@coinbase/cdp-core 0.0.123 → 0.0.124

package/dist/web-types/auth/authManager.d.ts

@@ -1,5 +1,16 @@
 import { AuthState, IAuthManager, WalletSecret } from './types.js';
 import { OnAuthStateChangeFn, User } from '../types.js';
+/**
+ * Initialization and platform-specific behavior for standard authentication refreshes.
+ */
+export type AuthManagerOptions = {
+    /** Whether to defer the initial session refresh until ensureInitialized is called. */
+    deferInitialization?: boolean;
+    /** Whether automatic non-transient refresh failures should revoke the remote session. */
+    remoteSignOutOnRefreshFailure?: boolean;
+    /** Whether browser Web Locks should serialize refreshes across contexts. */
+    useBrowserRefreshLock?: boolean;
+};
 /**
  * Manages the authentication state and access token for standard CDP authentication
  * (email/SMS/OAuth flows).
@@ -11,17 +22,20 @@ export declare class AuthManager implements IAuthManager {
     protected authStateChangeCallbacks: OnAuthStateChangeFn[];
     protected initPromise: Promise<void> | null;
     protected refreshTimeout: ReturnType<typeof setTimeout> | null;
+    private refreshAccessTokenPromise;
     private refreshWalletSecretPromise;
+    private remoteSignOutOnRefreshFailure;
+    private useBrowserRefreshLock;
     /**
      * Initializes the token manager.
      *
      * @param projectId - The project ID.
-     * @param options - Options that control initial session refresh behavior.
+     * @param options - Initialization and platform-specific refresh behavior.
      * @param options.deferInitialization - Whether to defer the initial session refresh until ensureInitialized is called.
+     * @param options.remoteSignOutOnRefreshFailure - Whether failed refreshes should revoke the remote session.
+     * @param options.useBrowserRefreshLock - Whether browser refreshes should be serialized across contexts.
      */
-    constructor(projectId: string, options?: {
-        deferInitialization?: boolean;
-    });
+    constructor(projectId: string, options?: AuthManagerOptions);
     /**
      * Gets the current user, or null if there is no user signed in.
      *
@@ -117,15 +131,17 @@ export declare class AuthManager implements IAuthManager {
     protected shouldRefreshToken(): boolean;
     /**
      * Refreshes the access token and transitions the auth state accordingly.
-     * If a refresh is already in progress, it will wait for that refresh to complete.
-     * Retries with exponential backoff on transient failures only. Unauthorized error
-     * short-circuit immediately since retrying won't help.
+     * Concurrent refresh callers in one SDK instance share the same request.
      *
      * @param trigger - The trigger for the refresh.
-     *
-     * @returns The new access token.
      */
     protected refreshAccessToken(trigger?: string): Promise<void>;
+    /**
+     * Performs one serialized refresh cycle.
+     *
+     * @param trigger - The trigger for the refresh.
+     */
+    protected performRefreshAccessToken(trigger: string): Promise<void>;
     /**
      * Schedules a token refresh to occur exactly when shouldRefreshToken() would return true.
      * Uses the same REFRESH_CREDENTIALS_BUFFER_MS timing as the rest of the auth system.

package/dist/web-types/auth/createAuthManager.d.ts

@@ -1,3 +1,4 @@
+import { AuthManagerOptions } from './authManager.js';
 import { IAuthManager } from './types.js';
 /**
  * Creates the appropriate AuthManager instance based on the configuration.
@@ -6,10 +7,10 @@ import { IAuthManager } from './types.js';
  * - Otherwise, returns an AuthManager for standard CDP authentication
  *
  * @param projectId - The project ID.
- * @param options - Options that control initial session refresh behavior.
+ * @param options - Initialization and platform-specific standard-auth refresh behavior.
  * @param options.deferInitialization - Whether to defer the initial session refresh until ensureInitialized is called.
+ * @param options.remoteSignOutOnRefreshFailure - Whether failed refreshes should revoke the remote session.
+ * @param options.useBrowserRefreshLock - Whether browser refreshes should be serialized across contexts.
  * @returns The appropriate AuthManager instance.
  */
-export declare function createAuthManager(projectId: string, options?: {
-    deferInitialization?: boolean;
-}): IAuthManager;
+export declare function createAuthManager(projectId: string, options?: AuthManagerOptions): IAuthManager;

package/dist/web-types/core.d.ts

@@ -10,6 +10,7 @@ export { verifySiweSignature, type VerifySiweSignatureOptions, type VerifySiweSi
 export { verifyTelegramOAuth } from './actions/verifyTelegramOAuth.js';
 export { authenticateWithJWT } from './actions/authenticateWithJWT.js';
 export { getCurrentUser, type GetCurrentUserOptions } from './actions/getCurrentUser.js';
+export { refreshUser } from './actions/refreshUser.js';
 export { isSignedIn } from './actions/isSignedIn.js';
 export { signOut } from './actions/signOut.js';
 export { getAccessToken } from './actions/getAccessToken.js';

package/dist/web-types/index.d.ts

@@ -36,6 +36,14 @@ export { sendUsdc, type SendUsdcOptions, type SendUsdcResult, type SendUsdcNetwo
 export { getSwapPrice, type GetSwapPriceOptions, type GetSwapPriceResult, type SwapUnavailableResult, type SwapIssues, } from './actions/getSwapPrice.js';
 export { executeSwap, type ExecuteSwapOptions, type ExecuteSwapResult, type ExecuteEvmEoaSwapResult, type ExecuteEvmSmartSwapResult, } from './actions/executeSwap.js';
 export { EvmSwapsNetwork } from '@coinbase/cdp-api-client';
+export { listEvmBorrowProducts, type ListEvmBorrowProductsOptions, type ListEvmBorrowProductsResult, } from './actions/listEvmBorrowProducts.js';
+export { getEvmBorrowProduct, type GetEvmBorrowProductOptions, type GetEvmBorrowProductResult, } from './actions/getEvmBorrowProduct.js';
+export { createBorrowPosition, type CreateBorrowPositionOptions, type CreateBorrowPositionResult, } from './actions/createBorrowPosition.js';
+export { adjustBorrowPosition, type AdjustBorrowPositionOptions, type AdjustBorrowPositionResult, } from './actions/adjustBorrowPosition.js';
+export { closeBorrowPosition, type CloseBorrowPositionOptions, type CloseBorrowPositionResult, } from './actions/closeBorrowPosition.js';
+export { listBorrowPositions, type ListBorrowPositionsOptions, type ListBorrowPositionsResult, } from './actions/listBorrowPositions.js';
+export { type BorrowPosition, type BorrowPositionAssetAmount, type BorrowPositionDebt, type BorrowPositionHealthStatus, type BorrowPositionOnchainState, type MorphoBlueOnchainState, } from '@coinbase/cdp-api-client';
+export { BorrowProductNetwork, BorrowProductProtocol, type BorrowProduct, type BorrowProductVenue, type BorrowProductToken, type BorrowProductAsset, type BorrowProductAssetCapability, type BorrowProductAssetCapabilityType, type BorrowProductSnapshot, type BorrowProductProtocolDetails, type MorphoBlueProtocolDetails, type MorphoBlueMarketParams, type MorphoBlueProtocolDetailsType, } from '@coinbase/cdp-api-client';
 export { getMfaConfig, type GetMfaConfigResult } from './actions/getMfaConfig.js';
 export { getProjectConfig, type GetProjectConfigResult } from './actions/getProjectConfig.js';
 export { getMfaConfigState, getProjectConfigState } from './state.js';
@@ -61,4 +69,6 @@ export * from './eip1193/types.js';
 export * from './secureIframe/index.js';
 export { createEvmKeyExportIframe, createSolanaKeyExportIframe, type CreateKeyExportIframeOptions, type CreateKeyExportIframeResult, type SecureIframeStatusDetails, } from './actions/createKeyExportIframe.js';
 export { getConfig } from './state.js';
+export { configurePlatformServices } from './platform/registry.js';
+export { type PlatformStorage, type PlatformStorageOverride, type PlatformServicesOverride, type StorageReadResult, } from './platform/types.js';
 export { toTransactionSigner } from './solana-kit/toTransactionSigner.js';

package/dist/web-types/index.native.d.ts

@@ -40,6 +40,14 @@ export { sendUsdc, type SendUsdcOptions, type SendUsdcResult, type SendUsdcNetwo
 export { getSwapPrice, type GetSwapPriceOptions, type GetSwapPriceResult, type SwapUnavailableResult, type SwapIssues, } from './actions/getSwapPrice.js';
 export { executeSwap, type ExecuteSwapOptions, type ExecuteSwapResult, type ExecuteEvmEoaSwapResult, type ExecuteEvmSmartSwapResult, } from './actions/executeSwap.js';
 export { EvmSwapsNetwork } from '@coinbase/cdp-api-client';
+export { listEvmBorrowProducts, type ListEvmBorrowProductsOptions, type ListEvmBorrowProductsResult, } from './actions/listEvmBorrowProducts.js';
+export { getEvmBorrowProduct, type GetEvmBorrowProductOptions, type GetEvmBorrowProductResult, } from './actions/getEvmBorrowProduct.js';
+export { createBorrowPosition, type CreateBorrowPositionOptions, type CreateBorrowPositionResult, } from './actions/createBorrowPosition.js';
+export { adjustBorrowPosition, type AdjustBorrowPositionOptions, type AdjustBorrowPositionResult, } from './actions/adjustBorrowPosition.js';
+export { closeBorrowPosition, type CloseBorrowPositionOptions, type CloseBorrowPositionResult, } from './actions/closeBorrowPosition.js';
+export { listBorrowPositions, type ListBorrowPositionsOptions, type ListBorrowPositionsResult, } from './actions/listBorrowPositions.js';
+export { type BorrowPosition, type BorrowPositionAssetAmount, type BorrowPositionDebt, type BorrowPositionHealthStatus, type BorrowPositionOnchainState, type MorphoBlueOnchainState, } from '@coinbase/cdp-api-client';
+export { BorrowProductNetwork, BorrowProductProtocol, type BorrowProduct, type BorrowProductVenue, type BorrowProductToken, type BorrowProductAsset, type BorrowProductAssetCapability, type BorrowProductAssetCapabilityType, type BorrowProductSnapshot, type BorrowProductProtocolDetails, type MorphoBlueProtocolDetails, type MorphoBlueMarketParams, type MorphoBlueProtocolDetailsType, } from '@coinbase/cdp-api-client';
 export { getMfaConfig, type GetMfaConfigResult } from './actions/getMfaConfig.js';
 export { getProjectConfig, type GetProjectConfigResult } from './actions/getProjectConfig.js';
 export { getMfaConfigState, getProjectConfigState } from './state.js';
@@ -66,4 +74,5 @@ export { toTransactionSigner } from './solana-kit/toTransactionSigner.js';
 export { registerAttestationModule, type NativeAttestationModule, } from './platform/native/attestationRegistry.js';
 export { registerAppleAuthProvider, type AppleAuthProvider, } from './platform/native/appleAuthRegistry.js';
 export { registerDeviceInfoModule, type NativeDeviceInfoModule, } from './platform/native/deviceInfoRegistry.js';
-export { type AppleNativeCredential } from './platform/types.js';
+export { configurePlatformServices } from './platform/registry.js';
+export { type AppleNativeCredential, type PlatformStorage, type PlatformStorageOverride, type PlatformServicesOverride, type StorageReadResult, } from './platform/types.js';

package/dist/web-types/index.web.d.ts

@@ -40,6 +40,14 @@ export { sendUsdc, type SendUsdcOptions, type SendUsdcResult, type SendUsdcNetwo
 export { getSwapPrice, type GetSwapPriceOptions, type GetSwapPriceResult, type SwapUnavailableResult, type SwapIssues, } from './actions/getSwapPrice.js';
 export { executeSwap, type ExecuteSwapOptions, type ExecuteSwapResult, type ExecuteEvmEoaSwapResult, type ExecuteEvmSmartSwapResult, } from './actions/executeSwap.js';
 export { EvmSwapsNetwork } from '@coinbase/cdp-api-client';
+export { listEvmBorrowProducts, type ListEvmBorrowProductsOptions, type ListEvmBorrowProductsResult, } from './actions/listEvmBorrowProducts.js';
+export { getEvmBorrowProduct, type GetEvmBorrowProductOptions, type GetEvmBorrowProductResult, } from './actions/getEvmBorrowProduct.js';
+export { createBorrowPosition, type CreateBorrowPositionOptions, type CreateBorrowPositionResult, } from './actions/createBorrowPosition.js';
+export { adjustBorrowPosition, type AdjustBorrowPositionOptions, type AdjustBorrowPositionResult, } from './actions/adjustBorrowPosition.js';
+export { closeBorrowPosition, type CloseBorrowPositionOptions, type CloseBorrowPositionResult, } from './actions/closeBorrowPosition.js';
+export { listBorrowPositions, type ListBorrowPositionsOptions, type ListBorrowPositionsResult, } from './actions/listBorrowPositions.js';
+export { type BorrowPosition, type BorrowPositionAssetAmount, type BorrowPositionDebt, type BorrowPositionHealthStatus, type BorrowPositionOnchainState, type MorphoBlueOnchainState, } from '@coinbase/cdp-api-client';
+export { BorrowProductNetwork, BorrowProductProtocol, type BorrowProduct, type BorrowProductVenue, type BorrowProductToken, type BorrowProductAsset, type BorrowProductAssetCapability, type BorrowProductAssetCapabilityType, type BorrowProductSnapshot, type BorrowProductProtocolDetails, type MorphoBlueProtocolDetails, type MorphoBlueMarketParams, type MorphoBlueProtocolDetailsType, } from '@coinbase/cdp-api-client';
 export { getMfaConfig, type GetMfaConfigResult } from './actions/getMfaConfig.js';
 export { getProjectConfig, type GetProjectConfigResult } from './actions/getProjectConfig.js';
 export { getMfaConfigState, getProjectConfigState } from './state.js';
@@ -69,5 +77,7 @@ export * from './eip1193/types.js';
 export * from './secureIframe/index.js';
 export { createEvmKeyExportIframe, createSolanaKeyExportIframe, type CreateKeyExportIframeOptions, type CreateKeyExportIframeResult, type SecureIframeStatusDetails, } from './actions/createKeyExportIframe.js';
 export { getConfig } from './state.js';
+export { configurePlatformServices } from './platform/registry.js';
+export { type PlatformStorage, type PlatformStorageOverride, type PlatformServicesOverride, type StorageReadResult, } from './platform/types.js';
 export { toTransactionSigner } from './solana-kit/toTransactionSigner.js';
 export { isPasskeySupported } from './shared/webauthn.js';

package/dist/web-types/mocks/borrowProduct.d.ts

@@ -0,0 +1,25 @@
+import { BorrowProduct } from '@coinbase/cdp-api-client';
+/** A stable borrow product ID used across the borrow-product action tests. */
+export declare const mockBorrowProductId = "bp_07fb56c0-9afe-5440-8ff2-5b0e115458df";
+/**
+ * A representative Morpho Blue borrow product (cbBTC / USDC on Base) for use in
+ * core action tests. Mirrors the shape returned by the api-client.
+ */
+export declare const mockBorrowProduct: BorrowProduct;
+/**
+ * Builds a borrow product for tests, applying overrides on top of
+ * {@link mockBorrowProduct}. Useful when a test needs a second, distinct
+ * product (e.g. to assert a key change clears stale data).
+ *
+ * @param overrides - The fields to override on the base mock product.
+ * @returns A borrow product with the overrides applied.
+ *
+ * @example
+ * ```typescript
+ * const other = createBorrowProduct({
+ *   borrowProductId: "bp_other",
+ *   name: "WETH / USDC",
+ * });
+ * ```
+ */
+export declare function createBorrowProduct(overrides?: Partial<BorrowProduct>): BorrowProduct;

package/dist/web-types/platform/native/loadOptionalModule.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Converts a module-resolution error from an optional native import into an
+ * installation error naming the package and its `configurePlatformServices`
+ * override. Returns non-resolution errors unchanged.
+ *
+ * Call this from a `catch` wrapping a literal dynamic `import()`. Metro's
+ * optional-dependency detection only recognizes an `import()` that appears
+ * directly inside the `try`, so the import cannot be hidden behind a helper.
+ *
+ * @param error - The error caught from the dynamic import.
+ * @param packageName - The optional package name.
+ * @param overrideHint - The platform service that can replace the optional package.
+ * @returns An installation error for module-resolution failures, or the original error.
+ */
+export declare const toOptionalNativeModuleError: (error: unknown, packageName: string, overrideHint: string) => unknown;

package/dist/web-types/platform/native/storage.d.ts

@@ -4,6 +4,7 @@ import { PlatformStorage } from '../types.js';
  * Uses AsyncStorage for persistent storage.
  *
  * Note: This implementation requires @react-native-async-storage/async-storage
- * to be installed as a peer dependency.
+ * to be installed as a peer dependency. Apps that use a different store supply
+ * their own implementation with `configurePlatformServices({ storage })` instead.
  */
 export declare const nativeStorage: PlatformStorage;

package/dist/web-types/platform/registry.d.ts

@@ -1,4 +1,4 @@
-import { PlatformServices, PlatformCrypto, PlatformStorage, PlatformOAuth, PlatformAttestation } from './types.js';
+import { PlatformAttestation, PlatformCrypto, PlatformOAuth, PlatformServices, PlatformServicesOverride, PlatformStorage } from './types.js';
 /**
  * Registers platform-specific services with the dependency injection container.
  * This should be called once during application initialization, typically by
@@ -17,6 +17,26 @@ import { PlatformServices, PlatformCrypto, PlatformStorage, PlatformOAuth, Platf
  * ```
  */
 export declare function setPlatformServices(services: PlatformServices): void;
+/**
+ * Replaces individual platform services while leaving the rest of the platform
+ * defaults in place.
+ *
+ * Call this once during application startup, after importing `@coinbase/cdp-core`
+ * and before `initialize`. React Native apps use it to supply a storage
+ * implementation when they do not install `@react-native-async-storage/async-storage`.
+ *
+ * Services omitted from `overrides`, or set to `undefined`, keep their current
+ * implementation. Calling this more than once applies each override on top of the
+ * previous state.
+ *
+ * @param overrides - The platform services to replace.
+ * @throws Error if platform services have not been initialized.
+ * @example
+ * ```typescript
+ * configurePlatformServices({ storage: mmkvStorage });
+ * ```
+ */
+export declare function configurePlatformServices(overrides: PlatformServicesOverride): void;
 /**
  * Retrieves the registered platform services.
  * Throws an error if services have not been initialized.

package/dist/web-types/platform/types.d.ts

@@ -130,6 +130,38 @@ export interface PlatformSecureStorage {
      */
     clear(): Promise<void>;
 }
+/**
+ * A storage implementation supplied by an application in place of a platform default.
+ *
+ * Identical to {@link PlatformStorage} except that `getItemWithOutcome` is optional.
+ * When it is omitted, the SDK derives read outcomes from `getItem`, so an adapter
+ * does not have to classify them itself. Read error messages are reported in SDK
+ * telemetry after truncation to 256 characters, whether they come from a thrown
+ * error or a resolved `error` outcome, so adapters must not include stored values
+ * or key material in error text. The built-in web and native adapters pass their
+ * own bounded module-resolution and storage errors through without truncation,
+ * because those messages are SDK-controlled and already bounded.
+ */
+export type PlatformStorageOverride = Omit<PlatformStorage, "getItemWithOutcome"> & Partial<Pick<PlatformStorage, "getItemWithOutcome">>;
+/**
+ * The platform services an application may replace after the SDK has registered
+ * its platform defaults.
+ *
+ * Only the services named here are replaced. Every service left out keeps the
+ * default the SDK registered for the current platform.
+ */
+export interface PlatformServicesOverride {
+    /**
+     * Storage used for the pending OAuth flow ID, the embedded wallet store, and the
+     * refresh-token mirror on platforms without secure storage.
+     */
+    storage?: PlatformStorageOverride;
+    /**
+     * Secure storage used for the refresh token on native platforms. Supplying this
+     * on web makes `initialize` use native refresh-token failure handling.
+     */
+    secureStorage?: PlatformStorageOverride;
+}
 /**
  * Result of reading a value from storage.
  */

package/dist/web-types/version.d.ts

@@ -2,4 +2,4 @@
  * Current version of @coinbase/cdp-core package.
  * This file is auto-generated by scripts/sync-versions.js
  */
-export declare const VERSION = "0.0.123";
+export declare const VERSION = "0.0.124";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@coinbase/cdp-core",
-  "version": "0.0.123",
+  "version": "0.0.124",
   "type": "module",
   "files": [
     "dist/**",
@@ -29,7 +29,7 @@
     "ox": "0.8.1",
     "viem": "^2.47.0",
     "zustand": "^5.0.6",
-    "@coinbase/cdp-api-client": "^0.0.123"
+    "@coinbase/cdp-api-client": "^0.0.124"
   },
   "peerDependencies": {
     "@react-native-async-storage/async-storage": "^2.0.0",
@@ -63,7 +63,7 @@
       "path": "./dist/esm/index.web.js",
       "running": false,
       "import": "*",
-      "limit": "131 KB"
+      "limit": "132 KB"
     },
     {
       "name": "auth-only",