@metamask/profile-sync-controller 0.0.0 → 0.1.1

package/dist/{chunk-VZXD5DCQ.js → chunk-P4DUDLMY.js}

@@ -2,7 +2,7 @@
 
 
 
-var _chunkZ4BLTVTBjs = require('./chunk-Z4BLTVTB.js');
+var _chunkIGY2S5BCjs = require('./chunk-IGY2S5BC.js');
 
 // src/sdk/encryption.ts
 var _aes = require('@noble/ciphers/aes');
@@ -23,24 +23,32 @@ function bytesToUtf8(byteArray) {
 var _ALGORITHM_NONCE_SIZE, _ALGORITHM_KEY_SIZE, _PBKDF2_SALT_SIZE, _PBKDF2_ITERATIONS, _encryptStringV1, encryptStringV1_fn, _decryptStringV1, decryptStringV1_fn, _encrypt, encrypt_fn, _decrypt, decrypt_fn;
 var EncryptorDecryptor = class {
   constructor() {
-    _chunkZ4BLTVTBjs.__privateAdd.call(void 0, this, _encryptStringV1);
-    _chunkZ4BLTVTBjs.__privateAdd.call(void 0, this, _decryptStringV1);
-    _chunkZ4BLTVTBjs.__privateAdd.call(void 0, this, _encrypt);
-    _chunkZ4BLTVTBjs.__privateAdd.call(void 0, this, _decrypt);
-    _chunkZ4BLTVTBjs.__privateAdd.call(void 0, this, _ALGORITHM_NONCE_SIZE, 12);
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _encryptStringV1);
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _decryptStringV1);
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _encrypt);
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _decrypt);
+    // TODO: Either fix this lint violation or explain why it's necessary to ignore.
+    // eslint-disable-next-line @typescript-eslint/naming-convention
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _ALGORITHM_NONCE_SIZE, 12);
     // 12 bytes
-    _chunkZ4BLTVTBjs.__privateAdd.call(void 0, this, _ALGORITHM_KEY_SIZE, 16);
+    // TODO: Either fix this lint violation or explain why it's necessary to ignore.
+    // eslint-disable-next-line @typescript-eslint/naming-convention
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _ALGORITHM_KEY_SIZE, 16);
     // 16 bytes
-    _chunkZ4BLTVTBjs.__privateAdd.call(void 0, this, _PBKDF2_SALT_SIZE, 16);
+    // TODO: Either fix this lint violation or explain why it's necessary to ignore.
+    // eslint-disable-next-line @typescript-eslint/naming-convention
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _PBKDF2_SALT_SIZE, 16);
     // 16 bytes
-    _chunkZ4BLTVTBjs.__privateAdd.call(void 0, this, _PBKDF2_ITERATIONS, 9e5);
+    // TODO: Either fix this lint violation or explain why it's necessary to ignore.
+    // eslint-disable-next-line @typescript-eslint/naming-convention
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _PBKDF2_ITERATIONS, 9e5);
   }
   encryptString(plaintext, password) {
     try {
       if (plaintext.trim().length === 0) {
         throw new Error("No plain text provided");
       }
-      return _chunkZ4BLTVTBjs.__privateMethod.call(void 0, this, _encryptStringV1, encryptStringV1_fn).call(this, plaintext, password);
+      return _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _encryptStringV1, encryptStringV1_fn).call(this, plaintext, password);
     } catch (e) {
       const errorMessage = e instanceof Error ? e.message : String(e);
       throw new Error(`Unable to encrypt string - ${errorMessage}`);
@@ -50,7 +58,7 @@ var EncryptorDecryptor = class {
     try {
       const encryptedData = JSON.parse(encryptedDataStr);
       if (encryptedData.v === "1") {
-        return _chunkZ4BLTVTBjs.__privateMethod.call(void 0, this, _decryptStringV1, decryptStringV1_fn).call(this, encryptedData, password);
+        return _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _decryptStringV1, decryptStringV1_fn).call(this, encryptedData, password);
       }
       throw new Error(
         `Unsupported encrypted data payload - ${JSON.stringify(encryptedData)}`
@@ -67,21 +75,21 @@ _PBKDF2_SALT_SIZE = new WeakMap();
 _PBKDF2_ITERATIONS = new WeakMap();
 _encryptStringV1 = new WeakSet();
 encryptStringV1_fn = function(plaintext, password) {
-  const salt = _webcrypto.randomBytes.call(void 0, _chunkZ4BLTVTBjs.__privateGet.call(void 0, this, _PBKDF2_SALT_SIZE));
+  const salt = _webcrypto.randomBytes.call(void 0, _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _PBKDF2_SALT_SIZE));
   const key = _pbkdf2.pbkdf2.call(void 0, _sha256.sha256, password, salt, {
-    c: _chunkZ4BLTVTBjs.__privateGet.call(void 0, this, _PBKDF2_ITERATIONS),
-    dkLen: _chunkZ4BLTVTBjs.__privateGet.call(void 0, this, _ALGORITHM_KEY_SIZE)
+    c: _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _PBKDF2_ITERATIONS),
+    dkLen: _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _ALGORITHM_KEY_SIZE)
   });
   const plaintextRaw = _utils.utf8ToBytes.call(void 0, plaintext);
   const ciphertextAndNonceAndSalt = _utils.concatBytes.call(void 0, 
     salt,
-    _chunkZ4BLTVTBjs.__privateMethod.call(void 0, this, _encrypt, encrypt_fn).call(this, plaintextRaw, key)
+    _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _encrypt, encrypt_fn).call(this, plaintextRaw, key)
   );
   const encryptedData = byteArrayToBase64(ciphertextAndNonceAndSalt);
   const encryptedPayload = {
     v: "1",
     d: encryptedData,
-    iterations: _chunkZ4BLTVTBjs.__privateGet.call(void 0, this, _PBKDF2_ITERATIONS)
+    iterations: _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _PBKDF2_ITERATIONS)
   };
   return JSON.stringify(encryptedPayload);
 };
@@ -91,34 +99,34 @@ decryptStringV1_fn = function(data, password) {
   const ciphertextAndNonceAndSalt = base64ToByteArray(
     base64CiphertextAndNonceAndSalt
   );
-  const salt = ciphertextAndNonceAndSalt.slice(0, _chunkZ4BLTVTBjs.__privateGet.call(void 0, this, _PBKDF2_SALT_SIZE));
+  const salt = ciphertextAndNonceAndSalt.slice(0, _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _PBKDF2_SALT_SIZE));
   const ciphertextAndNonce = ciphertextAndNonceAndSalt.slice(
-    _chunkZ4BLTVTBjs.__privateGet.call(void 0, this, _PBKDF2_SALT_SIZE),
+    _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _PBKDF2_SALT_SIZE),
     ciphertextAndNonceAndSalt.length
   );
   const key = _pbkdf2.pbkdf2.call(void 0, _sha256.sha256, password, salt, {
     c: iterations,
-    dkLen: _chunkZ4BLTVTBjs.__privateGet.call(void 0, this, _ALGORITHM_KEY_SIZE)
+    dkLen: _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _ALGORITHM_KEY_SIZE)
   });
-  return bytesToUtf8(_chunkZ4BLTVTBjs.__privateMethod.call(void 0, this, _decrypt, decrypt_fn).call(this, ciphertextAndNonce, key));
+  return bytesToUtf8(_chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _decrypt, decrypt_fn).call(this, ciphertextAndNonce, key));
 };
 _encrypt = new WeakSet();
 encrypt_fn = function(plaintext, key) {
-  const nonce = _webcrypto.randomBytes.call(void 0, _chunkZ4BLTVTBjs.__privateGet.call(void 0, this, _ALGORITHM_NONCE_SIZE));
+  const nonce = _webcrypto.randomBytes.call(void 0, _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _ALGORITHM_NONCE_SIZE));
   const ciphertext = _aes.gcm.call(void 0, key, nonce).encrypt(plaintext);
   return _utils.concatBytes.call(void 0, nonce, ciphertext);
 };
 _decrypt = new WeakSet();
 decrypt_fn = function(ciphertextAndNonce, key) {
-  const nonce = ciphertextAndNonce.slice(0, _chunkZ4BLTVTBjs.__privateGet.call(void 0, this, _ALGORITHM_NONCE_SIZE));
+  const nonce = ciphertextAndNonce.slice(0, _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _ALGORITHM_NONCE_SIZE));
   const ciphertext = ciphertextAndNonce.slice(
-    _chunkZ4BLTVTBjs.__privateGet.call(void 0, this, _ALGORITHM_NONCE_SIZE),
+    _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _ALGORITHM_NONCE_SIZE),
     ciphertextAndNonce.length
   );
   return _aes.gcm.call(void 0, key, nonce).decrypt(ciphertext);
 };
-var encryption = new EncryptorDecryptor();
-var encryption_default = encryption;
+var Encryption = new EncryptorDecryptor();
+var encryption_default = Encryption;
 function createSHA256Hash(data) {
   const hashedData = _sha256.sha256.call(void 0, data);
   return _utils.bytesToHex.call(void 0, hashedData);
@@ -127,5 +135,6 @@ function createSHA256Hash(data) {
 
 
 
-exports.encryption_default = encryption_default; exports.createSHA256Hash = createSHA256Hash;
-//# sourceMappingURL=chunk-VZXD5DCQ.js.map
+
+exports.Encryption = Encryption; exports.encryption_default = encryption_default; exports.createSHA256Hash = createSHA256Hash;
+//# sourceMappingURL=chunk-P4DUDLMY.js.map

package/dist/chunk-P4DUDLMY.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdk/encryption.ts"],"names":[],"mappings":";;;;;;;AAAA,SAAS,WAAW;AACpB,SAAS,mBAAmB;AAC5B,SAAS,cAAc;AACvB,SAAS,cAAc;AACvB,SAAS,aAAa,aAAa,kBAAkB;AAcrD,SAAS,kBAAkB,WAA+B;AACxD,SAAO,OAAO,KAAK,SAAS,EAAE,SAAS,QAAQ;AACjD;AAQA,SAAS,kBAAkB,QAA4B;AACrD,SAAO,IAAI,WAAW,OAAO,KAAK,QAAQ,QAAQ,CAAC;AACrD;AAOA,SAAS,YAAY,WAA+B;AAClD,QAAM,UAAU,IAAI,YAAY,OAAO;AACvC,SAAO,QAAQ,OAAO,SAAS;AACjC;AAxCA;AA0CA,IAAM,qBAAN,MAAyB;AAAA,EAAzB;AA+CE;AA4BA;AAyBA;AASA;AA1GA;AAAA;AAAA,8CAAwB;AAIxB;AAAA;AAAA;AAAA,4CAAsB;AAItB;AAAA;AAAA;AAAA,0CAAoB;AAIpB;AAAA;AAAA;AAAA,2CAAqB;AAAA;AAAA,EAErB,cAAc,WAAmB,UAA0B;AACzD,QAAI;AACF,UAAI,UAAU,KAAK,EAAE,WAAW,GAAG;AACjC,cAAM,IAAI,MAAM,wBAAwB;AAAA,MAC1C;AAEA,aAAO,sBAAK,sCAAL,WAAsB,WAAW;AAAA,IAC1C,SAAS,GAAG;AAEV,YAAM,eAAe,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AAC9D,YAAM,IAAI,MAAM,8BAA8B,YAAY,EAAE;AAAA,IAC9D;AAAA,EACF;AAAA,EAEA,cAAc,kBAA0B,UAA0B;AAChE,QAAI;AACF,YAAM,gBAAkC,KAAK,MAAM,gBAAgB;AACnE,UAAI,cAAc,MAAM,KAAK;AAC3B,eAAO,sBAAK,sCAAL,WAAsB,eAAe;AAAA,MAC9C;AACA,YAAM,IAAI;AAAA,QACR,wCAAwC,KAAK,UAAU,aAAa,CAAC;AAAA,MACvE;AAAA,IACF,SAAS,GAAG;AAEV,YAAM,eAAe,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AAC9D,YAAM,IAAI,MAAM,8BAA8B,YAAY,EAAE;AAAA,IAC9D;AAAA,EACF;AA2EF;AArHE;AAIA;AAIA;AAIA;AAgCA;AAAA,qBAAgB,SAAC,WAAmB,UAA0B;AAC5D,QAAM,OAAO,YAAY,mBAAK,kBAAiB;AAG/C,QAAM,MAAM,OAAO,QAAQ,UAAU,MAAM;AAAA,IACzC,GAAG,mBAAK;AAAA,IACR,OAAO,mBAAK;AAAA,EACd,CAAC;AAGD,QAAM,eAAe,YAAY,SAAS;AAC1C,QAAM,4BAA4B;AAAA,IAChC;AAAA,IACA,sBAAK,sBAAL,WAAc,cAAc;AAAA,EAC9B;AAGA,QAAM,gBAAgB,kBAAkB,yBAAyB;AAEjE,QAAM,mBAAqC;AAAA,IACzC,GAAG;AAAA,IACH,GAAG;AAAA,IACH,YAAY,mBAAK;AAAA,EACnB;AAEA,SAAO,KAAK,UAAU,gBAAgB;AACxC;AAEA;AAAA,qBAAgB,SAAC,MAAwB,UAA0B;AACjE,QAAM,EAAE,YAAY,GAAG,gCAAgC,IAAI;AAG3D,QAAM,4BAA4B;AAAA,IAChC;AAAA,EACF;AAGA,QAAM,OAAO,0BAA0B,MAAM,GAAG,mBAAK,kBAAiB;AACtE,QAAM,qBAAqB,0BAA0B;AAAA,IACnD,mBAAK;AAAA,IACL,0BAA0B;AAAA,EAC5B;AAGA,QAAM,MAAM,OAAO,QAAQ,UAAU,MAAM;AAAA,IACzC,GAAG;AAAA,IACH,OAAO,mBAAK;AAAA,EACd,CAAC;AAGD,SAAO,YAAY,sBAAK,sBAAL,WAAc,oBAAoB,IAAI;AAC3D;AAEA;AAAA,aAAQ,SAAC,WAAuB,KAA6B;AAC3D,QAAM,QAAQ,YAAY,mBAAK,sBAAqB;AAGpD,QAAM,aAAa,IAAI,KAAK,KAAK,EAAE,QAAQ,SAAS;AAEpD,SAAO,YAAY,OAAO,UAAU;AACtC;AAEA;AAAA,aAAQ,SAAC,oBAAgC,KAA6B;AAEpE,QAAM,QAAQ,mBAAmB,MAAM,GAAG,mBAAK,sBAAqB;AACpE,QAAM,aAAa,mBAAmB;AAAA,IACpC,mBAAK;AAAA,IACL,mBAAmB;AAAA,EACrB;AAGA,SAAO,IAAI,KAAK,KAAK,EAAE,QAAQ,UAAU;AAC3C;AAGK,IAAM,aAAa,IAAI,mBAAmB;AACjD,IAAO,qBAAQ;AAQR,SAAS,iBAAiB,MAAsB;AACrD,QAAM,aAAa,OAAO,IAAI;AAC9B,SAAO,WAAW,UAAU;AAC9B","sourcesContent":["import { gcm } from '@noble/ciphers/aes';\nimport { randomBytes } from '@noble/ciphers/webcrypto';\nimport { pbkdf2 } from '@noble/hashes/pbkdf2';\nimport { sha256 } from '@noble/hashes/sha256';\nimport { utf8ToBytes, concatBytes, bytesToHex } from '@noble/hashes/utils';\n\nexport type EncryptedPayload = {\n  v: '1'; // version\n  d: string; // data\n  iterations: number;\n};\n\n/**\n * Converts Byte Array to Base64 String\n *\n * @param byteArray - array of bytes\n * @returns base64 string\n */\nfunction byteArrayToBase64(byteArray: Uint8Array): string {\n  return Buffer.from(byteArray).toString('base64');\n}\n\n/**\n * Converts Base64 String into Byte Array\n *\n * @param base64 - base64 encoded string\n * @returns byte array\n */\nfunction base64ToByteArray(base64: string): Uint8Array {\n  return new Uint8Array(Buffer.from(base64, 'base64'));\n}\n\n/**\n * Converts Bytes into UTF-8 Encoded String\n * @param byteArray - array of bytes\n * @returns uft-8 encoded string\n */\nfunction bytesToUtf8(byteArray: Uint8Array): string {\n  const decoder = new TextDecoder('utf-8');\n  return decoder.decode(byteArray);\n}\n\nclass EncryptorDecryptor {\n  // TODO: Either fix this lint violation or explain why it's necessary to ignore.\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  #ALGORITHM_NONCE_SIZE = 12; // 12 bytes\n\n  // TODO: Either fix this lint violation or explain why it's necessary to ignore.\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  #ALGORITHM_KEY_SIZE = 16; // 16 bytes\n\n  // TODO: Either fix this lint violation or explain why it's necessary to ignore.\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  #PBKDF2_SALT_SIZE = 16; // 16 bytes\n\n  // TODO: Either fix this lint violation or explain why it's necessary to ignore.\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  #PBKDF2_ITERATIONS = 900_000;\n\n  encryptString(plaintext: string, password: string): string {\n    try {\n      if (plaintext.trim().length === 0) {\n        throw new Error('No plain text provided');\n      }\n\n      return this.#encryptStringV1(plaintext, password);\n    } catch (e) {\n      /* istanbul ignore next */\n      const errorMessage = e instanceof Error ? e.message : String(e);\n      throw new Error(`Unable to encrypt string - ${errorMessage}`);\n    }\n  }\n\n  decryptString(encryptedDataStr: string, password: string): string {\n    try {\n      const encryptedData: EncryptedPayload = JSON.parse(encryptedDataStr);\n      if (encryptedData.v === '1') {\n        return this.#decryptStringV1(encryptedData, password);\n      }\n      throw new Error(\n        `Unsupported encrypted data payload - ${JSON.stringify(encryptedData)}`,\n      );\n    } catch (e) {\n      /* istanbul ignore next */\n      const errorMessage = e instanceof Error ? e.message : String(e);\n      throw new Error(`Unable to decrypt string - ${errorMessage}`);\n    }\n  }\n\n  #encryptStringV1(plaintext: string, password: string): string {\n    const salt = randomBytes(this.#PBKDF2_SALT_SIZE);\n\n    // Derive a key using PBKDF2.\n    const key = pbkdf2(sha256, password, salt, {\n      c: this.#PBKDF2_ITERATIONS,\n      dkLen: this.#ALGORITHM_KEY_SIZE,\n    });\n\n    // Encrypt and prepend salt.\n    const plaintextRaw = utf8ToBytes(plaintext);\n    const ciphertextAndNonceAndSalt = concatBytes(\n      salt,\n      this.#encrypt(plaintextRaw, key),\n    );\n\n    // Convert to Base64\n    const encryptedData = byteArrayToBase64(ciphertextAndNonceAndSalt);\n\n    const encryptedPayload: EncryptedPayload = {\n      v: '1',\n      d: encryptedData,\n      iterations: this.#PBKDF2_ITERATIONS,\n    };\n\n    return JSON.stringify(encryptedPayload);\n  }\n\n  #decryptStringV1(data: EncryptedPayload, password: string): string {\n    const { iterations, d: base64CiphertextAndNonceAndSalt } = data;\n\n    // Decode the base64.\n    const ciphertextAndNonceAndSalt = base64ToByteArray(\n      base64CiphertextAndNonceAndSalt,\n    );\n\n    // Create buffers of salt and ciphertextAndNonce.\n    const salt = ciphertextAndNonceAndSalt.slice(0, this.#PBKDF2_SALT_SIZE);\n    const ciphertextAndNonce = ciphertextAndNonceAndSalt.slice(\n      this.#PBKDF2_SALT_SIZE,\n      ciphertextAndNonceAndSalt.length,\n    );\n\n    // Derive the key using PBKDF2.\n    const key = pbkdf2(sha256, password, salt, {\n      c: iterations,\n      dkLen: this.#ALGORITHM_KEY_SIZE,\n    });\n\n    // Decrypt and return result.\n    return bytesToUtf8(this.#decrypt(ciphertextAndNonce, key));\n  }\n\n  #encrypt(plaintext: Uint8Array, key: Uint8Array): Uint8Array {\n    const nonce = randomBytes(this.#ALGORITHM_NONCE_SIZE);\n\n    // Encrypt and prepend nonce.\n    const ciphertext = gcm(key, nonce).encrypt(plaintext);\n\n    return concatBytes(nonce, ciphertext);\n  }\n\n  #decrypt(ciphertextAndNonce: Uint8Array, key: Uint8Array): Uint8Array {\n    // Create buffers of nonce and ciphertext.\n    const nonce = ciphertextAndNonce.slice(0, this.#ALGORITHM_NONCE_SIZE);\n    const ciphertext = ciphertextAndNonce.slice(\n      this.#ALGORITHM_NONCE_SIZE,\n      ciphertextAndNonce.length,\n    );\n\n    // Decrypt and return result.\n    return gcm(key, nonce).decrypt(ciphertext);\n  }\n}\n\nexport const Encryption = new EncryptorDecryptor();\nexport default Encryption;\n\n/**\n * Create a SHA-256 hash from a given string.\n *\n * @param data - input\n * @returns hash\n */\nexport function createSHA256Hash(data: string): string {\n  const hashedData = sha256(data);\n  return bytesToHex(hashedData);\n}\n"]}

package/dist/{chunk-6X6I3HZU.js → chunk-P52TG263.js}

@@ -1,44 +1,46 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
 
-var _chunkVZXD5DCQjs = require('./chunk-VZXD5DCQ.js');
+var _chunkP4DUDLMYjs = require('./chunk-P4DUDLMY.js');
 
 
-var _chunkKHFPE566js = require('./chunk-KHFPE566.js');
+var _chunkSMKTWM6Ijs = require('./chunk-SMKTWM6I.js');
 
 
 
 
-var _chunkGQLHSQGZjs = require('./chunk-GQLHSQGZ.js');
+var _chunkMBTBE4P5js = require('./chunk-MBTBE4P5.js');
 
 
 
-var _chunkZ4BLTVTBjs = require('./chunk-Z4BLTVTB.js');
+var _chunkIGY2S5BCjs = require('./chunk-IGY2S5BC.js');
 
 // src/sdk/user-storage.ts
-var STORAGE_URL = (env, feature, entry) => `${_chunkKHFPE566js.getEnvUrls.call(void 0, env).userStorageApiUrl}/api/v1/userstorage/${feature}/${entry}`;
+var STORAGE_URL = (env, feature, entry) => `${_chunkSMKTWM6Ijs.getEnvUrls.call(void 0, env).userStorageApiUrl}/api/v1/userstorage/${feature}/${entry}`;
 var _upsertUserStorage, upsertUserStorage_fn, _getUserStorage, getUserStorage_fn, _createEntryKey, createEntryKey_fn, _getAuthorizationHeader, getAuthorizationHeader_fn;
 var UserStorage = class {
   constructor(config, options) {
-    _chunkZ4BLTVTBjs.__privateAdd.call(void 0, this, _upsertUserStorage);
-    _chunkZ4BLTVTBjs.__privateAdd.call(void 0, this, _getUserStorage);
-    _chunkZ4BLTVTBjs.__privateAdd.call(void 0, this, _createEntryKey);
-    _chunkZ4BLTVTBjs.__privateAdd.call(void 0, this, _getAuthorizationHeader);
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _upsertUserStorage);
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _getUserStorage);
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _createEntryKey);
+    // TODO: Either fix this lint violation or explain why it's necessary to ignore.
+    // eslint-disable-next-line @typescript-eslint/naming-convention
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _getAuthorizationHeader);
     this.env = config.env;
     this.config = config;
     this.options = options;
   }
   async setItem(feature, key, value) {
     if (!feature.trim() || !key.trim()) {
-      throw new (0, _chunkGQLHSQGZjs.ValidationError)("feature or key cannot be empty strings");
+      throw new (0, _chunkMBTBE4P5js.ValidationError)("feature or key cannot be empty strings");
     }
-    await _chunkZ4BLTVTBjs.__privateMethod.call(void 0, this, _upsertUserStorage, upsertUserStorage_fn).call(this, feature, key, value);
+    await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _upsertUserStorage, upsertUserStorage_fn).call(this, feature, key, value);
   }
   async getItem(feature, key) {
     if (!feature.trim() || !key.trim()) {
-      throw new (0, _chunkGQLHSQGZjs.ValidationError)("feature or key cannot be empty strings");
+      throw new (0, _chunkMBTBE4P5js.ValidationError)("feature or key cannot be empty strings");
     }
-    return _chunkZ4BLTVTBjs.__privateMethod.call(void 0, this, _getUserStorage, getUserStorage_fn).call(this, feature, key);
+    return _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _getUserStorage, getUserStorage_fn).call(this, feature, key);
   }
   async getStorageKey() {
     const storageKey = await this.options.storage?.getStorageKey();
@@ -49,7 +51,7 @@ var UserStorage = class {
     const storageKeySignature = await this.config.auth.signMessage(
       `metamask:${userProfile.profileId}`
     );
-    const hashedStorageKeySignature = _chunkVZXD5DCQjs.createSHA256Hash.call(void 0, storageKeySignature);
+    const hashedStorageKeySignature = _chunkP4DUDLMYjs.createSHA256Hash.call(void 0, storageKeySignature);
     await this.options.storage?.setStorageKey(hashedStorageKeySignature);
     return hashedStorageKeySignature;
   }
@@ -57,11 +59,11 @@ var UserStorage = class {
 _upsertUserStorage = new WeakSet();
 upsertUserStorage_fn = async function(feature, key, data) {
   try {
-    const headers = await _chunkZ4BLTVTBjs.__privateMethod.call(void 0, this, _getAuthorizationHeader, getAuthorizationHeader_fn).call(this);
+    const headers = await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _getAuthorizationHeader, getAuthorizationHeader_fn).call(this);
     const storageKey = await this.getStorageKey();
-    const encryptedData = _chunkVZXD5DCQjs.encryption_default.encryptString(data, storageKey);
+    const encryptedData = _chunkP4DUDLMYjs.encryption_default.encryptString(data, storageKey);
     const url = new URL(
-      STORAGE_URL(this.env, feature, _chunkZ4BLTVTBjs.__privateMethod.call(void 0, this, _createEntryKey, createEntryKey_fn).call(this, key, storageKey))
+      STORAGE_URL(this.env, feature, _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _createEntryKey, createEntryKey_fn).call(this, key, storageKey))
     );
     const response = await fetch(url.toString(), {
       method: "PUT",
@@ -82,7 +84,7 @@ upsertUserStorage_fn = async function(feature, key, data) {
     }
   } catch (e) {
     const errorMessage = e instanceof Error ? e.message : JSON.stringify(e ?? "");
-    throw new (0, _chunkGQLHSQGZjs.UserStorageError)(
+    throw new (0, _chunkMBTBE4P5js.UserStorageError)(
       `failed to upsert user storage for feature '${feature}' and key '${key}'. ${errorMessage}`
     );
   }
@@ -90,10 +92,10 @@ upsertUserStorage_fn = async function(feature, key, data) {
 _getUserStorage = new WeakSet();
 getUserStorage_fn = async function(feature, key) {
   try {
-    const headers = await _chunkZ4BLTVTBjs.__privateMethod.call(void 0, this, _getAuthorizationHeader, getAuthorizationHeader_fn).call(this);
+    const headers = await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _getAuthorizationHeader, getAuthorizationHeader_fn).call(this);
     const storageKey = await this.getStorageKey();
     const url = new URL(
-      STORAGE_URL(this.env, feature, _chunkZ4BLTVTBjs.__privateMethod.call(void 0, this, _createEntryKey, createEntryKey_fn).call(this, key, storageKey))
+      STORAGE_URL(this.env, feature, _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _createEntryKey, createEntryKey_fn).call(this, key, storageKey))
     );
     const response = await fetch(url.toString(), {
       headers: {
@@ -102,7 +104,7 @@ getUserStorage_fn = async function(feature, key) {
       }
     });
     if (response.status === 404) {
-      throw new (0, _chunkGQLHSQGZjs.NotFoundError)(
+      throw new (0, _chunkMBTBE4P5js.NotFoundError)(
         `feature/key set not found for feature '${feature}' and key '${key}'.`
       );
     }
@@ -113,20 +115,20 @@ getUserStorage_fn = async function(feature, key) {
       );
     }
     const { Data: encryptedData } = await response.json();
-    return _chunkVZXD5DCQjs.encryption_default.decryptString(encryptedData, storageKey);
+    return _chunkP4DUDLMYjs.encryption_default.decryptString(encryptedData, storageKey);
   } catch (e) {
-    if (e instanceof _chunkGQLHSQGZjs.NotFoundError) {
+    if (e instanceof _chunkMBTBE4P5js.NotFoundError) {
       throw e;
     }
     const errorMessage = e instanceof Error ? e.message : JSON.stringify(e ?? "");
-    throw new (0, _chunkGQLHSQGZjs.UserStorageError)(
+    throw new (0, _chunkMBTBE4P5js.UserStorageError)(
       `failed to get user storage for feature '${feature}' and key '${key}'. ${errorMessage}`
     );
   }
 };
 _createEntryKey = new WeakSet();
 createEntryKey_fn = function(key, storageKey) {
-  const hashedKey = _chunkVZXD5DCQjs.createSHA256Hash.call(void 0, key + storageKey);
+  const hashedKey = _chunkP4DUDLMYjs.createSHA256Hash.call(void 0, key + storageKey);
   return hashedKey;
 };
 _getAuthorizationHeader = new WeakSet();
@@ -139,4 +141,4 @@ getAuthorizationHeader_fn = async function() {
 
 
 exports.STORAGE_URL = STORAGE_URL; exports.UserStorage = UserStorage;
-//# sourceMappingURL=chunk-6X6I3HZU.js.map
+//# sourceMappingURL=chunk-P52TG263.js.map

package/dist/chunk-P52TG263.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdk/user-storage.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;AAMO,IAAM,cAAc,CAAC,KAAU,SAAiB,UACrD,GAAG,WAAW,GAAG,EAAE,iBAAiB,uBAAuB,OAAO,IAAI,KAAK;AAP7E;AA4BO,IAAM,cAAN,MAAkB;AAAA,EAOvB,YAAY,QAA2B,SAA6B;AAmCpE,uBAAM;AAyCN,uBAAM;AA6CN;AAOA;AAAA;AAAA,uBAAM;AA/HJ,SAAK,MAAM,OAAO;AAClB,SAAK,SAAS;AACd,SAAK,UAAU;AAAA,EACjB;AAAA,EAEA,MAAM,QAAQ,SAAiB,KAAa,OAA8B;AACxE,QAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,IAAI,KAAK,GAAG;AAClC,YAAM,IAAI,gBAAgB,wCAAwC;AAAA,IACpE;AACA,UAAM,sBAAK,0CAAL,WAAwB,SAAS,KAAK;AAAA,EAC9C;AAAA,EAEA,MAAM,QAAQ,SAAiB,KAA8B;AAC3D,QAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,IAAI,KAAK,GAAG;AAClC,YAAM,IAAI,gBAAgB,wCAAwC;AAAA,IACpE;AACA,WAAO,sBAAK,oCAAL,WAAqB,SAAS;AAAA,EACvC;AAAA,EAEA,MAAM,gBAAiC;AACrC,UAAM,aAAa,MAAM,KAAK,QAAQ,SAAS,cAAc;AAC7D,QAAI,YAAY;AACd,aAAO;AAAA,IACT;AAEA,UAAM,cAAc,MAAM,KAAK,OAAO,KAAK,eAAe;AAC1D,UAAM,sBAAsB,MAAM,KAAK,OAAO,KAAK;AAAA,MACjD,YAAY,YAAY,SAAS;AAAA,IACnC;AACA,UAAM,4BAA4B,iBAAiB,mBAAmB;AACtE,UAAM,KAAK,QAAQ,SAAS,cAAc,yBAAyB;AACnE,WAAO;AAAA,EACT;AAmGF;AAjGQ;AAAA,uBAAkB,eACtB,SACA,KACA,MACe;AACf,MAAI;AACF,UAAM,UAAU,MAAM,sBAAK,oDAAL;AACtB,UAAM,aAAa,MAAM,KAAK,cAAc;AAC5C,UAAM,gBAAgB,mBAAW,cAAc,MAAM,UAAU;AAC/D,UAAM,MAAM,IAAI;AAAA,MACd,YAAY,KAAK,KAAK,SAAS,sBAAK,oCAAL,WAAqB,KAAK,WAAW;AAAA,IACtE;AAEA,UAAM,WAAW,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,MAC3C,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,GAAG;AAAA,MACL;AAAA,MACA,MAAM,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAAA,IAC9C,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,eAA6B,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO;AAAA,QACpE,SAAS;AAAA,QACT,OAAO;AAAA,MACT,EAAE;AACF,YAAM,IAAI;AAAA,QACR,uBAAuB,aAAa,OAAO,YAAY,aAAa,KAAK;AAAA,MAC3E;AAAA,IACF;AAAA,EACF,SAAS,GAAG;AAEV,UAAM,eACJ,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,KAAK,EAAE;AACzD,UAAM,IAAI;AAAA,MACR,8CAA8C,OAAO,cAAc,GAAG,MAAM,YAAY;AAAA,IAC1F;AAAA,EACF;AACF;AAEM;AAAA,oBAAe,eAAC,SAAiB,KAA8B;AACnE,MAAI;AACF,UAAM,UAAU,MAAM,sBAAK,oDAAL;AACtB,UAAM,aAAa,MAAM,KAAK,cAAc;AAC5C,UAAM,MAAM,IAAI;AAAA,MACd,YAAY,KAAK,KAAK,SAAS,sBAAK,oCAAL,WAAqB,KAAK,WAAW;AAAA,IACtE;AAEA,UAAM,WAAW,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,MAC3C,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,GAAG;AAAA,MACL;AAAA,IACF,CAAC;AAED,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,IAAI;AAAA,QACR,0CAA0C,OAAO,cAAc,GAAG;AAAA,MACpE;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,eAAgB,MAAM,SAAS,KAAK;AAC1C,YAAM,IAAI;AAAA,QACR,uBAAuB,aAAa,OAAO,YAAY,aAAa,KAAK;AAAA,MAC3E;AAAA,IACF;AAEA,UAAM,EAAE,MAAM,cAAc,IAAI,MAAM,SAAS,KAAK;AACpD,WAAO,mBAAW,cAAc,eAAe,UAAU;AAAA,EAC3D,SAAS,GAAG;AACV,QAAI,aAAa,eAAe;AAC9B,YAAM;AAAA,IACR;AAGA,UAAM,eACJ,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,KAAK,EAAE;AAEzD,UAAM,IAAI;AAAA,MACR,2CAA2C,OAAO,cAAc,GAAG,MAAM,YAAY;AAAA,IACvF;AAAA,EACF;AACF;AAEA;AAAA,oBAAe,SAAC,KAAa,YAA4B;AACvD,QAAM,YAAY,iBAAiB,MAAM,UAAU;AACnD,SAAO;AACT;AAIM;AAAA,4BAAuB,iBAAuC;AAClE,QAAM,cAAc,MAAM,KAAK,OAAO,KAAK,eAAe;AAC1D,SAAO,EAAE,eAAe,UAAU,WAAW,GAAG;AAClD","sourcesContent":["import type { IBaseAuth } from './authentication-jwt-bearer/types';\nimport encryption, { createSHA256Hash } from './encryption';\nimport type { Env } from './env';\nimport { getEnvUrls } from './env';\nimport { NotFoundError, UserStorageError, ValidationError } from './errors';\n\nexport const STORAGE_URL = (env: Env, feature: string, entry: string) =>\n  `${getEnvUrls(env).userStorageApiUrl}/api/v1/userstorage/${feature}/${entry}`;\n\nexport type UserStorageConfig = {\n  env: Env;\n  auth: Pick<IBaseAuth, 'getAccessToken' | 'getUserProfile' | 'signMessage'>;\n};\n\nexport type StorageOptions = {\n  getStorageKey: () => Promise<string | null>;\n  setStorageKey: (val: string) => Promise<void>;\n};\n\nexport type UserStorageOptions = {\n  storage?: StorageOptions;\n};\n\ntype ErrorMessage = {\n  message: string;\n  error: string;\n};\n\nexport class UserStorage {\n  protected config: UserStorageConfig;\n\n  protected options: UserStorageOptions;\n\n  protected env: Env;\n\n  constructor(config: UserStorageConfig, options: UserStorageOptions) {\n    this.env = config.env;\n    this.config = config;\n    this.options = options;\n  }\n\n  async setItem(feature: string, key: string, value: string): Promise<void> {\n    if (!feature.trim() || !key.trim()) {\n      throw new ValidationError('feature or key cannot be empty strings');\n    }\n    await this.#upsertUserStorage(feature, key, value);\n  }\n\n  async getItem(feature: string, key: string): Promise<string> {\n    if (!feature.trim() || !key.trim()) {\n      throw new ValidationError('feature or key cannot be empty strings');\n    }\n    return this.#getUserStorage(feature, key);\n  }\n\n  async getStorageKey(): Promise<string> {\n    const storageKey = await this.options.storage?.getStorageKey();\n    if (storageKey) {\n      return storageKey;\n    }\n\n    const userProfile = await this.config.auth.getUserProfile();\n    const storageKeySignature = await this.config.auth.signMessage(\n      `metamask:${userProfile.profileId}`,\n    );\n    const hashedStorageKeySignature = createSHA256Hash(storageKeySignature);\n    await this.options.storage?.setStorageKey(hashedStorageKeySignature);\n    return hashedStorageKeySignature;\n  }\n\n  async #upsertUserStorage(\n    feature: string,\n    key: string,\n    data: string,\n  ): Promise<void> {\n    try {\n      const headers = await this.#getAuthorizationHeader();\n      const storageKey = await this.getStorageKey();\n      const encryptedData = encryption.encryptString(data, storageKey);\n      const url = new URL(\n        STORAGE_URL(this.env, feature, this.#createEntryKey(key, storageKey)),\n      );\n\n      const response = await fetch(url.toString(), {\n        method: 'PUT',\n        headers: {\n          'Content-Type': 'application/json',\n          ...headers,\n        },\n        body: JSON.stringify({ data: encryptedData }),\n      });\n\n      if (!response.ok) {\n        const responseBody: ErrorMessage = await response.json().catch(() => ({\n          message: 'unknown',\n          error: 'unknown',\n        }));\n        throw new Error(\n          `HTTP error message: ${responseBody.message}, error: ${responseBody.error}`,\n        );\n      }\n    } catch (e) {\n      /* istanbul ignore next */\n      const errorMessage =\n        e instanceof Error ? e.message : JSON.stringify(e ?? '');\n      throw new UserStorageError(\n        `failed to upsert user storage for feature '${feature}' and key '${key}'. ${errorMessage}`,\n      );\n    }\n  }\n\n  async #getUserStorage(feature: string, key: string): Promise<string> {\n    try {\n      const headers = await this.#getAuthorizationHeader();\n      const storageKey = await this.getStorageKey();\n      const url = new URL(\n        STORAGE_URL(this.env, feature, this.#createEntryKey(key, storageKey)),\n      );\n\n      const response = await fetch(url.toString(), {\n        headers: {\n          'Content-Type': 'application/json',\n          ...headers,\n        },\n      });\n\n      if (response.status === 404) {\n        throw new NotFoundError(\n          `feature/key set not found for feature '${feature}' and key '${key}'.`,\n        );\n      }\n\n      if (!response.ok) {\n        const responseBody = (await response.json()) as ErrorMessage;\n        throw new Error(\n          `HTTP error message: ${responseBody.message}, error: ${responseBody.error}`,\n        );\n      }\n\n      const { Data: encryptedData } = await response.json();\n      return encryption.decryptString(encryptedData, storageKey);\n    } catch (e) {\n      if (e instanceof NotFoundError) {\n        throw e;\n      }\n\n      /* istanbul ignore next */\n      const errorMessage =\n        e instanceof Error ? e.message : JSON.stringify(e ?? '');\n\n      throw new UserStorageError(\n        `failed to get user storage for feature '${feature}' and key '${key}'. ${errorMessage}`,\n      );\n    }\n  }\n\n  #createEntryKey(key: string, storageKey: string): string {\n    const hashedKey = createSHA256Hash(key + storageKey);\n    return hashedKey;\n  }\n\n  // TODO: Either fix this lint violation or explain why it's necessary to ignore.\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  async #getAuthorizationHeader(): Promise<{ Authorization: string }> {\n    const accessToken = await this.config.auth.getAccessToken();\n    return { Authorization: `Bearer ${accessToken}` };\n  }\n}\n"]}

package/dist/{chunk-CFST6GWE.js → chunk-PBRUOBEQ.js}

@@ -8,4 +8,4 @@ var AuthType = /* @__PURE__ */ ((AuthType2) => {
 
 
 exports.AuthType = AuthType;
-//# sourceMappingURL=chunk-CFST6GWE.js.map
+//# sourceMappingURL=chunk-PBRUOBEQ.js.map

package/dist/chunk-PBRUOBEQ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdk/authentication-jwt-bearer/types.ts"],"names":["AuthType"],"mappings":";AAEO,IAAK,WAAL,kBAAKA,cAAL;AAGL,EAAAA,UAAA,SAAM;AAGN,EAAAA,UAAA,UAAO;AANG,SAAAA;AAAA,GAAA","sourcesContent":["import type { Env, Platform } from '../env';\n\nexport enum AuthType {\n  /* sign in using a private key derived from your secret recovery phrase (SRP). \n       Uses message signing snap to perform this operation */\n  SRP = 'SRP',\n\n  /* sign in with Ethereum */\n  SiWE = 'SiWE',\n}\n\nexport type AuthConfig = {\n  env: Env;\n  platform: Platform;\n  type: AuthType;\n};\n\nexport type AccessToken = {\n  /**\n   * The JWT Access Token\n   */\n  accessToken: string;\n  /**\n   * Expiration in seconds\n   */\n  expiresIn: number;\n  /**\n   * Date in milliseconds\n   */\n  obtainedAt: number;\n};\n\nexport type UserProfile = {\n  /**\n   * The \"Identifier\" used to log in with.\n   */\n  identifierId: string;\n  /**\n   * The Unique profile for a logged in user. A Profile can be logged in via multiple Identifiers\n   */\n  profileId: string;\n  /**\n   * Server MetaMetrics ID. Allows grouping of user events cross platform.\n   */\n  metaMetricsId: string;\n};\n\nexport type LoginResponse = {\n  token: AccessToken;\n  profile: UserProfile;\n};\n\nexport type IBaseAuth = {\n  getAccessToken: () => Promise<string>;\n  getUserProfile: () => Promise<UserProfile>;\n  getIdentifier: () => Promise<string>;\n  signMessage: (message: string) => Promise<string>;\n};\n\nexport type AuthStorageOptions = {\n  getLoginResponse: () => Promise<LoginResponse | null>;\n  setLoginResponse: (val: LoginResponse) => Promise<void>;\n};\n\nexport type AuthSigningOptions = {\n  signMessage: (message: string) => Promise<string>;\n  getIdentifier: () => Promise<string>;\n};\n\nexport type ErrorMessage = {\n  message: string;\n  error: string;\n};\n\nexport type Pair = {\n  identifier: string;\n  encryptedStorageKey: string;\n  identifierType: 'SIWE' | 'SRP';\n  signMessage: (message: string) => Promise<string>;\n};\n"]}

package/dist/chunk-PCOIRDTO.js

@@ -0,0 +1,18 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});// src/controllers/user-storage/encryption/utils.ts
+var byteArrayToBase64 = (byteArray) => {
+  return Buffer.from(byteArray).toString("base64");
+};
+var base64ToByteArray = (base64) => {
+  return new Uint8Array(Buffer.from(base64, "base64"));
+};
+var bytesToUtf8 = (byteArray) => {
+  const decoder = new TextDecoder("utf-8");
+  return decoder.decode(byteArray);
+};
+
+
+
+
+
+exports.byteArrayToBase64 = byteArrayToBase64; exports.base64ToByteArray = base64ToByteArray; exports.bytesToUtf8 = bytesToUtf8;
+//# sourceMappingURL=chunk-PCOIRDTO.js.map

package/dist/chunk-PCOIRDTO.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controllers/user-storage/encryption/utils.ts"],"names":[],"mappings":";AAAO,IAAM,oBAAoB,CAAC,cAA0B;AAC1D,SAAO,OAAO,KAAK,SAAS,EAAE,SAAS,QAAQ;AACjD;AAEO,IAAM,oBAAoB,CAAC,WAAmB;AACnD,SAAO,IAAI,WAAW,OAAO,KAAK,QAAQ,QAAQ,CAAC;AACrD;AAEO,IAAM,cAAc,CAAC,cAA0B;AACpD,QAAM,UAAU,IAAI,YAAY,OAAO;AACvC,SAAO,QAAQ,OAAO,SAAS;AACjC","sourcesContent":["export const byteArrayToBase64 = (byteArray: Uint8Array) => {\n  return Buffer.from(byteArray).toString('base64');\n};\n\nexport const base64ToByteArray = (base64: string) => {\n  return new Uint8Array(Buffer.from(base64, 'base64'));\n};\n\nexport const bytesToUtf8 = (byteArray: Uint8Array) => {\n  const decoder = new TextDecoder('utf-8');\n  return decoder.decode(byteArray);\n};\n"]}

package/dist/chunk-PTR4DAX6.js

@@ -0,0 +1,79 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+var _chunkNLHLVVOOjs = require('./chunk-NLHLVVOO.js');
+
+
+var _chunkQ5WIUNX5js = require('./chunk-Q5WIUNX5.js');
+
+
+var _chunkAVOOINGJjs = require('./chunk-AVOOINGJ.js');
+
+
+var _chunkPBRUOBEQjs = require('./chunk-PBRUOBEQ.js');
+
+
+
+
+
+
+var _chunkPQ5T4GHYjs = require('./chunk-PQ5T4GHY.js');
+
+
+
+var _chunkP52TG263js = require('./chunk-P52TG263.js');
+
+
+
+var _chunkP4DUDLMYjs = require('./chunk-P4DUDLMY.js');
+
+
+
+
+
+var _chunkSMKTWM6Ijs = require('./chunk-SMKTWM6I.js');
+
+
+
+
+
+
+
+
+var _chunkMBTBE4P5js = require('./chunk-MBTBE4P5.js');
+
+
+var _chunkIGY2S5BCjs = require('./chunk-IGY2S5BC.js');
+
+// src/sdk/index.ts
+var sdk_exports = {};
+_chunkIGY2S5BCjs.__export.call(void 0, sdk_exports, {
+  AuthType: () => _chunkPBRUOBEQjs.AuthType,
+  Encryption: () => _chunkP4DUDLMYjs.Encryption,
+  Env: () => _chunkSMKTWM6Ijs.Env,
+  JwtBearerAuth: () => _chunkNLHLVVOOjs.JwtBearerAuth,
+  MESSAGE_SIGNING_SNAP: () => _chunkPQ5T4GHYjs.MESSAGE_SIGNING_SNAP,
+  NonceRetrievalError: () => _chunkMBTBE4P5js.NonceRetrievalError,
+  NotFoundError: () => _chunkMBTBE4P5js.NotFoundError,
+  PairError: () => _chunkMBTBE4P5js.PairError,
+  Platform: () => _chunkSMKTWM6Ijs.Platform,
+  SIWEJwtBearerAuth: () => _chunkQ5WIUNX5js.SIWEJwtBearerAuth,
+  SNAP_ORIGIN: () => _chunkPQ5T4GHYjs.SNAP_ORIGIN,
+  SRPJwtBearerAuth: () => _chunkAVOOINGJjs.SRPJwtBearerAuth,
+  STORAGE_URL: () => _chunkP52TG263js.STORAGE_URL,
+  SignInError: () => _chunkMBTBE4P5js.SignInError,
+  UnsupportedAuthTypeError: () => _chunkMBTBE4P5js.UnsupportedAuthTypeError,
+  UserStorage: () => _chunkP52TG263js.UserStorage,
+  UserStorageError: () => _chunkMBTBE4P5js.UserStorageError,
+  ValidationError: () => _chunkMBTBE4P5js.ValidationError,
+  connectSnap: () => _chunkPQ5T4GHYjs.connectSnap,
+  createSHA256Hash: () => _chunkP4DUDLMYjs.createSHA256Hash,
+  getEnvUrls: () => _chunkSMKTWM6Ijs.getEnvUrls,
+  getOidcClientId: () => _chunkSMKTWM6Ijs.getOidcClientId,
+  getSnap: () => _chunkPQ5T4GHYjs.getSnap,
+  getSnaps: () => _chunkPQ5T4GHYjs.getSnaps
+});
+
+
+
+exports.sdk_exports = sdk_exports;
+//# sourceMappingURL=chunk-PTR4DAX6.js.map

package/dist/chunk-PTR4DAX6.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdk/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA","sourcesContent":["export * from './authentication';\nexport * from './user-storage';\nexport * from './env';\nexport * from './errors';\nexport * from './encryption';\nexport * from './utils/messaging-signing-snap-requests';\n"]}

package/dist/chunk-Q5WIUNX5.js

@@ -0,0 +1,126 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+
+
+var _chunkBOET676Pjs = require('./chunk-BOET676P.js');
+
+
+var _chunkMBTBE4P5js = require('./chunk-MBTBE4P5.js');
+
+
+
+
+
+var _chunkIGY2S5BCjs = require('./chunk-IGY2S5BC.js');
+
+// src/sdk/authentication-jwt-bearer/flow-siwe.ts
+var _siwe = require('siwe');
+var _config, _options, _signer, _getAuthSession, getAuthSession_fn, _login, login_fn, _createSiWELoginRawMessage, createSiWELoginRawMessage_fn, _assertSigner, assertSigner_fn;
+var SIWEJwtBearerAuth = class {
+  constructor(config, options) {
+    // convert expiresIn from seconds to milliseconds and use 90% of expiresIn
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _getAuthSession);
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _login);
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _createSiWELoginRawMessage);
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _assertSigner);
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _config, void 0);
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _options, void 0);
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _signer, void 0);
+    _chunkIGY2S5BCjs.__privateSet.call(void 0, this, _config, config);
+    _chunkIGY2S5BCjs.__privateSet.call(void 0, this, _options, options);
+  }
+  async getAccessToken() {
+    const session = await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _getAuthSession, getAuthSession_fn).call(this);
+    if (session) {
+      return session.token.accessToken;
+    }
+    const loginResponse = await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _login, login_fn).call(this);
+    return loginResponse.token.accessToken;
+  }
+  async getUserProfile() {
+    const session = await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _getAuthSession, getAuthSession_fn).call(this);
+    if (session) {
+      return session.profile;
+    }
+    const loginResponse = await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _login, login_fn).call(this);
+    return loginResponse.profile;
+  }
+  async getIdentifier() {
+    _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _assertSigner, assertSigner_fn).call(this, _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _signer));
+    return _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _signer).address;
+  }
+  async signMessage(message) {
+    _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _assertSigner, assertSigner_fn).call(this, _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _signer));
+    return await _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _signer).signMessage(message);
+  }
+  prepare(signer) {
+    _chunkIGY2S5BCjs.__privateSet.call(void 0, this, _signer, signer);
+  }
+};
+_config = new WeakMap();
+_options = new WeakMap();
+_signer = new WeakMap();
+_getAuthSession = new WeakSet();
+getAuthSession_fn = async function() {
+  const auth = await _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _options).storage.getLoginResponse();
+  if (!auth) {
+    return null;
+  }
+  const currentTime = Date.now();
+  const sessionAge = currentTime - auth.token.obtainedAt;
+  const refreshThreshold = auth.token.expiresIn * 1e3 * 0.9;
+  if (sessionAge < refreshThreshold) {
+    return auth;
+  }
+  return null;
+};
+_login = new WeakSet();
+login_fn = async function() {
+  _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _assertSigner, assertSigner_fn).call(this, _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _signer));
+  const address = await this.getIdentifier();
+  const nonceRes = await _chunkBOET676Pjs.getNonce.call(void 0, address, _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _config).env);
+  const rawMessage = _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _createSiWELoginRawMessage, createSiWELoginRawMessage_fn).call(this, nonceRes.nonce);
+  const signature = await this.signMessage(rawMessage);
+  const authResponse = await _chunkBOET676Pjs.authenticate.call(void 0, 
+    rawMessage,
+    signature,
+    _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _config).type,
+    _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _config).env
+  );
+  const tokenResponse = await _chunkBOET676Pjs.authorizeOIDC.call(void 0, 
+    authResponse.token,
+    _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _config).env,
+    _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _config).platform
+  );
+  const result = {
+    profile: authResponse.profile,
+    token: tokenResponse
+  };
+  await _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _options).storage.setLoginResponse(result);
+  return result;
+};
+_createSiWELoginRawMessage = new WeakSet();
+createSiWELoginRawMessage_fn = function(nonce) {
+  _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _assertSigner, assertSigner_fn).call(this, _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _signer));
+  return new (0, _siwe.SiweMessage)({
+    domain: _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _signer)?.domain,
+    address: _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _signer)?.address,
+    uri: _chunkBOET676Pjs.SIWE_LOGIN_URL.call(void 0, _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _config).env),
+    version: "1",
+    chainId: _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _signer)?.chainId,
+    nonce,
+    issuedAt: (/* @__PURE__ */ new Date()).toISOString()
+  }).prepareMessage();
+};
+_assertSigner = new WeakSet();
+assertSigner_fn = function(signer) {
+  if (!signer) {
+    throw new (0, _chunkMBTBE4P5js.ValidationError)(`you must call 'prepare()' before logging in`);
+  }
+};
+
+
+
+exports.SIWEJwtBearerAuth = SIWEJwtBearerAuth;
+//# sourceMappingURL=chunk-Q5WIUNX5.js.map

package/dist/chunk-Q5WIUNX5.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdk/authentication-jwt-bearer/flow-siwe.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,SAAS,mBAAmB;AAA5B;AAiCO,IAAM,oBAAN,MAA6C;AAAA,EAOlD,YACE,QACA,SACA;AAwCF;AAAA,uBAAM;AAgBN,uBAAM;AAmCN;AAcA;AAlHA;AAEA;AAEA;AAME,uBAAK,SAAU;AACf,uBAAK,UAAW;AAAA,EAClB;AAAA,EAEA,MAAM,iBAAkC;AACtC,UAAM,UAAU,MAAM,sBAAK,oCAAL;AACtB,QAAI,SAAS;AACX,aAAO,QAAQ,MAAM;AAAA,IACvB;AAEA,UAAM,gBAAgB,MAAM,sBAAK,kBAAL;AAC5B,WAAO,cAAc,MAAM;AAAA,EAC7B;AAAA,EAEA,MAAM,iBAAuC;AAC3C,UAAM,UAAU,MAAM,sBAAK,oCAAL;AACtB,QAAI,SAAS;AACX,aAAO,QAAQ;AAAA,IACjB;AAEA,UAAM,gBAAgB,MAAM,sBAAK,kBAAL;AAC5B,WAAO,cAAc;AAAA,EACvB;AAAA,EAEA,MAAM,gBAAiC;AACrC,0BAAK,gCAAL,WAAmB,mBAAK;AACxB,WAAO,mBAAK,SAAQ;AAAA,EACtB;AAAA,EAEA,MAAM,YAAY,SAAkC;AAClD,0BAAK,gCAAL,WAAmB,mBAAK;AACxB,WAAO,MAAM,mBAAK,SAAQ,YAAY,OAAO;AAAA,EAC/C;AAAA,EAEA,QAAQ,QAAmC;AACzC,uBAAK,SAAU;AAAA,EACjB;AA2EF;AAzHE;AAEA;AAEA;AA6CM;AAAA,oBAAe,iBAAkC;AACrD,QAAM,OAAO,MAAM,mBAAK,UAAS,QAAQ,iBAAiB;AAC1D,MAAI,CAAC,MAAM;AACT,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,KAAK,IAAI;AAC7B,QAAM,aAAa,cAAc,KAAK,MAAM;AAC5C,QAAM,mBAAmB,KAAK,MAAM,YAAY,MAAO;AAEvD,MAAI,aAAa,kBAAkB;AACjC,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEM;AAAA,WAAM,iBAA2B;AACrC,wBAAK,gCAAL,WAAmB,mBAAK;AAGxB,QAAM,UAAU,MAAM,KAAK,cAAc;AACzC,QAAM,WAAW,MAAM,SAAS,SAAS,mBAAK,SAAQ,GAAG;AACzD,QAAM,aAAa,sBAAK,0DAAL,WAAgC,SAAS;AAC5D,QAAM,YAAY,MAAM,KAAK,YAAY,UAAU;AAGnD,QAAM,eAAe,MAAM;AAAA,IACzB;AAAA,IACA;AAAA,IACA,mBAAK,SAAQ;AAAA,IACb,mBAAK,SAAQ;AAAA,EACf;AAGA,QAAM,gBAAgB,MAAM;AAAA,IAC1B,aAAa;AAAA,IACb,mBAAK,SAAQ;AAAA,IACb,mBAAK,SAAQ;AAAA,EACf;AAGA,QAAM,SAAwB;AAAA,IAC5B,SAAS,aAAa;AAAA,IACtB,OAAO;AAAA,EACT;AAEA,QAAM,mBAAK,UAAS,QAAQ,iBAAiB,MAAM;AAEnD,SAAO;AACT;AAEA;AAAA,+BAA0B,SAAC,OAAuB;AAChD,wBAAK,gCAAL,WAAmB,mBAAK;AAExB,SAAO,IAAI,YAAY;AAAA,IACrB,QAAQ,mBAAK,UAAS;AAAA,IACtB,SAAS,mBAAK,UAAS;AAAA,IACvB,KAAK,eAAe,mBAAK,SAAQ,GAAG;AAAA,IACpC,SAAS;AAAA,IACT,SAAS,mBAAK,UAAS;AAAA,IACvB;AAAA,IACA,WAAU,oBAAI,KAAK,GAAE,YAAY;AAAA,EACnC,CAAC,EAAE,eAAe;AACpB;AAEA;AAAA,kBAAa,SACX,QAC6C;AAC7C,MAAI,CAAC,QAAQ;AACX,UAAM,IAAI,gBAAgB,6CAA6C;AAAA,EACzE;AACF","sourcesContent":["import { SiweMessage } from 'siwe';\n\nimport { ValidationError } from '../errors';\nimport {\n  SIWE_LOGIN_URL,\n  authenticate,\n  authorizeOIDC,\n  getNonce,\n} from './services';\nimport type {\n  AuthConfig,\n  AuthStorageOptions,\n  AuthType,\n  IBaseAuth,\n  LoginResponse,\n  UserProfile,\n} from './types';\n\n// TODO: Either fix this lint violation or explain why it's necessary to ignore.\n// eslint-disable-next-line @typescript-eslint/naming-convention\ntype JwtBearerAuth_SIWE_Options = {\n  storage: AuthStorageOptions;\n};\n\n// TODO: Either fix this lint violation or explain why it's necessary to ignore.\n// eslint-disable-next-line @typescript-eslint/naming-convention\ntype JwtBearerAuth_SIWE_Signer = {\n  address: string;\n  chainId: number;\n  signMessage: (message: string) => Promise<string>;\n  domain: string;\n};\n\nexport class SIWEJwtBearerAuth implements IBaseAuth {\n  #config: AuthConfig;\n\n  #options: JwtBearerAuth_SIWE_Options;\n\n  #signer: JwtBearerAuth_SIWE_Signer | undefined;\n\n  constructor(\n    config: AuthConfig & { type: AuthType.SiWE },\n    options: JwtBearerAuth_SIWE_Options,\n  ) {\n    this.#config = config;\n    this.#options = options;\n  }\n\n  async getAccessToken(): Promise<string> {\n    const session = await this.#getAuthSession();\n    if (session) {\n      return session.token.accessToken;\n    }\n\n    const loginResponse = await this.#login();\n    return loginResponse.token.accessToken;\n  }\n\n  async getUserProfile(): Promise<UserProfile> {\n    const session = await this.#getAuthSession();\n    if (session) {\n      return session.profile;\n    }\n\n    const loginResponse = await this.#login();\n    return loginResponse.profile;\n  }\n\n  async getIdentifier(): Promise<string> {\n    this.#assertSigner(this.#signer);\n    return this.#signer.address;\n  }\n\n  async signMessage(message: string): Promise<string> {\n    this.#assertSigner(this.#signer);\n    return await this.#signer.signMessage(message);\n  }\n\n  prepare(signer: JwtBearerAuth_SIWE_Signer) {\n    this.#signer = signer;\n  }\n\n  // convert expiresIn from seconds to milliseconds and use 90% of expiresIn\n  async #getAuthSession(): Promise<LoginResponse | null> {\n    const auth = await this.#options.storage.getLoginResponse();\n    if (!auth) {\n      return null;\n    }\n\n    const currentTime = Date.now();\n    const sessionAge = currentTime - auth.token.obtainedAt;\n    const refreshThreshold = auth.token.expiresIn * 1000 * 0.9;\n\n    if (sessionAge < refreshThreshold) {\n      return auth;\n    }\n    return null;\n  }\n\n  async #login(): Promise<LoginResponse> {\n    this.#assertSigner(this.#signer);\n\n    // Nonce\n    const address = await this.getIdentifier();\n    const nonceRes = await getNonce(address, this.#config.env);\n    const rawMessage = this.#createSiWELoginRawMessage(nonceRes.nonce);\n    const signature = await this.signMessage(rawMessage);\n\n    // Authenticate\n    const authResponse = await authenticate(\n      rawMessage,\n      signature,\n      this.#config.type,\n      this.#config.env,\n    );\n\n    // Authorize\n    const tokenResponse = await authorizeOIDC(\n      authResponse.token,\n      this.#config.env,\n      this.#config.platform,\n    );\n\n    // Save\n    const result: LoginResponse = {\n      profile: authResponse.profile,\n      token: tokenResponse,\n    };\n\n    await this.#options.storage.setLoginResponse(result);\n\n    return result;\n  }\n\n  #createSiWELoginRawMessage(nonce: string): string {\n    this.#assertSigner(this.#signer);\n\n    return new SiweMessage({\n      domain: this.#signer?.domain,\n      address: this.#signer?.address,\n      uri: SIWE_LOGIN_URL(this.#config.env),\n      version: '1',\n      chainId: this.#signer?.chainId,\n      nonce,\n      issuedAt: new Date().toISOString(),\n    }).prepareMessage();\n  }\n\n  #assertSigner(\n    signer?: JwtBearerAuth_SIWE_Signer,\n  ): asserts signer is JwtBearerAuth_SIWE_Signer {\n    if (!signer) {\n      throw new ValidationError(`you must call 'prepare()' before logging in`);\n    }\n  }\n}\n"]}