@coinbase/cdp-core 0.0.124 → 0.0.126

package/dist/native/index.native86.js

@@ -1,27 +1,37 @@
-import { submitMfaEnrollment as u } from "@coinbase/cdp-api-client";
-import { Analytics as i } from "./index.native2.js";
+import { submitMfaEnrollment as s } from "@coinbase/cdp-api-client";
+import { Analytics as u } from "./index.native2.js";
 import "./index.native3.js";
-import { toAuthStateUser as f } from "./index.native112.js";
-import { withAuth as c } from "./index.native107.js";
-import { mockUser as l } from "./index.native117.js";
-import { validateUserAuthState as h } from "./index.native113.js";
-import { getConfig as o, getCoreAuthManager as p } from "./index.native83.js";
-const E = async (e) => {
-  if (i.sendActionCallEvent({ name: "submit_mfa_enrollment" }), o().useMock)
+import { toAuthStateUser as f } from "./index.native113.js";
+import { withAuth as p } from "./index.native107.js";
+import { getConfig as o, getCoreAuthManager as c } from "./index.native83.js";
+import "viem";
+import { withMfa as l } from "./index.native92.js";
+import { validateUserAuthState as h } from "./index.native114.js";
+import "jose";
+import "./index.native108.js";
+import { mockUser as A } from "./index.native117.js";
+import "./index.native109.js";
+import "@solana/web3.js";
+import "bs58";
+import "./index.native111.js";
+const D = async (e) => {
+  if (u.sendActionCallEvent({ name: "submit_mfa_enrollment" }), o().useMock)
     return {
-      user: l
+      user: A
     };
-  const t = p(), { authState: a } = h(t.getUser(), t.getAuthState()), m = await c({}, t, async ({ user: s }) => u(
-    s.userId,
-    e.mfaMethod,
-    {
-      mfaCode: e.mfaCode
-    },
-    { projectID: o().projectId },
-    e.idempotencyKey
-  )), r = f(m.endUser), n = t.getAuthState() ?? a;
+  const t = c(), { authState: m } = h(t.getUser(), t.getAuthState()), a = await l(
+    () => p({}, t, async ({ user: i }) => s(
+      i.userId,
+      e.mfaMethod,
+      {
+        mfaCode: e.mfaCode
+      },
+      { projectID: o().projectId },
+      e.idempotencyKey
+    ))
+  ), r = f(a.endUser), n = t.getAuthState() ?? m;
   return await t.setAuthState({ ...n, user: r }), { user: r };
 };
 export {
-  E as submitMfaEnrollment
+  D as submitMfaEnrollment
 };

package/dist/native/index.native87.js

@@ -1,19 +1,21 @@
 import { initiateMfaVerification as a } from "@coinbase/cdp-api-client";
 import { Analytics as r } from "./index.native2.js";
 import "./index.native3.js";
-import { withAuth as o } from "./index.native107.js";
-import { getConfig as t, getCoreAuthManager as n } from "./index.native83.js";
-const u = async (i) => {
-  if (r.sendActionCallEvent({ name: "initiate_mfa_verification" }), !t().useMock)
-    return o({}, n(), async ({ user: e }) => {
-      await a(
-        e.userId,
-        i.mfaMethod,
-        { projectID: t().projectId },
-        i.idempotencyKey
-      );
-    });
+import { withAuth as n } from "./index.native107.js";
+import { getPendingMfaChallengeId as o } from "./index.native90.js";
+import { getConfig as i, getCoreAuthManager as f } from "./index.native83.js";
+const h = async (e) => {
+  if (r.sendActionCallEvent({ name: "initiate_mfa_verification" }), !i().useMock)
+    return n({}, f(), async ({ user: t }) => await a(
+      t.userId,
+      e.mfaMethod,
+      { projectID: i().projectId },
+      {
+        idempotencyKey: e.idempotencyKey,
+        mfaChallengeId: e.challengeId ?? o()
+      }
+    ));
 };
 export {
-  u as initiateMfaVerification
+  h as initiateMfaVerification
 };

package/dist/native/index.native88.js

@@ -1,37 +1,43 @@
-import { submitMfaVerification as m } from "@coinbase/cdp-api-client";
-import { Analytics as n } from "./index.native2.js";
+import { submitMfaVerification as c, APIError as s, ErrorType as d } from "@coinbase/cdp-api-client";
+import { Analytics as u } from "./index.native2.js";
 import "./index.native3.js";
-import { withAuth as s } from "./index.native107.js";
-import { resolvePendingMfaVerification as i } from "./index.native90.js";
-import { getConfig as r, getCoreAuthManager as o } from "./index.native83.js";
-const p = async (t) => {
-  if (n.sendActionCallEvent({ name: "submit_mfa_verification" }), r().useMock) {
+import { withAuth as h } from "./index.native107.js";
+import { resolvePendingMfaVerification as i, getPendingMfaChallengeId as g, rejectPendingMfaVerification as l } from "./index.native90.js";
+import { isRequestScope as o } from "./index.native92.js";
+import { getConfig as f, getCoreAuthManager as n } from "./index.native83.js";
+const S = async (e) => {
+  if (u.sendActionCallEvent({ name: "submit_mfa_verification" }), f().useMock) {
     i();
     return;
   }
-  await s(t, o(), async ({ user: f }) => {
-    await m(
-      f.userId,
-      t.mfaMethod,
-      {
-        mfaCode: t.mfaCode
-      },
-      { projectID: r().projectId },
-      t.idempotencyKey
-    );
-    const a = o(), e = a.getAuthState();
-    e && await a.setAuthState({
-      ...e,
+  await h(e, n(), async ({ user: m }) => {
+    try {
+      await c(
+        m.userId,
+        e.mfaMethod,
+        { mfaCode: e.mfaCode },
+        { projectID: f().projectId },
+        {
+          idempotencyKey: e.idempotencyKey,
+          mfaChallengeId: e.challengeId ?? g()
+        }
+      );
+    } catch (a) {
+      throw o() && a instanceof s && a.errorType === d.mfa_invalid_code && l(a), a;
+    }
+    const r = n(), t = r.getAuthState();
+    t && await r.setAuthState({
+      ...t,
       user: {
-        ...e.user,
+        ...t.user,
         mfaMethods: {
-          ...e.user.mfaMethods,
+          ...t.user.mfaMethods,
           lastVerificationCompletedAt: (/* @__PURE__ */ new Date()).toISOString()
         }
       }
-    }), await a.getToken({ forceRefresh: !0 }), i();
+    }), o() || await r.getToken({ forceRefresh: !0 }), i();
   });
 };
 export {
-  p as submitMfaVerification
+  S as submitMfaVerification
 };

package/dist/native/index.native90.js

@@ -1,65 +1,66 @@
 import "@coinbase/cdp-api-client";
-import { MfaError as d } from "./index.native97.js";
-const g = () => {
-  let t, s;
-  return { promise: new Promise((o, n) => {
-    t = o, s = n;
-  }), resolve: t, reject: s };
+import { MfaError as h } from "./index.native97.js";
+const u = () => {
+  let r, i;
+  return { promise: new Promise((n, s) => {
+    r = n, i = s;
+  }), resolve: r, reject: i };
 }, c = /* @__PURE__ */ new Set();
-let e = null, u = null;
-const p = (t, s) => {
-  const r = { listener: t, matches: s?.matches };
-  return c.add(r), () => {
-    c.delete(r);
+let e = null, l, m = null;
+const v = (r, i) => {
+  const o = { listener: r, matches: i?.matches };
+  return c.add(o), () => {
+    c.delete(o);
   };
-}, M = () => c.size > 0, v = (t, s) => {
+}, w = () => c.size > 0, E = (r, i, o) => {
   if (c.size === 0)
     return Promise.resolve();
   e && (e.reject(
-    new d("SUPERSEDED", "MFA verification superseded by a newer request")
+    new h("SUPERSEDED", "MFA verification superseded by a newer request")
   ), e = null);
-  const r = g();
-  e = r;
-  let o;
+  const n = u();
+  e = n, l = o?.challengeId;
+  let s;
   try {
-    o = s !== void 0 ? s : u?.();
-  } catch (i) {
-    console.error("MFA default trigger provider threw an error:", i), o = void 0;
+    s = i !== void 0 ? i : m?.();
+  } catch (t) {
+    console.error("MFA default trigger provider threw an error:", t), s = void 0;
   }
-  const n = [], l = [];
-  for (const i of c)
-    if (i.matches)
+  const a = [], g = [];
+  for (const t of c)
+    if (t.matches)
       try {
-        i.matches(o) && n.push(i);
-      } catch (a) {
-        console.error("MFA listener predicate threw an error:", a);
+        t.matches(s) && a.push(t);
+      } catch (d) {
+        console.error("MFA listener predicate threw an error:", d);
       }
     else
-      l.push(i);
-  const f = n.length > 0 ? n : l;
+      g.push(t);
+  const f = a.length > 0 ? a : g;
   if (f.length === 0)
-    return r.reject(
-      new d(
+    return n.reject(
+      new h(
         "NO_LISTENER_MATCHED",
         "MFA verification was triggered but no registered listener matched. Ensure a global MFA listener is registered, or that a scoped listener's predicate matches the trigger."
       )
-    ), e === r && (e = null), r.promise;
-  for (const i of f)
+    ), e === n && (e = null, l = void 0), n.promise;
+  for (const t of f)
     try {
-      i.listener({ methods: t });
-    } catch (a) {
-      console.error("MFA listener threw an error:", a);
+      t.listener({ methods: r, ...o });
+    } catch (d) {
+      console.error("MFA listener threw an error:", d);
     }
-  return r.promise;
-}, w = () => {
-  e && (e.resolve(), e = null);
-}, E = (t) => {
-  e && (e.reject(t), e = null);
-};
+  return n.promise;
+}, P = () => {
+  e && (e.resolve(), e = null, l = void 0);
+}, A = (r) => {
+  e && (e.reject(r), e = null, l = void 0);
+}, F = () => l;
 export {
-  M as hasRegisteredMfaListeners,
-  p as registerMfaListener,
-  E as rejectPendingMfaVerification,
-  w as resolvePendingMfaVerification,
-  v as triggerMfaVerification
+  F as getPendingMfaChallengeId,
+  w as hasRegisteredMfaListeners,
+  v as registerMfaListener,
+  A as rejectPendingMfaVerification,
+  P as resolvePendingMfaVerification,
+  E as triggerMfaVerification
 };

package/dist/native/index.native92.js

@@ -1,51 +1,59 @@
-import { APIError as u, ErrorType as l } from "@coinbase/cdp-api-client";
-import { MfaError as M } from "./index.native97.js";
-import { getCoreAuthManager as a, getMfaConfigState as m } from "./index.native83.js";
-import { hasRegisteredMfaListeners as i, triggerMfaVerification as o } from "./index.native90.js";
-import { isEnrolledInMfa as w, getEnrolledMfaMethods as E } from "./index.native91.js";
-const g = 300, n = () => {
-  const e = a().getUser();
-  return e ? E(e) : [];
-}, s = () => {
-  throw new M(
+import { APIError as E, ErrorType as w, MfaVerificationScope as m } from "@coinbase/cdp-api-client";
+import { MfaError as d } from "./index.native97.js";
+import { getCoreAuthManager as u, getMfaConfigState as l } from "./index.native83.js";
+import { hasRegisteredMfaListeners as o, triggerMfaVerification as n } from "./index.native90.js";
+import { isEnrolledInMfa as g, getEnrolledMfaMethods as p } from "./index.native91.js";
+const S = 300, a = () => {
+  const e = u().getUser();
+  return e ? p(e) : [];
+}, f = () => l()?.verificationScope === m.MfaVerificationScopeRequest, s = () => {
+  throw new d(
     "LISTENER_REQUIRED",
     "MFA verification is required but no listener is registered."
   );
 };
-async function T(e) {
-  if (f()) {
-    i() || s();
-    const r = n();
-    await o(r);
+async function y(e) {
+  if (h() && !f()) {
+    o() || s();
+    const r = a();
+    await n(r);
   }
   try {
     return await e();
   } catch (r) {
-    if (r instanceof u && r.errorType === l.mfa_required) {
-      i() || s();
-      const t = n();
-      return await o(t), await e();
+    if (r instanceof E && r.errorType === w.mfa_required) {
+      const t = r.headers?.["x-mfa-challenge-id"], i = Array.isArray(t) ? t[0] : t;
+      o() || s();
+      const c = a();
+      return await n(c, void 0, i ? { challengeId: i } : void 0), await e();
     }
     throw r;
   }
 }
-function f() {
-  const e = a().getUser();
-  if (!e || !w(e)) return !1;
+function h() {
+  const e = u().getUser();
+  if (!e || !g(e)) return !1;
+  if (f()) return !0;
   const t = e?.mfaMethods?.lastVerificationCompletedAt;
   if (!t) return !0;
-  const c = new Date(t).getTime(), d = (m()?.verificationWindowSeconds ?? g) * 1e3;
-  return Date.now() > c + d;
+  const i = new Date(t).getTime(), M = (l()?.verificationWindowSeconds ?? S) * 1e3;
+  return Date.now() > i + M;
 }
-async function D() {
-  if (!f())
+async function V() {
+  if (f())
+    throw new d(
+      "REQUEST_SCOPE_UNSUPPORTED",
+      "MFA cannot be verified ahead of an operation when the project's verificationScope is 'request', because the challenge is issued by the operation itself."
+    );
+  if (!h())
     return;
-  i() || s();
-  const e = n();
-  await o(e);
+  o() || s();
+  const e = a();
+  await n(e);
 }
 export {
-  D as ensureMfaVerified,
-  f as isMfaRequired,
-  T as withMfa
+  V as ensureMfaVerified,
+  h as isMfaRequired,
+  f as isRequestScope,
+  y as withMfa
 };

package/dist/native/index.native93.js

@@ -1,43 +1,77 @@
-import { createSolanaKeyExportIframe as t, createEvmKeyExportIframe as m } from "./index.native138.js";
-import { signBitcoinHash as i } from "./index.native68.js";
+import { adjustBorrowPosition as m } from "./index.native78.js";
+import { closeBorrowPosition as t } from "./index.native79.js";
+import { createBorrowPosition as i } from "./index.native77.js";
+import { createDelegation as e } from "./index.native60.js";
+import { createDelegationForAccount as n } from "./index.native63.js";
+import { createSolanaKeyExportIframe as a, createEvmKeyExportIframe as p } from "./index.native141.js";
+import { createSpendPermission as s } from "./index.native43.js";
+import { enableSpendPermissions as f } from "./index.native46.js";
+import { enrollPasskey as c } from "./index.native142.js";
+import { executeSwap as l } from "./index.native74.js";
+import { initiateMfaEnrollment as E } from "./index.native85.js";
+import { revokeDelegation as d } from "./index.native62.js";
+import { revokeDelegationForAccount as g } from "./index.native65.js";
+import { revokeSpendPermission as S } from "./index.native45.js";
+import { sendEvmEoaUsdc as v } from "./index.native69.js";
+import { sendEvmSmartAccountUsdc as T } from "./index.native70.js";
+import { sendSolanaUsdc as u } from "./index.native71.js";
+import { signBitcoinHash as P } from "./index.native68.js";
+import { submitMfaEnrollment as A } from "./index.native86.js";
 import "@coinbase/cdp-api-client";
 import "./index.native2.js";
 import "./index.native3.js";
 import "jose";
 import "viem";
 import "./index.native108.js";
-import { signEvmHash as n } from "./index.native31.js";
-import { signEvmTransaction as a } from "./index.native32.js";
-import { signEvmMessage as e } from "./index.native33.js";
-import { signEvmTypedData as p } from "./index.native34.js";
-import { signSolanaTransaction as s } from "./index.native35.js";
-import { signSolanaMessage as c } from "./index.native36.js";
-import { sendEvmTransaction as f } from "./index.native37.js";
-import { sendSolanaTransaction as E } from "./index.native38.js";
-import { sendUserOperation as T } from "./index.native39.js";
-import { exportEvmAccount as g } from "./index.native41.js";
-import { exportSolanaAccount as v } from "./index.native42.js";
+import { signEvmHash as D } from "./index.native31.js";
+import { signEvmTransaction as M } from "./index.native32.js";
+import { signEvmMessage as x } from "./index.native33.js";
+import { signEvmTypedData as O } from "./index.native34.js";
+import { signSolanaTransaction as k } from "./index.native35.js";
+import { signSolanaMessage as y } from "./index.native36.js";
+import { sendEvmTransaction as F } from "./index.native37.js";
+import { sendSolanaTransaction as U } from "./index.native38.js";
+import { sendUserOperation as w } from "./index.native39.js";
+import { exportEvmAccount as B } from "./index.native41.js";
+import { exportSolanaAccount as C } from "./index.native42.js";
 const o = {
-  signEvmHash: n,
-  signEvmTransaction: a,
-  signSolanaTransaction: s,
-  sendEvmTransaction: f,
-  sendSolanaTransaction: E,
-  signEvmMessage: e,
-  signSolanaMessage: c,
-  signEvmTypedData: p,
-  sendUserOperation: T,
-  exportEvmAccount: g,
-  exportSolanaAccount: v,
-  signBitcoinHash: i,
-  createEvmKeyExportIframe: m,
-  createSolanaKeyExportIframe: t
-}, R = Object.keys(o);
-function U(r) {
+  signEvmHash: D,
+  signEvmTransaction: M,
+  signSolanaTransaction: k,
+  sendEvmTransaction: F,
+  sendSolanaTransaction: U,
+  signEvmMessage: x,
+  signSolanaMessage: y,
+  signEvmTypedData: O,
+  sendUserOperation: w,
+  exportEvmAccount: B,
+  exportSolanaAccount: C,
+  signBitcoinHash: P,
+  createEvmKeyExportIframe: p,
+  createSolanaKeyExportIframe: a,
+  adjustBorrowPosition: m,
+  closeBorrowPosition: t,
+  createBorrowPosition: i,
+  createDelegation: e,
+  createDelegationForAccount: n,
+  createSpendPermission: s,
+  enableSpendPermissions: f,
+  executeSwap: l,
+  revokeDelegation: d,
+  revokeDelegationForAccount: g,
+  revokeSpendPermission: S,
+  sendEvmEoaUsdc: v,
+  sendEvmSmartAccountUsdc: T,
+  sendSolanaUsdc: u,
+  enrollPasskey: c,
+  initiateMfaEnrollment: E,
+  submitMfaEnrollment: A
+}, So = Object.keys(o);
+function vo(r) {
   return r in o;
 }
 export {
-  R as MFA_PROTECTED_ACTIONS,
+  So as MFA_PROTECTED_ACTIONS,
   o as MFA_PROTECTED_FUNCTIONS,
-  U as isMfaProtectedAction
+  vo as isMfaProtectedAction
 };

package/dist/native/index.native94.js

@@ -3,7 +3,7 @@ import { Analytics as i } from "./index.native2.js";
 import "./index.native3.js";
 import "jose";
 import { SignJWT as y } from "./index.native118.js";
-import { toAuthState as R } from "./index.native112.js";
+import { toAuthState as R } from "./index.native113.js";
 import "viem";
 import { getPlatformCrypto as c } from "./index.native10.js";
 import { sortKeys as T } from "./index.native108.js";

package/dist/native/index.native96.js

@@ -1,4 +1,4 @@
-import { hashTypedData as m, serializeErc6492Signature as u, encodeFunctionData as g, pad as d, getTypesForEIP712Domain as A, hashMessage as p } from "viem";
+import { hashTypedData as m, serializeErc6492Signature as u, encodeFunctionData as g, pad as d, getTypesForEIP712Domain as p, hashMessage as A } from "viem";
 import { getCurrentUserSync as l } from "./index.native47.js";
 import "@coinbase/cdp-api-client";
 import "./index.native2.js";
@@ -9,13 +9,14 @@ import { signEvmHash as i } from "./index.native31.js";
 import { signEvmTransaction as h } from "./index.native32.js";
 import { signEvmMessage as f } from "./index.native33.js";
 import { signEvmTypedData as y } from "./index.native34.js";
+import "./index.native111.js";
 import "./index.native109.js";
 import "@solana/web3.js";
 import "bs58";
 import { COINBASE_SMART_WALLET_FACTORY_ADDRESS as v, COINBASE_SMART_WALLET_FACTORY_ABI as w } from "./index.native119.js";
 import { signAndWrapTypedDataForSmartAccount as E } from "./index.native120.js";
 import { toAccount as T } from "./index.native121.js";
-function W(r) {
+function U(r) {
   const o = l();
   if (!o || !o.evmAccountObjects?.length && !o.evmSmartAccountObjects?.length)
     throw new Error(
@@ -42,7 +43,7 @@ function W(r) {
           message: e
         })).signature;
       else if ("raw" in e) {
-        const n = p(e);
+        const n = A(e);
         t = (await i({
           evmAccount: r,
           hash: n
@@ -101,7 +102,7 @@ function W(r) {
         const t = {
           domain: e.domain,
           types: {
-            EIP712Domain: A({
+            EIP712Domain: p({
               domain: e.domain
             }),
             ...e.types
@@ -130,5 +131,5 @@ function W(r) {
   });
 }
 export {
-  W as toViemAccount
+  U as toViemAccount
 };

package/dist/native/index.native99.js

@@ -1,20 +1,21 @@
-import { createStore as p } from "zustand";
+import { createStore as a } from "zustand";
 import { subscribeWithSelector as c, persist as d, createJSONStorage as h } from "./index.native122.js";
 import { EventEmitter as f } from "./index.native123.js";
 import "./index.native124.js";
+import { createProvider as u } from "./index.native125.js";
 import "viem";
 import "@coinbase/cdp-api-client";
-import { getPlatformStorage as u } from "./index.native10.js";
-import { createProvider as g } from "./index.native125.js";
+import { getPlatformStorage as g } from "./index.native10.js";
 import { onAuthStateChange as l } from "./index.native29.js";
 import "./index.native2.js";
 import "./index.native3.js";
 import "jose";
 import "./index.native108.js";
+import "./index.native111.js";
 import "./index.native109.js";
 import "@solana/web3.js";
 import "bs58";
-function T(e) {
+function j(e) {
   if (e.chains.length === 0)
     throw new Error("At least one chain must be configured");
   if (!e.transports)
@@ -22,11 +23,11 @@ function T(e) {
   const o = e.chains, s = e.transports;
   if (o.length === 0)
     throw new Error("No chains found in configuration");
-  const m = new f(), i = u(), a = {
+  const m = new f(), i = g(), p = {
     getItem: (t) => i.getItem(t),
     setItem: (t, r) => i.setItem(t, r),
     removeItem: (t) => i.removeItem(t)
-  }, n = p()(
+  }, n = a()(
     c(
       d(
         (t) => ({
@@ -38,7 +39,7 @@ function T(e) {
         }),
         {
           name: "cdp-provider-store",
-          storage: h(() => a)
+          storage: h(() => p)
         }
       )
     )
@@ -46,12 +47,12 @@ function T(e) {
   return n.persist.rehydrate(), l((t) => {
     n.getState().setUser(t);
   }), {
-    provider: g(m, n, {
+    provider: u(m, n, {
       chains: o,
       transports: s
     })
   };
 }
 export {
-  T as createCDPEmbeddedWallet
+  j as createCDPEmbeddedWallet
 };

package/dist/native-types/actions/initiateMfaVerification.d.ts

@@ -1,4 +1,4 @@
-import { MfaMethod } from '@coinbase/cdp-api-client';
+import { InitiateMfaVerificationResponseWrapper, MfaMethod } from '@coinbase/cdp-api-client';
 /**
  * Request parameters for initiating MFA verification.
  */
@@ -7,6 +7,12 @@ export type InitiateMfaVerificationOptions = {
     mfaMethod: MfaMethod;
     /** Optional idempotency key for safe retries. */
     idempotencyKey?: string;
+    /**
+     * Opaque challenge handle from the MFA listener's context, required when the
+     * project's `verificationScope` is `request`; ignored under `session`. Never
+     * inspected — pass through the value received from the listener unchanged.
+     */
+    challengeId?: string;
 };
 /**
  * Initiates an MFA verification flow for operations requiring MFA.
@@ -28,6 +34,7 @@ export type InitiateMfaVerificationOptions = {
  * await initiateMfaVerification({ mfaMethod: "sms" });
  * // SMS sent to user's phone - prompt for code
  * ```
- * @returns A promise that resolves if MFA initiation is successful.
+ * @returns A promise that resolves with the initiate response (opaque under `session`
+ *   scope, where it resolves to `{}`) once MFA initiation is successful.
  */
-export declare const initiateMfaVerification: (options: InitiateMfaVerificationOptions) => Promise<void>;
+export declare const initiateMfaVerification: (options: InitiateMfaVerificationOptions) => Promise<InitiateMfaVerificationResponseWrapper | void>;

package/dist/native-types/actions/submitMfaVerification.d.ts

@@ -8,6 +8,12 @@ export type SubmitMfaVerificationOptions = {
     mfaCode: string;
     /** Optional idempotency key for safe retries. */
     idempotencyKey?: string;
+    /**
+     * Opaque challenge handle from the MFA listener's context, required when the
+     * project's `verificationScope` is `request`; ignored under `session`. Never
+     * inspected — pass through the value received from the listener unchanged.
+     */
+    challengeId?: string;
 };
 /**
  * Submits an MFA code to complete the verification process.