@metamask-previews/authenticated-user-storage 0.0.0-preview-8e9c439

package/CHANGELOG.md

@@ -0,0 +1,15 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+### Added
+
+- Initial release ([#8260](https://github.com/MetaMask/core/pull/8260))
+  - `AuthenticatedUserStorageService` class with namespaced domain accessors: `delegations` (list, create, revoke) and `preferences` (getNotifications, putNotifications)
+
+[Unreleased]: https://github.com/MetaMask/core/

package/LICENSE

@@ -0,0 +1,20 @@
+MIT License
+
+Copyright (c) 2026 MetaMask
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE

package/README.md

@@ -0,0 +1,135 @@
+# `@metamask/authenticated-user-storage`
+
+A TypeScript SDK for MetaMask's Authenticated User Storage API. Unlike E2EE user-storage, authenticated user storage holds **structured JSON** scoped to the authenticated user. The server can read and validate the contents, which allows other backend services to consume the data (e.g. delegation execution, notification delivery).
+
+The SDK currently supports two domains:
+
+- **Delegations** -- immutable, EIP-712 signed delegation records (list, create, revoke).
+- **Notification Preferences** -- mutable per-user notification settings (get, put).
+
+## Installation
+
+`yarn add @metamask/authenticated-user-storage`
+
+or
+
+`npm install @metamask/authenticated-user-storage`
+
+## Usage
+
+### Creating a service
+
+`AuthenticatedUserStorageService` extends `BaseDataService` and requires a messenger and an environment:
+
+- **`messenger`** -- a namespaced messenger for registering actions and events. The messenger must have access to `AuthenticationController:getBearerToken` to retrieve access tokens.
+- **`env`** -- selects the backend environment (`DEV`, `UAT`, or `PRD`).
+
+```typescript
+import { Messenger } from '@metamask/messenger';
+import { AuthenticatedUserStorageService } from '@metamask/authenticated-user-storage';
+import type {
+  AuthenticatedUserStorageMessenger,
+  AuthenticatedUserStorageActions,
+  AuthenticatedUserStorageEvents,
+} from '@metamask/authenticated-user-storage';
+
+// Create the messenger
+const messenger = new Messenger<
+  'AuthenticatedUserStorageService',
+  AuthenticatedUserStorageActions,
+  AuthenticatedUserStorageEvents
+>({
+  namespace: 'AuthenticatedUserStorageService',
+  parent: rootMessenger,
+});
+
+// Instantiate the service
+const service = new AuthenticatedUserStorageService({
+  messenger,
+  environment: 'prod',
+});
+```
+
+The `environment` option selects the backend environment:
+
+| Value    | Server                                |
+| -------- | ------------------------------------- |
+| `'dev'`  | `user-storage.dev-api.cx.metamask.io` |
+| `'uat'`  | `user-storage.uat-api.cx.metamask.io` |
+| `'prod'` | `user-storage.api.cx.metamask.io`     |
+
+### Calling methods via the messenger
+
+Once instantiated, all service methods are available as messenger actions. This allows any consumer with access to the messenger to call them without needing a direct reference to the service instance:
+
+```typescript
+const delegations = await rootMessenger.call(
+  'AuthenticatedUserStorageService:listDelegations',
+);
+```
+
+### Delegations
+
+Delegations are immutable once stored. They can only be revoked (deleted), not updated.
+
+```typescript
+import type { DelegationSubmission } from '@metamask/authenticated-user-storage';
+
+// List all delegations for the authenticated user
+const delegations = await service.listDelegations();
+
+// Submit a new signed delegation
+const submission: DelegationSubmission = {
+  signedDelegation: { ... },
+  metadata: { ... },
+};
+await service.createDelegation(submission, 'extension');
+
+// Revoke a delegation by its hash
+await service.revokeDelegation('0xdae6d1...');
+```
+
+### Notification preferences
+
+Preferences are mutable. The first call creates the record; subsequent calls update it.
+
+```typescript
+import type { NotificationPreferences } from '@metamask/authenticated-user-storage';
+
+// Retrieve current preferences (returns null if none have been set)
+const prefs = await service.getNotificationPreferences();
+
+// Create or update preferences
+const updated: NotificationPreferences = {
+  walletActivity: { ... },
+  marketing: { ... },
+  perps: { ... },
+  socialAI: { ... },
+};
+await service.putNotificationPreferences(updated, 'extension');
+```
+
+## Response validation
+
+All API responses are validated at runtime using [`@metamask/superstruct`](https://github.com/MetaMask/superstruct) schemas before being returned to callers. If the server returns data that doesn't match the expected shape, the SDK throws with details about the structural mismatch rather than silently returning malformed data.
+
+## Error handling
+
+HTTP errors are represented as `HttpError` from `@metamask/controller-utils`. All errors are encouraged to bubble up to the caller. The service policy provided by `BaseDataService` automatically retries transient failures before propagating the error.
+
+```typescript
+import { HttpError } from '@metamask/controller-utils';
+
+try {
+  await service.createDelegation(submission);
+} catch (error) {
+  if (error instanceof HttpError) {
+    console.error(error.message);
+    // e.g. "Failed to create delegation: 409"
+  }
+}
+```
+
+## Contributing
+
+This package is part of a monorepo. Instructions for contributing can be found in the [monorepo README](https://github.com/MetaMask/core#readme).

package/dist/authenticated-user-storage-method-action-types.cjs

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * This file is auto generated.
+ * Do not edit manually.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=authenticated-user-storage-method-action-types.cjs.map

package/dist/authenticated-user-storage-method-action-types.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticated-user-storage-method-action-types.cjs","sourceRoot":"","sources":["../src/authenticated-user-storage-method-action-types.ts"],"names":[],"mappings":";AAAA;;;GAGG","sourcesContent":["/**\n * This file is auto generated.\n * Do not edit manually.\n */\n\nimport type { AuthenticatedUserStorageService } from './authenticated-user-storage';\n\n/**\n * Returns all delegation records belonging to the authenticated user.\n *\n * @returns An array of delegation records, or an empty array if none exist.\n */\nexport type AuthenticatedUserStorageServiceListDelegationsAction = {\n  type: `AuthenticatedUserStorageService:listDelegations`;\n  handler: AuthenticatedUserStorageService['listDelegations'];\n};\n\n/**\n * Stores a signed delegation record for the authenticated user.\n *\n * @param submission - The signed delegation and its metadata.\n * @param clientType - Optional client type header.\n */\nexport type AuthenticatedUserStorageServiceCreateDelegationAction = {\n  type: `AuthenticatedUserStorageService:createDelegation`;\n  handler: AuthenticatedUserStorageService['createDelegation'];\n};\n\n/**\n * Revokes (deletes) a delegation record.\n *\n * @param delegationHash - The unique hash identifying the delegation.\n */\nexport type AuthenticatedUserStorageServiceRevokeDelegationAction = {\n  type: `AuthenticatedUserStorageService:revokeDelegation`;\n  handler: AuthenticatedUserStorageService['revokeDelegation'];\n};\n\n/**\n * Returns the notification preferences for the authenticated user.\n *\n * @returns The notification preferences object, or `null` if none have been\n * set (404).\n */\nexport type AuthenticatedUserStorageServiceGetNotificationPreferencesAction = {\n  type: `AuthenticatedUserStorageService:getNotificationPreferences`;\n  handler: AuthenticatedUserStorageService['getNotificationPreferences'];\n};\n\n/**\n * Creates or updates the notification preferences for the authenticated user.\n *\n * @param prefs - The full notification preferences object.\n * @param clientType - Optional client type header.\n */\nexport type AuthenticatedUserStorageServicePutNotificationPreferencesAction = {\n  type: `AuthenticatedUserStorageService:putNotificationPreferences`;\n  handler: AuthenticatedUserStorageService['putNotificationPreferences'];\n};\n\n/**\n * Union of all AuthenticatedUserStorageService action types.\n */\nexport type AuthenticatedUserStorageServiceMethodActions =\n  | AuthenticatedUserStorageServiceListDelegationsAction\n  | AuthenticatedUserStorageServiceCreateDelegationAction\n  | AuthenticatedUserStorageServiceRevokeDelegationAction\n  | AuthenticatedUserStorageServiceGetNotificationPreferencesAction\n  | AuthenticatedUserStorageServicePutNotificationPreferencesAction;\n"]}

package/dist/authenticated-user-storage-method-action-types.d.cts

@@ -0,0 +1,58 @@
+/**
+ * This file is auto generated.
+ * Do not edit manually.
+ */
+import type { AuthenticatedUserStorageService } from "./authenticated-user-storage.cjs";
+/**
+ * Returns all delegation records belonging to the authenticated user.
+ *
+ * @returns An array of delegation records, or an empty array if none exist.
+ */
+export type AuthenticatedUserStorageServiceListDelegationsAction = {
+    type: `AuthenticatedUserStorageService:listDelegations`;
+    handler: AuthenticatedUserStorageService['listDelegations'];
+};
+/**
+ * Stores a signed delegation record for the authenticated user.
+ *
+ * @param submission - The signed delegation and its metadata.
+ * @param clientType - Optional client type header.
+ */
+export type AuthenticatedUserStorageServiceCreateDelegationAction = {
+    type: `AuthenticatedUserStorageService:createDelegation`;
+    handler: AuthenticatedUserStorageService['createDelegation'];
+};
+/**
+ * Revokes (deletes) a delegation record.
+ *
+ * @param delegationHash - The unique hash identifying the delegation.
+ */
+export type AuthenticatedUserStorageServiceRevokeDelegationAction = {
+    type: `AuthenticatedUserStorageService:revokeDelegation`;
+    handler: AuthenticatedUserStorageService['revokeDelegation'];
+};
+/**
+ * Returns the notification preferences for the authenticated user.
+ *
+ * @returns The notification preferences object, or `null` if none have been
+ * set (404).
+ */
+export type AuthenticatedUserStorageServiceGetNotificationPreferencesAction = {
+    type: `AuthenticatedUserStorageService:getNotificationPreferences`;
+    handler: AuthenticatedUserStorageService['getNotificationPreferences'];
+};
+/**
+ * Creates or updates the notification preferences for the authenticated user.
+ *
+ * @param prefs - The full notification preferences object.
+ * @param clientType - Optional client type header.
+ */
+export type AuthenticatedUserStorageServicePutNotificationPreferencesAction = {
+    type: `AuthenticatedUserStorageService:putNotificationPreferences`;
+    handler: AuthenticatedUserStorageService['putNotificationPreferences'];
+};
+/**
+ * Union of all AuthenticatedUserStorageService action types.
+ */
+export type AuthenticatedUserStorageServiceMethodActions = AuthenticatedUserStorageServiceListDelegationsAction | AuthenticatedUserStorageServiceCreateDelegationAction | AuthenticatedUserStorageServiceRevokeDelegationAction | AuthenticatedUserStorageServiceGetNotificationPreferencesAction | AuthenticatedUserStorageServicePutNotificationPreferencesAction;
+//# sourceMappingURL=authenticated-user-storage-method-action-types.d.cts.map

package/dist/authenticated-user-storage-method-action-types.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticated-user-storage-method-action-types.d.cts","sourceRoot":"","sources":["../src/authenticated-user-storage-method-action-types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,+BAA+B,EAAE,yCAAqC;AAEpF;;;;GAIG;AACH,MAAM,MAAM,oDAAoD,GAAG;IACjE,IAAI,EAAE,iDAAiD,CAAC;IACxD,OAAO,EAAE,+BAA+B,CAAC,iBAAiB,CAAC,CAAC;CAC7D,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,qDAAqD,GAAG;IAClE,IAAI,EAAE,kDAAkD,CAAC;IACzD,OAAO,EAAE,+BAA+B,CAAC,kBAAkB,CAAC,CAAC;CAC9D,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,qDAAqD,GAAG;IAClE,IAAI,EAAE,kDAAkD,CAAC;IACzD,OAAO,EAAE,+BAA+B,CAAC,kBAAkB,CAAC,CAAC;CAC9D,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,+DAA+D,GAAG;IAC5E,IAAI,EAAE,4DAA4D,CAAC;IACnE,OAAO,EAAE,+BAA+B,CAAC,4BAA4B,CAAC,CAAC;CACxE,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,+DAA+D,GAAG;IAC5E,IAAI,EAAE,4DAA4D,CAAC;IACnE,OAAO,EAAE,+BAA+B,CAAC,4BAA4B,CAAC,CAAC;CACxE,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,4CAA4C,GACpD,oDAAoD,GACpD,qDAAqD,GACrD,qDAAqD,GACrD,+DAA+D,GAC/D,+DAA+D,CAAC"}

package/dist/authenticated-user-storage-method-action-types.d.mts

@@ -0,0 +1,58 @@
+/**
+ * This file is auto generated.
+ * Do not edit manually.
+ */
+import type { AuthenticatedUserStorageService } from "./authenticated-user-storage.mjs";
+/**
+ * Returns all delegation records belonging to the authenticated user.
+ *
+ * @returns An array of delegation records, or an empty array if none exist.
+ */
+export type AuthenticatedUserStorageServiceListDelegationsAction = {
+    type: `AuthenticatedUserStorageService:listDelegations`;
+    handler: AuthenticatedUserStorageService['listDelegations'];
+};
+/**
+ * Stores a signed delegation record for the authenticated user.
+ *
+ * @param submission - The signed delegation and its metadata.
+ * @param clientType - Optional client type header.
+ */
+export type AuthenticatedUserStorageServiceCreateDelegationAction = {
+    type: `AuthenticatedUserStorageService:createDelegation`;
+    handler: AuthenticatedUserStorageService['createDelegation'];
+};
+/**
+ * Revokes (deletes) a delegation record.
+ *
+ * @param delegationHash - The unique hash identifying the delegation.
+ */
+export type AuthenticatedUserStorageServiceRevokeDelegationAction = {
+    type: `AuthenticatedUserStorageService:revokeDelegation`;
+    handler: AuthenticatedUserStorageService['revokeDelegation'];
+};
+/**
+ * Returns the notification preferences for the authenticated user.
+ *
+ * @returns The notification preferences object, or `null` if none have been
+ * set (404).
+ */
+export type AuthenticatedUserStorageServiceGetNotificationPreferencesAction = {
+    type: `AuthenticatedUserStorageService:getNotificationPreferences`;
+    handler: AuthenticatedUserStorageService['getNotificationPreferences'];
+};
+/**
+ * Creates or updates the notification preferences for the authenticated user.
+ *
+ * @param prefs - The full notification preferences object.
+ * @param clientType - Optional client type header.
+ */
+export type AuthenticatedUserStorageServicePutNotificationPreferencesAction = {
+    type: `AuthenticatedUserStorageService:putNotificationPreferences`;
+    handler: AuthenticatedUserStorageService['putNotificationPreferences'];
+};
+/**
+ * Union of all AuthenticatedUserStorageService action types.
+ */
+export type AuthenticatedUserStorageServiceMethodActions = AuthenticatedUserStorageServiceListDelegationsAction | AuthenticatedUserStorageServiceCreateDelegationAction | AuthenticatedUserStorageServiceRevokeDelegationAction | AuthenticatedUserStorageServiceGetNotificationPreferencesAction | AuthenticatedUserStorageServicePutNotificationPreferencesAction;
+//# sourceMappingURL=authenticated-user-storage-method-action-types.d.mts.map

package/dist/authenticated-user-storage-method-action-types.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticated-user-storage-method-action-types.d.mts","sourceRoot":"","sources":["../src/authenticated-user-storage-method-action-types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,+BAA+B,EAAE,yCAAqC;AAEpF;;;;GAIG;AACH,MAAM,MAAM,oDAAoD,GAAG;IACjE,IAAI,EAAE,iDAAiD,CAAC;IACxD,OAAO,EAAE,+BAA+B,CAAC,iBAAiB,CAAC,CAAC;CAC7D,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,qDAAqD,GAAG;IAClE,IAAI,EAAE,kDAAkD,CAAC;IACzD,OAAO,EAAE,+BAA+B,CAAC,kBAAkB,CAAC,CAAC;CAC9D,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,qDAAqD,GAAG;IAClE,IAAI,EAAE,kDAAkD,CAAC;IACzD,OAAO,EAAE,+BAA+B,CAAC,kBAAkB,CAAC,CAAC;CAC9D,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,+DAA+D,GAAG;IAC5E,IAAI,EAAE,4DAA4D,CAAC;IACnE,OAAO,EAAE,+BAA+B,CAAC,4BAA4B,CAAC,CAAC;CACxE,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,+DAA+D,GAAG;IAC5E,IAAI,EAAE,4DAA4D,CAAC;IACnE,OAAO,EAAE,+BAA+B,CAAC,4BAA4B,CAAC,CAAC;CACxE,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,4CAA4C,GACpD,oDAAoD,GACpD,qDAAqD,GACrD,qDAAqD,GACrD,+DAA+D,GAC/D,+DAA+D,CAAC"}

package/dist/authenticated-user-storage-method-action-types.mjs

@@ -0,0 +1,6 @@
+/**
+ * This file is auto generated.
+ * Do not edit manually.
+ */
+export {};
+//# sourceMappingURL=authenticated-user-storage-method-action-types.mjs.map

package/dist/authenticated-user-storage-method-action-types.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticated-user-storage-method-action-types.mjs","sourceRoot":"","sources":["../src/authenticated-user-storage-method-action-types.ts"],"names":[],"mappings":"AAAA;;;GAGG","sourcesContent":["/**\n * This file is auto generated.\n * Do not edit manually.\n */\n\nimport type { AuthenticatedUserStorageService } from './authenticated-user-storage';\n\n/**\n * Returns all delegation records belonging to the authenticated user.\n *\n * @returns An array of delegation records, or an empty array if none exist.\n */\nexport type AuthenticatedUserStorageServiceListDelegationsAction = {\n  type: `AuthenticatedUserStorageService:listDelegations`;\n  handler: AuthenticatedUserStorageService['listDelegations'];\n};\n\n/**\n * Stores a signed delegation record for the authenticated user.\n *\n * @param submission - The signed delegation and its metadata.\n * @param clientType - Optional client type header.\n */\nexport type AuthenticatedUserStorageServiceCreateDelegationAction = {\n  type: `AuthenticatedUserStorageService:createDelegation`;\n  handler: AuthenticatedUserStorageService['createDelegation'];\n};\n\n/**\n * Revokes (deletes) a delegation record.\n *\n * @param delegationHash - The unique hash identifying the delegation.\n */\nexport type AuthenticatedUserStorageServiceRevokeDelegationAction = {\n  type: `AuthenticatedUserStorageService:revokeDelegation`;\n  handler: AuthenticatedUserStorageService['revokeDelegation'];\n};\n\n/**\n * Returns the notification preferences for the authenticated user.\n *\n * @returns The notification preferences object, or `null` if none have been\n * set (404).\n */\nexport type AuthenticatedUserStorageServiceGetNotificationPreferencesAction = {\n  type: `AuthenticatedUserStorageService:getNotificationPreferences`;\n  handler: AuthenticatedUserStorageService['getNotificationPreferences'];\n};\n\n/**\n * Creates or updates the notification preferences for the authenticated user.\n *\n * @param prefs - The full notification preferences object.\n * @param clientType - Optional client type header.\n */\nexport type AuthenticatedUserStorageServicePutNotificationPreferencesAction = {\n  type: `AuthenticatedUserStorageService:putNotificationPreferences`;\n  handler: AuthenticatedUserStorageService['putNotificationPreferences'];\n};\n\n/**\n * Union of all AuthenticatedUserStorageService action types.\n */\nexport type AuthenticatedUserStorageServiceMethodActions =\n  | AuthenticatedUserStorageServiceListDelegationsAction\n  | AuthenticatedUserStorageServiceCreateDelegationAction\n  | AuthenticatedUserStorageServiceRevokeDelegationAction\n  | AuthenticatedUserStorageServiceGetNotificationPreferencesAction\n  | AuthenticatedUserStorageServicePutNotificationPreferencesAction;\n"]}

package/dist/authenticated-user-storage.cjs

@@ -0,0 +1,218 @@
+"use strict";
+var __classPrivateFieldSet = (this && this.__classPrivateFieldSet) || function (receiver, state, value, kind, f) {
+    if (kind === "m") throw new TypeError("Private method is not writable");
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a setter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot write private member to an object whose class did not declare it");
+    return (kind === "a" ? f.call(receiver, value) : f ? f.value = value : state.set(receiver, value)), value;
+};
+var __classPrivateFieldGet = (this && this.__classPrivateFieldGet) || function (receiver, state, kind, f) {
+    if (kind === "a" && !f) throw new TypeError("Private accessor was defined without a getter");
+    if (typeof state === "function" ? receiver !== state || !f : !state.has(receiver)) throw new TypeError("Cannot read private member from an object whose class did not declare it");
+    return kind === "m" ? f : kind === "a" ? f.call(receiver) : f ? f.value : state.get(receiver);
+};
+var _AuthenticatedUserStorageService_instances, _AuthenticatedUserStorageService_environment, _AuthenticatedUserStorageService_getHeaders;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AuthenticatedUserStorageService = exports.getAuthenticatedStorageUrl = exports.serviceName = void 0;
+const base_data_service_1 = require("@metamask/base-data-service");
+const controller_utils_1 = require("@metamask/controller-utils");
+const env_1 = require("./env.cjs");
+const validators_1 = require("./validators.cjs");
+// === GENERAL ===
+/**
+ * The name of the {@link AuthenticatedUserStorageService} service, used to
+ * namespace the service's actions and events.
+ */
+exports.serviceName = 'AuthenticatedUserStorageService';
+/**
+ * Builds the versioned API base URL for a given environment.
+ *
+ * @param environment - The target environment.
+ * @returns The base URL including the `/api/v1` path segment.
+ */
+function getAuthenticatedStorageUrl(environment) {
+    return `${(0, env_1.getUserStorageApiUrl)(environment)}/api/v1`;
+}
+exports.getAuthenticatedStorageUrl = getAuthenticatedStorageUrl;
+// === MESSENGER ===
+const MESSENGER_EXPOSED_METHODS = [
+    'listDelegations',
+    'createDelegation',
+    'revokeDelegation',
+    'getNotificationPreferences',
+    'putNotificationPreferences',
+];
+// === SERVICE ===
+/**
+ * Data service wrapping authenticated user-storage API endpoints.
+ *
+ * Provides methods for managing delegations and notification preferences
+ * for the authenticated user.
+ */
+class AuthenticatedUserStorageService extends base_data_service_1.BaseDataService {
+    /**
+     * Constructs a new AuthenticatedUserStorageService.
+     *
+     * @param args - The constructor arguments.
+     * @param args.messenger - The messenger suited for this service.
+     * @param args.environment - The target environment (dev, uat, prod).
+     * @param args.policyOptions - Options to pass to `createServicePolicy`, which
+     * is used to wrap each request. See {@link CreateServicePolicyOptions}.
+     */
+    constructor({ messenger, environment, policyOptions, }) {
+        super({ name: exports.serviceName, messenger, policyOptions });
+        _AuthenticatedUserStorageService_instances.add(this);
+        _AuthenticatedUserStorageService_environment.set(this, void 0);
+        __classPrivateFieldSet(this, _AuthenticatedUserStorageService_environment, environment, "f");
+        this.messenger.registerMethodActionHandlers(this, MESSENGER_EXPOSED_METHODS);
+    }
+    /**
+     * Returns all delegation records belonging to the authenticated user.
+     *
+     * @returns An array of delegation records, or an empty array if none exist.
+     */
+    async listDelegations() {
+        const url = `${getAuthenticatedStorageUrl(__classPrivateFieldGet(this, _AuthenticatedUserStorageService_environment, "f"))}/delegations`;
+        const data = await this.fetchQuery({
+            queryKey: [`${this.name}:listDelegations`],
+            queryFn: async () => {
+                const headers = await __classPrivateFieldGet(this, _AuthenticatedUserStorageService_instances, "m", _AuthenticatedUserStorageService_getHeaders).call(this);
+                const response = await fetch(url, { headers });
+                if (!response.ok) {
+                    throw new controller_utils_1.HttpError(response.status, `Failed to list delegations: ${response.status}`);
+                }
+                return response.json();
+            },
+        });
+        (0, validators_1.assertDelegationResponseArray)(data);
+        return data;
+    }
+    /**
+     * Stores a signed delegation record for the authenticated user.
+     *
+     * @param submission - The signed delegation and its metadata.
+     * @param clientType - Optional client type header.
+     */
+    async createDelegation(submission, clientType) {
+        const url = `${getAuthenticatedStorageUrl(__classPrivateFieldGet(this, _AuthenticatedUserStorageService_environment, "f"))}/delegations`;
+        await this.fetchQuery({
+            queryKey: [
+                `${this.name}:createDelegation`,
+                submission.metadata.delegationHash,
+            ],
+            staleTime: 0,
+            queryFn: async () => {
+                const headers = await __classPrivateFieldGet(this, _AuthenticatedUserStorageService_instances, "m", _AuthenticatedUserStorageService_getHeaders).call(this, clientType);
+                const response = await fetch(url, {
+                    method: 'POST',
+                    headers,
+                    body: JSON.stringify(submission),
+                });
+                if (!response.ok) {
+                    throw new controller_utils_1.HttpError(response.status, `Failed to create delegation: ${response.status}`);
+                }
+                return null;
+            },
+        });
+        await this.invalidateQueries({
+            queryKey: [`${this.name}:listDelegations`],
+        });
+    }
+    /**
+     * Revokes (deletes) a delegation record.
+     *
+     * @param delegationHash - The unique hash identifying the delegation.
+     */
+    async revokeDelegation(delegationHash) {
+        const url = `${getAuthenticatedStorageUrl(__classPrivateFieldGet(this, _AuthenticatedUserStorageService_environment, "f"))}/delegations/${encodeURIComponent(delegationHash)}`;
+        await this.fetchQuery({
+            queryKey: [`${this.name}:revokeDelegation`, delegationHash],
+            staleTime: 0,
+            queryFn: async () => {
+                const headers = await __classPrivateFieldGet(this, _AuthenticatedUserStorageService_instances, "m", _AuthenticatedUserStorageService_getHeaders).call(this);
+                const response = await fetch(url, {
+                    method: 'DELETE',
+                    headers,
+                });
+                if (!response.ok) {
+                    throw new controller_utils_1.HttpError(response.status, `Failed to revoke delegation: ${response.status}`);
+                }
+                return null;
+            },
+        });
+        await this.invalidateQueries({
+            queryKey: [`${this.name}:listDelegations`],
+        });
+    }
+    /**
+     * Returns the notification preferences for the authenticated user.
+     *
+     * @returns The notification preferences object, or `null` if none have been
+     * set (404).
+     */
+    async getNotificationPreferences() {
+        const url = `${getAuthenticatedStorageUrl(__classPrivateFieldGet(this, _AuthenticatedUserStorageService_environment, "f"))}/preferences/notifications`;
+        const data = await this.fetchQuery({
+            queryKey: [`${this.name}:getNotificationPreferences`],
+            queryFn: async () => {
+                const headers = await __classPrivateFieldGet(this, _AuthenticatedUserStorageService_instances, "m", _AuthenticatedUserStorageService_getHeaders).call(this);
+                const response = await fetch(url, { headers });
+                if (response.status === 404) {
+                    return null;
+                }
+                if (!response.ok) {
+                    throw new controller_utils_1.HttpError(response.status, `Failed to get notification preferences: ${response.status}`);
+                }
+                return response.json();
+            },
+        });
+        if (data === null) {
+            return null;
+        }
+        (0, validators_1.assertNotificationPreferences)(data);
+        return data;
+    }
+    /**
+     * Creates or updates the notification preferences for the authenticated user.
+     *
+     * @param prefs - The full notification preferences object.
+     * @param clientType - Optional client type header.
+     */
+    async putNotificationPreferences(prefs, clientType) {
+        const url = `${getAuthenticatedStorageUrl(__classPrivateFieldGet(this, _AuthenticatedUserStorageService_environment, "f"))}/preferences/notifications`;
+        await this.fetchQuery({
+            queryKey: [
+                `${this.name}:putNotificationPreferences`,
+                prefs,
+            ],
+            staleTime: 0,
+            queryFn: async () => {
+                const headers = await __classPrivateFieldGet(this, _AuthenticatedUserStorageService_instances, "m", _AuthenticatedUserStorageService_getHeaders).call(this, clientType);
+                const response = await fetch(url, {
+                    method: 'PUT',
+                    headers,
+                    body: JSON.stringify(prefs),
+                });
+                if (!response.ok) {
+                    throw new controller_utils_1.HttpError(response.status, `Failed to put notification preferences: ${response.status}`);
+                }
+                return null;
+            },
+        });
+        await this.invalidateQueries({
+            queryKey: [`${this.name}:getNotificationPreferences`],
+        });
+    }
+}
+exports.AuthenticatedUserStorageService = AuthenticatedUserStorageService;
+_AuthenticatedUserStorageService_environment = new WeakMap(), _AuthenticatedUserStorageService_instances = new WeakSet(), _AuthenticatedUserStorageService_getHeaders = async function _AuthenticatedUserStorageService_getHeaders(clientType) {
+    const accessToken = await this.messenger.call('AuthenticationController:getBearerToken');
+    const headers = {
+        'Content-Type': 'application/json',
+        Authorization: `Bearer ${accessToken}`,
+    };
+    if (clientType) {
+        headers['X-Client-Type'] = clientType;
+    }
+    return headers;
+};
+//# sourceMappingURL=authenticated-user-storage.cjs.map

package/dist/authenticated-user-storage.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticated-user-storage.cjs","sourceRoot":"","sources":["../src/authenticated-user-storage.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;AAKA,mEAA8D;AAE9D,iEAAuD;AAMvD,mCAA6C;AAO7C,iDAGsB;AAEtB,kBAAkB;AAElB;;;GAGG;AACU,QAAA,WAAW,GAAG,iCAAiC,CAAC;AAE7D;;;;;GAKG;AACH,SAAgB,0BAA0B,CAAC,WAAwB;IACjE,OAAO,GAAG,IAAA,0BAAoB,EAAC,WAAW,CAAC,SAAS,CAAC;AACvD,CAAC;AAFD,gEAEC;AAED,oBAAoB;AAEpB,MAAM,yBAAyB,GAAG;IAChC,iBAAiB;IACjB,kBAAkB;IAClB,kBAAkB;IAClB,4BAA4B;IAC5B,4BAA4B;CACpB,CAAC;AAoEX,kBAAkB;AAElB;;;;;GAKG;AACH,MAAa,+BAAgC,SAAQ,mCAGpD;IAGC;;;;;;;;OAQG;IACH,YAAY,EACV,SAAS,EACT,WAAW,EACX,aAAa,GAKd;QACC,KAAK,CAAC,EAAE,IAAI,EAAE,mBAAW,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;;QApBhD,+DAA0B;QAqBjC,uBAAA,IAAI,gDAAgB,WAAW,MAAA,CAAC;QAEhC,IAAI,CAAC,SAAS,CAAC,4BAA4B,CACzC,IAAI,EACJ,yBAAyB,CAC1B,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,eAAe;QACnB,MAAM,GAAG,GAAG,GAAG,0BAA0B,CAAC,uBAAA,IAAI,oDAAa,CAAC,cAAc,CAAC;QAE3E,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,kBAAkB,CAAC;YAC1C,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,MAAM,OAAO,GAAG,MAAM,uBAAA,IAAI,+FAAY,MAAhB,IAAI,CAAc,CAAC;gBACzC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;gBAE/C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,IAAI,4BAAS,CACjB,QAAQ,CAAC,MAAM,EACf,+BAA+B,QAAQ,CAAC,MAAM,EAAE,CACjD,CAAC;gBACJ,CAAC;gBAED,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;YACzB,CAAC;SACF,CAAC,CAAC;QAEH,IAAA,0CAA6B,EAAC,IAAI,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,gBAAgB,CACpB,UAAgC,EAChC,UAAuB;QAEvB,MAAM,GAAG,GAAG,GAAG,0BAA0B,CAAC,uBAAA,IAAI,oDAAa,CAAC,cAAc,CAAC;QAE3E,MAAM,IAAI,CAAC,UAAU,CAAC;YACpB,QAAQ,EAAE;gBACR,GAAG,IAAI,CAAC,IAAI,mBAAmB;gBAC/B,UAAU,CAAC,QAAQ,CAAC,cAAc;aACnC;YACD,SAAS,EAAE,CAAC;YACZ,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,MAAM,OAAO,GAAG,MAAM,uBAAA,IAAI,+FAAY,MAAhB,IAAI,EAAa,UAAU,CAAC,CAAC;gBACnD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;oBAChC,MAAM,EAAE,MAAM;oBACd,OAAO;oBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;iBACjC,CAAC,CAAC;gBAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,IAAI,4BAAS,CACjB,QAAQ,CAAC,MAAM,EACf,gCAAgC,QAAQ,CAAC,MAAM,EAAE,CAClD,CAAC;gBACJ,CAAC;gBAED,OAAO,IAAI,CAAC;YACd,CAAC;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,iBAAiB,CAAC;YAC3B,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,kBAAkB,CAAC;SAC3C,CAAC,CAAC;IACL,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,gBAAgB,CAAC,cAAsB;QAC3C,MAAM,GAAG,GAAG,GAAG,0BAA0B,CAAC,uBAAA,IAAI,oDAAa,CAAC,gBAAgB,kBAAkB,CAAC,cAAc,CAAC,EAAE,CAAC;QAEjH,MAAM,IAAI,CAAC,UAAU,CAAC;YACpB,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,mBAAmB,EAAE,cAAc,CAAC;YAC3D,SAAS,EAAE,CAAC;YACZ,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,MAAM,OAAO,GAAG,MAAM,uBAAA,IAAI,+FAAY,MAAhB,IAAI,CAAc,CAAC;gBACzC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;oBAChC,MAAM,EAAE,QAAQ;oBAChB,OAAO;iBACR,CAAC,CAAC;gBAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,IAAI,4BAAS,CACjB,QAAQ,CAAC,MAAM,EACf,gCAAgC,QAAQ,CAAC,MAAM,EAAE,CAClD,CAAC;gBACJ,CAAC;gBAED,OAAO,IAAI,CAAC;YACd,CAAC;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,iBAAiB,CAAC;YAC3B,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,kBAAkB,CAAC;SAC3C,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,0BAA0B;QAC9B,MAAM,GAAG,GAAG,GAAG,0BAA0B,CAAC,uBAAA,IAAI,oDAAa,CAAC,4BAA4B,CAAC;QAEzF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC;YACjC,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,6BAA6B,CAAC;YACrD,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,MAAM,OAAO,GAAG,MAAM,uBAAA,IAAI,+FAAY,MAAhB,IAAI,CAAc,CAAC;gBACzC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;gBAE/C,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;oBAC5B,OAAO,IAAI,CAAC;gBACd,CAAC;gBAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,IAAI,4BAAS,CACjB,QAAQ,CAAC,MAAM,EACf,2CAA2C,QAAQ,CAAC,MAAM,EAAE,CAC7D,CAAC;gBACJ,CAAC;gBAED,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;YACzB,CAAC;SACF,CAAC,CAAC;QAEH,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAA,0CAA6B,EAAC,IAAI,CAAC,CAAC;QACpC,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,0BAA0B,CAC9B,KAA8B,EAC9B,UAAuB;QAEvB,MAAM,GAAG,GAAG,GAAG,0BAA0B,CAAC,uBAAA,IAAI,oDAAa,CAAC,4BAA4B,CAAC;QAEzF,MAAM,IAAI,CAAC,UAAU,CAAC;YACpB,QAAQ,EAAE;gBACR,GAAG,IAAI,CAAC,IAAI,6BAA6B;gBACzC,KAAwB;aACzB;YACD,SAAS,EAAE,CAAC;YACZ,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,MAAM,OAAO,GAAG,MAAM,uBAAA,IAAI,+FAAY,MAAhB,IAAI,EAAa,UAAU,CAAC,CAAC;gBACnD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;oBAChC,MAAM,EAAE,KAAK;oBACb,OAAO;oBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;iBAC5B,CAAC,CAAC;gBAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,MAAM,IAAI,4BAAS,CACjB,QAAQ,CAAC,MAAM,EACf,2CAA2C,QAAQ,CAAC,MAAM,EAAE,CAC7D,CAAC;gBACJ,CAAC;gBAED,OAAO,IAAI,CAAC;YACd,CAAC;SACF,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,iBAAiB,CAAC;YAC3B,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,6BAA6B,CAAC;SACtD,CAAC,CAAC;IACL,CAAC;CAeF;AAvOD,0EAuOC;wKAbC,KAAK,sDAAa,UAAuB;IACvC,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CAC3C,yCAAyC,CAC1C,CAAC;IACF,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;QAClC,aAAa,EAAE,UAAU,WAAW,EAAE;KACvC,CAAC;IACF,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,CAAC,eAAe,CAAC,GAAG,UAAU,CAAC;IACxC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC","sourcesContent":["import type {\n  DataServiceCacheUpdatedEvent,\n  DataServiceGranularCacheUpdatedEvent,\n  DataServiceInvalidateQueriesAction,\n} from '@metamask/base-data-service';\nimport { BaseDataService } from '@metamask/base-data-service';\nimport type { CreateServicePolicyOptions } from '@metamask/controller-utils';\nimport { HttpError } from '@metamask/controller-utils';\nimport type { Messenger } from '@metamask/messenger';\nimport type { Json } from '@metamask/utils';\n\nimport type { AuthenticatedUserStorageServiceMethodActions } from './authenticated-user-storage-method-action-types';\nimport type { Environment } from './env';\nimport { getUserStorageApiUrl } from './env';\nimport type {\n  ClientType,\n  DelegationResponse,\n  DelegationSubmission,\n  NotificationPreferences,\n} from './types';\nimport {\n  assertDelegationResponseArray,\n  assertNotificationPreferences,\n} from './validators';\n\n// === GENERAL ===\n\n/**\n * The name of the {@link AuthenticatedUserStorageService} service, used to\n * namespace the service's actions and events.\n */\nexport const serviceName = 'AuthenticatedUserStorageService';\n\n/**\n * Builds the versioned API base URL for a given environment.\n *\n * @param environment - The target environment.\n * @returns The base URL including the `/api/v1` path segment.\n */\nexport function getAuthenticatedStorageUrl(environment: Environment): string {\n  return `${getUserStorageApiUrl(environment)}/api/v1`;\n}\n\n// === MESSENGER ===\n\nconst MESSENGER_EXPOSED_METHODS = [\n  'listDelegations',\n  'createDelegation',\n  'revokeDelegation',\n  'getNotificationPreferences',\n  'putNotificationPreferences',\n] as const;\n\n/**\n * Invalidates cached queries for {@link AuthenticatedUserStorageService}.\n */\nexport type AuthenticatedUserStorageInvalidateQueriesAction =\n  DataServiceInvalidateQueriesAction<typeof serviceName>;\n\n/**\n * Actions that {@link AuthenticatedUserStorageService} exposes to other\n * consumers.\n */\nexport type AuthenticatedUserStorageActions =\n  | AuthenticatedUserStorageServiceMethodActions\n  | AuthenticatedUserStorageInvalidateQueriesAction;\n\n/**\n * Retrieves a bearer token from the `AuthenticationController`, logging in the\n * user if necessary.\n */\ntype AuthenticationControllerGetBearerTokenAction = {\n  type: 'AuthenticationController:getBearerToken';\n  handler: (entropySourceId?: string) => Promise<string>;\n};\n\n/**\n * Actions from other messengers that {@link AuthenticatedUserStorageService}\n * calls.\n */\ntype AllowedActions = AuthenticationControllerGetBearerTokenAction;\n\n/**\n * Published when {@link AuthenticatedUserStorageService}'s cache is updated.\n */\nexport type AuthenticatedUserStorageCacheUpdatedEvent =\n  DataServiceCacheUpdatedEvent<typeof serviceName>;\n\n/**\n * Published when a key within {@link AuthenticatedUserStorageService}'s cache\n * is updated.\n */\nexport type AuthenticatedUserStorageGranularCacheUpdatedEvent =\n  DataServiceGranularCacheUpdatedEvent<typeof serviceName>;\n\n/**\n * Events that {@link AuthenticatedUserStorageService} exposes to other\n * consumers.\n */\nexport type AuthenticatedUserStorageEvents =\n  | AuthenticatedUserStorageCacheUpdatedEvent\n  | AuthenticatedUserStorageGranularCacheUpdatedEvent;\n\n/**\n * Events from other messengers that\n * {@link AuthenticatedUserStorageService} subscribes to.\n */\ntype AllowedEvents = never;\n\n/**\n * The messenger which is restricted to actions and events accessed by\n * {@link AuthenticatedUserStorageService}.\n */\nexport type AuthenticatedUserStorageMessenger = Messenger<\n  typeof serviceName,\n  AuthenticatedUserStorageActions | AllowedActions,\n  AuthenticatedUserStorageEvents | AllowedEvents\n>;\n\n// === SERVICE ===\n\n/**\n * Data service wrapping authenticated user-storage API endpoints.\n *\n * Provides methods for managing delegations and notification preferences\n * for the authenticated user.\n */\nexport class AuthenticatedUserStorageService extends BaseDataService<\n  typeof serviceName,\n  AuthenticatedUserStorageMessenger\n> {\n  readonly #environment: Environment;\n\n  /**\n   * Constructs a new AuthenticatedUserStorageService.\n   *\n   * @param args - The constructor arguments.\n   * @param args.messenger - The messenger suited for this service.\n   * @param args.environment - The target environment (dev, uat, prod).\n   * @param args.policyOptions - Options to pass to `createServicePolicy`, which\n   * is used to wrap each request. See {@link CreateServicePolicyOptions}.\n   */\n  constructor({\n    messenger,\n    environment,\n    policyOptions,\n  }: {\n    messenger: AuthenticatedUserStorageMessenger;\n    environment: Environment;\n    policyOptions?: CreateServicePolicyOptions;\n  }) {\n    super({ name: serviceName, messenger, policyOptions });\n    this.#environment = environment;\n\n    this.messenger.registerMethodActionHandlers(\n      this,\n      MESSENGER_EXPOSED_METHODS,\n    );\n  }\n\n  /**\n   * Returns all delegation records belonging to the authenticated user.\n   *\n   * @returns An array of delegation records, or an empty array if none exist.\n   */\n  async listDelegations(): Promise<DelegationResponse[]> {\n    const url = `${getAuthenticatedStorageUrl(this.#environment)}/delegations`;\n\n    const data = await this.fetchQuery({\n      queryKey: [`${this.name}:listDelegations`],\n      queryFn: async () => {\n        const headers = await this.#getHeaders();\n        const response = await fetch(url, { headers });\n\n        if (!response.ok) {\n          throw new HttpError(\n            response.status,\n            `Failed to list delegations: ${response.status}`,\n          );\n        }\n\n        return response.json();\n      },\n    });\n\n    assertDelegationResponseArray(data);\n    return data;\n  }\n\n  /**\n   * Stores a signed delegation record for the authenticated user.\n   *\n   * @param submission - The signed delegation and its metadata.\n   * @param clientType - Optional client type header.\n   */\n  async createDelegation(\n    submission: DelegationSubmission,\n    clientType?: ClientType,\n  ): Promise<void> {\n    const url = `${getAuthenticatedStorageUrl(this.#environment)}/delegations`;\n\n    await this.fetchQuery({\n      queryKey: [\n        `${this.name}:createDelegation`,\n        submission.metadata.delegationHash,\n      ],\n      staleTime: 0,\n      queryFn: async () => {\n        const headers = await this.#getHeaders(clientType);\n        const response = await fetch(url, {\n          method: 'POST',\n          headers,\n          body: JSON.stringify(submission),\n        });\n\n        if (!response.ok) {\n          throw new HttpError(\n            response.status,\n            `Failed to create delegation: ${response.status}`,\n          );\n        }\n\n        return null;\n      },\n    });\n\n    await this.invalidateQueries({\n      queryKey: [`${this.name}:listDelegations`],\n    });\n  }\n\n  /**\n   * Revokes (deletes) a delegation record.\n   *\n   * @param delegationHash - The unique hash identifying the delegation.\n   */\n  async revokeDelegation(delegationHash: string): Promise<void> {\n    const url = `${getAuthenticatedStorageUrl(this.#environment)}/delegations/${encodeURIComponent(delegationHash)}`;\n\n    await this.fetchQuery({\n      queryKey: [`${this.name}:revokeDelegation`, delegationHash],\n      staleTime: 0,\n      queryFn: async () => {\n        const headers = await this.#getHeaders();\n        const response = await fetch(url, {\n          method: 'DELETE',\n          headers,\n        });\n\n        if (!response.ok) {\n          throw new HttpError(\n            response.status,\n            `Failed to revoke delegation: ${response.status}`,\n          );\n        }\n\n        return null;\n      },\n    });\n\n    await this.invalidateQueries({\n      queryKey: [`${this.name}:listDelegations`],\n    });\n  }\n\n  /**\n   * Returns the notification preferences for the authenticated user.\n   *\n   * @returns The notification preferences object, or `null` if none have been\n   * set (404).\n   */\n  async getNotificationPreferences(): Promise<NotificationPreferences | null> {\n    const url = `${getAuthenticatedStorageUrl(this.#environment)}/preferences/notifications`;\n\n    const data = await this.fetchQuery({\n      queryKey: [`${this.name}:getNotificationPreferences`],\n      queryFn: async () => {\n        const headers = await this.#getHeaders();\n        const response = await fetch(url, { headers });\n\n        if (response.status === 404) {\n          return null;\n        }\n\n        if (!response.ok) {\n          throw new HttpError(\n            response.status,\n            `Failed to get notification preferences: ${response.status}`,\n          );\n        }\n\n        return response.json();\n      },\n    });\n\n    if (data === null) {\n      return null;\n    }\n\n    assertNotificationPreferences(data);\n    return data;\n  }\n\n  /**\n   * Creates or updates the notification preferences for the authenticated user.\n   *\n   * @param prefs - The full notification preferences object.\n   * @param clientType - Optional client type header.\n   */\n  async putNotificationPreferences(\n    prefs: NotificationPreferences,\n    clientType?: ClientType,\n  ): Promise<void> {\n    const url = `${getAuthenticatedStorageUrl(this.#environment)}/preferences/notifications`;\n\n    await this.fetchQuery({\n      queryKey: [\n        `${this.name}:putNotificationPreferences`,\n        prefs as unknown as Json,\n      ],\n      staleTime: 0,\n      queryFn: async () => {\n        const headers = await this.#getHeaders(clientType);\n        const response = await fetch(url, {\n          method: 'PUT',\n          headers,\n          body: JSON.stringify(prefs),\n        });\n\n        if (!response.ok) {\n          throw new HttpError(\n            response.status,\n            `Failed to put notification preferences: ${response.status}`,\n          );\n        }\n\n        return null;\n      },\n    });\n\n    await this.invalidateQueries({\n      queryKey: [`${this.name}:getNotificationPreferences`],\n    });\n  }\n\n  async #getHeaders(clientType?: ClientType): Promise<Record<string, string>> {\n    const accessToken = await this.messenger.call(\n      'AuthenticationController:getBearerToken',\n    );\n    const headers: Record<string, string> = {\n      'Content-Type': 'application/json',\n      Authorization: `Bearer ${accessToken}`,\n    };\n    if (clientType) {\n      headers['X-Client-Type'] = clientType;\n    }\n    return headers;\n  }\n}\n"]}