@coinbase/cdp-core 0.0.123 → 0.0.125

package/dist/web/index.web96.js

@@ -1,70 +1,377 @@
-import { InputValidationError as c } from "./index.web92.js";
-import { DEFAULT_SECURE_IFRAME_BASE_PATH as l, DEFAULT_SECURE_IFRAME_THEME as o, SECURE_IFRAME_KEY_EXPORT_EVENT_TYPE as f, SECURE_IFRAME_EVENT_TYPE_PREFIX as u } from "./index.web97.js";
-function m() {
-  if (!document)
-    throw new Error("Document not found. This function must be called in a browser environment.");
-}
-function b(e) {
-  const t = e.basePath || l, n = ["fullWidth"];
-  return e.projectId && n.push(`projectId=${e.projectId.trim()}`), e.label && n.push(`label=${encodeURIComponent(e.label.trim())}`), e.copiedLabel && n.push(`copiedLabel=${encodeURIComponent(e.copiedLabel.trim())}`), e.icon !== !1 && n.push("icon"), e.ejectIcon !== void 0 && n.push(`ejectIcon=${e.ejectIcon}`), e.ejectLabel && n.push(`ejectLabel=${encodeURIComponent(e.ejectLabel.trim())}`), e.ejectingLabel && n.push(`ejectingLabel=${encodeURIComponent(e.ejectingLabel.trim())}`), e.ejectedLabel && n.push(`ejectedLabel=${encodeURIComponent(e.ejectedLabel.trim())}`), `${t}?${n.join("&")}`;
+import { logOutEndUser as f, refreshAccessToken as d, isRefreshTokenUnavailableError as m, isTransientTokenReadError as S, registerTemporaryWalletSecret as w, APIError as k } from "@coinbase/cdp-api-client";
+import { Analytics as i } from "./index.web2.js";
+import "./index.web3.js";
+import "jose";
+import { SignJWT as y } from "jose/jwt/sign";
+import { toAuthState as R } from "./index.web115.js";
+import "viem";
+import { getPlatformCrypto as c } from "./index.web5.js";
+import { sortKeys as T } from "./index.web110.js";
+import { getCoreOAuthManager as _ } from "./index.web81.js";
+const l = 60 * 1e3, p = {
+  maxRetries: 3,
+  baseDelayMs: 1e3,
+  maxDelayMs: 1e4
+};
+function g(s, e, t) {
+  const n = e * Math.pow(2, s), o = Math.random() * 0.3 * n;
+  return Math.min(n + o, t);
 }
-function h(e, t) {
-  if (!e?.contentWindow || !e?.src) return;
-  const n = E(e.src);
-  n && e.contentWindow.postMessage(t, n);
+function A(s) {
+  return new Promise((e) => setTimeout(e, s));
 }
-function E(e) {
-  try {
-    return new URL(e).origin;
-  } catch (t) {
-    return console.error("Error parsing iframe origin", t), "";
+const I = async (s, e) => {
+  const t = typeof navigator > "u" ? void 0 : navigator.locks;
+  if (!t) {
+    await e();
+    return;
+  }
+  await t.request(`cdp-refresh:${s}`, { mode: "exclusive" }, e);
+};
+function E(s) {
+  if (s instanceof TypeError && s.message.includes("fetch"))
+    return !0;
+  if (s instanceof k) {
+    if (s.statusCode >= 500 && s.statusCode < 600 || s.statusCode === 408 || s.statusCode === 429)
+      return !0;
+    if (s.statusCode === 401)
+      return !1;
   }
+  if (s instanceof Error) {
+    const e = s.message.toLowerCase();
+    if (e.includes("network") || e.includes("timeout") || e.includes("econnrefused") || e.includes("enotfound") || e.includes("socket"))
+      return !0;
+  }
+  return !1;
 }
-function p(e) {
-  if (e instanceof HTMLIFrameElement)
-    throw new c(
-      "target cannot be an iframe element. Pass a container element or CSS selector instead."
-    );
-  m();
-  let t;
-  if (typeof e == "string") {
-    const r = document.querySelector(e);
-    if (!r)
-      throw new c(`No element found for selector "${e}".`);
-    if (r instanceof HTMLIFrameElement)
-      throw new c(
-        `Selector "${e}" resolved to an iframe element. Pass a container element or CSS selector instead.`
+class j {
+  projectId;
+  authState = null;
+  walletSecret = null;
+  authStateChangeCallbacks = [];
+  initPromise = null;
+  refreshTimeout = null;
+  refreshAccessTokenPromise = null;
+  refreshWalletSecretPromise = null;
+  remoteSignOutOnRefreshFailure;
+  useBrowserRefreshLock;
+  /**
+   * Initializes the token manager.
+   *
+   * @param projectId - The project ID.
+   * @param options - Initialization and platform-specific refresh behavior.
+   * @param options.deferInitialization - Whether to defer the initial session refresh until ensureInitialized is called.
+   * @param options.remoteSignOutOnRefreshFailure - Whether failed refreshes should revoke the remote session.
+   * @param options.useBrowserRefreshLock - Whether browser refreshes should be serialized across contexts.
+   */
+  constructor(e, t = {}) {
+    this.projectId = e, this.remoteSignOutOnRefreshFailure = t.remoteSignOutOnRefreshFailure ?? !1, this.useBrowserRefreshLock = t.useBrowserRefreshLock ?? !0, t.deferInitialization || (this.initPromise = this._doInitialize());
+  }
+  /**
+   * Gets the current user, or null if there is no user signed in.
+   *
+   * @returns The current user.
+   */
+  getUser() {
+    return this.authState?.user ?? null;
+  }
+  /**
+   * Returns whether the user is signed in - i.e., whether there is an unexpired
+   * access token and user. Attempts to refresh the token if it's expired.
+   *
+   * @returns True if the user is signed in, false otherwise.
+   */
+  async isSignedIn() {
+    if (!this.authState)
+      return !1;
+    if (this.authState.expiresAt > Date.now() + l)
+      return !0;
+    try {
+      return await this.getToken() !== null;
+    } catch {
+      return !1;
+    }
+  }
+  /**
+   * Signs out the user, clearing all authentication state.
+   */
+  async signOut() {
+    try {
+      await f(this.projectId);
+    } catch {
+    } finally {
+      await this.clearAuthState();
+    }
+  }
+  /**
+   * Adds a callback to be called when the auth state changes.
+   *
+   * @param callback - The function to call when the auth state changes.
+   */
+  addAuthStateChangeCallback(e) {
+    this.authStateChangeCallbacks.push(e), e(this.authState?.user ?? null);
+  }
+  /**
+   * Gets the access token, refreshing it if it is expired. Returns null if the user is not
+   * signed in.
+   *
+   * @param options - The options for getting the token.
+   * @param options.forceRefresh - Whether to force a refresh of the token.
+   * @returns The access token.
+   */
+  async getToken(e) {
+    return this.initPromise ? ((e?.forceRefresh || this.shouldRefreshToken()) && await this.refreshAccessToken(e?.forceRefresh ? "force" : "on_demand"), this.authState?.accessToken ?? null) : null;
+  }
+  /**
+   * Gets the expiration time of the access token, or null if the user is not signed in.
+   *
+   * @returns The expiration time of the access token.
+   */
+  async getTokenExpiration() {
+    return this.authState?.expiresAt ?? null;
+  }
+  /**
+   * Gets the currently registered wallet secret ID. Rejects if the user is not signed in.
+   *
+   * @returns The wallet secret ID.
+   */
+  async getWalletSecretId() {
+    if (!await this.isSignedIn())
+      throw new Error("Cannot get wallet secret ID if the user is not signed in");
+    return this.shouldRefreshWalletSecret() && await this.refreshWalletSecret(), this.walletSecret.walletSecretId;
+  }
+  /**
+   * Gets the X-Wallet-Auth header. Rejects if the user is not signed in.
+   *
+   * @param options - The options for the request.
+   * @param options.requestMethod - The HTTP method of the request.
+   * @param options.requestHost - The host of the request.
+   * @param options.requestPath - The path of the request.
+   * @param options.requestData - The data of the request.
+   * @returns The X-Wallet-Auth header.
+   */
+  async getXWalletAuth(e) {
+    if (!await this.isSignedIn())
+      throw new Error("Cannot get X-Wallet-Auth header if the user is not signed in");
+    this.shouldRefreshWalletSecret() && await this.refreshWalletSecret();
+    const t = `${e.requestMethod} ${e.requestHost}${e.requestPath}`, n = Math.floor(Date.now() / 1e3), o = c(), a = {
+      uris: [t]
+    };
+    if (e.requestData && Object.keys(e.requestData).length > 0) {
+      const r = T(e.requestData);
+      a.reqHash = await o.hash(new TextEncoder().encode(JSON.stringify(r)));
+    }
+    return await new y(a).setProtectedHeader({ alg: "ES256", typ: "JWT" }).setIssuedAt(n).setNotBefore(n).setJti(o.generateRandomId()).sign(this.walletSecret.keyPair.privateKey);
+  }
+  /**
+   * Gets the authentication state.
+   *
+   * @returns The authentication state.
+   */
+  getAuthState() {
+    return this.authState;
+  }
+  /**
+   * Sets the authentication state.
+   *
+   * @param authState - The authentication state.
+   */
+  async setAuthState(e) {
+    this.authState = e, i.endUserIdentifier = e.user.userId, this.authStateChangeCallbacks.forEach((t) => t(this.authState?.user ?? null)), this.scheduleTokenRefresh();
+  }
+  /**
+   * Clears the authentication state.
+   */
+  async clearAuthState() {
+    this.authState = null, this.walletSecret = null, i.endUserIdentifier = "", this.cancelTokenRefresh(), this.authStateChangeCallbacks.forEach((e) => e(null));
+  }
+  /**
+   * Ensures the AuthManager is initialized before proceeding.
+   * Starts deferred initialization when necessary, otherwise waits for initialization already in progress.
+   */
+  async ensureInitialized() {
+    this.initPromise ??= this._doInitialize(), await this.initPromise;
+  }
+  /**
+   * Internal async initialization logic.
+   */
+  async _doInitialize() {
+    try {
+      await this.refreshAccessToken("init"), await _().handleOAuthCode();
+    } catch (e) {
+      console.warn("Failed to refresh access token during initialization:", e);
+    }
+  }
+  /**
+   * Returns whether the token should be refreshed.
+   *
+   * @returns True if the token should be refreshed, false otherwise.
+   */
+  shouldRefreshToken() {
+    return !(this.authState && this.authState.expiresAt > Date.now() + l);
+  }
+  /**
+   * Refreshes the access token and transitions the auth state accordingly.
+   * Concurrent refresh callers in one SDK instance share the same request.
+   *
+   * @param trigger - The trigger for the refresh.
+   */
+  async refreshAccessToken(e = "on_demand") {
+    if (!this.refreshAccessTokenPromise) {
+      const t = () => this.performRefreshAccessToken(e);
+      this.refreshAccessTokenPromise = (this.useBrowserRefreshLock ? I(this.projectId, t) : t()).finally(() => {
+        this.refreshAccessTokenPromise = null;
+      });
+    }
+    await this.refreshAccessTokenPromise;
+  }
+  /**
+   * Performs one serialized refresh cycle.
+   *
+   * @param trigger - The trigger for the refresh.
+   */
+  async performRefreshAccessToken(e) {
+    const { maxRetries: t, baseDelayMs: n, maxDelayMs: o } = p;
+    i.sendSessionRefreshEvent({
+      name: "refresh_token_start",
+      trigger: e
+    });
+    for (let a = 0; a <= t; a++)
+      try {
+        const r = await d(this.projectId, {
+          grantType: "refresh_token"
+        }), h = R(
+          r.accessToken,
+          r.validUntil,
+          r.endUser
+        );
+        await this.setAuthState(h), i.sendSessionRefreshEvent({
+          name: "refresh_token_success",
+          trigger: e,
+          attempt: a
+        });
+        return;
+      } catch (r) {
+        const h = r instanceof Error ? r.message : String(r);
+        if (m(r)) {
+          if (S(r)) {
+            i.sendSessionRefreshEvent({
+              name: "refresh_token_skipped_transient",
+              trigger: e,
+              attempt: a,
+              read_outcome: r.outcome,
+              error_message: h
+            });
+            return;
+          }
+          i.sendSessionRefreshEvent({
+            name: "refresh_token_failure",
+            trigger: e,
+            attempt: a,
+            error_type: "non_transient",
+            read_outcome: r.outcome,
+            error_message: h
+          }), await (this.remoteSignOutOnRefreshFailure ? this.signOut() : this.clearAuthState());
+          return;
+        }
+        if (!E(r)) {
+          i.sendSessionRefreshEvent({
+            name: "refresh_token_failure",
+            trigger: e,
+            attempt: a,
+            error_type: "non_transient",
+            error_message: h
+          }), await (this.remoteSignOutOnRefreshFailure ? this.signOut() : this.clearAuthState());
+          return;
+        }
+        if (a === t) {
+          i.sendSessionRefreshEvent({
+            name: "refresh_token_exhausted",
+            trigger: e,
+            attempt: a,
+            error_type: "transient",
+            error_message: h
+          });
+          return;
+        }
+        i.sendSessionRefreshEvent({
+          name: "refresh_token_retry",
+          trigger: e,
+          attempt: a,
+          error_type: "transient",
+          error_message: h
+        });
+        const u = g(a, n, o);
+        await A(u);
+      }
+  }
+  /**
+   * Schedules a token refresh to occur exactly when shouldRefreshToken() would return true.
+   * Uses the same REFRESH_CREDENTIALS_BUFFER_MS timing as the rest of the auth system.
+   */
+  scheduleTokenRefresh() {
+    if (this.cancelTokenRefresh(), !this.authState)
+      return;
+    const t = this.authState.expiresAt - l - Date.now();
+    t <= 0 || (i.sendSessionRefreshEvent({
+      name: "refresh_token_scheduled",
+      time_until_refresh_ms: t
+    }), this.refreshTimeout = setTimeout(async () => {
+      await this.refreshAccessToken("scheduled"), this.scheduleTokenRefresh();
+    }, t));
+  }
+  /**
+   * Cancels any scheduled token refresh.
+   */
+  cancelTokenRefresh() {
+    this.refreshTimeout && (clearTimeout(this.refreshTimeout), this.refreshTimeout = null);
+  }
+  /**
+   * Returns whether the wallet secret should be refreshed.
+   *
+   * @returns True if the wallet secret should be refreshed, false otherwise.
+   */
+  shouldRefreshWalletSecret() {
+    return !(this.walletSecret && this.walletSecret.expiresAt > Date.now() + l);
+  }
+  /**
+   * Refreshes the wallet secret. Assumes the user is signed in.
+   * Concurrent callers share the same in-flight registration to avoid
+   * racing on `this.walletSecret` (e.g. React Strict Mode double-fire).
+   *
+   * @returns A promise that resolves when the wallet secret is registered.
+   */
+  async refreshWalletSecret() {
+    if (this.refreshWalletSecretPromise)
+      return this.refreshWalletSecretPromise;
+    this.refreshWalletSecretPromise = this._doRefreshWalletSecret();
+    try {
+      await this.refreshWalletSecretPromise;
+    } finally {
+      this.refreshWalletSecretPromise = null;
+    }
+  }
+  /**
+   * Internal wallet secret refresh logic.
+   */
+  async _doRefreshWalletSecret() {
+    const e = c(), t = this.walletSecret?.walletSecretId ?? e.generateRandomId(), n = this.walletSecret?.keyPair ?? await e.createKeyPair(), o = this.authState.expiresAt, a = new Date(o).toISOString();
+    this.walletSecret = { walletSecretId: t, keyPair: n, expiresAt: o };
+    try {
+      await w(
+        this.authState.user.userId,
+        {
+          walletSecretId: t,
+          publicKey: n.publicKeyBase64,
+          validUntil: a
+        },
+        { projectID: this.projectId }
       );
-    t = r;
-  } else
-    t = e;
-  const n = document.createElement("iframe");
-  return t.appendChild(n), n;
-}
-const d = {
-  lg: 1,
-  // 1em top + 1em bottom
-  md: 0.75,
-  // 0.75em top + 0.75em bottom
-  sm: 0.5,
-  // 0.5em top + 0.5em bottom
-  xs: 0.25
-  // 0.25em top + 0.25em bottom
-};
-function S(e) {
-  const t = e?.buttonSize || o.buttonSize, n = e?.buttonFontSize || o.buttonFontSize, r = 1.5, i = 4, a = d[t] * 2 + r;
-  return Math.ceil(a * n + i);
+    } catch (r) {
+      throw this.walletSecret = null, r;
+    }
+  }
 }
-const _ = (e) => typeof e == "object" && e !== null && "type" in e && typeof e.type == "string" && !!f[e.type.replace(
-  u,
-  ""
-)];
 export {
-  b as buildKeyExportIframeUrl,
-  S as calculateSecureIframeHeight,
-  p as createIframe,
-  E as getSecureIframeOrigin,
-  _ as isSecureIframeKeyExportMessage,
-  h as sendSecureIframeMessage,
-  m as validateSecureIframeEnvironment
+  j as AuthManager
 };

package/dist/web/index.web97.js

@@ -1,38 +1,21 @@
-const t = "CDP_WEB_SECURE_IFRAME_", E = {
-  INIT: `${t}INIT`,
-  LISTENING: `${t}LISTENING`,
-  STATUS: `${t}STATUS`,
-  THEME: `${t}THEME`
-}, o = {
-  ...E,
-  GET_PRIVATE_KEY: `${t}GET_PRIVATE_KEY`,
-  SHOW_EJECT: `${t}SHOW_EJECT`
-}, f = "https://secure-wallet.cdp.coinbase.com", e = {
-  pageBg: "#ffffff",
-  buttonBg: "#0052ff",
-  buttonBgHover: "#0748d6",
-  buttonBgPressed: "#0b3eae",
-  buttonBgFocus: "#014cec",
-  buttonBorder: "#014cec",
-  buttonBorderHover: "#0748d6",
-  buttonBorderPressed: "#0b3eae",
-  buttonBorderFocus: "#014cec",
-  buttonBorderFocusInset: "#ffffff",
-  buttonText: "#ffffff",
-  buttonTextHover: "#ffffff",
-  buttonTextPressed: "#ffffff",
-  buttonTextFocus: "#ffffff",
-  buttonBorderRadius: 99999,
-  buttonFontSize: 16,
-  buttonFontWeight: 500,
-  buttonSize: "md",
-  fontUrl: "",
-  fontFamily: ""
-};
+import { APIError as c, ErrorType as u, HttpErrorType as E, OAuth2ProviderType as a, SendEvmTransactionWithEndUserAccountBodyNetwork as d, SendSolanaTransactionWithEndUserAccountBodyNetwork as p } from "@coinbase/cdp-api-client";
+import "viem";
+class e extends Error {
+  /**
+   * Creates a new CustomAuthError.
+   *
+   * @param message - The error message.
+   */
+  constructor(r) {
+    super(r), this.name = "CustomAuthError";
+  }
+}
 export {
-  f as DEFAULT_SECURE_IFRAME_BASE_PATH,
-  e as DEFAULT_SECURE_IFRAME_THEME,
-  E as SECURE_IFRAME_EVENT_TYPE,
-  t as SECURE_IFRAME_EVENT_TYPE_PREFIX,
-  o as SECURE_IFRAME_KEY_EXPORT_EVENT_TYPE
+  c as APIError,
+  e as CustomAuthError,
+  u as ErrorType,
+  E as HttpErrorType,
+  a as OAuth2ProviderType,
+  d as SendEvmTransactionWithEndUserAccountBodyNetwork,
+  p as SendSolanaTransactionWithEndUserAccountBodyNetwork
 };