@metamask-previews/profile-sync-controller 33.0.0-preview-0f8c056e2 → 33.0.0-preview-c2be02bd4

package/CHANGELOG.md

@@ -9,10 +9,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Changed
 
+- Replace JS AES implementation with `@metamask/cryptography` ([#10621](https://github.com/MetaMask/core/pull/10621))
 - Bump `immer` from `^9.0.21` to `^11.1.18` ([#10382](https://github.com/MetaMask/core/pull/10382))
 
 ### Fixed
 
+- Coalesce overlapping `performSignIn` calls so only one sign-in runs at a time ([#10646](https://github.com/MetaMask/core/pull/10646))
 - Rely on `@metamask/key-tree` crypto implementation for HMAC-SHA-512 instead of hardcoded `noble` implementation ([#10424](https://github.com/MetaMask/core/pull/10424))
   - `@metamask/key-tree` uses WebCrypto API if available and fallback to `noble` otherwise.
   - One note, we expect the platform to provide a fully-compliant WebCrypto (`crypto.subtle`) implementation for this to work (`@metamask/key-tree` detection is global and not "per crypto functions").

package/dist/controllers/authentication/AuthenticationController.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AuthenticationController.d.ts","sourceRoot":"","sources":["../../../src/controllers/authentication/AuthenticationController.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,KAAK,EACV,wBAAwB,EACxB,0BAA0B,EAE3B,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,aAAa,EAAgB,MAAM,4BAA4B,CAAC;AAE9E,OAAO,KAAK,EACV,+BAA+B,EAC/B,0BAA0B,EAC1B,4BAA4B,EAC5B,0CAA0C,EAC3C,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EACV,gDAAgD,EAChD,0CAA0C,EAC3C,MAAM,0CAA0C,CAAC;AAYlD,OAAO,KAAK,EAEV,aAAa,EACb,YAAY,EAIZ,WAAW,EACX,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,sBAAsB,EACtB,yBAAyB,EACzB,kBAAkB,EAClB,mBAAmB,EACnB,wBAAwB,EACxB,2BAA2B,EAC3B,iBAAiB,EACjB,2BAA2B,EAC3B,qBAAqB,EACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAGL,GAAG,EAKJ,MAAM,oBAAoB,CAAC;AAG5B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAOtE,OAAO,EAAE,qCAAqC,EAAE,MAAM,mDAAmD,CAAC;AAE1G,QAAA,MAAM,cAAc,6BAA6B,CAAC;AAGlD,MAAM,MAAM,6BAA6B,GAAG;IAC1C,UAAU,EAAE,OAAO,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC/C;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAC3C;;;;;;;;;;OAUG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;;;;;;;;;;OAWG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B,CAAC;AACF,eAAO,MAAM,YAAY,EAAE,6BAK1B,CAAC;AAmEF;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,QAAc,CAAC;AAEvD;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B,QAAa,CAAC;AAaxD,KAAK,gBAAgB,GAAG;IACtB,GAAG,EAAE,GAAG,CAAC;IACT;;;;OAIG;IACH,sBAAsB,EAAE,MAAM,OAAO,CAAC;CACvC,CAAC;AAuBF,MAAM,MAAM,OAAO,GACf,sCAAsC,GACtC,qCAAqC,CAAC;AAE1C,MAAM,MAAM,sCAAsC,GAAG,wBAAwB,CAC3E,OAAO,cAAc,EACrB,6BAA6B,CAC9B,CAAC;AAEF,MAAM,MAAM,wCAAwC,GAClD,0BAA0B,CACxB,OAAO,cAAc,EACrB,6BAA6B,CAC9B,CAAC;AAEJ,MAAM,MAAM,iBAAiB,GAAG;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,YAAY,EAAE,CAAC;IAC/B,gBAAgB,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,0CAA0C,GAAG;IACvD,IAAI,EAAE,GAAG,OAAO,cAAc,gBAAgB,CAAC;IAC/C,OAAO,EAAE,CAAC,iBAAiB,CAAC,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,MAAM,GACd,wCAAwC,GACxC,0CAA0C,CAAC;AAG/C,KAAK,cAAc,GACf,+BAA+B,GAC/B,0CAA0C,GAC1C,0CAA0C,GAC1C,gDAAgD,CAAC;AAErD,KAAK,aAAa,GAAG,0BAA0B,GAAG,4BAA4B,CAAC;AAG/E,MAAM,MAAM,iCAAiC,GAAG,SAAS,CACvD,OAAO,cAAc,EACrB,OAAO,GAAG,cAAc,EACxB,MAAM,GAAG,aAAa,CACvB,CAAC;AAEF;;;GAGG;AACH,qBAAa,wBAAyB,SAAQ,cAAc,CAC1D,OAAO,cAAc,EACrB,6BAA6B,EAC7B,iCAAiC,CAClC;;IA0DC,YAAY,EACV,SAAS,EACT,KAAK,EACL,MAAM,EACN,WAAW,EACX,KAAK,GACN,EAAE;QACD,SAAS,EAAE,iCAAiC,CAAC;QAC7C,KAAK,CAAC,EAAE,6BAA6B,CAAC;QACtC,MAAM,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACnC;;;WAGG;QACH,WAAW,EAAE,eAAe,CAAC;QAC7B,KAAK,CAAC,EAAE,aAAa,CAAC;KACvB,EAkDA;IAkLY,aAAa,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAiC9C;IAgHD;;;;OAIG;IACI,qBAAqB,IAAI,IAAI,CAOnC;IA8LD;;;;OAIG;IACU,0BAA0B,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC,CA+BvE;IAED;;;;;OAKG;IACU,yBAAyB,CACpC,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,mBAAmB,CAAC,CAyB9B;IAED;;;;;;;;;;;;;OAaG;IACU,4BAA4B,CACvC,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,kBAAkB,EAAE,CAAC,CA0C/B;IAED;;;;;OAKG;IACU,2BAA2B,CACtC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,qBAAqB,CAAC,CAiBhC;IAED;;;;;;;;;;OAUG;IACU,8BAA8B,CACzC,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,iBAAiB,CAAC,CA+C5B;IAED;;;;;;;;OAQG;IACI,oBAAoB,CACzB,OAAO,GAAE,2BAAgC,GACxC,iBAAiB,GAAG,IAAI,CAoB1B;IAqCD;;OAEG;IACI,wBAAwB,IAAI,IAAI,CAKtC;IAoBM,cAAc,IAAI,IAAI,CAQ5B;IAED;;;OAGG;IACI,UAAU,IAAI,IAAI,CAMxB;IAED;;;;;;;;;;OAUG;IACU,cAAc,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAIrE;IAED;;;;;;;;;;;;OAYG;IACU,iBAAiB,CAC5B,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,WAAW,CAAC,CAItB;IAED;;;;;;;;;;;;;;;OAeG;IACU,yBAAyB,IAAI,OAAO,CAAC,MAAM,CAAC,CAgBxD;IAcY,qBAAqB,CAChC,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,kBAAkB,CAAC,CAI7B;IAED;;;;;;;;;;OAUG;IACU,uBAAuB,CAClC,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,MAAM,CAAC,CAIjB;IAED;;;;;;;;;;;;OAYG;IACU,uBAAuB,CAClC,MAAM,EAAE,eAAe,EACvB,QAAQ,EAAE,iBAAiB,EAC3B,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,MAAM,CAAC,CAQjB;IAEM,UAAU,IAAI,OAAO,CAE3B;CA8EF"}
+{"version":3,"file":"AuthenticationController.d.ts","sourceRoot":"","sources":["../../../src/controllers/authentication/AuthenticationController.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,KAAK,EACV,wBAAwB,EACxB,0BAA0B,EAE3B,MAAM,2BAA2B,CAAC;AACnC,OAAO,KAAK,EAAE,aAAa,EAAgB,MAAM,4BAA4B,CAAC;AAE9E,OAAO,KAAK,EACV,+BAA+B,EAC/B,0BAA0B,EAC1B,4BAA4B,EAC5B,0CAA0C,EAC3C,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,KAAK,EACV,gDAAgD,EAChD,0CAA0C,EAC3C,MAAM,0CAA0C,CAAC;AAYlD,OAAO,KAAK,EAEV,aAAa,EACb,YAAY,EAIZ,WAAW,EACX,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,EACf,sBAAsB,EACtB,yBAAyB,EACzB,kBAAkB,EAClB,mBAAmB,EACnB,wBAAwB,EACxB,2BAA2B,EAC3B,iBAAiB,EACjB,2BAA2B,EAC3B,qBAAqB,EACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAGL,GAAG,EAKJ,MAAM,oBAAoB,CAAC;AAG5B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gCAAgC,CAAC;AAOtE,OAAO,EAAE,qCAAqC,EAAE,MAAM,mDAAmD,CAAC;AAE1G,QAAA,MAAM,cAAc,6BAA6B,CAAC;AAGlD,MAAM,MAAM,6BAA6B,GAAG;IAC1C,UAAU,EAAE,OAAO,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC/C;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,kBAAkB,EAAE,CAAC;IAC3C;;;;;;;;;;OAUG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;;;;;;;;;;OAWG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B,CAAC;AACF,eAAO,MAAM,YAAY,EAAE,6BAK1B,CAAC;AAmEF;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,QAAc,CAAC;AAEvD;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B,QAAa,CAAC;AAaxD,KAAK,gBAAgB,GAAG;IACtB,GAAG,EAAE,GAAG,CAAC;IACT;;;;OAIG;IACH,sBAAsB,EAAE,MAAM,OAAO,CAAC;CACvC,CAAC;AAuBF,MAAM,MAAM,OAAO,GACf,sCAAsC,GACtC,qCAAqC,CAAC;AAE1C,MAAM,MAAM,sCAAsC,GAAG,wBAAwB,CAC3E,OAAO,cAAc,EACrB,6BAA6B,CAC9B,CAAC;AAEF,MAAM,MAAM,wCAAwC,GAClD,0BAA0B,CACxB,OAAO,cAAc,EACrB,6BAA6B,CAC9B,CAAC;AAEJ,MAAM,MAAM,iBAAiB,GAAG;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,YAAY,EAAE,CAAC;IAC/B,gBAAgB,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,0CAA0C,GAAG;IACvD,IAAI,EAAE,GAAG,OAAO,cAAc,gBAAgB,CAAC;IAC/C,OAAO,EAAE,CAAC,iBAAiB,CAAC,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,MAAM,GACd,wCAAwC,GACxC,0CAA0C,CAAC;AAG/C,KAAK,cAAc,GACf,+BAA+B,GAC/B,0CAA0C,GAC1C,0CAA0C,GAC1C,gDAAgD,CAAC;AAErD,KAAK,aAAa,GAAG,0BAA0B,GAAG,4BAA4B,CAAC;AAG/E,MAAM,MAAM,iCAAiC,GAAG,SAAS,CACvD,OAAO,cAAc,EACrB,OAAO,GAAG,cAAc,EACxB,MAAM,GAAG,aAAa,CACvB,CAAC;AAEF;;;GAGG;AACH,qBAAa,wBAAyB,SAAQ,cAAc,CAC1D,OAAO,cAAc,EACrB,6BAA6B,EAC7B,iCAAiC,CAClC;;IA+DC,YAAY,EACV,SAAS,EACT,KAAK,EACL,MAAM,EACN,WAAW,EACX,KAAK,GACN,EAAE;QACD,SAAS,EAAE,iCAAiC,CAAC;QAC7C,KAAK,CAAC,EAAE,6BAA6B,CAAC;QACtC,MAAM,CAAC,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;QACnC;;;WAGG;QACH,WAAW,EAAE,eAAe,CAAC;QAC7B,KAAK,CAAC,EAAE,aAAa,CAAC;KACvB,EAkDA;IAkLY,aAAa,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAc9C;IAiJD;;;;OAIG;IACI,qBAAqB,IAAI,IAAI,CAOnC;IA8LD;;;;OAIG;IACU,0BAA0B,IAAI,OAAO,CAAC,kBAAkB,EAAE,CAAC,CA+BvE;IAED;;;;;OAKG;IACU,yBAAyB,CACpC,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC,mBAAmB,CAAC,CAyB9B;IAED;;;;;;;;;;;;;OAaG;IACU,4BAA4B,CACvC,OAAO,EAAE,yBAAyB,GACjC,OAAO,CAAC,kBAAkB,EAAE,CAAC,CA0C/B;IAED;;;;;OAKG;IACU,2BAA2B,CACtC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,qBAAqB,CAAC,CAiBhC;IAED;;;;;;;;;;OAUG;IACU,8BAA8B,CACzC,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,iBAAiB,CAAC,CA+C5B;IAED;;;;;;;;OAQG;IACI,oBAAoB,CACzB,OAAO,GAAE,2BAAgC,GACxC,iBAAiB,GAAG,IAAI,CAoB1B;IAqCD;;OAEG;IACI,wBAAwB,IAAI,IAAI,CAKtC;IAoBM,cAAc,IAAI,IAAI,CAQ5B;IAED;;;OAGG;IACI,UAAU,IAAI,IAAI,CAMxB;IAED;;;;;;;;;;OAUG;IACU,cAAc,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAIrE;IAED;;;;;;;;;;;;OAYG;IACU,iBAAiB,CAC5B,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,WAAW,CAAC,CAItB;IAED;;;;;;;;;;;;;;;OAeG;IACU,yBAAyB,IAAI,OAAO,CAAC,MAAM,CAAC,CAgBxD;IAcY,qBAAqB,CAChC,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,kBAAkB,CAAC,CAI7B;IAED;;;;;;;;;;OAUG;IACU,uBAAuB,CAClC,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,MAAM,CAAC,CAIjB;IAED;;;;;;;;;;;;OAYG;IACU,uBAAuB,CAClC,MAAM,EAAE,eAAe,EACvB,QAAQ,EAAE,iBAAiB,EAC3B,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,MAAM,CAAC,CAQjB;IAEM,UAAU,IAAI,OAAO,CAE3B;CA8EF"}

package/dist/controllers/authentication/AuthenticationController.js

@@ -147,6 +147,10 @@ export class AuthenticationController extends BaseController {
      * `performSignIn` can't clear `needsProfilePairing` afterwards.
      */
     #profilePairingRequestEpoch = 0;
+    /**
+     * Sign-in currently running. Overlapping callers share it.
+     */
+    #ongoingSignIn;
     #keyringController = {
         setupLockedStateSubscriptions: () => {
             const { isUnlocked } = this.messenger.call('KeyringController:getState');
@@ -349,6 +353,18 @@ export class AuthenticationController extends BaseController {
     }
     async performSignIn() {
         this.#assertIsUnlocked('performSignIn');
+        if (this.#ongoingSignIn) {
+            return await this.#ongoingSignIn;
+        }
+        const signIn = this.#runPerformSignIn().finally(() => {
+            if (this.#ongoingSignIn === signIn) {
+                this.#ongoingSignIn = undefined;
+            }
+        });
+        this.#ongoingSignIn = signIn;
+        return await signIn;
+    }
+    async #runPerformSignIn() {
         const epochAtStart = this.#profilePairingRequestEpoch;
         const entropySourceIds = this.#getHdKeyringEntropySourceIds();
         const accessTokens = [];

package/dist/controllers/authentication/AuthenticationController.js.map

@@ -1 +1 @@
-{"version":3,"file":"AuthenticationController.js","sourceRoot":"","sources":["../../../src/controllers/authentication/AuthenticationController.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAO3D,OAAO,EAAE,+BAA+B,EAAE,MAAM,8BAA8B,CAAC;AAc/E,OAAO,EACL,4BAA4B,EAC5B,+BAA+B,EAC/B,qBAAqB,EACrB,8BAA8B,EAC9B,iCAAiC,EACjC,iCAAiC,EACjC,4BAA4B,GAC7B,MAAM,oDAAoD,CAAC;AAsB5D,OAAO,EACL,+BAA+B,EAC/B,QAAQ,EACR,GAAG,EACH,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,6BAA6B,GAC9B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAErE,OAAO,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AAC1F,OAAO,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AACzE,OAAO,EACL,0BAA0B,EAC1B,gCAAgC,GACjC,MAAM,uCAAuC,CAAC;AAG/C,MAAM,cAAc,GAAG,0BAA0B,CAAC;AAsClD,MAAM,CAAC,MAAM,YAAY,GAAkC;IACzD,UAAU,EAAE,KAAK;IACjB,mBAAmB,EAAE,EAAE;IACvB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,IAAI;CACzB,CAAC;AACF,MAAM,QAAQ,GAAiD;IAC7D,UAAU,EAAE;QACV,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,IAAI;QACb,sBAAsB,EAAE,IAAI;QAC5B,QAAQ,EAAE,IAAI;KACf;IACD,mBAAmB,EAAE;QACnB,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,IAAI;QACb,sBAAsB,EAAE,IAAI;QAC5B,QAAQ,EAAE,IAAI;KACf;IACD,kBAAkB,EAAE;QAClB,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,IAAI;QACb,sBAAsB,EAAE,IAAI;QAC5B,QAAQ,EAAE,IAAI;KACf;IACD,cAAc,EAAE;QACd,6DAA6D;QAC7D,kBAAkB,EAAE,CAAC,cAAc,EAAE,EAAE;YACrC,4FAA4F;YAC5F,2FAA2F;YAC3F,mEAAmE;YACnE,kEAAkE;YAClE,oDAAoD;YACpD,IAAI,cAAc,KAAK,IAAI,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;gBAC5D,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,MAAM,CAC1C,CAAC,uBAAuB,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;gBACxC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,uBAAuB,EAAE,GACxD,KAAK,CAAC,KAAK,CAAC;gBACd,MAAM,EACJ,mBAAmB,EAAE,0BAA0B,EAC/C,GAAG,iCAAiC,EACrC,GAAG,KAAK,CAAC,OAAO,CAAC;gBAClB,uBAAuB,CAAC,GAAG,CAAC,GAAG;oBAC7B,GAAG,KAAK;oBACR,KAAK,EAAE,uBAAuB;oBAC9B,OAAO,EAAE,iCAAiC;iBAC3C,CAAC;gBACF,OAAO,uBAAuB,CAAC;YACjC,CAAC,EACD,EAAE,CACH,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,IAAI;QACb,sBAAsB,EAAE,KAAK;QAC7B,QAAQ,EAAE,IAAI;KACf;IACD,mBAAmB,EAAE;QACnB,yEAAyE;QACzE,kBAAkB,EAAE,CAAC,WAAW,EAAE,EAAE,CAClC,WAAW,EAAE,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;YAClD,IAAI;YACJ,MAAM;YACN,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;SACpD,CAAC,CAAC,IAAI,IAAI;QACb,OAAO,EAAE,KAAK;QACd,sBAAsB,EAAE,KAAK;QAC7B,QAAQ,EAAE,IAAI;KACf;CACF,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,EAAE,GAAG,MAAM,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,GAAG,MAAM,CAAC;AAExD;;;GAGG;AACH,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAiB5B,MAAM,yBAAyB,GAAG;IAChC,eAAe;IACf,gBAAgB;IAChB,gBAAgB;IAChB,mBAAmB;IACnB,2BAA2B;IAC3B,uBAAuB;IACvB,yBAAyB;IACzB,yBAAyB;IACzB,YAAY;IACZ,uBAAuB;IACvB,YAAY;IACZ,4BAA4B;IAC5B,2BAA2B;IAC3B,8BAA8B;IAC9B,6BAA6B;IAC7B,gCAAgC;IAChC,sBAAsB;IACtB,0BAA0B;CAClB,CAAC;AAgDX;;;GAGG;AACH,MAAM,OAAO,wBAAyB,SAAQ,cAI7C;IACU,YAAY,CAAkB;IAE9B,KAAK,CAAe;IAEpB,MAAM,CAAgB;IAEtB,OAAO,GAAqB;QACnC,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,sBAAsB,EAAE,GAAG,EAAE,CAAC,KAAK;KACpC,CAAC;IAEF,WAAW,GAAG,KAAK,CAAC;IAEpB;;;OAGG;IACH,iBAAiB,GAAG,CAAC,CAAC;IAEtB;;;;OAIG;IACM,qBAAqB,GAAG,IAAI,GAAG,EAA+B,CAAC;IAExE;;;;;OAKG;IACH,sBAAsB,GAAG,CAAC,CAAC;IAE3B;;;OAGG;IACH,2BAA2B,GAAG,CAAC,CAAC;IAEvB,kBAAkB,GAAG;QAC5B,6BAA6B,EAAE,GAAG,EAAE;YAClC,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YACzE,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC;YAE9B,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,0BAA0B,EAAE,GAAG,EAAE;gBACxD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YAC1B,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,wBAAwB,EAAE,GAAG,EAAE;gBACtD,IAAI,CAAC,iBAAiB,IAAI,CAAC,CAAC;gBAC5B,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;gBACzB,IAAI,CAAC,wBAAwB,EAAE,CAAC;YAClC,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;IAEF,YAAY,EACV,SAAS,EACT,KAAK,EACL,MAAM,EACN,WAAW,EACX,KAAK,GAWN;QACC,KAAK,CAAC;YACJ,SAAS;YACT,QAAQ;YACR,IAAI,EAAE,cAAc;YACpB,KAAK,EAAE,EAAE,GAAG,YAAY,EAAE,GAAG,KAAK,EAAE;SACrC,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QAED,wEAAwE;QACxE,iBAAiB;QACjB,IAAI,CAAC,OAAO,GAAG;YACb,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG;YACpC,sBAAsB,EACpB,MAAM,EAAE,sBAAsB,IAAI,IAAI,CAAC,OAAO,CAAC,sBAAsB;SACxE,CAAC;QAEF,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC;QAChC,IAAI,CAAC,MAAM,GAAG,KAAK,IAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAmB,CAAC;QAErE,IAAI,CAAC,KAAK,GAAG,IAAI,aAAa,CAC5B;YACE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG;YACrB,QAAQ,EAAE,WAAW,CAAC,KAAK;YAC3B,IAAI,EAAE,QAAQ,CAAC,GAAG;SACnB,EACD;YACE,OAAO,EAAE;gBACP,gBAAgB,EAAE,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC5D,gBAAgB,EAAE,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC;aAC3D;YACD,OAAO,EAAE;gBACP,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC5C,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;aAC1C;YACD,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;YACzC,sBAAsB,EAAE,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;YAC/D,WAAW,EAAE,IAAI,CAAC,YAAY;SAC/B,CACF,CAAC;QAEF,IAAI,CAAC,kBAAkB,CAAC,6BAA6B,EAAE,CAAC;QAExD,IAAI,CAAC,SAAS,CAAC,4BAA4B,CACzC,IAAI,EACJ,yBAAyB,CAC1B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,0BAA0B,CAC9B,eAAwB;QAExB,MAAM,UAAU,GAAG,eAAe,IAAI,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACxE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,wBAAwB,CAC5B,aAA4B,EAC5B,eAAwB;QAExB,MAAM,UAAU,GAAG,eAAe,IAAI,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACxE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,gBAAgB,EAAE,CAAC;QACjE,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YACpB,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC;YACxB,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;gBAC1B,KAAK,CAAC,cAAc,GAAG,EAAE,CAAC;YAC5B,CAAC;YACD,uEAAuE;YACvE,mDAAmD;YACnD,MAAM,mBAAmB,GACvB,aAAa,CAAC,OAAO,CAAC,mBAAmB;gBACzC,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC;YAChE,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC,GAAG;gBACjC,GAAG,aAAa;gBAChB,OAAO,EAAE;oBACP,GAAG,aAAa,CAAC,OAAO;oBACxB,aAAa;oBACb,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACxD;aACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,iBAAiB,CAAC,UAAkB;QAClC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,wCAAwC,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED,uBAAuB,CAAC,KAAa,EAAE,UAAkB;QACvD,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,iBAAiB,KAAK,KAAK,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CACb,GAAG,UAAU,uDAAuD,CACrE,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,6BAA6B;QAC3B,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACvE,OAAO,+BAA+B,CAAC,YAAY,CAAC,CAAC;IACvD,CAAC;IAED;;;;;;;;OAQG;IACH,0BAA0B;QACxB,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACvE,OAAO,kCAAkC,CAAC,YAAY,CAAC,CAAC;IAC1D,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,YAAY,CAAC,eAAwB;QACzC,MAAM,sBAAsB,GAAG,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACjE,MAAM,UAAU,GAAG,eAAe,IAAI,sBAAsB,CAAC;QAE7D,OAAO,UAAU,KAAK,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;IACzE,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,KAAK,CAAC,uBAAuB,CAC3B,eAAwB;QAExB,MAAM,sBAAsB,GAAG,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACjE,MAAM,UAAU,GAAG,eAAe,IAAI,sBAAsB,CAAC;QAE7D,0EAA0E;QAC1E,IAAI,UAAU,KAAK,sBAAsB,EAAE,CAAC;YAC1C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC,4BAA4B,EAAE,CAAC;IAC7C,CAAC;IAED;;;;;;;;OAQG;IACH,4BAA4B;QAC1B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,gCAAgC,CAC1C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAC7D,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACH,gCAAgC,CAAC,KAGhC;QACC,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACtD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,mEAAmE;QACnE,oEAAoE;QACpE,6DAA6D;QAC7D,QAAQ,KAAK,CAAC,cAAc,EAAE,CAAC;YAC7B,KAAK,QAAQ;gBACX,OAAO,QAAQ,CAAC;YAClB,KAAK,OAAO;gBACV,OAAO,OAAO,CAAC;YACjB,KAAK,UAAU;gBACb,OAAO,UAAU,CAAC;YACpB;gBACE,OAAO,KAAK,CAAC;QACjB,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,aAAa;QACxB,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC;QAExC,MAAM,YAAY,GAAG,IAAI,CAAC,2BAA2B,CAAC;QACtD,MAAM,gBAAgB,GAAG,IAAI,CAAC,6BAA6B,EAAE,CAAC;QAC9D,MAAM,YAAY,GAAa,EAAE,CAAC;QAElC,mEAAmE;QACnE,oCAAoC;QACpC,KAAK,MAAM,eAAe,IAAI,gBAAgB,EAAE,CAAC;YAC/C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;YACrE,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACjC,CAAC;QAED,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,sCAAsC;YACtC,IAAI,CAAC,4BAA4B,CAAC,YAAY,CAAC,CAAC;QAClD,CAAC;aAAM,CAAC;YACN,yEAAyE;YACzE,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;YACT,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACH,KAAK,CAAC,iBAAiB,CAAC,kBAA2B;QACjD,IACE,CAAC,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE;YACtC,IAAI,CAAC,KAAK,CAAC,kBAAkB,KAAK,KAAK;YACvC,CAAC,kBAAkB,EACnB,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,aAIH,CAAC;QACF,IAAI,CAAC;YACH,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CACjC,uCAAuC,CACxC,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;YACpE,OAAO;QACT,CAAC;QAED,yEAAyE;QACzE,oEAAoE;QACpE,oEAAoE;QACpE,MAAM,cAAc,GAAG,IAAI,CAAC,gCAAgC,CAAC,aAAa,CAAC,CAAC;QAC5E,IAAI,cAAc,KAAK,KAAK,EAAE,CAAC;YAC7B,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,aAAa,CAAC;YAChD,iEAAiE;YACjE,mEAAmE;YACnE,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,CAAC,IAAI,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;gBACvE,OAAO;YACT,CAAC;YACD,IAAI,CAAC,wBAAwB,EAAE,CAAC;YAChC,OAAO;QACT,CAAC;QAED,sEAAsE;QACtE,sEAAsE;QACtE,qEAAqE;QACrE,wEAAwE;QACxE,oEAAoE;QACpE,kEAAkE;QAClE,qCAAqC;QACrC,MAAM,EAAE,gBAAgB,EAAE,GAAG,aAAa,CAAC;QAC3C,IAAI,KAAyB,CAAC;QAC9B,IAAI,cAAc,KAAK,QAAQ,EAAE,CAAC;YAChC,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,OAAO;YACT,CAAC;YACD,KAAK,GAAG,gBAAgB,CAAC;QAC3B,CAAC;aAAM,IAAI,cAAc,KAAK,OAAO,EAAE,CAAC;YACtC,KAAK,GAAG,gBAAgB,CAAC;QAC3B,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CACzC,6CAA6C,CAC9C,CAAC;QACF,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;YAChD,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAC/D;gBACE,cAAc;gBACd,SAAS;gBACT,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5B,EACD,kBAAkB,CACnB,CAAC;YACF,IAAI,CAAC,8BAA8B,CAAC,mBAAmB,CAAC,CAAC;YACzD,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;gBACvC,IAAI,CAAC,wBAAwB,EAAE,CAAC;gBAChC,OAAO;YACT,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,wBAAwB;QACtB,IAAI,IAAI,CAAC,KAAK,CAAC,kBAAkB,KAAK,KAAK,EAAE,CAAC;YAC5C,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;gBACpB,KAAK,CAAC,kBAAkB,GAAG,KAAK,CAAC;YACnC,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;OAIG;IACI,qBAAqB;QAC1B,IAAI,CAAC,2BAA2B,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;gBACpB,KAAK,CAAC,mBAAmB,GAAG,IAAI,CAAC;YACnC,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,4BAA4B,CAAC,YAAoB;QAC/C,IAAI,IAAI,CAAC,2BAA2B,KAAK,YAAY,EAAE,CAAC;YACtD,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,mBAAmB,EAAE,CAAC;YACnC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;gBACpB,KAAK,CAAC,mBAAmB,GAAG,KAAK,CAAC;YACpC,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,OAAO,CAAC,YAAsB,EAAE,YAAoB;QACxD,MAAM,iBAAiB,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAExD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;QACjE,MAAM,YAAY,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAEnD,2EAA2E;QAC3E,uEAAuE;QACvE,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,4BAA4B,CAAC,YAAY,CAAC,CAAC;QAEhD,MAAM,gBAAgB,GAAG,iBAAiB,KAAK,YAAY,CAAC;QAC5D,MAAM,4BAA4B,GAChC,gBAAgB,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC;QAEhD,IAAI,4BAA4B,EAAE,CAAC;YACjC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,wCAAwC,EAAE;gBAC/D,SAAS,EAAE,YAAY;gBACvB,cAAc;gBACd,gBAAgB;aACjB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,YAAsB;QAC3C,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,kBAAkB,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,+BAA+B;QAC3E,MAAM,EACJ,cAAc,EACd,OAAO,EAAE,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,GACrD,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;QACvE,IAAI,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,CAAC;QAC7C,IAAI,CAAC,8BAA8B,CAAC,mBAAmB,CAAC,CAAC;QACzD,OAAO,cAAc,CAAC;IACxB,CAAC;IAED;;;;;OAKG;IACH,8BAA8B,CAC5B,mBAAoD;QAEpD,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzB,OAAO;QACT,CAAC;QACD,MAAM,sBAAsB,GAAG,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACjE,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YACpB,MAAM,KAAK,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC,sBAAsB,CAAC,CAAC;YAC7D,IAAI,KAAK,EAAE,OAAO,EAAE,CAAC;gBACnB,KAAK,CAAC,OAAO,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;YAC1D,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,mBAAmB,CAAC,kBAA0B;QAC5C,MAAM,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QACtC,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YACpB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC9D,IAAI,KAAK,EAAE,OAAO,EAAE,CAAC;oBACnB,KAAK,CAAC,OAAO,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;gBACxD,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACH,sBAAsB;QACpB,MAAM,sBAAsB,GAAG,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACjE,OAAO,CACL,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,sBAAsB,CAAC,EAAE,OAAO;YAC1D,EAAE,kBAAkB,IAAI,IAAI,CAC/B,CAAC;IACJ,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,cAAc,CAClB,IAAY,EACZ,SAAiB,EACjB,cAAsB,EACtB,EAAyB;QAEzB,OAAO,MAAM,IAAI,CAAC,MAAM,CACtB;YACE,IAAI;YACJ,IAAI,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE;SACpC,EACD,KAAK,EAAE,OAAO,EAAE,EAAE;YAChB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,EAAE,EAAE,CAAC;gBAC1B,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;gBACvD,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;gBACrD,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;gBACvC,IAAI,OAAO,EAAE,CAAC;oBACZ,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;oBAC1D,IAAI,OAAO,KAAK,yBAAyB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;wBAC9D,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,0BAA0B,EAAE,CAAC,CAAC;wBAC9D,0DAA0D;wBAC1D,WAAW;wBACX,IAAI,CAAC,wBAAwB,EAAE,CAAC;oBAClC,CAAC;gBACH,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,kBAAkB,CAChB,OAAiC,EACjC,GAAW,EACX,KAAa;QAEb,MAAM,SAAS,GAAG,OAEL,CAAC;QACd,SAAS,EAAE,YAAY,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,0BAA0B;QACrC,IAAI,CAAC,iBAAiB,CAAC,4BAA4B,CAAC,CAAC;QACrD,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC;QAC5C,IAAI,CAAC,sBAAsB,IAAI,CAAC,CAAC;QACjC,MAAM,UAAU,GAAG,IAAI,CAAC,sBAAsB,CAAC;QAC/C,MAAM,sBAAsB,GAAG,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACjE,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAC3C,yBAAyB,EACzB,qBAAqB,EACrB,KAAK,EACL,KAAK,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,sBAAsB,CAAC,CACvE,CAAC;QACF,IAAI,CAAC,uBAAuB,CAAC,YAAY,EAAE,4BAA4B,CAAC,CAAC;QAEzE,yEAAyE;QACzE,wEAAwE;QACxE,IAAI,UAAU,KAAK,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC/C,OAAO,IAAI,CAAC,uBAAuB,EAAE,CAAC;QACxC,CAAC;QAED,yEAAyE;QACzE,+BAA+B;QAC/B,IACE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;YAC3B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC,EAC9C,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;gBACpB,KAAK,CAAC,mBAAmB,GAAG,WAAW,CAAC;YAC1C,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,yBAAyB,CACpC,OAA+B;QAE/B,IAAI,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,CAAC;QACpD,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC;QAC5C,qBAAqB,CAAC,OAAO,EAAE,4BAA4B,CAAC,CAAC;QAC7D,MAAM,sBAAsB,GAAG,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACjE,yEAAyE;QACzE,yEAAyE;QACzE,qEAAqE;QACrE,mBAAmB;QACnB,MAAM,WAAW,GAAG,IAAI,CAAC,oBAAoB,CAAC;YAC5C,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,6BAA6B;SAC1E,CAAC,EAAE,WAAW,CAAC;QAChB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CACzC,kBAAkB,EAClB,OAAO,CAAC,MAAM,CAAC,SAAS,EACxB,OAAO,CAAC,IAAI,EACZ,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,OAAO,CAAC,IAAI,EAAE;YAChD,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,eAAe,EAAE,sBAAsB;YACvC,WAAW;SACZ,CAAC,CACL,CAAC;QACF,IAAI,CAAC,uBAAuB,CAAC,YAAY,EAAE,2BAA2B,CAAC,CAAC;QACxE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;;;;;;OAaG;IACI,KAAK,CAAC,4BAA4B,CACvC,OAAkC;QAElC,IAAI,CAAC,iBAAiB,CAAC,8BAA8B,CAAC,CAAC;QACvD,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC;QAC5C,qBAAqB,CAAC,OAAO,EAAE,+BAA+B,CAAC,CAAC;QAChE,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC;QAC/B,MAAM,sBAAsB,GAAG,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACjE,MAAM,IAAI,CAAC,cAAc,CACvB,qBAAqB,EACrB,OAAO,CAAC,MAAM,CAAC,SAAS,EACxB,IAAI,EACJ,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,KAAK,CAAC,qBAAqB,CACpC,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,KAAK,EACb,sBAAsB,CACvB,CACJ,CAAC;QAEF,IAAI,CAAC;YACH,IAAI,CAAC,uBAAuB,CAC1B,YAAY,EACZ,8BAA8B,CAC/B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;gBACzB,IAAI,CAAC,qBAAqB,CAAC,sBAAsB,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QAED,0EAA0E;QAC1E,0EAA0E;QAC1E,uCAAuC;QACvC,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,uBAAuB,EAAE,CAAC;QACxC,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;gBACzB,IAAI,CAAC,qBAAqB,CAAC,sBAAsB,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,2BAA2B,CACtC,OAAiC;QAEjC,IAAI,CAAC,iBAAiB,CAAC,6BAA6B,CAAC,CAAC;QACtD,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC;QAC5C,qBAAqB,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;QAC/D,MAAM,sBAAsB,GAAG,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACjE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CACzC,wBAAwB,EACxB,OAAO,CAAC,MAAM,CAAC,SAAS,EACxB,OAAO,CAAC,IAAI,EACZ,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,KAAK,CAAC,oBAAoB,CACnC,OAAO,CAAC,IAAI,EACZ,sBAAsB,CACvB,CACJ,CAAC;QACF,IAAI,CAAC,uBAAuB,CAAC,YAAY,EAAE,6BAA6B,CAAC,CAAC;QAC1E,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;;;OAUG;IACI,KAAK,CAAC,8BAA8B,CACzC,OAAoC;QAEpC,IAAI,CAAC,iBAAiB,CAAC,gCAAgC,CAAC,CAAC;QACzD,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC;QAC5C,qBAAqB,CAAC,OAAO,EAAE,iCAAiC,CAAC,CAAC;QAClE,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC;QAC/B,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QACrC,MAAM,sBAAsB,GAAG,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACjE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CACzC,2BAA2B,EAC3B,SAAS,EACT,IAAI,EACJ,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,KAAK,CAAC,uBAAuB,CACtC,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,KAAK,EACb,sBAAsB,CACvB,CACJ,CAAC;QACF,IAAI,CAAC,uBAAuB,CAC1B,YAAY,EACZ,gCAAgC,CACjC,CAAC;QACF,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAC3C,oBAAoB,EACpB,SAAS,EACT,IAAI,EACJ,KAAK,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,CACnE,CAAC;QACF,IAAI,CAAC,uBAAuB,CAC1B,YAAY,EACZ,gCAAgC,CACjC,CAAC;QAEF,IAAI,aAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,aAAa,GAAG,gBAAgB,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,6BAA6B,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,MAAM,GAAG,4BAA4B,CAAC,aAAa,CAAC,CAAC;QAC3D,IAAI,MAAM,CAAC,GAAG,GAAG,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACpC,MAAM,IAAI,6BAA6B,CAAC,+BAA+B,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,KAAK,GAAsB,EAAE,GAAG,WAAW,EAAE,MAAM,EAAE,CAAC;QAC5D,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;QACrC,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;;;OAQG;IACI,oBAAoB,CACzB,OAAO,GAAgC,EAAE;QAEzC,IAAI,CAAC,iBAAiB,CAAC,sBAAsB,CAAC,CAAC;QAC/C,qBAAqB,CAAC,OAAO,EAAE,iCAAiC,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACjE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,GAAG,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YAC7B,kEAAkE;YAClE,IAAI,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,0EAA0E;QAC1E,0EAA0E;QAC1E,MAAM,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;QACvC,IAAI,MAAM,KAAK,SAAS,IAAI,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,IAAI,MAAM,EAAE,CAAC;YACrE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,OAAO,CAAC,KAAK,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,wBAAwB,CAAC,KAAwB;QAC/C,MAAM,QAAQ,GAAG,gBAAgB,CAAC;QAClC,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CACxB,KAAK,CAAC,UAAU,GAAG,2BAA2B,EAC9C,KAAK,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CACxB,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,EAC7C,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CACpC,CAAC;QACF,yEAAyE;QACxE,KAAgC,CAAC,KAAK,EAAE,EAAE,CAAC;QAC5C,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IACxE,CAAC;IAED;;;;OAIG;IACH,wBAAwB,CAAC,QAAgB;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzD,IAAI,OAAO,EAAE,CAAC;YACZ,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5B,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED;;OAEG;IACI,wBAAwB;QAC7B,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5D,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QACD,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,CAAC;IACrC,CAAC;IAED;;;;OAIG;IACH,yBAAyB;QACvB,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YACpB,KAAK,CAAC,mBAAmB,GAAG,EAAE,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,uBAAuB;QACrB,OAAO,IAAI,CAAC,KAAK,CAAC,mBAAmB,IAAI,EAAE,CAAC;IAC9C,CAAC;IAEM,cAAc;QACnB,IAAI,CAAC,iBAAiB,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAChC,IAAI,CAAC,yBAAyB,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YACpB,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC;YACzB,KAAK,CAAC,cAAc,GAAG,SAAS,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACI,UAAU;QACf,IAAI,CAAC,2BAA2B,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,iBAAiB,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAChC,IAAI,CAAC,yBAAyB,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED;;;;;;;;;;OAUG;IACI,KAAK,CAAC,cAAc,CAAC,eAAwB;QAClD,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;QACzC,MAAM,UAAU,GAAG,eAAe,IAAI,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACxE,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IACrD,CAAC;IAED;;;;;;;;;;;;OAYG;IACI,KAAK,CAAC,iBAAiB,CAC5B,eAAwB;QAExB,IAAI,CAAC,iBAAiB,CAAC,mBAAmB,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,eAAe,IAAI,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACxE,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IACrD,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACI,KAAK,CAAC,yBAAyB;QACpC,IAAI,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,CAAC;QAEpD,MAAM,sBAAsB,GAAG,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACjE,IAAI,CAAC,qBAAqB,CAAC,sBAAsB,CAAC,CAAC;QACnD,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,sBAAsB,CAAC,CAAC;QAExD,MAAM,SAAS,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAChD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,qBAAqB,CAAC,eAAuB;QAC3C,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YACpB,MAAM,KAAK,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC,eAAe,CAAC,CAAC;YACtD,IAAI,KAAK,EAAE,OAAO,EAAE,CAAC;gBACnB,iEAAiE;gBACjE,2EAA2E;gBAC3E,wEAAwE;gBACxE,KAAK,CAAC,OAAO,CAAC,kBAAkB,GAAG,EAAE,CAAC;YACxC,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,qBAAqB,CAChC,eAAwB;QAExB,IAAI,CAAC,iBAAiB,CAAC,uBAAuB,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,eAAe,IAAI,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACxE,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAC5D,CAAC;IAED;;;;;;;;;;OAUG;IACI,KAAK,CAAC,uBAAuB,CAClC,eAAwB;QAExB,IAAI,CAAC,iBAAiB,CAAC,yBAAyB,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,eAAe,IAAI,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACxE,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC;IAC9D,CAAC;IAED;;;;;;;;;;;;OAYG;IACI,KAAK,CAAC,uBAAuB,CAClC,MAAuB,EACvB,QAA2B,EAC3B,eAAwB;QAExB,IAAI,CAAC,iBAAiB,CAAC,yBAAyB,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,eAAe,IAAI,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACxE,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAC7C,MAAM,EACN,QAAQ,EACR,UAAU,CACX,CAAC;IACJ,CAAC;IAEM,UAAU;QACf,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;IAC/B,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,iBAAiB,CAAC,eAAwB;QAC9C,MAAM,UAAU,GAAG,eAAe,IAAI,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACxE,OAAO,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACtD,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,aAAa,CAAC,eAAwB;QAC1C,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC;QAC3D,OAAO,0BAA0B,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED,kBAAkB,GAA2B,EAAE,CAAC;IAEhD;;;;;;;;;;;;;OAaG;IACH,eAAe,CACb,OAA6B,EAC7B,eAAwB;QAExB,OAAO,GAAG,eAAe,IAAI,IAAI,CAAC,0BAA0B,EAAE,IAAI,OAAO,EAAE,CAAC;IAC9E,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,YAAY,CAChB,OAAe,EACf,eAAwB;QAExB,+BAA+B,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC;QAEvC,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAChE,IAAI,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC3C,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,MAAM,gCAAgC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAErE,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC;QAE3C,OAAO,MAAM,CAAC;IAChB,CAAC;CACF","sourcesContent":["import { BaseController } from '@metamask/base-controller';\nimport type {\n  ControllerGetStateAction,\n  ControllerStateChangeEvent,\n  StateMetadata,\n} from '@metamask/base-controller';\nimport type { TraceCallback, TraceContext } from '@metamask/controller-utils';\nimport { selectHdKeyringEntropySourceIds } from '@metamask/keyring-controller';\nimport type {\n  KeyringControllerGetStateAction,\n  KeyringControllerLockEvent,\n  KeyringControllerUnlockEvent,\n  KeyringControllerWithKeyringV2UnsafeAction,\n} from '@metamask/keyring-controller';\nimport type { Messenger } from '@metamask/messenger';\nimport type {\n  SeedlessOnboardingControllerGetAccessTokenAction,\n  SeedlessOnboardingControllerGetStateAction,\n} from '@metamask/seedless-onboarding-controller';\nimport type { Json } from '@metamask/utils';\n\nimport {\n  BeginEnrollmentRequestStruct,\n  CompleteEnrollmentRequestStruct,\n  assertValidMfaRequest,\n  BeginVerificationRequestStruct,\n  CompleteVerificationRequestStruct,\n  GetVerificationTokenRequestStruct,\n  parseVerificationTokenClaims,\n} from '../../sdk/authentication-jwt-bearer/mfa/schemas.js';\nimport type {\n  LoginIdentifierType,\n  LoginResponse,\n  ProfileAlias,\n  ProfileIdentifier,\n  SRPInterface,\n  SrpLoginTag,\n  UserProfile,\n  UserProfileLineage,\n  OidcTokenAudience,\n  OidcTokenClaims,\n  BeginEnrollmentRequest,\n  CompleteEnrollmentRequest,\n  EnrolledCredential,\n  EnrollmentChallenge,\n  BeginVerificationRequest,\n  CompleteVerificationRequest,\n  VerificationToken,\n  GetVerificationTokenRequest,\n  VerificationChallenge,\n} from '../../sdk/index.js';\nimport {\n  assertMessageStartsWithMetamask,\n  AuthType,\n  Env,\n  JwtBearerAuth,\n  PairConflictError,\n  getMfaErrorCode,\n  VerificationTokenInvalidError,\n} from '../../sdk/index.js';\nimport { decodeJwtPayload } from '../../sdk/utils/jwt.js';\nimport { toErrorMessage } from '../../sdk/utils/to-error-message.js';\nimport type { MetaMetricsAuth } from '../../shared/types/services.js';\nimport { getPrimaryHdKeyringEntropySourceId } from '../../shared/utils/entropy-source.js';\nimport { getHdKeyringSeed } from '../../shared/utils/hd-keyring-seed.js';\nimport {\n  getMessageSigningPublicKey,\n  signMessageWithMessageSigningKey,\n} from '../../shared/utils/message-signing.js';\nimport { AuthenticationControllerMethodActions } from './AuthenticationController-method-action-types.js';\n\nconst controllerName = 'AuthenticationController';\n\n// State\nexport type AuthenticationControllerState = {\n  isSignedIn: boolean;\n  srpSessionData?: Record<string, LoginResponse>;\n  /**\n   * Credentials fetched for the current profile. The controller always seeds\n   * this to an empty array; it remains optional so partial-state selectors stay\n   * assignable to the controller state type.\n   */\n  enrolledCredentials?: EnrolledCredential[];\n  /**\n   * Client gate for profile pairing. Defaults to `true` (fresh install /\n   * upgrade), set to `false` after a successful `performSignIn` pair, set\n   * back to `true` via `requestProfilePairing()` when the SRP set changes,\n   * and left `true` on pair failure so the next state shift retries.\n   *\n   * Optional in the type so partial-state selectors stay assignable to\n   * `AuthenticationControllerState`. The controller seeds it via\n   * `defaultState` at construction; consumers should read `undefined` as\n   * `true` to mirror that runtime default.\n   */\n  needsProfilePairing?: boolean;\n  /**\n   * Client gate for social identifier pairing. Defaults to `true` (fresh\n   * install / upgrade), set to `false` after a successful or 409\n   * `POST /api/v2/profile/pair/identifier`, left `true` on other failures\n   * so the next `performSignIn` retries, and cleared without an API call\n   * when the user never logged in with a social provider.\n   *\n   * Optional in the type so partial-state selectors stay assignable to\n   * `AuthenticationControllerState`. The controller seeds it via\n   * `defaultState` at construction; consumers should read `undefined` as\n   * `true` to mirror that runtime default.\n   */\n  needsSocialPairing?: boolean;\n};\nexport const defaultState: AuthenticationControllerState = {\n  isSignedIn: false,\n  enrolledCredentials: [],\n  needsProfilePairing: true,\n  needsSocialPairing: true,\n};\nconst metadata: StateMetadata<AuthenticationControllerState> = {\n  isSignedIn: {\n    includeInStateLogs: true,\n    persist: true,\n    includeInDebugSnapshot: true,\n    usedInUi: true,\n  },\n  needsProfilePairing: {\n    includeInStateLogs: true,\n    persist: true,\n    includeInDebugSnapshot: true,\n    usedInUi: true,\n  },\n  needsSocialPairing: {\n    includeInStateLogs: true,\n    persist: true,\n    includeInDebugSnapshot: true,\n    usedInUi: true,\n  },\n  srpSessionData: {\n    // Remove access token and paired identifiers from state logs\n    includeInStateLogs: (srpSessionData) => {\n      // Unreachable branch, included just to fix a type error for the case where this property is\n      // unset. The type gets collapsed to include `| undefined` even though `undefined` is never\n      // set here, because we don't yet use `exactOptionalPropertyTypes`.\n      // TODO: Remove branch after enabling `exactOptionalPropertyTypes`\n      // ref: https://github.com/MetaMask/core/issues/6565\n      if (srpSessionData === null || srpSessionData === undefined) {\n        return null;\n      }\n      return Object.entries(srpSessionData).reduce<Record<string, Json>>(\n        (sanitizedSrpSessionData, [key, value]) => {\n          const { accessToken: _unused, ...tokenWithoutAccessToken } =\n            value.token;\n          const {\n            pairedIdentifierIds: _unusedPairedIdentifierIds,\n            ...profileWithoutPairedIdentifierIds\n          } = value.profile;\n          sanitizedSrpSessionData[key] = {\n            ...value,\n            token: tokenWithoutAccessToken,\n            profile: profileWithoutPairedIdentifierIds,\n          };\n          return sanitizedSrpSessionData;\n        },\n        {},\n      );\n    },\n    persist: true,\n    includeInDebugSnapshot: false,\n    usedInUi: true,\n  },\n  enrolledCredentials: {\n    // Allow-list so new credential types cannot leak identifiers by default.\n    includeInStateLogs: (credentials) =>\n      credentials?.map(({ type, status, enrolledAt }) => ({\n        type,\n        status,\n        ...(enrolledAt === undefined ? {} : { enrolledAt }),\n      })) ?? null,\n    persist: false,\n    includeInDebugSnapshot: false,\n    usedInUi: true,\n  },\n};\n\n/**\n * Upper bound on a verification session's lifetime. The session also ends at\n * the verification token's own `exp` (15 minutes today), whichever comes\n * first, so this only matters if the server ever issues longer-lived tokens.\n * Callers needing a fresher proof pass `maxSessionAgeMs` to\n * `getVerificationToken`.\n */\nexport const VERIFICATION_SESSION_TTL_MS = 15 * 60_000;\n\n/**\n * Default maximum age of a verification session that may authorize enrolling a\n * credential. A session opened for an unrelated operation must not be able to\n * add a factor long after the fact, while a session proven moments ago (or\n * during the same setup flow, via `maxSessionAgeMs`) may.\n */\nexport const ENROLLMENT_MAX_SESSION_AGE_MS = 2 * 60_000;\n\n/**\n * Key of the only verification session held today. Sessions are keyed by token\n * audience so audience-scoped tokens can be added without reshaping storage.\n */\nconst DEFAULT_AUDIENCE = '';\n\ntype VerificationSession = {\n  token: VerificationToken;\n  expiresAt: number;\n  timer: ReturnType<typeof setTimeout>;\n};\ntype ControllerConfig = {\n  env: Env;\n  /**\n   * When `true`, `performSignIn` attempts to attach the Google/Apple/\n   * Telegram social identifier to the primary SRP profile. Defaults to\n   * `() => false`.\n   */\n  isSocialPairingEnabled: () => boolean;\n};\n\nconst MESSENGER_EXPOSED_METHODS = [\n  'performSignIn',\n  'performSignOut',\n  'getBearerToken',\n  'getSessionProfile',\n  'refreshCanonicalProfileId',\n  'getUserProfileLineage',\n  'getCustomerServiceToken',\n  'getPartnerIdentityToken',\n  'isSignedIn',\n  'requestProfilePairing',\n  'clearState',\n  'refreshEnrolledCredentials',\n  'beginCredentialEnrollment',\n  'completeCredentialEnrollment',\n  'beginCredentialVerification',\n  'completeCredentialVerification',\n  'getVerificationToken',\n  'clearVerificationSession',\n] as const;\n\nexport type Actions =\n  | AuthenticationControllerGetStateAction\n  | AuthenticationControllerMethodActions;\n\nexport type AuthenticationControllerGetStateAction = ControllerGetStateAction<\n  typeof controllerName,\n  AuthenticationControllerState\n>;\n\nexport type AuthenticationControllerStateChangeEvent =\n  ControllerStateChangeEvent<\n    typeof controllerName,\n    AuthenticationControllerState\n  >;\n\nexport type ProfileSignInInfo = {\n  profileId: string;\n  profileAliases: ProfileAlias[];\n  profileIdChanged: boolean;\n};\n\nexport type AuthenticationControllerProfileSignInEvent = {\n  type: `${typeof controllerName}:profileSignIn`;\n  payload: [ProfileSignInInfo];\n};\n\nexport type Events =\n  | AuthenticationControllerStateChangeEvent\n  | AuthenticationControllerProfileSignInEvent;\n\n// Allowed Actions\ntype AllowedActions =\n  | KeyringControllerGetStateAction\n  | KeyringControllerWithKeyringV2UnsafeAction\n  | SeedlessOnboardingControllerGetStateAction\n  | SeedlessOnboardingControllerGetAccessTokenAction;\n\ntype AllowedEvents = KeyringControllerLockEvent | KeyringControllerUnlockEvent;\n\n// Messenger\nexport type AuthenticationControllerMessenger = Messenger<\n  typeof controllerName,\n  Actions | AllowedActions,\n  Events | AllowedEvents\n>;\n\n/**\n * Controller that enables authentication for restricted endpoints.\n * Used for Backup & Sync, Notifications, and other services.\n */\nexport class AuthenticationController extends BaseController<\n  typeof controllerName,\n  AuthenticationControllerState,\n  AuthenticationControllerMessenger\n> {\n  readonly #metametrics: MetaMetricsAuth;\n\n  readonly #auth: SRPInterface;\n\n  readonly #trace: TraceCallback;\n\n  readonly #config: ControllerConfig = {\n    env: Env.PRD,\n    isSocialPairingEnabled: () => false,\n  };\n\n  #isUnlocked = false;\n\n  /**\n   * Bumped whenever the authenticated session ends, so an in-flight MFA\n   * ceremony started under the previous session cannot apply its result.\n   */\n  #authSessionEpoch = 0;\n\n  /**\n   * Verification sessions keyed by token audience. At most one session per\n   * audience; only `DEFAULT_AUDIENCE` is used until audience-scoped tokens\n   * exist.\n   */\n  readonly #verificationSessions = new Map<string, VerificationSession>();\n\n  /**\n   * Sequence number of the most recently started credentials refresh. Only\n   * that refresh may write the cache, so a slower, earlier request cannot\n   * overwrite a newer list (e.g. an explicit refresh landing after an\n   * enrollment's refresh).\n   */\n  #credentialsRefreshSeq = 0;\n\n  /**\n   * Bumped by `requestProfilePairing` and `clearState` so an in-flight\n   * `performSignIn` can't clear `needsProfilePairing` afterwards.\n   */\n  #profilePairingRequestEpoch = 0;\n\n  readonly #keyringController = {\n    setupLockedStateSubscriptions: () => {\n      const { isUnlocked } = this.messenger.call('KeyringController:getState');\n      this.#isUnlocked = isUnlocked;\n\n      this.messenger.subscribe('KeyringController:unlock', () => {\n        this.#isUnlocked = true;\n      });\n\n      this.messenger.subscribe('KeyringController:lock', () => {\n        this.#authSessionEpoch += 1;\n        this.#isUnlocked = false;\n        this.clearVerificationSession();\n      });\n    },\n  };\n\n  constructor({\n    messenger,\n    state,\n    config,\n    metametrics,\n    trace,\n  }: {\n    messenger: AuthenticationControllerMessenger;\n    state?: AuthenticationControllerState;\n    config?: Partial<ControllerConfig>;\n    /**\n     * Not using the Messaging System as we\n     * do not want to tie this strictly to extension\n     */\n    metametrics: MetaMetricsAuth;\n    trace?: TraceCallback;\n  }) {\n    super({\n      messenger,\n      metadata,\n      name: controllerName,\n      state: { ...defaultState, ...state },\n    });\n\n    if (!metametrics) {\n      throw new Error('`metametrics` field is required');\n    }\n\n    // `??` per key so an explicit `undefined` keeps the default rather than\n    // clobbering it.\n    this.#config = {\n      env: config?.env ?? this.#config.env,\n      isSocialPairingEnabled:\n        config?.isSocialPairingEnabled ?? this.#config.isSocialPairingEnabled,\n    };\n\n    this.#metametrics = metametrics;\n    this.#trace = trace ?? (((_request, fn) => fn?.()) as TraceCallback);\n\n    this.#auth = new JwtBearerAuth(\n      {\n        env: this.#config.env,\n        platform: metametrics.agent,\n        type: AuthType.SRP,\n      },\n      {\n        storage: {\n          getLoginResponse: this.#getLoginResponseFromState.bind(this),\n          setLoginResponse: this.#setLoginResponseToState.bind(this),\n        },\n        signing: {\n          getIdentifier: this.#getPublicKey.bind(this),\n          signMessage: this.#signMessage.bind(this),\n        },\n        getLoginTag: this.#getLoginTag.bind(this),\n        getLoginIdentifierType: this.#getLoginIdentifierType.bind(this),\n        metametrics: this.#metametrics,\n      },\n    );\n\n    this.#keyringController.setupLockedStateSubscriptions();\n\n    this.messenger.registerMethodActionHandlers(\n      this,\n      MESSENGER_EXPOSED_METHODS,\n    );\n  }\n\n  async #getLoginResponseFromState(\n    entropySourceId?: string,\n  ): Promise<LoginResponse | null> {\n    const resolvedId = entropySourceId ?? this.#getPrimaryEntropySourceId();\n    if (!this.state.srpSessionData?.[resolvedId]) {\n      return null;\n    }\n    return this.state.srpSessionData[resolvedId];\n  }\n\n  async #setLoginResponseToState(\n    loginResponse: LoginResponse,\n    entropySourceId?: string,\n  ) {\n    const resolvedId = entropySourceId ?? this.#getPrimaryEntropySourceId();\n    const metaMetricsId = await this.#metametrics.getMetaMetricsId();\n    this.update((state) => {\n      state.isSignedIn = true;\n      if (!state.srpSessionData) {\n        state.srpSessionData = {};\n      }\n      // The API omits `paired_identifier_ids` when it fails to load them, so\n      // keep the last known value rather than wiping it.\n      const pairedIdentifierIds =\n        loginResponse.profile.pairedIdentifierIds ??\n        state.srpSessionData[resolvedId]?.profile.pairedIdentifierIds;\n      state.srpSessionData[resolvedId] = {\n        ...loginResponse,\n        profile: {\n          ...loginResponse.profile,\n          metaMetricsId,\n          ...(pairedIdentifierIds ? { pairedIdentifierIds } : {}),\n        },\n      };\n    });\n  }\n\n  #assertIsUnlocked(methodName: string): void {\n    if (!this.#isUnlocked) {\n      throw new Error(`${methodName} - unable to proceed, wallet is locked`);\n    }\n  }\n\n  #assertAuthSessionEpoch(epoch: number, methodName: string): void {\n    if (!this.#isUnlocked || this.#authSessionEpoch !== epoch) {\n      throw new Error(\n        `${methodName} - unable to proceed, the authenticated session ended`,\n      );\n    }\n  }\n\n  /**\n   * Reads the HD keyring entropy source IDs from KeyringController.\n   *\n   * @returns The HD keyring metadata IDs, primary first.\n   */\n  #getHdKeyringEntropySourceIds(): string[] {\n    const keyringState = this.messenger.call('KeyringController:getState');\n    return selectHdKeyringEntropySourceIds(keyringState);\n  }\n\n  /**\n   * Resolves the primary SRP's entropy source ID from KeyringController rather\n   * than the message-signing snap, so callers like `getBearerToken()` are not\n   * blocked on snap boot.\n   *\n   * @returns The primary HD keyring metadata ID.\n   * @throws If no HD keyring is available; callers must only resolve while\n   * the wallet is unlocked.\n   */\n  #getPrimaryEntropySourceId(): string {\n    const keyringState = this.messenger.call('KeyringController:getState');\n    return getPrimaryHdKeyringEntropySourceId(keyringState);\n  }\n\n  /**\n   * Resolves the SRP login tag for `raw_message`.\n   *\n   * - `primary` for the first HD entropy source\n   * - `secondary` for any other entropy source\n   *\n   * @param entropySourceId - Entropy source for this login attempt.\n   * @returns The login tag to append to the signed message.\n   */\n  async #getLoginTag(entropySourceId?: string): Promise<SrpLoginTag> {\n    const primaryEntropySourceId = this.#getPrimaryEntropySourceId();\n    const resolvedId = entropySourceId ?? primaryEntropySourceId;\n\n    return resolvedId === primaryEntropySourceId ? 'primary' : 'secondary';\n  }\n\n  /**\n   * Resolves metametrics `identifier_type` for `/srp/login`\n   * (`SRP` | `GOOGLE` | `APPLE` | `TELEGRAM`).\n   *\n   * This is the auth method for the entropy source, independent of\n   * {@link SrpLoginTag} (`primary` / `secondary`).\n   *\n   * SeedlessOnboarding currently exposes a single vault-level\n   * `authConnection`, which always backs the primary entropy source. Non-\n   * primary sources therefore return `SRP`. If social identities become\n   * per-entropy later, resolve from that metadata instead of assuming\n   * primary === social.\n   *\n   * Soft-fails to `SRP` when SeedlessOnboarding is not registered.\n   *\n   * @param entropySourceId - Entropy source for this login attempt.\n   * @returns The login identifier type.\n   */\n  async #getLoginIdentifierType(\n    entropySourceId?: string,\n  ): Promise<LoginIdentifierType> {\n    const primaryEntropySourceId = this.#getPrimaryEntropySourceId();\n    const resolvedId = entropySourceId ?? primaryEntropySourceId;\n\n    // Social vault authConnection is only associated with the primary source.\n    if (resolvedId !== primaryEntropySourceId) {\n      return 'SRP';\n    }\n\n    return this.#resolveSocialIdentifierType();\n  }\n\n  /**\n   * Maps `SeedlessOnboardingController.state.authConnection` to a login\n   * identifier type when a social vault is present.\n   *\n   * Returns `SRP` if there is no vault, the provider is unrecognized, or\n   * SeedlessOnboardingController is unavailable on the messenger.\n   *\n   * @returns The social provider identifier type, or `SRP`.\n   */\n  #resolveSocialIdentifierType(): LoginIdentifierType {\n    try {\n      return this.#identifierTypeFromSeedlessState(\n        this.messenger.call('SeedlessOnboardingController:getState'),\n      );\n    } catch {\n      return 'SRP';\n    }\n  }\n\n  /**\n   * Maps SeedlessOnboarding vault + `authConnection` to a login identifier\n   * type. Does not catch messenger errors — callers decide whether a\n   * missing controller is `SRP` or a retryable failure.\n   *\n   * @param state - SeedlessOnboarding slice used for the mapping.\n   * @param state.vault - Encrypted social vault, if present.\n   * @param state.authConnection - Social provider id (`google` / `apple` /\n   * `telegram`).\n   * @returns The social provider identifier type, or `SRP`.\n   */\n  #identifierTypeFromSeedlessState(state: {\n    vault?: string | null;\n    authConnection?: string;\n  }): LoginIdentifierType {\n    if (state.vault === null || state.vault === undefined) {\n      return 'SRP';\n    }\n\n    // Match provider strings from SeedlessOnboarding state rather than\n    // importing AuthConnection — a value import would load that package\n    // (and its heavy deps) whenever this controller is imported.\n    switch (state.authConnection) {\n      case 'google':\n        return 'GOOGLE';\n      case 'apple':\n        return 'APPLE';\n      case 'telegram':\n        return 'TELEGRAM';\n      default:\n        return 'SRP';\n    }\n  }\n\n  public async performSignIn(): Promise<string[]> {\n    this.#assertIsUnlocked('performSignIn');\n\n    const epochAtStart = this.#profilePairingRequestEpoch;\n    const entropySourceIds = this.#getHdKeyringEntropySourceIds();\n    const accessTokens: string[] = [];\n\n    // We iterate sequentially in order to be sure that the first entry\n    // is the primary SRP LoginResponse.\n    for (const entropySourceId of entropySourceIds) {\n      const accessToken = await this.#auth.getAccessToken(entropySourceId);\n      accessTokens.push(accessToken);\n    }\n\n    if (entropySourceIds.length < 2) {\n      // Single-SRP wallet: nothing to pair.\n      this.#tryClearNeedsProfilePairing(epochAtStart);\n    } else {\n      // Pair failures must not break sign-in; the gate stays `true` for retry.\n      try {\n        await this.#doPair(accessTokens, epochAtStart);\n      } catch {\n        // noop\n      }\n    }\n\n    try {\n      await this.#trySocialPairing(accessTokens[0]);\n    } catch {\n      // noop\n    }\n\n    return accessTokens;\n  }\n\n  /**\n   * Attaches a Google/Apple/Telegram social identifier to the primary SRP\n   * profile via `POST /api/v2/profile/pair/identifier`.\n   *\n   * Runs only when `isSocialPairingEnabled()` is true and\n   * `needsSocialPairing` is not `false` (`undefined` is treated as true).\n   * No social provider (`authConnection` unset) → clear the flag (nothing\n   * to pair). Social provider set but vault missing → skip (onboarding\n   * still in flight). Google without email → skip (API requires it).\n   * Telegram never sends `email` (the field holds a display name, not an\n   * address). Missing social JWT → skip. 409 Conflict → clear the flag\n   * (identifier already owned; retry is pointless). Other errors\n   * propagate so the caller can swallow them and leave the flag set for\n   * retry.\n   *\n   * @param primaryAccessToken - Primary SRP OIDC access token used as the\n   * Bearer credential. The profile associated with this JWT becomes the\n   * canonical owner of the social identifier.\n   */\n  async #trySocialPairing(primaryAccessToken?: string): Promise<void> {\n    if (\n      !this.#config.isSocialPairingEnabled() ||\n      this.state.needsSocialPairing === false ||\n      !primaryAccessToken\n    ) {\n      return;\n    }\n\n    let seedlessState: {\n      vault?: string | null;\n      authConnection?: string;\n      socialLoginEmail?: string;\n    };\n    try {\n      seedlessState = this.messenger.call(\n        'SeedlessOnboardingController:getState',\n      );\n    } catch {\n      // Controller missing or getState failed — retry next performSignIn.\n      return;\n    }\n\n    // `SRP` here does not describe the vault: it is the mapping's \"no social\n    // identity\" result, returned when there is no seedless vault or the\n    // provider is unrecognised. In both cases there is nothing to pair.\n    const identifierType = this.#identifierTypeFromSeedlessState(seedlessState);\n    if (identifierType === 'SRP') {\n      const { vault, authConnection } = seedlessState;\n      // Vault not written yet but a social provider is already known —\n      // onboarding is still in flight. Do not clear; retry next sign-in.\n      if ((vault === null || vault === undefined) && Boolean(authConnection)) {\n        return;\n      }\n      this.#clearNeedsSocialPairing();\n      return;\n    }\n\n    // Email policy follows the API contract: GOOGLE requires `email` (400\n    // without it), APPLE accepts it optionally, TELEGRAM must not send it\n    // (clients store a display name in `socialLoginEmail` for Telegram).\n    // Clients request the `email` scope for Google, so a missing value is a\n    // defensive case rather than an expected one; returning here leaves\n    // `needsSocialPairing` set so the next sign-in retries instead of\n    // sending a request that would fail.\n    const { socialLoginEmail } = seedlessState;\n    let email: string | undefined;\n    if (identifierType === 'GOOGLE') {\n      if (!socialLoginEmail) {\n        return;\n      }\n      email = socialLoginEmail;\n    } else if (identifierType === 'APPLE') {\n      email = socialLoginEmail;\n    }\n\n    const socialJwt = await this.messenger.call(\n      'SeedlessOnboardingController:getAccessToken',\n    );\n    if (socialJwt === undefined || socialJwt === '') {\n      return;\n    }\n\n    try {\n      const pairedIdentifierIds = await this.#auth.pairSocialIdentifier(\n        {\n          identifierType,\n          socialJwt,\n          ...(email ? { email } : {}),\n        },\n        primaryAccessToken,\n      );\n      this.#setPrimaryPairedIdentifierIds(pairedIdentifierIds);\n      this.#clearNeedsSocialPairing();\n    } catch (error) {\n      if (error instanceof PairConflictError) {\n        this.#clearNeedsSocialPairing();\n        return;\n      }\n      throw error;\n    }\n  }\n\n  #clearNeedsSocialPairing(): void {\n    if (this.state.needsSocialPairing !== false) {\n      this.update((state) => {\n        state.needsSocialPairing = false;\n      });\n    }\n  }\n\n  /**\n   * Marks profile pairing as needed. Clients call this when the SRP set\n   * changes (e.g. a new keyring was added) so the next auto-sign-in cycle\n   * re-runs `performSignIn` and re-pairs.\n   */\n  public requestProfilePairing(): void {\n    this.#profilePairingRequestEpoch += 1;\n    if (!this.state.needsProfilePairing) {\n      this.update((state) => {\n        state.needsProfilePairing = true;\n      });\n    }\n  }\n\n  /**\n   * Clears `needsProfilePairing` only if no `requestProfilePairing` call\n   * landed since `epochAtStart` was captured. Prevents `performSignIn`\n   * from silently overwriting a concurrent rearm.\n   *\n   * @param epochAtStart - Epoch value captured at the start of `performSignIn`.\n   */\n  #tryClearNeedsProfilePairing(epochAtStart: number): void {\n    if (this.#profilePairingRequestEpoch !== epochAtStart) {\n      return;\n    }\n    if (this.state.needsProfilePairing) {\n      this.update((state) => {\n        state.needsProfilePairing = false;\n      });\n    }\n  }\n\n  /**\n   * Pairs all SRPs via `POST /profile/pair`, propagates the canonical\n   * profile ID, clears `needsProfilePairing`, and emits\n   * `AuthenticationController:profileSignIn` when the canonical changes or\n   * new aliases are returned. Throws on failure.\n   *\n   * @param accessTokens - Per-SRP access tokens, primary first.\n   * @param epochAtStart - Pairing-request epoch captured by the caller.\n   * Used to skip the gate clear if `requestProfilePairing` ran while the\n   * pair API call was in-flight.\n   */\n  async #doPair(accessTokens: string[], epochAtStart: number): Promise<void> {\n    const previousCanonical = this.#getCanonicalProfileId();\n\n    const profileAliases = await this.#pairSrpProfiles(accessTokens);\n    const newCanonical = this.#getCanonicalProfileId();\n\n    // If somehow we cannot compute the new canonical profile ID after pairing,\n    // we just return now and do not update the `needsProfilePairing` flag.\n    if (!newCanonical) {\n      return;\n    }\n\n    this.#tryClearNeedsProfilePairing(epochAtStart);\n\n    const profileIdChanged = previousCanonical !== newCanonical;\n    const shouldEmitProfileSignInEvent =\n      profileIdChanged || profileAliases.length > 0;\n\n    if (shouldEmitProfileSignInEvent) {\n      this.messenger.publish('AuthenticationController:profileSignIn', {\n        profileId: newCanonical,\n        profileAliases,\n        profileIdChanged,\n      });\n    }\n  }\n\n  async #pairSrpProfiles(accessTokens: string[]): Promise<ProfileAlias[]> {\n    if (accessTokens.length < 2) {\n      return [];\n    }\n    const primaryAccessToken = accessTokens[0]; // Associated with primary SRP.\n    const {\n      profileAliases,\n      profile: { canonicalProfileId, pairedIdentifierIds },\n    } = await this.#auth.pairSrpProfiles(accessTokens, primaryAccessToken);\n    this.#propagateCanonical(canonicalProfileId);\n    this.#setPrimaryPairedIdentifierIds(pairedIdentifierIds);\n    return profileAliases;\n  }\n\n  /**\n   * Pair calls use the primary SRP's token, so their response only describes\n   * the primary's profile: secondaries skipped by the server are not in it.\n   *\n   * @param pairedIdentifierIds - Identifiers returned by the pair call, if any.\n   */\n  #setPrimaryPairedIdentifierIds(\n    pairedIdentifierIds: ProfileIdentifier[] | undefined,\n  ): void {\n    if (!pairedIdentifierIds) {\n      return;\n    }\n    const primaryEntropySourceId = this.#getPrimaryEntropySourceId();\n    this.update((state) => {\n      const entry = state.srpSessionData?.[primaryEntropySourceId];\n      if (entry?.profile) {\n        entry.profile.pairedIdentifierIds = pairedIdentifierIds;\n      }\n    });\n  }\n\n  #propagateCanonical(canonicalProfileId: string): void {\n    const { srpSessionData } = this.state;\n    if (!srpSessionData) {\n      return;\n    }\n\n    this.update((state) => {\n      for (const entry of Object.values(state.srpSessionData ?? {})) {\n        if (entry?.profile) {\n          entry.profile.canonicalProfileId = canonicalProfileId;\n        }\n      }\n    });\n  }\n\n  /**\n   * Returns the canonical profile id from the primary SRP's cached session.\n   * Returns `null` when no session exists yet for the primary SRP.\n   *\n   * Always reads from the primary SRP because the canonical is shared across\n   * all paired SRPs after `#propagateCanonical`.\n   *\n   * @returns The canonical profile id, or `null` if unavailable.\n   */\n  #getCanonicalProfileId(): string | null {\n    const primaryEntropySourceId = this.#getPrimaryEntropySourceId();\n    return (\n      this.state.srpSessionData?.[primaryEntropySourceId]?.profile\n        ?.canonicalProfileId ?? null\n    );\n  }\n\n  /**\n   * Runs one MFA network step inside a trace span tagged with the caller's\n   * operation and the credential type, recording the outcome and MFA error\n   * code.\n   *\n   * @param name - Span name.\n   * @param operation - Caller-supplied `reason.operation`.\n   * @param credentialType - Credential type the step concerns.\n   * @param fn - The network step.\n   * @returns The step's result.\n   */\n  async #runMfaRequest<Result>(\n    name: string,\n    operation: string,\n    credentialType: string,\n    fn: () => Promise<Result>,\n  ): Promise<Result> {\n    return await this.#trace(\n      {\n        name,\n        tags: { operation, credentialType },\n      },\n      async (context) => {\n        try {\n          const result = await fn();\n          this.#setTraceAttribute(context, 'outcome', 'success');\n          return result;\n        } catch (error) {\n          this.#setTraceAttribute(context, 'outcome', 'error');\n          const mfaCode = getMfaErrorCode(error);\n          if (mfaCode) {\n            this.#setTraceAttribute(context, 'mfaErrorCode', mfaCode);\n            if (mfaCode === 'authentication_required' && this.#isUnlocked) {\n              this.#invalidateSrpSession(this.#getPrimaryEntropySourceId());\n              // A verification session must not outlive a rejected base\n              // session.\n              this.clearVerificationSession();\n            }\n          }\n          throw error;\n        }\n      },\n    );\n  }\n\n  /**\n   * `TraceContext` is opaque in `@metamask/controller-utils`; both clients\n   * hand back a Sentry span, so attributes are set via duck typing and a\n   * non-Sentry context is a silent no-op.\n   *\n   * @param context - Span handed to the trace callback, if any.\n   * @param key - Attribute name.\n   * @param value - Attribute value.\n   */\n  #setTraceAttribute(\n    context: TraceContext | undefined,\n    key: string,\n    value: string,\n  ): void {\n    const traceSpan = context as\n      | { setAttribute?: (attribute: string, data: string) => void }\n      | undefined;\n    traceSpan?.setAttribute?.(key, value);\n  }\n\n  /**\n   * Refreshes credentials enrolled on the canonical profile.\n   *\n   * @returns The current supported credentials.\n   */\n  public async refreshEnrolledCredentials(): Promise<EnrolledCredential[]> {\n    this.#assertIsUnlocked('refreshEnrolledCredentials');\n    const sessionEpoch = this.#authSessionEpoch;\n    this.#credentialsRefreshSeq += 1;\n    const refreshSeq = this.#credentialsRefreshSeq;\n    const primaryEntropySourceId = this.#getPrimaryEntropySourceId();\n    const credentials = await this.#runMfaRequest(\n      'MFA Credentials Refresh',\n      'credentials.refresh',\n      'all',\n      async () => await this.#auth.getMfaCredentials(primaryEntropySourceId),\n    );\n    this.#assertAuthSessionEpoch(sessionEpoch, 'refreshEnrolledCredentials');\n\n    // A newer refresh started while this one was in flight; its result is at\n    // least as fresh, so defer to it rather than overwrite with older data.\n    if (refreshSeq !== this.#credentialsRefreshSeq) {\n      return this.#getEnrolledCredentials();\n    }\n\n    // Skip the write when nothing changed so subscribers are not woken up by\n    // a fresh-but-identical array.\n    if (\n      JSON.stringify(credentials) !==\n      JSON.stringify(this.#getEnrolledCredentials())\n    ) {\n      this.update((state) => {\n        state.enrolledCredentials = credentials;\n      });\n    }\n    return credentials;\n  }\n\n  /**\n   * Begins enrollment of a passkey or email OTP credential.\n   *\n   * @param request - Credential, optional email address, and trace reason.\n   * @returns A challenge for the client-owned ceremony.\n   */\n  public async beginCredentialEnrollment(\n    request: BeginEnrollmentRequest,\n  ): Promise<EnrollmentChallenge> {\n    this.#assertIsUnlocked('beginCredentialEnrollment');\n    const sessionEpoch = this.#authSessionEpoch;\n    assertValidMfaRequest(request, BeginEnrollmentRequestStruct);\n    const primaryEntropySourceId = this.#getPrimaryEntropySourceId();\n    // The server requires AAL2 to add a credential once one that proves AAL2\n    // exists: send the verification token only while a recent enough session\n    // is live and let the server decide. An older session stays open for\n    // other consumers.\n    const accessToken = this.getVerificationToken({\n      maxSessionAgeMs: request.maxSessionAgeMs ?? ENROLLMENT_MAX_SESSION_AGE_MS,\n    })?.accessToken;\n    const challenge = await this.#runMfaRequest(\n      'MFA Enroll Begin',\n      request.reason.operation,\n      request.type,\n      async () =>\n        await this.#auth.beginMfaEnrollment(request.type, {\n          email: request.email,\n          entropySourceId: primaryEntropySourceId,\n          accessToken,\n        }),\n    );\n    this.#assertAuthSessionEpoch(sessionEpoch, 'beginCredentialEnrollment');\n    return challenge;\n  }\n\n  /**\n   * Completes credential enrollment and refreshes the credential cache.\n   *\n   * A cache-refresh failure does not undo successful enrollment. Email\n   * enrollment invalidates the primary SRP session *after* refresh so the\n   * credentials call can reuse the still-valid access token; the next token\n   * fetch then includes the newly verified email claim. That invalidation\n   * happens even if the session ends mid-request: the enrollment succeeded\n   * on the server, so a token cached across a lock must not be reused\n   * without the new claim.\n   *\n   * @param request - Flow identifier, platform or email proof, and trace reason.\n   * @returns The refreshed credentials, or the existing cache if refresh fails.\n   */\n  public async completeCredentialEnrollment(\n    request: CompleteEnrollmentRequest,\n  ): Promise<EnrolledCredential[]> {\n    this.#assertIsUnlocked('completeCredentialEnrollment');\n    const sessionEpoch = this.#authSessionEpoch;\n    assertValidMfaRequest(request, CompleteEnrollmentRequestStruct);\n    const { type } = request.proof;\n    const primaryEntropySourceId = this.#getPrimaryEntropySourceId();\n    await this.#runMfaRequest(\n      'MFA Enroll Complete',\n      request.reason.operation,\n      type,\n      async () =>\n        await this.#auth.completeMfaEnrollment(\n          request.flowId,\n          request.proof,\n          primaryEntropySourceId,\n        ),\n    );\n\n    try {\n      this.#assertAuthSessionEpoch(\n        sessionEpoch,\n        'completeCredentialEnrollment',\n      );\n    } catch (error) {\n      if (type === 'email_otp') {\n        this.#invalidateSrpSession(primaryEntropySourceId);\n      }\n      throw error;\n    }\n\n    // The verification session is deliberately kept: adding a factor does not\n    // weaken an earlier proof, and `beginCredentialEnrollment` already limits\n    // which sessions may add the next one.\n    try {\n      return await this.refreshEnrolledCredentials();\n    } catch {\n      return this.#getEnrolledCredentials();\n    } finally {\n      if (type === 'email_otp') {\n        this.#invalidateSrpSession(primaryEntropySourceId);\n      }\n    }\n  }\n\n  /**\n   * Begins verification with an enrolled credential.\n   *\n   * @param request - Credential type and trace reason.\n   * @returns A challenge for the client-owned ceremony.\n   */\n  public async beginCredentialVerification(\n    request: BeginVerificationRequest,\n  ): Promise<VerificationChallenge> {\n    this.#assertIsUnlocked('beginCredentialVerification');\n    const sessionEpoch = this.#authSessionEpoch;\n    assertValidMfaRequest(request, BeginVerificationRequestStruct);\n    const primaryEntropySourceId = this.#getPrimaryEntropySourceId();\n    const challenge = await this.#runMfaRequest(\n      'MFA Verification Begin',\n      request.reason.operation,\n      request.type,\n      async () =>\n        await this.#auth.beginMfaVerification(\n          request.type,\n          primaryEntropySourceId,\n        ),\n    );\n    this.#assertAuthSessionEpoch(sessionEpoch, 'beginCredentialVerification');\n    return challenge;\n  }\n\n  /**\n   * Completes verification and opens a short-lived verification session.\n   *\n   * The assertion returned by the MFA service is exchanged at Hydra for an\n   * access token. Its assurance level is not checked: the services receiving\n   * the token enforce their own requirements. The token itself never enters\n   * controller state.\n   *\n   * @param request - Flow identifier, platform or email proof, and trace reason.\n   * @returns The verification token.\n   */\n  public async completeCredentialVerification(\n    request: CompleteVerificationRequest,\n  ): Promise<VerificationToken> {\n    this.#assertIsUnlocked('completeCredentialVerification');\n    const sessionEpoch = this.#authSessionEpoch;\n    assertValidMfaRequest(request, CompleteVerificationRequestStruct);\n    const { type } = request.proof;\n    const { operation } = request.reason;\n    const primaryEntropySourceId = this.#getPrimaryEntropySourceId();\n    const assertion = await this.#runMfaRequest(\n      'MFA Verification Complete',\n      operation,\n      type,\n      async () =>\n        await this.#auth.completeMfaVerification(\n          request.flowId,\n          request.proof,\n          primaryEntropySourceId,\n        ),\n    );\n    this.#assertAuthSessionEpoch(\n      sessionEpoch,\n      'completeCredentialVerification',\n    );\n    const accessToken = await this.#runMfaRequest(\n      'MFA Token Exchange',\n      operation,\n      type,\n      async () => await this.#auth.exchangeMfaAssertion(assertion.token),\n    );\n    this.#assertAuthSessionEpoch(\n      sessionEpoch,\n      'completeCredentialVerification',\n    );\n\n    let decodedClaims: unknown;\n    try {\n      decodedClaims = decodeJwtPayload(accessToken.accessToken);\n    } catch (error) {\n      throw new VerificationTokenInvalidError(toErrorMessage(error));\n    }\n    const claims = parseVerificationTokenClaims(decodedClaims);\n    if (claims.exp * 1000 <= Date.now()) {\n      throw new VerificationTokenInvalidError('Verification token is expired');\n    }\n\n    const token: VerificationToken = { ...accessToken, claims };\n    this.#openVerificationSession(token);\n    return token;\n  }\n\n  /**\n   * Returns the active verification token when it meets the requested\n   * freshness.\n   *\n   * @param request - Optional maximum session age in milliseconds, measured\n   * from when the token was obtained. Zero always requires a new ceremony.\n   * @returns A live verification token, or null when no reusable session\n   * exists.\n   */\n  public getVerificationToken(\n    request: GetVerificationTokenRequest = {},\n  ): VerificationToken | null {\n    this.#assertIsUnlocked('getVerificationToken');\n    assertValidMfaRequest(request, GetVerificationTokenRequestStruct);\n    const session = this.#verificationSessions.get(DEFAULT_AUDIENCE);\n    if (!session) {\n      return null;\n    }\n    const now = Date.now();\n    if (now >= session.expiresAt) {\n      // The hard-expiry timer has not fired yet (e.g. a suspended tab).\n      this.#dropVerificationSession(DEFAULT_AUDIENCE);\n      return null;\n    }\n    // `>=` so a zero max age always forces a fresh ceremony. Not cleared: the\n    // max age is this caller's requirement; others may still use the session.\n    const maxAge = request.maxSessionAgeMs;\n    if (maxAge !== undefined && now - session.token.obtainedAt >= maxAge) {\n      return null;\n    }\n    return session.token;\n  }\n\n  /**\n   * Opens the verification session. Its lifetime is the session TTL clamped to\n   * the token's own `exp`, so the session never outlives the token.\n   *\n   * @param token - The freshly exchanged verification token.\n   */\n  #openVerificationSession(token: VerificationToken): void {\n    const audience = DEFAULT_AUDIENCE;\n    this.#dropVerificationSession(audience);\n    const expiresAt = Math.min(\n      token.obtainedAt + VERIFICATION_SESSION_TTL_MS,\n      token.claims.exp * 1000,\n    );\n    const timer = setTimeout(\n      () => this.#dropVerificationSession(audience),\n      Math.max(0, expiresAt - Date.now()),\n    );\n    // Never keep a Node process alive for the expiry timer (tests, tooling).\n    (timer as { unref?: () => void }).unref?.();\n    this.#verificationSessions.set(audience, { token, expiresAt, timer });\n  }\n\n  /**\n   * Drops one audience's verification session and its expiration timer.\n   *\n   * @param audience - Audience whose session to drop.\n   */\n  #dropVerificationSession(audience: string): void {\n    const session = this.#verificationSessions.get(audience);\n    if (session) {\n      clearTimeout(session.timer);\n      this.#verificationSessions.delete(audience);\n    }\n  }\n\n  /**\n   * Clears every in-memory verification session and its expiration timer.\n   */\n  public clearVerificationSession(): void {\n    for (const { timer } of this.#verificationSessions.values()) {\n      clearTimeout(timer);\n    }\n    this.#verificationSessions.clear();\n  }\n\n  /**\n   * Drops the cached credential list. Callers that wipe profile state must go\n   * through this so subscribers never keep credentials belonging to a profile\n   * that is no longer active.\n   */\n  #clearEnrolledCredentials(): void {\n    if (this.#getEnrolledCredentials().length === 0) {\n      return;\n    }\n    this.update((state) => {\n      state.enrolledCredentials = [];\n    });\n  }\n\n  #getEnrolledCredentials(): EnrolledCredential[] {\n    return this.state.enrolledCredentials ?? [];\n  }\n\n  public performSignOut(): void {\n    this.#authSessionEpoch += 1;\n    this.clearVerificationSession();\n    this.#clearEnrolledCredentials();\n    this.update((state) => {\n      state.isSignedIn = false;\n      state.srpSessionData = undefined;\n    });\n  }\n\n  /**\n   * Resets the controller to `defaultState`. Clients call this on wallet reset\n   * so the next wallet starts unsigned with both pairing gates re-armed.\n   */\n  public clearState(): void {\n    this.#profilePairingRequestEpoch += 1;\n    this.#authSessionEpoch += 1;\n    this.clearVerificationSession();\n    this.#clearEnrolledCredentials();\n    this.update(() => ({ ...defaultState }));\n  }\n\n  /**\n   * Returns a bearer token for the specified SRP, logging in if needed.\n   *\n   * When called without `entropySourceId`, returns the primary (first) SRP's\n   * access token, which is effectively the canonical\n   * profile's token that can be used by alias-aware consumers for cross-SRP\n   * operations.\n   *\n   * @param entropySourceId - The entropy source ID. Omit for the primary SRP.\n   * @returns The OIDC access token.\n   */\n  public async getBearerToken(entropySourceId?: string): Promise<string> {\n    this.#assertIsUnlocked('getBearerToken');\n    const resolvedId = entropySourceId ?? this.#getPrimaryEntropySourceId();\n    return await this.#auth.getAccessToken(resolvedId);\n  }\n\n  /**\n   * Returns the cached session profile, logging in if no session exists.\n   *\n   * The returned `canonicalProfileId` reflects the value from the most recent\n   * login or pairing. In the rare event where a canonical changed because of\n   * a pairing that happened on another device, the cached value may be stale\n   * until the next login. For guaranteed freshness, call\n   * `refreshCanonicalProfileId()` before reading `canonicalProfileId`.\n   *\n   * @param entropySourceId - The entropy source ID used to derive the key,\n   * when multiple sources are available (Multi-SRP).\n   * @returns profile for the session.\n   */\n  public async getSessionProfile(\n    entropySourceId?: string,\n  ): Promise<UserProfile> {\n    this.#assertIsUnlocked('getSessionProfile');\n    const resolvedId = entropySourceId ?? this.#getPrimaryEntropySourceId();\n    return await this.#auth.getUserProfile(resolvedId);\n  }\n\n  /**\n   * Forces a fresh retrieval of the canonical profile ID from the server\n   * and propagates it to all cached SRP sessions.\n   *\n   * This method invalidates the primary SRP's cached session and forces a\n   * re-login. Use it before operations that require a guaranteed-fresh\n   * canonical (e.g. storage key derivation for Accounts ADR 0005). For\n   * best-effort reads, use\n   * `getSessionProfile().canonicalProfileId` instead.\n   *\n   * Only the primary SRP is re-logged-in regardless of how many SRPs exist —\n   * the server returns the current canonical for the entire pairing group\n   * from any single SRP login.\n   *\n   * @returns The refreshed canonical profile ID.\n   */\n  public async refreshCanonicalProfileId(): Promise<string> {\n    this.#assertIsUnlocked('refreshCanonicalProfileId');\n\n    const primaryEntropySourceId = this.#getPrimaryEntropySourceId();\n    this.#invalidateSrpSession(primaryEntropySourceId);\n    await this.#auth.getAccessToken(primaryEntropySourceId);\n\n    const canonical = this.#getCanonicalProfileId();\n    if (!canonical) {\n      throw new Error(\n        'refreshCanonicalProfileId - Unable to resolve canonical profile ID',\n      );\n    }\n\n    this.#propagateCanonical(canonical);\n    return canonical;\n  }\n\n  #invalidateSrpSession(entropySourceId: string): void {\n    this.update((state) => {\n      const entry = state.srpSessionData?.[entropySourceId];\n      if (entry?.profile) {\n        // Setting canonicalProfileId to '' forces a re-fetch on the next\n        // #getAuthSession call. The falsy check (!auth.profile.canonicalProfileId)\n        // treats '' the same as undefined/null — all signal an invalid session.\n        entry.profile.canonicalProfileId = '';\n      }\n    });\n  }\n\n  public async getUserProfileLineage(\n    entropySourceId?: string,\n  ): Promise<UserProfileLineage> {\n    this.#assertIsUnlocked('getUserProfileLineage');\n    const resolvedId = entropySourceId ?? this.#getPrimaryEntropySourceId();\n    return await this.#auth.getUserProfileLineage(resolvedId);\n  }\n\n  /**\n   * Returns a Customer Service specific access token for the specified SRP,\n   * logging in if needed.\n   *\n   * Exchanges the OIDC access token for a short-lived token scoped to the\n   * customer-service audience. Customer Service tooling consumes this token to\n   * identify and authenticate the user.\n   *\n   * @param entropySourceId - The entropy source ID. Omit for the primary SRP.\n   * @returns The customer-service access token.\n   */\n  public async getCustomerServiceToken(\n    entropySourceId?: string,\n  ): Promise<string> {\n    this.#assertIsUnlocked('getCustomerServiceToken');\n    const resolvedId = entropySourceId ?? this.#getPrimaryEntropySourceId();\n    return await this.#auth.getCustomerServiceToken(resolvedId);\n  }\n\n  /**\n   * Mints a partner identity token for the specified SRP, logging in if needed.\n   *\n   * Calls `POST /api/v2/oidc/token` with the Hydra login bearer and returns\n   * the minted `access_token`. Email on live tokens is under JWT `ext`.\n   * HTTP 422 throws `EmailRequiredError` when this profile has no\n   * verified email.\n   *\n   * @param claims - Claim names to embed. Only `email` is supported.\n   * @param audience - Partner audience (`kyc` or `iron`).\n   * @param entropySourceId - The entropy source ID. Omit for the primary SRP.\n   * @returns The partner identity access token.\n   */\n  public async getPartnerIdentityToken(\n    claims: OidcTokenClaims,\n    audience: OidcTokenAudience,\n    entropySourceId?: string,\n  ): Promise<string> {\n    this.#assertIsUnlocked('getPartnerIdentityToken');\n    const resolvedId = entropySourceId ?? this.#getPrimaryEntropySourceId();\n    return await this.#auth.getPartnerIdentityToken(\n      claims,\n      audience,\n      resolvedId,\n    );\n  }\n\n  public isSignedIn(): boolean {\n    return this.state.isSignedIn;\n  }\n\n  /**\n   * Reads the BIP-39 seed for an HD entropy source from KeyringController.\n   *\n   * @param entropySourceId - Entropy source ID. Defaults to the primary HD\n   * keyring.\n   * @returns The HD keyring seed.\n   */\n  async #getHdKeyringSeed(entropySourceId?: string): Promise<Uint8Array> {\n    const resolvedId = entropySourceId ?? this.#getPrimaryEntropySourceId();\n    return getHdKeyringSeed(this.messenger, resolvedId);\n  }\n\n  /**\n   * Returns the message-signing public key via native SIP-6 derivation\n   * (same key as `@metamask/message-signing-snap` with empty salt).\n   *\n   * @param entropySourceId - The entropy source ID used to derive the key,\n   * when multiple sources are available (Multi-SRP).\n   * @returns The public key hex.\n   */\n  async #getPublicKey(entropySourceId?: string): Promise<string> {\n    this.#assertIsUnlocked('#getPublicKey');\n    const seed = await this.#getHdKeyringSeed(entropySourceId);\n    return getMessageSigningPublicKey(seed);\n  }\n\n  #_signMessageCache: Record<string, string> = {};\n\n  /**\n   * Builds a cache key scoped to a specific entropy source, so each SRP's\n   * signature stays isolated (same pattern as `UserStorageController`).\n   *\n   * When `entropySourceId` is omitted (primary SRP), it is resolved to the\n   * primary HD keyring's metadata ID rather than a stable literal. Because that\n   * ID is randomly regenerated whenever the vault is recreated (e.g. on\n   * restore), the cached entry is naturally invalidated across vaults — a\n   * different SRP can never inherit the previous primary's cached signature.\n   *\n   * @param message - The tagged message used for signing.\n   * @param entropySourceId - The entropy source ID. Omit for the primary SRP.\n   * @returns The scoped cache key.\n   */\n  #scopedCacheKey(\n    message: `metamask:${string}`,\n    entropySourceId?: string,\n  ): string {\n    return `${entropySourceId ?? this.#getPrimaryEntropySourceId()}:${message}`;\n  }\n\n  /**\n   * Signs a `metamask:…` message with the native SIP-6 message-signing key.\n   *\n   * @param message - A specific tagged message to sign.\n   * @param entropySourceId - The entropy source ID used to derive the key,\n   * when multiple sources are available (Multi-SRP).\n   * @returns Compact secp256k1 signature hex.\n   */\n  async #signMessage(\n    message: string,\n    entropySourceId?: string,\n  ): Promise<string> {\n    assertMessageStartsWithMetamask(message);\n    this.#assertIsUnlocked('#signMessage');\n\n    const cacheKey = this.#scopedCacheKey(message, entropySourceId);\n    if (this.#_signMessageCache[cacheKey]) {\n      return this.#_signMessageCache[cacheKey];\n    }\n\n    const seed = await this.#getHdKeyringSeed(entropySourceId);\n    const result = await signMessageWithMessageSigningKey(message, seed);\n\n    this.#_signMessageCache[cacheKey] = result;\n\n    return result;\n  }\n}\n"]}
+{"version":3,"file":"AuthenticationController.js","sourceRoot":"","sources":["../../../src/controllers/authentication/AuthenticationController.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAO3D,OAAO,EAAE,+BAA+B,EAAE,MAAM,8BAA8B,CAAC;AAc/E,OAAO,EACL,4BAA4B,EAC5B,+BAA+B,EAC/B,qBAAqB,EACrB,8BAA8B,EAC9B,iCAAiC,EACjC,iCAAiC,EACjC,4BAA4B,GAC7B,MAAM,oDAAoD,CAAC;AAsB5D,OAAO,EACL,+BAA+B,EAC/B,QAAQ,EACR,GAAG,EACH,aAAa,EACb,iBAAiB,EACjB,eAAe,EACf,6BAA6B,GAC9B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,qCAAqC,CAAC;AAErE,OAAO,EAAE,kCAAkC,EAAE,MAAM,sCAAsC,CAAC;AAC1F,OAAO,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AACzE,OAAO,EACL,0BAA0B,EAC1B,gCAAgC,GACjC,MAAM,uCAAuC,CAAC;AAG/C,MAAM,cAAc,GAAG,0BAA0B,CAAC;AAsClD,MAAM,CAAC,MAAM,YAAY,GAAkC;IACzD,UAAU,EAAE,KAAK;IACjB,mBAAmB,EAAE,EAAE;IACvB,mBAAmB,EAAE,IAAI;IACzB,kBAAkB,EAAE,IAAI;CACzB,CAAC;AACF,MAAM,QAAQ,GAAiD;IAC7D,UAAU,EAAE;QACV,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,IAAI;QACb,sBAAsB,EAAE,IAAI;QAC5B,QAAQ,EAAE,IAAI;KACf;IACD,mBAAmB,EAAE;QACnB,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,IAAI;QACb,sBAAsB,EAAE,IAAI;QAC5B,QAAQ,EAAE,IAAI;KACf;IACD,kBAAkB,EAAE;QAClB,kBAAkB,EAAE,IAAI;QACxB,OAAO,EAAE,IAAI;QACb,sBAAsB,EAAE,IAAI;QAC5B,QAAQ,EAAE,IAAI;KACf;IACD,cAAc,EAAE;QACd,6DAA6D;QAC7D,kBAAkB,EAAE,CAAC,cAAc,EAAE,EAAE;YACrC,4FAA4F;YAC5F,2FAA2F;YAC3F,mEAAmE;YACnE,kEAAkE;YAClE,oDAAoD;YACpD,IAAI,cAAc,KAAK,IAAI,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;gBAC5D,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,MAAM,CAC1C,CAAC,uBAAuB,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE;gBACxC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,uBAAuB,EAAE,GACxD,KAAK,CAAC,KAAK,CAAC;gBACd,MAAM,EACJ,mBAAmB,EAAE,0BAA0B,EAC/C,GAAG,iCAAiC,EACrC,GAAG,KAAK,CAAC,OAAO,CAAC;gBAClB,uBAAuB,CAAC,GAAG,CAAC,GAAG;oBAC7B,GAAG,KAAK;oBACR,KAAK,EAAE,uBAAuB;oBAC9B,OAAO,EAAE,iCAAiC;iBAC3C,CAAC;gBACF,OAAO,uBAAuB,CAAC;YACjC,CAAC,EACD,EAAE,CACH,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,IAAI;QACb,sBAAsB,EAAE,KAAK;QAC7B,QAAQ,EAAE,IAAI;KACf;IACD,mBAAmB,EAAE;QACnB,yEAAyE;QACzE,kBAAkB,EAAE,CAAC,WAAW,EAAE,EAAE,CAClC,WAAW,EAAE,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;YAClD,IAAI;YACJ,MAAM;YACN,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;SACpD,CAAC,CAAC,IAAI,IAAI;QACb,OAAO,EAAE,KAAK;QACd,sBAAsB,EAAE,KAAK;QAC7B,QAAQ,EAAE,IAAI;KACf;CACF,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,EAAE,GAAG,MAAM,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,GAAG,MAAM,CAAC;AAExD;;;GAGG;AACH,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAiB5B,MAAM,yBAAyB,GAAG;IAChC,eAAe;IACf,gBAAgB;IAChB,gBAAgB;IAChB,mBAAmB;IACnB,2BAA2B;IAC3B,uBAAuB;IACvB,yBAAyB;IACzB,yBAAyB;IACzB,YAAY;IACZ,uBAAuB;IACvB,YAAY;IACZ,4BAA4B;IAC5B,2BAA2B;IAC3B,8BAA8B;IAC9B,6BAA6B;IAC7B,gCAAgC;IAChC,sBAAsB;IACtB,0BAA0B;CAClB,CAAC;AAgDX;;;GAGG;AACH,MAAM,OAAO,wBAAyB,SAAQ,cAI7C;IACU,YAAY,CAAkB;IAE9B,KAAK,CAAe;IAEpB,MAAM,CAAgB;IAEtB,OAAO,GAAqB;QACnC,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,sBAAsB,EAAE,GAAG,EAAE,CAAC,KAAK;KACpC,CAAC;IAEF,WAAW,GAAG,KAAK,CAAC;IAEpB;;;OAGG;IACH,iBAAiB,GAAG,CAAC,CAAC;IAEtB;;;;OAIG;IACM,qBAAqB,GAAG,IAAI,GAAG,EAA+B,CAAC;IAExE;;;;;OAKG;IACH,sBAAsB,GAAG,CAAC,CAAC;IAE3B;;;OAGG;IACH,2BAA2B,GAAG,CAAC,CAAC;IAEhC;;OAEG;IACH,cAAc,CAAqB;IAE1B,kBAAkB,GAAG;QAC5B,6BAA6B,EAAE,GAAG,EAAE;YAClC,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;YACzE,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC;YAE9B,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,0BAA0B,EAAE,GAAG,EAAE;gBACxD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;YAC1B,CAAC,CAAC,CAAC;YAEH,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,wBAAwB,EAAE,GAAG,EAAE;gBACtD,IAAI,CAAC,iBAAiB,IAAI,CAAC,CAAC;gBAC5B,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;gBACzB,IAAI,CAAC,wBAAwB,EAAE,CAAC;YAClC,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;IAEF,YAAY,EACV,SAAS,EACT,KAAK,EACL,MAAM,EACN,WAAW,EACX,KAAK,GAWN;QACC,KAAK,CAAC;YACJ,SAAS;YACT,QAAQ;YACR,IAAI,EAAE,cAAc;YACpB,KAAK,EAAE,EAAE,GAAG,YAAY,EAAE,GAAG,KAAK,EAAE;SACrC,CAAC,CAAC;QAEH,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QAED,wEAAwE;QACxE,iBAAiB;QACjB,IAAI,CAAC,OAAO,GAAG;YACb,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG;YACpC,sBAAsB,EACpB,MAAM,EAAE,sBAAsB,IAAI,IAAI,CAAC,OAAO,CAAC,sBAAsB;SACxE,CAAC;QAEF,IAAI,CAAC,YAAY,GAAG,WAAW,CAAC;QAChC,IAAI,CAAC,MAAM,GAAG,KAAK,IAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAmB,CAAC;QAErE,IAAI,CAAC,KAAK,GAAG,IAAI,aAAa,CAC5B;YACE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG;YACrB,QAAQ,EAAE,WAAW,CAAC,KAAK;YAC3B,IAAI,EAAE,QAAQ,CAAC,GAAG;SACnB,EACD;YACE,OAAO,EAAE;gBACP,gBAAgB,EAAE,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC5D,gBAAgB,EAAE,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC;aAC3D;YACD,OAAO,EAAE;gBACP,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;gBAC5C,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;aAC1C;YACD,WAAW,EAAE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC;YACzC,sBAAsB,EAAE,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC;YAC/D,WAAW,EAAE,IAAI,CAAC,YAAY;SAC/B,CACF,CAAC;QAEF,IAAI,CAAC,kBAAkB,CAAC,6BAA6B,EAAE,CAAC;QAExD,IAAI,CAAC,SAAS,CAAC,4BAA4B,CACzC,IAAI,EACJ,yBAAyB,CAC1B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,0BAA0B,CAC9B,eAAwB;QAExB,MAAM,UAAU,GAAG,eAAe,IAAI,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACxE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,wBAAwB,CAC5B,aAA4B,EAC5B,eAAwB;QAExB,MAAM,UAAU,GAAG,eAAe,IAAI,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACxE,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,gBAAgB,EAAE,CAAC;QACjE,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YACpB,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC;YACxB,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;gBAC1B,KAAK,CAAC,cAAc,GAAG,EAAE,CAAC;YAC5B,CAAC;YACD,uEAAuE;YACvE,mDAAmD;YACnD,MAAM,mBAAmB,GACvB,aAAa,CAAC,OAAO,CAAC,mBAAmB;gBACzC,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,mBAAmB,CAAC;YAChE,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC,GAAG;gBACjC,GAAG,aAAa;gBAChB,OAAO,EAAE;oBACP,GAAG,aAAa,CAAC,OAAO;oBACxB,aAAa;oBACb,GAAG,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACxD;aACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,iBAAiB,CAAC,UAAkB;QAClC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,wCAAwC,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED,uBAAuB,CAAC,KAAa,EAAE,UAAkB;QACvD,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,iBAAiB,KAAK,KAAK,EAAE,CAAC;YAC1D,MAAM,IAAI,KAAK,CACb,GAAG,UAAU,uDAAuD,CACrE,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,6BAA6B;QAC3B,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACvE,OAAO,+BAA+B,CAAC,YAAY,CAAC,CAAC;IACvD,CAAC;IAED;;;;;;;;OAQG;IACH,0BAA0B;QACxB,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QACvE,OAAO,kCAAkC,CAAC,YAAY,CAAC,CAAC;IAC1D,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,YAAY,CAAC,eAAwB;QACzC,MAAM,sBAAsB,GAAG,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACjE,MAAM,UAAU,GAAG,eAAe,IAAI,sBAAsB,CAAC;QAE7D,OAAO,UAAU,KAAK,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;IACzE,CAAC;IAED;;;;;;;;;;;;;;;;;OAiBG;IACH,KAAK,CAAC,uBAAuB,CAC3B,eAAwB;QAExB,MAAM,sBAAsB,GAAG,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACjE,MAAM,UAAU,GAAG,eAAe,IAAI,sBAAsB,CAAC;QAE7D,0EAA0E;QAC1E,IAAI,UAAU,KAAK,sBAAsB,EAAE,CAAC;YAC1C,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAI,CAAC,4BAA4B,EAAE,CAAC;IAC7C,CAAC;IAED;;;;;;;;OAQG;IACH,4BAA4B;QAC1B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,gCAAgC,CAC1C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAC7D,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACH,gCAAgC,CAAC,KAGhC;QACC,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACtD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,mEAAmE;QACnE,oEAAoE;QACpE,6DAA6D;QAC7D,QAAQ,KAAK,CAAC,cAAc,EAAE,CAAC;YAC7B,KAAK,QAAQ;gBACX,OAAO,QAAQ,CAAC;YAClB,KAAK,OAAO;gBACV,OAAO,OAAO,CAAC;YACjB,KAAK,UAAU;gBACb,OAAO,UAAU,CAAC;YACpB;gBACE,OAAO,KAAK,CAAC;QACjB,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,aAAa;QACxB,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC;QACxC,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;YACxB,OAAO,MAAM,IAAI,CAAC,cAAc,CAAC;QACnC,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;YACnD,IAAI,IAAI,CAAC,cAAc,KAAK,MAAM,EAAE,CAAC;gBACnC,IAAI,CAAC,cAAc,GAAG,SAAS,CAAC;YAClC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC;QAC7B,OAAO,MAAM,MAAM,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,iBAAiB;QACrB,MAAM,YAAY,GAAG,IAAI,CAAC,2BAA2B,CAAC;QACtD,MAAM,gBAAgB,GAAG,IAAI,CAAC,6BAA6B,EAAE,CAAC;QAC9D,MAAM,YAAY,GAAa,EAAE,CAAC;QAElC,mEAAmE;QACnE,oCAAoC;QACpC,KAAK,MAAM,eAAe,IAAI,gBAAgB,EAAE,CAAC;YAC/C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,eAAe,CAAC,CAAC;YACrE,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACjC,CAAC;QAED,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,sCAAsC;YACtC,IAAI,CAAC,4BAA4B,CAAC,YAAY,CAAC,CAAC;QAClD,CAAC;aAAM,CAAC;YACN,yEAAyE;YACzE,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;YACjD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;YACT,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QAED,OAAO,YAAY,CAAC;IACtB,CAAC;IAED;;;;;;;;;;;;;;;;;;OAkBG;IACH,KAAK,CAAC,iBAAiB,CAAC,kBAA2B;QACjD,IACE,CAAC,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE;YACtC,IAAI,CAAC,KAAK,CAAC,kBAAkB,KAAK,KAAK;YACvC,CAAC,kBAAkB,EACnB,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,aAIH,CAAC;QACF,IAAI,CAAC;YACH,aAAa,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CACjC,uCAAuC,CACxC,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,oEAAoE;YACpE,OAAO;QACT,CAAC;QAED,yEAAyE;QACzE,oEAAoE;QACpE,oEAAoE;QACpE,MAAM,cAAc,GAAG,IAAI,CAAC,gCAAgC,CAAC,aAAa,CAAC,CAAC;QAC5E,IAAI,cAAc,KAAK,KAAK,EAAE,CAAC;YAC7B,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,aAAa,CAAC;YAChD,iEAAiE;YACjE,mEAAmE;YACnE,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,CAAC,IAAI,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;gBACvE,OAAO;YACT,CAAC;YACD,IAAI,CAAC,wBAAwB,EAAE,CAAC;YAChC,OAAO;QACT,CAAC;QAED,sEAAsE;QACtE,sEAAsE;QACtE,qEAAqE;QACrE,wEAAwE;QACxE,oEAAoE;QACpE,kEAAkE;QAClE,qCAAqC;QACrC,MAAM,EAAE,gBAAgB,EAAE,GAAG,aAAa,CAAC;QAC3C,IAAI,KAAyB,CAAC;QAC9B,IAAI,cAAc,KAAK,QAAQ,EAAE,CAAC;YAChC,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,OAAO;YACT,CAAC;YACD,KAAK,GAAG,gBAAgB,CAAC;QAC3B,CAAC;aAAM,IAAI,cAAc,KAAK,OAAO,EAAE,CAAC;YACtC,KAAK,GAAG,gBAAgB,CAAC;QAC3B,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,IAAI,CACzC,6CAA6C,CAC9C,CAAC;QACF,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;YAChD,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,mBAAmB,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAC/D;gBACE,cAAc;gBACd,SAAS;gBACT,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5B,EACD,kBAAkB,CACnB,CAAC;YACF,IAAI,CAAC,8BAA8B,CAAC,mBAAmB,CAAC,CAAC;YACzD,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;gBACvC,IAAI,CAAC,wBAAwB,EAAE,CAAC;gBAChC,OAAO;YACT,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,wBAAwB;QACtB,IAAI,IAAI,CAAC,KAAK,CAAC,kBAAkB,KAAK,KAAK,EAAE,CAAC;YAC5C,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;gBACpB,KAAK,CAAC,kBAAkB,GAAG,KAAK,CAAC;YACnC,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;OAIG;IACI,qBAAqB;QAC1B,IAAI,CAAC,2BAA2B,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,mBAAmB,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;gBACpB,KAAK,CAAC,mBAAmB,GAAG,IAAI,CAAC;YACnC,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,4BAA4B,CAAC,YAAoB;QAC/C,IAAI,IAAI,CAAC,2BAA2B,KAAK,YAAY,EAAE,CAAC;YACtD,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,mBAAmB,EAAE,CAAC;YACnC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;gBACpB,KAAK,CAAC,mBAAmB,GAAG,KAAK,CAAC;YACpC,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,OAAO,CAAC,YAAsB,EAAE,YAAoB;QACxD,MAAM,iBAAiB,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAExD,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;QACjE,MAAM,YAAY,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAEnD,2EAA2E;QAC3E,uEAAuE;QACvE,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,4BAA4B,CAAC,YAAY,CAAC,CAAC;QAEhD,MAAM,gBAAgB,GAAG,iBAAiB,KAAK,YAAY,CAAC;QAC5D,MAAM,4BAA4B,GAChC,gBAAgB,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC;QAEhD,IAAI,4BAA4B,EAAE,CAAC;YACjC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,wCAAwC,EAAE;gBAC/D,SAAS,EAAE,YAAY;gBACvB,cAAc;gBACd,gBAAgB;aACjB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,YAAsB;QAC3C,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,kBAAkB,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,+BAA+B;QAC3E,MAAM,EACJ,cAAc,EACd,OAAO,EAAE,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,GACrD,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,YAAY,EAAE,kBAAkB,CAAC,CAAC;QACvE,IAAI,CAAC,mBAAmB,CAAC,kBAAkB,CAAC,CAAC;QAC7C,IAAI,CAAC,8BAA8B,CAAC,mBAAmB,CAAC,CAAC;QACzD,OAAO,cAAc,CAAC;IACxB,CAAC;IAED;;;;;OAKG;IACH,8BAA8B,CAC5B,mBAAoD;QAEpD,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzB,OAAO;QACT,CAAC;QACD,MAAM,sBAAsB,GAAG,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACjE,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YACpB,MAAM,KAAK,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC,sBAAsB,CAAC,CAAC;YAC7D,IAAI,KAAK,EAAE,OAAO,EAAE,CAAC;gBACnB,KAAK,CAAC,OAAO,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;YAC1D,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED,mBAAmB,CAAC,kBAA0B;QAC5C,MAAM,EAAE,cAAc,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QACtC,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YACpB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC,EAAE,CAAC;gBAC9D,IAAI,KAAK,EAAE,OAAO,EAAE,CAAC;oBACnB,KAAK,CAAC,OAAO,CAAC,kBAAkB,GAAG,kBAAkB,CAAC;gBACxD,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;OAQG;IACH,sBAAsB;QACpB,MAAM,sBAAsB,GAAG,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACjE,OAAO,CACL,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC,sBAAsB,CAAC,EAAE,OAAO;YAC1D,EAAE,kBAAkB,IAAI,IAAI,CAC/B,CAAC;IACJ,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,cAAc,CAClB,IAAY,EACZ,SAAiB,EACjB,cAAsB,EACtB,EAAyB;QAEzB,OAAO,MAAM,IAAI,CAAC,MAAM,CACtB;YACE,IAAI;YACJ,IAAI,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE;SACpC,EACD,KAAK,EAAE,OAAO,EAAE,EAAE;YAChB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,EAAE,EAAE,CAAC;gBAC1B,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;gBACvD,OAAO,MAAM,CAAC;YAChB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;gBACrD,MAAM,OAAO,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;gBACvC,IAAI,OAAO,EAAE,CAAC;oBACZ,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;oBAC1D,IAAI,OAAO,KAAK,yBAAyB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;wBAC9D,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,0BAA0B,EAAE,CAAC,CAAC;wBAC9D,0DAA0D;wBAC1D,WAAW;wBACX,IAAI,CAAC,wBAAwB,EAAE,CAAC;oBAClC,CAAC;gBACH,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC,CACF,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACH,kBAAkB,CAChB,OAAiC,EACjC,GAAW,EACX,KAAa;QAEb,MAAM,SAAS,GAAG,OAEL,CAAC;QACd,SAAS,EAAE,YAAY,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACxC,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,0BAA0B;QACrC,IAAI,CAAC,iBAAiB,CAAC,4BAA4B,CAAC,CAAC;QACrD,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC;QAC5C,IAAI,CAAC,sBAAsB,IAAI,CAAC,CAAC;QACjC,MAAM,UAAU,GAAG,IAAI,CAAC,sBAAsB,CAAC;QAC/C,MAAM,sBAAsB,GAAG,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACjE,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAC3C,yBAAyB,EACzB,qBAAqB,EACrB,KAAK,EACL,KAAK,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,sBAAsB,CAAC,CACvE,CAAC;QACF,IAAI,CAAC,uBAAuB,CAAC,YAAY,EAAE,4BAA4B,CAAC,CAAC;QAEzE,yEAAyE;QACzE,wEAAwE;QACxE,IAAI,UAAU,KAAK,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC/C,OAAO,IAAI,CAAC,uBAAuB,EAAE,CAAC;QACxC,CAAC;QAED,yEAAyE;QACzE,+BAA+B;QAC/B,IACE,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC;YAC3B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,uBAAuB,EAAE,CAAC,EAC9C,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;gBACpB,KAAK,CAAC,mBAAmB,GAAG,WAAW,CAAC;YAC1C,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,yBAAyB,CACpC,OAA+B;QAE/B,IAAI,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,CAAC;QACpD,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC;QAC5C,qBAAqB,CAAC,OAAO,EAAE,4BAA4B,CAAC,CAAC;QAC7D,MAAM,sBAAsB,GAAG,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACjE,yEAAyE;QACzE,yEAAyE;QACzE,qEAAqE;QACrE,mBAAmB;QACnB,MAAM,WAAW,GAAG,IAAI,CAAC,oBAAoB,CAAC;YAC5C,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,6BAA6B;SAC1E,CAAC,EAAE,WAAW,CAAC;QAChB,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CACzC,kBAAkB,EAClB,OAAO,CAAC,MAAM,CAAC,SAAS,EACxB,OAAO,CAAC,IAAI,EACZ,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,KAAK,CAAC,kBAAkB,CAAC,OAAO,CAAC,IAAI,EAAE;YAChD,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,eAAe,EAAE,sBAAsB;YACvC,WAAW;SACZ,CAAC,CACL,CAAC;QACF,IAAI,CAAC,uBAAuB,CAAC,YAAY,EAAE,2BAA2B,CAAC,CAAC;QACxE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;;;;;;OAaG;IACI,KAAK,CAAC,4BAA4B,CACvC,OAAkC;QAElC,IAAI,CAAC,iBAAiB,CAAC,8BAA8B,CAAC,CAAC;QACvD,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC;QAC5C,qBAAqB,CAAC,OAAO,EAAE,+BAA+B,CAAC,CAAC;QAChE,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC;QAC/B,MAAM,sBAAsB,GAAG,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACjE,MAAM,IAAI,CAAC,cAAc,CACvB,qBAAqB,EACrB,OAAO,CAAC,MAAM,CAAC,SAAS,EACxB,IAAI,EACJ,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,KAAK,CAAC,qBAAqB,CACpC,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,KAAK,EACb,sBAAsB,CACvB,CACJ,CAAC;QAEF,IAAI,CAAC;YACH,IAAI,CAAC,uBAAuB,CAC1B,YAAY,EACZ,8BAA8B,CAC/B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;gBACzB,IAAI,CAAC,qBAAqB,CAAC,sBAAsB,CAAC,CAAC;YACrD,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;QAED,0EAA0E;QAC1E,0EAA0E;QAC1E,uCAAuC;QACvC,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC,uBAAuB,EAAE,CAAC;QACxC,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;gBACzB,IAAI,CAAC,qBAAqB,CAAC,sBAAsB,CAAC,CAAC;YACrD,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACI,KAAK,CAAC,2BAA2B,CACtC,OAAiC;QAEjC,IAAI,CAAC,iBAAiB,CAAC,6BAA6B,CAAC,CAAC;QACtD,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC;QAC5C,qBAAqB,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;QAC/D,MAAM,sBAAsB,GAAG,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACjE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CACzC,wBAAwB,EACxB,OAAO,CAAC,MAAM,CAAC,SAAS,EACxB,OAAO,CAAC,IAAI,EACZ,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,KAAK,CAAC,oBAAoB,CACnC,OAAO,CAAC,IAAI,EACZ,sBAAsB,CACvB,CACJ,CAAC;QACF,IAAI,CAAC,uBAAuB,CAAC,YAAY,EAAE,6BAA6B,CAAC,CAAC;QAC1E,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;;;;;;;;;OAUG;IACI,KAAK,CAAC,8BAA8B,CACzC,OAAoC;QAEpC,IAAI,CAAC,iBAAiB,CAAC,gCAAgC,CAAC,CAAC;QACzD,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC;QAC5C,qBAAqB,CAAC,OAAO,EAAE,iCAAiC,CAAC,CAAC;QAClE,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC;QAC/B,MAAM,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QACrC,MAAM,sBAAsB,GAAG,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACjE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CACzC,2BAA2B,EAC3B,SAAS,EACT,IAAI,EACJ,KAAK,IAAI,EAAE,CACT,MAAM,IAAI,CAAC,KAAK,CAAC,uBAAuB,CACtC,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,KAAK,EACb,sBAAsB,CACvB,CACJ,CAAC;QACF,IAAI,CAAC,uBAAuB,CAC1B,YAAY,EACZ,gCAAgC,CACjC,CAAC;QACF,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,cAAc,CAC3C,oBAAoB,EACpB,SAAS,EACT,IAAI,EACJ,KAAK,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,oBAAoB,CAAC,SAAS,CAAC,KAAK,CAAC,CACnE,CAAC;QACF,IAAI,CAAC,uBAAuB,CAC1B,YAAY,EACZ,gCAAgC,CACjC,CAAC;QAEF,IAAI,aAAsB,CAAC;QAC3B,IAAI,CAAC;YACH,aAAa,GAAG,gBAAgB,CAAC,WAAW,CAAC,WAAW,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,6BAA6B,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,MAAM,GAAG,4BAA4B,CAAC,aAAa,CAAC,CAAC;QAC3D,IAAI,MAAM,CAAC,GAAG,GAAG,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACpC,MAAM,IAAI,6BAA6B,CAAC,+BAA+B,CAAC,CAAC;QAC3E,CAAC;QAED,MAAM,KAAK,GAAsB,EAAE,GAAG,WAAW,EAAE,MAAM,EAAE,CAAC;QAC5D,IAAI,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;QACrC,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;;;;;;OAQG;IACI,oBAAoB,CACzB,OAAO,GAAgC,EAAE;QAEzC,IAAI,CAAC,iBAAiB,CAAC,sBAAsB,CAAC,CAAC;QAC/C,qBAAqB,CAAC,OAAO,EAAE,iCAAiC,CAAC,CAAC;QAClE,MAAM,OAAO,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACjE,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,GAAG,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YAC7B,kEAAkE;YAClE,IAAI,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;YAChD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,0EAA0E;QAC1E,0EAA0E;QAC1E,MAAM,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC;QACvC,IAAI,MAAM,KAAK,SAAS,IAAI,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,IAAI,MAAM,EAAE,CAAC;YACrE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,OAAO,CAAC,KAAK,CAAC;IACvB,CAAC;IAED;;;;;OAKG;IACH,wBAAwB,CAAC,KAAwB;QAC/C,MAAM,QAAQ,GAAG,gBAAgB,CAAC;QAClC,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CACxB,KAAK,CAAC,UAAU,GAAG,2BAA2B,EAC9C,KAAK,CAAC,MAAM,CAAC,GAAG,GAAG,IAAI,CACxB,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CAAC,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,EAC7C,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CACpC,CAAC;QACF,yEAAyE;QACxE,KAAgC,CAAC,KAAK,EAAE,EAAE,CAAC;QAC5C,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IACxE,CAAC;IAED;;;;OAIG;IACH,wBAAwB,CAAC,QAAgB;QACvC,MAAM,OAAO,GAAG,IAAI,CAAC,qBAAqB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACzD,IAAI,OAAO,EAAE,CAAC;YACZ,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5B,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED;;OAEG;IACI,wBAAwB;QAC7B,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5D,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;QACD,IAAI,CAAC,qBAAqB,CAAC,KAAK,EAAE,CAAC;IACrC,CAAC;IAED;;;;OAIG;IACH,yBAAyB;QACvB,IAAI,IAAI,CAAC,uBAAuB,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAChD,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YACpB,KAAK,CAAC,mBAAmB,GAAG,EAAE,CAAC;QACjC,CAAC,CAAC,CAAC;IACL,CAAC;IAED,uBAAuB;QACrB,OAAO,IAAI,CAAC,KAAK,CAAC,mBAAmB,IAAI,EAAE,CAAC;IAC9C,CAAC;IAEM,cAAc;QACnB,IAAI,CAAC,iBAAiB,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAChC,IAAI,CAAC,yBAAyB,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YACpB,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC;YACzB,KAAK,CAAC,cAAc,GAAG,SAAS,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;OAGG;IACI,UAAU;QACf,IAAI,CAAC,2BAA2B,IAAI,CAAC,CAAC;QACtC,IAAI,CAAC,iBAAiB,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,wBAAwB,EAAE,CAAC;QAChC,IAAI,CAAC,yBAAyB,EAAE,CAAC;QACjC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC,CAAC;IAC3C,CAAC;IAED;;;;;;;;;;OAUG;IACI,KAAK,CAAC,cAAc,CAAC,eAAwB;QAClD,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;QACzC,MAAM,UAAU,GAAG,eAAe,IAAI,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACxE,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IACrD,CAAC;IAED;;;;;;;;;;;;OAYG;IACI,KAAK,CAAC,iBAAiB,CAC5B,eAAwB;QAExB,IAAI,CAAC,iBAAiB,CAAC,mBAAmB,CAAC,CAAC;QAC5C,MAAM,UAAU,GAAG,eAAe,IAAI,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACxE,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;IACrD,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACI,KAAK,CAAC,yBAAyB;QACpC,IAAI,CAAC,iBAAiB,CAAC,2BAA2B,CAAC,CAAC;QAEpD,MAAM,sBAAsB,GAAG,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACjE,IAAI,CAAC,qBAAqB,CAAC,sBAAsB,CAAC,CAAC;QACnD,MAAM,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,sBAAsB,CAAC,CAAC;QAExD,MAAM,SAAS,GAAG,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAChD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CACb,oEAAoE,CACrE,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;QACpC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,qBAAqB,CAAC,eAAuB;QAC3C,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;YACpB,MAAM,KAAK,GAAG,KAAK,CAAC,cAAc,EAAE,CAAC,eAAe,CAAC,CAAC;YACtD,IAAI,KAAK,EAAE,OAAO,EAAE,CAAC;gBACnB,iEAAiE;gBACjE,2EAA2E;gBAC3E,wEAAwE;gBACxE,KAAK,CAAC,OAAO,CAAC,kBAAkB,GAAG,EAAE,CAAC;YACxC,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC;IAEM,KAAK,CAAC,qBAAqB,CAChC,eAAwB;QAExB,IAAI,CAAC,iBAAiB,CAAC,uBAAuB,CAAC,CAAC;QAChD,MAAM,UAAU,GAAG,eAAe,IAAI,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACxE,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,qBAAqB,CAAC,UAAU,CAAC,CAAC;IAC5D,CAAC;IAED;;;;;;;;;;OAUG;IACI,KAAK,CAAC,uBAAuB,CAClC,eAAwB;QAExB,IAAI,CAAC,iBAAiB,CAAC,yBAAyB,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,eAAe,IAAI,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACxE,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAAC,UAAU,CAAC,CAAC;IAC9D,CAAC;IAED;;;;;;;;;;;;OAYG;IACI,KAAK,CAAC,uBAAuB,CAClC,MAAuB,EACvB,QAA2B,EAC3B,eAAwB;QAExB,IAAI,CAAC,iBAAiB,CAAC,yBAAyB,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,eAAe,IAAI,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACxE,OAAO,MAAM,IAAI,CAAC,KAAK,CAAC,uBAAuB,CAC7C,MAAM,EACN,QAAQ,EACR,UAAU,CACX,CAAC;IACJ,CAAC;IAEM,UAAU;QACf,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;IAC/B,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,iBAAiB,CAAC,eAAwB;QAC9C,MAAM,UAAU,GAAG,eAAe,IAAI,IAAI,CAAC,0BAA0B,EAAE,CAAC;QACxE,OAAO,gBAAgB,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACtD,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,aAAa,CAAC,eAAwB;QAC1C,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC;QACxC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC;QAC3D,OAAO,0BAA0B,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED,kBAAkB,GAA2B,EAAE,CAAC;IAEhD;;;;;;;;;;;;;OAaG;IACH,eAAe,CACb,OAA6B,EAC7B,eAAwB;QAExB,OAAO,GAAG,eAAe,IAAI,IAAI,CAAC,0BAA0B,EAAE,IAAI,OAAO,EAAE,CAAC;IAC9E,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,YAAY,CAChB,OAAe,EACf,eAAwB;QAExB,+BAA+B,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC;QAEvC,MAAM,QAAQ,GAAG,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QAChE,IAAI,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC3C,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,MAAM,gCAAgC,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAErE,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,GAAG,MAAM,CAAC;QAE3C,OAAO,MAAM,CAAC;IAChB,CAAC;CACF","sourcesContent":["import { BaseController } from '@metamask/base-controller';\nimport type {\n  ControllerGetStateAction,\n  ControllerStateChangeEvent,\n  StateMetadata,\n} from '@metamask/base-controller';\nimport type { TraceCallback, TraceContext } from '@metamask/controller-utils';\nimport { selectHdKeyringEntropySourceIds } from '@metamask/keyring-controller';\nimport type {\n  KeyringControllerGetStateAction,\n  KeyringControllerLockEvent,\n  KeyringControllerUnlockEvent,\n  KeyringControllerWithKeyringV2UnsafeAction,\n} from '@metamask/keyring-controller';\nimport type { Messenger } from '@metamask/messenger';\nimport type {\n  SeedlessOnboardingControllerGetAccessTokenAction,\n  SeedlessOnboardingControllerGetStateAction,\n} from '@metamask/seedless-onboarding-controller';\nimport type { Json } from '@metamask/utils';\n\nimport {\n  BeginEnrollmentRequestStruct,\n  CompleteEnrollmentRequestStruct,\n  assertValidMfaRequest,\n  BeginVerificationRequestStruct,\n  CompleteVerificationRequestStruct,\n  GetVerificationTokenRequestStruct,\n  parseVerificationTokenClaims,\n} from '../../sdk/authentication-jwt-bearer/mfa/schemas.js';\nimport type {\n  LoginIdentifierType,\n  LoginResponse,\n  ProfileAlias,\n  ProfileIdentifier,\n  SRPInterface,\n  SrpLoginTag,\n  UserProfile,\n  UserProfileLineage,\n  OidcTokenAudience,\n  OidcTokenClaims,\n  BeginEnrollmentRequest,\n  CompleteEnrollmentRequest,\n  EnrolledCredential,\n  EnrollmentChallenge,\n  BeginVerificationRequest,\n  CompleteVerificationRequest,\n  VerificationToken,\n  GetVerificationTokenRequest,\n  VerificationChallenge,\n} from '../../sdk/index.js';\nimport {\n  assertMessageStartsWithMetamask,\n  AuthType,\n  Env,\n  JwtBearerAuth,\n  PairConflictError,\n  getMfaErrorCode,\n  VerificationTokenInvalidError,\n} from '../../sdk/index.js';\nimport { decodeJwtPayload } from '../../sdk/utils/jwt.js';\nimport { toErrorMessage } from '../../sdk/utils/to-error-message.js';\nimport type { MetaMetricsAuth } from '../../shared/types/services.js';\nimport { getPrimaryHdKeyringEntropySourceId } from '../../shared/utils/entropy-source.js';\nimport { getHdKeyringSeed } from '../../shared/utils/hd-keyring-seed.js';\nimport {\n  getMessageSigningPublicKey,\n  signMessageWithMessageSigningKey,\n} from '../../shared/utils/message-signing.js';\nimport { AuthenticationControllerMethodActions } from './AuthenticationController-method-action-types.js';\n\nconst controllerName = 'AuthenticationController';\n\n// State\nexport type AuthenticationControllerState = {\n  isSignedIn: boolean;\n  srpSessionData?: Record<string, LoginResponse>;\n  /**\n   * Credentials fetched for the current profile. The controller always seeds\n   * this to an empty array; it remains optional so partial-state selectors stay\n   * assignable to the controller state type.\n   */\n  enrolledCredentials?: EnrolledCredential[];\n  /**\n   * Client gate for profile pairing. Defaults to `true` (fresh install /\n   * upgrade), set to `false` after a successful `performSignIn` pair, set\n   * back to `true` via `requestProfilePairing()` when the SRP set changes,\n   * and left `true` on pair failure so the next state shift retries.\n   *\n   * Optional in the type so partial-state selectors stay assignable to\n   * `AuthenticationControllerState`. The controller seeds it via\n   * `defaultState` at construction; consumers should read `undefined` as\n   * `true` to mirror that runtime default.\n   */\n  needsProfilePairing?: boolean;\n  /**\n   * Client gate for social identifier pairing. Defaults to `true` (fresh\n   * install / upgrade), set to `false` after a successful or 409\n   * `POST /api/v2/profile/pair/identifier`, left `true` on other failures\n   * so the next `performSignIn` retries, and cleared without an API call\n   * when the user never logged in with a social provider.\n   *\n   * Optional in the type so partial-state selectors stay assignable to\n   * `AuthenticationControllerState`. The controller seeds it via\n   * `defaultState` at construction; consumers should read `undefined` as\n   * `true` to mirror that runtime default.\n   */\n  needsSocialPairing?: boolean;\n};\nexport const defaultState: AuthenticationControllerState = {\n  isSignedIn: false,\n  enrolledCredentials: [],\n  needsProfilePairing: true,\n  needsSocialPairing: true,\n};\nconst metadata: StateMetadata<AuthenticationControllerState> = {\n  isSignedIn: {\n    includeInStateLogs: true,\n    persist: true,\n    includeInDebugSnapshot: true,\n    usedInUi: true,\n  },\n  needsProfilePairing: {\n    includeInStateLogs: true,\n    persist: true,\n    includeInDebugSnapshot: true,\n    usedInUi: true,\n  },\n  needsSocialPairing: {\n    includeInStateLogs: true,\n    persist: true,\n    includeInDebugSnapshot: true,\n    usedInUi: true,\n  },\n  srpSessionData: {\n    // Remove access token and paired identifiers from state logs\n    includeInStateLogs: (srpSessionData) => {\n      // Unreachable branch, included just to fix a type error for the case where this property is\n      // unset. The type gets collapsed to include `| undefined` even though `undefined` is never\n      // set here, because we don't yet use `exactOptionalPropertyTypes`.\n      // TODO: Remove branch after enabling `exactOptionalPropertyTypes`\n      // ref: https://github.com/MetaMask/core/issues/6565\n      if (srpSessionData === null || srpSessionData === undefined) {\n        return null;\n      }\n      return Object.entries(srpSessionData).reduce<Record<string, Json>>(\n        (sanitizedSrpSessionData, [key, value]) => {\n          const { accessToken: _unused, ...tokenWithoutAccessToken } =\n            value.token;\n          const {\n            pairedIdentifierIds: _unusedPairedIdentifierIds,\n            ...profileWithoutPairedIdentifierIds\n          } = value.profile;\n          sanitizedSrpSessionData[key] = {\n            ...value,\n            token: tokenWithoutAccessToken,\n            profile: profileWithoutPairedIdentifierIds,\n          };\n          return sanitizedSrpSessionData;\n        },\n        {},\n      );\n    },\n    persist: true,\n    includeInDebugSnapshot: false,\n    usedInUi: true,\n  },\n  enrolledCredentials: {\n    // Allow-list so new credential types cannot leak identifiers by default.\n    includeInStateLogs: (credentials) =>\n      credentials?.map(({ type, status, enrolledAt }) => ({\n        type,\n        status,\n        ...(enrolledAt === undefined ? {} : { enrolledAt }),\n      })) ?? null,\n    persist: false,\n    includeInDebugSnapshot: false,\n    usedInUi: true,\n  },\n};\n\n/**\n * Upper bound on a verification session's lifetime. The session also ends at\n * the verification token's own `exp` (15 minutes today), whichever comes\n * first, so this only matters if the server ever issues longer-lived tokens.\n * Callers needing a fresher proof pass `maxSessionAgeMs` to\n * `getVerificationToken`.\n */\nexport const VERIFICATION_SESSION_TTL_MS = 15 * 60_000;\n\n/**\n * Default maximum age of a verification session that may authorize enrolling a\n * credential. A session opened for an unrelated operation must not be able to\n * add a factor long after the fact, while a session proven moments ago (or\n * during the same setup flow, via `maxSessionAgeMs`) may.\n */\nexport const ENROLLMENT_MAX_SESSION_AGE_MS = 2 * 60_000;\n\n/**\n * Key of the only verification session held today. Sessions are keyed by token\n * audience so audience-scoped tokens can be added without reshaping storage.\n */\nconst DEFAULT_AUDIENCE = '';\n\ntype VerificationSession = {\n  token: VerificationToken;\n  expiresAt: number;\n  timer: ReturnType<typeof setTimeout>;\n};\ntype ControllerConfig = {\n  env: Env;\n  /**\n   * When `true`, `performSignIn` attempts to attach the Google/Apple/\n   * Telegram social identifier to the primary SRP profile. Defaults to\n   * `() => false`.\n   */\n  isSocialPairingEnabled: () => boolean;\n};\n\nconst MESSENGER_EXPOSED_METHODS = [\n  'performSignIn',\n  'performSignOut',\n  'getBearerToken',\n  'getSessionProfile',\n  'refreshCanonicalProfileId',\n  'getUserProfileLineage',\n  'getCustomerServiceToken',\n  'getPartnerIdentityToken',\n  'isSignedIn',\n  'requestProfilePairing',\n  'clearState',\n  'refreshEnrolledCredentials',\n  'beginCredentialEnrollment',\n  'completeCredentialEnrollment',\n  'beginCredentialVerification',\n  'completeCredentialVerification',\n  'getVerificationToken',\n  'clearVerificationSession',\n] as const;\n\nexport type Actions =\n  | AuthenticationControllerGetStateAction\n  | AuthenticationControllerMethodActions;\n\nexport type AuthenticationControllerGetStateAction = ControllerGetStateAction<\n  typeof controllerName,\n  AuthenticationControllerState\n>;\n\nexport type AuthenticationControllerStateChangeEvent =\n  ControllerStateChangeEvent<\n    typeof controllerName,\n    AuthenticationControllerState\n  >;\n\nexport type ProfileSignInInfo = {\n  profileId: string;\n  profileAliases: ProfileAlias[];\n  profileIdChanged: boolean;\n};\n\nexport type AuthenticationControllerProfileSignInEvent = {\n  type: `${typeof controllerName}:profileSignIn`;\n  payload: [ProfileSignInInfo];\n};\n\nexport type Events =\n  | AuthenticationControllerStateChangeEvent\n  | AuthenticationControllerProfileSignInEvent;\n\n// Allowed Actions\ntype AllowedActions =\n  | KeyringControllerGetStateAction\n  | KeyringControllerWithKeyringV2UnsafeAction\n  | SeedlessOnboardingControllerGetStateAction\n  | SeedlessOnboardingControllerGetAccessTokenAction;\n\ntype AllowedEvents = KeyringControllerLockEvent | KeyringControllerUnlockEvent;\n\n// Messenger\nexport type AuthenticationControllerMessenger = Messenger<\n  typeof controllerName,\n  Actions | AllowedActions,\n  Events | AllowedEvents\n>;\n\n/**\n * Controller that enables authentication for restricted endpoints.\n * Used for Backup & Sync, Notifications, and other services.\n */\nexport class AuthenticationController extends BaseController<\n  typeof controllerName,\n  AuthenticationControllerState,\n  AuthenticationControllerMessenger\n> {\n  readonly #metametrics: MetaMetricsAuth;\n\n  readonly #auth: SRPInterface;\n\n  readonly #trace: TraceCallback;\n\n  readonly #config: ControllerConfig = {\n    env: Env.PRD,\n    isSocialPairingEnabled: () => false,\n  };\n\n  #isUnlocked = false;\n\n  /**\n   * Bumped whenever the authenticated session ends, so an in-flight MFA\n   * ceremony started under the previous session cannot apply its result.\n   */\n  #authSessionEpoch = 0;\n\n  /**\n   * Verification sessions keyed by token audience. At most one session per\n   * audience; only `DEFAULT_AUDIENCE` is used until audience-scoped tokens\n   * exist.\n   */\n  readonly #verificationSessions = new Map<string, VerificationSession>();\n\n  /**\n   * Sequence number of the most recently started credentials refresh. Only\n   * that refresh may write the cache, so a slower, earlier request cannot\n   * overwrite a newer list (e.g. an explicit refresh landing after an\n   * enrollment's refresh).\n   */\n  #credentialsRefreshSeq = 0;\n\n  /**\n   * Bumped by `requestProfilePairing` and `clearState` so an in-flight\n   * `performSignIn` can't clear `needsProfilePairing` afterwards.\n   */\n  #profilePairingRequestEpoch = 0;\n\n  /**\n   * Sign-in currently running. Overlapping callers share it.\n   */\n  #ongoingSignIn?: Promise<string[]>;\n\n  readonly #keyringController = {\n    setupLockedStateSubscriptions: () => {\n      const { isUnlocked } = this.messenger.call('KeyringController:getState');\n      this.#isUnlocked = isUnlocked;\n\n      this.messenger.subscribe('KeyringController:unlock', () => {\n        this.#isUnlocked = true;\n      });\n\n      this.messenger.subscribe('KeyringController:lock', () => {\n        this.#authSessionEpoch += 1;\n        this.#isUnlocked = false;\n        this.clearVerificationSession();\n      });\n    },\n  };\n\n  constructor({\n    messenger,\n    state,\n    config,\n    metametrics,\n    trace,\n  }: {\n    messenger: AuthenticationControllerMessenger;\n    state?: AuthenticationControllerState;\n    config?: Partial<ControllerConfig>;\n    /**\n     * Not using the Messaging System as we\n     * do not want to tie this strictly to extension\n     */\n    metametrics: MetaMetricsAuth;\n    trace?: TraceCallback;\n  }) {\n    super({\n      messenger,\n      metadata,\n      name: controllerName,\n      state: { ...defaultState, ...state },\n    });\n\n    if (!metametrics) {\n      throw new Error('`metametrics` field is required');\n    }\n\n    // `??` per key so an explicit `undefined` keeps the default rather than\n    // clobbering it.\n    this.#config = {\n      env: config?.env ?? this.#config.env,\n      isSocialPairingEnabled:\n        config?.isSocialPairingEnabled ?? this.#config.isSocialPairingEnabled,\n    };\n\n    this.#metametrics = metametrics;\n    this.#trace = trace ?? (((_request, fn) => fn?.()) as TraceCallback);\n\n    this.#auth = new JwtBearerAuth(\n      {\n        env: this.#config.env,\n        platform: metametrics.agent,\n        type: AuthType.SRP,\n      },\n      {\n        storage: {\n          getLoginResponse: this.#getLoginResponseFromState.bind(this),\n          setLoginResponse: this.#setLoginResponseToState.bind(this),\n        },\n        signing: {\n          getIdentifier: this.#getPublicKey.bind(this),\n          signMessage: this.#signMessage.bind(this),\n        },\n        getLoginTag: this.#getLoginTag.bind(this),\n        getLoginIdentifierType: this.#getLoginIdentifierType.bind(this),\n        metametrics: this.#metametrics,\n      },\n    );\n\n    this.#keyringController.setupLockedStateSubscriptions();\n\n    this.messenger.registerMethodActionHandlers(\n      this,\n      MESSENGER_EXPOSED_METHODS,\n    );\n  }\n\n  async #getLoginResponseFromState(\n    entropySourceId?: string,\n  ): Promise<LoginResponse | null> {\n    const resolvedId = entropySourceId ?? this.#getPrimaryEntropySourceId();\n    if (!this.state.srpSessionData?.[resolvedId]) {\n      return null;\n    }\n    return this.state.srpSessionData[resolvedId];\n  }\n\n  async #setLoginResponseToState(\n    loginResponse: LoginResponse,\n    entropySourceId?: string,\n  ) {\n    const resolvedId = entropySourceId ?? this.#getPrimaryEntropySourceId();\n    const metaMetricsId = await this.#metametrics.getMetaMetricsId();\n    this.update((state) => {\n      state.isSignedIn = true;\n      if (!state.srpSessionData) {\n        state.srpSessionData = {};\n      }\n      // The API omits `paired_identifier_ids` when it fails to load them, so\n      // keep the last known value rather than wiping it.\n      const pairedIdentifierIds =\n        loginResponse.profile.pairedIdentifierIds ??\n        state.srpSessionData[resolvedId]?.profile.pairedIdentifierIds;\n      state.srpSessionData[resolvedId] = {\n        ...loginResponse,\n        profile: {\n          ...loginResponse.profile,\n          metaMetricsId,\n          ...(pairedIdentifierIds ? { pairedIdentifierIds } : {}),\n        },\n      };\n    });\n  }\n\n  #assertIsUnlocked(methodName: string): void {\n    if (!this.#isUnlocked) {\n      throw new Error(`${methodName} - unable to proceed, wallet is locked`);\n    }\n  }\n\n  #assertAuthSessionEpoch(epoch: number, methodName: string): void {\n    if (!this.#isUnlocked || this.#authSessionEpoch !== epoch) {\n      throw new Error(\n        `${methodName} - unable to proceed, the authenticated session ended`,\n      );\n    }\n  }\n\n  /**\n   * Reads the HD keyring entropy source IDs from KeyringController.\n   *\n   * @returns The HD keyring metadata IDs, primary first.\n   */\n  #getHdKeyringEntropySourceIds(): string[] {\n    const keyringState = this.messenger.call('KeyringController:getState');\n    return selectHdKeyringEntropySourceIds(keyringState);\n  }\n\n  /**\n   * Resolves the primary SRP's entropy source ID from KeyringController rather\n   * than the message-signing snap, so callers like `getBearerToken()` are not\n   * blocked on snap boot.\n   *\n   * @returns The primary HD keyring metadata ID.\n   * @throws If no HD keyring is available; callers must only resolve while\n   * the wallet is unlocked.\n   */\n  #getPrimaryEntropySourceId(): string {\n    const keyringState = this.messenger.call('KeyringController:getState');\n    return getPrimaryHdKeyringEntropySourceId(keyringState);\n  }\n\n  /**\n   * Resolves the SRP login tag for `raw_message`.\n   *\n   * - `primary` for the first HD entropy source\n   * - `secondary` for any other entropy source\n   *\n   * @param entropySourceId - Entropy source for this login attempt.\n   * @returns The login tag to append to the signed message.\n   */\n  async #getLoginTag(entropySourceId?: string): Promise<SrpLoginTag> {\n    const primaryEntropySourceId = this.#getPrimaryEntropySourceId();\n    const resolvedId = entropySourceId ?? primaryEntropySourceId;\n\n    return resolvedId === primaryEntropySourceId ? 'primary' : 'secondary';\n  }\n\n  /**\n   * Resolves metametrics `identifier_type` for `/srp/login`\n   * (`SRP` | `GOOGLE` | `APPLE` | `TELEGRAM`).\n   *\n   * This is the auth method for the entropy source, independent of\n   * {@link SrpLoginTag} (`primary` / `secondary`).\n   *\n   * SeedlessOnboarding currently exposes a single vault-level\n   * `authConnection`, which always backs the primary entropy source. Non-\n   * primary sources therefore return `SRP`. If social identities become\n   * per-entropy later, resolve from that metadata instead of assuming\n   * primary === social.\n   *\n   * Soft-fails to `SRP` when SeedlessOnboarding is not registered.\n   *\n   * @param entropySourceId - Entropy source for this login attempt.\n   * @returns The login identifier type.\n   */\n  async #getLoginIdentifierType(\n    entropySourceId?: string,\n  ): Promise<LoginIdentifierType> {\n    const primaryEntropySourceId = this.#getPrimaryEntropySourceId();\n    const resolvedId = entropySourceId ?? primaryEntropySourceId;\n\n    // Social vault authConnection is only associated with the primary source.\n    if (resolvedId !== primaryEntropySourceId) {\n      return 'SRP';\n    }\n\n    return this.#resolveSocialIdentifierType();\n  }\n\n  /**\n   * Maps `SeedlessOnboardingController.state.authConnection` to a login\n   * identifier type when a social vault is present.\n   *\n   * Returns `SRP` if there is no vault, the provider is unrecognized, or\n   * SeedlessOnboardingController is unavailable on the messenger.\n   *\n   * @returns The social provider identifier type, or `SRP`.\n   */\n  #resolveSocialIdentifierType(): LoginIdentifierType {\n    try {\n      return this.#identifierTypeFromSeedlessState(\n        this.messenger.call('SeedlessOnboardingController:getState'),\n      );\n    } catch {\n      return 'SRP';\n    }\n  }\n\n  /**\n   * Maps SeedlessOnboarding vault + `authConnection` to a login identifier\n   * type. Does not catch messenger errors — callers decide whether a\n   * missing controller is `SRP` or a retryable failure.\n   *\n   * @param state - SeedlessOnboarding slice used for the mapping.\n   * @param state.vault - Encrypted social vault, if present.\n   * @param state.authConnection - Social provider id (`google` / `apple` /\n   * `telegram`).\n   * @returns The social provider identifier type, or `SRP`.\n   */\n  #identifierTypeFromSeedlessState(state: {\n    vault?: string | null;\n    authConnection?: string;\n  }): LoginIdentifierType {\n    if (state.vault === null || state.vault === undefined) {\n      return 'SRP';\n    }\n\n    // Match provider strings from SeedlessOnboarding state rather than\n    // importing AuthConnection — a value import would load that package\n    // (and its heavy deps) whenever this controller is imported.\n    switch (state.authConnection) {\n      case 'google':\n        return 'GOOGLE';\n      case 'apple':\n        return 'APPLE';\n      case 'telegram':\n        return 'TELEGRAM';\n      default:\n        return 'SRP';\n    }\n  }\n\n  public async performSignIn(): Promise<string[]> {\n    this.#assertIsUnlocked('performSignIn');\n    if (this.#ongoingSignIn) {\n      return await this.#ongoingSignIn;\n    }\n\n    const signIn = this.#runPerformSignIn().finally(() => {\n      if (this.#ongoingSignIn === signIn) {\n        this.#ongoingSignIn = undefined;\n      }\n    });\n\n    this.#ongoingSignIn = signIn;\n    return await signIn;\n  }\n\n  async #runPerformSignIn(): Promise<string[]> {\n    const epochAtStart = this.#profilePairingRequestEpoch;\n    const entropySourceIds = this.#getHdKeyringEntropySourceIds();\n    const accessTokens: string[] = [];\n\n    // We iterate sequentially in order to be sure that the first entry\n    // is the primary SRP LoginResponse.\n    for (const entropySourceId of entropySourceIds) {\n      const accessToken = await this.#auth.getAccessToken(entropySourceId);\n      accessTokens.push(accessToken);\n    }\n\n    if (entropySourceIds.length < 2) {\n      // Single-SRP wallet: nothing to pair.\n      this.#tryClearNeedsProfilePairing(epochAtStart);\n    } else {\n      // Pair failures must not break sign-in; the gate stays `true` for retry.\n      try {\n        await this.#doPair(accessTokens, epochAtStart);\n      } catch {\n        // noop\n      }\n    }\n\n    try {\n      await this.#trySocialPairing(accessTokens[0]);\n    } catch {\n      // noop\n    }\n\n    return accessTokens;\n  }\n\n  /**\n   * Attaches a Google/Apple/Telegram social identifier to the primary SRP\n   * profile via `POST /api/v2/profile/pair/identifier`.\n   *\n   * Runs only when `isSocialPairingEnabled()` is true and\n   * `needsSocialPairing` is not `false` (`undefined` is treated as true).\n   * No social provider (`authConnection` unset) → clear the flag (nothing\n   * to pair). Social provider set but vault missing → skip (onboarding\n   * still in flight). Google without email → skip (API requires it).\n   * Telegram never sends `email` (the field holds a display name, not an\n   * address). Missing social JWT → skip. 409 Conflict → clear the flag\n   * (identifier already owned; retry is pointless). Other errors\n   * propagate so the caller can swallow them and leave the flag set for\n   * retry.\n   *\n   * @param primaryAccessToken - Primary SRP OIDC access token used as the\n   * Bearer credential. The profile associated with this JWT becomes the\n   * canonical owner of the social identifier.\n   */\n  async #trySocialPairing(primaryAccessToken?: string): Promise<void> {\n    if (\n      !this.#config.isSocialPairingEnabled() ||\n      this.state.needsSocialPairing === false ||\n      !primaryAccessToken\n    ) {\n      return;\n    }\n\n    let seedlessState: {\n      vault?: string | null;\n      authConnection?: string;\n      socialLoginEmail?: string;\n    };\n    try {\n      seedlessState = this.messenger.call(\n        'SeedlessOnboardingController:getState',\n      );\n    } catch {\n      // Controller missing or getState failed — retry next performSignIn.\n      return;\n    }\n\n    // `SRP` here does not describe the vault: it is the mapping's \"no social\n    // identity\" result, returned when there is no seedless vault or the\n    // provider is unrecognised. In both cases there is nothing to pair.\n    const identifierType = this.#identifierTypeFromSeedlessState(seedlessState);\n    if (identifierType === 'SRP') {\n      const { vault, authConnection } = seedlessState;\n      // Vault not written yet but a social provider is already known —\n      // onboarding is still in flight. Do not clear; retry next sign-in.\n      if ((vault === null || vault === undefined) && Boolean(authConnection)) {\n        return;\n      }\n      this.#clearNeedsSocialPairing();\n      return;\n    }\n\n    // Email policy follows the API contract: GOOGLE requires `email` (400\n    // without it), APPLE accepts it optionally, TELEGRAM must not send it\n    // (clients store a display name in `socialLoginEmail` for Telegram).\n    // Clients request the `email` scope for Google, so a missing value is a\n    // defensive case rather than an expected one; returning here leaves\n    // `needsSocialPairing` set so the next sign-in retries instead of\n    // sending a request that would fail.\n    const { socialLoginEmail } = seedlessState;\n    let email: string | undefined;\n    if (identifierType === 'GOOGLE') {\n      if (!socialLoginEmail) {\n        return;\n      }\n      email = socialLoginEmail;\n    } else if (identifierType === 'APPLE') {\n      email = socialLoginEmail;\n    }\n\n    const socialJwt = await this.messenger.call(\n      'SeedlessOnboardingController:getAccessToken',\n    );\n    if (socialJwt === undefined || socialJwt === '') {\n      return;\n    }\n\n    try {\n      const pairedIdentifierIds = await this.#auth.pairSocialIdentifier(\n        {\n          identifierType,\n          socialJwt,\n          ...(email ? { email } : {}),\n        },\n        primaryAccessToken,\n      );\n      this.#setPrimaryPairedIdentifierIds(pairedIdentifierIds);\n      this.#clearNeedsSocialPairing();\n    } catch (error) {\n      if (error instanceof PairConflictError) {\n        this.#clearNeedsSocialPairing();\n        return;\n      }\n      throw error;\n    }\n  }\n\n  #clearNeedsSocialPairing(): void {\n    if (this.state.needsSocialPairing !== false) {\n      this.update((state) => {\n        state.needsSocialPairing = false;\n      });\n    }\n  }\n\n  /**\n   * Marks profile pairing as needed. Clients call this when the SRP set\n   * changes (e.g. a new keyring was added) so the next auto-sign-in cycle\n   * re-runs `performSignIn` and re-pairs.\n   */\n  public requestProfilePairing(): void {\n    this.#profilePairingRequestEpoch += 1;\n    if (!this.state.needsProfilePairing) {\n      this.update((state) => {\n        state.needsProfilePairing = true;\n      });\n    }\n  }\n\n  /**\n   * Clears `needsProfilePairing` only if no `requestProfilePairing` call\n   * landed since `epochAtStart` was captured. Prevents `performSignIn`\n   * from silently overwriting a concurrent rearm.\n   *\n   * @param epochAtStart - Epoch value captured at the start of `performSignIn`.\n   */\n  #tryClearNeedsProfilePairing(epochAtStart: number): void {\n    if (this.#profilePairingRequestEpoch !== epochAtStart) {\n      return;\n    }\n    if (this.state.needsProfilePairing) {\n      this.update((state) => {\n        state.needsProfilePairing = false;\n      });\n    }\n  }\n\n  /**\n   * Pairs all SRPs via `POST /profile/pair`, propagates the canonical\n   * profile ID, clears `needsProfilePairing`, and emits\n   * `AuthenticationController:profileSignIn` when the canonical changes or\n   * new aliases are returned. Throws on failure.\n   *\n   * @param accessTokens - Per-SRP access tokens, primary first.\n   * @param epochAtStart - Pairing-request epoch captured by the caller.\n   * Used to skip the gate clear if `requestProfilePairing` ran while the\n   * pair API call was in-flight.\n   */\n  async #doPair(accessTokens: string[], epochAtStart: number): Promise<void> {\n    const previousCanonical = this.#getCanonicalProfileId();\n\n    const profileAliases = await this.#pairSrpProfiles(accessTokens);\n    const newCanonical = this.#getCanonicalProfileId();\n\n    // If somehow we cannot compute the new canonical profile ID after pairing,\n    // we just return now and do not update the `needsProfilePairing` flag.\n    if (!newCanonical) {\n      return;\n    }\n\n    this.#tryClearNeedsProfilePairing(epochAtStart);\n\n    const profileIdChanged = previousCanonical !== newCanonical;\n    const shouldEmitProfileSignInEvent =\n      profileIdChanged || profileAliases.length > 0;\n\n    if (shouldEmitProfileSignInEvent) {\n      this.messenger.publish('AuthenticationController:profileSignIn', {\n        profileId: newCanonical,\n        profileAliases,\n        profileIdChanged,\n      });\n    }\n  }\n\n  async #pairSrpProfiles(accessTokens: string[]): Promise<ProfileAlias[]> {\n    if (accessTokens.length < 2) {\n      return [];\n    }\n    const primaryAccessToken = accessTokens[0]; // Associated with primary SRP.\n    const {\n      profileAliases,\n      profile: { canonicalProfileId, pairedIdentifierIds },\n    } = await this.#auth.pairSrpProfiles(accessTokens, primaryAccessToken);\n    this.#propagateCanonical(canonicalProfileId);\n    this.#setPrimaryPairedIdentifierIds(pairedIdentifierIds);\n    return profileAliases;\n  }\n\n  /**\n   * Pair calls use the primary SRP's token, so their response only describes\n   * the primary's profile: secondaries skipped by the server are not in it.\n   *\n   * @param pairedIdentifierIds - Identifiers returned by the pair call, if any.\n   */\n  #setPrimaryPairedIdentifierIds(\n    pairedIdentifierIds: ProfileIdentifier[] | undefined,\n  ): void {\n    if (!pairedIdentifierIds) {\n      return;\n    }\n    const primaryEntropySourceId = this.#getPrimaryEntropySourceId();\n    this.update((state) => {\n      const entry = state.srpSessionData?.[primaryEntropySourceId];\n      if (entry?.profile) {\n        entry.profile.pairedIdentifierIds = pairedIdentifierIds;\n      }\n    });\n  }\n\n  #propagateCanonical(canonicalProfileId: string): void {\n    const { srpSessionData } = this.state;\n    if (!srpSessionData) {\n      return;\n    }\n\n    this.update((state) => {\n      for (const entry of Object.values(state.srpSessionData ?? {})) {\n        if (entry?.profile) {\n          entry.profile.canonicalProfileId = canonicalProfileId;\n        }\n      }\n    });\n  }\n\n  /**\n   * Returns the canonical profile id from the primary SRP's cached session.\n   * Returns `null` when no session exists yet for the primary SRP.\n   *\n   * Always reads from the primary SRP because the canonical is shared across\n   * all paired SRPs after `#propagateCanonical`.\n   *\n   * @returns The canonical profile id, or `null` if unavailable.\n   */\n  #getCanonicalProfileId(): string | null {\n    const primaryEntropySourceId = this.#getPrimaryEntropySourceId();\n    return (\n      this.state.srpSessionData?.[primaryEntropySourceId]?.profile\n        ?.canonicalProfileId ?? null\n    );\n  }\n\n  /**\n   * Runs one MFA network step inside a trace span tagged with the caller's\n   * operation and the credential type, recording the outcome and MFA error\n   * code.\n   *\n   * @param name - Span name.\n   * @param operation - Caller-supplied `reason.operation`.\n   * @param credentialType - Credential type the step concerns.\n   * @param fn - The network step.\n   * @returns The step's result.\n   */\n  async #runMfaRequest<Result>(\n    name: string,\n    operation: string,\n    credentialType: string,\n    fn: () => Promise<Result>,\n  ): Promise<Result> {\n    return await this.#trace(\n      {\n        name,\n        tags: { operation, credentialType },\n      },\n      async (context) => {\n        try {\n          const result = await fn();\n          this.#setTraceAttribute(context, 'outcome', 'success');\n          return result;\n        } catch (error) {\n          this.#setTraceAttribute(context, 'outcome', 'error');\n          const mfaCode = getMfaErrorCode(error);\n          if (mfaCode) {\n            this.#setTraceAttribute(context, 'mfaErrorCode', mfaCode);\n            if (mfaCode === 'authentication_required' && this.#isUnlocked) {\n              this.#invalidateSrpSession(this.#getPrimaryEntropySourceId());\n              // A verification session must not outlive a rejected base\n              // session.\n              this.clearVerificationSession();\n            }\n          }\n          throw error;\n        }\n      },\n    );\n  }\n\n  /**\n   * `TraceContext` is opaque in `@metamask/controller-utils`; both clients\n   * hand back a Sentry span, so attributes are set via duck typing and a\n   * non-Sentry context is a silent no-op.\n   *\n   * @param context - Span handed to the trace callback, if any.\n   * @param key - Attribute name.\n   * @param value - Attribute value.\n   */\n  #setTraceAttribute(\n    context: TraceContext | undefined,\n    key: string,\n    value: string,\n  ): void {\n    const traceSpan = context as\n      | { setAttribute?: (attribute: string, data: string) => void }\n      | undefined;\n    traceSpan?.setAttribute?.(key, value);\n  }\n\n  /**\n   * Refreshes credentials enrolled on the canonical profile.\n   *\n   * @returns The current supported credentials.\n   */\n  public async refreshEnrolledCredentials(): Promise<EnrolledCredential[]> {\n    this.#assertIsUnlocked('refreshEnrolledCredentials');\n    const sessionEpoch = this.#authSessionEpoch;\n    this.#credentialsRefreshSeq += 1;\n    const refreshSeq = this.#credentialsRefreshSeq;\n    const primaryEntropySourceId = this.#getPrimaryEntropySourceId();\n    const credentials = await this.#runMfaRequest(\n      'MFA Credentials Refresh',\n      'credentials.refresh',\n      'all',\n      async () => await this.#auth.getMfaCredentials(primaryEntropySourceId),\n    );\n    this.#assertAuthSessionEpoch(sessionEpoch, 'refreshEnrolledCredentials');\n\n    // A newer refresh started while this one was in flight; its result is at\n    // least as fresh, so defer to it rather than overwrite with older data.\n    if (refreshSeq !== this.#credentialsRefreshSeq) {\n      return this.#getEnrolledCredentials();\n    }\n\n    // Skip the write when nothing changed so subscribers are not woken up by\n    // a fresh-but-identical array.\n    if (\n      JSON.stringify(credentials) !==\n      JSON.stringify(this.#getEnrolledCredentials())\n    ) {\n      this.update((state) => {\n        state.enrolledCredentials = credentials;\n      });\n    }\n    return credentials;\n  }\n\n  /**\n   * Begins enrollment of a passkey or email OTP credential.\n   *\n   * @param request - Credential, optional email address, and trace reason.\n   * @returns A challenge for the client-owned ceremony.\n   */\n  public async beginCredentialEnrollment(\n    request: BeginEnrollmentRequest,\n  ): Promise<EnrollmentChallenge> {\n    this.#assertIsUnlocked('beginCredentialEnrollment');\n    const sessionEpoch = this.#authSessionEpoch;\n    assertValidMfaRequest(request, BeginEnrollmentRequestStruct);\n    const primaryEntropySourceId = this.#getPrimaryEntropySourceId();\n    // The server requires AAL2 to add a credential once one that proves AAL2\n    // exists: send the verification token only while a recent enough session\n    // is live and let the server decide. An older session stays open for\n    // other consumers.\n    const accessToken = this.getVerificationToken({\n      maxSessionAgeMs: request.maxSessionAgeMs ?? ENROLLMENT_MAX_SESSION_AGE_MS,\n    })?.accessToken;\n    const challenge = await this.#runMfaRequest(\n      'MFA Enroll Begin',\n      request.reason.operation,\n      request.type,\n      async () =>\n        await this.#auth.beginMfaEnrollment(request.type, {\n          email: request.email,\n          entropySourceId: primaryEntropySourceId,\n          accessToken,\n        }),\n    );\n    this.#assertAuthSessionEpoch(sessionEpoch, 'beginCredentialEnrollment');\n    return challenge;\n  }\n\n  /**\n   * Completes credential enrollment and refreshes the credential cache.\n   *\n   * A cache-refresh failure does not undo successful enrollment. Email\n   * enrollment invalidates the primary SRP session *after* refresh so the\n   * credentials call can reuse the still-valid access token; the next token\n   * fetch then includes the newly verified email claim. That invalidation\n   * happens even if the session ends mid-request: the enrollment succeeded\n   * on the server, so a token cached across a lock must not be reused\n   * without the new claim.\n   *\n   * @param request - Flow identifier, platform or email proof, and trace reason.\n   * @returns The refreshed credentials, or the existing cache if refresh fails.\n   */\n  public async completeCredentialEnrollment(\n    request: CompleteEnrollmentRequest,\n  ): Promise<EnrolledCredential[]> {\n    this.#assertIsUnlocked('completeCredentialEnrollment');\n    const sessionEpoch = this.#authSessionEpoch;\n    assertValidMfaRequest(request, CompleteEnrollmentRequestStruct);\n    const { type } = request.proof;\n    const primaryEntropySourceId = this.#getPrimaryEntropySourceId();\n    await this.#runMfaRequest(\n      'MFA Enroll Complete',\n      request.reason.operation,\n      type,\n      async () =>\n        await this.#auth.completeMfaEnrollment(\n          request.flowId,\n          request.proof,\n          primaryEntropySourceId,\n        ),\n    );\n\n    try {\n      this.#assertAuthSessionEpoch(\n        sessionEpoch,\n        'completeCredentialEnrollment',\n      );\n    } catch (error) {\n      if (type === 'email_otp') {\n        this.#invalidateSrpSession(primaryEntropySourceId);\n      }\n      throw error;\n    }\n\n    // The verification session is deliberately kept: adding a factor does not\n    // weaken an earlier proof, and `beginCredentialEnrollment` already limits\n    // which sessions may add the next one.\n    try {\n      return await this.refreshEnrolledCredentials();\n    } catch {\n      return this.#getEnrolledCredentials();\n    } finally {\n      if (type === 'email_otp') {\n        this.#invalidateSrpSession(primaryEntropySourceId);\n      }\n    }\n  }\n\n  /**\n   * Begins verification with an enrolled credential.\n   *\n   * @param request - Credential type and trace reason.\n   * @returns A challenge for the client-owned ceremony.\n   */\n  public async beginCredentialVerification(\n    request: BeginVerificationRequest,\n  ): Promise<VerificationChallenge> {\n    this.#assertIsUnlocked('beginCredentialVerification');\n    const sessionEpoch = this.#authSessionEpoch;\n    assertValidMfaRequest(request, BeginVerificationRequestStruct);\n    const primaryEntropySourceId = this.#getPrimaryEntropySourceId();\n    const challenge = await this.#runMfaRequest(\n      'MFA Verification Begin',\n      request.reason.operation,\n      request.type,\n      async () =>\n        await this.#auth.beginMfaVerification(\n          request.type,\n          primaryEntropySourceId,\n        ),\n    );\n    this.#assertAuthSessionEpoch(sessionEpoch, 'beginCredentialVerification');\n    return challenge;\n  }\n\n  /**\n   * Completes verification and opens a short-lived verification session.\n   *\n   * The assertion returned by the MFA service is exchanged at Hydra for an\n   * access token. Its assurance level is not checked: the services receiving\n   * the token enforce their own requirements. The token itself never enters\n   * controller state.\n   *\n   * @param request - Flow identifier, platform or email proof, and trace reason.\n   * @returns The verification token.\n   */\n  public async completeCredentialVerification(\n    request: CompleteVerificationRequest,\n  ): Promise<VerificationToken> {\n    this.#assertIsUnlocked('completeCredentialVerification');\n    const sessionEpoch = this.#authSessionEpoch;\n    assertValidMfaRequest(request, CompleteVerificationRequestStruct);\n    const { type } = request.proof;\n    const { operation } = request.reason;\n    const primaryEntropySourceId = this.#getPrimaryEntropySourceId();\n    const assertion = await this.#runMfaRequest(\n      'MFA Verification Complete',\n      operation,\n      type,\n      async () =>\n        await this.#auth.completeMfaVerification(\n          request.flowId,\n          request.proof,\n          primaryEntropySourceId,\n        ),\n    );\n    this.#assertAuthSessionEpoch(\n      sessionEpoch,\n      'completeCredentialVerification',\n    );\n    const accessToken = await this.#runMfaRequest(\n      'MFA Token Exchange',\n      operation,\n      type,\n      async () => await this.#auth.exchangeMfaAssertion(assertion.token),\n    );\n    this.#assertAuthSessionEpoch(\n      sessionEpoch,\n      'completeCredentialVerification',\n    );\n\n    let decodedClaims: unknown;\n    try {\n      decodedClaims = decodeJwtPayload(accessToken.accessToken);\n    } catch (error) {\n      throw new VerificationTokenInvalidError(toErrorMessage(error));\n    }\n    const claims = parseVerificationTokenClaims(decodedClaims);\n    if (claims.exp * 1000 <= Date.now()) {\n      throw new VerificationTokenInvalidError('Verification token is expired');\n    }\n\n    const token: VerificationToken = { ...accessToken, claims };\n    this.#openVerificationSession(token);\n    return token;\n  }\n\n  /**\n   * Returns the active verification token when it meets the requested\n   * freshness.\n   *\n   * @param request - Optional maximum session age in milliseconds, measured\n   * from when the token was obtained. Zero always requires a new ceremony.\n   * @returns A live verification token, or null when no reusable session\n   * exists.\n   */\n  public getVerificationToken(\n    request: GetVerificationTokenRequest = {},\n  ): VerificationToken | null {\n    this.#assertIsUnlocked('getVerificationToken');\n    assertValidMfaRequest(request, GetVerificationTokenRequestStruct);\n    const session = this.#verificationSessions.get(DEFAULT_AUDIENCE);\n    if (!session) {\n      return null;\n    }\n    const now = Date.now();\n    if (now >= session.expiresAt) {\n      // The hard-expiry timer has not fired yet (e.g. a suspended tab).\n      this.#dropVerificationSession(DEFAULT_AUDIENCE);\n      return null;\n    }\n    // `>=` so a zero max age always forces a fresh ceremony. Not cleared: the\n    // max age is this caller's requirement; others may still use the session.\n    const maxAge = request.maxSessionAgeMs;\n    if (maxAge !== undefined && now - session.token.obtainedAt >= maxAge) {\n      return null;\n    }\n    return session.token;\n  }\n\n  /**\n   * Opens the verification session. Its lifetime is the session TTL clamped to\n   * the token's own `exp`, so the session never outlives the token.\n   *\n   * @param token - The freshly exchanged verification token.\n   */\n  #openVerificationSession(token: VerificationToken): void {\n    const audience = DEFAULT_AUDIENCE;\n    this.#dropVerificationSession(audience);\n    const expiresAt = Math.min(\n      token.obtainedAt + VERIFICATION_SESSION_TTL_MS,\n      token.claims.exp * 1000,\n    );\n    const timer = setTimeout(\n      () => this.#dropVerificationSession(audience),\n      Math.max(0, expiresAt - Date.now()),\n    );\n    // Never keep a Node process alive for the expiry timer (tests, tooling).\n    (timer as { unref?: () => void }).unref?.();\n    this.#verificationSessions.set(audience, { token, expiresAt, timer });\n  }\n\n  /**\n   * Drops one audience's verification session and its expiration timer.\n   *\n   * @param audience - Audience whose session to drop.\n   */\n  #dropVerificationSession(audience: string): void {\n    const session = this.#verificationSessions.get(audience);\n    if (session) {\n      clearTimeout(session.timer);\n      this.#verificationSessions.delete(audience);\n    }\n  }\n\n  /**\n   * Clears every in-memory verification session and its expiration timer.\n   */\n  public clearVerificationSession(): void {\n    for (const { timer } of this.#verificationSessions.values()) {\n      clearTimeout(timer);\n    }\n    this.#verificationSessions.clear();\n  }\n\n  /**\n   * Drops the cached credential list. Callers that wipe profile state must go\n   * through this so subscribers never keep credentials belonging to a profile\n   * that is no longer active.\n   */\n  #clearEnrolledCredentials(): void {\n    if (this.#getEnrolledCredentials().length === 0) {\n      return;\n    }\n    this.update((state) => {\n      state.enrolledCredentials = [];\n    });\n  }\n\n  #getEnrolledCredentials(): EnrolledCredential[] {\n    return this.state.enrolledCredentials ?? [];\n  }\n\n  public performSignOut(): void {\n    this.#authSessionEpoch += 1;\n    this.clearVerificationSession();\n    this.#clearEnrolledCredentials();\n    this.update((state) => {\n      state.isSignedIn = false;\n      state.srpSessionData = undefined;\n    });\n  }\n\n  /**\n   * Resets the controller to `defaultState`. Clients call this on wallet reset\n   * so the next wallet starts unsigned with both pairing gates re-armed.\n   */\n  public clearState(): void {\n    this.#profilePairingRequestEpoch += 1;\n    this.#authSessionEpoch += 1;\n    this.clearVerificationSession();\n    this.#clearEnrolledCredentials();\n    this.update(() => ({ ...defaultState }));\n  }\n\n  /**\n   * Returns a bearer token for the specified SRP, logging in if needed.\n   *\n   * When called without `entropySourceId`, returns the primary (first) SRP's\n   * access token, which is effectively the canonical\n   * profile's token that can be used by alias-aware consumers for cross-SRP\n   * operations.\n   *\n   * @param entropySourceId - The entropy source ID. Omit for the primary SRP.\n   * @returns The OIDC access token.\n   */\n  public async getBearerToken(entropySourceId?: string): Promise<string> {\n    this.#assertIsUnlocked('getBearerToken');\n    const resolvedId = entropySourceId ?? this.#getPrimaryEntropySourceId();\n    return await this.#auth.getAccessToken(resolvedId);\n  }\n\n  /**\n   * Returns the cached session profile, logging in if no session exists.\n   *\n   * The returned `canonicalProfileId` reflects the value from the most recent\n   * login or pairing. In the rare event where a canonical changed because of\n   * a pairing that happened on another device, the cached value may be stale\n   * until the next login. For guaranteed freshness, call\n   * `refreshCanonicalProfileId()` before reading `canonicalProfileId`.\n   *\n   * @param entropySourceId - The entropy source ID used to derive the key,\n   * when multiple sources are available (Multi-SRP).\n   * @returns profile for the session.\n   */\n  public async getSessionProfile(\n    entropySourceId?: string,\n  ): Promise<UserProfile> {\n    this.#assertIsUnlocked('getSessionProfile');\n    const resolvedId = entropySourceId ?? this.#getPrimaryEntropySourceId();\n    return await this.#auth.getUserProfile(resolvedId);\n  }\n\n  /**\n   * Forces a fresh retrieval of the canonical profile ID from the server\n   * and propagates it to all cached SRP sessions.\n   *\n   * This method invalidates the primary SRP's cached session and forces a\n   * re-login. Use it before operations that require a guaranteed-fresh\n   * canonical (e.g. storage key derivation for Accounts ADR 0005). For\n   * best-effort reads, use\n   * `getSessionProfile().canonicalProfileId` instead.\n   *\n   * Only the primary SRP is re-logged-in regardless of how many SRPs exist —\n   * the server returns the current canonical for the entire pairing group\n   * from any single SRP login.\n   *\n   * @returns The refreshed canonical profile ID.\n   */\n  public async refreshCanonicalProfileId(): Promise<string> {\n    this.#assertIsUnlocked('refreshCanonicalProfileId');\n\n    const primaryEntropySourceId = this.#getPrimaryEntropySourceId();\n    this.#invalidateSrpSession(primaryEntropySourceId);\n    await this.#auth.getAccessToken(primaryEntropySourceId);\n\n    const canonical = this.#getCanonicalProfileId();\n    if (!canonical) {\n      throw new Error(\n        'refreshCanonicalProfileId - Unable to resolve canonical profile ID',\n      );\n    }\n\n    this.#propagateCanonical(canonical);\n    return canonical;\n  }\n\n  #invalidateSrpSession(entropySourceId: string): void {\n    this.update((state) => {\n      const entry = state.srpSessionData?.[entropySourceId];\n      if (entry?.profile) {\n        // Setting canonicalProfileId to '' forces a re-fetch on the next\n        // #getAuthSession call. The falsy check (!auth.profile.canonicalProfileId)\n        // treats '' the same as undefined/null — all signal an invalid session.\n        entry.profile.canonicalProfileId = '';\n      }\n    });\n  }\n\n  public async getUserProfileLineage(\n    entropySourceId?: string,\n  ): Promise<UserProfileLineage> {\n    this.#assertIsUnlocked('getUserProfileLineage');\n    const resolvedId = entropySourceId ?? this.#getPrimaryEntropySourceId();\n    return await this.#auth.getUserProfileLineage(resolvedId);\n  }\n\n  /**\n   * Returns a Customer Service specific access token for the specified SRP,\n   * logging in if needed.\n   *\n   * Exchanges the OIDC access token for a short-lived token scoped to the\n   * customer-service audience. Customer Service tooling consumes this token to\n   * identify and authenticate the user.\n   *\n   * @param entropySourceId - The entropy source ID. Omit for the primary SRP.\n   * @returns The customer-service access token.\n   */\n  public async getCustomerServiceToken(\n    entropySourceId?: string,\n  ): Promise<string> {\n    this.#assertIsUnlocked('getCustomerServiceToken');\n    const resolvedId = entropySourceId ?? this.#getPrimaryEntropySourceId();\n    return await this.#auth.getCustomerServiceToken(resolvedId);\n  }\n\n  /**\n   * Mints a partner identity token for the specified SRP, logging in if needed.\n   *\n   * Calls `POST /api/v2/oidc/token` with the Hydra login bearer and returns\n   * the minted `access_token`. Email on live tokens is under JWT `ext`.\n   * HTTP 422 throws `EmailRequiredError` when this profile has no\n   * verified email.\n   *\n   * @param claims - Claim names to embed. Only `email` is supported.\n   * @param audience - Partner audience (`kyc` or `iron`).\n   * @param entropySourceId - The entropy source ID. Omit for the primary SRP.\n   * @returns The partner identity access token.\n   */\n  public async getPartnerIdentityToken(\n    claims: OidcTokenClaims,\n    audience: OidcTokenAudience,\n    entropySourceId?: string,\n  ): Promise<string> {\n    this.#assertIsUnlocked('getPartnerIdentityToken');\n    const resolvedId = entropySourceId ?? this.#getPrimaryEntropySourceId();\n    return await this.#auth.getPartnerIdentityToken(\n      claims,\n      audience,\n      resolvedId,\n    );\n  }\n\n  public isSignedIn(): boolean {\n    return this.state.isSignedIn;\n  }\n\n  /**\n   * Reads the BIP-39 seed for an HD entropy source from KeyringController.\n   *\n   * @param entropySourceId - Entropy source ID. Defaults to the primary HD\n   * keyring.\n   * @returns The HD keyring seed.\n   */\n  async #getHdKeyringSeed(entropySourceId?: string): Promise<Uint8Array> {\n    const resolvedId = entropySourceId ?? this.#getPrimaryEntropySourceId();\n    return getHdKeyringSeed(this.messenger, resolvedId);\n  }\n\n  /**\n   * Returns the message-signing public key via native SIP-6 derivation\n   * (same key as `@metamask/message-signing-snap` with empty salt).\n   *\n   * @param entropySourceId - The entropy source ID used to derive the key,\n   * when multiple sources are available (Multi-SRP).\n   * @returns The public key hex.\n   */\n  async #getPublicKey(entropySourceId?: string): Promise<string> {\n    this.#assertIsUnlocked('#getPublicKey');\n    const seed = await this.#getHdKeyringSeed(entropySourceId);\n    return getMessageSigningPublicKey(seed);\n  }\n\n  #_signMessageCache: Record<string, string> = {};\n\n  /**\n   * Builds a cache key scoped to a specific entropy source, so each SRP's\n   * signature stays isolated (same pattern as `UserStorageController`).\n   *\n   * When `entropySourceId` is omitted (primary SRP), it is resolved to the\n   * primary HD keyring's metadata ID rather than a stable literal. Because that\n   * ID is randomly regenerated whenever the vault is recreated (e.g. on\n   * restore), the cached entry is naturally invalidated across vaults — a\n   * different SRP can never inherit the previous primary's cached signature.\n   *\n   * @param message - The tagged message used for signing.\n   * @param entropySourceId - The entropy source ID. Omit for the primary SRP.\n   * @returns The scoped cache key.\n   */\n  #scopedCacheKey(\n    message: `metamask:${string}`,\n    entropySourceId?: string,\n  ): string {\n    return `${entropySourceId ?? this.#getPrimaryEntropySourceId()}:${message}`;\n  }\n\n  /**\n   * Signs a `metamask:…` message with the native SIP-6 message-signing key.\n   *\n   * @param message - A specific tagged message to sign.\n   * @param entropySourceId - The entropy source ID used to derive the key,\n   * when multiple sources are available (Multi-SRP).\n   * @returns Compact secp256k1 signature hex.\n   */\n  async #signMessage(\n    message: string,\n    entropySourceId?: string,\n  ): Promise<string> {\n    assertMessageStartsWithMetamask(message);\n    this.#assertIsUnlocked('#signMessage');\n\n    const cacheKey = this.#scopedCacheKey(message, entropySourceId);\n    if (this.#_signMessageCache[cacheKey]) {\n      return this.#_signMessageCache[cacheKey];\n    }\n\n    const seed = await this.#getHdKeyringSeed(entropySourceId);\n    const result = await signMessageWithMessageSigningKey(message, seed);\n\n    this.#_signMessageCache[cacheKey] = result;\n\n    return result;\n  }\n}\n"]}

package/dist/shared/encryption/cache.d.ts

@@ -1,7 +1,7 @@
 type CachedEntry = {
-    salt: Uint8Array;
+    salt: Uint8Array<ArrayBuffer>;
     base64Salt: string;
-    key: Uint8Array;
+    key: Uint8Array<ArrayBuffer>;
 };
 /**
  * Returns a given cached derived key from a hashed password and salt
@@ -10,7 +10,7 @@ type CachedEntry = {
  * @param salt - provide salt to receive cached key
  * @returns cached key
  */
-export declare function getCachedKeyBySalt(hashedPassword: string, salt: Uint8Array): CachedEntry | undefined;
+export declare function getCachedKeyBySalt(hashedPassword: string, salt: Uint8Array<ArrayBuffer>): CachedEntry | undefined;
 /**
  * Gets the cached key that was generated without a salt, if it exists.
  * This is unique per hashed password.
@@ -27,6 +27,6 @@ export declare function getCachedKeyGeneratedWithSharedSalt(hashedPassword: stri
  * @param salt - salt to set new derived key
  * @param key - derived key we are setting
  */
-export declare function setCachedKey(hashedPassword: string, salt: Uint8Array, key: Uint8Array): void;
+export declare function setCachedKey(hashedPassword: string, salt: Uint8Array<ArrayBuffer>, key: Uint8Array<ArrayBuffer>): void;
 export {};
 //# sourceMappingURL=cache.d.ts.map

package/dist/shared/encryption/cache.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../../src/shared/encryption/cache.ts"],"names":[],"mappings":"AAGA,KAAK,WAAW,GAAG;IACjB,IAAI,EAAE,UAAU,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,UAAU,CAAC;CACjB,CAAC;AAiBF;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,UAAU,GACf,WAAW,GAAG,SAAS,CAazB;AAED;;;;;;GAMG;AACH,wBAAgB,mCAAmC,CACjD,cAAc,EAAE,MAAM,GACrB,WAAW,GAAG,SAAS,CAczB;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAC1B,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,UAAU,EAChB,GAAG,EAAE,UAAU,GACd,IAAI,CAeN"}
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../../src/shared/encryption/cache.ts"],"names":[],"mappings":"AAGA,KAAK,WAAW,GAAG;IACjB,IAAI,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;CAC9B,CAAC;AAiBF;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,UAAU,CAAC,WAAW,CAAC,GAC5B,WAAW,GAAG,SAAS,CAazB;AAED;;;;;;GAMG;AACH,wBAAgB,mCAAmC,CACjD,cAAc,EAAE,MAAM,GACrB,WAAW,GAAG,SAAS,CAczB;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAC1B,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,UAAU,CAAC,WAAW,CAAC,EAC7B,GAAG,EAAE,UAAU,CAAC,WAAW,CAAC,GAC3B,IAAI,CAeN"}

package/dist/shared/encryption/cache.js.map

@@ -1 +1 @@
-{"version":3,"file":"cache.js","sourceRoot":"","sources":["../../../src/shared/encryption/cache.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAQ/C,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,MAAM,eAAe,GAAG,GAAG,CAAC;AAQ5B,IAAI,cAAc,GAAyB,EAAE,CAAC;AAC9C,MAAM,gBAAgB,GAAG,CAAC,cAAsB,EAAE,EAAE;IAClD,cAAc,CAAC,cAAc,CAAC,KAAK,IAAI,GAAG,EAAE,CAAC;IAC7C,OAAO,cAAc,CAAC,cAAc,CAAC,CAAC;AACxC,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,cAAsB,EACtB,IAAgB;IAEhB,MAAM,KAAK,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACxC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,IAAI;QACJ,UAAU;QACV,GAAG,EAAE,SAAS;KACf,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mCAAmC,CACjD,cAAsB;IAEtB,MAAM,KAAK,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAExC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,UAAU;QACV,GAAG,EAAE,SAAS;KACf,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAC1B,cAAsB,EACtB,IAAgB,EAChB,GAAe;IAEf,sBAAsB;IACtB,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;QAC7D,cAAc,GAAG,EAAE,CAAC;IACtB,CAAC;IAED,MAAM,KAAK,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAE3C,kBAAkB;IAClB,IAAI,KAAK,CAAC,IAAI,GAAG,eAAe,EAAE,CAAC;QACjC,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;AAC7B,CAAC","sourcesContent":["import { SHARED_SALT } from './constants.js';\nimport { byteArrayToBase64 } from './utils.js';\n\ntype CachedEntry = {\n  salt: Uint8Array;\n  base64Salt: string;\n  key: Uint8Array;\n};\n\nconst MAX_PASSWORD_CACHES = 100;\nconst MAX_SALT_CACHES = 100;\n\n/**\n * In-Memory Caching derived keys based from a given salt and password.\n */\ntype PasswordMemCachedKDF = {\n  [hashedPassword: string]: Map<string, Uint8Array>;\n};\nlet inMemCachedKDF: PasswordMemCachedKDF = {};\nconst getPasswordCache = (hashedPassword: string) => {\n  inMemCachedKDF[hashedPassword] ??= new Map();\n  return inMemCachedKDF[hashedPassword];\n};\n\n/**\n * Returns a given cached derived key from a hashed password and salt\n *\n * @param hashedPassword - hashed password for cache lookup\n * @param salt - provide salt to receive cached key\n * @returns cached key\n */\nexport function getCachedKeyBySalt(\n  hashedPassword: string,\n  salt: Uint8Array,\n): CachedEntry | undefined {\n  const cache = getPasswordCache(hashedPassword);\n  const base64Salt = byteArrayToBase64(salt);\n  const cachedKey = cache.get(base64Salt);\n  if (!cachedKey) {\n    return undefined;\n  }\n\n  return {\n    salt,\n    base64Salt,\n    key: cachedKey,\n  };\n}\n\n/**\n * Gets the cached key that was generated without a salt, if it exists.\n * This is unique per hashed password.\n *\n * @param hashedPassword - hashed password for cache lookup\n * @returns the cached key\n */\nexport function getCachedKeyGeneratedWithSharedSalt(\n  hashedPassword: string,\n): CachedEntry | undefined {\n  const cache = getPasswordCache(hashedPassword);\n  const base64Salt = byteArrayToBase64(SHARED_SALT);\n  const cachedKey = cache.get(base64Salt);\n\n  if (!cachedKey) {\n    return undefined;\n  }\n\n  return {\n    salt: SHARED_SALT,\n    base64Salt,\n    key: cachedKey,\n  };\n}\n\n/**\n * Sets a key to the in memory cache.\n * We have set an arbitrary size of 10 cached keys per hashed password.\n *\n * @param hashedPassword - hashed password for cache lookup\n * @param salt - salt to set new derived key\n * @param key - derived key we are setting\n */\nexport function setCachedKey(\n  hashedPassword: string,\n  salt: Uint8Array,\n  key: Uint8Array,\n): void {\n  // Max password caches\n  if (Object.keys(inMemCachedKDF).length > MAX_PASSWORD_CACHES) {\n    inMemCachedKDF = {};\n  }\n\n  const cache = getPasswordCache(hashedPassword);\n  const base64Salt = byteArrayToBase64(salt);\n\n  // Max salt caches\n  if (cache.size > MAX_SALT_CACHES) {\n    cache.clear();\n  }\n\n  cache.set(base64Salt, key);\n}\n"]}
+{"version":3,"file":"cache.js","sourceRoot":"","sources":["../../../src/shared/encryption/cache.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAQ/C,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAChC,MAAM,eAAe,GAAG,GAAG,CAAC;AAQ5B,IAAI,cAAc,GAAyB,EAAE,CAAC;AAC9C,MAAM,gBAAgB,GAAG,CAAC,cAAsB,EAAE,EAAE;IAClD,cAAc,CAAC,cAAc,CAAC,KAAK,IAAI,GAAG,EAAE,CAAC;IAC7C,OAAO,cAAc,CAAC,cAAc,CAAC,CAAC;AACxC,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,cAAsB,EACtB,IAA6B;IAE7B,MAAM,KAAK,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACxC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,IAAI;QACJ,UAAU;QACV,GAAG,EAAE,SAAS;KACf,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mCAAmC,CACjD,cAAsB;IAEtB,MAAM,KAAK,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAExC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,UAAU;QACV,GAAG,EAAE,SAAS;KACf,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,YAAY,CAC1B,cAAsB,EACtB,IAA6B,EAC7B,GAA4B;IAE5B,sBAAsB;IACtB,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,MAAM,GAAG,mBAAmB,EAAE,CAAC;QAC7D,cAAc,GAAG,EAAE,CAAC;IACtB,CAAC;IAED,MAAM,KAAK,GAAG,gBAAgB,CAAC,cAAc,CAAC,CAAC;IAC/C,MAAM,UAAU,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAE3C,kBAAkB;IAClB,IAAI,KAAK,CAAC,IAAI,GAAG,eAAe,EAAE,CAAC;QACjC,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;AAC7B,CAAC","sourcesContent":["import { SHARED_SALT } from './constants.js';\nimport { byteArrayToBase64 } from './utils.js';\n\ntype CachedEntry = {\n  salt: Uint8Array<ArrayBuffer>;\n  base64Salt: string;\n  key: Uint8Array<ArrayBuffer>;\n};\n\nconst MAX_PASSWORD_CACHES = 100;\nconst MAX_SALT_CACHES = 100;\n\n/**\n * In-Memory Caching derived keys based from a given salt and password.\n */\ntype PasswordMemCachedKDF = {\n  [hashedPassword: string]: Map<string, Uint8Array<ArrayBuffer>>;\n};\nlet inMemCachedKDF: PasswordMemCachedKDF = {};\nconst getPasswordCache = (hashedPassword: string) => {\n  inMemCachedKDF[hashedPassword] ??= new Map();\n  return inMemCachedKDF[hashedPassword];\n};\n\n/**\n * Returns a given cached derived key from a hashed password and salt\n *\n * @param hashedPassword - hashed password for cache lookup\n * @param salt - provide salt to receive cached key\n * @returns cached key\n */\nexport function getCachedKeyBySalt(\n  hashedPassword: string,\n  salt: Uint8Array<ArrayBuffer>,\n): CachedEntry | undefined {\n  const cache = getPasswordCache(hashedPassword);\n  const base64Salt = byteArrayToBase64(salt);\n  const cachedKey = cache.get(base64Salt);\n  if (!cachedKey) {\n    return undefined;\n  }\n\n  return {\n    salt,\n    base64Salt,\n    key: cachedKey,\n  };\n}\n\n/**\n * Gets the cached key that was generated without a salt, if it exists.\n * This is unique per hashed password.\n *\n * @param hashedPassword - hashed password for cache lookup\n * @returns the cached key\n */\nexport function getCachedKeyGeneratedWithSharedSalt(\n  hashedPassword: string,\n): CachedEntry | undefined {\n  const cache = getPasswordCache(hashedPassword);\n  const base64Salt = byteArrayToBase64(SHARED_SALT);\n  const cachedKey = cache.get(base64Salt);\n\n  if (!cachedKey) {\n    return undefined;\n  }\n\n  return {\n    salt: SHARED_SALT,\n    base64Salt,\n    key: cachedKey,\n  };\n}\n\n/**\n * Sets a key to the in memory cache.\n * We have set an arbitrary size of 10 cached keys per hashed password.\n *\n * @param hashedPassword - hashed password for cache lookup\n * @param salt - salt to set new derived key\n * @param key - derived key we are setting\n */\nexport function setCachedKey(\n  hashedPassword: string,\n  salt: Uint8Array<ArrayBuffer>,\n  key: Uint8Array<ArrayBuffer>,\n): void {\n  // Max password caches\n  if (Object.keys(inMemCachedKDF).length > MAX_PASSWORD_CACHES) {\n    inMemCachedKDF = {};\n  }\n\n  const cache = getPasswordCache(hashedPassword);\n  const base64Salt = byteArrayToBase64(salt);\n\n  // Max salt caches\n  if (cache.size > MAX_SALT_CACHES) {\n    cache.clear();\n  }\n\n  cache.set(base64Salt, key);\n}\n"]}

package/dist/shared/encryption/constants.d.ts

@@ -1,4 +1,3 @@
-export declare const ALGORITHM_NONCE_SIZE = 12;
 export declare const ALGORITHM_KEY_SIZE = 16;
 export declare const SCRYPT_SALT_SIZE = 16;
 export declare const SCRYPT_N: number;

package/dist/shared/encryption/constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/shared/encryption/constants.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,oBAAoB,KAAK,CAAC;AACvC,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAIrC,eAAO,MAAM,gBAAgB,KAAK,CAAC;AACnC,eAAO,MAAM,QAAQ,QAAU,CAAC;AAChC,eAAO,MAAM,QAAQ,IAAI,CAAC;AAC1B,eAAO,MAAM,QAAQ,IAAI,CAAC;AAE1B,eAAO,MAAM,WAAW,yBAEtB,CAAC;AAEH,eAAO,MAAM,0BAA0B,KAAK,CAAC"}
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../../src/shared/encryption/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,kBAAkB,KAAK,CAAC;AAIrC,eAAO,MAAM,gBAAgB,KAAK,CAAC;AACnC,eAAO,MAAM,QAAQ,QAAU,CAAC;AAChC,eAAO,MAAM,QAAQ,IAAI,CAAC;AAC1B,eAAO,MAAM,QAAQ,IAAI,CAAC;AAE1B,eAAO,MAAM,WAAW,yBAEtB,CAAC;AAEH,eAAO,MAAM,0BAA0B,KAAK,CAAC"}

package/dist/shared/encryption/constants.js

@@ -1,5 +1,3 @@
-// Nonce/Key Sizes
-export const ALGORITHM_NONCE_SIZE = 12; // 12 bytes
 export const ALGORITHM_KEY_SIZE = 16; // 16 bytes
 // Scrypt settings
 // see: https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html#scrypt

package/dist/shared/encryption/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/shared/encryption/constants.ts"],"names":[],"mappings":"AAAA,kBAAkB;AAClB,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC,CAAC,WAAW;AACnD,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC,CAAC,WAAW;AAEjD,kBAAkB;AAClB,+FAA+F;AAC/F,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC,CAAC,WAAW;AAC/C,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,wDAAwD;AACzF,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,uBAAuB;AAClD,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,4BAA4B;AAEvD,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,UAAU,CAAC;IACxC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;CACrD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC","sourcesContent":["// Nonce/Key Sizes\nexport const ALGORITHM_NONCE_SIZE = 12; // 12 bytes\nexport const ALGORITHM_KEY_SIZE = 16; // 16 bytes\n\n// Scrypt settings\n// see: https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html#scrypt\nexport const SCRYPT_SALT_SIZE = 16; // 16 bytes\nexport const SCRYPT_N = 2 ** 17; // CPU/memory cost parameter (must be a power of 2, > 1)\nexport const SCRYPT_r = 8; // Block size parameter\nexport const SCRYPT_p = 1; // Parallelization parameter\n\nexport const SHARED_SALT = new Uint8Array([\n  0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15,\n]);\n\nexport const MAX_KDF_PROMISE_CACHE_SIZE = 20;\n"]}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../../src/shared/encryption/constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC,CAAC,WAAW;AAEjD,kBAAkB;AAClB,+FAA+F;AAC/F,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC,CAAC,WAAW;AAC/C,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,wDAAwD;AACzF,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,uBAAuB;AAClD,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,4BAA4B;AAEvD,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,UAAU,CAAC;IACxC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE;CACrD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC","sourcesContent":["export const ALGORITHM_KEY_SIZE = 16; // 16 bytes\n\n// Scrypt settings\n// see: https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html#scrypt\nexport const SCRYPT_SALT_SIZE = 16; // 16 bytes\nexport const SCRYPT_N = 2 ** 17; // CPU/memory cost parameter (must be a power of 2, > 1)\nexport const SCRYPT_r = 8; // Block size parameter\nexport const SCRYPT_p = 1; // Parallelization parameter\n\nexport const SHARED_SALT = new Uint8Array([\n  0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15,\n]);\n\nexport const MAX_KDF_PROMISE_CACHE_SIZE = 20;\n"]}

package/dist/shared/encryption/encryption.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"encryption.d.ts","sourceRoot":"","sources":["../../../src/shared/encryption/encryption.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAuB3D,MAAM,MAAM,gBAAgB,GAAG;IAE7B,CAAC,EAAE,GAAG,CAAC;IAGP,CAAC,EAAE,QAAQ,CAAC;IAGZ,CAAC,EAAE,MAAM,CAAC;IAGV,CAAC,EAAE;QACD,CAAC,EAAE,MAAM,CAAC;QACV,CAAC,EAAE,MAAM,CAAC;QACV,CAAC,EAAE,MAAM,CAAC;QACV,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IAGF,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,cAAM,kBAAkB;;IAOhB,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,kBAAkB,CAAC,EAAE,YAAY,GAChC,OAAO,CAAC,MAAM,CAAC,CAWjB;IAEK,aAAa,CACjB,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,MAAM,EAChB,kBAAkB,CAAC,EAAE,YAAY,GAChC,OAAO,CAAC,MAAM,CAAC,CAmBjB;IAiFD,OAAO,CAAC,gBAAgB,EAAE,MAAM,2BAwB/B;IAED,8BAA8B,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAazD;CAqIF;AAED,QAAA,MAAM,UAAU,oBAA2B,CAAC;eAC7B,UAAU;AAEzB;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGrD"}
+{"version":3,"file":"encryption.d.ts","sourceRoot":"","sources":["../../../src/shared/encryption/encryption.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAsB3D,MAAM,MAAM,gBAAgB,GAAG;IAE7B,CAAC,EAAE,GAAG,CAAC;IAGP,CAAC,EAAE,QAAQ,CAAC;IAGZ,CAAC,EAAE,MAAM,CAAC;IAGV,CAAC,EAAE;QACD,CAAC,EAAE,MAAM,CAAC;QACV,CAAC,EAAE,MAAM,CAAC;QACV,CAAC,EAAE,MAAM,CAAC;QACV,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;IAGF,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,cAAM,kBAAkB;;IAOhB,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,kBAAkB,CAAC,EAAE,YAAY,GAChC,OAAO,CAAC,MAAM,CAAC,CAUjB;IAEK,aAAa,CACjB,gBAAgB,EAAE,MAAM,EACxB,QAAQ,EAAE,MAAM,EAChB,kBAAkB,CAAC,EAAE,YAAY,GAChC,OAAO,CAAC,MAAM,CAAC,CAkBjB;IAiFD,OAAO,CAAC,gBAAgB,EAAE,MAAM,2BAuB/B;IAED,8BAA8B,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,OAAO,CAazD;CAyIF;AAED,QAAA,MAAM,UAAU,oBAA2B,CAAC;eAC7B,UAAU;AAEzB;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGrD"}

package/dist/shared/encryption/encryption.js

@@ -1,10 +1,9 @@
-import { gcm } from '@noble/ciphers/aes';
-import { randomBytes } from '@noble/ciphers/webcrypto';
+import { decrypt, encrypt, IV_LENGTH } from '@metamask/cryptography/aes-gcm';
+import { getErrorMessage, stringToBytes, bytesToHex, concatBytes, remove0x, } from '@metamask/utils';
 import { scryptAsync } from '@noble/hashes/scrypt';
 import { sha256 } from '@noble/hashes/sha256';
-import { utf8ToBytes, concatBytes, bytesToHex } from '@noble/hashes/utils';
 import { getCachedKeyBySalt, getCachedKeyGeneratedWithSharedSalt, setCachedKey, } from './cache.js';
-import { ALGORITHM_KEY_SIZE, ALGORITHM_NONCE_SIZE, MAX_KDF_PROMISE_CACHE_SIZE, SCRYPT_N, SCRYPT_p, SCRYPT_r, SCRYPT_SALT_SIZE, SHARED_SALT, } from './constants.js';
+import { ALGORITHM_KEY_SIZE, MAX_KDF_PROMISE_CACHE_SIZE, SCRYPT_N, SCRYPT_p, SCRYPT_r, SCRYPT_SALT_SIZE, SHARED_SALT, } from './constants.js';
 import { base64ToByteArray, byteArrayToBase64, bytesToUtf8, stringToByteArray, } from './utils.js';
 class EncryptorDecryptor {
     // Promise cache for ongoing KDF operations to prevent duplicate work
@@ -14,8 +13,7 @@ class EncryptorDecryptor {
             return await this.#encryptStringV1(plaintext, password, nativeScryptCrypto);
         }
         catch (e) {
-            const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);
-            throw new Error(`Unable to encrypt string - ${errorMessage}`);
+            throw new Error(`Unable to encrypt string - ${getErrorMessage(e)}`);
         }
     }
     async decryptString(encryptedDataStr, password, nativeScryptCrypto) {
@@ -29,8 +27,7 @@ class EncryptorDecryptor {
             throw new Error(`Unsupported encrypted data payload - ${encryptedDataStr}`);
         }
         catch (e) {
-            const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);
-            throw new Error(`Unable to decrypt string - ${errorMessage}`);
+            throw new Error(`Unable to decrypt string - ${getErrorMessage(e)}`);
         }
     }
     async #encryptStringV1(plaintext, password, nativeScryptCrypto) {
@@ -41,8 +38,11 @@ class EncryptorDecryptor {
             dkLen: ALGORITHM_KEY_SIZE,
         }, undefined, nativeScryptCrypto);
         // Encrypt and prepend salt.
-        const plaintextRaw = utf8ToBytes(plaintext);
-        const ciphertextAndNonceAndSalt = concatBytes(salt, this.#encrypt(plaintextRaw, key));
+        const plaintextRaw = stringToBytes(plaintext);
+        const ciphertextAndNonceAndSalt = concatBytes([
+            salt,
+            await this.#encrypt(plaintextRaw, key),
+        ]);
         // Convert to Base64
         const encryptedData = byteArrayToBase64(ciphertextAndNonceAndSalt);
         const encryptedPayload = {
@@ -74,7 +74,7 @@ class EncryptorDecryptor {
             dkLen: o.dkLen,
         }, salt, nativeScryptCrypto);
         // Decrypt and return result.
-        return bytesToUtf8(this.#decrypt(ciphertextAndNonce, key));
+        return bytesToUtf8(await this.#decrypt(ciphertextAndNonce, key));
     }
     getSalt(encryptedDataStr) {
         try {
@@ -92,8 +92,7 @@ class EncryptorDecryptor {
             throw new Error(`Unsupported encrypted data payload - ${encryptedDataStr}`);
         }
         catch (e) {
-            const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);
-            throw new Error(`Unable to get salt - ${errorMessage}`);
+            throw new Error(`Unable to get salt - ${getErrorMessage(e)}`);
         }
     }
     getIfEntriesHaveDifferentSalts(entries) {
@@ -110,18 +109,17 @@ class EncryptorDecryptor {
         const strSet = new Set(salts.map((arr) => arr.toString()));
         return strSet.size === salts.length;
     }
-    #encrypt(plaintext, key) {
-        const nonce = randomBytes(ALGORITHM_NONCE_SIZE);
+    async #encrypt(plaintext, key) {
         // Encrypt and prepend nonce.
-        const ciphertext = gcm(key, nonce).encrypt(plaintext);
-        return concatBytes(nonce, ciphertext);
+        const { ciphertext, iv } = await encrypt(key, plaintext);
+        return concatBytes([iv, ciphertext]);
     }
-    #decrypt(ciphertextAndNonce, key) {
+    async #decrypt(ciphertextAndNonce, key) {
         // Create buffers of nonce and ciphertext.
-        const nonce = ciphertextAndNonce.slice(0, ALGORITHM_NONCE_SIZE);
-        const ciphertext = ciphertextAndNonce.slice(ALGORITHM_NONCE_SIZE, ciphertextAndNonce.length);
+        const nonce = ciphertextAndNonce.slice(0, IV_LENGTH);
+        const ciphertext = ciphertextAndNonce.slice(IV_LENGTH, ciphertextAndNonce.length);
         // Decrypt and return result.
-        return gcm(key, nonce).decrypt(ciphertext);
+        return decrypt(key, nonce, ciphertext);
     }
     async #getOrGenerateScryptKey(password, o, salt, nativeScryptCrypto) {
         const hashedPassword = createSHA256Hash(password);
@@ -173,12 +171,12 @@ class EncryptorDecryptor {
             newKey = await nativeScryptCrypto(stringToByteArray(password), salt, o.N, o.r, o.p, o.dkLen);
         }
         else {
-            newKey = await scryptAsync(password, salt, {
+            newKey = (await scryptAsync(password, salt, {
                 N: o.N,
                 r: o.r,
                 p: o.p,
                 dkLen: o.dkLen,
-            });
+            }));
         }
         setCachedKey(hashedPassword, salt, newKey);
         return {
@@ -197,6 +195,6 @@ export default encryption;
  */
 export function createSHA256Hash(data) {
     const hashedData = sha256(data);
-    return bytesToHex(hashedData);
+    return remove0x(bytesToHex(hashedData));
 }
 //# sourceMappingURL=encryption.js.map

package/dist/shared/encryption/encryption.js.map

@@ -1 +1 @@
-{"version":3,"file":"encryption.js","sourceRoot":"","sources":["../../../src/shared/encryption/encryption.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAG3E,OAAO,EACL,kBAAkB,EAClB,mCAAmC,EACnC,YAAY,GACb,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,0BAA0B,EAC1B,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,gBAAgB,EAChB,WAAW,GACZ,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,WAAW,EACX,iBAAiB,GAClB,MAAM,YAAY,CAAC;AAwBpB,MAAM,kBAAkB;IACtB,qEAAqE;IAC5D,gBAAgB,GAAG,IAAI,GAAG,EAGhC,CAAC;IAEJ,KAAK,CAAC,aAAa,CACjB,SAAiB,EACjB,QAAgB,EAChB,kBAAiC;QAEjC,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,gBAAgB,CAChC,SAAS,EACT,QAAQ,EACR,kBAAkB,CACnB,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,YAAY,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,8BAA8B,YAAY,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,gBAAwB,EACxB,QAAgB,EAChB,kBAAiC;QAEjC,IAAI,CAAC;YACH,MAAM,aAAa,GAAqB,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACrE,IAAI,aAAa,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC5B,IAAI,aAAa,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;oBACjC,OAAO,MAAM,IAAI,CAAC,gBAAgB,CAChC,aAAa,EACb,QAAQ,EACR,kBAAkB,CACnB,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,MAAM,IAAI,KAAK,CACb,wCAAwC,gBAAgB,EAAE,CAC3D,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,YAAY,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,8BAA8B,YAAY,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,SAAiB,EACjB,QAAgB,EAChB,kBAAiC;QAEjC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,uBAAuB,CACtD,QAAQ,EACR;YACE,CAAC,EAAE,QAAQ;YACX,CAAC,EAAE,QAAQ;YACX,CAAC,EAAE,QAAQ;YACX,KAAK,EAAE,kBAAkB;SAC1B,EACD,SAAS,EACT,kBAAkB,CACnB,CAAC;QAEF,4BAA4B;QAC5B,MAAM,YAAY,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;QAC5C,MAAM,yBAAyB,GAAG,WAAW,CAC3C,IAAI,EACJ,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC,CACjC,CAAC;QAEF,oBAAoB;QACpB,MAAM,aAAa,GAAG,iBAAiB,CAAC,yBAAyB,CAAC,CAAC;QAEnE,MAAM,gBAAgB,GAAqB;YACzC,CAAC,EAAE,GAAG;YACN,CAAC,EAAE,QAAQ;YACX,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE;gBACD,CAAC,EAAE,QAAQ;gBACX,CAAC,EAAE,QAAQ;gBACX,CAAC,EAAE,QAAQ;gBACX,KAAK,EAAE,kBAAkB;aAC1B;YACD,OAAO,EAAE,gBAAgB;SAC1B,CAAC;QAEF,OAAO,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,IAAsB,EACtB,QAAgB,EAChB,kBAAiC;QAEjC,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,+BAA+B,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;QAEhE,qBAAqB;QACrB,MAAM,yBAAyB,GAAG,iBAAiB,CACjD,+BAA+B,CAChC,CAAC;QAEF,iDAAiD;QACjD,MAAM,IAAI,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACzD,MAAM,kBAAkB,GAAG,yBAAyB,CAAC,KAAK,CACxD,OAAO,EACP,yBAAyB,CAAC,MAAM,CACjC,CAAC;QAEF,kBAAkB;QAClB,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAChD,QAAQ,EACR;YACE,CAAC,EAAE,CAAC,CAAC,CAAC;YACN,CAAC,EAAE,CAAC,CAAC,CAAC;YACN,CAAC,EAAE,CAAC,CAAC,CAAC;YACN,KAAK,EAAE,CAAC,CAAC,KAAK;SACf,EACD,IAAI,EACJ,kBAAkB,CACnB,CAAC;QAEF,6BAA6B;QAC7B,OAAO,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,CAAC,gBAAwB;QAC9B,IAAI,CAAC;YACH,MAAM,aAAa,GAAqB,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACrE,IAAI,aAAa,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC5B,IAAI,aAAa,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;oBACjC,MAAM,EAAE,CAAC,EAAE,+BAA+B,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC;oBAEtE,qBAAqB;oBACrB,MAAM,yBAAyB,GAAG,iBAAiB,CACjD,+BAA+B,CAChC,CAAC;oBAEF,iDAAiD;oBACjD,MAAM,IAAI,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;oBACzD,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YACD,MAAM,IAAI,KAAK,CACb,wCAAwC,gBAAgB,EAAE,CAC3D,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,YAAY,GAAG,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACxE,MAAM,IAAI,KAAK,CAAC,wBAAwB,YAAY,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,8BAA8B,CAAC,OAAiB;QAC9C,MAAM,KAAK,GAAG,OAAO;aAClB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACT,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;YACT,CAAC;QACH,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,CAAC,EAAgC,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;QAEhE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC3D,OAAO,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC;IACtC,CAAC;IAED,QAAQ,CAAC,SAAqB,EAAE,GAAe;QAC7C,MAAM,KAAK,GAAG,WAAW,CAAC,oBAAoB,CAAC,CAAC;QAEhD,6BAA6B;QAC7B,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAEtD,OAAO,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACxC,CAAC;IAED,QAAQ,CAAC,kBAA8B,EAAE,GAAe;QACtD,0CAA0C;QAC1C,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CACzC,oBAAoB,EACpB,kBAAkB,CAAC,MAAM,CAC1B,CAAC;QAEF,6BAA6B;QAC7B,OAAO,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,uBAAuB,CAC3B,QAAgB,EAChB,CAAwB,EACxB,IAAiB,EACjB,kBAAiC;QAEjC,MAAM,cAAc,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAElD,0CAA0C;QAC1C,MAAM,SAAS,GAAG,IAAI;YACpB,CAAC,CAAC,kBAAkB,CAAC,cAAc,EAAE,IAAI,CAAC;YAC1C,CAAC,CAAC,mCAAmC,CAAC,cAAc,CAAC,CAAC;QAExD,IAAI,SAAS,EAAE,CAAC;YACd,OAAO;gBACL,GAAG,EAAE,SAAS,CAAC,GAAG;gBAClB,IAAI,EAAE,SAAS,CAAC,IAAI;aACrB,CAAC;QACJ,CAAC;QAED,mDAAmD;QACnD,MAAM,OAAO,GAAG,IAAI,IAAI,WAAW,CAAC;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CACtC,cAAc,EACd,CAAC,EACD,OAAO,EACP,kBAAkB,CACnB,CAAC;QAEF,6EAA6E;QAC7E,MAAM,eAAe,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5D,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO,eAAe,CAAC;QACzB,CAAC;QAED,+CAA+C;QAC/C,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,IAAI,0BAA0B,EAAE,CAAC;YAC7D,2CAA2C;YAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAC3D,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;QAED,qDAAqD;QACrD,MAAM,UAAU,GAAG,IAAI,CAAC,oBAAoB,CAC1C,QAAQ,EACR,CAAC,EACD,OAAO,EACP,cAAc,EACd,kBAAkB,CACnB,CAAC;QAEF,uCAAuC;QACvC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAEhD,iEAAiE;QACjE,mCAAmC;QACnC,KAAK,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE;YAC3B,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,kBAAkB,CAChB,cAAsB,EACtB,CAAwB,EACxB,IAAgB,EAChB,kBAAiC;QAEjC,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAC9C,OAAO,GAAG,cAAc,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,OAAO,IAAI,SAAS,EAAE,CAAC;IACrF,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,QAAgB,EAChB,CAAwB,EACxB,IAAgB,EAChB,cAAsB,EACtB,kBAAiC;QAEjC,IAAI,MAAkB,CAAC;QAEvB,IAAI,kBAAkB,EAAE,CAAC;YACvB,MAAM,GAAG,MAAM,kBAAkB,CAC/B,iBAAiB,CAAC,QAAQ,CAAC,EAC3B,IAAI,EACJ,CAAC,CAAC,CAAC,EACH,CAAC,CAAC,CAAC,EACH,CAAC,CAAC,CAAC,EACH,CAAC,CAAC,KAAK,CACR,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,MAAM,WAAW,CAAC,QAAQ,EAAE,IAAI,EAAE;gBACzC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACN,CAAC,EAAE,CAAC,CAAC,CAAC;gBACN,CAAC,EAAE,CAAC,CAAC,CAAC;gBACN,KAAK,EAAE,CAAC,CAAC,KAAK;aACf,CAAC,CAAC;QACL,CAAC;QAED,YAAY,CAAC,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAE3C,OAAO;YACL,GAAG,EAAE,MAAM;YACX,IAAI;SACL,CAAC;IACJ,CAAC;CACF;AAED,MAAM,UAAU,GAAG,IAAI,kBAAkB,EAAE,CAAC;AAC5C,eAAe,UAAU,CAAC;AAE1B;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,UAAU,CAAC,UAAU,CAAC,CAAC;AAChC,CAAC","sourcesContent":["import { gcm } from '@noble/ciphers/aes';\nimport { randomBytes } from '@noble/ciphers/webcrypto';\nimport { scryptAsync } from '@noble/hashes/scrypt';\nimport { sha256 } from '@noble/hashes/sha256';\nimport { utf8ToBytes, concatBytes, bytesToHex } from '@noble/hashes/utils';\n\nimport type { NativeScrypt } from '../types/encryption.js';\nimport {\n  getCachedKeyBySalt,\n  getCachedKeyGeneratedWithSharedSalt,\n  setCachedKey,\n} from './cache.js';\nimport {\n  ALGORITHM_KEY_SIZE,\n  ALGORITHM_NONCE_SIZE,\n  MAX_KDF_PROMISE_CACHE_SIZE,\n  SCRYPT_N,\n  SCRYPT_p,\n  SCRYPT_r,\n  SCRYPT_SALT_SIZE,\n  SHARED_SALT,\n} from './constants.js';\nimport {\n  base64ToByteArray,\n  byteArrayToBase64,\n  bytesToUtf8,\n  stringToByteArray,\n} from './utils.js';\n\nexport type EncryptedPayload = {\n  // version\n  v: '1';\n\n  // key derivation function algorithm - scrypt\n  t: 'scrypt';\n\n  // data\n  d: string;\n\n  // encryption options - scrypt\n  o: {\n    N: number;\n    r: number;\n    p: number;\n    dkLen: number;\n  };\n\n  // Salt options\n  saltLen: number;\n};\n\nclass EncryptorDecryptor {\n  // Promise cache for ongoing KDF operations to prevent duplicate work\n  readonly #kdfPromiseCache = new Map<\n    string,\n    Promise<{ key: Uint8Array; salt: Uint8Array }>\n  >();\n\n  async encryptString(\n    plaintext: string,\n    password: string,\n    nativeScryptCrypto?: NativeScrypt,\n  ): Promise<string> {\n    try {\n      return await this.#encryptStringV1(\n        plaintext,\n        password,\n        nativeScryptCrypto,\n      );\n    } catch (e) {\n      const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);\n      throw new Error(`Unable to encrypt string - ${errorMessage}`);\n    }\n  }\n\n  async decryptString(\n    encryptedDataStr: string,\n    password: string,\n    nativeScryptCrypto?: NativeScrypt,\n  ): Promise<string> {\n    try {\n      const encryptedData: EncryptedPayload = JSON.parse(encryptedDataStr);\n      if (encryptedData.v === '1') {\n        if (encryptedData.t === 'scrypt') {\n          return await this.#decryptStringV1(\n            encryptedData,\n            password,\n            nativeScryptCrypto,\n          );\n        }\n      }\n      throw new Error(\n        `Unsupported encrypted data payload - ${encryptedDataStr}`,\n      );\n    } catch (e) {\n      const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);\n      throw new Error(`Unable to decrypt string - ${errorMessage}`);\n    }\n  }\n\n  async #encryptStringV1(\n    plaintext: string,\n    password: string,\n    nativeScryptCrypto?: NativeScrypt,\n  ): Promise<string> {\n    const { key, salt } = await this.#getOrGenerateScryptKey(\n      password,\n      {\n        N: SCRYPT_N,\n        r: SCRYPT_r,\n        p: SCRYPT_p,\n        dkLen: ALGORITHM_KEY_SIZE,\n      },\n      undefined,\n      nativeScryptCrypto,\n    );\n\n    // Encrypt and prepend salt.\n    const plaintextRaw = utf8ToBytes(plaintext);\n    const ciphertextAndNonceAndSalt = concatBytes(\n      salt,\n      this.#encrypt(plaintextRaw, key),\n    );\n\n    // Convert to Base64\n    const encryptedData = byteArrayToBase64(ciphertextAndNonceAndSalt);\n\n    const encryptedPayload: EncryptedPayload = {\n      v: '1',\n      t: 'scrypt',\n      d: encryptedData,\n      o: {\n        N: SCRYPT_N,\n        r: SCRYPT_r,\n        p: SCRYPT_p,\n        dkLen: ALGORITHM_KEY_SIZE,\n      },\n      saltLen: SCRYPT_SALT_SIZE,\n    };\n\n    return JSON.stringify(encryptedPayload);\n  }\n\n  async #decryptStringV1(\n    data: EncryptedPayload,\n    password: string,\n    nativeScryptCrypto?: NativeScrypt,\n  ): Promise<string> {\n    const { o, d: base64CiphertextAndNonceAndSalt, saltLen } = data;\n\n    // Decode the base64.\n    const ciphertextAndNonceAndSalt = base64ToByteArray(\n      base64CiphertextAndNonceAndSalt,\n    );\n\n    // Create buffers of salt and ciphertextAndNonce.\n    const salt = ciphertextAndNonceAndSalt.slice(0, saltLen);\n    const ciphertextAndNonce = ciphertextAndNonceAndSalt.slice(\n      saltLen,\n      ciphertextAndNonceAndSalt.length,\n    );\n\n    // Derive the key.\n    const { key } = await this.#getOrGenerateScryptKey(\n      password,\n      {\n        N: o.N,\n        r: o.r,\n        p: o.p,\n        dkLen: o.dkLen,\n      },\n      salt,\n      nativeScryptCrypto,\n    );\n\n    // Decrypt and return result.\n    return bytesToUtf8(this.#decrypt(ciphertextAndNonce, key));\n  }\n\n  getSalt(encryptedDataStr: string) {\n    try {\n      const encryptedData: EncryptedPayload = JSON.parse(encryptedDataStr);\n      if (encryptedData.v === '1') {\n        if (encryptedData.t === 'scrypt') {\n          const { d: base64CiphertextAndNonceAndSalt, saltLen } = encryptedData;\n\n          // Decode the base64.\n          const ciphertextAndNonceAndSalt = base64ToByteArray(\n            base64CiphertextAndNonceAndSalt,\n          );\n\n          // Create buffers of salt and ciphertextAndNonce.\n          const salt = ciphertextAndNonceAndSalt.slice(0, saltLen);\n          return salt;\n        }\n      }\n      throw new Error(\n        `Unsupported encrypted data payload - ${encryptedDataStr}`,\n      );\n    } catch (e) {\n      const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);\n      throw new Error(`Unable to get salt - ${errorMessage}`);\n    }\n  }\n\n  getIfEntriesHaveDifferentSalts(entries: string[]): boolean {\n    const salts = entries\n      .map((e) => {\n        try {\n          return this.getSalt(e);\n        } catch {\n          return;\n        }\n      })\n      .filter((s): s is Uint8Array<ArrayBuffer> => s !== undefined);\n\n    const strSet = new Set(salts.map((arr) => arr.toString()));\n    return strSet.size === salts.length;\n  }\n\n  #encrypt(plaintext: Uint8Array, key: Uint8Array): Uint8Array {\n    const nonce = randomBytes(ALGORITHM_NONCE_SIZE);\n\n    // Encrypt and prepend nonce.\n    const ciphertext = gcm(key, nonce).encrypt(plaintext);\n\n    return concatBytes(nonce, ciphertext);\n  }\n\n  #decrypt(ciphertextAndNonce: Uint8Array, key: Uint8Array): Uint8Array {\n    // Create buffers of nonce and ciphertext.\n    const nonce = ciphertextAndNonce.slice(0, ALGORITHM_NONCE_SIZE);\n    const ciphertext = ciphertextAndNonce.slice(\n      ALGORITHM_NONCE_SIZE,\n      ciphertextAndNonce.length,\n    );\n\n    // Decrypt and return result.\n    return gcm(key, nonce).decrypt(ciphertext);\n  }\n\n  async #getOrGenerateScryptKey(\n    password: string,\n    o: EncryptedPayload['o'],\n    salt?: Uint8Array,\n    nativeScryptCrypto?: NativeScrypt,\n  ) {\n    const hashedPassword = createSHA256Hash(password);\n\n    // Check if we already have the key cached\n    const cachedKey = salt\n      ? getCachedKeyBySalt(hashedPassword, salt)\n      : getCachedKeyGeneratedWithSharedSalt(hashedPassword);\n\n    if (cachedKey) {\n      return {\n        key: cachedKey.key,\n        salt: cachedKey.salt,\n      };\n    }\n\n    // Create a unique cache key for this KDF operation\n    const newSalt = salt ?? SHARED_SALT;\n    const cacheKey = this.#createKdfCacheKey(\n      hashedPassword,\n      o,\n      newSalt,\n      nativeScryptCrypto,\n    );\n\n    // Check if there's already an ongoing KDF operation with the same parameters\n    const existingPromise = this.#kdfPromiseCache.get(cacheKey);\n    if (existingPromise) {\n      return existingPromise;\n    }\n\n    // Limit cache size to prevent unbounded growth\n    if (this.#kdfPromiseCache.size >= MAX_KDF_PROMISE_CACHE_SIZE) {\n      // Remove the oldest entry (first inserted)\n      const firstKey = this.#kdfPromiseCache.keys().next().value;\n      if (firstKey) {\n        this.#kdfPromiseCache.delete(firstKey);\n      }\n    }\n\n    // Create and cache the promise for the KDF operation\n    const kdfPromise = this.#performKdfOperation(\n      password,\n      o,\n      newSalt,\n      hashedPassword,\n      nativeScryptCrypto,\n    );\n\n    // Cache the promise and set up cleanup\n    this.#kdfPromiseCache.set(cacheKey, kdfPromise);\n\n    // Clean up the cache after completion (both success and failure)\n    // eslint-disable-next-line no-void\n    void kdfPromise.finally(() => {\n      this.#kdfPromiseCache.delete(cacheKey);\n    });\n\n    return kdfPromise;\n  }\n\n  #createKdfCacheKey(\n    hashedPassword: string,\n    o: EncryptedPayload['o'],\n    salt: Uint8Array,\n    nativeScryptCrypto?: NativeScrypt,\n  ): string {\n    const saltStr = byteArrayToBase64(salt);\n    const hasNative = Boolean(nativeScryptCrypto);\n    return `${hashedPassword}:${o.N}:${o.r}:${o.p}:${o.dkLen}:${saltStr}:${hasNative}`;\n  }\n\n  async #performKdfOperation(\n    password: string,\n    o: EncryptedPayload['o'],\n    salt: Uint8Array,\n    hashedPassword: string,\n    nativeScryptCrypto?: NativeScrypt,\n  ): Promise<{ key: Uint8Array; salt: Uint8Array }> {\n    let newKey: Uint8Array;\n\n    if (nativeScryptCrypto) {\n      newKey = await nativeScryptCrypto(\n        stringToByteArray(password),\n        salt,\n        o.N,\n        o.r,\n        o.p,\n        o.dkLen,\n      );\n    } else {\n      newKey = await scryptAsync(password, salt, {\n        N: o.N,\n        r: o.r,\n        p: o.p,\n        dkLen: o.dkLen,\n      });\n    }\n\n    setCachedKey(hashedPassword, salt, newKey);\n\n    return {\n      key: newKey,\n      salt,\n    };\n  }\n}\n\nconst encryption = new EncryptorDecryptor();\nexport default encryption;\n\n/**\n * Receive a SHA256 hash from a given string\n *\n * @param data - input\n * @returns sha256 hash\n */\nexport function createSHA256Hash(data: string): string {\n  const hashedData = sha256(data);\n  return bytesToHex(hashedData);\n}\n"]}
+{"version":3,"file":"encryption.js","sourceRoot":"","sources":["../../../src/shared/encryption/encryption.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,EACL,eAAe,EACf,aAAa,EACb,UAAU,EACV,WAAW,EACX,QAAQ,GACT,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAG9C,OAAO,EACL,kBAAkB,EAClB,mCAAmC,EACnC,YAAY,GACb,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,kBAAkB,EAClB,0BAA0B,EAC1B,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,gBAAgB,EAChB,WAAW,GACZ,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,iBAAiB,EACjB,iBAAiB,EACjB,WAAW,EACX,iBAAiB,GAClB,MAAM,YAAY,CAAC;AAwBpB,MAAM,kBAAkB;IACtB,qEAAqE;IAC5D,gBAAgB,GAAG,IAAI,GAAG,EAGhC,CAAC;IAEJ,KAAK,CAAC,aAAa,CACjB,SAAiB,EACjB,QAAgB,EAChB,kBAAiC;QAEjC,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,gBAAgB,CAChC,SAAS,EACT,QAAQ,EACR,kBAAkB,CACnB,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,8BAA8B,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,gBAAwB,EACxB,QAAgB,EAChB,kBAAiC;QAEjC,IAAI,CAAC;YACH,MAAM,aAAa,GAAqB,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACrE,IAAI,aAAa,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC5B,IAAI,aAAa,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;oBACjC,OAAO,MAAM,IAAI,CAAC,gBAAgB,CAChC,aAAa,EACb,QAAQ,EACR,kBAAkB,CACnB,CAAC;gBACJ,CAAC;YACH,CAAC;YACD,MAAM,IAAI,KAAK,CACb,wCAAwC,gBAAgB,EAAE,CAC3D,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,8BAA8B,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,SAAiB,EACjB,QAAgB,EAChB,kBAAiC;QAEjC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,uBAAuB,CACtD,QAAQ,EACR;YACE,CAAC,EAAE,QAAQ;YACX,CAAC,EAAE,QAAQ;YACX,CAAC,EAAE,QAAQ;YACX,KAAK,EAAE,kBAAkB;SAC1B,EACD,SAAS,EACT,kBAAkB,CACnB,CAAC;QAEF,4BAA4B;QAC5B,MAAM,YAAY,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,yBAAyB,GAAG,WAAW,CAAC;YAC5C,IAAI;YACJ,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,GAAG,CAAC;SACvC,CAAC,CAAC;QAEH,oBAAoB;QACpB,MAAM,aAAa,GAAG,iBAAiB,CAAC,yBAAyB,CAAC,CAAC;QAEnE,MAAM,gBAAgB,GAAqB;YACzC,CAAC,EAAE,GAAG;YACN,CAAC,EAAE,QAAQ;YACX,CAAC,EAAE,aAAa;YAChB,CAAC,EAAE;gBACD,CAAC,EAAE,QAAQ;gBACX,CAAC,EAAE,QAAQ;gBACX,CAAC,EAAE,QAAQ;gBACX,KAAK,EAAE,kBAAkB;aAC1B;YACD,OAAO,EAAE,gBAAgB;SAC1B,CAAC;QAEF,OAAO,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,IAAsB,EACtB,QAAgB,EAChB,kBAAiC;QAEjC,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,+BAA+B,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;QAEhE,qBAAqB;QACrB,MAAM,yBAAyB,GAAG,iBAAiB,CACjD,+BAA+B,CAChC,CAAC;QAEF,iDAAiD;QACjD,MAAM,IAAI,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACzD,MAAM,kBAAkB,GAAG,yBAAyB,CAAC,KAAK,CACxD,OAAO,EACP,yBAAyB,CAAC,MAAM,CACjC,CAAC;QAEF,kBAAkB;QAClB,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,uBAAuB,CAChD,QAAQ,EACR;YACE,CAAC,EAAE,CAAC,CAAC,CAAC;YACN,CAAC,EAAE,CAAC,CAAC,CAAC;YACN,CAAC,EAAE,CAAC,CAAC,CAAC;YACN,KAAK,EAAE,CAAC,CAAC,KAAK;SACf,EACD,IAAI,EACJ,kBAAkB,CACnB,CAAC;QAEF,6BAA6B;QAC7B,OAAO,WAAW,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,CAAC;IACnE,CAAC;IAED,OAAO,CAAC,gBAAwB;QAC9B,IAAI,CAAC;YACH,MAAM,aAAa,GAAqB,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;YACrE,IAAI,aAAa,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBAC5B,IAAI,aAAa,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;oBACjC,MAAM,EAAE,CAAC,EAAE,+BAA+B,EAAE,OAAO,EAAE,GAAG,aAAa,CAAC;oBAEtE,qBAAqB;oBACrB,MAAM,yBAAyB,GAAG,iBAAiB,CACjD,+BAA+B,CAChC,CAAC;oBAEF,iDAAiD;oBACjD,MAAM,IAAI,GAAG,yBAAyB,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;oBACzD,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YACD,MAAM,IAAI,KAAK,CACb,wCAAwC,gBAAgB,EAAE,CAC3D,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,wBAAwB,eAAe,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IAED,8BAA8B,CAAC,OAAiB;QAC9C,MAAM,KAAK,GAAG,OAAO;aAClB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACT,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACzB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO;YACT,CAAC;QACH,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,CAAC,EAAgC,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;QAEhE,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC3D,OAAO,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,SAAkC,EAClC,GAA4B;QAE5B,6BAA6B;QAC7B,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAEzD,OAAO,WAAW,CAAC,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,QAAQ,CACZ,kBAA2C,EAC3C,GAA4B;QAE5B,0CAA0C;QAC1C,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CACzC,SAAS,EACT,kBAAkB,CAAC,MAAM,CAC1B,CAAC;QAEF,6BAA6B;QAC7B,OAAO,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,uBAAuB,CAC3B,QAAgB,EAChB,CAAwB,EACxB,IAA8B,EAC9B,kBAAiC;QAEjC,MAAM,cAAc,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAElD,0CAA0C;QAC1C,MAAM,SAAS,GAAG,IAAI;YACpB,CAAC,CAAC,kBAAkB,CAAC,cAAc,EAAE,IAAI,CAAC;YAC1C,CAAC,CAAC,mCAAmC,CAAC,cAAc,CAAC,CAAC;QAExD,IAAI,SAAS,EAAE,CAAC;YACd,OAAO;gBACL,GAAG,EAAE,SAAS,CAAC,GAAG;gBAClB,IAAI,EAAE,SAAS,CAAC,IAAI;aACrB,CAAC;QACJ,CAAC;QAED,mDAAmD;QACnD,MAAM,OAAO,GAAG,IAAI,IAAI,WAAW,CAAC;QACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,kBAAkB,CACtC,cAAc,EACd,CAAC,EACD,OAAO,EACP,kBAAkB,CACnB,CAAC;QAEF,6EAA6E;QAC7E,MAAM,eAAe,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5D,IAAI,eAAe,EAAE,CAAC;YACpB,OAAO,eAAe,CAAC;QACzB,CAAC;QAED,+CAA+C;QAC/C,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,IAAI,0BAA0B,EAAE,CAAC;YAC7D,2CAA2C;YAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAC3D,IAAI,QAAQ,EAAE,CAAC;gBACb,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACzC,CAAC;QACH,CAAC;QAED,qDAAqD;QACrD,MAAM,UAAU,GAAG,IAAI,CAAC,oBAAoB,CAC1C,QAAQ,EACR,CAAC,EACD,OAAO,EACP,cAAc,EACd,kBAAkB,CACnB,CAAC;QAEF,uCAAuC;QACvC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAEhD,iEAAiE;QACjE,mCAAmC;QACnC,KAAK,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE;YAC3B,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,kBAAkB,CAChB,cAAsB,EACtB,CAAwB,EACxB,IAAgB,EAChB,kBAAiC;QAEjC,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;QAC9C,OAAO,GAAG,cAAc,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,OAAO,IAAI,SAAS,EAAE,CAAC;IACrF,CAAC;IAED,KAAK,CAAC,oBAAoB,CACxB,QAAgB,EAChB,CAAwB,EACxB,IAA6B,EAC7B,cAAsB,EACtB,kBAAiC;QAEjC,IAAI,MAA+B,CAAC;QAEpC,IAAI,kBAAkB,EAAE,CAAC;YACvB,MAAM,GAAG,MAAM,kBAAkB,CAC/B,iBAAiB,CAAC,QAAQ,CAAC,EAC3B,IAAI,EACJ,CAAC,CAAC,CAAC,EACH,CAAC,CAAC,CAAC,EACH,CAAC,CAAC,CAAC,EACH,CAAC,CAAC,KAAK,CACR,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,CAAC,MAAM,WAAW,CAAC,QAAQ,EAAE,IAAI,EAAE;gBAC1C,CAAC,EAAE,CAAC,CAAC,CAAC;gBACN,CAAC,EAAE,CAAC,CAAC,CAAC;gBACN,CAAC,EAAE,CAAC,CAAC,CAAC;gBACN,KAAK,EAAE,CAAC,CAAC,KAAK;aACf,CAAC,CAA4B,CAAC;QACjC,CAAC;QAED,YAAY,CAAC,cAAc,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAE3C,OAAO;YACL,GAAG,EAAE,MAAM;YACX,IAAI;SACL,CAAC;IACJ,CAAC;CACF;AAED,MAAM,UAAU,GAAG,IAAI,kBAAkB,EAAE,CAAC;AAC5C,eAAe,UAAU,CAAC;AAE1B;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC;AAC1C,CAAC","sourcesContent":["import { decrypt, encrypt, IV_LENGTH } from '@metamask/cryptography/aes-gcm';\nimport {\n  getErrorMessage,\n  stringToBytes,\n  bytesToHex,\n  concatBytes,\n  remove0x,\n} from '@metamask/utils';\nimport { scryptAsync } from '@noble/hashes/scrypt';\nimport { sha256 } from '@noble/hashes/sha256';\n\nimport type { NativeScrypt } from '../types/encryption.js';\nimport {\n  getCachedKeyBySalt,\n  getCachedKeyGeneratedWithSharedSalt,\n  setCachedKey,\n} from './cache.js';\nimport {\n  ALGORITHM_KEY_SIZE,\n  MAX_KDF_PROMISE_CACHE_SIZE,\n  SCRYPT_N,\n  SCRYPT_p,\n  SCRYPT_r,\n  SCRYPT_SALT_SIZE,\n  SHARED_SALT,\n} from './constants.js';\nimport {\n  base64ToByteArray,\n  byteArrayToBase64,\n  bytesToUtf8,\n  stringToByteArray,\n} from './utils.js';\n\nexport type EncryptedPayload = {\n  // version\n  v: '1';\n\n  // key derivation function algorithm - scrypt\n  t: 'scrypt';\n\n  // data\n  d: string;\n\n  // encryption options - scrypt\n  o: {\n    N: number;\n    r: number;\n    p: number;\n    dkLen: number;\n  };\n\n  // Salt options\n  saltLen: number;\n};\n\nclass EncryptorDecryptor {\n  // Promise cache for ongoing KDF operations to prevent duplicate work\n  readonly #kdfPromiseCache = new Map<\n    string,\n    Promise<{ key: Uint8Array<ArrayBuffer>; salt: Uint8Array<ArrayBuffer> }>\n  >();\n\n  async encryptString(\n    plaintext: string,\n    password: string,\n    nativeScryptCrypto?: NativeScrypt,\n  ): Promise<string> {\n    try {\n      return await this.#encryptStringV1(\n        plaintext,\n        password,\n        nativeScryptCrypto,\n      );\n    } catch (e) {\n      throw new Error(`Unable to encrypt string - ${getErrorMessage(e)}`);\n    }\n  }\n\n  async decryptString(\n    encryptedDataStr: string,\n    password: string,\n    nativeScryptCrypto?: NativeScrypt,\n  ): Promise<string> {\n    try {\n      const encryptedData: EncryptedPayload = JSON.parse(encryptedDataStr);\n      if (encryptedData.v === '1') {\n        if (encryptedData.t === 'scrypt') {\n          return await this.#decryptStringV1(\n            encryptedData,\n            password,\n            nativeScryptCrypto,\n          );\n        }\n      }\n      throw new Error(\n        `Unsupported encrypted data payload - ${encryptedDataStr}`,\n      );\n    } catch (e) {\n      throw new Error(`Unable to decrypt string - ${getErrorMessage(e)}`);\n    }\n  }\n\n  async #encryptStringV1(\n    plaintext: string,\n    password: string,\n    nativeScryptCrypto?: NativeScrypt,\n  ): Promise<string> {\n    const { key, salt } = await this.#getOrGenerateScryptKey(\n      password,\n      {\n        N: SCRYPT_N,\n        r: SCRYPT_r,\n        p: SCRYPT_p,\n        dkLen: ALGORITHM_KEY_SIZE,\n      },\n      undefined,\n      nativeScryptCrypto,\n    );\n\n    // Encrypt and prepend salt.\n    const plaintextRaw = stringToBytes(plaintext);\n    const ciphertextAndNonceAndSalt = concatBytes([\n      salt,\n      await this.#encrypt(plaintextRaw, key),\n    ]);\n\n    // Convert to Base64\n    const encryptedData = byteArrayToBase64(ciphertextAndNonceAndSalt);\n\n    const encryptedPayload: EncryptedPayload = {\n      v: '1',\n      t: 'scrypt',\n      d: encryptedData,\n      o: {\n        N: SCRYPT_N,\n        r: SCRYPT_r,\n        p: SCRYPT_p,\n        dkLen: ALGORITHM_KEY_SIZE,\n      },\n      saltLen: SCRYPT_SALT_SIZE,\n    };\n\n    return JSON.stringify(encryptedPayload);\n  }\n\n  async #decryptStringV1(\n    data: EncryptedPayload,\n    password: string,\n    nativeScryptCrypto?: NativeScrypt,\n  ): Promise<string> {\n    const { o, d: base64CiphertextAndNonceAndSalt, saltLen } = data;\n\n    // Decode the base64.\n    const ciphertextAndNonceAndSalt = base64ToByteArray(\n      base64CiphertextAndNonceAndSalt,\n    );\n\n    // Create buffers of salt and ciphertextAndNonce.\n    const salt = ciphertextAndNonceAndSalt.slice(0, saltLen);\n    const ciphertextAndNonce = ciphertextAndNonceAndSalt.slice(\n      saltLen,\n      ciphertextAndNonceAndSalt.length,\n    );\n\n    // Derive the key.\n    const { key } = await this.#getOrGenerateScryptKey(\n      password,\n      {\n        N: o.N,\n        r: o.r,\n        p: o.p,\n        dkLen: o.dkLen,\n      },\n      salt,\n      nativeScryptCrypto,\n    );\n\n    // Decrypt and return result.\n    return bytesToUtf8(await this.#decrypt(ciphertextAndNonce, key));\n  }\n\n  getSalt(encryptedDataStr: string) {\n    try {\n      const encryptedData: EncryptedPayload = JSON.parse(encryptedDataStr);\n      if (encryptedData.v === '1') {\n        if (encryptedData.t === 'scrypt') {\n          const { d: base64CiphertextAndNonceAndSalt, saltLen } = encryptedData;\n\n          // Decode the base64.\n          const ciphertextAndNonceAndSalt = base64ToByteArray(\n            base64CiphertextAndNonceAndSalt,\n          );\n\n          // Create buffers of salt and ciphertextAndNonce.\n          const salt = ciphertextAndNonceAndSalt.slice(0, saltLen);\n          return salt;\n        }\n      }\n      throw new Error(\n        `Unsupported encrypted data payload - ${encryptedDataStr}`,\n      );\n    } catch (e) {\n      throw new Error(`Unable to get salt - ${getErrorMessage(e)}`);\n    }\n  }\n\n  getIfEntriesHaveDifferentSalts(entries: string[]): boolean {\n    const salts = entries\n      .map((e) => {\n        try {\n          return this.getSalt(e);\n        } catch {\n          return;\n        }\n      })\n      .filter((s): s is Uint8Array<ArrayBuffer> => s !== undefined);\n\n    const strSet = new Set(salts.map((arr) => arr.toString()));\n    return strSet.size === salts.length;\n  }\n\n  async #encrypt(\n    plaintext: Uint8Array<ArrayBuffer>,\n    key: Uint8Array<ArrayBuffer>,\n  ): Promise<Uint8Array<ArrayBuffer>> {\n    // Encrypt and prepend nonce.\n    const { ciphertext, iv } = await encrypt(key, plaintext);\n\n    return concatBytes([iv, ciphertext]);\n  }\n\n  async #decrypt(\n    ciphertextAndNonce: Uint8Array<ArrayBuffer>,\n    key: Uint8Array<ArrayBuffer>,\n  ): Promise<Uint8Array<ArrayBuffer>> {\n    // Create buffers of nonce and ciphertext.\n    const nonce = ciphertextAndNonce.slice(0, IV_LENGTH);\n    const ciphertext = ciphertextAndNonce.slice(\n      IV_LENGTH,\n      ciphertextAndNonce.length,\n    );\n\n    // Decrypt and return result.\n    return decrypt(key, nonce, ciphertext);\n  }\n\n  async #getOrGenerateScryptKey(\n    password: string,\n    o: EncryptedPayload['o'],\n    salt?: Uint8Array<ArrayBuffer>,\n    nativeScryptCrypto?: NativeScrypt,\n  ): Promise<{ key: Uint8Array<ArrayBuffer>; salt: Uint8Array<ArrayBuffer> }> {\n    const hashedPassword = createSHA256Hash(password);\n\n    // Check if we already have the key cached\n    const cachedKey = salt\n      ? getCachedKeyBySalt(hashedPassword, salt)\n      : getCachedKeyGeneratedWithSharedSalt(hashedPassword);\n\n    if (cachedKey) {\n      return {\n        key: cachedKey.key,\n        salt: cachedKey.salt,\n      };\n    }\n\n    // Create a unique cache key for this KDF operation\n    const newSalt = salt ?? SHARED_SALT;\n    const cacheKey = this.#createKdfCacheKey(\n      hashedPassword,\n      o,\n      newSalt,\n      nativeScryptCrypto,\n    );\n\n    // Check if there's already an ongoing KDF operation with the same parameters\n    const existingPromise = this.#kdfPromiseCache.get(cacheKey);\n    if (existingPromise) {\n      return existingPromise;\n    }\n\n    // Limit cache size to prevent unbounded growth\n    if (this.#kdfPromiseCache.size >= MAX_KDF_PROMISE_CACHE_SIZE) {\n      // Remove the oldest entry (first inserted)\n      const firstKey = this.#kdfPromiseCache.keys().next().value;\n      if (firstKey) {\n        this.#kdfPromiseCache.delete(firstKey);\n      }\n    }\n\n    // Create and cache the promise for the KDF operation\n    const kdfPromise = this.#performKdfOperation(\n      password,\n      o,\n      newSalt,\n      hashedPassword,\n      nativeScryptCrypto,\n    );\n\n    // Cache the promise and set up cleanup\n    this.#kdfPromiseCache.set(cacheKey, kdfPromise);\n\n    // Clean up the cache after completion (both success and failure)\n    // eslint-disable-next-line no-void\n    void kdfPromise.finally(() => {\n      this.#kdfPromiseCache.delete(cacheKey);\n    });\n\n    return kdfPromise;\n  }\n\n  #createKdfCacheKey(\n    hashedPassword: string,\n    o: EncryptedPayload['o'],\n    salt: Uint8Array,\n    nativeScryptCrypto?: NativeScrypt,\n  ): string {\n    const saltStr = byteArrayToBase64(salt);\n    const hasNative = Boolean(nativeScryptCrypto);\n    return `${hashedPassword}:${o.N}:${o.r}:${o.p}:${o.dkLen}:${saltStr}:${hasNative}`;\n  }\n\n  async #performKdfOperation(\n    password: string,\n    o: EncryptedPayload['o'],\n    salt: Uint8Array<ArrayBuffer>,\n    hashedPassword: string,\n    nativeScryptCrypto?: NativeScrypt,\n  ): Promise<{ key: Uint8Array<ArrayBuffer>; salt: Uint8Array<ArrayBuffer> }> {\n    let newKey: Uint8Array<ArrayBuffer>;\n\n    if (nativeScryptCrypto) {\n      newKey = await nativeScryptCrypto(\n        stringToByteArray(password),\n        salt,\n        o.N,\n        o.r,\n        o.p,\n        o.dkLen,\n      );\n    } else {\n      newKey = (await scryptAsync(password, salt, {\n        N: o.N,\n        r: o.r,\n        p: o.p,\n        dkLen: o.dkLen,\n      })) as Uint8Array<ArrayBuffer>;\n    }\n\n    setCachedKey(hashedPassword, salt, newKey);\n\n    return {\n      key: newKey,\n      salt,\n    };\n  }\n}\n\nconst encryption = new EncryptorDecryptor();\nexport default encryption;\n\n/**\n * Receive a SHA256 hash from a given string\n *\n * @param data - input\n * @returns sha256 hash\n */\nexport function createSHA256Hash(data: string): string {\n  const hashedData = sha256(data);\n  return remove0x(bytesToHex(hashedData));\n}\n"]}

package/dist/shared/types/encryption.d.ts

@@ -1,2 +1,2 @@
-export declare type NativeScrypt = (passwd: Uint8Array, salt: Uint8Array, N: number, r: number, p: number, size: number) => Promise<Uint8Array>;
+export declare type NativeScrypt = (passwd: Uint8Array, salt: Uint8Array, N: number, r: number, p: number, size: number) => Promise<Uint8Array<ArrayBuffer>>;
 //# sourceMappingURL=encryption.d.ts.map

package/dist/shared/types/encryption.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"encryption.d.ts","sourceRoot":"","sources":["../../../src/shared/types/encryption.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,OAAO,MAAM,YAAY,GAAG,CACjC,MAAM,EAAE,UAAU,EAClB,IAAI,EAAE,UAAU,EAChB,CAAC,EAAE,MAAM,EACT,CAAC,EAAE,MAAM,EACT,CAAC,EAAE,MAAM,EACT,IAAI,EAAE,MAAM,KACT,OAAO,CAAC,UAAU,CAAC,CAAC"}
+{"version":3,"file":"encryption.d.ts","sourceRoot":"","sources":["../../../src/shared/types/encryption.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,OAAO,MAAM,YAAY,GAAG,CACjC,MAAM,EAAE,UAAU,EAClB,IAAI,EAAE,UAAU,EAChB,CAAC,EAAE,MAAM,EACT,CAAC,EAAE,MAAM,EACT,CAAC,EAAE,MAAM,EACT,IAAI,EAAE,MAAM,KACT,OAAO,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC"}

package/dist/shared/types/encryption.js.map

@@ -1 +1 @@
-{"version":3,"file":"encryption.js","sourceRoot":"","sources":["../../../src/shared/types/encryption.ts"],"names":[],"mappings":"","sourcesContent":["export declare type NativeScrypt = (\n  passwd: Uint8Array,\n  salt: Uint8Array,\n  N: number,\n  r: number,\n  p: number,\n  size: number,\n) => Promise<Uint8Array>;\n"]}
+{"version":3,"file":"encryption.js","sourceRoot":"","sources":["../../../src/shared/types/encryption.ts"],"names":[],"mappings":"","sourcesContent":["export declare type NativeScrypt = (\n  passwd: Uint8Array,\n  salt: Uint8Array,\n  N: number,\n  r: number,\n  p: number,\n  size: number,\n) => Promise<Uint8Array<ArrayBuffer>>;\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@metamask-previews/profile-sync-controller",
-  "version": "33.0.0-preview-0f8c056e2",
+  "version": "33.0.0-preview-c2be02bd4",
   "description": "The profile sync helps developers synchronize data across multiple clients and devices in a privacy-preserving way. All data saved in the user storage database is encrypted client-side to preserve privacy. The user storage provides a modular design, giving developers the flexibility to construct and manage their storage spaces in a way that best suits their needs",
   "keywords": [
     "Ethereum",
@@ -62,10 +62,10 @@
     "build:only-clean": "rimraf './dist' './tsconfig.build.tsbuildinfo'",
     "changelog:update": "../../scripts/update-changelog.sh @metamask/profile-sync-controller",
     "changelog:validate": "../../scripts/validate-changelog.sh @metamask/profile-sync-controller",
-    "lint:tsconfigs": "tsx ../../scripts/lint-tsconfigs/lint-tsconfigs.ts",
-    "lint:tsconfigs:fix": "tsx ../../scripts/lint-tsconfigs/lint-tsconfigs.ts --fix",
-    "messenger-action-types:check": "tsx ../../packages/messenger-cli/src/cli.ts --formatter oxfmt --esm --check",
-    "messenger-action-types:generate": "tsx ../../packages/messenger-cli/src/cli.ts --formatter oxfmt --esm --generate",
+    "lint:tsconfigs": "node --import ../../scripts/resolver/register.ts --experimental-transform-types ../../scripts/lint-tsconfigs/lint-tsconfigs.ts",
+    "lint:tsconfigs:fix": "node --import ../../scripts/resolver/register.ts --experimental-transform-types ../../scripts/lint-tsconfigs/lint-tsconfigs.ts --fix",
+    "messenger-action-types:check": "node --import ../../scripts/resolver/register.ts --experimental-transform-types ../../packages/messenger-cli/src/cli.ts --formatter oxfmt --esm --check",
+    "messenger-action-types:generate": "node --import ../../scripts/resolver/register.ts --experimental-transform-types ../../packages/messenger-cli/src/cli.ts --formatter oxfmt --esm --generate",
     "since-latest-release": "../../scripts/since-latest-release.sh",
     "test": "NODE_OPTIONS=--experimental-vm-modules jest --reporters=jest-silent-reporter",
     "test:clean": "NODE_OPTIONS=--experimental-vm-modules jest --clearCache",
@@ -76,13 +76,13 @@
     "@metamask/address-book-controller": "^8.0.0",
     "@metamask/base-controller": "^10.0.0",
     "@metamask/controller-utils": "^13.0.0",
+    "@metamask/cryptography": "^1.1.0",
     "@metamask/key-tree": "^10.1.1",
     "@metamask/keyring-controller": "^28.1.0",
     "@metamask/messenger": "^3.0.0",
     "@metamask/seedless-onboarding-controller": "^11.0.1",
     "@metamask/superstruct": "^3.4.1",
     "@metamask/utils": "^12.0.0",
-    "@noble/ciphers": "^1.3.0",
     "@noble/curves": "^1.9.2",
     "@noble/hashes": "^1.8.0",
     "@signinwithethereum/siwe": "^4.2.1",
@@ -107,7 +107,6 @@
     "nock": "^13.5.6",
     "rimraf": "^6.1.3",
     "ts-jest": "^29.4.14",
-    "tsx": "^4.23.15",
     "typedoc": "^0.25.13",
     "typedoc-plugin-missing-exports": "^2.0.0",
     "typescript": "npm:@typescript/typescript6@^6.0.2",