@metamask/profile-sync-controller 0.0.0 → 0.1.1

package/dist/chunk-RX5R6BUI.js

@@ -0,0 +1,86 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+var _chunkYUXN5GSWjs = require('./chunk-YUXN5GSW.js');
+
+
+
+
+var _chunkELHJSRS2js = require('./chunk-ELHJSRS2.js');
+
+
+var _chunkIGY2S5BCjs = require('./chunk-IGY2S5BC.js');
+
+// src/controllers/authentication/index.ts
+var authentication_exports = {};
+_chunkIGY2S5BCjs.__export.call(void 0, authentication_exports, {
+  Controller: () => _chunkYUXN5GSWjs.AuthenticationController,
+  Mocks: () => fixtures_exports,
+  defaultState: () => _chunkYUXN5GSWjs.defaultState
+});
+
+// src/controllers/authentication/__fixtures__/index.ts
+var fixtures_exports = {};
+_chunkIGY2S5BCjs.__export.call(void 0, fixtures_exports, {
+  MOCK_ACCESS_TOKEN: () => MOCK_ACCESS_TOKEN,
+  MOCK_JWT: () => MOCK_JWT,
+  MOCK_LOGIN_RESPONSE: () => MOCK_LOGIN_RESPONSE,
+  MOCK_NONCE: () => MOCK_NONCE,
+  MOCK_NONCE_RESPONSE: () => MOCK_NONCE_RESPONSE,
+  MOCK_OATH_TOKEN_RESPONSE: () => MOCK_OATH_TOKEN_RESPONSE,
+  getMockAuthAccessTokenResponse: () => getMockAuthAccessTokenResponse,
+  getMockAuthLoginResponse: () => getMockAuthLoginResponse,
+  getMockAuthNonceResponse: () => getMockAuthNonceResponse
+});
+
+// src/controllers/authentication/__fixtures__/mockResponses.ts
+var MOCK_NONCE = "4cbfqzoQpcNxVImGv";
+var MOCK_NONCE_RESPONSE = {
+  nonce: MOCK_NONCE
+};
+var getMockAuthNonceResponse = () => {
+  return {
+    url: _chunkELHJSRS2js.AUTH_NONCE_ENDPOINT,
+    requestMethod: "GET",
+    response: MOCK_NONCE_RESPONSE
+  };
+};
+var MOCK_JWT = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c";
+var MOCK_LOGIN_RESPONSE = {
+  token: MOCK_JWT,
+  // eslint-disable-next-line @typescript-eslint/naming-convention
+  expires_in: (/* @__PURE__ */ new Date()).toString(),
+  profile: {
+    // eslint-disable-next-line @typescript-eslint/naming-convention
+    identifier_id: "MOCK_IDENTIFIER",
+    // eslint-disable-next-line @typescript-eslint/naming-convention
+    profile_id: "MOCK_PROFILE_ID"
+  }
+};
+var getMockAuthLoginResponse = () => {
+  return {
+    url: _chunkELHJSRS2js.AUTH_LOGIN_ENDPOINT,
+    requestMethod: "POST",
+    response: MOCK_LOGIN_RESPONSE
+  };
+};
+var MOCK_ACCESS_TOKEN = `MOCK_ACCESS_TOKEN-${MOCK_JWT}`;
+var MOCK_OATH_TOKEN_RESPONSE = {
+  // eslint-disable-next-line @typescript-eslint/naming-convention
+  access_token: MOCK_ACCESS_TOKEN,
+  // eslint-disable-next-line @typescript-eslint/naming-convention
+  expires_in: (/* @__PURE__ */ new Date()).getTime()
+};
+var getMockAuthAccessTokenResponse = () => {
+  return {
+    url: _chunkELHJSRS2js.OIDC_TOKENS_ENDPOINT,
+    requestMethod: "POST",
+    response: MOCK_OATH_TOKEN_RESPONSE
+  };
+};
+
+
+
+
+exports.fixtures_exports = fixtures_exports; exports.authentication_exports = authentication_exports;
+//# sourceMappingURL=chunk-RX5R6BUI.js.map

package/dist/chunk-RX5R6BUI.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controllers/authentication/index.ts","../src/controllers/authentication/__fixtures__/index.ts","../src/controllers/authentication/__fixtures__/mockResponses.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACiBO,IAAM,aAAa;AACnB,IAAM,sBAAqC;AAAA,EAChD,OAAO;AACT;AAEO,IAAM,2BAA2B,MAAM;AAC5C,SAAO;AAAA,IACL,KAAK;AAAA,IACL,eAAe;AAAA,IACf,UAAU;AAAA,EACZ;AACF;AAEO,IAAM,WACX;AACK,IAAM,sBAAqC;AAAA,EAChD,OAAO;AAAA;AAAA,EAEP,aAAY,oBAAI,KAAK,GAAE,SAAS;AAAA,EAChC,SAAS;AAAA;AAAA,IAEP,eAAe;AAAA;AAAA,IAEf,YAAY;AAAA,EACd;AACF;AAEO,IAAM,2BAA2B,MAAM;AAC5C,SAAO;AAAA,IACL,KAAK;AAAA,IACL,eAAe;AAAA,IACf,UAAU;AAAA,EACZ;AACF;AAEO,IAAM,oBAAoB,qBAAqB,QAAQ;AACvD,IAAM,2BAA+C;AAAA;AAAA,EAE1D,cAAc;AAAA;AAAA,EAEd,aAAY,oBAAI,KAAK,GAAE,QAAQ;AACjC;AAEO,IAAM,iCAAiC,MAAM;AAClD,SAAO;AAAA,IACL,KAAK;AAAA,IACL,eAAe;AAAA,IACf,UAAU;AAAA,EACZ;AACF","sourcesContent":["import Controller from './AuthenticationController';\n\nexport { Controller };\nexport * from './AuthenticationController';\nexport * as Mocks from './__fixtures__';\n","export * from './mockResponses';\n","import type {\n  LoginResponse,\n  NonceResponse,\n  OAuthTokenResponse,\n} from '../services';\nimport {\n  AUTH_LOGIN_ENDPOINT,\n  AUTH_NONCE_ENDPOINT,\n  OIDC_TOKENS_ENDPOINT,\n} from '../services';\n\ntype MockResponse = {\n  url: string;\n  requestMethod: 'GET' | 'POST' | 'PUT';\n  response: unknown;\n};\n\nexport const MOCK_NONCE = '4cbfqzoQpcNxVImGv';\nexport const MOCK_NONCE_RESPONSE: NonceResponse = {\n  nonce: MOCK_NONCE,\n};\n\nexport const getMockAuthNonceResponse = () => {\n  return {\n    url: AUTH_NONCE_ENDPOINT,\n    requestMethod: 'GET',\n    response: MOCK_NONCE_RESPONSE,\n  } satisfies MockResponse;\n};\n\nexport const MOCK_JWT =\n  'eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c';\nexport const MOCK_LOGIN_RESPONSE: LoginResponse = {\n  token: MOCK_JWT,\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  expires_in: new Date().toString(),\n  profile: {\n    // eslint-disable-next-line @typescript-eslint/naming-convention\n    identifier_id: 'MOCK_IDENTIFIER',\n    // eslint-disable-next-line @typescript-eslint/naming-convention\n    profile_id: 'MOCK_PROFILE_ID',\n  },\n};\n\nexport const getMockAuthLoginResponse = () => {\n  return {\n    url: AUTH_LOGIN_ENDPOINT,\n    requestMethod: 'POST',\n    response: MOCK_LOGIN_RESPONSE,\n  } satisfies MockResponse;\n};\n\nexport const MOCK_ACCESS_TOKEN = `MOCK_ACCESS_TOKEN-${MOCK_JWT}`;\nexport const MOCK_OATH_TOKEN_RESPONSE: OAuthTokenResponse = {\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  access_token: MOCK_ACCESS_TOKEN,\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  expires_in: new Date().getTime(),\n};\n\nexport const getMockAuthAccessTokenResponse = () => {\n  return {\n    url: OIDC_TOKENS_ENDPOINT,\n    requestMethod: 'POST',\n    response: MOCK_OATH_TOKEN_RESPONSE,\n  } satisfies MockResponse;\n};\n"]}

package/dist/chunk-SMKTWM6I.js

@@ -0,0 +1,77 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});// src/sdk/env.ts
+var Env = /* @__PURE__ */ ((Env2) => {
+  Env2["DEV"] = "dev";
+  Env2["UAT"] = "uat";
+  Env2["PRD"] = "prd";
+  return Env2;
+})(Env || {});
+var Platform = /* @__PURE__ */ ((Platform2) => {
+  Platform2["MOBILE"] = "mobile";
+  Platform2["EXTENSION"] = "extension";
+  Platform2["PORTFOLIO"] = "portfolio";
+  Platform2["INFURA"] = "infura";
+  return Platform2;
+})(Platform || {});
+var ENV_URLS = {
+  dev: {
+    authApiUrl: "https://authentication.dev-api.cx.metamask.io",
+    oidcApiUrl: "https://oidc.dev-api.cx.metamask.io",
+    userStorageApiUrl: "https://user-storage.dev-api.cx.metamask.io"
+  },
+  uat: {
+    authApiUrl: "https://authentication.uat-api.cx.metamask.io",
+    oidcApiUrl: "https://oidc.uat-api.cx.metamask.io",
+    userStorageApiUrl: "https://user-storage.uat-api.cx.metamask.io"
+  },
+  prd: {
+    authApiUrl: "https://authentication.api.cx.metamask.io",
+    oidcApiUrl: "https://oidc.api.cx.metamask.io",
+    userStorageApiUrl: "https://user-storage.api.cx.metamask.io"
+  }
+};
+function getEnvUrls(env) {
+  if (!ENV_URLS[env]) {
+    throw new Error("invalid environment configuration");
+  }
+  return ENV_URLS[env];
+}
+function getOidcClientId(env, platform) {
+  const clientIds = {
+    ["dev" /* DEV */]: {
+      ["portfolio" /* PORTFOLIO */]: "c7ca94a0-5d52-4635-9502-1a50a9c410cc",
+      ["mobile" /* MOBILE */]: "e83c7cc9-267d-4fb4-8fec-f0e3bbe5ae8e",
+      ["extension" /* EXTENSION */]: "f1a963d7-50dc-4cb5-8d81-f1f3654f0df3",
+      ["infura" /* INFURA */]: "bd887006-0d55-481a-a395-5ff9a0dc52c9"
+    },
+    ["uat" /* UAT */]: {
+      ["portfolio" /* PORTFOLIO */]: "8f2dd4ac-db07-4819-9ba5-1ee0ec1b56d1",
+      ["mobile" /* MOBILE */]: "c3cfdcd2-51d6-4fae-ad2c-ff238c8fef53",
+      ["extension" /* EXTENSION */]: "a9de167c-c9a6-43d8-af39-d301fd44c485",
+      ["infura" /* INFURA */]: "01929890-7002-4c97-9913-8f6c09a6d674"
+    },
+    ["prd" /* PRD */]: {
+      ["portfolio" /* PORTFOLIO */]: "35e1cd62-49c5-4be8-8b6e-a5212f2d2cfb",
+      ["mobile" /* MOBILE */]: "75fa62a3-9ca0-4b91-9fe5-76bec86b0257",
+      ["extension" /* EXTENSION */]: "1132f10a-b4e5-4390-a5f2-d9c6022db564",
+      ["infura" /* INFURA */]: ""
+      // unset
+    }
+  };
+  if (!clientIds[env]) {
+    throw new Error(`invalid env ${env}: cannot determine oidc client id`);
+  }
+  if (!clientIds[env][platform]) {
+    throw new Error(
+      `invalid env ${env} and platform ${platform} combination: cannot determine oidc client id`
+    );
+  }
+  return clientIds[env][platform];
+}
+
+
+
+
+
+
+exports.Env = Env; exports.Platform = Platform; exports.getEnvUrls = getEnvUrls; exports.getOidcClientId = getOidcClientId;
+//# sourceMappingURL=chunk-SMKTWM6I.js.map

package/dist/chunk-SMKTWM6I.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdk/env.ts"],"names":["Env","Platform"],"mappings":";AAAO,IAAK,MAAL,kBAAKA,SAAL;AACL,EAAAA,KAAA,SAAM;AACN,EAAAA,KAAA,SAAM;AACN,EAAAA,KAAA,SAAM;AAHI,SAAAA;AAAA,GAAA;AAML,IAAK,WAAL,kBAAKC,cAAL;AACL,EAAAA,UAAA,YAAS;AACT,EAAAA,UAAA,eAAY;AACZ,EAAAA,UAAA,eAAY;AACZ,EAAAA,UAAA,YAAS;AAJC,SAAAA;AAAA,GAAA;AAaZ,IAAM,WAAsC;AAAA,EAC1C,KAAK;AAAA,IACH,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,mBAAmB;AAAA,EACrB;AAAA,EACA,KAAK;AAAA,IACH,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,mBAAmB;AAAA,EACrB;AAAA,EACA,KAAK;AAAA,IACH,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,mBAAmB;AAAA,EACrB;AACF;AASO,SAAS,WAAW,KAAwB;AACjD,MAAI,CAAC,SAAS,GAAG,GAAG;AAClB,UAAM,IAAI,MAAM,mCAAmC;AAAA,EACrD;AACA,SAAO,SAAS,GAAG;AACrB;AASO,SAAS,gBAAgB,KAAU,UAA4B;AACpE,QAAM,YAAY;AAAA,IAChB,CAAC,eAAO,GAAG;AAAA,MACT,CAAC,2BAAkB,GAAG;AAAA,MACtB,CAAC,qBAAe,GAAG;AAAA,MACnB,CAAC,2BAAkB,GAAG;AAAA,MACtB,CAAC,qBAAe,GAAG;AAAA,IACrB;AAAA,IACA,CAAC,eAAO,GAAG;AAAA,MACT,CAAC,2BAAkB,GAAG;AAAA,MACtB,CAAC,qBAAe,GAAG;AAAA,MACnB,CAAC,2BAAkB,GAAG;AAAA,MACtB,CAAC,qBAAe,GAAG;AAAA,IACrB;AAAA,IACA,CAAC,eAAO,GAAG;AAAA,MACT,CAAC,2BAAkB,GAAG;AAAA,MACtB,CAAC,qBAAe,GAAG;AAAA,MACnB,CAAC,2BAAkB,GAAG;AAAA,MACtB,CAAC,qBAAe,GAAG;AAAA;AAAA,IACrB;AAAA,EACF;AAEA,MAAI,CAAC,UAAU,GAAG,GAAG;AACnB,UAAM,IAAI,MAAM,eAAe,GAAG,mCAAmC;AAAA,EACvE;AAEA,MAAI,CAAC,UAAU,GAAG,EAAE,QAAQ,GAAG;AAC7B,UAAM,IAAI;AAAA,MACR,eAAe,GAAG,iBAAiB,QAAQ;AAAA,IAC7C;AAAA,EACF;AAEA,SAAO,UAAU,GAAG,EAAE,QAAQ;AAChC","sourcesContent":["export enum Env {\n  DEV = 'dev',\n  UAT = 'uat',\n  PRD = 'prd',\n}\n\nexport enum Platform {\n  MOBILE = 'mobile',\n  EXTENSION = 'extension',\n  PORTFOLIO = 'portfolio',\n  INFURA = 'infura',\n}\n\ntype EnvUrlsEntry = {\n  authApiUrl: string;\n  oidcApiUrl: string;\n  userStorageApiUrl: string;\n};\n\nconst ENV_URLS: Record<Env, EnvUrlsEntry> = {\n  dev: {\n    authApiUrl: 'https://authentication.dev-api.cx.metamask.io',\n    oidcApiUrl: 'https://oidc.dev-api.cx.metamask.io',\n    userStorageApiUrl: 'https://user-storage.dev-api.cx.metamask.io',\n  },\n  uat: {\n    authApiUrl: 'https://authentication.uat-api.cx.metamask.io',\n    oidcApiUrl: 'https://oidc.uat-api.cx.metamask.io',\n    userStorageApiUrl: 'https://user-storage.uat-api.cx.metamask.io',\n  },\n  prd: {\n    authApiUrl: 'https://authentication.api.cx.metamask.io',\n    oidcApiUrl: 'https://oidc.api.cx.metamask.io',\n    userStorageApiUrl: 'https://user-storage.api.cx.metamask.io',\n  },\n};\n\n/**\n * Validates and returns correct environment endpoints\n *\n * @param env - environment field\n * @returns the correct environment url\n * @throws on invalid environment passed\n */\nexport function getEnvUrls(env: Env): EnvUrlsEntry {\n  if (!ENV_URLS[env]) {\n    throw new Error('invalid environment configuration');\n  }\n  return ENV_URLS[env];\n}\n\n/**\n * Returns the valid OIDC Client ID (used during authorization)\n *\n * @param env - environment field\n * @param platform - platform field\n * @returns the OIDC client id for the environment\n */\nexport function getOidcClientId(env: Env, platform: Platform): string {\n  const clientIds = {\n    [Env.DEV]: {\n      [Platform.PORTFOLIO]: 'c7ca94a0-5d52-4635-9502-1a50a9c410cc',\n      [Platform.MOBILE]: 'e83c7cc9-267d-4fb4-8fec-f0e3bbe5ae8e',\n      [Platform.EXTENSION]: 'f1a963d7-50dc-4cb5-8d81-f1f3654f0df3',\n      [Platform.INFURA]: 'bd887006-0d55-481a-a395-5ff9a0dc52c9',\n    },\n    [Env.UAT]: {\n      [Platform.PORTFOLIO]: '8f2dd4ac-db07-4819-9ba5-1ee0ec1b56d1',\n      [Platform.MOBILE]: 'c3cfdcd2-51d6-4fae-ad2c-ff238c8fef53',\n      [Platform.EXTENSION]: 'a9de167c-c9a6-43d8-af39-d301fd44c485',\n      [Platform.INFURA]: '01929890-7002-4c97-9913-8f6c09a6d674',\n    },\n    [Env.PRD]: {\n      [Platform.PORTFOLIO]: '35e1cd62-49c5-4be8-8b6e-a5212f2d2cfb',\n      [Platform.MOBILE]: '75fa62a3-9ca0-4b91-9fe5-76bec86b0257',\n      [Platform.EXTENSION]: '1132f10a-b4e5-4390-a5f2-d9c6022db564',\n      [Platform.INFURA]: '', // unset\n    },\n  };\n\n  if (!clientIds[env]) {\n    throw new Error(`invalid env ${env}: cannot determine oidc client id`);\n  }\n\n  if (!clientIds[env][platform]) {\n    throw new Error(\n      `invalid env ${env} and platform ${platform} combination: cannot determine oidc client id`,\n    );\n  }\n\n  return clientIds[env][platform];\n}\n"]}

package/dist/chunk-T3FNDVE3.js

@@ -0,0 +1,158 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+
+var _chunkUAXWZN5Jjs = require('./chunk-UAXWZN5J.js');
+
+
+
+
+var _chunkPCOIRDTOjs = require('./chunk-PCOIRDTO.js');
+
+
+
+var _chunkIGY2S5BCjs = require('./chunk-IGY2S5BC.js');
+
+// src/controllers/user-storage/encryption/encryption.ts
+var _aes = require('@noble/ciphers/aes');
+var _webcrypto = require('@noble/ciphers/webcrypto');
+var _scrypt = require('@noble/hashes/scrypt');
+var _sha256 = require('@noble/hashes/sha256');
+var _utils = require('@noble/hashes/utils');
+var ALGORITHM_NONCE_SIZE = 12;
+var ALGORITHM_KEY_SIZE = 16;
+var SCRYPT_SALT_SIZE = 16;
+var SCRYPT_N = 2 ** 17;
+var SCRYPT_r = 8;
+var SCRYPT_p = 1;
+var _encryptStringV1, encryptStringV1_fn, _decryptStringV1, decryptStringV1_fn, _encrypt, encrypt_fn, _decrypt, decrypt_fn, _getOrGenerateScryptKey, getOrGenerateScryptKey_fn;
+var EncryptorDecryptor = class {
+  constructor() {
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _encryptStringV1);
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _decryptStringV1);
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _encrypt);
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _decrypt);
+    _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _getOrGenerateScryptKey);
+  }
+  encryptString(plaintext, password) {
+    try {
+      return _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _encryptStringV1, encryptStringV1_fn).call(this, plaintext, password);
+    } catch (e) {
+      const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);
+      throw new Error(`Unable to encrypt string - ${errorMessage}`);
+    }
+  }
+  decryptString(encryptedDataStr, password) {
+    try {
+      const encryptedData = JSON.parse(encryptedDataStr);
+      if (encryptedData.v === "1") {
+        if (encryptedData.t === "scrypt") {
+          return _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _decryptStringV1, decryptStringV1_fn).call(this, encryptedData, password);
+        }
+      }
+      throw new Error(
+        `Unsupported encrypted data payload - ${encryptedDataStr}`
+      );
+    } catch (e) {
+      const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);
+      throw new Error(`Unable to decrypt string - ${errorMessage}`);
+    }
+  }
+};
+_encryptStringV1 = new WeakSet();
+encryptStringV1_fn = function(plaintext, password) {
+  const { key, salt } = _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _getOrGenerateScryptKey, getOrGenerateScryptKey_fn).call(this, password, {
+    N: SCRYPT_N,
+    r: SCRYPT_r,
+    p: SCRYPT_p,
+    dkLen: ALGORITHM_KEY_SIZE
+  });
+  const plaintextRaw = _utils.utf8ToBytes.call(void 0, plaintext);
+  const ciphertextAndNonceAndSalt = _utils.concatBytes.call(void 0, 
+    salt,
+    _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _encrypt, encrypt_fn).call(this, plaintextRaw, key)
+  );
+  const encryptedData = _chunkPCOIRDTOjs.byteArrayToBase64.call(void 0, ciphertextAndNonceAndSalt);
+  const encryptedPayload = {
+    v: "1",
+    t: "scrypt",
+    d: encryptedData,
+    o: {
+      N: SCRYPT_N,
+      r: SCRYPT_r,
+      p: SCRYPT_p,
+      dkLen: ALGORITHM_KEY_SIZE
+    },
+    saltLen: SCRYPT_SALT_SIZE
+  };
+  return JSON.stringify(encryptedPayload);
+};
+_decryptStringV1 = new WeakSet();
+decryptStringV1_fn = function(data, password) {
+  const { o, d: base64CiphertextAndNonceAndSalt, saltLen } = data;
+  const ciphertextAndNonceAndSalt = _chunkPCOIRDTOjs.base64ToByteArray.call(void 0, 
+    base64CiphertextAndNonceAndSalt
+  );
+  const salt = ciphertextAndNonceAndSalt.slice(0, saltLen);
+  const ciphertextAndNonce = ciphertextAndNonceAndSalt.slice(
+    saltLen,
+    ciphertextAndNonceAndSalt.length
+  );
+  const { key } = _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _getOrGenerateScryptKey, getOrGenerateScryptKey_fn).call(this, password, {
+    N: o.N,
+    r: o.r,
+    p: o.p,
+    dkLen: o.dkLen
+  }, salt);
+  return _chunkPCOIRDTOjs.bytesToUtf8.call(void 0, _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _decrypt, decrypt_fn).call(this, ciphertextAndNonce, key));
+};
+_encrypt = new WeakSet();
+encrypt_fn = function(plaintext, key) {
+  const nonce = _webcrypto.randomBytes.call(void 0, ALGORITHM_NONCE_SIZE);
+  const ciphertext = _aes.gcm.call(void 0, key, nonce).encrypt(plaintext);
+  return _utils.concatBytes.call(void 0, nonce, ciphertext);
+};
+_decrypt = new WeakSet();
+decrypt_fn = function(ciphertextAndNonce, key) {
+  const nonce = ciphertextAndNonce.slice(0, ALGORITHM_NONCE_SIZE);
+  const ciphertext = ciphertextAndNonce.slice(
+    ALGORITHM_NONCE_SIZE,
+    ciphertextAndNonce.length
+  );
+  return _aes.gcm.call(void 0, key, nonce).decrypt(ciphertext);
+};
+_getOrGenerateScryptKey = new WeakSet();
+getOrGenerateScryptKey_fn = function(password, o, salt) {
+  const hashedPassword = createSHA256Hash(password);
+  const cachedKey = salt ? _chunkUAXWZN5Jjs.getCachedKeyBySalt.call(void 0, hashedPassword, salt) : _chunkUAXWZN5Jjs.getAnyCachedKey.call(void 0, hashedPassword);
+  if (cachedKey) {
+    return {
+      key: cachedKey.key,
+      salt: cachedKey.salt
+    };
+  }
+  const newSalt = salt ?? _webcrypto.randomBytes.call(void 0, SCRYPT_SALT_SIZE);
+  const newKey = _scrypt.scrypt.call(void 0, password, newSalt, {
+    N: o.N,
+    r: o.r,
+    p: o.p,
+    dkLen: o.dkLen
+  });
+  _chunkUAXWZN5Jjs.setCachedKey.call(void 0, hashedPassword, newSalt, newKey);
+  return {
+    key: newKey,
+    salt: newSalt
+  };
+};
+var encryption = new EncryptorDecryptor();
+var encryption_default = encryption;
+function createSHA256Hash(data) {
+  const hashedData = _sha256.sha256.call(void 0, data);
+  return _utils.bytesToHex.call(void 0, hashedData);
+}
+
+
+
+
+exports.encryption_default = encryption_default; exports.createSHA256Hash = createSHA256Hash;
+//# sourceMappingURL=chunk-T3FNDVE3.js.map

package/dist/chunk-T3FNDVE3.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controllers/user-storage/encryption/encryption.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,SAAS,WAAW;AACpB,SAAS,mBAAmB;AAC5B,SAAS,cAAc;AACvB,SAAS,cAAc;AACvB,SAAS,aAAa,aAAa,kBAAkB;AA6BrD,IAAM,uBAAuB;AAC7B,IAAM,qBAAqB;AAI3B,IAAM,mBAAmB;AACzB,IAAM,WAAW,KAAK;AAEtB,IAAM,WAAW;AAEjB,IAAM,WAAW;AA3CjB;AA6CA,IAAM,qBAAN,MAAyB;AAAA,EAAzB;AA2BE;AAkCA;AA+BA;AASA;AAYA;AAAA;AAAA,EAhHA,cAAc,WAAmB,UAA0B;AACzD,QAAI;AACF,aAAO,sBAAK,sCAAL,WAAsB,WAAW;AAAA,IAC1C,SAAS,GAAG;AACV,YAAM,eAAe,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,CAAC;AACtE,YAAM,IAAI,MAAM,8BAA8B,YAAY,EAAE;AAAA,IAC9D;AAAA,EACF;AAAA,EAEA,cAAc,kBAA0B,UAA0B;AAChE,QAAI;AACF,YAAM,gBAAkC,KAAK,MAAM,gBAAgB;AACnE,UAAI,cAAc,MAAM,KAAK;AAC3B,YAAI,cAAc,MAAM,UAAU;AAChC,iBAAO,sBAAK,sCAAL,WAAsB,eAAe;AAAA,QAC9C;AAAA,MACF;AACA,YAAM,IAAI;AAAA,QACR,wCAAwC,gBAAgB;AAAA,MAC1D;AAAA,IACF,SAAS,GAAG;AACV,YAAM,eAAe,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,CAAC;AACtE,YAAM,IAAI,MAAM,8BAA8B,YAAY,EAAE;AAAA,IAC9D;AAAA,EACF;AAuHF;AArHE;AAAA,qBAAgB,SAAC,WAAmB,UAA0B;AAC5D,QAAM,EAAE,KAAK,KAAK,IAAI,sBAAK,oDAAL,WAA6B,UAAU;AAAA,IAC3D,GAAG;AAAA,IACH,GAAG;AAAA,IACH,GAAG;AAAA,IACH,OAAO;AAAA,EACT;AAGA,QAAM,eAAe,YAAY,SAAS;AAC1C,QAAM,4BAA4B;AAAA,IAChC;AAAA,IACA,sBAAK,sBAAL,WAAc,cAAc;AAAA,EAC9B;AAGA,QAAM,gBAAgB,kBAAkB,yBAAyB;AAEjE,QAAM,mBAAqC;AAAA,IACzC,GAAG;AAAA,IACH,GAAG;AAAA,IACH,GAAG;AAAA,IACH,GAAG;AAAA,MACD,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,MACH,OAAO;AAAA,IACT;AAAA,IACA,SAAS;AAAA,EACX;AAEA,SAAO,KAAK,UAAU,gBAAgB;AACxC;AAEA;AAAA,qBAAgB,SAAC,MAAwB,UAA0B;AACjE,QAAM,EAAE,GAAG,GAAG,iCAAiC,QAAQ,IAAI;AAG3D,QAAM,4BAA4B;AAAA,IAChC;AAAA,EACF;AAGA,QAAM,OAAO,0BAA0B,MAAM,GAAG,OAAO;AACvD,QAAM,qBAAqB,0BAA0B;AAAA,IACnD;AAAA,IACA,0BAA0B;AAAA,EAC5B;AAGA,QAAM,EAAE,IAAI,IAAI,sBAAK,oDAAL,WACd,UACA;AAAA,IACE,GAAG,EAAE;AAAA,IACL,GAAG,EAAE;AAAA,IACL,GAAG,EAAE;AAAA,IACL,OAAO,EAAE;AAAA,EACX,GACA;AAIF,SAAO,YAAY,sBAAK,sBAAL,WAAc,oBAAoB,IAAI;AAC3D;AAEA;AAAA,aAAQ,SAAC,WAAuB,KAA6B;AAC3D,QAAM,QAAQ,YAAY,oBAAoB;AAG9C,QAAM,aAAa,IAAI,KAAK,KAAK,EAAE,QAAQ,SAAS;AAEpD,SAAO,YAAY,OAAO,UAAU;AACtC;AAEA;AAAA,aAAQ,SAAC,oBAAgC,KAA6B;AAEpE,QAAM,QAAQ,mBAAmB,MAAM,GAAG,oBAAoB;AAC9D,QAAM,aAAa,mBAAmB;AAAA,IACpC;AAAA,IACA,mBAAmB;AAAA,EACrB;AAGA,SAAO,IAAI,KAAK,KAAK,EAAE,QAAQ,UAAU;AAC3C;AAEA;AAAA,4BAAuB,SACrB,UACA,GACA,MACA;AACA,QAAM,iBAAiB,iBAAiB,QAAQ;AAChD,QAAM,YAAY,OACd,mBAAmB,gBAAgB,IAAI,IACvC,gBAAgB,cAAc;AAElC,MAAI,WAAW;AACb,WAAO;AAAA,MACL,KAAK,UAAU;AAAA,MACf,MAAM,UAAU;AAAA,IAClB;AAAA,EACF;AAEA,QAAM,UAAU,QAAQ,YAAY,gBAAgB;AACpD,QAAM,SAAS,OAAO,UAAU,SAAS;AAAA,IACvC,GAAG,EAAE;AAAA,IACL,GAAG,EAAE;AAAA,IACL,GAAG,EAAE;AAAA,IACL,OAAO,EAAE;AAAA,EACX,CAAC;AACD,eAAa,gBAAgB,SAAS,MAAM;AAE5C,SAAO;AAAA,IACL,KAAK;AAAA,IACL,MAAM;AAAA,EACR;AACF;AAGF,IAAM,aAAa,IAAI,mBAAmB;AAC1C,IAAO,qBAAQ;AAOR,SAAS,iBAAiB,MAAsB;AACrD,QAAM,aAAa,OAAO,IAAI;AAC9B,SAAO,WAAW,UAAU;AAC9B","sourcesContent":["import { gcm } from '@noble/ciphers/aes';\nimport { randomBytes } from '@noble/ciphers/webcrypto';\nimport { scrypt } from '@noble/hashes/scrypt';\nimport { sha256 } from '@noble/hashes/sha256';\nimport { utf8ToBytes, concatBytes, bytesToHex } from '@noble/hashes/utils';\n\nimport { getAnyCachedKey, getCachedKeyBySalt, setCachedKey } from './cache';\nimport { base64ToByteArray, byteArrayToBase64, bytesToUtf8 } from './utils';\n\nexport type EncryptedPayload = {\n  // version\n  v: '1';\n\n  // key derivation function algorithm - scrypt\n  t: 'scrypt';\n\n  // data\n  d: string;\n\n  // encryption options - scrypt\n  o: {\n    // eslint-disable-next-line @typescript-eslint/naming-convention\n    N: number;\n    r: number;\n    p: number;\n    dkLen: number;\n  };\n\n  // Salt options\n  saltLen: number;\n};\n\n// Nonce/Key Sizes\nconst ALGORITHM_NONCE_SIZE = 12; // 12 bytes\nconst ALGORITHM_KEY_SIZE = 16; // 16 bytes\n\n// Scrypt settings\n// see: https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html#scrypt\nconst SCRYPT_SALT_SIZE = 16; // 16 bytes\nconst SCRYPT_N = 2 ** 17; // CPU/memory cost parameter (must be a power of 2, > 1)\n// eslint-disable-next-line @typescript-eslint/naming-convention\nconst SCRYPT_r = 8; // Block size parameter\n// eslint-disable-next-line @typescript-eslint/naming-convention\nconst SCRYPT_p = 1; // Parallelization parameter\n\nclass EncryptorDecryptor {\n  encryptString(plaintext: string, password: string): string {\n    try {\n      return this.#encryptStringV1(plaintext, password);\n    } catch (e) {\n      const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);\n      throw new Error(`Unable to encrypt string - ${errorMessage}`);\n    }\n  }\n\n  decryptString(encryptedDataStr: string, password: string): string {\n    try {\n      const encryptedData: EncryptedPayload = JSON.parse(encryptedDataStr);\n      if (encryptedData.v === '1') {\n        if (encryptedData.t === 'scrypt') {\n          return this.#decryptStringV1(encryptedData, password);\n        }\n      }\n      throw new Error(\n        `Unsupported encrypted data payload - ${encryptedDataStr}`,\n      );\n    } catch (e) {\n      const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);\n      throw new Error(`Unable to decrypt string - ${errorMessage}`);\n    }\n  }\n\n  #encryptStringV1(plaintext: string, password: string): string {\n    const { key, salt } = this.#getOrGenerateScryptKey(password, {\n      N: SCRYPT_N,\n      r: SCRYPT_r,\n      p: SCRYPT_p,\n      dkLen: ALGORITHM_KEY_SIZE,\n    });\n\n    // Encrypt and prepend salt.\n    const plaintextRaw = utf8ToBytes(plaintext);\n    const ciphertextAndNonceAndSalt = concatBytes(\n      salt,\n      this.#encrypt(plaintextRaw, key),\n    );\n\n    // Convert to Base64\n    const encryptedData = byteArrayToBase64(ciphertextAndNonceAndSalt);\n\n    const encryptedPayload: EncryptedPayload = {\n      v: '1',\n      t: 'scrypt',\n      d: encryptedData,\n      o: {\n        N: SCRYPT_N,\n        r: SCRYPT_r,\n        p: SCRYPT_p,\n        dkLen: ALGORITHM_KEY_SIZE,\n      },\n      saltLen: SCRYPT_SALT_SIZE,\n    };\n\n    return JSON.stringify(encryptedPayload);\n  }\n\n  #decryptStringV1(data: EncryptedPayload, password: string): string {\n    const { o, d: base64CiphertextAndNonceAndSalt, saltLen } = data;\n\n    // Decode the base64.\n    const ciphertextAndNonceAndSalt = base64ToByteArray(\n      base64CiphertextAndNonceAndSalt,\n    );\n\n    // Create buffers of salt and ciphertextAndNonce.\n    const salt = ciphertextAndNonceAndSalt.slice(0, saltLen);\n    const ciphertextAndNonce = ciphertextAndNonceAndSalt.slice(\n      saltLen,\n      ciphertextAndNonceAndSalt.length,\n    );\n\n    // Derive the key.\n    const { key } = this.#getOrGenerateScryptKey(\n      password,\n      {\n        N: o.N,\n        r: o.r,\n        p: o.p,\n        dkLen: o.dkLen,\n      },\n      salt,\n    );\n\n    // Decrypt and return result.\n    return bytesToUtf8(this.#decrypt(ciphertextAndNonce, key));\n  }\n\n  #encrypt(plaintext: Uint8Array, key: Uint8Array): Uint8Array {\n    const nonce = randomBytes(ALGORITHM_NONCE_SIZE);\n\n    // Encrypt and prepend nonce.\n    const ciphertext = gcm(key, nonce).encrypt(plaintext);\n\n    return concatBytes(nonce, ciphertext);\n  }\n\n  #decrypt(ciphertextAndNonce: Uint8Array, key: Uint8Array): Uint8Array {\n    // Create buffers of nonce and ciphertext.\n    const nonce = ciphertextAndNonce.slice(0, ALGORITHM_NONCE_SIZE);\n    const ciphertext = ciphertextAndNonce.slice(\n      ALGORITHM_NONCE_SIZE,\n      ciphertextAndNonce.length,\n    );\n\n    // Decrypt and return result.\n    return gcm(key, nonce).decrypt(ciphertext);\n  }\n\n  #getOrGenerateScryptKey(\n    password: string,\n    o: EncryptedPayload['o'],\n    salt?: Uint8Array,\n  ) {\n    const hashedPassword = createSHA256Hash(password);\n    const cachedKey = salt\n      ? getCachedKeyBySalt(hashedPassword, salt)\n      : getAnyCachedKey(hashedPassword);\n\n    if (cachedKey) {\n      return {\n        key: cachedKey.key,\n        salt: cachedKey.salt,\n      };\n    }\n\n    const newSalt = salt ?? randomBytes(SCRYPT_SALT_SIZE);\n    const newKey = scrypt(password, newSalt, {\n      N: o.N,\n      r: o.r,\n      p: o.p,\n      dkLen: o.dkLen,\n    });\n    setCachedKey(hashedPassword, newSalt, newKey);\n\n    return {\n      key: newKey,\n      salt: newSalt,\n    };\n  }\n}\n\nconst encryption = new EncryptorDecryptor();\nexport default encryption;\n\n/**\n * Receive a SHA256 hash from a given string\n * @param data - input\n * @returns sha256 hash\n */\nexport function createSHA256Hash(data: string): string {\n  const hashedData = sha256(data);\n  return bytesToHex(hashedData);\n}\n"]}

package/dist/{chunk-BHVT2QEA.mjs → chunk-TFFQFIJV.mjs}

@@ -11,6 +11,12 @@ var SignInError = class extends Error {
     this.name = "SignInError";
   }
 };
+var PairError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "PairError";
+  }
+};
 var UserStorageError = class extends Error {
   constructor(message) {
     super(message);
@@ -39,9 +45,10 @@ var NotFoundError = class extends Error {
 export {
   NonceRetrievalError,
   SignInError,
+  PairError,
   UserStorageError,
   ValidationError,
   UnsupportedAuthTypeError,
   NotFoundError
 };
-//# sourceMappingURL=chunk-BHVT2QEA.mjs.map
+//# sourceMappingURL=chunk-TFFQFIJV.mjs.map

package/dist/chunk-TFFQFIJV.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdk/errors.ts"],"sourcesContent":["export class NonceRetrievalError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'NonceRetrievalError';\n  }\n}\n\nexport class SignInError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'SignInError';\n  }\n}\n\nexport class PairError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'PairError';\n  }\n}\n\nexport class UserStorageError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'UserStorageError';\n  }\n}\n\nexport class ValidationError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'ValidationError';\n  }\n}\n\nexport class UnsupportedAuthTypeError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'UnsupportedAuthTypeError';\n  }\n}\n\nexport class NotFoundError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'NotFoundError';\n  }\n}\n"],"mappings":";AAAO,IAAM,sBAAN,cAAkC,MAAM;AAAA,EAC7C,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,cAAN,cAA0B,MAAM;AAAA,EACrC,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,YAAN,cAAwB,MAAM;AAAA,EACnC,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,mBAAN,cAA+B,MAAM;AAAA,EAC1C,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,kBAAN,cAA8B,MAAM;AAAA,EACzC,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,2BAAN,cAAuC,MAAM;AAAA,EAClD,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;AAEO,IAAM,gBAAN,cAA4B,MAAM;AAAA,EACvC,YAAY,SAAiB;AAC3B,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;","names":[]}

package/dist/chunk-TGFMKARH.mjs

@@ -0,0 +1,274 @@
+import {
+  createSnapSignMessageRequest
+} from "./chunk-6P6CUKKI.mjs";
+import {
+  getUserStorage,
+  upsertUserStorage
+} from "./chunk-2XGRQBXI.mjs";
+import {
+  createSHA256Hash
+} from "./chunk-K5UKU454.mjs";
+import {
+  __privateAdd,
+  __privateGet,
+  __privateMethod
+} from "./chunk-U5UIDVOO.mjs";
+
+// src/controllers/user-storage/UserStorageController.ts
+import { BaseController } from "@metamask/base-controller";
+var controllerName = "UserStorageController";
+var defaultState = {
+  isProfileSyncingEnabled: true,
+  isProfileSyncingUpdateLoading: false
+};
+var metadata = {
+  isProfileSyncingEnabled: {
+    persist: true,
+    anonymous: true
+  },
+  isProfileSyncingUpdateLoading: {
+    persist: false,
+    anonymous: false
+  }
+};
+var _auth, _notificationServices, _registerMessageHandlers, registerMessageHandlers_fn, _assertProfileSyncingEnabled, assertProfileSyncingEnabled_fn, _getStorageKeyAndBearerToken, getStorageKeyAndBearerToken_fn, _createStorageKey, createStorageKey_fn, _snapSignMessage, snapSignMessage_fn, _setIsProfileSyncingUpdateLoading, setIsProfileSyncingUpdateLoading_fn;
+var UserStorageController = class extends BaseController {
+  constructor(params) {
+    super({
+      messenger: params.messenger,
+      metadata,
+      name: controllerName,
+      state: { ...defaultState, ...params.state }
+    });
+    /**
+     * Constructor helper for registering this controller's messaging system
+     * actions.
+     */
+    __privateAdd(this, _registerMessageHandlers);
+    __privateAdd(this, _assertProfileSyncingEnabled);
+    /**
+     * Utility to get the bearer token and storage key
+     */
+    __privateAdd(this, _getStorageKeyAndBearerToken);
+    /**
+     * Rather than storing the storage key, we can compute the storage key when needed.
+     *
+     * @returns the storage key
+     */
+    __privateAdd(this, _createStorageKey);
+    /**
+     * Signs a specific message using an underlying auth snap.
+     *
+     * @param message - A specific tagged message to sign.
+     * @returns A Signature created by the snap.
+     */
+    __privateAdd(this, _snapSignMessage);
+    __privateAdd(this, _setIsProfileSyncingUpdateLoading);
+    __privateAdd(this, _auth, {
+      getBearerToken: async () => {
+        return await this.messagingSystem.call(
+          "AuthenticationController:getBearerToken"
+        );
+      },
+      getProfileId: async () => {
+        const sessionProfile = await this.messagingSystem.call(
+          "AuthenticationController:getSessionProfile"
+        );
+        return sessionProfile?.profileId;
+      },
+      isAuthEnabled: () => {
+        return this.messagingSystem.call("AuthenticationController:isSignedIn");
+      },
+      signIn: async () => {
+        return await this.messagingSystem.call(
+          "AuthenticationController:performSignIn"
+        );
+      },
+      signOut: async () => {
+        return this.messagingSystem.call(
+          "AuthenticationController:performSignOut"
+        );
+      }
+    });
+    __privateAdd(this, _notificationServices, {
+      disableNotificationServices: async () => {
+        return await this.messagingSystem.call(
+          "NotificationServicesController:disableNotificationServices"
+        );
+      },
+      selectIsNotificationServicesEnabled: async () => {
+        return this.messagingSystem.call(
+          "NotificationServicesController:selectIsNotificationServicesEnabled"
+        );
+      }
+    });
+    this.getMetaMetricsState = params.getMetaMetricsState;
+    __privateMethod(this, _registerMessageHandlers, registerMessageHandlers_fn).call(this);
+  }
+  async enableProfileSyncing() {
+    try {
+      __privateMethod(this, _setIsProfileSyncingUpdateLoading, setIsProfileSyncingUpdateLoading_fn).call(this, true);
+      const authEnabled = __privateGet(this, _auth).isAuthEnabled();
+      if (!authEnabled) {
+        await __privateGet(this, _auth).signIn();
+      }
+      this.update((state) => {
+        state.isProfileSyncingEnabled = true;
+      });
+      __privateMethod(this, _setIsProfileSyncingUpdateLoading, setIsProfileSyncingUpdateLoading_fn).call(this, false);
+    } catch (e) {
+      __privateMethod(this, _setIsProfileSyncingUpdateLoading, setIsProfileSyncingUpdateLoading_fn).call(this, false);
+      const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);
+      throw new Error(
+        `${controllerName} - failed to enable profile syncing - ${errorMessage}`
+      );
+    }
+  }
+  async setIsProfileSyncingEnabled(isProfileSyncingEnabled) {
+    this.update((state) => {
+      state.isProfileSyncingEnabled = isProfileSyncingEnabled;
+    });
+  }
+  async disableProfileSyncing() {
+    const isAlreadyDisabled = !this.state.isProfileSyncingEnabled;
+    if (isAlreadyDisabled) {
+      return;
+    }
+    try {
+      __privateMethod(this, _setIsProfileSyncingUpdateLoading, setIsProfileSyncingUpdateLoading_fn).call(this, true);
+      const isNotificationServicesEnabled = await __privateGet(this, _notificationServices).selectIsNotificationServicesEnabled();
+      if (isNotificationServicesEnabled) {
+        await __privateGet(this, _notificationServices).disableNotificationServices();
+      }
+      const isMetaMetricsParticipation = this.getMetaMetricsState();
+      if (!isMetaMetricsParticipation) {
+        this.messagingSystem.call("AuthenticationController:performSignOut");
+      }
+      __privateMethod(this, _setIsProfileSyncingUpdateLoading, setIsProfileSyncingUpdateLoading_fn).call(this, false);
+      this.update((state) => {
+        state.isProfileSyncingEnabled = false;
+      });
+    } catch (e) {
+      __privateMethod(this, _setIsProfileSyncingUpdateLoading, setIsProfileSyncingUpdateLoading_fn).call(this, false);
+      const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);
+      throw new Error(
+        `${controllerName} - failed to disable profile syncing - ${errorMessage}`
+      );
+    }
+  }
+  /**
+   * Allows retrieval of stored data. Data stored is string formatted.
+   * Developers can extend the entry path and entry name through the `schema.ts` file.
+   *
+   * @param entryKey - entry key that matches schema
+   * @returns the decrypted string contents found from user storage (or null if not found)
+   */
+  async performGetStorage(entryKey) {
+    __privateMethod(this, _assertProfileSyncingEnabled, assertProfileSyncingEnabled_fn).call(this);
+    const { bearerToken, storageKey } = await __privateMethod(this, _getStorageKeyAndBearerToken, getStorageKeyAndBearerToken_fn).call(this);
+    const result = await getUserStorage({
+      entryKey,
+      bearerToken,
+      storageKey
+    });
+    return result;
+  }
+  /**
+   * Allows storage of user data. Data stored must be string formatted.
+   * Developers can extend the entry path and entry name through the `schema.ts` file.
+   *
+   * @param entryKey - entry key that matches schema
+   * @param value - The string data you want to store.
+   * @returns nothing. NOTE that an error is thrown if fails to store data.
+   */
+  async performSetStorage(entryKey, value) {
+    __privateMethod(this, _assertProfileSyncingEnabled, assertProfileSyncingEnabled_fn).call(this);
+    const { bearerToken, storageKey } = await __privateMethod(this, _getStorageKeyAndBearerToken, getStorageKeyAndBearerToken_fn).call(this);
+    await upsertUserStorage(value, {
+      entryKey,
+      bearerToken,
+      storageKey
+    });
+  }
+  /**
+   * Retrieves the storage key, for internal use only!
+   *
+   * @returns the storage key
+   */
+  async getStorageKey() {
+    __privateMethod(this, _assertProfileSyncingEnabled, assertProfileSyncingEnabled_fn).call(this);
+    const storageKey = await __privateMethod(this, _createStorageKey, createStorageKey_fn).call(this);
+    return storageKey;
+  }
+};
+_auth = new WeakMap();
+_notificationServices = new WeakMap();
+_registerMessageHandlers = new WeakSet();
+registerMessageHandlers_fn = function() {
+  this.messagingSystem.registerActionHandler(
+    "UserStorageController:performGetStorage",
+    this.performGetStorage.bind(this)
+  );
+  this.messagingSystem.registerActionHandler(
+    "UserStorageController:performSetStorage",
+    this.performSetStorage.bind(this)
+  );
+  this.messagingSystem.registerActionHandler(
+    "UserStorageController:getStorageKey",
+    this.getStorageKey.bind(this)
+  );
+  this.messagingSystem.registerActionHandler(
+    "UserStorageController:enableProfileSyncing",
+    this.enableProfileSyncing.bind(this)
+  );
+  this.messagingSystem.registerActionHandler(
+    "UserStorageController:disableProfileSyncing",
+    this.disableProfileSyncing.bind(this)
+  );
+};
+_assertProfileSyncingEnabled = new WeakSet();
+assertProfileSyncingEnabled_fn = function() {
+  if (!this.state.isProfileSyncingEnabled) {
+    throw new Error(
+      `${controllerName}: Unable to call method, user is not authenticated`
+    );
+  }
+};
+_getStorageKeyAndBearerToken = new WeakSet();
+getStorageKeyAndBearerToken_fn = async function() {
+  const bearerToken = await __privateGet(this, _auth).getBearerToken();
+  if (!bearerToken) {
+    throw new Error("UserStorageController - unable to get bearer token");
+  }
+  const storageKey = await __privateMethod(this, _createStorageKey, createStorageKey_fn).call(this);
+  return { bearerToken, storageKey };
+};
+_createStorageKey = new WeakSet();
+createStorageKey_fn = async function() {
+  const id = await __privateGet(this, _auth).getProfileId();
+  if (!id) {
+    throw new Error("UserStorageController - unable to create storage key");
+  }
+  const storageKeySignature = await __privateMethod(this, _snapSignMessage, snapSignMessage_fn).call(this, `metamask:${id}`);
+  const storageKey = createSHA256Hash(storageKeySignature);
+  return storageKey;
+};
+_snapSignMessage = new WeakSet();
+snapSignMessage_fn = function(message) {
+  return this.messagingSystem.call(
+    "SnapController:handleRequest",
+    createSnapSignMessageRequest(message)
+  );
+};
+_setIsProfileSyncingUpdateLoading = new WeakSet();
+setIsProfileSyncingUpdateLoading_fn = function(isProfileSyncingUpdateLoading) {
+  this.update((state) => {
+    state.isProfileSyncingUpdateLoading = isProfileSyncingUpdateLoading;
+  });
+};
+
+export {
+  defaultState,
+  UserStorageController
+};
+//# sourceMappingURL=chunk-TGFMKARH.mjs.map