@metamask-previews/profile-sync-controller 28.3.0-preview-0d2cbf546 → 28.3.0-preview-064aea96d

package/CHANGELOG.md

@@ -7,6 +7,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Added
+
+- Add `authenticationControllerSelectors` for best-effort reads of cached session identity from `AuthenticationController` state ([#9604](https://github.com/MetaMask/core/pull/9604))
+  - `selectSrpSessionData` — raw `srpSessionData` map
+  - `selectSessionData` — primary (first) SRP session entry
+  - `selectCanonicalProfileId` — cached `canonicalProfileId`, treating `''` as missing
+  - Intended for sync consumers (e.g. Braze) that should not wait on `getSessionProfile()`. Same staleness as a valid cached session; use `refreshCanonicalProfileId()` when freshness is required.
+
 ## [28.3.0]
 
 ### Added

package/dist/controllers/authentication/index.cjs

@@ -26,10 +26,12 @@ var __importStar = (this && this.__importStar) || function (mod) {
     return result;
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.Mocks = exports.Controller = void 0;
+exports.authenticationControllerSelectors = exports.Mocks = exports.Controller = void 0;
 const AuthenticationController_js_1 = require("./AuthenticationController.cjs");
 Object.defineProperty(exports, "Controller", { enumerable: true, get: function () { return AuthenticationController_js_1.AuthenticationController; } });
 exports.default = AuthenticationController_js_1.AuthenticationController;
 __exportStar(require("./AuthenticationController.cjs"), exports);
 exports.Mocks = __importStar(require("./mocks/index.cjs"));
+var selectors_js_1 = require("./selectors.cjs");
+Object.defineProperty(exports, "authenticationControllerSelectors", { enumerable: true, get: function () { return selectors_js_1.authenticationControllerSelectors; } });
 //# sourceMappingURL=index.cjs.map

package/dist/controllers/authentication/index.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.cjs","sourceRoot":"","sources":["../../../src/controllers/authentication/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,gFAAyE;AAEpC,2FAF5B,sDAAwB,OAEc;AAC/C,kBAAe,sDAAwB,CAAC;AACxC,iEAA8C;AAC9C,2DAA0C","sourcesContent":["import { AuthenticationController } from './AuthenticationController.js';\n\nexport { AuthenticationController as Controller };\nexport default AuthenticationController;\nexport * from './AuthenticationController.js';\nexport * as Mocks from './mocks/index.js';\n\nexport type {\n  AuthenticationControllerPerformSignInAction,\n  AuthenticationControllerPerformSignOutAction,\n  AuthenticationControllerGetBearerTokenAction,\n  AuthenticationControllerGetSessionProfileAction,\n  AuthenticationControllerRefreshCanonicalProfileIdAction,\n  AuthenticationControllerGetUserProfileLineageAction,\n  AuthenticationControllerIsSignedInAction,\n  AuthenticationControllerRequestProfilePairingAction,\n} from './AuthenticationController-method-action-types.js';\n"]}
+{"version":3,"file":"index.cjs","sourceRoot":"","sources":["../../../src/controllers/authentication/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,gFAAyE;AAEpC,2FAF5B,sDAAwB,OAEc;AAC/C,kBAAe,sDAAwB,CAAC;AACxC,iEAA8C;AAC9C,2DAA0C;AAC1C,gDAAmE;AAA1D,iIAAA,iCAAiC,OAAA","sourcesContent":["import { AuthenticationController } from './AuthenticationController.js';\n\nexport { AuthenticationController as Controller };\nexport default AuthenticationController;\nexport * from './AuthenticationController.js';\nexport * as Mocks from './mocks/index.js';\nexport { authenticationControllerSelectors } from './selectors.js';\n\nexport type {\n  AuthenticationControllerPerformSignInAction,\n  AuthenticationControllerPerformSignOutAction,\n  AuthenticationControllerGetBearerTokenAction,\n  AuthenticationControllerGetSessionProfileAction,\n  AuthenticationControllerRefreshCanonicalProfileIdAction,\n  AuthenticationControllerGetUserProfileLineageAction,\n  AuthenticationControllerIsSignedInAction,\n  AuthenticationControllerRequestProfilePairingAction,\n} from './AuthenticationController-method-action-types.js';\n"]}

package/dist/controllers/authentication/index.d.cts

@@ -3,5 +3,6 @@ export { AuthenticationController as Controller };
 export default AuthenticationController;
 export * from "./AuthenticationController.cjs";
 export * as Mocks from "./mocks/index.cjs";
+export { authenticationControllerSelectors } from "./selectors.cjs";
 export type { AuthenticationControllerPerformSignInAction, AuthenticationControllerPerformSignOutAction, AuthenticationControllerGetBearerTokenAction, AuthenticationControllerGetSessionProfileAction, AuthenticationControllerRefreshCanonicalProfileIdAction, AuthenticationControllerGetUserProfileLineageAction, AuthenticationControllerIsSignedInAction, AuthenticationControllerRequestProfilePairingAction, } from "./AuthenticationController-method-action-types.cjs";
 //# sourceMappingURL=index.d.cts.map

package/dist/controllers/authentication/index.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.cts","sourceRoot":"","sources":["../../../src/controllers/authentication/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,uCAAsC;AAEzE,OAAO,EAAE,wBAAwB,IAAI,UAAU,EAAE,CAAC;AAClD,eAAe,wBAAwB,CAAC;AACxC,+CAA8C;AAC9C,OAAO,KAAK,KAAK,0BAAyB;AAE1C,YAAY,EACV,2CAA2C,EAC3C,4CAA4C,EAC5C,4CAA4C,EAC5C,+CAA+C,EAC/C,uDAAuD,EACvD,mDAAmD,EACnD,wCAAwC,EACxC,mDAAmD,GACpD,2DAA0D"}
+{"version":3,"file":"index.d.cts","sourceRoot":"","sources":["../../../src/controllers/authentication/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,uCAAsC;AAEzE,OAAO,EAAE,wBAAwB,IAAI,UAAU,EAAE,CAAC;AAClD,eAAe,wBAAwB,CAAC;AACxC,+CAA8C;AAC9C,OAAO,KAAK,KAAK,0BAAyB;AAC1C,OAAO,EAAE,iCAAiC,EAAE,wBAAuB;AAEnE,YAAY,EACV,2CAA2C,EAC3C,4CAA4C,EAC5C,4CAA4C,EAC5C,+CAA+C,EAC/C,uDAAuD,EACvD,mDAAmD,EACnD,wCAAwC,EACxC,mDAAmD,GACpD,2DAA0D"}

package/dist/controllers/authentication/index.d.mts

@@ -3,5 +3,6 @@ export { AuthenticationController as Controller };
 export default AuthenticationController;
 export * from "./AuthenticationController.mjs";
 export * as Mocks from "./mocks/index.mjs";
+export { authenticationControllerSelectors } from "./selectors.mjs";
 export type { AuthenticationControllerPerformSignInAction, AuthenticationControllerPerformSignOutAction, AuthenticationControllerGetBearerTokenAction, AuthenticationControllerGetSessionProfileAction, AuthenticationControllerRefreshCanonicalProfileIdAction, AuthenticationControllerGetUserProfileLineageAction, AuthenticationControllerIsSignedInAction, AuthenticationControllerRequestProfilePairingAction, } from "./AuthenticationController-method-action-types.mjs";
 //# sourceMappingURL=index.d.mts.map

package/dist/controllers/authentication/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","sourceRoot":"","sources":["../../../src/controllers/authentication/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,uCAAsC;AAEzE,OAAO,EAAE,wBAAwB,IAAI,UAAU,EAAE,CAAC;AAClD,eAAe,wBAAwB,CAAC;AACxC,+CAA8C;AAC9C,OAAO,KAAK,KAAK,0BAAyB;AAE1C,YAAY,EACV,2CAA2C,EAC3C,4CAA4C,EAC5C,4CAA4C,EAC5C,+CAA+C,EAC/C,uDAAuD,EACvD,mDAAmD,EACnD,wCAAwC,EACxC,mDAAmD,GACpD,2DAA0D"}
+{"version":3,"file":"index.d.mts","sourceRoot":"","sources":["../../../src/controllers/authentication/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,uCAAsC;AAEzE,OAAO,EAAE,wBAAwB,IAAI,UAAU,EAAE,CAAC;AAClD,eAAe,wBAAwB,CAAC;AACxC,+CAA8C;AAC9C,OAAO,KAAK,KAAK,0BAAyB;AAC1C,OAAO,EAAE,iCAAiC,EAAE,wBAAuB;AAEnE,YAAY,EACV,2CAA2C,EAC3C,4CAA4C,EAC5C,4CAA4C,EAC5C,+CAA+C,EAC/C,uDAAuD,EACvD,mDAAmD,EACnD,wCAAwC,EACxC,mDAAmD,GACpD,2DAA0D"}

package/dist/controllers/authentication/index.mjs

@@ -3,4 +3,5 @@ export { AuthenticationController as Controller };
 export default AuthenticationController;
 export * from "./AuthenticationController.mjs";
 export * as Mocks from "./mocks/index.mjs";
+export { authenticationControllerSelectors } from "./selectors.mjs";
 //# sourceMappingURL=index.mjs.map

package/dist/controllers/authentication/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","sourceRoot":"","sources":["../../../src/controllers/authentication/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,uCAAsC;AAEzE,OAAO,EAAE,wBAAwB,IAAI,UAAU,EAAE,CAAC;AAClD,eAAe,wBAAwB,CAAC;AACxC,+CAA8C;AAC9C,OAAO,KAAK,KAAK,0BAAyB","sourcesContent":["import { AuthenticationController } from './AuthenticationController.js';\n\nexport { AuthenticationController as Controller };\nexport default AuthenticationController;\nexport * from './AuthenticationController.js';\nexport * as Mocks from './mocks/index.js';\n\nexport type {\n  AuthenticationControllerPerformSignInAction,\n  AuthenticationControllerPerformSignOutAction,\n  AuthenticationControllerGetBearerTokenAction,\n  AuthenticationControllerGetSessionProfileAction,\n  AuthenticationControllerRefreshCanonicalProfileIdAction,\n  AuthenticationControllerGetUserProfileLineageAction,\n  AuthenticationControllerIsSignedInAction,\n  AuthenticationControllerRequestProfilePairingAction,\n} from './AuthenticationController-method-action-types.js';\n"]}
+{"version":3,"file":"index.mjs","sourceRoot":"","sources":["../../../src/controllers/authentication/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,uCAAsC;AAEzE,OAAO,EAAE,wBAAwB,IAAI,UAAU,EAAE,CAAC;AAClD,eAAe,wBAAwB,CAAC;AACxC,+CAA8C;AAC9C,OAAO,KAAK,KAAK,0BAAyB;AAC1C,OAAO,EAAE,iCAAiC,EAAE,wBAAuB","sourcesContent":["import { AuthenticationController } from './AuthenticationController.js';\n\nexport { AuthenticationController as Controller };\nexport default AuthenticationController;\nexport * from './AuthenticationController.js';\nexport * as Mocks from './mocks/index.js';\nexport { authenticationControllerSelectors } from './selectors.js';\n\nexport type {\n  AuthenticationControllerPerformSignInAction,\n  AuthenticationControllerPerformSignOutAction,\n  AuthenticationControllerGetBearerTokenAction,\n  AuthenticationControllerGetSessionProfileAction,\n  AuthenticationControllerRefreshCanonicalProfileIdAction,\n  AuthenticationControllerGetUserProfileLineageAction,\n  AuthenticationControllerIsSignedInAction,\n  AuthenticationControllerRequestProfilePairingAction,\n} from './AuthenticationController-method-action-types.js';\n"]}

package/dist/controllers/authentication/selectors.cjs

@@ -0,0 +1,64 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authenticationControllerSelectors = void 0;
+/**
+ * Selects the raw SRP session map from AuthenticationController state.
+ *
+ * @param state - The AuthenticationController state.
+ * @returns The `srpSessionData` map, or `undefined` when not signed in / cleared.
+ */
+const selectSrpSessionData = (state) => state.srpSessionData;
+/**
+ * Selects the primary (first) SRP session entry from cached `srpSessionData`.
+ *
+ * Uses the first `Object.entries` value — the same "primary / first written"
+ * convention as extension `selectSessionData`. During `performSignIn`, sessions
+ * are written sequentially with the primary SRP first.
+ *
+ * @param state - The AuthenticationController state.
+ * @returns The primary session login response, or `undefined` if unavailable.
+ */
+const selectSessionData = (state) => {
+    const srpSessionData = selectSrpSessionData(state);
+    if (!srpSessionData) {
+        return undefined;
+    }
+    const firstEntry = Object.entries(srpSessionData)[0];
+    return firstEntry?.[1];
+};
+/**
+ * Selects the best-effort cached canonical profile ID.
+ *
+ * Reads from the primary SRP session in `srpSessionData` without triggering
+ * login or unlock checks. Suitable for non-security consumers.
+ *
+ * Empty string is treated as missing (`undefined`) because the controller sets
+ * `canonicalProfileId` to `''` when invalidating a session
+ * (`#invalidateSrpSession`).
+ *
+ * Staleness: same as a valid cached `getSessionProfile()` result. Cross-device
+ * pairing can change the canonical without updating this cache until the next
+ * login or pair. Use `refreshCanonicalProfileId()` when freshness is required.
+ *
+ * @param state - The AuthenticationController state.
+ * @returns The cached canonical profile ID, or `undefined` if unavailable.
+ */
+const selectCanonicalProfileId = (state) => {
+    const canonicalProfileId = selectSessionData(state)?.profile?.canonicalProfileId;
+    // `''` is used by `#invalidateSrpSession` to mark the session as invalid.
+    if (!canonicalProfileId) {
+        return undefined;
+    }
+    return canonicalProfileId;
+};
+/**
+ * Selectors for AuthenticationController state.
+ * These take controller state (not client `RootState`) and can be composed
+ * with Redux `createSelector` in clients.
+ */
+exports.authenticationControllerSelectors = {
+    selectSrpSessionData,
+    selectSessionData,
+    selectCanonicalProfileId,
+};
+//# sourceMappingURL=selectors.cjs.map

package/dist/controllers/authentication/selectors.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"selectors.cjs","sourceRoot":"","sources":["../../../src/controllers/authentication/selectors.ts"],"names":[],"mappings":";;;AAGA;;;;;GAKG;AACH,MAAM,oBAAoB,GAAG,CAC3B,KAAoC,EACa,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC;AAE3E;;;;;;;;;GASG;AACH,MAAM,iBAAiB,GAAG,CACxB,KAAoC,EACT,EAAE;IAC7B,MAAM,cAAc,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,OAAO,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;AACzB,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,wBAAwB,GAAG,CAC/B,KAAoC,EAChB,EAAE;IACtB,MAAM,kBAAkB,GACtB,iBAAiB,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,kBAAkB,CAAC;IACxD,0EAA0E;IAC1E,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,kBAAkB,CAAC;AAC5B,CAAC,CAAC;AAEF;;;;GAIG;AACU,QAAA,iCAAiC,GAAG;IAC/C,oBAAoB;IACpB,iBAAiB;IACjB,wBAAwB;CACzB,CAAC","sourcesContent":["import type { LoginResponse } from '../../sdk/index.js';\nimport type { AuthenticationControllerState } from './AuthenticationController.js';\n\n/**\n * Selects the raw SRP session map from AuthenticationController state.\n *\n * @param state - The AuthenticationController state.\n * @returns The `srpSessionData` map, or `undefined` when not signed in / cleared.\n */\nconst selectSrpSessionData = (\n  state: AuthenticationControllerState,\n): AuthenticationControllerState['srpSessionData'] => state.srpSessionData;\n\n/**\n * Selects the primary (first) SRP session entry from cached `srpSessionData`.\n *\n * Uses the first `Object.entries` value — the same \"primary / first written\"\n * convention as extension `selectSessionData`. During `performSignIn`, sessions\n * are written sequentially with the primary SRP first.\n *\n * @param state - The AuthenticationController state.\n * @returns The primary session login response, or `undefined` if unavailable.\n */\nconst selectSessionData = (\n  state: AuthenticationControllerState,\n): LoginResponse | undefined => {\n  const srpSessionData = selectSrpSessionData(state);\n  if (!srpSessionData) {\n    return undefined;\n  }\n  const firstEntry = Object.entries(srpSessionData)[0];\n  return firstEntry?.[1];\n};\n\n/**\n * Selects the best-effort cached canonical profile ID.\n *\n * Reads from the primary SRP session in `srpSessionData` without triggering\n * login or unlock checks. Suitable for non-security consumers.\n *\n * Empty string is treated as missing (`undefined`) because the controller sets\n * `canonicalProfileId` to `''` when invalidating a session\n * (`#invalidateSrpSession`).\n *\n * Staleness: same as a valid cached `getSessionProfile()` result. Cross-device\n * pairing can change the canonical without updating this cache until the next\n * login or pair. Use `refreshCanonicalProfileId()` when freshness is required.\n *\n * @param state - The AuthenticationController state.\n * @returns The cached canonical profile ID, or `undefined` if unavailable.\n */\nconst selectCanonicalProfileId = (\n  state: AuthenticationControllerState,\n): string | undefined => {\n  const canonicalProfileId =\n    selectSessionData(state)?.profile?.canonicalProfileId;\n  // `''` is used by `#invalidateSrpSession` to mark the session as invalid.\n  if (!canonicalProfileId) {\n    return undefined;\n  }\n  return canonicalProfileId;\n};\n\n/**\n * Selectors for AuthenticationController state.\n * These take controller state (not client `RootState`) and can be composed\n * with Redux `createSelector` in clients.\n */\nexport const authenticationControllerSelectors = {\n  selectSrpSessionData,\n  selectSessionData,\n  selectCanonicalProfileId,\n};\n"]}

package/dist/controllers/authentication/selectors.d.cts

@@ -0,0 +1,13 @@
+import type { LoginResponse } from "../../sdk/index.cjs";
+import type { AuthenticationControllerState } from "./AuthenticationController.cjs";
+/**
+ * Selectors for AuthenticationController state.
+ * These take controller state (not client `RootState`) and can be composed
+ * with Redux `createSelector` in clients.
+ */
+export declare const authenticationControllerSelectors: {
+    selectSrpSessionData: (state: AuthenticationControllerState) => AuthenticationControllerState['srpSessionData'];
+    selectSessionData: (state: AuthenticationControllerState) => LoginResponse | undefined;
+    selectCanonicalProfileId: (state: AuthenticationControllerState) => string | undefined;
+};
+//# sourceMappingURL=selectors.d.cts.map

package/dist/controllers/authentication/selectors.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"selectors.d.cts","sourceRoot":"","sources":["../../../src/controllers/authentication/selectors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,4BAA2B;AACxD,OAAO,KAAK,EAAE,6BAA6B,EAAE,uCAAsC;AA8DnF;;;;GAIG;AACH,eAAO,MAAM,iCAAiC;kCA1DrC,6BAA6B,KACnC,6BAA6B,CAAC,gBAAgB,CAAC;+BAazC,6BAA6B,KACnC,aAAa,GAAG,SAAS;sCA2BnB,6BAA6B,KACnC,MAAM,GAAG,SAAS;CAmBpB,CAAC"}

package/dist/controllers/authentication/selectors.d.mts

@@ -0,0 +1,13 @@
+import type { LoginResponse } from "../../sdk/index.mjs";
+import type { AuthenticationControllerState } from "./AuthenticationController.mjs";
+/**
+ * Selectors for AuthenticationController state.
+ * These take controller state (not client `RootState`) and can be composed
+ * with Redux `createSelector` in clients.
+ */
+export declare const authenticationControllerSelectors: {
+    selectSrpSessionData: (state: AuthenticationControllerState) => AuthenticationControllerState['srpSessionData'];
+    selectSessionData: (state: AuthenticationControllerState) => LoginResponse | undefined;
+    selectCanonicalProfileId: (state: AuthenticationControllerState) => string | undefined;
+};
+//# sourceMappingURL=selectors.d.mts.map

package/dist/controllers/authentication/selectors.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"selectors.d.mts","sourceRoot":"","sources":["../../../src/controllers/authentication/selectors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,4BAA2B;AACxD,OAAO,KAAK,EAAE,6BAA6B,EAAE,uCAAsC;AA8DnF;;;;GAIG;AACH,eAAO,MAAM,iCAAiC;kCA1DrC,6BAA6B,KACnC,6BAA6B,CAAC,gBAAgB,CAAC;+BAazC,6BAA6B,KACnC,aAAa,GAAG,SAAS;sCA2BnB,6BAA6B,KACnC,MAAM,GAAG,SAAS;CAmBpB,CAAC"}

package/dist/controllers/authentication/selectors.mjs

@@ -0,0 +1,61 @@
+/**
+ * Selects the raw SRP session map from AuthenticationController state.
+ *
+ * @param state - The AuthenticationController state.
+ * @returns The `srpSessionData` map, or `undefined` when not signed in / cleared.
+ */
+const selectSrpSessionData = (state) => state.srpSessionData;
+/**
+ * Selects the primary (first) SRP session entry from cached `srpSessionData`.
+ *
+ * Uses the first `Object.entries` value — the same "primary / first written"
+ * convention as extension `selectSessionData`. During `performSignIn`, sessions
+ * are written sequentially with the primary SRP first.
+ *
+ * @param state - The AuthenticationController state.
+ * @returns The primary session login response, or `undefined` if unavailable.
+ */
+const selectSessionData = (state) => {
+    const srpSessionData = selectSrpSessionData(state);
+    if (!srpSessionData) {
+        return undefined;
+    }
+    const firstEntry = Object.entries(srpSessionData)[0];
+    return firstEntry?.[1];
+};
+/**
+ * Selects the best-effort cached canonical profile ID.
+ *
+ * Reads from the primary SRP session in `srpSessionData` without triggering
+ * login or unlock checks. Suitable for non-security consumers.
+ *
+ * Empty string is treated as missing (`undefined`) because the controller sets
+ * `canonicalProfileId` to `''` when invalidating a session
+ * (`#invalidateSrpSession`).
+ *
+ * Staleness: same as a valid cached `getSessionProfile()` result. Cross-device
+ * pairing can change the canonical without updating this cache until the next
+ * login or pair. Use `refreshCanonicalProfileId()` when freshness is required.
+ *
+ * @param state - The AuthenticationController state.
+ * @returns The cached canonical profile ID, or `undefined` if unavailable.
+ */
+const selectCanonicalProfileId = (state) => {
+    const canonicalProfileId = selectSessionData(state)?.profile?.canonicalProfileId;
+    // `''` is used by `#invalidateSrpSession` to mark the session as invalid.
+    if (!canonicalProfileId) {
+        return undefined;
+    }
+    return canonicalProfileId;
+};
+/**
+ * Selectors for AuthenticationController state.
+ * These take controller state (not client `RootState`) and can be composed
+ * with Redux `createSelector` in clients.
+ */
+export const authenticationControllerSelectors = {
+    selectSrpSessionData,
+    selectSessionData,
+    selectCanonicalProfileId,
+};
+//# sourceMappingURL=selectors.mjs.map

package/dist/controllers/authentication/selectors.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"selectors.mjs","sourceRoot":"","sources":["../../../src/controllers/authentication/selectors.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,MAAM,oBAAoB,GAAG,CAC3B,KAAoC,EACa,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC;AAE3E;;;;;;;;;GASG;AACH,MAAM,iBAAiB,GAAG,CACxB,KAAoC,EACT,EAAE;IAC7B,MAAM,cAAc,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;IACnD,IAAI,CAAC,cAAc,EAAE,CAAC;QACpB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,OAAO,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;AACzB,CAAC,CAAC;AAEF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,wBAAwB,GAAG,CAC/B,KAAoC,EAChB,EAAE;IACtB,MAAM,kBAAkB,GACtB,iBAAiB,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,kBAAkB,CAAC;IACxD,0EAA0E;IAC1E,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACxB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,kBAAkB,CAAC;AAC5B,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC/C,oBAAoB;IACpB,iBAAiB;IACjB,wBAAwB;CACzB,CAAC","sourcesContent":["import type { LoginResponse } from '../../sdk/index.js';\nimport type { AuthenticationControllerState } from './AuthenticationController.js';\n\n/**\n * Selects the raw SRP session map from AuthenticationController state.\n *\n * @param state - The AuthenticationController state.\n * @returns The `srpSessionData` map, or `undefined` when not signed in / cleared.\n */\nconst selectSrpSessionData = (\n  state: AuthenticationControllerState,\n): AuthenticationControllerState['srpSessionData'] => state.srpSessionData;\n\n/**\n * Selects the primary (first) SRP session entry from cached `srpSessionData`.\n *\n * Uses the first `Object.entries` value — the same \"primary / first written\"\n * convention as extension `selectSessionData`. During `performSignIn`, sessions\n * are written sequentially with the primary SRP first.\n *\n * @param state - The AuthenticationController state.\n * @returns The primary session login response, or `undefined` if unavailable.\n */\nconst selectSessionData = (\n  state: AuthenticationControllerState,\n): LoginResponse | undefined => {\n  const srpSessionData = selectSrpSessionData(state);\n  if (!srpSessionData) {\n    return undefined;\n  }\n  const firstEntry = Object.entries(srpSessionData)[0];\n  return firstEntry?.[1];\n};\n\n/**\n * Selects the best-effort cached canonical profile ID.\n *\n * Reads from the primary SRP session in `srpSessionData` without triggering\n * login or unlock checks. Suitable for non-security consumers.\n *\n * Empty string is treated as missing (`undefined`) because the controller sets\n * `canonicalProfileId` to `''` when invalidating a session\n * (`#invalidateSrpSession`).\n *\n * Staleness: same as a valid cached `getSessionProfile()` result. Cross-device\n * pairing can change the canonical without updating this cache until the next\n * login or pair. Use `refreshCanonicalProfileId()` when freshness is required.\n *\n * @param state - The AuthenticationController state.\n * @returns The cached canonical profile ID, or `undefined` if unavailable.\n */\nconst selectCanonicalProfileId = (\n  state: AuthenticationControllerState,\n): string | undefined => {\n  const canonicalProfileId =\n    selectSessionData(state)?.profile?.canonicalProfileId;\n  // `''` is used by `#invalidateSrpSession` to mark the session as invalid.\n  if (!canonicalProfileId) {\n    return undefined;\n  }\n  return canonicalProfileId;\n};\n\n/**\n * Selectors for AuthenticationController state.\n * These take controller state (not client `RootState`) and can be composed\n * with Redux `createSelector` in clients.\n */\nexport const authenticationControllerSelectors = {\n  selectSrpSessionData,\n  selectSessionData,\n  selectCanonicalProfileId,\n};\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@metamask-previews/profile-sync-controller",
-  "version": "28.3.0-preview-0d2cbf546",
+  "version": "28.3.0-preview-064aea96d",
   "description": "The profile sync helps developers synchronize data across multiple clients and devices in a privacy-preserving way. All data saved in the user storage database is encrypted client-side to preserve privacy. The user storage provides a modular design, giving developers the flexibility to construct and manage their storage spaces in a way that best suits their needs",
   "keywords": [
     "Ethereum",