@metamask/snaps-cli 3.0.3 → 3.0.5

package/CHANGELOG.md

@@ -6,6 +6,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [3.0.5]
+### Fixed
+- Include Snap icon in allowed server paths ([#2003](https://github.com/MetaMask/snaps/pull/2003))
+
+## [3.0.4]
+### Fixed
+- Only serve Snap files from CLI ([#1979](https://github.com/MetaMask/snaps/pull/1979))
+
 ## [3.0.3]
 ### Changed
 - Bump several MetaMask dependencies ([#1964](https://github.com/MetaMask/snaps/pull/1964))
@@ -78,7 +86,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   - The version of the package no longer needs to match the version of all other
     MetaMask Snaps packages.
 
-[Unreleased]: https://github.com/MetaMask/snaps/compare/@metamask/snaps-cli@3.0.3...HEAD
+[Unreleased]: https://github.com/MetaMask/snaps/compare/@metamask/snaps-cli@3.0.5...HEAD
+[3.0.5]: https://github.com/MetaMask/snaps/compare/@metamask/snaps-cli@3.0.4...@metamask/snaps-cli@3.0.5
+[3.0.4]: https://github.com/MetaMask/snaps/compare/@metamask/snaps-cli@3.0.3...@metamask/snaps-cli@3.0.4
 [3.0.3]: https://github.com/MetaMask/snaps/compare/@metamask/snaps-cli@3.0.2...@metamask/snaps-cli@3.0.3
 [3.0.2]: https://github.com/MetaMask/snaps/compare/@metamask/snaps-cli@3.0.1...@metamask/snaps-cli@3.0.2
 [3.0.1]: https://github.com/MetaMask/snaps/compare/@metamask/snaps-cli@3.0.0...@metamask/snaps-cli@3.0.1

package/dist/cjs/webpack/compiler.js

@@ -2,95 +2,18 @@
 Object.defineProperty(exports, "__esModule", {
     value: true
 });
-function _export(target, all) {
-    for(var name in all)Object.defineProperty(target, name, {
-        enumerable: true,
-        get: all[name]
-    });
-}
-_export(exports, {
-    getCompiler: function() {
+Object.defineProperty(exports, "getCompiler", {
+    enumerable: true,
+    get: function() {
         return getCompiler;
-    },
-    getServer: function() {
-        return getServer;
     }
 });
-const _http = require("http");
-const _servehandler = /*#__PURE__*/ _interop_require_default(require("serve-handler"));
 const _webpack = require("webpack");
 const _config = require("./config");
-function _interop_require_default(obj) {
-    return obj && obj.__esModule ? obj : {
-        default: obj
-    };
-}
 async function getCompiler(config, options) {
     const baseWebpackConfig = await (0, _config.getDefaultConfiguration)(config, options);
     const webpackConfig = config.customizeWebpackConfig?.(baseWebpackConfig) ?? baseWebpackConfig;
     return (0, _webpack.webpack)(webpackConfig);
 }
-function getServer(config) {
-    const server = (0, _http.createServer)((request, response)=>{
-        (0, _servehandler.default)(request, response, {
-            public: config.server.root,
-            headers: [
-                {
-                    source: '**/*',
-                    headers: [
-                        {
-                            key: 'Cache-Control',
-                            value: 'no-cache'
-                        },
-                        {
-                            key: 'Access-Control-Allow-Origin',
-                            value: '*'
-                        }
-                    ]
-                }
-            ]
-        })?.catch(/* istanbul ignore next */ ()=>{
-            response.statusCode = 500;
-            response.end();
-        });
-    });
-    /**
-   * Start the server on the port specified in the config.
-   *
-   * @param port - The port to listen on.
-   * @returns A promise that resolves when the server is listening. The promise
-   * resolves to an object with the port and the server instance. Note that if
-   * the `config.server.port` is `0`, the OS will choose a random port for us,
-   * so we need to get the port from the server after it starts.
-   */ const listen = async (port = config.server.port)=>{
-        return new Promise((resolve, reject)=>{
-            try {
-                server.listen(port, ()=>{
-                    const close = async ()=>{
-                        await new Promise((resolveClose, rejectClose)=>{
-                            server.close((closeError)=>{
-                                if (closeError) {
-                                    return rejectClose(closeError);
-                                }
-                                return resolveClose();
-                            });
-                        });
-                    };
-                    const address = server.address();
-                    resolve({
-                        port: address.port,
-                        server,
-                        close
-                    });
-                });
-            } catch (listenError) {
-                reject(listenError);
-            }
-        });
-    };
-    return {
-        listen
-    };
-}
 
 //# sourceMappingURL=compiler.js.map

package/dist/cjs/webpack/compiler.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/webpack/compiler.ts"],"sourcesContent":["import type { Server } from 'http';\nimport { createServer } from 'http';\nimport type { AddressInfo } from 'net';\nimport serveMiddleware from 'serve-handler';\nimport { webpack } from 'webpack';\n\nimport type { ProcessedConfig, ProcessedWebpackConfig } from '../config';\nimport type { WebpackOptions } from './config';\nimport { getDefaultConfiguration } from './config';\n\n/**\n * Get a Webpack compiler for the given config.\n *\n * @param config - The config object.\n * @param options - The Webpack options.\n * @returns The Webpack compiler.\n */\nexport async function getCompiler(\n  config: ProcessedWebpackConfig,\n  options?: WebpackOptions,\n) {\n  const baseWebpackConfig = await getDefaultConfiguration(config, options);\n  const webpackConfig =\n    config.customizeWebpackConfig?.(baseWebpackConfig) ?? baseWebpackConfig;\n\n  return webpack(webpackConfig);\n}\n\n/**\n * Get a static server for development purposes.\n *\n * Note: We're intentionally not using `webpack-dev-server` here because it\n * adds a lot of extra stuff to the output that we don't need, and it's\n * difficult to customize.\n *\n * @param config - The config object.\n * @returns An object with a `listen` method that returns a promise that\n * resolves when the server is listening.\n */\nexport function getServer(config: ProcessedConfig) {\n  const server = createServer((request, response) => {\n    serveMiddleware(request, response, {\n      public: config.server.root,\n      headers: [\n        {\n          source: '**/*',\n          headers: [\n            {\n              key: 'Cache-Control',\n              value: 'no-cache',\n            },\n            {\n              key: 'Access-Control-Allow-Origin',\n              value: '*',\n            },\n          ],\n        },\n      ],\n    })?.catch(\n      /* istanbul ignore next */ () => {\n        response.statusCode = 500;\n        response.end();\n      },\n    );\n  });\n\n  /**\n   * Start the server on the port specified in the config.\n   *\n   * @param port - The port to listen on.\n   * @returns A promise that resolves when the server is listening. The promise\n   * resolves to an object with the port and the server instance. Note that if\n   * the `config.server.port` is `0`, the OS will choose a random port for us,\n   * so we need to get the port from the server after it starts.\n   */\n  const listen = async (port = config.server.port) => {\n    return new Promise<{\n      port: number;\n      server: Server;\n      close: () => Promise<void>;\n    }>((resolve, reject) => {\n      try {\n        server.listen(port, () => {\n          const close = async () => {\n            await new Promise<void>((resolveClose, rejectClose) => {\n              server.close((closeError) => {\n                if (closeError) {\n                  return rejectClose(closeError);\n                }\n\n                return resolveClose();\n              });\n            });\n          };\n\n          const address = server.address() as AddressInfo;\n          resolve({ port: address.port, server, close });\n        });\n      } catch (listenError) {\n        reject(listenError);\n      }\n    });\n  };\n\n  return { listen };\n}\n"],"names":["getCompiler","getServer","config","options","baseWebpackConfig","getDefaultConfiguration","webpackConfig","customizeWebpackConfig","webpack","server","createServer","request","response","serveMiddleware","public","root","headers","source","key","value","catch","statusCode","end","listen","port","Promise","resolve","reject","close","resolveClose","rejectClose","closeError","address","listenError"],"mappings":";;;;;;;;;;;IAiBsBA,WAAW;eAAXA;;IAsBNC,SAAS;eAATA;;;sBAtCa;qEAED;yBACJ;wBAIgB;;;;;;AASjC,eAAeD,YACpBE,MAA8B,EAC9BC,OAAwB;IAExB,MAAMC,oBAAoB,MAAMC,IAAAA,+BAAuB,EAACH,QAAQC;IAChE,MAAMG,gBACJJ,OAAOK,sBAAsB,GAAGH,sBAAsBA;IAExD,OAAOI,IAAAA,gBAAO,EAACF;AACjB;AAaO,SAASL,UAAUC,MAAuB;IAC/C,MAAMO,SAASC,IAAAA,kBAAY,EAAC,CAACC,SAASC;QACpCC,IAAAA,qBAAe,EAACF,SAASC,UAAU;YACjCE,QAAQZ,OAAOO,MAAM,CAACM,IAAI;YAC1BC,SAAS;gBACP;oBACEC,QAAQ;oBACRD,SAAS;wBACP;4BACEE,KAAK;4BACLC,OAAO;wBACT;wBACA;4BACED,KAAK;4BACLC,OAAO;wBACT;qBACD;gBACH;aACD;QACH,IAAIC,MACF,wBAAwB,GAAG;YACzBR,SAASS,UAAU,GAAG;YACtBT,SAASU,GAAG;QACd;IAEJ;IAEA;;;;;;;;GAQC,GACD,MAAMC,SAAS,OAAOC,OAAOtB,OAAOO,MAAM,CAACe,IAAI;QAC7C,OAAO,IAAIC,QAIR,CAACC,SAASC;YACX,IAAI;gBACFlB,OAAOc,MAAM,CAACC,MAAM;oBAClB,MAAMI,QAAQ;wBACZ,MAAM,IAAIH,QAAc,CAACI,cAAcC;4BACrCrB,OAAOmB,KAAK,CAAC,CAACG;gCACZ,IAAIA,YAAY;oCACd,OAAOD,YAAYC;gCACrB;gCAEA,OAAOF;4BACT;wBACF;oBACF;oBAEA,MAAMG,UAAUvB,OAAOuB,OAAO;oBAC9BN,QAAQ;wBAAEF,MAAMQ,QAAQR,IAAI;wBAAEf;wBAAQmB;oBAAM;gBAC9C;YACF,EAAE,OAAOK,aAAa;gBACpBN,OAAOM;YACT;QACF;IACF;IAEA,OAAO;QAAEV;IAAO;AAClB"}
+{"version":3,"sources":["../../../src/webpack/compiler.ts"],"sourcesContent":["import { webpack } from 'webpack';\n\nimport type { ProcessedWebpackConfig } from '../config';\nimport type { WebpackOptions } from './config';\nimport { getDefaultConfiguration } from './config';\n\n/**\n * Get a Webpack compiler for the given config.\n *\n * @param config - The config object.\n * @param options - The Webpack options.\n * @returns The Webpack compiler.\n */\nexport async function getCompiler(\n  config: ProcessedWebpackConfig,\n  options?: WebpackOptions,\n) {\n  const baseWebpackConfig = await getDefaultConfiguration(config, options);\n  const webpackConfig =\n    config.customizeWebpackConfig?.(baseWebpackConfig) ?? baseWebpackConfig;\n\n  return webpack(webpackConfig);\n}\n"],"names":["getCompiler","config","options","baseWebpackConfig","getDefaultConfiguration","webpackConfig","customizeWebpackConfig","webpack"],"mappings":";;;;+BAasBA;;;eAAAA;;;yBAbE;wBAIgB;AASjC,eAAeA,YACpBC,MAA8B,EAC9BC,OAAwB;IAExB,MAAMC,oBAAoB,MAAMC,IAAAA,+BAAuB,EAACH,QAAQC;IAChE,MAAMG,gBACJJ,OAAOK,sBAAsB,GAAGH,sBAAsBA;IAExD,OAAOI,IAAAA,gBAAO,EAACF;AACjB"}

package/dist/cjs/webpack/index.js

@@ -5,6 +5,7 @@ Object.defineProperty(exports, "__esModule", {
 _export_star(require("./compiler"), exports);
 _export_star(require("./config"), exports);
 _export_star(require("./plugins"), exports);
+_export_star(require("./server"), exports);
 function _export_star(from, to) {
     Object.keys(from).forEach(function(k) {
         if (k !== "default" && !Object.prototype.hasOwnProperty.call(to, k)) {

package/dist/cjs/webpack/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/webpack/index.ts"],"sourcesContent":["export * from './compiler';\nexport * from './config';\nexport * from './plugins';\n"],"names":[],"mappings":";;;;qBAAc;qBACA;qBACA"}
+{"version":3,"sources":["../../../src/webpack/index.ts"],"sourcesContent":["export * from './compiler';\nexport * from './config';\nexport * from './plugins';\nexport * from './server';\n"],"names":[],"mappings":";;;;qBAAc;qBACA;qBACA;qBACA"}

package/dist/cjs/webpack/server.js

@@ -0,0 +1,139 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", {
+    value: true
+});
+function _export(target, all) {
+    for(var name in all)Object.defineProperty(target, name, {
+        enumerable: true,
+        get: all[name]
+    });
+}
+_export(exports, {
+    getAllowedPaths: function() {
+        return getAllowedPaths;
+    },
+    getServer: function() {
+        return getServer;
+    }
+});
+const _snapsutils = require("@metamask/snaps-utils");
+const _http = require("http");
+const _path = require("path");
+const _servehandler = /*#__PURE__*/ _interop_require_default(require("serve-handler"));
+function _interop_require_default(obj) {
+    return obj && obj.__esModule ? obj : {
+        default: obj
+    };
+}
+/**
+ * Get the relative path from one path to another.
+ *
+ * Note: This is a modified version of `path.relative` that uses Posix
+ * separators for URL-compatibility.
+ *
+ * @param from - The path to start from.
+ * @param to - The path to end at.
+ * @returns The relative path.
+ */ function getRelativePath(from, to) {
+    return (0, _path.relative)(from, to).split(_path.sep).join(_path.posix.sep);
+}
+function getAllowedPaths(config, manifest) {
+    const auxiliaryFiles = manifest.source.files?.map((file)=>getRelativePath(config.server.root, (0, _path.resolve)(config.server.root, file))) ?? [];
+    const localizationFiles = manifest.source.locales?.map((localization)=>getRelativePath(config.server.root, (0, _path.resolve)(config.server.root, localization))) ?? [];
+    const otherFiles = manifest.source.location.npm.iconPath ? [
+        getRelativePath(config.server.root, (0, _path.resolve)(config.server.root, manifest.source.location.npm.iconPath))
+    ] : [];
+    return [
+        getRelativePath(config.server.root, (0, _path.resolve)(config.server.root, config.output.path, config.output.filename)),
+        getRelativePath(config.server.root, (0, _path.resolve)(config.server.root, _snapsutils.NpmSnapFileNames.Manifest)),
+        ...auxiliaryFiles,
+        ...localizationFiles,
+        ...otherFiles
+    ];
+}
+function getServer(config) {
+    /**
+   * Get the response for a request. This is extracted into a function so that
+   * we can easily catch errors and send a 500 response.
+   *
+   * @param request - The request.
+   * @param response - The response.
+   * @returns A promise that resolves when the response is sent.
+   */ async function getResponse(request, response) {
+        const manifestPath = (0, _path.join)(config.server.root, _snapsutils.NpmSnapFileNames.Manifest);
+        const { result } = await (0, _snapsutils.readJsonFile)(manifestPath);
+        const allowedPaths = getAllowedPaths(config, result);
+        const path = request.url?.slice(1);
+        const allowed = allowedPaths.some((allowedPath)=>path === allowedPath);
+        if (!allowed) {
+            response.statusCode = 404;
+            response.end();
+            return;
+        }
+        await (0, _servehandler.default)(request, response, {
+            public: config.server.root,
+            directoryListing: false,
+            headers: [
+                {
+                    source: '**/*',
+                    headers: [
+                        {
+                            key: 'Cache-Control',
+                            value: 'no-cache'
+                        },
+                        {
+                            key: 'Access-Control-Allow-Origin',
+                            value: '*'
+                        }
+                    ]
+                }
+            ]
+        });
+    }
+    const server = (0, _http.createServer)((request, response)=>{
+        getResponse(request, response).catch(/* istanbul ignore next */ (error)=>{
+            (0, _snapsutils.logError)(error);
+            response.statusCode = 500;
+            response.end();
+        });
+    });
+    /**
+   * Start the server on the port specified in the config.
+   *
+   * @param port - The port to listen on.
+   * @returns A promise that resolves when the server is listening. The promise
+   * resolves to an object with the port and the server instance. Note that if
+   * the `config.server.port` is `0`, the OS will choose a random port for us,
+   * so we need to get the port from the server after it starts.
+   */ const listen = async (port = config.server.port)=>{
+        return new Promise((resolve, reject)=>{
+            try {
+                server.listen(port, ()=>{
+                    const close = async ()=>{
+                        await new Promise((resolveClose, rejectClose)=>{
+                            server.close((closeError)=>{
+                                if (closeError) {
+                                    return rejectClose(closeError);
+                                }
+                                return resolveClose();
+                            });
+                        });
+                    };
+                    const address = server.address();
+                    resolve({
+                        port: address.port,
+                        server,
+                        close
+                    });
+                });
+            } catch (listenError) {
+                reject(listenError);
+            }
+        });
+    };
+    return {
+        listen
+    };
+}
+
+//# sourceMappingURL=server.js.map

package/dist/cjs/webpack/server.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/webpack/server.ts"],"sourcesContent":["import type { SnapManifest } from '@metamask/snaps-utils';\nimport {\n  logError,\n  NpmSnapFileNames,\n  readJsonFile,\n} from '@metamask/snaps-utils';\nimport type { IncomingMessage, Server, ServerResponse } from 'http';\nimport { createServer } from 'http';\nimport type { AddressInfo } from 'net';\nimport { join, relative, resolve as resolvePath, sep, posix } from 'path';\nimport serveMiddleware from 'serve-handler';\n\nimport type { ProcessedConfig } from '../config';\n\n/**\n * Get the relative path from one path to another.\n *\n * Note: This is a modified version of `path.relative` that uses Posix\n * separators for URL-compatibility.\n *\n * @param from - The path to start from.\n * @param to - The path to end at.\n * @returns The relative path.\n */\nfunction getRelativePath(from: string, to: string) {\n  return relative(from, to).split(sep).join(posix.sep);\n}\n\n/**\n * Get the allowed paths for the static server. This includes the output file,\n * the manifest file, and any auxiliary/localization files.\n *\n * @param config - The config object.\n * @param manifest - The Snap manifest object.\n * @returns An array of allowed paths.\n */\nexport function getAllowedPaths(\n  config: ProcessedConfig,\n  manifest: SnapManifest,\n) {\n  const auxiliaryFiles =\n    manifest.source.files?.map((file) =>\n      getRelativePath(\n        config.server.root,\n        resolvePath(config.server.root, file),\n      ),\n    ) ?? [];\n\n  const localizationFiles =\n    manifest.source.locales?.map((localization) =>\n      getRelativePath(\n        config.server.root,\n        resolvePath(config.server.root, localization),\n      ),\n    ) ?? [];\n\n  const otherFiles = manifest.source.location.npm.iconPath\n    ? [\n        getRelativePath(\n          config.server.root,\n          resolvePath(\n            config.server.root,\n            manifest.source.location.npm.iconPath,\n          ),\n        ),\n      ]\n    : [];\n\n  return [\n    getRelativePath(\n      config.server.root,\n      resolvePath(\n        config.server.root,\n        config.output.path,\n        config.output.filename,\n      ),\n    ),\n    getRelativePath(\n      config.server.root,\n      resolvePath(config.server.root, NpmSnapFileNames.Manifest),\n    ),\n    ...auxiliaryFiles,\n    ...localizationFiles,\n    ...otherFiles,\n  ];\n}\n\n/**\n * Get a static server for development purposes.\n *\n * Note: We're intentionally not using `webpack-dev-server` here because it\n * adds a lot of extra stuff to the output that we don't need, and it's\n * difficult to customize.\n *\n * @param config - The config object.\n * @returns An object with a `listen` method that returns a promise that\n * resolves when the server is listening.\n */\nexport function getServer(config: ProcessedConfig) {\n  /**\n   * Get the response for a request. This is extracted into a function so that\n   * we can easily catch errors and send a 500 response.\n   *\n   * @param request - The request.\n   * @param response - The response.\n   * @returns A promise that resolves when the response is sent.\n   */\n  async function getResponse(\n    request: IncomingMessage,\n    response: ServerResponse,\n  ) {\n    const manifestPath = join(config.server.root, NpmSnapFileNames.Manifest);\n    const { result } = await readJsonFile<SnapManifest>(manifestPath);\n    const allowedPaths = getAllowedPaths(config, result);\n\n    const path = request.url?.slice(1);\n    const allowed = allowedPaths.some((allowedPath) => path === allowedPath);\n\n    if (!allowed) {\n      response.statusCode = 404;\n      response.end();\n      return;\n    }\n\n    await serveMiddleware(request, response, {\n      public: config.server.root,\n      directoryListing: false,\n      headers: [\n        {\n          source: '**/*',\n          headers: [\n            {\n              key: 'Cache-Control',\n              value: 'no-cache',\n            },\n            {\n              key: 'Access-Control-Allow-Origin',\n              value: '*',\n            },\n          ],\n        },\n      ],\n    });\n  }\n\n  const server = createServer((request, response) => {\n    getResponse(request, response).catch(\n      /* istanbul ignore next */\n      (error) => {\n        logError(error);\n        response.statusCode = 500;\n        response.end();\n      },\n    );\n  });\n\n  /**\n   * Start the server on the port specified in the config.\n   *\n   * @param port - The port to listen on.\n   * @returns A promise that resolves when the server is listening. The promise\n   * resolves to an object with the port and the server instance. Note that if\n   * the `config.server.port` is `0`, the OS will choose a random port for us,\n   * so we need to get the port from the server after it starts.\n   */\n  const listen = async (port = config.server.port) => {\n    return new Promise<{\n      port: number;\n      server: Server;\n      close: () => Promise<void>;\n    }>((resolve, reject) => {\n      try {\n        server.listen(port, () => {\n          const close = async () => {\n            await new Promise<void>((resolveClose, rejectClose) => {\n              server.close((closeError) => {\n                if (closeError) {\n                  return rejectClose(closeError);\n                }\n\n                return resolveClose();\n              });\n            });\n          };\n\n          const address = server.address() as AddressInfo;\n          resolve({ port: address.port, server, close });\n        });\n      } catch (listenError) {\n        reject(listenError);\n      }\n    });\n  };\n\n  return { listen };\n}\n"],"names":["getAllowedPaths","getServer","getRelativePath","from","to","relative","split","sep","join","posix","config","manifest","auxiliaryFiles","source","files","map","file","server","root","resolvePath","localizationFiles","locales","localization","otherFiles","location","npm","iconPath","output","path","filename","NpmSnapFileNames","Manifest","getResponse","request","response","manifestPath","result","readJsonFile","allowedPaths","url","slice","allowed","some","allowedPath","statusCode","end","serveMiddleware","public","directoryListing","headers","key","value","createServer","catch","error","logError","listen","port","Promise","resolve","reject","close","resolveClose","rejectClose","closeError","address","listenError"],"mappings":";;;;;;;;;;;IAoCgBA,eAAe;eAAfA;;IA8DAC,SAAS;eAATA;;;4BA7FT;sBAEsB;sBAEsC;qEACvC;;;;;;AAI5B;;;;;;;;;CASC,GACD,SAASC,gBAAgBC,IAAY,EAAEC,EAAU;IAC/C,OAAOC,IAAAA,cAAQ,EAACF,MAAMC,IAAIE,KAAK,CAACC,SAAG,EAAEC,IAAI,CAACC,WAAK,CAACF,GAAG;AACrD;AAUO,SAASP,gBACdU,MAAuB,EACvBC,QAAsB;IAEtB,MAAMC,iBACJD,SAASE,MAAM,CAACC,KAAK,EAAEC,IAAI,CAACC,OAC1Bd,gBACEQ,OAAOO,MAAM,CAACC,IAAI,EAClBC,IAAAA,aAAW,EAACT,OAAOO,MAAM,CAACC,IAAI,EAAEF,WAE/B,EAAE;IAET,MAAMI,oBACJT,SAASE,MAAM,CAACQ,OAAO,EAAEN,IAAI,CAACO,eAC5BpB,gBACEQ,OAAOO,MAAM,CAACC,IAAI,EAClBC,IAAAA,aAAW,EAACT,OAAOO,MAAM,CAACC,IAAI,EAAEI,mBAE/B,EAAE;IAET,MAAMC,aAAaZ,SAASE,MAAM,CAACW,QAAQ,CAACC,GAAG,CAACC,QAAQ,GACpD;QACExB,gBACEQ,OAAOO,MAAM,CAACC,IAAI,EAClBC,IAAAA,aAAW,EACTT,OAAOO,MAAM,CAACC,IAAI,EAClBP,SAASE,MAAM,CAACW,QAAQ,CAACC,GAAG,CAACC,QAAQ;KAG1C,GACD,EAAE;IAEN,OAAO;QACLxB,gBACEQ,OAAOO,MAAM,CAACC,IAAI,EAClBC,IAAAA,aAAW,EACTT,OAAOO,MAAM,CAACC,IAAI,EAClBR,OAAOiB,MAAM,CAACC,IAAI,EAClBlB,OAAOiB,MAAM,CAACE,QAAQ;QAG1B3B,gBACEQ,OAAOO,MAAM,CAACC,IAAI,EAClBC,IAAAA,aAAW,EAACT,OAAOO,MAAM,CAACC,IAAI,EAAEY,4BAAgB,CAACC,QAAQ;WAExDnB;WACAQ;WACAG;KACJ;AACH;AAaO,SAAStB,UAAUS,MAAuB;IAC/C;;;;;;;GAOC,GACD,eAAesB,YACbC,OAAwB,EACxBC,QAAwB;QAExB,MAAMC,eAAe3B,IAAAA,UAAI,EAACE,OAAOO,MAAM,CAACC,IAAI,EAAEY,4BAAgB,CAACC,QAAQ;QACvE,MAAM,EAAEK,MAAM,EAAE,GAAG,MAAMC,IAAAA,wBAAY,EAAeF;QACpD,MAAMG,eAAetC,gBAAgBU,QAAQ0B;QAE7C,MAAMR,OAAOK,QAAQM,GAAG,EAAEC,MAAM;QAChC,MAAMC,UAAUH,aAAaI,IAAI,CAAC,CAACC,cAAgBf,SAASe;QAE5D,IAAI,CAACF,SAAS;YACZP,SAASU,UAAU,GAAG;YACtBV,SAASW,GAAG;YACZ;QACF;QAEA,MAAMC,IAAAA,qBAAe,EAACb,SAASC,UAAU;YACvCa,QAAQrC,OAAOO,MAAM,CAACC,IAAI;YAC1B8B,kBAAkB;YAClBC,SAAS;gBACP;oBACEpC,QAAQ;oBACRoC,SAAS;wBACP;4BACEC,KAAK;4BACLC,OAAO;wBACT;wBACA;4BACED,KAAK;4BACLC,OAAO;wBACT;qBACD;gBACH;aACD;QACH;IACF;IAEA,MAAMlC,SAASmC,IAAAA,kBAAY,EAAC,CAACnB,SAASC;QACpCF,YAAYC,SAASC,UAAUmB,KAAK,CAClC,wBAAwB,GACxB,CAACC;YACCC,IAAAA,oBAAQ,EAACD;YACTpB,SAASU,UAAU,GAAG;YACtBV,SAASW,GAAG;QACd;IAEJ;IAEA;;;;;;;;GAQC,GACD,MAAMW,SAAS,OAAOC,OAAO/C,OAAOO,MAAM,CAACwC,IAAI;QAC7C,OAAO,IAAIC,QAIR,CAACC,SAASC;YACX,IAAI;gBACF3C,OAAOuC,MAAM,CAACC,MAAM;oBAClB,MAAMI,QAAQ;wBACZ,MAAM,IAAIH,QAAc,CAACI,cAAcC;4BACrC9C,OAAO4C,KAAK,CAAC,CAACG;gCACZ,IAAIA,YAAY;oCACd,OAAOD,YAAYC;gCACrB;gCAEA,OAAOF;4BACT;wBACF;oBACF;oBAEA,MAAMG,UAAUhD,OAAOgD,OAAO;oBAC9BN,QAAQ;wBAAEF,MAAMQ,QAAQR,IAAI;wBAAExC;wBAAQ4C;oBAAM;gBAC9C;YACF,EAAE,OAAOK,aAAa;gBACpBN,OAAOM;YACT;QACF;IACF;IAEA,OAAO;QAAEV;IAAO;AAClB"}

package/dist/esm/webpack/compiler.js

@@ -1,5 +1,3 @@
-import { createServer } from 'http';
-import serveMiddleware from 'serve-handler';
 import { webpack } from 'webpack';
 import { getDefaultConfiguration } from './config';
 /**
@@ -13,77 +11,5 @@ import { getDefaultConfiguration } from './config';
     const webpackConfig = config.customizeWebpackConfig?.(baseWebpackConfig) ?? baseWebpackConfig;
     return webpack(webpackConfig);
 }
-/**
- * Get a static server for development purposes.
- *
- * Note: We're intentionally not using `webpack-dev-server` here because it
- * adds a lot of extra stuff to the output that we don't need, and it's
- * difficult to customize.
- *
- * @param config - The config object.
- * @returns An object with a `listen` method that returns a promise that
- * resolves when the server is listening.
- */ export function getServer(config) {
-    const server = createServer((request, response)=>{
-        serveMiddleware(request, response, {
-            public: config.server.root,
-            headers: [
-                {
-                    source: '**/*',
-                    headers: [
-                        {
-                            key: 'Cache-Control',
-                            value: 'no-cache'
-                        },
-                        {
-                            key: 'Access-Control-Allow-Origin',
-                            value: '*'
-                        }
-                    ]
-                }
-            ]
-        })?.catch(/* istanbul ignore next */ ()=>{
-            response.statusCode = 500;
-            response.end();
-        });
-    });
-    /**
-   * Start the server on the port specified in the config.
-   *
-   * @param port - The port to listen on.
-   * @returns A promise that resolves when the server is listening. The promise
-   * resolves to an object with the port and the server instance. Note that if
-   * the `config.server.port` is `0`, the OS will choose a random port for us,
-   * so we need to get the port from the server after it starts.
-   */ const listen = async (port = config.server.port)=>{
-        return new Promise((resolve, reject)=>{
-            try {
-                server.listen(port, ()=>{
-                    const close = async ()=>{
-                        await new Promise((resolveClose, rejectClose)=>{
-                            server.close((closeError)=>{
-                                if (closeError) {
-                                    return rejectClose(closeError);
-                                }
-                                return resolveClose();
-                            });
-                        });
-                    };
-                    const address = server.address();
-                    resolve({
-                        port: address.port,
-                        server,
-                        close
-                    });
-                });
-            } catch (listenError) {
-                reject(listenError);
-            }
-        });
-    };
-    return {
-        listen
-    };
-}
 
 //# sourceMappingURL=compiler.js.map

package/dist/esm/webpack/compiler.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/webpack/compiler.ts"],"sourcesContent":["import type { Server } from 'http';\nimport { createServer } from 'http';\nimport type { AddressInfo } from 'net';\nimport serveMiddleware from 'serve-handler';\nimport { webpack } from 'webpack';\n\nimport type { ProcessedConfig, ProcessedWebpackConfig } from '../config';\nimport type { WebpackOptions } from './config';\nimport { getDefaultConfiguration } from './config';\n\n/**\n * Get a Webpack compiler for the given config.\n *\n * @param config - The config object.\n * @param options - The Webpack options.\n * @returns The Webpack compiler.\n */\nexport async function getCompiler(\n  config: ProcessedWebpackConfig,\n  options?: WebpackOptions,\n) {\n  const baseWebpackConfig = await getDefaultConfiguration(config, options);\n  const webpackConfig =\n    config.customizeWebpackConfig?.(baseWebpackConfig) ?? baseWebpackConfig;\n\n  return webpack(webpackConfig);\n}\n\n/**\n * Get a static server for development purposes.\n *\n * Note: We're intentionally not using `webpack-dev-server` here because it\n * adds a lot of extra stuff to the output that we don't need, and it's\n * difficult to customize.\n *\n * @param config - The config object.\n * @returns An object with a `listen` method that returns a promise that\n * resolves when the server is listening.\n */\nexport function getServer(config: ProcessedConfig) {\n  const server = createServer((request, response) => {\n    serveMiddleware(request, response, {\n      public: config.server.root,\n      headers: [\n        {\n          source: '**/*',\n          headers: [\n            {\n              key: 'Cache-Control',\n              value: 'no-cache',\n            },\n            {\n              key: 'Access-Control-Allow-Origin',\n              value: '*',\n            },\n          ],\n        },\n      ],\n    })?.catch(\n      /* istanbul ignore next */ () => {\n        response.statusCode = 500;\n        response.end();\n      },\n    );\n  });\n\n  /**\n   * Start the server on the port specified in the config.\n   *\n   * @param port - The port to listen on.\n   * @returns A promise that resolves when the server is listening. The promise\n   * resolves to an object with the port and the server instance. Note that if\n   * the `config.server.port` is `0`, the OS will choose a random port for us,\n   * so we need to get the port from the server after it starts.\n   */\n  const listen = async (port = config.server.port) => {\n    return new Promise<{\n      port: number;\n      server: Server;\n      close: () => Promise<void>;\n    }>((resolve, reject) => {\n      try {\n        server.listen(port, () => {\n          const close = async () => {\n            await new Promise<void>((resolveClose, rejectClose) => {\n              server.close((closeError) => {\n                if (closeError) {\n                  return rejectClose(closeError);\n                }\n\n                return resolveClose();\n              });\n            });\n          };\n\n          const address = server.address() as AddressInfo;\n          resolve({ port: address.port, server, close });\n        });\n      } catch (listenError) {\n        reject(listenError);\n      }\n    });\n  };\n\n  return { listen };\n}\n"],"names":["createServer","serveMiddleware","webpack","getDefaultConfiguration","getCompiler","config","options","baseWebpackConfig","webpackConfig","customizeWebpackConfig","getServer","server","request","response","public","root","headers","source","key","value","catch","statusCode","end","listen","port","Promise","resolve","reject","close","resolveClose","rejectClose","closeError","address","listenError"],"mappings":"AACA,SAASA,YAAY,QAAQ,OAAO;AAEpC,OAAOC,qBAAqB,gBAAgB;AAC5C,SAASC,OAAO,QAAQ,UAAU;AAIlC,SAASC,uBAAuB,QAAQ,WAAW;AAEnD;;;;;;CAMC,GACD,OAAO,eAAeC,YACpBC,MAA8B,EAC9BC,OAAwB;IAExB,MAAMC,oBAAoB,MAAMJ,wBAAwBE,QAAQC;IAChE,MAAME,gBACJH,OAAOI,sBAAsB,GAAGF,sBAAsBA;IAExD,OAAOL,QAAQM;AACjB;AAEA;;;;;;;;;;CAUC,GACD,OAAO,SAASE,UAAUL,MAAuB;IAC/C,MAAMM,SAASX,aAAa,CAACY,SAASC;QACpCZ,gBAAgBW,SAASC,UAAU;YACjCC,QAAQT,OAAOM,MAAM,CAACI,IAAI;YAC1BC,SAAS;gBACP;oBACEC,QAAQ;oBACRD,SAAS;wBACP;4BACEE,KAAK;4BACLC,OAAO;wBACT;wBACA;4BACED,KAAK;4BACLC,OAAO;wBACT;qBACD;gBACH;aACD;QACH,IAAIC,MACF,wBAAwB,GAAG;YACzBP,SAASQ,UAAU,GAAG;YACtBR,SAASS,GAAG;QACd;IAEJ;IAEA;;;;;;;;GAQC,GACD,MAAMC,SAAS,OAAOC,OAAOnB,OAAOM,MAAM,CAACa,IAAI;QAC7C,OAAO,IAAIC,QAIR,CAACC,SAASC;YACX,IAAI;gBACFhB,OAAOY,MAAM,CAACC,MAAM;oBAClB,MAAMI,QAAQ;wBACZ,MAAM,IAAIH,QAAc,CAACI,cAAcC;4BACrCnB,OAAOiB,KAAK,CAAC,CAACG;gCACZ,IAAIA,YAAY;oCACd,OAAOD,YAAYC;gCACrB;gCAEA,OAAOF;4BACT;wBACF;oBACF;oBAEA,MAAMG,UAAUrB,OAAOqB,OAAO;oBAC9BN,QAAQ;wBAAEF,MAAMQ,QAAQR,IAAI;wBAAEb;wBAAQiB;oBAAM;gBAC9C;YACF,EAAE,OAAOK,aAAa;gBACpBN,OAAOM;YACT;QACF;IACF;IAEA,OAAO;QAAEV;IAAO;AAClB"}
+{"version":3,"sources":["../../../src/webpack/compiler.ts"],"sourcesContent":["import { webpack } from 'webpack';\n\nimport type { ProcessedWebpackConfig } from '../config';\nimport type { WebpackOptions } from './config';\nimport { getDefaultConfiguration } from './config';\n\n/**\n * Get a Webpack compiler for the given config.\n *\n * @param config - The config object.\n * @param options - The Webpack options.\n * @returns The Webpack compiler.\n */\nexport async function getCompiler(\n  config: ProcessedWebpackConfig,\n  options?: WebpackOptions,\n) {\n  const baseWebpackConfig = await getDefaultConfiguration(config, options);\n  const webpackConfig =\n    config.customizeWebpackConfig?.(baseWebpackConfig) ?? baseWebpackConfig;\n\n  return webpack(webpackConfig);\n}\n"],"names":["webpack","getDefaultConfiguration","getCompiler","config","options","baseWebpackConfig","webpackConfig","customizeWebpackConfig"],"mappings":"AAAA,SAASA,OAAO,QAAQ,UAAU;AAIlC,SAASC,uBAAuB,QAAQ,WAAW;AAEnD;;;;;;CAMC,GACD,OAAO,eAAeC,YACpBC,MAA8B,EAC9BC,OAAwB;IAExB,MAAMC,oBAAoB,MAAMJ,wBAAwBE,QAAQC;IAChE,MAAME,gBACJH,OAAOI,sBAAsB,GAAGF,sBAAsBA;IAExD,OAAOL,QAAQM;AACjB"}

package/dist/esm/webpack/index.js

@@ -1,5 +1,6 @@
 export * from './compiler';
 export * from './config';
 export * from './plugins';
+export * from './server';
 
 //# sourceMappingURL=index.js.map

package/dist/esm/webpack/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/webpack/index.ts"],"sourcesContent":["export * from './compiler';\nexport * from './config';\nexport * from './plugins';\n"],"names":[],"mappings":"AAAA,cAAc,aAAa;AAC3B,cAAc,WAAW;AACzB,cAAc,YAAY"}
+{"version":3,"sources":["../../../src/webpack/index.ts"],"sourcesContent":["export * from './compiler';\nexport * from './config';\nexport * from './plugins';\nexport * from './server';\n"],"names":[],"mappings":"AAAA,cAAc,aAAa;AAC3B,cAAc,WAAW;AACzB,cAAc,YAAY;AAC1B,cAAc,WAAW"}

package/dist/esm/webpack/server.js

@@ -0,0 +1,133 @@
+import { logError, NpmSnapFileNames, readJsonFile } from '@metamask/snaps-utils';
+import { createServer } from 'http';
+import { join, relative, resolve as resolvePath, sep, posix } from 'path';
+import serveMiddleware from 'serve-handler';
+/**
+ * Get the relative path from one path to another.
+ *
+ * Note: This is a modified version of `path.relative` that uses Posix
+ * separators for URL-compatibility.
+ *
+ * @param from - The path to start from.
+ * @param to - The path to end at.
+ * @returns The relative path.
+ */ function getRelativePath(from, to) {
+    return relative(from, to).split(sep).join(posix.sep);
+}
+/**
+ * Get the allowed paths for the static server. This includes the output file,
+ * the manifest file, and any auxiliary/localization files.
+ *
+ * @param config - The config object.
+ * @param manifest - The Snap manifest object.
+ * @returns An array of allowed paths.
+ */ export function getAllowedPaths(config, manifest) {
+    const auxiliaryFiles = manifest.source.files?.map((file)=>getRelativePath(config.server.root, resolvePath(config.server.root, file))) ?? [];
+    const localizationFiles = manifest.source.locales?.map((localization)=>getRelativePath(config.server.root, resolvePath(config.server.root, localization))) ?? [];
+    const otherFiles = manifest.source.location.npm.iconPath ? [
+        getRelativePath(config.server.root, resolvePath(config.server.root, manifest.source.location.npm.iconPath))
+    ] : [];
+    return [
+        getRelativePath(config.server.root, resolvePath(config.server.root, config.output.path, config.output.filename)),
+        getRelativePath(config.server.root, resolvePath(config.server.root, NpmSnapFileNames.Manifest)),
+        ...auxiliaryFiles,
+        ...localizationFiles,
+        ...otherFiles
+    ];
+}
+/**
+ * Get a static server for development purposes.
+ *
+ * Note: We're intentionally not using `webpack-dev-server` here because it
+ * adds a lot of extra stuff to the output that we don't need, and it's
+ * difficult to customize.
+ *
+ * @param config - The config object.
+ * @returns An object with a `listen` method that returns a promise that
+ * resolves when the server is listening.
+ */ export function getServer(config) {
+    /**
+   * Get the response for a request. This is extracted into a function so that
+   * we can easily catch errors and send a 500 response.
+   *
+   * @param request - The request.
+   * @param response - The response.
+   * @returns A promise that resolves when the response is sent.
+   */ async function getResponse(request, response) {
+        const manifestPath = join(config.server.root, NpmSnapFileNames.Manifest);
+        const { result } = await readJsonFile(manifestPath);
+        const allowedPaths = getAllowedPaths(config, result);
+        const path = request.url?.slice(1);
+        const allowed = allowedPaths.some((allowedPath)=>path === allowedPath);
+        if (!allowed) {
+            response.statusCode = 404;
+            response.end();
+            return;
+        }
+        await serveMiddleware(request, response, {
+            public: config.server.root,
+            directoryListing: false,
+            headers: [
+                {
+                    source: '**/*',
+                    headers: [
+                        {
+                            key: 'Cache-Control',
+                            value: 'no-cache'
+                        },
+                        {
+                            key: 'Access-Control-Allow-Origin',
+                            value: '*'
+                        }
+                    ]
+                }
+            ]
+        });
+    }
+    const server = createServer((request, response)=>{
+        getResponse(request, response).catch(/* istanbul ignore next */ (error)=>{
+            logError(error);
+            response.statusCode = 500;
+            response.end();
+        });
+    });
+    /**
+   * Start the server on the port specified in the config.
+   *
+   * @param port - The port to listen on.
+   * @returns A promise that resolves when the server is listening. The promise
+   * resolves to an object with the port and the server instance. Note that if
+   * the `config.server.port` is `0`, the OS will choose a random port for us,
+   * so we need to get the port from the server after it starts.
+   */ const listen = async (port = config.server.port)=>{
+        return new Promise((resolve, reject)=>{
+            try {
+                server.listen(port, ()=>{
+                    const close = async ()=>{
+                        await new Promise((resolveClose, rejectClose)=>{
+                            server.close((closeError)=>{
+                                if (closeError) {
+                                    return rejectClose(closeError);
+                                }
+                                return resolveClose();
+                            });
+                        });
+                    };
+                    const address = server.address();
+                    resolve({
+                        port: address.port,
+                        server,
+                        close
+                    });
+                });
+            } catch (listenError) {
+                reject(listenError);
+            }
+        });
+    };
+    return {
+        listen
+    };
+}
+
+//# sourceMappingURL=server.js.map

package/dist/esm/webpack/server.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/webpack/server.ts"],"sourcesContent":["import type { SnapManifest } from '@metamask/snaps-utils';\nimport {\n  logError,\n  NpmSnapFileNames,\n  readJsonFile,\n} from '@metamask/snaps-utils';\nimport type { IncomingMessage, Server, ServerResponse } from 'http';\nimport { createServer } from 'http';\nimport type { AddressInfo } from 'net';\nimport { join, relative, resolve as resolvePath, sep, posix } from 'path';\nimport serveMiddleware from 'serve-handler';\n\nimport type { ProcessedConfig } from '../config';\n\n/**\n * Get the relative path from one path to another.\n *\n * Note: This is a modified version of `path.relative` that uses Posix\n * separators for URL-compatibility.\n *\n * @param from - The path to start from.\n * @param to - The path to end at.\n * @returns The relative path.\n */\nfunction getRelativePath(from: string, to: string) {\n  return relative(from, to).split(sep).join(posix.sep);\n}\n\n/**\n * Get the allowed paths for the static server. This includes the output file,\n * the manifest file, and any auxiliary/localization files.\n *\n * @param config - The config object.\n * @param manifest - The Snap manifest object.\n * @returns An array of allowed paths.\n */\nexport function getAllowedPaths(\n  config: ProcessedConfig,\n  manifest: SnapManifest,\n) {\n  const auxiliaryFiles =\n    manifest.source.files?.map((file) =>\n      getRelativePath(\n        config.server.root,\n        resolvePath(config.server.root, file),\n      ),\n    ) ?? [];\n\n  const localizationFiles =\n    manifest.source.locales?.map((localization) =>\n      getRelativePath(\n        config.server.root,\n        resolvePath(config.server.root, localization),\n      ),\n    ) ?? [];\n\n  const otherFiles = manifest.source.location.npm.iconPath\n    ? [\n        getRelativePath(\n          config.server.root,\n          resolvePath(\n            config.server.root,\n            manifest.source.location.npm.iconPath,\n          ),\n        ),\n      ]\n    : [];\n\n  return [\n    getRelativePath(\n      config.server.root,\n      resolvePath(\n        config.server.root,\n        config.output.path,\n        config.output.filename,\n      ),\n    ),\n    getRelativePath(\n      config.server.root,\n      resolvePath(config.server.root, NpmSnapFileNames.Manifest),\n    ),\n    ...auxiliaryFiles,\n    ...localizationFiles,\n    ...otherFiles,\n  ];\n}\n\n/**\n * Get a static server for development purposes.\n *\n * Note: We're intentionally not using `webpack-dev-server` here because it\n * adds a lot of extra stuff to the output that we don't need, and it's\n * difficult to customize.\n *\n * @param config - The config object.\n * @returns An object with a `listen` method that returns a promise that\n * resolves when the server is listening.\n */\nexport function getServer(config: ProcessedConfig) {\n  /**\n   * Get the response for a request. This is extracted into a function so that\n   * we can easily catch errors and send a 500 response.\n   *\n   * @param request - The request.\n   * @param response - The response.\n   * @returns A promise that resolves when the response is sent.\n   */\n  async function getResponse(\n    request: IncomingMessage,\n    response: ServerResponse,\n  ) {\n    const manifestPath = join(config.server.root, NpmSnapFileNames.Manifest);\n    const { result } = await readJsonFile<SnapManifest>(manifestPath);\n    const allowedPaths = getAllowedPaths(config, result);\n\n    const path = request.url?.slice(1);\n    const allowed = allowedPaths.some((allowedPath) => path === allowedPath);\n\n    if (!allowed) {\n      response.statusCode = 404;\n      response.end();\n      return;\n    }\n\n    await serveMiddleware(request, response, {\n      public: config.server.root,\n      directoryListing: false,\n      headers: [\n        {\n          source: '**/*',\n          headers: [\n            {\n              key: 'Cache-Control',\n              value: 'no-cache',\n            },\n            {\n              key: 'Access-Control-Allow-Origin',\n              value: '*',\n            },\n          ],\n        },\n      ],\n    });\n  }\n\n  const server = createServer((request, response) => {\n    getResponse(request, response).catch(\n      /* istanbul ignore next */\n      (error) => {\n        logError(error);\n        response.statusCode = 500;\n        response.end();\n      },\n    );\n  });\n\n  /**\n   * Start the server on the port specified in the config.\n   *\n   * @param port - The port to listen on.\n   * @returns A promise that resolves when the server is listening. The promise\n   * resolves to an object with the port and the server instance. Note that if\n   * the `config.server.port` is `0`, the OS will choose a random port for us,\n   * so we need to get the port from the server after it starts.\n   */\n  const listen = async (port = config.server.port) => {\n    return new Promise<{\n      port: number;\n      server: Server;\n      close: () => Promise<void>;\n    }>((resolve, reject) => {\n      try {\n        server.listen(port, () => {\n          const close = async () => {\n            await new Promise<void>((resolveClose, rejectClose) => {\n              server.close((closeError) => {\n                if (closeError) {\n                  return rejectClose(closeError);\n                }\n\n                return resolveClose();\n              });\n            });\n          };\n\n          const address = server.address() as AddressInfo;\n          resolve({ port: address.port, server, close });\n        });\n      } catch (listenError) {\n        reject(listenError);\n      }\n    });\n  };\n\n  return { listen };\n}\n"],"names":["logError","NpmSnapFileNames","readJsonFile","createServer","join","relative","resolve","resolvePath","sep","posix","serveMiddleware","getRelativePath","from","to","split","getAllowedPaths","config","manifest","auxiliaryFiles","source","files","map","file","server","root","localizationFiles","locales","localization","otherFiles","location","npm","iconPath","output","path","filename","Manifest","getServer","getResponse","request","response","manifestPath","result","allowedPaths","url","slice","allowed","some","allowedPath","statusCode","end","public","directoryListing","headers","key","value","catch","error","listen","port","Promise","reject","close","resolveClose","rejectClose","closeError","address","listenError"],"mappings":"AACA,SACEA,QAAQ,EACRC,gBAAgB,EAChBC,YAAY,QACP,wBAAwB;AAE/B,SAASC,YAAY,QAAQ,OAAO;AAEpC,SAASC,IAAI,EAAEC,QAAQ,EAAEC,WAAWC,WAAW,EAAEC,GAAG,EAAEC,KAAK,QAAQ,OAAO;AAC1E,OAAOC,qBAAqB,gBAAgB;AAI5C;;;;;;;;;CASC,GACD,SAASC,gBAAgBC,IAAY,EAAEC,EAAU;IAC/C,OAAOR,SAASO,MAAMC,IAAIC,KAAK,CAACN,KAAKJ,IAAI,CAACK,MAAMD,GAAG;AACrD;AAEA;;;;;;;CAOC,GACD,OAAO,SAASO,gBACdC,MAAuB,EACvBC,QAAsB;IAEtB,MAAMC,iBACJD,SAASE,MAAM,CAACC,KAAK,EAAEC,IAAI,CAACC,OAC1BX,gBACEK,OAAOO,MAAM,CAACC,IAAI,EAClBjB,YAAYS,OAAOO,MAAM,CAACC,IAAI,EAAEF,WAE/B,EAAE;IAET,MAAMG,oBACJR,SAASE,MAAM,CAACO,OAAO,EAAEL,IAAI,CAACM,eAC5BhB,gBACEK,OAAOO,MAAM,CAACC,IAAI,EAClBjB,YAAYS,OAAOO,MAAM,CAACC,IAAI,EAAEG,mBAE/B,EAAE;IAET,MAAMC,aAAaX,SAASE,MAAM,CAACU,QAAQ,CAACC,GAAG,CAACC,QAAQ,GACpD;QACEpB,gBACEK,OAAOO,MAAM,CAACC,IAAI,EAClBjB,YACES,OAAOO,MAAM,CAACC,IAAI,EAClBP,SAASE,MAAM,CAACU,QAAQ,CAACC,GAAG,CAACC,QAAQ;KAG1C,GACD,EAAE;IAEN,OAAO;QACLpB,gBACEK,OAAOO,MAAM,CAACC,IAAI,EAClBjB,YACES,OAAOO,MAAM,CAACC,IAAI,EAClBR,OAAOgB,MAAM,CAACC,IAAI,EAClBjB,OAAOgB,MAAM,CAACE,QAAQ;QAG1BvB,gBACEK,OAAOO,MAAM,CAACC,IAAI,EAClBjB,YAAYS,OAAOO,MAAM,CAACC,IAAI,EAAEvB,iBAAiBkC,QAAQ;WAExDjB;WACAO;WACAG;KACJ;AACH;AAEA;;;;;;;;;;CAUC,GACD,OAAO,SAASQ,UAAUpB,MAAuB;IAC/C;;;;;;;GAOC,GACD,eAAeqB,YACbC,OAAwB,EACxBC,QAAwB;QAExB,MAAMC,eAAepC,KAAKY,OAAOO,MAAM,CAACC,IAAI,EAAEvB,iBAAiBkC,QAAQ;QACvE,MAAM,EAAEM,MAAM,EAAE,GAAG,MAAMvC,aAA2BsC;QACpD,MAAME,eAAe3B,gBAAgBC,QAAQyB;QAE7C,MAAMR,OAAOK,QAAQK,GAAG,EAAEC,MAAM;QAChC,MAAMC,UAAUH,aAAaI,IAAI,CAAC,CAACC,cAAgBd,SAASc;QAE5D,IAAI,CAACF,SAAS;YACZN,SAASS,UAAU,GAAG;YACtBT,SAASU,GAAG;YACZ;QACF;QAEA,MAAMvC,gBAAgB4B,SAASC,UAAU;YACvCW,QAAQlC,OAAOO,MAAM,CAACC,IAAI;YAC1B2B,kBAAkB;YAClBC,SAAS;gBACP;oBACEjC,QAAQ;oBACRiC,SAAS;wBACP;4BACEC,KAAK;4BACLC,OAAO;wBACT;wBACA;4BACED,KAAK;4BACLC,OAAO;wBACT;qBACD;gBACH;aACD;QACH;IACF;IAEA,MAAM/B,SAASpB,aAAa,CAACmC,SAASC;QACpCF,YAAYC,SAASC,UAAUgB,KAAK,CAClC,wBAAwB,GACxB,CAACC;YACCxD,SAASwD;YACTjB,SAASS,UAAU,GAAG;YACtBT,SAASU,GAAG;QACd;IAEJ;IAEA;;;;;;;;GAQC,GACD,MAAMQ,SAAS,OAAOC,OAAO1C,OAAOO,MAAM,CAACmC,IAAI;QAC7C,OAAO,IAAIC,QAIR,CAACrD,SAASsD;YACX,IAAI;gBACFrC,OAAOkC,MAAM,CAACC,MAAM;oBAClB,MAAMG,QAAQ;wBACZ,MAAM,IAAIF,QAAc,CAACG,cAAcC;4BACrCxC,OAAOsC,KAAK,CAAC,CAACG;gCACZ,IAAIA,YAAY;oCACd,OAAOD,YAAYC;gCACrB;gCAEA,OAAOF;4BACT;wBACF;oBACF;oBAEA,MAAMG,UAAU1C,OAAO0C,OAAO;oBAC9B3D,QAAQ;wBAAEoD,MAAMO,QAAQP,IAAI;wBAAEnC;wBAAQsC;oBAAM;gBAC9C;YACF,EAAE,OAAOK,aAAa;gBACpBN,OAAOM;YACT;QACF;IACF;IAEA,OAAO;QAAET;IAAO;AAClB"}

package/dist/types/webpack/compiler.d.ts

@@ -1,5 +1,4 @@
-import type { Server } from 'http';
-import type { ProcessedConfig, ProcessedWebpackConfig } from '../config';
+import type { ProcessedWebpackConfig } from '../config';
 import type { WebpackOptions } from './config';
 /**
  * Get a Webpack compiler for the given config.
@@ -9,21 +8,3 @@ import type { WebpackOptions } from './config';
  * @returns The Webpack compiler.
  */
 export declare function getCompiler(config: ProcessedWebpackConfig, options?: WebpackOptions): Promise<import("webpack").Compiler>;
-/**
- * Get a static server for development purposes.
- *
- * Note: We're intentionally not using `webpack-dev-server` here because it
- * adds a lot of extra stuff to the output that we don't need, and it's
- * difficult to customize.
- *
- * @param config - The config object.
- * @returns An object with a `listen` method that returns a promise that
- * resolves when the server is listening.
- */
-export declare function getServer(config: ProcessedConfig): {
-    listen: (port?: number) => Promise<{
-        port: number;
-        server: Server;
-        close: () => Promise<void>;
-    }>;
-};

package/dist/types/webpack/index.d.ts

@@ -1,3 +1,4 @@
 export * from './compiler';
 export * from './config';
 export * from './plugins';
+export * from './server';

package/dist/types/webpack/server.d.ts

@@ -0,0 +1,30 @@
+import type { SnapManifest } from '@metamask/snaps-utils';
+import type { Server } from 'http';
+import type { ProcessedConfig } from '../config';
+/**
+ * Get the allowed paths for the static server. This includes the output file,
+ * the manifest file, and any auxiliary/localization files.
+ *
+ * @param config - The config object.
+ * @param manifest - The Snap manifest object.
+ * @returns An array of allowed paths.
+ */
+export declare function getAllowedPaths(config: ProcessedConfig, manifest: SnapManifest): string[];
+/**
+ * Get a static server for development purposes.
+ *
+ * Note: We're intentionally not using `webpack-dev-server` here because it
+ * adds a lot of extra stuff to the output that we don't need, and it's
+ * difficult to customize.
+ *
+ * @param config - The config object.
+ * @returns An object with a `listen` method that returns a promise that
+ * resolves when the server is listening.
+ */
+export declare function getServer(config: ProcessedConfig): {
+    listen: (port?: number) => Promise<{
+        port: number;
+        server: Server;
+        close: () => Promise<void>;
+    }>;
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@metamask/snaps-cli",
-  "version": "3.0.3",
+  "version": "3.0.5",
   "description": "A CLI for developing MetaMask Snaps.",
   "repository": {
     "type": "git",