@coinbase/cdp-core 0.0.69 → 0.0.71

package/dist/native/index.native26.js

@@ -1,151 +1,14 @@
-import "viem";
-import "zustand";
-import "@coinbase/cdp-api-client";
-import { getCurrentUser as u } from "./index.native7.js";
-const r = {
-  rpc: {
-    invalidInput: -32e3,
-    resourceNotFound: -32001,
-    resourceUnavailable: -32002,
-    transactionRejected: -32003,
-    methodNotSupported: -32004,
-    limitExceeded: -32005,
-    parse: -32700,
-    invalidRequest: -32600,
-    methodNotFound: -32601,
-    invalidParams: -32602,
-    internal: -32603
-  },
-  provider: {
-    userRejectedRequest: 4001,
-    unauthorized: 4100,
-    unsupportedMethod: 4200,
-    disconnected: 4900,
-    chainDisconnected: 4901,
-    unsupportedChain: 4902
-  }
+import { initiateMfaVerification as e } from "@coinbase/cdp-api-client";
+import { Analytics as r } from "./index.native2.js";
+import "./index.native3.js";
+import { withAuth as o } from "./index.native41.js";
+import { getConfig as i, getCoreAuthManager as n } from "./index.native35.js";
+const u = async (t) => {
+  if (r.sendActionCallEvent({ name: "initiate_mfa_verification" }), !i().useMock)
+    return o({}, n(), async ({ user: a }) => {
+      await e(i().projectId, a.userId, t.mfaMethod);
+    });
 };
-class o extends Error {
-  /**
-   * The error code from EIP1193ErrorCode enum.
-   */
-  code;
-  /**
-   * Creates a new EIP-1193 Provider error.
-   *
-   * @param code - The error code from EIP1193ErrorCode enum.
-   * @param message - The error message.
-   */
-  constructor(t, n) {
-    super(n), this.code = t;
-  }
-}
-class c extends Error {
-  /**
-   * The error code from RPCErrorCode type.
-   */
-  code;
-  /**
-   * Creates a new RPC Invalid Params error.
-   *
-   * @param code - The error code from RPCErrorCode type.
-   * @param message - The error message.
-   */
-  constructor(t, n) {
-    super(n), this.code = t;
-  }
-}
-const h = /* @__PURE__ */ new Set([
-  "eth_accounts",
-  "eth_requestAccounts",
-  "personal_sign",
-  "eth_sendTransaction",
-  "eth_signTypedData_v4",
-  "eth_chainId",
-  "eth_sign",
-  "wallet_disconnect",
-  "wallet_switchEthereumChain",
-  "wallet_sendCalls",
-  "wallet_getCallsStatus",
-  "wallet_getCapabilities"
-]);
-function v(e, { chains: t }) {
-  const { method: n, params: a } = e;
-  if (typeof n != "string" || n.length === 0)
-    throw new c(
-      r.rpc.invalidParams,
-      "'method' must be a non-empty string."
-    );
-  const i = (a ?? [])[0]?.chainId;
-  if (typeof i == "string" && !t.some((d) => d.id === Number.parseInt(i, 16)))
-    throw new o(
-      r.provider.unsupportedChain,
-      `Chain ${i} not supported - make sure the provider is configured with the correct chains.`
-    );
-  if (a !== void 0 && !Array.isArray(a))
-    throw new c(
-      r.rpc.invalidParams,
-      "'params' must be an array if provided."
-    );
-  if (!h.has(n))
-    throw new o(
-      r.provider.unsupportedMethod,
-      `Method ${e.method} not supported`
-    );
-}
-async function s() {
-  const e = await u();
-  if (!e)
-    throw new o(
-      r.provider.unauthorized,
-      "User not connected"
-    );
-  return e;
-}
-async function f(e) {
-  const t = await s();
-  if (!t.evmAccounts?.includes(e) && !t.evmSmartAccounts?.includes(e))
-    throw new o(
-      r.provider.unauthorized,
-      "Address not owned by user"
-    );
-  return t;
-}
-async function A(e) {
-  const t = await s();
-  if (!t.evmAccounts?.includes(e))
-    throw new o(
-      r.provider.unauthorized,
-      "EOA not owned by user"
-    );
-  return t;
-}
-async function _(e) {
-  const t = await s();
-  if (!t.evmSmartAccounts?.includes(e))
-    throw new o(
-      r.provider.unauthorized,
-      "Smart account not owned by user"
-    );
-  return t;
-}
-async function y() {
-  const e = await s();
-  if (!e.evmSmartAccounts?.[0])
-    throw new o(
-      r.provider.unauthorized,
-      "No EVM smart accounts available"
-    );
-  return e;
-}
 export {
-  o as EIP1193ProviderError,
-  c as RPCRequestError,
-  r as STANDARD_ERROR_CODES,
-  v as validateRequest,
-  s as validateUserConnected,
-  y as validateUserHasEvmSmartAccount,
-  f as validateUserOwnsAddress,
-  A as validateUserOwnsEOA,
-  _ as validateUserOwnsSmartAccount
+  u as initiateMfaVerification
 };

package/dist/native/index.native27.js

@@ -1,34 +1,16 @@
-function a(e) {
-  if (typeof btoa < "u")
-    return btoa(
-      Array.from(e).map((t) => String.fromCharCode(t)).join("")
-    );
-  const c = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
-  let r = "";
-  for (let t = 0; t < e.length; t += 3) {
-    const h = e[t], n = t + 1 < e.length ? e[t + 1] : 0, s = t + 2 < e.length ? e[t + 2] : 0, o = h << 16 | n << 8 | s;
-    r += c.charAt(o >> 18 & 63), r += c.charAt(o >> 12 & 63), r += t + 1 < e.length ? c.charAt(o >> 6 & 63) : "=", r += t + 2 < e.length ? c.charAt(o & 63) : "=";
-  }
-  return r;
-}
-function g(e) {
-  if (typeof atob < "u") {
-    const n = atob(e), s = new Uint8Array(n.length);
-    for (let o = 0; o < n.length; o++)
-      s[o] = n.charCodeAt(o);
-    return s;
-  }
-  const c = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/", r = {};
-  for (let n = 0; n < c.length; n++)
-    r[c[n]] = n;
-  const t = e.replace(/[^A-Za-z0-9+/]/g, ""), h = [];
-  for (let n = 0; n < t.length; n += 4) {
-    const s = r[t[n]] || 0, o = r[t[n + 1]] || 0, l = r[t[n + 2]] || 0, f = r[t[n + 3]] || 0, i = s << 18 | o << 12 | l << 6 | f;
-    h.push(i >> 16 & 255), n + 2 < t.length && h.push(i >> 8 & 255), n + 3 < t.length && h.push(i & 255);
-  }
-  return new Uint8Array(h);
-}
+import { submitMfaVerification as a } from "@coinbase/cdp-api-client";
+import { Analytics as e } from "./index.native2.js";
+import "./index.native3.js";
+import { withAuth as o } from "./index.native41.js";
+import { getConfig as i, getCoreAuthManager as m } from "./index.native35.js";
+const d = async (t) => {
+  if (e.sendActionCallEvent({ name: "submit_mfa_verification" }), !i().useMock)
+    return o(t, m(), async ({ user: r }) => {
+      await a(i().projectId, r.userId, t.mfaMethod, {
+        mfaCode: t.mfaCode
+      });
+    });
+};
 export {
-  g as decodeBase64,
-  a as encodeBase64
+  d as submitMfaVerification
 };

package/dist/native/index.native28.js

@@ -1,30 +1,239 @@
-import "@coinbase/cdp-api-client";
+import { logOutEndUser as l, refreshAccessToken as o, registerTemporaryWalletSecret as c } from "@coinbase/cdp-api-client";
+import "jose";
+import { SignJWT as u } from "./index.native50.js";
+import { toAuthState as f } from "./index.native40.js";
 import "viem";
-let r = null, n = null, e = null;
-const a = (t) => {
-  r = t;
-}, g = () => {
-  if (!r)
-    throw new Error("SDK not initialized");
-  return r;
-}, l = (t) => {
-  n = t;
-}, u = () => {
-  if (!n)
-    throw new Error("SDK not initialized");
-  return n;
-}, h = (t) => {
-  e = t;
-}, s = () => {
-  if (!e)
-    throw new Error("SDK not initialized");
-  return e;
-};
+import { getPlatformCrypto as n } from "./index.native8.js";
+import { sortKeys as S } from "./index.native45.js";
+import { getCoreOAuthManager as w } from "./index.native35.js";
+const i = 60 * 1e3;
+class R {
+  projectId;
+  authState = null;
+  walletSecret = null;
+  authStateChangeCallbacks = [];
+  initPromise = null;
+  refreshTimeout = null;
+  /**
+   * Initializes the token manager.
+   *
+   * @param projectId - The project ID.
+   */
+  constructor(e) {
+    this.projectId = e, this.initPromise = this._doInitialize();
+  }
+  /**
+   * Gets the current user, or null if there is no user signed in.
+   *
+   * @returns The current user.
+   */
+  getUser() {
+    return this.authState?.user ?? null;
+  }
+  /**
+   * Returns whether the user is signed in - i.e., whether there is an unexpired
+   * access token and user. Attempts to refresh the token if it's expired.
+   *
+   * @returns True if the user is signed in, false otherwise.
+   */
+  async isSignedIn() {
+    if (!this.authState)
+      return !1;
+    if (this.authState.expiresAt > Date.now() + i)
+      return !0;
+    try {
+      return await this.getToken() !== null;
+    } catch {
+      return !1;
+    }
+  }
+  /**
+   * Signs out the user, clearing all authentication state.
+   */
+  async signOut() {
+    try {
+      await l(this.projectId);
+    } catch {
+    } finally {
+      await this.clearAuthState();
+    }
+  }
+  /**
+   * Adds a callback to be called when the auth state changes.
+   *
+   * @param callback - The function to call when the auth state changes.
+   */
+  addAuthStateChangeCallback(e) {
+    this.authStateChangeCallbacks.push(e), e(this.authState?.user ?? null);
+  }
+  /**
+   * Gets the access token, refreshing it if it is expired. Returns null if the user is not
+   * signed in.
+   *
+   * @param options - The options for getting the token.
+   * @param options.forceRefresh - Whether to force a refresh of the token.
+   * @returns The access token.
+   */
+  async getToken(e) {
+    return (e?.forceRefresh || this.shouldRefreshToken()) && await this.refreshAccessToken(), this.authState?.accessToken ?? null;
+  }
+  /**
+   * Gets the expiration time of the access token, or null if the user is not signed in.
+   *
+   * @returns The expiration time of the access token.
+   */
+  async getTokenExpiration() {
+    return this.authState?.expiresAt ?? null;
+  }
+  /**
+   * Gets the currently registered wallet secret ID. Rejects if the user is not signed in.
+   *
+   * @returns The wallet secret ID.
+   */
+  async getWalletSecretId() {
+    if (!await this.isSignedIn())
+      throw new Error("Cannot get wallet secret ID if the user is not signed in");
+    return this.shouldRefreshWalletSecret() && await this.refreshWalletSecret(), this.walletSecret.walletSecretId;
+  }
+  /**
+   * Gets the X-Wallet-Auth header. Rejects if the user is not signed in.
+   *
+   * @param options - The options for the request.
+   * @param options.requestMethod - The HTTP method of the request.
+   * @param options.requestHost - The host of the request.
+   * @param options.requestPath - The path of the request.
+   * @param options.requestData - The data of the request.
+   * @returns The X-Wallet-Auth header.
+   */
+  async getXWalletAuth(e) {
+    if (!await this.isSignedIn())
+      throw new Error("Cannot get X-Wallet-Auth header if the user is not signed in");
+    this.shouldRefreshWalletSecret() && await this.refreshWalletSecret();
+    const t = `${e.requestMethod} ${e.requestHost}${e.requestPath}`, r = Math.floor(Date.now() / 1e3), a = n(), s = {
+      uris: [t]
+    };
+    if (e.requestData && Object.keys(e.requestData).length > 0) {
+      const h = S(e.requestData);
+      s.reqHash = await a.hash(new TextEncoder().encode(JSON.stringify(h)));
+    }
+    return await new u(s).setProtectedHeader({ alg: "ES256", typ: "JWT" }).setIssuedAt(r).setNotBefore(r).setJti(a.generateRandomId()).sign(this.walletSecret.keyPair.privateKey);
+  }
+  /**
+   * Gets the authentication state.
+   *
+   * @returns The authentication state.
+   */
+  getAuthState() {
+    return this.authState;
+  }
+  /**
+   * Sets the authentication state.
+   *
+   * @param authState - The authentication state.
+   */
+  async setAuthState(e) {
+    this.authState = e, this.authStateChangeCallbacks.forEach((t) => t(this.authState?.user ?? null)), this.scheduleTokenRefresh();
+  }
+  /**
+   * Clears the authentication state.
+   */
+  async clearAuthState() {
+    this.authState = null, this.walletSecret = null, this.cancelTokenRefresh(), this.authStateChangeCallbacks.forEach((e) => e(null));
+  }
+  /**
+   * Ensures the AuthManager is initialized before proceeding.
+   * If initialization is already in progress, waits for it to complete.
+   */
+  async ensureInitialized() {
+    if (this.initPromise) {
+      await this.initPromise;
+      return;
+    }
+    throw new Error("AuthManager not initialized");
+  }
+  /**
+   * Internal async initialization logic.
+   */
+  async _doInitialize() {
+    try {
+      await this.refreshAccessToken(), await w().handleOAuthCode();
+    } catch (e) {
+      console.warn("Failed to refresh access token during initialization:", e);
+    }
+  }
+  /**
+   * Returns whether the token should be refreshed.
+   *
+   * @returns True if the token should be refreshed, false otherwise.
+   */
+  shouldRefreshToken() {
+    return !(this.authState && this.authState.expiresAt > Date.now() + i);
+  }
+  /**
+   * Refreshes the access token and transitions the auth state accordingly.
+   * If a refresh is already in progress, it will wait for that refresh to complete.
+   *
+   * @returns The new access token.
+   */
+  async refreshAccessToken() {
+    try {
+      const e = await o(this.projectId, {
+        grantType: "refresh_token"
+      }), t = f(
+        e.accessToken,
+        e.validUntil,
+        e.endUser
+      );
+      await this.setAuthState(t);
+    } catch {
+      await this.signOut();
+    }
+  }
+  /**
+   * Schedules a token refresh to occur exactly when shouldRefreshToken() would return true.
+   * Uses the same REFRESH_CREDENTIALS_BUFFER_MS timing as the rest of the auth system.
+   */
+  scheduleTokenRefresh() {
+    if (this.cancelTokenRefresh(), !this.authState)
+      return;
+    const t = this.authState.expiresAt - i - Date.now();
+    t <= 0 || (this.refreshTimeout = setTimeout(async () => {
+      await this.refreshAccessToken(), this.scheduleTokenRefresh();
+    }, t));
+  }
+  /**
+   * Cancels any scheduled token refresh.
+   */
+  cancelTokenRefresh() {
+    this.refreshTimeout && (clearTimeout(this.refreshTimeout), this.refreshTimeout = null);
+  }
+  /**
+   * Returns whether the wallet secret should be refreshed.
+   *
+   * @returns True if the wallet secret should be refreshed, false otherwise.
+   */
+  shouldRefreshWalletSecret() {
+    return !(this.walletSecret && this.walletSecret.expiresAt > Date.now() + i);
+  }
+  /**
+   * Refreshes the wallet secret. Assumes the user is signed in.
+   *
+   * @returns The wallet secret.
+   */
+  async refreshWalletSecret() {
+    const e = n(), t = this.walletSecret?.walletSecretId ?? e.generateRandomId(), r = this.walletSecret?.keyPair ?? await e.createKeyPair(), a = this.authState.expiresAt, s = new Date(a).toISOString();
+    this.walletSecret = { walletSecretId: t, keyPair: r, expiresAt: a };
+    try {
+      await c(this.projectId, this.authState.user.userId, {
+        walletSecretId: t,
+        publicKey: r.publicKeyBase64,
+        validUntil: s
+      });
+    } catch (h) {
+      throw this.walletSecret = null, h;
+    }
+  }
+}
 export {
-  g as getConfig,
-  u as getCoreAuthManager,
-  s as getCoreOAuthManager,
-  a as setConfig,
-  l as setCoreAuthManager,
-  h as setCoreOAuthManager
+  R as AuthManager
 };

package/dist/native/index.native29.js

@@ -1,5 +1,21 @@
-import { __require as r } from "./index.native53.js";
-var f = r();
+import { APIError as c, ErrorType as u, HttpErrorType as E, OAuth2ProviderType as a, SendEvmTransactionWithEndUserAccountBodyNetwork as d, SendSolanaTransactionWithEndUserAccountBodyNetwork as p } from "@coinbase/cdp-api-client";
+import "viem";
+class e extends Error {
+  /**
+   * Creates a new CustomAuthError.
+   *
+   * @param message - The error message.
+   */
+  constructor(r) {
+    super(r), this.name = "CustomAuthError";
+  }
+}
 export {
-  f as b
+  c as APIError,
+  e as CustomAuthError,
+  u as ErrorType,
+  E as HttpErrorType,
+  a as OAuth2ProviderType,
+  d as SendEvmTransactionWithEndUserAccountBodyNetwork,
+  p as SendSolanaTransactionWithEndUserAccountBodyNetwork
 };

package/dist/native/index.native3.js

@@ -1,56 +1,2 @@
-import * as u from "expo-web-browser";
-import { WebBrowserResultType as o } from "expo-web-browser";
-import { getCoreOAuthManager as s, getConfig as l } from "./index.native28.js";
-const d = {
-  getRedirectUrl: () => {
-    const e = l().nativeOAuthCallback;
-    if (!e)
-      throw new Error("nativeOAuthCallback must be configured in order to use native OAuth");
-    return e;
-  },
-  getOAuthParams: (e) => {
-    if (!e)
-      return null;
-    const r = new URL(e), t = r.searchParams.get("code") ?? void 0, a = r.searchParams.get("provider_type") ?? void 0, i = r.searchParams.get("flow_id") ?? void 0, c = r.searchParams.get("error") ?? void 0, n = r.searchParams.get("error_description") ?? void 0;
-    return (!t || !a || !i) && !c && !n ? null : { code: t, providerType: a, flowId: i, error: c, errorDescription: n };
-  },
-  cleanupOAuthParams: () => {
-  },
-  initiateOAuthFlow: async (e) => {
-    const r = d.getRedirectUrl(), t = await u.openAuthSessionAsync(e, r);
-    switch (t.type) {
-      case "success":
-        if (!t.url)
-          throw new Error("URL is required for success result");
-        s().handleOAuthCode(t.url);
-        break;
-      case o.CANCEL:
-        s().setOAuthFlowState({
-          status: "error",
-          errorDescription: "User cancelled the OAuth flow"
-        });
-        break;
-      case o.DISMISS:
-        s().setOAuthFlowState({
-          status: "error",
-          errorDescription: "User dismissed the OAuth flow"
-        });
-        break;
-      case o.LOCKED:
-        s().setOAuthFlowState({
-          status: "error",
-          errorDescription: "The browser was locked"
-        });
-        break;
-      case o.OPENED:
-        break;
-      default:
-        throw new Error(
-          `Unexpected WebBrowser result type: ${t.type}`
-        );
-    }
-  }
-};
-export {
-  d as nativeOAuth
-};
+import { __require as r } from "./index.native159.js";
+r();