@coinbase/cdp-core 0.0.49 → 0.0.51

package/dist/esm/index.web15.js

@@ -1,34 +1,220 @@
-function a(e) {
-  if (typeof btoa < "u")
-    return btoa(
-      Array.from(e).map((t) => String.fromCharCode(t)).join("")
-    );
-  const c = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
-  let r = "";
-  for (let t = 0; t < e.length; t += 3) {
-    const h = e[t], n = t + 1 < e.length ? e[t + 1] : 0, s = t + 2 < e.length ? e[t + 2] : 0, o = h << 16 | n << 8 | s;
-    r += c.charAt(o >> 18 & 63), r += c.charAt(o >> 12 & 63), r += t + 1 < e.length ? c.charAt(o >> 6 & 63) : "=", r += t + 2 < e.length ? c.charAt(o & 63) : "=";
-  }
-  return r;
-}
-function g(e) {
-  if (typeof atob < "u") {
-    const n = atob(e), s = new Uint8Array(n.length);
-    for (let o = 0; o < n.length; o++)
-      s[o] = n.charCodeAt(o);
-    return s;
-  }
-  const c = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/", r = {};
-  for (let n = 0; n < c.length; n++)
-    r[c[n]] = n;
-  const t = e.replace(/[^A-Za-z0-9+/]/g, ""), h = [];
-  for (let n = 0; n < t.length; n += 4) {
-    const s = r[t[n]] || 0, o = r[t[n + 1]] || 0, l = r[t[n + 2]] || 0, f = r[t[n + 3]] || 0, i = s << 18 | o << 12 | l << 6 | f;
-    h.push(i >> 16 & 255), n + 2 < t.length && h.push(i >> 8 & 255), n + 3 < t.length && h.push(i & 255);
-  }
-  return new Uint8Array(h);
+import { logOutEndUser as l, refreshAccessToken as o, registerTemporaryWalletSecret as c } from "@coinbase/cdp-api-client";
+import { SignJWT as u } from "./index.web33.js";
+import { toAuthState as f } from "./index.web24.js";
+import "viem";
+import { getPlatformCrypto as n } from "./index.web2.js";
+import { sortKeys as S } from "./index.web29.js";
+import { getCoreOAuthManager as w } from "./index.web30.js";
+const i = 60 * 1e3;
+class I {
+  projectId;
+  authState = null;
+  walletSecret = null;
+  authStateChangeCallbacks = [];
+  initPromise = null;
+  refreshTimeout = null;
+  /**
+   * Initializes the token manager.
+   *
+   * @param projectId - The project ID.
+   */
+  constructor(e) {
+    this.projectId = e, this.initPromise = this._doInitialize();
+  }
+  /**
+   * Gets the current user, or null if there is no user signed in.
+   *
+   * @returns The current user.
+   */
+  async getUser() {
+    return this.authState?.user ?? null;
+  }
+  /**
+   * Returns whether the user is signed in - i.e., whether there is an unexpired
+   * access token and user. Attempts to refresh the token if it's expired.
+   *
+   * @returns True if the user is signed in, false otherwise.
+   */
+  async isSignedIn() {
+    if (!this.authState)
+      return !1;
+    if (this.authState.expiresAt > Date.now() + i)
+      return !0;
+    try {
+      return await this.getToken() !== null;
+    } catch {
+      return !1;
+    }
+  }
+  /**
+   * Signs out the user, clearing all authentication state.
+   */
+  async signOut() {
+    try {
+      await l(this.projectId);
+    } catch {
+    } finally {
+      await this.clearAuthState();
+    }
+  }
+  /**
+   * Adds a callback to be called when the auth state changes.
+   *
+   * @param callback - The function to call when the auth state changes.
+   */
+  addAuthStateChangeCallback(e) {
+    this.authStateChangeCallbacks.push(e), e(this.authState?.user ?? null);
+  }
+  /**
+   * Gets the access token, refreshing it if it is expired. Returns null if the user is not
+   * signed in.
+   *
+   * @returns The access token.
+   */
+  async getToken() {
+    return this.shouldRefreshToken() && await this.refreshAccessToken(), this.authState?.accessToken ?? null;
+  }
+  /**
+   * Gets the currently registered wallet secret ID. Rejects if the user is not signed in.
+   *
+   * @returns The wallet secret ID.
+   */
+  async getWalletSecretId() {
+    if (!await this.isSignedIn())
+      throw new Error("Cannot get wallet secret ID if the user is not signed in");
+    return this.shouldRefreshWalletSecret() && await this.refreshWalletSecret(), this.walletSecret.walletSecretId;
+  }
+  /**
+   * Gets the X-Wallet-Auth header. Rejects if the user is not signed in.
+   *
+   * @param options - The options for the request.
+   * @param options.requestMethod - The HTTP method of the request.
+   * @param options.requestHost - The host of the request.
+   * @param options.requestPath - The path of the request.
+   * @param options.requestData - The data of the request.
+   * @returns The X-Wallet-Auth header.
+   */
+  async getXWalletAuth(e) {
+    if (!await this.isSignedIn())
+      throw new Error("Cannot get X-Wallet-Auth header if the user is not signed in");
+    this.shouldRefreshWalletSecret() && await this.refreshWalletSecret();
+    const t = `${e.requestMethod} ${e.requestHost}${e.requestPath}`, r = Math.floor(Date.now() / 1e3), a = n(), s = {
+      uris: [t]
+    };
+    if (e.requestData && Object.keys(e.requestData).length > 0) {
+      const h = S(e.requestData);
+      s.reqHash = await a.hash(new TextEncoder().encode(JSON.stringify(h)));
+    }
+    return await new u(s).setProtectedHeader({ alg: "ES256", typ: "JWT" }).setIssuedAt(r).setNotBefore(r).setJti(a.generateRandomId()).sign(this.walletSecret.keyPair.privateKey);
+  }
+  /**
+   * Sets the authentication state.
+   *
+   * @param authState - The authentication state.
+   */
+  async setAuthState(e) {
+    this.authState = e, this.authStateChangeCallbacks.forEach((t) => t(this.authState?.user ?? null)), this.scheduleTokenRefresh();
+  }
+  /**
+   * Clears the authentication state.
+   */
+  async clearAuthState() {
+    this.authState = null, this.walletSecret = null, this.cancelTokenRefresh(), this.authStateChangeCallbacks.forEach((e) => e(null));
+  }
+  /**
+   * Ensures the AuthManager is initialized before proceeding.
+   * If initialization is already in progress, waits for it to complete.
+   */
+  async ensureInitialized() {
+    if (this.initPromise) {
+      await this.initPromise;
+      return;
+    }
+    throw new Error("AuthManager not initialized");
+  }
+  /**
+   * Internal async initialization logic.
+   */
+  async _doInitialize() {
+    try {
+      await this.refreshAccessToken(), await w().handleOAuthCode();
+    } catch (e) {
+      console.warn("Failed to refresh access token during initialization:", e);
+    }
+  }
+  /**
+   * Returns whether the token should be refreshed.
+   *
+   * @returns True if the token should be refreshed, false otherwise.
+   */
+  shouldRefreshToken() {
+    return !(this.authState && this.authState.expiresAt > Date.now() + i);
+  }
+  /**
+   * Refreshes the access token and transitions the auth state accordingly.
+   * If a refresh is already in progress, it will wait for that refresh to complete.
+   *
+   * @returns The new access token.
+   */
+  async refreshAccessToken() {
+    try {
+      const e = await o(this.projectId, {
+        grantType: "refresh_token"
+      }), t = f(
+        e.accessToken,
+        e.validUntil,
+        e.endUser
+      );
+      await this.setAuthState(t);
+    } catch {
+      await this.signOut();
+    }
+  }
+  /**
+   * Returns whether the wallet secret should be refreshed.
+   *
+   * @returns True if the wallet secret should be refreshed, false otherwise.
+   */
+  shouldRefreshWalletSecret() {
+    return !(this.walletSecret && this.walletSecret.expiresAt > Date.now() + i);
+  }
+  /**
+   * Refreshes the wallet secret. Assumes the user is signed in.
+   *
+   * @returns The wallet secret.
+   */
+  async refreshWalletSecret() {
+    const e = n(), t = this.walletSecret?.walletSecretId ?? e.generateRandomId(), r = this.walletSecret?.keyPair ?? await e.createKeyPair(), a = this.authState.expiresAt, s = new Date(a).toISOString();
+    this.walletSecret = { walletSecretId: t, keyPair: r, expiresAt: a };
+    try {
+      await c(this.projectId, this.authState.user.userId, {
+        walletSecretId: t,
+        publicKey: r.publicKeyBase64,
+        validUntil: s
+      });
+    } catch (h) {
+      throw this.walletSecret = null, h;
+    }
+  }
+  /**
+   * Schedules a token refresh to occur exactly when shouldRefreshToken() would return true.
+   * Uses the same REFRESH_CREDENTIALS_BUFFER_MS timing as the rest of the auth system.
+   */
+  scheduleTokenRefresh() {
+    if (this.cancelTokenRefresh(), !this.authState)
+      return;
+    const t = this.authState.expiresAt - i - Date.now();
+    t <= 0 || (this.refreshTimeout = setTimeout(async () => {
+      await this.refreshAccessToken(), this.scheduleTokenRefresh();
+    }, t));
+  }
+  /**
+   * Cancels any scheduled token refresh.
+   */
+  cancelTokenRefresh() {
+    this.refreshTimeout && (clearTimeout(this.refreshTimeout), this.refreshTimeout = null);
+  }
 }
 export {
-  g as decodeBase64,
-  a as encodeBase64
+  I as AuthManager
 };

package/dist/esm/index.web16.js

@@ -1,5 +1,121 @@
-import { __require as r } from "./index.web38.js";
-var f = r();
+import { DisconnectedError as u, from as m } from "./index.web41.js";
+import { http as p } from "viem";
+import { createStore as g } from "zustand";
+import { subscribeWithSelector as f, persist as S, createJSONStorage as I } from "./index.web42.js";
+import { validateRequest as w, EIP1193ProviderError as C, STANDARD_ERROR_CODES as b } from "./index.web17.js";
+import { EventEmitter as _ } from "./index.web43.js";
+import { getPlatformStorage as A } from "./index.web2.js";
+import "@coinbase/cdp-api-client";
+import { handleGetCapabilities as v, handleGetCallsStatus as D, handleSendCalls as E, handleChainId as P, handleSignTypedData as R, handleEthSign as y, handleSwitchEthereumChain as T, handleDisconnect as q, handleSendTransaction as N, handlePersonalSign as O, handleRequestAccounts as G, handleAccounts as L } from "./index.web44.js";
+import { onAuthStateChange as M } from "./index.web6.js";
+import { baseSepolia as h } from "./index.web45.js";
+function W(r, n, s) {
+  n.subscribe(
+    (e) => e.chainId,
+    (e, t) => {
+      e !== t && r.emit("chainChanged", e);
+    }
+  ), n.subscribe(
+    (e) => e.user,
+    (e, t) => {
+      if (!(e?.userId === t?.userId && e?.evmAccounts?.length === t?.evmAccounts?.length)) {
+        if (!e && t) {
+          r.emit("disconnect", new u());
+          return;
+        }
+        if (e && e.evmAccounts?.length && (!t || t.evmAccounts?.length === 0)) {
+          const a = n.getState().chainId;
+          r.emit("connect", { chainId: a });
+          return;
+        }
+      }
+    }
+  );
+  const { chainId: i, setChainId: o } = n.getState(), d = i || s.chains[0].id;
+  return i || o(d), m({
+    request: async (e) => {
+      w(e, s);
+      const t = e;
+      switch (t.method) {
+        case "eth_accounts":
+          return L();
+        case "eth_requestAccounts":
+          return G(r, n);
+        case "personal_sign":
+          return O(t.params);
+        case "eth_sendTransaction":
+          return N(t.params, n, s.transports);
+        case "wallet_disconnect":
+          return q();
+        case "wallet_switchEthereumChain":
+          return T(t.params, n);
+        case "eth_sign":
+          return y(t.params);
+        case "eth_signTypedData_v4":
+          return R(t.params);
+        case "eth_chainId":
+          return P(n);
+        case "wallet_sendCalls":
+          return E(t.params, n);
+        case "wallet_getCallsStatus":
+          return D(t.params, n);
+        case "wallet_getCapabilities":
+          return v();
+        // Catch-all for any unknown method
+        default:
+          throw new C(
+            b.provider.unsupportedMethod,
+            `Method ${t.method} not supported`
+          );
+      }
+    },
+    // Event emitter methods - only the ones required by the interface
+    on: r.on.bind(r),
+    removeListener: r.removeListener.bind(r)
+  });
+}
+const l = {
+  chains: [h],
+  transports: {
+    [h.id]: p()
+  }
+};
+function V(r) {
+  if (r?.chains.length === 0)
+    throw new Error("At least one chain must be configured");
+  const n = r?.chains ?? l.chains, s = r?.transports ?? l.transports;
+  if (n.length === 0)
+    throw new Error("No chains found in configuration");
+  const i = new _(), o = A(), d = {
+    getItem: (t) => o.getItem(t),
+    setItem: (t, a) => o.setItem(t, a),
+    removeItem: (t) => o.removeItem(t)
+  }, c = g()(
+    f(
+      S(
+        (t) => ({
+          chainId: n[0].id,
+          setChainId: (a) => t({ chainId: a }),
+          chains: n,
+          user: null,
+          setUser: (a) => t({ user: a })
+        }),
+        {
+          name: "cdp-provider-store",
+          storage: I(() => d)
+        }
+      )
+    )
+  );
+  return c.persist.rehydrate(), M((t) => {
+    c.getState().setUser(t);
+  }), {
+    provider: W(i, c, {
+      chains: n,
+      transports: s
+    })
+  };
+}
 export {
-  f as b
+  V as createCDPEmbeddedWallet
 };

package/dist/esm/index.web17.js

@@ -1,87 +1,160 @@
-import { verifyOAuth as u } from "./index.web6.js";
-import { getPlatformOAuth as s } from "./index.web2.js";
-import { getCoreAuthManager as i } from "./index.web24.js";
-import "@coinbase/cdp-api-client";
 import "viem";
-class p {
-  oauthFlowState = null;
-  oauthStateChangeCallbacks = [];
+import "zustand";
+import "@coinbase/cdp-api-client";
+import { getCurrentUser as h } from "./index.web6.js";
+import "./index.web16.js";
+const n = {
+  rpc: {
+    invalidInput: -32e3,
+    resourceNotFound: -32001,
+    resourceUnavailable: -32002,
+    transactionRejected: -32003,
+    methodNotSupported: -32004,
+    limitExceeded: -32005,
+    parse: -32700,
+    invalidRequest: -32600,
+    methodNotFound: -32601,
+    invalidParams: -32602,
+    internal: -32603
+  },
+  provider: {
+    userRejectedRequest: 4001,
+    unauthorized: 4100,
+    unsupportedMethod: 4200,
+    disconnected: 4900,
+    chainDisconnected: 4901,
+    unsupportedChain: 4902
+  }
+};
+class o extends Error {
   /**
-   * Adds a callback to be called when the OAuth state changes.
-   *
-   * @param callback - The function to call when the OAuth state changes.
+   * The error code from EIP1193ErrorCode enum.
    */
-  async addOAuthStateChangeCallback(t) {
-    this.oauthStateChangeCallbacks.push(t), t(this.oauthFlowState);
-  }
+  code;
   /**
-   * Sets the OAuth flow state.
+   * Creates a new EIP-1193 Provider error.
    *
-   * @param oauthFlowState - The OAuth flow state.
+   * @param code - The error code from EIP1193ErrorCode enum.
+   * @param message - The error message.
    */
-  async setOAuthFlowState(t) {
-    this.oauthFlowState = t, this.oauthStateChangeCallbacks.forEach((a) => a(this.oauthFlowState));
+  constructor(t, r) {
+    super(r), this.code = t;
   }
+}
+class c extends Error {
   /**
-   * Clears the OAuth flow state.
+   * The error code from RPCErrorCode type.
    */
-  async clearOAuthFlowState() {
-    this.oauthFlowState = null, this.oauthStateChangeCallbacks.forEach((t) => t(null));
-  }
+  code;
   /**
-   * Gets the OAuth flow state.
+   * Creates a new RPC Invalid Params error.
    *
-   * @returns The OAuth flow state.
+   * @param code - The error code from RPCErrorCode type.
+   * @param message - The error message.
    */
-  async getOAuthFlowState() {
-    return this.oauthFlowState;
+  constructor(t, r) {
+    super(r), this.code = t;
   }
+}
+class p extends Error {
   /**
-   * Handles the OAuth code.
+   * Creates a new AccountTypeMismatchError.
+   *
+   * @param message - The error message.
    */
-  async handleOAuthCode() {
-    try {
-      const t = await s().getOAuthParams();
-      if (await s().cleanupOAuthParams(), !t || await i().isSignedIn())
-        return;
-      const { providerType: a, code: e, flowId: r, error: o, errorDescription: h } = t;
-      if (o || h) {
-        await this.setOAuthFlowState({
-          providerType: a,
-          status: "error",
-          errorDescription: o ?? h,
-          code: e,
-          flowId: r,
-          error: o
-        });
-        return;
-      }
-      if (!e || !a || !r)
-        return;
-      await this.setOAuthFlowState({
-        providerType: a,
-        status: "pending",
-        code: e,
-        flowId: r
-      }), await u({
-        code: e,
-        providerType: a,
-        flowId: r
-      }), await this.setOAuthFlowState({
-        providerType: a,
-        status: "success",
-        code: e,
-        flowId: r
-      });
-    } catch (t) {
-      const a = t instanceof Error ? t.message : "Unknown error";
-      await s().cleanupOAuthParams(), await this.setOAuthFlowState({
-        status: "error",
-        errorDescription: a
-      });
-    }
+  constructor(t) {
+    super(t);
   }
 }
+const l = /* @__PURE__ */ new Set([
+  "eth_accounts",
+  "eth_requestAccounts",
+  "personal_sign",
+  "eth_sendTransaction",
+  "eth_signTypedData_v4",
+  "eth_chainId",
+  "eth_sign",
+  "wallet_disconnect",
+  "wallet_switchEthereumChain",
+  "wallet_sendCalls",
+  "wallet_getCallsStatus",
+  "wallet_getCapabilities"
+]);
+function A(e, { chains: t }) {
+  const { method: r, params: s } = e;
+  if (typeof r != "string" || r.length === 0)
+    throw new c(
+      n.rpc.invalidParams,
+      "'method' must be a non-empty string."
+    );
+  const a = (s ?? [])[0]?.chainId;
+  if (typeof a == "string" && !t.some((d) => d.id === Number.parseInt(a, 16)))
+    throw new o(
+      n.provider.unsupportedChain,
+      `Chain ${a} not supported - make sure the provider is configured with the correct chains.`
+    );
+  if (s !== void 0 && !Array.isArray(s))
+    throw new c(
+      n.rpc.invalidParams,
+      "'params' must be an array if provided."
+    );
+  if (!l.has(r))
+    throw new o(
+      n.provider.unsupportedMethod,
+      `Method ${e.method} not supported`
+    );
+}
+async function i() {
+  const e = await h();
+  if (!e)
+    throw new o(
+      n.provider.unauthorized,
+      "User not connected"
+    );
+  return e;
+}
+async function _(e) {
+  const t = await i();
+  if (!t.evmAccounts?.includes(e) && !t.evmSmartAccounts?.includes(e))
+    throw new o(
+      n.provider.unauthorized,
+      "Address not owned by user"
+    );
+  return t;
+}
+async function u() {
+  const e = await i();
+  if (!e.evmAccounts?.[0])
+    throw new o(
+      n.provider.unauthorized,
+      "No EVM accounts available"
+    );
+  return e;
+}
+async function y() {
+  const e = await i();
+  if (!e.evmSmartAccounts?.[0])
+    throw new o(
+      n.provider.unauthorized,
+      "No EVM smart accounts available"
+    );
+  return e;
+}
+async function g({ errorMessage: e } = {}) {
+  const t = await u();
+  if (await u(), !!t.evmSmartAccounts?.length)
+    throw new p(e ?? "Method unsupported.");
+  return t;
+}
 export {
-  p as OAuthManager
+  p as AccountTypeMismatchError,
+  o as EIP1193ProviderError,
+  c as RPCRequestError,
+  n as STANDARD_ERROR_CODES,
+  g as validateIsUsingEOA,
+  A as validateRequest,
+  i as validateUserConnected,
+  u as validateUserHasEvmAccount,
+  y as validateUserHasEvmSmartAccount,
+  _ as validateUserOwnsAddress
 };