@metamask/snaps-controllers 1.0.2 → 2.0.1

package/dist/{services → types/services}/node/NodeThreadExecutionService.d.ts

@@ -1,7 +1,8 @@
 /// <reference types="node" />
-import { BasePostMessageStream } from '@metamask/post-message-stream';
+import type { BasePostMessageStream } from '@metamask/post-message-stream';
 import { Worker } from 'worker_threads';
-import { AbstractExecutionService, Job } from '..';
+import type { Job } from '..';
+import { AbstractExecutionService } from '..';
 export declare class NodeThreadExecutionService extends AbstractExecutionService<Worker> {
     protected initEnvStream(): Promise<{
         worker: Worker;

package/dist/{services → types/services}/offscreen/OffscreenExecutionService.d.ts

@@ -1,5 +1,6 @@
-import { AbstractExecutionService, ExecutionServiceArgs, Job } from '../AbstractExecutionService';
-import { OffscreenPostMessageStream } from './OffscreenPostMessageStream';
+import type { ExecutionServiceArgs, Job } from '../AbstractExecutionService';
+import { AbstractExecutionService } from '../AbstractExecutionService';
+import { ProxyPostMessageStream } from '../ProxyPostMessageStream';
 declare type OffscreenExecutionEnvironmentServiceArgs = {
     documentUrl: URL;
     frameUrl: URL;
@@ -37,7 +38,7 @@ export declare class OffscreenExecutionService extends AbstractExecutionService<
      */
     protected initEnvStream(jobId: string): Promise<{
         worker: string;
-        stream: OffscreenPostMessageStream;
+        stream: ProxyPostMessageStream;
     }>;
     /**
      * Creates the offscreen document to be used as the execution environment.

package/dist/types/services/offscreen/index.d.ts

@@ -0,0 +1 @@
+export * from './OffscreenExecutionService';

package/dist/types/services/webworker/WebWorkerExecutionService.d.ts

@@ -0,0 +1,45 @@
+import type { ExecutionServiceArgs, Job } from '../AbstractExecutionService';
+import { AbstractExecutionService } from '../AbstractExecutionService';
+import { ProxyPostMessageStream } from '../ProxyPostMessageStream';
+declare type WebWorkerExecutionEnvironmentServiceArgs = {
+    documentUrl: URL;
+} & ExecutionServiceArgs;
+export declare const WORKER_POOL_ID = "snaps-worker-pool";
+export declare class WebWorkerExecutionService extends AbstractExecutionService<string> {
+    #private;
+    /**
+     * Create a new webworker execution service.
+     *
+     * @param args - The constructor arguments.
+     * @param args.documentUrl - The URL of the worker pool document to use as the
+     * execution environment.
+     * @param args.messenger - The messenger to use for communication with the
+     * `SnapController`.
+     * @param args.setupSnapProvider - The function to use to set up the snap
+     * provider.
+     */
+    constructor({ documentUrl, messenger, setupSnapProvider, }: WebWorkerExecutionEnvironmentServiceArgs);
+    /**
+     * Send a termination command to the worker pool document.
+     *
+     * @param job - The job to terminate.
+     */
+    protected terminateJob(job: Job<string>): Promise<void>;
+    /**
+     * Create a new stream for the specified job. This wraps the runtime stream
+     * in a stream specific to the job.
+     *
+     * @param jobId - The job ID.
+     */
+    protected initEnvStream(jobId: string): Promise<{
+        worker: string;
+        stream: ProxyPostMessageStream;
+    }>;
+    /**
+     * Creates the worker pool document to be used as the execution environment.
+     *
+     * If the document already exists, this does nothing.
+     */
+    private createDocument;
+}
+export {};

package/dist/types/services/webworker/index.d.ts

@@ -0,0 +1 @@
+export * from './WebWorkerExecutionService';

package/dist/{snaps → types/snaps}/SnapController.d.ts

@@ -1,14 +1,17 @@
-import { AddApprovalRequest, UpdateRequestState } from '@metamask/approval-controller';
-import { BaseControllerV2 as BaseController, RestrictedControllerMessenger } from '@metamask/base-controller';
-import { GetEndowments, GetPermissions, GetSubjects, GrantPermissions, HasPermission, HasPermissions, RevokeAllPermissions, RevokePermissionForAllSubjects, RevokePermissions, UpdateCaveat, GetSubjectMetadata } from '@metamask/permission-controller';
-import { BlockReason } from '@metamask/snaps-registry';
-import { InstallSnapsResult, PersistedSnap, RequestedSnapPermissions, Snap, SnapId, SnapRpcHook, SnapRpcHookArgs, SnapStatusEvents, StatusContext, StatusEvents, StatusStates, TruncatedSnap, ValidatedSnapId } from '@metamask/snaps-utils';
-import { Json } from '@metamask/utils';
-import { StateMachine } from '@xstate/fsm';
+import type { AddApprovalRequest, UpdateRequestState } from '@metamask/approval-controller';
+import type { RestrictedControllerMessenger } from '@metamask/base-controller';
+import { BaseControllerV2 as BaseController } from '@metamask/base-controller';
+import type { GetEndowments, GetPermissions, GetSubjectMetadata, GetSubjects, GrantPermissions, HasPermission, HasPermissions, RevokeAllPermissions, RevokePermissionForAllSubjects, RevokePermissions, UpdateCaveat } from '@metamask/permission-controller';
+import type { BlockReason } from '@metamask/snaps-registry';
+import type { InstallSnapsResult, PersistedSnap, RequestedSnapPermissions, Snap, SnapId, SnapRpcHook, SnapRpcHookArgs, StatusContext, StatusEvents, StatusStates, TruncatedSnap, ValidatedSnapId } from '@metamask/snaps-utils';
+import { SnapStatusEvents } from '@metamask/snaps-utils';
+import type { Json, NonEmptyArray } from '@metamask/utils';
+import type { StateMachine } from '@xstate/fsm';
 import type { Patch } from 'immer';
-import { ExecuteSnapAction, ExecutionServiceEvents, HandleRpcRequestAction, SnapErrorJson, TerminateAllSnapsAction, TerminateSnapAction } from '../services';
-import { detectSnapLocation, SnapLocation } from './location';
-import { GetMetadata, GetResult, SnapsRegistryMetadata, Update } from './registry';
+import type { ExecuteSnapAction, ExecutionServiceEvents, HandleRpcRequestAction, SnapErrorJson, TerminateAllSnapsAction, TerminateSnapAction } from '../services';
+import type { SnapLocation } from './location';
+import { detectSnapLocation } from './location';
+import type { GetMetadata, GetResult, SnapsRegistryMetadata, Update } from './registry';
 import { Timer } from './Timer';
 export declare const controllerName = "SnapController";
 export declare const SNAP_APPROVAL_INSTALL = "wallet_installSnap";
@@ -63,10 +66,10 @@ export declare type SnapError = {
     data?: Json;
 };
 declare type CloseAllConnectionsFunction = (origin: string) => void;
-declare type StoredSnaps = Record<SnapId, Snap>;
+declare type StoredSnaps = Record<ValidatedSnapId, Snap>;
 export declare type SnapControllerState = {
     snaps: StoredSnaps;
-    snapStates: Record<SnapId, string | null>;
+    snapStates: Record<ValidatedSnapId, string | null>;
     snapErrors: {
         [internalID: string]: SnapError & {
             internalID: string;
@@ -74,8 +77,8 @@ export declare type SnapControllerState = {
     };
 };
 export declare type PersistedSnapControllerState = SnapControllerState & {
-    snaps: Record<SnapId, PersistedSnap>;
-    snapStates: Record<SnapId, string>;
+    snaps: Record<ValidatedSnapId, PersistedSnap>;
+    snapStates: Record<ValidatedSnapId, string>;
 };
 /**
  * Gets the specified Snap from state.
@@ -166,7 +169,15 @@ export declare type GetRegistryMetadata = {
     type: `${typeof controllerName}:getRegistryMetadata`;
     handler: SnapController['getRegistryMetadata'];
 };
-export declare type SnapControllerActions = ClearSnapState | GetSnap | GetSnapState | HandleSnapRequest | HasSnap | UpdateBlockedSnaps | UpdateSnapState | EnableSnap | DisableSnap | RemoveSnap | GetPermittedSnaps | InstallSnaps | RemoveSnapError | GetAllSnaps | IncrementActiveReferences | DecrementActiveReferences | GetRegistryMetadata;
+export declare type DisconnectOrigin = {
+    type: `${typeof controllerName}:disconnectOrigin`;
+    handler: SnapController['removeSnapFromSubject'];
+};
+export declare type RevokeDynamicPermissions = {
+    type: `${typeof controllerName}:revokeDynamicPermissions`;
+    handler: SnapController['revokeDynamicSnapPermissions'];
+};
+export declare type SnapControllerActions = ClearSnapState | GetSnap | GetSnapState | HandleSnapRequest | HasSnap | UpdateBlockedSnaps | UpdateSnapState | EnableSnap | DisableSnap | RemoveSnap | GetPermittedSnaps | InstallSnaps | RemoveSnapError | GetAllSnaps | IncrementActiveReferences | DecrementActiveReferences | GetRegistryMetadata | DisconnectOrigin | RevokeDynamicPermissions;
 export declare type SnapStateChange = {
     type: `${typeof controllerName}:stateChange`;
     payload: [SnapControllerState, Patch[]];
@@ -229,9 +240,24 @@ export declare type SnapTerminated = {
     type: `${typeof controllerName}:snapTerminated`;
     payload: [snap: TruncatedSnap];
 };
-export declare type SnapControllerEvents = SnapAdded | SnapBlocked | SnapInstalled | SnapRemoved | SnapStateChange | SnapUnblocked | SnapUpdated | SnapRolledback | SnapTerminated;
+/**
+ * Emitted when a Snap is enabled by a user.
+ * This is not emitted by default when installing a snap.
+ */
+export declare type SnapEnabled = {
+    type: `${typeof controllerName}:snapEnabled`;
+    payload: [snap: TruncatedSnap];
+};
+/**
+ * Emitted when a Snap is disabled by a user.
+ */
+export declare type SnapDisabled = {
+    type: `${typeof controllerName}:snapDisabled`;
+    payload: [snap: TruncatedSnap];
+};
+export declare type SnapControllerEvents = SnapAdded | SnapBlocked | SnapInstalled | SnapRemoved | SnapStateChange | SnapUnblocked | SnapUpdated | SnapRolledback | SnapTerminated | SnapEnabled | SnapDisabled;
 export declare type AllowedActions = GetEndowments | GetPermissions | GetSubjects | GetSubjectMetadata | HasPermission | HasPermissions | RevokePermissions | RevokeAllPermissions | RevokePermissionForAllSubjects | GrantPermissions | AddApprovalRequest | HandleRpcRequestAction | ExecuteSnapAction | TerminateAllSnapsAction | TerminateSnapAction | UpdateCaveat | UpdateRequestState | GetResult | GetMetadata | Update;
-export declare type AllowedEvents = ExecutionServiceEvents;
+export declare type AllowedEvents = ExecutionServiceEvents | SnapInstalled | SnapUpdated;
 declare type SnapControllerMessenger = RestrictedControllerMessenger<typeof controllerName, SnapControllerActions | AllowedActions, SnapControllerEvents | AllowedEvents, AllowedActions['type'], AllowedEvents['type']>;
 declare type FeatureFlags = {
     /**
@@ -251,6 +277,10 @@ declare type SnapControllerArgs = {
      * for a running snap.
      */
     closeAllConnections: CloseAllConnectionsFunction;
+    /**
+     * A list of permissions that are allowed to be dynamic, meaning they can be revoked from the snap whenever.
+     */
+    dynamicPermissions: string[];
     /**
      * The names of endowment permissions whose values are the names of JavaScript
      * APIs that will be added to the snap execution environment at runtime.
@@ -305,7 +335,7 @@ declare type SnapControllerArgs = {
 export declare class SnapController extends BaseController<string, SnapControllerState, SnapControllerMessenger> {
     #private;
     private readonly maxRequestTime;
-    constructor({ closeAllConnections, messenger, state, environmentEndowmentPermissions, excludedPermissions, idleTimeCheckInterval, maxIdleTime, maxRequestTime, fetchFunction, featureFlags, detectSnapLocation: detectSnapLocationFunction, }: SnapControllerArgs);
+    constructor({ closeAllConnections, messenger, state, dynamicPermissions, environmentEndowmentPermissions, excludedPermissions, idleTimeCheckInterval, maxIdleTime, maxRequestTime, fetchFunction, featureFlags, detectSnapLocation: detectSnapLocationFunction, }: SnapControllerArgs);
     /**
      * Checks all installed snaps against the block list and
      * blocks/unblocks snaps as appropriate. See {@link SnapController.blockSnap}
@@ -321,21 +351,21 @@ export declare class SnapController extends BaseController<string, SnapControlle
      *
      * @param snapId - The id of the Snap to start.
      */
-    startSnap(snapId: SnapId): Promise<void>;
+    startSnap(snapId: ValidatedSnapId): Promise<void>;
     /**
      * Enables the given snap. A snap can only be started if it is enabled. A snap
      * can only be enabled if it isn't blocked.
      *
      * @param snapId - The id of the Snap to enable.
      */
-    enableSnap(snapId: SnapId): void;
+    enableSnap(snapId: ValidatedSnapId): void;
     /**
      * Disables the given snap. A snap can only be started if it is enabled.
      *
      * @param snapId - The id of the Snap to disable.
      * @returns A promise that resolves once the snap has been disabled.
      */
-    disableSnap(snapId: SnapId): Promise<void>;
+    disableSnap(snapId: ValidatedSnapId): Promise<void>;
     /**
      * Stops the given snap, removes all hooks, closes all connections, and
      * terminates its worker.
@@ -344,7 +374,7 @@ export declare class SnapController extends BaseController<string, SnapControlle
      * @param statusEvent - The Snap status event that caused the snap to be
      * stopped.
      */
-    stopSnap(snapId: SnapId, statusEvent?: SnapStatusEvents.Stop | SnapStatusEvents.Crash): Promise<void>;
+    stopSnap(snapId: ValidatedSnapId, statusEvent?: SnapStatusEvents.Stop | SnapStatusEvents.Crash): Promise<void>;
     /**
      * Returns whether the given snap is running.
      * Throws an error if the snap doesn't exist.
@@ -352,14 +382,14 @@ export declare class SnapController extends BaseController<string, SnapControlle
      * @param snapId - The id of the Snap to check.
      * @returns `true` if the snap is running, otherwise `false`.
      */
-    isRunning(snapId: SnapId): boolean;
+    isRunning(snapId: ValidatedSnapId): boolean;
     /**
      * Returns whether the given snap has been added to state.
      *
      * @param snapId - The id of the Snap to check for.
      * @returns `true` if the snap exists in the controller state, otherwise `false`.
      */
-    has(snapId: SnapId): boolean;
+    has(snapId: ValidatedSnapId): boolean;
     /**
      * Gets the snap with the given id if it exists, including all data.
      * This should not be used if the snap is to be serializable, as e.g.
@@ -379,7 +409,7 @@ export declare class SnapController extends BaseController<string, SnapControlle
      * @param snapId - The id of the snap to get.
      * @returns The entire snap object.
      */
-    getExpect(snapId: SnapId): Snap;
+    getExpect(snapId: ValidatedSnapId): Snap;
     /**
      * Gets the snap with the given id if it exists, excluding any
      * non-serializable or expensive-to-serialize data.
@@ -387,7 +417,7 @@ export declare class SnapController extends BaseController<string, SnapControlle
      * @param snapId - The id of the Snap to get.
      * @returns A truncated version of the snap state, that is less expensive to serialize.
      */
-    getTruncated(snapId: SnapId): TruncatedSnap | null;
+    getTruncated(snapId: ValidatedSnapId): TruncatedSnap | null;
     /**
      * Gets the snap with the given id, throw if it doesn't exist.
      *
@@ -395,7 +425,7 @@ export declare class SnapController extends BaseController<string, SnapControlle
      * @param snapId - The id of the snap to get.
      * @returns A truncated version of the snap state, that is less expensive to serialize.
      */
-    getTruncatedExpect(snapId: SnapId): TruncatedSnap;
+    getTruncatedExpect(snapId: ValidatedSnapId): TruncatedSnap;
     /**
      * Updates the own state of the snap with the given id.
      * This is distinct from the state MetaMask uses to manage snaps.
@@ -403,14 +433,14 @@ export declare class SnapController extends BaseController<string, SnapControlle
      * @param snapId - The id of the Snap whose state should be updated.
      * @param newSnapState - The new state of the snap.
      */
-    updateSnapState(snapId: SnapId, newSnapState: string): Promise<void>;
+    updateSnapState(snapId: ValidatedSnapId, newSnapState: string): Promise<void>;
     /**
      * Clears the state of the snap with the given id.
      * This is distinct from the state MetaMask uses to manage snaps.
      *
      * @param snapId - The id of the Snap whose state should be cleared.
      */
-    clearSnapState(snapId: SnapId): void;
+    clearSnapState(snapId: ValidatedSnapId): void;
     /**
      * Adds error from a snap to the SnapController state.
      *
@@ -435,7 +465,7 @@ export declare class SnapController extends BaseController<string, SnapControlle
      * @returns A promise that resolves with the decrypted snap state or null if no state exists.
      * @throws If the snap state decryption fails.
      */
-    getSnapState(snapId: SnapId): Promise<Json>;
+    getSnapState(snapId: ValidatedSnapId): Promise<Json>;
     /**
      * Completely clear the controller's state: delete all associated data,
      * handlers, event listeners, and permissions; tear down all snap providers.
@@ -448,32 +478,41 @@ export declare class SnapController extends BaseController<string, SnapControlle
      * @param snapId - The id of the Snap.
      * @returns A promise that resolves once the snap has been removed.
      */
-    removeSnap(snapId: SnapId): Promise<void>;
+    removeSnap(snapId: ValidatedSnapId): Promise<void>;
     /**
      * Stops the given snaps, removes them from state, and clears all associated
      * permissions, handlers, and listeners.
      *
      * @param snapIds - The ids of the Snaps.
      */
-    removeSnaps(snapIds: string[]): Promise<void>;
+    removeSnaps(snapIds: ValidatedSnapId[]): Promise<void>;
+    /**
+     * Removes a snap's permission (caveat) from the specified subject.
+     *
+     * @param origin - The origin from which to remove the snap.
+     * @param snapId - The id of the snap to remove.
+     */
+    removeSnapFromSubject(origin: string, snapId: ValidatedSnapId): void;
     /**
-     * Safely revokes all permissions granted to a Snap.
+     * Checks if a list of permissions are dynamic and allowed to be revoked, if they are they will all be revoked.
      *
      * @param snapId - The snap ID.
+     * @param permissionNames - The names of the permissions.
+     * @throws If non-dynamic permissions are passed.
      */
-    private revokeAllSnapPermissions;
+    revokeDynamicSnapPermissions(snapId: string, permissionNames: NonEmptyArray<string>): void;
     /**
      * Handles incrementing the activeReferences counter.
      *
      * @param snapId - The snap id of the snap that was referenced.
      */
-    incrementActiveReferences(snapId: SnapId): void;
+    incrementActiveReferences(snapId: ValidatedSnapId): void;
     /**
      * Handles decrement the activeReferences counter.
      *
      * @param snapId - The snap id of the snap that was referenced..
      */
-    decrementActiveReferences(snapId: SnapId): void;
+    decrementActiveReferences(snapId: ValidatedSnapId): void;
     /**
      * Gets all snaps in their truncated format.
      *
@@ -535,7 +574,7 @@ export declare class SnapController extends BaseController<string, SnapControlle
      * @returns The metadata for the given snap ID, or `null` if the snap is not
      * verified.
      */
-    getRegistryMetadata(snapId: SnapId): Promise<SnapsRegistryMetadata | null>;
+    getRegistryMetadata(snapId: ValidatedSnapId): Promise<SnapsRegistryMetadata | null>;
     /**
      * Initiates a request for the given snap's initial permissions.
      * Must be called in order. See processRequestedSnap.
@@ -558,8 +597,8 @@ export declare class SnapController extends BaseController<string, SnapControlle
      * @param options.request - The JSON-RPC request object.
      * @returns The result of the JSON-RPC request.
      */
-    handleRequest({ snapId, origin, handler: handlerType, request, }: SnapRpcHookArgs & {
-        snapId: SnapId;
+    handleRequest({ snapId, origin, handler: handlerType, request: rawRequest, }: SnapRpcHookArgs & {
+        snapId: ValidatedSnapId;
     }): Promise<unknown>;
 }
 export {};

package/dist/{snaps → types/snaps}/endowments/cronjob.d.ts

@@ -1,6 +1,8 @@
-import { PermissionSpecificationBuilder, PermissionType, PermissionConstraint, Caveat, CaveatSpecificationConstraint } from '@metamask/permission-controller';
-import { SnapCaveatType, CronjobSpecification } from '@metamask/snaps-utils';
-import { Json, NonEmptyArray } from '@metamask/utils';
+import type { PermissionSpecificationBuilder, PermissionConstraint, Caveat, CaveatSpecificationConstraint } from '@metamask/permission-controller';
+import { PermissionType } from '@metamask/permission-controller';
+import type { CronjobSpecification } from '@metamask/snaps-utils';
+import { SnapCaveatType } from '@metamask/snaps-utils';
+import type { Json, NonEmptyArray } from '@metamask/utils';
 import { SnapEndowments } from './enum';
 declare const permissionName = SnapEndowments.Cronjob;
 export declare const cronjobEndowmentBuilder: Readonly<{

package/dist/{snaps → types/snaps}/endowments/enum.d.ts

@@ -1,10 +1,10 @@
 export declare enum SnapEndowments {
     NetworkAccess = "endowment:network-access",
-    LongRunning = "endowment:long-running",
     TransactionInsight = "endowment:transaction-insight",
-    Keyring = "endowment:keyring",
     Cronjob = "endowment:cronjob",
     EthereumProvider = "endowment:ethereum-provider",
     Rpc = "endowment:rpc",
-    WebAssemblyAccess = "endowment:webassembly"
+    WebAssemblyAccess = "endowment:webassembly",
+    NameLookup = "endowment:name-lookup",
+    LifecycleHooks = "endowment:lifecycle-hooks"
 }

package/dist/{snaps → types/snaps}/endowments/ethereum-provider.d.ts

@@ -1,4 +1,5 @@
-import { PermissionSpecificationBuilder, PermissionType } from '@metamask/permission-controller';
+import type { PermissionSpecificationBuilder } from '@metamask/permission-controller';
+import { PermissionType } from '@metamask/permission-controller';
 import { SnapEndowments } from './enum';
 declare const permissionName = SnapEndowments.EthereumProvider;
 export declare const ethereumProviderEndowmentBuilder: Readonly<{

package/dist/{snaps → types/snaps}/endowments/index.d.ts

@@ -1,6 +1,6 @@
-import { PermissionConstraint } from '@metamask/permission-controller';
+import type { PermissionConstraint } from '@metamask/permission-controller';
 import { HandlerType } from '@metamask/snaps-utils';
-import { Json } from '@metamask/utils';
+import type { Json } from '@metamask/utils';
 export declare const endowmentPermissionBuilders: {
     readonly "endowment:network-access": Readonly<{
         readonly targetName: import("./enum").SnapEndowments.NetworkAccess;
@@ -11,15 +11,6 @@ export declare const endowmentPermissionBuilders: {
             allowedCaveats: null;
         }>;
     }>;
-    readonly "endowment:long-running": Readonly<{
-        readonly targetName: import("./enum").SnapEndowments.LongRunning;
-        readonly specificationBuilder: import("@metamask/permission-controller").PermissionSpecificationBuilder<import("@metamask/permission-controller").PermissionType.Endowment, any, {
-            permissionType: import("@metamask/permission-controller").PermissionType.Endowment;
-            targetName: import("./enum").SnapEndowments.LongRunning;
-            endowmentGetter: (_options?: any) => undefined;
-            allowedCaveats: null;
-        }>;
-    }>;
     readonly "endowment:transaction-insight": Readonly<{
         readonly targetName: import("./enum").SnapEndowments.TransactionInsight;
         readonly specificationBuilder: import("@metamask/permission-controller").PermissionSpecificationBuilder<import("@metamask/permission-controller").PermissionType.Endowment, any, {
@@ -30,17 +21,6 @@ export declare const endowmentPermissionBuilders: {
             validator: import("@metamask/permission-controller").PermissionValidatorConstraint;
         }>;
     }>;
-    readonly "endowment:keyring": Readonly<{
-        readonly targetName: import("./enum").SnapEndowments.Keyring;
-        readonly specificationBuilder: import("@metamask/permission-controller").PermissionSpecificationBuilder<import("@metamask/permission-controller").PermissionType.Endowment, {}, {
-            permissionType: import("@metamask/permission-controller").PermissionType.Endowment;
-            targetName: import("./enum").SnapEndowments.Keyring;
-            endowmentGetter: (_options?: any) => undefined;
-            allowedCaveats: readonly [string, ...string[]] | null;
-            validator: import("@metamask/permission-controller").PermissionValidatorConstraint;
-            subjectTypes: readonly import("@metamask/permission-controller").SubjectType[];
-        }>;
-    }>;
     readonly "endowment:cronjob": Readonly<{
         readonly targetName: import("./enum").SnapEndowments.Cronjob;
         readonly specificationBuilder: import("@metamask/permission-controller").PermissionSpecificationBuilder<import("@metamask/permission-controller").PermissionType.Endowment, any, {
@@ -79,15 +59,35 @@ export declare const endowmentPermissionBuilders: {
             allowedCaveats: null;
         }>;
     }>;
+    readonly "endowment:name-lookup": Readonly<{
+        readonly targetName: import("./enum").SnapEndowments.NameLookup;
+        readonly specificationBuilder: import("@metamask/permission-controller").PermissionSpecificationBuilder<import("@metamask/permission-controller").PermissionType.Endowment, any, {
+            permissionType: import("@metamask/permission-controller").PermissionType.Endowment;
+            targetName: import("./enum").SnapEndowments.NameLookup;
+            endowmentGetter: (_options?: import("@metamask/permission-controller").EndowmentGetterParams | undefined) => undefined;
+            allowedCaveats: readonly [string, ...string[]] | null;
+            validator: import("@metamask/permission-controller").PermissionValidatorConstraint;
+        }>;
+    }>;
+    readonly "endowment:lifecycle-hooks": Readonly<{
+        readonly targetName: import("./enum").SnapEndowments.LifecycleHooks;
+        readonly specificationBuilder: import("@metamask/permission-controller").PermissionSpecificationBuilder<import("@metamask/permission-controller").PermissionType.Endowment, any, {
+            permissionType: import("@metamask/permission-controller").PermissionType.Endowment;
+            targetName: import("./enum").SnapEndowments.LifecycleHooks;
+            endowmentGetter: (_options?: import("@metamask/permission-controller").EndowmentGetterParams | undefined) => undefined;
+            allowedCaveats: readonly [string, ...string[]] | null;
+        }>;
+    }>;
 };
 export declare const endowmentCaveatSpecifications: {
+    chainIds: import("@metamask/permission-controller").CaveatSpecificationConstraint;
     rpcOrigin: import("@metamask/permission-controller").CaveatSpecificationConstraint;
     transactionOrigin: import("@metamask/permission-controller").CaveatSpecificationConstraint;
     snapCronjob: import("@metamask/permission-controller").CaveatSpecificationConstraint;
-    snapKeyring: import("@metamask/permission-controller").CaveatSpecificationConstraint;
 };
 export declare const endowmentCaveatMappers: Record<string, (value: Json) => Pick<PermissionConstraint, 'caveats'>>;
 export declare const handlerEndowments: Record<HandlerType, string>;
 export * from './enum';
 export { getRpcCaveatOrigins } from './rpc';
 export { getTransactionOriginCaveat } from './transaction-insight';
+export { getChainIdsCaveat } from './name-lookup';

package/dist/types/snaps/endowments/lifecycle-hooks.d.ts

@@ -0,0 +1,15 @@
+import type { PermissionSpecificationBuilder, EndowmentGetterParams } from '@metamask/permission-controller';
+import { PermissionType } from '@metamask/permission-controller';
+import type { NonEmptyArray } from '@metamask/utils';
+import { SnapEndowments } from './enum';
+declare const permissionName = SnapEndowments.LifecycleHooks;
+export declare const lifecycleHooksEndowmentBuilder: Readonly<{
+    readonly targetName: SnapEndowments.LifecycleHooks;
+    readonly specificationBuilder: PermissionSpecificationBuilder<PermissionType.Endowment, any, {
+        permissionType: PermissionType.Endowment;
+        targetName: typeof permissionName;
+        endowmentGetter: (_options?: EndowmentGetterParams) => undefined;
+        allowedCaveats: Readonly<NonEmptyArray<string>> | null;
+    }>;
+}>;
+export {};

package/dist/types/snaps/endowments/name-lookup.d.ts

@@ -0,0 +1,38 @@
+import type { EndowmentGetterParams, PermissionSpecificationBuilder, PermissionValidatorConstraint, CaveatSpecificationConstraint, PermissionConstraint } from '@metamask/permission-controller';
+import { PermissionType } from '@metamask/permission-controller';
+import { SnapCaveatType } from '@metamask/snaps-utils';
+import type { Json, NonEmptyArray } from '@metamask/utils';
+import { SnapEndowments } from './enum';
+declare const permissionName = SnapEndowments.NameLookup;
+export declare const nameLookupEndowmentBuilder: Readonly<{
+    readonly targetName: SnapEndowments.NameLookup;
+    readonly specificationBuilder: PermissionSpecificationBuilder<PermissionType.Endowment, any, {
+        permissionType: PermissionType.Endowment;
+        targetName: typeof permissionName;
+        endowmentGetter: (_options?: EndowmentGetterParams) => undefined;
+        allowedCaveats: Readonly<NonEmptyArray<string>> | null;
+        validator: PermissionValidatorConstraint;
+    }>;
+}>;
+/**
+ * Map a raw value from the `initialPermissions` to a caveat specification.
+ * Note that this function does not do any validation, that's handled by the
+ * PermissionsController when the permission is requested.
+ *
+ * @param value - The raw value from the `initialPermissions`.
+ * @returns The caveat specification.
+ */
+export declare function getNameLookupCaveatMapper(value: Json): Pick<PermissionConstraint, 'caveats'>;
+/**
+ * Getter function to get the chainIds caveat from a permission.
+ *
+ * This does basic validation of the caveat, but does not validate the type or
+ * value of the namespaces object itself, as this is handled by the
+ * `PermissionsController` when the permission is requested.
+ *
+ * @param permission - The permission to get the `chainIds` caveat from.
+ * @returns An array of `chainIds` that the snap supports.
+ */
+export declare function getChainIdsCaveat(permission?: PermissionConstraint): string[] | null;
+export declare const nameLookupCaveatSpecifications: Record<SnapCaveatType.ChainIds, CaveatSpecificationConstraint>;
+export {};

package/dist/{snaps → types/snaps}/endowments/network-access.d.ts

@@ -1,4 +1,5 @@
-import { PermissionSpecificationBuilder, PermissionType } from '@metamask/permission-controller';
+import type { PermissionSpecificationBuilder } from '@metamask/permission-controller';
+import { PermissionType } from '@metamask/permission-controller';
 import { SnapEndowments } from './enum';
 declare const permissionName = SnapEndowments.NetworkAccess;
 export declare const networkAccessEndowmentBuilder: Readonly<{

package/dist/{snaps → types/snaps}/endowments/rpc.d.ts

@@ -1,6 +1,8 @@
-import { CaveatSpecificationConstraint, PermissionConstraint, PermissionSpecificationBuilder, PermissionType, PermissionValidatorConstraint, SubjectType } from '@metamask/permission-controller';
-import { RpcOrigins, SnapCaveatType } from '@metamask/snaps-utils';
-import { Json, NonEmptyArray } from '@metamask/utils';
+import type { CaveatSpecificationConstraint, PermissionConstraint, PermissionSpecificationBuilder, PermissionValidatorConstraint } from '@metamask/permission-controller';
+import { PermissionType, SubjectType } from '@metamask/permission-controller';
+import type { RpcOrigins } from '@metamask/snaps-utils';
+import { SnapCaveatType } from '@metamask/snaps-utils';
+import type { Json, NonEmptyArray } from '@metamask/utils';
 import { SnapEndowments } from './enum';
 declare const targetName = SnapEndowments.Rpc;
 declare type RpcSpecificationBuilderOptions = {};

package/dist/{snaps → types/snaps}/endowments/transaction-insight.d.ts

@@ -1,6 +1,7 @@
-import { PermissionSpecificationBuilder, PermissionType, EndowmentGetterParams, PermissionValidatorConstraint, PermissionConstraint, CaveatSpecificationConstraint } from '@metamask/permission-controller';
+import type { PermissionSpecificationBuilder, EndowmentGetterParams, PermissionValidatorConstraint, PermissionConstraint, CaveatSpecificationConstraint } from '@metamask/permission-controller';
+import { PermissionType } from '@metamask/permission-controller';
 import { SnapCaveatType } from '@metamask/snaps-utils';
-import { Json, NonEmptyArray } from '@metamask/utils';
+import type { Json, NonEmptyArray } from '@metamask/utils';
 import { SnapEndowments } from './enum';
 declare const permissionName = SnapEndowments.TransactionInsight;
 export declare const transactionInsightEndowmentBuilder: Readonly<{

package/dist/{snaps → types/snaps}/endowments/web-assembly.d.ts

@@ -1,4 +1,5 @@
-import { PermissionSpecificationBuilder, PermissionType } from '@metamask/permission-controller';
+import type { PermissionSpecificationBuilder } from '@metamask/permission-controller';
+import { PermissionType } from '@metamask/permission-controller';
 import { SnapEndowments } from './enum';
 declare const permissionName = SnapEndowments.WebAssemblyAccess;
 export declare const webAssemblyEndowmentBuilder: Readonly<{

package/dist/{snaps → types/snaps}/index.d.ts

@@ -1,4 +1,6 @@
+export * from './location';
 export * from './SnapController';
 export * from './endowments';
 export * from './selectors';
 export * from './registry';
+export * from './permissions';

package/dist/{snaps → types/snaps}/location/http.d.ts

@@ -1,5 +1,6 @@
-import { SnapManifest, VirtualFile } from '@metamask/snaps-utils';
-import { SnapLocation } from './location';
+import type { SnapManifest } from '@metamask/snaps-utils';
+import { VirtualFile } from '@metamask/snaps-utils';
+import type { SnapLocation } from './location';
 export interface HttpOptions {
     /**
      * @default fetch

package/dist/{snaps → types/snaps}/location/local.d.ts

@@ -1,6 +1,6 @@
-import { SnapManifest, VirtualFile } from '@metamask/snaps-utils';
-import { HttpOptions } from './http';
-import { SnapLocation } from './location';
+import type { SnapManifest, VirtualFile } from '@metamask/snaps-utils';
+import type { HttpOptions } from './http';
+import type { SnapLocation } from './location';
 export declare class LocalLocation implements SnapLocation {
     #private;
     constructor(url: URL, opts?: HttpOptions);

package/dist/{snaps → types/snaps}/location/location.d.ts

@@ -1,5 +1,5 @@
-import { SnapManifest, VirtualFile } from '@metamask/snaps-utils';
-import { NpmOptions } from './npm';
+import type { SnapManifest, VirtualFile } from '@metamask/snaps-utils';
+import type { NpmOptions } from './npm';
 declare module '@metamask/snaps-utils' {
     interface DataMap {
         /**