@metamask-previews/profile-sync-controller 32.1.1-preview-db287901b → 32.1.1-preview-d3f9964be

package/dist/sdk/mocks/auth.js

@@ -1,4 +1,5 @@
 import { Env, Platform } from '../../shared/env.js';
+import { MFA_CREDENTIALS_URL, MFA_ENROLL_COMPLETE_URL, MFA_ENROLL_URL, MFA_VERIFY_COMPLETE_URL, MFA_VERIFY_URL, } from '../authentication-jwt-bearer/mfa/services.js';
 import { NONCE_URL, SIWE_LOGIN_URL, SRP_LOGIN_URL, OIDC_TOKEN_URL, PAIR_IDENTIFIERS, PAIR_PROFILES_URL, PAIR_SOCIAL_IDENTIFIER_URL, PROFILE_LINEAGE_URL, CUSTOMER_SERVICE_TOKEN_URL, PARTNER_IDENTITY_TOKEN_URL, } from '../authentication-jwt-bearer/services.js';
 export const MOCK_NONCE_URL = NONCE_URL(Env.PRD);
 export const MOCK_SRP_LOGIN_URL = SRP_LOGIN_URL(Env.PRD);
@@ -10,6 +11,95 @@ export const MOCK_PAIR_SOCIAL_IDENTIFIER_URL = PAIR_SOCIAL_IDENTIFIER_URL(Env.PR
 export const MOCK_PROFILE_LINEAGE_URL = PROFILE_LINEAGE_URL(Env.PRD);
 export const MOCK_CUSTOMER_SERVICE_TOKEN_URL = CUSTOMER_SERVICE_TOKEN_URL(Env.PRD);
 export const MOCK_PARTNER_IDENTITY_TOKEN_URL = PARTNER_IDENTITY_TOKEN_URL(Env.PRD);
+export const MOCK_MFA_ENROLL_URL = MFA_ENROLL_URL(Env.PRD);
+export const MOCK_MFA_ENROLL_COMPLETE_URL = MFA_ENROLL_COMPLETE_URL(Env.PRD);
+export const MOCK_MFA_VERIFY_URL = MFA_VERIFY_URL(Env.PRD);
+export const MOCK_MFA_VERIFY_COMPLETE_URL = MFA_VERIFY_COMPLETE_URL(Env.PRD);
+export const MOCK_MFA_CREDENTIALS_URL = MFA_CREDENTIALS_URL(Env.PRD);
+const MOCK_PASSKEY_CREATE_DATA = {
+    publicKey: {
+        rp: {
+            name: 'MetaMask',
+            id: 'authentication.api.cx.metamask.io',
+        },
+        user: {
+            name: 'MetaMask 3f9a1c2b',
+            id: 'cHJvZmlsZS1pZA',
+            displayName: 'MetaMask 3f9a1c2b',
+        },
+        challenge: 'Y3JlYXRlLWNoYWxsZW5nZQ',
+        pubKeyCredParams: [{ type: 'public-key', alg: -7 }],
+        excludeCredentials: [],
+        attestation: 'none',
+    },
+};
+const MOCK_PASSKEY_REQUEST_DATA = {
+    publicKey: {
+        rpId: 'authentication.api.cx.metamask.io',
+        challenge: 'dmVyaWZ5LWNoYWxsZW5nZQ',
+        allowCredentials: [{ type: 'public-key', id: 'Y3JlZGVudGlhbC1pZA' }],
+        userVerification: 'required',
+    },
+};
+export const MOCK_MFA_ENROLL_PASSKEY_RESPONSE = {
+    flow_id: 'enroll-passkey-flow-id',
+    expires_at: '2099-09-07T14:30:00Z',
+    passkey_create_data: JSON.stringify(MOCK_PASSKEY_CREATE_DATA),
+};
+export const MOCK_MFA_ENROLL_EMAIL_RESPONSE = {
+    flow_id: 'enroll-email-flow-id',
+    expires_at: '2099-09-07T14:30:00Z',
+};
+export const MOCK_MFA_ENROLL_COMPLETE_RESPONSE = {
+    status: 'enrolled',
+};
+export const MOCK_MFA_VERIFY_PASSKEY_RESPONSE = {
+    flow_id: 'verify-passkey-flow-id',
+    expires_at: '2099-09-07T14:30:00Z',
+    passkey_request_data: JSON.stringify(MOCK_PASSKEY_REQUEST_DATA),
+};
+export const MOCK_MFA_VERIFY_EMAIL_RESPONSE = {
+    flow_id: 'verify-email-flow-id',
+    expires_at: '2099-09-07T14:30:00Z',
+};
+export const MOCK_MFA_ASSERTION_JWT = 'eyJhbGciOiJub25lIiwidHlwIjoiSldUIn0.eyJzdWIiOiJmODgyMjdiZC1iNjE1LTQxYTMtYjBiZS00NjdkZDc4MWE0YWQiLCJhYWwiOjIsImFtciI6InBhc3NrZXkiLCJleHAiOjQxMDI0NDQ4MDB9.signature';
+export const MOCK_MFA_VERIFY_COMPLETE_RESPONSE = {
+    token: MOCK_MFA_ASSERTION_JWT,
+    expires_in: 900,
+    profile: {
+        profile_id: 'f88227bd-b615-41a3-b0be-467dd781a4ad',
+        identifier_id: 'da9a9fc7b09edde9cc23cec9b7e11a71fb0ab4d2ddd8af8af905306f3e1456fb',
+        identifier_type: 'SRP',
+    },
+    profile_aliases: [],
+};
+export const MOCK_MFA_CREDENTIALS_RESPONSE = {
+    credentials: [
+        {
+            credential_type: 'passkey',
+            status: 'active',
+            enrolled_at: '2026-09-15T10:00:00Z',
+            passkey: {
+                display_name: 'MetaMask 3f9a1c2b',
+                added_at: '2026-09-15T10:00:00Z',
+            },
+        },
+        {
+            credential_type: 'email_otp',
+            status: 'pending',
+            enrolled_at: '2026-09-15T10:05:00Z',
+            email: {
+                address: 'user@example.com',
+                verified: false,
+            },
+        },
+    ],
+};
+export const MOCK_ELEVATED_ACCESS_JWT = 'eyJhbGciOiJub25lIiwidHlwIjoiSldUIn0.eyJzdWIiOiJmODgyMjdiZC1iNjE1LTQxYTMtYjBiZS00NjdkZDc4MWE0YWQiLCJhYWwiOjIsImFtciI6WyJwYXNza2V5Il0sImV4cCI6NDEwMjQ0NDgwMH0.signature';
+export const MOCK_ELEVATED_ACCESS_TOKEN_RESPONSE = {
+    access_token: MOCK_ELEVATED_ACCESS_JWT,
+    expires_in: 900,
+};
 export const MOCK_JWT = 'eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImIwNzE2N2U2LWJjNWUtNDgyZC1hNjRhLWU1MjQ0MjY2MGU3NyJ9.eyJzdWIiOiI1MzE0ODc5YWM2NDU1OGI3OTQ5ZmI4NWIzMjg2ZjZjNjUwODAzYmFiMTY0Y2QyOWNmMmM3YzdmMjMzMWMwZTRlIiwiaWF0IjoxNzA2MTEzMDYyLCJleHAiOjE3NjkxODUwNjMsImlzcyI6ImF1dGgubWV0YW1hc2suaW8iLCJhdWQiOiJwb3J0Zm9saW8ubWV0YW1hc2suaW8ifQ.E5UL6oABNweS8t5a6IBTqTf7NLOJbrhJSmEcsr7kwLp4bGvcENJzACwnsHDkA6PlzfDV09ZhAGU_F3hlS0j-erbY0k0AFR-GAtyS7E9N02D8RgUDz5oDR65CKmzM8JilgFA8UvruJ6OJGogroaOSOqzRES_s8MjHpP47RJ9lXrUesajsbOudXbuksXWg5QmWip6LLvjwr8UUzcJzNQilyIhiEpo4WdzWM4R3VtTwr4rHnWEvtYnYCov1jmI2w3YQ48y0M-3Y9IOO0ov_vlITRrOnR7Y7fRUGLUFmU5msD8mNWRywjQFLHfJJ1yNP5aJ8TkuCK3sC6kcUH335IVvukQ';
 export const MOCK_ACCESS_JWT = 'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyLCJleHAiOjQxMDI0NDQ4MDB9.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c';
 export const MOCK_NONCE_RESPONSE = {

package/dist/sdk/mocks/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/sdk/mocks/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EACL,SAAS,EACT,cAAc,EACd,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,0BAA0B,EAC1B,mBAAmB,EACnB,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,0CAA0C,CAAC;AAElD,MAAM,CAAC,MAAM,cAAc,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACjD,MAAM,CAAC,MAAM,kBAAkB,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACzD,MAAM,CAAC,MAAM,mBAAmB,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC3D,MAAM,CAAC,MAAM,mBAAmB,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC3D,MAAM,CAAC,MAAM,yBAAyB,GAAG,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACnE,MAAM,CAAC,MAAM,sBAAsB,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACjE,MAAM,CAAC,MAAM,+BAA+B,GAAG,0BAA0B,CACvE,GAAG,CAAC,GAAG,CACR,CAAC;AACF,MAAM,CAAC,MAAM,wBAAwB,GAAG,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACrE,MAAM,CAAC,MAAM,+BAA+B,GAAG,0BAA0B,CACvE,GAAG,CAAC,GAAG,CACR,CAAC;AACF,MAAM,CAAC,MAAM,+BAA+B,GAAG,0BAA0B,CACvE,GAAG,CAAC,GAAG,CACR,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GACnB,opBAAopB,CAAC;AAEvpB,MAAM,CAAC,MAAM,eAAe,GAC1B,mLAAmL,CAAC;AAEtL,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,KAAK,EAAE,kBAAkB;IACzB,UAAU,EAAE,4CAA4C;IACxD,UAAU,EAAE,GAAG;CAChB,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,KAAK,EAAE,QAAQ;IACf,UAAU,EAAE,IAAI;IAChB,OAAO,EAAE;QACP,UAAU,EAAE,sCAAsC;QAClD,cAAc,EAAE,sCAAsC;QACtD,aAAa,EACX,kEAAkE;QACpE,eAAe,EAAE,MAAM;QACvB,qBAAqB,EAAE,iCAAiC;KACzD;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,KAAK,EAAE,QAAQ;IACf,UAAU,EAAE,IAAI;IAChB,OAAO,EAAE;QACP,UAAU,EAAE,sCAAsC;QAClD,cAAc,EAAE,sCAAsC;QACtD,aAAa,EACX,kEAAkE;QACpE,eAAe,EAAE,KAAK;QACtB,qBAAqB,EAAE,4BAA4B;KACpD;IACD,eAAe,EAAE,EAAE;CACpB,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,YAAY,EAAE,eAAe;IAC7B,UAAU,EAAE,IAAI;CACjB,CAAC;AAEF,MAAM,CAAC,MAAM,oCAAoC,GAAG;IAClD,YAAY,EAAE,eAAe;IAC7B,aAAa,EAAE,2BAA2B;IAC1C,UAAU,EAAE,IAAI;IAChB,UAAU,EAAE,QAAQ;CACrB,CAAC;AAEF,MAAM,CAAC,MAAM,oCAAoC,GAAG;IAClD,YAAY,EAAE,eAAe;IAC7B,aAAa,EAAE,2BAA2B;IAC1C,UAAU,EAAE,IAAI;IAChB,UAAU,EAAE,QAAQ;CACrB,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,OAAO,EAAE;QACP,aAAa,EAAE,uBAAuB,CAAC,OAAO,CAAC,aAAa;QAC5D,cAAc,EAAE,uBAAuB,CAAC,OAAO,CAAC,cAAc;QAC9D,UAAU,EAAE,uBAAuB,CAAC,OAAO,CAAC,UAAU;KACvD;IACD,eAAe,EAAE,EAAE;CACpB,CAAC;AAEF,MAAM,CAAC,MAAM,oCAAoC,GAAG;IAClD,UAAU,EAAE,IAAI;IAChB,OAAO,EAAE;QACP,UAAU,EAAE,sBAAsB;QAClC,aAAa,EAAE,uBAAuB,CAAC,OAAO,CAAC,aAAa;QAC5D,eAAe,EAAE,QAAQ;QACzB,UAAU,EAAE,uBAAuB,CAAC,OAAO,CAAC,UAAU;KACvD;IACD,KAAK,EAAE,QAAQ;CAChB,CAAC;AAEF,MAAM,CAAC,MAAM,kCAAkC,GAAG;IAChD,UAAU,EAAE,sCAAsC;IAClD,UAAU,EAAE,sBAAsB;IAClC,OAAO,EAAE;QACP;YACE,cAAc,EAAE,sCAAsC;YACtD,KAAK,EAAE,QAAQ,CAAC,MAAM;YACtB,UAAU,EAAE,sBAAsB;YAClC,UAAU,EAAE,sBAAsB;YAClC,OAAO,EAAE,CAAC;SACX;QACD;YACE,cAAc,EAAE,sCAAsC;YACtD,KAAK,EAAE,QAAQ,CAAC,SAAS;YACzB,UAAU,EAAE,sBAAsB;YAClC,UAAU,EAAE,sBAAsB;YAClC,OAAO,EAAE,CAAC;SACX;KACF;CACF,CAAC","sourcesContent":["import { Env, Platform } from '../../shared/env.js';\nimport {\n  NONCE_URL,\n  SIWE_LOGIN_URL,\n  SRP_LOGIN_URL,\n  OIDC_TOKEN_URL,\n  PAIR_IDENTIFIERS,\n  PAIR_PROFILES_URL,\n  PAIR_SOCIAL_IDENTIFIER_URL,\n  PROFILE_LINEAGE_URL,\n  CUSTOMER_SERVICE_TOKEN_URL,\n  PARTNER_IDENTITY_TOKEN_URL,\n} from '../authentication-jwt-bearer/services.js';\n\nexport const MOCK_NONCE_URL = NONCE_URL(Env.PRD);\nexport const MOCK_SRP_LOGIN_URL = SRP_LOGIN_URL(Env.PRD);\nexport const MOCK_OIDC_TOKEN_URL = OIDC_TOKEN_URL(Env.PRD);\nexport const MOCK_SIWE_LOGIN_URL = SIWE_LOGIN_URL(Env.PRD);\nexport const MOCK_PAIR_IDENTIFIERS_URL = PAIR_IDENTIFIERS(Env.PRD);\nexport const MOCK_PAIR_PROFILES_URL = PAIR_PROFILES_URL(Env.PRD);\nexport const MOCK_PAIR_SOCIAL_IDENTIFIER_URL = PAIR_SOCIAL_IDENTIFIER_URL(\n  Env.PRD,\n);\nexport const MOCK_PROFILE_LINEAGE_URL = PROFILE_LINEAGE_URL(Env.PRD);\nexport const MOCK_CUSTOMER_SERVICE_TOKEN_URL = CUSTOMER_SERVICE_TOKEN_URL(\n  Env.PRD,\n);\nexport const MOCK_PARTNER_IDENTITY_TOKEN_URL = PARTNER_IDENTITY_TOKEN_URL(\n  Env.PRD,\n);\n\nexport const MOCK_JWT =\n  'eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImIwNzE2N2U2LWJjNWUtNDgyZC1hNjRhLWU1MjQ0MjY2MGU3NyJ9.eyJzdWIiOiI1MzE0ODc5YWM2NDU1OGI3OTQ5ZmI4NWIzMjg2ZjZjNjUwODAzYmFiMTY0Y2QyOWNmMmM3YzdmMjMzMWMwZTRlIiwiaWF0IjoxNzA2MTEzMDYyLCJleHAiOjE3NjkxODUwNjMsImlzcyI6ImF1dGgubWV0YW1hc2suaW8iLCJhdWQiOiJwb3J0Zm9saW8ubWV0YW1hc2suaW8ifQ.E5UL6oABNweS8t5a6IBTqTf7NLOJbrhJSmEcsr7kwLp4bGvcENJzACwnsHDkA6PlzfDV09ZhAGU_F3hlS0j-erbY0k0AFR-GAtyS7E9N02D8RgUDz5oDR65CKmzM8JilgFA8UvruJ6OJGogroaOSOqzRES_s8MjHpP47RJ9lXrUesajsbOudXbuksXWg5QmWip6LLvjwr8UUzcJzNQilyIhiEpo4WdzWM4R3VtTwr4rHnWEvtYnYCov1jmI2w3YQ48y0M-3Y9IOO0ov_vlITRrOnR7Y7fRUGLUFmU5msD8mNWRywjQFLHfJJ1yNP5aJ8TkuCK3sC6kcUH335IVvukQ';\n\nexport const MOCK_ACCESS_JWT =\n  'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyLCJleHAiOjQxMDI0NDQ4MDB9.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c';\n\nexport const MOCK_NONCE_RESPONSE = {\n  nonce: 'xGMm9SoihEKeAEfV',\n  identifier: '0xd8641601Cb79a94FD872fE42d5b4a067A44a7e88',\n  expires_in: 300,\n};\n\nexport const MOCK_SIWE_LOGIN_RESPONSE = {\n  token: MOCK_JWT,\n  expires_in: 3600,\n  profile: {\n    profile_id: 'fa2bbf82-bd9a-4e6b-aabc-9ca0d0319b6e',\n    metametrics_id: 'de742679-4960-4977-a415-4718b5f8e86c',\n    identifier_id:\n      'ec9a4e9906836497efad2fd4d4290b34d2c6a2c0d93eb174aa3cd88a133adbaf',\n    identifier_type: 'SIWE',\n    encrypted_storage_key: '2c6a2c0d93eb174aa3cd88a133adbaf',\n  },\n};\n\nexport const MOCK_SRP_LOGIN_RESPONSE = {\n  token: MOCK_JWT,\n  expires_in: 3600,\n  profile: {\n    profile_id: 'f88227bd-b615-41a3-b0be-467dd781a4ad',\n    metametrics_id: '561ec651-a844-4b36-a451-04d6eac35740',\n    identifier_id:\n      'da9a9fc7b09edde9cc23cec9b7e11a71fb0ab4d2ddd8af8af905306f3e1456fb',\n    identifier_type: 'SRP',\n    encrypted_storage_key: 'd2ddd8af8af905306f3e1456fb',\n  },\n  profile_aliases: [],\n};\n\nexport const MOCK_OIDC_TOKEN_RESPONSE = {\n  access_token: MOCK_ACCESS_JWT,\n  expires_in: 3600,\n};\n\nexport const MOCK_CUSTOMER_SERVICE_TOKEN_RESPONSE = {\n  access_token: MOCK_ACCESS_JWT,\n  refresh_token: 'ory_rt_mock_refresh_token',\n  expires_in: 3600,\n  token_type: 'bearer',\n};\n\nexport const MOCK_PARTNER_IDENTITY_TOKEN_RESPONSE = {\n  access_token: MOCK_ACCESS_JWT,\n  refresh_token: 'ory_rt_mock_refresh_token',\n  expires_in: 3600,\n  token_type: 'bearer',\n};\n\nexport const MOCK_PAIR_PROFILES_RESPONSE = {\n  profile: {\n    identifier_id: MOCK_SRP_LOGIN_RESPONSE.profile.identifier_id,\n    metametrics_id: MOCK_SRP_LOGIN_RESPONSE.profile.metametrics_id,\n    profile_id: MOCK_SRP_LOGIN_RESPONSE.profile.profile_id,\n  },\n  profile_aliases: [],\n};\n\nexport const MOCK_PAIR_SOCIAL_IDENTIFIER_RESPONSE = {\n  expires_in: 3600,\n  profile: {\n    created_at: '2024-01-15T10:30:00Z',\n    identifier_id: MOCK_SRP_LOGIN_RESPONSE.profile.identifier_id,\n    identifier_type: 'GOOGLE',\n    profile_id: MOCK_SRP_LOGIN_RESPONSE.profile.profile_id,\n  },\n  token: MOCK_JWT,\n};\n\nexport const MOCK_USER_PROFILE_LINEAGE_RESPONSE = {\n  profile_id: 'f88227bd-b615-41a3-b0be-467dd781a4ad',\n  created_at: '2025-10-01T12:00:00Z',\n  lineage: [\n    {\n      metametrics_id: '561ec651-a844-4b36-a451-04d6eac35740',\n      agent: Platform.MOBILE,\n      created_at: '2025-10-01T12:00:00Z',\n      updated_at: '2025-10-01T12:00:00Z',\n      counter: 1,\n    },\n    {\n      metametrics_id: 'de742679-4960-4977-a415-4718b5f8e86c',\n      agent: Platform.EXTENSION,\n      created_at: '2025-10-01T12:00:00Z',\n      updated_at: '2025-10-01T12:00:00Z',\n      counter: 2,\n    },\n  ],\n};\n"]}
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/sdk/mocks/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,cAAc,EACd,uBAAuB,EACvB,cAAc,GACf,MAAM,8CAA8C,CAAC;AACtD,OAAO,EACL,SAAS,EACT,cAAc,EACd,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,iBAAiB,EACjB,0BAA0B,EAC1B,mBAAmB,EACnB,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,0CAA0C,CAAC;AAElD,MAAM,CAAC,MAAM,cAAc,GAAG,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACjD,MAAM,CAAC,MAAM,kBAAkB,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACzD,MAAM,CAAC,MAAM,mBAAmB,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC3D,MAAM,CAAC,MAAM,mBAAmB,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC3D,MAAM,CAAC,MAAM,yBAAyB,GAAG,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACnE,MAAM,CAAC,MAAM,sBAAsB,GAAG,iBAAiB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACjE,MAAM,CAAC,MAAM,+BAA+B,GAAG,0BAA0B,CACvE,GAAG,CAAC,GAAG,CACR,CAAC;AACF,MAAM,CAAC,MAAM,wBAAwB,GAAG,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACrE,MAAM,CAAC,MAAM,+BAA+B,GAAG,0BAA0B,CACvE,GAAG,CAAC,GAAG,CACR,CAAC;AACF,MAAM,CAAC,MAAM,+BAA+B,GAAG,0BAA0B,CACvE,GAAG,CAAC,GAAG,CACR,CAAC;AACF,MAAM,CAAC,MAAM,mBAAmB,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC3D,MAAM,CAAC,MAAM,4BAA4B,GAAG,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC7E,MAAM,CAAC,MAAM,mBAAmB,GAAG,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC3D,MAAM,CAAC,MAAM,4BAA4B,GAAG,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAC7E,MAAM,CAAC,MAAM,wBAAwB,GAAG,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAErE,MAAM,wBAAwB,GAAG;IAC/B,SAAS,EAAE;QACT,EAAE,EAAE;YACF,IAAI,EAAE,UAAU;YAChB,EAAE,EAAE,mCAAmC;SACxC;QACD,IAAI,EAAE;YACJ,IAAI,EAAE,mBAAmB;YACzB,EAAE,EAAE,gBAAgB;YACpB,WAAW,EAAE,mBAAmB;SACjC;QACD,SAAS,EAAE,wBAAwB;QACnC,gBAAgB,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC;QACnD,kBAAkB,EAAE,EAAE;QACtB,WAAW,EAAE,MAAM;KACpB;CACF,CAAC;AAEF,MAAM,yBAAyB,GAAG;IAChC,SAAS,EAAE;QACT,IAAI,EAAE,mCAAmC;QACzC,SAAS,EAAE,wBAAwB;QACnC,gBAAgB,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,oBAAoB,EAAE,CAAC;QACpE,gBAAgB,EAAE,UAAU;KAC7B;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,gCAAgC,GAAG;IAC9C,OAAO,EAAE,wBAAwB;IACjC,UAAU,EAAE,sBAAsB;IAClC,mBAAmB,EAAE,IAAI,CAAC,SAAS,CAAC,wBAAwB,CAAC;CAC9D,CAAC;AAEF,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,OAAO,EAAE,sBAAsB;IAC/B,UAAU,EAAE,sBAAsB;CACnC,CAAC;AAEF,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC/C,MAAM,EAAE,UAAU;CACnB,CAAC;AAEF,MAAM,CAAC,MAAM,gCAAgC,GAAG;IAC9C,OAAO,EAAE,wBAAwB;IACjC,UAAU,EAAE,sBAAsB;IAClC,oBAAoB,EAAE,IAAI,CAAC,SAAS,CAAC,yBAAyB,CAAC;CAChE,CAAC;AAEF,MAAM,CAAC,MAAM,8BAA8B,GAAG;IAC5C,OAAO,EAAE,sBAAsB;IAC/B,UAAU,EAAE,sBAAsB;CACnC,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GACjC,oKAAoK,CAAC;AAEvK,MAAM,CAAC,MAAM,iCAAiC,GAAG;IAC/C,KAAK,EAAE,sBAAsB;IAC7B,UAAU,EAAE,GAAG;IACf,OAAO,EAAE;QACP,UAAU,EAAE,sCAAsC;QAClD,aAAa,EACX,kEAAkE;QACpE,eAAe,EAAE,KAAK;KACvB;IACD,eAAe,EAAE,EAAE;CACpB,CAAC;AAEF,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,WAAW,EAAE;QACX;YACE,eAAe,EAAE,SAAS;YAC1B,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,sBAAsB;YACnC,OAAO,EAAE;gBACP,YAAY,EAAE,mBAAmB;gBACjC,QAAQ,EAAE,sBAAsB;aACjC;SACF;QACD;YACE,eAAe,EAAE,WAAW;YAC5B,MAAM,EAAE,SAAS;YACjB,WAAW,EAAE,sBAAsB;YACnC,KAAK,EAAE;gBACL,OAAO,EAAE,kBAAkB;gBAC3B,QAAQ,EAAE,KAAK;aAChB;SACF;KACF;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GACnC,uKAAuK,CAAC;AAE1K,MAAM,CAAC,MAAM,mCAAmC,GAAG;IACjD,YAAY,EAAE,wBAAwB;IACtC,UAAU,EAAE,GAAG;CAChB,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GACnB,opBAAopB,CAAC;AAEvpB,MAAM,CAAC,MAAM,eAAe,GAC1B,mLAAmL,CAAC;AAEtL,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,KAAK,EAAE,kBAAkB;IACzB,UAAU,EAAE,4CAA4C;IACxD,UAAU,EAAE,GAAG;CAChB,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,KAAK,EAAE,QAAQ;IACf,UAAU,EAAE,IAAI;IAChB,OAAO,EAAE;QACP,UAAU,EAAE,sCAAsC;QAClD,cAAc,EAAE,sCAAsC;QACtD,aAAa,EACX,kEAAkE;QACpE,eAAe,EAAE,MAAM;QACvB,qBAAqB,EAAE,iCAAiC;KACzD;CACF,CAAC;AAEF,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,KAAK,EAAE,QAAQ;IACf,UAAU,EAAE,IAAI;IAChB,OAAO,EAAE;QACP,UAAU,EAAE,sCAAsC;QAClD,cAAc,EAAE,sCAAsC;QACtD,aAAa,EACX,kEAAkE;QACpE,eAAe,EAAE,KAAK;QACtB,qBAAqB,EAAE,4BAA4B;KACpD;IACD,eAAe,EAAE,EAAE;CACpB,CAAC;AAEF,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACtC,YAAY,EAAE,eAAe;IAC7B,UAAU,EAAE,IAAI;CACjB,CAAC;AAEF,MAAM,CAAC,MAAM,oCAAoC,GAAG;IAClD,YAAY,EAAE,eAAe;IAC7B,aAAa,EAAE,2BAA2B;IAC1C,UAAU,EAAE,IAAI;IAChB,UAAU,EAAE,QAAQ;CACrB,CAAC;AAEF,MAAM,CAAC,MAAM,oCAAoC,GAAG;IAClD,YAAY,EAAE,eAAe;IAC7B,aAAa,EAAE,2BAA2B;IAC1C,UAAU,EAAE,IAAI;IAChB,UAAU,EAAE,QAAQ;CACrB,CAAC;AAEF,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,OAAO,EAAE;QACP,aAAa,EAAE,uBAAuB,CAAC,OAAO,CAAC,aAAa;QAC5D,cAAc,EAAE,uBAAuB,CAAC,OAAO,CAAC,cAAc;QAC9D,UAAU,EAAE,uBAAuB,CAAC,OAAO,CAAC,UAAU;KACvD;IACD,eAAe,EAAE,EAAE;CACpB,CAAC;AAEF,MAAM,CAAC,MAAM,oCAAoC,GAAG;IAClD,UAAU,EAAE,IAAI;IAChB,OAAO,EAAE;QACP,UAAU,EAAE,sBAAsB;QAClC,aAAa,EAAE,uBAAuB,CAAC,OAAO,CAAC,aAAa;QAC5D,eAAe,EAAE,QAAQ;QACzB,UAAU,EAAE,uBAAuB,CAAC,OAAO,CAAC,UAAU;KACvD;IACD,KAAK,EAAE,QAAQ;CAChB,CAAC;AAEF,MAAM,CAAC,MAAM,kCAAkC,GAAG;IAChD,UAAU,EAAE,sCAAsC;IAClD,UAAU,EAAE,sBAAsB;IAClC,OAAO,EAAE;QACP;YACE,cAAc,EAAE,sCAAsC;YACtD,KAAK,EAAE,QAAQ,CAAC,MAAM;YACtB,UAAU,EAAE,sBAAsB;YAClC,UAAU,EAAE,sBAAsB;YAClC,OAAO,EAAE,CAAC;SACX;QACD;YACE,cAAc,EAAE,sCAAsC;YACtD,KAAK,EAAE,QAAQ,CAAC,SAAS;YACzB,UAAU,EAAE,sBAAsB;YAClC,UAAU,EAAE,sBAAsB;YAClC,OAAO,EAAE,CAAC;SACX;KACF;CACF,CAAC","sourcesContent":["import { Env, Platform } from '../../shared/env.js';\nimport {\n  MFA_CREDENTIALS_URL,\n  MFA_ENROLL_COMPLETE_URL,\n  MFA_ENROLL_URL,\n  MFA_VERIFY_COMPLETE_URL,\n  MFA_VERIFY_URL,\n} from '../authentication-jwt-bearer/mfa/services.js';\nimport {\n  NONCE_URL,\n  SIWE_LOGIN_URL,\n  SRP_LOGIN_URL,\n  OIDC_TOKEN_URL,\n  PAIR_IDENTIFIERS,\n  PAIR_PROFILES_URL,\n  PAIR_SOCIAL_IDENTIFIER_URL,\n  PROFILE_LINEAGE_URL,\n  CUSTOMER_SERVICE_TOKEN_URL,\n  PARTNER_IDENTITY_TOKEN_URL,\n} from '../authentication-jwt-bearer/services.js';\n\nexport const MOCK_NONCE_URL = NONCE_URL(Env.PRD);\nexport const MOCK_SRP_LOGIN_URL = SRP_LOGIN_URL(Env.PRD);\nexport const MOCK_OIDC_TOKEN_URL = OIDC_TOKEN_URL(Env.PRD);\nexport const MOCK_SIWE_LOGIN_URL = SIWE_LOGIN_URL(Env.PRD);\nexport const MOCK_PAIR_IDENTIFIERS_URL = PAIR_IDENTIFIERS(Env.PRD);\nexport const MOCK_PAIR_PROFILES_URL = PAIR_PROFILES_URL(Env.PRD);\nexport const MOCK_PAIR_SOCIAL_IDENTIFIER_URL = PAIR_SOCIAL_IDENTIFIER_URL(\n  Env.PRD,\n);\nexport const MOCK_PROFILE_LINEAGE_URL = PROFILE_LINEAGE_URL(Env.PRD);\nexport const MOCK_CUSTOMER_SERVICE_TOKEN_URL = CUSTOMER_SERVICE_TOKEN_URL(\n  Env.PRD,\n);\nexport const MOCK_PARTNER_IDENTITY_TOKEN_URL = PARTNER_IDENTITY_TOKEN_URL(\n  Env.PRD,\n);\nexport const MOCK_MFA_ENROLL_URL = MFA_ENROLL_URL(Env.PRD);\nexport const MOCK_MFA_ENROLL_COMPLETE_URL = MFA_ENROLL_COMPLETE_URL(Env.PRD);\nexport const MOCK_MFA_VERIFY_URL = MFA_VERIFY_URL(Env.PRD);\nexport const MOCK_MFA_VERIFY_COMPLETE_URL = MFA_VERIFY_COMPLETE_URL(Env.PRD);\nexport const MOCK_MFA_CREDENTIALS_URL = MFA_CREDENTIALS_URL(Env.PRD);\n\nconst MOCK_PASSKEY_CREATE_DATA = {\n  publicKey: {\n    rp: {\n      name: 'MetaMask',\n      id: 'authentication.api.cx.metamask.io',\n    },\n    user: {\n      name: 'MetaMask 3f9a1c2b',\n      id: 'cHJvZmlsZS1pZA',\n      displayName: 'MetaMask 3f9a1c2b',\n    },\n    challenge: 'Y3JlYXRlLWNoYWxsZW5nZQ',\n    pubKeyCredParams: [{ type: 'public-key', alg: -7 }],\n    excludeCredentials: [],\n    attestation: 'none',\n  },\n};\n\nconst MOCK_PASSKEY_REQUEST_DATA = {\n  publicKey: {\n    rpId: 'authentication.api.cx.metamask.io',\n    challenge: 'dmVyaWZ5LWNoYWxsZW5nZQ',\n    allowCredentials: [{ type: 'public-key', id: 'Y3JlZGVudGlhbC1pZA' }],\n    userVerification: 'required',\n  },\n};\n\nexport const MOCK_MFA_ENROLL_PASSKEY_RESPONSE = {\n  flow_id: 'enroll-passkey-flow-id',\n  expires_at: '2099-09-07T14:30:00Z',\n  passkey_create_data: JSON.stringify(MOCK_PASSKEY_CREATE_DATA),\n};\n\nexport const MOCK_MFA_ENROLL_EMAIL_RESPONSE = {\n  flow_id: 'enroll-email-flow-id',\n  expires_at: '2099-09-07T14:30:00Z',\n};\n\nexport const MOCK_MFA_ENROLL_COMPLETE_RESPONSE = {\n  status: 'enrolled',\n};\n\nexport const MOCK_MFA_VERIFY_PASSKEY_RESPONSE = {\n  flow_id: 'verify-passkey-flow-id',\n  expires_at: '2099-09-07T14:30:00Z',\n  passkey_request_data: JSON.stringify(MOCK_PASSKEY_REQUEST_DATA),\n};\n\nexport const MOCK_MFA_VERIFY_EMAIL_RESPONSE = {\n  flow_id: 'verify-email-flow-id',\n  expires_at: '2099-09-07T14:30:00Z',\n};\n\nexport const MOCK_MFA_ASSERTION_JWT =\n  'eyJhbGciOiJub25lIiwidHlwIjoiSldUIn0.eyJzdWIiOiJmODgyMjdiZC1iNjE1LTQxYTMtYjBiZS00NjdkZDc4MWE0YWQiLCJhYWwiOjIsImFtciI6InBhc3NrZXkiLCJleHAiOjQxMDI0NDQ4MDB9.signature';\n\nexport const MOCK_MFA_VERIFY_COMPLETE_RESPONSE = {\n  token: MOCK_MFA_ASSERTION_JWT,\n  expires_in: 900,\n  profile: {\n    profile_id: 'f88227bd-b615-41a3-b0be-467dd781a4ad',\n    identifier_id:\n      'da9a9fc7b09edde9cc23cec9b7e11a71fb0ab4d2ddd8af8af905306f3e1456fb',\n    identifier_type: 'SRP',\n  },\n  profile_aliases: [],\n};\n\nexport const MOCK_MFA_CREDENTIALS_RESPONSE = {\n  credentials: [\n    {\n      credential_type: 'passkey',\n      status: 'active',\n      enrolled_at: '2026-09-15T10:00:00Z',\n      passkey: {\n        display_name: 'MetaMask 3f9a1c2b',\n        added_at: '2026-09-15T10:00:00Z',\n      },\n    },\n    {\n      credential_type: 'email_otp',\n      status: 'pending',\n      enrolled_at: '2026-09-15T10:05:00Z',\n      email: {\n        address: 'user@example.com',\n        verified: false,\n      },\n    },\n  ],\n};\n\nexport const MOCK_ELEVATED_ACCESS_JWT =\n  'eyJhbGciOiJub25lIiwidHlwIjoiSldUIn0.eyJzdWIiOiJmODgyMjdiZC1iNjE1LTQxYTMtYjBiZS00NjdkZDc4MWE0YWQiLCJhYWwiOjIsImFtciI6WyJwYXNza2V5Il0sImV4cCI6NDEwMjQ0NDgwMH0.signature';\n\nexport const MOCK_ELEVATED_ACCESS_TOKEN_RESPONSE = {\n  access_token: MOCK_ELEVATED_ACCESS_JWT,\n  expires_in: 900,\n};\n\nexport const MOCK_JWT =\n  'eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6ImIwNzE2N2U2LWJjNWUtNDgyZC1hNjRhLWU1MjQ0MjY2MGU3NyJ9.eyJzdWIiOiI1MzE0ODc5YWM2NDU1OGI3OTQ5ZmI4NWIzMjg2ZjZjNjUwODAzYmFiMTY0Y2QyOWNmMmM3YzdmMjMzMWMwZTRlIiwiaWF0IjoxNzA2MTEzMDYyLCJleHAiOjE3NjkxODUwNjMsImlzcyI6ImF1dGgubWV0YW1hc2suaW8iLCJhdWQiOiJwb3J0Zm9saW8ubWV0YW1hc2suaW8ifQ.E5UL6oABNweS8t5a6IBTqTf7NLOJbrhJSmEcsr7kwLp4bGvcENJzACwnsHDkA6PlzfDV09ZhAGU_F3hlS0j-erbY0k0AFR-GAtyS7E9N02D8RgUDz5oDR65CKmzM8JilgFA8UvruJ6OJGogroaOSOqzRES_s8MjHpP47RJ9lXrUesajsbOudXbuksXWg5QmWip6LLvjwr8UUzcJzNQilyIhiEpo4WdzWM4R3VtTwr4rHnWEvtYnYCov1jmI2w3YQ48y0M-3Y9IOO0ov_vlITRrOnR7Y7fRUGLUFmU5msD8mNWRywjQFLHfJJ1yNP5aJ8TkuCK3sC6kcUH335IVvukQ';\n\nexport const MOCK_ACCESS_JWT =\n  'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyLCJleHAiOjQxMDI0NDQ4MDB9.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c';\n\nexport const MOCK_NONCE_RESPONSE = {\n  nonce: 'xGMm9SoihEKeAEfV',\n  identifier: '0xd8641601Cb79a94FD872fE42d5b4a067A44a7e88',\n  expires_in: 300,\n};\n\nexport const MOCK_SIWE_LOGIN_RESPONSE = {\n  token: MOCK_JWT,\n  expires_in: 3600,\n  profile: {\n    profile_id: 'fa2bbf82-bd9a-4e6b-aabc-9ca0d0319b6e',\n    metametrics_id: 'de742679-4960-4977-a415-4718b5f8e86c',\n    identifier_id:\n      'ec9a4e9906836497efad2fd4d4290b34d2c6a2c0d93eb174aa3cd88a133adbaf',\n    identifier_type: 'SIWE',\n    encrypted_storage_key: '2c6a2c0d93eb174aa3cd88a133adbaf',\n  },\n};\n\nexport const MOCK_SRP_LOGIN_RESPONSE = {\n  token: MOCK_JWT,\n  expires_in: 3600,\n  profile: {\n    profile_id: 'f88227bd-b615-41a3-b0be-467dd781a4ad',\n    metametrics_id: '561ec651-a844-4b36-a451-04d6eac35740',\n    identifier_id:\n      'da9a9fc7b09edde9cc23cec9b7e11a71fb0ab4d2ddd8af8af905306f3e1456fb',\n    identifier_type: 'SRP',\n    encrypted_storage_key: 'd2ddd8af8af905306f3e1456fb',\n  },\n  profile_aliases: [],\n};\n\nexport const MOCK_OIDC_TOKEN_RESPONSE = {\n  access_token: MOCK_ACCESS_JWT,\n  expires_in: 3600,\n};\n\nexport const MOCK_CUSTOMER_SERVICE_TOKEN_RESPONSE = {\n  access_token: MOCK_ACCESS_JWT,\n  refresh_token: 'ory_rt_mock_refresh_token',\n  expires_in: 3600,\n  token_type: 'bearer',\n};\n\nexport const MOCK_PARTNER_IDENTITY_TOKEN_RESPONSE = {\n  access_token: MOCK_ACCESS_JWT,\n  refresh_token: 'ory_rt_mock_refresh_token',\n  expires_in: 3600,\n  token_type: 'bearer',\n};\n\nexport const MOCK_PAIR_PROFILES_RESPONSE = {\n  profile: {\n    identifier_id: MOCK_SRP_LOGIN_RESPONSE.profile.identifier_id,\n    metametrics_id: MOCK_SRP_LOGIN_RESPONSE.profile.metametrics_id,\n    profile_id: MOCK_SRP_LOGIN_RESPONSE.profile.profile_id,\n  },\n  profile_aliases: [],\n};\n\nexport const MOCK_PAIR_SOCIAL_IDENTIFIER_RESPONSE = {\n  expires_in: 3600,\n  profile: {\n    created_at: '2024-01-15T10:30:00Z',\n    identifier_id: MOCK_SRP_LOGIN_RESPONSE.profile.identifier_id,\n    identifier_type: 'GOOGLE',\n    profile_id: MOCK_SRP_LOGIN_RESPONSE.profile.profile_id,\n  },\n  token: MOCK_JWT,\n};\n\nexport const MOCK_USER_PROFILE_LINEAGE_RESPONSE = {\n  profile_id: 'f88227bd-b615-41a3-b0be-467dd781a4ad',\n  created_at: '2025-10-01T12:00:00Z',\n  lineage: [\n    {\n      metametrics_id: '561ec651-a844-4b36-a451-04d6eac35740',\n      agent: Platform.MOBILE,\n      created_at: '2025-10-01T12:00:00Z',\n      updated_at: '2025-10-01T12:00:00Z',\n      counter: 1,\n    },\n    {\n      metametrics_id: 'de742679-4960-4977-a415-4718b5f8e86c',\n      agent: Platform.EXTENSION,\n      created_at: '2025-10-01T12:00:00Z',\n      updated_at: '2025-10-01T12:00:00Z',\n      counter: 2,\n    },\n  ],\n};\n"]}

package/dist/sdk/utils/as-record.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Narrows an unknown value to a plain record, for reading optional fields off
+ * untrusted data (parsed JSON, decoded JWT payloads) before it has been
+ * validated against a struct.
+ *
+ * @param value - The value to narrow.
+ * @returns The value as a record, or undefined if it is not an object.
+ */
+export declare function asRecord(value: unknown): Record<string, unknown> | undefined;
+//# sourceMappingURL=as-record.d.ts.map

package/dist/sdk/utils/as-record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"as-record.d.ts","sourceRoot":"","sources":["../../../src/sdk/utils/as-record.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAI5E"}

package/dist/sdk/utils/as-record.js

@@ -0,0 +1,14 @@
+/**
+ * Narrows an unknown value to a plain record, for reading optional fields off
+ * untrusted data (parsed JSON, decoded JWT payloads) before it has been
+ * validated against a struct.
+ *
+ * @param value - The value to narrow.
+ * @returns The value as a record, or undefined if it is not an object.
+ */
+export function asRecord(value) {
+    return typeof value === 'object' && value !== null
+        ? value
+        : undefined;
+}
+//# sourceMappingURL=as-record.js.map

package/dist/sdk/utils/as-record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"as-record.js","sourceRoot":"","sources":["../../../src/sdk/utils/as-record.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAChD,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC","sourcesContent":["/**\n * Narrows an unknown value to a plain record, for reading optional fields off\n * untrusted data (parsed JSON, decoded JWT payloads) before it has been\n * validated against a struct.\n *\n * @param value - The value to narrow.\n * @returns The value as a record, or undefined if it is not an object.\n */\nexport function asRecord(value: unknown): Record<string, unknown> | undefined {\n  return typeof value === 'object' && value !== null\n    ? (value as Record<string, unknown>)\n    : undefined;\n}\n"]}

package/dist/sdk/utils/jwt.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Decodes a JWT payload without verifying its signature.
+ *
+ * Use this only for inspecting claims on a token received from a trusted
+ * exchange. Signature verification remains the authorization server's
+ * responsibility.
+ *
+ * @param token - JWT to decode.
+ * @returns The parsed payload.
+ * @throws If the token or payload is malformed.
+ */
+export declare function decodeJwtPayload(token: string): unknown;
+//# sourceMappingURL=jwt.d.ts.map

package/dist/sdk/utils/jwt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.d.ts","sourceRoot":"","sources":["../../../src/sdk/utils/jwt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CASvD"}

package/dist/sdk/utils/jwt.js

@@ -0,0 +1,21 @@
+/**
+ * Decodes a JWT payload without verifying its signature.
+ *
+ * Use this only for inspecting claims on a token received from a trusted
+ * exchange. Signature verification remains the authorization server's
+ * responsibility.
+ *
+ * @param token - JWT to decode.
+ * @returns The parsed payload.
+ * @throws If the token or payload is malformed.
+ */
+export function decodeJwtPayload(token) {
+    const parts = token.split('.');
+    if (parts.length !== 3 || !parts[1]) {
+        throw new Error('Invalid JWT');
+    }
+    const base64 = parts[1].replace(/-/gu, '+').replace(/_/gu, '/');
+    const padded = base64.padEnd(Math.ceil(base64.length / 4) * 4, '=');
+    return JSON.parse(atob(padded));
+}
+//# sourceMappingURL=jwt.js.map

package/dist/sdk/utils/jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt.js","sourceRoot":"","sources":["../../../src/sdk/utils/jwt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACpE,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;AAClC,CAAC","sourcesContent":["/**\n * Decodes a JWT payload without verifying its signature.\n *\n * Use this only for inspecting claims on a token received from a trusted\n * exchange. Signature verification remains the authorization server's\n * responsibility.\n *\n * @param token - JWT to decode.\n * @returns The parsed payload.\n * @throws If the token or payload is malformed.\n */\nexport function decodeJwtPayload(token: string): unknown {\n  const parts = token.split('.');\n  if (parts.length !== 3 || !parts[1]) {\n    throw new Error('Invalid JWT');\n  }\n\n  const base64 = parts[1].replace(/-/gu, '+').replace(/_/gu, '/');\n  const padded = base64.padEnd(Math.ceil(base64.length / 4) * 4, '=');\n  return JSON.parse(atob(padded));\n}\n"]}

package/dist/sdk/utils/to-error-message.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Extracts a human-readable message from a caught value.
+ *
+ * @param error - The caught value.
+ * @returns The error's message, or its string form when it is not an Error.
+ */
+export declare function toErrorMessage(error: unknown): string;
+//# sourceMappingURL=to-error-message.d.ts.map

package/dist/sdk/utils/to-error-message.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"to-error-message.d.ts","sourceRoot":"","sources":["../../../src/sdk/utils/to-error-message.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAErD"}

package/dist/sdk/utils/to-error-message.js

@@ -0,0 +1,10 @@
+/**
+ * Extracts a human-readable message from a caught value.
+ *
+ * @param error - The caught value.
+ * @returns The error's message, or its string form when it is not an Error.
+ */
+export function toErrorMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+//# sourceMappingURL=to-error-message.js.map

package/dist/sdk/utils/to-error-message.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"to-error-message.js","sourceRoot":"","sources":["../../../src/sdk/utils/to-error-message.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC","sourcesContent":["/**\n * Extracts a human-readable message from a caught value.\n *\n * @param error - The caught value.\n * @returns The error's message, or its string form when it is not an Error.\n */\nexport function toErrorMessage(error: unknown): string {\n  return error instanceof Error ? error.message : String(error);\n}\n"]}

package/dist/sdk/utils/validate-login-response.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validate-login-response.d.ts","sourceRoot":"","sources":["../../../src/sdk/utils/validate-login-response.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAE1D;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa,CAgB5E"}
+{"version":3,"file":"validate-login-response.d.ts","sourceRoot":"","sources":["../../../src/sdk/utils/validate-login-response.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAG1D;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa,CAgB5E"}

package/dist/sdk/utils/validate-login-response.js

@@ -1,3 +1,4 @@
+import { decodeJwtPayload } from './jwt.js';
 /**
  * Validates that the input is a well-formed, non-expired LoginResponse.
  *
@@ -30,13 +31,10 @@ export function validateLoginResponse(input) {
  */
 function isJwtExpired(token) {
     try {
-        const parts = token.split('.');
-        if (parts.length !== 3) {
-            return true;
-        }
-        const base64 = parts[1].replace(/-/gu, '+').replace(/_/gu, '/');
-        const { exp } = JSON.parse(atob(base64));
-        return !Number.isInteger(exp) || exp * 1000 <= Date.now();
+        const { exp } = decodeJwtPayload(token);
+        return (typeof exp !== 'number' ||
+            !Number.isInteger(exp) ||
+            exp * 1000 <= Date.now());
     }
     catch {
         return true;

package/dist/sdk/utils/validate-login-response.js.map

@@ -1 +1 @@
-{"version":3,"file":"validate-login-response.js","sourceRoot":"","sources":["../../../src/sdk/utils/validate-login-response.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,MAAM,YAAY,GAAG,KAAsB,CAAC;IAE5C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,YAAY,EAAE,KAAK,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC;QACnD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QACjD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAChE,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;QACzC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import type { LoginResponse } from '../authentication.js';\n\n/**\n * Validates that the input is a well-formed, non-expired LoginResponse.\n *\n * Checks structural shape (token + profile objects exist) and verifies\n * the JWT access token's `exp` claim is still in the future. This acts\n * as a hard guard against stale cached tokens regardless of client-side\n * TTL tracking (obtainedAt / expiresIn), which can be corrupted.\n *\n * @param input - unknown/untyped input\n * @returns boolean if input is a valid, non-expired LoginResponse\n */\nexport function validateLoginResponse(input: unknown): input is LoginResponse {\n  const assumedInput = input as LoginResponse;\n\n  if (!assumedInput) {\n    return false;\n  }\n\n  if (!assumedInput?.token || !assumedInput?.profile) {\n    return false;\n  }\n\n  if (isJwtExpired(assumedInput.token.accessToken)) {\n    return false;\n  }\n\n  return true;\n}\n\n/**\n * Checks whether a JWT has expired by decoding its `exp` claim.\n *\n * @param token - A JWT string.\n * @returns true if the token is expired or cannot be decoded; false if still valid.\n */\nfunction isJwtExpired(token: string): boolean {\n  try {\n    const parts = token.split('.');\n    if (parts.length !== 3) {\n      return true;\n    }\n    const base64 = parts[1].replace(/-/gu, '+').replace(/_/gu, '/');\n    const { exp } = JSON.parse(atob(base64));\n    return !Number.isInteger(exp) || exp * 1000 <= Date.now();\n  } catch {\n    return true;\n  }\n}\n"]}
+{"version":3,"file":"validate-login-response.js","sourceRoot":"","sources":["../../../src/sdk/utils/validate-login-response.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAE5C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,MAAM,YAAY,GAAG,KAAsB,CAAC;IAE5C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,YAAY,EAAE,KAAK,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC;QACnD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QACjD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAsB,CAAC;QAC7D,OAAO,CACL,OAAO,GAAG,KAAK,QAAQ;YACvB,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC;YACtB,GAAG,GAAG,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,CACzB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC","sourcesContent":["import type { LoginResponse } from '../authentication.js';\nimport { decodeJwtPayload } from './jwt.js';\n\n/**\n * Validates that the input is a well-formed, non-expired LoginResponse.\n *\n * Checks structural shape (token + profile objects exist) and verifies\n * the JWT access token's `exp` claim is still in the future. This acts\n * as a hard guard against stale cached tokens regardless of client-side\n * TTL tracking (obtainedAt / expiresIn), which can be corrupted.\n *\n * @param input - unknown/untyped input\n * @returns boolean if input is a valid, non-expired LoginResponse\n */\nexport function validateLoginResponse(input: unknown): input is LoginResponse {\n  const assumedInput = input as LoginResponse;\n\n  if (!assumedInput) {\n    return false;\n  }\n\n  if (!assumedInput?.token || !assumedInput?.profile) {\n    return false;\n  }\n\n  if (isJwtExpired(assumedInput.token.accessToken)) {\n    return false;\n  }\n\n  return true;\n}\n\n/**\n * Checks whether a JWT has expired by decoding its `exp` claim.\n *\n * @param token - A JWT string.\n * @returns true if the token is expired or cannot be decoded; false if still valid.\n */\nfunction isJwtExpired(token: string): boolean {\n  try {\n    const { exp } = decodeJwtPayload(token) as { exp?: unknown };\n    return (\n      typeof exp !== 'number' ||\n      !Number.isInteger(exp) ||\n      exp * 1000 <= Date.now()\n    );\n  } catch {\n    return true;\n  }\n}\n"]}

package/dist/shared/utils/entropy-source.d.ts

@@ -1,22 +1,13 @@
-import type { KeyringObject } from '@metamask/keyring-controller';
-/**
- * Reads HD keyring entropy source IDs (metadata IDs) from KeyringController
- * keyrings, primary first. Returns an empty array when none are available
- * (e.g. the wallet is locked, where `keyrings` is cleared).
- *
- * @param keyrings - Keyrings from `KeyringController:getState`.
- * @returns The HD keyring metadata IDs, primary first.
- */
-export declare function getHdKeyringEntropySourceIds(keyrings: KeyringObject[] | null | undefined): string[];
+import type { KeyringControllerState } from '@metamask/keyring-controller';
 /**
  * Resolves the primary SRP's entropy source ID (the first HD keyring's
  * metadata ID). The ID is randomly regenerated whenever the vault is
  * recreated (e.g. on restore).
  *
- * @param keyrings - Keyrings from `KeyringController:getState`.
+ * @param keyringState - KeyringController state.
  * @returns The primary HD keyring metadata ID.
  * @throws If no HD keyring is available; callers must only resolve while
  * the wallet is unlocked.
  */
-export declare function getPrimaryHdKeyringEntropySourceId(keyrings: KeyringObject[] | null | undefined): string;
+export declare function getPrimaryHdKeyringEntropySourceId(keyringState: KeyringControllerState): string;
 //# sourceMappingURL=entropy-source.d.ts.map

package/dist/shared/utils/entropy-source.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entropy-source.d.ts","sourceRoot":"","sources":["../../../src/shared/utils/entropy-source.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAElE;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,aAAa,EAAE,GAAG,IAAI,GAAG,SAAS,GAC3C,MAAM,EAAE,CAIV;AAED;;;;;;;;;GASG;AACH,wBAAgB,kCAAkC,CAChD,QAAQ,EAAE,aAAa,EAAE,GAAG,IAAI,GAAG,SAAS,GAC3C,MAAM,CAQR"}
+{"version":3,"file":"entropy-source.d.ts","sourceRoot":"","sources":["../../../src/shared/utils/entropy-source.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAE3E;;;;;;;;;GASG;AACH,wBAAgB,kCAAkC,CAChD,YAAY,EAAE,sBAAsB,GACnC,MAAM,CASR"}

package/dist/shared/utils/entropy-source.js

@@ -1,29 +1,16 @@
-import { KeyringTypes } from '@metamask/keyring-controller';
-/**
- * Reads HD keyring entropy source IDs (metadata IDs) from KeyringController
- * keyrings, primary first. Returns an empty array when none are available
- * (e.g. the wallet is locked, where `keyrings` is cleared).
- *
- * @param keyrings - Keyrings from `KeyringController:getState`.
- * @returns The HD keyring metadata IDs, primary first.
- */
-export function getHdKeyringEntropySourceIds(keyrings) {
-    return (keyrings ?? [])
-        .filter((keyring) => keyring.type === KeyringTypes.hd.toString())
-        .map((keyring) => keyring.metadata.id);
-}
+import { selectPrimaryHdKeyringEntropySourceId } from '@metamask/keyring-controller';
 /**
  * Resolves the primary SRP's entropy source ID (the first HD keyring's
  * metadata ID). The ID is randomly regenerated whenever the vault is
  * recreated (e.g. on restore).
  *
- * @param keyrings - Keyrings from `KeyringController:getState`.
+ * @param keyringState - KeyringController state.
  * @returns The primary HD keyring metadata ID.
  * @throws If no HD keyring is available; callers must only resolve while
  * the wallet is unlocked.
  */
-export function getPrimaryHdKeyringEntropySourceId(keyrings) {
-    const [primaryEntropySourceId] = getHdKeyringEntropySourceIds(keyrings);
+export function getPrimaryHdKeyringEntropySourceId(keyringState) {
+    const primaryEntropySourceId = selectPrimaryHdKeyringEntropySourceId(keyringState);
     if (!primaryEntropySourceId) {
         throw new Error('getPrimaryHdKeyringEntropySourceId - no HD keyring available');
     }

package/dist/shared/utils/entropy-source.js.map

@@ -1 +1 @@
-{"version":3,"file":"entropy-source.js","sourceRoot":"","sources":["../../../src/shared/utils/entropy-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAG5D;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B,CAC1C,QAA4C;IAE5C,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC;SAChE,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kCAAkC,CAChD,QAA4C;IAE5C,MAAM,CAAC,sBAAsB,CAAC,GAAG,4BAA4B,CAAC,QAAQ,CAAC,CAAC;IACxE,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,OAAO,sBAAsB,CAAC;AAChC,CAAC","sourcesContent":["import { KeyringTypes } from '@metamask/keyring-controller';\nimport type { KeyringObject } from '@metamask/keyring-controller';\n\n/**\n * Reads HD keyring entropy source IDs (metadata IDs) from KeyringController\n * keyrings, primary first. Returns an empty array when none are available\n * (e.g. the wallet is locked, where `keyrings` is cleared).\n *\n * @param keyrings - Keyrings from `KeyringController:getState`.\n * @returns The HD keyring metadata IDs, primary first.\n */\nexport function getHdKeyringEntropySourceIds(\n  keyrings: KeyringObject[] | null | undefined,\n): string[] {\n  return (keyrings ?? [])\n    .filter((keyring) => keyring.type === KeyringTypes.hd.toString())\n    .map((keyring) => keyring.metadata.id);\n}\n\n/**\n * Resolves the primary SRP's entropy source ID (the first HD keyring's\n * metadata ID). The ID is randomly regenerated whenever the vault is\n * recreated (e.g. on restore).\n *\n * @param keyrings - Keyrings from `KeyringController:getState`.\n * @returns The primary HD keyring metadata ID.\n * @throws If no HD keyring is available; callers must only resolve while\n * the wallet is unlocked.\n */\nexport function getPrimaryHdKeyringEntropySourceId(\n  keyrings: KeyringObject[] | null | undefined,\n): string {\n  const [primaryEntropySourceId] = getHdKeyringEntropySourceIds(keyrings);\n  if (!primaryEntropySourceId) {\n    throw new Error(\n      'getPrimaryHdKeyringEntropySourceId - no HD keyring available',\n    );\n  }\n  return primaryEntropySourceId;\n}\n"]}
+{"version":3,"file":"entropy-source.js","sourceRoot":"","sources":["../../../src/shared/utils/entropy-source.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qCAAqC,EAAE,MAAM,8BAA8B,CAAC;AAGrF;;;;;;;;;GASG;AACH,MAAM,UAAU,kCAAkC,CAChD,YAAoC;IAEpC,MAAM,sBAAsB,GAC1B,qCAAqC,CAAC,YAAY,CAAC,CAAC;IACtD,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,OAAO,sBAAsB,CAAC;AAChC,CAAC","sourcesContent":["import { selectPrimaryHdKeyringEntropySourceId } from '@metamask/keyring-controller';\nimport type { KeyringControllerState } from '@metamask/keyring-controller';\n\n/**\n * Resolves the primary SRP's entropy source ID (the first HD keyring's\n * metadata ID). The ID is randomly regenerated whenever the vault is\n * recreated (e.g. on restore).\n *\n * @param keyringState - KeyringController state.\n * @returns The primary HD keyring metadata ID.\n * @throws If no HD keyring is available; callers must only resolve while\n * the wallet is unlocked.\n */\nexport function getPrimaryHdKeyringEntropySourceId(\n  keyringState: KeyringControllerState,\n): string {\n  const primaryEntropySourceId =\n    selectPrimaryHdKeyringEntropySourceId(keyringState);\n  if (!primaryEntropySourceId) {\n    throw new Error(\n      'getPrimaryHdKeyringEntropySourceId - no HD keyring available',\n    );\n  }\n  return primaryEntropySourceId;\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@metamask-previews/profile-sync-controller",
-  "version": "32.1.1-preview-db287901b",
+  "version": "32.1.1-preview-d3f9964be",
   "description": "The profile sync helps developers synchronize data across multiple clients and devices in a privacy-preserving way. All data saved in the user storage database is encrypted client-side to preserve privacy. The user storage provides a modular design, giving developers the flexibility to construct and manage their storage spaces in a way that best suits their needs",
   "keywords": [
     "Ethereum",
@@ -75,10 +75,12 @@
   "dependencies": {
     "@metamask/address-book-controller": "^8.0.0",
     "@metamask/base-controller": "^10.0.0",
+    "@metamask/controller-utils": "^13.0.0",
     "@metamask/key-tree": "^10.1.1",
     "@metamask/keyring-controller": "^28.0.0",
     "@metamask/messenger": "^3.0.0",
     "@metamask/seedless-onboarding-controller": "^11.0.0",
+    "@metamask/superstruct": "^3.4.1",
     "@metamask/utils": "^12.0.0",
     "@noble/ciphers": "^1.3.0",
     "@noble/curves": "^1.9.2",
@@ -95,6 +97,7 @@
     "@metamask/keyring-api": "^24.0.0",
     "@metamask/keyring-internal-api": "^12.0.0",
     "@metamask/providers": "^22.1.0",
+    "@metamask/rpc-errors": "^7.0.2",
     "@types/jest": "^30.0.0",
     "@typescript/native": "npm:typescript@^7.0.2",
     "deepmerge": "^4.2.2",