@metamask/profile-sync-controller 0.0.0

package/CHANGELOG.md

@@ -0,0 +1,10 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+[Unreleased]: https://github.com/MetaMask/core/

package/LICENSE

@@ -0,0 +1,20 @@
+MIT License
+
+Copyright (c) 2024 MetaMask
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE

package/README.md

@@ -0,0 +1,15 @@
+# `@metamask/profile-sync-controller`
+
+The profile sync controller helps developers synchronize data across multiple clients and devices in a privacy-preserving way. All data saved in the user storage database is encrypted client-side to preserve privacy. The user storage provides a modular design, giving developers the flexibility to construct and manage their storage spaces in a way that best suits their needs
+
+## Installation
+
+`yarn add @metamask/profile-sync-controller`
+
+or
+
+`npm install @metamask/profile-sync-controller`
+
+## Contributing
+
+This package is part of a monorepo. Instructions for contributing can be found in the [monorepo README](https://github.com/MetaMask/core#readme).

package/dist/chunk-2FZSWVHT.mjs

@@ -0,0 +1,11 @@
+// src/sdk/authentication-jwt-bearer/types.ts
+var AuthType = /* @__PURE__ */ ((AuthType2) => {
+  AuthType2["SRP"] = "SRP";
+  AuthType2["SiWE"] = "SiWE";
+  return AuthType2;
+})(AuthType || {});
+
+export {
+  AuthType
+};
+//# sourceMappingURL=chunk-2FZSWVHT.mjs.map

package/dist/chunk-2FZSWVHT.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdk/authentication-jwt-bearer/types.ts"],"sourcesContent":["import type { Env } from '../env';\n\nexport const enum AuthType {\n  /* sign in using a private key derived from your secret recovery phrase (SRP). \n       Uses message signing snap to perform this operation */\n  SRP = 'SRP',\n\n  /* sign in with Ethereum */\n  SiWE = 'SiWE',\n}\n\nexport type AuthConfig = {\n  env: Env;\n  type: AuthType;\n};\n\nexport type AccessToken = {\n  /**\n   * The JWT Access Token\n   */\n  accessToken: string;\n  /**\n   * Expiration in seconds\n   */\n  expiresIn: number;\n  /**\n   * Date in milliseconds\n   */\n  obtainedAt: number;\n};\n\nexport type UserProfile = {\n  /**\n   * The \"Identifier\" used to log in with.\n   */\n  identifierId: string;\n  /**\n   * The Unique profile for a logged in user. A Profile can be logged in via multiple Identifiers\n   */\n  profileId: string;\n  /**\n   * Server MetaMetrics ID. Allows grouping of user events cross platform.\n   */\n  metaMetricsId: string;\n};\n\nexport type LoginResponse = {\n  token: AccessToken;\n  profile: UserProfile;\n};\n\nexport type IBaseAuth = {\n  getAccessToken: () => Promise<string>;\n  getUserProfile: () => Promise<UserProfile>;\n  getIdentifier: () => Promise<string>;\n  signMessage: (message: string) => Promise<string>;\n};\n\nexport type AuthStorageOptions = {\n  getLoginResponse: () => Promise<LoginResponse | null>;\n  setLoginResponse: (val: LoginResponse) => Promise<void>;\n};\n\nexport type AuthSigningOptions = {\n  signMessage: (message: string) => Promise<string>;\n  getIdentifier: () => Promise<string>;\n};\n\nexport type ErrorMessage = {\n  message: string;\n  error: string;\n};\n"],"mappings":";AAEO,IAAW,WAAX,kBAAWA,cAAX;AAGL,EAAAA,UAAA,SAAM;AAGN,EAAAA,UAAA,UAAO;AANS,SAAAA;AAAA,GAAA;","names":["AuthType"]}

package/dist/chunk-4NGEEDGV.mjs

@@ -0,0 +1,126 @@
+import {
+  SIWE_LOGIN_URL,
+  authenticate,
+  authorizeOIDC,
+  getNonce
+} from "./chunk-CYGZ4WLJ.mjs";
+import {
+  ValidationError
+} from "./chunk-BHVT2QEA.mjs";
+import {
+  SESSION_LIFETIME_MS
+} from "./chunk-KKRIOEXD.mjs";
+import {
+  __privateAdd,
+  __privateGet,
+  __privateMethod,
+  __privateSet
+} from "./chunk-XUI43LEZ.mjs";
+
+// src/sdk/authentication-jwt-bearer/flow-siwe.ts
+import { SiweMessage } from "siwe";
+var _config, _options, _signer, _getAuthSession, getAuthSession_fn, _login, login_fn, _createSiWELoginRawMessage, createSiWELoginRawMessage_fn, _assertSigner, assertSigner_fn;
+var SIWEJwtBearerAuth = class {
+  constructor(config, options) {
+    __privateAdd(this, _getAuthSession);
+    __privateAdd(this, _login);
+    __privateAdd(this, _createSiWELoginRawMessage);
+    __privateAdd(this, _assertSigner);
+    __privateAdd(this, _config, void 0);
+    __privateAdd(this, _options, void 0);
+    __privateAdd(this, _signer, void 0);
+    __privateSet(this, _config, config);
+    __privateSet(this, _options, options);
+  }
+  async getAccessToken() {
+    const session = await __privateMethod(this, _getAuthSession, getAuthSession_fn).call(this);
+    if (session) {
+      return session.token.accessToken;
+    }
+    const loginResponse = await __privateMethod(this, _login, login_fn).call(this);
+    return loginResponse.token.accessToken;
+  }
+  async getUserProfile() {
+    const session = await __privateMethod(this, _getAuthSession, getAuthSession_fn).call(this);
+    if (session) {
+      return session.profile;
+    }
+    const loginResponse = await __privateMethod(this, _login, login_fn).call(this);
+    return loginResponse.profile;
+  }
+  async getIdentifier() {
+    __privateMethod(this, _assertSigner, assertSigner_fn).call(this, __privateGet(this, _signer));
+    return __privateGet(this, _signer).address;
+  }
+  async signMessage(message) {
+    __privateMethod(this, _assertSigner, assertSigner_fn).call(this, __privateGet(this, _signer));
+    return await __privateGet(this, _signer).signMessage(message);
+  }
+  prepare(signer) {
+    __privateSet(this, _signer, signer);
+  }
+};
+_config = new WeakMap();
+_options = new WeakMap();
+_signer = new WeakMap();
+_getAuthSession = new WeakSet();
+getAuthSession_fn = async function() {
+  const auth = await __privateGet(this, _options).storage.getLoginResponse();
+  if (!auth) {
+    return null;
+  }
+  const currentTime = Date.now();
+  const sessionAge = currentTime - auth.token.obtainedAt;
+  if (sessionAge < SESSION_LIFETIME_MS) {
+    return auth;
+  }
+  return null;
+};
+_login = new WeakSet();
+login_fn = async function() {
+  __privateMethod(this, _assertSigner, assertSigner_fn).call(this, __privateGet(this, _signer));
+  const address = await this.getIdentifier();
+  const nonceRes = await getNonce(address, __privateGet(this, _config).env);
+  const rawMessage = __privateMethod(this, _createSiWELoginRawMessage, createSiWELoginRawMessage_fn).call(this, nonceRes.nonce);
+  const signature = await this.signMessage(rawMessage);
+  const authResponse = await authenticate(
+    rawMessage,
+    signature,
+    __privateGet(this, _config).type,
+    __privateGet(this, _config).env
+  );
+  const tokenResponse = await authorizeOIDC(
+    authResponse.token,
+    __privateGet(this, _config).env
+  );
+  const result = {
+    profile: authResponse.profile,
+    token: tokenResponse
+  };
+  await __privateGet(this, _options).storage.setLoginResponse(result);
+  return result;
+};
+_createSiWELoginRawMessage = new WeakSet();
+createSiWELoginRawMessage_fn = function(nonce) {
+  __privateMethod(this, _assertSigner, assertSigner_fn).call(this, __privateGet(this, _signer));
+  return new SiweMessage({
+    domain: __privateGet(this, _signer)?.domain,
+    address: __privateGet(this, _signer)?.address,
+    uri: SIWE_LOGIN_URL(__privateGet(this, _config).env),
+    version: "1",
+    chainId: __privateGet(this, _signer)?.chainId,
+    nonce,
+    issuedAt: (/* @__PURE__ */ new Date()).toISOString()
+  }).prepareMessage();
+};
+_assertSigner = new WeakSet();
+assertSigner_fn = function(signer) {
+  if (!signer) {
+    throw new ValidationError(`you must call 'prepare()' before logging in`);
+  }
+};
+
+export {
+  SIWEJwtBearerAuth
+};
+//# sourceMappingURL=chunk-4NGEEDGV.mjs.map

package/dist/chunk-4NGEEDGV.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdk/authentication-jwt-bearer/flow-siwe.ts"],"sourcesContent":["import { SiweMessage } from 'siwe';\n\nimport { ValidationError } from '../errors';\nimport { SESSION_LIFETIME_MS } from './constants';\nimport {\n  SIWE_LOGIN_URL,\n  authenticate,\n  authorizeOIDC,\n  getNonce,\n} from './services';\nimport type {\n  AuthConfig,\n  AuthStorageOptions,\n  AuthType,\n  IBaseAuth,\n  LoginResponse,\n  UserProfile,\n} from './types';\n\ntype JwtBearerAuth_SIWE_Options = {\n  storage: AuthStorageOptions;\n};\n\ntype JwtBearerAuth_SIWE_Signer = {\n  address: string;\n  chainId: number;\n  signMessage: (message: string) => Promise<string>;\n  domain: string;\n};\n\nexport class SIWEJwtBearerAuth implements IBaseAuth {\n  #config: AuthConfig;\n\n  #options: JwtBearerAuth_SIWE_Options;\n\n  #signer: JwtBearerAuth_SIWE_Signer | undefined;\n\n  constructor(\n    config: AuthConfig & { type: AuthType.SiWE },\n    options: JwtBearerAuth_SIWE_Options,\n  ) {\n    this.#config = config;\n    this.#options = options;\n  }\n\n  async getAccessToken(): Promise<string> {\n    const session = await this.#getAuthSession();\n    if (session) {\n      return session.token.accessToken;\n    }\n\n    const loginResponse = await this.#login();\n    return loginResponse.token.accessToken;\n  }\n\n  async getUserProfile(): Promise<UserProfile> {\n    const session = await this.#getAuthSession();\n    if (session) {\n      return session.profile;\n    }\n\n    const loginResponse = await this.#login();\n    return loginResponse.profile;\n  }\n\n  async getIdentifier(): Promise<string> {\n    this.#assertSigner(this.#signer);\n    return this.#signer.address;\n  }\n\n  async signMessage(message: string): Promise<string> {\n    this.#assertSigner(this.#signer);\n    return await this.#signer.signMessage(message);\n  }\n\n  prepare(signer: JwtBearerAuth_SIWE_Signer) {\n    this.#signer = signer;\n  }\n\n  async #getAuthSession(): Promise<LoginResponse | null> {\n    const auth = await this.#options.storage.getLoginResponse();\n    if (!auth) {\n      return null;\n    }\n\n    const currentTime = Date.now();\n    const sessionAge = currentTime - auth.token.obtainedAt;\n    if (sessionAge < SESSION_LIFETIME_MS) {\n      return auth;\n    }\n    return null;\n  }\n\n  async #login(): Promise<LoginResponse> {\n    this.#assertSigner(this.#signer);\n\n    // Nonce\n    const address = await this.getIdentifier();\n    const nonceRes = await getNonce(address, this.#config.env);\n    const rawMessage = this.#createSiWELoginRawMessage(nonceRes.nonce);\n    const signature = await this.signMessage(rawMessage);\n\n    // Authenticate\n    const authResponse = await authenticate(\n      rawMessage,\n      signature,\n      this.#config.type,\n      this.#config.env,\n    );\n\n    // Authorize\n    const tokenResponse = await authorizeOIDC(\n      authResponse.token,\n      this.#config.env,\n    );\n\n    // Save\n    const result: LoginResponse = {\n      profile: authResponse.profile,\n      token: tokenResponse,\n    };\n\n    await this.#options.storage.setLoginResponse(result);\n\n    return result;\n  }\n\n  #createSiWELoginRawMessage(nonce: string): string {\n    this.#assertSigner(this.#signer);\n\n    return new SiweMessage({\n      domain: this.#signer?.domain,\n      address: this.#signer?.address,\n      uri: SIWE_LOGIN_URL(this.#config.env),\n      version: '1',\n      chainId: this.#signer?.chainId,\n      nonce,\n      issuedAt: new Date().toISOString(),\n    }).prepareMessage();\n  }\n\n  #assertSigner(\n    signer?: JwtBearerAuth_SIWE_Signer,\n  ): asserts signer is JwtBearerAuth_SIWE_Signer {\n    if (!signer) {\n      throw new ValidationError(`you must call 'prepare()' before logging in`);\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA,SAAS,mBAAmB;AAA5B;AA8BO,IAAM,oBAAN,MAA6C;AAAA,EAOlD,YACE,QACA,SACA;AAuCF,uBAAM;AAcN,uBAAM;AAkCN;AAcA;AA9GA;AAEA;AAEA;AAME,uBAAK,SAAU;AACf,uBAAK,UAAW;AAAA,EAClB;AAAA,EAEA,MAAM,iBAAkC;AACtC,UAAM,UAAU,MAAM,sBAAK,oCAAL;AACtB,QAAI,SAAS;AACX,aAAO,QAAQ,MAAM;AAAA,IACvB;AAEA,UAAM,gBAAgB,MAAM,sBAAK,kBAAL;AAC5B,WAAO,cAAc,MAAM;AAAA,EAC7B;AAAA,EAEA,MAAM,iBAAuC;AAC3C,UAAM,UAAU,MAAM,sBAAK,oCAAL;AACtB,QAAI,SAAS;AACX,aAAO,QAAQ;AAAA,IACjB;AAEA,UAAM,gBAAgB,MAAM,sBAAK,kBAAL;AAC5B,WAAO,cAAc;AAAA,EACvB;AAAA,EAEA,MAAM,gBAAiC;AACrC,0BAAK,gCAAL,WAAmB,mBAAK;AACxB,WAAO,mBAAK,SAAQ;AAAA,EACtB;AAAA,EAEA,MAAM,YAAY,SAAkC;AAClD,0BAAK,gCAAL,WAAmB,mBAAK;AACxB,WAAO,MAAM,mBAAK,SAAQ,YAAY,OAAO;AAAA,EAC/C;AAAA,EAEA,QAAQ,QAAmC;AACzC,uBAAK,SAAU;AAAA,EACjB;AAuEF;AArHE;AAEA;AAEA;AA4CM;AAAA,oBAAe,iBAAkC;AACrD,QAAM,OAAO,MAAM,mBAAK,UAAS,QAAQ,iBAAiB;AAC1D,MAAI,CAAC,MAAM;AACT,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,KAAK,IAAI;AAC7B,QAAM,aAAa,cAAc,KAAK,MAAM;AAC5C,MAAI,aAAa,qBAAqB;AACpC,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEM;AAAA,WAAM,iBAA2B;AACrC,wBAAK,gCAAL,WAAmB,mBAAK;AAGxB,QAAM,UAAU,MAAM,KAAK,cAAc;AACzC,QAAM,WAAW,MAAM,SAAS,SAAS,mBAAK,SAAQ,GAAG;AACzD,QAAM,aAAa,sBAAK,0DAAL,WAAgC,SAAS;AAC5D,QAAM,YAAY,MAAM,KAAK,YAAY,UAAU;AAGnD,QAAM,eAAe,MAAM;AAAA,IACzB;AAAA,IACA;AAAA,IACA,mBAAK,SAAQ;AAAA,IACb,mBAAK,SAAQ;AAAA,EACf;AAGA,QAAM,gBAAgB,MAAM;AAAA,IAC1B,aAAa;AAAA,IACb,mBAAK,SAAQ;AAAA,EACf;AAGA,QAAM,SAAwB;AAAA,IAC5B,SAAS,aAAa;AAAA,IACtB,OAAO;AAAA,EACT;AAEA,QAAM,mBAAK,UAAS,QAAQ,iBAAiB,MAAM;AAEnD,SAAO;AACT;AAEA;AAAA,+BAA0B,SAAC,OAAuB;AAChD,wBAAK,gCAAL,WAAmB,mBAAK;AAExB,SAAO,IAAI,YAAY;AAAA,IACrB,QAAQ,mBAAK,UAAS;AAAA,IACtB,SAAS,mBAAK,UAAS;AAAA,IACvB,KAAK,eAAe,mBAAK,SAAQ,GAAG;AAAA,IACpC,SAAS;AAAA,IACT,SAAS,mBAAK,UAAS;AAAA,IACvB;AAAA,IACA,WAAU,oBAAI,KAAK,GAAE,YAAY;AAAA,EACnC,CAAC,EAAE,eAAe;AACpB;AAEA;AAAA,kBAAa,SACX,QAC6C;AAC7C,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,gBAAgB,6CAA6C;AAAA,EACzE;AACF;","names":[]}

package/dist/chunk-5EBUFNAN.mjs

@@ -0,0 +1,55 @@
+// src/sdk/utils/messaging-signing-snap-requests.ts
+var SNAP_ORIGIN = "npm:@metamask/message-signing-snap";
+var foundSnap = (snap) => snap.id === SNAP_ORIGIN;
+async function connectSnap(provider) {
+  const result = await provider.request({
+    method: "wallet_requestSnaps",
+    params: {
+      [SNAP_ORIGIN]: {}
+    }
+  });
+  return result;
+}
+async function getSnaps(provider) {
+  const result = await provider.request({
+    method: "wallet_getSnaps"
+  });
+  return result;
+}
+async function getSnap(provider) {
+  try {
+    const snaps = await getSnaps(provider);
+    return Object.values(snaps ?? {}).find((snap) => foundSnap(snap));
+  } catch (e) {
+    console.error("Failed to obtain installed snap", e);
+    return void 0;
+  }
+}
+var MESSAGE_SIGNING_SNAP = {
+  async getPublicKey(provider) {
+    const publicKey = await provider.request({
+      method: "wallet_invokeSnap",
+      params: { snapId: SNAP_ORIGIN, request: { method: "getPublicKey" } }
+    });
+    return publicKey;
+  },
+  async signMessage(provider, message) {
+    const signedMessage = await provider?.request({
+      method: "wallet_invokeSnap",
+      params: {
+        snapId: SNAP_ORIGIN,
+        request: { method: "signMessage", params: { message } }
+      }
+    });
+    return signedMessage;
+  }
+};
+
+export {
+  SNAP_ORIGIN,
+  connectSnap,
+  getSnaps,
+  getSnap,
+  MESSAGE_SIGNING_SNAP
+};
+//# sourceMappingURL=chunk-5EBUFNAN.mjs.map

package/dist/chunk-5EBUFNAN.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdk/utils/messaging-signing-snap-requests.ts"],"sourcesContent":["import type { Eip1193Provider } from 'ethers';\n\nexport type Snap = {\n  permissionName: string;\n  id: string;\n  version: string;\n  initialPermissions: Record<string, unknown>;\n};\nexport type GetSnapsResponse = Record<string, Snap>;\n\nexport const SNAP_ORIGIN = 'npm:@metamask/message-signing-snap';\n\nconst foundSnap = (snap: Snap) => snap.id === SNAP_ORIGIN;\n\n/**\n * Requests Connection to the Message Signing Snap\n *\n * @param provider - MetaMask Wallet Provider\n * @returns snap connect result\n */\nexport async function connectSnap(provider: Eip1193Provider): Promise<string> {\n  const result: string = await provider.request({\n    method: 'wallet_requestSnaps',\n    params: {\n      [SNAP_ORIGIN]: {},\n    },\n  });\n\n  return result;\n}\n\n/**\n * Gets Snaps from a MetaMask Wallet\n *\n * @param provider - MetaMask Wallet Provider\n * @returns All currently installed snaps.\n */\nexport async function getSnaps(\n  provider: Eip1193Provider,\n): Promise<GetSnapsResponse> {\n  const result: GetSnapsResponse = await provider.request({\n    method: 'wallet_getSnaps',\n  });\n\n  return result;\n}\n\n/**\n * Will return the message signing snap if installed\n * @param provider - MetaMask Wallet Provider\n */\nexport async function getSnap(\n  provider: Eip1193Provider,\n): Promise<Snap | undefined> {\n  try {\n    const snaps = await getSnaps(provider);\n    return Object.values(snaps ?? {}).find((snap) => foundSnap(snap));\n  } catch (e) {\n    console.error('Failed to obtain installed snap', e);\n    return undefined;\n  }\n}\n\nexport const MESSAGE_SIGNING_SNAP = {\n  async getPublicKey(provider: Eip1193Provider) {\n    const publicKey: string = await provider.request({\n      method: 'wallet_invokeSnap',\n      params: { snapId: SNAP_ORIGIN, request: { method: 'getPublicKey' } },\n    });\n\n    return publicKey;\n  },\n\n  async signMessage(provider: Eip1193Provider, message: `metamask:${string}`) {\n    const signedMessage: string = await provider?.request({\n      method: 'wallet_invokeSnap',\n      params: {\n        snapId: SNAP_ORIGIN,\n        request: { method: 'signMessage', params: { message } },\n      },\n    });\n\n    return signedMessage;\n  },\n};\n"],"mappings":";AAUO,IAAM,cAAc;AAE3B,IAAM,YAAY,CAAC,SAAe,KAAK,OAAO;AAQ9C,eAAsB,YAAY,UAA4C;AAC5E,QAAM,SAAiB,MAAM,SAAS,QAAQ;AAAA,IAC5C,QAAQ;AAAA,IACR,QAAQ;AAAA,MACN,CAAC,WAAW,GAAG,CAAC;AAAA,IAClB;AAAA,EACF,CAAC;AAED,SAAO;AACT;AAQA,eAAsB,SACpB,UAC2B;AAC3B,QAAM,SAA2B,MAAM,SAAS,QAAQ;AAAA,IACtD,QAAQ;AAAA,EACV,CAAC;AAED,SAAO;AACT;AAMA,eAAsB,QACpB,UAC2B;AAC3B,MAAI;AACF,UAAM,QAAQ,MAAM,SAAS,QAAQ;AACrC,WAAO,OAAO,OAAO,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,SAAS,UAAU,IAAI,CAAC;AAAA,EAClE,SAAS,GAAG;AACV,YAAQ,MAAM,mCAAmC,CAAC;AAClD,WAAO;AAAA,EACT;AACF;AAEO,IAAM,uBAAuB;AAAA,EAClC,MAAM,aAAa,UAA2B;AAC5C,UAAM,YAAoB,MAAM,SAAS,QAAQ;AAAA,MAC/C,QAAQ;AAAA,MACR,QAAQ,EAAE,QAAQ,aAAa,SAAS,EAAE,QAAQ,eAAe,EAAE;AAAA,IACrE,CAAC;AAED,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,YAAY,UAA2B,SAA+B;AAC1E,UAAM,gBAAwB,MAAM,UAAU,QAAQ;AAAA,MACpD,QAAQ;AAAA,MACR,QAAQ;AAAA,QACN,QAAQ;AAAA,QACR,SAAS,EAAE,QAAQ,eAAe,QAAQ,EAAE,QAAQ,EAAE;AAAA,MACxD;AAAA,IACF,CAAC;AAED,WAAO;AAAA,EACT;AACF;","names":[]}

package/dist/chunk-5XSXZTED.mjs

@@ -0,0 +1,57 @@
+// src/sdk/utils/eip-6963-metamask-provider.ts
+var metamaskClientsRdns = {
+  main: "io.metamask",
+  flask: "io.metamask.flask",
+  institutional: "io.metamask.mmi"
+};
+var providerCache = {};
+function getMetaMaskProviderEIP6963(type = "any") {
+  return new Promise((res) => {
+    if (type !== "any" && metamaskClientsRdns[type] === void 0) {
+      res(null);
+      return;
+    }
+    const cachedProvider = providerCache[type];
+    if (cachedProvider) {
+      res(cachedProvider);
+      return;
+    }
+    const providers = [];
+    const handleProviderEvent = (event) => {
+      const typedEvent = event;
+      const providerDetail = typedEvent?.detail;
+      if (providerDetail?.provider && providerDetail?.info?.rdns) {
+        providers.push({
+          rdns: providerDetail?.info?.rdns,
+          provider: providerDetail?.provider
+        });
+      }
+    };
+    window.addEventListener("eip6963:announceProvider", handleProviderEvent);
+    window.dispatchEvent(new Event("eip6963:requestProvider"));
+    setTimeout(() => {
+      window.removeEventListener(
+        "eip6963:announceProvider",
+        handleProviderEvent
+      );
+      let provider;
+      if (type === "any") {
+        const metamaskClients = Object.values(metamaskClientsRdns);
+        provider = providers.find((p) => metamaskClients.includes(p.rdns))?.provider ?? null;
+      } else {
+        const metamaskRdns = metamaskClientsRdns[type];
+        provider = providers.find((p) => p.rdns === metamaskRdns)?.provider ?? null;
+      }
+      if (provider) {
+        providerCache[type] = provider;
+      }
+      return res(provider);
+    }, 100);
+  });
+}
+
+export {
+  metamaskClientsRdns,
+  getMetaMaskProviderEIP6963
+};
+//# sourceMappingURL=chunk-5XSXZTED.mjs.map

package/dist/chunk-5XSXZTED.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdk/utils/eip-6963-metamask-provider.ts"],"sourcesContent":["import type { Eip1193Provider } from 'ethers';\n\n// We can isolate and create a metamask function/closure\nexport type AnnounceProviderEventDetail = {\n  info?: { rdns?: string };\n  provider?: Eip1193Provider;\n};\nexport type AnnounceProviderEvent = CustomEvent<AnnounceProviderEventDetail>;\n\nexport const metamaskClientsRdns = {\n  main: 'io.metamask',\n  flask: 'io.metamask.flask',\n  institutional: 'io.metamask.mmi',\n};\n\nexport type MetamaskClientRdnsKey = keyof typeof metamaskClientsRdns;\n\ntype MetaMaskClientType = 'any' | MetamaskClientRdnsKey;\n\n// Cache, as when the function is recalled, we can reuse instead of continue waiting\nconst providerCache: Partial<Record<MetaMaskClientType, Eip1193Provider>> = {};\n\n/**\n * This uses EIP6963 to find all metamask accounts and returns the first matching provider\n * the consumer requests (main, flask, institutional, or any)\n *\n * @param type - the MetaMask Wallet type (main, flask, institutional, or any)\n * @returns a ethers provider so you can make requests to that specific wallet\n */\nexport function getMetaMaskProviderEIP6963(\n  type: MetaMaskClientType = 'any',\n): Promise<Eip1193Provider | null> {\n  return new Promise<Eip1193Provider | null>((res) => {\n    if (type !== 'any' && metamaskClientsRdns[type] === undefined) {\n      res(null);\n      return;\n    }\n\n    const cachedProvider = providerCache[type];\n    if (cachedProvider) {\n      res(cachedProvider);\n      return;\n    }\n\n    const providers: { rdns: string; provider: Eip1193Provider }[] = [];\n\n    const handleProviderEvent = (event: unknown) => {\n      const typedEvent = event as CustomEvent<AnnounceProviderEventDetail>;\n      const providerDetail = typedEvent?.detail;\n      if (providerDetail?.provider && providerDetail?.info?.rdns) {\n        providers.push({\n          rdns: providerDetail?.info?.rdns,\n          provider: providerDetail?.provider,\n        });\n      }\n    };\n\n    window.addEventListener('eip6963:announceProvider', handleProviderEvent);\n    window.dispatchEvent(new Event('eip6963:requestProvider'));\n\n    /**\n     * It may take some time for the events to be emitted from the different wallets.\n     * So waiting a small period of time before we use the collected events.\n     */\n    setTimeout(() => {\n      // remove attached listener\n      window.removeEventListener(\n        'eip6963:announceProvider',\n        handleProviderEvent,\n      );\n\n      let provider: Eip1193Provider | null;\n      if (type === 'any') {\n        // return the first MM client we find\n        const metamaskClients = Object.values(metamaskClientsRdns);\n        provider =\n          providers.find((p) => metamaskClients.includes(p.rdns))?.provider ??\n          null;\n      } else {\n        const metamaskRdns = metamaskClientsRdns[type];\n        provider =\n          providers.find((p) => p.rdns === metamaskRdns)?.provider ?? null;\n      }\n\n      if (provider) {\n        providerCache[type] = provider;\n      }\n      return res(provider);\n    }, 100);\n  });\n}\n"],"mappings":";AASO,IAAM,sBAAsB;AAAA,EACjC,MAAM;AAAA,EACN,OAAO;AAAA,EACP,eAAe;AACjB;AAOA,IAAM,gBAAsE,CAAC;AAStE,SAAS,2BACd,OAA2B,OACM;AACjC,SAAO,IAAI,QAAgC,CAAC,QAAQ;AAClD,QAAI,SAAS,SAAS,oBAAoB,IAAI,MAAM,QAAW;AAC7D,UAAI,IAAI;AACR;AAAA,IACF;AAEA,UAAM,iBAAiB,cAAc,IAAI;AACzC,QAAI,gBAAgB;AAClB,UAAI,cAAc;AAClB;AAAA,IACF;AAEA,UAAM,YAA2D,CAAC;AAElE,UAAM,sBAAsB,CAAC,UAAmB;AAC9C,YAAM,aAAa;AACnB,YAAM,iBAAiB,YAAY;AACnC,UAAI,gBAAgB,YAAY,gBAAgB,MAAM,MAAM;AAC1D,kBAAU,KAAK;AAAA,UACb,MAAM,gBAAgB,MAAM;AAAA,UAC5B,UAAU,gBAAgB;AAAA,QAC5B,CAAC;AAAA,MACH;AAAA,IACF;AAEA,WAAO,iBAAiB,4BAA4B,mBAAmB;AACvE,WAAO,cAAc,IAAI,MAAM,yBAAyB,CAAC;AAMzD,eAAW,MAAM;AAEf,aAAO;AAAA,QACL;AAAA,QACA;AAAA,MACF;AAEA,UAAI;AACJ,UAAI,SAAS,OAAO;AAElB,cAAM,kBAAkB,OAAO,OAAO,mBAAmB;AACzD,mBACE,UAAU,KAAK,CAAC,MAAM,gBAAgB,SAAS,EAAE,IAAI,CAAC,GAAG,YACzD;AAAA,MACJ,OAAO;AACL,cAAM,eAAe,oBAAoB,IAAI;AAC7C,mBACE,UAAU,KAAK,CAAC,MAAM,EAAE,SAAS,YAAY,GAAG,YAAY;AAAA,MAChE;AAEA,UAAI,UAAU;AACZ,sBAAc,IAAI,IAAI;AAAA,MACxB;AACA,aAAO,IAAI,QAAQ;AAAA,IACrB,GAAG,GAAG;AAAA,EACR,CAAC;AACH;","names":[]}

package/dist/chunk-6X6I3HZU.js

@@ -0,0 +1,142 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+var _chunkVZXD5DCQjs = require('./chunk-VZXD5DCQ.js');
+
+
+var _chunkKHFPE566js = require('./chunk-KHFPE566.js');
+
+
+
+
+var _chunkGQLHSQGZjs = require('./chunk-GQLHSQGZ.js');
+
+
+
+var _chunkZ4BLTVTBjs = require('./chunk-Z4BLTVTB.js');
+
+// src/sdk/user-storage.ts
+var STORAGE_URL = (env, feature, entry) => `${_chunkKHFPE566js.getEnvUrls.call(void 0, env).userStorageApiUrl}/api/v1/userstorage/${feature}/${entry}`;
+var _upsertUserStorage, upsertUserStorage_fn, _getUserStorage, getUserStorage_fn, _createEntryKey, createEntryKey_fn, _getAuthorizationHeader, getAuthorizationHeader_fn;
+var UserStorage = class {
+  constructor(config, options) {
+    _chunkZ4BLTVTBjs.__privateAdd.call(void 0, this, _upsertUserStorage);
+    _chunkZ4BLTVTBjs.__privateAdd.call(void 0, this, _getUserStorage);
+    _chunkZ4BLTVTBjs.__privateAdd.call(void 0, this, _createEntryKey);
+    _chunkZ4BLTVTBjs.__privateAdd.call(void 0, this, _getAuthorizationHeader);
+    this.env = config.env;
+    this.config = config;
+    this.options = options;
+  }
+  async setItem(feature, key, value) {
+    if (!feature.trim() || !key.trim()) {
+      throw new (0, _chunkGQLHSQGZjs.ValidationError)("feature or key cannot be empty strings");
+    }
+    await _chunkZ4BLTVTBjs.__privateMethod.call(void 0, this, _upsertUserStorage, upsertUserStorage_fn).call(this, feature, key, value);
+  }
+  async getItem(feature, key) {
+    if (!feature.trim() || !key.trim()) {
+      throw new (0, _chunkGQLHSQGZjs.ValidationError)("feature or key cannot be empty strings");
+    }
+    return _chunkZ4BLTVTBjs.__privateMethod.call(void 0, this, _getUserStorage, getUserStorage_fn).call(this, feature, key);
+  }
+  async getStorageKey() {
+    const storageKey = await this.options.storage?.getStorageKey();
+    if (storageKey) {
+      return storageKey;
+    }
+    const userProfile = await this.config.auth.getUserProfile();
+    const storageKeySignature = await this.config.auth.signMessage(
+      `metamask:${userProfile.profileId}`
+    );
+    const hashedStorageKeySignature = _chunkVZXD5DCQjs.createSHA256Hash.call(void 0, storageKeySignature);
+    await this.options.storage?.setStorageKey(hashedStorageKeySignature);
+    return hashedStorageKeySignature;
+  }
+};
+_upsertUserStorage = new WeakSet();
+upsertUserStorage_fn = async function(feature, key, data) {
+  try {
+    const headers = await _chunkZ4BLTVTBjs.__privateMethod.call(void 0, this, _getAuthorizationHeader, getAuthorizationHeader_fn).call(this);
+    const storageKey = await this.getStorageKey();
+    const encryptedData = _chunkVZXD5DCQjs.encryption_default.encryptString(data, storageKey);
+    const url = new URL(
+      STORAGE_URL(this.env, feature, _chunkZ4BLTVTBjs.__privateMethod.call(void 0, this, _createEntryKey, createEntryKey_fn).call(this, key, storageKey))
+    );
+    const response = await fetch(url.toString(), {
+      method: "PUT",
+      headers: {
+        "Content-Type": "application/json",
+        ...headers
+      },
+      body: JSON.stringify({ data: encryptedData })
+    });
+    if (!response.ok) {
+      const responseBody = await response.json().catch(() => ({
+        message: "unknown",
+        error: "unknown"
+      }));
+      throw new Error(
+        `HTTP error message: ${responseBody.message}, error: ${responseBody.error}`
+      );
+    }
+  } catch (e) {
+    const errorMessage = e instanceof Error ? e.message : JSON.stringify(e ?? "");
+    throw new (0, _chunkGQLHSQGZjs.UserStorageError)(
+      `failed to upsert user storage for feature '${feature}' and key '${key}'. ${errorMessage}`
+    );
+  }
+};
+_getUserStorage = new WeakSet();
+getUserStorage_fn = async function(feature, key) {
+  try {
+    const headers = await _chunkZ4BLTVTBjs.__privateMethod.call(void 0, this, _getAuthorizationHeader, getAuthorizationHeader_fn).call(this);
+    const storageKey = await this.getStorageKey();
+    const url = new URL(
+      STORAGE_URL(this.env, feature, _chunkZ4BLTVTBjs.__privateMethod.call(void 0, this, _createEntryKey, createEntryKey_fn).call(this, key, storageKey))
+    );
+    const response = await fetch(url.toString(), {
+      headers: {
+        "Content-Type": "application/json",
+        ...headers
+      }
+    });
+    if (response.status === 404) {
+      throw new (0, _chunkGQLHSQGZjs.NotFoundError)(
+        `feature/key set not found for feature '${feature}' and key '${key}'.`
+      );
+    }
+    if (!response.ok) {
+      const responseBody = await response.json();
+      throw new Error(
+        `HTTP error message: ${responseBody.message}, error: ${responseBody.error}`
+      );
+    }
+    const { Data: encryptedData } = await response.json();
+    return _chunkVZXD5DCQjs.encryption_default.decryptString(encryptedData, storageKey);
+  } catch (e) {
+    if (e instanceof _chunkGQLHSQGZjs.NotFoundError) {
+      throw e;
+    }
+    const errorMessage = e instanceof Error ? e.message : JSON.stringify(e ?? "");
+    throw new (0, _chunkGQLHSQGZjs.UserStorageError)(
+      `failed to get user storage for feature '${feature}' and key '${key}'. ${errorMessage}`
+    );
+  }
+};
+_createEntryKey = new WeakSet();
+createEntryKey_fn = function(key, storageKey) {
+  const hashedKey = _chunkVZXD5DCQjs.createSHA256Hash.call(void 0, key + storageKey);
+  return hashedKey;
+};
+_getAuthorizationHeader = new WeakSet();
+getAuthorizationHeader_fn = async function() {
+  const accessToken = await this.config.auth.getAccessToken();
+  return { Authorization: `Bearer ${accessToken}` };
+};
+
+
+
+
+exports.STORAGE_URL = STORAGE_URL; exports.UserStorage = UserStorage;
+//# sourceMappingURL=chunk-6X6I3HZU.js.map

package/dist/chunk-6X6I3HZU.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdk/user-storage.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAMO,IAAM,cAAc,CAAC,KAAU,SAAiB,UACrD,GAAG,WAAW,GAAG,EAAE,iBAAiB,uBAAuB,OAAO,IAAI,KAAK;AAP7E;AA4BO,IAAM,cAAN,MAAkB;AAAA,EAOvB,YAAY,QAA2B,SAA6B;AAmCpE,uBAAM;AAyCN,uBAAM;AA6CN;AAKA,uBAAM;AA7HJ,SAAK,MAAM,OAAO;AAClB,SAAK,SAAS;AACd,SAAK,UAAU;AAAA,EACjB;AAAA,EAEA,MAAM,QAAQ,SAAiB,KAAa,OAA8B;AACxE,QAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,IAAI,KAAK,GAAG;AAClC,YAAM,IAAI,gBAAgB,wCAAwC;AAAA,IACpE;AACA,UAAM,sBAAK,0CAAL,WAAwB,SAAS,KAAK;AAAA,EAC9C;AAAA,EAEA,MAAM,QAAQ,SAAiB,KAA8B;AAC3D,QAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,IAAI,KAAK,GAAG;AAClC,YAAM,IAAI,gBAAgB,wCAAwC;AAAA,IACpE;AACA,WAAO,sBAAK,oCAAL,WAAqB,SAAS;AAAA,EACvC;AAAA,EAEA,MAAM,gBAAiC;AACrC,UAAM,aAAa,MAAM,KAAK,QAAQ,SAAS,cAAc;AAC7D,QAAI,YAAY;AACd,aAAO;AAAA,IACT;AAEA,UAAM,cAAc,MAAM,KAAK,OAAO,KAAK,eAAe;AAC1D,UAAM,sBAAsB,MAAM,KAAK,OAAO,KAAK;AAAA,MACjD,YAAY,YAAY,SAAS;AAAA,IACnC;AACA,UAAM,4BAA4B,iBAAiB,mBAAmB;AACtE,UAAM,KAAK,QAAQ,SAAS,cAAc,yBAAyB;AACnE,WAAO;AAAA,EACT;AAiGF;AA/FQ;AAAA,uBAAkB,eACtB,SACA,KACA,MACe;AACf,MAAI;AACF,UAAM,UAAU,MAAM,sBAAK,oDAAL;AACtB,UAAM,aAAa,MAAM,KAAK,cAAc;AAC5C,UAAM,gBAAgB,mBAAW,cAAc,MAAM,UAAU;AAC/D,UAAM,MAAM,IAAI;AAAA,MACd,YAAY,KAAK,KAAK,SAAS,sBAAK,oCAAL,WAAqB,KAAK,WAAW;AAAA,IACtE;AAEA,UAAM,WAAW,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,MAC3C,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,GAAG;AAAA,MACL;AAAA,MACA,MAAM,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAAA,IAC9C,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,eAA6B,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO;AAAA,QACpE,SAAS;AAAA,QACT,OAAO;AAAA,MACT,EAAE;AACF,YAAM,IAAI;AAAA,QACR,uBAAuB,aAAa,OAAO,YAAY,aAAa,KAAK;AAAA,MAC3E;AAAA,IACF;AAAA,EACF,SAAS,GAAG;AAEV,UAAM,eACJ,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,KAAK,EAAE;AACzD,UAAM,IAAI;AAAA,MACR,8CAA8C,OAAO,cAAc,GAAG,MAAM,YAAY;AAAA,IAC1F;AAAA,EACF;AACF;AAEM;AAAA,oBAAe,eAAC,SAAiB,KAA8B;AACnE,MAAI;AACF,UAAM,UAAU,MAAM,sBAAK,oDAAL;AACtB,UAAM,aAAa,MAAM,KAAK,cAAc;AAC5C,UAAM,MAAM,IAAI;AAAA,MACd,YAAY,KAAK,KAAK,SAAS,sBAAK,oCAAL,WAAqB,KAAK,WAAW;AAAA,IACtE;AAEA,UAAM,WAAW,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,MAC3C,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,GAAG;AAAA,MACL;AAAA,IACF,CAAC;AAED,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,IAAI;AAAA,QACR,0CAA0C,OAAO,cAAc,GAAG;AAAA,MACpE;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,eAAgB,MAAM,SAAS,KAAK;AAC1C,YAAM,IAAI;AAAA,QACR,uBAAuB,aAAa,OAAO,YAAY,aAAa,KAAK;AAAA,MAC3E;AAAA,IACF;AAEA,UAAM,EAAE,MAAM,cAAc,IAAI,MAAM,SAAS,KAAK;AACpD,WAAO,mBAAW,cAAc,eAAe,UAAU;AAAA,EAC3D,SAAS,GAAG;AACV,QAAI,aAAa,eAAe;AAC9B,YAAM;AAAA,IACR;AAGA,UAAM,eACJ,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,KAAK,EAAE;AAEzD,UAAM,IAAI;AAAA,MACR,2CAA2C,OAAO,cAAc,GAAG,MAAM,YAAY;AAAA,IACvF;AAAA,EACF;AACF;AAEA;AAAA,oBAAe,SAAC,KAAa,YAA4B;AACvD,QAAM,YAAY,iBAAiB,MAAM,UAAU;AACnD,SAAO;AACT;AAEM;AAAA,4BAAuB,iBAAuC;AAClE,QAAM,cAAc,MAAM,KAAK,OAAO,KAAK,eAAe;AAC1D,SAAO,EAAE,eAAe,UAAU,WAAW,GAAG;AAClD","sourcesContent":["import type { IBaseAuth } from './authentication-jwt-bearer/types';\nimport encryption, { createSHA256Hash } from './encryption';\nimport type { Env } from './env';\nimport { getEnvUrls } from './env';\nimport { NotFoundError, UserStorageError, ValidationError } from './errors';\n\nexport const STORAGE_URL = (env: Env, feature: string, entry: string) =>\n  `${getEnvUrls(env).userStorageApiUrl}/api/v1/userstorage/${feature}/${entry}`;\n\nexport type UserStorageConfig = {\n  env: Env;\n  auth: Pick<IBaseAuth, 'getAccessToken' | 'getUserProfile' | 'signMessage'>;\n};\n\nexport type StorageOptions = {\n  getStorageKey: () => Promise<string | null>;\n  setStorageKey: (val: string) => Promise<void>;\n};\n\nexport type UserStorageOptions = {\n  storage?: StorageOptions;\n};\n\ntype ErrorMessage = {\n  message: string;\n  error: string;\n};\n\nexport class UserStorage {\n  protected config: UserStorageConfig;\n\n  protected options: UserStorageOptions;\n\n  protected env: Env;\n\n  constructor(config: UserStorageConfig, options: UserStorageOptions) {\n    this.env = config.env;\n    this.config = config;\n    this.options = options;\n  }\n\n  async setItem(feature: string, key: string, value: string): Promise<void> {\n    if (!feature.trim() || !key.trim()) {\n      throw new ValidationError('feature or key cannot be empty strings');\n    }\n    await this.#upsertUserStorage(feature, key, value);\n  }\n\n  async getItem(feature: string, key: string): Promise<string> {\n    if (!feature.trim() || !key.trim()) {\n      throw new ValidationError('feature or key cannot be empty strings');\n    }\n    return this.#getUserStorage(feature, key);\n  }\n\n  async getStorageKey(): Promise<string> {\n    const storageKey = await this.options.storage?.getStorageKey();\n    if (storageKey) {\n      return storageKey;\n    }\n\n    const userProfile = await this.config.auth.getUserProfile();\n    const storageKeySignature = await this.config.auth.signMessage(\n      `metamask:${userProfile.profileId}`,\n    );\n    const hashedStorageKeySignature = createSHA256Hash(storageKeySignature);\n    await this.options.storage?.setStorageKey(hashedStorageKeySignature);\n    return hashedStorageKeySignature;\n  }\n\n  async #upsertUserStorage(\n    feature: string,\n    key: string,\n    data: string,\n  ): Promise<void> {\n    try {\n      const headers = await this.#getAuthorizationHeader();\n      const storageKey = await this.getStorageKey();\n      const encryptedData = encryption.encryptString(data, storageKey);\n      const url = new URL(\n        STORAGE_URL(this.env, feature, this.#createEntryKey(key, storageKey)),\n      );\n\n      const response = await fetch(url.toString(), {\n        method: 'PUT',\n        headers: {\n          'Content-Type': 'application/json',\n          ...headers,\n        },\n        body: JSON.stringify({ data: encryptedData }),\n      });\n\n      if (!response.ok) {\n        const responseBody: ErrorMessage = await response.json().catch(() => ({\n          message: 'unknown',\n          error: 'unknown',\n        }));\n        throw new Error(\n          `HTTP error message: ${responseBody.message}, error: ${responseBody.error}`,\n        );\n      }\n    } catch (e) {\n      /* istanbul ignore next */\n      const errorMessage =\n        e instanceof Error ? e.message : JSON.stringify(e ?? '');\n      throw new UserStorageError(\n        `failed to upsert user storage for feature '${feature}' and key '${key}'. ${errorMessage}`,\n      );\n    }\n  }\n\n  async #getUserStorage(feature: string, key: string): Promise<string> {\n    try {\n      const headers = await this.#getAuthorizationHeader();\n      const storageKey = await this.getStorageKey();\n      const url = new URL(\n        STORAGE_URL(this.env, feature, this.#createEntryKey(key, storageKey)),\n      );\n\n      const response = await fetch(url.toString(), {\n        headers: {\n          'Content-Type': 'application/json',\n          ...headers,\n        },\n      });\n\n      if (response.status === 404) {\n        throw new NotFoundError(\n          `feature/key set not found for feature '${feature}' and key '${key}'.`,\n        );\n      }\n\n      if (!response.ok) {\n        const responseBody = (await response.json()) as ErrorMessage;\n        throw new Error(\n          `HTTP error message: ${responseBody.message}, error: ${responseBody.error}`,\n        );\n      }\n\n      const { Data: encryptedData } = await response.json();\n      return encryption.decryptString(encryptedData, storageKey);\n    } catch (e) {\n      if (e instanceof NotFoundError) {\n        throw e;\n      }\n\n      /* istanbul ignore next */\n      const errorMessage =\n        e instanceof Error ? e.message : JSON.stringify(e ?? '');\n\n      throw new UserStorageError(\n        `failed to get user storage for feature '${feature}' and key '${key}'. ${errorMessage}`,\n      );\n    }\n  }\n\n  #createEntryKey(key: string, storageKey: string): string {\n    const hashedKey = createSHA256Hash(key + storageKey);\n    return hashedKey;\n  }\n\n  async #getAuthorizationHeader(): Promise<{ Authorization: string }> {\n    const accessToken = await this.config.auth.getAccessToken();\n    return { Authorization: `Bearer ${accessToken}` };\n  }\n}\n"]}

package/dist/chunk-BARZBXO7.js

@@ -0,0 +1,7 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});// src/sdk/authentication-jwt-bearer/constants.ts
+var SESSION_LIFETIME_MS = 45 * 60 * 1e3;
+
+
+
+exports.SESSION_LIFETIME_MS = SESSION_LIFETIME_MS;
+//# sourceMappingURL=chunk-BARZBXO7.js.map

package/dist/chunk-BARZBXO7.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdk/authentication-jwt-bearer/constants.ts"],"names":[],"mappings":";AAAO,IAAM,sBAAsB,KAAK,KAAK","sourcesContent":["export const SESSION_LIFETIME_MS = 45 * 60 * 1000; // 45 minutes in milliseconds\n"]}

package/dist/chunk-BHVT2QEA.mjs

@@ -0,0 +1,47 @@
+// src/sdk/errors.ts
+var NonceRetrievalError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "NonceRetrievalError";
+  }
+};
+var SignInError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "SignInError";
+  }
+};
+var UserStorageError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "UserStorageError";
+  }
+};
+var ValidationError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "ValidationError";
+  }
+};
+var UnsupportedAuthTypeError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "UnsupportedAuthTypeError";
+  }
+};
+var NotFoundError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "NotFoundError";
+  }
+};
+
+export {
+  NonceRetrievalError,
+  SignInError,
+  UserStorageError,
+  ValidationError,
+  UnsupportedAuthTypeError,
+  NotFoundError
+};
+//# sourceMappingURL=chunk-BHVT2QEA.mjs.map

package/dist/chunk-BHVT2QEA.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdk/errors.ts"],"sourcesContent":["export class NonceRetrievalError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'NonceRetrievalError';\n  }\n}\n\nexport class SignInError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'SignInError';\n  }\n}\n\nexport class UserStorageError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'UserStorageError';\n  }\n}\n\nexport class ValidationError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'ValidationError';\n  }\n}\n\nexport class UnsupportedAuthTypeError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'UnsupportedAuthTypeError';\n  }\n}\n\nexport class NotFoundError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'NotFoundError';\n  }\n}\n"],"mappings":";AAAO,IAAM,sBAAN,cAAkC,MAAM;AAAA,EAC7C,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,cAAN,cAA0B,MAAM;AAAA,EACrC,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,mBAAN,cAA+B,MAAM;AAAA,EAC1C,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,kBAAN,cAA8B,MAAM;AAAA,EACzC,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,2BAAN,cAAuC,MAAM;AAAA,EAClD,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,gBAAN,cAA4B,MAAM;AAAA,EACvC,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;","names":[]}

package/dist/chunk-CFST6GWE.js

@@ -0,0 +1,11 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});// src/sdk/authentication-jwt-bearer/types.ts
+var AuthType = /* @__PURE__ */ ((AuthType2) => {
+  AuthType2["SRP"] = "SRP";
+  AuthType2["SiWE"] = "SiWE";
+  return AuthType2;
+})(AuthType || {});
+
+
+
+exports.AuthType = AuthType;
+//# sourceMappingURL=chunk-CFST6GWE.js.map

package/dist/chunk-CFST6GWE.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdk/authentication-jwt-bearer/types.ts"],"names":["AuthType"],"mappings":";AAEO,IAAW,WAAX,kBAAWA,cAAX;AAGL,EAAAA,UAAA,SAAM;AAGN,EAAAA,UAAA,UAAO;AANS,SAAAA;AAAA,GAAA","sourcesContent":["import type { Env } from '../env';\n\nexport const enum AuthType {\n  /* sign in using a private key derived from your secret recovery phrase (SRP). \n       Uses message signing snap to perform this operation */\n  SRP = 'SRP',\n\n  /* sign in with Ethereum */\n  SiWE = 'SiWE',\n}\n\nexport type AuthConfig = {\n  env: Env;\n  type: AuthType;\n};\n\nexport type AccessToken = {\n  /**\n   * The JWT Access Token\n   */\n  accessToken: string;\n  /**\n   * Expiration in seconds\n   */\n  expiresIn: number;\n  /**\n   * Date in milliseconds\n   */\n  obtainedAt: number;\n};\n\nexport type UserProfile = {\n  /**\n   * The \"Identifier\" used to log in with.\n   */\n  identifierId: string;\n  /**\n   * The Unique profile for a logged in user. A Profile can be logged in via multiple Identifiers\n   */\n  profileId: string;\n  /**\n   * Server MetaMetrics ID. Allows grouping of user events cross platform.\n   */\n  metaMetricsId: string;\n};\n\nexport type LoginResponse = {\n  token: AccessToken;\n  profile: UserProfile;\n};\n\nexport type IBaseAuth = {\n  getAccessToken: () => Promise<string>;\n  getUserProfile: () => Promise<UserProfile>;\n  getIdentifier: () => Promise<string>;\n  signMessage: (message: string) => Promise<string>;\n};\n\nexport type AuthStorageOptions = {\n  getLoginResponse: () => Promise<LoginResponse | null>;\n  setLoginResponse: (val: LoginResponse) => Promise<void>;\n};\n\nexport type AuthSigningOptions = {\n  signMessage: (message: string) => Promise<string>;\n  getIdentifier: () => Promise<string>;\n};\n\nexport type ErrorMessage = {\n  message: string;\n  error: string;\n};\n"]}