@coinbase/cdp-core 0.0.118 → 0.0.120

package/dist/native/index.native253.js

@@ -1,4 +1,83 @@
-var r = { exports: {} };
+import { JOSENotSupported as s } from "./index.native135.js";
+function n(e) {
+  let a, r;
+  switch (e.kty) {
+    case "RSA": {
+      switch (e.alg) {
+        case "PS256":
+        case "PS384":
+        case "PS512":
+          a = { name: "RSA-PSS", hash: `SHA-${e.alg.slice(-3)}` }, r = e.d ? ["sign"] : ["verify"];
+          break;
+        case "RS256":
+        case "RS384":
+        case "RS512":
+          a = { name: "RSASSA-PKCS1-v1_5", hash: `SHA-${e.alg.slice(-3)}` }, r = e.d ? ["sign"] : ["verify"];
+          break;
+        case "RSA-OAEP":
+        case "RSA-OAEP-256":
+        case "RSA-OAEP-384":
+        case "RSA-OAEP-512":
+          a = {
+            name: "RSA-OAEP",
+            hash: `SHA-${parseInt(e.alg.slice(-3), 10) || 1}`
+          }, r = e.d ? ["decrypt", "unwrapKey"] : ["encrypt", "wrapKey"];
+          break;
+        default:
+          throw new s('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
+      }
+      break;
+    }
+    case "EC": {
+      switch (e.alg) {
+        case "ES256":
+          a = { name: "ECDSA", namedCurve: "P-256" }, r = e.d ? ["sign"] : ["verify"];
+          break;
+        case "ES384":
+          a = { name: "ECDSA", namedCurve: "P-384" }, r = e.d ? ["sign"] : ["verify"];
+          break;
+        case "ES512":
+          a = { name: "ECDSA", namedCurve: "P-521" }, r = e.d ? ["sign"] : ["verify"];
+          break;
+        case "ECDH-ES":
+        case "ECDH-ES+A128KW":
+        case "ECDH-ES+A192KW":
+        case "ECDH-ES+A256KW":
+          a = { name: "ECDH", namedCurve: e.crv }, r = e.d ? ["deriveBits"] : [];
+          break;
+        default:
+          throw new s('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
+      }
+      break;
+    }
+    case "OKP": {
+      switch (e.alg) {
+        case "Ed25519":
+        case "EdDSA":
+          a = { name: "Ed25519" }, r = e.d ? ["sign"] : ["verify"];
+          break;
+        case "ECDH-ES":
+        case "ECDH-ES+A128KW":
+        case "ECDH-ES+A192KW":
+        case "ECDH-ES+A256KW":
+          a = { name: e.crv }, r = e.d ? ["deriveBits"] : [];
+          break;
+        default:
+          throw new s('Invalid or unsupported JWK "alg" (Algorithm) Parameter value');
+      }
+      break;
+    }
+    default:
+      throw new s('Invalid or unsupported JWK "kty" (Key Type) Parameter value');
+  }
+  return { algorithm: a, keyUsages: r };
+}
+const i = async (e) => {
+  if (!e.alg)
+    throw new TypeError('"alg" argument is required when "jwk.alg" is not present');
+  const { algorithm: a, keyUsages: r } = n(e), t = { ...e };
+  return delete t.alg, delete t.use, crypto.subtle.importKey("jwk", t, a, e.ext ?? !e.d, e.key_ops ?? r);
+};
 export {
-  r as __module
+  i as default
 };

package/dist/native/index.native256.js

@@ -1,4 +1,4 @@
-import { SizeExceedsPaddingSizeError as a } from "./index.native236.js";
+import { SizeExceedsPaddingSizeError as a } from "./index.native242.js";
 function o(r, i = {}) {
   const { dir: n, size: e = 32 } = i;
   if (e === 0)

package/dist/native/index.native3.js

@@ -1,2 +1,2 @@
-import { __require as r } from "./index.native227.js";
+import { __require as r } from "./index.native232.js";
 r();

package/dist/native/index.native66.js

@@ -1,37 +1,39 @@
-import { createEndUserBtcAccount as u } from "@coinbase/cdp-api-client";
-import { Analytics as d } from "./index.native2.js";
+import { createEndUserBtcAccount as h } from "@coinbase/cdp-api-client";
+import { Analytics as p } from "./index.native2.js";
 import "./index.native3.js";
 import { toAuthStateUser as m } from "./index.native103.js";
-import { InternalError as l } from "./index.native90.js";
-import { validateUserAuthState as p } from "./index.native104.js";
-import { getCoreAuthManager as w, getConfig as h } from "./index.native76.js";
-async function U(e) {
-  d.sendActionCallEvent({ name: "create_bitcoin_account" });
-  const t = w(), { user: c, authState: a } = p(
+import { InternalError as o } from "./index.native90.js";
+import { validateUserAuthState as w } from "./index.native104.js";
+import { getCoreAuthManager as b, getConfig as A } from "./index.native76.js";
+async function U(r) {
+  p.sendActionCallEvent({ name: "create_bitcoin_account" });
+  const t = b(), { user: c, authState: s } = w(
     t.getUser(),
     t.getAuthState()
-  ), i = await u(
+  ), n = await h(
     c.userId,
     {
       walletSecretId: await t.getWalletSecretId(),
-      addressType: e?.addressType ?? "segwit",
-      network: e?.network ?? "bitcoin-testnet"
+      addressType: r?.addressType ?? "segwit",
+      network: r?.network ?? "bitcoin-testnet"
     },
-    { projectID: h().projectId },
-    e?.idempotencyKey
-  ), n = m(i);
+    { projectID: A().projectId },
+    r?.idempotencyKey
+  ), i = m(n), u = t.getAuthState() ?? s;
   await t.setAuthState({
-    ...a,
-    user: n
+    ...u,
+    user: i
   });
-  const s = new Set(c.btcAccountObjects?.map((r) => r.extendedPublicKey) ?? []), o = n.btcAccountObjects?.find(
-    (r) => !s.has(r.extendedPublicKey)
-  );
-  if (!o)
-    throw new l(
+  const d = new Set(c.btcAccountObjects?.map((a) => a.xpubHash) ?? []), e = (n.btcAccountObjects ?? []).find((a) => !d.has(a.xpubHash));
+  if (!e)
+    throw new o(
       "Bitcoin account was not created. Check the network log for more details."
     );
-  return o;
+  if (!e.xpub)
+    throw new o(
+      "Bitcoin account was created but the server did not return its extended public key (xpub)."
+    );
+  return { ...e, xpub: e.xpub };
 }
 export {
   U as createBitcoinAccount

package/dist/native/index.native67.js

@@ -1,41 +1,37 @@
-import { signBtcHashWithEndUserAccount as i } from "@coinbase/cdp-api-client";
-import { Analytics as c } from "./index.native2.js";
+import { signBtcHashWithEndUserAccount as c } from "@coinbase/cdp-api-client";
+import { Analytics as s } from "./index.native2.js";
 import "./index.native3.js";
-import { withAuth as h } from "./index.native99.js";
-import { getConfig as o, getCoreAuthManager as d } from "./index.native76.js";
+import { withAuth as i } from "./index.native99.js";
+import { getConfig as e, getCoreAuthManager as o } from "./index.native76.js";
 import "viem";
-import { withMfa as m } from "./index.native85.js";
+import { withMfa as h } from "./index.native85.js";
 import "jose";
 import "./index.native100.js";
 import "./index.native101.js";
 import "@solana/web3.js";
 import "bs58";
-const T = async (t) => {
-  if (c.sendActionCallEvent({ name: "sign_bitcoin_hash" }), !/^[0-9a-fA-F]{64}$/.test(t.hash))
+const E = async (t) => {
+  if (s.sendActionCallEvent({ name: "sign_bitcoin_hash" }), !/^[0-9a-fA-F]{64}$/.test(t.hash))
     throw new Error("hash must be a 64-character hex string with no 0x prefix");
-  return o().useMock ? { signature: "3045022100" + "a".repeat(64) + "0220" + "b".repeat(64) } : m(
-    () => h(t, d(), async ({ user: e, walletSecretId: a }) => {
-      const r = t.network ?? "bitcoin-testnet", n = t.addressType ?? "segwit";
-      if (!e.btcAccountObjects?.find(
-        (s) => s.network === r && s.addressType === n
-      ))
+  return e().useMock ? { signature: "3045022100" + "a".repeat(64) + "0220" + "b".repeat(64) } : h(
+    () => i(t, o(), async ({ user: r, walletSecretId: a }) => {
+      if (!r.btcAccountObjects?.find((n) => n.xpubHash === t.xpubHash))
         throw new Error("Bitcoin account not found");
-      return { signature: (await i(
-        e.userId,
+      return { signature: (await c(
+        r.userId,
         {
           walletSecretId: a,
-          addressType: n,
-          network: r,
+          xpubHash: t.xpubHash,
           change: t.change,
           addressIndex: t.addressIndex,
           hash: t.hash
         },
-        { projectID: o().projectId },
+        { projectID: e().projectId },
         t.idempotencyKey
       )).signature };
     })
   );
 };
 export {
-  T as signBitcoinHash
+  E as signBitcoinHash
 };

package/dist/native/index.native86.js

@@ -1,4 +1,4 @@
-import { createSolanaKeyExportIframe as t, createEvmKeyExportIframe as m } from "./index.native138.js";
+import { createSolanaKeyExportIframe as t, createEvmKeyExportIframe as m } from "./index.native133.js";
 import { signBitcoinHash as i } from "./index.native67.js";
 import "@coinbase/cdp-api-client";
 import "./index.native2.js";

package/dist/native/index.native87.js

@@ -1,42 +1,42 @@
-import { logOutEndUser as f, refreshAccessToken as d, registerTemporaryWalletSecret as S, APIError as m } from "@coinbase/cdp-api-client";
-import { Analytics as h } from "./index.native2.js";
+import { logOutEndUser as f, refreshAccessToken as d, isRefreshTokenUnavailableError as m, isTransientTokenReadError as S, registerTemporaryWalletSecret as w, APIError as y } from "@coinbase/cdp-api-client";
+import { Analytics as i } from "./index.native2.js";
 import "./index.native3.js";
 import "jose";
-import { SignJWT as w } from "./index.native109.js";
-import { toAuthState as y } from "./index.native103.js";
+import { SignJWT as _ } from "./index.native109.js";
+import { toAuthState as k } from "./index.native103.js";
 import "viem";
 import { getPlatformCrypto as c } from "./index.native10.js";
 import { sortKeys as p } from "./index.native100.js";
-import { getCoreOAuthManager as g } from "./index.native76.js";
-const l = 60 * 1e3, k = {
+import { getCoreOAuthManager as T } from "./index.native76.js";
+const l = 60 * 1e3, R = {
   maxRetries: 3,
   baseDelayMs: 1e3,
   maxDelayMs: 1e4
 };
-function T(t, e, s) {
-  const n = e * Math.pow(2, t), i = Math.random() * 0.3 * n;
-  return Math.min(n + i, s);
+function g(s, e, r) {
+  const n = e * Math.pow(2, s), o = Math.random() * 0.3 * n;
+  return Math.min(n + o, r);
 }
-function R(t) {
-  return new Promise((e) => setTimeout(e, t));
+function A(s) {
+  return new Promise((e) => setTimeout(e, s));
 }
-function _(t) {
-  if (t instanceof TypeError && t.message.includes("fetch"))
+function E(s) {
+  if (s instanceof TypeError && s.message.includes("fetch"))
     return !0;
-  if (t instanceof m) {
-    if (t.statusCode >= 500 && t.statusCode < 600 || t.statusCode === 408 || t.statusCode === 429)
+  if (s instanceof y) {
+    if (s.statusCode >= 500 && s.statusCode < 600 || s.statusCode === 408 || s.statusCode === 429)
       return !0;
-    if (t.statusCode === 401)
+    if (s.statusCode === 401)
       return !1;
   }
-  if (t instanceof Error) {
-    const e = t.message.toLowerCase();
+  if (s instanceof Error) {
+    const e = s.message.toLowerCase();
     if (e.includes("network") || e.includes("timeout") || e.includes("econnrefused") || e.includes("enotfound") || e.includes("socket"))
       return !0;
   }
   return !1;
 }
-class v {
+class j {
   projectId;
   authState = null;
   walletSecret = null;
@@ -139,14 +139,14 @@ class v {
     if (!await this.isSignedIn())
       throw new Error("Cannot get X-Wallet-Auth header if the user is not signed in");
     this.shouldRefreshWalletSecret() && await this.refreshWalletSecret();
-    const s = `${e.requestMethod} ${e.requestHost}${e.requestPath}`, n = Math.floor(Date.now() / 1e3), i = c(), r = {
-      uris: [s]
+    const r = `${e.requestMethod} ${e.requestHost}${e.requestPath}`, n = Math.floor(Date.now() / 1e3), o = c(), a = {
+      uris: [r]
     };
     if (e.requestData && Object.keys(e.requestData).length > 0) {
-      const a = p(e.requestData);
-      r.reqHash = await i.hash(new TextEncoder().encode(JSON.stringify(a)));
+      const t = p(e.requestData);
+      a.reqHash = await o.hash(new TextEncoder().encode(JSON.stringify(t)));
     }
-    return await new w(r).setProtectedHeader({ alg: "ES256", typ: "JWT" }).setIssuedAt(n).setNotBefore(n).setJti(i.generateRandomId()).sign(this.walletSecret.keyPair.privateKey);
+    return await new _(a).setProtectedHeader({ alg: "ES256", typ: "JWT" }).setIssuedAt(n).setNotBefore(n).setJti(o.generateRandomId()).sign(this.walletSecret.keyPair.privateKey);
   }
   /**
    * Gets the authentication state.
@@ -162,13 +162,13 @@ class v {
    * @param authState - The authentication state.
    */
   async setAuthState(e) {
-    this.authState = e, h.endUserIdentifier = e.user.userId, this.authStateChangeCallbacks.forEach((s) => s(this.authState?.user ?? null)), this.scheduleTokenRefresh();
+    this.authState = e, i.endUserIdentifier = e.user.userId, this.authStateChangeCallbacks.forEach((r) => r(this.authState?.user ?? null)), this.scheduleTokenRefresh();
   }
   /**
    * Clears the authentication state.
    */
   async clearAuthState() {
-    this.authState = null, this.walletSecret = null, h.endUserIdentifier = "", this.cancelTokenRefresh(), this.authStateChangeCallbacks.forEach((e) => e(null));
+    this.authState = null, this.walletSecret = null, i.endUserIdentifier = "", this.cancelTokenRefresh(), this.authStateChangeCallbacks.forEach((e) => e(null));
   }
   /**
    * Ensures the AuthManager is initialized before proceeding.
@@ -186,7 +186,7 @@ class v {
    */
   async _doInitialize() {
     try {
-      await this.refreshAccessToken("init"), await g().handleOAuthCode();
+      await this.refreshAccessToken("init"), await T().handleOAuthCode();
     } catch (e) {
       console.warn("Failed to refresh access token during initialization:", e);
     }
@@ -210,57 +210,78 @@ class v {
    * @returns The new access token.
    */
   async refreshAccessToken(e = "on_demand") {
-    const { maxRetries: s, baseDelayMs: n, maxDelayMs: i } = k;
-    h.sendSessionRefreshEvent({
+    const { maxRetries: r, baseDelayMs: n, maxDelayMs: o } = R;
+    i.sendSessionRefreshEvent({
       name: "refresh_token_start",
       trigger: e
     });
-    for (let r = 0; r <= s; r++)
+    for (let a = 0; a <= r; a++)
       try {
-        const a = await d(this.projectId, {
+        const t = await d(this.projectId, {
           grantType: "refresh_token"
-        }), o = y(
-          a.accessToken,
-          a.validUntil,
-          a.endUser
+        }), h = k(
+          t.accessToken,
+          t.validUntil,
+          t.endUser
         );
-        await this.setAuthState(o), h.sendSessionRefreshEvent({
+        await this.setAuthState(h), i.sendSessionRefreshEvent({
           name: "refresh_token_success",
           trigger: e,
-          attempt: r
+          attempt: a
         });
         return;
-      } catch (a) {
-        const o = a instanceof Error ? a.message : String(a);
-        if (!_(a)) {
-          h.sendSessionRefreshEvent({
+      } catch (t) {
+        const h = t instanceof Error ? t.message : String(t);
+        if (m(t)) {
+          if (S(t)) {
+            i.sendSessionRefreshEvent({
+              name: "refresh_token_skipped_transient",
+              trigger: e,
+              attempt: a,
+              read_outcome: t.outcome,
+              error_message: h
+            });
+            return;
+          }
+          i.sendSessionRefreshEvent({
             name: "refresh_token_failure",
             trigger: e,
-            attempt: r,
+            attempt: a,
             error_type: "non_transient",
-            error_message: o
+            read_outcome: t.outcome,
+            error_message: h
           }), await this.signOut();
           return;
         }
-        if (r === s) {
-          h.sendSessionRefreshEvent({
+        if (!E(t)) {
+          i.sendSessionRefreshEvent({
+            name: "refresh_token_failure",
+            trigger: e,
+            attempt: a,
+            error_type: "non_transient",
+            error_message: h
+          }), await this.signOut();
+          return;
+        }
+        if (a === r) {
+          i.sendSessionRefreshEvent({
             name: "refresh_token_exhausted",
             trigger: e,
-            attempt: r,
+            attempt: a,
             error_type: "transient",
-            error_message: o
+            error_message: h
           });
           return;
         }
-        h.sendSessionRefreshEvent({
+        i.sendSessionRefreshEvent({
           name: "refresh_token_retry",
           trigger: e,
-          attempt: r,
+          attempt: a,
           error_type: "transient",
-          error_message: o
+          error_message: h
         });
-        const u = T(r, n, i);
-        await R(u);
+        const u = g(a, n, o);
+        await A(u);
       }
   }
   /**
@@ -270,13 +291,13 @@ class v {
   scheduleTokenRefresh() {
     if (this.cancelTokenRefresh(), !this.authState)
       return;
-    const s = this.authState.expiresAt - l - Date.now();
-    s <= 0 || (h.sendSessionRefreshEvent({
+    const r = this.authState.expiresAt - l - Date.now();
+    r <= 0 || (i.sendSessionRefreshEvent({
       name: "refresh_token_scheduled",
-      time_until_refresh_ms: s
+      time_until_refresh_ms: r
     }), this.refreshTimeout = setTimeout(async () => {
       await this.refreshAccessToken("scheduled"), this.scheduleTokenRefresh();
-    }, s));
+    }, r));
   }
   /**
    * Cancels any scheduled token refresh.
@@ -313,23 +334,23 @@ class v {
    * Internal wallet secret refresh logic.
    */
   async _doRefreshWalletSecret() {
-    const e = c(), s = this.walletSecret?.walletSecretId ?? e.generateRandomId(), n = this.walletSecret?.keyPair ?? await e.createKeyPair(), i = this.authState.expiresAt, r = new Date(i).toISOString();
-    this.walletSecret = { walletSecretId: s, keyPair: n, expiresAt: i };
+    const e = c(), r = this.walletSecret?.walletSecretId ?? e.generateRandomId(), n = this.walletSecret?.keyPair ?? await e.createKeyPair(), o = this.authState.expiresAt, a = new Date(o).toISOString();
+    this.walletSecret = { walletSecretId: r, keyPair: n, expiresAt: o };
     try {
-      await S(
+      await w(
         this.authState.user.userId,
         {
-          walletSecretId: s,
+          walletSecretId: r,
           publicKey: n.publicKeyBase64,
-          validUntil: r
+          validUntil: a
         },
         { projectID: this.projectId }
       );
-    } catch (a) {
-      throw this.walletSecret = null, a;
+    } catch (t) {
+      throw this.walletSecret = null, t;
     }
   }
 }
 export {
-  v as AuthManager
+  j as AuthManager
 };

package/dist/native-types/actions/createBitcoinAccount.d.ts

@@ -11,9 +11,12 @@ export type CreateBitcoinAccountOptions = {
     idempotencyKey?: string;
 };
 /**
- * The result of creating a Bitcoin HD account.
+ * The result of creating a Bitcoin HD account. The extended public key (xpub) is always present,
+ * since the create response includes it and the caller needs it to derive child addresses.
  */
-export type CreateBitcoinAccountResult = EndUserBtcAccount;
+export type CreateBitcoinAccountResult = EndUserBtcAccount & {
+    xpub: string;
+};
 /**
  * Creates a Bitcoin HD (Hierarchical Deterministic) account for the current user.
  * The account uses BIP-84 derivation (segwit) and returns an extended public key (xpub)

package/dist/native-types/actions/getCurrentUser.d.ts

@@ -1,11 +1,28 @@
 import { User } from '../types.js';
+/**
+ * Options for getting the current user.
+ */
+export type GetCurrentUserOptions = {
+    /**
+     * When true, re-fetches the user from the API with each Bitcoin account's raw extended public
+     * key (xpub) included in `btcAccountObjects`. By default the xpubs are omitted (hash-only), so
+     * request this when you need to derive child addresses. Ignored if no user is signed in.
+     */
+    includeBtcXpubs?: boolean;
+};
 /**
  * Gets the currently signed-in user, if any.
  *
  * @example
  * ```typescript lines
  * const user = await getCurrentUser();
+ *
+ * // Include Bitcoin xpubs so addresses can be derived:
+ * const userWithXpubs = await getCurrentUser({ includeBtcXpubs: true });
  * ```
+ * @param options - Optional settings controlling what is returned.
  * @returns The currently signed-in user, or null if no user is signed in.
+ * @throws When `includeBtcXpubs` is true and the network request to re-fetch the user fails.
+ *   The default (cached) read never throws.
  */
-export declare const getCurrentUser: () => Promise<User | null>;
+export declare const getCurrentUser: (options?: GetCurrentUserOptions) => Promise<User | null>;

package/dist/native-types/actions/signBitcoinHash.d.ts

@@ -1,12 +1,14 @@
-import { SignBtcHashWithEndUserAccountBodyAddressType, SignBtcHashWithEndUserAccountBodyNetwork, SignBtcHashWithEndUserAccountBodyChange } from '@coinbase/cdp-api-client';
+import { SignBtcHashWithEndUserAccountBodyChange } from '@coinbase/cdp-api-client';
 /**
  * Options for signing a Bitcoin sighash.
  */
 export type SignBitcoinHashOptions = {
-    /** The Bitcoin network. Defaults to "bitcoin-testnet". */
-    network?: SignBtcHashWithEndUserAccountBodyNetwork;
-    /** The Bitcoin address type. Defaults to "segwit". */
-    addressType?: SignBtcHashWithEndUserAccountBodyAddressType;
+    /**
+     * Selects which Bitcoin account to sign with, as the `xpubHash` from the account's entry in
+     * `btcAccountObjects`. Resolved server-side against the user's own accounts; an unmatched hash
+     * fails with a not-found error (there is no fallback to a default account).
+     */
+    xpubHash: string;
     /** BIP-32 change level: 0 for external (receive) addresses, 1 for internal (change) addresses. */
     change: SignBtcHashWithEndUserAccountBodyChange;
     /** BIP-32 address index — must match the index used to derive the address controlling the UTXO. */

package/dist/native-types/core.d.ts

@@ -9,7 +9,7 @@ export { verifyOAuth } from './actions/verifyOAuth.js';
 export { verifySiweSignature, type VerifySiweSignatureOptions, type VerifySiweSignatureResult, } from './actions/verifySiweSignature.js';
 export { verifyTelegramOAuth } from './actions/verifyTelegramOAuth.js';
 export { authenticateWithJWT } from './actions/authenticateWithJWT.js';
-export { getCurrentUser } from './actions/getCurrentUser.js';
+export { getCurrentUser, type GetCurrentUserOptions } from './actions/getCurrentUser.js';
 export { isSignedIn } from './actions/isSignedIn.js';
 export { signOut } from './actions/signOut.js';
 export { getAccessToken } from './actions/getAccessToken.js';

package/dist/native-types/types.d.ts

@@ -23,7 +23,7 @@ type MFAMethods,
 type EndUserEvmAccount, 
 /** Solana account object with address and createdAt */
 type EndUserSolanaAccount, 
-/** Bitcoin HD account object with extendedPublicKey (xpub), network, and addressType */
+/** Bitcoin HD account object with xpubHash, network, addressType, and optional xpub */
 type EndUserBtcAccount, 
 /** Bitcoin network for account creation */
 type CreateEndUserBtcAccountBodyNetwork, 
@@ -203,7 +203,7 @@ export type User = {
     evmSmartAccountObjects?: EndUserEvmSmartAccount[];
     /** The Solana account objects associated with the user. Users can have up to 10 Solana accounts. */
     solanaAccountObjects?: EndUserSolanaAccount[];
-    /** The Bitcoin HD account objects associated with the user. One per addressType+network combination. */
+    /** The Bitcoin HD account objects associated with the user. Up to 10 per user. */
     btcAccountObjects?: EndUserBtcAccount[];
     /** The MFA methods enrolled for the user. */
     mfaMethods?: MFAMethods;

package/dist/native-types/version.d.ts

@@ -2,4 +2,4 @@
  * Current version of @coinbase/cdp-core package.
  * This file is auto-generated by scripts/sync-versions.js
  */
-export declare const VERSION = "0.0.118";
+export declare const VERSION = "0.0.120";

package/dist/types/actions/createBitcoinAccount.d.ts

@@ -11,9 +11,12 @@ export type CreateBitcoinAccountOptions = {
     idempotencyKey?: string;
 };
 /**
- * The result of creating a Bitcoin HD account.
+ * The result of creating a Bitcoin HD account. The extended public key (xpub) is always present,
+ * since the create response includes it and the caller needs it to derive child addresses.
  */
-export type CreateBitcoinAccountResult = EndUserBtcAccount;
+export type CreateBitcoinAccountResult = EndUserBtcAccount & {
+    xpub: string;
+};
 /**
  * Creates a Bitcoin HD (Hierarchical Deterministic) account for the current user.
  * The account uses BIP-84 derivation (segwit) and returns an extended public key (xpub)

package/dist/types/actions/getCurrentUser.d.ts

@@ -1,11 +1,28 @@
 import { User } from '../types.js';
+/**
+ * Options for getting the current user.
+ */
+export type GetCurrentUserOptions = {
+    /**
+     * When true, re-fetches the user from the API with each Bitcoin account's raw extended public
+     * key (xpub) included in `btcAccountObjects`. By default the xpubs are omitted (hash-only), so
+     * request this when you need to derive child addresses. Ignored if no user is signed in.
+     */
+    includeBtcXpubs?: boolean;
+};
 /**
  * Gets the currently signed-in user, if any.
  *
  * @example
  * ```typescript lines
  * const user = await getCurrentUser();
+ *
+ * // Include Bitcoin xpubs so addresses can be derived:
+ * const userWithXpubs = await getCurrentUser({ includeBtcXpubs: true });
  * ```
+ * @param options - Optional settings controlling what is returned.
  * @returns The currently signed-in user, or null if no user is signed in.
+ * @throws When `includeBtcXpubs` is true and the network request to re-fetch the user fails.
+ *   The default (cached) read never throws.
  */
-export declare const getCurrentUser: () => Promise<User | null>;
+export declare const getCurrentUser: (options?: GetCurrentUserOptions) => Promise<User | null>;