@metamask-previews/seedless-onboarding-controller 7.1.0-preview-40468f94 → 7.1.0-preview-fb7aa07ff

package/dist/index.d.mts

@@ -1,6 +1,5 @@
 export { SeedlessOnboardingController, getInitialSeedlessOnboardingControllerStateWithDefaults as getDefaultSeedlessOnboardingControllerState, } from "./SeedlessOnboardingController.mjs";
-export type { SeedlessOnboardingControllerOptions, SeedlessOnboardingControllerMessenger, SeedlessOnboardingControllerGetStateAction, SeedlessOnboardingControllerGetAccessTokenAction, SeedlessOnboardingControllerStateChangeEvent, SeedlessOnboardingControllerActions, SeedlessOnboardingControllerEvents, } from "./SeedlessOnboardingController.mjs";
-export type { AuthenticatedUserDetails, SocialBackupsMetadata, SeedlessOnboardingControllerState, ToprfKeyDeriver, RecoveryErrorData, } from "./types.mjs";
+export type { AuthenticatedUserDetails, SocialBackupsMetadata, SeedlessOnboardingControllerState, SeedlessOnboardingControllerOptions, SeedlessOnboardingControllerMessenger, SeedlessOnboardingControllerGetStateAction, SeedlessOnboardingControllerStateChangeEvent, SeedlessOnboardingControllerActions, SeedlessOnboardingControllerEvents, ToprfKeyDeriver, RecoveryErrorData, } from "./types.mjs";
 export { Web3AuthNetwork, SeedlessOnboardingControllerErrorMessage, AuthConnection, SecretType, } from "./constants.mjs";
 export { SecretMetadata } from "./SecretMetadata.mjs";
 export { RecoveryError } from "./errors.mjs";

package/dist/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4BAA4B,EAC5B,uDAAuD,IAAI,2CAA2C,GACvG,2CAAuC;AACxC,YAAY,EACV,mCAAmC,EACnC,qCAAqC,EACrC,0CAA0C,EAC1C,gDAAgD,EAChD,4CAA4C,EAC5C,mCAAmC,EACnC,kCAAkC,GACnC,2CAAuC;AACxC,YAAY,EACV,wBAAwB,EACxB,qBAAqB,EACrB,iCAAiC,EACjC,eAAe,EACf,iBAAiB,GAClB,oBAAgB;AACjB,OAAO,EACL,eAAe,EACf,wCAAwC,EACxC,cAAc,EACd,UAAU,GACX,wBAAoB;AACrB,OAAO,EAAE,cAAc,EAAE,6BAAyB;AAClD,OAAO,EAAE,aAAa,EAAE,qBAAiB"}
+{"version":3,"file":"index.d.mts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4BAA4B,EAC5B,uDAAuD,IAAI,2CAA2C,GACvG,2CAAuC;AACxC,YAAY,EACV,wBAAwB,EACxB,qBAAqB,EACrB,iCAAiC,EACjC,mCAAmC,EACnC,qCAAqC,EACrC,0CAA0C,EAC1C,4CAA4C,EAC5C,mCAAmC,EACnC,kCAAkC,EAClC,eAAe,EACf,iBAAiB,GAClB,oBAAgB;AACjB,OAAO,EACL,eAAe,EACf,wCAAwC,EACxC,cAAc,EACd,UAAU,GACX,wBAAoB;AACrB,OAAO,EAAE,cAAc,EAAE,6BAAyB;AAClD,OAAO,EAAE,aAAa,EAAE,qBAAiB"}

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4BAA4B,EAC5B,uDAAuD,IAAI,2CAA2C,EACvG,2CAAuC;AAiBxC,OAAO,EACL,eAAe,EACf,wCAAwC,EACxC,cAAc,EACd,UAAU,EACX,wBAAoB;AACrB,OAAO,EAAE,cAAc,EAAE,6BAAyB;AAClD,OAAO,EAAE,aAAa,EAAE,qBAAiB","sourcesContent":["export {\n  SeedlessOnboardingController,\n  getInitialSeedlessOnboardingControllerStateWithDefaults as getDefaultSeedlessOnboardingControllerState,\n} from './SeedlessOnboardingController';\nexport type {\n  SeedlessOnboardingControllerOptions,\n  SeedlessOnboardingControllerMessenger,\n  SeedlessOnboardingControllerGetStateAction,\n  SeedlessOnboardingControllerGetAccessTokenAction,\n  SeedlessOnboardingControllerStateChangeEvent,\n  SeedlessOnboardingControllerActions,\n  SeedlessOnboardingControllerEvents,\n} from './SeedlessOnboardingController';\nexport type {\n  AuthenticatedUserDetails,\n  SocialBackupsMetadata,\n  SeedlessOnboardingControllerState,\n  ToprfKeyDeriver,\n  RecoveryErrorData,\n} from './types';\nexport {\n  Web3AuthNetwork,\n  SeedlessOnboardingControllerErrorMessage,\n  AuthConnection,\n  SecretType,\n} from './constants';\nexport { SecretMetadata } from './SecretMetadata';\nexport { RecoveryError } from './errors';\n"]}
+{"version":3,"file":"index.mjs","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4BAA4B,EAC5B,uDAAuD,IAAI,2CAA2C,EACvG,2CAAuC;AAcxC,OAAO,EACL,eAAe,EACf,wCAAwC,EACxC,cAAc,EACd,UAAU,EACX,wBAAoB;AACrB,OAAO,EAAE,cAAc,EAAE,6BAAyB;AAClD,OAAO,EAAE,aAAa,EAAE,qBAAiB","sourcesContent":["export {\n  SeedlessOnboardingController,\n  getInitialSeedlessOnboardingControllerStateWithDefaults as getDefaultSeedlessOnboardingControllerState,\n} from './SeedlessOnboardingController';\nexport type {\n  AuthenticatedUserDetails,\n  SocialBackupsMetadata,\n  SeedlessOnboardingControllerState,\n  SeedlessOnboardingControllerOptions,\n  SeedlessOnboardingControllerMessenger,\n  SeedlessOnboardingControllerGetStateAction,\n  SeedlessOnboardingControllerStateChangeEvent,\n  SeedlessOnboardingControllerActions,\n  SeedlessOnboardingControllerEvents,\n  ToprfKeyDeriver,\n  RecoveryErrorData,\n} from './types';\nexport {\n  Web3AuthNetwork,\n  SeedlessOnboardingControllerErrorMessage,\n  AuthConnection,\n  SecretType,\n} from './constants';\nexport { SecretMetadata } from './SecretMetadata';\nexport { RecoveryError } from './errors';\n"]}

package/dist/types.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"types.cjs","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { Encryptor } from '@metamask/keyring-controller';\nimport type { KeyPair, NodeAuthTokens } from '@metamask/toprf-secure-backup';\nimport type { MutexInterface } from 'async-mutex';\n\nimport type {\n  AuthConnection,\n  SecretMetadataVersion,\n  SecretType,\n} from './constants';\n\n/**\n * The backup state of the secret data.\n * Each secret data added/restored will be stored in the state locally.\n *\n * This is used to track the backup status of the secret data.\n */\nexport type SocialBackupsMetadata = {\n  /**\n   * The hash of the secret data.\n   */\n  hash: string;\n\n  /**\n   * The type of the secret data.\n   */\n  type: SecretType;\n\n  /**\n   * The optional keyringId to identify the keyring that the secret data belongs to.\n   *\n   * This is only required for `Mnemonic` secret data.\n   */\n  keyringId?: string;\n};\n\nexport type AuthenticatedUserDetails = {\n  /**\n   * Type of social login provider.\n   */\n  authConnection: AuthConnection;\n\n  /**\n   * The node auth tokens from OAuth User authentication after the Social login.\n   *\n   * This values are used to authenticate users when they go through the Seedless Onboarding flow.\n   */\n  nodeAuthTokens: NodeAuthTokens;\n\n  /**\n   * OAuth connection id from web3auth dashboard.\n   */\n  authConnectionId: string;\n\n  /**\n   * The optional grouped authConnectionId to authenticate the user with Web3Auth network.\n   */\n  groupedAuthConnectionId?: string;\n\n  /**\n   * The user email or ID from Social login.\n   */\n  userId: string;\n\n  /**\n   * The user email from Social login.\n   */\n  socialLoginEmail: string;\n\n  /**\n   * The refresh token used to refresh expired nodeAuthTokens.\n   */\n  refreshToken: string;\n};\n\nexport type SRPBackedUpUserDetails = {\n  /**\n   * The public key of the authentication key pair in base64 format.\n   *\n   * This value is used to check if the password is outdated compare to the global password and find backed up old password.\n   */\n  authPubKey: string;\n};\n\n/**\n * The data of the recovery error.\n */\nexport type RecoveryErrorData = {\n  /**\n   * The remaining time in seconds before the user can try again.\n   */\n  remainingTime: number;\n\n  /**\n   * The number of attempts made by the user.\n   */\n  numberOfAttempts: number;\n};\n\n// State\nexport type SeedlessOnboardingControllerState =\n  Partial<AuthenticatedUserDetails> &\n    Partial<SRPBackedUpUserDetails> & {\n      /**\n       * Encrypted array of serialized keyrings data.\n       */\n      vault?: string;\n\n      /**\n       * The hashes of the seed phrase backups.\n       *\n       * This is to facilitate the UI to display backup status of the seed phrases.\n       */\n      socialBackupsMetadata: SocialBackupsMetadata[];\n\n      /**\n       * The encryption key derived from the password and used to encrypt\n       * the vault.\n       */\n      vaultEncryptionKey?: string;\n\n      /**\n       * The salt used to derive the encryption key from the password.\n       */\n      vaultEncryptionSalt?: string;\n\n      /**\n       * Cache for checkIsPasswordOutdated result and timestamp.\n       */\n      passwordOutdatedCache?: { isExpiredPwd: boolean; timestamp: number };\n\n      /**\n       * The refresh token used to refresh expired nodeAuthTokens.\n       * This is persisted in state.\n       */\n      refreshToken?: string;\n\n      /**\n       * The revoke token used to revoke refresh token and get new refresh token and new revoke token.\n       * This is temporarily stored in state during authentication and then persisted in the vault.\n       */\n      revokeToken?: string;\n\n      /**\n       * The refresh token and revoke token to be revoked.\n       * This is persisted in state to revoke old refresh token when possible.\n       */\n      pendingToBeRevokedTokens?: {\n        refreshToken: string;\n        revokeToken: string;\n      }[];\n\n      /**\n       * The encrypted seedless encryption key used to encrypt the seedless vault.\n       */\n      encryptedSeedlessEncryptionKey?: string;\n\n      /**\n       * The encrypted keyring encryption key used to encrypt the keyring vault.\n       */\n      encryptedKeyringEncryptionKey?: string;\n\n      /**\n       * The access token used for pairing with profile sync auth service and to access other services.\n       */\n      accessToken?: string;\n\n      /**\n       * The metadata access token used to access the metadata service.\n       *\n       * This token is used to access the metadata service before the vault is created or unlocked.\n       */\n      metadataAccessToken?: string;\n\n      /**\n       * Whether the user is authenticated with social login and TOPRF service.\n       */\n      isSeedlessOnboardingUserAuthenticated: boolean;\n    };\n\n/**\n * Encryptor interface for encrypting and decrypting seedless onboarding vault.\n */\nexport type VaultEncryptor<EncryptionKey, SupportedKeyDerivationParams> =\n  Encryptor<EncryptionKey, SupportedKeyDerivationParams>;\n\n/**\n * Additional key deriver for the TOPRF client.\n *\n * This is a function that takes a seed and salt and returns a key in bytes (Uint8Array).\n * It is used as an additional step during key derivation. This can be used, for example, to inject a slow key\n * derivation step to protect against local brute force attacks on the password.\n *\n * @default browser-passworder @link https://github.com/MetaMask/browser-passworder\n */\nexport type ToprfKeyDeriver = {\n  /**\n   * Derive a key from a seed and salt.\n   *\n   * @param seed - The seed to derive the key from.\n   * @param salt - The salt to derive the key from.\n   * @returns The derived key.\n   */\n  deriveKey: (seed: Uint8Array, salt: Uint8Array) => Promise<Uint8Array>;\n};\n\nexport type RefreshJWTToken = (params: {\n  connection: AuthConnection;\n  refreshToken: string;\n}) => Promise<{\n  idTokens: string[];\n  accessToken: string;\n  metadataAccessToken: string;\n}>;\n\nexport type RevokeRefreshToken = (params: {\n  connection: AuthConnection;\n  revokeToken: string;\n}) => Promise<void>;\n\nexport type RenewRefreshToken = (params: {\n  connection: AuthConnection;\n  revokeToken: string;\n}) => Promise<{\n  newRevokeToken: string;\n  newRefreshToken: string;\n}>;\n\n/**\n * A function executed within a mutually exclusive lock, with\n * a mutex releaser in its option bag.\n *\n * @param releaseLock - A function to release the lock.\n */\nexport type MutuallyExclusiveCallback<Result> = ({\n  releaseLock,\n}: {\n  releaseLock: MutexInterface.Releaser;\n}) => Promise<Result>;\n\n/**\n * The structure of the data which is serialized and stored in the vault.\n */\nexport type VaultData = {\n  /**\n   * The encryption key to encrypt the seed phrase.\n   */\n  toprfEncryptionKey: string;\n  /**\n   * The encryption key to encrypt the password.\n   */\n  toprfPwEncryptionKey: string;\n  /**\n   * The authentication key pair to authenticate the TOPRF.\n   */\n  toprfAuthKeyPair: string;\n  /**\n   * The revoke token to revoke refresh token and get new refresh token and new revoke token.\n   * The revoke token may no longer be available after a large number of password changes. In this case, re-authentication is advised.\n   */\n  revokeToken: string;\n  /**\n   * The access token used for pairing with profile sync auth service and to access other services.\n   */\n  accessToken: string;\n};\n\nexport type DeserializedVaultData = Pick<\n  VaultData,\n  'accessToken' | 'revokeToken'\n> & {\n  toprfEncryptionKey: Uint8Array;\n  toprfPwEncryptionKey: Uint8Array;\n  toprfAuthKeyPair: KeyPair;\n};\n\nexport type SecretDataType = Uint8Array | string | number;\n\n/**\n * The constructor options for the seed phrase metadata.\n */\nexport type SecretMetadataOptions = {\n  /**\n   * The timestamp when the seed phrase was created.\n   */\n  timestamp: number;\n  /**\n   * The type of the seed phrase.\n   */\n  type: SecretType;\n  /**\n   * The version of the seed phrase metadata.\n   */\n  version: SecretMetadataVersion;\n};\n\nexport type DecodedNodeAuthToken = {\n  /**\n   * The expiration time of the token in seconds.\n   */\n  exp: number;\n  // eslint-disable-next-line @typescript-eslint/naming-convention -- to match with the actual token\n  temp_key_x: string;\n  // eslint-disable-next-line @typescript-eslint/naming-convention -- to match with the actual token\n  temp_key_y: string;\n  aud: string;\n  // eslint-disable-next-line @typescript-eslint/naming-convention -- to match with the actual token\n  verifier_name: string;\n  // eslint-disable-next-line @typescript-eslint/naming-convention -- to match with the actual token\n  verifier_id: string;\n  scope: string;\n  signature: string;\n};\n\nexport type DecodedBaseJWTToken = {\n  /**\n   * The expiration time of the token in seconds.\n   */\n  exp: number;\n  /**\n   * The issued at time of the token in seconds.\n   */\n  iat: number;\n  /**\n   * The audience of the token.\n   */\n  aud: string;\n  /**\n   * The issuer of the token.\n   */\n  iss: string;\n  /**\n   * The subject of the token.\n   */\n  sub: string;\n};\n"]}
+{"version":3,"file":"types.cjs","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  ControllerGetStateAction,\n  ControllerStateChangeEvent,\n} from '@metamask/base-controller';\nimport type { Encryptor } from '@metamask/keyring-controller';\nimport type { Messenger } from '@metamask/messenger';\nimport type { KeyPair, NodeAuthTokens } from '@metamask/toprf-secure-backup';\nimport type { MutexInterface } from 'async-mutex';\n\nimport type {\n  AuthConnection,\n  controllerName,\n  SecretMetadataVersion,\n  SecretType,\n  Web3AuthNetwork,\n} from './constants';\n\n/**\n * The backup state of the secret data.\n * Each secret data added/restored will be stored in the state locally.\n *\n * This is used to track the backup status of the secret data.\n */\nexport type SocialBackupsMetadata = {\n  /**\n   * The hash of the secret data.\n   */\n  hash: string;\n\n  /**\n   * The type of the secret data.\n   */\n  type: SecretType;\n\n  /**\n   * The optional keyringId to identify the keyring that the secret data belongs to.\n   *\n   * This is only required for `Mnemonic` secret data.\n   */\n  keyringId?: string;\n};\n\nexport type AuthenticatedUserDetails = {\n  /**\n   * Type of social login provider.\n   */\n  authConnection: AuthConnection;\n\n  /**\n   * The node auth tokens from OAuth User authentication after the Social login.\n   *\n   * This values are used to authenticate users when they go through the Seedless Onboarding flow.\n   */\n  nodeAuthTokens: NodeAuthTokens;\n\n  /**\n   * OAuth connection id from web3auth dashboard.\n   */\n  authConnectionId: string;\n\n  /**\n   * The optional grouped authConnectionId to authenticate the user with Web3Auth network.\n   */\n  groupedAuthConnectionId?: string;\n\n  /**\n   * The user email or ID from Social login.\n   */\n  userId: string;\n\n  /**\n   * The user email from Social login.\n   */\n  socialLoginEmail: string;\n\n  /**\n   * The refresh token used to refresh expired nodeAuthTokens.\n   */\n  refreshToken: string;\n};\n\nexport type SRPBackedUpUserDetails = {\n  /**\n   * The public key of the authentication key pair in base64 format.\n   *\n   * This value is used to check if the password is outdated compare to the global password and find backed up old password.\n   */\n  authPubKey: string;\n};\n\n/**\n * The data of the recovery error.\n */\nexport type RecoveryErrorData = {\n  /**\n   * The remaining time in seconds before the user can try again.\n   */\n  remainingTime: number;\n\n  /**\n   * The number of attempts made by the user.\n   */\n  numberOfAttempts: number;\n};\n\n// State\nexport type SeedlessOnboardingControllerState =\n  Partial<AuthenticatedUserDetails> &\n    Partial<SRPBackedUpUserDetails> & {\n      /**\n       * Encrypted array of serialized keyrings data.\n       */\n      vault?: string;\n\n      /**\n       * The hashes of the seed phrase backups.\n       *\n       * This is to facilitate the UI to display backup status of the seed phrases.\n       */\n      socialBackupsMetadata: SocialBackupsMetadata[];\n\n      /**\n       * The encryption key derived from the password and used to encrypt\n       * the vault.\n       */\n      vaultEncryptionKey?: string;\n\n      /**\n       * The salt used to derive the encryption key from the password.\n       */\n      vaultEncryptionSalt?: string;\n\n      /**\n       * Cache for checkIsPasswordOutdated result and timestamp.\n       */\n      passwordOutdatedCache?: { isExpiredPwd: boolean; timestamp: number };\n\n      /**\n       * The refresh token used to refresh expired nodeAuthTokens.\n       * This is persisted in state.\n       */\n      refreshToken?: string;\n\n      /**\n       * The revoke token used to revoke refresh token and get new refresh token and new revoke token.\n       * This is temporarily stored in state during authentication and then persisted in the vault.\n       */\n      revokeToken?: string;\n\n      /**\n       * The refresh token and revoke token to be revoked.\n       * This is persisted in state to revoke old refresh token when possible.\n       */\n      pendingToBeRevokedTokens?: {\n        refreshToken: string;\n        revokeToken: string;\n      }[];\n\n      /**\n       * The encrypted seedless encryption key used to encrypt the seedless vault.\n       */\n      encryptedSeedlessEncryptionKey?: string;\n\n      /**\n       * The encrypted keyring encryption key used to encrypt the keyring vault.\n       */\n      encryptedKeyringEncryptionKey?: string;\n\n      /**\n       * The access token used for pairing with profile sync auth service and to access other services.\n       */\n      accessToken?: string;\n\n      /**\n       * The metadata access token used to access the metadata service.\n       *\n       * This token is used to access the metadata service before the vault is created or unlocked.\n       */\n      metadataAccessToken?: string;\n\n      /**\n       * Whether the user is authenticated with social login and TOPRF service.\n       */\n      isSeedlessOnboardingUserAuthenticated: boolean;\n    };\n\n// Actions\nexport type SeedlessOnboardingControllerGetStateAction =\n  ControllerGetStateAction<\n    typeof controllerName,\n    SeedlessOnboardingControllerState\n  >;\nexport type SeedlessOnboardingControllerActions =\n  SeedlessOnboardingControllerGetStateAction;\n\ntype AllowedActions = never;\n\n// Events\nexport type SeedlessOnboardingControllerStateChangeEvent =\n  ControllerStateChangeEvent<\n    typeof controllerName,\n    SeedlessOnboardingControllerState\n  >;\nexport type SeedlessOnboardingControllerEvents =\n  SeedlessOnboardingControllerStateChangeEvent;\n\ntype AllowedEvents = never;\n\n// Messenger\nexport type SeedlessOnboardingControllerMessenger = Messenger<\n  typeof controllerName,\n  SeedlessOnboardingControllerActions | AllowedActions,\n  SeedlessOnboardingControllerEvents | AllowedEvents\n>;\n\n/**\n * Encryptor interface for encrypting and decrypting seedless onboarding vault.\n */\nexport type VaultEncryptor<EncryptionKey, SupportedKeyDerivationParams> = Omit<\n  Encryptor<EncryptionKey, SupportedKeyDerivationParams>,\n  'encryptWithKey'\n>;\n\n/**\n * Additional key deriver for the TOPRF client.\n *\n * This is a function that takes a seed and salt and returns a key in bytes (Uint8Array).\n * It is used as an additional step during key derivation. This can be used, for example, to inject a slow key\n * derivation step to protect against local brute force attacks on the password.\n *\n * @default browser-passworder @link https://github.com/MetaMask/browser-passworder\n */\nexport type ToprfKeyDeriver = {\n  /**\n   * Derive a key from a seed and salt.\n   *\n   * @param seed - The seed to derive the key from.\n   * @param salt - The salt to derive the key from.\n   * @returns The derived key.\n   */\n  deriveKey: (seed: Uint8Array, salt: Uint8Array) => Promise<Uint8Array>;\n};\n\nexport type RefreshJWTToken = (params: {\n  connection: AuthConnection;\n  refreshToken: string;\n}) => Promise<{\n  idTokens: string[];\n  accessToken: string;\n  metadataAccessToken: string;\n}>;\n\nexport type RevokeRefreshToken = (params: {\n  connection: AuthConnection;\n  revokeToken: string;\n}) => Promise<void>;\n\nexport type RenewRefreshToken = (params: {\n  connection: AuthConnection;\n  revokeToken: string;\n}) => Promise<{\n  newRevokeToken: string;\n  newRefreshToken: string;\n}>;\n\n/**\n * Seedless Onboarding Controller Options.\n *\n * @param messenger - The messenger to use for this controller.\n * @param state - The initial state to set on this controller.\n * @param encryptor - The encryptor to use for encrypting and decrypting seedless onboarding vault.\n */\nexport type SeedlessOnboardingControllerOptions<\n  EncryptionKey,\n  SupportedKeyDerivationParams,\n> = {\n  messenger: SeedlessOnboardingControllerMessenger;\n\n  /**\n   * Initial state to set on this controller.\n   */\n  state?: Partial<SeedlessOnboardingControllerState>;\n\n  /**\n   * Encryptor to use for encrypting and decrypting seedless onboarding vault.\n   *\n   * @default browser-passworder @link https://github.com/MetaMask/browser-passworder\n   */\n  encryptor: VaultEncryptor<EncryptionKey, SupportedKeyDerivationParams>;\n\n  /**\n   * A function to get a new jwt token using refresh token.\n   */\n  refreshJWTToken: RefreshJWTToken;\n\n  /**\n   * A function to revoke the refresh token.\n   */\n  revokeRefreshToken: RevokeRefreshToken;\n\n  /**\n   * A function to renew the refresh token and get new revoke token.\n   */\n  renewRefreshToken: RenewRefreshToken;\n\n  /**\n   * Optional key derivation interface for the TOPRF client.\n   *\n   * If provided, it will be used as an additional step during\n   * key derivation. This can be used, for example, to inject a slow key\n   * derivation step to protect against local brute force attacks on the\n   * password.\n   *\n   * @default browser-passworder @link https://github.com/MetaMask/browser-passworder\n   */\n  toprfKeyDeriver?: ToprfKeyDeriver;\n\n  /**\n   * Type of Web3Auth network to be used for the Seedless Onboarding flow.\n   *\n   * @default Web3AuthNetwork.Mainnet\n   */\n  network?: Web3AuthNetwork;\n\n  /**\n   * The TTL of the password outdated cache in milliseconds.\n   *\n   * @default PASSWORD_OUTDATED_CACHE_TTL_MS\n   */\n  passwordOutdatedCacheTTL?: number;\n};\n\n/**\n * A function executed within a mutually exclusive lock, with\n * a mutex releaser in its option bag.\n *\n * @param releaseLock - A function to release the lock.\n */\nexport type MutuallyExclusiveCallback<Result> = ({\n  releaseLock,\n}: {\n  releaseLock: MutexInterface.Releaser;\n}) => Promise<Result>;\n\n/**\n * The structure of the data which is serialized and stored in the vault.\n */\nexport type VaultData = {\n  /**\n   * The encryption key to encrypt the seed phrase.\n   */\n  toprfEncryptionKey: string;\n  /**\n   * The encryption key to encrypt the password.\n   */\n  toprfPwEncryptionKey: string;\n  /**\n   * The authentication key pair to authenticate the TOPRF.\n   */\n  toprfAuthKeyPair: string;\n  /**\n   * The revoke token to revoke refresh token and get new refresh token and new revoke token.\n   * The revoke token may no longer be available after a large number of password changes. In this case, re-authentication is advised.\n   */\n  revokeToken: string;\n  /**\n   * The access token used for pairing with profile sync auth service and to access other services.\n   */\n  accessToken: string;\n};\n\nexport type DeserializedVaultData = Pick<\n  VaultData,\n  'accessToken' | 'revokeToken'\n> & {\n  toprfEncryptionKey: Uint8Array;\n  toprfPwEncryptionKey: Uint8Array;\n  toprfAuthKeyPair: KeyPair;\n};\n\nexport type SecretDataType = Uint8Array | string | number;\n\n/**\n * The constructor options for the seed phrase metadata.\n */\nexport type SecretMetadataOptions = {\n  /**\n   * The timestamp when the seed phrase was created.\n   */\n  timestamp: number;\n  /**\n   * The type of the seed phrase.\n   */\n  type: SecretType;\n  /**\n   * The version of the seed phrase metadata.\n   */\n  version: SecretMetadataVersion;\n};\n\nexport type DecodedNodeAuthToken = {\n  /**\n   * The expiration time of the token in seconds.\n   */\n  exp: number;\n  // eslint-disable-next-line @typescript-eslint/naming-convention -- to match with the actual token\n  temp_key_x: string;\n  // eslint-disable-next-line @typescript-eslint/naming-convention -- to match with the actual token\n  temp_key_y: string;\n  aud: string;\n  // eslint-disable-next-line @typescript-eslint/naming-convention -- to match with the actual token\n  verifier_name: string;\n  // eslint-disable-next-line @typescript-eslint/naming-convention -- to match with the actual token\n  verifier_id: string;\n  scope: string;\n  signature: string;\n};\n\nexport type DecodedBaseJWTToken = {\n  /**\n   * The expiration time of the token in seconds.\n   */\n  exp: number;\n  /**\n   * The issued at time of the token in seconds.\n   */\n  iat: number;\n  /**\n   * The audience of the token.\n   */\n  aud: string;\n  /**\n   * The issuer of the token.\n   */\n  iss: string;\n  /**\n   * The subject of the token.\n   */\n  sub: string;\n};\n"]}

package/dist/types.d.cts

@@ -1,7 +1,9 @@
+import type { ControllerGetStateAction, ControllerStateChangeEvent } from "@metamask/base-controller";
 import type { Encryptor } from "@metamask/keyring-controller";
+import type { Messenger } from "@metamask/messenger";
 import type { KeyPair, NodeAuthTokens } from "@metamask/toprf-secure-backup";
 import type { MutexInterface } from "async-mutex";
-import type { AuthConnection, SecretMetadataVersion, SecretType } from "./constants.cjs";
+import type { AuthConnection, controllerName, SecretMetadataVersion, SecretType, Web3AuthNetwork } from "./constants.cjs";
 /**
  * The backup state of the secret data.
  * Each secret data added/restored will be stored in the state locally.
@@ -145,10 +147,17 @@ export type SeedlessOnboardingControllerState = Partial<AuthenticatedUserDetails
      */
     isSeedlessOnboardingUserAuthenticated: boolean;
 };
+export type SeedlessOnboardingControllerGetStateAction = ControllerGetStateAction<typeof controllerName, SeedlessOnboardingControllerState>;
+export type SeedlessOnboardingControllerActions = SeedlessOnboardingControllerGetStateAction;
+type AllowedActions = never;
+export type SeedlessOnboardingControllerStateChangeEvent = ControllerStateChangeEvent<typeof controllerName, SeedlessOnboardingControllerState>;
+export type SeedlessOnboardingControllerEvents = SeedlessOnboardingControllerStateChangeEvent;
+type AllowedEvents = never;
+export type SeedlessOnboardingControllerMessenger = Messenger<typeof controllerName, SeedlessOnboardingControllerActions | AllowedActions, SeedlessOnboardingControllerEvents | AllowedEvents>;
 /**
  * Encryptor interface for encrypting and decrypting seedless onboarding vault.
  */
-export type VaultEncryptor<EncryptionKey, SupportedKeyDerivationParams> = Encryptor<EncryptionKey, SupportedKeyDerivationParams>;
+export type VaultEncryptor<EncryptionKey, SupportedKeyDerivationParams> = Omit<Encryptor<EncryptionKey, SupportedKeyDerivationParams>, 'encryptWithKey'>;
 /**
  * Additional key deriver for the TOPRF client.
  *
@@ -187,6 +196,61 @@ export type RenewRefreshToken = (params: {
     newRevokeToken: string;
     newRefreshToken: string;
 }>;
+/**
+ * Seedless Onboarding Controller Options.
+ *
+ * @param messenger - The messenger to use for this controller.
+ * @param state - The initial state to set on this controller.
+ * @param encryptor - The encryptor to use for encrypting and decrypting seedless onboarding vault.
+ */
+export type SeedlessOnboardingControllerOptions<EncryptionKey, SupportedKeyDerivationParams> = {
+    messenger: SeedlessOnboardingControllerMessenger;
+    /**
+     * Initial state to set on this controller.
+     */
+    state?: Partial<SeedlessOnboardingControllerState>;
+    /**
+     * Encryptor to use for encrypting and decrypting seedless onboarding vault.
+     *
+     * @default browser-passworder @link https://github.com/MetaMask/browser-passworder
+     */
+    encryptor: VaultEncryptor<EncryptionKey, SupportedKeyDerivationParams>;
+    /**
+     * A function to get a new jwt token using refresh token.
+     */
+    refreshJWTToken: RefreshJWTToken;
+    /**
+     * A function to revoke the refresh token.
+     */
+    revokeRefreshToken: RevokeRefreshToken;
+    /**
+     * A function to renew the refresh token and get new revoke token.
+     */
+    renewRefreshToken: RenewRefreshToken;
+    /**
+     * Optional key derivation interface for the TOPRF client.
+     *
+     * If provided, it will be used as an additional step during
+     * key derivation. This can be used, for example, to inject a slow key
+     * derivation step to protect against local brute force attacks on the
+     * password.
+     *
+     * @default browser-passworder @link https://github.com/MetaMask/browser-passworder
+     */
+    toprfKeyDeriver?: ToprfKeyDeriver;
+    /**
+     * Type of Web3Auth network to be used for the Seedless Onboarding flow.
+     *
+     * @default Web3AuthNetwork.Mainnet
+     */
+    network?: Web3AuthNetwork;
+    /**
+     * The TTL of the password outdated cache in milliseconds.
+     *
+     * @default PASSWORD_OUTDATED_CACHE_TTL_MS
+     */
+    passwordOutdatedCacheTTL?: number;
+};
 /**
  * A function executed within a mutually exclusive lock, with
  * a mutex releaser in its option bag.
@@ -280,4 +344,5 @@ export type DecodedBaseJWTToken = {
      */
     sub: string;
 };
+export {};
 //# sourceMappingURL=types.d.cts.map

package/dist/types.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.cts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,qCAAqC;AAC9D,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,sCAAsC;AAC7E,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAoB;AAElD,OAAO,KAAK,EACV,cAAc,EACd,qBAAqB,EACrB,UAAU,EACX,wBAAoB;AAErB;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,IAAI,EAAE,UAAU,CAAC;IAEjB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC;;OAEG;IACH,cAAc,EAAE,cAAc,CAAC;IAE/B;;;;OAIG;IACH,cAAc,EAAE,cAAc,CAAC;IAE/B;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAC;IAEzB;;OAEG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAEjC;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAC;IAEzB;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC;;;;OAIG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B;;OAEG;IACH,aAAa,EAAE,MAAM,CAAC;IAEtB;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC;AAGF,MAAM,MAAM,iCAAiC,GAC3C,OAAO,CAAC,wBAAwB,CAAC,GAC/B,OAAO,CAAC,sBAAsB,CAAC,GAAG;IAChC;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;;;OAIG;IACH,qBAAqB,EAAE,qBAAqB,EAAE,CAAC;IAE/C;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5B;;OAEG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B;;OAEG;IACH,qBAAqB,CAAC,EAAE;QAAE,YAAY,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAErE;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,wBAAwB,CAAC,EAAE;QACzB,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;KACrB,EAAE,CAAC;IAEJ;;OAEG;IACH,8BAA8B,CAAC,EAAE,MAAM,CAAC;IAExC;;OAEG;IACH,6BAA6B,CAAC,EAAE,MAAM,CAAC;IAEvC;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B;;OAEG;IACH,qCAAqC,EAAE,OAAO,CAAC;CAChD,CAAC;AAEN;;GAEG;AACH,MAAM,MAAM,cAAc,CAAC,aAAa,EAAE,4BAA4B,IACpE,SAAS,CAAC,aAAa,EAAE,4BAA4B,CAAC,CAAC;AAEzD;;;;;;;;GAQG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B;;;;;;OAMG;IACH,SAAS,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;CACxE,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE;IACrC,UAAU,EAAE,cAAc,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;CACtB,KAAK,OAAO,CAAC;IACZ,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,EAAE,MAAM,CAAC;CAC7B,CAAC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE;IACxC,UAAU,EAAE,cAAc,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;CACrB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAEpB,MAAM,MAAM,iBAAiB,GAAG,CAAC,MAAM,EAAE;IACvC,UAAU,EAAE,cAAc,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;CACrB,KAAK,OAAO,CAAC;IACZ,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,MAAM,yBAAyB,CAAC,MAAM,IAAI,CAAC,EAC/C,WAAW,GACZ,EAAE;IACD,WAAW,EAAE,cAAc,CAAC,QAAQ,CAAC;CACtC,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAEtB;;GAEG;AACH,MAAM,MAAM,SAAS,GAAG;IACtB;;OAEG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;OAEG;IACH,oBAAoB,EAAE,MAAM,CAAC;IAC7B;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG,IAAI,CACtC,SAAS,EACT,aAAa,GAAG,aAAa,CAC9B,GAAG;IACF,kBAAkB,EAAE,UAAU,CAAC;IAC/B,oBAAoB,EAAE,UAAU,CAAC;IACjC,gBAAgB,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,MAAM,GAAG,MAAM,CAAC;AAE1D;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,IAAI,EAAE,UAAU,CAAC;IACjB;;OAEG;IACH,OAAO,EAAE,qBAAqB,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IAEZ,UAAU,EAAE,MAAM,CAAC;IAEnB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IAEZ,aAAa,EAAE,MAAM,CAAC;IAEtB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;CACb,CAAC"}
+{"version":3,"file":"types.d.cts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,wBAAwB,EACxB,0BAA0B,EAC3B,kCAAkC;AACnC,OAAO,KAAK,EAAE,SAAS,EAAE,qCAAqC;AAC9D,OAAO,KAAK,EAAE,SAAS,EAAE,4BAA4B;AACrD,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,sCAAsC;AAC7E,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAoB;AAElD,OAAO,KAAK,EACV,cAAc,EACd,cAAc,EACd,qBAAqB,EACrB,UAAU,EACV,eAAe,EAChB,wBAAoB;AAErB;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,IAAI,EAAE,UAAU,CAAC;IAEjB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC;;OAEG;IACH,cAAc,EAAE,cAAc,CAAC;IAE/B;;;;OAIG;IACH,cAAc,EAAE,cAAc,CAAC;IAE/B;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAC;IAEzB;;OAEG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAEjC;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAC;IAEzB;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC;;;;OAIG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B;;OAEG;IACH,aAAa,EAAE,MAAM,CAAC;IAEtB;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC;AAGF,MAAM,MAAM,iCAAiC,GAC3C,OAAO,CAAC,wBAAwB,CAAC,GAC/B,OAAO,CAAC,sBAAsB,CAAC,GAAG;IAChC;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;;;OAIG;IACH,qBAAqB,EAAE,qBAAqB,EAAE,CAAC;IAE/C;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5B;;OAEG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B;;OAEG;IACH,qBAAqB,CAAC,EAAE;QAAE,YAAY,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAErE;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,wBAAwB,CAAC,EAAE;QACzB,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;KACrB,EAAE,CAAC;IAEJ;;OAEG;IACH,8BAA8B,CAAC,EAAE,MAAM,CAAC;IAExC;;OAEG;IACH,6BAA6B,CAAC,EAAE,MAAM,CAAC;IAEvC;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B;;OAEG;IACH,qCAAqC,EAAE,OAAO,CAAC;CAChD,CAAC;AAGN,MAAM,MAAM,0CAA0C,GACpD,wBAAwB,CACtB,OAAO,cAAc,EACrB,iCAAiC,CAClC,CAAC;AACJ,MAAM,MAAM,mCAAmC,GAC7C,0CAA0C,CAAC;AAE7C,KAAK,cAAc,GAAG,KAAK,CAAC;AAG5B,MAAM,MAAM,4CAA4C,GACtD,0BAA0B,CACxB,OAAO,cAAc,EACrB,iCAAiC,CAClC,CAAC;AACJ,MAAM,MAAM,kCAAkC,GAC5C,4CAA4C,CAAC;AAE/C,KAAK,aAAa,GAAG,KAAK,CAAC;AAG3B,MAAM,MAAM,qCAAqC,GAAG,SAAS,CAC3D,OAAO,cAAc,EACrB,mCAAmC,GAAG,cAAc,EACpD,kCAAkC,GAAG,aAAa,CACnD,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,cAAc,CAAC,aAAa,EAAE,4BAA4B,IAAI,IAAI,CAC5E,SAAS,CAAC,aAAa,EAAE,4BAA4B,CAAC,EACtD,gBAAgB,CACjB,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B;;;;;;OAMG;IACH,SAAS,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;CACxE,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE;IACrC,UAAU,EAAE,cAAc,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;CACtB,KAAK,OAAO,CAAC;IACZ,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,EAAE,MAAM,CAAC;CAC7B,CAAC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE;IACxC,UAAU,EAAE,cAAc,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;CACrB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAEpB,MAAM,MAAM,iBAAiB,GAAG,CAAC,MAAM,EAAE;IACvC,UAAU,EAAE,cAAc,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;CACrB,KAAK,OAAO,CAAC;IACZ,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,MAAM,mCAAmC,CAC7C,aAAa,EACb,4BAA4B,IAC1B;IACF,SAAS,EAAE,qCAAqC,CAAC;IAEjD;;OAEG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC,iCAAiC,CAAC,CAAC;IAEnD;;;;OAIG;IACH,SAAS,EAAE,cAAc,CAAC,aAAa,EAAE,4BAA4B,CAAC,CAAC;IAEvE;;OAEG;IACH,eAAe,EAAE,eAAe,CAAC;IAEjC;;OAEG;IACH,kBAAkB,EAAE,kBAAkB,CAAC;IAEvC;;OAEG;IACH,iBAAiB,EAAE,iBAAiB,CAAC;IAErC;;;;;;;;;OASG;IACH,eAAe,CAAC,EAAE,eAAe,CAAC;IAElC;;;;OAIG;IACH,OAAO,CAAC,EAAE,eAAe,CAAC;IAE1B;;;;OAIG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,yBAAyB,CAAC,MAAM,IAAI,CAAC,EAC/C,WAAW,GACZ,EAAE;IACD,WAAW,EAAE,cAAc,CAAC,QAAQ,CAAC;CACtC,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAEtB;;GAEG;AACH,MAAM,MAAM,SAAS,GAAG;IACtB;;OAEG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;OAEG;IACH,oBAAoB,EAAE,MAAM,CAAC;IAC7B;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG,IAAI,CACtC,SAAS,EACT,aAAa,GAAG,aAAa,CAC9B,GAAG;IACF,kBAAkB,EAAE,UAAU,CAAC;IAC/B,oBAAoB,EAAE,UAAU,CAAC;IACjC,gBAAgB,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,MAAM,GAAG,MAAM,CAAC;AAE1D;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,IAAI,EAAE,UAAU,CAAC;IACjB;;OAEG;IACH,OAAO,EAAE,qBAAqB,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IAEZ,UAAU,EAAE,MAAM,CAAC;IAEnB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IAEZ,aAAa,EAAE,MAAM,CAAC;IAEtB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;CACb,CAAC"}

package/dist/types.d.mts

@@ -1,7 +1,9 @@
+import type { ControllerGetStateAction, ControllerStateChangeEvent } from "@metamask/base-controller";
 import type { Encryptor } from "@metamask/keyring-controller";
+import type { Messenger } from "@metamask/messenger";
 import type { KeyPair, NodeAuthTokens } from "@metamask/toprf-secure-backup";
 import type { MutexInterface } from "async-mutex";
-import type { AuthConnection, SecretMetadataVersion, SecretType } from "./constants.mjs";
+import type { AuthConnection, controllerName, SecretMetadataVersion, SecretType, Web3AuthNetwork } from "./constants.mjs";
 /**
  * The backup state of the secret data.
  * Each secret data added/restored will be stored in the state locally.
@@ -145,10 +147,17 @@ export type SeedlessOnboardingControllerState = Partial<AuthenticatedUserDetails
      */
     isSeedlessOnboardingUserAuthenticated: boolean;
 };
+export type SeedlessOnboardingControllerGetStateAction = ControllerGetStateAction<typeof controllerName, SeedlessOnboardingControllerState>;
+export type SeedlessOnboardingControllerActions = SeedlessOnboardingControllerGetStateAction;
+type AllowedActions = never;
+export type SeedlessOnboardingControllerStateChangeEvent = ControllerStateChangeEvent<typeof controllerName, SeedlessOnboardingControllerState>;
+export type SeedlessOnboardingControllerEvents = SeedlessOnboardingControllerStateChangeEvent;
+type AllowedEvents = never;
+export type SeedlessOnboardingControllerMessenger = Messenger<typeof controllerName, SeedlessOnboardingControllerActions | AllowedActions, SeedlessOnboardingControllerEvents | AllowedEvents>;
 /**
  * Encryptor interface for encrypting and decrypting seedless onboarding vault.
  */
-export type VaultEncryptor<EncryptionKey, SupportedKeyDerivationParams> = Encryptor<EncryptionKey, SupportedKeyDerivationParams>;
+export type VaultEncryptor<EncryptionKey, SupportedKeyDerivationParams> = Omit<Encryptor<EncryptionKey, SupportedKeyDerivationParams>, 'encryptWithKey'>;
 /**
  * Additional key deriver for the TOPRF client.
  *
@@ -187,6 +196,61 @@ export type RenewRefreshToken = (params: {
     newRevokeToken: string;
     newRefreshToken: string;
 }>;
+/**
+ * Seedless Onboarding Controller Options.
+ *
+ * @param messenger - The messenger to use for this controller.
+ * @param state - The initial state to set on this controller.
+ * @param encryptor - The encryptor to use for encrypting and decrypting seedless onboarding vault.
+ */
+export type SeedlessOnboardingControllerOptions<EncryptionKey, SupportedKeyDerivationParams> = {
+    messenger: SeedlessOnboardingControllerMessenger;
+    /**
+     * Initial state to set on this controller.
+     */
+    state?: Partial<SeedlessOnboardingControllerState>;
+    /**
+     * Encryptor to use for encrypting and decrypting seedless onboarding vault.
+     *
+     * @default browser-passworder @link https://github.com/MetaMask/browser-passworder
+     */
+    encryptor: VaultEncryptor<EncryptionKey, SupportedKeyDerivationParams>;
+    /**
+     * A function to get a new jwt token using refresh token.
+     */
+    refreshJWTToken: RefreshJWTToken;
+    /**
+     * A function to revoke the refresh token.
+     */
+    revokeRefreshToken: RevokeRefreshToken;
+    /**
+     * A function to renew the refresh token and get new revoke token.
+     */
+    renewRefreshToken: RenewRefreshToken;
+    /**
+     * Optional key derivation interface for the TOPRF client.
+     *
+     * If provided, it will be used as an additional step during
+     * key derivation. This can be used, for example, to inject a slow key
+     * derivation step to protect against local brute force attacks on the
+     * password.
+     *
+     * @default browser-passworder @link https://github.com/MetaMask/browser-passworder
+     */
+    toprfKeyDeriver?: ToprfKeyDeriver;
+    /**
+     * Type of Web3Auth network to be used for the Seedless Onboarding flow.
+     *
+     * @default Web3AuthNetwork.Mainnet
+     */
+    network?: Web3AuthNetwork;
+    /**
+     * The TTL of the password outdated cache in milliseconds.
+     *
+     * @default PASSWORD_OUTDATED_CACHE_TTL_MS
+     */
+    passwordOutdatedCacheTTL?: number;
+};
 /**
  * A function executed within a mutually exclusive lock, with
  * a mutex releaser in its option bag.
@@ -280,4 +344,5 @@ export type DecodedBaseJWTToken = {
      */
     sub: string;
 };
+export {};
 //# sourceMappingURL=types.d.mts.map

package/dist/types.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.mts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,qCAAqC;AAC9D,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,sCAAsC;AAC7E,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAoB;AAElD,OAAO,KAAK,EACV,cAAc,EACd,qBAAqB,EACrB,UAAU,EACX,wBAAoB;AAErB;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,IAAI,EAAE,UAAU,CAAC;IAEjB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC;;OAEG;IACH,cAAc,EAAE,cAAc,CAAC;IAE/B;;;;OAIG;IACH,cAAc,EAAE,cAAc,CAAC;IAE/B;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAC;IAEzB;;OAEG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAEjC;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAC;IAEzB;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC;;;;OAIG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B;;OAEG;IACH,aAAa,EAAE,MAAM,CAAC;IAEtB;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC;AAGF,MAAM,MAAM,iCAAiC,GAC3C,OAAO,CAAC,wBAAwB,CAAC,GAC/B,OAAO,CAAC,sBAAsB,CAAC,GAAG;IAChC;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;;;OAIG;IACH,qBAAqB,EAAE,qBAAqB,EAAE,CAAC;IAE/C;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5B;;OAEG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B;;OAEG;IACH,qBAAqB,CAAC,EAAE;QAAE,YAAY,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAErE;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,wBAAwB,CAAC,EAAE;QACzB,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;KACrB,EAAE,CAAC;IAEJ;;OAEG;IACH,8BAA8B,CAAC,EAAE,MAAM,CAAC;IAExC;;OAEG;IACH,6BAA6B,CAAC,EAAE,MAAM,CAAC;IAEvC;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B;;OAEG;IACH,qCAAqC,EAAE,OAAO,CAAC;CAChD,CAAC;AAEN;;GAEG;AACH,MAAM,MAAM,cAAc,CAAC,aAAa,EAAE,4BAA4B,IACpE,SAAS,CAAC,aAAa,EAAE,4BAA4B,CAAC,CAAC;AAEzD;;;;;;;;GAQG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B;;;;;;OAMG;IACH,SAAS,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;CACxE,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE;IACrC,UAAU,EAAE,cAAc,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;CACtB,KAAK,OAAO,CAAC;IACZ,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,EAAE,MAAM,CAAC;CAC7B,CAAC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE;IACxC,UAAU,EAAE,cAAc,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;CACrB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAEpB,MAAM,MAAM,iBAAiB,GAAG,CAAC,MAAM,EAAE;IACvC,UAAU,EAAE,cAAc,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;CACrB,KAAK,OAAO,CAAC;IACZ,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,MAAM,yBAAyB,CAAC,MAAM,IAAI,CAAC,EAC/C,WAAW,GACZ,EAAE;IACD,WAAW,EAAE,cAAc,CAAC,QAAQ,CAAC;CACtC,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAEtB;;GAEG;AACH,MAAM,MAAM,SAAS,GAAG;IACtB;;OAEG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;OAEG;IACH,oBAAoB,EAAE,MAAM,CAAC;IAC7B;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG,IAAI,CACtC,SAAS,EACT,aAAa,GAAG,aAAa,CAC9B,GAAG;IACF,kBAAkB,EAAE,UAAU,CAAC;IAC/B,oBAAoB,EAAE,UAAU,CAAC;IACjC,gBAAgB,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,MAAM,GAAG,MAAM,CAAC;AAE1D;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,IAAI,EAAE,UAAU,CAAC;IACjB;;OAEG;IACH,OAAO,EAAE,qBAAqB,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IAEZ,UAAU,EAAE,MAAM,CAAC;IAEnB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IAEZ,aAAa,EAAE,MAAM,CAAC;IAEtB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;CACb,CAAC"}
+{"version":3,"file":"types.d.mts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,wBAAwB,EACxB,0BAA0B,EAC3B,kCAAkC;AACnC,OAAO,KAAK,EAAE,SAAS,EAAE,qCAAqC;AAC9D,OAAO,KAAK,EAAE,SAAS,EAAE,4BAA4B;AACrD,OAAO,KAAK,EAAE,OAAO,EAAE,cAAc,EAAE,sCAAsC;AAC7E,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAoB;AAElD,OAAO,KAAK,EACV,cAAc,EACd,cAAc,EACd,qBAAqB,EACrB,UAAU,EACV,eAAe,EAChB,wBAAoB;AAErB;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;OAEG;IACH,IAAI,EAAE,UAAU,CAAC;IAEjB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC;;OAEG;IACH,cAAc,EAAE,cAAc,CAAC;IAE/B;;;;OAIG;IACH,cAAc,EAAE,cAAc,CAAC;IAE/B;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAC;IAEzB;;OAEG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAC;IAEjC;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IAEf;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAC;IAEzB;;OAEG;IACH,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG;IACnC;;;;OAIG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B;;OAEG;IACH,aAAa,EAAE,MAAM,CAAC;IAEtB;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC;AAGF,MAAM,MAAM,iCAAiC,GAC3C,OAAO,CAAC,wBAAwB,CAAC,GAC/B,OAAO,CAAC,sBAAsB,CAAC,GAAG;IAChC;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf;;;;OAIG;IACH,qBAAqB,EAAE,qBAAqB,EAAE,CAAC;IAE/C;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5B;;OAEG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B;;OAEG;IACH,qBAAqB,CAAC,EAAE;QAAE,YAAY,EAAE,OAAO,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAErE;;;OAGG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;OAGG;IACH,wBAAwB,CAAC,EAAE;QACzB,YAAY,EAAE,MAAM,CAAC;QACrB,WAAW,EAAE,MAAM,CAAC;KACrB,EAAE,CAAC;IAEJ;;OAEG;IACH,8BAA8B,CAAC,EAAE,MAAM,CAAC;IAExC;;OAEG;IACH,6BAA6B,CAAC,EAAE,MAAM,CAAC;IAEvC;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B;;OAEG;IACH,qCAAqC,EAAE,OAAO,CAAC;CAChD,CAAC;AAGN,MAAM,MAAM,0CAA0C,GACpD,wBAAwB,CACtB,OAAO,cAAc,EACrB,iCAAiC,CAClC,CAAC;AACJ,MAAM,MAAM,mCAAmC,GAC7C,0CAA0C,CAAC;AAE7C,KAAK,cAAc,GAAG,KAAK,CAAC;AAG5B,MAAM,MAAM,4CAA4C,GACtD,0BAA0B,CACxB,OAAO,cAAc,EACrB,iCAAiC,CAClC,CAAC;AACJ,MAAM,MAAM,kCAAkC,GAC5C,4CAA4C,CAAC;AAE/C,KAAK,aAAa,GAAG,KAAK,CAAC;AAG3B,MAAM,MAAM,qCAAqC,GAAG,SAAS,CAC3D,OAAO,cAAc,EACrB,mCAAmC,GAAG,cAAc,EACpD,kCAAkC,GAAG,aAAa,CACnD,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,cAAc,CAAC,aAAa,EAAE,4BAA4B,IAAI,IAAI,CAC5E,SAAS,CAAC,aAAa,EAAE,4BAA4B,CAAC,EACtD,gBAAgB,CACjB,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,MAAM,eAAe,GAAG;IAC5B;;;;;;OAMG;IACH,SAAS,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;CACxE,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE;IACrC,UAAU,EAAE,cAAc,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;CACtB,KAAK,OAAO,CAAC;IACZ,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,mBAAmB,EAAE,MAAM,CAAC;CAC7B,CAAC,CAAC;AAEH,MAAM,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE;IACxC,UAAU,EAAE,cAAc,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;CACrB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAEpB,MAAM,MAAM,iBAAiB,GAAG,CAAC,MAAM,EAAE;IACvC,UAAU,EAAE,cAAc,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;CACrB,KAAK,OAAO,CAAC;IACZ,cAAc,EAAE,MAAM,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC,CAAC;AAEH;;;;;;GAMG;AACH,MAAM,MAAM,mCAAmC,CAC7C,aAAa,EACb,4BAA4B,IAC1B;IACF,SAAS,EAAE,qCAAqC,CAAC;IAEjD;;OAEG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC,iCAAiC,CAAC,CAAC;IAEnD;;;;OAIG;IACH,SAAS,EAAE,cAAc,CAAC,aAAa,EAAE,4BAA4B,CAAC,CAAC;IAEvE;;OAEG;IACH,eAAe,EAAE,eAAe,CAAC;IAEjC;;OAEG;IACH,kBAAkB,EAAE,kBAAkB,CAAC;IAEvC;;OAEG;IACH,iBAAiB,EAAE,iBAAiB,CAAC;IAErC;;;;;;;;;OASG;IACH,eAAe,CAAC,EAAE,eAAe,CAAC;IAElC;;;;OAIG;IACH,OAAO,CAAC,EAAE,eAAe,CAAC;IAE1B;;;;OAIG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,yBAAyB,CAAC,MAAM,IAAI,CAAC,EAC/C,WAAW,GACZ,EAAE;IACD,WAAW,EAAE,cAAc,CAAC,QAAQ,CAAC;CACtC,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;AAEtB;;GAEG;AACH,MAAM,MAAM,SAAS,GAAG;IACtB;;OAEG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAC3B;;OAEG;IACH,oBAAoB,EAAE,MAAM,CAAC;IAC7B;;OAEG;IACH,gBAAgB,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG,IAAI,CACtC,SAAS,EACT,aAAa,GAAG,aAAa,CAC9B,GAAG;IACF,kBAAkB,EAAE,UAAU,CAAC;IAC/B,oBAAoB,EAAE,UAAU,CAAC;IACjC,gBAAgB,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,MAAM,GAAG,MAAM,CAAC;AAE1D;;GAEG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;OAEG;IACH,IAAI,EAAE,UAAU,CAAC;IACjB;;OAEG;IACH,OAAO,EAAE,qBAAqB,CAAC;CAChC,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IAEZ,UAAU,EAAE,MAAM,CAAC;IAEnB,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IAEZ,aAAa,EAAE,MAAM,CAAC;IAEtB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,GAAG,EAAE,MAAM,CAAC;CACb,CAAC"}

package/dist/types.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"types.mjs","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"","sourcesContent":["import type { Encryptor } from '@metamask/keyring-controller';\nimport type { KeyPair, NodeAuthTokens } from '@metamask/toprf-secure-backup';\nimport type { MutexInterface } from 'async-mutex';\n\nimport type {\n  AuthConnection,\n  SecretMetadataVersion,\n  SecretType,\n} from './constants';\n\n/**\n * The backup state of the secret data.\n * Each secret data added/restored will be stored in the state locally.\n *\n * This is used to track the backup status of the secret data.\n */\nexport type SocialBackupsMetadata = {\n  /**\n   * The hash of the secret data.\n   */\n  hash: string;\n\n  /**\n   * The type of the secret data.\n   */\n  type: SecretType;\n\n  /**\n   * The optional keyringId to identify the keyring that the secret data belongs to.\n   *\n   * This is only required for `Mnemonic` secret data.\n   */\n  keyringId?: string;\n};\n\nexport type AuthenticatedUserDetails = {\n  /**\n   * Type of social login provider.\n   */\n  authConnection: AuthConnection;\n\n  /**\n   * The node auth tokens from OAuth User authentication after the Social login.\n   *\n   * This values are used to authenticate users when they go through the Seedless Onboarding flow.\n   */\n  nodeAuthTokens: NodeAuthTokens;\n\n  /**\n   * OAuth connection id from web3auth dashboard.\n   */\n  authConnectionId: string;\n\n  /**\n   * The optional grouped authConnectionId to authenticate the user with Web3Auth network.\n   */\n  groupedAuthConnectionId?: string;\n\n  /**\n   * The user email or ID from Social login.\n   */\n  userId: string;\n\n  /**\n   * The user email from Social login.\n   */\n  socialLoginEmail: string;\n\n  /**\n   * The refresh token used to refresh expired nodeAuthTokens.\n   */\n  refreshToken: string;\n};\n\nexport type SRPBackedUpUserDetails = {\n  /**\n   * The public key of the authentication key pair in base64 format.\n   *\n   * This value is used to check if the password is outdated compare to the global password and find backed up old password.\n   */\n  authPubKey: string;\n};\n\n/**\n * The data of the recovery error.\n */\nexport type RecoveryErrorData = {\n  /**\n   * The remaining time in seconds before the user can try again.\n   */\n  remainingTime: number;\n\n  /**\n   * The number of attempts made by the user.\n   */\n  numberOfAttempts: number;\n};\n\n// State\nexport type SeedlessOnboardingControllerState =\n  Partial<AuthenticatedUserDetails> &\n    Partial<SRPBackedUpUserDetails> & {\n      /**\n       * Encrypted array of serialized keyrings data.\n       */\n      vault?: string;\n\n      /**\n       * The hashes of the seed phrase backups.\n       *\n       * This is to facilitate the UI to display backup status of the seed phrases.\n       */\n      socialBackupsMetadata: SocialBackupsMetadata[];\n\n      /**\n       * The encryption key derived from the password and used to encrypt\n       * the vault.\n       */\n      vaultEncryptionKey?: string;\n\n      /**\n       * The salt used to derive the encryption key from the password.\n       */\n      vaultEncryptionSalt?: string;\n\n      /**\n       * Cache for checkIsPasswordOutdated result and timestamp.\n       */\n      passwordOutdatedCache?: { isExpiredPwd: boolean; timestamp: number };\n\n      /**\n       * The refresh token used to refresh expired nodeAuthTokens.\n       * This is persisted in state.\n       */\n      refreshToken?: string;\n\n      /**\n       * The revoke token used to revoke refresh token and get new refresh token and new revoke token.\n       * This is temporarily stored in state during authentication and then persisted in the vault.\n       */\n      revokeToken?: string;\n\n      /**\n       * The refresh token and revoke token to be revoked.\n       * This is persisted in state to revoke old refresh token when possible.\n       */\n      pendingToBeRevokedTokens?: {\n        refreshToken: string;\n        revokeToken: string;\n      }[];\n\n      /**\n       * The encrypted seedless encryption key used to encrypt the seedless vault.\n       */\n      encryptedSeedlessEncryptionKey?: string;\n\n      /**\n       * The encrypted keyring encryption key used to encrypt the keyring vault.\n       */\n      encryptedKeyringEncryptionKey?: string;\n\n      /**\n       * The access token used for pairing with profile sync auth service and to access other services.\n       */\n      accessToken?: string;\n\n      /**\n       * The metadata access token used to access the metadata service.\n       *\n       * This token is used to access the metadata service before the vault is created or unlocked.\n       */\n      metadataAccessToken?: string;\n\n      /**\n       * Whether the user is authenticated with social login and TOPRF service.\n       */\n      isSeedlessOnboardingUserAuthenticated: boolean;\n    };\n\n/**\n * Encryptor interface for encrypting and decrypting seedless onboarding vault.\n */\nexport type VaultEncryptor<EncryptionKey, SupportedKeyDerivationParams> =\n  Encryptor<EncryptionKey, SupportedKeyDerivationParams>;\n\n/**\n * Additional key deriver for the TOPRF client.\n *\n * This is a function that takes a seed and salt and returns a key in bytes (Uint8Array).\n * It is used as an additional step during key derivation. This can be used, for example, to inject a slow key\n * derivation step to protect against local brute force attacks on the password.\n *\n * @default browser-passworder @link https://github.com/MetaMask/browser-passworder\n */\nexport type ToprfKeyDeriver = {\n  /**\n   * Derive a key from a seed and salt.\n   *\n   * @param seed - The seed to derive the key from.\n   * @param salt - The salt to derive the key from.\n   * @returns The derived key.\n   */\n  deriveKey: (seed: Uint8Array, salt: Uint8Array) => Promise<Uint8Array>;\n};\n\nexport type RefreshJWTToken = (params: {\n  connection: AuthConnection;\n  refreshToken: string;\n}) => Promise<{\n  idTokens: string[];\n  accessToken: string;\n  metadataAccessToken: string;\n}>;\n\nexport type RevokeRefreshToken = (params: {\n  connection: AuthConnection;\n  revokeToken: string;\n}) => Promise<void>;\n\nexport type RenewRefreshToken = (params: {\n  connection: AuthConnection;\n  revokeToken: string;\n}) => Promise<{\n  newRevokeToken: string;\n  newRefreshToken: string;\n}>;\n\n/**\n * A function executed within a mutually exclusive lock, with\n * a mutex releaser in its option bag.\n *\n * @param releaseLock - A function to release the lock.\n */\nexport type MutuallyExclusiveCallback<Result> = ({\n  releaseLock,\n}: {\n  releaseLock: MutexInterface.Releaser;\n}) => Promise<Result>;\n\n/**\n * The structure of the data which is serialized and stored in the vault.\n */\nexport type VaultData = {\n  /**\n   * The encryption key to encrypt the seed phrase.\n   */\n  toprfEncryptionKey: string;\n  /**\n   * The encryption key to encrypt the password.\n   */\n  toprfPwEncryptionKey: string;\n  /**\n   * The authentication key pair to authenticate the TOPRF.\n   */\n  toprfAuthKeyPair: string;\n  /**\n   * The revoke token to revoke refresh token and get new refresh token and new revoke token.\n   * The revoke token may no longer be available after a large number of password changes. In this case, re-authentication is advised.\n   */\n  revokeToken: string;\n  /**\n   * The access token used for pairing with profile sync auth service and to access other services.\n   */\n  accessToken: string;\n};\n\nexport type DeserializedVaultData = Pick<\n  VaultData,\n  'accessToken' | 'revokeToken'\n> & {\n  toprfEncryptionKey: Uint8Array;\n  toprfPwEncryptionKey: Uint8Array;\n  toprfAuthKeyPair: KeyPair;\n};\n\nexport type SecretDataType = Uint8Array | string | number;\n\n/**\n * The constructor options for the seed phrase metadata.\n */\nexport type SecretMetadataOptions = {\n  /**\n   * The timestamp when the seed phrase was created.\n   */\n  timestamp: number;\n  /**\n   * The type of the seed phrase.\n   */\n  type: SecretType;\n  /**\n   * The version of the seed phrase metadata.\n   */\n  version: SecretMetadataVersion;\n};\n\nexport type DecodedNodeAuthToken = {\n  /**\n   * The expiration time of the token in seconds.\n   */\n  exp: number;\n  // eslint-disable-next-line @typescript-eslint/naming-convention -- to match with the actual token\n  temp_key_x: string;\n  // eslint-disable-next-line @typescript-eslint/naming-convention -- to match with the actual token\n  temp_key_y: string;\n  aud: string;\n  // eslint-disable-next-line @typescript-eslint/naming-convention -- to match with the actual token\n  verifier_name: string;\n  // eslint-disable-next-line @typescript-eslint/naming-convention -- to match with the actual token\n  verifier_id: string;\n  scope: string;\n  signature: string;\n};\n\nexport type DecodedBaseJWTToken = {\n  /**\n   * The expiration time of the token in seconds.\n   */\n  exp: number;\n  /**\n   * The issued at time of the token in seconds.\n   */\n  iat: number;\n  /**\n   * The audience of the token.\n   */\n  aud: string;\n  /**\n   * The issuer of the token.\n   */\n  iss: string;\n  /**\n   * The subject of the token.\n   */\n  sub: string;\n};\n"]}
+{"version":3,"file":"types.mjs","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"","sourcesContent":["import type {\n  ControllerGetStateAction,\n  ControllerStateChangeEvent,\n} from '@metamask/base-controller';\nimport type { Encryptor } from '@metamask/keyring-controller';\nimport type { Messenger } from '@metamask/messenger';\nimport type { KeyPair, NodeAuthTokens } from '@metamask/toprf-secure-backup';\nimport type { MutexInterface } from 'async-mutex';\n\nimport type {\n  AuthConnection,\n  controllerName,\n  SecretMetadataVersion,\n  SecretType,\n  Web3AuthNetwork,\n} from './constants';\n\n/**\n * The backup state of the secret data.\n * Each secret data added/restored will be stored in the state locally.\n *\n * This is used to track the backup status of the secret data.\n */\nexport type SocialBackupsMetadata = {\n  /**\n   * The hash of the secret data.\n   */\n  hash: string;\n\n  /**\n   * The type of the secret data.\n   */\n  type: SecretType;\n\n  /**\n   * The optional keyringId to identify the keyring that the secret data belongs to.\n   *\n   * This is only required for `Mnemonic` secret data.\n   */\n  keyringId?: string;\n};\n\nexport type AuthenticatedUserDetails = {\n  /**\n   * Type of social login provider.\n   */\n  authConnection: AuthConnection;\n\n  /**\n   * The node auth tokens from OAuth User authentication after the Social login.\n   *\n   * This values are used to authenticate users when they go through the Seedless Onboarding flow.\n   */\n  nodeAuthTokens: NodeAuthTokens;\n\n  /**\n   * OAuth connection id from web3auth dashboard.\n   */\n  authConnectionId: string;\n\n  /**\n   * The optional grouped authConnectionId to authenticate the user with Web3Auth network.\n   */\n  groupedAuthConnectionId?: string;\n\n  /**\n   * The user email or ID from Social login.\n   */\n  userId: string;\n\n  /**\n   * The user email from Social login.\n   */\n  socialLoginEmail: string;\n\n  /**\n   * The refresh token used to refresh expired nodeAuthTokens.\n   */\n  refreshToken: string;\n};\n\nexport type SRPBackedUpUserDetails = {\n  /**\n   * The public key of the authentication key pair in base64 format.\n   *\n   * This value is used to check if the password is outdated compare to the global password and find backed up old password.\n   */\n  authPubKey: string;\n};\n\n/**\n * The data of the recovery error.\n */\nexport type RecoveryErrorData = {\n  /**\n   * The remaining time in seconds before the user can try again.\n   */\n  remainingTime: number;\n\n  /**\n   * The number of attempts made by the user.\n   */\n  numberOfAttempts: number;\n};\n\n// State\nexport type SeedlessOnboardingControllerState =\n  Partial<AuthenticatedUserDetails> &\n    Partial<SRPBackedUpUserDetails> & {\n      /**\n       * Encrypted array of serialized keyrings data.\n       */\n      vault?: string;\n\n      /**\n       * The hashes of the seed phrase backups.\n       *\n       * This is to facilitate the UI to display backup status of the seed phrases.\n       */\n      socialBackupsMetadata: SocialBackupsMetadata[];\n\n      /**\n       * The encryption key derived from the password and used to encrypt\n       * the vault.\n       */\n      vaultEncryptionKey?: string;\n\n      /**\n       * The salt used to derive the encryption key from the password.\n       */\n      vaultEncryptionSalt?: string;\n\n      /**\n       * Cache for checkIsPasswordOutdated result and timestamp.\n       */\n      passwordOutdatedCache?: { isExpiredPwd: boolean; timestamp: number };\n\n      /**\n       * The refresh token used to refresh expired nodeAuthTokens.\n       * This is persisted in state.\n       */\n      refreshToken?: string;\n\n      /**\n       * The revoke token used to revoke refresh token and get new refresh token and new revoke token.\n       * This is temporarily stored in state during authentication and then persisted in the vault.\n       */\n      revokeToken?: string;\n\n      /**\n       * The refresh token and revoke token to be revoked.\n       * This is persisted in state to revoke old refresh token when possible.\n       */\n      pendingToBeRevokedTokens?: {\n        refreshToken: string;\n        revokeToken: string;\n      }[];\n\n      /**\n       * The encrypted seedless encryption key used to encrypt the seedless vault.\n       */\n      encryptedSeedlessEncryptionKey?: string;\n\n      /**\n       * The encrypted keyring encryption key used to encrypt the keyring vault.\n       */\n      encryptedKeyringEncryptionKey?: string;\n\n      /**\n       * The access token used for pairing with profile sync auth service and to access other services.\n       */\n      accessToken?: string;\n\n      /**\n       * The metadata access token used to access the metadata service.\n       *\n       * This token is used to access the metadata service before the vault is created or unlocked.\n       */\n      metadataAccessToken?: string;\n\n      /**\n       * Whether the user is authenticated with social login and TOPRF service.\n       */\n      isSeedlessOnboardingUserAuthenticated: boolean;\n    };\n\n// Actions\nexport type SeedlessOnboardingControllerGetStateAction =\n  ControllerGetStateAction<\n    typeof controllerName,\n    SeedlessOnboardingControllerState\n  >;\nexport type SeedlessOnboardingControllerActions =\n  SeedlessOnboardingControllerGetStateAction;\n\ntype AllowedActions = never;\n\n// Events\nexport type SeedlessOnboardingControllerStateChangeEvent =\n  ControllerStateChangeEvent<\n    typeof controllerName,\n    SeedlessOnboardingControllerState\n  >;\nexport type SeedlessOnboardingControllerEvents =\n  SeedlessOnboardingControllerStateChangeEvent;\n\ntype AllowedEvents = never;\n\n// Messenger\nexport type SeedlessOnboardingControllerMessenger = Messenger<\n  typeof controllerName,\n  SeedlessOnboardingControllerActions | AllowedActions,\n  SeedlessOnboardingControllerEvents | AllowedEvents\n>;\n\n/**\n * Encryptor interface for encrypting and decrypting seedless onboarding vault.\n */\nexport type VaultEncryptor<EncryptionKey, SupportedKeyDerivationParams> = Omit<\n  Encryptor<EncryptionKey, SupportedKeyDerivationParams>,\n  'encryptWithKey'\n>;\n\n/**\n * Additional key deriver for the TOPRF client.\n *\n * This is a function that takes a seed and salt and returns a key in bytes (Uint8Array).\n * It is used as an additional step during key derivation. This can be used, for example, to inject a slow key\n * derivation step to protect against local brute force attacks on the password.\n *\n * @default browser-passworder @link https://github.com/MetaMask/browser-passworder\n */\nexport type ToprfKeyDeriver = {\n  /**\n   * Derive a key from a seed and salt.\n   *\n   * @param seed - The seed to derive the key from.\n   * @param salt - The salt to derive the key from.\n   * @returns The derived key.\n   */\n  deriveKey: (seed: Uint8Array, salt: Uint8Array) => Promise<Uint8Array>;\n};\n\nexport type RefreshJWTToken = (params: {\n  connection: AuthConnection;\n  refreshToken: string;\n}) => Promise<{\n  idTokens: string[];\n  accessToken: string;\n  metadataAccessToken: string;\n}>;\n\nexport type RevokeRefreshToken = (params: {\n  connection: AuthConnection;\n  revokeToken: string;\n}) => Promise<void>;\n\nexport type RenewRefreshToken = (params: {\n  connection: AuthConnection;\n  revokeToken: string;\n}) => Promise<{\n  newRevokeToken: string;\n  newRefreshToken: string;\n}>;\n\n/**\n * Seedless Onboarding Controller Options.\n *\n * @param messenger - The messenger to use for this controller.\n * @param state - The initial state to set on this controller.\n * @param encryptor - The encryptor to use for encrypting and decrypting seedless onboarding vault.\n */\nexport type SeedlessOnboardingControllerOptions<\n  EncryptionKey,\n  SupportedKeyDerivationParams,\n> = {\n  messenger: SeedlessOnboardingControllerMessenger;\n\n  /**\n   * Initial state to set on this controller.\n   */\n  state?: Partial<SeedlessOnboardingControllerState>;\n\n  /**\n   * Encryptor to use for encrypting and decrypting seedless onboarding vault.\n   *\n   * @default browser-passworder @link https://github.com/MetaMask/browser-passworder\n   */\n  encryptor: VaultEncryptor<EncryptionKey, SupportedKeyDerivationParams>;\n\n  /**\n   * A function to get a new jwt token using refresh token.\n   */\n  refreshJWTToken: RefreshJWTToken;\n\n  /**\n   * A function to revoke the refresh token.\n   */\n  revokeRefreshToken: RevokeRefreshToken;\n\n  /**\n   * A function to renew the refresh token and get new revoke token.\n   */\n  renewRefreshToken: RenewRefreshToken;\n\n  /**\n   * Optional key derivation interface for the TOPRF client.\n   *\n   * If provided, it will be used as an additional step during\n   * key derivation. This can be used, for example, to inject a slow key\n   * derivation step to protect against local brute force attacks on the\n   * password.\n   *\n   * @default browser-passworder @link https://github.com/MetaMask/browser-passworder\n   */\n  toprfKeyDeriver?: ToprfKeyDeriver;\n\n  /**\n   * Type of Web3Auth network to be used for the Seedless Onboarding flow.\n   *\n   * @default Web3AuthNetwork.Mainnet\n   */\n  network?: Web3AuthNetwork;\n\n  /**\n   * The TTL of the password outdated cache in milliseconds.\n   *\n   * @default PASSWORD_OUTDATED_CACHE_TTL_MS\n   */\n  passwordOutdatedCacheTTL?: number;\n};\n\n/**\n * A function executed within a mutually exclusive lock, with\n * a mutex releaser in its option bag.\n *\n * @param releaseLock - A function to release the lock.\n */\nexport type MutuallyExclusiveCallback<Result> = ({\n  releaseLock,\n}: {\n  releaseLock: MutexInterface.Releaser;\n}) => Promise<Result>;\n\n/**\n * The structure of the data which is serialized and stored in the vault.\n */\nexport type VaultData = {\n  /**\n   * The encryption key to encrypt the seed phrase.\n   */\n  toprfEncryptionKey: string;\n  /**\n   * The encryption key to encrypt the password.\n   */\n  toprfPwEncryptionKey: string;\n  /**\n   * The authentication key pair to authenticate the TOPRF.\n   */\n  toprfAuthKeyPair: string;\n  /**\n   * The revoke token to revoke refresh token and get new refresh token and new revoke token.\n   * The revoke token may no longer be available after a large number of password changes. In this case, re-authentication is advised.\n   */\n  revokeToken: string;\n  /**\n   * The access token used for pairing with profile sync auth service and to access other services.\n   */\n  accessToken: string;\n};\n\nexport type DeserializedVaultData = Pick<\n  VaultData,\n  'accessToken' | 'revokeToken'\n> & {\n  toprfEncryptionKey: Uint8Array;\n  toprfPwEncryptionKey: Uint8Array;\n  toprfAuthKeyPair: KeyPair;\n};\n\nexport type SecretDataType = Uint8Array | string | number;\n\n/**\n * The constructor options for the seed phrase metadata.\n */\nexport type SecretMetadataOptions = {\n  /**\n   * The timestamp when the seed phrase was created.\n   */\n  timestamp: number;\n  /**\n   * The type of the seed phrase.\n   */\n  type: SecretType;\n  /**\n   * The version of the seed phrase metadata.\n   */\n  version: SecretMetadataVersion;\n};\n\nexport type DecodedNodeAuthToken = {\n  /**\n   * The expiration time of the token in seconds.\n   */\n  exp: number;\n  // eslint-disable-next-line @typescript-eslint/naming-convention -- to match with the actual token\n  temp_key_x: string;\n  // eslint-disable-next-line @typescript-eslint/naming-convention -- to match with the actual token\n  temp_key_y: string;\n  aud: string;\n  // eslint-disable-next-line @typescript-eslint/naming-convention -- to match with the actual token\n  verifier_name: string;\n  // eslint-disable-next-line @typescript-eslint/naming-convention -- to match with the actual token\n  verifier_id: string;\n  scope: string;\n  signature: string;\n};\n\nexport type DecodedBaseJWTToken = {\n  /**\n   * The expiration time of the token in seconds.\n   */\n  exp: number;\n  /**\n   * The issued at time of the token in seconds.\n   */\n  iat: number;\n  /**\n   * The audience of the token.\n   */\n  aud: string;\n  /**\n   * The issuer of the token.\n   */\n  iss: string;\n  /**\n   * The subject of the token.\n   */\n  sub: string;\n};\n"]}

package/dist/utils.cjs

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.compareAndGetLatestToken = exports.deserializeAuthKeyPair = exports.serializeToprfAuthKeyPair = exports.deserializeVaultData = exports.serializeVaultData = exports.decodeJWTToken = exports.decodeNodeAuthToken = void 0;
+exports.deserializeAuthKeyPair = exports.serializeToprfAuthKeyPair = exports.deserializeVaultData = exports.serializeVaultData = exports.decodeJWTToken = exports.decodeNodeAuthToken = void 0;
 const utils_1 = require("@metamask/utils");
 const utils_2 = require("@noble/ciphers/utils");
 /**
@@ -98,34 +98,4 @@ function deserializeAuthKeyPair(value) {
     };
 }
 exports.deserializeAuthKeyPair = deserializeAuthKeyPair;
-/**
- * Compare two JWT tokens and return the latest token.
- *
- * @param jwtToken1 - The first JWT token to compare.
- * @param jwtToken2 - The second JWT token to compare.
- * @returns The latest JWT token.
- */
-function compareAndGetLatestToken(jwtToken1, jwtToken2) {
-    let decodedToken1;
-    let decodedToken2;
-    try {
-        decodedToken1 = decodeJWTToken(jwtToken1);
-    }
-    catch {
-        // if the first token is invalid, return the second token
-        return jwtToken2;
-    }
-    try {
-        decodedToken2 = decodeJWTToken(jwtToken2);
-    }
-    catch {
-        // if the second token is invalid, return the first token
-        return jwtToken1;
-    }
-    if (decodedToken1.exp > decodedToken2.exp) {
-        return jwtToken1;
-    }
-    return jwtToken2;
-}
-exports.compareAndGetLatestToken = compareAndGetLatestToken;
 //# sourceMappingURL=utils.cjs.map

package/dist/utils.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"utils.cjs","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":";;;AACA,2CAKyB;AACzB,gDAAmD;AASnD;;;;;GAKG;AACH,SAAgB,mBAAmB,CAAC,KAAa;IAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,IAAA,mBAAW,EAAC,IAAA,qBAAa,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC;AAFD,kDAEC;AAED;;;;;GAKG;AACH,SAAgB,cAAc,CAAC,KAAa;IAC1C,sEAAsE;IACtE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IAED,mCAAmC;IACnC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,4CAA4C;IAC5C,MAAM,aAAa,GAAG,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,mBAAW,EAAC,IAAA,qBAAa,EAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IACtE,OAAO,OAA8B,CAAC;AACxC,CAAC;AAbD,wCAaC;AAED;;;;;GAKG;AACH,SAAgB,kBAAkB,CAAC,IAA2B;IAC5D,MAAM,kBAAkB,GAAG,IAAA,qBAAa,EAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAClE,MAAM,oBAAoB,GAAG,IAAA,qBAAa,EAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACtE,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAE1E,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,kBAAkB;QAClB,oBAAoB;QACpB,gBAAgB;QAChB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;KAC9B,CAAC,CAAC;AACL,CAAC;AAZD,gDAYC;AAED;;;;;GAKG;AACH,SAAgB,oBAAoB,CAAC,KAAgB;IACnD,MAAM,kBAAkB,GAAG,IAAA,qBAAa,EAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACnE,MAAM,oBAAoB,GAAG,IAAA,qBAAa,EAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACvE,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAExE,OAAO;QACL,GAAG,KAAK;QACR,kBAAkB;QAClB,oBAAoB;QACpB,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAXD,oDAWC;AAED;;;;;GAKG;AACH,SAAgB,yBAAyB,CAAC,OAAgB;IACxD,MAAM,qBAAqB,GAAG,IAAI,CAAC,SAAS,CAAC;QAC3C,EAAE,EAAE,IAAA,mBAAW,EAAC,OAAO,CAAC,EAAE,CAAC,EAAE,+BAA+B;QAC5D,EAAE,EAAE,IAAA,qBAAa,EAAC,OAAO,CAAC,EAAE,CAAC;KAC9B,CAAC,CAAC;IAEH,OAAO,qBAAqB,CAAC;AAC/B,CAAC;AAPD,8DAOC;AAED;;;;;GAKG;AACH,SAAgB,sBAAsB,CAAC,KAAa;IAClD,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO;QACL,EAAE,EAAE,IAAA,mBAAW,EAAC,aAAa,CAAC,EAAE,CAAC;QACjC,EAAE,EAAE,IAAA,qBAAa,EAAC,aAAa,CAAC,EAAE,CAAC;KACpC,CAAC;AACJ,CAAC;AAND,wDAMC;AAED;;;;;;GAMG;AACH,SAAgB,wBAAwB,CACtC,SAAiB,EACjB,SAAiB;IAEjB,IAAI,aAAkC,CAAC;IACvC,IAAI,aAAkC,CAAC;IAEvC,IAAI,CAAC;QACH,aAAa,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,yDAAyD;QACzD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC;QACH,aAAa,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,yDAAyD;QACzD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,aAAa,CAAC,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAzBD,4DAyBC","sourcesContent":["import type { KeyPair } from '@metamask/toprf-secure-backup';\nimport {\n  base64ToBytes,\n  bigIntToHex,\n  bytesToBase64,\n  hexToBigInt,\n} from '@metamask/utils';\nimport { bytesToUtf8 } from '@noble/ciphers/utils';\n\nimport type {\n  DecodedBaseJWTToken,\n  DecodedNodeAuthToken,\n  DeserializedVaultData,\n  VaultData,\n} from './types';\n\n/**\n * Decode the node auth token from base64 to json object.\n *\n * @param token - The node auth token to decode.\n * @returns The decoded node auth token.\n */\nexport function decodeNodeAuthToken(token: string): DecodedNodeAuthToken {\n  return JSON.parse(bytesToUtf8(base64ToBytes(token)));\n}\n\n/**\n * Decode JWT token\n *\n * @param token - The JWT token to decode.\n * @returns The decoded JWT token.\n */\nexport function decodeJWTToken(token: string): DecodedBaseJWTToken {\n  // JWT tokens have 3 parts separated by dots: header.payload.signature\n  const parts = token.split('.');\n  if (parts.length !== 3) {\n    throw new Error('Invalid JWT token format');\n  }\n\n  // Decode the payload (second part)\n  const payload = parts[1];\n  // Add padding if needed for base64 decoding\n  const paddedPayload = payload + '='.repeat((4 - (payload.length % 4)) % 4);\n  const decoded = JSON.parse(bytesToUtf8(base64ToBytes(paddedPayload)));\n  return decoded as DecodedBaseJWTToken;\n}\n\n/**\n * Serialize the vault data.\n *\n * @param data - The vault data to serialize.\n * @returns The serialized vault data.\n */\nexport function serializeVaultData(data: DeserializedVaultData): string {\n  const toprfEncryptionKey = bytesToBase64(data.toprfEncryptionKey);\n  const toprfPwEncryptionKey = bytesToBase64(data.toprfPwEncryptionKey);\n  const toprfAuthKeyPair = serializeToprfAuthKeyPair(data.toprfAuthKeyPair);\n\n  return JSON.stringify({\n    toprfEncryptionKey,\n    toprfPwEncryptionKey,\n    toprfAuthKeyPair,\n    revokeToken: data.revokeToken,\n    accessToken: data.accessToken,\n  });\n}\n\n/**\n * Deserialize the vault data.\n *\n * @param value - The stringified vault data.\n * @returns The deserialized vault data.\n */\nexport function deserializeVaultData(value: VaultData): DeserializedVaultData {\n  const toprfEncryptionKey = base64ToBytes(value.toprfEncryptionKey);\n  const toprfPwEncryptionKey = base64ToBytes(value.toprfPwEncryptionKey);\n  const toprfAuthKeyPair = deserializeAuthKeyPair(value.toprfAuthKeyPair);\n\n  return {\n    ...value,\n    toprfEncryptionKey,\n    toprfPwEncryptionKey,\n    toprfAuthKeyPair,\n  };\n}\n\n/**\n * Serialize TOPRF authentication key pair.\n *\n * @param keyPair - The authentication key pair to serialize.\n * @returns The serialized authentication key pair.\n */\nexport function serializeToprfAuthKeyPair(keyPair: KeyPair): string {\n  const b64EncodedAuthKeyPair = JSON.stringify({\n    sk: bigIntToHex(keyPair.sk), // Convert BigInt to hex string\n    pk: bytesToBase64(keyPair.pk),\n  });\n\n  return b64EncodedAuthKeyPair;\n}\n\n/**\n * Deserialize the authentication key pair.\n *\n * @param value - The stringified authentication key pair.\n * @returns The deserialized authentication key pair.\n */\nexport function deserializeAuthKeyPair(value: string): KeyPair {\n  const parsedKeyPair = JSON.parse(value);\n  return {\n    sk: hexToBigInt(parsedKeyPair.sk),\n    pk: base64ToBytes(parsedKeyPair.pk),\n  };\n}\n\n/**\n * Compare two JWT tokens and return the latest token.\n *\n * @param jwtToken1 - The first JWT token to compare.\n * @param jwtToken2 - The second JWT token to compare.\n * @returns The latest JWT token.\n */\nexport function compareAndGetLatestToken(\n  jwtToken1: string,\n  jwtToken2: string,\n): string {\n  let decodedToken1: DecodedBaseJWTToken;\n  let decodedToken2: DecodedBaseJWTToken;\n\n  try {\n    decodedToken1 = decodeJWTToken(jwtToken1);\n  } catch {\n    // if the first token is invalid, return the second token\n    return jwtToken2;\n  }\n\n  try {\n    decodedToken2 = decodeJWTToken(jwtToken2);\n  } catch {\n    // if the second token is invalid, return the first token\n    return jwtToken1;\n  }\n\n  if (decodedToken1.exp > decodedToken2.exp) {\n    return jwtToken1;\n  }\n  return jwtToken2;\n}\n"]}
+{"version":3,"file":"utils.cjs","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":";;;AACA,2CAKyB;AACzB,gDAAmD;AASnD;;;;;GAKG;AACH,SAAgB,mBAAmB,CAAC,KAAa;IAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,IAAA,mBAAW,EAAC,IAAA,qBAAa,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC;AAFD,kDAEC;AAED;;;;;GAKG;AACH,SAAgB,cAAc,CAAC,KAAa;IAC1C,sEAAsE;IACtE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IAED,mCAAmC;IACnC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,4CAA4C;IAC5C,MAAM,aAAa,GAAG,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,mBAAW,EAAC,IAAA,qBAAa,EAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IACtE,OAAO,OAA8B,CAAC;AACxC,CAAC;AAbD,wCAaC;AAED;;;;;GAKG;AACH,SAAgB,kBAAkB,CAAC,IAA2B;IAC5D,MAAM,kBAAkB,GAAG,IAAA,qBAAa,EAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAClE,MAAM,oBAAoB,GAAG,IAAA,qBAAa,EAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACtE,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAE1E,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,kBAAkB;QAClB,oBAAoB;QACpB,gBAAgB;QAChB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;KAC9B,CAAC,CAAC;AACL,CAAC;AAZD,gDAYC;AAED;;;;;GAKG;AACH,SAAgB,oBAAoB,CAAC,KAAgB;IACnD,MAAM,kBAAkB,GAAG,IAAA,qBAAa,EAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACnE,MAAM,oBAAoB,GAAG,IAAA,qBAAa,EAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACvE,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAExE,OAAO;QACL,GAAG,KAAK;QACR,kBAAkB;QAClB,oBAAoB;QACpB,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAXD,oDAWC;AAED;;;;;GAKG;AACH,SAAgB,yBAAyB,CAAC,OAAgB;IACxD,MAAM,qBAAqB,GAAG,IAAI,CAAC,SAAS,CAAC;QAC3C,EAAE,EAAE,IAAA,mBAAW,EAAC,OAAO,CAAC,EAAE,CAAC,EAAE,+BAA+B;QAC5D,EAAE,EAAE,IAAA,qBAAa,EAAC,OAAO,CAAC,EAAE,CAAC;KAC9B,CAAC,CAAC;IAEH,OAAO,qBAAqB,CAAC;AAC/B,CAAC;AAPD,8DAOC;AAED;;;;;GAKG;AACH,SAAgB,sBAAsB,CAAC,KAAa;IAClD,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO;QACL,EAAE,EAAE,IAAA,mBAAW,EAAC,aAAa,CAAC,EAAE,CAAC;QACjC,EAAE,EAAE,IAAA,qBAAa,EAAC,aAAa,CAAC,EAAE,CAAC;KACpC,CAAC;AACJ,CAAC;AAND,wDAMC","sourcesContent":["import type { KeyPair } from '@metamask/toprf-secure-backup';\nimport {\n  base64ToBytes,\n  bigIntToHex,\n  bytesToBase64,\n  hexToBigInt,\n} from '@metamask/utils';\nimport { bytesToUtf8 } from '@noble/ciphers/utils';\n\nimport type {\n  DecodedBaseJWTToken,\n  DecodedNodeAuthToken,\n  DeserializedVaultData,\n  VaultData,\n} from './types';\n\n/**\n * Decode the node auth token from base64 to json object.\n *\n * @param token - The node auth token to decode.\n * @returns The decoded node auth token.\n */\nexport function decodeNodeAuthToken(token: string): DecodedNodeAuthToken {\n  return JSON.parse(bytesToUtf8(base64ToBytes(token)));\n}\n\n/**\n * Decode JWT token\n *\n * @param token - The JWT token to decode.\n * @returns The decoded JWT token.\n */\nexport function decodeJWTToken(token: string): DecodedBaseJWTToken {\n  // JWT tokens have 3 parts separated by dots: header.payload.signature\n  const parts = token.split('.');\n  if (parts.length !== 3) {\n    throw new Error('Invalid JWT token format');\n  }\n\n  // Decode the payload (second part)\n  const payload = parts[1];\n  // Add padding if needed for base64 decoding\n  const paddedPayload = payload + '='.repeat((4 - (payload.length % 4)) % 4);\n  const decoded = JSON.parse(bytesToUtf8(base64ToBytes(paddedPayload)));\n  return decoded as DecodedBaseJWTToken;\n}\n\n/**\n * Serialize the vault data.\n *\n * @param data - The vault data to serialize.\n * @returns The serialized vault data.\n */\nexport function serializeVaultData(data: DeserializedVaultData): string {\n  const toprfEncryptionKey = bytesToBase64(data.toprfEncryptionKey);\n  const toprfPwEncryptionKey = bytesToBase64(data.toprfPwEncryptionKey);\n  const toprfAuthKeyPair = serializeToprfAuthKeyPair(data.toprfAuthKeyPair);\n\n  return JSON.stringify({\n    toprfEncryptionKey,\n    toprfPwEncryptionKey,\n    toprfAuthKeyPair,\n    revokeToken: data.revokeToken,\n    accessToken: data.accessToken,\n  });\n}\n\n/**\n * Deserialize the vault data.\n *\n * @param value - The stringified vault data.\n * @returns The deserialized vault data.\n */\nexport function deserializeVaultData(value: VaultData): DeserializedVaultData {\n  const toprfEncryptionKey = base64ToBytes(value.toprfEncryptionKey);\n  const toprfPwEncryptionKey = base64ToBytes(value.toprfPwEncryptionKey);\n  const toprfAuthKeyPair = deserializeAuthKeyPair(value.toprfAuthKeyPair);\n\n  return {\n    ...value,\n    toprfEncryptionKey,\n    toprfPwEncryptionKey,\n    toprfAuthKeyPair,\n  };\n}\n\n/**\n * Serialize TOPRF authentication key pair.\n *\n * @param keyPair - The authentication key pair to serialize.\n * @returns The serialized authentication key pair.\n */\nexport function serializeToprfAuthKeyPair(keyPair: KeyPair): string {\n  const b64EncodedAuthKeyPair = JSON.stringify({\n    sk: bigIntToHex(keyPair.sk), // Convert BigInt to hex string\n    pk: bytesToBase64(keyPair.pk),\n  });\n\n  return b64EncodedAuthKeyPair;\n}\n\n/**\n * Deserialize the authentication key pair.\n *\n * @param value - The stringified authentication key pair.\n * @returns The deserialized authentication key pair.\n */\nexport function deserializeAuthKeyPair(value: string): KeyPair {\n  const parsedKeyPair = JSON.parse(value);\n  return {\n    sk: hexToBigInt(parsedKeyPair.sk),\n    pk: base64ToBytes(parsedKeyPair.pk),\n  };\n}\n"]}

package/dist/utils.d.cts

@@ -42,12 +42,4 @@ export declare function serializeToprfAuthKeyPair(keyPair: KeyPair): string;
  * @returns The deserialized authentication key pair.
  */
 export declare function deserializeAuthKeyPair(value: string): KeyPair;
-/**
- * Compare two JWT tokens and return the latest token.
- *
- * @param jwtToken1 - The first JWT token to compare.
- * @param jwtToken2 - The second JWT token to compare.
- * @returns The latest JWT token.
- */
-export declare function compareAndGetLatestToken(jwtToken1: string, jwtToken2: string): string;
 //# sourceMappingURL=utils.d.cts.map

package/dist/utils.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.cts","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,sCAAsC;AAS7D,OAAO,KAAK,EACV,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,SAAS,EACV,oBAAgB;AAEjB;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,oBAAoB,CAEvE;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,mBAAmB,CAajE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,qBAAqB,GAAG,MAAM,CAYtE;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,SAAS,GAAG,qBAAqB,CAW5E;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAOlE;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAM7D;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,MAAM,CAsBR"}
+{"version":3,"file":"utils.d.cts","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,sCAAsC;AAS7D,OAAO,KAAK,EACV,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,SAAS,EACV,oBAAgB;AAEjB;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,oBAAoB,CAEvE;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,mBAAmB,CAajE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,qBAAqB,GAAG,MAAM,CAYtE;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,SAAS,GAAG,qBAAqB,CAW5E;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAOlE;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAM7D"}

package/dist/utils.d.mts

@@ -42,12 +42,4 @@ export declare function serializeToprfAuthKeyPair(keyPair: KeyPair): string;
  * @returns The deserialized authentication key pair.
  */
 export declare function deserializeAuthKeyPair(value: string): KeyPair;
-/**
- * Compare two JWT tokens and return the latest token.
- *
- * @param jwtToken1 - The first JWT token to compare.
- * @param jwtToken2 - The second JWT token to compare.
- * @returns The latest JWT token.
- */
-export declare function compareAndGetLatestToken(jwtToken1: string, jwtToken2: string): string;
 //# sourceMappingURL=utils.d.mts.map

package/dist/utils.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.mts","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,sCAAsC;AAS7D,OAAO,KAAK,EACV,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,SAAS,EACV,oBAAgB;AAEjB;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,oBAAoB,CAEvE;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,mBAAmB,CAajE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,qBAAqB,GAAG,MAAM,CAYtE;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,SAAS,GAAG,qBAAqB,CAW5E;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAOlE;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAM7D;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,MAAM,CAsBR"}
+{"version":3,"file":"utils.d.mts","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,sCAAsC;AAS7D,OAAO,KAAK,EACV,mBAAmB,EACnB,oBAAoB,EACpB,qBAAqB,EACrB,SAAS,EACV,oBAAgB;AAEjB;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,oBAAoB,CAEvE;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,mBAAmB,CAajE;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,qBAAqB,GAAG,MAAM,CAYtE;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,SAAS,GAAG,qBAAqB,CAW5E;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAOlE;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAM7D"}

package/dist/utils.mjs

@@ -89,33 +89,4 @@ export function deserializeAuthKeyPair(value) {
         pk: base64ToBytes(parsedKeyPair.pk),
     };
 }
-/**
- * Compare two JWT tokens and return the latest token.
- *
- * @param jwtToken1 - The first JWT token to compare.
- * @param jwtToken2 - The second JWT token to compare.
- * @returns The latest JWT token.
- */
-export function compareAndGetLatestToken(jwtToken1, jwtToken2) {
-    let decodedToken1;
-    let decodedToken2;
-    try {
-        decodedToken1 = decodeJWTToken(jwtToken1);
-    }
-    catch {
-        // if the first token is invalid, return the second token
-        return jwtToken2;
-    }
-    try {
-        decodedToken2 = decodeJWTToken(jwtToken2);
-    }
-    catch {
-        // if the second token is invalid, return the first token
-        return jwtToken1;
-    }
-    if (decodedToken1.exp > decodedToken2.exp) {
-        return jwtToken1;
-    }
-    return jwtToken2;
-}
 //# sourceMappingURL=utils.mjs.map

package/dist/utils.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"utils.mjs","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AACA,OAAO,EACL,aAAa,EACb,WAAW,EACX,aAAa,EACb,WAAW,EACZ,wBAAwB;AACzB,OAAO,EAAE,WAAW,EAAE,6BAA6B;AASnD;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,sEAAsE;IACtE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IAED,mCAAmC;IACnC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,4CAA4C;IAC5C,MAAM,aAAa,GAAG,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IACtE,OAAO,OAA8B,CAAC;AACxC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAA2B;IAC5D,MAAM,kBAAkB,GAAG,aAAa,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAClE,MAAM,oBAAoB,GAAG,aAAa,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACtE,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAE1E,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,kBAAkB;QAClB,oBAAoB;QACpB,gBAAgB;QAChB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;KAC9B,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAgB;IACnD,MAAM,kBAAkB,GAAG,aAAa,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACnE,MAAM,oBAAoB,GAAG,aAAa,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACvE,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAExE,OAAO;QACL,GAAG,KAAK;QACR,kBAAkB;QAClB,oBAAoB;QACpB,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAgB;IACxD,MAAM,qBAAqB,GAAG,IAAI,CAAC,SAAS,CAAC;QAC3C,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,+BAA+B;QAC5D,EAAE,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;KAC9B,CAAC,CAAC;IAEH,OAAO,qBAAqB,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAa;IAClD,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO;QACL,EAAE,EAAE,WAAW,CAAC,aAAa,CAAC,EAAE,CAAC;QACjC,EAAE,EAAE,aAAa,CAAC,aAAa,CAAC,EAAE,CAAC;KACpC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,SAAiB,EACjB,SAAiB;IAEjB,IAAI,aAAkC,CAAC;IACvC,IAAI,aAAkC,CAAC;IAEvC,IAAI,CAAC;QACH,aAAa,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,yDAAyD;QACzD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,CAAC;QACH,aAAa,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,yDAAyD;QACzD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,IAAI,aAAa,CAAC,GAAG,GAAG,aAAa,CAAC,GAAG,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC","sourcesContent":["import type { KeyPair } from '@metamask/toprf-secure-backup';\nimport {\n  base64ToBytes,\n  bigIntToHex,\n  bytesToBase64,\n  hexToBigInt,\n} from '@metamask/utils';\nimport { bytesToUtf8 } from '@noble/ciphers/utils';\n\nimport type {\n  DecodedBaseJWTToken,\n  DecodedNodeAuthToken,\n  DeserializedVaultData,\n  VaultData,\n} from './types';\n\n/**\n * Decode the node auth token from base64 to json object.\n *\n * @param token - The node auth token to decode.\n * @returns The decoded node auth token.\n */\nexport function decodeNodeAuthToken(token: string): DecodedNodeAuthToken {\n  return JSON.parse(bytesToUtf8(base64ToBytes(token)));\n}\n\n/**\n * Decode JWT token\n *\n * @param token - The JWT token to decode.\n * @returns The decoded JWT token.\n */\nexport function decodeJWTToken(token: string): DecodedBaseJWTToken {\n  // JWT tokens have 3 parts separated by dots: header.payload.signature\n  const parts = token.split('.');\n  if (parts.length !== 3) {\n    throw new Error('Invalid JWT token format');\n  }\n\n  // Decode the payload (second part)\n  const payload = parts[1];\n  // Add padding if needed for base64 decoding\n  const paddedPayload = payload + '='.repeat((4 - (payload.length % 4)) % 4);\n  const decoded = JSON.parse(bytesToUtf8(base64ToBytes(paddedPayload)));\n  return decoded as DecodedBaseJWTToken;\n}\n\n/**\n * Serialize the vault data.\n *\n * @param data - The vault data to serialize.\n * @returns The serialized vault data.\n */\nexport function serializeVaultData(data: DeserializedVaultData): string {\n  const toprfEncryptionKey = bytesToBase64(data.toprfEncryptionKey);\n  const toprfPwEncryptionKey = bytesToBase64(data.toprfPwEncryptionKey);\n  const toprfAuthKeyPair = serializeToprfAuthKeyPair(data.toprfAuthKeyPair);\n\n  return JSON.stringify({\n    toprfEncryptionKey,\n    toprfPwEncryptionKey,\n    toprfAuthKeyPair,\n    revokeToken: data.revokeToken,\n    accessToken: data.accessToken,\n  });\n}\n\n/**\n * Deserialize the vault data.\n *\n * @param value - The stringified vault data.\n * @returns The deserialized vault data.\n */\nexport function deserializeVaultData(value: VaultData): DeserializedVaultData {\n  const toprfEncryptionKey = base64ToBytes(value.toprfEncryptionKey);\n  const toprfPwEncryptionKey = base64ToBytes(value.toprfPwEncryptionKey);\n  const toprfAuthKeyPair = deserializeAuthKeyPair(value.toprfAuthKeyPair);\n\n  return {\n    ...value,\n    toprfEncryptionKey,\n    toprfPwEncryptionKey,\n    toprfAuthKeyPair,\n  };\n}\n\n/**\n * Serialize TOPRF authentication key pair.\n *\n * @param keyPair - The authentication key pair to serialize.\n * @returns The serialized authentication key pair.\n */\nexport function serializeToprfAuthKeyPair(keyPair: KeyPair): string {\n  const b64EncodedAuthKeyPair = JSON.stringify({\n    sk: bigIntToHex(keyPair.sk), // Convert BigInt to hex string\n    pk: bytesToBase64(keyPair.pk),\n  });\n\n  return b64EncodedAuthKeyPair;\n}\n\n/**\n * Deserialize the authentication key pair.\n *\n * @param value - The stringified authentication key pair.\n * @returns The deserialized authentication key pair.\n */\nexport function deserializeAuthKeyPair(value: string): KeyPair {\n  const parsedKeyPair = JSON.parse(value);\n  return {\n    sk: hexToBigInt(parsedKeyPair.sk),\n    pk: base64ToBytes(parsedKeyPair.pk),\n  };\n}\n\n/**\n * Compare two JWT tokens and return the latest token.\n *\n * @param jwtToken1 - The first JWT token to compare.\n * @param jwtToken2 - The second JWT token to compare.\n * @returns The latest JWT token.\n */\nexport function compareAndGetLatestToken(\n  jwtToken1: string,\n  jwtToken2: string,\n): string {\n  let decodedToken1: DecodedBaseJWTToken;\n  let decodedToken2: DecodedBaseJWTToken;\n\n  try {\n    decodedToken1 = decodeJWTToken(jwtToken1);\n  } catch {\n    // if the first token is invalid, return the second token\n    return jwtToken2;\n  }\n\n  try {\n    decodedToken2 = decodeJWTToken(jwtToken2);\n  } catch {\n    // if the second token is invalid, return the first token\n    return jwtToken1;\n  }\n\n  if (decodedToken1.exp > decodedToken2.exp) {\n    return jwtToken1;\n  }\n  return jwtToken2;\n}\n"]}
+{"version":3,"file":"utils.mjs","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AACA,OAAO,EACL,aAAa,EACb,WAAW,EACX,aAAa,EACb,WAAW,EACZ,wBAAwB;AACzB,OAAO,EAAE,WAAW,EAAE,6BAA6B;AASnD;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,KAAa;IAC1C,sEAAsE;IACtE,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IAED,mCAAmC;IACnC,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,4CAA4C;IAC5C,MAAM,aAAa,GAAG,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IACtE,OAAO,OAA8B,CAAC;AACxC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAA2B;IAC5D,MAAM,kBAAkB,GAAG,aAAa,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAClE,MAAM,oBAAoB,GAAG,aAAa,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACtE,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAE1E,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,kBAAkB;QAClB,oBAAoB;QACpB,gBAAgB;QAChB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;KAC9B,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAgB;IACnD,MAAM,kBAAkB,GAAG,aAAa,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACnE,MAAM,oBAAoB,GAAG,aAAa,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACvE,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAExE,OAAO;QACL,GAAG,KAAK;QACR,kBAAkB;QAClB,oBAAoB;QACpB,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CAAC,OAAgB;IACxD,MAAM,qBAAqB,GAAG,IAAI,CAAC,SAAS,CAAC;QAC3C,EAAE,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,+BAA+B;QAC5D,EAAE,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;KAC9B,CAAC,CAAC;IAEH,OAAO,qBAAqB,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAa;IAClD,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO;QACL,EAAE,EAAE,WAAW,CAAC,aAAa,CAAC,EAAE,CAAC;QACjC,EAAE,EAAE,aAAa,CAAC,aAAa,CAAC,EAAE,CAAC;KACpC,CAAC;AACJ,CAAC","sourcesContent":["import type { KeyPair } from '@metamask/toprf-secure-backup';\nimport {\n  base64ToBytes,\n  bigIntToHex,\n  bytesToBase64,\n  hexToBigInt,\n} from '@metamask/utils';\nimport { bytesToUtf8 } from '@noble/ciphers/utils';\n\nimport type {\n  DecodedBaseJWTToken,\n  DecodedNodeAuthToken,\n  DeserializedVaultData,\n  VaultData,\n} from './types';\n\n/**\n * Decode the node auth token from base64 to json object.\n *\n * @param token - The node auth token to decode.\n * @returns The decoded node auth token.\n */\nexport function decodeNodeAuthToken(token: string): DecodedNodeAuthToken {\n  return JSON.parse(bytesToUtf8(base64ToBytes(token)));\n}\n\n/**\n * Decode JWT token\n *\n * @param token - The JWT token to decode.\n * @returns The decoded JWT token.\n */\nexport function decodeJWTToken(token: string): DecodedBaseJWTToken {\n  // JWT tokens have 3 parts separated by dots: header.payload.signature\n  const parts = token.split('.');\n  if (parts.length !== 3) {\n    throw new Error('Invalid JWT token format');\n  }\n\n  // Decode the payload (second part)\n  const payload = parts[1];\n  // Add padding if needed for base64 decoding\n  const paddedPayload = payload + '='.repeat((4 - (payload.length % 4)) % 4);\n  const decoded = JSON.parse(bytesToUtf8(base64ToBytes(paddedPayload)));\n  return decoded as DecodedBaseJWTToken;\n}\n\n/**\n * Serialize the vault data.\n *\n * @param data - The vault data to serialize.\n * @returns The serialized vault data.\n */\nexport function serializeVaultData(data: DeserializedVaultData): string {\n  const toprfEncryptionKey = bytesToBase64(data.toprfEncryptionKey);\n  const toprfPwEncryptionKey = bytesToBase64(data.toprfPwEncryptionKey);\n  const toprfAuthKeyPair = serializeToprfAuthKeyPair(data.toprfAuthKeyPair);\n\n  return JSON.stringify({\n    toprfEncryptionKey,\n    toprfPwEncryptionKey,\n    toprfAuthKeyPair,\n    revokeToken: data.revokeToken,\n    accessToken: data.accessToken,\n  });\n}\n\n/**\n * Deserialize the vault data.\n *\n * @param value - The stringified vault data.\n * @returns The deserialized vault data.\n */\nexport function deserializeVaultData(value: VaultData): DeserializedVaultData {\n  const toprfEncryptionKey = base64ToBytes(value.toprfEncryptionKey);\n  const toprfPwEncryptionKey = base64ToBytes(value.toprfPwEncryptionKey);\n  const toprfAuthKeyPair = deserializeAuthKeyPair(value.toprfAuthKeyPair);\n\n  return {\n    ...value,\n    toprfEncryptionKey,\n    toprfPwEncryptionKey,\n    toprfAuthKeyPair,\n  };\n}\n\n/**\n * Serialize TOPRF authentication key pair.\n *\n * @param keyPair - The authentication key pair to serialize.\n * @returns The serialized authentication key pair.\n */\nexport function serializeToprfAuthKeyPair(keyPair: KeyPair): string {\n  const b64EncodedAuthKeyPair = JSON.stringify({\n    sk: bigIntToHex(keyPair.sk), // Convert BigInt to hex string\n    pk: bytesToBase64(keyPair.pk),\n  });\n\n  return b64EncodedAuthKeyPair;\n}\n\n/**\n * Deserialize the authentication key pair.\n *\n * @param value - The stringified authentication key pair.\n * @returns The deserialized authentication key pair.\n */\nexport function deserializeAuthKeyPair(value: string): KeyPair {\n  const parsedKeyPair = JSON.parse(value);\n  return {\n    sk: hexToBigInt(parsedKeyPair.sk),\n    pk: base64ToBytes(parsedKeyPair.pk),\n  };\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@metamask-previews/seedless-onboarding-controller",
-  "version": "7.1.0-preview-40468f94",
+  "version": "7.1.0-preview-fb7aa07ff",
   "description": "Backup and rehydrate SRP(s) using social login and password",
   "keywords": [
     "MetaMask",