@coinbase/cdp-core 0.0.23 → 0.0.25

package/dist/esm/index7.js

@@ -1,17 +1,194 @@
-import "@coinbase/cdp-api-client";
-const r = (u, c, e) => {
-  const s = new Date(c).getTime(), m = {
-    userId: e.userId,
-    evmAccounts: e.evmAccounts?.map((t) => t) ?? [],
-    evmSmartAccounts: e.evmSmartAccounts?.map((t) => t) ?? [],
-    authenticationMethods: e.authenticationMethods.reduce((t, o) => (t[o.type] = o, t), {})
-  };
-  return {
-    accessToken: u,
-    expiresAt: s,
-    user: m
-  };
-};
+import { logOutEndUser as h, refreshAccessToken as l, registerTemporaryWalletSecret as c } from "@coinbase/cdp-api-client";
+import { SignJWT as o } from "./index22.js";
+import "viem";
+import { toAuthState as u } from "./index8.js";
+import { createKeyPair as S } from "./index23.js";
+import { generateRandomId as i } from "./index24.js";
+import { hash as w } from "./index25.js";
+import { sortKeys as f } from "./index14.js";
+const n = 60 * 1e3;
+class C {
+  projectId;
+  authState = null;
+  walletSecret = null;
+  authStateChangeCallbacks = [];
+  initPromise = null;
+  /**
+   * Initializes the token manager.
+   *
+   * @param projectId - The project ID.
+   */
+  constructor(t) {
+    this.projectId = t, this.initPromise = this._doInitialize();
+  }
+  /**
+   * Gets the current user, or null if there is no user signed in.
+   *
+   * @returns The current user.
+   */
+  async getUser() {
+    return this.authState?.user ?? null;
+  }
+  /**
+   * Returns whether the user is signed in - i.e., whether there is an unexpired
+   * access token and user.
+   *
+   * @returns True if the user is signed in, false otherwise.
+   */
+  async isSignedIn() {
+    return this.authState ? Promise.resolve(this.authState.expiresAt > Date.now()) : Promise.resolve(!1);
+  }
+  /**
+   * Signs out the user, clearing all authentication state.
+   */
+  async signOut() {
+    try {
+      await h(this.projectId);
+    } catch {
+    } finally {
+      await this.clearAuthState();
+    }
+  }
+  /**
+   * Adds a callback to be called when the auth state changes.
+   *
+   * @param callback - The function to call when the auth state changes.
+   */
+  addAuthStateChangeCallback(t) {
+    this.authStateChangeCallbacks.push(t), t(this.authState?.user ?? null);
+  }
+  /**
+   * Gets the access token, refreshing it if it is expired. Returns null if the user is not
+   * signed in.
+   *
+   * @returns The access token.
+   */
+  async getToken() {
+    return this.shouldRefreshToken() && await this.refreshAccessToken(), this.authState?.accessToken ?? null;
+  }
+  /**
+   * Gets the currently registered wallet secret ID. Rejects if the user is not signed in.
+   *
+   * @returns The wallet secret ID.
+   */
+  async getWalletSecretId() {
+    if (!await this.isSignedIn())
+      throw new Error("Cannot get wallet secret ID if the user is not signed in");
+    return this.shouldRefreshWalletSecret() && await this.refreshWalletSecret(), this.walletSecret.walletSecretId;
+  }
+  /**
+   * Gets the X-Wallet-Auth header. Rejects if the user is not signed in.
+   *
+   * @param options - The options for the request.
+   * @param options.requestMethod - The HTTP method of the request.
+   * @param options.requestHost - The host of the request.
+   * @param options.requestPath - The path of the request.
+   * @param options.requestData - The data of the request.
+   * @returns The X-Wallet-Auth header.
+   */
+  async getXWalletAuth(t) {
+    if (!await this.isSignedIn())
+      throw new Error("Cannot get X-Wallet-Auth header if the user is not signed in");
+    this.shouldRefreshWalletSecret() && await this.refreshWalletSecret();
+    const e = `${t.requestMethod} ${t.requestHost}${t.requestPath}`, a = Math.floor(Date.now() / 1e3), r = {
+      uris: [e]
+    };
+    if (t.requestData && Object.keys(t.requestData).length > 0) {
+      const s = f(t.requestData);
+      r.reqHash = await w(new TextEncoder().encode(JSON.stringify(s)));
+    }
+    return await new o(r).setProtectedHeader({ alg: "ES256", typ: "JWT" }).setIssuedAt(a).setNotBefore(a).setJti(await i()).sign(this.walletSecret.keyPair.privateKey);
+  }
+  /**
+   * Sets the authentication state.
+   *
+   * @param authState - The authentication state.
+   */
+  async setAuthState(t) {
+    this.authState = t, this.authStateChangeCallbacks.forEach((e) => e(this.authState?.user ?? null));
+  }
+  /**
+   * Clears the authentication state.
+   */
+  async clearAuthState() {
+    this.authState = null, this.walletSecret = null, this.authStateChangeCallbacks.forEach((t) => t(null));
+  }
+  /**
+   * Ensures the AuthManager is initialized before proceeding.
+   * If initialization is already in progress, waits for it to complete.
+   */
+  async ensureInitialized() {
+    if (this.initPromise) {
+      await this.initPromise;
+      return;
+    }
+    throw new Error("AuthManager not initialized");
+  }
+  /**
+   * Internal async initialization logic.
+   */
+  async _doInitialize() {
+    try {
+      await this.refreshAccessToken();
+    } catch (t) {
+      console.warn("Failed to refresh access token during initialization:", t);
+    }
+  }
+  /**
+   * Returns whether the token should be refreshed.
+   *
+   * @returns True if the token should be refreshed, false otherwise.
+   */
+  shouldRefreshToken() {
+    return !(this.authState && this.authState.expiresAt > Date.now() + n);
+  }
+  /**
+   * Refreshes the access token and transitions the auth state accordingly.
+   * If a refresh is already in progress, it will wait for that refresh to complete.
+   *
+   * @returns The new access token.
+   */
+  async refreshAccessToken() {
+    try {
+      const t = await l(this.projectId, {
+        grantType: "refresh_token"
+      }), e = u(
+        t.accessToken,
+        t.validUntil,
+        t.endUser
+      );
+      await this.setAuthState(e);
+    } catch {
+      await this.signOut();
+    }
+  }
+  /**
+   * Returns whether the wallet secret should be refreshed.
+   *
+   * @returns True if the wallet secret should be refreshed, false otherwise.
+   */
+  shouldRefreshWalletSecret() {
+    return !(this.walletSecret && this.walletSecret.expiresAt > Date.now() + n);
+  }
+  /**
+   * Refreshes the wallet secret. Assumes the user is signed in.
+   *
+   * @returns The wallet secret.
+   */
+  async refreshWalletSecret() {
+    const t = this.walletSecret?.walletSecretId ?? await i(), e = this.walletSecret?.keyPair ?? await S(), a = this.authState.expiresAt, r = new Date(a).toISOString();
+    this.walletSecret = { walletSecretId: t, keyPair: e, expiresAt: a };
+    try {
+      await c(this.projectId, this.authState.user.userId, {
+        walletSecretId: t,
+        publicKey: e.publicKeyBase64,
+        validUntil: r
+      });
+    } catch (s) {
+      throw this.walletSecret = null, s;
+    }
+  }
+}
 export {
-  r as toAuthState
+  C as AuthManager
 };

package/dist/esm/index70.js

@@ -1,19 +1,13 @@
-import { FlattenedSign as n } from "./index82.js";
-class o {
-  #e;
-  constructor(e) {
-    this.#e = new n(e);
-  }
-  setProtectedHeader(e) {
-    return this.#e.setProtectedHeader(e), this;
-  }
-  async sign(e, r) {
-    const t = await this.#e.sign(e, r);
-    if (t.payload === void 0)
-      throw new TypeError("use the flattened module for creating JWS with b64: false");
-    return `${t.protected}.${t.payload}.${t.signature}`;
-  }
+function a(r, n) {
+  let t = r.toString();
+  const i = t.startsWith("-");
+  i && (t = t.slice(1)), t = t.padStart(n, "0");
+  let [l, e] = [
+    t.slice(0, t.length - n),
+    t.slice(t.length - n)
+  ];
+  return e = e.replace(/(0+)$/, ""), `${i ? "-" : ""}${l || "0"}${e ? `.${e}` : ""}`;
 }
 export {
-  o as CompactSign
+  a as formatUnits
 };

package/dist/esm/index71.js

@@ -1,25 +1,19 @@
-class c extends Error {
-  static code = "ERR_JOSE_GENERIC";
-  code = "ERR_JOSE_GENERIC";
-  constructor(s, e) {
-    super(s, e), this.name = this.constructor.name, Error.captureStackTrace?.(this, this.constructor);
+import { FlattenedSign as n } from "./index83.js";
+class o {
+  #e;
+  constructor(e) {
+    this.#e = new n(e);
+  }
+  setProtectedHeader(e) {
+    return this.#e.setProtectedHeader(e), this;
+  }
+  async sign(e, r) {
+    const t = await this.#e.sign(e, r);
+    if (t.payload === void 0)
+      throw new TypeError("use the flattened module for creating JWS with b64: false");
+    return `${t.protected}.${t.payload}.${t.signature}`;
   }
-}
-class E extends c {
-  static code = "ERR_JOSE_NOT_SUPPORTED";
-  code = "ERR_JOSE_NOT_SUPPORTED";
-}
-class o extends c {
-  static code = "ERR_JWS_INVALID";
-  code = "ERR_JWS_INVALID";
-}
-class r extends c {
-  static code = "ERR_JWT_INVALID";
-  code = "ERR_JWT_INVALID";
 }
 export {
-  c as JOSEError,
-  E as JOSENotSupported,
-  o as JWSInvalid,
-  r as JWTInvalid
+  o as CompactSign
 };

package/dist/esm/index72.js

@@ -1,53 +1,25 @@
-import { encoder as n } from "./index83.js";
-import e from "./index84.js";
-import i from "./index85.js";
-import o from "./index86.js";
-function s(r, t) {
-  if (!Number.isFinite(t))
-    throw new TypeError(`Invalid ${r} input`);
-  return t;
-}
-class d {
-  #t;
-  constructor(t) {
-    if (!o(t))
-      throw new TypeError("JWT Claims Set MUST be an object");
-    this.#t = structuredClone(t);
-  }
-  data() {
-    return n.encode(JSON.stringify(this.#t));
-  }
-  get iss() {
-    return this.#t.iss;
-  }
-  set iss(t) {
-    this.#t.iss = t;
-  }
-  get sub() {
-    return this.#t.sub;
-  }
-  set sub(t) {
-    this.#t.sub = t;
-  }
-  get aud() {
-    return this.#t.aud;
-  }
-  set aud(t) {
-    this.#t.aud = t;
-  }
-  set jti(t) {
-    this.#t.jti = t;
-  }
-  set nbf(t) {
-    typeof t == "number" ? this.#t.nbf = s("setNotBefore", t) : t instanceof Date ? this.#t.nbf = s("setNotBefore", e(t)) : this.#t.nbf = e(/* @__PURE__ */ new Date()) + i(t);
-  }
-  set exp(t) {
-    typeof t == "number" ? this.#t.exp = s("setExpirationTime", t) : t instanceof Date ? this.#t.exp = s("setExpirationTime", e(t)) : this.#t.exp = e(/* @__PURE__ */ new Date()) + i(t);
-  }
-  set iat(t) {
-    typeof t > "u" ? this.#t.iat = e(/* @__PURE__ */ new Date()) : t instanceof Date ? this.#t.iat = s("setIssuedAt", e(t)) : typeof t == "string" ? this.#t.iat = s("setIssuedAt", e(/* @__PURE__ */ new Date()) + i(t)) : this.#t.iat = s("setIssuedAt", t);
+class c extends Error {
+  static code = "ERR_JOSE_GENERIC";
+  code = "ERR_JOSE_GENERIC";
+  constructor(s, e) {
+    super(s, e), this.name = this.constructor.name, Error.captureStackTrace?.(this, this.constructor);
   }
 }
+class E extends c {
+  static code = "ERR_JOSE_NOT_SUPPORTED";
+  code = "ERR_JOSE_NOT_SUPPORTED";
+}
+class o extends c {
+  static code = "ERR_JWS_INVALID";
+  code = "ERR_JWS_INVALID";
+}
+class r extends c {
+  static code = "ERR_JWT_INVALID";
+  code = "ERR_JWT_INVALID";
+}
 export {
-  d as JWTClaimsBuilder
+  c as JOSEError,
+  E as JOSENotSupported,
+  o as JWSInvalid,
+  r as JWTInvalid
 };

package/dist/esm/index73.js

@@ -1,4 +1,53 @@
-const o = "2.33.0";
+import { encoder as n } from "./index84.js";
+import e from "./index85.js";
+import i from "./index86.js";
+import o from "./index87.js";
+function s(r, t) {
+  if (!Number.isFinite(t))
+    throw new TypeError(`Invalid ${r} input`);
+  return t;
+}
+class d {
+  #t;
+  constructor(t) {
+    if (!o(t))
+      throw new TypeError("JWT Claims Set MUST be an object");
+    this.#t = structuredClone(t);
+  }
+  data() {
+    return n.encode(JSON.stringify(this.#t));
+  }
+  get iss() {
+    return this.#t.iss;
+  }
+  set iss(t) {
+    this.#t.iss = t;
+  }
+  get sub() {
+    return this.#t.sub;
+  }
+  set sub(t) {
+    this.#t.sub = t;
+  }
+  get aud() {
+    return this.#t.aud;
+  }
+  set aud(t) {
+    this.#t.aud = t;
+  }
+  set jti(t) {
+    this.#t.jti = t;
+  }
+  set nbf(t) {
+    typeof t == "number" ? this.#t.nbf = s("setNotBefore", t) : t instanceof Date ? this.#t.nbf = s("setNotBefore", e(t)) : this.#t.nbf = e(/* @__PURE__ */ new Date()) + i(t);
+  }
+  set exp(t) {
+    typeof t == "number" ? this.#t.exp = s("setExpirationTime", t) : t instanceof Date ? this.#t.exp = s("setExpirationTime", e(t)) : this.#t.exp = e(/* @__PURE__ */ new Date()) + i(t);
+  }
+  set iat(t) {
+    typeof t > "u" ? this.#t.iat = e(/* @__PURE__ */ new Date()) : t instanceof Date ? this.#t.iat = s("setIssuedAt", e(t)) : typeof t == "string" ? this.#t.iat = s("setIssuedAt", e(/* @__PURE__ */ new Date()) + i(t)) : this.#t.iat = s("setIssuedAt", t);
+  }
+}
 export {
-  o as version
+  d as JWTClaimsBuilder
 };

package/dist/esm/index74.js

@@ -1,4 +1,4 @@
-import { BaseError as o } from "./index47.js";
+import { BaseError as o } from "./index48.js";
 class i extends o {
   constructor({ offset: e }) {
     super(`Offset \`${e}\` cannot be negative.`, {

package/dist/esm/index75.js

@@ -1,22 +1,4 @@
-const o = /* @__PURE__ */ BigInt(4294967295), i = /* @__PURE__ */ BigInt(32);
-function s(t, r = !1) {
-  return r ? { h: Number(t & o), l: Number(t >> i & o) } : { h: Number(t >> i & o) | 0, l: Number(t & o) | 0 };
-}
-function h(t, r = !1) {
-  const n = t.length;
-  let l = new Uint32Array(n), c = new Uint32Array(n);
-  for (let e = 0; e < n; e++) {
-    const { h: u, l: f } = s(t[e], r);
-    [l[e], c[e]] = [u, f];
-  }
-  return [l, c];
-}
-const m = (t, r, n) => t << n | r >>> 32 - n, A = (t, r, n) => r << n | t >>> 32 - n, B = (t, r, n) => r << n - 32 | t >>> 64 - n, a = (t, r, n) => t << n - 32 | r >>> 64 - n;
+const o = "2.33.0";
 export {
-  s as fromBig,
-  B as rotlBH,
-  a as rotlBL,
-  m as rotlSH,
-  A as rotlSL,
-  h as split
+  o as version
 };

package/dist/esm/index76.js

@@ -1,82 +1,22 @@
-/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */
-function o(e) {
-  return e instanceof Uint8Array || ArrayBuffer.isView(e) && e.constructor.name === "Uint8Array";
-}
-function w(e) {
-  if (!Number.isSafeInteger(e) || e < 0)
-    throw new Error("positive integer expected, got " + e);
-}
-function r(e, ...t) {
-  if (!o(e))
-    throw new Error("Uint8Array expected");
-  if (t.length > 0 && !t.includes(e.length))
-    throw new Error("Uint8Array expected of length " + t + ", got length=" + e.length);
-}
-function h(e, t = !0) {
-  if (e.destroyed)
-    throw new Error("Hash instance has been destroyed");
-  if (t && e.finished)
-    throw new Error("Hash#digest() has already been called");
-}
-function l(e, t) {
-  r(e);
-  const n = t.outputLen;
-  if (e.length < n)
-    throw new Error("digestInto() expects output buffer of length at least " + n);
-}
-function a(e) {
-  return new Uint32Array(e.buffer, e.byteOffset, Math.floor(e.byteLength / 4));
-}
-function g(...e) {
-  for (let t = 0; t < e.length; t++)
-    e[t].fill(0);
-}
-function p(e) {
-  return new DataView(e.buffer, e.byteOffset, e.byteLength);
-}
-function b(e, t) {
-  return e << 32 - t | e >>> t;
-}
-const i = new Uint8Array(new Uint32Array([287454020]).buffer)[0] === 68;
-function u(e) {
-  return e << 24 & 4278190080 | e << 8 & 16711680 | e >>> 8 & 65280 | e >>> 24 & 255;
-}
-function c(e) {
-  for (let t = 0; t < e.length; t++)
-    e[t] = u(e[t]);
-  return e;
-}
-const x = i ? (e) => e : c;
-function s(e) {
-  if (typeof e != "string")
-    throw new Error("string expected");
-  return new Uint8Array(new TextEncoder().encode(e));
-}
-function y(e) {
-  return typeof e == "string" && (e = s(e)), r(e), e;
-}
-class d {
-}
-function E(e) {
-  const t = (f) => e().update(y(f)).digest(), n = e();
-  return t.outputLen = n.outputLen, t.blockLen = n.blockLen, t.create = () => e(), t;
-}
+const o = /* @__PURE__ */ BigInt(4294967295), i = /* @__PURE__ */ BigInt(32);
+function s(t, r = !1) {
+  return r ? { h: Number(t & o), l: Number(t >> i & o) } : { h: Number(t >> i & o) | 0, l: Number(t & o) | 0 };
+}
+function h(t, r = !1) {
+  const n = t.length;
+  let l = new Uint32Array(n), c = new Uint32Array(n);
+  for (let e = 0; e < n; e++) {
+    const { h: u, l: f } = s(t[e], r);
+    [l[e], c[e]] = [u, f];
+  }
+  return [l, c];
+}
+const m = (t, r, n) => t << n | r >>> 32 - n, A = (t, r, n) => r << n | t >>> 32 - n, B = (t, r, n) => r << n - 32 | t >>> 64 - n, a = (t, r, n) => t << n - 32 | r >>> 64 - n;
 export {
-  d as Hash,
-  r as abytes,
-  h as aexists,
-  w as anumber,
-  l as aoutput,
-  u as byteSwap,
-  c as byteSwap32,
-  g as clean,
-  E as createHasher,
-  p as createView,
-  o as isBytes,
-  i as isLE,
-  b as rotr,
-  x as swap32IfBE,
-  y as toBytes,
-  a as u32,
-  s as utf8ToBytes
+  s as fromBig,
+  B as rotlBH,
+  a as rotlBL,
+  m as rotlSH,
+  A as rotlSL,
+  h as split
 };