@coinbase/cdp-core 0.0.118 → 0.0.119

package/dist/native/index.native253.js

@@ -1,4 +1,83 @@
-var r = { exports: {} };
+import { JOSENotSupported as s } from "./index.native137.js";
+function n(e) {
+  let a, r;
+  switch (e.kty) {
+    case "RSA": {
+      switch (e.alg) {
+        case "PS256":
+        case "PS384":
+        case "PS512":
+          a = { name: "RSA-PSS", hash: `SHA-${e.alg.slice(-3)}` }, r = e.d ? ["sign"] : ["verify"];
+          break;
+        case "RS256":
+        case "RS384":
+        case "RS512":
+          a = { name: "RSASSA-PKCS1-v1_5", hash: `SHA-${e.alg.slice(-3)}` }, r = e.d ? ["sign"] : ["verify"];
+          break;
+        case "RSA-OAEP":
+        case "RSA-OAEP-256":
+        case "RSA-OAEP-384":
+        case "RSA-OAEP-512":
+          a = {
+            name: "RSA-OAEP",
+            hash: `SHA-${parseInt(e.alg.slice(-3), 10) || 1}`
+          }, r = e.d ? ["decrypt", "unwrapKey"] : ["encrypt", "wrapKey"];
+          break;
+        default:
+          throw new s('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
+      }
+      break;
+    }
+    case "EC": {
+      switch (e.alg) {
+        case "ES256":
+          a = { name: "ECDSA", namedCurve: "P-256" }, r = e.d ? ["sign"] : ["verify"];
+          break;
+        case "ES384":
+          a = { name: "ECDSA", namedCurve: "P-384" }, r = e.d ? ["sign"] : ["verify"];
+          break;
+        case "ES512":
+          a = { name: "ECDSA", namedCurve: "P-521" }, r = e.d ? ["sign"] : ["verify"];
+          break;
+        case "ECDH-ES":
+        case "ECDH-ES+A128KW":
+        case "ECDH-ES+A192KW":
+        case "ECDH-ES+A256KW":
+          a = { name: "ECDH", namedCurve: e.crv }, r = e.d ? ["deriveBits"] : [];
+          break;
+        default:
+          throw new s('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
+      }
+      break;
+    }
+    case "OKP": {
+      switch (e.alg) {
+        case "Ed25519":
+        case "EdDSA":
+          a = { name: "Ed25519" }, r = e.d ? ["sign"] : ["verify"];
+          break;
+        case "ECDH-ES":
+        case "ECDH-ES+A128KW":
+        case "ECDH-ES+A192KW":
+        case "ECDH-ES+A256KW":
+          a = { name: e.crv }, r = e.d ? ["deriveBits"] : [];
+          break;
+        default:
+          throw new s('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
+      }
+      break;
+    }
+    default:
+      throw new s('Invalid or unsupported JWK "kty" (Key Type) Parameter value');
+  }
+  return { algorithm: a, keyUsages: r };
+}
+const i = async (e) => {
+  if (!e.alg)
+    throw new TypeError('"alg" argument is required when "jwk.alg" is not present');
+  const { algorithm: a, keyUsages: r } = n(e), t = { ...e };
+  return delete t.alg, delete t.use, crypto.subtle.importKey("jwk", t, a, e.ext ?? !e.d, e.key_ops ?? r);
+};
 export {
-  r as __module
+  i as default
 };

package/dist/native/index.native256.js

@@ -1,4 +1,4 @@
-import { SizeExceedsPaddingSizeError as a } from "./index.native236.js";
+import { SizeExceedsPaddingSizeError as a } from "./index.native241.js";
 function o(r, i = {}) {
   const { dir: n, size: e = 32 } = i;
   if (e === 0)

package/dist/native/index.native3.js

@@ -1,2 +1,2 @@
-import { __require as r } from "./index.native227.js";
+import { __require as r } from "./index.native232.js";
 r();

package/dist/native/index.native66.js

@@ -1,37 +1,39 @@
-import { createEndUserBtcAccount as u } from "@coinbase/cdp-api-client";
-import { Analytics as d } from "./index.native2.js";
+import { createEndUserBtcAccount as h } from "@coinbase/cdp-api-client";
+import { Analytics as p } from "./index.native2.js";
 import "./index.native3.js";
 import { toAuthStateUser as m } from "./index.native103.js";
-import { InternalError as l } from "./index.native90.js";
-import { validateUserAuthState as p } from "./index.native104.js";
-import { getCoreAuthManager as w, getConfig as h } from "./index.native76.js";
-async function U(e) {
-  d.sendActionCallEvent({ name: "create_bitcoin_account" });
-  const t = w(), { user: c, authState: a } = p(
+import { InternalError as o } from "./index.native90.js";
+import { validateUserAuthState as w } from "./index.native104.js";
+import { getCoreAuthManager as b, getConfig as A } from "./index.native76.js";
+async function U(r) {
+  p.sendActionCallEvent({ name: "create_bitcoin_account" });
+  const t = b(), { user: c, authState: s } = w(
     t.getUser(),
     t.getAuthState()
-  ), i = await u(
+  ), n = await h(
     c.userId,
     {
       walletSecretId: await t.getWalletSecretId(),
-      addressType: e?.addressType ?? "segwit",
-      network: e?.network ?? "bitcoin-testnet"
+      addressType: r?.addressType ?? "segwit",
+      network: r?.network ?? "bitcoin-testnet"
     },
-    { projectID: h().projectId },
-    e?.idempotencyKey
-  ), n = m(i);
+    { projectID: A().projectId },
+    r?.idempotencyKey
+  ), i = m(n), u = t.getAuthState() ?? s;
   await t.setAuthState({
-    ...a,
-    user: n
+    ...u,
+    user: i
   });
-  const s = new Set(c.btcAccountObjects?.map((r) => r.extendedPublicKey) ?? []), o = n.btcAccountObjects?.find(
-    (r) => !s.has(r.extendedPublicKey)
-  );
-  if (!o)
-    throw new l(
+  const d = new Set(c.btcAccountObjects?.map((a) => a.xpubHash) ?? []), e = (n.btcAccountObjects ?? []).find((a) => !d.has(a.xpubHash));
+  if (!e)
+    throw new o(
       "Bitcoin account was not created. Check the network log for more details."
     );
-  return o;
+  if (!e.xpub)
+    throw new o(
+      "Bitcoin account was created but the server did not return its extended public key (xpub)."
+    );
+  return { ...e, xpub: e.xpub };
 }
 export {
   U as createBitcoinAccount

package/dist/native/index.native67.js

@@ -1,41 +1,37 @@
-import { signBtcHashWithEndUserAccount as i } from "@coinbase/cdp-api-client";
-import { Analytics as c } from "./index.native2.js";
+import { signBtcHashWithEndUserAccount as c } from "@coinbase/cdp-api-client";
+import { Analytics as s } from "./index.native2.js";
 import "./index.native3.js";
-import { withAuth as h } from "./index.native99.js";
-import { getConfig as o, getCoreAuthManager as d } from "./index.native76.js";
+import { withAuth as i } from "./index.native99.js";
+import { getConfig as e, getCoreAuthManager as o } from "./index.native76.js";
 import "viem";
-import { withMfa as m } from "./index.native85.js";
+import { withMfa as h } from "./index.native85.js";
 import "jose";
 import "./index.native100.js";
 import "./index.native101.js";
 import "@solana/web3.js";
 import "bs58";
-const T = async (t) => {
-  if (c.sendActionCallEvent({ name: "sign_bitcoin_hash" }), !/^[0-9a-fA-F]{64}$/.test(t.hash))
+const E = async (t) => {
+  if (s.sendActionCallEvent({ name: "sign_bitcoin_hash" }), !/^[0-9a-fA-F]{64}$/.test(t.hash))
     throw new Error("hash must be a 64-character hex string with no 0x prefix");
-  return o().useMock ? { signature: "3045022100" + "a".repeat(64) + "0220" + "b".repeat(64) } : m(
-    () => h(t, d(), async ({ user: e, walletSecretId: a }) => {
-      const r = t.network ?? "bitcoin-testnet", n = t.addressType ?? "segwit";
-      if (!e.btcAccountObjects?.find(
-        (s) => s.network === r && s.addressType === n
-      ))
+  return e().useMock ? { signature: "3045022100" + "a".repeat(64) + "0220" + "b".repeat(64) } : h(
+    () => i(t, o(), async ({ user: r, walletSecretId: a }) => {
+      if (!r.btcAccountObjects?.find((n) => n.xpubHash === t.xpubHash))
         throw new Error("Bitcoin account not found");
-      return { signature: (await i(
-        e.userId,
+      return { signature: (await c(
+        r.userId,
         {
           walletSecretId: a,
-          addressType: n,
-          network: r,
+          xpubHash: t.xpubHash,
           change: t.change,
           addressIndex: t.addressIndex,
           hash: t.hash
         },
-        { projectID: o().projectId },
+        { projectID: e().projectId },
         t.idempotencyKey
       )).signature };
     })
   );
 };
 export {
-  T as signBitcoinHash
+  E as signBitcoinHash
 };

package/dist/native/index.native86.js

@@ -1,4 +1,4 @@
-import { createSolanaKeyExportIframe as t, createEvmKeyExportIframe as m } from "./index.native138.js";
+import { createSolanaKeyExportIframe as t, createEvmKeyExportIframe as m } from "./index.native133.js";
 import { signBitcoinHash as i } from "./index.native67.js";
 import "@coinbase/cdp-api-client";
 import "./index.native2.js";

package/dist/native-types/actions/createBitcoinAccount.d.ts

@@ -11,9 +11,12 @@ export type CreateBitcoinAccountOptions = {
     idempotencyKey?: string;
 };
 /**
- * The result of creating a Bitcoin HD account.
+ * The result of creating a Bitcoin HD account. The extended public key (xpub) is always present,
+ * since the create response includes it and the caller needs it to derive child addresses.
  */
-export type CreateBitcoinAccountResult = EndUserBtcAccount;
+export type CreateBitcoinAccountResult = EndUserBtcAccount & {
+    xpub: string;
+};
 /**
  * Creates a Bitcoin HD (Hierarchical Deterministic) account for the current user.
  * The account uses BIP-84 derivation (segwit) and returns an extended public key (xpub)

package/dist/native-types/actions/getCurrentUser.d.ts

@@ -1,11 +1,28 @@
 import { User } from '../types.js';
+/**
+ * Options for getting the current user.
+ */
+export type GetCurrentUserOptions = {
+    /**
+     * When true, re-fetches the user from the API with each Bitcoin account's raw extended public
+     * key (xpub) included in `btcAccountObjects`. By default the xpubs are omitted (hash-only), so
+     * request this when you need to derive child addresses. Ignored if no user is signed in.
+     */
+    includeBtcXpubs?: boolean;
+};
 /**
  * Gets the currently signed-in user, if any.
  *
  * @example
  * ```typescript lines
  * const user = await getCurrentUser();
+ *
+ * // Include Bitcoin xpubs so addresses can be derived:
+ * const userWithXpubs = await getCurrentUser({ includeBtcXpubs: true });
  * ```
+ * @param options - Optional settings controlling what is returned.
  * @returns The currently signed-in user, or null if no user is signed in.
+ * @throws When `includeBtcXpubs` is true and the network request to re-fetch the user fails.
+ *   The default (cached) read never throws.
  */
-export declare const getCurrentUser: () => Promise<User | null>;
+export declare const getCurrentUser: (options?: GetCurrentUserOptions) => Promise<User | null>;

package/dist/native-types/actions/signBitcoinHash.d.ts

@@ -1,12 +1,14 @@
-import { SignBtcHashWithEndUserAccountBodyAddressType, SignBtcHashWithEndUserAccountBodyNetwork, SignBtcHashWithEndUserAccountBodyChange } from '@coinbase/cdp-api-client';
+import { SignBtcHashWithEndUserAccountBodyChange } from '@coinbase/cdp-api-client';
 /**
  * Options for signing a Bitcoin sighash.
  */
 export type SignBitcoinHashOptions = {
-    /** The Bitcoin network. Defaults to "bitcoin-testnet". */
-    network?: SignBtcHashWithEndUserAccountBodyNetwork;
-    /** The Bitcoin address type. Defaults to "segwit". */
-    addressType?: SignBtcHashWithEndUserAccountBodyAddressType;
+    /**
+     * Selects which Bitcoin account to sign with, as the `xpubHash` from the account's entry in
+     * `btcAccountObjects`. Resolved server-side against the user's own accounts; an unmatched hash
+     * fails with a not-found error (there is no fallback to a default account).
+     */
+    xpubHash: string;
     /** BIP-32 change level: 0 for external (receive) addresses, 1 for internal (change) addresses. */
     change: SignBtcHashWithEndUserAccountBodyChange;
     /** BIP-32 address index — must match the index used to derive the address controlling the UTXO. */

package/dist/native-types/core.d.ts

@@ -9,7 +9,7 @@ export { verifyOAuth } from './actions/verifyOAuth.js';
 export { verifySiweSignature, type VerifySiweSignatureOptions, type VerifySiweSignatureResult, } from './actions/verifySiweSignature.js';
 export { verifyTelegramOAuth } from './actions/verifyTelegramOAuth.js';
 export { authenticateWithJWT } from './actions/authenticateWithJWT.js';
-export { getCurrentUser } from './actions/getCurrentUser.js';
+export { getCurrentUser, type GetCurrentUserOptions } from './actions/getCurrentUser.js';
 export { isSignedIn } from './actions/isSignedIn.js';
 export { signOut } from './actions/signOut.js';
 export { getAccessToken } from './actions/getAccessToken.js';

package/dist/native-types/types.d.ts

@@ -23,7 +23,7 @@ type MFAMethods,
 type EndUserEvmAccount, 
 /** Solana account object with address and createdAt */
 type EndUserSolanaAccount, 
-/** Bitcoin HD account object with extendedPublicKey (xpub), network, and addressType */
+/** Bitcoin HD account object with xpubHash, network, addressType, and optional xpub */
 type EndUserBtcAccount, 
 /** Bitcoin network for account creation */
 type CreateEndUserBtcAccountBodyNetwork, 
@@ -203,7 +203,7 @@ export type User = {
     evmSmartAccountObjects?: EndUserEvmSmartAccount[];
     /** The Solana account objects associated with the user. Users can have up to 10 Solana accounts. */
     solanaAccountObjects?: EndUserSolanaAccount[];
-    /** The Bitcoin HD account objects associated with the user. One per addressType+network combination. */
+    /** The Bitcoin HD account objects associated with the user. Up to 10 per user. */
     btcAccountObjects?: EndUserBtcAccount[];
     /** The MFA methods enrolled for the user. */
     mfaMethods?: MFAMethods;

package/dist/native-types/version.d.ts

@@ -2,4 +2,4 @@
  * Current version of @coinbase/cdp-core package.
  * This file is auto-generated by scripts/sync-versions.js
  */
-export declare const VERSION = "0.0.118";
+export declare const VERSION = "0.0.119";

package/dist/types/actions/createBitcoinAccount.d.ts

@@ -11,9 +11,12 @@ export type CreateBitcoinAccountOptions = {
     idempotencyKey?: string;
 };
 /**
- * The result of creating a Bitcoin HD account.
+ * The result of creating a Bitcoin HD account. The extended public key (xpub) is always present,
+ * since the create response includes it and the caller needs it to derive child addresses.
  */
-export type CreateBitcoinAccountResult = EndUserBtcAccount;
+export type CreateBitcoinAccountResult = EndUserBtcAccount & {
+    xpub: string;
+};
 /**
  * Creates a Bitcoin HD (Hierarchical Deterministic) account for the current user.
  * The account uses BIP-84 derivation (segwit) and returns an extended public key (xpub)

package/dist/types/actions/getCurrentUser.d.ts

@@ -1,11 +1,28 @@
 import { User } from '../types.js';
+/**
+ * Options for getting the current user.
+ */
+export type GetCurrentUserOptions = {
+    /**
+     * When true, re-fetches the user from the API with each Bitcoin account's raw extended public
+     * key (xpub) included in `btcAccountObjects`. By default the xpubs are omitted (hash-only), so
+     * request this when you need to derive child addresses. Ignored if no user is signed in.
+     */
+    includeBtcXpubs?: boolean;
+};
 /**
  * Gets the currently signed-in user, if any.
  *
  * @example
  * ```typescript lines
  * const user = await getCurrentUser();
+ *
+ * // Include Bitcoin xpubs so addresses can be derived:
+ * const userWithXpubs = await getCurrentUser({ includeBtcXpubs: true });
  * ```
+ * @param options - Optional settings controlling what is returned.
  * @returns The currently signed-in user, or null if no user is signed in.
+ * @throws When `includeBtcXpubs` is true and the network request to re-fetch the user fails.
+ *   The default (cached) read never throws.
  */
-export declare const getCurrentUser: () => Promise<User | null>;
+export declare const getCurrentUser: (options?: GetCurrentUserOptions) => Promise<User | null>;

package/dist/types/actions/signBitcoinHash.d.ts

@@ -1,12 +1,14 @@
-import { SignBtcHashWithEndUserAccountBodyAddressType, SignBtcHashWithEndUserAccountBodyNetwork, SignBtcHashWithEndUserAccountBodyChange } from '@coinbase/cdp-api-client';
+import { SignBtcHashWithEndUserAccountBodyChange } from '@coinbase/cdp-api-client';
 /**
  * Options for signing a Bitcoin sighash.
  */
 export type SignBitcoinHashOptions = {
-    /** The Bitcoin network. Defaults to "bitcoin-testnet". */
-    network?: SignBtcHashWithEndUserAccountBodyNetwork;
-    /** The Bitcoin address type. Defaults to "segwit". */
-    addressType?: SignBtcHashWithEndUserAccountBodyAddressType;
+    /**
+     * Selects which Bitcoin account to sign with, as the `xpubHash` from the account's entry in
+     * `btcAccountObjects`. Resolved server-side against the user's own accounts; an unmatched hash
+     * fails with a not-found error (there is no fallback to a default account).
+     */
+    xpubHash: string;
     /** BIP-32 change level: 0 for external (receive) addresses, 1 for internal (change) addresses. */
     change: SignBtcHashWithEndUserAccountBodyChange;
     /** BIP-32 address index — must match the index used to derive the address controlling the UTXO. */

package/dist/types/core.d.ts

@@ -9,7 +9,7 @@ export { verifyOAuth } from './actions/verifyOAuth.js';
 export { verifySiweSignature, type VerifySiweSignatureOptions, type VerifySiweSignatureResult, } from './actions/verifySiweSignature.js';
 export { verifyTelegramOAuth } from './actions/verifyTelegramOAuth.js';
 export { authenticateWithJWT } from './actions/authenticateWithJWT.js';
-export { getCurrentUser } from './actions/getCurrentUser.js';
+export { getCurrentUser, type GetCurrentUserOptions } from './actions/getCurrentUser.js';
 export { isSignedIn } from './actions/isSignedIn.js';
 export { signOut } from './actions/signOut.js';
 export { getAccessToken } from './actions/getAccessToken.js';

package/dist/types/types.d.ts

@@ -23,7 +23,7 @@ type MFAMethods,
 type EndUserEvmAccount, 
 /** Solana account object with address and createdAt */
 type EndUserSolanaAccount, 
-/** Bitcoin HD account object with extendedPublicKey (xpub), network, and addressType */
+/** Bitcoin HD account object with xpubHash, network, addressType, and optional xpub */
 type EndUserBtcAccount, 
 /** Bitcoin network for account creation */
 type CreateEndUserBtcAccountBodyNetwork, 
@@ -203,7 +203,7 @@ export type User = {
     evmSmartAccountObjects?: EndUserEvmSmartAccount[];
     /** The Solana account objects associated with the user. Users can have up to 10 Solana accounts. */
     solanaAccountObjects?: EndUserSolanaAccount[];
-    /** The Bitcoin HD account objects associated with the user. One per addressType+network combination. */
+    /** The Bitcoin HD account objects associated with the user. Up to 10 per user. */
     btcAccountObjects?: EndUserBtcAccount[];
     /** The MFA methods enrolled for the user. */
     mfaMethods?: MFAMethods;

package/dist/types/version.d.ts

@@ -2,4 +2,4 @@
  * Current version of @coinbase/cdp-core package.
  * This file is auto-generated by scripts/sync-versions.js
  */
-export declare const VERSION = "0.0.118";
+export declare const VERSION = "0.0.119";

package/dist/web/index.web107.js

@@ -1,6 +1,6 @@
-import { CompactSign as i } from "./index.web130.js";
-import { JWTInvalid as r } from "./index.web131.js";
-import { JWTClaimsBuilder as n } from "./index.web132.js";
+import { CompactSign as i } from "./index.web127.js";
+import { JWTInvalid as r } from "./index.web128.js";
+import { JWTClaimsBuilder as n } from "./index.web129.js";
 class d {
   #s;
   #t;

package/dist/web/index.web110.js

@@ -1,5 +1,5 @@
-import { InvalidAddressError as s } from "./index.web170.js";
-import { isAddress as a } from "./index.web171.js";
+import { InvalidAddressError as s } from "./index.web140.js";
+import { isAddress as a } from "./index.web141.js";
 function r(n) {
   if (typeof n == "string") {
     if (!a(n, { strict: !1 }))

package/dist/web/index.web114.js

@@ -1,7 +1,7 @@
-import { DisconnectedError as l, from as d } from "./index.web127.js";
+import { DisconnectedError as l, from as d } from "./index.web130.js";
 import { validateRequest as h, EIP1193ProviderError as m, STANDARD_ERROR_CODES as _ } from "./index.web91.js";
-import { createEOAHandlers as p } from "./index.web128.js";
-import { createSmartAccountHandlers as g } from "./index.web129.js";
+import { createEOAHandlers as p } from "./index.web134.js";
+import { createSmartAccountHandlers as g } from "./index.web135.js";
 import "viem";
 import "zustand";
 import "@coinbase/cdp-api-client";

package/dist/web/index.web126.js

@@ -1,15 +1,15 @@
-import { serializeAuthorizationList as v } from "./index.web177.js";
-import { blobsToCommitments as H } from "./index.web203.js";
-import { blobsToProofs as V } from "./index.web204.js";
-import { commitmentsToVersionedHashes as k } from "./index.web205.js";
-import { toBlobSidecars as B } from "./index.web206.js";
-import { concatHex as T } from "./index.web179.js";
-import { trim as F } from "./index.web185.js";
-import { numberToHex as s, bytesToHex as S } from "./index.web178.js";
-import { toRlp as b } from "./index.web189.js";
-import { assertTransactionEIP1559 as _, assertTransactionEIP2930 as C, assertTransactionEIP4844 as R, assertTransactionEIP7702 as Y, assertTransactionLegacy as j } from "./index.web194.js";
-import { getTransactionType as q } from "./index.web200.js";
-import { serializeAccessList as h } from "./index.web202.js";
+import { serializeAuthorizationList as v } from "./index.web154.js";
+import { blobsToCommitments as H } from "./index.web180.js";
+import { blobsToProofs as V } from "./index.web181.js";
+import { commitmentsToVersionedHashes as k } from "./index.web182.js";
+import { toBlobSidecars as B } from "./index.web183.js";
+import { concatHex as T } from "./index.web156.js";
+import { trim as F } from "./index.web162.js";
+import { numberToHex as s, bytesToHex as S } from "./index.web155.js";
+import { toRlp as b } from "./index.web166.js";
+import { assertTransactionEIP1559 as _, assertTransactionEIP2930 as C, assertTransactionEIP4844 as R, assertTransactionEIP7702 as Y, assertTransactionLegacy as j } from "./index.web171.js";
+import { getTransactionType as q } from "./index.web177.js";
+import { serializeAccessList as h } from "./index.web179.js";
 function re(e, t) {
   const i = q(e);
   return i === "eip1559" ? J(e, t) : i === "eip2930" ? K(e, t) : i === "eip4844" ? D(e, t) : i === "eip7702" ? w(e, t) : M(e);