@coinbase/cdp-core 0.0.73 → 0.0.75

package/dist/web/index.web37.js

@@ -1,90 +1,73 @@
-import { verifyOAuth as i } from "./index.web9.js";
-import { getPlatformOAuth as h } from "./index.web4.js";
-import "@coinbase/cdp-api-client";
-import "viem";
-class A {
-  oauthFlowState = null;
-  oauthStateChangeCallbacks = [];
-  /**
-   * Adds a callback to be called when the OAuth state changes.
-   *
-   * @param callback - The function to call when the OAuth state changes.
-   */
-  async addOAuthStateChangeCallback(t) {
-    this.oauthStateChangeCallbacks.push(t), t(this.oauthFlowState);
-  }
-  /**
-   * Sets the OAuth flow state.
-   *
-   * @param oauthFlowState - The OAuth flow state.
-   */
-  async setOAuthFlowState(t) {
-    this.oauthFlowState = t, this.oauthStateChangeCallbacks.forEach((a) => a(this.oauthFlowState));
-  }
-  /**
-   * Clears the OAuth flow state.
-   */
-  async clearOAuthFlowState() {
-    this.oauthFlowState = null, this.oauthStateChangeCallbacks.forEach((t) => t(null));
-  }
-  /**
-   * Gets the OAuth flow state.
-   *
-   * @returns The OAuth flow state.
-   */
-  async getOAuthFlowState() {
-    return this.oauthFlowState;
-  }
-  /**
-   * Handles the OAuth code.
-   *
-   * @param url - The URL to handle.
-   * @returns A promise that resolves when the OAuth code is handled.
-   * @throws An error if the URL is required and not provided.
-   */
-  async handleOAuthCode(t) {
-    try {
-      const a = await h().getOAuthParams(t);
-      if (await h().cleanupOAuthParams(), !a)
-        return;
-      const { providerType: e, code: r, flowId: o, error: s, errorDescription: u } = a;
-      if (s || u) {
-        await this.setOAuthFlowState({
-          providerType: e,
-          status: "error",
-          errorDescription: s ?? u,
-          code: r,
-          flowId: o,
-          error: s
-        });
-        return;
+import "./index.web2.js";
+import { useSendHookCallOnce as l } from "./index.web62.js";
+import "./index.web3.js";
+import { getCurrentUserSync as T } from "./index.web13.js";
+import { getAccessToken as g, getAccessTokenExpiration as I } from "./index.web9.js";
+import { DEFAULT_SECURE_IFRAME_BASE_PATH as S, SECURE_IFRAME_KEY_EXPORT_EVENT_TYPE as s, DEFAULT_SECURE_IFRAME_THEME as h } from "./index.web36.js";
+import { validateSecureIframeEnvironment as f, createIframe as x, calculateSecureIframeHeight as A, buildKeyExportIframeUrl as U, getSecureIframeOrigin as k, isSecureIframeKeyExportMessage as b, sendSecureIframeMessage as E } from "./index.web35.js";
+import { getConfig as w } from "./index.web49.js";
+async function u(t) {
+  const e = x(t.target), y = A(t.theme), c = w().secureIframeBasePath || S;
+  e.setAttribute("allow", "clipboard-read; clipboard-write"), e.style.border = "none", e.style.display = "none", e.style.height = `${y}px`, e.src = U({ ...t, basePath: c });
+  const i = k(c);
+  let m = !1;
+  const p = () => {
+    m || (m = !0, window.removeEventListener("message", d), e.parentNode && e.parentNode.removeChild(e));
+  }, d = async (a) => {
+    if (!i || a.origin !== i) return;
+    const n = a.data;
+    if (b(n))
+      switch (n.type) {
+        case s.LISTENING: {
+          const r = T();
+          if (!r) {
+            t.onStatusUpdate?.("error", "User not authenticated");
+            return;
+          }
+          const o = await g(), _ = await I();
+          E(e, {
+            type: s.GET_PRIVATE_KEY,
+            payload: {
+              address: t.address,
+              type: t.type,
+              authState: {
+                accessToken: o || "",
+                expiresAt: _ || 0,
+                user: r
+              },
+              theme: {
+                ...h,
+                ...t.theme || {}
+              }
+            }
+          });
+          break;
+        }
+        case s.STATUS: {
+          const { status: r, message: o } = n.payload;
+          r === "ready" && (e.style.display = "block"), r === "expired" && (e.style.display = "none", p()), t.onStatusUpdate?.(r, o);
+          break;
+        }
       }
-      if (!r || !e || !o)
-        return;
-      await this.setOAuthFlowState({
-        providerType: e,
-        status: "pending",
-        code: r,
-        flowId: o
-      }), await i({
-        code: r,
-        providerType: e,
-        flowId: o
-      }), await this.setOAuthFlowState({
-        providerType: e,
-        status: "success",
-        code: r,
-        flowId: o
-      });
-    } catch (a) {
-      const e = a instanceof Error ? a.message : "Unknown error";
-      await h().cleanupOAuthParams(), await this.setOAuthFlowState({
-        status: "error",
-        errorDescription: e
+  };
+  return window.addEventListener("message", d), {
+    iframe: e,
+    cleanup: p,
+    updateTheme: (a) => {
+      E(e, {
+        type: s.THEME,
+        payload: { theme: a }
       });
     }
-  }
+  };
+}
+async function N(t) {
+  return l("create_evm_key_export_iframe"), f(), u({ ...t, type: "evm" });
+}
+async function O(t) {
+  return l("create_solana_key_export_iframe"), f(), u({ ...t, type: "solana" });
 }
 export {
-  A as OAuthManager
+  N as createEvmKeyExportIframe,
+  O as createSolanaKeyExportIframe
 };

package/dist/web/index.web38.js

@@ -1,25 +1,34 @@
-import "@coinbase/cdp-api-client";
-const a = (t) => ({
-  userId: t.userId,
-  // Deprecated fields - keep for backward compatibility
-  evmAccounts: t.evmAccounts?.map((c) => c) ?? [],
-  evmSmartAccounts: t.evmSmartAccounts?.map((c) => c) ?? [],
-  solanaAccounts: t.solanaAccounts?.map((c) => c) ?? [],
-  // New account object fields
-  evmAccountObjects: t.evmAccountObjects,
-  evmSmartAccountObjects: t.evmSmartAccountObjects,
-  solanaAccountObjects: t.solanaAccountObjects,
-  authenticationMethods: t.authenticationMethods.reduce((c, o) => (c[o.type] = o, c), {}),
-  mfaMethods: t.mfaMethods
-}), s = (t, c, o) => {
-  const e = new Date(c).getTime();
-  return {
-    accessToken: t,
-    expiresAt: e,
-    user: a(o)
-  };
-};
+function a(e) {
+  if (typeof btoa < "u")
+    return btoa(
+      Array.from(e).map((t) => String.fromCharCode(t)).join("")
+    );
+  const c = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
+  let r = "";
+  for (let t = 0; t < e.length; t += 3) {
+    const h = e[t], n = t + 1 < e.length ? e[t + 1] : 0, s = t + 2 < e.length ? e[t + 2] : 0, o = h << 16 | n << 8 | s;
+    r += c.charAt(o >> 18 & 63), r += c.charAt(o >> 12 & 63), r += t + 1 < e.length ? c.charAt(o >> 6 & 63) : "=", r += t + 2 < e.length ? c.charAt(o & 63) : "=";
+  }
+  return r;
+}
+function g(e) {
+  if (typeof atob < "u") {
+    const n = atob(e), s = new Uint8Array(n.length);
+    for (let o = 0; o < n.length; o++)
+      s[o] = n.charCodeAt(o);
+    return s;
+  }
+  const c = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/", r = {};
+  for (let n = 0; n < c.length; n++)
+    r[c[n]] = n;
+  const t = e.replace(/[^A-Za-z0-9+/]/g, ""), h = [];
+  for (let n = 0; n < t.length; n += 4) {
+    const s = r[t[n]] || 0, o = r[t[n + 1]] || 0, l = r[t[n + 2]] || 0, f = r[t[n + 3]] || 0, i = s << 18 | o << 12 | l << 6 | f;
+    h.push(i >> 16 & 255), n + 2 < t.length && h.push(i >> 8 & 255), n + 3 < t.length && h.push(i & 255);
+  }
+  return new Uint8Array(h);
+}
 export {
-  s as toAuthState,
-  a as toAuthStateUser
+  g as decodeBase64,
+  a as encodeBase64
 };

package/dist/web/index.web39.js

@@ -1,20 +1,5 @@
-import "@coinbase/cdp-api-client";
-import "viem";
-const i = async (n) => await n.isSignedIn();
-async function f(n, r, o) {
-  if (!await i(r))
-    throw new Error("User not signed in");
-  const c = r.getUser();
-  if ("evmAccount" in n && !c.evmAccounts?.find((t) => t === n.evmAccount))
-    throw new Error("EVM account not found");
-  if ("evmSmartAccount" in n && !c.evmSmartAccounts?.find((t) => t === n.evmSmartAccount))
-    throw new Error("EVM Smart Account not found");
-  if ("solanaAccount" in n && !c.solanaAccounts?.find((t) => t === n.solanaAccount))
-    throw new Error("Solana account not found");
-  const e = await r.getWalletSecretId();
-  return o({ ...n, user: c, walletSecretId: e });
-}
+import { __require as r } from "./index.web63.js";
+var f = r();
 export {
-  i as isSignedIn,
-  f as withAuth
+  f as b
 };

package/dist/web/index.web40.js

@@ -1,139 +1,11 @@
+import { AuthManager as r } from "./index.web29.js";
+import { CustomAuthManager as o } from "./index.web41.js";
 import "@coinbase/cdp-api-client";
 import "viem";
-import { mockUser as e } from "./index.web42.js";
-class n {
-  authState = null;
-  authStateChangeCallback = null;
-  /**
-   * Initializes the mock auth manager.
-   *
-   * @param _projectId - The project ID (unused in mock implementation).
-   */
-  constructor(t) {
-  }
-  /**
-   * Awaitable method whose promise only resolves when the auth manager is ready to be used.
-   *
-   * @returns A promise that resolves when the auth manager is ready to be used.
-   */
-  async ensureInitialized() {
-    return Promise.resolve();
-  }
-  /**
-   * Gets the current user, or null if there is no user signed in.
-   *
-   * @returns The current mock user if signed in, null otherwise.
-   */
-  getUser() {
-    return this.authState?.user ?? null;
-  }
-  /**
-   * Returns whether the user is signed in - i.e., whether there is an unexpired
-   * access token and user.
-   *
-   * @returns True if the mock user is signed in and token is not expired, false otherwise.
-   */
-  async isSignedIn() {
-    return this.authState ? Promise.resolve(this.authState.expiresAt > Date.now()) : Promise.resolve(!1);
-  }
-  /**
-   * Signs out the user, clearing all authentication state.
-   * In the mock implementation, this simply clears the local auth state.
-   */
-  async signOut() {
-    await this.clearAuthState();
-  }
-  /**
-   * Sets a callback to be called when the auth state changes.
-   * The callback is immediately called with the current auth state.
-   *
-   * @param callback - The function to call when the auth state changes.
-   *                  Will be called with the current user or null.
-   */
-  addAuthStateChangeCallback(t) {
-    this.authStateChangeCallback = t, t(this.authState?.user ?? null);
-  }
-  /**
-   * Gets the access token. For mock, this always returns a valid token if signed in.
-   * If the current token is expired, it will be refreshed automatically.
-   *
-   * @param options - The options for getting the token.
-   * @param options.forceRefresh - Whether to force a refresh of the token.
-   * @returns The mock access token if signed in, null otherwise.
-   */
-  async getToken(t) {
-    return this.authState ? ((t?.forceRefresh || this.authState.expiresAt <= Date.now()) && await this.refreshToken(), this.authState?.accessToken ?? null) : null;
-  }
-  /**
-   * Gets the expiration time of the access token, or null if the user is not signed in.
-   *
-   * @returns The expiration time of the access token.
-   */
-  async getTokenExpiration() {
-    return this.authState?.expiresAt ?? null;
-  }
-  /**
-   * Gets the currentlly registered wallet secret ID.
-   *
-   * @returns The wallet secret ID.
-   */
-  async getWalletSecretId() {
-    return "mock-wallet-secret-id";
-  }
-  /**
-   * Gets the X-Wallet-Auth header value.
-   *
-   * @param _options - The options for the request.
-   * @param _options.requestMethod - The HTTP method of the request.
-   * @param _options.requestHost - The host of the request.
-   * @param _options.requestPath - The path of the request.
-   * @param _options.requestData - The data of the request.
-   * @returns The X-Wallet-Auth header value.
-   */
-  async getXWalletAuth(t) {
-    if (!this.authState)
-      throw new Error("User not signed in");
-    return "x-wallet-auth";
-  }
-  /**
-   * Gets the authentication state.
-   *
-   * @returns The authentication state.
-   */
-  getAuthState() {
-    return this.authState;
-  }
-  /**
-   * Sets the authentication state.
-   * This will trigger the auth state change callback if one is registered.
-   *
-   * @param authState - The new authentication state to set.
-   */
-  async setAuthState(t) {
-    this.authState = t, this.authStateChangeCallback && this.authStateChangeCallback(this.authState?.user ?? null);
-  }
-  /**
-   * Clears the authentication state.
-   * This will trigger the auth state change callback if one is registered.
-   */
-  async clearAuthState() {
-    this.authState = null, this.authStateChangeCallback && this.authStateChangeCallback(null);
-  }
-  /**
-   * Refreshes the mock token.
-   * Only refreshes if there is an existing auth state (user is signed in).
-   * Sets a new mock token with a 24-hour expiration.
-   *
-   * @private
-   */
-  async refreshToken() {
-    this.authState && await this.setAuthState({
-      accessToken: "mock-access-token",
-      expiresAt: Date.now() + 1e3 * 60 * 60 * 24,
-      user: e
-    });
-  }
+import { getConfig as n } from "./index.web49.js";
+function a(t) {
+  return n().customAuth?.getJwt ? new o(t) : new r(t);
 }
 export {
-  n as MockAuthManager
+  a as createAuthManager
 };

package/dist/web/index.web41.js

@@ -1,63 +1,67 @@
-import "@coinbase/cdp-api-client";
-import "viem";
-import { verifyOAuth as o } from "./index.web9.js";
-import { getPlatformOAuth as e } from "./index.web4.js";
-class i {
-  oauthFlowState = null;
-  oauthStateChangeCallbacks = [];
+import { AuthManager as a } from "./index.web29.js";
+import { getConfig as o } from "./index.web49.js";
+import { CustomAuthError as s } from "./index.web30.js";
+const n = 60 * 60 * 1e3;
+class l extends a {
   /**
-   * Initializes the mock OAuth manager.
+   * Signs out the user, clearing all authentication state.
+   * For custom auth, we only clear local state without calling the CDP logout API,
+   * as authentication is managed by the external identity provider.
    */
-  constructor() {
-    this.handleOAuthCode();
+  async signOut() {
+    await this.clearAuthState();
   }
   /**
-   * Gets the current user, or null if there is no user signed in.
+   * Gets the access token by calling the customAuth.getJwt callback.
+   * Returns null if the user is not signed in.
    *
-   * @returns The current mock user if signed in, null otherwise.
+   * @returns The access token from the custom auth provider.
    */
-  async getOAuthFlowState() {
-    return this.oauthFlowState ?? null;
+  async getToken() {
+    const e = o();
+    if (!e.customAuth)
+      return console.error("Custom auth configuration not found"), await this.clearAuthState(), null;
+    try {
+      const t = await e.customAuth.getJwt();
+      return t ? (this.authState && (this.authState.accessToken = t, this.authState.expiresAt = Date.now() + n), t) : (await this.clearAuthState(), null);
+    } catch (t) {
+      const r = new s(
+        t instanceof Error ? t.message : "Failed to get custom auth JWT"
+      );
+      return console.error(r), await this.clearAuthState(), null;
+    }
   }
   /**
-   * Sets the OAuth flow state.
-   *
-   * @param oauthFlowState - The OAuth flow state to set.
+   * Internal async initialization logic for custom auth.
+   * No-op for custom auth since tokens are provided via customAuth.getJwt callback.
+   * Unlike standard CDP auth, custom auth doesn't need token refresh or OAuth handling.
    */
-  async setOAuthFlowState(t) {
-    this.oauthFlowState = t, this.oauthStateChangeCallbacks.forEach((a) => a(this.oauthFlowState));
+  async _doInitialize() {
   }
   /**
-   * Adds a callback to be called when the OAuth state changes.
+   * Custom auth always fetches fresh tokens, so never needs to "refresh" in the traditional sense.
    *
-   * @param callback - The function to call when the OAuth state changes.
+   * @returns Always false since custom auth doesn't use token refresh logic.
    */
-  async addOAuthStateChangeCallback(t) {
-    this.oauthStateChangeCallbacks.push(t), t(this.oauthFlowState);
+  shouldRefreshToken() {
+    return !1;
   }
   /**
-   * Clears the OAuth flow state.
+   * Custom auth doesn't use CDP's token refresh mechanism.
+   * Tokens are always provided fresh from the customAuth.getJwt callback.
+   * This method should never be called, but we override it as a defensive measure.
    */
-  async clearOAuthFlowState() {
-    this.oauthFlowState = null, this.oauthStateChangeCallbacks.forEach((t) => t(null));
+  async refreshAccessToken() {
   }
   /**
-   * Awaitable method whose promise only resolves when the OAuth manager is ready to be used.
+   * Custom auth provides fresh tokens on each request via customAuth.getJwt,
+   * so no scheduled refresh is needed. This method is a no-op for custom auth.
    */
-  async handleOAuthCode() {
-    await e()?.cleanupOAuthParams(), await this.setOAuthFlowState({
-      providerType: "google",
-      status: "pending",
-      code: "mock-oauth-code",
-      flowId: "mock-flow-id"
-    }), await o({ code: "mock-oauth-code", providerType: "google", flowId: "mock-flow-id" }), await this.setOAuthFlowState({
-      providerType: "google",
-      status: "success",
-      code: "mock-oauth-code",
-      flowId: "mock-flow-id"
-    });
+  scheduleTokenRefresh() {
+    this.cancelTokenRefresh();
   }
 }
 export {
-  i as MockOAuthManager
+  n as CUSTOM_AUTH_REFRESH_BUFFER_MS,
+  l as CustomAuthManager
 };

package/dist/web/index.web42.js

@@ -1,31 +1,90 @@
+import { verifyOAuth as i } from "./index.web9.js";
+import { getPlatformOAuth as h } from "./index.web4.js";
 import "@coinbase/cdp-api-client";
 import "viem";
-const t = "0x0000000000000000000000000000000000000000", s = {
-  userId: "mock-user-id",
-  evmAccounts: [t],
-  evmSmartAccounts: [],
-  solanaAccounts: ["5fNfvyp5f3BB9T24s6bC8QjDXuJqvU8WjziJpEQi9PWT"],
-  evmAccountObjects: [
-    {
-      address: t,
-      createdAt: "2024-01-01T00:00:00Z"
-    }
-  ],
-  evmSmartAccountObjects: [],
-  solanaAccountObjects: [
-    {
-      address: "5fNfvyp5f3BB9T24s6bC8QjDXuJqvU8WjziJpEQi9PWT",
-      createdAt: "2024-01-01T00:00:00Z"
-    }
-  ],
-  authenticationMethods: {
-    email: {
-      type: "email",
-      email: "test@test.com"
+class A {
+  oauthFlowState = null;
+  oauthStateChangeCallbacks = [];
+  /**
+   * Adds a callback to be called when the OAuth state changes.
+   *
+   * @param callback - The function to call when the OAuth state changes.
+   */
+  async addOAuthStateChangeCallback(t) {
+    this.oauthStateChangeCallbacks.push(t), t(this.oauthFlowState);
+  }
+  /**
+   * Sets the OAuth flow state.
+   *
+   * @param oauthFlowState - The OAuth flow state.
+   */
+  async setOAuthFlowState(t) {
+    this.oauthFlowState = t, this.oauthStateChangeCallbacks.forEach((a) => a(this.oauthFlowState));
+  }
+  /**
+   * Clears the OAuth flow state.
+   */
+  async clearOAuthFlowState() {
+    this.oauthFlowState = null, this.oauthStateChangeCallbacks.forEach((t) => t(null));
+  }
+  /**
+   * Gets the OAuth flow state.
+   *
+   * @returns The OAuth flow state.
+   */
+  async getOAuthFlowState() {
+    return this.oauthFlowState;
+  }
+  /**
+   * Handles the OAuth code.
+   *
+   * @param url - The URL to handle.
+   * @returns A promise that resolves when the OAuth code is handled.
+   * @throws An error if the URL is required and not provided.
+   */
+  async handleOAuthCode(t) {
+    try {
+      const a = await h().getOAuthParams(t);
+      if (await h().cleanupOAuthParams(), !a)
+        return;
+      const { providerType: e, code: r, flowId: o, error: s, errorDescription: u } = a;
+      if (s || u) {
+        await this.setOAuthFlowState({
+          providerType: e,
+          status: "error",
+          errorDescription: s ?? u,
+          code: r,
+          flowId: o,
+          error: s
+        });
+        return;
+      }
+      if (!r || !e || !o)
+        return;
+      await this.setOAuthFlowState({
+        providerType: e,
+        status: "pending",
+        code: r,
+        flowId: o
+      }), await i({
+        code: r,
+        providerType: e,
+        flowId: o
+      }), await this.setOAuthFlowState({
+        providerType: e,
+        status: "success",
+        code: r,
+        flowId: o
+      });
+    } catch (a) {
+      const e = a instanceof Error ? a.message : "Unknown error";
+      await h().cleanupOAuthParams(), await this.setOAuthFlowState({
+        status: "error",
+        errorDescription: e
+      });
     }
   }
-};
+}
 export {
-  t as mockAddress,
-  s as mockUser
+  A as OAuthManager
 };