const t = n();
-      return await o(t), await e();
-    }
-    throw r;
-  }
+function d(t) {
+  return t.mfaMethods ? r.filter((e) => o(t, e)) : [];
 }
-function f() {
-  const e = a().getUser();
-  if (!e || !w(e)) return !1;
-  const t = e?.mfaMethods?.lastVerificationCompletedAt;
-  if (!t) return !0;
-  const c = new Date(t).getTime(), d = (m()?.verificationWindowSeconds ?? g) * 1e3;
-  return Date.now() > c + d;
+function s(t, e) {
+  return e ? o(t, e) : t.mfaMethods ? r.some((n) => o(t, n)) : !1;
 }
-async function D() {
-  if (!f())
-    return;
-  i() || s();
-  const e = n();
-  await o(e);
+function M() {
+  const t = f(), e = r.filter((n) => t?.[`${n}Config`]?.enabled);
+  return e.length ? e : ["totp"];
 }
 export {
-  D as ensureMfaVerified,
-  f as isMfaRequired,
-  T as withMfa
+  M as getEnabledMfaMethods,
+  d as getEnrolledMfaMethods,
+  s as isEnrolledInMfa
 };

package/dist/native/index.native85.js

@@ -1,43 +1,51 @@
-import { createSolanaKeyExportIframe as t, createEvmKeyExportIframe as m } from "./index.native127.js";
-import { signBitcoinHash as i } from "./index.native66.js";
-import "@coinbase/cdp-api-client";
-import "./index.native2.js";
-import "./index.native3.js";
-import "jose";
-import "viem";
-import "./index.native99.js";
-import { signEvmHash as n } from "./index.native30.js";
-import { signEvmTransaction as a } from "./index.native31.js";
-import { signEvmMessage as e } from "./index.native32.js";
-import { signEvmTypedData as p } from "./index.native33.js";
-import { signSolanaTransaction as s } from "./index.native34.js";
-import { signSolanaMessage as c } from "./index.native35.js";
-import { sendEvmTransaction as f } from "./index.native36.js";
-import { sendSolanaTransaction as E } from "./index.native37.js";
-import { sendUserOperation as T } from "./index.native38.js";
-import { exportEvmAccount as g } from "./index.native40.js";
-import { exportSolanaAccount as v } from "./index.native41.js";
-const o = {
-  signEvmHash: n,
-  signEvmTransaction: a,
-  signSolanaTransaction: s,
-  sendEvmTransaction: f,
-  sendSolanaTransaction: E,
-  signEvmMessage: e,
-  signSolanaMessage: c,
-  signEvmTypedData: p,
-  sendUserOperation: T,
-  exportEvmAccount: g,
-  exportSolanaAccount: v,
-  signBitcoinHash: i,
-  createEvmKeyExportIframe: m,
-  createSolanaKeyExportIframe: t
-}, R = Object.keys(o);
-function U(r) {
-  return r in o;
+import { APIError as u, ErrorType as l } from "@coinbase/cdp-api-client";
+import { MfaError as M } from "./index.native90.js";
+import { getCoreAuthManager as a, getMfaConfigState as m } from "./index.native76.js";
+import { hasRegisteredMfaListeners as i, triggerMfaVerification as o } from "./index.native83.js";
+import { isEnrolledInMfa as w, getEnrolledMfaMethods as E } from "./index.native84.js";
+const g = 300, n = () => {
+  const e = a().getUser();
+  return e ? E(e) : [];
+}, s = () => {
+  throw new M(
+    "LISTENER_REQUIRED",
+    "MFA verification is required but no listener is registered."
+  );
+};
+async function T(e) {
+  if (f()) {
+    i() || s();
+    const r = n();
+    await o(r);
+  }
+  try {
+    return await e();
+  } catch (r) {
+    if (r instanceof u && r.errorType === l.mfa_required) {
+      i() || s();
+      const t = n();
+      return await o(t), await e();
+    }
+    throw r;
+  }
+}
+function f() {
+  const e = a().getUser();
+  if (!e || !w(e)) return !1;
+  const t = e?.mfaMethods?.lastVerificationCompletedAt;
+  if (!t) return !0;
+  const c = new Date(t).getTime(), d = (m()?.verificationWindowSeconds ?? g) * 1e3;
+  return Date.now() > c + d;
+}
+async function D() {
+  if (!f())
+    return;
+  i() || s();
+  const e = n();
+  await o(e);
 }
 export {
-  R as MFA_PROTECTED_ACTIONS,
-  o as MFA_PROTECTED_FUNCTIONS,
-  U as isMfaProtectedAction
+  D as ensureMfaVerified,
+  f as isMfaRequired,
+  T as withMfa
 };

package/dist/native/index.native86.js

@@ -1,335 +1,43 @@
-import { logOutEndUser as f, refreshAccessToken as d, registerTemporaryWalletSecret as S, APIError as m } from "@coinbase/cdp-api-client";
-import { Analytics as h } from "./index.native2.js";
+import { createSolanaKeyExportIframe as t, createEvmKeyExportIframe as m } from "./index.native134.js";
+import { signBitcoinHash as i } from "./index.native67.js";
+import "@coinbase/cdp-api-client";
+import "./index.native2.js";
 import "./index.native3.js";
 import "jose";
-import { SignJWT as w } from "./index.native108.js";
-import { toAuthState as y } from "./index.native102.js";
 import "viem";
-import { getPlatformCrypto as c } from "./index.native10.js";
-import { sortKeys as p } from "./index.native99.js";
-import { getCoreOAuthManager as g } from "./index.native75.js";
-const l = 60 * 1e3, k = {
-  maxRetries: 3,
-  baseDelayMs: 1e3,
-  maxDelayMs: 1e4
-};
-function T(t, e, s) {
-  const n = e * Math.pow(2, t), i = Math.random() * 0.3 * n;
-  return Math.min(n + i, s);
-}
-function R(t) {
-  return new Promise((e) => setTimeout(e, t));
-}
-function _(t) {
-  if (t instanceof TypeError && t.message.includes("fetch"))
-    return !0;
-  if (t instanceof m) {
-    if (t.statusCode >= 500 && t.statusCode < 600 || t.statusCode === 408 || t.statusCode === 429)
-      return !0;
-    if (t.statusCode === 401)
-      return !1;
-  }
-  if (t instanceof Error) {
-    const e = t.message.toLowerCase();
-    if (e.includes("network") || e.includes("timeout") || e.includes("econnrefused") || e.includes("enotfound") || e.includes("socket"))
-      return !0;
-  }
-  return !1;
-}
-class v {
-  projectId;
-  authState = null;
-  walletSecret = null;
-  authStateChangeCallbacks = [];
-  initPromise = null;
-  refreshTimeout = null;
-  refreshWalletSecretPromise = null;
-  /**
-   * Initializes the token manager.
-   *
-   * @param projectId - The project ID.
-   */
-  constructor(e) {
-    this.projectId = e, this.initPromise = this._doInitialize();
-  }
-  /**
-   * Gets the current user, or null if there is no user signed in.
-   *
-   * @returns The current user.
-   */
-  getUser() {
-    return this.authState?.user ?? null;
-  }
-  /**
-   * Returns whether the user is signed in - i.e., whether there is an unexpired
-   * access token and user. Attempts to refresh the token if it's expired.
-   *
-   * @returns True if the user is signed in, false otherwise.
-   */
-  async isSignedIn() {
-    if (!this.authState)
-      return !1;
-    if (this.authState.expiresAt > Date.now() + l)
-      return !0;
-    try {
-      return await this.getToken() !== null;
-    } catch {
-      return !1;
-    }
-  }
-  /**
-   * Signs out the user, clearing all authentication state.
-   */
-  async signOut() {
-    try {
-      await f(this.projectId);
-    } catch {
-    } finally {
-      await this.clearAuthState();
-    }
-  }
-  /**
-   * Adds a callback to be called when the auth state changes.
-   *
-   * @param callback - The function to call when the auth state changes.
-   */
-  addAuthStateChangeCallback(e) {
-    this.authStateChangeCallbacks.push(e), e(this.authState?.user ?? null);
-  }
-  /**
-   * Gets the access token, refreshing it if it is expired. Returns null if the user is not
-   * signed in.
-   *
-   * @param options - The options for getting the token.
-   * @param options.forceRefresh - Whether to force a refresh of the token.
-   * @returns The access token.
-   */
-  async getToken(e) {
-    return (e?.forceRefresh || this.shouldRefreshToken()) && await this.refreshAccessToken(e?.forceRefresh ? "force" : "on_demand"), this.authState?.accessToken ?? null;
-  }
-  /**
-   * Gets the expiration time of the access token, or null if the user is not signed in.
-   *
-   * @returns The expiration time of the access token.
-   */
-  async getTokenExpiration() {
-    return this.authState?.expiresAt ?? null;
-  }
-  /**
-   * Gets the currently registered wallet secret ID. Rejects if the user is not signed in.
-   *
-   * @returns The wallet secret ID.
-   */
-  async getWalletSecretId() {
-    if (!await this.isSignedIn())
-      throw new Error("Cannot get wallet secret ID if the user is not signed in");
-    return this.shouldRefreshWalletSecret() && await this.refreshWalletSecret(), this.walletSecret.walletSecretId;
-  }
-  /**
-   * Gets the X-Wallet-Auth header. Rejects if the user is not signed in.
-   *
-   * @param options - The options for the request.
-   * @param options.requestMethod - The HTTP method of the request.
-   * @param options.requestHost - The host of the request.
-   * @param options.requestPath - The path of the request.
-   * @param options.requestData - The data of the request.
-   * @returns The X-Wallet-Auth header.
-   */
-  async getXWalletAuth(e) {
-    if (!await this.isSignedIn())
-      throw new Error("Cannot get X-Wallet-Auth header if the user is not signed in");
-    this.shouldRefreshWalletSecret() && await this.refreshWalletSecret();
-    const s = `${e.requestMethod} ${e.requestHost}${e.requestPath}`, n = Math.floor(Date.now() / 1e3), i = c(), r = {
-      uris: [s]
-    };
-    if (e.requestData && Object.keys(e.requestData).length > 0) {
-      const a = p(e.requestData);
-      r.reqHash = await i.hash(new TextEncoder().encode(JSON.stringify(a)));
-    }
-    return await new w(r).setProtectedHeader({ alg: "ES256", typ: "JWT" }).setIssuedAt(n).setNotBefore(n).setJti(i.generateRandomId()).sign(this.walletSecret.keyPair.privateKey);
-  }
-  /**
-   * Gets the authentication state.
-   *
-   * @returns The authentication state.
-   */
-  getAuthState() {
-    return this.authState;
-  }
-  /**
-   * Sets the authentication state.
-   *
-   * @param authState - The authentication state.
-   */
-  async setAuthState(e) {
-    this.authState = e, h.endUserIdentifier = e.user.userId, this.authStateChangeCallbacks.forEach((s) => s(this.authState?.user ?? null)), this.scheduleTokenRefresh();
-  }
-  /**
-   * Clears the authentication state.
-   */
-  async clearAuthState() {
-    this.authState = null, this.walletSecret = null, h.endUserIdentifier = "", this.cancelTokenRefresh(), this.authStateChangeCallbacks.forEach((e) => e(null));
-  }
-  /**
-   * Ensures the AuthManager is initialized before proceeding.
-   * If initialization is already in progress, waits for it to complete.
-   */
-  async ensureInitialized() {
-    if (this.initPromise) {
-      await this.initPromise;
-      return;
-    }
-    throw new Error("AuthManager not initialized");
-  }
-  /**
-   * Internal async initialization logic.
-   */
-  async _doInitialize() {
-    try {
-      await this.refreshAccessToken("init"), await g().handleOAuthCode();
-    } catch (e) {
-      console.warn("Failed to refresh access token during initialization:", e);
-    }
-  }
-  /**
-   * Returns whether the token should be refreshed.
-   *
-   * @returns True if the token should be refreshed, false otherwise.
-   */
-  shouldRefreshToken() {
-    return !(this.authState && this.authState.expiresAt > Date.now() + l);
-  }
-  /**
-   * Refreshes the access token and transitions the auth state accordingly.
-   * If a refresh is already in progress, it will wait for that refresh to complete.
-   * Retries with exponential backoff on transient failures only. Unauthorized error
-   * short-circuit immediately since retrying won't help.
-   *
-   * @param trigger - The trigger for the refresh.
-   *
-   * @returns The new access token.
-   */
-  async refreshAccessToken(e = "on_demand") {
-    const { maxRetries: s, baseDelayMs: n, maxDelayMs: i } = k;
-    h.sendSessionRefreshEvent({
-      name: "refresh_token_start",
-      trigger: e
-    });
-    for (let r = 0; r <= s; r++)
-      try {
-        const a = await d(this.projectId, {
-          grantType: "refresh_token"
-        }), o = y(
-          a.accessToken,
-          a.validUntil,
-          a.endUser
-        );
-        await this.setAuthState(o), h.sendSessionRefreshEvent({
-          name: "refresh_token_success",
-          trigger: e,
-          attempt: r
-        });
-        return;
-      } catch (a) {
-        const o = a instanceof Error ? a.message : String(a);
-        if (!_(a)) {
-          h.sendSessionRefreshEvent({
-            name: "refresh_token_failure",
-            trigger: e,
-            attempt: r,
-            error_type: "non_transient",
-            error_message: o
-          }), await this.signOut();
-          return;
-        }
-        if (r === s) {
-          h.sendSessionRefreshEvent({
-            name: "refresh_token_exhausted",
-            trigger: e,
-            attempt: r,
-            error_type: "transient",
-            error_message: o
-          });
-          return;
-        }
-        h.sendSessionRefreshEvent({
-          name: "refresh_token_retry",
-          trigger: e,
-          attempt: r,
-          error_type: "transient",
-          error_message: o
-        });
-        const u = T(r, n, i);
-        await R(u);
-      }
-  }
-  /**
-   * Schedules a token refresh to occur exactly when shouldRefreshToken() would return true.
-   * Uses the same REFRESH_CREDENTIALS_BUFFER_MS timing as the rest of the auth system.
-   */
-  scheduleTokenRefresh() {
-    if (this.cancelTokenRefresh(), !this.authState)
-      return;
-    const s = this.authState.expiresAt - l - Date.now();
-    s <= 0 || (h.sendSessionRefreshEvent({
-      name: "refresh_token_scheduled",
-      time_until_refresh_ms: s
-    }), this.refreshTimeout = setTimeout(async () => {
-      await this.refreshAccessToken("scheduled"), this.scheduleTokenRefresh();
-    }, s));
-  }
-  /**
-   * Cancels any scheduled token refresh.
-   */
-  cancelTokenRefresh() {
-    this.refreshTimeout && (clearTimeout(this.refreshTimeout), this.refreshTimeout = null);
-  }
-  /**
-   * Returns whether the wallet secret should be refreshed.
-   *
-   * @returns True if the wallet secret should be refreshed, false otherwise.
-   */
-  shouldRefreshWalletSecret() {
-    return !(this.walletSecret && this.walletSecret.expiresAt > Date.now() + l);
-  }
-  /**
-   * Refreshes the wallet secret. Assumes the user is signed in.
-   * Concurrent callers share the same in-flight registration to avoid
-   * racing on `this.walletSecret` (e.g. React Strict Mode double-fire).
-   *
-   * @returns A promise that resolves when the wallet secret is registered.
-   */
-  async refreshWalletSecret() {
-    if (this.refreshWalletSecretPromise)
-      return this.refreshWalletSecretPromise;
-    this.refreshWalletSecretPromise = this._doRefreshWalletSecret();
-    try {
-      await this.refreshWalletSecretPromise;
-    } finally {
-      this.refreshWalletSecretPromise = null;
-    }
-  }
-  /**
-   * Internal wallet secret refresh logic.
-   */
-  async _doRefreshWalletSecret() {
-    const e = c(), s = this.walletSecret?.walletSecretId ?? e.generateRandomId(), n = this.walletSecret?.keyPair ?? await e.createKeyPair(), i = this.authState.expiresAt, r = new Date(i).toISOString();
-    this.walletSecret = { walletSecretId: s, keyPair: n, expiresAt: i };
-    try {
-      await S(
-        this.authState.user.userId,
-        {
-          walletSecretId: s,
-          publicKey: n.publicKeyBase64,
-          validUntil: r
-        },
-        { projectID: this.projectId }
-      );
-    } catch (a) {
-      throw this.walletSecret = null, a;
-    }
-  }
+import "./index.native100.js";
+import { signEvmHash as n } from "./index.native30.js";
+import { signEvmTransaction as a } from "./index.native31.js";
+import { signEvmMessage as e } from "./index.native32.js";
+import { signEvmTypedData as p } from "./index.native33.js";
+import { signSolanaTransaction as s } from "./index.native34.js";
+import { signSolanaMessage as c } from "./index.native35.js";
+import { sendEvmTransaction as f } from "./index.native36.js";
+import { sendSolanaTransaction as E } from "./index.native37.js";
+import { sendUserOperation as T } from "./index.native38.js";
+import { exportEvmAccount as g } from "./index.native40.js";
+import { exportSolanaAccount as v } from "./index.native41.js";
+const o = {
+  signEvmHash: n,
+  signEvmTransaction: a,
+  signSolanaTransaction: s,
+  sendEvmTransaction: f,
+  sendSolanaTransaction: E,
+  signEvmMessage: e,
+  signSolanaMessage: c,
+  signEvmTypedData: p,
+  sendUserOperation: T,
+  exportEvmAccount: g,
+  exportSolanaAccount: v,
+  signBitcoinHash: i,
+  createEvmKeyExportIframe: m,
+  createSolanaKeyExportIframe: t
+}, R = Object.keys(o);
+function U(r) {
+  return r in o;
 }
 export {
-  v as AuthManager
+  R as MFA_PROTECTED_ACTIONS,
+  o as MFA_PROTECTED_FUNCTIONS,
+  U as isMfaProtectedAction
 };