@metamask-previews/profile-sync-controller 29.0.0-preview-3866c0ff1 → 29.0.0-preview-e3275932a

package/dist/sdk/utils/eip-6963-metamask-provider.cjs

@@ -0,0 +1,70 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getMetaMaskProviderEIP6963 = exports.metamaskClientsRdns = void 0;
+exports.metamaskClientsRdns = {
+    main: 'io.metamask',
+    flask: 'io.metamask.flask',
+    institutional: 'io.metamask.mmi',
+};
+// Cache, as when the function is recalled, we can reuse instead of continue waiting
+const providerCache = {};
+/**
+ * This uses EIP6963 to find all metamask accounts and returns the first matching provider
+ * the consumer requests (main, flask, institutional, or any)
+ *
+ * @param type - the MetaMask Wallet type (main, flask, institutional, or any)
+ * @returns a ethers provider so you can make requests to that specific wallet
+ */
+function getMetaMaskProviderEIP6963(type = 'any') {
+    return new Promise((resolve) => {
+        if (type !== 'any' && exports.metamaskClientsRdns[type] === undefined) {
+            resolve(null);
+            return;
+        }
+        const cachedProvider = providerCache[type];
+        if (cachedProvider) {
+            resolve(cachedProvider);
+            return;
+        }
+        const providers = [];
+        const handleProviderEvent = (event) => {
+            const typedEvent = event;
+            const providerDetail = typedEvent?.detail;
+            if (providerDetail?.provider && providerDetail?.info?.rdns) {
+                providers.push({
+                    rdns: providerDetail?.info?.rdns,
+                    provider: providerDetail?.provider,
+                });
+            }
+        };
+        window.addEventListener('eip6963:announceProvider', handleProviderEvent);
+        window.dispatchEvent(new Event('eip6963:requestProvider'));
+        /**
+         * It may take some time for the events to be emitted from the different wallets.
+         * So waiting a small period of time before we use the collected events.
+         */
+        setTimeout(() => {
+            // remove attached listener
+            window.removeEventListener('eip6963:announceProvider', handleProviderEvent);
+            let provider;
+            if (type === 'any') {
+                // return the first MM client we find
+                const metamaskClients = Object.values(exports.metamaskClientsRdns);
+                provider =
+                    providers.find((p) => metamaskClients.includes(p.rdns))?.provider ??
+                        null;
+            }
+            else {
+                const metamaskRdns = exports.metamaskClientsRdns[type];
+                provider =
+                    providers.find((p) => p.rdns === metamaskRdns)?.provider ?? null;
+            }
+            if (provider) {
+                providerCache[type] = provider;
+            }
+            return resolve(provider);
+        }, 100);
+    });
+}
+exports.getMetaMaskProviderEIP6963 = getMetaMaskProviderEIP6963;
+//# sourceMappingURL=eip-6963-metamask-provider.cjs.map

package/dist/sdk/utils/eip-6963-metamask-provider.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"eip-6963-metamask-provider.cjs","sourceRoot":"","sources":["../../../src/sdk/utils/eip-6963-metamask-provider.ts"],"names":[],"mappings":";;;AASa,QAAA,mBAAmB,GAAG;IACjC,IAAI,EAAE,aAAa;IACnB,KAAK,EAAE,mBAAmB;IAC1B,aAAa,EAAE,iBAAiB;CACjC,CAAC;AAMF,oFAAoF;AACpF,MAAM,aAAa,GAAyD,EAAE,CAAC;AAE/E;;;;;;GAMG;AACH,SAAgB,0BAA0B,CACxC,OAA2B,KAAK;IAEhC,OAAO,IAAI,OAAO,CAAyB,CAAC,OAAO,EAAE,EAAE;QACrD,IAAI,IAAI,KAAK,KAAK,IAAI,2BAAmB,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC,CAAC;YACd,OAAO;QACT,CAAC;QAED,MAAM,cAAc,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO,CAAC,cAAc,CAAC,CAAC;YACxB,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAkD,EAAE,CAAC;QAEpE,MAAM,mBAAmB,GAAG,CAAC,KAAc,EAAE,EAAE;YAC7C,MAAM,UAAU,GAAG,KAAiD,CAAC;YACrE,MAAM,cAAc,GAAG,UAAU,EAAE,MAAM,CAAC;YAC1C,IAAI,cAAc,EAAE,QAAQ,IAAI,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBAC3D,SAAS,CAAC,IAAI,CAAC;oBACb,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI;oBAChC,QAAQ,EAAE,cAAc,EAAE,QAAQ;iBACnC,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,CAAC,gBAAgB,CAAC,0BAA0B,EAAE,mBAAmB,CAAC,CAAC;QACzE,MAAM,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;QAE3D;;;WAGG;QACH,UAAU,CAAC,GAAG,EAAE;YACd,2BAA2B;YAC3B,MAAM,CAAC,mBAAmB,CACxB,0BAA0B,EAC1B,mBAAmB,CACpB,CAAC;YAEF,IAAI,QAAgC,CAAC;YACrC,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBACnB,qCAAqC;gBACrC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,2BAAmB,CAAC,CAAC;gBAC3D,QAAQ;oBACN,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ;wBACjE,IAAI,CAAC;YACT,CAAC;iBAAM,CAAC;gBACN,MAAM,YAAY,GAAG,2BAAmB,CAAC,IAAI,CAAC,CAAC;gBAC/C,QAAQ;oBACN,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,EAAE,QAAQ,IAAI,IAAI,CAAC;YACrE,CAAC;YAED,IAAI,QAAQ,EAAE,CAAC;gBACb,aAAa,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;YACjC,CAAC;YACD,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC,EAAE,GAAG,CAAC,CAAC;IACV,CAAC,CAAC,CAAC;AACL,CAAC;AA7DD,gEA6DC","sourcesContent":["import type { Eip1193Provider } from 'ethers';\n\n// We can isolate and create a metamask function/closure\nexport type AnnounceProviderEventDetail = {\n  info?: { rdns?: string };\n  provider?: Eip1193Provider;\n};\nexport type AnnounceProviderEvent = CustomEvent<AnnounceProviderEventDetail>;\n\nexport const metamaskClientsRdns = {\n  main: 'io.metamask',\n  flask: 'io.metamask.flask',\n  institutional: 'io.metamask.mmi',\n};\n\nexport type MetamaskClientRdnsKey = keyof typeof metamaskClientsRdns;\n\ntype MetaMaskClientType = 'any' | MetamaskClientRdnsKey;\n\n// Cache, as when the function is recalled, we can reuse instead of continue waiting\nconst providerCache: Partial<Record<MetaMaskClientType, Eip1193Provider>> = {};\n\n/**\n * This uses EIP6963 to find all metamask accounts and returns the first matching provider\n * the consumer requests (main, flask, institutional, or any)\n *\n * @param type - the MetaMask Wallet type (main, flask, institutional, or any)\n * @returns a ethers provider so you can make requests to that specific wallet\n */\nexport function getMetaMaskProviderEIP6963(\n  type: MetaMaskClientType = 'any',\n): Promise<Eip1193Provider | null> {\n  return new Promise<Eip1193Provider | null>((resolve) => {\n    if (type !== 'any' && metamaskClientsRdns[type] === undefined) {\n      resolve(null);\n      return;\n    }\n\n    const cachedProvider = providerCache[type];\n    if (cachedProvider) {\n      resolve(cachedProvider);\n      return;\n    }\n\n    const providers: { rdns: string; provider: Eip1193Provider }[] = [];\n\n    const handleProviderEvent = (event: unknown) => {\n      const typedEvent = event as CustomEvent<AnnounceProviderEventDetail>;\n      const providerDetail = typedEvent?.detail;\n      if (providerDetail?.provider && providerDetail?.info?.rdns) {\n        providers.push({\n          rdns: providerDetail?.info?.rdns,\n          provider: providerDetail?.provider,\n        });\n      }\n    };\n\n    window.addEventListener('eip6963:announceProvider', handleProviderEvent);\n    window.dispatchEvent(new Event('eip6963:requestProvider'));\n\n    /**\n     * It may take some time for the events to be emitted from the different wallets.\n     * So waiting a small period of time before we use the collected events.\n     */\n    setTimeout(() => {\n      // remove attached listener\n      window.removeEventListener(\n        'eip6963:announceProvider',\n        handleProviderEvent,\n      );\n\n      let provider: Eip1193Provider | null;\n      if (type === 'any') {\n        // return the first MM client we find\n        const metamaskClients = Object.values(metamaskClientsRdns);\n        provider =\n          providers.find((p) => metamaskClients.includes(p.rdns))?.provider ??\n          null;\n      } else {\n        const metamaskRdns = metamaskClientsRdns[type];\n        provider =\n          providers.find((p) => p.rdns === metamaskRdns)?.provider ?? null;\n      }\n\n      if (provider) {\n        providerCache[type] = provider;\n      }\n      return resolve(provider);\n    }, 100);\n  });\n}\n"]}

package/dist/sdk/utils/{eip-6963-metamask-provider.d.ts → eip-6963-metamask-provider.d.cts}

@@ -1,4 +1,4 @@
-import type { Eip1193Provider } from 'ethers';
+import type { Eip1193Provider } from "ethers";
 export type AnnounceProviderEventDetail = {
     info?: {
         rdns?: string;
@@ -22,4 +22,4 @@ type MetaMaskClientType = 'any' | MetamaskClientRdnsKey;
  */
 export declare function getMetaMaskProviderEIP6963(type?: MetaMaskClientType): Promise<Eip1193Provider | null>;
 export {};
-//# sourceMappingURL=eip-6963-metamask-provider.d.ts.map
+//# sourceMappingURL=eip-6963-metamask-provider.d.cts.map

package/dist/sdk/utils/eip-6963-metamask-provider.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eip-6963-metamask-provider.d.cts","sourceRoot":"","sources":["../../../src/sdk/utils/eip-6963-metamask-provider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe;AAG9C,MAAM,MAAM,2BAA2B,GAAG;IACxC,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACzB,QAAQ,CAAC,EAAE,eAAe,CAAC;CAC5B,CAAC;AACF,MAAM,MAAM,qBAAqB,GAAG,WAAW,CAAC,2BAA2B,CAAC,CAAC;AAE7E,eAAO,MAAM,mBAAmB;;;;CAI/B,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG,MAAM,OAAO,mBAAmB,CAAC;AAErE,KAAK,kBAAkB,GAAG,KAAK,GAAG,qBAAqB,CAAC;AAKxD;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,GAAE,kBAA0B,GAC/B,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CA2DjC"}

package/dist/sdk/utils/eip-6963-metamask-provider.d.mts

@@ -0,0 +1,25 @@
+import type { Eip1193Provider } from "ethers";
+export type AnnounceProviderEventDetail = {
+    info?: {
+        rdns?: string;
+    };
+    provider?: Eip1193Provider;
+};
+export type AnnounceProviderEvent = CustomEvent<AnnounceProviderEventDetail>;
+export declare const metamaskClientsRdns: {
+    main: string;
+    flask: string;
+    institutional: string;
+};
+export type MetamaskClientRdnsKey = keyof typeof metamaskClientsRdns;
+type MetaMaskClientType = 'any' | MetamaskClientRdnsKey;
+/**
+ * This uses EIP6963 to find all metamask accounts and returns the first matching provider
+ * the consumer requests (main, flask, institutional, or any)
+ *
+ * @param type - the MetaMask Wallet type (main, flask, institutional, or any)
+ * @returns a ethers provider so you can make requests to that specific wallet
+ */
+export declare function getMetaMaskProviderEIP6963(type?: MetaMaskClientType): Promise<Eip1193Provider | null>;
+export {};
+//# sourceMappingURL=eip-6963-metamask-provider.d.mts.map

package/dist/sdk/utils/eip-6963-metamask-provider.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eip-6963-metamask-provider.d.mts","sourceRoot":"","sources":["../../../src/sdk/utils/eip-6963-metamask-provider.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe;AAG9C,MAAM,MAAM,2BAA2B,GAAG;IACxC,IAAI,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACzB,QAAQ,CAAC,EAAE,eAAe,CAAC;CAC5B,CAAC;AACF,MAAM,MAAM,qBAAqB,GAAG,WAAW,CAAC,2BAA2B,CAAC,CAAC;AAE7E,eAAO,MAAM,mBAAmB;;;;CAI/B,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG,MAAM,OAAO,mBAAmB,CAAC;AAErE,KAAK,kBAAkB,GAAG,KAAK,GAAG,qBAAqB,CAAC;AAKxD;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,GAAE,kBAA0B,GAC/B,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CA2DjC"}

package/dist/sdk/utils/{eip-6963-metamask-provider.js → eip-6963-metamask-provider.mjs}

@@ -63,4 +63,4 @@ export function getMetaMaskProviderEIP6963(type = 'any') {
         }, 100);
     });
 }
-//# sourceMappingURL=eip-6963-metamask-provider.js.map
+//# sourceMappingURL=eip-6963-metamask-provider.mjs.map

package/dist/sdk/utils/eip-6963-metamask-provider.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"eip-6963-metamask-provider.mjs","sourceRoot":"","sources":["../../../src/sdk/utils/eip-6963-metamask-provider.ts"],"names":[],"mappings":"AASA,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,IAAI,EAAE,aAAa;IACnB,KAAK,EAAE,mBAAmB;IAC1B,aAAa,EAAE,iBAAiB;CACjC,CAAC;AAMF,oFAAoF;AACpF,MAAM,aAAa,GAAyD,EAAE,CAAC;AAE/E;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CACxC,OAA2B,KAAK;IAEhC,OAAO,IAAI,OAAO,CAAyB,CAAC,OAAO,EAAE,EAAE;QACrD,IAAI,IAAI,KAAK,KAAK,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC,CAAC;YACd,OAAO;QACT,CAAC;QAED,MAAM,cAAc,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO,CAAC,cAAc,CAAC,CAAC;YACxB,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAkD,EAAE,CAAC;QAEpE,MAAM,mBAAmB,GAAG,CAAC,KAAc,EAAE,EAAE;YAC7C,MAAM,UAAU,GAAG,KAAiD,CAAC;YACrE,MAAM,cAAc,GAAG,UAAU,EAAE,MAAM,CAAC;YAC1C,IAAI,cAAc,EAAE,QAAQ,IAAI,cAAc,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;gBAC3D,SAAS,CAAC,IAAI,CAAC;oBACb,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,IAAI;oBAChC,QAAQ,EAAE,cAAc,EAAE,QAAQ;iBACnC,CAAC,CAAC;YACL,CAAC;QACH,CAAC,CAAC;QAEF,MAAM,CAAC,gBAAgB,CAAC,0BAA0B,EAAE,mBAAmB,CAAC,CAAC;QACzE,MAAM,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;QAE3D;;;WAGG;QACH,UAAU,CAAC,GAAG,EAAE;YACd,2BAA2B;YAC3B,MAAM,CAAC,mBAAmB,CACxB,0BAA0B,EAC1B,mBAAmB,CACpB,CAAC;YAEF,IAAI,QAAgC,CAAC;YACrC,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBACnB,qCAAqC;gBACrC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;gBAC3D,QAAQ;oBACN,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ;wBACjE,IAAI,CAAC;YACT,CAAC;iBAAM,CAAC;gBACN,MAAM,YAAY,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;gBAC/C,QAAQ;oBACN,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,EAAE,QAAQ,IAAI,IAAI,CAAC;YACrE,CAAC;YAED,IAAI,QAAQ,EAAE,CAAC;gBACb,aAAa,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC;YACjC,CAAC;YACD,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC3B,CAAC,EAAE,GAAG,CAAC,CAAC;IACV,CAAC,CAAC,CAAC;AACL,CAAC","sourcesContent":["import type { Eip1193Provider } from 'ethers';\n\n// We can isolate and create a metamask function/closure\nexport type AnnounceProviderEventDetail = {\n  info?: { rdns?: string };\n  provider?: Eip1193Provider;\n};\nexport type AnnounceProviderEvent = CustomEvent<AnnounceProviderEventDetail>;\n\nexport const metamaskClientsRdns = {\n  main: 'io.metamask',\n  flask: 'io.metamask.flask',\n  institutional: 'io.metamask.mmi',\n};\n\nexport type MetamaskClientRdnsKey = keyof typeof metamaskClientsRdns;\n\ntype MetaMaskClientType = 'any' | MetamaskClientRdnsKey;\n\n// Cache, as when the function is recalled, we can reuse instead of continue waiting\nconst providerCache: Partial<Record<MetaMaskClientType, Eip1193Provider>> = {};\n\n/**\n * This uses EIP6963 to find all metamask accounts and returns the first matching provider\n * the consumer requests (main, flask, institutional, or any)\n *\n * @param type - the MetaMask Wallet type (main, flask, institutional, or any)\n * @returns a ethers provider so you can make requests to that specific wallet\n */\nexport function getMetaMaskProviderEIP6963(\n  type: MetaMaskClientType = 'any',\n): Promise<Eip1193Provider | null> {\n  return new Promise<Eip1193Provider | null>((resolve) => {\n    if (type !== 'any' && metamaskClientsRdns[type] === undefined) {\n      resolve(null);\n      return;\n    }\n\n    const cachedProvider = providerCache[type];\n    if (cachedProvider) {\n      resolve(cachedProvider);\n      return;\n    }\n\n    const providers: { rdns: string; provider: Eip1193Provider }[] = [];\n\n    const handleProviderEvent = (event: unknown) => {\n      const typedEvent = event as CustomEvent<AnnounceProviderEventDetail>;\n      const providerDetail = typedEvent?.detail;\n      if (providerDetail?.provider && providerDetail?.info?.rdns) {\n        providers.push({\n          rdns: providerDetail?.info?.rdns,\n          provider: providerDetail?.provider,\n        });\n      }\n    };\n\n    window.addEventListener('eip6963:announceProvider', handleProviderEvent);\n    window.dispatchEvent(new Event('eip6963:requestProvider'));\n\n    /**\n     * It may take some time for the events to be emitted from the different wallets.\n     * So waiting a small period of time before we use the collected events.\n     */\n    setTimeout(() => {\n      // remove attached listener\n      window.removeEventListener(\n        'eip6963:announceProvider',\n        handleProviderEvent,\n      );\n\n      let provider: Eip1193Provider | null;\n      if (type === 'any') {\n        // return the first MM client we find\n        const metamaskClients = Object.values(metamaskClientsRdns);\n        provider =\n          providers.find((p) => metamaskClients.includes(p.rdns))?.provider ??\n          null;\n      } else {\n        const metamaskRdns = metamaskClientsRdns[type];\n        provider =\n          providers.find((p) => p.rdns === metamaskRdns)?.provider ?? null;\n      }\n\n      if (provider) {\n        providerCache[type] = provider;\n      }\n      return resolve(provider);\n    }, 100);\n  });\n}\n"]}

package/dist/sdk/utils/messaging-signing-snap-requests.cjs

@@ -0,0 +1,96 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.assertMessageStartsWithMetamask = exports.MESSAGE_SIGNING_SNAP = exports.isSnapConnected = exports.getSnaps = exports.connectSnap = exports.SNAP_ORIGIN = void 0;
+exports.SNAP_ORIGIN = 'npm:@metamask/message-signing-snap';
+/**
+ * Requests Connection to the Message Signing Snap
+ *
+ * @param provider - MetaMask Wallet Provider
+ * @returns snap connect result
+ */
+async function connectSnap(provider) {
+    const result = await provider.request({
+        method: 'wallet_requestSnaps',
+        params: {
+            [exports.SNAP_ORIGIN]: {},
+        },
+    });
+    return result;
+}
+exports.connectSnap = connectSnap;
+/**
+ * Gets Snaps from a MetaMask Wallet
+ *
+ * @param provider - MetaMask Wallet Provider
+ * @returns All currently installed snaps.
+ */
+async function getSnaps(provider) {
+    const result = await provider.request({
+        method: 'wallet_getSnaps',
+    });
+    return result;
+}
+exports.getSnaps = getSnaps;
+/**
+ * Check if snap is connected
+ *
+ * @param provider - MetaMask Wallet Provider
+ * @returns if snap is connected
+ */
+async function isSnapConnected(provider) {
+    try {
+        const snaps = await getSnaps(provider);
+        if (!snaps) {
+            return false;
+        }
+        return Object.keys(snaps).includes(exports.SNAP_ORIGIN);
+    }
+    catch (e) {
+        console.error('Failed to determine if snap is connected', e);
+        return false;
+    }
+}
+exports.isSnapConnected = isSnapConnected;
+exports.MESSAGE_SIGNING_SNAP = {
+    async getPublicKey(provider, entropySourceId) {
+        const publicKey = await provider.request({
+            method: 'wallet_invokeSnap',
+            params: {
+                snapId: exports.SNAP_ORIGIN,
+                request: {
+                    method: 'getPublicKey',
+                    ...(entropySourceId ? { params: { entropySourceId } } : {}),
+                },
+            },
+        });
+        return publicKey;
+    },
+    async signMessage(provider, message, entropySourceId) {
+        const signedMessage = await provider?.request({
+            method: 'wallet_invokeSnap',
+            params: {
+                snapId: exports.SNAP_ORIGIN,
+                request: {
+                    method: 'signMessage',
+                    params: {
+                        message,
+                        ...(entropySourceId ? { entropySourceId } : {}),
+                    },
+                },
+            },
+        });
+        return signedMessage;
+    },
+};
+/**
+ * Asserts that a message starts with "metamask:"
+ *
+ * @param message - The message to check.
+ */
+function assertMessageStartsWithMetamask(message) {
+    if (!message.startsWith('metamask:')) {
+        throw new Error('Message must start with "metamask:"');
+    }
+}
+exports.assertMessageStartsWithMetamask = assertMessageStartsWithMetamask;
+//# sourceMappingURL=messaging-signing-snap-requests.cjs.map

package/dist/sdk/utils/messaging-signing-snap-requests.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"messaging-signing-snap-requests.cjs","sourceRoot":"","sources":["../../../src/sdk/utils/messaging-signing-snap-requests.ts"],"names":[],"mappings":";;;AAUa,QAAA,WAAW,GAAG,oCAAoC,CAAC;AAEhE;;;;;GAKG;AACI,KAAK,UAAU,WAAW,CAAC,QAAyB;IACzD,MAAM,MAAM,GAAW,MAAM,QAAQ,CAAC,OAAO,CAAC;QAC5C,MAAM,EAAE,qBAAqB;QAC7B,MAAM,EAAE;YACN,CAAC,mBAAW,CAAC,EAAE,EAAE;SAClB;KACF,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AATD,kCASC;AAED;;;;;GAKG;AACI,KAAK,UAAU,QAAQ,CAC5B,QAAyB;IAEzB,MAAM,MAAM,GAAqB,MAAM,QAAQ,CAAC,OAAO,CAAC;QACtD,MAAM,EAAE,iBAAiB;KAC1B,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AARD,4BAQC;AAED;;;;;GAKG;AACI,KAAK,UAAU,eAAe,CACnC,QAAyB;IAEzB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,mBAAW,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;QAC7D,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAbD,0CAaC;AAEY,QAAA,oBAAoB,GAAG;IAClC,KAAK,CAAC,YAAY,CAAC,QAAyB,EAAE,eAAwB;QACpE,MAAM,SAAS,GAAW,MAAM,QAAQ,CAAC,OAAO,CAAC;YAC/C,MAAM,EAAE,mBAAmB;YAC3B,MAAM,EAAE;gBACN,MAAM,EAAE,mBAAW;gBACnB,OAAO,EAAE;oBACP,MAAM,EAAE,cAAc;oBACtB,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC5D;aACF;SACF,CAAC,CAAC;QAEH,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,WAAW,CACf,QAAyB,EACzB,OAA6B,EAC7B,eAAwB;QAExB,MAAM,aAAa,GAAW,MAAM,QAAQ,EAAE,OAAO,CAAC;YACpD,MAAM,EAAE,mBAAmB;YAC3B,MAAM,EAAE;gBACN,MAAM,EAAE,mBAAW;gBACnB,OAAO,EAAE;oBACP,MAAM,EAAE,aAAa;oBACrB,MAAM,EAAE;wBACN,OAAO;wBACP,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAChD;iBACF;aACF;SACF,CAAC,CAAC;QAEH,OAAO,aAAa,CAAC;IACvB,CAAC;CACF,CAAC;AAEF;;;;GAIG;AACH,SAAgB,+BAA+B,CAC7C,OAAe;IAEf,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAND,0EAMC","sourcesContent":["import type { Eip1193Provider } from 'ethers';\n\nexport type Snap = {\n  permissionName: string;\n  id: string;\n  version: string;\n  initialPermissions: Record<string, unknown>;\n};\nexport type GetSnapsResponse = Record<string, Snap>;\n\nexport const SNAP_ORIGIN = 'npm:@metamask/message-signing-snap';\n\n/**\n * Requests Connection to the Message Signing Snap\n *\n * @param provider - MetaMask Wallet Provider\n * @returns snap connect result\n */\nexport async function connectSnap(provider: Eip1193Provider): Promise<string> {\n  const result: string = await provider.request({\n    method: 'wallet_requestSnaps',\n    params: {\n      [SNAP_ORIGIN]: {},\n    },\n  });\n\n  return result;\n}\n\n/**\n * Gets Snaps from a MetaMask Wallet\n *\n * @param provider - MetaMask Wallet Provider\n * @returns All currently installed snaps.\n */\nexport async function getSnaps(\n  provider: Eip1193Provider,\n): Promise<GetSnapsResponse> {\n  const result: GetSnapsResponse = await provider.request({\n    method: 'wallet_getSnaps',\n  });\n\n  return result;\n}\n\n/**\n * Check if snap is connected\n *\n * @param provider - MetaMask Wallet Provider\n * @returns if snap is connected\n */\nexport async function isSnapConnected(\n  provider: Eip1193Provider,\n): Promise<boolean> {\n  try {\n    const snaps = await getSnaps(provider);\n    if (!snaps) {\n      return false;\n    }\n    return Object.keys(snaps).includes(SNAP_ORIGIN);\n  } catch (e) {\n    console.error('Failed to determine if snap is connected', e);\n    return false;\n  }\n}\n\nexport const MESSAGE_SIGNING_SNAP = {\n  async getPublicKey(provider: Eip1193Provider, entropySourceId?: string) {\n    const publicKey: string = await provider.request({\n      method: 'wallet_invokeSnap',\n      params: {\n        snapId: SNAP_ORIGIN,\n        request: {\n          method: 'getPublicKey',\n          ...(entropySourceId ? { params: { entropySourceId } } : {}),\n        },\n      },\n    });\n\n    return publicKey;\n  },\n\n  async signMessage(\n    provider: Eip1193Provider,\n    message: `metamask:${string}`,\n    entropySourceId?: string,\n  ) {\n    const signedMessage: string = await provider?.request({\n      method: 'wallet_invokeSnap',\n      params: {\n        snapId: SNAP_ORIGIN,\n        request: {\n          method: 'signMessage',\n          params: {\n            message,\n            ...(entropySourceId ? { entropySourceId } : {}),\n          },\n        },\n      },\n    });\n\n    return signedMessage;\n  },\n};\n\n/**\n * Asserts that a message starts with \"metamask:\"\n *\n * @param message - The message to check.\n */\nexport function assertMessageStartsWithMetamask(\n  message: string,\n): asserts message is `metamask:${string}` {\n  if (!message.startsWith('metamask:')) {\n    throw new Error('Message must start with \"metamask:\"');\n  }\n}\n"]}

package/dist/sdk/utils/{messaging-signing-snap-requests.d.ts → messaging-signing-snap-requests.d.cts}

@@ -1,4 +1,4 @@
-import type { Eip1193Provider } from 'ethers';
+import type { Eip1193Provider } from "ethers";
 export type Snap = {
     permissionName: string;
     id: string;
@@ -38,4 +38,4 @@ export declare const MESSAGE_SIGNING_SNAP: {
  * @param message - The message to check.
  */
 export declare function assertMessageStartsWithMetamask(message: string): asserts message is `metamask:${string}`;
-//# sourceMappingURL=messaging-signing-snap-requests.d.ts.map
+//# sourceMappingURL=messaging-signing-snap-requests.d.cts.map

package/dist/sdk/utils/messaging-signing-snap-requests.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"messaging-signing-snap-requests.d.cts","sourceRoot":"","sources":["../../../src/sdk/utils/messaging-signing-snap-requests.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe;AAE9C,MAAM,MAAM,IAAI,GAAG;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C,CAAC;AACF,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AAEpD,eAAO,MAAM,WAAW,uCAAuC,CAAC;AAEhE;;;;;GAKG;AACH,wBAAsB,WAAW,CAAC,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAS5E;AAED;;;;;GAKG;AACH,wBAAsB,QAAQ,CAC5B,QAAQ,EAAE,eAAe,GACxB,OAAO,CAAC,gBAAgB,CAAC,CAM3B;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EAAE,eAAe,GACxB,OAAO,CAAC,OAAO,CAAC,CAWlB;AAED,eAAO,MAAM,oBAAoB;2BACF,eAAe,oBAAoB,MAAM;0BAgB1D,eAAe,WAChB,YAAY,MAAM,EAAE,oBACX,MAAM;CAkB3B,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,OAAO,IAAI,YAAY,MAAM,EAAE,CAIzC"}

package/dist/sdk/utils/messaging-signing-snap-requests.d.mts

@@ -0,0 +1,41 @@
+import type { Eip1193Provider } from "ethers";
+export type Snap = {
+    permissionName: string;
+    id: string;
+    version: string;
+    initialPermissions: Record<string, unknown>;
+};
+export type GetSnapsResponse = Record<string, Snap>;
+export declare const SNAP_ORIGIN = "npm:@metamask/message-signing-snap";
+/**
+ * Requests Connection to the Message Signing Snap
+ *
+ * @param provider - MetaMask Wallet Provider
+ * @returns snap connect result
+ */
+export declare function connectSnap(provider: Eip1193Provider): Promise<string>;
+/**
+ * Gets Snaps from a MetaMask Wallet
+ *
+ * @param provider - MetaMask Wallet Provider
+ * @returns All currently installed snaps.
+ */
+export declare function getSnaps(provider: Eip1193Provider): Promise<GetSnapsResponse>;
+/**
+ * Check if snap is connected
+ *
+ * @param provider - MetaMask Wallet Provider
+ * @returns if snap is connected
+ */
+export declare function isSnapConnected(provider: Eip1193Provider): Promise<boolean>;
+export declare const MESSAGE_SIGNING_SNAP: {
+    getPublicKey(provider: Eip1193Provider, entropySourceId?: string): Promise<string>;
+    signMessage(provider: Eip1193Provider, message: `metamask:${string}`, entropySourceId?: string): Promise<string>;
+};
+/**
+ * Asserts that a message starts with "metamask:"
+ *
+ * @param message - The message to check.
+ */
+export declare function assertMessageStartsWithMetamask(message: string): asserts message is `metamask:${string}`;
+//# sourceMappingURL=messaging-signing-snap-requests.d.mts.map

package/dist/sdk/utils/messaging-signing-snap-requests.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"messaging-signing-snap-requests.d.mts","sourceRoot":"","sources":["../../../src/sdk/utils/messaging-signing-snap-requests.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,eAAe;AAE9C,MAAM,MAAM,IAAI,GAAG;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C,CAAC;AACF,MAAM,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AAEpD,eAAO,MAAM,WAAW,uCAAuC,CAAC;AAEhE;;;;;GAKG;AACH,wBAAsB,WAAW,CAAC,QAAQ,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAS5E;AAED;;;;;GAKG;AACH,wBAAsB,QAAQ,CAC5B,QAAQ,EAAE,eAAe,GACxB,OAAO,CAAC,gBAAgB,CAAC,CAM3B;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EAAE,eAAe,GACxB,OAAO,CAAC,OAAO,CAAC,CAWlB;AAED,eAAO,MAAM,oBAAoB;2BACF,eAAe,oBAAoB,MAAM;0BAgB1D,eAAe,WAChB,YAAY,MAAM,EAAE,oBACX,MAAM;CAkB3B,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,OAAO,IAAI,YAAY,MAAM,EAAE,CAIzC"}

package/dist/sdk/utils/{messaging-signing-snap-requests.js → messaging-signing-snap-requests.mjs}

@@ -86,4 +86,4 @@ export function assertMessageStartsWithMetamask(message) {
         throw new Error('Message must start with "metamask:"');
     }
 }
-//# sourceMappingURL=messaging-signing-snap-requests.js.map
+//# sourceMappingURL=messaging-signing-snap-requests.mjs.map

package/dist/sdk/utils/messaging-signing-snap-requests.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"messaging-signing-snap-requests.mjs","sourceRoot":"","sources":["../../../src/sdk/utils/messaging-signing-snap-requests.ts"],"names":[],"mappings":"AAUA,MAAM,CAAC,MAAM,WAAW,GAAG,oCAAoC,CAAC;AAEhE;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,QAAyB;IACzD,MAAM,MAAM,GAAW,MAAM,QAAQ,CAAC,OAAO,CAAC;QAC5C,MAAM,EAAE,qBAAqB;QAC7B,MAAM,EAAE;YACN,CAAC,WAAW,CAAC,EAAE,EAAE;SAClB;KACF,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,QAAyB;IAEzB,MAAM,MAAM,GAAqB,MAAM,QAAQ,CAAC,OAAO,CAAC;QACtD,MAAM,EAAE,iBAAiB;KAC1B,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAAyB;IAEzB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CAAC,0CAA0C,EAAE,CAAC,CAAC,CAAC;QAC7D,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,KAAK,CAAC,YAAY,CAAC,QAAyB,EAAE,eAAwB;QACpE,MAAM,SAAS,GAAW,MAAM,QAAQ,CAAC,OAAO,CAAC;YAC/C,MAAM,EAAE,mBAAmB;YAC3B,MAAM,EAAE;gBACN,MAAM,EAAE,WAAW;gBACnB,OAAO,EAAE;oBACP,MAAM,EAAE,cAAc;oBACtB,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC5D;aACF;SACF,CAAC,CAAC;QAEH,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,WAAW,CACf,QAAyB,EACzB,OAA6B,EAC7B,eAAwB;QAExB,MAAM,aAAa,GAAW,MAAM,QAAQ,EAAE,OAAO,CAAC;YACpD,MAAM,EAAE,mBAAmB;YAC3B,MAAM,EAAE;gBACN,MAAM,EAAE,WAAW;gBACnB,OAAO,EAAE;oBACP,MAAM,EAAE,aAAa;oBACrB,MAAM,EAAE;wBACN,OAAO;wBACP,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAChD;iBACF;aACF;SACF,CAAC,CAAC;QAEH,OAAO,aAAa,CAAC;IACvB,CAAC;CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,+BAA+B,CAC7C,OAAe;IAEf,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;AACH,CAAC","sourcesContent":["import type { Eip1193Provider } from 'ethers';\n\nexport type Snap = {\n  permissionName: string;\n  id: string;\n  version: string;\n  initialPermissions: Record<string, unknown>;\n};\nexport type GetSnapsResponse = Record<string, Snap>;\n\nexport const SNAP_ORIGIN = 'npm:@metamask/message-signing-snap';\n\n/**\n * Requests Connection to the Message Signing Snap\n *\n * @param provider - MetaMask Wallet Provider\n * @returns snap connect result\n */\nexport async function connectSnap(provider: Eip1193Provider): Promise<string> {\n  const result: string = await provider.request({\n    method: 'wallet_requestSnaps',\n    params: {\n      [SNAP_ORIGIN]: {},\n    },\n  });\n\n  return result;\n}\n\n/**\n * Gets Snaps from a MetaMask Wallet\n *\n * @param provider - MetaMask Wallet Provider\n * @returns All currently installed snaps.\n */\nexport async function getSnaps(\n  provider: Eip1193Provider,\n): Promise<GetSnapsResponse> {\n  const result: GetSnapsResponse = await provider.request({\n    method: 'wallet_getSnaps',\n  });\n\n  return result;\n}\n\n/**\n * Check if snap is connected\n *\n * @param provider - MetaMask Wallet Provider\n * @returns if snap is connected\n */\nexport async function isSnapConnected(\n  provider: Eip1193Provider,\n): Promise<boolean> {\n  try {\n    const snaps = await getSnaps(provider);\n    if (!snaps) {\n      return false;\n    }\n    return Object.keys(snaps).includes(SNAP_ORIGIN);\n  } catch (e) {\n    console.error('Failed to determine if snap is connected', e);\n    return false;\n  }\n}\n\nexport const MESSAGE_SIGNING_SNAP = {\n  async getPublicKey(provider: Eip1193Provider, entropySourceId?: string) {\n    const publicKey: string = await provider.request({\n      method: 'wallet_invokeSnap',\n      params: {\n        snapId: SNAP_ORIGIN,\n        request: {\n          method: 'getPublicKey',\n          ...(entropySourceId ? { params: { entropySourceId } } : {}),\n        },\n      },\n    });\n\n    return publicKey;\n  },\n\n  async signMessage(\n    provider: Eip1193Provider,\n    message: `metamask:${string}`,\n    entropySourceId?: string,\n  ) {\n    const signedMessage: string = await provider?.request({\n      method: 'wallet_invokeSnap',\n      params: {\n        snapId: SNAP_ORIGIN,\n        request: {\n          method: 'signMessage',\n          params: {\n            message,\n            ...(entropySourceId ? { entropySourceId } : {}),\n          },\n        },\n      },\n    });\n\n    return signedMessage;\n  },\n};\n\n/**\n * Asserts that a message starts with \"metamask:\"\n *\n * @param message - The message to check.\n */\nexport function assertMessageStartsWithMetamask(\n  message: string,\n): asserts message is `metamask:${string}` {\n  if (!message.startsWith('metamask:')) {\n    throw new Error('Message must start with \"metamask:\"');\n  }\n}\n"]}

package/dist/sdk/utils/validate-login-response.cjs

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateLoginResponse = void 0;
+/**
+ * Validates that the input is a well-formed, non-expired LoginResponse.
+ *
+ * Checks structural shape (token + profile objects exist) and verifies
+ * the JWT access token's `exp` claim is still in the future. This acts
+ * as a hard guard against stale cached tokens regardless of client-side
+ * TTL tracking (obtainedAt / expiresIn), which can be corrupted.
+ *
+ * @param input - unknown/untyped input
+ * @returns boolean if input is a valid, non-expired LoginResponse
+ */
+function validateLoginResponse(input) {
+    const assumedInput = input;
+    if (!assumedInput) {
+        return false;
+    }
+    if (!assumedInput?.token || !assumedInput?.profile) {
+        return false;
+    }
+    if (isJwtExpired(assumedInput.token.accessToken)) {
+        return false;
+    }
+    return true;
+}
+exports.validateLoginResponse = validateLoginResponse;
+/**
+ * Checks whether a JWT has expired by decoding its `exp` claim.
+ *
+ * @param token - A JWT string.
+ * @returns true if the token is expired or cannot be decoded; false if still valid.
+ */
+function isJwtExpired(token) {
+    try {
+        const parts = token.split('.');
+        if (parts.length !== 3) {
+            return true;
+        }
+        const base64 = parts[1].replace(/-/gu, '+').replace(/_/gu, '/');
+        const { exp } = JSON.parse(atob(base64));
+        return !Number.isInteger(exp) || exp * 1000 <= Date.now();
+    }
+    catch {
+        return true;
+    }
+}
+//# sourceMappingURL=validate-login-response.cjs.map

package/dist/sdk/utils/validate-login-response.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-login-response.cjs","sourceRoot":"","sources":["../../../src/sdk/utils/validate-login-response.ts"],"names":[],"mappings":";;;AAEA;;;;;;;;;;GAUG;AACH,SAAgB,qBAAqB,CAAC,KAAc;IAClD,MAAM,YAAY,GAAG,KAAsB,CAAC;IAE5C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,YAAY,EAAE,KAAK,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC;QACnD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QACjD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAhBD,sDAgBC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAChE,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACzC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import type { LoginResponse } from '../authentication.js';\n\n/**\n * Validates that the input is a well-formed, non-expired LoginResponse.\n *\n * Checks structural shape (token + profile objects exist) and verifies\n * the JWT access token's `exp` claim is still in the future. This acts\n * as a hard guard against stale cached tokens regardless of client-side\n * TTL tracking (obtainedAt / expiresIn), which can be corrupted.\n *\n * @param input - unknown/untyped input\n * @returns boolean if input is a valid, non-expired LoginResponse\n */\nexport function validateLoginResponse(input: unknown): input is LoginResponse {\n  const assumedInput = input as LoginResponse;\n\n  if (!assumedInput) {\n    return false;\n  }\n\n  if (!assumedInput?.token || !assumedInput?.profile) {\n    return false;\n  }\n\n  if (isJwtExpired(assumedInput.token.accessToken)) {\n    return false;\n  }\n\n  return true;\n}\n\n/**\n * Checks whether a JWT has expired by decoding its `exp` claim.\n *\n * @param token - A JWT string.\n * @returns true if the token is expired or cannot be decoded; false if still valid.\n */\nfunction isJwtExpired(token: string): boolean {\n  try {\n    const parts = token.split('.');\n    if (parts.length !== 3) {\n      return true;\n    }\n    const base64 = parts[1].replace(/-/gu, '+').replace(/_/gu, '/');\n    const { exp } = JSON.parse(atob(base64));\n    return !Number.isInteger(exp) || exp * 1000 <= Date.now();\n  } catch {\n    return true;\n  }\n}\n"]}

package/dist/sdk/utils/{validate-login-response.d.ts → validate-login-response.d.cts}

@@ -1,4 +1,4 @@
-import type { LoginResponse } from '../authentication.js';
+import type { LoginResponse } from "../authentication.cjs";
 /**
  * Validates that the input is a well-formed, non-expired LoginResponse.
  *
@@ -11,4 +11,4 @@ import type { LoginResponse } from '../authentication.js';
  * @returns boolean if input is a valid, non-expired LoginResponse
  */
 export declare function validateLoginResponse(input: unknown): input is LoginResponse;
-//# sourceMappingURL=validate-login-response.d.ts.map
+//# sourceMappingURL=validate-login-response.d.cts.map

package/dist/sdk/utils/validate-login-response.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-login-response.d.cts","sourceRoot":"","sources":["../../../src/sdk/utils/validate-login-response.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,8BAA6B;AAE1D;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa,CAgB5E"}

package/dist/sdk/utils/validate-login-response.d.mts

@@ -0,0 +1,14 @@
+import type { LoginResponse } from "../authentication.mjs";
+/**
+ * Validates that the input is a well-formed, non-expired LoginResponse.
+ *
+ * Checks structural shape (token + profile objects exist) and verifies
+ * the JWT access token's `exp` claim is still in the future. This acts
+ * as a hard guard against stale cached tokens regardless of client-side
+ * TTL tracking (obtainedAt / expiresIn), which can be corrupted.
+ *
+ * @param input - unknown/untyped input
+ * @returns boolean if input is a valid, non-expired LoginResponse
+ */
+export declare function validateLoginResponse(input: unknown): input is LoginResponse;
+//# sourceMappingURL=validate-login-response.d.mts.map

package/dist/sdk/utils/validate-login-response.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-login-response.d.mts","sourceRoot":"","sources":["../../../src/sdk/utils/validate-login-response.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,8BAA6B;AAE1D;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa,CAgB5E"}

package/dist/sdk/utils/{validate-login-response.js → validate-login-response.mjs}

@@ -42,4 +42,4 @@ function isJwtExpired(token) {
         return true;
     }
 }
-//# sourceMappingURL=validate-login-response.js.map
+//# sourceMappingURL=validate-login-response.mjs.map

package/dist/sdk/utils/validate-login-response.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-login-response.mjs","sourceRoot":"","sources":["../../../src/sdk/utils/validate-login-response.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,MAAM,YAAY,GAAG,KAAsB,CAAC;IAE5C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,YAAY,EAAE,KAAK,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC;QACnD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QACjD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAChE,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACzC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import type { LoginResponse } from '../authentication.js';\n\n/**\n * Validates that the input is a well-formed, non-expired LoginResponse.\n *\n * Checks structural shape (token + profile objects exist) and verifies\n * the JWT access token's `exp` claim is still in the future. This acts\n * as a hard guard against stale cached tokens regardless of client-side\n * TTL tracking (obtainedAt / expiresIn), which can be corrupted.\n *\n * @param input - unknown/untyped input\n * @returns boolean if input is a valid, non-expired LoginResponse\n */\nexport function validateLoginResponse(input: unknown): input is LoginResponse {\n  const assumedInput = input as LoginResponse;\n\n  if (!assumedInput) {\n    return false;\n  }\n\n  if (!assumedInput?.token || !assumedInput?.profile) {\n    return false;\n  }\n\n  if (isJwtExpired(assumedInput.token.accessToken)) {\n    return false;\n  }\n\n  return true;\n}\n\n/**\n * Checks whether a JWT has expired by decoding its `exp` claim.\n *\n * @param token - A JWT string.\n * @returns true if the token is expired or cannot be decoded; false if still valid.\n */\nfunction isJwtExpired(token: string): boolean {\n  try {\n    const parts = token.split('.');\n    if (parts.length !== 3) {\n      return true;\n    }\n    const base64 = parts[1].replace(/-/gu, '+').replace(/_/gu, '/');\n    const { exp } = JSON.parse(atob(base64));\n    return !Number.isInteger(exp) || exp * 1000 <= Date.now();\n  } catch {\n    return true;\n  }\n}\n"]}

package/dist/sdk/utils/validate-pair-response.cjs

@@ -0,0 +1,29 @@
+"use strict";
+/* eslint-disable @typescript-eslint/naming-convention */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validatePairResponse = void 0;
+/**
+ * Asserts that the raw API response from the profile pairing endpoint has the
+ * expected shape before we attempt to map it into a `PairProfilesResponse`.
+ * Throws if the response is malformed.
+ *
+ * @param input - The raw JSON parsed from the pair endpoint response body.
+ */
+function validatePairResponse(input) {
+    if (!input || typeof input !== 'object') {
+        throw new Error('validatePairResponse: input is not an object');
+    }
+    const assumed = input;
+    const profile = assumed.profile;
+    if (!profile || typeof profile !== 'object') {
+        throw new Error('validatePairResponse: profile is missing or not an object');
+    }
+    if (typeof profile.profile_id !== 'string' || !profile.profile_id) {
+        throw new Error('validatePairResponse: profile.profile_id is missing or empty');
+    }
+    if (typeof profile.identifier_id !== 'string' || !profile.identifier_id) {
+        throw new Error('validatePairResponse: profile.identifier_id is missing or empty');
+    }
+}
+exports.validatePairResponse = validatePairResponse;
+//# sourceMappingURL=validate-pair-response.cjs.map

package/dist/sdk/utils/validate-pair-response.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-pair-response.cjs","sourceRoot":"","sources":["../../../src/sdk/utils/validate-pair-response.ts"],"names":[],"mappings":";AAAA,yDAAyD;;;AAiBzD;;;;;;GAMG;AACH,SAAgB,oBAAoB,CAClC,KAAc;IAEd,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,OAAO,GAAG,KAAgC,CAAC;IACjD,MAAM,OAAO,GAAG,OAAO,CAAC,OAA8C,CAAC;IACvE,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;IACJ,CAAC;AACH,CAAC;AA1BD,oDA0BC","sourcesContent":["/* eslint-disable @typescript-eslint/naming-convention */\n\ntype RawProfileAlias = {\n  alias_profile_id: string;\n  canonical_profile_id: string;\n  identifier_ids: { id: string; type: string }[];\n};\n\nexport type RawPairResponse = {\n  profile: {\n    profile_id: string;\n    identifier_id: string;\n    metametrics_id?: string;\n  };\n  profile_aliases?: RawProfileAlias[];\n};\n\n/**\n * Asserts that the raw API response from the profile pairing endpoint has the\n * expected shape before we attempt to map it into a `PairProfilesResponse`.\n * Throws if the response is malformed.\n *\n * @param input - The raw JSON parsed from the pair endpoint response body.\n */\nexport function validatePairResponse(\n  input: unknown,\n): asserts input is RawPairResponse {\n  if (!input || typeof input !== 'object') {\n    throw new Error('validatePairResponse: input is not an object');\n  }\n\n  const assumed = input as Record<string, unknown>;\n  const profile = assumed.profile as Record<string, unknown> | undefined;\n  if (!profile || typeof profile !== 'object') {\n    throw new Error(\n      'validatePairResponse: profile is missing or not an object',\n    );\n  }\n\n  if (typeof profile.profile_id !== 'string' || !profile.profile_id) {\n    throw new Error(\n      'validatePairResponse: profile.profile_id is missing or empty',\n    );\n  }\n\n  if (typeof profile.identifier_id !== 'string' || !profile.identifier_id) {\n    throw new Error(\n      'validatePairResponse: profile.identifier_id is missing or empty',\n    );\n  }\n}\n"]}

package/dist/sdk/utils/{validate-pair-response.d.ts → validate-pair-response.d.cts}

@@ -23,4 +23,4 @@ export type RawPairResponse = {
  */
 export declare function validatePairResponse(input: unknown): asserts input is RawPairResponse;
 export {};
-//# sourceMappingURL=validate-pair-response.d.ts.map
+//# sourceMappingURL=validate-pair-response.d.cts.map

package/dist/sdk/utils/validate-pair-response.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-pair-response.d.cts","sourceRoot":"","sources":["../../../src/sdk/utils/validate-pair-response.ts"],"names":[],"mappings":"AAEA,KAAK,eAAe,GAAG;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,cAAc,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAChD,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,EAAE;QACP,UAAU,EAAE,MAAM,CAAC;QACnB,aAAa,EAAE,MAAM,CAAC;QACtB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,eAAe,CAAC,EAAE,eAAe,EAAE,CAAC;CACrC,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,KAAK,IAAI,eAAe,CAwBlC"}

package/dist/sdk/utils/validate-pair-response.d.mts

@@ -0,0 +1,26 @@
+type RawProfileAlias = {
+    alias_profile_id: string;
+    canonical_profile_id: string;
+    identifier_ids: {
+        id: string;
+        type: string;
+    }[];
+};
+export type RawPairResponse = {
+    profile: {
+        profile_id: string;
+        identifier_id: string;
+        metametrics_id?: string;
+    };
+    profile_aliases?: RawProfileAlias[];
+};
+/**
+ * Asserts that the raw API response from the profile pairing endpoint has the
+ * expected shape before we attempt to map it into a `PairProfilesResponse`.
+ * Throws if the response is malformed.
+ *
+ * @param input - The raw JSON parsed from the pair endpoint response body.
+ */
+export declare function validatePairResponse(input: unknown): asserts input is RawPairResponse;
+export {};
+//# sourceMappingURL=validate-pair-response.d.mts.map

package/dist/sdk/utils/validate-pair-response.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-pair-response.d.mts","sourceRoot":"","sources":["../../../src/sdk/utils/validate-pair-response.ts"],"names":[],"mappings":"AAEA,KAAK,eAAe,GAAG;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,cAAc,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAChD,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,EAAE;QACP,UAAU,EAAE,MAAM,CAAC;QACnB,aAAa,EAAE,MAAM,CAAC;QACtB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,eAAe,CAAC,EAAE,eAAe,EAAE,CAAC;CACrC,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAClC,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,KAAK,IAAI,eAAe,CAwBlC"}

package/dist/sdk/utils/{validate-pair-response.js → validate-pair-response.mjs}

@@ -22,4 +22,4 @@ export function validatePairResponse(input) {
         throw new Error('validatePairResponse: profile.identifier_id is missing or empty');
     }
 }
-//# sourceMappingURL=validate-pair-response.js.map
+//# sourceMappingURL=validate-pair-response.mjs.map

package/dist/sdk/utils/validate-pair-response.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-pair-response.mjs","sourceRoot":"","sources":["../../../src/sdk/utils/validate-pair-response.ts"],"names":[],"mappings":"AAAA,yDAAyD;AAiBzD;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAClC,KAAc;IAEd,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,OAAO,GAAG,KAAgC,CAAC;IACjD,MAAM,OAAO,GAAG,OAAO,CAAC,OAA8C,CAAC;IACvE,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QAClE,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QACxE,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;IACJ,CAAC;AACH,CAAC","sourcesContent":["/* eslint-disable @typescript-eslint/naming-convention */\n\ntype RawProfileAlias = {\n  alias_profile_id: string;\n  canonical_profile_id: string;\n  identifier_ids: { id: string; type: string }[];\n};\n\nexport type RawPairResponse = {\n  profile: {\n    profile_id: string;\n    identifier_id: string;\n    metametrics_id?: string;\n  };\n  profile_aliases?: RawProfileAlias[];\n};\n\n/**\n * Asserts that the raw API response from the profile pairing endpoint has the\n * expected shape before we attempt to map it into a `PairProfilesResponse`.\n * Throws if the response is malformed.\n *\n * @param input - The raw JSON parsed from the pair endpoint response body.\n */\nexport function validatePairResponse(\n  input: unknown,\n): asserts input is RawPairResponse {\n  if (!input || typeof input !== 'object') {\n    throw new Error('validatePairResponse: input is not an object');\n  }\n\n  const assumed = input as Record<string, unknown>;\n  const profile = assumed.profile as Record<string, unknown> | undefined;\n  if (!profile || typeof profile !== 'object') {\n    throw new Error(\n      'validatePairResponse: profile is missing or not an object',\n    );\n  }\n\n  if (typeof profile.profile_id !== 'string' || !profile.profile_id) {\n    throw new Error(\n      'validatePairResponse: profile.profile_id is missing or empty',\n    );\n  }\n\n  if (typeof profile.identifier_id !== 'string' || !profile.identifier_id) {\n    throw new Error(\n      'validatePairResponse: profile.identifier_id is missing or empty',\n    );\n  }\n}\n"]}

package/dist/shared/encryption/cache.cjs

@@ -0,0 +1,77 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.setCachedKey = exports.getCachedKeyGeneratedWithSharedSalt = exports.getCachedKeyBySalt = void 0;
+const constants_js_1 = require("./constants.cjs");
+const utils_js_1 = require("./utils.cjs");
+const MAX_PASSWORD_CACHES = 100;
+const MAX_SALT_CACHES = 100;
+let inMemCachedKDF = {};
+const getPasswordCache = (hashedPassword) => {
+    inMemCachedKDF[hashedPassword] ?? (inMemCachedKDF[hashedPassword] = new Map());
+    return inMemCachedKDF[hashedPassword];
+};
+/**
+ * Returns a given cached derived key from a hashed password and salt
+ *
+ * @param hashedPassword - hashed password for cache lookup
+ * @param salt - provide salt to receive cached key
+ * @returns cached key
+ */
+function getCachedKeyBySalt(hashedPassword, salt) {
+    const cache = getPasswordCache(hashedPassword);
+    const base64Salt = (0, utils_js_1.byteArrayToBase64)(salt);
+    const cachedKey = cache.get(base64Salt);
+    if (!cachedKey) {
+        return undefined;
+    }
+    return {
+        salt,
+        base64Salt,
+        key: cachedKey,
+    };
+}
+exports.getCachedKeyBySalt = getCachedKeyBySalt;
+/**
+ * Gets the cached key that was generated without a salt, if it exists.
+ * This is unique per hashed password.
+ *
+ * @param hashedPassword - hashed password for cache lookup
+ * @returns the cached key
+ */
+function getCachedKeyGeneratedWithSharedSalt(hashedPassword) {
+    const cache = getPasswordCache(hashedPassword);
+    const base64Salt = (0, utils_js_1.byteArrayToBase64)(constants_js_1.SHARED_SALT);
+    const cachedKey = cache.get(base64Salt);
+    if (!cachedKey) {
+        return undefined;
+    }
+    return {
+        salt: constants_js_1.SHARED_SALT,
+        base64Salt,
+        key: cachedKey,
+    };
+}
+exports.getCachedKeyGeneratedWithSharedSalt = getCachedKeyGeneratedWithSharedSalt;
+/**
+ * Sets a key to the in memory cache.
+ * We have set an arbitrary size of 10 cached keys per hashed password.
+ *
+ * @param hashedPassword - hashed password for cache lookup
+ * @param salt - salt to set new derived key
+ * @param key - derived key we are setting
+ */
+function setCachedKey(hashedPassword, salt, key) {
+    // Max password caches
+    if (Object.keys(inMemCachedKDF).length > MAX_PASSWORD_CACHES) {
+        inMemCachedKDF = {};
+    }
+    const cache = getPasswordCache(hashedPassword);
+    const base64Salt = (0, utils_js_1.byteArrayToBase64)(salt);
+    // Max salt caches
+    if (cache.size > MAX_SALT_CACHES) {
+        cache.clear();
+    }
+    cache.set(base64Salt, key);
+}
+exports.setCachedKey = setCachedKey;
+//# sourceMappingURL=cache.cjs.map