@unifold/ui-web 0.1.76 → 0.1.78

package/dist/index.mjs

@@ -39598,7 +39598,7 @@ var require_modern2 = __commonJS({
 });
 
 // src/unifold.tsx
-var import_react49 = __toESM(require_react());
+var import_react48 = __toESM(require_react());
 var import_client = __toESM(require_client());
 
 // ../connect-react/dist/index.mjs
@@ -39756,7 +39756,7 @@ function generateKSUID() {
 function generatePrefixedKSUID(prefix) {
   return `${prefix}_${generateKSUID()}`;
 }
-var SDK_VERSION = true ? "0.1.76" : "0.0.0-dev";
+var SDK_VERSION = true ? "0.1.78" : "0.0.0-dev";
 var CLIENT_VERSION_HEADER = "x-unifold-client-version";
 var CLIENT_USER_AGENT_HEADER = "x-unifold-client-user-agent";
 function detectRuntime() {
@@ -41582,8 +41582,8 @@ var OnrampSessionEventType = ((OnrampSessionEventType2) => {
 })(OnrampSessionEventType || {});
 
 // ../connect-react/dist/index.mjs
-var import_react8 = __toESM(require_react(), 1);
 var import_react_query3 = __toESM(require_modern2(), 1);
+var import_react8 = __toESM(require_react(), 1);
 var React52 = __toESM(require_react(), 1);
 var import_jsx_runtime13 = __toESM(require_jsx_runtime(), 1);
 var import_react9 = __toESM(require_react(), 1);
@@ -41769,14 +41769,13 @@ var import_jsx_runtime90 = __toESM(require_jsx_runtime(), 1);
 var import_react44 = __toESM(require_react(), 1);
 var import_react_query26 = __toESM(require_modern2(), 1);
 var import_react45 = __toESM(require_react(), 1);
-var import_react46 = __toESM(require_react(), 1);
 var import_react_query27 = __toESM(require_modern2(), 1);
 var import_jsx_runtime91 = __toESM(require_jsx_runtime(), 1);
 var import_jsx_runtime92 = __toESM(require_jsx_runtime(), 1);
-var import_react47 = __toESM(require_react(), 1);
+var import_react46 = __toESM(require_react(), 1);
 var import_jsx_runtime93 = __toESM(require_jsx_runtime(), 1);
 var import_jsx_runtime94 = __toESM(require_jsx_runtime(), 1);
-var import_react48 = __toESM(require_react(), 1);
+var import_react47 = __toESM(require_react(), 1);
 var import_jsx_runtime95 = __toESM(require_jsx_runtime(), 1);
 var import_jsx_runtime96 = __toESM(require_jsx_runtime(), 1);
 var __create2 = Object.create;
@@ -47901,7 +47900,7 @@ function generateKSUID2() {
 function generatePrefixedKSUID2(prefix) {
   return `${prefix}_${generateKSUID2()}`;
 }
-var PACKAGE_VERSION = "0.1.76";
+var PACKAGE_VERSION = "0.1.78";
 var LIBRARY_NAME = "@unifold/analytics";
 var DEFAULT_DEDUP_MS = 500;
 var SESSION_PREFIX = "asess";
@@ -47991,8 +47990,12 @@ var EventTracker = class {
   }
   /**
    * Associate subsequent events with an internal Unifold user.id
-   * (`user_<ksuid>`). Pass `null` to clear. Usually called once the
-   * deposit-addresses response returns the id.
+   * (`user_<ksuid>`). Pass `null` to clear.
+   *
+   * The tracker is shared across flows and outlives any one journey, so a
+   * journey stamps its own user at the start — with the id if it already
+   * knows one, `null` if it doesn't — rather than inheriting whatever the
+   * previous journey left here.
    */
   setUserId(userId) {
     this.userId = userId || void 0;
@@ -48003,8 +48006,8 @@ var EventTracker = class {
    * {@link EventTracker.endSession} carries it.
    *
    * Does not touch `userId`: the internal `user_<ksuid>` is attached separately
-   * via {@link EventTracker.setUserId} once the deposit-addresses response
-   * returns, and persists until the host replaces it.
+   * via {@link EventTracker.setUserId}, and persists until the host replaces
+   * it — which the SDK's modals do on every journey start.
    */
   startSession() {
     this.sessionId = generatePrefixedKSUID2(SESSION_PREFIX);
@@ -54349,6 +54352,9 @@ var en_default = {
       transactionBreakdown: "Transaction breakdown",
       networkFee: "Network fee",
       confirmOrder: "Confirm Order",
+      mfaEnrollmentTitle: "Enable SMS or Authy 2FA",
+      mfaEnrollmentMessage: "Please make sure you enable SMS or Authy 2FA in your Coinbase account. Press Continue after you enable it.",
+      mfaEnrollmentSettingsLink: "Open Coinbase security settings",
       termsNoticePrefix: "By clicking on Confirm Order, you agree to our ",
       termsNoticeLink: "terms",
       termsNoticeSuffix: "."
@@ -54479,7 +54485,12 @@ var en_default = {
       prefix: "By continuing, you agree to Coinbase's ",
       separator: ", ",
       lastSeparator: ", and ",
-      suffix: ". Coinbase is the regulated provider of this fiat-to-crypto onramp."
+      suffix: ".",
+      agreements: {
+        guest_checkout_terms: "Terms of Service",
+        user_agreement: "User Agreement",
+        privacy_policy: "Privacy Policy"
+      }
     },
     errors: {
       rateLimited: "Too many attempts. Please wait a few minutes and try again.",
@@ -55138,6 +55149,9 @@ var zh_default = {
       transactionBreakdown: "\u4EA4\u6613\u660E\u7EC6",
       networkFee: "\u7F51\u7EDC\u624B\u7EED\u8D39",
       confirmOrder: "\u786E\u8BA4\u8BA2\u5355",
+      mfaEnrollmentTitle: "\u8BF7\u542F\u7528\u77ED\u4FE1\u6216 Authy \u53CC\u91CD\u9A8C\u8BC1",
+      mfaEnrollmentMessage: "\u8BF7\u786E\u8BA4\u60A8\u5DF2\u5728 Coinbase \u8D26\u6237\u4E2D\u542F\u7528\u77ED\u4FE1\u6216 Authy \u53CC\u91CD\u9A8C\u8BC1\u3002\u542F\u7528\u540E\u8BF7\u6309\u7EE7\u7EED\u3002",
+      mfaEnrollmentSettingsLink: "\u6253\u5F00 Coinbase \u5B89\u5168\u8BBE\u7F6E",
       termsNoticePrefix: "\u70B9\u51FB\u201C\u786E\u8BA4\u8BA2\u5355\u201D\u5373\u8868\u793A\u60A8\u540C\u610F\u6211\u4EEC\u7684",
       termsNoticeLink: "\u6761\u6B3E",
       termsNoticeSuffix: "\u3002"
@@ -55268,7 +55282,12 @@ var zh_default = {
       prefix: "\u7EE7\u7EED\u5373\u8868\u793A\u60A8\u540C\u610F Coinbase \u7684",
       separator: "\u3001",
       lastSeparator: "\u548C",
-      suffix: "\u3002Coinbase \u662F\u672C\u6CD5\u5E01\u5151\u52A0\u5BC6\u8D27\u5E01\u5145\u503C\u670D\u52A1\u7684\u53D7\u76D1\u7BA1\u63D0\u4F9B\u65B9\u3002"
+      suffix: "\u3002",
+      agreements: {
+        guest_checkout_terms: "\u670D\u52A1\u6761\u6B3E",
+        user_agreement: "\u7528\u6237\u534F\u8BAE",
+        privacy_policy: "\u9690\u79C1\u653F\u7B56"
+      }
     },
     errors: {
       rateLimited: "\u5C1D\u8BD5\u6B21\u6570\u8FC7\u591A\u3002\u8BF7\u7A0D\u7B49\u51E0\u5206\u949F\u540E\u91CD\u8BD5\u3002",
@@ -55927,6 +55946,9 @@ var zh_TW_default = {
       transactionBreakdown: "\u4EA4\u6613\u660E\u7D30",
       networkFee: "\u7DB2\u8DEF\u624B\u7E8C\u8CBB",
       confirmOrder: "\u78BA\u8A8D\u8A02\u55AE",
+      mfaEnrollmentTitle: "\u8ACB\u555F\u7528\u7C21\u8A0A\u6216 Authy \u96D9\u91CD\u9A57\u8B49",
+      mfaEnrollmentMessage: "\u8ACB\u78BA\u8A8D\u60A8\u5DF2\u5728 Coinbase \u5E33\u6236\u4E2D\u555F\u7528\u7C21\u8A0A\u6216 Authy \u96D9\u91CD\u9A57\u8B49\u3002\u555F\u7528\u5F8C\u8ACB\u6309\u7E7C\u7E8C\u3002",
+      mfaEnrollmentSettingsLink: "\u958B\u555F Coinbase \u5B89\u5168\u8A2D\u5B9A",
       termsNoticePrefix: "\u9EDE\u64CA\u300C\u78BA\u8A8D\u8A02\u55AE\u300D\u5373\u8868\u793A\u60A8\u540C\u610F\u6211\u5011\u7684",
       termsNoticeLink: "\u689D\u6B3E",
       termsNoticeSuffix: "\u3002"
@@ -56057,7 +56079,12 @@ var zh_TW_default = {
       prefix: "\u7E7C\u7E8C\u5373\u8868\u793A\u60A8\u540C\u610F Coinbase \u7684",
       separator: "\u3001",
       lastSeparator: "\u548C",
-      suffix: "\u3002Coinbase \u662F\u672C\u6CD5\u5E63\u514C\u52A0\u5BC6\u8CA8\u5E63\u5132\u503C\u670D\u52D9\u7684\u53D7\u76E3\u7BA1\u63D0\u4F9B\u65B9\u3002"
+      suffix: "\u3002",
+      agreements: {
+        guest_checkout_terms: "\u670D\u52D9\u689D\u6B3E",
+        user_agreement: "\u4F7F\u7528\u8005\u5354\u8B70",
+        privacy_policy: "\u96B1\u79C1\u6B0A\u653F\u7B56"
+      }
     },
     errors: {
       rateLimited: "\u5617\u8A66\u6B21\u6578\u904E\u591A\u3002\u8ACB\u7A0D\u7B49\u5E7E\u5206\u9418\u5F8C\u91CD\u8A66\u3002",
@@ -56972,6 +56999,13 @@ function useAnalytics() {
   );
   return { track, startSession, endSession, getSessionId, setUserId, subscribe };
 }
+function useStampInternalUserId({ internalUserId }) {
+  const { setUserId } = useAnalytics();
+  (0, import_react8.useEffect)(() => {
+    if (!internalUserId) return;
+    setUserId(internalUserId);
+  }, [internalUserId, setUserId]);
+}
 function useDepositAddress(params) {
   const {
     userId,
@@ -56984,7 +57018,6 @@ function useDepositAddress(params) {
     contractCalls,
     enabled = true
   } = params;
-  const { setUserId } = useAnalytics();
   const query = (0, import_react_query3.useQuery)({
     queryKey: [
       "unifold",
@@ -57027,11 +57060,7 @@ function useDepositAddress(params) {
     retryDelay: (attempt) => Math.min(1e3 * 2 ** attempt, 1e4)
     // 1s, 2s, 4s (max 10s)
   });
-  (0, import_react8.useEffect)(() => {
-    if (query.data?.user_id) {
-      setUserId(query.data.user_id);
-    }
-  }, [query.data?.user_id, setUserId]);
+  useStampInternalUserId({ internalUserId: query.data?.user_id });
   return query;
 }
 function useDebounce(value, delay) {
@@ -59233,6 +59262,10 @@ function BuyWithCard({
       wallet_address: wallet.address,
       subdivision_code: userIpInfo?.subdivisionCode || void 0,
       external_id: externalId,
+      // The rail this quote was priced for, so the provider opens on it. Most
+      // are `card`, which is also the server default, but a local rail (e.g.
+      // `upi` in India) is the whole reason its provider was quoted.
+      payment_method_type: selectedProvider.payment_method_type,
       // Exactly one of source_amount / destination_amount (mutually exclusive):
       // destination mode starts the session by the fixed crypto amount (fees on
       // top); otherwise by the entered fiat amount.
@@ -59250,7 +59283,11 @@ function BuyWithCard({
       method: "card",
       flow_type: "deposit",
       provider: selectedProvider.service_provider,
-      amount_usd: amount
+      amount_usd: amount,
+      // The execution only exists once the provider's payout lands on this
+      // wallet, and it carries this id — so it's the join key for a purchase
+      // that starts here and never reaches flow_completed.
+      deposit_wallet_id: depositWalletId
     });
     onEvent?.({
       id: generatePrefixedKSUID("sevt"),
@@ -60687,6 +60724,8 @@ var BuyWithWalletPay = React82.forwardRef(
     const [limitUpgradeError, setLimitUpgradeError] = (0, import_react16.useState)(null);
     const [upgradeSubmitting, setUpgradeSubmitting] = (0, import_react16.useState)(false);
     const upgradeFlowAbortRef = (0, import_react16.useRef)(null);
+    const applyLimitRoutingRef = (0, import_react16.useRef)(() => {
+    });
     const [amount, setAmount] = (0, import_react16.useState)(amountUsd ?? "");
     const [preparedOrder, setPreparedOrder] = (0, import_react16.useState)(null);
     const sessionAbortRef = (0, import_react16.useRef)(null);
@@ -60821,6 +60860,14 @@ var BuyWithWalletPay = React82.forwardRef(
       },
       [email, normalizedPhone, userId]
     );
+    const { action: initialAction, refetchWalletPayLimits } = useWalletPayInitialScreen({
+      userId,
+      publishableKey,
+      normalizedPhone,
+      userEmail,
+      sessionPhoneVerified: verificationSession?.phone?.status === "verified",
+      isWaiting: defaultTokenLoading || legalAgreementsLoading || userIpInfoLoading
+    });
     const createSessionAndSendOtp = (0, import_react16.useCallback)(async () => {
       setView("submitting_session");
       setErrorMessage("");
@@ -60830,7 +60877,12 @@ var BuyWithWalletPay = React82.forwardRef(
             email,
             phone: normalizedPhone,
             terms_accepted: true,
-            email_already_verified: true
+            // TODO: when the API honors `false`, this will trigger email OTP.
+            // Today `false` still skips email (we don't verify it) and JWT ev
+            // is null. Don't send `true` — that was a fake attest.
+            email_already_verified: false
+            // Coinbase stays Redis-only + JWT until bank-transfer identity
+            // is live. Do not persist from this path yet.
           },
           publishableKey
         );
@@ -60840,6 +60892,34 @@ var BuyWithWalletPay = React82.forwardRef(
         }
         setClientSecret(session.client_secret);
         storeWalletPaySession();
+        if (session.status === "verified") {
+          const tokenRes = await exchangeOnrampVerificationToken(
+            session.id,
+            session.client_secret,
+            publishableKey
+          );
+          setOnrampToken(tokenRes);
+          storeWalletPaySession({
+            emailVerifiedAt: session.email.verified_at,
+            phoneVerifiedAt: session.phone.verified_at,
+            onrampToken: tokenRes.token,
+            onrampTokenExpiresAtMs: Date.now() + tokenRes.expires_in * 1e3
+          });
+          if (amountUsd) setAmount(amountUsd);
+          try {
+            const result = await refetchWalletPayLimits();
+            if (result.data) {
+              const nextView = getViewForLimitStatus(result.data);
+              if (nextView) {
+                applyLimitRoutingRef.current(nextView, result.data.upgrade_status);
+                return;
+              }
+            }
+          } catch {
+          }
+          setView("amount");
+          return;
+        }
         await sendOnrampVerificationOtp(session.id, "phone", session.client_secret, publishableKey);
         setResendCooldown(30);
         setView("phone_otp");
@@ -60848,19 +60928,19 @@ var BuyWithWalletPay = React82.forwardRef(
         setErrorMessage(prettifyVerificationError(raw));
         setView("phone_input");
       }
-    }, [email, normalizedPhone, publishableKey, storeWalletPaySession]);
+    }, [
+      email,
+      normalizedPhone,
+      publishableKey,
+      storeWalletPaySession,
+      userId,
+      amountUsd,
+      refetchWalletPayLimits
+    ]);
     const clearUpgradeFields = (0, import_react16.useCallback)(() => {
       setSsnLast4("");
       setDobInput("");
     }, []);
-    const { action: initialAction, refetchWalletPayLimits } = useWalletPayInitialScreen({
-      userId,
-      publishableKey,
-      normalizedPhone,
-      userEmail,
-      sessionPhoneVerified: verificationSession?.phone?.status === "verified",
-      isWaiting: defaultTokenLoading || legalAgreementsLoading || userIpInfoLoading
-    });
     const pollLimitUpgradeStatus = (0, import_react16.useCallback)(
       async (signal) => {
         const POLL_INTERVAL_MS5 = 1500;
@@ -60971,6 +61051,7 @@ var BuyWithWalletPay = React82.forwardRef(
       },
       [startUpgradePolling]
     );
+    applyLimitRoutingRef.current = applyLimitRouting;
     const hasInitializedRef = (0, import_react16.useRef)(false);
     (0, import_react16.useEffect)(() => {
       if (hasInitializedRef.current) return;
@@ -61200,7 +61281,10 @@ var BuyWithWalletPay = React82.forwardRef(
           track("flow_started", {
             method,
             flow_type: "deposit",
-            amount_usd: walletPayAmountUsd
+            amount_usd: walletPayAmountUsd,
+            // No execution yet — one appears when the payout lands on this
+            // wallet, carrying the same id.
+            deposit_wallet_id: depositWalletId
           });
           onEvent?.({
             id: generatePrefixedKSUID("sevt"),
@@ -61250,6 +61334,7 @@ var BuyWithWalletPay = React82.forwardRef(
         defaultTokenLoading,
         defaultTokenError,
         depositWallet?.address,
+        depositWalletId,
         userEmail,
         publishableKey,
         onEvent,
@@ -62224,7 +62309,7 @@ var FALLBACK_AGREEMENTS = [
   {
     key: "guest_checkout_terms",
     name: "Guest Checkout Terms of Service",
-    url: "https://www.coinbase.com/legal/cb-pay/onramp-guest-checkout-terms"
+    url: "https://www.coinbase.com/legal/guest-checkout/us"
   },
   {
     key: "user_agreement",
@@ -62244,22 +62329,24 @@ function LegalDisclaimer({ legalAgreements, loading }) {
     return /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)(
       "div",
       {
-        className: "uf-mt-3 uf-mb-3 uf-px-1 uf-space-y-1.5 uf-animate-pulse",
+        className: "uf-mt-3 uf-mb-3 uf-px-1 uf-space-y-1.5 uf-animate-pulse uf-opacity-50",
         "aria-hidden": true,
         "aria-busy": "true",
         children: [
-          /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("div", { className: "uf-h-2.5 uf-rounded uf-w-full", style: { backgroundColor: colors2.card } }),
-          /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("div", { className: "uf-h-2.5 uf-rounded uf-w-11/12", style: { backgroundColor: colors2.card } }),
-          /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("div", { className: "uf-h-2.5 uf-rounded uf-w-3/4", style: { backgroundColor: colors2.card } })
+          /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("div", { className: "uf-h-2 uf-rounded uf-w-full", style: { backgroundColor: colors2.card } }),
+          /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("div", { className: "uf-h-2 uf-rounded uf-w-11/12", style: { backgroundColor: colors2.card } }),
+          /* @__PURE__ */ (0, import_jsx_runtime26.jsx)("div", { className: "uf-h-2 uf-rounded uf-w-3/4", style: { backgroundColor: colors2.card } })
         ]
       }
     );
   }
   const agreements = legalAgreements?.agreements ?? FALLBACK_AGREEMENTS;
+  const shortLabels = t.agreements;
+  const lastSeparator = t.lastSeparator.replace(/\s+$/, "\xA0");
   return /* @__PURE__ */ (0, import_jsx_runtime26.jsxs)(
     "p",
     {
-      className: "uf-text-[11px] uf-leading-relaxed uf-mt-3 uf-mb-3 uf-px-1",
+      className: "uf-text-[10px] uf-leading-relaxed uf-mt-3 uf-mb-3 uf-opacity-60 uf-text-center",
       style: { color: colors2.foregroundMuted, fontFamily: fonts.regular },
       children: [
         t.prefix,
@@ -62270,12 +62357,12 @@ function LegalDisclaimer({ legalAgreements, loading }) {
               href: a.url,
               target: "_blank",
               rel: "noopener noreferrer",
-              className: "uf-underline",
-              style: { color: colors2.foreground },
-              children: a.name
+              className: "uf-no-underline",
+              style: { color: "inherit", textDecoration: "none", whiteSpace: "nowrap" },
+              children: shortLabels[a.key] ?? a.name
             }
           ),
-          idx < arr.length - 2 ? t.separator : idx === arr.length - 2 ? t.lastSeparator : ""
+          idx < arr.length - 2 ? t.separator : idx === arr.length - 2 ? lastSeparator : ""
         ] }, a.key)),
         t.suffix
       ]
@@ -62918,6 +63005,7 @@ function PayWithCashApp({
   destinationChainType,
   destinationChainId,
   destinationTokenAddress,
+  contractCalls,
   cashAppIconUrl,
   view: controlledView,
   onViewChange,
@@ -63010,7 +63098,8 @@ function PayWithCashApp({
           destination_token_address: destinationTokenAddress,
           recipient_address: recipientAddress,
           source_amount: amount,
-          external_id: externalId
+          external_id: externalId,
+          ...contractCalls?.length ? { contract_calls: contractCalls } : {}
         },
         publishableKey
       );
@@ -63023,7 +63112,10 @@ function PayWithCashApp({
       track("flow_started", {
         method: "cashapp",
         flow_type: "deposit",
-        amount_usd: amount
+        amount_usd: amount,
+        // No execution yet — one appears when the payout lands on this
+        // wallet, carrying the same id.
+        deposit_wallet_id: depositWalletId
       });
       onEvent?.({
         id: generatePrefixedKSUID("sevt"),
@@ -63048,6 +63140,8 @@ function PayWithCashApp({
     destinationChainType,
     destinationChainId,
     destinationTokenAddress,
+    contractCalls,
+    depositWalletId,
     onEvent,
     onDepositError,
     track,
@@ -63649,7 +63743,10 @@ function BankTransfer({
       method: "bank_transfer",
       flow_type: "deposit",
       provider: request.service_provider,
-      amount_usd: request.source_amount
+      amount_usd: request.source_amount,
+      // No execution yet — one appears when the provider's payout lands on
+      // this wallet, carrying the same id.
+      deposit_wallet_id: pollingWalletId
     });
     onEvent?.({
       id: generatePrefixedKSUID("sevt"),
@@ -69730,7 +69827,11 @@ function PayWithStripeLink({
       if (checkoutResult.successful) {
         handledTerminalSessionRef.current = null;
         executionReconciledSessionRef.current = null;
-        track("flow_started", { method: "stripe_link", flow_type: "deposit" });
+        track("flow_started", {
+          method: "stripe_link",
+          flow_type: "deposit",
+          deposit_wallet_id: depositWalletId
+        });
         setConfirmedSessionId(activeSessionId);
         setSessionStatus(STRIPE_SESSION_STATUS.FULFILLMENT_PROCESSING);
         if (selectedTokenSingleUseRef.current) clearSelectedPaymentToken();
@@ -71227,7 +71328,14 @@ function PayWithStripeLink({
               ]
             }
           ),
-          /* @__PURE__ */ (0, import_jsx_runtime59.jsx)("div", { ref: authMountRef, className: "uf-w-full uf-min-h-[200px]" })
+          /* @__PURE__ */ (0, import_jsx_runtime59.jsx)(
+            "div",
+            {
+              ref: authMountRef,
+              className: "uf-w-full uf-min-h-[200px]",
+              style: { colorScheme: "only light" }
+            }
+          )
         ]
       }
     );
@@ -72490,6 +72598,9 @@ function CoinbaseConnect({
       flow_type: "deposit",
       method: "exchange_connect",
       provider: IntegrationProvider.COINBASE,
+      // No execution yet — one appears when the exchange's transfer lands on
+      // this wallet, carrying the same id.
+      deposit_wallet_id: transferDepositWalletId,
       amount_usd: sendAmount || void 0,
       currency: selectedAsset?.currency.toLowerCase().replace(/[^a-z0-9]+/g, "_"),
       chain: sourceChain?.chain_id,
@@ -72497,6 +72608,34 @@ function CoinbaseConnect({
       network: sourceChain?.network
     });
   };
+  const applyConfirmResult = (result) => {
+    if (result.status === "mfa_required") {
+      track("verification_started", {
+        flow_type: "deposit",
+        method: "exchange_connect",
+        provider: IntegrationProvider.COINBASE,
+        verification_type: "mfa",
+        verification_status: result.status
+      });
+      transitionTo("mfa");
+      setMfaCode("");
+      setMfaError(false);
+    } else if (result.status === "mfa_enrollment_required") {
+      transitionTo("mfa_enrollment");
+    } else if (result.status === "completed") {
+      trackTransferStarted();
+      setConfirmResult(result);
+      transitionTo("success");
+      onTransferSuccess?.(result);
+    } else {
+      setErrorMessage(result.message || t.errors.transferFailed);
+      transitionTo("error");
+      onTransferError?.({
+        message: result.message || t.errors.transferFailed,
+        code: result.status
+      });
+    }
+  };
   const handleConfirmTransfer = async () => {
     if (!transferIntent || !accessToken) return;
     setIsLoading(true);
@@ -72531,30 +72670,7 @@ function CoinbaseConnect({
         });
         throw err;
       });
-      if (result.status === "mfa_required") {
-        track("verification_started", {
-          flow_type: "deposit",
-          method: "exchange_connect",
-          provider: IntegrationProvider.COINBASE,
-          verification_type: "mfa",
-          verification_status: result.status
-        });
-        transitionTo("mfa");
-        setMfaCode("");
-        setMfaError(false);
-      } else if (result.status === "completed") {
-        trackTransferStarted();
-        setConfirmResult(result);
-        transitionTo("success");
-        onTransferSuccess?.(result);
-      } else {
-        setErrorMessage(result.message || t.errors.transferFailed);
-        transitionTo("error");
-        onTransferError?.({
-          message: result.message || t.errors.transferFailed,
-          code: result.status
-        });
-      }
+      applyConfirmResult(result);
     } catch (err) {
       const message = err instanceof Error ? err.message : t.errors.transferFailed;
       setErrorMessage(message);
@@ -72711,6 +72827,9 @@ function CoinbaseConnect({
         setShowTransferDetails(false);
         transitionTo("enter_amount");
         break;
+      case "mfa_enrollment":
+        transitionTo("transfer_confirm");
+        break;
       case "mfa":
         transitionTo("transfer_confirm");
         break;
@@ -74267,6 +74386,55 @@ function CoinbaseConnect({
       ] })
     ] });
   }
+  if (view === "mfa_enrollment") {
+    return /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)(import_jsx_runtime60.Fragment, { children: [
+      /* @__PURE__ */ (0, import_jsx_runtime60.jsx)(DepositHeader, { title: t.title, showBack: true, onBack: handleBack, onClose }),
+      /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)(
+        "div",
+        {
+          className: "uf-flex uf-flex-col uf-items-center uf-px-4 uf-pb-4",
+          style: viewTransitionStyle,
+          children: [
+            /* @__PURE__ */ (0, import_jsx_runtime60.jsx)(
+              DepositErrorState,
+              {
+                title: t.transfer.mfaEnrollmentTitle,
+                message: t.transfer.mfaEnrollmentMessage
+              }
+            ),
+            /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)(
+              "a",
+              {
+                href: "https://www.coinbase.com/settings/security",
+                target: "_blank",
+                rel: "noopener noreferrer",
+                className: "uf-text-sm uf-underline uf-mb-8 uf-inline-flex uf-items-center uf-gap-1",
+                style: { color: colors2.primary, fontFamily: fonts.medium },
+                children: [
+                  t.transfer.mfaEnrollmentSettingsLink,
+                  /* @__PURE__ */ (0, import_jsx_runtime60.jsx)(ExternalLink, { className: "uf-w-3.5 uf-h-3.5" })
+                ]
+              }
+            ),
+            /* @__PURE__ */ (0, import_jsx_runtime60.jsx)(
+              "button",
+              {
+                onClick: handleConfirmTransfer,
+                disabled: isLoading,
+                className: "uf-w-full uf-rounded-xl uf-py-3.5 uf-text-sm uf-font-medium uf-transition-all hover:uf-opacity-90 disabled:uf-opacity-50 uf-flex uf-items-center uf-justify-center uf-gap-2",
+                style: {
+                  backgroundColor: colors2.primary,
+                  color: "#fff",
+                  fontFamily: fonts.medium
+                },
+                children: isLoading ? /* @__PURE__ */ (0, import_jsx_runtime60.jsx)(LoaderCircle, { className: "uf-w-4 uf-h-4 uf-animate-spin" }) : t.continue
+              }
+            )
+          ]
+        }
+      )
+    ] });
+  }
   if (view === "mfa") {
     return /* @__PURE__ */ (0, import_jsx_runtime60.jsxs)(import_jsx_runtime60.Fragment, { children: [
       /* @__PURE__ */ (0, import_jsx_runtime60.jsx)(DepositHeader, { title: t.title, showBack: true, onBack: handleBack, onClose }),
@@ -80194,7 +80362,11 @@ function WalletConnect({
         chain: String(token.chain_id),
         network: token.network,
         token: token.symbol ?? token.token_address,
-        currency: token.currency
+        currency: token.currency,
+        // No execution exists yet — it's created when this send lands on the
+        // wallet. The wallet id is what that execution will carry, so it's
+        // how a send that never completes is matched to what followed.
+        deposit_wallet_id: activeDepositWallet?.id
       });
       setReceivedUsdAtSubmission(checkoutReceivedUsd ?? "0");
       setHasSignedTransaction(true);
@@ -80781,7 +80953,7 @@ function DepositModal({
   const applePaySubTitle = applePaySubTitleProp ?? t.applePayMenu.subtitle;
   const googlePayTitle = googlePayTitleProp ?? t.googlePayMenu.title;
   const googlePaySubTitle = googlePaySubTitleProp ?? t.googlePayMenu.subtitle;
-  const { track, startSession, endSession, getSessionId, subscribe } = useAnalytics();
+  const { track, startSession, endSession, getSessionId, setUserId, subscribe } = useAnalytics();
   const normalizedPrefilledAmountUsd = (0, import_react3.useMemo)(
     () => normalizePrefilledUsdAmount(prefilledAmountUsd),
     [prefilledAmountUsd]
@@ -80789,6 +80961,7 @@ function DepositModal({
   const analyticsMethod = (method) => method === "transfer" ? "transfer_crypto" : method;
   const journeyActiveRef = (0, import_react3.useRef)(false);
   const journeySessionIdRef = (0, import_react3.useRef)(void 0);
+  const journeyExternalUserIdRef = (0, import_react3.useRef)(void 0);
   const externalUserId = userId || void 0;
   const emitEvent = (0, import_react3.useCallback)(
     (event) => onEvent?.({ ...event, externalUserId }),
@@ -80816,6 +80989,9 @@ function DepositModal({
         method: analyticsMethod(method),
         flow_type: "deposit",
         amount_usd: execution?.destinationAmountUsd ?? execution?.sourceAmountUsd,
+        // The one high-cardinality field we do send: the join key from a
+        // funnel session back to the execution row it produced.
+        execution_id: data.executionId ?? execution?.id,
         // Flat, low-cardinality execution dimensions for PostHog breakdowns
         // (precise/opaque fields like base units, addresses, tx hashes live in
         // the onEvent DirectExecution instead).
@@ -80843,6 +81019,7 @@ function DepositModal({
         method: analyticsMethod(method),
         flow_type: "deposit",
         error_code: error.code,
+        execution_id: execution?.id,
         failure_reason: execution?.failureReason ?? void 0,
         status: execution?.status,
         source_chain_type: execution?.sourceChainType,
@@ -81271,8 +81448,10 @@ function DepositModal({
   const beginJourney = (0, import_react3.useCallback)(() => {
     journeySessionIdRef.current = startSession();
     journeyActiveRef.current = true;
+    journeyExternalUserIdRef.current = userId;
+    setUserId(null);
     track("widget_opened", { flow_type: "deposit" });
-  }, [startSession, track]);
+  }, [startSession, track, setUserId, userId]);
   const handleClose = () => {
     finalizeJourney();
     onOpenChange(false);
@@ -81297,6 +81476,11 @@ function DepositModal({
     }
     beginJourney();
   }, [open]);
+  (0, import_react3.useLayoutEffect)(() => {
+    if (!open || journeyExternalUserIdRef.current === userId) return;
+    journeyExternalUserIdRef.current = userId;
+    setUserId(null);
+  }, [open, userId, setUserId]);
   (0, import_react3.useLayoutEffect)(() => {
     if (!open) return;
     if (resetViewTimeoutRef.current) {
@@ -82208,6 +82392,7 @@ function DepositModal({
                         destinationChainType,
                         destinationChainId,
                         destinationTokenAddress,
+                        contractCalls,
                         cashAppIconUrl: projectConfig?.asset_cdn_url ? `${projectConfig.asset_cdn_url}/api/public/icons/onramps/svg/cashapp.svg` : void 0,
                         view: cashAppView,
                         onViewChange: setCashAppView,
@@ -82543,6 +82728,9 @@ function CheckoutModal({
         flowCompletedRef.current = true;
         track("flow_completed", {
           flow_type: "checkout",
+          // Checkout has no direct execution; the intent is what a funnel
+          // session joins back to.
+          payment_intent_id: data.paymentIntentId,
           ...method ? { method: method === "transfer" ? "transfer_crypto" : method } : {}
         });
       }
@@ -82763,7 +82951,7 @@ function CheckoutModal({
     journeySessionIdRef.current = startSession();
     journeyActiveRef.current = true;
     flowCompletedRef.current = false;
-    setUserId(null);
+    setUserId(paymentIntentUserId ?? null);
     track("widget_opened", { flow_type: "checkout" });
     if (resetViewTimeoutRef.current) {
       clearTimeout(resetViewTimeoutRef.current);
@@ -83348,7 +83536,7 @@ function useAddressBalance(params) {
 }
 function useExecutions(userId, publishableKey, options2) {
   const actionType = options2?.actionType ?? ActionType.Deposit;
-  return (0, import_react_query25.useQuery)({
+  const query = (0, import_react_query25.useQuery)({
     queryKey: ["unifold", "executions", actionType, userId, publishableKey],
     queryFn: () => queryExecutions(userId, publishableKey, actionType),
     enabled: (options2?.enabled ?? true) && !!userId,
@@ -83357,6 +83545,8 @@ function useExecutions(userId, publishableKey, options2) {
     gcTime: 1e3 * 60 * 5,
     refetchOnWindowFocus: false
   });
+  useStampInternalUserId({ internalUserId: query.data?.data[0]?.user_id });
+  return query;
 }
 var POLL_INTERVAL_MS4 = 2500;
 var POLL_ENDPOINT_INTERVAL_MS2 = 5e3;
@@ -83731,7 +83921,6 @@ function useGetDepositAddress(params) {
     actionType,
     enabled = true
   } = params;
-  const { setUserId } = useAnalytics();
   const canFire = !!userId && !!recipientAddress && !!destinationChainType && !!destinationChainId && !!destinationTokenAddress;
   const query = (0, import_react_query27.useQuery)({
     queryKey: [
@@ -83763,11 +83952,7 @@ function useGetDepositAddress(params) {
     refetchOnWindowFocus: false,
     retry: 1
   });
-  (0, import_react46.useEffect)(() => {
-    if (query.data?.user_id) {
-      setUserId(query.data.user_id);
-    }
-  }, [query.data?.user_id, setUserId]);
+  useStampInternalUserId({ internalUserId: query.data?.user_id });
   return query;
 }
 var isHypercore = (chainId) => chainId === HYPERCORE_CHAIN_ID;
@@ -84717,9 +84902,9 @@ function WithdrawConfirmingView({
   const { colors: colors2, fonts, components } = useTheme();
   const { t: strings } = useI18n();
   const t = strings.withdrawModal.details;
-  const [showButton, setShowButton] = (0, import_react47.useState)(false);
+  const [showButton, setShowButton] = (0, import_react46.useState)(false);
   const latestExecution = executions.length > 0 ? executions[executions.length - 1] : null;
-  (0, import_react47.useEffect)(() => {
+  (0, import_react46.useEffect)(() => {
     if (latestExecution) return;
     const timer = setTimeout(() => setShowButton(true), SHOW_BUTTON_DELAY_MS);
     return () => clearTimeout(timer);
@@ -84888,12 +85073,16 @@ function WithdrawModal({
   );
   const journeyActiveRef = (0, import_react42.useRef)(false);
   const journeySessionIdRef = (0, import_react42.useRef)(void 0);
+  const journeyExternalUserIdRef = (0, import_react42.useRef)(void 0);
   const onWithdrawSuccessFor = (0, import_react42.useCallback)(
     (data) => {
       const execution = data.execution?.data.object;
       track("flow_completed", {
         flow_type: "withdraw",
         amount_usd: execution?.destinationAmountUsd ?? execution?.sourceAmountUsd,
+        // The one high-cardinality field we do send: the join key from a
+        // funnel session back to the execution row it produced.
+        execution_id: data.executionId ?? execution?.id,
         // Flat, low-cardinality execution dimensions for PostHog breakdowns.
         status: execution?.status,
         source_chain_type: execution?.sourceChainType,
@@ -84914,6 +85103,7 @@ function WithdrawModal({
       track("flow_failed", {
         flow_type: "withdraw",
         error_code: error.code,
+        execution_id: execution?.id,
         failure_reason: execution?.failureReason ?? void 0,
         status: execution?.status,
         source_chain_type: execution?.sourceChainType,
@@ -84987,6 +85177,7 @@ function WithdrawModal({
   ) ?? null : null;
   const [view, setView] = (0, import_react42.useState)("form");
   const [withdrawDepositWalletId, setWithdrawDepositWalletId] = (0, import_react42.useState)();
+  const withdrawDepositWalletIdRef = (0, import_react42.useRef)(void 0);
   const [selectedExecution, setSelectedExecution] = (0, import_react42.useState)(null);
   const [submittedTxInfo, setSubmittedTxInfo] = (0, import_react42.useState)(null);
   const { executions: realtimeExecutions } = useWithdrawPolling({
@@ -85024,6 +85215,7 @@ function WithdrawModal({
       if (!depositWallet) {
         throw new Error(`No deposit wallet available for ${sourceChainType}`);
       }
+      withdrawDepositWalletIdRef.current = depositWallet.id;
       setWithdrawDepositWalletId(depositWallet.id);
       return depositWallet;
     },
@@ -85043,7 +85235,12 @@ function WithdrawModal({
         currency: tokenData?.currency,
         amount: txInfo.amount,
         amount_base_unit: txInfo.amountBaseUnit,
-        ...txInfo.amountUsd ? { amount_usd: txInfo.amountUsd } : {}
+        ...txInfo.amountUsd ? { amount_usd: txInfo.amountUsd } : {},
+        // The execution doesn't exist yet — it's created when the user's send
+        // lands on the withdraw deposit wallet, and carries this id. So a
+        // withdrawal confirmed but never completed still joins to whatever
+        // did (or didn't) follow on that wallet.
+        deposit_wallet_id: withdrawDepositWalletIdRef.current
       });
       emitEvent({
         id: generatePrefixedKSUID("sevt"),
@@ -85077,8 +85274,10 @@ function WithdrawModal({
   const beginJourney = (0, import_react42.useCallback)(() => {
     journeySessionIdRef.current = startSession();
     journeyActiveRef.current = true;
+    journeyExternalUserIdRef.current = externalUserId;
+    setUserId(null);
     track("widget_opened", { flow_type: "withdraw" });
-  }, [startSession, track]);
+  }, [startSession, track, setUserId, externalUserId]);
   const handleClose = (0, import_react42.useCallback)(() => {
     finalizeJourney();
     onOpenChange(false);
@@ -85087,6 +85286,7 @@ function WithdrawModal({
       setView("form");
       setSelectedExecution(null);
       setSubmittedTxInfo(null);
+      withdrawDepositWalletIdRef.current = void 0;
       setWithdrawDepositWalletId(void 0);
       resetViewTimeoutRef.current = null;
     }, 200);
@@ -85104,8 +85304,14 @@ function WithdrawModal({
     setView("form");
     setSelectedExecution(null);
     setSubmittedTxInfo(null);
+    withdrawDepositWalletIdRef.current = void 0;
     setWithdrawDepositWalletId(void 0);
   }, [open]);
+  (0, import_react42.useLayoutEffect)(() => {
+    if (!open || journeyExternalUserIdRef.current === externalUserId) return;
+    journeyExternalUserIdRef.current = externalUserId;
+    setUserId(null);
+  }, [open, externalUserId, setUserId]);
   (0, import_react42.useEffect)(
     () => () => {
       if (journeyActiveRef.current) {
@@ -85791,9 +85997,9 @@ function useUnifold2() {
 }
 
 // src/unifold.tsx
-var UnifoldBridge = (0, import_react49.forwardRef)((_, ref) => {
+var UnifoldBridge = (0, import_react48.forwardRef)((_, ref) => {
   const { beginDeposit, closeDeposit, beginWithdraw, closeWithdraw } = useUnifold2();
-  (0, import_react49.useImperativeHandle)(ref, () => ({ beginDeposit, closeDeposit, beginWithdraw, closeWithdraw }), [
+  (0, import_react48.useImperativeHandle)(ref, () => ({ beginDeposit, closeDeposit, beginWithdraw, closeWithdraw }), [
     beginDeposit,
     closeDeposit,
     beginWithdraw,
@@ -85802,7 +86008,7 @@ var UnifoldBridge = (0, import_react49.forwardRef)((_, ref) => {
   return null;
 });
 UnifoldBridge.displayName = "UnifoldBridge";
-var RenderErrorBoundary = class extends import_react49.Component {
+var RenderErrorBoundary = class extends import_react48.Component {
   constructor() {
     super(...arguments);
     this.state = { hasError: false };
@@ -85874,13 +86080,13 @@ function createUnifold(publishableKey, config) {
     };
     try {
       root.render(
-        import_react49.default.createElement(
+        import_react48.default.createElement(
           RenderErrorBoundary,
           { onError: handleRenderError },
-          import_react49.default.createElement(
+          import_react48.default.createElement(
             UnifoldProvider2,
             { publishableKey, config },
-            import_react49.default.createElement(UnifoldBridge, { ref: refCallback })
+            import_react48.default.createElement(UnifoldBridge, { ref: refCallback })
           )
         )
       );