@coinbase/cdp-core 0.0.67 → 0.0.69

package/README.md

@@ -302,6 +302,155 @@ if (signedIn) {
 }
 ```
 
+### Multi-Factor Authentication
+
+The SDK supports Time-based One-Time Password (TOTP) multi-factor authentication to add an extra layer of security to your application. Users can enroll in MFA using authenticator apps like Google Authenticator or Authy.
+
+> **Important**: Users must be authenticated (signed in) before they can enroll in MFA or perform MFA verification.
+
+#### MFA Enrollment Flow
+
+The enrollment flow consists of two steps:
+1. **Initiate enrollment** - Generate a TOTP secret and QR code
+2. **Submit enrollment** - Verify the user's authenticator app is configured correctly
+
+```typescript lines
+import { 
+  initiateMfaEnrollment, 
+  submitMfaEnrollment,
+  getCurrentUser 
+} from "@coinbase/cdp-core";
+
+// Step 1: Initiate MFA enrollment (user must be signed in)
+const enrollment = await initiateMfaEnrollment({ 
+  mfaMethod: "totp" 
+});
+
+// Display QR code for user to scan with their authenticator app
+console.log("Scan this QR code URL:", enrollment.authUrl);
+// Or display the secret for manual entry
+console.log("Or enter this secret manually:", enrollment.secret);
+
+// Step 2: After user adds to their authenticator app, verify with the 6-digit code
+const result = await submitMfaEnrollment({
+  mfaMethod: "totp",
+  mfaCode: "123456" // The 6-digit code from the user's authenticator app
+});
+
+// After successful enrollment, the user object is updated with MFA information
+console.log("MFA enrolled for user:", result.user.userId);
+console.log("MFA enrollment info:", result.user.mfaMethods?.totp);
+// Output: { enrolledAt: "2024-01-01T00:00:00Z" }
+
+// The current user now has MFA enabled
+const user = await getCurrentUser();
+console.log("User MFA status:", user.mfaMethods);
+```
+
+#### MFA Verification Flow
+
+When performing sensitive operations that require MFA verification, use the verification flow:
+
+```typescript lines
+import { 
+  initiateMfaVerification, 
+  submitMfaVerification 
+} from "@coinbase/cdp-core";
+
+// Step 1: Initiate MFA verification (user must be signed in and enrolled in MFA)
+await initiateMfaVerification({ 
+  mfaMethod: "totp" 
+});
+
+// Step 2: Submit the 6-digit code from the user's authenticator app
+await submitMfaVerification({
+  mfaMethod: "totp",
+  mfaCode: "654321" // The current 6-digit code from the authenticator app
+});
+
+// MFA verification successful - user can now perform sensitive operations
+console.log("MFA verification completed");
+```
+
+#### Complete Example: MFA Setup and Usage
+
+```typescript lines
+import {
+  initialize,
+  signInWithEmail,
+  verifyEmailOTP,
+  initiateMfaEnrollment,
+  submitMfaEnrollment,
+  initiateMfaVerification,
+  submitMfaVerification,
+  getCurrentUser,
+  signEvmTransaction
+} from "@coinbase/cdp-core";
+
+// Initialize the SDK
+await initialize({
+  projectId: "your-project-id"
+});
+
+// Sign in the user first
+const { flowId } = await signInWithEmail({ 
+  email: "user@example.com" 
+});
+
+const { user } = await verifyEmailOTP({
+  flowId,
+  otp: "123456"
+});
+
+// Check if user has MFA enabled
+if (!user.mfaMethods?.totp) {
+  // Enroll in MFA
+  const enrollment = await initiateMfaEnrollment({ 
+    mfaMethod: "totp" 
+  });
+  
+  // Show QR code to user (in a real app, you'd display this as an actual QR code)
+  console.log("Please scan this QR code with your authenticator app:");
+  console.log(enrollment.authUrl);
+  
+  // Get the code from user input
+  const mfaCode = prompt("Enter the 6-digit code from your authenticator app:");
+  
+  // Complete enrollment
+  const result = await submitMfaEnrollment({
+    mfaMethod: "totp",
+    mfaCode
+  });
+  
+  console.log("MFA successfully enabled!");
+  console.log("Enrolled at:", result.user.mfaMethods.totp.enrolledAt);
+}
+
+// Later, when performing a sensitive operation that requires MFA...
+try {
+  // Attempt the operation
+  await signEvmTransaction({ /* ... */ });
+} catch (error) {
+  // If MFA is required, the operation will fail
+  // Initiate MFA verification
+  await initiateMfaVerification({ 
+    mfaMethod: "totp" 
+  });
+  
+  // Get MFA code from user
+  const verificationCode = prompt("Enter your 6-digit MFA code:");
+  
+  // Submit verification
+  await submitMfaVerification({
+    mfaMethod: "totp",
+    mfaCode: verificationCode
+  });
+  
+  // Retry the operation after successful MFA verification
+  await signEvmTransaction({ /* ... */ });
+}
+```
+
 ### Create Accounts Manually
 
 If you configured your SDK without `createOnLogin`, you can manually create accounts for authenticated users when needed. This gives you full control over when accounts are created.
@@ -910,4 +1059,3 @@ const client = createWalletClient({
   chain: mainnet,
 });
 ```
-

package/dist/esm/index.native113.js

@@ -1,4 +1,4 @@
-import { version as r } from "./index.native152.js";
+import { version as r } from "./index.native151.js";
 function e() {
   return r;
 }

package/dist/esm/index.native137.js

@@ -1,5 +1,5 @@
-import { getDefaultExportFromCjs as r } from "./index.native151.js";
-import { __require as o } from "./index.native156.js";
+import { getDefaultExportFromCjs as r } from "./index.native154.js";
+import { __require as o } from "./index.native160.js";
 var t = o();
 const a = /* @__PURE__ */ r(t);
 export {

package/dist/esm/index.native151.js

@@ -1,6 +1,4 @@
-function e(t) {
-  return t && t.__esModule && Object.prototype.hasOwnProperty.call(t, "default") ? t.default : t;
-}
+const o = "0.1.1";
 export {
-  e as getDefaultExportFromCjs
+  o as version
 };

package/dist/esm/index.native152.js

@@ -1,4 +1,111 @@
-const o = "0.1.1";
+import { __module as x } from "./index.native153.js";
+var w;
+function O() {
+  return w ? x.exports : (w = 1, function(d) {
+    var g = Object.prototype.hasOwnProperty, c = "~";
+    function h() {
+    }
+    Object.create && (h.prototype = /* @__PURE__ */ Object.create(null), new h().__proto__ || (c = !1));
+    function b(s, t, n) {
+      this.fn = s, this.context = t, this.once = n || !1;
+    }
+    function m(s, t, n, r, l) {
+      if (typeof n != "function")
+        throw new TypeError("The listener must be a function");
+      var u = new b(n, r || s, l), o = c ? c + t : t;
+      return s._events[o] ? s._events[o].fn ? s._events[o] = [s._events[o], u] : s._events[o].push(u) : (s._events[o] = u, s._eventsCount++), s;
+    }
+    function y(s, t) {
+      --s._eventsCount === 0 ? s._events = new h() : delete s._events[t];
+    }
+    function f() {
+      this._events = new h(), this._eventsCount = 0;
+    }
+    f.prototype.eventNames = function() {
+      var t = [], n, r;
+      if (this._eventsCount === 0) return t;
+      for (r in n = this._events)
+        g.call(n, r) && t.push(c ? r.slice(1) : r);
+      return Object.getOwnPropertySymbols ? t.concat(Object.getOwnPropertySymbols(n)) : t;
+    }, f.prototype.listeners = function(t) {
+      var n = c ? c + t : t, r = this._events[n];
+      if (!r) return [];
+      if (r.fn) return [r.fn];
+      for (var l = 0, u = r.length, o = new Array(u); l < u; l++)
+        o[l] = r[l].fn;
+      return o;
+    }, f.prototype.listenerCount = function(t) {
+      var n = c ? c + t : t, r = this._events[n];
+      return r ? r.fn ? 1 : r.length : 0;
+    }, f.prototype.emit = function(t, n, r, l, u, o) {
+      var a = c ? c + t : t;
+      if (!this._events[a]) return !1;
+      var e = this._events[a], p = arguments.length, v, i;
+      if (e.fn) {
+        switch (e.once && this.removeListener(t, e.fn, void 0, !0), p) {
+          case 1:
+            return e.fn.call(e.context), !0;
+          case 2:
+            return e.fn.call(e.context, n), !0;
+          case 3:
+            return e.fn.call(e.context, n, r), !0;
+          case 4:
+            return e.fn.call(e.context, n, r, l), !0;
+          case 5:
+            return e.fn.call(e.context, n, r, l, u), !0;
+          case 6:
+            return e.fn.call(e.context, n, r, l, u, o), !0;
+        }
+        for (i = 1, v = new Array(p - 1); i < p; i++)
+          v[i - 1] = arguments[i];
+        e.fn.apply(e.context, v);
+      } else {
+        var E = e.length, _;
+        for (i = 0; i < E; i++)
+          switch (e[i].once && this.removeListener(t, e[i].fn, void 0, !0), p) {
+            case 1:
+              e[i].fn.call(e[i].context);
+              break;
+            case 2:
+              e[i].fn.call(e[i].context, n);
+              break;
+            case 3:
+              e[i].fn.call(e[i].context, n, r);
+              break;
+            case 4:
+              e[i].fn.call(e[i].context, n, r, l);
+              break;
+            default:
+              if (!v) for (_ = 1, v = new Array(p - 1); _ < p; _++)
+                v[_ - 1] = arguments[_];
+              e[i].fn.apply(e[i].context, v);
+          }
+      }
+      return !0;
+    }, f.prototype.on = function(t, n, r) {
+      return m(this, t, n, r, !1);
+    }, f.prototype.once = function(t, n, r) {
+      return m(this, t, n, r, !0);
+    }, f.prototype.removeListener = function(t, n, r, l) {
+      var u = c ? c + t : t;
+      if (!this._events[u]) return this;
+      if (!n)
+        return y(this, u), this;
+      var o = this._events[u];
+      if (o.fn)
+        o.fn === n && (!l || o.once) && (!r || o.context === r) && y(this, u);
+      else {
+        for (var a = 0, e = [], p = o.length; a < p; a++)
+          (o[a].fn !== n || l && !o[a].once || r && o[a].context !== r) && e.push(o[a]);
+        e.length ? this._events[u] = e.length === 1 ? e[0] : e : y(this, u);
+      }
+      return this;
+    }, f.prototype.removeAllListeners = function(t) {
+      var n;
+      return t ? (n = c ? c + t : t, this._events[n] && y(this, n)) : (this._events = new h(), this._eventsCount = 0), this;
+    }, f.prototype.off = f.prototype.removeListener, f.prototype.addListener = f.prototype.on, f.prefixed = c, f.EventEmitter = f, d.exports = f;
+  }(x), x.exports);
+}
 export {
-  o as version
+  O as __require
 };

package/dist/esm/index.native153.js

@@ -1,111 +1,4 @@
-import { __module as x } from "./index.native154.js";
-var w;
-function O() {
-  return w ? x.exports : (w = 1, function(d) {
-    var g = Object.prototype.hasOwnProperty, c = "~";
-    function h() {
-    }
-    Object.create && (h.prototype = /* @__PURE__ */ Object.create(null), new h().__proto__ || (c = !1));
-    function b(s, t, n) {
-      this.fn = s, this.context = t, this.once = n || !1;
-    }
-    function m(s, t, n, r, l) {
-      if (typeof n != "function")
-        throw new TypeError("The listener must be a function");
-      var u = new b(n, r || s, l), o = c ? c + t : t;
-      return s._events[o] ? s._events[o].fn ? s._events[o] = [s._events[o], u] : s._events[o].push(u) : (s._events[o] = u, s._eventsCount++), s;
-    }
-    function y(s, t) {
-      --s._eventsCount === 0 ? s._events = new h() : delete s._events[t];
-    }
-    function f() {
-      this._events = new h(), this._eventsCount = 0;
-    }
-    f.prototype.eventNames = function() {
-      var t = [], n, r;
-      if (this._eventsCount === 0) return t;
-      for (r in n = this._events)
-        g.call(n, r) && t.push(c ? r.slice(1) : r);
-      return Object.getOwnPropertySymbols ? t.concat(Object.getOwnPropertySymbols(n)) : t;
-    }, f.prototype.listeners = function(t) {
-      var n = c ? c + t : t, r = this._events[n];
-      if (!r) return [];
-      if (r.fn) return [r.fn];
-      for (var l = 0, u = r.length, o = new Array(u); l < u; l++)
-        o[l] = r[l].fn;
-      return o;
-    }, f.prototype.listenerCount = function(t) {
-      var n = c ? c + t : t, r = this._events[n];
-      return r ? r.fn ? 1 : r.length : 0;
-    }, f.prototype.emit = function(t, n, r, l, u, o) {
-      var a = c ? c + t : t;
-      if (!this._events[a]) return !1;
-      var e = this._events[a], p = arguments.length, v, i;
-      if (e.fn) {
-        switch (e.once && this.removeListener(t, e.fn, void 0, !0), p) {
-          case 1:
-            return e.fn.call(e.context), !0;
-          case 2:
-            return e.fn.call(e.context, n), !0;
-          case 3:
-            return e.fn.call(e.context, n, r), !0;
-          case 4:
-            return e.fn.call(e.context, n, r, l), !0;
-          case 5:
-            return e.fn.call(e.context, n, r, l, u), !0;
-          case 6:
-            return e.fn.call(e.context, n, r, l, u, o), !0;
-        }
-        for (i = 1, v = new Array(p - 1); i < p; i++)
-          v[i - 1] = arguments[i];
-        e.fn.apply(e.context, v);
-      } else {
-        var E = e.length, _;
-        for (i = 0; i < E; i++)
-          switch (e[i].once && this.removeListener(t, e[i].fn, void 0, !0), p) {
-            case 1:
-              e[i].fn.call(e[i].context);
-              break;
-            case 2:
-              e[i].fn.call(e[i].context, n);
-              break;
-            case 3:
-              e[i].fn.call(e[i].context, n, r);
-              break;
-            case 4:
-              e[i].fn.call(e[i].context, n, r, l);
-              break;
-            default:
-              if (!v) for (_ = 1, v = new Array(p - 1); _ < p; _++)
-                v[_ - 1] = arguments[_];
-              e[i].fn.apply(e[i].context, v);
-          }
-      }
-      return !0;
-    }, f.prototype.on = function(t, n, r) {
-      return m(this, t, n, r, !1);
-    }, f.prototype.once = function(t, n, r) {
-      return m(this, t, n, r, !0);
-    }, f.prototype.removeListener = function(t, n, r, l) {
-      var u = c ? c + t : t;
-      if (!this._events[u]) return this;
-      if (!n)
-        return y(this, u), this;
-      var o = this._events[u];
-      if (o.fn)
-        o.fn === n && (!l || o.once) && (!r || o.context === r) && y(this, u);
-      else {
-        for (var a = 0, e = [], p = o.length; a < p; a++)
-          (o[a].fn !== n || l && !o[a].once || r && o[a].context !== r) && e.push(o[a]);
-        e.length ? this._events[u] = e.length === 1 ? e[0] : e : y(this, u);
-      }
-      return this;
-    }, f.prototype.removeAllListeners = function(t) {
-      var n;
-      return t ? (n = c ? c + t : t, this._events[n] && y(this, n)) : (this._events = new h(), this._eventsCount = 0), this;
-    }, f.prototype.off = f.prototype.removeListener, f.prototype.addListener = f.prototype.on, f.prefixed = c, f.EventEmitter = f, d.exports = f;
-  }(x), x.exports);
-}
+var e = { exports: {} };
 export {
-  O as __require
+  e as __module
 };

package/dist/esm/index.native154.js

@@ -1,4 +1,6 @@
-var e = { exports: {} };
+function e(t) {
+  return t && t.__esModule && Object.prototype.hasOwnProperty.call(t, "default") ? t.default : t;
+}
 export {
-  e as __module
+  e as getDefaultExportFromCjs
 };

package/dist/esm/index.native155.js

@@ -1,4 +1,4 @@
-import { BaseError as f } from "./index.native65.js";
+import { BaseError as f } from "./index.native62.js";
 import { pad as g } from "./index.native174.js";
 function m(t, i = {}) {
   const { signed: r, size: e } = i, o = BigInt(t);

package/dist/esm/index.native156.js

@@ -1,41 +1,10 @@
-import { __module as h } from "./index.native157.js";
-import { __require as S } from "./index.native158.js";
-import { __require as q } from "./index.native159.js";
-import { __require as w } from "./index.native160.js";
-var x;
-function G() {
-  return x ? h.exports : (x = 1, function() {
-    var v = S(), p = q().utf8, B = w(), F = q().bin, d = function(o, f) {
-      o.constructor == String ? f && f.encoding === "binary" ? o = F.stringToBytes(o) : o = p.stringToBytes(o) : B(o) ? o = Array.prototype.slice.call(o, 0) : !Array.isArray(o) && o.constructor !== Uint8Array && (o = o.toString());
-      for (var u = v.bytesToWords(o), a = o.length * 8, n = 1732584193, r = -271733879, i = -1732584194, t = 271733878, e = 0; e < u.length; e++)
-        u[e] = (u[e] << 8 | u[e] >>> 24) & 16711935 | (u[e] << 24 | u[e] >>> 8) & 4278255360;
-      u[a >>> 5] |= 128 << a % 32, u[(a + 64 >>> 9 << 4) + 14] = a;
-      for (var _ = d._ff, c = d._gg, l = d._hh, y = d._ii, e = 0; e < u.length; e += 16) {
-        var T = n, b = r, A = i, I = t;
-        n = _(n, r, i, t, u[e + 0], 7, -680876936), t = _(t, n, r, i, u[e + 1], 12, -389564586), i = _(i, t, n, r, u[e + 2], 17, 606105819), r = _(r, i, t, n, u[e + 3], 22, -1044525330), n = _(n, r, i, t, u[e + 4], 7, -176418897), t = _(t, n, r, i, u[e + 5], 12, 1200080426), i = _(i, t, n, r, u[e + 6], 17, -1473231341), r = _(r, i, t, n, u[e + 7], 22, -45705983), n = _(n, r, i, t, u[e + 8], 7, 1770035416), t = _(t, n, r, i, u[e + 9], 12, -1958414417), i = _(i, t, n, r, u[e + 10], 17, -42063), r = _(r, i, t, n, u[e + 11], 22, -1990404162), n = _(n, r, i, t, u[e + 12], 7, 1804603682), t = _(t, n, r, i, u[e + 13], 12, -40341101), i = _(i, t, n, r, u[e + 14], 17, -1502002290), r = _(r, i, t, n, u[e + 15], 22, 1236535329), n = c(n, r, i, t, u[e + 1], 5, -165796510), t = c(t, n, r, i, u[e + 6], 9, -1069501632), i = c(i, t, n, r, u[e + 11], 14, 643717713), r = c(r, i, t, n, u[e + 0], 20, -373897302), n = c(n, r, i, t, u[e + 5], 5, -701558691), t = c(t, n, r, i, u[e + 10], 9, 38016083), i = c(i, t, n, r, u[e + 15], 14, -660478335), r = c(r, i, t, n, u[e + 4], 20, -405537848), n = c(n, r, i, t, u[e + 9], 5, 568446438), t = c(t, n, r, i, u[e + 14], 9, -1019803690), i = c(i, t, n, r, u[e + 3], 14, -187363961), r = c(r, i, t, n, u[e + 8], 20, 1163531501), n = c(n, r, i, t, u[e + 13], 5, -1444681467), t = c(t, n, r, i, u[e + 2], 9, -51403784), i = c(i, t, n, r, u[e + 7], 14, 1735328473), r = c(r, i, t, n, u[e + 12], 20, -1926607734), n = l(n, r, i, t, u[e + 5], 4, -378558), t = l(t, n, r, i, u[e + 8], 11, -2022574463), i = l(i, t, n, r, u[e + 11], 16, 1839030562), r = l(r, i, t, n, u[e + 14], 23, -35309556), n = l(n, r, i, t, u[e + 1], 4, -1530992060), t = l(t, n, r, i, u[e + 4], 11, 1272893353), i = l(i, t, n, r, u[e + 7], 16, -155497632), r = l(r, i, t, n, u[e + 10], 23, -1094730640), n = l(n, r, i, t, u[e + 13], 4, 681279174), t = l(t, n, r, i, u[e + 0], 11, -358537222), i = l(i, t, n, r, u[e + 3], 16, -722521979), r = l(r, i, t, n, u[e + 6], 23, 76029189), n = l(n, r, i, t, u[e + 9], 4, -640364487), t = l(t, n, r, i, u[e + 12], 11, -421815835), i = l(i, t, n, r, u[e + 15], 16, 530742520), r = l(r, i, t, n, u[e + 2], 23, -995338651), n = y(n, r, i, t, u[e + 0], 6, -198630844), t = y(t, n, r, i, u[e + 7], 10, 1126891415), i = y(i, t, n, r, u[e + 14], 15, -1416354905), r = y(r, i, t, n, u[e + 5], 21, -57434055), n = y(n, r, i, t, u[e + 12], 6, 1700485571), t = y(t, n, r, i, u[e + 3], 10, -1894986606), i = y(i, t, n, r, u[e + 10], 15, -1051523), r = y(r, i, t, n, u[e + 1], 21, -2054922799), n = y(n, r, i, t, u[e + 8], 6, 1873313359), t = y(t, n, r, i, u[e + 15], 10, -30611744), i = y(i, t, n, r, u[e + 6], 15, -1560198380), r = y(r, i, t, n, u[e + 13], 21, 1309151649), n = y(n, r, i, t, u[e + 4], 6, -145523070), t = y(t, n, r, i, u[e + 11], 10, -1120210379), i = y(i, t, n, r, u[e + 2], 15, 718787259), r = y(r, i, t, n, u[e + 9], 21, -343485551), n = n + T >>> 0, r = r + b >>> 0, i = i + A >>> 0, t = t + I >>> 0;
-      }
-      return v.endian([n, r, i, t]);
-    };
-    d._ff = function(o, f, u, a, n, r, i) {
-      var t = o + (f & u | ~f & a) + (n >>> 0) + i;
-      return (t << r | t >>> 32 - r) + f;
-    }, d._gg = function(o, f, u, a, n, r, i) {
-      var t = o + (f & a | u & ~a) + (n >>> 0) + i;
-      return (t << r | t >>> 32 - r) + f;
-    }, d._hh = function(o, f, u, a, n, r, i) {
-      var t = o + (f ^ u ^ a) + (n >>> 0) + i;
-      return (t << r | t >>> 32 - r) + f;
-    }, d._ii = function(o, f, u, a, n, r, i) {
-      var t = o + (u ^ (f | ~a)) + (n >>> 0) + i;
-      return (t << r | t >>> 32 - r) + f;
-    }, d._blocksize = 16, d._digestsize = 16, h.exports = function(o, f) {
-      if (o == null)
-        throw new Error("Illegal argument " + o);
-      var u = v.wordsToBytes(d(o, f));
-      return f && f.asBytes ? u : f && f.asString ? F.bytesToString(u) : v.bytesToHex(u);
-    };
-  }(), h.exports);
+import { __module as e } from "./index.native157.js";
+import { __require as o } from "./index.native158.js";
+import { __require as t } from "./index.native159.js";
+var r;
+function s() {
+  return r ? e.exports : (r = 1, process.env.NODE_ENV === "production" ? e.exports = o() : e.exports = t(), e.exports);
 }
 export {
-  G as __require
+  s as __require
 };