@metamask/profile-sync-controller 0.2.0 → 0.3.0

package/CHANGELOG.md

@@ -7,6 +7,49 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.3.0]
+
+### Added
+
+- add granular account syncing ([#4629](https://github.com/MetaMask/core/pull/4629))
+  - add accounts user storage schema
+  - add method `saveInternalAccountToUserStorage` to `UserStorageController`
+  - add method `syncInternalAccountsWithUserStorage` to `UserStorageController`
+  - add `@metamask/accounts-controller` dev dependency
+  - add `@metamask/keyring-api` dev dependency
+- add infura OIDC identifier ([#4654](https://github.com/MetaMask/core/pull/4654))
+- define and export new types: `AuthenticationControllerGetStateAction`, `AuthenticationControllerStateChangeEvent`, `Events` ([#4633](https://github.com/MetaMask/core/pull/4633))
+- SDK and controller support for `GET /api/v1/userstorage/:feature` endpoint ([#4626](https://github.com/MetaMask/core/pull/4626))
+  - add method `performGetStorageAllFeatureEntries` to `UserStorageController`
+  - add `ALLOW_ARBITRARY_KEYS` to `USER_STORAGE_SCHEMA` to allow wildcard/getAll for entries for a feature
+- add subpath exports to `@metamask/profile-sync-controller` ([#4604](https://github.com/MetaMask/core/pull/4604))
+  - add `@metamask/profile-sync-controller/sdk` export
+  - add `@metamask/profile-sync-controller/user-storage` export
+  - add `@metamask/profile-sync-controller/auth` export
+
+### Changed
+
+- Bump `typescript` from `~5.1.6` to `~5.2.2` ([#4584](https://github.com/MetaMask/core/pull/4584))
+- Fix controllers with missing or incorrect messenger action/event types ([#4633](https://github.com/MetaMask/core/pull/4633))
+- **BREAKING:** `AuthenticationControllerMessenger` must allow internal events defined in the `Events` type ([#4633](https://github.com/MetaMask/core/pull/4633))
+- `AuthenticationControllerActions` is widened to include the `AuthenticationController:getState` action ([#4633](https://github.com/MetaMask/core/pull/4633))
+- Replaced `@metamask/profile-sync-controller/sdk` to use the same encryption file as `UserStorageController` ([#4649](https://github.com/MetaMask/core/pull/4649))
+
+### Fixed
+
+- update subpath exports internal `package.json` files to resolve `jest-haste-map` errors ([#4650](https://github.com/MetaMask/core/pull/4650))
+
+## [0.2.1]
+
+### Added
+
+- unlock checks for when controller methods are called ([#4569](https://github.com/MetaMask/core/pull/4569))
+
+### Changed
+
+- **BREAKING** made `MOCK_ENCRYPTED_STORAGE_DATA` fixture a function to be lazily evaluated ([#4592](https://github.com/MetaMask/core/pull/4592))
+- Bump `typescript` from `~5.0.4` to `~5.1.6` ([#4576](https://github.com/MetaMask/core/pull/4576))
+
 ## [0.2.0]
 
 ### Added
@@ -84,7 +127,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 - Initial release
 
-[Unreleased]: https://github.com/MetaMask/core/compare/@metamask/profile-sync-controller@0.2.0...HEAD
+[Unreleased]: https://github.com/MetaMask/core/compare/@metamask/profile-sync-controller@0.3.0...HEAD
+[0.3.0]: https://github.com/MetaMask/core/compare/@metamask/profile-sync-controller@0.2.1...@metamask/profile-sync-controller@0.3.0
+[0.2.1]: https://github.com/MetaMask/core/compare/@metamask/profile-sync-controller@0.2.0...@metamask/profile-sync-controller@0.2.1
 [0.2.0]: https://github.com/MetaMask/core/compare/@metamask/profile-sync-controller@0.1.4...@metamask/profile-sync-controller@0.2.0
 [0.1.4]: https://github.com/MetaMask/core/compare/@metamask/profile-sync-controller@0.1.3...@metamask/profile-sync-controller@0.1.4
 [0.1.3]: https://github.com/MetaMask/core/compare/@metamask/profile-sync-controller@0.1.2...@metamask/profile-sync-controller@0.1.3

package/auth/mocks/package.json

@@ -0,0 +1,9 @@
+{
+  "version": "1.0.0",
+  "private": true,
+  "description": "",
+  "license": "MIT",
+  "sideEffects": false,
+  "main": "../../dist/controllers/authentication/__fixtures__/index.js",
+  "types": "../../dist/types/controllers/authentication/__fixtures__/index.d.ts"
+}

package/auth/package.json

@@ -0,0 +1,9 @@
+{
+  "version": "1.0.0",
+  "private": true,
+  "description": "",
+  "license": "MIT",
+  "sideEffects": false,
+  "main": "../dist/controllers/authentication/index.js",
+  "types": "../dist/types/controllers/authentication/index.d.ts"
+}

package/dist/{chunk-BDO3VJEU.mjs → chunk-2CWF7ZTL.mjs}

@@ -3,7 +3,7 @@ import {
   authenticate,
   authorizeOIDC,
   getNonce
-} from "./chunk-WB6MUIML.mjs";
+} from "./chunk-YLURF2PF.mjs";
 import {
   validateLoginResponse
 } from "./chunk-QDGLIUUS.mjs";
@@ -126,4 +126,4 @@ assertSigner_fn = function(signer) {
 export {
   SIWEJwtBearerAuth
 };
-//# sourceMappingURL=chunk-BDO3VJEU.mjs.map
+//# sourceMappingURL=chunk-2CWF7ZTL.mjs.map

package/dist/{chunk-7KMONAQI.mjs → chunk-4WXZXVLI.mjs}

@@ -1,12 +1,12 @@
 import {
   JwtBearerAuth
-} from "./chunk-VYZPOR47.mjs";
+} from "./chunk-YKOMKXG4.mjs";
 import {
   SIWEJwtBearerAuth
-} from "./chunk-BDO3VJEU.mjs";
+} from "./chunk-2CWF7ZTL.mjs";
 import {
   SRPJwtBearerAuth
-} from "./chunk-DRD22DR5.mjs";
+} from "./chunk-J7NSK6BO.mjs";
 import {
   AuthType
 } from "./chunk-CAIIVJAO.mjs";
@@ -20,17 +20,16 @@ import {
 import {
   STORAGE_URL,
   UserStorage
-} from "./chunk-NPH5AHLH.mjs";
+} from "./chunk-E7Z5TCQT.mjs";
 import {
-  Encryption,
   createSHA256Hash
-} from "./chunk-B5DBQDB3.mjs";
+} from "./chunk-K5UKU454.mjs";
 import {
   Env,
   Platform,
   getEnvUrls,
   getOidcClientId
-} from "./chunk-FQ5SDMRE.mjs";
+} from "./chunk-KTCSRECK.mjs";
 import {
   NonceRetrievalError,
   NotFoundError,
@@ -48,7 +47,6 @@ import {
 var sdk_exports = {};
 __export(sdk_exports, {
   AuthType: () => AuthType,
-  Encryption: () => Encryption,
   Env: () => Env,
   JwtBearerAuth: () => JwtBearerAuth,
   MESSAGE_SIGNING_SNAP: () => MESSAGE_SIGNING_SNAP,
@@ -76,4 +74,4 @@ __export(sdk_exports, {
 export {
   sdk_exports
 };
-//# sourceMappingURL=chunk-7KMONAQI.mjs.map
+//# sourceMappingURL=chunk-4WXZXVLI.mjs.map

package/dist/{chunk-7KMONAQI.mjs.map → chunk-4WXZXVLI.mjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/sdk/index.ts"],"sourcesContent":["export * from './authentication';\nexport * from './user-storage';\nexport * from './env';\nexport * from './errors';\nexport * from './encryption';\nexport * from './utils/messaging-signing-snap-requests';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;","names":[]}
+{"version":3,"sources":["../src/sdk/index.ts"],"sourcesContent":["export * from './authentication';\nexport * from './user-storage';\nexport * from './env';\nexport * from './errors';\nexport * from './encryption';\nexport * from './utils/messaging-signing-snap-requests';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;","names":[]}

package/dist/{chunk-VD2IGTS3.js → chunk-4ZGRRVMI.js}

@@ -2,7 +2,7 @@
 
 
 
-var _chunkBOET676Pjs = require('./chunk-BOET676P.js');
+var _chunkLLG4D2SCjs = require('./chunk-LLG4D2SC.js');
 
 
 var _chunkRG4II6WHjs = require('./chunk-RG4II6WH.js');
@@ -100,17 +100,17 @@ getAuthSession_fn = async function() {
 _login = new WeakSet();
 login_fn = async function() {
   const address = await this.getIdentifier();
-  const nonceRes = await _chunkBOET676Pjs.getNonce.call(void 0, address, _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _config).env);
+  const nonceRes = await _chunkLLG4D2SCjs.getNonce.call(void 0, address, _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _config).env);
   const publicKey = await _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _options).signing.getIdentifier();
   const rawMessage = _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _createSrpLoginRawMessage, createSrpLoginRawMessage_fn).call(this, nonceRes.nonce, publicKey);
   const signature = await this.signMessage(rawMessage);
-  const authResponse = await _chunkBOET676Pjs.authenticate.call(void 0, 
+  const authResponse = await _chunkLLG4D2SCjs.authenticate.call(void 0, 
     rawMessage,
     signature,
     _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _config).type,
     _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _config).env
   );
-  const tokenResponse = await _chunkBOET676Pjs.authorizeOIDC.call(void 0, 
+  const tokenResponse = await _chunkLLG4D2SCjs.authorizeOIDC.call(void 0, 
     authResponse.token,
     _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _config).env,
     _chunkIGY2S5BCjs.__privateGet.call(void 0, this, _config).platform
@@ -130,4 +130,4 @@ createSrpLoginRawMessage_fn = function(nonce, publicKey) {
 
 
 exports.SRPJwtBearerAuth = SRPJwtBearerAuth;
-//# sourceMappingURL=chunk-VD2IGTS3.js.map
+//# sourceMappingURL=chunk-4ZGRRVMI.js.map

package/dist/{chunk-Y7P3UH26.mjs → chunk-D4SNJOID.mjs}

@@ -3,7 +3,7 @@ import {
   getAccessToken,
   getNonce,
   login
-} from "./chunk-7SW3CC66.mjs";
+} from "./chunk-LGXQBALM.mjs";
 import {
   createSnapPublicKeyRequest,
   createSnapSignMessageRequest
@@ -32,7 +32,7 @@ var metadata = {
     anonymous: false
   }
 };
-var _metametrics, _registerMessageHandlers, registerMessageHandlers_fn, _assertLoggedIn, assertLoggedIn_fn, _performAuthenticationFlow, performAuthenticationFlow_fn, _hasValidSession, hasValidSession_fn, __snapPublicKeyCache, _snapGetPublicKey, snapGetPublicKey_fn, __snapSignMessageCache, _snapSignMessage, snapSignMessage_fn;
+var _metametrics, _isUnlocked, _keyringController, _registerMessageHandlers, registerMessageHandlers_fn, _assertLoggedIn, assertLoggedIn_fn, _performAuthenticationFlow, performAuthenticationFlow_fn, _hasValidSession, hasValidSession_fn, __snapPublicKeyCache, _snapGetPublicKey, snapGetPublicKey_fn, __snapSignMessageCache, _snapSignMessage, snapSignMessage_fn;
 var AuthenticationController = class extends BaseController {
   constructor({
     messenger,
@@ -67,12 +67,28 @@ var AuthenticationController = class extends BaseController {
      */
     __privateAdd(this, _snapSignMessage);
     __privateAdd(this, _metametrics, void 0);
+    __privateAdd(this, _isUnlocked, false);
+    __privateAdd(this, _keyringController, {
+      setupLockedStateSubscriptions: () => {
+        const { isUnlocked } = this.messagingSystem.call(
+          "KeyringController:getState"
+        );
+        __privateSet(this, _isUnlocked, isUnlocked);
+        this.messagingSystem.subscribe("KeyringController:unlock", () => {
+          __privateSet(this, _isUnlocked, true);
+        });
+        this.messagingSystem.subscribe("KeyringController:lock", () => {
+          __privateSet(this, _isUnlocked, false);
+        });
+      }
+    });
     __privateAdd(this, __snapPublicKeyCache, void 0);
     __privateAdd(this, __snapSignMessageCache, {});
     if (!metametrics) {
       throw new Error("`metametrics` field is required");
     }
     __privateSet(this, _metametrics, metametrics);
+    __privateGet(this, _keyringController).setupLockedStateSubscriptions();
     __privateMethod(this, _registerMessageHandlers, registerMessageHandlers_fn).call(this);
   }
   async performSignIn() {
@@ -113,6 +129,8 @@ var AuthenticationController = class extends BaseController {
   }
 };
 _metametrics = new WeakMap();
+_isUnlocked = new WeakMap();
+_keyringController = new WeakMap();
 _registerMessageHandlers = new WeakSet();
 registerMessageHandlers_fn = function() {
   this.messagingSystem.registerActionHandler(
@@ -213,6 +231,11 @@ snapGetPublicKey_fn = async function() {
   if (__privateGet(this, __snapPublicKeyCache)) {
     return __privateGet(this, __snapPublicKeyCache);
   }
+  if (!__privateGet(this, _isUnlocked)) {
+    throw new Error(
+      "#snapGetPublicKey - unable to call snap, wallet is locked"
+    );
+  }
   const result = await this.messagingSystem.call(
     "SnapController:handleRequest",
     createSnapPublicKeyRequest()
@@ -226,6 +249,11 @@ snapSignMessage_fn = async function(message) {
   if (__privateGet(this, __snapSignMessageCache)[message]) {
     return __privateGet(this, __snapSignMessageCache)[message];
   }
+  if (!__privateGet(this, _isUnlocked)) {
+    throw new Error(
+      "#snapSignMessage - unable to call snap, wallet is locked"
+    );
+  }
   const result = await this.messagingSystem.call(
     "SnapController:handleRequest",
     createSnapSignMessageRequest(message)
@@ -238,4 +266,4 @@ export {
   defaultState,
   AuthenticationController
 };
-//# sourceMappingURL=chunk-Y7P3UH26.mjs.map
+//# sourceMappingURL=chunk-D4SNJOID.mjs.map

package/dist/chunk-D4SNJOID.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controllers/authentication/AuthenticationController.ts"],"sourcesContent":["import type {\n  ControllerGetStateAction,\n  ControllerStateChangeEvent,\n  RestrictedControllerMessenger,\n  StateMetadata,\n} from '@metamask/base-controller';\nimport { BaseController } from '@metamask/base-controller';\nimport type {\n  KeyringControllerGetStateAction,\n  KeyringControllerLockEvent,\n  KeyringControllerUnlockEvent,\n} from '@metamask/keyring-controller';\nimport type { HandleSnapRequest } from '@metamask/snaps-controllers';\n\nimport {\n  createSnapPublicKeyRequest,\n  createSnapSignMessageRequest,\n} from './auth-snap-requests';\nimport {\n  createLoginRawMessage,\n  getAccessToken,\n  getNonce,\n  login,\n} from './services';\n\nconst THIRTY_MIN_MS = 1000 * 60 * 30;\n\nconst controllerName = 'AuthenticationController';\n\n// State\ntype SessionProfile = {\n  identifierId: string;\n  profileId: string;\n};\n\ntype SessionData = {\n  /** profile - anonymous profile data for the given logged in user */\n  profile: SessionProfile;\n  /** accessToken - used to make requests authorized endpoints */\n  accessToken: string;\n  /** expiresIn - string date to determine if new access token is required  */\n  expiresIn: string;\n};\n\ntype MetaMetricsAuth = {\n  getMetaMetricsId: () => string | Promise<string>;\n  agent: 'extension' | 'mobile';\n};\n\nexport type AuthenticationControllerState = {\n  /**\n   * Global isSignedIn state.\n   * Can be used to determine if \"Profile Syncing\" is enabled.\n   */\n  isSignedIn: boolean;\n  sessionData?: SessionData;\n};\nexport const defaultState: AuthenticationControllerState = {\n  isSignedIn: false,\n};\nconst metadata: StateMetadata<AuthenticationControllerState> = {\n  isSignedIn: {\n    persist: true,\n    anonymous: true,\n  },\n  sessionData: {\n    persist: true,\n    anonymous: false,\n  },\n};\n\n// Messenger Actions\ntype CreateActionsObj<Controller extends keyof AuthenticationController> = {\n  [K in Controller]: {\n    type: `${typeof controllerName}:${K}`;\n    handler: AuthenticationController[K];\n  };\n};\ntype ActionsObj = CreateActionsObj<\n  | 'performSignIn'\n  | 'performSignOut'\n  | 'getBearerToken'\n  | 'getSessionProfile'\n  | 'isSignedIn'\n>;\nexport type Actions =\n  | ActionsObj[keyof ActionsObj]\n  | AuthenticationControllerGetStateAction;\nexport type AuthenticationControllerGetStateAction = ControllerGetStateAction<\n  typeof controllerName,\n  AuthenticationControllerState\n>;\nexport type AuthenticationControllerPerformSignIn = ActionsObj['performSignIn'];\nexport type AuthenticationControllerPerformSignOut =\n  ActionsObj['performSignOut'];\nexport type AuthenticationControllerGetBearerToken =\n  ActionsObj['getBearerToken'];\nexport type AuthenticationControllerGetSessionProfile =\n  ActionsObj['getSessionProfile'];\nexport type AuthenticationControllerIsSignedIn = ActionsObj['isSignedIn'];\n\nexport type AuthenticationControllerStateChangeEvent =\n  ControllerStateChangeEvent<\n    typeof controllerName,\n    AuthenticationControllerState\n  >;\n\nexport type Events = AuthenticationControllerStateChangeEvent;\n\n// Allowed Actions\nexport type AllowedActions =\n  | HandleSnapRequest\n  | KeyringControllerGetStateAction;\n\nexport type AllowedEvents =\n  | KeyringControllerLockEvent\n  | KeyringControllerUnlockEvent;\n\n// Messenger\nexport type AuthenticationControllerMessenger = RestrictedControllerMessenger<\n  typeof controllerName,\n  Actions | AllowedActions,\n  Events | AllowedEvents,\n  AllowedActions['type'],\n  AllowedEvents['type']\n>;\n\n/**\n * Controller that enables authentication for restricted endpoints.\n * Used for Global Profile Syncing and Notifications\n */\nexport default class AuthenticationController extends BaseController<\n  typeof controllerName,\n  AuthenticationControllerState,\n  AuthenticationControllerMessenger\n> {\n  #metametrics: MetaMetricsAuth;\n\n  #isUnlocked = false;\n\n  #keyringController = {\n    setupLockedStateSubscriptions: () => {\n      const { isUnlocked } = this.messagingSystem.call(\n        'KeyringController:getState',\n      );\n      this.#isUnlocked = isUnlocked;\n\n      this.messagingSystem.subscribe('KeyringController:unlock', () => {\n        this.#isUnlocked = true;\n      });\n\n      this.messagingSystem.subscribe('KeyringController:lock', () => {\n        this.#isUnlocked = false;\n      });\n    },\n  };\n\n  constructor({\n    messenger,\n    state,\n    metametrics,\n  }: {\n    messenger: AuthenticationControllerMessenger;\n    state?: AuthenticationControllerState;\n    /**\n     * Not using the Messaging System as we\n     * do not want to tie this strictly to extension\n     */\n    metametrics: MetaMetricsAuth;\n  }) {\n    super({\n      messenger,\n      metadata,\n      name: controllerName,\n      state: { ...defaultState, ...state },\n    });\n\n    if (!metametrics) {\n      throw new Error('`metametrics` field is required');\n    }\n\n    this.#metametrics = metametrics;\n\n    this.#keyringController.setupLockedStateSubscriptions();\n    this.#registerMessageHandlers();\n  }\n\n  /**\n   * Constructor helper for registering this controller's messaging system\n   * actions.\n   */\n  #registerMessageHandlers(): void {\n    this.messagingSystem.registerActionHandler(\n      'AuthenticationController:getBearerToken',\n      this.getBearerToken.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'AuthenticationController:getSessionProfile',\n      this.getSessionProfile.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'AuthenticationController:isSignedIn',\n      this.isSignedIn.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'AuthenticationController:performSignIn',\n      this.performSignIn.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'AuthenticationController:performSignOut',\n      this.performSignOut.bind(this),\n    );\n  }\n\n  public async performSignIn(): Promise<string> {\n    const { accessToken } = await this.#performAuthenticationFlow();\n    return accessToken;\n  }\n\n  public performSignOut(): void {\n    this.#assertLoggedIn();\n\n    this.update((state) => {\n      state.isSignedIn = false;\n      state.sessionData = undefined;\n    });\n  }\n\n  public async getBearerToken(): Promise<string> {\n    this.#assertLoggedIn();\n\n    if (this.#hasValidSession(this.state.sessionData)) {\n      return this.state.sessionData.accessToken;\n    }\n\n    const { accessToken } = await this.#performAuthenticationFlow();\n    return accessToken;\n  }\n\n  /**\n   * Will return a session profile.\n   * Throws if a user is not logged in.\n   *\n   * @returns profile for the session.\n   */\n  public async getSessionProfile(): Promise<SessionProfile> {\n    this.#assertLoggedIn();\n\n    if (this.#hasValidSession(this.state.sessionData)) {\n      return this.state.sessionData.profile;\n    }\n\n    const { profile } = await this.#performAuthenticationFlow();\n    return profile;\n  }\n\n  public isSignedIn(): boolean {\n    return this.state.isSignedIn;\n  }\n\n  #assertLoggedIn(): void {\n    if (!this.state.isSignedIn) {\n      throw new Error(\n        `${controllerName}: Unable to call method, user is not authenticated`,\n      );\n    }\n  }\n\n  async #performAuthenticationFlow(): Promise<{\n    profile: SessionProfile;\n    accessToken: string;\n  }> {\n    try {\n      // 1. Nonce\n      const publicKey = await this.#snapGetPublicKey();\n      const nonce = await getNonce(publicKey);\n      if (!nonce) {\n        throw new Error(`Unable to get nonce`);\n      }\n\n      // 2. Login\n      const rawMessage = createLoginRawMessage(nonce, publicKey);\n      const signature = await this.#snapSignMessage(rawMessage);\n      const loginResponse = await login(rawMessage, signature, {\n        metametricsId: await this.#metametrics.getMetaMetricsId(),\n        agent: this.#metametrics.agent,\n      });\n      if (!loginResponse?.token) {\n        throw new Error(`Unable to login`);\n      }\n\n      const profile: SessionProfile = {\n        identifierId: loginResponse.profile.identifier_id,\n        profileId: loginResponse.profile.profile_id,\n      };\n\n      // 3. Trade for Access Token\n      const accessToken = await getAccessToken(\n        loginResponse.token,\n        this.#metametrics.agent,\n      );\n      if (!accessToken) {\n        throw new Error(`Unable to get Access Token`);\n      }\n\n      // Update Internal State\n      this.update((state) => {\n        state.isSignedIn = true;\n        const expiresIn = new Date();\n        expiresIn.setTime(expiresIn.getTime() + THIRTY_MIN_MS);\n        state.sessionData = {\n          profile,\n          accessToken,\n          expiresIn: expiresIn.toString(),\n        };\n      });\n\n      return {\n        profile,\n        accessToken,\n      };\n    } catch (e) {\n      console.error('Failed to authenticate', e);\n      const errorMessage =\n        e instanceof Error ? e.message : JSON.stringify(e ?? '');\n      throw new Error(\n        `${controllerName}: Failed to authenticate - ${errorMessage}`,\n      );\n    }\n  }\n\n  #hasValidSession(\n    sessionData: SessionData | undefined,\n  ): sessionData is SessionData {\n    if (!sessionData) {\n      return false;\n    }\n\n    const prevDate = Date.parse(sessionData.expiresIn);\n    if (isNaN(prevDate)) {\n      return false;\n    }\n\n    const currentDate = new Date();\n    const diffMs = Math.abs(currentDate.getTime() - prevDate);\n\n    return THIRTY_MIN_MS > diffMs;\n  }\n\n  #_snapPublicKeyCache: string | undefined;\n\n  /**\n   * Returns the auth snap public key.\n   *\n   * @returns The snap public key.\n   */\n  async #snapGetPublicKey(): Promise<string> {\n    if (this.#_snapPublicKeyCache) {\n      return this.#_snapPublicKeyCache;\n    }\n\n    if (!this.#isUnlocked) {\n      throw new Error(\n        '#snapGetPublicKey - unable to call snap, wallet is locked',\n      );\n    }\n\n    const result = (await this.messagingSystem.call(\n      'SnapController:handleRequest',\n      createSnapPublicKeyRequest(),\n    )) as string;\n\n    this.#_snapPublicKeyCache = result;\n\n    return result;\n  }\n\n  #_snapSignMessageCache: Record<`metamask:${string}`, string> = {};\n\n  /**\n   * Signs a specific message using an underlying auth snap.\n   *\n   * @param message - A specific tagged message to sign.\n   * @returns A Signature created by the snap.\n   */\n  async #snapSignMessage(message: `metamask:${string}`): Promise<string> {\n    if (this.#_snapSignMessageCache[message]) {\n      return this.#_snapSignMessageCache[message];\n    }\n\n    if (!this.#isUnlocked) {\n      throw new Error(\n        '#snapSignMessage - unable to call snap, wallet is locked',\n      );\n    }\n\n    const result = (await this.messagingSystem.call(\n      'SnapController:handleRequest',\n      createSnapSignMessageRequest(message),\n    )) as string;\n\n    this.#_snapSignMessageCache[message] = result;\n\n    return result;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAMA,SAAS,sBAAsB;AAmB/B,IAAM,gBAAgB,MAAO,KAAK;AAElC,IAAM,iBAAiB;AA8BhB,IAAM,eAA8C;AAAA,EACzD,YAAY;AACd;AACA,IAAM,WAAyD;AAAA,EAC7D,YAAY;AAAA,IACV,SAAS;AAAA,IACT,WAAW;AAAA,EACb;AAAA,EACA,aAAa;AAAA,IACX,SAAS;AAAA,IACT,WAAW;AAAA,EACb;AACF;AArEA;AAmIA,IAAqB,2BAArB,cAAsD,eAIpD;AAAA,EAsBA,YAAY;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAQG;AACD,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA,MAAM;AAAA,MACN,OAAO,EAAE,GAAG,cAAc,GAAG,MAAM;AAAA,IACrC,CAAC;AAgBH;AAAA;AAAA;AAAA;AAAA;AAyEA;AAQA,uBAAM;AA+DN;AAyBA;AAAA;AAAA;AAAA;AAAA;AAAA,uBAAM;AA6BN;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,uBAAM;AA7PN;AAEA,oCAAc;AAEd,2CAAqB;AAAA,MACnB,+BAA+B,MAAM;AACnC,cAAM,EAAE,WAAW,IAAI,KAAK,gBAAgB;AAAA,UAC1C;AAAA,QACF;AACA,2BAAK,aAAc;AAEnB,aAAK,gBAAgB,UAAU,4BAA4B,MAAM;AAC/D,6BAAK,aAAc;AAAA,QACrB,CAAC;AAED,aAAK,gBAAgB,UAAU,0BAA0B,MAAM;AAC7D,6BAAK,aAAc;AAAA,QACrB,CAAC;AAAA,MACH;AAAA,IACF;AAsMA;AA4BA,+CAA+D,CAAC;AA5M9D,QAAI,CAAC,aAAa;AAChB,YAAM,IAAI,MAAM,iCAAiC;AAAA,IACnD;AAEA,uBAAK,cAAe;AAEpB,uBAAK,oBAAmB,8BAA8B;AACtD,0BAAK,sDAAL;AAAA,EACF;AAAA,EAiCA,MAAa,gBAAiC;AAC5C,UAAM,EAAE,YAAY,IAAI,MAAM,sBAAK,0DAAL;AAC9B,WAAO;AAAA,EACT;AAAA,EAEO,iBAAuB;AAC5B,0BAAK,oCAAL;AAEA,SAAK,OAAO,CAAC,UAAU;AACrB,YAAM,aAAa;AACnB,YAAM,cAAc;AAAA,IACtB,CAAC;AAAA,EACH;AAAA,EAEA,MAAa,iBAAkC;AAC7C,0BAAK,oCAAL;AAEA,QAAI,sBAAK,sCAAL,WAAsB,KAAK,MAAM,cAAc;AACjD,aAAO,KAAK,MAAM,YAAY;AAAA,IAChC;AAEA,UAAM,EAAE,YAAY,IAAI,MAAM,sBAAK,0DAAL;AAC9B,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAa,oBAA6C;AACxD,0BAAK,oCAAL;AAEA,QAAI,sBAAK,sCAAL,WAAsB,KAAK,MAAM,cAAc;AACjD,aAAO,KAAK,MAAM,YAAY;AAAA,IAChC;AAEA,UAAM,EAAE,QAAQ,IAAI,MAAM,sBAAK,0DAAL;AAC1B,WAAO;AAAA,EACT;AAAA,EAEO,aAAsB;AAC3B,WAAO,KAAK,MAAM;AAAA,EACpB;AAmJF;AAjRE;AAEA;AAEA;AAmDA;AAAA,6BAAwB,WAAS;AAC/B,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,eAAe,KAAK,IAAI;AAAA,EAC/B;AAEA,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,kBAAkB,KAAK,IAAI;AAAA,EAClC;AAEA,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,WAAW,KAAK,IAAI;AAAA,EAC3B;AAEA,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,cAAc,KAAK,IAAI;AAAA,EAC9B;AAEA,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,eAAe,KAAK,IAAI;AAAA,EAC/B;AACF;AAgDA;AAAA,oBAAe,WAAS;AACtB,MAAI,CAAC,KAAK,MAAM,YAAY;AAC1B,UAAM,IAAI;AAAA,MACR,GAAG,cAAc;AAAA,IACnB;AAAA,EACF;AACF;AAEM;AAAA,+BAA0B,iBAG7B;AACD,MAAI;AAEF,UAAM,YAAY,MAAM,sBAAK,wCAAL;AACxB,UAAM,QAAQ,MAAM,SAAS,SAAS;AACtC,QAAI,CAAC,OAAO;AACV,YAAM,IAAI,MAAM,qBAAqB;AAAA,IACvC;AAGA,UAAM,aAAa,sBAAsB,OAAO,SAAS;AACzD,UAAM,YAAY,MAAM,sBAAK,sCAAL,WAAsB;AAC9C,UAAM,gBAAgB,MAAM,MAAM,YAAY,WAAW;AAAA,MACvD,eAAe,MAAM,mBAAK,cAAa,iBAAiB;AAAA,MACxD,OAAO,mBAAK,cAAa;AAAA,IAC3B,CAAC;AACD,QAAI,CAAC,eAAe,OAAO;AACzB,YAAM,IAAI,MAAM,iBAAiB;AAAA,IACnC;AAEA,UAAM,UAA0B;AAAA,MAC9B,cAAc,cAAc,QAAQ;AAAA,MACpC,WAAW,cAAc,QAAQ;AAAA,IACnC;AAGA,UAAM,cAAc,MAAM;AAAA,MACxB,cAAc;AAAA,MACd,mBAAK,cAAa;AAAA,IACpB;AACA,QAAI,CAAC,aAAa;AAChB,YAAM,IAAI,MAAM,4BAA4B;AAAA,IAC9C;AAGA,SAAK,OAAO,CAAC,UAAU;AACrB,YAAM,aAAa;AACnB,YAAM,YAAY,oBAAI,KAAK;AAC3B,gBAAU,QAAQ,UAAU,QAAQ,IAAI,aAAa;AACrD,YAAM,cAAc;AAAA,QAClB;AAAA,QACA;AAAA,QACA,WAAW,UAAU,SAAS;AAAA,MAChC;AAAA,IACF,CAAC;AAED,WAAO;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAAA,EACF,SAAS,GAAG;AACV,YAAQ,MAAM,0BAA0B,CAAC;AACzC,UAAM,eACJ,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,KAAK,EAAE;AACzD,UAAM,IAAI;AAAA,MACR,GAAG,cAAc,8BAA8B,YAAY;AAAA,IAC7D;AAAA,EACF;AACF;AAEA;AAAA,qBAAgB,SACd,aAC4B;AAC5B,MAAI,CAAC,aAAa;AAChB,WAAO;AAAA,EACT;AAEA,QAAM,WAAW,KAAK,MAAM,YAAY,SAAS;AACjD,MAAI,MAAM,QAAQ,GAAG;AACnB,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,oBAAI,KAAK;AAC7B,QAAM,SAAS,KAAK,IAAI,YAAY,QAAQ,IAAI,QAAQ;AAExD,SAAO,gBAAgB;AACzB;AAEA;AAOM;AAAA,sBAAiB,iBAAoB;AACzC,MAAI,mBAAK,uBAAsB;AAC7B,WAAO,mBAAK;AAAA,EACd;AAEA,MAAI,CAAC,mBAAK,cAAa;AACrB,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,QAAM,SAAU,MAAM,KAAK,gBAAgB;AAAA,IACzC;AAAA,IACA,2BAA2B;AAAA,EAC7B;AAEA,qBAAK,sBAAuB;AAE5B,SAAO;AACT;AAEA;AAQM;AAAA,qBAAgB,eAAC,SAAgD;AACrE,MAAI,mBAAK,wBAAuB,OAAO,GAAG;AACxC,WAAO,mBAAK,wBAAuB,OAAO;AAAA,EAC5C;AAEA,MAAI,CAAC,mBAAK,cAAa;AACrB,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,QAAM,SAAU,MAAM,KAAK,gBAAgB;AAAA,IACzC;AAAA,IACA,6BAA6B,OAAO;AAAA,EACtC;AAEA,qBAAK,wBAAuB,OAAO,IAAI;AAEvC,SAAO;AACT;","names":[]}

package/dist/{chunk-SMKTWM6I.js → chunk-DF24ZX4H.js}

@@ -53,8 +53,7 @@ function getOidcClientId(env, platform) {
       ["portfolio" /* PORTFOLIO */]: "35e1cd62-49c5-4be8-8b6e-a5212f2d2cfb",
       ["mobile" /* MOBILE */]: "75fa62a3-9ca0-4b91-9fe5-76bec86b0257",
       ["extension" /* EXTENSION */]: "1132f10a-b4e5-4390-a5f2-d9c6022db564",
-      ["infura" /* INFURA */]: ""
-      // unset
+      ["infura" /* INFURA */]: "fdde9417-e193-4d23-9943-a8346b18d097"
     }
   };
   if (!clientIds[env]) {
@@ -74,4 +73,4 @@ function getOidcClientId(env, platform) {
 
 
 exports.Env = Env; exports.Platform = Platform; exports.getEnvUrls = getEnvUrls; exports.getOidcClientId = getOidcClientId;
-//# sourceMappingURL=chunk-SMKTWM6I.js.map
+//# sourceMappingURL=chunk-DF24ZX4H.js.map

package/dist/chunk-DF24ZX4H.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdk/env.ts"],"names":["Env","Platform"],"mappings":";AAAO,IAAK,MAAL,kBAAKA,SAAL;AACL,EAAAA,KAAA,SAAM;AACN,EAAAA,KAAA,SAAM;AACN,EAAAA,KAAA,SAAM;AAHI,SAAAA;AAAA,GAAA;AAML,IAAK,WAAL,kBAAKC,cAAL;AACL,EAAAA,UAAA,YAAS;AACT,EAAAA,UAAA,eAAY;AACZ,EAAAA,UAAA,eAAY;AACZ,EAAAA,UAAA,YAAS;AAJC,SAAAA;AAAA,GAAA;AAaZ,IAAM,WAAsC;AAAA,EAC1C,KAAK;AAAA,IACH,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,mBAAmB;AAAA,EACrB;AAAA,EACA,KAAK;AAAA,IACH,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,mBAAmB;AAAA,EACrB;AAAA,EACA,KAAK;AAAA,IACH,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,mBAAmB;AAAA,EACrB;AACF;AASO,SAAS,WAAW,KAAwB;AACjD,MAAI,CAAC,SAAS,GAAG,GAAG;AAClB,UAAM,IAAI,MAAM,mCAAmC;AAAA,EACrD;AACA,SAAO,SAAS,GAAG;AACrB;AASO,SAAS,gBAAgB,KAAU,UAA4B;AACpE,QAAM,YAAY;AAAA,IAChB,CAAC,eAAO,GAAG;AAAA,MACT,CAAC,2BAAkB,GAAG;AAAA,MACtB,CAAC,qBAAe,GAAG;AAAA,MACnB,CAAC,2BAAkB,GAAG;AAAA,MACtB,CAAC,qBAAe,GAAG;AAAA,IACrB;AAAA,IACA,CAAC,eAAO,GAAG;AAAA,MACT,CAAC,2BAAkB,GAAG;AAAA,MACtB,CAAC,qBAAe,GAAG;AAAA,MACnB,CAAC,2BAAkB,GAAG;AAAA,MACtB,CAAC,qBAAe,GAAG;AAAA,IACrB;AAAA,IACA,CAAC,eAAO,GAAG;AAAA,MACT,CAAC,2BAAkB,GAAG;AAAA,MACtB,CAAC,qBAAe,GAAG;AAAA,MACnB,CAAC,2BAAkB,GAAG;AAAA,MACtB,CAAC,qBAAe,GAAG;AAAA,IACrB;AAAA,EACF;AAEA,MAAI,CAAC,UAAU,GAAG,GAAG;AACnB,UAAM,IAAI,MAAM,eAAe,GAAG,mCAAmC;AAAA,EACvE;AAEA,MAAI,CAAC,UAAU,GAAG,EAAE,QAAQ,GAAG;AAC7B,UAAM,IAAI;AAAA,MACR,eAAe,GAAG,iBAAiB,QAAQ;AAAA,IAC7C;AAAA,EACF;AAEA,SAAO,UAAU,GAAG,EAAE,QAAQ;AAChC","sourcesContent":["export enum Env {\n  DEV = 'dev',\n  UAT = 'uat',\n  PRD = 'prd',\n}\n\nexport enum Platform {\n  MOBILE = 'mobile',\n  EXTENSION = 'extension',\n  PORTFOLIO = 'portfolio',\n  INFURA = 'infura',\n}\n\ntype EnvUrlsEntry = {\n  authApiUrl: string;\n  oidcApiUrl: string;\n  userStorageApiUrl: string;\n};\n\nconst ENV_URLS: Record<Env, EnvUrlsEntry> = {\n  dev: {\n    authApiUrl: 'https://authentication.dev-api.cx.metamask.io',\n    oidcApiUrl: 'https://oidc.dev-api.cx.metamask.io',\n    userStorageApiUrl: 'https://user-storage.dev-api.cx.metamask.io',\n  },\n  uat: {\n    authApiUrl: 'https://authentication.uat-api.cx.metamask.io',\n    oidcApiUrl: 'https://oidc.uat-api.cx.metamask.io',\n    userStorageApiUrl: 'https://user-storage.uat-api.cx.metamask.io',\n  },\n  prd: {\n    authApiUrl: 'https://authentication.api.cx.metamask.io',\n    oidcApiUrl: 'https://oidc.api.cx.metamask.io',\n    userStorageApiUrl: 'https://user-storage.api.cx.metamask.io',\n  },\n};\n\n/**\n * Validates and returns correct environment endpoints\n *\n * @param env - environment field\n * @returns the correct environment url\n * @throws on invalid environment passed\n */\nexport function getEnvUrls(env: Env): EnvUrlsEntry {\n  if (!ENV_URLS[env]) {\n    throw new Error('invalid environment configuration');\n  }\n  return ENV_URLS[env];\n}\n\n/**\n * Returns the valid OIDC Client ID (used during authorization)\n *\n * @param env - environment field\n * @param platform - platform field\n * @returns the OIDC client id for the environment\n */\nexport function getOidcClientId(env: Env, platform: Platform): string {\n  const clientIds = {\n    [Env.DEV]: {\n      [Platform.PORTFOLIO]: 'c7ca94a0-5d52-4635-9502-1a50a9c410cc',\n      [Platform.MOBILE]: 'e83c7cc9-267d-4fb4-8fec-f0e3bbe5ae8e',\n      [Platform.EXTENSION]: 'f1a963d7-50dc-4cb5-8d81-f1f3654f0df3',\n      [Platform.INFURA]: 'bd887006-0d55-481a-a395-5ff9a0dc52c9',\n    },\n    [Env.UAT]: {\n      [Platform.PORTFOLIO]: '8f2dd4ac-db07-4819-9ba5-1ee0ec1b56d1',\n      [Platform.MOBILE]: 'c3cfdcd2-51d6-4fae-ad2c-ff238c8fef53',\n      [Platform.EXTENSION]: 'a9de167c-c9a6-43d8-af39-d301fd44c485',\n      [Platform.INFURA]: '01929890-7002-4c97-9913-8f6c09a6d674',\n    },\n    [Env.PRD]: {\n      [Platform.PORTFOLIO]: '35e1cd62-49c5-4be8-8b6e-a5212f2d2cfb',\n      [Platform.MOBILE]: '75fa62a3-9ca0-4b91-9fe5-76bec86b0257',\n      [Platform.EXTENSION]: '1132f10a-b4e5-4390-a5f2-d9c6022db564',\n      [Platform.INFURA]: 'fdde9417-e193-4d23-9943-a8346b18d097',\n    },\n  };\n\n  if (!clientIds[env]) {\n    throw new Error(`invalid env ${env}: cannot determine oidc client id`);\n  }\n\n  if (!clientIds[env][platform]) {\n    throw new Error(\n      `invalid env ${env} and platform ${platform} combination: cannot determine oidc client id`,\n    );\n  }\n\n  return clientIds[env][platform];\n}\n"]}

package/dist/{chunk-NPH5AHLH.mjs → chunk-E7Z5TCQT.mjs}

@@ -1,13 +1,15 @@
 import {
   createEntryPath
-} from "./chunk-ILIZJQ6X.mjs";
+} from "./chunk-NSSHFDIS.mjs";
 import {
-  createSHA256Hash,
   encryption_default
-} from "./chunk-B5DBQDB3.mjs";
+} from "./chunk-QU4EXKJO.mjs";
+import {
+  createSHA256Hash
+} from "./chunk-K5UKU454.mjs";
 import {
   getEnvUrls
-} from "./chunk-FQ5SDMRE.mjs";
+} from "./chunk-KTCSRECK.mjs";
 import {
   NotFoundError,
   UserStorageError
@@ -19,11 +21,12 @@ import {
 
 // src/sdk/user-storage.ts
 var STORAGE_URL = (env, encryptedPath) => `${getEnvUrls(env).userStorageApiUrl}/api/v1/userstorage/${encryptedPath}`;
-var _upsertUserStorage, upsertUserStorage_fn, _getUserStorage, getUserStorage_fn, _createEntryKey, createEntryKey_fn, _getAuthorizationHeader, getAuthorizationHeader_fn;
+var _upsertUserStorage, upsertUserStorage_fn, _getUserStorage, getUserStorage_fn, _getUserStorageAllFeatureEntries, getUserStorageAllFeatureEntries_fn, _createEntryKey, createEntryKey_fn, _getAuthorizationHeader, getAuthorizationHeader_fn;
 var UserStorage = class {
   constructor(config, options) {
     __privateAdd(this, _upsertUserStorage);
     __privateAdd(this, _getUserStorage);
+    __privateAdd(this, _getUserStorageAllFeatureEntries);
     __privateAdd(this, _createEntryKey);
     // TODO: Either fix this lint violation or explain why it's necessary to ignore.
     // eslint-disable-next-line @typescript-eslint/naming-convention
@@ -38,6 +41,9 @@ var UserStorage = class {
   async getItem(path) {
     return __privateMethod(this, _getUserStorage, getUserStorage_fn).call(this, path);
   }
+  async getAllFeatureItems(path) {
+    return __privateMethod(this, _getUserStorageAllFeatureEntries, getUserStorageAllFeatureEntries_fn).call(this, path);
+  }
   async getStorageKey() {
     const storageKey = await this.options.storage?.getStorageKey();
     if (storageKey) {
@@ -120,6 +126,48 @@ getUserStorage_fn = async function(path) {
     );
   }
 };
+_getUserStorageAllFeatureEntries = new WeakSet();
+getUserStorageAllFeatureEntries_fn = async function(path) {
+  try {
+    const headers = await __privateMethod(this, _getAuthorizationHeader, getAuthorizationHeader_fn).call(this);
+    const storageKey = await this.getStorageKey();
+    const url = new URL(STORAGE_URL(this.env, path));
+    const response = await fetch(url.toString(), {
+      headers: {
+        "Content-Type": "application/json",
+        ...headers
+      }
+    });
+    if (response.status === 404) {
+      throw new NotFoundError(`feature not found for path '${path}'.`);
+    }
+    if (!response.ok) {
+      const responseBody = await response.json();
+      throw new Error(
+        `HTTP error message: ${responseBody.message}, error: ${responseBody.error}`
+      );
+    }
+    const userStorage = await response.json();
+    if (!Array.isArray(userStorage)) {
+      return null;
+    }
+    const decryptedData = userStorage.flatMap((entry) => {
+      if (!entry.Data) {
+        return [];
+      }
+      return encryption_default.decryptString(entry.Data, storageKey);
+    });
+    return decryptedData;
+  } catch (e) {
+    if (e instanceof NotFoundError) {
+      throw e;
+    }
+    const errorMessage = e instanceof Error ? e.message : JSON.stringify(e ?? "");
+    throw new UserStorageError(
+      `failed to get user storage for path '${path}'. ${errorMessage}`
+    );
+  }
+};
 _createEntryKey = new WeakSet();
 createEntryKey_fn = function(key, storageKey) {
   const hashedKey = createSHA256Hash(key + storageKey);
@@ -135,4 +183,4 @@ export {
   STORAGE_URL,
   UserStorage
 };
-//# sourceMappingURL=chunk-NPH5AHLH.mjs.map
+//# sourceMappingURL=chunk-E7Z5TCQT.mjs.map

package/dist/chunk-E7Z5TCQT.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdk/user-storage.ts"],"sourcesContent":["import type {\n  UserStoragePathWithFeatureAndKey,\n  UserStoragePathWithFeatureOnly,\n} from '../controllers/user-storage/schema';\nimport { createEntryPath } from '../controllers/user-storage/schema';\nimport type { GetUserStorageAllFeatureEntriesResponse } from '../controllers/user-storage/services';\nimport type { IBaseAuth } from './authentication-jwt-bearer/types';\nimport encryption, { createSHA256Hash } from './encryption';\nimport type { Env } from './env';\nimport { getEnvUrls } from './env';\nimport { NotFoundError, UserStorageError } from './errors';\n\nexport const STORAGE_URL = (env: Env, encryptedPath: string) =>\n  `${getEnvUrls(env).userStorageApiUrl}/api/v1/userstorage/${encryptedPath}`;\n\nexport type UserStorageConfig = {\n  env: Env;\n  auth: Pick<IBaseAuth, 'getAccessToken' | 'getUserProfile' | 'signMessage'>;\n};\n\nexport type StorageOptions = {\n  getStorageKey: () => Promise<string | null>;\n  setStorageKey: (val: string) => Promise<void>;\n};\n\nexport type UserStorageOptions = {\n  storage?: StorageOptions;\n};\n\ntype ErrorMessage = {\n  message: string;\n  error: string;\n};\n\nexport class UserStorage {\n  protected config: UserStorageConfig;\n\n  protected options: UserStorageOptions;\n\n  protected env: Env;\n\n  constructor(config: UserStorageConfig, options: UserStorageOptions) {\n    this.env = config.env;\n    this.config = config;\n    this.options = options;\n  }\n\n  async setItem(\n    path: UserStoragePathWithFeatureAndKey,\n    value: string,\n  ): Promise<void> {\n    await this.#upsertUserStorage(path, value);\n  }\n\n  async getItem(path: UserStoragePathWithFeatureAndKey): Promise<string> {\n    return this.#getUserStorage(path);\n  }\n\n  async getAllFeatureItems(\n    path: UserStoragePathWithFeatureOnly,\n  ): Promise<string[] | null> {\n    return this.#getUserStorageAllFeatureEntries(path);\n  }\n\n  async getStorageKey(): Promise<string> {\n    const storageKey = await this.options.storage?.getStorageKey();\n    if (storageKey) {\n      return storageKey;\n    }\n\n    const userProfile = await this.config.auth.getUserProfile();\n    const storageKeySignature = await this.config.auth.signMessage(\n      `metamask:${userProfile.profileId}`,\n    );\n    const hashedStorageKeySignature = createSHA256Hash(storageKeySignature);\n    await this.options.storage?.setStorageKey(hashedStorageKeySignature);\n    return hashedStorageKeySignature;\n  }\n\n  async #upsertUserStorage(\n    path: UserStoragePathWithFeatureAndKey,\n    data: string,\n  ): Promise<void> {\n    try {\n      const headers = await this.#getAuthorizationHeader();\n      const storageKey = await this.getStorageKey();\n      const encryptedData = encryption.encryptString(data, storageKey);\n      const encryptedPath = createEntryPath(path, storageKey);\n\n      const url = new URL(STORAGE_URL(this.env, encryptedPath));\n\n      const response = await fetch(url.toString(), {\n        method: 'PUT',\n        headers: {\n          'Content-Type': 'application/json',\n          ...headers,\n        },\n        body: JSON.stringify({ data: encryptedData }),\n      });\n\n      if (!response.ok) {\n        const responseBody: ErrorMessage = await response.json().catch(() => ({\n          message: 'unknown',\n          error: 'unknown',\n        }));\n        throw new Error(\n          `HTTP error message: ${responseBody.message}, error: ${responseBody.error}`,\n        );\n      }\n    } catch (e) {\n      /* istanbul ignore next */\n      const errorMessage =\n        e instanceof Error ? e.message : JSON.stringify(e ?? '');\n      throw new UserStorageError(\n        `failed to upsert user storage for path '${path}'. ${errorMessage}`,\n      );\n    }\n  }\n\n  async #getUserStorage(\n    path: UserStoragePathWithFeatureAndKey,\n  ): Promise<string> {\n    try {\n      const headers = await this.#getAuthorizationHeader();\n      const storageKey = await this.getStorageKey();\n      const encryptedPath = createEntryPath(path, storageKey);\n\n      const url = new URL(STORAGE_URL(this.env, encryptedPath));\n\n      const response = await fetch(url.toString(), {\n        headers: {\n          'Content-Type': 'application/json',\n          ...headers,\n        },\n      });\n\n      if (response.status === 404) {\n        throw new NotFoundError(\n          `feature/key set not found for path '${path}'.`,\n        );\n      }\n\n      if (!response.ok) {\n        const responseBody = (await response.json()) as ErrorMessage;\n        throw new Error(\n          `HTTP error message: ${responseBody.message}, error: ${responseBody.error}`,\n        );\n      }\n\n      const { Data: encryptedData } = await response.json();\n      return encryption.decryptString(encryptedData, storageKey);\n    } catch (e) {\n      if (e instanceof NotFoundError) {\n        throw e;\n      }\n\n      /* istanbul ignore next */\n      const errorMessage =\n        e instanceof Error ? e.message : JSON.stringify(e ?? '');\n\n      throw new UserStorageError(\n        `failed to get user storage for path '${path}'. ${errorMessage}`,\n      );\n    }\n  }\n\n  async #getUserStorageAllFeatureEntries(\n    path: UserStoragePathWithFeatureOnly,\n  ): Promise<string[] | null> {\n    try {\n      const headers = await this.#getAuthorizationHeader();\n      const storageKey = await this.getStorageKey();\n\n      const url = new URL(STORAGE_URL(this.env, path));\n\n      const response = await fetch(url.toString(), {\n        headers: {\n          'Content-Type': 'application/json',\n          ...headers,\n        },\n      });\n\n      if (response.status === 404) {\n        throw new NotFoundError(`feature not found for path '${path}'.`);\n      }\n\n      if (!response.ok) {\n        const responseBody = (await response.json()) as ErrorMessage;\n        throw new Error(\n          `HTTP error message: ${responseBody.message}, error: ${responseBody.error}`,\n        );\n      }\n\n      const userStorage: GetUserStorageAllFeatureEntriesResponse | null =\n        await response.json();\n\n      if (!Array.isArray(userStorage)) {\n        return null;\n      }\n\n      const decryptedData = userStorage.flatMap((entry) => {\n        if (!entry.Data) {\n          return [];\n        }\n\n        return encryption.decryptString(entry.Data, storageKey);\n      });\n\n      return decryptedData;\n    } catch (e) {\n      if (e instanceof NotFoundError) {\n        throw e;\n      }\n\n      /* istanbul ignore next */\n      const errorMessage =\n        e instanceof Error ? e.message : JSON.stringify(e ?? '');\n\n      throw new UserStorageError(\n        `failed to get user storage for path '${path}'. ${errorMessage}`,\n      );\n    }\n  }\n\n  #createEntryKey(key: string, storageKey: string): string {\n    const hashedKey = createSHA256Hash(key + storageKey);\n    return hashedKey;\n  }\n\n  // TODO: Either fix this lint violation or explain why it's necessary to ignore.\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  async #getAuthorizationHeader(): Promise<{ Authorization: string }> {\n    const accessToken = await this.config.auth.getAccessToken();\n    return { Authorization: `Bearer ${accessToken}` };\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAYO,IAAM,cAAc,CAAC,KAAU,kBACpC,GAAG,WAAW,GAAG,EAAE,iBAAiB,uBAAuB,aAAa;AAb1E;AAkCO,IAAM,cAAN,MAAkB;AAAA,EAOvB,YAAY,QAA2B,SAA6B;AAsCpE,uBAAM;AAwCN,uBAAM;AA+CN,uBAAM;AA0DN;AAOA;AAAA;AAAA,uBAAM;AA7LJ,SAAK,MAAM,OAAO;AAClB,SAAK,SAAS;AACd,SAAK,UAAU;AAAA,EACjB;AAAA,EAEA,MAAM,QACJ,MACA,OACe;AACf,UAAM,sBAAK,0CAAL,WAAwB,MAAM;AAAA,EACtC;AAAA,EAEA,MAAM,QAAQ,MAAyD;AACrE,WAAO,sBAAK,oCAAL,WAAqB;AAAA,EAC9B;AAAA,EAEA,MAAM,mBACJ,MAC0B;AAC1B,WAAO,sBAAK,sEAAL,WAAsC;AAAA,EAC/C;AAAA,EAEA,MAAM,gBAAiC;AACrC,UAAM,aAAa,MAAM,KAAK,QAAQ,SAAS,cAAc;AAC7D,QAAI,YAAY;AACd,aAAO;AAAA,IACT;AAEA,UAAM,cAAc,MAAM,KAAK,OAAO,KAAK,eAAe;AAC1D,UAAM,sBAAsB,MAAM,KAAK,OAAO,KAAK;AAAA,MACjD,YAAY,YAAY,SAAS;AAAA,IACnC;AACA,UAAM,4BAA4B,iBAAiB,mBAAmB;AACtE,UAAM,KAAK,QAAQ,SAAS,cAAc,yBAAyB;AACnE,WAAO;AAAA,EACT;AA8JF;AA5JQ;AAAA,uBAAkB,eACtB,MACA,MACe;AACf,MAAI;AACF,UAAM,UAAU,MAAM,sBAAK,oDAAL;AACtB,UAAM,aAAa,MAAM,KAAK,cAAc;AAC5C,UAAM,gBAAgB,mBAAW,cAAc,MAAM,UAAU;AAC/D,UAAM,gBAAgB,gBAAgB,MAAM,UAAU;AAEtD,UAAM,MAAM,IAAI,IAAI,YAAY,KAAK,KAAK,aAAa,CAAC;AAExD,UAAM,WAAW,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,MAC3C,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,GAAG;AAAA,MACL;AAAA,MACA,MAAM,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAAA,IAC9C,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,eAA6B,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO;AAAA,QACpE,SAAS;AAAA,QACT,OAAO;AAAA,MACT,EAAE;AACF,YAAM,IAAI;AAAA,QACR,uBAAuB,aAAa,OAAO,YAAY,aAAa,KAAK;AAAA,MAC3E;AAAA,IACF;AAAA,EACF,SAAS,GAAG;AAEV,UAAM,eACJ,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,KAAK,EAAE;AACzD,UAAM,IAAI;AAAA,MACR,2CAA2C,IAAI,MAAM,YAAY;AAAA,IACnE;AAAA,EACF;AACF;AAEM;AAAA,oBAAe,eACnB,MACiB;AACjB,MAAI;AACF,UAAM,UAAU,MAAM,sBAAK,oDAAL;AACtB,UAAM,aAAa,MAAM,KAAK,cAAc;AAC5C,UAAM,gBAAgB,gBAAgB,MAAM,UAAU;AAEtD,UAAM,MAAM,IAAI,IAAI,YAAY,KAAK,KAAK,aAAa,CAAC;AAExD,UAAM,WAAW,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,MAC3C,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,GAAG;AAAA,MACL;AAAA,IACF,CAAC;AAED,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,IAAI;AAAA,QACR,uCAAuC,IAAI;AAAA,MAC7C;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,eAAgB,MAAM,SAAS,KAAK;AAC1C,YAAM,IAAI;AAAA,QACR,uBAAuB,aAAa,OAAO,YAAY,aAAa,KAAK;AAAA,MAC3E;AAAA,IACF;AAEA,UAAM,EAAE,MAAM,cAAc,IAAI,MAAM,SAAS,KAAK;AACpD,WAAO,mBAAW,cAAc,eAAe,UAAU;AAAA,EAC3D,SAAS,GAAG;AACV,QAAI,aAAa,eAAe;AAC9B,YAAM;AAAA,IACR;AAGA,UAAM,eACJ,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,KAAK,EAAE;AAEzD,UAAM,IAAI;AAAA,MACR,wCAAwC,IAAI,MAAM,YAAY;AAAA,IAChE;AAAA,EACF;AACF;AAEM;AAAA,qCAAgC,eACpC,MAC0B;AAC1B,MAAI;AACF,UAAM,UAAU,MAAM,sBAAK,oDAAL;AACtB,UAAM,aAAa,MAAM,KAAK,cAAc;AAE5C,UAAM,MAAM,IAAI,IAAI,YAAY,KAAK,KAAK,IAAI,CAAC;AAE/C,UAAM,WAAW,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,MAC3C,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,GAAG;AAAA,MACL;AAAA,IACF,CAAC;AAED,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,IAAI,cAAc,+BAA+B,IAAI,IAAI;AAAA,IACjE;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,eAAgB,MAAM,SAAS,KAAK;AAC1C,YAAM,IAAI;AAAA,QACR,uBAAuB,aAAa,OAAO,YAAY,aAAa,KAAK;AAAA,MAC3E;AAAA,IACF;AAEA,UAAM,cACJ,MAAM,SAAS,KAAK;AAEtB,QAAI,CAAC,MAAM,QAAQ,WAAW,GAAG;AAC/B,aAAO;AAAA,IACT;AAEA,UAAM,gBAAgB,YAAY,QAAQ,CAAC,UAAU;AACnD,UAAI,CAAC,MAAM,MAAM;AACf,eAAO,CAAC;AAAA,MACV;AAEA,aAAO,mBAAW,cAAc,MAAM,MAAM,UAAU;AAAA,IACxD,CAAC;AAED,WAAO;AAAA,EACT,SAAS,GAAG;AACV,QAAI,aAAa,eAAe;AAC9B,YAAM;AAAA,IACR;AAGA,UAAM,eACJ,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,KAAK,EAAE;AAEzD,UAAM,IAAI;AAAA,MACR,wCAAwC,IAAI,MAAM,YAAY;AAAA,IAChE;AAAA,EACF;AACF;AAEA;AAAA,oBAAe,SAAC,KAAa,YAA4B;AACvD,QAAM,YAAY,iBAAiB,MAAM,UAAU;AACnD,SAAO;AACT;AAIM;AAAA,4BAAuB,iBAAuC;AAClE,QAAM,cAAc,MAAM,KAAK,OAAO,KAAK,eAAe;AAC1D,SAAO,EAAE,eAAe,UAAU,WAAW,GAAG;AAClD;","names":[]}

package/dist/chunk-EHZFPUJH.mjs

@@ -0,0 +1,53 @@
+// src/controllers/user-storage/accounts/constants.ts
+var USER_STORAGE_VERSION = "1";
+var USER_STORAGE_VERSION_KEY = "v";
+var LOCALIZED_DEFAULT_ACCOUNT_NAMES = [
+  "Account",
+  "\u1218\u1208\u12EB",
+  "\u0627\u0644\u062D\u0633\u0627\u0628",
+  "\u041F\u0440\u043E\u0444\u0438\u043B",
+  "\u0985\u09CD\u09AF\u09BE\u0995\u09BE\u0989\u09A8\u09CD\u099F",
+  "Compte",
+  "\xDA\u010Det",
+  "Konto",
+  "\u039B\u03BF\u03B3\u03B1\u03C1\u03B9\u03B1\u03C3\u03BC\u03CC\u03C2",
+  "Cuenta",
+  "\u062D\u0633\u0627\u0628",
+  "Tili",
+  "\u0A8F\u0A95\u0ABE\u0A89\u0AA8\u0ACD\u0A9F",
+  "\u05D7\u05E9\u05D1\u05D5\u05DF",
+  "\u0905\u0915\u093E\u0909\u0902\u091F",
+  "\u0916\u093E\u0924\u093E",
+  "Ra\u010Dun",
+  "Kont",
+  "Fi\xF3k",
+  "Akun",
+  "\u30A2\u30AB\u30A6\u30F3\u30C8",
+  "\u0C96\u0CBE\u0CA4\u0CC6",
+  "\uACC4\uC815",
+  "Paskyra",
+  "Konts",
+  "\u0D05\u0D15\u0D4D\u0D15\u0D57\u0D23\u0D4D\u0D1F\u0D4D",
+  "\u0916\u093E\u0924\u0947",
+  "Akaun",
+  "Conta",
+  "Cont",
+  "\u0421\u0447\u0435\u0442",
+  "\u043D\u0430\u043B\u043E\u0433",
+  "Akaunti",
+  "\u0B95\u0BA3\u0B95\u0BCD\u0B95\u0BC1",
+  "\u0C16\u0C3E\u0C24\u0C3E",
+  "\u0E1A\u0E31\u0E0D\u0E0A\u0E35",
+  "Hesap",
+  "\u041E\u0431\u043B\u0456\u043A\u043E\u0432\u0438\u0439 \u0437\u0430\u043F\u0438\u0441",
+  "T\xE0i kho\u1EA3n",
+  "\u8D26\u6237",
+  "\u5E33\u6236"
+];
+
+export {
+  USER_STORAGE_VERSION,
+  USER_STORAGE_VERSION_KEY,
+  LOCALIZED_DEFAULT_ACCOUNT_NAMES
+};
+//# sourceMappingURL=chunk-EHZFPUJH.mjs.map

package/dist/chunk-EHZFPUJH.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controllers/user-storage/accounts/constants.ts"],"sourcesContent":["export const USER_STORAGE_VERSION = '1';\n\n// Force cast. We don't really care about the type here since we treat it as a unique symbol\nexport const USER_STORAGE_VERSION_KEY: unique symbol = 'v' as never;\n\n// We need this in order to know if an account is a default account or not when we do account syncing\nexport const LOCALIZED_DEFAULT_ACCOUNT_NAMES = [\n  'Account',\n  'መለያ',\n  'الحساب',\n  'Профил',\n  'অ্যাকাউন্ট',\n  'Compte',\n  'Účet',\n  'Konto',\n  'Λογαριασμός',\n  'Cuenta',\n  'حساب',\n  'Tili',\n  'એકાઉન્ટ',\n  'חשבון',\n  'अकाउंट',\n  'खाता',\n  'Račun',\n  'Kont',\n  'Fiók',\n  'Akun',\n  'アカウント',\n  'ಖಾತೆ',\n  '계정',\n  'Paskyra',\n  'Konts',\n  'അക്കൗണ്ട്',\n  'खाते',\n  'Akaun',\n  'Conta',\n  'Cont',\n  'Счет',\n  'налог',\n  'Akaunti',\n  'கணக்கு',\n  'ఖాతా',\n  'บัญชี',\n  'Hesap',\n  'Обліковий запис',\n  'Tài khoản',\n  '账户',\n  '帳戶',\n] as const;\n"],"mappings":";AAAO,IAAM,uBAAuB;AAG7B,IAAM,2BAA0C;AAGhD,IAAM,kCAAkC;AAAA,EAC7C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;","names":[]}

package/dist/{chunk-SLHAVOTE.js → chunk-EYZFHZR2.js}

@@ -3,8 +3,10 @@
 var _chunkT3FNDVE3js = require('./chunk-T3FNDVE3.js');
 
 // src/controllers/user-storage/schema.ts
+var ALLOW_ARBITRARY_KEYS = "ALLOW_ARBITRARY_KEYS";
 var USER_STORAGE_SCHEMA = {
-  notifications: ["notificationSettings"]
+  notifications: ["notificationSettings"],
+  accounts: [ALLOW_ARBITRARY_KEYS]
 };
 var getFeatureAndKeyFromPath = (path) => {
   const pathRegex = /^\w+\.\w+$/u;
@@ -18,7 +20,7 @@ var getFeatureAndKeyFromPath = (path) => {
     throw new Error(`user-storage - invalid feature provided: ${feature}`);
   }
   const validFeature = USER_STORAGE_SCHEMA[feature];
-  if (!validFeature.includes(key)) {
+  if (!validFeature.includes(key) && !validFeature.includes(ALLOW_ARBITRARY_KEYS)) {
     const validKeys = USER_STORAGE_SCHEMA[feature].join(", ");
     throw new Error(
       `user-storage - invalid key provided for this feature: ${key}. Valid keys: ${validKeys}`
@@ -26,6 +28,10 @@ var getFeatureAndKeyFromPath = (path) => {
   }
   return { feature, key };
 };
+var isPathWithFeatureAndKey = (path) => {
+  const pathRegex = /^\w+\.\w+$/u;
+  return pathRegex.test(path);
+};
 function createEntryPath(path, storageKey) {
   const { feature, key } = getFeatureAndKeyFromPath(path);
   const hashedKey = _chunkT3FNDVE3js.createSHA256Hash.call(void 0, key + storageKey);
@@ -36,5 +42,6 @@ function createEntryPath(path, storageKey) {
 
 
 
-exports.USER_STORAGE_SCHEMA = USER_STORAGE_SCHEMA; exports.getFeatureAndKeyFromPath = getFeatureAndKeyFromPath; exports.createEntryPath = createEntryPath;
-//# sourceMappingURL=chunk-SLHAVOTE.js.map
+
+exports.USER_STORAGE_SCHEMA = USER_STORAGE_SCHEMA; exports.getFeatureAndKeyFromPath = getFeatureAndKeyFromPath; exports.isPathWithFeatureAndKey = isPathWithFeatureAndKey; exports.createEntryPath = createEntryPath;
+//# sourceMappingURL=chunk-EYZFHZR2.js.map

package/dist/chunk-EYZFHZR2.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controllers/user-storage/schema.ts"],"names":[],"mappings":";;;;;AASA,IAAM,uBAAuB;AAEtB,IAAM,sBAAsB;AAAA,EACjC,eAAe,CAAC,sBAAsB;AAAA,EACtC,UAAU,CAAC,oBAAoB;AACjC;AAoBO,IAAM,2BAA2B,CACtC,SAC6B;AAC7B,QAAM,YAAY;AAElB,MAAI,CAAC,UAAU,KAAK,IAAI,GAAG;AACzB,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,QAAM,CAAC,SAAS,GAAG,IAAI,KAAK,MAAM,GAAG;AAKrC,MAAI,EAAE,WAAW,sBAAsB;AACrC,UAAM,IAAI,MAAM,4CAA4C,OAAO,EAAE;AAAA,EACvE;AAEA,QAAM,eAAe,oBAAoB,OAAO;AAEhD,MACE,CAAC,aAAa,SAAS,GAAG,KAC1B,CAAC,aAAa,SAAS,oBAAoB,GAC3C;AACA,UAAM,YAAY,oBAAoB,OAAO,EAAE,KAAK,IAAI;AAExD,UAAM,IAAI;AAAA,MACR,yDAAyD,GAAG,iBAAiB,SAAS;AAAA,IACxF;AAAA,EACF;AAEA,SAAO,EAAE,SAAS,IAAI;AACxB;AAEO,IAAM,0BAA0B,CACrC,SAC6C;AAC7C,QAAM,YAAY;AAElB,SAAO,UAAU,KAAK,IAAI;AAC5B;AAWO,SAAS,gBACd,MACA,YACQ;AACR,QAAM,EAAE,SAAS,IAAI,IAAI,yBAAyB,IAAI;AACtD,QAAM,YAAY,iBAAiB,MAAM,UAAU;AAEnD,SAAO,IAAI,OAAO,IAAI,SAAS;AACjC","sourcesContent":["import { createSHA256Hash } from './encryption';\n\n/**\n * The User Storage Endpoint requires a feature name and a namespace key.\n * Developers can provide additional features and keys by extending these types below.\n *\n * Adding ALLOW_ARBITRARY_KEYS as the first key in the array allows for any key to be used for this feature.\n * This can be useful for features where keys are not deterministic (eg. accounts addresses).\n */\nconst ALLOW_ARBITRARY_KEYS = 'ALLOW_ARBITRARY_KEYS' as const;\n\nexport const USER_STORAGE_SCHEMA = {\n  notifications: ['notificationSettings'],\n  accounts: [ALLOW_ARBITRARY_KEYS],\n} as const;\n\ntype UserStorageSchema = typeof USER_STORAGE_SCHEMA;\n\ntype UserStorageFeatures = keyof UserStorageSchema;\ntype UserStorageFeatureKeys<Feature extends UserStorageFeatures> =\n  UserStorageSchema[Feature][0] extends typeof ALLOW_ARBITRARY_KEYS\n    ? string\n    : UserStorageSchema[Feature][number];\n\ntype UserStorageFeatureAndKey = {\n  feature: UserStorageFeatures;\n  key: UserStorageFeatureKeys<UserStorageFeatures>;\n};\n\nexport type UserStoragePathWithFeatureOnly = keyof UserStorageSchema;\nexport type UserStoragePathWithFeatureAndKey = {\n  [K in UserStorageFeatures]: `${K}.${UserStorageFeatureKeys<K>}`;\n}[UserStoragePathWithFeatureOnly];\n\nexport const getFeatureAndKeyFromPath = (\n  path: UserStoragePathWithFeatureAndKey,\n): UserStorageFeatureAndKey => {\n  const pathRegex = /^\\w+\\.\\w+$/u;\n\n  if (!pathRegex.test(path)) {\n    throw new Error(\n      `user-storage - path is not in the correct format. Correct format: 'feature.key'`,\n    );\n  }\n\n  const [feature, key] = path.split('.') as [\n    UserStorageFeatures,\n    UserStorageFeatureKeys<UserStorageFeatures>,\n  ];\n\n  if (!(feature in USER_STORAGE_SCHEMA)) {\n    throw new Error(`user-storage - invalid feature provided: ${feature}`);\n  }\n\n  const validFeature = USER_STORAGE_SCHEMA[feature] as readonly string[];\n\n  if (\n    !validFeature.includes(key) &&\n    !validFeature.includes(ALLOW_ARBITRARY_KEYS)\n  ) {\n    const validKeys = USER_STORAGE_SCHEMA[feature].join(', ');\n\n    throw new Error(\n      `user-storage - invalid key provided for this feature: ${key}. Valid keys: ${validKeys}`,\n    );\n  }\n\n  return { feature, key };\n};\n\nexport const isPathWithFeatureAndKey = (\n  path: string,\n): path is UserStoragePathWithFeatureAndKey => {\n  const pathRegex = /^\\w+\\.\\w+$/u;\n\n  return pathRegex.test(path);\n};\n\n/**\n * Constructs a unique entry path for a user.\n * This can be done due to the uniqueness of the storage key (no users will share the same storage key).\n * The users entry is a unique hash that cannot be reversed.\n *\n * @param path - string in the form of `${feature}.${key}` that matches schema\n * @param storageKey - users storage key\n * @returns path to store entry\n */\nexport function createEntryPath(\n  path: UserStoragePathWithFeatureAndKey,\n  storageKey: string,\n): string {\n  const { feature, key } = getFeatureAndKeyFromPath(path);\n  const hashedKey = createSHA256Hash(key + storageKey);\n\n  return `/${feature}/${hashedKey}`;\n}\n"]}