@coinbase/cdp-core 0.0.79 → 0.0.80

package/dist/web/index.web45.js

@@ -1,67 +1,70 @@
-import { AuthManager as a } from "./index.web33.js";
-import { getConfig as o } from "./index.web53.js";
-import { CustomAuthError as s } from "./index.web34.js";
-const n = 60 * 60 * 1e3;
-class l extends a {
-  /**
-   * Signs out the user, clearing all authentication state.
-   * For custom auth, we only clear local state without calling the CDP logout API,
-   * as authentication is managed by the external identity provider.
-   */
-  async signOut() {
-    await this.clearAuthState();
+import { InputValidationError as o } from "./index.web41.js";
+import { DEFAULT_SECURE_IFRAME_BASE_PATH as l, DEFAULT_SECURE_IFRAME_THEME as i, SECURE_IFRAME_KEY_EXPORT_EVENT_TYPE as f, SECURE_IFRAME_EVENT_TYPE_PREFIX as u } from "./index.web46.js";
+function s() {
+  if (!document)
+    throw new Error("Document not found. This function must be called in a browser environment.");
+}
+function p(e) {
+  const t = e.basePath || l, n = ["fullWidth"];
+  return e.projectId && n.push(`projectId=${e.projectId.trim()}`), e.label && n.push(`label=${encodeURIComponent(e.label.trim())}`), e.copiedLabel && n.push(`copiedLabel=${encodeURIComponent(e.copiedLabel.trim())}`), e.icon !== !1 && n.push("icon"), `${t}?${n.join("&")}`;
+}
+function S(e, t) {
+  if (!e?.contentWindow || !e?.src) return;
+  const n = E(e.src);
+  n && e.contentWindow.postMessage(t, n);
+}
+function E(e) {
+  try {
+    return new URL(e).origin;
+  } catch (t) {
+    return console.error("Error parsing iframe origin", t), "";
   }
-  /**
-   * Gets the access token by calling the customAuth.getJwt callback.
-   * Returns null if the user is not signed in.
-   *
-   * @returns The access token from the custom auth provider.
-   */
-  async getToken() {
-    const e = o();
-    if (!e.customAuth)
-      return console.error("Custom auth configuration not found"), await this.clearAuthState(), null;
-    try {
-      const t = await e.customAuth.getJwt();
-      return t ? (this.authState && (this.authState.accessToken = t, this.authState.expiresAt = Date.now() + n), t) : (await this.clearAuthState(), null);
-    } catch (t) {
-      const r = new s(
-        t instanceof Error ? t.message : "Failed to get custom auth JWT"
+}
+function h(e) {
+  if (e instanceof HTMLIFrameElement)
+    throw new o(
+      "target cannot be an iframe element. Pass a container element or CSS selector instead."
+    );
+  s();
+  let t;
+  if (typeof e == "string") {
+    const r = document.querySelector(e);
+    if (!r)
+      throw new o(`No element found for selector "${e}".`);
+    if (r instanceof HTMLIFrameElement)
+      throw new o(
+        `Selector "${e}" resolved to an iframe element. Pass a container element or CSS selector instead.`
       );
-      return console.error(r), await this.clearAuthState(), null;
-    }
-  }
-  /**
-   * Internal async initialization logic for custom auth.
-   * No-op for custom auth since tokens are provided via customAuth.getJwt callback.
-   * Unlike standard CDP auth, custom auth doesn't need token refresh or OAuth handling.
-   */
-  async _doInitialize() {
-  }
-  /**
-   * Custom auth always fetches fresh tokens, so never needs to "refresh" in the traditional sense.
-   *
-   * @returns Always false since custom auth doesn't use token refresh logic.
-   */
-  shouldRefreshToken() {
-    return !1;
-  }
-  /**
-   * Custom auth doesn't use CDP's token refresh mechanism.
-   * Tokens are always provided fresh from the customAuth.getJwt callback.
-   * This method should never be called, but we override it as a defensive measure.
-   */
-  async refreshAccessToken() {
-  }
-  /**
-   * Custom auth provides fresh tokens on each request via customAuth.getJwt,
-   * so no scheduled refresh is needed. This method is a no-op for custom auth.
-   */
-  scheduleTokenRefresh() {
-    this.cancelTokenRefresh();
-  }
+    t = r;
+  } else
+    t = e;
+  const n = document.createElement("iframe");
+  return t.appendChild(n), n;
+}
+const m = {
+  lg: 1,
+  // 1em top + 1em bottom
+  md: 0.75,
+  // 0.75em top + 0.75em bottom
+  sm: 0.5,
+  // 0.5em top + 0.5em bottom
+  xs: 0.25
+  // 0.25em top + 0.25em bottom
+};
+function _(e) {
+  const t = e?.buttonSize || i.buttonSize, n = e?.buttonFontSize || i.buttonFontSize, r = 1.5, c = 4, a = m[t] * 2 + r;
+  return Math.ceil(a * n + c);
 }
+const b = (e) => typeof e == "object" && e !== null && "type" in e && typeof e.type == "string" && !!f[e.type.replace(
+  u,
+  ""
+)];
 export {
-  n as CUSTOM_AUTH_REFRESH_BUFFER_MS,
-  l as CustomAuthManager
+  p as buildKeyExportIframeUrl,
+  _ as calculateSecureIframeHeight,
+  h as createIframe,
+  E as getSecureIframeOrigin,
+  b as isSecureIframeKeyExportMessage,
+  S as sendSecureIframeMessage,
+  s as validateSecureIframeEnvironment
 };

package/dist/web/index.web46.js

@@ -1,90 +1,37 @@
-import { verifyOAuth as i } from "./index.web9.js";
-import { getPlatformOAuth as h } from "./index.web4.js";
-import "@coinbase/cdp-api-client";
-import "viem";
-class A {
-  oauthFlowState = null;
-  oauthStateChangeCallbacks = [];
-  /**
-   * Adds a callback to be called when the OAuth state changes.
-   *
-   * @param callback - The function to call when the OAuth state changes.
-   */
-  async addOAuthStateChangeCallback(t) {
-    this.oauthStateChangeCallbacks.push(t), t(this.oauthFlowState);
-  }
-  /**
-   * Sets the OAuth flow state.
-   *
-   * @param oauthFlowState - The OAuth flow state.
-   */
-  async setOAuthFlowState(t) {
-    this.oauthFlowState = t, this.oauthStateChangeCallbacks.forEach((a) => a(this.oauthFlowState));
-  }
-  /**
-   * Clears the OAuth flow state.
-   */
-  async clearOAuthFlowState() {
-    this.oauthFlowState = null, this.oauthStateChangeCallbacks.forEach((t) => t(null));
-  }
-  /**
-   * Gets the OAuth flow state.
-   *
-   * @returns The OAuth flow state.
-   */
-  async getOAuthFlowState() {
-    return this.oauthFlowState;
-  }
-  /**
-   * Handles the OAuth code.
-   *
-   * @param url - The URL to handle.
-   * @returns A promise that resolves when the OAuth code is handled.
-   * @throws An error if the URL is required and not provided.
-   */
-  async handleOAuthCode(t) {
-    try {
-      const a = await h().getOAuthParams(t);
-      if (await h().cleanupOAuthParams(), !a)
-        return;
-      const { providerType: e, code: r, flowId: o, error: s, errorDescription: u } = a;
-      if (s || u) {
-        await this.setOAuthFlowState({
-          providerType: e,
-          status: "error",
-          errorDescription: s ?? u,
-          code: r,
-          flowId: o,
-          error: s
-        });
-        return;
-      }
-      if (!r || !e || !o)
-        return;
-      await this.setOAuthFlowState({
-        providerType: e,
-        status: "pending",
-        code: r,
-        flowId: o
-      }), await i({
-        code: r,
-        providerType: e,
-        flowId: o
-      }), await this.setOAuthFlowState({
-        providerType: e,
-        status: "success",
-        code: r,
-        flowId: o
-      });
-    } catch (a) {
-      const e = a instanceof Error ? a.message : "Unknown error";
-      await h().cleanupOAuthParams(), await this.setOAuthFlowState({
-        status: "error",
-        errorDescription: e
-      });
-    }
-  }
-}
+const t = "CDP_WEB_SECURE_IFRAME_", E = {
+  INIT: `${t}INIT`,
+  LISTENING: `${t}LISTENING`,
+  STATUS: `${t}STATUS`,
+  THEME: `${t}THEME`
+}, o = {
+  ...E,
+  GET_PRIVATE_KEY: `${t}GET_PRIVATE_KEY`
+}, f = "https://secure-wallet.cdp.coinbase.com", e = {
+  pageBg: "#ffffff",
+  buttonBg: "#0052ff",
+  buttonBgHover: "#0748d6",
+  buttonBgPressed: "#0b3eae",
+  buttonBgFocus: "#014cec",
+  buttonBorder: "#014cec",
+  buttonBorderHover: "#0748d6",
+  buttonBorderPressed: "#0b3eae",
+  buttonBorderFocus: "#014cec",
+  buttonBorderFocusInset: "#ffffff",
+  buttonText: "#ffffff",
+  buttonTextHover: "#ffffff",
+  buttonTextPressed: "#ffffff",
+  buttonTextFocus: "#ffffff",
+  buttonBorderRadius: 99999,
+  buttonFontSize: 16,
+  buttonFontWeight: 500,
+  buttonSize: "md",
+  fontUrl: "",
+  fontFamily: ""
+};
 export {
-  A as OAuthManager
+  f as DEFAULT_SECURE_IFRAME_BASE_PATH,
+  e as DEFAULT_SECURE_IFRAME_THEME,
+  E as SECURE_IFRAME_EVENT_TYPE,
+  t as SECURE_IFRAME_EVENT_TYPE_PREFIX,
+  o as SECURE_IFRAME_KEY_EXPORT_EVENT_TYPE
 };

package/dist/web/index.web47.js

@@ -1,25 +1,84 @@
-import "@coinbase/cdp-api-client";
-const a = (t) => ({
-  userId: t.userId,
-  // Deprecated fields - keep for backward compatibility
-  evmAccounts: t.evmAccounts?.map((c) => c) ?? [],
-  evmSmartAccounts: t.evmSmartAccounts?.map((c) => c) ?? [],
-  solanaAccounts: t.solanaAccounts?.map((c) => c) ?? [],
-  // New account object fields
-  evmAccountObjects: t.evmAccountObjects,
-  evmSmartAccountObjects: t.evmSmartAccountObjects,
-  solanaAccountObjects: t.solanaAccountObjects,
-  authenticationMethods: t.authenticationMethods.reduce((c, o) => (c[o.type] = o, c), {}),
-  mfaMethods: t.mfaMethods
-}), s = (t, c, o) => {
-  const e = new Date(c).getTime();
-  return {
-    accessToken: t,
-    expiresAt: e,
-    user: a(o)
+import { Analytics as E } from "./index.web2.js";
+import "./index.web3.js";
+import { getCurrentUserSync as h } from "./index.web13.js";
+import { getAccessTokenExpiration as I, getAccessToken as S } from "./index.web9.js";
+import { ensureMfaVerified as p } from "./index.web36.js";
+import { DEFAULT_SECURE_IFRAME_BASE_PATH as A, SECURE_IFRAME_KEY_EXPORT_EVENT_TYPE as n, DEFAULT_SECURE_IFRAME_THEME as k } from "./index.web46.js";
+import { validateSecureIframeEnvironment as y, createIframe as x, calculateSecureIframeHeight as U, buildKeyExportIframeUrl as w, getSecureIframeOrigin as v, isSecureIframeKeyExportMessage as R, sendSecureIframeMessage as u } from "./index.web45.js";
+import { getConfig as b } from "./index.web55.js";
+let s = null;
+const C = async () => (s || (s = S({ forceRefresh: !0 }).finally(() => {
+  s = null;
+})), s);
+async function g(r) {
+  const e = x(r.target), T = U(r.theme), c = b().secureIframeBasePath || A;
+  e.setAttribute("allow", "clipboard-read; clipboard-write"), e.style.border = "none", e.style.display = "none", e.style.height = `${T}px`, e.src = w({ ...r, basePath: c });
+  const m = v(c);
+  let f = !1;
+  const l = () => {
+    f || (f = !0, window.removeEventListener("message", d), e.parentNode && e.parentNode.removeChild(e));
+  }, d = async (a) => {
+    if (a.source !== e.contentWindow || !m || a.origin !== m) return;
+    const o = a.data;
+    if (R(o))
+      switch (o.type) {
+        case n.LISTENING: {
+          try {
+            const t = h();
+            if (!t) {
+              r.onStatusUpdate?.("error", "User not authenticated");
+              return;
+            }
+            const i = await C(), _ = await I();
+            u(e, {
+              type: n.GET_PRIVATE_KEY,
+              payload: {
+                address: r.address,
+                type: r.type,
+                authState: {
+                  accessToken: i || "",
+                  expiresAt: _ || 0,
+                  user: t
+                },
+                theme: {
+                  ...k,
+                  ...r.theme || {}
+                }
+              }
+            });
+          } catch (t) {
+            r.onStatusUpdate?.(
+              "error",
+              t instanceof Error ? "Error requesting private key: " + t.message : "Error requesting private key"
+            );
+          }
+          break;
+        }
+        case n.STATUS: {
+          const { status: t, message: i } = o.payload;
+          t === "ready" && (e.style.display = "block"), t === "expired" && (e.style.display = "none", l()), r.onStatusUpdate?.(t, i);
+          break;
+        }
+      }
   };
-};
+  return window.addEventListener("message", d), {
+    iframe: e,
+    cleanup: l,
+    updateTheme: (a) => {
+      u(e, {
+        type: n.THEME,
+        payload: { theme: a }
+      });
+    }
+  };
+}
+async function Y(r) {
+  return E.sendActionCallEvent({ name: "create_evm_key_export_iframe" }), y(), await p(), g({ ...r, type: "evm" });
+}
+async function q(r) {
+  return E.sendActionCallEvent({ name: "create_solana_key_export_iframe" }), y(), await p(), g({ ...r, type: "solana" });
+}
 export {
-  s as toAuthState,
-  a as toAuthStateUser
+  Y as createEvmKeyExportIframe,
+  q as createSolanaKeyExportIframe
 };

package/dist/web/index.web48.js

@@ -1,20 +1,34 @@
-import "@coinbase/cdp-api-client";
-import "viem";
-const u = async (c) => await c.isSignedIn();
-async function A(c, a, r) {
-  if (!await u(a))
-    throw new Error("User not signed in");
-  const t = a.getUser();
-  if ("evmAccount" in c && !(t.evmAccounts?.find((n) => n === c.evmAccount) || t.evmAccountObjects?.find((n) => n.address === c.evmAccount)))
-    throw new Error("EVM account not found");
-  if ("evmSmartAccount" in c && !(t.evmSmartAccounts?.find((n) => n === c.evmSmartAccount) || t.evmSmartAccountObjects?.find((n) => n.address === c.evmSmartAccount)))
-    throw new Error("EVM Smart Account not found");
-  if ("solanaAccount" in c && !(t.solanaAccounts?.find((n) => n === c.solanaAccount) || t.solanaAccountObjects?.find((n) => n.address === c.solanaAccount)))
-    throw new Error("Solana account not found");
-  const e = await a.getWalletSecretId();
-  return r({ ...c, user: t, walletSecretId: e });
+function a(e) {
+  if (typeof btoa < "u")
+    return btoa(
+      Array.from(e).map((t) => String.fromCharCode(t)).join("")
+    );
+  const c = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
+  let r = "";
+  for (let t = 0; t < e.length; t += 3) {
+    const h = e[t], n = t + 1 < e.length ? e[t + 1] : 0, s = t + 2 < e.length ? e[t + 2] : 0, o = h << 16 | n << 8 | s;
+    r += c.charAt(o >> 18 & 63), r += c.charAt(o >> 12 & 63), r += t + 1 < e.length ? c.charAt(o >> 6 & 63) : "=", r += t + 2 < e.length ? c.charAt(o & 63) : "=";
+  }
+  return r;
+}
+function g(e) {
+  if (typeof atob < "u") {
+    const n = atob(e), s = new Uint8Array(n.length);
+    for (let o = 0; o < n.length; o++)
+      s[o] = n.charCodeAt(o);
+    return s;
+  }
+  const c = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/", r = {};
+  for (let n = 0; n < c.length; n++)
+    r[c[n]] = n;
+  const t = e.replace(/[^A-Za-z0-9+/]/g, ""), h = [];
+  for (let n = 0; n < t.length; n += 4) {
+    const s = r[t[n]] || 0, o = r[t[n + 1]] || 0, l = r[t[n + 2]] || 0, f = r[t[n + 3]] || 0, i = s << 18 | o << 12 | l << 6 | f;
+    h.push(i >> 16 & 255), n + 2 < t.length && h.push(i >> 8 & 255), n + 3 < t.length && h.push(i & 255);
+  }
+  return new Uint8Array(h);
 }
 export {
-  u as isSignedIn,
-  A as withAuth
+  g as decodeBase64,
+  a as encodeBase64
 };

package/dist/web/index.web49.js

@@ -1,139 +1,5 @@
-import "@coinbase/cdp-api-client";
-import "viem";
-import { mockUser as e } from "./index.web51.js";
-class n {
-  authState = null;
-  authStateChangeCallback = null;
-  /**
-   * Initializes the mock auth manager.
-   *
-   * @param _projectId - The project ID (unused in mock implementation).
-   */
-  constructor(t) {
-  }
-  /**
-   * Awaitable method whose promise only resolves when the auth manager is ready to be used.
-   *
-   * @returns A promise that resolves when the auth manager is ready to be used.
-   */
-  async ensureInitialized() {
-    return Promise.resolve();
-  }
-  /**
-   * Gets the current user, or null if there is no user signed in.
-   *
-   * @returns The current mock user if signed in, null otherwise.
-   */
-  getUser() {
-    return this.authState?.user ?? null;
-  }
-  /**
-   * Returns whether the user is signed in - i.e., whether there is an unexpired
-   * access token and user.
-   *
-   * @returns True if the mock user is signed in and token is not expired, false otherwise.
-   */
-  async isSignedIn() {
-    return this.authState ? Promise.resolve(this.authState.expiresAt > Date.now()) : Promise.resolve(!1);
-  }
-  /**
-   * Signs out the user, clearing all authentication state.
-   * In the mock implementation, this simply clears the local auth state.
-   */
-  async signOut() {
-    await this.clearAuthState();
-  }
-  /**
-   * Sets a callback to be called when the auth state changes.
-   * The callback is immediately called with the current auth state.
-   *
-   * @param callback - The function to call when the auth state changes.
-   *                  Will be called with the current user or null.
-   */
-  addAuthStateChangeCallback(t) {
-    this.authStateChangeCallback = t, t(this.authState?.user ?? null);
-  }
-  /**
-   * Gets the access token. For mock, this always returns a valid token if signed in.
-   * If the current token is expired, it will be refreshed automatically.
-   *
-   * @param options - The options for getting the token.
-   * @param options.forceRefresh - Whether to force a refresh of the token.
-   * @returns The mock access token if signed in, null otherwise.
-   */
-  async getToken(t) {
-    return this.authState ? ((t?.forceRefresh || this.authState.expiresAt <= Date.now()) && await this.refreshToken(), this.authState?.accessToken ?? null) : null;
-  }
-  /**
-   * Gets the expiration time of the access token, or null if the user is not signed in.
-   *
-   * @returns The expiration time of the access token.
-   */
-  async getTokenExpiration() {
-    return this.authState?.expiresAt ?? null;
-  }
-  /**
-   * Gets the currentlly registered wallet secret ID.
-   *
-   * @returns The wallet secret ID.
-   */
-  async getWalletSecretId() {
-    return "mock-wallet-secret-id";
-  }
-  /**
-   * Gets the X-Wallet-Auth header value.
-   *
-   * @param _options - The options for the request.
-   * @param _options.requestMethod - The HTTP method of the request.
-   * @param _options.requestHost - The host of the request.
-   * @param _options.requestPath - The path of the request.
-   * @param _options.requestData - The data of the request.
-   * @returns The X-Wallet-Auth header value.
-   */
-  async getXWalletAuth(t) {
-    if (!this.authState)
-      throw new Error("User not signed in");
-    return "x-wallet-auth";
-  }
-  /**
-   * Gets the authentication state.
-   *
-   * @returns The authentication state.
-   */
-  getAuthState() {
-    return this.authState;
-  }
-  /**
-   * Sets the authentication state.
-   * This will trigger the auth state change callback if one is registered.
-   *
-   * @param authState - The new authentication state to set.
-   */
-  async setAuthState(t) {
-    this.authState = t, this.authStateChangeCallback && this.authStateChangeCallback(this.authState?.user ?? null);
-  }
-  /**
-   * Clears the authentication state.
-   * This will trigger the auth state change callback if one is registered.
-   */
-  async clearAuthState() {
-    this.authState = null, this.authStateChangeCallback && this.authStateChangeCallback(null);
-  }
-  /**
-   * Refreshes the mock token.
-   * Only refreshes if there is an existing auth state (user is signed in).
-   * Sets a new mock token with a 24-hour expiration.
-   *
-   * @private
-   */
-  async refreshToken() {
-    this.authState && await this.setAuthState({
-      accessToken: "mock-access-token",
-      expiresAt: Date.now() + 1e3 * 60 * 60 * 24,
-      user: e
-    });
-  }
-}
+import { __require as r } from "./index.web72.js";
+var f = r();
 export {
-  n as MockAuthManager
+  f as b
 };

package/dist/web/index.web5.js

@@ -1,4 +1,4 @@
-import { decodeBase64 as y, encodeBase64 as a } from "./index.web42.js";
+import { decodeBase64 as y, encodeBase64 as a } from "./index.web48.js";
 import "@coinbase/cdp-api-client";
 import "viem";
 const p = {

package/dist/web/index.web50.js

@@ -1,63 +1,11 @@
+import { AuthManager as r } from "./index.web38.js";
+import { CustomAuthManager as o } from "./index.web51.js";
 import "@coinbase/cdp-api-client";
 import "viem";
-import { verifyOAuth as o } from "./index.web9.js";
-import { getPlatformOAuth as e } from "./index.web4.js";
-class i {
-  oauthFlowState = null;
-  oauthStateChangeCallbacks = [];
-  /**
-   * Initializes the mock OAuth manager.
-   */
-  constructor() {
-    this.handleOAuthCode();
-  }
-  /**
-   * Gets the current user, or null if there is no user signed in.
-   *
-   * @returns The current mock user if signed in, null otherwise.
-   */
-  async getOAuthFlowState() {
-    return this.oauthFlowState ?? null;
-  }
-  /**
-   * Sets the OAuth flow state.
-   *
-   * @param oauthFlowState - The OAuth flow state to set.
-   */
-  async setOAuthFlowState(t) {
-    this.oauthFlowState = t, this.oauthStateChangeCallbacks.forEach((a) => a(this.oauthFlowState));
-  }
-  /**
-   * Adds a callback to be called when the OAuth state changes.
-   *
-   * @param callback - The function to call when the OAuth state changes.
-   */
-  async addOAuthStateChangeCallback(t) {
-    this.oauthStateChangeCallbacks.push(t), t(this.oauthFlowState);
-  }
-  /**
-   * Clears the OAuth flow state.
-   */
-  async clearOAuthFlowState() {
-    this.oauthFlowState = null, this.oauthStateChangeCallbacks.forEach((t) => t(null));
-  }
-  /**
-   * Awaitable method whose promise only resolves when the OAuth manager is ready to be used.
-   */
-  async handleOAuthCode() {
-    await e()?.cleanupOAuthParams(), await this.setOAuthFlowState({
-      providerType: "google",
-      status: "pending",
-      code: "mock-oauth-code",
-      flowId: "mock-flow-id"
-    }), await o({ code: "mock-oauth-code", providerType: "google", flowId: "mock-flow-id" }), await this.setOAuthFlowState({
-      providerType: "google",
-      status: "success",
-      code: "mock-oauth-code",
-      flowId: "mock-flow-id"
-    });
-  }
+import { getConfig as n } from "./index.web55.js";
+function a(t) {
+  return n().customAuth?.getJwt ? new o(t) : new r(t);
 }
 export {
-  i as MockOAuthManager
+  a as createAuthManager
 };