@coinbase/cdp-core 0.0.97 → 0.0.99

package/dist/esm/index.native76.js

@@ -1,73 +1,41 @@
-class n extends Error {
-  /**
-   * The name of the missing module.
-   */
-  moduleName;
-  /**
-   * The API or feature that requires the missing module.
-   */
-  requiredFor;
-  /**
-   * Creates a new ModuleResolutionError.
-   *
-   * @param moduleName - The name of the missing module.
-   * @param requiredFor - The API or feature that requires the module.
-   * @param message - Optional custom error message.
-   */
-  constructor(r, s, o) {
-    const t = `${s} is not available in this React Native environment. Please ensure ${r} is installed.`;
-    super(o || t), this.name = "ModuleResolutionError", this.moduleName = r, this.requiredFor = s;
-  }
-}
-class a extends Error {
-  /**
-   * Creates a new InputValidationError.
-   *
-   * @param message - The validation error message.
-   */
-  constructor(r) {
-    super(r), this.name = "InputValidationError";
-  }
-}
-class i extends Error {
-  /**
-   * Creates a new ValidationError.
-   *
-   * @param message - The validation error message.
-   */
-  constructor(r) {
-    super(r), this.name = "ValidationError";
-  }
-}
-class l extends Error {
-  /**
-   * Creates a new InternalError.
-   *
-   * @param message - The internal error message.
-   */
-  constructor(r) {
-    super(r), this.name = "InternalError";
-  }
-}
-class u extends Error {
-  /**
-   * The error code identifying the type of MFA error.
-   */
-  code;
-  /**
-   * Creates a new MfaError.
-   *
-   * @param code - The error code identifying the type of MFA error.
-   * @param message - The error message.
-   */
-  constructor(r, s) {
-    super(s), this.name = "MfaError", this.code = r;
-  }
+import { createSolanaKeyExportIframe as t, createEvmKeyExportIframe as m } from "./index.native118.js";
+import "@coinbase/cdp-api-client";
+import "./index.native2.js";
+import "./index.native3.js";
+import "jose";
+import "viem";
+import "./index.native90.js";
+import { signEvmHash as i } from "./index.native28.js";
+import { signEvmTransaction as n } from "./index.native29.js";
+import { signEvmMessage as a } from "./index.native30.js";
+import { signEvmTypedData as e } from "./index.native31.js";
+import { signSolanaTransaction as p } from "./index.native32.js";
+import { signSolanaMessage as s } from "./index.native33.js";
+import { sendEvmTransaction as c } from "./index.native34.js";
+import { sendSolanaTransaction as f } from "./index.native35.js";
+import { sendUserOperation as E } from "./index.native36.js";
+import { exportEvmAccount as T } from "./index.native38.js";
+import { exportSolanaAccount as g } from "./index.native39.js";
+const o = {
+  signEvmHash: i,
+  signEvmTransaction: n,
+  signSolanaTransaction: p,
+  sendEvmTransaction: c,
+  sendSolanaTransaction: f,
+  signEvmMessage: a,
+  signSolanaMessage: s,
+  signEvmTypedData: e,
+  sendUserOperation: E,
+  exportEvmAccount: T,
+  exportSolanaAccount: g,
+  createEvmKeyExportIframe: m,
+  createSolanaKeyExportIframe: t
+}, R = Object.keys(o);
+function U(r) {
+  return r in o;
 }
 export {
-  a as InputValidationError,
-  l as InternalError,
-  u as MfaError,
-  n as ModuleResolutionError,
-  i as ValidationError
+  R as MFA_PROTECTED_ACTIONS,
+  o as MFA_PROTECTED_FUNCTIONS,
+  U as isMfaProtectedAction
 };

package/dist/esm/index.native77.js

@@ -1,9 +1,332 @@
-function n(e) {
-  if (!/^\+[1-9]\d{1,14}$/.test(e))
-    throw new Error(
-      `Invalid phone number format: "${e}". Phone number must be in E.164 format (e.g., +14155552671). Requirements: starts with +, followed by country code (1-3 digits), then subscriber number. Total length: 1-15 digits (excluding + prefix).`
-    );
+import { logOutEndUser as f, refreshAccessToken as d, registerTemporaryWalletSecret as S } from "@coinbase/cdp-api-client";
+import { Analytics as h } from "./index.native2.js";
+import "./index.native3.js";
+import "jose";
+import { SignJWT as m } from "./index.native99.js";
+import { toAuthState as w } from "./index.native93.js";
+import "viem";
+import { getPlatformCrypto as c } from "./index.native10.js";
+import { sortKeys as y } from "./index.native90.js";
+import { getCoreOAuthManager as p } from "./index.native66.js";
+const l = 60 * 1e3, g = {
+  maxRetries: 3,
+  baseDelayMs: 1e3,
+  maxDelayMs: 1e4
+};
+function k(s, e, t) {
+  const n = e * Math.pow(2, s), i = Math.random() * 0.3 * n;
+  return Math.min(n + i, t);
+}
+function T(s) {
+  return new Promise((e) => setTimeout(e, s));
+}
+function R(s) {
+  if (s instanceof TypeError && s.message.includes("fetch"))
+    return !0;
+  if (s && typeof s == "object" && "status" in s) {
+    const e = s.status;
+    if (e >= 500 && e < 600 || e === 408 || e === 429)
+      return !0;
+    if (e === 401)
+      return !1;
+  }
+  if (s instanceof Error) {
+    const e = s.message.toLowerCase();
+    if (e.includes("network") || e.includes("timeout") || e.includes("econnrefused") || e.includes("enotfound") || e.includes("socket"))
+      return !0;
+  }
+  return !1;
+}
+class O {
+  projectId;
+  authState = null;
+  walletSecret = null;
+  authStateChangeCallbacks = [];
+  initPromise = null;
+  refreshTimeout = null;
+  refreshWalletSecretPromise = null;
+  /**
+   * Initializes the token manager.
+   *
+   * @param projectId - The project ID.
+   */
+  constructor(e) {
+    this.projectId = e, this.initPromise = this._doInitialize();
+  }
+  /**
+   * Gets the current user, or null if there is no user signed in.
+   *
+   * @returns The current user.
+   */
+  getUser() {
+    return this.authState?.user ?? null;
+  }
+  /**
+   * Returns whether the user is signed in - i.e., whether there is an unexpired
+   * access token and user. Attempts to refresh the token if it's expired.
+   *
+   * @returns True if the user is signed in, false otherwise.
+   */
+  async isSignedIn() {
+    if (!this.authState)
+      return !1;
+    if (this.authState.expiresAt > Date.now() + l)
+      return !0;
+    try {
+      return await this.getToken() !== null;
+    } catch {
+      return !1;
+    }
+  }
+  /**
+   * Signs out the user, clearing all authentication state.
+   */
+  async signOut() {
+    try {
+      await f(this.projectId);
+    } catch {
+    } finally {
+      await this.clearAuthState();
+    }
+  }
+  /**
+   * Adds a callback to be called when the auth state changes.
+   *
+   * @param callback - The function to call when the auth state changes.
+   */
+  addAuthStateChangeCallback(e) {
+    this.authStateChangeCallbacks.push(e), e(this.authState?.user ?? null);
+  }
+  /**
+   * Gets the access token, refreshing it if it is expired. Returns null if the user is not
+   * signed in.
+   *
+   * @param options - The options for getting the token.
+   * @param options.forceRefresh - Whether to force a refresh of the token.
+   * @returns The access token.
+   */
+  async getToken(e) {
+    return (e?.forceRefresh || this.shouldRefreshToken()) && await this.refreshAccessToken(e?.forceRefresh ? "force" : "on_demand"), this.authState?.accessToken ?? null;
+  }
+  /**
+   * Gets the expiration time of the access token, or null if the user is not signed in.
+   *
+   * @returns The expiration time of the access token.
+   */
+  async getTokenExpiration() {
+    return this.authState?.expiresAt ?? null;
+  }
+  /**
+   * Gets the currently registered wallet secret ID. Rejects if the user is not signed in.
+   *
+   * @returns The wallet secret ID.
+   */
+  async getWalletSecretId() {
+    if (!await this.isSignedIn())
+      throw new Error("Cannot get wallet secret ID if the user is not signed in");
+    return this.shouldRefreshWalletSecret() && await this.refreshWalletSecret(), this.walletSecret.walletSecretId;
+  }
+  /**
+   * Gets the X-Wallet-Auth header. Rejects if the user is not signed in.
+   *
+   * @param options - The options for the request.
+   * @param options.requestMethod - The HTTP method of the request.
+   * @param options.requestHost - The host of the request.
+   * @param options.requestPath - The path of the request.
+   * @param options.requestData - The data of the request.
+   * @returns The X-Wallet-Auth header.
+   */
+  async getXWalletAuth(e) {
+    if (!await this.isSignedIn())
+      throw new Error("Cannot get X-Wallet-Auth header if the user is not signed in");
+    this.shouldRefreshWalletSecret() && await this.refreshWalletSecret();
+    const t = `${e.requestMethod} ${e.requestHost}${e.requestPath}`, n = Math.floor(Date.now() / 1e3), i = c(), r = {
+      uris: [t]
+    };
+    if (e.requestData && Object.keys(e.requestData).length > 0) {
+      const a = y(e.requestData);
+      r.reqHash = await i.hash(new TextEncoder().encode(JSON.stringify(a)));
+    }
+    return await new m(r).setProtectedHeader({ alg: "ES256", typ: "JWT" }).setIssuedAt(n).setNotBefore(n).setJti(i.generateRandomId()).sign(this.walletSecret.keyPair.privateKey);
+  }
+  /**
+   * Gets the authentication state.
+   *
+   * @returns The authentication state.
+   */
+  getAuthState() {
+    return this.authState;
+  }
+  /**
+   * Sets the authentication state.
+   *
+   * @param authState - The authentication state.
+   */
+  async setAuthState(e) {
+    this.authState = e, h.endUserIdentifier = e.user.userId, this.authStateChangeCallbacks.forEach((t) => t(this.authState?.user ?? null)), this.scheduleTokenRefresh();
+  }
+  /**
+   * Clears the authentication state.
+   */
+  async clearAuthState() {
+    this.authState = null, this.walletSecret = null, h.endUserIdentifier = "", this.cancelTokenRefresh(), this.authStateChangeCallbacks.forEach((e) => e(null));
+  }
+  /**
+   * Ensures the AuthManager is initialized before proceeding.
+   * If initialization is already in progress, waits for it to complete.
+   */
+  async ensureInitialized() {
+    if (this.initPromise) {
+      await this.initPromise;
+      return;
+    }
+    throw new Error("AuthManager not initialized");
+  }
+  /**
+   * Internal async initialization logic.
+   */
+  async _doInitialize() {
+    try {
+      await this.refreshAccessToken("init"), await p().handleOAuthCode();
+    } catch (e) {
+      console.warn("Failed to refresh access token during initialization:", e);
+    }
+  }
+  /**
+   * Returns whether the token should be refreshed.
+   *
+   * @returns True if the token should be refreshed, false otherwise.
+   */
+  shouldRefreshToken() {
+    return !(this.authState && this.authState.expiresAt > Date.now() + l);
+  }
+  /**
+   * Refreshes the access token and transitions the auth state accordingly.
+   * If a refresh is already in progress, it will wait for that refresh to complete.
+   * Retries with exponential backoff on transient failures only. Unauthorized error
+   * short-circuit immediately since retrying won't help.
+   *
+   * @param trigger - The trigger for the refresh.
+   *
+   * @returns The new access token.
+   */
+  async refreshAccessToken(e = "on_demand") {
+    const { maxRetries: t, baseDelayMs: n, maxDelayMs: i } = g;
+    h.sendSessionRefreshEvent({
+      name: "refresh_token_start",
+      trigger: e
+    });
+    for (let r = 0; r <= t; r++)
+      try {
+        const a = await d(this.projectId, {
+          grantType: "refresh_token"
+        }), o = w(
+          a.accessToken,
+          a.validUntil,
+          a.endUser
+        );
+        await this.setAuthState(o), h.sendSessionRefreshEvent({
+          name: "refresh_token_success",
+          trigger: e,
+          attempt: r
+        });
+        return;
+      } catch (a) {
+        const o = a instanceof Error ? a.message : String(a);
+        if (!R(a)) {
+          h.sendSessionRefreshEvent({
+            name: "refresh_token_failure",
+            trigger: e,
+            attempt: r,
+            error_type: "non_transient",
+            error_message: o
+          }), await this.signOut();
+          return;
+        }
+        if (r === t) {
+          h.sendSessionRefreshEvent({
+            name: "refresh_token_exhausted",
+            trigger: e,
+            attempt: r,
+            error_type: "transient",
+            error_message: o
+          });
+          return;
+        }
+        h.sendSessionRefreshEvent({
+          name: "refresh_token_retry",
+          trigger: e,
+          attempt: r,
+          error_type: "transient",
+          error_message: o
+        });
+        const u = k(r, n, i);
+        await T(u);
+      }
+  }
+  /**
+   * Schedules a token refresh to occur exactly when shouldRefreshToken() would return true.
+   * Uses the same REFRESH_CREDENTIALS_BUFFER_MS timing as the rest of the auth system.
+   */
+  scheduleTokenRefresh() {
+    if (this.cancelTokenRefresh(), !this.authState)
+      return;
+    const t = this.authState.expiresAt - l - Date.now();
+    t <= 0 || (h.sendSessionRefreshEvent({
+      name: "refresh_token_scheduled",
+      time_until_refresh_ms: t
+    }), this.refreshTimeout = setTimeout(async () => {
+      await this.refreshAccessToken("scheduled"), this.scheduleTokenRefresh();
+    }, t));
+  }
+  /**
+   * Cancels any scheduled token refresh.
+   */
+  cancelTokenRefresh() {
+    this.refreshTimeout && (clearTimeout(this.refreshTimeout), this.refreshTimeout = null);
+  }
+  /**
+   * Returns whether the wallet secret should be refreshed.
+   *
+   * @returns True if the wallet secret should be refreshed, false otherwise.
+   */
+  shouldRefreshWalletSecret() {
+    return !(this.walletSecret && this.walletSecret.expiresAt > Date.now() + l);
+  }
+  /**
+   * Refreshes the wallet secret. Assumes the user is signed in.
+   * Concurrent callers share the same in-flight registration to avoid
+   * racing on `this.walletSecret` (e.g. React Strict Mode double-fire).
+   *
+   * @returns A promise that resolves when the wallet secret is registered.
+   */
+  async refreshWalletSecret() {
+    if (this.refreshWalletSecretPromise)
+      return this.refreshWalletSecretPromise;
+    this.refreshWalletSecretPromise = this._doRefreshWalletSecret();
+    try {
+      await this.refreshWalletSecretPromise;
+    } finally {
+      this.refreshWalletSecretPromise = null;
+    }
+  }
+  /**
+   * Internal wallet secret refresh logic.
+   */
+  async _doRefreshWalletSecret() {
+    const e = c(), t = this.walletSecret?.walletSecretId ?? e.generateRandomId(), n = this.walletSecret?.keyPair ?? await e.createKeyPair(), i = this.authState.expiresAt, r = new Date(i).toISOString();
+    this.walletSecret = { walletSecretId: t, keyPair: n, expiresAt: i };
+    try {
+      await S(this.projectId, this.authState.user.userId, {
+        walletSecretId: t,
+        publicKey: n.publicKeyBase64,
+        validUntil: r
+      });
+    } catch (a) {
+      throw this.walletSecret = null, a;
+    }
+  }
 }
 export {
-  n as validatePhoneNumber
+  O as AuthManager
 };

package/dist/esm/index.native78.js

@@ -1,57 +1,21 @@
-import { createStore as p } from "zustand";
-import { subscribeWithSelector as c, persist as d, createJSONStorage as h } from "./index.native95.js";
-import { EventEmitter as f } from "./index.native96.js";
-import "./index.native97.js";
+import { APIError as c, ErrorType as u, HttpErrorType as E, OAuth2ProviderType as a, SendEvmTransactionWithEndUserAccountBodyNetwork as d, SendSolanaTransactionWithEndUserAccountBodyNetwork as p } from "@coinbase/cdp-api-client";
 import "viem";
-import "@coinbase/cdp-api-client";
-import { getPlatformStorage as u } from "./index.native10.js";
-import { createProvider as g } from "./index.native98.js";
-import { onAuthStateChange as l } from "./index.native26.js";
-import "./index.native2.js";
-import "./index.native3.js";
-import "jose";
-import "./index.native85.js";
-import "./index.native86.js";
-import "@solana/web3.js";
-import "bs58";
-function T(e) {
-  if (e.chains.length === 0)
-    throw new Error("At least one chain must be configured");
-  if (!e.transports)
-    throw new Error("Transports must be provided");
-  const o = e.chains, s = e.transports;
-  if (o.length === 0)
-    throw new Error("No chains found in configuration");
-  const m = new f(), i = u(), a = {
-    getItem: (t) => i.getItem(t),
-    setItem: (t, r) => i.setItem(t, r),
-    removeItem: (t) => i.removeItem(t)
-  }, n = p()(
-    c(
-      d(
-        (t) => ({
-          chainId: o[0].id,
-          setChainId: (r) => t({ chainId: r }),
-          chains: o,
-          user: null,
-          setUser: (r) => t({ user: r })
-        }),
-        {
-          name: "cdp-provider-store",
-          storage: h(() => a)
-        }
-      )
-    )
-  );
-  return n.persist.rehydrate(), l((t) => {
-    n.getState().setUser(t);
-  }), {
-    provider: g(m, n, {
-      chains: o,
-      transports: s
-    })
-  };
+class e extends Error {
+  /**
+   * Creates a new CustomAuthError.
+   *
+   * @param message - The error message.
+   */
+  constructor(r) {
+    super(r), this.name = "CustomAuthError";
+  }
 }
 export {
-  T as createCDPEmbeddedWallet
+  c as APIError,
+  e as CustomAuthError,
+  u as ErrorType,
+  E as HttpErrorType,
+  a as OAuth2ProviderType,
+  d as SendEvmTransactionWithEndUserAccountBodyNetwork,
+  p as SendSolanaTransactionWithEndUserAccountBodyNetwork
 };