@coinbase/cdp-core 0.0.68 → 0.0.70

package/dist/native/index.native182.js

@@ -0,0 +1,81 @@
+function r(t, e = "algorithm.name") {
+  return new TypeError(`CryptoKey does not support this operation, its ${e} must be ${t}`);
+}
+function o(t, e) {
+  return t.name === e;
+}
+function c(t) {
+  return parseInt(t.name.slice(4), 10);
+}
+function h(t) {
+  switch (t) {
+    case "ES256":
+      return "P-256";
+    case "ES384":
+      return "P-384";
+    case "ES512":
+      return "P-521";
+    default:
+      throw new Error("unreachable");
+  }
+}
+function i(t, e) {
+  if (!t.usages.includes(e))
+    throw new TypeError(`CryptoKey does not support this operation, its usages must include ${e}.`);
+}
+function u(t, e, n) {
+  switch (e) {
+    case "HS256":
+    case "HS384":
+    case "HS512": {
+      if (!o(t.algorithm, "HMAC"))
+        throw r("HMAC");
+      const a = parseInt(e.slice(2), 10);
+      if (c(t.algorithm.hash) !== a)
+        throw r(`SHA-${a}`, "algorithm.hash");
+      break;
+    }
+    case "RS256":
+    case "RS384":
+    case "RS512": {
+      if (!o(t.algorithm, "RSASSA-PKCS1-v1_5"))
+        throw r("RSASSA-PKCS1-v1_5");
+      const a = parseInt(e.slice(2), 10);
+      if (c(t.algorithm.hash) !== a)
+        throw r(`SHA-${a}`, "algorithm.hash");
+      break;
+    }
+    case "PS256":
+    case "PS384":
+    case "PS512": {
+      if (!o(t.algorithm, "RSA-PSS"))
+        throw r("RSA-PSS");
+      const a = parseInt(e.slice(2), 10);
+      if (c(t.algorithm.hash) !== a)
+        throw r(`SHA-${a}`, "algorithm.hash");
+      break;
+    }
+    case "Ed25519":
+    case "EdDSA": {
+      if (!o(t.algorithm, "Ed25519"))
+        throw r("Ed25519");
+      break;
+    }
+    case "ES256":
+    case "ES384":
+    case "ES512": {
+      if (!o(t.algorithm, "ECDSA"))
+        throw r("ECDSA");
+      const a = h(e);
+      if (t.algorithm.namedCurve !== a)
+        throw r(a, "algorithm.namedCurve");
+      break;
+    }
+    default:
+      throw new TypeError("CryptoKey does not support this operation");
+  }
+  i(t, n);
+}
+export {
+  u as checkSigCryptoKey
+};

package/dist/native/index.native19.js

@@ -1,36 +1,19 @@
-import { createEndUserEvmSmartAccount as m } from "@coinbase/cdp-api-client";
-import { Analytics as i } from "./index.native30.js";
-import "./index.native31.js";
-import { toAuthStateUser as u } from "./index.native35.js";
-import { getCoreAuthManager as A, getConfig as f } from "./index.native28.js";
-import { createEvmEoaAccount as p } from "./index.native18.js";
-import { InternalError as S } from "./index.native24.js";
-import { validateUserCanCreateAccount as h } from "./index.native44.js";
-async function y(n) {
-  i.sendActionCallEvent({ name: "create_evm_smart_account" });
-  const t = A(), { user: e, authState: a } = h(
-    t.getUser(),
-    t.getAuthState(),
-    "smart"
-  ), c = await (async () => e.evmAccounts?.[0] ?? p())(), s = await m(
-    f().projectId,
-    e.userId,
-    {
-      owner: c,
-      enableSpendPermissions: n?.enableSpendPermissions ?? !1
-    }
-  ), r = u(s);
-  await t.setAuthState({
-    ...a,
-    user: r
+import { initiateAuthentication as e } from "@coinbase/cdp-api-client";
+import { Analytics as o } from "./index.native2.js";
+import "./index.native3.js";
+import { getPlatformOAuth as n } from "./index.native8.js";
+import { getCoreAuthManager as r, getConfig as a } from "./index.native35.js";
+async function g(t) {
+  if (o.sendActionCallEvent({ name: "link_oauth" }), !await r().isSignedIn())
+    throw new Error("User must be signed in to link an OAuth account");
+  const i = await e(a().projectId, {
+    type: t,
+    redirectUrl: n().getRedirectUrl()
   });
-  const o = r.evmSmartAccounts?.[0];
-  if (!o)
-    throw new S(
-      "EVM Smart Account was not created. Check the network log for more details."
-    );
-  return o;
+  if (!("authUrl" in i))
+    throw new Error(`Failed to initiate ${t} authentication`);
+  n().initiateOAuthFlow(i.authUrl);
 }
 export {
-  y as createEvmSmartAccount
+  g as linkOAuth
 };

package/dist/native/index.native2.js

@@ -1,110 +1,60 @@
-import { ModuleResolutionError as n } from "./index.native24.js";
-import { decodeBase64 as c, encodeBase64 as a } from "./index.native27.js";
-import "@coinbase/cdp-api-client";
-import "viem";
-const l = {
-  /**
-   * Creates a secp256r1 key pair for React Native.
-   *
-   * @returns A promise that resolves to a key pair.
-   */
-  async createKeyPair() {
-    if (typeof crypto > "u" || !crypto.subtle)
-      throw new n("react-native-quick-crypto", "crypto.subtle");
-    const e = await crypto.subtle.generateKey(
-      {
-        name: "ECDSA",
-        namedCurve: "P-256"
-        // secp256r1
-      },
-      !1,
-      // Do not allow key export for security
-      ["sign", "verify"]
-      // Key usages
-    ), t = await crypto.subtle.exportKey("spki", e.publicKey), r = new Uint8Array(t), o = a(r);
-    return e.privateKey[Symbol.toStringTag] || Object.defineProperty(e.privateKey, Symbol.toStringTag, {
-      value: "CryptoKey",
-      configurable: !1,
-      enumerable: !1,
-      writable: !1
-    }), {
-      privateKey: e.privateKey,
-      publicKeyBase64: o
-    };
-  },
-  /**
-   * Creates an RSA key pair that allows private key export.
-   *
-   * @returns A promise that resolves to a key pair.
-   */
-  async createExportKeyPair() {
-    if (typeof crypto > "u" || !crypto.subtle)
-      throw new n("react-native-quick-crypto", "crypto.subtle");
-    const e = await crypto.subtle.generateKey(
-      {
-        name: "RSA-OAEP",
-        modulusLength: 2048,
-        publicExponent: new Uint8Array([1, 0, 1]),
-        hash: "SHA-256"
-      },
-      !0,
-      // Allow key export
-      ["encrypt", "decrypt"]
-    ), t = await crypto.subtle.exportKey("spki", e.publicKey), r = a(new Uint8Array(t));
-    return { privateKey: e.privateKey, publicKeyBase64: r };
-  },
-  /**
-   * Computes a hash of the given data.
-   *
-   * @param data - The data to hash.
-   * @returns A promise that resolves to the hex-encoded hash.
-   */
-  async hash(e) {
-    if (typeof crypto > "u" || !crypto.subtle)
-      throw new n("react-native-quick-crypto", "crypto.subtle");
-    const t = await crypto.subtle.digest("SHA-256", e), r = new Uint8Array(t);
-    return Array.from(r).map((y) => y.toString(16).padStart(2, "0")).join("");
-  },
-  /**
-   * Generates a cryptographically secure random identifier.
-   *
-   * @returns A random hex-encoded identifier.
-   */
-  generateRandomId() {
-    if (typeof crypto > "u" || !crypto.getRandomValues)
-      throw new n("react-native-quick-crypto", "crypto.getRandomValues");
-    const e = new Uint8Array(16);
-    return crypto.getRandomValues(e), Array.from(e, (t) => t.toString(16).padStart(2, "0")).join("");
-  },
-  /**
-   * Generates a cryptographically secure random salt.
-   *
-   * @returns A random bigint salt.
-   */
-  generateRandomSalt() {
-    if (typeof crypto > "u" || !crypto.getRandomValues)
-      throw new n("react-native-quick-crypto", "crypto.getRandomValues");
-    const e = new Uint8Array(32);
-    crypto.getRandomValues(e);
-    let t = 0n;
-    for (let r = 0; r < e.length; r++)
-      t = (t << 8n) + BigInt(e[r]);
-    return t;
-  },
-  /**
-   * Decrypts data using a private key with RSA-OAEP algorithm.
-   *
-   * @param privateKey - The private key to use for decryption.
-   * @param encryptedData - The base64-encoded encrypted data.
-   * @returns A promise that resolves to the decrypted string.
-   */
-  async decryptWithPrivateKey(e, t) {
-    if (typeof crypto > "u" || !crypto.subtle)
-      throw new n("react-native-quick-crypto", "crypto.subtle");
-    const r = c(t);
-    return await crypto.subtle.decrypt("RSA-OAEP", e, r);
-  }
-};
+import p from "./index.native140.js";
+import { getFramework as m } from "./index.native141.js";
+const y = "1f8d3e558f493e38a037dbfadb8ba344", v = "d473b1dcc969105adab157226cd9cf63", i = Symbol.for("@coinbase/cdp-analytics");
+function g() {
+  const t = globalThis;
+  return t[i] || (t[i] = {
+    identifier: "",
+    enabled: !0,
+    isProduction: !1,
+    isUsingMocks: !1,
+    sendEvent: o,
+    sendActionCallEvent: (e) => o({ ...e, type: "action_call" }),
+    sendHookCallEvent: (e) => o({ ...e, type: "hook_call" }),
+    sendComponentCallEvent: (e) => o({ ...e, type: "component_call" }),
+    versionRegistry: {},
+    registerPackageVersion: (e, s) => {
+      n.versionRegistry[e] = s;
+    }
+  }), t[i];
+}
+const n = g();
+async function o(t) {
+  if (!n.enabled || !n.identifier)
+    return;
+  const e = Date.now(), r = [{
+    user_id: n.identifier,
+    event_type: t.type,
+    platform: c() ? "web" : "native",
+    timestamp: e,
+    event_properties: {
+      project_name: "cdp-embedded-wallet",
+      framework: m(),
+      isLocalHost: u(),
+      isUsingMocks: n.isUsingMocks,
+      package_versions: n.versionRegistry,
+      ...t
+    }
+  }], a = JSON.stringify(r), d = e.toString(), l = p(a + d), f = {
+    client: n.isProduction ? v : y,
+    e: a,
+    checksum: l
+  };
+  await fetch("https://cca-lite.coinbase.com/amp", {
+    method: "POST",
+    mode: "no-cors",
+    headers: {
+      "Content-Type": "application/json"
+    },
+    body: JSON.stringify(f)
+  });
+}
+function c() {
+  return typeof window < "u" && typeof document < "u";
+}
+function u() {
+  return c() ? window.location.hostname === "localhost" || window.location.hostname === "127.0.0.1" : !1;
+}
 export {
-  l as nativeCrypto
+  n as Analytics
 };

package/dist/native/index.native20.js

@@ -1,30 +1,19 @@
-import { createEndUserSolanaAccount as c } from "@coinbase/cdp-api-client";
-import { Analytics as s } from "./index.native30.js";
-import "./index.native31.js";
-import { toAuthStateUser as u } from "./index.native35.js";
-import { InternalError as i } from "./index.native24.js";
-import { validateUserCanCreateAccount as l } from "./index.native44.js";
-import { getCoreAuthManager as m, getConfig as A } from "./index.native28.js";
-async function C() {
-  s.sendActionCallEvent({ name: "create_solana_account" });
-  const t = m(), { user: o, authState: r } = l(
-    t.getUser(),
-    t.getAuthState(),
-    "solana"
-  ), n = await c(A().projectId, o.userId, {
-    walletSecretId: await t.getWalletSecretId()
-  }), e = u(n);
-  await t.setAuthState({
-    ...r,
-    user: e
+import { initiateAuthentication as e } from "@coinbase/cdp-api-client";
+import { Analytics as n } from "./index.native2.js";
+import "./index.native3.js";
+import { getPlatformOAuth as i } from "./index.native8.js";
+import { getCoreAuthManager as r, getConfig as o } from "./index.native35.js";
+async function g() {
+  if (n.sendActionCallEvent({ name: "link_apple" }), !await r().isSignedIn())
+    throw new Error("User must be signed in to link an Apple account");
+  const t = await e(o().projectId, {
+    type: "apple",
+    redirectUrl: i().getRedirectUrl()
   });
-  const a = e.solanaAccounts?.[0];
-  if (!a)
-    throw new i(
-      "Solana account was not created. Check the network log for more details."
-    );
-  return a;
+  if (!("authUrl" in t))
+    throw new Error("Failed to initiate Apple authentication");
+  i().initiateOAuthFlow(t.authUrl);
 }
 export {
-  C as createSolanaAccount
+  g as linkApple
 };

package/dist/native/index.native21.js

@@ -1,239 +1,30 @@
-import { logOutEndUser as l, refreshAccessToken as o, registerTemporaryWalletSecret as c } from "@coinbase/cdp-api-client";
-import "jose";
-import { SignJWT as u } from "./index.native45.js";
-import { toAuthState as f } from "./index.native35.js";
-import "viem";
-import { getPlatformCrypto as n } from "./index.native6.js";
-import { sortKeys as S } from "./index.native40.js";
-import { getCoreOAuthManager as w } from "./index.native28.js";
-const i = 60 * 1e3;
-class R {
-  projectId;
-  authState = null;
-  walletSecret = null;
-  authStateChangeCallbacks = [];
-  initPromise = null;
-  refreshTimeout = null;
-  /**
-   * Initializes the token manager.
-   *
-   * @param projectId - The project ID.
-   */
-  constructor(e) {
-    this.projectId = e, this.initPromise = this._doInitialize();
-  }
-  /**
-   * Gets the current user, or null if there is no user signed in.
-   *
-   * @returns The current user.
-   */
-  getUser() {
-    return this.authState?.user ?? null;
-  }
-  /**
-   * Returns whether the user is signed in - i.e., whether there is an unexpired
-   * access token and user. Attempts to refresh the token if it's expired.
-   *
-   * @returns True if the user is signed in, false otherwise.
-   */
-  async isSignedIn() {
-    if (!this.authState)
-      return !1;
-    if (this.authState.expiresAt > Date.now() + i)
-      return !0;
-    try {
-      return await this.getToken() !== null;
-    } catch {
-      return !1;
-    }
-  }
-  /**
-   * Signs out the user, clearing all authentication state.
-   */
-  async signOut() {
-    try {
-      await l(this.projectId);
-    } catch {
-    } finally {
-      await this.clearAuthState();
-    }
-  }
-  /**
-   * Adds a callback to be called when the auth state changes.
-   *
-   * @param callback - The function to call when the auth state changes.
-   */
-  addAuthStateChangeCallback(e) {
-    this.authStateChangeCallbacks.push(e), e(this.authState?.user ?? null);
-  }
-  /**
-   * Gets the access token, refreshing it if it is expired. Returns null if the user is not
-   * signed in.
-   *
-   * @param options - The options for getting the token.
-   * @param options.forceRefresh - Whether to force a refresh of the token.
-   * @returns The access token.
-   */
-  async getToken(e) {
-    return (e?.forceRefresh || this.shouldRefreshToken()) && await this.refreshAccessToken(), this.authState?.accessToken ?? null;
-  }
-  /**
-   * Gets the expiration time of the access token, or null if the user is not signed in.
-   *
-   * @returns The expiration time of the access token.
-   */
-  async getTokenExpiration() {
-    return this.authState?.expiresAt ?? null;
-  }
-  /**
-   * Gets the currently registered wallet secret ID. Rejects if the user is not signed in.
-   *
-   * @returns The wallet secret ID.
-   */
-  async getWalletSecretId() {
-    if (!await this.isSignedIn())
-      throw new Error("Cannot get wallet secret ID if the user is not signed in");
-    return this.shouldRefreshWalletSecret() && await this.refreshWalletSecret(), this.walletSecret.walletSecretId;
-  }
-  /**
-   * Gets the X-Wallet-Auth header. Rejects if the user is not signed in.
-   *
-   * @param options - The options for the request.
-   * @param options.requestMethod - The HTTP method of the request.
-   * @param options.requestHost - The host of the request.
-   * @param options.requestPath - The path of the request.
-   * @param options.requestData - The data of the request.
-   * @returns The X-Wallet-Auth header.
-   */
-  async getXWalletAuth(e) {
-    if (!await this.isSignedIn())
-      throw new Error("Cannot get X-Wallet-Auth header if the user is not signed in");
-    this.shouldRefreshWalletSecret() && await this.refreshWalletSecret();
-    const t = `${e.requestMethod} ${e.requestHost}${e.requestPath}`, r = Math.floor(Date.now() / 1e3), a = n(), s = {
-      uris: [t]
-    };
-    if (e.requestData && Object.keys(e.requestData).length > 0) {
-      const h = S(e.requestData);
-      s.reqHash = await a.hash(new TextEncoder().encode(JSON.stringify(h)));
-    }
-    return await new u(s).setProtectedHeader({ alg: "ES256", typ: "JWT" }).setIssuedAt(r).setNotBefore(r).setJti(a.generateRandomId()).sign(this.walletSecret.keyPair.privateKey);
-  }
-  /**
-   * Gets the authentication state.
-   *
-   * @returns The authentication state.
-   */
-  getAuthState() {
-    return this.authState;
-  }
-  /**
-   * Sets the authentication state.
-   *
-   * @param authState - The authentication state.
-   */
-  async setAuthState(e) {
-    this.authState = e, this.authStateChangeCallbacks.forEach((t) => t(this.authState?.user ?? null)), this.scheduleTokenRefresh();
-  }
-  /**
-   * Clears the authentication state.
-   */
-  async clearAuthState() {
-    this.authState = null, this.walletSecret = null, this.cancelTokenRefresh(), this.authStateChangeCallbacks.forEach((e) => e(null));
-  }
-  /**
-   * Ensures the AuthManager is initialized before proceeding.
-   * If initialization is already in progress, waits for it to complete.
-   */
-  async ensureInitialized() {
-    if (this.initPromise) {
-      await this.initPromise;
-      return;
-    }
-    throw new Error("AuthManager not initialized");
-  }
-  /**
-   * Internal async initialization logic.
-   */
-  async _doInitialize() {
-    try {
-      await this.refreshAccessToken(), await w().handleOAuthCode();
-    } catch (e) {
-      console.warn("Failed to refresh access token during initialization:", e);
-    }
-  }
-  /**
-   * Returns whether the token should be refreshed.
-   *
-   * @returns True if the token should be refreshed, false otherwise.
-   */
-  shouldRefreshToken() {
-    return !(this.authState && this.authState.expiresAt > Date.now() + i);
-  }
-  /**
-   * Refreshes the access token and transitions the auth state accordingly.
-   * If a refresh is already in progress, it will wait for that refresh to complete.
-   *
-   * @returns The new access token.
-   */
-  async refreshAccessToken() {
-    try {
-      const e = await o(this.projectId, {
-        grantType: "refresh_token"
-      }), t = f(
-        e.accessToken,
-        e.validUntil,
-        e.endUser
-      );
-      await this.setAuthState(t);
-    } catch {
-      await this.signOut();
-    }
-  }
-  /**
-   * Schedules a token refresh to occur exactly when shouldRefreshToken() would return true.
-   * Uses the same REFRESH_CREDENTIALS_BUFFER_MS timing as the rest of the auth system.
-   */
-  scheduleTokenRefresh() {
-    if (this.cancelTokenRefresh(), !this.authState)
-      return;
-    const t = this.authState.expiresAt - i - Date.now();
-    t <= 0 || (this.refreshTimeout = setTimeout(async () => {
-      await this.refreshAccessToken(), this.scheduleTokenRefresh();
-    }, t));
-  }
-  /**
-   * Cancels any scheduled token refresh.
-   */
-  cancelTokenRefresh() {
-    this.refreshTimeout && (clearTimeout(this.refreshTimeout), this.refreshTimeout = null);
-  }
-  /**
-   * Returns whether the wallet secret should be refreshed.
-   *
-   * @returns True if the wallet secret should be refreshed, false otherwise.
-   */
-  shouldRefreshWalletSecret() {
-    return !(this.walletSecret && this.walletSecret.expiresAt > Date.now() + i);
-  }
-  /**
-   * Refreshes the wallet secret. Assumes the user is signed in.
-   *
-   * @returns The wallet secret.
-   */
-  async refreshWalletSecret() {
-    const e = n(), t = this.walletSecret?.walletSecretId ?? e.generateRandomId(), r = this.walletSecret?.keyPair ?? await e.createKeyPair(), a = this.authState.expiresAt, s = new Date(a).toISOString();
-    this.walletSecret = { walletSecretId: t, keyPair: r, expiresAt: a };
-    try {
-      await c(this.projectId, this.authState.user.userId, {
-        walletSecretId: t,
-        publicKey: r.publicKeyBase64,
-        validUntil: s
-      });
-    } catch (h) {
-      throw this.walletSecret = null, h;
-    }
-  }
+import { createEndUserEvmAccount as c } from "@coinbase/cdp-api-client";
+import { Analytics as s } from "./index.native2.js";
+import "./index.native3.js";
+import { toAuthStateUser as m } from "./index.native40.js";
+import { InternalError as u } from "./index.native31.js";
+import { validateUserCanCreateAccount as i } from "./index.native49.js";
+import { getCoreAuthManager as A, getConfig as l } from "./index.native35.js";
+async function S() {
+  s.sendActionCallEvent({ name: "create_evm_eoa_account" });
+  const t = A(), { user: o, authState: a } = i(
+    t.getUser(),
+    t.getAuthState(),
+    "eoa"
+  ), n = await c(l().projectId, o.userId, {
+    walletSecretId: await t.getWalletSecretId()
+  }), e = m(n);
+  await t.setAuthState({
+    ...a,
+    user: e
+  });
+  const r = e.evmAccounts?.[0];
+  if (!r)
+    throw new u(
+      "EVM EOA account was not created. Check the network log for more details."
+    );
+  return r;
 }
 export {
-  R as AuthManager
+  S as createEvmEoaAccount
 };

package/dist/native/index.native22.js

@@ -1,21 +1,36 @@
-import { APIError as c, ErrorType as u, HttpErrorType as E, OAuth2ProviderType as a, SendEvmTransactionWithEndUserAccountBodyNetwork as d, SendSolanaTransactionWithEndUserAccountBodyNetwork as p } from "@coinbase/cdp-api-client";
-import "viem";
-class e extends Error {
-  /**
-   * Creates a new CustomAuthError.
-   *
-   * @param message - The error message.
-   */
-  constructor(r) {
-    super(r), this.name = "CustomAuthError";
-  }
+import { createEndUserEvmSmartAccount as m } from "@coinbase/cdp-api-client";
+import { Analytics as i } from "./index.native2.js";
+import "./index.native3.js";
+import { toAuthStateUser as u } from "./index.native40.js";
+import { getCoreAuthManager as A, getConfig as f } from "./index.native35.js";
+import { createEvmEoaAccount as p } from "./index.native21.js";
+import { InternalError as S } from "./index.native31.js";
+import { validateUserCanCreateAccount as h } from "./index.native49.js";
+async function y(n) {
+  i.sendActionCallEvent({ name: "create_evm_smart_account" });
+  const t = A(), { user: e, authState: a } = h(
+    t.getUser(),
+    t.getAuthState(),
+    "smart"
+  ), c = await (async () => e.evmAccounts?.[0] ?? p())(), s = await m(
+    f().projectId,
+    e.userId,
+    {
+      owner: c,
+      enableSpendPermissions: n?.enableSpendPermissions ?? !1
+    }
+  ), r = u(s);
+  await t.setAuthState({
+    ...a,
+    user: r
+  });
+  const o = r.evmSmartAccounts?.[0];
+  if (!o)
+    throw new S(
+      "EVM Smart Account was not created. Check the network log for more details."
+    );
+  return o;
 }
 export {
-  c as APIError,
-  e as CustomAuthError,
-  u as ErrorType,
-  E as HttpErrorType,
-  a as OAuth2ProviderType,
-  d as SendEvmTransactionWithEndUserAccountBodyNetwork,
-  p as SendSolanaTransactionWithEndUserAccountBodyNetwork
+  y as createEvmSmartAccount
 };