@coinbase/cdp-core 0.0.92 → 0.0.93

package/dist/native/index.native35.js

@@ -1,28 +1,39 @@
-import { getUserOperationWithEndUserAccount as a } from "@coinbase/cdp-api-client";
+import { sendUserOperationWithEndUserAccount as m } from "@coinbase/cdp-api-client";
 import { Analytics as o } from "./index.native2.js";
 import "./index.native3.js";
-import { withAuth as n } from "./index.native77.js";
-import { getConfig as r, getCoreAuthManager as s } from "./index.native58.js";
+import { withAuth as n } from "./index.native81.js";
+import { getConfig as t, getCoreAuthManager as i } from "./index.native61.js";
 import "viem";
-const l = async (e) => (o.sendActionCallEvent({ name: "get_user_operation" }), r().useMock ? {
-  userOpHash: e.userOperationHash,
-  network: e.network,
-  calls: [
-    {
-      to: "0x1234567890123456789012345678901234567890",
-      value: "0",
-      data: "0x"
-    }
-  ],
-  status: "complete",
-  transactionHash: "0x9876543210987654321098765432109876543210987654321098765432109876",
-  receipts: []
-} : n(e, s(), async ({ user: t }) => await a(
-  r().projectId,
-  t.userId,
-  e.evmSmartAccount,
-  e.userOperationHash
-)));
+import { withMfa as p } from "./index.native70.js";
+import "jose";
+import "./index.native83.js";
+import "./index.native84.js";
+import "@solana/web3.js";
+import "bs58";
+const U = async (r) => (o.sendActionCallEvent({ name: "send_user_operation" }), t().useMock ? {
+  userOperationHash: "0x1234567890123456789012345678901234567890123456789012345678901234"
+} : p(
+  () => n(r, i(), async ({ user: a, walletSecretId: s }) => ({
+    userOperationHash: (await m(
+      t().projectId,
+      a.userId,
+      r.evmSmartAccount,
+      {
+        network: r.network,
+        calls: r.calls.map((e) => ({
+          to: e.to,
+          value: String(e.value ?? 0n),
+          data: e.data ?? "0x"
+        })),
+        walletSecretId: s,
+        useCdpPaymaster: r.useCdpPaymaster ?? !1,
+        paymasterUrl: r.paymasterUrl,
+        dataSuffix: r.dataSuffix
+      },
+      r.idempotencyKey
+    )).userOpHash
+  }))
+));
 export {
-  l as getUserOperation
+  U as sendUserOperation
 };

package/dist/native/index.native36.js

@@ -1,43 +1,28 @@
-import { b as o } from "./index.native81.js";
-import { exportEndUserEvmAccount as n } from "@coinbase/cdp-api-client";
-import { Analytics as y } from "./index.native2.js";
+import { getUserOperationWithEndUserAccount as a } from "@coinbase/cdp-api-client";
+import { Analytics as o } from "./index.native2.js";
 import "./index.native3.js";
-import { withAuth as f } from "./index.native77.js";
-import { getConfig as i, getCoreAuthManager as s } from "./index.native58.js";
+import { withAuth as n } from "./index.native81.js";
+import { getConfig as r, getCoreAuthManager as s } from "./index.native61.js";
 import "viem";
-import { withMfa as u } from "./index.native67.js";
-import "jose";
-import { getPlatformCrypto as v } from "./index.native8.js";
-import "./index.native80.js";
-import "@solana/web3.js";
-import "bs58";
-const B = async (t) => {
-  if (y.sendActionCallEvent({ name: "export_evm_account" }), i().useMock)
-    return {
-      privateKey: o.Buffer.from("mock-private-key").toString("hex")
-    };
-  const r = v(), e = await r.createExportKeyPair();
-  return u(
-    () => f(t, s(), async ({ user: p, walletSecretId: m }) => {
-      const a = await n(
-        i().projectId,
-        p.userId,
-        {
-          address: t.evmAccount,
-          walletSecretId: m,
-          exportEncryptionKey: e.publicKeyBase64
-        },
-        t.idempotencyKey
-      ), c = await r.decryptWithPrivateKey(
-        e.privateKey,
-        a.encryptedPrivateKey
-      );
-      return {
-        privateKey: o.Buffer.from(c).toString("hex")
-      };
-    })
-  );
-};
+const l = async (e) => (o.sendActionCallEvent({ name: "get_user_operation" }), r().useMock ? {
+  userOpHash: e.userOperationHash,
+  network: e.network,
+  calls: [
+    {
+      to: "0x1234567890123456789012345678901234567890",
+      value: "0",
+      data: "0x"
+    }
+  ],
+  status: "complete",
+  transactionHash: "0x9876543210987654321098765432109876543210987654321098765432109876",
+  receipts: []
+} : n(e, s(), async ({ user: t }) => await a(
+  r().projectId,
+  t.userId,
+  e.evmSmartAccount,
+  e.userOperationHash
+)));
 export {
-  B as exportEvmAccount
+  l as getUserOperation
 };

package/dist/native/index.native37.js

@@ -1,50 +1,43 @@
-import { b as t } from "./index.native81.js";
-import { exportEndUserSolanaAccount as u } from "@coinbase/cdp-api-client";
-import { Analytics as d } from "./index.native2.js";
+import { b as o } from "./index.native84.js";
+import { exportEndUserEvmAccount as n } from "@coinbase/cdp-api-client";
+import { Analytics as y } from "./index.native2.js";
 import "./index.native3.js";
-import { Keypair as y } from "@solana/web3.js";
-import s from "bs58";
-import { withAuth as l } from "./index.native77.js";
-import { getConfig as m, getCoreAuthManager as K } from "./index.native58.js";
+import { withAuth as f } from "./index.native81.js";
+import { getConfig as i, getCoreAuthManager as s } from "./index.native61.js";
 import "viem";
-import { withMfa as b } from "./index.native67.js";
+import { withMfa as u } from "./index.native70.js";
 import "jose";
-import { getPlatformCrypto as v } from "./index.native8.js";
-import "./index.native80.js";
-const U = async (o) => {
-  if (d.sendActionCallEvent({ name: "export_solana_account" }), m().useMock) {
-    const a = t.Buffer.from("mock-private-key").subarray(0, 32), e = t.Buffer.alloc(32);
-    a.copy(e);
-    const r = y.fromSeed(e), c = t.Buffer.concat([r.secretKey.subarray(0, 32), r.publicKey.toBytes()]);
+import { getPlatformCrypto as v } from "./index.native9.js";
+import "./index.native83.js";
+import "@solana/web3.js";
+import "bs58";
+const B = async (t) => {
+  if (y.sendActionCallEvent({ name: "export_evm_account" }), i().useMock)
     return {
-      privateKey: s.encode(c)
+      privateKey: o.Buffer.from("mock-private-key").toString("hex")
     };
-  }
-  const n = v(), i = await n.createExportKeyPair();
-  return b(
-    () => l(o, K(), async ({ user: a, walletSecretId: e }) => {
-      const r = await u(
-        m().projectId,
-        a.userId,
+  const r = v(), e = await r.createExportKeyPair();
+  return u(
+    () => f(t, s(), async ({ user: p, walletSecretId: m }) => {
+      const a = await n(
+        i().projectId,
+        p.userId,
         {
-          address: o.solanaAccount,
-          walletSecretId: e,
-          exportEncryptionKey: i.publicKeyBase64
+          address: t.evmAccount,
+          walletSecretId: m,
+          exportEncryptionKey: e.publicKeyBase64
         },
-        o.idempotencyKey
-      ), c = await n.decryptWithPrivateKey(
-        i.privateKey,
-        r.encryptedPrivateKey
-      ), p = y.fromSeed(new Uint8Array(c)), f = t.Buffer.concat([
-        p.secretKey.subarray(0, 32),
-        p.publicKey.toBytes()
-      ]);
+        t.idempotencyKey
+      ), c = await r.decryptWithPrivateKey(
+        e.privateKey,
+        a.encryptedPrivateKey
+      );
       return {
-        privateKey: s.encode(f)
+        privateKey: o.Buffer.from(c).toString("hex")
       };
     })
   );
 };
 export {
-  U as exportSolanaAccount
+  B as exportEvmAccount
 };

package/dist/native/index.native38.js

@@ -1,40 +1,50 @@
-import { createSpendPermissionWithEndUserAccount as s } from "@coinbase/cdp-api-client";
-import { Analytics as o } from "./index.native2.js";
+import { b as t } from "./index.native84.js";
+import { exportEndUserSolanaAccount as u } from "@coinbase/cdp-api-client";
+import { Analytics as d } from "./index.native2.js";
 import "./index.native3.js";
-import { withAuth as m } from "./index.native77.js";
-import { toSpendPermission as i } from "./index.native78.js";
-import { getConfig as t, getCoreAuthManager as c } from "./index.native58.js";
-const f = async (e) => (o.sendActionCallEvent({ name: "create_spend_permission" }), t().useMock ? {
-  userOperationHash: "0x1234567890123456789012345678901234567890123456789012345678901234"
-} : m(e, c(), async ({ user: n, walletSecretId: a }) => {
-  const r = i(
-    { ...e, account: e.evmSmartAccount },
-    e.network
+import { Keypair as y } from "@solana/web3.js";
+import s from "bs58";
+import { withAuth as l } from "./index.native81.js";
+import { getConfig as m, getCoreAuthManager as K } from "./index.native61.js";
+import "viem";
+import { withMfa as b } from "./index.native70.js";
+import "jose";
+import { getPlatformCrypto as v } from "./index.native9.js";
+import "./index.native83.js";
+const U = async (o) => {
+  if (d.sendActionCallEvent({ name: "export_solana_account" }), m().useMock) {
+    const a = t.Buffer.from("mock-private-key").subarray(0, 32), e = t.Buffer.alloc(32);
+    a.copy(e);
+    const r = y.fromSeed(e), c = t.Buffer.concat([r.secretKey.subarray(0, 32), r.publicKey.toBytes()]);
+    return {
+      privateKey: s.encode(c)
+    };
+  }
+  const n = v(), i = await n.createExportKeyPair();
+  return b(
+    () => l(o, K(), async ({ user: a, walletSecretId: e }) => {
+      const r = await u(
+        m().projectId,
+        a.userId,
+        {
+          address: o.solanaAccount,
+          walletSecretId: e,
+          exportEncryptionKey: i.publicKeyBase64
+        },
+        o.idempotencyKey
+      ), c = await n.decryptWithPrivateKey(
+        i.privateKey,
+        r.encryptedPrivateKey
+      ), p = y.fromSeed(new Uint8Array(c)), f = t.Buffer.concat([
+        p.secretKey.subarray(0, 32),
+        p.publicKey.toBytes()
+      ]);
+      return {
+        privateKey: s.encode(f)
+      };
+    })
   );
-  return {
-    userOperationHash: (await s(
-      t().projectId,
-      n.userId,
-      e.evmSmartAccount,
-      {
-        // spend permission options
-        spender: r.spender,
-        token: r.token,
-        allowance: r.allowance.toString(),
-        period: r.period.toString(),
-        start: r.start.toString(),
-        end: r.end.toString(),
-        salt: r.salt.toString(),
-        // api options
-        walletSecretId: a,
-        network: e.network,
-        useCdpPaymaster: e.useCdpPaymaster ?? !1,
-        paymasterUrl: e.paymasterUrl
-      },
-      e.idempotencyKey
-    )).userOpHash
-  };
-}));
+};
 export {
-  f as createSpendPermission
+  U as exportSolanaAccount
 };

package/dist/native/index.native39.js

@@ -1,44 +1,40 @@
-import { listSpendPermissionsWithEndUserAccount as a } from "@coinbase/cdp-api-client";
-import { Analytics as i } from "./index.native2.js";
+import { createSpendPermissionWithEndUserAccount as s } from "@coinbase/cdp-api-client";
+import { Analytics as o } from "./index.native2.js";
 import "./index.native3.js";
-import { withAuth as o } from "./index.native77.js";
-import { getConfig as r, getCoreAuthManager as m } from "./index.native58.js";
-const k = async (e) => (i.sendActionCallEvent({ name: "list_spend_permissions" }), r().useMock ? {
-  spendPermissions: [
-    {
-      permission: {
-        account: e.evmSmartAccount,
-        spender: "0x5678901234567890123456789012345678901234",
-        token: "0xEeeeeEeeeEeEeeEeEeEeeEEEeeeeEeeeeeeeEEeE",
-        allowance: "1000000000000000000",
-        period: "86400",
-        start: "1640995200",
-        end: "1672531200",
-        salt: "123456789",
-        extraData: "0x"
-      },
-      permissionHash: "0x1234567890123456789012345678901234567890123456789012345678901234",
-      revoked: !1,
-      createdAt: "2024-01-01T00:00:00Z",
-      network: e.network
-    }
-  ],
-  hasNextPage: !1
-} : o(e, m(), async ({ user: t }) => {
-  const n = {};
-  e.pageSize !== void 0 && (n.pageSize = e.pageSize), e.pageToken !== void 0 && (n.pageToken = e.pageToken);
-  const s = await a(
-    r().projectId,
-    t.userId,
-    e.evmSmartAccount,
-    n
+import { withAuth as m } from "./index.native81.js";
+import { toSpendPermission as i } from "./index.native82.js";
+import { getConfig as t, getCoreAuthManager as c } from "./index.native61.js";
+const f = async (e) => (o.sendActionCallEvent({ name: "create_spend_permission" }), t().useMock ? {
+  userOperationHash: "0x1234567890123456789012345678901234567890123456789012345678901234"
+} : m(e, c(), async ({ user: n, walletSecretId: a }) => {
+  const r = i(
+    { ...e, account: e.evmSmartAccount },
+    e.network
   );
   return {
-    spendPermissions: s.spendPermissions,
-    hasNextPage: !!s.nextPageToken,
-    nextPageToken: s.nextPageToken
+    userOperationHash: (await s(
+      t().projectId,
+      n.userId,
+      e.evmSmartAccount,
+      {
+        // spend permission options
+        spender: r.spender,
+        token: r.token,
+        allowance: r.allowance.toString(),
+        period: r.period.toString(),
+        start: r.start.toString(),
+        end: r.end.toString(),
+        salt: r.salt.toString(),
+        // api options
+        walletSecretId: a,
+        network: e.network,
+        useCdpPaymaster: e.useCdpPaymaster ?? !1,
+        paymasterUrl: e.paymasterUrl
+      },
+      e.idempotencyKey
+    )).userOpHash
   };
 }));
 export {
-  k as listSpendPermissions
+  f as createSpendPermission
 };

package/dist/native/index.native4.js

@@ -1,110 +1,162 @@
-import { ModuleResolutionError as n } from "./index.native72.js";
-import { decodeBase64 as c, encodeBase64 as a } from "./index.native76.js";
 import "@coinbase/cdp-api-client";
 import "viem";
-const l = {
+const s = {
   /**
-   * Creates a secp256r1 key pair for React Native.
+   * Check if device attestation is supported on this device.
    *
-   * @returns A promise that resolves to a key pair.
+   * @returns Promise resolving to true if attestation is supported.
    */
-  async createKeyPair() {
-    if (typeof crypto > "u" || !crypto.subtle)
-      throw new n("react-native-quick-crypto", "crypto.subtle");
-    const e = await crypto.subtle.generateKey(
-      {
-        name: "ECDSA",
-        namedCurve: "P-256"
-        // secp256r1
-      },
-      !1,
-      // Do not allow key export for security
-      ["sign", "verify"]
-      // Key usages
-    ), t = await crypto.subtle.exportKey("spki", e.publicKey), r = new Uint8Array(t), o = a(r);
-    return e.privateKey[Symbol.toStringTag] || Object.defineProperty(e.privateKey, Symbol.toStringTag, {
-      value: "CryptoKey",
-      configurable: !1,
-      enumerable: !1,
-      writable: !1
-    }), {
-      privateKey: e.privateKey,
-      publicKeyBase64: o
-    };
+  async isSupported() {
+    try {
+      return await (await import("@coinbase/cdp-app-attest")).isSupported();
+    } catch (e) {
+      return e instanceof Error && e.message.includes("Cannot resolve module") ? console.warn(
+        "cdp-app-attest module not found. Please install @coinbase/cdp-app-attest and rebuild your app with a custom development build or EAS Build."
+      ) : console.warn(`Failed to check attestation support: ${e}`), !1;
+    }
   },
   /**
-   * Creates an RSA key pair that allows private key export.
+   * Initialize the attestation service.
    *
-   * @returns A promise that resolves to a key pair.
+   * iOS: No-op (not required).
+   * Android: Required - initializes Play Integrity token provider.
+   *
+   * @param config - Platform-specific configuration (required for Android).
+   * @returns Promise that resolves when initialization is complete.
+   */
+  async initialize(e) {
+    try {
+      const t = await import("@coinbase/cdp-app-attest");
+      if (!await t.isSupported()) {
+        console.warn("Attestation not supported on this device");
+        return;
+      }
+      typeof t.initialize == "function" && await t.initialize(e);
+    } catch (t) {
+      console.warn("Failed to initialize attestation:", t);
+    }
+  },
+  /**
+   * Attest with a server-provided challenge (iOS only).
+   *
+   * iOS: Generates a device key, attests it with Apple, and returns attestation data
+   * to be registered with the backend for public key storage.
+   *
+   * Android: Not used - Android skips attestation and uses Play Integrity tokens directly.
+   *
+   * iOS Flow:
+   * 1. Call attest(challenge) with server-provided challenge
+   * 2. Send attestation result to /attestation/register endpoint
+   * 3. Backend verifies attestation and stores public key
+   * 4. Store key ID locally with storeKeyId()
+   * 5. Use generateAssertion() for subsequent requests
+   *
+   * @param challenge - Server-provided challenge (base64-encoded).
+   * @returns Promise resolving to attestation result (iOS only).
    */
-  async createExportKeyPair() {
-    if (typeof crypto > "u" || !crypto.subtle)
-      throw new n("react-native-quick-crypto", "crypto.subtle");
-    const e = await crypto.subtle.generateKey(
-      {
-        name: "RSA-OAEP",
-        modulusLength: 2048,
-        publicExponent: new Uint8Array([1, 0, 1]),
-        hash: "SHA-256"
-      },
-      !0,
-      // Allow key export
-      ["encrypt", "decrypt"]
-    ), t = await crypto.subtle.exportKey("spki", e.publicKey), r = a(new Uint8Array(t));
-    return { privateKey: e.privateKey, publicKeyBase64: r };
+  async attest(e) {
+    try {
+      const t = await import("@coinbase/cdp-app-attest");
+      if (!await t.isSupported())
+        throw new Error("Attestation not supported on this device");
+      const o = await t.attest(e);
+      return o.ios ? {
+        attestation: o.ios.attestation,
+        appIdentifier: o.ios.bundleId,
+        platform: "ios",
+        keyId: o.ios.keyId
+      } : {
+        attestation: "",
+        appIdentifier: "",
+        platform: "android"
+      };
+    } catch (t) {
+      throw t instanceof Error && t.message.includes("Cannot resolve module") ? new Error(
+        "cdp-app-attest module not found. Please install @coinbase/cdp-app-attest and rebuild your app."
+      ) : t;
+    }
   },
   /**
-   * Computes a hash of the given data.
+   * Mark attestation as successfully registered with the backend (iOS only).
    *
-   * @param data - The data to hash.
-   * @returns A promise that resolves to the hex-encoded hash.
+   * @param keyId - The key ID that was registered with the backend.
    */
-  async hash(e) {
-    if (typeof crypto > "u" || !crypto.subtle)
-      throw new n("react-native-quick-crypto", "crypto.subtle");
-    const t = await crypto.subtle.digest("SHA-256", e), r = new Uint8Array(t);
-    return Array.from(r).map((y) => y.toString(16).padStart(2, "0")).join("");
+  async confirmRegistration(e) {
+    try {
+      await (await import("@coinbase/cdp-app-attest")).confirmRegistration(e), console.log("Attestation registration confirmed");
+    } catch (t) {
+      throw console.error("Failed to confirm attestation registration:", t), t;
+    }
   },
   /**
-   * Generates a cryptographically secure random identifier.
+   * Get the registered key ID (iOS only).
+   *
+   * Returns null if attestation hasn't been performed or registration wasn't confirmed.
    *
-   * @returns A random hex-encoded identifier.
+   * @returns Promise resolving to the registered key ID, or null if not found.
    */
-  generateRandomId() {
-    if (typeof crypto > "u" || !crypto.getRandomValues)
-      throw new n("react-native-quick-crypto", "crypto.getRandomValues");
-    const e = new Uint8Array(16);
-    return crypto.getRandomValues(e), Array.from(e, (t) => t.toString(16).padStart(2, "0")).join("");
+  async getRegisteredKeyId() {
+    try {
+      return await (await import("@coinbase/cdp-app-attest")).getRegisteredKeyId();
+    } catch (e) {
+      return console.warn("Failed to retrieve registered key ID:", e), null;
+    }
   },
   /**
-   * Generates a cryptographically secure random salt.
+   * Clear all attestation state, allowing re-attestation with a new key.
    *
-   * @returns A random bigint salt.
+   * This should be called when:
+   * - Backend returns "Attestation key not found" (public key expired or lost)
+   * - Backend's stored public key has expired (90-day TTL)
+   * - User explicitly requests re-attestation
+   * - Testing/debugging scenarios
+   *
+   * Important: After clearing, you MUST call attest() again to generate
+   * a new key and perform fresh attestation.
    */
-  generateRandomSalt() {
-    if (typeof crypto > "u" || !crypto.getRandomValues)
-      throw new n("react-native-quick-crypto", "crypto.getRandomValues");
-    const e = new Uint8Array(32);
-    crypto.getRandomValues(e);
-    let t = 0n;
-    for (let r = 0; r < e.length; r++)
-      t = (t << 8n) + BigInt(e[r]);
-    return t;
+  async clearAttestation() {
+    try {
+      await (await import("@coinbase/cdp-app-attest")).clearAttestation(), console.log("Attestation key cleared");
+    } catch (e) {
+      throw e instanceof Error && e.message.includes("Cannot resolve module") ? new Error(
+        "cdp-app-attest module not found. Please install @coinbase/cdp-app-attest and rebuild your app."
+      ) : (console.error("Failed to clear attestation key:", e), e);
+    }
   },
   /**
-   * Decrypts data using a private key with RSA-OAEP algorithm.
+   * Generate an assertion/integrity token for an API request.
+   *
+   * iOS: Creates a cryptographic assertion signed with the device's attested key.
+   * Must call attest() first to generate and register the key.
+   *
+   * Android: Generates a fresh Play Integrity token (no prior attestation needed).
    *
-   * @param privateKey - The private key to use for decryption.
-   * @param encryptedData - The base64-encoded encrypted data.
-   * @returns A promise that resolves to the decrypted string.
+   * @param clientData - Client data to include in assertion (base64-encoded).
+   * @returns Promise resolving to assertion result.
    */
-  async decryptWithPrivateKey(e, t) {
-    if (typeof crypto > "u" || !crypto.subtle)
-      throw new n("react-native-quick-crypto", "crypto.subtle");
-    const r = c(t);
-    return await crypto.subtle.decrypt("RSA-OAEP", e, r);
+  async generateAssertion(e) {
+    try {
+      const t = await import("@coinbase/cdp-app-attest");
+      if (!await t.isSupported())
+        throw new Error("Attestation not supported on this device");
+      const o = await t.createAssertion(e);
+      if (o.ios)
+        return {
+          assertion: o.ios.assertion,
+          keyId: o.ios.keyId
+        };
+      if (o.android)
+        return {
+          assertion: o.android.integrityToken
+        };
+      throw new Error("No assertion data returned from native module");
+    } catch (t) {
+      throw t instanceof Error && t.message.includes("Cannot resolve module") ? new Error(
+        "cdp-app-attest module not found. Please install @coinbase/cdp-app-attest and rebuild your app."
+      ) : t;
+    }
   }
 };
 export {
-  l as nativeCrypto
+  s as nativeAttestation
 };