@getpara/core-sdk 3.2.0 → 3.4.0

package/dist/cjs/ParaCore.js

@@ -431,7 +431,7 @@ const _ParaCore = class _ParaCore {
     this.addCredential = (params) => __async(this, null, function* () {
       return yield __privateGet(this, _authService).addCredential(params);
     });
-    var _a;
+    var _a, _b, _c;
     let env, apiKey;
     const actualArgs = Array.from(arguments).filter((arg) => arg !== void 0);
     const actualArgumentCount = actualArgs.length;
@@ -518,6 +518,7 @@ const _ParaCore = class _ParaCore {
     };
     const rawPlatform = (_a = opts.hostPlatform) != null ? _a : this.platformUtils.sdkType;
     this.clientType = (0, import_userManagementClient.normalizePlatform)(rawPlatform);
+    const requestAgents = (_c = (_b = this.platformUtils).getRequestAgents) == null ? void 0 : _c.call(_b);
     const client = (0, import_userManagementClient.initClient)({
       env,
       version: _ParaCore.version,
@@ -528,7 +529,9 @@ const _ParaCore = class _ParaCore {
       platform: rawPlatform,
       useFetchAdapter: !!opts.disableWorkers,
       retrieveSessionCookie: this.retrieveSessionCookie,
-      persistSessionCookie: this.persistSessionCookie
+      persistSessionCookie: this.persistSessionCookie,
+      httpAgent: requestAgents == null ? void 0 : requestAgents.httpAgent,
+      httpsAgent: requestAgents == null ? void 0 : requestAgents.httpsAgent
     });
     const enclaveClient = new import_enclave.EnclaveClient({
       userManagementClient: client,
@@ -3489,6 +3492,7 @@ logout_fn = function() {
     this.accountLinkInProgress = void 0;
     __privateGet(this, _authService).userId = void 0;
     __privateGet(this, _sessionManagementService).sessionCookie = void 0;
+    __privateGet(this, _sessionManagementService).invalidateTouchSessionCache();
     this.isEnclaveUser = false;
     (0, import_uxStateSpanProcessor.setCurrentUserId)(void 0);
     if (isSessionActive) {

package/dist/cjs/constants.js

@@ -46,7 +46,7 @@ __export(constants_exports, {
   TRANSACTION_REVIEW_TIMEOUT_MS: () => TRANSACTION_REVIEW_TIMEOUT_MS
 });
 module.exports = __toCommonJS(constants_exports);
-const PARA_CORE_VERSION = "3.2.0";
+const PARA_CORE_VERSION = "3.4.0";
 const PREFIX = "@CAPSULE/";
 const PARA_PREFIX = "@PARA/";
 const LOCAL_STORAGE_AUTH_INFO = `${PREFIX}authInfo`;

package/dist/cjs/external/userManagementClient.js

@@ -124,7 +124,9 @@ function initClient({
   useFetchAdapter = false,
   retrieveSessionCookie,
   persistSessionCookie,
-  staticTraceContext
+  staticTraceContext,
+  httpAgent,
+  httpsAgent
 }) {
   return new import_user_management_client.default({
     userManagementHost: getBaseUrl(env),
@@ -135,7 +137,9 @@ function initClient({
     opts: { useFetchAdapter },
     retrieveSessionCookie,
     persistSessionCookie,
-    staticTraceContext
+    staticTraceContext,
+    httpAgent,
+    httpsAgent
   });
 }
 // Annotate the CommonJS export names for ESM import in node:

package/dist/cjs/services/AuthService.js

@@ -686,6 +686,7 @@ class AuthService {
         }
       }
       const { sessionId } = yield __privateGet(this, _sessionManagementService).touchSession();
+      const hasExistingPasskey = userAuthMethods.has(import_user_management_client.AuthMethod.PASSKEY);
       const result = (isForNewDevice || urlType) && (yield __privateGet(this, _portalUrlService).constructPortalUrl(isForNewDevice ? "addNewCredential" : urlType, {
         isForNewDevice,
         pathId: credentialId,
@@ -694,7 +695,8 @@ class AuthService {
         sessionId: isForNewDevice ? sessionId : void 0,
         addNewCredentialType: optsAuthMethod,
         addNewCredentialPasskeyId: passkeyId,
-        addNewCredentialPasswordId: passwordId
+        addNewCredentialPasswordId: passwordId,
+        useLegacyUrl: hasExistingPasskey
       }));
       return __spreadValues({ credentialId }, result ? { url: result.url, fullUrl: result.fullUrl } : {});
     });

package/dist/cjs/services/SessionManagementService.js

@@ -218,6 +218,20 @@ const _SessionManagementService = class _SessionManagementService {
       }
       return session;
     }));
+    // Drop the dedupe cache so the next touchSession() round-trips to the server
+    // instead of replaying the pre-logout snapshot. Without this, the core state
+    // machine's post-logout `checkUserState` (auth machine) hits the cache within
+    // the 1s TTL, sees `isAuthenticated: true` and `currentWalletIds` from before
+    // logout, re-applies the wallet IDs via #doTouchSession line 235-237, and
+    // reports `isFullyLoggedIn=true` — sending the state machine back to
+    // `authenticated` instead of `unauthenticated`. Called from ParaCore.#logout
+    // after the session cookie + in-memory auth state are cleared, so the next
+    // touchSession sees a fresh "no session" response.
+    this.invalidateTouchSessionCache = () => {
+      __privateSet(this, _touchCached, void 0);
+      __privateSet(this, _touchCachedAt, void 0);
+      __privateSet(this, _touchPromise, void 0);
+    };
     this.isSessionActive = () => __async(this, null, function* () {
       if (__privateGet(this, _externalWalletService).externalWalletConnectionType === "CONNECTION_ONLY") {
         return true;

package/dist/esm/ParaCore.js

@@ -376,7 +376,7 @@ const _ParaCore = class _ParaCore {
     this.addCredential = (params) => __async(this, null, function* () {
       return yield __privateGet(this, _authService).addCredential(params);
     });
-    var _a;
+    var _a, _b, _c;
     let env, apiKey;
     const actualArgs = Array.from(arguments).filter((arg) => arg !== void 0);
     const actualArgumentCount = actualArgs.length;
@@ -463,6 +463,7 @@ const _ParaCore = class _ParaCore {
     };
     const rawPlatform = (_a = opts.hostPlatform) != null ? _a : this.platformUtils.sdkType;
     this.clientType = normalizePlatform(rawPlatform);
+    const requestAgents = (_c = (_b = this.platformUtils).getRequestAgents) == null ? void 0 : _c.call(_b);
     const client = initClient({
       env,
       version: _ParaCore.version,
@@ -473,7 +474,9 @@ const _ParaCore = class _ParaCore {
       platform: rawPlatform,
       useFetchAdapter: !!opts.disableWorkers,
       retrieveSessionCookie: this.retrieveSessionCookie,
-      persistSessionCookie: this.persistSessionCookie
+      persistSessionCookie: this.persistSessionCookie,
+      httpAgent: requestAgents == null ? void 0 : requestAgents.httpAgent,
+      httpsAgent: requestAgents == null ? void 0 : requestAgents.httpsAgent
     });
     const enclaveClient = new EnclaveClient({
       userManagementClient: client,
@@ -3434,6 +3437,7 @@ logout_fn = function() {
     this.accountLinkInProgress = void 0;
     __privateGet(this, _authService).userId = void 0;
     __privateGet(this, _sessionManagementService).sessionCookie = void 0;
+    __privateGet(this, _sessionManagementService).invalidateTouchSessionCache();
     this.isEnclaveUser = false;
     setCurrentUserId(void 0);
     if (isSessionActive) {

package/dist/esm/constants.js

@@ -1,5 +1,5 @@
 import "./chunk-7B52C2XE.js";
-const PARA_CORE_VERSION = "3.2.0";
+const PARA_CORE_VERSION = "3.4.0";
 const PREFIX = "@CAPSULE/";
 const PARA_PREFIX = "@PARA/";
 const LOCAL_STORAGE_AUTH_INFO = `${PREFIX}authInfo`;

package/dist/esm/external/userManagementClient.js

@@ -89,7 +89,9 @@ function initClient({
   useFetchAdapter = false,
   retrieveSessionCookie,
   persistSessionCookie,
-  staticTraceContext
+  staticTraceContext,
+  httpAgent,
+  httpsAgent
 }) {
   return new Client({
     userManagementHost: getBaseUrl(env),
@@ -100,7 +102,9 @@ function initClient({
     opts: { useFetchAdapter },
     retrieveSessionCookie,
     persistSessionCookie,
-    staticTraceContext
+    staticTraceContext,
+    httpAgent,
+    httpsAgent
   });
 }
 export {

package/dist/esm/services/AuthService.js

@@ -617,6 +617,7 @@ class AuthService {
         }
       }
       const { sessionId } = yield __privateGet(this, _sessionManagementService).touchSession();
+      const hasExistingPasskey = userAuthMethods.has(AuthMethod.PASSKEY);
       const result = (isForNewDevice || urlType) && (yield __privateGet(this, _portalUrlService).constructPortalUrl(isForNewDevice ? "addNewCredential" : urlType, {
         isForNewDevice,
         pathId: credentialId,
@@ -625,7 +626,8 @@ class AuthService {
         sessionId: isForNewDevice ? sessionId : void 0,
         addNewCredentialType: optsAuthMethod,
         addNewCredentialPasskeyId: passkeyId,
-        addNewCredentialPasswordId: passwordId
+        addNewCredentialPasswordId: passwordId,
+        useLegacyUrl: hasExistingPasskey
       }));
       return __spreadValues({ credentialId }, result ? { url: result.url, fullUrl: result.fullUrl } : {});
     });

package/dist/esm/services/SessionManagementService.js

@@ -162,6 +162,20 @@ const _SessionManagementService = class _SessionManagementService {
       }
       return session;
     }));
+    // Drop the dedupe cache so the next touchSession() round-trips to the server
+    // instead of replaying the pre-logout snapshot. Without this, the core state
+    // machine's post-logout `checkUserState` (auth machine) hits the cache within
+    // the 1s TTL, sees `isAuthenticated: true` and `currentWalletIds` from before
+    // logout, re-applies the wallet IDs via #doTouchSession line 235-237, and
+    // reports `isFullyLoggedIn=true` — sending the state machine back to
+    // `authenticated` instead of `unauthenticated`. Called from ParaCore.#logout
+    // after the session cookie + in-memory auth state are cleared, so the next
+    // touchSession sees a fresh "no session" response.
+    this.invalidateTouchSessionCache = () => {
+      __privateSet(this, _touchCached, void 0);
+      __privateSet(this, _touchCachedAt, void 0);
+      __privateSet(this, _touchPromise, void 0);
+    };
     this.isSessionActive = () => __async(this, null, function* () {
       if (__privateGet(this, _externalWalletService).externalWalletConnectionType === "CONNECTION_ONLY") {
         return true;

package/dist/types/PlatformUtils.d.ts

@@ -9,6 +9,17 @@ export interface EventData<T = any> {
 export type EventHandler<T = any> = (data: T) => void;
 export interface PlatformUtils {
     sdkType: SDKType;
+    /**
+     * Node-only: keep-alive HTTP(S) agents for the user-management client so
+     * server-to-server callers reuse connections instead of re-handshaking
+     * TCP+TLS per request. Browser/RN platforms omit this (the runtime pools
+     * sockets itself). Returned as `unknown` to keep node:http types out of
+     * browser-bundled core-sdk.
+     */
+    getRequestAgents?(): {
+        httpAgent?: unknown;
+        httpsAgent?: unknown;
+    } | undefined;
     getPrivateKey(ctx: Ctx, userId: string, walletId: string, share: string, sessionCookie: string): Promise<string>;
     getED25519PrivateKey(ctx: Ctx, userId: string, walletId: string, share: string, sessionCookie: string): Promise<string>;
     keygen(ctx: Ctx, userId: string, type: Exclude<TWalletType, 'SOLANA'>, secretKey: string | null, // should be acceptable as null in RN as we don't pre-gen them

package/dist/types/external/userManagementClient.d.ts

@@ -11,7 +11,7 @@ export declare function getBaseMPCNetworkUrl(env: Environment, useWebsocket?: bo
  * outside this core SDK path.
  */
 export declare function normalizePlatform(platform?: string): string | undefined;
-export declare function initClient({ env, version, apiKey, partnerId, platform, useFetchAdapter, retrieveSessionCookie, persistSessionCookie, staticTraceContext, }: {
+export declare function initClient({ env, version, apiKey, partnerId, platform, useFetchAdapter, retrieveSessionCookie, persistSessionCookie, staticTraceContext, httpAgent, httpsAgent, }: {
     env: Environment;
     version?: string;
     apiKey: string;
@@ -22,4 +22,6 @@ export declare function initClient({ env, version, apiKey, partnerId, platform,
     retrieveSessionCookie?: () => string;
     persistSessionCookie?: (cookie: string) => void;
     staticTraceContext?: Record<string, string>;
+    httpAgent?: unknown;
+    httpsAgent?: unknown;
 }): Client;

package/dist/types/services/SessionManagementService.d.ts

@@ -19,6 +19,7 @@ export declare class SessionManagementService {
         pregenWalletService: PregenWalletService;
     }) => void;
     touchSession: TouchSessionMethod;
+    invalidateTouchSessionCache: () => void;
     isSessionActive: IsSessionActiveMethod;
     isFullyLoggedIn: IsFullyLoggedInMethod;
     refreshSession: RefreshSessionMethod;

package/package.json

@@ -1,11 +1,11 @@
 {
   "name": "@getpara/core-sdk",
-  "version": "3.2.0",
+  "version": "3.4.0",
   "dependencies": {
     "@celo/utils": "^8.0.2",
     "@cosmjs/encoding": "^0.32.4",
     "@ethereumjs/util": "^9.1.0",
-    "@getpara/user-management-client": "3.2.0",
+    "@getpara/user-management-client": "3.4.0",
     "@noble/hashes": "^1.5.0",
     "@opentelemetry/api": "^1.9.1",
     "@opentelemetry/context-zone": "^2.7.1",
@@ -41,7 +41,7 @@
     "dist",
     "package.json"
   ],
-  "gitHead": "096152f48e9d9a64fdb192588315c64d33d15a1b",
+  "gitHead": "795829c50bb71817a84bdbf5e6561ca4df3a827d",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",
   "scripts": {