@coinbase/cdp-core 0.0.92 → 0.0.94

package/dist/native/index.native69.js

@@ -1,316 +1,50 @@
-import { logOutEndUser as f, refreshAccessToken as d, registerTemporaryWalletSecret as S } from "@coinbase/cdp-api-client";
-import { Analytics as h } from "./index.native2.js";
-import "./index.native3.js";
-import "jose";
-import { SignJWT as m } from "./index.native85.js";
-import { toAuthState as w } from "./index.native82.js";
-import "viem";
-import { getPlatformCrypto as c } from "./index.native8.js";
-import { sortKeys as y } from "./index.native80.js";
-import { getCoreOAuthManager as p } from "./index.native58.js";
-const l = 60 * 1e3, g = {
-  maxRetries: 3,
-  baseDelayMs: 1e3,
-  maxDelayMs: 1e4
-};
-function k(s, e, t) {
-  const n = e * Math.pow(2, s), i = Math.random() * 0.3 * n;
-  return Math.min(n + i, t);
-}
-function T(s) {
-  return new Promise((e) => setTimeout(e, s));
-}
-function R(s) {
-  if (s instanceof TypeError && s.message.includes("fetch"))
-    return !0;
-  if (s && typeof s == "object" && "status" in s) {
-    const e = s.status;
-    if (e >= 500 && e < 600 || e === 408 || e === 429)
-      return !0;
-    if (e === 401)
-      return !1;
-  }
-  if (s instanceof Error) {
-    const e = s.message.toLowerCase();
-    if (e.includes("network") || e.includes("timeout") || e.includes("econnrefused") || e.includes("enotfound") || e.includes("socket"))
-      return !0;
-  }
-  return !1;
-}
-class O {
-  projectId;
-  authState = null;
-  walletSecret = null;
-  authStateChangeCallbacks = [];
-  initPromise = null;
-  refreshTimeout = null;
-  /**
-   * Initializes the token manager.
-   *
-   * @param projectId - The project ID.
-   */
-  constructor(e) {
-    this.projectId = e, this.initPromise = this._doInitialize();
-  }
-  /**
-   * Gets the current user, or null if there is no user signed in.
-   *
-   * @returns The current user.
-   */
-  getUser() {
-    return this.authState?.user ?? null;
-  }
-  /**
-   * Returns whether the user is signed in - i.e., whether there is an unexpired
-   * access token and user. Attempts to refresh the token if it's expired.
-   *
-   * @returns True if the user is signed in, false otherwise.
-   */
-  async isSignedIn() {
-    if (!this.authState)
-      return !1;
-    if (this.authState.expiresAt > Date.now() + l)
-      return !0;
-    try {
-      return await this.getToken() !== null;
-    } catch {
-      return !1;
-    }
-  }
-  /**
-   * Signs out the user, clearing all authentication state.
-   */
-  async signOut() {
-    try {
-      await f(this.projectId);
-    } catch {
-    } finally {
-      await this.clearAuthState();
-    }
-  }
-  /**
-   * Adds a callback to be called when the auth state changes.
-   *
-   * @param callback - The function to call when the auth state changes.
-   */
-  addAuthStateChangeCallback(e) {
-    this.authStateChangeCallbacks.push(e), e(this.authState?.user ?? null);
-  }
-  /**
-   * Gets the access token, refreshing it if it is expired. Returns null if the user is not
-   * signed in.
-   *
-   * @param options - The options for getting the token.
-   * @param options.forceRefresh - Whether to force a refresh of the token.
-   * @returns The access token.
-   */
-  async getToken(e) {
-    return (e?.forceRefresh || this.shouldRefreshToken()) && await this.refreshAccessToken(e?.forceRefresh ? "force" : "on_demand"), this.authState?.accessToken ?? null;
-  }
-  /**
-   * Gets the expiration time of the access token, or null if the user is not signed in.
-   *
-   * @returns The expiration time of the access token.
-   */
-  async getTokenExpiration() {
-    return this.authState?.expiresAt ?? null;
-  }
-  /**
-   * Gets the currently registered wallet secret ID. Rejects if the user is not signed in.
-   *
-   * @returns The wallet secret ID.
-   */
-  async getWalletSecretId() {
-    if (!await this.isSignedIn())
-      throw new Error("Cannot get wallet secret ID if the user is not signed in");
-    return this.shouldRefreshWalletSecret() && await this.refreshWalletSecret(), this.walletSecret.walletSecretId;
-  }
-  /**
-   * Gets the X-Wallet-Auth header. Rejects if the user is not signed in.
-   *
-   * @param options - The options for the request.
-   * @param options.requestMethod - The HTTP method of the request.
-   * @param options.requestHost - The host of the request.
-   * @param options.requestPath - The path of the request.
-   * @param options.requestData - The data of the request.
-   * @returns The X-Wallet-Auth header.
-   */
-  async getXWalletAuth(e) {
-    if (!await this.isSignedIn())
-      throw new Error("Cannot get X-Wallet-Auth header if the user is not signed in");
-    this.shouldRefreshWalletSecret() && await this.refreshWalletSecret();
-    const t = `${e.requestMethod} ${e.requestHost}${e.requestPath}`, n = Math.floor(Date.now() / 1e3), i = c(), r = {
-      uris: [t]
-    };
-    if (e.requestData && Object.keys(e.requestData).length > 0) {
-      const a = y(e.requestData);
-      r.reqHash = await i.hash(new TextEncoder().encode(JSON.stringify(a)));
-    }
-    return await new m(r).setProtectedHeader({ alg: "ES256", typ: "JWT" }).setIssuedAt(n).setNotBefore(n).setJti(i.generateRandomId()).sign(this.walletSecret.keyPair.privateKey);
-  }
-  /**
-   * Gets the authentication state.
-   *
-   * @returns The authentication state.
-   */
-  getAuthState() {
-    return this.authState;
-  }
-  /**
-   * Sets the authentication state.
-   *
-   * @param authState - The authentication state.
-   */
-  async setAuthState(e) {
-    this.authState = e, h.endUserIdentifier = e.user.userId, this.authStateChangeCallbacks.forEach((t) => t(this.authState?.user ?? null)), this.scheduleTokenRefresh();
-  }
-  /**
-   * Clears the authentication state.
-   */
-  async clearAuthState() {
-    this.authState = null, this.walletSecret = null, h.endUserIdentifier = "", this.cancelTokenRefresh(), this.authStateChangeCallbacks.forEach((e) => e(null));
-  }
-  /**
-   * Ensures the AuthManager is initialized before proceeding.
-   * If initialization is already in progress, waits for it to complete.
-   */
-  async ensureInitialized() {
-    if (this.initPromise) {
-      await this.initPromise;
-      return;
-    }
-    throw new Error("AuthManager not initialized");
-  }
-  /**
-   * Internal async initialization logic.
-   */
-  async _doInitialize() {
+import "@coinbase/cdp-api-client";
+import { MfaError as p } from "./index.native76.js";
+const c = "cdp-web-mfa-required", v = () => {
+  let t, r;
+  return { promise: new Promise((o, s) => {
+    t = o, r = s;
+  }), resolve: t, reject: r };
+}, i = /* @__PURE__ */ new Set();
+let e = null;
+const M = (t, r) => {
+  const n = r?.scope, o = n ?? document, s = (l) => {
+    const f = l, { methods: m } = f.detail;
+    n && l.stopPropagation();
     try {
-      await this.refreshAccessToken("init"), await p().handleOAuthCode();
-    } catch (e) {
-      console.warn("Failed to refresh access token during initialization:", e);
+      t({ methods: m });
+    } catch (u) {
+      console.error("MFA listener threw an error:", u);
     }
-  }
-  /**
-   * Returns whether the token should be refreshed.
-   *
-   * @returns True if the token should be refreshed, false otherwise.
-   */
-  shouldRefreshToken() {
-    return !(this.authState && this.authState.expiresAt > Date.now() + l);
-  }
-  /**
-   * Refreshes the access token and transitions the auth state accordingly.
-   * If a refresh is already in progress, it will wait for that refresh to complete.
-   * Retries with exponential backoff on transient failures only. Unauthorized error
-   * short-circuit immediately since retrying won't help.
-   *
-   * @param trigger - The trigger for the refresh.
-   *
-   * @returns The new access token.
-   */
-  async refreshAccessToken(e = "on_demand") {
-    const { maxRetries: t, baseDelayMs: n, maxDelayMs: i } = g;
-    h.sendSessionRefreshEvent({
-      name: "refresh_token_start",
-      trigger: e
-    });
-    for (let r = 0; r <= t; r++)
-      try {
-        const a = await d(this.projectId, {
-          grantType: "refresh_token"
-        }), o = w(
-          a.accessToken,
-          a.validUntil,
-          a.endUser
-        );
-        await this.setAuthState(o), h.sendSessionRefreshEvent({
-          name: "refresh_token_success",
-          trigger: e,
-          attempt: r
-        });
-        return;
-      } catch (a) {
-        const o = a instanceof Error ? a.message : String(a);
-        if (!R(a)) {
-          h.sendSessionRefreshEvent({
-            name: "refresh_token_failure",
-            trigger: e,
-            attempt: r,
-            error_type: "non_transient",
-            error_message: o
-          }), await this.signOut();
-          return;
-        }
-        if (r === t) {
-          h.sendSessionRefreshEvent({
-            name: "refresh_token_exhausted",
-            trigger: e,
-            attempt: r,
-            error_type: "transient",
-            error_message: o
-          });
-          return;
-        }
-        h.sendSessionRefreshEvent({
-          name: "refresh_token_retry",
-          trigger: e,
-          attempt: r,
-          error_type: "transient",
-          error_message: o
-        });
-        const u = k(r, n, i);
-        await T(u);
-      }
-  }
-  /**
-   * Schedules a token refresh to occur exactly when shouldRefreshToken() would return true.
-   * Uses the same REFRESH_CREDENTIALS_BUFFER_MS timing as the rest of the auth system.
-   */
-  scheduleTokenRefresh() {
-    if (this.cancelTokenRefresh(), !this.authState)
-      return;
-    const t = this.authState.expiresAt - l - Date.now();
-    t <= 0 || (h.sendSessionRefreshEvent({
-      name: "refresh_token_scheduled",
-      time_until_refresh_ms: t
-    }), this.refreshTimeout = setTimeout(async () => {
-      await this.refreshAccessToken("scheduled"), this.scheduleTokenRefresh();
-    }, t));
-  }
-  /**
-   * Cancels any scheduled token refresh.
-   */
-  cancelTokenRefresh() {
-    this.refreshTimeout && (clearTimeout(this.refreshTimeout), this.refreshTimeout = null);
-  }
-  /**
-   * Returns whether the wallet secret should be refreshed.
-   *
-   * @returns True if the wallet secret should be refreshed, false otherwise.
-   */
-  shouldRefreshWalletSecret() {
-    return !(this.walletSecret && this.walletSecret.expiresAt > Date.now() + l);
-  }
-  /**
-   * Refreshes the wallet secret. Assumes the user is signed in.
-   *
-   * @returns The wallet secret.
-   */
-  async refreshWalletSecret() {
-    const e = c(), t = this.walletSecret?.walletSecretId ?? e.generateRandomId(), n = this.walletSecret?.keyPair ?? await e.createKeyPair(), i = this.authState.expiresAt, r = new Date(i).toISOString();
-    this.walletSecret = { walletSecretId: t, keyPair: n, expiresAt: i };
-    try {
-      await S(this.projectId, this.authState.user.userId, {
-        walletSecretId: t,
-        publicKey: n.publicKeyBase64,
-        validUntil: r
-      });
-    } catch (a) {
-      throw this.walletSecret = null, a;
-    }
-  }
-}
+  };
+  o.addEventListener(c, s);
+  const a = () => {
+    o.removeEventListener(c, s);
+  }, d = { listener: t, scope: n, cleanup: a };
+  return i.add(d), () => {
+    a(), i.delete(d);
+  };
+}, b = () => i.size > 0, w = (t) => {
+  if (i.size === 0)
+    return Promise.resolve();
+  e && (e.reject(
+    new p("SUPERSEDED", "MFA verification superseded by a newer request")
+  ), e = null), e = v();
+  const r = document.activeElement, n = r && r !== document.body ? r : document.body, o = new CustomEvent(c, {
+    bubbles: !0,
+    // Allow event to bubble up through DOM
+    detail: { methods: t }
+  });
+  return n.dispatchEvent(o), e.promise;
+}, P = () => {
+  e && (e.resolve(), e = null);
+}, L = (t) => {
+  e && (e.reject(t), e = null);
+};
 export {
-  O as AuthManager
+  b as hasRegisteredMfaListeners,
+  M as registerMfaListener,
+  L as rejectPendingMfaVerification,
+  P as resolvePendingMfaVerification,
+  w as triggerMfaVerification
 };

package/dist/native/index.native7.js

@@ -1,71 +1,59 @@
-import "@coinbase/cdp-api-client";
-import "viem";
-const n = {
-  /**
-   * Retrieves a value from AsyncStorage.
-   *
-   * @param key - The storage key.
-   * @returns Promise that resolves to the value.
-   */
-  async getItem(t) {
-    try {
-      const { default: e } = await import("@react-native-async-storage/async-storage");
-      return await e.getItem(t);
-    } catch (e) {
-      if (e instanceof Error && e.message.includes("Cannot resolve module"))
-        throw new Error(
-          "AsyncStorage is not available. Please install @react-native-async-storage/async-storage and ensure it's properly linked in your React Native project."
-        );
-      return console.warn(`Failed to get item from AsyncStorage: ${e}`), null;
-    }
+import * as u from "expo-web-browser";
+import { WebBrowserResultType as o } from "expo-web-browser";
+import { getCoreOAuthManager as s, getConfig as l } from "./index.native62.js";
+const h = {
+  getRedirectUrl: () => {
+    const e = l().nativeOAuthCallback;
+    if (!e)
+      throw new Error("nativeOAuthCallback must be configured in order to use native OAuth");
+    return e;
   },
-  /**
-   * Stores a value in AsyncStorage.
-   *
-   * @param key - The storage key.
-   * @param value - The value to store.
-   */
-  async setItem(t, e) {
-    try {
-      const { default: a } = await import("@react-native-async-storage/async-storage");
-      await a.setItem(t, e);
-    } catch (a) {
-      throw a instanceof Error && a.message.includes("Cannot resolve module") ? new Error(
-        "AsyncStorage is not available. Please install @react-native-async-storage/async-storage and ensure it's properly linked in your React Native project."
-      ) : (console.warn(`Failed to set item in AsyncStorage: ${a}`), a);
-    }
+  getOAuthParams: (e) => {
+    if (!e)
+      return null;
+    const r = new URL(e), t = r.searchParams.get("code") ?? void 0, a = r.searchParams.get("provider_type") ?? void 0, i = r.searchParams.get("flow_id") ?? void 0, n = r.searchParams.get("error") ?? void 0, c = r.searchParams.get("error_description") ?? void 0;
+    return (!t || !a || !i) && !n && !c ? null : { code: t, providerType: a, flowId: i, error: n, errorDescription: c };
   },
-  /**
-   * Removes a value from AsyncStorage.
-   *
-   * @param key - The storage key.
-   */
-  async removeItem(t) {
-    try {
-      const { default: e } = await import("@react-native-async-storage/async-storage");
-      await e.removeItem(t);
-    } catch (e) {
-      throw e instanceof Error && e.message.includes("Cannot resolve module") ? new Error(
-        "AsyncStorage is not available. Please install @react-native-async-storage/async-storage and ensure it's properly linked in your React Native project."
-      ) : (console.warn(`Failed to remove item from AsyncStorage: ${e}`), e);
-    }
+  cleanupOAuthParams: () => {
   },
-  /**
-   * Clears all values from AsyncStorage.
-   *
-   * @returns Promise that resolves when storage is cleared.
-   */
-  async clear() {
-    try {
-      const { default: t } = await import("@react-native-async-storage/async-storage");
-      await t.clear();
-    } catch (t) {
-      throw t instanceof Error && t.message.includes("Cannot resolve module") ? new Error(
-        "AsyncStorage is not available. Please install @react-native-async-storage/async-storage and ensure it's properly linked in your React Native project."
-      ) : (console.warn(`Failed to clear AsyncStorage: ${t}`), t);
+  initiateOAuthFlow: async (e) => {
+    const r = h.getRedirectUrl(), t = await u.openAuthSessionAsync(e, r);
+    switch (t.type) {
+      case "success":
+        if (!t.url)
+          throw new Error("URL is required for success result");
+        s().handleOAuthCode(t.url);
+        break;
+      case o.CANCEL:
+        s().setOAuthFlowState({
+          status: "error",
+          errorDescription: "User cancelled the OAuth flow"
+        });
+        break;
+      case o.DISMISS:
+        s().setOAuthFlowState({
+          status: "error",
+          errorDescription: "User dismissed the OAuth flow"
+        });
+        break;
+      case o.LOCKED:
+        s().setOAuthFlowState({
+          status: "error",
+          errorDescription: "The browser was locked"
+        });
+        break;
+      case o.OPENED:
+        break;
+      default:
+        throw new Error(
+          `Unexpected WebBrowser result type: ${t.type}`
+        );
     }
+  },
+  openTelegramOAuthPopup: async () => {
+    throw new Error("Telegram OAuth is not currently supported in React Native environments.");
   }
 };
 export {
-  n as nativeStorage
+  h as nativeOAuth
 };

package/dist/native/index.native70.js

@@ -1,21 +1,22 @@
-import { APIError as c, ErrorType as u, HttpErrorType as E, OAuth2ProviderType as a, SendEvmTransactionWithEndUserAccountBodyNetwork as d, SendSolanaTransactionWithEndUserAccountBodyNetwork as p } from "@coinbase/cdp-api-client";
+import { getMfaConfigState as f } from "./index.native62.js";
+import "@coinbase/cdp-api-client";
 import "viem";
-class e extends Error {
-  /**
-   * Creates a new CustomAuthError.
-   *
-   * @param message - The error message.
-   */
-  constructor(r) {
-    super(r), this.name = "CustomAuthError";
-  }
+const r = ["totp", "sms"], o = (t, e) => {
+  const n = t.mfaMethods[e]?.enrolledAt;
+  return !!n && Date.now() > new Date(n).getTime();
+};
+function d(t) {
+  return t.mfaMethods ? r.filter((e) => o(t, e)) : [];
+}
+function s(t, e) {
+  return e ? o(t, e) : t.mfaMethods ? r.some((n) => o(t, n)) : !1;
+}
+function M() {
+  const t = f(), e = r.filter((n) => t?.[`${n}Config`]?.enabled);
+  return e.length ? e : ["totp"];
 }
 export {
-  c as APIError,
-  e as CustomAuthError,
-  u as ErrorType,
-  E as HttpErrorType,
-  a as OAuth2ProviderType,
-  d as SendEvmTransactionWithEndUserAccountBodyNetwork,
-  p as SendSolanaTransactionWithEndUserAccountBodyNetwork
+  M as getEnabledMfaMethods,
+  d as getEnrolledMfaMethods,
+  s as isEnrolledInMfa
 };