@coinbase/cdp-core 0.0.73 → 0.0.74

package/dist/esm/index.web35.js

@@ -1,11 +1,70 @@
-import { AuthManager as r } from "./index.web27.js";
-import { CustomAuthManager as o } from "./index.web36.js";
-import "@coinbase/cdp-api-client";
-import "viem";
-import { getConfig as n } from "./index.web44.js";
-function a(t) {
-  return n().customAuth?.getJwt ? new o(t) : new r(t);
+import { InputValidationError as o } from "./index.web32.js";
+import { DEFAULT_SECURE_IFRAME_BASE_PATH as l, DEFAULT_SECURE_IFRAME_THEME as i, SECURE_IFRAME_KEY_EXPORT_EVENT_TYPE as f, SECURE_IFRAME_EVENT_TYPE_PREFIX as u } from "./index.web36.js";
+function s() {
+  if (!document)
+    throw new Error("Document not found. This function must be called in a browser environment.");
 }
+function p(e) {
+  const t = e.basePath || l, n = ["fullWidth"];
+  return e.projectId && n.push(`projectId=${e.projectId.trim()}`), e.label && n.push(`label=${encodeURIComponent(e.label.trim())}`), e.copiedLabel && n.push(`copiedLabel=${encodeURIComponent(e.copiedLabel.trim())}`), e.icon !== !1 && n.push("icon"), `${t}?${n.join("&")}`;
+}
+function S(e, t) {
+  if (!e?.contentWindow || !e?.src) return;
+  const n = E(e.src);
+  n && e.contentWindow.postMessage(t, n);
+}
+function E(e) {
+  try {
+    return new URL(e).origin;
+  } catch (t) {
+    return console.error("Error parsing iframe origin", t), "";
+  }
+}
+function h(e) {
+  if (e instanceof HTMLIFrameElement)
+    throw new o(
+      "target cannot be an iframe element. Pass a container element or CSS selector instead."
+    );
+  s();
+  let t;
+  if (typeof e == "string") {
+    const r = document.querySelector(e);
+    if (!r)
+      throw new o(`No element found for selector "${e}".`);
+    if (r instanceof HTMLIFrameElement)
+      throw new o(
+        `Selector "${e}" resolved to an iframe element. Pass a container element or CSS selector instead.`
+      );
+    t = r;
+  } else
+    t = e;
+  const n = document.createElement("iframe");
+  return t.appendChild(n), n;
+}
+const m = {
+  lg: 1,
+  // 1em top + 1em bottom
+  md: 0.75,
+  // 0.75em top + 0.75em bottom
+  sm: 0.5,
+  // 0.5em top + 0.5em bottom
+  xs: 0.25
+  // 0.25em top + 0.25em bottom
+};
+function _(e) {
+  const t = e?.buttonSize || i.buttonSize, n = e?.buttonFontSize || i.buttonFontSize, r = 1.5, c = 4, a = m[t] * 2 + r;
+  return Math.ceil(a * n + c);
+}
+const b = (e) => typeof e == "object" && e !== null && "type" in e && typeof e.type == "string" && !!f[e.type.replace(
+  u,
+  ""
+)];
 export {
-  a as createAuthManager
+  p as buildKeyExportIframeUrl,
+  _ as calculateSecureIframeHeight,
+  h as createIframe,
+  E as getSecureIframeOrigin,
+  b as isSecureIframeKeyExportMessage,
+  S as sendSecureIframeMessage,
+  s as validateSecureIframeEnvironment
 };

package/dist/esm/index.web36.js

@@ -1,67 +1,37 @@
-import { AuthManager as a } from "./index.web27.js";
-import { getConfig as o } from "./index.web44.js";
-import { CustomAuthError as s } from "./index.web28.js";
-const n = 60 * 60 * 1e3;
-class l extends a {
-  /**
-   * Signs out the user, clearing all authentication state.
-   * For custom auth, we only clear local state without calling the CDP logout API,
-   * as authentication is managed by the external identity provider.
-   */
-  async signOut() {
-    await this.clearAuthState();
-  }
-  /**
-   * Gets the access token by calling the customAuth.getJwt callback.
-   * Returns null if the user is not signed in.
-   *
-   * @returns The access token from the custom auth provider.
-   */
-  async getToken() {
-    const e = o();
-    if (!e.customAuth)
-      return console.error("Custom auth configuration not found"), await this.clearAuthState(), null;
-    try {
-      const t = await e.customAuth.getJwt();
-      return t ? (this.authState && (this.authState.accessToken = t, this.authState.expiresAt = Date.now() + n), t) : (await this.clearAuthState(), null);
-    } catch (t) {
-      const r = new s(
-        t instanceof Error ? t.message : "Failed to get custom auth JWT"
-      );
-      return console.error(r), await this.clearAuthState(), null;
-    }
-  }
-  /**
-   * Internal async initialization logic for custom auth.
-   * No-op for custom auth since tokens are provided via customAuth.getJwt callback.
-   * Unlike standard CDP auth, custom auth doesn't need token refresh or OAuth handling.
-   */
-  async _doInitialize() {
-  }
-  /**
-   * Custom auth always fetches fresh tokens, so never needs to "refresh" in the traditional sense.
-   *
-   * @returns Always false since custom auth doesn't use token refresh logic.
-   */
-  shouldRefreshToken() {
-    return !1;
-  }
-  /**
-   * Custom auth doesn't use CDP's token refresh mechanism.
-   * Tokens are always provided fresh from the customAuth.getJwt callback.
-   * This method should never be called, but we override it as a defensive measure.
-   */
-  async refreshAccessToken() {
-  }
-  /**
-   * Custom auth provides fresh tokens on each request via customAuth.getJwt,
-   * so no scheduled refresh is needed. This method is a no-op for custom auth.
-   */
-  scheduleTokenRefresh() {
-    this.cancelTokenRefresh();
-  }
-}
+const t = "CDP_WEB_SECURE_IFRAME_", E = {
+  INIT: `${t}INIT`,
+  LISTENING: `${t}LISTENING`,
+  STATUS: `${t}STATUS`,
+  THEME: `${t}THEME`
+}, o = {
+  ...E,
+  GET_PRIVATE_KEY: `${t}GET_PRIVATE_KEY`
+}, f = "https://secure-wallet.cdp.coinbase.com", e = {
+  pageBg: "#ffffff",
+  buttonBg: "#0052ff",
+  buttonBgHover: "#0748d6",
+  buttonBgPressed: "#0b3eae",
+  buttonBgFocus: "#014cec",
+  buttonBorder: "#014cec",
+  buttonBorderHover: "#0748d6",
+  buttonBorderPressed: "#0b3eae",
+  buttonBorderFocus: "#014cec",
+  buttonBorderFocusInset: "#ffffff",
+  buttonText: "#ffffff",
+  buttonTextHover: "#ffffff",
+  buttonTextPressed: "#ffffff",
+  buttonTextFocus: "#ffffff",
+  buttonBorderRadius: 99999,
+  buttonFontSize: 16,
+  buttonFontWeight: 500,
+  buttonSize: "md",
+  fontUrl: "",
+  fontFamily: ""
+};
 export {
-  n as CUSTOM_AUTH_REFRESH_BUFFER_MS,
-  l as CustomAuthManager
+  f as DEFAULT_SECURE_IFRAME_BASE_PATH,
+  e as DEFAULT_SECURE_IFRAME_THEME,
+  E as SECURE_IFRAME_EVENT_TYPE,
+  t as SECURE_IFRAME_EVENT_TYPE_PREFIX,
+  o as SECURE_IFRAME_KEY_EXPORT_EVENT_TYPE
 };

package/dist/esm/index.web37.js

@@ -1,90 +1,73 @@
-import { verifyOAuth as i } from "./index.web9.js";
-import { getPlatformOAuth as h } from "./index.web4.js";
-import "@coinbase/cdp-api-client";
-import "viem";
-class A {
-  oauthFlowState = null;
-  oauthStateChangeCallbacks = [];
-  /**
-   * Adds a callback to be called when the OAuth state changes.
-   *
-   * @param callback - The function to call when the OAuth state changes.
-   */
-  async addOAuthStateChangeCallback(t) {
-    this.oauthStateChangeCallbacks.push(t), t(this.oauthFlowState);
-  }
-  /**
-   * Sets the OAuth flow state.
-   *
-   * @param oauthFlowState - The OAuth flow state.
-   */
-  async setOAuthFlowState(t) {
-    this.oauthFlowState = t, this.oauthStateChangeCallbacks.forEach((a) => a(this.oauthFlowState));
-  }
-  /**
-   * Clears the OAuth flow state.
-   */
-  async clearOAuthFlowState() {
-    this.oauthFlowState = null, this.oauthStateChangeCallbacks.forEach((t) => t(null));
-  }
-  /**
-   * Gets the OAuth flow state.
-   *
-   * @returns The OAuth flow state.
-   */
-  async getOAuthFlowState() {
-    return this.oauthFlowState;
-  }
-  /**
-   * Handles the OAuth code.
-   *
-   * @param url - The URL to handle.
-   * @returns A promise that resolves when the OAuth code is handled.
-   * @throws An error if the URL is required and not provided.
-   */
-  async handleOAuthCode(t) {
-    try {
-      const a = await h().getOAuthParams(t);
-      if (await h().cleanupOAuthParams(), !a)
-        return;
-      const { providerType: e, code: r, flowId: o, error: s, errorDescription: u } = a;
-      if (s || u) {
-        await this.setOAuthFlowState({
-          providerType: e,
-          status: "error",
-          errorDescription: s ?? u,
-          code: r,
-          flowId: o,
-          error: s
-        });
-        return;
+import "./index.web2.js";
+import { useSendHookCallOnce as l } from "./index.web62.js";
+import "./index.web3.js";
+import { getCurrentUserSync as T } from "./index.web13.js";
+import { getAccessToken as g, getAccessTokenExpiration as I } from "./index.web9.js";
+import { DEFAULT_SECURE_IFRAME_BASE_PATH as S, SECURE_IFRAME_KEY_EXPORT_EVENT_TYPE as s, DEFAULT_SECURE_IFRAME_THEME as h } from "./index.web36.js";
+import { validateSecureIframeEnvironment as f, createIframe as x, calculateSecureIframeHeight as A, buildKeyExportIframeUrl as U, getSecureIframeOrigin as k, isSecureIframeKeyExportMessage as b, sendSecureIframeMessage as E } from "./index.web35.js";
+import { getConfig as w } from "./index.web49.js";
+async function u(t) {
+  const e = x(t.target), y = A(t.theme), c = w().secureIframeBasePath || S;
+  e.setAttribute("allow", "clipboard-read; clipboard-write"), e.style.border = "none", e.style.display = "none", e.style.height = `${y}px`, e.src = U({ ...t, basePath: c });
+  const i = k(c);
+  let m = !1;
+  const p = () => {
+    m || (m = !0, window.removeEventListener("message", d), e.parentNode && e.parentNode.removeChild(e));
+  }, d = async (a) => {
+    if (!i || a.origin !== i) return;
+    const n = a.data;
+    if (b(n))
+      switch (n.type) {
+        case s.LISTENING: {
+          const r = T();
+          if (!r) {
+            t.onStatusUpdate?.("error", "User not authenticated");
+            return;
+          }
+          const o = await g(), _ = await I();
+          E(e, {
+            type: s.GET_PRIVATE_KEY,
+            payload: {
+              address: t.address,
+              type: t.type,
+              authState: {
+                accessToken: o || "",
+                expiresAt: _ || 0,
+                user: r
+              },
+              theme: {
+                ...h,
+                ...t.theme || {}
+              }
+            }
+          });
+          break;
+        }
+        case s.STATUS: {
+          const { status: r, message: o } = n.payload;
+          r === "ready" && (e.style.display = "block"), r === "expired" && (e.style.display = "none", p()), t.onStatusUpdate?.(r, o);
+          break;
+        }
       }
-      if (!r || !e || !o)
-        return;
-      await this.setOAuthFlowState({
-        providerType: e,
-        status: "pending",
-        code: r,
-        flowId: o
-      }), await i({
-        code: r,
-        providerType: e,
-        flowId: o
-      }), await this.setOAuthFlowState({
-        providerType: e,
-        status: "success",
-        code: r,
-        flowId: o
-      });
-    } catch (a) {
-      const e = a instanceof Error ? a.message : "Unknown error";
-      await h().cleanupOAuthParams(), await this.setOAuthFlowState({
-        status: "error",
-        errorDescription: e
+  };
+  return window.addEventListener("message", d), {
+    iframe: e,
+    cleanup: p,
+    updateTheme: (a) => {
+      E(e, {
+        type: s.THEME,
+        payload: { theme: a }
       });
     }
-  }
+  };
+}
+async function N(t) {
+  return l("create_evm_key_export_iframe"), f(), u({ ...t, type: "evm" });
+}
+async function O(t) {
+  return l("create_solana_key_export_iframe"), f(), u({ ...t, type: "solana" });
 }
 export {
-  A as OAuthManager
+  N as createEvmKeyExportIframe,
+  O as createSolanaKeyExportIframe
 };

package/dist/esm/index.web38.js

@@ -1,25 +1,34 @@
-import "@coinbase/cdp-api-client";
-const a = (t) => ({
-  userId: t.userId,
-  // Deprecated fields - keep for backward compatibility
-  evmAccounts: t.evmAccounts?.map((c) => c) ?? [],
-  evmSmartAccounts: t.evmSmartAccounts?.map((c) => c) ?? [],
-  solanaAccounts: t.solanaAccounts?.map((c) => c) ?? [],
-  // New account object fields
-  evmAccountObjects: t.evmAccountObjects,
-  evmSmartAccountObjects: t.evmSmartAccountObjects,
-  solanaAccountObjects: t.solanaAccountObjects,
-  authenticationMethods: t.authenticationMethods.reduce((c, o) => (c[o.type] = o, c), {}),
-  mfaMethods: t.mfaMethods
-}), s = (t, c, o) => {
-  const e = new Date(c).getTime();
-  return {
-    accessToken: t,
-    expiresAt: e,
-    user: a(o)
-  };
-};
+function a(e) {
+  if (typeof btoa < "u")
+    return btoa(
+      Array.from(e).map((t) => String.fromCharCode(t)).join("")
+    );
+  const c = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
+  let r = "";
+  for (let t = 0; t < e.length; t += 3) {
+    const h = e[t], n = t + 1 < e.length ? e[t + 1] : 0, s = t + 2 < e.length ? e[t + 2] : 0, o = h << 16 | n << 8 | s;
+    r += c.charAt(o >> 18 & 63), r += c.charAt(o >> 12 & 63), r += t + 1 < e.length ? c.charAt(o >> 6 & 63) : "=", r += t + 2 < e.length ? c.charAt(o & 63) : "=";
+  }
+  return r;
+}
+function g(e) {
+  if (typeof atob < "u") {
+    const n = atob(e), s = new Uint8Array(n.length);
+    for (let o = 0; o < n.length; o++)
+      s[o] = n.charCodeAt(o);
+    return s;
+  }
+  const c = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/", r = {};
+  for (let n = 0; n < c.length; n++)
+    r[c[n]] = n;
+  const t = e.replace(/[^A-Za-z0-9+/]/g, ""), h = [];
+  for (let n = 0; n < t.length; n += 4) {
+    const s = r[t[n]] || 0, o = r[t[n + 1]] || 0, l = r[t[n + 2]] || 0, f = r[t[n + 3]] || 0, i = s << 18 | o << 12 | l << 6 | f;
+    h.push(i >> 16 & 255), n + 2 < t.length && h.push(i >> 8 & 255), n + 3 < t.length && h.push(i & 255);
+  }
+  return new Uint8Array(h);
+}
 export {
-  s as toAuthState,
-  a as toAuthStateUser
+  g as decodeBase64,
+  a as encodeBase64
 };

package/dist/esm/index.web39.js

@@ -1,20 +1,5 @@
-import "@coinbase/cdp-api-client";
-import "viem";
-const i = async (n) => await n.isSignedIn();
-async function f(n, r, o) {
-  if (!await i(r))
-    throw new Error("User not signed in");
-  const c = r.getUser();
-  if ("evmAccount" in n && !c.evmAccounts?.find((t) => t === n.evmAccount))
-    throw new Error("EVM account not found");
-  if ("evmSmartAccount" in n && !c.evmSmartAccounts?.find((t) => t === n.evmSmartAccount))
-    throw new Error("EVM Smart Account not found");
-  if ("solanaAccount" in n && !c.solanaAccounts?.find((t) => t === n.solanaAccount))
-    throw new Error("Solana account not found");
-  const e = await r.getWalletSecretId();
-  return o({ ...n, user: c, walletSecretId: e });
-}
+import { __require as r } from "./index.web63.js";
+var f = r();
 export {
-  i as isSignedIn,
-  f as withAuth
+  f as b
 };

package/dist/esm/index.web40.js

@@ -1,139 +1,11 @@
+import { AuthManager as r } from "./index.web29.js";
+import { CustomAuthManager as o } from "./index.web41.js";
 import "@coinbase/cdp-api-client";
 import "viem";
-import { mockUser as e } from "./index.web42.js";
-class n {
-  authState = null;
-  authStateChangeCallback = null;
-  /**
-   * Initializes the mock auth manager.
-   *
-   * @param _projectId - The project ID (unused in mock implementation).
-   */
-  constructor(t) {
-  }
-  /**
-   * Awaitable method whose promise only resolves when the auth manager is ready to be used.
-   *
-   * @returns A promise that resolves when the auth manager is ready to be used.
-   */
-  async ensureInitialized() {
-    return Promise.resolve();
-  }
-  /**
-   * Gets the current user, or null if there is no user signed in.
-   *
-   * @returns The current mock user if signed in, null otherwise.
-   */
-  getUser() {
-    return this.authState?.user ?? null;
-  }
-  /**
-   * Returns whether the user is signed in - i.e., whether there is an unexpired
-   * access token and user.
-   *
-   * @returns True if the mock user is signed in and token is not expired, false otherwise.
-   */
-  async isSignedIn() {
-    return this.authState ? Promise.resolve(this.authState.expiresAt > Date.now()) : Promise.resolve(!1);
-  }
-  /**
-   * Signs out the user, clearing all authentication state.
-   * In the mock implementation, this simply clears the local auth state.
-   */
-  async signOut() {
-    await this.clearAuthState();
-  }
-  /**
-   * Sets a callback to be called when the auth state changes.
-   * The callback is immediately called with the current auth state.
-   *
-   * @param callback - The function to call when the auth state changes.
-   *                  Will be called with the current user or null.
-   */
-  addAuthStateChangeCallback(t) {
-    this.authStateChangeCallback = t, t(this.authState?.user ?? null);
-  }
-  /**
-   * Gets the access token. For mock, this always returns a valid token if signed in.
-   * If the current token is expired, it will be refreshed automatically.
-   *
-   * @param options - The options for getting the token.
-   * @param options.forceRefresh - Whether to force a refresh of the token.
-   * @returns The mock access token if signed in, null otherwise.
-   */
-  async getToken(t) {
-    return this.authState ? ((t?.forceRefresh || this.authState.expiresAt <= Date.now()) && await this.refreshToken(), this.authState?.accessToken ?? null) : null;
-  }
-  /**
-   * Gets the expiration time of the access token, or null if the user is not signed in.
-   *
-   * @returns The expiration time of the access token.
-   */
-  async getTokenExpiration() {
-    return this.authState?.expiresAt ?? null;
-  }
-  /**
-   * Gets the currentlly registered wallet secret ID.
-   *
-   * @returns The wallet secret ID.
-   */
-  async getWalletSecretId() {
-    return "mock-wallet-secret-id";
-  }
-  /**
-   * Gets the X-Wallet-Auth header value.
-   *
-   * @param _options - The options for the request.
-   * @param _options.requestMethod - The HTTP method of the request.
-   * @param _options.requestHost - The host of the request.
-   * @param _options.requestPath - The path of the request.
-   * @param _options.requestData - The data of the request.
-   * @returns The X-Wallet-Auth header value.
-   */
-  async getXWalletAuth(t) {
-    if (!this.authState)
-      throw new Error("User not signed in");
-    return "x-wallet-auth";
-  }
-  /**
-   * Gets the authentication state.
-   *
-   * @returns The authentication state.
-   */
-  getAuthState() {
-    return this.authState;
-  }
-  /**
-   * Sets the authentication state.
-   * This will trigger the auth state change callback if one is registered.
-   *
-   * @param authState - The new authentication state to set.
-   */
-  async setAuthState(t) {
-    this.authState = t, this.authStateChangeCallback && this.authStateChangeCallback(this.authState?.user ?? null);
-  }
-  /**
-   * Clears the authentication state.
-   * This will trigger the auth state change callback if one is registered.
-   */
-  async clearAuthState() {
-    this.authState = null, this.authStateChangeCallback && this.authStateChangeCallback(null);
-  }
-  /**
-   * Refreshes the mock token.
-   * Only refreshes if there is an existing auth state (user is signed in).
-   * Sets a new mock token with a 24-hour expiration.
-   *
-   * @private
-   */
-  async refreshToken() {
-    this.authState && await this.setAuthState({
-      accessToken: "mock-access-token",
-      expiresAt: Date.now() + 1e3 * 60 * 60 * 24,
-      user: e
-    });
-  }
+import { getConfig as n } from "./index.web49.js";
+function a(t) {
+  return n().customAuth?.getJwt ? new o(t) : new r(t);
 }
 export {
-  n as MockAuthManager
+  a as createAuthManager
 };