@metamask/snaps-controllers 0.25.0 → 0.26.1

package/dist/snaps/utils/npm.js

@@ -1,85 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.fetchNpmSnap = exports.DEFAULT_NPM_REGISTRY = void 0;
-const snaps_utils_1 = require("@metamask/snaps-utils");
-const utils_1 = require("@metamask/utils");
-const gunzip_maybe_1 = __importDefault(require("gunzip-maybe"));
-const pump_1 = __importDefault(require("pump"));
-const stream_1 = require("./stream");
-exports.DEFAULT_NPM_REGISTRY = 'https://registry.npmjs.org';
-/**
- * Fetches a Snap from the public npm registry.
- *
- * @param packageName - The name of the package whose tarball to fetch.
- * @param versionRange - The SemVer range of the package to fetch. The highest
- * version satisfying the range will be fetched.
- * @param registryUrl - The URL of the npm registry to fetch from.
- * @param fetchFunction - The fetch function to use. Defaults to the global
- * {@link fetch}. Useful for Node.js compatibility.
- * @returns A tuple of the Snap manifest object and the Snap source code.
- */
-async function fetchNpmSnap(packageName, versionRange, registryUrl = exports.DEFAULT_NPM_REGISTRY, fetchFunction = fetch) {
-    const [tarballResponse, actualVersion] = await fetchNpmTarball(packageName, versionRange, registryUrl, fetchFunction);
-    // Extract the tarball and get the necessary files from it.
-    const snapFiles = {};
-    await new Promise((resolve, reject) => {
-        (0, pump_1.default)((0, stream_1.getNodeStream)(tarballResponse), 
-        // The "gz" in "tgz" stands for "gzip". The tarball needs to be decompressed
-        // before we can actually grab any files from it.
-        (0, gunzip_maybe_1.default)(), (0, stream_1.createTarballExtractionStream)(snapFiles), (error) => {
-            error ? reject(error) : resolve();
-        });
-    });
-    // At this point, the necessary files will have been added to the snapFiles
-    // object if they exist.
-    return (0, snaps_utils_1.validateNpmSnap)(snapFiles, `npm Snap "${packageName}@${actualVersion}" validation error: `);
-}
-exports.fetchNpmSnap = fetchNpmSnap;
-/**
- * Fetches the tarball (`.tgz` file) of the specified package and version from
- * the public npm registry. Throws an error if fetching fails.
- *
- * @param packageName - The name of the package whose tarball to fetch.
- * @param versionRange - The SemVer range of the package to fetch. The highest
- * version satisfying the range will be fetched.
- * @param registryUrl - The URL of the npm registry to fetch the tarball from.
- * @param fetchFunction - The fetch function to use. Defaults to the global
- * {@link fetch}. Useful for Node.js compatibility.
- * @returns A tuple of the {@link Response} for the package tarball and the
- * actual version of the package.
- */
-async function fetchNpmTarball(packageName, versionRange, registryUrl = exports.DEFAULT_NPM_REGISTRY, fetchFunction = fetch) {
-    var _a, _b, _c, _d;
-    const packageMetadata = await (await fetchFunction(new URL(packageName, registryUrl).toString())).json();
-    if (!(0, utils_1.isObject)(packageMetadata)) {
-        throw new Error(`Failed to fetch package "${packageName}" metadata from npm.`);
-    }
-    const versions = Object.keys((_a = packageMetadata === null || packageMetadata === void 0 ? void 0 : packageMetadata.versions) !== null && _a !== void 0 ? _a : {}).map((version) => {
-        (0, snaps_utils_1.assertIsSemVerVersion)(version);
-        return version;
-    });
-    const targetVersion = (0, snaps_utils_1.getTargetVersion)(versions, versionRange);
-    if (targetVersion === null) {
-        throw new Error(`Failed to find a matching version in npm metadata for package "${packageName}" and requested semver range "${versionRange}"`);
-    }
-    const tarballUrlString = (_d = (_c = (_b = packageMetadata.versions) === null || _b === void 0 ? void 0 : _b[targetVersion]) === null || _c === void 0 ? void 0 : _c.dist) === null || _d === void 0 ? void 0 : _d.tarball;
-    if (!(0, snaps_utils_1.isValidUrl)(tarballUrlString) || !tarballUrlString.endsWith('.tgz')) {
-        throw new Error(`Failed to find valid tarball URL in npm metadata for package "${packageName}".`);
-    }
-    // Override the tarball hostname/protocol with registryUrl hostname/protocol
-    const newRegistryUrl = new URL(registryUrl);
-    const newTarballUrl = new URL(tarballUrlString);
-    newTarballUrl.hostname = newRegistryUrl.hostname;
-    newTarballUrl.protocol = newRegistryUrl.protocol;
-    // Perform a raw fetch because we want the Response object itself.
-    const tarballResponse = await fetchFunction(newTarballUrl.toString());
-    if (!tarballResponse.ok) {
-        throw new Error(`Failed to fetch tarball for package "${packageName}".`);
-    }
-    const stream = await tarballResponse.blob().then((blob) => blob.stream());
-    return [stream, targetVersion];
-}
-//# sourceMappingURL=npm.js.map

package/dist/snaps/utils/npm.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"npm.js","sourceRoot":"","sources":["../../../src/snaps/utils/npm.ts"],"names":[],"mappings":";;;;;;AAAA,uDAS+B;AAC/B,2CAA2C;AAC3C,gEAA8C;AAC9C,gDAAwB;AAExB,qCAAwE;AAE3D,QAAA,oBAAoB,GAAG,4BAA4B,CAAC;AAEjE;;;;;;;;;;GAUG;AACI,KAAK,UAAU,YAAY,CAChC,WAAmB,EACnB,YAAyB,EACzB,WAAW,GAAG,4BAAoB,EAClC,aAAa,GAAG,KAAK;IAErB,MAAM,CAAC,eAAe,EAAE,aAAa,CAAC,GAAG,MAAM,eAAe,CAC5D,WAAW,EACX,YAAY,EACZ,WAAW,EACX,aAAa,CACd,CAAC;IAEF,2DAA2D;IAC3D,MAAM,SAAS,GAAyB,EAAE,CAAC;IAC3C,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,IAAA,cAAI,EACF,IAAA,sBAAa,EAAC,eAAe,CAAC;QAC9B,4EAA4E;QAC5E,iDAAiD;QACjD,IAAA,sBAAkB,GAAE,EACpB,IAAA,sCAA6B,EAAC,SAAS,CAAC,EACxC,CAAC,KAAK,EAAE,EAAE;YACR,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QACpC,CAAC,CACF,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,2EAA2E;IAC3E,wBAAwB;IACxB,OAAO,IAAA,6BAAe,EACpB,SAAS,EACT,aAAa,WAAW,IAAI,aAAa,sBAAuC,CACjF,CAAC;AACJ,CAAC;AAlCD,oCAkCC;AAED;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,eAAe,CAC5B,WAAmB,EACnB,YAAyB,EACzB,WAAW,GAAG,4BAAoB,EAClC,aAAa,GAAG,KAAK;;IAErB,MAAM,eAAe,GAAG,MAAM,CAC5B,MAAM,aAAa,CAAC,IAAI,GAAG,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,EAAE,CAAC,CAClE,CAAC,IAAI,EAAE,CAAC;IAET,IAAI,CAAC,IAAA,gBAAQ,EAAC,eAAe,CAAC,EAAE;QAC9B,MAAM,IAAI,KAAK,CACb,4BAA4B,WAAW,sBAAsB,CAC9D,CAAC;KACH;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAC,eAAuB,aAAvB,eAAe,uBAAf,eAAe,CAAU,QAAQ,mCAAI,EAAE,CAAC,CAAC,GAAG,CACxE,CAAC,OAAO,EAAE,EAAE;QACV,IAAA,mCAAqB,EAAC,OAAO,CAAC,CAAC;QAC/B,OAAO,OAAO,CAAC;IACjB,CAAC,CACF,CAAC;IAEF,MAAM,aAAa,GAAG,IAAA,8BAAgB,EAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;IAE/D,IAAI,aAAa,KAAK,IAAI,EAAE;QAC1B,MAAM,IAAI,KAAK,CACb,kEAAkE,WAAW,iCAAiC,YAAY,GAAG,CAC9H,CAAC;KACH;IAED,MAAM,gBAAgB,GAAG,MAAA,MAAA,MAAC,eAAuB,CAAC,QAAQ,0CAAG,aAAa,CAAC,0CACvE,IAAI,0CAAE,OAAO,CAAC;IAElB,IAAI,CAAC,IAAA,wBAAU,EAAC,gBAAgB,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE;QACvE,MAAM,IAAI,KAAK,CACb,iEAAiE,WAAW,IAAI,CACjF,CAAC;KACH;IAED,4EAA4E;IAC5E,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC;IAChD,aAAa,CAAC,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC;IACjD,aAAa,CAAC,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC;IAEjD,kEAAkE;IAClE,MAAM,eAAe,GAAG,MAAM,aAAa,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC,CAAC;IACtE,IAAI,CAAC,eAAe,CAAC,EAAE,EAAE;QACvB,MAAM,IAAI,KAAK,CAAC,wCAAwC,WAAW,IAAI,CAAC,CAAC;KAC1E;IACD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAE1E,OAAO,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;AACjC,CAAC","sourcesContent":["import {\n  SnapFiles,\n  UnvalidatedSnapFiles,\n  isValidUrl,\n  getTargetVersion,\n  validateNpmSnap,\n  assertIsSemVerVersion,\n  SemVerRange,\n  SemVerVersion,\n} from '@metamask/snaps-utils';\nimport { isObject } from '@metamask/utils';\nimport createGunzipStream from 'gunzip-maybe';\nimport pump from 'pump';\n\nimport { createTarballExtractionStream, getNodeStream } from './stream';\n\nexport const DEFAULT_NPM_REGISTRY = 'https://registry.npmjs.org';\n\n/**\n * Fetches a Snap from the public npm registry.\n *\n * @param packageName - The name of the package whose tarball to fetch.\n * @param versionRange - The SemVer range of the package to fetch. The highest\n * version satisfying the range will be fetched.\n * @param registryUrl - The URL of the npm registry to fetch from.\n * @param fetchFunction - The fetch function to use. Defaults to the global\n * {@link fetch}. Useful for Node.js compatibility.\n * @returns A tuple of the Snap manifest object and the Snap source code.\n */\nexport async function fetchNpmSnap(\n  packageName: string,\n  versionRange: SemVerRange,\n  registryUrl = DEFAULT_NPM_REGISTRY,\n  fetchFunction = fetch,\n): Promise<SnapFiles> {\n  const [tarballResponse, actualVersion] = await fetchNpmTarball(\n    packageName,\n    versionRange,\n    registryUrl,\n    fetchFunction,\n  );\n\n  // Extract the tarball and get the necessary files from it.\n  const snapFiles: UnvalidatedSnapFiles = {};\n  await new Promise<void>((resolve, reject) => {\n    pump(\n      getNodeStream(tarballResponse),\n      // The \"gz\" in \"tgz\" stands for \"gzip\". The tarball needs to be decompressed\n      // before we can actually grab any files from it.\n      createGunzipStream(),\n      createTarballExtractionStream(snapFiles),\n      (error) => {\n        error ? reject(error) : resolve();\n      },\n    );\n  });\n\n  // At this point, the necessary files will have been added to the snapFiles\n  // object if they exist.\n  return validateNpmSnap(\n    snapFiles,\n    `npm Snap \"${packageName}@${actualVersion}\" validation error: ` as `${string}: `,\n  );\n}\n\n/**\n * Fetches the tarball (`.tgz` file) of the specified package and version from\n * the public npm registry. Throws an error if fetching fails.\n *\n * @param packageName - The name of the package whose tarball to fetch.\n * @param versionRange - The SemVer range of the package to fetch. The highest\n * version satisfying the range will be fetched.\n * @param registryUrl - The URL of the npm registry to fetch the tarball from.\n * @param fetchFunction - The fetch function to use. Defaults to the global\n * {@link fetch}. Useful for Node.js compatibility.\n * @returns A tuple of the {@link Response} for the package tarball and the\n * actual version of the package.\n */\nasync function fetchNpmTarball(\n  packageName: string,\n  versionRange: SemVerRange,\n  registryUrl = DEFAULT_NPM_REGISTRY,\n  fetchFunction = fetch,\n): Promise<[ReadableStream, SemVerVersion]> {\n  const packageMetadata = await (\n    await fetchFunction(new URL(packageName, registryUrl).toString())\n  ).json();\n\n  if (!isObject(packageMetadata)) {\n    throw new Error(\n      `Failed to fetch package \"${packageName}\" metadata from npm.`,\n    );\n  }\n\n  const versions = Object.keys((packageMetadata as any)?.versions ?? {}).map(\n    (version) => {\n      assertIsSemVerVersion(version);\n      return version;\n    },\n  );\n\n  const targetVersion = getTargetVersion(versions, versionRange);\n\n  if (targetVersion === null) {\n    throw new Error(\n      `Failed to find a matching version in npm metadata for package \"${packageName}\" and requested semver range \"${versionRange}\"`,\n    );\n  }\n\n  const tarballUrlString = (packageMetadata as any).versions?.[targetVersion]\n    ?.dist?.tarball;\n\n  if (!isValidUrl(tarballUrlString) || !tarballUrlString.endsWith('.tgz')) {\n    throw new Error(\n      `Failed to find valid tarball URL in npm metadata for package \"${packageName}\".`,\n    );\n  }\n\n  // Override the tarball hostname/protocol with registryUrl hostname/protocol\n  const newRegistryUrl = new URL(registryUrl);\n  const newTarballUrl = new URL(tarballUrlString);\n  newTarballUrl.hostname = newRegistryUrl.hostname;\n  newTarballUrl.protocol = newRegistryUrl.protocol;\n\n  // Perform a raw fetch because we want the Response object itself.\n  const tarballResponse = await fetchFunction(newTarballUrl.toString());\n  if (!tarballResponse.ok) {\n    throw new Error(`Failed to fetch tarball for package \"${packageName}\".`);\n  }\n  const stream = await tarballResponse.blob().then((blob) => blob.stream());\n\n  return [stream, targetVersion];\n}\n"]}

package/dist/snaps/utils/stream.d.ts

@@ -1,30 +0,0 @@
-/// <reference types="node" />
-import { UnvalidatedSnapFiles } from '@metamask/snaps-utils';
-import { Readable, Writable } from 'stream';
-/**
- * Strips the leading `./` from a string, or does nothing if no string is
- * provided.
- *
- * @param pathString - The path string to normalize.
- * @returns The specified path without a `./` prefix, or `undefined` if no
- * string was provided.
- */
-export declare function stripDotSlash(pathString?: string): string | undefined;
-/**
- * Converts a {@link ReadableStream} to a Node.js {@link Readable}
- * stream. Returns the stream directly if it is already a Node.js stream.
- * We can't use the native Web {@link ReadableStream} directly because the
- * other stream libraries we use expect Node.js streams.
- *
- * @param stream - The stream to convert.
- * @returns The given stream as a Node.js Readable stream.
- */
-export declare function getNodeStream(stream: ReadableStream): Readable;
-/**
- * Creates a `tar-stream` that will get the necessary files from an npm Snap
- * package tarball (`.tgz` file).
- *
- * @param snapFiles - An object to write target file contents to.
- * @returns The {@link Writable} tarball extraction stream.
- */
-export declare function createTarballExtractionStream(snapFiles: UnvalidatedSnapFiles): Writable;

package/dist/snaps/utils/stream.js

@@ -1,124 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.createTarballExtractionStream = exports.getNodeStream = exports.stripDotSlash = void 0;
-const snaps_utils_1 = require("@metamask/snaps-utils");
-const utils_1 = require("@metamask/utils");
-const concat_stream_1 = __importDefault(require("concat-stream"));
-const readable_web_to_node_stream_1 = require("readable-web-to-node-stream");
-const tar_stream_1 = require("tar-stream");
-// The paths of files within npm tarballs appear to always be prefixed with
-// "package/".
-const NPM_TARBALL_PATH_PREFIX = /^package\//u;
-/**
- * Strips the leading `./` from a string, or does nothing if no string is
- * provided.
- *
- * @param pathString - The path string to normalize.
- * @returns The specified path without a `./` prefix, or `undefined` if no
- * string was provided.
- */
-function stripDotSlash(pathString) {
-    return pathString === null || pathString === void 0 ? void 0 : pathString.replace(/^\.\//u, '');
-}
-exports.stripDotSlash = stripDotSlash;
-/**
- * Converts a {@link ReadableStream} to a Node.js {@link Readable}
- * stream. Returns the stream directly if it is already a Node.js stream.
- * We can't use the native Web {@link ReadableStream} directly because the
- * other stream libraries we use expect Node.js streams.
- *
- * @param stream - The stream to convert.
- * @returns The given stream as a Node.js Readable stream.
- */
-function getNodeStream(stream) {
-    if (typeof stream.getReader !== 'function') {
-        return stream;
-    }
-    return new readable_web_to_node_stream_1.ReadableWebToNodeStream(stream);
-}
-exports.getNodeStream = getNodeStream;
-/**
- * Creates a `tar-stream` that will get the necessary files from an npm Snap
- * package tarball (`.tgz` file).
- *
- * @param snapFiles - An object to write target file contents to.
- * @returns The {@link Writable} tarball extraction stream.
- */
-function createTarballExtractionStream(snapFiles) {
-    // `tar-stream` is pretty old-school, so we create it first and then
-    // instrument it by adding event listeners.
-    const extractStream = (0, tar_stream_1.extract)();
-    // `tar-stream` reads every file in the tarball serially. We already know
-    // where to look for package.json and the Snap manifest, but we don't know
-    // where the source code is. Therefore, we cache the contents of each .js
-    // file in the tarball and pick out the correct one when the stream has ended.
-    const jsFileCache = new Map();
-    // "entry" is fired for every discreet entity in the tarball. This includes
-    // files and folders.
-    extractStream.on('entry', (header, entryStream, next) => {
-        const { name: headerName, type: headerType } = header;
-        if (headerType === 'file') {
-            // The name is a path if the header type is "file".
-            const filePath = headerName.replace(NPM_TARBALL_PATH_PREFIX, '');
-            // Note the use of `concat-stream` since the data for each file may be
-            // chunked.
-            if (filePath === snaps_utils_1.NpmSnapFileNames.PackageJson) {
-                return entryStream.pipe((0, concat_stream_1.default)((data) => {
-                    try {
-                        snapFiles.packageJson = JSON.parse(data.toString());
-                    }
-                    catch (_error) {
-                        return extractStream.destroy(new Error(`Failed to parse "${snaps_utils_1.NpmSnapFileNames.PackageJson}".`));
-                    }
-                    return next();
-                }));
-            }
-            else if (filePath === snaps_utils_1.NpmSnapFileNames.Manifest) {
-                return entryStream.pipe((0, concat_stream_1.default)((data) => {
-                    try {
-                        snapFiles.manifest = JSON.parse(data.toString());
-                    }
-                    catch (_error) {
-                        return extractStream.destroy(new Error(`Failed to parse "${snaps_utils_1.NpmSnapFileNames.Manifest}".`));
-                    }
-                    return next();
-                }));
-            }
-            else if (/\w+\.(?:js|svg)$/u.test(filePath)) {
-                return entryStream.pipe((0, concat_stream_1.default)((data) => {
-                    jsFileCache.set(filePath, data);
-                    return next();
-                }));
-            }
-        }
-        // If we get here, the entry is not a file, and we want to ignore. The entry
-        // stream must be drained, or the extractStream will stop reading. This is
-        // effectively a no-op for the current entry.
-        entryStream.on('end', () => next());
-        return entryStream.resume();
-    });
-    // Once we've read the entire tarball, attempt to grab the bundle file
-    // contents from the .js file cache.
-    extractStream.once('finish', () => {
-        var _a, _b, _c, _d, _e;
-        if ((0, utils_1.isObject)(snapFiles.manifest)) {
-            /* istanbul ignore next: optional chaining */
-            const { filePath: _bundlePath, iconPath: _iconPath } = (_c = (_b = (_a = snapFiles.manifest.source) === null || _a === void 0 ? void 0 : _a.location) === null || _b === void 0 ? void 0 : _b.npm) !== null && _c !== void 0 ? _c : {};
-            const bundlePath = stripDotSlash(_bundlePath);
-            const iconPath = stripDotSlash(_iconPath);
-            if (bundlePath) {
-                snapFiles.sourceCode = (_d = jsFileCache.get(bundlePath)) === null || _d === void 0 ? void 0 : _d.toString('utf8');
-            }
-            if (typeof iconPath === 'string' && iconPath.endsWith('.svg')) {
-                snapFiles.svgIcon = (_e = jsFileCache.get(iconPath)) === null || _e === void 0 ? void 0 : _e.toString('utf8');
-            }
-        }
-        jsFileCache.clear();
-    });
-    return extractStream;
-}
-exports.createTarballExtractionStream = createTarballExtractionStream;
-//# sourceMappingURL=stream.js.map

package/dist/snaps/utils/stream.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"stream.js","sourceRoot":"","sources":["../../../src/snaps/utils/stream.ts"],"names":[],"mappings":";;;;;;AAAA,uDAI+B;AAC/B,2CAA2C;AAC3C,kEAAmC;AACnC,6EAAsE;AAEtE,2CAAmD;AAEnD,2EAA2E;AAC3E,cAAc;AACd,MAAM,uBAAuB,GAAG,aAAa,CAAC;AAE9C;;;;;;;GAOG;AACH,SAAgB,aAAa,CAAC,UAAmB;IAC/C,OAAO,UAAU,aAAV,UAAU,uBAAV,UAAU,CAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAC3C,CAAC;AAFD,sCAEC;AAED;;;;;;;;GAQG;AACH,SAAgB,aAAa,CAAC,MAAsB;IAClD,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,UAAU,EAAE;QAC1C,OAAO,MAA6B,CAAC;KACtC;IAED,OAAO,IAAI,qDAAuB,CAAC,MAAM,CAAC,CAAC;AAC7C,CAAC;AAND,sCAMC;AAED;;;;;;GAMG;AACH,SAAgB,6BAA6B,CAC3C,SAA+B;IAE/B,oEAAoE;IACpE,2CAA2C;IAC3C,MAAM,aAAa,GAAG,IAAA,oBAAU,GAAE,CAAC;IAEnC,yEAAyE;IACzE,0EAA0E;IAC1E,yEAAyE;IACzE,8EAA8E;IAC9E,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE9C,2EAA2E;IAC3E,qBAAqB;IACrB,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE;QACtD,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC;QACtD,IAAI,UAAU,KAAK,MAAM,EAAE;YACzB,mDAAmD;YACnD,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAE,CAAC,CAAC;YAEjE,sEAAsE;YACtE,WAAW;YACX,IAAI,QAAQ,KAAK,8BAAgB,CAAC,WAAW,EAAE;gBAC7C,OAAO,WAAW,CAAC,IAAI,CACrB,IAAA,uBAAM,EAAC,CAAC,IAAI,EAAE,EAAE;oBACd,IAAI;wBACF,SAAS,CAAC,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;qBACrD;oBAAC,OAAO,MAAM,EAAE;wBACf,OAAO,aAAa,CAAC,OAAO,CAC1B,IAAI,KAAK,CAAC,oBAAoB,8BAAgB,CAAC,WAAW,IAAI,CAAC,CAChE,CAAC;qBACH;oBAED,OAAO,IAAI,EAAE,CAAC;gBAChB,CAAC,CAAC,CACH,CAAC;aACH;iBAAM,IAAI,QAAQ,KAAK,8BAAgB,CAAC,QAAQ,EAAE;gBACjD,OAAO,WAAW,CAAC,IAAI,CACrB,IAAA,uBAAM,EAAC,CAAC,IAAI,EAAE,EAAE;oBACd,IAAI;wBACF,SAAS,CAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;qBAClD;oBAAC,OAAO,MAAM,EAAE;wBACf,OAAO,aAAa,CAAC,OAAO,CAC1B,IAAI,KAAK,CAAC,oBAAoB,8BAAgB,CAAC,QAAQ,IAAI,CAAC,CAC7D,CAAC;qBACH;oBAED,OAAO,IAAI,EAAE,CAAC;gBAChB,CAAC,CAAC,CACH,CAAC;aACH;iBAAM,IAAI,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAC7C,OAAO,WAAW,CAAC,IAAI,CACrB,IAAA,uBAAM,EAAC,CAAC,IAAI,EAAE,EAAE;oBACd,WAAW,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;oBAChC,OAAO,IAAI,EAAE,CAAC;gBAChB,CAAC,CAAC,CACH,CAAC;aACH;SACF;QAED,4EAA4E;QAC5E,0EAA0E;QAC1E,6CAA6C;QAC7C,WAAW,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QACpC,OAAO,WAAW,CAAC,MAAM,EAAE,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,sEAAsE;IACtE,oCAAoC;IACpC,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE;;QAChC,IAAI,IAAA,gBAAQ,EAAC,SAAS,CAAC,QAAQ,CAAC,EAAE;YAChC,6CAA6C;YAC7C,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,GAClD,MAAA,MAAA,MAAC,SAAS,CAAC,QAA6C,CAAC,MAAM,0CAC3D,QAAQ,0CAAE,GAAG,mCAAI,EAAE,CAAC;YAE1B,MAAM,UAAU,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;YAC9C,MAAM,QAAQ,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;YAE1C,IAAI,UAAU,EAAE;gBACd,SAAS,CAAC,UAAU,GAAG,MAAA,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,0CAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;aACtE;YAED,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE;gBAC7D,SAAS,CAAC,OAAO,GAAG,MAAA,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,0CAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;aACjE;SACF;QACD,WAAW,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,OAAO,aAAa,CAAC;AACvB,CAAC;AA5FD,sEA4FC","sourcesContent":["import {\n  SnapManifest,\n  NpmSnapFileNames,\n  UnvalidatedSnapFiles,\n} from '@metamask/snaps-utils';\nimport { isObject } from '@metamask/utils';\nimport concat from 'concat-stream';\nimport { ReadableWebToNodeStream } from 'readable-web-to-node-stream';\nimport { Readable, Writable } from 'stream';\nimport { extract as tarExtract } from 'tar-stream';\n\n// The paths of files within npm tarballs appear to always be prefixed with\n// \"package/\".\nconst NPM_TARBALL_PATH_PREFIX = /^package\\//u;\n\n/**\n * Strips the leading `./` from a string, or does nothing if no string is\n * provided.\n *\n * @param pathString - The path string to normalize.\n * @returns The specified path without a `./` prefix, or `undefined` if no\n * string was provided.\n */\nexport function stripDotSlash(pathString?: string): string | undefined {\n  return pathString?.replace(/^\\.\\//u, '');\n}\n\n/**\n * Converts a {@link ReadableStream} to a Node.js {@link Readable}\n * stream. Returns the stream directly if it is already a Node.js stream.\n * We can't use the native Web {@link ReadableStream} directly because the\n * other stream libraries we use expect Node.js streams.\n *\n * @param stream - The stream to convert.\n * @returns The given stream as a Node.js Readable stream.\n */\nexport function getNodeStream(stream: ReadableStream): Readable {\n  if (typeof stream.getReader !== 'function') {\n    return stream as unknown as Readable;\n  }\n\n  return new ReadableWebToNodeStream(stream);\n}\n\n/**\n * Creates a `tar-stream` that will get the necessary files from an npm Snap\n * package tarball (`.tgz` file).\n *\n * @param snapFiles - An object to write target file contents to.\n * @returns The {@link Writable} tarball extraction stream.\n */\nexport function createTarballExtractionStream(\n  snapFiles: UnvalidatedSnapFiles,\n): Writable {\n  // `tar-stream` is pretty old-school, so we create it first and then\n  // instrument it by adding event listeners.\n  const extractStream = tarExtract();\n\n  // `tar-stream` reads every file in the tarball serially. We already know\n  // where to look for package.json and the Snap manifest, but we don't know\n  // where the source code is. Therefore, we cache the contents of each .js\n  // file in the tarball and pick out the correct one when the stream has ended.\n  const jsFileCache = new Map<string, Buffer>();\n\n  // \"entry\" is fired for every discreet entity in the tarball. This includes\n  // files and folders.\n  extractStream.on('entry', (header, entryStream, next) => {\n    const { name: headerName, type: headerType } = header;\n    if (headerType === 'file') {\n      // The name is a path if the header type is \"file\".\n      const filePath = headerName.replace(NPM_TARBALL_PATH_PREFIX, '');\n\n      // Note the use of `concat-stream` since the data for each file may be\n      // chunked.\n      if (filePath === NpmSnapFileNames.PackageJson) {\n        return entryStream.pipe(\n          concat((data) => {\n            try {\n              snapFiles.packageJson = JSON.parse(data.toString());\n            } catch (_error) {\n              return extractStream.destroy(\n                new Error(`Failed to parse \"${NpmSnapFileNames.PackageJson}\".`),\n              );\n            }\n\n            return next();\n          }),\n        );\n      } else if (filePath === NpmSnapFileNames.Manifest) {\n        return entryStream.pipe(\n          concat((data) => {\n            try {\n              snapFiles.manifest = JSON.parse(data.toString());\n            } catch (_error) {\n              return extractStream.destroy(\n                new Error(`Failed to parse \"${NpmSnapFileNames.Manifest}\".`),\n              );\n            }\n\n            return next();\n          }),\n        );\n      } else if (/\\w+\\.(?:js|svg)$/u.test(filePath)) {\n        return entryStream.pipe(\n          concat((data) => {\n            jsFileCache.set(filePath, data);\n            return next();\n          }),\n        );\n      }\n    }\n\n    // If we get here, the entry is not a file, and we want to ignore. The entry\n    // stream must be drained, or the extractStream will stop reading. This is\n    // effectively a no-op for the current entry.\n    entryStream.on('end', () => next());\n    return entryStream.resume();\n  });\n\n  // Once we've read the entire tarball, attempt to grab the bundle file\n  // contents from the .js file cache.\n  extractStream.once('finish', () => {\n    if (isObject(snapFiles.manifest)) {\n      /* istanbul ignore next: optional chaining */\n      const { filePath: _bundlePath, iconPath: _iconPath } =\n        (snapFiles.manifest as unknown as Partial<SnapManifest>).source\n          ?.location?.npm ?? {};\n\n      const bundlePath = stripDotSlash(_bundlePath);\n      const iconPath = stripDotSlash(_iconPath);\n\n      if (bundlePath) {\n        snapFiles.sourceCode = jsFileCache.get(bundlePath)?.toString('utf8');\n      }\n\n      if (typeof iconPath === 'string' && iconPath.endsWith('.svg')) {\n        snapFiles.svgIcon = jsFileCache.get(iconPath)?.toString('utf8');\n      }\n    }\n    jsFileCache.clear();\n  });\n\n  return extractStream;\n}\n"]}