@metamask/profile-sync-controller 0.3.0 → 0.5.0

package/CHANGELOG.md

@@ -7,6 +7,28 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.5.0]
+
+### Added
+
+- add isSnapConnected method to the Authentication SDK ([#4668](https://github.com/MetaMask/core/pull/4668))
+- add `accountAdded` and `accountRenamed` events when triggering account syncing ([#4665](https://github.com/MetaMask/core/pull/4665))
+- prevent accounts controller events being used when sync is in progress ([#4675](https://github.com/MetaMask/core/pull/4675))
+  - add `isAccountSyncingInProgress` to `UserStorageController`
+  - add `isAccountSyncingInProgress` checks to abort processing `accountAdded` and `accountRenamed` events.
+
+### Removed
+
+- account sync throttling ([#4675](https://github.com/MetaMask/core/pull/4675))
+  - remove `maxSyncInterval`; `lastSyncedAt`; `shouldSync` from `UserStorageController`
+
+## [0.4.0]
+
+### Added
+
+- add `maxSyncInterval` for account syncing to `UserStorageController` prevent multiple sync requests ([#4659](https://github.com/MetaMask/core/pull/4659))
+- add optional `NativeScrypt` property to `UserStorageController` to allow the scrypt implementation to be swapped out for a native version. Improving mobile performance ([#4656](https://github.com/MetaMask/core/pull/4656))
+
 ## [0.3.0]
 
 ### Added
@@ -127,7 +149,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 - Initial release
 
-[Unreleased]: https://github.com/MetaMask/core/compare/@metamask/profile-sync-controller@0.3.0...HEAD
+[Unreleased]: https://github.com/MetaMask/core/compare/@metamask/profile-sync-controller@0.5.0...HEAD
+[0.5.0]: https://github.com/MetaMask/core/compare/@metamask/profile-sync-controller@0.4.0...@metamask/profile-sync-controller@0.5.0
+[0.4.0]: https://github.com/MetaMask/core/compare/@metamask/profile-sync-controller@0.3.0...@metamask/profile-sync-controller@0.4.0
 [0.3.0]: https://github.com/MetaMask/core/compare/@metamask/profile-sync-controller@0.2.1...@metamask/profile-sync-controller@0.3.0
 [0.2.1]: https://github.com/MetaMask/core/compare/@metamask/profile-sync-controller@0.2.0...@metamask/profile-sync-controller@0.2.1
 [0.2.0]: https://github.com/MetaMask/core/compare/@metamask/profile-sync-controller@0.1.4...@metamask/profile-sync-controller@0.2.0

package/dist/{chunk-NSSHFDIS.mjs → chunk-2VEMA6OE.mjs}

@@ -1,6 +1,6 @@
 import {
   createSHA256Hash
-} from "./chunk-K5UKU454.mjs";
+} from "./chunk-COBJUBZE.mjs";
 
 // src/controllers/user-storage/schema.ts
 var ALLOW_ARBITRARY_KEYS = "ALLOW_ARBITRARY_KEYS";
@@ -44,4 +44,4 @@ export {
   isPathWithFeatureAndKey,
   createEntryPath
 };
-//# sourceMappingURL=chunk-NSSHFDIS.mjs.map
+//# sourceMappingURL=chunk-2VEMA6OE.mjs.map

package/dist/{chunk-HMRRB4EX.js → chunk-4LMFZDL4.js}

@@ -1,9 +1,9 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
 
-var _chunkEYZFHZR2js = require('./chunk-EYZFHZR2.js');
+var _chunk5MQUI24Ujs = require('./chunk-5MQUI24U.js');
 
 
-var _chunkAK7OTIWAjs = require('./chunk-AK7OTIWA.js');
+var _chunkNIUQ34PYjs = require('./chunk-NIUQ34PY.js');
 
 
 var _chunkDF24ZX4Hjs = require('./chunk-DF24ZX4H.js');
@@ -15,8 +15,8 @@ var USER_STORAGE_API = ENV_URLS.userStorageApiUrl;
 var USER_STORAGE_ENDPOINT = `${USER_STORAGE_API}/api/v1/userstorage`;
 async function getUserStorage(opts) {
   try {
-    const { bearerToken, path, storageKey } = opts;
-    const encryptedPath = _chunkEYZFHZR2js.createEntryPath.call(void 0, path, storageKey);
+    const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;
+    const encryptedPath = _chunk5MQUI24Ujs.createEntryPath.call(void 0, path, storageKey);
     const url = new URL(`${USER_STORAGE_ENDPOINT}${encryptedPath}`);
     const userStorageResponse = await fetch(url.toString(), {
       headers: {
@@ -35,9 +35,10 @@ async function getUserStorage(opts) {
     if (!encryptedData) {
       return null;
     }
-    const decryptedData = _chunkAK7OTIWAjs.encryption_default.decryptString(
+    const decryptedData = await _chunkNIUQ34PYjs.encryption_default.decryptString(
       encryptedData,
-      opts.storageKey
+      opts.storageKey,
+      nativeScryptCrypto
     );
     return decryptedData;
   } catch (e) {
@@ -47,7 +48,7 @@ async function getUserStorage(opts) {
 }
 async function getUserStorageAllFeatureEntries(opts) {
   try {
-    const { bearerToken, path } = opts;
+    const { bearerToken, path, nativeScryptCrypto } = opts;
     const url = new URL(`${USER_STORAGE_ENDPOINT}/${path}`);
     const userStorageResponse = await fetch(url.toString(), {
       headers: {
@@ -69,18 +70,26 @@ async function getUserStorageAllFeatureEntries(opts) {
       if (!entry.Data) {
         return [];
       }
-      return _chunkAK7OTIWAjs.encryption_default.decryptString(entry.Data, opts.storageKey);
+      return _chunkNIUQ34PYjs.encryption_default.decryptString(
+        entry.Data,
+        opts.storageKey,
+        nativeScryptCrypto
+      );
     });
-    return decryptedData;
+    return (await Promise.allSettled(decryptedData)).map((d) => d.status === "fulfilled" ? d.value : void 0).filter((d) => d !== void 0);
   } catch (e) {
     _loglevel2.default.error("Failed to get user storage", e);
     return null;
   }
 }
 async function upsertUserStorage(data, opts) {
-  const { bearerToken, path, storageKey } = opts;
-  const encryptedData = _chunkAK7OTIWAjs.encryption_default.encryptString(data, opts.storageKey);
-  const encryptedPath = _chunkEYZFHZR2js.createEntryPath.call(void 0, path, storageKey);
+  const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;
+  const encryptedData = await _chunkNIUQ34PYjs.encryption_default.encryptString(
+    data,
+    opts.storageKey,
+    nativeScryptCrypto
+  );
+  const encryptedPath = _chunk5MQUI24Ujs.createEntryPath.call(void 0, path, storageKey);
   const url = new URL(`${USER_STORAGE_ENDPOINT}${encryptedPath}`);
   const res = await fetch(url.toString(), {
     method: "PUT",
@@ -102,4 +111,4 @@ async function upsertUserStorage(data, opts) {
 
 
 exports.USER_STORAGE_API = USER_STORAGE_API; exports.USER_STORAGE_ENDPOINT = USER_STORAGE_ENDPOINT; exports.getUserStorage = getUserStorage; exports.getUserStorageAllFeatureEntries = getUserStorageAllFeatureEntries; exports.upsertUserStorage = upsertUserStorage;
-//# sourceMappingURL=chunk-HMRRB4EX.js.map
+//# sourceMappingURL=chunk-4LMFZDL4.js.map

package/dist/chunk-4LMFZDL4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controllers/user-storage/services.ts"],"names":[],"mappings":";;;;;;;;;;;AAAA,OAAO,SAAS;AAWhB,IAAM,WAAW,0BAAkB;AAE5B,IAAM,mBAA2B,SAAS;AAC1C,IAAM,wBAAwB,GAAG,gBAAgB;AAwCxD,eAAsB,eACpB,MACwB;AACxB,MAAI;AACF,UAAM,EAAE,aAAa,MAAM,YAAY,mBAAmB,IAAI;AAE9D,UAAM,gBAAgB,gBAAgB,MAAM,UAAU;AACtD,UAAM,MAAM,IAAI,IAAI,GAAG,qBAAqB,GAAG,aAAa,EAAE;AAE9D,UAAM,sBAAsB,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,MACtD,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,eAAe,UAAU,WAAW;AAAA,MACtC;AAAA,IACF,CAAC;AAGD,QAAI,oBAAoB,WAAW,KAAK;AACtC,aAAO;AAAA,IACT;AAEA,QAAI,oBAAoB,WAAW,KAAK;AACtC,YAAM,IAAI,MAAM,4BAA4B;AAAA,IAC9C;AAEA,UAAM,cACJ,MAAM,oBAAoB,KAAK;AACjC,UAAM,gBAAgB,aAAa,QAAQ;AAE3C,QAAI,CAAC,eAAe;AAClB,aAAO;AAAA,IACT;AAEA,UAAM,gBAAgB,MAAM,mBAAW;AAAA,MACrC;AAAA,MACA,KAAK;AAAA,MACL;AAAA,IACF;AAEA,WAAO;AAAA,EACT,SAAS,GAAG;AACV,QAAI,MAAM,8BAA8B,CAAC;AACzC,WAAO;AAAA,EACT;AACF;AAQA,eAAsB,gCACpB,MAC0B;AAC1B,MAAI;AACF,UAAM,EAAE,aAAa,MAAM,mBAAmB,IAAI;AAClD,UAAM,MAAM,IAAI,IAAI,GAAG,qBAAqB,IAAI,IAAI,EAAE;AAEtD,UAAM,sBAAsB,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,MACtD,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,eAAe,UAAU,WAAW;AAAA,MACtC;AAAA,IACF,CAAC;AAGD,QAAI,oBAAoB,WAAW,KAAK;AACtC,aAAO;AAAA,IACT;AAEA,QAAI,oBAAoB,WAAW,KAAK;AACtC,YAAM,IAAI,MAAM,4BAA4B;AAAA,IAC9C;AAEA,UAAM,cACJ,MAAM,oBAAoB,KAAK;AAEjC,QAAI,CAAC,MAAM,QAAQ,WAAW,GAAG;AAC/B,aAAO;AAAA,IACT;AAEA,UAAM,gBAAgB,aAAa,QAAQ,CAAC,UAAU;AACpD,UAAI,CAAC,MAAM,MAAM;AACf,eAAO,CAAC;AAAA,MACV;AAEA,aAAO,mBAAW;AAAA,QAChB,MAAM;AAAA,QACN,KAAK;AAAA,QACL;AAAA,MACF;AAAA,IACF,CAAC;AAED,YAAQ,MAAM,QAAQ,WAAW,aAAa,GAC3C,IAAI,CAAC,MAAO,EAAE,WAAW,cAAc,EAAE,QAAQ,MAAU,EAC3D,OAAO,CAAC,MAAmB,MAAM,MAAS;AAAA,EAC/C,SAAS,GAAG;AACV,QAAI,MAAM,8BAA8B,CAAC;AACzC,WAAO;AAAA,EACT;AACF;AAQA,eAAsB,kBACpB,MACA,MACe;AACf,QAAM,EAAE,aAAa,MAAM,YAAY,mBAAmB,IAAI;AAE9D,QAAM,gBAAgB,MAAM,mBAAW;AAAA,IACrC;AAAA,IACA,KAAK;AAAA,IACL;AAAA,EACF;AACA,QAAM,gBAAgB,gBAAgB,MAAM,UAAU;AACtD,QAAM,MAAM,IAAI,IAAI,GAAG,qBAAqB,GAAG,aAAa,EAAE;AAE9D,QAAM,MAAM,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,IACtC,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,gBAAgB;AAAA,MAChB,eAAe,UAAU,WAAW;AAAA,IACtC;AAAA,IACA,MAAM,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAAA,EAC9C,CAAC;AAED,MAAI,CAAC,IAAI,IAAI;AACX,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AACF","sourcesContent":["import log from 'loglevel';\n\nimport { Env, getEnvUrls } from '../../sdk/env';\nimport encryption from './encryption';\nimport type {\n  UserStoragePathWithFeatureAndKey,\n  UserStoragePathWithFeatureOnly,\n} from './schema';\nimport { createEntryPath } from './schema';\nimport type { NativeScrypt } from './UserStorageController';\n\nconst ENV_URLS = getEnvUrls(Env.PRD);\n\nexport const USER_STORAGE_API: string = ENV_URLS.userStorageApiUrl;\nexport const USER_STORAGE_ENDPOINT = `${USER_STORAGE_API}/api/v1/userstorage`;\n\n/**\n * This is the Server Response shape for a feature entry.\n */\nexport type GetUserStorageResponse = {\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  HashedKey: string;\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  Data: string;\n};\n\nexport type GetUserStorageAllFeatureEntriesResponse = {\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  HashedKey: string;\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  Data: string;\n}[];\n\nexport type UserStorageBaseOptions = {\n  bearerToken: string;\n  storageKey: string;\n};\n\nexport type UserStorageOptions = UserStorageBaseOptions & {\n  path: UserStoragePathWithFeatureAndKey;\n  nativeScryptCrypto?: NativeScrypt;\n};\n\nexport type UserStorageAllFeatureEntriesOptions = UserStorageBaseOptions & {\n  path: UserStoragePathWithFeatureOnly;\n  nativeScryptCrypto?: NativeScrypt;\n};\n\n/**\n * User Storage Service - Get Storage Entry.\n *\n * @param opts - User Storage Options\n * @returns The storage entry, or null if fails to find entry\n */\nexport async function getUserStorage(\n  opts: UserStorageOptions,\n): Promise<string | null> {\n  try {\n    const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;\n\n    const encryptedPath = createEntryPath(path, storageKey);\n    const url = new URL(`${USER_STORAGE_ENDPOINT}${encryptedPath}`);\n\n    const userStorageResponse = await fetch(url.toString(), {\n      headers: {\n        'Content-Type': 'application/json',\n        Authorization: `Bearer ${bearerToken}`,\n      },\n    });\n\n    // Acceptable error - since indicates entry does not exist.\n    if (userStorageResponse.status === 404) {\n      return null;\n    }\n\n    if (userStorageResponse.status !== 200) {\n      throw new Error('Unable to get User Storage');\n    }\n\n    const userStorage: GetUserStorageResponse | null =\n      await userStorageResponse.json();\n    const encryptedData = userStorage?.Data ?? null;\n\n    if (!encryptedData) {\n      return null;\n    }\n\n    const decryptedData = await encryption.decryptString(\n      encryptedData,\n      opts.storageKey,\n      nativeScryptCrypto,\n    );\n\n    return decryptedData;\n  } catch (e) {\n    log.error('Failed to get user storage', e);\n    return null;\n  }\n}\n\n/**\n * User Storage Service - Get all storage entries for a specific feature.\n *\n * @param opts - User Storage Options\n * @returns The storage entry, or null if fails to find entry\n */\nexport async function getUserStorageAllFeatureEntries(\n  opts: UserStorageAllFeatureEntriesOptions,\n): Promise<string[] | null> {\n  try {\n    const { bearerToken, path, nativeScryptCrypto } = opts;\n    const url = new URL(`${USER_STORAGE_ENDPOINT}/${path}`);\n\n    const userStorageResponse = await fetch(url.toString(), {\n      headers: {\n        'Content-Type': 'application/json',\n        Authorization: `Bearer ${bearerToken}`,\n      },\n    });\n\n    // Acceptable error - since indicates feature does not exist.\n    if (userStorageResponse.status === 404) {\n      return null;\n    }\n\n    if (userStorageResponse.status !== 200) {\n      throw new Error('Unable to get User Storage');\n    }\n\n    const userStorage: GetUserStorageAllFeatureEntriesResponse | null =\n      await userStorageResponse.json();\n\n    if (!Array.isArray(userStorage)) {\n      return null;\n    }\n\n    const decryptedData = userStorage?.flatMap((entry) => {\n      if (!entry.Data) {\n        return [];\n      }\n\n      return encryption.decryptString(\n        entry.Data,\n        opts.storageKey,\n        nativeScryptCrypto,\n      );\n    });\n\n    return (await Promise.allSettled(decryptedData))\n      .map((d) => (d.status === 'fulfilled' ? d.value : undefined))\n      .filter((d): d is string => d !== undefined);\n  } catch (e) {\n    log.error('Failed to get user storage', e);\n    return null;\n  }\n}\n\n/**\n * User Storage Service - Set Storage Entry.\n *\n * @param data - data to store\n * @param opts - storage options\n */\nexport async function upsertUserStorage(\n  data: string,\n  opts: UserStorageOptions,\n): Promise<void> {\n  const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;\n\n  const encryptedData = await encryption.encryptString(\n    data,\n    opts.storageKey,\n    nativeScryptCrypto,\n  );\n  const encryptedPath = createEntryPath(path, storageKey);\n  const url = new URL(`${USER_STORAGE_ENDPOINT}${encryptedPath}`);\n\n  const res = await fetch(url.toString(), {\n    method: 'PUT',\n    headers: {\n      'Content-Type': 'application/json',\n      Authorization: `Bearer ${bearerToken}`,\n    },\n    body: JSON.stringify({ data: encryptedData }),\n  });\n\n  if (!res.ok) {\n    throw new Error('user-storage - unable to upsert data');\n  }\n}\n"]}

package/dist/{chunk-JJ5BDCKD.js → chunk-4TMLEABQ.js}

@@ -1,12 +1,12 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
-var _chunkQ5KTSMREjs = require('./chunk-Q5KTSMRE.js');
+var _chunkY45XUW33js = require('./chunk-Y45XUW33.js');
 
 
 var _chunkKIVBL6OMjs = require('./chunk-KIVBL6OM.js');
 
 
-var _chunk4ZGRRVMIjs = require('./chunk-4ZGRRVMI.js');
+var _chunkUEHMUVQQjs = require('./chunk-UEHMUVQQ.js');
 
 
 var _chunkPBRUOBEQjs = require('./chunk-PBRUOBEQ.js');
@@ -16,14 +16,15 @@ var _chunkPBRUOBEQjs = require('./chunk-PBRUOBEQ.js');
 
 
 
-var _chunkPQ5T4GHYjs = require('./chunk-PQ5T4GHY.js');
 
+var _chunkQCQU4BQLjs = require('./chunk-QCQU4BQL.js');
 
 
-var _chunkZMQRPWJNjs = require('./chunk-ZMQRPWJN.js');
 
+var _chunkUIRAMHNMjs = require('./chunk-UIRAMHNM.js');
 
-var _chunkT3FNDVE3js = require('./chunk-T3FNDVE3.js');
+
+var _chunkBKQE7DB5js = require('./chunk-BKQE7DB5.js');
 
 
 
@@ -48,30 +49,31 @@ var sdk_exports = {};
 _chunkIGY2S5BCjs.__export.call(void 0, sdk_exports, {
   AuthType: () => _chunkPBRUOBEQjs.AuthType,
   Env: () => _chunkDF24ZX4Hjs.Env,
-  JwtBearerAuth: () => _chunkQ5KTSMREjs.JwtBearerAuth,
-  MESSAGE_SIGNING_SNAP: () => _chunkPQ5T4GHYjs.MESSAGE_SIGNING_SNAP,
+  JwtBearerAuth: () => _chunkY45XUW33js.JwtBearerAuth,
+  MESSAGE_SIGNING_SNAP: () => _chunkQCQU4BQLjs.MESSAGE_SIGNING_SNAP,
   NonceRetrievalError: () => _chunkMBTBE4P5js.NonceRetrievalError,
   NotFoundError: () => _chunkMBTBE4P5js.NotFoundError,
   PairError: () => _chunkMBTBE4P5js.PairError,
   Platform: () => _chunkDF24ZX4Hjs.Platform,
   SIWEJwtBearerAuth: () => _chunkKIVBL6OMjs.SIWEJwtBearerAuth,
-  SNAP_ORIGIN: () => _chunkPQ5T4GHYjs.SNAP_ORIGIN,
-  SRPJwtBearerAuth: () => _chunk4ZGRRVMIjs.SRPJwtBearerAuth,
-  STORAGE_URL: () => _chunkZMQRPWJNjs.STORAGE_URL,
+  SNAP_ORIGIN: () => _chunkQCQU4BQLjs.SNAP_ORIGIN,
+  SRPJwtBearerAuth: () => _chunkUEHMUVQQjs.SRPJwtBearerAuth,
+  STORAGE_URL: () => _chunkUIRAMHNMjs.STORAGE_URL,
   SignInError: () => _chunkMBTBE4P5js.SignInError,
   UnsupportedAuthTypeError: () => _chunkMBTBE4P5js.UnsupportedAuthTypeError,
-  UserStorage: () => _chunkZMQRPWJNjs.UserStorage,
+  UserStorage: () => _chunkUIRAMHNMjs.UserStorage,
   UserStorageError: () => _chunkMBTBE4P5js.UserStorageError,
   ValidationError: () => _chunkMBTBE4P5js.ValidationError,
-  connectSnap: () => _chunkPQ5T4GHYjs.connectSnap,
-  createSHA256Hash: () => _chunkT3FNDVE3js.createSHA256Hash,
+  connectSnap: () => _chunkQCQU4BQLjs.connectSnap,
+  createSHA256Hash: () => _chunkBKQE7DB5js.createSHA256Hash,
   getEnvUrls: () => _chunkDF24ZX4Hjs.getEnvUrls,
   getOidcClientId: () => _chunkDF24ZX4Hjs.getOidcClientId,
-  getSnap: () => _chunkPQ5T4GHYjs.getSnap,
-  getSnaps: () => _chunkPQ5T4GHYjs.getSnaps
+  getSnap: () => _chunkQCQU4BQLjs.getSnap,
+  getSnaps: () => _chunkQCQU4BQLjs.getSnaps,
+  isSnapConnected: () => _chunkQCQU4BQLjs.isSnapConnected
 });
 
 
 
 exports.sdk_exports = sdk_exports;
-//# sourceMappingURL=chunk-JJ5BDCKD.js.map
+//# sourceMappingURL=chunk-4TMLEABQ.js.map

package/dist/chunk-4TMLEABQ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/sdk/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA","sourcesContent":["export * from './authentication';\nexport * from './user-storage';\nexport * from './env';\nexport * from './errors';\nexport * from './encryption';\nexport * from './utils/messaging-signing-snap-requests';\n"]}

package/dist/{chunk-EYZFHZR2.js → chunk-5MQUI24U.js}

@@ -1,6 +1,6 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
-var _chunkT3FNDVE3js = require('./chunk-T3FNDVE3.js');
+var _chunkBKQE7DB5js = require('./chunk-BKQE7DB5.js');
 
 // src/controllers/user-storage/schema.ts
 var ALLOW_ARBITRARY_KEYS = "ALLOW_ARBITRARY_KEYS";
@@ -34,7 +34,7 @@ var isPathWithFeatureAndKey = (path) => {
 };
 function createEntryPath(path, storageKey) {
   const { feature, key } = getFeatureAndKeyFromPath(path);
-  const hashedKey = _chunkT3FNDVE3js.createSHA256Hash.call(void 0, key + storageKey);
+  const hashedKey = _chunkBKQE7DB5js.createSHA256Hash.call(void 0, key + storageKey);
   return `/${feature}/${hashedKey}`;
 }
 
@@ -44,4 +44,4 @@ function createEntryPath(path, storageKey) {
 
 
 exports.USER_STORAGE_SCHEMA = USER_STORAGE_SCHEMA; exports.getFeatureAndKeyFromPath = getFeatureAndKeyFromPath; exports.isPathWithFeatureAndKey = isPathWithFeatureAndKey; exports.createEntryPath = createEntryPath;
-//# sourceMappingURL=chunk-EYZFHZR2.js.map
+//# sourceMappingURL=chunk-5MQUI24U.js.map

package/dist/{chunk-QU4EXKJO.mjs → chunk-6DAK2U35.mjs}

@@ -1,6 +1,6 @@
 import {
   encryption_default
-} from "./chunk-K5UKU454.mjs";
+} from "./chunk-COBJUBZE.mjs";
 
 // src/sdk/encryption.ts
 var encryption_default2 = encryption_default;
@@ -8,4 +8,4 @@ var encryption_default2 = encryption_default;
 export {
   encryption_default2 as encryption_default
 };
-//# sourceMappingURL=chunk-QU4EXKJO.mjs.map
+//# sourceMappingURL=chunk-6DAK2U35.mjs.map

package/dist/{chunk-LYDHYB6I.mjs → chunk-76NMME23.mjs}

@@ -1,9 +1,9 @@
 import {
   createEntryPath
-} from "./chunk-NSSHFDIS.mjs";
+} from "./chunk-2VEMA6OE.mjs";
 import {
   encryption_default
-} from "./chunk-5TOWF6UW.mjs";
+} from "./chunk-KHASG4H3.mjs";
 import {
   getEnvUrls
 } from "./chunk-KTCSRECK.mjs";
@@ -15,7 +15,7 @@ var USER_STORAGE_API = ENV_URLS.userStorageApiUrl;
 var USER_STORAGE_ENDPOINT = `${USER_STORAGE_API}/api/v1/userstorage`;
 async function getUserStorage(opts) {
   try {
-    const { bearerToken, path, storageKey } = opts;
+    const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;
     const encryptedPath = createEntryPath(path, storageKey);
     const url = new URL(`${USER_STORAGE_ENDPOINT}${encryptedPath}`);
     const userStorageResponse = await fetch(url.toString(), {
@@ -35,9 +35,10 @@ async function getUserStorage(opts) {
     if (!encryptedData) {
       return null;
     }
-    const decryptedData = encryption_default.decryptString(
+    const decryptedData = await encryption_default.decryptString(
       encryptedData,
-      opts.storageKey
+      opts.storageKey,
+      nativeScryptCrypto
     );
     return decryptedData;
   } catch (e) {
@@ -47,7 +48,7 @@ async function getUserStorage(opts) {
 }
 async function getUserStorageAllFeatureEntries(opts) {
   try {
-    const { bearerToken, path } = opts;
+    const { bearerToken, path, nativeScryptCrypto } = opts;
     const url = new URL(`${USER_STORAGE_ENDPOINT}/${path}`);
     const userStorageResponse = await fetch(url.toString(), {
       headers: {
@@ -69,17 +70,25 @@ async function getUserStorageAllFeatureEntries(opts) {
       if (!entry.Data) {
         return [];
       }
-      return encryption_default.decryptString(entry.Data, opts.storageKey);
+      return encryption_default.decryptString(
+        entry.Data,
+        opts.storageKey,
+        nativeScryptCrypto
+      );
     });
-    return decryptedData;
+    return (await Promise.allSettled(decryptedData)).map((d) => d.status === "fulfilled" ? d.value : void 0).filter((d) => d !== void 0);
   } catch (e) {
     log.error("Failed to get user storage", e);
     return null;
   }
 }
 async function upsertUserStorage(data, opts) {
-  const { bearerToken, path, storageKey } = opts;
-  const encryptedData = encryption_default.encryptString(data, opts.storageKey);
+  const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;
+  const encryptedData = await encryption_default.encryptString(
+    data,
+    opts.storageKey,
+    nativeScryptCrypto
+  );
   const encryptedPath = createEntryPath(path, storageKey);
   const url = new URL(`${USER_STORAGE_ENDPOINT}${encryptedPath}`);
   const res = await fetch(url.toString(), {
@@ -102,4 +111,4 @@ export {
   getUserStorageAllFeatureEntries,
   upsertUserStorage
 };
-//# sourceMappingURL=chunk-LYDHYB6I.mjs.map
+//# sourceMappingURL=chunk-76NMME23.mjs.map

package/dist/chunk-76NMME23.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controllers/user-storage/services.ts"],"sourcesContent":["import log from 'loglevel';\n\nimport { Env, getEnvUrls } from '../../sdk/env';\nimport encryption from './encryption';\nimport type {\n  UserStoragePathWithFeatureAndKey,\n  UserStoragePathWithFeatureOnly,\n} from './schema';\nimport { createEntryPath } from './schema';\nimport type { NativeScrypt } from './UserStorageController';\n\nconst ENV_URLS = getEnvUrls(Env.PRD);\n\nexport const USER_STORAGE_API: string = ENV_URLS.userStorageApiUrl;\nexport const USER_STORAGE_ENDPOINT = `${USER_STORAGE_API}/api/v1/userstorage`;\n\n/**\n * This is the Server Response shape for a feature entry.\n */\nexport type GetUserStorageResponse = {\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  HashedKey: string;\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  Data: string;\n};\n\nexport type GetUserStorageAllFeatureEntriesResponse = {\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  HashedKey: string;\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  Data: string;\n}[];\n\nexport type UserStorageBaseOptions = {\n  bearerToken: string;\n  storageKey: string;\n};\n\nexport type UserStorageOptions = UserStorageBaseOptions & {\n  path: UserStoragePathWithFeatureAndKey;\n  nativeScryptCrypto?: NativeScrypt;\n};\n\nexport type UserStorageAllFeatureEntriesOptions = UserStorageBaseOptions & {\n  path: UserStoragePathWithFeatureOnly;\n  nativeScryptCrypto?: NativeScrypt;\n};\n\n/**\n * User Storage Service - Get Storage Entry.\n *\n * @param opts - User Storage Options\n * @returns The storage entry, or null if fails to find entry\n */\nexport async function getUserStorage(\n  opts: UserStorageOptions,\n): Promise<string | null> {\n  try {\n    const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;\n\n    const encryptedPath = createEntryPath(path, storageKey);\n    const url = new URL(`${USER_STORAGE_ENDPOINT}${encryptedPath}`);\n\n    const userStorageResponse = await fetch(url.toString(), {\n      headers: {\n        'Content-Type': 'application/json',\n        Authorization: `Bearer ${bearerToken}`,\n      },\n    });\n\n    // Acceptable error - since indicates entry does not exist.\n    if (userStorageResponse.status === 404) {\n      return null;\n    }\n\n    if (userStorageResponse.status !== 200) {\n      throw new Error('Unable to get User Storage');\n    }\n\n    const userStorage: GetUserStorageResponse | null =\n      await userStorageResponse.json();\n    const encryptedData = userStorage?.Data ?? null;\n\n    if (!encryptedData) {\n      return null;\n    }\n\n    const decryptedData = await encryption.decryptString(\n      encryptedData,\n      opts.storageKey,\n      nativeScryptCrypto,\n    );\n\n    return decryptedData;\n  } catch (e) {\n    log.error('Failed to get user storage', e);\n    return null;\n  }\n}\n\n/**\n * User Storage Service - Get all storage entries for a specific feature.\n *\n * @param opts - User Storage Options\n * @returns The storage entry, or null if fails to find entry\n */\nexport async function getUserStorageAllFeatureEntries(\n  opts: UserStorageAllFeatureEntriesOptions,\n): Promise<string[] | null> {\n  try {\n    const { bearerToken, path, nativeScryptCrypto } = opts;\n    const url = new URL(`${USER_STORAGE_ENDPOINT}/${path}`);\n\n    const userStorageResponse = await fetch(url.toString(), {\n      headers: {\n        'Content-Type': 'application/json',\n        Authorization: `Bearer ${bearerToken}`,\n      },\n    });\n\n    // Acceptable error - since indicates feature does not exist.\n    if (userStorageResponse.status === 404) {\n      return null;\n    }\n\n    if (userStorageResponse.status !== 200) {\n      throw new Error('Unable to get User Storage');\n    }\n\n    const userStorage: GetUserStorageAllFeatureEntriesResponse | null =\n      await userStorageResponse.json();\n\n    if (!Array.isArray(userStorage)) {\n      return null;\n    }\n\n    const decryptedData = userStorage?.flatMap((entry) => {\n      if (!entry.Data) {\n        return [];\n      }\n\n      return encryption.decryptString(\n        entry.Data,\n        opts.storageKey,\n        nativeScryptCrypto,\n      );\n    });\n\n    return (await Promise.allSettled(decryptedData))\n      .map((d) => (d.status === 'fulfilled' ? d.value : undefined))\n      .filter((d): d is string => d !== undefined);\n  } catch (e) {\n    log.error('Failed to get user storage', e);\n    return null;\n  }\n}\n\n/**\n * User Storage Service - Set Storage Entry.\n *\n * @param data - data to store\n * @param opts - storage options\n */\nexport async function upsertUserStorage(\n  data: string,\n  opts: UserStorageOptions,\n): Promise<void> {\n  const { bearerToken, path, storageKey, nativeScryptCrypto } = opts;\n\n  const encryptedData = await encryption.encryptString(\n    data,\n    opts.storageKey,\n    nativeScryptCrypto,\n  );\n  const encryptedPath = createEntryPath(path, storageKey);\n  const url = new URL(`${USER_STORAGE_ENDPOINT}${encryptedPath}`);\n\n  const res = await fetch(url.toString(), {\n    method: 'PUT',\n    headers: {\n      'Content-Type': 'application/json',\n      Authorization: `Bearer ${bearerToken}`,\n    },\n    body: JSON.stringify({ data: encryptedData }),\n  });\n\n  if (!res.ok) {\n    throw new Error('user-storage - unable to upsert data');\n  }\n}\n"],"mappings":";;;;;;;;;;;AAAA,OAAO,SAAS;AAWhB,IAAM,WAAW,0BAAkB;AAE5B,IAAM,mBAA2B,SAAS;AAC1C,IAAM,wBAAwB,GAAG,gBAAgB;AAwCxD,eAAsB,eACpB,MACwB;AACxB,MAAI;AACF,UAAM,EAAE,aAAa,MAAM,YAAY,mBAAmB,IAAI;AAE9D,UAAM,gBAAgB,gBAAgB,MAAM,UAAU;AACtD,UAAM,MAAM,IAAI,IAAI,GAAG,qBAAqB,GAAG,aAAa,EAAE;AAE9D,UAAM,sBAAsB,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,MACtD,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,eAAe,UAAU,WAAW;AAAA,MACtC;AAAA,IACF,CAAC;AAGD,QAAI,oBAAoB,WAAW,KAAK;AACtC,aAAO;AAAA,IACT;AAEA,QAAI,oBAAoB,WAAW,KAAK;AACtC,YAAM,IAAI,MAAM,4BAA4B;AAAA,IAC9C;AAEA,UAAM,cACJ,MAAM,oBAAoB,KAAK;AACjC,UAAM,gBAAgB,aAAa,QAAQ;AAE3C,QAAI,CAAC,eAAe;AAClB,aAAO;AAAA,IACT;AAEA,UAAM,gBAAgB,MAAM,mBAAW;AAAA,MACrC;AAAA,MACA,KAAK;AAAA,MACL;AAAA,IACF;AAEA,WAAO;AAAA,EACT,SAAS,GAAG;AACV,QAAI,MAAM,8BAA8B,CAAC;AACzC,WAAO;AAAA,EACT;AACF;AAQA,eAAsB,gCACpB,MAC0B;AAC1B,MAAI;AACF,UAAM,EAAE,aAAa,MAAM,mBAAmB,IAAI;AAClD,UAAM,MAAM,IAAI,IAAI,GAAG,qBAAqB,IAAI,IAAI,EAAE;AAEtD,UAAM,sBAAsB,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,MACtD,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,eAAe,UAAU,WAAW;AAAA,MACtC;AAAA,IACF,CAAC;AAGD,QAAI,oBAAoB,WAAW,KAAK;AACtC,aAAO;AAAA,IACT;AAEA,QAAI,oBAAoB,WAAW,KAAK;AACtC,YAAM,IAAI,MAAM,4BAA4B;AAAA,IAC9C;AAEA,UAAM,cACJ,MAAM,oBAAoB,KAAK;AAEjC,QAAI,CAAC,MAAM,QAAQ,WAAW,GAAG;AAC/B,aAAO;AAAA,IACT;AAEA,UAAM,gBAAgB,aAAa,QAAQ,CAAC,UAAU;AACpD,UAAI,CAAC,MAAM,MAAM;AACf,eAAO,CAAC;AAAA,MACV;AAEA,aAAO,mBAAW;AAAA,QAChB,MAAM;AAAA,QACN,KAAK;AAAA,QACL;AAAA,MACF;AAAA,IACF,CAAC;AAED,YAAQ,MAAM,QAAQ,WAAW,aAAa,GAC3C,IAAI,CAAC,MAAO,EAAE,WAAW,cAAc,EAAE,QAAQ,MAAU,EAC3D,OAAO,CAAC,MAAmB,MAAM,MAAS;AAAA,EAC/C,SAAS,GAAG;AACV,QAAI,MAAM,8BAA8B,CAAC;AACzC,WAAO;AAAA,EACT;AACF;AAQA,eAAsB,kBACpB,MACA,MACe;AACf,QAAM,EAAE,aAAa,MAAM,YAAY,mBAAmB,IAAI;AAE9D,QAAM,gBAAgB,MAAM,mBAAW;AAAA,IACrC;AAAA,IACA,KAAK;AAAA,IACL;AAAA,EACF;AACA,QAAM,gBAAgB,gBAAgB,MAAM,UAAU;AACtD,QAAM,MAAM,IAAI,IAAI,GAAG,qBAAqB,GAAG,aAAa,EAAE;AAE9D,QAAM,MAAM,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,IACtC,QAAQ;AAAA,IACR,SAAS;AAAA,MACP,gBAAgB;AAAA,MAChB,eAAe,UAAU,WAAW;AAAA,IACtC;AAAA,IACA,MAAM,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAAA,EAC9C,CAAC;AAED,MAAI,CAAC,IAAI,IAAI;AACX,UAAM,IAAI,MAAM,sCAAsC;AAAA,EACxD;AACF;","names":[]}

package/dist/{chunk-T3FNDVE3.js → chunk-BKQE7DB5.js}

@@ -34,20 +34,20 @@ var EncryptorDecryptor = class {
     _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _decrypt);
     _chunkIGY2S5BCjs.__privateAdd.call(void 0, this, _getOrGenerateScryptKey);
   }
-  encryptString(plaintext, password) {
+  async encryptString(plaintext, password, nativeScryptCrypto) {
     try {
-      return _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _encryptStringV1, encryptStringV1_fn).call(this, plaintext, password);
+      return await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _encryptStringV1, encryptStringV1_fn).call(this, plaintext, password, nativeScryptCrypto);
     } catch (e) {
       const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);
       throw new Error(`Unable to encrypt string - ${errorMessage}`);
     }
   }
-  decryptString(encryptedDataStr, password) {
+  async decryptString(encryptedDataStr, password, nativeScryptCrypto) {
     try {
       const encryptedData = JSON.parse(encryptedDataStr);
       if (encryptedData.v === "1") {
         if (encryptedData.t === "scrypt") {
-          return _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _decryptStringV1, decryptStringV1_fn).call(this, encryptedData, password);
+          return await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _decryptStringV1, decryptStringV1_fn).call(this, encryptedData, password, nativeScryptCrypto);
         }
       }
       throw new Error(
@@ -60,13 +60,13 @@ var EncryptorDecryptor = class {
   }
 };
 _encryptStringV1 = new WeakSet();
-encryptStringV1_fn = function(plaintext, password) {
-  const { key, salt } = _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _getOrGenerateScryptKey, getOrGenerateScryptKey_fn).call(this, password, {
+encryptStringV1_fn = async function(plaintext, password, nativeScryptCrypto) {
+  const { key, salt } = await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _getOrGenerateScryptKey, getOrGenerateScryptKey_fn).call(this, password, {
     N: SCRYPT_N,
     r: SCRYPT_r,
     p: SCRYPT_p,
     dkLen: ALGORITHM_KEY_SIZE
-  });
+  }, _webcrypto.randomBytes.call(void 0, SCRYPT_SALT_SIZE), nativeScryptCrypto);
   const plaintextRaw = _utils.utf8ToBytes.call(void 0, plaintext);
   const ciphertextAndNonceAndSalt = _utils.concatBytes.call(void 0, 
     salt,
@@ -88,7 +88,7 @@ encryptStringV1_fn = function(plaintext, password) {
   return JSON.stringify(encryptedPayload);
 };
 _decryptStringV1 = new WeakSet();
-decryptStringV1_fn = function(data, password) {
+decryptStringV1_fn = async function(data, password, nativeScryptCrypto) {
   const { o, d: base64CiphertextAndNonceAndSalt, saltLen } = data;
   const ciphertextAndNonceAndSalt = _chunkPCOIRDTOjs.base64ToByteArray.call(void 0, 
     base64CiphertextAndNonceAndSalt
@@ -98,12 +98,12 @@ decryptStringV1_fn = function(data, password) {
     saltLen,
     ciphertextAndNonceAndSalt.length
   );
-  const { key } = _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _getOrGenerateScryptKey, getOrGenerateScryptKey_fn).call(this, password, {
+  const { key } = await _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _getOrGenerateScryptKey, getOrGenerateScryptKey_fn).call(this, password, {
     N: o.N,
     r: o.r,
     p: o.p,
     dkLen: o.dkLen
-  }, salt);
+  }, salt, nativeScryptCrypto);
   return _chunkPCOIRDTOjs.bytesToUtf8.call(void 0, _chunkIGY2S5BCjs.__privateMethod.call(void 0, this, _decrypt, decrypt_fn).call(this, ciphertextAndNonce, key));
 };
 _encrypt = new WeakSet();
@@ -122,7 +122,7 @@ decrypt_fn = function(ciphertextAndNonce, key) {
   return _aes.gcm.call(void 0, key, nonce).decrypt(ciphertext);
 };
 _getOrGenerateScryptKey = new WeakSet();
-getOrGenerateScryptKey_fn = function(password, o, salt) {
+getOrGenerateScryptKey_fn = async function(password, o, salt, nativeScryptCrypto) {
   const hashedPassword = createSHA256Hash(password);
   const cachedKey = salt ? _chunkUAXWZN5Jjs.getCachedKeyBySalt.call(void 0, hashedPassword, salt) : _chunkUAXWZN5Jjs.getAnyCachedKey.call(void 0, hashedPassword);
   if (cachedKey) {
@@ -132,12 +132,24 @@ getOrGenerateScryptKey_fn = function(password, o, salt) {
     };
   }
   const newSalt = salt ?? _webcrypto.randomBytes.call(void 0, SCRYPT_SALT_SIZE);
-  const newKey = _scrypt.scrypt.call(void 0, password, newSalt, {
-    N: o.N,
-    r: o.r,
-    p: o.p,
-    dkLen: o.dkLen
-  });
+  let newKey;
+  if (nativeScryptCrypto) {
+    newKey = await nativeScryptCrypto(
+      password,
+      newSalt,
+      o.N,
+      o.r,
+      o.p,
+      o.dkLen
+    );
+  } else {
+    newKey = await _scrypt.scryptAsync.call(void 0, password, newSalt, {
+      N: o.N,
+      r: o.r,
+      p: o.p,
+      dkLen: o.dkLen
+    });
+  }
   _chunkUAXWZN5Jjs.setCachedKey.call(void 0, hashedPassword, newSalt, newKey);
   return {
     key: newKey,
@@ -155,4 +167,4 @@ function createSHA256Hash(data) {
 
 
 exports.encryption_default = encryption_default; exports.createSHA256Hash = createSHA256Hash;
-//# sourceMappingURL=chunk-T3FNDVE3.js.map
+//# sourceMappingURL=chunk-BKQE7DB5.js.map

package/dist/chunk-BKQE7DB5.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controllers/user-storage/encryption/encryption.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,SAAS,WAAW;AACpB,SAAS,mBAAmB;AAC5B,SAAS,mBAAmB;AAC5B,SAAS,cAAc;AACvB,SAAS,aAAa,aAAa,kBAAkB;AA8BrD,IAAM,uBAAuB;AAC7B,IAAM,qBAAqB;AAI3B,IAAM,mBAAmB;AACzB,IAAM,WAAW,KAAK;AAEtB,IAAM,WAAW;AAEjB,IAAM,WAAW;AA5CjB;AA8CA,IAAM,qBAAN,MAAyB;AAAA,EAAzB;AA2CE,uBAAM;AA2CN,uBAAM;AAoCN;AASA;AAYA,uBAAM;AAAA;AAAA,EA9IN,MAAM,cACJ,WACA,UACA,oBACiB;AACjB,QAAI;AACF,aAAO,MAAM,sBAAK,sCAAL,WACX,WACA,UACA;AAAA,IAEJ,SAAS,GAAG;AACV,YAAM,eAAe,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,CAAC;AACtE,YAAM,IAAI,MAAM,8BAA8B,YAAY,EAAE;AAAA,IAC9D;AAAA,EACF;AAAA,EAEA,MAAM,cACJ,kBACA,UACA,oBACiB;AACjB,QAAI;AACF,YAAM,gBAAkC,KAAK,MAAM,gBAAgB;AACnE,UAAI,cAAc,MAAM,KAAK;AAC3B,YAAI,cAAc,MAAM,UAAU;AAChC,iBAAO,MAAM,sBAAK,sCAAL,WACX,eACA,UACA;AAAA,QAEJ;AAAA,MACF;AACA,YAAM,IAAI;AAAA,QACR,wCAAwC,gBAAgB;AAAA,MAC1D;AAAA,IACF,SAAS,GAAG;AACV,YAAM,eAAe,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,CAAC;AACtE,YAAM,IAAI,MAAM,8BAA8B,YAAY,EAAE;AAAA,IAC9D;AAAA,EACF;AAoJF;AAlJQ;AAAA,qBAAgB,eACpB,WACA,UACA,oBACiB;AACjB,QAAM,EAAE,KAAK,KAAK,IAAI,MAAM,sBAAK,oDAAL,WAC1B,UACA;AAAA,IACE,GAAG;AAAA,IACH,GAAG;AAAA,IACH,GAAG;AAAA,IACH,OAAO;AAAA,EACT,GACA,YAAY,gBAAgB,GAC5B;AAIF,QAAM,eAAe,YAAY,SAAS;AAC1C,QAAM,4BAA4B;AAAA,IAChC;AAAA,IACA,sBAAK,sBAAL,WAAc,cAAc;AAAA,EAC9B;AAGA,QAAM,gBAAgB,kBAAkB,yBAAyB;AAEjE,QAAM,mBAAqC;AAAA,IACzC,GAAG;AAAA,IACH,GAAG;AAAA,IACH,GAAG;AAAA,IACH,GAAG;AAAA,MACD,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,MACH,OAAO;AAAA,IACT;AAAA,IACA,SAAS;AAAA,EACX;AAEA,SAAO,KAAK,UAAU,gBAAgB;AACxC;AAEM;AAAA,qBAAgB,eACpB,MACA,UACA,oBACiB;AACjB,QAAM,EAAE,GAAG,GAAG,iCAAiC,QAAQ,IAAI;AAG3D,QAAM,4BAA4B;AAAA,IAChC;AAAA,EACF;AAGA,QAAM,OAAO,0BAA0B,MAAM,GAAG,OAAO;AACvD,QAAM,qBAAqB,0BAA0B;AAAA,IACnD;AAAA,IACA,0BAA0B;AAAA,EAC5B;AAGA,QAAM,EAAE,IAAI,IAAI,MAAM,sBAAK,oDAAL,WACpB,UACA;AAAA,IACE,GAAG,EAAE;AAAA,IACL,GAAG,EAAE;AAAA,IACL,GAAG,EAAE;AAAA,IACL,OAAO,EAAE;AAAA,EACX,GACA,MACA;AAIF,SAAO,YAAY,sBAAK,sBAAL,WAAc,oBAAoB,IAAI;AAC3D;AAEA;AAAA,aAAQ,SAAC,WAAuB,KAA6B;AAC3D,QAAM,QAAQ,YAAY,oBAAoB;AAG9C,QAAM,aAAa,IAAI,KAAK,KAAK,EAAE,QAAQ,SAAS;AAEpD,SAAO,YAAY,OAAO,UAAU;AACtC;AAEA;AAAA,aAAQ,SAAC,oBAAgC,KAA6B;AAEpE,QAAM,QAAQ,mBAAmB,MAAM,GAAG,oBAAoB;AAC9D,QAAM,aAAa,mBAAmB;AAAA,IACpC;AAAA,IACA,mBAAmB;AAAA,EACrB;AAGA,SAAO,IAAI,KAAK,KAAK,EAAE,QAAQ,UAAU;AAC3C;AAEM;AAAA,4BAAuB,eAC3B,UACA,GACA,MACA,oBACA;AACA,QAAM,iBAAiB,iBAAiB,QAAQ;AAChD,QAAM,YAAY,OACd,mBAAmB,gBAAgB,IAAI,IACvC,gBAAgB,cAAc;AAElC,MAAI,WAAW;AACb,WAAO;AAAA,MACL,KAAK,UAAU;AAAA,MACf,MAAM,UAAU;AAAA,IAClB;AAAA,EACF;AAEA,QAAM,UAAU,QAAQ,YAAY,gBAAgB;AAEpD,MAAI;AAEJ,MAAI,oBAAoB;AACtB,aAAS,MAAM;AAAA,MACb;AAAA,MACA;AAAA,MACA,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,IACJ;AAAA,EACF,OAAO;AACL,aAAS,MAAM,YAAY,UAAU,SAAS;AAAA,MAC5C,GAAG,EAAE;AAAA,MACL,GAAG,EAAE;AAAA,MACL,GAAG,EAAE;AAAA,MACL,OAAO,EAAE;AAAA,IACX,CAAC;AAAA,EACH;AACA,eAAa,gBAAgB,SAAS,MAAM;AAE5C,SAAO;AAAA,IACL,KAAK;AAAA,IACL,MAAM;AAAA,EACR;AACF;AAGF,IAAM,aAAa,IAAI,mBAAmB;AAC1C,IAAO,qBAAQ;AAOR,SAAS,iBAAiB,MAAsB;AACrD,QAAM,aAAa,OAAO,IAAI;AAC9B,SAAO,WAAW,UAAU;AAC9B","sourcesContent":["import { gcm } from '@noble/ciphers/aes';\nimport { randomBytes } from '@noble/ciphers/webcrypto';\nimport { scryptAsync } from '@noble/hashes/scrypt';\nimport { sha256 } from '@noble/hashes/sha256';\nimport { utf8ToBytes, concatBytes, bytesToHex } from '@noble/hashes/utils';\n\nimport type { NativeScrypt } from '../UserStorageController';\nimport { getAnyCachedKey, getCachedKeyBySalt, setCachedKey } from './cache';\nimport { base64ToByteArray, byteArrayToBase64, bytesToUtf8 } from './utils';\n\nexport type EncryptedPayload = {\n  // version\n  v: '1';\n\n  // key derivation function algorithm - scrypt\n  t: 'scrypt';\n\n  // data\n  d: string;\n\n  // encryption options - scrypt\n  o: {\n    // eslint-disable-next-line @typescript-eslint/naming-convention\n    N: number;\n    r: number;\n    p: number;\n    dkLen: number;\n  };\n\n  // Salt options\n  saltLen: number;\n};\n\n// Nonce/Key Sizes\nconst ALGORITHM_NONCE_SIZE = 12; // 12 bytes\nconst ALGORITHM_KEY_SIZE = 16; // 16 bytes\n\n// Scrypt settings\n// see: https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html#scrypt\nconst SCRYPT_SALT_SIZE = 16; // 16 bytes\nconst SCRYPT_N = 2 ** 17; // CPU/memory cost parameter (must be a power of 2, > 1)\n// eslint-disable-next-line @typescript-eslint/naming-convention\nconst SCRYPT_r = 8; // Block size parameter\n// eslint-disable-next-line @typescript-eslint/naming-convention\nconst SCRYPT_p = 1; // Parallelization parameter\n\nclass EncryptorDecryptor {\n  async encryptString(\n    plaintext: string,\n    password: string,\n    nativeScryptCrypto?: NativeScrypt,\n  ): Promise<string> {\n    try {\n      return await this.#encryptStringV1(\n        plaintext,\n        password,\n        nativeScryptCrypto,\n      );\n    } catch (e) {\n      const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);\n      throw new Error(`Unable to encrypt string - ${errorMessage}`);\n    }\n  }\n\n  async decryptString(\n    encryptedDataStr: string,\n    password: string,\n    nativeScryptCrypto?: NativeScrypt,\n  ): Promise<string> {\n    try {\n      const encryptedData: EncryptedPayload = JSON.parse(encryptedDataStr);\n      if (encryptedData.v === '1') {\n        if (encryptedData.t === 'scrypt') {\n          return await this.#decryptStringV1(\n            encryptedData,\n            password,\n            nativeScryptCrypto,\n          );\n        }\n      }\n      throw new Error(\n        `Unsupported encrypted data payload - ${encryptedDataStr}`,\n      );\n    } catch (e) {\n      const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);\n      throw new Error(`Unable to decrypt string - ${errorMessage}`);\n    }\n  }\n\n  async #encryptStringV1(\n    plaintext: string,\n    password: string,\n    nativeScryptCrypto?: NativeScrypt,\n  ): Promise<string> {\n    const { key, salt } = await this.#getOrGenerateScryptKey(\n      password,\n      {\n        N: SCRYPT_N,\n        r: SCRYPT_r,\n        p: SCRYPT_p,\n        dkLen: ALGORITHM_KEY_SIZE,\n      },\n      randomBytes(SCRYPT_SALT_SIZE),\n      nativeScryptCrypto,\n    );\n\n    // Encrypt and prepend salt.\n    const plaintextRaw = utf8ToBytes(plaintext);\n    const ciphertextAndNonceAndSalt = concatBytes(\n      salt,\n      this.#encrypt(plaintextRaw, key),\n    );\n\n    // Convert to Base64\n    const encryptedData = byteArrayToBase64(ciphertextAndNonceAndSalt);\n\n    const encryptedPayload: EncryptedPayload = {\n      v: '1',\n      t: 'scrypt',\n      d: encryptedData,\n      o: {\n        N: SCRYPT_N,\n        r: SCRYPT_r,\n        p: SCRYPT_p,\n        dkLen: ALGORITHM_KEY_SIZE,\n      },\n      saltLen: SCRYPT_SALT_SIZE,\n    };\n\n    return JSON.stringify(encryptedPayload);\n  }\n\n  async #decryptStringV1(\n    data: EncryptedPayload,\n    password: string,\n    nativeScryptCrypto?: NativeScrypt,\n  ): Promise<string> {\n    const { o, d: base64CiphertextAndNonceAndSalt, saltLen } = data;\n\n    // Decode the base64.\n    const ciphertextAndNonceAndSalt = base64ToByteArray(\n      base64CiphertextAndNonceAndSalt,\n    );\n\n    // Create buffers of salt and ciphertextAndNonce.\n    const salt = ciphertextAndNonceAndSalt.slice(0, saltLen);\n    const ciphertextAndNonce = ciphertextAndNonceAndSalt.slice(\n      saltLen,\n      ciphertextAndNonceAndSalt.length,\n    );\n\n    // Derive the key.\n    const { key } = await this.#getOrGenerateScryptKey(\n      password,\n      {\n        N: o.N,\n        r: o.r,\n        p: o.p,\n        dkLen: o.dkLen,\n      },\n      salt,\n      nativeScryptCrypto,\n    );\n\n    // Decrypt and return result.\n    return bytesToUtf8(this.#decrypt(ciphertextAndNonce, key));\n  }\n\n  #encrypt(plaintext: Uint8Array, key: Uint8Array): Uint8Array {\n    const nonce = randomBytes(ALGORITHM_NONCE_SIZE);\n\n    // Encrypt and prepend nonce.\n    const ciphertext = gcm(key, nonce).encrypt(plaintext);\n\n    return concatBytes(nonce, ciphertext);\n  }\n\n  #decrypt(ciphertextAndNonce: Uint8Array, key: Uint8Array): Uint8Array {\n    // Create buffers of nonce and ciphertext.\n    const nonce = ciphertextAndNonce.slice(0, ALGORITHM_NONCE_SIZE);\n    const ciphertext = ciphertextAndNonce.slice(\n      ALGORITHM_NONCE_SIZE,\n      ciphertextAndNonce.length,\n    );\n\n    // Decrypt and return result.\n    return gcm(key, nonce).decrypt(ciphertext);\n  }\n\n  async #getOrGenerateScryptKey(\n    password: string,\n    o: EncryptedPayload['o'],\n    salt?: Uint8Array,\n    nativeScryptCrypto?: NativeScrypt,\n  ) {\n    const hashedPassword = createSHA256Hash(password);\n    const cachedKey = salt\n      ? getCachedKeyBySalt(hashedPassword, salt)\n      : getAnyCachedKey(hashedPassword);\n\n    if (cachedKey) {\n      return {\n        key: cachedKey.key,\n        salt: cachedKey.salt,\n      };\n    }\n\n    const newSalt = salt ?? randomBytes(SCRYPT_SALT_SIZE);\n\n    let newKey: Uint8Array;\n\n    if (nativeScryptCrypto) {\n      newKey = await nativeScryptCrypto(\n        password,\n        newSalt,\n        o.N,\n        o.r,\n        o.p,\n        o.dkLen,\n      );\n    } else {\n      newKey = await scryptAsync(password, newSalt, {\n        N: o.N,\n        r: o.r,\n        p: o.p,\n        dkLen: o.dkLen,\n      });\n    }\n    setCachedKey(hashedPassword, newSalt, newKey);\n\n    return {\n      key: newKey,\n      salt: newSalt,\n    };\n  }\n}\n\nconst encryption = new EncryptorDecryptor();\nexport default encryption;\n\n/**\n * Receive a SHA256 hash from a given string\n * @param data - input\n * @returns sha256 hash\n */\nexport function createSHA256Hash(data: string): string {\n  const hashedData = sha256(data);\n  return bytesToHex(hashedData);\n}\n"]}

package/dist/{chunk-K5UKU454.mjs → chunk-COBJUBZE.mjs}

@@ -16,7 +16,7 @@ import {
 // src/controllers/user-storage/encryption/encryption.ts
 import { gcm } from "@noble/ciphers/aes";
 import { randomBytes } from "@noble/ciphers/webcrypto";
-import { scrypt } from "@noble/hashes/scrypt";
+import { scryptAsync } from "@noble/hashes/scrypt";
 import { sha256 } from "@noble/hashes/sha256";
 import { utf8ToBytes, concatBytes, bytesToHex } from "@noble/hashes/utils";
 var ALGORITHM_NONCE_SIZE = 12;
@@ -34,20 +34,20 @@ var EncryptorDecryptor = class {
     __privateAdd(this, _decrypt);
     __privateAdd(this, _getOrGenerateScryptKey);
   }
-  encryptString(plaintext, password) {
+  async encryptString(plaintext, password, nativeScryptCrypto) {
     try {
-      return __privateMethod(this, _encryptStringV1, encryptStringV1_fn).call(this, plaintext, password);
+      return await __privateMethod(this, _encryptStringV1, encryptStringV1_fn).call(this, plaintext, password, nativeScryptCrypto);
     } catch (e) {
       const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);
       throw new Error(`Unable to encrypt string - ${errorMessage}`);
     }
   }
-  decryptString(encryptedDataStr, password) {
+  async decryptString(encryptedDataStr, password, nativeScryptCrypto) {
     try {
       const encryptedData = JSON.parse(encryptedDataStr);
       if (encryptedData.v === "1") {
         if (encryptedData.t === "scrypt") {
-          return __privateMethod(this, _decryptStringV1, decryptStringV1_fn).call(this, encryptedData, password);
+          return await __privateMethod(this, _decryptStringV1, decryptStringV1_fn).call(this, encryptedData, password, nativeScryptCrypto);
         }
       }
       throw new Error(
@@ -60,13 +60,13 @@ var EncryptorDecryptor = class {
   }
 };
 _encryptStringV1 = new WeakSet();
-encryptStringV1_fn = function(plaintext, password) {
-  const { key, salt } = __privateMethod(this, _getOrGenerateScryptKey, getOrGenerateScryptKey_fn).call(this, password, {
+encryptStringV1_fn = async function(plaintext, password, nativeScryptCrypto) {
+  const { key, salt } = await __privateMethod(this, _getOrGenerateScryptKey, getOrGenerateScryptKey_fn).call(this, password, {
     N: SCRYPT_N,
     r: SCRYPT_r,
     p: SCRYPT_p,
     dkLen: ALGORITHM_KEY_SIZE
-  });
+  }, randomBytes(SCRYPT_SALT_SIZE), nativeScryptCrypto);
   const plaintextRaw = utf8ToBytes(plaintext);
   const ciphertextAndNonceAndSalt = concatBytes(
     salt,
@@ -88,7 +88,7 @@ encryptStringV1_fn = function(plaintext, password) {
   return JSON.stringify(encryptedPayload);
 };
 _decryptStringV1 = new WeakSet();
-decryptStringV1_fn = function(data, password) {
+decryptStringV1_fn = async function(data, password, nativeScryptCrypto) {
   const { o, d: base64CiphertextAndNonceAndSalt, saltLen } = data;
   const ciphertextAndNonceAndSalt = base64ToByteArray(
     base64CiphertextAndNonceAndSalt
@@ -98,12 +98,12 @@ decryptStringV1_fn = function(data, password) {
     saltLen,
     ciphertextAndNonceAndSalt.length
   );
-  const { key } = __privateMethod(this, _getOrGenerateScryptKey, getOrGenerateScryptKey_fn).call(this, password, {
+  const { key } = await __privateMethod(this, _getOrGenerateScryptKey, getOrGenerateScryptKey_fn).call(this, password, {
     N: o.N,
     r: o.r,
     p: o.p,
     dkLen: o.dkLen
-  }, salt);
+  }, salt, nativeScryptCrypto);
   return bytesToUtf8(__privateMethod(this, _decrypt, decrypt_fn).call(this, ciphertextAndNonce, key));
 };
 _encrypt = new WeakSet();
@@ -122,7 +122,7 @@ decrypt_fn = function(ciphertextAndNonce, key) {
   return gcm(key, nonce).decrypt(ciphertext);
 };
 _getOrGenerateScryptKey = new WeakSet();
-getOrGenerateScryptKey_fn = function(password, o, salt) {
+getOrGenerateScryptKey_fn = async function(password, o, salt, nativeScryptCrypto) {
   const hashedPassword = createSHA256Hash(password);
   const cachedKey = salt ? getCachedKeyBySalt(hashedPassword, salt) : getAnyCachedKey(hashedPassword);
   if (cachedKey) {
@@ -132,12 +132,24 @@ getOrGenerateScryptKey_fn = function(password, o, salt) {
     };
   }
   const newSalt = salt ?? randomBytes(SCRYPT_SALT_SIZE);
-  const newKey = scrypt(password, newSalt, {
-    N: o.N,
-    r: o.r,
-    p: o.p,
-    dkLen: o.dkLen
-  });
+  let newKey;
+  if (nativeScryptCrypto) {
+    newKey = await nativeScryptCrypto(
+      password,
+      newSalt,
+      o.N,
+      o.r,
+      o.p,
+      o.dkLen
+    );
+  } else {
+    newKey = await scryptAsync(password, newSalt, {
+      N: o.N,
+      r: o.r,
+      p: o.p,
+      dkLen: o.dkLen
+    });
+  }
   setCachedKey(hashedPassword, newSalt, newKey);
   return {
     key: newKey,
@@ -155,4 +167,4 @@ export {
   encryption_default,
   createSHA256Hash
 };
-//# sourceMappingURL=chunk-K5UKU454.mjs.map
+//# sourceMappingURL=chunk-COBJUBZE.mjs.map