@metamask/profile-sync-controller 0.3.0 → 0.5.0

package/dist/chunk-COBJUBZE.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controllers/user-storage/encryption/encryption.ts"],"sourcesContent":["import { gcm } from '@noble/ciphers/aes';\nimport { randomBytes } from '@noble/ciphers/webcrypto';\nimport { scryptAsync } from '@noble/hashes/scrypt';\nimport { sha256 } from '@noble/hashes/sha256';\nimport { utf8ToBytes, concatBytes, bytesToHex } from '@noble/hashes/utils';\n\nimport type { NativeScrypt } from '../UserStorageController';\nimport { getAnyCachedKey, getCachedKeyBySalt, setCachedKey } from './cache';\nimport { base64ToByteArray, byteArrayToBase64, bytesToUtf8 } from './utils';\n\nexport type EncryptedPayload = {\n  // version\n  v: '1';\n\n  // key derivation function algorithm - scrypt\n  t: 'scrypt';\n\n  // data\n  d: string;\n\n  // encryption options - scrypt\n  o: {\n    // eslint-disable-next-line @typescript-eslint/naming-convention\n    N: number;\n    r: number;\n    p: number;\n    dkLen: number;\n  };\n\n  // Salt options\n  saltLen: number;\n};\n\n// Nonce/Key Sizes\nconst ALGORITHM_NONCE_SIZE = 12; // 12 bytes\nconst ALGORITHM_KEY_SIZE = 16; // 16 bytes\n\n// Scrypt settings\n// see: https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html#scrypt\nconst SCRYPT_SALT_SIZE = 16; // 16 bytes\nconst SCRYPT_N = 2 ** 17; // CPU/memory cost parameter (must be a power of 2, > 1)\n// eslint-disable-next-line @typescript-eslint/naming-convention\nconst SCRYPT_r = 8; // Block size parameter\n// eslint-disable-next-line @typescript-eslint/naming-convention\nconst SCRYPT_p = 1; // Parallelization parameter\n\nclass EncryptorDecryptor {\n  async encryptString(\n    plaintext: string,\n    password: string,\n    nativeScryptCrypto?: NativeScrypt,\n  ): Promise<string> {\n    try {\n      return await this.#encryptStringV1(\n        plaintext,\n        password,\n        nativeScryptCrypto,\n      );\n    } catch (e) {\n      const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);\n      throw new Error(`Unable to encrypt string - ${errorMessage}`);\n    }\n  }\n\n  async decryptString(\n    encryptedDataStr: string,\n    password: string,\n    nativeScryptCrypto?: NativeScrypt,\n  ): Promise<string> {\n    try {\n      const encryptedData: EncryptedPayload = JSON.parse(encryptedDataStr);\n      if (encryptedData.v === '1') {\n        if (encryptedData.t === 'scrypt') {\n          return await this.#decryptStringV1(\n            encryptedData,\n            password,\n            nativeScryptCrypto,\n          );\n        }\n      }\n      throw new Error(\n        `Unsupported encrypted data payload - ${encryptedDataStr}`,\n      );\n    } catch (e) {\n      const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);\n      throw new Error(`Unable to decrypt string - ${errorMessage}`);\n    }\n  }\n\n  async #encryptStringV1(\n    plaintext: string,\n    password: string,\n    nativeScryptCrypto?: NativeScrypt,\n  ): Promise<string> {\n    const { key, salt } = await this.#getOrGenerateScryptKey(\n      password,\n      {\n        N: SCRYPT_N,\n        r: SCRYPT_r,\n        p: SCRYPT_p,\n        dkLen: ALGORITHM_KEY_SIZE,\n      },\n      randomBytes(SCRYPT_SALT_SIZE),\n      nativeScryptCrypto,\n    );\n\n    // Encrypt and prepend salt.\n    const plaintextRaw = utf8ToBytes(plaintext);\n    const ciphertextAndNonceAndSalt = concatBytes(\n      salt,\n      this.#encrypt(plaintextRaw, key),\n    );\n\n    // Convert to Base64\n    const encryptedData = byteArrayToBase64(ciphertextAndNonceAndSalt);\n\n    const encryptedPayload: EncryptedPayload = {\n      v: '1',\n      t: 'scrypt',\n      d: encryptedData,\n      o: {\n        N: SCRYPT_N,\n        r: SCRYPT_r,\n        p: SCRYPT_p,\n        dkLen: ALGORITHM_KEY_SIZE,\n      },\n      saltLen: SCRYPT_SALT_SIZE,\n    };\n\n    return JSON.stringify(encryptedPayload);\n  }\n\n  async #decryptStringV1(\n    data: EncryptedPayload,\n    password: string,\n    nativeScryptCrypto?: NativeScrypt,\n  ): Promise<string> {\n    const { o, d: base64CiphertextAndNonceAndSalt, saltLen } = data;\n\n    // Decode the base64.\n    const ciphertextAndNonceAndSalt = base64ToByteArray(\n      base64CiphertextAndNonceAndSalt,\n    );\n\n    // Create buffers of salt and ciphertextAndNonce.\n    const salt = ciphertextAndNonceAndSalt.slice(0, saltLen);\n    const ciphertextAndNonce = ciphertextAndNonceAndSalt.slice(\n      saltLen,\n      ciphertextAndNonceAndSalt.length,\n    );\n\n    // Derive the key.\n    const { key } = await this.#getOrGenerateScryptKey(\n      password,\n      {\n        N: o.N,\n        r: o.r,\n        p: o.p,\n        dkLen: o.dkLen,\n      },\n      salt,\n      nativeScryptCrypto,\n    );\n\n    // Decrypt and return result.\n    return bytesToUtf8(this.#decrypt(ciphertextAndNonce, key));\n  }\n\n  #encrypt(plaintext: Uint8Array, key: Uint8Array): Uint8Array {\n    const nonce = randomBytes(ALGORITHM_NONCE_SIZE);\n\n    // Encrypt and prepend nonce.\n    const ciphertext = gcm(key, nonce).encrypt(plaintext);\n\n    return concatBytes(nonce, ciphertext);\n  }\n\n  #decrypt(ciphertextAndNonce: Uint8Array, key: Uint8Array): Uint8Array {\n    // Create buffers of nonce and ciphertext.\n    const nonce = ciphertextAndNonce.slice(0, ALGORITHM_NONCE_SIZE);\n    const ciphertext = ciphertextAndNonce.slice(\n      ALGORITHM_NONCE_SIZE,\n      ciphertextAndNonce.length,\n    );\n\n    // Decrypt and return result.\n    return gcm(key, nonce).decrypt(ciphertext);\n  }\n\n  async #getOrGenerateScryptKey(\n    password: string,\n    o: EncryptedPayload['o'],\n    salt?: Uint8Array,\n    nativeScryptCrypto?: NativeScrypt,\n  ) {\n    const hashedPassword = createSHA256Hash(password);\n    const cachedKey = salt\n      ? getCachedKeyBySalt(hashedPassword, salt)\n      : getAnyCachedKey(hashedPassword);\n\n    if (cachedKey) {\n      return {\n        key: cachedKey.key,\n        salt: cachedKey.salt,\n      };\n    }\n\n    const newSalt = salt ?? randomBytes(SCRYPT_SALT_SIZE);\n\n    let newKey: Uint8Array;\n\n    if (nativeScryptCrypto) {\n      newKey = await nativeScryptCrypto(\n        password,\n        newSalt,\n        o.N,\n        o.r,\n        o.p,\n        o.dkLen,\n      );\n    } else {\n      newKey = await scryptAsync(password, newSalt, {\n        N: o.N,\n        r: o.r,\n        p: o.p,\n        dkLen: o.dkLen,\n      });\n    }\n    setCachedKey(hashedPassword, newSalt, newKey);\n\n    return {\n      key: newKey,\n      salt: newSalt,\n    };\n  }\n}\n\nconst encryption = new EncryptorDecryptor();\nexport default encryption;\n\n/**\n * Receive a SHA256 hash from a given string\n * @param data - input\n * @returns sha256 hash\n */\nexport function createSHA256Hash(data: string): string {\n  const hashedData = sha256(data);\n  return bytesToHex(hashedData);\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAAA,SAAS,WAAW;AACpB,SAAS,mBAAmB;AAC5B,SAAS,mBAAmB;AAC5B,SAAS,cAAc;AACvB,SAAS,aAAa,aAAa,kBAAkB;AA8BrD,IAAM,uBAAuB;AAC7B,IAAM,qBAAqB;AAI3B,IAAM,mBAAmB;AACzB,IAAM,WAAW,KAAK;AAEtB,IAAM,WAAW;AAEjB,IAAM,WAAW;AA5CjB;AA8CA,IAAM,qBAAN,MAAyB;AAAA,EAAzB;AA2CE,uBAAM;AA2CN,uBAAM;AAoCN;AASA;AAYA,uBAAM;AAAA;AAAA,EA9IN,MAAM,cACJ,WACA,UACA,oBACiB;AACjB,QAAI;AACF,aAAO,MAAM,sBAAK,sCAAL,WACX,WACA,UACA;AAAA,IAEJ,SAAS,GAAG;AACV,YAAM,eAAe,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,CAAC;AACtE,YAAM,IAAI,MAAM,8BAA8B,YAAY,EAAE;AAAA,IAC9D;AAAA,EACF;AAAA,EAEA,MAAM,cACJ,kBACA,UACA,oBACiB;AACjB,QAAI;AACF,YAAM,gBAAkC,KAAK,MAAM,gBAAgB;AACnE,UAAI,cAAc,MAAM,KAAK;AAC3B,YAAI,cAAc,MAAM,UAAU;AAChC,iBAAO,MAAM,sBAAK,sCAAL,WACX,eACA,UACA;AAAA,QAEJ;AAAA,MACF;AACA,YAAM,IAAI;AAAA,QACR,wCAAwC,gBAAgB;AAAA,MAC1D;AAAA,IACF,SAAS,GAAG;AACV,YAAM,eAAe,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,CAAC;AACtE,YAAM,IAAI,MAAM,8BAA8B,YAAY,EAAE;AAAA,IAC9D;AAAA,EACF;AAoJF;AAlJQ;AAAA,qBAAgB,eACpB,WACA,UACA,oBACiB;AACjB,QAAM,EAAE,KAAK,KAAK,IAAI,MAAM,sBAAK,oDAAL,WAC1B,UACA;AAAA,IACE,GAAG;AAAA,IACH,GAAG;AAAA,IACH,GAAG;AAAA,IACH,OAAO;AAAA,EACT,GACA,YAAY,gBAAgB,GAC5B;AAIF,QAAM,eAAe,YAAY,SAAS;AAC1C,QAAM,4BAA4B;AAAA,IAChC;AAAA,IACA,sBAAK,sBAAL,WAAc,cAAc;AAAA,EAC9B;AAGA,QAAM,gBAAgB,kBAAkB,yBAAyB;AAEjE,QAAM,mBAAqC;AAAA,IACzC,GAAG;AAAA,IACH,GAAG;AAAA,IACH,GAAG;AAAA,IACH,GAAG;AAAA,MACD,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,MACH,OAAO;AAAA,IACT;AAAA,IACA,SAAS;AAAA,EACX;AAEA,SAAO,KAAK,UAAU,gBAAgB;AACxC;AAEM;AAAA,qBAAgB,eACpB,MACA,UACA,oBACiB;AACjB,QAAM,EAAE,GAAG,GAAG,iCAAiC,QAAQ,IAAI;AAG3D,QAAM,4BAA4B;AAAA,IAChC;AAAA,EACF;AAGA,QAAM,OAAO,0BAA0B,MAAM,GAAG,OAAO;AACvD,QAAM,qBAAqB,0BAA0B;AAAA,IACnD;AAAA,IACA,0BAA0B;AAAA,EAC5B;AAGA,QAAM,EAAE,IAAI,IAAI,MAAM,sBAAK,oDAAL,WACpB,UACA;AAAA,IACE,GAAG,EAAE;AAAA,IACL,GAAG,EAAE;AAAA,IACL,GAAG,EAAE;AAAA,IACL,OAAO,EAAE;AAAA,EACX,GACA,MACA;AAIF,SAAO,YAAY,sBAAK,sBAAL,WAAc,oBAAoB,IAAI;AAC3D;AAEA;AAAA,aAAQ,SAAC,WAAuB,KAA6B;AAC3D,QAAM,QAAQ,YAAY,oBAAoB;AAG9C,QAAM,aAAa,IAAI,KAAK,KAAK,EAAE,QAAQ,SAAS;AAEpD,SAAO,YAAY,OAAO,UAAU;AACtC;AAEA;AAAA,aAAQ,SAAC,oBAAgC,KAA6B;AAEpE,QAAM,QAAQ,mBAAmB,MAAM,GAAG,oBAAoB;AAC9D,QAAM,aAAa,mBAAmB;AAAA,IACpC;AAAA,IACA,mBAAmB;AAAA,EACrB;AAGA,SAAO,IAAI,KAAK,KAAK,EAAE,QAAQ,UAAU;AAC3C;AAEM;AAAA,4BAAuB,eAC3B,UACA,GACA,MACA,oBACA;AACA,QAAM,iBAAiB,iBAAiB,QAAQ;AAChD,QAAM,YAAY,OACd,mBAAmB,gBAAgB,IAAI,IACvC,gBAAgB,cAAc;AAElC,MAAI,WAAW;AACb,WAAO;AAAA,MACL,KAAK,UAAU;AAAA,MACf,MAAM,UAAU;AAAA,IAClB;AAAA,EACF;AAEA,QAAM,UAAU,QAAQ,YAAY,gBAAgB;AAEpD,MAAI;AAEJ,MAAI,oBAAoB;AACtB,aAAS,MAAM;AAAA,MACb;AAAA,MACA;AAAA,MACA,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,IACJ;AAAA,EACF,OAAO;AACL,aAAS,MAAM,YAAY,UAAU,SAAS;AAAA,MAC5C,GAAG,EAAE;AAAA,MACL,GAAG,EAAE;AAAA,MACL,GAAG,EAAE;AAAA,MACL,OAAO,EAAE;AAAA,IACX,CAAC;AAAA,EACH;AACA,eAAa,gBAAgB,SAAS,MAAM;AAE5C,SAAO;AAAA,IACL,KAAK;AAAA,IACL,MAAM;AAAA,EACR;AACF;AAGF,IAAM,aAAa,IAAI,mBAAmB;AAC1C,IAAO,qBAAQ;AAOR,SAAS,iBAAiB,MAAsB;AACrD,QAAM,aAAa,OAAO,IAAI;AAC9B,SAAO,WAAW,UAAU;AAC9B;","names":[]}

package/dist/{chunk-5TOWF6UW.mjs → chunk-KHASG4H3.mjs}

@@ -1,6 +1,6 @@
 import {
   encryption_default
-} from "./chunk-K5UKU454.mjs";
+} from "./chunk-COBJUBZE.mjs";
 
 // src/controllers/user-storage/encryption/index.ts
 var encryption_default2 = encryption_default;
@@ -8,4 +8,4 @@ var encryption_default2 = encryption_default;
 export {
   encryption_default2 as encryption_default
 };
-//# sourceMappingURL=chunk-5TOWF6UW.mjs.map
+//# sourceMappingURL=chunk-KHASG4H3.mjs.map

package/dist/{chunk-4WXZXVLI.mjs → chunk-M7AUA5W7.mjs}

@@ -1,12 +1,12 @@
 import {
   JwtBearerAuth
-} from "./chunk-YKOMKXG4.mjs";
+} from "./chunk-PU7MAIST.mjs";
 import {
   SIWEJwtBearerAuth
 } from "./chunk-2CWF7ZTL.mjs";
 import {
   SRPJwtBearerAuth
-} from "./chunk-J7NSK6BO.mjs";
+} from "./chunk-TP7SP3AG.mjs";
 import {
   AuthType
 } from "./chunk-CAIIVJAO.mjs";
@@ -15,15 +15,16 @@ import {
   SNAP_ORIGIN,
   connectSnap,
   getSnap,
-  getSnaps
-} from "./chunk-5EBUFNAN.mjs";
+  getSnaps,
+  isSnapConnected
+} from "./chunk-UEWCUBMX.mjs";
 import {
   STORAGE_URL,
   UserStorage
-} from "./chunk-E7Z5TCQT.mjs";
+} from "./chunk-MK7ABX2V.mjs";
 import {
   createSHA256Hash
-} from "./chunk-K5UKU454.mjs";
+} from "./chunk-COBJUBZE.mjs";
 import {
   Env,
   Platform,
@@ -68,10 +69,11 @@ __export(sdk_exports, {
   getEnvUrls: () => getEnvUrls,
   getOidcClientId: () => getOidcClientId,
   getSnap: () => getSnap,
-  getSnaps: () => getSnaps
+  getSnaps: () => getSnaps,
+  isSnapConnected: () => isSnapConnected
 });
 
 export {
   sdk_exports
 };
-//# sourceMappingURL=chunk-4WXZXVLI.mjs.map
+//# sourceMappingURL=chunk-M7AUA5W7.mjs.map

package/dist/{chunk-4WXZXVLI.mjs.map → chunk-M7AUA5W7.mjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/sdk/index.ts"],"sourcesContent":["export * from './authentication';\nexport * from './user-storage';\nexport * from './env';\nexport * from './errors';\nexport * from './encryption';\nexport * from './utils/messaging-signing-snap-requests';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;","names":[]}
+{"version":3,"sources":["../src/sdk/index.ts"],"sourcesContent":["export * from './authentication';\nexport * from './user-storage';\nexport * from './env';\nexport * from './errors';\nexport * from './encryption';\nexport * from './utils/messaging-signing-snap-requests';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;","names":[]}

package/dist/{chunk-E7Z5TCQT.mjs → chunk-MK7ABX2V.mjs}

@@ -1,12 +1,12 @@
 import {
   createEntryPath
-} from "./chunk-NSSHFDIS.mjs";
+} from "./chunk-2VEMA6OE.mjs";
 import {
   encryption_default
-} from "./chunk-QU4EXKJO.mjs";
+} from "./chunk-6DAK2U35.mjs";
 import {
   createSHA256Hash
-} from "./chunk-K5UKU454.mjs";
+} from "./chunk-COBJUBZE.mjs";
 import {
   getEnvUrls
 } from "./chunk-KTCSRECK.mjs";
@@ -157,7 +157,7 @@ getUserStorageAllFeatureEntries_fn = async function(path) {
       }
       return encryption_default.decryptString(entry.Data, storageKey);
     });
-    return decryptedData;
+    return (await Promise.allSettled(decryptedData)).map((d) => d.status === "fulfilled" ? d.value : void 0).filter((d) => d !== void 0);
   } catch (e) {
     if (e instanceof NotFoundError) {
       throw e;
@@ -183,4 +183,4 @@ export {
   STORAGE_URL,
   UserStorage
 };
-//# sourceMappingURL=chunk-E7Z5TCQT.mjs.map
+//# sourceMappingURL=chunk-MK7ABX2V.mjs.map

package/dist/{chunk-E7Z5TCQT.mjs.map → chunk-MK7ABX2V.mjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/sdk/user-storage.ts"],"sourcesContent":["import type {\n  UserStoragePathWithFeatureAndKey,\n  UserStoragePathWithFeatureOnly,\n} from '../controllers/user-storage/schema';\nimport { createEntryPath } from '../controllers/user-storage/schema';\nimport type { GetUserStorageAllFeatureEntriesResponse } from '../controllers/user-storage/services';\nimport type { IBaseAuth } from './authentication-jwt-bearer/types';\nimport encryption, { createSHA256Hash } from './encryption';\nimport type { Env } from './env';\nimport { getEnvUrls } from './env';\nimport { NotFoundError, UserStorageError } from './errors';\n\nexport const STORAGE_URL = (env: Env, encryptedPath: string) =>\n  `${getEnvUrls(env).userStorageApiUrl}/api/v1/userstorage/${encryptedPath}`;\n\nexport type UserStorageConfig = {\n  env: Env;\n  auth: Pick<IBaseAuth, 'getAccessToken' | 'getUserProfile' | 'signMessage'>;\n};\n\nexport type StorageOptions = {\n  getStorageKey: () => Promise<string | null>;\n  setStorageKey: (val: string) => Promise<void>;\n};\n\nexport type UserStorageOptions = {\n  storage?: StorageOptions;\n};\n\ntype ErrorMessage = {\n  message: string;\n  error: string;\n};\n\nexport class UserStorage {\n  protected config: UserStorageConfig;\n\n  protected options: UserStorageOptions;\n\n  protected env: Env;\n\n  constructor(config: UserStorageConfig, options: UserStorageOptions) {\n    this.env = config.env;\n    this.config = config;\n    this.options = options;\n  }\n\n  async setItem(\n    path: UserStoragePathWithFeatureAndKey,\n    value: string,\n  ): Promise<void> {\n    await this.#upsertUserStorage(path, value);\n  }\n\n  async getItem(path: UserStoragePathWithFeatureAndKey): Promise<string> {\n    return this.#getUserStorage(path);\n  }\n\n  async getAllFeatureItems(\n    path: UserStoragePathWithFeatureOnly,\n  ): Promise<string[] | null> {\n    return this.#getUserStorageAllFeatureEntries(path);\n  }\n\n  async getStorageKey(): Promise<string> {\n    const storageKey = await this.options.storage?.getStorageKey();\n    if (storageKey) {\n      return storageKey;\n    }\n\n    const userProfile = await this.config.auth.getUserProfile();\n    const storageKeySignature = await this.config.auth.signMessage(\n      `metamask:${userProfile.profileId}`,\n    );\n    const hashedStorageKeySignature = createSHA256Hash(storageKeySignature);\n    await this.options.storage?.setStorageKey(hashedStorageKeySignature);\n    return hashedStorageKeySignature;\n  }\n\n  async #upsertUserStorage(\n    path: UserStoragePathWithFeatureAndKey,\n    data: string,\n  ): Promise<void> {\n    try {\n      const headers = await this.#getAuthorizationHeader();\n      const storageKey = await this.getStorageKey();\n      const encryptedData = encryption.encryptString(data, storageKey);\n      const encryptedPath = createEntryPath(path, storageKey);\n\n      const url = new URL(STORAGE_URL(this.env, encryptedPath));\n\n      const response = await fetch(url.toString(), {\n        method: 'PUT',\n        headers: {\n          'Content-Type': 'application/json',\n          ...headers,\n        },\n        body: JSON.stringify({ data: encryptedData }),\n      });\n\n      if (!response.ok) {\n        const responseBody: ErrorMessage = await response.json().catch(() => ({\n          message: 'unknown',\n          error: 'unknown',\n        }));\n        throw new Error(\n          `HTTP error message: ${responseBody.message}, error: ${responseBody.error}`,\n        );\n      }\n    } catch (e) {\n      /* istanbul ignore next */\n      const errorMessage =\n        e instanceof Error ? e.message : JSON.stringify(e ?? '');\n      throw new UserStorageError(\n        `failed to upsert user storage for path '${path}'. ${errorMessage}`,\n      );\n    }\n  }\n\n  async #getUserStorage(\n    path: UserStoragePathWithFeatureAndKey,\n  ): Promise<string> {\n    try {\n      const headers = await this.#getAuthorizationHeader();\n      const storageKey = await this.getStorageKey();\n      const encryptedPath = createEntryPath(path, storageKey);\n\n      const url = new URL(STORAGE_URL(this.env, encryptedPath));\n\n      const response = await fetch(url.toString(), {\n        headers: {\n          'Content-Type': 'application/json',\n          ...headers,\n        },\n      });\n\n      if (response.status === 404) {\n        throw new NotFoundError(\n          `feature/key set not found for path '${path}'.`,\n        );\n      }\n\n      if (!response.ok) {\n        const responseBody = (await response.json()) as ErrorMessage;\n        throw new Error(\n          `HTTP error message: ${responseBody.message}, error: ${responseBody.error}`,\n        );\n      }\n\n      const { Data: encryptedData } = await response.json();\n      return encryption.decryptString(encryptedData, storageKey);\n    } catch (e) {\n      if (e instanceof NotFoundError) {\n        throw e;\n      }\n\n      /* istanbul ignore next */\n      const errorMessage =\n        e instanceof Error ? e.message : JSON.stringify(e ?? '');\n\n      throw new UserStorageError(\n        `failed to get user storage for path '${path}'. ${errorMessage}`,\n      );\n    }\n  }\n\n  async #getUserStorageAllFeatureEntries(\n    path: UserStoragePathWithFeatureOnly,\n  ): Promise<string[] | null> {\n    try {\n      const headers = await this.#getAuthorizationHeader();\n      const storageKey = await this.getStorageKey();\n\n      const url = new URL(STORAGE_URL(this.env, path));\n\n      const response = await fetch(url.toString(), {\n        headers: {\n          'Content-Type': 'application/json',\n          ...headers,\n        },\n      });\n\n      if (response.status === 404) {\n        throw new NotFoundError(`feature not found for path '${path}'.`);\n      }\n\n      if (!response.ok) {\n        const responseBody = (await response.json()) as ErrorMessage;\n        throw new Error(\n          `HTTP error message: ${responseBody.message}, error: ${responseBody.error}`,\n        );\n      }\n\n      const userStorage: GetUserStorageAllFeatureEntriesResponse | null =\n        await response.json();\n\n      if (!Array.isArray(userStorage)) {\n        return null;\n      }\n\n      const decryptedData = userStorage.flatMap((entry) => {\n        if (!entry.Data) {\n          return [];\n        }\n\n        return encryption.decryptString(entry.Data, storageKey);\n      });\n\n      return decryptedData;\n    } catch (e) {\n      if (e instanceof NotFoundError) {\n        throw e;\n      }\n\n      /* istanbul ignore next */\n      const errorMessage =\n        e instanceof Error ? e.message : JSON.stringify(e ?? '');\n\n      throw new UserStorageError(\n        `failed to get user storage for path '${path}'. ${errorMessage}`,\n      );\n    }\n  }\n\n  #createEntryKey(key: string, storageKey: string): string {\n    const hashedKey = createSHA256Hash(key + storageKey);\n    return hashedKey;\n  }\n\n  // TODO: Either fix this lint violation or explain why it's necessary to ignore.\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  async #getAuthorizationHeader(): Promise<{ Authorization: string }> {\n    const accessToken = await this.config.auth.getAccessToken();\n    return { Authorization: `Bearer ${accessToken}` };\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAYO,IAAM,cAAc,CAAC,KAAU,kBACpC,GAAG,WAAW,GAAG,EAAE,iBAAiB,uBAAuB,aAAa;AAb1E;AAkCO,IAAM,cAAN,MAAkB;AAAA,EAOvB,YAAY,QAA2B,SAA6B;AAsCpE,uBAAM;AAwCN,uBAAM;AA+CN,uBAAM;AA0DN;AAOA;AAAA;AAAA,uBAAM;AA7LJ,SAAK,MAAM,OAAO;AAClB,SAAK,SAAS;AACd,SAAK,UAAU;AAAA,EACjB;AAAA,EAEA,MAAM,QACJ,MACA,OACe;AACf,UAAM,sBAAK,0CAAL,WAAwB,MAAM;AAAA,EACtC;AAAA,EAEA,MAAM,QAAQ,MAAyD;AACrE,WAAO,sBAAK,oCAAL,WAAqB;AAAA,EAC9B;AAAA,EAEA,MAAM,mBACJ,MAC0B;AAC1B,WAAO,sBAAK,sEAAL,WAAsC;AAAA,EAC/C;AAAA,EAEA,MAAM,gBAAiC;AACrC,UAAM,aAAa,MAAM,KAAK,QAAQ,SAAS,cAAc;AAC7D,QAAI,YAAY;AACd,aAAO;AAAA,IACT;AAEA,UAAM,cAAc,MAAM,KAAK,OAAO,KAAK,eAAe;AAC1D,UAAM,sBAAsB,MAAM,KAAK,OAAO,KAAK;AAAA,MACjD,YAAY,YAAY,SAAS;AAAA,IACnC;AACA,UAAM,4BAA4B,iBAAiB,mBAAmB;AACtE,UAAM,KAAK,QAAQ,SAAS,cAAc,yBAAyB;AACnE,WAAO;AAAA,EACT;AA8JF;AA5JQ;AAAA,uBAAkB,eACtB,MACA,MACe;AACf,MAAI;AACF,UAAM,UAAU,MAAM,sBAAK,oDAAL;AACtB,UAAM,aAAa,MAAM,KAAK,cAAc;AAC5C,UAAM,gBAAgB,mBAAW,cAAc,MAAM,UAAU;AAC/D,UAAM,gBAAgB,gBAAgB,MAAM,UAAU;AAEtD,UAAM,MAAM,IAAI,IAAI,YAAY,KAAK,KAAK,aAAa,CAAC;AAExD,UAAM,WAAW,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,MAC3C,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,GAAG;AAAA,MACL;AAAA,MACA,MAAM,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAAA,IAC9C,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,eAA6B,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO;AAAA,QACpE,SAAS;AAAA,QACT,OAAO;AAAA,MACT,EAAE;AACF,YAAM,IAAI;AAAA,QACR,uBAAuB,aAAa,OAAO,YAAY,aAAa,KAAK;AAAA,MAC3E;AAAA,IACF;AAAA,EACF,SAAS,GAAG;AAEV,UAAM,eACJ,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,KAAK,EAAE;AACzD,UAAM,IAAI;AAAA,MACR,2CAA2C,IAAI,MAAM,YAAY;AAAA,IACnE;AAAA,EACF;AACF;AAEM;AAAA,oBAAe,eACnB,MACiB;AACjB,MAAI;AACF,UAAM,UAAU,MAAM,sBAAK,oDAAL;AACtB,UAAM,aAAa,MAAM,KAAK,cAAc;AAC5C,UAAM,gBAAgB,gBAAgB,MAAM,UAAU;AAEtD,UAAM,MAAM,IAAI,IAAI,YAAY,KAAK,KAAK,aAAa,CAAC;AAExD,UAAM,WAAW,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,MAC3C,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,GAAG;AAAA,MACL;AAAA,IACF,CAAC;AAED,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,IAAI;AAAA,QACR,uCAAuC,IAAI;AAAA,MAC7C;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,eAAgB,MAAM,SAAS,KAAK;AAC1C,YAAM,IAAI;AAAA,QACR,uBAAuB,aAAa,OAAO,YAAY,aAAa,KAAK;AAAA,MAC3E;AAAA,IACF;AAEA,UAAM,EAAE,MAAM,cAAc,IAAI,MAAM,SAAS,KAAK;AACpD,WAAO,mBAAW,cAAc,eAAe,UAAU;AAAA,EAC3D,SAAS,GAAG;AACV,QAAI,aAAa,eAAe;AAC9B,YAAM;AAAA,IACR;AAGA,UAAM,eACJ,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,KAAK,EAAE;AAEzD,UAAM,IAAI;AAAA,MACR,wCAAwC,IAAI,MAAM,YAAY;AAAA,IAChE;AAAA,EACF;AACF;AAEM;AAAA,qCAAgC,eACpC,MAC0B;AAC1B,MAAI;AACF,UAAM,UAAU,MAAM,sBAAK,oDAAL;AACtB,UAAM,aAAa,MAAM,KAAK,cAAc;AAE5C,UAAM,MAAM,IAAI,IAAI,YAAY,KAAK,KAAK,IAAI,CAAC;AAE/C,UAAM,WAAW,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,MAC3C,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,GAAG;AAAA,MACL;AAAA,IACF,CAAC;AAED,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,IAAI,cAAc,+BAA+B,IAAI,IAAI;AAAA,IACjE;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,eAAgB,MAAM,SAAS,KAAK;AAC1C,YAAM,IAAI;AAAA,QACR,uBAAuB,aAAa,OAAO,YAAY,aAAa,KAAK;AAAA,MAC3E;AAAA,IACF;AAEA,UAAM,cACJ,MAAM,SAAS,KAAK;AAEtB,QAAI,CAAC,MAAM,QAAQ,WAAW,GAAG;AAC/B,aAAO;AAAA,IACT;AAEA,UAAM,gBAAgB,YAAY,QAAQ,CAAC,UAAU;AACnD,UAAI,CAAC,MAAM,MAAM;AACf,eAAO,CAAC;AAAA,MACV;AAEA,aAAO,mBAAW,cAAc,MAAM,MAAM,UAAU;AAAA,IACxD,CAAC;AAED,WAAO;AAAA,EACT,SAAS,GAAG;AACV,QAAI,aAAa,eAAe;AAC9B,YAAM;AAAA,IACR;AAGA,UAAM,eACJ,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,KAAK,EAAE;AAEzD,UAAM,IAAI;AAAA,MACR,wCAAwC,IAAI,MAAM,YAAY;AAAA,IAChE;AAAA,EACF;AACF;AAEA;AAAA,oBAAe,SAAC,KAAa,YAA4B;AACvD,QAAM,YAAY,iBAAiB,MAAM,UAAU;AACnD,SAAO;AACT;AAIM;AAAA,4BAAuB,iBAAuC;AAClE,QAAM,cAAc,MAAM,KAAK,OAAO,KAAK,eAAe;AAC1D,SAAO,EAAE,eAAe,UAAU,WAAW,GAAG;AAClD;","names":[]}
+{"version":3,"sources":["../src/sdk/user-storage.ts"],"sourcesContent":["import type {\n  UserStoragePathWithFeatureAndKey,\n  UserStoragePathWithFeatureOnly,\n} from '../controllers/user-storage/schema';\nimport { createEntryPath } from '../controllers/user-storage/schema';\nimport type { GetUserStorageAllFeatureEntriesResponse } from '../controllers/user-storage/services';\nimport type { IBaseAuth } from './authentication-jwt-bearer/types';\nimport encryption, { createSHA256Hash } from './encryption';\nimport type { Env } from './env';\nimport { getEnvUrls } from './env';\nimport { NotFoundError, UserStorageError } from './errors';\n\nexport const STORAGE_URL = (env: Env, encryptedPath: string) =>\n  `${getEnvUrls(env).userStorageApiUrl}/api/v1/userstorage/${encryptedPath}`;\n\nexport type UserStorageConfig = {\n  env: Env;\n  auth: Pick<IBaseAuth, 'getAccessToken' | 'getUserProfile' | 'signMessage'>;\n};\n\nexport type StorageOptions = {\n  getStorageKey: () => Promise<string | null>;\n  setStorageKey: (val: string) => Promise<void>;\n};\n\nexport type UserStorageOptions = {\n  storage?: StorageOptions;\n};\n\ntype ErrorMessage = {\n  message: string;\n  error: string;\n};\n\nexport class UserStorage {\n  protected config: UserStorageConfig;\n\n  protected options: UserStorageOptions;\n\n  protected env: Env;\n\n  constructor(config: UserStorageConfig, options: UserStorageOptions) {\n    this.env = config.env;\n    this.config = config;\n    this.options = options;\n  }\n\n  async setItem(\n    path: UserStoragePathWithFeatureAndKey,\n    value: string,\n  ): Promise<void> {\n    await this.#upsertUserStorage(path, value);\n  }\n\n  async getItem(path: UserStoragePathWithFeatureAndKey): Promise<string> {\n    return this.#getUserStorage(path);\n  }\n\n  async getAllFeatureItems(\n    path: UserStoragePathWithFeatureOnly,\n  ): Promise<string[] | null> {\n    return this.#getUserStorageAllFeatureEntries(path);\n  }\n\n  async getStorageKey(): Promise<string> {\n    const storageKey = await this.options.storage?.getStorageKey();\n    if (storageKey) {\n      return storageKey;\n    }\n\n    const userProfile = await this.config.auth.getUserProfile();\n    const storageKeySignature = await this.config.auth.signMessage(\n      `metamask:${userProfile.profileId}`,\n    );\n    const hashedStorageKeySignature = createSHA256Hash(storageKeySignature);\n    await this.options.storage?.setStorageKey(hashedStorageKeySignature);\n    return hashedStorageKeySignature;\n  }\n\n  async #upsertUserStorage(\n    path: UserStoragePathWithFeatureAndKey,\n    data: string,\n  ): Promise<void> {\n    try {\n      const headers = await this.#getAuthorizationHeader();\n      const storageKey = await this.getStorageKey();\n      const encryptedData = encryption.encryptString(data, storageKey);\n      const encryptedPath = createEntryPath(path, storageKey);\n\n      const url = new URL(STORAGE_URL(this.env, encryptedPath));\n\n      const response = await fetch(url.toString(), {\n        method: 'PUT',\n        headers: {\n          'Content-Type': 'application/json',\n          ...headers,\n        },\n        body: JSON.stringify({ data: encryptedData }),\n      });\n\n      if (!response.ok) {\n        const responseBody: ErrorMessage = await response.json().catch(() => ({\n          message: 'unknown',\n          error: 'unknown',\n        }));\n        throw new Error(\n          `HTTP error message: ${responseBody.message}, error: ${responseBody.error}`,\n        );\n      }\n    } catch (e) {\n      /* istanbul ignore next */\n      const errorMessage =\n        e instanceof Error ? e.message : JSON.stringify(e ?? '');\n      throw new UserStorageError(\n        `failed to upsert user storage for path '${path}'. ${errorMessage}`,\n      );\n    }\n  }\n\n  async #getUserStorage(\n    path: UserStoragePathWithFeatureAndKey,\n  ): Promise<string> {\n    try {\n      const headers = await this.#getAuthorizationHeader();\n      const storageKey = await this.getStorageKey();\n      const encryptedPath = createEntryPath(path, storageKey);\n\n      const url = new URL(STORAGE_URL(this.env, encryptedPath));\n\n      const response = await fetch(url.toString(), {\n        headers: {\n          'Content-Type': 'application/json',\n          ...headers,\n        },\n      });\n\n      if (response.status === 404) {\n        throw new NotFoundError(\n          `feature/key set not found for path '${path}'.`,\n        );\n      }\n\n      if (!response.ok) {\n        const responseBody = (await response.json()) as ErrorMessage;\n        throw new Error(\n          `HTTP error message: ${responseBody.message}, error: ${responseBody.error}`,\n        );\n      }\n\n      const { Data: encryptedData } = await response.json();\n      return encryption.decryptString(encryptedData, storageKey);\n    } catch (e) {\n      if (e instanceof NotFoundError) {\n        throw e;\n      }\n\n      /* istanbul ignore next */\n      const errorMessage =\n        e instanceof Error ? e.message : JSON.stringify(e ?? '');\n\n      throw new UserStorageError(\n        `failed to get user storage for path '${path}'. ${errorMessage}`,\n      );\n    }\n  }\n\n  async #getUserStorageAllFeatureEntries(\n    path: UserStoragePathWithFeatureOnly,\n  ): Promise<string[] | null> {\n    try {\n      const headers = await this.#getAuthorizationHeader();\n      const storageKey = await this.getStorageKey();\n\n      const url = new URL(STORAGE_URL(this.env, path));\n\n      const response = await fetch(url.toString(), {\n        headers: {\n          'Content-Type': 'application/json',\n          ...headers,\n        },\n      });\n\n      if (response.status === 404) {\n        throw new NotFoundError(`feature not found for path '${path}'.`);\n      }\n\n      if (!response.ok) {\n        const responseBody = (await response.json()) as ErrorMessage;\n        throw new Error(\n          `HTTP error message: ${responseBody.message}, error: ${responseBody.error}`,\n        );\n      }\n\n      const userStorage: GetUserStorageAllFeatureEntriesResponse | null =\n        await response.json();\n\n      if (!Array.isArray(userStorage)) {\n        return null;\n      }\n\n      const decryptedData = userStorage.flatMap((entry) => {\n        if (!entry.Data) {\n          return [];\n        }\n\n        return encryption.decryptString(entry.Data, storageKey);\n      });\n\n      return (await Promise.allSettled(decryptedData))\n        .map((d) => (d.status === 'fulfilled' ? d.value : undefined))\n        .filter((d): d is string => d !== undefined);\n    } catch (e) {\n      if (e instanceof NotFoundError) {\n        throw e;\n      }\n\n      /* istanbul ignore next */\n      const errorMessage =\n        e instanceof Error ? e.message : JSON.stringify(e ?? '');\n\n      throw new UserStorageError(\n        `failed to get user storage for path '${path}'. ${errorMessage}`,\n      );\n    }\n  }\n\n  #createEntryKey(key: string, storageKey: string): string {\n    const hashedKey = createSHA256Hash(key + storageKey);\n    return hashedKey;\n  }\n\n  // TODO: Either fix this lint violation or explain why it's necessary to ignore.\n  // eslint-disable-next-line @typescript-eslint/naming-convention\n  async #getAuthorizationHeader(): Promise<{ Authorization: string }> {\n    const accessToken = await this.config.auth.getAccessToken();\n    return { Authorization: `Bearer ${accessToken}` };\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAYO,IAAM,cAAc,CAAC,KAAU,kBACpC,GAAG,WAAW,GAAG,EAAE,iBAAiB,uBAAuB,aAAa;AAb1E;AAkCO,IAAM,cAAN,MAAkB;AAAA,EAOvB,YAAY,QAA2B,SAA6B;AAsCpE,uBAAM;AAwCN,uBAAM;AA+CN,uBAAM;AA4DN;AAOA;AAAA;AAAA,uBAAM;AA/LJ,SAAK,MAAM,OAAO;AAClB,SAAK,SAAS;AACd,SAAK,UAAU;AAAA,EACjB;AAAA,EAEA,MAAM,QACJ,MACA,OACe;AACf,UAAM,sBAAK,0CAAL,WAAwB,MAAM;AAAA,EACtC;AAAA,EAEA,MAAM,QAAQ,MAAyD;AACrE,WAAO,sBAAK,oCAAL,WAAqB;AAAA,EAC9B;AAAA,EAEA,MAAM,mBACJ,MAC0B;AAC1B,WAAO,sBAAK,sEAAL,WAAsC;AAAA,EAC/C;AAAA,EAEA,MAAM,gBAAiC;AACrC,UAAM,aAAa,MAAM,KAAK,QAAQ,SAAS,cAAc;AAC7D,QAAI,YAAY;AACd,aAAO;AAAA,IACT;AAEA,UAAM,cAAc,MAAM,KAAK,OAAO,KAAK,eAAe;AAC1D,UAAM,sBAAsB,MAAM,KAAK,OAAO,KAAK;AAAA,MACjD,YAAY,YAAY,SAAS;AAAA,IACnC;AACA,UAAM,4BAA4B,iBAAiB,mBAAmB;AACtE,UAAM,KAAK,QAAQ,SAAS,cAAc,yBAAyB;AACnE,WAAO;AAAA,EACT;AAgKF;AA9JQ;AAAA,uBAAkB,eACtB,MACA,MACe;AACf,MAAI;AACF,UAAM,UAAU,MAAM,sBAAK,oDAAL;AACtB,UAAM,aAAa,MAAM,KAAK,cAAc;AAC5C,UAAM,gBAAgB,mBAAW,cAAc,MAAM,UAAU;AAC/D,UAAM,gBAAgB,gBAAgB,MAAM,UAAU;AAEtD,UAAM,MAAM,IAAI,IAAI,YAAY,KAAK,KAAK,aAAa,CAAC;AAExD,UAAM,WAAW,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,MAC3C,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,GAAG;AAAA,MACL;AAAA,MACA,MAAM,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAAA,IAC9C,CAAC;AAED,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,eAA6B,MAAM,SAAS,KAAK,EAAE,MAAM,OAAO;AAAA,QACpE,SAAS;AAAA,QACT,OAAO;AAAA,MACT,EAAE;AACF,YAAM,IAAI;AAAA,QACR,uBAAuB,aAAa,OAAO,YAAY,aAAa,KAAK;AAAA,MAC3E;AAAA,IACF;AAAA,EACF,SAAS,GAAG;AAEV,UAAM,eACJ,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,KAAK,EAAE;AACzD,UAAM,IAAI;AAAA,MACR,2CAA2C,IAAI,MAAM,YAAY;AAAA,IACnE;AAAA,EACF;AACF;AAEM;AAAA,oBAAe,eACnB,MACiB;AACjB,MAAI;AACF,UAAM,UAAU,MAAM,sBAAK,oDAAL;AACtB,UAAM,aAAa,MAAM,KAAK,cAAc;AAC5C,UAAM,gBAAgB,gBAAgB,MAAM,UAAU;AAEtD,UAAM,MAAM,IAAI,IAAI,YAAY,KAAK,KAAK,aAAa,CAAC;AAExD,UAAM,WAAW,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,MAC3C,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,GAAG;AAAA,MACL;AAAA,IACF,CAAC;AAED,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,IAAI;AAAA,QACR,uCAAuC,IAAI;AAAA,MAC7C;AAAA,IACF;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,eAAgB,MAAM,SAAS,KAAK;AAC1C,YAAM,IAAI;AAAA,QACR,uBAAuB,aAAa,OAAO,YAAY,aAAa,KAAK;AAAA,MAC3E;AAAA,IACF;AAEA,UAAM,EAAE,MAAM,cAAc,IAAI,MAAM,SAAS,KAAK;AACpD,WAAO,mBAAW,cAAc,eAAe,UAAU;AAAA,EAC3D,SAAS,GAAG;AACV,QAAI,aAAa,eAAe;AAC9B,YAAM;AAAA,IACR;AAGA,UAAM,eACJ,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,KAAK,EAAE;AAEzD,UAAM,IAAI;AAAA,MACR,wCAAwC,IAAI,MAAM,YAAY;AAAA,IAChE;AAAA,EACF;AACF;AAEM;AAAA,qCAAgC,eACpC,MAC0B;AAC1B,MAAI;AACF,UAAM,UAAU,MAAM,sBAAK,oDAAL;AACtB,UAAM,aAAa,MAAM,KAAK,cAAc;AAE5C,UAAM,MAAM,IAAI,IAAI,YAAY,KAAK,KAAK,IAAI,CAAC;AAE/C,UAAM,WAAW,MAAM,MAAM,IAAI,SAAS,GAAG;AAAA,MAC3C,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,GAAG;AAAA,MACL;AAAA,IACF,CAAC;AAED,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,IAAI,cAAc,+BAA+B,IAAI,IAAI;AAAA,IACjE;AAEA,QAAI,CAAC,SAAS,IAAI;AAChB,YAAM,eAAgB,MAAM,SAAS,KAAK;AAC1C,YAAM,IAAI;AAAA,QACR,uBAAuB,aAAa,OAAO,YAAY,aAAa,KAAK;AAAA,MAC3E;AAAA,IACF;AAEA,UAAM,cACJ,MAAM,SAAS,KAAK;AAEtB,QAAI,CAAC,MAAM,QAAQ,WAAW,GAAG;AAC/B,aAAO;AAAA,IACT;AAEA,UAAM,gBAAgB,YAAY,QAAQ,CAAC,UAAU;AACnD,UAAI,CAAC,MAAM,MAAM;AACf,eAAO,CAAC;AAAA,MACV;AAEA,aAAO,mBAAW,cAAc,MAAM,MAAM,UAAU;AAAA,IACxD,CAAC;AAED,YAAQ,MAAM,QAAQ,WAAW,aAAa,GAC3C,IAAI,CAAC,MAAO,EAAE,WAAW,cAAc,EAAE,QAAQ,MAAU,EAC3D,OAAO,CAAC,MAAmB,MAAM,MAAS;AAAA,EAC/C,SAAS,GAAG;AACV,QAAI,aAAa,eAAe;AAC9B,YAAM;AAAA,IACR;AAGA,UAAM,eACJ,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,KAAK,EAAE;AAEzD,UAAM,IAAI;AAAA,MACR,wCAAwC,IAAI,MAAM,YAAY;AAAA,IAChE;AAAA,EACF;AACF;AAEA;AAAA,oBAAe,SAAC,KAAa,YAA4B;AACvD,QAAM,YAAY,iBAAiB,MAAM,UAAU;AACnD,SAAO;AACT;AAIM;AAAA,4BAAuB,iBAAuC;AAClE,QAAM,cAAc,MAAM,KAAK,OAAO,KAAK,eAAe;AAC1D,SAAO,EAAE,eAAe,UAAU,WAAW,GAAG;AAClD;","names":[]}

package/dist/{chunk-ZYYAQJ56.mjs → chunk-NEBLEB3X.mjs}

@@ -1,20 +1,20 @@
 import {
   UserStorageController,
   defaultState
-} from "./chunk-M23ZCTKE.mjs";
+} from "./chunk-OLFO6R7Z.mjs";
 import {
   USER_STORAGE_ENDPOINT
-} from "./chunk-LYDHYB6I.mjs";
+} from "./chunk-76NMME23.mjs";
 import {
   createEntryPath
-} from "./chunk-NSSHFDIS.mjs";
+} from "./chunk-2VEMA6OE.mjs";
 import {
   encryption_default as encryption_default2
-} from "./chunk-5TOWF6UW.mjs";
+} from "./chunk-KHASG4H3.mjs";
 import {
   createSHA256Hash,
   encryption_default
-} from "./chunk-K5UKU454.mjs";
+} from "./chunk-COBJUBZE.mjs";
 import {
   __export
 } from "./chunk-U5UIDVOO.mjs";
@@ -47,7 +47,11 @@ __export(fixtures_exports, {
 var MOCK_STORAGE_KEY_SIGNATURE = "mockStorageKey";
 var MOCK_STORAGE_KEY = createSHA256Hash(MOCK_STORAGE_KEY_SIGNATURE);
 var MOCK_STORAGE_DATA = JSON.stringify({ hello: "world" });
-var MOCK_ENCRYPTED_STORAGE_DATA = () => encryption_default2.encryptString(MOCK_STORAGE_DATA, MOCK_STORAGE_KEY);
+var cachedMockEncryptedData;
+var MOCK_ENCRYPTED_STORAGE_DATA = async () => cachedMockEncryptedData ?? (cachedMockEncryptedData = await encryption_default2.encryptString(
+  MOCK_STORAGE_DATA,
+  MOCK_STORAGE_KEY
+));
 
 // src/controllers/user-storage/__fixtures__/mockResponses.ts
 var getMockUserStorageEndpoint = (path) => {
@@ -59,28 +63,28 @@ var getMockUserStorageEndpoint = (path) => {
     MOCK_STORAGE_KEY
   )}`;
 };
-var MOCK_GET_USER_STORAGE_RESPONSE = () => ({
+var MOCK_GET_USER_STORAGE_RESPONSE = async () => ({
   HashedKey: "HASHED_KEY",
-  Data: MOCK_ENCRYPTED_STORAGE_DATA()
+  Data: await MOCK_ENCRYPTED_STORAGE_DATA()
 });
-var MOCK_GET_USER_STORAGE_ALL_FEATURE_ENTRIES_RESPONSE = () => [
+var MOCK_GET_USER_STORAGE_ALL_FEATURE_ENTRIES_RESPONSE = async () => [
   {
     HashedKey: "HASHED_KEY",
-    Data: MOCK_ENCRYPTED_STORAGE_DATA()
+    Data: await MOCK_ENCRYPTED_STORAGE_DATA()
   }
 ];
-var getMockUserStorageGetResponse = (path = "notifications.notificationSettings") => {
+var getMockUserStorageGetResponse = async (path = "notifications.notificationSettings") => {
   return {
     url: getMockUserStorageEndpoint(path),
     requestMethod: "GET",
-    response: MOCK_GET_USER_STORAGE_RESPONSE()
+    response: await MOCK_GET_USER_STORAGE_RESPONSE()
   };
 };
-var getMockUserStorageAllFeatureEntriesResponse = (path = "notifications") => {
+var getMockUserStorageAllFeatureEntriesResponse = async (path = "notifications") => {
   return {
     url: getMockUserStorageEndpoint(path),
     requestMethod: "GET",
-    response: MOCK_GET_USER_STORAGE_ALL_FEATURE_ENTRIES_RESPONSE()
+    response: await MOCK_GET_USER_STORAGE_ALL_FEATURE_ENTRIES_RESPONSE()
   };
 };
 var getMockUserStoragePutResponse = (path = "notifications.notificationSettings") => {
@@ -100,4 +104,4 @@ export {
   user_storage_default,
   user_storage_exports
 };
-//# sourceMappingURL=chunk-ZYYAQJ56.mjs.map
+//# sourceMappingURL=chunk-NEBLEB3X.mjs.map

package/dist/chunk-NEBLEB3X.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controllers/user-storage/index.ts","../src/controllers/user-storage/__fixtures__/index.ts","../src/controllers/user-storage/__fixtures__/mockStorage.ts","../src/controllers/user-storage/__fixtures__/mockResponses.ts"],"sourcesContent":["import Controller from './UserStorageController';\n\nconst UserStorageController = Controller;\nexport { Controller };\nexport default UserStorageController;\nexport * from './UserStorageController';\nexport * from './encryption';\nexport * as Mocks from './__fixtures__';\n","export * from './mockResponses';\nexport * from './mockStorage';\n","import encryption, { createSHA256Hash } from '../encryption';\n\nexport const MOCK_STORAGE_KEY_SIGNATURE = 'mockStorageKey';\nexport const MOCK_STORAGE_KEY = createSHA256Hash(MOCK_STORAGE_KEY_SIGNATURE);\nexport const MOCK_STORAGE_DATA = JSON.stringify({ hello: 'world' });\n\n// NOTE - using encryption.encryptString directly in fixtures causes issues on mobile.\n// This is because this fixture is getting added in at run time. Will be improved once we support multiple exports\nlet cachedMockEncryptedData: string;\nexport const MOCK_ENCRYPTED_STORAGE_DATA = async () =>\n  (cachedMockEncryptedData ??= await encryption.encryptString(\n    MOCK_STORAGE_DATA,\n    MOCK_STORAGE_KEY,\n  ));\n","import type {\n  UserStoragePathWithFeatureAndKey,\n  UserStoragePathWithFeatureOnly,\n} from '../schema';\nimport { createEntryPath } from '../schema';\nimport type {\n  GetUserStorageAllFeatureEntriesResponse,\n  GetUserStorageResponse,\n} from '../services';\nimport { USER_STORAGE_ENDPOINT } from '../services';\nimport { MOCK_ENCRYPTED_STORAGE_DATA, MOCK_STORAGE_KEY } from './mockStorage';\n\ntype MockResponse = {\n  url: string;\n  requestMethod: 'GET' | 'POST' | 'PUT';\n  response: unknown;\n};\n\nexport const getMockUserStorageEndpoint = (\n  path: UserStoragePathWithFeatureAndKey | UserStoragePathWithFeatureOnly,\n) => {\n  if (path.split('.').length === 1) {\n    return `${USER_STORAGE_ENDPOINT}/${path}`;\n  }\n\n  return `${USER_STORAGE_ENDPOINT}${createEntryPath(\n    path as UserStoragePathWithFeatureAndKey,\n    MOCK_STORAGE_KEY,\n  )}`;\n};\n\nconst MOCK_GET_USER_STORAGE_RESPONSE =\n  async (): Promise<GetUserStorageResponse> => ({\n    HashedKey: 'HASHED_KEY',\n    Data: await MOCK_ENCRYPTED_STORAGE_DATA(),\n  });\n\nconst MOCK_GET_USER_STORAGE_ALL_FEATURE_ENTRIES_RESPONSE =\n  async (): Promise<GetUserStorageAllFeatureEntriesResponse> => [\n    {\n      HashedKey: 'HASHED_KEY',\n      Data: await MOCK_ENCRYPTED_STORAGE_DATA(),\n    },\n  ];\n\nexport const getMockUserStorageGetResponse = async (\n  path: UserStoragePathWithFeatureAndKey = 'notifications.notificationSettings',\n) => {\n  return {\n    url: getMockUserStorageEndpoint(path),\n    requestMethod: 'GET',\n    response: await MOCK_GET_USER_STORAGE_RESPONSE(),\n  } satisfies MockResponse;\n};\n\nexport const getMockUserStorageAllFeatureEntriesResponse = async (\n  path: UserStoragePathWithFeatureOnly = 'notifications',\n) => {\n  return {\n    url: getMockUserStorageEndpoint(path),\n    requestMethod: 'GET',\n    response: await MOCK_GET_USER_STORAGE_ALL_FEATURE_ENTRIES_RESPONSE(),\n  } satisfies MockResponse;\n};\n\nexport const getMockUserStoragePutResponse = (\n  path: UserStoragePathWithFeatureAndKey = 'notifications.notificationSettings',\n) => {\n  return {\n    url: getMockUserStorageEndpoint(path),\n    requestMethod: 'PUT',\n    response: null,\n  } satisfies MockResponse;\n};\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACEO,IAAM,6BAA6B;AACnC,IAAM,mBAAmB,iBAAiB,0BAA0B;AACpE,IAAM,oBAAoB,KAAK,UAAU,EAAE,OAAO,QAAQ,CAAC;AAIlE,IAAI;AACG,IAAM,8BAA8B,YACxC,sDAA4B,MAAMA,oBAAW;AAAA,EAC5C;AAAA,EACA;AACF;;;ACKK,IAAM,6BAA6B,CACxC,SACG;AACH,MAAI,KAAK,MAAM,GAAG,EAAE,WAAW,GAAG;AAChC,WAAO,GAAG,qBAAqB,IAAI,IAAI;AAAA,EACzC;AAEA,SAAO,GAAG,qBAAqB,GAAG;AAAA,IAChC;AAAA,IACA;AAAA,EACF,CAAC;AACH;AAEA,IAAM,iCACJ,aAA8C;AAAA,EAC5C,WAAW;AAAA,EACX,MAAM,MAAM,4BAA4B;AAC1C;AAEF,IAAM,qDACJ,YAA8D;AAAA,EAC5D;AAAA,IACE,WAAW;AAAA,IACX,MAAM,MAAM,4BAA4B;AAAA,EAC1C;AACF;AAEK,IAAM,gCAAgC,OAC3C,OAAyC,yCACtC;AACH,SAAO;AAAA,IACL,KAAK,2BAA2B,IAAI;AAAA,IACpC,eAAe;AAAA,IACf,UAAU,MAAM,+BAA+B;AAAA,EACjD;AACF;AAEO,IAAM,8CAA8C,OACzD,OAAuC,oBACpC;AACH,SAAO;AAAA,IACL,KAAK,2BAA2B,IAAI;AAAA,IACpC,eAAe;AAAA,IACf,UAAU,MAAM,mDAAmD;AAAA,EACrE;AACF;AAEO,IAAM,gCAAgC,CAC3C,OAAyC,yCACtC;AACH,SAAO;AAAA,IACL,KAAK,2BAA2B,IAAI;AAAA,IACpC,eAAe;AAAA,IACf,UAAU;AAAA,EACZ;AACF;;;AHvEA,IAAMC,yBAAwB;AAE9B,IAAO,uBAAQC;","names":["encryption_default","UserStorageController","UserStorageController"]}

package/dist/{chunk-AK7OTIWA.js → chunk-NIUQ34PY.js}

@@ -1,11 +1,11 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
-var _chunkT3FNDVE3js = require('./chunk-T3FNDVE3.js');
+var _chunkBKQE7DB5js = require('./chunk-BKQE7DB5.js');
 
 // src/controllers/user-storage/encryption/index.ts
-var encryption_default2 = _chunkT3FNDVE3js.encryption_default;
+var encryption_default2 = _chunkBKQE7DB5js.encryption_default;
 
 
 
 exports.encryption_default = encryption_default2;
-//# sourceMappingURL=chunk-AK7OTIWA.js.map
+//# sourceMappingURL=chunk-NIUQ34PY.js.map

package/dist/{chunk-M23ZCTKE.mjs → chunk-OLFO6R7Z.mjs}

@@ -9,10 +9,10 @@ import {
   getUserStorage,
   getUserStorageAllFeatureEntries,
   upsertUserStorage
-} from "./chunk-LYDHYB6I.mjs";
+} from "./chunk-76NMME23.mjs";
 import {
   createSHA256Hash
-} from "./chunk-K5UKU454.mjs";
+} from "./chunk-COBJUBZE.mjs";
 import {
   __privateAdd,
   __privateGet,
@@ -37,14 +37,20 @@ var metadata = {
     anonymous: false
   }
 };
-var _auth, _accounts, _notificationServices, _isUnlocked, _keyringController, _registerMessageHandlers, registerMessageHandlers_fn, _assertProfileSyncingEnabled, assertProfileSyncingEnabled_fn, _getStorageKeyAndBearerToken, getStorageKeyAndBearerToken_fn, _createStorageKey, createStorageKey_fn, __snapSignMessageCache, _snapSignMessage, snapSignMessage_fn, _setIsProfileSyncingUpdateLoading, setIsProfileSyncingUpdateLoading_fn;
+var _auth, _accounts, _notificationServices, _isUnlocked, _keyringController, _nativeScryptCrypto, _registerMessageHandlers, registerMessageHandlers_fn, _assertProfileSyncingEnabled, assertProfileSyncingEnabled_fn, _getStorageKeyAndBearerToken, getStorageKeyAndBearerToken_fn, _createStorageKey, createStorageKey_fn, __snapSignMessageCache, _snapSignMessage, snapSignMessage_fn, _setIsProfileSyncingUpdateLoading, setIsProfileSyncingUpdateLoading_fn;
 var UserStorageController = class extends BaseController {
-  constructor(params) {
+  constructor({
+    messenger,
+    state,
+    env,
+    getMetaMetricsState,
+    nativeScryptCrypto
+  }) {
     super({
-      messenger: params.messenger,
+      messenger,
       metadata,
       name: controllerName,
-      state: { ...defaultState, ...params.state }
+      state: { ...defaultState, ...state }
     });
     /**
      * Constructor helper for registering this controller's messaging system
@@ -100,6 +106,29 @@ var UserStorageController = class extends BaseController {
       // This is replaced with the actual value in the constructor
       // We will remove this once the feature will be released
       isAccountSyncingEnabled: false,
+      isAccountSyncingInProgress: false,
+      setupAccountSyncingSubscriptions: () => {
+        this.messagingSystem.subscribe(
+          "AccountsController:accountAdded",
+          // eslint-disable-next-line @typescript-eslint/no-misused-promises
+          async (account) => {
+            if (__privateGet(this, _accounts).isAccountSyncingInProgress) {
+              return;
+            }
+            await this.saveInternalAccountToUserStorage(account.address);
+          }
+        );
+        this.messagingSystem.subscribe(
+          "AccountsController:accountRenamed",
+          // eslint-disable-next-line @typescript-eslint/no-misused-promises
+          async (account) => {
+            if (__privateGet(this, _accounts).isAccountSyncingInProgress) {
+              return;
+            }
+            await this.saveInternalAccountToUserStorage(account.address);
+          }
+        );
+      },
       getInternalAccountByAddress: async (address) => {
         return this.messagingSystem.call(
           "AccountsController:getAccountByAddress",
@@ -163,26 +192,24 @@ var UserStorageController = class extends BaseController {
           "KeyringController:getState"
         );
         __privateSet(this, _isUnlocked, isUnlocked);
-        this.messagingSystem.subscribe(
-          "KeyringController:unlock",
-          // eslint-disable-next-line @typescript-eslint/no-misused-promises
-          async () => {
-            __privateSet(this, _isUnlocked, true);
-            await this.syncInternalAccountsWithUserStorage();
-          }
-        );
+        this.messagingSystem.subscribe("KeyringController:unlock", () => {
+          __privateSet(this, _isUnlocked, true);
+        });
         this.messagingSystem.subscribe("KeyringController:lock", () => {
           __privateSet(this, _isUnlocked, false);
         });
       }
     });
+    __privateAdd(this, _nativeScryptCrypto, void 0);
     __privateAdd(this, __snapSignMessageCache, {});
     __privateGet(this, _accounts).isAccountSyncingEnabled = Boolean(
-      params.env?.isAccountSyncingEnabled
+      env?.isAccountSyncingEnabled
     );
-    this.getMetaMetricsState = params.getMetaMetricsState;
+    this.getMetaMetricsState = getMetaMetricsState;
     __privateGet(this, _keyringController).setupLockedStateSubscriptions();
     __privateMethod(this, _registerMessageHandlers, registerMessageHandlers_fn).call(this);
+    __privateSet(this, _nativeScryptCrypto, nativeScryptCrypto);
+    __privateGet(this, _accounts).setupAccountSyncingSubscriptions();
   }
   async enableProfileSyncing() {
     try {
@@ -248,7 +275,8 @@ var UserStorageController = class extends BaseController {
     const result = await getUserStorage({
       path,
       bearerToken,
-      storageKey
+      storageKey,
+      nativeScryptCrypto: __privateGet(this, _nativeScryptCrypto)
     });
     return result;
   }
@@ -265,7 +293,8 @@ var UserStorageController = class extends BaseController {
     const result = await getUserStorageAllFeatureEntries({
       path,
       bearerToken,
-      storageKey
+      storageKey,
+      nativeScryptCrypto: __privateGet(this, _nativeScryptCrypto)
     });
     return result;
   }
@@ -283,7 +312,8 @@ var UserStorageController = class extends BaseController {
     await upsertUserStorage(value, {
       path,
       bearerToken,
-      storageKey
+      storageKey,
+      nativeScryptCrypto: __privateGet(this, _nativeScryptCrypto)
     });
   }
   /**
@@ -307,6 +337,7 @@ var UserStorageController = class extends BaseController {
     }
     try {
       __privateMethod(this, _assertProfileSyncingEnabled, assertProfileSyncingEnabled_fn).call(this);
+      __privateGet(this, _accounts).isAccountSyncingInProgress = true;
       const userStorageAccountsList = await __privateGet(this, _accounts).getUserStorageAccountsList();
       if (!userStorageAccountsList || !userStorageAccountsList.length) {
         await __privateGet(this, _accounts).saveInternalAccountsListToUserStorage();
@@ -392,6 +423,8 @@ var UserStorageController = class extends BaseController {
       throw new Error(
         `${controllerName} - failed to sync user storage accounts list - ${errorMessage}`
       );
+    } finally {
+      __privateGet(this, _accounts).isAccountSyncingInProgress = false;
     }
   }
   /**
@@ -403,6 +436,7 @@ var UserStorageController = class extends BaseController {
       return;
     }
     try {
+      __privateMethod(this, _assertProfileSyncingEnabled, assertProfileSyncingEnabled_fn).call(this);
       await __privateGet(this, _accounts).saveInternalAccountToUserStorage(address);
     } catch (e) {
       const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);
@@ -417,6 +451,7 @@ _accounts = new WeakMap();
 _notificationServices = new WeakMap();
 _isUnlocked = new WeakMap();
 _keyringController = new WeakMap();
+_nativeScryptCrypto = new WeakMap();
 _registerMessageHandlers = new WeakSet();
 registerMessageHandlers_fn = function() {
   this.messagingSystem.registerActionHandler(
@@ -508,4 +543,4 @@ export {
   defaultState,
   UserStorageController
 };
-//# sourceMappingURL=chunk-M23ZCTKE.mjs.map
+//# sourceMappingURL=chunk-OLFO6R7Z.mjs.map

package/dist/chunk-OLFO6R7Z.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/controllers/user-storage/UserStorageController.ts"],"sourcesContent":["import type {\n  AccountsControllerListAccountsAction,\n  AccountsControllerUpdateAccountMetadataAction,\n  AccountsControllerGetAccountByAddressAction,\n  AccountsControllerAccountRenamedEvent,\n  AccountsControllerAccountAddedEvent,\n} from '@metamask/accounts-controller';\nimport type {\n  ControllerGetStateAction,\n  ControllerStateChangeEvent,\n  RestrictedControllerMessenger,\n  StateMetadata,\n} from '@metamask/base-controller';\nimport { BaseController } from '@metamask/base-controller';\nimport type { InternalAccount } from '@metamask/keyring-api';\nimport type {\n  KeyringControllerGetStateAction,\n  KeyringControllerLockEvent,\n  KeyringControllerUnlockEvent,\n  KeyringControllerAddNewAccountAction,\n} from '@metamask/keyring-controller';\nimport type { HandleSnapRequest } from '@metamask/snaps-controllers';\n\nimport { createSnapSignMessageRequest } from '../authentication/auth-snap-requests';\nimport type {\n  AuthenticationControllerGetBearerToken,\n  AuthenticationControllerGetSessionProfile,\n  AuthenticationControllerIsSignedIn,\n  AuthenticationControllerPerformSignIn,\n  AuthenticationControllerPerformSignOut,\n} from '../authentication/AuthenticationController';\nimport type { UserStorageAccount } from './accounts/user-storage';\nimport {\n  isNameDefaultAccountName,\n  mapInternalAccountToUserStorageAccount,\n} from './accounts/user-storage';\nimport { createSHA256Hash } from './encryption';\nimport type {\n  UserStoragePathWithFeatureAndKey,\n  UserStoragePathWithFeatureOnly,\n} from './schema';\nimport {\n  getUserStorage,\n  getUserStorageAllFeatureEntries,\n  upsertUserStorage,\n} from './services';\n\n// TODO: fix external dependencies\nexport declare type NotificationServicesControllerDisableNotificationServices =\n  {\n    type: `NotificationServicesController:disableNotificationServices`;\n    handler: () => Promise<void>;\n  };\n\nexport declare type NotificationServicesControllerSelectIsNotificationServicesEnabled =\n  {\n    type: `NotificationServicesController:selectIsNotificationServicesEnabled`;\n    handler: () => boolean;\n  };\n\nexport declare type NativeScrypt = (\n  passwd: string,\n  salt: Uint8Array,\n  N: number,\n  r: number,\n  p: number,\n  size: number,\n) => Promise<Uint8Array>;\n\nconst controllerName = 'UserStorageController';\n\n// State\nexport type UserStorageControllerState = {\n  /**\n   * Condition used by UI and to determine if we can use some of the User Storage methods.\n   */\n  isProfileSyncingEnabled: boolean | null;\n  /**\n   * Loading state for the profile syncing update\n   */\n  isProfileSyncingUpdateLoading: boolean;\n};\n\nexport const defaultState: UserStorageControllerState = {\n  isProfileSyncingEnabled: true,\n  isProfileSyncingUpdateLoading: false,\n};\n\nconst metadata: StateMetadata<UserStorageControllerState> = {\n  isProfileSyncingEnabled: {\n    persist: true,\n    anonymous: true,\n  },\n  isProfileSyncingUpdateLoading: {\n    persist: false,\n    anonymous: false,\n  },\n};\n\n// Messenger Actions\ntype CreateActionsObj<Controller extends keyof UserStorageController> = {\n  [K in Controller]: {\n    type: `${typeof controllerName}:${K}`;\n    handler: UserStorageController[K];\n  };\n};\ntype ActionsObj = CreateActionsObj<\n  | 'performGetStorage'\n  | 'performGetStorageAllFeatureEntries'\n  | 'performSetStorage'\n  | 'getStorageKey'\n  | 'enableProfileSyncing'\n  | 'disableProfileSyncing'\n  | 'syncInternalAccountsWithUserStorage'\n  | 'saveInternalAccountToUserStorage'\n>;\nexport type UserStorageControllerGetStateAction = ControllerGetStateAction<\n  typeof controllerName,\n  UserStorageControllerState\n>;\nexport type Actions =\n  | ActionsObj[keyof ActionsObj]\n  | UserStorageControllerGetStateAction;\nexport type UserStorageControllerPerformGetStorage =\n  ActionsObj['performGetStorage'];\nexport type UserStorageControllerPerformGetStorageAllFeatureEntries =\n  ActionsObj['performGetStorageAllFeatureEntries'];\nexport type UserStorageControllerPerformSetStorage =\n  ActionsObj['performSetStorage'];\nexport type UserStorageControllerGetStorageKey = ActionsObj['getStorageKey'];\nexport type UserStorageControllerEnableProfileSyncing =\n  ActionsObj['enableProfileSyncing'];\nexport type UserStorageControllerDisableProfileSyncing =\n  ActionsObj['disableProfileSyncing'];\nexport type UserStorageControllerSyncInternalAccountsWithUserStorage =\n  ActionsObj['syncInternalAccountsWithUserStorage'];\nexport type UserStorageControllerSaveInternalAccountToUserStorage =\n  ActionsObj['saveInternalAccountToUserStorage'];\n\nexport type UserStorageControllerStateChangeEvent = ControllerStateChangeEvent<\n  typeof controllerName,\n  UserStorageControllerState\n>;\nexport type Events = UserStorageControllerStateChangeEvent;\n\n// Allowed Actions\nexport type AllowedActions =\n  // Keyring Requests\n  | KeyringControllerGetStateAction\n  // Snap Requests\n  | HandleSnapRequest\n  // Auth Requests\n  | AuthenticationControllerGetBearerToken\n  | AuthenticationControllerGetSessionProfile\n  | AuthenticationControllerPerformSignIn\n  | AuthenticationControllerIsSignedIn\n  | AuthenticationControllerPerformSignOut\n  // Metamask Notifications\n  | NotificationServicesControllerDisableNotificationServices\n  | NotificationServicesControllerSelectIsNotificationServicesEnabled\n  // Account syncing\n  | AccountsControllerListAccountsAction\n  | AccountsControllerGetAccountByAddressAction\n  | AccountsControllerUpdateAccountMetadataAction\n  | KeyringControllerAddNewAccountAction;\n\n// Messenger events\nexport type UserStorageControllerChangeEvent = ControllerStateChangeEvent<\n  typeof controllerName,\n  UserStorageControllerState\n>;\nexport type UserStorageControllerAccountSyncingInProgress = {\n  type: `${typeof controllerName}:accountSyncingInProgress`;\n  payload: [boolean];\n};\nexport type UserStorageControllerAccountSyncingComplete = {\n  type: `${typeof controllerName}:accountSyncingComplete`;\n  payload: [boolean];\n};\n\nexport type AllowedEvents =\n  | UserStorageControllerChangeEvent\n  | UserStorageControllerAccountSyncingInProgress\n  | UserStorageControllerAccountSyncingComplete\n  | KeyringControllerLockEvent\n  | KeyringControllerUnlockEvent\n  | AccountsControllerAccountAddedEvent\n  | AccountsControllerAccountRenamedEvent;\n\n// Messenger\nexport type UserStorageControllerMessenger = RestrictedControllerMessenger<\n  typeof controllerName,\n  Actions | AllowedActions,\n  Events | AllowedEvents,\n  AllowedActions['type'],\n  AllowedEvents['type']\n>;\n\n/**\n * Reusable controller that allows any team to store synchronized data for a given user.\n * These can be settings shared cross MetaMask clients, or data we want to persist when uninstalling/reinstalling.\n *\n * NOTE:\n * - data stored on UserStorage is FULLY encrypted, with the only keys stored/managed on the client.\n * - No one can access this data unless they are have the SRP and are able to run the signing snap.\n */\nexport default class UserStorageController extends BaseController<\n  typeof controllerName,\n  UserStorageControllerState,\n  UserStorageControllerMessenger\n> {\n  #auth = {\n    getBearerToken: async () => {\n      return await this.messagingSystem.call(\n        'AuthenticationController:getBearerToken',\n      );\n    },\n    getProfileId: async () => {\n      const sessionProfile = await this.messagingSystem.call(\n        'AuthenticationController:getSessionProfile',\n      );\n      return sessionProfile?.profileId;\n    },\n    isAuthEnabled: () => {\n      return this.messagingSystem.call('AuthenticationController:isSignedIn');\n    },\n    signIn: async () => {\n      return await this.messagingSystem.call(\n        'AuthenticationController:performSignIn',\n      );\n    },\n    signOut: async () => {\n      return this.messagingSystem.call(\n        'AuthenticationController:performSignOut',\n      );\n    },\n  };\n\n  #accounts = {\n    // This is replaced with the actual value in the constructor\n    // We will remove this once the feature will be released\n    isAccountSyncingEnabled: false,\n    isAccountSyncingInProgress: false,\n    setupAccountSyncingSubscriptions: () => {\n      this.messagingSystem.subscribe(\n        'AccountsController:accountAdded',\n        // eslint-disable-next-line @typescript-eslint/no-misused-promises\n        async (account) => {\n          if (this.#accounts.isAccountSyncingInProgress) {\n            return;\n          }\n          await this.saveInternalAccountToUserStorage(account.address);\n        },\n      );\n\n      this.messagingSystem.subscribe(\n        'AccountsController:accountRenamed',\n        // eslint-disable-next-line @typescript-eslint/no-misused-promises\n        async (account) => {\n          if (this.#accounts.isAccountSyncingInProgress) {\n            return;\n          }\n          await this.saveInternalAccountToUserStorage(account.address);\n        },\n      );\n    },\n    getInternalAccountByAddress: async (address: string) => {\n      return this.messagingSystem.call(\n        'AccountsController:getAccountByAddress',\n        address,\n      );\n    },\n    getInternalAccountsList: async (): Promise<InternalAccount[]> => {\n      return this.messagingSystem.call('AccountsController:listAccounts');\n    },\n    getUserStorageAccountsList: async (): Promise<\n      UserStorageAccount[] | null\n    > => {\n      const rawAccountsListResponse =\n        await this.performGetStorageAllFeatureEntries('accounts');\n\n      return (\n        rawAccountsListResponse?.map((rawAccount) => JSON.parse(rawAccount)) ??\n        null\n      );\n    },\n    saveInternalAccountToUserStorage: async (address: string) => {\n      const internalAccount = await this.#accounts.getInternalAccountByAddress(\n        address,\n      );\n\n      if (!internalAccount) {\n        return;\n      }\n\n      // Map the internal account to the user storage account schema\n      const mappedAccount =\n        mapInternalAccountToUserStorageAccount(internalAccount);\n\n      await this.performSetStorage(\n        `accounts.${address}`,\n        JSON.stringify(mappedAccount),\n      );\n    },\n    saveInternalAccountsListToUserStorage: async () => {\n      const internalAccountsList =\n        await this.#accounts.getInternalAccountsList();\n\n      if (!internalAccountsList) {\n        return;\n      }\n\n      const userStorageAccountsList = internalAccountsList.map(\n        mapInternalAccountToUserStorageAccount,\n      );\n\n      await Promise.all(\n        userStorageAccountsList.map(async (userStorageAccount) => {\n          await this.performSetStorage(\n            `accounts.${userStorageAccount.a}`,\n            JSON.stringify(userStorageAccount),\n          );\n        }),\n      );\n    },\n  };\n\n  #notificationServices = {\n    disableNotificationServices: async () => {\n      return await this.messagingSystem.call(\n        'NotificationServicesController:disableNotificationServices',\n      );\n    },\n    selectIsNotificationServicesEnabled: async () => {\n      return this.messagingSystem.call(\n        'NotificationServicesController:selectIsNotificationServicesEnabled',\n      );\n    },\n  };\n\n  #isUnlocked = false;\n\n  #keyringController = {\n    setupLockedStateSubscriptions: () => {\n      const { isUnlocked } = this.messagingSystem.call(\n        'KeyringController:getState',\n      );\n      this.#isUnlocked = isUnlocked;\n\n      this.messagingSystem.subscribe('KeyringController:unlock', () => {\n        this.#isUnlocked = true;\n      });\n\n      this.messagingSystem.subscribe('KeyringController:lock', () => {\n        this.#isUnlocked = false;\n      });\n    },\n  };\n\n  #nativeScryptCrypto: NativeScrypt | undefined = undefined;\n\n  getMetaMetricsState: () => boolean;\n\n  constructor({\n    messenger,\n    state,\n    env,\n    getMetaMetricsState,\n    nativeScryptCrypto,\n  }: {\n    messenger: UserStorageControllerMessenger;\n    state?: UserStorageControllerState;\n    env?: {\n      isAccountSyncingEnabled?: boolean;\n    };\n    getMetaMetricsState: () => boolean;\n    nativeScryptCrypto?: NativeScrypt;\n  }) {\n    super({\n      messenger,\n      metadata,\n      name: controllerName,\n      state: { ...defaultState, ...state },\n    });\n\n    this.#accounts.isAccountSyncingEnabled = Boolean(\n      env?.isAccountSyncingEnabled,\n    );\n\n    this.getMetaMetricsState = getMetaMetricsState;\n    this.#keyringController.setupLockedStateSubscriptions();\n    this.#registerMessageHandlers();\n    this.#nativeScryptCrypto = nativeScryptCrypto;\n    this.#accounts.setupAccountSyncingSubscriptions();\n  }\n\n  /**\n   * Constructor helper for registering this controller's messaging system\n   * actions.\n   */\n  #registerMessageHandlers(): void {\n    this.messagingSystem.registerActionHandler(\n      'UserStorageController:performGetStorage',\n      this.performGetStorage.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'UserStorageController:performGetStorageAllFeatureEntries',\n      this.performGetStorageAllFeatureEntries.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'UserStorageController:performSetStorage',\n      this.performSetStorage.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'UserStorageController:getStorageKey',\n      this.getStorageKey.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'UserStorageController:enableProfileSyncing',\n      this.enableProfileSyncing.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'UserStorageController:disableProfileSyncing',\n      this.disableProfileSyncing.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'UserStorageController:syncInternalAccountsWithUserStorage',\n      this.syncInternalAccountsWithUserStorage.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'UserStorageController:saveInternalAccountToUserStorage',\n      this.saveInternalAccountToUserStorage.bind(this),\n    );\n  }\n\n  public async enableProfileSyncing(): Promise<void> {\n    try {\n      this.#setIsProfileSyncingUpdateLoading(true);\n\n      const authEnabled = this.#auth.isAuthEnabled();\n      if (!authEnabled) {\n        await this.#auth.signIn();\n      }\n\n      this.update((state) => {\n        state.isProfileSyncingEnabled = true;\n      });\n\n      this.#setIsProfileSyncingUpdateLoading(false);\n    } catch (e) {\n      this.#setIsProfileSyncingUpdateLoading(false);\n      const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);\n      throw new Error(\n        `${controllerName} - failed to enable profile syncing - ${errorMessage}`,\n      );\n    }\n  }\n\n  public async setIsProfileSyncingEnabled(\n    isProfileSyncingEnabled: boolean,\n  ): Promise<void> {\n    this.update((state) => {\n      state.isProfileSyncingEnabled = isProfileSyncingEnabled;\n    });\n  }\n\n  public async disableProfileSyncing(): Promise<void> {\n    const isAlreadyDisabled = !this.state.isProfileSyncingEnabled;\n    if (isAlreadyDisabled) {\n      return;\n    }\n\n    try {\n      this.#setIsProfileSyncingUpdateLoading(true);\n\n      const isNotificationServicesEnabled =\n        await this.#notificationServices.selectIsNotificationServicesEnabled();\n\n      if (isNotificationServicesEnabled) {\n        await this.#notificationServices.disableNotificationServices();\n      }\n\n      const isMetaMetricsParticipation = this.getMetaMetricsState();\n\n      if (!isMetaMetricsParticipation) {\n        await this.#auth.signOut();\n      }\n\n      this.#setIsProfileSyncingUpdateLoading(false);\n\n      this.update((state) => {\n        state.isProfileSyncingEnabled = false;\n      });\n    } catch (e) {\n      this.#setIsProfileSyncingUpdateLoading(false);\n      const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);\n      throw new Error(\n        `${controllerName} - failed to disable profile syncing - ${errorMessage}`,\n      );\n    }\n  }\n\n  /**\n   * Allows retrieval of stored data. Data stored is string formatted.\n   * Developers can extend the entry path and entry name through the `schema.ts` file.\n   *\n   * @param path - string in the form of `${feature}.${key}` that matches schema\n   * @returns the decrypted string contents found from user storage (or null if not found)\n   */\n  public async performGetStorage(\n    path: UserStoragePathWithFeatureAndKey,\n  ): Promise<string | null> {\n    this.#assertProfileSyncingEnabled();\n\n    const { bearerToken, storageKey } =\n      await this.#getStorageKeyAndBearerToken();\n\n    const result = await getUserStorage({\n      path,\n      bearerToken,\n      storageKey,\n      nativeScryptCrypto: this.#nativeScryptCrypto,\n    });\n\n    return result;\n  }\n\n  /**\n   * Allows retrieval of all stored data for a specific feature. Data stored is formatted as an array of strings.\n   * Developers can extend the entry path through the `schema.ts` file.\n   *\n   * @param path - string in the form of `${feature}` that matches schema\n   * @returns the array of decrypted string contents found from user storage (or null if not found)\n   */\n  public async performGetStorageAllFeatureEntries(\n    path: UserStoragePathWithFeatureOnly,\n  ): Promise<string[] | null> {\n    this.#assertProfileSyncingEnabled();\n\n    const { bearerToken, storageKey } =\n      await this.#getStorageKeyAndBearerToken();\n\n    const result = await getUserStorageAllFeatureEntries({\n      path,\n      bearerToken,\n      storageKey,\n      nativeScryptCrypto: this.#nativeScryptCrypto,\n    });\n\n    return result;\n  }\n\n  /**\n   * Allows storage of user data. Data stored must be string formatted.\n   * Developers can extend the entry path and entry name through the `schema.ts` file.\n   *\n   * @param path - string in the form of `${feature}.${key}` that matches schema\n   * @param value - The string data you want to store.\n   * @returns nothing. NOTE that an error is thrown if fails to store data.\n   */\n  public async performSetStorage(\n    path: UserStoragePathWithFeatureAndKey,\n    value: string,\n  ): Promise<void> {\n    this.#assertProfileSyncingEnabled();\n\n    const { bearerToken, storageKey } =\n      await this.#getStorageKeyAndBearerToken();\n\n    await upsertUserStorage(value, {\n      path,\n      bearerToken,\n      storageKey,\n      nativeScryptCrypto: this.#nativeScryptCrypto,\n    });\n  }\n\n  /**\n   * Retrieves the storage key, for internal use only!\n   *\n   * @returns the storage key\n   */\n  public async getStorageKey(): Promise<string> {\n    this.#assertProfileSyncingEnabled();\n    const storageKey = await this.#createStorageKey();\n    return storageKey;\n  }\n\n  #assertProfileSyncingEnabled(): void {\n    if (!this.state.isProfileSyncingEnabled) {\n      throw new Error(\n        `${controllerName}: Unable to call method, user is not authenticated`,\n      );\n    }\n  }\n\n  /**\n   * Utility to get the bearer token and storage key\n   */\n  async #getStorageKeyAndBearerToken(): Promise<{\n    bearerToken: string;\n    storageKey: string;\n  }> {\n    const bearerToken = await this.#auth.getBearerToken();\n    if (!bearerToken) {\n      throw new Error('UserStorageController - unable to get bearer token');\n    }\n    const storageKey = await this.#createStorageKey();\n\n    return { bearerToken, storageKey };\n  }\n\n  /**\n   * Rather than storing the storage key, we can compute the storage key when needed.\n   *\n   * @returns the storage key\n   */\n  async #createStorageKey(): Promise<string> {\n    const id: string = await this.#auth.getProfileId();\n    if (!id) {\n      throw new Error('UserStorageController - unable to create storage key');\n    }\n\n    const storageKeySignature = await this.#snapSignMessage(`metamask:${id}`);\n    const storageKey = createSHA256Hash(storageKeySignature);\n    return storageKey;\n  }\n\n  #_snapSignMessageCache: Record<`metamask:${string}`, string> = {};\n\n  /**\n   * Signs a specific message using an underlying auth snap.\n   *\n   * @param message - A specific tagged message to sign.\n   * @returns A Signature created by the snap.\n   */\n  async #snapSignMessage(message: `metamask:${string}`): Promise<string> {\n    if (this.#_snapSignMessageCache[message]) {\n      return this.#_snapSignMessageCache[message];\n    }\n\n    if (!this.#isUnlocked) {\n      throw new Error(\n        '#snapSignMessage - unable to call snap, wallet is locked',\n      );\n    }\n\n    const result = (await this.messagingSystem.call(\n      'SnapController:handleRequest',\n      createSnapSignMessageRequest(message),\n    )) as string;\n\n    this.#_snapSignMessageCache[message] = result;\n\n    return result;\n  }\n\n  #setIsProfileSyncingUpdateLoading(\n    isProfileSyncingUpdateLoading: boolean,\n  ): void {\n    this.update((state) => {\n      state.isProfileSyncingUpdateLoading = isProfileSyncingUpdateLoading;\n    });\n  }\n\n  /**\n   * Syncs the internal accounts list with the user storage accounts list.\n   * This method is used to make sure that the internal accounts list is up-to-date with the user storage accounts list and vice-versa.\n   * It will add new accounts to the internal accounts list, update/merge conflicting names and re-upload the results in some cases to the user storage.\n   */\n  async syncInternalAccountsWithUserStorage(): Promise<void> {\n    if (!this.#accounts.isAccountSyncingEnabled) {\n      return;\n    }\n\n    try {\n      this.#assertProfileSyncingEnabled();\n\n      this.#accounts.isAccountSyncingInProgress = true;\n\n      const userStorageAccountsList =\n        await this.#accounts.getUserStorageAccountsList();\n\n      if (!userStorageAccountsList || !userStorageAccountsList.length) {\n        await this.#accounts.saveInternalAccountsListToUserStorage();\n        return;\n      }\n\n      // Compare internal accounts list with user storage accounts list\n      // First step: compare lengths\n      let internalAccountsList = await this.#accounts.getInternalAccountsList();\n\n      if (!internalAccountsList || !internalAccountsList.length) {\n        throw new Error(`Failed to get internal accounts list`);\n      }\n\n      const hasMoreInternalAccountsThanUserStorageAccounts =\n        internalAccountsList.length > userStorageAccountsList.length;\n\n      // We don't want to remove existing accounts for a user\n      // so we only add new accounts if the user has more accounts than the internal accounts list\n      if (!hasMoreInternalAccountsThanUserStorageAccounts) {\n        const numberOfAccountsToAdd =\n          userStorageAccountsList.length - internalAccountsList.length;\n\n        // Create new accounts to match the user storage accounts list\n        const addNewAccountsPromises = Array.from({\n          length: numberOfAccountsToAdd,\n        }).map(async () => {\n          await this.messagingSystem.call('KeyringController:addNewAccount');\n        });\n\n        await Promise.all(addNewAccountsPromises);\n      }\n\n      // Second step: compare account names\n      // Get the internal accounts list again since new accounts might have been added in the previous step\n      internalAccountsList = await this.#accounts.getInternalAccountsList();\n\n      for await (const internalAccount of internalAccountsList) {\n        const userStorageAccount = userStorageAccountsList.find(\n          (account) => account.a === internalAccount.address,\n        );\n\n        if (!userStorageAccount) {\n          await this.#accounts.saveInternalAccountToUserStorage(\n            internalAccount.address,\n          );\n          continue;\n        }\n\n        // One or both accounts have default names\n        const isInternalAccountNameDefault = isNameDefaultAccountName(\n          internalAccount.metadata.name,\n        );\n        const isUserStorageAccountNameDefault = isNameDefaultAccountName(\n          userStorageAccount.n,\n        );\n\n        // Internal account has default name\n        if (isInternalAccountNameDefault) {\n          if (!isUserStorageAccountNameDefault) {\n            this.messagingSystem.call(\n              'AccountsController:updateAccountMetadata',\n              internalAccount.id,\n              {\n                name: userStorageAccount.n,\n              },\n            );\n          }\n          continue;\n        }\n\n        // Internal account has custom name but user storage account has default name\n        if (isUserStorageAccountNameDefault) {\n          await this.#accounts.saveInternalAccountToUserStorage(\n            internalAccount.address,\n          );\n          continue;\n        }\n\n        // Both accounts have custom names\n\n        // User storage account has a nameLastUpdatedAt timestamp\n        // Note: not storing the undefined checks in constants to act as a type guard\n        if (userStorageAccount.nlu !== undefined) {\n          if (internalAccount.metadata.nameLastUpdatedAt !== undefined) {\n            const isInternalAccountNameNewer =\n              internalAccount.metadata.nameLastUpdatedAt >\n              userStorageAccount.nlu;\n\n            if (isInternalAccountNameNewer) {\n              await this.#accounts.saveInternalAccountToUserStorage(\n                internalAccount.address,\n              );\n              continue;\n            }\n          }\n\n          this.messagingSystem.call(\n            'AccountsController:updateAccountMetadata',\n            internalAccount.id,\n            {\n              name: userStorageAccount.n,\n              nameLastUpdatedAt: userStorageAccount.nlu,\n            },\n          );\n\n          continue;\n        } else if (internalAccount.metadata.nameLastUpdatedAt !== undefined) {\n          await this.#accounts.saveInternalAccountToUserStorage(\n            internalAccount.address,\n          );\n          continue;\n        }\n      }\n    } catch (e) {\n      const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);\n      throw new Error(\n        `${controllerName} - failed to sync user storage accounts list - ${errorMessage}`,\n      );\n    } finally {\n      this.#accounts.isAccountSyncingInProgress = false;\n    }\n  }\n\n  /**\n   * Saves an individual internal account to the user storage.\n   * @param address - The address of the internal account to save\n   */\n  async saveInternalAccountToUserStorage(address: string): Promise<void> {\n    if (!this.#accounts.isAccountSyncingEnabled) {\n      return;\n    }\n\n    try {\n      this.#assertProfileSyncingEnabled();\n\n      await this.#accounts.saveInternalAccountToUserStorage(address);\n    } catch (e) {\n      const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);\n      throw new Error(\n        `${controllerName} - failed to save account to user storage - ${errorMessage}`,\n      );\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAaA,SAAS,sBAAsB;AAwD/B,IAAM,iBAAiB;AAchB,IAAM,eAA2C;AAAA,EACtD,yBAAyB;AAAA,EACzB,+BAA+B;AACjC;AAEA,IAAM,WAAsD;AAAA,EAC1D,yBAAyB;AAAA,IACvB,SAAS;AAAA,IACT,WAAW;AAAA,EACb;AAAA,EACA,+BAA+B;AAAA,IAC7B,SAAS;AAAA,IACT,WAAW;AAAA,EACb;AACF;AAjGA;AA8MA,IAAqB,wBAArB,cAAmD,eAIjD;AAAA,EAyJA,YAAY;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAQG;AACD,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA,MAAM;AAAA,MACN,OAAO,EAAE,GAAG,cAAc,GAAG,MAAM;AAAA,IACrC,CAAC;AAiBH;AAAA;AAAA;AAAA;AAAA;AAmMA;AAWA;AAAA;AAAA;AAAA,uBAAM;AAkBN;AAAA;AAAA;AAAA;AAAA;AAAA,uBAAM;AAmBN;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,uBAAM;AAqBN;AArcA,8BAAQ;AAAA,MACN,gBAAgB,YAAY;AAC1B,eAAO,MAAM,KAAK,gBAAgB;AAAA,UAChC;AAAA,QACF;AAAA,MACF;AAAA,MACA,cAAc,YAAY;AACxB,cAAM,iBAAiB,MAAM,KAAK,gBAAgB;AAAA,UAChD;AAAA,QACF;AACA,eAAO,gBAAgB;AAAA,MACzB;AAAA,MACA,eAAe,MAAM;AACnB,eAAO,KAAK,gBAAgB,KAAK,qCAAqC;AAAA,MACxE;AAAA,MACA,QAAQ,YAAY;AAClB,eAAO,MAAM,KAAK,gBAAgB;AAAA,UAChC;AAAA,QACF;AAAA,MACF;AAAA,MACA,SAAS,YAAY;AACnB,eAAO,KAAK,gBAAgB;AAAA,UAC1B;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,kCAAY;AAAA;AAAA;AAAA,MAGV,yBAAyB;AAAA,MACzB,4BAA4B;AAAA,MAC5B,kCAAkC,MAAM;AACtC,aAAK,gBAAgB;AAAA,UACnB;AAAA;AAAA,UAEA,OAAO,YAAY;AACjB,gBAAI,mBAAK,WAAU,4BAA4B;AAC7C;AAAA,YACF;AACA,kBAAM,KAAK,iCAAiC,QAAQ,OAAO;AAAA,UAC7D;AAAA,QACF;AAEA,aAAK,gBAAgB;AAAA,UACnB;AAAA;AAAA,UAEA,OAAO,YAAY;AACjB,gBAAI,mBAAK,WAAU,4BAA4B;AAC7C;AAAA,YACF;AACA,kBAAM,KAAK,iCAAiC,QAAQ,OAAO;AAAA,UAC7D;AAAA,QACF;AAAA,MACF;AAAA,MACA,6BAA6B,OAAO,YAAoB;AACtD,eAAO,KAAK,gBAAgB;AAAA,UAC1B;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,MACA,yBAAyB,YAAwC;AAC/D,eAAO,KAAK,gBAAgB,KAAK,iCAAiC;AAAA,MACpE;AAAA,MACA,4BAA4B,YAEvB;AACH,cAAM,0BACJ,MAAM,KAAK,mCAAmC,UAAU;AAE1D,eACE,yBAAyB,IAAI,CAAC,eAAe,KAAK,MAAM,UAAU,CAAC,KACnE;AAAA,MAEJ;AAAA,MACA,kCAAkC,OAAO,YAAoB;AAC3D,cAAM,kBAAkB,MAAM,mBAAK,WAAU;AAAA,UAC3C;AAAA,QACF;AAEA,YAAI,CAAC,iBAAiB;AACpB;AAAA,QACF;AAGA,cAAM,gBACJ,uCAAuC,eAAe;AAExD,cAAM,KAAK;AAAA,UACT,YAAY,OAAO;AAAA,UACnB,KAAK,UAAU,aAAa;AAAA,QAC9B;AAAA,MACF;AAAA,MACA,uCAAuC,YAAY;AACjD,cAAM,uBACJ,MAAM,mBAAK,WAAU,wBAAwB;AAE/C,YAAI,CAAC,sBAAsB;AACzB;AAAA,QACF;AAEA,cAAM,0BAA0B,qBAAqB;AAAA,UACnD;AAAA,QACF;AAEA,cAAM,QAAQ;AAAA,UACZ,wBAAwB,IAAI,OAAO,uBAAuB;AACxD,kBAAM,KAAK;AAAA,cACT,YAAY,mBAAmB,CAAC;AAAA,cAChC,KAAK,UAAU,kBAAkB;AAAA,YACnC;AAAA,UACF,CAAC;AAAA,QACH;AAAA,MACF;AAAA,IACF;AAEA,8CAAwB;AAAA,MACtB,6BAA6B,YAAY;AACvC,eAAO,MAAM,KAAK,gBAAgB;AAAA,UAChC;AAAA,QACF;AAAA,MACF;AAAA,MACA,qCAAqC,YAAY;AAC/C,eAAO,KAAK,gBAAgB;AAAA,UAC1B;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,oCAAc;AAEd,2CAAqB;AAAA,MACnB,+BAA+B,MAAM;AACnC,cAAM,EAAE,WAAW,IAAI,KAAK,gBAAgB;AAAA,UAC1C;AAAA,QACF;AACA,2BAAK,aAAc;AAEnB,aAAK,gBAAgB,UAAU,4BAA4B,MAAM;AAC/D,6BAAK,aAAc;AAAA,QACrB,CAAC;AAED,aAAK,gBAAgB,UAAU,0BAA0B,MAAM;AAC7D,6BAAK,aAAc;AAAA,QACrB,CAAC;AAAA,MACH;AAAA,IACF;AAEA,4CAAgD;AAoRhD,+CAA+D,CAAC;AA1P9D,uBAAK,WAAU,0BAA0B;AAAA,MACvC,KAAK;AAAA,IACP;AAEA,SAAK,sBAAsB;AAC3B,uBAAK,oBAAmB,8BAA8B;AACtD,0BAAK,sDAAL;AACA,uBAAK,qBAAsB;AAC3B,uBAAK,WAAU,iCAAiC;AAAA,EAClD;AAAA,EAgDA,MAAa,uBAAsC;AACjD,QAAI;AACF,4BAAK,wEAAL,WAAuC;AAEvC,YAAM,cAAc,mBAAK,OAAM,cAAc;AAC7C,UAAI,CAAC,aAAa;AAChB,cAAM,mBAAK,OAAM,OAAO;AAAA,MAC1B;AAEA,WAAK,OAAO,CAAC,UAAU;AACrB,cAAM,0BAA0B;AAAA,MAClC,CAAC;AAED,4BAAK,wEAAL,WAAuC;AAAA,IACzC,SAAS,GAAG;AACV,4BAAK,wEAAL,WAAuC;AACvC,YAAM,eAAe,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,CAAC;AACtE,YAAM,IAAI;AAAA,QACR,GAAG,cAAc,yCAAyC,YAAY;AAAA,MACxE;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAa,2BACX,yBACe;AACf,SAAK,OAAO,CAAC,UAAU;AACrB,YAAM,0BAA0B;AAAA,IAClC,CAAC;AAAA,EACH;AAAA,EAEA,MAAa,wBAAuC;AAClD,UAAM,oBAAoB,CAAC,KAAK,MAAM;AACtC,QAAI,mBAAmB;AACrB;AAAA,IACF;AAEA,QAAI;AACF,4BAAK,wEAAL,WAAuC;AAEvC,YAAM,gCACJ,MAAM,mBAAK,uBAAsB,oCAAoC;AAEvE,UAAI,+BAA+B;AACjC,cAAM,mBAAK,uBAAsB,4BAA4B;AAAA,MAC/D;AAEA,YAAM,6BAA6B,KAAK,oBAAoB;AAE5D,UAAI,CAAC,4BAA4B;AAC/B,cAAM,mBAAK,OAAM,QAAQ;AAAA,MAC3B;AAEA,4BAAK,wEAAL,WAAuC;AAEvC,WAAK,OAAO,CAAC,UAAU;AACrB,cAAM,0BAA0B;AAAA,MAClC,CAAC;AAAA,IACH,SAAS,GAAG;AACV,4BAAK,wEAAL,WAAuC;AACvC,YAAM,eAAe,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,CAAC;AACtE,YAAM,IAAI;AAAA,QACR,GAAG,cAAc,0CAA0C,YAAY;AAAA,MACzE;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAa,kBACX,MACwB;AACxB,0BAAK,8DAAL;AAEA,UAAM,EAAE,aAAa,WAAW,IAC9B,MAAM,sBAAK,8DAAL;AAER,UAAM,SAAS,MAAM,eAAe;AAAA,MAClC;AAAA,MACA;AAAA,MACA;AAAA,MACA,oBAAoB,mBAAK;AAAA,IAC3B,CAAC;AAED,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAa,mCACX,MAC0B;AAC1B,0BAAK,8DAAL;AAEA,UAAM,EAAE,aAAa,WAAW,IAC9B,MAAM,sBAAK,8DAAL;AAER,UAAM,SAAS,MAAM,gCAAgC;AAAA,MACnD;AAAA,MACA;AAAA,MACA;AAAA,MACA,oBAAoB,mBAAK;AAAA,IAC3B,CAAC;AAED,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAa,kBACX,MACA,OACe;AACf,0BAAK,8DAAL;AAEA,UAAM,EAAE,aAAa,WAAW,IAC9B,MAAM,sBAAK,8DAAL;AAER,UAAM,kBAAkB,OAAO;AAAA,MAC7B;AAAA,MACA;AAAA,MACA;AAAA,MACA,oBAAoB,mBAAK;AAAA,IAC3B,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAa,gBAAiC;AAC5C,0BAAK,8DAAL;AACA,UAAM,aAAa,MAAM,sBAAK,wCAAL;AACzB,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAoFA,MAAM,sCAAqD;AACzD,QAAI,CAAC,mBAAK,WAAU,yBAAyB;AAC3C;AAAA,IACF;AAEA,QAAI;AACF,4BAAK,8DAAL;AAEA,yBAAK,WAAU,6BAA6B;AAE5C,YAAM,0BACJ,MAAM,mBAAK,WAAU,2BAA2B;AAElD,UAAI,CAAC,2BAA2B,CAAC,wBAAwB,QAAQ;AAC/D,cAAM,mBAAK,WAAU,sCAAsC;AAC3D;AAAA,MACF;AAIA,UAAI,uBAAuB,MAAM,mBAAK,WAAU,wBAAwB;AAExE,UAAI,CAAC,wBAAwB,CAAC,qBAAqB,QAAQ;AACzD,cAAM,IAAI,MAAM,sCAAsC;AAAA,MACxD;AAEA,YAAM,iDACJ,qBAAqB,SAAS,wBAAwB;AAIxD,UAAI,CAAC,gDAAgD;AACnD,cAAM,wBACJ,wBAAwB,SAAS,qBAAqB;AAGxD,cAAM,yBAAyB,MAAM,KAAK;AAAA,UACxC,QAAQ;AAAA,QACV,CAAC,EAAE,IAAI,YAAY;AACjB,gBAAM,KAAK,gBAAgB,KAAK,iCAAiC;AAAA,QACnE,CAAC;AAED,cAAM,QAAQ,IAAI,sBAAsB;AAAA,MAC1C;AAIA,6BAAuB,MAAM,mBAAK,WAAU,wBAAwB;AAEpE,uBAAiB,mBAAmB,sBAAsB;AACxD,cAAM,qBAAqB,wBAAwB;AAAA,UACjD,CAAC,YAAY,QAAQ,MAAM,gBAAgB;AAAA,QAC7C;AAEA,YAAI,CAAC,oBAAoB;AACvB,gBAAM,mBAAK,WAAU;AAAA,YACnB,gBAAgB;AAAA,UAClB;AACA;AAAA,QACF;AAGA,cAAM,+BAA+B;AAAA,UACnC,gBAAgB,SAAS;AAAA,QAC3B;AACA,cAAM,kCAAkC;AAAA,UACtC,mBAAmB;AAAA,QACrB;AAGA,YAAI,8BAA8B;AAChC,cAAI,CAAC,iCAAiC;AACpC,iBAAK,gBAAgB;AAAA,cACnB;AAAA,cACA,gBAAgB;AAAA,cAChB;AAAA,gBACE,MAAM,mBAAmB;AAAA,cAC3B;AAAA,YACF;AAAA,UACF;AACA;AAAA,QACF;AAGA,YAAI,iCAAiC;AACnC,gBAAM,mBAAK,WAAU;AAAA,YACnB,gBAAgB;AAAA,UAClB;AACA;AAAA,QACF;AAMA,YAAI,mBAAmB,QAAQ,QAAW;AACxC,cAAI,gBAAgB,SAAS,sBAAsB,QAAW;AAC5D,kBAAM,6BACJ,gBAAgB,SAAS,oBACzB,mBAAmB;AAErB,gBAAI,4BAA4B;AAC9B,oBAAM,mBAAK,WAAU;AAAA,gBACnB,gBAAgB;AAAA,cAClB;AACA;AAAA,YACF;AAAA,UACF;AAEA,eAAK,gBAAgB;AAAA,YACnB;AAAA,YACA,gBAAgB;AAAA,YAChB;AAAA,cACE,MAAM,mBAAmB;AAAA,cACzB,mBAAmB,mBAAmB;AAAA,YACxC;AAAA,UACF;AAEA;AAAA,QACF,WAAW,gBAAgB,SAAS,sBAAsB,QAAW;AACnE,gBAAM,mBAAK,WAAU;AAAA,YACnB,gBAAgB;AAAA,UAClB;AACA;AAAA,QACF;AAAA,MACF;AAAA,IACF,SAAS,GAAG;AACV,YAAM,eAAe,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,CAAC;AACtE,YAAM,IAAI;AAAA,QACR,GAAG,cAAc,kDAAkD,YAAY;AAAA,MACjF;AAAA,IACF,UAAE;AACA,yBAAK,WAAU,6BAA6B;AAAA,IAC9C;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,iCAAiC,SAAgC;AACrE,QAAI,CAAC,mBAAK,WAAU,yBAAyB;AAC3C;AAAA,IACF;AAEA,QAAI;AACF,4BAAK,8DAAL;AAEA,YAAM,mBAAK,WAAU,iCAAiC,OAAO;AAAA,IAC/D,SAAS,GAAG;AACV,YAAM,eAAe,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,CAAC;AACtE,YAAM,IAAI;AAAA,QACR,GAAG,cAAc,+CAA+C,YAAY;AAAA,MAC9E;AAAA,IACF;AAAA,EACF;AACF;AA9mBE;AA2BA;AAyFA;AAaA;AAEA;AAiBA;AAyCA;AAAA,6BAAwB,WAAS;AAC/B,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,kBAAkB,KAAK,IAAI;AAAA,EAClC;AAEA,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,mCAAmC,KAAK,IAAI;AAAA,EACnD;AAEA,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,kBAAkB,KAAK,IAAI;AAAA,EAClC;AAEA,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,cAAc,KAAK,IAAI;AAAA,EAC9B;AAEA,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,qBAAqB,KAAK,IAAI;AAAA,EACrC;AAEA,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,sBAAsB,KAAK,IAAI;AAAA,EACtC;AAEA,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,oCAAoC,KAAK,IAAI;AAAA,EACpD;AAEA,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,iCAAiC,KAAK,IAAI;AAAA,EACjD;AACF;AA2JA;AAAA,iCAA4B,WAAS;AACnC,MAAI,CAAC,KAAK,MAAM,yBAAyB;AACvC,UAAM,IAAI;AAAA,MACR,GAAG,cAAc;AAAA,IACnB;AAAA,EACF;AACF;AAKM;AAAA,iCAA4B,iBAG/B;AACD,QAAM,cAAc,MAAM,mBAAK,OAAM,eAAe;AACpD,MAAI,CAAC,aAAa;AAChB,UAAM,IAAI,MAAM,oDAAoD;AAAA,EACtE;AACA,QAAM,aAAa,MAAM,sBAAK,wCAAL;AAEzB,SAAO,EAAE,aAAa,WAAW;AACnC;AAOM;AAAA,sBAAiB,iBAAoB;AACzC,QAAM,KAAa,MAAM,mBAAK,OAAM,aAAa;AACjD,MAAI,CAAC,IAAI;AACP,UAAM,IAAI,MAAM,sDAAsD;AAAA,EACxE;AAEA,QAAM,sBAAsB,MAAM,sBAAK,sCAAL,WAAsB,YAAY,EAAE;AACtE,QAAM,aAAa,iBAAiB,mBAAmB;AACvD,SAAO;AACT;AAEA;AAQM;AAAA,qBAAgB,eAAC,SAAgD;AACrE,MAAI,mBAAK,wBAAuB,OAAO,GAAG;AACxC,WAAO,mBAAK,wBAAuB,OAAO;AAAA,EAC5C;AAEA,MAAI,CAAC,mBAAK,cAAa;AACrB,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,QAAM,SAAU,MAAM,KAAK,gBAAgB;AAAA,IACzC;AAAA,IACA,6BAA6B,OAAO;AAAA,EACtC;AAEA,qBAAK,wBAAuB,OAAO,IAAI;AAEvC,SAAO;AACT;AAEA;AAAA,sCAAiC,SAC/B,+BACM;AACN,OAAK,OAAO,CAAC,UAAU;AACrB,UAAM,gCAAgC;AAAA,EACxC,CAAC;AACH;","names":[]}