@coinbase/cdp-core 0.0.120 → 0.0.122

package/dist/types/mfa/utils.d.ts

@@ -3,13 +3,13 @@ import { User, MfaMethod } from '../types.js';
  * Gets the list of MFA methods that the user has enrolled in.
  *
  * @param user - The user object.
- * @returns An array of enrolled MFA methods ('totp', 'sms', or both).
+ * @returns An array of enrolled MFA methods, any of 'totp', 'sms', and 'passkey'.
  *
  * @example
  * ```typescript
  * const user = await getCurrentUser();
  * const methods = getEnrolledMfaMethods(user);
- * // methods = ['totp', 'sms']
+ * // methods = ['totp', 'passkey']
  *
  * if (methods.length > 1) {
  *   // Prompt user to choose which method to use
@@ -56,7 +56,7 @@ export declare function isEnrolledInMfa(user: User, method?: MfaMethod): boolean
  * const config = getMfaConfigState();
  * if (config) {
  *   const methods = getEnabledMfaMethods(config);
- *   // methods = ['totp', 'sms']
+ *   // methods = ['totp', 'passkey']
  * }
  * ```
  */

package/dist/types/shared/base64url.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Encodes binary data to a URL-safe base64 string (base64url), with no padding.
+ *
+ * URL-safe base64 replaces the standard `+` and `/` characters with `-` and `_`
+ * respectively, and omits the `=` padding. This is the encoding WebAuthn uses for
+ * binary fields (challenge, credential IDs, etc.) when serialized to JSON.
+ *
+ * @param data - The binary data to encode, as an ArrayBuffer or Uint8Array.
+ * @returns The base64url-encoded string (no padding).
+ */
+export declare function encodeBase64url(data: ArrayBuffer | Uint8Array): string;
+/**
+ * Decodes a URL-safe base64 string (base64url) to binary data.
+ *
+ * Accepts input with or without padding, and tolerates the standard base64
+ * alphabet as well. Reverses {@link encodeBase64url}.
+ *
+ * @param base64url - The base64url-encoded string to decode.
+ * @returns The decoded bytes as a Uint8Array.
+ */
+export declare function decodeBase64url(base64url: string): Uint8Array;

package/dist/types/shared/oauthFlowStorage.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Persists the flow ID for an OAuth flow that is about to redirect out of the app
+ * (e.g. to Google/Apple/X), so it can later be validated against the flow ID
+ * returned on the OAuth callback.
+ *
+ * This is the CSRF "state" binding for the OAuth flow: without it, an attacker can
+ * craft a link containing their own `code`/`flow_id` that a victim's browser would
+ * otherwise silently consume (see `consumePendingOAuthFlowId`).
+ *
+ * @param flowId - The flow ID returned by the backend when initiating the OAuth flow.
+ */
+export declare const setPendingOAuthFlowId: (flowId: string) => Promise<void>;
+/**
+ * Reads and clears the persisted pending OAuth flow ID, if any.
+ *
+ * This is a single-use nonce: it is always removed from storage as part of this
+ * call, regardless of whether the caller ultimately treats it as valid. This
+ * prevents a captured/replayed callback URL from being consumed more than once.
+ *
+ * @returns The persisted flow ID, or null if none was persisted (e.g. no OAuth
+ * flow was initiated by this client, or it was already consumed).
+ */
+export declare const consumePendingOAuthFlowId: () => Promise<string | null>;

package/dist/types/shared/webauthn.d.ts

@@ -0,0 +1,121 @@
+/**
+ * The message for a passkey ceremony the user dismissed or let expire. `NotAllowedError` covers
+ * both, deliberately, so that a site cannot tell a dismissal from a timeout.
+ */
+export declare const PASSKEY_PROMPT_DISMISSED = "The passkey prompt was dismissed or timed out.";
+/**
+ * A serialized WebAuthn registration (attestation) credential, produced by
+ * {@link serializeAttestationResponse}. Binary fields are base64url-encoded so the
+ * payload is JSON-safe and can be submitted to the passkey enrollment endpoint.
+ */
+export type SerializedAttestationResponse = {
+    /** The base64url-encoded credential ID. */
+    id: string;
+    /** The base64url-encoded raw credential ID. */
+    rawId: string;
+    /** The credential type, always `"public-key"`. */
+    type: string;
+    /** Client extension results returned by the authenticator. */
+    clientExtensionResults: AuthenticationExtensionsClientOutputs;
+    /** The attestation response payload. */
+    response: {
+        /** The base64url-encoded client data JSON. */
+        clientDataJSON: string;
+        /** The base64url-encoded attestation object. */
+        attestationObject: string;
+        /** The authenticator transports, when reported by the authenticator. */
+        transports?: string[];
+    };
+};
+/**
+ * A serialized WebAuthn authentication (assertion) credential, produced by
+ * {@link serializeAssertionResponse}. Binary fields are base64url-encoded so the
+ * payload is JSON-safe and can be submitted to the passkey verification endpoint.
+ */
+export type SerializedAssertionResponse = {
+    /** The base64url-encoded credential ID. */
+    id: string;
+    /** The base64url-encoded raw credential ID. */
+    rawId: string;
+    /** The credential type, always `"public-key"`. */
+    type: string;
+    /** Client extension results returned by the authenticator. */
+    clientExtensionResults: AuthenticationExtensionsClientOutputs;
+    /** The assertion response payload. */
+    response: {
+        /** The base64url-encoded client data JSON. */
+        clientDataJSON: string;
+        /** The base64url-encoded authenticator data. */
+        authenticatorData: string;
+        /** The base64url-encoded assertion signature. */
+        signature: string;
+        /** The base64url-encoded user handle, when present. */
+        userHandle?: string;
+    };
+};
+/**
+ * The JSON shape of WebAuthn credential creation options as returned by the
+ * server. Binary members (`challenge`, `user.id`, `excludeCredentials[].id`) are
+ * base64url-encoded strings. Passed opaquely to {@link deserializeCreationOptions}.
+ */
+export type CreationOptionsJSON = Record<string, unknown>;
+/**
+ * The JSON shape of WebAuthn credential request options as returned by the
+ * server. Binary members (`challenge`, `allowCredentials[].id`) are base64url-encoded
+ * strings. Passed opaquely to {@link deserializeRequestOptions}.
+ */
+export type RequestOptionsJSON = Record<string, unknown>;
+/**
+ * Detects whether passkeys (WebAuthn platform authenticators) are usable in the
+ * current environment. Returns `false` in non-web environments and when no
+ * user-verifying platform authenticator is available.
+ *
+ * @returns A promise resolving to `true` when passkeys are supported, `false` otherwise.
+ */
+export declare function isPasskeySupported(): Promise<boolean>;
+/**
+ * Maps a rejected WebAuthn ceremony to an {@link MfaError} with a code callers can branch on,
+ * and passes anything it does not recognize through untouched. The browser rejects with a
+ * `DOMException` whose message differs per browser and reads like a spec citation, so the
+ * recognized failures get copy instead.
+ *
+ * @param error - The error the browser rejected `navigator.credentials.create()` or `.get()` with.
+ * @returns The error to throw, mapped when recognized.
+ */
+export declare function mapCeremonyError(error: unknown): unknown;
+/**
+ * Serializes a WebAuthn registration credential (the result of
+ * `navigator.credentials.create()`) into a JSON-safe object with base64url-encoded
+ * binary fields, ready to submit to the passkey enrollment endpoint.
+ *
+ * @param credential - The PublicKeyCredential returned by `navigator.credentials.create()`.
+ * @returns The serialized attestation response.
+ */
+export declare function serializeAttestationResponse(credential: PublicKeyCredential): SerializedAttestationResponse;
+/**
+ * Serializes a WebAuthn authentication credential (the result of
+ * `navigator.credentials.get()`) into a JSON-safe object with base64url-encoded
+ * binary fields, ready to submit to the passkey verification endpoint.
+ *
+ * @param credential - The PublicKeyCredential returned by `navigator.credentials.get()`.
+ * @returns The serialized assertion response.
+ */
+export declare function serializeAssertionResponse(credential: PublicKeyCredential): SerializedAssertionResponse;
+/**
+ * Deserializes server-provided WebAuthn credential creation options (JSON with
+ * base64url-encoded binary members) into a {@link PublicKeyCredentialCreationOptions}
+ * object with `ArrayBuffer` members, ready to pass to `navigator.credentials.create()`.
+ *
+ * @param options - The credential creation options JSON from the server (the `publicKey` member).
+ * @returns The creation options with binary fields decoded to ArrayBuffers.
+ */
+export declare function deserializeCreationOptions(options: CreationOptionsJSON): PublicKeyCredentialCreationOptions;
+/**
+ * Deserializes server-provided WebAuthn credential request options (JSON with
+ * base64url-encoded binary members) into a {@link PublicKeyCredentialRequestOptions}
+ * object with `ArrayBuffer` members, ready to pass to `navigator.credentials.get()`.
+ *
+ * @param options - The credential request options JSON from the server (the `publicKey` member).
+ * @returns The request options with binary fields decoded to ArrayBuffers.
+ */
+export declare function deserializeRequestOptions(options: RequestOptionsJSON): PublicKeyCredentialRequestOptions;

package/dist/types/types.d.ts

@@ -1,4 +1,4 @@
-import { SendEvmTransactionWithEndUserAccountBodyNetwork, SendSolanaTransactionWithEndUserAccountBodyNetwork, APIError, APIErrorType, ErrorType, HttpErrorType, EvmUserOperation, EvmCall as EvmUserOperationCall, EvmUserOperationNetwork, EvmUserOperationStatus, OAuth2ProviderType, OAuth2Authentication, TelegramAuthentication, SiweAuthentication, MFAMethods, MfaMethod, EndUserEvmAccount, EndUserSolanaAccount, EndUserEvmSmartAccount, EndUserBtcAccount, CreateEndUserBtcAccountBodyNetwork, UserOperationReceipt, TokenFee, GetEndUserEvmSwapPrice200IssuesAllowance, GetEndUserEvmSwapPrice200IssuesBalance, PaymasterContext } from '@coinbase/cdp-api-client';
+import { SendEvmTransactionWithEndUserAccountBodyNetwork, SendSolanaTransactionWithEndUserAccountBodyNetwork, APIError, APIErrorType, ErrorType, HttpErrorType, EvmUserOperation, EvmCall as EvmUserOperationCall, EvmUserOperationNetwork, EvmUserOperationStatus, OAuth2ProviderType, OAuth2Authentication, TelegramAuthentication, SiweAuthentication, MFAMethods, MfaMethod, PasskeySummary, EndUserEvmAccount, EndUserSolanaAccount, EndUserEvmSmartAccount, EndUserBtcAccount, CreateEndUserBtcAccountBodyNetwork, UserOperationReceipt, TokenFee, GetEndUserEvmSwapPrice200IssuesAllowance, GetEndUserEvmSwapPrice200IssuesBalance, PaymasterContext } from '@coinbase/cdp-api-client';
 import { TransactionSerializableEIP1559 } from 'viem';
 export { 
 /** The API error class */
@@ -15,10 +15,12 @@ SendEvmTransactionWithEndUserAccountBodyNetwork,
 SendSolanaTransactionWithEndUserAccountBodyNetwork, 
 /** The type of OAuth provider to sign in with. */
 OAuth2ProviderType, 
-/** MFA method type (totp or sms) */
+/** MFA method type (totp, sms, or passkey) */
 type MfaMethod, 
 /** MFA methods enrolled for a user */
 type MFAMethods, 
+/** Summary of an enrolled passkey (WebAuthn) credential */
+type PasskeySummary, 
 /** EVM account object with address and createdAt */
 type EndUserEvmAccount, 
 /** Solana account object with address and createdAt */

package/dist/types/version.d.ts

@@ -2,4 +2,4 @@
  * Current version of @coinbase/cdp-core package.
  * This file is auto-generated by scripts/sync-versions.js
  */
-export declare const VERSION = "0.0.120";
+export declare const VERSION = "0.0.122";

package/dist/web/index.web.js

@@ -6,13 +6,13 @@ import { webCrypto as m } from "./index.web6.js";
 import { webOAuth as n } from "./index.web7.js";
 import { webStorage as i } from "./index.web8.js";
 import { VERSION as a } from "./index.web9.js";
-import { initialize as T } from "./index.web10.js";
-import { signInWithEmail as M } from "./index.web11.js";
-import { signInWithSms as I } from "./index.web12.js";
-import { signInWithOAuth as _ } from "./index.web13.js";
+import { initialize as v } from "./index.web10.js";
+import { signInWithEmail as P } from "./index.web11.js";
+import { signInWithSms as h } from "./index.web12.js";
+import { signInWithOAuth as I } from "./index.web13.js";
 import { signInWithSiwe as C } from "./index.web14.js";
-import { verifyEmailOTP as R } from "./index.web15.js";
-import { verifySmsOTP as U } from "./index.web16.js";
+import { verifyEmailOTP as k } from "./index.web15.js";
+import { verifySmsOTP as D } from "./index.web16.js";
 import { verifyOAuth as w } from "./index.web17.js";
 import { verifySiweSignature as N } from "./index.web18.js";
 import { verifyTelegramOAuth as V } from "./index.web19.js";
@@ -28,17 +28,17 @@ import { signEvmHash as or } from "./index.web28.js";
 import { signEvmTransaction as mr } from "./index.web29.js";
 import { signEvmMessage as ir } from "./index.web30.js";
 import { signEvmTypedData as fr } from "./index.web31.js";
-import { signSolanaTransaction as xr } from "./index.web32.js";
-import { signSolanaMessage as cr } from "./index.web33.js";
-import { sendEvmTransaction as gr } from "./index.web34.js";
+import { signSolanaTransaction as sr } from "./index.web32.js";
+import { signSolanaMessage as Er } from "./index.web33.js";
+import { sendEvmTransaction as lr } from "./index.web34.js";
 import { sendSolanaTransaction as dr } from "./index.web35.js";
 import { sendUserOperation as Sr } from "./index.web36.js";
-import { getUserOperation as Tr } from "./index.web37.js";
-import { exportEvmAccount as Mr } from "./index.web38.js";
-import { exportSolanaAccount as Ir } from "./index.web39.js";
-import { createSpendPermission as _r } from "./index.web40.js";
+import { getUserOperation as vr } from "./index.web37.js";
+import { exportEvmAccount as Pr } from "./index.web38.js";
+import { exportSolanaAccount as hr } from "./index.web39.js";
+import { createSpendPermission as Ir } from "./index.web40.js";
 import { listSpendPermissions as Cr } from "./index.web41.js";
-import { APIError as Rr, ErrorType as Dr, EvmEip7702DelegationNetwork as Ur, EvmSwapsNetwork as kr, HttpErrorType as wr, OAuth2ProviderType as Fr, SendEvmTransactionWithEndUserAccountBodyNetwork as Nr, SendSolanaTransactionWithEndUserAccountBodyNetwork as br } from "@coinbase/cdp-api-client";
+import { APIError as kr, ErrorType as Rr, EvmEip7702DelegationNetwork as Dr, EvmSwapsNetwork as Ur, HttpErrorType as wr, OAuth2ProviderType as Fr, SendEvmTransactionWithEndUserAccountBodyNetwork as Nr, SendSolanaTransactionWithEndUserAccountBodyNetwork as br } from "@coinbase/cdp-api-client";
 import { revokeSpendPermission as Wr } from "./index.web42.js";
 import { enableSpendPermissions as Br } from "./index.web43.js";
 import { getCurrentUserSync as Yr } from "./index.web44.js";
@@ -52,18 +52,18 @@ import { linkSiwe as te } from "./index.web51.js";
 import { createEvmEoaAccount as ne } from "./index.web52.js";
 import { createEvmSmartAccount as ae } from "./index.web53.js";
 import { createEvmEip7702Delegation as pe } from "./index.web54.js";
-import { getEvmEip7702DelegationOperation as Ee } from "./index.web55.js";
-import { waitForEvmEip7702Delegation as se } from "./index.web56.js";
-import { createDelegation as le } from "./index.web57.js";
+import { getEvmEip7702DelegationOperation as xe } from "./index.web55.js";
+import { waitForEvmEip7702Delegation as ce } from "./index.web56.js";
+import { createDelegation as ge } from "./index.web57.js";
 import { getDelegation as ue } from "./index.web58.js";
 import { revokeDelegation as Ae } from "./index.web59.js";
-import { createDelegationForAccount as ve } from "./index.web60.js";
-import { getDelegationForAccount as he } from "./index.web61.js";
-import { revokeDelegationForAccount as Pe } from "./index.web62.js";
-import { createSolanaAccount as ye } from "./index.web63.js";
+import { createDelegationForAccount as Te } from "./index.web60.js";
+import { getDelegationForAccount as Me } from "./index.web61.js";
+import { revokeDelegationForAccount as ye } from "./index.web62.js";
+import { createSolanaAccount as _e } from "./index.web63.js";
 import { createBitcoinAccount as Oe } from "./index.web64.js";
-import { signBitcoinHash as De } from "./index.web65.js";
-import { sendEvmEoaUsdc as ke } from "./index.web66.js";
+import { signBitcoinHash as Re } from "./index.web65.js";
+import { sendEvmEoaUsdc as Ue } from "./index.web66.js";
 import { sendEvmSmartAccountUsdc as Fe } from "./index.web67.js";
 import { sendSolanaUsdc as be } from "./index.web68.js";
 import { sendUsdc as We } from "./index.web69.js";
@@ -78,23 +78,28 @@ import { submitMfaEnrollment as to } from "./index.web77.js";
 import { initiateMfaVerification as no } from "./index.web78.js";
 import { submitMfaVerification as ao } from "./index.web79.js";
 import { cancelMfaVerification as po } from "./index.web80.js";
-import { getEnabledMfaMethods as Eo, getEnrolledMfaMethods as co, isEnrolledInMfa as so } from "./index.web81.js";
-import { isMfaRequired as lo } from "./index.web82.js";
-import { MFA_PROTECTED_ACTIONS as So, MFA_PROTECTED_FUNCTIONS as Ao, isMfaProtectedAction as To } from "./index.web83.js";
-import { registerMfaListener as Mo } from "./index.web84.js";
-import { AuthManager as Io } from "./index.web85.js";
-import { CustomAuthError as _o } from "./index.web86.js";
-import { toViemAccount as Co } from "./index.web87.js";
-import { InputValidationError as Ro, InternalError as Do, MfaError as Uo, ModuleResolutionError as ko, SwapError as wo, ValidationError as Fo } from "./index.web88.js";
-import { validatePhoneNumber as bo } from "./index.web89.js";
-import { createCDPEmbeddedWallet as Wo } from "./index.web90.js";
-import { EIP1193ProviderError as Bo, STANDARD_ERROR_CODES as Ko } from "./index.web91.js";
+import { enrollPasskey as xo } from "./index.web81.js";
+import { verifyPasskey as co } from "./index.web82.js";
+import { listPasskeys as go } from "./index.web83.js";
+import { deletePasskey as So } from "./index.web84.js";
+import { getEnabledMfaMethods as vo, getEnrolledMfaMethods as To, isEnrolledInMfa as Po } from "./index.web85.js";
+import { isMfaRequired as ho } from "./index.web86.js";
+import { MFA_PROTECTED_ACTIONS as Io, MFA_PROTECTED_FUNCTIONS as _o, isMfaProtectedAction as Co } from "./index.web87.js";
+import { registerMfaListener as ko } from "./index.web88.js";
+import { AuthManager as Do } from "./index.web89.js";
+import { CustomAuthError as wo } from "./index.web90.js";
+import { toViemAccount as No } from "./index.web91.js";
+import { InputValidationError as Vo, InternalError as Wo, MfaError as Ho, ModuleResolutionError as Bo, SwapError as Ko, ValidationError as Yo } from "./index.web92.js";
+import { validatePhoneNumber as Xo } from "./index.web93.js";
+import { createCDPEmbeddedWallet as qo } from "./index.web94.js";
+import { EIP1193ProviderError as Go, STANDARD_ERROR_CODES as Jo } from "./index.web95.js";
 import "viem";
 import "zustand";
-import { buildKeyExportIframeUrl as Lo, calculateSecureIframeHeight as Xo, createIframe as jo, getSecureIframeOrigin as qo, isSecureIframeKeyExportMessage as zo, sendSecureIframeMessage as Go, validateSecureIframeEnvironment as Jo } from "./index.web92.js";
-import { DEFAULT_SECURE_IFRAME_BASE_PATH as Zo, DEFAULT_SECURE_IFRAME_THEME as $o, SECURE_IFRAME_EVENT_TYPE as rt, SECURE_IFRAME_EVENT_TYPE_PREFIX as et, SECURE_IFRAME_KEY_EXPORT_EVENT_TYPE as ot } from "./index.web93.js";
-import { createEvmKeyExportIframe as mt, createSolanaKeyExportIframe as nt } from "./index.web94.js";
-import { toTransactionSigner as at } from "./index.web95.js";
+import { buildKeyExportIframeUrl as Zo, calculateSecureIframeHeight as $o, createIframe as rt, getSecureIframeOrigin as et, isSecureIframeKeyExportMessage as ot, sendSecureIframeMessage as tt, validateSecureIframeEnvironment as mt } from "./index.web96.js";
+import { DEFAULT_SECURE_IFRAME_BASE_PATH as it, DEFAULT_SECURE_IFRAME_THEME as at, SECURE_IFRAME_EVENT_TYPE as ft, SECURE_IFRAME_EVENT_TYPE_PREFIX as pt, SECURE_IFRAME_KEY_EXPORT_EVENT_TYPE as st } from "./index.web97.js";
+import { createEvmKeyExportIframe as Et, createSolanaKeyExportIframe as ct } from "./index.web98.js";
+import { toTransactionSigner as gt } from "./index.web99.js";
+import { isPasskeySupported as ut } from "./index.web100.js";
 e.registerPackageVersion("core", a);
 t({
   crypto: m,
@@ -107,51 +112,53 @@ o(() => {
   return r && r !== document.body ? r : document.body;
 });
 export {
-  Rr as APIError,
-  Io as AuthManager,
-  _o as CustomAuthError,
-  Zo as DEFAULT_SECURE_IFRAME_BASE_PATH,
-  $o as DEFAULT_SECURE_IFRAME_THEME,
-  Bo as EIP1193ProviderError,
-  Dr as ErrorType,
-  Ur as EvmEip7702DelegationNetwork,
-  kr as EvmSwapsNetwork,
+  kr as APIError,
+  Do as AuthManager,
+  wo as CustomAuthError,
+  it as DEFAULT_SECURE_IFRAME_BASE_PATH,
+  at as DEFAULT_SECURE_IFRAME_THEME,
+  Go as EIP1193ProviderError,
+  Rr as ErrorType,
+  Dr as EvmEip7702DelegationNetwork,
+  Ur as EvmSwapsNetwork,
   wr as HttpErrorType,
-  Ro as InputValidationError,
-  Do as InternalError,
-  So as MFA_PROTECTED_ACTIONS,
-  Ao as MFA_PROTECTED_FUNCTIONS,
-  Uo as MfaError,
-  ko as ModuleResolutionError,
+  Vo as InputValidationError,
+  Wo as InternalError,
+  Io as MFA_PROTECTED_ACTIONS,
+  _o as MFA_PROTECTED_FUNCTIONS,
+  Ho as MfaError,
+  Bo as ModuleResolutionError,
   Fr as OAuth2ProviderType,
-  rt as SECURE_IFRAME_EVENT_TYPE,
-  et as SECURE_IFRAME_EVENT_TYPE_PREFIX,
-  ot as SECURE_IFRAME_KEY_EXPORT_EVENT_TYPE,
-  Ko as STANDARD_ERROR_CODES,
+  ft as SECURE_IFRAME_EVENT_TYPE,
+  pt as SECURE_IFRAME_EVENT_TYPE_PREFIX,
+  st as SECURE_IFRAME_KEY_EXPORT_EVENT_TYPE,
+  Jo as STANDARD_ERROR_CODES,
   Nr as SendEvmTransactionWithEndUserAccountBodyNetwork,
   br as SendSolanaTransactionWithEndUserAccountBodyNetwork,
-  wo as SwapError,
-  Fo as ValidationError,
+  Ko as SwapError,
+  Yo as ValidationError,
   H as authenticateWithJWT,
-  Lo as buildKeyExportIframeUrl,
-  Xo as calculateSecureIframeHeight,
+  Zo as buildKeyExportIframeUrl,
+  $o as calculateSecureIframeHeight,
   po as cancelMfaVerification,
   Oe as createBitcoinAccount,
-  Wo as createCDPEmbeddedWallet,
-  le as createDelegation,
-  ve as createDelegationForAccount,
+  qo as createCDPEmbeddedWallet,
+  ge as createDelegation,
+  Te as createDelegationForAccount,
   pe as createEvmEip7702Delegation,
   ne as createEvmEoaAccount,
-  mt as createEvmKeyExportIframe,
+  Et as createEvmKeyExportIframe,
   ae as createEvmSmartAccount,
-  jo as createIframe,
-  ye as createSolanaAccount,
-  nt as createSolanaKeyExportIframe,
-  _r as createSpendPermission,
+  rt as createIframe,
+  _e as createSolanaAccount,
+  ct as createSolanaKeyExportIframe,
+  Ir as createSpendPermission,
+  So as deletePasskey,
   Br as enableSpendPermissions,
+  xo as enrollPasskey,
   Ye as executeSwap,
-  Mr as exportEvmAccount,
-  Ir as exportSolanaAccount,
+  Pr as exportEvmAccount,
+  hr as exportSolanaAccount,
   Xr as fetchWithX402,
   z as getAccessToken,
   J as getAccessTokenExpiration,
@@ -159,24 +166,25 @@ export {
   K as getCurrentUser,
   Yr as getCurrentUserSync,
   ue as getDelegation,
-  he as getDelegationForAccount,
-  Eo as getEnabledMfaMethods,
-  co as getEnrolledMfaMethods,
-  Ee as getEvmEip7702DelegationOperation,
+  Me as getDelegationForAccount,
+  vo as getEnabledMfaMethods,
+  To as getEnrolledMfaMethods,
+  xe as getEvmEip7702DelegationOperation,
   Xe as getMfaConfig,
   Je as getMfaConfigState,
   qe as getProjectConfig,
   Qe as getProjectConfigState,
-  qo as getSecureIframeOrigin,
+  et as getSecureIframeOrigin,
   Be as getSwapPrice,
-  Tr as getUserOperation,
-  T as initialize,
+  vr as getUserOperation,
+  v as initialize,
   eo as initiateMfaEnrollment,
   no as initiateMfaVerification,
-  so as isEnrolledInMfa,
-  To as isMfaProtectedAction,
-  lo as isMfaRequired,
-  zo as isSecureIframeKeyExportMessage,
+  Po as isEnrolledInMfa,
+  Co as isMfaProtectedAction,
+  ho as isMfaRequired,
+  ut as isPasskeySupported,
+  ot as isSecureIframeKeyExportMessage,
   L as isSignedIn,
   ee as linkApple,
   Qr as linkEmail,
@@ -184,44 +192,46 @@ export {
   $r as linkOAuth,
   te as linkSiwe,
   Gr as linkSms,
+  go as listPasskeys,
   Cr as listSpendPermissions,
   Z as onAuthStateChange,
   rr as onOAuthStateChange,
   $e as recordMfaEnrollmentPrompted,
-  Mo as registerMfaListener,
+  ko as registerMfaListener,
   Ae as revokeDelegation,
-  Pe as revokeDelegationForAccount,
+  ye as revokeDelegationForAccount,
   Wr as revokeSpendPermission,
-  ke as sendEvmEoaUsdc,
+  Ue as sendEvmEoaUsdc,
   Fe as sendEvmSmartAccountUsdc,
-  gr as sendEvmTransaction,
-  Go as sendSecureIframeMessage,
+  lr as sendEvmTransaction,
+  tt as sendSecureIframeMessage,
   dr as sendSolanaTransaction,
   be as sendSolanaUsdc,
   We as sendUsdc,
   Sr as sendUserOperation,
-  De as signBitcoinHash,
+  Re as signBitcoinHash,
   or as signEvmHash,
   ir as signEvmMessage,
   mr as signEvmTransaction,
   fr as signEvmTypedData,
-  M as signInWithEmail,
-  _ as signInWithOAuth,
+  P as signInWithEmail,
+  I as signInWithOAuth,
   C as signInWithSiwe,
-  I as signInWithSms,
+  h as signInWithSms,
   j as signOut,
-  cr as signSolanaMessage,
-  xr as signSolanaTransaction,
+  Er as signSolanaMessage,
+  sr as signSolanaTransaction,
   to as submitMfaEnrollment,
   ao as submitMfaVerification,
-  at as toTransactionSigner,
-  Co as toViemAccount,
-  bo as validatePhoneNumber,
-  Jo as validateSecureIframeEnvironment,
-  R as verifyEmailOTP,
+  gt as toTransactionSigner,
+  No as toViemAccount,
+  Xo as validatePhoneNumber,
+  mt as validateSecureIframeEnvironment,
+  k as verifyEmailOTP,
   w as verifyOAuth,
+  co as verifyPasskey,
   N as verifySiweSignature,
-  U as verifySmsOTP,
+  D as verifySmsOTP,
   V as verifyTelegramOAuth,
-  se as waitForEvmEip7702Delegation
+  ce as waitForEvmEip7702Delegation
 };

package/dist/web/index.web10.js

@@ -1,10 +1,10 @@
 import { configureCdpApiClient as C, setAuthManager as v, getMfaConfig as M, APIError as m, getProjectConfig as S } from "@coinbase/cdp-api-client";
 import { Analytics as d } from "./index.web2.js";
 import "./index.web3.js";
-import { createAuthManager as y } from "./index.web115.js";
-import { OAuthManager as w } from "./index.web116.js";
-import { MockAuthManager as P } from "./index.web117.js";
-import { MockOAuthManager as _ } from "./index.web118.js";
+import { createAuthManager as y } from "./index.web122.js";
+import { OAuthManager as w } from "./index.web123.js";
+import { MockAuthManager as P } from "./index.web124.js";
+import { MockOAuthManager as _ } from "./index.web125.js";
 import { getPlatformServices as h } from "./index.web5.js";
 import { getConfig as s, setCoreAuthManager as I, setCoreOAuthManager as A, setMfaConfig as k, setProjectConfig as b, getCoreAuthManager as O, setConfig as R } from "./index.web74.js";
 import "viem";