@metamask/profile-sync-controller 0.5.0 → 0.6.0

package/dist/chunk-COBJUBZE.mjs

@@ -1,170 +0,0 @@
-import {
-  getAnyCachedKey,
-  getCachedKeyBySalt,
-  setCachedKey
-} from "./chunk-H25EBXG5.mjs";
-import {
-  base64ToByteArray,
-  byteArrayToBase64,
-  bytesToUtf8
-} from "./chunk-76VRE4BI.mjs";
-import {
-  __privateAdd,
-  __privateMethod
-} from "./chunk-U5UIDVOO.mjs";
-
-// src/controllers/user-storage/encryption/encryption.ts
-import { gcm } from "@noble/ciphers/aes";
-import { randomBytes } from "@noble/ciphers/webcrypto";
-import { scryptAsync } from "@noble/hashes/scrypt";
-import { sha256 } from "@noble/hashes/sha256";
-import { utf8ToBytes, concatBytes, bytesToHex } from "@noble/hashes/utils";
-var ALGORITHM_NONCE_SIZE = 12;
-var ALGORITHM_KEY_SIZE = 16;
-var SCRYPT_SALT_SIZE = 16;
-var SCRYPT_N = 2 ** 17;
-var SCRYPT_r = 8;
-var SCRYPT_p = 1;
-var _encryptStringV1, encryptStringV1_fn, _decryptStringV1, decryptStringV1_fn, _encrypt, encrypt_fn, _decrypt, decrypt_fn, _getOrGenerateScryptKey, getOrGenerateScryptKey_fn;
-var EncryptorDecryptor = class {
-  constructor() {
-    __privateAdd(this, _encryptStringV1);
-    __privateAdd(this, _decryptStringV1);
-    __privateAdd(this, _encrypt);
-    __privateAdd(this, _decrypt);
-    __privateAdd(this, _getOrGenerateScryptKey);
-  }
-  async encryptString(plaintext, password, nativeScryptCrypto) {
-    try {
-      return await __privateMethod(this, _encryptStringV1, encryptStringV1_fn).call(this, plaintext, password, nativeScryptCrypto);
-    } catch (e) {
-      const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);
-      throw new Error(`Unable to encrypt string - ${errorMessage}`);
-    }
-  }
-  async decryptString(encryptedDataStr, password, nativeScryptCrypto) {
-    try {
-      const encryptedData = JSON.parse(encryptedDataStr);
-      if (encryptedData.v === "1") {
-        if (encryptedData.t === "scrypt") {
-          return await __privateMethod(this, _decryptStringV1, decryptStringV1_fn).call(this, encryptedData, password, nativeScryptCrypto);
-        }
-      }
-      throw new Error(
-        `Unsupported encrypted data payload - ${encryptedDataStr}`
-      );
-    } catch (e) {
-      const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);
-      throw new Error(`Unable to decrypt string - ${errorMessage}`);
-    }
-  }
-};
-_encryptStringV1 = new WeakSet();
-encryptStringV1_fn = async function(plaintext, password, nativeScryptCrypto) {
-  const { key, salt } = await __privateMethod(this, _getOrGenerateScryptKey, getOrGenerateScryptKey_fn).call(this, password, {
-    N: SCRYPT_N,
-    r: SCRYPT_r,
-    p: SCRYPT_p,
-    dkLen: ALGORITHM_KEY_SIZE
-  }, randomBytes(SCRYPT_SALT_SIZE), nativeScryptCrypto);
-  const plaintextRaw = utf8ToBytes(plaintext);
-  const ciphertextAndNonceAndSalt = concatBytes(
-    salt,
-    __privateMethod(this, _encrypt, encrypt_fn).call(this, plaintextRaw, key)
-  );
-  const encryptedData = byteArrayToBase64(ciphertextAndNonceAndSalt);
-  const encryptedPayload = {
-    v: "1",
-    t: "scrypt",
-    d: encryptedData,
-    o: {
-      N: SCRYPT_N,
-      r: SCRYPT_r,
-      p: SCRYPT_p,
-      dkLen: ALGORITHM_KEY_SIZE
-    },
-    saltLen: SCRYPT_SALT_SIZE
-  };
-  return JSON.stringify(encryptedPayload);
-};
-_decryptStringV1 = new WeakSet();
-decryptStringV1_fn = async function(data, password, nativeScryptCrypto) {
-  const { o, d: base64CiphertextAndNonceAndSalt, saltLen } = data;
-  const ciphertextAndNonceAndSalt = base64ToByteArray(
-    base64CiphertextAndNonceAndSalt
-  );
-  const salt = ciphertextAndNonceAndSalt.slice(0, saltLen);
-  const ciphertextAndNonce = ciphertextAndNonceAndSalt.slice(
-    saltLen,
-    ciphertextAndNonceAndSalt.length
-  );
-  const { key } = await __privateMethod(this, _getOrGenerateScryptKey, getOrGenerateScryptKey_fn).call(this, password, {
-    N: o.N,
-    r: o.r,
-    p: o.p,
-    dkLen: o.dkLen
-  }, salt, nativeScryptCrypto);
-  return bytesToUtf8(__privateMethod(this, _decrypt, decrypt_fn).call(this, ciphertextAndNonce, key));
-};
-_encrypt = new WeakSet();
-encrypt_fn = function(plaintext, key) {
-  const nonce = randomBytes(ALGORITHM_NONCE_SIZE);
-  const ciphertext = gcm(key, nonce).encrypt(plaintext);
-  return concatBytes(nonce, ciphertext);
-};
-_decrypt = new WeakSet();
-decrypt_fn = function(ciphertextAndNonce, key) {
-  const nonce = ciphertextAndNonce.slice(0, ALGORITHM_NONCE_SIZE);
-  const ciphertext = ciphertextAndNonce.slice(
-    ALGORITHM_NONCE_SIZE,
-    ciphertextAndNonce.length
-  );
-  return gcm(key, nonce).decrypt(ciphertext);
-};
-_getOrGenerateScryptKey = new WeakSet();
-getOrGenerateScryptKey_fn = async function(password, o, salt, nativeScryptCrypto) {
-  const hashedPassword = createSHA256Hash(password);
-  const cachedKey = salt ? getCachedKeyBySalt(hashedPassword, salt) : getAnyCachedKey(hashedPassword);
-  if (cachedKey) {
-    return {
-      key: cachedKey.key,
-      salt: cachedKey.salt
-    };
-  }
-  const newSalt = salt ?? randomBytes(SCRYPT_SALT_SIZE);
-  let newKey;
-  if (nativeScryptCrypto) {
-    newKey = await nativeScryptCrypto(
-      password,
-      newSalt,
-      o.N,
-      o.r,
-      o.p,
-      o.dkLen
-    );
-  } else {
-    newKey = await scryptAsync(password, newSalt, {
-      N: o.N,
-      r: o.r,
-      p: o.p,
-      dkLen: o.dkLen
-    });
-  }
-  setCachedKey(hashedPassword, newSalt, newKey);
-  return {
-    key: newKey,
-    salt: newSalt
-  };
-};
-var encryption = new EncryptorDecryptor();
-var encryption_default = encryption;
-function createSHA256Hash(data) {
-  const hashedData = sha256(data);
-  return bytesToHex(hashedData);
-}
-
-export {
-  encryption_default,
-  createSHA256Hash
-};
-//# sourceMappingURL=chunk-COBJUBZE.mjs.map

package/dist/chunk-COBJUBZE.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/controllers/user-storage/encryption/encryption.ts"],"sourcesContent":["import { gcm } from '@noble/ciphers/aes';\nimport { randomBytes } from '@noble/ciphers/webcrypto';\nimport { scryptAsync } from '@noble/hashes/scrypt';\nimport { sha256 } from '@noble/hashes/sha256';\nimport { utf8ToBytes, concatBytes, bytesToHex } from '@noble/hashes/utils';\n\nimport type { NativeScrypt } from '../UserStorageController';\nimport { getAnyCachedKey, getCachedKeyBySalt, setCachedKey } from './cache';\nimport { base64ToByteArray, byteArrayToBase64, bytesToUtf8 } from './utils';\n\nexport type EncryptedPayload = {\n  // version\n  v: '1';\n\n  // key derivation function algorithm - scrypt\n  t: 'scrypt';\n\n  // data\n  d: string;\n\n  // encryption options - scrypt\n  o: {\n    // eslint-disable-next-line @typescript-eslint/naming-convention\n    N: number;\n    r: number;\n    p: number;\n    dkLen: number;\n  };\n\n  // Salt options\n  saltLen: number;\n};\n\n// Nonce/Key Sizes\nconst ALGORITHM_NONCE_SIZE = 12; // 12 bytes\nconst ALGORITHM_KEY_SIZE = 16; // 16 bytes\n\n// Scrypt settings\n// see: https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html#scrypt\nconst SCRYPT_SALT_SIZE = 16; // 16 bytes\nconst SCRYPT_N = 2 ** 17; // CPU/memory cost parameter (must be a power of 2, > 1)\n// eslint-disable-next-line @typescript-eslint/naming-convention\nconst SCRYPT_r = 8; // Block size parameter\n// eslint-disable-next-line @typescript-eslint/naming-convention\nconst SCRYPT_p = 1; // Parallelization parameter\n\nclass EncryptorDecryptor {\n  async encryptString(\n    plaintext: string,\n    password: string,\n    nativeScryptCrypto?: NativeScrypt,\n  ): Promise<string> {\n    try {\n      return await this.#encryptStringV1(\n        plaintext,\n        password,\n        nativeScryptCrypto,\n      );\n    } catch (e) {\n      const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);\n      throw new Error(`Unable to encrypt string - ${errorMessage}`);\n    }\n  }\n\n  async decryptString(\n    encryptedDataStr: string,\n    password: string,\n    nativeScryptCrypto?: NativeScrypt,\n  ): Promise<string> {\n    try {\n      const encryptedData: EncryptedPayload = JSON.parse(encryptedDataStr);\n      if (encryptedData.v === '1') {\n        if (encryptedData.t === 'scrypt') {\n          return await this.#decryptStringV1(\n            encryptedData,\n            password,\n            nativeScryptCrypto,\n          );\n        }\n      }\n      throw new Error(\n        `Unsupported encrypted data payload - ${encryptedDataStr}`,\n      );\n    } catch (e) {\n      const errorMessage = e instanceof Error ? e.message : JSON.stringify(e);\n      throw new Error(`Unable to decrypt string - ${errorMessage}`);\n    }\n  }\n\n  async #encryptStringV1(\n    plaintext: string,\n    password: string,\n    nativeScryptCrypto?: NativeScrypt,\n  ): Promise<string> {\n    const { key, salt } = await this.#getOrGenerateScryptKey(\n      password,\n      {\n        N: SCRYPT_N,\n        r: SCRYPT_r,\n        p: SCRYPT_p,\n        dkLen: ALGORITHM_KEY_SIZE,\n      },\n      randomBytes(SCRYPT_SALT_SIZE),\n      nativeScryptCrypto,\n    );\n\n    // Encrypt and prepend salt.\n    const plaintextRaw = utf8ToBytes(plaintext);\n    const ciphertextAndNonceAndSalt = concatBytes(\n      salt,\n      this.#encrypt(plaintextRaw, key),\n    );\n\n    // Convert to Base64\n    const encryptedData = byteArrayToBase64(ciphertextAndNonceAndSalt);\n\n    const encryptedPayload: EncryptedPayload = {\n      v: '1',\n      t: 'scrypt',\n      d: encryptedData,\n      o: {\n        N: SCRYPT_N,\n        r: SCRYPT_r,\n        p: SCRYPT_p,\n        dkLen: ALGORITHM_KEY_SIZE,\n      },\n      saltLen: SCRYPT_SALT_SIZE,\n    };\n\n    return JSON.stringify(encryptedPayload);\n  }\n\n  async #decryptStringV1(\n    data: EncryptedPayload,\n    password: string,\n    nativeScryptCrypto?: NativeScrypt,\n  ): Promise<string> {\n    const { o, d: base64CiphertextAndNonceAndSalt, saltLen } = data;\n\n    // Decode the base64.\n    const ciphertextAndNonceAndSalt = base64ToByteArray(\n      base64CiphertextAndNonceAndSalt,\n    );\n\n    // Create buffers of salt and ciphertextAndNonce.\n    const salt = ciphertextAndNonceAndSalt.slice(0, saltLen);\n    const ciphertextAndNonce = ciphertextAndNonceAndSalt.slice(\n      saltLen,\n      ciphertextAndNonceAndSalt.length,\n    );\n\n    // Derive the key.\n    const { key } = await this.#getOrGenerateScryptKey(\n      password,\n      {\n        N: o.N,\n        r: o.r,\n        p: o.p,\n        dkLen: o.dkLen,\n      },\n      salt,\n      nativeScryptCrypto,\n    );\n\n    // Decrypt and return result.\n    return bytesToUtf8(this.#decrypt(ciphertextAndNonce, key));\n  }\n\n  #encrypt(plaintext: Uint8Array, key: Uint8Array): Uint8Array {\n    const nonce = randomBytes(ALGORITHM_NONCE_SIZE);\n\n    // Encrypt and prepend nonce.\n    const ciphertext = gcm(key, nonce).encrypt(plaintext);\n\n    return concatBytes(nonce, ciphertext);\n  }\n\n  #decrypt(ciphertextAndNonce: Uint8Array, key: Uint8Array): Uint8Array {\n    // Create buffers of nonce and ciphertext.\n    const nonce = ciphertextAndNonce.slice(0, ALGORITHM_NONCE_SIZE);\n    const ciphertext = ciphertextAndNonce.slice(\n      ALGORITHM_NONCE_SIZE,\n      ciphertextAndNonce.length,\n    );\n\n    // Decrypt and return result.\n    return gcm(key, nonce).decrypt(ciphertext);\n  }\n\n  async #getOrGenerateScryptKey(\n    password: string,\n    o: EncryptedPayload['o'],\n    salt?: Uint8Array,\n    nativeScryptCrypto?: NativeScrypt,\n  ) {\n    const hashedPassword = createSHA256Hash(password);\n    const cachedKey = salt\n      ? getCachedKeyBySalt(hashedPassword, salt)\n      : getAnyCachedKey(hashedPassword);\n\n    if (cachedKey) {\n      return {\n        key: cachedKey.key,\n        salt: cachedKey.salt,\n      };\n    }\n\n    const newSalt = salt ?? randomBytes(SCRYPT_SALT_SIZE);\n\n    let newKey: Uint8Array;\n\n    if (nativeScryptCrypto) {\n      newKey = await nativeScryptCrypto(\n        password,\n        newSalt,\n        o.N,\n        o.r,\n        o.p,\n        o.dkLen,\n      );\n    } else {\n      newKey = await scryptAsync(password, newSalt, {\n        N: o.N,\n        r: o.r,\n        p: o.p,\n        dkLen: o.dkLen,\n      });\n    }\n    setCachedKey(hashedPassword, newSalt, newKey);\n\n    return {\n      key: newKey,\n      salt: newSalt,\n    };\n  }\n}\n\nconst encryption = new EncryptorDecryptor();\nexport default encryption;\n\n/**\n * Receive a SHA256 hash from a given string\n * @param data - input\n * @returns sha256 hash\n */\nexport function createSHA256Hash(data: string): string {\n  const hashedData = sha256(data);\n  return bytesToHex(hashedData);\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAAA,SAAS,WAAW;AACpB,SAAS,mBAAmB;AAC5B,SAAS,mBAAmB;AAC5B,SAAS,cAAc;AACvB,SAAS,aAAa,aAAa,kBAAkB;AA8BrD,IAAM,uBAAuB;AAC7B,IAAM,qBAAqB;AAI3B,IAAM,mBAAmB;AACzB,IAAM,WAAW,KAAK;AAEtB,IAAM,WAAW;AAEjB,IAAM,WAAW;AA5CjB;AA8CA,IAAM,qBAAN,MAAyB;AAAA,EAAzB;AA2CE,uBAAM;AA2CN,uBAAM;AAoCN;AASA;AAYA,uBAAM;AAAA;AAAA,EA9IN,MAAM,cACJ,WACA,UACA,oBACiB;AACjB,QAAI;AACF,aAAO,MAAM,sBAAK,sCAAL,WACX,WACA,UACA;AAAA,IAEJ,SAAS,GAAG;AACV,YAAM,eAAe,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,CAAC;AACtE,YAAM,IAAI,MAAM,8BAA8B,YAAY,EAAE;AAAA,IAC9D;AAAA,EACF;AAAA,EAEA,MAAM,cACJ,kBACA,UACA,oBACiB;AACjB,QAAI;AACF,YAAM,gBAAkC,KAAK,MAAM,gBAAgB;AACnE,UAAI,cAAc,MAAM,KAAK;AAC3B,YAAI,cAAc,MAAM,UAAU;AAChC,iBAAO,MAAM,sBAAK,sCAAL,WACX,eACA,UACA;AAAA,QAEJ;AAAA,MACF;AACA,YAAM,IAAI;AAAA,QACR,wCAAwC,gBAAgB;AAAA,MAC1D;AAAA,IACF,SAAS,GAAG;AACV,YAAM,eAAe,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,CAAC;AACtE,YAAM,IAAI,MAAM,8BAA8B,YAAY,EAAE;AAAA,IAC9D;AAAA,EACF;AAoJF;AAlJQ;AAAA,qBAAgB,eACpB,WACA,UACA,oBACiB;AACjB,QAAM,EAAE,KAAK,KAAK,IAAI,MAAM,sBAAK,oDAAL,WAC1B,UACA;AAAA,IACE,GAAG;AAAA,IACH,GAAG;AAAA,IACH,GAAG;AAAA,IACH,OAAO;AAAA,EACT,GACA,YAAY,gBAAgB,GAC5B;AAIF,QAAM,eAAe,YAAY,SAAS;AAC1C,QAAM,4BAA4B;AAAA,IAChC;AAAA,IACA,sBAAK,sBAAL,WAAc,cAAc;AAAA,EAC9B;AAGA,QAAM,gBAAgB,kBAAkB,yBAAyB;AAEjE,QAAM,mBAAqC;AAAA,IACzC,GAAG;AAAA,IACH,GAAG;AAAA,IACH,GAAG;AAAA,IACH,GAAG;AAAA,MACD,GAAG;AAAA,MACH,GAAG;AAAA,MACH,GAAG;AAAA,MACH,OAAO;AAAA,IACT;AAAA,IACA,SAAS;AAAA,EACX;AAEA,SAAO,KAAK,UAAU,gBAAgB;AACxC;AAEM;AAAA,qBAAgB,eACpB,MACA,UACA,oBACiB;AACjB,QAAM,EAAE,GAAG,GAAG,iCAAiC,QAAQ,IAAI;AAG3D,QAAM,4BAA4B;AAAA,IAChC;AAAA,EACF;AAGA,QAAM,OAAO,0BAA0B,MAAM,GAAG,OAAO;AACvD,QAAM,qBAAqB,0BAA0B;AAAA,IACnD;AAAA,IACA,0BAA0B;AAAA,EAC5B;AAGA,QAAM,EAAE,IAAI,IAAI,MAAM,sBAAK,oDAAL,WACpB,UACA;AAAA,IACE,GAAG,EAAE;AAAA,IACL,GAAG,EAAE;AAAA,IACL,GAAG,EAAE;AAAA,IACL,OAAO,EAAE;AAAA,EACX,GACA,MACA;AAIF,SAAO,YAAY,sBAAK,sBAAL,WAAc,oBAAoB,IAAI;AAC3D;AAEA;AAAA,aAAQ,SAAC,WAAuB,KAA6B;AAC3D,QAAM,QAAQ,YAAY,oBAAoB;AAG9C,QAAM,aAAa,IAAI,KAAK,KAAK,EAAE,QAAQ,SAAS;AAEpD,SAAO,YAAY,OAAO,UAAU;AACtC;AAEA;AAAA,aAAQ,SAAC,oBAAgC,KAA6B;AAEpE,QAAM,QAAQ,mBAAmB,MAAM,GAAG,oBAAoB;AAC9D,QAAM,aAAa,mBAAmB;AAAA,IACpC;AAAA,IACA,mBAAmB;AAAA,EACrB;AAGA,SAAO,IAAI,KAAK,KAAK,EAAE,QAAQ,UAAU;AAC3C;AAEM;AAAA,4BAAuB,eAC3B,UACA,GACA,MACA,oBACA;AACA,QAAM,iBAAiB,iBAAiB,QAAQ;AAChD,QAAM,YAAY,OACd,mBAAmB,gBAAgB,IAAI,IACvC,gBAAgB,cAAc;AAElC,MAAI,WAAW;AACb,WAAO;AAAA,MACL,KAAK,UAAU;AAAA,MACf,MAAM,UAAU;AAAA,IAClB;AAAA,EACF;AAEA,QAAM,UAAU,QAAQ,YAAY,gBAAgB;AAEpD,MAAI;AAEJ,MAAI,oBAAoB;AACtB,aAAS,MAAM;AAAA,MACb;AAAA,MACA;AAAA,MACA,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,MACF,EAAE;AAAA,IACJ;AAAA,EACF,OAAO;AACL,aAAS,MAAM,YAAY,UAAU,SAAS;AAAA,MAC5C,GAAG,EAAE;AAAA,MACL,GAAG,EAAE;AAAA,MACL,GAAG,EAAE;AAAA,MACL,OAAO,EAAE;AAAA,IACX,CAAC;AAAA,EACH;AACA,eAAa,gBAAgB,SAAS,MAAM;AAE5C,SAAO;AAAA,IACL,KAAK;AAAA,IACL,MAAM;AAAA,EACR;AACF;AAGF,IAAM,aAAa,IAAI,mBAAmB;AAC1C,IAAO,qBAAQ;AAOR,SAAS,iBAAiB,MAAsB;AACrD,QAAM,aAAa,OAAO,IAAI;AAC9B,SAAO,WAAW,UAAU;AAC9B;","names":[]}

package/dist/chunk-D4SNJOID.mjs

@@ -1,269 +0,0 @@
-import {
-  createLoginRawMessage,
-  getAccessToken,
-  getNonce,
-  login
-} from "./chunk-LGXQBALM.mjs";
-import {
-  createSnapPublicKeyRequest,
-  createSnapSignMessageRequest
-} from "./chunk-NMIF3LSX.mjs";
-import {
-  __privateAdd,
-  __privateGet,
-  __privateMethod,
-  __privateSet
-} from "./chunk-U5UIDVOO.mjs";
-
-// src/controllers/authentication/AuthenticationController.ts
-import { BaseController } from "@metamask/base-controller";
-var THIRTY_MIN_MS = 1e3 * 60 * 30;
-var controllerName = "AuthenticationController";
-var defaultState = {
-  isSignedIn: false
-};
-var metadata = {
-  isSignedIn: {
-    persist: true,
-    anonymous: true
-  },
-  sessionData: {
-    persist: true,
-    anonymous: false
-  }
-};
-var _metametrics, _isUnlocked, _keyringController, _registerMessageHandlers, registerMessageHandlers_fn, _assertLoggedIn, assertLoggedIn_fn, _performAuthenticationFlow, performAuthenticationFlow_fn, _hasValidSession, hasValidSession_fn, __snapPublicKeyCache, _snapGetPublicKey, snapGetPublicKey_fn, __snapSignMessageCache, _snapSignMessage, snapSignMessage_fn;
-var AuthenticationController = class extends BaseController {
-  constructor({
-    messenger,
-    state,
-    metametrics
-  }) {
-    super({
-      messenger,
-      metadata,
-      name: controllerName,
-      state: { ...defaultState, ...state }
-    });
-    /**
-     * Constructor helper for registering this controller's messaging system
-     * actions.
-     */
-    __privateAdd(this, _registerMessageHandlers);
-    __privateAdd(this, _assertLoggedIn);
-    __privateAdd(this, _performAuthenticationFlow);
-    __privateAdd(this, _hasValidSession);
-    /**
-     * Returns the auth snap public key.
-     *
-     * @returns The snap public key.
-     */
-    __privateAdd(this, _snapGetPublicKey);
-    /**
-     * Signs a specific message using an underlying auth snap.
-     *
-     * @param message - A specific tagged message to sign.
-     * @returns A Signature created by the snap.
-     */
-    __privateAdd(this, _snapSignMessage);
-    __privateAdd(this, _metametrics, void 0);
-    __privateAdd(this, _isUnlocked, false);
-    __privateAdd(this, _keyringController, {
-      setupLockedStateSubscriptions: () => {
-        const { isUnlocked } = this.messagingSystem.call(
-          "KeyringController:getState"
-        );
-        __privateSet(this, _isUnlocked, isUnlocked);
-        this.messagingSystem.subscribe("KeyringController:unlock", () => {
-          __privateSet(this, _isUnlocked, true);
-        });
-        this.messagingSystem.subscribe("KeyringController:lock", () => {
-          __privateSet(this, _isUnlocked, false);
-        });
-      }
-    });
-    __privateAdd(this, __snapPublicKeyCache, void 0);
-    __privateAdd(this, __snapSignMessageCache, {});
-    if (!metametrics) {
-      throw new Error("`metametrics` field is required");
-    }
-    __privateSet(this, _metametrics, metametrics);
-    __privateGet(this, _keyringController).setupLockedStateSubscriptions();
-    __privateMethod(this, _registerMessageHandlers, registerMessageHandlers_fn).call(this);
-  }
-  async performSignIn() {
-    const { accessToken } = await __privateMethod(this, _performAuthenticationFlow, performAuthenticationFlow_fn).call(this);
-    return accessToken;
-  }
-  performSignOut() {
-    __privateMethod(this, _assertLoggedIn, assertLoggedIn_fn).call(this);
-    this.update((state) => {
-      state.isSignedIn = false;
-      state.sessionData = void 0;
-    });
-  }
-  async getBearerToken() {
-    __privateMethod(this, _assertLoggedIn, assertLoggedIn_fn).call(this);
-    if (__privateMethod(this, _hasValidSession, hasValidSession_fn).call(this, this.state.sessionData)) {
-      return this.state.sessionData.accessToken;
-    }
-    const { accessToken } = await __privateMethod(this, _performAuthenticationFlow, performAuthenticationFlow_fn).call(this);
-    return accessToken;
-  }
-  /**
-   * Will return a session profile.
-   * Throws if a user is not logged in.
-   *
-   * @returns profile for the session.
-   */
-  async getSessionProfile() {
-    __privateMethod(this, _assertLoggedIn, assertLoggedIn_fn).call(this);
-    if (__privateMethod(this, _hasValidSession, hasValidSession_fn).call(this, this.state.sessionData)) {
-      return this.state.sessionData.profile;
-    }
-    const { profile } = await __privateMethod(this, _performAuthenticationFlow, performAuthenticationFlow_fn).call(this);
-    return profile;
-  }
-  isSignedIn() {
-    return this.state.isSignedIn;
-  }
-};
-_metametrics = new WeakMap();
-_isUnlocked = new WeakMap();
-_keyringController = new WeakMap();
-_registerMessageHandlers = new WeakSet();
-registerMessageHandlers_fn = function() {
-  this.messagingSystem.registerActionHandler(
-    "AuthenticationController:getBearerToken",
-    this.getBearerToken.bind(this)
-  );
-  this.messagingSystem.registerActionHandler(
-    "AuthenticationController:getSessionProfile",
-    this.getSessionProfile.bind(this)
-  );
-  this.messagingSystem.registerActionHandler(
-    "AuthenticationController:isSignedIn",
-    this.isSignedIn.bind(this)
-  );
-  this.messagingSystem.registerActionHandler(
-    "AuthenticationController:performSignIn",
-    this.performSignIn.bind(this)
-  );
-  this.messagingSystem.registerActionHandler(
-    "AuthenticationController:performSignOut",
-    this.performSignOut.bind(this)
-  );
-};
-_assertLoggedIn = new WeakSet();
-assertLoggedIn_fn = function() {
-  if (!this.state.isSignedIn) {
-    throw new Error(
-      `${controllerName}: Unable to call method, user is not authenticated`
-    );
-  }
-};
-_performAuthenticationFlow = new WeakSet();
-performAuthenticationFlow_fn = async function() {
-  try {
-    const publicKey = await __privateMethod(this, _snapGetPublicKey, snapGetPublicKey_fn).call(this);
-    const nonce = await getNonce(publicKey);
-    if (!nonce) {
-      throw new Error(`Unable to get nonce`);
-    }
-    const rawMessage = createLoginRawMessage(nonce, publicKey);
-    const signature = await __privateMethod(this, _snapSignMessage, snapSignMessage_fn).call(this, rawMessage);
-    const loginResponse = await login(rawMessage, signature, {
-      metametricsId: await __privateGet(this, _metametrics).getMetaMetricsId(),
-      agent: __privateGet(this, _metametrics).agent
-    });
-    if (!loginResponse?.token) {
-      throw new Error(`Unable to login`);
-    }
-    const profile = {
-      identifierId: loginResponse.profile.identifier_id,
-      profileId: loginResponse.profile.profile_id
-    };
-    const accessToken = await getAccessToken(
-      loginResponse.token,
-      __privateGet(this, _metametrics).agent
-    );
-    if (!accessToken) {
-      throw new Error(`Unable to get Access Token`);
-    }
-    this.update((state) => {
-      state.isSignedIn = true;
-      const expiresIn = /* @__PURE__ */ new Date();
-      expiresIn.setTime(expiresIn.getTime() + THIRTY_MIN_MS);
-      state.sessionData = {
-        profile,
-        accessToken,
-        expiresIn: expiresIn.toString()
-      };
-    });
-    return {
-      profile,
-      accessToken
-    };
-  } catch (e) {
-    console.error("Failed to authenticate", e);
-    const errorMessage = e instanceof Error ? e.message : JSON.stringify(e ?? "");
-    throw new Error(
-      `${controllerName}: Failed to authenticate - ${errorMessage}`
-    );
-  }
-};
-_hasValidSession = new WeakSet();
-hasValidSession_fn = function(sessionData) {
-  if (!sessionData) {
-    return false;
-  }
-  const prevDate = Date.parse(sessionData.expiresIn);
-  if (isNaN(prevDate)) {
-    return false;
-  }
-  const currentDate = /* @__PURE__ */ new Date();
-  const diffMs = Math.abs(currentDate.getTime() - prevDate);
-  return THIRTY_MIN_MS > diffMs;
-};
-__snapPublicKeyCache = new WeakMap();
-_snapGetPublicKey = new WeakSet();
-snapGetPublicKey_fn = async function() {
-  if (__privateGet(this, __snapPublicKeyCache)) {
-    return __privateGet(this, __snapPublicKeyCache);
-  }
-  if (!__privateGet(this, _isUnlocked)) {
-    throw new Error(
-      "#snapGetPublicKey - unable to call snap, wallet is locked"
-    );
-  }
-  const result = await this.messagingSystem.call(
-    "SnapController:handleRequest",
-    createSnapPublicKeyRequest()
-  );
-  __privateSet(this, __snapPublicKeyCache, result);
-  return result;
-};
-__snapSignMessageCache = new WeakMap();
-_snapSignMessage = new WeakSet();
-snapSignMessage_fn = async function(message) {
-  if (__privateGet(this, __snapSignMessageCache)[message]) {
-    return __privateGet(this, __snapSignMessageCache)[message];
-  }
-  if (!__privateGet(this, _isUnlocked)) {
-    throw new Error(
-      "#snapSignMessage - unable to call snap, wallet is locked"
-    );
-  }
-  const result = await this.messagingSystem.call(
-    "SnapController:handleRequest",
-    createSnapSignMessageRequest(message)
-  );
-  __privateGet(this, __snapSignMessageCache)[message] = result;
-  return result;
-};
-
-export {
-  defaultState,
-  AuthenticationController
-};
-//# sourceMappingURL=chunk-D4SNJOID.mjs.map

package/dist/chunk-D4SNJOID.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/controllers/authentication/AuthenticationController.ts"],"sourcesContent":["import type {\n  ControllerGetStateAction,\n  ControllerStateChangeEvent,\n  RestrictedControllerMessenger,\n  StateMetadata,\n} from '@metamask/base-controller';\nimport { BaseController } from '@metamask/base-controller';\nimport type {\n  KeyringControllerGetStateAction,\n  KeyringControllerLockEvent,\n  KeyringControllerUnlockEvent,\n} from '@metamask/keyring-controller';\nimport type { HandleSnapRequest } from '@metamask/snaps-controllers';\n\nimport {\n  createSnapPublicKeyRequest,\n  createSnapSignMessageRequest,\n} from './auth-snap-requests';\nimport {\n  createLoginRawMessage,\n  getAccessToken,\n  getNonce,\n  login,\n} from './services';\n\nconst THIRTY_MIN_MS = 1000 * 60 * 30;\n\nconst controllerName = 'AuthenticationController';\n\n// State\ntype SessionProfile = {\n  identifierId: string;\n  profileId: string;\n};\n\ntype SessionData = {\n  /** profile - anonymous profile data for the given logged in user */\n  profile: SessionProfile;\n  /** accessToken - used to make requests authorized endpoints */\n  accessToken: string;\n  /** expiresIn - string date to determine if new access token is required  */\n  expiresIn: string;\n};\n\ntype MetaMetricsAuth = {\n  getMetaMetricsId: () => string | Promise<string>;\n  agent: 'extension' | 'mobile';\n};\n\nexport type AuthenticationControllerState = {\n  /**\n   * Global isSignedIn state.\n   * Can be used to determine if \"Profile Syncing\" is enabled.\n   */\n  isSignedIn: boolean;\n  sessionData?: SessionData;\n};\nexport const defaultState: AuthenticationControllerState = {\n  isSignedIn: false,\n};\nconst metadata: StateMetadata<AuthenticationControllerState> = {\n  isSignedIn: {\n    persist: true,\n    anonymous: true,\n  },\n  sessionData: {\n    persist: true,\n    anonymous: false,\n  },\n};\n\n// Messenger Actions\ntype CreateActionsObj<Controller extends keyof AuthenticationController> = {\n  [K in Controller]: {\n    type: `${typeof controllerName}:${K}`;\n    handler: AuthenticationController[K];\n  };\n};\ntype ActionsObj = CreateActionsObj<\n  | 'performSignIn'\n  | 'performSignOut'\n  | 'getBearerToken'\n  | 'getSessionProfile'\n  | 'isSignedIn'\n>;\nexport type Actions =\n  | ActionsObj[keyof ActionsObj]\n  | AuthenticationControllerGetStateAction;\nexport type AuthenticationControllerGetStateAction = ControllerGetStateAction<\n  typeof controllerName,\n  AuthenticationControllerState\n>;\nexport type AuthenticationControllerPerformSignIn = ActionsObj['performSignIn'];\nexport type AuthenticationControllerPerformSignOut =\n  ActionsObj['performSignOut'];\nexport type AuthenticationControllerGetBearerToken =\n  ActionsObj['getBearerToken'];\nexport type AuthenticationControllerGetSessionProfile =\n  ActionsObj['getSessionProfile'];\nexport type AuthenticationControllerIsSignedIn = ActionsObj['isSignedIn'];\n\nexport type AuthenticationControllerStateChangeEvent =\n  ControllerStateChangeEvent<\n    typeof controllerName,\n    AuthenticationControllerState\n  >;\n\nexport type Events = AuthenticationControllerStateChangeEvent;\n\n// Allowed Actions\nexport type AllowedActions =\n  | HandleSnapRequest\n  | KeyringControllerGetStateAction;\n\nexport type AllowedEvents =\n  | KeyringControllerLockEvent\n  | KeyringControllerUnlockEvent;\n\n// Messenger\nexport type AuthenticationControllerMessenger = RestrictedControllerMessenger<\n  typeof controllerName,\n  Actions | AllowedActions,\n  Events | AllowedEvents,\n  AllowedActions['type'],\n  AllowedEvents['type']\n>;\n\n/**\n * Controller that enables authentication for restricted endpoints.\n * Used for Global Profile Syncing and Notifications\n */\nexport default class AuthenticationController extends BaseController<\n  typeof controllerName,\n  AuthenticationControllerState,\n  AuthenticationControllerMessenger\n> {\n  #metametrics: MetaMetricsAuth;\n\n  #isUnlocked = false;\n\n  #keyringController = {\n    setupLockedStateSubscriptions: () => {\n      const { isUnlocked } = this.messagingSystem.call(\n        'KeyringController:getState',\n      );\n      this.#isUnlocked = isUnlocked;\n\n      this.messagingSystem.subscribe('KeyringController:unlock', () => {\n        this.#isUnlocked = true;\n      });\n\n      this.messagingSystem.subscribe('KeyringController:lock', () => {\n        this.#isUnlocked = false;\n      });\n    },\n  };\n\n  constructor({\n    messenger,\n    state,\n    metametrics,\n  }: {\n    messenger: AuthenticationControllerMessenger;\n    state?: AuthenticationControllerState;\n    /**\n     * Not using the Messaging System as we\n     * do not want to tie this strictly to extension\n     */\n    metametrics: MetaMetricsAuth;\n  }) {\n    super({\n      messenger,\n      metadata,\n      name: controllerName,\n      state: { ...defaultState, ...state },\n    });\n\n    if (!metametrics) {\n      throw new Error('`metametrics` field is required');\n    }\n\n    this.#metametrics = metametrics;\n\n    this.#keyringController.setupLockedStateSubscriptions();\n    this.#registerMessageHandlers();\n  }\n\n  /**\n   * Constructor helper for registering this controller's messaging system\n   * actions.\n   */\n  #registerMessageHandlers(): void {\n    this.messagingSystem.registerActionHandler(\n      'AuthenticationController:getBearerToken',\n      this.getBearerToken.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'AuthenticationController:getSessionProfile',\n      this.getSessionProfile.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'AuthenticationController:isSignedIn',\n      this.isSignedIn.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'AuthenticationController:performSignIn',\n      this.performSignIn.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'AuthenticationController:performSignOut',\n      this.performSignOut.bind(this),\n    );\n  }\n\n  public async performSignIn(): Promise<string> {\n    const { accessToken } = await this.#performAuthenticationFlow();\n    return accessToken;\n  }\n\n  public performSignOut(): void {\n    this.#assertLoggedIn();\n\n    this.update((state) => {\n      state.isSignedIn = false;\n      state.sessionData = undefined;\n    });\n  }\n\n  public async getBearerToken(): Promise<string> {\n    this.#assertLoggedIn();\n\n    if (this.#hasValidSession(this.state.sessionData)) {\n      return this.state.sessionData.accessToken;\n    }\n\n    const { accessToken } = await this.#performAuthenticationFlow();\n    return accessToken;\n  }\n\n  /**\n   * Will return a session profile.\n   * Throws if a user is not logged in.\n   *\n   * @returns profile for the session.\n   */\n  public async getSessionProfile(): Promise<SessionProfile> {\n    this.#assertLoggedIn();\n\n    if (this.#hasValidSession(this.state.sessionData)) {\n      return this.state.sessionData.profile;\n    }\n\n    const { profile } = await this.#performAuthenticationFlow();\n    return profile;\n  }\n\n  public isSignedIn(): boolean {\n    return this.state.isSignedIn;\n  }\n\n  #assertLoggedIn(): void {\n    if (!this.state.isSignedIn) {\n      throw new Error(\n        `${controllerName}: Unable to call method, user is not authenticated`,\n      );\n    }\n  }\n\n  async #performAuthenticationFlow(): Promise<{\n    profile: SessionProfile;\n    accessToken: string;\n  }> {\n    try {\n      // 1. Nonce\n      const publicKey = await this.#snapGetPublicKey();\n      const nonce = await getNonce(publicKey);\n      if (!nonce) {\n        throw new Error(`Unable to get nonce`);\n      }\n\n      // 2. Login\n      const rawMessage = createLoginRawMessage(nonce, publicKey);\n      const signature = await this.#snapSignMessage(rawMessage);\n      const loginResponse = await login(rawMessage, signature, {\n        metametricsId: await this.#metametrics.getMetaMetricsId(),\n        agent: this.#metametrics.agent,\n      });\n      if (!loginResponse?.token) {\n        throw new Error(`Unable to login`);\n      }\n\n      const profile: SessionProfile = {\n        identifierId: loginResponse.profile.identifier_id,\n        profileId: loginResponse.profile.profile_id,\n      };\n\n      // 3. Trade for Access Token\n      const accessToken = await getAccessToken(\n        loginResponse.token,\n        this.#metametrics.agent,\n      );\n      if (!accessToken) {\n        throw new Error(`Unable to get Access Token`);\n      }\n\n      // Update Internal State\n      this.update((state) => {\n        state.isSignedIn = true;\n        const expiresIn = new Date();\n        expiresIn.setTime(expiresIn.getTime() + THIRTY_MIN_MS);\n        state.sessionData = {\n          profile,\n          accessToken,\n          expiresIn: expiresIn.toString(),\n        };\n      });\n\n      return {\n        profile,\n        accessToken,\n      };\n    } catch (e) {\n      console.error('Failed to authenticate', e);\n      const errorMessage =\n        e instanceof Error ? e.message : JSON.stringify(e ?? '');\n      throw new Error(\n        `${controllerName}: Failed to authenticate - ${errorMessage}`,\n      );\n    }\n  }\n\n  #hasValidSession(\n    sessionData: SessionData | undefined,\n  ): sessionData is SessionData {\n    if (!sessionData) {\n      return false;\n    }\n\n    const prevDate = Date.parse(sessionData.expiresIn);\n    if (isNaN(prevDate)) {\n      return false;\n    }\n\n    const currentDate = new Date();\n    const diffMs = Math.abs(currentDate.getTime() - prevDate);\n\n    return THIRTY_MIN_MS > diffMs;\n  }\n\n  #_snapPublicKeyCache: string | undefined;\n\n  /**\n   * Returns the auth snap public key.\n   *\n   * @returns The snap public key.\n   */\n  async #snapGetPublicKey(): Promise<string> {\n    if (this.#_snapPublicKeyCache) {\n      return this.#_snapPublicKeyCache;\n    }\n\n    if (!this.#isUnlocked) {\n      throw new Error(\n        '#snapGetPublicKey - unable to call snap, wallet is locked',\n      );\n    }\n\n    const result = (await this.messagingSystem.call(\n      'SnapController:handleRequest',\n      createSnapPublicKeyRequest(),\n    )) as string;\n\n    this.#_snapPublicKeyCache = result;\n\n    return result;\n  }\n\n  #_snapSignMessageCache: Record<`metamask:${string}`, string> = {};\n\n  /**\n   * Signs a specific message using an underlying auth snap.\n   *\n   * @param message - A specific tagged message to sign.\n   * @returns A Signature created by the snap.\n   */\n  async #snapSignMessage(message: `metamask:${string}`): Promise<string> {\n    if (this.#_snapSignMessageCache[message]) {\n      return this.#_snapSignMessageCache[message];\n    }\n\n    if (!this.#isUnlocked) {\n      throw new Error(\n        '#snapSignMessage - unable to call snap, wallet is locked',\n      );\n    }\n\n    const result = (await this.messagingSystem.call(\n      'SnapController:handleRequest',\n      createSnapSignMessageRequest(message),\n    )) as string;\n\n    this.#_snapSignMessageCache[message] = result;\n\n    return result;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAMA,SAAS,sBAAsB;AAmB/B,IAAM,gBAAgB,MAAO,KAAK;AAElC,IAAM,iBAAiB;AA8BhB,IAAM,eAA8C;AAAA,EACzD,YAAY;AACd;AACA,IAAM,WAAyD;AAAA,EAC7D,YAAY;AAAA,IACV,SAAS;AAAA,IACT,WAAW;AAAA,EACb;AAAA,EACA,aAAa;AAAA,IACX,SAAS;AAAA,IACT,WAAW;AAAA,EACb;AACF;AArEA;AAmIA,IAAqB,2BAArB,cAAsD,eAIpD;AAAA,EAsBA,YAAY;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAQG;AACD,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,MACA,MAAM;AAAA,MACN,OAAO,EAAE,GAAG,cAAc,GAAG,MAAM;AAAA,IACrC,CAAC;AAgBH;AAAA;AAAA;AAAA;AAAA;AAyEA;AAQA,uBAAM;AA+DN;AAyBA;AAAA;AAAA;AAAA;AAAA;AAAA,uBAAM;AA6BN;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,uBAAM;AA7PN;AAEA,oCAAc;AAEd,2CAAqB;AAAA,MACnB,+BAA+B,MAAM;AACnC,cAAM,EAAE,WAAW,IAAI,KAAK,gBAAgB;AAAA,UAC1C;AAAA,QACF;AACA,2BAAK,aAAc;AAEnB,aAAK,gBAAgB,UAAU,4BAA4B,MAAM;AAC/D,6BAAK,aAAc;AAAA,QACrB,CAAC;AAED,aAAK,gBAAgB,UAAU,0BAA0B,MAAM;AAC7D,6BAAK,aAAc;AAAA,QACrB,CAAC;AAAA,MACH;AAAA,IACF;AAsMA;AA4BA,+CAA+D,CAAC;AA5M9D,QAAI,CAAC,aAAa;AAChB,YAAM,IAAI,MAAM,iCAAiC;AAAA,IACnD;AAEA,uBAAK,cAAe;AAEpB,uBAAK,oBAAmB,8BAA8B;AACtD,0BAAK,sDAAL;AAAA,EACF;AAAA,EAiCA,MAAa,gBAAiC;AAC5C,UAAM,EAAE,YAAY,IAAI,MAAM,sBAAK,0DAAL;AAC9B,WAAO;AAAA,EACT;AAAA,EAEO,iBAAuB;AAC5B,0BAAK,oCAAL;AAEA,SAAK,OAAO,CAAC,UAAU;AACrB,YAAM,aAAa;AACnB,YAAM,cAAc;AAAA,IACtB,CAAC;AAAA,EACH;AAAA,EAEA,MAAa,iBAAkC;AAC7C,0BAAK,oCAAL;AAEA,QAAI,sBAAK,sCAAL,WAAsB,KAAK,MAAM,cAAc;AACjD,aAAO,KAAK,MAAM,YAAY;AAAA,IAChC;AAEA,UAAM,EAAE,YAAY,IAAI,MAAM,sBAAK,0DAAL;AAC9B,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAa,oBAA6C;AACxD,0BAAK,oCAAL;AAEA,QAAI,sBAAK,sCAAL,WAAsB,KAAK,MAAM,cAAc;AACjD,aAAO,KAAK,MAAM,YAAY;AAAA,IAChC;AAEA,UAAM,EAAE,QAAQ,IAAI,MAAM,sBAAK,0DAAL;AAC1B,WAAO;AAAA,EACT;AAAA,EAEO,aAAsB;AAC3B,WAAO,KAAK,MAAM;AAAA,EACpB;AAmJF;AAjRE;AAEA;AAEA;AAmDA;AAAA,6BAAwB,WAAS;AAC/B,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,eAAe,KAAK,IAAI;AAAA,EAC/B;AAEA,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,kBAAkB,KAAK,IAAI;AAAA,EAClC;AAEA,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,WAAW,KAAK,IAAI;AAAA,EAC3B;AAEA,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,cAAc,KAAK,IAAI;AAAA,EAC9B;AAEA,OAAK,gBAAgB;AAAA,IACnB;AAAA,IACA,KAAK,eAAe,KAAK,IAAI;AAAA,EAC/B;AACF;AAgDA;AAAA,oBAAe,WAAS;AACtB,MAAI,CAAC,KAAK,MAAM,YAAY;AAC1B,UAAM,IAAI;AAAA,MACR,GAAG,cAAc;AAAA,IACnB;AAAA,EACF;AACF;AAEM;AAAA,+BAA0B,iBAG7B;AACD,MAAI;AAEF,UAAM,YAAY,MAAM,sBAAK,wCAAL;AACxB,UAAM,QAAQ,MAAM,SAAS,SAAS;AACtC,QAAI,CAAC,OAAO;AACV,YAAM,IAAI,MAAM,qBAAqB;AAAA,IACvC;AAGA,UAAM,aAAa,sBAAsB,OAAO,SAAS;AACzD,UAAM,YAAY,MAAM,sBAAK,sCAAL,WAAsB;AAC9C,UAAM,gBAAgB,MAAM,MAAM,YAAY,WAAW;AAAA,MACvD,eAAe,MAAM,mBAAK,cAAa,iBAAiB;AAAA,MACxD,OAAO,mBAAK,cAAa;AAAA,IAC3B,CAAC;AACD,QAAI,CAAC,eAAe,OAAO;AACzB,YAAM,IAAI,MAAM,iBAAiB;AAAA,IACnC;AAEA,UAAM,UAA0B;AAAA,MAC9B,cAAc,cAAc,QAAQ;AAAA,MACpC,WAAW,cAAc,QAAQ;AAAA,IACnC;AAGA,UAAM,cAAc,MAAM;AAAA,MACxB,cAAc;AAAA,MACd,mBAAK,cAAa;AAAA,IACpB;AACA,QAAI,CAAC,aAAa;AAChB,YAAM,IAAI,MAAM,4BAA4B;AAAA,IAC9C;AAGA,SAAK,OAAO,CAAC,UAAU;AACrB,YAAM,aAAa;AACnB,YAAM,YAAY,oBAAI,KAAK;AAC3B,gBAAU,QAAQ,UAAU,QAAQ,IAAI,aAAa;AACrD,YAAM,cAAc;AAAA,QAClB;AAAA,QACA;AAAA,QACA,WAAW,UAAU,SAAS;AAAA,MAChC;AAAA,IACF,CAAC;AAED,WAAO;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAAA,EACF,SAAS,GAAG;AACV,YAAQ,MAAM,0BAA0B,CAAC;AACzC,UAAM,eACJ,aAAa,QAAQ,EAAE,UAAU,KAAK,UAAU,KAAK,EAAE;AACzD,UAAM,IAAI;AAAA,MACR,GAAG,cAAc,8BAA8B,YAAY;AAAA,IAC7D;AAAA,EACF;AACF;AAEA;AAAA,qBAAgB,SACd,aAC4B;AAC5B,MAAI,CAAC,aAAa;AAChB,WAAO;AAAA,EACT;AAEA,QAAM,WAAW,KAAK,MAAM,YAAY,SAAS;AACjD,MAAI,MAAM,QAAQ,GAAG;AACnB,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,oBAAI,KAAK;AAC7B,QAAM,SAAS,KAAK,IAAI,YAAY,QAAQ,IAAI,QAAQ;AAExD,SAAO,gBAAgB;AACzB;AAEA;AAOM;AAAA,sBAAiB,iBAAoB;AACzC,MAAI,mBAAK,uBAAsB;AAC7B,WAAO,mBAAK;AAAA,EACd;AAEA,MAAI,CAAC,mBAAK,cAAa;AACrB,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,QAAM,SAAU,MAAM,KAAK,gBAAgB;AAAA,IACzC;AAAA,IACA,2BAA2B;AAAA,EAC7B;AAEA,qBAAK,sBAAuB;AAE5B,SAAO;AACT;AAEA;AAQM;AAAA,qBAAgB,eAAC,SAAgD;AACrE,MAAI,mBAAK,wBAAuB,OAAO,GAAG;AACxC,WAAO,mBAAK,wBAAuB,OAAO;AAAA,EAC5C;AAEA,MAAI,CAAC,mBAAK,cAAa;AACrB,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,QAAM,SAAU,MAAM,KAAK,gBAAgB;AAAA,IACzC;AAAA,IACA,6BAA6B,OAAO;AAAA,EACtC;AAEA,qBAAK,wBAAuB,OAAO,IAAI;AAEvC,SAAO;AACT;","names":[]}

package/dist/chunk-DF24ZX4H.js

@@ -1,76 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});// src/sdk/env.ts
-var Env = /* @__PURE__ */ ((Env2) => {
-  Env2["DEV"] = "dev";
-  Env2["UAT"] = "uat";
-  Env2["PRD"] = "prd";
-  return Env2;
-})(Env || {});
-var Platform = /* @__PURE__ */ ((Platform2) => {
-  Platform2["MOBILE"] = "mobile";
-  Platform2["EXTENSION"] = "extension";
-  Platform2["PORTFOLIO"] = "portfolio";
-  Platform2["INFURA"] = "infura";
-  return Platform2;
-})(Platform || {});
-var ENV_URLS = {
-  dev: {
-    authApiUrl: "https://authentication.dev-api.cx.metamask.io",
-    oidcApiUrl: "https://oidc.dev-api.cx.metamask.io",
-    userStorageApiUrl: "https://user-storage.dev-api.cx.metamask.io"
-  },
-  uat: {
-    authApiUrl: "https://authentication.uat-api.cx.metamask.io",
-    oidcApiUrl: "https://oidc.uat-api.cx.metamask.io",
-    userStorageApiUrl: "https://user-storage.uat-api.cx.metamask.io"
-  },
-  prd: {
-    authApiUrl: "https://authentication.api.cx.metamask.io",
-    oidcApiUrl: "https://oidc.api.cx.metamask.io",
-    userStorageApiUrl: "https://user-storage.api.cx.metamask.io"
-  }
-};
-function getEnvUrls(env) {
-  if (!ENV_URLS[env]) {
-    throw new Error("invalid environment configuration");
-  }
-  return ENV_URLS[env];
-}
-function getOidcClientId(env, platform) {
-  const clientIds = {
-    ["dev" /* DEV */]: {
-      ["portfolio" /* PORTFOLIO */]: "c7ca94a0-5d52-4635-9502-1a50a9c410cc",
-      ["mobile" /* MOBILE */]: "e83c7cc9-267d-4fb4-8fec-f0e3bbe5ae8e",
-      ["extension" /* EXTENSION */]: "f1a963d7-50dc-4cb5-8d81-f1f3654f0df3",
-      ["infura" /* INFURA */]: "bd887006-0d55-481a-a395-5ff9a0dc52c9"
-    },
-    ["uat" /* UAT */]: {
-      ["portfolio" /* PORTFOLIO */]: "8f2dd4ac-db07-4819-9ba5-1ee0ec1b56d1",
-      ["mobile" /* MOBILE */]: "c3cfdcd2-51d6-4fae-ad2c-ff238c8fef53",
-      ["extension" /* EXTENSION */]: "a9de167c-c9a6-43d8-af39-d301fd44c485",
-      ["infura" /* INFURA */]: "01929890-7002-4c97-9913-8f6c09a6d674"
-    },
-    ["prd" /* PRD */]: {
-      ["portfolio" /* PORTFOLIO */]: "35e1cd62-49c5-4be8-8b6e-a5212f2d2cfb",
-      ["mobile" /* MOBILE */]: "75fa62a3-9ca0-4b91-9fe5-76bec86b0257",
-      ["extension" /* EXTENSION */]: "1132f10a-b4e5-4390-a5f2-d9c6022db564",
-      ["infura" /* INFURA */]: "fdde9417-e193-4d23-9943-a8346b18d097"
-    }
-  };
-  if (!clientIds[env]) {
-    throw new Error(`invalid env ${env}: cannot determine oidc client id`);
-  }
-  if (!clientIds[env][platform]) {
-    throw new Error(
-      `invalid env ${env} and platform ${platform} combination: cannot determine oidc client id`
-    );
-  }
-  return clientIds[env][platform];
-}
-
-
-
-
-
-
-exports.Env = Env; exports.Platform = Platform; exports.getEnvUrls = getEnvUrls; exports.getOidcClientId = getOidcClientId;
-//# sourceMappingURL=chunk-DF24ZX4H.js.map

package/dist/chunk-DF24ZX4H.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/sdk/env.ts"],"names":["Env","Platform"],"mappings":";AAAO,IAAK,MAAL,kBAAKA,SAAL;AACL,EAAAA,KAAA,SAAM;AACN,EAAAA,KAAA,SAAM;AACN,EAAAA,KAAA,SAAM;AAHI,SAAAA;AAAA,GAAA;AAML,IAAK,WAAL,kBAAKC,cAAL;AACL,EAAAA,UAAA,YAAS;AACT,EAAAA,UAAA,eAAY;AACZ,EAAAA,UAAA,eAAY;AACZ,EAAAA,UAAA,YAAS;AAJC,SAAAA;AAAA,GAAA;AAaZ,IAAM,WAAsC;AAAA,EAC1C,KAAK;AAAA,IACH,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,mBAAmB;AAAA,EACrB;AAAA,EACA,KAAK;AAAA,IACH,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,mBAAmB;AAAA,EACrB;AAAA,EACA,KAAK;AAAA,IACH,YAAY;AAAA,IACZ,YAAY;AAAA,IACZ,mBAAmB;AAAA,EACrB;AACF;AASO,SAAS,WAAW,KAAwB;AACjD,MAAI,CAAC,SAAS,GAAG,GAAG;AAClB,UAAM,IAAI,MAAM,mCAAmC;AAAA,EACrD;AACA,SAAO,SAAS,GAAG;AACrB;AASO,SAAS,gBAAgB,KAAU,UAA4B;AACpE,QAAM,YAAY;AAAA,IAChB,CAAC,eAAO,GAAG;AAAA,MACT,CAAC,2BAAkB,GAAG;AAAA,MACtB,CAAC,qBAAe,GAAG;AAAA,MACnB,CAAC,2BAAkB,GAAG;AAAA,MACtB,CAAC,qBAAe,GAAG;AAAA,IACrB;AAAA,IACA,CAAC,eAAO,GAAG;AAAA,MACT,CAAC,2BAAkB,GAAG;AAAA,MACtB,CAAC,qBAAe,GAAG;AAAA,MACnB,CAAC,2BAAkB,GAAG;AAAA,MACtB,CAAC,qBAAe,GAAG;AAAA,IACrB;AAAA,IACA,CAAC,eAAO,GAAG;AAAA,MACT,CAAC,2BAAkB,GAAG;AAAA,MACtB,CAAC,qBAAe,GAAG;AAAA,MACnB,CAAC,2BAAkB,GAAG;AAAA,MACtB,CAAC,qBAAe,GAAG;AAAA,IACrB;AAAA,EACF;AAEA,MAAI,CAAC,UAAU,GAAG,GAAG;AACnB,UAAM,IAAI,MAAM,eAAe,GAAG,mCAAmC;AAAA,EACvE;AAEA,MAAI,CAAC,UAAU,GAAG,EAAE,QAAQ,GAAG;AAC7B,UAAM,IAAI;AAAA,MACR,eAAe,GAAG,iBAAiB,QAAQ;AAAA,IAC7C;AAAA,EACF;AAEA,SAAO,UAAU,GAAG,EAAE,QAAQ;AAChC","sourcesContent":["export enum Env {\n  DEV = 'dev',\n  UAT = 'uat',\n  PRD = 'prd',\n}\n\nexport enum Platform {\n  MOBILE = 'mobile',\n  EXTENSION = 'extension',\n  PORTFOLIO = 'portfolio',\n  INFURA = 'infura',\n}\n\ntype EnvUrlsEntry = {\n  authApiUrl: string;\n  oidcApiUrl: string;\n  userStorageApiUrl: string;\n};\n\nconst ENV_URLS: Record<Env, EnvUrlsEntry> = {\n  dev: {\n    authApiUrl: 'https://authentication.dev-api.cx.metamask.io',\n    oidcApiUrl: 'https://oidc.dev-api.cx.metamask.io',\n    userStorageApiUrl: 'https://user-storage.dev-api.cx.metamask.io',\n  },\n  uat: {\n    authApiUrl: 'https://authentication.uat-api.cx.metamask.io',\n    oidcApiUrl: 'https://oidc.uat-api.cx.metamask.io',\n    userStorageApiUrl: 'https://user-storage.uat-api.cx.metamask.io',\n  },\n  prd: {\n    authApiUrl: 'https://authentication.api.cx.metamask.io',\n    oidcApiUrl: 'https://oidc.api.cx.metamask.io',\n    userStorageApiUrl: 'https://user-storage.api.cx.metamask.io',\n  },\n};\n\n/**\n * Validates and returns correct environment endpoints\n *\n * @param env - environment field\n * @returns the correct environment url\n * @throws on invalid environment passed\n */\nexport function getEnvUrls(env: Env): EnvUrlsEntry {\n  if (!ENV_URLS[env]) {\n    throw new Error('invalid environment configuration');\n  }\n  return ENV_URLS[env];\n}\n\n/**\n * Returns the valid OIDC Client ID (used during authorization)\n *\n * @param env - environment field\n * @param platform - platform field\n * @returns the OIDC client id for the environment\n */\nexport function getOidcClientId(env: Env, platform: Platform): string {\n  const clientIds = {\n    [Env.DEV]: {\n      [Platform.PORTFOLIO]: 'c7ca94a0-5d52-4635-9502-1a50a9c410cc',\n      [Platform.MOBILE]: 'e83c7cc9-267d-4fb4-8fec-f0e3bbe5ae8e',\n      [Platform.EXTENSION]: 'f1a963d7-50dc-4cb5-8d81-f1f3654f0df3',\n      [Platform.INFURA]: 'bd887006-0d55-481a-a395-5ff9a0dc52c9',\n    },\n    [Env.UAT]: {\n      [Platform.PORTFOLIO]: '8f2dd4ac-db07-4819-9ba5-1ee0ec1b56d1',\n      [Platform.MOBILE]: 'c3cfdcd2-51d6-4fae-ad2c-ff238c8fef53',\n      [Platform.EXTENSION]: 'a9de167c-c9a6-43d8-af39-d301fd44c485',\n      [Platform.INFURA]: '01929890-7002-4c97-9913-8f6c09a6d674',\n    },\n    [Env.PRD]: {\n      [Platform.PORTFOLIO]: '35e1cd62-49c5-4be8-8b6e-a5212f2d2cfb',\n      [Platform.MOBILE]: '75fa62a3-9ca0-4b91-9fe5-76bec86b0257',\n      [Platform.EXTENSION]: '1132f10a-b4e5-4390-a5f2-d9c6022db564',\n      [Platform.INFURA]: 'fdde9417-e193-4d23-9943-a8346b18d097',\n    },\n  };\n\n  if (!clientIds[env]) {\n    throw new Error(`invalid env ${env}: cannot determine oidc client id`);\n  }\n\n  if (!clientIds[env][platform]) {\n    throw new Error(\n      `invalid env ${env} and platform ${platform} combination: cannot determine oidc client id`,\n    );\n  }\n\n  return clientIds[env][platform];\n}\n"]}

package/dist/chunk-DRB2MN4T.js

@@ -1,16 +0,0 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true});// src/sdk/utils/validate-login-response.ts
-function validateLoginResponse(input) {
-  const assumedInput = input;
-  if (!assumedInput) {
-    return false;
-  }
-  if (!assumedInput?.token || !assumedInput?.profile) {
-    return false;
-  }
-  return true;
-}
-
-
-
-exports.validateLoginResponse = validateLoginResponse;
-//# sourceMappingURL=chunk-DRB2MN4T.js.map

package/dist/chunk-DRB2MN4T.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/sdk/utils/validate-login-response.ts"],"names":[],"mappings":";AASO,SAAS,sBAAsB,OAAwC;AAC5E,QAAM,eAAe;AAErB,MAAI,CAAC,cAAc;AACjB,WAAO;AAAA,EACT;AAEA,MAAI,CAAC,cAAc,SAAS,CAAC,cAAc,SAAS;AAClD,WAAO;AAAA,EACT;AAEA,SAAO;AACT","sourcesContent":["import type { LoginResponse } from '../authentication';\n\n/**\n * Validates Shape is LoginResponse\n * NOTE - validation is pretty loose, we can improve this by using external libs like Zod for improved/tighter validation\n *\n * @param input - unknown/untyped input\n * @returns boolean if input is LoginResponse\n */\nexport function validateLoginResponse(input: unknown): input is LoginResponse {\n  const assumedInput = input as LoginResponse;\n\n  if (!assumedInput) {\n    return false;\n  }\n\n  if (!assumedInput?.token || !assumedInput?.profile) {\n    return false;\n  }\n\n  return true;\n}\n"]}

package/dist/chunk-EHZFPUJH.mjs

@@ -1,53 +0,0 @@
-// src/controllers/user-storage/accounts/constants.ts
-var USER_STORAGE_VERSION = "1";
-var USER_STORAGE_VERSION_KEY = "v";
-var LOCALIZED_DEFAULT_ACCOUNT_NAMES = [
-  "Account",
-  "\u1218\u1208\u12EB",
-  "\u0627\u0644\u062D\u0633\u0627\u0628",
-  "\u041F\u0440\u043E\u0444\u0438\u043B",
-  "\u0985\u09CD\u09AF\u09BE\u0995\u09BE\u0989\u09A8\u09CD\u099F",
-  "Compte",
-  "\xDA\u010Det",
-  "Konto",
-  "\u039B\u03BF\u03B3\u03B1\u03C1\u03B9\u03B1\u03C3\u03BC\u03CC\u03C2",
-  "Cuenta",
-  "\u062D\u0633\u0627\u0628",
-  "Tili",
-  "\u0A8F\u0A95\u0ABE\u0A89\u0AA8\u0ACD\u0A9F",
-  "\u05D7\u05E9\u05D1\u05D5\u05DF",
-  "\u0905\u0915\u093E\u0909\u0902\u091F",
-  "\u0916\u093E\u0924\u093E",
-  "Ra\u010Dun",
-  "Kont",
-  "Fi\xF3k",
-  "Akun",
-  "\u30A2\u30AB\u30A6\u30F3\u30C8",
-  "\u0C96\u0CBE\u0CA4\u0CC6",
-  "\uACC4\uC815",
-  "Paskyra",
-  "Konts",
-  "\u0D05\u0D15\u0D4D\u0D15\u0D57\u0D23\u0D4D\u0D1F\u0D4D",
-  "\u0916\u093E\u0924\u0947",
-  "Akaun",
-  "Conta",
-  "Cont",
-  "\u0421\u0447\u0435\u0442",
-  "\u043D\u0430\u043B\u043E\u0433",
-  "Akaunti",
-  "\u0B95\u0BA3\u0B95\u0BCD\u0B95\u0BC1",
-  "\u0C16\u0C3E\u0C24\u0C3E",
-  "\u0E1A\u0E31\u0E0D\u0E0A\u0E35",
-  "Hesap",
-  "\u041E\u0431\u043B\u0456\u043A\u043E\u0432\u0438\u0439 \u0437\u0430\u043F\u0438\u0441",
-  "T\xE0i kho\u1EA3n",
-  "\u8D26\u6237",
-  "\u5E33\u6236"
-];
-
-export {
-  USER_STORAGE_VERSION,
-  USER_STORAGE_VERSION_KEY,
-  LOCALIZED_DEFAULT_ACCOUNT_NAMES
-};
-//# sourceMappingURL=chunk-EHZFPUJH.mjs.map

package/dist/chunk-EHZFPUJH.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/controllers/user-storage/accounts/constants.ts"],"sourcesContent":["export const USER_STORAGE_VERSION = '1';\n\n// Force cast. We don't really care about the type here since we treat it as a unique symbol\nexport const USER_STORAGE_VERSION_KEY: unique symbol = 'v' as never;\n\n// We need this in order to know if an account is a default account or not when we do account syncing\nexport const LOCALIZED_DEFAULT_ACCOUNT_NAMES = [\n  'Account',\n  'መለያ',\n  'الحساب',\n  'Профил',\n  'অ্যাকাউন্ট',\n  'Compte',\n  'Účet',\n  'Konto',\n  'Λογαριασμός',\n  'Cuenta',\n  'حساب',\n  'Tili',\n  'એકાઉન્ટ',\n  'חשבון',\n  'अकाउंट',\n  'खाता',\n  'Račun',\n  'Kont',\n  'Fiók',\n  'Akun',\n  'アカウント',\n  'ಖಾತೆ',\n  '계정',\n  'Paskyra',\n  'Konts',\n  'അക്കൗണ്ട്',\n  'खाते',\n  'Akaun',\n  'Conta',\n  'Cont',\n  'Счет',\n  'налог',\n  'Akaunti',\n  'கணக்கு',\n  'ఖాతా',\n  'บัญชี',\n  'Hesap',\n  'Обліковий запис',\n  'Tài khoản',\n  '账户',\n  '帳戶',\n] as const;\n"],"mappings":";AAAO,IAAM,uBAAuB;AAG7B,IAAM,2BAA0C;AAGhD,IAAM,kCAAkC;AAAA,EAC7C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;","names":[]}