@coinbase/cdp-core 0.0.65 → 0.0.67

package/dist/native/index.native147.js

@@ -1,119 +1,95 @@
-import { isJWK as p } from "./index.native167.js";
-import { decode as m } from "./index.native142.js";
-import y from "./index.native168.js";
-import { isCryptoKey as S, isKeyObject as K } from "./index.native166.js";
-let c;
-const f = async (e, r, s, i = !1) => {
-  c ||= /* @__PURE__ */ new WeakMap();
-  let n = c.get(e);
-  if (n?.[s])
-    return n[s];
-  const t = await y({ ...r, alg: s });
-  return i && Object.freeze(e), n ? n[s] = t : c.set(e, { [s]: t }), t;
-}, E = (e, r) => {
-  c ||= /* @__PURE__ */ new WeakMap();
-  let s = c.get(e);
-  if (s?.[r])
-    return s[r];
-  const i = e.type === "public", n = !!i;
-  let t;
-  if (e.asymmetricKeyType === "x25519") {
-    switch (r) {
-      case "ECDH-ES":
-      case "ECDH-ES+A128KW":
-      case "ECDH-ES+A192KW":
-      case "ECDH-ES+A256KW":
+import { withAlg as n } from "./index.native170.js";
+import c from "./index.native171.js";
+import { isJWK as p, isSecretJWK as a, isPublicJWK as y, isPrivateJWK as f } from "./index.native172.js";
+const s = (r) => r?.[Symbol.toStringTag], o = (r, e, t) => {
+  if (e.use !== void 0) {
+    let i;
+    switch (t) {
+      case "sign":
+      case "verify":
+        i = "sig";
+        break;
+      case "encrypt":
+      case "decrypt":
+        i = "enc";
         break;
-      default:
-        throw new TypeError("given KeyObject instance cannot be used for this algorithm");
     }
-    t = e.toCryptoKey(e.asymmetricKeyType, n, i ? [] : ["deriveBits"]);
-  }
-  if (e.asymmetricKeyType === "ed25519") {
-    if (r !== "EdDSA" && r !== "Ed25519")
-      throw new TypeError("given KeyObject instance cannot be used for this algorithm");
-    t = e.toCryptoKey(e.asymmetricKeyType, n, [
-      i ? "verify" : "sign"
-    ]);
+    if (e.use !== i)
+      throw new TypeError(`Invalid key for this operation, its "use" must be "${i}" when present`);
   }
-  if (e.asymmetricKeyType === "rsa") {
-    let a;
-    switch (r) {
-      case "RSA-OAEP":
-        a = "SHA-1";
+  if (e.alg !== void 0 && e.alg !== r)
+    throw new TypeError(`Invalid key for this operation, its "alg" must be "${r}" when present`);
+  if (Array.isArray(e.key_ops)) {
+    let i;
+    switch (!0) {
+      case t === "sign":
+      case r === "dir":
+      case r.includes("CBC-HS"):
+        i = t;
         break;
-      case "RS256":
-      case "PS256":
-      case "RSA-OAEP-256":
-        a = "SHA-256";
+      case r.startsWith("PBES2"):
+        i = "deriveBits";
         break;
-      case "RS384":
-      case "PS384":
-      case "RSA-OAEP-384":
-        a = "SHA-384";
+      case /^A\d{3}(?:GCM)?(?:KW)?$/.test(r):
+        !r.includes("GCM") && r.endsWith("KW") ? i = "unwrapKey" : i = t;
         break;
-      case "RS512":
-      case "PS512":
-      case "RSA-OAEP-512":
-        a = "SHA-512";
+      case t === "encrypt":
+        i = "wrapKey";
+        break;
+      case t === "decrypt":
+        i = r.startsWith("RSA") ? "unwrapKey" : "deriveBits";
         break;
-      default:
-        throw new TypeError("given KeyObject instance cannot be used for this algorithm");
     }
-    if (r.startsWith("RSA-OAEP"))
-      return e.toCryptoKey({
-        name: "RSA-OAEP",
-        hash: a
-      }, n, i ? ["encrypt"] : ["decrypt"]);
-    t = e.toCryptoKey({
-      name: r.startsWith("PS") ? "RSA-PSS" : "RSASSA-PKCS1-v1_5",
-      hash: a
-    }, n, [i ? "verify" : "sign"]);
-  }
-  if (e.asymmetricKeyType === "ec") {
-    const o = (/* @__PURE__ */ new Map([
-      ["prime256v1", "P-256"],
-      ["secp384r1", "P-384"],
-      ["secp521r1", "P-521"]
-    ])).get(e.asymmetricKeyDetails?.namedCurve);
-    if (!o)
-      throw new TypeError("given KeyObject instance cannot be used for this algorithm");
-    r === "ES256" && o === "P-256" && (t = e.toCryptoKey({
-      name: "ECDSA",
-      namedCurve: o
-    }, n, [i ? "verify" : "sign"])), r === "ES384" && o === "P-384" && (t = e.toCryptoKey({
-      name: "ECDSA",
-      namedCurve: o
-    }, n, [i ? "verify" : "sign"])), r === "ES512" && o === "P-521" && (t = e.toCryptoKey({
-      name: "ECDSA",
-      namedCurve: o
-    }, n, [i ? "verify" : "sign"])), r.startsWith("ECDH-ES") && (t = e.toCryptoKey({
-      name: "ECDH",
-      namedCurve: o
-    }, n, i ? [] : ["deriveBits"]));
+    if (i && e.key_ops?.includes?.(i) === !1)
+      throw new TypeError(`Invalid key for this operation, its "key_ops" must include "${i}" when present`);
   }
-  if (!t)
-    throw new TypeError("given KeyObject instance cannot be used for this algorithm");
-  return s ? s[r] = t : c.set(e, { [r]: t }), t;
-}, d = async (e, r) => {
-  if (e instanceof Uint8Array || S(e))
-    return e;
-  if (K(e)) {
-    if (e.type === "secret")
-      return e.export();
-    if ("toCryptoKey" in e && typeof e.toCryptoKey == "function")
-      try {
-        return E(e, r);
-      } catch (i) {
-        if (i instanceof TypeError)
-          throw i;
-      }
-    let s = e.export({ format: "jwk" });
-    return f(e, s, r);
+  return !0;
+}, h = (r, e, t) => {
+  if (!(e instanceof Uint8Array)) {
+    if (p(e)) {
+      if (a(e) && o(r, e, t))
+        return;
+      throw new TypeError('JSON Web Key for symmetric algorithms must have JWK "kty" (Key Type) equal to "oct" and the JWK "k" (Key Value) present');
+    }
+    if (!c(e))
+      throw new TypeError(n(r, e, "CryptoKey", "KeyObject", "JSON Web Key", "Uint8Array"));
+    if (e.type !== "secret")
+      throw new TypeError(`${s(e)} instances for symmetric algorithms must be of type "secret"`);
   }
+}, m = (r, e, t) => {
   if (p(e))
-    return e.k ? m(e.k) : f(e, e, r, !0);
-  throw new Error("unreachable");
+    switch (t) {
+      case "decrypt":
+      case "sign":
+        if (f(e) && o(r, e, t))
+          return;
+        throw new TypeError("JSON Web Key for this operation be a private JWK");
+      case "encrypt":
+      case "verify":
+        if (y(e) && o(r, e, t))
+          return;
+        throw new TypeError("JSON Web Key for this operation be a public JWK");
+    }
+  if (!c(e))
+    throw new TypeError(n(r, e, "CryptoKey", "KeyObject", "JSON Web Key"));
+  if (e.type === "secret")
+    throw new TypeError(`${s(e)} instances for asymmetric algorithms must not be of type "secret"`);
+  if (e.type === "public")
+    switch (t) {
+      case "sign":
+        throw new TypeError(`${s(e)} instances for asymmetric algorithm signing must be of type "private"`);
+      case "decrypt":
+        throw new TypeError(`${s(e)} instances for asymmetric algorithm decryption must be of type "private"`);
+    }
+  if (e.type === "private")
+    switch (t) {
+      case "verify":
+        throw new TypeError(`${s(e)} instances for asymmetric algorithm verifying must be of type "public"`);
+      case "encrypt":
+        throw new TypeError(`${s(e)} instances for asymmetric algorithm encryption must be of type "public"`);
+    }
+}, d = (r, e, t) => {
+  r.startsWith("HS") || r === "dir" || r.startsWith("PBES2") || /^A(?:128|192|256)(?:GCM)?(?:KW)?$/.test(r) || /^A(?:128|192|256)CBC-HS(?:256|384|512)$/.test(r) ? h(r, e, t) : m(r, e, t);
 };
 export {
   d as default

package/dist/native/index.native148.js

@@ -1,10 +1,23 @@
-import { __module as e } from "./index.native149.js";
-import { __require as o } from "./index.native150.js";
-import { __require as t } from "./index.native151.js";
-var r;
-function s() {
-  return r ? e.exports : (r = 1, process.env.NODE_ENV === "production" ? e.exports = o() : e.exports = t(), e.exports);
-}
+import { JOSENotSupported as f } from "./index.native58.js";
+const w = (n, r, a, e, s) => {
+  if (s.crit !== void 0 && e?.crit === void 0)
+    throw new n('"crit" (Critical) Header Parameter MUST be integrity protected');
+  if (!e || e.crit === void 0)
+    return /* @__PURE__ */ new Set();
+  if (!Array.isArray(e.crit) || e.crit.length === 0 || e.crit.some((i) => typeof i != "string" || i.length === 0))
+    throw new n('"crit" (Critical) Header Parameter MUST be an array of non-empty strings when present');
+  let t;
+  a !== void 0 ? t = new Map([...Object.entries(a), ...r.entries()]) : t = r;
+  for (const i of e.crit) {
+    if (!t.has(i))
+      throw new f(`Extension Header Parameter "${i}" is not recognized`);
+    if (s[i] === void 0)
+      throw new n(`Extension Header Parameter "${i}" is missing`);
+    if (t.get(i) && e[i] === void 0)
+      throw new n(`Extension Header Parameter "${i}" MUST be integrity protected`);
+  }
+  return new Set(e.crit);
+};
 export {
-  s as __require
+  w as default
 };

package/dist/native/index.native149.js

@@ -1,4 +1,120 @@
-var e = { exports: {} };
+import { isJWK as p } from "./index.native172.js";
+import { decode as m } from "./index.native144.js";
+import y from "./index.native173.js";
+import { isCryptoKey as S, isKeyObject as K } from "./index.native171.js";
+let c;
+const f = async (e, r, s, i = !1) => {
+  c ||= /* @__PURE__ */ new WeakMap();
+  let n = c.get(e);
+  if (n?.[s])
+    return n[s];
+  const t = await y({ ...r, alg: s });
+  return i && Object.freeze(e), n ? n[s] = t : c.set(e, { [s]: t }), t;
+}, E = (e, r) => {
+  c ||= /* @__PURE__ */ new WeakMap();
+  let s = c.get(e);
+  if (s?.[r])
+    return s[r];
+  const i = e.type === "public", n = !!i;
+  let t;
+  if (e.asymmetricKeyType === "x25519") {
+    switch (r) {
+      case "ECDH-ES":
+      case "ECDH-ES+A128KW":
+      case "ECDH-ES+A192KW":
+      case "ECDH-ES+A256KW":
+        break;
+      default:
+        throw new TypeError("given KeyObject instance cannot be used for this algorithm");
+    }
+    t = e.toCryptoKey(e.asymmetricKeyType, n, i ? [] : ["deriveBits"]);
+  }
+  if (e.asymmetricKeyType === "ed25519") {
+    if (r !== "EdDSA" && r !== "Ed25519")
+      throw new TypeError("given KeyObject instance cannot be used for this algorithm");
+    t = e.toCryptoKey(e.asymmetricKeyType, n, [
+      i ? "verify" : "sign"
+    ]);
+  }
+  if (e.asymmetricKeyType === "rsa") {
+    let a;
+    switch (r) {
+      case "RSA-OAEP":
+        a = "SHA-1";
+        break;
+      case "RS256":
+      case "PS256":
+      case "RSA-OAEP-256":
+        a = "SHA-256";
+        break;
+      case "RS384":
+      case "PS384":
+      case "RSA-OAEP-384":
+        a = "SHA-384";
+        break;
+      case "RS512":
+      case "PS512":
+      case "RSA-OAEP-512":
+        a = "SHA-512";
+        break;
+      default:
+        throw new TypeError("given KeyObject instance cannot be used for this algorithm");
+    }
+    if (r.startsWith("RSA-OAEP"))
+      return e.toCryptoKey({
+        name: "RSA-OAEP",
+        hash: a
+      }, n, i ? ["encrypt"] : ["decrypt"]);
+    t = e.toCryptoKey({
+      name: r.startsWith("PS") ? "RSA-PSS" : "RSASSA-PKCS1-v1_5",
+      hash: a
+    }, n, [i ? "verify" : "sign"]);
+  }
+  if (e.asymmetricKeyType === "ec") {
+    const o = (/* @__PURE__ */ new Map([
+      ["prime256v1", "P-256"],
+      ["secp384r1", "P-384"],
+      ["secp521r1", "P-521"]
+    ])).get(e.asymmetricKeyDetails?.namedCurve);
+    if (!o)
+      throw new TypeError("given KeyObject instance cannot be used for this algorithm");
+    r === "ES256" && o === "P-256" && (t = e.toCryptoKey({
+      name: "ECDSA",
+      namedCurve: o
+    }, n, [i ? "verify" : "sign"])), r === "ES384" && o === "P-384" && (t = e.toCryptoKey({
+      name: "ECDSA",
+      namedCurve: o
+    }, n, [i ? "verify" : "sign"])), r === "ES512" && o === "P-521" && (t = e.toCryptoKey({
+      name: "ECDSA",
+      namedCurve: o
+    }, n, [i ? "verify" : "sign"])), r.startsWith("ECDH-ES") && (t = e.toCryptoKey({
+      name: "ECDH",
+      namedCurve: o
+    }, n, i ? [] : ["deriveBits"]));
+  }
+  if (!t)
+    throw new TypeError("given KeyObject instance cannot be used for this algorithm");
+  return s ? s[r] = t : c.set(e, { [r]: t }), t;
+}, d = async (e, r) => {
+  if (e instanceof Uint8Array || S(e))
+    return e;
+  if (K(e)) {
+    if (e.type === "secret")
+      return e.export();
+    if ("toCryptoKey" in e && typeof e.toCryptoKey == "function")
+      try {
+        return E(e, r);
+      } catch (i) {
+        if (i instanceof TypeError)
+          throw i;
+      }
+    let s = e.export({ format: "jwk" });
+    return f(e, s, r);
+  }
+  if (p(e))
+    return e.k ? m(e.k) : f(e, e, r, !0);
+  throw new Error("unreachable");
+};
 export {
-  e as __module
+  d as default
 };

package/dist/native/index.native15.js

@@ -1,7 +1,7 @@
 import { initiateAuthentication as n } from "@coinbase/cdp-api-client";
-import { Analytics as t } from "./index.native27.js";
-import "./index.native28.js";
-import { getCoreAuthManager as o, getConfig as a } from "./index.native25.js";
+import { Analytics as t } from "./index.native30.js";
+import "./index.native31.js";
+import { getCoreAuthManager as o, getConfig as a } from "./index.native28.js";
 async function c(e) {
   if (t.sendActionCallEvent({ name: "link_email" }), !await o().isSignedIn())
     throw new Error("User must be signed in to link an email");