@unifold/connect-react 0.1.77 → 0.1.78

package/dist/index.mjs

@@ -6093,12 +6093,12 @@ import {
   generatePrefixedKSUID as generatePrefixedKSUID2,
   DepositEventType as DepositEventType2
 } from "@unifold/core";
-import { useEffect as useEffect32 } from "react";
 import { useQuery } from "@tanstack/react-query";
 import {
   createDepositAddress,
   isDepositAddressValidationError
 } from "@unifold/core";
+import { useEffect as useEffect32 } from "react";
 import * as React52 from "react";
 import { jsx as jsx52 } from "react/jsx-runtime";
 import { useEffect as useEffect42, useState as useState32 } from "react";
@@ -6625,7 +6625,7 @@ function generateKSUID() {
 function generatePrefixedKSUID(prefix) {
   return `${prefix}_${generateKSUID()}`;
 }
-var PACKAGE_VERSION = "0.1.77";
+var PACKAGE_VERSION = "0.1.78";
 var LIBRARY_NAME = "@unifold/analytics";
 var DEFAULT_DEDUP_MS = 500;
 var SESSION_PREFIX = "asess";
@@ -6715,8 +6715,12 @@ var EventTracker = class {
   }
   /**
    * Associate subsequent events with an internal Unifold user.id
-   * (`user_<ksuid>`). Pass `null` to clear. Usually called once the
-   * deposit-addresses response returns the id.
+   * (`user_<ksuid>`). Pass `null` to clear.
+   *
+   * The tracker is shared across flows and outlives any one journey, so a
+   * journey stamps its own user at the start — with the id if it already
+   * knows one, `null` if it doesn't — rather than inheriting whatever the
+   * previous journey left here.
    */
   setUserId(userId) {
     this.userId = userId || void 0;
@@ -6727,8 +6731,8 @@ var EventTracker = class {
    * {@link EventTracker.endSession} carries it.
    *
    * Does not touch `userId`: the internal `user_<ksuid>` is attached separately
-   * via {@link EventTracker.setUserId} once the deposit-addresses response
-   * returns, and persists until the host replaces it.
+   * via {@link EventTracker.setUserId}, and persists until the host replaces
+   * it — which the SDK's modals do on every journey start.
    */
   startSession() {
     this.sessionId = generatePrefixedKSUID(SESSION_PREFIX);
@@ -12819,7 +12823,7 @@ import {
   generatePrefixedKSUID as generatePrefixedKSUID10
 } from "@unifold/core";
 import { Fragment as Fragment17, jsx as jsx722, jsxs as jsxs62 } from "react/jsx-runtime";
-import { useState as useState49, useEffect as useEffect48, useLayoutEffect as useLayoutEffect42, useCallback as useCallback17, useMemo as useMemo21, useRef as useRef20 } from "react";
+import { useState as useState49, useEffect as useEffect47, useLayoutEffect as useLayoutEffect42, useCallback as useCallback17, useMemo as useMemo21, useRef as useRef20 } from "react";
 import { useQuery as useQuery21 } from "@tanstack/react-query";
 import {
   getSupportedDestinationTokens
@@ -12840,7 +12844,7 @@ import {
   ActionType as ActionType5
 } from "@unifold/core";
 import { jsx as jsx73, jsxs as jsxs63 } from "react/jsx-runtime";
-import { useState as useState47, useCallback as useCallback16, useMemo as useMemo20, useEffect as useEffect46 } from "react";
+import { useState as useState47, useCallback as useCallback16, useMemo as useMemo20, useEffect as useEffect45 } from "react";
 import {
   checkHypercoreActivation as checkHypercoreActivation3
 } from "@unifold/core";
@@ -12852,13 +12856,12 @@ import {
 } from "@unifold/core";
 import { useMemo as useMemo19 } from "react";
 import { ActionType as ActionType6 } from "@unifold/core";
-import { useEffect as useEffect45 } from "react";
 import { useQuery as useQuery26 } from "@tanstack/react-query";
 import { getDepositAddress } from "@unifold/core";
 import { Fragment as Fragment18, jsx as jsx74, jsxs as jsxs64 } from "react/jsx-runtime";
 import { ExecutionStatus as ExecutionStatus7, getIconUrl as getIconUrl5 } from "@unifold/core";
 import { jsx as jsx75, jsxs as jsxs65 } from "react/jsx-runtime";
-import { useState as useState48, useEffect as useEffect47 } from "react";
+import { useState as useState48, useEffect as useEffect46 } from "react";
 import { Fragment as Fragment19, jsx as jsx76, jsxs as jsxs66 } from "react/jsx-runtime";
 import {
   createDepositAddress as createDepositAddress2,
@@ -13268,6 +13271,9 @@ var en_default = {
       transactionBreakdown: "Transaction breakdown",
       networkFee: "Network fee",
       confirmOrder: "Confirm Order",
+      mfaEnrollmentTitle: "Enable SMS or Authy 2FA",
+      mfaEnrollmentMessage: "Please make sure you enable SMS or Authy 2FA in your Coinbase account. Press Continue after you enable it.",
+      mfaEnrollmentSettingsLink: "Open Coinbase security settings",
       termsNoticePrefix: "By clicking on Confirm Order, you agree to our ",
       termsNoticeLink: "terms",
       termsNoticeSuffix: "."
@@ -13398,7 +13404,12 @@ var en_default = {
       prefix: "By continuing, you agree to Coinbase's ",
       separator: ", ",
       lastSeparator: ", and ",
-      suffix: ". Coinbase is the regulated provider of this fiat-to-crypto onramp."
+      suffix: ".",
+      agreements: {
+        guest_checkout_terms: "Terms of Service",
+        user_agreement: "User Agreement",
+        privacy_policy: "Privacy Policy"
+      }
     },
     errors: {
       rateLimited: "Too many attempts. Please wait a few minutes and try again.",
@@ -14057,6 +14068,9 @@ var zh_default = {
       transactionBreakdown: "\u4EA4\u6613\u660E\u7EC6",
       networkFee: "\u7F51\u7EDC\u624B\u7EED\u8D39",
       confirmOrder: "\u786E\u8BA4\u8BA2\u5355",
+      mfaEnrollmentTitle: "\u8BF7\u542F\u7528\u77ED\u4FE1\u6216 Authy \u53CC\u91CD\u9A8C\u8BC1",
+      mfaEnrollmentMessage: "\u8BF7\u786E\u8BA4\u60A8\u5DF2\u5728 Coinbase \u8D26\u6237\u4E2D\u542F\u7528\u77ED\u4FE1\u6216 Authy \u53CC\u91CD\u9A8C\u8BC1\u3002\u542F\u7528\u540E\u8BF7\u6309\u7EE7\u7EED\u3002",
+      mfaEnrollmentSettingsLink: "\u6253\u5F00 Coinbase \u5B89\u5168\u8BBE\u7F6E",
       termsNoticePrefix: "\u70B9\u51FB\u201C\u786E\u8BA4\u8BA2\u5355\u201D\u5373\u8868\u793A\u60A8\u540C\u610F\u6211\u4EEC\u7684",
       termsNoticeLink: "\u6761\u6B3E",
       termsNoticeSuffix: "\u3002"
@@ -14187,7 +14201,12 @@ var zh_default = {
       prefix: "\u7EE7\u7EED\u5373\u8868\u793A\u60A8\u540C\u610F Coinbase \u7684",
       separator: "\u3001",
       lastSeparator: "\u548C",
-      suffix: "\u3002Coinbase \u662F\u672C\u6CD5\u5E01\u5151\u52A0\u5BC6\u8D27\u5E01\u5145\u503C\u670D\u52A1\u7684\u53D7\u76D1\u7BA1\u63D0\u4F9B\u65B9\u3002"
+      suffix: "\u3002",
+      agreements: {
+        guest_checkout_terms: "\u670D\u52A1\u6761\u6B3E",
+        user_agreement: "\u7528\u6237\u534F\u8BAE",
+        privacy_policy: "\u9690\u79C1\u653F\u7B56"
+      }
     },
     errors: {
       rateLimited: "\u5C1D\u8BD5\u6B21\u6570\u8FC7\u591A\u3002\u8BF7\u7A0D\u7B49\u51E0\u5206\u949F\u540E\u91CD\u8BD5\u3002",
@@ -14846,6 +14865,9 @@ var zh_TW_default = {
       transactionBreakdown: "\u4EA4\u6613\u660E\u7D30",
       networkFee: "\u7DB2\u8DEF\u624B\u7E8C\u8CBB",
       confirmOrder: "\u78BA\u8A8D\u8A02\u55AE",
+      mfaEnrollmentTitle: "\u8ACB\u555F\u7528\u7C21\u8A0A\u6216 Authy \u96D9\u91CD\u9A57\u8B49",
+      mfaEnrollmentMessage: "\u8ACB\u78BA\u8A8D\u60A8\u5DF2\u5728 Coinbase \u5E33\u6236\u4E2D\u555F\u7528\u7C21\u8A0A\u6216 Authy \u96D9\u91CD\u9A57\u8B49\u3002\u555F\u7528\u5F8C\u8ACB\u6309\u7E7C\u7E8C\u3002",
+      mfaEnrollmentSettingsLink: "\u958B\u555F Coinbase \u5B89\u5168\u8A2D\u5B9A",
       termsNoticePrefix: "\u9EDE\u64CA\u300C\u78BA\u8A8D\u8A02\u55AE\u300D\u5373\u8868\u793A\u60A8\u540C\u610F\u6211\u5011\u7684",
       termsNoticeLink: "\u689D\u6B3E",
       termsNoticeSuffix: "\u3002"
@@ -14976,7 +14998,12 @@ var zh_TW_default = {
       prefix: "\u7E7C\u7E8C\u5373\u8868\u793A\u60A8\u540C\u610F Coinbase \u7684",
       separator: "\u3001",
       lastSeparator: "\u548C",
-      suffix: "\u3002Coinbase \u662F\u672C\u6CD5\u5E63\u514C\u52A0\u5BC6\u8CA8\u5E63\u5132\u503C\u670D\u52D9\u7684\u53D7\u76E3\u7BA1\u63D0\u4F9B\u65B9\u3002"
+      suffix: "\u3002",
+      agreements: {
+        guest_checkout_terms: "\u670D\u52D9\u689D\u6B3E",
+        user_agreement: "\u4F7F\u7528\u8005\u5354\u8B70",
+        privacy_policy: "\u96B1\u79C1\u6B0A\u653F\u7B56"
+      }
     },
     errors: {
       rateLimited: "\u5617\u8A66\u6B21\u6578\u904E\u591A\u3002\u8ACB\u7A0D\u7B49\u5E7E\u5206\u9418\u5F8C\u91CD\u8A66\u3002",
@@ -15892,6 +15919,13 @@ function useAnalytics() {
   );
   return { track, startSession, endSession, getSessionId, setUserId, subscribe };
 }
+function useStampInternalUserId({ internalUserId }) {
+  const { setUserId } = useAnalytics();
+  useEffect32(() => {
+    if (!internalUserId) return;
+    setUserId(internalUserId);
+  }, [internalUserId, setUserId]);
+}
 function useDepositAddress(params) {
   const {
     userId,
@@ -15904,7 +15938,6 @@ function useDepositAddress(params) {
     contractCalls,
     enabled = true
   } = params;
-  const { setUserId } = useAnalytics();
   const query = useQuery({
     queryKey: [
       "unifold",
@@ -15947,11 +15980,7 @@ function useDepositAddress(params) {
     retryDelay: (attempt) => Math.min(1e3 * 2 ** attempt, 1e4)
     // 1s, 2s, 4s (max 10s)
   });
-  useEffect32(() => {
-    if (query.data?.user_id) {
-      setUserId(query.data.user_id);
-    }
-  }, [query.data?.user_id, setUserId]);
+  useStampInternalUserId({ internalUserId: query.data?.user_id });
   return query;
 }
 function useDebounce(value, delay) {
@@ -18174,7 +18203,11 @@ function BuyWithCard({
       method: "card",
       flow_type: "deposit",
       provider: selectedProvider.service_provider,
-      amount_usd: amount
+      amount_usd: amount,
+      // The execution only exists once the provider's payout lands on this
+      // wallet, and it carries this id — so it's the join key for a purchase
+      // that starts here and never reaches flow_completed.
+      deposit_wallet_id: depositWalletId
     });
     onEvent?.({
       id: generatePrefixedKSUID2("sevt"),
@@ -19611,6 +19644,8 @@ var BuyWithWalletPay = React82.forwardRef(
     const [limitUpgradeError, setLimitUpgradeError] = useState152(null);
     const [upgradeSubmitting, setUpgradeSubmitting] = useState152(false);
     const upgradeFlowAbortRef = useRef62(null);
+    const applyLimitRoutingRef = useRef62(() => {
+    });
     const [amount, setAmount] = useState152(amountUsd ?? "");
     const [preparedOrder, setPreparedOrder] = useState152(null);
     const sessionAbortRef = useRef62(null);
@@ -19745,6 +19780,14 @@ var BuyWithWalletPay = React82.forwardRef(
       },
       [email, normalizedPhone, userId]
     );
+    const { action: initialAction, refetchWalletPayLimits } = useWalletPayInitialScreen({
+      userId,
+      publishableKey,
+      normalizedPhone,
+      userEmail,
+      sessionPhoneVerified: verificationSession?.phone?.status === "verified",
+      isWaiting: defaultTokenLoading || legalAgreementsLoading || userIpInfoLoading
+    });
     const createSessionAndSendOtp = useCallback42(async () => {
       setView("submitting_session");
       setErrorMessage("");
@@ -19754,7 +19797,12 @@ var BuyWithWalletPay = React82.forwardRef(
             email,
             phone: normalizedPhone,
             terms_accepted: true,
-            email_already_verified: true
+            // TODO: when the API honors `false`, this will trigger email OTP.
+            // Today `false` still skips email (we don't verify it) and JWT ev
+            // is null. Don't send `true` — that was a fake attest.
+            email_already_verified: false
+            // Coinbase stays Redis-only + JWT until bank-transfer identity
+            // is live. Do not persist from this path yet.
           },
           publishableKey
         );
@@ -19764,6 +19812,34 @@ var BuyWithWalletPay = React82.forwardRef(
         }
         setClientSecret(session.client_secret);
         storeWalletPaySession();
+        if (session.status === "verified") {
+          const tokenRes = await exchangeOnrampVerificationToken(
+            session.id,
+            session.client_secret,
+            publishableKey
+          );
+          setOnrampToken(tokenRes);
+          storeWalletPaySession({
+            emailVerifiedAt: session.email.verified_at,
+            phoneVerifiedAt: session.phone.verified_at,
+            onrampToken: tokenRes.token,
+            onrampTokenExpiresAtMs: Date.now() + tokenRes.expires_in * 1e3
+          });
+          if (amountUsd) setAmount(amountUsd);
+          try {
+            const result = await refetchWalletPayLimits();
+            if (result.data) {
+              const nextView = getViewForLimitStatus(result.data);
+              if (nextView) {
+                applyLimitRoutingRef.current(nextView, result.data.upgrade_status);
+                return;
+              }
+            }
+          } catch {
+          }
+          setView("amount");
+          return;
+        }
         await sendOnrampVerificationOtp(session.id, "phone", session.client_secret, publishableKey);
         setResendCooldown(30);
         setView("phone_otp");
@@ -19772,19 +19848,19 @@ var BuyWithWalletPay = React82.forwardRef(
         setErrorMessage(prettifyVerificationError(raw));
         setView("phone_input");
       }
-    }, [email, normalizedPhone, publishableKey, storeWalletPaySession]);
+    }, [
+      email,
+      normalizedPhone,
+      publishableKey,
+      storeWalletPaySession,
+      userId,
+      amountUsd,
+      refetchWalletPayLimits
+    ]);
     const clearUpgradeFields = useCallback42(() => {
       setSsnLast4("");
       setDobInput("");
     }, []);
-    const { action: initialAction, refetchWalletPayLimits } = useWalletPayInitialScreen({
-      userId,
-      publishableKey,
-      normalizedPhone,
-      userEmail,
-      sessionPhoneVerified: verificationSession?.phone?.status === "verified",
-      isWaiting: defaultTokenLoading || legalAgreementsLoading || userIpInfoLoading
-    });
     const pollLimitUpgradeStatus = useCallback42(
       async (signal) => {
         const POLL_INTERVAL_MS5 = 1500;
@@ -19895,6 +19971,7 @@ var BuyWithWalletPay = React82.forwardRef(
       },
       [startUpgradePolling]
     );
+    applyLimitRoutingRef.current = applyLimitRouting;
     const hasInitializedRef = useRef62(false);
     useEffect122(() => {
       if (hasInitializedRef.current) return;
@@ -20124,7 +20201,10 @@ var BuyWithWalletPay = React82.forwardRef(
           track("flow_started", {
             method,
             flow_type: "deposit",
-            amount_usd: walletPayAmountUsd
+            amount_usd: walletPayAmountUsd,
+            // No execution yet — one appears when the payout lands on this
+            // wallet, carrying the same id.
+            deposit_wallet_id: depositWalletId
           });
           onEvent?.({
             id: generatePrefixedKSUID32("sevt"),
@@ -20174,6 +20254,7 @@ var BuyWithWalletPay = React82.forwardRef(
         defaultTokenLoading,
         defaultTokenError,
         depositWallet?.address,
+        depositWalletId,
         userEmail,
         publishableKey,
         onEvent,
@@ -21148,7 +21229,7 @@ var FALLBACK_AGREEMENTS = [
   {
     key: "guest_checkout_terms",
     name: "Guest Checkout Terms of Service",
-    url: "https://www.coinbase.com/legal/cb-pay/onramp-guest-checkout-terms"
+    url: "https://www.coinbase.com/legal/guest-checkout/us"
   },
   {
     key: "user_agreement",
@@ -21168,22 +21249,24 @@ function LegalDisclaimer({ legalAgreements, loading }) {
     return /* @__PURE__ */ jsxs14(
       "div",
       {
-        className: "uf-mt-3 uf-mb-3 uf-px-1 uf-space-y-1.5 uf-animate-pulse",
+        className: "uf-mt-3 uf-mb-3 uf-px-1 uf-space-y-1.5 uf-animate-pulse uf-opacity-50",
         "aria-hidden": true,
         "aria-busy": "true",
         children: [
-          /* @__PURE__ */ jsx18("div", { className: "uf-h-2.5 uf-rounded uf-w-full", style: { backgroundColor: colors2.card } }),
-          /* @__PURE__ */ jsx18("div", { className: "uf-h-2.5 uf-rounded uf-w-11/12", style: { backgroundColor: colors2.card } }),
-          /* @__PURE__ */ jsx18("div", { className: "uf-h-2.5 uf-rounded uf-w-3/4", style: { backgroundColor: colors2.card } })
+          /* @__PURE__ */ jsx18("div", { className: "uf-h-2 uf-rounded uf-w-full", style: { backgroundColor: colors2.card } }),
+          /* @__PURE__ */ jsx18("div", { className: "uf-h-2 uf-rounded uf-w-11/12", style: { backgroundColor: colors2.card } }),
+          /* @__PURE__ */ jsx18("div", { className: "uf-h-2 uf-rounded uf-w-3/4", style: { backgroundColor: colors2.card } })
         ]
       }
     );
   }
   const agreements = legalAgreements?.agreements ?? FALLBACK_AGREEMENTS;
+  const shortLabels = t.agreements;
+  const lastSeparator = t.lastSeparator.replace(/\s+$/, "\xA0");
   return /* @__PURE__ */ jsxs14(
     "p",
     {
-      className: "uf-text-[11px] uf-leading-relaxed uf-mt-3 uf-mb-3 uf-px-1",
+      className: "uf-text-[10px] uf-leading-relaxed uf-mt-3 uf-mb-3 uf-opacity-60 uf-text-center",
       style: { color: colors2.foregroundMuted, fontFamily: fonts.regular },
       children: [
         t.prefix,
@@ -21194,12 +21277,12 @@ function LegalDisclaimer({ legalAgreements, loading }) {
               href: a.url,
               target: "_blank",
               rel: "noopener noreferrer",
-              className: "uf-underline",
-              style: { color: colors2.foreground },
-              children: a.name
+              className: "uf-no-underline",
+              style: { color: "inherit", textDecoration: "none", whiteSpace: "nowrap" },
+              children: shortLabels[a.key] ?? a.name
             }
           ),
-          idx < arr.length - 2 ? t.separator : idx === arr.length - 2 ? t.lastSeparator : ""
+          idx < arr.length - 2 ? t.separator : idx === arr.length - 2 ? lastSeparator : ""
         ] }, a.key)),
         t.suffix
       ]
@@ -21842,6 +21925,7 @@ function PayWithCashApp({
   destinationChainType,
   destinationChainId,
   destinationTokenAddress,
+  contractCalls,
   cashAppIconUrl,
   view: controlledView,
   onViewChange,
@@ -21934,7 +22018,8 @@ function PayWithCashApp({
           destination_token_address: destinationTokenAddress,
           recipient_address: recipientAddress,
           source_amount: amount,
-          external_id: externalId
+          external_id: externalId,
+          ...contractCalls?.length ? { contract_calls: contractCalls } : {}
         },
         publishableKey
       );
@@ -21947,7 +22032,10 @@ function PayWithCashApp({
       track("flow_started", {
         method: "cashapp",
         flow_type: "deposit",
-        amount_usd: amount
+        amount_usd: amount,
+        // No execution yet — one appears when the payout lands on this
+        // wallet, carrying the same id.
+        deposit_wallet_id: depositWalletId
       });
       onEvent?.({
         id: generatePrefixedKSUID5("sevt"),
@@ -21972,6 +22060,8 @@ function PayWithCashApp({
     destinationChainType,
     destinationChainId,
     destinationTokenAddress,
+    contractCalls,
+    depositWalletId,
     onEvent,
     onDepositError,
     track,
@@ -22573,7 +22663,10 @@ function BankTransfer({
       method: "bank_transfer",
       flow_type: "deposit",
       provider: request.service_provider,
-      amount_usd: request.source_amount
+      amount_usd: request.source_amount,
+      // No execution yet — one appears when the provider's payout lands on
+      // this wallet, carrying the same id.
+      deposit_wallet_id: pollingWalletId
     });
     onEvent?.({
       id: generatePrefixedKSUID6("sevt"),
@@ -28654,7 +28747,11 @@ function PayWithStripeLink({
       if (checkoutResult.successful) {
         handledTerminalSessionRef.current = null;
         executionReconciledSessionRef.current = null;
-        track("flow_started", { method: "stripe_link", flow_type: "deposit" });
+        track("flow_started", {
+          method: "stripe_link",
+          flow_type: "deposit",
+          deposit_wallet_id: depositWalletId
+        });
         setConfirmedSessionId(activeSessionId);
         setSessionStatus(STRIPE_SESSION_STATUS.FULFILLMENT_PROCESSING);
         if (selectedTokenSingleUseRef.current) clearSelectedPaymentToken();
@@ -30151,7 +30248,14 @@ function PayWithStripeLink({
               ]
             }
           ),
-          /* @__PURE__ */ jsx50("div", { ref: authMountRef, className: "uf-w-full uf-min-h-[200px]" })
+          /* @__PURE__ */ jsx50(
+            "div",
+            {
+              ref: authMountRef,
+              className: "uf-w-full uf-min-h-[200px]",
+              style: { colorScheme: "only light" }
+            }
+          )
         ]
       }
     );
@@ -31414,6 +31518,9 @@ function CoinbaseConnect({
       flow_type: "deposit",
       method: "exchange_connect",
       provider: IntegrationProvider.COINBASE,
+      // No execution yet — one appears when the exchange's transfer lands on
+      // this wallet, carrying the same id.
+      deposit_wallet_id: transferDepositWalletId,
       amount_usd: sendAmount || void 0,
       currency: selectedAsset?.currency.toLowerCase().replace(/[^a-z0-9]+/g, "_"),
       chain: sourceChain?.chain_id,
@@ -31421,6 +31528,34 @@ function CoinbaseConnect({
       network: sourceChain?.network
     });
   };
+  const applyConfirmResult = (result) => {
+    if (result.status === "mfa_required") {
+      track("verification_started", {
+        flow_type: "deposit",
+        method: "exchange_connect",
+        provider: IntegrationProvider.COINBASE,
+        verification_type: "mfa",
+        verification_status: result.status
+      });
+      transitionTo("mfa");
+      setMfaCode("");
+      setMfaError(false);
+    } else if (result.status === "mfa_enrollment_required") {
+      transitionTo("mfa_enrollment");
+    } else if (result.status === "completed") {
+      trackTransferStarted();
+      setConfirmResult(result);
+      transitionTo("success");
+      onTransferSuccess?.(result);
+    } else {
+      setErrorMessage(result.message || t.errors.transferFailed);
+      transitionTo("error");
+      onTransferError?.({
+        message: result.message || t.errors.transferFailed,
+        code: result.status
+      });
+    }
+  };
   const handleConfirmTransfer = async () => {
     if (!transferIntent || !accessToken) return;
     setIsLoading(true);
@@ -31455,30 +31590,7 @@ function CoinbaseConnect({
         });
         throw err;
       });
-      if (result.status === "mfa_required") {
-        track("verification_started", {
-          flow_type: "deposit",
-          method: "exchange_connect",
-          provider: IntegrationProvider.COINBASE,
-          verification_type: "mfa",
-          verification_status: result.status
-        });
-        transitionTo("mfa");
-        setMfaCode("");
-        setMfaError(false);
-      } else if (result.status === "completed") {
-        trackTransferStarted();
-        setConfirmResult(result);
-        transitionTo("success");
-        onTransferSuccess?.(result);
-      } else {
-        setErrorMessage(result.message || t.errors.transferFailed);
-        transitionTo("error");
-        onTransferError?.({
-          message: result.message || t.errors.transferFailed,
-          code: result.status
-        });
-      }
+      applyConfirmResult(result);
     } catch (err) {
       const message = err instanceof Error ? err.message : t.errors.transferFailed;
       setErrorMessage(message);
@@ -31635,6 +31747,9 @@ function CoinbaseConnect({
         setShowTransferDetails(false);
         transitionTo("enter_amount");
         break;
+      case "mfa_enrollment":
+        transitionTo("transfer_confirm");
+        break;
       case "mfa":
         transitionTo("transfer_confirm");
         break;
@@ -33191,6 +33306,55 @@ function CoinbaseConnect({
       ] })
     ] });
   }
+  if (view === "mfa_enrollment") {
+    return /* @__PURE__ */ jsxs46(Fragment92, { children: [
+      /* @__PURE__ */ jsx51(DepositHeader, { title: t.title, showBack: true, onBack: handleBack, onClose }),
+      /* @__PURE__ */ jsxs46(
+        "div",
+        {
+          className: "uf-flex uf-flex-col uf-items-center uf-px-4 uf-pb-4",
+          style: viewTransitionStyle,
+          children: [
+            /* @__PURE__ */ jsx51(
+              DepositErrorState,
+              {
+                title: t.transfer.mfaEnrollmentTitle,
+                message: t.transfer.mfaEnrollmentMessage
+              }
+            ),
+            /* @__PURE__ */ jsxs46(
+              "a",
+              {
+                href: "https://www.coinbase.com/settings/security",
+                target: "_blank",
+                rel: "noopener noreferrer",
+                className: "uf-text-sm uf-underline uf-mb-8 uf-inline-flex uf-items-center uf-gap-1",
+                style: { color: colors2.primary, fontFamily: fonts.medium },
+                children: [
+                  t.transfer.mfaEnrollmentSettingsLink,
+                  /* @__PURE__ */ jsx51(ExternalLink, { className: "uf-w-3.5 uf-h-3.5" })
+                ]
+              }
+            ),
+            /* @__PURE__ */ jsx51(
+              "button",
+              {
+                onClick: handleConfirmTransfer,
+                disabled: isLoading,
+                className: "uf-w-full uf-rounded-xl uf-py-3.5 uf-text-sm uf-font-medium uf-transition-all hover:uf-opacity-90 disabled:uf-opacity-50 uf-flex uf-items-center uf-justify-center uf-gap-2",
+                style: {
+                  backgroundColor: colors2.primary,
+                  color: "#fff",
+                  fontFamily: fonts.medium
+                },
+                children: isLoading ? /* @__PURE__ */ jsx51(LoaderCircle, { className: "uf-w-4 uf-h-4 uf-animate-spin" }) : t.continue
+              }
+            )
+          ]
+        }
+      )
+    ] });
+  }
   if (view === "mfa") {
     return /* @__PURE__ */ jsxs46(Fragment92, { children: [
       /* @__PURE__ */ jsx51(DepositHeader, { title: t.title, showBack: true, onBack: handleBack, onClose }),
@@ -39118,7 +39282,11 @@ function WalletConnect({
         chain: String(token.chain_id),
         network: token.network,
         token: token.symbol ?? token.token_address,
-        currency: token.currency
+        currency: token.currency,
+        // No execution exists yet — it's created when this send lands on the
+        // wallet. The wallet id is what that execution will carry, so it's
+        // how a send that never completes is matched to what followed.
+        deposit_wallet_id: activeDepositWallet?.id
       });
       setReceivedUsdAtSubmission(checkoutReceivedUsd ?? "0");
       setHasSignedTransaction(true);
@@ -39705,7 +39873,7 @@ function DepositModal({
   const applePaySubTitle = applePaySubTitleProp ?? t.applePayMenu.subtitle;
   const googlePayTitle = googlePayTitleProp ?? t.googlePayMenu.title;
   const googlePaySubTitle = googlePaySubTitleProp ?? t.googlePayMenu.subtitle;
-  const { track, startSession, endSession, getSessionId, subscribe } = useAnalytics();
+  const { track, startSession, endSession, getSessionId, setUserId, subscribe } = useAnalytics();
   const normalizedPrefilledAmountUsd = useMemo17(
     () => normalizePrefilledUsdAmount(prefilledAmountUsd),
     [prefilledAmountUsd]
@@ -39713,6 +39881,7 @@ function DepositModal({
   const analyticsMethod = (method) => method === "transfer" ? "transfer_crypto" : method;
   const journeyActiveRef = useRef16(false);
   const journeySessionIdRef = useRef16(void 0);
+  const journeyExternalUserIdRef = useRef16(void 0);
   const externalUserId = userId || void 0;
   const emitEvent = useCallback14(
     (event) => onEvent?.({ ...event, externalUserId }),
@@ -39740,6 +39909,9 @@ function DepositModal({
         method: analyticsMethod(method),
         flow_type: "deposit",
         amount_usd: execution?.destinationAmountUsd ?? execution?.sourceAmountUsd,
+        // The one high-cardinality field we do send: the join key from a
+        // funnel session back to the execution row it produced.
+        execution_id: data.executionId ?? execution?.id,
         // Flat, low-cardinality execution dimensions for PostHog breakdowns
         // (precise/opaque fields like base units, addresses, tx hashes live in
         // the onEvent DirectExecution instead).
@@ -39767,6 +39939,7 @@ function DepositModal({
         method: analyticsMethod(method),
         flow_type: "deposit",
         error_code: error.code,
+        execution_id: execution?.id,
         failure_reason: execution?.failureReason ?? void 0,
         status: execution?.status,
         source_chain_type: execution?.sourceChainType,
@@ -40195,8 +40368,10 @@ function DepositModal({
   const beginJourney = useCallback14(() => {
     journeySessionIdRef.current = startSession();
     journeyActiveRef.current = true;
+    journeyExternalUserIdRef.current = userId;
+    setUserId(null);
     track("widget_opened", { flow_type: "deposit" });
-  }, [startSession, track]);
+  }, [startSession, track, setUserId, userId]);
   const handleClose = () => {
     finalizeJourney();
     onOpenChange(false);
@@ -40221,6 +40396,11 @@ function DepositModal({
     }
     beginJourney();
   }, [open]);
+  useLayoutEffect22(() => {
+    if (!open || journeyExternalUserIdRef.current === userId) return;
+    journeyExternalUserIdRef.current = userId;
+    setUserId(null);
+  }, [open, userId, setUserId]);
   useLayoutEffect22(() => {
     if (!open) return;
     if (resetViewTimeoutRef.current) {
@@ -41132,6 +41312,7 @@ function DepositModal({
                         destinationChainType,
                         destinationChainId,
                         destinationTokenAddress,
+                        contractCalls,
                         cashAppIconUrl: projectConfig?.asset_cdn_url ? `${projectConfig.asset_cdn_url}/api/public/icons/onramps/svg/cashapp.svg` : void 0,
                         view: cashAppView,
                         onViewChange: setCashAppView,
@@ -41467,6 +41648,9 @@ function CheckoutModal({
         flowCompletedRef.current = true;
         track("flow_completed", {
           flow_type: "checkout",
+          // Checkout has no direct execution; the intent is what a funnel
+          // session joins back to.
+          payment_intent_id: data.paymentIntentId,
           ...method ? { method: method === "transfer" ? "transfer_crypto" : method } : {}
         });
       }
@@ -41687,7 +41871,7 @@ function CheckoutModal({
     journeySessionIdRef.current = startSession();
     journeyActiveRef.current = true;
     flowCompletedRef.current = false;
-    setUserId(null);
+    setUserId(paymentIntentUserId ?? null);
     track("widget_opened", { flow_type: "checkout" });
     if (resetViewTimeoutRef.current) {
       clearTimeout(resetViewTimeoutRef.current);
@@ -42272,7 +42456,7 @@ function useAddressBalance(params) {
 }
 function useExecutions(userId, publishableKey, options) {
   const actionType = options?.actionType ?? ActionType4.Deposit;
-  return useQuery24({
+  const query = useQuery24({
     queryKey: ["unifold", "executions", actionType, userId, publishableKey],
     queryFn: () => queryExecutions4(userId, publishableKey, actionType),
     enabled: (options?.enabled ?? true) && !!userId,
@@ -42281,6 +42465,8 @@ function useExecutions(userId, publishableKey, options) {
     gcTime: 1e3 * 60 * 5,
     refetchOnWindowFocus: false
   });
+  useStampInternalUserId({ internalUserId: query.data?.data[0]?.user_id });
+  return query;
 }
 var POLL_INTERVAL_MS4 = 2500;
 var POLL_ENDPOINT_INTERVAL_MS2 = 5e3;
@@ -42655,7 +42841,6 @@ function useGetDepositAddress(params) {
     actionType,
     enabled = true
   } = params;
-  const { setUserId } = useAnalytics();
   const canFire = !!userId && !!recipientAddress && !!destinationChainType && !!destinationChainId && !!destinationTokenAddress;
   const query = useQuery26({
     queryKey: [
@@ -42687,11 +42872,7 @@ function useGetDepositAddress(params) {
     refetchOnWindowFocus: false,
     retry: 1
   });
-  useEffect45(() => {
-    if (query.data?.user_id) {
-      setUserId(query.data.user_id);
-    }
-  }, [query.data?.user_id, setUserId]);
+  useStampInternalUserId({ internalUserId: query.data?.user_id });
   return query;
 }
 var isHypercore = (chainId) => chainId === HYPERCORE_CHAIN_ID;
@@ -42826,14 +43007,14 @@ function WithdrawForm({
   const [detailsExpanded, setDetailsExpanded] = useState47(false);
   const [glossaryOpen, setGlossaryOpen] = useState47(false);
   const [isMaxed, setIsMaxed] = useState47(false);
-  useEffect46(() => {
+  useEffect45(() => {
     setRecipientAddress(recipientAddressProp || "");
     setAmount("");
     setInputUnit("fiat");
     setSubmitError(null);
     setIsMaxed(false);
   }, [recipientAddressProp]);
-  useEffect46(() => {
+  useEffect45(() => {
     setIsMaxed(false);
   }, [balanceData?.balanceBaseUnit]);
   const trimmedAddress = recipientAddress.trim();
@@ -43643,7 +43824,7 @@ function WithdrawConfirmingView({
   const t = strings.withdrawModal.details;
   const [showButton, setShowButton] = useState48(false);
   const latestExecution = executions.length > 0 ? executions[executions.length - 1] : null;
-  useEffect47(() => {
+  useEffect46(() => {
     if (latestExecution) return;
     const timer = setTimeout(() => setShowButton(true), SHOW_BUTTON_DELAY_MS);
     return () => clearTimeout(timer);
@@ -43795,7 +43976,7 @@ function WithdrawModal({
   );
   const onEventRef = useRef20(emitEvent);
   onEventRef.current = emitEvent;
-  useEffect48(
+  useEffect47(
     () => subscribe((event) => {
       if (event.properties?.flow_type !== "withdraw") return;
       const selection = selectionPayload(event);
@@ -43812,12 +43993,16 @@ function WithdrawModal({
   );
   const journeyActiveRef = useRef20(false);
   const journeySessionIdRef = useRef20(void 0);
+  const journeyExternalUserIdRef = useRef20(void 0);
   const onWithdrawSuccessFor = useCallback17(
     (data) => {
       const execution = data.execution?.data.object;
       track("flow_completed", {
         flow_type: "withdraw",
         amount_usd: execution?.destinationAmountUsd ?? execution?.sourceAmountUsd,
+        // The one high-cardinality field we do send: the join key from a
+        // funnel session back to the execution row it produced.
+        execution_id: data.executionId ?? execution?.id,
         // Flat, low-cardinality execution dimensions for PostHog breakdowns.
         status: execution?.status,
         source_chain_type: execution?.sourceChainType,
@@ -43838,6 +44023,7 @@ function WithdrawModal({
       track("flow_failed", {
         flow_type: "withdraw",
         error_code: error.code,
+        execution_id: execution?.id,
         failure_reason: execution?.failureReason ?? void 0,
         status: execution?.status,
         source_chain_type: execution?.sourceChainType,
@@ -43859,7 +44045,7 @@ function WithdrawModal({
   const [resolvedTheme, setResolvedTheme] = useState49(
     theme === "auto" ? "dark" : theme
   );
-  useEffect48(() => {
+  useEffect47(() => {
     if (theme === "auto") {
       const mq = window.matchMedia("(prefers-color-scheme: dark)");
       setResolvedTheme(mq.matches ? "dark" : "light");
@@ -43911,6 +44097,7 @@ function WithdrawModal({
   ) ?? null : null;
   const [view, setView] = useState49("form");
   const [withdrawDepositWalletId, setWithdrawDepositWalletId] = useState49();
+  const withdrawDepositWalletIdRef = useRef20(void 0);
   const [selectedExecution, setSelectedExecution] = useState49(null);
   const [submittedTxInfo, setSubmittedTxInfo] = useState49(null);
   const { executions: realtimeExecutions } = useWithdrawPolling({
@@ -43948,6 +44135,7 @@ function WithdrawModal({
       if (!depositWallet) {
         throw new Error(`No deposit wallet available for ${sourceChainType}`);
       }
+      withdrawDepositWalletIdRef.current = depositWallet.id;
       setWithdrawDepositWalletId(depositWallet.id);
       return depositWallet;
     },
@@ -43967,7 +44155,12 @@ function WithdrawModal({
         currency: tokenData?.currency,
         amount: txInfo.amount,
         amount_base_unit: txInfo.amountBaseUnit,
-        ...txInfo.amountUsd ? { amount_usd: txInfo.amountUsd } : {}
+        ...txInfo.amountUsd ? { amount_usd: txInfo.amountUsd } : {},
+        // The execution doesn't exist yet — it's created when the user's send
+        // lands on the withdraw deposit wallet, and carries this id. So a
+        // withdrawal confirmed but never completed still joins to whatever
+        // did (or didn't) follow on that wallet.
+        deposit_wallet_id: withdrawDepositWalletIdRef.current
       });
       emitEvent({
         id: generatePrefixedKSUID12("sevt"),
@@ -44001,8 +44194,10 @@ function WithdrawModal({
   const beginJourney = useCallback17(() => {
     journeySessionIdRef.current = startSession();
     journeyActiveRef.current = true;
+    journeyExternalUserIdRef.current = externalUserId;
+    setUserId(null);
     track("widget_opened", { flow_type: "withdraw" });
-  }, [startSession, track]);
+  }, [startSession, track, setUserId, externalUserId]);
   const handleClose = useCallback17(() => {
     finalizeJourney();
     onOpenChange(false);
@@ -44011,6 +44206,7 @@ function WithdrawModal({
       setView("form");
       setSelectedExecution(null);
       setSubmittedTxInfo(null);
+      withdrawDepositWalletIdRef.current = void 0;
       setWithdrawDepositWalletId(void 0);
       resetViewTimeoutRef.current = null;
     }, 200);
@@ -44028,9 +44224,15 @@ function WithdrawModal({
     setView("form");
     setSelectedExecution(null);
     setSubmittedTxInfo(null);
+    withdrawDepositWalletIdRef.current = void 0;
     setWithdrawDepositWalletId(void 0);
   }, [open]);
-  useEffect48(
+  useLayoutEffect42(() => {
+    if (!open || journeyExternalUserIdRef.current === externalUserId) return;
+    journeyExternalUserIdRef.current = externalUserId;
+    setUserId(null);
+  }, [open, externalUserId, setUserId]);
+  useEffect47(
     () => () => {
       if (journeyActiveRef.current) {
         journeyActiveRef.current = false;
@@ -44039,12 +44241,12 @@ function WithdrawModal({
     },
     [endSession, getSessionId]
   );
-  useEffect48(() => {
+  useEffect47(() => {
     if (!open) return;
     const screen = view === "detail" ? "tracker_detail" : view;
     track("screen_viewed", { flow_type: "withdraw", screen });
   }, [open, view, track]);
-  useEffect48(
+  useEffect47(
     () => () => {
       if (resetViewTimeoutRef.current) clearTimeout(resetViewTimeoutRef.current);
     },