@coinbase/cdp-core 0.0.41 → 0.0.43

package/README.md

@@ -215,6 +215,45 @@ const hash = await client.sendRawTransaction({
 
 Smart Accounts provide advanced account abstraction features, including user operations and paymaster support.
 
+#### Create Spend Permissions
+
+Spend permissions allow Smart Accounts to delegate spending authority to other accounts within specified limits and time periods. This enables use cases like subscription payments, automated DeFi strategies, and automatic topping up of AI agent funds.
+
+```typescript lines
+import { createSpendPermission, getCurrentUser } from "@coinbase/cdp-core";
+
+const user = await getCurrentUser();
+const smartAccount = user.evmSmartAccounts[0];
+
+const result = await createSpendPermission({
+  evmSmartAccount: smartAccount,
+  network: "base-sepolia",
+  spender: "0x742D35Cc6634C0532925a3b8D6Ec6F1C2b9c1E46", // Address that can spend tokens
+  token: "eth", // Token symbol ("eth", "usdc") or contract address
+  allowance: "1000000000000000000", // 1 ETH in wei
+  period: 86400, // 24 hours in seconds
+  start: new Date(), // Start time (optional, defaults to now)
+  end: new Date(Date.now() + 86400 * 30 * 1000), // End time (optional, defaults to no expiration)
+  useCdpPaymaster: true, // Use CDP paymaster for gas sponsorship
+});
+
+console.log("User Operation Hash:", result.userOperationHash);
+```
+
+You can also use `periodInDays` for a more human-friendly API:
+
+```typescript lines
+const result = await createSpendPermission({
+  evmSmartAccount: smartAccount,
+  network: "base-sepolia",
+  spender: "0x742D35Cc6634C0532925a3b8D6Ec6F1C2b9c1E46",
+  token: "usdc", // USDC token
+  allowance: "10000000", // 10 USDC (6 decimals)
+  periodInDays: 7, // Weekly recurring allowance
+  useCdpPaymaster: true
+});
+```
+
 ### Sign a Solana Transaction
 
 When your application is configured with `solana: { createOnLogin: true }`, you can sign Solana transactions:

package/dist/esm/index.native.js

@@ -2,53 +2,56 @@ import { nativeCrypto as r } from "./index.native2.js";
 import { nativeSecureStorage as o } from "./index.native3.js";
 import { nativeStorage as e } from "./index.native4.js";
 import { setPlatformServices as t } from "./index.native5.js";
-import { exportEvmAccount as S, exportSolanaAccount as d, getAccessToken as f, getCurrentUser as v, getUserOperation as l, initialize as u, isSignedIn as T, onAuthStateChange as A, sendEvmTransaction as x, sendSolanaTransaction as y, sendUserOperation as h, signEvmHash as O, signEvmMessage as P, signEvmTransaction as C, signEvmTypedData as D, signInWithEmail as I, signInWithSms as R, signOut as U, signSolanaMessage as W, signSolanaTransaction as M, verifyEmailOTP as k, verifySmsOTP as N } from "./index.native6.js";
-import { AuthManager as B } from "./index.native7.js";
-import { APIError as _, ErrorType as b, HttpErrorType as z, SendEvmTransactionWithEndUserAccountBodyNetwork as V, SendSolanaTransactionWithEndUserAccountBodyNetwork as j } from "@coinbase/cdp-api-client";
+import { exportEvmAccount as S, exportSolanaAccount as d, getAccessToken as f, getCurrentUser as l, getUserOperation as u, initialize as v, isSignedIn as T, onAuthStateChange as A, sendEvmTransaction as x, sendSolanaTransaction as y, sendUserOperation as h, signEvmHash as P, signEvmMessage as O, signEvmTransaction as I, signEvmTypedData as C, signInWithEmail as D, signInWithSms as R, signOut as U, signSolanaMessage as W, signSolanaTransaction as M, verifyEmailOTP as k, verifySmsOTP as N } from "./index.native6.js";
+import { createSpendPermission as B } from "./index.native7.js";
+import { AuthManager as V } from "./index.native8.js";
+import { APIError as b, ErrorType as z, HttpErrorType as j, SendEvmTransactionWithEndUserAccountBodyNetwork as q, SendSolanaTransactionWithEndUserAccountBodyNetwork as F } from "@coinbase/cdp-api-client";
 import "viem";
-import { createCDPEmbeddedWallet as F } from "./index.native8.js";
-import { EIP1193ProviderError as J, STANDARD_ERROR_CODES as K } from "./index.native9.js";
+import { createCDPEmbeddedWallet as J } from "./index.native9.js";
+import { EIP1193ProviderError as L, STANDARD_ERROR_CODES as Q } from "./index.native10.js";
 import "ox";
 import "zustand";
-import { toViemAccount as Q } from "./index.native10.js";
-import { ModuleResolutionError as Y } from "./index.native11.js";
+import { toViemAccount as Y } from "./index.native11.js";
+import { InputValidationError as $, ModuleResolutionError as rr } from "./index.native12.js";
 t({
   crypto: r,
   storage: e,
   secureStorage: o
 });
 export {
-  _ as APIError,
-  B as AuthManager,
-  J as EIP1193ProviderError,
-  b as ErrorType,
-  z as HttpErrorType,
-  Y as ModuleResolutionError,
-  K as STANDARD_ERROR_CODES,
-  V as SendEvmTransactionWithEndUserAccountBodyNetwork,
-  j as SendSolanaTransactionWithEndUserAccountBodyNetwork,
-  F as createCDPEmbeddedWallet,
+  b as APIError,
+  V as AuthManager,
+  L as EIP1193ProviderError,
+  z as ErrorType,
+  j as HttpErrorType,
+  $ as InputValidationError,
+  rr as ModuleResolutionError,
+  Q as STANDARD_ERROR_CODES,
+  q as SendEvmTransactionWithEndUserAccountBodyNetwork,
+  F as SendSolanaTransactionWithEndUserAccountBodyNetwork,
+  J as createCDPEmbeddedWallet,
+  B as createSpendPermission,
   S as exportEvmAccount,
   d as exportSolanaAccount,
   f as getAccessToken,
-  v as getCurrentUser,
-  l as getUserOperation,
-  u as initialize,
+  l as getCurrentUser,
+  u as getUserOperation,
+  v as initialize,
   T as isSignedIn,
   A as onAuthStateChange,
   x as sendEvmTransaction,
   y as sendSolanaTransaction,
   h as sendUserOperation,
-  O as signEvmHash,
-  P as signEvmMessage,
-  C as signEvmTransaction,
-  D as signEvmTypedData,
-  I as signInWithEmail,
+  P as signEvmHash,
+  O as signEvmMessage,
+  I as signEvmTransaction,
+  C as signEvmTypedData,
+  D as signInWithEmail,
   R as signInWithSms,
   U as signOut,
   W as signSolanaMessage,
   M as signSolanaTransaction,
-  Q as toViemAccount,
+  Y as toViemAccount,
   k as verifyEmailOTP,
   N as verifySmsOTP
 };

package/dist/esm/index.native10.js

@@ -1,118 +1,161 @@
-import { serializeErc6492Signature as i, encodeFunctionData as c, pad as u, getTypesForEIP712Domain as m } from "viem";
-import { getCurrentUser as g, signEvmHash as A, signEvmTypedData as l, signEvmTransaction as d, signEvmMessage as f } from "./index.native6.js";
+import "ox";
+import "viem";
+import "zustand";
 import "@coinbase/cdp-api-client";
-import { COINBASE_SMART_WALLET_FACTORY_ADDRESS as y, COINBASE_SMART_WALLET_FACTORY_ABI as p } from "./index.native22.js";
-import { signAndWrapTypedDataForSmartAccount as v } from "./index.native23.js";
-import { toAccount as w } from "./index.native24.js";
-async function F(n) {
-  const r = await g();
-  if (!r || !r.evmAccounts?.length && !r.evmSmartAccounts?.length)
-    throw new Error(
-      "No accounts found - user must be authenticated and have at least one EVM account or smart account"
+import { getCurrentUser as h } from "./index.native6.js";
+import "./index.native9.js";
+const n = {
+  rpc: {
+    invalidInput: -32e3,
+    resourceNotFound: -32001,
+    resourceUnavailable: -32002,
+    transactionRejected: -32003,
+    methodNotSupported: -32004,
+    limitExceeded: -32005,
+    parse: -32700,
+    invalidRequest: -32600,
+    methodNotFound: -32601,
+    invalidParams: -32602,
+    internal: -32603
+  },
+  provider: {
+    userRejectedRequest: 4001,
+    unauthorized: 4100,
+    unsupportedMethod: 4200,
+    disconnected: 4900,
+    chainDisconnected: 4901,
+    unsupportedChain: 4902
+  }
+};
+class o extends Error {
+  /**
+   * The error code from EIP1193ErrorCode enum.
+   */
+  code;
+  /**
+   * Creates a new EIP-1193 Provider error.
+   *
+   * @param code - The error code from EIP1193ErrorCode enum.
+   * @param message - The error message.
+   */
+  constructor(t, r) {
+    super(r), this.code = t;
+  }
+}
+class c extends Error {
+  /**
+   * The error code from RPCErrorCode type.
+   */
+  code;
+  /**
+   * Creates a new RPC Invalid Params error.
+   *
+   * @param code - The error code from RPCErrorCode type.
+   * @param message - The error message.
+   */
+  constructor(t, r) {
+    super(r), this.code = t;
+  }
+}
+class p extends Error {
+  /**
+   * Creates a new AccountTypeMismatchError.
+   *
+   * @param message - The error message.
+   */
+  constructor(t) {
+    super(t);
+  }
+}
+const l = /* @__PURE__ */ new Set([
+  "eth_accounts",
+  "eth_requestAccounts",
+  "personal_sign",
+  "eth_sendTransaction",
+  "eth_signTypedData_v4",
+  "eth_chainId",
+  "eth_sign",
+  "wallet_disconnect",
+  "wallet_switchEthereumChain",
+  "wallet_sendCalls",
+  "wallet_getCallsStatus",
+  "wallet_getCapabilities"
+]);
+function _(e, { chains: t }) {
+  const { method: r, params: s } = e;
+  if (typeof r != "string" || r.length === 0)
+    throw new c(
+      n.rpc.invalidParams,
+      "'method' must be a non-empty string."
+    );
+  const a = (s ?? [])[0]?.chainId;
+  if (typeof a == "string" && !t.some((d) => d.id === Number.parseInt(a, 16)))
+    throw new o(
+      n.provider.unsupportedChain,
+      `Chain ${a} not supported - make sure the provider is configured with the correct chains.`
+    );
+  if (s !== void 0 && !Array.isArray(s))
+    throw new c(
+      n.rpc.invalidParams,
+      "'params' must be an array if provided."
+    );
+  if (!l.has(r))
+    throw new o(
+      n.provider.unsupportedMethod,
+      `Method ${e.method} not supported`
+    );
+}
+async function i() {
+  const e = await h();
+  if (!e)
+    throw new o(
+      n.provider.unauthorized,
+      "User not connected"
+    );
+  return e;
+}
+async function y(e) {
+  const t = await i();
+  if (!t.evmAccounts?.includes(e) && !t.evmSmartAccounts?.includes(e))
+    throw new o(
+      n.provider.unauthorized,
+      "Address not owned by user"
+    );
+  return t;
+}
+async function u() {
+  const e = await i();
+  if (!e.evmAccounts?.[0])
+    throw new o(
+      n.provider.unauthorized,
+      "No EVM accounts available"
+    );
+  return e;
+}
+async function g() {
+  const e = await i();
+  if (!e.evmSmartAccounts?.[0])
+    throw new o(
+      n.provider.unauthorized,
+      "No EVM smart accounts available"
     );
-  const s = r.evmAccounts?.includes(n) ?? !1, o = r.evmSmartAccounts?.includes(n) ?? !1;
-  if (!s && !o)
-    throw new Error(`Cannot sign for address ${n} - not authorized for this account`);
-  return w({
-    address: n,
-    /**
-     * Signs a message using CDP's message signing functionality.
-     * Supports string messages, hex strings, and byte arrays.
-     *
-     * @param root0 - The parameters object
-     * @param root0.message - The message to sign, can be a string, hex string, or byte array
-     * @returns The signature as a hex string
-     */
-    async signMessage({ message: e }) {
-      let t;
-      if (typeof e == "string")
-        t = e;
-      else if ("raw" in e)
-        typeof e.raw == "string" ? t = e.raw : t = new TextDecoder().decode(e.raw);
-      else
-        throw new Error("Unsupported message format");
-      return (await f({
-        evmAccount: n,
-        message: t
-      })).signature;
-    },
-    /**
-     * Signs a transaction using CDP's transaction signing functionality.
-     * Converts Viem's transaction format to CDP's AllowedEvmTransactionType.
-     *
-     * @param transaction - The transaction to sign in Viem's format
-     * @returns The signature as a hex string
-     */
-    async signTransaction(e) {
-      const t = {
-        to: e.to,
-        value: e.value,
-        data: e.data,
-        nonce: e.nonce,
-        gas: e.gas,
-        chainId: e.chainId ?? 1
-      };
-      return e.gasPrice !== void 0 ? (t.maxFeePerGas = e.gasPrice, t.maxPriorityFeePerGas = e.gasPrice) : (t.maxFeePerGas = e.maxFeePerGas, t.maxPriorityFeePerGas = e.maxPriorityFeePerGas), (await d({
-        evmAccount: n,
-        transaction: t
-      })).signedTransaction;
-    },
-    /**
-     * Signs EIP-712 typed data using CDP's typed data signing functionality.
-     * Handles domain separation and type encoding according to the EIP-712 specification.
-     * For smart accounts, implements replay-safe hash and signature wrapping.
-     *
-     * @param params - The typed data parameters following the EIP-712 specification
-     * @returns The signature as a hex string
-     */
-    async signTypedData(e) {
-      if (o) {
-        const t = await v({
-          smartAccount: n,
-          ownerAddress: r.evmAccounts?.[0],
-          typedData: e
-        });
-        return i({
-          address: y,
-          data: c({
-            abi: p,
-            functionName: "createAccount",
-            args: [[u(r.evmAccounts?.[0])], 0n]
-          }),
-          signature: t.signature
-        });
-      } else {
-        const t = {
-          domain: e.domain,
-          types: {
-            EIP712Domain: m({
-              domain: e.domain
-            }),
-            ...e.types
-          },
-          primaryType: e.primaryType,
-          message: e.message
-        };
-        return (await l({
-          evmAccount: n,
-          typedData: t
-        })).signature;
-      }
-    },
-    /**
-     * Signs a raw message hash using CDP's message signing functionality.
-     *
-     * @param message - The message hash to sign
-     * @returns The signature as a hex string
-     */
-    async sign(e) {
-      return (await A({
-        evmAccount: n,
-        hash: e.hash
-      })).signature;
-    }
-  });
+  return e;
+}
+async function S({ errorMessage: e } = {}) {
+  const t = await u();
+  if (await u(), !!t.evmSmartAccounts?.length)
+    throw new p(e ?? "Method unsupported.");
+  return t;
 }
 export {
-  F as toViemAccount
+  p as AccountTypeMismatchError,
+  o as EIP1193ProviderError,
+  c as RPCRequestError,
+  n as STANDARD_ERROR_CODES,
+  S as validateIsUsingEOA,
+  _ as validateRequest,
+  i as validateUserConnected,
+  u as validateUserHasEvmAccount,
+  g as validateUserHasEvmSmartAccount,
+  y as validateUserOwnsAddress
 };

package/dist/esm/index.native100.js

@@ -1,120 +1,12 @@
-import { isJWK as p } from "./index.native110.js";
-import { decode as m } from "./index.native95.js";
-import y from "./index.native111.js";
-import { isCryptoKey as S, isKeyObject as K } from "./index.native109.js";
-let c;
-const f = async (e, r, s, i = !1) => {
-  c ||= /* @__PURE__ */ new WeakMap();
-  let n = c.get(e);
-  if (n?.[s])
-    return n[s];
-  const t = await y({ ...r, alg: s });
-  return i && Object.freeze(e), n ? n[s] = t : c.set(e, { [s]: t }), t;
-}, E = (e, r) => {
-  c ||= /* @__PURE__ */ new WeakMap();
-  let s = c.get(e);
-  if (s?.[r])
-    return s[r];
-  const i = e.type === "public", n = !!i;
-  let t;
-  if (e.asymmetricKeyType === "x25519") {
-    switch (r) {
-      case "ECDH-ES":
-      case "ECDH-ES+A128KW":
-      case "ECDH-ES+A192KW":
-      case "ECDH-ES+A256KW":
-        break;
-      default:
-        throw new TypeError("given KeyObject instance cannot be used for this algorithm");
-    }
-    t = e.toCryptoKey(e.asymmetricKeyType, n, i ? [] : ["deriveBits"]);
-  }
-  if (e.asymmetricKeyType === "ed25519") {
-    if (r !== "EdDSA" && r !== "Ed25519")
-      throw new TypeError("given KeyObject instance cannot be used for this algorithm");
-    t = e.toCryptoKey(e.asymmetricKeyType, n, [
-      i ? "verify" : "sign"
-    ]);
-  }
-  if (e.asymmetricKeyType === "rsa") {
-    let a;
-    switch (r) {
-      case "RSA-OAEP":
-        a = "SHA-1";
-        break;
-      case "RS256":
-      case "PS256":
-      case "RSA-OAEP-256":
-        a = "SHA-256";
-        break;
-      case "RS384":
-      case "PS384":
-      case "RSA-OAEP-384":
-        a = "SHA-384";
-        break;
-      case "RS512":
-      case "PS512":
-      case "RSA-OAEP-512":
-        a = "SHA-512";
-        break;
-      default:
-        throw new TypeError("given KeyObject instance cannot be used for this algorithm");
-    }
-    if (r.startsWith("RSA-OAEP"))
-      return e.toCryptoKey({
-        name: "RSA-OAEP",
-        hash: a
-      }, n, i ? ["encrypt"] : ["decrypt"]);
-    t = e.toCryptoKey({
-      name: r.startsWith("PS") ? "RSA-PSS" : "RSASSA-PKCS1-v1_5",
-      hash: a
-    }, n, [i ? "verify" : "sign"]);
-  }
-  if (e.asymmetricKeyType === "ec") {
-    const o = (/* @__PURE__ */ new Map([
-      ["prime256v1", "P-256"],
-      ["secp384r1", "P-384"],
-      ["secp521r1", "P-521"]
-    ])).get(e.asymmetricKeyDetails?.namedCurve);
-    if (!o)
-      throw new TypeError("given KeyObject instance cannot be used for this algorithm");
-    r === "ES256" && o === "P-256" && (t = e.toCryptoKey({
-      name: "ECDSA",
-      namedCurve: o
-    }, n, [i ? "verify" : "sign"])), r === "ES384" && o === "P-384" && (t = e.toCryptoKey({
-      name: "ECDSA",
-      namedCurve: o
-    }, n, [i ? "verify" : "sign"])), r === "ES512" && o === "P-521" && (t = e.toCryptoKey({
-      name: "ECDSA",
-      namedCurve: o
-    }, n, [i ? "verify" : "sign"])), r.startsWith("ECDH-ES") && (t = e.toCryptoKey({
-      name: "ECDH",
-      namedCurve: o
-    }, n, i ? [] : ["deriveBits"]));
-  }
-  if (!t)
-    throw new TypeError("given KeyObject instance cannot be used for this algorithm");
-  return s ? s[r] = t : c.set(e, { [r]: t }), t;
-}, d = async (e, r) => {
-  if (e instanceof Uint8Array || S(e))
-    return e;
-  if (K(e)) {
-    if (e.type === "secret")
-      return e.export();
-    if ("toCryptoKey" in e && typeof e.toCryptoKey == "function")
-      try {
-        return E(e, r);
-      } catch (i) {
-        if (i instanceof TypeError)
-          throw i;
-      }
-    let s = e.export({ format: "jwk" });
-    return f(e, s, r);
-  }
-  if (p(e))
-    return e.k ? m(e.k) : f(e, e, r, !0);
-  throw new Error("unreachable");
+import n from "./index.native110.js";
+import s from "./index.native111.js";
+import a from "./index.native112.js";
+const y = async (t, o, e) => {
+  const r = await a(t, o, "sign");
+  s(t, r);
+  const i = await crypto.subtle.sign(n(t, r.algorithm), r, e);
+  return new Uint8Array(i);
 };
 export {
-  d as default
+  y as default
 };

package/dist/esm/index.native101.js

@@ -1,81 +1,22 @@
-import { Hash as g, createView as l, aexists as b, toBytes as a, abytes as d, aoutput as x, clean as w } from "./index.native91.js";
-function y(o, t, s, n) {
-  if (typeof o.setBigUint64 == "function")
-    return o.setBigUint64(t, s, n);
-  const i = BigInt(32), h = BigInt(4294967295), e = Number(s >> i & h), r = Number(s & h), c = n ? 4 : 0, u = n ? 0 : 4;
-  o.setUint32(t + c, e, n), o.setUint32(t + u, r, n);
-}
-function U(o, t, s) {
-  return o & t ^ ~o & s;
-}
-function _(o, t, s) {
-  return o & t ^ o & s ^ t & s;
-}
-class m extends g {
-  constructor(t, s, n, i) {
-    super(), this.finished = !1, this.length = 0, this.pos = 0, this.destroyed = !1, this.blockLen = t, this.outputLen = s, this.padOffset = n, this.isLE = i, this.buffer = new Uint8Array(t), this.view = l(this.buffer);
-  }
-  update(t) {
-    b(this), t = a(t), d(t);
-    const { view: s, buffer: n, blockLen: i } = this, h = t.length;
-    for (let e = 0; e < h; ) {
-      const r = Math.min(i - this.pos, h - e);
-      if (r === i) {
-        const c = l(t);
-        for (; i <= h - e; e += i)
-          this.process(c, e);
-        continue;
-      }
-      n.set(t.subarray(e, e + r), this.pos), this.pos += r, e += r, this.pos === i && (this.process(s, 0), this.pos = 0);
+const a = (...o) => {
+  const t = o.filter(Boolean);
+  if (t.length === 0 || t.length === 1)
+    return !0;
+  let e;
+  for (const s of t) {
+    const r = Object.keys(s);
+    if (!e || e.size === 0) {
+      e = new Set(r);
+      continue;
+    }
+    for (const n of r) {
+      if (e.has(n))
+        return !1;
+      e.add(n);
     }
-    return this.length += t.length, this.roundClean(), this;
-  }
-  digestInto(t) {
-    b(this), x(t, this), this.finished = !0;
-    const { buffer: s, view: n, blockLen: i, isLE: h } = this;
-    let { pos: e } = this;
-    s[e++] = 128, w(this.buffer.subarray(e)), this.padOffset > i - e && (this.process(n, 0), e = 0);
-    for (let f = e; f < i; f++)
-      s[f] = 0;
-    y(n, i - 8, BigInt(this.length * 8), h), this.process(n, 0);
-    const r = l(t), c = this.outputLen;
-    if (c % 4)
-      throw new Error("_sha2: outputLen should be aligned to 32bit");
-    const u = c / 4, p = this.get();
-    if (u > p.length)
-      throw new Error("_sha2: outputLen bigger than state");
-    for (let f = 0; f < u; f++)
-      r.setUint32(4 * f, p[f], h);
-  }
-  digest() {
-    const { buffer: t, outputLen: s } = this;
-    this.digestInto(t);
-    const n = t.slice(0, s);
-    return this.destroy(), n;
-  }
-  _cloneInto(t) {
-    t || (t = new this.constructor()), t.set(...this.get());
-    const { blockLen: s, buffer: n, length: i, finished: h, destroyed: e, pos: r } = this;
-    return t.destroyed = e, t.finished = h, t.length = i, t.pos = r, i % s && t.buffer.set(n), t;
-  }
-  clone() {
-    return this._cloneInto();
   }
-}
-const B = /* @__PURE__ */ Uint32Array.from([
-  1779033703,
-  3144134277,
-  1013904242,
-  2773480762,
-  1359893119,
-  2600822924,
-  528734635,
-  1541459225
-]);
+  return !0;
+};
 export {
-  U as Chi,
-  m as HashMD,
-  _ as Maj,
-  B as SHA256_IV,
-  y as setBigUint64
+  a as default
 };