@metamask/snaps-controllers 5.0.1 → 6.0.1

package/dist/chunk-7JY5VENP.js

@@ -0,0 +1,273 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+
+
+var _chunkEXN2TFDJjs = require('./chunk-EXN2TFDJ.js');
+
+// src/snaps/registry/json.ts
+var _basecontroller = require('@metamask/base-controller');
+var _snapsregistry = require('@metamask/snaps-registry');
+var _snapsutils = require('@metamask/snaps-utils');
+
+
+
+
+
+
+var _utils = require('@metamask/utils');
+var SNAP_REGISTRY_URL = "https://cdn.jsdelivr.net/gh/MetaMask/snaps-registry@gh-pages/latest/registry.json";
+var SNAP_REGISTRY_SIGNATURE_URL = "https://cdn.jsdelivr.net/gh/MetaMask/snaps-registry@gh-pages/latest/signature.json";
+var controllerName = "SnapsRegistry";
+var defaultState = {
+  database: null,
+  lastUpdated: null
+};
+var _url, _publicKey, _fetchFunction, _recentFetchThreshold, _refetchOnAllowlistMiss, _failOnUnavailableRegistry, _currentUpdate, _wasRecentlyFetched, wasRecentlyFetched_fn, _triggerUpdate, triggerUpdate_fn, _update, update_fn, _getDatabase, getDatabase_fn, _getSingle, getSingle_fn, _get, get_fn, _resolveVersion, resolveVersion_fn, _getMetadata, getMetadata_fn, _verifySignature, verifySignature_fn, _safeFetch, safeFetch_fn;
+var JsonSnapsRegistry = class extends _basecontroller.BaseController {
+  constructor({
+    messenger,
+    state,
+    url = {
+      registry: SNAP_REGISTRY_URL,
+      signature: SNAP_REGISTRY_SIGNATURE_URL
+    },
+    publicKey,
+    fetchFunction = globalThis.fetch.bind(globalThis),
+    recentFetchThreshold = _utils.inMilliseconds.call(void 0, 5, _utils.Duration.Minute),
+    failOnUnavailableRegistry = true,
+    refetchOnAllowlistMiss = true
+  }) {
+    super({
+      messenger,
+      metadata: {
+        database: { persist: true, anonymous: false },
+        lastUpdated: { persist: true, anonymous: false }
+      },
+      name: controllerName,
+      state: {
+        ...defaultState,
+        ...state
+      }
+    });
+    _chunkEXN2TFDJjs.__privateAdd.call(void 0, this, _wasRecentlyFetched);
+    /**
+     * Triggers an update of the registry database.
+     *
+     * If an existing update is in progress this function will await that update.
+     */
+    _chunkEXN2TFDJjs.__privateAdd.call(void 0, this, _triggerUpdate);
+    /**
+     * Updates the registry database if the registry hasn't been updated recently.
+     *
+     * NOTE: SHOULD NOT be called directly, instead `triggerUpdate` should be used.
+     */
+    _chunkEXN2TFDJjs.__privateAdd.call(void 0, this, _update);
+    _chunkEXN2TFDJjs.__privateAdd.call(void 0, this, _getDatabase);
+    _chunkEXN2TFDJjs.__privateAdd.call(void 0, this, _getSingle);
+    _chunkEXN2TFDJjs.__privateAdd.call(void 0, this, _get);
+    /**
+     * Find an allowlisted version within a specified version range. Otherwise return the version range itself.
+     *
+     * @param snapId - The ID of the snap we are trying to resolve a version for.
+     * @param versionRange - The version range.
+     * @param refetch - An optional flag used to determine if we are refetching the registry.
+     * @returns An allowlisted version within the specified version range if available otherwise returns the input version range.
+     */
+    _chunkEXN2TFDJjs.__privateAdd.call(void 0, this, _resolveVersion);
+    /**
+     * Get metadata for the given snap ID.
+     *
+     * @param snapId - The ID of the snap to get metadata for.
+     * @returns The metadata for the given snap ID, or `null` if the snap is not
+     * verified.
+     */
+    _chunkEXN2TFDJjs.__privateAdd.call(void 0, this, _getMetadata);
+    /**
+     * Verify the signature of the registry.
+     *
+     * @param database - The registry database.
+     * @param signature - The signature of the registry.
+     * @throws If the signature is invalid.
+     * @private
+     */
+    _chunkEXN2TFDJjs.__privateAdd.call(void 0, this, _verifySignature);
+    /**
+     * Fetch the given URL, throwing if the response is not OK.
+     *
+     * @param url - The URL to fetch.
+     * @returns The response body.
+     * @private
+     */
+    _chunkEXN2TFDJjs.__privateAdd.call(void 0, this, _safeFetch);
+    _chunkEXN2TFDJjs.__privateAdd.call(void 0, this, _url, void 0);
+    _chunkEXN2TFDJjs.__privateAdd.call(void 0, this, _publicKey, void 0);
+    _chunkEXN2TFDJjs.__privateAdd.call(void 0, this, _fetchFunction, void 0);
+    _chunkEXN2TFDJjs.__privateAdd.call(void 0, this, _recentFetchThreshold, void 0);
+    _chunkEXN2TFDJjs.__privateAdd.call(void 0, this, _refetchOnAllowlistMiss, void 0);
+    _chunkEXN2TFDJjs.__privateAdd.call(void 0, this, _failOnUnavailableRegistry, void 0);
+    _chunkEXN2TFDJjs.__privateAdd.call(void 0, this, _currentUpdate, void 0);
+    _chunkEXN2TFDJjs.__privateSet.call(void 0, this, _url, url);
+    _chunkEXN2TFDJjs.__privateSet.call(void 0, this, _publicKey, publicKey);
+    _chunkEXN2TFDJjs.__privateSet.call(void 0, this, _fetchFunction, fetchFunction);
+    _chunkEXN2TFDJjs.__privateSet.call(void 0, this, _recentFetchThreshold, recentFetchThreshold);
+    _chunkEXN2TFDJjs.__privateSet.call(void 0, this, _refetchOnAllowlistMiss, refetchOnAllowlistMiss);
+    _chunkEXN2TFDJjs.__privateSet.call(void 0, this, _failOnUnavailableRegistry, failOnUnavailableRegistry);
+    _chunkEXN2TFDJjs.__privateSet.call(void 0, this, _currentUpdate, null);
+    this.messagingSystem.registerActionHandler(
+      "SnapsRegistry:get",
+      async (...args) => _chunkEXN2TFDJjs.__privateMethod.call(void 0, this, _get, get_fn).call(this, ...args)
+    );
+    this.messagingSystem.registerActionHandler(
+      "SnapsRegistry:getMetadata",
+      async (...args) => _chunkEXN2TFDJjs.__privateMethod.call(void 0, this, _getMetadata, getMetadata_fn).call(this, ...args)
+    );
+    this.messagingSystem.registerActionHandler(
+      "SnapsRegistry:resolveVersion",
+      async (...args) => _chunkEXN2TFDJjs.__privateMethod.call(void 0, this, _resolveVersion, resolveVersion_fn).call(this, ...args)
+    );
+    this.messagingSystem.registerActionHandler(
+      "SnapsRegistry:update",
+      async () => _chunkEXN2TFDJjs.__privateMethod.call(void 0, this, _triggerUpdate, triggerUpdate_fn).call(this)
+    );
+  }
+};
+_url = new WeakMap();
+_publicKey = new WeakMap();
+_fetchFunction = new WeakMap();
+_recentFetchThreshold = new WeakMap();
+_refetchOnAllowlistMiss = new WeakMap();
+_failOnUnavailableRegistry = new WeakMap();
+_currentUpdate = new WeakMap();
+_wasRecentlyFetched = new WeakSet();
+wasRecentlyFetched_fn = function() {
+  return this.state.lastUpdated && Date.now() - this.state.lastUpdated < _chunkEXN2TFDJjs.__privateGet.call(void 0, this, _recentFetchThreshold);
+};
+_triggerUpdate = new WeakSet();
+triggerUpdate_fn = async function() {
+  if (_chunkEXN2TFDJjs.__privateGet.call(void 0, this, _currentUpdate)) {
+    await _chunkEXN2TFDJjs.__privateGet.call(void 0, this, _currentUpdate);
+    return;
+  }
+  if (_chunkEXN2TFDJjs.__privateGet.call(void 0, this, _currentUpdate) === null) {
+    _chunkEXN2TFDJjs.__privateSet.call(void 0, this, _currentUpdate, _chunkEXN2TFDJjs.__privateMethod.call(void 0, this, _update, update_fn).call(this));
+  }
+  await _chunkEXN2TFDJjs.__privateGet.call(void 0, this, _currentUpdate);
+  _chunkEXN2TFDJjs.__privateSet.call(void 0, this, _currentUpdate, null);
+};
+_update = new WeakSet();
+update_fn = async function() {
+  if (_chunkEXN2TFDJjs.__privateMethod.call(void 0, this, _wasRecentlyFetched, wasRecentlyFetched_fn).call(this)) {
+    return;
+  }
+  try {
+    const database = await _chunkEXN2TFDJjs.__privateMethod.call(void 0, this, _safeFetch, safeFetch_fn).call(this, _chunkEXN2TFDJjs.__privateGet.call(void 0, this, _url).registry);
+    if (_chunkEXN2TFDJjs.__privateGet.call(void 0, this, _publicKey)) {
+      const signature = await _chunkEXN2TFDJjs.__privateMethod.call(void 0, this, _safeFetch, safeFetch_fn).call(this, _chunkEXN2TFDJjs.__privateGet.call(void 0, this, _url).signature);
+      _chunkEXN2TFDJjs.__privateMethod.call(void 0, this, _verifySignature, verifySignature_fn).call(this, database, signature);
+    }
+    this.update((state) => {
+      state.database = JSON.parse(database);
+      state.lastUpdated = Date.now();
+    });
+  } catch {
+  }
+};
+_getDatabase = new WeakSet();
+getDatabase_fn = async function() {
+  if (this.state.database === null) {
+    await _chunkEXN2TFDJjs.__privateMethod.call(void 0, this, _triggerUpdate, triggerUpdate_fn).call(this);
+  }
+  if (_chunkEXN2TFDJjs.__privateGet.call(void 0, this, _failOnUnavailableRegistry) && this.state.database === null) {
+    throw new Error("Snaps registry is unavailable, installation blocked.");
+  }
+  return this.state.database;
+};
+_getSingle = new WeakSet();
+getSingle_fn = async function(snapId, snapInfo, refetch = false) {
+  const database = await _chunkEXN2TFDJjs.__privateMethod.call(void 0, this, _getDatabase, getDatabase_fn).call(this);
+  const blockedEntry = database?.blockedSnaps.find((blocked) => {
+    if ("id" in blocked) {
+      return blocked.id === snapId && _utils.satisfiesVersionRange.call(void 0, snapInfo.version, blocked.versionRange);
+    }
+    return blocked.checksum === snapInfo.checksum;
+  });
+  if (blockedEntry) {
+    return {
+      status: 1 /* Blocked */,
+      reason: blockedEntry.reason
+    };
+  }
+  const verified = database?.verifiedSnaps[snapId];
+  const version = verified?.versions?.[snapInfo.version];
+  if (version && version.checksum === snapInfo.checksum) {
+    return { status: 2 /* Verified */ };
+  }
+  if (_chunkEXN2TFDJjs.__privateGet.call(void 0, this, _refetchOnAllowlistMiss) && !refetch) {
+    await _chunkEXN2TFDJjs.__privateMethod.call(void 0, this, _triggerUpdate, triggerUpdate_fn).call(this);
+    return _chunkEXN2TFDJjs.__privateMethod.call(void 0, this, _getSingle, getSingle_fn).call(this, snapId, snapInfo, true);
+  }
+  return { status: 0 /* Unverified */ };
+};
+_get = new WeakSet();
+get_fn = async function(snaps) {
+  return Object.entries(snaps).reduce(async (previousPromise, [snapId, snapInfo]) => {
+    const result = await _chunkEXN2TFDJjs.__privateMethod.call(void 0, this, _getSingle, getSingle_fn).call(this, snapId, snapInfo);
+    const acc = await previousPromise;
+    acc[snapId] = result;
+    return acc;
+  }, Promise.resolve({}));
+};
+_resolveVersion = new WeakSet();
+resolveVersion_fn = async function(snapId, versionRange, refetch = false) {
+  const database = await _chunkEXN2TFDJjs.__privateMethod.call(void 0, this, _getDatabase, getDatabase_fn).call(this);
+  const versions = database?.verifiedSnaps[snapId]?.versions ?? null;
+  if (!versions && _chunkEXN2TFDJjs.__privateGet.call(void 0, this, _refetchOnAllowlistMiss) && !refetch) {
+    await _chunkEXN2TFDJjs.__privateMethod.call(void 0, this, _triggerUpdate, triggerUpdate_fn).call(this);
+    return _chunkEXN2TFDJjs.__privateMethod.call(void 0, this, _resolveVersion, resolveVersion_fn).call(this, snapId, versionRange, true);
+  }
+  if (!versions) {
+    return versionRange;
+  }
+  const targetVersion = _snapsutils.getTargetVersion.call(void 0, 
+    Object.keys(versions),
+    versionRange
+  );
+  if (!targetVersion && _chunkEXN2TFDJjs.__privateGet.call(void 0, this, _refetchOnAllowlistMiss) && !refetch) {
+    await _chunkEXN2TFDJjs.__privateMethod.call(void 0, this, _triggerUpdate, triggerUpdate_fn).call(this);
+    return _chunkEXN2TFDJjs.__privateMethod.call(void 0, this, _resolveVersion, resolveVersion_fn).call(this, snapId, versionRange, true);
+  }
+  if (!targetVersion) {
+    return versionRange;
+  }
+  _utils.assertIsSemVerRange.call(void 0, targetVersion);
+  return targetVersion;
+};
+_getMetadata = new WeakSet();
+getMetadata_fn = async function(snapId) {
+  const database = await _chunkEXN2TFDJjs.__privateMethod.call(void 0, this, _getDatabase, getDatabase_fn).call(this);
+  return database?.verifiedSnaps[snapId]?.metadata ?? null;
+};
+_verifySignature = new WeakSet();
+verifySignature_fn = function(database, signature) {
+  _utils.assert.call(void 0, _chunkEXN2TFDJjs.__privateGet.call(void 0, this, _publicKey), "No public key provided.");
+  const valid = _snapsregistry.verify.call(void 0, {
+    registry: database,
+    signature: JSON.parse(signature),
+    publicKey: _chunkEXN2TFDJjs.__privateGet.call(void 0, this, _publicKey)
+  });
+  _utils.assert.call(void 0, valid, "Invalid registry signature.");
+};
+_safeFetch = new WeakSet();
+safeFetch_fn = async function(url) {
+  const response = await _chunkEXN2TFDJjs.__privateGet.call(void 0, this, _fetchFunction).call(this, url);
+  if (!response.ok) {
+    throw new Error(`Failed to fetch ${url}.`);
+  }
+  return await response.text();
+};
+
+
+
+exports.JsonSnapsRegistry = JsonSnapsRegistry;
+//# sourceMappingURL=chunk-7JY5VENP.js.map

package/dist/chunk-7JY5VENP.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/snaps/registry/json.ts"],"names":[],"mappings":";;;;;;;;AACA,SAAS,sBAAsB;AAE/B,SAAS,cAAc;AACvB,SAAS,wBAAwB;AAEjC;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAYP,IAAM,oBACJ;AAEF,IAAM,8BACJ;AA2DF,IAAM,iBAAiB;AAEvB,IAAM,eAAe;AAAA,EACnB,UAAU;AAAA,EACV,aAAa;AACf;AA5FA;AA8FO,IAAM,oBAAN,cAAgC,eAIrC;AAAA,EAeA,YAAY;AAAA,IACV;AAAA,IACA;AAAA,IACA,MAAM;AAAA,MACJ,UAAU;AAAA,MACV,WAAW;AAAA,IACb;AAAA,IACA;AAAA,IACA,gBAAgB,WAAW,MAAM,KAAK,UAAU;AAAA,IAChD,uBAAuB,eAAe,GAAG,SAAS,MAAM;AAAA,IACxD,4BAA4B;AAAA,IAC5B,yBAAyB;AAAA,EAC3B,GAA0B;AACxB,UAAM;AAAA,MACJ;AAAA,MACA,UAAU;AAAA,QACR,UAAU,EAAE,SAAS,MAAM,WAAW,MAAM;AAAA,QAC5C,aAAa,EAAE,SAAS,MAAM,WAAW,MAAM;AAAA,MACjD;AAAA,MACA,MAAM;AAAA,MACN,OAAO;AAAA,QACL,GAAG;AAAA,QACH,GAAG;AAAA,MACL;AAAA,IACF,CAAC;AA8BH;AAYA;AAAA;AAAA;AAAA;AAAA;AAAA,uBAAM;AAmBN;AAAA;AAAA;AAAA;AAAA;AAAA,uBAAM;AAuBN,uBAAM;AAYN,uBAAM;AAsCN,uBAAM;AAqBN;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,uBAAM;AA6CN;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,uBAAM;AAaN;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAmBA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,uBAAM;AA9QN;AAEA;AAEA;AAEA;AAEA;AAEA;AAEA;AA2BE,uBAAK,MAAO;AACZ,uBAAK,YAAa;AAClB,uBAAK,gBAAiB;AACtB,uBAAK,uBAAwB;AAC7B,uBAAK,yBAA0B;AAC/B,uBAAK,4BAA6B;AAClC,uBAAK,gBAAiB;AAEtB,SAAK,gBAAgB;AAAA,MACnB;AAAA,MACA,UAAU,SAAS,sBAAK,cAAL,WAAU,GAAG;AAAA,IAClC;AAEA,SAAK,gBAAgB;AAAA,MACnB;AAAA,MACA,UAAU,SAAS,sBAAK,8BAAL,WAAkB,GAAG;AAAA,IAC1C;AAEA,SAAK,gBAAgB;AAAA,MACnB;AAAA,MACA,UAAU,SAAS,sBAAK,oCAAL,WAAqB,GAAG;AAAA,IAC7C;AAEA,SAAK,gBAAgB;AAAA,MACnB;AAAA,MACA,YAAY,sBAAK,kCAAL;AAAA,IACd;AAAA,EACF;AAoNF;AAtRE;AAEA;AAEA;AAEA;AAEA;AAEA;AAEA;AAwDA;AAAA,wBAAmB,WAAG;AACpB,SACE,KAAK,MAAM,eACX,KAAK,IAAI,IAAI,KAAK,MAAM,cAAc,mBAAK;AAE/C;AAOM;AAAA,mBAAc,iBAAG;AAErB,MAAI,mBAAK,iBAAgB;AACvB,UAAM,mBAAK;AACX;AAAA,EACF;AAEA,MAAI,mBAAK,oBAAmB,MAAM;AAChC,uBAAK,gBAAiB,sBAAK,oBAAL;AAAA,EACxB;AACA,QAAM,mBAAK;AACX,qBAAK,gBAAiB;AACxB;AAOM;AAAA,YAAO,iBAAG;AAEd,MAAI,sBAAK,4CAAL,YAA4B;AAC9B;AAAA,EACF;AAEA,MAAI;AACF,UAAM,WAAW,MAAM,sBAAK,0BAAL,WAAgB,mBAAK,MAAK;AAEjD,QAAI,mBAAK,aAAY;AACnB,YAAM,YAAY,MAAM,sBAAK,0BAAL,WAAgB,mBAAK,MAAK;AAClD,4BAAK,sCAAL,WAAsB,UAAU;AAAA,IAClC;AAEA,SAAK,OAAO,CAAC,UAAU;AACrB,YAAM,WAAW,KAAK,MAAM,QAAQ;AACpC,YAAM,cAAc,KAAK,IAAI;AAAA,IAC/B,CAAC;AAAA,EACH,QAAQ;AAAA,EAER;AACF;AAEM;AAAA,iBAAY,iBAA0C;AAC1D,MAAI,KAAK,MAAM,aAAa,MAAM;AAChC,UAAM,sBAAK,kCAAL;AAAA,EACR;AAGA,MAAI,mBAAK,+BAA8B,KAAK,MAAM,aAAa,MAAM;AACnE,UAAM,IAAI,MAAM,sDAAsD;AAAA,EACxE;AACA,SAAO,KAAK,MAAM;AACpB;AAEM;AAAA,eAAU,eACd,QACA,UACA,UAAU,OACoB;AAC9B,QAAM,WAAW,MAAM,sBAAK,8BAAL;AAEvB,QAAM,eAAe,UAAU,aAAa,KAAK,CAAC,YAAY;AAC5D,QAAI,QAAQ,SAAS;AACnB,aACE,QAAQ,OAAO,UACf,sBAAsB,SAAS,SAAS,QAAQ,YAAY;AAAA,IAEhE;AAEA,WAAO,QAAQ,aAAa,SAAS;AAAA,EACvC,CAAC;AAED,MAAI,cAAc;AAChB,WAAO;AAAA,MACL;AAAA,MACA,QAAQ,aAAa;AAAA,IACvB;AAAA,EACF;AAEA,QAAM,WAAW,UAAU,cAAc,MAAM;AAC/C,QAAM,UAAU,UAAU,WAAW,SAAS,OAAO;AACrD,MAAI,WAAW,QAAQ,aAAa,SAAS,UAAU;AACrD,WAAO,EAAE,yBAAqC;AAAA,EAChD;AAEA,MAAI,mBAAK,4BAA2B,CAAC,SAAS;AAC5C,UAAM,sBAAK,kCAAL;AACN,WAAO,sBAAK,0BAAL,WAAgB,QAAQ,UAAU;AAAA,EAC3C;AACA,SAAO,EAAE,2BAAuC;AAClD;AAEM;AAAA,SAAI,eACR,OAC8C;AAC9C,SAAO,OAAO,QAAQ,KAAK,EAAE,OAE3B,OAAO,iBAAiB,CAAC,QAAQ,QAAQ,MAAM;AAC/C,UAAM,SAAS,MAAM,sBAAK,0BAAL,WAAgB,QAAQ;AAC7C,UAAM,MAAM,MAAM;AAClB,QAAI,MAAM,IAAI;AACd,WAAO;AAAA,EACT,GAAG,QAAQ,QAAQ,CAAC,CAAC,CAAC;AACxB;AAUM;AAAA,oBAAe,eACnB,QACA,cACA,UAAU,OACY;AACtB,QAAM,WAAW,MAAM,sBAAK,8BAAL;AACvB,QAAM,WAAW,UAAU,cAAc,MAAM,GAAG,YAAY;AAE9D,MAAI,CAAC,YAAY,mBAAK,4BAA2B,CAAC,SAAS;AACzD,UAAM,sBAAK,kCAAL;AACN,WAAO,sBAAK,oCAAL,WAAqB,QAAQ,cAAc;AAAA,EACpD;AAGA,MAAI,CAAC,UAAU;AACb,WAAO;AAAA,EACT;AAEA,QAAM,gBAAgB;AAAA,IACpB,OAAO,KAAK,QAAQ;AAAA,IACpB;AAAA,EACF;AAEA,MAAI,CAAC,iBAAiB,mBAAK,4BAA2B,CAAC,SAAS;AAC9D,UAAM,sBAAK,kCAAL;AACN,WAAO,sBAAK,oCAAL,WAAqB,QAAQ,cAAc;AAAA,EACpD;AAGA,MAAI,CAAC,eAAe;AAClB,WAAO;AAAA,EACT;AAGA,sBAAoB,aAAa;AACjC,SAAO;AACT;AASM;AAAA,iBAAY,eAAC,QAAuD;AACxE,QAAM,WAAW,MAAM,sBAAK,8BAAL;AACvB,SAAO,UAAU,cAAc,MAAM,GAAG,YAAY;AACtD;AAUA;AAAA,qBAAgB,SAAC,UAAkB,WAAmB;AACpD,SAAO,mBAAK,aAAY,yBAAyB;AAEjD,QAAM,QAAQ,OAAO;AAAA,IACnB,UAAU;AAAA,IACV,WAAW,KAAK,MAAM,SAAS;AAAA,IAC/B,WAAW,mBAAK;AAAA,EAClB,CAAC;AAED,SAAO,OAAO,6BAA6B;AAC7C;AASM;AAAA,eAAU,eAAC,KAAa;AAC5B,QAAM,WAAW,MAAM,mBAAK,gBAAL,WAAoB;AAC3C,MAAI,CAAC,SAAS,IAAI;AAChB,UAAM,IAAI,MAAM,mBAAmB,GAAG,GAAG;AAAA,EAC3C;AAEA,SAAO,MAAM,SAAS,KAAK;AAC7B","sourcesContent":["import type { RestrictedControllerMessenger } from '@metamask/base-controller';\nimport { BaseController } from '@metamask/base-controller';\nimport type { SnapsRegistryDatabase } from '@metamask/snaps-registry';\nimport { verify } from '@metamask/snaps-registry';\nimport { getTargetVersion } from '@metamask/snaps-utils';\nimport type { Hex, SemVerRange, SemVerVersion } from '@metamask/utils';\nimport {\n  assert,\n  assertIsSemVerRange,\n  Duration,\n  inMilliseconds,\n  satisfiesVersionRange,\n} from '@metamask/utils';\n\nimport type {\n  SnapsRegistry,\n  SnapsRegistryInfo,\n  SnapsRegistryMetadata,\n  SnapsRegistryRequest,\n  SnapsRegistryResult,\n} from './registry';\nimport { SnapsRegistryStatus } from './registry';\n\n// TODO: Replace with a Codefi URL\nconst SNAP_REGISTRY_URL =\n  'https://cdn.jsdelivr.net/gh/MetaMask/snaps-registry@gh-pages/latest/registry.json';\n\nconst SNAP_REGISTRY_SIGNATURE_URL =\n  'https://cdn.jsdelivr.net/gh/MetaMask/snaps-registry@gh-pages/latest/signature.json';\n\ntype JsonSnapsRegistryUrl = {\n  registry: string;\n  signature: string;\n};\n\nexport type JsonSnapsRegistryArgs = {\n  messenger: SnapsRegistryMessenger;\n  state?: SnapsRegistryState;\n  fetchFunction?: typeof fetch;\n  url?: JsonSnapsRegistryUrl;\n  recentFetchThreshold?: number;\n  refetchOnAllowlistMiss?: boolean;\n  failOnUnavailableRegistry?: boolean;\n  publicKey?: Hex;\n};\n\nexport type GetResult = {\n  type: `${typeof controllerName}:get`;\n  handler: SnapsRegistry['get'];\n};\n\nexport type ResolveVersion = {\n  type: `${typeof controllerName}:resolveVersion`;\n  handler: SnapsRegistry['resolveVersion'];\n};\n\nexport type GetMetadata = {\n  type: `${typeof controllerName}:getMetadata`;\n  handler: SnapsRegistry['getMetadata'];\n};\n\nexport type Update = {\n  type: `${typeof controllerName}:update`;\n  handler: SnapsRegistry['update'];\n};\n\nexport type SnapsRegistryActions =\n  | GetResult\n  | GetMetadata\n  | Update\n  | ResolveVersion;\n\nexport type SnapsRegistryEvents = never;\n\nexport type SnapsRegistryMessenger = RestrictedControllerMessenger<\n  'SnapsRegistry',\n  SnapsRegistryActions,\n  SnapsRegistryEvents,\n  SnapsRegistryActions['type'],\n  SnapsRegistryEvents['type']\n>;\n\nexport type SnapsRegistryState = {\n  database: SnapsRegistryDatabase | null;\n  lastUpdated: number | null;\n};\n\nconst controllerName = 'SnapsRegistry';\n\nconst defaultState = {\n  database: null,\n  lastUpdated: null,\n};\n\nexport class JsonSnapsRegistry extends BaseController<\n  typeof controllerName,\n  SnapsRegistryState,\n  SnapsRegistryMessenger\n> {\n  #url: JsonSnapsRegistryUrl;\n\n  #publicKey?: Hex;\n\n  #fetchFunction: typeof fetch;\n\n  #recentFetchThreshold: number;\n\n  #refetchOnAllowlistMiss: boolean;\n\n  #failOnUnavailableRegistry: boolean;\n\n  #currentUpdate: Promise<void> | null;\n\n  constructor({\n    messenger,\n    state,\n    url = {\n      registry: SNAP_REGISTRY_URL,\n      signature: SNAP_REGISTRY_SIGNATURE_URL,\n    },\n    publicKey,\n    fetchFunction = globalThis.fetch.bind(globalThis),\n    recentFetchThreshold = inMilliseconds(5, Duration.Minute),\n    failOnUnavailableRegistry = true,\n    refetchOnAllowlistMiss = true,\n  }: JsonSnapsRegistryArgs) {\n    super({\n      messenger,\n      metadata: {\n        database: { persist: true, anonymous: false },\n        lastUpdated: { persist: true, anonymous: false },\n      },\n      name: controllerName,\n      state: {\n        ...defaultState,\n        ...state,\n      },\n    });\n    this.#url = url;\n    this.#publicKey = publicKey;\n    this.#fetchFunction = fetchFunction;\n    this.#recentFetchThreshold = recentFetchThreshold;\n    this.#refetchOnAllowlistMiss = refetchOnAllowlistMiss;\n    this.#failOnUnavailableRegistry = failOnUnavailableRegistry;\n    this.#currentUpdate = null;\n\n    this.messagingSystem.registerActionHandler(\n      'SnapsRegistry:get',\n      async (...args) => this.#get(...args),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'SnapsRegistry:getMetadata',\n      async (...args) => this.#getMetadata(...args),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'SnapsRegistry:resolveVersion',\n      async (...args) => this.#resolveVersion(...args),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      'SnapsRegistry:update',\n      async () => this.#triggerUpdate(),\n    );\n  }\n\n  #wasRecentlyFetched() {\n    return (\n      this.state.lastUpdated &&\n      Date.now() - this.state.lastUpdated < this.#recentFetchThreshold\n    );\n  }\n\n  /**\n   * Triggers an update of the registry database.\n   *\n   * If an existing update is in progress this function will await that update.\n   */\n  async #triggerUpdate() {\n    // If an update is ongoing, wait for that.\n    if (this.#currentUpdate) {\n      await this.#currentUpdate;\n      return;\n    }\n    // If no update exists, create promise and store globally.\n    if (this.#currentUpdate === null) {\n      this.#currentUpdate = this.#update();\n    }\n    await this.#currentUpdate;\n    this.#currentUpdate = null;\n  }\n\n  /**\n   * Updates the registry database if the registry hasn't been updated recently.\n   *\n   * NOTE: SHOULD NOT be called directly, instead `triggerUpdate` should be used.\n   */\n  async #update() {\n    // No-op if we recently fetched the registry.\n    if (this.#wasRecentlyFetched()) {\n      return;\n    }\n\n    try {\n      const database = await this.#safeFetch(this.#url.registry);\n\n      if (this.#publicKey) {\n        const signature = await this.#safeFetch(this.#url.signature);\n        this.#verifySignature(database, signature);\n      }\n\n      this.update((state) => {\n        state.database = JSON.parse(database);\n        state.lastUpdated = Date.now();\n      });\n    } catch {\n      // Ignore\n    }\n  }\n\n  async #getDatabase(): Promise<SnapsRegistryDatabase | null> {\n    if (this.state.database === null) {\n      await this.#triggerUpdate();\n    }\n\n    // If the database is still null and we require it, throw.\n    if (this.#failOnUnavailableRegistry && this.state.database === null) {\n      throw new Error('Snaps registry is unavailable, installation blocked.');\n    }\n    return this.state.database;\n  }\n\n  async #getSingle(\n    snapId: string,\n    snapInfo: SnapsRegistryInfo,\n    refetch = false,\n  ): Promise<SnapsRegistryResult> {\n    const database = await this.#getDatabase();\n\n    const blockedEntry = database?.blockedSnaps.find((blocked) => {\n      if ('id' in blocked) {\n        return (\n          blocked.id === snapId &&\n          satisfiesVersionRange(snapInfo.version, blocked.versionRange)\n        );\n      }\n\n      return blocked.checksum === snapInfo.checksum;\n    });\n\n    if (blockedEntry) {\n      return {\n        status: SnapsRegistryStatus.Blocked,\n        reason: blockedEntry.reason,\n      };\n    }\n\n    const verified = database?.verifiedSnaps[snapId];\n    const version = verified?.versions?.[snapInfo.version];\n    if (version && version.checksum === snapInfo.checksum) {\n      return { status: SnapsRegistryStatus.Verified };\n    }\n    // For now, if we have an allowlist miss, we can refetch once and try again.\n    if (this.#refetchOnAllowlistMiss && !refetch) {\n      await this.#triggerUpdate();\n      return this.#getSingle(snapId, snapInfo, true);\n    }\n    return { status: SnapsRegistryStatus.Unverified };\n  }\n\n  async #get(\n    snaps: SnapsRegistryRequest,\n  ): Promise<Record<string, SnapsRegistryResult>> {\n    return Object.entries(snaps).reduce<\n      Promise<Record<string, SnapsRegistryResult>>\n    >(async (previousPromise, [snapId, snapInfo]) => {\n      const result = await this.#getSingle(snapId, snapInfo);\n      const acc = await previousPromise;\n      acc[snapId] = result;\n      return acc;\n    }, Promise.resolve({}));\n  }\n\n  /**\n   * Find an allowlisted version within a specified version range. Otherwise return the version range itself.\n   *\n   * @param snapId - The ID of the snap we are trying to resolve a version for.\n   * @param versionRange - The version range.\n   * @param refetch - An optional flag used to determine if we are refetching the registry.\n   * @returns An allowlisted version within the specified version range if available otherwise returns the input version range.\n   */\n  async #resolveVersion(\n    snapId: string,\n    versionRange: SemVerRange,\n    refetch = false,\n  ): Promise<SemVerRange> {\n    const database = await this.#getDatabase();\n    const versions = database?.verifiedSnaps[snapId]?.versions ?? null;\n\n    if (!versions && this.#refetchOnAllowlistMiss && !refetch) {\n      await this.#triggerUpdate();\n      return this.#resolveVersion(snapId, versionRange, true);\n    }\n\n    // If we cannot narrow down the version range we return the unaltered version range.\n    if (!versions) {\n      return versionRange;\n    }\n\n    const targetVersion = getTargetVersion(\n      Object.keys(versions) as SemVerVersion[],\n      versionRange,\n    );\n\n    if (!targetVersion && this.#refetchOnAllowlistMiss && !refetch) {\n      await this.#triggerUpdate();\n      return this.#resolveVersion(snapId, versionRange, true);\n    }\n\n    // If we cannot narrow down the version range we return the unaltered version range.\n    if (!targetVersion) {\n      return versionRange;\n    }\n\n    // A semver version is technically also a valid semver range.\n    assertIsSemVerRange(targetVersion);\n    return targetVersion;\n  }\n\n  /**\n   * Get metadata for the given snap ID.\n   *\n   * @param snapId - The ID of the snap to get metadata for.\n   * @returns The metadata for the given snap ID, or `null` if the snap is not\n   * verified.\n   */\n  async #getMetadata(snapId: string): Promise<SnapsRegistryMetadata | null> {\n    const database = await this.#getDatabase();\n    return database?.verifiedSnaps[snapId]?.metadata ?? null;\n  }\n\n  /**\n   * Verify the signature of the registry.\n   *\n   * @param database - The registry database.\n   * @param signature - The signature of the registry.\n   * @throws If the signature is invalid.\n   * @private\n   */\n  #verifySignature(database: string, signature: string) {\n    assert(this.#publicKey, 'No public key provided.');\n\n    const valid = verify({\n      registry: database,\n      signature: JSON.parse(signature),\n      publicKey: this.#publicKey,\n    });\n\n    assert(valid, 'Invalid registry signature.');\n  }\n\n  /**\n   * Fetch the given URL, throwing if the response is not OK.\n   *\n   * @param url - The URL to fetch.\n   * @returns The response body.\n   * @private\n   */\n  async #safeFetch(url: string) {\n    const response = await this.#fetchFunction(url);\n    if (!response.ok) {\n      throw new Error(`Failed to fetch ${url}.`);\n    }\n\n    return await response.text();\n  }\n}\n"]}

package/dist/chunk-7PZECZV3.mjs

@@ -0,0 +1,38 @@
+import {
+  AbstractExecutionService
+} from "./chunk-6NYC5VNK.mjs";
+
+// src/services/iframe/IframeExecutionService.ts
+import { WindowPostMessageStream } from "@metamask/post-message-stream";
+import { createWindow } from "@metamask/snaps-utils";
+var IframeExecutionService = class extends AbstractExecutionService {
+  constructor({
+    iframeUrl,
+    messenger,
+    setupSnapProvider
+  }) {
+    super({
+      messenger,
+      setupSnapProvider
+    });
+    this.iframeUrl = iframeUrl;
+  }
+  terminateJob(jobWrapper) {
+    document.getElementById(jobWrapper.id)?.remove();
+  }
+  async initEnvStream(jobId) {
+    const iframeWindow = await createWindow(this.iframeUrl.toString(), jobId);
+    const stream = new WindowPostMessageStream({
+      name: "parent",
+      target: "child",
+      targetWindow: iframeWindow,
+      targetOrigin: "*"
+    });
+    return { worker: iframeWindow, stream };
+  }
+};
+
+export {
+  IframeExecutionService
+};
+//# sourceMappingURL=chunk-7PZECZV3.mjs.map

package/dist/chunk-7PZECZV3.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/services/iframe/IframeExecutionService.ts"],"sourcesContent":["import type { BasePostMessageStream } from '@metamask/post-message-stream';\nimport { WindowPostMessageStream } from '@metamask/post-message-stream';\nimport { createWindow } from '@metamask/snaps-utils';\n\nimport type { Job, ExecutionServiceArgs } from '../AbstractExecutionService';\nimport { AbstractExecutionService } from '../AbstractExecutionService';\n\ntype IframeExecutionEnvironmentServiceArgs = {\n  iframeUrl: URL;\n} & ExecutionServiceArgs;\n\nexport class IframeExecutionService extends AbstractExecutionService<Window> {\n  public iframeUrl: URL;\n\n  constructor({\n    iframeUrl,\n    messenger,\n    setupSnapProvider,\n  }: IframeExecutionEnvironmentServiceArgs) {\n    super({\n      messenger,\n      setupSnapProvider,\n    });\n    this.iframeUrl = iframeUrl;\n  }\n\n  protected terminateJob(jobWrapper: Job<Window>): void {\n    document.getElementById(jobWrapper.id)?.remove();\n  }\n\n  protected async initEnvStream(jobId: string): Promise<{\n    worker: Window;\n    stream: BasePostMessageStream;\n  }> {\n    const iframeWindow = await createWindow(this.iframeUrl.toString(), jobId);\n\n    const stream = new WindowPostMessageStream({\n      name: 'parent',\n      target: 'child',\n      targetWindow: iframeWindow,\n      targetOrigin: '*',\n    });\n\n    return { worker: iframeWindow, stream };\n  }\n}\n"],"mappings":";;;;;AACA,SAAS,+BAA+B;AACxC,SAAS,oBAAoB;AAStB,IAAM,yBAAN,cAAqC,yBAAiC;AAAA,EAG3E,YAAY;AAAA,IACV;AAAA,IACA;AAAA,IACA;AAAA,EACF,GAA0C;AACxC,UAAM;AAAA,MACJ;AAAA,MACA;AAAA,IACF,CAAC;AACD,SAAK,YAAY;AAAA,EACnB;AAAA,EAEU,aAAa,YAA+B;AACpD,aAAS,eAAe,WAAW,EAAE,GAAG,OAAO;AAAA,EACjD;AAAA,EAEA,MAAgB,cAAc,OAG3B;AACD,UAAM,eAAe,MAAM,aAAa,KAAK,UAAU,SAAS,GAAG,KAAK;AAExE,UAAM,SAAS,IAAI,wBAAwB;AAAA,MACzC,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,cAAc;AAAA,MACd,cAAc;AAAA,IAChB,CAAC;AAED,WAAO,EAAE,QAAQ,cAAc,OAAO;AAAA,EACxC;AACF;","names":[]}

package/dist/chunk-7WOG63YY.js

@@ -0,0 +1,40 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+var _chunkXWDEGRM5js = require('./chunk-XWDEGRM5.js');
+
+
+var _chunkLWBPKSU2js = require('./chunk-LWBPKSU2.js');
+
+
+var _chunkRDBT3ZJQjs = require('./chunk-RDBT3ZJQ.js');
+
+// src/snaps/location/location.ts
+var _utils = require('@metamask/utils');
+function detectSnapLocation(location, opts) {
+  const allowHttp = opts?.allowHttp ?? false;
+  const allowLocal = opts?.allowLocal ?? false;
+  const root = new URL(location);
+  switch (root.protocol) {
+    case "npm:":
+      return new (0, _chunkXWDEGRM5js.NpmLocation)(root, opts);
+    case "local:":
+      _utils.assert.call(void 0, allowLocal, new TypeError("Fetching local snaps is disabled."));
+      return new (0, _chunkLWBPKSU2js.LocalLocation)(root, opts);
+    case "http:":
+    case "https:":
+      _utils.assert.call(void 0, 
+        allowHttp,
+        new TypeError("Fetching snaps through http/https is disabled.")
+      );
+      return new (0, _chunkRDBT3ZJQjs.HttpLocation)(root, opts);
+    default:
+      throw new TypeError(
+        `Unrecognized "${root.protocol}" snap location protocol.`
+      );
+  }
+}
+
+
+
+exports.detectSnapLocation = detectSnapLocation;
+//# sourceMappingURL=chunk-7WOG63YY.js.map

package/dist/chunk-7WOG63YY.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/snaps/location/location.ts"],"names":[],"mappings":";;;;;;;;;;;AAEA,SAAS,cAAc;AAoDhB,SAAS,mBACd,UACA,MACc;AACd,QAAM,YAAY,MAAM,aAAa;AACrC,QAAM,aAAa,MAAM,cAAc;AACvC,QAAM,OAAO,IAAI,IAAI,QAAQ;AAC7B,UAAQ,KAAK,UAAU;AAAA,IACrB,KAAK;AACH,aAAO,IAAI,YAAY,MAAM,IAAI;AAAA,IACnC,KAAK;AACH,aAAO,YAAY,IAAI,UAAU,mCAAmC,CAAC;AACrE,aAAO,IAAI,cAAc,MAAM,IAAI;AAAA,IACrC,KAAK;AAAA,IACL,KAAK;AACH;AAAA,QACE;AAAA,QACA,IAAI,UAAU,gDAAgD;AAAA,MAChE;AACA,aAAO,IAAI,aAAa,MAAM,IAAI;AAAA,IACpC;AACE,YAAM,IAAI;AAAA,QACR,iBAAiB,KAAK,QAAQ;AAAA,MAChC;AAAA,EACJ;AACF","sourcesContent":["import type { SnapManifest, VirtualFile } from '@metamask/snaps-utils';\nimport type { SemVerRange } from '@metamask/utils';\nimport { assert } from '@metamask/utils';\n\nimport { HttpLocation } from './http';\nimport { LocalLocation } from './local';\nimport type { NpmOptions } from './npm';\nimport { NpmLocation } from './npm';\n\ndeclare module '@metamask/snaps-utils' {\n  interface DataMap {\n    /**\n     * Fully qualified, canonical path for the file in {@link https://github.com/MetaMask/SIPs/blob/main/SIPS/sip-8.md SIP-8 } URI format.\n     */\n    canonicalPath: string;\n  }\n}\n\nexport interface SnapLocation {\n  /**\n   * All files are relative to the manifest, except the manifest itself.\n   */\n  manifest(): Promise<VirtualFile<SnapManifest>>;\n  fetch(path: string): Promise<VirtualFile>;\n\n  readonly shouldAlwaysReload?: boolean;\n}\n\nexport type DetectSnapLocationOptions = NpmOptions & {\n  /**\n   * The function used to fetch data.\n   *\n   * @default globalThis.fetch\n   */\n  fetch?: typeof fetch;\n  /**\n   * @default false\n   */\n  allowHttp?: boolean;\n  /**\n   * @default false\n   */\n  allowLocal?: boolean;\n\n  resolveVersion?: (range: SemVerRange) => Promise<SemVerRange>;\n};\n\n/**\n * Auto-magically detects which SnapLocation object to create based on the provided {@link location}.\n *\n * @param location - A {@link https://github.com/MetaMask/SIPs/blob/main/SIPS/sip-8.md SIP-8} uri.\n * @param opts - NPM options and feature flags.\n * @returns SnapLocation based on url.\n */\nexport function detectSnapLocation(\n  location: string | URL,\n  opts?: DetectSnapLocationOptions,\n): SnapLocation {\n  const allowHttp = opts?.allowHttp ?? false;\n  const allowLocal = opts?.allowLocal ?? false;\n  const root = new URL(location);\n  switch (root.protocol) {\n    case 'npm:':\n      return new NpmLocation(root, opts);\n    case 'local:':\n      assert(allowLocal, new TypeError('Fetching local snaps is disabled.'));\n      return new LocalLocation(root, opts);\n    case 'http:':\n    case 'https:':\n      assert(\n        allowHttp,\n        new TypeError('Fetching snaps through http/https is disabled.'),\n      );\n      return new HttpLocation(root, opts);\n    default:\n      throw new TypeError(\n        `Unrecognized \"${root.protocol}\" snap location protocol.`,\n      );\n  }\n}\n"]}

package/dist/chunk-7Y6P5FRN.js

@@ -0,0 +1,60 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+
+
+var _chunkEXN2TFDJjs = require('./chunk-EXN2TFDJ.js');
+
+// src/services/ProxyPostMessageStream.ts
+var _postmessagestream = require('@metamask/post-message-stream');
+var _stream, _jobId, _onData, onData_fn;
+var ProxyPostMessageStream = class extends _postmessagestream.BasePostMessageStream {
+  /**
+   * Initializes a new `ProxyPostMessageStream` instance.
+   *
+   * @param args - The constructor arguments.
+   * @param args.stream - The underlying stream to use for communication.
+   * @param args.jobId - The ID of the job this stream is associated with.
+   */
+  constructor({ stream, jobId }) {
+    super();
+    /**
+     * Handle incoming data from the underlying stream. This checks that the job
+     * ID matches the expected job ID, and pushes the data to the stream if so.
+     *
+     * @param data - The data to handle.
+     */
+    _chunkEXN2TFDJjs.__privateAdd.call(void 0, this, _onData);
+    _chunkEXN2TFDJjs.__privateAdd.call(void 0, this, _stream, void 0);
+    _chunkEXN2TFDJjs.__privateAdd.call(void 0, this, _jobId, void 0);
+    _chunkEXN2TFDJjs.__privateSet.call(void 0, this, _stream, stream);
+    _chunkEXN2TFDJjs.__privateSet.call(void 0, this, _jobId, jobId);
+    _chunkEXN2TFDJjs.__privateGet.call(void 0, this, _stream).on("data", _chunkEXN2TFDJjs.__privateMethod.call(void 0, this, _onData, onData_fn).bind(this));
+  }
+  /**
+   * Write data to the underlying stream. This wraps the data in an object with
+   * the job ID.
+   *
+   * @param data - The data to write.
+   */
+  _postMessage(data) {
+    _chunkEXN2TFDJjs.__privateGet.call(void 0, this, _stream).write({
+      jobId: _chunkEXN2TFDJjs.__privateGet.call(void 0, this, _jobId),
+      data
+    });
+  }
+};
+_stream = new WeakMap();
+_jobId = new WeakMap();
+_onData = new WeakSet();
+onData_fn = function(data) {
+  if (data.jobId !== _chunkEXN2TFDJjs.__privateGet.call(void 0, this, _jobId)) {
+    return;
+  }
+  this.push(data.data);
+};
+
+
+
+exports.ProxyPostMessageStream = ProxyPostMessageStream;
+//# sourceMappingURL=chunk-7Y6P5FRN.js.map

package/dist/chunk-7Y6P5FRN.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/services/ProxyPostMessageStream.ts"],"names":[],"mappings":";;;;;;;;AAAA,SAAS,6BAA6B;AAAtC;AAmBO,IAAM,yBAAN,cAAqC,sBAAsB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAYhE,YAAY,EAAE,QAAQ,MAAM,GAA+B;AACzD,UAAM;AAcR;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA1BA,uBAAS,SAAT;AAEA,uBAAS,QAAT;AAYE,uBAAK,SAAU;AACf,uBAAK,QAAS;AAEd,uBAAK,SAAQ,GAAG,QAAQ,sBAAK,oBAAQ,KAAK,IAAI,CAAC;AAAA,EACjD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAsBA,aAAa,MAAwB;AACnC,uBAAK,SAAQ,MAAM;AAAA,MACjB,OAAO,mBAAK;AAAA,MACZ;AAAA,IACF,CAAC;AAAA,EACH;AACF;AA9CW;AAEA;AAwBT;AAAA,YAAO,SAAC,MAAwB;AAC9B,MAAI,KAAK,UAAU,mBAAK,SAAQ;AAC9B;AAAA,EACF;AAEA,OAAK,KAAK,KAAK,IAAI;AACrB","sourcesContent":["import { BasePostMessageStream } from '@metamask/post-message-stream';\nimport type { JsonRpcRequest } from '@metamask/utils';\n\nexport type ProxyPostMessageStreamArgs = {\n  stream: BasePostMessageStream;\n  jobId: string;\n  extra?: Record<string, unknown>;\n};\n\nexport type ProxyPostMessage = {\n  jobId: string;\n  data: JsonRpcRequest;\n  extra?: Record<string, unknown>;\n};\n\n/**\n * A post message stream that wraps messages in a job ID, before sending them\n * over the underlying stream.\n */\nexport class ProxyPostMessageStream extends BasePostMessageStream {\n  readonly #stream: BasePostMessageStream;\n\n  readonly #jobId: string;\n\n  /**\n   * Initializes a new `ProxyPostMessageStream` instance.\n   *\n   * @param args - The constructor arguments.\n   * @param args.stream - The underlying stream to use for communication.\n   * @param args.jobId - The ID of the job this stream is associated with.\n   */\n  constructor({ stream, jobId }: ProxyPostMessageStreamArgs) {\n    super();\n\n    this.#stream = stream;\n    this.#jobId = jobId;\n\n    this.#stream.on('data', this.#onData.bind(this));\n  }\n\n  /**\n   * Handle incoming data from the underlying stream. This checks that the job\n   * ID matches the expected job ID, and pushes the data to the stream if so.\n   *\n   * @param data - The data to handle.\n   */\n  #onData(data: ProxyPostMessage) {\n    if (data.jobId !== this.#jobId) {\n      return;\n    }\n\n    this.push(data.data);\n  }\n\n  /**\n   * Write data to the underlying stream. This wraps the data in an object with\n   * the job ID.\n   *\n   * @param data - The data to write.\n   */\n  _postMessage(data: ProxyPostMessage) {\n    this.#stream.write({\n      jobId: this.#jobId,\n      data,\n    });\n  }\n}\n"]}

package/dist/chunk-A6WJEA3C.js

@@ -0,0 +1 @@
+"use strict";//# sourceMappingURL=chunk-A6WJEA3C.js.map

package/dist/chunk-A6WJEA3C.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":""}

package/dist/chunk-AP7CJ6DA.js

@@ -0,0 +1,47 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});// src/snaps/RequestQueue.ts
+var RequestQueue = class {
+  constructor(maxQueueSize) {
+    this.maxQueueSize = maxQueueSize;
+    this.queueSizes = /* @__PURE__ */ new Map();
+  }
+  /**
+   * Increments the queue count for a particular origin.
+   *
+   * @param origin - A string identifying the origin.
+   */
+  increment(origin) {
+    const currentCount = this.queueSizes.get(origin) ?? 0;
+    if (currentCount >= this.maxQueueSize) {
+      throw new Error("Maximum number of requests reached. Try again later.");
+    }
+    this.queueSizes.set(origin, currentCount + 1);
+  }
+  /**
+   * Decrements the queue count for a particular origin.
+   *
+   * @param origin - A string identifying the origin.
+   */
+  decrement(origin) {
+    const currentCount = this.queueSizes.get(origin) ?? 0;
+    if (currentCount === 0) {
+      throw new Error(
+        `Cannot decrement, ${origin} does not have any outstanding requests.`
+      );
+    }
+    this.queueSizes.set(origin, currentCount - 1);
+  }
+  /**
+   * Gets the queue count for a particular origin.
+   *
+   * @param origin - A string identifying the origin.
+   * @returns The queue count for the origin.
+   */
+  get(origin) {
+    return this.queueSizes.get(origin) ?? 0;
+  }
+};
+
+
+
+exports.RequestQueue = RequestQueue;
+//# sourceMappingURL=chunk-AP7CJ6DA.js.map

package/dist/chunk-AP7CJ6DA.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/snaps/RequestQueue.ts"],"names":[],"mappings":";AAAO,IAAM,eAAN,MAAmB;AAAA,EAKxB,YAAY,cAAsB;AAChC,SAAK,eAAe;AACpB,SAAK,aAAa,oBAAI,IAAoB;AAAA,EAC5C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOO,UAAU,QAAgB;AAC/B,UAAM,eAAe,KAAK,WAAW,IAAI,MAAM,KAAK;AACpD,QAAI,gBAAgB,KAAK,cAAc;AACrC,YAAM,IAAI,MAAM,sDAAsD;AAAA,IACxE;AACA,SAAK,WAAW,IAAI,QAAQ,eAAe,CAAC;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOO,UAAU,QAAgB;AAC/B,UAAM,eAAe,KAAK,WAAW,IAAI,MAAM,KAAK;AACpD,QAAI,iBAAiB,GAAG;AACtB,YAAM,IAAI;AAAA,QACR,qBAAqB,MAAM;AAAA,MAC7B;AAAA,IACF;AACA,SAAK,WAAW,IAAI,QAAQ,eAAe,CAAC;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQO,IAAI,QAAwB;AACjC,WAAO,KAAK,WAAW,IAAI,MAAM,KAAK;AAAA,EACxC;AACF","sourcesContent":["export class RequestQueue {\n  public readonly maxQueueSize: number;\n\n  private readonly queueSizes: Map<string, number>;\n\n  constructor(maxQueueSize: number) {\n    this.maxQueueSize = maxQueueSize;\n    this.queueSizes = new Map<string, number>();\n  }\n\n  /**\n   * Increments the queue count for a particular origin.\n   *\n   * @param origin - A string identifying the origin.\n   */\n  public increment(origin: string) {\n    const currentCount = this.queueSizes.get(origin) ?? 0;\n    if (currentCount >= this.maxQueueSize) {\n      throw new Error('Maximum number of requests reached. Try again later.');\n    }\n    this.queueSizes.set(origin, currentCount + 1);\n  }\n\n  /**\n   * Decrements the queue count for a particular origin.\n   *\n   * @param origin - A string identifying the origin.\n   */\n  public decrement(origin: string) {\n    const currentCount = this.queueSizes.get(origin) ?? 0;\n    if (currentCount === 0) {\n      throw new Error(\n        `Cannot decrement, ${origin} does not have any outstanding requests.`,\n      );\n    }\n    this.queueSizes.set(origin, currentCount - 1);\n  }\n\n  /**\n   * Gets the queue count for a particular origin.\n   *\n   * @param origin - A string identifying the origin.\n   * @returns The queue count for the origin.\n   */\n  public get(origin: string): number {\n    return this.queueSizes.get(origin) ?? 0;\n  }\n}\n"]}

package/dist/chunk-B3UTLNYS.mjs

@@ -0,0 +1,48 @@
+import {
+  HttpLocation
+} from "./chunk-6GMWL4JR.mjs";
+import {
+  __privateAdd,
+  __privateGet,
+  __privateSet
+} from "./chunk-YRZVIDCF.mjs";
+
+// src/snaps/location/local.ts
+import { LocalSnapIdStruct, SnapIdPrefixes } from "@metamask/snaps-utils";
+import { assert, assertStruct } from "@metamask/utils";
+var _http;
+var LocalLocation = class {
+  constructor(url, opts = {}) {
+    __privateAdd(this, _http, void 0);
+    assertStruct(url.toString(), LocalSnapIdStruct, "Invalid Snap Id");
+    assert(
+      opts.fetchOptions === void 0,
+      "Currently adding fetch options to local: is unsupported."
+    );
+    __privateSet(this, _http, new HttpLocation(
+      new URL(url.toString().slice(SnapIdPrefixes.local.length)),
+      { ...opts, fetchOptions: { cache: "no-cache" } }
+    ));
+  }
+  async manifest() {
+    const vfile = await __privateGet(this, _http).manifest();
+    return convertCanonical(vfile);
+  }
+  async fetch(path) {
+    return convertCanonical(await __privateGet(this, _http).fetch(path));
+  }
+  get shouldAlwaysReload() {
+    return true;
+  }
+};
+_http = new WeakMap();
+function convertCanonical(vfile) {
+  assert(vfile.data.canonicalPath !== void 0);
+  vfile.data.canonicalPath = `local:${vfile.data.canonicalPath}`;
+  return vfile;
+}
+
+export {
+  LocalLocation
+};
+//# sourceMappingURL=chunk-B3UTLNYS.mjs.map

package/dist/chunk-B3UTLNYS.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/snaps/location/local.ts"],"sourcesContent":["import type { SnapManifest, VirtualFile } from '@metamask/snaps-utils';\nimport { LocalSnapIdStruct, SnapIdPrefixes } from '@metamask/snaps-utils';\nimport { assert, assertStruct } from '@metamask/utils';\n\nimport type { HttpOptions } from './http';\nimport { HttpLocation } from './http';\nimport type { SnapLocation } from './location';\n\nexport class LocalLocation implements SnapLocation {\n  readonly #http: HttpLocation;\n\n  constructor(url: URL, opts: HttpOptions = {}) {\n    assertStruct(url.toString(), LocalSnapIdStruct, 'Invalid Snap Id');\n    // TODO(ritave): Write deepMerge() which merges fetchOptions.\n    assert(\n      opts.fetchOptions === undefined,\n      'Currently adding fetch options to local: is unsupported.',\n    );\n\n    this.#http = new HttpLocation(\n      new URL(url.toString().slice(SnapIdPrefixes.local.length)),\n      { ...opts, fetchOptions: { cache: 'no-cache' } },\n    );\n  }\n\n  async manifest(): Promise<VirtualFile<SnapManifest>> {\n    const vfile = await this.#http.manifest();\n\n    return convertCanonical(vfile);\n  }\n\n  async fetch(path: string): Promise<VirtualFile> {\n    return convertCanonical(await this.#http.fetch(path));\n  }\n\n  get shouldAlwaysReload() {\n    return true;\n  }\n}\n\n/**\n * Converts vfiles with canonical `http:` paths into `local:` paths.\n *\n * @param vfile - The {@link VirtualFile} to convert.\n * @returns The same object with updated `.data.canonicalPath`.\n */\nfunction convertCanonical<Result>(\n  vfile: VirtualFile<Result>,\n): VirtualFile<Result> {\n  assert(vfile.data.canonicalPath !== undefined);\n  vfile.data.canonicalPath = `local:${vfile.data.canonicalPath}`;\n  return vfile;\n}\n"],"mappings":";;;;;;;;;;AACA,SAAS,mBAAmB,sBAAsB;AAClD,SAAS,QAAQ,oBAAoB;AAFrC;AAQO,IAAM,gBAAN,MAA4C;AAAA,EAGjD,YAAY,KAAU,OAAoB,CAAC,GAAG;AAF9C,uBAAS,OAAT;AAGE,iBAAa,IAAI,SAAS,GAAG,mBAAmB,iBAAiB;AAEjE;AAAA,MACE,KAAK,iBAAiB;AAAA,MACtB;AAAA,IACF;AAEA,uBAAK,OAAQ,IAAI;AAAA,MACf,IAAI,IAAI,IAAI,SAAS,EAAE,MAAM,eAAe,MAAM,MAAM,CAAC;AAAA,MACzD,EAAE,GAAG,MAAM,cAAc,EAAE,OAAO,WAAW,EAAE;AAAA,IACjD;AAAA,EACF;AAAA,EAEA,MAAM,WAA+C;AACnD,UAAM,QAAQ,MAAM,mBAAK,OAAM,SAAS;AAExC,WAAO,iBAAiB,KAAK;AAAA,EAC/B;AAAA,EAEA,MAAM,MAAM,MAAoC;AAC9C,WAAO,iBAAiB,MAAM,mBAAK,OAAM,MAAM,IAAI,CAAC;AAAA,EACtD;AAAA,EAEA,IAAI,qBAAqB;AACvB,WAAO;AAAA,EACT;AACF;AA7BW;AAqCX,SAAS,iBACP,OACqB;AACrB,SAAO,MAAM,KAAK,kBAAkB,MAAS;AAC7C,QAAM,KAAK,gBAAgB,SAAS,MAAM,KAAK,aAAa;AAC5D,SAAO;AACT;","names":[]}

package/dist/chunk-B67RDBZ4.mjs

@@ -0,0 +1,40 @@
+import {
+  NpmLocation
+} from "./chunk-WKQRCGUW.mjs";
+import {
+  LocalLocation
+} from "./chunk-B3UTLNYS.mjs";
+import {
+  HttpLocation
+} from "./chunk-6GMWL4JR.mjs";
+
+// src/snaps/location/location.ts
+import { assert } from "@metamask/utils";
+function detectSnapLocation(location, opts) {
+  const allowHttp = opts?.allowHttp ?? false;
+  const allowLocal = opts?.allowLocal ?? false;
+  const root = new URL(location);
+  switch (root.protocol) {
+    case "npm:":
+      return new NpmLocation(root, opts);
+    case "local:":
+      assert(allowLocal, new TypeError("Fetching local snaps is disabled."));
+      return new LocalLocation(root, opts);
+    case "http:":
+    case "https:":
+      assert(
+        allowHttp,
+        new TypeError("Fetching snaps through http/https is disabled.")
+      );
+      return new HttpLocation(root, opts);
+    default:
+      throw new TypeError(
+        `Unrecognized "${root.protocol}" snap location protocol.`
+      );
+  }
+}
+
+export {
+  detectSnapLocation
+};
+//# sourceMappingURL=chunk-B67RDBZ4.mjs.map

package/dist/chunk-B67RDBZ4.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/snaps/location/location.ts"],"sourcesContent":["import type { SnapManifest, VirtualFile } from '@metamask/snaps-utils';\nimport type { SemVerRange } from '@metamask/utils';\nimport { assert } from '@metamask/utils';\n\nimport { HttpLocation } from './http';\nimport { LocalLocation } from './local';\nimport type { NpmOptions } from './npm';\nimport { NpmLocation } from './npm';\n\ndeclare module '@metamask/snaps-utils' {\n  interface DataMap {\n    /**\n     * Fully qualified, canonical path for the file in {@link https://github.com/MetaMask/SIPs/blob/main/SIPS/sip-8.md SIP-8 } URI format.\n     */\n    canonicalPath: string;\n  }\n}\n\nexport interface SnapLocation {\n  /**\n   * All files are relative to the manifest, except the manifest itself.\n   */\n  manifest(): Promise<VirtualFile<SnapManifest>>;\n  fetch(path: string): Promise<VirtualFile>;\n\n  readonly shouldAlwaysReload?: boolean;\n}\n\nexport type DetectSnapLocationOptions = NpmOptions & {\n  /**\n   * The function used to fetch data.\n   *\n   * @default globalThis.fetch\n   */\n  fetch?: typeof fetch;\n  /**\n   * @default false\n   */\n  allowHttp?: boolean;\n  /**\n   * @default false\n   */\n  allowLocal?: boolean;\n\n  resolveVersion?: (range: SemVerRange) => Promise<SemVerRange>;\n};\n\n/**\n * Auto-magically detects which SnapLocation object to create based on the provided {@link location}.\n *\n * @param location - A {@link https://github.com/MetaMask/SIPs/blob/main/SIPS/sip-8.md SIP-8} uri.\n * @param opts - NPM options and feature flags.\n * @returns SnapLocation based on url.\n */\nexport function detectSnapLocation(\n  location: string | URL,\n  opts?: DetectSnapLocationOptions,\n): SnapLocation {\n  const allowHttp = opts?.allowHttp ?? false;\n  const allowLocal = opts?.allowLocal ?? false;\n  const root = new URL(location);\n  switch (root.protocol) {\n    case 'npm:':\n      return new NpmLocation(root, opts);\n    case 'local:':\n      assert(allowLocal, new TypeError('Fetching local snaps is disabled.'));\n      return new LocalLocation(root, opts);\n    case 'http:':\n    case 'https:':\n      assert(\n        allowHttp,\n        new TypeError('Fetching snaps through http/https is disabled.'),\n      );\n      return new HttpLocation(root, opts);\n    default:\n      throw new TypeError(\n        `Unrecognized \"${root.protocol}\" snap location protocol.`,\n      );\n  }\n}\n"],"mappings":";;;;;;;;;;;AAEA,SAAS,cAAc;AAoDhB,SAAS,mBACd,UACA,MACc;AACd,QAAM,YAAY,MAAM,aAAa;AACrC,QAAM,aAAa,MAAM,cAAc;AACvC,QAAM,OAAO,IAAI,IAAI,QAAQ;AAC7B,UAAQ,KAAK,UAAU;AAAA,IACrB,KAAK;AACH,aAAO,IAAI,YAAY,MAAM,IAAI;AAAA,IACnC,KAAK;AACH,aAAO,YAAY,IAAI,UAAU,mCAAmC,CAAC;AACrE,aAAO,IAAI,cAAc,MAAM,IAAI;AAAA,IACrC,KAAK;AAAA,IACL,KAAK;AACH;AAAA,QACE;AAAA,QACA,IAAI,UAAU,gDAAgD;AAAA,MAChE;AACA,aAAO,IAAI,aAAa,MAAM,IAAI;AAAA,IACpC;AACE,YAAM,IAAI;AAAA,QACR,iBAAiB,KAAK,QAAQ;AAAA,MAChC;AAAA,EACJ;AACF;","names":[]}

package/dist/chunk-B7R3EWM3.mjs

@@ -0,0 +1 @@
+//# sourceMappingURL=chunk-B7R3EWM3.mjs.map

package/dist/chunk-B7R3EWM3.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/chunk-BAEXVO3U.mjs

@@ -0,0 +1 @@
+//# sourceMappingURL=chunk-BAEXVO3U.mjs.map

package/dist/chunk-BAEXVO3U.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}