@coinbase/cdp-core 0.0.117 → 0.0.119

package/dist/web/index.web236.js

@@ -1,4 +1,4 @@
-import { BaseError as f } from "./index.web129.js";
+import { BaseError as f } from "./index.web132.js";
 import { pad as g } from "./index.web251.js";
 function m(t, i = {}) {
   const { signed: r, size: e } = i, o = BigInt(t);

package/dist/web/index.web239.js

@@ -1,4 +1,4 @@
-import { JOSENotSupported as r } from "./index.web134.js";
+import { JOSENotSupported as r } from "./index.web128.js";
 const S = (e, s) => {
   const a = `SHA-${e.slice(-3)}`;
   switch (e) {

package/dist/web/index.web244.js

@@ -1,4 +1,4 @@
-import n from "./index.web145.js";
+import n from "./index.web146.js";
 function r(t) {
   return n(t) && typeof t.kty == "string";
 }

package/dist/web/index.web245.js

@@ -1,4 +1,4 @@
-import { JOSENotSupported as s } from "./index.web134.js";
+import { JOSENotSupported as s } from "./index.web128.js";
 function n(e) {
   let a, r;
   switch (e.kty) {

package/dist/web/index.web246.js

@@ -1,4 +1,4 @@
-var r = {};
+var r = { exports: {} };
 export {
-  r as __exports
+  r as __module
 };

package/dist/web/index.web247.js

@@ -1,4 +1,4 @@
-var e = { exports: {} };
+var r = {};
 export {
-  e as __module
+  r as __exports
 };

package/dist/web/index.web248.js

@@ -1,4 +1,4 @@
-var r = { exports: {} };
+var e = { exports: {} };
 export {
-  r as __module
+  e as __module
 };

package/dist/web/index.web3.js

@@ -1,2 +1,2 @@
-import { __require as r } from "./index.web222.js";
+import { __require as r } from "./index.web232.js";
 r();

package/dist/web/index.web64.js

@@ -1,37 +1,39 @@
-import { createEndUserBtcAccount as u } from "@coinbase/cdp-api-client";
-import { Analytics as d } from "./index.web2.js";
+import { createEndUserBtcAccount as h } from "@coinbase/cdp-api-client";
+import { Analytics as p } from "./index.web2.js";
 import "./index.web3.js";
 import { toAuthStateUser as m } from "./index.web101.js";
-import { InternalError as l } from "./index.web88.js";
-import { validateUserAuthState as p } from "./index.web102.js";
-import { getCoreAuthManager as w, getConfig as h } from "./index.web74.js";
-async function U(e) {
-  d.sendActionCallEvent({ name: "create_bitcoin_account" });
-  const t = w(), { user: c, authState: a } = p(
+import { InternalError as o } from "./index.web88.js";
+import { validateUserAuthState as w } from "./index.web102.js";
+import { getCoreAuthManager as b, getConfig as A } from "./index.web74.js";
+async function U(r) {
+  p.sendActionCallEvent({ name: "create_bitcoin_account" });
+  const t = b(), { user: c, authState: s } = w(
     t.getUser(),
     t.getAuthState()
-  ), i = await u(
+  ), n = await h(
     c.userId,
     {
       walletSecretId: await t.getWalletSecretId(),
-      addressType: e?.addressType ?? "segwit",
-      network: e?.network ?? "bitcoin-testnet"
+      addressType: r?.addressType ?? "segwit",
+      network: r?.network ?? "bitcoin-testnet"
     },
-    { projectID: h().projectId },
-    e?.idempotencyKey
-  ), n = m(i);
+    { projectID: A().projectId },
+    r?.idempotencyKey
+  ), i = m(n), u = t.getAuthState() ?? s;
   await t.setAuthState({
-    ...a,
-    user: n
+    ...u,
+    user: i
   });
-  const s = new Set(c.btcAccountObjects?.map((r) => r.extendedPublicKey) ?? []), o = n.btcAccountObjects?.find(
-    (r) => !s.has(r.extendedPublicKey)
-  );
-  if (!o)
-    throw new l(
+  const d = new Set(c.btcAccountObjects?.map((a) => a.xpubHash) ?? []), e = (n.btcAccountObjects ?? []).find((a) => !d.has(a.xpubHash));
+  if (!e)
+    throw new o(
       "Bitcoin account was not created. Check the network log for more details."
     );
-  return o;
+  if (!e.xpub)
+    throw new o(
+      "Bitcoin account was created but the server did not return its extended public key (xpub)."
+    );
+  return { ...e, xpub: e.xpub };
 }
 export {
   U as createBitcoinAccount

package/dist/web/index.web65.js

@@ -1,10 +1,10 @@
-import { signBtcHashWithEndUserAccount as i } from "@coinbase/cdp-api-client";
-import { Analytics as c } from "./index.web2.js";
+import { signBtcHashWithEndUserAccount as c } from "@coinbase/cdp-api-client";
+import { Analytics as i } from "./index.web2.js";
 import "./index.web3.js";
-import { withAuth as h } from "./index.web97.js";
-import { getConfig as o, getCoreAuthManager as d } from "./index.web74.js";
+import { withAuth as s } from "./index.web97.js";
+import { getConfig as e, getCoreAuthManager as o } from "./index.web74.js";
 import "viem";
-import { withMfa as m } from "./index.web82.js";
+import { withMfa as h } from "./index.web82.js";
 import "jose";
 import "./index.web98.js";
 import "./index.web99.js";
@@ -12,26 +12,22 @@ import "@solana/web3.js";
 import "bs58";
 import "./index.web93.js";
 const j = async (t) => {
-  if (c.sendActionCallEvent({ name: "sign_bitcoin_hash" }), !/^[0-9a-fA-F]{64}$/.test(t.hash))
+  if (i.sendActionCallEvent({ name: "sign_bitcoin_hash" }), !/^[0-9a-fA-F]{64}$/.test(t.hash))
     throw new Error("hash must be a 64-character hex string with no 0x prefix");
-  return o().useMock ? { signature: "3045022100" + "a".repeat(64) + "0220" + "b".repeat(64) } : m(
-    () => h(t, d(), async ({ user: e, walletSecretId: a }) => {
-      const r = t.network ?? "bitcoin-testnet", n = t.addressType ?? "segwit";
-      if (!e.btcAccountObjects?.find(
-        (s) => s.network === r && s.addressType === n
-      ))
+  return e().useMock ? { signature: "3045022100" + "a".repeat(64) + "0220" + "b".repeat(64) } : h(
+    () => s(t, o(), async ({ user: r, walletSecretId: a }) => {
+      if (!r.btcAccountObjects?.find((n) => n.xpubHash === t.xpubHash))
         throw new Error("Bitcoin account not found");
-      return { signature: (await i(
-        e.userId,
+      return { signature: (await c(
+        r.userId,
         {
           walletSecretId: a,
-          addressType: n,
-          network: r,
+          xpubHash: t.xpubHash,
           change: t.change,
           addressIndex: t.addressIndex,
           hash: t.hash
         },
-        { projectID: o().projectId },
+        { projectID: e().projectId },
         t.idempotencyKey
       )).signature };
     })

package/dist/web/index.web8.js

@@ -7,11 +7,25 @@ const l = {
    * @param key - The storage key.
    * @returns Promise that resolves to the value.
    */
-  async getItem(e) {
+  async getItem(t) {
+    return (await this.getItemWithOutcome(t)).value;
+  },
+  /**
+   * Retrieves a value from localStorage with read outcome metadata.
+   *
+   * @param key - The storage key.
+   * @returns Promise that resolves to the stored value and read outcome.
+   */
+  async getItemWithOutcome(t) {
     try {
-      return localStorage.getItem(e);
-    } catch (r) {
-      return console.warn(`Failed to get item from localStorage: ${r}`), null;
+      const e = localStorage.getItem(t);
+      return e === null ? { value: null, outcome: "not_found" } : { value: e, outcome: "found" };
+    } catch (e) {
+      return console.warn(`Failed to get item from localStorage: ${e}`), {
+        value: null,
+        outcome: "error",
+        errorMessage: e instanceof Error ? e.message : String(e)
+      };
     }
   },
   /**
@@ -21,9 +35,9 @@ const l = {
    * @param value - The value to store.
    * @returns Promise that resolves when the value is stored.
    */
-  async setItem(e, r) {
+  async setItem(t, e) {
     try {
-      localStorage.setItem(e, r);
+      localStorage.setItem(t, e);
     } catch (o) {
       throw console.warn(`Failed to set item in localStorage: ${o}`), o;
     }
@@ -34,11 +48,11 @@ const l = {
    * @param key - The storage key.
    * @returns Promise that resolves when the value is removed.
    */
-  async removeItem(e) {
+  async removeItem(t) {
     try {
-      localStorage.removeItem(e);
-    } catch (r) {
-      throw console.warn(`Failed to remove item from localStorage: ${r}`), r;
+      localStorage.removeItem(t);
+    } catch (e) {
+      throw console.warn(`Failed to remove item from localStorage: ${e}`), e;
     }
   },
   /**
@@ -49,8 +63,8 @@ const l = {
   async clear() {
     try {
       localStorage.clear();
-    } catch (e) {
-      throw console.warn(`Failed to clear localStorage: ${e}`), e;
+    } catch (t) {
+      throw console.warn(`Failed to clear localStorage: ${t}`), t;
     }
   }
 };

package/dist/web/index.web9.js

@@ -1,4 +1,4 @@
-const o = "0.0.117";
+const o = "0.0.119";
 export {
   o as VERSION
 };

package/dist/web-types/actions/createBitcoinAccount.d.ts

@@ -11,9 +11,12 @@ export type CreateBitcoinAccountOptions = {
     idempotencyKey?: string;
 };
 /**
- * The result of creating a Bitcoin HD account.
+ * The result of creating a Bitcoin HD account. The extended public key (xpub) is always present,
+ * since the create response includes it and the caller needs it to derive child addresses.
  */
-export type CreateBitcoinAccountResult = EndUserBtcAccount;
+export type CreateBitcoinAccountResult = EndUserBtcAccount & {
+    xpub: string;
+};
 /**
  * Creates a Bitcoin HD (Hierarchical Deterministic) account for the current user.
  * The account uses BIP-84 derivation (segwit) and returns an extended public key (xpub)

package/dist/web-types/actions/getCurrentUser.d.ts

@@ -1,11 +1,28 @@
 import { User } from '../types.js';
+/**
+ * Options for getting the current user.
+ */
+export type GetCurrentUserOptions = {
+    /**
+     * When true, re-fetches the user from the API with each Bitcoin account's raw extended public
+     * key (xpub) included in `btcAccountObjects`. By default the xpubs are omitted (hash-only), so
+     * request this when you need to derive child addresses. Ignored if no user is signed in.
+     */
+    includeBtcXpubs?: boolean;
+};
 /**
  * Gets the currently signed-in user, if any.
  *
  * @example
  * ```typescript lines
  * const user = await getCurrentUser();
+ *
+ * // Include Bitcoin xpubs so addresses can be derived:
+ * const userWithXpubs = await getCurrentUser({ includeBtcXpubs: true });
  * ```
+ * @param options - Optional settings controlling what is returned.
  * @returns The currently signed-in user, or null if no user is signed in.
+ * @throws When `includeBtcXpubs` is true and the network request to re-fetch the user fails.
+ *   The default (cached) read never throws.
  */
-export declare const getCurrentUser: () => Promise<User | null>;
+export declare const getCurrentUser: (options?: GetCurrentUserOptions) => Promise<User | null>;

package/dist/web-types/actions/signBitcoinHash.d.ts

@@ -1,12 +1,14 @@
-import { SignBtcHashWithEndUserAccountBodyAddressType, SignBtcHashWithEndUserAccountBodyNetwork, SignBtcHashWithEndUserAccountBodyChange } from '@coinbase/cdp-api-client';
+import { SignBtcHashWithEndUserAccountBodyChange } from '@coinbase/cdp-api-client';
 /**
  * Options for signing a Bitcoin sighash.
  */
 export type SignBitcoinHashOptions = {
-    /** The Bitcoin network. Defaults to "bitcoin-testnet". */
-    network?: SignBtcHashWithEndUserAccountBodyNetwork;
-    /** The Bitcoin address type. Defaults to "segwit". */
-    addressType?: SignBtcHashWithEndUserAccountBodyAddressType;
+    /**
+     * Selects which Bitcoin account to sign with, as the `xpubHash` from the account's entry in
+     * `btcAccountObjects`. Resolved server-side against the user's own accounts; an unmatched hash
+     * fails with a not-found error (there is no fallback to a default account).
+     */
+    xpubHash: string;
     /** BIP-32 change level: 0 for external (receive) addresses, 1 for internal (change) addresses. */
     change: SignBtcHashWithEndUserAccountBodyChange;
     /** BIP-32 address index — must match the index used to derive the address controlling the UTXO. */

package/dist/web-types/core.d.ts

@@ -9,7 +9,7 @@ export { verifyOAuth } from './actions/verifyOAuth.js';
 export { verifySiweSignature, type VerifySiweSignatureOptions, type VerifySiweSignatureResult, } from './actions/verifySiweSignature.js';
 export { verifyTelegramOAuth } from './actions/verifyTelegramOAuth.js';
 export { authenticateWithJWT } from './actions/authenticateWithJWT.js';
-export { getCurrentUser } from './actions/getCurrentUser.js';
+export { getCurrentUser, type GetCurrentUserOptions } from './actions/getCurrentUser.js';
 export { isSignedIn } from './actions/isSignedIn.js';
 export { signOut } from './actions/signOut.js';
 export { getAccessToken } from './actions/getAccessToken.js';

package/dist/web-types/platform/types.d.ts

@@ -58,6 +58,13 @@ export interface PlatformStorage {
      * @returns Promise that resolves to the stored value or null if not found.
      */
     getItem(key: string): Promise<string | null>;
+    /**
+     * Retrieves a value from storage with read outcome metadata.
+     *
+     * @param key - The storage key.
+     * @returns Promise that resolves to the stored value and read outcome.
+     */
+    getItemWithOutcome(key: string): Promise<StorageReadResult>;
     /**
      * Stores a value in storage.
      *
@@ -94,6 +101,13 @@ export interface PlatformSecureStorage {
      * @returns Promise that resolves to the stored value or null if not found.
      */
     getItem(key: string): Promise<string | null>;
+    /**
+     * Retrieves a value from secure storage with read outcome metadata.
+     *
+     * @param key - The storage key.
+     * @returns Promise that resolves to the stored value and read outcome.
+     */
+    getItemWithOutcome(key: string): Promise<StorageReadResult>;
     /**
      * Stores a value in secure storage.
      *
@@ -116,6 +130,17 @@ export interface PlatformSecureStorage {
      */
     clear(): Promise<void>;
 }
+/**
+ * Result of reading a value from storage.
+ */
+export interface StorageReadResult {
+    /** The stored value, or null if not found or on error. */
+    value: string | null;
+    /** The outcome of the read: found, not found, or error. */
+    outcome: "found" | "not_found" | "error";
+    /** The error message when the read failed. */
+    errorMessage?: string;
+}
 /**
  * Credential returned by a native Apple Sign In flow.
  */

package/dist/web-types/types.d.ts

@@ -23,7 +23,7 @@ type MFAMethods,
 type EndUserEvmAccount, 
 /** Solana account object with address and createdAt */
 type EndUserSolanaAccount, 
-/** Bitcoin HD account object with extendedPublicKey (xpub), network, and addressType */
+/** Bitcoin HD account object with xpubHash, network, addressType, and optional xpub */
 type EndUserBtcAccount, 
 /** Bitcoin network for account creation */
 type CreateEndUserBtcAccountBodyNetwork, 
@@ -203,7 +203,7 @@ export type User = {
     evmSmartAccountObjects?: EndUserEvmSmartAccount[];
     /** The Solana account objects associated with the user. Users can have up to 10 Solana accounts. */
     solanaAccountObjects?: EndUserSolanaAccount[];
-    /** The Bitcoin HD account objects associated with the user. One per addressType+network combination. */
+    /** The Bitcoin HD account objects associated with the user. Up to 10 per user. */
     btcAccountObjects?: EndUserBtcAccount[];
     /** The MFA methods enrolled for the user. */
     mfaMethods?: MFAMethods;

package/dist/web-types/version.d.ts

@@ -2,4 +2,4 @@
  * Current version of @coinbase/cdp-core package.
  * This file is auto-generated by scripts/sync-versions.js
  */
-export declare const VERSION = "0.0.117";
+export declare const VERSION = "0.0.119";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coinbase/cdp-core",
-  "version": "0.0.117",
+  "version": "0.0.119",
   "type": "module",
   "files": [
     "dist/**",
@@ -29,7 +29,7 @@
     "ox": "0.8.1",
     "viem": "^2.47.0",
     "zustand": "^5.0.6",
-    "@coinbase/cdp-api-client": "^0.0.117"
+    "@coinbase/cdp-api-client": "^0.0.119"
   },
   "peerDependencies": {
     "@react-native-async-storage/async-storage": "^2.0.0",