@coinbase/cdp-core 0.0.70 → 0.0.72

package/README.md

@@ -116,6 +116,63 @@ When `createOnLogin` is omitted, the SDK will:
 2. Require manual account creation using the account creation actions (see below)
 3. Give you full control over when and what types of accounts to create
 
+#### Multi-Account Support
+
+Users can have multiple accounts of each type:
+- Up to 10 EVM EOA accounts
+- Up to 10 Solana accounts
+- Up to 10 EVM Smart Accounts (each EVM EOA can own one Smart Account)
+
+**Using Account Objects (Recommended):**
+
+The SDK provides rich account objects with additional metadata like creation timestamps and owner relationships:
+
+```ts lines
+import { getCurrentUser } from "@coinbase/cdp-core";
+
+const user = await getCurrentUser();
+
+// Access all EVM EOA accounts with metadata
+if (user?.evmAccountObjects) {
+  user.evmAccountObjects.forEach((account, index) => {
+    console.log(`EVM Account ${index + 1}:`, account.address);
+    console.log(`Created:`, new Date(account.createdAt).toLocaleDateString());
+  });
+}
+
+// Access all Solana accounts with metadata
+if (user?.solanaAccountObjects) {
+  user.solanaAccountObjects.forEach((account, index) => {
+    console.log(`Solana Account ${index + 1}:`, account.address);
+    console.log(`Created:`, new Date(account.createdAt).toLocaleDateString());
+  });
+}
+
+// Access all EVM Smart Accounts with owner information
+if (user?.evmSmartAccountObjects) {
+  user.evmSmartAccountObjects.forEach((account, index) => {
+    console.log(`Smart Account ${index + 1}:`, account.address);
+    console.log(`Owners:`, account.ownerAddresses.join(', '));
+    console.log(`Created:`, new Date(account.createdAt).toLocaleDateString());
+  });
+}
+```
+
+**Legacy Account Arrays (Deprecated):**
+
+For backward compatibility, the SDK still provides simple address arrays, but these are deprecated:
+
+```ts lines
+// ⚠️ DEPRECATED - Use evmAccountObjects instead
+const evmAddresses = user?.evmAccounts; // string[]
+
+// ⚠️ DEPRECATED - Use solanaAccountObjects instead
+const solanaAddresses = user?.solanaAccounts; // string[]
+
+// ⚠️ DEPRECATED - Use evmSmartAccountObjects instead
+const smartAccounts = user?.evmSmartAccounts; // string[]
+```
+
 ### Sign In a User
 
 You're now ready to start calling the APIs provided by the package!
@@ -259,7 +316,7 @@ console.log("Is new user:", result.isNewUser);
 // The user is now signed in and wallets are created based on your config
 const user = await getCurrentUser();
 if (user?.evmAccounts?.[0]) {
-  console.log("EVM Address:", user.evmAccounts[0]);
+  console.log("EVM Address:", user.evmAccountObjects[0]?.address);
 }
 ```
 
@@ -286,14 +343,14 @@ if (signedIn) {
   console.log("User ID:", user.userId);
 
   // Display different account types based on configuration
-  if (user.evmAccounts?.length > 0) {
-    console.log("EVM Accounts (EOAs):", user.evmAccounts);
+  if (user.evmAccountObjects?.length > 0) {
+    console.log("EVM Accounts (EOAs):", user.evmAccountObjects);
   }
-  if (user.evmSmartAccounts?.length > 0) {
-    console.log("EVM Smart Accounts:", user.evmSmartAccounts);
+  if (user.evmSmartAccountObjects?.length > 0) {
+    console.log("EVM Smart Accounts:", user.evmSmartAccountObjects);
   }
-  if (user.solanaAccounts?.length > 0) {
-    console.log("Solana Accounts:", user.solanaAccounts);
+  if (user.solanaAccountObjects?.length > 0) {
+    console.log("Solana Accounts:", user.solanaAccountObjects);
   }
 
   // Find the user's email address (if they logged in with email/otp)
@@ -463,14 +520,14 @@ import { createEvmEoaAccount, getCurrentUser } from "@coinbase/cdp-core";
 // User must be signed in first
 const user = await getCurrentUser();
 
-if (!user.evmAccounts?.length) {
+if (!user.evmAccountObjects?.length) {
   // Create an EVM EOA (Externally Owned Account)
   const evmAddress = await createEvmEoaAccount();
   console.log("Created EVM EOA:", evmAddress);
 
   // The user object is automatically updated
   const updatedUser = await getCurrentUser();
-  console.log("User now has EVM EOA:", updatedUser.evmAccounts[0]);
+  console.log("User now has EVM EOA:", updatedUser.evmAccountObjects[0]?.address);
 }
 ```
 
@@ -484,15 +541,15 @@ import { createEvmSmartAccount, getCurrentUser } from "@coinbase/cdp-core";
 // User must be signed in first
 const user = await getCurrentUser();
 
-if (!user.evmSmartAccounts?.length) {
+if (!user.evmSmartAccountObjects?.length) {
   // Create a Smart Account (will automatically create an EOA first if needed)
   const smartAccountAddress = await createEvmSmartAccount();
   console.log("Created Smart Account:", smartAccountAddress);
 
   // The user object is automatically updated
   const updatedUser = await getCurrentUser();
-  console.log("User now has Smart Account:", updatedUser.evmSmartAccounts[0]);
-  console.log("And EOA (used as owner):", updatedUser.evmAccounts[0]);
+  console.log("User now has Smart Account:", updatedUser.evmSmartAccountObjects[0]?.address);
+  console.log("And EOA (used as owner):", updatedUser.evmAccountObjects[0]?.address);
 }
 ```
 
@@ -519,14 +576,14 @@ import { createSolanaAccount, getCurrentUser } from "@coinbase/cdp-core";
 // User must be signed in first
 const user = await getCurrentUser();
 
-if (!user.solanaAccounts?.length) {
+if (!user.solanaAccountObjects?.length) {
   // Create a Solana account
   const solanaAddress = await createSolanaAccount();
   console.log("Created Solana account:", solanaAddress);
 
   // The user object is automatically updated
   const updatedUser = await getCurrentUser();
-  console.log("User now has Solana account:", updatedUser.solanaAccounts[0]);
+  console.log("User now has Solana account:", updatedUser.solanaAccountObjects[0]?.address);
 }
 ```
 
@@ -548,7 +605,7 @@ We support signing and sending an EVM transaction in a single call on the follow
 import { sendEvmTransaction, getCurrentUser } from "@coinbase/cdp-core";
 
 const user = await getCurrentUser();
-const evmAccount = user.evmAccounts[0];
+const evmAccount = user.evmAccountObjects[0]?.address;
 
 const result = await sendEvmTransaction({
   evmAccount,
@@ -576,7 +633,7 @@ import { http, createPublicClient } from "viem";
 import { tron } from "viem/chains";
 
 const user = await getCurrentUser();
-const evmAccount = user.evmAccounts[0];
+const evmAccount = user.evmAccountObjects[0]?.address;
 
 // Sign the transaction
 const { signedTransaction } = await signEvmTransaction({
@@ -616,7 +673,7 @@ Spend permissions allow Smart Accounts to delegate spending authority to other a
 import { createSpendPermission, getCurrentUser } from "@coinbase/cdp-core";
 
 const user = await getCurrentUser();
-const smartAccount = user.evmSmartAccounts[0];
+const smartAccount = user.evmSmartAccountObjects[0]?.address;
 
 const result = await createSpendPermission({
   evmSmartAccount: smartAccount,
@@ -655,7 +712,7 @@ Retrieve all spend permissions for a Smart Account:
 import { listSpendPermissions, getCurrentUser } from "@coinbase/cdp-core";
 
 const user = await getCurrentUser();
-const smartAccount = user.evmSmartAccounts[0];
+const smartAccount = user.evmSmartAccountObjects[0]?.address;
 
 const result = await listSpendPermissions({
   evmSmartAccount: smartAccount,
@@ -689,7 +746,7 @@ Revoke a spend permission for a Smart Account:
 import { revokeSpendPermission, getCurrentUser } from "@coinbase/cdp-core";
 
 const user = await getCurrentUser();
-const smartAccount = user.evmSmartAccounts[0];
+const smartAccount = user.evmSmartAccountObjects[0]?.address;
 
 const result = await revokeSpendPermission({
   evmSmartAccount: smartAccount,
@@ -709,7 +766,7 @@ When your application is configured with `solana: { createOnLogin: true }`, you
 import { signSolanaTransaction, getCurrentUser } from "@coinbase/cdp-core";
 
 const user = await getCurrentUser();
-const solanaAccount = user.solanaAccounts[0];
+const solanaAccount = user.solanaAccountObjects[0]?.address;
 
 const result = await signSolanaTransaction({
   solanaAccount,
@@ -728,7 +785,7 @@ You can also sign arbitrary messages with Solana accounts:
 import { signSolanaMessage, getCurrentUser } from "@coinbase/cdp-core";
 
 const user = await getCurrentUser();
-const solanaAccount = user.solanaAccounts[0];
+const solanaAccount = user.solanaAccountObjects[0]?.address;
 
 const message = Buffer.from("Hello, Solana!", "utf8").toString("base64");
 const result = await signSolanaMessage({
@@ -750,7 +807,7 @@ You can sign and send a Solana transaction in a single call on the following Sol
 import { sendSolanaTransaction, getCurrentUser } from "@coinbase/cdp-core";
 
 const user = await getCurrentUser();
-const solanaAccount = user.solanaAccounts[0];
+const solanaAccount = user.solanaAccountObjects[0]?.address;
 
 const result = await sendSolanaTransaction({
   solanaAccount,
@@ -770,7 +827,7 @@ Send user operations from a Smart Account:
 import { sendUserOperation, getCurrentUser } from "@coinbase/cdp-core";
 
 const user = await getCurrentUser();
-const smartAccount = user.evmSmartAccounts[0];
+const smartAccount = user.evmSmartAccountObjects[0]?.address;
 
 const result = await sendUserOperation({
   evmSmartAccount: smartAccount,
@@ -789,6 +846,40 @@ const result = await sendUserOperation({
 console.log("User Operation Hash:", result.userOperationHash);
 ```
 
+**Transaction Attribution with EIP-8021:**
+
+You can add attribution data to user operations for tracking app usage and revenue sharing:
+
+```typescript lines
+import { sendUserOperation, getCurrentUser } from "@coinbase/cdp-core";
+
+const user = await getCurrentUser();
+const smartAccount = user.evmSmartAccountObjects[0]?.address;
+
+// EIP-8021 data suffix for "baseapp" attribution (Schema ID 0)
+// Format: {codes}{codesLength}{schemaId}{ercSuffix}
+const dataSuffix = "0xdddddddd62617365617070070080218021802180218021802180218021";
+
+const result = await sendUserOperation({
+  evmSmartAccount: smartAccount,
+  network: "base-sepolia",
+  calls: [
+    {
+      to: "0xTargetContract",
+      value: 0n,
+      data: "0x",
+    }
+  ],
+  dataSuffix, // Attribution data appended to callData
+  useCdpPaymaster: true,
+});
+
+console.log("User Operation Hash:", result.userOperationHash);
+// The dataSuffix will be appended to the user operation's callData for onchain attribution
+```
+
+The `dataSuffix` is a hex-encoded string that follows the [EIP-8021 standard](https://eip.tools/eip/8021) for transaction attribution. It allows apps to track usage and enable revenue sharing mechanisms. The suffix is automatically appended to the user operation's `callData` before submission.
+
 #### Get User Operation Status
 
 After sending a user operation, you can get its status and retrieve the result:
@@ -821,7 +912,7 @@ End users can sign EVM messages, hashes, and typed data to generate signatures f
 import { signEvmMessage, signEvmTypedData, getCurrentUser } from "@coinbase/cdp-core";
 
 const user = await getCurrentUser();
-const evmAccount = user.evmAccounts[0];
+const evmAccount = user.evmAccountObjects[0]?.address;
 
 // Sign a message
 const messageResult = await signEvmMessage({
@@ -863,7 +954,7 @@ End users can export their private keys from their embedded wallet, allowing the
 import { exportEvmAccount, getCurrentUser } from "@coinbase/cdp-core";
 
 const user = await getCurrentUser();
-const evmAccount = user.evmAccounts[0];
+const evmAccount = user.evmAccountObjects[0]?.address;
 
 const { privateKey } = await exportEvmAccount({
   evmAccount
@@ -881,7 +972,7 @@ When your application is configured with `solana: { createOnLogin: true }`, you
 import { exportSolanaAccount, getCurrentUser } from "@coinbase/cdp-core";
 
 const user = await getCurrentUser();
-const solanaAccount = user.solanaAccounts[0];
+const solanaAccount = user.solanaAccountObjects[0]?.address;
 
 const { privateKey } = await exportSolanaAccount({
   solanaAccount
@@ -968,7 +1059,7 @@ By default, `fetchWithX402` will use the user's Smart Account if available, fall
 
 ```typescript lines
 const user = await getCurrentUser();
-console.log("Using account:", user.evmSmartAccounts?.[0] || user.evmAccounts?.[0]);
+console.log("Using account:", user.evmSmartAccountObjects?.[0] || user.evmAccountObjects?.[0]);
 
 // This will automatically use the appropriate account type
 const { fetchWithPayment } = await fetchWithX402();
@@ -982,7 +1073,7 @@ Solana is supported out of the box with `fetchWithX402`. If your end user has bo
 const user = await getCurrentUser();
 
 const { fetchWithPayment } = fetchWithX402({
-  address: user.solanaAccounts[0]
+  address: user.solanaAccountObjects[0]?.address
 });
 ```
 
@@ -1049,7 +1140,7 @@ import { mainnet } from "viem/chains";
 import { http } from "viem";
 
 const user = await getCurrentUser();
-const evmAccount = user.evmAccounts[0];
+const evmAccount = user.evmAccountObjects[0]?.address;
 
 const viemAccount = toViemAccount(evmAccount);