@coinbase/cdp-sdk 1.44.1 → 1.46.0

package/index.ts

@@ -1,5 +1,10 @@
 export { CdpClient } from "./client/cdp.js";
+export { toEvmDelegatedAccount } from "./accounts/evm/toEvmDelegatedAccount.js";
 export type { EvmServerAccount, EvmSmartAccount } from "./accounts/evm/types.js";
+export type {
+  CreateEvmEip7702DelegationResult,
+  WaitForEvmEip7702DelegationOperationStatusOptions,
+} from "./client/evm/evm.types.js";
 export type { Policy } from "./policies/types.js";
 export {
   CreatePolicyBodySchema,
@@ -10,7 +15,37 @@ export {
 export { NetworkError } from "./openapi-client/errors.js";
 export type { SpendPermission, SpendPermissionInput } from "./spend-permissions/types.js";
 export type { SpendPermissionNetwork, ListEndUsers200, EndUser } from "./openapi-client/index.js";
-export type { ListEndUsersOptions, EndUserAccount } from "./client/end-user/endUser.types.js";
+export type {
+  ListEndUsersOptions,
+  EndUserAccount,
+  RevokeDelegationForEndUserOptions,
+  SignEvmHashOptions,
+  SignEvmHashResult,
+  SignEvmTransactionOptions,
+  SignEvmTransactionResult,
+  SignEvmMessageOptions,
+  SignEvmMessageResult,
+  SignEvmTypedDataOptions,
+  SignEvmTypedDataResult,
+  SendEvmTransactionOptions,
+  SendEvmTransactionResult,
+  SendEvmAssetOptions,
+  SendEvmAssetResult,
+  SendUserOperationOptions,
+  SendUserOperationResult,
+  CreateEvmEip7702DelegationOptions as CreateEvmEip7702DelegationForEndUserOptions,
+  CreateEvmEip7702DelegationForEndUserResult,
+  SignSolanaHashOptions,
+  SignSolanaHashResult,
+  SignSolanaMessageOptions,
+  SignSolanaMessageResult,
+  SignSolanaTransactionOptions,
+  SignSolanaTransactionResult,
+  SendSolanaTransactionOptions,
+  SendSolanaTransactionResult,
+  SendSolanaAssetOptions,
+  SendSolanaAssetResult,
+} from "./client/end-user/endUser.types.js";
 export {
   SPEND_PERMISSION_MANAGER_ABI as spendPermissionManagerAbi,
   SPEND_PERMISSION_MANAGER_ADDRESS as spendPermissionManagerAddress,

package/openapi-client/cdpApiClient.ts

@@ -85,6 +85,26 @@ export const configure = (options: CdpOptions) => {
     expiresIn: options.expiresIn,
     debug: options.debugging,
   });
+
+  /*
+   * Delegated routing interceptor.
+   * Embedded Wallet API's are exposed to the developer for delegated signing
+   * via the /delegated path, which properly forwards the Authorization and
+   * X-Wallet-Auth headers from the edge.
+   *
+   * Registered after withAuth so it runs BEFORE the auth interceptor (LIFO order).
+   * This rewrites the URL first, then the auth interceptor computes JWT headers
+   * (Authorization and X-Wallet-Auth) against the rewritten URL path, ensuring
+   * the `uris` claim matches the actual request URL.
+   * The API gateway validates the JWT, strips the /delegated prefix, and forwards
+   * to the backend.
+   */
+  axiosInstance.interceptors.request.use(config => {
+    if (config.url && isDelegatedEndUserPath(config.url)) {
+      config.url = `/delegated${config.url}`;
+    }
+    return config;
+  });
 };
 
 /**
@@ -307,6 +327,20 @@ export const cdpApiClient = async <T>(
   }
 };
 
+/**
+ * Checks if the given request URL is a delegated end-user operation that should
+ * be routed through the /platform/delegated gateway prefix.
+ *
+ * These endpoints require both Authorization and X-Wallet-Auth headers to be
+ * forwarded by the API gateway, which the /delegated prefix enables.
+ *
+ * @param url - The request URL (relative, without base path).
+ * @returns True if the path should be routed through /platform/delegated.
+ */
+const isDelegatedEndUserPath = (url: string): boolean => {
+  return /^\/v2\/embedded-wallet-api\/projects\/[^/]+\/end-users\//.test(url);
+};
+
 /**
  * Validates the call to the cdpApiClient.
  *