@metamask/snaps-controllers 9.1.0 → 9.3.0

package/CHANGELOG.md

@@ -6,6 +6,34 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [9.3.0]
+### Added
+- Add `snap_resolveInterface` RPC method to the `SnapInterfaceController` ([#2509](https://github.com/metamask/snaps/pull/2509))
+- Add `SnapInsightsController` ([#2555](https://github.com/metamask/snaps/pull/2555))
+
+### Changed
+- Bump `@metamask/base-controller` from `^6.0.0` to `^6.0.1` ([#2445](https://github.com/MetaMask/snaps/pull/2445))
+- Bump `@metamask/permission-controller` from `^10.0.0` to `^10.0.1` ([#2445](https://github.com/MetaMask/snaps/pull/2445))
+- Bump `@metamask/rpc-errors` from `^6.2.1` to `^6.3.1` ([#2445](https://github.com/MetaMask/snaps/pull/2445))
+- Bump `@metamask/snaps-registry` from `^3.1.0` to `^3.2.1` ([#2445](https://github.com/MetaMask/snaps/pull/2445))
+- Bump `@metamask/snaps-rpc-methods` to `^10.0.0` ([#2589](https://github.com/MetaMask/snaps/pull/2589))
+- Bump `@metamask/snaps-sdk` to `^6.1.0` ([#2589](https://github.com/MetaMask/snaps/pull/2589))
+- Bump `@metamask/snaps-utils` to `^7.8.0` ([#2589](https://github.com/MetaMask/snaps/pull/2589))
+- Bump `@metamask/utils` from `^8.3.0` to `^9.1.0` ([#2445](https://github.com/MetaMask/snaps/pull/2445))
+- Bump peer dependency `@metamask/snaps-execution-environments` to `^6.6.1` ([#2589](https://github.com/MetaMask/snaps/pull/2589))
+
+### Fixed
+- Handle initial connections for preinstalled Snaps ([#2591](https://github.com/MetaMask/snaps/pull/2591))
+- Account for revoked origins when calculating the difference in `initialConnections` ([#2535](https://github.com/metamask/snaps/pull/2535))
+  - Fixes issue of revoking permissions that are already revoked.
+  - Enables revoked connections to be highlighted as being re-added in the UI.
+- Enforce stricter size limits for source code, static auxiliary files, and `snap_getFile` return values ([#2527](https://github.com/metamask/snaps/pull/2527))
+  - Prevent communication failures by enabling compliance with JSON-RPC extension message requirements.
+
+## [9.2.0]
+### Added
+- Add feature flag to disable Snap installation ([#2521](https://github.com/MetaMask/snaps/pull/2521))
+
 ## [9.1.0]
 ### Added
 - Add `Checkbox` component ([#2501](https://github.com/MetaMask/snaps/pull/2501))
@@ -303,7 +331,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   - The version of the package no longer needs to match the version of all other
     MetaMask Snaps packages.
 
-[Unreleased]: https://github.com/MetaMask/snaps/compare/@metamask/snaps-controllers@9.1.0...HEAD
+[Unreleased]: https://github.com/MetaMask/snaps/compare/@metamask/snaps-controllers@9.3.0...HEAD
+[9.3.0]: https://github.com/MetaMask/snaps/compare/@metamask/snaps-controllers@9.2.0...@metamask/snaps-controllers@9.3.0
+[9.2.0]: https://github.com/MetaMask/snaps/compare/@metamask/snaps-controllers@9.1.0...@metamask/snaps-controllers@9.2.0
 [9.1.0]: https://github.com/MetaMask/snaps/compare/@metamask/snaps-controllers@9.0.0...@metamask/snaps-controllers@9.1.0
 [9.0.0]: https://github.com/MetaMask/snaps/compare/@metamask/snaps-controllers@8.4.0...@metamask/snaps-controllers@9.0.0
 [8.4.0]: https://github.com/MetaMask/snaps/compare/@metamask/snaps-controllers@8.3.1...@metamask/snaps-controllers@8.4.0

package/dist/{chunk-WP3DAIFM.mjs → chunk-23PVLQFV.mjs}

@@ -15,7 +15,7 @@ import { assert } from "@metamask/utils";
 import { nanoid } from "nanoid";
 var MAX_UI_CONTENT_SIZE = 1e7;
 var controllerName = "SnapInterfaceController";
-var _registerMessageHandlers, registerMessageHandlers_fn, _validateArgs, validateArgs_fn, _triggerPhishingListUpdate, triggerPhishingListUpdate_fn, _checkPhishingList, checkPhishingList_fn, _validateContent, validateContent_fn;
+var _registerMessageHandlers, registerMessageHandlers_fn, _validateArgs, validateArgs_fn, _validateApproval, validateApproval_fn, _triggerPhishingListUpdate, triggerPhishingListUpdate_fn, _checkPhishingList, checkPhishingList_fn, _hasApprovalRequest, hasApprovalRequest_fn, _acceptApprovalRequest, acceptApprovalRequest_fn, _validateContent, validateContent_fn;
 var SnapInterfaceController = class extends BaseController {
   constructor({ messenger, state }) {
     super({
@@ -38,6 +38,12 @@ var SnapInterfaceController = class extends BaseController {
      * @param id - The interface id.
      */
     __privateAdd(this, _validateArgs);
+    /**
+     * Utility function to validate that the approval request exists.
+     *
+     * @param id - The interface id.
+     */
+    __privateAdd(this, _validateApproval);
     /**
      * Trigger a Phishing list update if needed.
      */
@@ -49,6 +55,21 @@ var SnapInterfaceController = class extends BaseController {
      * @returns True if the origin is on the phishing list, otherwise false.
      */
     __privateAdd(this, _checkPhishingList);
+    /**
+     * Check if an approval request exists for a given interface by looking up
+     * if the ApprovalController has a request with the given interface ID.
+     *
+     * @param id - The interface id.
+     * @returns True if an approval request exists, otherwise false.
+     */
+    __privateAdd(this, _hasApprovalRequest);
+    /**
+     * Accept an approval request for a given interface.
+     *
+     * @param id - The interface id.
+     * @param value - The value to resolve the promise with.
+     */
+    __privateAdd(this, _acceptApprovalRequest);
     /**
      * Utility function to validate the components of an interface.
      * Throws if something is invalid.
@@ -132,6 +153,20 @@ var SnapInterfaceController = class extends BaseController {
       draftState.interfaces[id].state = state;
     });
   }
+  /**
+   * Resolve the promise of a given interface approval request.
+   * The approval needs to have the same ID as the interface.
+   *
+   * @param snapId - The snap id.
+   * @param id - The interface id.
+   * @param value - The value to resolve the promise with.
+   */
+  async resolveInterface(snapId, id, value) {
+    __privateMethod(this, _validateArgs, validateArgs_fn).call(this, snapId, id);
+    __privateMethod(this, _validateApproval, validateApproval_fn).call(this, id);
+    await __privateMethod(this, _acceptApprovalRequest, acceptApprovalRequest_fn).call(this, id, value);
+    this.deleteInterface(id);
+  }
 };
 _registerMessageHandlers = new WeakSet();
 registerMessageHandlers_fn = function() {
@@ -155,6 +190,10 @@ registerMessageHandlers_fn = function() {
     `${controllerName}:updateInterfaceState`,
     this.updateInterfaceState.bind(this)
   );
+  this.messagingSystem.registerActionHandler(
+    `${controllerName}:resolveInterface`,
+    this.resolveInterface.bind(this)
+  );
 };
 _validateArgs = new WeakSet();
 validateArgs_fn = function(snapId, id) {
@@ -168,6 +207,13 @@ validateArgs_fn = function(snapId, id) {
     `Interface not created by ${snapId}.`
   );
 };
+_validateApproval = new WeakSet();
+validateApproval_fn = function(id) {
+  assert(
+    __privateMethod(this, _hasApprovalRequest, hasApprovalRequest_fn).call(this, id),
+    `Approval request with id '${id}' not found.`
+  );
+};
 _triggerPhishingListUpdate = new WeakSet();
 triggerPhishingListUpdate_fn = async function() {
   await this.messagingSystem.call("PhishingController:maybeUpdateState");
@@ -176,6 +222,20 @@ _checkPhishingList = new WeakSet();
 checkPhishingList_fn = function(origin) {
   return this.messagingSystem.call("PhishingController:testOrigin", origin).result;
 };
+_hasApprovalRequest = new WeakSet();
+hasApprovalRequest_fn = function(id) {
+  return this.messagingSystem.call("ApprovalController:hasRequest", {
+    id
+  });
+};
+_acceptApprovalRequest = new WeakSet();
+acceptApprovalRequest_fn = async function(id, value) {
+  await this.messagingSystem.call(
+    "ApprovalController:acceptRequest",
+    id,
+    value
+  );
+};
 _validateContent = new WeakSet();
 validateContent_fn = async function(element) {
   const size = getJsonSizeUnsafe(element);
@@ -190,4 +250,4 @@ validateContent_fn = async function(element) {
 export {
   SnapInterfaceController
 };
-//# sourceMappingURL=chunk-WP3DAIFM.mjs.map
+//# sourceMappingURL=chunk-23PVLQFV.mjs.map

package/dist/chunk-23PVLQFV.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/interface/SnapInterfaceController.ts"],"sourcesContent":["import type {\n  AcceptRequest,\n  HasApprovalRequest,\n} from '@metamask/approval-controller';\nimport type { RestrictedControllerMessenger } from '@metamask/base-controller';\nimport { BaseController } from '@metamask/base-controller';\nimport type {\n  MaybeUpdateState,\n  TestOrigin,\n} from '@metamask/phishing-controller';\nimport type {\n  InterfaceState,\n  SnapId,\n  ComponentOrElement,\n  InterfaceContext,\n} from '@metamask/snaps-sdk';\nimport type { JSXElement } from '@metamask/snaps-sdk/jsx';\nimport { getJsonSizeUnsafe, validateJsxLinks } from '@metamask/snaps-utils';\nimport type { Json } from '@metamask/utils';\nimport { assert } from '@metamask/utils';\nimport { nanoid } from 'nanoid';\n\nimport {\n  constructState,\n  getJsxInterface,\n  validateInterfaceContext,\n} from './utils';\n\nconst MAX_UI_CONTENT_SIZE = 10_000_000; // 10 mb\n\nconst controllerName = 'SnapInterfaceController';\n\nexport type CreateInterface = {\n  type: `${typeof controllerName}:createInterface`;\n  handler: SnapInterfaceController['createInterface'];\n};\n\nexport type GetInterface = {\n  type: `${typeof controllerName}:getInterface`;\n  handler: SnapInterfaceController['getInterface'];\n};\n\nexport type UpdateInterface = {\n  type: `${typeof controllerName}:updateInterface`;\n  handler: SnapInterfaceController['updateInterface'];\n};\n\nexport type DeleteInterface = {\n  type: `${typeof controllerName}:deleteInterface`;\n  handler: SnapInterfaceController['deleteInterface'];\n};\n\nexport type UpdateInterfaceState = {\n  type: `${typeof controllerName}:updateInterfaceState`;\n  handler: SnapInterfaceController['updateInterfaceState'];\n};\n\nexport type ResolveInterface = {\n  type: `${typeof controllerName}:resolveInterface`;\n  handler: SnapInterfaceController['resolveInterface'];\n};\n\nexport type SnapInterfaceControllerAllowedActions =\n  | TestOrigin\n  | MaybeUpdateState\n  | HasApprovalRequest\n  | AcceptRequest;\n\nexport type SnapInterfaceControllerActions =\n  | CreateInterface\n  | GetInterface\n  | UpdateInterface\n  | DeleteInterface\n  | UpdateInterfaceState\n  | ResolveInterface;\n\nexport type SnapInterfaceControllerMessenger = RestrictedControllerMessenger<\n  typeof controllerName,\n  SnapInterfaceControllerActions | SnapInterfaceControllerAllowedActions,\n  never,\n  SnapInterfaceControllerAllowedActions['type'],\n  never\n>;\n\nexport type StoredInterface = {\n  snapId: SnapId;\n  content: JSXElement;\n  state: InterfaceState;\n  context: InterfaceContext | null;\n};\n\nexport type SnapInterfaceControllerState = {\n  interfaces: Record<string, StoredInterface>;\n};\n\nexport type SnapInterfaceControllerArgs = {\n  messenger: SnapInterfaceControllerMessenger;\n  state?: SnapInterfaceControllerState;\n};\n\n/**\n * Use this controller to manage snaps UI interfaces using RPC method hooks.\n */\nexport class SnapInterfaceController extends BaseController<\n  typeof controllerName,\n  SnapInterfaceControllerState,\n  SnapInterfaceControllerMessenger\n> {\n  constructor({ messenger, state }: SnapInterfaceControllerArgs) {\n    super({\n      messenger,\n      metadata: {\n        interfaces: { persist: false, anonymous: false },\n      },\n      name: controllerName,\n      state: { interfaces: {}, ...state },\n    });\n\n    this.#registerMessageHandlers();\n  }\n\n  /**\n   * Constructor helper for registering this controller's messaging system\n   * actions.\n   */\n  #registerMessageHandlers() {\n    this.messagingSystem.registerActionHandler(\n      `${controllerName}:createInterface`,\n      this.createInterface.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      `${controllerName}:getInterface`,\n      this.getInterface.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      `${controllerName}:updateInterface`,\n      this.updateInterface.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      `${controllerName}:deleteInterface`,\n      this.deleteInterface.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      `${controllerName}:updateInterfaceState`,\n      this.updateInterfaceState.bind(this),\n    );\n\n    this.messagingSystem.registerActionHandler(\n      `${controllerName}:resolveInterface`,\n      this.resolveInterface.bind(this),\n    );\n  }\n\n  /**\n   * Create an interface in the controller state with the associated data.\n   *\n   * @param snapId - The snap id that created the interface.\n   * @param content - The interface content.\n   * @param context - An optional interface context object.\n   * @returns The newly interface id.\n   */\n  async createInterface(\n    snapId: SnapId,\n    content: ComponentOrElement,\n    context?: InterfaceContext,\n  ) {\n    const element = getJsxInterface(content);\n    await this.#validateContent(element);\n    validateInterfaceContext(context);\n\n    const id = nanoid();\n    const componentState = constructState({}, element);\n\n    this.update((draftState) => {\n      // @ts-expect-error - TS2589: Type instantiation is excessively deep and\n      // possibly infinite.\n      draftState.interfaces[id] = {\n        snapId,\n        content: element,\n        state: componentState,\n        context: context ?? null,\n      };\n    });\n\n    return id;\n  }\n\n  /**\n   * Get the data of a given interface id.\n   *\n   * @param snapId - The snap id requesting the interface data.\n   * @param id - The interface id.\n   * @returns The interface state.\n   */\n  getInterface(snapId: SnapId, id: string) {\n    this.#validateArgs(snapId, id);\n\n    return this.state.interfaces[id];\n  }\n\n  /**\n   * Update the interface with the given content.\n   *\n   * @param snapId - The snap id requesting the update.\n   * @param id - The interface id.\n   * @param content - The new content.\n   */\n  async updateInterface(\n    snapId: SnapId,\n    id: string,\n    content: ComponentOrElement,\n  ) {\n    this.#validateArgs(snapId, id);\n    const element = getJsxInterface(content);\n    await this.#validateContent(element);\n\n    const oldState = this.state.interfaces[id].state;\n    const newState = constructState(oldState, element);\n\n    this.update((draftState) => {\n      draftState.interfaces[id].state = newState;\n      draftState.interfaces[id].content = element;\n    });\n  }\n\n  /**\n   * Delete an interface from state.\n   *\n   * @param id - The interface id.\n   */\n  deleteInterface(id: string) {\n    this.update((draftState) => {\n      delete draftState.interfaces[id];\n    });\n  }\n\n  /**\n   * Update the interface state.\n   *\n   * @param id - The interface id.\n   * @param state - The new state.\n   */\n  updateInterfaceState(id: string, state: InterfaceState) {\n    this.update((draftState) => {\n      draftState.interfaces[id].state = state;\n    });\n  }\n\n  /**\n   * Resolve the promise of a given interface approval request.\n   * The approval needs to have the same ID as the interface.\n   *\n   * @param snapId - The snap id.\n   * @param id - The interface id.\n   * @param value - The value to resolve the promise with.\n   */\n  async resolveInterface(snapId: SnapId, id: string, value: Json) {\n    this.#validateArgs(snapId, id);\n    this.#validateApproval(id);\n\n    await this.#acceptApprovalRequest(id, value);\n\n    this.deleteInterface(id);\n  }\n\n  /**\n   * Utility function to validate the args passed to the other methods.\n   *\n   * @param snapId - The snap id.\n   * @param id - The interface id.\n   */\n  #validateArgs(snapId: SnapId, id: string) {\n    const existingInterface = this.state.interfaces[id];\n\n    assert(\n      existingInterface !== undefined,\n      `Interface with id '${id}' not found.`,\n    );\n    assert(\n      existingInterface.snapId === snapId,\n      `Interface not created by ${snapId}.`,\n    );\n  }\n\n  /**\n   * Utility function to validate that the approval request exists.\n   *\n   * @param id - The interface id.\n   */\n  #validateApproval(id: string) {\n    assert(\n      this.#hasApprovalRequest(id),\n      `Approval request with id '${id}' not found.`,\n    );\n  }\n\n  /**\n   * Trigger a Phishing list update if needed.\n   */\n  async #triggerPhishingListUpdate() {\n    await this.messagingSystem.call('PhishingController:maybeUpdateState');\n  }\n\n  /**\n   * Check an origin against the phishing list.\n   *\n   * @param origin - The origin to check.\n   * @returns True if the origin is on the phishing list, otherwise false.\n   */\n  #checkPhishingList(origin: string) {\n    return this.messagingSystem.call('PhishingController:testOrigin', origin)\n      .result;\n  }\n\n  /**\n   * Check if an approval request exists for a given interface by looking up\n   * if the ApprovalController has a request with the given interface ID.\n   *\n   * @param id - The interface id.\n   * @returns True if an approval request exists, otherwise false.\n   */\n  #hasApprovalRequest(id: string) {\n    return this.messagingSystem.call('ApprovalController:hasRequest', {\n      id,\n    });\n  }\n\n  /**\n   * Accept an approval request for a given interface.\n   *\n   * @param id - The interface id.\n   * @param value - The value to resolve the promise with.\n   */\n  async #acceptApprovalRequest(id: string, value: Json) {\n    await this.messagingSystem.call(\n      'ApprovalController:acceptRequest',\n      id,\n      value,\n    );\n  }\n\n  /**\n   * Utility function to validate the components of an interface.\n   * Throws if something is invalid.\n   *\n   * @param element - The JSX element to verify.\n   */\n  async #validateContent(element: JSXElement) {\n    // We assume the validity of this JSON to be validated by the caller.\n    // E.g., in the RPC method implementation.\n    const size = getJsonSizeUnsafe(element);\n    assert(\n      size <= MAX_UI_CONTENT_SIZE,\n      `A Snap UI may not be larger than ${MAX_UI_CONTENT_SIZE / 1000000} MB.`,\n    );\n\n    await this.#triggerPhishingListUpdate();\n    validateJsxLinks(element, this.#checkPhishingList.bind(this));\n  }\n}\n"],"mappings":";;;;;;;;;;;AAKA,SAAS,sBAAsB;AAY/B,SAAS,mBAAmB,wBAAwB;AAEpD,SAAS,cAAc;AACvB,SAAS,cAAc;AAQvB,IAAM,sBAAsB;AAE5B,IAAM,iBAAiB;AA9BvB;AAuGO,IAAM,0BAAN,cAAsC,eAI3C;AAAA,EACA,YAAY,EAAE,WAAW,MAAM,GAAgC;AAC7D,UAAM;AAAA,MACJ;AAAA,MACA,UAAU;AAAA,QACR,YAAY,EAAE,SAAS,OAAO,WAAW,MAAM;AAAA,MACjD;AAAA,MACA,MAAM;AAAA,MACN,OAAO,EAAE,YAAY,CAAC,GAAG,GAAG,MAAM;AAAA,IACpC,CAAC;AASH;AAAA;AAAA;AAAA;AAAA;AAsJA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAkBA;AAAA;AAAA;AAAA;AAAA;AAAA;AAUA;AAAA;AAAA;AAAA,uBAAM;AAUN;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAYA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAYA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,uBAAM;AAcN;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,uBAAM;AAzOJ,0BAAK,sDAAL;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EA8CA,MAAM,gBACJ,QACA,SACA,SACA;AACA,UAAM,UAAU,gBAAgB,OAAO;AACvC,UAAM,sBAAK,sCAAL,WAAsB;AAC5B,6BAAyB,OAAO;AAEhC,UAAM,KAAK,OAAO;AAClB,UAAM,iBAAiB,eAAe,CAAC,GAAG,OAAO;AAEjD,SAAK,OAAO,CAAC,eAAe;AAG1B,iBAAW,WAAW,EAAE,IAAI;AAAA,QAC1B;AAAA,QACA,SAAS;AAAA,QACT,OAAO;AAAA,QACP,SAAS,WAAW;AAAA,MACtB;AAAA,IACF,CAAC;AAED,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAa,QAAgB,IAAY;AACvC,0BAAK,gCAAL,WAAmB,QAAQ;AAE3B,WAAO,KAAK,MAAM,WAAW,EAAE;AAAA,EACjC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAM,gBACJ,QACA,IACA,SACA;AACA,0BAAK,gCAAL,WAAmB,QAAQ;AAC3B,UAAM,UAAU,gBAAgB,OAAO;AACvC,UAAM,sBAAK,sCAAL,WAAsB;AAE5B,UAAM,WAAW,KAAK,MAAM,WAAW,EAAE,EAAE;AAC3C,UAAM,WAAW,eAAe,UAAU,OAAO;AAEjD,SAAK,OAAO,CAAC,eAAe;AAC1B,iBAAW,WAAW,EAAE,EAAE,QAAQ;AAClC,iBAAW,WAAW,EAAE,EAAE,UAAU;AAAA,IACtC,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,gBAAgB,IAAY;AAC1B,SAAK,OAAO,CAAC,eAAe;AAC1B,aAAO,WAAW,WAAW,EAAE;AAAA,IACjC,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,qBAAqB,IAAY,OAAuB;AACtD,SAAK,OAAO,CAAC,eAAe;AAC1B,iBAAW,WAAW,EAAE,EAAE,QAAQ;AAAA,IACpC,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,iBAAiB,QAAgB,IAAY,OAAa;AAC9D,0BAAK,gCAAL,WAAmB,QAAQ;AAC3B,0BAAK,wCAAL,WAAuB;AAEvB,UAAM,sBAAK,kDAAL,WAA4B,IAAI;AAEtC,SAAK,gBAAgB,EAAE;AAAA,EACzB;AAgGF;AA9OE;AAAA,6BAAwB,WAAG;AACzB,OAAK,gBAAgB;AAAA,IACnB,GAAG,cAAc;AAAA,IACjB,KAAK,gBAAgB,KAAK,IAAI;AAAA,EAChC;AAEA,OAAK,gBAAgB;AAAA,IACnB,GAAG,cAAc;AAAA,IACjB,KAAK,aAAa,KAAK,IAAI;AAAA,EAC7B;AAEA,OAAK,gBAAgB;AAAA,IACnB,GAAG,cAAc;AAAA,IACjB,KAAK,gBAAgB,KAAK,IAAI;AAAA,EAChC;AAEA,OAAK,gBAAgB;AAAA,IACnB,GAAG,cAAc;AAAA,IACjB,KAAK,gBAAgB,KAAK,IAAI;AAAA,EAChC;AAEA,OAAK,gBAAgB;AAAA,IACnB,GAAG,cAAc;AAAA,IACjB,KAAK,qBAAqB,KAAK,IAAI;AAAA,EACrC;AAEA,OAAK,gBAAgB;AAAA,IACnB,GAAG,cAAc;AAAA,IACjB,KAAK,iBAAiB,KAAK,IAAI;AAAA,EACjC;AACF;AAwHA;AAAA,kBAAa,SAAC,QAAgB,IAAY;AACxC,QAAM,oBAAoB,KAAK,MAAM,WAAW,EAAE;AAElD;AAAA,IACE,sBAAsB;AAAA,IACtB,sBAAsB,EAAE;AAAA,EAC1B;AACA;AAAA,IACE,kBAAkB,WAAW;AAAA,IAC7B,4BAA4B,MAAM;AAAA,EACpC;AACF;AAOA;AAAA,sBAAiB,SAAC,IAAY;AAC5B;AAAA,IACE,sBAAK,4CAAL,WAAyB;AAAA,IACzB,6BAA6B,EAAE;AAAA,EACjC;AACF;AAKM;AAAA,+BAA0B,iBAAG;AACjC,QAAM,KAAK,gBAAgB,KAAK,qCAAqC;AACvE;AAQA;AAAA,uBAAkB,SAAC,QAAgB;AACjC,SAAO,KAAK,gBAAgB,KAAK,iCAAiC,MAAM,EACrE;AACL;AASA;AAAA,wBAAmB,SAAC,IAAY;AAC9B,SAAO,KAAK,gBAAgB,KAAK,iCAAiC;AAAA,IAChE;AAAA,EACF,CAAC;AACH;AAQM;AAAA,2BAAsB,eAAC,IAAY,OAAa;AACpD,QAAM,KAAK,gBAAgB;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAQM;AAAA,qBAAgB,eAAC,SAAqB;AAG1C,QAAM,OAAO,kBAAkB,OAAO;AACtC;AAAA,IACE,QAAQ;AAAA,IACR,oCAAoC,sBAAsB,GAAO;AAAA,EACnE;AAEA,QAAM,sBAAK,0DAAL;AACN,mBAAiB,SAAS,sBAAK,0CAAmB,KAAK,IAAI,CAAC;AAC9D;","names":[]}

package/dist/chunk-272IFIK7.mjs

@@ -0,0 +1 @@
+//# sourceMappingURL=chunk-272IFIK7.mjs.map

package/dist/chunk-272IFIK7.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/{chunk-42ODFZSH.mjs → chunk-2AEM5R2M.mjs}

@@ -1,12 +1,12 @@
 import {
   LocalLocation
 } from "./chunk-B3UTLNYS.mjs";
-import {
-  NpmLocation
-} from "./chunk-WKQRCGUW.mjs";
 import {
   HttpLocation
 } from "./chunk-6GMWL4JR.mjs";
+import {
+  NpmLocation
+} from "./chunk-WKQRCGUW.mjs";
 
 // src/snaps/location/location.ts
 import { assert } from "@metamask/utils";
@@ -37,4 +37,4 @@ function detectSnapLocation(location, opts) {
 export {
   detectSnapLocation
 };
-//# sourceMappingURL=chunk-42ODFZSH.mjs.map
+//# sourceMappingURL=chunk-2AEM5R2M.mjs.map

package/dist/{chunk-RVWBSSZM.mjs → chunk-2MH7QYBP.mjs}

@@ -1,6 +1,6 @@
 import {
   detectSnapLocation
-} from "./chunk-42ODFZSH.mjs";
+} from "./chunk-2AEM5R2M.mjs";
 import {
   RequestQueue
 } from "./chunk-NC5PBDKD.mjs";
@@ -16,13 +16,12 @@ import {
   log
 } from "./chunk-4HVWEABQ.mjs";
 import {
-  calculateConnectionsChange,
   fetchSnap,
   hasTimedOut,
   permissionsDiff,
   setDiff,
   withTimeout
-} from "./chunk-567BFPSL.mjs";
+} from "./chunk-KRI4OKC3.mjs";
 import {
   Timer
 } from "./chunk-XO7KDFBY.mjs";
@@ -71,7 +70,8 @@ import {
   NpmSnapFileNames,
   OnNameLookupResponseStruct,
   getLocalizedSnapManifest,
-  parseJson
+  parseJson,
+  MAX_FILE_SIZE
 } from "@metamask/snaps-utils";
 import {
   assert,
@@ -119,7 +119,7 @@ function truncateSnap(snap) {
   return truncatedSnap;
 }
 var name = "SnapController";
-var _closeAllConnections, _dynamicPermissions, _environmentEndowmentPermissions, _excludedPermissions, _featureFlags, _fetchFunction, _idleTimeCheckInterval, _maxIdleTime, _encryptor, _getMnemonic, _getFeatureFlags, _detectSnapLocation, _snapsRuntimeData, _rollbackSnapshots, _timeoutForLastRequestStatus, _statusMachine, _preinstalledSnaps, _initializeStateMachine, initializeStateMachine_fn, _registerMessageHandlers, registerMessageHandlers_fn, _handlePreinstalledSnaps, handlePreinstalledSnaps_fn, _pollForLastRequestStatus, pollForLastRequestStatus_fn, _blockSnap, blockSnap_fn, _unblockSnap, unblockSnap_fn, _assertIsInstallAllowed, assertIsInstallAllowed_fn, _assertCanUsePlatform, assertCanUsePlatform_fn, _stopSnapsLastRequestPastMax, stopSnapsLastRequestPastMax_fn, _transition, transition_fn, _terminateSnap, terminateSnap_fn, _getSnapEncryptionKey, getSnapEncryptionKey_fn, _decryptSnapState, decryptSnapState_fn, _encryptSnapState, encryptSnapState_fn, _handleInitialConnections, handleInitialConnections_fn, _addSnapToSubject, addSnapToSubject_fn, _removeSnapFromSubjects, removeSnapFromSubjects_fn, _revokeAllSnapPermissions, revokeAllSnapPermissions_fn, _createApproval, createApproval_fn, _updateApproval, updateApproval_fn, _resolveAllowlistVersion, resolveAllowlistVersion_fn, _add, add_fn, _startSnap, startSnap_fn, _getEndowments, getEndowments_fn, _set, set_fn, _validateSnapPermissions, validateSnapPermissions_fn, _getExecutionTimeout, getExecutionTimeout_fn, _getRpcRequestHandler, getRpcRequestHandler_fn, _createInterface, createInterface_fn, _assertInterfaceExists, assertInterfaceExists_fn, _transformSnapRpcRequestResult, transformSnapRpcRequestResult_fn, _assertSnapRpcRequestResult, assertSnapRpcRequestResult_fn, _recordSnapRpcRequestStart, recordSnapRpcRequestStart_fn, _recordSnapRpcRequestFinish, recordSnapRpcRequestFinish_fn, _getRollbackSnapshot, getRollbackSnapshot_fn, _createRollbackSnapshot, createRollbackSnapshot_fn, _rollbackSnap, rollbackSnap_fn, _rollbackSnaps, rollbackSnaps_fn, _getRuntime, getRuntime_fn, _getRuntimeExpect, getRuntimeExpect_fn, _setupRuntime, setupRuntime_fn, _calculatePermissionsChange, calculatePermissionsChange_fn, _updatePermissions, updatePermissions_fn, _isValidUpdate, isValidUpdate_fn, _callLifecycleHook, callLifecycleHook_fn;
+var _closeAllConnections, _dynamicPermissions, _environmentEndowmentPermissions, _excludedPermissions, _featureFlags, _fetchFunction, _idleTimeCheckInterval, _maxIdleTime, _encryptor, _getMnemonic, _getFeatureFlags, _detectSnapLocation, _snapsRuntimeData, _rollbackSnapshots, _timeoutForLastRequestStatus, _statusMachine, _preinstalledSnaps, _initializeStateMachine, initializeStateMachine_fn, _registerMessageHandlers, registerMessageHandlers_fn, _handlePreinstalledSnaps, handlePreinstalledSnaps_fn, _pollForLastRequestStatus, pollForLastRequestStatus_fn, _blockSnap, blockSnap_fn, _unblockSnap, unblockSnap_fn, _assertIsInstallAllowed, assertIsInstallAllowed_fn, _assertCanInstallSnaps, assertCanInstallSnaps_fn, _assertCanUsePlatform, assertCanUsePlatform_fn, _stopSnapsLastRequestPastMax, stopSnapsLastRequestPastMax_fn, _transition, transition_fn, _terminateSnap, terminateSnap_fn, _getSnapEncryptionKey, getSnapEncryptionKey_fn, _decryptSnapState, decryptSnapState_fn, _encryptSnapState, encryptSnapState_fn, _handleInitialConnections, handleInitialConnections_fn, _addSnapToSubject, addSnapToSubject_fn, _removeSnapFromSubjects, removeSnapFromSubjects_fn, _revokeAllSnapPermissions, revokeAllSnapPermissions_fn, _createApproval, createApproval_fn, _updateApproval, updateApproval_fn, _resolveAllowlistVersion, resolveAllowlistVersion_fn, _add, add_fn, _startSnap, startSnap_fn, _getEndowments, getEndowments_fn, _set, set_fn, _validateSnapPermissions, validateSnapPermissions_fn, _getExecutionTimeout, getExecutionTimeout_fn, _getRpcRequestHandler, getRpcRequestHandler_fn, _createInterface, createInterface_fn, _assertInterfaceExists, assertInterfaceExists_fn, _transformSnapRpcRequestResult, transformSnapRpcRequestResult_fn, _assertSnapRpcRequestResult, assertSnapRpcRequestResult_fn, _recordSnapRpcRequestStart, recordSnapRpcRequestStart_fn, _recordSnapRpcRequestFinish, recordSnapRpcRequestFinish_fn, _getRollbackSnapshot, getRollbackSnapshot_fn, _createRollbackSnapshot, createRollbackSnapshot_fn, _rollbackSnap, rollbackSnap_fn, _rollbackSnaps, rollbackSnaps_fn, _getRuntime, getRuntime_fn, _getRuntimeExpect, getRuntimeExpect_fn, _setupRuntime, setupRuntime_fn, _calculatePermissionsChange, calculatePermissionsChange_fn, _isSubjectConnectedToSnap, isSubjectConnectedToSnap_fn, _calculateConnectionsChange, calculateConnectionsChange_fn, _updatePermissions, updatePermissions_fn, _isValidUpdate, isValidUpdate_fn, _callLifecycleHook, callLifecycleHook_fn;
 var SnapController = class extends BaseController {
   constructor({
     closeAllConnections,
@@ -206,6 +206,10 @@ var SnapController = class extends BaseController {
      */
     __privateAdd(this, _unblockSnap);
     __privateAdd(this, _assertIsInstallAllowed);
+    /**
+     * Asserts whether new Snaps are allowed to be installed.
+     */
+    __privateAdd(this, _assertCanInstallSnaps);
     /**
      * Asserts whether the Snaps platform is allowed to run.
      */
@@ -401,6 +405,8 @@ var SnapController = class extends BaseController {
     __privateAdd(this, _getRuntimeExpect);
     __privateAdd(this, _setupRuntime);
     __privateAdd(this, _calculatePermissionsChange);
+    __privateAdd(this, _isSubjectConnectedToSnap);
+    __privateAdd(this, _calculateConnectionsChange);
     /**
      * Updates the permissions for a snap following an install, update or rollback.
      *
@@ -805,7 +811,12 @@ var SnapController = class extends BaseController {
     if (!value) {
       return null;
     }
-    return encodeAuxiliaryFile(value, encoding);
+    const encoded = await encodeAuxiliaryFile(value, encoding);
+    assert(
+      encoded.length < MAX_FILE_SIZE,
+      `Failed to encode static file to "${encoding}": Static files must be less than 64 MB when encoded.`
+    );
+    return encoded;
   }
   /**
    * Completely clear the controller's state: delete all associated data,
@@ -1100,6 +1111,7 @@ var SnapController = class extends BaseController {
         false
       );
     }
+    __privateMethod(this, _assertCanInstallSnaps, assertCanInstallSnaps_fn).call(this);
     let pendingApproval = __privateMethod(this, _createApproval, createApproval_fn).call(this, {
       origin,
       snapId,
@@ -1178,6 +1190,7 @@ var SnapController = class extends BaseController {
    * @returns The snap metadata if updated, `null` otherwise.
    */
   async updateSnap(origin, snapId, location, newVersionRange = DEFAULT_REQUESTED_SNAP_VERSION, emitEvent = true) {
+    __privateMethod(this, _assertCanInstallSnaps, assertCanInstallSnaps_fn).call(this);
     __privateMethod(this, _assertCanUsePlatform, assertCanUsePlatform_fn).call(this);
     if (!isValidSemVerRange(newVersionRange)) {
       throw new Error(
@@ -1222,10 +1235,7 @@ var SnapController = class extends BaseController {
       );
       __privateMethod(this, _validateSnapPermissions, validateSnapPermissions_fn).call(this, processedPermissions);
       const { newPermissions, unusedPermissions, approvedPermissions } = __privateMethod(this, _calculatePermissionsChange, calculatePermissionsChange_fn).call(this, snapId, processedPermissions);
-      const { newConnections, unusedConnections, approvedConnections } = calculateConnectionsChange(
-        oldManifest.initialConnections ?? {},
-        manifest.initialConnections ?? {}
-      );
+      const { newConnections, unusedConnections, approvedConnections } = __privateMethod(this, _calculateConnectionsChange, calculateConnectionsChange_fn).call(this, snapId, oldManifest.initialConnections ?? {}, manifest.initialConnections ?? {});
       __privateMethod(this, _updateApproval, updateApproval_fn).call(this, pendingApproval.id, {
         permissions: newPermissions,
         newVersion: manifest.version,
@@ -1662,6 +1672,9 @@ handlePreinstalledSnaps_fn = function(preinstalledSnaps) {
     __privateMethod(this, _validateSnapPermissions, validateSnapPermissions_fn).call(this, processedPermissions);
     const { newPermissions, unusedPermissions } = __privateMethod(this, _calculatePermissionsChange, calculatePermissionsChange_fn).call(this, snapId, processedPermissions);
     __privateMethod(this, _updatePermissions, updatePermissions_fn).call(this, { snapId, newPermissions, unusedPermissions });
+    if (manifest.initialConnections) {
+      __privateMethod(this, _handleInitialConnections, handleInitialConnections_fn).call(this, snapId, existingSnap?.initialConnections ?? null, manifest.initialConnections);
+    }
     this.update((state) => {
       state.snaps[snapId].status = SnapStatus.Stopped;
     });
@@ -1730,6 +1743,13 @@ assertIsInstallAllowed_fn = async function(snapId, snapInfo) {
     );
   }
 };
+_assertCanInstallSnaps = new WeakSet();
+assertCanInstallSnaps_fn = function() {
+  assert(
+    __privateGet(this, _featureFlags).disableSnapInstallation !== true,
+    "Installing Snaps is currently disabled in this version of MetaMask."
+  );
+};
 _assertCanUsePlatform = new WeakSet();
 assertCanUsePlatform_fn = function() {
   const flags = __privateGet(this, _getFeatureFlags).call(this);
@@ -2434,6 +2454,35 @@ calculatePermissionsChange_fn = function(snapId, desiredPermissionsSet) {
   );
   return { newPermissions, unusedPermissions, approvedPermissions };
 };
+_isSubjectConnectedToSnap = new WeakSet();
+isSubjectConnectedToSnap_fn = function(snapId, origin) {
+  const subjectPermissions = this.messagingSystem.call(
+    "PermissionController:getPermissions",
+    origin
+  );
+  const existingCaveat = subjectPermissions?.[WALLET_SNAP_PERMISSION_KEY]?.caveats?.find((caveat) => caveat.type === SnapCaveatType.SnapIds);
+  return Boolean(existingCaveat?.value?.[snapId]);
+};
+_calculateConnectionsChange = new WeakSet();
+calculateConnectionsChange_fn = function(snapId, oldConnectionsSet, desiredConnectionsSet) {
+  const filteredOldConnections = Object.keys(oldConnectionsSet).filter((origin) => __privateMethod(this, _isSubjectConnectedToSnap, isSubjectConnectedToSnap_fn).call(this, snapId, origin)).reduce((accumulator, origin) => {
+    accumulator[origin] = oldConnectionsSet[origin];
+    return accumulator;
+  }, {});
+  const newConnections = setDiff(
+    desiredConnectionsSet,
+    filteredOldConnections
+  );
+  const unusedConnections = setDiff(
+    filteredOldConnections,
+    desiredConnectionsSet
+  );
+  const approvedConnections = setDiff(
+    filteredOldConnections,
+    unusedConnections
+  );
+  return { newConnections, unusedConnections, approvedConnections };
+};
 _updatePermissions = new WeakSet();
 updatePermissions_fn = function({
   snapId,
@@ -2496,4 +2545,4 @@ export {
   SNAP_APPROVAL_RESULT,
   SnapController
 };
-//# sourceMappingURL=chunk-RVWBSSZM.mjs.map
+//# sourceMappingURL=chunk-2MH7QYBP.mjs.map