@coinbase/cdp-core 0.0.124 → 0.0.125

package/dist/native/index.native77.js

@@ -2,18 +2,21 @@ import { createBorrowPositionWithEndUserAccount as a } from "@coinbase/cdp-api-c
 import { Analytics as m } from "./index.native2.js";
 import "./index.native3.js";
 import { withAuth as n } from "./index.native107.js";
-import { getConfig as t, getCoreAuthManager as s } from "./index.native83.js";
+import { getConfig as t, getCoreAuthManager as i } from "./index.native83.js";
 import "viem";
-import { withMfa as i } from "./index.native92.js";
+import { withMfa as s } from "./index.native92.js";
 import "jose";
+import "jose/jwt/sign";
 import "./index.native108.js";
+import "viem/utils";
 import "./index.native109.js";
 import "@solana/web3.js";
 import "bs58";
-const g = async (r) => (m.sendActionCallEvent({ name: "create_borrow_position" }), t().useMock ? {
+import "./index.native111.js";
+const H = async (r) => (m.sendActionCallEvent({ name: "create_borrow_position" }), t().useMock ? {
   userOperationHash: "0x1234567890123456789012345678901234567890123456789012345678901234"
-} : i(
-  () => n(r, s(), async ({ user: o, walletSecretId: e }) => ({ userOperationHash: (await a(
+} : s(
+  () => n(r, i(), async ({ user: o, walletSecretId: e }) => ({ userOperationHash: (await a(
     o.userId,
     r.evmSmartAccount,
     {
@@ -29,5 +32,5 @@ const g = async (r) => (m.sendActionCallEvent({ name: "create_borrow_position" }
   )).userOpHash }))
 ));
 export {
-  g as createBorrowPosition
+  H as createBorrowPosition
 };

package/dist/native/index.native78.js

@@ -6,11 +6,14 @@ import { getConfig as t, getCoreAuthManager as u } from "./index.native83.js";
 import "viem";
 import { withMfa as s } from "./index.native92.js";
 import "jose";
+import "jose/jwt/sign";
 import "./index.native108.js";
+import "viem/utils";
 import "./index.native109.js";
 import "@solana/web3.js";
 import "bs58";
-const j = async (r) => (m.sendActionCallEvent({ name: "adjust_borrow_position" }), t().useMock ? {
+import "./index.native111.js";
+const v = async (r) => (m.sendActionCallEvent({ name: "adjust_borrow_position" }), t().useMock ? {
   userOperationHash: "0x1234567890123456789012345678901234567890123456789012345678901234"
 } : s(
   () => n(r, u(), async ({ user: o, walletSecretId: a }) => ({
@@ -33,5 +36,5 @@ const j = async (r) => (m.sendActionCallEvent({ name: "adjust_borrow_position" }
   }))
 ));
 export {
-  j as adjustBorrowPosition
+  v as adjustBorrowPosition
 };

package/dist/native/index.native79.js

@@ -1,19 +1,22 @@
 import { closeBorrowPositionWithEndUserAccount as a } from "@coinbase/cdp-api-client";
-import { Analytics as s } from "./index.native2.js";
+import { Analytics as m } from "./index.native2.js";
 import "./index.native3.js";
-import { withAuth as m } from "./index.native107.js";
+import { withAuth as s } from "./index.native107.js";
 import { getConfig as t, getCoreAuthManager as i } from "./index.native83.js";
 import "viem";
 import { withMfa as p } from "./index.native92.js";
 import "jose";
+import "jose/jwt/sign";
 import "./index.native108.js";
+import "viem/utils";
 import "./index.native109.js";
 import "@solana/web3.js";
 import "bs58";
-const g = async (r) => (s.sendActionCallEvent({ name: "close_borrow_position" }), t().useMock ? {
+import "./index.native111.js";
+const H = async (r) => (m.sendActionCallEvent({ name: "close_borrow_position" }), t().useMock ? {
   userOperationHash: "0x1234567890123456789012345678901234567890123456789012345678901234"
 } : p(
-  () => m(r, i(), async ({ user: o, walletSecretId: e }) => ({
+  () => s(r, i(), async ({ user: o, walletSecretId: e }) => ({
     userOperationHash: (await a(
       o.userId,
       r.evmSmartAccount,
@@ -29,5 +32,5 @@ const g = async (r) => (s.sendActionCallEvent({ name: "close_borrow_position" })
   }))
 ));
 export {
-  g as closeBorrowPosition
+  H as closeBorrowPosition
 };

package/dist/native/index.native81.js

@@ -1,8 +1,8 @@
-import { getMfaConfig as t } from "@coinbase/cdp-api-client";
-import { Analytics as n } from "./index.native2.js";
+import { getMfaConfig as n } from "@coinbase/cdp-api-client";
+import { Analytics as o } from "./index.native2.js";
 import "./index.native3.js";
 import { getConfig as e } from "./index.native83.js";
-const s = async () => (n.sendActionCallEvent({ name: "get_mfa_config" }), e().useMock ? {
+const s = async () => (o.sendActionCallEvent({ name: "get_mfa_config" }), e().useMock ? {
   projectId: e().projectId,
   enabled: !1,
   totpConfig: {
@@ -11,12 +11,13 @@ const s = async () => (n.sendActionCallEvent({ name: "get_mfa_config" }), e().us
   smsConfig: {
     enabled: !1
   },
+  verificationScope: "session",
   verificationWindowSeconds: 300,
   promptEnrollmentOnLogin: !1,
   requireVerificationOnLogin: !1,
   createdAt: (/* @__PURE__ */ new Date()).toISOString(),
   updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-} : await t(e().projectId));
+} : await n(e().projectId));
 export {
   s as getMfaConfig
 };

package/dist/native/index.native84.js

@@ -2,7 +2,7 @@ import { recordMfaEnrollmentPrompted as s } from "@coinbase/cdp-api-client";
 import { Analytics as l } from "./index.native2.js";
 import "./index.native3.js";
 import { withAuth as d } from "./index.native107.js";
-import { validateUserAuthState as p } from "./index.native113.js";
+import { validateUserAuthState as p } from "./index.native114.js";
 import { getConfig as o, getCoreAuthManager as c } from "./index.native83.js";
 const M = async (n) => {
   if (l.sendActionCallEvent({ name: "record_mfa_enrollment_prompted" }), o().useMock)

package/dist/native/index.native85.js

@@ -1,12 +1,22 @@
-import { initiateMfaEnrollment2 as a } from "@coinbase/cdp-api-client";
-import { Analytics as c } from "./index.native2.js";
+import { initiateMfaEnrollment2 as i } from "@coinbase/cdp-api-client";
+import { Analytics as p } from "./index.native2.js";
 import "./index.native3.js";
 import { withAuth as u } from "./index.native107.js";
-import { validateUserAuthState as i } from "./index.native113.js";
-import { getConfig as o, getCoreAuthManager as p } from "./index.native83.js";
-import { validatePhoneNumber as h } from "./index.native98.js";
-async function l(t, e) {
-  const r = await a(
+import { getConfig as o, getCoreAuthManager as h } from "./index.native83.js";
+import "viem";
+import { withMfa as l } from "./index.native92.js";
+import { validateUserAuthState as f } from "./index.native114.js";
+import "jose";
+import "jose/jwt/sign";
+import "./index.native108.js";
+import "viem/utils";
+import "./index.native109.js";
+import "@solana/web3.js";
+import "bs58";
+import "./index.native111.js";
+import { validatePhoneNumber as d } from "./index.native98.js";
+async function M(t, e) {
+  const r = await i(
     t.userId,
     "totp",
     { type: "totp" },
@@ -19,10 +29,10 @@ async function l(t, e) {
     secret: r.secret
   };
 }
-async function f(t, e, r) {
+async function A(t, e, r) {
   return {
     method: "sms",
-    success: (await a(
+    success: (await i(
       t.userId,
       "sms",
       { type: "sms", phoneNumber: e },
@@ -31,37 +41,39 @@ async function f(t, e, r) {
     )).success
   };
 }
-function d() {
+function g() {
   return {
     method: "totp",
     authUrl: "otpauth://totp/MockApp:mock@example.com?secret=MOCKTOTP&issuer=MockApp",
     secret: "MOCKTOTP"
   };
 }
-function M() {
+function y() {
   return {
     method: "sms",
     success: !0
   };
 }
-const T = async (t) => {
-  if (c.sendActionCallEvent({ name: "initiate_mfa_enrollment" }), t.mfaMethod === "sms" && h(t.phoneNumber), o().useMock)
-    return t.mfaMethod === "totp" ? d() : M();
-  const e = p(), { user: r, authState: n } = i(
+const R = async (t) => {
+  if (p.sendActionCallEvent({ name: "initiate_mfa_enrollment" }), t.mfaMethod === "sms" && d(t.phoneNumber), o().useMock)
+    return t.mfaMethod === "totp" ? g() : y();
+  const e = h(), { user: r, authState: s } = f(
     e.getUser(),
     e.getAuthState()
-  ), m = await u({}, e, async ({ user: s }) => t.mfaMethod === "totp" ? l(s, t.idempotencyKey) : f(s, t.phoneNumber, t.idempotencyKey));
+  ), c = await l(
+    () => u({}, e, async ({ user: a }) => t.mfaMethod === "totp" ? M(a, t.idempotencyKey) : A(a, t.phoneNumber, t.idempotencyKey))
+  ), m = e.getAuthState() ?? s, n = m.user ?? r;
   return await e.setAuthState({
-    ...n,
+    ...m,
     user: {
-      ...r,
+      ...n,
       mfaMethods: {
         enrollmentPromptedAt: (/* @__PURE__ */ new Date()).toISOString(),
-        ...r.mfaMethods
+        ...n.mfaMethods
       }
     }
-  }), m;
+  }), c;
 };
 export {
-  T as initiateMfaEnrollment
+  R as initiateMfaEnrollment
 };

package/dist/native/index.native86.js

@@ -1,27 +1,39 @@
-import { submitMfaEnrollment as u } from "@coinbase/cdp-api-client";
-import { Analytics as i } from "./index.native2.js";
+import { submitMfaEnrollment as s } from "@coinbase/cdp-api-client";
+import { Analytics as u } from "./index.native2.js";
 import "./index.native3.js";
-import { toAuthStateUser as f } from "./index.native112.js";
-import { withAuth as c } from "./index.native107.js";
-import { mockUser as l } from "./index.native117.js";
-import { validateUserAuthState as h } from "./index.native113.js";
-import { getConfig as o, getCoreAuthManager as p } from "./index.native83.js";
-const E = async (e) => {
-  if (i.sendActionCallEvent({ name: "submit_mfa_enrollment" }), o().useMock)
+import { toAuthStateUser as p } from "./index.native113.js";
+import { withAuth as f } from "./index.native107.js";
+import { getConfig as o, getCoreAuthManager as c } from "./index.native83.js";
+import "viem";
+import { withMfa as l } from "./index.native92.js";
+import { validateUserAuthState as h } from "./index.native114.js";
+import "jose";
+import "jose/jwt/sign";
+import "./index.native108.js";
+import { mockUser as A } from "./index.native117.js";
+import "viem/utils";
+import "./index.native109.js";
+import "@solana/web3.js";
+import "bs58";
+import "./index.native111.js";
+const R = async (e) => {
+  if (u.sendActionCallEvent({ name: "submit_mfa_enrollment" }), o().useMock)
     return {
-      user: l
+      user: A
     };
-  const t = p(), { authState: a } = h(t.getUser(), t.getAuthState()), m = await c({}, t, async ({ user: s }) => u(
-    s.userId,
-    e.mfaMethod,
-    {
-      mfaCode: e.mfaCode
-    },
-    { projectID: o().projectId },
-    e.idempotencyKey
-  )), r = f(m.endUser), n = t.getAuthState() ?? a;
-  return await t.setAuthState({ ...n, user: r }), { user: r };
+  const t = c(), { authState: m } = h(t.getUser(), t.getAuthState()), a = await l(
+    () => f({}, t, async ({ user: n }) => s(
+      n.userId,
+      e.mfaMethod,
+      {
+        mfaCode: e.mfaCode
+      },
+      { projectID: o().projectId },
+      e.idempotencyKey
+    ))
+  ), r = p(a.endUser), i = t.getAuthState() ?? m;
+  return await t.setAuthState({ ...i, user: r }), { user: r };
 };
 export {
-  E as submitMfaEnrollment
+  R as submitMfaEnrollment
 };

package/dist/native/index.native87.js

@@ -1,19 +1,21 @@
 import { initiateMfaVerification as a } from "@coinbase/cdp-api-client";
 import { Analytics as r } from "./index.native2.js";
 import "./index.native3.js";
-import { withAuth as o } from "./index.native107.js";
-import { getConfig as t, getCoreAuthManager as n } from "./index.native83.js";
-const u = async (i) => {
-  if (r.sendActionCallEvent({ name: "initiate_mfa_verification" }), !t().useMock)
-    return o({}, n(), async ({ user: e }) => {
-      await a(
-        e.userId,
-        i.mfaMethod,
-        { projectID: t().projectId },
-        i.idempotencyKey
-      );
-    });
+import { withAuth as n } from "./index.native107.js";
+import { getPendingMfaChallengeId as o } from "./index.native90.js";
+import { getConfig as i, getCoreAuthManager as f } from "./index.native83.js";
+const h = async (e) => {
+  if (r.sendActionCallEvent({ name: "initiate_mfa_verification" }), !i().useMock)
+    return n({}, f(), async ({ user: t }) => await a(
+      t.userId,
+      e.mfaMethod,
+      { projectID: i().projectId },
+      {
+        idempotencyKey: e.idempotencyKey,
+        mfaChallengeId: e.challengeId ?? o()
+      }
+    ));
 };
 export {
-  u as initiateMfaVerification
+  h as initiateMfaVerification
 };

package/dist/native/index.native88.js

@@ -1,37 +1,43 @@
-import { submitMfaVerification as m } from "@coinbase/cdp-api-client";
-import { Analytics as n } from "./index.native2.js";
+import { submitMfaVerification as c, APIError as s, ErrorType as d } from "@coinbase/cdp-api-client";
+import { Analytics as u } from "./index.native2.js";
 import "./index.native3.js";
-import { withAuth as s } from "./index.native107.js";
-import { resolvePendingMfaVerification as i } from "./index.native90.js";
-import { getConfig as r, getCoreAuthManager as o } from "./index.native83.js";
-const p = async (t) => {
-  if (n.sendActionCallEvent({ name: "submit_mfa_verification" }), r().useMock) {
+import { withAuth as h } from "./index.native107.js";
+import { resolvePendingMfaVerification as i, getPendingMfaChallengeId as g, rejectPendingMfaVerification as l } from "./index.native90.js";
+import { isRequestScope as o } from "./index.native92.js";
+import { getConfig as f, getCoreAuthManager as n } from "./index.native83.js";
+const S = async (e) => {
+  if (u.sendActionCallEvent({ name: "submit_mfa_verification" }), f().useMock) {
     i();
     return;
   }
-  await s(t, o(), async ({ user: f }) => {
-    await m(
-      f.userId,
-      t.mfaMethod,
-      {
-        mfaCode: t.mfaCode
-      },
-      { projectID: r().projectId },
-      t.idempotencyKey
-    );
-    const a = o(), e = a.getAuthState();
-    e && await a.setAuthState({
-      ...e,
+  await h(e, n(), async ({ user: m }) => {
+    try {
+      await c(
+        m.userId,
+        e.mfaMethod,
+        { mfaCode: e.mfaCode },
+        { projectID: f().projectId },
+        {
+          idempotencyKey: e.idempotencyKey,
+          mfaChallengeId: e.challengeId ?? g()
+        }
+      );
+    } catch (a) {
+      throw o() && a instanceof s && a.errorType === d.mfa_invalid_code && l(a), a;
+    }
+    const r = n(), t = r.getAuthState();
+    t && await r.setAuthState({
+      ...t,
       user: {
-        ...e.user,
+        ...t.user,
         mfaMethods: {
-          ...e.user.mfaMethods,
+          ...t.user.mfaMethods,
           lastVerificationCompletedAt: (/* @__PURE__ */ new Date()).toISOString()
         }
       }
-    }), await a.getToken({ forceRefresh: !0 }), i();
+    }), o() || await r.getToken({ forceRefresh: !0 }), i();
   });
 };
 export {
-  p as submitMfaVerification
+  S as submitMfaVerification
 };

package/dist/native/index.native90.js

@@ -1,65 +1,66 @@
 import "@coinbase/cdp-api-client";
-import { MfaError as d } from "./index.native97.js";
-const g = () => {
-  let t, s;
-  return { promise: new Promise((o, n) => {
-    t = o, s = n;
-  }), resolve: t, reject: s };
+import { MfaError as h } from "./index.native97.js";
+const u = () => {
+  let r, i;
+  return { promise: new Promise((n, s) => {
+    r = n, i = s;
+  }), resolve: r, reject: i };
 }, c = /* @__PURE__ */ new Set();
-let e = null, u = null;
-const p = (t, s) => {
-  const r = { listener: t, matches: s?.matches };
-  return c.add(r), () => {
-    c.delete(r);
+let e = null, l, m = null;
+const v = (r, i) => {
+  const o = { listener: r, matches: i?.matches };
+  return c.add(o), () => {
+    c.delete(o);
   };
-}, M = () => c.size > 0, v = (t, s) => {
+}, w = () => c.size > 0, E = (r, i, o) => {
   if (c.size === 0)
     return Promise.resolve();
   e && (e.reject(
-    new d("SUPERSEDED", "MFA verification superseded by a newer request")
+    new h("SUPERSEDED", "MFA verification superseded by a newer request")
   ), e = null);
-  const r = g();
-  e = r;
-  let o;
+  const n = u();
+  e = n, l = o?.challengeId;
+  let s;
   try {
-    o = s !== void 0 ? s : u?.();
-  } catch (i) {
-    console.error("MFA default trigger provider threw an error:", i), o = void 0;
+    s = i !== void 0 ? i : m?.();
+  } catch (t) {
+    console.error("MFA default trigger provider threw an error:", t), s = void 0;
   }
-  const n = [], l = [];
-  for (const i of c)
-    if (i.matches)
+  const a = [], g = [];
+  for (const t of c)
+    if (t.matches)
       try {
-        i.matches(o) && n.push(i);
-      } catch (a) {
-        console.error("MFA listener predicate threw an error:", a);
+        t.matches(s) && a.push(t);
+      } catch (d) {
+        console.error("MFA listener predicate threw an error:", d);
       }
     else
-      l.push(i);
-  const f = n.length > 0 ? n : l;
+      g.push(t);
+  const f = a.length > 0 ? a : g;
   if (f.length === 0)
-    return r.reject(
-      new d(
+    return n.reject(
+      new h(
         "NO_LISTENER_MATCHED",
         "MFA verification was triggered but no registered listener matched. Ensure a global MFA listener is registered, or that a scoped listener's predicate matches the trigger."
       )
-    ), e === r && (e = null), r.promise;
-  for (const i of f)
+    ), e === n && (e = null, l = void 0), n.promise;
+  for (const t of f)
     try {
-      i.listener({ methods: t });
-    } catch (a) {
-      console.error("MFA listener threw an error:", a);
+      t.listener({ methods: r, ...o });
+    } catch (d) {
+      console.error("MFA listener threw an error:", d);
     }
-  return r.promise;
-}, w = () => {
-  e && (e.resolve(), e = null);
-}, E = (t) => {
-  e && (e.reject(t), e = null);
-};
+  return n.promise;
+}, P = () => {
+  e && (e.resolve(), e = null, l = void 0);
+}, A = (r) => {
+  e && (e.reject(r), e = null, l = void 0);
+}, F = () => l;
 export {
-  M as hasRegisteredMfaListeners,
-  p as registerMfaListener,
-  E as rejectPendingMfaVerification,
-  w as resolvePendingMfaVerification,
-  v as triggerMfaVerification
+  F as getPendingMfaChallengeId,
+  w as hasRegisteredMfaListeners,
+  v as registerMfaListener,
+  A as rejectPendingMfaVerification,
+  P as resolvePendingMfaVerification,
+  E as triggerMfaVerification
 };

package/dist/native/index.native92.js

@@ -1,51 +1,59 @@
-import { APIError as u, ErrorType as l } from "@coinbase/cdp-api-client";
-import { MfaError as M } from "./index.native97.js";
-import { getCoreAuthManager as a, getMfaConfigState as m } from "./index.native83.js";
-import { hasRegisteredMfaListeners as i, triggerMfaVerification as o } from "./index.native90.js";
-import { isEnrolledInMfa as w, getEnrolledMfaMethods as E } from "./index.native91.js";
-const g = 300, n = () => {
-  const e = a().getUser();
-  return e ? E(e) : [];
-}, s = () => {
-  throw new M(
+import { APIError as E, ErrorType as w, MfaVerificationScope as m } from "@coinbase/cdp-api-client";
+import { MfaError as d } from "./index.native97.js";
+import { getCoreAuthManager as u, getMfaConfigState as l } from "./index.native83.js";
+import { hasRegisteredMfaListeners as o, triggerMfaVerification as n } from "./index.native90.js";
+import { isEnrolledInMfa as g, getEnrolledMfaMethods as p } from "./index.native91.js";
+const S = 300, a = () => {
+  const e = u().getUser();
+  return e ? p(e) : [];
+}, f = () => l()?.verificationScope === m.MfaVerificationScopeRequest, s = () => {
+  throw new d(
     "LISTENER_REQUIRED",
     "MFA verification is required but no listener is registered."
   );
 };
-async function T(e) {
-  if (f()) {
-    i() || s();
-    const r = n();
-    await o(r);
+async function y(e) {
+  if (h() && !f()) {
+    o() || s();
+    const r = a();
+    await n(r);
   }
   try {
     return await e();
   } catch (r) {
-    if (r instanceof u && r.errorType === l.mfa_required) {
-      i() || s();
-      const t = n();
-      return await o(t), await e();
+    if (r instanceof E && r.errorType === w.mfa_required) {
+      const t = r.headers?.["x-mfa-challenge-id"], i = Array.isArray(t) ? t[0] : t;
+      o() || s();
+      const c = a();
+      return await n(c, void 0, i ? { challengeId: i } : void 0), await e();
     }
     throw r;
   }
 }
-function f() {
-  const e = a().getUser();
-  if (!e || !w(e)) return !1;
+function h() {
+  const e = u().getUser();
+  if (!e || !g(e)) return !1;
+  if (f()) return !0;
   const t = e?.mfaMethods?.lastVerificationCompletedAt;
   if (!t) return !0;
-  const c = new Date(t).getTime(), d = (m()?.verificationWindowSeconds ?? g) * 1e3;
-  return Date.now() > c + d;
+  const i = new Date(t).getTime(), M = (l()?.verificationWindowSeconds ?? S) * 1e3;
+  return Date.now() > i + M;
 }
-async function D() {
-  if (!f())
+async function V() {
+  if (f())
+    throw new d(
+      "REQUEST_SCOPE_UNSUPPORTED",
+      "MFA cannot be verified ahead of an operation when the project's verificationScope is 'request', because the challenge is issued by the operation itself."
+    );
+  if (!h())
     return;
-  i() || s();
-  const e = n();
-  await o(e);
+  o() || s();
+  const e = a();
+  await n(e);
 }
 export {
-  D as ensureMfaVerified,
-  f as isMfaRequired,
-  T as withMfa
+  V as ensureMfaVerified,
+  h as isMfaRequired,
+  f as isRequestScope,
+  y as withMfa
 };