@coinbase/cdp-core 0.0.121 → 0.0.123

package/dist/esm/index.web121.js

@@ -1,35 +1,13 @@
-import { toAuthState as o } from "./index.web102.js";
-import { getCoreAuthManager as a, getConfig as n } from "./index.web74.js";
-import { createBtcAccountIfNeeded as r } from "./index.web124.js";
-import { createEvmAccountIfNeeded as f } from "./index.web125.js";
-import { createSolanaAccountIfNeeded as l } from "./index.web126.js";
-const k = async (t) => {
-  let e = o(
-    t.accessToken,
-    t.validUntil,
-    t.endUser
-  );
-  await a().setAuthState(e);
-  const c = n();
-  if (c.ethereum?.createOnLogin && (e = await f(
-    e,
-    t.accessToken,
-    t.validUntil,
-    c.ethereum.createOnLogin
-  )), c.solana?.createOnLogin && (e = await l(
-    e,
-    t.accessToken,
-    t.validUntil
-  )), c.bitcoin?.createOnLogin) {
-    const i = [c.bitcoin.createOnLogin].flat();
-    e = await r(
-      e,
-      t.accessToken,
-      t.validUntil,
-      i
-    );
-  }
-};
+import { encodeBase64 as c, decodeBase64 as t } from "./index.web101.js";
+function a(e) {
+  const r = e instanceof Uint8Array ? e : new Uint8Array(e);
+  return c(r).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+function s(e) {
+  const r = e.replace(/-/g, "+").replace(/_/g, "/"), n = (4 - r.length % 4) % 4;
+  return t(r + "=".repeat(n));
+}
 export {
-  k as completeAuthFlow
+  s as decodeBase64url,
+  a as encodeBase64url
 };

package/dist/esm/index.web122.js

@@ -1,26 +1,11 @@
-import { mockUser as t } from "./index.web107.js";
-import { getConfig as r, getCoreAuthManager as o } from "./index.web74.js";
-import { completeAuthFlow as m } from "./index.web121.js";
-const p = async (s, a, c) => {
-  if (r().useMock)
-    return await o().setAuthState({
-      accessToken: "mock-access-token",
-      expiresAt: Date.now() + 1e3 * 60 * 60 * 24,
-      user: t
-    }), {
-      message: a,
-      user: t,
-      isNewUser: !1
-    };
-  const e = await c(r().projectId, s, s.idempotencyKey);
-  await m(e);
-  const i = o().getUser();
-  return {
-    message: e.message,
-    user: i,
-    isNewUser: e.isNewEndUser
-  };
-};
+import { AuthManager as o } from "./index.web89.js";
+import { CustomAuthManager as n } from "./index.web129.js";
+import "@coinbase/cdp-api-client";
+import "viem";
+import { getConfig as e } from "./index.web74.js";
+function c(t, r = {}) {
+  return e().customAuth?.getJwt ? new n(t, r) : new o(t, r);
+}
 export {
-  p as verifyOTP
+  c as createAuthManager
 };

package/dist/esm/index.web123.js

@@ -1,67 +1,120 @@
-import { AuthManager as a } from "./index.web85.js";
-import { getConfig as o } from "./index.web74.js";
-import { CustomAuthError as s } from "./index.web86.js";
-const n = 3600 * 1e3;
-class l extends a {
+import { OAuth2ProviderType as l } from "@coinbase/cdp-api-client";
+import "./index.web2.js";
+import "./index.web3.js";
+import "jose";
+import "viem";
+import { getPlatformOAuth as h } from "./index.web5.js";
+import "./index.web103.js";
+import { consumePendingOAuthFlowId as c } from "./index.web106.js";
+import { verifyOAuth as w } from "./index.web17.js";
+import "./index.web97.js";
+import "./index.web104.js";
+import "@solana/web3.js";
+import "bs58";
+class k {
+  oauthFlowState = null;
+  oauthStateChangeCallbacks = [];
   /**
-   * Signs out the user, clearing all authentication state.
-   * For custom auth, we only clear local state without calling the CDP logout API,
-   * as authentication is managed by the external identity provider.
+   * Adds a callback to be called when the OAuth state changes.
+   *
+   * @param callback - The function to call when the OAuth state changes.
    */
-  async signOut() {
-    await this.clearAuthState();
+  async addOAuthStateChangeCallback(t) {
+    this.oauthStateChangeCallbacks.push(t), t(this.oauthFlowState);
   }
   /**
-   * Gets the access token by calling the customAuth.getJwt callback.
-   * Returns null if the user is not signed in.
+   * Sets the OAuth flow state.
    *
-   * @returns The access token from the custom auth provider.
+   * @param oauthFlowState - The OAuth flow state.
    */
-  async getToken() {
-    const e = o();
-    if (!e.customAuth)
-      return console.error("Custom auth configuration not found"), await this.clearAuthState(), null;
-    try {
-      const t = await e.customAuth.getJwt();
-      return t ? (this.authState && (this.authState.accessToken = t, this.authState.expiresAt = Date.now() + n), t) : (await this.clearAuthState(), null);
-    } catch (t) {
-      const r = new s(
-        t instanceof Error ? t.message : "Failed to get custom auth JWT"
-      );
-      return console.error(r), await this.clearAuthState(), null;
-    }
+  async setOAuthFlowState(t) {
+    this.oauthFlowState = t, this.oauthStateChangeCallbacks.forEach((e) => e(this.oauthFlowState));
   }
   /**
-   * Internal async initialization logic for custom auth.
-   * No-op for custom auth since tokens are provided via customAuth.getJwt callback.
-   * Unlike standard CDP auth, custom auth doesn't need token refresh or OAuth handling.
+   * Clears the OAuth flow state.
    */
-  async _doInitialize() {
+  async clearOAuthFlowState() {
+    this.oauthFlowState = null, this.oauthStateChangeCallbacks.forEach((t) => t(null));
   }
   /**
-   * Custom auth always fetches fresh tokens, so never needs to "refresh" in the traditional sense.
+   * Gets the OAuth flow state.
    *
-   * @returns Always false since custom auth doesn't use token refresh logic.
+   * @returns The OAuth flow state.
    */
-  shouldRefreshToken() {
-    return !1;
+  async getOAuthFlowState() {
+    return this.oauthFlowState;
   }
   /**
-   * Custom auth doesn't use CDP's token refresh mechanism.
-   * Tokens are always provided fresh from the customAuth.getJwt callback.
-   * This method should never be called, but we override it as a defensive measure.
-   */
-  async refreshAccessToken() {
-  }
-  /**
-   * Custom auth provides fresh tokens on each request via customAuth.getJwt,
-   * so no scheduled refresh is needed. This method is a no-op for custom auth.
+   * Handles the OAuth code.
+   *
+   * @param url - The URL to handle.
+   * @returns A promise that resolves when the OAuth code is handled.
+   * @throws An error if the URL is required and not provided.
    */
-  scheduleTokenRefresh() {
-    this.cancelTokenRefresh();
+  async handleOAuthCode(t) {
+    try {
+      const e = await h().getOAuthParams(t);
+      await h().cleanupOAuthParams();
+      const i = await c();
+      if (!e)
+        return;
+      const { providerType: a, code: o, flowId: r, error: s, errorDescription: u } = e, n = a !== void 0 && Object.values(l).includes(a);
+      if (s || u) {
+        await this.setOAuthFlowState({
+          ...n ? { providerType: a } : {},
+          status: "error",
+          errorDescription: s ?? u,
+          code: o,
+          flowId: r,
+          error: s
+        });
+        return;
+      }
+      if (!o || !a || !r)
+        return;
+      if (!n) {
+        await this.setOAuthFlowState({
+          status: "error",
+          errorDescription: "Invalid OAuth provider type.",
+          code: o,
+          flowId: r
+        });
+        return;
+      }
+      if (!i || i !== r) {
+        await this.setOAuthFlowState({
+          providerType: a,
+          status: "error",
+          errorDescription: "OAuth flow could not be verified. Please try signing in again.",
+          code: o,
+          flowId: r
+        });
+        return;
+      }
+      await this.setOAuthFlowState({
+        providerType: a,
+        status: "pending",
+        code: o,
+        flowId: r
+      }), await w({
+        code: o,
+        providerType: a,
+        flowId: r
+      }), await this.setOAuthFlowState({
+        providerType: a,
+        status: "success",
+        code: o,
+        flowId: r
+      });
+    } catch (e) {
+      const i = e instanceof Error ? e.message : "Unknown error";
+      await h().cleanupOAuthParams(), await this.setOAuthFlowState({
+        status: "error",
+        errorDescription: i
+      });
+    }
   }
 }
 export {
-  n as CUSTOM_AUTH_REFRESH_BUFFER_MS,
-  l as CustomAuthManager
+  k as OAuthManager
 };

package/dist/esm/index.web124.js

@@ -1,26 +1,139 @@
-import { createEndUserBtcAccount as w } from "@coinbase/cdp-api-client";
-import { toAuthState as f } from "./index.web102.js";
-import { getCoreAuthManager as c, getConfig as p } from "./index.web74.js";
-const A = async (o, n, s, a) => {
-  let e = o;
-  const i = new Set(o.user.btcAccountObjects?.map((t) => t.network) ?? []), d = a.filter((t) => !i.has(t));
-  for (const t of d)
-    try {
-      const r = await c().getWalletSecretId(), u = await w(
-        e.user.userId,
-        {
-          walletSecretId: r,
-          addressType: "segwit",
-          network: t
-        },
-        { projectID: p().projectId }
-      );
-      e = f(n, s, u), await c().setAuthState(e);
-    } catch (r) {
-      throw new Error(`Failed to create Bitcoin account for ${t}: ${r}`);
-    }
-  return e;
-};
+import "@coinbase/cdp-api-client";
+import "viem";
+import { mockUser as e } from "./index.web112.js";
+class n {
+  authState = null;
+  authStateChangeCallback = null;
+  /**
+   * Initializes the mock auth manager.
+   *
+   * @param _projectId - The project ID (unused in mock implementation).
+   */
+  constructor(t) {
+  }
+  /**
+   * Awaitable method whose promise only resolves when the auth manager is ready to be used.
+   *
+   * @returns A promise that resolves when the auth manager is ready to be used.
+   */
+  async ensureInitialized() {
+    return Promise.resolve();
+  }
+  /**
+   * Gets the current user, or null if there is no user signed in.
+   *
+   * @returns The current mock user if signed in, null otherwise.
+   */
+  getUser() {
+    return this.authState?.user ?? null;
+  }
+  /**
+   * Returns whether the user is signed in - i.e., whether there is an unexpired
+   * access token and user.
+   *
+   * @returns True if the mock user is signed in and token is not expired, false otherwise.
+   */
+  async isSignedIn() {
+    return this.authState ? Promise.resolve(this.authState.expiresAt > Date.now()) : Promise.resolve(!1);
+  }
+  /**
+   * Signs out the user, clearing all authentication state.
+   * In the mock implementation, this simply clears the local auth state.
+   */
+  async signOut() {
+    await this.clearAuthState();
+  }
+  /**
+   * Sets a callback to be called when the auth state changes.
+   * The callback is immediately called with the current auth state.
+   *
+   * @param callback - The function to call when the auth state changes.
+   *                  Will be called with the current user or null.
+   */
+  addAuthStateChangeCallback(t) {
+    this.authStateChangeCallback = t, t(this.authState?.user ?? null);
+  }
+  /**
+   * Gets the access token. For mock, this always returns a valid token if signed in.
+   * If the current token is expired, it will be refreshed automatically.
+   *
+   * @param options - The options for getting the token.
+   * @param options.forceRefresh - Whether to force a refresh of the token.
+   * @returns The mock access token if signed in, null otherwise.
+   */
+  async getToken(t) {
+    return this.authState ? ((t?.forceRefresh || this.authState.expiresAt <= Date.now()) && await this.refreshToken(), this.authState?.accessToken ?? null) : null;
+  }
+  /**
+   * Gets the expiration time of the access token, or null if the user is not signed in.
+   *
+   * @returns The expiration time of the access token.
+   */
+  async getTokenExpiration() {
+    return this.authState?.expiresAt ?? null;
+  }
+  /**
+   * Gets the currentlly registered wallet secret ID.
+   *
+   * @returns The wallet secret ID.
+   */
+  async getWalletSecretId() {
+    return "mock-wallet-secret-id";
+  }
+  /**
+   * Gets the X-Wallet-Auth header value.
+   *
+   * @param _options - The options for the request.
+   * @param _options.requestMethod - The HTTP method of the request.
+   * @param _options.requestHost - The host of the request.
+   * @param _options.requestPath - The path of the request.
+   * @param _options.requestData - The data of the request.
+   * @returns The X-Wallet-Auth header value.
+   */
+  async getXWalletAuth(t) {
+    if (!this.authState)
+      throw new Error("User not signed in");
+    return "x-wallet-auth";
+  }
+  /**
+   * Gets the authentication state.
+   *
+   * @returns The authentication state.
+   */
+  getAuthState() {
+    return this.authState;
+  }
+  /**
+   * Sets the authentication state.
+   * This will trigger the auth state change callback if one is registered.
+   *
+   * @param authState - The new authentication state to set.
+   */
+  async setAuthState(t) {
+    this.authState = t, this.authStateChangeCallback && this.authStateChangeCallback(this.authState?.user ?? null);
+  }
+  /**
+   * Clears the authentication state.
+   * This will trigger the auth state change callback if one is registered.
+   */
+  async clearAuthState() {
+    this.authState = null, this.authStateChangeCallback && this.authStateChangeCallback(null);
+  }
+  /**
+   * Refreshes the mock token.
+   * Only refreshes if there is an existing auth state (user is signed in).
+   * Sets a new mock token with a 24-hour expiration.
+   *
+   * @private
+   */
+  async refreshToken() {
+    this.authState && await this.setAuthState({
+      accessToken: "mock-access-token",
+      expiresAt: Date.now() + 1e3 * 60 * 60 * 24,
+      user: e
+    });
+  }
+}
 export {
-  A as createBtcAccountIfNeeded
+  n as MockAuthManager
 };

package/dist/esm/index.web125.js

@@ -1,53 +1,71 @@
-import { createEndUserEvmAccount as w, createEndUserEvmSmartAccount as A } from "@coinbase/cdp-api-client";
-import { toAuthState as f } from "./index.web102.js";
-import { getCoreAuthManager as s, getConfig as o } from "./index.web74.js";
-const I = async (r, n, a, u) => {
-  let e = r;
-  if (!r.user.evmAccountObjects || r.user.evmAccountObjects.length === 0)
-    try {
-      const t = await s().getWalletSecretId();
-      let c = await w(
-        r.user.userId,
-        {
-          walletSecretId: t
-        },
-        { projectID: o().projectId }
-      ), m = !1;
-      const d = o().ethereum;
-      if (d?.createOnLogin === "smart" && (m = d.enableSpendPermissions ?? !1), u === "smart") {
-        const i = c.evmAccountObjects?.[0]?.address;
-        if (!i)
-          throw new Error("No EVM account found to use as owner for smart account");
-        c = await A(
-          r.user.userId,
-          {
-            owner: i,
-            enableSpendPermissions: m
-          },
-          { projectID: o().projectId }
-        );
-      }
-      e = f(n, a, c), await s().setAuthState(e);
-    } catch (t) {
-      throw new Error(`Failed to create EVM account: ${t}`);
-    }
-  if (u === "smart" && (!e.user.evmSmartAccountObjects || e.user.evmSmartAccountObjects.length === 0))
-    try {
-      const t = e.user.evmAccountObjects[0]?.address, c = await A(
-        e.user.userId,
-        {
-          owner: t,
-          enableSpendPermissions: !1
-          // Defaulting to false until the feature is ready.
-        },
-        { projectID: o().projectId }
-      );
-      e = f(n, a, c), await s().setAuthState(e);
-    } catch (t) {
-      throw new Error(`Failed to create EVM Smart Account: ${t}`);
-    }
-  return e;
-};
+import "@coinbase/cdp-api-client";
+import "viem";
+import "./index.web2.js";
+import "./index.web3.js";
+import "jose";
+import { getPlatformOAuth as a } from "./index.web5.js";
+import "./index.web103.js";
+import { verifyOAuth as e } from "./index.web17.js";
+import "./index.web97.js";
+import "./index.web104.js";
+import "@solana/web3.js";
+import "bs58";
+class g {
+  oauthFlowState = null;
+  oauthStateChangeCallbacks = [];
+  /**
+   * Initializes the mock OAuth manager.
+   */
+  constructor() {
+    this.handleOAuthCode();
+  }
+  /**
+   * Gets the current user, or null if there is no user signed in.
+   *
+   * @returns The current mock user if signed in, null otherwise.
+   */
+  async getOAuthFlowState() {
+    return this.oauthFlowState ?? null;
+  }
+  /**
+   * Sets the OAuth flow state.
+   *
+   * @param oauthFlowState - The OAuth flow state to set.
+   */
+  async setOAuthFlowState(t) {
+    this.oauthFlowState = t, this.oauthStateChangeCallbacks.forEach((o) => o(this.oauthFlowState));
+  }
+  /**
+   * Adds a callback to be called when the OAuth state changes.
+   *
+   * @param callback - The function to call when the OAuth state changes.
+   */
+  async addOAuthStateChangeCallback(t) {
+    this.oauthStateChangeCallbacks.push(t), t(this.oauthFlowState);
+  }
+  /**
+   * Clears the OAuth flow state.
+   */
+  async clearOAuthFlowState() {
+    this.oauthFlowState = null, this.oauthStateChangeCallbacks.forEach((t) => t(null));
+  }
+  /**
+   * Awaitable method whose promise only resolves when the OAuth manager is ready to be used.
+   */
+  async handleOAuthCode() {
+    await a()?.cleanupOAuthParams(), await this.setOAuthFlowState({
+      providerType: "google",
+      status: "pending",
+      code: "mock-oauth-code",
+      flowId: "mock-flow-id"
+    }), await e({ code: "mock-oauth-code", providerType: "google", flowId: "mock-flow-id" }), await this.setOAuthFlowState({
+      providerType: "google",
+      status: "success",
+      code: "mock-oauth-code",
+      flowId: "mock-flow-id"
+    });
+  }
+}
 export {
-  I as createEvmAccountIfNeeded
+  g as MockOAuthManager
 };

package/dist/esm/index.web126.js

@@ -1,23 +1,29 @@
-import { createEndUserSolanaAccount as s } from "@coinbase/cdp-api-client";
-import { toAuthState as l } from "./index.web102.js";
-import { getCoreAuthManager as o, getConfig as u } from "./index.web74.js";
-const p = async (e, a, c) => {
-  let t = e;
-  if (!e.user.solanaAccountObjects || e.user.solanaAccountObjects.length === 0)
-    try {
-      const r = await o().getWalletSecretId(), n = await s(
-        e.user.userId,
-        {
-          walletSecretId: r
-        },
-        { projectID: u().projectId }
-      );
-      t = l(a, c, n), await o().setAuthState(t);
-    } catch (r) {
-      throw new Error(`Failed to create Solana account: ${r}`);
-    }
-  return t;
+import { initiateAuthentication as n } from "@coinbase/cdp-api-client";
+import { getConfig as t, getCoreAuthManager as o } from "./index.web74.js";
+const f = async (e, r) => {
+  if (t().useMock)
+    return "redirectUrl" in e ? {
+      authUrl: "mock-auth-url",
+      flowId: "mock-flow-id"
+    } : {
+      message: "Mock sign in initiated",
+      flowId: "mock-flow-id"
+    };
+  if (await o().isSignedIn())
+    throw new Error("User is already authenticated. Please sign out first.");
+  const i = await n(
+    t().projectId,
+    e,
+    r
+  );
+  return "authUrl" in i ? {
+    flowId: i.flowId,
+    authUrl: i.authUrl
+  } : {
+    flowId: i.flowId,
+    message: "message" in i ? i.message : ""
+  };
 };
 export {
-  p as createSolanaAccountIfNeeded
+  f as initiateSignIn
 };