@coinbase/cdp-core 0.0.69 → 0.0.71

package/dist/esm/index.web31.js

@@ -1,67 +1,50 @@
-import { AuthManager as a } from "./index.web20.js";
-import { getConfig as o } from "./index.web39.js";
-import { CustomAuthError as s } from "./index.web21.js";
-const n = 60 * 60 * 1e3;
-class l extends a {
-  /**
-   * Signs out the user, clearing all authentication state.
-   * For custom auth, we only clear local state without calling the CDP logout API,
-   * as authentication is managed by the external identity provider.
-   */
-  async signOut() {
-    await this.clearAuthState();
-  }
-  /**
-   * Gets the access token by calling the customAuth.getJwt callback.
-   * Returns null if the user is not signed in.
-   *
-   * @returns The access token from the custom auth provider.
-   */
-  async getToken() {
-    const e = o();
-    if (!e.customAuth)
-      return console.error("Custom auth configuration not found"), await this.clearAuthState(), null;
-    try {
-      const t = await e.customAuth.getJwt();
-      return t ? (this.authState && (this.authState.accessToken = t, this.authState.expiresAt = Date.now() + n), t) : (await this.clearAuthState(), null);
-    } catch (t) {
-      const r = new s(
-        t instanceof Error ? t.message : "Failed to get custom auth JWT"
-      );
-      return console.error(r), await this.clearAuthState(), null;
-    }
-  }
-  /**
-   * Internal async initialization logic for custom auth.
-   * No-op for custom auth since tokens are provided via customAuth.getJwt callback.
-   * Unlike standard CDP auth, custom auth doesn't need token refresh or OAuth handling.
-   */
-  async _doInitialize() {
-  }
-  /**
-   * Custom auth always fetches fresh tokens, so never needs to "refresh" in the traditional sense.
-   *
-   * @returns Always false since custom auth doesn't use token refresh logic.
-   */
-  shouldRefreshToken() {
-    return !1;
-  }
-  /**
-   * Custom auth doesn't use CDP's token refresh mechanism.
-   * Tokens are always provided fresh from the customAuth.getJwt callback.
-   * This method should never be called, but we override it as a defensive measure.
-   */
-  async refreshAccessToken() {
-  }
-  /**
-   * Custom auth provides fresh tokens on each request via customAuth.getJwt,
-   * so no scheduled refresh is needed. This method is a no-op for custom auth.
-   */
-  scheduleTokenRefresh() {
-    this.cancelTokenRefresh();
-  }
+import { createStore as c } from "zustand";
+import { subscribeWithSelector as p, persist as d, createJSONStorage as h } from "./index.web53.js";
+import { EventEmitter as f } from "./index.web54.js";
+import "./index.web55.js";
+import "viem";
+import "@coinbase/cdp-api-client";
+import { getPlatformStorage as u } from "./index.web4.js";
+import { createProvider as g } from "./index.web56.js";
+import { onAuthStateChange as l } from "./index.web9.js";
+function U(e) {
+  if (e.chains.length === 0)
+    throw new Error("At least one chain must be configured");
+  if (!e.transports)
+    throw new Error("Transports must be provided");
+  const o = e.chains, i = e.transports;
+  if (o.length === 0)
+    throw new Error("No chains found in configuration");
+  const m = new f(), n = u(), a = {
+    getItem: (t) => n.getItem(t),
+    setItem: (t, r) => n.setItem(t, r),
+    removeItem: (t) => n.removeItem(t)
+  }, s = c()(
+    p(
+      d(
+        (t) => ({
+          chainId: o[0].id,
+          setChainId: (r) => t({ chainId: r }),
+          chains: o,
+          user: null,
+          setUser: (r) => t({ user: r })
+        }),
+        {
+          name: "cdp-provider-store",
+          storage: h(() => a)
+        }
+      )
+    )
+  );
+  return s.persist.rehydrate(), l((t) => {
+    s.getState().setUser(t);
+  }), {
+    provider: g(m, s, {
+      chains: o,
+      transports: i
+    })
+  };
 }
 export {
-  n as CUSTOM_AUTH_REFRESH_BUFFER_MS,
-  l as CustomAuthManager
+  U as createCDPEmbeddedWallet
 };

package/dist/esm/index.web32.js

@@ -1,90 +1,151 @@
-import { verifyOAuth as i } from "./index.web6.js";
-import { getPlatformOAuth as h } from "./index.web2.js";
-import "@coinbase/cdp-api-client";
 import "viem";
-class A {
-  oauthFlowState = null;
-  oauthStateChangeCallbacks = [];
-  /**
-   * Adds a callback to be called when the OAuth state changes.
-   *
-   * @param callback - The function to call when the OAuth state changes.
-   */
-  async addOAuthStateChangeCallback(t) {
-    this.oauthStateChangeCallbacks.push(t), t(this.oauthFlowState);
+import "zustand";
+import "@coinbase/cdp-api-client";
+import { getCurrentUser as u } from "./index.web9.js";
+const r = {
+  rpc: {
+    invalidInput: -32e3,
+    resourceNotFound: -32001,
+    resourceUnavailable: -32002,
+    transactionRejected: -32003,
+    methodNotSupported: -32004,
+    limitExceeded: -32005,
+    parse: -32700,
+    invalidRequest: -32600,
+    methodNotFound: -32601,
+    invalidParams: -32602,
+    internal: -32603
+  },
+  provider: {
+    userRejectedRequest: 4001,
+    unauthorized: 4100,
+    unsupportedMethod: 4200,
+    disconnected: 4900,
+    chainDisconnected: 4901,
+    unsupportedChain: 4902
   }
+};
+class o extends Error {
   /**
-   * Sets the OAuth flow state.
-   *
-   * @param oauthFlowState - The OAuth flow state.
+   * The error code from EIP1193ErrorCode enum.
    */
-  async setOAuthFlowState(t) {
-    this.oauthFlowState = t, this.oauthStateChangeCallbacks.forEach((a) => a(this.oauthFlowState));
-  }
+  code;
   /**
-   * Clears the OAuth flow state.
+   * Creates a new EIP-1193 Provider error.
+   *
+   * @param code - The error code from EIP1193ErrorCode enum.
+   * @param message - The error message.
    */
-  async clearOAuthFlowState() {
-    this.oauthFlowState = null, this.oauthStateChangeCallbacks.forEach((t) => t(null));
+  constructor(t, n) {
+    super(n), this.code = t;
   }
+}
+class c extends Error {
   /**
-   * Gets the OAuth flow state.
-   *
-   * @returns The OAuth flow state.
+   * The error code from RPCErrorCode type.
    */
-  async getOAuthFlowState() {
-    return this.oauthFlowState;
-  }
+  code;
   /**
-   * Handles the OAuth code.
+   * Creates a new RPC Invalid Params error.
    *
-   * @param url - The URL to handle.
-   * @returns A promise that resolves when the OAuth code is handled.
-   * @throws An error if the URL is required and not provided.
+   * @param code - The error code from RPCErrorCode type.
+   * @param message - The error message.
    */
-  async handleOAuthCode(t) {
-    try {
-      const a = await h().getOAuthParams(t);
-      if (await h().cleanupOAuthParams(), !a)
-        return;
-      const { providerType: e, code: r, flowId: o, error: s, errorDescription: u } = a;
-      if (s || u) {
-        await this.setOAuthFlowState({
-          providerType: e,
-          status: "error",
-          errorDescription: s ?? u,
-          code: r,
-          flowId: o,
-          error: s
-        });
-        return;
-      }
-      if (!r || !e || !o)
-        return;
-      await this.setOAuthFlowState({
-        providerType: e,
-        status: "pending",
-        code: r,
-        flowId: o
-      }), await i({
-        code: r,
-        providerType: e,
-        flowId: o
-      }), await this.setOAuthFlowState({
-        providerType: e,
-        status: "success",
-        code: r,
-        flowId: o
-      });
-    } catch (a) {
-      const e = a instanceof Error ? a.message : "Unknown error";
-      await h().cleanupOAuthParams(), await this.setOAuthFlowState({
-        status: "error",
-        errorDescription: e
-      });
-    }
+  constructor(t, n) {
+    super(n), this.code = t;
   }
 }
+const h = /* @__PURE__ */ new Set([
+  "eth_accounts",
+  "eth_requestAccounts",
+  "personal_sign",
+  "eth_sendTransaction",
+  "eth_signTypedData_v4",
+  "eth_chainId",
+  "eth_sign",
+  "wallet_disconnect",
+  "wallet_switchEthereumChain",
+  "wallet_sendCalls",
+  "wallet_getCallsStatus",
+  "wallet_getCapabilities"
+]);
+function v(e, { chains: t }) {
+  const { method: n, params: a } = e;
+  if (typeof n != "string" || n.length === 0)
+    throw new c(
+      r.rpc.invalidParams,
+      "'method' must be a non-empty string."
+    );
+  const i = (a ?? [])[0]?.chainId;
+  if (typeof i == "string" && !t.some((d) => d.id === Number.parseInt(i, 16)))
+    throw new o(
+      r.provider.unsupportedChain,
+      `Chain ${i} not supported - make sure the provider is configured with the correct chains.`
+    );
+  if (a !== void 0 && !Array.isArray(a))
+    throw new c(
+      r.rpc.invalidParams,
+      "'params' must be an array if provided."
+    );
+  if (!h.has(n))
+    throw new o(
+      r.provider.unsupportedMethod,
+      `Method ${e.method} not supported`
+    );
+}
+async function s() {
+  const e = await u();
+  if (!e)
+    throw new o(
+      r.provider.unauthorized,
+      "User not connected"
+    );
+  return e;
+}
+async function f(e) {
+  const t = await s();
+  if (!t.evmAccounts?.includes(e) && !t.evmSmartAccounts?.includes(e))
+    throw new o(
+      r.provider.unauthorized,
+      "Address not owned by user"
+    );
+  return t;
+}
+async function A(e) {
+  const t = await s();
+  if (!t.evmAccounts?.includes(e))
+    throw new o(
+      r.provider.unauthorized,
+      "EOA not owned by user"
+    );
+  return t;
+}
+async function _(e) {
+  const t = await s();
+  if (!t.evmSmartAccounts?.includes(e))
+    throw new o(
+      r.provider.unauthorized,
+      "Smart account not owned by user"
+    );
+  return t;
+}
+async function y() {
+  const e = await s();
+  if (!e.evmSmartAccountObjects?.[0])
+    throw new o(
+      r.provider.unauthorized,
+      "No EVM smart accounts available"
+    );
+  return e;
+}
 export {
-  A as OAuthManager
+  o as EIP1193ProviderError,
+  c as RPCRequestError,
+  r as STANDARD_ERROR_CODES,
+  v as validateRequest,
+  s as validateUserConnected,
+  y as validateUserHasEvmSmartAccount,
+  f as validateUserOwnsAddress,
+  A as validateUserOwnsEOA,
+  _ as validateUserOwnsSmartAccount
 };

package/dist/esm/index.web33.js

@@ -1,20 +1,34 @@
-import "@coinbase/cdp-api-client";
-const s = (e) => ({
-  userId: e.userId,
-  evmAccounts: e.evmAccounts?.map((t) => t) ?? [],
-  evmSmartAccounts: e.evmSmartAccounts?.map((t) => t) ?? [],
-  solanaAccounts: e.solanaAccounts?.map((t) => t) ?? [],
-  authenticationMethods: e.authenticationMethods.reduce((t, o) => (t[o.type] = o, t), {}),
-  mfaMethods: e.mfaMethods
-}), c = (e, t, o) => {
-  const a = new Date(t).getTime();
-  return {
-    accessToken: e,
-    expiresAt: a,
-    user: s(o)
-  };
-};
+function a(e) {
+  if (typeof btoa < "u")
+    return btoa(
+      Array.from(e).map((t) => String.fromCharCode(t)).join("")
+    );
+  const c = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
+  let r = "";
+  for (let t = 0; t < e.length; t += 3) {
+    const h = e[t], n = t + 1 < e.length ? e[t + 1] : 0, s = t + 2 < e.length ? e[t + 2] : 0, o = h << 16 | n << 8 | s;
+    r += c.charAt(o >> 18 & 63), r += c.charAt(o >> 12 & 63), r += t + 1 < e.length ? c.charAt(o >> 6 & 63) : "=", r += t + 2 < e.length ? c.charAt(o & 63) : "=";
+  }
+  return r;
+}
+function g(e) {
+  if (typeof atob < "u") {
+    const n = atob(e), s = new Uint8Array(n.length);
+    for (let o = 0; o < n.length; o++)
+      s[o] = n.charCodeAt(o);
+    return s;
+  }
+  const c = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/", r = {};
+  for (let n = 0; n < c.length; n++)
+    r[c[n]] = n;
+  const t = e.replace(/[^A-Za-z0-9+/]/g, ""), h = [];
+  for (let n = 0; n < t.length; n += 4) {
+    const s = r[t[n]] || 0, o = r[t[n + 1]] || 0, l = r[t[n + 2]] || 0, f = r[t[n + 3]] || 0, i = s << 18 | o << 12 | l << 6 | f;
+    h.push(i >> 16 & 255), n + 2 < t.length && h.push(i >> 8 & 255), n + 3 < t.length && h.push(i & 255);
+  }
+  return new Uint8Array(h);
+}
 export {
-  c as toAuthState,
-  s as toAuthStateUser
+  g as decodeBase64,
+  a as encodeBase64
 };

package/dist/esm/index.web34.js

@@ -1,20 +1,5 @@
-import "@coinbase/cdp-api-client";
-import "viem";
-const i = async (n) => await n.isSignedIn();
-async function f(n, r, o) {
-  if (!await i(r))
-    throw new Error("User not signed in");
-  const c = r.getUser();
-  if ("evmAccount" in n && !c.evmAccounts?.find((t) => t === n.evmAccount))
-    throw new Error("EVM account not found");
-  if ("evmSmartAccount" in n && !c.evmSmartAccounts?.find((t) => t === n.evmSmartAccount))
-    throw new Error("EVM Smart Account not found");
-  if ("solanaAccount" in n && !c.solanaAccounts?.find((t) => t === n.solanaAccount))
-    throw new Error("Solana account not found");
-  const e = await r.getWalletSecretId();
-  return o({ ...n, user: c, walletSecretId: e });
-}
+import { __require as r } from "./index.web57.js";
+var f = r();
 export {
-  i as isSignedIn,
-  f as withAuth
+  f as b
 };

package/dist/esm/index.web35.js

@@ -1,139 +1,11 @@
+import { AuthManager as r } from "./index.web27.js";
+import { CustomAuthManager as o } from "./index.web36.js";
 import "@coinbase/cdp-api-client";
 import "viem";
-import { mockUser as e } from "./index.web37.js";
-class n {
-  authState = null;
-  authStateChangeCallback = null;
-  /**
-   * Initializes the mock auth manager.
-   *
-   * @param _projectId - The project ID (unused in mock implementation).
-   */
-  constructor(t) {
-  }
-  /**
-   * Awaitable method whose promise only resolves when the auth manager is ready to be used.
-   *
-   * @returns A promise that resolves when the auth manager is ready to be used.
-   */
-  async ensureInitialized() {
-    return Promise.resolve();
-  }
-  /**
-   * Gets the current user, or null if there is no user signed in.
-   *
-   * @returns The current mock user if signed in, null otherwise.
-   */
-  getUser() {
-    return this.authState?.user ?? null;
-  }
-  /**
-   * Returns whether the user is signed in - i.e., whether there is an unexpired
-   * access token and user.
-   *
-   * @returns True if the mock user is signed in and token is not expired, false otherwise.
-   */
-  async isSignedIn() {
-    return this.authState ? Promise.resolve(this.authState.expiresAt > Date.now()) : Promise.resolve(!1);
-  }
-  /**
-   * Signs out the user, clearing all authentication state.
-   * In the mock implementation, this simply clears the local auth state.
-   */
-  async signOut() {
-    await this.clearAuthState();
-  }
-  /**
-   * Sets a callback to be called when the auth state changes.
-   * The callback is immediately called with the current auth state.
-   *
-   * @param callback - The function to call when the auth state changes.
-   *                  Will be called with the current user or null.
-   */
-  addAuthStateChangeCallback(t) {
-    this.authStateChangeCallback = t, t(this.authState?.user ?? null);
-  }
-  /**
-   * Gets the access token. For mock, this always returns a valid token if signed in.
-   * If the current token is expired, it will be refreshed automatically.
-   *
-   * @param options - The options for getting the token.
-   * @param options.forceRefresh - Whether to force a refresh of the token.
-   * @returns The mock access token if signed in, null otherwise.
-   */
-  async getToken(t) {
-    return this.authState ? ((t?.forceRefresh || this.authState.expiresAt <= Date.now()) && await this.refreshToken(), this.authState?.accessToken ?? null) : null;
-  }
-  /**
-   * Gets the expiration time of the access token, or null if the user is not signed in.
-   *
-   * @returns The expiration time of the access token.
-   */
-  async getTokenExpiration() {
-    return this.authState?.expiresAt ?? null;
-  }
-  /**
-   * Gets the currentlly registered wallet secret ID.
-   *
-   * @returns The wallet secret ID.
-   */
-  async getWalletSecretId() {
-    return "mock-wallet-secret-id";
-  }
-  /**
-   * Gets the X-Wallet-Auth header value.
-   *
-   * @param _options - The options for the request.
-   * @param _options.requestMethod - The HTTP method of the request.
-   * @param _options.requestHost - The host of the request.
-   * @param _options.requestPath - The path of the request.
-   * @param _options.requestData - The data of the request.
-   * @returns The X-Wallet-Auth header value.
-   */
-  async getXWalletAuth(t) {
-    if (!this.authState)
-      throw new Error("User not signed in");
-    return "x-wallet-auth";
-  }
-  /**
-   * Gets the authentication state.
-   *
-   * @returns The authentication state.
-   */
-  getAuthState() {
-    return this.authState;
-  }
-  /**
-   * Sets the authentication state.
-   * This will trigger the auth state change callback if one is registered.
-   *
-   * @param authState - The new authentication state to set.
-   */
-  async setAuthState(t) {
-    this.authState = t, this.authStateChangeCallback && this.authStateChangeCallback(this.authState?.user ?? null);
-  }
-  /**
-   * Clears the authentication state.
-   * This will trigger the auth state change callback if one is registered.
-   */
-  async clearAuthState() {
-    this.authState = null, this.authStateChangeCallback && this.authStateChangeCallback(null);
-  }
-  /**
-   * Refreshes the mock token.
-   * Only refreshes if there is an existing auth state (user is signed in).
-   * Sets a new mock token with a 24-hour expiration.
-   *
-   * @private
-   */
-  async refreshToken() {
-    this.authState && await this.setAuthState({
-      accessToken: "mock-access-token",
-      expiresAt: Date.now() + 1e3 * 60 * 60 * 24,
-      user: e
-    });
-  }
+import { getConfig as n } from "./index.web44.js";
+function a(t) {
+  return n().customAuth?.getJwt ? new o(t) : new r(t);
 }
 export {
-  n as MockAuthManager
+  a as createAuthManager
 };

package/dist/esm/index.web36.js

@@ -1,63 +1,67 @@
-import "@coinbase/cdp-api-client";
-import "viem";
-import { verifyOAuth as o } from "./index.web6.js";
-import { getPlatformOAuth as e } from "./index.web2.js";
-class i {
-  oauthFlowState = null;
-  oauthStateChangeCallbacks = [];
+import { AuthManager as a } from "./index.web27.js";
+import { getConfig as o } from "./index.web44.js";
+import { CustomAuthError as s } from "./index.web28.js";
+const n = 60 * 60 * 1e3;
+class l extends a {
   /**
-   * Initializes the mock OAuth manager.
+   * Signs out the user, clearing all authentication state.
+   * For custom auth, we only clear local state without calling the CDP logout API,
+   * as authentication is managed by the external identity provider.
    */
-  constructor() {
-    this.handleOAuthCode();
+  async signOut() {
+    await this.clearAuthState();
   }
   /**
-   * Gets the current user, or null if there is no user signed in.
+   * Gets the access token by calling the customAuth.getJwt callback.
+   * Returns null if the user is not signed in.
    *
-   * @returns The current mock user if signed in, null otherwise.
+   * @returns The access token from the custom auth provider.
    */
-  async getOAuthFlowState() {
-    return this.oauthFlowState ?? null;
+  async getToken() {
+    const e = o();
+    if (!e.customAuth)
+      return console.error("Custom auth configuration not found"), await this.clearAuthState(), null;
+    try {
+      const t = await e.customAuth.getJwt();
+      return t ? (this.authState && (this.authState.accessToken = t, this.authState.expiresAt = Date.now() + n), t) : (await this.clearAuthState(), null);
+    } catch (t) {
+      const r = new s(
+        t instanceof Error ? t.message : "Failed to get custom auth JWT"
+      );
+      return console.error(r), await this.clearAuthState(), null;
+    }
   }
   /**
-   * Sets the OAuth flow state.
-   *
-   * @param oauthFlowState - The OAuth flow state to set.
+   * Internal async initialization logic for custom auth.
+   * No-op for custom auth since tokens are provided via customAuth.getJwt callback.
+   * Unlike standard CDP auth, custom auth doesn't need token refresh or OAuth handling.
    */
-  async setOAuthFlowState(t) {
-    this.oauthFlowState = t, this.oauthStateChangeCallbacks.forEach((a) => a(this.oauthFlowState));
+  async _doInitialize() {
   }
   /**
-   * Adds a callback to be called when the OAuth state changes.
+   * Custom auth always fetches fresh tokens, so never needs to "refresh" in the traditional sense.
    *
-   * @param callback - The function to call when the OAuth state changes.
+   * @returns Always false since custom auth doesn't use token refresh logic.
    */
-  async addOAuthStateChangeCallback(t) {
-    this.oauthStateChangeCallbacks.push(t), t(this.oauthFlowState);
+  shouldRefreshToken() {
+    return !1;
   }
   /**
-   * Clears the OAuth flow state.
+   * Custom auth doesn't use CDP's token refresh mechanism.
+   * Tokens are always provided fresh from the customAuth.getJwt callback.
+   * This method should never be called, but we override it as a defensive measure.
    */
-  async clearOAuthFlowState() {
-    this.oauthFlowState = null, this.oauthStateChangeCallbacks.forEach((t) => t(null));
+  async refreshAccessToken() {
   }
   /**
-   * Awaitable method whose promise only resolves when the OAuth manager is ready to be used.
+   * Custom auth provides fresh tokens on each request via customAuth.getJwt,
+   * so no scheduled refresh is needed. This method is a no-op for custom auth.
    */
-  async handleOAuthCode() {
-    await e()?.cleanupOAuthParams(), await this.setOAuthFlowState({
-      providerType: "google",
-      status: "pending",
-      code: "mock-oauth-code",
-      flowId: "mock-flow-id"
-    }), await o({ code: "mock-oauth-code", providerType: "google", flowId: "mock-flow-id" }), await this.setOAuthFlowState({
-      providerType: "google",
-      status: "success",
-      code: "mock-oauth-code",
-      flowId: "mock-flow-id"
-    });
+  scheduleTokenRefresh() {
+    this.cancelTokenRefresh();
   }
 }
 export {
-  i as MockOAuthManager
+  n as CUSTOM_AUTH_REFRESH_BUFFER_MS,
+  l as CustomAuthManager
 };